derivepassphrase.git

@@ -28,7 +28,7 @@ from __future__ import annotations

 import argparse

 import textwrap

-import tests

+import tests.data

 from derivepassphrase import _types, ssh_agent, vault  # noqa: PLC2701

@@ -39,9 +39,9 @@ def try_key(

     /,

     *,

     deterministic_signature_class: (

-        tests.SSHTestKeyDeterministicSignatureClass

-    ) = tests.SSHTestKeyDeterministicSignatureClass.RFC_6979,

-) -> tests.SSHTestKey | None:

+        tests.data.SSHTestKeyDeterministicSignatureClass

+    ) = tests.data.SSHTestKeyDeterministicSignatureClass.RFC_6979,

+) -> tests.data.SSHTestKey | None:

     """Query a signature and derived passphrase for the named key, if possible.

     Args:

@@ -66,7 +66,7 @@ def try_key(

         `None` if no such signature augmentation could be performed.

     """  # noqa: E501,RUF002

-    key = tests.ALL_KEYS[keyname]

+    key = tests.data.ALL_KEYS[keyname]

     if not vault.Vault.is_suitable_ssh_key(key.public_key_data, client=client):

         return None

     signature: bytes

@@ -82,18 +82,18 @@ def try_key(

         return None

     expected_signatures = dict(key.expected_signatures)

     signature_class = (

-        tests.SSHTestKeyDeterministicSignatureClass.SPEC

+        tests.data.SSHTestKeyDeterministicSignatureClass.SPEC

         if vault.Vault.is_suitable_ssh_key(key.public_key_data)

         else deterministic_signature_class

     )

     expected_signatures[signature_class] = (

-        tests.SSHTestKeyDeterministicSignature(

+        tests.data.SSHTestKeyDeterministicSignature(

             signature=signature,

             derived_passphrase=derived_passphrase,

             signature_class=signature_class,

         )

     )

-    return tests.SSHTestKey(

+    return tests.data.SSHTestKey(

         public_key=key.public_key,

         public_key_data=key.public_key_data,

         private_key=key.private_key,

@@ -102,7 +102,7 @@ def try_key(

     )

-def format_key(key: tests.SSHTestKey) -> str:

+def format_key(key: tests.data.SSHTestKey) -> str:

     """Return a formatted SSH test key."""

     ascii_printables = range(32, 127)

     ascii_whitespace = {ord(" "), ord("\n"), ord("\t"), ord("\r"), ord("\f")}

@@ -145,7 +145,7 @@ def format_key(key: tests.SSHTestKey) -> str:

             ])

             if (

                 sig.signature_class

-                != tests.SSHTestKeyDeterministicSignatureClass.SPEC

+                != tests.data.SSHTestKeyDeterministicSignatureClass.SPEC

             ):

                 expected_signature_lines.append(

                     f"        signature_class={sig.signature_class!s},\n"

@@ -168,16 +168,16 @@ def main(argv: list[str] | None = None) -> None:

         "--rfc-6979",

         action="store_const",

         dest="deterministic_signature_class",

-        const=tests.SSHTestKeyDeterministicSignatureClass.RFC_6979,

-        default=tests.SSHTestKeyDeterministicSignatureClass.RFC_6979,

+        const=tests.data.SSHTestKeyDeterministicSignatureClass.RFC_6979,

+        default=tests.data.SSHTestKeyDeterministicSignatureClass.RFC_6979,

         help="assume RFC 6979 signatures for deterministic DSA",

     )

     group.add_argument(

         "--pageant-068-080",

         action="store_const",

         dest="deterministic_signature_class",

-        const=tests.SSHTestKeyDeterministicSignatureClass.Pageant_068_080,

-        default=tests.SSHTestKeyDeterministicSignatureClass.RFC_6979,

+        const=tests.data.SSHTestKeyDeterministicSignatureClass.Pageant_068_080,

+        default=tests.data.SSHTestKeyDeterministicSignatureClass.RFC_6979,

         help="assume Pageant 0.68-0.80 signatures for deterministic DSA",

     )

     ap.add_argument(

@@ -189,7 +189,7 @@ def main(argv: list[str] | None = None) -> None:

     )

     args = ap.parse_args(args=argv)

     if not args.keynames:

-        args.keynames = list(tests.ALL_KEYS.keys())

+        args.keynames = list(tests.data.ALL_KEYS.keys())

     with ssh_agent.SSHAgentClient.ensure_agent_subcontext() as client:

         for keyname in args.keynames:

             key = try_key(

@@ -2,3120 +2,53 @@

 #

 # SPDX-License-Identifier: Zlib

-from __future__ import annotations

+"""The `derivepassphrase` test suite.

-import base64

-import contextlib

-import copy

-import enum

-import errno

-import importlib.util

-import json

-import logging

-import os

-import pathlib

-import re

-import shlex

-import stat

-import sys

-import tempfile

-import types

-import zipfile

-from typing import TYPE_CHECKING, TypedDict

+Overview

+========

-import click.testing

-import hypothesis

-import pytest

-from hypothesis import strategies

-from typing_extensions import NamedTuple, assert_never, overload

+The `derivepassphrase` test suite contains testing support code and the

+actual unit- and integration-test functions.

-from derivepassphrase import _types, cli, ssh_agent, vault

-from derivepassphrase._internals import cli_helpers, cli_machinery

-from derivepassphrase.ssh_agent import socketprovider

+Layout (test functions)

+=======================

-__all__ = ()

+`derivepassphrase` uses `pytest`, `coverage` and `hypothesis` for

+testing.  Tests are auto-discovered using `pytest`'s test collection

+machinery and configuration system, and may use `hypothesis` for

+parametrization.

-if TYPE_CHECKING:

-    import socket

-    from collections.abc import Callable, Iterator, Mapping, Sequence

-    from contextlib import AbstractContextManager

-    from typing import IO, NotRequired

+Layout (support code)

+=====================

-    from typing_extensions import Any, Buffer, Self

+The testing support code is divided into five modules in two

+subpackages: `tests.data`, `tests.data.callables`, `tests.machinery`,

+`tests.machinery.pytest` and `tests.machinery.hypothesis`.  They have

+strict import requirements: any module in this list may only import data

+and functionality from modules earlier in this list.

+  * The package `tests.data` includes static test data, types, and

+    associated lightweight machinery (think: accessors, categorization

+    functions, and the like).

-class SSHTestKeyDeterministicSignatureClass(str, enum.Enum):

-    """The class of a deterministic signature from an SSH test key.

