­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 3 iO@s.ddlZddlZddlZddlZddlmZmZddlZddl m Z m Z m Z ddl m Z mZmZmZmZmZmZmZddl mZmZddl mZmZmZmZddl mZdd l mZdd lmZmZdd l m!Z!dd l m"Z"dd l m#Z#ddl m$Z$ddl m%Z%GdddZ&GdddZ'GdddZ(dS)N)hexlify unhexlify) PassphrasePasswordRetriesExceeded bin_to_hex) PlaintextKey PassphraseKeyAuthenticatedKeyRepoKey KeyfileKeyBlake2KeyfileKey Blake2RepoKeyBlake2AuthenticatedKey)ID_HMAC_SHA_256ID_BLAKE2b_256)TAMRequiredError TAMInvalidTAMUnsupportedSuiteErrorUnsupportedManifestError)ArchiveTAMInvalid) identify_key) bytes_to_longnum_aes_blocks)IntegrityError)Location) StableDict)get_security_dir)msgpackc@seZdZGdddZdjZeejdddZ edZ djZ e j d Ze j d Zejd d Zejeeeeeeefd ddZGdddZddZddZddZddZddZ ddZ!ddZ"d d!Z#d"d#Z$d$d%Z%d&d'Z&d(d)Z'd*d+Z(d,d-Z)d.d/Z*d0S)1TestKeyc@seZdZeejdZdS)zTestKey.MockArgsN)__name__ __module__ __qualname__rtempfileZmkstemplocationr&r&/usr/lib64/python3.6/key.pyMockArgssr(aU BORG_KEY 0000000000000000000000000000000000000000000000000000000000000000 hqppdGVyYXRpb25zzgABhqCkaGFzaNoAIMyonNI+7Cjv0qHi0AOBM6bLGxACJhfgzVD2oq bIS9SFqWFsZ29yaXRobaZzaGEyNTakc2FsdNoAINNK5qqJc1JWSUjACwFEWGTdM7Nd0a5l 1uBGPEb+9XM9p3ZlcnNpb24BpGRhdGHaANAYDT5yfPpU099oBJwMomsxouKyx/OG4QIXK2 hQCG2L2L/9PUu4WIuKvGrsXoP7syemujNfcZws5jLp2UPva4PkQhQsrF1RYDEMLh2eF9Ol rwtkThq1tnh7KjWMG9Ijt7/aoQtq0zDYP/xaFF8XXSJxiyP5zjH5+spB6RL0oQHvbsliSh /cXJq7jrqmrJ1phd6dg4SHAM/i+hubadZoS6m25OQzYAW09wZD/phG8OVa698Z5ed3HTaT SmrtgJL3EoOKgUI9d6BLE4dJdBqntifoz\Wz 0055f161493fcfc16276e8c31493c4641e1eb19a79d0326fad0291e5a9c98e5933 00000000000003e8d21eaf9b86c297a8cd56432e1915bb Z@c3fbf14bc001ebcc3cd86e696c13482ed071740927cd7cbe1b01b4bfcee49314ay BORG_KEY 0000000000000000000000000000000000000000000000000000000000000000 hqlhbGdvcml0aG2mc2hhMjU2pGRhdGHaAZBu680Do3CmfWzeMCwe48KJi3Vps9mEDy7MKF TastsEhiAd1RQMuxfZpklkLeddMMWk+aPtFiURRFb02JLXV5cKRC1o2ZDdiNa0nao+o6+i gUjjsea9TAu25t3vxh8uQWs5BuKRLBRr0nUgrSd0IYMUgn+iVbLJRzCCssvxsklkwQxN3F Y+MvBnn8kUXSeoSoQ2l0fBHzq94Y7LMOm/owMam5URnE8/UEc6ZXBrbyX4EXxDtUqJcs+D i451thtlGdigDLpvf9nyK66mjiCpPCTCgtlzq0Pe1jcdhnsUYLg+qWzXZ7e2opEZoC6XxS 3DIuBOxG3Odqj9IKB+6/kl94vz98awPWFSpYcLZVWu7sIP38ZkUK+ad5MHTo/LvTuZdFnd iqKzZIDUJl3Zl1WGmP/0xVOmfIlznkCZy4d3SMuujwIcqQ5kDvwDRPpdhBBk+UWQY5vFXk kR1NBNLSTyhAzu3fiUmFl0qZ+UWPRkGAEBy/NuoEibrWwab8BX97cATyvnmOqYkU9PT0C6 