mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-01-29 14:12:11 +01:00
Make testing digests consistent. Add KATs for all digests. Check unaligned input and output works. Perform chunking tests for all digests. Fix Blake2b and Blake2s to checkout parameters in update and final functions. Fix Shake256 and Shake128 to checkout parameters in absorb and squeeze blocks functions. Add default digest size enums for Blake2b and Blake2s.
554 lines
18 KiB
C
554 lines
18 KiB
C
/* test_blake2.c
|
|
*
|
|
* Copyright (C) 2006-2025 wolfSSL Inc.
|
|
*
|
|
* This file is part of wolfSSL.
|
|
*
|
|
* wolfSSL is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* wolfSSL is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include <config.h>
|
|
#endif
|
|
|
|
#if !defined(WOLFSSL_USER_SETTINGS) && !defined(WOLFSSL_NO_OPTIONS_H)
|
|
#include <wolfssl/options.h>
|
|
#endif
|
|
#include <wolfssl/wolfcrypt/settings.h>
|
|
|
|
#ifdef NO_INLINE
|
|
#include <wolfssl/wolfcrypt/misc.h>
|
|
#else
|
|
#define WOLFSSL_MISC_INCLUDED
|
|
#include <wolfcrypt/src/misc.c>
|
|
#endif
|
|
|
|
#include <wolfssl/wolfcrypt/blake2.h>
|
|
#include <wolfssl/wolfcrypt/types.h>
|
|
#include <tests/unit.h>
|
|
#include <tests/api/api.h>
|
|
#include <tests/api/test_blake2.h>
|
|
|
|
/*******************************************************************************
|
|
* BLAKE2b
|
|
******************************************************************************/
|
|
|
|
int test_wc_InitBlake2b(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2
|
|
Blake2b blake;
|
|
|
|
/* Test bad arg. */
|
|
ExpectIntEQ(wc_InitBlake2b(NULL, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b(NULL, 128), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, 128), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b(NULL, WC_BLAKE2B_DIGEST_SIZE),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good arg. */
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_InitBlake2b_WithKey(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2
|
|
Blake2b blake;
|
|
word32 digestSz = BLAKE2B_KEYBYTES;
|
|
byte key[BLAKE2B_KEYBYTES];
|
|
word32 keylen = BLAKE2B_KEYBYTES;
|
|
|
|
XMEMSET(key, 0, sizeof(key));
|
|
|
|
/* Test bad args. */
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(NULL, digestSz, NULL, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(&blake, digestSz, NULL, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(NULL, digestSz, key, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(NULL, digestSz, NULL, keylen),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(&blake, digestSz, key, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(NULL, digestSz, key, keylen),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good arg. */
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(&blake, digestSz, NULL, keylen), 0);
|
|
