initial release

internal/cryptutil/hash_test.go

@@ -0,0 +1,80 @@
+package cryptutil // import "github.com/pomerium/pomerium/internal/cryptutil"
+
+import (
+	"crypto/sha256"
+	"crypto/sha512"
+	"encoding/hex"
+	"fmt"
+	"io/ioutil"
+	"os"
+	"testing"
+)
+
+func TestPasswordHashing(t *testing.T) {
+	bcryptTests := []struct {
+		plaintext []byte
+		hash      []byte
+	}{
+		{
+			plaintext: []byte("password"),
+			hash:      []byte("$2a$14$uALAQb/Lwl59oHVbuUa5m.xEFmQBc9ME/IiSgJK/VHtNJJXASCDoS"),
+		},
+	}
+
+	for _, tt := range bcryptTests {
+		hashed, err := HashPassword(tt.plaintext)
+		if err != nil {
+			t.Error(err)
+		}
+
+		if err = CheckPasswordHash(hashed, tt.plaintext); err != nil {
+			t.Error(err)
+		}
+	}
+}
+
+// Benchmarks SHA256 on 16K of random data.
+func BenchmarkSHA256(b *testing.B) {
+	data, err := ioutil.ReadFile("testdata/random")
+	if err != nil {
+		b.Fatal(err)
+	}
+	b.SetBytes(int64(len(data)))
+	for i := 0; i < b.N; i++ {
+		_ = sha256.Sum256(data)
+	}
+}
+
+// Benchmarks SHA512/256 on 16K of random data.
+func BenchmarkSHA512_256(b *testing.B) {
+	data, err := ioutil.ReadFile("testdata/random")
+	if err != nil {
+		b.Fatal(err)
+	}
+	b.SetBytes(int64(len(data)))
+	for i := 0; i < b.N; i++ {
+		_ = sha512.Sum512_256(data)
+	}
+}
+
+func BenchmarkBcrypt(b *testing.B) {
+	for i := 0; i < b.N; i++ {
+		_, err := HashPassword([]byte("thisisareallybadpassword"))
+		if err != nil {
+			b.Error(err)
+			break
+		}
+	}
+}
+
+func ExampleHash() {
+	tag := "hashing file for lookup key"
+	contents, err := ioutil.ReadFile("testdata/random")
+	if err != nil {
+		fmt.Printf("could not read file: %v\n", err)
+		os.Exit(1)
+	}
+	digest := Hash(tag, contents)
+	fmt.Println(hex.EncodeToString(digest))
+	// Output: 9f4c795d8ae5c207f19184ccebee6a606c1fdfe509c793614066d613580f03e1
+}