miden-crypto/crypto/src/hash/rpo/tests.rs
crypto/src/hash/rpo/tests.rsRaw
1use super::{
2 ElementHasher, Felt, FieldElement, HashFn, Rpo256, RpoDigest256, StarkField, ALPHA, INV_ALPHA,
3 INV_MDS, MDS, STATE_WIDTH, ZERO,
4};
5use core::convert::TryInto;
6use rand_utils::rand_value;
7
8#[test]
9fn mds_inv_test() {
10 let mut mul_result = [[Felt::new(0); STATE_WIDTH]; STATE_WIDTH];
11 for i in 0..STATE_WIDTH {
12 for j in 0..STATE_WIDTH {
13 let result = {
14 let mut result = Felt::new(0);
15 for k in 0..STATE_WIDTH {
16 result += MDS[i][k] * INV_MDS[k][j]
17 }
18 result
19 };
20 mul_result[i][j] = result;
21 if i == j {
22 assert_eq!(result, Felt::new(1));
23 } else {
24 assert_eq!(result, Felt::new(0));
25 }
26 }
27 }
28}
29#[test]
30fn test_alphas() {
31 let e: Felt = Felt::new(rand_value());
32 let e_exp = e.exp(ALPHA.into());
33 assert_eq!(e, e_exp.exp(INV_ALPHA));
34}
35
36#[test]
37fn test_sbox() {
38 let state = [Felt::new(rand_value()); STATE_WIDTH];
39
40 let mut expected = state;
41 expected.iter_mut().for_each(|v| *v = v.exp(ALPHA));
42
43 let mut actual = state;
44 Rpo256::apply_sbox(&mut actual);
45
46 assert_eq!(expected, actual);
47}
48
49#[test]
50fn test_inv_sbox() {
51 let state = [Felt::new(rand_value()); STATE_WIDTH];
52
53 let mut expected = state;
54 expected.iter_mut().for_each(|v| *v = v.exp(INV_ALPHA));
55
56 let mut actual = state;
57 Rpo256::apply_inv_sbox(&mut actual);
58
59 assert_eq!(expected, actual);
60}
61
62#[test]
63fn hash_elements_vs_merge() {
64 let elements = [Felt::new(rand_value()); 8];
65
66 let digests: [RpoDigest256; 2] = [
67 RpoDigest256::new(elements[..4].try_into().unwrap()),
68 RpoDigest256::new(elements[4..].try_into().unwrap()),
69 ];
70
71 let m_result = Rpo256::merge(&digests);
72 let h_result = Rpo256::hash_elements(&elements);
73 assert_eq!(m_result, h_result);
74}
75
76#[test]
77fn hash_elements_vs_merge_with_int() {
78 let tmp = [Felt::new(rand_value()); 4];
79 let seed = RpoDigest256::new(tmp);
80
81 // ----- value fits into a field element ------------------------------------------------------
82 let val: Felt = Felt::new(rand_value());
83 let m_result = Rpo256::merge_with_int(seed, val.as_int());
84
85 let mut elements = seed.as_elements().to_vec();
86 elements.push(val);
87 let h_result = Rpo256::hash_elements(&elements);
88
89 assert_eq!(m_result, h_result);
90
91 // ----- value does not fit into a field element ----------------------------------------------
92 let val = Felt::MODULUS + 2;
93 let m_result = Rpo256::merge_with_int(seed, val);
94
95 let mut elements = seed.as_elements().to_vec();
96 elements.push(Felt::new(val));
97 elements.push(Felt::new(1));
98 let h_result = Rpo256::hash_elements(&elements);
99
100 assert_eq!(m_result, h_result);
101}
102
103#[test]
104fn hash_padding() {
105 // adding a zero bytes at the end of a byte string should result in a different hash
106 let r1 = Rpo256::hash(&[1_u8, 2, 3]);
107 let r2 = Rpo256::hash(&[1_u8, 2, 3, 0]);
108 assert_ne!(r1, r2);
109
110 // same as above but with bigger inputs
111 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6]);
112 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 0]);
113 assert_ne!(r1, r2);
114
115 // same as above but with input splitting over two elements
116 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7]);
117 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0]);
118 assert_ne!(r1, r2);
119
120 // same as above but with multiple zeros
121 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0, 0]);
122 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0, 0, 0, 0]);
123 assert_ne!(r1, r2);
124}
125
126#[test]
127fn hash_elements_padding() {
128 let e1 = [Felt::new(rand_value()); 2];
129 let e2 = [e1[0], e1[1], ZERO];
130
131 let r1 = Rpo256::hash_elements(&e1);
132 let r2 = Rpo256::hash_elements(&e2);
133 assert_ne!(r1, r2);
134}
135
136#[test]
137fn hash_elements() {
138 let elements = [
139 Felt::new(0),
140 Felt::new(1),
141 Felt::new(2),
142 Felt::new(3),
143 Felt::new(4),
144 Felt::new(5),