+  * The package `tests.data.callables` includes functions that operate

+    on test data, or that alternatively implement stubbed versions of

+    proper `derivepassphrase` functionality.  This includes test

+    doubles, if they do not depend on the presence of certain test

+    machinery.  Data is only included in this module (instead of in

+    `tests.data`) if it depends on the functions in this module.

-    Attributes:

-        SPEC:

-            A deterministic signature directly implied by the

-            specification of the signature algorithm.

-        RFC_6979:

-            A deterministic signature as specified by RFC 6979.  Only

-            used with DSA and ECDSA keys (that aren't also EdDSA keys).

-        Pageant_068_080:

-            A deterministic signature as specified by Pageant 0.68.

-            Only used with DSA and ECDSA keys (that aren't also EdDSA

-            keys), and only used with Pageant from 0.68 up to and

-            including 0.80.

+  * The package `tests.machinery` includes data and functions that is

+    not specific to any test system, but which nonetheless is of little

+    value outside of such a system.  This includes "fakes", i.e.

+    reasonably complete reimplementations of existing `derivepassphrase`

+    functionality, for comparison or "switching out" purposes.

-            Usage of this signature class together with an ECDSA NIST

-            P-521 key [turned out to leak enough information per

-            signature to quickly compromise the entire private key

-            (CVE-2024-31497)][PUTTY_CVE_2024_31497], so newer Pageant

-            versions abandon this signature class in favor of RFC 6979.

+  * The package `tests.machinery.pytest` includes `pytest`-specific data

+    and functions, such as marks and parametrization sets.

-            [PUTTY_CVE_2024_31497]: https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html

+  * The package `tests.machinery.hypothesis` includes

+    `hypothesis`-specific data and functions, such as `hypothesis`

+    strategies.

 """

-

-    SPEC = enum.auto()

-    """"""

-    RFC_6979 = enum.auto()

-    """"""

-    Pageant_068_080 = enum.auto()

-    """"""

-

-

-class SSHTestKeyDeterministicSignature(NamedTuple):

-    """An SSH test key deterministic signature.

-

-    Attributes:

-        signature:

-            The binary signature of the [vault UUID][vault.Vault.UUID]

-            under this signature class.

-        derived_passphrase:

-            The equivalent master passphrase derived from this

-            signature.

-        signature_class:

-            The [signature

-            class][SSHTestKeyDeterministicSignatureClass].

-

-    """

-

-    signature: bytes

-    """"""

-    derived_passphrase: bytes

-    """"""

-    signature_class: SSHTestKeyDeterministicSignatureClass = (

-        SSHTestKeyDeterministicSignatureClass.SPEC

-    )

-    """"""

-

-

-class SSHTestKey(NamedTuple):

-    """An SSH test key.

-

-    Attributes:

-        public_key:

-            The SSH public key string, as used e.g. by OpenSSH's

-            `authorized_keys` file.  Includes a comment.

-        public_key_data:

-            The SSH protocol wire format of the public key.

-        private_key:

-            A base64 encoded representation of the private key, in

-            OpenSSH's v1 private key format.

-        private_key_blob:

-            The SSH protocol wire format of the private key.

-        expected_signatures:

-            A mapping of deterministic signature classes to the

-            expected, deterministic signature (of that class) of the

-            vault UUID for this key, together with the respective

-            "equivalent master passphrase" derived from this signature.

-

-    """

-

-    public_key: bytes

-    """"""

-    public_key_data: bytes

-    """"""

-    private_key: bytes

-    """"""

-    private_key_blob: bytes

-    """"""

-    expected_signatures: Mapping[

-        SSHTestKeyDeterministicSignatureClass, SSHTestKeyDeterministicSignature

-    ]

-    """"""

-

-    def is_suitable(

-        self,

-        *,

-        client: ssh_agent.SSHAgentClient | None = None,

-    ) -> bool:

-        """Return if this key is suitable for use with vault.

-

-        Args:

-            client:

-                An optional SSH agent client to check for additional

-                deterministic key types. If not given, assume no such

-                types.

-

-        """

-        return vault.Vault.is_suitable_ssh_key(

-            self.public_key_data, client=client

-        )

-

-

-class ValidationSettings(NamedTuple):

-    """Validation settings for [`VaultTestConfig`][]s.

-

-    Attributes:

-        allow_unknown_settings:

-            See [`_types.validate_vault_config`][].

-

-    """

-

-    allow_unknown_settings: bool

-    """"""

-

-

-class VaultTestConfig(NamedTuple):

-    """A (not necessarily valid) sample vault config, plus metadata.

-

-    Attributes:

-        config:

-            The actual configuration object.  Usually a [`dict`][].

-        comment:

-            An explanatory comment for what is wrong with this config,

-            or empty if the config is valid.  This is intended as

-            a debugging message to be shown to the user (e.g. when an

-            assertion fails), not as an error message to

-            programmatically match against.

-        validation_settings:

-            See [`_types.validate_vault_config`][].

-

-    """

-

-    config: Any

-    """"""

-    comment: str

-    """"""

-    validation_settings: ValidationSettings | None

-    """"""

-

-

-TEST_CONFIGS: list[VaultTestConfig] = [

-    VaultTestConfig(None, "not a dict", None),

-    VaultTestConfig({}, "missing required keys", None),

-    VaultTestConfig(

-        {"global": None, "services": {}}, "bad config value: global", None

-    ),

-    VaultTestConfig(

-        {"global": {"key": 123}, "services": {}},

-        "bad config value: global.key",

-        None,

-    ),

-    VaultTestConfig(

-        {"global": {"phrase": "abc", "key": "..."}, "services": {}},

-        "",

-        None,

-    ),

-    VaultTestConfig({"services": None}, "bad config value: services", None),

-    VaultTestConfig(

-        {"services": {"1": {}, 2: {}}}, 'bad config value: services."2"', None

-    ),

-    VaultTestConfig(

-        {"services": {"1": {}, "2": 2}}, 'bad config value: services."2"', None

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"notes": ["sentinel", "list"]}}},

-        "bad config value: services.sv.notes",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"notes": "blah blah blah"}}}, "", None

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"length": "200"}}},

-        "bad config value: services.sv.length",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"length": 0.5}}},

-        "bad config value: services.sv.length",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"length": ["sentinel", "list"]}}},

-        "bad config value: services.sv.length",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"length": -10}}},

-        "bad config value: services.sv.length",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"lower": "10"}}},

-        "bad config value: services.sv.lower",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"upper": -10}}},

-        "bad config value: services.sv.upper",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"number": ["sentinel", "list"]}}},

