Commit 7246fe6c authored by Eric Biggers's avatar Eric Biggers
Browse files

lib/crypto: tests: Add KUnit tests for NH 

Add some simple KUnit tests for the nh() function.

These replace the test coverage which will be lost by removing the
nhpoly1305 crypto_shash.

Note that the NH code also continues to be tested indirectly as well,
via the tests for the "adiantum(xchacha12,aes)" crypto_skcipher.

Link: https://lore.kernel.org/r/20251211011846.8179-3-ebiggers@kernel.org


Signed-off-by: default avatarEric Biggers <ebiggers@kernel.org>
parent 14e15c71

lib/crypto/tests/Kconfig

+8 −0
Original line number Diff line number Diff line
@@ -47,6 +47,14 @@ config CRYPTO_LIB_MLDSA_KUNIT_TEST 
	help

	  KUnit tests for the ML-DSA digital signature algorithm.



config CRYPTO_LIB_NH_KUNIT_TEST

	tristate "KUnit tests for NH" if !KUNIT_ALL_TESTS

	depends on KUNIT

	default KUNIT_ALL_TESTS || CRYPTO_SELFTESTS

	select CRYPTO_LIB_NH

	help

	  KUnit tests for the NH almost-universal hash function.



config CRYPTO_LIB_POLY1305_KUNIT_TEST

	tristate "KUnit tests for Poly1305" if !KUNIT_ALL_TESTS

	depends on KUNIT

lib/crypto/tests/Makefile

+1 −0
Original line number Diff line number Diff line
@@ -5,6 +5,7 @@ obj-$(CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST) += blake2s_kunit.o 
obj-$(CONFIG_CRYPTO_LIB_CURVE25519_KUNIT_TEST) += curve25519_kunit.o

obj-$(CONFIG_CRYPTO_LIB_MD5_KUNIT_TEST) += md5_kunit.o

obj-$(CONFIG_CRYPTO_LIB_MLDSA_KUNIT_TEST) += mldsa_kunit.o

obj-$(CONFIG_CRYPTO_LIB_NH_KUNIT_TEST) += nh_kunit.o

obj-$(CONFIG_CRYPTO_LIB_POLY1305_KUNIT_TEST) += poly1305_kunit.o

obj-$(CONFIG_CRYPTO_LIB_POLYVAL_KUNIT_TEST) += polyval_kunit.o

obj-$(CONFIG_CRYPTO_LIB_SHA1_KUNIT_TEST) += sha1_kunit.o

lib/crypto/tests/nh-testvecs.h

0 → 100644
+298 −0
Original line number Diff line number Diff line 
/* SPDX-License-Identifier: GPL-2.0-or-later */

