_ Git - BearSSL/blob - test/test_crypto.c

   1 /*
   2  * Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
   3  *
   4  * Permission is hereby granted, free of charge, to any person obtaining
   5  * a copy of this software and associated documentation files (the
   6  * "Software"), to deal in the Software without restriction, including
   7  * without limitation the rights to use, copy, modify, merge, publish,
   8  * distribute, sublicense, and/or sell copies of the Software, and to
   9  * permit persons to whom the Software is furnished to do so, subject to
  10  * the following conditions:
  11  *
  12  * The above copyright notice and this permission notice shall be
  13  * included in all copies or substantial portions of the Software.
  14  *
  15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  16  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  17  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  18  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  19  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  20  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  21  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  22  * SOFTWARE.
  23  */
  24
  25 #include <stdio.h>
  26 #include <stdlib.h>
  27 #include <string.h>
  28 #include "bearssl.h"
  29 #include "inner.h"
  30
  31 /*
  32  * Decode an hexadecimal string. Returned value is the number of decoded
  33  * bytes.
  34  */
  35 static size_t
  36 hextobin(unsigned char *dst, const char *src)
  37 {
  38         size_t num;
  39         unsigned acc;
  40         int z;
  41
  42         num = 0;
  43         z = 0;
  44         acc = 0;
  45         while (*src != 0) {
  46                 int c = *src ++;
  47                 if (c >= '0' && c <= '9') {
  48                         c -= '0';
  49                 } else if (c >= 'A' && c <= 'F') {
  50                         c -= ('A' - 10);
  51                 } else if (c >= 'a' && c <= 'f') {
  52                         c -= ('a' - 10);
  53                 } else {
  54                         continue;
  55                 }
  56                 if (z) {
  57                         *dst ++ = (acc << 4) + c;
  58                         num ++;
  59                 } else {
  60                         acc = c;
  61                 }
  62                 z = !z;
  63         }
  64         return num;
  65 }
  66
  67 static void
  68 check_equals(const char *banner, const void *v1, const void *v2, size_t len)
  69 {
  70         size_t u;
  71         const unsigned char *b;
  72
  73         if (memcmp(v1, v2, len) == 0) {
  74                 return;
  75         }
  76         fprintf(stderr, "\n%s failed\n", banner);
  77         fprintf(stderr, "v1: ");
  78         for (u = 0, b = v1; u < len; u ++) {
  79                 fprintf(stderr, "%02X", b[u]);
  80         }
  81         fprintf(stderr, "\nv2: ");
  82         for (u = 0, b = v2; u < len; u ++) {
  83                 fprintf(stderr, "%02X", b[u]);
  84         }
  85         fprintf(stderr, "\n");
  86         exit(EXIT_FAILURE);
  87 }
  88
  89 #define HASH_SIZE(cname)   br_ ## cname ## _SIZE
  90
  91 #define TEST_HASH(Name, cname) \
  92 static void \
  93 test_ ## cname ## _internal(char *data, char *refres) \
  94 { \
  95         br_ ## cname ## _context mc; \
  96         unsigned char res[HASH_SIZE(cname)], ref[HASH_SIZE(cname)]; \
  97         size_t u, n; \
  98  \
  99         hextobin(ref, refres); \
 100         n = strlen(data); \
 101         br_ ## cname ## _init(&mc); \
 102         br_ ## cname ## _update(&mc, data, n); \
 103         br_ ## cname ## _out(&mc, res); \
 104         check_equals("KAT " #Name " 1", res, ref, HASH_SIZE(cname)); \
 105         br_ ## cname ## _init(&mc); \
 106         for (u = 0; u < n; u ++) { \
 107                 br_ ## cname ## _update(&mc, data + u, 1); \
 108         } \
 109         br_ ## cname ## _out(&mc, res); \
 110         check_equals("KAT " #Name " 2", res, ref, HASH_SIZE(cname)); \
 111         for (u = 0; u < n; u ++) { \
 112                 br_ ## cname ## _context mc2; \
 113                 br_ ## cname ## _init(&mc); \
 114                 br_ ## cname ## _update(&mc, data, u); \
 115                 mc2 = mc; \
 116                 br_ ## cname ## _update(&mc, data + u, n - u); \
 117                 br_ ## cname ## _out(&mc, res); \
 118                 check_equals("KAT " #Name " 3", res, ref, HASH_SIZE(cname)); \
 119                 br_ ## cname ## _update(&mc2, data + u, n - u); \
 120                 br_ ## cname ## _out(&mc2, res); \
 121                 check_equals("KAT " #Name " 4", res, ref, HASH_SIZE(cname)); \
 122         } \
 123         memset(&mc, 0, sizeof mc); \
 124         memset(res, 0, sizeof res); \
 125         br_ ## cname ## _vtable.init(&mc.vtable); \
 126         mc.vtable->update(&mc.vtable, data, n); \
 127         mc.vtable->out(&mc.vtable, res); \
 128         check_equals("KAT " #Name " 5", res, ref, HASH_SIZE(cname)); \
 129         memset(res, 0, sizeof res); \
 130         mc.vtable->init(&mc.vtable); \
 131         mc.vtable->update(&mc.vtable, data, n); \
 132         mc.vtable->out(&mc.vtable, res); \
 133         check_equals("KAT " #Name " 6", res, ref, HASH_SIZE(cname)); \
 134 }
 135
 136 #define KAT_MILLION_A(Name, cname, refres)   do { \
 137                 br_ ## cname ## _context mc; \
 138                 unsigned char buf[1000]; \
 139                 unsigned char res[HASH_SIZE(cname)], ref[HASH_SIZE(cname)]; \
 140                 int i; \
 141  \
 142                 hextobin(ref, refres); \
 143                 memset(buf, 'a', sizeof buf); \
 144                 br_ ## cname ## _init(&mc); \
 145                 for (i = 0; i < 1000; i ++) { \
 146                         br_ ## cname ## _update(&mc, buf, sizeof buf); \
 147                 } \
 148                 br_ ## cname ## _out(&mc, res); \
 149                 check_equals("KAT " #Name " 5", res, ref, HASH_SIZE(cname)); \
 150         } while (0)
 151
 152 TEST_HASH(MD5, md5)
 153 TEST_HASH(SHA-1, sha1)
 154 TEST_HASH(SHA-224, sha224)
 155 TEST_HASH(SHA-256, sha256)
 156 TEST_HASH(SHA-384, sha384)
 157 TEST_HASH(SHA-512, sha512)
 158
 159 static void
 160 test_MD5(void)
 161 {
 162         printf("Test MD5: ");
 163         fflush(stdout);
 164         test_md5_internal("", "d41d8cd98f00b204e9800998ecf8427e");
 165         test_md5_internal("a", "0cc175b9c0f1b6a831c399e269772661");
 166         test_md5_internal("abc", "900150983cd24fb0d6963f7d28e17f72");
 167         test_md5_internal("message digest", "f96b697d7cb7938d525a2f31aaf161d0");
 168         test_md5_internal("abcdefghijklmnopqrstuvwxyz",
 169                 "c3fcd3d76192e4007dfb496cca67e13b");
 170         test_md5_internal("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstu"
 171                 "vwxyz0123456789", "d174ab98d277d9f5a5611c2c9f419d9f");
 172         test_md5_internal("1234567890123456789012345678901234567890123456789"
 173                 "0123456789012345678901234567890",
 174                 "57edf4a22be3c955ac49da2e2107b67a");
 175         KAT_MILLION_A(MD5, md5,
 176                 "7707d6ae4e027c70eea2a935c2296f21");
 177         printf("done.\n");
 178         fflush(stdout);
 179 }
 180
 181 static void
 182 test_SHA1(void)
 183 {
 184         printf("Test SHA-1: ");
 185         fflush(stdout);
 186         test_sha1_internal("abc", "a9993e364706816aba3e25717850c26c9cd0d89d");
 187         test_sha1_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
 188                 "nomnopnopq", "84983e441c3bd26ebaae4aa1f95129e5e54670f1");
 189
 190         KAT_MILLION_A(SHA-1, sha1,
 191                 "34aa973cd4c4daa4f61eeb2bdbad27316534016f");
 192         printf("done.\n");
 193         fflush(stdout);
 194 }
 195
 196 static void
 197 test_SHA224(void)
 198 {
 199         printf("Test SHA-224: ");
 200         fflush(stdout);
 201         test_sha224_internal("abc",
 202    "23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7");
 203         test_sha224_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
 204                 "nomnopnopq",
 205    "75388b16512776cc5dba5da1fd890150b0c6455cb4f58b1952522525");
 206
 207         KAT_MILLION_A(SHA-224, sha224,
 208                 "20794655980c91d8bbb4c1ea97618a4bf03f42581948b2ee4ee7ad67");
 209         printf("done.\n");
 210         fflush(stdout);
 211 }
 212
 213 static void
 214 test_SHA256(void)
 215 {
 216         printf("Test SHA-256: ");
 217         fflush(stdout);
 218         test_sha256_internal("abc",
 219    "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad");
 220         test_sha256_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
 221                 "nomnopnopq",
 222    "248d6a61d20638b8e5c026930c3e6039a33ce45964ff2167f6ecedd419db06c1");
 223
 224         KAT_MILLION_A(SHA-256, sha256,
 225    "cdc76e5c9914fb9281a1c7e284d73e67f1809a48a497200e046d39ccc7112cd0");
 226         printf("done.\n");
 227         fflush(stdout);
 228 }
 229
 230 static void
 231 test_SHA384(void)
 232 {
 233         printf("Test SHA-384: ");
 234         fflush(stdout);
 235         test_sha384_internal("abc",
 236                 "cb00753f45a35e8bb5a03d699ac65007272c32ab0eded163"
 237                 "1a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7");
 238         test_sha384_internal(
 239                 "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
 240                 "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
 241                 "09330c33f71147e83d192fc782cd1b4753111b173b3b05d2"
 242                 "2fa08086e3b0f712fcc7c71a557e2db966c3e9fa91746039");
 243
 244         KAT_MILLION_A(SHA-384, sha384,
 245                 "9d0e1809716474cb086e834e310a4a1ced149e9c00f24852"
 246                 "7972cec5704c2a5b07b8b3dc38ecc4ebae97ddd87f3d8985");
 247         printf("done.\n");
 248         fflush(stdout);
 249 }
 250
 251 static void
 252 test_SHA512(void)
 253 {
 254         printf("Test SHA-512: ");
 255         fflush(stdout);
 256         test_sha512_internal("abc",
 257    "ddaf35a193617abacc417349ae20413112e6fa4e89a97ea20a9eeee64b55d39a"
 258    "2192992a274fc1a836ba3c23a3feebbd454d4423643ce80e2a9ac94fa54ca49f");
 259         test_sha512_internal(
 260                 "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
 261                 "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
 262    "8e959b75dae313da8cf4f72814fc143f8f7779c6eb9f7fa17299aeadb6889018"
 263    "501d289e4900f7e4331b99dec4b5433ac7d329eeb6dd26545e96e55b874be909");
 264
 265         KAT_MILLION_A(SHA-512, sha512,
 266    "e718483d0ce769644e2e42c7bc15b4638e1f98b13b2044285632a803afa973eb"
 267    "de0ff244877ea60a4cb0432ce577c31beb009c5c2c49aa2e4eadb217ad8cc09b");
 268         printf("done.\n");
 269         fflush(stdout);
 270 }
 271
 272 static void
 273 test_MD5_SHA1(void)
 274 {
 275         unsigned char buf[500], out[36], outM[16], outS[20];
 276         unsigned char seed[1];
 277         br_hmac_drbg_context rc;
 278         br_md5_context mc;
 279         br_sha1_context sc;
 280         br_md5sha1_context cc;
 281         size_t u;
 282
 283         printf("Test MD5+SHA-1: ");
 284         fflush(stdout);
 285
 286         seed[0] = 0;
 287         br_hmac_drbg_init(&rc, &br_sha256_vtable, seed, sizeof seed);
 288         for (u = 0; u < sizeof buf; u ++) {
 289                 size_t v;
 290
 291                 br_hmac_drbg_generate(&rc, buf, u);
 292                 br_md5_init(&mc);
 293                 br_md5_update(&mc, buf, u);
 294                 br_md5_out(&mc, outM);
 295                 br_sha1_init(&sc);
 296                 br_sha1_update(&sc, buf, u);
 297                 br_sha1_out(&sc, outS);
 298                 br_md5sha1_init(&cc);
 299                 br_md5sha1_update(&cc, buf, u);
 300                 br_md5sha1_out(&cc, out);
 301                 check_equals("MD5+SHA-1 [1]", out, outM, 16);
 302                 check_equals("MD5+SHA-1 [2]", out + 16, outS, 20);
 303                 br_md5sha1_init(&cc);
 304                 for (v = 0; v < u; v ++) {
 305                         br_md5sha1_update(&cc, buf + v, 1);
 306                 }
 307                 br_md5sha1_out(&cc, out);
 308                 check_equals("MD5+SHA-1 [3]", out, outM, 16);
 309                 check_equals("MD5+SHA-1 [4]", out + 16, outS, 20);
 310         }
 311
 312         printf("done.\n");
 313         fflush(stdout);
 314 }
 315
 316 /*
 317  * Compute a hash function, on some data, by ID. Returned value is
 318  * hash output length.
 319  */
 320 static size_t
 321 do_hash(int id, const void *data, size_t len, void *out)
 322 {
 323         br_md5_context cmd5;
 324         br_sha1_context csha1;
 325         br_sha224_context csha224;
 326         br_sha256_context csha256;
 327         br_sha384_context csha384;
 328         br_sha512_context csha512;
 329
 330         switch (id) {
 331         case br_md5_ID:
 332                 br_md5_init(&cmd5);
 333                 br_md5_update(&cmd5, data, len);
 334                 br_md5_out(&cmd5, out);
 335                 return 16;
 336         case br_sha1_ID:
 337                 br_sha1_init(&csha1);
 338                 br_sha1_update(&csha1, data, len);
 339                 br_sha1_out(&csha1, out);
 340                 return 20;
 341         case br_sha224_ID:
 342                 br_sha224_init(&csha224);
 343                 br_sha224_update(&csha224, data, len);
 344                 br_sha224_out(&csha224, out);
 345                 return 28;
 346         case br_sha256_ID:
 347                 br_sha256_init(&csha256);
 348                 br_sha256_update(&csha256, data, len);
 349                 br_sha256_out(&csha256, out);
 350                 return 32;
 351         case br_sha384_ID:
 352                 br_sha384_init(&csha384);
 353                 br_sha384_update(&csha384, data, len);
 354                 br_sha384_out(&csha384, out);
 355                 return 48;
 356         case br_sha512_ID:
 357                 br_sha512_init(&csha512);
 358                 br_sha512_update(&csha512, data, len);
 359                 br_sha512_out(&csha512, out);
 360                 return 64;
 361         default:
 362                 fprintf(stderr, "Uknown hash function: %d\n", id);
 363                 exit(EXIT_FAILURE);
 364                 return 0;
 365         }
 366 }
 367
 368 /*
 369  * Tests for a multihash. Returned value should be 258 multiplied by the
 370  * number of hash functions implemented by the context.
 371  */
 372 static int
 373 test_multihash_inner(br_multihash_context *mc)
 374 {
 375         /*
 376          * Try hashing messages for all lengths from 0 to 257 bytes
 377          * (inclusive). Each attempt is done twice, with data input
 378          * either in one go, or byte by byte. In the byte by byte
 379          * test, intermediate result are obtained and checked.
 380          */
 381         size_t len;
 382         unsigned char buf[258];
 383         int i;
 384         int tcount;
 385
 386         tcount = 0;
 387         for (len = 0; len < sizeof buf; len ++) {
 388                 br_sha1_context sc;
 389                 unsigned char tmp[20];
 390
 391                 br_sha1_init(&sc);
 392                 br_sha1_update(&sc, buf, len);
 393                 br_sha1_out(&sc, tmp);
 394                 buf[len] = tmp[0];
 395         }
 396         for (len = 0; len <= 257; len ++) {
 397                 size_t u;
 398
 399                 br_multihash_init(mc);
 400                 br_multihash_update(mc, buf, len);
 401                 for (i = 1; i <= 6; i ++) {
 402                         unsigned char tmp[64], tmp2[64];
 403                         size_t olen, olen2;
 404
 405                         olen = br_multihash_out(mc, i, tmp);
 406                         if (olen == 0) {
 407                                 continue;
 408                         }
 409                         olen2 = do_hash(i, buf, len, tmp2);
 410                         if (olen != olen2) {
 411                                 fprintf(stderr,
 412                                         "Bad hash output length: %u / %u\n",
 413                                         (unsigned)olen, (unsigned)olen2);
 414                                 exit(EXIT_FAILURE);
 415                         }
 416                         check_equals("Hash output", tmp, tmp2, olen);
 417                         tcount ++;
 418                 }
 419
 420                 br_multihash_init(mc);
 421                 for (u = 0; u < len; u ++) {
 422                         br_multihash_update(mc, buf + u, 1);
 423                         for (i = 1; i <= 6; i ++) {
 424                                 unsigned char tmp[64], tmp2[64];
 425                                 size_t olen, olen2;
 426
 427                                 olen = br_multihash_out(mc, i, tmp);
 428                                 if (olen == 0) {
 429                                         continue;
 430                                 }
 431                                 olen2 = do_hash(i, buf, u + 1, tmp2);
 432                                 if (olen != olen2) {
 433                                         fprintf(stderr, "Bad hash output"
 434                                                 " length: %u / %u\n",
 435                                                 (unsigned)olen,
 436                                                 (unsigned)olen2);
 437                                         exit(EXIT_FAILURE);
 438                                 }
 439                                 check_equals("Hash output", tmp, tmp2, olen);
 440                         }
 441                 }
 442         }
 443         return tcount;
 444 }
 445
 446 static void
 447 test_multihash(void)
 448 {
 449         br_multihash_context mc;
 450
 451         printf("Test MultiHash: ");
 452         fflush(stdout);
 453
 454         br_multihash_zero(&mc);
 455         br_multihash_setimpl(&mc, br_md5_ID, &br_md5_vtable);
 456         if (test_multihash_inner(&mc) != 258) {
 457                 fprintf(stderr, "Failed test count\n");
 458         }
 459         printf(".");
 460         fflush(stdout);
 461
 462         br_multihash_zero(&mc);
 463         br_multihash_setimpl(&mc, br_sha1_ID, &br_sha1_vtable);
 464         if (test_multihash_inner(&mc) != 258) {
 465                 fprintf(stderr, "Failed test count\n");
 466         }
 467         printf(".");
 468         fflush(stdout);
 469
 470         br_multihash_zero(&mc);
 471         br_multihash_setimpl(&mc, br_sha224_ID, &br_sha224_vtable);
 472         if (test_multihash_inner(&mc) != 258) {
 473                 fprintf(stderr, "Failed test count\n");
 474         }
 475         printf(".");
 476         fflush(stdout);
 477
 478         br_multihash_zero(&mc);
 479         br_multihash_setimpl(&mc, br_sha256_ID, &br_sha256_vtable);
 480         if (test_multihash_inner(&mc) != 258) {
 481                 fprintf(stderr, "Failed test count\n");
 482         }
 483         printf(".");
 484         fflush(stdout);
 485
 486         br_multihash_zero(&mc);
 487         br_multihash_setimpl(&mc, br_sha384_ID, &br_sha384_vtable);
 488         if (test_multihash_inner(&mc) != 258) {
 489                 fprintf(stderr, "Failed test count\n");
 490         }
 491         printf(".");
 492         fflush(stdout);
 493
 494         br_multihash_zero(&mc);
 495         br_multihash_setimpl(&mc, br_sha512_ID, &br_sha512_vtable);
 496         if (test_multihash_inner(&mc) != 258) {
 497                 fprintf(stderr, "Failed test count\n");
 498         }
 499         printf(".");
 500         fflush(stdout);
 501
 502         br_multihash_zero(&mc);
 503         br_multihash_setimpl(&mc, br_md5_ID, &br_md5_vtable);
 504         br_multihash_setimpl(&mc, br_sha1_ID, &br_sha1_vtable);
 505         br_multihash_setimpl(&mc, br_sha224_ID, &br_sha224_vtable);
 506         br_multihash_setimpl(&mc, br_sha256_ID, &br_sha256_vtable);
 507         br_multihash_setimpl(&mc, br_sha384_ID, &br_sha384_vtable);
 508         br_multihash_setimpl(&mc, br_sha512_ID, &br_sha512_vtable);
 509         if (test_multihash_inner(&mc) != 258 * 6) {
 510                 fprintf(stderr, "Failed test count\n");
 511         }
 512         printf(".");
 513         fflush(stdout);
 514
 515         printf("done.\n");
 516         fflush(stdout);
 517 }
 518
 519 static void
 520 do_KAT_HMAC_bin_bin(const br_hash_class *digest_class,
 521         const void *key, size_t key_len,
 522         const void *data, size_t data_len, const char *href)
 523 {
 524         br_hmac_key_context kc;
 525         br_hmac_context ctx;
 526         unsigned char tmp[64], ref[64];
 527         size_t u, len;
 528
 529         len = hextobin(ref, href);
 530         br_hmac_key_init(&kc, digest_class, key, key_len);
 531         br_hmac_init(&ctx, &kc, 0);
 532         br_hmac_update(&ctx, data, data_len);
 533         br_hmac_out(&ctx, tmp);
 534         check_equals("KAT HMAC 1", tmp, ref, len);
 535
 536         br_hmac_init(&ctx, &kc, 0);
 537         for (u = 0; u < data_len; u ++) {
 538                 br_hmac_update(&ctx, (const unsigned char *)data + u, 1);
 539         }
 540         br_hmac_out(&ctx, tmp);
 541         check_equals("KAT HMAC 2", tmp, ref, len);
 542
 543         for (u = 0; u < data_len; u ++) {
 544                 br_hmac_init(&ctx, &kc, 0);
 545                 br_hmac_update(&ctx, data, u);
 546                 br_hmac_out(&ctx, tmp);
 547                 br_hmac_update(&ctx,
 548                         (const unsigned char *)data + u, data_len - u);
 549                 br_hmac_out(&ctx, tmp);
 550                 check_equals("KAT HMAC 3", tmp, ref, len);
 551         }
 552 }
 553
 554 static void
 555 do_KAT_HMAC_str_str(const br_hash_class *digest_class, const char *key,
 556         const char *data, const char *href)
 557 {
 558         do_KAT_HMAC_bin_bin(digest_class, key, strlen(key),
 559                 data, strlen(data), href);
 560 }
 561
 562 static void
 563 do_KAT_HMAC_hex_hex(const br_hash_class *digest_class, const char *skey,
 564         const char *sdata, const char *href)
 565 {
 566         unsigned char key[1024];
 567         unsigned char data[1024];
 568
 569         do_KAT_HMAC_bin_bin(digest_class, key, hextobin(key, skey),
 570                 data, hextobin(data, sdata), href);
 571 }
 572
 573 static void
 574 do_KAT_HMAC_hex_str(const br_hash_class *digest_class,
 575         const char *skey, const char *data, const char *href)
 576 {
 577         unsigned char key[1024];
 578
 579         do_KAT_HMAC_bin_bin(digest_class, key, hextobin(key, skey),
 580                 data, strlen(data), href);
 581 }
 582
 583 static void
 584 test_HMAC_CT(const br_hash_class *digest_class,
 585         const void *key, size_t key_len, const void *data)
 586 {
 587         br_hmac_key_context kc;
 588         br_hmac_context hc1, hc2;
 589         unsigned char buf1[64], buf2[64];
 590         size_t u, v;
 591
 592         br_hmac_key_init(&kc, digest_class, key, key_len);
 593
 594         for (u = 0; u < 2; u ++) {
 595                 for (v = 0; v < 130; v ++) {
 596                         size_t min_len, max_len;
 597                         size_t w;
 598
 599                         min_len = v;
 600                         max_len = v + 256;
 601                         for (w = min_len; w <= max_len; w ++) {
 602                                 char tmp[30];
 603                                 size_t hlen1, hlen2;
 604
 605                                 br_hmac_init(&hc1, &kc, 0);
 606                                 br_hmac_update(&hc1, data, u + w);
 607                                 hlen1 = br_hmac_out(&hc1, buf1);
 608                                 br_hmac_init(&hc2, &kc, 0);
 609                                 br_hmac_update(&hc2, data, u);
 610                                 hlen2 = br_hmac_outCT(&hc2,
 611                                         (const unsigned char *)data + u, w,
 612                                         min_len, max_len, buf2);
 613                                 if (hlen1 != hlen2) {
 614                                         fprintf(stderr, "HMAC length mismatch:"
 615                                                 " %u / %u\n", (unsigned)hlen1,
 616                                                 (unsigned)hlen2);
 617                                         exit(EXIT_FAILURE);
 618                                 }
 619                                 sprintf(tmp, "HMAC CT %u,%u,%u",
 620                                         (unsigned)u, (unsigned)v, (unsigned)w);
 621                                 check_equals(tmp, buf1, buf2, hlen1);
 622                         }
 623                 }
 624                 printf(".");
 625                 fflush(stdout);
 626         }
 627         printf(" ");
 628         fflush(stdout);
 629 }
 630
 631 static void
 632 test_HMAC(void)
 633 {
 634         unsigned char data[1000];
 635         unsigned x;
 636         size_t u;
 637         const char key[] = "test HMAC key";
 638
 639         printf("Test HMAC: ");
 640         fflush(stdout);
 641         do_KAT_HMAC_hex_str(&br_md5_vtable,
 642                 "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
 643                 "Hi There",
 644                 "9294727a3638bb1c13f48ef8158bfc9d");
 645         do_KAT_HMAC_str_str(&br_md5_vtable,
 646                 "Jefe",
 647                 "what do ya want for nothing?",
 648                 "750c783e6ab0b503eaa86e310a5db738");
 649         do_KAT_HMAC_hex_hex(&br_md5_vtable,
 650                 "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
 651                 "DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD",
 652                 "56be34521d144c88dbb8c733f0e8b3f6");
 653         do_KAT_HMAC_hex_hex(&br_md5_vtable,
 654                 "0102030405060708090a0b0c0d0e0f10111213141516171819",
 655                 "CDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCD",
 656                 "697eaf0aca3a3aea3a75164746ffaa79");
 657         do_KAT_HMAC_hex_str(&br_md5_vtable,
 658                 "0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
 659                 "Test With Truncation",
 660                 "56461ef2342edc00f9bab995690efd4c");
 661         do_KAT_HMAC_hex_str(&br_md5_vtable,
