From fa288c3d2e0c8051db86ff47efeda807b0173edc Mon Sep 17 00:00:00 2001
From: Jack Lloyd <jack@randombit.net>
Date: Thu, 22 Dec 2016 00:06:44 -0500
Subject: Add AES GCM tests from Wycheproof

---
 src/tests/data/aead/gcm.vec | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)

(limited to 'src/tests/data/aead')

diff --git a/src/tests/data/aead/gcm.vec b/src/tests/data/aead/gcm.vec
index be8250792..65a75873e 100644
--- a/src/tests/data/aead/gcm.vec
+++ b/src/tests/data/aead/gcm.vec
@@ -149,3 +149,38 @@ Key    = 00000000000000000000000000000000
 Nonce  = 000000000000000000000000
 In     = 
 Out    = 58E2FCCEFA7E3061
+
+
+# Wycheproof GCM tests
+
+[AES-128/GCM(8)]
+# This was a 96 bit tag test, truncated since Botan GCM supports only 64/128
+Key = 5b9604fe14eadba931b0ccf34843dab9
+Nonce = 921d2507fa8007b7bd067d34
+AD = 00112233445566778899aabbccddeeff
+In =  001d0c231287c1182784554ca3a21908
+Out = 49d8b9783e911913d87094d1f63cc7651e348ba07cca2cf0
+
+[AES-128/GCM]
+In = 001d0c231287c1182784554ca3a21908
+Key = 5b9604fe14eadba931b0ccf34843dab9
+Nonce = 028318abc1824029138141a2
+Out = 26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
+
+In = 2035af313d1346ab00154fea78322105
+Key = aa023d0478dcb2b2312498293d9a9129
+Nonce = 0432bc49ac34412081288127
+AD = aac39231129872a2
+Out = eea945f3d0f98cc0fbab472a0cf24e874bb9b4812519dadf9e1232016d068133
+
+In = 2035af313d1346ab00154fea78322105
+Key = aa023d0478dcb2b2312498293d9a9129
+Nonce = 0432bc49ac344120
+AD = aac39231129872a2
+Out = 64c36bb3b732034e3a7d04efc5197785b7d0dd70b00d65b97cfd080ff4b819d1
+
+In = 02efd2e5782312827ed5d230189a2a342b277ce048462193
+Key = 2034a82547276c83dd3212a813572bce
+Nonce = 3254202d854734812398127a3d134421
+AD = 1a0293d8f90219058902139013908190bc490890d3ff12a3
+Out = 64069c2d58690561f27ee199e6b479b6369eec688672bde99b7abadd6e69c1d9ec925786534f5075
-- 
cgit v1.2.3