-        "bad config value: services.sv.number",

-        None,

-    ),

-    VaultTestConfig(

-        {

-            "global": {"phrase": "my secret phrase"},

-            "services": {"sv": {"length": 10}},

-        },

-        "",

-        None,

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"length": 10, "phrase": "..."}}}, "", None

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"length": 10, "key": "..."}}}, "", None

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"upper": 10, "key": "..."}}}, "", None

-    ),

-    VaultTestConfig(

-        {"services": {"sv": {"phrase": "abc", "key": "..."}}}, "", None

-    ),

-    VaultTestConfig(

-        {

-            "global": {"phrase": "abc"},

-            "services": {"sv": {"phrase": "abc", "length": 10}},

-        },

-        "",

-        None,

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "..."},

-            "services": {"sv": {"phrase": "abc", "length": 10}},

-        },

-        "",

-        None,

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "..."},

-            "services": {"sv": {"phrase": "abc", "key": "...", "length": 10}},

-        },

-        "",

-        None,

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "..."},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {"length": 10, "repeat": 1, "lower": 1},

-            },

-        },

-        "",

-        None,

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unicode_normalization_form": "NFC"},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {"length": 10, "repeat": 1, "lower": 1},

-            },

-        },

-        "",

-        None,

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unicode_normalization_form": True},

-            "services": {},

-        },

-        "bad config value: global.unicode_normalization_form",

-        None,

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unicode_normalization_form": "NFC"},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {"length": 10, "repeat": 1, "lower": 1},

-            },

-        },

-        "",

-        ValidationSettings(True),

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unicode_normalization_form": "NFC"},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {"length": 10, "repeat": 1, "lower": 1},

-            },

-        },

-        "extension/unknown key: .global.unicode_normalization_form",

-        ValidationSettings(False),

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unknown_key": True},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {"length": 10, "repeat": 1, "lower": 1},

-            },

-        },

-        "",

-        ValidationSettings(True),

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unknown_key": True},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {"length": 10, "repeat": 1, "lower": 1},

-            },

-        },

-        "unknown key: .global.unknown_key",

-        ValidationSettings(False),

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "..."},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {

-                    "length": 10,

-                    "repeat": 1,

-                    "lower": 1,

-                    "unknown_key": True,

-                },

-            },

-        },

-        "unknown key: .services.sv2.unknown_key",

-        ValidationSettings(False),

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unicode_normalization_form": "NFC"},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {

-                    "length": 10,

-                    "repeat": 1,

-                    "lower": 1,

-                    "unknown_key": True,

-                },

-            },

-        },

-        "",

-        ValidationSettings(True),

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unicode_normalization_form": "NFC"},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {

-                    "length": 10,

-                    "repeat": 1,

-                    "lower": 1,

-                    "unknown_key": True,

-                },

-            },

-        },

-        "",

-        ValidationSettings(True),

-    ),

-    VaultTestConfig(

-        {

-            "global": {"key": "...", "unicode_normalization_form": "NFC"},

-            "services": {

-                "sv1": {"phrase": "abc", "length": 10, "upper": 1},

-                "sv2": {

-                    "length": 10,

-                    "repeat": 1,

-                    "lower": 1,

-                    "unknown_key": True,

-                },

-            },

-        },

-        "",

-        ValidationSettings(True),

-    ),

-]

-"""The master list of test configurations for vault."""

-

-

-def is_valid_test_config(conf: VaultTestConfig, /) -> bool:

-    """Return true if the test config is valid.

-

-    Args:

-        conf: The test config to check.

-

-    """

-    return not conf.comment and conf.validation_settings in {

-        None,

-        (True,),

-    }

-

-

-def _test_config_ids(val: VaultTestConfig) -> Any:  # pragma: no cover

-    """pytest id function for VaultTestConfig objects."""

-    assert isinstance(val, VaultTestConfig)

-    return val[1] or (val[0], val[1], val[2])

-

-

-@strategies.composite

-def vault_full_service_config(draw: strategies.DrawFn) -> dict[str, int]:

-    """Hypothesis strategy for full vault service configurations.

-

-    Returns a sample configuration with restrictions on length, repeat

-    count, and all character classes, while ensuring the settings are

-    not obviously unsatisfiable.

-

-    Args:

-        draw:

-            The `draw` function, as provided for by hypothesis.

-

-    """

-    repeat = draw(strategies.integers(min_value=0, max_value=10))

-    lower = draw(strategies.integers(min_value=0, max_value=10))

-    upper = draw(strategies.integers(min_value=0, max_value=10))

-    number = draw(strategies.integers(min_value=0, max_value=10))

-    space = draw(strategies.integers(min_value=0, max_value=repeat))

-    dash = draw(strategies.integers(min_value=0, max_value=10))

-    symbol = draw(strategies.integers(min_value=0, max_value=10))

-    length = draw(

-        strategies.integers(

-            min_value=max(1, lower + upper + number + space + dash + symbol),

-            max_value=70,

-        )

-    )

-    hypothesis.assume(lower + upper + number + dash + symbol > 0)

-    hypothesis.assume(lower + upper + number + space + symbol > 0)

-    hypothesis.assume(repeat >= space)

-    return {

-        "lower": lower,

-        "upper": upper,

-        "number": number,

-        "space": space,

-        "dash": dash,

-        "symbol": symbol,

-        "repeat": repeat,

-        "length": length,

-    }

-

-

-def is_smudgable_vault_test_config(conf: VaultTestConfig) -> bool:

-    """Check whether this vault test config can be effectively smudged.

-

-    A "smudged" test config is one where falsy values (in the JavaScript

-    sense) can be replaced by other falsy values without changing the

-    meaning of the config.

-

-    Args:

-        conf: A test config to check.

-

-    Returns:

-        True if the test config can be smudged, False otherwise.

-

-    """

-    config = conf.config

-    return bool(

-        isinstance(config, dict)

-        and ("global" not in config or isinstance(config["global"], dict))

-        and ("services" in config and isinstance(config["services"], dict))

-        and all(isinstance(x, dict) for x in config["services"].values())

-        and (config["services"] or config.get("global"))

-    )

-

-

-@strategies.composite

-def smudged_vault_test_config(

-    draw: strategies.DrawFn,

-    config: Any = strategies.sampled_from(TEST_CONFIGS).filter(  # noqa: B008

-        is_smudgable_vault_test_config

-    ),

-) -> Any:

-    """Hypothesis strategy to replace falsy values with other falsy values.

-

-    Uses [`_types.js_truthiness`][] internally, which is tested

-    separately by

-    [`tests.test_derivepassphrase_types.test_100_js_truthiness`][].

-

-    Args:

-        draw:

-            The `draw` function, as provided for by hypothesis.

