mirror of
https://git.busybox.net/busybox
synced 2026-02-22 10:12:18 +00:00
b823735b7e
function old new delta yescrypt_r 767 756 -11 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
114 lines
4.8 KiB
Bash
Executable file
114 lines
4.8 KiB
Bash
Executable file
#!/bin/sh
|
|
|
|
# Copyright 2017 by Denys Vlasenko <vda.linux@googlemail.com>
|
|
# Licensed under GPLv2, see file LICENSE in this source tree.
|
|
|
|
. ./testing.sh
|
|
|
|
# testing "description" "command" "result" "infile" "stdin"
|
|
|
|
#optional USE_BB_CRYPT
|
|
testing "cryptpw des 12" \
|
|
"cryptpw -m des QWErty '123456789012345678901234567890'" \
|
|
'12MnB3PqfVbMA\n' "" ""
|
|
|
|
testing "cryptpw des 55" \
|
|
"cryptpw -m des QWErty 55" \
|
|
'55tgFLtkT1Y72\n' "" ""
|
|
|
|
testing "cryptpw des zz" \
|
|
"cryptpw -m des QWErty zz" \
|
|
'zzIZaaXWOkxVk\n' "" ""
|
|
#SKIP=
|
|
|
|
optional USE_BB_CRYPT_SHA
|
|
# Note: mkpasswd-5.6.2 won't accept "-m sha256", wants "-m sha256crypt"
|
|
testing 'cryptpw sha256' \
|
|
'cryptpw -m sha256 QWErty 1234567890123456' \
|
|
'$5$1234567890123456$5DxfOCmU4vRhtzfsbdK.6wSGMwwVbac7ZkWwusb8Si7\n' \
|
|
'' ''
|
|
# mkpasswd-5.6.2 does not allow overlong salts, we truncate (at 16 chars for sha256)
|
|
testing 'cryptpw sha256 overlong' \
|
|
'cryptpw -m sha256 QWErty 123456789012345678901234567890' \
|
|
'$5$1234567890123456$5DxfOCmU4vRhtzfsbdK.6wSGMwwVbac7ZkWwusb8Si7\n' \
|
|
'' ''
|
|
testing 'cryptpw sha256 implicit' \
|
|
'cryptpw QWErty \$5\$1234567890123456' \
|
|
'$5$1234567890123456$5DxfOCmU4vRhtzfsbdK.6wSGMwwVbac7ZkWwusb8Si7\n' \
|
|
'' ''
|
|
testing 'cryptpw sha256 rounds=99999' \
|
|
'cryptpw -m sha256 QWErty rounds=99999\$123456789012345678901234567890' \
|
|
'$5$rounds=99999$1234567890123456$aYellycJGZM6AKyVzaQsSrDBdTixubtMnM6J.MN0xM8\n' \
|
|
'' ''
|
|
testing 'cryptpw sha256 rounds=99999 implicit' \
|
|
'cryptpw QWErty \$5\$rounds=99999\$123456789012345678901234567890' \
|
|
'$5$rounds=99999$1234567890123456$aYellycJGZM6AKyVzaQsSrDBdTixubtMnM6J.MN0xM8\n' \
|
|
'' ''
|
|
|
|
testing 'cryptpw sha512' \
|
|
'cryptpw -m sha512 QWErty 123456789012345678901234567890' \
|
|
'$6$1234567890123456$KB7QqxFyqmJSWyQYcCuGeFukgz1bPQoipWZf7.9L7z3k8UNTXa6UikbKcUGDc2ANn7DOGmDaroxDgpK16w/RE0\n' \
|
|
'' ''
|
|
testing 'cryptpw sha512crypt' \
|
|
'cryptpw -m sha512crypt QWErty 123456789012345678901234567890' \
|
|
'$6$1234567890123456$KB7QqxFyqmJSWyQYcCuGeFukgz1bPQoipWZf7.9L7z3k8UNTXa6UikbKcUGDc2ANn7DOGmDaroxDgpK16w/RE0\n' \
|
|
'' ''
|
|
testing 'cryptpw sha512 rounds=99999' \
|
|
'cryptpw -m sha512 QWErty rounds=99999\$123456789012345678901234567890' \
|
|
'$6$rounds=99999$1234567890123456$BfF6gD6ZjUmwawH5QaAglYAxtU./yvsz0fcQ464l49aMI2DZW3j5ri28CrxK7riPWNpLuUpfaIdY751SBYKUH.\n' \
|
|
'' ''
|
|
SKIP=
|
|
|
|
optional USE_BB_CRYPT_YES
|
|
testing 'cryptpw yescrypt' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j9T\$123456789012345678901234' \
|
|
'$y$j9T$123456789012345678901234$AKxw5OX/T4jD.v./IW.5tE/j7izNjw06fg3OvH1LsN9\n' \
|
|
'' ''
|
|
testing 'cryptpw yescrypt with non-standard N=2048 instead of 4096 (j8T instead of j9T)' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j8T\$123456789012345678901234' \
|
|
'$y$j8T$123456789012345678901234$JQUUfopCxlfZNE8f.THJwbOkhy.XtB3GIjo9HUVioWB\n' \
|
|
'' ''
