gh-131402: add HMAC-SHA3 NIST test cases (#131407)

Add NIST [1] tests for `HMAC-SHA-3/{224,256,384,512}`.

[1]: https://csrc.nist.gov/Projects/cryptographic-standards-and-guidelines/example-values

Lib/test/test_hmac.py

@@ -341,12 +341,15 @@ class HashFunctionsTrait:
     ALGORITHMS = [
         'md5', 'sha1',
         'sha224', 'sha256', 'sha384', 'sha512',
+        'sha3_224', 'sha3_256', 'sha3_384', 'sha3_512',
     ]
 
     # By default, a missing algorithm skips the test that uses it.
-    md5 = sha1 = sha224 = sha256 = sha384 = sha512 = property(
+    _ = property(lambda self: self.skipTest("missing hash function"))
-        lambda self: self.skipTest("missing hash function")
+    md5 = sha1 = _
-    )
+    sha224 = sha256 = sha384 = sha512 = _
+    sha3_224 = sha3_256 = sha3_384 = sha3_512 = _
+    del _
 
 
 class WithOpenSSLHashFunctions(HashFunctionsTrait):
@@ -375,16 +378,23 @@ class WithNamedHashFunctions(HashFunctionsTrait):
             setattr(cls, name, name)
 
 
-class RFCTestCaseMixin(HashFunctionsTrait):
+class RFCTestCaseMixin(AssertersMixin, HashFunctionsTrait):
-    """Test HMAC implementations against test vectors from the RFC."""
+    """Test HMAC implementations against RFC 2202/4231 and NIST test vectors.
 
-    def test_md5(self):
+    - Test vectors for MD5 and SHA-1 are taken from RFC 2202.
+    - Test vectors for SHA-2 are taken from RFC 4231.
+    - Test vectors for SHA-3 are NIST's test vectors [1].
+
+    [1] https://csrc.nist.gov/projects/message-authentication-codes
+    """
+
+    def test_md5_rfc2202(self):
         def md5test(key, msg, hexdigest):
             self.assert_hmac(key, msg, hexdigest, self.md5, "md5", 16, 64)
 
         md5test(b"\x0b" * 16,
                 b"Hi There",
-                "9294727A3638BB1C13F48EF8158BFC9D")
+                "9294727a3638bb1c13f48ef8158bfc9d")
 
         md5test(b"Jefe",
                 b"what do ya want for nothing?",
@@ -411,7 +421,7 @@ class RFCTestCaseMixin(HashFunctionsTrait):
                  b"and Larger Than One Block-Size Data"),
                 "6f630fad67cda0ee1fb1f562db3aa53e")
 
-    def test_sha1(self):
+    def test_sha1_rfc2202(self):
         def shatest(key, msg, hexdigest):
             self.assert_hmac(key, msg, hexdigest, self.sha1, "sha1", 20, 64)
 
@@ -457,11 +467,11 @@ class RFCTestCaseMixin(HashFunctionsTrait):
         self._test_sha2_rfc4231(self.sha512, 'sha512', 64, 128)
 
     def _test_sha2_rfc4231(self, hashfunc, hashname, digest_size, block_size):
-        def hmactest(key, data, hexdigests):
+        def hmactest(key, msg, hexdigests):
             hexdigest = hexdigests[hashname]
 
             self.assert_hmac(
-                key, data, hexdigest,
+                key, msg, hexdigest,
                 hashfunc=hashfunc,
                 hashname=hashname,
                 digest_size=digest_size,
@@ -470,7 +480,7 @@ class RFCTestCaseMixin(HashFunctionsTrait):
 
         # 4.2.  Test Case 1
         hmactest(key=b'\x0b' * 20,
-                 data=b'Hi There',
+                 msg=b'Hi There',
                  hexdigests={
                      'sha224': '896fb1128abbdf196832107cd49df33f'
                                '47b4b1169912ba4f53684b22',
@@ -487,7 +497,7 @@ class RFCTestCaseMixin(HashFunctionsTrait):
 
         # 4.3.  Test Case 2
         hmactest(key=b'Jefe',
-                 data=b'what do ya want for nothing?',
+                 msg=b'what do ya want for nothing?',
                  hexdigests={
                      'sha224': 'a30e01098bc6dbbf45690f3a7e9e6d0f'
                                '8bbea2a39e6148008fd05e44',
@@ -504,7 +514,7 @@ class RFCTestCaseMixin(HashFunctionsTrait):
 
         # 4.4.  Test Case 3
         hmactest(key=b'\xaa' * 20,
-                 data=b'\xdd' * 50,
+                 msg=b'\xdd' * 50,
                  hexdigests={
                      'sha224': '7fb3cb3588c6c1f6ffa9694d7d6ad264'
                                '9365b0c1f65d69d1ec8333ea',
@@ -521,7 +531,7 @@ class RFCTestCaseMixin(HashFunctionsTrait):
 
         # 4.5.  Test Case 4
         hmactest(key=bytes(x for x in range(0x01, 0x19 + 1)),
-                 data=b'\xcd' * 50,
+                 msg=b'\xcd' * 50,
                  hexdigests={
                      'sha224': '6c11506874013cac6a2abc1bb382627c'
                                'ec6a90d86efc012de7afec5a',
@@ -538,7 +548,7 @@ class RFCTestCaseMixin(HashFunctionsTrait):
 
