Pbkdf2PasswordHashTest.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */
 
namespace ‪TYPO3\CMS\Core\Tests\Unit\Crypto\PasswordHashing;
 
use PHPUnit\Framework\Attributes\Test;
use ‪TYPO3\CMS\Core\Crypto\PasswordHashing\Pbkdf2PasswordHash;
use TYPO3\TestingFramework\Core\Unit\UnitTestCase;
 
final class ‪Pbkdf2PasswordHashTest extends UnitTestCase
{
    #[Test]
    public function ‪constructorThrowsExceptionIfHashCountIsTooLow(): void
    {
        $this->expectException(\InvalidArgumentException::class);
        $this->expectExceptionCode(1533903544);
        new ‪Pbkdf2PasswordHash(['hash_count' => 999]);
    }
 
    #[Test]
    public function ‪constructorThrowsExceptionIfHashCountIsTooHigh(): void
    {
        $this->expectException(\InvalidArgumentException::class);
        $this->expectExceptionCode(1533903544);
        new ‪Pbkdf2PasswordHash(['hash_count' => 10000001]);
    }
 
    #[Test]
    public function ‪getHashedPasswordReturnsNullWithEmptyPassword(): void
    {
        $password = '';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        self::assertNull($subject->getHashedPassword($password));
    }
 
    #[Test]
    public function ‪getHashedPasswordReturnsNotNullWithNullPassword(): void
    {
        $password = 'a';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        self::assertNotNull($subject->getHashedPassword($password));
    }
 
    #[Test]
    public function ‪getHashedPasswordValidates(): void
    {
        $password = 'password';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertTrue($subject->isValidSaltedPW($saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsTrueWithValidAlphaCharClassPasswordAndFixedHash(): void
    {
        $password = 'password';
        $saltedHashPassword = '$pbkdf2-sha256$1000$woPhT0yoWm3AXJXSjuxJ3w$iZ6EvTulMqXlzr0NO8z5EyrklFcJk5Uw2Fqje68FfaQ';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        self::assertTrue($subject->checkPassword($password, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsFalseWithBrokenHash(): void
    {
        $password = 'password';
        $saltedHashPassword = '$pbkdf2-sha256$1000$woPhT0yoWm3AXJXSjuxJ3w$iZ6EvTulMqXlzr0NO8z5EyrklFcJk5Uw2Fqje68Ffa';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        self::assertFalse($subject->checkPassword($password, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsTrueWithValidAlphaCharClassPassword(): void
    {
        $password = 'aEjOtY';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertTrue($subject->checkPassword($password, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsTrueWithValidNumericCharClassPassword(): void
    {
        $password = '01369';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertTrue($subject->checkPassword($password, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsTrueWithValidAsciiSpecialCharClassPassword(): void
    {
        $password = ' !"#$%&\'()*+,-./:;<=>?@[\\]^_`{|}~';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertTrue($subject->checkPassword($password, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsTrueWithValidLatin1SpecialCharClassPassword(): void
    {
        $password = '';
        for ($i = 160; $i <= 191; $i++) {
            $password .= chr($i);
        }
        $password .= chr(215) . chr(247);
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertTrue($subject->checkPassword($password, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsTrueWithValidLatin1UmlautCharClassPassword(): void
    {
        $password = '';
        for ($i = 192; $i <= 214; $i++) {
            $password .= chr($i);
        }
        for ($i = 216; $i <= 246; $i++) {
            $password .= chr($i);
        }
        for ($i = 248; $i <= 255; $i++) {
            $password .= chr($i);
        }
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertTrue($subject->checkPassword($password, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordReturnsFalseWithNonValidPassword(): void
    {
        $password = 'password';
        $password1 = $password . 'INVALID';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertFalse($subject->checkPassword($password1, $saltedHashPassword));
    }
 
    #[Test]
    public function ‪isHashUpdateNeededReturnsFalseForValidSaltedPassword(): void
    {
        $password = 'password';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword($password);
        self::assertFalse($subject->isHashUpdateNeeded($saltedHashPassword));
    }
 
    #[Test]
    public function ‪isHashUpdateNeededReturnsTrueWithChangedHashCount(): void
    {
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        $saltedHashPassword = $subject->getHashedPassword('password');
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1001]);
        self::assertTrue($subject->isHashUpdateNeeded($saltedHashPassword));
    }
 
    #[Test]
    public function ‪checkPasswordIsCompatibleWithPythonPasslibHashes(): void
    {
        $passlibSaltedHash = '$pbkdf2-sha256$6400$.6UI/S.nXIk8jcbdHx3Fhg$98jZicV16ODfEsEZeYPGHU3kbrUrvUEXOPimVSQDD44';
        $subject = new ‪Pbkdf2PasswordHash(['hash_count' => 1000]);
        self::assertTrue($subject->checkPassword('password', $passlibSaltedHash));
    }
}