upstream: github.com/robur-coop/kdf
test(crypto): expand test suites for pbkdf, spake2, srp
+38
-1
+38
-1
pbkdf/test/test_pbkdf.ml
+38
-1
pbkdf/test/test_pbkdf.ml
···
180
180
("Test Case 17", `Quick, pbkdf2_test17);
181
181
]
182
182
183
-
let suite = ("pbkdf", pbkdf1_tests @ pbkdf2_tests)
183
+
(* RFC 6070 test vectors for PBKDF2-HMAC-SHA1
184
+
https://www.rfc-editor.org/rfc/rfc6070 *)
185
+
186
+
let rfc6070_test1 =
187
+
test_pbkdf2 ~prf:`SHA1 ~password:"password" ~salt:"73616c74" (* "salt" *)
188
+
~count:1 ~dk_len:20l ~dk:"0c60c80f961f0e71f3a9b524af6012062fe037a6"
189
+
190
+
let rfc6070_test2 =
191
+
test_pbkdf2 ~prf:`SHA1 ~password:"password" ~salt:"73616c74" (* "salt" *)
192
+
~count:2 ~dk_len:20l ~dk:"ea6c014dc72d6f8ccd1ed92ace1d41f0d8de8957"
193
+
194
+
let rfc6070_test3 =
195
+
test_pbkdf2 ~prf:`SHA1 ~password:"password" ~salt:"73616c74" (* "salt" *)
196
+
~count:4096 ~dk_len:20l ~dk:"4b007901b765489abead49d926f721d065a429c1"
197
+
198
+
let rfc6070_test4 =
199
+
test_pbkdf2 ~prf:`SHA1 ~password:"passwordPASSWORDpassword"
200
+
~salt:
201
+
"73616c7453414c5473616c7453414c5473616c7453414c5473616c7453414c5473616c74"
202
+
(* "saltSALTsaltSALTsaltSALTsaltSALTsalt" *)
203
+
~count:4096 ~dk_len:25l
204
+
~dk:"3d2eec4fe41c849b80c8d83662c0e44a8b291a964cf2f07038"
205
+
206
+
let rfc6070_test5 =
207
+
test_pbkdf2 ~prf:`SHA1 ~password:"pass\x00word"
208
+
~salt:"7361006c74" (* "sa\x00lt" *) ~count:4096 ~dk_len:16l
209
+
~dk:"56fa6aa75548099dcc37d7f03425e0c3"
210
+
211
+
let rfc6070_tests =
212
+
[
213
+
("RFC 6070 #1 (c=1)", `Quick, rfc6070_test1);
214
+
("RFC 6070 #2 (c=2)", `Quick, rfc6070_test2);
215
+
("RFC 6070 #3 (c=4096)", `Quick, rfc6070_test3);
216
+
("RFC 6070 #4 (long P,S)", `Quick, rfc6070_test4);
217
+
("RFC 6070 #5 (null bytes)", `Quick, rfc6070_test5);
218
+
]
219
+
220
+
let suite = ("pbkdf", pbkdf1_tests @ pbkdf2_tests @ rfc6070_tests)