l2l9E4bPpGhhc2jaACDnIa8KgKv84/b5sjaMgSZeIVkuKSLJy2NN8zoH8lnd36ppdGVyYX Rpb25zzgABhqCkc2FsdNoAIEJLlLh7q74j3q53856H5GgzA1HH+aW5bA/as544+PGkp3Zl cnNpb24BZd04fdf9475cf2323c0ba7a99ddc011064f2e7d039f539f2e4480e6f5fc6ff9993d604040404040404098c8cee1c6db8c28947Z@d8bc68e961c79f99be39061589e5179b2113cd9226e07b08ddd4a1fef7ce93fbcCs|jdt||S)NZ BORG_KEYS_DIR)setenvstr)selfrequest monkeypatchtmpdirr&r&r'keys_dirEszTestKey.keys_dir)ZparamscCs"|jdd|jj|j|jS)NBORG_PASSPHRASEtest)r*ZparamcreateMockRepositoryr()r,r-r.r&r&r'keyJs z TestKey.keyc@sPeZdZGdddZeZedZeeZddZ ddZ dd Z d d Z d S) zTestKey.MockRepositoryc@seZdZdZZddZdS)z TestKey.MockRepository._Locationz /some/placecCs|jS)N) processed)r,r&r&r'canonical_path[sz/TestKey.MockRepository._Location.canonical_pathN)r!r"r#rawr6r7r&r&r&r' _LocationXsr9 cCsdS)Nr&)r,r&r&r'get_free_noncebsz%TestKey.MockRepository.get_free_noncecCsdS)Nr&)r,Znext_unreservedZ start_noncer&r&r'commit_nonce_reservationesz/TestKey.MockRepository.commit_nonce_reservationcCs ||_dS)N)key_data)r,datar&r&r'save_keyhszTestKey.MockRepository.save_keycCs|jS)N)r=)r,r&r&r'load_keykszTestKey.MockRepository.load_keyN) r!r"r#r9Z _locationbytesidrid_strr;r<r?r@r&r&r&r'r4Wsr4cCstjdd}d}dS)Nsfoo)rr3)r,r5chunkr&r&r'test_plaintextns zTestKey.test_plaintextc CsV|jddtj|j|j}|jd}|jd}|j|}tj|j|}d}dS)Nr1r2sABCsfoo)r*r r3r4r(encrypt extract_noncedetect) r,r.r0r5manifest manifest2ivkey2rDr&r&r' test_keyfilets    zTestKey.test_keyfilec Csb|jdd|j}ttjjt|jdd}|jdWdQRXt j ||j }|j d}dS)Nr1r2ZnoncewZ0000000000002000sABC) r*r4openospathjoinrrCwriter r3r(rF)r,r.r0 repositoryfdr5r>r&r&r'&test_keyfile_nonce_rollback_protections  z.TestKey.test_keyfile_nonce_rollback_protectionc Cs|jd}|jdt||jddtj|j|j}d}|j|}|j|}tj |j|}|j t j t tj |j|WdQRXdS)Nkeyfile BORG_KEY_FILEr1ZtestkfsABC)rRr*r+r r3r4r(id_hashrFrHremovepytestraisesFileNotFoundError)r,r/r.rWr5rDZchunk_idZ chunk_cdatar&r&r'test_keyfile_kfenvs     zTestKey.test_keyfile_kfenvc CsJ|jdjd}|j|jWdQRX|jddtj|j|j}dS)NrWrNr1 passphrase) rRrOrSkeyfile2_key_filer*r rHr4keyfile2_cdata)r,r.r0rUr5r&r&r' test_keyfile2s  zTestKey.test_keyfile2c Cs^|jd}|jd}|j|jWdQRX|jdt||jddtj|j|j }dS)NrWrNrXr1r_) rRrOrSr`r*r+r rHr4ra)r,r/r.rWrUr5r&r&r'test_keyfile2_kfenvs   zTestKey.test_keyfile2_kfenvc