private void longBlockTest()
{
byte[] data = new byte[16000];
byte[] res = new byte[32];
for (int i = 0; i != data.Length; i++)
{
data[i] = (byte)i;
}
for (int i = 10000; i != data.Length; i++)
{
CShakeDigest cshake_ = new CShakeDigest(128, new byte[0], Arrays.CopyOfRange(data, 0, i));
cshake_.BlockUpdate(Hex.Decode("00010203"), 0, 4);
cshake_.DoFinal(res, 0);
}
CShakeDigest cshake = new CShakeDigest(256, new byte[0], new byte[200]);
cshake.BlockUpdate(Arrays.CopyOfRange(data, 0, 200), 0, 200);
cshake.DoFinal(res, 0);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("4a899b5be460d85a9789215bc17f88b8f8ac049bd3b519f561e7b5d3870dafa3"), res));
}
private void CalculateDigest(ulong[] words)
{
var hasher = new CShakeDigest(256, null, Encoding.ASCII.GetBytes("ROM_CTRL"));
foreach (var word in words)
{
hasher.BlockUpdate(BitConverter.GetBytes(word), 0, 8);
}
hasher.DoFinal(digest, 0, digest.Length);
CheckDigest();
}
private void checkSHAKE(int bitSize, CShakeDigest cshake, byte[] msg)
{
ShakeDigest ref_ = new ShakeDigest(bitSize);
ref_.BlockUpdate(msg, 0, msg.Length);
cshake.BlockUpdate(msg, 0, msg.Length);
byte[] res1 = new byte[32];
byte[] res2 = new byte[32];
ref_.DoFinal(res1, 0, res1.Length);
cshake.DoFinal(res2, 0, res2.Length);
Assert.IsTrue(Arrays.AreEqual(res1, res2));
}
private void checkZeroPadZ()
{
byte[] buf = new byte[20];
CShakeDigest cshake1 = new CShakeDigest(256, new byte[0], new byte[265]);
cshake1.DoOutput(buf, 0, buf.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("6e393540387004f087c4180db008acf6825190cf"), buf));
CShakeDigest cshake2 = new CShakeDigest(128, new byte[0], new byte[329]);
cshake2.DoOutput(buf, 0, buf.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("309bd7c285fcf8b839c9686b2cc00bd578947bee"), buf));
cshake2 = new CShakeDigest(128, new byte[29], new byte[300]);
cshake2.DoOutput(buf, 0, buf.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("ff6aafd83b8d22fc3e2e9b9948b581967ed9c5e7"), buf));
}
private void doFinalTest()
{
CShakeDigest cshake = new CShakeDigest(128, new byte[0], Strings.ToByteArray("Email Signature"));
cshake.BlockUpdate(Hex.Decode("00010203"), 0, 4);
byte[] res = new byte[32];
cshake.DoOutput(res, 0, res.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("c1c36925b6409a04f1b504fcbca9d82b4017277cb5ed2b2065fc1d3814d5aaf5"), res));
cshake.DoOutput(res, 0, res.Length);
Assert.IsTrue(!Arrays.AreEqual(Hex.Decode("c1c36925b6409a04f1b504fcbca9d82b4017277cb5ed2b2065fc1d3814d5aaf5"), res));
cshake.DoFinal(res, 0, res.Length);
cshake.BlockUpdate(Hex.Decode("00010203"), 0, 4);
cshake.DoFinal(res, 0, res.Length);
string s = Hex.ToHexString(res);
Console.WriteLine(s);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("c1c36925b6409a04f1b504fcbca9d82b4017277cb5ed2b2065fc1d3814d5aaf5"), res));
cshake.BlockUpdate(Hex.Decode("00010203"), 0, 4);
cshake.DoOutput(res, 0, res.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("c1c36925b6409a04f1b504fcbca9d82b4017277cb5ed2b2065fc1d3814d5aaf5"), res));
cshake.DoFinal(res, 0, res.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("9cbce830079c452abdeb875366a49ebfe75b89ef17396e34898e904830b0e136"), res));
}
private static void Main()
{
Console.WriteLine("Hello World!");
const int hashchainLength = 1000_000;
//해시체인 시드
var randomBytes = new byte[1000];
using var c = new RNGCryptoServiceProvider();
//시드 생성
c.GetBytes(randomBytes);
const int outputLength = 25;
const string functionName = "hello";
const string customization = "world";
var cShakeDigest =
new CShakeDigest(256,
Encoding.ASCII.GetBytes(functionName),
Encoding.ASCII.GetBytes(customization));
var previousHash = randomBytes;
