Import Upstream version 1.3.3
This commit is contained in:
geos_one
7
test/soft/__init__.py
Normal file
7
test/soft/__init__.py
Normal file
@@ -0,0 +1,7 @@
|
||||
# Copyright (c) 2010, 2011, 2012 Yubico AB
|
||||
# See the file COPYING for licence statement.
|
||||
|
||||
"""
|
||||
Unit tests testing logic of the library.
|
||||
These do not require a physical YubiKey to run.
|
||||
"""
|
||||
49
test/soft/test_yubico.py
Normal file
49
test/soft/test_yubico.py
Normal file
@@ -0,0 +1,49 @@
|
||||
#!/usr/bin/env python
|
||||
#
|
||||
# Simple test cases for a Python version of the yubikey_crc16() function in ykcrc.c.
|
||||
#
|
||||
|
||||
import struct
|
||||
import unittest
|
||||
import yubico.yubico_util as yubico_util
|
||||
from yubico.yubico_util import crc16
|
||||
|
||||
CRC_OK_RESIDUAL=0xf0b8
|
||||
|
||||
class TestCRC(unittest.TestCase):
|
||||
|
||||
def test_first(self):
|
||||
""" Test CRC16 trivial case """
|
||||
buffer = b'\x01\x02\x03\x04'
|
||||
crc = crc16(buffer)
|
||||
self.assertEqual(crc, 0xc66e)
|
||||
return buffer,crc
|
||||
|
||||
def test_second(self):
|
||||
""" Test CRC16 residual calculation """
|
||||
buffer,crc = self.test_first()
|
||||
# Append 1st complement for a "self-verifying" block -
|
||||
# from example in Yubikey low level interface
|
||||
crc_inv = 0xffff - crc
|
||||
buffer += struct.pack('<H', crc_inv)
|
||||
crc2 = crc16(buffer)
|
||||
self.assertEqual(crc2, CRC_OK_RESIDUAL)
|
||||
|
||||
def test_hexdump(self):
|
||||
""" Test hexdump function, normal use """
|
||||
bytes = b'\x01\x02\x03\x04\x05\x06\x07\x08'
|
||||
self.assertEqual(yubico_util.hexdump(bytes, length=4), \
|
||||
'0000 01 02 03 04\n0004 05 06 07 08\n')
|
||||
|
||||
def test_hexdump2(self):
|
||||
""" Test hexdump function, with colors """
|
||||
bytes = b'\x01\x02\x03\x04\x05\x06\x07\x08'
|
||||
self.assertEqual(yubico_util.hexdump(bytes, length=4, colorize=True), \
|
||||
'0000 \x1b[0m01 02 03\x1b[0m 04\n0004 \x1b[0m05 06 07\x1b[0m 08\n')
|
||||
|
||||
def test_modhex_decode(self):
|
||||
""" Test modhex decoding """
|
||||
self.assertEqual(b"0123456789abcdef", yubico_util.modhex_decode(b"cbdefghijklnrtuv"))
|
||||
|
||||
if __name__ == '__main__':
|
||||
unittest.main()
|
||||
307
test/soft/test_yubikey_config.py
Normal file
307
test/soft/test_yubikey_config.py
Normal file
@@ -0,0 +1,307 @@
|
||||
#!/usr/bin/env python
|
||||
|
||||
import unittest
|
||||
import yubico
|
||||
import yubico.yubikey_config
|
||||
from yubico.yubikey_usb_hid import YubiKeyConfigUSBHID
|
||||
import yubico.yubico_util
|
||||
import yubico.yubico_exception
|
||||
|
||||
class YubiKeyTests(unittest.TestCase):
|
||||
|
||||
def setUp(self):
|
||||
version = (2, 2, 0,)
|
||||
capa = yubico.yubikey_usb_hid.YubiKeyUSBHIDCapabilities( \
|
||||
model = 'YubiKey', version = version, default_answer = False)
|
||||
self.Config = YubiKeyConfigUSBHID(ykver = version, capabilities = capa)
|
||||
|
||||
def test_static_ticket(self):
|
||||
""" Test static ticket """
|
||||
|
||||
#fixed: m:
|
||||
#uid: h:000000000000
|
||||
