Test.cs

using System;
using System.Text;
using PasswordSecurity;

class Test
{
    public static void Main()
    {
        truncatedHashTest();
        basicTests();
        testHashFunctionChecking();
    }

    // Make sure truncated hashes don't validate.
    private static void truncatedHashTest()
    {
        string userString = "test_password";
        string goodHash = PasswordStorage.CreateHash(userString);
        string badHash = "";

        int badHashLength = goodHash.Length;

        do {
            badHashLength -= 1;
            badHash = goodHash.Substring(0, badHashLength);
            bool raised = false;
            try {
                PasswordStorage.VerifyPassword(userString, badHash);
            } catch (InvalidHashException) {
                raised = true;
            }

            if (!raised) {
                Console.WriteLine("Truncated hash test: FAIL " +
                    "(At hash length of " + badHashLength + ")");
                System.Environment.Exit(1);
            }

        // The loop goes on until it is two characters away from the last : it
        // finds. This is because the PBKDF2 function requires a hash that's at
        // least 2 characters long. This will be changed once exceptions are
        // implemented.
        } while (badHash[badHashLength - 3] != ':');

        Console.WriteLine("Truncated hash test: pass");
    }

    private static void basicTests()
    {
        // Test password validation
        bool failure = false;
        for(int i = 0; i < 10; i++)
        {
            string password = "" + i;
            string hash = PasswordStorage.CreateHash(password);
            string secondHash = PasswordStorage.CreateHash(password);
            if(hash == secondHash) {
                Console.WriteLine("Hashes of same password differ: FAIL");
                failure = true;
            }
            String wrongPassword = ""+(i+1);
            if(PasswordStorage.VerifyPassword(wrongPassword, hash)) {
                Console.WriteLine("Validate wrong password: FAIL");
                failure = true;
            }
            if(!PasswordStorage.VerifyPassword(password, hash)) {
                Console.WriteLine("Correct password: FAIL");
                failure = true;
            }
        }
        if(failure) {
            System.Environment.Exit(1);
        }
    }

    private static void testHashFunctionChecking()
    {
        string hash = PasswordStorage.CreateHash("foobar");
        hash = hash.Replace("sha1:", "sha256:");

        bool raised = false;
        try {
            PasswordStorage.VerifyPassword("foobar", hash);
        } catch (CannotPerformOperationException) {
            raised = true;
        }

        if (raised) {
            Console.WriteLine("Algorithm swap: pass");
        } else {
            Console.WriteLine("Algorithm swap: FAIL");
            System.Environment.Exit(1);
        }
    }
}