ext/phc-winner-argon2/src/test.c in argon2-1.0.0 vs ext/phc-winner-argon2/src/test.c in argon2-1.1.0
- old
+ new
@@ -7,125 +7,217 @@
#include <assert.h>
#include "argon2.h"
#define OUT_LEN 32
-#define SALT_LEN 16
#define ENCODED_LEN 108
-uint8_t salt[SALT_LEN];
-
/* Test harness will assert:
- * argon_hash2() returns ARGON2_OK
+ * argon2_hash() returns ARGON2_OK
* HEX output matches expected
* encoded output matches expected
* argon2_verify() correctly verifies value
*/
-void hashtest(uint32_t t, uint32_t m, uint32_t p, char *pwd, char *hexref,
- char *mcfref) {
+void hashtest(uint32_t version, uint32_t t, uint32_t m, uint32_t p, char *pwd,
+ char *salt, char *hexref, char *mcfref) {
unsigned char out[OUT_LEN];
unsigned char hex_out[OUT_LEN * 2 + 4];
char encoded[ENCODED_LEN];
int ret, i;
- printf("Hash test: t=%d, m=%d, p=%d, pass=%s, salt=%s: ", t, m, p, pwd,
- salt);
- ret = argon2_hash(t, 1 << m, p, pwd, strlen(pwd), salt, SALT_LEN, out,
- OUT_LEN, encoded, ENCODED_LEN, Argon2_i);
+ printf("Hash test: $v=%d t=%d, m=%d, p=%d, pass=%s, salt=%s: ", version,
+ t, m, p, pwd, salt);
+
+ ret = argon2_hash(t, 1 << m, p, pwd, strlen(pwd), salt, strlen(salt), out,
+ OUT_LEN, encoded, ENCODED_LEN, Argon2_i, version);
assert(ret == ARGON2_OK);
for (i = 0; i < OUT_LEN; ++i)
sprintf((char *)(hex_out + i * 2), "%02x", out[i]);
assert(memcmp(hex_out, hexref, OUT_LEN * 2) == 0);
- assert(memcmp(encoded, mcfref, strlen(mcfref)) == 0);
+
+ if (ARGON2_VERSION_NUMBER == version) {
+ assert(memcmp(encoded, mcfref, strlen(mcfref)) == 0);
+ }
+
ret = argon2_verify(encoded, pwd, strlen(pwd), Argon2_i);
assert(ret == ARGON2_OK);
+ ret = argon2_verify(mcfref, pwd, strlen(pwd), Argon2_i);
+ assert(ret == ARGON2_OK);
+
printf("PASS\n");
}
int main() {
int ret;
unsigned char out[OUT_LEN];
char const *msg;
+ int version;
- memset(salt, 0x00, SALT_LEN); /* pad with null bytes */
- memcpy(salt, "somesalt", 8);
+ version = ARGON2_VERSION_10;
+ printf("Test Argon2i version number: %02x\n", version);
/* Multiple test cases for various input values */
- hashtest(2, 16, 1, "password",
- "1c7eeef9e0e969b3024722fc864a1ca9f6ca20da73f9bf3f1731881beae2039e",
- "$argon2i$m=65536,t=2,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$HH7u+eDpabMCRyL8hkocqfbKINpz+b8/FzGIG+riA54");
- hashtest(2, 20, 1, "password",
- "253068ce02908829f9c8a026dc7cf4bd4497fd781faa1665a0d0b10d699e0ebd",
- "$argon2i$m=1048576,t=2,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$JTBozgKQiCn5yKAm3Hz0vUSX/XgfqhZloNCxDWmeDr0");
- hashtest(2, 18, 1, "password",
- "5c6dfd2712110cf88f1426059b01d87f8210d5368da0e7ee68586e9d4af4954b",
- "$argon2i$m=262144,t=2,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$XG39JxIRDPiPFCYFmwHYf4IQ1TaNoOfuaFhunUr0lUs");
- hashtest(2, 8, 1, "password",
- "dfebf9d4eadd6859f4cc6a9bb20043fd9da7e1e36bdacdbb05ca569f463269f8",
- "$argon2i$m=256,t=2,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$3+v51OrdaFn0zGqbsgBD/Z2n4eNr2s27BcpWn0Yyafg");
- hashtest(2, 8, 2, "password",
- "aea9db129d7f8c50d410a6599b0fb3d786a60ec16a3030b9ddd21ee7b6470f7f",
