test/evptests.txt

   1 #
   2 # Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the OpenSSL license (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9 #cipher:key:iv:plaintext:ciphertext:0/1(decrypt/encrypt)
  10 #aadcipher:key:iv:plaintext:ciphertext:aad:tag:0/1(decrypt/encrypt)
  11 #digest:::input:output
  12
  13 # BLAKE2 tests, using same inputs as MD5
  14 # There are no official BLAKE2 test vectors we can use since they all use a key
  15 # Which is currently unsupported by OpenSSL.  They were generated using the
  16 # reference implementation.  RFC7693 also mentions the 616263 / "abc" values.
  17 Digest = BLAKE2s256
  18 Input =
  19 Output = 69217a3079908094e11121d042354a7c1f55b6482ca1a51e1b250dfd1ed0eef9
  20
  21 Digest = BLAKE2s256
  22 Input = 61
  23 Output = 4a0d129873403037c2cd9b9048203687f6233fb6738956e0349bd4320fec3e90
  24
  25 Digest = BLAKE2s256
  26 Input = 616263
  27 Output = 508c5e8c327c14e2e1a72ba34eeb452f37458b209ed63a294d999b4c86675982
  28
  29 Digest = BLAKE2s256
  30 Input = 6d65737361676520646967657374
  31 Output = fa10ab775acf89b7d3c8a6e823d586f6b67bdbac4ce207fe145b7d3ac25cd28c
  32
  33 Digest = BLAKE2s256
  34 Input = 6162636465666768696a6b6c6d6e6f707172737475767778797a
  35 Output = bdf88eb1f86a0cdf0e840ba88fa118508369df186c7355b4b16cf79fa2710a12
  36
  37 Digest = BLAKE2s256
  38 Input = 4142434445464748494a4b4c4d4e4f505152535455565758595a6162636465666768696a6b6c6d6e6f707172737475767778797a30313233343536373839
  39 Output = c75439ea17e1de6fa4510c335dc3d3f343e6f9e1ce2773e25b4174f1df8b119b
  40
  41 Digest = BLAKE2s256
  42 Input = 3132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930
  43 Output = fdaedb290a0d5af9870864fec2e090200989dc9cd53a3c092129e8535e8b4f66
  44
  45 Digest = BLAKE2s256
  46 Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F
  47 Output = 1FA877DE67259D19863A2A34BCC6962A2B25FCBF5CBECD7EDE8F1FA36688A796
  48
  49 Digest = BLAKE2s256
  50 Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F8081
  51 Output = C80ABEEBB669AD5DEEB5F5EC8EA6B7A05DDF7D31EC4C0A2EE20B0B98CAEC6746
  52
  53 Digest = BLAKE2b512
  54 Input =
  55 Output = 786a02f742015903c6c6fd852552d272912f4740e15847618a86e217f71f5419d25e1031afee585313896444934eb04b903a685b1448b755d56f701afe9be2ce
  56
  57 Digest = BLAKE2b512
  58 Input = 61
  59 Output = 333fcb4ee1aa7c115355ec66ceac917c8bfd815bf7587d325aec1864edd24e34d5abe2c6b1b5ee3face62fed78dbef802f2a85cb91d455a8f5249d330853cb3c
  60
  61 Digest = BLAKE2b512
  62 Input = 616263
  63 Output = ba80a53f981c4d0d6a2797b69f12f6e94c212f14685ac4b74b12bb6fdbffa2d17d87c5392aab792dc252d5de4533cc9518d38aa8dbf1925ab92386edd4009923
  64
  65 Digest = BLAKE2b512
  66 Input = 6d65737361676520646967657374
  67 Output = 3c26ce487b1c0f062363afa3c675ebdbf5f4ef9bdc022cfbef91e3111cdc283840d8331fc30a8a0906cff4bcdbcd230c61aaec60fdfad457ed96b709a382359a
  68
  69 Digest = BLAKE2b512
  70 Input = 6162636465666768696a6b6c6d6e6f707172737475767778797a
  71 Output = c68ede143e416eb7b4aaae0d8e48e55dd529eafed10b1df1a61416953a2b0a5666c761e7d412e6709e31ffe221b7a7a73908cb95a4d120b8b090a87d1fbedb4c
  72
  73 Digest = BLAKE2b512
  74 Input = 4142434445464748494a4b4c4d4e4f505152535455565758595a6162636465666768696a6b6c6d6e6f707172737475767778797a30313233343536373839
  75 Output = 99964802e5c25e703722905d3fb80046b6bca698ca9e2cc7e49b4fe1fa087c2edf0312dfbb275cf250a1e542fd5dc2edd313f9c491127c2e8c0c9b24168e2d50
  76
  77 Digest = BLAKE2b512
  78 Input = 3132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930
  79 Output = 686f41ec5afff6e87e1f076f542aa466466ff5fbde162c48481ba48a748d842799f5b30f5b67fc684771b33b994206d05cc310f31914edd7b97e41860d77d282
  80
  81 Digest = BLAKE2b512
  82 Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F
  83 Output = 2319E3789C47E2DAA5FE807F61BEC2A1A6537FA03F19FF32E87EECBFD64B7E0E8CCFF439AC333B040F19B0C4DDD11A61E24AC1FE0F10A039806C5DCC0DA3D115
  84
  85 Digest = BLAKE2b512
  86 Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F8081
  87 Output = DF0A9D0C212843A6A934E3902B2DD30D17FBA5F969D2030B12A546D8A6A45E80CF5635F071F0452E9C919275DA99BED51EB1173C1AF0518726B75B0EC3BAE2B5
  88
  89 # SHA(1) tests (from shatest.c)
  90 Digest = SHA1
  91 Input = 616263
  92 Output = a9993e364706816aba3e25717850c26c9cd0d89d
  93
  94
  95 # MD5 tests (from md5test.c)
  96 Digest = MD5
  97 Input =
  98 Output = d41d8cd98f00b204e9800998ecf8427e
  99
 100 Digest = MD5
 101 Input = 61
 102 Output = 0cc175b9c0f1b6a831c399e269772661
 103
 104 Digest = MD5
 105 Input = 616263
 106 Output = 900150983cd24fb0d6963f7d28e17f72
 107
 108 Digest = MD5
 109 Input = 6d65737361676520646967657374
 110 Output = f96b697d7cb7938d525a2f31aaf161d0
 111
 112 Digest = MD5
 113 Input = 6162636465666768696a6b6c6d6e6f707172737475767778797a
 114 Output = c3fcd3d76192e4007dfb496cca67e13b
 115
 116 Digest = MD5
 117 Input = 4142434445464748494a4b4c4d4e4f505152535455565758595a6162636465666768696a6b6c6d6e6f707172737475767778797a30313233343536373839
 118 Output = d174ab98d277d9f5a5611c2c9f419d9f
 119
 120 Digest = MD5
 121 Input = 3132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930
 122 Output = 57edf4a22be3c955ac49da2e2107b67a
 123
 124 # MD4 tests from md4test.c
 125 Digest = MD4
 126 Input = ""
 127 Output = 31d6cfe0d16ae931b73c59d7e0c089c0
 128 Digest = MD4
 129 Input = "a"
 130 Output = bde52cb31de33e46245e05fbdbd6fb24
 131 Digest = MD4
 132 Input = "abc"
 133 Output = a448017aaf21d8525fc10ae87aa6729d
 134 Digest = MD4
 135 Input = "message digest"
 136 Output = d9130a8164549fe818874806e1c7014b
 137 Digest = MD4
 138 Input = "abcdefghijklmnopqrstuvwxyz"
 139 Output = d79e1c308aa5bbcdeea8ed63df412da9
 140 Digest = MD4
 141 Input = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"
 142 Output = 043f8582f241db351ce627e153e7f0e4
 143 Digest = MD4
 144 Input = "12345678901234567890123456789012345678901234567890123456789012345678901234567890"
 145 Output = e33b4ddc9c38f2199c3e7b164fcc0536
 146
 147 # RIPEMD160 tests from rmdtest.c
 148 Digest = RIPEMD160
 149 Input = ""
 150 Output = 9c1185a5c5e9fc54612808977ee8f548b2258d31
 151 Digest = RIPEMD160
 152 Input = "a"
 153 Output = 0bdc9d2d256b3ee9daae347be6f4dc835a467ffe
 154 Digest = RIPEMD160
 155 Input = "abc"
 156 Output = 8eb208f7e05d987a9b044a8e98c6b087f15a0bfc
 157 Digest = RIPEMD160
 158 Input = "message digest"
 159 Output = 5d0689ef49d2fae572b881b123a85ffa21595f36
 160 Digest = RIPEMD160
 161 Input = "abcdefghijklmnopqrstuvwxyz"
 162 Output = f71c27109c692c1b56bbdceb5b9d2865b3708dbc
 163 Digest = RIPEMD160
 164 Input = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
 165 Output = 12a053384a9c0c88e405a06c27dcf49ada62eb2b
 166 Digest = RIPEMD160
 167 Input = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"
 168 Output = b0e20b6e3116640286ed3a87a5713079b21f5189
 169 Digest = RIPEMD160
 170 Input = "12345678901234567890123456789012345678901234567890123456789012345678901234567890"
 171 Output = 9b752e45573d4b39f4dbd3323cab82bf63326bfb
 172
 173 # whirlpool tests from wp_test.c
 174 Digest = whirlpool
 175 Input = ""
 176 Output = 19FA61D75522A4669B44E39C1D2E1726C530232130D407F89AFEE0964997F7A73E83BE698B288FEBCF88E3E03C4F0757EA8964E59B63D93708B138CC42A66EB3
 177 Digest = whirlpool
 178 Input = "a"
 179 Output = 8ACA2602792AEC6F11A67206531FB7D7F0DFF59413145E6973C45001D0087B42D11BC645413AEFF63A42391A39145A591A92200D560195E53B478584FDAE231A
 180 Digest = whirlpool
 181 Input = "abc"
 182 Output = 4E2448A4C6F486BB16B6562C73B4020BF3043E3A731BCE721AE1B303D97E6D4C7181EEBDB6C57E277D0E34957114CBD6C797FC9D95D8B582D225292076D4EEF5
 183 Digest = whirlpool
 184 Input = "message digest"
 185 Output = 378C84A4126E2DC6E56DCC7458377AAC838D00032230F53CE1F5700C0FFB4D3B8421557659EF55C106B4B52AC5A4AAA692ED920052838F3362E86DBD37A8903E
 186 Digest = whirlpool
 187 Input = "abcdefghijklmnopqrstuvwxyz"
 188 Output = F1D754662636FFE92C82EBB9212A484A8D38631EAD4238F5442EE13B8054E41B08BF2A9251C30B6A0B8AAE86177AB4A6F68F673E7207865D5D9819A3DBA4EB3B
 189 Digest = whirlpool
 190 Input = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"
 191 Output = DC37E008CF9EE69BF11F00ED9ABA26901DD7C28CDEC066CC6AF42E40F82F3A1E08EBA26629129D8FB7CB57211B9281A65517CC879D7B962142C65F5A7AF01467
 192 Digest = whirlpool
 193 Input = "12345678901234567890123456789012345678901234567890123456789012345678901234567890"
 194 Output = 466EF18BABB0154D25B9D38A6414F5C08784372BCCB204D6549C4AFADB6014294D5BD8DF2A6C44E538CD047B2681A51A2C60481E88C5A20B2C2A80CF3A9A083B
 195 Digest = whirlpool
 196 Input = "abcdbcdecdefdefgefghfghighijhijk"
 197 Output = 2A987EA40F917061F5D6F0A0E4644F488A7A5A52DEEE656207C562F988E95C6916BDC8031BC5BE1B7B947639FE050B56939BAAA0ADFF9AE6745B7B181C3BE3FD
 198 Digest = whirlpool
 199 Input = "aaaaaaaaaa"
 200 Count = 100000
 201 Output = 0C99005BEB57EFF50A7CF005560DDF5D29057FD86B20BFD62DECA0F1CCEA4AF51FC15490EDDC47AF32BB2B66C34FF9AD8C6008AD677F77126953B226E4ED8B01
 202
 203 # DES EDE3 CFB1
 204 # echo -n "Hello World" |
 205 #  apps/openssl enc -des-ede3-cfb1 \
 206 #   -K 000102030405060708090A0B0C0D0E0F1011121314151617 -iv 0001020304050607 |
 207 #  xxd -ps -u
 208
 209 Cipher = DES-EDE3-CFB1
 210 Key = 000102030405060708090A0B0C0D0E0F1011121314151617
 211 IV = 0001020304050607
 212 Plaintext = "Hello World"
 213 Ciphertext = 3CF55D656E9C0664513358
 214
 215 Cipher = DES-EDE3-CFB1
 216 Key = 000102030405060708090A0B0C0D0E0F1011121314151617
 217 IV = 0001020304050607
 218 Operation = DECRYPT
 219 Plaintext = "Hello World"
 220 Ciphertext = 3CF55D656E9C0664513358
 221
 222 # AES 128 ECB tests (from FIPS-197 test vectors, encrypt)
 223
 224 Cipher = AES-128-ECB
 225 Key = 000102030405060708090A0B0C0D0E0F
 226 Operation = ENCRYPT
 227 Plaintext = 00112233445566778899AABBCCDDEEFF
 228 Ciphertext = 69C4E0D86A7B0430D8CDB78070B4C55A
 229
 230 # AES 192 ECB tests (from FIPS-197 test vectors, encrypt)
 231
 232 Cipher = AES-192-ECB
 233 Key = 000102030405060708090A0B0C0D0E0F1011121314151617
 234 Operation = ENCRYPT
 235 Plaintext = 00112233445566778899AABBCCDDEEFF
 236 Ciphertext = DDA97CA4864CDFE06EAF70A0EC0D7191
 237
 238
 239 # AES 256 ECB tests (from FIPS-197 test vectors, encrypt)
 240
 241 Cipher = AES-256-ECB
 242 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
 243 Operation = ENCRYPT
 244 Plaintext = 00112233445566778899AABBCCDDEEFF
 245 Ciphertext = 8EA2B7CA516745BFEAFC49904B496089
 246
 247
 248 # AES 128 ECB tests (from NIST test vectors, encrypt)
 249
 250 #AES-128-ECB:00000000000000000000000000000000::00000000000000000000000000000000:C34C052CC0DA8D73451AFE5F03BE297F:1
 251
 252 # AES 128 ECB tests (from NIST test vectors, decrypt)
 253
 254 #AES-128-ECB:00000000000000000000000000000000::44416AC2D1F53C583303917E6BE9EBE0:00000000000000000000000000000000:0
 255
 256 # AES 192 ECB tests (from NIST test vectors, decrypt)
 257
 258 #AES-192-ECB:000000000000000000000000000000000000000000000000::48E31E9E256718F29229319C19F15BA4:00000000000000000000000000000000:0
 259
 260 # AES 256 ECB tests (from NIST test vectors, decrypt)
 261
 262 #AES-256-ECB:0000000000000000000000000000000000000000000000000000000000000000::058CCFFDBBCB382D1F6F56585D8A4ADE:00000000000000000000000000000000:0
 263
 264 # AES 128 CBC tests (from NIST test vectors, encrypt)
 265
 266 #AES-128-CBC:00000000000000000000000000000000:00000000000000000000000000000000:00000000000000000000000000000000:8A05FC5E095AF4848A08D328D3688E3D:1
 267
 268 # AES 192 CBC tests (from NIST test vectors, encrypt)
 269
 270 #AES-192-CBC:000000000000000000000000000000000000000000000000:00000000000000000000000000000000:00000000000000000000000000000000:7BD966D53AD8C1BB85D2ADFAE87BB104:1
 271
 272 # AES 256 CBC tests (from NIST test vectors, encrypt)
 273
 274 #AES-256-CBC:0000000000000000000000000000000000000000000000000000000000000000:00000000000000000000000000000000:00000000000000000000000000000000:FE3C53653E2F45B56FCD88B2CC898FF0:1
 275
 276 # AES 128 CBC tests (from NIST test vectors, decrypt)
 277
 278 #AES-128-CBC:00000000000000000000000000000000:00000000000000000000000000000000:FACA37E0B0C85373DF706E73F7C9AF86:00000000000000000000000000000000:0
 279
 280 # AES tests from NIST document SP800-38A
 281 # For all ECB encrypts and decrypts, the transformed sequence is
 282 #   AES-bits-ECB:key::plaintext:ciphertext:encdec
 283 # ECB-AES128.Encrypt and ECB-AES128.Decrypt
 284 Cipher = AES-128-ECB
 285 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 286 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 287 Ciphertext = 3AD77BB40D7A3660A89ECAF32466EF97
 288
 289 Cipher = AES-128-ECB
 290 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 291 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 292 Ciphertext = F5D3D58503B9699DE785895A96FDBAAF
 293
 294 Cipher = AES-128-ECB
 295 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 296 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 297 Ciphertext = 43B1CD7F598ECE23881B00E3ED030688
 298
 299 Cipher = AES-128-ECB
 300 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 301 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 302 Ciphertext = 7B0C785E27E8AD3F8223207104725DD4
 303
 304 # ECB-AES192.Encrypt and ECB-AES192.Decrypt
 305 Cipher = AES-192-ECB
 306 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 307 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 308 Ciphertext = BD334F1D6E45F25FF712A214571FA5CC
 309
 310 Cipher = AES-192-ECB
 311 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 312 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 313 Ciphertext = 974104846D0AD3AD7734ECB3ECEE4EEF
 314
 315 Cipher = AES-192-ECB
 316 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 317 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 318 Ciphertext = EF7AFD2270E2E60ADCE0BA2FACE6444E
 319
 320 Cipher = AES-192-ECB
 321 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 322 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 323 Ciphertext = 9A4B41BA738D6C72FB16691603C18E0E
 324
 325 # ECB-AES256.Encrypt and ECB-AES256.Decrypt
 326 Cipher = AES-256-ECB
 327 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 328 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 329 Ciphertext = F3EED1BDB5D2A03C064B5A7E3DB181F8
 330
 331 Cipher = AES-256-ECB
 332 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 333 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 334 Ciphertext = 591CCB10D410ED26DC5BA74A31362870
 335
 336 Cipher = AES-256-ECB
 337 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 338 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 339 Ciphertext = B6ED21B99CA6F4F9F153E7B1BEAFED1D
 340
 341 Cipher = AES-256-ECB
 342 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 343 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 344 Ciphertext = 23304B7A39F9F3FF067D8D8F9E24ECC7
 345
 346 # For all CBC encrypts and decrypts, the transformed sequence is
 347 #   AES-bits-CBC:key:IV/ciphertext':plaintext:ciphertext:encdec
 348 # CBC-AES128.Encrypt and CBC-AES128.Decrypt
 349 Cipher = AES-128-CBC
 350 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 351 IV = 000102030405060708090A0B0C0D0E0F
 352 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 353 Ciphertext = 7649ABAC8119B246CEE98E9B12E9197D
 354
 355 Cipher = AES-128-CBC
 356 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 357 IV = 7649ABAC8119B246CEE98E9B12E9197D
 358 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 359 Ciphertext = 5086CB9B507219EE95DB113A917678B2
 360
 361 Cipher = AES-128-CBC
 362 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 363 IV = 5086CB9B507219EE95DB113A917678B2
 364 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 365 Ciphertext = 73BED6B8E3C1743B7116E69E22229516
 366
 367 Cipher = AES-128-CBC
 368 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 369 IV = 73BED6B8E3C1743B7116E69E22229516
 370 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 371 Ciphertext = 3FF1CAA1681FAC09120ECA307586E1A7
 372
 373 # CBC-AES192.Encrypt and CBC-AES192.Decrypt
 374 Cipher = AES-192-CBC
 375 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 376 IV = 000102030405060708090A0B0C0D0E0F
 377 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 378 Ciphertext = 4F021DB243BC633D7178183A9FA071E8
 379
 380 Cipher = AES-192-CBC
 381 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 382 IV = 4F021DB243BC633D7178183A9FA071E8
 383 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 384 Ciphertext = B4D9ADA9AD7DEDF4E5E738763F69145A
 385
 386 Cipher = AES-192-CBC
 387 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 388 IV = B4D9ADA9AD7DEDF4E5E738763F69145A
 389 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 390 Ciphertext = 571B242012FB7AE07FA9BAAC3DF102E0
 391
 392 Cipher = AES-192-CBC
 393 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 394 IV = 571B242012FB7AE07FA9BAAC3DF102E0
 395 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 396 Ciphertext = 08B0E27988598881D920A9E64F5615CD
 397
 398 # CBC-AES256.Encrypt and CBC-AES256.Decrypt
 399 Cipher = AES-256-CBC
 400 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 401 IV = 000102030405060708090A0B0C0D0E0F
 402 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 403 Ciphertext = F58C4C04D6E5F1BA779EABFB5F7BFBD6
 404
 405 Cipher = AES-256-CBC
 406 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 407 IV = F58C4C04D6E5F1BA779EABFB5F7BFBD6
 408 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 409 Ciphertext = 9CFC4E967EDB808D679F777BC6702C7D
 410
 411 Cipher = AES-256-CBC
 412 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 413 IV = 9CFC4E967EDB808D679F777BC6702C7D
 414 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 415 Ciphertext = 39F23369A9D9BACFA530E26304231461
 416
 417 Cipher = AES-256-CBC
 418 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 419 IV = 39F23369A9D9BACFA530E26304231461
 420 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 421 Ciphertext = B2EB05E2C39BE9FCDA6C19078C6A9D1B
 422
 423 # We don't support CFB{1,8}-AESxxx.{En,De}crypt
 424 # For all CFB128 encrypts and decrypts, the transformed sequence is
 425 #   AES-bits-CFB:key:IV/ciphertext':plaintext:ciphertext:encdec
 426 # CFB128-AES128.Encrypt
 427 Cipher = AES-128-CFB
 428 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 429 IV = 000102030405060708090A0B0C0D0E0F
 430 Operation = ENCRYPT
 431 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 432 Ciphertext = 3B3FD92EB72DAD20333449F8E83CFB4A
 433
 434 Cipher = AES-128-CFB
 435 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 436 IV = 3B3FD92EB72DAD20333449F8E83CFB4A
 437 Operation = ENCRYPT
 438 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 439 Ciphertext = C8A64537A0B3A93FCDE3CDAD9F1CE58B
 440
 441 Cipher = AES-128-CFB
 442 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 443 IV = C8A64537A0B3A93FCDE3CDAD9F1CE58B
 444 Operation = ENCRYPT
 445 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 446 Ciphertext = 26751F67A3CBB140B1808CF187A4F4DF
 447
 448 Cipher = AES-128-CFB
 449 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 450 IV = 26751F67A3CBB140B1808CF187A4F4DF
 451 Operation = ENCRYPT
 452 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 453 Ciphertext = C04B05357C5D1C0EEAC4C66F9FF7F2E6
 454
 455 # CFB128-AES128.Decrypt
 456 Cipher = AES-128-CFB
 457 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 458 IV = 000102030405060708090A0B0C0D0E0F
 459 Operation = DECRYPT
 460 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 461 Ciphertext = 3B3FD92EB72DAD20333449F8E83CFB4A
 462
 463 Cipher = AES-128-CFB
 464 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 465 IV = 3B3FD92EB72DAD20333449F8E83CFB4A
 466 Operation = DECRYPT
 467 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 468 Ciphertext = C8A64537A0B3A93FCDE3CDAD9F1CE58B
 469
 470 Cipher = AES-128-CFB
 471 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 472 IV = C8A64537A0B3A93FCDE3CDAD9F1CE58B
 473 Operation = DECRYPT
 474 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 475 Ciphertext = 26751F67A3CBB140B1808CF187A4F4DF
 476
 477 Cipher = AES-128-CFB
 478 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 479 IV = 26751F67A3CBB140B1808CF187A4F4DF
 480 Operation = DECRYPT
 481 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 482 Ciphertext = C04B05357C5D1C0EEAC4C66F9FF7F2E6
 483
 484 # CFB128-AES192.Encrypt
 485 Cipher = AES-192-CFB
 486 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 487 IV = 000102030405060708090A0B0C0D0E0F
 488 Operation = ENCRYPT
 489 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 490 Ciphertext = CDC80D6FDDF18CAB34C25909C99A4174
 491
 492 Cipher = AES-192-CFB
 493 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 494 IV = CDC80D6FDDF18CAB34C25909C99A4174
 495 Operation = ENCRYPT
 496 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 497 Ciphertext = 67CE7F7F81173621961A2B70171D3D7A
 498
 499 Cipher = AES-192-CFB
 500 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 501 IV = 67CE7F7F81173621961A2B70171D3D7A
 502 Operation = ENCRYPT
 503 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 504 Ciphertext = 2E1E8A1DD59B88B1C8E60FED1EFAC4C9
 505
 506 Cipher = AES-192-CFB
 507 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 508 IV = 2E1E8A1DD59B88B1C8E60FED1EFAC4C9
 509 Operation = ENCRYPT
 510 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 511 Ciphertext = C05F9F9CA9834FA042AE8FBA584B09FF
 512
 513 # CFB128-AES192.Decrypt
 514 Cipher = AES-192-CFB
 515 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 516 IV = 000102030405060708090A0B0C0D0E0F
