chiark - git - mdw - catacomb/blob - symm/t/poly1305

   1 poly1305-hash {
   2   ## The tests from Daniel J. Bernstein, `The Poly1305-AES message-
   3   ## authentication code', 2005-03-29, Appendix B,
   4   ## https://cr.yp.to/mac/poly1305-20050329.pdf
   5   851fc40c3467ac0be05cc20404f3f700 580b3b0f9447bb1e69d095b5928b6dbc
   6     f3f6
   7     f4c633c3044fc145f84f335cb81953de;
   8   a0f3080000f46400d0c7e9076c834403 dd3fab2251f11ac759f0887129cc2ee7
   9     ""
  10     dd3fab2251f11ac759f0887129cc2ee7;
  11   48443d0bb0d21109c89a100b5ce2c208 83149c69b561dd88298a1798b10716ef
  12     663cea190ffb83d89593f3f476b6bc24d7e679107ea26adb8caf6652d0656136
  13     0ee1c16bb73f0f4fd19881753c01cdbe;
  14   12976a08c4426d0ce8a82407c4f48207 80f8c20aa71202d1e29179cbcb555a57
  15     ab0812724a7f1e342742cbed374d94d136c6b8795d45b3819830f2c04491faf0990c62e48b8018b2c3e4a0fa3134cb67fa83e158c994d961c4cb21095c1bf9
  16     5154ad0d2cb26e01274fc51148491f1b;
  17
  18   ## This one's from Daniel J. Bernstein, `Cryptography in NaCL', 2009-03-10,
  19   ## https://cr.yp.to/highspeed/naclcrypto-20090310.pdf
  20   eea6a7251c1e72916d11c2cb214d3c25 2539121d8e234e652d651fa4c8cff880
  21     8e993b9f48681273c29650ba32fc76ce48332ea7164d96a4476fb8c531a1186ac0dfc17c98dce87b4da7f011ec48c97271d2c20f9b928fe2270d6fb863d51738b48eeee314a7cc8ab932164548e526ae90224368517acfeabd6bb3732bc0e9da99832b61ca01b6de56244a9e88d5f9b37973f622a43d14a6599b1f654cb45a74e355a5
  22     f3ffc7703f9400e52a7dfb4b3d3305d9;
  23
  24   ## Test vectors from RFC7539.
  25   85d6be7857556d337f4452fe42d506a8 0103808afb0db2fd4abff6af4149f51b
  26     43727970746f6772617068696320466f72756d2052657365617263682047726f7570
  27     a8061dc1305136c6c22b8baf0c0127a9;
  28   00000000000000000000000000000000 00000000000000000000000000000000
  29     00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  30     00000000000000000000000000000000;
  31   00000000000000000000000000000000 36e5f6b5c5e06070f0efca96227a863e
  32     416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207768696368206172652061646472657373656420746f
  33     36e5f6b5c5e06070f0efca96227a863e;
  34   36e5f6b5c5e06070f0efca96227a863e 00000000000000000000000000000000
  35     416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207768696368206172652061646472657373656420746f
  36     f3477e7cd95417af89a6b8794c310cf0;
  37   1c9240a5eb55d38af333888604f6b5f0 473917c1402b80099dca5cbc207075c0
  38     2754776173206272696c6c69672c20616e642074686520736c6974687920746f7665730a446964206779726520616e642067696d626c6520696e2074686520776162653a0a416c6c206d696d737920776572652074686520626f726f676f7665732c0a416e6420746865206d6f6d65207261746873206f757467726162652e
  39     4541669a7eaaee61e708dc7cbcc5eb62;
  40   02000000000000000000000000000000 00000000000000000000000000000000
  41     ffffffffffffffffffffffffffffffff
  42     03000000000000000000000000000000;
  43   02000000000000000000000000000000 ffffffffffffffffffffffffffffffff
  44     02000000000000000000000000000000
  45     03000000000000000000000000000000;
  46   01000000000000000000000000000000 00000000000000000000000000000000
  47     fffffffffffffffffffffffffffffffff0ffffffffffffffffffffffffffffff11000000000000000000000000000000
  48     05000000000000000000000000000000;
  49   01000000000000000000000000000000 00000000000000000000000000000000
  50     fffffffffffffffffffffffffffffffffbfefefefefefefefefefefefefefefe01010101010101010101010101010101
  51     00000000000000000000000000000000;
  52   02000000000000000000000000000000 00000000000000000000000000000000
  53     fdffffffffffffffffffffffffffffff
  54     faffffffffffffffffffffffffffffff;
  55   01000000000000000400000000000000 00000000000000000000000000000000
  56     e33594d7505e43b900000000000000003394d7505e4379cd01000000000000000000000000000000000000000000000001000000000000000000000000000000
  57     14000000000000005500000000000000;
  58   01000000000000000400000000000000 00000000000000000000000000000000
  59     e33594d7505e43b900000000000000003394d7505e4379cd010000000000000000000000000000000000000000000000
  60     13000000000000000000000000000000;
  61
  62   ## This is a test of reduction which I constructed by hand.
