miden-crypto/src/hash/rpo/tests.rs
src/hash/rpo/tests.rsRaw
1use super::{
2 Felt, FieldElement, Hasher, Rpo256, RpoDigest, StarkField, ALPHA, CAPACITY_RANGE, DIGEST_RANGE,
3 INV_ALPHA, RATE_RANGE, STATE_WIDTH, ZERO,
4};
5use core::convert::TryInto;
6use rand_utils::rand_value;
7
8#[test]
9fn test_alphas() {
10 let e: Felt = Felt::new(rand_value());
11 let e_exp = e.exp(ALPHA);
12 assert_eq!(e, e_exp.exp(INV_ALPHA));
13}
14
15#[test]
16fn test_sbox() {
17 let state = [Felt::new(rand_value()); STATE_WIDTH];
18
19 let mut expected = state;
20 expected.iter_mut().for_each(|v| *v = v.exp(ALPHA));
21
22 let mut actual = state;
23 Rpo256::apply_sbox(&mut actual);
24
25 assert_eq!(expected, actual);
26}
27
28#[test]
29fn test_inv_sbox() {
30 let state = [Felt::new(rand_value()); STATE_WIDTH];
31
32 let mut expected = state;
33 expected.iter_mut().for_each(|v| *v = v.exp(INV_ALPHA));
34
35 let mut actual = state;
36 Rpo256::apply_inv_sbox(&mut actual);
37
38 assert_eq!(expected, actual);
39}
40
41#[test]
42fn hash_elements_vs_merge() {
43 let elements = [Felt::new(rand_value()); 8];
44
45 let digests: [RpoDigest; 2] = [
46 RpoDigest::new(elements[..4].try_into().unwrap()),
47 RpoDigest::new(elements[4..].try_into().unwrap()),
48 ];
49
50 let m_result = Rpo256::merge(&digests);
51 let h_result = Rpo256::hash_elements(&elements);
52 assert_eq!(m_result, h_result);
53}
54
55#[test]
56fn hash_elements_vs_merge_in_domain() {
57 let elements = [Felt::new(rand_value()); 8];
58
59 let digests: [RpoDigest; 2] = [
60 RpoDigest::new(elements[..4].try_into().unwrap()),
61 RpoDigest::new(elements[4..].try_into().unwrap()),
62 ];
63
64 // pick a random domain value.
65 let domain = Felt::new(rand_value());
66
67 // convert the elements into a list of base field elements
68 let elements = Felt::as_base_elements(&elements);
69
70 // initialize state to all zeros.
71 let mut state = [ZERO; STATE_WIDTH];
72
73 // set the second capacity element to the domain.
74 state[CAPACITY_RANGE.start + 1] = domain;
75
76 // absorb elements into the state.
77 state[RATE_RANGE.start..RATE_RANGE.end].copy_from_slice(elements);
78
79 // apply permutation to the state.
80 Rpo256::apply_permutation(&mut state);
81
82 // return the first 4 elements of the state as hash result
83 let h_result = RpoDigest::new(state[DIGEST_RANGE].try_into().unwrap());
84
85 let m_result = Rpo256::merge_in_domain(&digests, domain);
86 assert_eq!(m_result, h_result);
87}
88
89#[test]
90fn hash_elements_vs_merge_with_int() {
91 let tmp = [Felt::new(rand_value()); 4];
92 let seed = RpoDigest::new(tmp);
93
94 // ----- value fits into a field element ------------------------------------------------------
95 let val: Felt = Felt::new(rand_value());
96 let m_result = Rpo256::merge_with_int(seed, val.as_int());
97
98 let mut elements = seed.as_elements().to_vec();
99 elements.push(val);
100 let h_result = Rpo256::hash_elements(&elements);
101
102 assert_eq!(m_result, h_result);
103
104 // ----- value does not fit into a field element ----------------------------------------------
105 let val = Felt::MODULUS + 2;
106 let m_result = Rpo256::merge_with_int(seed, val);
107
108 let mut elements = seed.as_elements().to_vec();
109 elements.push(Felt::new(val));
110 elements.push(Felt::new(1));
111 let h_result = Rpo256::hash_elements(&elements);
112
113 assert_eq!(m_result, h_result);
114}
115
116#[test]
117fn hash_padding() {
118 // adding a zero bytes at the end of a byte string should result in a different hash
119 let r1 = Rpo256::hash(&[1_u8, 2, 3]);
120 let r2 = Rpo256::hash(&[1_u8, 2, 3, 0]);
121 assert_ne!(r1, r2);
122
123 // same as above but with bigger inputs
124 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6]);
125 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 0]);
126 assert_ne!(r1, r2);
127
128 // same as above but with input splitting over two elements
129 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7]);
130 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0]);
131 assert_ne!(r1, r2);
132
133 // same as above but with multiple zeros
134 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0, 0]);
135 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0, 0, 0, 0]);
136 assert_ne!(r1, r2);
137}
138
139#[test]
140fn hash_elements_padding() {
141 let e1 = [Felt::new(rand_value()); 2];
