File: //usr/lib64/python3.9/site-packages/borg/testsuite/__pycache__/key.cpython-39.pyc
a
HZ�h�N � @ s6 d dl Z d dlZd dlZd dlZd dlmZmZ d dlZddl m
Z
m Z m Z ddl m
Z
mZmZmZmZmZmZmZ ddl mZmZ ddl mZmZmZmZ ddl mZ dd l m Z dd
l m Z dd l m Z dd l!m Z dd l!m"Z" dd
l!m#Z# ddl!m$Z$ ddl!m%Z% G dd� d�Z&G dd� d�Z'G dd� d�Z(dS )� N)�hexlify� unhexlify� )�
Passphrase�PasswordRetriesExceeded�
bin_to_hex)� PlaintextKey�
PassphraseKey�AuthenticatedKey�RepoKey�
KeyfileKey�Blake2KeyfileKey�
Blake2RepoKey�Blake2AuthenticatedKey)�ID_HMAC_SHA_256�ID_BLAKE2b_256)�TAMRequiredError�
TAMInvalid�TAMUnsupportedSuiteError�UnsupportedManifestError)�ArchiveTAMInvalid)� identify_key)�
bytes_to_long)�IntegrityError)�Location)�
StableDict)�get_security_dir)�msgpackc @ s e Zd ZG dd� d�Zd�� Zee�ddd��Z ed�Z
d�� Z e �
d �Ze �
d
�Zejd d � �Zejeeeeeeeefd
�dd� �ZG dd� d�Zdd� Z dd� Z dd� Z dd� Z dd� Z d d � Z!d d � Z"d d!� Z#d"d#� Z$d$d%� Z%d&d'� Z&d(d)� Z'd*d+� Z(d,d-� Z)d.d/� Z*d0S )1�TestKeyc @ s e Zd Zee�� d �ZdS )zTestKey.MockArgs� N)�__name__�
__module__� __qualname__r �tempfileZmkstemp�location� r% r% �8/usr/lib64/python3.9/site-packages/borg/testsuite/key.py�MockArgs s r' aU
BORG_KEY 0000000000000000000000000000000000000000000000000000000000000000
hqppdGVyYXRpb25zzgABhqCkaGFzaNoAIMyonNI+7Cjv0qHi0AOBM6bLGxACJhfgzVD2oq
bIS9SFqWFsZ29yaXRobaZzaGEyNTakc2FsdNoAINNK5qqJc1JWSUjACwFEWGTdM7Nd0a5l
1uBGPEb+9XM9p3ZlcnNpb24BpGRhdGHaANAYDT5yfPpU099oBJwMomsxouKyx/OG4QIXK2
hQCG2L2L/9PUu4WIuKvGrsXoP7syemujNfcZws5jLp2UPva4PkQhQsrF1RYDEMLh2eF9Ol
rwtkThq1tnh7KjWMG9Ijt7/aoQtq0zDYP/xaFF8XXSJxiyP5zjH5+spB6RL0oQHvbsliSh
/cXJq7jrqmrJ1phd6dg4SHAM/i+hubadZoS6m25OQzYAW09wZD/phG8OVa698Z5ed3HTaT
SmrtgJL3EoOKgUI9d6BLE4dJdBqntifoz\W� z�
0055f161493fcfc16276e8c31493c4641e1eb19a79d0326fad0291e5a9c98e5933
00000000000003e8d21eaf9b86c297a8cd56432e1915bb
Z@c3fbf14bc001ebcc3cd86e696c13482ed071740927cd7cbe1b01b4bfcee49314ay
BORG_KEY 0000000000000000000000000000000000000000000000000000000000000000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04040404040404098c8cee1c6db8c28947Z@d8bc68e961c79f99be39061589e5179b2113cd9226e07b08ddd4a1fef7ce93fbc C s |� dt|�� |S )NZ
BORG_KEYS_DIR)�setenv�str)�self�request� monkeypatch�tmpdirr% r% r& �keys_dirF s zTestKey.keys_dir)�paramsc C s" |� dd� |j�| �� | �� �S �N�BORG_PASSPHRASE�test)r) Zparam�create�MockRepositoryr' )r+ r, r- r% r% r& �keyK s z TestKey.keyc @ sP e Zd ZG dd� d�Ze� Zed�Zee�Zdd� Z dd� Z
dd � Z d
d � Z d S )