145 Felt::new(6),
146 Felt::new(7),
147 ];
148
149 let digests: [RpoDigest256; 2] = [
150 RpoDigest256::new(elements[..4].try_into().unwrap()),
151 RpoDigest256::new(elements[4..8].try_into().unwrap()),
152 ];
153
154 let m_result = Rpo256::merge(&digests);
155 let h_result = Rpo256::hash_elements(&elements);
156 assert_eq!(m_result, h_result);
157}
158
159#[test]
160fn hash_test_vectors() {
161 let elements = [
162 Felt::new(0),
163 Felt::new(1),
164 Felt::new(2),
165 Felt::new(3),
166 Felt::new(4),
167 Felt::new(5),
168 Felt::new(6),
169 Felt::new(7),
170 Felt::new(8),
171 Felt::new(9),
172 Felt::new(10),
173 Felt::new(11),
174 Felt::new(12),
175 Felt::new(13),
176 Felt::new(14),
177 Felt::new(15),
178 Felt::new(16),
179 Felt::new(17),
180 Felt::new(18),
181 ];
182
183 for i in 0..elements.len() {
184 let expected = RpoDigest256::new(EXPECTED[i].try_into().unwrap());
185 let result = Rpo256::hash_elements(&elements[..(i + 1)]);
186 assert_eq!(result, expected);
187 }
188}
189
190const EXPECTED: [[Felt; 4]; 19] = [
191 [
192 Felt::new(1502364727743950833),
193 Felt::new(5880949717274681448),
194 Felt::new(162790463902224431),
195 Felt::new(6901340476773664264),
196 ],
197 [
198 Felt::new(7478710183745780580),
199 Felt::new(3308077307559720969),
200 Felt::new(3383561985796182409),
201 Felt::new(17205078494700259815),
202 ],
203 [
204 Felt::new(17439912364295172999),
205 Felt::new(17979156346142712171),
206 Felt::new(8280795511427637894),
207 Felt::new(9349844417834368814),
208 ],
209 [
210 Felt::new(5105868198472766874),
211 Felt::new(13090564195691924742),
212 Felt::new(1058904296915798891),
213 Felt::new(18379501748825152268),
214 ],
215 [
216 Felt::new(9133662113608941286),
217 Felt::new(12096627591905525991),
218 Felt::new(14963426595993304047),
219 Felt::new(13290205840019973377),
220 ],
221 [
222 Felt::new(3134262397541159485),
223 Felt::new(10106105871979362399),
224 Felt::new(138768814855329459),
225 Felt::new(15044809212457404677),
226 ],
227 [
228 Felt::new(162696376578462826),
229 Felt::new(4991300494838863586),
230 Felt::new(660346084748120605),
231 Felt::new(13179389528641752698),
232 ],
233 [
234 Felt::new(2242391899857912644),
235 Felt::new(12689382052053305418),
236 Felt::new(235236990017815546),
237 Felt::new(5046143039268215739),
238 ],
239 [
240 Felt::new(9585630502158073976),
241 Felt::new(1310051013427303477),
242 Felt::new(7491921222636097758),
243 Felt::new(9417501558995216762),
244 ],
245 [
246 Felt::new(1994394001720334744),
247 Felt::new(10866209900885216467),
248 Felt::new(13836092831163031683),
249 Felt::new(10814636682252756697),
250 ],
251 [
252 Felt::new(17486854790732826405),
253 Felt::new(17376549265955727562),
254 Felt::new(2371059831956435003),
255 Felt::new(17585704935858006533),
256 ],
257 [
258 Felt::new(11368277489137713825),
259 Felt::new(3906270146963049287),
260 Felt::new(10236262408213059745),
261 Felt::new(78552867005814007),
262 ],
263 [
264 Felt::new(17899847381280262181),
265 Felt::new(14717912805498651446),
266 Felt::new(10769146203951775298),
267 Felt::new(2774289833490417856),
268 ],
269 [
270 Felt::new(3794717687462954368),
271 Felt::new(4386865643074822822),
272 Felt::new(8854162840275334305),
273 Felt::new(7129983987107225269),
274 ],
275 [
276 Felt::new(7244773535611633983),
277 Felt::new(19359923075859320),
278 Felt::new(10898655967774994333),
279 Felt::new(9319339563065736480),
280 ],
281 [
282 Felt::new(4935426252518736883),
283 Felt::new(12584230452580950419),
284 Felt::new(8762518969632303998),
285 Felt::new(18159875708229758073),
286 ],
287 [
288 Felt::new(14871230873837295931),
289 Felt::new(11225255908868362971),
290 Felt::new(18100987641405432308),
291 Felt::new(1559244340089644233),
292 ],
293 [
294 Felt::new(8348203744950016968),
295 Felt::new(4041411241960726733),
296 Felt::new(17584743399305468057),
297 Felt::new(16836952610803537051),
298 ],
299 [
300 Felt::new(16139797453633030050),
301 Felt::new(1090233424040889412),
302 Felt::new(10770255347785669036),
303 Felt::new(16982398877290254028),
304 ],
305];