--- /dev/null
+/******************************************************************************
+ * Icinga 2 *
+ * Copyright (C) 2012-2018 Icinga Development Team (https://icinga.com/) *
+ * *
+ * This program is free software; you can redistribute it and/or *
+ * modify it under the terms of the GNU General Public License *
+ * as published by the Free Software Foundation; either version 2 *
+ * of the License, or (at your option) any later version. *
+ * *
+ * This program is distributed in the hope that it will be useful, *
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
+ * GNU General Public License for more details. *
+ * *
+ * You should have received a copy of the GNU General Public License *
+ * along with this program; if not, write to the Free Software Foundation *
+ * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. *
+ ******************************************************************************/
+
+#include "base/utility.hpp"
+#include <chrono>
+#include <BoostTestTargetConfig.h>
+
+using namespace icinga;
+
+BOOST_AUTO_TEST_SUITE(base_utility)
+
+BOOST_AUTO_TEST_CASE(comparepasswords_works)
+{
+ BOOST_CHECK(Utility::ComparePasswords("", ""));
+
+ BOOST_CHECK(!Utility::ComparePasswords("x", ""));
+ BOOST_CHECK(!Utility::ComparePasswords("", "x"));
+
+ BOOST_CHECK(Utility::ComparePasswords("x", "x"));
+ BOOST_CHECK(!Utility::ComparePasswords("x", "y"));
+
+ BOOST_CHECK(Utility::ComparePasswords("abcd", "abcd"));
+ BOOST_CHECK(!Utility::ComparePasswords("abc", "abcd"));
+ BOOST_CHECK(!Utility::ComparePasswords("abcde", "abcd"));
+}
+
+BOOST_AUTO_TEST_CASE(comparepasswords_issafe)
+{
+ using std::chrono::duration_cast;
+ using std::chrono::microseconds;
+ using std::chrono::steady_clock;
+
+ String a, b;
+
+ a.Append(200000001, 'a');
+ b.Append(200000002, 'b');
+
+ auto start1 (steady_clock::now());
+
+ Utility::ComparePasswords(a, a);
+
+ auto duration1 (steady_clock::now() - start1);
+
+ auto start2 (steady_clock::now());
+
+ Utility::ComparePasswords(a, b);
+
+ auto duration2 (steady_clock::now() - start2);
+
+ double diff = (double)duration_cast<microseconds>(duration1).count() / (double)duration_cast<microseconds>(duration2).count();
+ BOOST_CHECK(0.9 <= diff && diff <= 1.1);
+}
+
+BOOST_AUTO_TEST_SUITE_END()