#key: h:e2bee9a36568a00d026a02f85e61e6fb
|
||||
#acc_code: h:000000000000
|
||||
#ticket_flags: APPEND_CR
|
||||
#config_flags: STATIC_TICKET
|
||||
|
||||
expected = [b'\x00\x00\x00\x00\x00\x00\x00\x80',
|
||||
b'\x00\xe2\xbe\xe9\xa3\x65\x68\x83',
|
||||
b'\xa0\x0d\x02\x6a\x02\xf8\x5e\x84',
|
||||
b'\x61\xe6\xfb\x00\x00\x00\x00\x85',
|
||||
b'\x00\x00\x00\x00\x20\x20\x00\x86',
|
||||
b'\x00\x5a\x93\x00\x00\x00\x00\x87',
|
||||
b'\x00\x01\x95\x56\x00\x00\x00\x89'
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
Config.aes_key(b'h:e2bee9a36568a00d026a02f85e61e6fb')
|
||||
Config.ticket_flag('APPEND_CR', True)
|
||||
Config.config_flag('STATIC_TICKET', True)
|
||||
|
||||
data = Config.to_frame(slot=1).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
|
||||
def test_static_ticket_with_access_code(self):
|
||||
""" Test static ticket with unlock code """
|
||||
|
||||
#fixed: m:
|
||||
#uid: h:000000000000
|
||||
#key: h:e2bee9a36568a00d026a02f85e61e6fb
|
||||
#acc_code: h:010203040506
|
||||
#ticket_flags: APPEND_CR
|
||||
#config_flags: STATIC_TICKET
|
||||
|
||||
expected = [b'\x00\x00\x00\x00\x00\x00\x00\x80',
|
||||
b'\x00\xe2\xbe\xe9\xa3\x65\x68\x83',
|
||||
b'\xa0\x0d\x02\x6a\x02\xf8\x5e\x84',
|
||||
b'\x61\xe6\xfb\x01\x02\x03\x04\x85',
|
||||
b'\x05\x06\x00\x00\x20\x20\x00\x86',
|
||||
b'\x00\x0d\x39\x01\x02\x03\x04\x87',
|
||||
b'\x05\x06\x00\x00\x00\x00\x00\x88',
|
||||
b'\x00\x01\xc2\xfc\x00\x00\x00\x89',
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
Config.aes_key(b'h:e2bee9a36568a00d026a02f85e61e6fb')
|
||||
Config.ticket_flag('APPEND_CR', True)
|
||||
Config.config_flag('STATIC_TICKET', True)
|
||||
Config.unlock_key(b'h:010203040506')
|
||||
|
||||
data = Config.to_frame(slot=1).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
def test_fixed_and_oath_hotp(self):
|
||||
""" Test OATH HOTP with a fixed prefix-string """
|
||||
|
||||
#fixed: m:ftftftft
|
||||
#uid: h:000000000000
|
||||
#key: h:523d7ce7e7b6ee853517a3e3cc1985c7
|
||||
#acc_code: h:000000000000
|
||||
#ticket_flags: APPEND_CR|OATH_HOTP
|
||||
#config_flags: OATH_FIXED_MODHEX1|OATH_FIXED_MODHEX2|STATIC_TICKET
|
||||
|
||||
expected = [b'\x4d\x4d\x4d\x4d\x00\x00\x00\x80',
|
||||
b'\x00\x52\x3d\x7c\xe7\xe7\xb6\x83',
|
||||
b'\xee\x85\x35\x17\xa3\xe3\xcc\x84',
|
||||
b'\x19\x85\xc7\x00\x00\x00\x00\x85',
|
||||
b'\x00\x00\x04\x00\x60\x70\x00\x86',
|
||||
b'\x00\x72\xad\xaa\xbb\xcc\xdd\x87',
|
||||
b'\xee\xff\x00\x00\x00\x00\x00\x88',
|
||||
b'\x00\x03\xfe\xc4\x00\x00\x00\x89',
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
Config.aes_key(b'h:523d7ce7e7b6ee853517a3e3cc1985c7')
|
||||
Config.fixed_string(b'm:ftftftft')
|
||||
Config.ticket_flag('APPEND_CR', True)
|
||||
Config.ticket_flag('OATH_HOTP', True)
|
||||
Config.config_flag('OATH_FIXED_MODHEX1', True)
|
||||
Config.config_flag('OATH_FIXED_MODHEX2', True)
|
||||
Config.config_flag('STATIC_TICKET', True)
|
||||
Config.unlock_key(b'h:aabbccddeeff')
|
||||
Config.access_key(b'h:000000000000')
|
||||
|
||||
data = Config.to_frame(slot=2).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
