1 files changed, 34 insertions, 0 deletions
diff --git a/tests/hkdf_sanity/sanity_test.go b/tests/hkdf_sanity/sanity_test.go
new file mode 100644
index 0000000..b382861
--- /dev/null
+++ b/tests/hkdf_sanity/sanity_test.go
@@ -0,0 +1,34 @@
+// We test two filesystems that have the "HKDF" feature flag in their config file
+// set, but the actual file contents and names are encrypted with HKDF disabled.
+// This test verifies that the "HKDF" feature flag in the config file takes effect.
+package hkdf_sanity
+
+import (
+	"io/ioutil"
+	"os"
+	"testing"
+
+	"github.com/rfjakob/gocryptfs/tests/test_helpers"
+)
+
+func TestBrokenContent(t *testing.T) {
+	cDir := "broken_content"
+	pDir := test_helpers.TmpDir + "/" + cDir
+	test_helpers.MountOrFatal(t, cDir, pDir, "-extpass", "echo test", "-wpanic=false")
+	_, err := ioutil.ReadFile(pDir + "/status.txt")
+	if err == nil {
+		t.Error("this should fail")
+	}
+	test_helpers.UnmountPanic(pDir)
+}
+
+func TestBrokenNames(t *testing.T) {
+	cDir := "broken_names"
+	pDir := test_helpers.TmpDir + "/" + cDir
+	test_helpers.MountOrFatal(t, cDir, pDir, "-extpass", "echo test", "-wpanic=false")
+	_, err := os.Stat(pDir + "/status.txt")
+	if err == nil {
+		t.Error("this should fail")
+	}
+	test_helpers.UnmountPanic(pDir)
+}