react-native-quick-crypto 1.0.0-beta.14 → 1.0.0-beta.16

package/ios/libsodium-stable/test/default/aead_chacha20poly13052.exp

@@ -0,0 +1 @@
+OK

package/ios/libsodium-stable/test/default/aead_xchacha20poly1305.c

@@ -0,0 +1,203 @@
+
+#define TEST_NAME "aead_xchacha20poly1305"
+#include "cmptest.h"
+
+static int
+tv(void)
+{
+#undef  MLEN
+#define MLEN 114U
+#undef  ADLEN
+#define ADLEN 12U
+#undef  CLEN
+#define CLEN (MLEN + crypto_aead_xchacha20poly1305_ietf_ABYTES)
+    static const unsigned char firstkey[crypto_aead_xchacha20poly1305_ietf_KEYBYTES]
+        = {
+            0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
+            0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
+            0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
+            0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f
+        };
+#undef  MESSAGE
+#define MESSAGE "Ladies and Gentlemen of the class of '99: If I could offer you " \
+    "only one tip for the future, sunscreen would be it."
+    unsigned char *m = (unsigned char *) sodium_malloc(MLEN);
+    static const unsigned char nonce[crypto_aead_xchacha20poly1305_ietf_NPUBBYTES]
+        = { 0x07, 0x00, 0x00, 0x00, 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
+            0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50, 0x51, 0x52, 0x53 };
+    static const unsigned char ad[ADLEN]
+        = { 0x50, 0x51, 0x52, 0x53, 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7 };
+    unsigned char *c = (unsigned char *) sodium_malloc(CLEN);
+    unsigned char *detached_c = (unsigned char *) sodium_malloc(MLEN);
+    unsigned char *key2 = (unsigned char *) sodium_malloc(crypto_aead_xchacha20poly1305_ietf_KEYBYTES);
+    unsigned char *mac = (unsigned char *) sodium_malloc(crypto_aead_xchacha20poly1305_ietf_ABYTES);
+    unsigned char *m2 = (unsigned char *) sodium_malloc(MLEN);
+    unsigned long long found_clen;
+    unsigned long long found_maclen;
+    unsigned long long m2len;
+    size_t i;
+
+    assert(sizeof MESSAGE - 1U == MLEN);
+    memcpy(m, MESSAGE, MLEN);
+    crypto_aead_xchacha20poly1305_ietf_encrypt(c, &found_clen, m, MLEN,
+                                               ad, ADLEN,
+                                               NULL, nonce, firstkey);
+    if (found_clen != MLEN + crypto_aead_xchacha20poly1305_ietf_abytes()) {
+        printf("found_clen is not properly set\n");
+    }
+    for (i = 0U; i < CLEN; ++i) {
+        printf(",0x%02x", (unsigned int) c[i]);
+        if (i % 8 == 7) {
+            printf("\n");
+        }
+    }
+    printf("\n");
+    crypto_aead_xchacha20poly1305_ietf_encrypt_detached(detached_c,
+                                                        mac, &found_maclen,
+                                                        m, MLEN,
+                                                        ad, ADLEN,
+                                                        NULL, nonce, firstkey);
+    if (found_maclen != crypto_aead_xchacha20poly1305_ietf_abytes()) {
+        printf("found_maclen is not properly set\n");
+    }
+    if (memcmp(detached_c, c, MLEN) != 0) {
+        printf("detached ciphertext is bogus\n");
+    }
+
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt(NULL, 0, NULL, c, CLEN, ad,
+                                                   ADLEN, nonce, firstkey) != 0) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() tag-only verification failed\n");
+    }
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, &m2len, NULL, c, CLEN, ad,
+                                                   ADLEN, nonce, firstkey) != 0) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() failed\n");
+    }
+    if (m2len != MLEN) {
+        printf("m2len is not properly set\n");
+    }
+    if (memcmp(m, m2, MLEN) != 0) {
+        printf("m != m2\n");
+    }
+    memset(m2, 0, m2len);
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt_detached(m2, NULL,
+                                                            c, MLEN, mac,
+                                                            ad, ADLEN,
+                                                            nonce, firstkey) != 0) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt_detached() failed\n");
+    }
+    if (memcmp(m, m2, MLEN) != 0) {
+        printf("detached m != m2\n");
+    }
+
+    for (i = 0U; i < CLEN; i++) {
+        c[i] ^= (i + 1U);
+        if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, NULL, NULL, c, CLEN,
