From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Mon, 20 Sep 2021 03:10:35 +0000 (+1200)
Subject: tests/krb5: Add classes for testing invalid checksums
X-Git-Tag: ldb-2.5.0~560
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5b331443d0698256ee7fcc040a1ab8137efe925d;p=thirdparty%2Fsamba.git

tests/krb5: Add classes for testing invalid checksums

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Sep 23 19:28:44 UTC 2021 on sn-devel-184
---

diff --git a/python/samba/tests/krb5/raw_testcase.py b/python/samba/tests/krb5/raw_testcase.py
index cadf2b50dc9..579d52b3e92 100644
--- a/python/samba/tests/krb5/raw_testcase.py
+++ b/python/samba/tests/krb5/raw_testcase.py
@@ -303,6 +303,29 @@ class RodcPacEncryptionKey(Krb5EncryptionKey):
                                 cksum)
 
 
+class ZeroedChecksumKey(Krb5EncryptionKey):
+    def make_checksum(self, usage, plaintext, ctype=None):
+        return self.make_zeroed_checksum(ctype)
+
+
+class WrongLengthChecksumKey(Krb5EncryptionKey):
+    def __init__(self, key, kvno, length):
+        super().__init__(key, kvno)
+
+        self._length = length
+
+    def make_checksum(self, usage, plaintext, ctype=None):
+        checksum = super().make_checksum(usage, plaintext, ctype)
+
+        diff = self._length - len(checksum)
+        if diff > 0:
+            checksum += bytes(diff)
+        elif diff < 0:
+            checksum = checksum[:self._length]
+
+        return checksum
+
+
 class KerberosCredentials(Credentials):
 
     fast_supported_bits = (security.KERB_ENCTYPE_FAST_SUPPORTED |