Add mcrypto recipe

recipes/mcrypto/recipe.yaml

@@ -0,0 +1,46 @@
+context:
+  version: "0.1.0"
+  mojo_version: ">=1.0.0,<1.1.0"
+
+package:
+  name: mcrypto
+  version: ${{ version }}
+
+source:
+  - git: https://github.com/aelxtpt/mcrypto.git
+    rev: 7c418e5d379524f3b223c649ca771663e69dafd8
+
+build:
+  number: 0
+  script:
+    - mkdir -p ${PREFIX}/lib/mojo
+    - mojo precompile src/mcrypto -o ${{ PREFIX }}/lib/mojo/mcrypto.mojoc
+
+requirements:
+  build:
+    - mojo-compiler ${{ mojo_version }}
+  host:
+    - mojo-compiler ${{ mojo_version }}
+  run:
+    - mojo-compiler ${{ mojo_version }}
+
+tests:
+  - script:
+      - if: unix
+        then:
+          - mojo run test.mojo
+    files:
+      recipe:
+        - test.mojo
+
+about:
+  homepage: https://github.com/aelxtpt/mcrypto
+  repository: https://github.com/aelxtpt/mcrypto
+  license: MIT
+  license_file: LICENSE
+  summary: "Cryptographic primitives for Mojo: hashes, XOFs, stream and block ciphers, AEAD, MACs, KDFs, public-key encryption, KEM, signatures, and secure-memory helpers."
+
+extra:
+  project_name: mcrypto
+  maintainers:
+    - aelxtpt

recipes/mcrypto/test.mojo

@@ -0,0 +1,94 @@
+"""Installed-package smoke test for the mcrypto conda package.
+
+Runs against the precompiled ``mcrypto.mojoc`` installed under
+``$PREFIX/lib/mojo`` rather than the source tree.
+"""
+
+from std.testing import assert_equal, assert_raises
+from mcrypto.aead.algorithm import AeadAlgorithm
+from mcrypto.aead.combined import decrypt, encrypt
+from mcrypto.encoding.algorithm import EncodingTransform
+from mcrypto.encoding.transforms import transform
+from mcrypto.hashes import HashAlgorithm, hash
+from mcrypto.hashes.xof import xof
+from mcrypto.hashes.xof_algorithm import XofAlgorithm
+from mcrypto.kdf.algorithm import KdfAlgorithm
+from mcrypto.kdf.dispatch import derive
+from mcrypto.macs.algorithm import MacAlgorithm
+from mcrypto.macs.dispatch import authenticate
+
+
+def main() raises:
+    # Fixed hash against a known vector.
+    assert_equal(
+        hash(HashAlgorithm.SHA256, "abc".as_bytes()),
+        transform(
+            EncodingTransform.HEX_DECODE,
+            "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad"
+            .as_bytes(),
+        ),
+    )
+
+    # Extendable-output function against a known vector.
+    assert_equal(
+        xof(XofAlgorithm.SHAKE128, "abc".as_bytes(), 32),
+        transform(
+            EncodingTransform.HEX_DECODE,
+            "5881092dd818bf5cf8a3ddb793fbcba74097d5c526a6d35f97b83351940f2cc8"
+            .as_bytes(),
+        ),
+    )
+
+    # AEAD round trip and tamper detection.
+    var key = List[UInt8](length=32, fill=0x35)
+    var nonce = List[UInt8](length=24, fill=0x46)
+    var aad = List("conda smoke".as_bytes())
+    var plaintext = List("authenticated payload".as_bytes())
+    var sealed = encrypt(
+        AeadAlgorithm.XCHACHA20_POLY1305_IETF,
+        Span(key),
+        Span(nonce),
+        Span(aad),
+        Span(plaintext),
+    )
+    assert_equal(
+        decrypt(
+            AeadAlgorithm.XCHACHA20_POLY1305_IETF,
+            Span(key),
+            Span(nonce),
+            Span(aad),
+            Span(sealed),
+        ),
+        plaintext,
+    )
+    sealed[len(sealed) - 1] ^= 1
+    with assert_raises():
+        _ = decrypt(
+            AeadAlgorithm.XCHACHA20_POLY1305_IETF,
+            Span(key),
+            Span(nonce),
+            Span(aad),
+            Span(sealed),
+        )
+
+    # Keyed authentication.
+    var mac_key = List[UInt8](length=16, fill=0x71)
+    assert_equal(
+        len(authenticate(MacAlgorithm.CMAC, Span(mac_key), Span(plaintext), 16)),
+        16,
+    )
+
+    # Deterministic key derivation is reproducible and context-separated.
+    var secret = List("input key material".as_bytes())
+    var salt = List("conda salt".as_bytes())
+    var info = List("mcrypto conda smoke".as_bytes())
+    assert_equal(
+        derive(
+            KdfAlgorithm.HKDF_SHA256, Span(secret), Span(salt), Span(info), 32
+        ),
+        derive(
+            KdfAlgorithm.HKDF_SHA256, Span(secret), Span(salt), Span(info), 32
+        ),
+    )
+
+    print("conda smoke tests: OK")