openstack
/
oslo-incubator
Code Issues Proposed changes

Merge "Remove authutils"

This commit is contained in:
Jenkins 2013-12-03 13:51:08 +00:00 committed by Gerrit Code Review
parent cc142dc1ed 6c8b8ff9cb
commit 8668695cc2
3 changed files with 0 additions and 74 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
MAINTAINERS
View File

@ -60,12 +60,6 @@ M: Gordon Chung <chungg@ca.ibm.com>
S: Maintained
F: middleware/audit.py
== authutils ==
M:
S: Orphan
F: authutils.py
== cfg ==
M: Mark McLoughlin <markmc@redhat.com>

42
openstack/common/authutils.py
View File

@ -1,42 +0,0 @@
# Copyright 2011 OpenStack Foundation.
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
"""
Authentication related utilities and helper functions.
"""
def auth_str_equal(provided, known):
"""Constant-time string comparison.
:params provided: the first string
:params known: the second string
:return: True if the strings are equal.
This function takes two strings and compares them. It is intended to be
used when doing a comparison for authentication purposes to help guard
against timing attacks. When using the function for this purpose, always
provide the user-provided password as the first argument. The time this
function will take is always a factor of the length of this string.
"""
result = 0
p_len = len(provided)
k_len = len(known)
for i in range(p_len):
a = ord(provided[i]) if i < p_len else 0
b = ord(known[i]) if i < k_len else 0
result |= a ^ b
return (p_len == k_len) & (result == 0)

26
tests/unit/test_authutils.py
View File

@ -1,26 +0,0 @@
# Copyright 2011 OpenStack Foundation.
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
from openstack.common import authutils
from openstack.common import test
class AuthUtilsTest(test.BaseTestCase):
def test_auth_str_equal(self):
self.assertTrue(authutils.auth_str_equal('abc123', 'abc123'))
self.assertFalse(authutils.auth_str_equal('a', 'aaaaa'))
self.assertFalse(authutils.auth_str_equal('aaaaa', 'a'))
self.assertFalse(authutils.auth_str_equal('ABC123', 'abc123'))