| Current File : //usr/lib64/python3.6/site-packages/borg/testsuite/__pycache__/key.cpython-36.pyc |
3
up�d�O � @ s. d dl Z d dlZd dlZd dlZd dlmZmZ d dlZddl m
Z
m Z m Z ddl m
Z
mZmZmZmZmZmZmZ ddl mZmZ ddl mZmZmZmZ ddl mZ dd l m Z dd
l m Z m Z dd l m!Z! dd l m"Z" dd
l m#Z# ddl m$Z$ ddl m%Z% G dd� d�Z&G dd� d�Z'G dd� d�Z(dS )� N)�hexlify� unhexlify� )�
Passphrase�PasswordRetriesExceeded�
bin_to_hex)� PlaintextKey�
PassphraseKey�AuthenticatedKey�RepoKey�
KeyfileKey�Blake2KeyfileKey�
Blake2RepoKey�Blake2AuthenticatedKey)�ID_HMAC_SHA_256�ID_BLAKE2b_256)�TAMRequiredError�
TAMInvalid�TAMUnsupportedSuiteError�UnsupportedManifestError)�ArchiveTAMInvalid)� identify_key)�
bytes_to_long�num_aes_blocks)�IntegrityError)�Location)�
StableDict)�get_security_dir)�msgpackc @ s e Zd ZG dd� d�Zdj� Zeejddd��Z ed�Z
dj� Z e j
d �Ze j
d
�Zejd d � �Zejeeeeeeefd
�dd� �ZG dd� d�Zdd� Z dd� Z dd� Z dd� Z dd� Z d d � Z!d d � Z"d d!� Z#d"d#� Z$d$d%� Z%d&d'� Z&d(d)� Z'd*d+� Z(d,d-� Z)d.d/� Z*d0S )1�TestKeyc @ s e Zd Zeej� d �ZdS )zTestKey.MockArgs� N)�__name__�
__module__� __qualname__r �tempfileZmkstemp�location� r& r& �/usr/lib64/python3.6/key.py�MockArgs s r( aU
BORG_KEY 0000000000000000000000000000000000000000000000000000000000000000
hqppdGVyYXRpb25zzgABhqCkaGFzaNoAIMyonNI+7Cjv0qHi0AOBM6bLGxACJhfgzVD2oq
bIS9SFqWFsZ29yaXRobaZzaGEyNTakc2FsdNoAINNK5qqJc1JWSUjACwFEWGTdM7Nd0a5l
1uBGPEb+9XM9p3ZlcnNpb24BpGRhdGHaANAYDT5yfPpU099oBJwMomsxouKyx/OG4QIXK2
hQCG2L2L/9PUu4WIuKvGrsXoP7syemujNfcZws5jLp2UPva4PkQhQsrF1RYDEMLh2eF9Ol
rwtkThq1tnh7KjWMG9Ijt7/aoQtq0zDYP/xaFF8XXSJxiyP5zjH5+spB6RL0oQHvbsliSh
/cXJq7jrqmrJ1phd6dg4SHAM/i+hubadZoS6m25OQzYAW09wZD/phG8OVa698Z5ed3HTaT
SmrtgJL3EoOKgUI9d6BLE4dJdBqntifoz\W� z�
0055f161493fcfc16276e8c31493c4641e1eb19a79d0326fad0291e5a9c98e5933
00000000000003e8d21eaf9b86c297a8cd56432e1915bb
Z@c3fbf14bc001ebcc3cd86e696c13482ed071740927cd7cbe1b01b4bfcee49314ay
BORG_KEY 0000000000000000000000000000000000000000000000000000000000000000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04040404040404098c8cee1c6db8c28947Z@d8bc68e961c79f99be39061589e5179b2113cd9226e07b08ddd4a1fef7ce93fbc C s |j dt|�� |S )NZ
BORG_KEYS_DIR)�setenv�str)�self�request� monkeypatch�tmpdirr& r& r' �keys_dirE s zTestKey.keys_dir)Zparamsc C s" |j dd� |jj| j� | j� �S )N�BORG_PASSPHRASE�test)r* Zparam�create�MockRepositoryr( )r, r- r. r& r& r' �keyJ s
z TestKey.keyc @ sP e Zd ZG dd� d�Ze� Zed�Zee�Zdd� Z dd� Z
dd � Z d
d � Z d S )