+                                                       ad, ADLEN, nonce, firstkey)
+            == 0 || memcmp(m, m2, MLEN) == 0) {
+            printf("message can be forged\n");
+        }
+        c[i] ^= (i + 1U);
+    }
+    crypto_aead_xchacha20poly1305_ietf_encrypt(c, &found_clen, m, MLEN,
+                                               NULL, 0U, NULL, nonce, firstkey);
+    if (found_clen != CLEN) {
+        printf("clen is not properly set (adlen=0)\n");
+    }
+    for (i = 0U; i < CLEN; ++i) {
+        printf(",0x%02x", (unsigned int) c[i]);
+        if (i % 8 == 7) {
+            printf("\n");
+        }
+    }
+    printf("\n");
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, &m2len, NULL, c, CLEN,
+                                                   NULL, 0U, nonce, firstkey) != 0) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() failed (adlen=0)\n");
+    }
+    if (m2len != MLEN) {
+        printf("m2len is not properly set (adlen=0)\n");
+    }
+    if (memcmp(m, m2, MLEN) != 0) {
+        printf("m != m2 (adlen=0)\n");
+    }
+    m2len = 1;
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt(
+            m2, &m2len, NULL, guard_page,
+            randombytes_uniform(crypto_aead_xchacha20poly1305_ietf_ABYTES),
+            NULL, 0U, nonce, firstkey) != -1) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() worked with a short "
+               "ciphertext\n");
+    }
+    if (m2len != 0) {
+        printf("Message length should have been set to zero after a failure\n");
+    }
+    m2len = 1;
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, &m2len, NULL, c, 0U, NULL, 0U,
+                                                  nonce, firstkey) != -1) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() worked with an empty "
+               "ciphertext\n");
+    }
+    if (m2len != 0) {
+        printf("Message length should have been set to zero after a failure\n");
+    }
+
+    memcpy(c, m, MLEN);
+    crypto_aead_xchacha20poly1305_ietf_encrypt(c, &found_clen, c, MLEN,
+                                               NULL, 0U, NULL, nonce, firstkey);
+    if (found_clen != CLEN) {
+        printf("clen is not properly set (adlen=0)\n");
+    }
+    for (i = 0U; i < CLEN; ++i) {
+        printf(",0x%02x", (unsigned int) c[i]);
+        if (i % 8 == 7) {
+            printf("\n");
+        }
+    }
+    printf("\n");
+
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt(c, &m2len, NULL, c, CLEN,
+                                                   NULL, 0U, nonce, firstkey) != 0) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() failed (adlen=0)\n");
+    }
+    if (m2len != MLEN) {
+        printf("m2len is not properly set (adlen=0)\n");
+    }
+    if (memcmp(m, c, MLEN) != 0) {
+        printf("m != c (adlen=0)\n");
+    }
+
+    crypto_aead_xchacha20poly1305_ietf_keygen(key2);
+    if (crypto_aead_xchacha20poly1305_ietf_decrypt(c, &m2len, NULL, c, CLEN,
+                                                   NULL, 0U, nonce, key2) == 0) {
+        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() with a wrong key should have failed\n");
+    }
+
+    sodium_free(c);
+    sodium_free(detached_c);
+    sodium_free(key2);
+    sodium_free(mac);
+    sodium_free(m2);
+    sodium_free(m);
+
+    assert(crypto_aead_xchacha20poly1305_ietf_abytes() == crypto_aead_xchacha20poly1305_ietf_ABYTES);
+    assert(crypto_aead_xchacha20poly1305_ietf_keybytes() == crypto_aead_xchacha20poly1305_ietf_KEYBYTES);
+    assert(crypto_aead_xchacha20poly1305_ietf_npubbytes() == crypto_aead_xchacha20poly1305_ietf_NPUBBYTES);
+    assert(crypto_aead_xchacha20poly1305_ietf_nsecbytes() == 0U);
+    assert(crypto_aead_xchacha20poly1305_ietf_nsecbytes() == crypto_aead_xchacha20poly1305_ietf_NSECBYTES);
+    assert(crypto_aead_xchacha20poly1305_ietf_messagebytes_max() == crypto_aead_xchacha20poly1305_ietf_MESSAGEBYTES_MAX);
+    assert(crypto_aead_xchacha20poly1305_IETF_KEYBYTES  == crypto_aead_xchacha20poly1305_ietf_KEYBYTES);
+    assert(crypto_aead_xchacha20poly1305_IETF_NSECBYTES == crypto_aead_xchacha20poly1305_ietf_NSECBYTES);
+    assert(crypto_aead_xchacha20poly1305_IETF_NPUBBYTES == crypto_aead_xchacha20poly1305_ietf_NPUBBYTES);
+    assert(crypto_aead_xchacha20poly1305_IETF_ABYTES    == crypto_aead_xchacha20poly1305_ietf_ABYTES);
+    assert(crypto_aead_xchacha20poly1305_IETF_MESSAGEBYTES_MAX == crypto_aead_xchacha20poly1305_ietf_MESSAGEBYTES_MAX);
+
+    return 0;
+}
+
+int
+main(void)
+{
+    tv();
+
+    return 0;
+}