-        config:

-            A strategy which generates [`VaultTestConfig`][] objects.

-

-    Returns:

-        A new [`VaultTestConfig`][] where some falsy values have been

-        replaced or added.

-

-    """

-

-    falsy = (None, False, 0, 0.0, "", float("nan"))

-    falsy_no_str = (None, False, 0, 0.0, float("nan"))

-    falsy_no_zero = (None, False, "", float("nan"))

-    conf = draw(config)

-    hypothesis.assume(is_smudgable_vault_test_config(conf))

-    obj = copy.deepcopy(conf.config)

-    services: list[dict[str, Any]] = list(obj["services"].values())

-    if "global" in obj:

-        services.append(obj["global"])

-    assert all(isinstance(x, dict) for x in services), (

-        "is_smudgable_vault_test_config guard failed to "

-        "ensure each settings dict is a dict"

-    )

-    for service in services:

-        for key in ("phrase",):

-            value = service.get(key)

-            if not _types.js_truthiness(value) and value != "":

-                service[key] = draw(strategies.sampled_from(falsy_no_str))

-        for key in (

-            "notes",

-            "key",

-            "length",

-            "repeat",

-        ):

-            value = service.get(key)

-            if not _types.js_truthiness(value):

-                service[key] = draw(strategies.sampled_from(falsy))

-        for key in (

-            "lower",

-            "upper",

-            "number",

-            "space",

-            "dash",

-            "symbol",

-        ):

-            value = service.get(key)

-            if not _types.js_truthiness(value) and value != 0:

-                service[key] = draw(strategies.sampled_from(falsy_no_zero))

-    hypothesis.assume(obj != conf.config)

-    return VaultTestConfig(obj, conf.comment, conf.validation_settings)

-

-

-class KnownSSHAgent(str, enum.Enum):

-    """Known SSH agents.

-

-    Attributes:

-        UNKNOWN (str):

-            Not a known agent, or not known statically.

-        Pageant (str):

-            The agent from Simon Tatham's PuTTY suite.

-        OpenSSHAgent (str):

-            The agent from OpenBSD's OpenSSH suite.

-        StubbedSSHAgent (str):

-            The stubbed, fake agent pseudo-socket defined in this test

-            suite.

-

-    """

-

-    UNKNOWN = "(unknown)"

-    """"""

-    Pageant = "Pageant"

-    """"""

-    OpenSSHAgent = "OpenSSHAgent"

-    """"""

-    StubbedSSHAgent = "StubbedSSHAgent"

-    """"""

-

-

-class SpawnedSSHAgentInfo(NamedTuple):

-    """Info about a spawned SSH agent, as provided by some fixtures.

-

-    Differs from [`RunningSSHAgentInfo`][] in that this info object

-    already provides a functional client connected to the agent, but not

-    the address.

-

-    Attributes:

-        agent_type:

-            The agent's type.

-        client:

-            An SSH agent client connected to this agent.

-        isolated:

-            Whether this agent was spawned specifically for this test

-            suite, with attempts to isolate it from the user.  If false,

-            then the user may be interacting with the agent externally,

-            meaning e.g. keys other than the test keys may be visible in

-            this agent.

-

-    """

-

-    agent_type: KnownSSHAgent

-    """"""

-    client: ssh_agent.SSHAgentClient

-    """"""

-    isolated: bool

-    """"""

-

-

-class RunningSSHAgentInfo(NamedTuple):

-    """Info about a running SSH agent, as provided by some fixtures.

-

-    Differs from [`SpawnedSSHAgentInfo`][] in that this info object

-    provides only an address of the agent, not a functional client

-    already connected to it.  The running SSH agent may or may not be

-    isolated.

-

-    Attributes:

-        socket:

-            A socket address to connect to the agent.

-        agent_type:

-            The agent's type.

-

-    """

-

-    socket: str | type[_types.SSHAgentSocket]

-    """"""

-    agent_type: KnownSSHAgent

-    """"""

-

-    def require_external_address(self) -> str:  # pragma: no cover

-        if not isinstance(self.socket, str):

-            pytest.skip(

-                reason="This test requires a real, externally resolvable "

-                "address for the SSH agent socket."

-            )

-        return self.socket

-

-

-ALL_KEYS: Mapping[str, SSHTestKey] = {

-    "ed25519": SSHTestKey(

-        private_key=rb"""-----BEGIN OPENSSH PRIVATE KEY-----

-b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW

-QyNTUxOQAAACCBeIFoJtYCSF8P/zJIb+TBMIncHGpFBgnpCQ/7whJpdgAAAKDweO7H8Hju

-xwAAAAtzc2gtZWQyNTUxOQAAACCBeIFoJtYCSF8P/zJIb+TBMIncHGpFBgnpCQ/7whJpdg

-AAAEAbM/A869nkWZbe2tp3Dm/L6gitvmpH/aRZt8sBII3ExYF4gWgm1gJIXw//Mkhv5MEw

-idwcakUGCekJD/vCEml2AAAAG3Rlc3Qga2V5IHdpdGhvdXQgcGFzc3BocmFzZQEC

------END OPENSSH PRIVATE KEY-----

-""",

-        private_key_blob=bytes.fromhex("""

-            00 00 00 0b 73 73 68 2d 65 64 32 35 35 31 39

-            00 00 00 20

-            81 78 81 68 26 d6 02 48 5f 0f ff 32 48 6f e4 c1

-            30 89 dc 1c 6a 45 06 09 e9 09 0f fb c2 12 69 76

-            00 00 00 40

-            1b 33 f0 3c eb d9 e4 59 96 de da da 77 0e 6f cb

-            ea 08 ad be 6a 47 fd a4 59 b7 cb 01 20 8d c4 c5

-            81 78 81 68 26 d6 02 48 5f 0f ff 32 48 6f e4 c1

-            30 89 dc 1c 6a 45 06 09 e9 09 0f fb c2 12 69 76

-            00 00 00 1b 74 65 73 74 20 6b 65 79 20 77 69 74

-            68 6f 75 74 20 70 61 73 73 70 68 72 61 73 65

-"""),

-        public_key=rb"""ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIF4gWgm1gJIXw//Mkhv5MEwidwcakUGCekJD/vCEml2 test key without passphrase

-""",

-        public_key_data=bytes.fromhex("""

-            00 00 00 0b 73 73 68 2d 65 64 32 35 35 31 39

-            00 00 00 20

-            81 78 81 68 26 d6 02 48 5f 0f ff 32 48 6f e4 c1

-            30 89 dc 1c 6a 45 06 09 e9 09 0f fb c2 12 69 76

-"""),

-        expected_signatures={

-            SSHTestKeyDeterministicSignatureClass.SPEC: SSHTestKeyDeterministicSignature(

