| 1 | poly1305-hash { |
| 2 | ## The tests from Danial J. Bernstein, `The Poly1305-AES message- |
| 3 | ## authentication code', 2005-03-29, Appendix B, |
| 4 | ## https://cr.yp.to/mac/poly1305-20050329.pdf |
| 5 | 851fc40c3467ac0be05cc20404f3f700 580b3b0f9447bb1e69d095b5928b6dbc |
| 6 | f3f6 |
| 7 | f4c633c3044fc145f84f335cb81953de; |
| 8 | a0f3080000f46400d0c7e9076c834403 dd3fab2251f11ac759f0887129cc2ee7 |
| 9 | "" |
| 10 | dd3fab2251f11ac759f0887129cc2ee7; |
| 11 | 48443d0bb0d21109c89a100b5ce2c208 83149c69b561dd88298a1798b10716ef |
| 12 | 663cea190ffb83d89593f3f476b6bc24d7e679107ea26adb8caf6652d0656136 |
| 13 | 0ee1c16bb73f0f4fd19881753c01cdbe; |
| 14 | 12976a08c4426d0ce8a82407c4f48207 80f8c20aa71202d1e29179cbcb555a57 |
| 15 | ab0812724a7f1e342742cbed374d94d136c6b8795d45b3819830f2c04491faf0990c62e48b8018b2c3e4a0fa3134cb67fa83e158c994d961c4cb21095c1bf9 |
| 16 | 5154ad0d2cb26e01274fc51148491f1b; |
| 17 | |
| 18 | ## This one's from Daniel J. Bernstein, `Cryptography in NaCL', 2009-03-10, |
| 19 | ## https://cr.yp.to/highspeed/naclcrypto-20090310.pdf |
| 20 | eea6a7251c1e72916d11c2cb214d3c25 2539121d8e234e652d651fa4c8cff880 |
| 21 | 8e993b9f48681273c29650ba32fc76ce48332ea7164d96a4476fb8c531a1186ac0dfc17c98dce87b4da7f011ec48c97271d2c20f9b928fe2270d6fb863d51738b48eeee314a7cc8ab932164548e526ae90224368517acfeabd6bb3732bc0e9da99832b61ca01b6de56244a9e88d5f9b37973f622a43d14a6599b1f654cb45a74e355a5 |
| 22 | f3ffc7703f9400e52a7dfb4b3d3305d9; |
| 23 | |
| 24 | ## Test vectors from RFC7539. |
| 25 | 85d6be7857556d337f4452fe42d506a8 0103808afb0db2fd4abff6af4149f51b |
| 26 | 43727970746f6772617068696320466f72756d2052657365617263682047726f7570 |
| 27 | a8061dc1305136c6c22b8baf0c0127a9; |
| 28 | 00000000000000000000000000000000 00000000000000000000000000000000 |
| 29 | 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 |
| 30 | 00000000000000000000000000000000; |
| 31 | 00000000000000000000000000000000 36e5f6b5c5e06070f0efca96227a863e |
| 32 | 416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207768696368206172652061646472657373656420746f |
| 33 | 36e5f6b5c5e06070f0efca96227a863e; |
| 34 | 36e5f6b5c5e06070f0efca96227a863e 00000000000000000000000000000000 |
| 35 | 416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207768696368206172652061646472657373656420746f |
| 36 | f3477e7cd95417af89a6b8794c310cf0; |
| 37 | 1c9240a5eb55d38af333888604f6b5f0 473917c1402b80099dca5cbc207075c0 |
| 38 | 2754776173206272696c6c69672c20616e642074686520736c6974687920746f7665730a446964206779726520616e642067696d626c6520696e2074686520776162653a0a416c6c206d696d737920776572652074686520626f726f676f7665732c0a416e6420746865206d6f6d65207261746873206f757467726162652e |
| 39 | 4541669a7eaaee61e708dc7cbcc5eb62; |
| 40 | 02000000000000000000000000000000 00000000000000000000000000000000 |
| 41 | ffffffffffffffffffffffffffffffff |
| 42 | 03000000000000000000000000000000; |
| 43 | 02000000000000000000000000000000 ffffffffffffffffffffffffffffffff |
| 44 | 02000000000000000000000000000000 |
| 45 | 03000000000000000000000000000000; |
| 46 | 01000000000000000000000000000000 00000000000000000000000000000000 |
| 47 | fffffffffffffffffffffffffffffffff0ffffffffffffffffffffffffffffff11000000000000000000000000000000 |
| 48 | 05000000000000000000000000000000; |
| 49 | 01000000000000000000000000000000 00000000000000000000000000000000 |