  63   ab59ca0d7cb5fb09b8065a01f03f310a 00000000000000000000000000000000
  64     8daf7e633cf2fc399143a09fd109aa4d
  65     04000000000000000000000000000000;
  66 }
  67
  68 poly1305-cat {
  69   36e5f6b5c5e06070f0efca96227a863e 00000000000000000000000000000000
  70     416e79207375626d697373696f6e2074 6f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c 207768696368206172652061646472657373656420746f
  71     f3477e7cd95417af89a6b8794c310cf0;
  72   eea6a7251c1e72916d11c2cb214d3c25 2539121d8e234e652d651fa4c8cff880
  73     8e993b9f48681273c29650ba32fc76ce48332ea7164d96a4476fb8c531a1186ac0dfc17c98dce87b4da7f011ec48c97271d2c20f9b928fe2270d6fb863d51738
  74     b48eeee314a7cc8ab932164548e526ae90224368517acfeabd6bb3732bc0e9da99832b61ca01b6de56244a9e88d5f9b3
  75     7973f622a43d14a6599b1f654cb45a74e355a5
  76     f3ffc7703f9400e52a7dfb4b3d3305d9;
  77 }
  78
  79 poly1305-mct {
  80   ## Monte-Carlo test from https://cr.yp.to/mac/test.html.
  81   ## Rather than check MD5 hashes of transcripts, I check the final tag
  82   ## value.  These were calculated from transcripts of a scratch
  83   ## implementation (utils/poly1305-mct.c) which I checked against the
  84   ## reference hashes.
  85   ##
  86   ## [universe /tmp/mdw]{ ./poly1305-mct | tee >(md5sum >&3) | tail -n1; } 3>&1
  87   ## 3ceb64843c00984c5c2b7897f499141b  -
  88   ## df62013a9d388ea6e82cb7295fa706ec
  89
  90   00000000000000000000000000000000
  91     00000000000000000000000000000000
  92     00000000000000000000000000000000
  93     1 596382b2c34704b87e291250fcb927fd;
  94   00000000000000000000000000000000
  95     00000000000000000000000000000000
  96     00000000000000000000000000000000
  97     10 7f1d971da577bdd6fb24437aaac845f5;
  98   00000000000000000000000000000000
  99     00000000000000000000000000000000
 100     00000000000000000000000000000000
 101     100 e1cb88ba2c498ade2091ab06cefa24fd;
 102   00000000000000000000000000000000
 103     00000000000000000000000000000000
 104     00000000000000000000000000000000
 105     1000 f7064b7217e8a6b74b381c58175d9ff2;
 106
 107   ## The full test.  This takes aaaaages.
 108   ##00000000000000000000000000000000
 109   ##  00000000000000000000000000000000
 110   ##  00000000000000000000000000000000
 111   ##  1000000 df62013a9d388ea6e82cb7295fa706ec;
 112 }