-                signature=bytes.fromhex("""

-                    00 00 00 0b 73 73 68 2d 65 64 32 35 35 31 39

-                    00 00 00 40

-                    f0 98 19 80 6c 1a 97 d5 26 03 6e cc e3 65 8f 86

-                    66 07 13 19 13 09 21 33 33 f9 e4 36 53 1d af fd

-                    0d 08 1f ec f8 73 9b 8c 5f 55 39 16 7c 53 54 2c

-                    1e 52 bb 30 ed 7f 89 e2 2f 69 51 55 d8 9e a6 02

-"""),

-                derived_passphrase=rb"""8JgZgGwal9UmA27M42WPhmYHExkTCSEzM/nkNlMdr/0NCB/s+HObjF9VORZ8U1QsHlK7MO1/ieIvaVFV2J6mAg==""",

-            ),

-        },

-    ),

-    # Currently only supported by PuTTY (which is deficient in other

-    # niceties of the SSH agent and the agent's client).

-    "ed448": SSHTestKey(

-        private_key=rb"""-----BEGIN OPENSSH PRIVATE KEY-----

-b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAASgAAAAlz

-c2gtZWQ0NDgAAAA54vZy009Wu8wExjvEb3hqtLz1GO/+d5vmGUbErWQ4AUO9mYLT

-zHJHc2m4s+yWzP29Cc3EcxizLG8AAAAA8BdhfCcXYXwnAAAACXNzaC1lZDQ0OAAA

-ADni9nLTT1a7zATGO8RveGq0vPUY7/53m+YZRsStZDgBQ72ZgtPMckdzabiz7JbM

-/b0JzcRzGLMsbwAAAAByM7GIMRvWJB3YD6SIpAF2uudX4ozZe0X917wPwiBrs373

-9TM1n94Nib6hrxGNmCk2iBQDe2KALPgA4vZy009Wu8wExjvEb3hqtLz1GO/+d5vm

-GUbErWQ4AUO9mYLTzHJHc2m4s+yWzP29Cc3EcxizLG8AAAAAG3Rlc3Qga2V5IHdp

-dGhvdXQgcGFzc3BocmFzZQECAwQFBgcICQ==

------END OPENSSH PRIVATE KEY-----

-""",

-        private_key_blob=bytes.fromhex("""

-            00 00 00 09 73 73 68 2d 65 64 34 34 38

-            00 00 00 39 e2 f6 72 d3 4f 56 bb cc 04

-            c6 3b c4 6f 78 6a b4 bc f5 18 ef fe 77 9b e6 19

-            46 c4 ad 64 38 01 43 bd 99 82 d3 cc 72 47 73 69

-            b8 b3 ec 96 cc fd bd 09 cd c4 73 18 b3 2c 6f 00

-            00 00 00 72 33 b1

-            88 31 1b d6 24 1d d8 0f a4 88 a4 01 76 ba e7 57

-            e2 8c d9 7b 45 fd d7 bc 0f c2 20 6b b3 7e f7 f5

-            33 35 9f de 0d 89 be a1 af 11 8d 98 29 36 88 14

-            03 7b 62 80 2c f8 00 e2 f6 72 d3 4f 56 bb cc 04

-            c6 3b c4 6f 78 6a b4 bc f5 18 ef fe 77 9b e6 19

-            46 c4 ad 64 38 01 43 bd 99 82 d3 cc 72 47 73 69

-            b8 b3 ec 96 cc fd bd 09 cd c4 73 18 b3 2c 6f 00

-            00 00 00 1b 74 65 73 74 20 6b 65 79 20 77 69

-            74 68 6f 75 74 20 70 61 73 73 70 68 72 61 73 65

-"""),

-        public_key=rb"""ssh-ed448 AAAACXNzaC1lZDQ0OAAAADni9nLTT1a7zATGO8RveGq0vPUY7/53m+YZRsStZDgBQ72ZgtPMckdzabiz7JbM/b0JzcRzGLMsbwA= test key without passphrase

-""",

-        public_key_data=bytes.fromhex("""

-            00 00 00 09 73 73 68 2d 65 64 34 34 38

-            00 00 00 39 e2 f6 72 d3 4f 56 bb cc 04

-            c6 3b c4 6f 78 6a b4 bc f5 18 ef fe 77 9b e6 19

-            46 c4 ad 64 38 01 43 bd 99 82 d3 cc 72 47 73 69

-            b8 b3 ec 96 cc fd bd 09 cd c4 73 18 b3 2c 6f 00

-        """),

-        expected_signatures={

-            SSHTestKeyDeterministicSignatureClass.SPEC: SSHTestKeyDeterministicSignature(

-                signature=bytes.fromhex("""

-                    00 00 00 09 73 73 68 2d 65 64 34 34 38

-                    00 00 00 72 06 86

-                    f4 64 a4 a6 ba d9 c3 22 c4 93 49 99 fc 11 de 67

-                    97 08 f2 d8 b7 3c 2c 13 e7 c5 1c 1e 92 a6 0e d8

-                    2f 6d 81 03 82 00 e3 72 e4 32 6d 72 d2 6d 32 84

-                    3f cc a9 1e 57 2c 00 9a b3 99 de 45 da ce 2e d1

-                    db e5 89 f3 35 be 24 58 90 c6 ca 04 f0 db 88 80

-                    db bd 77 7c 80 20 7f 3a 48 61 f6 1f ae a9 5e 53

-                    7b e0 9d 93 1e ea dc eb b5 cd 56 4c ea 8f 08 00

-"""),

-                derived_passphrase=rb"""Bob0ZKSmutnDIsSTSZn8Ed5nlwjy2Lc8LBPnxRwekqYO2C9tgQOCAONy5DJtctJtMoQ/zKkeVywAmrOZ3kXazi7R2+WJ8zW+JFiQxsoE8NuIgNu9d3yAIH86SGH2H66pXlN74J2THurc67XNVkzqjwgA""",

