# encoding: utf-8

    require "logstash/devutils/rspec/spec_helper"
    require 'logstash/filters/cipher'

    describe LogStash::Filters::Cipher do

      let(:cleartext) do
        'شسيبشن٤٤ت٥ت داھدساققبمر фывапролдзщшгнекутцйячсмить asdfghjklqpoiuztreyxcvbnm,.-öäü+ä123ß´yö.,;LÖÜ*O 來少精清皆人址法田手扌打表氵開日大木裝 1234567890#$%^&*()!@#;:\'?.>,<testAESEn+=_-~`}]'
      end

      let(:event) do
        "{\"message\":\"#{cleartext}\"}"
      end

      let(:pipeline) { LogStash::Pipeline.new(config) }

      let(:events) do
        arr = event.is_a?(Array) ? event : [event]
        arr.map do |evt|
          LogStash::Event.new(evt.is_a?(String) ? LogStash::Json.load(evt) : evt)
        end
      end

      let(:results) do
        pipeline.instance_eval { @filters.each(&:register) }
        results  = []
        events.each do |evt|
          # filter call the block on all filtered events, included new events added by the filter
          pipeline.filter(evt) do |filtered_event|
            results.push(filtered_event)
          end
        end
        pipeline.flush_filters(:final => true) { |flushed_event| results << flushed_event }

        results.select { |e| !e.cancelled? }
      end

      describe 'single event, encrypt/decrypt aes-128-cbc, 16b RANDOM IV, 16b key, b64 encode' do

        let(:config) do
          <<-CONFIG
    filter {

        cipher {
            algorithm => "aes-128-cbc"
            cipher_padding => 1
            iv_random_length => 16
            key => "1234567890123456"
            key_size => 16
            mode => "encrypt"
            source => "message"
            target => "message_crypted"
            base64 => true
            max_cipher_reuse => 1
        }

        cipher {
            algorithm => "aes-128-cbc"
            cipher_padding => 1
            iv_random_length => 16
            key => "1234567890123456"
            key_size => 16
            mode => "decrypt"
            source => "message_crypted"
            target => "message_decrypted"
            base64 => true
            max_cipher_reuse => 1
        }
    }
    CONFIG
        end

        it 'validate initial cleartext message' do
          result = results.first
          expect(result["message"]).to eq(cleartext)
        end

        it 'validate decrypted message' do
          result = results.first
          expect(result["message_decrypted"]).to eq(result["message"])
        end

        it 'validate encrypted message is not equal to message' do
          result = results.first
          expect(result["message"]).not_to eq(result["message_crypted"])
        end

      end


      describe 'single event, encrypt/decrypt aes-128-cbc, 16b STATIC IV, 16b key, b64 encode' do

        let(:config) do
          <<-CONFIG
    filter {

        cipher {
            algorithm => "aes-128-cbc"
            cipher_padding => 1
            iv => "1234567890123456"
            key => "1234567890123456"
            key_size => 16
            mode => "encrypt"
            source => "message"
            target => "message_crypted"
            base64 => true
            max_cipher_reuse => 1
        }

        cipher {
            algorithm => "aes-128-cbc"
            cipher_padding => 1
            iv => "1234567890123456"
            key => "1234567890123456"
            key_size => 16
            mode => "decrypt"
            source => "message_crypted"
            target => "message_decrypted"
            base64 => true
            max_cipher_reuse => 1
        }
    }
    CONFIG
        end

        it 'validate initial cleartext message' do
          result = results.first
          expect(result["message"]).to eq(cleartext)
        end

        it 'validate decrypted message' do
          result = results.first
          expect(result["message_decrypted"]).to eq(result["message"])
        end

        it 'validate encrypted message is not equal to message' do
          result = results.first
          expect(result["message"]).not_to eq(result["message_crypted"])
        end

      end


      describe '1000 events, 11 re-use, encrypt/decrypt aes-128-cbc, 16b RANDOM IV, 16b key, b64 encode' do

        total_events = 1000

        let(:event) do
          events = []
         (1..total_events).each do |i|
            events.push("{\"message\":\"#{cleartext}\"}")
          end
          return events
        end

        let(:config) do
          <<-CONFIG
    filter {

        cipher {
            algorithm => "aes-128-cbc"
            cipher_padding => 1
            iv_random_length => 16
            key => "1234567890123456"
            key_size => 16
            mode => "encrypt"
            source => "message"
            target => "message_crypted"
            base64 => true
            max_cipher_reuse => 11
        }

        cipher {
            algorithm => "aes-128-cbc"
            cipher_padding => 1
            iv_random_length => 16
            key => "1234567890123456"
            key_size => 16
            mode => "decrypt"
            source => "message_crypted"
            target => "message_decrypted"
            base64 => true
            max_cipher_reuse => 11
        }
    }
    CONFIG
        end

        it 'validate total events' do
          expect(results.length).to eq(total_events)
        end

        it 'validate initial cleartext message' do
          results.each do |result|
            expect(result["message"]).to eq(cleartext)
          end
        end

        it 'validate decrypted message' do
          results.each do |result|
            expect(result["message_decrypted"]).to eq(result["message"])
          end
        end

        it 'validate encrypted message is not equal to message' do
          results.each do |result|
            expect(result["message"]).not_to eq(result["message_crypted"])
          end
        end

      end

    end