 662                 "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
 663                 "Test Using Larger Than Block-Size Key - Hash Key First",
 664                 "6b1ab7fe4bd7bf8f0b62e6ce61b9d0cd");
 665         do_KAT_HMAC_hex_str(&br_md5_vtable,
 666                 "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
 667                 "Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data",
 668                 "6f630fad67cda0ee1fb1f562db3aa53e");
 669
 670         do_KAT_HMAC_hex_str(&br_sha1_vtable,
 671                 "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
 672                 "Hi There",
 673                 "b617318655057264e28bc0b6fb378c8ef146be00");
 674         do_KAT_HMAC_str_str(&br_sha1_vtable,
 675                 "Jefe",
 676                 "what do ya want for nothing?",
 677                 "effcdf6ae5eb2fa2d27416d5f184df9c259a7c79");
 678         do_KAT_HMAC_hex_hex(&br_sha1_vtable,
 679                 "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
 680                 "DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD",
 681                 "125d7342b9ac11cd91a39af48aa17b4f63f175d3");
 682         do_KAT_HMAC_hex_hex(&br_sha1_vtable,
 683                 "0102030405060708090a0b0c0d0e0f10111213141516171819",
 684                 "CDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCD",
 685                 "4c9007f4026250c6bc8414f9bf50c86c2d7235da");
 686         do_KAT_HMAC_hex_str(&br_sha1_vtable,
 687                 "0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
 688                 "Test With Truncation",
 689                 "4c1a03424b55e07fe7f27be1d58bb9324a9a5a04");
 690         do_KAT_HMAC_hex_str(&br_sha1_vtable,
 691                 "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
 692                 "Test Using Larger Than Block-Size Key - Hash Key First",
 693                 "aa4ae5e15272d00e95705637ce8a3b55ed402112");
 694         do_KAT_HMAC_hex_str(&br_sha1_vtable,
 695                 "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
 696                 "Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data",
 697                 "e8e99d0f45237d786d6bbaa7965c7808bbff1a91");
 698
 699         /* From RFC 4231 */
 700
 701         do_KAT_HMAC_hex_hex(&br_sha224_vtable,
 702                 "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
 703                 "4869205468657265",
 704                 "896fb1128abbdf196832107cd49df33f"
 705                 "47b4b1169912ba4f53684b22");
 706
 707         do_KAT_HMAC_hex_hex(&br_sha256_vtable,
 708                 "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
 709                 "4869205468657265",
 710                 "b0344c61d8db38535ca8afceaf0bf12b"
 711                 "881dc200c9833da726e9376c2e32cff7");
 712
 713         do_KAT_HMAC_hex_hex(&br_sha384_vtable,
 714                 "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
 715                 "4869205468657265",
 716                 "afd03944d84895626b0825f4ab46907f"
 717                 "15f9dadbe4101ec682aa034c7cebc59c"
 718                 "faea9ea9076ede7f4af152e8b2fa9cb6");
 719
 720         do_KAT_HMAC_hex_hex(&br_sha512_vtable,
 721                 "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
 722                 "4869205468657265",
 723                 "87aa7cdea5ef619d4ff0b4241a1d6cb0"
 724                 "2379f4e2ce4ec2787ad0b30545e17cde"
 725                 "daa833b7d6b8a702038b274eaea3f4e4"
 726                 "be9d914eeb61f1702e696c203a126854");
 727
 728         do_KAT_HMAC_hex_hex(&br_sha224_vtable,
 729                 "4a656665",
 730                 "7768617420646f2079612077616e7420"
 731                 "666f72206e6f7468696e673f",
 732                 "a30e01098bc6dbbf45690f3a7e9e6d0f"
 733                 "8bbea2a39e6148008fd05e44");
 734
 735         do_KAT_HMAC_hex_hex(&br_sha256_vtable,
 736                 "4a656665",
 737                 "7768617420646f2079612077616e7420"
 738                 "666f72206e6f7468696e673f",
 739                 "5bdcc146bf60754e6a042426089575c7"
 740                 "5a003f089d2739839dec58b964ec3843");
 741
 742         do_KAT_HMAC_hex_hex(&br_sha384_vtable,
 743                 "4a656665",
 744                 "7768617420646f2079612077616e7420"
 745                 "666f72206e6f7468696e673f",
 746                 "af45d2e376484031617f78d2b58a6b1b"
 747                 "9c7ef464f5a01b47e42ec3736322445e"
 748                 "8e2240ca5e69e2c78b3239ecfab21649");
 749
 750         do_KAT_HMAC_hex_hex(&br_sha512_vtable,
 751                 "4a656665",
 752                 "7768617420646f2079612077616e7420"
 753                 "666f72206e6f7468696e673f",
 754                 "164b7a7bfcf819e2e395fbe73b56e0a3"
 755                 "87bd64222e831fd610270cd7ea250554"
 756                 "9758bf75c05a994a6d034f65f8f0e6fd"
 757                 "caeab1a34d4a6b4b636e070a38bce737");
 758
 759         do_KAT_HMAC_hex_hex(&br_sha224_vtable,
 760                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 761                 "aaaaaaaa",
 762                 "dddddddddddddddddddddddddddddddd"
 763                 "dddddddddddddddddddddddddddddddd"
 764                 "dddddddddddddddddddddddddddddddd"
 765                 "dddd",
 766                 "7fb3cb3588c6c1f6ffa9694d7d6ad264"
 767                 "9365b0c1f65d69d1ec8333ea");
 768
 769         do_KAT_HMAC_hex_hex(&br_sha256_vtable,
 770                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 771                 "aaaaaaaa",
 772                 "dddddddddddddddddddddddddddddddd"
 773                 "dddddddddddddddddddddddddddddddd"
 774                 "dddddddddddddddddddddddddddddddd"
 775                 "dddd",
 776                 "773ea91e36800e46854db8ebd09181a7"
 777                 "2959098b3ef8c122d9635514ced565fe");
 778
 779         do_KAT_HMAC_hex_hex(&br_sha384_vtable,
 780                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 781                 "aaaaaaaa",
 782                 "dddddddddddddddddddddddddddddddd"
 783                 "dddddddddddddddddddddddddddddddd"
 784                 "dddddddddddddddddddddddddddddddd"
 785                 "dddd",
 786                 "88062608d3e6ad8a0aa2ace014c8a86f"
 787                 "0aa635d947ac9febe83ef4e55966144b"
 788                 "2a5ab39dc13814b94e3ab6e101a34f27");
 789
 790         do_KAT_HMAC_hex_hex(&br_sha512_vtable,
 791                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 792                 "aaaaaaaa",
 793                 "dddddddddddddddddddddddddddddddd"
 794                 "dddddddddddddddddddddddddddddddd"
 795                 "dddddddddddddddddddddddddddddddd"
 796                 "dddd",
 797                 "fa73b0089d56a284efb0f0756c890be9"
 798                 "b1b5dbdd8ee81a3655f83e33b2279d39"
 799                 "bf3e848279a722c806b485a47e67c807"
 800                 "b946a337bee8942674278859e13292fb");
 801
 802         do_KAT_HMAC_hex_hex(&br_sha224_vtable,
 803                 "0102030405060708090a0b0c0d0e0f10"
 804                 "111213141516171819",
 805                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 806                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 807                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 808                 "cdcd",
 809                 "6c11506874013cac6a2abc1bb382627c"
 810                 "ec6a90d86efc012de7afec5a");
 811
 812         do_KAT_HMAC_hex_hex(&br_sha256_vtable,
 813                 "0102030405060708090a0b0c0d0e0f10"
 814                 "111213141516171819",
 815                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 816                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 817                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 818                 "cdcd",
 819                 "82558a389a443c0ea4cc819899f2083a"
 820                 "85f0faa3e578f8077a2e3ff46729665b");
 821
 822         do_KAT_HMAC_hex_hex(&br_sha384_vtable,
 823                 "0102030405060708090a0b0c0d0e0f10"
 824                 "111213141516171819",
 825                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 826                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 827                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 828                 "cdcd",
 829                 "3e8a69b7783c25851933ab6290af6ca7"
 830                 "7a9981480850009cc5577c6e1f573b4e"
 831                 "6801dd23c4a7d679ccf8a386c674cffb");
 832
 833         do_KAT_HMAC_hex_hex(&br_sha512_vtable,
 834                 "0102030405060708090a0b0c0d0e0f10"
 835                 "111213141516171819",
 836                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 837                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 838                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
 839                 "cdcd",
 840                 "b0ba465637458c6990e5a8c5f61d4af7"
 841                 "e576d97ff94b872de76f8050361ee3db"
 842                 "a91ca5c11aa25eb4d679275cc5788063"
 843                 "a5f19741120c4f2de2adebeb10a298dd");
 844
 845         do_KAT_HMAC_hex_hex(&br_sha224_vtable,
 846                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 847                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 848                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 849                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 850                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 851                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 852                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 853                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 854                 "aaaaaa",
 855                 "54657374205573696e67204c61726765"
 856                 "72205468616e20426c6f636b2d53697a"
 857                 "65204b6579202d2048617368204b6579"
 858                 "204669727374",
 859                 "95e9a0db962095adaebe9b2d6f0dbce2"
 860                 "d499f112f2d2b7273fa6870e");
 861
 862         do_KAT_HMAC_hex_hex(&br_sha256_vtable,
 863                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 864                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 865                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 866                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 867                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 868                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 869                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 870                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 871                 "aaaaaa",
 872                 "54657374205573696e67204c61726765"
 873                 "72205468616e20426c6f636b2d53697a"
 874                 "65204b6579202d2048617368204b6579"
 875                 "204669727374",
 876                 "60e431591ee0b67f0d8a26aacbf5b77f"
 877                 "8e0bc6213728c5140546040f0ee37f54");
 878
 879         do_KAT_HMAC_hex_hex(&br_sha384_vtable,
 880                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 881                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 882                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 883                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 884                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 885                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 886                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 887                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 888                 "aaaaaa",
 889                 "54657374205573696e67204c61726765"
 890                 "72205468616e20426c6f636b2d53697a"
 891                 "65204b6579202d2048617368204b6579"
 892                 "204669727374",
 893                 "4ece084485813e9088d2c63a041bc5b4"
 894                 "4f9ef1012a2b588f3cd11f05033ac4c6"
 895                 "0c2ef6ab4030fe8296248df163f44952");
 896
 897         do_KAT_HMAC_hex_hex(&br_sha512_vtable,
 898                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 899                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 900                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 901                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 902                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 903                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 904                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 905                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 906                 "aaaaaa",
 907                 "54657374205573696e67204c61726765"
 908                 "72205468616e20426c6f636b2d53697a"
 909                 "65204b6579202d2048617368204b6579"
 910                 "204669727374",
 911                 "80b24263c7c1a3ebb71493c1dd7be8b4"
 912                 "9b46d1f41b4aeec1121b013783f8f352"
 913                 "6b56d037e05f2598bd0fd2215d6a1e52"
 914                 "95e64f73f63f0aec8b915a985d786598");
 915
 916         do_KAT_HMAC_hex_hex(&br_sha224_vtable,
 917                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 918                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 919                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 920                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 921                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 922                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 923                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 924                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 925                 "aaaaaa",
 926                 "54686973206973206120746573742075"
 927                 "73696e672061206c6172676572207468"
 928                 "616e20626c6f636b2d73697a65206b65"
 929                 "7920616e642061206c61726765722074"
 930                 "68616e20626c6f636b2d73697a652064"
 931                 "6174612e20546865206b6579206e6565"
 932                 "647320746f2062652068617368656420"
 933                 "6265666f7265206265696e6720757365"
 934                 "642062792074686520484d414320616c"
 935                 "676f726974686d2e",
 936                 "3a854166ac5d9f023f54d517d0b39dbd"
 937                 "946770db9c2b95c9f6f565d1");
 938
 939         do_KAT_HMAC_hex_hex(&br_sha256_vtable,
 940                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 941                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 942                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 943                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 944                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 945                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 946                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 947                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 948                 "aaaaaa",
 949                 "54686973206973206120746573742075"
 950                 "73696e672061206c6172676572207468"
 951                 "616e20626c6f636b2d73697a65206b65"
 952                 "7920616e642061206c61726765722074"
 953                 "68616e20626c6f636b2d73697a652064"
 954                 "6174612e20546865206b6579206e6565"
 955                 "647320746f2062652068617368656420"
 956                 "6265666f7265206265696e6720757365"
 957                 "642062792074686520484d414320616c"
 958                 "676f726974686d2e",
 959                 "9b09ffa71b942fcb27635fbcd5b0e944"
 960                 "bfdc63644f0713938a7f51535c3a35e2");
 961
 962         do_KAT_HMAC_hex_hex(&br_sha384_vtable,
 963                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 964                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 965                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 966                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 967                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 968                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 969                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 970                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 971                 "aaaaaa",
 972                 "54686973206973206120746573742075"
 973                 "73696e672061206c6172676572207468"
 974                 "616e20626c6f636b2d73697a65206b65"
 975                 "7920616e642061206c61726765722074"
 976                 "68616e20626c6f636b2d73697a652064"
 977                 "6174612e20546865206b6579206e6565"
 978                 "647320746f2062652068617368656420"
 979                 "6265666f7265206265696e6720757365"
 980                 "642062792074686520484d414320616c"
 981                 "676f726974686d2e",
 982                 "6617178e941f020d351e2f254e8fd32c"
 983                 "602420feb0b8fb9adccebb82461e99c5"
 984                 "a678cc31e799176d3860e6110c46523e");
 985
 986         do_KAT_HMAC_hex_hex(&br_sha512_vtable,
 987                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 988                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 989                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 990                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 991                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 992                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 993                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 994                 "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 995                 "aaaaaa",
 996                 "54686973206973206120746573742075"
 997                 "73696e672061206c6172676572207468"
 998                 "616e20626c6f636b2d73697a65206b65"
 999                 "7920616e642061206c61726765722074"
1000                 "68616e20626c6f636b2d73697a652064"
1001                 "6174612e20546865206b6579206e6565"
1002                 "647320746f2062652068617368656420"
1003                 "6265666f7265206265696e6720757365"
1004                 "642062792074686520484d414320616c"
1005                 "676f726974686d2e",
1006                 "e37b6a775dc87dbaa4dfa9f96e5e3ffd"
1007                 "debd71f8867289865df5a32d20cdc944"
1008                 "b6022cac3c4982b10d5eeb55c3e4de15"
1009                 "134676fb6de0446065c97440fa8c6a58");
1010
1011         for (x = 1, u = 0; u < sizeof data; u ++) {
1012                 data[u] = x;
1013                 x = (x * 45) % 257;
1014         }
1015         printf("(MD5) ");
1016         test_HMAC_CT(&br_md5_vtable, key, sizeof key, data);
1017         printf("(SHA-1) ");
1018         test_HMAC_CT(&br_sha1_vtable, key, sizeof key, data);
1019         printf("(SHA-224) ");
1020         test_HMAC_CT(&br_sha224_vtable, key, sizeof key, data);
1021         printf("(SHA-256) ");
1022         test_HMAC_CT(&br_sha256_vtable, key, sizeof key, data);
1023         printf("(SHA-384) ");
1024         test_HMAC_CT(&br_sha384_vtable, key, sizeof key, data);
1025         printf("(SHA-512) ");
1026         test_HMAC_CT(&br_sha512_vtable, key, sizeof key, data);
1027
1028         printf("done.\n");
1029         fflush(stdout);
1030 }
1031
1032 static void
1033 test_HMAC_DRBG(void)
1034 {
1035         br_hmac_drbg_context ctx;
1036         unsigned char seed[42], tmp[30];
1037         unsigned char ref1[30], ref2[30], ref3[30];
1038         size_t seed_len;
1039
1040         printf("Test HMAC_DRBG: ");
1041         fflush(stdout);
1042
1043         seed_len = hextobin(seed,
1044                 "009A4D6792295A7F730FC3F2B49CBC0F62E862272F"
1045                 "01795EDF0D54DB760F156D0DAC04C0322B3A204224");
1046         hextobin(ref1,
1047                 "9305A46DE7FF8EB107194DEBD3FD48AA"
1048                 "20D5E7656CBE0EA69D2A8D4E7C67");
1049         hextobin(ref2,
1050                 "C70C78608A3B5BE9289BE90EF6E81A9E"
1051                 "2C1516D5751D2F75F50033E45F73");
1052         hextobin(ref3,
1053                 "475E80E992140567FCC3A50DAB90FE84"
1054                 "BCD7BB03638E9C4656A06F37F650");
1055         br_hmac_drbg_init(&ctx, &br_sha256_vtable, seed, seed_len);
1056         br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1057         check_equals("KAT HMAC_DRBG 1", tmp, ref1, sizeof tmp);
1058         br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1059         check_equals("KAT HMAC_DRBG 2", tmp, ref2, sizeof tmp);
1060         br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1061         check_equals("KAT HMAC_DRBG 3", tmp, ref3, sizeof tmp);
1062
1063         memset(&ctx, 0, sizeof ctx);
1064         br_hmac_drbg_vtable.init(&ctx.vtable,
1065                 &br_sha256_vtable, seed, seed_len);
1066         ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1067         check_equals("KAT HMAC_DRBG 4", tmp, ref1, sizeof tmp);
1068         ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1069         check_equals("KAT HMAC_DRBG 5", tmp, ref2, sizeof tmp);
1070         ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1071         check_equals("KAT HMAC_DRBG 6", tmp, ref3, sizeof tmp);
1072
1073         printf("done.\n");
1074         fflush(stdout);
1075 }
1076
1077 static void
1078 test_AESCTR_DRBG(void)
1079 {
1080         br_aesctr_drbg_context ctx;
1081         const br_block_ctr_class *ictr;
1082         unsigned char tmp1[64], tmp2[64];
1083
1084         printf("Test AESCTR_DRBG: ");
1085         fflush(stdout);
1086
1087         ictr = br_aes_x86ni_ctr_get_vtable();
1088         if (ictr == NULL) {
1089                 ictr = br_aes_pwr8_ctr_get_vtable();
1090                 if (ictr == NULL) {
1091 #if BR_64
1092                         ictr = &br_aes_ct64_ctr_vtable;
1093 #else
1094                         ictr = &br_aes_ct_ctr_vtable;
1095 #endif
1096                 }
1097         }
1098         br_aesctr_drbg_init(&ctx, ictr, NULL, 0);
1099         ctx.vtable->generate(&ctx.vtable, tmp1, sizeof tmp1);
1100         ctx.vtable->update(&ctx.vtable, "new seed", 8);
1101         ctx.vtable->generate(&ctx.vtable, tmp2, sizeof tmp2);
1102
1103         if (memcmp(tmp1, tmp2, sizeof tmp1) == 0) {
1104                 fprintf(stderr, "AESCTR_DRBG failure\n");
1105                 exit(EXIT_FAILURE);
1106         }
1107
1108         printf("done.\n");
1109         fflush(stdout);
1110 }
1111
1112 static void
1113 do_KAT_PRF(br_tls_prf_impl prf,
1114         const char *ssecret, const char *label, const char *sseed,
1115         const char *sref)
1116 {
1117         unsigned char secret[100], seed[100], ref[500], out[500];
1118         size_t secret_len, seed_len, ref_len;
1119         br_tls_prf_seed_chunk chunks[2];
1120
1121         secret_len = hextobin(secret, ssecret);
1122         seed_len = hextobin(seed, sseed);
1123         ref_len = hextobin(ref, sref);
1124
1125         chunks[0].data = seed;
1126         chunks[0].len = seed_len;
1127         prf(out, ref_len, secret, secret_len, label, 1, chunks);
1128         check_equals("TLS PRF KAT 1", out, ref, ref_len);
1129
1130         chunks[0].data = seed;
1131         chunks[0].len = seed_len;
1132         chunks[1].data = NULL;
1133         chunks[1].len = 0;
1134         prf(out, ref_len, secret, secret_len, label, 2, chunks);
1135         check_equals("TLS PRF KAT 2", out, ref, ref_len);
1136
1137         chunks[0].data = NULL;
1138         chunks[0].len = 0;
1139         chunks[1].data = seed;
1140         chunks[1].len = seed_len;
1141         prf(out, ref_len, secret, secret_len, label, 2, chunks);
1142         check_equals("TLS PRF KAT 3", out, ref, ref_len);
1143
1144         chunks[0].data = seed;
1145         chunks[0].len = seed_len >> 1;
1146         chunks[1].data = seed + chunks[0].len;
1147         chunks[1].len = seed_len - chunks[0].len;
1148         prf(out, ref_len, secret, secret_len, label, 2, chunks);
1149         check_equals("TLS PRF KAT 4", out, ref, ref_len);
1150 }
1151
1152 static void
1153 test_PRF(void)
1154 {
1155         printf("Test TLS PRF: ");
1156         fflush(stdout);
1157
1158         /*
1159          * Test vector taken from an email that was on:
1160          * http://www.imc.org/ietf-tls/mail-archive/msg01589.html
1161          * but no longer exists there; a version archived in 2008
1162          * can be found on http://www.archive.org/
1163          */
1164         do_KAT_PRF(&br_tls10_prf,
1165                 "abababababababababababababababababababababababababababababababababababababababababababababababab",
1166                 "PRF Testvector",
1167                 "cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
1168                 "d3d4d1e349b5d515044666d51de32bab258cb521b6b053463e354832fd976754443bcf9a296519bc289abcbc1187e4ebd31e602353776c408aafb74cbc85eff69255f9788faa184cbb957a9819d84a5d7eb006eb459d3ae8de9810454b8b2d8f1afbc655a8c9a013");
1169
1170         /*
1171          * Test vectors are taken from:
1172          * https://www.ietf.org/mail-archive/web/tls/current/msg03416.html
1173          */
1174         do_KAT_PRF(&br_tls12_sha256_prf,
1175                 "9bbe436ba940f017b17652849a71db35",
1176                 "test label",
1177                 "a0ba9f936cda311827a6f796ffd5198c",
1178                 "e3f229ba727be17b8d122620557cd453c2aab21d07c3d495329b52d4e61edb5a6b301791e90d35c9c9a46b4e14baf9af0fa022f7077def17abfd3797c0564bab4fbc91666e9def9b97fce34f796789baa48082d122ee42c5a72e5a5110fff70187347b66");
1179         do_KAT_PRF(&br_tls12_sha384_prf,
1180                 "b80b733d6ceefcdc71566ea48e5567df",
1181                 "test label",
1182                 "cd665cf6a8447dd6ff8b27555edb7465",
1183                 "7b0c18e9ced410ed1804f2cfa34a336a1c14dffb4900bb5fd7942107e81c83cde9ca0faa60be9fe34f82b1233c9146a0e534cb400fed2700884f9dc236f80edd8bfa961144c9e8d792eca722a7b32fc3d416d473ebc2c5fd4abfdad05d9184259b5bf8cd4d90fa0d31e2dec479e4f1a26066f2eea9a69236a3e52655c9e9aee691c8f3a26854308d5eaa3be85e0990703d73e56f");
1184
1185         printf("done.\n");
1186         fflush(stdout);
1187 }
1188
1189 /*
1190  * AES known-answer tests. Order: key, plaintext, ciphertext.
