[Sync] Add intelligent re-encryption support.

chrome/browser/sync/util/cryptographer_unittest.cc

Index: chrome/browser/sync/util/cryptographer_unittest.cc
diff --git a/chrome/browser/sync/util/cryptographer_unittest.cc b/chrome/browser/sync/util/cryptographer_unittest.cc
index 73e389179a8ac578f5acaa0a8f5d34cbdb7dfcdd..8d68a43b6ce18df537f995e8021391027a970112 100644
--- a/chrome/browser/sync/util/cryptographer_unittest.cc
+++ b/chrome/browser/sync/util/cryptographer_unittest.cc
@@ -85,6 +85,35 @@ TEST(CryptographerTest, CanEncryptAndDecrypt) {
   EXPECT_EQ(original.SerializeAsString(), decrypted.SerializeAsString());
 }
 
+TEST(CryptographerTest, EncryptIfDifferent) {
+  Cryptographer cryptographer;
+
+  KeyParams params = {"localhost", "dummy", "dummy"};
+  EXPECT_TRUE(cryptographer.AddKey(params));
+  EXPECT_TRUE(cryptographer.is_ready());
+
+  sync_pb::PasswordSpecificsData original;
+  original.set_origin("http://example.com");
+  original.set_username_value("azure");
+  original.set_password_value("hunter2");
+
+  sync_pb::EncryptedData encrypted;
+  EXPECT_TRUE(cryptographer.Encrypt(original, &encrypted));
+
+  sync_pb::EncryptedData encrypted2, encrypted3;
+  encrypted2.CopyFrom(encrypted);
+  encrypted3.CopyFrom(encrypted);
+  EXPECT_TRUE(cryptographer.EncryptIfDifferent(original, &encrypted2));
+  EXPECT_TRUE(cryptographer.Encrypt(original, &encrypted3));
+
+  sync_pb::PasswordSpecificsData decrypted;
+  EXPECT_TRUE(cryptographer.Decrypt(encrypted2, &decrypted));
+  // encrypted2 should match encrypted, encrypted3 should not (due to salting).
+  EXPECT_EQ(encrypted.SerializeAsString(), encrypted2.SerializeAsString());
+  EXPECT_NE(encrypted.SerializeAsString(), encrypted3.SerializeAsString());
+  EXPECT_EQ(original.SerializeAsString(), decrypted.SerializeAsString());
+}
+
 TEST(CryptographerTest, AddKeySetsDefault) {
   Cryptographer cryptographer;