 517 Operation = DECRYPT
 518 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 519 Ciphertext = CDC80D6FDDF18CAB34C25909C99A4174
 520
 521 Cipher = AES-192-CFB
 522 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 523 IV = CDC80D6FDDF18CAB34C25909C99A4174
 524 Operation = DECRYPT
 525 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 526 Ciphertext = 67CE7F7F81173621961A2B70171D3D7A
 527
 528 Cipher = AES-192-CFB
 529 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 530 IV = 67CE7F7F81173621961A2B70171D3D7A
 531 Operation = DECRYPT
 532 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 533 Ciphertext = 2E1E8A1DD59B88B1C8E60FED1EFAC4C9
 534
 535 Cipher = AES-192-CFB
 536 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 537 IV = 2E1E8A1DD59B88B1C8E60FED1EFAC4C9
 538 Operation = DECRYPT
 539 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 540 Ciphertext = C05F9F9CA9834FA042AE8FBA584B09FF
 541
 542 # CFB128-AES256.Encrypt
 543 Cipher = AES-256-CFB
 544 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 545 IV = 000102030405060708090A0B0C0D0E0F
 546 Operation = ENCRYPT
 547 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 548 Ciphertext = DC7E84BFDA79164B7ECD8486985D3860
 549
 550 Cipher = AES-256-CFB
 551 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 552 IV = DC7E84BFDA79164B7ECD8486985D3860
 553 Operation = ENCRYPT
 554 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 555 Ciphertext = 39FFED143B28B1C832113C6331E5407B
 556
 557 Cipher = AES-256-CFB
 558 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 559 IV = 39FFED143B28B1C832113C6331E5407B
 560 Operation = ENCRYPT
 561 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 562 Ciphertext = DF10132415E54B92A13ED0A8267AE2F9
 563
 564 Cipher = AES-256-CFB
 565 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 566 IV = DF10132415E54B92A13ED0A8267AE2F9
 567 Operation = ENCRYPT
 568 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 569 Ciphertext = 75A385741AB9CEF82031623D55B1E471
 570
 571 # CFB128-AES256.Decrypt
 572 Cipher = AES-256-CFB
 573 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 574 IV = 000102030405060708090A0B0C0D0E0F
 575 Operation = DECRYPT
 576 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 577 Ciphertext = DC7E84BFDA79164B7ECD8486985D3860
 578
 579 Cipher = AES-256-CFB
 580 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 581 IV = DC7E84BFDA79164B7ECD8486985D3860
 582 Operation = DECRYPT
 583 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 584 Ciphertext = 39FFED143B28B1C832113C6331E5407B
 585
 586 Cipher = AES-256-CFB
 587 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 588 IV = 39FFED143B28B1C832113C6331E5407B
 589 Operation = DECRYPT
 590 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 591 Ciphertext = DF10132415E54B92A13ED0A8267AE2F9
 592
 593 Cipher = AES-256-CFB
 594 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 595 IV = DF10132415E54B92A13ED0A8267AE2F9
 596 Operation = DECRYPT
 597 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 598 Ciphertext = 75A385741AB9CEF82031623D55B1E471
 599
 600 # For all OFB encrypts and decrypts, the transformed sequence is
 601 #   AES-bits-CFB:key:IV/output':plaintext:ciphertext:encdec
 602 # OFB-AES128.Encrypt
 603 Cipher = AES-128-OFB
 604 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 605 IV = 000102030405060708090A0B0C0D0E0F
 606 Operation = ENCRYPT
 607 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 608 Ciphertext = 3B3FD92EB72DAD20333449F8E83CFB4A
 609
 610 Cipher = AES-128-OFB
 611 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 612 IV = 50FE67CC996D32B6DA0937E99BAFEC60
 613 Operation = ENCRYPT
 614 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 615 Ciphertext = 7789508D16918F03F53C52DAC54ED825
 616
 617 Cipher = AES-128-OFB
 618 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 619 IV = D9A4DADA0892239F6B8B3D7680E15674
 620 Operation = ENCRYPT
 621 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 622 Ciphertext = 9740051E9C5FECF64344F7A82260EDCC
 623
 624 Cipher = AES-128-OFB
 625 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 626 IV = A78819583F0308E7A6BF36B1386ABF23
 627 Operation = ENCRYPT
 628 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 629 Ciphertext = 304C6528F659C77866A510D9C1D6AE5E
 630
 631 # OFB-AES128.Decrypt
 632 Cipher = AES-128-OFB
 633 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 634 IV = 000102030405060708090A0B0C0D0E0F
 635 Operation = DECRYPT
 636 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 637 Ciphertext = 3B3FD92EB72DAD20333449F8E83CFB4A
 638
 639 Cipher = AES-128-OFB
 640 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 641 IV = 50FE67CC996D32B6DA0937E99BAFEC60
 642 Operation = DECRYPT
 643 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 644 Ciphertext = 7789508D16918F03F53C52DAC54ED825
 645
 646 Cipher = AES-128-OFB
 647 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 648 IV = D9A4DADA0892239F6B8B3D7680E15674
 649 Operation = DECRYPT
 650 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 651 Ciphertext = 9740051E9C5FECF64344F7A82260EDCC
 652
 653 Cipher = AES-128-OFB
 654 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 655 IV = A78819583F0308E7A6BF36B1386ABF23
 656 Operation = DECRYPT
 657 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 658 Ciphertext = 304C6528F659C77866A510D9C1D6AE5E
 659
 660 # OFB-AES192.Encrypt
 661 Cipher = AES-192-OFB
 662 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 663 IV = 000102030405060708090A0B0C0D0E0F
 664 Operation = ENCRYPT
 665 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 666 Ciphertext = CDC80D6FDDF18CAB34C25909C99A4174
 667
 668 Cipher = AES-192-OFB
 669 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 670 IV = A609B38DF3B1133DDDFF2718BA09565E
 671 Operation = ENCRYPT
 672 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 673 Ciphertext = FCC28B8D4C63837C09E81700C1100401
 674
 675 Cipher = AES-192-OFB
 676 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 677 IV = 52EF01DA52602FE0975F78AC84BF8A50
 678 Operation = ENCRYPT
 679 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 680 Ciphertext = 8D9A9AEAC0F6596F559C6D4DAF59A5F2
 681
 682 Cipher = AES-192-OFB
 683 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 684 IV = BD5286AC63AABD7EB067AC54B553F71D
 685 Operation = ENCRYPT
 686 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 687 Ciphertext = 6D9F200857CA6C3E9CAC524BD9ACC92A
 688
 689 # OFB-AES192.Decrypt
 690 Cipher = AES-192-OFB
 691 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 692 IV = 000102030405060708090A0B0C0D0E0F
 693 Operation = ENCRYPT
 694 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 695 Ciphertext = CDC80D6FDDF18CAB34C25909C99A4174
 696
 697 Cipher = AES-192-OFB
 698 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 699 IV = A609B38DF3B1133DDDFF2718BA09565E
 700 Operation = ENCRYPT
 701 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 702 Ciphertext = FCC28B8D4C63837C09E81700C1100401
 703
 704 Cipher = AES-192-OFB
 705 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 706 IV = 52EF01DA52602FE0975F78AC84BF8A50
 707 Operation = ENCRYPT
 708 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 709 Ciphertext = 8D9A9AEAC0F6596F559C6D4DAF59A5F2
 710
 711 Cipher = AES-192-OFB
 712 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
 713 IV = BD5286AC63AABD7EB067AC54B553F71D
 714 Operation = ENCRYPT
 715 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 716 Ciphertext = 6D9F200857CA6C3E9CAC524BD9ACC92A
 717
 718 # OFB-AES256.Encrypt
 719 Cipher = AES-256-OFB
 720 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 721 IV = 000102030405060708090A0B0C0D0E0F
 722 Operation = ENCRYPT
 723 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 724 Ciphertext = DC7E84BFDA79164B7ECD8486985D3860
 725
 726 Cipher = AES-256-OFB
 727 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 728 IV = B7BF3A5DF43989DD97F0FA97EBCE2F4A
 729 Operation = ENCRYPT
 730 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 731 Ciphertext = 4FEBDC6740D20B3AC88F6AD82A4FB08D
 732
 733 Cipher = AES-256-OFB
 734 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 735 IV = E1C656305ED1A7A6563805746FE03EDC
 736 Operation = ENCRYPT
 737 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 738 Ciphertext = 71AB47A086E86EEDF39D1C5BBA97C408
 739
 740 Cipher = AES-256-OFB
 741 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 742 IV = 41635BE625B48AFC1666DD42A09D96E7
 743 Operation = ENCRYPT
 744 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 745 Ciphertext = 0126141D67F37BE8538F5A8BE740E484
 746
 747 # OFB-AES256.Decrypt
 748 Cipher = AES-256-OFB
 749 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 750 IV = 000102030405060708090A0B0C0D0E0F
 751 Operation = DECRYPT
 752 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 753 Ciphertext = DC7E84BFDA79164B7ECD8486985D3860
 754
 755 Cipher = AES-256-OFB
 756 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 757 IV = B7BF3A5DF43989DD97F0FA97EBCE2F4A
 758 Operation = DECRYPT
 759 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 760 Ciphertext = 4FEBDC6740D20B3AC88F6AD82A4FB08D
 761
 762 Cipher = AES-256-OFB
 763 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 764 IV = E1C656305ED1A7A6563805746FE03EDC
 765 Operation = DECRYPT
 766 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 767 Ciphertext = 71AB47A086E86EEDF39D1C5BBA97C408
 768
 769 Cipher = AES-256-OFB
 770 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
 771 IV = 41635BE625B48AFC1666DD42A09D96E7
 772 Operation = DECRYPT
 773 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 774 Ciphertext = 0126141D67F37BE8538F5A8BE740E484
 775
 776
 777 # AES Counter test vectors from RFC3686
 778 Cipher = aes-128-ctr
 779 Key = AE6852F8121067CC4BF7A5765577F39E
 780 IV = 00000030000000000000000000000001
 781 Operation = ENCRYPT
 782 Plaintext = 53696E676C6520626C6F636B206D7367
 783 Ciphertext = E4095D4FB7A7B3792D6175A3261311B8
 784
 785 Cipher = aes-128-ctr
 786 Key = 7E24067817FAE0D743D6CE1F32539163
 787 IV = 006CB6DBC0543B59DA48D90B00000001
 788 Operation = ENCRYPT
 789 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
 790 Ciphertext = 5104A106168A72D9790D41EE8EDAD388EB2E1EFC46DA57C8FCE630DF9141BE28
 791
 792 Cipher = aes-128-ctr
 793 Key = 7691BE035E5020A8AC6E618529F9A0DC
 794 IV = 00E0017B27777F3F4A1786F000000001
 795 Operation = ENCRYPT
 796 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F20212223
 797 Ciphertext = C1CF48A89F2FFDD9CF4652E9EFDB72D74540A42BDE6D7836D59A5CEAAEF3105325B2072F
 798
 799
 800 Cipher = aes-192-ctr
 801 Key = 16AF5B145FC9F579C175F93E3BFB0EED863D06CCFDB78515
 802 IV = 0000004836733C147D6D93CB00000001
 803 Operation = ENCRYPT
 804 Plaintext = 53696E676C6520626C6F636B206D7367
 805 Ciphertext = 4B55384FE259C9C84E7935A003CBE928
 806
 807 Cipher = aes-192-ctr
 808 Key = 7C5CB2401B3DC33C19E7340819E0F69C678C3DB8E6F6A91A
 809 IV = 0096B03B020C6EADC2CB500D00000001
 810 Operation = ENCRYPT
 811 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
 812 Ciphertext = 453243FC609B23327EDFAAFA7131CD9F8490701C5AD4A79CFC1FE0FF42F4FB00
 813
 814 Cipher = aes-192-ctr
 815 Key = 02BF391EE8ECB159B959617B0965279BF59B60A786D3E0FE
 816 IV = 0007BDFD5CBD60278DCC091200000001
 817 Operation = ENCRYPT
 818 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F20212223
 819 Ciphertext = 96893FC55E5C722F540B7DD1DDF7E758D288BC95C69165884536C811662F2188ABEE0935
 820
 821
 822 Cipher = aes-256-ctr
 823 Key = 776BEFF2851DB06F4C8A0542C8696F6C6A81AF1EEC96B4D37FC1D689E6C1C104
 824 IV = 00000060DB5672C97AA8F0B200000001
 825 Operation = ENCRYPT
 826 Plaintext = 53696E676C6520626C6F636B206D7367
 827 Ciphertext = 145AD01DBF824EC7560863DC71E3E0C0
 828
 829 Cipher = aes-256-ctr
 830 Key = F6D66D6BD52D59BB0796365879EFF886C66DD51A5B6A99744B50590C87A23884
 831 IV = 00FAAC24C1585EF15A43D87500000001
 832 Operation = ENCRYPT
 833 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
 834 Ciphertext = F05E231B3894612C49EE000B804EB2A9B8306B508F839D6A5530831D9344AF1C
 835
 836 Cipher = aes-256-ctr
 837 Key = FF7A617CE69148E4F1726E2F43581DE2AA62D9F805532EDFF1EED687FB54153D
 838 IV = 001CC5B751A51D70A1C1114800000001
 839 Operation = ENCRYPT
 840 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F20212223
 841 Ciphertext = EB6C52821D0BBBF7CE7594462ACA4FAAB407DF866569FD07F48CC0B583D6071F1EC0E6B8
 842
 843
 844 # Self-generated vector to trigger false carry on big-endian platforms
 845 Cipher = aes-128-ctr
 846 Key = 7E24067817FAE0D743D6CE1F32539163
 847 IV = 00000000000000007FFFFFFFFFFFFFFF
 848 Operation = ENCRYPT
 849 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
 850 Ciphertext = A2D459477E6432BD74184B1B5370D2243CDC202BC43583B2A55D288CDBBD1E03
 851
 852 # DES ECB tests (from destest)
 853
 854 Cipher = DES-ECB
 855 Key = 0000000000000000
 856 Plaintext = 0000000000000000
 857 Ciphertext = 8CA64DE9C1B123A7
 858
 859 Cipher = DES-ECB
 860 Key = FFFFFFFFFFFFFFFF
 861 Plaintext = FFFFFFFFFFFFFFFF
 862 Ciphertext = 7359B2163E4EDC58
 863
 864 Cipher = DES-ECB
 865 Key = 3000000000000000
 866 Plaintext = 1000000000000001
 867 Ciphertext = 958E6E627A05557B
 868
 869 Cipher = DES-ECB
 870 Key = 1111111111111111
 871 Plaintext = 1111111111111111
 872 Ciphertext = F40379AB9E0EC533
 873
 874 Cipher = DES-ECB
 875 Key = 0123456789ABCDEF
 876 Plaintext = 1111111111111111
 877 Ciphertext = 17668DFC7292532D
 878
 879 Cipher = DES-ECB
 880 Key = 1111111111111111
 881 Plaintext = 0123456789ABCDEF
 882 Ciphertext = 8A5AE1F81AB8F2DD
 883
 884 Cipher = DES-ECB
 885 Key = FEDCBA9876543210
 886 Plaintext = 0123456789ABCDEF
 887 Ciphertext = ED39D950FA74BCC4
 888
 889
 890 # DESX-CBC tests (from destest)
 891 Cipher = DESX-CBC
 892 Key = 0123456789abcdeff1e0d3c2b5a49786fedcba9876543210
 893 IV = fedcba9876543210
 894 Plaintext = 37363534333231204E6F77206973207468652074696D6520666F722000000000
 895 Ciphertext = 846B2914851E9A2954732F8AA0A611C115CDC2D7951B1053A63C5E03B21AA3C4
 896
 897
 898 # DES EDE3 CBC tests (from destest)
 899 Cipher = DES-EDE3-CBC
 900 Key = 0123456789abcdeff1e0d3c2b5a49786fedcba9876543210
 901 IV = fedcba9876543210
 902 Plaintext = 37363534333231204E6F77206973207468652074696D6520666F722000000000
 903 Ciphertext = 3FE301C962AC01D02213763C1CBD4CDC799657C064ECF5D41C673812CFDE9675
 904
 905
 906 # RC4 tests (from rc4test)
 907 Cipher = RC4
 908 Key = 0123456789abcdef0123456789abcdef
 909 Plaintext = 0123456789abcdef
 910 Ciphertext = 75b7878099e0c596
 911
 912 Cipher = RC4
 913 Key = 0123456789abcdef0123456789abcdef
 914 Plaintext = 0000000000000000
 915 Ciphertext = 7494c2e7104b0879
 916
 917 Cipher = RC4
 918 Key = 00000000000000000000000000000000
 919 Plaintext = 0000000000000000
 920 Ciphertext = de188941a3375d3a
 921
 922 Cipher = RC4
 923 Key = ef012345ef012345ef012345ef012345
 924 Plaintext = 0000000000000000000000000000000000000000
 925 Ciphertext = d6a141a7ec3c38dfbd615a1162e1c7ba36b67858
 926
 927 Cipher = RC4
 928 Key = 0123456789abcdef0123456789abcdef
 929 Plaintext = 123456789ABCDEF0123456789ABCDEF0123456789ABCDEF012345678
 930 Ciphertext = 66a0949f8af7d6891f7f832ba833c00c892ebe30143ce28740011ecf
 931
 932 Cipher = RC4
 933 Key = ef012345ef012345ef012345ef012345
 934 Plaintext = 00000000000000000000
 935 Ciphertext = d6a141a7ec3c38dfbd61
 936
 937
 938
 939 # Camellia tests from RFC3713
 940 # For all ECB encrypts and decrypts, the transformed sequence is
 941 #   CAMELLIA-bits-ECB:key::plaintext:ciphertext:encdec
 942 Cipher = CAMELLIA-128-ECB
 943 Key = 0123456789abcdeffedcba9876543210
 944 Plaintext = 0123456789abcdeffedcba9876543210
 945 Ciphertext = 67673138549669730857065648eabe43
 946
 947 Cipher = CAMELLIA-192-ECB
 948 Key = 0123456789abcdeffedcba98765432100011223344556677
 949 Plaintext = 0123456789abcdeffedcba9876543210
 950 Ciphertext = b4993401b3e996f84ee5cee7d79b09b9
 951
 952 Cipher = CAMELLIA-256-ECB
 953 Key = 0123456789abcdeffedcba987654321000112233445566778899aabbccddeeff
 954 Plaintext = 0123456789abcdeffedcba9876543210
 955 Ciphertext = 9acc237dff16d76c20ef7c919e3a7509
 956
 957
 958 # ECB-CAMELLIA128.Encrypt
 959 Cipher = CAMELLIA-128-ECB
 960 Key = 000102030405060708090A0B0C0D0E0F
 961 Operation = ENCRYPT
 962 Plaintext = 00112233445566778899AABBCCDDEEFF
 963 Ciphertext = 77CF412067AF8270613529149919546F
 964
 965 Cipher = CAMELLIA-192-ECB
 966 Key = 000102030405060708090A0B0C0D0E0F1011121314151617
 967 Operation = ENCRYPT
 968 Plaintext = 00112233445566778899AABBCCDDEEFF
 969 Ciphertext = B22F3C36B72D31329EEE8ADDC2906C68
 970
 971 Cipher = CAMELLIA-256-ECB
 972 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
 973 Operation = ENCRYPT
 974 Plaintext = 00112233445566778899AABBCCDDEEFF
 975 Ciphertext = 2EDF1F3418D53B88841FC8985FB1ECF2
 976
 977
 978 # ECB-CAMELLIA128.Encrypt and ECB-CAMELLIA128.Decrypt
 979 Cipher = CAMELLIA-128-ECB
 980 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 981 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
 982 Ciphertext = 432FC5DCD628115B7C388D770B270C96
 983
 984 Cipher = CAMELLIA-128-ECB
 985 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 986 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
 987 Ciphertext = 0BE1F14023782A22E8384C5ABB7FAB2B
 988
 989 Cipher = CAMELLIA-128-ECB
 990 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 991 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
 992 Ciphertext = A0A1ABCD1893AB6FE0FE5B65DF5F8636
 993
 994 Cipher = CAMELLIA-128-ECB
 995 Key = 2B7E151628AED2A6ABF7158809CF4F3C
 996 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
 997 Ciphertext = E61925E0D5DFAA9BB29F815B3076E51A
 998
 999
1000 # ECB-CAMELLIA192.Encrypt and ECB-CAMELLIA192.Decrypt
1001 Cipher = CAMELLIA-192-ECB
1002 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1003 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1004 Ciphertext = CCCC6C4E138B45848514D48D0D3439D3
1005
1006 Cipher = CAMELLIA-192-ECB
1007 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1008 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1009 Ciphertext = 5713C62C14B2EC0F8393B6AFD6F5785A
1010
1011 Cipher = CAMELLIA-192-ECB
1012 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1013 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1014 Ciphertext = B40ED2B60EB54D09D030CF511FEEF366
1015
1016 Cipher = CAMELLIA-192-ECB
1017 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1018 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1019 Ciphertext = 909DBD95799096748CB27357E73E1D26
1020
1021
1022 # ECB-CAMELLIA256.Encrypt and ECB-CAMELLIA256.Decrypt
1023 Cipher = CAMELLIA-256-ECB
1024 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1025 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1026 Ciphertext = BEFD219B112FA00098919CD101C9CCFA
1027
1028 Cipher = CAMELLIA-256-ECB
1029 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1030 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1031 Ciphertext = C91D3A8F1AEA08A9386CF4B66C0169EA
1032
1033 Cipher = CAMELLIA-256-ECB
1034 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1035 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1036 Ciphertext = A623D711DC5F25A51BB8A80D56397D28
1037
1038 Cipher = CAMELLIA-256-ECB
1039 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1040 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1041 Ciphertext = 7960109FB6DC42947FCFE59EA3C5EB6B
1042
1043
1044 # For all CBC encrypts and decrypts, the transformed sequence is
1045 #   CAMELLIA-bits-CBC:key:IV/ciphertext':plaintext:ciphertext:encdec
1046 # CBC-CAMELLIA128.Encrypt and CBC-CAMELLIA128.Decrypt
1047 Cipher = CAMELLIA-128-CBC
1048 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1049 IV = 000102030405060708090A0B0C0D0E0F
1050 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1051 Ciphertext = 1607CF494B36BBF00DAEB0B503C831AB
1052
1053 Cipher = CAMELLIA-128-CBC
1054 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1055 IV = 1607CF494B36BBF00DAEB0B503C831AB
1056 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1057 Ciphertext = A2F2CF671629EF7840C5A5DFB5074887
1058
1059 Cipher = CAMELLIA-128-CBC
1060 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1061 IV = A2F2CF671629EF7840C5A5DFB5074887
1062 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1063 Ciphertext = 0F06165008CF8B8B5A63586362543E54
1064
1065 Cipher = CAMELLIA-128-CBC
1066 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1067 IV = 36A84CDAFD5F9A85ADA0F0A993D6D577
1068 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1069 Ciphertext = 74C64268CDB8B8FAF5B34E8AF3732980
1070
1071
1072 # CBC-CAMELLIA192.Encrypt and CBC-CAMELLIA192.Decrypt
1073 Cipher = CAMELLIA-192-CBC
1074 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1075 IV = 000102030405060708090A0B0C0D0E0F
1076 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1077 Ciphertext = 2A4830AB5AC4A1A2405955FD2195CF93
1078
1079 Cipher = CAMELLIA-192-CBC
1080 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1081 IV = 2A4830AB5AC4A1A2405955FD2195CF93
1082 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1083 Ciphertext = 5D5A869BD14CE54264F892A6DD2EC3D5
1084
1085 Cipher = CAMELLIA-192-CBC
1086 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1087 IV = 5D5A869BD14CE54264F892A6DD2EC3D5
1088 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1089 Ciphertext = 37D359C3349836D884E310ADDF68C449
1090
1091 Cipher = CAMELLIA-192-CBC
1092 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1093 IV = 37D359C3349836D884E310ADDF68C449
