X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.util%2Fext%2Ftest%2Forg%2Fargeo%2Futil%2Fsecurity%2FPasswordBasedEncryptionTest.java;fp=org.argeo.util%2Fext%2Ftest%2Forg%2Fargeo%2Futil%2Fsecurity%2FPasswordBasedEncryptionTest.java;h=42630cfee1206e7ba8c09196cbbe8d8a034a9f01;hb=0a7d938324d33848ac7dc4ef4007c73a714171ee;hp=0000000000000000000000000000000000000000;hpb=9dba7b01008499bdaf15c754190906d3200713fe;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.util/ext/test/org/argeo/util/security/PasswordBasedEncryptionTest.java b/org.argeo.util/ext/test/org/argeo/util/security/PasswordBasedEncryptionTest.java
new file mode 100644
index 000000000..42630cfee
--- /dev/null
+++ b/org.argeo.util/ext/test/org/argeo/util/security/PasswordBasedEncryptionTest.java
@@ -0,0 +1,144 @@
+/*
+ * Copyright (C) 2007-2012 Argeo GmbH
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *         http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.argeo.util.security;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.InputStream;
+
+import javax.crypto.Cipher;
+import javax.crypto.CipherInputStream;
+import javax.crypto.CipherOutputStream;
+import javax.crypto.SecretKey;
+import javax.crypto.SecretKeyFactory;
+import javax.crypto.spec.IvParameterSpec;
+import javax.crypto.spec.PBEKeySpec;
+import javax.crypto.spec.PBEParameterSpec;
+import javax.crypto.spec.SecretKeySpec;
+import javax.xml.bind.DatatypeConverter;
+
+import junit.framework.TestCase;
+
+import org.apache.commons.logging.Log;
+import org.apache.commons.logging.LogFactory;
+import org.argeo.StreamUtils;
+import org.argeo.util.security.PasswordBasedEncryption;
+
+public class PasswordBasedEncryptionTest extends TestCase {
+	private final static Log log = LogFactory
+			.getLog(PasswordBasedEncryptionTest.class);
+
+	public void testEncryptDecrypt() {
+		final String password = "test long password since they are safer";
+		PasswordBasedEncryption pbeEnc = new PasswordBasedEncryption(
+				password.toCharArray());
+		String message = "Hello World!";
+		log.info("Password:\t'" + password + "'");
+		log.info("Message:\t'" + message + "'");
+		byte[] encrypted = pbeEnc.encryptString(message);
+		log.info("Encrypted:\t'"
+				+ DatatypeConverter.printBase64Binary(encrypted) + "'");
+		PasswordBasedEncryption pbeDec = new PasswordBasedEncryption(
+				password.toCharArray());
+		InputStream in = null;
+		in = new ByteArrayInputStream(encrypted);
+		String decrypted = pbeDec.decryptAsString(in);
+		log.info("Decrypted:\t'" + decrypted + "'");
+		StreamUtils.closeQuietly(in);
+		assertEquals(message, decrypted);
+	}
+
+	public void testPBEWithMD5AndDES() throws Exception {
+		String password = "test";
+		String message = "Hello World!";
+
+		byte[] salt = { (byte) 0xc7, (byte) 0x73, (byte) 0x21, (byte) 0x8c,
+				(byte) 0x7e, (byte) 0xc8, (byte) 0xee, (byte) 0x99 };
+
+		int count = 1024;
+
+		String cipherAlgorithm = "PBEWithMD5AndDES";
+		String secretKeyAlgorithm = "PBEWithMD5AndDES";
