def test_06_password_encrypt_decrypt(self):
res = DefaultSecurityModule.password_encrypt("secrettext", "password1")
self.assertTrue(
len(res) == len("80f1833450a74224c32d03fe4161735c"
":c1944e8c0982d5c35992a9b25abad18a2"
"8cac15585ed2fbab05bd2b1ea2cc44b"), res)
res = DefaultSecurityModule.password_decrypt(res, "password1")
self.assertTrue(res == b"secrettext", res)
# encrypt and decrypt binary data like the enckey
enckey = geturandom(96)
cipher = DefaultSecurityModule.password_encrypt(
enckey, "top secret "
"!!!")
clear = DefaultSecurityModule.password_decrypt(cipher, "top secret "
"!!!")
self.assertTrue(enckey == clear, (enckey, clear))
# encrypt and decrypt binary data like the enckey
enckey = geturandom(96)
cipher = DefaultSecurityModule.password_encrypt(
enckey, "topSecret123!")
clear = DefaultSecurityModule.password_decrypt(cipher, "topSecret123!")
self.assertTrue(enckey == clear, (enckey, clear))
def test_06_password_encrypt_decrypt(self):
res = DefaultSecurityModule.password_encrypt("secrettext", "password1")
self.assertTrue(len(res) == len(
"80f1833450a74224c32d03fe4161735c"
":c1944e8c0982d5c35992a9b25abad18a2"
"8cac15585ed2fbab05bd2b1ea2cc44b"), res)
res = DefaultSecurityModule.password_decrypt(res, "password1")
self.assertTrue(res == "secrettext", res)
# encrypt and decrypt binary data like the enckey
enckey = geturandom(96)
cipher = DefaultSecurityModule.password_encrypt(enckey, "top secret "
"!!!")
clear = DefaultSecurityModule.password_decrypt(cipher, "top secret "
"!!!")
self.assertTrue(enckey == clear, (enckey, clear))
# encrypt and decrypt binary data like the enckey
enckey = geturandom(96)
cipher = DefaultSecurityModule.password_encrypt(enckey, "topSecret123!")
clear = DefaultSecurityModule.password_decrypt(cipher, "topSecret123!")
self.assertTrue(enckey == clear, (enckey, clear))
def encrypt_enckey(encfile):
"""
You will be asked for a password and the encryption key in the specified
file will be encrypted with an AES key derived from your password.
The encryption key in the file is a 96 bit binary key.
The password based encrypted encryption key is a hex combination of an IV
and the encrypted data.
The result can be piped to a new enckey file.
"""
password = getpass()
password2 = getpass(prompt='Confirm: ')
if password != password2:
import sys
sys.exit('Error: passwords do not match.')
f = open(encfile)
enckey = f.read()
f.close()
res = DefaultSecurityModule.password_encrypt(enckey, password)
print res
