Extract Nostr into a dedicated module

localPackages/Nostr/Tests/Bech32Tests.swift

@@ -0,0 +1,41 @@
+import Testing
+import Foundation
+@testable import Nostr
+
+@Suite("Bech32")
+struct Bech32Tests {
+    @Test("Round-trip encode/decode")
+    func roundTrip() throws {
+        let original = Data([0xde, 0xad, 0xbe, 0xef, 0xca, 0xfe])
+        let encoded = try Bech32.encode(hrp: "test", data: original)
+        let decoded = try Bech32.decode(encoded)
+        #expect(decoded.hrp == "test")
+        #expect(decoded.data == original)
+    }
+
+    @Test("HRP is preserved")
+    func hrpPreserved() throws {
+        let data = Data(repeating: 0x42, count: 32)
+        let encoded = try Bech32.encode(hrp: "npub", data: data)
+        #expect(encoded.hasPrefix("npub1"))
+        let decoded = try Bech32.decode(encoded)
+        #expect(decoded.hrp == "npub")
+    }
+
+    @Test("Decoding invalid checksum throws")
+    func invalidChecksum() throws {
+        var encoded = try Bech32.encode(hrp: "test", data: Data([1, 2, 3]))
+        // Corrupt the last character
+        encoded = String(encoded.dropLast()) + (encoded.last == "q" ? "p" : "q")
+        #expect(throws: Bech32.Bech32Error.self) {
+            try Bech32.decode(encoded)
+        }
+    }
+
+    @Test("Decoding string without separator throws")
+    func missingSeparator() {
+        #expect(throws: Bech32.Bech32Error.self) {
+            try Bech32.decode("noseparatorhere")
+        }
+    }
+}

localPackages/Nostr/Tests/XChaCha20Poly1305CompatTests.swift

@@ -0,0 +1,222 @@
+//
+// XChaCha20Poly1305CompatTests.swift
+// bitchatTests
+//
+// Tests for XChaCha20-Poly1305 encryption with proper error handling.
+// This is free and unencumbered software released into the public domain.
+//
+
+import Testing
+import struct Foundation.Data
+@testable import Nostr
+
+struct XChaCha20Poly1305CompatTests {
+
+    @Test func sealAndOpenRoundtrip() throws {
+        let plaintext = "Hello, XChaCha20-Poly1305!".data(using: .utf8)!
+        let key = Data(repeating: 0x42, count: 32)
+        let nonce = Data(repeating: 0x24, count: 24)
+
+        let sealed = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: nonce)
+        let decrypted = try XChaCha20Poly1305Compat.open(
+            ciphertext: sealed.ciphertext,
+            tag: sealed.tag,
+            key: key,
+            nonce24: nonce
+        )
+
+        #expect(decrypted == plaintext)
+    }
+
+    @Test func sealAndOpenWithAAD() throws {
+        let plaintext = "Secret message".data(using: .utf8)!
+        let key = Data(repeating: 0xAB, count: 32)
+        let nonce = Data(repeating: 0xCD, count: 24)
+        let aad = "additional authenticated data".data(using: .utf8)!
+
+        let sealed = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: nonce, aad: aad)
+        let decrypted = try XChaCha20Poly1305Compat.open(
+            ciphertext: sealed.ciphertext,
+            tag: sealed.tag,
+            key: key,
+            nonce24: nonce,
+            aad: aad
+        )
+
+        #expect(decrypted == plaintext)
+    }
+
+    @Test func sealProducesDifferentCiphertextWithDifferentNonces() throws {
+        let plaintext = "Same plaintext".data(using: .utf8)!
+        let key = Data(repeating: 0x42, count: 32)
+        let nonce1 = Data(repeating: 0x01, count: 24)
+        let nonce2 = Data(repeating: 0x02, count: 24)
+
+        let sealed1 = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: nonce1)
+        let sealed2 = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: nonce2)
+
+        #expect(sealed1.ciphertext != sealed2.ciphertext)
+    }
+
+    @Test func sealThrowsOnShortKey() {
+        let plaintext = "Test".data(using: .utf8)!
+        let shortKey = Data(repeating: 0x42, count: 16)
+        let nonce = Data(repeating: 0x24, count: 24)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: shortKey, nonce24: nonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func sealThrowsOnLongKey() {
+        let plaintext = "Test".data(using: .utf8)!
+        let longKey = Data(repeating: 0x42, count: 64)
+        let nonce = Data(repeating: 0x24, count: 24)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: longKey, nonce24: nonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func sealThrowsOnEmptyKey() {
+        let plaintext = "Test".data(using: .utf8)!
+        let emptyKey = Data()
+        let nonce = Data(repeating: 0x24, count: 24)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: emptyKey, nonce24: nonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func openThrowsOnInvalidKeyLength() {
+        let ciphertext = Data(repeating: 0x00, count: 16)
+        let tag = Data(repeating: 0x00, count: 16)
+        let shortKey = Data(repeating: 0x42, count: 31)
+        let nonce = Data(repeating: 0x24, count: 24)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.open(ciphertext: ciphertext, tag: tag, key: shortKey, nonce24: nonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func sealThrowsOnShortNonce() {
+        let plaintext = "Test".data(using: .utf8)!
+        let key = Data(repeating: 0x42, count: 32)
+        let shortNonce = Data(repeating: 0x24, count: 12)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: shortNonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func sealThrowsOnLongNonce() {
+        let plaintext = "Test".data(using: .utf8)!
+        let key = Data(repeating: 0x42, count: 32)
+        let longNonce = Data(repeating: 0x24, count: 32)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: longNonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func sealThrowsOnEmptyNonce() {
+        let plaintext = "Test".data(using: .utf8)!
+        let key = Data(repeating: 0x42, count: 32)
+        let emptyNonce = Data()
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: emptyNonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func openThrowsOnInvalidNonceLength() {
+        let ciphertext = Data(repeating: 0x00, count: 16)
+        let tag = Data(repeating: 0x00, count: 16)
+        let key = Data(repeating: 0x42, count: 32)
+        let shortNonce = Data(repeating: 0x24, count: 23)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.open(ciphertext: ciphertext, tag: tag, key: key, nonce24: shortNonce)
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func openFailsWithWrongKey() throws {
+        let plaintext = "Secret".data(using: .utf8)!
+        let correctKey = Data(repeating: 0x42, count: 32)
+        let wrongKey = Data(repeating: 0x43, count: 32)
+        let nonce = Data(repeating: 0x24, count: 24)
+
+        let sealed = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: correctKey, nonce24: nonce)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.open(
+                ciphertext: sealed.ciphertext,
+                tag: sealed.tag,
+                key: wrongKey,
+                nonce24: nonce
+            )
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+
+    @Test func openFailsWithTamperedCiphertext() throws {
+        let plaintext = "Secret".data(using: .utf8)!
+        let key = Data(repeating: 0x42, count: 32)
+        let nonce = Data(repeating: 0x24, count: 24)
+
+        let sealed = try XChaCha20Poly1305Compat.seal(plaintext: plaintext, key: key, nonce24: nonce)
+
+        // Create tampered ciphertext by changing first byte
+        var tamperedBytes = [UInt8](sealed.ciphertext)
+        tamperedBytes[0] = tamperedBytes[0] ^ 0xFF
+        let tampered = Data(tamperedBytes)
+
+        var didThrow = false
+        do {
+            _ = try XChaCha20Poly1305Compat.open(
+                ciphertext: tampered,
+                tag: sealed.tag,
+                key: key,
+                nonce24: nonce
+            )
+        } catch {
+            didThrow = true
+        }
+        #expect(didThrow)
+    }
+}