$ docker run --rm --name validator-libsodium-usage-ruby-rbnacl-argon2-tampered-fails-48096 -t --mount type=bind,src=/tmp/validator-status-libsodium-usage-ruby-rbnacl-argon2-tampered-fails,dst=/validator/status --mount type=bind,src=/home/runner/work/validator/validator/.work/pages-artifacts/debs/port/libsodium,dst=/override-debs,readonly validator-libsodium-shared bash -lc 'set -euo pipefail
/validator/tests/_shared/install_override_debs.sh
exec /validator/tests/_shared/run_library_tests.sh "$@"' validator-testcase libsodium usage-ruby-rbnacl-argon2-tampered-fails -- bash -c 'PS4=$1; shift; set -x; source "$@"' validator-xtrace '__VALIDATOR_XTRACE__ ' /validator/tests/libsodium/tests/cases/usage/usage-ruby-rbnacl-argon2-tampered-fails.sh
installing override packages from /override-debs
(Reading database ... (Reading database ... 5%(Reading database ... 10%(Reading database ... 15%(Reading database ... 20%(Reading database ... 25%(Reading database ... 30%(Reading database ... 35%(Reading database ... 40%(Reading database ... 45%(Reading database ... 50%(Reading database ... 55%(Reading database ... 60%(Reading database ... 65%(Reading database ... 70%(Reading database ... 75%(Reading database ... 80%(Reading database ... 85%(Reading database ... 90%(Reading database ... 95%(Reading database ... 100%(Reading database ... 22270 files and directories currently installed.)
Preparing to unpack .../libsodium-dev_1.0.18-1ubuntu0.24.04.1+safelibs1778011697_amd64.deb ...
Unpacking libsodium-dev:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) over (1.0.18-1ubuntu0.24.04.1) ...
Preparing to unpack .../libsodium23_1.0.18-1ubuntu0.24.04.1+safelibs1778011697_amd64.deb ...
Unpacking libsodium23:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) over (1.0.18-1ubuntu0.24.04.1) ...
Setting up libsodium23:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) ...
Setting up libsodium-dev:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) ...
Processing triggers for libc-bin (2.39-0ubuntu8.7) ...
ops = RbNaCl::PasswordHash::Argon2::OPSLIMIT_INTERACTIVE
mem = RbNaCl::PasswordHash::Argon2::MEMLIMIT_INTERACTIVE
password = "correct horse battery staple".dup.force_encoding(Encoding::BINARY)
salt_a = ("a" * 16).dup.force_encoding(Encoding::BINARY)
salt_b = ("b" * 16).dup.force_encoding(Encoding::BINARY)
digest_size = 32

h1 = RbNaCl::PasswordHash.argon2(password, salt_a, ops, mem, digest_size)
raise "unexpected digest size #{h1.bytesize}" unless h1.bytesize == digest_size

# Same password+salt+params must be deterministic.
h2 = RbNaCl::PasswordHash.argon2(password, salt_a, ops, mem, digest_size)
raise "argon2 not deterministic for fixed salt" unless h1 == h2

# A different salt must produce a different digest.
h3 = RbNaCl::PasswordHash.argon2(password, salt_b, ops, mem, digest_size)
raise "argon2 ignored salt" if h3 == h1

# A different password under the same salt must also produce a different digest.
h4 = RbNaCl::PasswordHash.argon2("other password".dup.force_encoding(Encoding::BINARY), salt_a, ops, mem, digest_size)
raise "argon2 ignored password" if h4 == h1

puts "ok " + h1.unpack1("H*")[0, 16]
'
ok 25d1a5d244492349