06c877ec86
- Integrated `zupt_mac_verify_ct` in `zupt_decrypt_buffer()` to replace C XOR loop for HMAC-SHA256 - Integrated `zupt_ct_select_32` in `zupt_mlkem768_decaps()` to replace C `cmov()` for FO transformation - Added `include/zupt_jasmin.h` with extern declarations and ABI docs - Added `#ifdef ZUPT_USE_JASMIN` guards with clean C fallbacks in `zupt_crypto.c` and `zupt_mlkem.c` - Makefile now auto-detects `jasmin/*.s`, assembles and links with `-DZUPT_USE_JASMIN` Closes #3
48 lines
3 KiB
Shell
48 lines
3 KiB
Shell
#!/bin/sh
|
|
set +e
|
|
ZUPT="${1:-./zupt}"
|
|
T="/tmp/zupt_pq_$$"; mkdir -p "$T/data"
|
|
trap 'rm -rf "$T"' EXIT
|
|
echo "Hello PQ World!" > "$T/data/hello.txt"
|
|
dd if=/dev/urandom bs=1024 count=50 of="$T/data/rand.bin" 2>/dev/null
|
|
yes "PQ test " | head -c 100000 > "$T/data/repeat.txt"
|
|
touch "$T/data/empty.txt"
|
|
cp "$ZUPT" "$T/data/elf.bin"
|
|
PASS=0; FAIL=0
|
|
pass() { echo " OK: $1"; PASS=$((PASS+1)); }
|
|
fail() { echo " FAIL: $1"; FAIL=$((FAIL+1)); }
|
|
echo "═══════════════════════════════════════"
|
|
echo " PQ Hybrid Encryption Tests"
|
|
echo "═══════════════════════════════════════"
|
|
$ZUPT keygen -o "$T/priv.key" 2>/dev/null; [ -f "$T/priv.key" ] && pass "keygen" || fail "keygen"
|
|
$ZUPT keygen --pub -o "$T/pub.key" -k "$T/priv.key" 2>/dev/null; [ -f "$T/pub.key" ] && pass "pubkey export" || fail "pubkey export"
|
|
PS=$(stat -c%s "$T/priv.key" 2>/dev/null); PP=$(stat -c%s "$T/pub.key" 2>/dev/null)
|
|
[ "$PS" = "3664" ] && [ "$PP" = "1232" ] && pass "key sizes" || fail "key sizes"
|
|
$ZUPT compress --pq "$T/pub.key" "$T/pq.zupt" "$T/data/" 2>/dev/null; [ -f "$T/pq.zupt" ] && pass "PQ compress" || fail "PQ compress"
|
|
$ZUPT extract --pq "$T/priv.key" -o "$T/pq_out" "$T/pq.zupt" 2>/dev/null
|
|
B=0; for f in hello.txt rand.bin repeat.txt empty.txt elf.bin; do
|
|
E=$(find "$T/pq_out" -name "$f" -type f 2>/dev/null|head -1)
|
|
[ -z "$E" ]||! diff -q "$T/data/$f" "$E" >/dev/null 2>&1 && B=$((B+1))
|
|
done; [ "$B" -eq 0 ] && pass "PQ round-trip (5 files)" || fail "PQ round-trip ($B mismatches)"
|
|
R=$($ZUPT test --pq "$T/priv.key" "$T/pq.zupt" 2>&1)
|
|
echo "$R"|grep -q "0 failed" && pass "PQ integrity" || fail "PQ integrity"
|
|
$ZUPT keygen -o "$T/wrong.key" 2>/dev/null
|
|
$ZUPT extract --pq "$T/wrong.key" -o "$T/bad" "$T/pq.zupt" 2>/dev/null
|
|
[ $? -ne 0 ] && pass "Wrong key rejected" || fail "Wrong key NOT rejected"
|
|
$ZUPT compress -p "pw" "$T/pw.zupt" "$T/data/" 2>/dev/null
|
|
$ZUPT extract -o "$T/pw_out" -p "pw" "$T/pw.zupt" 2>/dev/null
|
|
E=$(find "$T/pw_out" -name "hello.txt" -type f|head -1)
|
|
[ -n "$E" ] && diff -q "$T/data/hello.txt" "$E" >/dev/null 2>&1 && pass "Password backward compat" || fail "Password broken"
|
|
$ZUPT compress -t 4 --pq "$T/pub.key" "$T/mt.zupt" "$T/data/" 2>/dev/null
|
|
$ZUPT extract --pq "$T/priv.key" -o "$T/mt_out" "$T/mt.zupt" 2>/dev/null
|
|
B=0; for f in hello.txt rand.bin repeat.txt; do
|
|
E=$(find "$T/mt_out" -name "$f" -type f 2>/dev/null|head -1)
|
|
[ -z "$E" ]||! diff -q "$T/data/$f" "$E" >/dev/null 2>&1 && B=$((B+1))
|
|
done; [ "$B" -eq 0 ] && pass "PQ+MT round-trip" || fail "PQ+MT ($B mismatches)"
|
|
yes "Large PQ " | head -c 2000000 > "$T/large.txt"
|
|
$ZUPT compress --pq "$T/pub.key" "$T/lg.zupt" "$T/large.txt" 2>/dev/null
|
|
$ZUPT extract --pq "$T/priv.key" -o "$T/lg_out" "$T/lg.zupt" 2>/dev/null
|
|
E=$(find "$T/lg_out" -name "large.txt" -type f|head -1)
|
|
[ -n "$E" ] && diff -q "$T/large.txt" "$E" >/dev/null 2>&1 && pass "PQ large (2MB)" || fail "PQ large"
|
|
echo ""; echo " PQ RESULTS: $PASS passed, $FAIL failed"
|
|
[ "$FAIL" -eq 0 ] && exit 0 || exit 1
|