-            ),

-        },

-    ),

-    "rsa": SSHTestKey(

-        private_key=rb"""-----BEGIN OPENSSH PRIVATE KEY-----

-b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABlwAAAAdzc2gtcn

-NhAAAAAwEAAQAAAYEAsaHu6Xs4cVsuDSNJlMCqoPVgmDgEviI8TfXmHKqX3JkIqI3LsvV7

-Ijf8WCdTveEq7CkuZhImtsR52AOEVAoU8mDXDNr+nJ5wUPzf1UIaRjDe0lcXW4SlF01hQs

-G4wYDuqxshwelraB/L3e0zhD7fjYHF8IbFsqGlFHWEwOtlfhhfbxJsTGguLm4A8/gdEJD5

-2rkqDcZpIXCHtJbCzW9aQpWcs/PDw5ylwl/3dB7jfxyfrGz4O3QrzsqhWEsip97mOmwl6q

-CHbq8V8x9zu89D/H+bG5ijqxhijbjcVUW3lZfw/97gy9J6rG31HNar5H8GycLTFwuCFepD

-mTEpNgQLKoe8ePIEPq4WHhFUovBdwlrOByUKKqxreyvWt5gkpTARz+9Lt8OjBO3rpqK8sZ

-VKH3sE3de2RJM3V9PJdmZSs2b8EFK3PsUGdlMPM9pn1uk4uIItKWBmooOynuD8Ll6aPwuW

-AFn3l8nLLyWdrmmEYzHWXiRjQJxy1Bi5AbHMOWiPAAAFkDPkuBkz5LgZAAAAB3NzaC1yc2

-EAAAGBALGh7ul7OHFbLg0jSZTAqqD1YJg4BL4iPE315hyql9yZCKiNy7L1eyI3/FgnU73h

-KuwpLmYSJrbEedgDhFQKFPJg1wza/pyecFD839VCGkYw3tJXF1uEpRdNYULBuMGA7qsbIc

-Hpa2gfy93tM4Q+342BxfCGxbKhpRR1hMDrZX4YX28SbExoLi5uAPP4HRCQ+dq5Kg3GaSFw

-h7SWws1vWkKVnLPzw8OcpcJf93Qe438cn6xs+Dt0K87KoVhLIqfe5jpsJeqgh26vFfMfc7

-vPQ/x/mxuYo6sYYo243FVFt5WX8P/e4MvSeqxt9RzWq+R/BsnC0xcLghXqQ5kxKTYECyqH

-vHjyBD6uFh4RVKLwXcJazgclCiqsa3sr1reYJKUwEc/vS7fDowTt66aivLGVSh97BN3Xtk

-STN1fTyXZmUrNm/BBStz7FBnZTDzPaZ9bpOLiCLSlgZqKDsp7g/C5emj8LlgBZ95fJyy8l

-na5phGMx1l4kY0CcctQYuQGxzDlojwAAAAMBAAEAAAF/cNVYT+Om4x9+SItcz5bOByGIOj

-yWUH8f9rRjnr5ILuwabIDgvFaVG+xM1O1hWADqzMnSEcknHRkTYEsqYPykAtxFvjOFEh70

-6qRUJ+fVZkqRGEaI3oWyWKTOhcCIYImtONvb0LOv/HQ2H2AXCoeqjST1qr/xSuljBtcB8u

-wxs3EqaO1yU7QoZpDcMX9plH7Rmc9nNfZcgrnktPk2deX2+Y/A5tzdVgG1IeqYp6CBMLNM

-uhL0OPdDehgBoDujx+rhkZ1gpo1wcULIM94NL7VSHBPX0Lgh9T+3j1HVP+YnMAvhfOvfct

-LlbJ06+TYGRAMuF2LPCAZM/m0FEyAurRgWxAjLXm+4kp2GAJXlw82deDkQ+P8cHNT6s9ZH

-R5YSy3lpZ35594ZMOLR8KqVvhgJGF6i9019BiF91SDxjE+sp6dNGfN8W+64tHdDv2a0Mso

-+8Qjyx7sTpi++EjLU8Iy73/e4B8qbXMyheyA/UUfgMtNKShh6sLlrD9h2Sm9RFTuEAAADA

-Jh3u7WfnjhhKZYbAW4TsPNXDMrB0/t7xyAQgFmko7JfESyrJSLg1cO+QMOiDgD7zuQ9RSp

-NIKdPsnIna5peh979mVjb2HgnikjyJECmBpLdwZKhX7MnIvgKw5lnQXHboEtWCa1N58l7f

-srzwbi9pFUuUp9dShXNffmlUCjDRsVLbK5C6+iaIQyCWFYK8mc6dpNkIoPKf+Xg+EJCIFQ

-oITqeu30Gc1+M+fdZc2ghq0b6XLthh/uHEry8b68M5KglMAAAAwQDw1i+IdcvPV/3u/q9O

-/kzLpKO3tbT89sc1zhjZsDNjDAGluNr6n38iq/XYRZu7UTL9BG+EgFVfIUV7XsYT5e+BPf

-13VS94rzZ7maCsOlULX+VdMO2zBucHIoec9RUlRZrfB21B2W7YGMhbpoa5lN3lKJQ7afHo

-dXZUMp0cTFbOmbzJgSzO2/NE7BhVwmvcUzTDJGMMKuxBO6w99YKDKRKm0PNLFDz26rWm9L

-dNS2MVfVuPMTpzT26HQG4pFageq9cAAADBALzRBXdZF8kbSBa5MTUBVTTzgKQm1C772gJ8

-T01DJEXZsVtOv7mUC1/m/by6Hk4tPyvDBuGj9hHq4N7dPqGutHb1q5n0ADuoQjRW7BXw5Q

-vC2EAD91xexdorIA5BgXU+qltBqzzBVzVtF7+jOZOjfzOlaTX9I5I5veyeTaTxZj1XXUzi

-btBNdMEJJp7ifucYmoYAAwE7K+VlWagDEK2y8Mte9y9E+N0uO2j+h85sQt/UIb2iE/vhcg

-Bgp6142WnSCQAAABt0ZXN0IGtleSB3aXRob3V0IHBhc3NwaHJhc2UB

------END OPENSSH PRIVATE KEY-----

-""",

-        private_key_blob=bytes.fromhex("""