package/ios/libsodium-stable/test/default/aead_xchacha20poly1305.exp

@@ -0,0 +1,51 @@
+,0xf8,0xeb,0xea,0x48,0x75,0x04,0x40,0x66
+,0xfc,0x16,0x2a,0x06,0x04,0xe1,0x71,0xfe
+,0xec,0xfb,0x3d,0x20,0x42,0x52,0x48,0x56
+,0x3b,0xcf,0xd5,0xa1,0x55,0xdc,0xc4,0x7b
+,0xbd,0xa7,0x0b,0x86,0xe5,0xab,0x9b,0x55
+,0x00,0x2b,0xd1,0x27,0x4c,0x02,0xdb,0x35
+,0x32,0x1a,0xcd,0x7a,0xf8,0xb2,0xe2,0xd2
+,0x50,0x15,0xe1,0x36,0xb7,0x67,0x94,0x58
+,0xe9,0xf4,0x32,0x43,0xbf,0x71,0x9d,0x63
+,0x9b,0xad,0xb5,0xfe,0xac,0x03,0xf8,0x0a
+,0x19,0xa9,0x6e,0xf1,0x0c,0xb1,0xd1,0x53
+,0x33,0xa8,0x37,0xb9,0x09,0x46,0xba,0x38
+,0x54,0xee,0x74,0xda,0x3f,0x25,0x85,0xef
+,0xc7,0xe1,0xe1,0x70,0xe1,0x7e,0x15,0xe5
+,0x63,0xe7,0x76,0x01,0xf4,0xf8,0x5c,0xaf
+,0xa8,0xe5,0x87,0x76,0x14,0xe1,0x43,0xe6
+,0x84,0x20
+,0xf8,0xeb,0xea,0x48,0x75,0x04,0x40,0x66
+,0xfc,0x16,0x2a,0x06,0x04,0xe1,0x71,0xfe
+,0xec,0xfb,0x3d,0x20,0x42,0x52,0x48,0x56
+,0x3b,0xcf,0xd5,0xa1,0x55,0xdc,0xc4,0x7b
+,0xbd,0xa7,0x0b,0x86,0xe5,0xab,0x9b,0x55
+,0x00,0x2b,0xd1,0x27,0x4c,0x02,0xdb,0x35
+,0x32,0x1a,0xcd,0x7a,0xf8,0xb2,0xe2,0xd2
+,0x50,0x15,0xe1,0x36,0xb7,0x67,0x94,0x58
+,0xe9,0xf4,0x32,0x43,0xbf,0x71,0x9d,0x63
+,0x9b,0xad,0xb5,0xfe,0xac,0x03,0xf8,0x0a
+,0x19,0xa9,0x6e,0xf1,0x0c,0xb1,0xd1,0x53
+,0x33,0xa8,0x37,0xb9,0x09,0x46,0xba,0x38
+,0x54,0xee,0x74,0xda,0x3f,0x25,0x85,0xef
+,0xc7,0xe1,0xe1,0x70,0xe1,0x7e,0x15,0xe5
+,0x63,0xe7,0xe0,0x96,0xe0,0x33,0xd9,0x1b
+,0x63,0xf7,0xac,0x92,0xe9,0x97,0x2e,0x0d
+,0x43,0xe5
+,0xf8,0xeb,0xea,0x48,0x75,0x04,0x40,0x66
+,0xfc,0x16,0x2a,0x06,0x04,0xe1,0x71,0xfe
+,0xec,0xfb,0x3d,0x20,0x42,0x52,0x48,0x56
+,0x3b,0xcf,0xd5,0xa1,0x55,0xdc,0xc4,0x7b
+,0xbd,0xa7,0x0b,0x86,0xe5,0xab,0x9b,0x55
+,0x00,0x2b,0xd1,0x27,0x4c,0x02,0xdb,0x35
+,0x32,0x1a,0xcd,0x7a,0xf8,0xb2,0xe2,0xd2
+,0x50,0x15,0xe1,0x36,0xb7,0x67,0x94,0x58
+,0xe9,0xf4,0x32,0x43,0xbf,0x71,0x9d,0x63
+,0x9b,0xad,0xb5,0xfe,0xac,0x03,0xf8,0x0a
+,0x19,0xa9,0x6e,0xf1,0x0c,0xb1,0xd1,0x53
+,0x33,0xa8,0x37,0xb9,0x09,0x46,0xba,0x38
+,0x54,0xee,0x74,0xda,0x3f,0x25,0x85,0xef
+,0xc7,0xe1,0xe1,0x70,0xe1,0x7e,0x15,0xe5
+,0x63,0xe7,0xe0,0x96,0xe0,0x33,0xd9,0x1b
+,0x63,0xf7,0xac,0x92,0xe9,0x97,0x2e,0x0d
+,0x43,0xe5

