ruby_smb 2.0.2 → 3.0.0

data/spec/lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_request_spec.rb

@@ -0,0 +1,69 @@
+RSpec.describe RubySMB::Dcerpc::Netlogon::NetrServerAuthenticate3Request do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :primary_name }
+  it { is_expected.to respond_to :account_name }
+  it { is_expected.to respond_to :secure_channel_type }
+  it { is_expected.to respond_to :computer_name }
+  it { is_expected.to respond_to :client_credential }
+  it { is_expected.to respond_to :flags }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#primary_name' do
+    it 'is a LogonsrvHandle structure' do
+      expect(packet.primary_name).to be_a RubySMB::Dcerpc::Netlogon::LogonsrvHandle
+    end
+  end
+
+  describe '#account_name' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.account_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+
+  describe '#secure_channel_type' do
+    it 'is a NetlogonSecureChannelType enum' do
+      expect(packet.secure_channel_type).to be_a RubySMB::Dcerpc::Netlogon::NetlogonSecureChannelType
+    end
+  end
+
+  describe '#computer_name' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.computer_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+
+  describe '#client_credential' do
+    it 'is a NetlogonCredential structure' do
+      expect(packet.client_credential).to be_a RubySMB::Dcerpc::Netlogon::NetlogonCredential
+    end
+  end
+
+  describe '#flags' do
+    it 'is a 32-bit unsigned integer' do
+      expect(packet.flags).to be_a BinData::Uint32le
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_SERVER_AUTHENTICATE3 constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Netlogon::NETR_SERVER_AUTHENTICATE3)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      primary_name: 'primary_name',
+      account_name: 'account_name',
+      secure_channel_type: 0,
+      computer_name: 'computer_name',
+      client_credential: "\x00" * 8,
+      flags: rand(0xffffffff)
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/netlogon/netr_server_authenticate3_response_spec.rb

@@ -0,0 +1,53 @@
+RSpec.describe RubySMB::Dcerpc::Netlogon::NetrServerAuthenticate3Response do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :server_credential }
+  it { is_expected.to respond_to :negotiate_flags }
+  it { is_expected.to respond_to :account_rid }
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#server_credential' do
+    it 'is a NetlogonCredential structure' do
+      expect(packet.server_credential).to be_a RubySMB::Dcerpc::Netlogon::NetlogonCredential
+    end
+  end
+
+  describe '#negotiate_flags' do
+    it 'is a 32-bit unsigned integer' do
+      expect(packet.negotiate_flags).to be_a BinData::Uint32le
+    end
+  end
+
+  describe '#account_rid' do
+    it 'is a 32-bit unsigned integer' do
+      expect(packet.account_rid).to be_a BinData::Uint32le
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a 32-bit unsigned integer' do
+      expect(packet.error_status).to be_a BinData::Uint32le
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_SERVER_AUTHENTICATE3 constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Netlogon::NETR_SERVER_AUTHENTICATE3)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      server_credential: "\x00" * 8,
+      negotiate_flags: rand(0xffffffff),
+      account_rid: rand(0xffffffff),
+      error_status: rand(0xffffffff)
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/netlogon/netr_server_password_set2_request_spec.rb

@@ -0,0 +1,69 @@
+RSpec.describe RubySMB::Dcerpc::Netlogon::NetrServerPasswordSet2Request do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :primary_name }
+  it { is_expected.to respond_to :account_name }
+  it { is_expected.to respond_to :secure_channel_type }
+  it { is_expected.to respond_to :computer_name }
+  it { is_expected.to respond_to :authenticator }
+  it { is_expected.to respond_to :clear_new_password }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#primary_name' do
+    it 'is a LogonsrvHandle structure' do
+      expect(packet.primary_name).to be_a RubySMB::Dcerpc::Netlogon::LogonsrvHandle
+    end
+  end
+
+  describe '#account_name' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.account_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+
+  describe '#secure_channel_type' do
+    it 'is a NetlogonSecureChannelType enum' do
+      expect(packet.secure_channel_type).to be_a RubySMB::Dcerpc::Netlogon::NetlogonSecureChannelType
+    end
+  end
+
+  describe '#computer_name' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.computer_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+
+  describe '#authenticator' do
+    it 'is a NetlogonAuthenticator structure' do
+      expect(packet.authenticator).to be_a RubySMB::Dcerpc::Netlogon::NetlogonAuthenticator
+    end
+  end
+
+  describe '#clear_new_password' do
+    it 'is a NdrFixedByteArray structure' do
+      expect(packet.clear_new_password).to be_a RubySMB::Dcerpc::Ndr::NdrFixedByteArray
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_SERVER_PASSWORD_SET2 constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Netlogon::NETR_SERVER_PASSWORD_SET2)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      primary_name: 'primary_name',
+      account_name: 'account_name',
+      secure_channel_type: 0,
+      computer_name: 'computer_name',
+      authenticator: RubySMB::Dcerpc::Netlogon::NetlogonAuthenticator.new,
+      clear_new_password: "\x00" * 516
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/netlogon/netr_server_password_set2_response_spec.rb

