Gecko [ www.finalhopeacademy.com ]

Name	Size	Permission
AUTHORS	4.78 KB	-rw-r--r--
ChangeLog	27.5 KB	-rw-r--r--
README.markdown	2.04 KB	-rw-r--r--
THANKS	2.24 KB	-rw-r--r--
aead_aes256gcm.c	145.83 KB	-rw-r--r--
aead_aes256gcm.exp	3 B	-rw-r--r--
aead_aes256gcm2.c	13.62 KB	-rw-r--r--
aead_aes256gcm2.exp	3 B	-rw-r--r--
aead_chacha20poly1305.c	14.77 KB	-rw-r--r--
aead_chacha20poly1305.exp	2.35 KB	-rw-r--r--
aead_chacha20poly13052.c	63.87 KB	-rw-r--r--
aead_chacha20poly13052.exp	3 B	-rw-r--r--
aead_xchacha20poly1305.c	8.4 KB	-rw-r--r--
aead_xchacha20poly1305.exp	1.95 KB	-rw-r--r--
auth.c	4.96 KB	-rw-r--r--
auth.exp	1.12 KB	-rw-r--r--
auth2.c	1.08 KB	-rw-r--r--
auth2.exp	164 B	-rw-r--r--
auth3.c	1.43 KB	-rw-r--r--
auth3.exp	2 B	-rw-r--r--
auth5.c	1.06 KB	-rw-r--r--
auth5.exp	0 B	-rw-r--r--
auth6.c	449 B	-rw-r--r--
auth6.exp	328 B	-rw-r--r--
auth7.c	1.14 KB	-rw-r--r--
auth7.exp	0 B	-rw-r--r--
box.c	4.42 KB	-rw-r--r--
box.exp	1.47 KB	-rw-r--r--
box2.c	3.31 KB	-rw-r--r--
box2.exp	1.31 KB	-rw-r--r--
box7.c	1.53 KB	-rw-r--r--
box7.exp	0 B	-rw-r--r--
box8.c	1.7 KB	-rw-r--r--
box8.exp	0 B	-rw-r--r--
box_easy.c	2.84 KB	-rw-r--r--
box_easy.exp	908 B	-rw-r--r--
box_easy2.c	5.42 KB	-rw-r--r--
box_easy2.exp	15 B	-rw-r--r--
box_seal.c	2.85 KB	-rw-r--r--
box_seal.exp	22 B	-rw-r--r--
box_seed.c	839 B	-rw-r--r--
box_seed.exp	328 B	-rw-r--r--
chacha20.c	7.63 KB	-rw-r--r--
chacha20.exp	20.19 KB	-rw-r--r--
cmptest.h	4.6 KB	-rw-r--r--
codecs.c	11.94 KB	-rw-r--r--
codecs.exp	417 B	-rw-r--r--
core1.c	1.18 KB	-rw-r--r--
core1.exp	164 B	-rw-r--r--
core2.c	1.19 KB	-rw-r--r--
core2.exp	164 B	-rw-r--r--
core3.c	3.19 KB	-rw-r--r--
core3.exp	195 B	-rw-r--r--
core4.c	981 B	-rw-r--r--
core4.exp	264 B	-rw-r--r--
core5.c	908 B	-rw-r--r--
core5.exp	164 B	-rw-r--r--
core6.c	1.31 KB	-rw-r--r--
core6.exp	164 B	-rw-r--r--
core_ed25519.c	16.35 KB	-rw-r--r--
core_ed25519.exp	1.18 KB	-rw-r--r--
core_ristretto255.c	11.36 KB	-rw-r--r--
core_ristretto255.exp	458 B	-rw-r--r--
ed25519_convert.c	3.18 KB	-rw-r--r--
ed25519_convert.exp	167 B	-rw-r--r--
generichash.c	144.46 KB	-rw-r--r--
generichash.exp	4.25 KB	-rw-r--r--
generichash2.c	2.41 KB	-rw-r--r--
generichash2.exp	4.13 KB	-rw-r--r--
generichash3.c	7.19 KB	-rw-r--r--
generichash3.exp	5.51 KB	-rw-r--r--
hash.c	1.47 KB	-rw-r--r--
hash.exp	388 B	-rw-r--r--
hash2.exp	129 B	-rw-r--r--
hash3.c	335 B	-rw-r--r--
hash3.exp	129 B	-rw-r--r--
kdf.c	2.31 KB	-rw-r--r--
kdf.exp	5.97 KB	-rw-r--r--
keygen.c	2.62 KB	-rw-r--r--
keygen.exp	14 B	-rw-r--r--
kx.c	6.21 KB	-rw-r--r--
kx.exp	478 B	-rw-r--r--
metamorphic.c	5.48 KB	-rw-r--r--