1191  */
1192 static const char *const KAT_AES[] = {
1193         /*
1194          * From FIPS-197.
1195          */
1196         "000102030405060708090a0b0c0d0e0f",
1197         "00112233445566778899aabbccddeeff",
1198         "69c4e0d86a7b0430d8cdb78070b4c55a",
1199
1200         "000102030405060708090a0b0c0d0e0f1011121314151617",
1201         "00112233445566778899aabbccddeeff",
1202         "dda97ca4864cdfe06eaf70a0ec0d7191",
1203
1204         "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
1205         "00112233445566778899aabbccddeeff",
1206         "8ea2b7ca516745bfeafc49904b496089",
1207
1208         /*
1209          * From NIST validation suite (ECBVarTxt128.rsp).
1210          */
1211         "00000000000000000000000000000000",
1212         "80000000000000000000000000000000",
1213         "3ad78e726c1ec02b7ebfe92b23d9ec34",
1214
1215         "00000000000000000000000000000000",
1216         "c0000000000000000000000000000000",
1217         "aae5939c8efdf2f04e60b9fe7117b2c2",
1218
1219         "00000000000000000000000000000000",
1220         "e0000000000000000000000000000000",
1221         "f031d4d74f5dcbf39daaf8ca3af6e527",
1222
1223         "00000000000000000000000000000000",
1224         "f0000000000000000000000000000000",
1225         "96d9fd5cc4f07441727df0f33e401a36",
1226
1227         "00000000000000000000000000000000",
1228         "f8000000000000000000000000000000",
1229         "30ccdb044646d7e1f3ccea3dca08b8c0",
1230
1231         "00000000000000000000000000000000",
1232         "fc000000000000000000000000000000",
1233         "16ae4ce5042a67ee8e177b7c587ecc82",
1234
1235         "00000000000000000000000000000000",
1236         "fe000000000000000000000000000000",
1237         "b6da0bb11a23855d9c5cb1b4c6412e0a",
1238
1239         "00000000000000000000000000000000",
1240         "ff000000000000000000000000000000",
1241         "db4f1aa530967d6732ce4715eb0ee24b",
1242
1243         "00000000000000000000000000000000",
1244         "ff800000000000000000000000000000",
1245         "a81738252621dd180a34f3455b4baa2f",
1246
1247         "00000000000000000000000000000000",
1248         "ffc00000000000000000000000000000",
1249         "77e2b508db7fd89234caf7939ee5621a",
1250
1251         "00000000000000000000000000000000",
1252         "ffe00000000000000000000000000000",
1253         "b8499c251f8442ee13f0933b688fcd19",
1254
1255         "00000000000000000000000000000000",
1256         "fff00000000000000000000000000000",
1257         "965135f8a81f25c9d630b17502f68e53",
1258
1259         "00000000000000000000000000000000",
1260         "fff80000000000000000000000000000",
1261         "8b87145a01ad1c6cede995ea3670454f",
1262
1263         "00000000000000000000000000000000",
1264         "fffc0000000000000000000000000000",
1265         "8eae3b10a0c8ca6d1d3b0fa61e56b0b2",
1266
1267         "00000000000000000000000000000000",
1268         "fffe0000000000000000000000000000",
1269         "64b4d629810fda6bafdf08f3b0d8d2c5",
1270
1271         "00000000000000000000000000000000",
1272         "ffff0000000000000000000000000000",
1273         "d7e5dbd3324595f8fdc7d7c571da6c2a",
1274
1275         "00000000000000000000000000000000",
1276         "ffff8000000000000000000000000000",
1277         "f3f72375264e167fca9de2c1527d9606",
1278
1279         "00000000000000000000000000000000",
1280         "ffffc000000000000000000000000000",
1281         "8ee79dd4f401ff9b7ea945d86666c13b",
1282
1283         "00000000000000000000000000000000",
1284         "ffffe000000000000000000000000000",
1285         "dd35cea2799940b40db3f819cb94c08b",
1286
1287         "00000000000000000000000000000000",
1288         "fffff000000000000000000000000000",
1289         "6941cb6b3e08c2b7afa581ebdd607b87",
1290
1291         "00000000000000000000000000000000",
1292         "fffff800000000000000000000000000",
1293         "2c20f439f6bb097b29b8bd6d99aad799",
1294
1295         "00000000000000000000000000000000",
1296         "fffffc00000000000000000000000000",
1297         "625d01f058e565f77ae86378bd2c49b3",
1298
1299         "00000000000000000000000000000000",
1300         "fffffe00000000000000000000000000",
1301         "c0b5fd98190ef45fbb4301438d095950",
1302
1303         "00000000000000000000000000000000",
1304         "ffffff00000000000000000000000000",
1305         "13001ff5d99806efd25da34f56be854b",
1306
1307         "00000000000000000000000000000000",
1308         "ffffff80000000000000000000000000",
1309         "3b594c60f5c8277a5113677f94208d82",
1310
1311         "00000000000000000000000000000000",
1312         "ffffffc0000000000000000000000000",
1313         "e9c0fc1818e4aa46bd2e39d638f89e05",
1314
1315         "00000000000000000000000000000000",
1316         "ffffffe0000000000000000000000000",
1317         "f8023ee9c3fdc45a019b4e985c7e1a54",
1318
1319         "00000000000000000000000000000000",
1320         "fffffff0000000000000000000000000",
1321         "35f40182ab4662f3023baec1ee796b57",
1322
1323         "00000000000000000000000000000000",
1324         "fffffff8000000000000000000000000",
1325         "3aebbad7303649b4194a6945c6cc3694",
1326
1327         "00000000000000000000000000000000",
1328         "fffffffc000000000000000000000000",
1329         "a2124bea53ec2834279bed7f7eb0f938",
1330
1331         "00000000000000000000000000000000",
1332         "fffffffe000000000000000000000000",
1333         "b9fb4399fa4facc7309e14ec98360b0a",
1334
1335         "00000000000000000000000000000000",
1336         "ffffffff000000000000000000000000",
1337         "c26277437420c5d634f715aea81a9132",
1338
1339         "00000000000000000000000000000000",
1340         "ffffffff800000000000000000000000",
1341         "171a0e1b2dd424f0e089af2c4c10f32f",
1342
1343         "00000000000000000000000000000000",
1344         "ffffffffc00000000000000000000000",
1345         "7cadbe402d1b208fe735edce00aee7ce",
1346
1347         "00000000000000000000000000000000",
1348         "ffffffffe00000000000000000000000",
1349         "43b02ff929a1485af6f5c6d6558baa0f",
1350
1351         "00000000000000000000000000000000",
1352         "fffffffff00000000000000000000000",
1353         "092faacc9bf43508bf8fa8613ca75dea",
1354
1355         "00000000000000000000000000000000",
1356         "fffffffff80000000000000000000000",
1357         "cb2bf8280f3f9742c7ed513fe802629c",
1358
1359         "00000000000000000000000000000000",
1360         "fffffffffc0000000000000000000000",
1361         "215a41ee442fa992a6e323986ded3f68",
1362
1363         "00000000000000000000000000000000",
1364         "fffffffffe0000000000000000000000",
1365         "f21e99cf4f0f77cea836e11a2fe75fb1",
1366
1367         "00000000000000000000000000000000",
1368         "ffffffffff0000000000000000000000",
1369         "95e3a0ca9079e646331df8b4e70d2cd6",
1370
1371         "00000000000000000000000000000000",
1372         "ffffffffff8000000000000000000000",
1373         "4afe7f120ce7613f74fc12a01a828073",
1374
1375         "00000000000000000000000000000000",
1376         "ffffffffffc000000000000000000000",
1377         "827f000e75e2c8b9d479beed913fe678",
1378
1379         "00000000000000000000000000000000",
1380         "ffffffffffe000000000000000000000",
1381         "35830c8e7aaefe2d30310ef381cbf691",
1382
1383         "00000000000000000000000000000000",
1384         "fffffffffff000000000000000000000",
1385         "191aa0f2c8570144f38657ea4085ebe5",
1386
1387         "00000000000000000000000000000000",
1388         "fffffffffff800000000000000000000",
1389         "85062c2c909f15d9269b6c18ce99c4f0",
1390
1391         "00000000000000000000000000000000",
1392         "fffffffffffc00000000000000000000",
1393         "678034dc9e41b5a560ed239eeab1bc78",
1394
1395         "00000000000000000000000000000000",
1396         "fffffffffffe00000000000000000000",
1397         "c2f93a4ce5ab6d5d56f1b93cf19911c1",
1398
1399         "00000000000000000000000000000000",
1400         "ffffffffffff00000000000000000000",
1401         "1c3112bcb0c1dcc749d799743691bf82",
1402
1403         "00000000000000000000000000000000",
1404         "ffffffffffff80000000000000000000",
1405         "00c55bd75c7f9c881989d3ec1911c0d4",
1406
1407         "00000000000000000000000000000000",
1408         "ffffffffffffc0000000000000000000",
1409         "ea2e6b5ef182b7dff3629abd6a12045f",
1410
1411         "00000000000000000000000000000000",
1412         "ffffffffffffe0000000000000000000",
1413         "22322327e01780b17397f24087f8cc6f",
1414
1415         "00000000000000000000000000000000",
1416         "fffffffffffff0000000000000000000",
1417         "c9cacb5cd11692c373b2411768149ee7",
1418
1419         "00000000000000000000000000000000",
1420         "fffffffffffff8000000000000000000",
1421         "a18e3dbbca577860dab6b80da3139256",
1422
1423         "00000000000000000000000000000000",
1424         "fffffffffffffc000000000000000000",
1425         "79b61c37bf328ecca8d743265a3d425c",
1426
1427         "00000000000000000000000000000000",
1428         "fffffffffffffe000000000000000000",
1429         "d2d99c6bcc1f06fda8e27e8ae3f1ccc7",
1430
1431         "00000000000000000000000000000000",
1432         "ffffffffffffff000000000000000000",
1433         "1bfd4b91c701fd6b61b7f997829d663b",
1434
1435         "00000000000000000000000000000000",
1436         "ffffffffffffff800000000000000000",
1437         "11005d52f25f16bdc9545a876a63490a",
1438
1439         "00000000000000000000000000000000",
1440         "ffffffffffffffc00000000000000000",
1441         "3a4d354f02bb5a5e47d39666867f246a",
1442
1443         "00000000000000000000000000000000",
1444         "ffffffffffffffe00000000000000000",
1445         "d451b8d6e1e1a0ebb155fbbf6e7b7dc3",
1446
1447         "00000000000000000000000000000000",
1448         "fffffffffffffff00000000000000000",
1449         "6898d4f42fa7ba6a10ac05e87b9f2080",
1450
1451         "00000000000000000000000000000000",
1452         "fffffffffffffff80000000000000000",
1453         "b611295e739ca7d9b50f8e4c0e754a3f",
1454
1455         "00000000000000000000000000000000",
1456         "fffffffffffffffc0000000000000000",
1457         "7d33fc7d8abe3ca1936759f8f5deaf20",
1458
1459         "00000000000000000000000000000000",
1460         "fffffffffffffffe0000000000000000",
1461         "3b5e0f566dc96c298f0c12637539b25c",
1462
1463         "00000000000000000000000000000000",
1464         "ffffffffffffffff0000000000000000",
1465         "f807c3e7985fe0f5a50e2cdb25c5109e",
1466
1467         "00000000000000000000000000000000",
1468         "ffffffffffffffff8000000000000000",
1469         "41f992a856fb278b389a62f5d274d7e9",
1470
1471         "00000000000000000000000000000000",
1472         "ffffffffffffffffc000000000000000",
1473         "10d3ed7a6fe15ab4d91acbc7d0767ab1",
1474
1475         "00000000000000000000000000000000",
1476         "ffffffffffffffffe000000000000000",
1477         "21feecd45b2e675973ac33bf0c5424fc",
1478
1479         "00000000000000000000000000000000",
1480         "fffffffffffffffff000000000000000",
1481         "1480cb3955ba62d09eea668f7c708817",
1482
1483         "00000000000000000000000000000000",
1484         "fffffffffffffffff800000000000000",
1485         "66404033d6b72b609354d5496e7eb511",
1486
1487         "00000000000000000000000000000000",
1488         "fffffffffffffffffc00000000000000",
1489         "1c317a220a7d700da2b1e075b00266e1",
1490
1491         "00000000000000000000000000000000",
1492         "fffffffffffffffffe00000000000000",
1493         "ab3b89542233f1271bf8fd0c0f403545",
1494
1495         "00000000000000000000000000000000",
1496         "ffffffffffffffffff00000000000000",
1497         "d93eae966fac46dca927d6b114fa3f9e",
1498
1499         "00000000000000000000000000000000",
1500         "ffffffffffffffffff80000000000000",
1501         "1bdec521316503d9d5ee65df3ea94ddf",
1502
1503         "00000000000000000000000000000000",
1504         "ffffffffffffffffffc0000000000000",
1505         "eef456431dea8b4acf83bdae3717f75f",
1506
1507         "00000000000000000000000000000000",
1508         "ffffffffffffffffffe0000000000000",
1509         "06f2519a2fafaa596bfef5cfa15c21b9",
1510
1511         "00000000000000000000000000000000",
1512         "fffffffffffffffffff0000000000000",
1513         "251a7eac7e2fe809e4aa8d0d7012531a",
1514
1515         "00000000000000000000000000000000",
1516         "fffffffffffffffffff8000000000000",
1517         "3bffc16e4c49b268a20f8d96a60b4058",
1518
1519         "00000000000000000000000000000000",
1520         "fffffffffffffffffffc000000000000",
1521         "e886f9281999c5bb3b3e8862e2f7c988",
1522
1523         "00000000000000000000000000000000",
1524         "fffffffffffffffffffe000000000000",
1525         "563bf90d61beef39f48dd625fcef1361",
1526
1527         "00000000000000000000000000000000",
1528         "ffffffffffffffffffff000000000000",
1529         "4d37c850644563c69fd0acd9a049325b",
1530
1531         "00000000000000000000000000000000",
1532         "ffffffffffffffffffff800000000000",
1533         "b87c921b91829ef3b13ca541ee1130a6",
1534
1535         "00000000000000000000000000000000",
1536         "ffffffffffffffffffffc00000000000",
1537         "2e65eb6b6ea383e109accce8326b0393",
1538
1539         "00000000000000000000000000000000",
1540         "ffffffffffffffffffffe00000000000",
1541         "9ca547f7439edc3e255c0f4d49aa8990",
1542
1543         "00000000000000000000000000000000",
1544         "fffffffffffffffffffff00000000000",
1545         "a5e652614c9300f37816b1f9fd0c87f9",
1546
1547         "00000000000000000000000000000000",
1548         "fffffffffffffffffffff80000000000",
1549         "14954f0b4697776f44494fe458d814ed",
1550
1551         "00000000000000000000000000000000",
1552         "fffffffffffffffffffffc0000000000",
1553         "7c8d9ab6c2761723fe42f8bb506cbcf7",
1554
1555         "00000000000000000000000000000000",
1556         "fffffffffffffffffffffe0000000000",
1557         "db7e1932679fdd99742aab04aa0d5a80",
1558
1559         "00000000000000000000000000000000",
1560         "ffffffffffffffffffffff0000000000",
1561         "4c6a1c83e568cd10f27c2d73ded19c28",
1562
1563         "00000000000000000000000000000000",
1564         "ffffffffffffffffffffff8000000000",
1565         "90ecbe6177e674c98de412413f7ac915",
1566
1567         "00000000000000000000000000000000",
1568         "ffffffffffffffffffffffc000000000",
1569         "90684a2ac55fe1ec2b8ebd5622520b73",
1570
1571         "00000000000000000000000000000000",
1572         "ffffffffffffffffffffffe000000000",
1573         "7472f9a7988607ca79707795991035e6",
1574
1575         "00000000000000000000000000000000",
1576         "fffffffffffffffffffffff000000000",
1577         "56aff089878bf3352f8df172a3ae47d8",
1578
1579         "00000000000000000000000000000000",
1580         "fffffffffffffffffffffff800000000",
1581         "65c0526cbe40161b8019a2a3171abd23",
1582
1583         "00000000000000000000000000000000",
1584         "fffffffffffffffffffffffc00000000",
1585         "377be0be33b4e3e310b4aabda173f84f",
1586
1587         "00000000000000000000000000000000",
1588         "fffffffffffffffffffffffe00000000",
1589         "9402e9aa6f69de6504da8d20c4fcaa2f",
1590
1591         "00000000000000000000000000000000",
1592         "ffffffffffffffffffffffff00000000",
1593         "123c1f4af313ad8c2ce648b2e71fb6e1",
1594
1595         "00000000000000000000000000000000",
1596         "ffffffffffffffffffffffff80000000",
1597         "1ffc626d30203dcdb0019fb80f726cf4",
1598
1599         "00000000000000000000000000000000",
1600         "ffffffffffffffffffffffffc0000000",
1601         "76da1fbe3a50728c50fd2e621b5ad885",
1602
1603         "00000000000000000000000000000000",
1604         "ffffffffffffffffffffffffe0000000",
1605         "082eb8be35f442fb52668e16a591d1d6",
1606
1607         "00000000000000000000000000000000",
1608         "fffffffffffffffffffffffff0000000",
1609         "e656f9ecf5fe27ec3e4a73d00c282fb3",
1610
1611         "00000000000000000000000000000000",
1612         "fffffffffffffffffffffffff8000000",
1613         "2ca8209d63274cd9a29bb74bcd77683a",
1614
1615         "00000000000000000000000000000000",
1616         "fffffffffffffffffffffffffc000000",
1617         "79bf5dce14bb7dd73a8e3611de7ce026",
1618
1619         "00000000000000000000000000000000",
1620         "fffffffffffffffffffffffffe000000",
1621         "3c849939a5d29399f344c4a0eca8a576",
1622
1623         "00000000000000000000000000000000",
1624         "ffffffffffffffffffffffffff000000",
1625         "ed3c0a94d59bece98835da7aa4f07ca2",
1626
1627         "00000000000000000000000000000000",
1628         "ffffffffffffffffffffffffff800000",
1629         "63919ed4ce10196438b6ad09d99cd795",
1630
1631         "00000000000000000000000000000000",
1632         "ffffffffffffffffffffffffffc00000",
1633         "7678f3a833f19fea95f3c6029e2bc610",
1634
1635         "00000000000000000000000000000000",
1636         "ffffffffffffffffffffffffffe00000",
1637         "3aa426831067d36b92be7c5f81c13c56",
1638
1639         "00000000000000000000000000000000",
1640         "fffffffffffffffffffffffffff00000",
1641         "9272e2d2cdd11050998c845077a30ea0",
1642
1643         "00000000000000000000000000000000",
1644         "fffffffffffffffffffffffffff80000",
1645         "088c4b53f5ec0ff814c19adae7f6246c",
1646
1647         "00000000000000000000000000000000",
1648         "fffffffffffffffffffffffffffc0000",
1649         "4010a5e401fdf0a0354ddbcc0d012b17",
1650
1651         "00000000000000000000000000000000",
1652         "fffffffffffffffffffffffffffe0000",
1653         "a87a385736c0a6189bd6589bd8445a93",
1654
1655         "00000000000000000000000000000000",
1656         "ffffffffffffffffffffffffffff0000",
1657         "545f2b83d9616dccf60fa9830e9cd287",
1658
1659         "00000000000000000000000000000000",
1660         "ffffffffffffffffffffffffffff8000",
1661         "4b706f7f92406352394037a6d4f4688d",
1662
1663         "00000000000000000000000000000000",
1664         "ffffffffffffffffffffffffffffc000",
1665         "b7972b3941c44b90afa7b264bfba7387",
1666
1667         "00000000000000000000000000000000",
1668         "ffffffffffffffffffffffffffffe000",
1669         "6f45732cf10881546f0fd23896d2bb60",
1670
1671         "00000000000000000000000000000000",
1672         "fffffffffffffffffffffffffffff000",
1673         "2e3579ca15af27f64b3c955a5bfc30ba",
1674
1675         "00000000000000000000000000000000",
1676         "fffffffffffffffffffffffffffff800",
1677         "34a2c5a91ae2aec99b7d1b5fa6780447",
1678
1679         "00000000000000000000000000000000",
1680         "fffffffffffffffffffffffffffffc00",
1681         "a4d6616bd04f87335b0e53351227a9ee",
1682
1683         "00000000000000000000000000000000",
1684         "fffffffffffffffffffffffffffffe00",
1685         "7f692b03945867d16179a8cefc83ea3f",
1686
1687         "00000000000000000000000000000000",
1688         "ffffffffffffffffffffffffffffff00",
1689         "3bd141ee84a0e6414a26e7a4f281f8a2",
1690
1691         "00000000000000000000000000000000",
1692         "ffffffffffffffffffffffffffffff80",
1693         "d1788f572d98b2b16ec5d5f3922b99bc",
1694
1695         "00000000000000000000000000000000",
1696         "ffffffffffffffffffffffffffffffc0",
1697         "0833ff6f61d98a57b288e8c3586b85a6",
1698
1699         "00000000000000000000000000000000",
1700         "ffffffffffffffffffffffffffffffe0",
1701         "8568261797de176bf0b43becc6285afb",
1702
1703         "00000000000000000000000000000000",
1704         "fffffffffffffffffffffffffffffff0",
1705         "f9b0fda0c4a898f5b9e6f661c4ce4d07",
1706
1707         "00000000000000000000000000000000",
1708         "fffffffffffffffffffffffffffffff8",
1709         "8ade895913685c67c5269f8aae42983e",
1710
1711         "00000000000000000000000000000000",
1712         "fffffffffffffffffffffffffffffffc",
1713         "39bde67d5c8ed8a8b1c37eb8fa9f5ac0",
1714
1715         "00000000000000000000000000000000",
1716         "fffffffffffffffffffffffffffffffe",
1717         "5c005e72c1418c44f569f2ea33ba54f3",
1718
1719         "00000000000000000000000000000000",
1720         "ffffffffffffffffffffffffffffffff",
1721         "3f5b8cc9ea855a0afa7347d23e8d664e",
1722
1723         /*
1724          * From NIST validation suite (ECBVarTxt192.rsp).
