4 * @covers EncryptedPassword
5 * @covers ParameterizedPassword
8 class EncryptedPasswordTest
extends PasswordTestCase
{
9 protected function getTypeConfigs() {
12 'class' => EncryptedPassword
::class,
13 'underlying' => 'pbkdf2',
18 'cipher' => 'aes-256-cbc',
21 'class' => EncryptedPassword
::class,
22 'underlying' => 'pbkdf2',
26 'cipher' => 'aes-256-cbc',
29 'class' => EncryptedPassword
::class,
30 'underlying' => 'pbkdf2',
34 'cipher' => 'aes-256-cbc',
37 'class' => Pbkdf2Password
::class,
45 public static function providePasswordTests() {
46 // phpcs:disable Generic.Files.LineLength
48 // Encrypted with secret1
49 [ true, ':both:aes-256-cbc:0:izBpxujqC1YbzpCB3qAzgg==:ZqHnitT1pL4YJqKqFES2KEevZYSy2LtlibW5+IMi4XKOGKGy6sE638BXyBbLQQsBtTSrt+JyzwOayKtwIfRbaQsBridx/O1JwBSai1TkGkOsYMBXnlu2Bu/EquCBj5QpjYh7p3Uq4rpiop1KQlin1BJMwnAa1PovhxjpxnYhlhkM4X5ALoGi3XM0bapN48vt', 'password' ],
50 [ true, ':secret1:aes-256-cbc:0:izBpxujqC1YbzpCB3qAzgg==:ZqHnitT1pL4YJqKqFES2KEevZYSy2LtlibW5+IMi4XKOGKGy6sE638BXyBbLQQsBtTSrt+JyzwOayKtwIfRbaQsBridx/O1JwBSai1TkGkOsYMBXnlu2Bu/EquCBj5QpjYh7p3Uq4rpiop1KQlin1BJMwnAa1PovhxjpxnYhlhkM4X5ALoGi3XM0bapN48vt', 'password' ],
51 [ false, ':secret1:aes-256-cbc:0:izBpxujqC1YbzpCB3qAzgg==:ZqHnitT1pL4YJqKqFES2KEevZYSy2LtlibW5+IMi4XKOGKGy6sE638BXyBbLQQsBtTSrt+JyzwOayKtwIfRbaQsBridx/O1JwBSai1TkGkOsYMBXnlu2Bu/EquCBj5QpjYh7p3Uq4rpiop1KQlin1BJMwnAa1PovhxjpxnYhlhkM4X5ALoGi3XM0bapN48vt', 'notpassword' ],
53 // Encrypted with secret2
54 [ true, ':both:aes-256-cbc:1:m1LCnQVIakfYBNlr9KEgQg==:5yPTctqrzsybdgaMEag18AZYbnL37pAtXVBqmWxkjXbnNmiDH+1bHoL8lsEVTH/sJntC82kNVgE7zeiD8xUVLYF2VUnvB5+sU+aysE45/zwsCu7a22TaischMAOWrsHZ/tIgS/TnZY2d+HNyxgsEeeYf/QoL+FhmqHquK02+4SRbA5lLuj9niYy1r5CoM9cQ', 'password' ],
55 [ true, ':secret2:aes-256-cbc:0:m1LCnQVIakfYBNlr9KEgQg==:5yPTctqrzsybdgaMEag18AZYbnL37pAtXVBqmWxkjXbnNmiDH+1bHoL8lsEVTH/sJntC82kNVgE7zeiD8xUVLYF2VUnvB5+sU+aysE45/zwsCu7a22TaischMAOWrsHZ/tIgS/TnZY2d+HNyxgsEeeYf/QoL+FhmqHquK02+4SRbA5lLuj9niYy1r5CoM9cQ', 'password' ],
61 * Wrong encryption key selected
62 * @expectedException PasswordError
64 public function testDecryptionError() {
65 // phpcs:ignore Generic.Files.LineLength
66 $hash = ':secret1:aes-256-cbc:0:m1LCnQVIakfYBNlr9KEgQg==:5yPTctqrzsybdgaMEag18AZYbnL37pAtXVBqmWxkjXbnNmiDH+1bHoL8lsEVTH/sJntC82kNVgE7zeiD8xUVLYF2VUnvB5+sU+aysE45/zwsCu7a22TaischMAOWrsHZ/tIgS/TnZY2d+HNyxgsEeeYf/QoL+FhmqHquK02+4SRbA5lLuj9niYy1r5CoM9cQ';
67 $password = $this->passwordFactory
->newFromCiphertext( $hash );
68 $password->crypt( 'password' );
71 public function testUpdate() {
72 // phpcs:ignore Generic.Files.LineLength
73 $hash = ':both:aes-256-cbc:0:izBpxujqC1YbzpCB3qAzgg==:ZqHnitT1pL4YJqKqFES2KEevZYSy2LtlibW5+IMi4XKOGKGy6sE638BXyBbLQQsBtTSrt+JyzwOayKtwIfRbaQsBridx/O1JwBSai1TkGkOsYMBXnlu2Bu/EquCBj5QpjYh7p3Uq4rpiop1KQlin1BJMwnAa1PovhxjpxnYhlhkM4X5ALoGi3XM0bapN48vt';
74 $fromHash = $this->passwordFactory
->newFromCiphertext( $hash );
75 $this->assertTrue( $fromHash->update() );
77 $serialized = $fromHash->toString();
78 $this->assertRegExp( '/^:both:aes-256-cbc:1:/', $serialized );
79 $fromNewHash = $this->passwordFactory
->newFromCiphertext( $serialized );
80 $fromPlaintext = $this->passwordFactory
->newFromPlaintext( 'password', $fromNewHash );
81 $this->assertTrue( $fromPlaintext->verify( 'password' ) );
82 $this->assertTrue( $fromHash->verify( 'password' ) );