zTestKey.MockRepositoryc @ s e Zd Zd ZZdd� ZdS )z TestKey.MockRepository._Locationz /some/placec C s | j S )N)� processed)r, r& r& r' �canonical_path[ s z/TestKey.MockRepository._Location.canonical_pathN)r! r" r# �rawr6 r7 r& r& r& r' � _LocationX s r9 � c C s d S )Nr& )r, r& r& r' �get_free_nonceb s z%TestKey.MockRepository.get_free_noncec C s d S )Nr& )r, Znext_unreservedZ start_noncer& r& r' �commit_nonce_reservatione s z/TestKey.MockRepository.commit_nonce_reservationc C s
|| _ d S )N)�key_data)r, �datar& r& r' �save_keyh s z TestKey.MockRepository.save_keyc C s | j S )N)r= )r, r& r& r' �load_keyk s z TestKey.MockRepository.load_keyN)
r! r" r# r9 Z _location�bytes�idr �id_strr; r< r? r@ r& r& r& r' r4 W s r4 c C sJ t jd d �}d}t|j|��dks&t�||j|j|�|j|��ksFt�d S )Ns foos@ 2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae)r r3 r �id_hash�AssertionError�decrypt�encrypt)r, r5 �chunkr& r& r' �test_plaintextn s zTestKey.test_plaintextc C s. |j dd� tj| j� | j� �}t|jjd�dks6t�|j d�}|j
|�dksRt�|j d�}||ksht�|j d |�|j d |�ks�t�|j
|�dks�t�|j
|�}tj | j� |�}t|jjd�|t
t|�tj � ks�t�t|j|j|jh�dks�t�|jdk�st�d}||j |j|�|j |��k�s*t�d S ) Nr1 r2 � r s ABCr � s foo)r* r r3 r4 r( r �
enc_cipher�ivrE rG �
extract_noncerF �detectr �len�PAYLOAD_OVERHEAD�id_key�enc_key� enc_hmac_key�
chunk_seedrD ) r, r. r0 r5 �manifest� manifest2rM �key2rH r& r& r' � test_keyfilet s
( zTestKey.test_keyfilec
C s� |j dd� | j� }ttjjt|j�d�d��}|jd� W d Q R X t j
|| j � �}|j d�}|j
|�dkspt�|jd |�dks�t�d S )Nr1 r2 Znonce�wZ0000000000002000s ABCi )r* r4 �open�os�path�joinr rC �writer r3 r( rG rN rE rF )r, r. r0 �
repository�fdr5 r> r& r& r' �&test_keyfile_nonce_rollback_protection� s
z.TestKey.test_keyfile_nonce_rollback_protectionc
C s� |j d�}|jdt|�� |jdd� |j� s4t�tj| j� | j� �}|j� sTt�d}|j |�}|j
|�}tj | j� |�}||j ||�ks�t�|j
� tjt�� tj | j� |� W d Q R X d S )N�keyfile�
BORG_KEY_FILEr1 Ztestkfs ABC)r^ r* r+ �existsrE r r3 r4 r( rD rG rO rF �remove�pytest�raises�FileNotFoundError)r, r/ r. rc r5 rH Zchunk_idZ chunk_cdatar& r& r' �test_keyfile_kfenv� s
zTestKey.test_keyfile_kfenvc
C sb |j d�jd��}|j| j� W d Q R X |jdd� tj| j� | j�}|j | j
| j�dks^t �d S )Nrc rZ r1 �
passphrases payload) r^ r[ r_ �keyfile2_key_filer* r rO r4 �keyfile2_cdatarF � keyfile2_idrE )r, r. r0 ra r5 r& r& r' �
test_keyfile2� s
zTestKey.test_keyfile2c C sv |j d�}|jd��}|j| j� W d Q R X |jdt|�� |jdd� tj| j� | j �}|j
| j | j �dksrt �d S )Nrc rZ rd r1 rk s payload)
r^ r[ r_ rl r* r+ r rO r4 rm rF rn rE )r, r/ r. rc ra r5 r& r& r' �test_keyfile2_kfenv� s