ExpectIntEQ(wc_InitBlake2b_WithKey(&blake, digestSz, key, keylen), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_Blake2bUpdate(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2
|
|
Blake2b blake;
|
|
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
|
|
/* Pass in bad values. */
|
|
ExpectIntEQ(wc_Blake2bUpdate(NULL, NULL, 1),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, NULL, 1),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2bUpdate(NULL, NULL, 0),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good args. */
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, NULL, 0), 0);
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, (byte*)"a", 1), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_Blake2bFinal(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2
|
|
Blake2b blake;
|
|
byte hash[WC_BLAKE2B_DIGEST_SIZE];
|
|
|
|
/* Initialize */
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
|
|
/* Test bad args. */
|
|
ExpectIntEQ(wc_Blake2bFinal(NULL, NULL, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2bFinal(&blake, NULL, 0),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2bFinal(NULL, hash, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good args. */
|
|
ExpectIntEQ(wc_Blake2bFinal(&blake, hash, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
#define BLAKE2B_KAT_CNT 7
|
|
int test_wc_Blake2b_KATs(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2
|
|
Blake2b blake;
|
|
|
|
testVector blake2b_kat[BLAKE2B_KAT_CNT];
|
|
byte hash[WC_BLAKE2B_DIGEST_SIZE];
|
|
int i = 0;
|
|
|
|
blake2b_kat[i].input = "";
|
|
blake2b_kat[i].inLen = 0;
|
|
blake2b_kat[i].output =
|
|
"\x78\x6a\x02\xf7\x42\x01\x59\x03"
|
|
"\xc6\xc6\xfd\x85\x25\x52\xd2\x72"
|
|
"\x91\x2f\x47\x40\xe1\x58\x47\x61"
|
|
"\x8a\x86\xe2\x17\xf7\x1f\x54\x19"
|
|
"\xd2\x5e\x10\x31\xaf\xee\x58\x53"
|
|
"\x13\x89\x64\x44\x93\x4e\xb0\x4b"
|
|
"\x90\x3a\x68\x5b\x14\x48\xb7\x55"
|
|
"\xd5\x6f\x70\x1a\xfe\x9b\xe2\xce";
|
|
blake2b_kat[i].outLen = 0;
|
|
i++;
|
|
blake2b_kat[i].input = "a";
|
|
blake2b_kat[i].inLen = 1;
|
|
blake2b_kat[i].output =
|
|
"\x33\x3f\xcb\x4e\xe1\xaa\x7c\x11"
|
|
"\x53\x55\xec\x66\xce\xac\x91\x7c"
|
|
"\x8b\xfd\x81\x5b\xf7\x58\x7d\x32"
|
|
"\x5a\xec\x18\x64\xed\xd2\x4e\x34"
|
|
"\xd5\xab\xe2\xc6\xb1\xb5\xee\x3f"
|
|
"\xac\xe6\x2f\xed\x78\xdb\xef\x80"
|
|
"\x2f\x2a\x85\xcb\x91\xd4\x55\xa8"
|
|
"\xf5\x24\x9d\x33\x08\x53\xcb\x3c";
|
|
blake2b_kat[i].outLen = 0;
|
|
i++;
|
|
blake2b_kat[i].input = "abc";
|
|
blake2b_kat[i].inLen = 3;
|
|
blake2b_kat[i].output =
|
|
"\xba\x80\xa5\x3f\x98\x1c\x4d\x0d"
|
|
"\x6a\x27\x97\xb6\x9f\x12\xf6\xe9"
|
|
"\x4c\x21\x2f\x14\x68\x5a\xc4\xb7"
|
|
"\x4b\x12\xbb\x6f\xdb\xff\xa2\xd1"
|
|
"\x7d\x87\xc5\x39\x2a\xab\x79\x2d"
|
|
"\xc2\x52\xd5\xde\x45\x33\xcc\x95"
|
|
"\x18\xd3\x8a\xa8\xdb\xf1\x92\x5a"
|
|
"\xb9\x23\x86\xed\xd4\x00\x99\x23";
|
|
blake2b_kat[i].outLen = 0;
|
|
i++;
|
|
blake2b_kat[i].input = "message digest";
|
|
blake2b_kat[i].inLen = 14;
|
|
blake2b_kat[i].output =
|
|