1094 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1095 Ciphertext = 01FAAA930B4AB9916E9668E1428C6B08
1096
1097
1098 # CBC-CAMELLIA256.Encrypt and CBC-CAMELLIA256.Decrypt
1099 Cipher = CAMELLIA-256-CBC
1100 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1101 IV = 000102030405060708090A0B0C0D0E0F
1102 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1103 Ciphertext = E6CFA35FC02B134A4D2C0B6737AC3EDA
1104
1105 Cipher = CAMELLIA-256-CBC
1106 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1107 IV = E6CFA35FC02B134A4D2C0B6737AC3EDA
1108 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1109 Ciphertext = 36CBEB73BD504B4070B1B7DE2B21EB50
1110
1111 Cipher = CAMELLIA-256-CBC
1112 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1113 IV = 36CBEB73BD504B4070B1B7DE2B21EB50
1114 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1115 Ciphertext = E31A6055297D96CA3330CDF1B1860A83
1116
1117 Cipher = CAMELLIA-256-CBC
1118 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1119 IV = E31A6055297D96CA3330CDF1B1860A83
1120 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1121 Ciphertext = 5D563F6D1CCCF236051C0C5C1C58F28F
1122
1123
1124 # We don't support CFB{1,8}-CAMELLIAxxx.{En,De}crypt
1125 # For all CFB128 encrypts and decrypts, the transformed sequence is
1126 #   CAMELLIA-bits-CFB:key:IV/ciphertext':plaintext:ciphertext:encdec
1127 # CFB128-CAMELLIA128.Encrypt
1128 Cipher = CAMELLIA-128-CFB
1129 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1130 IV = 000102030405060708090A0B0C0D0E0F
1131 Operation = ENCRYPT
1132 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1133 Ciphertext = 14F7646187817EB586599146B82BD719
1134
1135 Cipher = CAMELLIA-128-CFB
1136 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1137 IV = 14F7646187817EB586599146B82BD719
1138 Operation = ENCRYPT
1139 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1140 Ciphertext = A53D28BB82DF741103EA4F921A44880B
1141
1142 Cipher = CAMELLIA-128-CFB
1143 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1144 IV = A53D28BB82DF741103EA4F921A44880B
1145 Operation = ENCRYPT
1146 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1147 Ciphertext = 9C2157A664626D1DEF9EA420FDE69B96
1148
1149 Cipher = CAMELLIA-128-CFB
1150 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1151 IV = 9C2157A664626D1DEF9EA420FDE69B96
1152 Operation = ENCRYPT
1153 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1154 Ciphertext = 742A25F0542340C7BAEF24CA8482BB09
1155
1156
1157 # CFB128-CAMELLIA128.Decrypt
1158 Cipher = CAMELLIA-128-CFB
1159 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1160 IV = 000102030405060708090A0B0C0D0E0F
1161 Operation = DECRYPT
1162 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1163 Ciphertext = 14F7646187817EB586599146B82BD719
1164
1165 Cipher = CAMELLIA-128-CFB
1166 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1167 IV = 14F7646187817EB586599146B82BD719
1168 Operation = DECRYPT
1169 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1170 Ciphertext = A53D28BB82DF741103EA4F921A44880B
1171
1172 Cipher = CAMELLIA-128-CFB
1173 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1174 IV = A53D28BB82DF741103EA4F921A44880B
1175 Operation = DECRYPT
1176 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1177 Ciphertext = 9C2157A664626D1DEF9EA420FDE69B96
1178
1179 Cipher = CAMELLIA-128-CFB
1180 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1181 IV = 9C2157A664626D1DEF9EA420FDE69B96
1182 Operation = DECRYPT
1183 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1184 Ciphertext = 742A25F0542340C7BAEF24CA8482BB09
1185
1186
1187 # CFB128-CAMELLIA192.Encrypt
1188 Cipher = CAMELLIA-192-CFB
1189 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1190 IV = 000102030405060708090A0B0C0D0E0F
1191 Operation = ENCRYPT
1192 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1193 Ciphertext = C832BB9780677DAA82D9B6860DCD565E
1194
1195 Cipher = CAMELLIA-192-CFB
1196 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1197 IV = C832BB9780677DAA82D9B6860DCD565E
1198 Operation = ENCRYPT
1199 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1200 Ciphertext = 86F8491627906D780C7A6D46EA331F98
1201
1202 Cipher = CAMELLIA-192-CFB
1203 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1204 IV = 86F8491627906D780C7A6D46EA331F98
1205 Operation = ENCRYPT
1206 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1207 Ciphertext = 69511CCE594CF710CB98BB63D7221F01
1208
1209 Cipher = CAMELLIA-192-CFB
1210 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1211 IV = 69511CCE594CF710CB98BB63D7221F01
1212 Operation = ENCRYPT
1213 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1214 Ciphertext = D5B5378A3ABED55803F25565D8907B84
1215
1216
1217 # CFB128-CAMELLIA192.Decrypt
1218 Cipher = CAMELLIA-192-CFB
1219 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1220 IV = 000102030405060708090A0B0C0D0E0F
1221 Operation = DECRYPT
1222 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1223 Ciphertext = C832BB9780677DAA82D9B6860DCD565E
1224
1225 Cipher = CAMELLIA-192-CFB
1226 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1227 IV = C832BB9780677DAA82D9B6860DCD565E
1228 Operation = DECRYPT
1229 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1230 Ciphertext = 86F8491627906D780C7A6D46EA331F98
1231
1232 Cipher = CAMELLIA-192-CFB
1233 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1234 IV = 86F8491627906D780C7A6D46EA331F98
1235 Operation = DECRYPT
1236 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1237 Ciphertext = 69511CCE594CF710CB98BB63D7221F01
1238
1239 Cipher = CAMELLIA-192-CFB
1240 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1241 IV = 69511CCE594CF710CB98BB63D7221F01
1242 Operation = DECRYPT
1243 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1244 Ciphertext = D5B5378A3ABED55803F25565D8907B84
1245
1246
1247 # CFB128-CAMELLIA256.Encrypt
1248 Cipher = CAMELLIA-256-CFB
1249 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1250 IV = 000102030405060708090A0B0C0D0E0F
1251 Operation = ENCRYPT
1252 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1253 Ciphertext = CF6107BB0CEA7D7FB1BD31F5E7B06C93
1254
1255 Cipher = CAMELLIA-256-CFB
1256 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1257 IV = CF6107BB0CEA7D7FB1BD31F5E7B06C93
1258 Operation = ENCRYPT
1259 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1260 Ciphertext = 89BEDB4CCDD864EA11BA4CBE849B5E2B
1261
1262 Cipher = CAMELLIA-256-CFB
1263 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1264 IV = 89BEDB4CCDD864EA11BA4CBE849B5E2B
1265 Operation = ENCRYPT
1266 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1267 Ciphertext = 555FC3F34BDD2D54C62D9E3BF338C1C4
1268
1269 Cipher = CAMELLIA-256-CFB
1270 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1271 IV = 555FC3F34BDD2D54C62D9E3BF338C1C4
1272 Operation = ENCRYPT
1273 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1274 Ciphertext = 5953ADCE14DB8C7F39F1BD39F359BFFA
1275
1276
1277 # CFB128-CAMELLIA256.Decrypt
1278 Cipher = CAMELLIA-256-CFB
1279 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1280 IV = 000102030405060708090A0B0C0D0E0F
1281 Operation = DECRYPT
1282 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1283 Ciphertext = CF6107BB0CEA7D7FB1BD31F5E7B06C93
1284
1285 Cipher = CAMELLIA-256-CFB
1286 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1287 IV = CF6107BB0CEA7D7FB1BD31F5E7B06C93
1288 Operation = DECRYPT
1289 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1290 Ciphertext = 89BEDB4CCDD864EA11BA4CBE849B5E2B
1291
1292 Cipher = CAMELLIA-256-CFB
1293 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1294 IV = 89BEDB4CCDD864EA11BA4CBE849B5E2B
1295 Operation = DECRYPT
1296 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1297 Ciphertext = 555FC3F34BDD2D54C62D9E3BF338C1C4
1298
1299 Cipher = CAMELLIA-256-CFB
1300 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1301 IV = 555FC3F34BDD2D54C62D9E3BF338C1C4
1302 Operation = DECRYPT
1303 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1304 Ciphertext = 5953ADCE14DB8C7F39F1BD39F359BFFA
1305
1306
1307 # For all OFB encrypts and decrypts, the transformed sequence is
1308 #   CAMELLIA-bits-OFB:key:IV/output':plaintext:ciphertext:encdec
1309 # OFB-CAMELLIA128.Encrypt
1310 Cipher = CAMELLIA-128-OFB
1311 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1312 IV = 000102030405060708090A0B0C0D0E0F
1313 Operation = ENCRYPT
1314 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1315 Ciphertext = 14F7646187817EB586599146B82BD719
1316
1317 Cipher = CAMELLIA-128-OFB
1318 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1319 IV = 50FE67CC996D32B6DA0937E99BAFEC60
1320 Operation = ENCRYPT
1321 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1322 Ciphertext = 25623DB569CA51E01482649977E28D84
1323
1324 Cipher = CAMELLIA-128-OFB
1325 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1326 IV = D9A4DADA0892239F6B8B3D7680E15674
1327 Operation = ENCRYPT
1328 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1329 Ciphertext = C776634A60729DC657D12B9FCA801E98
1330
1331 Cipher = CAMELLIA-128-OFB
1332 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1333 IV = A78819583F0308E7A6BF36B1386ABF23
1334 Operation = ENCRYPT
1335 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1336 Ciphertext = D776379BE0E50825E681DA1A4C980E8E
1337
1338
1339 # OFB-CAMELLIA128.Decrypt
1340 Cipher = CAMELLIA-128-OFB
1341 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1342 IV = 000102030405060708090A0B0C0D0E0F
1343 Operation = DECRYPT
1344 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1345 Ciphertext = 14F7646187817EB586599146B82BD719
1346
1347 Cipher = CAMELLIA-128-OFB
1348 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1349 IV = 50FE67CC996D32B6DA0937E99BAFEC60
1350 Operation = DECRYPT
1351 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1352 Ciphertext = 25623DB569CA51E01482649977E28D84
1353
1354 Cipher = CAMELLIA-128-OFB
1355 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1356 IV = D9A4DADA0892239F6B8B3D7680E15674
1357 Operation = DECRYPT
1358 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1359 Ciphertext = C776634A60729DC657D12B9FCA801E98
1360
1361 Cipher = CAMELLIA-128-OFB
1362 Key = 2B7E151628AED2A6ABF7158809CF4F3C
1363 IV = A78819583F0308E7A6BF36B1386ABF23
1364 Operation = DECRYPT
1365 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1366 Ciphertext = D776379BE0E50825E681DA1A4C980E8E
1367
1368
1369 # OFB-CAMELLIA192.Encrypt
1370 Cipher = CAMELLIA-192-OFB
1371 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1372 IV = 000102030405060708090A0B0C0D0E0F
1373 Operation = ENCRYPT
1374 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1375 Ciphertext = C832BB9780677DAA82D9B6860DCD565E
1376
1377 Cipher = CAMELLIA-192-OFB
1378 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1379 IV = A609B38DF3B1133DDDFF2718BA09565E
1380 Operation = ENCRYPT
1381 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1382 Ciphertext = 8ECEB7D0350D72C7F78562AEBDF99339
1383
1384 Cipher = CAMELLIA-192-OFB
1385 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1386 IV = 52EF01DA52602FE0975F78AC84BF8A50
1387 Operation = ENCRYPT
1388 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1389 Ciphertext = BDD62DBBB9700846C53B507F544696F0
1390
1391 Cipher = CAMELLIA-192-OFB
1392 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1393 IV = BD5286AC63AABD7EB067AC54B553F71D
1394 Operation = ENCRYPT
1395 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1396 Ciphertext = E28014E046B802F385C4C2E13EAD4A72
1397
1398
1399 # OFB-CAMELLIA192.Decrypt
1400 Cipher = CAMELLIA-192-OFB
1401 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1402 IV = 000102030405060708090A0B0C0D0E0F
1403 Operation = DECRYPT
1404 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1405 Ciphertext = C832BB9780677DAA82D9B6860DCD565E
1406
1407 Cipher = CAMELLIA-192-OFB
1408 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1409 IV = A609B38DF3B1133DDDFF2718BA09565E
1410 Operation = DECRYPT
1411 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1412 Ciphertext = 8ECEB7D0350D72C7F78562AEBDF99339
1413
1414 Cipher = CAMELLIA-192-OFB
1415 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1416 IV = 52EF01DA52602FE0975F78AC84BF8A50
1417 Operation = DECRYPT
1418 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1419 Ciphertext = BDD62DBBB9700846C53B507F544696F0
1420
1421 Cipher = CAMELLIA-192-OFB
1422 Key = 8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B
1423 IV = BD5286AC63AABD7EB067AC54B553F71D
1424 Operation = DECRYPT
1425 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1426 Ciphertext = E28014E046B802F385C4C2E13EAD4A72
1427
1428
1429 # OFB-CAMELLIA256.Encrypt
1430 Cipher = CAMELLIA-256-OFB
1431 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1432 IV = 000102030405060708090A0B0C0D0E0F
1433 Operation = ENCRYPT
1434 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1435 Ciphertext = CF6107BB0CEA7D7FB1BD31F5E7B06C93
1436
1437 Cipher = CAMELLIA-256-OFB
1438 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1439 IV = B7BF3A5DF43989DD97F0FA97EBCE2F4A
1440 Operation = ENCRYPT
1441 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1442 Ciphertext = 127AD97E8E3994E4820027D7BA109368
1443
1444 Cipher = CAMELLIA-256-OFB
1445 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1446 IV = E1C656305ED1A7A6563805746FE03EDC
1447 Operation = ENCRYPT
1448 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1449 Ciphertext = 6BFF6265A6A6B7A535BC65A80B17214E
1450
1451 Cipher = CAMELLIA-256-OFB
1452 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1453 IV = 41635BE625B48AFC1666DD42A09D96E7
1454 Operation = ENCRYPT
1455 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1456 Ciphertext = 0A4A0404E26AA78A27CB271E8BF3CF20
1457
1458
1459 # OFB-CAMELLIA256.Decrypt
1460 Cipher = CAMELLIA-256-OFB
1461 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1462 IV = 000102030405060708090A0B0C0D0E0F
1463 Operation = DECRYPT
1464 Plaintext = 6BC1BEE22E409F96E93D7E117393172A
1465 Ciphertext = CF6107BB0CEA7D7FB1BD31F5E7B06C93
1466
1467 Cipher = CAMELLIA-256-OFB
1468 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1469 IV = B7BF3A5DF43989DD97F0FA97EBCE2F4A
1470 Operation = DECRYPT
1471 Plaintext = AE2D8A571E03AC9C9EB76FAC45AF8E51
1472 Ciphertext = 127AD97E8E3994E4820027D7BA109368
1473
1474 Cipher = CAMELLIA-256-OFB
1475 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1476 IV = E1C656305ED1A7A6563805746FE03EDC
1477 Operation = DECRYPT
1478 Plaintext = 30C81C46A35CE411E5FBC1191A0A52EF
1479 Ciphertext = 6BFF6265A6A6B7A535BC65A80B17214E
1480
1481 Cipher = CAMELLIA-256-OFB
1482 Key = 603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4
1483 IV = 41635BE625B48AFC1666DD42A09D96E7
1484 Operation = DECRYPT
1485 Plaintext = F69F2445DF4F9B17AD2B417BE66C3710
1486 Ciphertext = 0A4A0404E26AA78A27CB271E8BF3CF20
1487
1488
1489 # Camellia test vectors from RFC5528
1490 Cipher = CAMELLIA-128-CTR
1491 Key = AE6852F8121067CC4BF7A5765577F39E
1492 IV = 00000030000000000000000000000001
1493 Operation = ENCRYPT
1494 Plaintext = 53696E676C6520626C6F636B206D7367
1495 Ciphertext = D09DC29A8214619A20877C76DB1F0B3F
1496
1497 Cipher = CAMELLIA-128-CTR
1498 Key = 7E24067817FAE0D743D6CE1F32539163
1499 IV = 006CB6DBC0543B59DA48D90B00000001
1500 Operation = ENCRYPT
1501 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
1502 Ciphertext = DBF3C78DC08396D4DA7C907765BBCB442B8E8E0F31F0DCA72C7417E35360E048
1503
1504 Cipher = CAMELLIA-128-CTR
1505 Key = 7691BE035E5020A8AC6E618529F9A0DC
1506 IV = 00E0017B27777F3F4A1786F000000001
1507 Operation = ENCRYPT
1508 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F20212223
1509 Ciphertext = B19D1FCDCB75EB882F849CE24D85CF739CE64B2B5C9D73F14F2D5D9DCE9889CDDF508696
1510
1511 Cipher = CAMELLIA-192-CTR
1512 Key = 16AF5B145FC9F579C175F93E3BFB0EED863D06CCFDB78515
1513 IV = 0000004836733C147D6D93CB00000001
1514 Operation = ENCRYPT
1515 Plaintext = 53696E676C6520626C6F636B206D7367
1516 Ciphertext = 2379399E8A8D2B2B16702FC78B9E9696
1517
1518 Cipher = CAMELLIA-192-CTR
1519 Key = 7C5CB2401B3DC33C19E7340819E0F69C678C3DB8E6F6A91A
1520 IV = 0096B03B020C6EADC2CB500D00000001
1521 Operation = ENCRYPT
1522 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
1523 Ciphertext = 7DEF34F7A5D0E415674B7FFCAE67C75DD018B86FF23051E056392A99F35A4CED
1524
1525 Cipher = CAMELLIA-192-CTR
1526 Key = 02BF391EE8ECB159B959617B0965279BF59B60A786D3E0FE
1527 IV = 0007BDFD5CBD60278DCC091200000001
1528 Operation = ENCRYPT
1529 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F20212223
1530 Ciphertext = 5710E556E1487A20B5AC0E73F19E4E7876F37FDC91B1EF4D4DADE8E666A64D0ED557AB57
1531
1532 Cipher = CAMELLIA-256-CTR
1533 Key = 776BEFF2851DB06F4C8A0542C8696F6C6A81AF1EEC96B4D37FC1D689E6C1C104
1534 IV = 00000060DB5672C97AA8F0B200000001
1535 Operation = ENCRYPT
1536 Plaintext = 53696E676C6520626C6F636B206D7367
1537 Ciphertext = 3401F9C8247EFFCEBD6994714C1BBB11
1538
1539 Cipher = CAMELLIA-256-CTR
1540 Key = F6D66D6BD52D59BB0796365879EFF886C66DD51A5B6A99744B50590C87A23884
1541 IV = 00FAAC24C1585EF15A43D87500000001
1542 Operation = ENCRYPT
1543 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
1544 Ciphertext = D6C30392246F7808A83C2B22A8839E45E51CD48A1CDF406EBC9CC2D3AB834108
1545
1546 Cipher = CAMELLIA-256-CTR
1547 Key = FF7A617CE69148E4F1726E2F43581DE2AA62D9F805532EDFF1EED687FB54153D
1548 IV = 001CC5B751A51D70A1C1114800000001
1549 Operation = ENCRYPT
1550 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F20212223
1551 Ciphertext = A4DA23FCE6A5FFAA6D64AE9A0652A42CD161A34B65F9679F75C01F101F71276F15EF0D8D
1552
1553 # SEED test vectors from RFC4269
1554 Cipher = SEED-ECB
1555 Key = 00000000000000000000000000000000
1556 Operation = DECRYPT
1557 Plaintext = 000102030405060708090A0B0C0D0E0F
1558 Ciphertext = 5EBAC6E0054E166819AFF1CC6D346CDB
1559
1560 Cipher = SEED-ECB
1561 Key = 000102030405060708090A0B0C0D0E0F
1562 Operation = DECRYPT
1563 Plaintext = 00000000000000000000000000000000
1564 Ciphertext = C11F22F20140505084483597E4370F43
1565
1566 Cipher = SEED-ECB
1567 Key = 4706480851E61BE85D74BFB3FD956185
1568 Operation = DECRYPT
1569 Plaintext = 83A2F8A288641FB9A4E9A5CC2F131C7D
1570 Ciphertext = EE54D13EBCAE706D226BC3142CD40D4A
1571
1572 Cipher = SEED-ECB
1573 Key = 28DBC3BC49FFD87DCFA509B11D422BE7
1574 Operation = DECRYPT
1575 Plaintext = B41E6BE2EBA84A148E2EED84593C5EC7
1576 Ciphertext = 9B9B7BFCD1813CB95D0B3618F40F5122
1577
1578 Cipher = SEED-ECB
1579 Key = 00000000000000000000000000000000
1580 Operation = ENCRYPT
1581 Plaintext = 000102030405060708090A0B0C0D0E0F
1582 Ciphertext = 5EBAC6E0054E166819AFF1CC6D346CDB
1583
1584 Cipher = SEED-ECB
1585 Key = 000102030405060708090A0B0C0D0E0F
1586 Operation = ENCRYPT
1587 Plaintext = 00000000000000000000000000000000
1588 Ciphertext = C11F22F20140505084483597E4370F43
1589
1590 Cipher = SEED-ECB
1591 Key = 4706480851E61BE85D74BFB3FD956185
1592 Operation = ENCRYPT
1593 Plaintext = 83A2F8A288641FB9A4E9A5CC2F131C7D
1594 Ciphertext = EE54D13EBCAE706D226BC3142CD40D4A
1595
1596 Cipher = SEED-ECB
1597 Key = 28DBC3BC49FFD87DCFA509B11D422BE7
1598 Operation = ENCRYPT
1599 Plaintext = B41E6BE2EBA84A148E2EED84593C5EC7
1600 Ciphertext = 9B9B7BFCD1813CB95D0B3618F40F5122
1601
1602
1603 # AES CCM 256 bit key
1604 Cipher = aes-256-ccm
1605 Key = 1bde3251d41a8b5ea013c195ae128b218b3e0306376357077ef1c1c78548b92e
1606 IV = 5b8e40746f6b98e00f1d13ff41
1607 AAD = c17a32514eb6103f3249e076d4c871dc97e04b286699e54491dc18f6d734d4c0
1608 Tag = 2024931d73bca480c24a24ece6b6c2bf
1609 Plaintext = 53bd72a97089e312422bf72e242377b3c6ee3e2075389b999c4ef7f28bd2b80a
1610 Ciphertext = 9a5fcccdb4cf04e7293d2775cc76a488f042382d949b43b7d6bb2b9864786726
1611
1612 Cipher = aes-256-ccm
1613 Key = 1bde3251d41a8b5ea013c195ae128b218b3e0306376357077ef1c1c78548b92e
1614 IV = 5b8e40746f6b98e00f1d13ff41
1615 AAD = c17a32514eb6103f3249e076d4c871dc97e04b286699e54491dc18f6d734d4c0
1616 Tag = 2024931d73bca480c24a24ece6b6c2be
1617 Plaintext = 53bd72a97089e312422bf72e242377b3c6ee3e2075389b999c4ef7f28bd2b80a
1618 Ciphertext = 9a5fcccdb4cf04e7293d2775cc76a488f042382d949b43b7d6bb2b9864786726
1619 Operation = DECRYPT
1620 Result = CIPHERUPDATE_ERROR
1621
1622 # AES GCM test vectors from http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-spec.pdf
1623 Cipher = aes-128-gcm
1624 Key = 00000000000000000000000000000000
1625 IV = 000000000000000000000000
1626 AAD =
1627 Tag = 58e2fccefa7e3061367f1d57a4e7455a
1628 Plaintext =
1629 Ciphertext =
1630
1631 Cipher = aes-128-gcm
1632 Key = 00000000000000000000000000000000
1633 IV = 000000000000000000000000
1634 AAD =
1635 Tag = ab6e47d42cec13bdf53a67b21257bddf
1636 Plaintext = 00000000000000000000000000000000
1637 Ciphertext = 0388dace60b6a392f328c2b971b2fe78
1638
1639 Cipher = aes-128-gcm
1640 Key = feffe9928665731c6d6a8f9467308308
1641 IV = cafebabefacedbaddecaf888
1642 AAD =
1643 Tag = 4d5c2af327cd64a62cf35abd2ba6fab4
1644 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
1645 Ciphertext = 42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091473f5985
1646
1647 Cipher = aes-128-gcm
1648 Key = feffe9928665731c6d6a8f9467308308
1649 IV = cafebabefacedbaddecaf888
1650 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1651 Tag = 5bc94fbc3221a5db94fae95ae7121a47
1652 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1653 Ciphertext = 42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091
1654
1655 Cipher = aes-128-gcm
1656 Key = feffe9928665731c6d6a8f9467308308
1657 IV = cafebabefacedbad
1658 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1659 Tag = 3612d2e79e3b0785561be14aaca2fccb