- "$argon2i$m=256,t=2,p=2$c29tZXNhbHQAAAAAAAAAAA"
- "$rqnbEp1/jFDUEKZZmw+z14amDsFqMDC53dIe57ZHD38");
- hashtest(1, 16, 1, "password",
- "fabd1ddbd86a101d326ac2abe79660202b10192925d2fd2483085df94df0c91a",
- "$argon2i$m=65536,t=1,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$+r0d29hqEB0yasKr55ZgICsQGSkl0v0kgwhd+U3wyRo");
- hashtest(4, 16, 1, "password",
- "b3b4cb3d6e2c1cb1e7bffdb966ab3ceafae701d6b7789c3f1e6c6b22d82d99d5",
- "$argon2i$m=65536,t=4,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$s7TLPW4sHLHnv/25Zqs86vrnAda3eJw/HmxrItgtmdU");
- hashtest(2, 16, 1, "differentpassword",
- "b2db9d7c0d1288951aec4b6e1cd3835ea29a7da2ac13e6f48554a26b127146f9",
- "$argon2i$m=65536,t=2,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$studfA0SiJUa7EtuHNODXqKafaKsE+b0hVSiaxJxRvk");
- memcpy(salt, "diffsalt", 8);
- hashtest(2, 16, 1, "password",
- "bb6686865f2c1093f70f543c9535f807d5b42d5dc6d71f14a4a7a291913e05e0",
- "$argon2i$m=65536,t=2,p=1$ZGlmZnNhbHQAAAAAAAAAAA"
- "$u2aGhl8sEJP3D1Q8lTX4B9W0LV3G1x8UpKeikZE+BeA");
+ hashtest(version, 2, 16, 1, "password", "somesalt",
+ "f6c4db4a54e2a370627aff3db6176b94a2a209a62c8e36152711802f7b30c694",
+ "$argon2i$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "$9sTbSlTio3Biev89thdrlKKiCaYsjjYVJxGAL3swxpQ");
+#ifdef TEST_LARGE_RAM
+ hashtest(version, 2, 20, 1, "password", "somesalt",
+ "9690ec55d28d3ed32562f2e73ea62b02b018757643a2ae6e79528459de8106e9",
+ "$argon2i$m=1048576,t=2,p=1$c29tZXNhbHQ"
+ "$lpDsVdKNPtMlYvLnPqYrArAYdXZDoq5ueVKEWd6BBuk");
+#endif
+ hashtest(version, 2, 18, 1, "password", "somesalt",
+ "3e689aaa3d28a77cf2bc72a51ac53166761751182f1ee292e3f677a7da4c2467",
+ "$argon2i$m=262144,t=2,p=1$c29tZXNhbHQ"
+ "$Pmiaqj0op3zyvHKlGsUxZnYXURgvHuKS4/Z3p9pMJGc");
+ hashtest(version, 2, 8, 1, "password", "somesalt",
+ "fd4dd83d762c49bdeaf57c47bdcd0c2f1babf863fdeb490df63ede9975fccf06",
+ "$argon2i$m=256,t=2,p=1$c29tZXNhbHQ"
+ "$/U3YPXYsSb3q9XxHvc0MLxur+GP960kN9j7emXX8zwY");
+ hashtest(version, 2, 8, 2, "password", "somesalt",
+ "b6c11560a6a9d61eac706b79a2f97d68b4463aa3ad87e00c07e2b01e90c564fb",
+ "$argon2i$m=256,t=2,p=2$c29tZXNhbHQ"
+ "$tsEVYKap1h6scGt5ovl9aLRGOqOth+AMB+KwHpDFZPs");
+ hashtest(version, 1, 16, 1, "password", "somesalt",
+ "81630552b8f3b1f48cdb1992c4c678643d490b2b5eb4ff6c4b3438b5621724b2",
+ "$argon2i$m=65536,t=1,p=1$c29tZXNhbHQ"
+ "$gWMFUrjzsfSM2xmSxMZ4ZD1JCytetP9sSzQ4tWIXJLI");
+ hashtest(version, 4, 16, 1, "password", "somesalt",
+ "f212f01615e6eb5d74734dc3ef40ade2d51d052468d8c69440a3a1f2c1c2847b",
+ "$argon2i$m=65536,t=4,p=1$c29tZXNhbHQ"
+ "$8hLwFhXm6110c03D70Ct4tUdBSRo2MaUQKOh8sHChHs");
+ hashtest(version, 2, 16, 1, "differentpassword", "somesalt",
+ "e9c902074b6754531a3a0be519e5baf404b30ce69b3f01ac3bf21229960109a3",
+ "$argon2i$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "$6ckCB0tnVFMaOgvlGeW69ASzDOabPwGsO/ISKZYBCaM");
+ hashtest(version, 2, 16, 1, "password", "diffsalt",
+ "79a103b90fe8aef8570cb31fc8b22259778916f8336b7bdac3892569d4f1c497",
+ "$argon2i$m=65536,t=2,p=1$ZGlmZnNhbHQ"
+ "$eaEDuQ/orvhXDLMfyLIiWXeJFvgza3vaw4kladTxxJc");
/* Error state tests */