"\x3c\x26\xce\x48\x7b\x1c\x0f\x06"
|
|
"\x23\x63\xaf\xa3\xc6\x75\xeb\xdb"
|
|
"\xf5\xf4\xef\x9b\xdc\x02\x2c\xfb"
|
|
"\xef\x91\xe3\x11\x1c\xdc\x28\x38"
|
|
"\x40\xd8\x33\x1f\xc3\x0a\x8a\x09"
|
|
"\x06\xcf\xf4\xbc\xdb\xcd\x23\x0c"
|
|
"\x61\xaa\xec\x60\xfd\xfa\xd4\x57"
|
|
"\xed\x96\xb7\x09\xa3\x82\x35\x9a";
|
|
blake2b_kat[i].outLen = 0;
|
|
i++;
|
|
blake2b_kat[i].input = "abcdefghijklmnopqrstuvwxyz";
|
|
blake2b_kat[i].inLen = 26;
|
|
blake2b_kat[i].output =
|
|
"\xc6\x8e\xde\x14\x3e\x41\x6e\xb7"
|
|
"\xb4\xaa\xae\x0d\x8e\x48\xe5\x5d"
|
|
"\xd5\x29\xea\xfe\xd1\x0b\x1d\xf1"
|
|
"\xa6\x14\x16\x95\x3a\x2b\x0a\x56"
|
|
"\x66\xc7\x61\xe7\xd4\x12\xe6\x70"
|
|
"\x9e\x31\xff\xe2\x21\xb7\xa7\xa7"
|
|
"\x39\x08\xcb\x95\xa4\xd1\x20\xb8"
|
|
"\xb0\x90\xa8\x7d\x1f\xbe\xdb\x4c";
|
|
blake2b_kat[i].outLen = 0;
|
|
i++;
|
|
blake2b_kat[i].input =
|
|
"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
|
|
"0123456789";
|
|
blake2b_kat[i].inLen = 62;
|
|
blake2b_kat[i].output =
|
|
"\x99\x96\x48\x02\xe5\xc2\x5e\x70"
|
|
"\x37\x22\x90\x5d\x3f\xb8\x00\x46"
|
|
"\xb6\xbc\xa6\x98\xca\x9e\x2c\xc7"
|
|
"\xe4\x9b\x4f\xe1\xfa\x08\x7c\x2e"
|
|
"\xdf\x03\x12\xdf\xbb\x27\x5c\xf2"
|
|
"\x50\xa1\xe5\x42\xfd\x5d\xc2\xed"
|
|
"\xd3\x13\xf9\xc4\x91\x12\x7c\x2e"
|
|
"\x8c\x0c\x9b\x24\x16\x8e\x2d\x50";
|
|
blake2b_kat[i].outLen = 0;
|
|
i++;
|
|
blake2b_kat[i].input = "1234567890123456789012345678901234567890"
|
|
"1234567890123456789012345678901234567890";
|
|
blake2b_kat[i].inLen = 80;
|
|
blake2b_kat[i].output =
|
|
"\x68\x6f\x41\xec\x5a\xff\xf6\xe8"
|
|
"\x7e\x1f\x07\x6f\x54\x2a\xa4\x66"
|
|
"\x46\x6f\xf5\xfb\xde\x16\x2c\x48"
|
|
"\x48\x1b\xa4\x8a\x74\x8d\x84\x27"
|
|
"\x99\xf5\xb3\x0f\x5b\x67\xfc\x68"
|
|
"\x47\x71\xb3\x3b\x99\x42\x06\xd0"
|
|
"\x5c\xc3\x10\xf3\x19\x14\xed\xd7"
|
|
"\xb9\x7e\x41\x86\x0d\x77\xd2\x82";
|
|
blake2b_kat[i].outLen = 0;
|
|
|
|
for (i = 0; i < BLAKE2B_KAT_CNT; i++) {
|
|
/* Do KAT. */
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, (byte*)blake2b_kat[i].input,
|
|
(word32)blake2b_kat[i].inLen), 0);
|
|
ExpectIntEQ(wc_Blake2bFinal(&blake, hash, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash, (byte*)blake2b_kat[i].output, WC_BLAKE2B_DIGEST_SIZE);
|
|
}
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_Blake2b_other(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2
|
|
Blake2b blake;
|
|
byte hash[WC_BLAKE2B_DIGEST_SIZE + 1];
|
|
byte data[WC_BLAKE2B_DIGEST_SIZE * 8 + 1];
|
|
int dataLen = WC_BLAKE2B_DIGEST_SIZE * 8;
|
|
const char* expHash =
|
|
"\xfb\xea\x44\x32\x0b\x4a\x40\x44"
|
|
"\xa0\xad\x54\x0c\x39\x62\xa6\x4d"
|
|
"\x2a\xc2\x08\x3f\xce\xb4\x1d\x71"
|
|
"\x77\x04\xa6\xfc\x38\xe5\xd9\x99"
|
|
"\xe6\x92\xf1\x9f\xe7\x21\x10\x94"
|
|
"\xe6\x08\xc1\x9c\x1d\xdf\x87\x11"
|
|
"\xfa\xf4\xe6\x7b\xf1\xe5\xc8\x12"
|
|
"\x55\x90\x05\x00\xfa\x0d\x61\x3d";
|
|
int i;
|
|
int j;
|
|
|
|
XMEMSET(data, 0xa5, sizeof(data));
|
|
|
|
/* Initialize */
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
