()
| 518 | |
| 519 | #[test] |
| 520 | fn tampered_header_fails() { |
| 521 | let key = test_key(); |
| 522 | let epoch = *key.epoch(); |
| 523 | let header1 = test_header(1); |
| 524 | |
| 525 | let ciphertext = key.encrypt(1, &header1, b"secret").unwrap(); |
| 526 | |
| 527 | // Tamper the AAD (header). |
| 528 | let mut header2 = header1; |
| 529 | header2[0] = 0xFF; |
| 530 | assert!(key.decrypt(&epoch, 1, &header2, &ciphertext).is_err()); |
| 531 | } |
| 532 | |
| 533 | #[test] |
| 534 | fn empty_payload() { |
nothing calls this directly
no test coverage detected