|
5 | 5 | #include <crypto/aes.h>
|
6 | 6 | #include <crypto/chacha20.h>
|
7 | 7 | #include <crypto/poly1305.h>
|
| 8 | +#include <crypto/hkdf_sha256_32.h> |
| 9 | +#include <crypto/hmac_sha256.h> |
| 10 | +#include <crypto/hmac_sha512.h> |
8 | 11 | #include <crypto/ripemd160.h>
|
9 | 12 | #include <crypto/sha1.h>
|
10 | 13 | #include <crypto/sha256.h>
|
11 | 14 | #include <crypto/sha512.h>
|
12 |
| -#include <crypto/hmac_sha256.h> |
13 |
| -#include <crypto/hmac_sha512.h> |
14 | 15 | #include <random.h>
|
15 | 16 | #include <util/strencodings.h>
|
16 | 17 | #include <test/test_bitcoin.h>
|
@@ -212,6 +213,22 @@ static void TestPoly1305(const std::string &hexmessage, const std::string &hexke
|
212 | 213 | BOOST_CHECK(tag == tagres);
|
213 | 214 | }
|
214 | 215 |
|
| 216 | +static void TestHKDF_SHA256_32(const std::string &ikm_hex, const std::string &salt_hex, const std::string &info_hex, const std::string &okm_check_hex) { |
| 217 | + std::vector<unsigned char> initial_key_material = ParseHex(ikm_hex); |
| 218 | + std::vector<unsigned char> salt = ParseHex(salt_hex); |
| 219 | + std::vector<unsigned char> info = ParseHex(info_hex); |
| 220 | + |
| 221 | + |
| 222 | + // our implementation only supports strings for the "info" and "salt", stringify them |
| 223 | + std::string salt_stringified(reinterpret_cast<char*>(salt.data()), salt.size()); |
| 224 | + std::string info_stringified(reinterpret_cast<char*>(info.data()), info.size()); |
| 225 | + |
| 226 | + CHKDF_HMAC_SHA256_L32 hkdf32(initial_key_material.data(), initial_key_material.size(), salt_stringified); |
| 227 | + unsigned char out[32]; |
| 228 | + hkdf32.Expand32(info_stringified, out); |
| 229 | + BOOST_CHECK(HexStr(out, out + 32) == okm_check_hex); |
| 230 | +} |
| 231 | + |
215 | 232 | static std::string LongTestString() {
|
216 | 233 | std::string ret;
|
217 | 234 | for (int i=0; i<200000; i++) {
|
@@ -606,6 +623,26 @@ BOOST_AUTO_TEST_CASE(poly1305_testvector)
|
606 | 623 | "13000000000000000000000000000000");
|
607 | 624 | }
|
608 | 625 |
|
| 626 | +BOOST_AUTO_TEST_CASE(hkdf_hmac_sha256_l32_tests) |
| 627 | +{ |
| 628 | + // Use rfc5869 test vectors but trucated to 32 bytes (our implementation only support length 32) |
| 629 | + TestHKDF_SHA256_32( |
| 630 | + /* IKM */ "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b", |
| 631 | + /* salt */ "000102030405060708090a0b0c", |
| 632 | + /* info */ "f0f1f2f3f4f5f6f7f8f9", |
| 633 | + /* expected OKM */ "3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf"); |
| 634 | + TestHKDF_SHA256_32( |
| 635 | + "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f", |
| 636 | + "606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf", |
| 637 | + "b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff", |
| 638 | + "b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c"); |
| 639 | + TestHKDF_SHA256_32( |
| 640 | + "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b", |
| 641 | + "", |
| 642 | + "", |
| 643 | + "8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d"); |
| 644 | +} |
| 645 | + |
609 | 646 | BOOST_AUTO_TEST_CASE(countbits_tests)
|
610 | 647 | {
|
611 | 648 | FastRandomContext ctx;
|
|
0 commit comments