#!/usr/bin/env zsh

export test_description="Testing tomb with KDF keys"

source ./setup

if test_have_prereq KDF; then
    test_export "kdf"
    test_expect_success 'Testing KDF: tomb creation' '
        tt_dig -s 20 &&
        tt_forge --tomb-pwd $DUMMYPASS --kdf 1 &&
        print $DUMMYPASS \
            | gpg --batch --passphrase-fd 0 --no-tty --no-options -d $tomb_key \
            | xxd &&
        tt_lock --tomb-pwd $DUMMYPASS
        '

    test_expect_success 'Testing KDF: tomb passwd' '
        tt passwd -k $tomb_key \
            --unsafe --tomb-old-pwd $DUMMYPASS --tomb-pwd $DUMMYPASSNEW &&
        tt passwd -k $tomb_key \
            --unsafe --tomb-old-pwd $DUMMYPASSNEW --tomb-pwd $DUMMYPASS
        '

    test_expect_success 'Testing KDF: tomb open & close' '
        tt_open --tomb-pwd $DUMMYPASS &&
        tt_close
        '
fi

# clean to avoid overwrite errors
# rm -f "$tomb_key" "$tomb"

if test_have_prereq ARGON2; then
    test_export "argon2"
    test_expect_success 'Testing KDF ARGON2: tomb creation' '
        tt_dig -s 20 &&
        tt_forge --tomb-pwd $DUMMYPASS --kdftype argon2 --kdfmem 18 --kdf 1 &&
        print $DUMMYPASS \
            | gpg --batch --passphrase-fd 0 --no-tty --no-options -d $tomb_key \
            | xxd &&
        tt_lock --tomb-pwd $DUMMYPASS
        '

    test_expect_success 'Testing KDF ARGON2: tomb passwd' '
        tt passwd -k $tomb_key \
            --unsafe --tomb-old-pwd $DUMMYPASS --tomb-pwd $DUMMYPASSNEW &&
        tt passwd -k $tomb_key \
            --unsafe --tomb-old-pwd $DUMMYPASSNEW --tomb-pwd $DUMMYPASS
        '

    test_expect_success 'Testing KDF ARGON2: tomb open & close' '
        tt_open --tomb-pwd $DUMMYPASS &&
        tt_close
        '
fi

test_done