tests: add tests on function secure_derive_key

2 files changed, 44 insertions, 1 deletions

diff --git a/ChangeLog.adoc b/ChangeLog.adoc
index 357f1e854..fc8e0b61a 100644
--- a/ChangeLog.adoc
+++ b/ChangeLog.adoc
@@ -43,6 +43,7 @@ Bug fixes::
 
 Tests::
 
+  * unit: add tests on function secure_derive_key
   * unit: add tests on functions util_get_time_diff and util_file_get_content
 
 Build::
diff --git a/tests/unit/core/test-core-secure.cpp b/tests/unit/core/test-core-secure.cpp
index ecb525025..cd8891515 100644
--- a/tests/unit/core/test-core-secure.cpp
+++ b/tests/unit/core/test-core-secure.cpp
@@ -27,7 +27,6 @@ extern "C"
 #include <gcrypt.h>
 #include "src/core/wee-secure.h"
 #include "src/core/wee-string.h"
-}
 
 #define DATA_HASH "this is a test of hash function"
 #define DATA_HASH_MD5 "1197d121af621ac6a63cb8ef6b5dfa30"
@@ -113,6 +112,10 @@ extern "C"
     LONGS_EQUAL(__result, secure_totp_validate (__secret, __time,       \
                                                 __window, __otp));
 
+extern int secure_derive_key (const char *salt, const char *passphrase,
+                              unsigned char *key, int length_key);
+}
+
 TEST_GROUP(CoreSecure)
 {
 };
@@ -170,6 +173,45 @@ TEST(CoreSecure, Hash)
 
 /*
  * Tests functions:
+ *   secure_derive_key
+ */
+
+TEST(CoreSecure, DeriveKey)
+{
+    char salt[SECURE_SALT_SIZE], zeroes[32];
+    unsigned char *key;
+    const char *passphrase = "this is the passphrase";
+    const char *sha512 = "a81161a80731aa439adff8dfde94540a258b5d912f3579ec7b4"
+        "709968ed0f466e9c63f29d86196aee2c2725f046ef1c074ee790dbabb2ddb09ce85d"
+        "4a12bba0e";
+    unsigned char sha512_bin[64 + 1];
+
+    memset (salt, 'A', SECURE_SALT_SIZE);
+    memset (zeroes, 0, 32);
+    key = (unsigned char *)malloc (64);  /* SHA512 */
+    string_base16_decode (sha512, (char *)sha512_bin);
+
+    LONGS_EQUAL(0, secure_derive_key (NULL, NULL, NULL, 0));
+    LONGS_EQUAL(0, secure_derive_key (salt, NULL, NULL, 0));
+    LONGS_EQUAL(0, secure_derive_key (salt, passphrase, NULL, 0));
+    LONGS_EQUAL(0, secure_derive_key (salt, passphrase, key, 0));
+
+    /* test with key size == 64 (SHA512) */
+    memset (key, 0, 64);
+    LONGS_EQUAL(1, secure_derive_key (salt, passphrase, key, 64));
+    MEMCMP_EQUAL(sha512_bin, key, 64);
+
+    /* test with key size == 32 (too small for SHA512) */
+    memset (key, 0, 64);
+    LONGS_EQUAL(1, secure_derive_key (salt, passphrase, key, 32));
+    MEMCMP_EQUAL(sha512_bin, key, 32);
+    MEMCMP_EQUAL(zeroes, key + 32, 32);
+
+    free (key);
+}
+
+/*
+ * Tests functions:
  *   secure_encrypt_data
  *   secure_decrypt_data
  */