Method test_wrong_key_p521

tests/hazmat/primitives/test_hpke.py:343–382

(self)

            suite.decrypt(ciphertext, secp521r1_sk)

    def test_wrong_key_p521(self):
        suite = Suite(KEM.P521, KDF.HKDF_SHA256, AEAD.AES_128_GCM)
        sk_r = ec.generate_private_key(ec.SECP521R1())
        pk_r = sk_r.public_key()
        ciphertext = suite.encrypt(b"test", pk_r)

        # Wrong key of correct type
        sk_wrong = ec.generate_private_key(ec.SECP521R1())
        with pytest.raises(InvalidTag):
            suite.decrypt(ciphertext, sk_wrong)

        # Wrong key type for encrypt
        x25519_pk = x25519.X25519PrivateKey.generate().public_key()
        with pytest.raises(TypeError):
            suite.encrypt(b"test", x25519_pk)

        # Wrong key type for decrypt
        x25519_sk = x25519.X25519PrivateKey.generate()
        with pytest.raises(TypeError):
            suite.decrypt(ciphertext, x25519_sk)

        # Wrong EC curve for encrypt
        secp256r1_pk = ec.generate_private_key(ec.SECP256R1()).public_key()
        with pytest.raises(TypeError):
            suite.encrypt(b"test", secp256r1_pk)

        # Wrong EC curve for decrypt
        secp256r1_sk = ec.generate_private_key(ec.SECP256R1())
        with pytest.raises(TypeError):
            suite.decrypt(ciphertext, secp256r1_sk)

        # Wrong EC curve (P-384) for encrypt
        secp384r1_pk = ec.generate_private_key(ec.SECP384R1()).public_key()
        with pytest.raises(TypeError):
            suite.encrypt(b"test", secp384r1_pk)

        # Wrong EC curve (P-384) for decrypt
        secp384r1_sk = ec.generate_private_key(ec.SECP384R1())
        with pytest.raises(TypeError):
            suite.decrypt(ciphertext, secp384r1_sk)

    def test_wrong_aad_fails(self):
        suite = Suite(KEM.X25519, KDF.HKDF_SHA256, AEAD.AES_128_GCM)