def test_challenge_response_hmac_nist(self):
|
||||
""" Test HMAC challenge response with NIST test vector """
|
||||
|
||||
expected = [b'\x00\x00\x00\x00\x00\x00\x00\x80',
|
||||
b'\x00\x00\x40\x41\x42\x43\x00\x82',
|
||||
b'\x00\x30\x31\x32\x33\x34\x35\x83',
|
||||
b'\x36\x37\x38\x39\x3a\x3b\x3c\x84',
|
||||
b'\x3d\x3e\x3f\x00\x00\x00\x00\x85',
|
||||
b'\x00\x00\x00\x04\x40\x26\x00\x86',
|
||||
b'\x00\x98\x41\x00\x00\x00\x00\x87',
|
||||
b'\x00\x03\x95\x56\x00\x00\x00\x89',
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
secret = b'h:303132333435363738393a3b3c3d3e3f40414243'
|
||||
Config.mode_challenge_response(secret, type='HMAC', variable=True)
|
||||
Config.extended_flag('SERIAL_API_VISIBLE', True)
|
||||
|
||||
data = Config.to_frame(slot=2).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
def test_unknown_ticket_flag(self):
|
||||
""" Test setting unknown ticket flag """
|
||||
Config = self.Config
|
||||
self.assertRaises(yubico.yubico_exception.InputError, Config.ticket_flag, 'YK_UNIT_TEST123', True)
|
||||
|
||||
def test_unknown_ticket_flag_integer(self):
|
||||
""" Test setting unknown ticket flag as integer """
|
||||
future_flag = 0xff
|
||||
Config = self.Config
|
||||
Config.ticket_flag(future_flag, True)
|
||||
self.assertEqual(future_flag, Config.ticket_flags.to_integer())
|
||||
|
||||
def test_too_long_fixed_string(self):
|
||||
""" Test too long fixed string, and set as plain string """
|
||||
Config = self.Config
|
||||
self.assertRaises(yubico.yubico_exception.InputError, Config.ticket_flag, 'YK_UNIT_TEST123', True)
|
||||
|
||||
def test_default_flags(self):
|
||||
""" Test that no flags get set by default """
|
||||
Config = self.Config
|
||||
self.assertEqual(0x0, Config.ticket_flags.to_integer())
|
||||
self.assertEqual(0x0, Config.config_flags.to_integer())
|
||||
self.assertEqual(0x0, Config.extended_flags.to_integer())
|
||||
|
||||
def test_oath_hotp_like_windows(self):
|
||||
""" Test plain OATH-HOTP with NIST test vector """
|
||||
|
||||
expected = [b'\x00\x00\x00\x00\x00\x00\x00\x80',
|
||||
b'\x00\x00\x40\x41\x42\x43\x00\x82',
|
||||
b'\x00\x30\x31\x32\x33\x34\x35\x83',
|
||||
b'\x36\x37\x38\x39\x3a\x3b\x3c\x84',
|
||||
b'\x3d\x3e\x3f\x00\x00\x00\x00\x85',
|
||||
b'\x00\x00\x00\x00\x40\x00\x00\x86',
|
||||
b'\x00\x6a\xb9\x00\x00\x00\x00\x87',
|
||||
b'\x00\x03\x95\x56\x00\x00\x00\x89',
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
secret = b'h:303132333435363738393a3b3c3d3e3f40414243'
|
||||
Config.mode_oath_hotp(secret)
|
||||
|
||||
data = Config.to_frame(slot=2).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
def test_oath_hotp_like_windows2(self):
|
||||
""" Test OATH-HOTP with NIST test vector and token identifier """
|
||||
|
||||
expected = [b'\x01\x02\x03\x04\x05\x06\x00\x80',
|
||||
b'\x00\x00\x40\x41\x42\x43\x00\x82',
|
||||
b'\x00\x30\x31\x32\x33\x34\x35\x83',
|
||||
b'\x36\x37\x38\x39\x3a\x3b\x3c\x84',
|
||||
b'\x3d\x3e\x3f\x00\x00\x00\x00\x85',
|
||||
b'\x00\x00\x06\x00\x40\x42\x00\x86',
|
||||
b'\x00\x0e\xec\x00\x00\x00\x00\x87',
