1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159

## The crypto bindings, against published vectors.
##
## These check that we are driving OpenSSL correctly — the seed in the right
## place, the one-shot signing form, the byte order out — not that Ed25519 is
## implemented correctly, which is OpenSSL's problem and not ours.
##
## Vectors are RFC 8032 §7.1 (Ed25519) and RFC 4634 / FIPS 180-4 (SHA-256).

import std/[strutils, unittest]
import frq/crypto

func hexToBytes(s: string): seq[byte] =
  for i in countup(0, s.len - 2, 2):
    result.add byte(parseHexInt(s[i .. i + 1]))

suite "sha256":
  test "the empty string":
    check sha256("").toHex ==
      "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"

  test "abc":
    check sha256("abc").toHex ==
      "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad"

  test "the 448-bit message from FIPS 180-4":
    check sha256("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq").toHex ==
      "248d6a61d20638b8e5c026930c3e6039a33ce45964ff2167f6ecedd419db06c1"

  test "a million a's":
    check sha256("a".repeat(1_000_000)).toHex ==
      "cdc76e5c9914fb9281a1c7e284d73e67f1809a48a497200e046d39ccc7112cd0"

suite "Ed25519, RFC 8032 section 7.1":
  # TEST 1
  test "test 1: the empty message":
    let seed = hexToBytes("9d61b19deffd5a60ba844af492ec2cc4" &
                          "4449c5697b326919703bac031cae7f60")
    let k = keyFromSeed(seed)
    check k.public.toHex ==
      "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a"
    check sign(k, "").toHex ==
      "e5564300c360ac729086e2cc806e828a84877f1eb8e5d974d873e06522490155" &
      "5fb8821590a33bacc61e39701cf9b46bd25bf5f0595bbe24655141438e7a100b"

  # TEST 2
  test "test 2: one byte":
    let seed = hexToBytes("4ccd089b28ff96da9db6c346ec114e0f" &
                          "5b8a319f35aba624da8cf6ed4fb8a6fb")
    let k = keyFromSeed(seed)
    check k.public.toHex ==
      "3d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c"
    check sign(k, @[0x72'u8]).toHex ==
      "92a009a9f0d4cab8720e820b5f642540a2b27b5416503f8fb3762223ebdb69da" &
      "085ac1e43e15996e458f3613d0f11d8c387b2eaeb4302aeeb00d291612bb0c00"

  # TEST 3
  test "test 3: two bytes":
    let seed = hexToBytes("c5aa8df43f9f837bedb7442f31dcb7b1" &
                          "66d38535076f094b85ce3a2e0b4458f7")
    let k = keyFromSeed(seed)
    check k.public.toHex ==
      "fc51cd8e6218a1a38da47ed00230f0580816ed13ba3303ac5deb911548908025"
    check sign(k, @[0xaf'u8, 0x82]).toHex ==
      "6291d657deec24024827e69c3abe01a30ce548a284743a445e3680d7db5ac3ac" &
      "18ff9b538d16f290ae67f760984dc6594a7c15e9716ed28dc027beceea1ec40a"

