def test_verify_legacy_mac(self):
primitive, key = self.new_primitive_key_pair(1234, tink_pb2.LEGACY)
pset = core.new_primitive_set(mac.Mac)
pset.set_primary(pset.add_primitive(primitive, key))
wrapped_mac = mac_wrapper.MacWrapper().wrap(pset)
tag = wrapped_mac.compute_mac(b'data')
# No exception raised, no return value.
self.assertIsNone(wrapped_mac.verify_mac(tag, b'data'))
def test_verify_old_raw_mac_with_new_key(self):
primitive, key = self.new_primitive_key_pair(1234, tink_pb2.RAW)
tag = primitive.compute_mac(b'data')
pset = core.new_primitive_set(mac.Mac)
pset.add_primitive(primitive, key)
new_primitive, new_key = self.new_primitive_key_pair(5678, tink_pb2.TINK)
pset.set_primary(pset.add_primitive(new_primitive, new_key))
wrapped_mac = mac_wrapper.MacWrapper().wrap(pset)
self.assertIsNone(wrapped_mac.verify_mac(tag, b'data'))
def test_verify_unknown_mac_fails(self):
unknown_tag = helper.FakeMac('UnknownfakeMac').compute_mac(b'data')
pset = core.new_primitive_set(mac.Mac)
primitive, raw_key = self.new_primitive_key_pair(1234, tink_pb2.RAW)
new_primitive, new_key = self.new_primitive_key_pair(5678, tink_pb2.TINK)
pset.add_primitive(primitive, raw_key)
new_entry = pset.add_primitive(new_primitive, new_key)
pset.set_primary(new_entry)
wrapped_mac = mac_wrapper.MacWrapper().wrap(pset)
with self.assertRaisesRegex(core.TinkError, 'invalid MAC'):
wrapped_mac.verify_mac(unknown_tag, b'data')
def test_verify_macs_from_two_raw_keys(self):
primitive1, raw_key1 = self.new_primitive_key_pair(1234, tink_pb2.RAW)
primitive2, raw_key2 = self.new_primitive_key_pair(5678, tink_pb2.RAW)
tag1 = primitive1.compute_mac(b'data1')
tag2 = primitive2.compute_mac(b'data2')
pset = core.new_primitive_set(mac.Mac)
pset.add_primitive(primitive1, raw_key1)
pset.set_primary(pset.add_primitive(primitive2, raw_key2))
wrapped_mac = mac_wrapper.MacWrapper().wrap(pset)
self.assertIsNone(wrapped_mac.verify_mac(tag1, b'data1'))
self.assertIsNone(wrapped_mac.verify_mac(tag2, b'data2'))
self.assertIsNone(
wrapped_mac.verify_mac(wrapped_mac.compute_mac(b'data'), b'data'))