authorgravatar for mantas@jonytis.euMantas Jonytis <mantas@jonytis.eu> 2020-08-01 16:56:11+03:00
committergravatar for mantas@jonytis.euMantas Jonytis <mantas@jonytis.eu> 2020-08-01 16:56:11+03:00
log8286cc77f8fdd33d7b2426b385375f94f04fdae0
treef26c31801e630908291dfec36e8ef7335dd94206
parent36ed4623a8355cd06be84e015142d81ae4429e4f

implement keyed blake2

1 files changed, 113 insertions(+), 28 deletions(-)

lib/std/crypto/blake2.zig+113-28
......@@ -1,8 +1,7 @@
11const mem = @import("../mem.zig");
2const math = @import("../math.zig");
3const endian = @import("../endian.zig");
4const debug = @import("../debug.zig");
52const builtin = @import("builtin");
3const debug = @import("../debug.zig");
4const math = @import("../math.zig");
65const htest = @import("test.zig");
76
87const RoundParam = struct {
......@@ -67,10 +66,17 @@ pub fn Blake2s(comptime out_len: usize) type {
6766 buf: [64]u8,
6867 buf_len: u8,
6968
69 key: []const u8,
70
7071 pub fn init() Self {
72 return init_keyed("");
73 }
74
75 pub fn init_keyed(key: []const u8) Self {
7176 debug.assert(8 <= out_len and out_len <= 512);
7277
7378 var s: Self = undefined;
79 s.key = key;
7480 s.reset();
7581 return s;
7682 }
......@@ -78,14 +84,24 @@ pub fn Blake2s(comptime out_len: usize) type {
7884 pub fn reset(d: *Self) void {
7985 mem.copy(u32, d.h[0..], iv[0..]);
8086
81 // No key plus default parameters
82 d.h[0] ^= 0x01010000 ^ @intCast(u32, out_len >> 3);
87 // default parameters
88 d.h[0] ^= 0x01010000 ^ @truncate(u32, d.key.len << 8) ^ @intCast(u32, out_len >> 3);
8389 d.t = 0;
8490 d.buf_len = 0;
91
92 if (d.key.len > 0) {
93 mem.set(u8, d.buf[d.key.len..], 0);
94 d.update(d.key);
95 d.buf_len = 64;
96 }
8597 }
8698
8799 pub fn hash(b: []const u8, out: []u8) void {
88 var d = Self.init();
100 Self.hash_keyed("", b, out);
101 }
102
103 pub fn hash_keyed(key: []const u8, b: []const u8, out: []u8) void {
104 var d = Self.init_keyed(key);
89105 d.update(b);
90106 d.final(out);
91107 }
......@@ -230,19 +246,22 @@ test "blake2s224 streaming" {
230246 htest.assertEqual(h3, out[0..]);
231247}
232248
233test "blake2s224 aligned final" {
234 var block = [_]u8{0} ** Blake2s224.block_length;
235 var out: [Blake2s224.digest_length]u8 = undefined;
249test "comptime blake2s224" {
250 comptime {
251 @setEvalBranchQuota(6000);
252 var block = [_]u8{0} ** Blake2s224.block_length;
253 var out: [Blake2s224.digest_length]u8 = undefined;
236254
237 const h1 = "86b7611563293f8c73627df7a6d6ba25ca0548c2a6481f7d116ee576";
255 const h1 = "86b7611563293f8c73627df7a6d6ba25ca0548c2a6481f7d116ee576";
238256
239 htest.assertEqualHash(Blake2s224, h1, block[0..]);
257 htest.assertEqualHash(Blake2s224, h1, block[0..]);
240258
241 var h = Blake2s224.init();
242 h.update(&block);
243 h.final(out[0..]);
259 var h = Blake2s224.init();
260 h.update(&block);
261 h.final(out[0..]);
244262
245 htest.assertEqual(h1, out[0..]);
263 htest.assertEqual(h1, out[0..]);
264 }
246265}
247266
248267test "blake2s256 single" {
......@@ -296,9 +315,32 @@ test "blake2s256 streaming" {
296315 htest.assertEqual(h3, out[0..]);
297316}
298317
318test "blake2s256 keyed" {
319 var out: [32]u8 = undefined;
320
321 const h1 = "10f918da4d74fab3302e48a5d67d03804b1ec95372a62a0f33b7c9fa28ba1ae6";
322 const key = "secret_key";
323
324 Blake2s256.hash_keyed(key, "a" ** 64 ++ "b" ** 64, &out);
325 htest.assertEqual(h1, out[0..]);
326
327 var h = Blake2s256.init_keyed(key);
328 h.update("a" ** 64 ++ "b" ** 64);
329 h.final(out[0..]);
330
331 htest.assertEqual(h1, out[0..]);