|
|
# mkpasswd-5.6.2 allows short salts for yescrypt
|
|
# ...but there is a catch. Not all of them.
|
|
# The "partial" (not fitting in whole bytes) ascii64-encoded salt
|
|
# is a special case. For example, "$zzz" would not even work in upstream.
|
|
testing 'cryptpw yescrypt with empty salt' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j9T\$' \
|
|
'$y$j9T$$hpeksL94GXNRwnA00L3c8WFy0khFAUbCpBSak.N3Bp.\n' \
|
|
'' ''
|
|
testing 'cryptpw yescrypt with 3-char salt' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j9T\$123' \
|
|
'$y$j9T$123$A34DMIGUbUIo3bjx66Wtk2IFoREMIw6d49it25KQh2D\n' \
|
|
'' ''
|
|
# "." is not allowed in mkpasswd-5.6.2
|
|
# ....................................
|
|
# ".." is decoded into one zero byte (not two)
|
|
testing 'cryptpw yescrypt with 2-char salt ".."' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j9T\$..' \
|
|
'$y$j9T$..$yVHeOayxOGg6cHL3.dg10u7T.qSgySfLN3uhSVSLNn/\n' \
|
|
'' ''
|
|
# "..." is decoded into two zero bytes (not three, not one)
|
|
testing 'cryptpw yescrypt with 3-char salt "..."' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j9T\$...' \
|
|
'$y$j9T$...$xHvJ5USZ7hFyXYbOijtEOMfZRS23cWIxu2eIBXRymA5\n' \
|
|
'' ''
|
|
# "...." is decoded into three zero bytes (no surprises here)
|
|
testing 'cryptpw yescrypt with 4-char salt "...."' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j9T\$....' \
|
|
'$y$j9T$....$wOnauYL2/NEtr6YQi9pi8AtV7L57sEbVOAnWJIcP9q2\n' \
|
|
'' ''
|
|
# 84 chars = 21 4-char blocks which decode into 21*3 = 63 bytes.
|
|
# The last byte of the maximum allowed salt size has to come from an incomplete
|
|
# char block. E.g. "z/" encodes byte 0x7f. "z1" is 0xff.
|
|
# Anything larger (e.g. "z2") is an error (it encodes 0x13f).
|
|
testing 'cryptpw yescrypt with 86-char salt (max size)' \
|
|
'cryptpw -m yescrypt qweRTY123@-+ j9T\$123456789012345678901234567890123456789012345678901234567890123456789012345678901234z/' \
|
|
'$y$j9T$123456789012345678901234567890123456789012345678901234567890123456789012345678901234z/$Exxe8IoPXiddFsqj7iqCanRf8FyquAoB0/uceLmLjG.\n' \
|
|
'' ''
|
|
testing 'cryptpw yescrypt implicit' \
|
|
'cryptpw qweRTY123@-+ \$y\$j9T\$123456789012345678901234' \
|
|
'$y$j9T$123456789012345678901234$AKxw5OX/T4jD.v./IW.5tE/j7izNjw06fg3OvH1LsN9\n' \
|
|
'' ''
|
|
SKIP=
|
|
|
|
exit $FAILCOUNT
|