1725          */
1726         "000000000000000000000000000000000000000000000000",
1727         "80000000000000000000000000000000",
1728         "6cd02513e8d4dc986b4afe087a60bd0c",
1729
1730         "000000000000000000000000000000000000000000000000",
1731         "c0000000000000000000000000000000",
1732         "2ce1f8b7e30627c1c4519eada44bc436",
1733
1734         "000000000000000000000000000000000000000000000000",
1735         "e0000000000000000000000000000000",
1736         "9946b5f87af446f5796c1fee63a2da24",
1737
1738         "000000000000000000000000000000000000000000000000",
1739         "f0000000000000000000000000000000",
1740         "2a560364ce529efc21788779568d5555",
1741
1742         "000000000000000000000000000000000000000000000000",
1743         "f8000000000000000000000000000000",
1744         "35c1471837af446153bce55d5ba72a0a",
1745
1746         "000000000000000000000000000000000000000000000000",
1747         "fc000000000000000000000000000000",
1748         "ce60bc52386234f158f84341e534cd9e",
1749
1750         "000000000000000000000000000000000000000000000000",
1751         "fe000000000000000000000000000000",
1752         "8c7c27ff32bcf8dc2dc57c90c2903961",
1753
1754         "000000000000000000000000000000000000000000000000",
1755         "ff000000000000000000000000000000",
1756         "32bb6a7ec84499e166f936003d55a5bb",
1757
1758         "000000000000000000000000000000000000000000000000",
1759         "ff800000000000000000000000000000",
1760         "a5c772e5c62631ef660ee1d5877f6d1b",
1761
1762         "000000000000000000000000000000000000000000000000",
1763         "ffc00000000000000000000000000000",
1764         "030d7e5b64f380a7e4ea5387b5cd7f49",
1765
1766         "000000000000000000000000000000000000000000000000",
1767         "ffe00000000000000000000000000000",
1768         "0dc9a2610037009b698f11bb7e86c83e",
1769
1770         "000000000000000000000000000000000000000000000000",
1771         "fff00000000000000000000000000000",
1772         "0046612c766d1840c226364f1fa7ed72",
1773
1774         "000000000000000000000000000000000000000000000000",
1775         "fff80000000000000000000000000000",
1776         "4880c7e08f27befe78590743c05e698b",
1777
1778         "000000000000000000000000000000000000000000000000",
1779         "fffc0000000000000000000000000000",
1780         "2520ce829a26577f0f4822c4ecc87401",
1781
1782         "000000000000000000000000000000000000000000000000",
1783         "fffe0000000000000000000000000000",
1784         "8765e8acc169758319cb46dc7bcf3dca",
1785
1786         "000000000000000000000000000000000000000000000000",
1787         "ffff0000000000000000000000000000",
1788         "e98f4ba4f073df4baa116d011dc24a28",
1789
1790         "000000000000000000000000000000000000000000000000",
1791         "ffff8000000000000000000000000000",
1792         "f378f68c5dbf59e211b3a659a7317d94",
1793
1794         "000000000000000000000000000000000000000000000000",
1795         "ffffc000000000000000000000000000",
1796         "283d3b069d8eb9fb432d74b96ca762b4",
1797
1798         "000000000000000000000000000000000000000000000000",
1799         "ffffe000000000000000000000000000",
1800         "a7e1842e8a87861c221a500883245c51",
1801
1802         "000000000000000000000000000000000000000000000000",
1803         "fffff000000000000000000000000000",
1804         "77aa270471881be070fb52c7067ce732",
1805
1806         "000000000000000000000000000000000000000000000000",
1807         "fffff800000000000000000000000000",
1808         "01b0f476d484f43f1aeb6efa9361a8ac",
1809
1810         "000000000000000000000000000000000000000000000000",
1811         "fffffc00000000000000000000000000",
1812         "1c3a94f1c052c55c2d8359aff2163b4f",
1813
1814         "000000000000000000000000000000000000000000000000",
1815         "fffffe00000000000000000000000000",
1816         "e8a067b604d5373d8b0f2e05a03b341b",
1817
1818         "000000000000000000000000000000000000000000000000",
1819         "ffffff00000000000000000000000000",
1820         "a7876ec87f5a09bfea42c77da30fd50e",
1821
1822         "000000000000000000000000000000000000000000000000",
1823         "ffffff80000000000000000000000000",
1824         "0cf3e9d3a42be5b854ca65b13f35f48d",
1825
1826         "000000000000000000000000000000000000000000000000",
1827         "ffffffc0000000000000000000000000",
1828         "6c62f6bbcab7c3e821c9290f08892dda",
1829
1830         "000000000000000000000000000000000000000000000000",
1831         "ffffffe0000000000000000000000000",
1832         "7f5e05bd2068738196fee79ace7e3aec",
1833
1834         "000000000000000000000000000000000000000000000000",
1835         "fffffff0000000000000000000000000",
1836         "440e0d733255cda92fb46e842fe58054",
1837
1838         "000000000000000000000000000000000000000000000000",
1839         "fffffff8000000000000000000000000",
1840         "aa5d5b1c4ea1b7a22e5583ac2e9ed8a7",
1841
1842         "000000000000000000000000000000000000000000000000",
1843         "fffffffc000000000000000000000000",
1844         "77e537e89e8491e8662aae3bc809421d",
1845
1846         "000000000000000000000000000000000000000000000000",
1847         "fffffffe000000000000000000000000",
1848         "997dd3e9f1598bfa73f75973f7e93b76",
1849
1850         "000000000000000000000000000000000000000000000000",
1851         "ffffffff000000000000000000000000",
1852         "1b38d4f7452afefcb7fc721244e4b72e",
1853
1854         "000000000000000000000000000000000000000000000000",
1855         "ffffffff800000000000000000000000",
1856         "0be2b18252e774dda30cdda02c6906e3",
1857
1858         "000000000000000000000000000000000000000000000000",
1859         "ffffffffc00000000000000000000000",
1860         "d2695e59c20361d82652d7d58b6f11b2",
1861
1862         "000000000000000000000000000000000000000000000000",
1863         "ffffffffe00000000000000000000000",
1864         "902d88d13eae52089abd6143cfe394e9",
1865
1866         "000000000000000000000000000000000000000000000000",
1867         "fffffffff00000000000000000000000",
1868         "d49bceb3b823fedd602c305345734bd2",
1869
1870         "000000000000000000000000000000000000000000000000",
1871         "fffffffff80000000000000000000000",
1872         "707b1dbb0ffa40ef7d95def421233fae",
1873
1874         "000000000000000000000000000000000000000000000000",
1875         "fffffffffc0000000000000000000000",
1876         "7ca0c1d93356d9eb8aa952084d75f913",
1877
1878         "000000000000000000000000000000000000000000000000",
1879         "fffffffffe0000000000000000000000",
1880         "f2cbf9cb186e270dd7bdb0c28febc57d",
1881
1882         "000000000000000000000000000000000000000000000000",
1883         "ffffffffff0000000000000000000000",
1884         "c94337c37c4e790ab45780bd9c3674a0",
1885
1886         "000000000000000000000000000000000000000000000000",
1887         "ffffffffff8000000000000000000000",
1888         "8e3558c135252fb9c9f367ed609467a1",
1889
1890         "000000000000000000000000000000000000000000000000",
1891         "ffffffffffc000000000000000000000",
1892         "1b72eeaee4899b443914e5b3a57fba92",
1893
1894         "000000000000000000000000000000000000000000000000",
1895         "ffffffffffe000000000000000000000",
1896         "011865f91bc56868d051e52c9efd59b7",
1897
1898         "000000000000000000000000000000000000000000000000",
1899         "fffffffffff000000000000000000000",
1900         "e4771318ad7a63dd680f6e583b7747ea",
1901
1902         "000000000000000000000000000000000000000000000000",
1903         "fffffffffff800000000000000000000",
1904         "61e3d194088dc8d97e9e6db37457eac5",
1905
1906         "000000000000000000000000000000000000000000000000",
1907         "fffffffffffc00000000000000000000",
1908         "36ff1ec9ccfbc349e5d356d063693ad6",
1909
1910         "000000000000000000000000000000000000000000000000",
1911         "fffffffffffe00000000000000000000",
1912         "3cc9e9a9be8cc3f6fb2ea24088e9bb19",
1913
1914         "000000000000000000000000000000000000000000000000",
1915         "ffffffffffff00000000000000000000",
1916         "1ee5ab003dc8722e74905d9a8fe3d350",
1917
1918         "000000000000000000000000000000000000000000000000",
1919         "ffffffffffff80000000000000000000",
1920         "245339319584b0a412412869d6c2eada",
1921
1922         "000000000000000000000000000000000000000000000000",
1923         "ffffffffffffc0000000000000000000",
1924         "7bd496918115d14ed5380852716c8814",
1925
1926         "000000000000000000000000000000000000000000000000",
1927         "ffffffffffffe0000000000000000000",
1928         "273ab2f2b4a366a57d582a339313c8b1",
1929
1930         "000000000000000000000000000000000000000000000000",
1931         "fffffffffffff0000000000000000000",
1932         "113365a9ffbe3b0ca61e98507554168b",
1933
1934         "000000000000000000000000000000000000000000000000",
1935         "fffffffffffff8000000000000000000",
1936         "afa99c997ac478a0dea4119c9e45f8b1",
1937
1938         "000000000000000000000000000000000000000000000000",
1939         "fffffffffffffc000000000000000000",
1940         "9216309a7842430b83ffb98638011512",
1941
1942         "000000000000000000000000000000000000000000000000",
1943         "fffffffffffffe000000000000000000",
1944         "62abc792288258492a7cb45145f4b759",
1945
1946         "000000000000000000000000000000000000000000000000",
1947         "ffffffffffffff000000000000000000",
1948         "534923c169d504d7519c15d30e756c50",
1949
1950         "000000000000000000000000000000000000000000000000",
1951         "ffffffffffffff800000000000000000",
1952         "fa75e05bcdc7e00c273fa33f6ee441d2",
1953
1954         "000000000000000000000000000000000000000000000000",
1955         "ffffffffffffffc00000000000000000",
1956         "7d350fa6057080f1086a56b17ec240db",
1957
1958         "000000000000000000000000000000000000000000000000",
1959         "ffffffffffffffe00000000000000000",
1960         "f34e4a6324ea4a5c39a661c8fe5ada8f",
1961
1962         "000000000000000000000000000000000000000000000000",
1963         "fffffffffffffff00000000000000000",
1964         "0882a16f44088d42447a29ac090ec17e",
1965
1966         "000000000000000000000000000000000000000000000000",
1967         "fffffffffffffff80000000000000000",
1968         "3a3c15bfc11a9537c130687004e136ee",
1969
1970         "000000000000000000000000000000000000000000000000",
1971         "fffffffffffffffc0000000000000000",
1972         "22c0a7678dc6d8cf5c8a6d5a9960767c",
1973
1974         "000000000000000000000000000000000000000000000000",
1975         "fffffffffffffffe0000000000000000",
1976         "b46b09809d68b9a456432a79bdc2e38c",
1977
1978         "000000000000000000000000000000000000000000000000",
1979         "ffffffffffffffff0000000000000000",
1980         "93baaffb35fbe739c17c6ac22eecf18f",
1981
1982         "000000000000000000000000000000000000000000000000",
1983         "ffffffffffffffff8000000000000000",
1984         "c8aa80a7850675bc007c46df06b49868",
1985
1986         "000000000000000000000000000000000000000000000000",
1987         "ffffffffffffffffc000000000000000",
1988         "12c6f3877af421a918a84b775858021d",
1989
1990         "000000000000000000000000000000000000000000000000",
1991         "ffffffffffffffffe000000000000000",
1992         "33f123282c5d633924f7d5ba3f3cab11",
1993
1994         "000000000000000000000000000000000000000000000000",
1995         "fffffffffffffffff000000000000000",
1996         "a8f161002733e93ca4527d22c1a0c5bb",
1997
1998         "000000000000000000000000000000000000000000000000",
1999         "fffffffffffffffff800000000000000",
2000         "b72f70ebf3e3fda23f508eec76b42c02",
2001
2002         "000000000000000000000000000000000000000000000000",
2003         "fffffffffffffffffc00000000000000",
2004         "6a9d965e6274143f25afdcfc88ffd77c",
2005
2006         "000000000000000000000000000000000000000000000000",
2007         "fffffffffffffffffe00000000000000",
2008         "a0c74fd0b9361764ce91c5200b095357",
2009
2010         "000000000000000000000000000000000000000000000000",
2011         "ffffffffffffffffff00000000000000",
2012         "091d1fdc2bd2c346cd5046a8c6209146",
2013
2014         "000000000000000000000000000000000000000000000000",
2015         "ffffffffffffffffff80000000000000",
2016         "e2a37580116cfb71856254496ab0aca8",
2017
2018         "000000000000000000000000000000000000000000000000",
2019         "ffffffffffffffffffc0000000000000",
2020         "e0b3a00785917c7efc9adba322813571",
2021
2022         "000000000000000000000000000000000000000000000000",
2023         "ffffffffffffffffffe0000000000000",
2024         "733d41f4727b5ef0df4af4cf3cffa0cb",
2025
2026         "000000000000000000000000000000000000000000000000",
2027         "fffffffffffffffffff0000000000000",
2028         "a99ebb030260826f981ad3e64490aa4f",
2029
2030         "000000000000000000000000000000000000000000000000",
2031         "fffffffffffffffffff8000000000000",
2032         "73f34c7d3eae5e80082c1647524308ee",
2033
2034         "000000000000000000000000000000000000000000000000",
2035         "fffffffffffffffffffc000000000000",
2036         "40ebd5ad082345b7a2097ccd3464da02",
2037
2038         "000000000000000000000000000000000000000000000000",
2039         "fffffffffffffffffffe000000000000",
2040         "7cc4ae9a424b2cec90c97153c2457ec5",
2041
2042         "000000000000000000000000000000000000000000000000",
2043         "ffffffffffffffffffff000000000000",
2044         "54d632d03aba0bd0f91877ebdd4d09cb",
2045
2046         "000000000000000000000000000000000000000000000000",
2047         "ffffffffffffffffffff800000000000",
2048         "d3427be7e4d27cd54f5fe37b03cf0897",
2049
2050         "000000000000000000000000000000000000000000000000",
2051         "ffffffffffffffffffffc00000000000",
2052         "b2099795e88cc158fd75ea133d7e7fbe",
2053
2054         "000000000000000000000000000000000000000000000000",
2055         "ffffffffffffffffffffe00000000000",
2056         "a6cae46fb6fadfe7a2c302a34242817b",
2057
2058         "000000000000000000000000000000000000000000000000",
2059         "fffffffffffffffffffff00000000000",
2060         "026a7024d6a902e0b3ffccbaa910cc3f",
2061
2062         "000000000000000000000000000000000000000000000000",
2063         "fffffffffffffffffffff80000000000",
2064         "156f07767a85a4312321f63968338a01",
2065
2066         "000000000000000000000000000000000000000000000000",
2067         "fffffffffffffffffffffc0000000000",
2068         "15eec9ebf42b9ca76897d2cd6c5a12e2",
2069
2070         "000000000000000000000000000000000000000000000000",
2071         "fffffffffffffffffffffe0000000000",
2072         "db0d3a6fdcc13f915e2b302ceeb70fd8",
2073
2074         "000000000000000000000000000000000000000000000000",
2075         "ffffffffffffffffffffff0000000000",
2076         "71dbf37e87a2e34d15b20e8f10e48924",
2077
2078         "000000000000000000000000000000000000000000000000",
2079         "ffffffffffffffffffffff8000000000",
2080         "c745c451e96ff3c045e4367c833e3b54",
2081
2082         "000000000000000000000000000000000000000000000000",
2083         "ffffffffffffffffffffffc000000000",
2084         "340da09c2dd11c3b679d08ccd27dd595",
2085
2086         "000000000000000000000000000000000000000000000000",
2087         "ffffffffffffffffffffffe000000000",
2088         "8279f7c0c2a03ee660c6d392db025d18",
2089
2090         "000000000000000000000000000000000000000000000000",
2091         "fffffffffffffffffffffff000000000",
2092         "a4b2c7d8eba531ff47c5041a55fbd1ec",
2093
2094         "000000000000000000000000000000000000000000000000",
2095         "fffffffffffffffffffffff800000000",
2096         "74569a2ca5a7bd5131ce8dc7cbfbf72f",
2097
2098         "000000000000000000000000000000000000000000000000",
2099         "fffffffffffffffffffffffc00000000",
2100         "3713da0c0219b63454035613b5a403dd",
2101
2102         "000000000000000000000000000000000000000000000000",
2103         "fffffffffffffffffffffffe00000000",
2104         "8827551ddcc9df23fa72a3de4e9f0b07",
2105
2106         "000000000000000000000000000000000000000000000000",
2107         "ffffffffffffffffffffffff00000000",
2108         "2e3febfd625bfcd0a2c06eb460da1732",
2109
2110         "000000000000000000000000000000000000000000000000",
2111         "ffffffffffffffffffffffff80000000",
2112         "ee82e6ba488156f76496311da6941deb",
2113
2114         "000000000000000000000000000000000000000000000000",
2115         "ffffffffffffffffffffffffc0000000",
2116         "4770446f01d1f391256e85a1b30d89d3",
2117
2118         "000000000000000000000000000000000000000000000000",
2119         "ffffffffffffffffffffffffe0000000",
2120         "af04b68f104f21ef2afb4767cf74143c",
2121
2122         "000000000000000000000000000000000000000000000000",
2123         "fffffffffffffffffffffffff0000000",
2124         "cf3579a9ba38c8e43653173e14f3a4c6",
2125
2126         "000000000000000000000000000000000000000000000000",
2127         "fffffffffffffffffffffffff8000000",
2128         "b3bba904f4953e09b54800af2f62e7d4",
2129
2130         "000000000000000000000000000000000000000000000000",
2131         "fffffffffffffffffffffffffc000000",
2132         "fc4249656e14b29eb9c44829b4c59a46",
2133
2134         "000000000000000000000000000000000000000000000000",
2135         "fffffffffffffffffffffffffe000000",
2136         "9b31568febe81cfc2e65af1c86d1a308",
2137
2138         "000000000000000000000000000000000000000000000000",
2139         "ffffffffffffffffffffffffff000000",
2140         "9ca09c25f273a766db98a480ce8dfedc",
2141
2142         "000000000000000000000000000000000000000000000000",
2143         "ffffffffffffffffffffffffff800000",
2144         "b909925786f34c3c92d971883c9fbedf",
2145
2146         "000000000000000000000000000000000000000000000000",
2147         "ffffffffffffffffffffffffffc00000",
2148         "82647f1332fe570a9d4d92b2ee771d3b",
2149
2150         "000000000000000000000000000000000000000000000000",
2151         "ffffffffffffffffffffffffffe00000",
2152         "3604a7e80832b3a99954bca6f5b9f501",
2153
2154         "000000000000000000000000000000000000000000000000",
2155         "fffffffffffffffffffffffffff00000",
2156         "884607b128c5de3ab39a529a1ef51bef",
2157
2158         "000000000000000000000000000000000000000000000000",
2159         "fffffffffffffffffffffffffff80000",
2160         "670cfa093d1dbdb2317041404102435e",
2161
2162         "000000000000000000000000000000000000000000000000",
2163         "fffffffffffffffffffffffffffc0000",
2164         "7a867195f3ce8769cbd336502fbb5130",
2165
2166         "000000000000000000000000000000000000000000000000",
2167         "fffffffffffffffffffffffffffe0000",
2168         "52efcf64c72b2f7ca5b3c836b1078c15",
2169
2170         "000000000000000000000000000000000000000000000000",
2171         "ffffffffffffffffffffffffffff0000",
2172         "4019250f6eefb2ac5ccbcae044e75c7e",
2173
2174         "000000000000000000000000000000000000000000000000",
2175         "ffffffffffffffffffffffffffff8000",
2176         "022c4f6f5a017d292785627667ddef24",
2177
2178         "000000000000000000000000000000000000000000000000",
2179         "ffffffffffffffffffffffffffffc000",
2180         "e9c21078a2eb7e03250f71000fa9e3ed",
2181
2182         "000000000000000000000000000000000000000000000000",
2183         "ffffffffffffffffffffffffffffe000",
2184         "a13eaeeb9cd391da4e2b09490b3e7fad",
2185
2186         "000000000000000000000000000000000000000000000000",
2187         "fffffffffffffffffffffffffffff000",
2188         "c958a171dca1d4ed53e1af1d380803a9",
2189
2190         "000000000000000000000000000000000000000000000000",
2191         "fffffffffffffffffffffffffffff800",
2192         "21442e07a110667f2583eaeeee44dc8c",
2193
2194         "000000000000000000000000000000000000000000000000",
2195         "fffffffffffffffffffffffffffffc00",
2196         "59bbb353cf1dd867a6e33737af655e99",
2197
2198         "000000000000000000000000000000000000000000000000",
2199         "fffffffffffffffffffffffffffffe00",
2200         "43cd3b25375d0ce41087ff9fe2829639",
2201
2202         "000000000000000000000000000000000000000000000000",
2203         "ffffffffffffffffffffffffffffff00",
2204         "6b98b17e80d1118e3516bd768b285a84",
2205
2206         "000000000000000000000000000000000000000000000000",
2207         "ffffffffffffffffffffffffffffff80",
2208         "ae47ed3676ca0c08deea02d95b81db58",
2209
2210         "000000000000000000000000000000000000000000000000",
2211         "ffffffffffffffffffffffffffffffc0",
2212         "34ec40dc20413795ed53628ea748720b",
2213
2214         "000000000000000000000000000000000000000000000000",
2215         "ffffffffffffffffffffffffffffffe0",
2216         "4dc68163f8e9835473253542c8a65d46",
2217
2218         "000000000000000000000000000000000000000000000000",
2219         "fffffffffffffffffffffffffffffff0",
2220         "2aabb999f43693175af65c6c612c46fb",
2221
2222         "000000000000000000000000000000000000000000000000",
2223         "fffffffffffffffffffffffffffffff8",
2224         "e01f94499dac3547515c5b1d756f0f58",
2225
2226         "000000000000000000000000000000000000000000000000",
2227         "fffffffffffffffffffffffffffffffc",
2228         "9d12435a46480ce00ea349f71799df9a",
2229
2230         "000000000000000000000000000000000000000000000000",
2231         "fffffffffffffffffffffffffffffffe",
2232         "cef41d16d266bdfe46938ad7884cc0cf",
2233
2234         "000000000000000000000000000000000000000000000000",
2235         "ffffffffffffffffffffffffffffffff",
2236         "b13db4da1f718bc6904797c82bcf2d32",
2237
2238         /*
2239          * From NIST validation suite (ECBVarTxt256.rsp).
