test_hashes.py

# test_hashes.py
#
# Copyright (C) 2006-2022 wolfSSL Inc.
#
# This file is part of wolfSSL. (formerly known as CyaSSL)
#
# wolfSSL is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# wolfSSL is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA

# pylint: disable=redefined-outer-name

from collections import namedtuple
import pytest
from wolfcrypt._ffi import lib as _lib
from wolfcrypt.utils import t2b

if _lib.SHA_ENABLED:
    from wolfcrypt.hashes import Sha

if _lib.SHA256_ENABLED:
    from wolfcrypt.hashes import Sha256

if _lib.SHA384_ENABLED:
    from wolfcrypt.hashes import Sha384

if _lib.SHA512_ENABLED:
    from wolfcrypt.hashes import Sha512

if _lib.SHA3_ENABLED:
    from wolfcrypt.hashes import Sha3

if _lib.HMAC_ENABLED:
    if _lib.SHA_ENABLED:
        from wolfcrypt.hashes import HmacSha
    if _lib.SHA256_ENABLED:
        from wolfcrypt.hashes import HmacSha256
    if _lib.SHA384_ENABLED:
        from wolfcrypt.hashes import HmacSha384
    if _lib.SHA512_ENABLED:
        from wolfcrypt.hashes import HmacSha512


@pytest.fixture
def vectors():
    TestVector = namedtuple("TestVector", "digest")
    TestVector.__new__.__defaults__ = (None,) * len(TestVector._fields)

    # test vector dictionary
    vectorArray = {}

    if _lib.SHA_ENABLED:
        vectorArray[Sha]=TestVector(
            digest=t2b("1b6182d68ae91ce0853bd9c6b6edfedd4b6a510d")
        )

    if _lib.SHA256_ENABLED:
        vectorArray[Sha256]=TestVector(
            digest=t2b("96e02e7b1cbcd6f104fe1fdb4652027a" +
                       "5505b68652b70095c6318f9dce0d1844")
        )

    if _lib.SHA384_ENABLED:
        vectorArray[Sha384]=TestVector(
            digest=t2b("4c79d80531203a16f91bee325f18c6aada47f9382fe44fc1" +
                       "1f92917837e9b7902f5dccb7d3656f667a1dce3460bc884b")
        )

    if _lib.SHA512_ENABLED:
        vectorArray[Sha512]=TestVector(
            digest=t2b("88fcf67ffd8558d713f9cedcd852db47" +
                       "9e6573f0bd9955610a993f609637553c" +
                       "e8fff55e644ee8a106aae19c07f91b3f" +
                       "2a2a6d40dfa7302c0fa6a1a9a5bfa03f")
        )
    if _lib.SHA3_ENABLED:
        vectorArray[Sha3]=TestVector(
            digest=t2b("6170dedf06f83c3305ec18b7558384a5" +
                       "a62d86e42c143d416aaec32f971986c1" +
                       "e84edf61df308cc6d8c310d1956e1908")
            )
    if _lib.HMAC_ENABLED:
        if _lib.SHA_ENABLED:
            vectorArray[HmacSha]=TestVector(
                digest=t2b("7ab9aca2c87c7c45ba2ffa52f719fdbd8fbff62d")
            )
        if _lib.SHA256_ENABLED:
            vectorArray[HmacSha256]=TestVector(
                digest=t2b("9041ac8c66fc350a1a0d5f4fff9d8ef74721d5a43ec8893a2" +
                           "875cf69576c45c2")
            )
        if _lib.SHA384_ENABLED:
            vectorArray[HmacSha384]=TestVector(
                digest=t2b("f8c589ddf5489404f85c3c718a8345f207fb1ed6c6f5ecb09" +
                           "8e8be8aeb1aaa9f0c6dd84c141410b29a47a1a2b3a85ae0")
            )
        if _lib.SHA512_ENABLED:
            vectorArray[HmacSha512]=TestVector(
                digest=t2b("7708a12ca110cd81a334bd4e8bddc4314acd3ed218bbff7c6" +
                           "486e149fc145e9f5c05f05e919f7c2bc027266e986679984c" +
                           "3ade1a14084ad7627a65c3671a2d05")
            )

    return vectorArray


hash_params = []
if _lib.SHA_ENABLED:
    hash_params.append(Sha)
if _lib.SHA256_ENABLED:
    hash_params.append(Sha256)
if _lib.SHA384_ENABLED:
    hash_params.append(Sha384)
if _lib.SHA512_ENABLED:
    hash_params.append(Sha512)
if _lib.SHA3_ENABLED:
    hash_params.append(Sha3)

hmac_params = []
if _lib.HMAC_ENABLED:
    if _lib.SHA_ENABLED:
        hmac_params.append(HmacSha)
    if _lib.SHA256_ENABLED:
        hmac_params.append(HmacSha256)
    if _lib.SHA384_ENABLED:
        hmac_params.append(HmacSha384)
    if _lib.SHA512_ENABLED:
        hmac_params.append(HmacSha512)

@pytest.fixture(params=(hash_params + hmac_params))
def hash_cls(request):
    return request.param


def hash_new(cls, data=None):
    if cls in hash_params:
        # If it's a non-HMAC hash algo, we don't need a key. Call the
        # constructor that doesn't take a key.
        return cls(data)
    # HMAC requires a key (first parameter to constructor below). Do not shorten
    # the length of this key below the FIPS requirement. See HMAC_FIPS_MIN_KEY.
    return cls("wolfCrypt is the best crypto around", data)


def test_hash(hash_cls, vectors):
    digest = vectors[hash_cls].digest

    # update inside constructor
    assert hash_new(hash_cls, "wolfcrypt").hexdigest() == digest

    # single update
    hash_obj = hash_new(hash_cls)
    hash_obj.update("wolfcrypt")

    assert hash_obj.hexdigest() == digest

    # many updates
    hash_obj = hash_new(hash_cls)
    hash_obj.update("wolf")
    hash_obj.update("crypt")

    assert hash_obj.hexdigest() == digest

    # copy
    hash_obj = hash_new(hash_cls)
    copy = hash_obj.copy()

    assert hash_obj.hexdigest() == copy.hexdigest()

    hash_obj.update("wolfcrypt")

    assert hash_obj.hexdigest() != copy.hexdigest()

    copy.update("wolfcrypt")

    assert hash_obj.hexdigest() == copy.hexdigest() == digest