+		SecretKeyFactory keyFac = SecretKeyFactory
+				.getInstance(secretKeyAlgorithm);
+		PBEKeySpec pbeKeySpec = new PBEKeySpec(password.toCharArray());
+		PBEParameterSpec pbeParamSpec = new PBEParameterSpec(salt, count);
+		SecretKey pbeKey = keyFac.generateSecret(pbeKeySpec);
+		Cipher ecipher = Cipher.getInstance(cipherAlgorithm);
+		ecipher.init(Cipher.ENCRYPT_MODE, pbeKey, pbeParamSpec);
+		Cipher dcipher = Cipher.getInstance(cipherAlgorithm);
+		dcipher.init(Cipher.DECRYPT_MODE, pbeKey, pbeParamSpec);
+
+		byte[] encrypted = ecipher.doFinal(message.getBytes());
+		byte[] decrypted = dcipher.doFinal(encrypted);
+		assertEquals(message, new String(decrypted));
+
+	}
+
+	public void testPBEWithSHA1AndAES() throws Exception {
+		String password = "test";
+		String message = "Hello World!";
+
+		byte[] salt = { (byte) 0xc7, (byte) 0x73, (byte) 0x21, (byte) 0x8c,
+				(byte) 0x7e, (byte) 0xc8, (byte) 0xee, (byte) 0x99 };
+		byte[] iv = { (byte) 0xc7, (byte) 0x73, (byte) 0x21, (byte) 0x8c,
+				(byte) 0x7e, (byte) 0xc8, (byte) 0xee, (byte) 0x99,
+				(byte) 0xc7, (byte) 0x73, (byte) 0x21, (byte) 0x8c,
+				(byte) 0x7e, (byte) 0xc8, (byte) 0xee, (byte) 0x99 };
+
+		int count = 1024;
+		// int keyLength = 256;
+		int keyLength = 128;
+
+		String cipherAlgorithm = "AES/CBC/PKCS5Padding";
+		String secretKeyAlgorithm = "PBKDF2WithHmacSHA1";
+		SecretKeyFactory keyFac = SecretKeyFactory
+				.getInstance(secretKeyAlgorithm);
+		PBEKeySpec pbeKeySpec = new PBEKeySpec(password.toCharArray(), salt,
+				count, keyLength);
+		SecretKey tmp = keyFac.generateSecret(pbeKeySpec);
+		SecretKey secret = new SecretKeySpec(tmp.getEncoded(), "AES");
+		Cipher ecipher = Cipher.getInstance(cipherAlgorithm);
+		ecipher.init(Cipher.ENCRYPT_MODE, secret, new IvParameterSpec(iv));
+
+		// decrypt
+		keyFac = SecretKeyFactory.getInstance(secretKeyAlgorithm);
+		pbeKeySpec = new PBEKeySpec(password.toCharArray(), salt, count,
+				keyLength);
+		tmp = keyFac.generateSecret(pbeKeySpec);
+		secret = new SecretKeySpec(tmp.getEncoded(), "AES");
+		// AlgorithmParameters params = ecipher.getParameters();
+		// byte[] iv = params.getParameterSpec(IvParameterSpec.class).getIV();
+		Cipher dcipher = Cipher.getInstance(cipherAlgorithm);
+		dcipher.init(Cipher.DECRYPT_MODE, secret, new IvParameterSpec(iv));
+
+		byte[] encrypted = ecipher.doFinal(message.getBytes());
+		byte[] decrypted = dcipher.doFinal(encrypted);
+		assertEquals(message, new String(decrypted));
+
+		ByteArrayOutputStream out = new ByteArrayOutputStream();
+		CipherOutputStream cipherOut = new CipherOutputStream(out, ecipher);
+		cipherOut.write(message.getBytes());
+		StreamUtils.closeQuietly(cipherOut);
+		byte[] enc = out.toByteArray();
+
+		ByteArrayInputStream in = new ByteArrayInputStream(enc);
+		CipherInputStream cipherIn = new CipherInputStream(in, dcipher);
+		ByteArrayOutputStream dec = new ByteArrayOutputStream();
+		StreamUtils.copy(cipherIn, dec);
+		assertEquals(message, new String(dec.toByteArray()));
+	}
+}