From: Nick Mathewson <nickm@torproject.org>
Date: Sat, 19 Apr 2025 13:46:31 +0000 (-0400)
Subject: Integrate polyval into our build system and give a test
X-Git-Tag: tor-0.4.9.3-alpha~49^2~9
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=568004d863978acfeb2880deca980ec5f96547c5;p=thirdparty%2Ftor.git

Integrate polyval into our build system and give a test
---

diff --git a/Makefile.am b/Makefile.am
index ed43ec72fc..4d09056aa6 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -112,7 +112,8 @@ TOR_CRYPTO_LIBS = \
 	src/lib/libtor-tls.a \
 	src/lib/libtor-crypt-ops.a \
 	$(LIBKECCAK_TINY) \
-	$(LIBDONNA)
+	$(LIBDONNA) \
+        $(LIBPOLYVAL)
 
 if BUILD_MODULE_POW
 TOR_CRYPTO_LIBS += $(EQUIX_LIBS)
@@ -126,6 +127,7 @@ TOR_CRYPTO_TESTING_LIBS = \
 	src/lib/libtor-crypt-ops-testing.a \
 	$(LIBKECCAK_TINY) \
 	$(LIBDONNA) \
+        $(LIBPOLYVAL) \
 	$(EQUIX_LIBS)
 endif
 
diff --git a/src/ext/include.am b/src/ext/include.am
index dad6a592b7..c8dfffcb62 100644
--- a/src/ext/include.am
+++ b/src/ext/include.am
@@ -216,6 +216,21 @@ LIBKECCAK_TINY=src/ext/keccak-tiny/libkeccak-tiny.a
 noinst_LIBRARIES += $(LIBKECCAK_TINY)
 endif
 
+src_ext_polyval_libpolyval_a_CFLAGS=\
+  @CFLAGS_CONSTTIME@
+src_ext_polyval_libpolyval_a_SOURCES= \
+   src/ext/polyval/polyval.c
+
+POLYVAL_HDRS = \
+   src/ext/polyval/polyval.h \
+   src/ext/polyval/pclmul.c \
+   src/ext/polyval/ctmul64.c \
+   src/ext/polyval/ctmul.c
+
+noinst_HEADERS += $(POLYVAL_HDRS)
+LIBPOLYVAL=src/ext/polyval/libpolyval.a
+noinst_LIBRARIES += $(LIBPOLYVAL)
+
 EXTRA_DIST += \
 	src/ext/timeouts/bench/bench-add.lua 		\
 	src/ext/timeouts/bench/bench-aux.lua		\
diff --git a/src/test/test_crypto.c b/src/test/test_crypto.c
index a421f6533e..592ef7a77c 100644
--- a/src/test/test_crypto.c
+++ b/src/test/test_crypto.c
@@ -21,6 +21,7 @@
 #include "lib/crypt_ops/crypto_init.h"
 #include "ed25519_vectors.inc"
 #include "test/log_test_helpers.h"
+#include "ext/polyval/polyval.h"
 
 #ifdef HAVE_SYS_STAT_H
 #include <sys/stat.h>
@@ -3188,6 +3189,55 @@ test_crypto_failure_modes(void *arg)
   ;
 }
 
+static void
+test_crypto_polyval(void *arg)
+{
+  (void)arg;
+  polyval_t pv;
+  uint8_t key[16];
+  uint8_t input[48];
+  uint8_t output[16];
+  uint8_t output2[16];
+  char *mem_op_hex_tmp=NULL;
+
+  // From RFC 8452
+  const char *key_hex = "25629347589242761d31f826ba4b757b";
+  const char *input_hex =
+    "4f4f95668c83dfb6401762bb2d01a262"
+    "d1a24ddd2721d006bbe45f20d3c9f362";
+  memset(input, 0, sizeof(input));
+  base16_decode((char*)key,sizeof(key), key_hex, strlen(key_hex));
+  base16_decode((char*)input,sizeof(input), input_hex, strlen(input_hex));
+
+  // Two blocks, directly.
+  polyval_init(&pv, key);
+  polyval_add_block(&pv, input);
+  polyval_add_block(&pv, input+16);
+  polyval_get_tag(&pv, output);
+  test_memeq_hex(output, "f7a3b47b846119fae5b7866cf5e5b77e");
+  // Two blocks, as a string.
+  polyval_reset(&pv);
+  polyval_add_zpad(&pv, input, 32);
+  polyval_get_tag(&pv, output);
+  test_memeq_hex(output, "f7a3b47b846119fae5b7866cf5e5b77e");
+
+  // Now make sure that zero-padding works.
+  input[32] = 77;
+  polyval_reset(&pv);
+  polyval_add_block(&pv, input);
+  polyval_add_block(&pv, input+16);
+  polyval_add_block(&pv, input+32);
+  polyval_get_tag(&pv, output);
+
+  polyval_reset(&pv);
+  polyval_add_zpad(&pv, input, 33);
+  polyval_get_tag(&pv, output2);
+  tt_mem_op(output, OP_EQ, output2, 16);
+
+ done:
+  tor_free(mem_op_hex_tmp);
+}
+
 #ifndef COCCI
 #define CRYPTO_LEGACY(name)                                            \
   { #name, test_crypto_ ## name , 0, NULL, NULL }
@@ -3255,5 +3305,6 @@ struct testcase_t crypto_tests[] = {
   { "blake2b", test_crypto_blake2b, 0, NULL, NULL },
   { "hashx", test_crypto_hashx, 0, NULL, NULL },
   { "failure_modes", test_crypto_failure_modes, TT_FORK, NULL, NULL },
+  { "polyval", test_crypto_polyval, 0, NULL, NULL },
   END_OF_TESTCASES
 };