1660 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1661 Ciphertext = 61353b4c2806934a777ff51fa22a4755699b2a714fcdc6f83766e5f97b6c742373806900e49f24b22b097544d4896b424989b5e1ebac0f07c23f4598
1662
1663 Cipher = aes-128-gcm
1664 Key = feffe9928665731c6d6a8f9467308308
1665 IV = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
1666 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1667 Tag = 619cc5aefffe0bfa462af43c1699d050
1668 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1669 Ciphertext = 8ce24998625615b603a033aca13fb894be9112a5c3a211a8ba262a3cca7e2ca701e4a9a4fba43c90ccdcb281d48c7c6fd62875d2aca417034c34aee5
1670
1671 Cipher = aes-128-gcm
1672 Key = feffe9928665731c6d6a8f9467308308
1673 IV = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
1674 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1675 Tag = 619cc5aefffe0bfa462af43c1699d051
1676 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1677 Ciphertext = 8ce24998625615b603a033aca13fb894be9112a5c3a211a8ba262a3cca7e2ca701e4a9a4fba43c90ccdcb281d48c7c6fd62875d2aca417034c34aee5
1678 Operation = DECRYPT
1679 Result = CIPHERFINAL_ERROR
1680
1681 Cipher = aes-192-gcm
1682 Key = 000000000000000000000000000000000000000000000000
1683 IV = 000000000000000000000000
1684 AAD =
1685 Tag = cd33b28ac773f74ba00ed1f312572435
1686 Plaintext =
1687 Ciphertext =
1688
1689 Cipher = aes-192-gcm
1690 Key = 000000000000000000000000000000000000000000000000
1691 IV = 000000000000000000000000
1692 AAD =
1693 Tag = 2ff58d80033927ab8ef4d4587514f0fb
1694 Plaintext = 00000000000000000000000000000000
1695 Ciphertext = 98e7247c07f0fe411c267e4384b0f600
1696
1697 Cipher = aes-192-gcm
1698 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
1699 IV = cafebabefacedbaddecaf888
1700 AAD =
1701 Tag = 9924a7c8587336bfb118024db8674a14
1702 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
1703 Ciphertext = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade256
1704
1705 Cipher = aes-192-gcm
1706 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
1707 IV = cafebabefacedbaddecaf888
1708 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1709 Tag = 2519498e80f1478f37ba55bd6d27618c
1710 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1711 Ciphertext = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710
1712
1713 Cipher = aes-192-gcm
1714 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
1715 IV = cafebabefacedbad
1716 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1717 Tag = 65dcc57fcf623a24094fcca40d3533f8
1718 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1719 Ciphertext = 0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f7
1720
1721 Cipher = aes-192-gcm
1722 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
1723 IV = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
1724 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1725 Tag = dcf566ff291c25bbb8568fc3d376a6d9
1726 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1727 Ciphertext = d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373b
1728
1729 Cipher = aes-192-gcm
1730 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
1731 IV = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
1732 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1733 Tag = dcf566ff291c25bbb8568fc3d376a6d8
1734 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1735 Ciphertext = d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373b
1736 Operation = DECRYPT
1737 Result = CIPHERFINAL_ERROR
1738
1739 Cipher = aes-256-gcm
1740 Key = 0000000000000000000000000000000000000000000000000000000000000000
1741 IV = 000000000000000000000000
1742 AAD =
1743 Tag = 530f8afbc74536b9a963b4f1c4cb738b
1744 Plaintext =
1745 Ciphertext =
1746
1747 Cipher = aes-256-gcm
1748 Key = 0000000000000000000000000000000000000000000000000000000000000000
1749 IV = 000000000000000000000000
1750 AAD =
1751 Tag = d0d1c8a799996bf0265b98b5d48ab919
1752 Plaintext = 00000000000000000000000000000000
1753 Ciphertext = cea7403d4d606b6e074ec5d3baf39d18
1754
1755 Cipher = aes-256-gcm
1756 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
1757 IV = cafebabefacedbaddecaf888
1758 AAD =
1759 Tag = b094dac5d93471bdec1a502270e3cc6c
1760 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
1761 Ciphertext = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015ad
1762
1763 Cipher = aes-256-gcm
1764 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
1765 IV = cafebabefacedbaddecaf888
1766 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1767 Tag = 76fc6ece0f4e1768cddf8853bb2d551b
1768 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1769 Ciphertext = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662
1770
1771 Cipher = aes-256-gcm
1772 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
1773 IV = cafebabefacedbad
1774 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1775 Tag = 3a337dbf46a792c45e454913fe2ea8f2
1776 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1777 Ciphertext = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f
1778
1779 Cipher = aes-256-gcm
1780 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
1781 IV = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
1782 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1783 Tag = a44a8266ee1c8eb0c8b5d4cf5ae9f19a
1784 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1785 Ciphertext = 5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3f
1786
1787 Cipher = aes-256-gcm
1788 Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
1789 IV = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
1790 AAD = feedfacedeadbeeffeedfacedeadbeefabaddad2
1791 Tag = a44a8266ee1c8eb0c8b5d4cf5ae9f19b
1792 Plaintext = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
1793 Ciphertext = 5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3f
1794 Operation = DECRYPT
1795 Result = CIPHERFINAL_ERROR
1796
1797 # local add-ons, primarily streaming ghash tests
1798 # 128 bytes aad
1799 Cipher = aes-128-gcm
1800 Key = 00000000000000000000000000000000
1801 IV = 000000000000000000000000
1802 AAD = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015ad
1803 Tag = 5fea793a2d6f974d37e68e0cb8ff9492
1804 Plaintext =
1805 Ciphertext =
1806
1807 # 48 bytes plaintext
1808 Cipher = aes-128-gcm
1809 Key = 00000000000000000000000000000000
1810 IV = 000000000000000000000000
1811 AAD =
1812 Tag = 9dd0a376b08e40eb00c35f29f9ea61a4
1813 Plaintext = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1814 Ciphertext = 0388dace60b6a392f328c2b971b2fe78f795aaab494b5923f7fd89ff948bc1e0200211214e7394da2089b6acd093abe0
1815
1816 # 80 bytes plaintext
1817 Cipher = aes-128-gcm
1818 Key = 00000000000000000000000000000000
1819 IV = 000000000000000000000000
1820 AAD =
1821 Tag = 98885a3a22bd4742fe7b72172193b163
1822 Plaintext = 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1823 Ciphertext = 0388dace60b6a392f328c2b971b2fe78f795aaab494b5923f7fd89ff948bc1e0200211214e7394da2089b6acd093abe0c94da219118e297d7b7ebcbcc9c388f28ade7d85a8ee35616f7124a9d5270291
1824
1825 # 128 bytes plaintext
1826 Cipher = aes-128-gcm
1827 Key = 00000000000000000000000000000000
1828 IV = 000000000000000000000000
1829 AAD =
1830 Tag = cac45f60e31efd3b5a43b98a22ce1aa1
1831 Plaintext = 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1832 Ciphertext = 0388dace60b6a392f328c2b971b2fe78f795aaab494b5923f7fd89ff948bc1e0200211214e7394da2089b6acd093abe0c94da219118e297d7b7ebcbcc9c388f28ade7d85a8ee35616f7124a9d527029195b84d1b96c690ff2f2de30bf2ec89e00253786e126504f0dab90c48a30321de3345e6b0461e7c9e6c6b7afedde83f40
1833
1834 # 192 bytes plaintext, iv is chosen so that initial counter LSB is 0xFF
1835 Cipher = aes-128-gcm
1836 Key = 00000000000000000000000000000000
1837 IV = ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1838 AAD =
1839 Tag = 566f8ef683078bfdeeffa869d751a017
1840 Plaintext = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1841 Ciphertext = 56b3373ca9ef6e4a2b64fe1e9a17b61425f10d47a75a5fce13efc6bc784af24f4141bdd48cf7c770887afd573cca5418a9aeffcd7c5ceddfc6a78397b9a85b499da558257267caab2ad0b23ca476a53cb17fb41c4b8b475cb4f3f7165094c229c9e8c4dc0a2a5ff1903e501511221376a1cdb8364c5061a20cae74bc4acd76ceb0abc9fd3217ef9f8c90be402ddf6d8697f4f880dff15bfb7a6b28241ec8fe183c2d59e3f9dfff653c7126f0acb9e64211f42bae12af462b1070bef1ab5e3606
1842
1843 # 240 bytes plaintext, iv is chosen so that initial counter LSB is 0xFF
1844 Cipher = aes-128-gcm
1845 Key = 00000000000000000000000000000000
1846 IV = ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1847 AAD =
1848 Tag = fd0c7011ff07f0071324bdfb2d0f3a29
1849 Plaintext = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1850 Ciphertext = 56b3373ca9ef6e4a2b64fe1e9a17b61425f10d47a75a5fce13efc6bc784af24f4141bdd48cf7c770887afd573cca5418a9aeffcd7c5ceddfc6a78397b9a85b499da558257267caab2ad0b23ca476a53cb17fb41c4b8b475cb4f3f7165094c229c9e8c4dc0a2a5ff1903e501511221376a1cdb8364c5061a20cae74bc4acd76ceb0abc9fd3217ef9f8c90be402ddf6d8697f4f880dff15bfb7a6b28241ec8fe183c2d59e3f9dfff653c7126f0acb9e64211f42bae12af462b1070bef1ab5e3606872ca10dee15b3249b1a1b958f23134c4bccb7d03200bce420a2f8eb66dcf3644d1423c1b5699003c13ecef4bf38a3b6
1851
1852 # 288 bytes plaintext, iv is chosen so that initial counter LSB is 0xFF
1853 Cipher = aes-128-gcm
1854 Key = 00000000000000000000000000000000
1855 IV = ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1856 AAD =
1857 Tag = 8b307f6b33286d0ab026a9ed3fe1e85f
1858 Plaintext = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
1859 Ciphertext = 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
1860
1861 # 80 bytes plaintext, submitted by Intel
1862 Cipher = aes-128-gcm
1863 Key = 843ffcf5d2b72694d19ed01d01249412
1864 IV = dbcca32ebf9b804617c3aa9e
1865 AAD = 00000000000000000000000000000000101112131415161718191a1b1c1d1e1f
1866 Tag = 3b629ccfbc1119b7319e1dce2cd6fd6d
1867 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
1868 Ciphertext = 6268c6fa2a80b2d137467f092f657ac04d89be2beaa623d61b5a868c8f03ff95d3dcee23ad2f1ab3a6c80eaf4b140eb05de3457f0fbc111a6b43d0763aa422a3013cf1dc37fe417d1fbfc449b75d4cc5
1869
1870 #AES OCB Test vectors
1871 Cipher = aes-128-ocb
1872 Key = 000102030405060708090A0B0C0D0E0F
1873 IV = 000102030405060708090A0B
1874 AAD =
1875 Tag = 197B9C3C441D3C83EAFB2BEF633B9182
1876 Plaintext =
1877 Ciphertext =
1878
1879 Cipher = aes-128-ocb
1880 Key = 000102030405060708090A0B0C0D0E0F
1881 IV = 000102030405060708090A0B
1882 AAD = 0001020304050607
1883 Tag = 16DC76A46D47E1EAD537209E8A96D14E
1884 Plaintext = 0001020304050607
1885 Ciphertext = 92B657130A74B85A
1886
1887 Cipher = aes-128-ocb
1888 Key = 000102030405060708090A0B0C0D0E0F
1889 IV = 000102030405060708090A0B
1890 AAD = 0001020304050607
1891 Tag = 98B91552C8C009185044E30A6EB2FE21
1892 Plaintext =
1893 Ciphertext =
1894
1895 Cipher = aes-128-ocb
1896 Key = 000102030405060708090A0B0C0D0E0F
1897 IV = 000102030405060708090A0B
1898 AAD =
1899 Tag = 971EFFCAE19AD4716F88E87B871FBEED
1900 Plaintext = 0001020304050607
1901 Ciphertext = 92B657130A74B85A
1902
1903 Cipher = aes-128-ocb
1904 Key = 000102030405060708090A0B0C0D0E0F
1905 IV = 000102030405060708090A0B
1906 AAD = 000102030405060708090A0B0C0D0E0F
1907 Tag = 776C9924D6723A1FC4524532AC3E5BEB
1908 Plaintext = 000102030405060708090A0B0C0D0E0F
1909 Ciphertext = BEA5E8798DBE7110031C144DA0B26122
1910
1911 Cipher = aes-128-ocb
1912 Key = 000102030405060708090A0B0C0D0E0F
1913 IV = 000102030405060708090A0B
1914 AAD = 000102030405060708090A0B0C0D0E0F
1915 Tag = 7DDB8E6CEA6814866212509619B19CC6
1916 Plaintext =
1917 Ciphertext =
1918
1919 Cipher = aes-128-ocb
1920 Key = 000102030405060708090A0B0C0D0E0F
1921 IV = 000102030405060708090A0B
1922 AAD =
1923 Tag = 13CC8B747807121A4CBB3E4BD6B456AF
1924 Plaintext = 000102030405060708090A0B0C0D0E0F
1925 Ciphertext = BEA5E8798DBE7110031C144DA0B26122
1926
1927 Cipher = aes-128-ocb
1928 Key = 000102030405060708090A0B0C0D0E0F
1929 IV = 000102030405060708090A0B
1930 AAD = 000102030405060708090A0B0C0D0E0F1011121314151617
1931 Tag = 5FA94FC3F38820F1DC3F3D1FD4E55E1C
1932 Plaintext = 000102030405060708090A0B0C0D0E0F1011121314151617
1933 Ciphertext = BEA5E8798DBE7110031C144DA0B26122FCFCEE7A2A8D4D48
1934
1935 Cipher = aes-128-ocb
1936 Key = 000102030405060708090A0B0C0D0E0F
1937 IV = 000102030405060708090A0B
1938 AAD = 000102030405060708090A0B0C0D0E0F1011121314151617
1939 Tag = 282026DA3068BC9FA118681D559F10F6
1940 Plaintext =
1941 Ciphertext =
1942
1943 Cipher = aes-128-ocb
1944 Key = 000102030405060708090A0B0C0D0E0F
1945 IV = 000102030405060708090A0B
1946 AAD =
1947 Tag = 6EF2F52587FDA0ED97DC7EEDE241DF68
1948 Plaintext = 000102030405060708090A0B0C0D0E0F1011121314151617
1949 Ciphertext = BEA5E8798DBE7110031C144DA0B26122FCFCEE7A2A8D4D48
1950
1951 Cipher = aes-128-ocb
1952 Key = 000102030405060708090A0B0C0D0E0F
1953 IV = 000102030405060708090A0B
1954 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
1955 Tag = B2A040DD3BD5164372D76D7BB6824240
1956 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
1957 Ciphertext = BEA5E8798DBE7110031C144DA0B26122CEAAB9B05DF771A657149D53773463CB
1958
1959 Cipher = aes-128-ocb
1960 Key = 000102030405060708090A0B0C0D0E0F
1961 IV = 000102030405060708090A0B
1962 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
1963 Tag = E1E072633BADE51A60E85951D9C42A1B
1964 Plaintext =
1965 Ciphertext =
1966
1967 Cipher = aes-128-ocb
1968 Key = 000102030405060708090A0B0C0D0E0F
1969 IV = 000102030405060708090A0B
1970 AAD =
1971 Tag = 4A3BAE824465CFDAF8C41FC50C7DF9D9
1972 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
1973 Ciphertext = BEA5E8798DBE7110031C144DA0B26122CEAAB9B05DF771A657149D53773463CB
1974
1975 Cipher = aes-128-ocb
1976 Key = 000102030405060708090A0B0C0D0E0F
1977 IV = 000102030405060708090A0B
1978 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
1979 Tag = 659C623211DEEA0DE30D2C381879F4C8
1980 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
1981 Ciphertext = BEA5E8798DBE7110031C144DA0B26122CEAAB9B05DF771A657149D53773463CB68C65778B058A635
1982
1983 Cipher = aes-128-ocb
1984 Key = 000102030405060708090A0B0C0D0E0F
1985 IV = 000102030405060708090A0B
1986 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
1987 Tag = 7AEB7A69A1687DD082CA27B0D9A37096
1988 Plaintext =
1989 Ciphertext =
1990
1991 Cipher = aes-128-ocb
1992 Key = 000102030405060708090A0B0C0D0E0F
1993 IV = 000102030405060708090A0B
1994 AAD =
1995 Tag = 060C8467F4ABAB5E8B3C2067A2E115DC
1996 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
1997 Ciphertext = BEA5E8798DBE7110031C144DA0B26122CEAAB9B05DF771A657149D53773463CB68C65778B058A635
1998
1999 #AES OCB Non standard test vectors - generated from reference implementation
2000 Cipher = aes-128-ocb
2001 Key = 000102030405060708090A0B0C0D0E0F
2002 IV = 000102030405060708090A0B
2003 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2004 Tag = 1b6c44f34e3abb3cbf8976e7
2005 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2006 Ciphertext = 09a4fd29de949d9a9aa9924248422097ad4883b4713e6c214ff6567ada08a96766fc4e2ee3e3a5a1
2007
2008 Cipher = aes-128-ocb
2009 Key = 000102030405060708090A0B0C0D0E0F
2010 IV = 000102030405060708090A0B0C0D0E
2011 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2012 Tag = 1ad62009901f40cba7cd7156f94a7324
2013 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2014 Ciphertext = 5e2fa7367ffbdb3938845cfd415fcc71ec79634eb31451609d27505f5e2978f43c44213d8fa441ee
2015
2016 Cipher = aes-128-ocb
2017 Key = 000102030405060708090A0B0C0D0E0F
2018 IV = 000102030405060708090A0B
2019 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2020 Tag = C203F98CE28F7DAD3F31C021
2021 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F3031
2022 Ciphertext = 09A4FD29DE949D9A9AA9924248422097AD4883B4713E6C214FF6567ADA08A967B2176C12F110DD441B7CAA3A509B13C822D6
2023
2024 Cipher = aes-128-ocb
2025 Key = 000102030405060708090A0B0C0D0E0F
2026 IV = 000102030405060708090A0B
2027 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2028 Tag = 8346D7D47C5D893ED472F5AB
2029 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F4041
2030 Ciphertext = 09A4FD29DE949D9A9AA9924248422097AD4883B4713E6C214FF6567ADA08A967B2176C12F110DD441B7CAA3A509B13C86A023AFCEE998BEE42028D44507B15F714FF
2031
2032 Cipher = aes-128-ocb
2033 Key = 000102030405060708090A0B0C0D0E0F
2034 IV = 000102030405060708090A0B
2035 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2036 Tag = 5822A9A70FDF55D29D2984A6
2037 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F5051
2038 Ciphertext = 09A4FD29DE949D9A9AA9924248422097AD4883B4713E6C214FF6567ADA08A967B2176C12F110DD441B7CAA3A509B13C86A023AFCEE998BEE42028D44507B15F77C528A1DE6406B519BCEE8FCB8294170634D
2039
2040 Cipher = aes-128-ocb
2041 Key = 000102030405060708090A0B0C0D0E0F
2042 IV = 000102030405060708090A0B
2043 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2044 Tag = 81772B6741ABB4ECA9D2DEB2
2045 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F6061
2046 Ciphertext = 09A4FD29DE949D9A9AA9924248422097AD4883B4713E6C214FF6567ADA08A967B2176C12F110DD441B7CAA3A509B13C86A023AFCEE998BEE42028D44507B15F77C528A1DE6406B519BCEE8FCB829417001E54E15A7576C4DF32366E0F439C7050FAA
2047
2048 Cipher = aes-128-ocb
2049 Key = 000102030405060708090A0B0C0D0E0F
2050 IV = 000102030405060708090A0B
2051 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2052 Tag = 3E52A01D068DE85456DB03B7
2053 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F7071
2054 Ciphertext = 09A4FD29DE949D9A9AA9924248422097AD4883B4713E6C214FF6567ADA08A967B2176C12F110DD441B7CAA3A509B13C86A023AFCEE998BEE42028D44507B15F77C528A1DE6406B519BCEE8FCB829417001E54E15A7576C4DF32366E0F439C7051CB4824B8114E9A720CBC1CE0185B156B486
2055
2056 Cipher = aes-128-ocb
2057 Key = 000102030405060708090A0B0C0D0E0F
2058 IV = 000102030405060708090A0B
2059 AAD = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F2021222324252627
2060 Tag = 3E52A01D068DE85456DB03B6
2061 Plaintext = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F7071
2062 Ciphertext = 09A4FD29DE949D9A9AA9924248422097AD4883B4713E6C214FF6567ADA08A967B2176C12F110DD441B7CAA3A509B13C86A023AFCEE998BEE42028D44507B15F77C528A1DE6406B519BCEE8FCB829417001E54E15A7576C4DF32366E0F439C7051CB4824B8114E9A720CBC1CE0185B156B486
2063 Operation = DECRYPT
2064 Result = CIPHERFINAL_ERROR
2065
2066 # AES XTS test vectors from IEEE Std 1619-2007
2067 Cipher = aes-128-xts
2068 Key = 0000000000000000000000000000000000000000000000000000000000000000
2069 IV = 00000000000000000000000000000000
2070 Plaintext = 0000000000000000000000000000000000000000000000000000000000000000
2071 Ciphertext = 917cf69ebd68b2ec9b9fe9a3eadda692cd43d2f59598ed858c02c2652fbf922e
2072
2073 Cipher = aes-128-xts
2074 Key = 1111111111111111111111111111111122222222222222222222222222222222
2075 IV = 33333333330000000000000000000000
2076 Plaintext = 4444444444444444444444444444444444444444444444444444444444444444
2077 Ciphertext = c454185e6a16936e39334038acef838bfb186fff7480adc4289382ecd6d394f0
2078
2079 Cipher = aes-128-xts
2080 Key = fffefdfcfbfaf9f8f7f6f5f4f3f2f1f022222222222222222222222222222222
2081 IV = 33333333330000000000000000000000
2082 Plaintext = 4444444444444444444444444444444444444444444444444444444444444444
2083 Ciphertext = af85336b597afc1a900b2eb21ec949d292df4c047e0b21532186a5971a227a89
2084
2085 Cipher = aes-128-xts
2086 Key = 2718281828459045235360287471352631415926535897932384626433832795
2087 IV = 00000000000000000000000000000000
2088 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
2089 Ciphertext = 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
2090
2091 Cipher = aes-128-xts
2092 Key = 2718281828459045235360287471352631415926535897932384626433832795
2093 IV = 01000000000000000000000000000000
2094 Plaintext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce93fdf166a24912b422976146ae20ce846bb7dc9ba94a767aaef20c0d61ad02655ea92dc4c4e41a8952c651d33174be51a10c421110e6d81588ede82103a252d8a750e8768defffed9122810aaeb99f9172af82b604dc4b8e51bcb08235a6f4341332e4ca60482a4ba1a03b3e65008fc5da76b70bf1690db4eae29c5f1badd03c5ccf2a55d705ddcd86d449511ceb7ec30bf12b1fa35b913f9f747a8afd1b130e94bff94effd01a91735ca1726acd0b197c4e5b03393697e126826fb6bbde8ecc1e08298516e2c9ed03ff3c1b7860f6de76d4cecd94c8119855ef5297ca67e9f3e7ff72b1e99785ca0a7e7720c5b36dc6d72cac9574c8cbbc2f801e23e56fd344b07f22154beba0f08ce8891e643ed995c94d9a69c9f1b5f499027a78572aeebd74d20cc39881c213ee770b1010e4bea718846977ae119f7a023ab58cca0ad752afe656bb3c17256a9f6e9bf19fdd5a38fc82bbe872c5539edb609ef4f79c203ebb140f2e583cb2ad15b4aa5b655016a8449277dbd477ef2c8d6c017db738b18deb4a427d1923ce3ff262735779a418f20a282df920147beabe421ee5319d0568
2095 Ciphertext = 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
2096
2097 Cipher = aes-128-xts
2098 Key = 2718281828459045235360287471352631415926535897932384626433832795
2099 IV = 02000000000000000000000000000000
2100 Plaintext = 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
2101 Ciphertext = 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
2102
2103 Cipher = aes-128-xts
2104 Key = 2718281828459045235360287471352631415926535897932384626433832795
2105 IV = fd000000000000000000000000000000
2106 Plaintext = 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
2107 Ciphertext = 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
2108
2109 Cipher = aes-128-xts
2110 Key = 2718281828459045235360287471352631415926535897932384626433832795
2111 IV = fe000000000000000000000000000000
