get-bytes (clj)

(ns buddy.core.kdf-tests
  (:require [clojure.test :refer :all]
            [buddy.core.codecs :as c]
            [buddy.core.bytes :as b]
            [buddy.core.keys :as k]
            [buddy.core.nonce :as n]
            [buddy.core.kdf :as kdf]
            [buddy.core.hash :as hash]
            [clojure.java.io :as io]))

(deftest hkdf-sha256-test
  (let [key (c/hex->bytes "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b")
        salt (c/hex->bytes "000102030405060708090a0b0c")
        info (c/hex->bytes "f0f1f2f3f4f5f6f7f8f9")
        expected (c/hex->bytes (str "3cb25f25faacd57a90434f64d0362f2a"
                                    "2d2d0a90cf1a5a4c5db02d56ecc4c5bf"
                                    "34007208d5b887185865"))
        engine (kdf/engine {:key key :salt salt :info info :alg :hkdf+sha256})
        result (kdf/get-bytes engine 42)]
    ;; (println (c/bytes->hex result))
    ;; (println (c/bytes->hex expected))
    (is (b/equals? result expected))))

(deftest kdf1-sha1-test
  (let [key (c/hex->bytes "deadbeeffeebdaed")
        engine (kdf/engine {:key key :alg :kdf1 :digest :sha1})
        expected (c/hex->bytes (str "B0AD565B14B478CAD4763856FF3016B1A93D840"
                                    "F87261BEDE7DDF0F9305A6E44"))
        result (kdf/get-bytes engine 32)]
    ;; (println (c/bytes->hex result))
    ;; (println (c/bytes->hex expected))
    (is (b/equals? result expected))))

(deftest kdf2-sha1-test
  (let [key (c/hex->bytes "deadbeeffeebdaed")
        engine (kdf/engine {:key key :alg :kdf2 :digest :sha1})
        expected (c/hex->bytes (str "87261BEDE7DDF0F9305A6E44A74E6A0846DEDE27"
                                    "F48205C6B141888742B0CE2C"))
        result (kdf/get-bytes engine 32)]
    ;; (println (c/bytes->hex result))
    ;; (println (c/bytes->hex expected))
    (is (b/equals? result expected))))

(deftest pbkdf2-sha1-test-1
  (let [key (c/str->bytes "password")
        salt (c/str->bytes "salt")
        expected (c/hex->bytes "0C60C80F961F0E71F3A9B524AF6012062FE037A6")
        engine (kdf/engine {:key key :salt salt :alg :pbkdf2 :digest :sha1
                            :iterations 1})
        result (kdf/get-bytes engine 20)]
    (is (b/equals? result expected))))

(deftest pbkdf2-sha1-test-2
  (let [key (c/str->bytes "password")
        salt (c/str->bytes "salt")
        expected (c/hex->bytes "EA6C014DC72D6F8CCD1ED92ACE1D41F0D8DE8957")
        engine (kdf/engine {:key key :salt salt :alg :pbkdf2 :digest :sha1
                            :iterations 2})
        result (kdf/get-bytes engine 20)]
    (is (b/equals? result expected))))

(deftest pbkdf2-sha1-test-4096
  (let [key (c/str->bytes "password")
        salt (c/str->bytes "salt")
        expected (c/hex->bytes "4B007901B765489ABEAD49D926F721D065A429C1")
        engine (kdf/engine {:key key :salt salt :alg :pbkdf2 :digest :sha1
                            :iterations 4096})
        result (kdf/get-bytes engine 20)]
    (is (b/equals? result expected))))

(deftest pbkdf2-sha1-test-16777216
  (let [key (c/str->bytes "password")
        salt (c/str->bytes "salt")
        expected (c/hex->bytes "EEFE3D61CD4DA4E4E9945B3D6BA2158C2634E984")
        engine (kdf/engine {:key key :salt salt :alg :pbkdf2 :digest :sha1
                            :iterations 16777216})
        result (kdf/get-bytes engine 20)]
    (is (b/equals? result expected))))

(deftest pbkdf2-sha1-test-long-pass
  (let [key (c/str->bytes "passwordPASSWORDpassword")
        salt (c/str->bytes "saltSALTsaltSALTsaltSALTsaltSALTsalt")
        expected (c/hex->bytes (str "3D2EEC4FE41C849B80C8D83662C0E44A8B291A964C"
                                    "F2F07038"))
        engine (kdf/engine {:key key :salt salt :alg :pbkdf2 :digest :sha1
                            :iterations 4096})
        result (kdf/get-bytes engine 25)]
    (is (b/equals? result expected))))

(deftest pbkdf2-sha1-test-binary
  (let [key (c/str->bytes "pass\000word")
        salt (c/str->bytes "sa\000lt")
        expected (c/hex->bytes "56FA6AA75548099DCC37D7F03425E0C3")
        engine (kdf/engine {:key key :salt salt :alg :pbkdf2 :digest :sha1
                            :iterations 4096})
        result (kdf/get-bytes engine 16)]
    (is (b/equals? result expected))))

(deftest pbkdf2-test-def-iterations
  (let [e1 (kdf/engine {:key "" :salt "" :alg :pbkdf2+sha256 :iterations 1000})
        e2 (kdf/engine {:key "" :salt "" :alg :pbkdf2+sha256})]
    (is (b/equals? (kdf/get-bytes e1 16) (kdf/get-bytes e2 16)))))

(ns app.secrets
  (:require
   [app.common.data :as d]
   [app.common.exceptions :as ex]
   [app.common.spec :as us]
   [buddy.core.codecs :as bc]
   [buddy.core.kdf :as bk]
   [clojure.spec.alpha :as s]
   [clojure.tools.logging :as log]
   [integrant.core :as ig]))

  (with-meta
   (fn [salt length]
     (let [engine (bk/engine {:key key
                              :salt (name salt)
                              :alg :hkdf
                              :digest :blake2b-512})]
       (bk/get-bytes engine length)))
    {:key key}))