for (int i = 0; i < hashchainLength; i++)
{
cShakeDigest.Reset();
cShakeDigest.BlockUpdate(previousHash, 0, previousHash.Length);
var hash = new byte[outputLength];
cShakeDigest.DoFinal(hash, 0, outputLength);
previousHash = hash;
// var hashString = BitConverter.ToString(hash).Replace("-", string.Empty).ToLowerInvariant();
// Console.WriteLine($"{i} {hashString}");
}
Console.WriteLine("done");
}
public override void PerformTest()
{
CShakeDigest cshake = new CShakeDigest(128, new byte[0], Strings.ToByteArray("Email Signature"));
cshake.BlockUpdate(Hex.Decode("00010203"), 0, 4);
byte[] res = new byte[32];
cshake.DoOutput(res, 0, res.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("c1c36925b6409a04f1b504fcbca9d82b4017277cb5ed2b2065fc1d3814d5aaf5"), res));
cshake = new CShakeDigest(128, new byte[0], Strings.ToByteArray("Email Signature"));
cshake.BlockUpdate(Hex.Decode(
"000102030405060708090A0B0C0D0E0F" +
"101112131415161718191A1B1C1D1E1F" +
"202122232425262728292A2B2C2D2E2F" +
"303132333435363738393A3B3C3D3E3F" +
"404142434445464748494A4B4C4D4E4F" +
"505152535455565758595A5B5C5D5E5F" +
"606162636465666768696A6B6C6D6E6F" +
"707172737475767778797A7B7C7D7E7F" +
"808182838485868788898A8B8C8D8E8F" +
"909192939495969798999A9B9C9D9E9F" +
"A0A1A2A3A4A5A6A7A8A9AAABACADAEAF" +
"B0B1B2B3B4B5B6B7B8B9BABBBCBDBEBF" +
"C0C1C2C3C4C5C6C7"), 0, 1600 / 8);
res = new byte[32];
cshake.DoOutput(res, 0, res.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode("C5221D50E4F822D96A2E8881A961420F294B7B24FE3D2094BAED2C6524CC166B "), res));
cshake = new CShakeDigest(256, new byte[0], Strings.ToByteArray("Email Signature"));
cshake.BlockUpdate(Hex.Decode("00010203"), 0, 4);
res = new byte[64];
cshake.DoOutput(res, 0, res.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode(
"D008828E2B80AC9D2218FFEE1D070C48" +
"B8E4C87BFF32C9699D5B6896EEE0EDD1" +
"64020E2BE0560858D9C00C037E34A969" +
"37C561A74C412BB4C746469527281C8C"), res));
cshake = new CShakeDigest(256, new byte[0], Strings.ToByteArray("Email Signature"));
cshake.BlockUpdate(Hex.Decode(
"000102030405060708090A0B0C0D0E0F" +
"101112131415161718191A1B1C1D1E1F" +
"202122232425262728292A2B2C2D2E2F" +
"303132333435363738393A3B3C3D3E3F" +
"404142434445464748494A4B4C4D4E4F" +
"505152535455565758595A5B5C5D5E5F" +
"606162636465666768696A6B6C6D6E6F" +
"707172737475767778797A7B7C7D7E7F" +
"808182838485868788898A8B8C8D8E8F" +
"909192939495969798999A9B9C9D9E9F" +
"A0A1A2A3A4A5A6A7A8A9AAABACADAEAF" +
"B0B1B2B3B4B5B6B7B8B9BABBBCBDBEBF" +
"C0C1C2C3C4C5C6C7"), 0, 1600 / 8);
res = new byte[64];
cshake.DoOutput(res, 0, res.Length);
Assert.IsTrue(Arrays.AreEqual(Hex.Decode(
"07DC27B11E51FBAC75BC7B3C1D983E8B" +
"4B85FB1DEFAF218912AC864302730917" +
"27F42B17ED1DF63E8EC118F04B23633C" +
"1DFB1574C8FB55CB45DA8E25AFB092BB"), res));
doFinalTest();
longBlockTest();
checkZeroPadZ();
checkSHAKE(128, new CShakeDigest(128, new byte[0], new byte[0]), Hex.Decode("eeaabeef"));
checkSHAKE(256, new CShakeDigest(256, new byte[0], null), Hex.Decode("eeaabeef"));
checkSHAKE(128, new CShakeDigest(128, null, new byte[0]), Hex.Decode("eeaabeef"));
checkSHAKE(128, new CShakeDigest(128, null, null), Hex.Decode("eeaabeef"));
checkSHAKE(256, new CShakeDigest(256, null, null), Hex.Decode("eeaabeef"));
}
public KMac(int bitLength, byte[] S)
{
this.cshake = new CShakeDigest(bitLength, Strings.ToAsciiByteArray("KMAC"), S);
this.bitLength = bitLength;
this.outputLength = bitLength * 2 / 8;
}
public KMac(int bitLength, byte[] S)
{
this.cshake = new CShakeDigest(bitLength, Encoding.ASCII.GetBytes("KMAC"), S);
this.bitLength = bitLength;
this.outputLength = bitLength * 2 / 8;
}