51 lines
1.3 KiB
Crystal
51 lines
1.3 KiB
Crystal
require "../spec_helper"
|
|
|
|
private def pw_min
|
|
pwhash = Cox::Pwhash.new
|
|
|
|
# set to minimum to speed up tests
|
|
pwhash.memlimit = Cox::Pwhash::MEMLIMIT_MIN
|
|
pwhash.opslimit = Cox::Pwhash::OPSLIMIT_MIN
|
|
pwhash
|
|
end
|
|
|
|
describe Cox::Pwhash do
|
|
it "hashes and verifies a password" do
|
|
pwhash = pw_min
|
|
|
|
pass = "1234"
|
|
hash = pwhash.store pass
|
|
pwhash.verify hash, pass
|
|
expect_raises(Cox::Pwhash::PasswordVerifyError) do
|
|
pwhash.verify hash, "5678"
|
|
end
|
|
|
|
pwhash.needs_rehash?(hash).should be_false
|
|
pwhash.opslimit = Cox::Pwhash::OPSLIMIT_MAX
|
|
pwhash.needs_rehash?(hash).should be_true
|
|
end
|
|
|
|
it "key_derive fails without an algorithm" do
|
|
pwhash = pw_min
|
|
expect_raises(ArgumentError) do
|
|
pwhash.key_derive pwhash.salt, "foo", 16
|
|
end
|
|
end
|
|
|
|
it "derives a key from a password" do
|
|
pwhash = pw_min
|
|
pwhash.algorithm = Cox::Pwhash::Algorithm::Argon2id13
|
|
salt = pwhash.salt
|
|
key1 = pwhash.key_derive salt, "foo", 16
|
|
key2 = pwhash.key_derive salt, "foo", 16
|
|
key3 = pwhash.key_derive salt, "bar", 16
|
|
key4 = pwhash.key_derive pwhash.salt, "foo", 16
|
|
|
|
key1.bytesize.should eq 16
|
|
key1.should eq key2
|
|
key1.should_not eq key3
|
|
key1.should_not eq key4
|
|
# BUG: validate against known passwords
|
|
end
|
|
end
|