| 50 | fffffffffffffffffffffffffffffffffbfefefefefefefefefefefefefefefe01010101010101010101010101010101 |
| 51 | 00000000000000000000000000000000; |
| 52 | 02000000000000000000000000000000 00000000000000000000000000000000 |
| 53 | fdffffffffffffffffffffffffffffff |
| 54 | faffffffffffffffffffffffffffffff; |
| 55 | 01000000000000000400000000000000 00000000000000000000000000000000 |
| 56 | e33594d7505e43b900000000000000003394d7505e4379cd01000000000000000000000000000000000000000000000001000000000000000000000000000000 |
| 57 | 14000000000000005500000000000000; |
| 58 | 01000000000000000400000000000000 00000000000000000000000000000000 |
| 59 | e33594d7505e43b900000000000000003394d7505e4379cd010000000000000000000000000000000000000000000000 |
| 60 | 13000000000000000000000000000000; |
| 61 | |
| 62 | ## This is a test of reduction which I constructed by hand. |
| 63 | ab59ca0d7cb5fb09b8065a01f03f310a 00000000000000000000000000000000 |
| 64 | 8daf7e633cf2fc399143a09fd109aa4d |
| 65 | 04000000000000000000000000000000; |
| 66 | } |
| 67 | |
| 68 | poly1305-cat { |
| 69 | 36e5f6b5c5e06070f0efca96227a863e 00000000000000000000000000000000 |
| 70 | 416e79207375626d697373696f6e2074 6f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c 207768696368206172652061646472657373656420746f |
| 71 | f3477e7cd95417af89a6b8794c310cf0; |
| 72 | eea6a7251c1e72916d11c2cb214d3c25 2539121d8e234e652d651fa4c8cff880 |
| 73 | 8e993b9f48681273c29650ba32fc76ce48332ea7164d96a4476fb8c531a1186ac0dfc17c98dce87b4da7f011ec48c97271d2c20f9b928fe2270d6fb863d51738 |
| 74 | b48eeee314a7cc8ab932164548e526ae90224368517acfeabd6bb3732bc0e9da99832b61ca01b6de56244a9e88d5f9b3 |
| 75 | 7973f622a43d14a6599b1f654cb45a74e355a5 |
| 76 | f3ffc7703f9400e52a7dfb4b3d3305d9; |
| 77 | } |
| 78 | |
| 79 | poly1305-mct { |
| 80 | ## Monte-Carlo test from https://cr.yp.to/mac/test.html. |
| 81 | ## Rather than check MD5 hashes of transcripts, I check the final tag |
| 82 | ## value. These were calculated from transcripts of a scratch |
| 83 | ## implementation (utils/poly1305-mct.c) which I checked against the |
| 84 | ## reference hashes. |
| 85 | ## |
| 86 | ## [universe /tmp/mdw]{ ./poly1305-mct | tee >(md5sum >&3) | tail -n1; } 3>&1 |
| 87 | ## 3ceb64843c00984c5c2b7897f499141b - |
| 88 | ## df62013a9d388ea6e82cb7295fa706ec |
| 89 | |
| 90 | 00000000000000000000000000000000 |
| 91 | 00000000000000000000000000000000 |
| 92 | 00000000000000000000000000000000 |
| 93 | 1 596382b2c34704b87e291250fcb927fd; |
| 94 | 00000000000000000000000000000000 |
| 95 | 00000000000000000000000000000000 |
| 96 | 00000000000000000000000000000000 |
| 97 | 10 7f1d971da577bdd6fb24437aaac845f5; |
| 98 | 00000000000000000000000000000000 |
| 99 | 00000000000000000000000000000000 |
| 100 | 00000000000000000000000000000000 |
| 101 | 100 e1cb88ba2c498ade2091ab06cefa24fd; |
| 102 | 00000000000000000000000000000000 |
| 103 | 00000000000000000000000000000000 |
| 104 | 00000000000000000000000000000000 |
| 105 | 1000 f7064b7217e8a6b74b381c58175d9ff2; |
| 106 | |
| 107 | ## The full test. This takes aaaaages. |
| 108 | ##00000000000000000000000000000000 |
| 109 | ## 00000000000000000000000000000000 |
| 110 | ## 00000000000000000000000000000000 |
| 111 | ## 1000000 df62013a9d388ea6e82cb7295fa706ec; |
| 112 | } |