         # 4.7.  Test Case 6
         hmactest(key=b'\xaa' * 131,
-                 data=b'Test Using Larger Than Block-Siz'
+                 msg=b'Test Using Larger Than Block-Siz'
                      b'e Key - Hash Key First',
                  hexdigests={
                      'sha224': '95e9a0db962095adaebe9b2d6f0dbce2'
@@ -556,7 +566,7 @@ class RFCTestCaseMixin(HashFunctionsTrait):
 
         # 4.8.  Test Case 7
         hmactest(key=b'\xaa' * 131,
-                 data=b'This is a test using a larger th'
+                 msg=b'This is a test using a larger th'
                      b'an block-size key and a larger t'
                      b'han block-size data. The key nee'
                      b'ds to be hashed before being use'
@@ -575,6 +585,112 @@ class RFCTestCaseMixin(HashFunctionsTrait):
                                '134676fb6de0446065c97440fa8c6a58',
                  })
 
+    def test_sha3_224_nist(self):
+        for key, msg, hexdigest in [
+            (
+                bytes(range(28)),
+                b'Sample message for keylen<blocklen',
+                '332cfd59347fdb8e576e77260be4aba2d6dc53117b3bfb52c6d18c04'
+            ), (
+                bytes(range(144)),
+                b'Sample message for keylen=blocklen',
+                'd8b733bcf66c644a12323d564e24dcf3fc75f231f3b67968359100c7'
+            ), (
+                bytes(range(172)),
+                b'Sample message for keylen>blocklen',
+                '078695eecc227c636ad31d063a15dd05a7e819a66ec6d8de1e193e59'
+            )
+        ]:
+            self.assert_hmac(
+                key, msg, hexdigest,
+                hashfunc=self.sha3_224, hashname='sha3_224',
+                digest_size=28, block_size=144
+            )
+
+    def test_sha3_256_nist(self):
+        for key, msg, hexdigest in [
+            (
+                bytes(range(32)),
+                b'Sample message for keylen<blocklen',
+                '4fe8e202c4f058e8dddc23d8c34e4673'
+                '43e23555e24fc2f025d598f558f67205'
+            ), (
+                bytes(range(136)),
+                b'Sample message for keylen=blocklen',
+                '68b94e2e538a9be4103bebb5aa016d47'
+                '961d4d1aa906061313b557f8af2c3faa'
+            ), (
+                bytes(range(168)),
+                b'Sample message for keylen>blocklen',
+                '9bcf2c238e235c3ce88404e813bd2f3a'
+                '97185ac6f238c63d6229a00b07974258'
+            )
+        ]:
+            self.assert_hmac(
+                key, msg, hexdigest,
+                hashfunc=self.sha3_256, hashname='sha3_256',
+                digest_size=32, block_size=136
+            )
+
+    def test_sha3_384_nist(self):
+        for key, msg, hexdigest in [
+            (
+                bytes(range(48)),
+                b'Sample message for keylen<blocklen',
+                'd588a3c51f3f2d906e8298c1199aa8ff'
+                '6296218127f6b38a90b6afe2c5617725'
+                'bc99987f79b22a557b6520db710b7f42'
+            ), (
+                bytes(range(104)),
+                b'Sample message for keylen=blocklen',
+                'a27d24b592e8c8cbf6d4ce6fc5bf62d8'
+                'fc98bf2d486640d9eb8099e24047837f'
+                '5f3bffbe92dcce90b4ed5b1e7e44fa90'
+            ), (
+                bytes(range(152)),
+                b'Sample message for keylen>blocklen',
+                'e5ae4c739f455279368ebf36d4f5354c'
+                '95aa184c899d3870e460ebc288ef1f94'
+                '70053f73f7c6da2a71bcaec38ce7d6ac'
+            )
+        ]:
+            self.assert_hmac(
+                key, msg, hexdigest,
+                hashfunc=self.sha3_384, hashname='sha3_384',
+                digest_size=48, block_size=104
+            )
+
+    def test_sha3_512_nist(self):
+        for key, msg, hexdigest in [
+            (
+                bytes(range(64)),
+                b'Sample message for keylen<blocklen',
+                '4efd629d6c71bf86162658f29943b1c3'
+                '08ce27cdfa6db0d9c3ce81763f9cbce5'
+                'f7ebe9868031db1a8f8eb7b6b95e5c5e'
+                '3f657a8996c86a2f6527e307f0213196'
+            ), (
+                bytes(range(72)),
+                b'Sample message for keylen=blocklen',
+                '544e257ea2a3e5ea19a590e6a24b724c'
+                'e6327757723fe2751b75bf007d80f6b3'
+                '60744bf1b7a88ea585f9765b47911976'
+                'd3191cf83c039f5ffab0d29cc9d9b6da'
+            ), (
+                bytes(range(136)),
+                b'Sample message for keylen>blocklen',
+                '5f464f5e5b7848e3885e49b2c385f069'
+                '4985d0e38966242dc4a5fe3fea4b37d4'
+                '6b65ceced5dcf59438dd840bab22269f'
+                '0ba7febdb9fcf74602a35666b2a32915'
+            )
+        ]:
+            self.assert_hmac(
+                key, msg, hexdigest,
+                hashfunc=self.sha3_512, hashname='sha3_512',
+                digest_size=64, block_size=72
+            )
+
 
 class PyRFCTestCase(ThroughObjectMixin, PyAssertersMixin,
                     WithOpenSSLHashFunctions, RFCTestCaseMixin,