332
333 h.reset();
334 h.update("a" ** 64);
335 h.update("b" ** 64);
336 h.final(out[0..]);
337
338 htest.assertEqual(h1, out[0..]);
339}
340
299341test "comptime blake2s256" {
300342 comptime {
301 @setEvalBranchQuota(8000);
343 @setEvalBranchQuota(6000);
302344 var block = [_]u8{0} ** Blake2s256.block_length;
303345 var out: [Blake2s256.digest_length]u8 = undefined;
304346
......@@ -358,10 +400,17 @@ pub fn Blake2b(comptime out_len: usize) type {
358400 buf: [128]u8,
359401 buf_len: u8,
360402
403 key: []const u8,
404
361405 pub fn init() Self {
406 return init_keyed("");
407 }
408
409 pub fn init_keyed(key: []const u8) Self {
362410 debug.assert(8 <= out_len and out_len <= 512);
363411
364412 var s: Self = undefined;
413 s.key = key;
365414 s.reset();
366415 return s;
367416 }
......@@ -369,14 +418,24 @@ pub fn Blake2b(comptime out_len: usize) type {
369418 pub fn reset(d: *Self) void {
370419 mem.copy(u64, d.h[0..], iv[0..]);
371420
372 // No key plus default parameters
373 d.h[0] ^= 0x01010000 ^ (out_len >> 3);
421 // default parameters
422 d.h[0] ^= 0x01010000 ^ @truncate(u32, d.key.len << 8) ^ @intCast(u32, out_len >> 3);
374423 d.t = 0;
375424 d.buf_len = 0;
425
426 if (d.key.len > 0) {
427 mem.set(u8, d.buf[d.key.len..], 0);
428 d.update(d.key);
429 d.buf_len = 128;
430 }
376431 }
377432
378433 pub fn hash(b: []const u8, out: []u8) void {
379 var d = Self.init();
434 Self.hash_keyed("", b, out);
435 }
436
437 pub fn hash_keyed(key: []const u8, b: []const u8, out: []u8) void {
438 var d = Self.init_keyed(key);
380439 d.update(b);
381440 d.final(out);
382441 }
......@@ -519,19 +578,22 @@ test "blake2b384 streaming" {
519578 htest.assertEqual(h3, out[0..]);
520579}
521580
522test "blake2b384 aligned final" {
523 var block = [_]u8{0} ** Blake2b384.block_length;
524 var out: [Blake2b384.digest_length]u8 = undefined;
581test "comptime blake2b384" {
582 comptime {
583 @setEvalBranchQuota(7000);
584 var block = [_]u8{0} ** Blake2b384.block_length;
585 var out: [Blake2b384.digest_length]u8 = undefined;
525586
526 const h1 = "e8aa1931ea0422e4446fecdd25c16cf35c240b10cb4659dd5c776eddcaa4d922397a589404b46eb2e53d78132d05fd7d";
587 const h1 = "e8aa1931ea0422e4446fecdd25c16cf35c240b10cb4659dd5c776eddcaa4d922397a589404b46eb2e53d78132d05fd7d";
527588
528 htest.assertEqualHash(Blake2b384, h1, block[0..]);
589 htest.assertEqualHash(Blake2b384, h1, block[0..]);
529590
530 var h = Blake2b384.init();
531 h.update(&block);
532 h.final(out[0..]);
591 var h = Blake2b384.init();
592 h.update(&block);
593 h.final(out[0..]);
533594
534 htest.assertEqual(h1, out[0..]);
595 htest.assertEqual(h1, out[0..]);
596 }
535597}
536598
537599test "blake2b512 single" {
......@@ -585,6 +647,29 @@ test "blake2b512 streaming" {
585647 htest.assertEqual(h3, out[0..]);
586648}
587649
650test "blake2b512 keyed" {
651 var out: [64]u8 = undefined;
652
653 const h1 = "8a978060ccaf582f388f37454363071ac9a67e3a704585fd879fb8a419a447e389c7c6de790faa20a7a7dccf197de736bc5b40b98a930b36df5bee7555750c4d";
654 const key = "secret_key";
655
656 Blake2b512.hash_keyed(key, "a" ** 64 ++ "b" ** 64, &out);
657 htest.assertEqual(h1, out[0..]);
658
659 var h = Blake2b512.init_keyed(key);
660 h.update("a" ** 64 ++ "b" ** 64);
661 h.final(out[0..]);
662
663 htest.assertEqual(h1, out[0..]);
664
665 h.reset();
666 h.update("a" ** 64);
667 h.update("b" ** 64);
668 h.final(out[0..]);
669
670 htest.assertEqual(h1, out[0..]);
671}
672
588673test "comptime blake2b512" {
589674 comptime {
590675 @setEvalBranchQuota(8000);