age/tag/tag_test.go

// Copyright 2025 The age Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

package tag_test

import (
	"bytes"
	"io"
	"testing"

	"github.com/hanzoai/age"
	"github.com/hanzoai/age/tag"
	"github.com/hanzoai/age/tag/internal/tagtest"
)

func TestClassicRoundTrip(t *testing.T) {
	i := tagtest.NewClassicIdentity("test")
	r := i.Recipient()

	if r.Hybrid() {
		t.Error("classic recipient incorrectly reports as hybrid")
	}

	r1, err := tag.ParseRecipient(r.String())
	if err != nil {
		t.Fatal(err)
	}
	if r1.String() != r.String() {
		t.Errorf("recipient did not round-trip through parsing: got %q, want %q", r1.String(), r.String())
	}
	if r1.Hybrid() {
		t.Error("parsed classic recipient incorrectly reports as hybrid")
	}

	plaintext := []byte("hello world")

	encrypted := &bytes.Buffer{}
	w, err := age.Encrypt(encrypted, r)
	if err != nil {
		t.Fatal(err)
	}
	if _, err := w.Write(plaintext); err != nil {
		t.Fatal(err)
	}
	if err := w.Close(); err != nil {
		t.Fatal(err)
	}

	decrypted, err := age.Decrypt(encrypted, i)
	if err != nil {
		t.Fatal(err)
	}
	out, err := io.ReadAll(decrypted)
	if err != nil {
		t.Fatal(err)
	}

	if !bytes.Equal(plaintext, out) {
		t.Errorf("invalid output: %q, expected %q", out, plaintext)
	}
}

func TestHybridRoundTrip(t *testing.T) {
	i := tagtest.NewHybridIdentity("test")
	r := i.Recipient()

	if !r.Hybrid() {
		t.Error("hybrid recipient incorrectly reports as classic")
	}

	r1, err := tag.ParseRecipient(r.String())
	if err != nil {
		t.Fatal(err)
	}
	if r1.String() != r.String() {
		t.Errorf("recipient did not round-trip through parsing: got %q, want %q", r1.String(), r.String())
	}
	if !r1.Hybrid() {
		t.Error("parsed hybrid recipient incorrectly reports as classic")
	}

	plaintext := []byte("hello world")

	encrypted := &bytes.Buffer{}
	w, err := age.Encrypt(encrypted, r)
	if err != nil {
		t.Fatal(err)
	}
	if _, err := w.Write(plaintext); err != nil {
		t.Fatal(err)
	}
	if err := w.Close(); err != nil {
		t.Fatal(err)
	}

	decrypted, err := age.Decrypt(encrypted, i)
	if err != nil {
		t.Fatal(err)
	}
	out, err := io.ReadAll(decrypted)
	if err != nil {
		t.Fatal(err)
	}

	if !bytes.Equal(plaintext, out) {
		t.Errorf("invalid output: %q, expected %q", out, plaintext)
	}
}

func TestTagHybridMixingRestrictions(t *testing.T) {
	x25519, err := age.GenerateX25519Identity()
	if err != nil {
		t.Fatal(err)
	}
	tagHybrid := tagtest.NewHybridIdentity("test").Recipient()

	// Hybrid tag recipients can be used together with hybrid recipients.
	hybrid, err := age.GenerateHybridIdentity()
	if err != nil {
		t.Fatal(err)
	}
	if _, err := age.Encrypt(io.Discard, tagHybrid, hybrid.Recipient()); err != nil {
		t.Errorf("expected hybrid tag + hybrid to work, got %v", err)
	}

	// Hybrid tag and X25519 recipients cannot be mixed.
	if _, err := age.Encrypt(io.Discard, tagHybrid, x25519.Recipient()); err == nil {
		t.Error("expected hybrid tag mixed with X25519 to fail")
	}
	if _, err := age.Encrypt(io.Discard, x25519.Recipient(), tagHybrid); err == nil {
		t.Error("expected X25519 mixed with hybrid tag to fail")
	}

	// Classic tag and X25519 recipients can be mixed (both are non-PQ).
	tagClassic := tagtest.NewClassicIdentity("test").Recipient()
	if _, err := age.Encrypt(io.Discard, tagClassic, x25519.Recipient()); err != nil {
		t.Errorf("expected classic tag + X25519 to work, got %v", err)
	}
}