otpGarmin/source/crypto/SelfTest.mc, branch v0.2.0OTP Wallet for Garmin Connect IQ: offline one-time passwords and barcodes.https://git.cirakg.xyz/otpGarmin/atom?h=v0.2.02026-10-18T21:44:18+00:00feat(crypto): add SHA-512, HMAC, PBKDF2, HKDF, AES-256 records and self-test2026-10-18T21:44:18+00:00cirakgcirakg@cirakg.xyz2026-10-18T21:44:18+00:00urn:sha1:e47ae684101981a7c20f3270994a61944059c825
- Sha512: FIPS 180-4 in Monkey C (no native SHA-512), rotations inlined
with precomputed masks; constants derived from the primes, not typed.
- Hmac: RFC 2104 over SHA-1/256/512 (native HMAC only supports SHA-256).
- Kdf: resumable PBKDF2-HMAC-SHA256 job with calibration bounds
(2,000-200,000 iterations) and HKDF-SHA256.
- Aes: CBC with PKCS#7 over the native cipher; AES-256 chosen.
- SealedBox: encrypt-then-MAC records (HKDF-split keys, length-prefixed
aad, constant-time tag check before decryption).
- SelfTest: known-answer tests for every primitive at start-up.
- Bytes (wipe, constant-time equal), Clock (2038-safe widening, trusted
clock), Jobs (bounded steps against the watchdog, timer runner).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>