1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
package org.bouncycastle.crypto.test;
import java.security.SecureRandom;
import org.bouncycastle.crypto.macs.SipHash;
import org.bouncycastle.crypto.params.KeyParameter;
import org.bouncycastle.util.Pack;
import org.bouncycastle.util.encoders.Hex;
import org.bouncycastle.util.test.SimpleTest;
/*
* SipHash test values from "SipHash: a fast short-input PRF", by Jean-Philippe
* Aumasson and Daniel J. Bernstein (https://131002.net/siphash/siphash.pdf), Appendix A.
*/
public class SipHashTest
extends SimpleTest
{
private static final int UPDATE_BYTES = 0;
private static final int UPDATE_FULL = 1;
private static final int UPDATE_MIX = 2;
public String getName()
{
return "SipHash";
}
public void performTest()
throws Exception
{
byte[] key = Hex.decode("000102030405060708090a0b0c0d0e0f");
byte[] input = Hex.decode("000102030405060708090a0b0c0d0e");
runMAC(key, input, UPDATE_BYTES);
runMAC(key, input, UPDATE_FULL);
runMAC(key, input, UPDATE_MIX);
SecureRandom random = new SecureRandom();
for (int i = 0; i < 100; ++i)
{
randomTest(random);
}
}
private void runMAC(byte[] key, byte[] input, int updateType)
throws Exception
{
long expected = 0xa129ca6149be45e5L;
SipHash mac = new SipHash();
mac.init(new KeyParameter(key));
updateMAC(mac, input, updateType);
long result = mac.doFinal();
if (expected != result)
{
fail("Result does not match expected value for doFinal()");
}
byte[] expectedBytes = new byte[8];
Pack.longToLittleEndian(expected, expectedBytes, 0);
updateMAC(mac, input, updateType);
byte[] output = new byte[mac.getMacSize()];
int len = mac.doFinal(output, 0);
if (len != output.length)
{
fail("Result length does not equal getMacSize() for doFinal(byte[],int)");
}
if (!areEqual(expectedBytes, output))
{
fail("Result does not match expected value for doFinal(byte[],int)");
}
}
private void randomTest(SecureRandom random)
{
byte[] key = new byte[16];
random.nextBytes(key);
int length = 1 + random.nextInt(1024);
byte[] input = new byte[length];
random.nextBytes(input);
SipHash mac = new SipHash();
mac.init(new KeyParameter(key));
updateMAC(mac, input, UPDATE_BYTES);
long result1 = mac.doFinal();
updateMAC(mac, input, UPDATE_FULL);
long result2 = mac.doFinal();
updateMAC(mac, input, UPDATE_MIX);
long result3 = mac.doFinal();
if (result1 != result2 || result1 != result3)
{
fail("Inconsistent results in random test");
}
}
private void updateMAC(SipHash mac, byte[] input, int updateType)
{
switch (updateType)
{
case UPDATE_BYTES:
{
for (int i = 0; i < input.length; ++i)
{
mac.update(input[i]);
}
break;
}
case UPDATE_FULL:
{
mac.update(input, 0, input.length);
break;
}
case UPDATE_MIX:
{
int step = Math.max(1, input.length / 3);
int pos = 0;
while (pos < input.length)
{
mac.update(input[pos++]);
int len = Math.min(input.length - pos, step);
mac.update(input, pos, len);
pos += len;
}
break;
}
default:
throw new IllegalStateException();
}
}
public static void main(String[] args)
{
runTest(new SipHashTest());
}
}
|