2240          */
2241         "0000000000000000000000000000000000000000000000000000000000000000",
2242         "80000000000000000000000000000000",
2243         "ddc6bf790c15760d8d9aeb6f9a75fd4e",
2244
2245         "0000000000000000000000000000000000000000000000000000000000000000",
2246         "c0000000000000000000000000000000",
2247         "0a6bdc6d4c1e6280301fd8e97ddbe601",
2248
2249         "0000000000000000000000000000000000000000000000000000000000000000",
2250         "e0000000000000000000000000000000",
2251         "9b80eefb7ebe2d2b16247aa0efc72f5d",
2252
2253         "0000000000000000000000000000000000000000000000000000000000000000",
2254         "f0000000000000000000000000000000",
2255         "7f2c5ece07a98d8bee13c51177395ff7",
2256
2257         "0000000000000000000000000000000000000000000000000000000000000000",
2258         "f8000000000000000000000000000000",
2259         "7818d800dcf6f4be1e0e94f403d1e4c2",
2260
2261         "0000000000000000000000000000000000000000000000000000000000000000",
2262         "fc000000000000000000000000000000",
2263         "e74cd1c92f0919c35a0324123d6177d3",
2264
2265         "0000000000000000000000000000000000000000000000000000000000000000",
2266         "fe000000000000000000000000000000",
2267         "8092a4dcf2da7e77e93bdd371dfed82e",
2268
2269         "0000000000000000000000000000000000000000000000000000000000000000",
2270         "ff000000000000000000000000000000",
2271         "49af6b372135acef10132e548f217b17",
2272
2273         "0000000000000000000000000000000000000000000000000000000000000000",
2274         "ff800000000000000000000000000000",
2275         "8bcd40f94ebb63b9f7909676e667f1e7",
2276
2277         "0000000000000000000000000000000000000000000000000000000000000000",
2278         "ffc00000000000000000000000000000",
2279         "fe1cffb83f45dcfb38b29be438dbd3ab",
2280
2281         "0000000000000000000000000000000000000000000000000000000000000000",
2282         "ffe00000000000000000000000000000",
2283         "0dc58a8d886623705aec15cb1e70dc0e",
2284
2285         "0000000000000000000000000000000000000000000000000000000000000000",
2286         "fff00000000000000000000000000000",
2287         "c218faa16056bd0774c3e8d79c35a5e4",
2288
2289         "0000000000000000000000000000000000000000000000000000000000000000",
2290         "fff80000000000000000000000000000",
2291         "047bba83f7aa841731504e012208fc9e",
2292
2293         "0000000000000000000000000000000000000000000000000000000000000000",
2294         "fffc0000000000000000000000000000",
2295         "dc8f0e4915fd81ba70a331310882f6da",
2296
2297         "0000000000000000000000000000000000000000000000000000000000000000",
2298         "fffe0000000000000000000000000000",
2299         "1569859ea6b7206c30bf4fd0cbfac33c",
2300
2301         "0000000000000000000000000000000000000000000000000000000000000000",
2302         "ffff0000000000000000000000000000",
2303         "300ade92f88f48fa2df730ec16ef44cd",
2304
2305         "0000000000000000000000000000000000000000000000000000000000000000",
2306         "ffff8000000000000000000000000000",
2307         "1fe6cc3c05965dc08eb0590c95ac71d0",
2308
2309         "0000000000000000000000000000000000000000000000000000000000000000",
2310         "ffffc000000000000000000000000000",
2311         "59e858eaaa97fec38111275b6cf5abc0",
2312
2313         "0000000000000000000000000000000000000000000000000000000000000000",
2314         "ffffe000000000000000000000000000",
2315         "2239455e7afe3b0616100288cc5a723b",
2316
2317         "0000000000000000000000000000000000000000000000000000000000000000",
2318         "fffff000000000000000000000000000",
2319         "3ee500c5c8d63479717163e55c5c4522",
2320
2321         "0000000000000000000000000000000000000000000000000000000000000000",
2322         "fffff800000000000000000000000000",
2323         "d5e38bf15f16d90e3e214041d774daa8",
2324
2325         "0000000000000000000000000000000000000000000000000000000000000000",
2326         "fffffc00000000000000000000000000",
2327         "b1f4066e6f4f187dfe5f2ad1b17819d0",
2328
2329         "0000000000000000000000000000000000000000000000000000000000000000",
2330         "fffffe00000000000000000000000000",
2331         "6ef4cc4de49b11065d7af2909854794a",
2332
2333         "0000000000000000000000000000000000000000000000000000000000000000",
2334         "ffffff00000000000000000000000000",
2335         "ac86bc606b6640c309e782f232bf367f",
2336
2337         "0000000000000000000000000000000000000000000000000000000000000000",
2338         "ffffff80000000000000000000000000",
2339         "36aff0ef7bf3280772cf4cac80a0d2b2",
2340
2341         "0000000000000000000000000000000000000000000000000000000000000000",
2342         "ffffffc0000000000000000000000000",
2343         "1f8eedea0f62a1406d58cfc3ecea72cf",
2344
2345         "0000000000000000000000000000000000000000000000000000000000000000",
2346         "ffffffe0000000000000000000000000",
2347         "abf4154a3375a1d3e6b1d454438f95a6",
2348
2349         "0000000000000000000000000000000000000000000000000000000000000000",
2350         "fffffff0000000000000000000000000",
2351         "96f96e9d607f6615fc192061ee648b07",
2352
2353         "0000000000000000000000000000000000000000000000000000000000000000",
2354         "fffffff8000000000000000000000000",
2355         "cf37cdaaa0d2d536c71857634c792064",
2356
2357         "0000000000000000000000000000000000000000000000000000000000000000",
2358         "fffffffc000000000000000000000000",
2359         "fbd6640c80245c2b805373f130703127",
2360
2361         "0000000000000000000000000000000000000000000000000000000000000000",
2362         "fffffffe000000000000000000000000",
2363         "8d6a8afe55a6e481badae0d146f436db",
2364
2365         "0000000000000000000000000000000000000000000000000000000000000000",
2366         "ffffffff000000000000000000000000",
2367         "6a4981f2915e3e68af6c22385dd06756",
2368
2369         "0000000000000000000000000000000000000000000000000000000000000000",
2370         "ffffffff800000000000000000000000",
2371         "42a1136e5f8d8d21d3101998642d573b",
2372
2373         "0000000000000000000000000000000000000000000000000000000000000000",
2374         "ffffffffc00000000000000000000000",
2375         "9b471596dc69ae1586cee6158b0b0181",
2376
2377         "0000000000000000000000000000000000000000000000000000000000000000",
2378         "ffffffffe00000000000000000000000",
2379         "753665c4af1eff33aa8b628bf8741cfd",
2380
2381         "0000000000000000000000000000000000000000000000000000000000000000",
2382         "fffffffff00000000000000000000000",
2383         "9a682acf40be01f5b2a4193c9a82404d",
2384
2385         "0000000000000000000000000000000000000000000000000000000000000000",
2386         "fffffffff80000000000000000000000",
2387         "54fafe26e4287f17d1935f87eb9ade01",
2388
2389         "0000000000000000000000000000000000000000000000000000000000000000",
2390         "fffffffffc0000000000000000000000",
2391         "49d541b2e74cfe73e6a8e8225f7bd449",
2392
2393         "0000000000000000000000000000000000000000000000000000000000000000",
2394         "fffffffffe0000000000000000000000",
2395         "11a45530f624ff6f76a1b3826626ff7b",
2396
2397         "0000000000000000000000000000000000000000000000000000000000000000",
2398         "ffffffffff0000000000000000000000",
2399         "f96b0c4a8bc6c86130289f60b43b8fba",
2400
2401         "0000000000000000000000000000000000000000000000000000000000000000",
2402         "ffffffffff8000000000000000000000",
2403         "48c7d0e80834ebdc35b6735f76b46c8b",
2404
2405         "0000000000000000000000000000000000000000000000000000000000000000",
2406         "ffffffffffc000000000000000000000",
2407         "2463531ab54d66955e73edc4cb8eaa45",
2408
2409         "0000000000000000000000000000000000000000000000000000000000000000",
2410         "ffffffffffe000000000000000000000",
2411         "ac9bd8e2530469134b9d5b065d4f565b",
2412
2413         "0000000000000000000000000000000000000000000000000000000000000000",
2414         "fffffffffff000000000000000000000",
2415         "3f5f9106d0e52f973d4890e6f37e8a00",
2416
2417         "0000000000000000000000000000000000000000000000000000000000000000",
2418         "fffffffffff800000000000000000000",
2419         "20ebc86f1304d272e2e207e59db639f0",
2420
2421         "0000000000000000000000000000000000000000000000000000000000000000",
2422         "fffffffffffc00000000000000000000",
2423         "e67ae6426bf9526c972cff072b52252c",
2424
2425         "0000000000000000000000000000000000000000000000000000000000000000",
2426         "fffffffffffe00000000000000000000",
2427         "1a518dddaf9efa0d002cc58d107edfc8",
2428
2429         "0000000000000000000000000000000000000000000000000000000000000000",
2430         "ffffffffffff00000000000000000000",
2431         "ead731af4d3a2fe3b34bed047942a49f",
2432
2433         "0000000000000000000000000000000000000000000000000000000000000000",
2434         "ffffffffffff80000000000000000000",
2435         "b1d4efe40242f83e93b6c8d7efb5eae9",
2436
2437         "0000000000000000000000000000000000000000000000000000000000000000",
2438         "ffffffffffffc0000000000000000000",
2439         "cd2b1fec11fd906c5c7630099443610a",
2440
2441         "0000000000000000000000000000000000000000000000000000000000000000",
2442         "ffffffffffffe0000000000000000000",
2443         "a1853fe47fe29289d153161d06387d21",
2444
2445         "0000000000000000000000000000000000000000000000000000000000000000",
2446         "fffffffffffff0000000000000000000",
2447         "4632154179a555c17ea604d0889fab14",
2448
2449         "0000000000000000000000000000000000000000000000000000000000000000",
2450         "fffffffffffff8000000000000000000",
2451         "dd27cac6401a022e8f38f9f93e774417",
2452
2453         "0000000000000000000000000000000000000000000000000000000000000000",
2454         "fffffffffffffc000000000000000000",
2455         "c090313eb98674f35f3123385fb95d4d",
2456
2457         "0000000000000000000000000000000000000000000000000000000000000000",
2458         "fffffffffffffe000000000000000000",
2459         "cc3526262b92f02edce548f716b9f45c",
2460
2461         "0000000000000000000000000000000000000000000000000000000000000000",
2462         "ffffffffffffff000000000000000000",
2463         "c0838d1a2b16a7c7f0dfcc433c399c33",
2464
2465         "0000000000000000000000000000000000000000000000000000000000000000",
2466         "ffffffffffffff800000000000000000",
2467         "0d9ac756eb297695eed4d382eb126d26",
2468
2469         "0000000000000000000000000000000000000000000000000000000000000000",
2470         "ffffffffffffffc00000000000000000",
2471         "56ede9dda3f6f141bff1757fa689c3e1",
2472
2473         "0000000000000000000000000000000000000000000000000000000000000000",
2474         "ffffffffffffffe00000000000000000",
2475         "768f520efe0f23e61d3ec8ad9ce91774",
2476
2477         "0000000000000000000000000000000000000000000000000000000000000000",
2478         "fffffffffffffff00000000000000000",
2479         "b1144ddfa75755213390e7c596660490",
2480
2481         "0000000000000000000000000000000000000000000000000000000000000000",
2482         "fffffffffffffff80000000000000000",
2483         "1d7c0c4040b355b9d107a99325e3b050",
2484
2485         "0000000000000000000000000000000000000000000000000000000000000000",
2486         "fffffffffffffffc0000000000000000",
2487         "d8e2bb1ae8ee3dcf5bf7d6c38da82a1a",
2488
2489         "0000000000000000000000000000000000000000000000000000000000000000",
2490         "fffffffffffffffe0000000000000000",
2491         "faf82d178af25a9886a47e7f789b98d7",
2492
2493         "0000000000000000000000000000000000000000000000000000000000000000",
2494         "ffffffffffffffff0000000000000000",
2495         "9b58dbfd77fe5aca9cfc190cd1b82d19",
2496
2497         "0000000000000000000000000000000000000000000000000000000000000000",
2498         "ffffffffffffffff8000000000000000",
2499         "77f392089042e478ac16c0c86a0b5db5",
2500
2501         "0000000000000000000000000000000000000000000000000000000000000000",
2502         "ffffffffffffffffc000000000000000",
2503         "19f08e3420ee69b477ca1420281c4782",
2504
2505         "0000000000000000000000000000000000000000000000000000000000000000",
2506         "ffffffffffffffffe000000000000000",
2507         "a1b19beee4e117139f74b3c53fdcb875",
2508
2509         "0000000000000000000000000000000000000000000000000000000000000000",
2510         "fffffffffffffffff000000000000000",
2511         "a37a5869b218a9f3a0868d19aea0ad6a",
2512
2513         "0000000000000000000000000000000000000000000000000000000000000000",
2514         "fffffffffffffffff800000000000000",
2515         "bc3594e865bcd0261b13202731f33580",
2516
2517         "0000000000000000000000000000000000000000000000000000000000000000",
2518         "fffffffffffffffffc00000000000000",
2519         "811441ce1d309eee7185e8c752c07557",
2520
2521         "0000000000000000000000000000000000000000000000000000000000000000",
2522         "fffffffffffffffffe00000000000000",
2523         "959971ce4134190563518e700b9874d1",
2524
2525         "0000000000000000000000000000000000000000000000000000000000000000",
2526         "ffffffffffffffffff00000000000000",
2527         "76b5614a042707c98e2132e2e805fe63",
2528
2529         "0000000000000000000000000000000000000000000000000000000000000000",
2530         "ffffffffffffffffff80000000000000",
2531         "7d9fa6a57530d0f036fec31c230b0cc6",
2532
2533         "0000000000000000000000000000000000000000000000000000000000000000",
2534         "ffffffffffffffffffc0000000000000",
2535         "964153a83bf6989a4ba80daa91c3e081",
2536
2537         "0000000000000000000000000000000000000000000000000000000000000000",
2538         "ffffffffffffffffffe0000000000000",
2539         "a013014d4ce8054cf2591d06f6f2f176",
2540
2541         "0000000000000000000000000000000000000000000000000000000000000000",
2542         "fffffffffffffffffff0000000000000",
2543         "d1c5f6399bf382502e385eee1474a869",
2544
2545         "0000000000000000000000000000000000000000000000000000000000000000",
2546         "fffffffffffffffffff8000000000000",
2547         "0007e20b8298ec354f0f5fe7470f36bd",
2548
2549         "0000000000000000000000000000000000000000000000000000000000000000",
2550         "fffffffffffffffffffc000000000000",
2551         "b95ba05b332da61ef63a2b31fcad9879",
2552
2553         "0000000000000000000000000000000000000000000000000000000000000000",
2554         "fffffffffffffffffffe000000000000",
2555         "4620a49bd967491561669ab25dce45f4",
2556
2557         "0000000000000000000000000000000000000000000000000000000000000000",
2558         "ffffffffffffffffffff000000000000",
2559         "12e71214ae8e04f0bb63d7425c6f14d5",
2560
2561         "0000000000000000000000000000000000000000000000000000000000000000",
2562         "ffffffffffffffffffff800000000000",
2563         "4cc42fc1407b008fe350907c092e80ac",
2564
2565         "0000000000000000000000000000000000000000000000000000000000000000",
2566         "ffffffffffffffffffffc00000000000",
2567         "08b244ce7cbc8ee97fbba808cb146fda",
2568
2569         "0000000000000000000000000000000000000000000000000000000000000000",
2570         "ffffffffffffffffffffe00000000000",
2571         "39b333e8694f21546ad1edd9d87ed95b",
2572
2573         "0000000000000000000000000000000000000000000000000000000000000000",
2574         "fffffffffffffffffffff00000000000",
2575         "3b271f8ab2e6e4a20ba8090f43ba78f3",
2576
2577         "0000000000000000000000000000000000000000000000000000000000000000",
2578         "fffffffffffffffffffff80000000000",
2579         "9ad983f3bf651cd0393f0a73cccdea50",
2580
2581         "0000000000000000000000000000000000000000000000000000000000000000",
2582         "fffffffffffffffffffffc0000000000",
2583         "8f476cbff75c1f725ce18e4bbcd19b32",
2584
2585         "0000000000000000000000000000000000000000000000000000000000000000",
2586         "fffffffffffffffffffffe0000000000",
2587         "905b6267f1d6ab5320835a133f096f2a",
2588
2589         "0000000000000000000000000000000000000000000000000000000000000000",
2590         "ffffffffffffffffffffff0000000000",
2591         "145b60d6d0193c23f4221848a892d61a",
2592
2593         "0000000000000000000000000000000000000000000000000000000000000000",
2594         "ffffffffffffffffffffff8000000000",
2595         "55cfb3fb6d75cad0445bbc8dafa25b0f",
2596
2597         "0000000000000000000000000000000000000000000000000000000000000000",
2598         "ffffffffffffffffffffffc000000000",
2599         "7b8e7098e357ef71237d46d8b075b0f5",
2600
2601         "0000000000000000000000000000000000000000000000000000000000000000",
2602         "ffffffffffffffffffffffe000000000",
2603         "2bf27229901eb40f2df9d8398d1505ae",
2604
2605         "0000000000000000000000000000000000000000000000000000000000000000",
2606         "fffffffffffffffffffffff000000000",
2607         "83a63402a77f9ad5c1e931a931ecd706",
2608
2609         "0000000000000000000000000000000000000000000000000000000000000000",
2610         "fffffffffffffffffffffff800000000",
2611         "6f8ba6521152d31f2bada1843e26b973",
2612
2613         "0000000000000000000000000000000000000000000000000000000000000000",
2614         "fffffffffffffffffffffffc00000000",
2615         "e5c3b8e30fd2d8e6239b17b44bd23bbd",
2616
2617         "0000000000000000000000000000000000000000000000000000000000000000",
2618         "fffffffffffffffffffffffe00000000",
2619         "1ac1f7102c59933e8b2ddc3f14e94baa",
2620
2621         "0000000000000000000000000000000000000000000000000000000000000000",
2622         "ffffffffffffffffffffffff00000000",
2623         "21d9ba49f276b45f11af8fc71a088e3d",
2624
2625         "0000000000000000000000000000000000000000000000000000000000000000",
2626         "ffffffffffffffffffffffff80000000",
2627         "649f1cddc3792b4638635a392bc9bade",
2628
2629         "0000000000000000000000000000000000000000000000000000000000000000",
2630         "ffffffffffffffffffffffffc0000000",
2631         "e2775e4b59c1bc2e31a2078c11b5a08c",
2632
2633         "0000000000000000000000000000000000000000000000000000000000000000",
2634         "ffffffffffffffffffffffffe0000000",
2635         "2be1fae5048a25582a679ca10905eb80",
2636
2637         "0000000000000000000000000000000000000000000000000000000000000000",
2638         "fffffffffffffffffffffffff0000000",
2639         "da86f292c6f41ea34fb2068df75ecc29",
2640
2641         "0000000000000000000000000000000000000000000000000000000000000000",
2642         "fffffffffffffffffffffffff8000000",
2643         "220df19f85d69b1b562fa69a3c5beca5",
2644
2645         "0000000000000000000000000000000000000000000000000000000000000000",
2646         "fffffffffffffffffffffffffc000000",
2647         "1f11d5d0355e0b556ccdb6c7f5083b4d",
2648
2649         "0000000000000000000000000000000000000000000000000000000000000000",
2650         "fffffffffffffffffffffffffe000000",
2651         "62526b78be79cb384633c91f83b4151b",
2652
2653         "0000000000000000000000000000000000000000000000000000000000000000",
2654         "ffffffffffffffffffffffffff000000",
2655         "90ddbcb950843592dd47bbef00fdc876",
2656
2657         "0000000000000000000000000000000000000000000000000000000000000000",
2658         "ffffffffffffffffffffffffff800000",
2659         "2fd0e41c5b8402277354a7391d2618e2",
2660
2661         "0000000000000000000000000000000000000000000000000000000000000000",
2662         "ffffffffffffffffffffffffffc00000",
2663         "3cdf13e72dee4c581bafec70b85f9660",
2664
2665         "0000000000000000000000000000000000000000000000000000000000000000",
2666         "ffffffffffffffffffffffffffe00000",
2667         "afa2ffc137577092e2b654fa199d2c43",
2668
2669         "0000000000000000000000000000000000000000000000000000000000000000",
2670         "fffffffffffffffffffffffffff00000",
2671         "8d683ee63e60d208e343ce48dbc44cac",
2672
2673         "0000000000000000000000000000000000000000000000000000000000000000",
2674         "fffffffffffffffffffffffffff80000",
2675         "705a4ef8ba2133729c20185c3d3a4763",
2676
2677         "0000000000000000000000000000000000000000000000000000000000000000",
2678         "fffffffffffffffffffffffffffc0000",
2679         "0861a861c3db4e94194211b77ed761b9",
2680
2681         "0000000000000000000000000000000000000000000000000000000000000000",
2682         "fffffffffffffffffffffffffffe0000",
2683         "4b00c27e8b26da7eab9d3a88dec8b031",
2684
2685         "0000000000000000000000000000000000000000000000000000000000000000",
2686         "ffffffffffffffffffffffffffff0000",
2687         "5f397bf03084820cc8810d52e5b666e9",
2688
2689         "0000000000000000000000000000000000000000000000000000000000000000",
2690         "ffffffffffffffffffffffffffff8000",
2691         "63fafabb72c07bfbd3ddc9b1203104b8",
2692
2693         "0000000000000000000000000000000000000000000000000000000000000000",
2694         "ffffffffffffffffffffffffffffc000",
2695         "683e2140585b18452dd4ffbb93c95df9",
2696
2697         "0000000000000000000000000000000000000000000000000000000000000000",
2698         "ffffffffffffffffffffffffffffe000",
2699         "286894e48e537f8763b56707d7d155c8",
2700
2701         "0000000000000000000000000000000000000000000000000000000000000000",
2702         "fffffffffffffffffffffffffffff000",
2703         "a423deabc173dcf7e2c4c53e77d37cd1",
2704
2705         "0000000000000000000000000000000000000000000000000000000000000000",
2706         "fffffffffffffffffffffffffffff800",
2707         "eb8168313e1cfdfdb5e986d5429cf172",
2708
2709         "0000000000000000000000000000000000000000000000000000000000000000",
2710         "fffffffffffffffffffffffffffffc00",
2711         "27127daafc9accd2fb334ec3eba52323",
2712
2713         "0000000000000000000000000000000000000000000000000000000000000000",
2714         "fffffffffffffffffffffffffffffe00",
2715         "ee0715b96f72e3f7a22a5064fc592f4c",
2716
2717         "0000000000000000000000000000000000000000000000000000000000000000",
2718         "ffffffffffffffffffffffffffffff00",
2719         "29ee526770f2a11dcfa989d1ce88830f",
2720
2721         "0000000000000000000000000000000000000000000000000000000000000000",
2722         "ffffffffffffffffffffffffffffff80",
2723         "0493370e054b09871130fe49af730a5a",
2724
2725         "0000000000000000000000000000000000000000000000000000000000000000",
2726         "ffffffffffffffffffffffffffffffc0",
2727         "9b7b940f6c509f9e44a4ee140448ee46",
2728
2729         "0000000000000000000000000000000000000000000000000000000000000000",
2730         "ffffffffffffffffffffffffffffffe0",
2731         "2915be4a1ecfdcbe3e023811a12bb6c7",
2732
2733         "0000000000000000000000000000000000000000000000000000000000000000",
2734         "fffffffffffffffffffffffffffffff0",
2735         "7240e524bc51d8c4d440b1be55d1062c",
2736
2737         "0000000000000000000000000000000000000000000000000000000000000000",
2738         "fffffffffffffffffffffffffffffff8",
2739         "da63039d38cb4612b2dc36ba26684b93",
2740
2741         "0000000000000000000000000000000000000000000000000000000000000000",
2742         "fffffffffffffffffffffffffffffffc",
2743         "0f59cb5a4b522e2ac56c1a64f558ad9a",
2744
2745         "0000000000000000000000000000000000000000000000000000000000000000",
2746         "fffffffffffffffffffffffffffffffe",
2747         "7bfe9d876c6d63c1d035da8fe21c409d",
2748
2749         "0000000000000000000000000000000000000000000000000000000000000000",
2750         "ffffffffffffffffffffffffffffffff",
2751         "acdace8078a32b1a182bfa4987ca1347",
2752
2753         /*
2754          * Table end marker.
