Check proof length multiple of 32. Use keccak256 instead of sha3

test/MerkleProof.js

@@ -26,18 +26,35 @@ contract('MerkleProof', function(accounts) {
     });
 
     it("should return false for an invalid Merkle proof", async function() {
+      const correctElements = ["a", "b", "c"].map(el => sha3(el));
+      const correctMerkleTree = new MerkleTree(correctElements);
+
+      const correctRoot = correctMerkleTree.getHexRoot();
+
+      const correctLeaf = correctMerkleTree.bufToHex(correctElements[0]);
+
+      const badElements = ["d", "e", "f"].map(el => sha3(el))
+      const badMerkleTree = new MerkleTree(badElements)
+
+      const badProof = badMerkleTree.getHexProof(badElements[0])
+
+      const result = await merkleProof.verifyProof(badProof, correctRoot, correctLeaf);
+      assert.isNotOk(result, "verifyProof did not return false for an invalid proof");
+    });
+
+    it("should return false for a Merkle proof of invalid length", async function() {
       const elements = ["a", "b", "c"].map(el => sha3(el));
       const merkleTree = new MerkleTree(elements);
 
       const root = merkleTree.getHexRoot();
 
       const proof = merkleTree.getHexProof(elements[0]);
-      const badProof = proof.slice(0, proof.length - 32);
+      const badProof = proof.slice(0, proof.length - 5);
 
       const leaf = merkleTree.bufToHex(elements[0]);
 
       const result = await merkleProof.verifyProof(badProof, root, leaf);
-      assert.isNotOk(result, "verifyProof did not return false for an invalid proof");
-    });
+      assert.isNotOk(result, "verifyProof did not return false for proof of invalid length");
+    })
   });
 });