/* This file was generated by: ./scripts/crypto/gen-hash-testvecs.py nh */



static const u8 nh_test_key[NH_KEY_BYTES] = {

	0x04, 0x59, 0x66, 0x92, 0x81, 0xd7, 0xe9, 0x25,

	0x68, 0xfa, 0xb0, 0xca, 0x9f, 0xea, 0x98, 0xca,

	0xcd, 0xbf, 0x6d, 0xa5, 0x0c, 0x22, 0xc3, 0x57,

	0xdc, 0x35, 0x05, 0xdd, 0x5b, 0xb0, 0xce, 0xf6,

	0xb2, 0x4c, 0x77, 0x2e, 0xd2, 0x63, 0xf0, 0x17,

	0x60, 0xd8, 0xd3, 0xd9, 0xed, 0x34, 0xb6, 0xed,

	0x6a, 0x11, 0xc0, 0x25, 0xda, 0xba, 0x7e, 0xef,

	0x49, 0x13, 0xf7, 0xd9, 0xfc, 0xb6, 0xfd, 0x58,

	0xe9, 0x5f, 0xc5, 0xc4, 0x69, 0x89, 0xba, 0xa6,

	0x2b, 0x58, 0x8d, 0x36, 0x6c, 0xb9, 0x90, 0x1e,

	0x64, 0xc7, 0x44, 0x84, 0x03, 0x70, 0x30, 0x47,

	0xdd, 0x58, 0xf4, 0x87, 0x61, 0xfd, 0x9c, 0x6b,

	0x51, 0x1b, 0x39, 0x1d, 0x6d, 0x50, 0xae, 0x19,

	0x71, 0x03, 0xc7, 0xa7, 0x42, 0x82, 0x8f, 0xa5,

	0x63, 0x6a, 0xe2, 0x8a, 0xad, 0x4b, 0x40, 0xa7,

	0x3f, 0x8b, 0xe4, 0xae, 0xb2, 0x8a, 0x14, 0x78,

	0x91, 0x07, 0xba, 0x02, 0x08, 0xc1, 0x34, 0xb8,

	0xda, 0x61, 0x67, 0xf6, 0x98, 0x97, 0x1a, 0xcb,

	0x0f, 0x82, 0x80, 0xff, 0x02, 0x54, 0x16, 0x57,

	0x18, 0x35, 0xaf, 0x16, 0x17, 0x68, 0xcc, 0xc7,

	0x52, 0xac, 0x31, 0x39, 0x60, 0xe4, 0xb4, 0xcb,

	0x0e, 0xf9, 0x57, 0xe9, 0x96, 0xff, 0x99, 0xd6,

	0x10, 0x96, 0x09, 0xab, 0x28, 0x92, 0x1b, 0x9f,

	0x10, 0xde, 0x3e, 0x87, 0xb8, 0x9d, 0x2d, 0xa0,

	0x3c, 0x91, 0x85, 0x8c, 0x9e, 0xc0, 0x97, 0x9a,

	0xb4, 0x54, 0x7f, 0x4a, 0x63, 0xc2, 0x75, 0x0f,

	0x0d, 0x2f, 0x62, 0x56, 0x48, 0x0e, 0xb6, 0xc7,

	0xcf, 0x0d, 0x78, 0xca, 0xbd, 0x31, 0x9e, 0x4c,

	0xf7, 0x3f, 0x9e, 0xc2, 0xea, 0x5e, 0x44, 0x6d,

	0x76, 0xf9, 0xc5, 0xe0, 0x29, 0xea, 0x15, 0xbf,

	0xaf, 0xd4, 0x75, 0xc8, 0x89, 0xcf, 0x4f, 0x17,

	0xfd, 0x4a, 0x45, 0xa5, 0x4d, 0x2d, 0x87, 0x11,

	0x2b, 0x3e, 0x64, 0xa2, 0x6b, 0xc5, 0x23, 0x8c,

	0xfa, 0x71, 0x13, 0x72, 0x0e, 0x7c, 0xe1, 0x2c,

	0x9f, 0x0e, 0x29, 0xc9, 0x15, 0xde, 0x4e, 0xd7,

	0x42, 0x1f, 0x8e, 0xe1, 0x91, 0x99, 0x50, 0x38,

	0x7f, 0x15, 0xc0, 0xf6, 0x4b, 0xfd, 0x9d, 0x40,

	0xe9, 0x44, 0x51, 0xca, 0x3b, 0x83, 0x41, 0x9f,

	0x82, 0x64, 0x66, 0x22, 0x12, 0x43, 0x1c, 0x4f,

	0x45, 0x11, 0x3a, 0x46, 0xb1, 0x7c, 0x62, 0x0a,

	0x9d, 0x4c, 0x99, 0x85, 0xb0, 0x10, 0x19, 0xcf,

	0xeb, 0xf9, 0x65, 0xaf, 0xd8, 0x05, 0x9e, 0x61,

	0x03, 0x5f, 0x15, 0x99, 0xa9, 0x05, 0x20, 0xc8,