metamorphic.exp	3 B	-rw-r--r--
misuse.c	4.37 KB	-rw-r--r--
misuse.exp	0 B	-rw-r--r--
onetimeauth.c	2.32 KB	-rw-r--r--
onetimeauth.exp	164 B	-rw-r--r--
onetimeauth2.c	1.38 KB	-rw-r--r--
onetimeauth2.exp	2 B	-rw-r--r--
onetimeauth7.c	948 B	-rw-r--r--
onetimeauth7.exp	0 B	-rw-r--r--
pwhash_argon2i.c	21.74 KB	-rw-r--r--
pwhash_argon2i.exp	3.03 KB	-rw-r--r--
pwhash_argon2id.c	25.31 KB	-rw-r--r--
pwhash_argon2id.exp	3.61 KB	-rw-r--r--
pwhash_scrypt.c	18.18 KB	-rw-r--r--
pwhash_scrypt.exp	4.5 KB	-rw-r--r--
pwhash_scrypt_ll.c	1.68 KB	-rw-r--r--
pwhash_scrypt_ll.exp	714 B	-rw-r--r--
quirks.h	488 B	-rw-r--r--
randombytes.c	3.87 KB	-rw-r--r--
randombytes.exp	220 B	-rw-r--r--
scalarmult.c	2.42 KB	-rw-r--r--
scalarmult.exp	260 B	-rw-r--r--
scalarmult2.c	794 B	-rw-r--r--
scalarmult2.exp	164 B	-rw-r--r--
scalarmult5.c	1.18 KB	-rw-r--r--
scalarmult5.exp	164 B	-rw-r--r--
scalarmult6.c	1.51 KB	-rw-r--r--
scalarmult6.exp	164 B	-rw-r--r--
scalarmult7.c	909 B	-rw-r--r--
scalarmult7.exp	2 B	-rw-r--r--
scalarmult8.c	24.37 KB	-rw-r--r--
scalarmult8.exp	2.16 KB	-rw-r--r--
scalarmult_ed25519.c	4.92 KB	-rw-r--r--
scalarmult_ed25519.exp	3 B	-rw-r--r--
scalarmult_ristretto255.c	1.87 KB	-rw-r--r--
scalarmult_ristretto255.exp	1.06 KB	-rw-r--r--
secretbox.c	3.5 KB	-rw-r--r--
secretbox.exp	1.47 KB	-rw-r--r--
secretbox2.c	2.37 KB	-rw-r--r--
secretbox2.exp	672 B	-rw-r--r--
secretbox7.c	1.05 KB	-rw-r--r--
secretbox7.exp	0 B	-rw-r--r--
secretbox8.c	1.2 KB	-rw-r--r--
secretbox8.exp	0 B	-rw-r--r--
secretbox_easy.c	4.44 KB	-rw-r--r--
secretbox_easy.exp	4.02 KB	-rw-r--r--
secretbox_easy2.c	2.54 KB	-rw-r--r--
secretbox_easy2.exp	10 B	-rw-r--r--
secretstream.c	11.43 KB	-rw-r--r--
secretstream.exp	3 B	-rw-r--r--
shorthash.c	968 B	-rw-r--r--
shorthash.exp	1.06 KB	-rw-r--r--
sign.c	2.65 MB	-rw-r--r--
sign.exp	512 B	-rw-r--r--
siphashx24.c	1.02 KB	-rw-r--r--
siphashx24.exp	2.06 KB	-rw-r--r--
sodium_core.c	936 B	-rw-r--r--
sodium_core.exp	17 B	-rw-r--r--
sodium_utils.c	8.22 KB	-rw-r--r--
sodium_utils.exp	756 B	-rw-r--r--
sodium_utils2.c	2.27 KB	-rw-r--r--
sodium_utils2.exp	46 B	-rw-r--r--
sodium_utils3.c	1.41 KB	-rw-r--r--
sodium_utils3.exp	43 B	-rw-r--r--
sodium_version.c	387 B	-rw-r--r--
sodium_version.exp	6 B	-rw-r--r--
stream.c	2.71 KB	-rw-r--r--
stream.exp	42.58 KB	-rw-r--r--
stream2.c	1.58 KB	-rw-r--r--
stream2.exp	130 B	-rw-r--r--
stream3.c	979 B	-rw-r--r--
stream3.exp	164 B	-rw-r--r--
stream4.c	2.02 KB	-rw-r--r--
stream4.exp	672 B	-rw-r--r--
verify1.c	2.05 KB	-rw-r--r--
verify1.exp	6 B	-rw-r--r--
xchacha20.c	25.49 KB	-rw-r--r--
xchacha20.exp	482 B	-rw-r--r--

