def test_stream_decryptor_readable():
"""Verify that open StreamEncryptor instances report as readable."""
key_provider = fake_kms_key_provider()
plaintext = io.BytesIO(VALUES["plaintext_128"])
ciphertext, _header = aws_encryption_sdk.encrypt(source=plaintext, key_provider=key_provider)
with aws_encryption_sdk.StreamDecryptor(source=ciphertext, key_provider=key_provider) as handler:
assert handler.readable()
handler.read()
assert not handler.readable()
def test_stream_decryptor_no_seek_input():
"""Test that StreamDecryptor can handle an input stream that is not seekable."""
key_provider = fake_kms_key_provider()
ciphertext, _header = aws_encryption_sdk.encrypt(
source=VALUES["plaintext_128"], key_provider=key_provider, encryption_context=VALUES["encryption_context"]
)
ciphertext_no_seek = NoSeekBytesIO(ciphertext)
decrypted = io.BytesIO()
with aws_encryption_sdk.StreamDecryptor(source=ciphertext_no_seek, key_provider=key_provider) as decryptor:
for chunk in decryptor:
decrypted.write(chunk)
assert decrypted.getvalue() == VALUES["plaintext_128"]
def test_stream_decryptor_readable():
"""Verify that open StreamEncryptor instances report as readable."""
key_provider = fake_kms_key_provider()
plaintext = io.BytesIO(VALUES["plaintext_128"])
ciphertext, _header = aws_encryption_sdk.EncryptionSDKClient().encrypt(
source=plaintext, key_provider=key_provider)
with aws_encryption_sdk.StreamDecryptor(
source=ciphertext,
key_provider=key_provider,
commitment_policy=CommitmentPolicy.REQUIRE_ENCRYPT_REQUIRE_DECRYPT
) as handler:
assert handler.readable()
handler.read()
assert not handler.readable()
def test_stream_decryptor_no_seek_input():
"""Test that StreamDecryptor can handle an input stream that is not seekable."""
key_provider = fake_kms_key_provider()
ciphertext, _header = aws_encryption_sdk.EncryptionSDKClient().encrypt(
source=VALUES["plaintext_128"],
key_provider=key_provider,
encryption_context=VALUES["encryption_context"],
)
ciphertext_no_seek = NoSeekBytesIO(ciphertext)
decrypted = io.BytesIO()
with aws_encryption_sdk.StreamDecryptor(
source=ciphertext_no_seek,
key_provider=key_provider,
commitment_policy=CommitmentPolicy.FORBID_ENCRYPT_ALLOW_DECRYPT,
) as decryptor:
for chunk in decryptor:
decrypted.write(chunk)
assert decrypted.getvalue() == VALUES["plaintext_128"]