First commit

1 files changed, 65 insertions, 0 deletions

diff --git a/tests/mod.rs b/tests/mod.rs
new file mode 100644
index 0000000..f7810e8
--- /dev/null
+++ b/tests/mod.rs
@@ -0,0 +1,65 @@
+extern crate num;
+extern crate sha2;
+extern crate rand;
+extern crate srp;
+
+use num::BigUint;
+use sha2::Sha256;
+use rand::Rng;
+
+use srp::types::SrpParams;
+use srp::client::{ SrpClient, srp6a_private_key };
+use srp::server::{SrpServer, UserRecord};
+
+fn auth_test(reg_pwd: &[u8], auth_pwd: &[u8]) {
+    let mut rng = rand::os::OsRng::new().unwrap();
+    let username = "john".as_bytes();
+    let srp_params = SrpParams{
+        n: BigUint::from_bytes_le(srp::PRIME),
+        k: BigUint::from_bytes_be(&[1, 2, 3]),
+        g: BigUint::new(vec![2]),
+    };
+
+    // Client instance creation
+    let client = SrpClient::<Sha256>::new(&srp_params, &mut rng);
+
+    // Registration
+    let salt: [u8; 16] = rng.gen();
+    let reg_priv_key = srp6a_private_key::<Sha256>(username, reg_pwd, &salt);
+    let verif = client.get_password_verifier(&reg_priv_key);
+
+    // User sends handshake
+    let a_pub = client.get_a_pub();
+
+    // Server retrieve user record from db and processes handshake
+    let user = UserRecord { username, salt: &salt, verifier: &verif };
+    let server = SrpServer::<Sha256>::new(&user, &a_pub, &srp_params, &mut rng)
+        .unwrap();
+    let (salt, b_pub) = (&user.salt, server.get_b_pub());
+
+    // Client processes handshake reply
+    let auth_priv_key = srp6a_private_key::<Sha256>(username, auth_pwd, &salt);
+    let client2 = client.process_reply(&auth_priv_key, &b_pub).unwrap();
+    let proof = client2.get_proof();
+
+    // Server processes verification data
+    println!("Client verification");
+    let proof2 = server.verify(&proof).unwrap();
+    let server_key = server.get_key();
+
+    // Client verifies server
+    println!("Server verification");
+    let user_key = client2.verify_server(&proof2).unwrap();
+    assert_eq!(server_key, user_key, "server and client keys are not equal");
+}
+
+#[test]
+fn good_password() {
+    auth_test("password".as_bytes(), "password".as_bytes());
+}
+
+#[test]
+#[should_panic]
+fn bad_password() {
+    auth_test("password".as_bytes(), "paSsword".as_bytes());
+}