package/ios/libsodium-stable/test/default/auth.c

@@ -0,0 +1,141 @@
+
+#define TEST_NAME "auth"
+#include "cmptest.h"
+
+/* "Test Case 2" from RFC 4231 */
+static unsigned char key[32] = "Jefe";
+static unsigned char c[]     = "what do ya want for nothing?";
+
+/* Hacker manifesto */
+static unsigned char key2[] =
+    "Another one got caught today, it's all over the papers. \"Teenager "
+    "Arrested in Computer Crime Scandal\", \"Hacker Arrested after Bank "
+    "Tampering\"... Damn kids. They're all alike.";
+
+static unsigned char a[crypto_auth_BYTES];
+static unsigned char a2[crypto_auth_hmacsha512_BYTES];
+static unsigned char a3[crypto_auth_hmacsha512_BYTES];
+
+int
+main(void)
+{
+    crypto_auth_hmacsha512_state st;
+    crypto_auth_hmacsha256_state st256;
+    crypto_auth_hmacsha512256_state st512_256;
+    size_t                       i;
+
+    assert(crypto_auth_hmacsha512_statebytes() ==
+           sizeof(crypto_auth_hmacsha512_state));
+    crypto_auth(a, c, sizeof c - 1U, key);
+    for (i = 0; i < sizeof a; ++i) {
+        printf(",0x%02x", (unsigned int) a[i]);
+        if (i % 8 == 7)
+            printf("\n");
+    }
+    printf("\n");
+
+    crypto_auth_hmacsha512_init(&st, key, sizeof key);
+    crypto_auth_hmacsha512_update(&st, c, 1U);
+    crypto_auth_hmacsha512_update(&st, c, sizeof c - 2U);
+    crypto_auth_hmacsha512_final(&st, a2);
+    for (i = 0; i < sizeof a2; ++i) {
+        printf(",0x%02x", (unsigned int) a2[i]);
+        if (i % 8 == 7)
+            printf("\n");
+    }
+    printf("\n");
+
+    crypto_auth_hmacsha512_init(&st, key2, sizeof key2);
+    crypto_auth_hmacsha512_update(&st, c, 1U);
+    crypto_auth_hmacsha512_update(&st, c, sizeof c - 2U);
+    crypto_auth_hmacsha512_final(&st, a2);
+    for (i = 0; i < sizeof a2; ++i) {
+        printf(",0x%02x", (unsigned int) a2[i]);
+        if (i % 8 == 7)
+            printf("\n");
+    }
+
+    memset(a2, 0, sizeof a2);
+    crypto_auth_hmacsha256_init(&st256, key2, sizeof key2);
+    crypto_auth_hmacsha256_update(&st256, guard_page, 0U);
+    crypto_auth_hmacsha256_update(&st256, c, 1U);
+    crypto_auth_hmacsha256_update(&st256, c, sizeof c - 2U);
+    crypto_auth_hmacsha256_final(&st256, a2);
+    for (i = 0; i < sizeof a2; ++i) {
+        printf(",0x%02x", (unsigned int) a2[i]);
+        if (i % 8 == 7)
+            printf("\n");
+    }
+
+    /* Empty message tests: HMAC-SHA512 */
+    memset(a2, 0, sizeof a2);
+    crypto_auth_hmacsha512_init(&st, key, sizeof key);
+    crypto_auth_hmacsha512_final(&st, a2);
+
+    memset(a3, 0, sizeof a3);
+    crypto_auth_hmacsha512_init(&st, key, sizeof key);
