1 /* $OpenBSD: bcrypt_pbkdf_test.c,v 1.7 2014/08/10 16:36:13 tedu Exp $ */
2 /*
3 * Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
4 *
5 * Permission to use, copy, modify, and distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
8 *
9 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 */
17
18 #include <stdint.h>
19 #include <stdio.h>
20 #include <string.h>
21
22 #include <util.h>
23
24 struct test {
25 int rounds;
26 size_t passlen;
27 const char *password;
28 size_t saltlen;
29 const uint8_t *salt;
30 size_t keylen;
31 const uint8_t *key;
32 };
33
34 struct test tests[] = {
35 /* basic */
36 { 4, 8, "password", 4, "salt", 32,
37 "\x5b\xbf\x0c\xc2\x93\x58\x7f\x1c\x36\x35\x55\x5c\x27\x79\x65\x98"
38 "\xd4\x7e\x57\x90\x71\xbf\x42\x7e\x9d\x8f\xbe\x84\x2a\xba\x34\xd9"
39 },
40 { 4, 8, "password", 1, "", 16,
41 "\xc1\x2b\x56\x62\x35\xee\xe0\x4c\x21\x25\x98\x97\x0a\x57\x9a\x67"
42 },
43 { 4, 1, "", 4, "salt", 16,
44 "\x60\x51\xbe\x18\xc2\xf4\xf8\x2c\xbf\x0e\xfe\xe5\x47\x1b\x4b\xb9"
45 },
46 /* nul bytes in password and string */
47 { 4, 9, "password", 5, "salt", 32,
48 "\x74\x10\xe4\x4c\xf4\xfa\x07\xbf\xaa\xc8\xa9\x28\xb1\x72\x7f\xac"
49 "\x00\x13\x75\xe7\xbf\x73\x84\x37\x0f\x48\xef\xd1\x21\x74\x30\x50"
50 },
51 { 4, 8, "pass\0word", 4, "sa\0lt", 16,
52 "\xc2\xbf\xfd\x9d\xb3\x8f\x65\x69\xef\xef\x43\x72\xf4\xde\x83\xc0"
53 },
54 { 4, 9, "pass\0word", 5, "sa\0lt", 16,
55 "\x4b\xa4\xac\x39\x25\xc0\xe8\xd7\xf0\xcd\xb6\xbb\x16\x84\xa5\x6f"
56 },
57 /* bigger key */
58 { 8, 8, "password", 4, "salt", 64,
59 "\xe1\x36\x7e\xc5\x15\x1a\x33\xfa\xac\x4c\xc1\xc1\x44\xcd\x23\xfa"
60 "\x15\xd5\x54\x84\x93\xec\xc9\x9b\x9b\x5d\x9c\x0d\x3b\x27\xbe\xc7"
61 "\x62\x27\xea\x66\x08\x8b\x84\x9b\x20\xab\x7a\xa4\x78\x01\x02\x46"
62 "\xe7\x4b\xba\x51\x72\x3f\xef\xa9\xf9\x47\x4d\x65\x08\x84\x5e\x8d"
63 },
64 /* more rounds */
65 { 42, 8, "password", 4, "salt", 16,
66 "\x83\x3c\xf0\xdc\xf5\x6d\xb6\x56\x08\xe8\xf0\xdc\x0c\xe8\x82\xbd"
67 },
68 /* longer password */
69 { 8, 446,
70 "Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do "
71 "eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut "
72 "enim ad minim veniam, quis nostrud exercitation ullamco laboris "
73 "nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor "
74 "in reprehenderit in voluptate velit esse cillum dolore eu fugiat "
75 "nulla pariatur. Excepteur sint occaecat cupidatat non proident, "
76 "sunt in culpa qui officia deserunt mollit anim id est laborum.",
77 6, "salis", 16,
78 "\x10\x97\x8b\x07\x25\x3d\xf5\x7f\x71\xa1\x62\xeb\x0e\x8a\xd3\x0a"
79 },
80 /* "unicode" */
81 { 8,
