test: add DKIM signature verification tests for Gmail <-> Proton emails

zkemail · Feb 23, 2025 · fe57fb9 · fe57fb9
1 parent b193cf0
commit fe57fb9
Show file tree

Hide file tree

Showing 5 changed files with 1,327 additions and 975 deletions.
diff --git a/packages/circuits/package.json b/packages/circuits/package.json
@@ -43,4 +43,4 @@
       ]
     ]
   }
-}
+}
diff --git a/packages/helpers/tests/dkim.test.ts b/packages/helpers/tests/dkim.test.ts
@@ -94,6 +94,21 @@ describe('DKIM signature verification', () => {
       );
     }
   });
+
+  it('should pass for gmail to proton email', async () => {
+    const email = fs.readFileSync(path.join(__dirname, 'test-data/gmail-to-proton.eml'));
+    const result = await verifyDKIMSignature(email, '', true, false, true);
+    expect(result.signingDomain).toBe('gmail.com');
+    expect(result.appliedSanitization).toBeFalsy();
+  })
+
+  it('should pass for proton to gmail email', async () => {
+    const email = fs.readFileSync(path.join(__dirname, 'test-data/proton-to-gmail.eml'));
+    const result = await verifyDKIMSignature(email, '', true, false, true);
+    expect(result.signingDomain).toBe('proton.me');
+    expect(result.appliedSanitization).toBeFalsy();
+  })
+
 });
 
 it('should fallback to ZK Email Archive if DNS over HTTP fails', async () => {

diff --git a/packages/helpers/tests/test-data/gmail-to-proton.eml b/packages/helpers/tests/test-data/gmail-to-proton.eml
@@ -0,0 +1,83 @@
+Return-Path: <[email protected]>
+X-Original-To: [email protected]
+Delivered-To: [email protected]
+Authentication-Results: mail.protonmail.ch; dkim=pass (Good 2048 bit
+    rsa-sha256 signature) header.d=gmail.com header.a=rsa-sha256
+Authentication-Results: mail.protonmail.ch; dmarc=pass (p=none dis=none)
+ header.from=gmail.com
+Authentication-Results: mail.protonmail.ch; spf=pass smtp.mailfrom=gmail.com
+Authentication-Results: mail.protonmail.ch; arc=none smtp.remote-ip=209.85.218.49
+Authentication-Results: mail.protonmail.ch; dkim=pass (2048-bit key) header.d=gmail.com
+ [email protected] header.b="jntpr314"
+Received: from mail-ej1-f49.google.com (mail-ej1-f49.google.com [209.85.218.49]) (using
+ TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
+  key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No
+ client certificate requested) by mailin037.protonmail.ch (Postfix) with ESMTPS id
+ 4Z0wvl22TVz9vNPm for <[email protected]>; Sun, 23 Feb 2025 07:48:03 +0000 (UTC)
+Received: by mail-ej1-f49.google.com with SMTP id a640c23a62f3a-abb8045c3f3so425093366b.2
+        for <[email protected]>; Sat, 22 Feb 2025 23:48:02 -0800 (PST)
+Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
+        d=gmail.com; s=20230601; t=1740296882; x=1740901682; darn=proton.me;
+        h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