@@ -0,0 +1,37 @@
+RSpec.describe RubySMB::Dcerpc::Netlogon::NetrServerPasswordSet2Response do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :return_authenticator }
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#return_authenticator' do
+    it 'is a NetlogonAuthenticator structure' do
+      expect(packet.return_authenticator).to be_a RubySMB::Dcerpc::Netlogon::NetlogonAuthenticator
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a 32-bit unsigned integer' do
+      expect(packet.error_status).to be_a BinData::Uint32le
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_SERVER_PASSWORD_SET2 constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Netlogon::NETR_SERVER_PASSWORD_SET2)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      return_authenticator: RubySMB::Dcerpc::Netlogon::NetlogonAuthenticator.new,
+      error_status: rand(0xffffffff)
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/netlogon/netr_server_req_challenge_request_spec.rb

@@ -0,0 +1,45 @@
+RSpec.describe RubySMB::Dcerpc::Netlogon::NetrServerReqChallengeRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :primary_name }
+  it { is_expected.to respond_to :computer_name }
+  it { is_expected.to respond_to :client_challenge }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#primary_name' do
+    it 'is a LogonsrvHandle structure' do
+      expect(packet.primary_name).to be_a RubySMB::Dcerpc::Netlogon::LogonsrvHandle
+    end
+  end
+
+  describe '#computer_name' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.computer_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+
+  describe '#client_challenge' do
+    it 'is a NetlogonCredential structure' do
+      expect(packet.client_challenge).to be_a RubySMB::Dcerpc::Netlogon::NetlogonCredential
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_SERVER_REQ_CHALLENGE constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Netlogon::NETR_SERVER_REQ_CHALLENGE)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      primary_name: 'primary_name',
+      computer_name: 'computer_name',
+      client_challenge: "\x00" * 8,
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/netlogon/netr_server_req_challenge_response_spec.rb

@@ -0,0 +1,37 @@
+RSpec.describe RubySMB::Dcerpc::Netlogon::NetrServerReqChallengeResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :server_challenge }
+  it { is_expected.to respond_to :error_status }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  describe '#server_challenge' do
+    it 'is a NetlogonCredential structure' do
+      expect(packet.server_challenge).to be_a RubySMB::Dcerpc::Netlogon::NetlogonCredential
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a NDR 32-bit unsigned integer' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_SERVER_REQ_CHALLENGE constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Netlogon::NETR_SERVER_REQ_CHALLENGE)
+    end
+  end
+
+  it 'reads its own binary representation and outputs the same packet' do
+    packet = described_class.new(
+      server_challenge: "\x00" * 8,
+      error_status: rand(0xffffffff)
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/p_syntax_id_t_spec.rb

@@ -9,6 +9,10 @@ RSpec.describe RubySMB::Dcerpc::PSyntaxIdT do
     expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
   end
 
+  it 'has :byte_align parameter set to the expected value' do
+    expect(described_class.default_parameters[:byte_align]).to eq(4)
+  end
+
   describe '#if_uuid' do
     it 'is a Uuid' do
       expect(packet.if_uuid).to be_a RubySMB::Dcerpc::Uuid
@@ -16,16 +20,26 @@ RSpec.describe RubySMB::Dcerpc::PSyntaxIdT do
   end
 
   describe '#if_ver_major' do
-    it 'should be a 16-bit unsigned integer' do
-      expect(packet.if_ver_major).to be_a BinData::Uint16le
+    it 'should be a NdrUint16' do
+      expect(packet.if_ver_major).to be_a RubySMB::Dcerpc::Ndr::NdrUint16
     end
   end
 
   describe '#if_ver_minor' do
-    it 'should be a 16-bit unsigned integer' do
-      expect(packet.if_ver_minor).to be_a BinData::Uint16le
+    it 'should be a NdrUint16' do
+      expect(packet.if_ver_minor).to be_a RubySMB::Dcerpc::Ndr::NdrUint16
     end
   end
 