|
||||
b'\x00\x03\x95\x56\x00\x00\x00\x89',
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
secret = b'h:303132333435363738393a3b3c3d3e3f40414243'
|
||||
Config.mode_oath_hotp(secret, digits=8, factor_seed='', omp=0x01, tt=0x02, mui=b'\x03\x04\x05\x06')
|
||||
Config.config_flag('OATH_FIXED_MODHEX2', True)
|
||||
|
||||
data = Config.to_frame(slot=2).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
def test_oath_hotp_like_windows_factory_seed(self):
|
||||
""" Test OATH-HOTP factor_seed """
|
||||
|
||||
expected = [b'\x01\x02\x03\x04\x05\x06\x00\x80',
|
||||
b'\x00\x00\x40\x41\x42\x43\x01\x82',
|
||||
b'\x21\x30\x31\x32\x33\x34\x35\x83',
|
||||
b'\x36\x37\x38\x39\x3a\x3b\x3c\x84',
|
||||
b'\x3d\x3e\x3f\x00\x00\x00\x00\x85',
|
||||
b'\x00\x00\x06\x00\x40\x42\x00\x86',
|
||||
b'\x00\x03\xea\x00\x00\x00\x00\x87',
|
||||
b'\x00\x03\x95\x56\x00\x00\x00\x89',
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
secret = b'h:303132333435363738393a3b3c3d3e3f40414243'
|
||||
Config.mode_oath_hotp(secret, digits=8, factor_seed=0x2101, omp=0x01, tt=0x02, mui=b'\x03\x04\x05\x06')
|
||||
Config.config_flag('OATH_FIXED_MODHEX2', True)
|
||||
|
||||
data = Config.to_frame(slot=2).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
def test_fixed_length_hmac_like_windows(self):
|
||||
""" Test fixed length HMAC SHA1 """
|
||||
|
||||
expected = [b'\x00\x00\x00\x00\x00\x00\x00\x80',
|
||||
b'\x00\x00\x40\x41\x42\x43\x00\x82',
|
||||
b'\x00\x30\x31\x32\x33\x34\x35\x83',
|
||||
b'\x36\x37\x38\x39\x3a\x3b\x3c\x84',
|
||||
b'\x3d\x3e\x3f\x00\x00\x00\x00\x85',
|
||||
b'\x00\x00\x00\x00\x40\x22\x00\x86',
|
||||
b'\x00\xe9\x0f\x00\x00\x00\x00\x87',
|
||||
b'\x00\x03\x95\x56\x00\x00\x00\x89',
|
||||
]
|
||||
|
||||
Config = self.Config
|
||||
secret = b'h:303132333435363738393a3b3c3d3e3f40414243'
|
||||
Config.mode_challenge_response(secret, type='HMAC', variable=False)
|
||||
|
||||
data = Config.to_frame(slot=2).to_feature_reports()
|
||||
|
||||
print("EXPECT:\n%s\nGOT:\n%s\n" %( yubico.yubico_util.hexdump(b''.join(expected)),
|
||||
yubico.yubico_util.hexdump(b''.join(data))))
|
||||
|
||||
self.assertEqual(data, expected)
|
||||
|
||||
def test_version_required_1(self):
|
||||
""" Test YubiKey 1 with v2 option """
|
||||
version = (1, 3, 0,)
|
||||
capa = yubico.yubikey_usb_hid.YubiKeyUSBHIDCapabilities( \
|
||||
model = 'YubiKey', version = version, default_answer = False)
|
||||
Config = YubiKeyConfigUSBHID(ykver = version, capabilities = capa)
|
||||
self.assertRaises(yubico.yubikey.YubiKeyVersionError, Config.config_flag, 'SHORT_TICKET', True)
|
||||
|
||||
def test_version_required_2(self):
|
||||
""" Test YubiKey 2 with v2 option """
|
||||
|
||||
Config = self.Config
|
||||
Config.config_flag('SHORT_TICKET', True)
|
||||
self.assertEqual((2, 0), Config.version_required())
|
||||
|
||||
def test_version_required_3(self):
|
||||
""" Test YubiKey 2 with v1 option """
|
||||
|
||||
Config = self.Config
|
||||
self.assertRaises(yubico.yubikey.YubiKeyVersionError, Config.config_flag, 'TICKET_FIRST', True)
