Testing suite

rustc:

orion is always tested with the latest stable and nightly Rust versions.

Official test vectors:

• HMAC: RFC 4231
• cSHAKE: KeccakCodePackage
• ChaCha20: RFC 8439
• Poly1305: RFC 8439
• ChaCha20Poly1305: RFC 8439

Custom test vectors:

• PBKDF2: These test vectors have been generated with the cryptography.io Python package. More information here.
• HKDF: Test vectors from here. Other test vectors from here.

Other test vectors:

• Poly1305: Monocypher test vectors. OpenSSL test vectors for Poly1305 that ring uses.
• ChaCha20: BoringSSL test vectors.
• ChaCha20Poly1305: BoringSSL test vectors. Wycheproof test vectors.
• HChaCha20: Monocypher test vectors.
• XChaCha20: draft RFC test vectors.
• XChaCha20Poly1305: sodiumoxide test vectors. BoringSSL test vectors.

Fuzzing

orion is fuzzed using libFuzzer through cargo-fuzz. Fuzzing is done both to detect unwanted behavior but also verify results. Below is a list of other libraries that are used to cross-check the results that orion produces:

• HMAC: ring.
• HKDF: ring.
• PBKDF2: ring.
• cSHAKE: sp800-185.
• Poly1305: rust-crypto.
• ChaCha20: chacha.
• ChaCha20Poly1305: ring.
• HChaCha20: None currently.
• XChaCha20: chacha.
• XChaCha20Poly1305: None currently.