index.test.js

import t from 'tap'
import crypto from 'crypto'
import { createEnvelopeEncryptor } from './index.js'

const plaintextKey = crypto
  .createHash('sha256')
  .update('password')
  .digest()

const keyService = {
  getDataKey: () =>
    Promise.resolve({
      encryptedKey: 'foo',
      plaintextKey
    }),
  decryptDataKey: key => Promise.resolve(plaintextKey)
}

const tests = [
  'smallSecret',
  'mediumSecretLength',
  'superSuperSuperSuperSuperSuperSuperSuperSuperSuperSuperLongStringWithLotsOfChararctersThatWillBeEncryptedAndDecryptedProperly'
]

tests.forEach((plaintextInput) => {
  t.test('envelope encryptor', async t => {
    const encryptor = createEnvelopeEncryptor(keyService)

    const result = await encryptor.encrypt(plaintextInput)
    const { key } = result
    t.equal(key, 'foo', 'encryptedKey is from keyService.getDataKey')
    const secretMessage = await encryptor.decrypt(result)
    t.equal(
      secretMessage,
      plaintextInput,
      'given ciphertext, key and salt decrypt returns plaintext message'
    )
  })

  t.test('envelope encryptor - supports changing ciphertext encoding format ', async t => {
    const encryptor = createEnvelopeEncryptor(keyService, { encoding: 'base64' })

    const result = await encryptor.encrypt(plaintextInput)
    const { key } = result
    t.equal(key, 'foo', 'encryptedKey is from keyService.getDataKey')
    const secretMessage = await encryptor.decrypt(result)
    t.equal(
      secretMessage,
      plaintextInput,
      'given ciphertext, key and salt decrypt returns plaintext message'
    )
  })
})