import yaml import sys import os import subprocess import hashlib """ For a given SCHEME, this script verifies that the hash of the testvectors produced on this platform matches the one provided in the META file. """ if len(sys.argv) != 2: print("Provide a scheme name (e.g. crypto_kem/kyber768) as argv[1]") exit(1) SCHEME = sys.argv[1] SCHEMEFULL = SCHEME.replace('/', '_') # e.g. crypto_kem_kyber768 SCHEMESHORT = SCHEME.split('/')[1].upper() def get_hash(scheme): with open("{}/META.yml".format(scheme), 'r') as stream: meta = yaml.load(stream) return meta['testvectors-sha256'] expectedTestvectorsHash = get_hash(SCHEME) subprocess.run(["make", "testvectors", "SCHEME={}".format(SCHEME)]) implementations = [ x for x in os.listdir('bin') if 'testvectors' in x and SCHEMEFULL in x] for impl in implementations: testvectors = subprocess.run(["bin/{}".format(impl)], stdout=subprocess.PIPE) testvectorsHash = hashlib.sha256(testvectors.stdout).hexdigest() if testvectorsHash.lower() != expectedTestvectorsHash.lower(): print("testvectors of {} should be {}, but is {}" .format(SCHEME, expectedTestvectorsHash, testvectorsHash)) sys.exit(1) else: print("testvectors of {} matched expected hash".format(SCHEME))