belt-dwp 0.1.0

Pure Rust implementation of the Belt-DWP authenticated encryption algorithm (STB 34.101.31-2020)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

use aead::array::{Array, ArraySize};

mod utils;

pub(crate) mod gf128_soft64;

pub trait GfElement {
    type N: ArraySize;

    fn new() -> Self;
    fn into_bytes(self) -> Array<u8, Self::N>;
    fn mul_sum(&mut self, a: &Array<u8, Self::N>, b: &Array<u8, Self::N>);
}

/// Tests from Appendix A, table 18 of [STB 34.101.31-2020](https://apmi.bsu.by/assets/files/std/belt-spec372.pdf)
#[test]
fn test_a18() {
    use crate::gf::gf128_soft64::Element;
    use aead::consts::U16;
    use hex_literal::hex;

    type Block = Array<u8, U16>;

    let test_vectors = [
        (
            hex!("34904055 11BE3297 1343724C 5AB793E9"),
            hex!("22481783 8761A9D6 E3EC9689 110FB0F3"),
            hex!("0001D107 FC67DE40 04DC2C80 3DFD95C3"),
        ),
        (
            hex!("703FCCF0 95EE8DF1 C1ABF8EE 8DF1C1AB"),
            hex!("2055704E 2EDB48FE 87E74075 A5E77EB1"),
            hex!("4A5C9593 8B3FE8F6 74D59BC1 EB356079"),
        ),
    ];
    for (u, v, w) in test_vectors {
        let a = Block::try_from(&u[..]).unwrap();
        let b = Block::try_from(&v[..]).unwrap();
        let c = Block::try_from(&w[..]).unwrap();

        let mut elem = Element::new();
        elem.mul_sum(&a, &b);

        assert_eq!(c, elem.into_bytes());
    }
}