|
||||
|
||||
def test_version_required_4(self):
|
||||
""" Test YubiKey 2.1 with v2.2 mode """
|
||||
version = (2, 1, 0,)
|
||||
capa = yubico.yubikey_usb_hid.YubiKeyUSBHIDCapabilities( \
|
||||
model = 'YubiKey', version = version, default_answer = False)
|
||||
Config = YubiKeyConfigUSBHID(ykver = version, capabilities = capa)
|
||||
secret = b'h:303132333435363738393a3b3c3d3e3f40414243'
|
||||
self.assertRaises(yubico.yubikey.YubiKeyVersionError, Config.mode_challenge_response, secret)
|
||||
|
||||
def test_version_required_5(self):
|
||||
""" Test YubiKey 2.2 with v2.2 mode """
|
||||
|
||||
Config = self.Config
|
||||
secret = b'h:303132333435363738393a3b3c3d3e3f'
|
||||
Config.mode_challenge_response(secret, type='OTP')
|
||||
self.assertEqual('CHAL_RESP', Config._mode)
|
||||
|
||||
if __name__ == '__main__':
|
||||
unittest.main()
|
||||
58
test/soft/test_yubikey_frame.py
Normal file
58
test/soft/test_yubikey_frame.py
Normal file
@@ -0,0 +1,58 @@
|
||||
#!/usr/bin/env python
|
||||
|
||||
from yubico import *
|
||||
from yubico.yubikey_frame import *
|
||||
import yubico.yubico_exception
|
||||
import unittest
|
||||
import struct
|
||||
import re
|
||||
|
||||
class YubiKeyTests(unittest.TestCase):
|
||||
|
||||
def test_get_ykframe(self):
|
||||
""" Test normal use """
|
||||
buffer = YubiKeyFrame(command=0x01).to_string()
|
||||
|
||||
# check number of bytes returned
|
||||
self.assertEqual(len(buffer), 70, "yubikey command buffer should always be 70 bytes")
|
||||
|
||||
# check that empty payload works (64 * '\x00')
|
||||
all_zeros = b'\x00' * 64
|
||||
|
||||
self.assertTrue(buffer.startswith(all_zeros))
|
||||
|
||||
|
||||
def test_get_ykframe_feature_reports(self):
|
||||
""" Test normal use """
|
||||
res = YubiKeyFrame(command=0x32).to_feature_reports()
|
||||
|
||||
self.assertEqual(res, [b'\x00\x00\x00\x00\x00\x00\x00\x80',
|
||||
b'\x00\x32\x6b\x5b\x00\x00\x00\x89'
|
||||
])
|
||||
|
||||
|
||||
def test_get_ykframe_feature_reports2(self):
|
||||
""" Test one serie of non-zero bytes in the middle of the payload """
|
||||
payload = b'\x00' * 38
|
||||
payload += b'\x01\x02\x03'
|
||||
payload += b'\x00' * 23
|
||||
res = YubiKeyFrame(command=0x32, payload=payload).to_feature_reports()
|
||||
|
||||
self.assertEqual(res, [b'\x00\x00\x00\x00\x00\x00\x00\x80',
|
||||
b'\x00\x00\x00\x01\x02\x03\x00\x85',
|
||||
b'\x002\x01s\x00\x00\x00\x89'])
|
||||
|
||||
def test_bad_payload(self):
|
||||
""" Test that we get an exception for four bytes payload """
|
||||
self.assertRaises(yubico_exception.InputError, YubiKeyFrame, command=0x32, payload=b'test')
|
||||
|
||||
def test_repr(self):
|
||||
""" Test string representation of object """
|
||||
# to achieve 100% test coverage ;)
|
||||
frame = YubiKeyFrame(command=0x4d)
|
||||
print("Frame is represented as %s" % frame)
|
||||
re_match = re.search("YubiKeyFrame instance at .*: 77.$", str(frame))
|
||||
self.assertNotEqual(re_match, None)
|
||||
|
||||
if __name__ == '__main__':
|
||||
unittest.main()
|
||||
Reference in New Issue
Block a user