Python generate_random_string Examples

Example #1

File: test_auth_utils.py Project: compiler-errors/RuddockWebsite

def test_parser():
    """
  Tests PasswordHashParser implementation.
  """
    PWD_LENGTH = 64
    password = misc_utils.generate_random_string(PWD_LENGTH)
    wrong_password = misc_utils.generate_random_string(PWD_LENGTH)
    assert password != wrong_password

    # Test pbkdf2_sha256(md5(password)).
    md5_salt = auth_utils.generate_salt()
    pbkdf2_sha256_salt = auth_utils.generate_salt()
    pbkdf2_sha256_rounds = 100000

    password_hash = auth_utils.hash_password(password, md5_salt, None, 'md5')
    password_hash = auth_utils.hash_password(password_hash, pbkdf2_sha256_salt,
                                             pbkdf2_sha256_rounds,
                                             'pbkdf2_sha256')

    hash_string = "$md5|pbkdf2_sha256$|{}${}|{}${}".format(
        pbkdf2_sha256_rounds, md5_salt, pbkdf2_sha256_salt, password_hash)

    parser = auth_utils.PasswordHashParser()
    parser.parse(hash_string)

    assert parser.verify_password(password) == True
    assert parser.verify_password(wrong_password) == False
    assert str(parser) == hash_string

Example #2

File: test_auth_utils.py Project: RuddockHouse/RuddockWebsite

def test_parser():
  """
  Tests PasswordHashParser implementation.
  """
  PWD_LENGTH = 64

  password = misc_utils.generate_random_string(PWD_LENGTH)
  wrong_password = misc_utils.generate_random_string(PWD_LENGTH)
  assert password != wrong_password

  # Test pbkdf2_sha256(md5(password)).
  md5_salt = auth_utils.generate_salt()
  pbkdf2_sha256_salt = auth_utils.generate_salt()
  pbkdf2_sha256_rounds = 100000

  password_hash = auth_utils.hash_password(password, md5_salt, None, 'md5')
  password_hash = auth_utils.hash_password(password_hash,
      pbkdf2_sha256_salt, pbkdf2_sha256_rounds, 'pbkdf2_sha256')

  hash_string = "$md5|pbkdf2_sha256$|{}${}|{}${}".format(
      pbkdf2_sha256_rounds,
      md5_salt,
      pbkdf2_sha256_salt,
      password_hash)

  parser = auth_utils.PasswordHashParser()
  parser.parse(hash_string)

  assert parser.verify_password(password) == True
  assert parser.verify_password(wrong_password) == False
  assert str(parser) == hash_string

Example #3

File: test_auth_utils.py Project: compiler-errors/RuddockWebsite

def test_compare_secure_strings():
    """
  Tests that compare_secure_strings() returns True when the strings are equal
  and False otherwise. Does not test if the function actually mitigates timing
  side channel attacks.
  """
    LENGTH = 128
    string1 = misc_utils.generate_random_string(LENGTH)
    string2 = misc_utils.generate_random_string(LENGTH)
    assert string1 != string2

    # Make sure compare_secure_strings returns True and False when expected.
    assert misc_utils.compare_secure_strings(string1, string1) == True
    assert misc_utils.compare_secure_strings(string1, string2) == False

Example #4

File: test_auth_utils.py Project: RuddockHouse/RuddockWebsite

def test_compare_secure_strings():
  """
  Tests that compare_secure_strings() returns True when the strings are equal
  and False otherwise. Does not test if the function actually mitigates timing
  side channel attacks.
  """
  LENGTH = 128
  string1 = misc_utils.generate_random_string(LENGTH)
  string2 = misc_utils.generate_random_string(LENGTH)
  assert string1 != string2

  # Make sure compare_secure_strings returns True and False when expected.
  assert misc_utils.compare_secure_strings(string1, string1) == True
  assert misc_utils.compare_secure_strings(string1, string2) == False

Example #5

def generate_create_account_key():
  """
  Generates a random account creation key. Implementation is very similar to
  generate_reset_key().
  """
  chars = string.ascii_lowercase + string.digits
  return misc_utils.generate_random_string(constants.CREATE_ACCOUNT_KEY_LENGTH,
      chars=chars)

Example #6

def generate_reset_key():
  """
  Generates a random reset key. We use only digits and lowercase letters since
  the database string comparison is case insensitive (if more entropy is
  needed, just make the string longer).
  """
  chars = string.ascii_lowercase + string.digits
  return misc_utils.generate_random_string(constants.PWD_RESET_KEY_LENGTH,
      chars=chars)

Example #7

File: test_auth_utils.py Project: compiler-errors/RuddockWebsite

def test_hash_password():
    """
  Tests each hash algorithm implemented by hash_password().
  """
    PWD_LENGTH = 64
    password = misc_utils.generate_random_string(PWD_LENGTH)
    salt = auth_utils.generate_salt()

    # PBKDF2_SHA256
    rounds = 100000
    expected_result = binascii.hexlify(
        hashlib.pbkdf2_hmac('sha256', password, salt, rounds))
    result = auth_utils.hash_password(password, salt, rounds, 'pbkdf2_sha256')
    assert result == expected_result

    # MD5
    expected_result = hashlib.md5(salt + password).hexdigest()
    result = auth_utils.hash_password(password, salt, None, 'md5')
    assert result == expected_result

Example #8

def test_hash_password():
  """
  Tests each hash algorithm implemented by hash_password().
  """
  PWD_LENGTH = 64
  password = misc_utils.generate_random_string(PWD_LENGTH)
  salt = auth_utils.generate_salt()

  # PBKDF2_SHA256
  rounds = 100000
  expected_result = binascii.hexlify(
      hashlib.pbkdf2_hmac('sha256', password, salt, rounds))
  result = auth_utils.hash_password(password, salt, rounds, 'pbkdf2_sha256')
  assert result == expected_result

  # MD5
  expected_result = hashlib.md5(salt + password).hexdigest()
  result = auth_utils.hash_password(password, salt, None, 'md5')
  assert result == expected_result

Example #9

def generate_salt():
  """Generates a pseudorandom salt."""
  return misc_utils.generate_random_string(constants.SALT_SIZE)