+         :date:message-id:reply-to;
+        bh=aKWlUEbe5cB4E8rKJyUeshQ8pYAmYNhwiLodZwuxZpw=;
+        b=jntpr314A9cnGrj/O/p98CZbpqpxvqsRtGL5WmQb801uXFeUL0PUM1XKsVck9wcCbP
+         6Lk+lW49Ki9gmx62vnB63BWOhEGf521KnhQb8TvIAx6AlcQ14wpMEs0DTSFbLN806w2b
+         WKKJTJdplQ5E7239LZ/Qcs9FrQbFncBUeZVD4l3vDnMlPh/xQCyBo4UKyXuoc+hfxNL4
+         iPIfdBtXD0kygvqMh/PMJp7+9xzYZ+VWS+jO/m3RUgPZGS52EhE2NbuLOtWHeTY7QVtk
+         3KNhZY/zaxaXYuNyKWU/Rejc5tiW3EgGNx/boLWHhSLkX5cgAOpM+yKcyNXWaBIaVjje
+         HssA==
+X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
+        d=1e100.net; s=20230601; t=1740296882; x=1740901682;
+        h=to:subject:message-id:date:from:mime-version:x-gm-message-state
+         :from:to:cc:subject:date:message-id:reply-to;
+        bh=aKWlUEbe5cB4E8rKJyUeshQ8pYAmYNhwiLodZwuxZpw=;
+        b=Jrf4+Ww1kdMgsXf9Jk/OwbIrExTAyIQ1unFRVDMWUVIx9SdKyMa1fJuBenPYltVUBg
+         agTgnVJZMJhrKy003G8r6WwFXghFPKmTvGKECXU6CTpVckmMX1ZuuXc2xmHtBCRHv+XO
+         ZtIJJvWZA03YXoPF0ndlKMAZAFyYv/evg1i5HfX+r6fEzAgoqAPxF2T8XinOh+JUMgCe
+         RLqvFXVeSiBUuqHK/iTYmN4m/4K04wGQSx5516f1zgr51uHNCZPtVglmlGQyxOpG2/Yr
+         w93gGkaF3ByESZtx/nau+6TyhZOju5EcBXtOdmWTsqSWSE1zguErLM9MBddGqGmqkXmo
+         +c4w==
+X-Gm-Message-State: AOJu0YyNr3ww451EE2qgn/NWVoDo7n3ved+eytf0S7oyWJyBdqHib+/s
+ kqE2sB4/tYCwOYzqaZqqeyb+MwXZinhwk0ksyrsw5PgmgKdnJdkMi737dmdJRRzAft5VLpkXjU1
+ iX3uFPOSWKJv8yy2wp1lnNw1bHzMktg==
+X-Gm-Gg: ASbGncvYQNOETb+0kJo2h162MplH9kXKOpxOS50ek6xQltf5T6PuEG3SPYMSdsp9rfS
+ tTEUeDI25RCZYmUnOvciQd2/y/ufraWnHN5gSofw1Tvgs3/MCNFomDaGOf1QTrdD68bcZAFqpn9 WdPNub3Q==
+X-Google-Smtp-Source: AGHT+IFp/dmkqgoCVvnKgcTbLwiiSXZVZTTAlVBLGI5AhbVWZEYr4U/+wovxVyk2GP9DJp1cmlku/xwTBqaFIkXldEw=
+X-Received: by 2002:a17:906:30d4:b0:ab7:ca9:44e4 with SMTP id
+ a640c23a62f3a-abc09a0c527mr845980366b.15.1740296882072; Sat, 22 Feb 2025 23:48:02 -0800
+ (PST)
+Mime-Version: 1.0
+From: zdev <[email protected]>
+Date: Sun, 23 Feb 2025 08:47:51 +0100
+X-Gm-Features: AWEUYZn3Mp04uYvjw7lfku4oe8MMlnwEsYHC6dbCYhuE-ZyI1IoyxhomasuNh-Q
+Message-Id: <CAPxFdS5bxKmUs5AppFW4f73kSQniQPz=[email protected]>
+Subject: This is a test subject
+To: [email protected]
+Content-Type: multipart/mixed;boundary=---------------------d285e78bb7f79c9e9d21bbeebcfc125e
+X-Pm-Spam: 0yezJI6cihyJeYR3pi42biOpJJvbmsCIeINmhnVGd3b5JoiIjGEVRQVVMsICVmIs1NjX
+ 3l3JbIpj7SBlI0TiQ0yOiiSwNUJFPz8FRFUiIAuOjwDAMMED4wADMDMwAM2Nj1jcNMkz1QJCLkUE9B
+ SX1JURRQR1Ji40TjOsAJTIltjoIMwSilR2XnYnVluX2im8ZOsniPJFUCR6IJpeynWFbZ9Vul1WYjIi
+ oN0aHrWNYXZ2pfVmbHduVRfZWfHVcMAjy1ADNTMiMJpLCp19cbBXvhRncnbiQAsOjhm1IaxWfyB3M2
+ Xv1VsZGijoIbFWphRHbyZj51ib2lW5aZ9Fml5WaHduVQuZWyjAMNADyuEjM2YwtIsdChm1IaxWfyB3
+ M3XyBIib2ujAOMADw4EDMDMwAAwMD2jMNNcj11kzMCLtJlsYWh2NXdVGn5J3b2Xv1VsZGijoIbFWph
+ NGbCdj51ib2lW5aZ9Fml5WaHduVQuZWyjAMNADyuEjM2YwtIsdChm1IaxWf0F2YWZvdlfcntmFbZIS
