package attestation import ( "testing" "github.com/edgelesssys/constellation/internal/crypto/testvector" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) func TestDeriveClusterID(t *testing.T) { require := require.New(t) assert := assert.New(t) testvector := testvector.HKDFClusterID clusterID, err := DeriveClusterID(testvector.Secret, testvector.Salt) require.NoError(err) assert.Equal(testvector.Output, clusterID) clusterIDdiff, err := DeriveClusterID(testvector.Secret, []byte("different-salt")) require.NoError(err) assert.NotEqual(clusterID, clusterIDdiff) clusterIDdiff, err = DeriveClusterID([]byte("different-secret"), testvector.Salt) require.NoError(err) assert.NotEqual(clusterID, clusterIDdiff) } func TestDeriveMeasurementSecret(t *testing.T) { require := require.New(t) assert := assert.New(t) testvector := testvector.HKDFMeasurementSecret measurementSecret, err := DeriveMeasurementSecret(testvector.Secret, testvector.Salt) require.NoError(err) assert.Equal(testvector.Output, measurementSecret) measurementSecretdiff, err := DeriveMeasurementSecret(testvector.Secret, []byte("different-salt")) require.NoError(err) assert.NotEqual(measurementSecret, measurementSecretdiff) measurementSecretdiff, err = DeriveMeasurementSecret([]byte("different-secret"), testvector.Salt) require.NoError(err) assert.NotEqual(measurementSecret, measurementSecretdiff) }