2112 Plaintext = d55f684f81f4426e9fde92a5ff02df2ac896af63962888a97910c1379e20b0a3b1db613fb7fe2e07004329ea5c22bfd33e3dbe4cf58cc608c2c26c19a2e2fe22f98732c2b5cb844cc6c0702d91e1d50fc4382a7eba5635cd602432a2306ac4ce82f8d70c8d9bc15f918fe71e74c622d5cf71178bf6e0b9cc9f2b41dd8dbe441c41cd0c73a6dc47a348f6702f9d0e9b1b1431e948e299b9ec2272ab2c5f0c7be86affa5dec87a0bee81d3d50007edaa2bcfccb35605155ff36ed8edd4a40dcd4b243acd11b2b987bdbfaf91a7cac27e9c5aea525ee53de7b2d3332c8644402b823e94a7db26276d2d23aa07180f76b4fd29b9c0823099c9d62c519880aee7e9697617c1497d47bf3e571950311421b6b734d38b0db91eb85331b91ea9f61530f54512a5a52a4bad589eb69781d537f23297bb459bdad2948a29e1550bf4787e0be95bb173cf5fab17dab7a13a052a63453d97ccec1a321954886b7a1299faaeecae35c6eaaca753b041b5e5f093bf83397fd21dd6b3012066fcc058cc32c3b09d7562dee29509b5839392c9ff05f51f3166aaac4ac5f238038a3045e6f72e48ef0fe8bc675e82c318a268e43970271bf119b81bf6a982746554f84e72b9f00280a320a08142923c23c883423ff949827f29bbacdc1ccdb04938ce6098c95ba6b32528f4ef78eed778b2e122ddfd1cbdd11d1c0a6783e011fc536d63d053260637
2113 Ciphertext = 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
2114
2115 Cipher = aes-128-xts
2116 Key = 2718281828459045235360287471352631415926535897932384626433832795
2117 IV = ff000000000000000000000000000000
2118 Plaintext = 72efc1ebfe1ee25975a6eb3aa8589dda2b261f1c85bdab442a9e5b2dd1d7c3957a16fc08e526d4b1223f1b1232a11af274c3d70dac57f83e0983c498f1a6f1aecb021c3e70085a1e527f1ce41ee5911a82020161529cd82773762daf5459de94a0a82adae7e1703c808543c29ed6fb32d9e004327c1355180c995a07741493a09c21ba01a387882da4f62534b87bb15d60d197201c0fd3bf30c1500a3ecfecdd66d8721f90bcc4c17ee925c61b0a03727a9c0d5f5ca462fbfa0af1c2513a9d9d4b5345bd27a5f6e653f751693e6b6a2b8ead57d511e00e58c45b7b8d005af79288f5c7c22fd4f1bf7a898b03a5634c6a1ae3f9fae5de4f296a2896b23e7ed43ed14fa5a2803f4d28f0d3ffcf24757677aebdb47bb388378708948a8d4126ed1839e0da29a537a8c198b3c66ab00712dd261674bf45a73d67f76914f830ca014b65596f27e4cf62de66125a5566df9975155628b400fbfb3a29040ed50faffdbb18aece7c5c44693260aab386c0a37b11b114f1c415aebb653be468179428d43a4d8bc3ec38813eca30a13cf1bb18d524f1992d44d8b1a42ea30b22e6c95b199d8d182f8840b09d059585c31ad691fa0619ff038aca2c39a943421157361717c49d322028a74648113bd8c9d7ec77cf3c89c1ec8718ceff8516d96b34c3c614f10699c9abc4ed0411506223bea16af35c883accdbe1104eef0cfdb54e12fb230a
2119 Ciphertext = 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
2120
2121
2122 Cipher = aes-256-xts
2123 Key = 27182818284590452353602874713526624977572470936999595749669676273141592653589793238462643383279502884197169399375105820974944592
2124 IV = ff000000000000000000000000000000
2125 Plaintext = 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
2126 Ciphertext = 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
2127
2128 Cipher = aes-256-xts
2129 Key = 27182818284590452353602874713526624977572470936999595749669676273141592653589793238462643383279502884197169399375105820974944592
2130 IV = ffff0000000000000000000000000000
2131 Plaintext = 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
2132 Ciphertext = 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
2133
2134 Cipher = aes-256-xts
2135 Key = 27182818284590452353602874713526624977572470936999595749669676273141592653589793238462643383279502884197169399375105820974944592
2136 IV = ffffff00000000000000000000000000
2137 Plaintext = 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
2138 Ciphertext = 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
2139
2140 Cipher = aes-256-xts
2141 Key = 27182818284590452353602874713526624977572470936999595749669676273141592653589793238462643383279502884197169399375105820974944592
2142 IV = ffffffff000000000000000000000000
2143 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
2144 Ciphertext = bf53d2dade78e822a4d949a9bc6766b01b06a8ef70d26748c6a7fc36d80ae4c5520f7c4ab0ac8544424fa405162fef5a6b7f229498063618d39f0003cb5fb8d1c86b643497da1ff945c8d3bedeca4f479702a7a735f043ddb1d6aaade3c4a0ac7ca7f3fa5279bef56f82cd7a2f38672e824814e10700300a055e1630b8f1cb0e919f5e942010a416e2bf48cb46993d3cb6a51c19bacf864785a00bc2ecff15d350875b246ed53e68be6f55bd7e05cfc2b2ed6432198a6444b6d8c247fab941f569768b5c429366f1d3f00f0345b96123d56204c01c63b22ce78baf116e525ed90fdea39fa469494d3866c31e05f295ff21fea8d4e6e13d67e47ce722e9698a1c1048d68ebcde76b86fcf976eab8aa9790268b7068e017a8b9b749409514f1053027fd16c3786ea1bac5f15cb79711ee2abe82f5cf8b13ae73030ef5b9e4457e75d1304f988d62dd6fc4b94ed38ba831da4b7634971b6cd8ec325d9c61c00f1df73627ed3745a5e8489f3a95c69639c32cd6e1d537a85f75cc844726e8a72fc0077ad22000f1d5078f6b866318c668f1ad03d5a5fced5219f2eabbd0aa5c0f460d183f04404a0d6f469558e81fab24a167905ab4c7878502ad3e38fdbe62a41556cec37325759533ce8f25f367c87bb5578d667ae93f9e2fd99bcbc5f2fbba88cf6516139420fcff3b7361d86322c4bd84c82f335abb152c4a93411373aaa8220
2145
2146 Cipher = aes-256-xts
2147 Key = 27182818284590452353602874713526624977572470936999595749669676273141592653589793238462643383279502884197169399375105820974944592
2148 IV = ffffffffff0000000000000000000000
2149 Plaintext = 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
2150 Ciphertext = 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
2151
2152
2153 Cipher = aes-128-xts
2154 Key = fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0bfbebdbcbbbab9b8b7b6b5b4b3b2b1b0
2155 IV = 9a785634120000000000000000000000
2156 Plaintext = 000102030405060708090a0b0c0d0e0f10
2157 Ciphertext = 6c1625db4671522d3d7599601de7ca09ed
2158
2159 Cipher = aes-128-xts
2160 Key = fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0bfbebdbcbbbab9b8b7b6b5b4b3b2b1b0
2161 IV = 9a785634120000000000000000000000
2162 Plaintext = 000102030405060708090a0b0c0d0e0f1011
2163 Ciphertext = d069444b7a7e0cab09e24447d24deb1fedbf
2164
2165 Cipher = aes-128-xts
2166 Key = fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0bfbebdbcbbbab9b8b7b6b5b4b3b2b1b0
2167 IV = 9a785634120000000000000000000000
2168 Plaintext = 000102030405060708090a0b0c0d0e0f101112
2169 Ciphertext = e5df1351c0544ba1350b3363cd8ef4beedbf9d
2170
2171 Cipher = aes-128-xts
2172 Key = fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0bfbebdbcbbbab9b8b7b6b5b4b3b2b1b0
2173 IV = 9a785634120000000000000000000000
2174 Plaintext = 000102030405060708090a0b0c0d0e0f10111213
2175 Ciphertext = 9d84c813f719aa2c7be3f66171c7c5c2edbf9dac
2176
2177 Cipher = aes-128-xts
2178 Key = e0e1e2e3e4e5e6e7e8e9eaebecedeeefc0c1c2c3c4c5c6c7c8c9cacbcccdcecf
2179 IV = 21436587a90000000000000000000000
2180 Plaintext = 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
2181 Ciphertext = 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
2182
2183 # Exercise different lengths covering even ciphertext stealing cases
2184 Cipher = aes-128-xts
2185 Key = 2718281828459045235360287471352631415926535897932384626433832795
2186 IV = 00000000000000000000000000000000
2187 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f
2188 Ciphertext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce
2189
2190 Cipher = aes-128-xts
2191 Key = 2718281828459045235360287471352631415926535897932384626433832795
2192 IV = 00000000000000000000000000000000
2193 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f6061
2194 Ciphertext = 27A7479BEFA1D476489F308CD4CFA6E2A96E4BBE3208FF25287DD3819616E89CC78CF7F5E543445F8333D8FA7F56000005279FA5D8B5E4AD40E736DDB4D35412328063FD2AAB53E5EA1E0A9F332500A5B079C6307EA0914559C6D2FB6384F8AADF94
2195
2196 Cipher = aes-128-xts
2197 Key = 2718281828459045235360287471352631415926535897932384626433832795
2198 IV = 00000000000000000000000000000000
2199 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f
2200 Ciphertext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce93fdf166a24912b422976146ae20ce84
2201
2202 Cipher = aes-128-xts
2203 Key = 2718281828459045235360287471352631415926535897932384626433832795
2204 IV = 00000000000000000000000000000000
2205 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071
2206 Ciphertext = 27A7479BEFA1D476489F308CD4CFA6E2A96E4BBE3208FF25287DD3819616E89CC78CF7F5E543445F8333D8FA7F56000005279FA5D8B5E4AD40E736DDB4D35412328063FD2AAB53E5EA1E0A9F332500A5DF9487D07A5C92CC512C8866C7E860CEF4F253466EF4953ADC8FE2F5BC1FF57593FD
2207
2208 Cipher = aes-128-xts
2209 Key = 2718281828459045235360287471352631415926535897932384626433832795
2210 IV = 00000000000000000000000000000000
2211 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f
2212 Ciphertext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce93fdf166a24912b422976146ae20ce846bb7dc9ba94a767aaef20c0d61ad0265
2213
2214 Cipher = aes-128-xts
2215 Key = 2718281828459045235360287471352631415926535897932384626433832795
2216 IV = 00000000000000000000000000000000
2217 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f8081
2218 Ciphertext = 27A7479BEFA1D476489F308CD4CFA6E2A96E4BBE3208FF25287DD3819616E89CC78CF7F5E543445F8333D8FA7F56000005279FA5D8B5E4AD40E736DDB4D35412328063FD2AAB53E5EA1E0A9F332500A5DF9487D07A5C92CC512C8866C7E860CE93FDF166A24912B422976146AE20CE842973C68248EDDFE26FB9B096659C8A5D6BB7
2219
2220 Cipher = aes-128-xts
2221 Key = 2718281828459045235360287471352631415926535897932384626433832795
2222 IV = 00000000000000000000000000000000
2223 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f
2224 Ciphertext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce93fdf166a24912b422976146ae20ce846bb7dc9ba94a767aaef20c0d61ad02655ea92dc4c4e41a8952c651d33174be51
2225
2226 Cipher = aes-128-xts
2227 Key = 2718281828459045235360287471352631415926535897932384626433832795
2228 IV = 00000000000000000000000000000000
2229 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f9091
2230 Ciphertext = 27A7479BEFA1D476489F308CD4CFA6E2A96E4BBE3208FF25287DD3819616E89CC78CF7F5E543445F8333D8FA7F56000005279FA5D8B5E4AD40E736DDB4D35412328063FD2AAB53E5EA1E0A9F332500A5DF9487D07A5C92CC512C8866C7E860CE93FDF166A24912B422976146AE20CE846BB7DC9BA94A767AAEF20C0D61AD0265C4DD16E65A24575A709F174593F19FF85EA9
2231
2232 Cipher = aes-128-xts
2233 Key = 2718281828459045235360287471352631415926535897932384626433832795
2234 IV = 00000000000000000000000000000000
2235 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
2236 Ciphertext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce93fdf166a24912b422976146ae20ce846bb7dc9ba94a767aaef20c0d61ad02655ea92dc4c4e41a8952c651d33174be51a10c421110e6d81588ede82103a252d8
2237
2238 Cipher = aes-128-xts
2239 Key = 2718281828459045235360287471352631415926535897932384626433832795
2240 IV = 00000000000000000000000000000000
2241 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1
2242 Ciphertext = 27A7479BEFA1D476489F308CD4CFA6E2A96E4BBE3208FF25287DD3819616E89CC78CF7F5E543445F8333D8FA7F56000005279FA5D8B5E4AD40E736DDB4D35412328063FD2AAB53E5EA1E0A9F332500A5DF9487D07A5C92CC512C8866C7E860CE93FDF166A24912B422976146AE20CE846BB7DC9BA94A767AAEF20C0D61AD02655EA92DC4C4E41A8952C651D33174BE519215FA160C664D4B07D757A034AB3B35A10C
2243
2244 Cipher = aes-128-xts
2245 Key = 2718281828459045235360287471352631415926535897932384626433832795
2246 IV = 00000000000000000000000000000000
2247 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
2248 Ciphertext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce93fdf166a24912b422976146ae20ce846bb7dc9ba94a767aaef20c0d61ad02655ea92dc4c4e41a8952c651d33174be51a10c421110e6d81588ede82103a252d8a750e8768defffed9122810aaeb99f91
2249
2250 Cipher = aes-128-xts
2251 Key = 2718281828459045235360287471352631415926535897932384626433832795
2252 IV = 00000000000000000000000000000000
2253 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1
2254 Ciphertext = 27A7479BEFA1D476489F308CD4CFA6E2A96E4BBE3208FF25287DD3819616E89CC78CF7F5E543445F8333D8FA7F56000005279FA5D8B5E4AD40E736DDB4D35412328063FD2AAB53E5EA1E0A9F332500A5DF9487D07A5C92CC512C8866C7E860CE93FDF166A24912B422976146AE20CE846BB7DC9BA94A767AAEF20C0D61AD02655EA92DC4C4E41A8952C651D33174BE51A10C421110E6D81588EDE82103A252D82C6CBC24F9357BD1FB882AA4B2CC2E7FA750
2255
2256 Cipher = aes-128-xts
2257 Key = 2718281828459045235360287471352631415926535897932384626433832795
2258 IV = 00000000000000000000000000000000
2259 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebf
2260 Ciphertext = 27a7479befa1d476489f308cd4cfa6e2a96e4bbe3208ff25287dd3819616e89cc78cf7f5e543445f8333d8fa7f56000005279fa5d8b5e4ad40e736ddb4d35412328063fd2aab53e5ea1e0a9f332500a5df9487d07a5c92cc512c8866c7e860ce93fdf166a24912b422976146ae20ce846bb7dc9ba94a767aaef20c0d61ad02655ea92dc4c4e41a8952c651d33174be51a10c421110e6d81588ede82103a252d8a750e8768defffed9122810aaeb99f9172af82b604dc4b8e51bcb08235a6f434
2261
2262 Cipher = aes-128-xts
2263 Key = 2718281828459045235360287471352631415926535897932384626433832795
2264 IV = 00000000000000000000000000000000
2265 Plaintext = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1
2266 Ciphertext = 27A7479BEFA1D476489F308CD4CFA6E2A96E4BBE3208FF25287DD3819616E89CC78CF7F5E543445F8333D8FA7F56000005279FA5D8B5E4AD40E736DDB4D35412328063FD2AAB53E5EA1E0A9F332500A5DF9487D07A5C92CC512C8866C7E860CE93FDF166A24912B422976146AE20CE846BB7DC9BA94A767AAEF20C0D61AD02655EA92DC4C4E41A8952C651D33174BE51A10C421110E6D81588EDE82103A252D8A750E8768DEFFFED9122810AAEB99F910409B03D164E727C31290FD4E039500872AF
2267
2268 # AES wrap tests from RFC3394
2269 Cipher = id-aes128-wrap
2270 Key = 000102030405060708090A0B0C0D0E0F
2271 Plaintext = 00112233445566778899AABBCCDDEEFF
2272 Ciphertext = 1FA68B0A8112B447AEF34BD8FB5A7B829D3E862371D2CFE5
2273
2274 Cipher = id-aes192-wrap
2275 Key = 000102030405060708090A0B0C0D0E0F1011121314151617
2276 Plaintext = 00112233445566778899AABBCCDDEEFF
2277 Ciphertext = 96778B25AE6CA435F92B5B97C050AED2468AB8A17AD84E5D
2278
2279 Cipher = id-aes256-wrap
2280 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
2281 Plaintext = 00112233445566778899AABBCCDDEEFF
2282 Ciphertext = 64E8C3F9CE0F5BA263E9777905818A2A93C8191E7D6E8AE7
2283
2284 Cipher = id-aes192-wrap
2285 Key = 000102030405060708090A0B0C0D0E0F1011121314151617
2286 Plaintext = 00112233445566778899AABBCCDDEEFF0001020304050607
2287 Ciphertext = 031D33264E15D33268F24EC260743EDCE1C6C7DDEE725A936BA814915C6762D2
2288
2289 Cipher = id-aes256-wrap
2290 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
2291 Plaintext = 00112233445566778899AABBCCDDEEFF0001020304050607
2292 Ciphertext = A8F9BC1612C68B3FF6E6F4FBE30E71E4769C8B80A32CB8958CD5D17D6B254DA1
2293
2294 Cipher = id-aes256-wrap
2295 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
2296 Plaintext = 00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F
2297 Ciphertext = 28C9F404C4B810F4CBCCB35CFB87F8263F5786E2D80ED326CBC7F0E71A99F43BFB988B9B7A02DD21
2298
2299 # Same as previous example but with invalid unwrap key: should be rejected
2300 # without returning any plaintext
2301 Cipher = id-aes256-wrap
2302 Operation = DECRYPT
2303 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E00
2304 Plaintext = 00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F
2305 Ciphertext = 28C9F404C4B810F4CBCCB35CFB87F8263F5786E2D80ED326CBC7F0E71A99F43BFB988B9B7A02DD21
2306 Result = CIPHERUPDATE_ERROR
2307
2308 # AES wrap tests from RFC5649
2309 Cipher = id-aes192-wrap-pad
2310 Key = 5840df6e29b02af1ab493b705bf16ea1ae8338f4dcc176a8
2311 Plaintext = c37b7e6492584340bed12207808941155068f738
2312 Ciphertext = 138bdeaa9b8fa7fc61f97742e72248ee5ae6ae5360d1ae6a5f54f373fa543b6a
2313
2314 Cipher = id-aes192-wrap-pad
2315 Key = 5840df6e29b02af1ab493b705bf16ea1ae8338f4dcc176a8
2316 Plaintext = 466f7250617369
2317 Ciphertext = afbeb0f07dfbf5419200f2ccb50bb24f
2318
2319 # HMAC tests from RFC2104
2320 MAC = HMAC
2321 Algorithm = MD5
2322 Key = 0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
2323 Input = "Hi There"
2324 Output = 9294727a3638bb1c13f48ef8158bfc9d
2325
2326 MAC = HMAC
2327 Algorithm = MD5
2328 Key = "Jefe"
2329 Input = "what do ya want for nothing?"
2330 Output = 750c783e6ab0b503eaa86e310a5db738
2331
2332 MAC = HMAC
2333 Algorithm = MD5
2334 Key = AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2335 Input = DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
2336 Output = 56be34521d144c88dbb8c733f0e8b3f6
2337
2338 # HMAC tests from NIST test data
2339
2340 MAC = HMAC
2341 Algorithm = SHA1
2342 Input = "Sample message for keylen=blocklen"
2343 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
2344 Output = 5FD596EE78D5553C8FF4E72D266DFD192366DA29
2345 MAC = HMAC
2346 Algorithm = SHA1
2347 Input = "Sample message for keylen<blocklen"
2348 Key = 000102030405060708090A0B0C0D0E0F10111213
2349 Output = 4C99FF0CB1B31BD33F8431DBAF4D17FCD356A807
2350 MAC = HMAC
2351 Algorithm = SHA1
2352 Input = "Sample message for keylen=blocklen"
2353 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F60616263
2354 Output = 2D51B2F7750E410584662E38F133435F4C4FD42A
2355 MAC = HMAC
2356 Algorithm = SHA224
2357 Input = "Sample message for keylen=blocklen"
2358 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
2359 Output = C7405E3AE058E8CD30B08B4140248581ED174CB34E1224BCC1EFC81B
2360 MAC = HMAC
2361 Algorithm = SHA224
2362 Input = "Sample message for keylen<blocklen"
2363 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B
2364 Output = E3D249A8CFB67EF8B7A169E9A0A599714A2CECBA65999A51BEB8FBBE
2365 MAC = HMAC
2366 Algorithm = SHA224
2367 Input = "Sample message for keylen=blocklen"
2368 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F60616263
2369 Output = 91C52509E5AF8531601AE6230099D90BEF88AAEFB961F4080ABC014D
2370 MAC = HMAC
2371 Algorithm = SHA256
2372 Input = "Sample message for keylen=blocklen"
2373 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
2374 Output = 8BB9A1DB9806F20DF7F77B82138C7914D174D59E13DC4D0169C9057B133E1D62
2375 MAC = HMAC
2376 Algorithm = SHA256
2377 Input = "Sample message for keylen<blocklen"
2378 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
2379 Output = A28CF43130EE696A98F14A37678B56BCFCBDD9E5CF69717FECF5480F0EBDF790
2380 MAC = HMAC
2381 Algorithm = SHA256
2382 Input = "Sample message for keylen=blocklen"
2383 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F60616263
2384 Output = BDCCB6C72DDEADB500AE768386CB38CC41C63DBB0878DDB9C7A38A431B78378D
2385 MAC = HMAC
2386 Algorithm = SHA384
2387 Input = "Sample message for keylen=blocklen"
2388 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F
2389 Output = 63C5DAA5E651847CA897C95814AB830BEDEDC7D25E83EEF9195CD45857A37F448947858F5AF50CC2B1B730DDF29671A9
2390 MAC = HMAC
2391 Algorithm = SHA384
2392 Input = "Sample message for keylen<blocklen"
2393 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F
2394 Output = 6EB242BDBB582CA17BEBFA481B1E23211464D2B7F8C20B9FF2201637B93646AF5AE9AC316E98DB45D9CAE773675EEED0
2395 MAC = HMAC
2396 Algorithm = SHA384
2397 Input = "Sample message for keylen=blocklen"
2398 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
2399 Output = 5B664436DF69B0CA22551231A3F0A3D5B4F97991713CFA84BFF4D0792EFF96C27DCCBBB6F79B65D548B40E8564CEF594
2400 MAC = HMAC
2401 Algorithm = SHA512
2402 Input = "Sample message for keylen=blocklen"
2403 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F
2404 Output = FC25E240658CA785B7A811A8D3F7B4CA48CFA26A8A366BF2CD1F836B05FCB024BD36853081811D6CEA4216EBAD79DA1CFCB95EA4586B8A0CE356596A55FB1347
2405 MAC = HMAC
2406 Algorithm = SHA512
2407 Input = "Sample message for keylen<blocklen"
2408 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
2409 Output = FD44C18BDA0BB0A6CE0E82B031BF2818F6539BD56EC00BDC10A8A2D730B3634DE2545D639B0F2CF710D0692C72A1896F1F211C2B922D1A96C392E07E7EA9FEDC
2410 MAC = HMAC
2411 Algorithm = SHA512
2412 Input = "Sample message for keylen=blocklen"
2413 Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
2414 Output = D93EC8D2DE1AD2A9957CB9B83F14E76AD6B5E0CCE285079A127D3B14BCCB7AA7286D4AC0D4CE64215F2BC9E6870B33D97438BE4AAA20CDA5C5A912B48B8E27F3
2415
2416 # CMAC tests from FIPS module
2417
2418 MAC = CMAC
2419 Algorithm = AES-128-CBC
2420 Key = 77A77FAF290C1FA30C683DF16BA7A77B
2421 Input = 020683E1F0392F4CAC54318B6029259E9C553DBC4B6AD998E64D58E4E7DC2E13
2422 Output = FBFEA41BF9740CB501F1292C21CEBB40
2423
2424 MAC = CMAC
2425 Algorithm = AES-192-CBC
2426 Key = 7B32391369AA4CA97558095BE3C3EC862BD057CEF1E32D62
2427 Input =
2428 Output = E4D9340B03E67DEFD4969CC1ED3735E6
2429
2430 MAC = CMAC
2431 Algorithm = AES-256-CBC
2432 Key = 0B122AC8F34ED1FE082A3625D157561454167AC145A10BBF77C6A70596D574F1
2433 Input = 498B53FDEC87EDCBF07097DCCDE93A084BAD7501A224E388DF349CE18959FE8485F8AD1537F0D896EA73BEDC7214713F
2434 Output = F62C46329B41085625669BAF51DEA66A
2435
2436 MAC = CMAC
2437 Algorithm = DES-EDE3-CBC
2438 Key = 89BCD952A8C8AB371AF48AC7D07085D5EFF702E6D62CDC23
2439 Input = FA620C1BBE97319E9A0CF0492121F7A20EB08A6A709DCBD00AAF38E4F99E754E
2440 Output = 8F49A1B7D6AA2258
2441
2442 # Public key algorithm tests
2443
2444 # Private keys used for PKEY operations.
2445
2446 # RSA 2048 bit key.
2447
2448 PrivateKey = RSA-2048
2449
2450 -----BEGIN PRIVATE KEY-----
2451 MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDNAIHqeyrh6gbV
2452 n3xz2f+5SglhXC5Lp8Y2zvCN01M+wxhVJbAVx2m5mnfWclv5w1Mqm25fZifV+4UW
2453 B2jT3anL01l0URcX3D0wnS/EfuQfl+Mq23+d2GShxHZ6Zm7NcbwarPXnUX9LOFlP
2454 6psF5C1a2pkSAIAT5FMWpNm7jtCGuI0odYusr5ItRqhotIXSOcm66w4rZFknEPQr
2455 LR6gpLSALAvsqzKPimiwBzvbVG/uqYCdKEmRKzkMFTK8finHZY+BdfrkbzQzL/h7
2456 yrPkBkm5hXeGnaDqcYNT8HInVIhpE2SHYNEivmduD8SD3SD/wxvalqMZZsmqLnWt
2457 A95H4cRPAgMBAAECggEAYCl6x5kbFnoG1rJHWLjL4gi+ubLZ7Jc4vYD5Ci41AF3X
2458 ziktnim6iFvTFv7x8gkTvArJDWsICLJBTYIQREHYYkozzgIzyPeApIs3Wv8C12cS
2459 IopwJITbP56+zM+77hcJ26GCgA2Unp5CFuC/81WDiPi9kNo3Oh2CdD7D+90UJ/0W
2460 glplejFpEuhpU2URfKL4RckJQF/KxV+JX8FdIDhsJu54yemQdQKaF4psHkzwwgDo
2461 qc+yfp0Vb4bmwq3CKxqEoc1cpbJ5CHXXlAfISzUjlcuBzD/tW7BDtp7eDAcgRVAC
2462 XO6MX0QBcLYSC7SOD3R7zY9SIRCFDfBDxCjf0YcFMQKBgQD2+WG0fLwDXTrt68fe
2463 hQqVa2Xs25z2B2QGPxWqSFU8WNly/mZ1BW413f3De/O58vYi7icTNyVoScm+8hdv
2464 6PfD+LuRujdN1TuvPeyBTSvewQwf3IjN0Wh28mse36PwlBl+301C/x+ylxEDuJjK
2465 hZxCcocIaoQqtBC7ac8tNa9r4wKBgQDUfnJKf/QQSLJwwlJKQQGHi3MVm7c9PbwY
