search

paseto-standard / test-vectors

Test vectors for PASETO, PASERK, etc.
Other
6 stars 4 forks source link

Test unhappy path #4

Closed paragonie-security closed 2 years ago

paragonie-security commented 2 years ago

In order to ensure implementations don't fail open with invalid inputs (wrong header or purpose for a given key), we're adding some test vectors that MUST fail.

paragonie-security commented 2 years ago

If you're curious, the payload that was used to generate these tokens is:

{"payload":"this should never decode"}

This will never be included in the test vector file, because they're invalid states created by doing torturous things with the key bytes and definitions.