-- Copyright (c) 2015  Phil Leblanc  -- see LICENSE file
------------------------------------------------------------

local bin = require "plc.bin"  -- used for hex conversions


-- test poly1305.lua

local poly = require "plc.poly1305"

local test_poly_auth = function ()
	-- "nacl" test vector
	local naclkey = string.char(
		0xee,0xa6,0xa7,0x25,0x1c,0x1e,0x72,0x91,
		0x6d,0x11,0xc2,0xcb,0x21,0x4d,0x3c,0x25,
		0x25,0x39,0x12,0x1d,0x8e,0x23,0x4e,0x65,
		0x2d,0x65,0x1f,0xa4,0xc8,0xcf,0xf8,0x80
		)
	local naclmsg = string.char(
		0x8e,0x99,0x3b,0x9f,0x48,0x68,0x12,0x73,
		0xc2,0x96,0x50,0xba,0x32,0xfc,0x76,0xce,
		0x48,0x33,0x2e,0xa7,0x16,0x4d,0x96,0xa4,
		0x47,0x6f,0xb8,0xc5,0x31,0xa1,0x18,0x6a,
		0xc0,0xdf,0xc1,0x7c,0x98,0xdc,0xe8,0x7b,
		0x4d,0xa7,0xf0,0x11,0xec,0x48,0xc9,0x72,
		0x71,0xd2,0xc2,0x0f,0x9b,0x92,0x8f,0xe2,
		0x27,0x0d,0x6f,0xb8,0x63,0xd5,0x17,0x38,
		0xb4,0x8e,0xee,0xe3,0x14,0xa7,0xcc,0x8a,
		0xb9,0x32,0x16,0x45,0x48,0xe5,0x26,0xae,
		0x90,0x22,0x43,0x68,0x51,0x7a,0xcf,0xea,
		0xbd,0x6b,0xb3,0x73,0x2b,0xc0,0xe9,0xda,
		0x99,0x83,0x2b,0x61,0xca,0x01,0xb6,0xde,
		0x56,0x24,0x4a,0x9e,0x88,0xd5,0xf9,0xb3,
		0x79,0x73,0xf6,0x22,0xa4,0x3d,0x14,0xa6,
		0x59,0x9b,0x1f,0x65,0x4c,0xb4,0x5a,0x74,
		0xe3,0x55,0xa5
		)
	local naclmac = string.char(
		0xf3,0xff,0xc7,0x70,0x3f,0x94,0x00,0xe5,
		0x2a,0x7d,0xfb,0x4b,0x3d,0x33,0x05,0xd9
		)
	local mac = poly.auth(naclmsg, naclkey)
	assert (mac == naclmac)

	-- "wrap" test vector
	-- generates a final value of (2^130 - 2) == 3
	local wrapkey = string.char(
		0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
		0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
		0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
		0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
		)
	local wrapmsg = string.char(
		0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,
		0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff
		)
	local wrapmac = string.char(
		0x03,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
		0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
		)
	mac = poly.auth(wrapmsg, wrapkey)
	assert (mac == wrapmac)

	-- rfc 7539 test vector
	local rfcmsg = "Cryptographic Forum Research Group"
	local rfckey = bin.hextos(
		"85d6be7857556d337f4452fe42d506a80103808afb0db2fd4abff6af4149f51b")
	local rfcmac = bin.hextos("a8061dc1305136c6c22b8baf0c0127a9")
	mac = poly.auth(rfcmsg, rfckey)
	assert (mac == rfcmac)
end

test_poly_auth()

print("test_poly1305: ok")
