miden-crypto/src/hash/rpo/tests.rs
src/hash/rpo/tests.rsRaw
1use super::{
2 Felt, FieldElement, Hasher, Rpo256, RpoDigest, StarkField, ALPHA, INV_ALPHA, STATE_WIDTH, ZERO,
3};
4use core::convert::TryInto;
5use rand_utils::rand_value;
6
7#[test]
8fn test_alphas() {
9 let e: Felt = Felt::new(rand_value());
10 let e_exp = e.exp(ALPHA);
11 assert_eq!(e, e_exp.exp(INV_ALPHA));
12}
13
14#[test]
15fn test_sbox() {
16 let state = [Felt::new(rand_value()); STATE_WIDTH];
17
18 let mut expected = state;
19 expected.iter_mut().for_each(|v| *v = v.exp(ALPHA));
20
21 let mut actual = state;
22 Rpo256::apply_sbox(&mut actual);
23
24 assert_eq!(expected, actual);
25}
26
27#[test]
28fn test_inv_sbox() {
29 let state = [Felt::new(rand_value()); STATE_WIDTH];
30
31 let mut expected = state;
32 expected.iter_mut().for_each(|v| *v = v.exp(INV_ALPHA));
33
34 let mut actual = state;
35 Rpo256::apply_inv_sbox(&mut actual);
36
37 assert_eq!(expected, actual);
38}
39
40#[test]
41fn hash_elements_vs_merge() {
42 let elements = [Felt::new(rand_value()); 8];
43
44 let digests: [RpoDigest; 2] = [
45 RpoDigest::new(elements[..4].try_into().unwrap()),
46 RpoDigest::new(elements[4..].try_into().unwrap()),
47 ];
48
49 let m_result = Rpo256::merge(&digests);
50 let h_result = Rpo256::hash_elements(&elements);
51 assert_eq!(m_result, h_result);
52}
53
54#[test]
55fn hash_elements_vs_merge_with_int() {
56 let tmp = [Felt::new(rand_value()); 4];
57 let seed = RpoDigest::new(tmp);
58
59 // ----- value fits into a field element ------------------------------------------------------
60 let val: Felt = Felt::new(rand_value());
61 let m_result = Rpo256::merge_with_int(seed, val.as_int());
62
63 let mut elements = seed.as_elements().to_vec();
64 elements.push(val);
65 let h_result = Rpo256::hash_elements(&elements);
66
67 assert_eq!(m_result, h_result);
68
69 // ----- value does not fit into a field element ----------------------------------------------
70 let val = Felt::MODULUS + 2;
71 let m_result = Rpo256::merge_with_int(seed, val);
72
73 let mut elements = seed.as_elements().to_vec();
74 elements.push(Felt::new(val));
75 elements.push(Felt::new(1));
76 let h_result = Rpo256::hash_elements(&elements);
77
78 assert_eq!(m_result, h_result);
79}
80
81#[test]
82fn hash_padding() {
83 // adding a zero bytes at the end of a byte string should result in a different hash
84 let r1 = Rpo256::hash(&[1_u8, 2, 3]);
85 let r2 = Rpo256::hash(&[1_u8, 2, 3, 0]);
86 assert_ne!(r1, r2);
87
88 // same as above but with bigger inputs
89 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6]);
90 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 0]);
91 assert_ne!(r1, r2);
92
93 // same as above but with input splitting over two elements
94 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7]);
95 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0]);
96 assert_ne!(r1, r2);
97
98 // same as above but with multiple zeros
99 let r1 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0, 0]);
100 let r2 = Rpo256::hash(&[1_u8, 2, 3, 4, 5, 6, 7, 0, 0, 0, 0]);
101 assert_ne!(r1, r2);
102}
103
104#[test]
105fn hash_elements_padding() {
106 let e1 = [Felt::new(rand_value()); 2];
107 let e2 = [e1[0], e1[1], ZERO];
108
109 let r1 = Rpo256::hash_elements(&e1);
110 let r2 = Rpo256::hash_elements(&e2);
111 assert_ne!(r1, r2);
112}
113
114#[test]
115fn hash_elements() {
116 let elements = [
117 Felt::new(0),
118 Felt::new(1),
119 Felt::new(2),
120 Felt::new(3),
121 Felt::new(4),
122 Felt::new(5),
123 Felt::new(6),
124 Felt::new(7),
125 ];
126
127 let digests: [RpoDigest; 2] = [
128 RpoDigest::new(elements[..4].try_into().unwrap()),
129 RpoDigest::new(elements[4..8].try_into().unwrap()),
130 ];
131
132 let m_result = Rpo256::merge(&digests);