	0xaf, 0xab, 0x31, 0x9d, 0xd5, 0xdf, 0x24, 0xce,

	0x2b, 0x6d, 0xd7, 0x17, 0xc3, 0x04, 0xff, 0x82,

	0xa7, 0x18, 0x39, 0xe9, 0x0d, 0x0a, 0x5f, 0xb9,

	0xc9, 0x86, 0x1d, 0xf8, 0x02, 0x2d, 0xc3, 0x88,

	0x28, 0x73, 0x5c, 0xac, 0x25, 0xc9, 0xfe, 0xcb,

	0xd2, 0xfd, 0x63, 0x74, 0xac, 0xe1, 0xb8, 0xa2,

	0xc6, 0x2b, 0xb5, 0x40, 0x01, 0x9b, 0xed, 0xee,

	0x7b, 0x63, 0x66, 0x05, 0x45, 0xc2, 0x6c, 0xd8,

	0x58, 0xf1, 0xa1, 0x3d, 0xc8, 0x43, 0x59, 0x4b,

	0x39, 0x87, 0x24, 0x64, 0x92, 0xb0, 0xab, 0x75,

	0xf1, 0xb7, 0xbf, 0x7c, 0xde, 0xc0, 0xaf, 0x4a,

	0xc2, 0x7b, 0xd9, 0x8a, 0x99, 0xcd, 0x83, 0x01,

	0xe6, 0xae, 0xeb, 0x16, 0xe7, 0x54, 0x9c, 0x95,

	0x0a, 0x91, 0x02, 0xaf, 0x9f, 0x79, 0x40, 0x45,

	0xce, 0x47, 0x41, 0x65, 0xca, 0x80, 0x0d, 0x14,

	0x46, 0x58, 0x5d, 0x4d, 0x28, 0x55, 0x70, 0x49,

	0x7c, 0x32, 0x1f, 0x01, 0xaa, 0x05, 0x2f, 0xf1,

	0xeb, 0xa3, 0xe6, 0x1d, 0xf9, 0x43, 0xe0, 0x58,

	0x05, 0x61, 0x22, 0xc3, 0xee, 0xe4, 0x6f, 0x94,

	0xaf, 0x82, 0xda, 0x18, 0x18, 0x63, 0x9c, 0xfa,

	0xc0, 0x04, 0x27, 0xc5, 0x39, 0x5e, 0x7a, 0xa6,

	0x85, 0x46, 0xb7, 0x76, 0xc9, 0x16, 0xf2, 0xf8,

	0x40, 0x8d, 0x4b, 0x5e, 0x72, 0xf3, 0x3e, 0x12,

	0xa4, 0x80, 0x39, 0xb2, 0x92, 0xfe, 0x6e, 0x5b,

	0x5b, 0xad, 0xea, 0x29, 0xbc, 0x66, 0xe6, 0xfe,

	0x80, 0x02, 0x5d, 0x83, 0x37, 0xfc, 0xde, 0x6c,

	0x25, 0x54, 0xa2, 0xff, 0x7d, 0xb6, 0xe1, 0xd6,

	0xcf, 0xdb, 0x60, 0xe3, 0xbe, 0x2f, 0x4e, 0xb4,

	0xf5, 0xb4, 0x51, 0xf7, 0x5a, 0x25, 0xda, 0x40,

	0x84, 0x5e, 0xc0, 0x0a, 0x6b, 0xfa, 0x0c, 0xfb,

	0x5e, 0x3e, 0x12, 0x6c, 0x39, 0x35, 0xc0, 0x28,

	0xd6, 0x1b, 0x3a, 0x72, 0xc3, 0xfe, 0xa5, 0x4c,

	0x35, 0xa2, 0x42, 0xf6, 0x3d, 0xa5, 0xbf, 0xb5,

	0x39, 0xe3, 0xc9, 0xd5, 0x8c, 0x1b, 0xe5, 0xef,

	0x91, 0xd2, 0x80, 0x6f, 0xcc, 0x77, 0x44, 0x50,

	0x62, 0xc7, 0xac, 0x29, 0xcb, 0x72, 0xda, 0x6d,

	0xc5, 0xfe, 0xa7, 0xee, 0x8b, 0xeb, 0xfc, 0xa3,

	0x46, 0x18, 0x5f, 0xaa, 0xc3, 0x65, 0xd0, 0x8f,

	0x67, 0x98, 0xd6, 0xce, 0x5f, 0x84, 0xd4, 0x96,

	0x1b, 0x67, 0xa0, 0xcf, 0xfc, 0x94, 0x55, 0x5e,

	0x4b, 0x51, 0x68, 0xa7, 0x6d, 0x02, 0xf9, 0x53,

	0x54, 0x86, 0x6b, 0x53, 0x39, 0xe0, 0x36, 0x23,

	0x87, 0x1a, 0xfb, 0x53, 0x1a, 0x65, 0xd8, 0x42,

	0xa8, 0x85, 0xfd, 0x2c, 0x7f, 0x6b, 0x7f, 0x67,

	0x70, 0x23, 0x6c, 0xe9, 0x0b, 0xf0, 0x1e, 0x0d,

	0x0b, 0xb4, 0xd4, 0x96, 0x14, 0x95, 0x7e, 0xf3,

