// Author:  cirakg & claude ai
// Summary: SHA-1/256/512 and HMAC tests against FIPS 180-4, RFC 2202, RFC 4231 and seeded padding-boundary vectors.

import Toybox.Lang;
import Toybox.Test;

// Every hash vector (FIPS 180-4 examples + messages around the padding boundaries).
(:test)
function hashMatchesVectors(logger as Test.Logger) as Boolean {
    var ok = true;
    for (var i = 0; i < TestVectors.HASH.size(); i++) {
        var r = TestSupport.row(TestVectors.HASH, i);
        var actual = Hashes.digest(TestSupport.alg(r, 0), TestSupport.bytes(r, 1));
        ok = TestSupport.sameBytes(logger, "hash vector " + i, actual, TestSupport.bytes(r, 2)) && ok;
    }
    logger.debug(TestVectors.HASH.size() + " hash vectors");
    return ok;
}

// Generic RFC 2104 HMAC for all three hashes, and the native HMAC-SHA256.
(:test)
function hmacMatchesRfcVectors(logger as Test.Logger) as Boolean {
    var ok = true;
    for (var i = 0; i < TestVectors.HMAC.size(); i++) {
        var r = TestVectors.HMAC[i] as Array;
        var alg = TestSupport.alg(r, 0);
        var key = TestSupport.bytes(r, 1);
        var data = TestSupport.bytes(r, 2);
        var expected = TestSupport.bytes(r, 3);
        ok = TestSupport.sameBytes(logger, "generic HMAC " + i, Hmac.generic(alg, key, data), expected) && ok;
        ok = TestSupport.sameBytes(logger, "HMAC " + i, Hmac.compute(alg, key, data), expected) && ok;
    }
    return ok;
}

// HMAC must not change the caller's key, even for keys longer than a block.
(:test)
function hmacLeavesKeyUntouched(logger as Test.Logger) as Boolean {
    var key = new [131]b;
    for (var i = 0; i < key.size(); i++) {
        key[i] = 0xaa;
    }
    var before = Bytes.copy(key);
    Hmac.generic(Hashes.SHA512, key, [1, 2, 3]b);
    Hmac.generic(Hashes.SHA1, key.slice(0, 20), [1, 2, 3]b);
    return Bytes.equal(key, before);
}

(:test)
function hashSizesAndValidity(logger as Test.Logger) as Boolean {
    return Hashes.digestSize(Hashes.SHA1) == 20 && Hashes.digestSize(Hashes.SHA256) == 32
        && Hashes.digestSize(Hashes.SHA512) == 64 && Hashes.blockSize(Hashes.SHA512) == 128
        && Hashes.blockSize(Hashes.SHA1) == 64 && Hashes.isValid(2) && !Hashes.isValid(3) && !Hashes.isValid(-1);
}