zTestKey.MockRepositoryc @ s e Zd Zd ZZdd� ZdS )z TestKey.MockRepository._Locationz /some/placec C s | j S �N)� processed�r+ r% r% r& �canonical_path] s z/TestKey.MockRepository._Location.canonical_pathN)r r! r" �rawr8 r: r% r% r% r& � _LocationZ s r< � c C s d S r7 r% r9 r% r% r& �get_free_nonced s z%TestKey.MockRepository.get_free_noncec C s d S r7 r% )r+ Znext_unreservedZ start_noncer% r% r& �commit_nonce_reservationg s z/TestKey.MockRepository.commit_nonce_reservationc C s
|| _ d S r7 �Zkey_data)r+ �datar% r% r& �save_keyj s z TestKey.MockRepository.save_keyc C s | j S r7 r@ r9 r% r% r& �load_keym s z TestKey.MockRepository.load_keyN)
r r! r" r< Z _location�bytes�idr �id_strr> r? rB rC r% r% r% r& r5 Y s r5 c C sJ t �d d �}d}t|�|��dks&J �||�|�|�|�|��ksFJ �d S )N� foos@ 2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae)r r4 r �id_hash�decrypt�encrypt)r+ r6 �chunkr% r% r& �test_plaintextp s zTestKey.test_plaintextc C s0 |� dd� t�| �� | �� �}|j�� dks2J �|�d�}|j�|�dksPJ �|�d�}||ksfJ �|� d |�|� d |�ks�J �|j�|�dks�J �|j�|�}t�
| �� |�}|j�� ||j� t |�tj
� ks�J �t |j|j|jh�dks�J �|jdk�sJ �d}||� |�|�|�|��k�s,J �d S )Nr2 r3 r � ABCr � rG )r) r r4 r5 r' �cipher�next_ivrJ �
extract_ivrI �detect� block_count�lenZPAYLOAD_OVERHEAD�id_key�enc_key� enc_hmac_key�
chunk_seedrH ) r+ r- r/ r6 �manifest� manifest2�iv�key2rK r% r% r& � test_keyfilev s
( zTestKey.test_keyfilec C s� |� dd� | �� }ttj�t|j�d�d��}|�d� W d � n1 sN0 Y t �
|| � � �}|� d�}|j
�|�dks�J �|�d |�dks�J �d S )Nr2 r3 Znonce�wZ0000000000002000rM i )r) r5 �open�os�path�joinr rF �writer r4 r' rJ rO rQ rI )r+ r- r/ �
repository�fdr6 rA r% r% r& �&test_keyfile_nonce_rollback_protection� s (
z.TestKey.test_keyfile_nonce_rollback_protectionc C s� |� d�}|�dt|�� |�dd� |�� r2J �t�| �� | �� �}|�� sRJ �d}|�|�}|� |�}t�
| �� |�}||� ||�ks�J �|� � t
�t�� t�
| �� |� W d � n1 s�0 Y d S )N�keyfile�
BORG_KEY_FILEr2 ZtestkfrM )rb r) r* �existsr r4 r5 r' rH rJ rR rI �remove�pytest�raises�FileNotFoundError)r+ r. r- rg r6 rK Zchunk_idZ chunk_cdatar% r% r& �test_keyfile_kfenv� s
zTestKey.test_keyfile_kfenvc C sv |� d��d�� }|�| j� W d � n1 s20 Y |�dd� t�| �� | j�}|� | j
| j�dksrJ �d S �Nrg r^ r2 �
passphrase� payload) rb r_ rc �keyfile2_key_filer) r rR r5 �keyfile2_cdatarI � keyfile2_id�r+ r- r/ re r6 r% r% r& �
test_keyfile2� s
* zTestKey.test_keyfile2c C s� |� d�}|�d�� }|�| j� W d � n1 s60 Y |�dt|�� |�dd� t�| �� | j �}|�
