Merge pull request #490 from dreid/hkdf

HKDF - RFC5869 implementation.

1 files changed, 51 insertions, 0 deletions

diff --git a/tests/hazmat/primitives/test_hkdf_vectors.py b/tests/hazmat/primitives/test_hkdf_vectors.py
new file mode 100644
index 00000000..1e67234f
--- /dev/null
+++ b/tests/hazmat/primitives/test_hkdf_vectors.py
@@ -0,0 +1,51 @@
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+# implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+from __future__ import absolute_import, division, print_function
+
+import os
+
+import pytest
+
+from cryptography.hazmat.primitives import hashes
+
+from .utils import generate_hkdf_test
+from ...utils import load_nist_vectors
+
+
+@pytest.mark.supported(
+    only_if=lambda backend: backend.hmac_supported(hashes.SHA1()),
+    skip_message="Does not support SHA1."
+)
+@pytest.mark.hmac
+class TestHKDFSHA1(object):
+    test_HKDFSHA1 = generate_hkdf_test(
+        load_nist_vectors,
+        os.path.join("KDF"),
+        ["rfc-5869-HKDF-SHA1.txt"],
+        hashes.SHA1()
+    )
+
+
+@pytest.mark.supported(
+    only_if=lambda backend: backend.hmac_supported(hashes.SHA256()),
+    skip_message="Does not support SHA256."
+)
+@pytest.mark.hmac
+class TestHKDFSHA256(object):
+    test_HKDFSHA1 = generate_hkdf_test(
+        load_nist_vectors,
+        os.path.join("KDF"),
+        ["rfc-5869-HKDF-SHA256.txt"],
+        hashes.SHA256()
+    )