[test/crypto] Add Poly1305 python implementation

Co-authored-by: Pieter Wuille <pieter.wuille@gmail.com>

2 files changed, 105 insertions, 0 deletions

diff --git a/test/functional/test_framework/crypto/poly1305.py b/test/functional/test_framework/crypto/poly1305.py
new file mode 100644
index 0000000000..967b90254d
--- /dev/null
+++ b/test/functional/test_framework/crypto/poly1305.py
@@ -0,0 +1,104 @@
+#!/usr/bin/env python3
+# Copyright (c) 2022 The Bitcoin Core developers
+# Distributed under the MIT software license, see the accompanying
+# file COPYING or http://www.opensource.org/licenses/mit-license.php.
+
+"""Test-only implementation of Poly1305 authenticator
+
+It is designed for ease of understanding, not performance.
+
+WARNING: This code is slow and trivially vulnerable to side channel attacks. Do not use for
+anything but tests.
+"""
+
+import unittest
+
+
+class Poly1305:
+    """Class representing a running poly1305 computation."""
+    MODULUS = 2**130 - 5
+
+    def __init__(self, key):
+        self.r = int.from_bytes(key[:16], 'little') & 0xffffffc0ffffffc0ffffffc0fffffff
+        self.s = int.from_bytes(key[16:], 'little')
+
+    def tag(self, data):
+        """Compute the poly1305 tag."""
+        acc, length = 0, len(data)
+        for i in range((length + 15) // 16):
+            chunk = data[i * 16:min(length, (i + 1) * 16)]
+            val = int.from_bytes(chunk, 'little') + 256**len(chunk)
+            acc = (self.r * (acc + val)) % Poly1305.MODULUS
+        return ((acc + self.s) & 0xffffffffffffffffffffffffffffffff).to_bytes(16, 'little')
+
+
+# Test vectors from RFC7539/8439 consisting of message to be authenticated, 32 byte key and computed 16 byte tag
+POLY1305_TESTS = [
+    # RFC 7539, section 2.5.2.
+    ["43727970746f6772617068696320466f72756d2052657365617263682047726f7570",
+     "85d6be7857556d337f4452fe42d506a80103808afb0db2fd4abff6af4149f51b",
+     "a8061dc1305136c6c22b8baf0c0127a9"],
+    # RFC 7539, section A.3.
+    ["00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
+     "000000000000000000000000000",
+     "0000000000000000000000000000000000000000000000000000000000000000",
+     "00000000000000000000000000000000"],
+    ["416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e747269627"
+     "5746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465"
+     "726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686"
+     "520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e2022494554"
+     "4620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c20737461746"
+     "56d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c65"
+     "6374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207"
+     "768696368206172652061646472657373656420746f",
+     "0000000000000000000000000000000036e5f6b5c5e06070f0efca96227a863e",
+     "36e5f6b5c5e06070f0efca96227a863e"],
+    ["416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e747269627"
+     "5746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465"
+     "726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686"
+     "520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e2022494554"
+     "4620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c20737461746"
+     "56d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c65"
+     "6374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207"
+     "768696368206172652061646472657373656420746f",
+     "36e5f6b5c5e06070f0efca96227a863e00000000000000000000000000000000",
+     "f3477e7cd95417af89a6b8794c310cf0"],
+    ["2754776173206272696c6c69672c20616e642074686520736c6974687920746f7665730a446964206779726520616e6420676"
+     "96d626c6520696e2074686520776162653a0a416c6c206d696d737920776572652074686520626f726f676f7665732c0a416e"
+     "6420746865206d6f6d65207261746873206f757467726162652e",
+     "1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0",
+     "4541669a7eaaee61e708dc7cbcc5eb62"],
+    ["ffffffffffffffffffffffffffffffff",
+     "0200000000000000000000000000000000000000000000000000000000000000",
+     "03000000000000000000000000000000"],
+    ["02000000000000000000000000000000",
+     "02000000000000000000000000000000ffffffffffffffffffffffffffffffff",
+     "03000000000000000000000000000000"],
+    ["fffffffffffffffffffffffffffffffff0ffffffffffffffffffffffffffffff11000000000000000000000000000000",
+     "0100000000000000000000000000000000000000000000000000000000000000",
+     "05000000000000000000000000000000"],
+    ["fffffffffffffffffffffffffffffffffbfefefefefefefefefefefefefefefe01010101010101010101010101010101",
+     "0100000000000000000000000000000000000000000000000000000000000000",
+     "00000000000000000000000000000000"],
+    ["fdffffffffffffffffffffffffffffff",
+     "0200000000000000000000000000000000000000000000000000000000000000",
+     "faffffffffffffffffffffffffffffff"],
+    ["e33594d7505e43b900000000000000003394d7505e4379cd01000000000000000000000000000000000000000000000001000000000000000000000000000000",
+     "0100000000000000040000000000000000000000000000000000000000000000",
+     "14000000000000005500000000000000"],
+    ["e33594d7505e43b900000000000000003394d7505e4379cd010000000000000000000000000000000000000000000000",
+     "0100000000000000040000000000000000000000000000000000000000000000",
+     "13000000000000000000000000000000"],
+]
+
+
+class TestFrameworkPoly1305(unittest.TestCase):
+    def test_poly1305(self):
+        """Poly1305 test vectors."""
+        for test_vector in POLY1305_TESTS:
+            hex_message, hex_key, hex_tag = test_vector
+            message = bytes.fromhex(hex_message)
+            key = bytes.fromhex(hex_key)
+            tag = bytes.fromhex(hex_tag)
+            comp_tag = Poly1305(key).tag(message)
+            self.assertEqual(tag, comp_tag)
diff --git a/test/functional/test_runner.py b/test/functional/test_runner.py
index 97af2eb935..91d63f92f7 100755
--- a/test/functional/test_runner.py
+++ b/test/functional/test_runner.py
@@ -79,6 +79,7 @@ TEST_FRAMEWORK_MODULES = [
     "key",
     "messages",
     "crypto.muhash",
+    "crypto.poly1305",
     "crypto.ripemd160",
     "script",
     "segwit_addr",