+  it 'reads its own binary representation and output the same packet' do
+    packet = described_class.new(
+      if_uuid: '22fd0d58-357a-472d-9d03-5f19e09b3a92',
+      if_ver_major: rand(0xFF),
+      if_ver_minor: rand(0xFF)
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+
 end
 

data/spec/lib/ruby_smb/dcerpc/pdu_header_spec.rb

@@ -37,9 +37,20 @@ RSpec.describe RubySMB::Dcerpc::PDUHeader do
   end
 
   describe '#pfc_flags' do
+    subject(:pfc_flags) { packet.pfc_flags }
+
     it 'should be a custom structure' do
-      expect(packet.pfc_flags).to be_a BinData::Struct
+      expect(pfc_flags).to be_a BinData::Struct
     end
+
+    it { is_expected.to respond_to :object_uuid }
+    it { is_expected.to respond_to :maybe }
+    it { is_expected.to respond_to :did_not_execute }
+    it { is_expected.to respond_to :conc_mpx }
+    it { is_expected.to respond_to :reserved_1 }
+    it { is_expected.to respond_to :support_header_sign }
+    it { is_expected.to respond_to :last_frag }
+    it { is_expected.to respond_to :first_frag }
   end
 
   describe '#packed_drep' do
@@ -79,6 +90,21 @@ RSpec.describe RubySMB::Dcerpc::PDUHeader do
     end
   end
 
+  it 'reads its own binary representation and output the same packet' do
+    packet = described_class.new(
+      rpc_vers: rand(0xFF),
+      rpc_vers_minor: rand(0xFF),
+      ptype: rand(0xFF),
+      pfc_flags: { support_header_sign: 1},
+      packed_drep: rand(0xFF),
+      frag_length: rand(0xFF),
+      auth_length: rand(0xFF),
+      call_id: rand(0xFF)
+    )
+    binary = packet.to_binary_s
+    expect(described_class.read(binary)).to eq(packet)
+  end
+
 end
 
 

data/spec/lib/ruby_smb/dcerpc/request_spec.rb

@@ -7,7 +7,9 @@ RSpec.describe RubySMB::Dcerpc::Request do
   it { is_expected.to respond_to :opnum }
   it { is_expected.to respond_to :object }
   it { is_expected.to respond_to :stub }
-  it { is_expected.to respond_to :auth_verifier }
+  it { is_expected.to respond_to :auth_pad }
+  it { is_expected.to respond_to :sec_trailer }
+  it { is_expected.to respond_to :auth_value }
 
   it 'is little endian' do
     expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
@@ -83,7 +85,7 @@ RSpec.describe RubySMB::Dcerpc::Request do
       end
 
       it 'selects the expected packet structure' do
-        expect(packet.stub).to eq(RubySMB::Dcerpc::Srvsvc::NetShareEnumAll.new(host: host))
+        expect(packet.stub).to eq(RubySMB::Dcerpc::Srvsvc::NetShareEnumAllRequest.new)
       end
     end
 
@@ -118,37 +120,100 @@ RSpec.describe RubySMB::Dcerpc::Request do
     end
   end
 
-  describe '#auth_verifier' do
+  describe '#auth_pad' do
     it 'should be a string' do
-      expect(packet.auth_verifier).to be_a BinData::String
+      expect(packet.auth_pad).to be_a BinData::String
     end
 
     it 'should not exist if the #auth_length PDU header field is 0' do
       packet.pdu_header.auth_length = 0
-      expect(packet.auth_verifier?).to be false
+      expect(packet.auth_pad?).to be false
     end
 