2755          */
2756         NULL
2757 };
2758
2759 /*
2760  * AES known-answer tests for CBC. Order: key, IV, plaintext, ciphertext.
2761  */
2762 static const char *const KAT_AES_CBC[] = {
2763         /*
2764          * From NIST validation suite "Multiblock Message Test"
2765          * (cbcmmt128.rsp).
2766          */
2767         "1f8e4973953f3fb0bd6b16662e9a3c17",
2768         "2fe2b333ceda8f98f4a99b40d2cd34a8",
2769         "45cf12964fc824ab76616ae2f4bf0822",
2770         "0f61c4d44c5147c03c195ad7e2cc12b2",
2771
2772         "0700d603a1c514e46b6191ba430a3a0c",
2773         "aad1583cd91365e3bb2f0c3430d065bb",
2774         "068b25c7bfb1f8bdd4cfc908f69dffc5ddc726a197f0e5f720f730393279be91",
2775         "c4dc61d9725967a3020104a9738f23868527ce839aab1752fd8bdb95a82c4d00",
2776
2777         "3348aa51e9a45c2dbe33ccc47f96e8de",
2778         "19153c673160df2b1d38c28060e59b96",
2779         "9b7cee827a26575afdbb7c7a329f887238052e3601a7917456ba61251c214763d5e1847a6ad5d54127a399ab07ee3599",
2780         "d5aed6c9622ec451a15db12819952b6752501cf05cdbf8cda34a457726ded97818e1f127a28d72db5652749f0c6afee5",
2781
2782         "b7f3c9576e12dd0db63e8f8fac2b9a39",
2783         "c80f095d8bb1a060699f7c19974a1aa0",
2784         "9ac19954ce1319b354d3220460f71c1e373f1cd336240881160cfde46ebfed2e791e8d5a1a136ebd1dc469dec00c4187722b841cdabcb22c1be8a14657da200e",
2785         "19b9609772c63f338608bf6eb52ca10be65097f89c1e0905c42401fd47791ae2c5440b2d473116ca78bd9ff2fb6015cfd316524eae7dcb95ae738ebeae84a467",
2786
2787         "b6f9afbfe5a1562bba1368fc72ac9d9c",
2788         "3f9d5ebe250ee7ce384b0d00ee849322",
2789         "db397ec22718dbffb9c9d13de0efcd4611bf792be4fce0dc5f25d4f577ed8cdbd4eb9208d593dda3d4653954ab64f05676caa3ce9bfa795b08b67ceebc923fdc89a8c431188e9e482d8553982cf304d1",
2790         "10ea27b19e16b93af169c4a88e06e35c99d8b420980b058e34b4b8f132b13766f72728202b089f428fecdb41c79f8aa0d0ef68f5786481cca29e2126f69bc14160f1ae2187878ba5c49cf3961e1b7ee9",
2791
2792         "bbe7b7ba07124ff1ae7c3416fe8b465e",
2793         "7f65b5ee3630bed6b84202d97fb97a1e",
2794         "2aad0c2c4306568bad7447460fd3dac054346d26feddbc9abd9110914011b4794be2a9a00a519a51a5b5124014f4ed2735480db21b434e99a911bb0b60fe0253763725b628d5739a5117b7ee3aefafc5b4c1bf446467e7bf5f78f31ff7caf187",
2795         "3b8611bfc4973c5cd8e982b073b33184cd26110159172e44988eb5ff5661a1e16fad67258fcbfee55469267a12dc374893b4e3533d36f5634c3095583596f135aa8cd1138dc898bc5651ee35a92ebf89ab6aeb5366653bc60a70e0074fc11efe",
2796
2797         "89a553730433f7e6d67d16d373bd5360",
2798         "f724558db3433a523f4e51a5bea70497",
2799         "807bc4ea684eedcfdcca30180680b0f1ae2814f35f36d053c5aea6595a386c1442770f4d7297d8b91825ee7237241da8925dd594ccf676aecd46ca2068e8d37a3a0ec8a7d5185a201e663b5ff36ae197110188a23503763b8218826d23ced74b31e9f6e2d7fbfa6cb43420c7807a8625",
2800         "406af1429a478c3d07e555c5287a60500d37fc39b68e5bbb9bafd6ddb223828561d6171a308d5b1a4551e8a5e7d572918d25c968d3871848d2f16635caa9847f38590b1df58ab5efb985f2c66cfaf86f61b3f9c0afad6c963c49cee9b8bc81a2ddb06c967f325515a4849eec37ce721a",
2801
2802         "c491ca31f91708458e29a925ec558d78",
2803         "9ef934946e5cd0ae97bd58532cb49381",
2804         "cb6a787e0dec56f9a165957f81af336ca6b40785d9e94093c6190e5152649f882e874d79ac5e167bd2a74ce5ae088d2ee854f6539e0a94796b1e1bd4c9fcdbc79acbef4d01eeb89776d18af71ae2a4fc47dd66df6c4dbe1d1850e466549a47b636bcc7c2b3a62495b56bb67b6d455f1eebd9bfefecbca6c7f335cfce9b45cb9d",
2805         "7b2931f5855f717145e00f152a9f4794359b1ffcb3e55f594e33098b51c23a6c74a06c1d94fded7fd2ae42c7db7acaef5844cb33aeddc6852585ed0020a6699d2cb53809cefd169148ce42292afab063443978306c582c18b9ce0da3d084ce4d3c482cfd8fcf1a85084e89fb88b40a084d5e972466d07666126fb761f84078f2",
2806
2807         "f6e87d71b0104d6eb06a68dc6a71f498",
2808         "1c245f26195b76ebebc2edcac412a2f8",
2809         "f82bef3c73a6f7f80db285726d691db6bf55eec25a859d3ba0e0445f26b9bb3b16a3161ed1866e4dd8f2e5f8ecb4e46d74a7a78c20cdfc7bcc9e479ba7a0caba9438238ad0c01651d5d98de37f03ddce6e6b4bd4ab03cf9e8ed818aedfa1cf963b932067b97d776dce1087196e7e913f7448e38244509f0caf36bd8217e15336d35c149fd4e41707893fdb84014f8729",
2810         "b09512f3eff9ed0d85890983a73dadbb7c3678d52581be64a8a8fc586f490f2521297a478a0598040ebd0f5509fafb0969f9d9e600eaef33b1b93eed99687b167f89a5065aac439ce46f3b8d22d30865e64e45ef8cd30b6984353a844a11c8cd60dba0e8866b3ee30d24b3fa8a643b328353e06010fa8273c8fd54ef0a2b6930e5520aae5cd5902f9b86a33592ca4365",
2811
2812         "2c14413751c31e2730570ba3361c786b",
2813         "1dbbeb2f19abb448af849796244a19d7",
2814         "40d930f9a05334d9816fe204999c3f82a03f6a0457a8c475c94553d1d116693adc618049f0a769a2eed6a6cb14c0143ec5cccdbc8dec4ce560cfd206225709326d4de7948e54d603d01b12d7fed752fb23f1aa4494fbb00130e9ded4e77e37c079042d828040c325b1a5efd15fc842e44014ca4374bf38f3c3fc3ee327733b0c8aee1abcd055772f18dc04603f7b2c1ea69ff662361f2be0a171bbdcea1e5d3f",
2815         "6be8a12800455a320538853e0cba31bd2d80ea0c85164a4c5c261ae485417d93effe2ebc0d0a0b51d6ea18633d210cf63c0c4ddbc27607f2e81ed9113191ef86d56f3b99be6c415a4150299fb846ce7160b40b63baf1179d19275a2e83698376d28b92548c68e06e6d994e2c1501ed297014e702cdefee2f656447706009614d801de1caaf73f8b7fa56cf1ba94b631933bbe577624380850f117435a0355b2b",
2816
2817         /*
2818          * From NIST validation suite "Multiblock Message Test"
2819          * (cbcmmt192.rsp).
2820          */
2821         "ba75f4d1d9d7cf7f551445d56cc1a8ab2a078e15e049dc2c",
2822         "531ce78176401666aa30db94ec4a30eb",
2823         "c51fc276774dad94bcdc1d2891ec8668",
2824         "70dd95a14ee975e239df36ff4aee1d5d",
2825
2826         "eab3b19c581aa873e1981c83ab8d83bbf8025111fb2e6b21",
2827         "f3d6667e8d4d791e60f7505ba383eb05",
2828         "9d4e4cccd1682321856df069e3f1c6fa391a083a9fb02d59db74c14081b3acc4",
2829         "51d44779f90d40a80048276c035cb49ca2a47bcb9b9cf7270b9144793787d53f",
2830
2831         "16c93bb398f1fc0cf6d68fc7a5673cdf431fa147852b4a2d",
2832         "eaaeca2e07ddedf562f94df63f0a650f",
2833         "c5ce958613bf741718c17444484ebaf1050ddcacb59b9590178cbe69d7ad7919608cb03af13bbe04f3506b718a301ea0",
2834         "ed6a50e0c6921d52d6647f75d67b4fd56ace1fedb8b5a6a997b4d131640547d22c5d884a75e6752b5846b5b33a5181f4",
2835
2836         "067bb17b4df785697eaccf961f98e212cb75e6797ce935cb",
2837         "8b59c9209c529ca8391c9fc0ce033c38",
2838         "db3785a889b4bd387754da222f0e4c2d2bfe0d79e05bc910fba941beea30f1239eacf0068f4619ec01c368e986fca6b7c58e490579d29611bd10087986eff54f",
2839         "d5f5589760bf9c762228fde236de1fa2dd2dad448db3fa9be0c4196efd46a35c84dd1ac77d9db58c95918cb317a6430a08d2fb6a8e8b0f1c9b72c7a344dc349f",
2840
2841         "0fd39de83e0be77a79c8a4a612e3dd9c8aae2ce35e7a2bf8",
2842         "7e1d629b84f93b079be51f9a5f5cb23c",
2843         "38fbda37e28fa86d9d83a4345e419dea95d28c7818ff25925db6ac3aedaf0a86154e20a4dfcc5b1b4192895393e5eb5846c88bdbd41ecf7af3104f410eaee470f5d9017ed460475f626953035a13db1f",
2844         "edadae2f9a45ff3473e02d904c94d94a30a4d92da4deb6bcb4b0774472694571842039f21c496ef93fd658842c735f8a81fcd0aa578442ab893b18f606aed1bab11f81452dd45e9b56adf2eccf4ea095",
2845
2846         "e3fecc75f0075a09b383dfd389a3d33cc9b854b3b254c0f4",
2847         "36eab883afef936cc38f63284619cd19",
2848         "931b2f5f3a5820d53a6beaaa6431083a3488f4eb03b0f5b57ef838e1579623103bd6e6800377538b2e51ef708f3c4956432e8a8ee6a34e190642b26ad8bdae6c2af9a6c7996f3b6004d2671e41f1c9f40ee03d1c4a52b0a0654a331f15f34dce",
2849         "75395974bd32b3665654a6c8e396b88ae34b123575872a7ab687d8e76b46df911a8a590cd01d2f5c330be3a6626e9dd3aa5e10ed14e8ff829811b6fed50f3f533ca4385a1cbca78f5c4744e50f2f8359165c2485d1324e76c3eae76a0ccac629",
2850
2851         "f9c27565eb07947c8cb51b79248430f7b1066c3d2fdc3d13",
2852         "2bd67cc89ab7948d644a49672843cbd9",
2853         "6abcc270173cf114d44847e911a050db57ba7a2e2c161c6f37ccb6aaa4677bddcaf50cad0b5f8758fcf7c0ebc650ceb5cd52cafb8f8dd3edcece55d9f1f08b9fa8f54365cf56e28b9596a7e1dd1d3418e4444a7724add4cf79d527b183ec88de4be4eeff29c80a97e54f85351cb189ee",
2854         "ca282924a61187feb40520979106e5cc861957f23828dcb7285e0eaac8a0ca2a6b60503d63d6039f4693dba32fa1f73ae2e709ca94911f28a5edd1f30eaddd54680c43acc9c74cd90d8bb648b4e544275f47e514daa20697f66c738eb30337f017fca1a26da4d1a0cc0a0e98e2463070",
2855
2856         "fb09cf9e00dbf883689d079c920077c0073c31890b55bab5",
2857         "e3c89bd097c3abddf64f4881db6dbfe2",
2858         "c1a37683fb289467dd1b2c89efba16bbd2ee24cf18d19d44596ded2682c79a2f711c7a32bf6a24badd32a4ee637c73b7a41da6258635650f91fb9ffa45bdfc3cb122136241b3deced8996aa51ea8d3e81c9d70e006a44bc0571ed48623a0d622a93fa9da290baaedf5d9e876c94620945ff8ecc83f27379ed55cf490c5790f27",
2859         "8158e21420f25b59d6ae943fa1cbf21f02e979f419dab0126a721b7eef55bee9ad97f5ccff7d239057bbc19a8c378142f7672f1d5e7e17d7bebcb0070e8355cace6660171a53b61816ae824a6ef69ce470b6ffd3b5bb4b438874d91d27854d3b6f25860d3868958de3307d62b1339bdddb8a318c0ce0f33c17caf0e9f6040820",
2860
2861         "bca6fa3c67fd294e958f66fe8bd64f45f428f5bc8e9733a7",
2862         "92a47f2833f1450d1da41717bdc6e83c",
2863         "5becbc31d8bead6d36ae014a5863d14a431e6b55d29ea6baaa417271716db3a33b2e506b452086dfe690834ac2de30bc41254ec5401ec47d064237c7792fdcd7914d8af20eb114756642d519021a8c75a92f6bc53d326ae9a5b7e1b10a9756574692934d9939fc399e0c203f7edf8e7e6482eadd31a0400770e897b48c6bca2b404593045080e93377358c42a0f4dede",
2864         "926db248cc1ba20f0c57631a7c8aef094f791937b905949e3460240e8bfa6fa483115a1b310b6e4369caebc5262888377b1ddaa5800ea496a2bdff0f9a1031e7129c9a20e35621e7f0b8baca0d87030f2ae7ca8593c8599677a06fd4b26009ead08fecac24caa9cf2cad3b470c8227415a7b1e0f2eab3fad96d70a209c8bb26c627677e2531b9435ca6e3c444d195b5f",
2865
2866         "162ad50ee64a0702aa551f571dedc16b2c1b6a1e4d4b5eee",
2867         "24408038161a2ccae07b029bb66355c1",
2868         "be8abf00901363987a82cc77d0ec91697ba3857f9e4f84bd79406c138d02698f003276d0449120bef4578d78fecabe8e070e11710b3f0a2744bd52434ec70015884c181ebdfd51c604a71c52e4c0e110bc408cd462b248a80b8a8ac06bb952ac1d7faed144807f1a731b7febcaf7835762defe92eccfc7a9944e1c702cffe6bc86733ed321423121085ac02df8962bcbc1937092eebf0e90a8b20e3dd8c244ae",
2869         "c82cf2c476dea8cb6a6e607a40d2f0391be82ea9ec84a537a6820f9afb997b76397d005424faa6a74dc4e8c7aa4a8900690f894b6d1dca80675393d2243adac762f159301e357e98b724762310cd5a7bafe1c2a030dba46fd93a9fdb89cc132ca9c17dc72031ec6822ee5a9d99dbca66c784c01b0885cbb62e29d97801927ec415a5d215158d325f9ee689437ad1b7684ad33c0d92739451ac87f39ff8c31b84",
2870
2871         /*
2872          * From NIST validation suite "Multiblock Message Test"
2873          * (cbcmmt256.rsp).
