()
| 110 | |
| 111 | #[test] |
| 112 | fn tampered_bundle_rejected() { |
| 113 | let secret = [0x3Cu8; 32]; |
| 114 | let token_hash = [0x4Du8; 32]; |
| 115 | let mut sealed = seal_bundle(b"real payload".to_vec(), &secret, &token_hash).unwrap(); |
| 116 | // Flip first byte of bundle |
| 117 | sealed.bundle[0] ^= 0xFF; |
| 118 | assert_eq!( |
| 119 | open_bundle(&sealed, &secret, &token_hash).unwrap_err(), |
| 120 | BundleError::MacMismatch |
| 121 | ); |
| 122 | } |
| 123 | |
| 124 | #[test] |
| 125 | fn wrong_cluster_secret_rejected() { |
nothing calls this directly
no test coverage detected