]>
git.ipfire.org Git - thirdparty/systemd.git/blob - src/test/test-libcrypt-util.c
f544a0003eaea3eb7bc1b696001ca3e92d6a2255
1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
9 #include "libcrypt-util.h"
13 static void test_crypt_preferred_method(void) {
14 log_info("/* %s */", __func__
);
16 log_info("crypt_preferred_method: %s",
17 #if HAVE_CRYPT_PREFERRED_METHOD
18 crypt_preferred_method()
25 static void test_make_salt(void) {
26 log_info("/* %s */", __func__
);
28 for (int i
= 0; i
< 10; i
++) {
29 _cleanup_free_
char *t
;
31 assert_se(make_salt(&t
) == 0);
36 static int test_hash_password(void) {
37 log_info("/* %s */", __func__
);
39 /* As a warm-up exercise, check if we can hash passwords. */
41 bool have_sane_hash
= false;
45 "$1$gc5rWpTB$wK1aul1PyBn9AX1z93stk1",
46 "$2b$12$BlqcGkB/7BFvNMXKGxDea.5/8D6FTny.cbNcHW/tqcrcyo6ZJd8u2",
47 "$5$lGhDrcrao9zb5oIK$05KlOVG3ocknx/ThreqXE/gk.XzFFBMTksc4t2CPDUD",
48 "$6$c7wB/3GiRk0VHf7e$zXJ7hN0aLZapE.iO4mn/oHu6.prsXTUG/5k1AxpgR85ELolyAcaIGRgzfwJs3isTChMDBjnthZyaMCfCNxo9I.",
49 "$y$j9T$$9cKOWsAm4m97WiYk61lPPibZpy3oaGPIbsL4koRe/XD") {
52 b
= test_password_one(hash
, "ppp");
53 log_info("%s: %s", hash
, yes_no(b
));
54 #if defined(XCRYPT_VERSION_MAJOR)
55 /* xcrypt is supposed to always implement all methods. */
59 if (b
&& IN_SET(hash
[1], '6', 'y'))
60 have_sane_hash
= true;
63 return have_sane_hash
;
66 static void test_hash_password_full(void) {
67 log_info("/* %s */", __func__
);
69 _cleanup_free_
void *cd_data
= NULL
;
72 log_info("sizeof(struct crypt_data): %zu bytes", sizeof(struct crypt_data
));
74 for (unsigned c
= 0; c
< 2; c
++)
75 FOREACH_STRING(i
, "abc123", "h⸿sło") {
76 _cleanup_free_
char *hashed
;
79 assert_se(hash_password_full(i
, &cd_data
, &cd_size
, &hashed
) == 0);
81 assert_se(hash_password_full(i
, NULL
, NULL
, &hashed
) == 0);
82 log_debug("\"%s\" → \"%s\"", i
, hashed
);
83 log_info("crypt_r[a] buffer size: %i bytes", cd_size
);
85 assert_se(test_password_one(hashed
, i
) == true);
86 assert_se(test_password_one(i
, hashed
) <= 0); /* We get an error for non-utf8 */
87 assert_se(test_password_one(hashed
, "foobar") == false);
88 assert_se(test_password_many(STRV_MAKE(hashed
), i
) == true);
89 assert_se(test_password_many(STRV_MAKE(hashed
), "foobar") == false);
90 assert_se(test_password_many(STRV_MAKE(hashed
, hashed
, hashed
), "foobar") == false);
91 assert_se(test_password_many(STRV_MAKE("$y$j9T$dlCXwkX0GC5L6B8Gf.4PN/$VCyEH",
93 "$y$j9T$SAayASazWZIQeJd9AS02m/$"),
95 assert_se(test_password_many(STRV_MAKE("$W$j9T$dlCXwkX0GC5L6B8Gf.4PN/$VCyEH", /* no such method exists... */
97 "$y$j9T$SAayASazWZIQeJd9AS02m/$"),
99 assert_se(test_password_many(STRV_MAKE("$y$j9T$dlCXwkX0GC5L6B8Gf.4PN/$VCyEH",
101 "$y$j9T$SAayASazWZIQeJd9AS02m/$"),
103 assert_se(test_password_many(STRV_MAKE("$W$j9T$dlCXwkX0GC5L6B8Gf.4PN/$VCyEH", /* no such method exists... */
105 "$y$j9T$SAayASazWZIQeJd9AS02m/$"),
110 int main(int argc
, char *argv
[]) {
111 test_setup_logging(LOG_DEBUG
);
113 #if defined(__powerpc__) && !defined(XCRYPT_VERSION_MAJOR)
114 return log_tests_skipped("crypt_r() causes a buffer overflow on ppc64el, see https://github.com/systemd/systemd/pull/16981#issuecomment-691203787");
117 test_crypt_preferred_method();
120 if (!test_hash_password())
121 return log_tests_skipped("crypt doesn't support yescrypt or sha512crypt");
123 test_hash_password_full();