From ed3b5218559710e96595c43fe79b9e8d36cb794a Mon Sep 17 00:00:00 2001
From: Jens Steube <jens.steube@gmail.com>
Date: Wed, 18 May 2022 16:33:33 +0200
Subject: [PATCH] Add unit-test for -m 29500

---
 tools/test_modules/m29500.pm | 77 ++++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 tools/test_modules/m29500.pm

diff --git a/tools/test_modules/m29500.pm b/tools/test_modules/m29500.pm
new file mode 100644
index 000000000..3e3935f27
--- /dev/null
+++ b/tools/test_modules/m29500.pm
@@ -0,0 +1,77 @@
+#!/usr/bin/env perl
+
+##
+## Author......: See docs/credits.txt
+## License.....: MIT
+##
+
+use strict;
+use warnings;
+
+use Digest::SHA  qw (sha1);
+use Digest::HMAC qw (hmac);
+use MIME::Base64 qw (encode_base64url decode_base64url);
+use JSON         qw (encode_json decode_json);
+use Data::Dumper;
+
+sub module_constraints { [[0, 64], [-1, -1], [-1, -1], [-1, -1], [-1, -1]] }
+
+sub module_generate_hash
+{
+  my $word = shift;
+  my $salt = shift || get_random_flask_salt ();
+
+  # https://github.com/hashcat/hashcat/issues/3239
+  #first = HMACSHA1(key=secret, message="cookie-session").digest() // "cookie-session" is a constant; digest is raw digest bytes
+  #second = HMACSHA1(key=first, message=message).digest()
+
+  my $digest1 = hmac ("cookie-session", $word, \&sha1);
+
+  my $digest2 = hmac ($salt, $digest1, \&sha1);
+
+  my $hash = sprintf ("%s.%s", $salt, encode_base64url ($digest2, ""));
+
+  return $hash;
+}
+
+sub module_verify_hash
+{
+  my $line = shift;
+
+  my ($hash, $word) = split (':', $line);
+
+  return unless defined $hash;
+  return unless defined $word;
+
+  my @data = split (/\./, $hash);
+
+  return unless scalar @data == 3;
+
+  my ($header, $payload, $signature) = @data;
+
+  my $salt = $header . "." . $payload;
+
+  my $word_packed = pack_if_HEX_notation ($word);
+
+  my $new_hash = module_generate_hash ($word_packed, $salt);
+
+  return ($new_hash, $word);
+}
+
+sub get_random_flask_salt
+{
+  my $username = random_number (10000, 99999);
+
+  my $header =
+  {
+    "username" => $username
+  };
+
+  my $header_json = encode_json ($header);
+
+  my $header_base64  = encode_base64url ($header_json, "");
+
+  return $header_base64 . "." . "YjdgRQ";
+}
+
+1;