Testing suite

Rust version:

orion is always tested with the latest stable and nightly Rust versions.

Official test vectors:

• HMAC: RFC 4231.
• cSHAKE: KeccakCodePackage.
• ChaCha20: RFC 8439.
• Poly1305: RFC 8439.
• ChaCha20Poly1305: RFC 8439.

Custom test vectors:

• PBKDF2: These test vectors have been generated with the cryptography.io Python package. More information here.
• HKDF: Test vectors from here. Other test vectors from here.

Other test vectors:

• Poly1305: [Monocypher]((https://github.com/LoupVaillant/Monocypher/blob/master/tests/vectors/poly1305) test vectors. OpenSSL test vectors that ring uses.
• ChaCha20: BoringSSL test vectors.
• ChaCha20Poly1305: BoringSSL test vectors. Wycheproof test vectors.
• HChaCha20: Monocypher test vectors.
• XChaCha20: draft RFC test vectors.
• XChaCha20Poly1305: sodiumoxide test vectors. BoringSSL test vectors.

Fuzzing

orion is fuzzed using libFuzzer through cargo-fuzz. Fuzzing is done both to detect unwanted behavior but also verify results. Below is a list of other libraries that are used to cross-check the results that orion produces:

• HMAC: ring.
• HKDF: ring.
• PBKDF2: ring.
• cSHAKE: sp800-185.
• Poly1305: rust-crypto.
• ChaCha20: chacha.
• ChaCha20Poly1305: ring.
• HChaCha20: None currently.
• XChaCha20: chacha.
• XChaCha20Poly1305: None currently.