From 525a7d538d4fc4a1006bb3e9a6b747c6b7c577b3 Mon Sep 17 00:00:00 2001
From: Anderson Herzogenrath da Costa <andersonhc@gmail.com>
Date: Wed, 2 Aug 2023 05:31:57 -0400
Subject: [PATCH] add tests

---
 .../encryption_aes256_user_password.pdf       | Bin 0 -> 1914 bytes
 test/encryption/test_encryption.py            |  38 +++++++++++++++---
 2 files changed, 33 insertions(+), 5 deletions(-)
 create mode 100644 test/encryption/encryption_aes256_user_password.pdf

diff --git a/test/encryption/encryption_aes256_user_password.pdf b/test/encryption/encryption_aes256_user_password.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..a12487e97e81ff9890fd32bec4b74580ec5b78b3
GIT binary patch
literal 1914
zcma)7ON$&;6rPnx;W|6vf)iY5rtYKei!_7xnZ!w$(4EA^5U|pHXQo3>)lgL(W`ep>
zbQ3q?&XpVe1%lv4!RLPnf(ti-u3QKTp6Z^-G>I_YMLo`~`<-*X@2h(+-t_Sj-M|?^
z7}fXgXM;hOyLw)Ah-CTJbkd?722;bkS$-o;rlqZq&<=(O*L;I2qzba3G|b*QK1?XT
zS?;Aa+uY1jHR<8#3hee_s?4~X*3}6n%Hy=VimLf+1_1ri>*aAh?@+#7C0Ebp2h}p%
zqQ1Q0X%bg<<*eRYNz<2jR(;i_s%ufPTyv$V=Z9!8IH_>?nvYO^t0}AYuxwH_K1R8N
zh))lu<21Ztp#i7|W`Kqz$}qL{ycwq!iPcj2qF3tZQ=Zllr?W0K(BrJ^l27A$lCu1I
zs`k2lq(#4|?V3~`WNS~2`TpB4|MK?-<F8+M?f%+JTbJ+dU-<FpyS4W}{^Gf{*B`&~
z&pXfmapB9)?9hJx&5J)jvR{3&_0y&6>#wf=@Yd0%zm*R^{PXd9kKX+K-OC^0Ti>q#
z_3QV&7AL7rRN*US+OkcthDP(NY4#v>({Y*Qp@MR!)gH><m{z80r>B7|AI<M|3#og-
z!6QrEdxRApdXAp((1Qd0k)S^BaKUX;k4LFPJ306dlt@RA|JnhNX;1F%<bLh$3ang#
zHS=!2ZqNXqGfW{ck4#cbtk5_{?}@M;OD}>foCT#F$k5x;gHY!KVym!V8guHUrG!xH
zw2Gl1MjJ_R^i~;T3x}2WT5>17GKDV~cZ5>n10)0v@24@aa!&1-uz)cuB%uZN)<)(9
zH#8Jf7g!l9qYGR)<(!qy7!xtUMALwyAUJ5sHdn|~E9AM@D>CXP%Lf;4pxlJf9rnbb
zjGjvCn&ZQ6Y35BB3v=|L8>uTN@F$|(a@K;iPyIgX%4$+JlP6G=i!9$p1FeGhjB+0g
zGc;Q7f-z2DDR80sUYs_Oy1;x?IylNCXOZE+gruBse;!#-+IBz#77TXAF<Ds0xMox;
z=0w3M@MVN6RG?M@k%kea1OZ(@GvXzPWrJk}z}!Ta3b>}`pancegvW+O;<%(XV#O`U
zFE|sdu&OuE5J88d?f|U3;Iw~f&R%Y#frTW_LOv=(AuPk*b0ajD7Mn<{Cb1BjS`J-$
zEQI1JIxN9bR8i@9{2#sFhTdZ&h6Iiat^|*cYwMW;HhGXF`hvPBEQPRF#78f%cF?*2
z3mcA^lLmUZgZPSRj+(TaVWhLO0+8UGakPuhVj3-`QFRv6um$vEB}VkK-!VXX`a6!{
z)Oczw|BtmoJ(GjL-*UFLYs%>?HH$NCG<}$$jeJ<w9qLadI8ClqyEW?f6nKUWt~WL6
z|B`;nqn&|qR1)R6HwshFiXfwwAw+Dj<v`=+`Clw{ueK|jZowqsLS+{(hV7XB3mkUu
ArvLx|

literal 0
HcmV?d00001

diff --git a/test/encryption/test_encryption.py b/test/encryption/test_encryption.py
index 098784d2d..5d0fc8fe4 100644
--- a/test/encryption/test_encryption.py
+++ b/test/encryption/test_encryption.py
@@ -237,6 +237,32 @@ def fixed_iv(size):
     assert_pdf_equal(pdf, HERE / "encryption_aes256.pdf", tmp_path)
 
 
+def test_encryption_aes256_with_user_password(tmp_path):
+    pdf = FPDF()
+
+    def custom_file_id():
+        return pdf._default_file_id(bytearray([0xFF]))
+
+    pdf.file_id = custom_file_id
+
+    def fixed_iv(size):
+        return bytearray(size)
+
+    pdf.set_author("author")
+    pdf.set_subject("string to be encrypted")
+    pdf.add_page()
+    pdf.set_font("helvetica", size=12)
+    pdf.cell(txt="hello world")
+    pdf.set_encryption(
+        owner_password="fpdf2",
+        user_password="1" * 1000,
+        encryption_method=EncryptionMethod.AES_256,
+        permissions=AccessPermission.all(),
+    )
+    pdf._security_handler.get_random_bytes = fixed_iv
+    assert_pdf_equal(pdf, HERE / "encryption_aes256_user_password.pdf", tmp_path)
+
+
 def test_blank_owner_password(tmp_path):
     pdf = FPDF()
     pdf.set_encryption(
@@ -250,11 +276,12 @@ def test_blank_owner_password(tmp_path):
 
 
 def test_password_prep():
-    # The PDF standard requires the passwords to be prepared using the stringprep algorithm
-    # using the SASLprep as per RFC 4013
-    # https://datatracker.ietf.org/doc/html/rfc4013
-    # Those assertions are bases on the examples section of the RFC
-    #
+    """
+    The PDF standard requires the passwords to be prepared using the stringprep algorithm
+    using the SASLprep as per RFC 4013
+    https://datatracker.ietf.org/doc/html/rfc4013
+    Those assertions are bases on the examples section of the RFC
+    """
     assert sh.prepare_string("I\xadX") == b"IX"  # SOFT HYPHEN mapped to nothing
     assert sh.prepare_string("user") == b"user"  # no transformation
     assert sh.prepare_string("USER") == b"USER"  # case preserved
@@ -265,3 +292,4 @@ def test_password_prep():
     assert str(e.value) == "The password  contains prohibited characters"
     with pytest.raises(FPDFException) as e:
         sh.prepare_string("\u0627\x31")  # Error - bidirectional check
+    assert sh.prepare_string("A" * 300) == b"A" * 127  # test cap 127 chars