+    crypto_auth_hmacsha512_update(&st, a2, 0U);
+    crypto_auth_hmacsha512_final(&st, a3);
+    assert(sodium_memcmp(a2, a3, sizeof a2) == 0);
+
+    memset(a3, 0, sizeof a3);
+    crypto_auth_hmacsha512_init(&st, key, sizeof key);
+    crypto_auth_hmacsha512_update(&st, guard_page, 0U);
+    crypto_auth_hmacsha512_final(&st, a3);
+    assert(sodium_memcmp(a2, a3, sizeof a2) == 0);
+
+    /* Empty message tests: HMAC-SHA512-256 */
+    memset(a2, 0, sizeof a2);
+    crypto_auth_hmacsha512256_init(&st512_256, key, sizeof key);
+    crypto_auth_hmacsha512256_final(&st512_256, a2);
+
+    memset(a3, 0, sizeof a3);
+    crypto_auth_hmacsha512256_init(&st512_256, key, sizeof key);
+    crypto_auth_hmacsha512256_update(&st512_256, a2, 0U);
+    crypto_auth_hmacsha512256_final(&st512_256, a3);
+    assert(sodium_memcmp(a2, a3, sizeof a2) == 0);
+
+    memset(a3, 0, sizeof a3);
+    crypto_auth_hmacsha512256_init(&st512_256, key, sizeof key);
+    crypto_auth_hmacsha512256_update(&st512_256, guard_page, 0U);
+    crypto_auth_hmacsha512256_final(&st512_256, a3);
+    assert(sodium_memcmp(a2, a3, sizeof a2) == 0);
+
+    /* Empty message tests: HMAC-SHA256 */
+
+    memset(a2, 0, sizeof a2);
+    crypto_auth_hmacsha256_init(&st256, key, sizeof key);
+    crypto_auth_hmacsha256_final(&st256, a2);
+
+    memset(a3, 0, sizeof a3);
+    crypto_auth_hmacsha256_init(&st256, key, sizeof key);
+    crypto_auth_hmacsha256_update(&st256, a2, 0U);
+    crypto_auth_hmacsha256_final(&st256, a3);
+    assert(sodium_memcmp(a2, a3, sizeof a2) == 0);
+
+    memset(a3, 0, sizeof a3);
+    crypto_auth_hmacsha256_init(&st256, key, sizeof key);
+    crypto_auth_hmacsha256_update(&st256, guard_page, 0U);
+    crypto_auth_hmacsha256_final(&st256, a3);
+    assert(sodium_memcmp(a2, a3, sizeof a2) == 0);
+
+    /* --- */
+
+    assert(crypto_auth_bytes() > 0U);
+    assert(crypto_auth_keybytes() > 0U);
+    assert(strcmp(crypto_auth_primitive(), "hmacsha512256") == 0);
+    assert(crypto_auth_hmacsha256_bytes() > 0U);
+    assert(crypto_auth_hmacsha256_keybytes() > 0U);
+    assert(crypto_auth_hmacsha512_bytes() > 0U);
+    assert(crypto_auth_hmacsha512_keybytes() > 0U);
+    assert(crypto_auth_hmacsha512256_bytes() == crypto_auth_bytes());
+    assert(crypto_auth_hmacsha512256_keybytes() == crypto_auth_keybytes());
+    assert(crypto_auth_hmacsha512256_statebytes() >=
+           crypto_auth_hmacsha512256_keybytes());
+    assert(crypto_auth_hmacsha256_statebytes() ==
+           sizeof(crypto_auth_hmacsha256_state));
+    assert(crypto_auth_hmacsha512_statebytes() ==
+           sizeof(crypto_auth_hmacsha512_state));
+
+    return 0;
+}

