encryptVote and decryptVote are not tested as a matched pair

[grantfox-oss]

PR #11 adds implementations for encryptVote and
decryptVote but the test file has no roundtrip test
confirming that decryptVote correctly recovers what
encryptVote produced. The tests cover each function
in isolation but a broken IV handling or mismatched
authTag format between the two functions would pass
all existing tests and only fail at runtime when
core attempts to tally votes.

There is also no test confirming decryptVote throws
on a tampered ciphertext or auth tag. Silent wrong
output from decryptVote during a tally produces a
corrupted result with no error raised.

Scope:

• Add a roundtrip test — encryptVote then decryptVote
  returns the original option string exactly
• Add a tampered ciphertext test — modify one byte
  of the ciphertext and confirm decryptVote throws
• Add a tampered authTag test — modify the authTag
  and confirm decryptVote throws
• Add an IV uniqueness test — two calls to encryptVote
  with the same input produce different ciphertexts
• Confirm all four tests pass against the current
  implementation in PR feat: align crypto primitives with @anonvote/crypto type spec #11 before it is merged

Acceptance Criteria:

• Roundtrip test passes
• Tampered ciphertext causes decryptVote to throw
• Tampered authTag causes decryptVote to throw
• Two encryptVote calls with the same input
  produce different ciphertexts
• All four tests added to tests/crypto.test.ts
• All tests pass against the PR feat: align crypto primitives with @anonvote/crypto type spec #11 implementation

[ekwe7]

I would love to work on this issue. I have experience building production ready applications and collaborating through GitHub workflows. I'll carefully analyze the current implementation, propose a reliable solution, and submit a well-tested PR. My focus is on clean code, maintainability, and timely delivery

[aymide1ee]

I would love to take on this issue, kindly assign to me.

[teethaking]

hello maintainer may i work on this issue?
ill submit PR within 1-3 days

[Oluwasuyi-Oluwatimilehin-Daniel]

Hello maintainers I'm a full stack developer experience in building scalable systems I can handle this perfectly if assigned

[lahdlahd]

I have solid experience writing cryptographic test suites for AES-GCM encrypt/decrypt implementations. I can add all four required tests to tests/crypto.test.ts: a roundtrip test confirming decryptVote recovers the exact original string from encryptVote output, a tampered ciphertext test that flips one byte and asserts decryptVote throws, a tampered authTag test that mutates the tag and asserts a throw, and an IV uniqueness test confirming two encryptVote calls on identical input produce different ciphertexts. I'll verify all four pass cleanly against the current PR #11 implementation before it merges, catching any IV handling or authTag format mismatches that would otherwise silently corrupt vote tallies at runtime

[gloskull]

Hello, I have 4 years of experience delivering solutions for projects like this, covering backend, frontend, and smart contract development. After carefully reviewing your requirements, I have a clear understanding of the task and am confident in my ability to deliver a clean, efficient, and thoroughly tested solution on time. I prioritize code quality, maintainability, and industry best practices throughout the development process.
My PR will be submitted in under 10hours.

[grantfox-oss]

🦊 GrantFox — @lahdlahd has been assigned to this issue as part of the Official Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #18)
2. Your PR will be reviewed by the AnonVote maintainers

Good luck! Track your progress on GrantFox.