test(ecies): add Java AttachPayload vectors

Author: lemon-mint

networking/internal/garlic/ecies/handshake_test.go

@@ -13,26 +13,49 @@ import (
 	"gosuda.org/ivnp/cryptography"
 )
 
-func TestAttachPayloadKDFMatchesJavaVector(t *testing.T) {
-	split := make([]byte, 32)
-	for i := range split {
-		split[i] = byte(i)
-	}
-	cipher, err := cryptography.NewChaCha20Poly1305(split)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer cipher.ReleaseSensitive()
-	got, err := deriveAttachPayloadKey(cipher)
-	if err != nil {
-		t.Fatal(err)
-	}
-	want, err := hex.DecodeString("0333819bc5348a00a62852e4c3bfe7f773364cfe3952e439c4cb4644bb0ca0f1")
-	if err != nil {
-		t.Fatal(err)
-	}
-	if !bytes.Equal(got[:], want) {
-		t.Fatalf("AttachPayloadKDF = %x, want Java HKDF %x", got, want)
+func TestAttachPayloadKDFMatchesJavaI2P2130Vectors(t *testing.T) {
+	// Generated by net.i2p.crypto.HKDF.calculate() from the I2P 2.13.0 release
+	// i2p.jar (SHA-256 1a6f9296fcd07854dffce9c11850c2ebe75a2269aab39e2be869168c0ebc6ef7).
+	vectors := []struct {
+		split string
+		want  string
+	}{
+		{
+			split: "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
+			want:  "0333819bc5348a00a62852e4c3bfe7f773364cfe3952e439c4cb4644bb0ca0f1",
+		},
+		{
+			split: "fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0efeeedecebeae9e8e7e6e5e4e3e2e1e0",
+			want:  "3fbd6e8f20301f80aa0b1aeae35dff9d3b2f5a6a3e6ba99a3efc71ad82688f8b",
+		},
+		{
+			split: "0b30557a9fc4e90e33587da2c7ec11365b80a5caef14395e83a8cdf2173c6186",
+			want:  "008c8bad17e889b04968a0e59f9e03defe786e63d4d24ad19a3c399b984b7e17",
+		},
+	}
+	for _, vector := range vectors {
+		t.Run(vector.split[:8], func(t *testing.T) {
+			split, err := hex.DecodeString(vector.split)
+			if err != nil {
+				t.Fatal(err)
+			}
+			want, err := hex.DecodeString(vector.want)
+			if err != nil {
+				t.Fatal(err)
+			}
+			cipher, err := cryptography.NewChaCha20Poly1305(split)
+			if err != nil {
+				t.Fatal(err)
+			}
+			defer cipher.ReleaseSensitive()
+			got, err := deriveAttachPayloadKey(cipher)
+			if err != nil {
+				t.Fatal(err)
+			}
+			if !bytes.Equal(got[:], want) {
+				t.Fatalf("AttachPayloadKDF = %x, want Java I2P 2.13.0 %x", got, want)
+			}
+		})
 	}
 }