+ 6FRkIkRVFQiTFtCJLYlWshN2XGdnVJ5b3y3BXbI2isEjOnIfBBhc36SIbM4Cw4IDMTO0IE1MDwzUMN
+ Mj5sIDOnI1J9ubllW1YIoji3VmbXLlNRlbm9iJcfwSipFWbFbz8JfcHvHJcYIi6w4CMDMwAgwMTwDA
+ MMAD22YzMzNzUV9OTzCJLclmkiojIjNidQyYW5jQYMEG5jdjNWY5MVhMm1GEOI1n9
+X-Pm-Origin: external
+X-Pm-Transfer-Encryption: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
+X-Pm-Content-Encryption: on-delivery
+X-Pm-Spamscore: 0
+X-Pm-Spam-Action: inbox
+
+-----------------------d285e78bb7f79c9e9d21bbeebcfc125e
+Content-Type: multipart/related;boundary=---------------------a6ae56b1309fe4513d0d8a8b2b421756
+
+-----------------------a6ae56b1309fe4513d0d8a8b2b421756
+Content-Type: text/html;charset=utf-8
+Content-Transfer-Encoding: base64
+
+PGRpdiBkaXI9Imx0ciI+Qm9keSBpcyBpZ25vcmVkPC9kaXY+Cg==
+-----------------------a6ae56b1309fe4513d0d8a8b2b421756--
+-----------------------d285e78bb7f79c9e9d21bbeebcfc125e--
diff --git a/packages/helpers/tests/test-data/proton-to-gmail.eml b/packages/helpers/tests/test-data/proton-to-gmail.eml
@@ -0,0 +1,81 @@
+Delivered-To: [email protected]
+Received: by 2002:a05:7208:c17:b0:9a:379d:950d with SMTP id ix23csp1259588rbb;
+        Sat, 22 Feb 2025 23:50:37 -0800 (PST)
+X-Google-Smtp-Source: AGHT+IHhMtArTyySjkzIIxFpO/HXHJyPeeHwqytzECNNfICoL56h6oHBh1k5QL2k6eZ9U4KQ52xp
+X-Received: by 2002:a05:600c:1986:b0:439:7c0b:13f6 with SMTP id 5b1f17b1804b1-439b2d233e6mr67302825e9.31.1740297037625;
+        Sat, 22 Feb 2025 23:50:37 -0800 (PST)
+ARC-Seal: i=1; a=rsa-sha256; t=1740297037; cv=none;
+        d=google.com; s=arc-20240605;
+        b=YgxJ9tsJQMVGtzRzZ4eVEiSVPRWrcNiAb/QTYNzsTd/66R0PSkUqBZQ1uzDWBi2pJF
+         nWtLW7QghFzvUMa69U1ndVaFuPDPDg2FPS0bWofZtIynVDEuJ3P3ywriWdYtXnkJw9KF
+         2ZOY+JVnik/zBalCwwlLf5+S8vS9K59V2FmIiCckZVodjb+e3lTpv7R0mXrmZkUPeV4S
+         d+FZ+9/uwRb4YULgeJjf0PH03hwWv9lNlPpSOSE35S1G22p66+WC+6jk4XDztuGmU42t
+         KCzMCO+DQmxn84Id995/+gUyXzOM0XZk4V6CG3X+kDt/sxdw2j31zEawK0c4UZziOTOP
+         lwqQ==
+ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
+        h=mime-version:feedback-id:message-id:subject:from:to:date
+         :dkim-signature;
+        bh=fK2qdClK9QTQJoFzQbidFPXUBwNdEw6fXbUKKrZkRag=;
+        fh=fKx4dHH9grCprgDNudqj9qlwtgzhY5M43m6nZ/lCdBY=;
+        b=HVRuKXYqrvSwk4lH1Dcd5nBhHMS49pk4e6gKsExJLd/9Ev1Y/eKJplf1RY2SNaRNwG
+         aqRntl4vUuR2551q8o72mv0SBO/S16gCi8Jn6IeEqZDtJ/czou0e6dSfWwxwyoYSbBZc
+         Zs7GnldktVLRM3czwhJsFlhK943kecjHp09znWz1CmfNIHaP5wnFTVForGffG8ZWe3iW
+         FuWbVg79xyT1qN1uA5g1v3MmDl6C6CYZs+bwG1vfmG8/lm6xsro+hqEdSthVmUgbN1fM
+         RBZqqZMvBv7zQd9TzYbtNmGTPmxxhF8+POg0WajXtcjWShvM2jC1+3uZGSgRP21nZ5Bl
+         XyoQ==;
+        dara=google.com
+ARC-Authentication-Results: i=1; mx.google.com;
+       dkim=pass [email protected] header.s=protonmail header.b=fk+ET0yc;