| j | j �dks�J �d S )Nrg r^ rh r2 rp rq ) rb r_ rc rr r) r* r rR r5 rs rI rt )r+ r. r- rg re r6 r% r% r& �test_keyfile2_kfenv� s
* zTestKey.test_keyfile2_kfenvc C sv |� d��d�� }|�| j� W d � n1 s20 Y |�dd� t�| �� | j�}|� | j
| j�dksrJ �d S ro ) rb r_ rc �keyfile_blake2_key_filer) r
rR r5 �keyfile_blake2_cdatarI �keyfile_blake2_idru r% r% r& �test_keyfile_blake2� s
* zTestKey.test_keyfile_blake2c C s� |� dd� t�| �� d �}|j�� dks.J �t|j�dks@J �t|j�dksRJ �t|j �dksdJ �|j
dksrJ �|� d�}|j� |�dks�J �|� d�}||ks�J �|�
d |�|�
d |�ks�J �|j� |�d ks�J �|j� |�}t�| �� |�}|j�� ||j�t|�� k�sJ �|j|jk�s(J �|j|jk�s:J �|j |j k�sLJ �|j
|j
k�s^J �d
}t|�|��d k�szJ �||�
|�|�|� |��k�s�J �d S ) Nr2 r3 r s@ 793b0717f9d8fb01c751a487e9b827897ceea62409870600013fbc6b4d8d7ca6s@ b885a05d329a086627412a6142aaeb9f6c54ab7950f996dd65587251f6bc0901s@ 2ff3654c6daf7381dbbe718d2b20b4f1ea1e34caa6cc65f6bb3ac376b93fed2ai�#��rM r rG s@ 818217cf07d37efad3860766dcdf1d21e401650fed2d76ed1d797d3aae925990)r) r r4 r5 rO rP r rU rW rV rX rJ rQ rI rR rS rT rH ) r+ r/ r- r6 rY rZ r[ r\ rK r% r% r& �test_passphrase� s.
$zTestKey.test_passphrasec C sR t |�}|| dN < t�t�� |�d|� W d � n1 sD0 Y d S )Nr � )� bytearrayrk rl �IntegrityErrorBaserI )r+ r6 rA �offsetr% r% r& �
_corrupt_byte� s zTestKey._corrupt_bytec C s� |� d��d�� }|�| j� W d � n1 s20 Y |�dd� t�| �� | j�}| j}t t
|��D ]}| � |||� qlt �
t��< t| j�}t|�|��}d|d< |�||� W d � n1 s�0 Y d S )Nrg r^ r2 rp r � )rb r_ rc rr r) r rR r5 rs �rangerT r� rk rl r r~ rH rI )r+ r- r/ re r6 rA �irE r% r% r& �test_decrypt_integrity� s *
z TestKey.test_decrypt_integrityc C sR |j }d}|�|�}t|�}||jks*J �|�||�}|�d |�}||ksNJ �d S )NrG )rd rJ r � __class__rR rI )r+ r6 rd � plaintext� encryptedZidentified_key_classZ
loaded_keyZ decryptedr% r% r& �test_roundtrip� s
zTestKey.test_roundtripc C s> d}|� |�}|jd |dd�|ks&J �|�d |�|ks:J �d S )N� 123456789F)�
decompress)rJ rI )r+ r6 r� r� r% r% r& �test_decrypt_decompress� s
z TestKey.test_decrypt_decompressc C s� d}|� |�}|�||� t|�}|d dN < t�t�� |�||� W d � n1 s^0 Y |d }t�t�� |�||� W d � n1 s�0 Y d S )Nr� r r � 1)rH Z assert_idr~ rk rl r )r+ r6 r� rE Z
id_changedZplaintext_changedr% r% r& �test_assert_id� s
* zTestKey.test_assert_idc C sd |� dd� t�| �� | �� �}tjtju s0J �t|j�dksBJ �d}|� |�}|d| ks`J �d S )Nr2 r3 r= r� s )
r) r
r4 r5 r' rH r rT rU rJ �r+ r- r6 r� Z
authenticatedr% r% r& �test_authenticated_encrypt s
z"TestKey.test_authenticated_encryptc C sd |� dd� t�| �� | �� �}tjtju s0J �t|j�dksBJ �d}|� |�}|d| ks`J �d S )Nr2 r3 � r� s )
