upstream/borgbackup
1
0
Fork 0
mirror of https://github.com/borgbackup/borg.git synced 2026-05-28 04:03:21 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

KeyTestCase, test_decrypt_integrity

Browse source
This commit is contained in:
Marian Beermann 2016-04-16 00:20:55 +02:00
parent 037d54e442
commit dece06fba9
2 changed files with 33 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
borg/testsuite/__init__.py
View file

@ -45,6 +45,8 @@ class BaseTestCase(unittest.TestCase):
assert_not_in = unittest.TestCase.assertNotIn
assert_equal = unittest.TestCase.assertEqual
assert_not_equal = unittest.TestCase.assertNotEqual
assert_raises = unittest.TestCase.assertRaises
assert_raises_regex = unittest.TestCase.assertRaisesRegex
assert_true = unittest.TestCase.assertTrue
if raises:

33
borg/testsuite/key.py
View file

@ -6,8 +6,8 @@ from binascii import hexlify, unhexlify
from ..crypto import bytes_to_long, num_aes_blocks
from ..key import PlaintextKey, PassphraseKey, KeyfileKey
from ..helpers import Location, Chunk, bin_to_hex
from . import BaseTestCase, environment_variable
from ..helpers import Location, IntegrityError, Chunk, bin_to_hex
from . import environment_variable
class KeyTestCase(BaseTestCase):
@ -126,3 +126,32 @@ class KeyTestCase(BaseTestCase):
chunk = Chunk(b'foo')
self.assert_equal(hexlify(key.id_hash(chunk.data)), b'818217cf07d37efad3860766dcdf1d21e401650fed2d76ed1d797d3aae925990')
self.assert_equal(chunk, key2.decrypt(key2.id_hash(chunk.data), key.encrypt(chunk)))
def test_decrypt_integrity(self):
with open(os.path.join(os.environ['BORG_KEYS_DIR'], 'keyfile'), 'w') as fd:
fd.write(self.keyfile2_key_file)
os.environ['BORG_PASSPHRASE'] = 'passphrase'
key = KeyfileKey.detect(self.MockRepository(), self.keyfile2_cdata)
with self.assert_raises_regex(IntegrityError, 'Invalid encryption envelope'):
data = bytearray(self.keyfile2_cdata)
data[0] += 5 # wrong TYPE
key.decrypt("", data)
with self.assert_raises_regex(IntegrityError, 'Encryption envelope checksum mismatch'):
data = bytearray(self.keyfile2_cdata)
data[5] += 5 # corrupt HMAC
key.decrypt("", data)
with self.assert_raises_regex(IntegrityError, 'Encryption envelope checksum mismatch'):
data = bytearray(self.keyfile2_cdata)
id = key.id_hash(data)
data[36] += 123 # this in the IV/CTR
key.decrypt(id, data)
with self.assert_raises_regex(IntegrityError, 'Encryption envelope checksum mismatch'):
data = bytearray(self.keyfile2_cdata)
id = key.id_hash(data)
data[50] += 1 # corrupt data
key.decrypt(id, data)
with self.assert_raises_regex(IntegrityError, 'Chunk id verification failed'):
data = bytearray(self.keyfile2_cdata)
id = bytearray(key.id_hash(data)) # corrupt chunk id
id[12] = 0
key.decrypt(id, data)