package/ios/libsodium-stable/test/default/auth.exp

@@ -0,0 +1,30 @@
+,0x16,0x4b,0x7a,0x7b,0xfc,0xf8,0x19,0xe2
+,0xe3,0x95,0xfb,0xe7,0x3b,0x56,0xe0,0xa3
+,0x87,0xbd,0x64,0x22,0x2e,0x83,0x1f,0xd6
+,0x10,0x27,0x0c,0xd7,0xea,0x25,0x05,0x54
+
+,0x7b,0x9d,0x83,0x38,0xeb,0x1e,0x3d,0xdd
+,0xba,0x8a,0x9a,0x35,0x08,0xd0,0x34,0xa1
+,0xec,0xbe,0x75,0x11,0x37,0xfa,0x1b,0xcb
+,0xa0,0xf9,0x2a,0x3e,0x6d,0xfc,0x79,0x80
+,0xb8,0x81,0xa8,0x64,0x5f,0x92,0x67,0x22
+,0x74,0x37,0x96,0x4b,0xf3,0x07,0x0b,0xe2
+,0xb3,0x36,0xb3,0xa3,0x20,0xf8,0x25,0xce
+,0xc9,0x87,0x2d,0xb2,0x50,0x4b,0xf3,0x6d
+
+,0x73,0xe0,0x0d,0xcb,0xf4,0xf8,0xa3,0x33
+,0x30,0xac,0x52,0xed,0x2c,0xc9,0xd1,0xb2
+,0xef,0xb1,0x77,0x13,0xd3,0xec,0xe3,0x96
+,0x14,0x9f,0x37,0x65,0x3c,0xfe,0x70,0xe7
+,0x1f,0x2c,0x6f,0x9a,0x62,0xc3,0xc5,0x3a
+,0x31,0x8a,0x9a,0x0b,0x3b,0x78,0x60,0xa4
+,0x31,0x6f,0x72,0x9b,0x8d,0x30,0x0f,0x15
+,0x9b,0x2f,0x60,0x93,0xa8,0x60,0xc1,0xed
+,0x62,0x27,0xe4,0xce,0x7c,0x7f,0xe7,0xa4
+,0xba,0x9e,0x2a,0xc3,0x42,0xc3,0x5d,0x24
+,0x03,0x3e,0x38,0x8c,0x9b,0xdc,0x29,0x9b
+,0x4a,0x50,0x50,0xf6,0x71,0x70,0xf4,0x83
+,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
+,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
+,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
+,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00