zTestKey.test_keyfile2_kfenvc
C sb |j d�jd��}|j| j� W d Q R X |jdd� tj| j� | j�}|j | j
| j�dks^t �d S )Nrc rZ r1 rk s payload) r^ r[ r_ �keyfile_blake2_key_filer* r
rO r4 �keyfile_blake2_cdatarF �keyfile_blake2_idrE )r, r. r0 ra r5 r& r& r' �test_keyfile_blake2� s
zTestKey.test_keyfile_blake2c C s� |j dd� tj| j� d �}t|jjd�dks2t�t|j �dksDt�t|j
�dksVt�t|j �dksht�|j d
ksvt�|j
d �}|j|�dks�t�|j
d �}||ks�t�|jd |�|jd |�ks�t�|j|�d
ks�t�|j|�}tj| j� |�}t|jjd�|tt|�tj � k�st�|j |j k�s,t�|j
|j
k�s>t�|j |j k�sPt�|j |j k�sbt�d }t|j|��d k�s~t�||j|j|�|j
|��k�s�t�d S )Nr1 r2 rJ r s@ 793b0717f9d8fb01c751a487e9b827897ceea62409870600013fbc6b4d8d7ca6s@ b885a05d329a086627412a6142aaeb9f6c54ab7950f996dd65587251f6bc0901s@ 2ff3654c6daf7381dbbe718d2b20b4f1ea1e34caa6cc65f6bb3ac376b93fed2ai=�<.s ABCr s foos@ 818217cf07d37efad3860766dcdf1d21e401650fed2d76ed1d797d3aae925990i�#��)r* r r3 r4 r rL rM rE r rR rT rS rU rG rN rF rO r rP rQ rD ) r, r0 r. r5 rV rW rM rX rH r& r& r' �test_passphrase� s.
*zTestKey.test_passphrasec
C s> t |�}|| dN < tjt�� |jd|� W d Q R X d S )Nr � )� bytearrayrg rh r rF )r, r5 r> �offsetr& r& r' �
_corrupt_byte� s zTestKey._corrupt_bytec C s� |j d�jd��}|j| j� W d Q R X |jdd� tj| j� | j�}| j}x"t t
|��D ]}| j |||� qZW t j
t��2 t| j�}t|j|��}d|d< |j||� W d Q R X d S )Nrc rZ r1 rk r � )r^ r[ r_ rl r* r rO r4 rm �rangerP ry rg rh r rw rD rF )r, r. r0 ra r5 r> �irB r& r& r' �test_decrypt_integrity� s
z TestKey.test_decrypt_integrityc C sR |j }d}|j|�}t|�}||jks*t�|j||�}|jd |�}||ksNt�d S )Ns foo)r` rG r � __class__rE rO rF )r, r5 r` � plaintext� encryptedZidentified_key_classZ
loaded_keyZ decryptedr& r& r' �test_roundtrip� s
zTestKey.test_roundtripc C s> d}|j |�}|jd |dd�|ks&t�|jd |�|ks:t�d S )Ns 123456789F)Z
decompress)rG rF rE )r, r5 r r� r& r& r' �test_decrypt_decompress� s
z TestKey.test_decrypt_decompressc C s� d}|j |�}|j||� t|�}|d dN < tjt�� |j||� W d Q R X |d }tjt�� |j||� W d Q R X d S )Ns 123456789r r � 1)rD Z assert_idrw rg rh r )r, r5 r rB Z
id_changedZplaintext_changedr& r& r' �test_assert_id� s
zTestKey.test_assert_idc C sd |j dd� tj| j� | j� �}tjtjks0t�t|j �dksBt�d}|j
|�}|d| ks`t�d S )Nr1 r2 r: s 123456789s �) r* r
r3 r4 r( rD r rE rP rR rG )r, r. r5 r �
authenticatedr& r& r' �test_authenticated_encrypt s
z"TestKey.test_authenticated_encryptc C sd |j dd� tj| j� | j� �}tjtjks0t�t|j �dksBt�d}|j
|�}|d| ks`t�d S )Nr1 r2 � s 123456789s �) r* r r3 r4 r( rD r rE rP rR rG )r, r. r5 r r� r& r& r' �!test_blake2_authenticated_encrypt s
