// Copyright 2012 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

package salsa20

import (
	"bytes"
	"encoding/hex"
	"testing"
)

func fromHex(s string) []byte {
	ret, err := hex.DecodeString(s)
	if err != nil {
		panic(err)
	}
	return ret
}

// testVectors was taken from set 6 of the ECRYPT test vectors:
// http://www.ecrypt.eu.org/stream/svn/viewcvs.cgi/ecrypt/trunk/submissions/salsa20/full/verified.test-vectors?logsort=rev&rev=210&view=markup
var testVectors = []struct {
	key      []byte
	iv       []byte
	numBytes int
	xor      []byte
}{
	{
		fromHex("0053A6F94C9FF24598EB3E91E4378ADD3083D6297CCF2275C81B6EC11467BA0D"),
		fromHex("0D74DB42A91077DE"),
		131072,
		fromHex("C349B6A51A3EC9B712EAED3F90D8BCEE69B7628645F251A996F55260C62EF31FD6C6B0AEA94E136C9D984AD2DF3578F78E457527B03A0450580DD874F63B1AB9"),
	},
	{
		fromHex("0558ABFE51A4F74A9DF04396E93C8FE23588DB2E81D4277ACD2073C6196CBF12"),
		fromHex("167DE44BB21980E7"),
		131072,
		fromHex("C3EAAF32836BACE32D04E1124231EF47E101367D6305413A0EEB07C60698A2876E4D031870A739D6FFDDD208597AFF0A47AC17EDB0167DD67EBA84F1883D4DFD"),
	},
	{
		fromHex("0A5DB00356A9FC4FA2F5489BEE4194E73A8DE03386D92C7FD22578CB1E71C417"),
		fromHex("1F86ED54BB2289F0"),
		131072,
		fromHex("3CD23C3DC90201ACC0CF49B440B6C417F0DC8D8410A716D5314C059E14B1A8D9A9FB8EA3D9C8DAE12B21402F674AA95C67B1FC514E994C9D3F3A6E41DFF5BBA6"),
	},
	{
		fromHex("0F62B5085BAE0154A7FA4DA0F34699EC3F92E5388BDE3184D72A7DD02376C91C"),
		fromHex("288FF65DC42B92F9"),
		131072,
		fromHex("E00EBCCD70D69152725F9987982178A2E2E139C7BCBE04CA8A0E99E318D9AB76F988C8549F75ADD790BA4F81C176DA653C1A043F11A958E169B6D2319F4EEC1A"),
	},
}

func TestSalsa20(t *testing.T) {
	var inBuf, outBuf []byte
	var key [32]byte

	for i, test := range testVectors {
		if test.numBytes%64 != 0 {
			t.Errorf("#%d: numBytes is not a multiple of 64", i)
			continue
		}

		if test.numBytes > len(inBuf) {
			inBuf = make([]byte, test.numBytes)
			outBuf = make([]byte, test.numBytes)
		}
		in := inBuf[:test.numBytes]
		out := outBuf[:test.numBytes]
		copy(key[:], test.key)
		XORKeyStream(out, in, test.iv, &key)

		var xor [64]byte
		for len(out) > 0 {
			for i := 0; i < 64; i++ {
				xor[i] ^= out[i]
			}
			out = out[64:]
		}

		if !bytes.Equal(xor[:], test.xor) {
			t.Errorf("#%d: bad result", i)
		}
	}
}

var xSalsa20TestData = []struct {
	in, nonce, key, out []byte
}{
	{
		[]byte("Hello world!"),
		[]byte("24-byte nonce for xsalsa"),
		[]byte("this is 32-byte key for xsalsa20"),
		[]byte{0x00, 0x2d, 0x45, 0x13, 0x84, 0x3f, 0xc2, 0x40, 0xc4, 0x01, 0xe5, 0x41},
	},
	{
		make([]byte, 64),
		[]byte("24-byte nonce for xsalsa"),
		[]byte("this is 32-byte key for xsalsa20"),
		[]byte{0x48, 0x48, 0x29, 0x7f, 0xeb, 0x1f, 0xb5, 0x2f, 0xb6,
			0x6d, 0x81, 0x60, 0x9b, 0xd5, 0x47, 0xfa, 0xbc, 0xbe, 0x70,
			0x26, 0xed, 0xc8, 0xb5, 0xe5, 0xe4, 0x49, 0xd0, 0x88, 0xbf,
			0xa6, 0x9c, 0x08, 0x8f, 0x5d, 0x8d, 0xa1, 0xd7, 0x91, 0x26,
			0x7c, 0x2c, 0x19, 0x5a, 0x7f, 0x8c, 0xae, 0x9c, 0x4b, 0x40,
			0x50, 0xd0, 0x8c, 0xe6, 0xd3, 0xa1, 0x51, 0xec, 0x26, 0x5f,
			0x3a, 0x58, 0xe4, 0x76, 0x48},
	},
}

func TestXSalsa20(t *testing.T) {
	var key [32]byte

	for i, test := range xSalsa20TestData {
		out := make([]byte, len(test.in))
		copy(key[:], test.key)
		XORKeyStream(out, test.in, test.nonce, &key)
		if !bytes.Equal(out, test.out) {
			t.Errorf("%d: expected %x, got %x", i, test.out, out)
		}
	}
}

var (
	keyArray [32]byte
	key      = &keyArray
	nonce    [8]byte
	msg      = make([]byte, 1<<10)
)

func BenchmarkXOR1K(b *testing.B) {
	b.StopTimer()
	out := make([]byte, 1024)
	b.StartTimer()
	for i := 0; i < b.N; i++ {
		XORKeyStream(out, msg[:1024], nonce[:], key)
	}
	b.SetBytes(1024)
}