2466 eyIOY1s1NPluJDoYTZP4YLa/u2txwe2aHh9FhYMCPDAelqaSwaCLU9DsnKkQEA2A
2467 RR47fcagG6xK7O+N95iEa8I1oIy7os9MBoBMwRIZ6VYIxxTj8UMNSR+tu6MqV1Gg
2468 T5d0WDTJpQKBgCHyRSu5uV39AoyRS/eZ8cp36JqV1Q08FtOE+EVfi9evnrPfo9WR
2469 2YQt7yNfdjCo5IwIj/ZkLhAXlFNakz4el2+oUJ/HKLLaDEoaCNf883q6rh/zABrK
2470 HcG7sF2d/7qhoJ9/se7zgjfZ68zHIrkzhDbd5xGREnmMJoCcGo3sQyBhAoGAH3UQ
2471 qmLC2N5KPFMoJ4H0HgLQ6LQCrnhDLkScSBEBYaEUA/AtAYgKjcyTgVLXlyGkcRpg
2472 esRHHr+WSBD5W+R6ReYEmeKfTJdzyDdzQE9gZjdyjC0DUbsDwybIu3OnIef6VEDq
2473 IXK7oUZfzDDcsNn4mTDoFaoff5cpqFfgDgM43VkCgYBNHw11b+d+AQmaZS9QqIt7
2474 aF3FvwCYHV0jdv0Mb+Kc1bY4c0R5MFpzrTwVmdOerjuuA1+9b+0Hwo3nBZM4eaBu
2475 SOamA2hu2OJWCl9q8fLCT69KqWDjghhvFe7c6aJJGucwaA3Uz3eLcPqoaCarMiNH
2476 fMkTd7GabVourqIZdgvu1Q==
2477 -----END PRIVATE KEY-----
2478
2479 # Corresponding public key
2480
2481 PublicKey = RSA-2048-PUBLIC
2482
2483 -----BEGIN PUBLIC KEY-----
2484 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQCB6nsq4eoG1Z98c9n/
2485 uUoJYVwuS6fGNs7wjdNTPsMYVSWwFcdpuZp31nJb+cNTKptuX2Yn1fuFFgdo092p
2486 y9NZdFEXF9w9MJ0vxH7kH5fjKtt/ndhkocR2emZuzXG8Gqz151F/SzhZT+qbBeQt
2487 WtqZEgCAE+RTFqTZu47QhriNKHWLrK+SLUaoaLSF0jnJuusOK2RZJxD0Ky0eoKS0
2488 gCwL7Ksyj4posAc721Rv7qmAnShJkSs5DBUyvH4px2WPgXX65G80My/4e8qz5AZJ
2489 uYV3hp2g6nGDU/ByJ1SIaRNkh2DRIr5nbg/Eg90g/8Mb2pajGWbJqi51rQPeR+HE
2490 TwIDAQAB
2491 -----END PUBLIC KEY-----
2492
2493 # EC P-256 key
2494
2495 PrivateKey=P-256
2496
2497 -----BEGIN PRIVATE KEY-----
2498 MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgiocvtiiTxNH/xbnw
2499 +RdYBp+DUuCPoFpJ+NuSbLVyhyWhRANCAAQsFQ9CnOcPIWwlLPXgYs4fY5zV0WXH
2500 +JQkBywnGX14szuSDpXNtmTpkNzwz+oNlOKo5q+dDlgFbmUxBJJbn+bJ
2501 -----END PRIVATE KEY-----
2502
2503 # EC public key for above
2504
2505 PublicKey=P-256-PUBLIC
2506
2507 -----BEGIN PUBLIC KEY-----
2508 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELBUPQpznDyFsJSz14GLOH2Oc1dFl
2509 x/iUJAcsJxl9eLM7kg6VzbZk6ZDc8M/qDZTiqOavnQ5YBW5lMQSSW5/myQ==
2510 -----END PUBLIC KEY-----
2511
2512 # Additional EC key for ECDH
2513 PrivateKey=P-256-Peer
2514 -----BEGIN PRIVATE KEY-----
2515 MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQg/URzu1TDNwUFWZ3i
2516 dLISAZpEY0vfJ2pLB7f+Xnjyl2OhRANCAAQgBuXhSgeKpz+4piXlYSVLvy0NT+wK
2517 uZWUI3LqUUCV07wg+RLLMY8yNK9kjqcgZDs/cB+bet64nQq+dNnvtpxG
2518 -----END PRIVATE KEY-----
2519
2520 PublicKey=P-256-Peer-PUBLIC
2521 -----BEGIN PUBLIC KEY-----
2522 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIAbl4UoHiqc/uKYl5WElS78tDU/s
2523 CrmVlCNy6lFAldO8IPkSyzGPMjSvZI6nIGQ7P3Afm3reuJ0KvnTZ77acRg==
2524 -----END PUBLIC KEY-----
2525
2526 # DSA key
2527 PrivateKey=DSA-1024
2528
2529 -----BEGIN PRIVATE KEY-----
2530 MIIBSwIBADCCASwGByqGSM44BAEwggEfAoGBAO0SwRpkAeM21qSM5ch4CLEHpFk4
2531 19R5ve1UUr421y3HEUURsrVpxYKvyx8aOBQC/akz95cYxNN3y1JnJJMxPklhdJrJ
2532 f/WDYPxjMk8BqNJmeZtLuCVLKGwQomuo7ZkG955WRyLHYEdQ6uC7K2QTPKpW6psF
2533 YFaDYjAjSEKk2MFxAhUAykDkKLZdhPWzwM8/qYaE31VmWz0CgYEApNVF8oFK41ez
2534 Qci9XbSZJHyPB+3jML1YQkHxiiInaIz6GEFtjUbIUEYA/ovY+6ECNI1aIDHTd7CH
2535 woS0mp33oQYs43nt29B6UwbtMmbzCOQ9vGGwWVho+JtHyyPWrDuLmkvLtoQPaxYt
2536 6PVa3gncr2v3njcVuH+EQ6DuFR93zksEFgIUbyv6pqH+UQurernJn/7sUm2U2i0=
2537 -----END PRIVATE KEY-----
2538
2539 PublicKey=DSA-1024-PUBLIC
2540
2541 -----BEGIN PUBLIC KEY-----
2542 MIIBtzCCASwGByqGSM44BAEwggEfAoGBAO0SwRpkAeM21qSM5ch4CLEHpFk419R5
2543 ve1UUr421y3HEUURsrVpxYKvyx8aOBQC/akz95cYxNN3y1JnJJMxPklhdJrJf/WD
2544 YPxjMk8BqNJmeZtLuCVLKGwQomuo7ZkG955WRyLHYEdQ6uC7K2QTPKpW6psFYFaD
2545 YjAjSEKk2MFxAhUAykDkKLZdhPWzwM8/qYaE31VmWz0CgYEApNVF8oFK41ezQci9
2546 XbSZJHyPB+3jML1YQkHxiiInaIz6GEFtjUbIUEYA/ovY+6ECNI1aIDHTd7CHwoS0
2547 mp33oQYs43nt29B6UwbtMmbzCOQ9vGGwWVho+JtHyyPWrDuLmkvLtoQPaxYt6PVa
2548 3gncr2v3njcVuH+EQ6DuFR93zksDgYQAAoGAVXFwJ5wTuF0rQ6AWfTitm3/zUeRW
2549 SeKFo+Rg0GrBI+Wg2Tj+Yn6V8Xs+Xyjim1wsd2P6/BlJzCEr4nHjP9JcBICqM3vI
2550 9zCaT/vYsLD7/T7rF9AF/jV+LnkGJCzLbDYF04IkhtLNHOQob+Uc8PWB78e/1Lc4
2551 SzJw2oHciIOt+UU=
2552 -----END PUBLIC KEY-----
2553
2554 # RSA tests
2555
2556 Sign = RSA-2048
2557 Ctrl = digest:SHA1
2558 Input = "0123456789ABCDEF1234"
2559 Output = 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
2560
2561 Verify = RSA-2048
2562 Ctrl = digest:SHA1
2563 Input = "0123456789ABCDEF1234"
2564 Output = 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
2565
2566 VerifyRecover = RSA-2048
2567 Ctrl = digest:SHA1
2568 Input = c09d402423cbf233d26cae21f954547bc43fe80fd41360a0336cfdbe9aedad05bef6fd2eaee6cd60089a52482d4809a238149520df3bdde4cb9e23d9307b05c0a6f327052325a29adf2cc95b66523be7024e2a585c3d4db15dfbe146efe0ecdc0402e33fe5d40324ee96c5c3edd374a15cdc0f5d84aa243c0f07e188c6518fbfceae158a9943be398e31097da81b62074f626eff738be6160741d5a26957a482b3251fd85d8df78b98148459de10aa93305dbb4a5230aa1da291a9b0e481918f99b7638d72bb687f97661d304ae145d64a474437a4ef39d7b8059332ddeb07e92bf6e0e3acaf8afedc93795e4511737ec1e7aab6d5bc9466afc950c1c17b48ad
2569 Output = "0123456789ABCDEF1234"
2570
2571 # Leading zero in the signature
2572 Verify = RSA-2048
2573 Ctrl = digest:SHA1
2574 Input = "0123456789ABCDEF1234"
2575 Output = 00c09d402423cbf233d26cae21f954547bc43fe80fd41360a0336cfdbe9aedad05bef6fd2eaee6cd60089a52482d4809a238149520df3bdde4cb9e23d9307b05c0a6f327052325a29adf2cc95b66523be7024e2a585c3d4db15dfbe146efe0ecdc0402e33fe5d40324ee96c5c3edd374a15cdc0f5d84aa243c0f07e188c6518fbfceae158a9943be398e31097da81b62074f626eff738be6160741d5a26957a482b3251fd85d8df78b98148459de10aa93305dbb4a5230aa1da291a9b0e481918f99b7638d72bb687f97661d304ae145d64a474437a4ef39d7b8059332ddeb07e92bf6e0e3acaf8afedc93795e4511737ec1e7aab6d5bc9466afc950c1c17b48ad
2576 Result = VERIFY_ERROR
2577
2578 VerifyRecover = RSA-2048
2579 Ctrl = digest:SHA1
2580 Input = 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
2581 Result = KEYOP_ERROR
2582
2583 # Digest too long
2584 Sign = RSA-2048
2585 Ctrl = digest:SHA1
2586 Input = "0123456789ABCDEF12345"
2587 Output = 00
2588 Result = KEYOP_ERROR
2589
2590 # Digest too short
2591 Sign = RSA-2048
2592 Ctrl = digest:SHA1
2593 Input = "0123456789ABCDEF12345"
2594 Output = 00
2595 Result = KEYOP_ERROR
2596
2597 # Mismatched digest
2598 Verify = RSA-2048
2599 Ctrl = digest:SHA1
2600 Input = "0123456789ABCDEF1233"
2601 Output = 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
2602 Result = VERIFY_ERROR
2603
2604 # Corrupted signature
2605 Verify = RSA-2048
2606 Ctrl = digest:SHA1
2607 Input = "0123456789ABCDEF1233"
2608 Output = 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
2609 Result = VERIFY_ERROR
2610
2611 # parameter is not NULL
2612 Verify = RSA-2048
2613 Ctrl = digest:sha1
2614 Input = "0123456789ABCDEF1234"
2615 Output = 3ec3fc29eb6e122bd7aa361cd09fe1bcbe85311096a7b9e4799cedfb2351ce0ab7fe4e75b4f6b37f67edd9c60c800f9ab941c0c157d7d880ca9de40c951d60fd293ae220d4bc510b1572d6e85a1bbbd8605b52e05f1c64fafdae59a1c2fbed214b7844d0134619de62851d5a0522e32e556e5950f3f97b8150e3f0dffee612c924201c27cd9bc8b423a71533380c276d3d59fcba35a2e80a1a192ec266a6c2255012cd86a349fe90a542b355fa3355b04da6cdf1df77f0e7bd44a90e880e1760266d233e465226f5db1c68857847d82072861ee266ddfc2e596845b77e1803274a579835ab5e4975d81d20b7df9cec7795489e4a2bdb8c1cf6a6b359945ac92c
2616 Result = VERIFY_ERROR
2617
2618 # embedded digest too long
2619 Verify = RSA-2048
2620 Ctrl = digest:sha1
2621 Input = "0123456789ABCDEF1234"
2622 Output = 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
2623 Result = VERIFY_ERROR
2624
2625 VerifyRecover = RSA-2048
2626 Ctrl = digest:sha1
2627 Input = afec9a0d5330a08f54283bb4a9d4e7e7e70fc1342336c4c766fba713f66970151c6e27413c48c33864ea45a0238787004f338ed3e21b53b0fe9c1151c42c388cbc7cba5a06b706c407a5b48324fbe994dc7afc3a19fb3d2841e66222596c14cd72a0f0a7455a019d8eb554f59c0183f9552b75aa96fee8bf935945e079ca283d2bd3534a86f11351f6d6181fbf433e5b01a6d1422145c7a72214d3aacdd5d3af12b2d6bf6438f9f9a64010d8aeed801c87f0859412b236150b86a545f7239be022f4a7ad246b59df87514294cb4a4c7c5a997ee53c66054d9f38ca4e76c1f7af83c30f737ef70f83a45aebe18238ddb95e1998814ca4fc72388f1533147c169d
2628 Result = KEYOP_ERROR
2629
2630 # embedded digest too short
2631 Verify = RSA-2048
2632 Ctrl = digest:sha1
2633 Input = "0123456789ABCDEF1234"
2634 Output = afec9a0d5330a08f54283bb4a9d4e7e7e70fc1342336c4c766fba713f66970151c6e27413c48c33864ea45a0238787004f338ed3e21b53b0fe9c1151c42c388cbc7cba5a06b706c407a5b48324fbe994dc7afc3a19fb3d2841e66222596c14cd72a0f0a7455a019d8eb554f59c0183f9552b75aa96fee8bf935945e079ca283d2bd3534a86f11351f6d6181fbf433e5b01a6d1422145c7a72214d3aacdd5d3af12b2d6bf6438f9f9a64010d8aeed801c87f0859412b236150b86a545f7239be022f4a7ad246b59df87514294cb4a4c7c5a997ee53c66054d9f38ca4e76c1f7af83c30f737ef70f83a45aebe18238ddb95e1998814ca4fc72388f1533147c169d
2635 Result = VERIFY_ERROR
2636
2637 VerifyRecover = RSA-2048
2638 Ctrl = digest:sha1
2639 Input = afec9a0d5330a08f54283bb4a9d4e7e7e70fc1342336c4c766fba713f66970151c6e27413c48c33864ea45a0238787004f338ed3e21b53b0fe9c1151c42c388cbc7cba5a06b706c407a5b48324fbe994dc7afc3a19fb3d2841e66222596c14cd72a0f0a7455a019d8eb554f59c0183f9552b75aa96fee8bf935945e079ca283d2bd3534a86f11351f6d6181fbf433e5b01a6d1422145c7a72214d3aacdd5d3af12b2d6bf6438f9f9a64010d8aeed801c87f0859412b236150b86a545f7239be022f4a7ad246b59df87514294cb4a4c7c5a997ee53c66054d9f38ca4e76c1f7af83c30f737ef70f83a45aebe18238ddb95e1998814ca4fc72388f1533147c169d
2640 Result = KEYOP_ERROR
2641
2642 # Garbage after DigestInfo
2643 Verify = RSA-2048
2644 Ctrl = digest:sha1
2645 Input = "0123456789ABCDEF1234"
2646 Output = 9ee34872d4271a7d8808af0a4052a145a6d6a8437d00da3ed14428c7f087cd39f4d43334c41af63e7fa1ba363fee7bcef401d9d36a662abbab55ce89a696e1be0dfa19a5d09ca617dd488787b6048baaefeb29bc8688b2fe3882de2b77c905b5a8b56cf9616041e5ec934ba6de863efe93acc4eef783fe7f72a00fa65d6093ed32bf98ce527e62ccb1d56317f4be18b7e0f55d7c36617d2d0678a306e3350956b662ac15df45215dd8f6b314babb9788e6c272fa461e4c9b512a11a4b92bc77c3a4c95c903fccb238794eca5c750477bf56ea6ee6a167367d881b485ae3889e7c489af8fdf38e0c0f2aed780831182e34abedd43c39281b290774bf35cc25274
2647 Result = VERIFY_ERROR
2648
2649 VerifyRecover = RSA-2048
2650 Ctrl = digest:sha1
2651 Input = 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
2652 Result = KEYOP_ERROR
2653
2654 # invalid tag for parameter
2655 Verify = RSA-2048
2656 Ctrl = digest:sha1
2657 Input = "0123456789ABCDEF1234"
2658 Output = 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
2659 Result = VERIFY_ERROR
2660
2661 VerifyRecover = RSA-2048
2662 Ctrl = digest:sha1
2663 Input = 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
2664 Result = KEYOP_ERROR
2665
2666 # MD5/SHA-1 combination
2667 Verify = RSA-2048
2668 Ctrl = digest:MD5-SHA1
2669 Input = "0123456789ABCDEF0123456789ABCDEF0123"
2670 Output = 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
2671
2672 VerifyRecover = RSA-2048
2673 Ctrl = digest:MD5-SHA1
2674 Input = 7b80e0d4d2a6b7f4b018ce164bc0be21a0604b1b05e91c6204372458b05a0e4dbf0b36b3f80dbf04b278ad1fcf7ff6d982d5ca5d98b13b68240d846d400b8db6675b1a5fcbe2256322c5f691378bc941785326030fa835d240e334e2a4d35b17c1149b59dbb6e6d53b44326ebfc371f754449d36bad3722c1878af1699bb0a00c28e37162f99aba550b7c333228a70c906e3701c519a460a14fac29ff164ca9413efd19b431b31a9ad2988662cdbda9cdcff85f294b4be2cf072caceb1d3f52642edafea2e1d1e495061f18b5b3a130d2242cec830e44d506590e5df69bb974879a35e6bdc1ad00e3e31b362f2f5cdeabd8a0dfddfdb66a7c43993a3e189b80d
2675 Output = "0123456789ABCDEF0123456789ABCDEF0123"
2676
2677 # MD5/SHA-1 combination, digest mismatch
2678 Verify = RSA-2048
2679 Ctrl = digest:MD5-SHA1
2680 Input = "000000000000000000000000000000000000"
2681 Output = 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
2682 Result = VERIFY_ERROR
2683
2684 # MD5/SHA-1 combination, wrong signature digest length
2685 Verify = RSA-2048
2686 Ctrl = digest:MD5-SHA1
2687 Input = "0123456789ABCDEF0123456789ABCDEF0123"
2688 Output = 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
2689 Result = VERIFY_ERROR
2690
2691 VerifyRecover = RSA-2048
2692 Ctrl = digest:MD5-SHA1
2693 Input = 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
2694 Result = KEYOP_ERROR
2695
2696 # MD5/SHA-1 combination, wrong input digest length
2697 Verify = RSA-2048
2698 Ctrl = digest:MD5-SHA1
2699 Input = "0123456789ABCDEF0123456789ABCDEF012"
2700 Output = 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
2701 Result = VERIFY_ERROR
2702
2703 # MD5/SHA-1 combination, wrong input and signature digest length
2704 Verify = RSA-2048
2705 Ctrl = digest:MD5-SHA1
2706 Input = "0123456789ABCDEF0123456789ABCDEF012"
2707 Output = 6c13511f97ffb8137545fce551a43cf2b5b3dbdd5c3ceaaccd4620a6a373f3c38cc523d95bbdd810c852743b981bc4393c6b0cdfb0da5e77a8cc0108b05ff95e0f4dd7a0125b7390af1408dca6ddefac3b05b768de7b0c3df3c74e5f102f62743d67813beee1777036078da4cff5b29f49f01a6df3a2e709c37a83737108517687fe754d9ee908cb36c55e88f67c0b537108707347d16049f5dfac3d400ea367222d36627937a7f822f451c3d2c2dbc9e2202bffd3dc1b22213e17270a6b657619c6f44cbf66b077d548cfc9e1a114f8b853412470f2bf8d828f04d0d9f1aef260d216acb0911329fb5bdc48c2be3b198bf6f96e1c3fb116ad4430140d0640d4
2708 Result = VERIFY_ERROR
2709
2710 # DigestInfo-wrapped MDC-2 signature
2711 Verify = RSA-2048
2712 Ctrl = digest:MDC2
2713 Input = "0123456789ABCDEF"
2714 Output = 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
2715
2716 VerifyRecover = RSA-2048
2717 Ctrl = digest:MDC2
2718 Input = 3a46e5e80635d3b5586187b44b08fd02ca0bd36a637a8afeb46a1c1eb18d05b3196e00edf85378109015bcd3d0cfcefc2919c5b8e3ac42884b360188b1395ed34df7d2749f36b91c320d290311d78b36f390481eff42ace0275385c05176d022e4b625cf0ed85082d4b25da9e8a86011f6ac1cb8d8b812cc2bbd6c240caa8445aa74f8e971c935dbf3447df0411eb9e5cdee0851d1e0fea7041916c77efc09dc54e8dd4b7ba8f8d85ef43d4f12abde99886f4ebd5f021fc1b476cc23dc6a94fbbe77c954eee496fb6b4b5c534daa4e819143ce8de511a8bcb65759750c17edaca6fb31ac271c1ca3a27705f780ae86c67009e76fcba9067dde3556ff59c44111
2719 Output = "0123456789ABCDEF"
2720
2721 # Legacy OCTET STRING MDC-2 signature
2722 Verify = RSA-2048
2723 Ctrl = digest:MDC2
2724 Input = "0123456789ABCDEF"
2725 Output = 6cde46bbfc6a3b772c3d884640709be9f2fb70fcf199c14eaff7811369ea99733f984a9c48cd372578fa37cedeef24c93286d6d64f438df051e625ab2e125a7d9974a76240873e43efc3acbcbdccc2ee63769cdbf983b334ccb982273315c222b3bbdc3e928ac8a141a7412f1f794cfcabcc069a2ae4975d7bb68bea145d789634c9e0b02d324b5efd599c9bf2b1d32d077aba59aa0ad4a82cbbb90eaa9214e4f57104cf049c4139e2ddecf6edf219cd986f4d79cf25128c58667562c9d22be0291430d6cc7dad977d56e08315fcec133ea95d8db550f89735b4d5f233eaff0c86fce2b99f3f508e920f882c31f3e13f8775a3c8fa585c4f4c69eca89f648b7e
2726
2727 VerifyRecover = RSA-2048
2728 Ctrl = digest:MDC2
2729 Input = 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
2730 Output = "0123456789ABCDEF"
2731
2732 # Legacy OCTET STRING MDC-2 signature, digest mismatch
2733 Verify = RSA-2048
2734 Ctrl = digest:MDC2
2735 Input = "0000000000000000"
2736 Output = 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
2737 Result = VERIFY_ERROR
2738
2739 # Legacy OCTET STRING MDC-2 signature, wrong input digest length
2740 Verify = RSA-2048
2741 Ctrl = digest:MDC2
2742 Input = "0123456789ABCDE"
2743 Output = 6cde46bbfc6a3b772c3d884640709be9f2fb70fcf199c14eaff7811369ea99733f984a9c48cd372578fa37cedeef24c93286d6d64f438df051e625ab2e125a7d9974a76240873e43efc3acbcbdccc2ee63769cdbf983b334ccb982273315c222b3bbdc3e928ac8a141a7412f1f794cfcabcc069a2ae4975d7bb68bea145d789634c9e0b02d324b5efd599c9bf2b1d32d077aba59aa0ad4a82cbbb90eaa9214e4f57104cf049c4139e2ddecf6edf219cd986f4d79cf25128c58667562c9d22be0291430d6cc7dad977d56e08315fcec133ea95d8db550f89735b4d5f233eaff0c86fce2b99f3f508e920f882c31f3e13f8775a3c8fa585c4f4c69eca89f648b7e
2744 Result = VERIFY_ERROR
2745
2746 # Legacy OCTET STRING MDC-2 signature, wrong signature digest length
2747 Verify = RSA-2048
2748 Ctrl = digest:MDC2
2749 Input = "0123456789ABCDEF"
2750 Output = 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
2751 Result = VERIFY_ERROR
2752
2753 VerifyRecover = RSA-2048
2754 Ctrl = digest:MDC2
2755 Input = 08da512483ece70be57f28a75271612800ae30ffbadc62609bc88b80d497a1fc13c300fdfcab6dc80cf55373c10adcc249ae80479b87fa3e391a2cd4a74babd1c22a4976812d544dcd6729b161bbc48fd067cf635b05f9edaddaeb6f67f2117d6b54a23c5e6f08a246abfe0356a67d7f3929306515e6d9962f8ce205120ecdcd2d4e3783cd0b4a1f0196a1b13924d0d3649233312695c3c336ae04e0b1efddabcc878b57622db60f6f747a1124c38426dacf1425c92d304c2bb1052f987c1dd73e4cc4b20d23396d4f05f52f98cf5065c3fb7dc319425f1f6f1878b87f57afbd24fbff98909494581aadd04d80a639b85ce8684ea58409d8dbbbaacf256bb5c4
2756 Result = KEYOP_ERROR
2757
2758 # Legacy OCTET STRING MDC-2 signature, wrong input and signature digest length
2759 Verify = RSA-2048
2760 Ctrl = digest:MDC2
2761 Input = "0123456789ABCDE"
2762 Output = 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
2763 Result = VERIFY_ERROR
2764
2765 # Verify using public key
2766
2767 Verify = RSA-2048-PUBLIC
2768 Ctrl = digest:SHA1
2769 Input = "0123456789ABCDEF1234"
2770 Output = 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
2771
2772 # RSA decrypt
2773
2774 Decrypt = RSA-2048
2775 Input = 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
2776 Output = "Hello World"
2777
2778 # Corrupted ciphertext
2779 Decrypt = RSA-2048
2780 Input = 550AF55A2904E7B9762352F8FB7FA235A9CB053AACB2D5FCB8CA48453CB2EE3619746C701ABF2D4CC67003471A187900B05AA812BD25ED05C675DFC8C97A24A7BF49BD6214992CAD766D05A9A2B57B74F26A737E0237B8B76C45F1F226A836D7CFBC75BA999BDBE48DBC09227AA46C88F21DCCBA7840141AD5A5D71FD122E6BD6AC3E564780DFE623FC1CA9B995A6037BF0BBD43B205A84AC5444F34202C05CE9113087176432476576DE6FFFF9A52EA57C08BE3EC2F49676CB8E12F762AC71FA3C321E00AC988910C85FF52F93825666CE0D40FFAA0592078919D4493F46D95CCF76364C6D57760DD0B64805F9AFC76A2365A5575CA301D5103F0EA76CB9A79
2781 Output = "Hello World"
2782 Result = KEYOP_ERROR
2783
2784 # OAEP padding
2785 Decrypt = RSA-2048
2786 Ctrl = rsa_padding_mode:oaep
2787 Input = 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
2788 Output = "Hello World"
2789
2790 # OAEP padding, corrupted ciphertext
2791 Decrypt = RSA-2048
2792 Ctrl = rsa_padding_mode:oaep
2793 Input = 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
2794 Output = "Hello World"
2795 Result = KEYOP_ERROR
2796
2797 # Illegal RSA key derivation
2798 Derive = RSA-2048
2799 Result = KEYOP_INIT_ERROR
2800 Function = EVP_PKEY_derive_init
2801 Reason = operation not supported for this keytype
2802
2803 # Invalid ctrl
2804 Sign = RSA-2048
2805 Ctrl = rsa_mgf1_md:sha1
2806 Result = PKEY_CTRL_INVALID
2807 Function = pkey_rsa_ctrl
2808 Reason = invalid mgf1 md
2809
2810 # EC tests
2811
2812 Verify = P-256
2813 Ctrl = digest:SHA1
2814 Input = "0123456789ABCDEF1234"
2815 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec8
2816
2817 # Digest too long
2818 Verify = P-256
2819 Ctrl = digest:SHA1
2820 Input = "0123456789ABCDEF12345"
2821 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec8
2822 Result = VERIFY_ERROR
2823
2824 # Digest too short
2825 Verify = P-256
2826 Ctrl = digest:SHA1
2827 Input = "0123456789ABCDEF123"
2828 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec8
2829 Result = VERIFY_ERROR
2830
2831 # Digest invalid
2832 Verify = P-256
2833 Ctrl = digest:SHA1
2834 Input = "0123456789ABCDEF1235"
2835 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec8
2836 Result = VERIFY_ERROR
2837
2838 # Invalid signature
2839 Verify = P-256
2840 Ctrl = digest:SHA1
2841 Input = "0123456789ABCDEF1234"
2842 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec7
2843 Result = VERIFY_ERROR
2844
2845 # Garbage after signature
2846 Verify = P-256
2847 Ctrl = digest:SHA1
2848 Input = "0123456789ABCDEF1234"
2849 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec800
2850 Result = VERIFY_ERROR
2851
2852 # BER signature
2853 Verify = P-256
2854 Ctrl = digest:SHA1
2855 Input = "0123456789ABCDEF1234"
2856 Output = 3080022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec80000
2857 Result = VERIFY_ERROR
2858
2859 Verify = P-256-PUBLIC
2860 Ctrl = digest:SHA1
2861 Input = "0123456789ABCDEF1234"
2862 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec8
2863
2864 # DSA tests
2865 Verify = DSA-1024
2866 Ctrl = digest:SHA1
2867 Input = "0123456789ABCDEF1234"
2868 Output = 302d021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d87
2869
2870 Verify = DSA-1024-PUBLIC
2871 Ctrl = digest:SHA1
2872 Input = "0123456789ABCDEF1234"
2873 Output = 302d021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d87
2874
2875 # Modified signature
2876 Verify = DSA-1024-PUBLIC
2877 Ctrl = digest:SHA1
2878 Input = "0123456789ABCDEF1234"
2879 Output = 302d021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d88
2880 Result = VERIFY_ERROR
2881
2882 # Digest too short
2883 Verify = DSA-1024-PUBLIC
2884 Ctrl = digest:SHA1
2885 Input = "0123456789ABCDEF123"
2886 Output = 302d021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d87
2887 Result = VERIFY_ERROR
2888
2889 # Digest too long
2890 Verify = DSA-1024-PUBLIC
2891 Ctrl = digest:SHA1
2892 Input = "0123456789ABCDEF12345"
2893 Output = 302d021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d87
2894 Result = VERIFY_ERROR
2895
2896 # Garbage after signature
2897 Verify = DSA-1024-PUBLIC
2898 Input = "0123456789ABCDEF1234"
2899 Output = 302d021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d8700
2900 Result = VERIFY_ERROR
2901
2902 # Invalid tag
2903 Verify = DSA-1024-PUBLIC
2904 Ctrl = digest:SHA1
2905 Input = "0123456789ABCDEF1234"
2906 Output = 312d021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d87
2907 Result = VERIFY_ERROR
2908
2909 # BER signature
2910 Verify = DSA-1024-PUBLIC
2911 Ctrl = digest:SHA1
2912 Input = "0123456789ABCDEF1234"
2913 Output = 3080021500942b8c5850e05b59e24495116b1e8559e51b610e0214237aedf272d91f2397f63c9fc8790e1a6cde5d870000
2914 Result = VERIFY_ERROR
2915
2916 # RSA PSS padding tests.
