test_sha3_224.cpp

#include "sha3_224.hpp"
#include "test_conf.hpp"
#include <algorithm>
#include <fstream>
#include <gtest/gtest.h>
#include <vector>

// Eval SHA3-224 hash on statically defined input message during
// compilation-time.
constexpr std::array<uint8_t, sha3_224::DIGEST_LEN>
eval_sha3_224()
{
  // Statically defined input.
  std::array<uint8_t, sha3_224::DIGEST_LEN * 2> data{};
  std::iota(data.begin(), data.end(), 0);

  // To be computed output.
  std::array<uint8_t, sha3_224::DIGEST_LEN> md{};

  sha3_224::sha3_224_t hasher;
  hasher.absorb(data);
  hasher.finalize();
  hasher.digest(md);

  return md;
}

// Ensure that SHA3-224 implementation is compile-time evaluable.
TEST(Sha3Hashing, CompileTimeEvalSha3_224)
{
  // Input  =
  // 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f3031323334353637
  // Output = fc95d44e806cbbd484e379882238f555fda923878c443abe4ce4cdd6

  constexpr auto md = eval_sha3_224();
  static_assert(md ==
                  std::array<uint8_t, sha3_224::DIGEST_LEN>{
                    252, 149, 212, 78,  128, 108, 187, 212, 132, 227,
                    121, 136, 34,  56,  245, 85,  253, 169, 35,  135,
                    140, 68,  58,  190, 76,  228, 205, 214 },
                "Must be able to compute Sha3-224 hash during compile-time !");
}

// Test that absorbing same input message bytes using both incremental and
// one-shot hashing, should yield same output bytes, for SHA3-224 hasher.
TEST(Sha3Hashing, Sha3_224IncrementalAbsorption)
{
  for (size_t mlen = MIN_MSG_LEN; mlen < MAX_MSG_LEN; mlen++) {
    std::vector<uint8_t> msg(mlen);
    std::vector<uint8_t> out0(sha3_224::DIGEST_LEN);
    std::vector<uint8_t> out1(sha3_224::DIGEST_LEN);

    auto _msg = std::span(msg);
    auto _out0 = std::span<uint8_t, sha3_224::DIGEST_LEN>(out0);
    auto _out1 = std::span<uint8_t, sha3_224::DIGEST_LEN>(out1);

    sha3_utils::random_data(_msg);

    sha3_224::sha3_224_t hasher;

    // Oneshot Hashing
    hasher.absorb(_msg);
    hasher.finalize();
    hasher.digest(_out0);

    hasher.reset();

    // Incremental Hashing
    size_t off = 0;
    while (off < mlen) {
      // because we don't want to be stuck in an infinite loop if msg[off] = 0 !
      auto elen = std::min<size_t>(std::max<uint8_t>(msg[off], 1), mlen - off);

      hasher.absorb(_msg.subspan(off, elen));
      off += elen;
    }

    hasher.finalize();
    hasher.digest(_out1);

    EXPECT_EQ(out0, out1);
  }
}

// Ensure that SHA3-224 implementation is conformant with FIPS 202 standard, by
// using KAT file generated following
// https://gist.github.com/itzmeanjan/448f97f9c49d781a5eb3ddd6ea6e7364.
TEST(Sha3Hashing, Sha3_224KnownAnswerTests)
{
  using namespace std::literals;

  const std::string kat_file = "./kats/sha3_224.kat";
  std::fstream file(kat_file);

  while (true) {
    std::string len0;

    if (!std::getline(file, len0).eof()) {
      std::string msg0;
      std::string md0;

      std::getline(file, msg0);
      std::getline(file, md0);

      auto msg1 = std::string_view(msg0);
      auto md1 = std::string_view(md0);

      auto msg2 = msg1.substr(msg1.find("="sv) + 2, msg1.size());
      auto md2 = md1.substr(md1.find("="sv) + 2, md1.size());

      auto msg = sha3_utils::from_hex(msg2);
      auto md = sha3_utils::from_hex(md2);

      std::vector<uint8_t> digest(sha3_224::DIGEST_LEN);
      auto _digest = std::span<uint8_t, sha3_224::DIGEST_LEN>(digest);

      sha3_224::sha3_224_t hasher;

      hasher.absorb(msg);
      hasher.finalize();
      hasher.digest(_digest);

      EXPECT_EQ(digest, md);

      std::string empty_line;
      std::getline(file, empty_line);
    } else {
      break;
    }
  }

  file.close();
}