Function array_segment_encrypted_at_rest

nodedb-array/src/segment/writer.rs:225–236

()

    #[test]
    fn array_segment_encrypted_at_rest() {
        let s = schema();
        let mut w = SegmentWriter::new(0xCAFE);
        w.append_sparse(TileId::snapshot(1), &sparse_tile(&s))
            .unwrap();
        let kek = test_kek();
        let bytes = w.finish(Some(&kek)).unwrap();
        // Output must start with SEGA, not NDAS.
        assert_eq!(&bytes[..4], b"SEGA");
        // Must not start with plaintext NDAS magic.
        assert_ne!(&bytes[..4], b"NDAS");
    }

    #[test]
    fn array_segment_refuses_plaintext_with_kek() {