1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

//! The original ChaCha20-Poly1305 construction can safely encrypt a pratically
//! unlimited number of messages with the same key, without any practical limit
//! to the size of a message (up to ~ 2^64 bytes).
use ffi::{crypto_aead_chacha20poly1305_encrypt,
          crypto_aead_chacha20poly1305_decrypt,
          crypto_aead_chacha20poly1305_encrypt_detached,
          crypto_aead_chacha20poly1305_decrypt_detached,
          crypto_aead_chacha20poly1305_KEYBYTES,
          crypto_aead_chacha20poly1305_NPUBBYTES,
          crypto_aead_chacha20poly1305_ABYTES
};
aead_module!(crypto_aead_chacha20poly1305_encrypt,
             crypto_aead_chacha20poly1305_decrypt,
             crypto_aead_chacha20poly1305_encrypt_detached,
             crypto_aead_chacha20poly1305_decrypt_detached,
             crypto_aead_chacha20poly1305_KEYBYTES,
             crypto_aead_chacha20poly1305_NPUBBYTES,
             crypto_aead_chacha20poly1305_ABYTES);

#[cfg(test)]
mod test {
    use super::*;

    #[test]
    fn test_vector_1() {
        // Test from https://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-04#section-7
        let m = &[0x86,0xd0,0x99,0x74,0x84,0x0b,0xde,0xd2,0xa5,0xca];
        let k = Key([0x42,0x90,0xbc,0xb1,0x54,0x17,0x35,0x31,
                     0xf3,0x14,0xaf,0x57,0xf3,0xbe,0x3b,0x50,
                     0x06,0xda,0x37,0x1e,0xce,0x27,0x2a,0xfa,
                     0x1b,0x5d,0xbd,0xd1,0x10,0x0a,0x10,0x07]);
        let n = Nonce([0xcd,0x7c,0xf6,0x7b,0xe3,0x9c,0x79,0x4a]);
        let ad = &[0x87,0xe2,0x29,0xd4,0x50,0x08,0x45,0xa0,0x79,0xc0];

        let c_expected = &[0xe3,0xe4,0x46,0xf7,0xed,0xe9,0xa1,0x9b,
                           0x62,0xa4,0x67,0x7d,0xab,0xf4,0xe3,0xd2,
                           0x4b,0x87,0x6b,0xb2,0x84,0x75,0x38,0x96,
                           0xe1,0xd6];

        let c = seal(m, Some(ad), &n, &k);
        assert_eq!(&c[..], c_expected);
    }
}