$ docker run --rm --name validator-libsodium-usage-ruby-rbnacl-r12-secretbox-nonce-mismatch-fails-2732 -t --mount type=bind,src=/tmp/validator-status-libsodium-usage-ruby-rbnacl-r12-secretbox-nonce-mismatch-fails,dst=/validator/status validator-libsodium-shared bash -lc 'set -euo pipefail
/validator/tests/_shared/install_override_debs.sh
exec /validator/tests/_shared/run_library_tests.sh "$@"' validator-testcase libsodium usage-ruby-rbnacl-r12-secretbox-nonce-mismatch-fails -- bash -c 'PS4=$1; shift; set -x; source "$@"' validator-xtrace '__VALIDATOR_XTRACE__ ' /validator/tests/libsodium/tests/cases/usage/usage-ruby-rbnacl-r12-secretbox-nonce-mismatch-fails.sh
no override packages found; continuing with apt originals
key = ("K" * 32).b
nonce_a = ("a" * 24).b
nonce_b = ("b" * 24).b
msg = "rbnacl r12 nonce mismatch payload".b

box = RbNaCl::SecretBox.new(key)
ct = box.encrypt(nonce_a, msg)

abort "round-trip mismatch" unless box.decrypt(nonce_a, ct) == msg

begin
  box.decrypt(nonce_b, ct)
  abort "wrong-nonce decrypt was accepted"
rescue RbNaCl::CryptoError
  puts "ok"
end
'
ok