another golden test

src/encrypted_sled/kv.rs

@@ -106,6 +106,14 @@ impl EncryptedDb {
     {
         let nonce = Self::generate_nonce();
 
+        self.encrypt_with_nonce(value, nonce)
+    }
+
+    /// create a new [EncryptedRecord] containing an encrypted value and a given nonce.
+    fn encrypt_with_nonce<V>(&self, value: V, nonce: chacha20poly1305::XNonce) -> EncryptedDbResult<EncryptedRecord>
+    where
+        V: Into<IVec>,
+    {
         let mut value = value.into().to_vec();
 
         // encrypt value
@@ -193,6 +201,8 @@ impl EncryptedDb {
 
 #[cfg(test)]
 mod tests {
+    use chacha20poly1305::{XChaCha20Poly1305, XNonce, KeyInit};
+
     use super::EncryptedDb;
     use crate::encrypted_sled::{password::PasswordSalt, Password};
 
@@ -205,4 +215,23 @@ mod tests {
 
         goldie::assert_json!(key);
     }
+
+    #[test]
+    fn encrypt_with_nonce_known_vector() {
+        // Create a mock EncryptedDb with a deterministic cipher
+        let mock_db = EncryptedDb {
+            kv: sled::Config::new().temporary(true).open().unwrap(),
+            cipher: XChaCha20Poly1305::new(&chacha20poly1305::Key::from([5u8; 32])),
+        };
+
+        let value = b"test_value";
+        let nonce = XNonce::from([1u8; 24]);
+
+        let encrypted_record = mock_db.encrypt_with_nonce(value, nonce).unwrap();
+
+        goldie::assert_json!(&encrypted_record);
+
+        let decrypted_value = mock_db.decrypt_record_value(encrypted_record).unwrap();
+        assert_eq!(decrypted_value.as_ref(), value);
+    }
 }

src/encrypted_sled/testdata/encrypt_with_nonce_known_vector.golden

@@ -0,0 +1,56 @@
+{
+  "encrypted_value": [
+    98,
+    227,
+    247,
+    125,
+    18,
+    128,
+    210,
+    249,
+    235,
+    248,
+    0,
+    112,
+    6,
+    3,
+    156,
+    239,
+    40,
+    46,
+    208,
+    108,
+    246,
+    75,
+    59,
+    68,
+    48,
+    2
+  ],
+  "nonce": [
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1,
+    1
+  ]
+}