r) r r4 r5 r' rH r rT rU rJ r� r% r% r& �!test_blake2_authenticated_encrypt s
z)TestKey.test_blake2_authenticated_encryptN)+r r! r" r' �striprr r �re�subrs rt rx rD �fromhexry rz rk �fixturer/ r r
r r r
r r r6 r5 rL r] rf rn rv rw r{ r| r� r� r� r� r� r� r� r% r% r% r& r sH
�
r c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�TestPassphrasec C s� |� tddd� � |�dd� t�� |�� \}}d|vs>J �d|vsJJ �|�dd� t�� }|�� \}}d|vsvJ �d|v s�J �|d ks�J �|� tdd
d� � t�� |�� \}}d |vs�J �d |v s�J �d S ) N�getpassc S s dS )N� 12aöäür% ��promptr% r% r& �<lambda> r} zATestPassphrase.test_passphrase_new_verification.<locals>.<lambda>ZBORG_DISPLAY_PASSPHRASE�noZ12ZyesZ313261c3b6c3a4c3bcr� c S s dS )N�1234/@=r% r� r% r% r& r� * r} r� )�setattrr� r) r �new�
readouterr)r+ �capsysr- �out�errrp r% r% r& � test_passphrase_new_verification s" z/TestPassphrase.test_passphrase_new_verificationc C sp |� dd� |�tddd� � t�t�� tjdd� W d � n1 sJ0 Y |�� \}}d|v slJ �d S )Nr2 Fr� c S s dS )Nr( r% r� r% r% r& r� 2 r} z:TestPassphrase.test_passphrase_new_empty.<locals>.<lambda>)Z allow_emptyzmust not be blank) �delenvr� r� rk rl r r r� r� )r+ r� r- r� r� r% r% r& �test_passphrase_new_empty0 s * z(TestPassphrase.test_passphrase_new_emptyc sd |� dd� ttd��� |�td� fdd�� t�t�� t� � W d � n1 sV0 Y d S )Nr2 F� r� c s t t� ��S r7 )r* �nextr� �Zascending_numbersr% r& r� ; r} z<TestPassphrase.test_passphrase_new_retries.<locals>.<lambda>)
r� �iterr� r� r� rk rl r r r� �r+ r- r% r� r& �test_passphrase_new_retries8 s
z*TestPassphrase.test_passphrase_new_retriesc C s dt td��vsJ �d S )NZsecret)�reprr r9 r% r% r& �test_passphrase_repr? s z#TestPassphrase.test_passphrase_reprN)r r! r" r� r� r� r� r% r% r% r& r� s r� c @ s( e Zd Zejdd� �Zdd� Zdd� Zdd� Zd d
� Z d d � Z
ej � d
i e
fddie
fdefdeff�dd� �Zej � d
i e
fddie
fdefdeff�dd� �Zej j di ed�fed�i fded�fed�dffg d�d�dd� �Zd d � Zd d � Zej � d d!�d"d#� �Zej � d d!�d$d%� �ZdS )&�TestTAMc C s |� dd� t�t�� t�� �S r1 )r) r r4 r r5 r' r� r% r% r& r6 D s z TestTAM.keyc C sv d}t �t�� |�|� W d � n1 s.0 Y d}t �tj�� |�|� W d � n1 sh0 Y d S )Ns
����foobars ���)rk rl r �unpack_and_verify_manifestr ZUnpackException�r+ r6 �blobr% r% r& �test_unpack_futureI s (zTestTAM.test_unpack_futurec C sv t �i �}t�t�� |�|� W d � n1 s40 Y t�t�� |�|� W d � n1 sh0 Y d S r7 )r �packbrk rl r r� �unpack_and_verify_archiver� r% r% r& �test_missing_when_requiredR s
( z"TestTAM.test_missing_when_requiredc C sZ t �i �}d|_|�|�\}}|i ks*J �|r2J �|�|�\}}}|i ksNJ �|rVJ �d S )NF�r r� Z tam_requiredr� r� �r+ r6 r� �unpacked�verified�_r% r% r& � test_missingY s