|
|
/* Unaligned input and output buffer. */
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, data + 1, dataLen), 0);
|
|
ExpectIntEQ(wc_Blake2bFinal(&blake, hash + 1, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash + 1, (byte*)expHash, WC_BLAKE2B_DIGEST_SIZE);
|
|
|
|
/* Test that empty updates work. */
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, NULL, 0), 0);
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, (byte*)"", 0), 0);
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, data, dataLen), 0);
|
|
ExpectIntEQ(wc_Blake2bFinal(&blake, hash, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash, (byte*)expHash, WC_BLAKE2B_DIGEST_SIZE);
|
|
|
|
/* Ensure chunking works. */
|
|
for (i = 1; i < dataLen; i++) {
|
|
ExpectIntEQ(wc_InitBlake2b(&blake, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
for (j = 0; j < dataLen; j += i) {
|
|
int len = dataLen - j;
|
|
if (i < len)
|
|
len = i;
|
|
ExpectIntEQ(wc_Blake2bUpdate(&blake, data + j, len), 0);
|
|
}
|
|
ExpectIntEQ(wc_Blake2bFinal(&blake, hash, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash, (byte*)expHash, WC_BLAKE2B_DIGEST_SIZE);
|
|
}
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
/*******************************************************************************
|
|
* BLAKE2s
|
|
******************************************************************************/
|
|
|
|
int test_wc_InitBlake2s(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2S
|
|
Blake2s blake;
|
|
|
|
/* Test bad arg. */
|
|
ExpectIntEQ(wc_InitBlake2s(NULL, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s(NULL, 128), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, 128), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s(NULL, WC_BLAKE2S_DIGEST_SIZE),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good arg. */
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_InitBlake2s_WithKey(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2S
|
|
Blake2s blake;
|
|
word32 digestSz = BLAKE2S_KEYBYTES;
|
|
byte *key = (byte*)"01234567890123456789012345678901";
|
|
word32 keylen = BLAKE2S_KEYBYTES;
|
|
|
|
/* Test bad args. */
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(NULL, digestSz, NULL, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(&blake, digestSz, NULL, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(NULL, digestSz, key, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(NULL, digestSz, NULL, keylen),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(&blake, digestSz, key, 256),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(NULL, digestSz, key, keylen),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good arg. */
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(&blake, digestSz, NULL, keylen), 0);
|
|
ExpectIntEQ(wc_InitBlake2s_WithKey(&blake, digestSz, key, keylen), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_Blake2sUpdate(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2S
