mirror of
https://github.com/luxfi/warp.git
synced 2026-10-30 15:13:04 +00:00
zeekay
9b026b594c
SignedCore was a braided misnomer: the core is the value over which the digest D is computed and signed across, not a thing that is itself signed. WarpEnvelope braided the package name into the type. Namespace-qualified, one concept each: warp.SignedCore -> warp.Core (type now agrees with the wire domain LUX-WARP-ZAP-CORE-v1) warp.WarpEnvelope -> warp.Envelope (Envelope = Core + auth lanes; value qualified by namespace, not place-in-name) Identifiers only. The digest D, ZAP c14n bytes, the BEAM/PULSE/MLDSA DSTs and the frozen CORE-v1 domain string are unchanged — fuzz, fixture and ID-stability tests stay green, proving D is byte-identical.
78 lines
2.4 KiB
Go
78 lines
2.4 KiB
Go
// Copyright (C) 2019-2026, Lux Industries Inc. All rights reserved.
|
|
// See the file LICENSE for licensing terms.
|
|
|
|
package warp
|
|
|
|
import (
|
|
"errors"
|
|
"testing"
|
|
|
|
"github.com/luxfi/pq"
|
|
)
|
|
|
|
// TestEnvelope_HasPQEvidence pins the contract: HasPQEvidence
|
|
// returns true iff the envelope carries an MLDSACertSet. That's
|
|
// the single predicate pq.ValidateMode dispatches on.
|
|
func TestEnvelope_HasPQEvidence(t *testing.T) {
|
|
without := &Envelope{}
|
|
with := &Envelope{MLDSACertSet: []byte{0xde, 0xad}}
|
|
if without.HasPQEvidence() {
|
|
t.Error("Envelope without MLDSACertSet reported HasPQEvidence=true")
|
|
}
|
|
if !with.HasPQEvidence() {
|
|
t.Error("Envelope with MLDSACertSet reported HasPQEvidence=false")
|
|
}
|
|
}
|
|
|
|
// TestValidateMode_StrictPQ_RefusesMissingCert exercises the
|
|
// integration: strict-PQ + envelope-without-MLDSACertSet routed
|
|
// through pq.ValidateMode returns ErrClassicalAuthForbidden.
|
|
// This is the runtime invariant Warp depends on — the gate
|
|
// lives in lux/pq, the predicate lives on Envelope.
|
|
func TestValidateMode_StrictPQ_RefusesMissingCert(t *testing.T) {
|
|
env := &Envelope{}
|
|
err := pq.ValidateMode(pq.ModeStrictPQ, env, nil)
|
|
if !errors.Is(err, pq.ErrClassicalAuthForbidden) {
|
|
t.Errorf("StrictPQ accepted classical envelope: %v", err)
|
|
}
|
|
}
|
|
|
|
// TestValidateMode_StrictPQ_AcceptsPQEnvelope pins the happy path.
|
|
func TestValidateMode_StrictPQ_AcceptsPQEnvelope(t *testing.T) {
|
|
env := &Envelope{MLDSACertSet: []byte{0xde, 0xad}}
|
|
if err := pq.ValidateMode(pq.ModeStrictPQ, env, nil); err != nil {
|
|
t.Errorf("StrictPQ refused PQ envelope: %v", err)
|
|
}
|
|
}
|
|
|
|
// TestValidateMode_Hybrid_AcceptsBoth pins the migration middle:
|
|
// hybrid accepts envelopes with or without MLDSACertSet.
|
|
func TestValidateMode_Hybrid_AcceptsBoth(t *testing.T) {
|
|
for _, env := range []*Envelope{{}, {MLDSACertSet: []byte{0xde, 0xad}}} {
|
|
if err := pq.ValidateMode(pq.ModeHybrid, env, nil); err != nil {
|
|
t.Errorf("Hybrid refused envelope: %v", err)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestLanesForMode(t *testing.T) {
|
|
for _, tc := range []struct {
|
|
mode pq.Mode
|
|
hasCert bool
|
|
want VerificationLane
|
|
}{
|
|
{pq.ModeClassical, false, LaneClassical},
|
|
{pq.ModeClassical, true, LaneClassical},
|
|
{pq.ModeHybrid, true, LanePQ},
|
|
{pq.ModeHybrid, false, LaneClassical},
|
|
{pq.ModeStrictPQ, true, LanePQ},
|
|
{pq.ModeStrictPQ, false, LanePQ},
|
|
} {
|
|
got := LanesForMode(tc.mode, tc.hasCert)
|
|
if got != tc.want {
|
|
t.Errorf("LanesForMode(%s, hasCert=%t) = %d, want %d",
|
|
tc.mode, tc.hasCert, got, tc.want)
|
|
}
|
|
}
|
|
}
|