onetime_test.go

package onetime

import (
	"crypto/sha1"
	"crypto/sha256"
	"crypto/sha512"
	"strings"
	"testing"
	"time"
)

// TestHOTP validates the HOTP implementation against test values provided in
// Appendix D of RFC-4226.
func TestHOTP(t *testing.T) {
	expected := []uint{
		755224,
		287082,
		359152,
		969429,
		338314,
		254676,
		287922,
		162583,
		399871,
		520489,
	}
	secret := []byte("12345678901234567890")

	otp, _ := Simple(6)

	for i, exp := range expected {
		if v := otp.HOTP(secret, uint64(i)); v != exp {
			t.Errorf("HOTP(secret, %v) = %v, want %v", i, v, exp)
		}
	}
}

// TestTOTP validates the TOTP implementation against test values provided in
// Appendix B of RFC-6238.
func TestTOTP(t *testing.T) {
	expected := []uint{
		94287082,
		46119246,
		90693936,
		7081804,
		68084774,
		25091201,
		14050471,
		67062674,
		99943326,
		89005924,
		91819424,
		93441116,
		69279037,
		90698825,
		38618901,
		65353130,
		77737706,
		47863826,
	}

	times := []time.Time{
		time.Unix(59, 0),
		time.Unix(1111111109, 0),
		time.Unix(1111111111, 0),
		time.Unix(1234567890, 0),
		time.Unix(2000000000, 0),
		time.Unix(20000000000, 0),
	}

	digit := 8
	const step = 30 * time.Second
	otps := []OneTimePassword{
		OneTimePassword{digit, step, time.Unix(0, 0), sha1.New},
		OneTimePassword{digit, step, time.Unix(0, 0), sha256.New},
		OneTimePassword{digit, step, time.Unix(0, 0), sha512.New},
	}

	keyPart := "1234567890"
	secrets := [][]byte{
		[]byte(strings.Repeat(keyPart, 2)),
		[]byte(strings.Repeat(keyPart, 4)[:32]),
		[]byte(strings.Repeat(keyPart, 8)[:64]),
	}

	for i, exp := range expected {
		otp := otps[i%3]
		secret := secrets[i%3]
		now := times[i/3]
		if v := otp.HOTP(secret, otp.steps(now)); v != exp {
			t.Error("time:", uint64(now.Unix()-otp.BaseTime.Unix()))
			t.Errorf("TOTP(secret) = %v, want %v (time: %v, hash: %v)", v, exp, now, otp.Hash)
		}
	}
}

func BenchmarkHOTPsha256(b *testing.B) {
	epoch := time.Unix(0, 0)
	otp := OneTimePassword{8, 30 * time.Second, epoch, sha256.New}
	keyPart := "1234567890"
	secret := []byte(strings.Repeat(keyPart, 4))
	now := time.Unix(20000000000, 0)
	b.ResetTimer()
	for i := 0; i < b.N; i++ {
		_ = otp.HOTP(secret, otp.steps(now))
	}
}