Add new Chrome OS key type: Salted SHA256

chromeos/login/auth/key_unittest.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chromeos/login/auth/key.h"
 
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace chromeos {
 
@@ skipping 26 matching lines @@
   EXPECT_EQ("5b01941771e47fa408380aa675703f4f", key.GetSecret());
 }
 
 TEST(KeyTest, TransformToSaltedAES2561234) {
   Key key(kPassword);
   key.Transform(Key::KEY_TYPE_SALTED_PBKDF2_AES256_1234, kSalt);
   EXPECT_EQ(Key::KEY_TYPE_SALTED_PBKDF2_AES256_1234, key.GetKeyType());
   EXPECT_EQ("GUkNnvqoULf/cXbZscVUnANmLBB0ovjGZsj1sKzP5BE=", key.GetSecret());
 }
 
+TEST(KeyTest, TransformToSaltedSHA256) {
+  Key key(kPassword);
+  key.Transform(Key::KEY_TYPE_SALTED_SHA256, kSalt);
+  EXPECT_EQ(Key::KEY_TYPE_SALTED_SHA256, key.GetKeyType());
+  EXPECT_EQ("WwGUF3Hkf6QIOAqmdXA/TyScTFDo4d+ow5xfof0zGdo=", key.GetSecret());
+}
+
+// The values in the KeyType enum must never change because they are stored as
+// ints in the user's cryptohome key metadata.
+TEST(KeyTest, KeyTypeStable) {
+  EXPECT_EQ(0, Key::KEY_TYPE_PASSWORD_PLAIN);
+  EXPECT_EQ(1, Key::KEY_TYPE_SALTED_SHA256_TOP_HALF);
+  EXPECT_EQ(2, Key::KEY_TYPE_SALTED_PBKDF2_AES256_1234);
+  EXPECT_EQ(3, Key::KEY_TYPE_SALTED_SHA256);
+  // The sentinel does not have to remain stable. It should be adjusted whenever
+  // a new key type is added.
+  EXPECT_EQ(4, Key::KEY_TYPE_COUNT);
+}
+
 }  // namespace chromeos