133 let h_result = Rpo256::hash_elements(&elements);
134 assert_eq!(m_result, h_result);
135}
136
137#[test]
138fn hash_test_vectors() {
139 let elements = [
140 Felt::new(0),
141 Felt::new(1),
142 Felt::new(2),
143 Felt::new(3),
144 Felt::new(4),
145 Felt::new(5),
146 Felt::new(6),
147 Felt::new(7),
148 Felt::new(8),
149 Felt::new(9),
150 Felt::new(10),
151 Felt::new(11),
152 Felt::new(12),
153 Felt::new(13),
154 Felt::new(14),
155 Felt::new(15),
156 Felt::new(16),
157 Felt::new(17),
158 Felt::new(18),
159 ];
160
161 for i in 0..elements.len() {
162 let expected = RpoDigest::new(EXPECTED[i]);
163 let result = Rpo256::hash_elements(&elements[..(i + 1)]);
164 assert_eq!(result, expected);
165 }
166}
167
168const EXPECTED: [[Felt; 4]; 19] = [
169 [
170 Felt::new(1502364727743950833),
171 Felt::new(5880949717274681448),
172 Felt::new(162790463902224431),
173 Felt::new(6901340476773664264),
174 ],
175 [
176 Felt::new(7478710183745780580),
177 Felt::new(3308077307559720969),
178 Felt::new(3383561985796182409),
179 Felt::new(17205078494700259815),
180 ],
181 [
182 Felt::new(17439912364295172999),
183 Felt::new(17979156346142712171),
184 Felt::new(8280795511427637894),
185 Felt::new(9349844417834368814),
186 ],
187 [
188 Felt::new(5105868198472766874),
189 Felt::new(13090564195691924742),
190 Felt::new(1058904296915798891),
191 Felt::new(18379501748825152268),
192 ],
193 [
194 Felt::new(9133662113608941286),
195 Felt::new(12096627591905525991),
196 Felt::new(14963426595993304047),
197 Felt::new(13290205840019973377),
198 ],
199 [
200 Felt::new(3134262397541159485),
201 Felt::new(10106105871979362399),
202 Felt::new(138768814855329459),
203 Felt::new(15044809212457404677),
204 ],
205 [
206 Felt::new(162696376578462826),
207 Felt::new(4991300494838863586),
208 Felt::new(660346084748120605),
209 Felt::new(13179389528641752698),
210 ],
211 [
212 Felt::new(2242391899857912644),
213 Felt::new(12689382052053305418),
214 Felt::new(235236990017815546),
215 Felt::new(5046143039268215739),
216 ],
217 [
218 Felt::new(9585630502158073976),
219 Felt::new(1310051013427303477),
220 Felt::new(7491921222636097758),
221 Felt::new(9417501558995216762),
222 ],
223 [
224 Felt::new(1994394001720334744),
225 Felt::new(10866209900885216467),
226 Felt::new(13836092831163031683),
227 Felt::new(10814636682252756697),
228 ],
229 [
230 Felt::new(17486854790732826405),
231 Felt::new(17376549265955727562),
232 Felt::new(2371059831956435003),
233 Felt::new(17585704935858006533),
234 ],
235 [
236 Felt::new(11368277489137713825),
237 Felt::new(3906270146963049287),
238 Felt::new(10236262408213059745),
239 Felt::new(78552867005814007),
240 ],
241 [
242 Felt::new(17899847381280262181),
243 Felt::new(14717912805498651446),
244 Felt::new(10769146203951775298),
245 Felt::new(2774289833490417856),
246 ],
247 [
248 Felt::new(3794717687462954368),
249 Felt::new(4386865643074822822),
250 Felt::new(8854162840275334305),
251 Felt::new(7129983987107225269),
252 ],
253 [
254 Felt::new(7244773535611633983),
255 Felt::new(19359923075859320),
256 Felt::new(10898655967774994333),
257 Felt::new(9319339563065736480),
258 ],
259 [
260 Felt::new(4935426252518736883),
261 Felt::new(12584230452580950419),
262 Felt::new(8762518969632303998),
263 Felt::new(18159875708229758073),
264 ],
265 [
266 Felt::new(14871230873837295931),
267 Felt::new(11225255908868362971),
268 Felt::new(18100987641405432308),
269 Felt::new(1559244340089644233),
270 ],
271 [
272 Felt::new(8348203744950016968),
273 Felt::new(4041411241960726733),
274 Felt::new(17584743399305468057),
275 Felt::new(16836952610803537051),
276 ],
277 [
278 Felt::new(16139797453633030050),
279 Felt::new(1090233424040889412),
280 Felt::new(10770255347785669036),
281 Felt::new(16982398877290254028),
282 ],
283];