	0x9b, 0xdd, 0xd7, 0xc4, 0x24, 0x22, 0xb9, 0x9d,

	0xb3, 0xa6, 0xac, 0x09, 0x7c, 0x00, 0xbf, 0xd0,

	0xdc, 0xfb, 0x9b, 0x7c, 0x8c, 0xbd, 0xd4, 0x1a,

	0x13, 0x2b, 0x82, 0x3d, 0x7c, 0x8c, 0x10, 0x47,

	0x49, 0x6c, 0x53, 0xeb, 0xa7, 0xc2, 0xde, 0xed,

	0xe2, 0x55, 0x93, 0x2c, 0x1a, 0x5a, 0x7d, 0xe1,

	0x37, 0x62, 0xdd, 0x29, 0x1a, 0x72, 0x82, 0xc0,

	0x14, 0x73, 0x5d, 0x0e, 0x9b, 0xcc, 0x54, 0x68,

	0x3a, 0x4d, 0x56, 0x8f, 0xc9, 0x4e, 0xaf, 0x7b,

	0xde, 0x17, 0x9c, 0x5e, 0x83, 0x82, 0x22, 0xe3,

	0x28, 0xdf, 0x1b, 0xb6, 0xdb, 0x17, 0x90, 0x48,

	0xb5, 0x13, 0x4e, 0xd3, 0x97, 0x5e, 0xb3, 0x9c,

	0x16, 0x08, 0xc8, 0x77, 0xb3, 0xcd, 0x94, 0x90,

	0x4f, 0x77, 0xaf, 0x67, 0xdd, 0x80, 0x15, 0x1c,

	0x59, 0xfb, 0x3c, 0xec, 0xf8, 0xb3, 0x67, 0xfb,

	0xa0, 0x94, 0x3c, 0x53, 0x99, 0x49, 0x94, 0x2c,

	0x85, 0x26, 0x92, 0x6d, 0x8d, 0x48, 0xf6, 0x72,

	0xdd, 0xfb, 0xb2, 0x10, 0x51, 0x5b, 0xbe, 0xd5,

	0x70, 0x3d, 0x28, 0x94, 0x98, 0x4f, 0x6e, 0x20,

	0x7b, 0x7d, 0x0f, 0x56, 0xc9, 0x96, 0x5f, 0x60,

	0x2e, 0x2f, 0x9b, 0x38, 0x7f, 0xc7, 0x3c, 0x6b,

	0x2f, 0x2b, 0x8f, 0x1f, 0x07, 0x1c, 0x85, 0x57,

	0x16, 0x2e, 0xc7, 0x74, 0xe5, 0xf2, 0x0d, 0xfe,

	0xef, 0x57, 0xb0, 0xa4, 0x4f, 0x4c, 0x7d, 0x81,

	0xbb, 0xaa, 0xcb, 0xa0, 0xb0, 0x51, 0xcf, 0xc2,

	0xee, 0x90, 0x2e, 0x5e, 0x27, 0xca, 0xd3, 0xe8,

	0xf3, 0x55, 0x02, 0x56, 0x06, 0xa5, 0xad, 0xdf,

	0xa3, 0xa9, 0x06, 0x05, 0x53, 0x74, 0x55, 0xd5,

	0xd2, 0x20, 0x0a, 0x6d, 0x4a, 0xef, 0x16, 0xbf,

	0xc3, 0xb2, 0x75, 0x93, 0xd8, 0x6e, 0x0f, 0xd2,

	0xae, 0x3b, 0xc0, 0x00, 0x22, 0x6f, 0xb5, 0x0a,

	0x41, 0xfc, 0xf9, 0x41, 0xfc, 0x16, 0x4f, 0xa6,

	0x1c, 0x18, 0x41, 0x67, 0x73, 0xa8, 0x79, 0xa9,

	0x54, 0x18, 0x4e, 0x88, 0x44, 0x0f, 0xa1, 0x5b,

	0xf0, 0x68, 0xea, 0x3c, 0x62, 0x59, 0x8d, 0xc7,

	0x6f, 0xd7, 0x72, 0x20, 0x74, 0x39, 0xd4, 0x3a,

	0x41, 0x1b, 0x58, 0x57, 0x54, 0x85, 0x60, 0xca,

	0x49, 0x4b, 0xa1, 0x04, 0x91, 0xb6, 0xf2, 0xcd,

	0x62, 0x63, 0x67, 0xd1, 0xee, 0x6b, 0x9e, 0x5d,

	0xd6, 0xc4, 0x58, 0x6b, 0xe1, 0xe6, 0x4a, 0xdb,

	0xe8, 0xb1, 0x35, 0x03, 0x15, 0x8d, 0x34, 0x69,

	0x4c, 0xd2, 0x54, 0xce, 0xe8, 0x6a, 0x69, 0x6f,

	0xaa, 0xb5, 0x1f, 0x86, 0xed, 0xac, 0x4f, 0x16,

	0x1e, 0x48, 0x93, 0xe8, 0x6c, 0x24, 0x1c, 0xd0,

	0xbb, 0x61, 0xc2, 0x34, 0xdd, 0xc9, 0x5c, 0xce,

};