82 16, "\x0d\xb3\xac\x94\xb3\xee\x53\x28\x4f\x4a\x22\x89\x3b\x3c\x24\xae",
83 16, "\x3a\x62\xf0\xf0\xdb\xce\xf8\x23\xcf\xcc\x85\x48\x56\xea\x10\x28",
84 16, "\x20\x44\x38\x17\x5e\xee\x7c\xe1\x36\xc9\x1b\x49\xa6\x79\x23\xff"
85 },
86 /* very large key */
87 { 8,
88 16, "\x0d\xb3\xac\x94\xb3\xee\x53\x28\x4f\x4a\x22\x89\x3b\x3c\x24\xae",
89 16, "\x3a\x62\xf0\xf0\xdb\xce\xf8\x23\xcf\xcc\x85\x48\x56\xea\x10\x28",
90 256,
91 "\x20\x54\xb9\xff\xf3\x4e\x37\x21\x44\x03\x34\x74\x68\x28\xe9\xed"
92 "\x38\xde\x4b\x72\xe0\xa6\x9a\xdc\x17\x0a\x13\xb5\xe8\xd6\x46\x38"
93 "\x5e\xa4\x03\x4a\xe6\xd2\x66\x00\xee\x23\x32\xc5\xed\x40\xad\x55"
94 "\x7c\x86\xe3\x40\x3f\xbb\x30\xe4\xe1\xdc\x1a\xe0\x6b\x99\xa0\x71"
95 "\x36\x8f\x51\x8d\x2c\x42\x66\x51\xc9\xe7\xe4\x37\xfd\x6c\x91\x5b"
96 "\x1b\xbf\xc3\xa4\xce\xa7\x14\x91\x49\x0e\xa7\xaf\xb7\xdd\x02\x90"
97 "\xa6\x78\xa4\xf4\x41\x12\x8d\xb1\x79\x2e\xab\x27\x76\xb2\x1e\xb4"
98 "\x23\x8e\x07\x15\xad\xd4\x12\x7d\xff\x44\xe4\xb3\xe4\xcc\x4c\x4f"
99 "\x99\x70\x08\x3f\x3f\x74\xbd\x69\x88\x73\xfd\xf6\x48\x84\x4f\x75"
100 "\xc9\xbf\x7f\x9e\x0c\x4d\x9e\x5d\x89\xa7\x78\x39\x97\x49\x29\x66"
101 "\x61\x67\x07\x61\x1c\xb9\x01\xde\x31\xa1\x97\x26\xb6\xe0\x8c\x3a"
102 "\x80\x01\x66\x1f\x2d\x5c\x9d\xcc\x33\xb4\xaa\x07\x2f\x90\xdd\x0b"
103 "\x3f\x54\x8d\x5e\xeb\xa4\x21\x13\x97\xe2\xfb\x06\x2e\x52\x6e\x1d"
104 "\x68\xf4\x6a\x4c\xe2\x56\x18\x5b\x4b\xad\xc2\x68\x5f\xbe\x78\xe1"
105 "\xc7\x65\x7b\x59\xf8\x3a\xb9\xab\x80\xcf\x93\x18\xd6\xad\xd1\xf5"
106 "\x93\x3f\x12\xd6\xf3\x61\x82\xc8\xe8\x11\x5f\x68\x03\x0a\x12\x44"
107 },
108 };
109
110 void
printkey(const uint8_t * key,size_t keylen)111 printkey(const uint8_t *key, size_t keylen)
112 {
113 int k;
114
115 for (k = 0; k < keylen; k++) {
116 printf("\\x%.2x", key[k]);
117 if (k % 16 == 15)
118 printf("\n");
119 }
120 printf("\n");
121 }
122
123 int
main()124 main()
125 {
126 uint8_t key[1024];
127 char *password = "password";
128 char *salt = "salt";
129 int i, fails;
130 struct test *t;
131
132 fails = 0;
133
134 memset(key, 0, 1024);
135 bcrypt_pbkdf("password", 8, "salt", 4, key, 88, 4);
136 if (key[88] || key[89] || key[90]) {
137 printf("OVERWRITE\n");
138 fails++;
139 }
140
141 for (i = 0; i < sizeof(tests) / sizeof(tests[0]); i++) {
142 t = &tests[i];
143 bcrypt_pbkdf(t->password, t->passlen, t->salt, t->saltlen,
144 key, t->keylen, t->rounds);
145 if (memcmp(key, t->key, t->keylen) != 0) {
146 printf("test %d FAILED\n", i);
147 printf("expected:\n");
148 printkey(t->key, t->keylen);
149 printf("result:\n");
150 printkey(key, t->keylen);
151 fails++;
152 }
153 }
154 return fails;
155 }
156