2917
2918 # Zero salt length makes output deterministic
2919 Sign = RSA-2048
2920 Ctrl = rsa_padding_mode:pss
2921 Ctrl = rsa_pss_saltlen:0
2922 Ctrl = digest:sha256
2923 Input="0123456789ABCDEF0123456789ABCDEF"
2924 Output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
2925
2926 # Verify of above signature
2927 Verify = RSA-2048-PUBLIC
2928 Ctrl = rsa_padding_mode:pss
2929 Ctrl = rsa_pss_saltlen:0
2930 Ctrl = digest:sha256
2931 Input="0123456789ABCDEF0123456789ABCDEF"
2932 Output=4DE433D5844043EF08D354DA03CB29068780D52706D7D1E4D50EFB7D58C9D547D83A747DDD0635A96B28F854E50145518482CB49E963054621B53C60C498D07C16E9C2789C893CF38D4D86900DE71BDE463BD2761D1271E358C7480A1AC0BAB930DDF39602AD1BC165B5D7436B516B7A7858E8EB7AB1C420EEB482F4D207F0E462B1724959320A084E13848D11D10FB593E66BF680BF6D3F345FC3E9C3DE60ABBAC37E1C6EC80A268C8D9FC49626C679097AA690BC1AA662B95EB8DB70390861AA0898229F9349B4B5FDD030D4928C47084708A933144BE23BD3C6E661B85B2C0EF9ED36D498D5B7320E8194D363D4AD478C059BAE804181965E0B81B663158A
2933
2934 # Digest too short
2935 Verify = RSA-2048-PUBLIC
2936 Ctrl = rsa_padding_mode:pss
2937 Ctrl = rsa_pss_saltlen:0
2938 Ctrl = digest:sha256
2939 Input="0123456789ABCDEF0123456789ABCDE"
2940 Output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
2941 Result = VERIFY_ERROR
2942
2943 # Digest too long
2944 Verify = RSA-2048-PUBLIC
2945 Ctrl = rsa_padding_mode:pss
2946 Ctrl = rsa_pss_saltlen:0
2947 Ctrl = digest:sha256
2948 Input="0123456789ABCDEF0123456789ABCDEF0"
2949 Output=4DE433D5844043EF08D354DA03CB29068780D52706D7D1E4D50EFB7D58C9D547D83A747DDD0635A96B28F854E50145518482CB49E963054621B53C60C498D07C16E9C2789C893CF38D4D86900DE71BDE463BD2761D1271E358C7480A1AC0BAB930DDF39602AD1BC165B5D7436B516B7A7858E8EB7AB1C420EEB482F4D207F0E462B1724959320A084E13848D11D10FB593E66BF680BF6D3F345FC3E9C3DE60ABBAC37E1C6EC80A268C8D9FC49626C679097AA690BC1AA662B95EB8DB70390861AA0898229F9349B4B5FDD030D4928C47084708A933144BE23BD3C6E661B85B2C0EF9ED36D498D5B7320E8194D363D4AD478C059BAE804181965E0B81B663158A
2950 Result = VERIFY_ERROR
2951
2952 # Wrong salt length
2953 Verify = RSA-2048
2954 Ctrl = rsa_padding_mode:pss
2955 Ctrl = rsa_pss_saltlen:2
2956 Ctrl = digest:sha256
2957 Input="0123456789ABCDEF0123456789ABCDEF"
2958 Output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
2959 Result = VERIFY_ERROR
2960
2961 # Wrong MGF1 digest
2962 Verify = RSA-2048
2963 Ctrl = rsa_padding_mode:pss
2964 Ctrl = rsa_pss_saltlen:0
2965 Ctrl = digest:sha256
2966 Ctrl = rsa_mgf1_md:sha1
2967 Input="0123456789ABCDEF0123456789ABCDEF"
2968 Output=4DE433D5844043EF08D354DA03CB29068780D52706D7D1E4D50EFB7D58C9D547D83A747DDD0635A96B28F854E50145518482CB49E963054621B53C60C498D07C16E9C2789C893CF38D4D86900DE71BDE463BD2761D1271E358C7480A1AC0BAB930DDF39602AD1BC165B5D7436B516B7A7858E8EB7AB1C420EEB482F4D207F0E462B1724959320A084E13848D11D10FB593E66BF680BF6D3F345FC3E9C3DE60ABBAC37E1C6EC80A268C8D9FC49626C679097AA690BC1AA662B95EB8DB70390861AA0898229F9349B4B5FDD030D4928C47084708A933144BE23BD3C6E661B85B2C0EF9ED36D498D5B7320E8194D363D4AD478C059BAE804181965E0B81B663158A
2969 Result = VERIFY_ERROR
2970
2971 # RSA PSS key tests
2972
2973 # PSS only key, no parameter restrictions
2974 PrivateKey = RSA-PSS
2975 -----BEGIN PRIVATE KEY-----
2976 MIIEugIBADALBgkqhkiG9w0BAQoEggSmMIIEogIBAAKCAQEAzQCB6nsq4eoG1Z98
2977 c9n/uUoJYVwuS6fGNs7wjdNTPsMYVSWwFcdpuZp31nJb+cNTKptuX2Yn1fuFFgdo
2978 092py9NZdFEXF9w9MJ0vxH7kH5fjKtt/ndhkocR2emZuzXG8Gqz151F/SzhZT+qb
2979 BeQtWtqZEgCAE+RTFqTZu47QhriNKHWLrK+SLUaoaLSF0jnJuusOK2RZJxD0Ky0e
2980 oKS0gCwL7Ksyj4posAc721Rv7qmAnShJkSs5DBUyvH4px2WPgXX65G80My/4e8qz
2981 5AZJuYV3hp2g6nGDU/ByJ1SIaRNkh2DRIr5nbg/Eg90g/8Mb2pajGWbJqi51rQPe
2982 R+HETwIDAQABAoIBAGApeseZGxZ6BtayR1i4y+IIvrmy2eyXOL2A+QouNQBd184p
2983 LZ4puohb0xb+8fIJE7wKyQ1rCAiyQU2CEERB2GJKM84CM8j3gKSLN1r/AtdnEiKK
2984 cCSE2z+evszPu+4XCduhgoANlJ6eQhbgv/NVg4j4vZDaNzodgnQ+w/vdFCf9FoJa
2985 ZXoxaRLoaVNlEXyi+EXJCUBfysVfiV/BXSA4bCbueMnpkHUCmheKbB5M8MIA6KnP
2986 sn6dFW+G5sKtwisahKHNXKWyeQh115QHyEs1I5XLgcw/7VuwQ7ae3gwHIEVQAlzu
2987 jF9EAXC2Egu0jg90e82PUiEQhQ3wQ8Qo39GHBTECgYEA9vlhtHy8A1067evH3oUK
2988 lWtl7Nuc9gdkBj8VqkhVPFjZcv5mdQVuNd39w3vzufL2Iu4nEzclaEnJvvIXb+j3
2989 w/i7kbo3TdU7rz3sgU0r3sEMH9yIzdFodvJrHt+j8JQZft9NQv8fspcRA7iYyoWc
2990 QnKHCGqEKrQQu2nPLTWva+MCgYEA1H5ySn/0EEiycMJSSkEBh4tzFZu3PT28GHsi
2991 DmNbNTT5biQ6GE2T+GC2v7trccHtmh4fRYWDAjwwHpamksGgi1PQ7JypEBANgEUe
2992 O33GoBusSuzvjfeYhGvCNaCMu6LPTAaATMESGelWCMcU4/FDDUkfrbujKldRoE+X
2993 dFg0yaUCgYAh8kUrubld/QKMkUv3mfHKd+ialdUNPBbThPhFX4vXr56z36PVkdmE
2994 Le8jX3YwqOSMCI/2ZC4QF5RTWpM+HpdvqFCfxyiy2gxKGgjX/PN6uq4f8wAayh3B
2995 u7Bdnf+6oaCff7Hu84I32evMxyK5M4Q23ecRkRJ5jCaAnBqN7EMgYQKBgB91EKpi
2996 wtjeSjxTKCeB9B4C0Oi0Aq54Qy5EnEgRAWGhFAPwLQGICo3Mk4FS15chpHEaYHrE
2997 Rx6/lkgQ+VvkekXmBJnin0yXc8g3c0BPYGY3cowtA1G7A8MmyLtzpyHn+lRA6iFy
2998 u6FGX8ww3LDZ+Jkw6BWqH3+XKahX4A4DON1ZAoGATR8NdW/nfgEJmmUvUKiLe2hd
2999 xb8AmB1dI3b9DG/inNW2OHNEeTBac608FZnTnq47rgNfvW/tB8KN5wWTOHmgbkjm
3000 pgNobtjiVgpfavHywk+vSqlg44IYbxXu3OmiSRrnMGgN1M93i3D6qGgmqzIjR3zJ
3001 E3exmm1aLq6iGXYL7tU=
3002 -----END PRIVATE KEY-----
3003
3004 # PSS public key default parameters
3005 PublicKey = RSA-PSS-DEFAULT
3006 -----BEGIN PUBLIC KEY-----
3007 MIIBIjANBgkqhkiG9w0BAQowAAOCAQ8AMIIBCgKCAQEAzQCB6nsq4eoG1Z98c9n/
3008 uUoJYVwuS6fGNs7wjdNTPsMYVSWwFcdpuZp31nJb+cNTKptuX2Yn1fuFFgdo092p
3009 y9NZdFEXF9w9MJ0vxH7kH5fjKtt/ndhkocR2emZuzXG8Gqz151F/SzhZT+qbBeQt
3010 WtqZEgCAE+RTFqTZu47QhriNKHWLrK+SLUaoaLSF0jnJuusOK2RZJxD0Ky0eoKS0
3011 gCwL7Ksyj4posAc721Rv7qmAnShJkSs5DBUyvH4px2WPgXX65G80My/4e8qz5AZJ
3012 uYV3hp2g6nGDU/ByJ1SIaRNkh2DRIr5nbg/Eg90g/8Mb2pajGWbJqi51rQPeR+HE
3013 TwIDAQAB
3014 -----END PUBLIC KEY-----
3015 # Key with invalid negative minimum salt length
3016 PublicKey = RSA-PSS-BAD
3017 -----BEGIN PUBLIC KEY-----
3018 MIIBJzASBgkqhkiG9w0BAQowBaIDAgH/A4IBDwAwggEKAoIBAQDNAIHqeyrh6gbV
3019 n3xz2f+5SglhXC5Lp8Y2zvCN01M+wxhVJbAVx2m5mnfWclv5w1Mqm25fZifV+4UW
3020 B2jT3anL01l0URcX3D0wnS/EfuQfl+Mq23+d2GShxHZ6Zm7NcbwarPXnUX9LOFlP
3021 6psF5C1a2pkSAIAT5FMWpNm7jtCGuI0odYusr5ItRqhotIXSOcm66w4rZFknEPQr
3022 LR6gpLSALAvsqzKPimiwBzvbVG/uqYCdKEmRKzkMFTK8finHZY+BdfrkbzQzL/h7
3023 yrPkBkm5hXeGnaDqcYNT8HInVIhpE2SHYNEivmduD8SD3SD/wxvalqMZZsmqLnWt
3024 A95H4cRPAgMBAAE=
3025 -----END PUBLIC KEY-----
3026
3027 # Verify using default parameters
3028 Verify = RSA-PSS-DEFAULT
3029 Input="0123456789ABCDEF0123"
3030 Output = 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
3031
3032 # Verify using default parameters, explicitly setting parameters
3033 Verify = RSA-PSS-DEFAULT
3034 Ctrl = rsa_padding_mode:pss
3035 Ctrl = rsa_pss_saltlen:20
3036 Ctrl = digest:sha1
3037 Input="0123456789ABCDEF0123"
3038 Output = 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
3039
3040 # Verify using salt length larger than minimum
3041 Verify = RSA-PSS-DEFAULT
3042 Ctrl = rsa_pss_saltlen:30
3043 Input="0123456789ABCDEF0123"
3044 Output = 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
3045
3046 # Attempt to change salt length below minimum
3047 Verify = RSA-PSS-DEFAULT
3048 Ctrl = rsa_pss_saltlen:0
3049 Result = PKEY_CTRL_ERROR
3050
3051 # Attempt to change padding mode
3052 Verify = RSA-PSS-DEFAULT
3053 Ctrl = rsa_padding_mode:pkcs1
3054 Result = PKEY_CTRL_INVALID
3055
3056 # Attempt to change digest
3057 Verify = RSA-PSS-DEFAULT
3058 Ctrl = digest:sha256
3059 Result = PKEY_CTRL_ERROR
3060
3061 # Illegal decrypt
3062 Decrypt = RSA-PSS
3063 Result = KEYOP_INIT_ERROR
3064 Function = EVP_PKEY_decrypt_init
3065 Reason = operation not supported for this keytype
3066
3067 # Invalid key: rejected when we try to init
3068 Verify = RSA-PSS-BAD
3069 Result = KEYOP_INIT_ERROR
3070 Function = rsa_pss_get_param
3071 Reason = invalid salt length
3072
3073 # scrypt tests from draft-josefsson-scrypt-kdf-03
3074 PBE = scrypt
3075 Password = ""
3076 Salt = ""
3077 N = 16
3078 r = 1
3079 p = 1
3080 Key = 77d6576238657b203b19ca42c18a0497f16b4844e3074ae8dfdffa3fede21442fcd0069ded0948f8326a753a0fc81f17e8d3e0fb2e0d3628cf35e20c38d18906
3081
3082 PBE = scrypt
3083 Password = "password"
3084 Salt = "NaCl"
3085 N = 1024
3086 r = 8
3087 p = 16
3088 Key = fdbabe1c9d3472007856e7190d01e9fe7c6ad7cbc8237830e77376634b3731622eaf30d92e22a3886ff109279d9830dac727afb94a83ee6d8360cbdfa2cc0640
3089
3090 PBE = scrypt
3091 Password = "pleaseletmein"
3092 Salt = "SodiumChloride"
3093 N = 16384
3094 r = 8
3095 p = 1
3096 Key = 7023bdcb3afd7348461c06cd81fd38ebfda8fbba904f8e3ea9b543f6545da1f2d5432955613f0fcf62d49705242a9af9e61e85dc0d651e40dfcf017b45575887
3097
3098 # NB: this test requires more than 1GB of memory to run so it will hit the
3099 # scrypt memory limit and return an error. To run this test without error
3100 # uncomment out the "maxmem" line and comment out the "Result"
3101 # line
3102 PBE = scrypt
3103 Password = "pleaseletmein"
3104 Salt = "SodiumChloride"
3105 N = 1048576
3106 r = 8
3107 p = 1
3108 Key = 2101cb9b6a511aaeaddbbe09cf70f881ec568d574a2ffd4dabe5ee9820adaa478e56fd8f4ba5d09ffa1c6d927c40f4c337304049e8a952fbcbf45c6fa77a41a4
3109 #maxmem = 10000000000
3110 Result = SCRYPT_ERROR
3111
3112 # PKCS#12 tests
3113
3114 PBE = pkcs12
3115 id = 1
3116 iter = 1
3117 MD = SHA1
3118 Password = 0073006D006500670000
3119 Salt = 0A58CF64530D823F
3120 Key = 8AAAE6297B6CB04642AB5B077851284EB7128F1A2A7FBCA3
3121
3122 PBE = pkcs12
3123 id = 2
3124 iter = 1
3125 MD = SHA1
3126 Password = 0073006D006500670000
3127 Salt = 0A58CF64530D823F
3128 Key = 79993DFE048D3B76
3129
3130 PBE = pkcs12
3131 id = 3
3132 iter 1
3133 MD = SHA1
3134 Password = 0073006D006500670000
3135 Salt = 3D83C0E4546AC140
3136 Key = 8D967D88F6CAA9D714800AB3D48051D63F73A312
3137
3138 PBE = pkcs12
3139 id = 1
3140 iter = 1000
3141 MD = SHA1
3142 Password = 007100750065006500670000
3143 Salt = 1682C0FC5B3F7EC5
3144 Key = 483DD6E919D7DE2E8E648BA8F862F3FBFBDC2BCB2C02957F
3145
3146 PBE = pkcs12
3147 id = 2
3148 iter = 1000
3149 MD = SHA1
3150 Password = 007100750065006500670000
3151 Salt = 1682C0FC5B3F7EC5
3152 Key = 9D461D1B00355C50
3153
3154 PBE = pkcs12
3155 id = 3
3156 iter = 1000
3157 MD = SHA1
3158 Password = 007100750065006500670000
3159 Salt = 263216FCC2FAB31C
3160 Key = 5EC4C7A80DF652294C3925B6489A7AB857C83476
3161
3162 # PBKDF2 tests from p5_crpt2_test.c
3163 PBE = pbkdf2
3164 Password = "password"
3165 Salt = "salt"
3166 iter = 1
3167 MD = sha1
3168 Key = 0c60c80f961f0e71f3a9b524af6012062fe037a6
3169
3170 PBE = pbkdf2
3171 Password = "password"
3172 Salt = "salt"
3173 iter = 1
3174 MD = sha256
3175 Key = 120fb6cffcf8b32c43e7225256c4f837a86548c92ccc35480805987cb70be17b
3176
3177 PBE = pbkdf2
3178 Password = "password"
3179 Salt = "salt"
3180 iter = 1
3181 MD = sha512
3182 Key = 867f70cf1ade02cff3752599a3a53dc4af34c7a669815ae5d513554e1c8cf252c02d470a285a0501bad999bfe943c08f050235d7d68b1da55e63f73b60a57fce
3183
3184 PBE = pbkdf2
3185 Password = "password"
3186 Salt = "salt"
3187 iter = 2
3188 MD = sha1
3189 Key = ea6c014dc72d6f8ccd1ed92ace1d41f0d8de8957
3190
3191 PBE = pbkdf2
3192 Password = "password"
3193 Salt = "salt"
3194 iter = 2
3195 MD = sha256
3196 Key = ae4d0c95af6b46d32d0adff928f06dd02a303f8ef3c251dfd6e2d85a95474c43
3197
3198 PBE = pbkdf2
3199 Password = "password"
3200 Salt = "salt"
3201 iter = 2
3202 MD = sha512
3203 Key = e1d9c16aa681708a45f5c7c4e215ceb66e011a2e9f0040713f18aefdb866d53cf76cab2868a39b9f7840edce4fef5a82be67335c77a6068e04112754f27ccf4e
3204
3205 PBE = pbkdf2
3206 Password = "password"
3207 Salt = "salt"
3208 iter = 4096
3209 MD = sha1
3210 Key = 4b007901b765489abead49d926f721d065a429c1
3211
3212 PBE = pbkdf2
3213 Password = "password"
3214 Salt = "salt"
3215 iter = 4096
3216 MD = sha256
3217 Key = c5e478d59288c841aa530db6845c4c8d962893a001ce4e11a4963873aa98134a
3218
3219 PBE = pbkdf2
3220 Password = "password"
3221 Salt = "salt"
3222 iter = 4096
3223 MD = sha512
3224 Key = d197b1b33db0143e018b12f3d1d1479e6cdebdcc97c5c0f87f6902e072f457b5143f30602641b3d55cd335988cb36b84376060ecd532e039b742a239434af2d5
3225
3226 PBE = pbkdf2
3227 Password = "passwordPASSWORDpassword"
3228 Salt = "saltSALTsaltSALTsaltSALTsaltSALTsalt"
3229 iter = 4096
3230 MD = sha1
3231 Key = 3d2eec4fe41c849b80c8d83662c0e44a8b291a964cf2f07038
3232
3233 PBE = pbkdf2
3234 Password = "passwordPASSWORDpassword"
3235 Salt = "saltSALTsaltSALTsaltSALTsaltSALTsalt"
3236 iter = 4096
3237 MD = sha256
3238 Key = 348c89dbcbd32b2f32d814b8116e84cf2b17347ebc1800181c4e2a1fb8dd53e1c635518c7dac47e9
3239
3240 PBE = pbkdf2
3241 Password = "passwordPASSWORDpassword"
3242 Salt = "saltSALTsaltSALTsaltSALTsaltSALTsalt"
3243 iter = 4096
3244 MD = sha512
3245 Key = 8c0511f4c6e597c6ac6315d8f0362e225f3c501495ba23b868c005174dc4ee71115b59f9e60cd9532fa33e0f75aefe30225c583a186cd82bd4daea9724a3d3b8
3246
3247 PBE = pbkdf2
3248 Password = 7061737300776f7264
3249 Salt = 7361006c74
3250 iter = 4096
3251 MD = sha1
3252 Key = 56fa6aa75548099dcc37d7f03425e0c3
3253
3254 PBE = pbkdf2
3255 Password = 7061737300776f7264
3256 Salt = 7361006c74
3257 iter = 4096
3258 MD = sha256
3259 Key = 89b69d0516f829893c696226650a8687
3260
3261 PBE = pbkdf2
3262 Password = 7061737300776f7264
3263 Salt = 7361006c74
3264 iter = 4096
3265 MD = sha512
3266 Key = 9d9e9c4cd21fe4be24d5b8244c759665
3267
3268 # Base64 tests
3269
3270 Encoding = canonical
3271 Input = ""
3272 Output = ""
3273
3274 Encoding = canonical
3275 Input = "h"
3276 Output = "aA==\n"
3277
3278 Encoding = canonical
3279 Input = "hello"
3280 Output = "aGVsbG8=\n"
3281
3282 Encoding = canonical
3283 Input = "hello world!"
3284 Output = "aGVsbG8gd29ybGQh\n"
3285
3286 Encoding = canonical
3287 Input = 00010203040506070809a0b0c0d0e0f000
3288 Output = "AAECAwQFBgcICaCwwNDg8AA=\n"
3289
3290 # Missing padding
3291 Encoding = invalid
3292 Output = "aGVsbG8"
3293
3294 Encoding = invalid
3295 Output = "aGVsbG8\n"
3296
3297 # Tolerate missing newline
3298 Encoding = valid
3299 Input = "hello"
3300 Output = "aGVsbG8="
3301
3302 # Don't tolerate extra trailing '='
3303 Encoding = invalid
3304 Input = "hello"
3305 Output = "aGVsbG8==\n"
3306
3307 Encoding = invalid
3308 Output = "aGVsbG8===\n"
3309
3310 # Don't tolerate data after '='
3311 Encoding = invalid
3312 Output = "aGV=sbG8=\n"
3313
3314 # Newlines are ignored
3315 Encoding = valid
3316 Input = "hello"
3317 Output = "aGV\nsbG8=\n"
3318
3319 Encoding = canonical
3320 Input = "hello"
3321 Output = 614756736247383d0a
3322
3323 # Invalid characters
3324 Encoding = invalid
3325 Output = 614756736247383d0a00
3326
3327 Encoding = invalid
3328 Output = 61475600736247383d0a
3329
3330 Encoding = invalid
3331 Output = 61475601736247383d0a
3332
3333 Encoding = invalid
3334 Output = 61475680736247383d0a
3335
3336 Encoding = invalid
3337 Output = e14756736247383d0a
3338
3339 Encoding = canonical
3340 Input = "OpenSSLOpenSSL\n"
3341 Output = "T3BlblNTTE9wZW5TU0wK\n"
3342
3343 Encoding = valid
3344 Input = "OpenSSLOpenSSL\n"
3345 Output = "T3BlblNTTE9wZW5TU0wK"
3346
3347 # Truncate 1-3 chars
3348 Encoding = invalid
3349 Output = "T3BlblNTTE9wZW5TU0w"
3350
3351 Encoding = invalid
3352 Output = "T3BlblNTTE9wZW5TU0"
3353
3354 Encoding = invalid
3355 Output = "T3BlblNTTE9wZW5TU"
3356
3357 Encoding = invalid
3358 Output = "T3BlblNTTE9wZW5TU0wK===="
3359
3360 Encoding = invalid
3361 Output = "T3BlblNTTE9wZW5TU0wK============================================\n"
3362
3363 Encoding = invalid
3364 Output = "YQ==YQ==YQ==\n"
3365
3366 Encoding = invalid
3367 Output = "A"
3368
3369 Encoding = invalid
3370 Output = "A\n"
3371
3372 Encoding = invalid
3373 Output = "A="
3374
3375 Encoding = invalid
3376 Output = "A==\n"
3377
3378 Encoding = invalid
3379 Output = "A===\n"
3380
3381 Encoding = invalid
3382 Output = "A====\n"
3383
3384 Encoding = valid
3385 Input = "OpenSSLOpenSSL\n"
3386 Output = "T3BlblNTTE9wZW5TU0wK\n\n"
3387
3388 Encoding = valid
3389 Input = "OpenSSLOpenSSL\n"
3390 Output = "T3BlblNTTE\n9wZW5TU0wK"
3391
3392 # CVE 2015-0292
3393 Encoding = invalid
3394 Output = "ZW5jb2RlIG1lCg==================================================================\n"
3395
3396 Encoding = canonical
3397 Input = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
3398 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eA==\n"
3399
3400 Encoding = valid
3401 Input = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
3402 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eA\n==\n"
3403
3404 Encoding = valid
3405 Input = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
3406 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eA=\n=\n"
3407
3408 Encoding = invalid
3409 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eA====\n"
3410
3411 # Multiline output without padding
3412 Encoding = canonical
3413 Input = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
3414 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4\neHh4eHh4eHh4eHh4\n"
3415
3416 # Multiline output with padding
3417 Encoding = canonical
3418 Input = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
3419 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4\neHh4eHh4eHh4eHh4eHh4eA==\n"
3420
3421 # Multiline output with line break in the middle of a b64 block is accepted
3422 Encoding = valid
3423 Input = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
3424 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh\n4eHh4eHh4eHh4eHh4eHh4eA==\n"
3425
3426 # Long lines are accepted
3427 Encoding = valid
3428 Input = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
3429 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eA==\n"
3430
3431 # Multiline input with data after '='.