|
|
Blake2s blake;
|
|
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
|
|
/* Pass in bad values. */
|
|
ExpectIntEQ(wc_Blake2sUpdate(NULL, NULL, 1),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, NULL, 1),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2sUpdate(NULL, NULL, 0),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good args. */
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, NULL, 0), 0);
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, (byte*)"a", 1), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_Blake2sFinal(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2S
|
|
Blake2s blake;
|
|
byte hash[WC_BLAKE2B_DIGEST_SIZE];
|
|
|
|
/* Initialize */
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
|
|
/* Test bad args. */
|
|
ExpectIntEQ(wc_Blake2sFinal(NULL, NULL, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2sFinal(&blake, NULL, 0),
|
|
WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
ExpectIntEQ(wc_Blake2sFinal(NULL, hash, 0), WC_NO_ERR_TRACE(BAD_FUNC_ARG));
|
|
|
|
/* Test good args. */
|
|
ExpectIntEQ(wc_Blake2sFinal(&blake, hash, WC_BLAKE2B_DIGEST_SIZE), 0);
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
#define BLAKE2S_KAT_CNT 7
|
|
int test_wc_Blake2s_KATs(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2S
|
|
Blake2s blake;
|
|
|
|
testVector blake2s_kat[BLAKE2S_KAT_CNT];
|
|
byte hash[WC_BLAKE2S_DIGEST_SIZE];
|
|
int i = 0;
|
|
|
|
blake2s_kat[i].input = "";
|
|
blake2s_kat[i].inLen = 0;
|
|
blake2s_kat[i].output =
|
|
"\x69\x21\x7a\x30\x79\x90\x80\x94"
|
|
"\xe1\x11\x21\xd0\x42\x35\x4a\x7c"
|
|
"\x1f\x55\xb6\x48\x2c\xa1\xa5\x1e"
|
|
"\x1b\x25\x0d\xfd\x1e\xd0\xee\xf9";
|
|
blake2s_kat[i].outLen = 0;
|
|
i++;
|
|
blake2s_kat[i].input = "a";
|
|
blake2s_kat[i].inLen = 1;
|
|
blake2s_kat[i].output =
|
|
"\x4a\x0d\x12\x98\x73\x40\x30\x37"
|
|
"\xc2\xcd\x9b\x90\x48\x20\x36\x87"
|
|
"\xf6\x23\x3f\xb6\x73\x89\x56\xe0"
|
|
"\x34\x9b\xd4\x32\x0f\xec\x3e\x90";
|
|
blake2s_kat[i].outLen = 0;
|
|
i++;
|
|
blake2s_kat[i].input = "abc";
|
|
blake2s_kat[i].inLen = 3;
|
|
blake2s_kat[i].output =
|
|
"\x50\x8c\x5e\x8c\x32\x7c\x14\xe2"
|
|
"\xe1\xa7\x2b\xa3\x4e\xeb\x45\x2f"
|
|
"\x37\x45\x8b\x20\x9e\xd6\x3a\x29"
|
|
"\x4d\x99\x9b\x4c\x86\x67\x59\x82";
|
|
blake2s_kat[i].outLen = 0;
|
|
i++;
|
|
blake2s_kat[i].input = "message digest";
|
|
blake2s_kat[i].inLen = 14;
|
|
blake2s_kat[i].output =
|
|
"\xfa\x10\xab\x77\x5a\xcf\x89\xb7"
|
|
"\xd3\xc8\xa6\xe8\x23\xd5\x86\xf6"
|
|
"\xb6\x7b\xdb\xac\x4c\xe2\x07\xfe"
|
|
"\x14\x5b\x7d\x3a\xc2\x5c\xd2\x8c";
|
|
blake2s_kat[i].outLen = 0;
|
|
i++;
|
|
blake2s_kat[i].input = "abcdefghijklmnopqrstuvwxyz";
|
|
blake2s_kat[i].inLen = 26;
|
|
blake2s_kat[i].output =
|
|
"\xbd\xf8\x8e\xb1\xf8\x6a\x0c\xdf"
|
|
"\x0e\x84\x0b\xa8\x8f\xa1\x18\x50"
|
|
"\x83\x69\xdf\x18\x6c\x73\x55\xb4"
|
|
"\xb1\x6c\xf7\x9f\xa2\x71\x0a\x12";
