File: salsa20_test.go

package info (click to toggle)
golang-go.crypto 1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1
  • links: PTS, VCS
  • area: main
  • in suites: stretch, stretch-backports
  • size: 3,452 kB
  • sloc: asm: 5,761; ansic: 152; makefile: 11
file content (139 lines) | stat: -rw-r--r-- 3,771 bytes parent folder | download | duplicates (21)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
// Copyright 2012 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

package salsa20

import (
	"bytes"
	"encoding/hex"
	"testing"
)

func fromHex(s string) []byte {
	ret, err := hex.DecodeString(s)
	if err != nil {
		panic(err)
	}
	return ret
}

// testVectors was taken from set 6 of the ECRYPT test vectors:
// http://www.ecrypt.eu.org/stream/svn/viewcvs.cgi/ecrypt/trunk/submissions/salsa20/full/verified.test-vectors?logsort=rev&rev=210&view=markup
var testVectors = []struct {
	key      []byte
	iv       []byte
	numBytes int
	xor      []byte
}{
	{
		fromHex("0053A6F94C9FF24598EB3E91E4378ADD3083D6297CCF2275C81B6EC11467BA0D"),
		fromHex("0D74DB42A91077DE"),
		131072,
		fromHex("C349B6A51A3EC9B712EAED3F90D8BCEE69B7628645F251A996F55260C62EF31FD6C6B0AEA94E136C9D984AD2DF3578F78E457527B03A0450580DD874F63B1AB9"),
	},
	{
		fromHex("0558ABFE51A4F74A9DF04396E93C8FE23588DB2E81D4277ACD2073C6196CBF12"),
		fromHex("167DE44BB21980E7"),
		131072,
		fromHex("C3EAAF32836BACE32D04E1124231EF47E101367D6305413A0EEB07C60698A2876E4D031870A739D6FFDDD208597AFF0A47AC17EDB0167DD67EBA84F1883D4DFD"),
	},
	{
		fromHex("0A5DB00356A9FC4FA2F5489BEE4194E73A8DE03386D92C7FD22578CB1E71C417"),
		fromHex("1F86ED54BB2289F0"),
		131072,
		fromHex("3CD23C3DC90201ACC0CF49B440B6C417F0DC8D8410A716D5314C059E14B1A8D9A9FB8EA3D9C8DAE12B21402F674AA95C67B1FC514E994C9D3F3A6E41DFF5BBA6"),
	},
	{
		fromHex("0F62B5085BAE0154A7FA4DA0F34699EC3F92E5388BDE3184D72A7DD02376C91C"),
		fromHex("288FF65DC42B92F9"),
		131072,
		fromHex("E00EBCCD70D69152725F9987982178A2E2E139C7BCBE04CA8A0E99E318D9AB76F988C8549F75ADD790BA4F81C176DA653C1A043F11A958E169B6D2319F4EEC1A"),
	},
}

func TestSalsa20(t *testing.T) {
	var inBuf, outBuf []byte
	var key [32]byte

	for i, test := range testVectors {
		if test.numBytes%64 != 0 {
			t.Errorf("#%d: numBytes is not a multiple of 64", i)
			continue
		}

		if test.numBytes > len(inBuf) {
			inBuf = make([]byte, test.numBytes)
			outBuf = make([]byte, test.numBytes)
		}
		in := inBuf[:test.numBytes]
		out := outBuf[:test.numBytes]
		copy(key[:], test.key)
		XORKeyStream(out, in, test.iv, &key)

		var xor [64]byte
		for len(out) > 0 {
			for i := 0; i < 64; i++ {
				xor[i] ^= out[i]
			}
			out = out[64:]
		}

		if !bytes.Equal(xor[:], test.xor) {
			t.Errorf("#%d: bad result", i)
		}
	}
}

var xSalsa20TestData = []struct {
	in, nonce, key, out []byte
}{
	{
		[]byte("Hello world!"),
		[]byte("24-byte nonce for xsalsa"),
		[]byte("this is 32-byte key for xsalsa20"),
		[]byte{0x00, 0x2d, 0x45, 0x13, 0x84, 0x3f, 0xc2, 0x40, 0xc4, 0x01, 0xe5, 0x41},
	},
	{
		make([]byte, 64),
		[]byte("24-byte nonce for xsalsa"),
		[]byte("this is 32-byte key for xsalsa20"),
		[]byte{0x48, 0x48, 0x29, 0x7f, 0xeb, 0x1f, 0xb5, 0x2f, 0xb6,
			0x6d, 0x81, 0x60, 0x9b, 0xd5, 0x47, 0xfa, 0xbc, 0xbe, 0x70,
			0x26, 0xed, 0xc8, 0xb5, 0xe5, 0xe4, 0x49, 0xd0, 0x88, 0xbf,
			0xa6, 0x9c, 0x08, 0x8f, 0x5d, 0x8d, 0xa1, 0xd7, 0x91, 0x26,
			0x7c, 0x2c, 0x19, 0x5a, 0x7f, 0x8c, 0xae, 0x9c, 0x4b, 0x40,
			0x50, 0xd0, 0x8c, 0xe6, 0xd3, 0xa1, 0x51, 0xec, 0x26, 0x5f,
			0x3a, 0x58, 0xe4, 0x76, 0x48},
	},
}

func TestXSalsa20(t *testing.T) {
	var key [32]byte

	for i, test := range xSalsa20TestData {
		out := make([]byte, len(test.in))
		copy(key[:], test.key)
		XORKeyStream(out, test.in, test.nonce, &key)
		if !bytes.Equal(out, test.out) {
			t.Errorf("%d: expected %x, got %x", i, test.out, out)
		}
	}
}

var (
	keyArray [32]byte
	key      = &keyArray
	nonce    [8]byte
	msg      = make([]byte, 1<<10)
)

func BenchmarkXOR1K(b *testing.B) {
	b.StopTimer()
	out := make([]byte, 1024)
	b.StartTimer()
	for i := 0; i < b.N; i++ {
		XORKeyStream(out, msg[:1024], nonce[:], key)
	}
	b.SetBytes(1024)
}