text: // Copyright 2017 Google Inc.
  //
  // Licensed under the Apache License, Version 2.0 (the "License");
  // you may not use this file except in compliance with the License.
  // You may obtain a copy of the License at
  //
  //      http://www.apache.org/licenses/LICENSE-2.0
  //
  // Unless required by applicable law or agreed to in writing, software
  // distributed under the License is distributed on an "AS IS" BASIS,
  // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  // See the License for the specific language governing permissions and
  // limitations under the License.
  //
  ////////////////////////////////////////////////////////////////////////////////
  
  #include "tink/hybrid/hybrid_decrypt_factory.h"
  
  #include <string>
  #include <utility>
  
  #include "gtest/gtest.h"
  #include "absl/memory/memory.h"
  #include "tink/config.h"
  #include "tink/crypto_format.h"
  #include "tink/hybrid/ecies_aead_hkdf_public_key_manager.h"
  #include "tink/hybrid/hybrid_config.h"
  #include "tink/hybrid_decrypt.h"
  #include "tink/hybrid_encrypt.h"
  #include "tink/keyset_handle.h"
  #include "tink/util/status.h"
  #include "tink/util/test_keyset_handle.h"
  #include "tink/util/test_util.h"
  #include "proto/ecies_aead_hkdf.pb.h"
  #include "proto/tink.pb.h"
  
  using crypto::tink::TestKeysetHandle;
  using crypto::tink::test::AddRawKey;
  using crypto::tink::test::AddTinkKey;
  using google::crypto::tink::EciesAeadHkdfPrivateKey;
  using google::crypto::tink::EcPointFormat;
  using google::crypto::tink::EllipticCurveType;
  using google::crypto::tink::HashType;
  using google::crypto::tink::KeyData;
  using google::crypto::tink::Keyset;
  using google::crypto::tink::KeyStatusType;
  
  namespace crypto {
  namespace tink {
  namespace {
  
  class HybridDecryptFactoryTest : public ::testing::Test {
  };
  
  EciesAeadHkdfPrivateKey GetNewEciesPrivateKey() {
    return test::GetEciesAesGcmHkdfTestKey(
        EllipticCurveType::NIST_P256, EcPointFormat::UNCOMPRESSED,
        HashType::SHA256, 32);
  }
  
  TEST_F(HybridDecryptFactoryTest, testBasic) {
    Keyset keyset;
    auto hybrid_decrypt_result = HybridDecryptFactory::GetPrimitive(
        *TestKeysetHandle::GetKeysetHandle(keyset));
    EXPECT_FALSE(hybrid_decrypt_result.ok());
    EXPECT_EQ(absl::StatusCode::kInvalidArgument,
        hybrid_decrypt_result.status().code());
    EXPECT_PRED_FORMAT2(testing::IsSubstring, "at least one key",
                        std::string(hybrid_decrypt_result.status().message()));
  }
  
  TEST_F(HybridDecryptFactoryTest, testPrimitive) {
    // Prepare a Keyset.
    Keyset keyset;
    std::string key_type =
        "type.googleapis.com/google.crypto.tink.EciesAeadHkdfPrivateKey";
  
    uint32_t key_id_1 = 1234543;
    auto ecies_key_1 = GetNewEciesPrivateKey();
    AddTinkKey(key_type, key_id_1, ecies_key_1, KeyStatusType::ENABLED,
               KeyData::ASYMMETRIC_PRIVATE, &keyset);
  
    uint32_t key_id_2 = 726329;
    auto ecies_key_2 = GetNewEciesPrivateKey();
    AddRawKey(key_type, key_id_2, ecies_key_2, KeyStatusType::ENABLED,
              KeyData::ASYMMETRIC_PRIVATE, &keyset);
  
    uint32_t key_id_3 = 7213743;
    auto ecies_key_3 = GetNewEciesPrivateKey();
    AddTinkKey(key_type, key_id_3, ecies_key_3, KeyStatusType::ENABLED,
               KeyData::ASYMMETRIC_PRIVATE, &keyset);
  
    keyset.set_primary_key_id(key_id_3);
  
    // Initialize the registry.
    ASSERT_TRUE(HybridConfig::Register().ok());
  
    // Prepare HybridEncrypt-instances.
    auto ecies_key_manager = absl::make_unique<EciesAeadHkdfPublicKeyManager>();
    std::unique_ptr<HybridEncrypt> ecies_1 = std::move(
        ecies_key_manager->GetPrimitive<HybridEncrypt>(ecies_key_1.public_key())
            .value());
    std::unique_ptr<HybridEncrypt> ecies_2 = std::move(
        ecies_key_manager->GetPrimitive<HybridEncrypt>(ecies_key_2.public_key())
            .value());
  
    // Create a KeysetHandle and use it with the factory.
    auto hybrid_decrypt_result = HybridDecryptFactory::GetPrimitive(
        *TestKeysetHandle::GetKeysetHandle(keyset));
    EXPECT_TRUE(hybrid_decrypt_result.ok()) << hybrid_decrypt_result.status();
    auto hybrid_decrypt = std::move(hybrid_decrypt_result.value());
  
    // Test the resulting HybridDecrypt-instance.
    std::string plaintext = "some plaintext";
    std::string context_info = "some context info";
    auto ciphertext_1 =
        CryptoFormat::GetOutputPrefix(KeyInfoFromKey(keyset.key(0))).value() +
        ecies_1->Encrypt(plaintext, context_info).value();
    auto ciphertext_2 =
        CryptoFormat::GetOutputPrefix(KeyInfoFromKey(keyset.key(1))).value() +
        ecies_2->Encrypt(plaintext, context_info).value();
  
    {  // Regular decryption with key_1.
      auto decrypt_result = hybrid_decrypt->Decrypt(ciphertext_1, context_info);
      EXPECT_TRUE(decrypt_result.ok()) << decrypt_result.status();
      EXPECT_EQ(plaintext, decrypt_result.value());
    }
  
    {  // Regular decryption with key_2.
      auto decrypt_result = hybrid_decrypt->Decrypt(ciphertext_2, context_info);
      EXPECT_TRUE(decrypt_result.ok()) << decrypt_result.status();
      EXPECT_EQ(plaintext, decrypt_result.value());
    }
  
    {  // Wrong context_info.
      auto decrypt_result = hybrid_decrypt->Decrypt(ciphertext_1, "bad context");
      EXPECT_FALSE(decrypt_result.ok());
      EXPECT_EQ(absl::StatusCode::kInvalidArgument,
                decrypt_result.status().code());
      EXPECT_PRED_FORMAT2(testing::IsSubstring, "decryption failed",
                          std::string(decrypt_result.status().message()));
    }
  }
  
  }  // namespace
  }  // namespace tink
  }  // namespace crypto
  