Node / ReticulumProjects / MeshChatX.git / files / vendor / lxmfy / tests / test_hypothesis_security.py

Displaying Raw • Download

Tff7b72from T7ee787unittestT7ee787.T7ee787mock Tff7b72import Te6edf3MagicMock

Tff7b72import T7ee787pytest

Tff7b72import T7ee787RNS

Tff7b72from T7ee787hypothesis Tff7b72import Te6edf3given

Tff7b72from T7ee787hypothesis Tff7b72import Te6edf3strategies Tff7b72as Te6edf3st

Tff7b72from T7ee787lxmfy Tff7b72import Te6edf3BotConfigTb4b4b4, Te6edf3LXMFBot

Tff7b72def Td2a8fftest_identity_pinning_collision_resilienceTb4b4b4(Te6edf3test_config_dirTb4b4b4)Tb4b4b4:

T8b949e"""Verify that identity pinning resists key collisions for the same hash."""

T8b949e# 1. Setup bot with pinning and isolated storage

Tff7b72import T7ee787uuid

Te6edf3storage_path Tff7b72= Tffa657strTb4b4b4(Te6edf3test_config_dir Tff7b72/ Ta5d6fffTa5d6ff"Ta5d6ffpin_test_Tffd700{Te6edf3uuidTff7b72.Td2a8ffuuid4Tb4b4b4(Tb4b4b4)Tff7b72.Td2a8ffhexTffd700}Ta5d6ff"Tb4b4b4)

Te6edf3config Tff7b72= Te6edf3BotConfigTb4b4b4(

Te6edf3identity_pinning_enabledTff7b72=Tff7b72TrueTb4b4b4,

Te6edf3test_modeTff7b72=Tff7b72TrueTb4b4b4,

Te6edf3storage_pathTff7b72=Te6edf3storage_pathTb4b4b4,

Te6edf3config_pathTff7b72=Te6edf3storage_pathTb4b4b4,

Tb4b4b4)

Te6edf3bot Tff7b72= Te6edf3LXMFBotTb4b4b4(Tff7b72*Tff7b72*Te6edf3configTff7b72.Td2a8ff__dict__Tb4b4b4)

T8b949e# 2. First owner seen for a hash

Te6edf3sender_hash Tff7b72= Ta5d6ff"Ta5d6ffabc123def456Ta5d6ff"

Te6edf3owner_identity Tff7b72= Te6edf3RNSTff7b72.Td2a8ffIdentityTb4b4b4(Tb4b4b4)

T8b949e# Simulate first message verification (pins the identity)

Te6edf3botTff7b72.Td2a8ffsignature_managerTff7b72.Td2a8ffverify_message_signatureTb4b4b4(

Te6edf3MagicMockTb4b4b4(Tb4b4b4)Tb4b4b4,

Ta5d6ffbTa5d6ff"Ta5d6ffvalid_sigTa5d6ff"Tb4b4b4,

Te6edf3sender_hashTb4b4b4,

Te6edf3sender_identityTff7b72=Te6edf3owner_identityTb4b4b4,

Tb4b4b4)

T8b949e# Verify it was pinned

Te6edf3pinned_key Tff7b72= Te6edf3botTff7b72.Td2a8ffstorageTff7b72.Td2a8ffgetTb4b4b4(Ta5d6fffTa5d6ff"Ta5d6ffpin:Tffd700{Te6edf3sender_hashTffd700}Ta5d6ff"Tb4b4b4)

Tff7b72assert Te6edf3pinned_key Tff7b72== Te6edf3owner_identityTff7b72.Td2a8ffget_public_keyTb4b4b4(Tb4b4b4)

T8b949e# 3. Attacker with DIFFERENT key but same hash (simulated)

Te6edf3attacker_identity Tff7b72= Te6edf3RNSTff7b72.Td2a8ffIdentityTb4b4b4(Tb4b4b4)

Tff7b72assert Te6edf3attacker_identityTff7b72.Td2a8ffget_public_keyTb4b4b4(Tb4b4b4) Tff7b72!= Te6edf3owner_identityTff7b72.Td2a8ffget_public_keyTb4b4b4(Tb4b4b4)

T8b949e# Try to verify with attacker key for the same hash

T8b949e# Our pinning layer should reject it

Te6edf3is_valid Tff7b72= Te6edf3botTff7b72.Td2a8ffsignature_managerTff7b72.Td2a8ffverify_message_signatureTb4b4b4(

Te6edf3MagicMockTb4b4b4(Tb4b4b4)Tb4b4b4,

Ta5d6ffbTa5d6ff"Ta5d6ffattacker_sigTa5d6ff"Tb4b4b4,

Te6edf3sender_hashTb4b4b4,

Te6edf3sender_identityTff7b72=Te6edf3attacker_identityTb4b4b4,

Tb4b4b4)