static const u8 nh_test_msg[NH_MESSAGE_BYTES] = {

	0x99, 0x57, 0x61, 0x41, 0xad, 0x08, 0x7e, 0x17,

	0xd4, 0xef, 0x0b, 0x23, 0xff, 0x0b, 0x96, 0x0a,

	0x6c, 0x98, 0xac, 0x78, 0x5e, 0xb6, 0xb2, 0x67,

	0x0f, 0x48, 0xf4, 0xa1, 0xe5, 0x1e, 0xfe, 0x83,

	0xe4, 0x56, 0x2a, 0x03, 0x64, 0xff, 0x7a, 0xf3,

	0x03, 0xfe, 0xa7, 0x86, 0xdc, 0x35, 0x79, 0x13,

	0xf8, 0xe1, 0x59, 0x19, 0x04, 0x43, 0x24, 0x82,

	0x44, 0x82, 0x41, 0x2b, 0xc7, 0xcf, 0xf5, 0xa4,

	0xdc, 0xca, 0xf5, 0x34, 0xc4, 0x23, 0x3c, 0x1f,

	0xa8, 0x84, 0x1f, 0x2a, 0xcd, 0xae, 0x9d, 0x5e,

	0x05, 0xe2, 0xfb, 0x0c, 0x68, 0x81, 0x90, 0x11,

	0x44, 0xf6, 0xdd, 0x5b, 0x51, 0xd3, 0xe0, 0xab,

	0x29, 0x3a, 0xa9, 0x9c, 0xf6, 0x7e, 0x2d, 0xe3,

	0x6c, 0x09, 0x59, 0xd7, 0xfa, 0x7f, 0x6a, 0x33,

	0x3b, 0x23, 0x7b, 0x1b, 0xb2, 0x79, 0x5f, 0x5c,

	0xb6, 0x2d, 0xb0, 0xf8, 0xab, 0x33, 0x28, 0xe0,

	0x72, 0x2e, 0x2f, 0x03, 0x22, 0x16, 0xb4, 0x87,

	0xf7, 0x14, 0x3f, 0x55, 0x8a, 0xb0, 0x47, 0xdb,

	0x42, 0x2d, 0xc0, 0x0c, 0x0a, 0x33, 0xf8, 0xab,

	0x44, 0xae, 0xa3, 0xc9, 0xfc, 0xf6, 0x34, 0x8c,

	0x60, 0x30, 0x6d, 0x31, 0x70, 0xf3, 0x39, 0x53,

	0xf1, 0x2d, 0xb9, 0x6c, 0xa6, 0x48, 0x9c, 0x9c,

	0xc2, 0x88, 0xb3, 0xa9, 0x98, 0xb6, 0xc3, 0x47,

	0x94, 0x02, 0x9d, 0x98, 0x6e, 0x25, 0x6c, 0xf5,

	0x9b, 0xc6, 0x4d, 0xee, 0x07, 0x1e, 0x25, 0x8f,

	0x01, 0xde, 0xad, 0xe5, 0x77, 0x4f, 0xd1, 0xc0,

	0x62, 0xbb, 0x3a, 0xb9, 0x83, 0x0b, 0x29, 0x76,

	0x4f, 0xb1, 0x86, 0x2c, 0x27, 0xc7, 0x38, 0x65,

	0xcb, 0x78, 0xb7, 0x02, 0x10, 0x9e, 0xde, 0x83,

	0xd1, 0xac, 0x05, 0x86, 0x23, 0xce, 0x4f, 0x8d,

	0xcc, 0x4e, 0x3f, 0x04, 0xf4, 0x39, 0x91, 0x81,

	0x1c, 0x42, 0x47, 0x4d, 0x50, 0xe5, 0x01, 0x22,

	0x98, 0xcf, 0x91, 0x36, 0xb3, 0x7c, 0xcf, 0x78,

	0x07, 0x22, 0xa9, 0x18, 0xd2, 0xcd, 0x7d, 0x4d,

	0xa6, 0xcb, 0xaa, 0x52, 0x13, 0x49, 0x64, 0xb0,

	0xa5, 0x3d, 0xc7, 0xc3, 0x10, 0x87, 0x2e, 0x76,

	0xa9, 0x52, 0xc5, 0x50, 0x18, 0xc0, 0x5d, 0xb4,

	0x4c, 0xc6, 0x7f, 0x64, 0xae, 0x53, 0xc3, 0x46,

	0x99, 0xb7, 0x61, 0x6b, 0x08, 0x43, 0x08, 0x4c,

	0x90, 0x2c, 0xee, 0x56, 0x91, 0xb4, 0x28, 0xa8,

	0xa8, 0x8b, 0x3b, 0x1a, 0x67, 0x71, 0xf2, 0x81,

	0x48, 0x20, 0x71, 0x30, 0xdd, 0x69, 0x8a, 0xc2,

	0x4c, 0x9d, 0x4e, 0x17, 0xfb, 0x2e, 0xe7, 0x9b,

	0x86, 0x94, 0xa5, 0xce, 0xf9, 0x74, 0x56, 0xff,

	0x3b, 0xff, 0xd9, 0x5a, 0xc8, 0x98, 0xf5, 0x25,

	0xa2, 0xb9, 0x66, 0x46, 0x89, 0x17, 0x39, 0x08,

	0x69, 0x03, 0x59, 0x1e, 0x13, 0x12, 0x68, 0xe7,

	0x2f, 0x00, 0xd3, 0xf3, 0x71, 0xd1, 0x20, 0xc5,

	0x0b, 0x38, 0x89, 0xda, 0x62, 0x3c, 0xce, 0xea,

	0x04, 0x19, 0x47, 0x6d, 0xd8, 0x64, 0x38, 0x60,