     it 'should exist only if the #auth_length PDU header field is greater than 0' do
       packet.pdu_header.auth_length = 10
-      expect(packet.auth_verifier?).to be true
+      expect(packet.auth_pad?).to be true
+    end
+
+    it 'makes sure #sec_trailer is 16-bytes aligned with the begining of the PDU body (stub)' do
+      packet.pdu_header.auth_length = 6
+      packet.stub = 'A' * rand(0xFF)
+      expect((packet.sec_trailer.abs_offset - packet.stub.abs_offset) % 16).to eq(0)
+    end
+  end
+
+  describe '#sec_trailer' do
+    it 'is a SecTrailer structre' do
+      expect(packet.sec_trailer).to be_a RubySMB::Dcerpc::SecTrailer
+    end
+
+    it 'should not exist if the #auth_length PDU header field is 0' do
+      packet.pdu_header.auth_length = 0
+      expect(packet.sec_trailer?).to be false
+    end
+
+    it 'should exist only if the #auth_length PDU header field is greater than 0' do
+      packet.pdu_header.auth_length = 10
+      expect(packet.sec_trailer?).to be true
+    end
+  end
+
+  describe '#auth_value' do
+    it 'should be a string' do
+      expect(packet.auth_value).to be_a BinData::String
+    end
+
+    it 'should not exist if the #auth_length PDU header field is 0' do
+      packet.pdu_header.auth_length = 0
+      expect(packet.auth_value?).to be false
+    end
+
+    it 'should exist only if the #auth_length PDU header field is greater than 0' do
+      packet.pdu_header.auth_length = 10
+      expect(packet.auth_value?).to be true
     end
 
     it 'reads #auth_length bytes' do
-      auth_verifier = '12345678'
+      auth_value = '12345678'
       packet.pdu_header.auth_length = 6
-      packet.auth_verifier.read(auth_verifier)
-      expect(packet.auth_verifier).to eq(auth_verifier[0,6])
+      packet.auth_value.read(auth_value)
+      expect(packet.auth_value).to eq(auth_value[0,6])
+    end
+  end
+
+  describe '#enable_encrypted_stub' do
+    it 'sets the stub type to BinData::String' do
+      # Set a new packet with a Winreg stub
+      packet = described_class.new(
+        { opnum: RubySMB::Dcerpc::Winreg::OPEN_HKPD },
+        { endpoint: 'Winreg' }
+      )
+      # Enabling encryption will switch the stub to a string
+      packet.enable_encrypted_stub
+      expect(packet.stub.send(:current_choice)).to be_a BinData::String
+    end
+  end
+
+  describe '#has_auth_verifier?' do
+    it 'returns true if PDU header #auth_length is greater than 0' do
+      packet.pdu_header.auth_length = 5
+      expect(packet.has_auth_verifier?).to be true
+    end
+
+    it 'returns false if PDU header #auth_length is 0' do
+      packet.pdu_header.auth_length = 0
+      expect(packet.has_auth_verifier?).to be false
     end
   end
 
   it 'reads its own binary representation and output the same packet' do
     packet = described_class.new(
       { :opnum => RubySMB::Dcerpc::Srvsvc::NET_SHARE_ENUM_ALL },
-      { :endpoint => 'Srvsvc', :host => '1.2.3.4' }
+      { :endpoint => 'Srvsvc' }
     )
     packet.pdu_header.pfc_flags.object_uuid = 1
     packet.object = '8a885d04-1ceb-11c9-9fe8-08002b104860'
-    packet.auth_verifier = '123456'
+    packet.auth_value = '123456'
     packet.pdu_header.auth_length = 6
     binary = packet.to_binary_s
     packet2 = described_class.new( { :endpoint => 'Srvsvc' } )

data/spec/lib/ruby_smb/dcerpc/response_spec.rb

@@ -6,7 +6,9 @@ RSpec.describe RubySMB::Dcerpc::Response do
   it { is_expected.to respond_to :p_cont_id }
   it { is_expected.to respond_to :cancel_count }
   it { is_expected.to respond_to :stub }
-  it { is_expected.to respond_to :auth_verifier }
+  it { is_expected.to respond_to :auth_pad }
+  it { is_expected.to respond_to :sec_trailer }
+  it { is_expected.to respond_to :auth_value }
 
   it 'is little endian' do
     expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
@@ -61,32 +63,120 @@ RSpec.describe RubySMB::Dcerpc::Response do
     end
   end
 