CsJ|jdjd}|j|jWdQRX|jddtj|j|j}dS)NrWrNr1r_) rRrOrSkeyfile_blake2_key_filer*r rHr4keyfile_blake2_cdata)r,r.r0rUr5r&r&r'test_keyfile_blake2s  zTestKey.test_keyfile_blake2c CsR|jddtj|jd}|jd}|jd}|j|}tj|j|}d}dS)Nr1r2sABCsfoo)r*r r3r4rFrGrH) r,r0r.r5rIrJrKrLrDr&r&r'test_passphrases    zTestKey.test_passphrasec Cs>t|}||dN<tjt|jd|WdQRXdS)Nr ) bytearrayr[r\rdecrypt)r,r5r>offsetr&r&r' _corrupt_bytes zTestKey._corrupt_bytecCs|jdjd}|j|jWdQRX|jddtj|j|j}|j}x"t t |D]}|j |||qZWt j t2t|j}t|j|}d|d<|j||WdQRXdS)NrWrNr1r_r )rRrOrSr`r*r rHr4rarangelenrlr[r\rrirYrj)r,r.r0rUr5r>irBr&r&r'test_decrypt_integritys   zTestKey.test_decrypt_integritycCs8|j}d}|j|}t|}|j||}|jd|}dS)Nsfoo)rTrFrrHrj)r,r5rT plaintext encryptedZidentified_key_classZ loaded_keyZ decryptedr&r&r'test_roundtrips   zTestKey.test_roundtripcCsd}|j|}dS)Ns 123456789)rF)r,r5rrrsr&r&r'test_decrypt_decompresss zTestKey.test_decrypt_decompresscCsd}|j|}|j||t|}|ddN<tjt|j||WdQRX|d}tjt|j||WdQRXdS)Ns 123456789rr 1)rYZ assert_idrir[r\r)r,r5rrrBZ id_changedZplaintext_changedr&r&r'test_assert_ids    zTestKey.test_assert_idcCs2|jddtj|j|j}d}|j|}dS)Nr1r2s 123456789)r*r r3r4r(rF)r,r.r5rr authenticatedr&r&r'test_authenticated_encrypts   z"TestKey.test_authenticated_encryptcCs2|jddtj|j|j}d}|j|}dS)Nr1r2s 123456789)r*rr3r4r(rF)r,r.r5rrrxr&r&r'!test_blake2_authenticated_encrypts   z)TestKey.test_blake2_authenticated_encryptN)+r!r"r#r(stripr`rresubraZ keyfile2_idrdrAfromhexreZkeyfile_blake2_idr[fixturer0rr r r r rrr5r4rErMrVr^rbrcrfrgrlrqrtrurwryrzr&r&r&r'rsB        rc@s,eZdZddZddZddZddZd S) TestPassphrasecCs||jtddd|jddtj|j\}}|jddtj}|j\}}|jtdddtj|j\}}dS)NgetpasscSsdS)Nu 12aöäür&)promptr&r&r'szATestPassphrase.test_passphrase_new_verification..ZBORG_DISPLAY_PASSPHRASEnoyescSsdS)Nz1234/@=r&)rr&r&r'r*s)setattrrr*rnew readouterr)r,capsysr.outerrr_r&r&r' test_passphrase_new_verifications     z/TestPassphrase.test_passphrase_new_verificationc CsP|jdd|jtdddtjttjddWdQRX|j\}}dS)Nr1FrcSsdS)Nr)r&)rr&r&r'r2sz:TestPassphrase.test_passphrase_new_empty..)Z allow_empty) delenvrrr[r\rrrr)r,rr.rrr&r&r'test_passphrase_new_empty0s    z(TestPassphrase.test_passphrase_new_emptyc sP|jddttd|jtdfddtjttj WdQRXdS)Nr1Frcs ttS)N)r+next)r)ascending_numbersr&r'r;sz.) riterrnrrr[r\rrr)r,r.r&)rr'test_passphrase_new_retries8s    