	0x96, 0x71, 0x68, 0x48, 0x79, 0xf8, 0xf4, 0x76,

	0x33, 0xf6, 0x60, 0x8d, 0x21, 0xd0, 0xee, 0x41,

	0xc0, 0xbe, 0x33, 0x61, 0x5e, 0x66, 0xe6, 0x16,

	0x14, 0xc7, 0xfb, 0x6c, 0xf3, 0x58, 0xef, 0x12,

	0x7c, 0x70, 0x65, 0x5d, 0x55, 0xe8, 0xf2, 0x92,

	0x3a, 0xfe, 0x34, 0x64, 0x31, 0x7c, 0x29, 0xbb,

	0x01, 0x18, 0xbd, 0xb6, 0xe4, 0x1e, 0xa4, 0xf3,

	0x7b, 0x4c, 0x6a, 0x0d, 0x01, 0xfc, 0xc7, 0x66,

	0xc3, 0x88, 0x37, 0x25, 0xcf, 0xe9, 0xca, 0x82,

	0xeb, 0xa1, 0x38, 0x40, 0xc9, 0xdb, 0x38, 0x7b,

	0x78, 0xcf, 0x11, 0xa3, 0x1c, 0x6b, 0x70, 0xc8,

	0xe1, 0x2f, 0x7c, 0x17, 0x2c, 0x58, 0x28, 0xa4,

	0x13, 0x40, 0xc7, 0x69, 0x0f, 0x04, 0xe5, 0x8e,

	0xf0, 0x67, 0x53, 0xea, 0x10, 0xf5, 0x83, 0xc9,

	0xcb, 0x6b, 0x16, 0xef, 0x2e, 0x55, 0xb3, 0xdd,

	0xed, 0xf9, 0x1a, 0x52, 0x9a, 0x73, 0x78, 0x14,

	0x14, 0x21, 0xfc, 0xef, 0x3c, 0x40, 0xa9, 0xfe,

	0xef, 0xd7, 0x6e, 0x28, 0x2f, 0xd3, 0x73, 0xed,

	0xa3, 0x73, 0xb5, 0x62, 0x41, 0xe6, 0xd4, 0x79,

	0x49, 0x31, 0x2b, 0x86, 0x74, 0x56, 0x21, 0xfe,

	0x6d, 0xb2, 0xbe, 0x81, 0x80, 0xa6, 0x81, 0x19,

	0x90, 0x79, 0x6f, 0xc4, 0x4e, 0x7d, 0x6f, 0x2f,

	0xa8, 0x6f, 0xd5, 0xc4, 0x7e, 0x23, 0x3b, 0xe6,

	0x9b, 0x60, 0x97, 0x7b, 0xe2, 0x08, 0x8a, 0xaa,

	0xc7, 0x7c, 0xf6, 0xe5, 0x01, 0x3e, 0xd2, 0x29,

	0x7d, 0xd7, 0x40, 0x84, 0x95, 0xfa, 0xdf, 0xd8,

	0x81, 0xe9, 0x5e, 0xdd, 0x0d, 0x17, 0x51, 0x6b,

	0x8c, 0x0e, 0x47, 0xf9, 0x0c, 0x92, 0x1b, 0x60,

	0xca, 0x06, 0x8a, 0xe5, 0xe8, 0x0f, 0x06, 0x75,

	0x5d, 0x76, 0xc9, 0x32, 0x2c, 0x52, 0x2c, 0x2e,

	0xd8, 0x66, 0x38, 0x75, 0x16, 0xc7, 0x7d, 0x51,

	0xc4, 0xc2, 0x22, 0xc8, 0x19, 0xfc, 0x3d, 0x69,

	0x1e, 0xd9, 0x64, 0x47, 0x5d, 0x21, 0x84, 0x46,

	0xd7, 0xe1, 0xf0, 0x95, 0x3a, 0x8f, 0xbd, 0x7a,

	0x53, 0x71, 0x4c, 0x54, 0xc1, 0x3e, 0x27, 0xde,

	0xeb, 0x04, 0x11, 0xb0, 0x33, 0x4d, 0x57, 0x0b,

	0x6b, 0x7d, 0x6c, 0xd5, 0x87, 0x7e, 0xb4, 0xe2,

	0x94, 0x9e, 0x9f, 0x74, 0xe8, 0xb7, 0xfa, 0x05,

	0x9b, 0x8f, 0x81, 0x43, 0x35, 0x82, 0xb8, 0x5b,

	0xa8, 0x5e, 0xfa, 0x7a, 0x80, 0x8d, 0xd2, 0x90,

	0x58, 0x79, 0x89, 0x56, 0x90, 0x2b, 0xff, 0x92,

	0x3c, 0x35, 0xbe, 0x99, 0x5f, 0xd2, 0x4b, 0x15,

	0x58, 0x4b, 0xbf, 0x08, 0x9b, 0x9b, 0x97, 0x10,

	0xa4, 0x55, 0xc7, 0xec, 0x29, 0xc5, 0x14, 0x3e,

	0x8f, 0x56, 0xa3, 0x92, 0x9e, 0x33, 0xcc, 0x9e,

	0x77, 0x2f, 0x33, 0xcb, 0xc4, 0xe9, 0x19, 0xf4,

	0x32, 0x2b, 0xef, 0x6c, 0x1c, 0x92, 0x2c, 0x45,

	0x88, 0x74, 0x5f, 0xcf, 0x56, 0xfd, 0x87, 0x5f,

	0xb6, 0x9b, 0xa2, 0x51, 0xda, 0x9b, 0x83, 0x4f,

	0xec, 0x14, 0xe8, 0xd2, 0x42, 0x03, 0xcb, 0xe8,

	0xd0, 0xb7, 0xf8, 0x38, 0xde, 0x6f, 0xdf, 0x43,