z)TestKey.test_blake2_authenticated_encryptN)+r! r" r# r( �striprl r �re�subrm rn rq rA �fromhexrr rs rg �fixturer0 r r
r r r
r r r5 r4 rI rY rb rj ro rp rt ru ry r} r� r� r� r� r� r& r& r& r' r sB
r c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�TestPassphrasec C s� |j tddd� � |jdd� tj� |j� \}}d|ks>t�d|ksJt�|jdd� tj� }|j� \}}d|ksvt�d|ks�t�|d ks�t�|j tdd
d� � tj� |j� \}}d |ks�t�d |ks�t�d S ) N�getpassc S s dS )Nu 12aöäür& )�promptr& r& r' �<lambda> s zATestPassphrase.test_passphrase_new_verification.<locals>.<lambda>ZBORG_DISPLAY_PASSPHRASE�noZ12�yesZ313261c3b6c3a4c3bcu 12aöäüc S s dS )Nz1234/@=r& )r� r& r& r' r� * s z1234/@=)�setattrr� r* r �new�
readouterrrE )r, �capsysr. �out�errrk r& r& r' � test_passphrase_new_verification s" z/TestPassphrase.test_passphrase_new_verificationc
C s\ |j dd� |jtddd� � tjt�� tjdd� W d Q R X |j� \}}d|ksXt �d S )Nr1 Fr� c S s dS )Nr) r& )r� r& r& r' r� 2 s z:TestPassphrase.test_passphrase_new_empty.<locals>.<lambda>)Z allow_emptyzmust not be blank)
�delenvr� r� rg rh r r r� r� rE )r, r� r. r� r� r& r& r' �test_passphrase_new_empty0 s z(TestPassphrase.test_passphrase_new_emptyc sP |j dd� ttd��� |jtd� fdd�� tjt�� tj � W d Q R X d S )Nr1 F� r� c s t t� ��S )N)r+ �next)r� )�ascending_numbersr& r' r� ; s z<TestPassphrase.test_passphrase_new_retries.<locals>.<lambda>)
r� �iterr{ r� r� rg rh r r r� )r, r. r& )r� r' �test_passphrase_new_retries8 s
z*TestPassphrase.test_passphrase_new_retriesc C s dt td��kst�d S )NZsecret)�reprr rE )r, r& r& r' �test_passphrase_repr? s z#TestPassphrase.test_passphrase_reprN)r! r" r# r� r� r� r� r& r& r& r' r� s r� c @ s e Zd Zejdd� �Zdd� Zdd� Zdd� Zd d
� Z d d � Z
ej j d
i e
fddie
fdefdeff�dd� �Zej j d
i e
fddie
fdefdeff�dd� �Zej j di ed�fed�i fded�fed�dff�dd� �Zdd� Zd d � Zej j d d%�d!d"� �Zej j d d&�d#d$� �ZdS )'�TestTAMc C s |j dd� tjtj� tj� �S )Nr1 r2 )r* r r3 r r4 r( )r, r. r& r& r' r5 D s z TestTAM.keyc C sR d}t jt�� |j|� W d Q R X d}t jttjf�� |j|� W d Q R X d S )Ns
����foobars ���)rg rh r �unpack_and_verify_manifest�
ValueErrorr ZUnpackException)r, r5 �blobr& r& r' �test_unpack_futureI s zTestTAM.test_unpack_futurec C sN t ji �}tjt�� |j|� W d Q R X tjt�� |j|� W d Q R X d S )N)r �packbrg rh r r� �unpack_and_verify_archive)r, r5 r� r& r& r' �test_missing_when_requiredR s
z"TestTAM.test_missing_when_requiredc C s^ t ji �}d|_|j|�\}}|i ks*t�| s4t�|j|�\}}}|i ksPt�| sZt�d S )NF)r r� � tam_requiredr� rE r� )r, r5 r� �unpacked�verified�_r& r& r' � test_missingY s