142 let e2 = [e1[0], e1[1], ZERO];
143
144 let r1 = Rpo256::hash_elements(&e1);
145 let r2 = Rpo256::hash_elements(&e2);
146 assert_ne!(r1, r2);
147}
148
149#[test]
150fn hash_elements() {
151 let elements = [
152 Felt::new(0),
153 Felt::new(1),
154 Felt::new(2),
155 Felt::new(3),
156 Felt::new(4),
157 Felt::new(5),
158 Felt::new(6),
159 Felt::new(7),
160 ];
161
162 let digests: [RpoDigest; 2] = [
163 RpoDigest::new(elements[..4].try_into().unwrap()),
164 RpoDigest::new(elements[4..8].try_into().unwrap()),
165 ];
166
167 let m_result = Rpo256::merge(&digests);
168 let h_result = Rpo256::hash_elements(&elements);
169 assert_eq!(m_result, h_result);
170}
171
172#[test]
173fn hash_test_vectors() {
174 let elements = [
175 Felt::new(0),
176 Felt::new(1),
177 Felt::new(2),
178 Felt::new(3),
179 Felt::new(4),
180 Felt::new(5),
181 Felt::new(6),
182 Felt::new(7),
183 Felt::new(8),
184 Felt::new(9),
185 Felt::new(10),
186 Felt::new(11),
187 Felt::new(12),
188 Felt::new(13),
189 Felt::new(14),
190 Felt::new(15),
191 Felt::new(16),
192 Felt::new(17),
193 Felt::new(18),
194 ];
195
196 for i in 0..elements.len() {
197 let expected = RpoDigest::new(EXPECTED[i]);
198 let result = Rpo256::hash_elements(&elements[..(i + 1)]);
199 assert_eq!(result, expected);
200 }
201}
202
203const EXPECTED: [[Felt; 4]; 19] = [
204 [
205 Felt::new(1502364727743950833),
206 Felt::new(5880949717274681448),
207 Felt::new(162790463902224431),
208 Felt::new(6901340476773664264),
209 ],
210 [
211 Felt::new(7478710183745780580),
212 Felt::new(3308077307559720969),
213 Felt::new(3383561985796182409),
214 Felt::new(17205078494700259815),
215 ],
216 [
217 Felt::new(17439912364295172999),
218 Felt::new(17979156346142712171),
219 Felt::new(8280795511427637894),
220 Felt::new(9349844417834368814),
221 ],
222 [
223 Felt::new(5105868198472766874),
224 Felt::new(13090564195691924742),
225 Felt::new(1058904296915798891),
226 Felt::new(18379501748825152268),
227 ],
228 [
229 Felt::new(9133662113608941286),
230 Felt::new(12096627591905525991),
231 Felt::new(14963426595993304047),
232 Felt::new(13290205840019973377),
233 ],
234 [
235 Felt::new(3134262397541159485),
236 Felt::new(10106105871979362399),
237 Felt::new(138768814855329459),
238 Felt::new(15044809212457404677),
239 ],
240 [
241 Felt::new(162696376578462826),
242 Felt::new(4991300494838863586),
243 Felt::new(660346084748120605),
244 Felt::new(13179389528641752698),
245 ],
246 [
247 Felt::new(2242391899857912644),
248 Felt::new(12689382052053305418),
249 Felt::new(235236990017815546),
250 Felt::new(5046143039268215739),
251 ],
252 [
253 Felt::new(9585630502158073976),
254 Felt::new(1310051013427303477),
255 Felt::new(7491921222636097758),
256 Felt::new(9417501558995216762),
257 ],
258 [
259 Felt::new(1994394001720334744),
260 Felt::new(10866209900885216467),
261 Felt::new(13836092831163031683),
262 Felt::new(10814636682252756697),
263 ],
264 [
265 Felt::new(17486854790732826405),
266 Felt::new(17376549265955727562),
267 Felt::new(2371059831956435003),
268 Felt::new(17585704935858006533),
269 ],
270 [
271 Felt::new(11368277489137713825),
272 Felt::new(3906270146963049287),
273 Felt::new(10236262408213059745),
274 Felt::new(78552867005814007),
275 ],
276 [
277 Felt::new(17899847381280262181),
278 Felt::new(14717912805498651446),
279 Felt::new(10769146203951775298),
280 Felt::new(2774289833490417856),
281 ],
282 [
283 Felt::new(3794717687462954368),
284 Felt::new(4386865643074822822),
285 Felt::new(8854162840275334305),
286 Felt::new(7129983987107225269),
287 ],
288 [
289 Felt::new(7244773535611633983),
290 Felt::new(19359923075859320),
291 Felt::new(10898655967774994333),
292 Felt::new(9319339563065736480),
293 ],
294 [
295 Felt::new(4935426252518736883),
296 Felt::new(12584230452580950419),
297 Felt::new(8762518969632303998),
298 Felt::new(18159875708229758073),
299 ],
300 [
301 Felt::new(14871230873837295931),
302 Felt::new(11225255908868362971),
303 Felt::new(18100987641405432308),
304 Felt::new(1559244340089644233),
305 ],
306 [
307 Felt::new(8348203744950016968),
308 Felt::new(4041411241960726733),
309 Felt::new(17584743399305468057),
310 Felt::new(16836952610803537051),
311 ],
312 [
313 Felt::new(16139797453633030050),
314 Felt::new(1090233424040889412),
315 Felt::new(10770255347785669036),
316 Felt::new(16982398877290254028),
317 ],
318];