mirror of
https://github.com/bitcoin/bitcoin.git
synced 2026-09-12 05:32:22 +02:00
af50ba8500
Lock SipHash-2-4 behavior into shared vectors before refactoring its round and finalization code. Store inputs as ordered hex byte blocks so `CSipHasher` and the independent Python implementation hash the same byte sequence, with applicable `PresaltedSipHasher` overloads checked against the same vectors. Add the 64 official SipHash-2-4 vectors alongside block-partition and empty-block cases for the generic path. Move randomized generic/fixed comparisons to the integer fuzzer. SipHash-1-3-UJ coverage can add expected outputs for compatible 8- and 32-byte block sequences. The Python test reads a build-tree copy so functional-test staging behaves consistently when files are symlinked or copied. Co-authored-by: Pieter Wuille <pieter@wuille.net>
80 lines
2.3 KiB
Python
80 lines
2.3 KiB
Python
#!/usr/bin/env python3
|
|
# Copyright (c) 2016-present The Bitcoin Core developers
|
|
# Distributed under the MIT software license, see the accompanying
|
|
# file COPYING or http://www.opensource.org/licenses/mit-license.php.
|
|
"""SipHash-2-4 implementation.
|
|
|
|
This implements SipHash-2-4. For convenience, an interface taking 256-bit
|
|
integers is provided in addition to the one accepting generic data.
|
|
"""
|
|
|
|
import json
|
|
from pathlib import Path
|
|
import unittest
|
|
|
|
|
|
def rotl64(n, b):
|
|
return n >> (64 - b) | (n & ((1 << (64 - b)) - 1)) << b
|
|
|
|
|
|
def siphash_round(v0, v1, v2, v3):
|
|
v0 = (v0 + v1) & ((1 << 64) - 1)
|
|
v1 = rotl64(v1, 13)
|
|
v1 ^= v0
|
|
v0 = rotl64(v0, 32)
|
|
v2 = (v2 + v3) & ((1 << 64) - 1)
|
|
v3 = rotl64(v3, 16)
|
|
v3 ^= v2
|
|
v0 = (v0 + v3) & ((1 << 64) - 1)
|
|
v3 = rotl64(v3, 21)
|
|
v3 ^= v0
|
|
v2 = (v2 + v1) & ((1 << 64) - 1)
|
|
v1 = rotl64(v1, 17)
|
|
v1 ^= v2
|
|
v2 = rotl64(v2, 32)
|
|
return (v0, v1, v2, v3)
|
|
|
|
|
|
def siphash(k0, k1, data):
|
|
assert type(data) is bytes
|
|
v0 = 0x736f6d6570736575 ^ k0
|
|
v1 = 0x646f72616e646f6d ^ k1
|
|
v2 = 0x6c7967656e657261 ^ k0
|
|
v3 = 0x7465646279746573 ^ k1
|
|
c = 0
|
|
t = 0
|
|
for d in data:
|
|
t |= d << (8 * (c % 8))
|
|
c = (c + 1) & 0xff
|
|
if (c & 7) == 0:
|
|
v3 ^= t
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
v0 ^= t
|
|
t = 0
|
|
t = t | (c << 56)
|
|
v3 ^= t
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
v0 ^= t
|
|
v2 ^= 0xff
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
v0, v1, v2, v3 = siphash_round(v0, v1, v2, v3)
|
|
return v0 ^ v1 ^ v2 ^ v3
|
|
|
|
|
|
def siphash256(k0, k1, num):
|
|
assert type(num) is int
|
|
return siphash(k0, k1, num.to_bytes(32, 'little'))
|
|
|
|
|
|
class TestFrameworkSipHash(unittest.TestCase):
|
|
def test_vectors(self):
|
|
with (Path(__file__).parents[4] / "src/test/data/siphash.json").open() as vectors_file:
|
|
for test in json.load(vectors_file):
|
|
k0, k1 = (int(key, 16) for key in test["key"])
|
|
data = b"".join(bytes.fromhex(block) for block in test["input"])
|
|
self.assertEqual(siphash(k0, k1, data), int(test["expected"]["siphash24"], 16))
|