pbkdf2 test case, forgotten in earlier commit.

diff --git a/testsuite/pbkdf2-test.c b/testsuite/pbkdf2-test.c
new file mode 100644 (file)
index 0000000..0ac8ba3
--- /dev/null
+++ b/testsuite/pbkdf2-test.c
@@ -0,0 +1,73 @@
+#include "testutils.h"
+#include "hmac.h"
+#include "sha.h"
+#include "pbkdf2.h"
+
+#define PBKDF2_TEST(ctx, size, update, digest, slen, s, c, expect)     \
+  do {                                                                 \
+    dk[expect->length] = 17;                                           \
+    PBKDF2 (ctx, size, update, digest, expect->length, dk, c, slen, s);        \
+    ASSERT(MEMEQ (expect->length, dk, expect->data));                  \
+    ASSERT(dk[expect->length] == 17);                                  \
+  } while (0)
+
+#define MAX_DKLEN 25
+
+void
+test_main (void)
+{
+  uint8_t dk[MAX_DKLEN + 1];
+  struct hmac_sha1_ctx sha1ctx;
+  struct hmac_sha256_ctx sha256ctx;
+
+  /* Test vectors for PBKDF2 from RFC 6070. */
+
+  hmac_sha1_set_key (&sha1ctx, 8, "password");
+
+  PBKDF2_TEST(&sha1ctx, SHA1_DIGEST_SIZE, hmac_sha1_update, hmac_sha1_digest,
+             4, "salt", 1,
+             SHEX("0c60c80f961f0e71f3a9b524af6012062fe037a6"));
+
+  PBKDF2_TEST (&sha1ctx, SHA1_DIGEST_SIZE, hmac_sha1_update, hmac_sha1_digest,
+              4, "salt", 2,
+              SHEX("ea6c014dc72d6f8ccd1ed92ace1d41f0d8de8957"));
+
+  PBKDF2_TEST (&sha1ctx, SHA1_DIGEST_SIZE, hmac_sha1_update, hmac_sha1_digest,
+              4, "salt", 4096,
+              SHEX("4b007901b765489abead49d926f721d065a429c1"));
+
+#if 0                          /* too slow */
+  PBKDF2_TEST (&sha1ctx, SHA1_DIGEST_SIZE, hmac_sha1_update, hmac_sha1_digest,
+              4, "salt", 16777216,
+              SHEX("eefe3d61cd4da4e4e9945b3d6ba2158c2634e984"));
+#endif
+
+  hmac_sha1_set_key (&sha1ctx, 24, "passwordPASSWORDpassword");
+
+  PBKDF2_TEST (&sha1ctx, SHA1_DIGEST_SIZE, hmac_sha1_update, hmac_sha1_digest,
+              36, "saltSALTsaltSALTsaltSALTsaltSALTsalt", 4096,
+              SHEX("3d2eec4fe41c849b80c8d83662c0e44a8b291a964cf2f07038"));
+
+  hmac_sha1_set_key (&sha1ctx, 9, "pass\0word");
+
+  PBKDF2_TEST (&sha1ctx, SHA1_DIGEST_SIZE, hmac_sha1_update, hmac_sha1_digest,
+              5, "sa\0lt", 4096,
+              SHEX("56fa6aa75548099dcc37d7f03425e0c3"));
+
+  /* PBKDF2-HMAC-SHA-256 test vectors confirmed with another
+     implementation.  */
+
+  hmac_sha256_set_key (&sha256ctx, 6, "passwd");
+
+  PBKDF2_TEST (&sha256ctx, SHA256_DIGEST_SIZE,
+              hmac_sha256_update, hmac_sha256_digest,
+              4, "salt", 1,
+              SHEX("55ac046e56e3089fec1691c22544b605"));
+
+  hmac_sha256_set_key (&sha256ctx, 8, "Password");
+
+  PBKDF2_TEST (&sha256ctx, SHA256_DIGEST_SIZE,
+              hmac_sha256_update, hmac_sha256_digest,
+              4, "NaCl", 80000,
+              SHEX("4ddcd8f60b98be21830cee5ef22701f9"));
+}