Joseph Doherty
d82d3451e7
G-8 (KEK rotation) — built in ZB.MOM.WW.Secrets, lib 0.1.2->0.1.3: - ISecretCipher.Rewrap(row, oldKek, newKek): re-wraps the per-secret DEK only (bodies never re-encrypted; revision/timestamps preserved -> invisible to cluster LWW). Fail-closed on wrong old-KEK id, wrong key bytes, and malformed wraps; DEK zeroed on all paths. - ISecretStore.ApplyRewrapAsync(rewrappedRow, expectedCurrentWrappedDek): updates only the 4 wrap columns + kek_id, compare-and-swap on the current wrapped DEK so a concurrent set/rotate cannot corrupt a row (closes a review-caught TOCTOU). - KekRotationService.RewrapAllAsync + RewrapReport: enumerate all rows incl. tombstones, idempotent/resumable skip-already-current, bounded CAS-retry, fail-closed on unknown/identical KEK. - `secret rewrap-all` CLI verb: key material only via env-var name / file path, JSON counts report; README section + operator runbook. Verified: full offline suite green (82 core + 15 UI, 0 regressions) + end-to-end CLI smoke + adversarial crypto review (all 7 categories PASS; TOCTOU fixed). G-7 (clustered replication) — designed + planned, no code: - Fork resolved to build Option A (shared SQL-Server ISecretStore); Akka replicator ZB.MOM.WW.Secrets.Akka is a deferred phase-2. Design doc + executable plan + .tasks.json under docs/plans/2026-07-17-secrets-g7-*. Tracking: components/secrets/GAPS.md + CLAUDE.md secrets row updated.
50 lines
1.7 KiB
C#
50 lines
1.7 KiB
C#
using System.Text;
|
|
using ZB.MOM.WW.Secrets.Abstractions;
|
|
|
|
namespace ZB.MOM.WW.Secrets.Ui.Tests.Fakes;
|
|
|
|
/// <summary>
|
|
/// A trivial, reversible <see cref="ISecretCipher"/> stand-in for UI tests. It does not perform real
|
|
/// cryptography — it simply carries the UTF-8 plaintext in <see cref="StoredSecret.Ciphertext"/> so a
|
|
/// test can prove the editor's encrypt→upsert round-trips back to the entered value. Never used in
|
|
/// production. A <see cref="FailDecrypt"/> flag lets a test drive the decrypt-failure reveal path.
|
|
/// </summary>
|
|
public sealed class FakeCipher : ISecretCipher
|
|
{
|
|
/// <summary>When <c>true</c>, <see cref="Decrypt"/> throws to exercise the failure path.</summary>
|
|
public bool FailDecrypt { get; set; }
|
|
|
|
/// <inheritdoc />
|
|
public StoredSecret Encrypt(SecretName name, string plaintext, SecretContentType contentType)
|
|
=> new()
|
|
{
|
|
Name = name,
|
|
ContentType = contentType,
|
|
Ciphertext = Encoding.UTF8.GetBytes(plaintext),
|
|
Nonce = [1, 2, 3],
|
|
Tag = [4, 5, 6],
|
|
WrappedDek = [7, 8, 9],
|
|
WrapNonce = [10, 11, 12],
|
|
WrapTag = [13, 14, 15],
|
|
KekId = "fake-kek",
|
|
Revision = 0,
|
|
CreatedUtc = default,
|
|
UpdatedUtc = default,
|
|
};
|
|
|
|
/// <inheritdoc />
|
|
public string Decrypt(StoredSecret secret)
|
|
{
|
|
if (FailDecrypt)
|
|
{
|
|
throw new SecretDecryptionException("Fake decrypt failure.");
|
|
}
|
|
|
|
return Encoding.UTF8.GetString(secret.Ciphertext);
|
|
}
|
|
|
|
/// <inheritdoc />
|
|
public StoredSecret Rewrap(StoredSecret secret, IMasterKeyProvider oldKek, IMasterKeyProvider newKek)
|
|
=> secret with { KekId = newKek.KekId };
|
|
}
|