- ret = argon2_hash(2, 1, 1, "password", strlen("password"), salt, SALT_LEN,
- out, OUT_LEN, NULL, 0, Argon2_i);
- assert(ret == ARGON2_MEMORY_TOO_LITTLE);
- printf("Fail on invalid memory: PASS\n");
+ /* Handle an invalid encoding correctly (it is missing a $) */
+ ret = argon2_verify("$argon2i$m=65536,t=2,p=1c29tZXNhbHQ"
+ "$9sTbSlTio3Biev89thdrlKKiCaYsjjYVJxGAL3swxpQ",
+ "password", strlen("password"), Argon2_i);
+ assert(ret == ARGON2_DECODING_FAIL);
+ printf("Recognise an invalid encoding: PASS\n");
- ret = argon2_hash(2, 1 << 12, 1, NULL, strlen("password"), salt, SALT_LEN,
- out, OUT_LEN, NULL, 0, Argon2_i);
- assert(ret == ARGON2_PWD_PTR_MISMATCH);
- printf("Fail on invalid null pointer: PASS\n");
+ /* Handle an invalid encoding correctly (it is missing a $) */
+ ret = argon2_verify("$argon2i$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "9sTbSlTio3Biev89thdrlKKiCaYsjjYVJxGAL3swxpQ",
+ "password", strlen("password"), Argon2_i);
+ assert(ret == ARGON2_OUTPUT_TOO_SHORT);
+ printf("Recognise an invalid encoding: PASS\n");
- ret = argon2_hash(2, 1 << 12, 1, "password", strlen("password"), salt, 1,
- out, OUT_LEN, NULL, 0, Argon2_i);
- assert(ret == ARGON2_SALT_TOO_SHORT);
- printf("Fail on salt too short: PASS\n");
+ /* Handle an mismatching hash (the encoded password is "passwore") */
+ ret = argon2_verify("$argon2i$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "$b2G3seW+uPzerwQQC+/E1K50CLLO7YXy0JRcaTuswRo",
+ "password", strlen("password"), Argon2_i);
+ assert(ret == ARGON2_VERIFY_MISMATCH);
+ printf("Verify with mismatched password: PASS\n");
+ msg = argon2_error_message(ARGON2_DECODING_FAIL);
+ assert(strcmp(msg, "Decoding failed") == 0);
+ printf("Decode an error message: PASS\n");
+
+ printf("\n");
+
+ version = ARGON2_VERSION_NUMBER;
+ printf("Test Argon2i version number: %02x\n", version);
+
+ /* Multiple test cases for various input values */
+ hashtest(version, 2, 16, 1, "password", "somesalt",
+ "c1628832147d9720c5bd1cfd61367078729f6dfb6f8fea9ff98158e0d7816ed0",
+ "$argon2i$v=19$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "$wWKIMhR9lyDFvRz9YTZweHKfbftvj+qf+YFY4NeBbtA");
+#ifdef TEST_LARGE_RAM
+ hashtest(version, 2, 20, 1, "password", "somesalt",
+ "d1587aca0922c3b5d6a83edab31bee3c4ebaef342ed6127a55d19b2351ad1f41",
+ "$argon2i$v=19$m=1048576,t=2,p=1$c29tZXNhbHQ"
+ "$0Vh6ygkiw7XWqD7asxvuPE667zQu1hJ6VdGbI1GtH0E");
+#endif
+ hashtest(version, 2, 18, 1, "password", "somesalt",
+ "296dbae80b807cdceaad44ae741b506f14db0959267b183b118f9b24229bc7cb",
+ "$argon2i$v=19$m=262144,t=2,p=1$c29tZXNhbHQ"
+ "$KW266AuAfNzqrUSudBtQbxTbCVkmexg7EY+bJCKbx8s");
+ hashtest(version, 2, 8, 1, "password", "somesalt",
+ "89e9029f4637b295beb027056a7336c414fadd43f6b208645281cb214a56452f",
+ "$argon2i$v=19$m=256,t=2,p=1$c29tZXNhbHQ"
+ "$iekCn0Y3spW+sCcFanM2xBT63UP2sghkUoHLIUpWRS8");
+ hashtest(version, 2, 8, 2, "password", "somesalt",
+ "4ff5ce2769a1d7f4c8a491df09d41a9fbe90e5eb02155a13e4c01e20cd4eab61",
+ "$argon2i$v=19$m=256,t=2,p=2$c29tZXNhbHQ"
+ "$T/XOJ2mh1/TIpJHfCdQan76Q5esCFVoT5MAeIM1Oq2E");
+ hashtest(version, 1, 16, 1, "password", "somesalt",