+       spf=pass (google.com: domain of [email protected] designates 185.70.43.166 as permitted sender) smtp.mailfrom=[email protected];
+       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=proton.me
+Return-Path: <[email protected]>
+Received: from mail-43166.protonmail.ch (mail-43166.protonmail.ch. [185.70.43.166])
+        by mx.google.com with ESMTPS id 5b1f17b1804b1-439b02fd789si33478305e9.142.2025.02.22.23.50.37
+        for <[email protected]>
+        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
+        Sat, 22 Feb 2025 23:50:37 -0800 (PST)
+Received-SPF: pass (google.com: domain of [email protected] designates 185.70.43.166 as permitted sender) client-ip=185.70.43.166;
+Authentication-Results: mx.google.com;
+       dkim=pass [email protected] header.s=protonmail header.b=fk+ET0yc;
+       spf=pass (google.com: domain of [email protected] designates 185.70.43.166 as permitted sender) smtp.mailfrom=[email protected];
+       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=proton.me
+DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=proton.me;
+	s=protonmail; t=1740297037; x=1740556237;
+	bh=fK2qdClK9QTQJoFzQbidFPXUBwNdEw6fXbUKKrZkRag=;
+	h=Date:To:From:Subject:Message-ID:Feedback-ID:From:To:Cc:Date:
+	 Subject:Reply-To:Feedback-ID:Message-ID:BIMI-Selector:
+	 List-Unsubscribe:List-Unsubscribe-Post;
+	b=fk+ET0ycbp4QSnQyekz/ye0B/Pw8x/QGPpT2rWIdGb9RQIFtNfuHomx0ircgpzpBC
+	 OcbpoFIZYhj6hsBCFT3bchxRx9N6Cy1aQM/Bdy2iQn9+HU0mFsb42pTQwoGjcfKns0
+	 qsq3hU1kzJ4yRJRGhszz0L8KOX2Rvn3TxHdTFWJZD20X/SHav7S2cWWC/liDUaBtjc
+	 rQLApxInLamYT+DfkkGVDZJo4gHDyTTnUsLv0xBy6u7iRHGNIgsWRc2vG3OHw4vB5T
+	 RPQyaaLpPeHpXQAu2FUQEKqREenzecbtPwNbQdPgtfT44AWjJMbhmIuuN0lLf26bod
+	 6l1ikhe3jFb9A==
+Date: Sun, 23 Feb 2025 07:50:33 +0000
+To: "[email protected]" <[email protected]>
+From: thezdev1 <[email protected]>
+Subject: This is from proton to gmail
+Message-ID: <UdlQJvMPJwVS6-WsTC0zsyFQI7eS55iIFA_nevwz9ERExxIuB0AElN_euz2dSSpNrNlg9VJRPLpW6n5AtL4M95nDTCjdKEItrWEmuDVjaPA=@proton.me>
+Feedback-ID: 135381554:user:proton
+X-Pm-Message-ID: 5707ffccdcdc03761793323d30eab6ce0dbc3105
+MIME-Version: 1.0
+Content-Type: multipart/alternative;
+ boundary="b1=_7cvD6bH3OyE9nJSMtsUF2LZqWlTvibSoWfexyXRXGw"
+
+--b1=_7cvD6bH3OyE9nJSMtsUF2LZqWlTvibSoWfexyXRXGw
+Content-Type: text/plain; charset=utf-8
+Content-Transfer-Encoding: base64
+
+Qm9keSBpcyBpZ25vcmVk
+
+--b1=_7cvD6bH3OyE9nJSMtsUF2LZqWlTvibSoWfexyXRXGw
+Content-Type: text/html; charset=utf-8
+Content-Transfer-Encoding: base64
+
+PGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0
+cHg7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwg
+MjU1KTsiPkJvZHkgaXMgaWdub3JlZDwvZGl2Pg==
+
+
+--b1=_7cvD6bH3OyE9nJSMtsUF2LZqWlTvibSoWfexyXRXGw--
+
-Original file line number
+Diff line change
@@ Expand Up / @@ -43,4 +43,4 @@ @@
           ]
         ]
       }
-    }
+    }