Add one-time authentication functions

[skion]

This exposes NaCL's one-time authentication functions under nacl.onetime. Since by definition this is one-time authentication, I avoided classes (and hence state) in the top-level API for now, but am very much open for comments or suggestions if there is any upstream interest.

In [1]: import nacl.onetime, nacl.utils

In [2]: key = nacl.utils.random(32)

In [3]: msg = b"Foo"

In [4]: a = nacl.onetime.generate(msg, key)

In [5]: len(a)
Out[5]: 16

In [6]: nacl.onetime.verify(a, msg, key)
Out[6]: True

In [7]: msg = "Bar"

In [8]: nacl.onetime.verify(a, msg, key)
---------------------------------------------------------------------------
BadSignatureError                         Traceback (most recent call last)
<ipython-input-8-d2ff9f304af4> in <module>()
----> 1 nacl.onetime.verify(a, msg, key)

/home/pieter/envs/qauth/local/lib/python2.7/site-packages/PyNaCl-0.3.0_onetimeauth-py2.7-linux-x86_64.egg/nacl/onetime.pyc in verify(authenticator, message, key, encoder)
     65                          KEY_SIZE)
     66 
---> 67     return nacl.c.crypto_onetimeauth_verify(authenticator, message, key)

/home/pieter/envs/qauth/local/lib/python2.7/site-packages/PyNaCl-0.3.0_onetimeauth-py2.7-linux-x86_64.egg/nacl/c/crypto_onetimeauth.pyc in crypto_onetimeauth_verify(authenticator, message, k)
     51     if lib.crypto_onetimeauth_verify(authenticator,
     52                                      message, len(message), k) != 0:
---> 53         raise BadSignatureError("Authenticator was forged or corrupt")
     54 
     55     return True

BadSignatureError: Authenticator was forged or corrupt

[coveralls]

Coverage decreased (-5.67%) when pulling feb4f60 on skion:onetimeauth into 61cc9f2 on pyca:master.

[alex]

Thanks for working on this! It needs tests and documentation before this is merge ready though.

[skion]

Before doing that, do you see anything bad in the suggested API?

[alex]

I think the API is probably fine, but I'm not super familiar with one-time-authenitcators so I'd love to see the docs to make sure the whole thing makes sense end-to-end :-)

[coveralls]

Coverage increased (+0.06%) when pulling 73d854f on skion:onetimeauth into 61cc9f2 on pyca:master.

[alex]

It looks like the tests are failing due to some flake8 issues right now.

[coveralls]

Coverage increased (+0.06%) when pulling 1d035d5 on skion:onetimeauth into 61cc9f2 on pyca:master.

[reaperhulk]

Closing since we let this sit around for over 2 years (ugh, sorry about that). If you're still interested in landing this please rebase and I'll prioritize reviewing it.