2874          */
2875         "6ed76d2d97c69fd1339589523931f2a6cff554b15f738f21ec72dd97a7330907",
2876         "851e8764776e6796aab722dbb644ace8",
2877         "6282b8c05c5c1530b97d4816ca434762",
2878         "6acc04142e100a65f51b97adf5172c41",
2879
2880         "dce26c6b4cfb286510da4eecd2cffe6cdf430f33db9b5f77b460679bd49d13ae",
2881         "fdeaa134c8d7379d457175fd1a57d3fc",
2882         "50e9eee1ac528009e8cbcd356975881f957254b13f91d7c6662d10312052eb00",
2883         "2fa0df722a9fd3b64cb18fb2b3db55ff2267422757289413f8f657507412a64c",
2884
2885         "fe8901fecd3ccd2ec5fdc7c7a0b50519c245b42d611a5ef9e90268d59f3edf33",
2886         "bd416cb3b9892228d8f1df575692e4d0",
2887         "8d3aa196ec3d7c9b5bb122e7fe77fb1295a6da75abe5d3a510194d3a8a4157d5c89d40619716619859da3ec9b247ced9",
2888         "608e82c7ab04007adb22e389a44797fed7de090c8c03ca8a2c5acd9e84df37fbc58ce8edb293e98f02b640d6d1d72464",
2889
2890         "0493ff637108af6a5b8e90ac1fdf035a3d4bafd1afb573be7ade9e8682e663e5",
2891         "c0cd2bebccbb6c49920bd5482ac756e8",
2892         "8b37f9148df4bb25956be6310c73c8dc58ea9714ff49b643107b34c9bff096a94fedd6823526abc27a8e0b16616eee254ab4567dd68e8ccd4c38ac563b13639c",
2893         "05d5c77729421b08b737e41119fa4438d1f570cc772a4d6c3df7ffeda0384ef84288ce37fc4c4c7d1125a499b051364c389fd639bdda647daa3bdadab2eb5594",
2894
2895         "9adc8fbd506e032af7fa20cf5343719de6d1288c158c63d6878aaf64ce26ca85",
2896         "11958dc6ab81e1c7f01631e9944e620f",
2897         "c7917f84f747cd8c4b4fedc2219bdbc5f4d07588389d8248854cf2c2f89667a2d7bcf53e73d32684535f42318e24cd45793950b3825e5d5c5c8fcd3e5dda4ce9246d18337ef3052d8b21c5561c8b660e",
2898         "9c99e68236bb2e929db1089c7750f1b356d39ab9d0c40c3e2f05108ae9d0c30b04832ccdbdc08ebfa426b7f5efde986ed05784ce368193bb3699bc691065ac62e258b9aa4cc557e2b45b49ce05511e65",
2899
2900         "73b8faf00b3302ac99855cf6f9e9e48518690a5906a4869d4dcf48d282faae2a",
2901         "b3cb97a80a539912b8c21f450d3b9395",
2902         "3adea6e06e42c4f041021491f2775ef6378cb08824165edc4f6448e232175b60d0345b9f9c78df6596ec9d22b7b9e76e8f3c76b32d5d67273f1d83fe7a6fc3dd3c49139170fa5701b3beac61b490f0a9e13f844640c4500f9ad3087adfb0ae10",
2903         "ac3d6dbafe2e0f740632fd9e820bf6044cd5b1551cbb9cc03c0b25c39ccb7f33b83aacfca40a3265f2bbff879153448acacb88fcfb3bb7b10fe463a68c0109f028382e3e557b1adf02ed648ab6bb895df0205d26ebbfa9a5fd8cebd8e4bee3dc",
2904
2905         "9ddf3745896504ff360a51a3eb49c01b79fccebc71c3abcb94a949408b05b2c9",
2906         "e79026639d4aa230b5ccffb0b29d79bc",
2907         "cf52e5c3954c51b94c9e38acb8c9a7c76aebdaa9943eae0a1ce155a2efdb4d46985d935511471452d9ee64d2461cb2991d59fc0060697f9a671672163230f367fed1422316e52d29eceacb8768f56d9b80f6d278093c9a8acd3cfd7edd8ebd5c293859f64d2f8486ae1bd593c65bc014",
2908         "34df561bd2cfebbcb7af3b4b8d21ca5258312e7e2e4e538e35ad2490b6112f0d7f148f6aa8d522a7f3c61d785bd667db0e1dc4606c318ea4f26af4fe7d11d4dcff0456511b4aed1a0d91ba4a1fd6cd9029187bc5881a5a07fe02049d39368e83139b12825bae2c7be81e6f12c61bb5c5",
2909
2910         "458b67bf212d20f3a57fce392065582dcefbf381aa22949f8338ab9052260e1d",
2911         "4c12effc5963d40459602675153e9649",
2912         "256fd73ce35ae3ea9c25dd2a9454493e96d8633fe633b56176dce8785ce5dbbb84dbf2c8a2eeb1e96b51899605e4f13bbc11b93bf6f39b3469be14858b5b720d4a522d36feed7a329c9b1e852c9280c47db8039c17c4921571a07d1864128330e09c308ddea1694e95c84500f1a61e614197e86a30ecc28df64ccb3ccf5437aa",
2913         "90b7b9630a2378f53f501ab7beff039155008071bc8438e789932cfd3eb1299195465e6633849463fdb44375278e2fdb1310821e6492cf80ff15cb772509fb426f3aeee27bd4938882fd2ae6b5bd9d91fa4a43b17bb439ebbe59c042310163a82a5fe5388796eee35a181a1271f00be29b852d8fa759bad01ff4678f010594cd",
2914
2915         "d2412db0845d84e5732b8bbd642957473b81fb99ca8bff70e7920d16c1dbec89",
2916         "51c619fcf0b23f0c7925f400a6cacb6d",
2917         "026006c4a71a180c9929824d9d095b8faaa86fc4fa25ecac61d85ff6de92dfa8702688c02a282c1b8af4449707f22d75e91991015db22374c95f8f195d5bb0afeb03040ff8965e0e1339dba5653e174f8aa5a1b39fe3ac839ce307a4e44b4f8f1b0063f738ec18acdbff2ebfe07383e734558723e741f0a1836dafdf9de82210a9248bc113b3c1bc8b4e252ca01bd803",
2918         "0254b23463bcabec5a395eb74c8fb0eb137a07bc6f5e9f61ec0b057de305714f8fa294221c91a159c315939b81e300ee902192ec5f15254428d8772f79324ec43298ca21c00b370273ee5e5ed90e43efa1e05a5d171209fe34f9f29237dba2a6726650fd3b1321747d1208863c6c3c6b3e2d879ab5f25782f08ba8f2abbe63e0bedb4a227e81afb36bb6645508356d34",
2919
2920         "48be597e632c16772324c8d3fa1d9c5a9ecd010f14ec5d110d3bfec376c5532b",
2921         "d6d581b8cf04ebd3b6eaa1b53f047ee1",
2922         "0c63d413d3864570e70bb6618bf8a4b9585586688c32bba0a5ecc1362fada74ada32c52acfd1aa7444ba567b4e7daaecf7cc1cb29182af164ae5232b002868695635599807a9a7f07a1f137e97b1e1c9dabc89b6a5e4afa9db5855edaa575056a8f4f8242216242bb0c256310d9d329826ac353d715fa39f80cec144d6424558f9f70b98c920096e0f2c855d594885a00625880e9dfb734163cecef72cf030b8",
2923         "fc5873e50de8faf4c6b84ba707b0854e9db9ab2e9f7d707fbba338c6843a18fc6facebaf663d26296fb329b4d26f18494c79e09e779647f9bafa87489630d79f4301610c2300c19dbf3148b7cac8c4f4944102754f332e92b6f7c5e75bc6179eb877a078d4719009021744c14f13fd2a55a2b9c44d18000685a845a4f632c7c56a77306efa66a24d05d088dcd7c13fe24fc447275965db9e4d37fbc9304448cd",
2924
2925         /*
2926          * End-of-table marker.
2927          */
2928         NULL
2929 };
2930
2931 /*
2932  * AES known-answer tests for CTR. Order: key, IV, plaintext, ciphertext.
2933  */
2934 static const char *const KAT_AES_CTR[] = {
2935         /*
2936          * From RFC 3686.
2937          */
2938         "ae6852f8121067cc4bf7a5765577f39e",
2939         "000000300000000000000000",
2940         "53696e676c6520626c6f636b206d7367",
2941         "e4095d4fb7a7b3792d6175a3261311b8",
2942
2943         "7e24067817fae0d743d6ce1f32539163",
2944         "006cb6dbc0543b59da48d90b",
2945         "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
2946         "5104a106168a72d9790d41ee8edad388eb2e1efc46da57c8fce630df9141be28",
2947
2948         "7691be035e5020a8ac6e618529f9a0dc",
2949         "00e0017b27777f3f4a1786f0",
2950         "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
2951         "c1cf48a89f2ffdd9cf4652e9efdb72d74540a42bde6d7836d59a5ceaaef3105325b2072f",
2952
2953         "16af5b145fc9f579c175f93e3bfb0eed863d06ccfdb78515",
2954         "0000004836733c147d6d93cb",
2955         "53696e676c6520626c6f636b206d7367",
2956         "4b55384fe259c9c84e7935a003cbe928",
2957
2958         "7c5cb2401b3dc33c19e7340819e0f69c678c3db8e6f6a91a",
2959         "0096b03b020c6eadc2cb500d",
2960         "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
2961         "453243fc609b23327edfaafa7131cd9f8490701c5ad4a79cfc1fe0ff42f4fb00",
2962
2963         "02bf391ee8ecb159b959617b0965279bf59b60a786d3e0fe",
2964         "0007bdfd5cbd60278dcc0912",
2965         "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
2966         "96893fc55e5c722f540b7dd1ddf7e758d288bc95c69165884536c811662f2188abee0935",
2967
2968         "776beff2851db06f4c8a0542c8696f6c6a81af1eec96b4d37fc1d689e6c1c104",
2969         "00000060db5672c97aa8f0b2",
2970         "53696e676c6520626c6f636b206d7367",
2971         "145ad01dbf824ec7560863dc71e3e0c0",
2972
2973         "f6d66d6bd52d59bb0796365879eff886c66dd51a5b6a99744b50590c87a23884",
2974         "00faac24c1585ef15a43d875",
2975         "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
2976         "f05e231b3894612c49ee000b804eb2a9b8306b508f839d6a5530831d9344af1c",
2977
2978         "ff7a617ce69148e4f1726e2f43581de2aa62d9f805532edff1eed687fb54153d",
2979         "001cc5b751a51d70a1c11148",
2980         "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
2981         "eb6c52821d0bbbf7ce7594462aca4faab407df866569fd07f48cc0b583d6071f1ec0e6b8",
2982
2983         /*
2984          * End-of-table marker.
2985          */
2986         NULL
2987 };
2988
2989 static void
2990 monte_carlo_AES_encrypt(const br_block_cbcenc_class *ve,
2991         char *skey, char *splain, char *scipher)
2992 {
2993         unsigned char key[32];
2994         unsigned char buf[16];
2995         unsigned char pbuf[16];
2996         unsigned char cipher[16];
2997         size_t key_len;
2998         int i, j, k;
2999         br_aes_gen_cbcenc_keys v_ec;
3000         const br_block_cbcenc_class **ec;
3001
3002         ec = &v_ec.vtable;
3003         key_len = hextobin(key, skey);
3004         hextobin(buf, splain);
3005         hextobin(cipher, scipher);
3006         for (i = 0; i < 100; i ++) {
3007                 ve->init(ec, key, key_len);
3008                 for (j = 0; j < 1000; j ++) {
3009                         unsigned char iv[16];
3010
3011                         memcpy(pbuf, buf, sizeof buf);
3012                         memset(iv, 0, sizeof iv);
3013                         ve->run(ec, iv, buf, sizeof buf);
3014                 }
3015                 switch (key_len) {
3016                 case 16:
3017                         for (k = 0; k < 16; k ++) {
3018                                 key[k] ^= buf[k];
3019                         }
3020                         break;
3021                 case 24:
3022                         for (k = 0; k < 8; k ++) {
3023                                 key[k] ^= pbuf[8 + k];
3024                         }
3025                         for (k = 0; k < 16; k ++) {
3026                                 key[8 + k] ^= buf[k];
3027                         }
3028                         break;
3029                 default:
3030                         for (k = 0; k < 16; k ++) {
3031                                 key[k] ^= pbuf[k];
3032                                 key[16 + k] ^= buf[k];
3033                         }
3034                         break;
3035                 }
3036                 printf(".");
3037                 fflush(stdout);
3038         }
3039         printf(" ");
3040         fflush(stdout);
3041         check_equals("MC AES encrypt", buf, cipher, sizeof buf);
3042 }
3043
3044 static void
3045 monte_carlo_AES_decrypt(const br_block_cbcdec_class *vd,
3046         char *skey, char *scipher, char *splain)
3047 {
3048         unsigned char key[32];
3049         unsigned char buf[16];
3050         unsigned char pbuf[16];
3051         unsigned char plain[16];
3052         size_t key_len;
3053         int i, j, k;
3054         br_aes_gen_cbcdec_keys v_dc;
3055         const br_block_cbcdec_class **dc;
3056
3057         dc = &v_dc.vtable;
3058         key_len = hextobin(key, skey);
3059         hextobin(buf, scipher);
3060         hextobin(plain, splain);
3061         for (i = 0; i < 100; i ++) {
3062                 vd->init(dc, key, key_len);
3063                 for (j = 0; j < 1000; j ++) {
3064                         unsigned char iv[16];
3065
3066                         memcpy(pbuf, buf, sizeof buf);
3067                         memset(iv, 0, sizeof iv);
3068                         vd->run(dc, iv, buf, sizeof buf);
3069                 }
3070                 switch (key_len) {
3071                 case 16:
3072                         for (k = 0; k < 16; k ++) {
3073                                 key[k] ^= buf[k];
3074                         }
3075                         break;
3076                 case 24:
3077                         for (k = 0; k < 8; k ++) {
3078                                 key[k] ^= pbuf[8 + k];
3079                         }
3080                         for (k = 0; k < 16; k ++) {
3081                                 key[8 + k] ^= buf[k];
3082                         }
3083                         break;
3084                 default:
3085                         for (k = 0; k < 16; k ++) {
3086                                 key[k] ^= pbuf[k];
3087                                 key[16 + k] ^= buf[k];
3088                         }
3089                         break;
3090                 }
3091                 printf(".");
3092                 fflush(stdout);
3093         }
3094         printf(" ");
3095         fflush(stdout);
3096         check_equals("MC AES decrypt", buf, plain, sizeof buf);
3097 }
3098
3099 static void
3100 test_AES_generic(char *name,
3101         const br_block_cbcenc_class *ve,
3102         const br_block_cbcdec_class *vd,
3103         const br_block_ctr_class *vc,
3104         int with_MC, int with_CBC)
3105 {
3106         size_t u;
3107
3108         printf("Test %s: ", name);
3109         fflush(stdout);
3110
3111         if (ve->block_size != 16 || vd->block_size != 16
3112                 || ve->log_block_size != 4 || vd->log_block_size != 4)
3113         {
3114                 fprintf(stderr, "%s failed: wrong block size\n", name);
3115                 exit(EXIT_FAILURE);
3116         }
3117
3118         for (u = 0; KAT_AES[u]; u += 3) {
3119                 unsigned char key[32];
3120                 unsigned char plain[16];
3121                 unsigned char cipher[16];
3122                 unsigned char buf[16];
3123                 unsigned char iv[16];
3124                 size_t key_len;
3125                 br_aes_gen_cbcenc_keys v_ec;
3126                 br_aes_gen_cbcdec_keys v_dc;
3127                 const br_block_cbcenc_class **ec;
3128                 const br_block_cbcdec_class **dc;
3129
3130                 ec = &v_ec.vtable;
3131                 dc = &v_dc.vtable;
3132                 key_len = hextobin(key, KAT_AES[u]);
3133                 hextobin(plain, KAT_AES[u + 1]);
3134                 hextobin(cipher, KAT_AES[u + 2]);
3135                 ve->init(ec, key, key_len);
3136                 memcpy(buf, plain, sizeof plain);
3137                 memset(iv, 0, sizeof iv);
3138                 ve->run(ec, iv, buf, sizeof buf);
3139                 check_equals("KAT AES encrypt", buf, cipher, sizeof cipher);
3140                 vd->init(dc, key, key_len);
3141                 memset(iv, 0, sizeof iv);
3142                 vd->run(dc, iv, buf, sizeof buf);
3143                 check_equals("KAT AES decrypt", buf, plain, sizeof plain);
3144         }
3145
3146         if (with_CBC) {
3147                 for (u = 0; KAT_AES_CBC[u]; u += 4) {
3148                         unsigned char key[32];
3149                         unsigned char ivref[16];
3150                         unsigned char plain[200];
3151                         unsigned char cipher[200];
3152                         unsigned char buf[200];
3153                         unsigned char iv[16];
3154                         size_t key_len, data_len, v;
3155                         br_aes_gen_cbcenc_keys v_ec;
3156                         br_aes_gen_cbcdec_keys v_dc;
3157                         const br_block_cbcenc_class **ec;
3158                         const br_block_cbcdec_class **dc;
3159
3160                         ec = &v_ec.vtable;
3161                         dc = &v_dc.vtable;
3162                         key_len = hextobin(key, KAT_AES_CBC[u]);
3163                         hextobin(ivref, KAT_AES_CBC[u + 1]);
3164                         data_len = hextobin(plain, KAT_AES_CBC[u + 2]);
3165                         hextobin(cipher, KAT_AES_CBC[u + 3]);
3166                         ve->init(ec, key, key_len);
3167
3168                         memcpy(buf, plain, data_len);
3169                         memcpy(iv, ivref, 16);
3170                         ve->run(ec, iv, buf, data_len);
3171                         check_equals("KAT CBC AES encrypt",
3172                                 buf, cipher, data_len);
3173                         vd->init(dc, key, key_len);
3174                         memcpy(iv, ivref, 16);
3175                         vd->run(dc, iv, buf, data_len);
3176                         check_equals("KAT CBC AES decrypt",
3177                                 buf, plain, data_len);
3178
3179                         memcpy(buf, plain, data_len);
3180                         memcpy(iv, ivref, 16);
3181                         for (v = 0; v < data_len; v += 16) {
3182                                 ve->run(ec, iv, buf + v, 16);
3183                         }
3184                         check_equals("KAT CBC AES encrypt (2)",
3185                                 buf, cipher, data_len);
3186                         memcpy(iv, ivref, 16);
3187                         for (v = 0; v < data_len; v += 16) {
3188                                 vd->run(dc, iv, buf + v, 16);
3189                         }
3190                         check_equals("KAT CBC AES decrypt (2)",
3191                                 buf, plain, data_len);
3192                 }
3193
3194                 /*
3195                  * We want to check proper IV management for CBC:
3196                  * encryption and decryption must properly copy the _last_
3197                  * encrypted block as new IV, for all sizes.
3198                  */
3199                 for (u = 1; u <= 35; u ++) {
3200                         br_hmac_drbg_context rng;
3201                         unsigned char x;
3202                         size_t key_len, data_len;
3203                         size_t v;
3204
3205                         br_hmac_drbg_init(&rng, &br_sha256_vtable,
3206                                 "seed for AES/CBC", 16);
3207                         x = u;
3208                         br_hmac_drbg_update(&rng, &x, 1);
3209                         data_len = u << 4;
3210                         for (key_len = 16; key_len <= 32; key_len += 16) {
3211                                 unsigned char key[32];
3212                                 unsigned char iv[16], iv1[16], iv2[16];
3213                                 unsigned char plain[35 * 16];
3214                                 unsigned char tmp1[sizeof plain];
3215                                 unsigned char tmp2[sizeof plain];
3216                                 br_aes_gen_cbcenc_keys v_ec;
3217                                 br_aes_gen_cbcdec_keys v_dc;
3218                                 const br_block_cbcenc_class **ec;
3219                                 const br_block_cbcdec_class **dc;
3220
3221                                 br_hmac_drbg_generate(&rng, key, key_len);
3222                                 br_hmac_drbg_generate(&rng, iv, sizeof iv);
3223                                 br_hmac_drbg_generate(&rng, plain, data_len);
3224
3225                                 ec = &v_ec.vtable;
3226                                 ve->init(ec, key, key_len);
3227                                 memcpy(iv1, iv, sizeof iv);
3228                                 memcpy(tmp1, plain, data_len);
3229                                 ve->run(ec, iv1, tmp1, data_len);
3230                                 check_equals("IV CBC AES (1)",
3231                                         tmp1 + data_len - 16, iv1, 16);
3232                                 memcpy(iv2, iv, sizeof iv);
3233                                 memcpy(tmp2, plain, data_len);
3234                                 for (v = 0; v < data_len; v += 16) {
3235                                         ve->run(ec, iv2, tmp2 + v, 16);
3236                                 }
3237                                 check_equals("IV CBC AES (2)",
3238                                         tmp2 + data_len - 16, iv2, 16);
3239                                 check_equals("IV CBC AES (3)",
3240                                         tmp1, tmp2, data_len);
3241
3242                                 dc = &v_dc.vtable;
3243                                 vd->init(dc, key, key_len);
3244                                 memcpy(iv1, iv, sizeof iv);
3245                                 vd->run(dc, iv1, tmp1, data_len);
3246                                 check_equals("IV CBC AES (4)", iv1, iv2, 16);
3247                                 check_equals("IV CBC AES (5)",
3248                                         tmp1, plain, data_len);
3249                                 memcpy(iv2, iv, sizeof iv);
3250                                 for (v = 0; v < data_len; v += 16) {
3251                                         vd->run(dc, iv2, tmp2 + v, 16);
3252                                 }
3253                                 check_equals("IV CBC AES (6)", iv1, iv2, 16);
3254                                 check_equals("IV CBC AES (7)",
3255                                         tmp2, plain, data_len);
3256                         }
3257                 }
3258         }
3259
3260         if (vc != NULL) {
3261                 if (vc->block_size != 16 || vc->log_block_size != 4) {
3262                         fprintf(stderr, "%s failed: wrong block size\n", name);
3263                         exit(EXIT_FAILURE);
3264                 }
3265                 for (u = 0; KAT_AES_CTR[u]; u += 4) {
3266                         unsigned char key[32];
3267                         unsigned char iv[12];
3268                         unsigned char plain[200];
3269                         unsigned char cipher[200];
3270                         unsigned char buf[200];
3271                         size_t key_len, data_len, v;
3272                         uint32_t c;
3273                         br_aes_gen_ctr_keys v_xc;
3274                         const br_block_ctr_class **xc;
3275
3276                         xc = &v_xc.vtable;
3277                         key_len = hextobin(key, KAT_AES_CTR[u]);
3278                         hextobin(iv, KAT_AES_CTR[u + 1]);
3279                         data_len = hextobin(plain, KAT_AES_CTR[u + 2]);
3280                         hextobin(cipher, KAT_AES_CTR[u + 3]);
3281                         vc->init(xc, key, key_len);
3282                         memcpy(buf, plain, data_len);
3283                         vc->run(xc, iv, 1, buf, data_len);
3284                         check_equals("KAT CTR AES (1)", buf, cipher, data_len);
3285                         vc->run(xc, iv, 1, buf, data_len);
3286                         check_equals("KAT CTR AES (2)", buf, plain, data_len);
3287
3288                         memcpy(buf, plain, data_len);
3289                         c = 1;
3290                         for (v = 0; v < data_len; v += 32) {
3291                                 size_t clen;
3292
3293                                 clen = data_len - v;
3294                                 if (clen > 32) {
3295                                         clen = 32;
3296                                 }
3297                                 c = vc->run(xc, iv, c, buf + v, clen);
3298                         }
3299                         check_equals("KAT CTR AES (3)", buf, cipher, data_len);
3300
3301                         memcpy(buf, plain, data_len);
3302                         c = 1;
3303                         for (v = 0; v < data_len; v += 16) {
3304                                 size_t clen;
3305
3306                                 clen = data_len - v;
3307                                 if (clen > 16) {
3308                                         clen = 16;
3309                                 }
3310                                 c = vc->run(xc, iv, c, buf + v, clen);
3311                         }
3312                         check_equals("KAT CTR AES (4)", buf, cipher, data_len);
3313                 }
3314         }
3315
3316         if (with_MC) {
3317                 monte_carlo_AES_encrypt(
3318                         ve,
3319                         "139a35422f1d61de3c91787fe0507afd",
3320                         "b9145a768b7dc489a096b546f43b231f",
3321                         "fb2649694783b551eacd9d5db6126d47");
3322                 monte_carlo_AES_decrypt(
3323                         vd,
3324                         "0c60e7bf20ada9baa9e1ddf0d1540726",
3325                         "b08a29b11a500ea3aca42c36675b9785",
3326                         "d1d2bfdc58ffcad2341b095bce55221e");
3327
3328                 monte_carlo_AES_encrypt(
3329                         ve,
3330                         "b9a63e09e1dfc42e93a90d9bad739e5967aef672eedd5da9",
3331                         "85a1f7a58167b389cddc8a9ff175ee26",
3332                         "5d1196da8f184975e240949a25104554");
3333                 monte_carlo_AES_decrypt(
3334                         vd,
3335                         "4b97585701c03fbebdfa8555024f589f1482c58a00fdd9fd",
3336                         "d0bd0e02ded155e4516be83f42d347a4",
3337                         "b63ef1b79507a62eba3dafcec54a6328");
3338
3339                 monte_carlo_AES_encrypt(
3340                         ve,
3341                         "f9e8389f5b80712e3886cc1fa2d28a3b8c9cd88a2d4a54c6aa86ce0fef944be0",
3342                         "b379777f9050e2a818f2940cbbd9aba4",
3343                         "c5d2cb3d5b7ff0e23e308967ee074825");
3344                 monte_carlo_AES_decrypt(
3345                         vd,
3346                         "2b09ba39b834062b9e93f48373b8dd018dedf1e5ba1b8af831ebbacbc92a2643",
3347                         "89649bd0115f30bd878567610223a59d",
3348                         "e3d3868f578caf34e36445bf14cefc68");
3349         }
3350
3351         printf("done.\n");
3352         fflush(stdout);
3353 }
3354
3355 static void
3356 test_AES_big(void)
3357 {
3358         test_AES_generic("AES_big",
3359                 &br_aes_big_cbcenc_vtable,
3360                 &br_aes_big_cbcdec_vtable,
3361                 &br_aes_big_ctr_vtable,
3362                 1, 1);
3363 }
3364
3365 static void
3366 test_AES_small(void)
3367 {
3368         test_AES_generic("AES_small",
3369                 &br_aes_small_cbcenc_vtable,
3370                 &br_aes_small_cbcdec_vtable,
3371                 &br_aes_small_ctr_vtable,
3372                 1, 1);
3373 }
3374
3375 static void
3376 test_AES_ct(void)
3377 {
3378         test_AES_generic("AES_ct",
3379                 &br_aes_ct_cbcenc_vtable,
3380                 &br_aes_ct_cbcdec_vtable,
3381                 &br_aes_ct_ctr_vtable,
3382                 1, 1);
3383 }
3384
3385 static void
3386 test_AES_ct64(void)
3387 {
3388         test_AES_generic("AES_ct64",
3389                 &br_aes_ct64_cbcenc_vtable,
3390                 &br_aes_ct64_cbcdec_vtable,
3391                 &br_aes_ct64_ctr_vtable,
3392                 1, 1);
3393 }
3394
3395 static void
3396 test_AES_x86ni(void)
3397 {
3398         const br_block_cbcenc_class *x_cbcenc;
3399         const br_block_cbcdec_class *x_cbcdec;
3400         const br_block_ctr_class *x_ctr;
3401         int hcbcenc, hcbcdec, hctr;
3402
3403         x_cbcenc = br_aes_x86ni_cbcenc_get_vtable();
3404         x_cbcdec = br_aes_x86ni_cbcdec_get_vtable();
3405         x_ctr = br_aes_x86ni_ctr_get_vtable();
3406         hcbcenc = (x_cbcenc != NULL);
3407         hcbcdec = (x_cbcdec != NULL);
3408         hctr = (x_ctr != NULL);
3409         if (hcbcenc != hctr || hcbcdec != hctr) {
3410                 fprintf(stderr, "AES_x86ni availability mismatch (%d/%d/%d)\n",
3411                         hcbcenc, hcbcdec, hctr);
3412                 exit(EXIT_FAILURE);
3413         }
3414         if (hctr) {
3415                 test_AES_generic("AES_x86ni",
3416                         x_cbcenc, x_cbcdec, x_ctr, 1, 1);
3417         } else {
3418                 printf("Test AES_x86ni: UNAVAILABLE\n");
3419         }
3420 }
3421
3422 static void
3423 test_AES_pwr8(void)
3424 {
3425         const br_block_cbcenc_class *x_cbcenc;
3426         const br_block_cbcdec_class *x_cbcdec;
3427         const br_block_ctr_class *x_ctr;
3428         int hcbcenc, hcbcdec, hctr;
3429
3430         x_cbcenc = br_aes_pwr8_cbcenc_get_vtable();
3431         x_cbcdec = br_aes_pwr8_cbcdec_get_vtable();
3432         x_ctr = br_aes_pwr8_ctr_get_vtable();
3433         hcbcenc = (x_cbcenc != NULL);
3434         hcbcdec = (x_cbcdec != NULL);
3435         hctr = (x_ctr != NULL);
3436         if (hcbcenc != hctr || hcbcdec != hctr) {
3437                 fprintf(stderr, "AES_pwr8 availability mismatch (%d/%d/%d)\n",
3438                         hcbcenc, hcbcdec, hctr);
3439                 exit(EXIT_FAILURE);
3440         }
3441         if (hctr) {
3442                 test_AES_generic("AES_pwr8",
3443                         x_cbcenc, x_cbcdec, x_ctr, 1, 1);
3444         } else {
3445                 printf("Test AES_pwr8: UNAVAILABLE\n");
3446         }
3447 }
3448
3449 /*
3450  * Custom CTR + CBC-MAC AES implementation. Can also do CTR-only, and
3451  * CBC-MAC-only. The 'aes_big' implementation (CTR) is used. This is
3452  * meant for comparisons.