	0xfa, 0x41, 0xab, 0xec, 0x2e, 0x3c, 0x93, 0x39,

	0x76, 0xd1, 0x6f, 0x5b, 0x6c, 0x6e, 0x8d, 0xeb,

	0x45, 0x6b, 0xc5, 0x76, 0x00, 0x29, 0xca, 0x3b,

	0xdb, 0x78, 0xc2, 0x32, 0x09, 0x39, 0x19, 0x50,

	0xa2, 0x44, 0x92, 0x09, 0xdb, 0x8b, 0x9e, 0x16,

	0x76, 0x7f, 0xf1, 0x78, 0x7b, 0xb2, 0x51, 0xbc,

	0x28, 0xbd, 0xb0, 0x7f, 0x25, 0x63, 0x7d, 0x34,

	0xfb, 0xf6, 0x36, 0x24, 0xc7, 0xf9, 0x41, 0xb6,

	0x2a, 0x06, 0xfc, 0xf0, 0x83, 0xf2, 0x12, 0x3d,

	0x60, 0x2e, 0x10, 0x70, 0x31, 0x6f, 0x37, 0x08,

	0x3e, 0x91, 0x93, 0xb5, 0xda, 0xb8, 0x4c, 0x1b,

	0xd8, 0xb8, 0x3b, 0xd5, 0x3e, 0xb6, 0xc0, 0xbb,

	0x38, 0x0f, 0xd2, 0x68, 0x4f, 0x78, 0x56, 0xf6,

	0xda, 0x65, 0xb4, 0x0b, 0xb4, 0xaf, 0xa8, 0x19,

	0x2f, 0x70, 0x55, 0xe0, 0x47, 0x31, 0x9f, 0x37,

	0x1a, 0x47, 0xb9, 0x0c, 0x97, 0x79, 0xfc, 0xa9,

	0x76, 0xe6, 0xfa, 0x38, 0x67, 0x25, 0xd3, 0x89,

	0x8d, 0xad, 0xc6, 0x11, 0x2d, 0x77, 0x0b, 0x35,

	0xa2, 0xe2, 0xdf, 0xc8, 0x94, 0xd5, 0xdf, 0xd2,

	0x69, 0x2a, 0x99, 0x93, 0xfa, 0x4a, 0x5f, 0xc7,

	0x8a, 0x14, 0x5f, 0x2a, 0xf3, 0x02, 0xf0, 0x3e,

	0x21, 0x8e, 0x2e, 0x4b, 0xc4, 0xd2, 0xc8, 0xa6,

	0x41, 0x6e, 0x17, 0x36, 0xe9, 0xad, 0x73, 0x33,

	0x6c, 0xea, 0xc2, 0x31, 0x8f, 0x30, 0x51, 0x5c,

	0x1c, 0x20, 0xe6, 0x05, 0x1a, 0x17, 0x15, 0x5d,

	0x3e, 0x8f, 0xd2, 0x7f, 0xa1, 0xc5, 0x47, 0xb3,

	0xb2, 0x9c, 0xe8, 0xf0, 0x6d, 0xc1, 0xc3, 0xa2,

};



static const u8 nh_test_val16[NH_HASH_BYTES] = {

	0x30, 0x77, 0x55, 0x7c, 0x45, 0xd8, 0xce, 0xf7,

	0x2a, 0xb5, 0x14, 0x8c, 0x35, 0x7e, 0xaa, 0x00,

	0x50, 0xbc, 0x50, 0x7c, 0xd3, 0x20, 0x7c, 0x9c,

	0xb4, 0xf1, 0x91, 0x26, 0x81, 0x03, 0xa5, 0x68,

};



static const u8 nh_test_val96[NH_HASH_BYTES] = {

	0xd2, 0x19, 0xca, 0xa5, 0x6c, 0x0c, 0xdf, 0x2f,

	0x69, 0xfa, 0x75, 0xc1, 0x63, 0xdb, 0xfa, 0x4d,

	0x45, 0x2b, 0xb8, 0xdb, 0xac, 0xee, 0x61, 0xc6,

	0x7a, 0x83, 0xb6, 0x0f, 0x32, 0x82, 0xe4, 0xd0,

};



static const u8 nh_test_val256[NH_HASH_BYTES] = {

	0x33, 0x8f, 0xb4, 0x96, 0xf1, 0xb6, 0xf1, 0xb5,

	0x05, 0x19, 0xbb, 0x6b, 0xda, 0xd9, 0x95, 0x75,

	0x96, 0x3f, 0x8b, 0x42, 0xb6, 0xcd, 0xb7, 0xb7,

	0xe7, 0x97, 0xb5, 0xa9, 0x0b, 0xd7, 0xdd, 0x33,

};



static const u8 nh_test_val1024[NH_HASH_BYTES] = {

	0x32, 0x3d, 0x51, 0xe1, 0x77, 0xb6, 0xac, 0x06,

	0x84, 0x67, 0xb7, 0xf2, 0x24, 0xe7, 0xec, 0xfd,

	0x96, 0x64, 0xff, 0x55, 0xc7, 0x1b, 0xf9, 0xdc,

	0xa3, 0xc7, 0x32, 0x06, 0x79, 0xcf, 0xca, 0xb6,

};

lib/crypto/tests/nh_kunit.c

0 → 100644
+43 −0
Original line number Diff line number Diff line 
// SPDX-License-Identifier: GPL-2.0-or-later