-            00 00 00 07 73 73 68 2d 72 73 61

-            00 00 01 81 00

-            b1 a1 ee e9 7b 38 71 5b 2e 0d 23 49 94 c0 aa a0

-            f5 60 98 38 04 be 22 3c 4d f5 e6 1c aa 97 dc 99

-            08 a8 8d cb b2 f5 7b 22 37 fc 58 27 53 bd e1 2a

-            ec 29 2e 66 12 26 b6 c4 79 d8 03 84 54 0a 14 f2

-            60 d7 0c da fe 9c 9e 70 50 fc df d5 42 1a 46 30

-            de d2 57 17 5b 84 a5 17 4d 61 42 c1 b8 c1 80 ee

-            ab 1b 21 c1 e9 6b 68 1f cb dd ed 33 84 3e df 8d

-            81 c5 f0 86 c5 b2 a1 a5 14 75 84 c0 eb 65 7e 18

-            5f 6f 12 6c 4c 68 2e 2e 6e 00 f3 f8 1d 10 90 f9

-            da b9 2a 0d c6 69 21 70 87 b4 96 c2 cd 6f 5a 42

-            95 9c b3 f3 c3 c3 9c a5 c2 5f f7 74 1e e3 7f 1c

-            9f ac 6c f8 3b 74 2b ce ca a1 58 4b 22 a7 de e6

-            3a 6c 25 ea a0 87 6e af 15 f3 1f 73 bb cf 43 fc

-            7f 9b 1b 98 a3 ab 18 62 8d b8 dc 55 45 b7 95 97

-            f0 ff de e0 cb d2 7a ac 6d f5 1c d6 ab e4 7f 06

-            c9 c2 d3 17 0b 82 15 ea 43 99 31 29 36 04 0b 2a

-            87 bc 78 f2 04 3e ae 16 1e 11 54 a2 f0 5d c2 5a

-            ce 07 25 0a 2a ac 6b 7b 2b d6 b7 98 24 a5 30 11

-            cf ef 4b b7 c3 a3 04 ed eb a6 a2 bc b1 95 4a 1f

-            7b 04 dd d7 b6 44 93 37 57 d3 c9 76 66 52 b3 66

-            fc 10 52 b7 3e c5 06 76 53 0f 33 da 67 d6 e9 38

-            b8 82 2d 29 60 66 a2 83 b2 9e e0 fc 2e 5e 9a 3f

-            0b 96 00 59 f7 97 c9 cb 2f 25 9d ae 69 84 63 31

-            d6 5e 24 63 40 9c 72 d4 18 b9 01 b1 cc 39 68 8f

-            00 00 00 03 01 00 01

-            00 00 01 7f

-            70 d5 58 4f e3 a6 e3 1f 7e 48 8b 5c cf 96 ce

-            07 21 88 3a 3c 96 50 7f 1f f6 b4 63 9e be 48 2e

-            ec 1a 6c 80 e0 bc 56 95 1b ec 4c d4 ed 61 58 00

-            ea cc c9 d2 11 c9 27 1d 19 13 60 4b 2a 60 fc a4

-            02 dc 45 be 33 85 12 1e f4 ea a4 54 27 e7 d5 66

-            4a 91 18 46 88 de 85 b2 58 a4 ce 85 c0 88 60 89

-            ad 38 db db d0 b3 af fc 74 36 1f 60 17 0a 87 aa

-            8d 24 f5 aa bf f1 4a e9 63 06 d7 01 f2 ec 31 b3

-            71 2a 68 ed 72 53 b4 28 66 90 dc 31 7f 69 94 7e

-            d1 99 cf 67 35 f6 5c 82 b9 e4 b4 f9 36 75 e5 f6

-            f9 8f c0 e6 dc dd 56 01 b5 21 ea 98 a7 a0 81 30

-            b3 4c ba 12 f4 38 f7 43 7a 18 01 a0 3b a3 c7 ea

-            e1 91 9d 60 a6 8d 70 71 42 c8 33 de 0d 2f b5 52

-            1c 13 d7 d0 b8 21 f5 3f b7 8f 51 d5 3f e6 27 30

-            0b e1 7c eb df 72 d2 e5 6c 9d 3a f9 36 06 44 03

-            2e 17 62 cf 08 06 4c fe 6d 05 13 20 2e ad 18 16

-            c4 08 cb 5e 6f b8 92 9d 86 00 95 e5 c3 cd 9d 78

-            39 10 f8 ff 1c 1c d4 fa b3 d6 47 47 96 12 cb 79

-            69 67 7e 79 f7 86 4c 38 b4 7c 2a a5 6f 86 02 46

-            17 a8 bd d3 5f 41 88 5f 75 48 3c 63 13 eb 29 e9

-            d3 46 7c df 16 fb ae 2d 1d d0 ef d9 ad 0c b2 8f

-            bc 42 3c b1 ee c4 e9 8b ef 84 8c b5 3c 23 2e f7

-            fd ee 01 f2 a6 d7 33 28 5e c8 0f d4 51 f8 0c b4

-            d2 92 86 1e ac 2e 5a c3 f6 1d 92 9b d4 45 4e e1

-            00 00 00 c0

-            26 1d ee ed 67 e7 8e 18 4a 65 86 c0 5b 84 ec 3c

-            d5 c3 32 b0 74 fe de f1 c8 04 20 16 69 28 ec 97

-            c4 4b 2a c9 48 b8 35 70 ef 90 30 e8 83 80 3e f3

-            b9 0f 51 4a 93 48 29 d3 ec 9c 89 da e6 97 a1 f7

-            bf 66 56 36 f6 1e 09 e2 92 3c 89 10 29 81 a4 b7

-            70 64 a8 57 ec c9 c8 be 02 b0 e6 59 d0 5c 76 e8

-            12 d5 82 6b 53 79 f2 5e df b2 bc f0 6e 2f 69 15

-            4b 94 a7 d7 52 85 73 5f 7e 69 54 0a 30 d1 b1 52

-            db 2b 90 ba fa 26 88 43 20 96 15 82 bc 99 ce 9d

-            a4 d9 08 a0 f2 9f f9 78 3e 10 90 88 15 0a 08 4e

-            a7 ae df 41 9c d7 e3 3e 7d d6 5c da 08 6a d1 be

-            97 2e d8 61 fe e1 c4 af 2f 1b eb c3 39 2a 09 4c

-            00 00 00 c1 00

-            f0 d6 2f 88 75 cb cf 57 fd ee fe af 4e fe 4c cb

-            a4 a3 b7 b5 b4 fc f6 c7 35 ce 18 d9 b0 33 63 0c

-            01 a5 b8 da fa 9f 7f 22 ab f5 d8 45 9b bb 51 32

-            fd 04 6f 84 80 55 5f 21 45 7b 5e c6 13 e5 ef 81

-            3d fd 77 55 2f 78 af 36 7b 99 a0 ac 3a 55 0b 5f

-            e5 5d 30 ed b3 06 e7 07 22 87 9c f5 15 25 45 9a