|
|
blake2s_kat[i].outLen = 0;
|
|
i++;
|
|
blake2s_kat[i].input =
|
|
"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
|
|
"0123456789";
|
|
blake2s_kat[i].inLen = 62;
|
|
blake2s_kat[i].output =
|
|
"\xc7\x54\x39\xea\x17\xe1\xde\x6f"
|
|
"\xa4\x51\x0c\x33\x5d\xc3\xd3\xf3"
|
|
"\x43\xe6\xf9\xe1\xce\x27\x73\xe2"
|
|
"\x5b\x41\x74\xf1\xdf\x8b\x11\x9b";
|
|
blake2s_kat[i].outLen = 0;
|
|
i++;
|
|
blake2s_kat[i].input = "1234567890123456789012345678901234567890"
|
|
"1234567890123456789012345678901234567890";
|
|
blake2s_kat[i].inLen = 80;
|
|
blake2s_kat[i].output =
|
|
"\xfd\xae\xdb\x29\x0a\x0d\x5a\xf9"
|
|
"\x87\x08\x64\xfe\xc2\xe0\x90\x20"
|
|
"\x09\x89\xdc\x9c\xd5\x3a\x3c\x09"
|
|
"\x21\x29\xe8\x53\x5e\x8b\x4f\x66";
|
|
blake2s_kat[i].outLen = 0;
|
|
|
|
for (i = 0; i < BLAKE2S_KAT_CNT; i++) {
|
|
/* Do KAT. */
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, (byte*)blake2s_kat[i].input,
|
|
(word32)blake2s_kat[i].inLen), 0);
|
|
ExpectIntEQ(wc_Blake2sFinal(&blake, hash, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash, (byte*)blake2s_kat[i].output, WC_BLAKE2S_DIGEST_SIZE);
|
|
}
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|
|
int test_wc_Blake2s_other(void)
|
|
{
|
|
EXPECT_DECLS;
|
|
#ifdef HAVE_BLAKE2S
|
|
Blake2s blake;
|
|
byte hash[WC_BLAKE2S_DIGEST_SIZE + 1];
|
|
byte data[WC_BLAKE2S_DIGEST_SIZE * 8 + 1];
|
|
int dataLen = WC_BLAKE2S_DIGEST_SIZE * 8;
|
|
const char* expHash =
|
|
"\x30\x1c\x41\x93\xd0\x63\x99\xeb"
|
|
"\x17\x68\x7a\xfb\xba\x58\x47\x33"
|
|
"\xad\x62\xea\x91\x77\x20\xf0\x72"
|
|
"\x11\xe3\x9e\x29\xe9\xc8\x24\x59";
|
|
int i;
|
|
int j;
|
|
|
|
XMEMSET(data, 0xa5, sizeof(data));
|
|
|
|
/* Initialize */
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
|
|
/* Unaligned input and output buffer. */
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, data + 1, dataLen), 0);
|
|
ExpectIntEQ(wc_Blake2sFinal(&blake, hash + 1, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash + 1, (byte*)expHash, WC_BLAKE2S_DIGEST_SIZE);
|
|
|
|
/* Test that empty updates work. */
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, NULL, 0), 0);
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, (byte*)"", 0), 0);
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, data, dataLen), 0);
|
|
ExpectIntEQ(wc_Blake2sFinal(&blake, hash, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash, (byte*)expHash, WC_BLAKE2S_DIGEST_SIZE);
|
|
|
|
/* Ensure chunking works. */
|
|
for (i = 1; i < dataLen; i++) {
|
|
ExpectIntEQ(wc_InitBlake2s(&blake, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
for (j = 0; j < dataLen; j += i) {
|
|
int len = dataLen - j;
|
|
if (i < len)
|
|
len = i;
|
|
ExpectIntEQ(wc_Blake2sUpdate(&blake, data + j, len), 0);
|
|
}
|
|
ExpectIntEQ(wc_Blake2sFinal(&blake, hash, WC_BLAKE2S_DIGEST_SIZE), 0);
|
|
ExpectBufEQ(hash, (byte*)expHash, WC_BLAKE2S_DIGEST_SIZE);
|
|
}
|
|
#endif
|
|
return EXPECT_RESULT();
|
|
}
|
|
|