package/ios/libsodium-stable/test/default/auth2.c

@@ -0,0 +1,34 @@
+/* "Test Case AUTH256-4" from RFC 4868 */
+
+#define TEST_NAME "auth2"
+#include "cmptest.h"
+
+static unsigned char key[32] = {
+    0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b,
+    0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16,
+    0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20
+};
+
+static unsigned char c[50] = { 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd };
+
+static unsigned char a[32];
+
+int
+main(void)
+{
+    int i;
+
+    crypto_auth_hmacsha256(a, c, sizeof c, key);
+    for (i = 0; i < 32; ++i) {
+        printf(",0x%02x", (unsigned int) a[i]);
+        if (i % 8 == 7)
+            printf("\n");
+    }
+    return 0;
+}

package/ios/libsodium-stable/test/default/auth2.exp

@@ -0,0 +1,4 @@
+,0x37,0x2e,0xfc,0xf9,0xb4,0x0b,0x35,0xc2
+,0x11,0x5b,0x13,0x46,0x90,0x3d,0x2e,0xf4
+,0x2f,0xce,0xd4,0x6f,0x08,0x46,0xe7,0x25
+,0x7b,0xb1,0x56,0xd3,0xd7,0xb3,0x0d,0x3f

package/ios/libsodium-stable/test/default/auth3.c

@@ -0,0 +1,36 @@
+/* "Test Case AUTH256-4" from RFC 4868 */
+
+#define TEST_NAME "auth3"
+#include "cmptest.h"
+
+static unsigned char key[32] = {
+    0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b,
+    0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16,
+    0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20
+};
+
+static unsigned char c[50] = { 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd,
+                               0xcd, 0xcd };
+
+static unsigned char a[32] = { 0x37, 0x2e, 0xfc, 0xf9, 0xb4, 0x0b, 0x35, 0xc2,
+                               0x11, 0x5b, 0x13, 0x46, 0x90, 0x3d, 0x2e, 0xf4,
+                               0x2f, 0xce, 0xd4, 0x6f, 0x08, 0x46, 0xe7, 0x25,
+                               0x7b, 0xb1, 0x56, 0xd3, 0xd7, 0xb3, 0x0d, 0x3f };
+
+int
+main(void)
+{
+    static unsigned char a2[crypto_auth_hmacsha256_BYTES];
+
+    printf("%d\n", crypto_auth_hmacsha256_verify(a, c, sizeof c, key));
+
+    crypto_auth_hmacsha256(a2, guard_page, 0U, key);
+    assert(crypto_auth_hmacsha256_verify(a2, guard_page, 0U, key) == 0);
+
+    return 0;
+}