z*TestPassphrase.test_passphrase_new_retriescCsdS)Nr&)r,r&r&r'test_passphrase_repr?sz#TestPassphrase.test_passphrase_reprN)r!r"r#rrrrr&r&r&r'rsrc@s eZdZejddZddZddZddZd d Z d d Z ej j d ie fddie fdefdeffddZej j d ie fddie fdefdeffddZej j diedfedifdedfeddffddZddZddZej j dd%d!d"Zej j dd&d#d$ZdS)'TestTAMcCs |jddtjtjtjS)Nr1r2)r*r r3rr4r()r,r.r&r&r'r5Ds z TestTAM.keycCsRd}tjt|j|WdQRXd}tjttjf|j|WdQRXdS)Ns foobars)r[r\runpack_and_verify_manifest ValueErrorrZUnpackException)r,r5blobr&r&r'test_unpack_futureIs  zTestTAM.test_unpack_futurecCsNtji}tjt|j|WdQRXtjt|j|WdQRXdS)N)rpackbr[r\rrunpack_and_verify_archive)r,r5rr&r&r'test_missing_when_requiredRs    z"TestTAM.test_missing_when_requiredcCs2tji}d|_|j|\}}|j|\}}}dS)NF)rr tam_requiredrr)r,r5runpackedverified_r&r&r' test_missingYs  zTestTAM.test_missingcCsVtjdddii}tjt|j|WdQRXtjt|j|WdQRXdS)Ntamtype HMAC_VOLLBIT)rrr[r\rrr)r,r5rr&r&r'test_unknown_type_when_requiredcs   z'TestTAM.test_unknown_type_when_requiredcCs:tjdddii}d|_|j|\}}|j|\}}}dS)NrrrF)rrrrr)r,r5rrrrr&r&r'test_unknown_typens zTestTAM.test_unknown_typeztam, excrNic Cs2tjd|i}tj||j|WdQRXdS)Nr)rrr[r\r)r,r5rexcrr&r&r'test_invalid_manifest|s  zTestTAM.test_invalid_manifestc Cs2tjd|i}tj||j|WdQRXdS)Nr)rrr[r\r)r,r5rrrr&r&r'test_invalid_archives  zTestTAM.test_invalid_archivez hmac, salt@cCsdd||di}|d}|dkr&|d=|dkr4|d=tj|}tjt|j|WdQRXtjt|j|WdQRXdS)NrZHKDF_HMAC_SHA512)rhmacsaltrr)rrr[r\rrrr)r,r5rrr>rrr&r&r'test_wrong_typess    zTestTAM.test_wrong_typescCs2ddi}|j|dd}tj|}|j|\}}dS)Nfoobarsmanifest)context)pack_and_authenticate_metadatarunpackbr)r,r5r>rrrr&r&r'test_round_trip_manifests  z TestTAM.test_round_trip_manifestcCs4ddi}|j|dd}tj|}|j|\}}}dS)Nrrsarchive)r)rrrr)r,r5r>rrrrr&r&r'test_round_trip_archives  zTestTAM.test_round_trip_archivewhichhmacsaltc Csvddi}|j|dd}tj|td}|d|ddtd|d|<tj|}tjt|j |WdQRXdS) Nrrsmanifest)r) object_hookstamrr:) rrrrrArr[r\rr)r,r5rr>rrr&r&r'test_tampered_manifests$  zTestTAM.test_tampered_manifestc Csvddi}|j|dd}tj|td}|d|ddtd|d|<tj|}tjt|j |WdQRXdS) Nrrsarchive)r)rstamrr:) rrrrrArr[r\rr)r,r5rr>rrr&r&r'test_tampered_archives$  zTestTAM.test_tampered_archive)rr)rr)r!r"r#r[rr5rrrrrZmarkZ parametrizerrrrrrArrrrrr&r&r&r'rCs2            r))rZos.pathrPr|r$Zbinasciirrr[Z crypto.keyrrrrr r r r r rrrrrrrrrrZcrypto.low_levelrrZhelpersrrrrrrrrr&r&r&r's,(       )