+ "d168075c4d985e13ebeae560cf8b94c3b5d8a16c51916b6f4ac2da3ac11bbecf",
+ "$argon2i$v=19$m=65536,t=1,p=1$c29tZXNhbHQ"
+ "$0WgHXE2YXhPr6uVgz4uUw7XYoWxRkWtvSsLaOsEbvs8");
+ hashtest(version, 4, 16, 1, "password", "somesalt",
+ "aaa953d58af3706ce3df1aefd4a64a84e31d7f54175231f1285259f88174ce5b",
+ "$argon2i$v=19$m=65536,t=4,p=1$c29tZXNhbHQ"
+ "$qqlT1YrzcGzj3xrv1KZKhOMdf1QXUjHxKFJZ+IF0zls");
+ hashtest(version, 2, 16, 1, "differentpassword", "somesalt",
+ "14ae8da01afea8700c2358dcef7c5358d9021282bd88663a4562f59fb74d22ee",
+ "$argon2i$v=19$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "$FK6NoBr+qHAMI1jc73xTWNkCEoK9iGY6RWL1n7dNIu4");
+ hashtest(version, 2, 16, 1, "password", "diffsalt",
+ "b0357cccfbef91f3860b0dba447b2348cbefecadaf990abfe9cc40726c521271",
+ "$argon2i$v=19$m=65536,t=2,p=1$ZGlmZnNhbHQ"
+ "$sDV8zPvvkfOGCw26RHsjSMvv7K2vmQq/6cxAcmxSEnE");
+
+ /* Error state tests */
+
/* Handle an invalid encoding correctly (it is missing a $) */
- ret = argon2_verify("$argon2i$m=65536,t=2,p=1$"
- "c29tZXNhbHQAAAAAAAAAAA"
- "HH7u+eDpabMCRyL8hkocqfbKINpz+b8/FzGIG+riA54",
+ ret = argon2_verify("$argon2i$v=19$m=65536,t=2,p=1c29tZXNhbHQ"
+ "$wWKIMhR9lyDFvRz9YTZweHKfbftvj+qf+YFY4NeBbtA",
"password", strlen("password"), Argon2_i);
assert(ret == ARGON2_DECODING_FAIL);
printf("Recognise an invalid encoding: PASS\n");
+ /* Handle an invalid encoding correctly (it is missing a $) */
+ ret = argon2_verify("$argon2i$v=19$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "wWKIMhR9lyDFvRz9YTZweHKfbftvj+qf+YFY4NeBbtA",
+ "password", strlen("password"), Argon2_i);
+ assert(ret == ARGON2_OUTPUT_TOO_SHORT);
+ printf("Recognise an invalid encoding: PASS\n");
+
/* Handle an mismatching hash (the encoded password is "passwore") */
- ret = argon2_verify("$argon2i$m=65536,t=2,p=1$c29tZXNhbHQAAAAAAAAAAA"
- "$tiY53ekuxy5gUQV9pEgGgu3cfe2vKl3l+lKxTna33I4",
+ ret = argon2_verify("$argon2i$v=19$m=65536,t=2,p=1$c29tZXNhbHQ"
+ "$8iIuixkI73Js3G1uMbezQXD0b8LG4SXGsOwoQkdAQIM",
"password", strlen("password"), Argon2_i);
assert(ret == ARGON2_VERIFY_MISMATCH);
printf("Verify with mismatched password: PASS\n");
msg = argon2_error_message(ARGON2_DECODING_FAIL);
- assert(strcmp(msg, "Decoding failed")==0);
+ assert(strcmp(msg, "Decoding failed") == 0);
printf("Decode an error message: PASS\n");
+
+ /* Common error state tests */
+
+ printf("\n");
+ printf("Common error state tests\n");
+
+ ret = argon2_hash(2, 1, 1, "password", strlen("password"),
+ "diffsalt", strlen("diffsalt"),
+ out, OUT_LEN, NULL, 0, Argon2_i, version);
+ assert(ret == ARGON2_MEMORY_TOO_LITTLE);
+ printf("Fail on invalid memory: PASS\n");
+
+ ret = argon2_hash(2, 1 << 12, 1, NULL, strlen("password"),
+ "diffsalt", strlen("diffsalt"),
+ out, OUT_LEN, NULL, 0, Argon2_i, version);
+ assert(ret == ARGON2_PWD_PTR_MISMATCH);
+ printf("Fail on invalid null pointer: PASS\n");
+
+ ret = argon2_hash(2, 1 << 12, 1, "password", strlen("password"), "s", 1,
+ out, OUT_LEN, NULL, 0, Argon2_i, version);
+ assert(ret == ARGON2_SALT_TOO_SHORT);
+ printf("Fail on salt too short: PASS\n");
return 0;
}