$ docker run --rm --name validator-libsodium-usage-ruby-rbnacl-r14-box-precompute-roundtrip-48096 -t --mount type=bind,src=/tmp/validator-status-libsodium-usage-ruby-rbnacl-r14-box-precompute-roundtrip,dst=/validator/status --mount type=bind,src=/home/runner/work/validator/validator/.work/pages-artifacts/debs/port/libsodium,dst=/override-debs,readonly validator-libsodium-shared bash -lc 'set -euo pipefail
/validator/tests/_shared/install_override_debs.sh
exec /validator/tests/_shared/run_library_tests.sh "$@"' validator-testcase libsodium usage-ruby-rbnacl-r14-box-precompute-roundtrip -- bash -c 'PS4=$1; shift; set -x; source "$@"' validator-xtrace '__VALIDATOR_XTRACE__ ' /validator/tests/libsodium/tests/cases/usage/usage-ruby-rbnacl-r14-box-precompute-roundtrip.sh
installing override packages from /override-debs
(Reading database ... (Reading database ... 5%(Reading database ... 10%(Reading database ... 15%(Reading database ... 20%(Reading database ... 25%(Reading database ... 30%(Reading database ... 35%(Reading database ... 40%(Reading database ... 45%(Reading database ... 50%(Reading database ... 55%(Reading database ... 60%(Reading database ... 65%(Reading database ... 70%(Reading database ... 75%(Reading database ... 80%(Reading database ... 85%(Reading database ... 90%(Reading database ... 95%(Reading database ... 100%(Reading database ... 22270 files and directories currently installed.)
Preparing to unpack .../libsodium-dev_1.0.18-1ubuntu0.24.04.1+safelibs1778011697_amd64.deb ...
Unpacking libsodium-dev:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) over (1.0.18-1ubuntu0.24.04.1) ...
Preparing to unpack .../libsodium23_1.0.18-1ubuntu0.24.04.1+safelibs1778011697_amd64.deb ...
Unpacking libsodium23:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) over (1.0.18-1ubuntu0.24.04.1) ...
Setting up libsodium23:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) ...
Setting up libsodium-dev:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) ...
Processing triggers for libc-bin (2.39-0ubuntu8.7) ...
sk_a = RbNaCl::PrivateKey.generate
sk_b = RbNaCl::PrivateKey.generate

box_ab = RbNaCl::Box.new(sk_b.public_key, sk_a)
box_ba = RbNaCl::Box.new(sk_a.public_key, sk_b)

nonce = ("\x14".b * 24)
msg = "rbnacl r14 box payload".b

ct = box_ab.encrypt(nonce, msg)
abort "ciphertext == plaintext" if ct == msg

pt = box_ba.decrypt(nonce, ct)
abort "round-trip mismatch" unless pt == msg

# Wrong nonce on decrypt must fail.
bad_nonce = ("\x15".b * 24)
rejected = false
begin
  box_ba.decrypt(bad_nonce, ct)
rescue RbNaCl::CryptoError
  rejected = true
end
abort "wrong-nonce decrypt accepted" unless rejected

puts "ok"
'
ok