def test_set_key():
lib = Crypto()
assert lib._key is None
key = lib.generate_key()
assert lib._key is None
lib.use_encryption_key(key)
assert lib._key is not None
with pytest.raises(ValueError):
lib.use_encryption_key("somethingelse")
def test_decrypt_wrong_key():
lib = Crypto()
key1 = lib.generate_key()
key2 = lib.generate_key()
assert key1 != key2
lib.use_encryption_key(key1)
text = "An example string\nWith some secret content"
token = lib.encrypt_string(text)
lib.use_encryption_key(key2)
with pytest.raises(ValueError):
lib.decrypt_string(token)
def test_encrypt_decrypt_string():
lib = Crypto()
key = lib.generate_key()
lib.use_encryption_key(key)
text = "An example string\nWith some secret content"
encrypted = lib.encrypt_string(text)
assert encrypted != text
assert base64.urlsafe_b64decode(encrypted) != text
decrypted = lib.decrypt_string(encrypted)
assert decrypted == text
def load_key(args):
"""Parse encryption key arguments into a Crypto library instance."""
lib = Crypto()
if args.text:
lib.use_encryption_key(args.text)
elif args.file:
with open(args.file) as infile:
lib.use_encryption_key(infile.read())
elif args.secret:
name, _, key = args.secret.partition(".")
lib.use_encryption_key_from_vault(name, key)
else:
raise RuntimeError("Unhandled encryption key type")
return lib
def test_encrypt_file_suffix():
lib = Crypto()
key = lib.generate_key()
lib.use_encryption_key(key)
text = "An example string\nWith some secret content"
with temp_path(text.encode("utf-8")) as original:
with temp_path(suffix=".bin") as encrypted:
lib.encrypt_file(original, encrypted)
result = lib.decrypt_file(encrypted)
try:
assert os.path.isfile(result)
assert result.endswith(".dec.bin")
finally:
with contextlib.suppress(FileNotFoundError):
os.unlink(result)
def test_encrypt_decrypt_file():
lib = Crypto()
key = lib.generate_key()
lib.use_encryption_key(key)
text = "An example string\nWith some secret content"
with temp_path() as encrypted:
with temp_path(text.encode("utf-8")) as original:
result = lib.encrypt_file(original, encrypted)
assert result == encrypted
assert os.stat(result).st_size > 0
with temp_path() as decrypted:
result = lib.decrypt_file(encrypted, decrypted)
assert result == decrypted
with open(result) as resultfile:
assert resultfile.read() == text
def test_encrypt_file_default_paths():
lib = Crypto()
key = lib.generate_key()
lib.use_encryption_key(key)
text = "An example string\nWith some secret content"
with temp_path(text.encode("utf-8")) as original:
encrypted, decrypted = "", ""
try:
encrypted = lib.encrypt_file(original)
assert encrypted == original + ".enc"
decrypted = lib.decrypt_file(encrypted)
assert decrypted == original
finally:
with contextlib.suppress(FileNotFoundError):
os.unlink(encrypted)
os.unlink(decrypted)