Code Editor : aead_xchacha20poly1305.c

#define TEST_NAME "aead_xchacha20poly1305"
#include "cmptest.h"

static int
tv(void)
{
#undef  MLEN
#define MLEN 114U
#undef  ADLEN
#define ADLEN 12U
#undef  CLEN
#define CLEN (MLEN + crypto_aead_xchacha20poly1305_ietf_ABYTES)
    static const unsigned char firstkey[crypto_aead_xchacha20poly1305_ietf_KEYBYTES]
        = {
            0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
            0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
            0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
            0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f
        };
#undef  MESSAGE
#define MESSAGE "Ladies and Gentlemen of the class of '99: If I could offer you " \
    "only one tip for the future, sunscreen would be it."
    unsigned char *m = (unsigned char *) sodium_malloc(MLEN);
    static const unsigned char nonce[crypto_aead_xchacha20poly1305_ietf_NPUBBYTES]
        = { 0x07, 0x00, 0x00, 0x00, 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
            0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50, 0x51, 0x52, 0x53 };
    static const unsigned char ad[ADLEN]
        = { 0x50, 0x51, 0x52, 0x53, 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7 };
    unsigned char *c = (unsigned char *) sodium_malloc(CLEN);
    unsigned char *detached_c = (unsigned char *) sodium_malloc(MLEN);
    unsigned char *key2 = (unsigned char *) sodium_malloc(crypto_aead_xchacha20poly1305_ietf_KEYBYTES);
    unsigned char *mac = (unsigned char *) sodium_malloc(crypto_aead_xchacha20poly1305_ietf_ABYTES);
    unsigned char *m2 = (unsigned char *) sodium_malloc(MLEN);
    unsigned long long found_clen;
    unsigned long long found_maclen;
    unsigned long long m2len;
    size_t i;

assert(sizeof MESSAGE - 1U == MLEN);
    memcpy(m, MESSAGE, MLEN);
    crypto_aead_xchacha20poly1305_ietf_encrypt(c, &found_clen, m, MLEN,
                                               ad, ADLEN,
                                               NULL, nonce, firstkey);
    if (found_clen != MLEN + crypto_aead_xchacha20poly1305_ietf_abytes()) {
        printf("found_clen is not properly set\n");
    }
    for (i = 0U; i < CLEN; ++i) {
        printf(",0x%02x", (unsigned int) c[i]);
        if (i % 8 == 7) {
            printf("\n");
        }
    }
    printf("\n");
    crypto_aead_xchacha20poly1305_ietf_encrypt_detached(detached_c,
                                                        mac, &found_maclen,
                                                        m, MLEN,
                                                        ad, ADLEN,
                                                        NULL, nonce, firstkey);
    if (found_maclen != crypto_aead_xchacha20poly1305_ietf_abytes()) {
        printf("found_maclen is not properly set\n");
    }
    if (memcmp(detached_c, c, MLEN) != 0) {
        printf("detached ciphertext is bogus\n");
    }

if (crypto_aead_xchacha20poly1305_ietf_decrypt(NULL, 0, NULL, c, CLEN, ad,
                                                   ADLEN, nonce, firstkey) != 0) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() tag-only verification failed\n");
    }
    if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, &m2len, NULL, c, CLEN, ad,
                                                   ADLEN, nonce, firstkey) != 0) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() failed\n");
    }
    if (m2len != MLEN) {
        printf("m2len is not properly set\n");
    }
    if (memcmp(m, m2, MLEN) != 0) {
        printf("m != m2\n");
    }
    memset(m2, 0, m2len);
    if (crypto_aead_xchacha20poly1305_ietf_decrypt_detached(m2, NULL,
                                                            c, MLEN, mac,
                                                            ad, ADLEN,
                                                            nonce, firstkey) != 0) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt_detached() failed\n");
    }
    if (memcmp(m, m2, MLEN) != 0) {
        printf("detached m != m2\n");
    }

