static void AssertScramSha512(SaslMechanismScramSha512 sasl, string prefix)
{
const string expected = "c=biws,r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF$k0,p=gMGXRcevScNtxZ6/8lQYpGtnsNAc3mGcmNomv+xnoOMw+3R2xNJdMNnzMlTN8PPC6wdp6dybEmDYXYTxwnYPJQ==";
const string challenge1 = "r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF$k0,s=W22ZaJ0SNY7soEsUEjb6gQ==,i=4096";
const string challenge2 = "v=ZQnYEgWQMFmmsM8aQMF0nDDCy/AgCzkwk8CmMZYcMg0vSVlKDanekLtifDSeVGT4+5ZxXnJq199RVG2rR7N7Zw==";
const string entropy = "rOprNGfwEbeRWgbNEkqO";
string token;
sasl.cnonce = entropy;
Assert.IsTrue(sasl.SupportsInitialResponse, "{0}: SupportsInitialResponse", prefix);
var challenge = Encoding.UTF8.GetString(Convert.FromBase64String(sasl.Challenge(null)));
Assert.AreEqual("n,,n=user,r=" + entropy, challenge, "{0}: initial SCRAM-SHA-512 challenge response does not match the expected string.", prefix);
Assert.IsFalse(sasl.IsAuthenticated, "{0}: should not be authenticated yet.", prefix);
token = Convert.ToBase64String(Encoding.UTF8.GetBytes(challenge1));
challenge = Encoding.UTF8.GetString(Convert.FromBase64String(sasl.Challenge(token)));
Assert.AreEqual(expected, challenge, "{0}: second SCRAM-SHA-512 challenge response does not match the expected string.", prefix);
Assert.IsFalse(sasl.IsAuthenticated, "{0}: should not be authenticated yet.", prefix);
token = Convert.ToBase64String(Encoding.UTF8.GetBytes(challenge2));
challenge = Encoding.UTF8.GetString(Convert.FromBase64String(sasl.Challenge(token)));
Assert.AreEqual(string.Empty, challenge, "{0}: third SCRAM-SHA-512 challenge should be an empty string.", prefix);
Assert.IsTrue(sasl.IsAuthenticated, "{0}: SCRAM-SHA-512 should be authenticated now.", prefix);
Assert.AreEqual(string.Empty, sasl.Challenge(string.Empty));
}
public void TestScramSha512()
{
var credentials = new NetworkCredential("user", "pencil");
var sasl = new SaslMechanismScramSha512(credentials);
var uri = new Uri("imap://elwood.innosoft.com");
AssertScramSha512(sasl, "NetworkCredential");
sasl = new SaslMechanismScramSha512("user", "pencil");
AssertScramSha512(sasl, "user/pass");
}
static void AssertSaslException(SaslMechanismScramSha512 sasl, string challenge, SaslErrorCode code)
{
var token = Encoding.ASCII.GetBytes(challenge);
try {
sasl.Challenge(Convert.ToBase64String(token));
} catch (SaslException sex) {
Assert.AreEqual(code, sex.ErrorCode, "ErrorCode");
return;
} catch (Exception ex) {
Assert.Fail("SaslException expected, but got: {0}", ex.GetType().Name);
return;
}
Assert.Fail("SaslException expected.");
}
public void TestArgumentExceptions()
{
var credentials = new NetworkCredential("username", "password");
var uri = new Uri("smtp://localhost");
var sasl = new SaslMechanismScramSha512(credentials);
Assert.DoesNotThrow(() => sasl.Challenge(null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(null, credentials));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(uri, null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(null, "username", "password"));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(uri, (string)null, "password"));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(uri, "username", null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512((string)null, "password"));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512("username", null));
}
public void TestArgumentExceptions()
{
var credentials = new NetworkCredential("username", "password");
var sasl = new SaslMechanismScramSha512(credentials);
Assert.DoesNotThrow(() => sasl.Challenge(null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512(null, "password"));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512("username", null));
sasl = new SaslMechanismScramSha512Plus(credentials);
Assert.DoesNotThrow(() => sasl.Challenge(null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512Plus(null));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512Plus(null, "password"));
Assert.Throws <ArgumentNullException> (() => new SaslMechanismScramSha512Plus("username", null));
}
public void TestSaslExceptions()
{
const string nonce = "r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF$k0";
const string salt = "s=W22ZaJ0SNY7soEsUEjb6gQ==";
const string iterations = "i=4096";
const string expected = "c=biws," + nonce + ",p=gMGXRcevScNtxZ6/8lQYpGtnsNAc3mGcmNomv+xnoOMw+3R2xNJdMNnzMlTN8PPC6wdp6dybEmDYXYTxwnYPJQ==";
const string challenge1 = nonce + "," + salt + "," + iterations;
const string challenge2 = "v=ZQnYEgWQMFmmsM8aQMF0nDDCy/AgCzkwk8CmMZYcMg0vSVlKDanekLtifDSeVGT4+5ZxXnJq199RVG2rR7N7Zw==";
const string entropy = "rOprNGfwEbeRWgbNEkqO";
var sasl = new SaslMechanismScramSha512("user", "pencil")
{
cnonce = entropy
};
string challenge, token;
challenge = Encoding.UTF8.GetString(Convert.FromBase64String(sasl.Challenge(null)));
Assert.AreEqual("n,,n=user,r=" + entropy, challenge, "initial SCRAM-SHA-512 challenge response does not match the expected string.");
Assert.IsFalse(sasl.IsAuthenticated, "should not be authenticated yet.");
AssertSaslException(sasl, challenge1.Replace(salt + ",", string.Empty), SaslErrorCode.IncompleteChallenge); // missing salt
AssertSaslException(sasl, challenge1.Replace(nonce + ",", string.Empty), SaslErrorCode.IncompleteChallenge); // missing nonce
AssertSaslException(sasl, challenge1.Replace("," + iterations, string.Empty), SaslErrorCode.IncompleteChallenge); // missing iterations
AssertSaslException(sasl, challenge1.Replace(nonce, "r=asfhajksfhkafhakhafk"), SaslErrorCode.InvalidChallenge); // invalid nonce
AssertSaslException(sasl, challenge1.Replace(iterations, "i=abcd"), SaslErrorCode.InvalidChallenge); // invalid iterations
token = Convert.ToBase64String(Encoding.UTF8.GetBytes(challenge1));
challenge = Encoding.UTF8.GetString(Convert.FromBase64String(sasl.Challenge(token)));
Assert.AreEqual(expected, challenge, "second SCRAM-SHA-512 challenge response does not match the expected string.");
Assert.IsFalse(sasl.IsAuthenticated, "should not be authenticated yet.");
AssertSaslException(sasl, "x=abcdefg", SaslErrorCode.InvalidChallenge);
AssertSaslException(sasl, "v=6rriTRBi23WpRR/wtup+mMhUZUn/dB5nLTJRsjl9", SaslErrorCode.IncorrectHash); // incorrect hash length
AssertSaslException(sasl, "v=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==", SaslErrorCode.IncorrectHash); // incorrect hash
token = Convert.ToBase64String(Encoding.UTF8.GetBytes(challenge2));
challenge = Encoding.UTF8.GetString(Convert.FromBase64String(sasl.Challenge(token)));
Assert.AreEqual(string.Empty, challenge, "third SCRAM-SHA-512 challenge should be an empty string.");
Assert.IsTrue(sasl.IsAuthenticated, "SCRAM-SHA-512 should be authenticated now.");
Assert.AreEqual(string.Empty, sasl.Challenge(string.Empty));
}