3453  *
3454  * If 'ctr' is NULL then no encryption/decryption is done; otherwise,
3455  * CTR encryption/decryption is performed (full-block counter) and the
3456  * 'ctr' array is updated with the new counter value.
3457  *
3458  * If 'cbcmac' is NULL then no CBC-MAC is done; otherwise, CBC-MAC is
3459  * applied on the encrypted data, with 'cbcmac' as IV and destination
3460  * buffer for the output. If 'ctr' is not NULL and 'encrypt' is non-zero,
3461  * then CBC-MAC is computed over the result of CTR processing; otherwise,
3462  * CBC-MAC is computed over the input data itself.
3463  */
3464 static void
3465 do_aes_ctrcbc(const void *key, size_t key_len, int encrypt,
3466         void *ctr, void *cbcmac, unsigned char *data, size_t len)
3467 {
3468         br_aes_big_ctr_keys bc;
3469         int i;
3470
3471         br_aes_big_ctr_init(&bc, key, key_len);
3472         for (i = 0; i < 2; i ++) {
3473                 /*
3474                  * CBC-MAC is computed on the encrypted data, so in
3475                  * first pass if decrypting, second pass if encrypting.
3476                  */
3477                 if (cbcmac != NULL
3478                         && ((encrypt && i == 1) || (!encrypt && i == 0)))
3479                 {
3480                         unsigned char zz[16];
3481                         size_t u;
3482
3483                         memcpy(zz, cbcmac, sizeof zz);
3484                         for (u = 0; u < len; u += 16) {
3485                                 unsigned char tmp[16];
3486                                 size_t v;
3487
3488                                 for (v = 0; v < 16; v ++) {
3489                                         tmp[v] = zz[v] ^ data[u + v];
3490                                 }
3491                                 memset(zz, 0, sizeof zz);
3492                                 br_aes_big_ctr_run(&bc,
3493                                         tmp, br_dec32be(tmp + 12), zz, 16);
3494                         }
3495                         memcpy(cbcmac, zz, sizeof zz);
3496                 }
3497
3498                 /*
3499                  * CTR encryption/decryption is done only in the first pass.
3500                  * We process data block per block, because the CTR-only
3501                  * class uses a 32-bit counter, while the CTR+CBC-MAC
3502                  * class uses a 128-bit counter.
3503                  */
3504                 if (ctr != NULL && i == 0) {
3505                         unsigned char zz[16];
3506                         size_t u;
3507
3508                         memcpy(zz, ctr, sizeof zz);
3509                         for (u = 0; u < len; u += 16) {
3510                                 int i;
3511
3512                                 br_aes_big_ctr_run(&bc,
3513                                         zz, br_dec32be(zz + 12), data + u, 16);
3514                                 for (i = 15; i >= 0; i --) {
3515                                         zz[i] = (zz[i] + 1) & 0xFF;
3516                                         if (zz[i] != 0) {
3517                                                 break;
3518                                         }
3519                                 }
3520                         }
3521                         memcpy(ctr, zz, sizeof zz);
3522                 }
3523         }
3524 }
3525
3526 static void
3527 test_AES_CTRCBC_inner(const char *name, const br_block_ctrcbc_class *vt)
3528 {
3529         br_hmac_drbg_context rng;
3530         size_t key_len;
3531
3532         printf("Test AES CTR/CBC-MAC %s: ", name);
3533         fflush(stdout);
3534
3535         br_hmac_drbg_init(&rng, &br_sha256_vtable, name, strlen(name));
3536         for (key_len = 16; key_len <= 32; key_len += 8) {
3537                 br_aes_gen_ctrcbc_keys bc;
3538                 unsigned char key[32];
3539                 size_t data_len;
3540
3541                 br_hmac_drbg_generate(&rng, key, key_len);
3542                 vt->init(&bc.vtable, key, key_len);
3543                 for (data_len = 0; data_len <= 512; data_len += 16) {
3544                         unsigned char plain[512];
3545                         unsigned char data1[sizeof plain];
3546                         unsigned char data2[sizeof plain];
3547                         unsigned char ctr[16], cbcmac[16];
3548                         unsigned char ctr1[16], cbcmac1[16];
3549                         unsigned char ctr2[16], cbcmac2[16];
3550                         int i;
3551
3552                         br_hmac_drbg_generate(&rng, plain, data_len);
3553
3554                         for (i = 0; i <= 16; i ++) {
3555                                 if (i == 0) {
3556                                         br_hmac_drbg_generate(&rng, ctr, 16);
3557                                 } else {
3558                                         memset(ctr, 0, i - 1);
3559                                         memset(ctr + i - 1, 0xFF, 17 - i);
3560                                 }
3561                                 br_hmac_drbg_generate(&rng, cbcmac, 16);
3562
3563                                 memcpy(data1, plain, data_len);
3564                                 memcpy(ctr1, ctr, 16);
3565                                 vt->ctr(&bc.vtable, ctr1, data1, data_len);
3566                                 memcpy(data2, plain, data_len);
3567                                 memcpy(ctr2, ctr, 16);
3568                                 do_aes_ctrcbc(key, key_len, 1,
3569                                         ctr2, NULL, data2, data_len);
3570                                 check_equals("CTR-only data",
3571                                         data1, data2, data_len);
3572                                 check_equals("CTR-only counter",
3573                                         ctr1, ctr2, 16);
3574
3575                                 memcpy(data1, plain, data_len);
3576                                 memcpy(cbcmac1, cbcmac, 16);
3577                                 vt->mac(&bc.vtable, cbcmac1, data1, data_len);
3578                                 memcpy(data2, plain, data_len);
3579                                 memcpy(cbcmac2, cbcmac, 16);
3580                                 do_aes_ctrcbc(key, key_len, 1,
3581                                         NULL, cbcmac2, data2, data_len);
3582                                 check_equals("CBC-MAC-only",
3583                                         cbcmac1, cbcmac2, 16);
3584
3585                                 memcpy(data1, plain, data_len);
3586                                 memcpy(ctr1, ctr, 16);
3587                                 memcpy(cbcmac1, cbcmac, 16);
3588                                 vt->encrypt(&bc.vtable,
3589                                         ctr1, cbcmac1, data1, data_len);
3590                                 memcpy(data2, plain, data_len);
3591                                 memcpy(ctr2, ctr, 16);
3592                                 memcpy(cbcmac2, cbcmac, 16);
3593                                 do_aes_ctrcbc(key, key_len, 1,
3594                                         ctr2, cbcmac2, data2, data_len);
3595                                 check_equals("encrypt: combined data",
3596                                         data1, data2, data_len);
3597                                 check_equals("encrypt: combined counter",
3598                                         ctr1, ctr2, 16);
3599                                 check_equals("encrypt: combined CBC-MAC",
3600                                         cbcmac1, cbcmac2, 16);
3601
3602                                 memcpy(ctr1, ctr, 16);
3603                                 memcpy(cbcmac1, cbcmac, 16);
3604                                 vt->decrypt(&bc.vtable,
3605                                         ctr1, cbcmac1, data1, data_len);
3606                                 memcpy(ctr2, ctr, 16);
3607                                 memcpy(cbcmac2, cbcmac, 16);
3608                                 do_aes_ctrcbc(key, key_len, 0,
3609                                         ctr2, cbcmac2, data2, data_len);
3610                                 check_equals("decrypt: combined data",
3611                                         data1, data2, data_len);
3612                                 check_equals("decrypt: combined counter",
3613                                         ctr1, ctr2, 16);
3614                                 check_equals("decrypt: combined CBC-MAC",
3615                                         cbcmac1, cbcmac2, 16);
3616                         }
3617
3618                         printf(".");
3619                         fflush(stdout);
3620                 }
3621
3622                 printf(" ");
3623                 fflush(stdout);
3624         }
3625
3626         printf("done.\n");
3627         fflush(stdout);
3628 }
3629
3630 static void
3631 test_AES_CTRCBC_big(void)
3632 {
3633         test_AES_CTRCBC_inner("big", &br_aes_big_ctrcbc_vtable);
3634 }
3635
3636 static void
3637 test_AES_CTRCBC_small(void)
3638 {
3639         test_AES_CTRCBC_inner("small", &br_aes_small_ctrcbc_vtable);
3640 }
3641
3642 static void
3643 test_AES_CTRCBC_ct(void)
3644 {
3645         test_AES_CTRCBC_inner("ct", &br_aes_ct_ctrcbc_vtable);
3646 }
3647
3648 static void
3649 test_AES_CTRCBC_ct64(void)
3650 {
3651         test_AES_CTRCBC_inner("ct64", &br_aes_ct64_ctrcbc_vtable);
3652 }
3653
3654 static void
3655 test_AES_CTRCBC_x86ni(void)
3656 {
3657         const br_block_ctrcbc_class *vt;
3658
3659         vt = br_aes_x86ni_ctrcbc_get_vtable();
3660         if (vt != NULL) {
3661                 test_AES_CTRCBC_inner("x86ni", vt);
3662         } else {
3663                 printf("Test AES CTR/CBC-MAC x86ni: UNAVAILABLE\n");
3664         }
3665 }
3666
3667 /*
3668  * DES known-answer tests. Order: plaintext, key, ciphertext.
3669  * (mostly from NIST SP 800-20).
3670  */
3671 static const char *const KAT_DES[] = {
3672         "10316E028C8F3B4A", "0000000000000000", "82DCBAFBDEAB6602",
3673         "8000000000000000", "0000000000000000", "95A8D72813DAA94D",
3674         "4000000000000000", "0000000000000000", "0EEC1487DD8C26D5",
3675         "2000000000000000", "0000000000000000", "7AD16FFB79C45926",
3676         "1000000000000000", "0000000000000000", "D3746294CA6A6CF3",
3677         "0800000000000000", "0000000000000000", "809F5F873C1FD761",
3678         "0400000000000000", "0000000000000000", "C02FAFFEC989D1FC",
3679         "0200000000000000", "0000000000000000", "4615AA1D33E72F10",
3680         "0100000000000000", "0000000000000000", "8CA64DE9C1B123A7",
3681         "0080000000000000", "0000000000000000", "2055123350C00858",
3682         "0040000000000000", "0000000000000000", "DF3B99D6577397C8",
3683         "0020000000000000", "0000000000000000", "31FE17369B5288C9",
3684         "0010000000000000", "0000000000000000", "DFDD3CC64DAE1642",
3685         "0008000000000000", "0000000000000000", "178C83CE2B399D94",
3686         "0004000000000000", "0000000000000000", "50F636324A9B7F80",
3687         "0002000000000000", "0000000000000000", "A8468EE3BC18F06D",
3688         "0001000000000000", "0000000000000000", "8CA64DE9C1B123A7",
3689         "0000800000000000", "0000000000000000", "A2DC9E92FD3CDE92",
3690         "0000400000000000", "0000000000000000", "CAC09F797D031287",
3691         "0000200000000000", "0000000000000000", "90BA680B22AEB525",
3692         "0000100000000000", "0000000000000000", "CE7A24F350E280B6",
3693         "0000080000000000", "0000000000000000", "882BFF0AA01A0B87",
3694         "0000040000000000", "0000000000000000", "25610288924511C2",
3695         "0000020000000000", "0000000000000000", "C71516C29C75D170",
3696         "0000010000000000", "0000000000000000", "8CA64DE9C1B123A7",
3697         "0000008000000000", "0000000000000000", "5199C29A52C9F059",
3698         "0000004000000000", "0000000000000000", "C22F0A294A71F29F",
3699         "0000002000000000", "0000000000000000", "EE371483714C02EA",
3700         "0000001000000000", "0000000000000000", "A81FBD448F9E522F",
3701         "0000000800000000", "0000000000000000", "4F644C92E192DFED",
3702         "0000000400000000", "0000000000000000", "1AFA9A66A6DF92AE",
3703         "0000000200000000", "0000000000000000", "B3C1CC715CB879D8",
3704         "0000000100000000", "0000000000000000", "8CA64DE9C1B123A7",
3705         "0000000080000000", "0000000000000000", "19D032E64AB0BD8B",
3706         "0000000040000000", "0000000000000000", "3CFAA7A7DC8720DC",
3707         "0000000020000000", "0000000000000000", "B7265F7F447AC6F3",
3708         "0000000010000000", "0000000000000000", "9DB73B3C0D163F54",
3709         "0000000008000000", "0000000000000000", "8181B65BABF4A975",
3710         "0000000004000000", "0000000000000000", "93C9B64042EAA240",
3711         "0000000002000000", "0000000000000000", "5570530829705592",
3712         "0000000001000000", "0000000000000000", "8CA64DE9C1B123A7",
3713         "0000000000800000", "0000000000000000", "8638809E878787A0",
3714         "0000000000400000", "0000000000000000", "41B9A79AF79AC208",
3715         "0000000000200000", "0000000000000000", "7A9BE42F2009A892",
3716         "0000000000100000", "0000000000000000", "29038D56BA6D2745",
3717         "0000000000080000", "0000000000000000", "5495C6ABF1E5DF51",
3718         "0000000000040000", "0000000000000000", "AE13DBD561488933",
3719         "0000000000020000", "0000000000000000", "024D1FFA8904E389",
3720         "0000000000010000", "0000000000000000", "8CA64DE9C1B123A7",
3721         "0000000000008000", "0000000000000000", "D1399712F99BF02E",
3722         "0000000000004000", "0000000000000000", "14C1D7C1CFFEC79E",
3723         "0000000000002000", "0000000000000000", "1DE5279DAE3BED6F",
3724         "0000000000001000", "0000000000000000", "E941A33F85501303",
3725         "0000000000000800", "0000000000000000", "DA99DBBC9A03F379",
3726         "0000000000000400", "0000000000000000", "B7FC92F91D8E92E9",
3727         "0000000000000200", "0000000000000000", "AE8E5CAA3CA04E85",
3728         "0000000000000100", "0000000000000000", "8CA64DE9C1B123A7",
3729         "0000000000000080", "0000000000000000", "9CC62DF43B6EED74",
3730         "0000000000000040", "0000000000000000", "D863DBB5C59A91A0",
3731         "0000000000000020", "0000000000000000", "A1AB2190545B91D7",
3732         "0000000000000010", "0000000000000000", "0875041E64C570F7",
3733         "0000000000000008", "0000000000000000", "5A594528BEBEF1CC",
3734         "0000000000000004", "0000000000000000", "FCDB3291DE21F0C0",
3735         "0000000000000002", "0000000000000000", "869EFD7F9F265A09",
3736         "0000000000000001", "0000000000000000", "8CA64DE9C1B123A7",
3737         "0000000000000000", "8000000000000000", "95F8A5E5DD31D900",
3738         "0000000000000000", "4000000000000000", "DD7F121CA5015619",
3739         "0000000000000000", "2000000000000000", "2E8653104F3834EA",
3740         "0000000000000000", "1000000000000000", "4BD388FF6CD81D4F",
3741         "0000000000000000", "0800000000000000", "20B9E767B2FB1456",
3742         "0000000000000000", "0400000000000000", "55579380D77138EF",
3743         "0000000000000000", "0200000000000000", "6CC5DEFAAF04512F",
3744         "0000000000000000", "0100000000000000", "0D9F279BA5D87260",
3745         "0000000000000000", "0080000000000000", "D9031B0271BD5A0A",
3746         "0000000000000000", "0040000000000000", "424250B37C3DD951",
3747         "0000000000000000", "0020000000000000", "B8061B7ECD9A21E5",
3748         "0000000000000000", "0010000000000000", "F15D0F286B65BD28",
3749         "0000000000000000", "0008000000000000", "ADD0CC8D6E5DEBA1",
3750         "0000000000000000", "0004000000000000", "E6D5F82752AD63D1",
3751         "0000000000000000", "0002000000000000", "ECBFE3BD3F591A5E",
3752         "0000000000000000", "0001000000000000", "F356834379D165CD",
3753         "0000000000000000", "0000800000000000", "2B9F982F20037FA9",
3754         "0000000000000000", "0000400000000000", "889DE068A16F0BE6",
3755         "0000000000000000", "0000200000000000", "E19E275D846A1298",
3756         "0000000000000000", "0000100000000000", "329A8ED523D71AEC",
3757         "0000000000000000", "0000080000000000", "E7FCE22557D23C97",
3758         "0000000000000000", "0000040000000000", "12A9F5817FF2D65D",
3759         "0000000000000000", "0000020000000000", "A484C3AD38DC9C19",
3760         "0000000000000000", "0000010000000000", "FBE00A8A1EF8AD72",
3761         "0000000000000000", "0000008000000000", "750D079407521363",
3762         "0000000000000000", "0000004000000000", "64FEED9C724C2FAF",
3763         "0000000000000000", "0000002000000000", "F02B263B328E2B60",
3764         "0000000000000000", "0000001000000000", "9D64555A9A10B852",
3765         "0000000000000000", "0000000800000000", "D106FF0BED5255D7",
3766         "0000000000000000", "0000000400000000", "E1652C6B138C64A5",
3767         "0000000000000000", "0000000200000000", "E428581186EC8F46",
3768         "0000000000000000", "0000000100000000", "AEB5F5EDE22D1A36",
3769         "0000000000000000", "0000000080000000", "E943D7568AEC0C5C",
3770         "0000000000000000", "0000000040000000", "DF98C8276F54B04B",
3771         "0000000000000000", "0000000020000000", "B160E4680F6C696F",
3772         "0000000000000000", "0000000010000000", "FA0752B07D9C4AB8",
3773         "0000000000000000", "0000000008000000", "CA3A2B036DBC8502",
3774         "0000000000000000", "0000000004000000", "5E0905517BB59BCF",
3775         "0000000000000000", "0000000002000000", "814EEB3B91D90726",
3776         "0000000000000000", "0000000001000000", "4D49DB1532919C9F",
3777         "000000000000000