1 /* Copyright (c) 2023, Google LLC
2 *
3 * Permission to use, copy, modify, and/or distribute this software for any
4 * purpose with or without fee is hereby granted, provided that the above
5 * copyright notice and this permission notice appear in all copies.
6 *
7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
10 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
12 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
13 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
14
15 #include <openssl/base.h>
16
17 #include <stdlib.h>
18 #include <cstdint>
19 #include <string>
20 #include <vector>
21
22 #include <gtest/gtest.h>
23 #include <openssl/bytestring.h>
24
25 #include "./internal.h"
26 #include "../test/file_test.h"
27 #include "../test/test_util.h"
28
29
30 namespace {
31
TEST(SpxTest,KeyGeneration)32 TEST(SpxTest, KeyGeneration) {
33 const uint8_t seed[3 * SPX_N] = {0};
34 const uint8_t expected_pk[] = {
35 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
36 0x00, 0x00, 0x00, 0x00, 0x00, 0xbe, 0x6b, 0xd7, 0xe8, 0xe1, 0x98,
37 0xea, 0xf6, 0x2d, 0x57, 0x2f, 0x13, 0xfc, 0x79, 0xf2, 0x6f,
38 };
39 const uint8_t expected_sk[] = {
40 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
41 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
42 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
43 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
44 0x00, 0x00, 0x00, 0x00, 0xbe, 0x6b, 0xd7, 0xe8, 0xe1, 0x98, 0xea,
45 0xf6, 0x2d, 0x57, 0x2f, 0x13, 0xfc, 0x79, 0xf2, 0x6f,
46 };
47
48 uint8_t pk[2 * SPX_N];
49 uint8_t sk[4 * SPX_N];
50 spx_generate_key_from_seed(pk, sk, seed);
51 EXPECT_EQ(Bytes(pk), Bytes(expected_pk));
52 EXPECT_EQ(Bytes(sk), Bytes(expected_sk));
53 }
54
TEST(SpxTest,KeyGeneration2)55 TEST(SpxTest, KeyGeneration2) {
56 const uint8_t seed[3 * SPX_N] = {
57 0x3f, 0x00, 0xff, 0x1c, 0x9c, 0x5e, 0xaa, 0xfe, 0x09, 0xc3, 0x08, 0x0d,
58 0xac, 0xc1, 0x83, 0x2b, 0x35, 0x8a, 0x40, 0xd5, 0xf3, 0x8c, 0xcb, 0x97,
59 0xe3, 0xa6, 0xc1, 0xb3, 0xb7, 0x5f, 0x42, 0xab, 0x17, 0x34, 0xe6, 0x41,
60 0x89, 0xe1, 0x57, 0x93, 0x12, 0x74, 0xdb, 0xbd, 0xb4, 0x28, 0xd0, 0xfb,
61 };
62 const uint8_t expected_pk[] = {
63 0x17, 0x34, 0xe6, 0x41, 0x89, 0xe1, 0x57, 0x93, 0x12, 0x74, 0xdb,
64 0xbd, 0xb4, 0x28, 0xd0, 0xfb, 0x59, 0xc8, 0x64, 0xd2, 0x52, 0x96,
65 0xa9, 0x22, 0xdc, 0x61, 0xb8, 0xc1, 0x92, 0x15, 0xac, 0x74,
66 };
67 const uint8_t expected_sk[] = {
68 0x3f, 0x00, 0xff, 0x1c, 0x9c, 0x5e, 0xaa, 0xfe, 0x09, 0xc3, 0x08,
69 0x0d, 0xac, 0xc1, 0x83, 0x2b, 0x35, 0x8a, 0x40, 0xd5, 0xf3, 0x8c,
70 0xcb, 0x97, 0xe3, 0xa6, 0xc1, 0xb3, 0xb7, 0x5f, 0x42, 0xab, 0x17,
71 0x34, 0xe6, 0x41, 0x89, 0xe1, 0x57, 0x93, 0x12, 0x74, 0xdb, 0xbd,
72 0xb4, 0x28, 0xd0, 0xfb, 0x59, 0xc8, 0x64, 0xd2, 0x52, 0x96, 0xa9,
73 0x22, 0xdc, 0x61, 0xb8, 0xc1, 0x92, 0x15, 0xac, 0x74,
74 };
75
76 uint8_t pk[2 * SPX_N];
77 uint8_t sk[4 * SPX_N];
78 spx_generate_key_from_seed(pk, sk, seed);
79 EXPECT_EQ(Bytes(pk), Bytes(expected_pk));
80 EXPECT_EQ(Bytes(sk), Bytes(expected_sk));
81 }
82
TEST(SpxTest,BasicSignVerify)83 TEST(SpxTest, BasicSignVerify) {
84 uint8_t pk[2 * SPX_N];
85 uint8_t sk[4 * SPX_N];
86 spx_generate_key(pk, sk);
87
88 uint8_t message[] = {0x42};
89 uint8_t signature[SPX_SIGNATURE_BYTES];
90 spx_sign(signature, sk, message, sizeof(message), true);
91 EXPECT_EQ(spx_verify(signature, pk, message, sizeof(message)), 1);
92 }
93
SpxFileTest(FileTest * t)94 static void SpxFileTest(FileTest *t) {
95 std::vector<uint8_t> message, public_key, signature;
96 t->IgnoreAttribute("count");
97 t->IgnoreAttribute("seed");
98 t->IgnoreAttribute("mlen");
99 ASSERT_TRUE(t->GetBytes(&message, "msg"));
100 ASSERT_TRUE(t->GetBytes(&public_key, "pk"));
101 t->IgnoreAttribute("sk");
102 t->IgnoreAttribute("smlen");
103 ASSERT_TRUE(t->GetBytes(&signature, "sm"));
104
105 EXPECT_EQ(spx_verify(signature.data(), public_key.data(), message.data(),
106 message.size()),
107 1);
108
109 message[0] ^= 1;
110
111 EXPECT_EQ(spx_verify(signature.data(), public_key.data(), message.data(),
112 message.size()),
113 0);
114 }
115
SpxFileDeterministicTest(FileTest * t)116 static void SpxFileDeterministicTest(FileTest *t) {
117 std::vector<uint8_t> message, sk, expected_signature;
118 t->IgnoreAttribute("count");
119 t->IgnoreAttribute("seed");
120 t->IgnoreAttribute("mlen");
121 ASSERT_TRUE(t->GetBytes(&message, "msg"));
122 t->IgnoreAttribute("pk");
123 ASSERT_TRUE(t->GetBytes(&sk, "sk"));
124 t->IgnoreAttribute("smlen");
125 ASSERT_TRUE(t->GetBytes(&expected_signature, "sm"));
126 expected_signature.resize(SPX_SIGNATURE_BYTES);
127
128 uint8_t signature[SPX_SIGNATURE_BYTES];
129 spx_sign(signature, sk.data(), message.data(), message.size(), false);
130
131 EXPECT_EQ(Bytes(signature), Bytes(expected_signature));
132 }
133
TEST(SpxTest,TestVectors)134 TEST(SpxTest, TestVectors) {
135 FileTestGTest("crypto/spx/spx_tests.txt", SpxFileTest);
136 FileTestGTest("crypto/spx/spx_tests_deterministic.txt",
137 SpxFileDeterministicTest);
138 }
139
140 } // namespace
141