test_agent_seed_zeroing.py
python
sha256:c0eba5ad689cec79f4a3fcdc4f5da78556cb4b8cb7b330f944634356c10379ed
chore: pivot to nightly channel — bump version to 0.2.0.dev…
Sonnet 5
patch
13 days ago
| 1 | """Tests for DerivedKey zeroing in muse/cli/commands/agent.py. |
| 2 | |
| 3 | _sub_seed_to_public derives an Ed25519 key from a sub-seed via derive_identity_key(), |
| 4 | then calls dk.zero() to overwrite the private scalar and chain code before returning. |
| 5 | DerivedKey fields are bytearray, so dk.zero() genuinely overwrites the live buffer. |
| 6 | |
| 7 | Coverage |
| 8 | -------- |
| 9 | I _sub_seed_to_public zeroes DerivedKey |
| 10 | I1 DerivedKey.private_bytes is zeroed after _sub_seed_to_public returns |
| 11 | I2 DerivedKey.chain_code is zeroed after _sub_seed_to_public returns |
| 12 | """ |
| 13 | |
| 14 | from __future__ import annotations |
| 15 | |
| 16 | from unittest.mock import patch |
| 17 | |
| 18 | from muse.core import hdkeys as _hdkeys |
| 19 | from muse.core.bip39 import mnemonic_to_seed |
| 20 | from muse.core.hdkeys import derive_agent_sub_seed, DOMAIN_IDENTITY |
| 21 | from muse.core.slip010 import DerivedKey |
| 22 | |
| 23 | _MNEMONIC = ( |
| 24 | "abandon abandon abandon abandon abandon abandon abandon abandon " |
| 25 | "abandon abandon abandon about" |
| 26 | ) |
| 27 | _SEED = mnemonic_to_seed(_MNEMONIC) |
| 28 | _SUB_SEED = derive_agent_sub_seed(_SEED, domain=DOMAIN_IDENTITY, agent_id=0) |
| 29 | |
| 30 | |
| 31 | class TestSubSeedToPublicZeroesDerivedKey: |
| 32 | def test_I1_private_bytes_zeroed(self) -> None: |
| 33 | """I1: DerivedKey.private_bytes is zeroed after _sub_seed_to_public returns.""" |
| 34 | from muse.cli.commands.agent import _sub_seed_to_public |
| 35 | |
| 36 | captured: list[DerivedKey] = [] |
| 37 | original_derive = _hdkeys.derive_identity_key |
| 38 | |
| 39 | def capturing_derive(*args: int | bytes, **kwargs: int) -> DerivedKey: |
| 40 | dk = original_derive(*args, **kwargs) |
| 41 | captured.append(dk) |
| 42 | return dk |
| 43 | |
| 44 | with patch.object(_hdkeys, "derive_identity_key", side_effect=capturing_derive): |
| 45 | _sub_seed_to_public(bytes(_SUB_SEED)) |
| 46 | |
| 47 | assert captured, "derive_identity_key was not called" |
| 48 | dk = captured[0] |
| 49 | assert dk.private_bytes == bytearray(32), ( |
| 50 | "DerivedKey.private_bytes must be zeroed after _sub_seed_to_public" |
| 51 | ) |
| 52 | |
| 53 | def test_I2_chain_code_zeroed(self) -> None: |
| 54 | """I2: DerivedKey.chain_code is zeroed after _sub_seed_to_public returns.""" |
| 55 | from muse.cli.commands.agent import _sub_seed_to_public |
| 56 | |
| 57 | captured: list[DerivedKey] = [] |
| 58 | original_derive = _hdkeys.derive_identity_key |
| 59 | |
| 60 | def capturing_derive(*args: int | bytes, **kwargs: int) -> DerivedKey: |
| 61 | dk = original_derive(*args, **kwargs) |
| 62 | captured.append(dk) |
| 63 | return dk |
| 64 | |
| 65 | with patch.object(_hdkeys, "derive_identity_key", side_effect=capturing_derive): |
| 66 | _sub_seed_to_public(bytes(_SUB_SEED)) |
| 67 | |
| 68 | assert captured, "derive_identity_key was not called" |
| 69 | dk = captured[0] |
| 70 | assert dk.chain_code == bytearray(32), ( |
| 71 | "DerivedKey.chain_code must be zeroed after _sub_seed_to_public" |
| 72 | ) |
File History
10 commits
sha256:c287f599c5429903a139eadf3c5db5d930520e57cb0c3c575d9570e953c3b2d6
chore: bump version to 0.2.0.dev2 — nightly.2
Sonnet 4.6
patch
12 days ago
sha256:8de4334a98c945aace420969d389ad678aa926d4ab4e886b2ac4c4241cb3bf2b
revert: keep pyproject.toml in canonical PEP 440 form
Sonnet 4.6
patch
15 days ago
sha256:50bb615c573aa4b928fca75b60f82ba2a659910066507cec6a95c412ae22ccb9
docs: add issue docs for push have-negotiation bug (#55) an…
Sonnet 4.6
18 days ago
sha256:d90d175cded68aae1d4ffcf4858917854195d0cd8ce1fe73cee4dbc02541cb74
chore: trigger push to surface null-OID paths
Sonnet 4.6
24 days ago
sha256:e452ad9a6ace6ccc6d875a35e06caf9da5576a970c1c36133b69a891ce5fefa8
chore: prebuild timing test
Sonnet 4.6
34 days ago
sha256:0008ab6695e3e064b3e236b24fd19e538fef6a588eb0d211622f4466d919c0b1
merge: pull staging/dev — advance to 0.2.0rc12
Sonnet 4.6
patch
36 days ago
sha256:9c33d61749fff814c5226d5386aa2af7064c2c02788594a25fdd709358132eea
fix: _PROPOSAL_PREFIX_RESOLVE_LIMIT 200 → 100 to match hub …
Sonnet 4.6
47 days ago
sha256:36c3cb3e76619d4c30a6d9bf81b5ec4ff148e30dcfed913e3114ca7b43b81c7e
fix: rename objects→blobs in push client and all stale test…
Sonnet 4.6
patch
50 days ago
sha256:c06a9b9b9fee26c68ea725b44d54b2c0a171301ce9de746d5b656617b4463a9a
fix: repair four test failures from post-migration audit
Sonnet 4.6
patch
56 days ago
sha256:1900655993c83c4107067375548a7be823e471d2515830842f1a12cba4bd3cdf
fix: unified object store migration — idempotent writes, JS…
Sonnet 4.6
minor
⚠
56 days ago