zTestTAM.test_missingc C s~ t �dddii�}t�t�� |�|� W d � n1 s<0 Y t�t�� |�|� W d � n1 sp0 Y d S )N�tam�type� HMAC_VOLLBIT)r r� rk rl r r� r� r� r% r% r& � test_unknown_type_when_requiredc s �� ( z'TestTAM.test_unknown_type_when_requiredc C sb t �dddii�}d|_|�|�\}}|i ks2J �|r:J �|�|�\}}}|i ksVJ �|r^J �d S )Nr� r� r� Fr� r� r% r% r& �test_unknown_typen s �� zTestTAM.test_unknown_typeztam, excr� � �Ni� c C sF t �d|i�}t�|�� |�|� W d � n1 s80 Y d S �Nr� )r r� rk rl r� �r+ r6 r� �excr� r% r% r& �test_invalid_manifest| s
� z TestTAM.test_invalid_manifestc C sF t �d|i�}t�|�� |�|� W d � n1 s80 Y d S r� )r r� rk rl r� r� r% r% r& �test_invalid_archive� s
� z TestTAM.test_invalid_archivez
hmac, salt�@ )zed-b64zb64-edzn-b64zb64-n)Zidsc C s� dd||d�i}|d }|d u r&|d= |d u r4|d= t �|�}t�t�� |�|� W d � n1 sh0 Y t�t�� |�|� W d � n1 s�0 Y d S )Nr� ZHKDF_HMAC_SHA512)r� �hmac�saltr� r� )r r� rk rl r r� r r� )r+ r6 r� r� rA r� r� r% r% r& �test_wrong_types� s ��
( zTestTAM.test_wrong_typesc C sx ddi}|j |dd�}|�d�s$J �t�|�}|d d dksBJ �|�|�\}}|sXJ �|d d
kshJ �d|vstJ �d S ) N�foo�bar� manifest��context� �� tam� type� HKDF_HMAC_SHA512rG � bar)� pack_and_authenticate_metadata�
startswithr �unpackbr� )r+ r6 rA r� r� r� r% r% r& �test_round_trip_manifest� s
z TestTAM.test_round_trip_manifestc C sz ddi}|j |dd�}|�d�s$J �t�|�}|d d dksBJ �|�|�\}}}|sZJ �|d d
ksjJ �d|vsvJ �d S ) Nr� r� � archiver� r� r� r� r� rG r� )r� r� r r� r� )r+ r6 rA r� r� r� r� r% r% r& �test_round_trip_archive� s
z TestTAM.test_round_trip_archive�which)s hmacs saltc C s� ddi}|j |dd�}|�d�s$J �tj|td�}t|d | �dksJJ �|d | d d
� td
� |d |< t|d | �dks�J �t�|�}t� t
�� |� |� W d � n1 s�0 Y d S ) Nr� r� r� r� r� �Z object_hookr� r� r r= ) r� r� r r� r rT rD r� rk rl r r� �r+ r6 r� rA r� r� r% r% r& �test_tampered_manifest� s $
z TestTAM.test_tampered_manifestc C s� ddi}|j |dd�}|�d�s$J �tj|td�}t|d | �dksJJ �|d | d d
� td
� |d |< t|d | �dks�J �t�|�}t� t
�� |� |� W d � n1 s�0 Y d S ) Nr� r� r� r� r� r� r� r� r r= ) r� r� r r� r rT rD r� rk rl r r� r� r% r% r& �test_tampered_archive� s $
z TestTAM.test_tampered_archive)r r! r" rk r� r6 r� r� r� r� r� ZmarkZ parametrizer r r� r r� rD r� r� r� r� r� r% r% r% r& r� C sH
�
�
��
r� ))r� Zos.pathr` r� r# Zbinasciir r rk Z
crypto.keyr r r r r r
r r r
r r r r r r r r r r Zcrypto.low_levelr r r Zhelpersr r r r r r� r� r% r% r% r& �<module> s. ( )