  # TEST 1024 — the long one, which is where a length or a carry goes wrong.
  test "test 1024: a 1023-byte message":
    let seed = hexToBytes("f5e5767cf153319517630f226876b86c" &
                          "8160cc583bc013744c6bf255f5cc0ee5")
    let k = keyFromSeed(seed)
    check k.public.toHex ==
      "278117fc144c72340f67d0f2316e8386ceffbf2b2428c9c51fef7c597f1d426e"
    let msg = hexToBytes(
      "08b8b2b733424243760fe426a4b54908" &
      "632110a66c2f6591eabd3345e3e4eb98" &
      "fa6e264bf09efe12ee50f8f54e9f77b1" &
      "e355f6c50544e23fb1433ddf73be84d8" &
      "79de7c0046dc4996d9e773f4bc9efe57" &
      "38829adb26c81b37c93a1b270b20329d" &
      "658675fc6ea534e0810a4432826bf58c" &
      "941efb65d57a338bbd2e26640f89ffbc" &
      "1a858efcb8550ee3a5e1998bd177e93a" &
      "7363c344fe6b199ee5d02e82d522c4fe" &
      "ba15452f80288a821a579116ec6dad2b" &
      "3b310da903401aa62100ab5d1a36553e" &
      "06203b33890cc9b832f79ef80560ccb9" &
      "a39ce767967ed628c6ad573cb116dbef" &
      "efd75499da96bd68a8a97b928a8bbc10" &
      "3b6621fcde2beca1231d206be6cd9ec7" &
      "aff6f6c94fcd7204ed3455c68c83f4a4" &
      "1da4af2b74ef5c53f1d8ac70bdcb7ed1" &
      "85ce81bd84359d44254d95629e9855a9" &
      "4a7c1958d1f8ada5d0532ed8a5aa3fb2" &
      "d17ba70eb6248e594e1a2297acbbb39d" &
      "502f1a8c6eb6f1ce22b3de1a1f40cc24" &
      "554119a831a9aad6079cad88425de6bd" &
      "e1a9187ebb6092cf67bf2b13fd65f270" &
      "88d78b7e883c8759d2c4f5c65adb7553" &
      "878ad575f9fad878e80a0c9ba63bcbcc" &
      "2732e69485bbc9c90bfbd62481d9089b" &
      "eccf80cfe2df16a2cf65bd92dd597b07" &
      "07e0917af48bbb75fed413d238f5555a" &
      "7a569d80c3414a8d0859dc65a46128ba" &
      "b27af87a71314f318c782b23ebfe808b" &
      "82b0ce26401d2e22f04d83d1255dc51a" &
      "ddd3b75a2b1ae0784504df543af8969b" &
      "e3ea7082ff7fc9888c144da2af58429e" &
      "c96031dbcad3dad9af0dcbaaaf268cb8" &
      "fcffead94f3c7ca495e056a9b47acdb7" &
      "51fb73e666c6c655ade8297297d07ad1" &
      "ba5e43f1bca32301651339e22904cc8c" &
      "42f58c30c04aafdb038dda0847dd988d" &
      "cda6f3bfd15c4b4c4525004aa06eeff8" &
      "ca61783aacec57fb3d1f92b0fe2fd1a8" &
      "5f6724517b65e614ad6808d6f6ee34df" &
      "f7310fdc82aebfd904b01e1dc54b2927" &
      "094b2db68d6f903b68401adebf5a7e08" &
      "d78ff4ef5d63653a65040cf9bfd4aca7" &
      "984a74d37145986780fc0b16ac451649" &
      "de6188a7dbdf191f64b5fc5e2ab47b57" &
      "f7f7276cd419c17a3ca8e1b939ae49e4" &
      "88acba6b965610b5480109c8b17b80e1" &
      "b7b750dfc7598d5d5011fd2dcc5600a3" &
      "2ef5b52a1ecc820e308aa342721aac09" &
      "43bf6686b64b2579376504ccc493d97e" &
      "6aed3fb0f9cd71a43dd497f01f17c0e2" &
      "cb3797aa2a2f256656168e6c496afc5f" &
      "b93246f6b1116398a346f1a641f3b041" &
      "e989f7914f90cc2c7fff357876e506b5" &
      "0d334ba77c225bc307ba537152f3f161" &
      "0e4eafe595f6d9d90d11faa933a15ef1" &
      "369546868a7f3a45a96768d40fd9d034" &
      "12c091c6315cf4fde7cb68606937380d" &
      "b2eaaa707b4c4185c32eddcdd306705e" &
      "4dc1ffc872eeee475a64dfac86aba41c" &
      "0618983f8741c5ef68d3a101e8a3b8ca" &
      "c60c905c15fc910840b94c00a0b9d0")
    check sign(k, msg).toHex ==
      "0aab4c900501b3e24d7cdf4663326a3a" &
      "87df5e4843b2cbdb67cbf6e460fec350" &
      "aa5371b1508f9f4528ecea23c436d94b" &
      "5e8fcd4f681e30a6ac00a9704a188a03"

suite "the shape of a key":
  test "a seed that is not 32 bytes is refused":
    expect CryptoError:
      discard keyFromSeed(@[1'u8, 2, 3])

  test "the same seed always gives the same key":
    let seed = newSeq[byte](32)
    check keyFromSeed(seed).public == keyFromSeed(seed).public

  test "a fresh key is not the same twice":
    check newKey().public != newKey().public

  test "randomBytes gives what was asked for":
    check randomBytes(32).len == 32
    check randomBytes(0).len == 0