Tff7b72assert Te6edf3is_valid Tff7b72is Tff7b72FalseTb4b4b4, Tb4b4b4(

Ta5d6ff"Ta5d6ffPinning failed to reject a different key for the same hash!Ta5d6ff"

Tb4b4b4)

Tf0883e@givenTb4b4b4(Te6edf3stTff7b72.Td2a8ffbinaryTb4b4b4(Te6edf3min_sizeTff7b72=T79c0ff64Tb4b4b4, Te6edf3max_sizeTff7b72=T79c0ff64Tb4b4b4)Tb4b4b4)

Tff7b72def Td2a8fftest_signature_malleability_hypothesisTb4b4b4(Te6edf3mutated_sigTb4b4b4)Tb4b4b4:

T8b949e"""Test that mutated signatures are never accepted."""

Te6edf3config Tff7b72= Te6edf3BotConfigTb4b4b4(Te6edf3signature_verification_enabledTff7b72=Tff7b72TrueTb4b4b4, Te6edf3test_modeTff7b72=Tff7b72TrueTb4b4b4)

Te6edf3bot Tff7b72= Te6edf3LXMFBotTb4b4b4(Tff7b72*Tff7b72*Te6edf3configTff7b72.Td2a8ff__dict__Tb4b4b4)

Te6edf3sender_hash Tff7b72= Ta5d6ff"Ta5d6fftest_senderTa5d6ff"

Te6edf3identity Tff7b72= Te6edf3RNSTff7b72.Td2a8ffIdentityTb4b4b4(Tb4b4b4)

T8b949e# Any random mutation of a signature should fail validation

T8b949e# (Assuming the canonical message data is held constant)

Te6edf3is_valid Tff7b72= Te6edf3botTff7b72.Td2a8ffsignature_managerTff7b72.Td2a8ffverify_message_signatureTb4b4b4(

Te6edf3MagicMockTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3mutated_sigTb4b4b4,

Te6edf3sender_hashTb4b4b4,

Te6edf3sender_identityTff7b72=Te6edf3identityTb4b4b4,

Tb4b4b4)

T8b949e# Valid validation is statistically impossible with random bytes

Tff7b72assert Te6edf3is_valid Tff7b72is Tff7b72False

Tf0883e@pytestTff7b72.Td2a8fffixtureTb4b4b4(Te6edf3scopeTff7b72=Ta5d6ff"Ta5d6ffmoduleTa5d6ff"Tb4b4b4)

Tff7b72def Td2a8fftrained_nlpTb4b4b4(Tb4b4b4)Tb4b4b4:

T8b949e"""Shared trained NLP instance for fuzzing."""

Tff7b72from T7ee787lxmfyT7ee787.T7ee787nlp Tff7b72import Te6edf3IntentClassifier

Te6edf3nlp Tff7b72= Te6edf3IntentClassifierTb4b4b4(Te6edf3thresholdTff7b72=T79c0ff0.5Tb4b4b4)

Te6edf3nlpTff7b72.Td2a8ffadd_intentTb4b4b4(Ta5d6ff"Ta5d6fftestTa5d6ff"Tb4b4b4, Tb4b4b4[Ta5d6ff"Ta5d6ffhello worldTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ffhow are youTa5d6ff"Tb4b4b4]Tb4b4b4, Te6edf3trainTff7b72=Tff7b72TrueTb4b4b4)

Tff7b72return Te6edf3nlp

Tf0883e@givenTb4b4b4(Te6edf3stTff7b72.Td2a8fftextTb4b4b4(Te6edf3min_sizeTff7b72=T79c0ff1Tb4b4b4, Te6edf3max_sizeTff7b72=T79c0ff500Tb4b4b4)Tb4b4b4)

Tff7b72def Td2a8fftest_intent_classification_fuzzingTb4b4b4(Te6edf3trained_nlpTb4b4b4, Te6edf3input_textTb4b4b4)Tb4b4b4:

T8b949e"""Fuzz the intent classifier with arbitrary strings."""

T8b949e# Should never crash regardless of input

Tff7b72tryTb4b4b4:

Te6edf3intentTb4b4b4, Te6edf3score Tff7b72= Te6edf3trained_nlpTff7b72.Td2a8ffpredictTb4b4b4(Te6edf3input_textTb4b4b4)

Tff7b72assert T79c0ff0.0 Tff7b72<Tff7b72= Te6edf3score Tff7b72<Tff7b72= T79c0ff1.0

Tff7b72except Tf85149Exception Tff7b72as Te6edf3eTb4b4b4:

Te6edf3pytestTff7b72.Td2a8fffailTb4b4b4(

Ta5d6fffTa5d6ff"Ta5d6ffIntent classifier crashed on input: Tffd700{Te6edf3input_textTffd700!r}Ta5d6ff with error: Tffd700{Te6edf3eTffd700}Ta5d6ff"Tb4b4b4,

Tb4b4b4)