-  describe '#auth_verifier' do
+  describe '#auth_pad' do
     it 'should be a string' do
-      expect(packet.auth_verifier).to be_a BinData::String
+      expect(packet.auth_pad).to be_a BinData::String
     end
 
     it 'should not exist if the #auth_length PDU header field is 0' do
       packet.pdu_header.auth_length = 0
-      expect(packet.auth_verifier?).to be false
+      expect(packet.auth_pad?).to be false
     end
 
     it 'should exist only if the #auth_length PDU header field is greater than 0' do
       packet.pdu_header.auth_length = 10
-      expect(packet.auth_verifier?).to be true
+      expect(packet.auth_pad?).to be true
+    end
+
+    it 'makes sure #sec_trailer is 16-bytes aligned with the begining of the PDU body (stub)' do
+      packet.pdu_header.auth_length = 6
+      packet.stub = 'A' * rand(0xFF)
+      expect((packet.sec_trailer.abs_offset - packet.stub.abs_offset) % 16).to eq(0)
+    end
+  end
+
+  describe '#sec_trailer' do
+    it 'is a SecTrailer structre' do
+      expect(packet.sec_trailer).to be_a RubySMB::Dcerpc::SecTrailer
+    end
+
+    it 'should not exist if the #auth_length PDU header field is 0' do
+      packet.pdu_header.auth_length = 0
+      expect(packet.sec_trailer?).to be false
+    end
+
+    it 'should exist only if the #auth_length PDU header field is greater than 0' do
+      packet.pdu_header.auth_length = 10
+      expect(packet.sec_trailer?).to be true
+    end
+  end
+
+  describe '#auth_value' do
+    it 'should be a string' do
+      expect(packet.auth_value).to be_a BinData::String
+    end
+
+    it 'should not exist if the #auth_length PDU header field is 0' do
+      packet.pdu_header.auth_length = 0
+      expect(packet.auth_value?).to be false
+    end
+
+    it 'should exist only if the #auth_length PDU header field is greater than 0' do
+      packet.pdu_header.auth_length = 10
+      expect(packet.auth_value?).to be true
     end
 
     it 'reads #auth_length bytes' do
-      auth_verifier = '12345678'
+      auth_value = '12345678'
       packet.pdu_header.auth_length = 6
-      packet.auth_verifier.read(auth_verifier)
-      expect(packet.auth_verifier).to eq(auth_verifier[0,6])
+      packet.auth_value.read(auth_value)
+      expect(packet.auth_value).to eq(auth_value[0,6])
+    end
+  end
+
+  describe '#has_auth_verifier?' do
+    it 'returns true if PDU header #auth_length is greater than 0' do
+      packet.pdu_header.auth_length = 5
+      expect(packet.has_auth_verifier?).to be true
+    end
+
+    it 'returns false if PDU header #auth_length is 0' do
+      packet.pdu_header.auth_length = 0
+      expect(packet.has_auth_verifier?).to be false
+    end
+  end
+
+  describe '#stub_length' do
+    let(:stub_length) { rand(0xFF) }
+    before :example do
+      packet.stub = 'A' * stub_length
+    end
+
+    it 'returns the correct stub length' do
+      expect(packet.stub_length).to eq(stub_length)
+    end
+
+    context 'with auth verifier' do
+      it 'returns the correct stub length' do
+        auth_size = rand(0xFF)
+        packet.pdu_header.auth_length = auth_size
+        packet.auth_value = 'B' * auth_size
+        expect(packet.stub_length).to eq(stub_length + packet.auth_pad.num_bytes)
+      end
+    end
+  end
+
+  describe '#read' do
+    let(:response) { described_class.new }
+    let(:auth_size) { rand(0xFF) }
+    let(:stub_size) { rand(0xFF) }
+    before :example do
+      response.pdu_header.auth_length = auth_size
+      response.stub = 'A' * stub_size
+      response.auth_value = 'B' * auth_size
+      response.auth_pad = 'C' * response.auth_pad.size
+    end
+
+    it 'sets #stub and #auth_pad to the correct values' do
+      packet.read(response.to_binary_s)
+      expect(packet.stub).to eq(response.stub)
+      expect(packet.auth_pad).to eq(response.auth_pad)
     end
   end
 
   it 'reads its own binary representation and output the same packet' do
     packet.stub = 'ABCD'
-    packet.auth_verifier = '123456'
+    packet.auth_value = '123456'
     packet.pdu_header.auth_length = 6
     binary = packet.to_binary_s
     expect(described_class.read(binary)).to eq(packet)