/*

 * Copyright 2025 Google LLC

 */

#include <crypto/nh.h>

#include <kunit/test.h>

#include "nh-testvecs.h"



static void test_nh(struct kunit *test)

{

	u32 *key = kunit_kmalloc(test, NH_KEY_BYTES, GFP_KERNEL);

	__le64 hash[NH_NUM_PASSES];



	KUNIT_ASSERT_NOT_NULL(test, key);

	memcpy(key, nh_test_key, NH_KEY_BYTES);

	le32_to_cpu_array(key, NH_KEY_WORDS);



	nh(key, nh_test_msg, 16, hash);

	KUNIT_ASSERT_MEMEQ(test, hash, nh_test_val16, NH_HASH_BYTES);



	nh(key, nh_test_msg, 96, hash);

	KUNIT_ASSERT_MEMEQ(test, hash, nh_test_val96, NH_HASH_BYTES);



	nh(key, nh_test_msg, 256, hash);

	KUNIT_ASSERT_MEMEQ(test, hash, nh_test_val256, NH_HASH_BYTES);



	nh(key, nh_test_msg, 1024, hash);

	KUNIT_ASSERT_MEMEQ(test, hash, nh_test_val1024, NH_HASH_BYTES);

}



static struct kunit_case nh_test_cases[] = {

	KUNIT_CASE(test_nh),

	{},

};



static struct kunit_suite nh_test_suite = {

	.name = "nh",

	.test_cases = nh_test_cases,

};

kunit_test_suite(nh_test_suite);



MODULE_DESCRIPTION("KUnit tests for NH");

MODULE_LICENSE("GPL");

scripts/crypto/gen-hash-testvecs.py

+40 −0
Original line number Diff line number Diff line
@@ -184,6 +184,44 @@ def gen_additional_blake2_testvecs(alg): 
            f'{alg}_keyed_testvec_consolidated[{alg_digest_size_const(alg)}]',

            compute_hash(alg, hashes))



def nh_extract_int(bytestr, pos, length):

    assert pos % 8 == 0 and length % 8 == 0

    return int.from_bytes(bytestr[pos//8 : pos//8 + length//8], byteorder='little')



# The NH "almost-universal hash function" used in Adiantum.  This is a

# straightforward translation of the pseudocode from Section 6.3 of the Adiantum

# paper (https://eprint.iacr.org/2018/720.pdf), except the outer loop is omitted

# because we assume len(msg) <= 1024.  (The kernel's nh() function is only

# expected to handle up to 1024 bytes; it's just called repeatedly as needed.)

def nh(key, msg):

    (w, s, r, u) = (32, 2, 4, 8192)

    l = 8 * len(msg)

    assert l <= u

    assert l % (2*s*w) == 0

    h = bytes()

    for i in range(0, 2*s*w*r, 2*s*w):

        p = 0

        for j in range(0, l, 2*s*w):

            for k in range(0, w*s, w):

                a0 = nh_extract_int(key, i + j + k, w)

                a1 = nh_extract_int(key, i + j + k + s*w, w)

                b0 = nh_extract_int(msg, j + k, w)

                b1 = nh_extract_int(msg, j + k + s*w, w)

                p += ((a0 + b0) % 2**w) * ((a1 + b1) % 2**w)

        h += (p % 2**64).to_bytes(8, byteorder='little')

    return h



def gen_nh_testvecs():

    NH_KEY_BYTES = 1072

    NH_MESSAGE_BYTES = 1024

    key = rand_bytes(NH_KEY_BYTES)

    msg = rand_bytes(NH_MESSAGE_BYTES)

    print_static_u8_array_definition('nh_test_key[NH_KEY_BYTES]', key)

    print_static_u8_array_definition('nh_test_msg[NH_MESSAGE_BYTES]', msg)

    for length in [16, 96, 256, 1024]:

        print_static_u8_array_definition(f'nh_test_val{length}[NH_HASH_BYTES]',

                                         nh(key, msg[:length]))



def gen_additional_poly1305_testvecs():

    key = b'\xff' * POLY1305_KEY_SIZE

    data = b''
@@ -217,6 +255,8 @@ print(f'/* This file was generated by: {sys.argv[0]} {" ".join(sys.argv[1:])} */ 
if alg.startswith('blake2'):

    gen_unkeyed_testvecs(alg)

    gen_additional_blake2_testvecs(alg)

elif alg == 'nh':

    gen_nh_testvecs()

elif alg == 'poly1305':

    gen_unkeyed_testvecs(alg)

    gen_additional_poly1305_testvecs()