package/ios/libsodium-stable/test/default/auth3.exp

@@ -0,0 +1 @@
+0

package/ios/libsodium-stable/test/default/auth5.c

@@ -0,0 +1,41 @@
+
+#define TEST_NAME "auth5"
+#include "cmptest.h"
+
+static unsigned char key[32];
+static unsigned char c[1000];
+static unsigned char a[32];
+
+int
+main(void)
+{
+    size_t clen;
+
+    for (clen = 0; clen < 1000; ++clen) {
+        crypto_auth_keygen(key);
+        randombytes_buf(c, clen);
+        crypto_auth(a, c, clen, key);
+        if (crypto_auth_verify(a, c, clen, key) != 0) {
+            printf("fail %u\n", (unsigned int) clen);
+            return 100;
+        }
+        if (clen > 0) {
+            c[rand() % clen] += 1 + (rand() % 255);
+            if (crypto_auth_verify(a, c, clen, key) == 0) {
+                printf("forgery %u\n", (unsigned int) clen);
+                return 100;
+            }
+            a[rand() % sizeof a] += 1 + (rand() % 255);
+            if (crypto_auth_verify(a, c, clen, key) == 0) {
+                printf("forgery %u\n", (unsigned int) clen);
+                return 100;
+            }
+        }
+    }
+
+    crypto_auth_keygen(key);
+    crypto_auth(a, guard_page, 0U, key);
+    assert(crypto_auth_verify(a, guard_page, 0U, key) == 0);
+
+    return 0;
+}

package/ios/libsodium-stable/test/default/auth6.c

@@ -0,0 +1,23 @@
+
+#define TEST_NAME "auth6"
+#include "cmptest.h"
+
+/* "Test Case 2" from RFC 4231 */
+static unsigned char key[32] = "Jefe";
+static unsigned char c[]     = "what do ya want for nothing?";
+
+static unsigned char a[64];
+
+int
+main(void)
+{
+    int i;
+
+    crypto_auth_hmacsha512(a, c, sizeof c - 1U, key);
+    for (i = 0; i < 64; ++i) {
+        printf(",0x%02x", (unsigned int) a[i]);
+        if (i % 8 == 7)
+            printf("\n");
+    }
+    return 0;
+}

package/ios/libsodium-stable/test/default/auth6.exp

@@ -0,0 +1,8 @@
+,0x16,0x4b,0x7a,0x7b,0xfc,0xf8,0x19,0xe2
+,0xe3,0x95,0xfb,0xe7,0x3b,0x56,0xe0,0xa3
+,0x87,0xbd,0x64,0x22,0x2e,0x83,0x1f,0xd6
+,0x10,0x27,0x0c,0xd7,0xea,0x25,0x05,0x54
+,0x97,0x58,0xbf,0x75,0xc0,0x5a,0x99,0x4a
+,0x6d,0x03,0x4f,0x65,0xf8,0xf0,0xe6,0xfd
+,0xca,0xea,0xb1,0xa3,0x4d,0x4a,0x6b,0x4b
+,0x63,0x6e,0x07,0x0a,0x38,0xbc,0xe7,0x37

package/ios/libsodium-stable/test/default/auth7.c

@@ -0,0 +1,41 @@
+
+#define TEST_NAME "auth7"
+#include "cmptest.h"
+
+static unsigned char key[32];
+static unsigned char c[600];
+static unsigned char a[64];
+
+int
+main(void)
+{
+    size_t clen;
+
+    for (clen = 0; clen < sizeof c; ++clen) {
+        crypto_auth_keygen(key);
+        randombytes_buf(c, clen);
+        crypto_auth_hmacsha512(a, c, clen, key);
+        if (crypto_auth_hmacsha512_verify(a, c, clen, key) != 0) {
+            printf("fail %u\n", (unsigned int) clen);
+            return 100;
+        }
+        if (clen > 0) {
+            c[(size_t) rand() % clen] += 1 + (rand() % 255);
+            if (crypto_auth_hmacsha512_verify(a, c, clen, key) == 0) {
+                printf("forgery %u\n", (unsigned int) clen);
+                return 100;
+            }
+            a[rand() % sizeof a] += 1 + (rand() % 255);
+            if (crypto_auth_hmacsha512_verify(a, c, clen, key) == 0) {
+                printf("forgery %u\n", (unsigned int) clen);
+                return 100;
+            }
+        }
+    }
+
+    crypto_auth_keygen(key);
+    crypto_auth_hmacsha512(a, guard_page, 0U, key);
+    assert(crypto_auth_hmacsha512_verify(a, guard_page, 0U, key) == 0);
+
+    return 0;
+}