test one-shot HMAC-BLAKE2

picnixz · picnixz · commit 96971589ab17 · 2025-04-12T12:32:16.000+02:00
diff --git a/Lib/test/test_hmac.py b/Lib/test/test_hmac.py
@@ -10,7 +10,7 @@
 import warnings
 from _operator import _compare_digest as operator_compare_digest
 from test.support import check_disallow_instantiation
-from test.support.import_helper import import_fresh_module
+from test.support.import_helper import import_fresh_module, import_module
 
 try:
     import _hashlib
@@ -1007,7 +1007,7 @@ def test_hmac_digest_digestmod_parameter(self):
             with (
                 self.subTest(value=value),
                 self.assert_raises_unknown_digestmod(),
-          ):
+            ):
                 self.hmac_digest(b'key', b'msg', value)
 
 
@@ -1453,5 +1453,36 @@ def test_with_fallback(self):
             cache.pop('foo')
 
 
+class BuiiltinMiscellaneousTests(BuiltinModuleMixin, unittest.TestCase):
+    """HMAC-BLAKE2 is not standardized as BLAKE2 is a keyed hash function.
+
+    In particular, there is no official test vectors for HMAC-BLAKE2.
+    However, we can test that the HACL* interface is correctly used by
+    checking against the pure Python implementation output.
+    """
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.blake2 = blake2 = import_module("_blake2")
+        cls.blake2b = blake2.blake2b
+        cls.blake2s = blake2.blake2s
+
+    def assert_hmac_blake_correctness(self, digest, key, msg, hashfunc):
+        self.assertIsInstance(digest, bytes)
+        expect = hmac._compute_digest_fallback(key, msg, hashfunc)
+        self.assertEqual(digest, expect)
+
+    def test_compute_blake2b_32(self):
+        key, msg = random.randbytes(8), random.randbytes(16)
+        digest = self.hmac.compute_blake2b_32(key, msg)
+        self.assert_hmac_blake_correctness(digest, key, msg, self.blake2b)
+
+    def test_compute_blake2s_32(self):
+        key, msg = random.randbytes(8), random.randbytes(16)
+        digest = self.hmac.compute_blake2s_32(key, msg)
+        self.assert_hmac_blake_correctness(digest, key, msg, self.blake2s)
+
+
 if __name__ == "__main__":
     unittest.main()