for (i = 0U; i < CLEN; i++) {
        c[i] ^= (i + 1U);
        if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, NULL, NULL, c, CLEN,
                                                       ad, ADLEN, nonce, firstkey)
            == 0 || memcmp(m, m2, MLEN) == 0) {
            printf("message can be forged\n");
        }
        c[i] ^= (i + 1U);
    }
    crypto_aead_xchacha20poly1305_ietf_encrypt(c, &found_clen, m, MLEN,
                                               NULL, 0U, NULL, nonce, firstkey);
    if (found_clen != CLEN) {
        printf("clen is not properly set (adlen=0)\n");
    }
    for (i = 0U; i < CLEN; ++i) {
        printf(",0x%02x", (unsigned int) c[i]);
        if (i % 8 == 7) {
            printf("\n");
        }
    }
    printf("\n");
    if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, &m2len, NULL, c, CLEN,
                                                   NULL, 0U, nonce, firstkey) != 0) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() failed (adlen=0)\n");
    }
    if (m2len != MLEN) {
        printf("m2len is not properly set (adlen=0)\n");
    }
    if (memcmp(m, m2, MLEN) != 0) {
        printf("m != m2 (adlen=0)\n");
    }
    m2len = 1;
    if (crypto_aead_xchacha20poly1305_ietf_decrypt(
            m2, &m2len, NULL, guard_page,
            randombytes_uniform(crypto_aead_xchacha20poly1305_ietf_ABYTES),
            NULL, 0U, nonce, firstkey) != -1) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() worked with a short "
               "ciphertext\n");
    }
    if (m2len != 0) {
        printf("Message length should have been set to zero after a failure\n");
    }
    m2len = 1;
    if (crypto_aead_xchacha20poly1305_ietf_decrypt(m2, &m2len, NULL, c, 0U, NULL, 0U,
                                                  nonce, firstkey) != -1) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() worked with an empty "
               "ciphertext\n");
    }
    if (m2len != 0) {
        printf("Message length should have been set to zero after a failure\n");
    }

memcpy(c, m, MLEN);
    crypto_aead_xchacha20poly1305_ietf_encrypt(c, &found_clen, c, MLEN,
                                               NULL, 0U, NULL, nonce, firstkey);
    if (found_clen != CLEN) {
        printf("clen is not properly set (adlen=0)\n");
    }
    for (i = 0U; i < CLEN; ++i) {
        printf(",0x%02x", (unsigned int) c[i]);
        if (i % 8 == 7) {
            printf("\n");
        }
    }
    printf("\n");

if (crypto_aead_xchacha20poly1305_ietf_decrypt(c, &m2len, NULL, c, CLEN,
                                                   NULL, 0U, nonce, firstkey) != 0) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() failed (adlen=0)\n");
    }
    if (m2len != MLEN) {
        printf("m2len is not properly set (adlen=0)\n");
    }
    if (memcmp(m, c, MLEN) != 0) {
        printf("m != c (adlen=0)\n");
    }

crypto_aead_xchacha20poly1305_ietf_keygen(key2);
    if (crypto_aead_xchacha20poly1305_ietf_decrypt(c, &m2len, NULL, c, CLEN,
                                                   NULL, 0U, nonce, key2) == 0) {
        printf("crypto_aead_xchacha20poly1305_ietf_decrypt() with a wrong key should have failed\n");
    }

sodium_free(c);
    sodium_free(detached_c);
    sodium_free(key2);
    sodium_free(mac);
    sodium_free(m2);
    sodium_free(m);

assert(crypto_aead_xchacha20poly1305_ietf_abytes() == crypto_aead_xchacha20poly1305_ietf_ABYTES);
    assert(crypto_aead_xchacha20poly1305_ietf_keybytes() == crypto_aead_xchacha20poly1305_ietf_KEYBYTES);
    assert(crypto_aead_xchacha20poly1305_ietf_npubbytes() == crypto_aead_xchacha20poly1305_ietf_NPUBBYTES);
    assert(crypto_aead_xchacha20poly1305_ietf_nsecbytes() == 0U);
    assert(crypto_aead_xchacha20poly1305_ietf_nsecbytes() == crypto_aead_xchacha20poly1305_ietf_NSECBYTES);
    assert(crypto_aead_xchacha20poly1305_ietf_messagebytes_max() == crypto_aead_xchacha20poly1305_ietf_MESSAGEBYTES_MAX);
    assert(crypto_aead_xchacha20poly1305_IETF_KEYBYTES  == crypto_aead_xchacha20poly1305_ietf_KEYBYTES);
    assert(crypto_aead_xchacha20poly1305_IETF_NSECBYTES == crypto_aead_xchacha20poly1305_ietf_NSECBYTES);
    assert(crypto_aead_xchacha20poly1305_IETF_NPUBBYTES == crypto_aead_xchacha20poly1305_ietf_NPUBBYTES);
    assert(crypto_aead_xchacha20poly1305_IETF_ABYTES    == crypto_aead_xchacha20poly1305_ietf_ABYTES);
    assert(crypto_aead_xchacha20poly1305_IETF_MESSAGEBYTES_MAX == crypto_aead_xchacha20poly1305_ietf_MESSAGEBYTES_MAX);

return 0;
}

int
main(void)
{
    tv();

return 0;
}

${this.title}

Code Editor : aead_xchacha20poly1305.c