test(ecies): add Java ratchet KDF vector

Author: lemon-mint

networking/internal/garlic/ecies/ratchet_test.go

@@ -3,6 +3,7 @@ package garlicecies
 import (
 	"crypto/ecdh"
 	"encoding/binary"
+	"encoding/hex"
 	"errors"
 	"testing"
 
@@ -116,22 +117,49 @@ func TestRatchetBoundNewSessionDoesNotInstallBeforeCommit(t *testing.T) {
 	}
 }
 
-func TestReplyTagUsesJavaSessionReplyTagSetKDF(t *testing.T) {
+func TestReplyTagSetKDFMatchesJavaI2P2130Vector(t *testing.T) {
+	// Generated by RatchetTagSet from the I2P 2.13.0 release router.jar
+	// using i2p.jar SHA-256 1a6f9296fcd07854dffce9c11850c2ebe75a2269aab39e2be869168c0ebc6ef7.
+	const javaData = "0665ff1f1ebfe25e4facf84840b0428296e73662ff3b77edfe4904bf7063e3fa"
+	const javaNextRoot = "f764b2c8a236502964fde33cd9d81aaf882ba2403f59c916a3e244d9ffb0f6a7"
+	javaEntries := []struct {
+		tag string
+		key string
+	}{
+		{"2698fd64096e9f0d", "59e67dac8fe352e2956bd84f911efc7b6f1933c05da05360554c88614978ca66"},
+		{"8eb1f7070dc0e53d", "f822968404d098d2030a6b93eab2a6ca9c6eac4853a471bc60b82b43011232ae"},
+		{"60c4eaee68a6ede1", "e3e860ecd0f17cc31e2b86bfe45320980e8ca183aaaf18b4050584c65697d8a0"},
+	}
 	var chain [32]byte
 	for i := range chain {
 		chain[i] = byte(i + 1)
 	}
 	data := hkdf64(chain[:], nil, "SessionReplyTags")
+	if got := hex.EncodeToString(data[:32]); got != javaData {
+		t.Fatalf("SessionReplyTags KDF = %s, want Java I2P 2.13.0 %s", got, javaData)
+	}
 	set, err := newTagSet(0, chain, data[:32], 1)
 	if err != nil {
 		t.Fatal(err)
 	}
-	entry, err := set.nextEntry()
-	if err != nil {
-		t.Fatal(err)
+	if got := hex.EncodeToString(set.nextRoot[:]); got != javaNextRoot {
+		t.Fatalf("next root = %s, want Java I2P 2.13.0 %s", got, javaNextRoot)
 	}
-	if got := deriveReplyTag(chain); got != entry.tag {
-		t.Fatalf("reply tag = %x, want Java/i2pd tagset %x", got, entry.tag)
+	reply := deriveReplyTag(chain)
+	if got := hex.EncodeToString(reply[:]); got != javaEntries[0].tag {
+		t.Fatalf("reply tag = %s, want Java I2P 2.13.0 %s", got, javaEntries[0].tag)
+	}
+	for index, want := range javaEntries {
+		entry, nextErr := set.nextEntry()
+		if nextErr != nil {
+			t.Fatal(nextErr)
+		}
+		if got := hex.EncodeToString(entry.tag[:]); got != want.tag {
+			t.Fatalf("tag %d = %s, want Java I2P 2.13.0 %s", index, got, want.tag)
+		}
+		if got := hex.EncodeToString(entry.key[:]); got != want.key {
+			t.Fatalf("key %d = %s, want Java I2P 2.13.0 %s", index, got, want.key)
+		}
 	}
 }