3432 Encoding = invalid
3433 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eA==\neHh4eHh4eHh4eHh4eHh4eHh4\n"
3434
3435 Encoding = invalid
3436 Output = "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4\neA==eHh4eHh4eHh4eHh4eHh4\n"
3437
3438 # B64_EOF ('-') terminates input and trailing bytes are ignored
3439 Encoding = valid
3440 Input = "OpenSSLOpenSSL\n"
3441 Output = "T3BlblNTTE9wZW5TU0wK\n-abcd"
3442
3443 Encoding = valid
3444 Input = "OpenSSLOpenSSL\n"
3445 Output = "T3BlblNTTE9wZW5TU0wK-abcd"
3446
3447 Cipher = chacha20
3448 Key = 0000000000000000000000000000000000000000000000000000000000000000
3449 IV = 00000000000000000000000000000000
3450 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3451 Ciphertext = 76b8e0ada0f13d90405d6ae55386bd28bdd219b8a08ded1aa836efcc8b770dc7da41597c5157488d7724e03fb8d84a376a43b8f41518a11cc387b669b2ee6586
3452
3453 Cipher = chacha20
3454 Key = 0000000000000000000000000000000000000000000000000000000000000001
3455 IV = 00000000000000000000000000000000
3456 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3457 Ciphertext = 4540f05a9f1fb296d7736e7b208e3c96eb4fe1834688d2604f450952ed432d41bbe2a0b6ea7566d2a5d1e7e20d42af2c53d792b1c43fea817e9ad275ae546963
3458
3459 Cipher = chacha20
3460 Key = 0000000000000000000000000000000000000000000000000000000000000000
3461 IV = 00000000000000000000000000000001
3462 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3463 Ciphertext = de9cba7bf3d69ef5e786dc63973f653a0b49e015adbff7134fcb7df137821031e85a050278a7084527214f73efc7fa5b5277062eb7a0433e445f41e31afab757
3464
3465 Cipher = chacha20
3466 Key = 0000000000000000000000000000000000000000000000000000000000000000
3467 IV = 00000000000000000100000000000000
3468 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3469 Ciphertext = ef3fdfd6c61578fbf5cf35bd3dd33b8009631634d21e42ac33960bd138e50d32111e4caf237ee53ca8ad6426194a88545ddc497a0b466e7d6bbdb0041b2f586b
3470
3471 Cipher = chacha20
3472 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3473 IV = 00000000000000000001020304050607
3474 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3475 Ciphertext = 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
3476
3477 Cipher = chacha20
3478 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3479 IV = 00000000000000000001020304050607
3480 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3481 Ciphertext = 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
3482
3483 Cipher = chacha20
3484 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3485 IV = 00000000000000000001020304050607
3486 Plaintext = 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3487 Ciphertext = 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
3488
3489 Cipher = chacha20
3490 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3491 IV = 00000000000000000001020304050607
3492 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3493 Ciphertext = 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
3494
3495 Cipher = chacha20
3496 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3497 IV = 00000000000000000001020304050607
3498 Plaintext = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3499 Ciphertext = f798a189f195e66982105ffb640bb7757f579da31602fc93ec01ac56f85ac3c134a4547b733b46413042c9440049176905d3be59ea1c53f15916155c2be8241a38008b9a26bc35941e2444177c8ade6689de95264986d95889fb60e84629c9bd9a5acb1cc118be563eb9b3a4a472f82e09a7e778492b562ef7130e88dfe031c79db9d4f7c7a899151b9a475032b63fc385245fe054e3dd5a97a5f576fe064025d3ce042c566ab2c507b138db853e3d6959660996546cc9c4a6eafdc777c040d70eaf46f76dad3979e5c5360c3317166a1c894c94a371876a94df7628fe4eaaf2ccb27d5aaae0ad7ad0f9d4b6ad3b54098746d4524d38407a6deb3ab78fab78c94213668bbbd394c5de93b853178addd6b97f9fa1ec3e56c00c9ddff0a44a204241175a4cab0f961ba53ede9bdf960b94f9829b1f3414726429b362c5b538e391520f489b7ed8d20ae3fd49e9e259e44397514d618c96c4846be3c680bdc11c71dcbbe29ccf80d62a0938fa549391e6ea57ecbe2606790ec15d2224ae307c144226b7c4e8c2f97d2a1d67852d29beba110edd445197012062a393a9c92803ad3b4f31d7bc6033ccf7932cfed3f019044d25905916777286f82f9a4cc1ffe430ffd1dcfc27deed327b9f9630d2fa969fb6f0603cd19dd9a9519e673bcfcd9014125291a44669ef7285e74ed3729b677f801c3cdf058c50963168b496043716c7307cd9e0cdd137fccb0f05b47cdbb95c5f54831622c3652a32b2531fe326bcd6e2bbf56a194fa196fbd1a54952110f51c73433865f7664b836685e3664b3d8444a
3500
3501 Cipher = chacha20
3502 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3503 IV = 00000000000000000001020304050607
3504 Plaintext = 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3505 Ciphertext = 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
3506
3507 Cipher = chacha20
3508 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3509 IV = 00000000000000000001020304050607
3510 Plaintext = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3511 Ciphertext = f798a189f195e66982105ffb640bb7757f579da31602fc93ec01ac56f85ac3c134a4547b733b46413042c9440049176905d3be59ea1c53f15916155c2be8241a38008b9a26bc35941e2444177c8ade6689de95264986d95889fb60e84629c9bd9a5acb1cc118be563eb9b3a4a472f82e09a7e778492b562ef7130e88dfe031c79db9d4f7c7a899151b9a475032b63fc385245fe054e3dd5a97a5f576fe064025d3ce042c566ab2c507b138db853e3d6959660996546cc9c4a6eafdc777c040d70eaf46f76dad3979e5c5360c3317166a1c894c94a371876a94df7628fe4eaaf2ccb27d5aaae0ad7ad0f9d4b6ad3b54098746d4524d38407a6deb3ab78fab78c94213668bbbd394c5de93b853178addd6b97f9fa1ec3e56c00c9ddff0a44a204241175a4cab0f961ba53ede9bdf960b94f9829b1f3414726429b362c5b538e391520f489b7ed8d20ae3fd49e9e259e44397514d618c96c4846be3c680bdc11c71dcbbe29ccf80d62a0938fa549391e6ea57ecbe2606790ec15d2224ae307c144226b7c4e8c2f97d2a1d67852d29beba110edd445197012062a393a9c92803ad3b4f31d7bc6033ccf7932cfed3f019044d25905916777286f82f9a4cc1ffe430ffd1dcfc27deed327b9f9630d2fa969fb6f0603cd19dd9a9519e673bcfcd9014125291a44669ef7285e74ed3729b677f801c3cdf058c50963168b496043716c7307cd9e0cdd137fccb0f05b47cdbb95c5f54831622c3652a32b2531fe326bcd6e2bbf56a194fa196fbd1a54952110f51c73433865f7664b836685e3664b3d8444aF89A242805E18C975F1146324996FDE17007CF3E6E8F4E764022533EDBFE07D4733E48BB372D75B0EF48EC983EB78532161CC529E5ABB89837DFCCA6261DBB37C7C5E6A87478BF41EE85A518C0F4EFA9BDE828C5A71B8E46597B634AFD204D3C501334239C3414285ED72D3A9169EABBD4DC25D52BB7516D3BA712D75AD8C0AE5D493C19E38A77939E7A058D713E9CCCCA58045F436B434B1C80D365472406E392951987DB6905C80D431DA18451135BE7E82BCAB358CB3971E61405B2FF1798
3512
3513 Cipher = chacha20
3514 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3515 IV = 00000000000000000001020304050607
3516 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3517 Ciphertext = f798a189f195e66982105ffb640bb7757f579da31602fc93ec01ac56f85ac3c134a4547b733b46413042c9440049176905d3be59ea1c53f15916155c2be8241a38008b9a26bc35941e2444177c8ade6689de95264986d95889fb60e84629c9bd9a5acb1cc118be563eb9b3a4a472f82e09a7e778492b562ef7130e88dfe031c79db9d4f7c7a899151b9a475032b63fc385245fe054e3dd5a97a5f576fe064025d3ce042c566ab2c507b138db853e3d6959660996546cc9c4a6eafdc777c040d70eaf46f76dad3979e5c5360c3317166a1c894c94a371876a94df7628fe4eaaf2ccb27d5aaae0ad7ad0f9d4b6ad3b54098746d4524d38407a6deb3ab78fab78c94213668bbbd394c5de93b853178addd6b97f9fa1ec3e56c00c9ddff0a44a204241175a4cab0f961ba53ede9bdf960b94f9829b1f3414726429b362c5b538e391520f489b7ed8d20ae3fd49e9e259e44397514d618c96c4846be3c680bdc11c71dcbbe29ccf80d62a0938fa549391e6ea57ecbe2606790ec15d2224ae307c144226b7c4e8c2f97d2a1d67852d29beba110edd445197012062a393a9c92803ad3b4f31d7bc6033ccf7932cfed3f019044d25905916777286f82f9a4cc1ffe430ffd1dcfc27deed327b9f9630d2fa969fb6f0603cd19dd9a9519e673bcfcd9014125291a44669ef7285e74ed3729b677f801c3cdf058c50963168b496043716c7307cd9e0cdd137fccb0f05b47cdbb95c5f54831622c3652a32b2531fe326bcd6e2bbf56a194fa196fbd1a54952110f51c73433865f7664b836685e3664b3d8444aF89A242805E18C975F1146324996FDE17007CF3E6E8F4E764022533EDBFE07D4733E48BB372D75B0EF48EC983EB78532161CC529E5ABB89837DFCCA6261DBB37C7C5E6A87478BF41EE85A518C0F4EFA9BDE828C5A71B8E46597B634AFD204D3C501334239C3414285ED72D3A9169EABBD4DC25D52BB7516D3BA712D75AD8C0AE5D493C19E38A77939E7A058D713E9CCCCA58045F436B434B1C80D365472406E392951987DB6905C80D431DA18451135BE7E82BCAB358CB3971E61405B2FF17980D6E7E67E861E28201C1EE30B441040FD06878D65042C95582A4318207BFC700BE0CE32889AEC2FFE5085E8967910D879FA0E8C0FF85FDC510B9FF2FBF87CFCB
3518
3519 Cipher = chacha20
3520 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3521 IV = 00000000000000000001020304050607
3522 Plaintext = 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3523 Ciphertext = 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
3524
3525 Cipher = chacha20
3526 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3527 IV = 00000000000000000001020304050607
3528 Plaintext = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3529 Ciphertext = f798a189f195e66982105ffb640bb7757f579da31602fc93ec01ac56f85ac3c134a4547b733b46413042c9440049176905d3be59ea1c53f15916155c2be8241a38008b9a26bc35941e2444177c8ade6689de95264986d95889fb60e84629c9bd9a5acb1cc118be563eb9b3a4a472f82e09a7e778492b562ef7130e88dfe031c79db9d4f7c7a899151b9a475032b63fc385245fe054e3dd5a97a5f576fe064025d3ce042c566ab2c507b138db853e3d6959660996546cc9c4a6eafdc777c040d70eaf46f76dad3979e5c5360c3317166a1c894c94a371876a94df7628fe4eaaf2ccb27d5aaae0ad7ad0f9d4b6ad3b54098746d4524d38407a6deb3ab78fab78c94213668bbbd394c5de93b853178addd6b97f9fa1ec3e56c00c9ddff0a44a204241175a4cab0f961ba53ede9bdf960b94f9829b1f3414726429b362c5b538e391520f489b7ed8d20ae3fd49e9e259e44397514d618c96c4846be3c680bdc11c71dcbbe29ccf80d62a0938fa549391e6ea57ecbe2606790ec15d2224ae307c144226b7c4e8c2f97d2a1d67852d29beba110edd445197012062a393a9c92803ad3b4f31d7bc6033ccf7932cfed3f019044d25905916777286f82f9a4cc1ffe430ffd1dcfc27deed327b9f9630d2fa969fb6f0603cd19dd9a9519e673bcfcd9014125291a44669ef7285e74ed3729b677f801c3cdf058c50963168b496043716c7307cd9e0cdd137fccb0f05b47cdbb95c5f54831622c3652a32b2531fe326bcd6e2bbf56a194fa196fbd1a54952110f51c73433865f7664b836685e3664b3d8444aF89A242805E18C975F1146324996FDE17007CF3E6E8F4E764022533EDBFE07D4733E48BB372D75B0EF48EC983EB78532161CC529E5ABB89837DFCCA6261DBB37C7C5E6A87478BF41EE85A518C0F4EFA9BDE828C5A71B8E46597B634AFD204D3C501334239C3414285ED72D3A9169EABBD4DC25D52BB7516D3BA712D75AD8C0AE5D493C19E38A77939E7A058D713E9CCCCA58045F436B434B1C80D365472406E392951987DB6905C80D431DA18451135BE7E82BCAB358CB3971E61405B2FF17980D6E7E67E861E28201C1EE30B441040FD06878D65042C95582A4318207BFC700BE0CE32889AEC2FFE5085E8967910D879FA0E8C0FF85FDC510B9FF2FBF87CFCB29577D68099E04FFA05F752A73D377C70D3A8BC2DA80E6E780EC057182C33AD1DE387252258A1E18E6FAD910327CE7F42FD1E1E0515F9586E2F2EFCB9F472B1DBDBAC354A4162151E9D92C79FB08BB4DDC56F19448C0175A46E2E6C491FEC71419AA43A349BEA768A92C75DE68FD9591E68067F3197094D3FB87ED81785EA075
3530
3531 Cipher = chacha20
3532 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3533 IV = 00000000000000000001020304050607
3534 Plaintext = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3535 Ciphertext = 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
3536
3537 Cipher = chacha20
3538 Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
3539 IV = 00000000000000000001020304050607
3540 Plaintext = 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
3541 Ciphertext = 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
3542
3543 # RFC7539
3544 Cipher = chacha20-poly1305
3545 Key = 808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
3546 IV = 070000004041424344454647
3547 AAD = 50515253c0c1c2c3c4c5c6c7
3548 Tag = 1ae10b594f09e26a7e902ecbd0600691
3549 Plaintext = 4c616469657320616e642047656e746c656d656e206f662074686520636c617373206f66202739393a204966204920636f756c64206f6666657220796f75206f6e6c79206f6e652074697020666f7220746865206675747572652c2073756e73637265656e20776f756c642062652069742e
3550 Ciphertext = d31a8d34648e60db7b86afbc53ef7ec2a4aded51296e08fea9e2b5a736ee62d63dbea45e8ca9671282fafb69da92728b1a71de0a9e060b2905d6a5b67ecd3b3692ddbd7f2d778b8c9803aee328091b58fab324e4fad675945585808b4831d7bc3ff4def08e4b7a9de576d26586cec64b6116
3551
3552 Cipher = chacha20-poly1305
3553 Key = 1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0
3554 IV = 000000000102030405060708
3555 AAD = f33388860000000000004e91
3556 Tag = eead9d67890cbb22392336fea1851f38
3557 Plaintext = 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
3558 Ciphertext = 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
3559
3560 Cipher = chacha20-poly1305
3561 Key = 1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0
3562 IV = 000000000102030405060708
3563 AAD = f33388860000000000004e91
3564 Tag = eead9d67890cbb22392336fea1851f39
3565 Plaintext = 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
3566 Ciphertext = 64a0861575861af460f062c79be643bd5e805cfd345cf389f108670ac76c8cb24c6cfc18755d43eea09ee94e382d26b0bdb7b73c321b0100d4f03b7f355894cf332f830e710b97ce98c8a84abd0b948114ad176e008d33bd60f982b1ff37c8559797a06ef4f0ef61c186324e2b3506383606907b6a7c02b0f9f6157b53c867e4b9166c767b804d46a59b5216cde7a4e99040c5a40433225ee282a1b0a06c523eaf4534d7f83fa1155b0047718cbc546a0d072b04b3564eea1b422273f548271a0bb2316053fa76991955ebd63159434ecebb4e466dae5a1073a6727627097a1049e617d91d361094fa68f0ff77987130305beaba2eda04df997b714d6c6f2c29a6ad5cb4022b02709b
3567 Operation = DECRYPT
3568 Result = CIPHERFINAL_ERROR
3569
3570 # self-generated vectors
3571 Cipher = chacha20-poly1305
3572 Key = 1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0
3573 IV = 000000000102030405060708
3574 AAD = f33388860000000000004e91
3575 Tag = d96119a40cd17f2527306866a3ef0413
3576 Plaintext = 496e7465726e65742d4472616674732061726520647261667420646f63756d656e74732076616c696420666f722061206d6178696d756d206f6620736978206d6f6e74687320616e64206d617920626520757064617465642c207265706c616365642c206f72206f62736f6c65746564206279206f7468657220646f63756d656e747320617420616e792074696d652e20497420697320696e617070726f70726961746520746f2075736520496e7465726e65742d4472616674732061732072
3577 Ciphertext = 64a0861575861af460f062c79be643bd5e805cfd345cf389f108670ac76c8cb24c6cfc18755d43eea09ee94e382d26b0bdb7b73c321b0100d4f03b7f355894cf332f830e710b97ce98c8a84abd0b948114ad176e008d33bd60f982b1ff37c8559797a06ef4f0ef61c186324e2b3506383606907b6a7c02b0f9f6157b53c867e4b9166c767b804d46a59b5216cde7a4e99040c5a40433225ee282a1b0a06c523eaf4534d7f83fa1155b0047718cbc546a0d072b04b3564eea1b422273f548271a
3578
3579 Cipher = chacha20-poly1305
3580 Key = 1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0
3581 IV = 000000000102030405060708
3582 AAD = f33388860000000000004e91
3583 Tag = 53aee3189d2b747032378a6186feb43f
3584 Plaintext = 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
3585 Ciphertext = 64a0861575861af460f062c79be643bd5e805cfd345cf389f108670ac76c8cb24c6cfc18755d43eea09ee94e382d26b0bdb7b73c321b0100d4f03b7f355894cf332f830e710b97ce98c8a84abd0b948114ad176e008d33bd60f982b1ff37c8559797a06ef4f0ef61c186324e2b3506383606907b6a7c02b0f9f6157b53c867e4b9166c767b804d46a59b5216cde7a4e99040c5a40433225ee282a1b0a06c523eaf4534d7f83fa1155b0047718cbc546a0d072b04b3564eea1b422273f548271a0bb2316053fa76991955ebd63159434ecebb4e466dae5a1073a6727627097a1049e617d91d361094fa68f0ff77987130305beaba2eda04df997b714d6c6f2c299da65ba25e6a85842bf0440fd98a9a2266b061c4b3a13327c090f9a0789f58aad805275e4378a525f19232bfbfb749ede38480f405cf43ec2f1f8619ebcbc80a89e92a859c7911e674977ab17d4a7126a6b8a477358ff14a344d276ef6e504e10268ac3619fcf90c2d6c03fc2e3d1f290d9bf26c1fa1495dd8f97eec6229a55c2354e4524143551a5cc370a1c622c9390530cff21c3e1ed50c5e3daf97518ccce34156bdbd7eafab8bd417aef25c6c927301731bd319d247a1d5c3186ed10bfd9a7a24bac30e3e4503ed9204154d338b79ea276e7058e7f20f4d4fd1ac93d63f611af7b6d006c2a72add0eedc497b19cb30a198816664f0da00155f2e2d6ac61
3586
3587 Cipher = chacha20-poly1305
3588 Key = 1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0
3589 IV = 000000000102030405060708
3590 AAD = f33388860000000000004e91
3591 Tag = e0723bce23528ce6ccb10ff9627038bf
3592 Plaintext = 496e7465726e65742d4472616674732061726520647261667420646f63756d656e74732076616c696420666f722061206d6178696d756d206f6620736978206d6f6e74687320616e64206d617920626520757064617465642c207265706c616365642c206f72206f62736f6c65746564206279206f7468657220646f63756d656e747320617420616e792074696d652e20497420697320696e617070726f70726961746520746f2075736520496e7465726e65742d447261667473206173207265666572656e6365206d6174657269616c206f7220746f2063697465207468656d206f74686572207468616e206173202fe2809c776f726b20696e2070726f67496e7465726e65742d4472616674732061726520647261667420646f63756d656e74732076616c696420666f722061206d6178696d756d206f6620736978206d6f6e74687320616e64206d617920626520757064617465642c207265706c616365642c206f72206f62736f6c65746564206279206f7468657220646f63756d656e747320617420616e792074696d652e20497420697320696e617070726f70726961746520746f2075736520496e7465726e65742d447261667473206173207265666572656e6365206d6174657269616c206f7220746f2063697465207468656d206f74686572207468616e206173202fe2809c776f726b20696e2070726f67496e7465726e65742d4472616674732061726520647261667420646f63756d656e74732076616c696420666f722061206d6178696d756d206f6620736978206d
3593 Ciphertext = 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
3594
3595 # TLS1 PRF tests, from NIST test vectors
3596
3597 KDF=TLS1-PRF
3598 Ctrl.md = md:MD5-SHA1
3599 Ctrl.Secret = hexsecret:bded7fa5c1699c010be23dd06ada3a48349f21e5f86263d512c0c5cc379f0e780ec55d9844b2f1db02a96453513568d0
3600 Ctrl.label = seed:master secret
3601 Ctrl.client_random = hexseed:e5acaf549cd25c22d964c0d930fa4b5261d2507fad84c33715b7b9a864020693
3602 Ctrl.server_random = hexseed:135e4d557fdf3aa6406d82975d5c606a9734c9334b42136e96990fbd5358cdb2
3603 Output = 2f6962dfbc744c4b2138bb6b3d33054c5ecc14f24851d9896395a44ab3964efc2090c5bf51a0891209f46c1e1e998f62
3604
3605 KDF=TLS1-PRF
3606 Ctrl.md = md:MD5-SHA1
3607 Ctrl.Secret = hexsecret:2f6962dfbc744c4b2138bb6b3d33054c5ecc14f24851d9896395a44ab3964efc2090c5bf51a0891209f46c1e1e998f62
3608 Ctrl.label = seed:key expansion
3609 Ctrl.server_random = hexseed:67267e650eb32444119d222a368c191af3082888dc35afe8368e638c828874be
3610 Ctrl.client_random = hexseed:d58a7b1cd4fedaa232159df652ce188f9d997e061b9bf48e83b62990440931f6
3611 Output = 3088825988e77fce68d19f756e18e43eb7fe672433504feaf99b3c503d9091b164f166db301d70c9fc0870b4a94563907bee1a61fb786cb717576890bcc51cb9ead97e01d0a2fea99c953377b195205ff07b369589178796edc963fd80fdbe518a2fc1c35c18ae8d
3612
3613 KDF=TLS1-PRF
3614 Ctrl.md = md:SHA256
3615 Ctrl.Secret = hexsecret:f8938ecc9edebc5030c0c6a441e213cd24e6f770a50dda07876f8d55da062bcadb386b411fd4fe4313a604fce6c17fbc
3616 Ctrl.label = seed:master secret
3617 Ctrl.client_random = hexseed:36c129d01a3200894b9179faac589d9835d58775f9b5ea3587cb8fd0364cae8c
3618 Ctrl.server_random = hexseed:f6c9575ed7ddd73e1f7d16eca115415812a43c2b747daaaae043abfb50053fce
3619 Output = 202c88c00f84a17a20027079604787461176455539e705be730890602c289a5001e34eeb3a043e5d52a65e66125188bf
3620
3621 KDF=TLS1-PRF
3622 Ctrl.md = md:SHA256
3623 Ctrl.Secret = hexsecret:202c88c00f84a17a20027079604787461176455539e705be730890602c289a5001e34eeb3a043e5d52a65e66125188bf
3624 Ctrl.label = seed:key expansion
3625 Ctrl.server_random = hexseed:ae6c806f8ad4d80784549dff28a4b58fd837681a51d928c3e30ee5ff14f39868
3626 Ctrl.client_random = hexseed:62e1fd91f23f558a605f28478c58cf72637b89784d959df7e946d3f07bd1b616
3627 Output = d06139889fffac1e3a71865f504aa5d0d2a2e89506c6f2279b670c3e1b74f531016a2530c51a3a0f7e1d6590d0f0566b2f387f8d11fd4f731cdd572d2eae927f6f2f81410b25e6960be68985add6c38445ad9f8c64bf8068bf9a6679485d966f1ad6f68b43495b10a683755ea2b858d70ccac7ec8b053c6bd41ca299d4e51928
3628
3629 # Missing digest.
3630 KDF=TLS1-PRF
3631 Ctrl.Secret = hexsecret:01
3632 Ctrl.Seed = hexseed:02
3633 Output = 03
3634 Result = KDF_DERIVE_ERROR
3635
3636 # Missing secret.
3637 KDF=TLS1-PRF
3638 Ctrl.md = md:MD5-SHA1
3639 Ctrl.Seed = hexseed:02
3640 Output = 03
3641 Result = KDF_DERIVE_ERROR
3642
3643 # HKDF tests, from RFC5869 test vectors
3644
3645 KDF = HKDF
3646 Ctrl.md = md:SHA256
3647 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
3648 Ctrl.salt = hexsalt:000102030405060708090a0b0c
3649 Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
3650 Output = 3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865
3651
3652 KDF = HKDF
3653 Ctrl.mode = mode:EXTRACT_ONLY
3654 Ctrl.md = md:SHA256
3655 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
3656 Ctrl.salt = hexsalt:000102030405060708090a0b0c
3657 Output = 077709362c2e32df0ddc3f0dc47bba6390b6c73bb50f9c3122ec844ad7c2b3e5
3658
3659 KDF = HKDF
3660 Ctrl.mode = mode:EXPAND_ONLY
3661 Ctrl.md = md:SHA256
3662 Ctrl.IKM = hexkey:077709362c2e32df0ddc3f0dc47bba6390b6c73bb50f9c3122ec844ad7c2b3e5
3663 Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
3664 Output = 3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865
3665
3666 KDF = HKDF
3667 Ctrl.md = md:SHA256
3668 Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
3669 Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
3670 Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
3671 Output = b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87
3672
3673 KDF = HKDF
3674 Ctrl.mode = mode:EXTRACT_ONLY
3675 Ctrl.md = md:SHA256
3676 Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
3677 Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
3678 Output = 06a6b88c5853361a06104c9ceb35b45cef760014904671014a193f40c15fc244
3679
3680 KDF = HKDF
3681 Ctrl.mode = mode:EXPAND_ONLY
3682 Ctrl.md = md:SHA256
3683 Ctrl.IKM = hexkey:06a6b88c5853361a06104c9ceb35b45cef760014904671014a193f40c15fc244
3684 Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
3685 Output = b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87
3686
3687 KDF = HKDF
3688 Ctrl.md = md:SHA256
3689 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
3690 Ctrl.salt = salt:
3691 Ctrl.info = info:
3692 Output = 8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8
3693
3694 KDF = HKDF
3695 Ctrl.mode = mode:EXTRACT_ONLY
3696 Ctrl.md = md:SHA256
3697 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
3698 Ctrl.salt = salt:
3699 Ctrl.info = info:
3700 Output = 19ef24a32c717b167f33a91d6f648bdf96596776afdb6377ac434c1c293ccb04
3701
3702 KDF = HKDF
3703 Ctrl.mode = mode:EXPAND_ONLY
3704 Ctrl.md = md:SHA256
3705 Ctrl.IKM = hexkey:19ef24a32c717b167f33a91d6f648bdf96596776afdb6377ac434c1c293ccb04
3706 Ctrl.info = info:
3707 Output = 8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8
3708
3709 KDF = HKDF
3710 Ctrl.md = md:SHA1
3711 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
3712 Ctrl.salt = hexsalt:000102030405060708090a0b0c
3713 Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
3714 Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
3715
3716 KDF = HKDF
3717 Ctrl.mode = mode:EXTRACT_ONLY
3718 Ctrl.md = md:SHA1
3719 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
3720 Ctrl.salt = hexsalt:000102030405060708090a0b0c
3721 Output = 9b6c18c432a7bf8f0e71c8eb88f4b30baa2ba243
3722
3723 KDF = HKDF
3724 Ctrl.mode = mode:EXPAND_ONLY
3725 Ctrl.md = md:SHA1
3726 Ctrl.IKM = hexkey:9b6c18c432a7bf8f0e71c8eb88f4b30baa2ba243
3727 Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
3728 Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
3729
3730 KDF = HKDF
3731 Ctrl.md = md:SHA1
3732 Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
3733 Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
3734 Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
3735 Output = 0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4
3736
3737 KDF = HKDF
3738 Ctrl.mode = mode:EXTRACT_ONLY
3739 Ctrl.md = md:SHA1
3740 Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
3741 Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
3742 Output = 8adae09a2a307059478d309b26c4115a224cfaf6
3743
3744 KDF = HKDF
3745 Ctrl.mode = mode:EXPAND_ONLY
3746 Ctrl.md = md:SHA1
3747 Ctrl.IKM = hexkey:8adae09a2a307059478d309b26c4115a224cfaf6
3748 Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
3749 Output = 0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4
3750
3751 KDF = HKDF
3752 Ctrl.md = md:SHA1
3753 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
3754 Ctrl.salt = salt:
3755 Ctrl.info = info:
3756 Output = 0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918
3757
3758 KDF = HKDF
3759 Ctrl.mode = mode:EXTRACT_ONLY
3760 Ctrl.md = md:SHA1
3761 Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
3762 Ctrl.salt = salt:
3763 Output = da8c8a73c7fa77288ec6f5e7c297786aa0d32d01
3764
3765 KDF = HKDF
3766 Ctrl.mode = mode:EXPAND_ONLY
3767 Ctrl.md = md:SHA1
3768 Ctrl.IKM = hexkey:da8c8a73c7fa77288ec6f5e7c297786aa0d32d01
3769 Ctrl.info = info:
3770 Output = 0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918
3771
3772 KDF = HKDF
3773 Ctrl.md = md:SHA1
3774 Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
3775 Ctrl.salt = salt:
3776 Ctrl.info = info:
3777 Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
3778
3779 KDF = HKDF
3780 Ctrl.mode = mode:EXTRACT_ONLY
3781 Ctrl.md = md:SHA1
3782 Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
3783 Ctrl.salt = salt:
3784 Output = 2adccada18779e7c2077ad2eb19d3f3e731385dd
3785
3786 KDF = HKDF
3787 Ctrl.mode = mode:EXPAND_ONLY
3788 Ctrl.md = md:SHA1
3789 Ctrl.IKM = hexkey:2adccada18779e7c2077ad2eb19d3f3e731385dd
3790 Ctrl.info = info:
3791 Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
3792
3793 KDF = HKDF
3794 Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
3795 Ctrl.salt = salt:
3796 Ctrl.info = info:
3797 Output = 00
3798 Result = KDF_DERIVE_ERROR
3799
3800 KDF = HKDF
3801 Ctrl.md = md:SHA1
3802 Ctrl.salt = salt:
3803 Ctrl.info = info:
3804 Output = 00
3805 Result = KDF_DERIVE_ERROR
3806
3807 KDF = HKDF
3808 Ctrl.md = md:SHA1
3809 Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
3810 Ctrl.info = info:
3811 Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
3812
3813 KDF = HKDF
3814 Ctrl.md = md:SHA1
3815 Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
3816 Ctrl.salt = salt:
3817 Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
3818
3819 KDF = HKDF
3820 Ctrl.mode = mode:EXTRACT_AND_EXPAND
3821 Ctrl.md = md:SHA1
3822 Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
3823 Ctrl.salt = salt:
3824 Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
3825
3826 # ECDH tests
3827
3828 Derive=P-256
3829 PeerKey=P-256-Peer-PUBLIC
3830 SharedSecret=E3CC07DFBDDE76A1139811DB9FF5FAF9D17EF39944F1E77D1F6A208524BF7B1B
3831
3832 Derive=P-256-Peer
3833 PeerKey=P-256-PUBLIC
3834 SharedSecret=E3CC07DFBDDE76A1139811DB9FF5FAF9D17EF39944F1E77D1F6A208524BF7B1B
3835
3836 # X25519 test vectors from RFC7748 6.1
3837 PrivateKey=Alice-25519
3838 -----BEGIN PRIVATE KEY-----
3839 MC4CAQAwBQYDK2VuBCIEIHcHbQpzGKV9PBbBclGyZkXfTC+H68CZKrF3+6UduSwq
3840 -----END PRIVATE KEY-----
3841 PublicKey=Alice-25519-PUBLIC
3842 -----BEGIN PUBLIC KEY-----
3843 MCowBQYDK2VuAyEAhSDwCYkwp1R0i33ctD73Wg2/Og0mOBr066SpjqqbTmo=
3844 -----END PUBLIC KEY-----
3845 PrivateKey=Bob-25519
3846 -----BEGIN PRIVATE KEY-----
3847 MC4CAQAwBQYDK2VuBCIEIF2rCH5iSopLeeF/i4OADuZvO7EpJhi2/Rwviyf/iODr
3848 -----END PRIVATE KEY-----
3849 PublicKey=Bob-25519-PUBLIC
3850 -----BEGIN PUBLIC KEY-----
3851 MCowBQYDK2VuAyEA3p7bfXt9wbTTW2HC7OQ1Nz+DQ8hbeGdNrfx+FG+IK08=
3852 -----END PUBLIC KEY-----
3853
3854 Derive=Alice-25519
3855 PeerKey=Bob-25519-PUBLIC
3856 SharedSecret=4A5D9D5BA4CE2DE1728E3BF480350F25E07E21C947D19E3376F09B3C1E161742
3857
3858 Derive=Bob-25519
3859 PeerKey=Alice-25519-PUBLIC
3860 SharedSecret=4A5D9D5BA4CE2DE1728E3BF480350F25E07E21C947D19E3376F09B3C1E161742
3861
3862 # Illegal sign/verify operations with X25519 key
3863
3864 Sign=Alice-25519
3865 Result = KEYOP_INIT_ERROR
3866 Function = EVP_PKEY_sign_init
3867 Reason = operation not supported for this keytype
3868
3869 Verify=Alice-25519
3870 Result = KEYOP_INIT_ERROR
3871 Function = EVP_PKEY_verify_init
3872 Reason = operation not supported for this keytype