zTestTAM.test_missingc C sV t jdddii�}tjt�� |j|� W d Q R X tjt�� |j|� W d Q R X d S )N�tam�type� HMAC_VOLLBIT)r r� rg rh r r� r� )r, r5 r� r& r& r' � test_unknown_type_when_requiredc s z'TestTAM.test_unknown_type_when_requiredc C sf t jdddii�}d|_|j|�\}}|i ks2t�| s<t�|j|�\}}}|i ksXt�| sbt�d S )Nr� r� r� F)r r� r� r� rE r� )r, r5 r� r� r� r� r& r& r' �test_unknown_typen s
zTestTAM.test_unknown_typeztam, excr� � �Ni� c C s2 t jd|i�}tj|�� |j|� W d Q R X d S )Nr� )r r� rg rh r� )r, r5 r� �excr� r& r& r' �test_invalid_manifest| s
z TestTAM.test_invalid_manifestc C s2 t jd|i�}tj|�� |j|� W d Q R X d S )Nr� )r r� rg rh r� )r, r5 r� r� r� r& r& r' �test_invalid_archive� s
z TestTAM.test_invalid_archivez
hmac, salt�@ c C s� dd||d�i}|d }|d kr&|d= |d kr4|d= t j|�}tjt�� |j|� W d Q R X tjt�� |j|� W d Q R X d S )Nr� ZHKDF_HMAC_SHA512)r� �hmac�saltr� r� )r r� rg rh r r� r r� )r, r5 r� r� r> r� r� r& r& r' �test_wrong_types� s
zTestTAM.test_wrong_typesc C sx ddi}|j |dd�}|jd�s$t�tj|�}|d d dksBt�|j|�\}}|sXt�|d d
ksht�d|kstt�d S ) N�foo�bars manifest)�context� �s tams types HKDF_HMAC_SHA512s foos bar)� pack_and_authenticate_metadata�
startswithrE r �unpackbr� )r, r5 r> r� r� r� r& r& r' �test_round_trip_manifest� s
z TestTAM.test_round_trip_manifestc C sz ddi}|j |dd�}|jd�s$t�tj|�}|d d dksBt�|j|�\}}}|sZt�|d d
ksjt�d|ksvt�d S ) Nr� r� s archive)r� r� s tams types HKDF_HMAC_SHA512s foos bar)r� r� rE r r� r� )r, r5 r> r� r� r� r� r& r& r' �test_round_trip_archive� s
z TestTAM.test_round_trip_archive�which� hmac� saltc C s� ddi}|j |dd�}|jd�s$t�tj|td�}t|d | �dksJt�|d | d d
� td
� |d |< t|d | �dks�t�tj|�}t j
t �� |j |� W d Q R X d S ) Nr� r� s manifest)r� r� )� object_hooks tamr� r r: )
r� r� rE r r� r rP rA r� rg rh r r� )r, r5 r� r> r� r� r& r& r' �test_tampered_manifest� s $
z TestTAM.test_tampered_manifestc C s� ddi}|j |dd�}|jd�s$t�tj|td�}t|d | �dksJt�|d | d d
� td
� |d |< t|d | �dks�t�tj|�}t j
t �� |j |� W d Q R X d S ) Nr� r� s archive)r� r� )r� s tamr� r r: )
r� r� rE r r� r rP rA r� rg rh r r� )r, r5 r� r> r� r� r& r& r' �test_tampered_archive� s $
z TestTAM.test_tampered_archive)r� r� )r� r� )r! r" r# rg r� r5 r� r� r� r� r� ZmarkZ parametrizer r r� r r� rA r� r� r� r� r� r& r& r& r' r� C s2
r� ))r� Zos.pathr\ r� r$ Zbinasciir r rg Z
crypto.keyr r r r r r
r r r
r r r r r r r r r r Zcrypto.low_levelr r Zhelpersr r r r r r r� r� r& r& r& r' �<module> s, ( )