-            df 07 6d 41 d9 6e d8 18 c8 5b a6 86 b9 94 dd e5

-            28 94 3b 69 f1 e8 75 76 54 32 9d 1c 4c 56 ce 99

-            bc c9 81 2c ce db f3 44 ec 18 55 c2 6b dc 53 34

-            c3 24 63 0c 2a ec 41 3b ac 3d f5 82 83 29 12 a6

-            d0 f3 4b 14 3c f6 ea b5 a6 f4 b7 4d 4b 63 15 7d

-            5b 8f 31 3a 73 4f 6e 87 40 6e 29 15 a8 1e ab d7

-            00 00 00 c1 00

-            bc d1 05 77 59 17 c9 1b 48 16 b9 31 35 01 55 34

-            f3 80 a4 26 d4 2e fb da 02 7c 4f 4d 43 24 45 d9

-            b1 5b 4e bf b9 94 0b 5f e6 fd bc ba 1e 4e 2d 3f

-            2b c3 06 e1 a3 f6 11 ea e0 de dd 3e a1 ae b4 76

-            f5 ab 99 f4 00 3b a8 42 34 56 ec 15 f0 e5 0b c2

-            d8 40 03 f7 5c 5e c5 da 2b 20 0e 41 81 75 3e aa

-            5b 41 ab 3c c1 57 35 6d 17 bf a3 39 93 a3 7f 33

-            a5 69 35 fd 23 92 39 bd ec 9e 4d a4 f1 66 3d 57

-            5d 4c e2 6e d0 4d 74 c1 09 26 9e e2 7e e7 18 9a

-            86 00 03 01 3b 2b e5 65 59 a8 03 10 ad b2 f0 cb

-            5e f7 2f 44 f8 dd 2e 3b 68 fe 87 ce 6c 42 df d4

-            21 bd a2 13 fb e1 72 00 60 a7 ad 78 d9 69 d2 09

-            00 00 00 1b 74 65 73 74 20 6b 65 79 20 77 69

-            74 68 6f 75 74 20 70 61 73 73 70 68 72 61 73 65

-"""),

-        public_key=rb"""ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxoe7pezhxWy4NI0mUwKqg9WCYOAS+IjxN9eYcqpfcmQiojcuy9XsiN/xYJ1O94SrsKS5mEia2xHnYA4RUChTyYNcM2v6cnnBQ/N/VQhpGMN7SVxdbhKUXTWFCwbjBgO6rGyHB6WtoH8vd7TOEPt+NgcXwhsWyoaUUdYTA62V+GF9vEmxMaC4ubgDz+B0QkPnauSoNxmkhcIe0lsLNb1pClZyz88PDnKXCX/d0HuN/HJ+sbPg7dCvOyqFYSyKn3uY6bCXqoIdurxXzH3O7z0P8f5sbmKOrGGKNuNxVRbeVl/D/3uDL0nqsbfUc1qvkfwbJwtMXC4IV6kOZMSk2BAsqh7x48gQ+rhYeEVSi8F3CWs4HJQoqrGt7K9a3mCSlMBHP70u3w6ME7eumoryxlUofewTd17ZEkzdX08l2ZlKzZvwQUrc+xQZ2Uw8z2mfW6Ti4gi0pYGaig7Ke4PwuXpo/C5YAWfeXycsvJZ2uaYRjMdZeJGNAnHLUGLkBscw5aI8= test key without passphrase

-""",

-        public_key_data=bytes.fromhex("""

-            00 00 00 07 73 73 68 2d 72 73 61

-            00 00 00 03 01 00 01

-            00 00 01 81 00

-            b1 a1 ee e9 7b 38 71 5b 2e 0d 23 49 94 c0 aa a0

-            f5 60 98 38 04 be 22 3c 4d f5 e6 1c aa 97 dc 99

-            08 a8 8d cb b2 f5 7b 22 37 fc 58 27 53 bd e1 2a

-            ec 29 2e 66 12 26 b6 c4 79 d8 03 84 54 0a 14 f2

-            60 d7 0c da fe 9c 9e 70 50 fc df d5 42 1a 46 30

-            de d2 57 17 5b 84 a5 17 4d 61 42 c1 b8 c1 80 ee

-            ab 1b 21 c1 e9 6b 68 1f cb dd ed 33 84 3e df 8d

-            81 c5 f0 86 c5 b2 a1 a5 14 75 84 c0 eb 65 7e 18

-            5f 6f 12 6c 4c 68 2e 2e 6e 00 f3 f8 1d 10 90 f9

-            da b9 2a 0d c6 69 21 70 87 b4 96 c2 cd 6f 5a 42

-            95 9c b3 f3 c3 c3 9c a5 c2 5f f7 74 1e e3 7f 1c

-            9f ac 6c f8 3b 74 2b ce ca a1 58 4b 22 a7 de e6

-            3a 6c 25 ea a0 87 6e af 15 f3 1f 73 bb cf 43 fc

-            7f 9b 1b 98 a3 ab 18 62 8d b8 dc 55 45 b7 95 97

-            f0 ff de e0 cb d2 7a ac 6d f5 1c d6 ab e4 7f 06

-            c9 c2 d3 17 0b 82 15 ea 43 99 31 29 36 04 0b 2a

-            87 bc 78 f2 04 3e ae 16 1e 11 54 a2 f0 5d c2 5a

-            ce 07 25 0a 2a ac 6b 7b 2b d6 b7 98 24 a5 30 11

-            cf ef 4b b7 c3 a3 04 ed eb a6 a2 bc b1 95 4a 1f

-            7b 04 dd d7 b6 44 93 37 57 d3 c9 76 66 52 b3 66

-            fc 10 52 b7 3e c5 06 76 53 0f 33 da 67 d6 e9 38

-            b8 82 2d 29 60 66 a2 83 b2 9e e0 fc 2e 5e 9a 3f

-            0b 96 00 59 f7 97 c9 cb 2f 25 9d ae 69 84 63 31

-            d6 5e 24 63 40 9c 72 d4 18 b9 01 b1 cc 39 68 8f

-"""),

-        expected_signatures={

-            SSHTestKeyDeterministicSignatureClass.SPEC: SSHTestKeyDeterministicSignature(

-                signature=bytes.fromhex("""

-                    00 00 00 07 73 73 68 2d 72 73 61

-                    00 00 01 80

-                    a2 10 7c 2e f6 bb 53 a8 74 2a a1 19 99 ad 81 be

-                    79 9c ed d6 9d 09 4e 6e c5 18 48 33 90 77 99 68

-                    f7 9e 03 5a cd 4e 18 eb 89 7d 85 a2 ee ae 4a 92

-                    f6 6f ce b9 fe 86 7f 2a 6b 31 da 6e 1a fe a2 a5

-                    88 b8 44 7f a1 76 73 b3 ec 75 b5 d0 a6 b9 15 97

-                    65 09 13 7d 94 21 d1 fb 5d 0f 8b 23 04 77 c2 c3