#test cpuid aesni ssse3 clmul

[AES-128/GCM]
# Nist | Test Case 1
Key    = 00000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = 58E2FCCEFA7E3061367F1D57A4E7455A

# Nist | Test Case 2
Key    = 00000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 00000000000000000000000000000000
Out    = 0388DACE60B6A392F328C2B971B2FE78AB6E47D42CEC13BDF53A67B21257BDDF

# Nist | Test Case 3
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = CAFEBABEFACEDBADDECAF888
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B391AAFD255
Out    = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E091473F59854D5C2AF327CD64A62CF35ABD2BA6FAB4

# Nist | Test Case 4
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = CAFEBABEFACEDBADDECAF888
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD     = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out    = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E0915BC94FBC3221A5DB94FAE95AE7121A47

# Nist | Test Case 5
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = CAFEBABEFACEDBAD
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD     = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out    = 61353B4C2806934A777FF51FA22A4755699B2A714FCDC6F83766E5F97B6C742373806900E49F24B22B097544D4896B424989B5E1EBAC0F07C23F45983612D2E79E3B0785561BE14AACA2FCCB

# Nist | Test Case 6
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = 9313225DF88406E555909C5AFF5269AA6A7A9538534F7DA1E4C303D2A318A728C3C0C95156809539FCF0E2429A6B525416AEDBF5A0DE6A57A637B39B
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD     = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out    = 8CE24998625615B603A033ACA13FB894BE9112A5C3A211A8BA262A3CCA7E2CA701E4A9A4FBA43C90CCDCB281D48C7C6FD62875D2ACA417034C34AEE5619CC5AEFFFE0BFA462AF43C1699D050

# GCM vectors generated by OpenSSL via Python cryptography
#
# These GCM nonces are not 96 bits and so are hashed with GHASH to
# produce the counter value. For these inputs the CTR value is
# very near 2^32, which exposed a bug in GCM when the counter overflowed

Key    = 00000000000000000000000000000000
Nonce  = 0AAC82F3E53C2756034F7BD5827C9EDD
In     = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out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

Key    = 00000000000000000000000000000000
Nonce  = 63ADFF969337DB7AAA3D862A8A827558
In     = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out    = E7813D2279516D5EE54E03371B0192FE2B66EF4BF3C7F741D2B8E1809CA5C1805908ADEFE6C5884736DF98B7EBCB08110B58C384E4A2FF25644CDFEAA2104FA3B33F00B689319EF7F09B2F066AEC96DC

Key    = 00000000000000000000000000000000
Nonce  = E60108DFED8198FB286E0A77E699DA7B
In     = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out    = A833DCC2EC04BEF5ED9E7E7FB08D61244CD795C21FEE194E7AAF7D9BD66B324F39FFC46DB5A7B9E1D6703F95290027DE6AC274CAE11C632F16261B71CE97EEA6CBE8A82B4F55F5A8B5CE1B268A7B35D8



[AES-192/GCM]
# Nist | Test Case 7
Key    = 000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = cd33b28ac773f74ba00ed1f312572435

# Nist | Test Case 8
Key    = 000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 00000000000000000000000000000000
Out    = 98e7247c07f0fe411c267e4384b0f6002ff58d80033927ab8ef4d4587514f0fb

# Nist | Test Case 9
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out    = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade2569924a7c8587336bfb118024db8674a14

# Nist | Test Case 10
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda27102519498e80f1478f37ba55bd6d27618c

# Nist | Test Case 11
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = cafebabefacedbad
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f765dcc57fcf623a24094fcca40d3533f8

# Nist | Test Case 12
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373bdcf566ff291c25bbb8568fc3d376a6d9

[AES-256/GCM]
# Nist | Test Case 13
Key    = 0000000000000000000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = 530f8afbc74536b9a963b4f1c4cb738b

# Nist | Test Case 14
Key    = 0000000000000000000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 00000000000000000000000000000000
Out    = cea7403d4d606b6e074ec5d3baf39d18d0d1c8a799996bf0265b98b5d48ab919

# Nist | Test Case 15
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out    = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015adb094dac5d93471bdec1a502270e3cc6c

# Nist | Test Case 16
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853bb2d551b

# Nist | Test Case 17
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = cafebabefacedbad
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913fe2ea8f2

# Nist | Test Case 18
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3fa44a8266ee1c8eb0c8b5d4cf5ae9f19a

[AES-128/GCM(8)]
Key    = 00000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = 58E2FCCEFA7E3061


# Wycheproof GCM tests

[AES-128/GCM(8)]
# This was a 96 bit tag test, truncated since Botan GCM supports only 64/128
Key = 5b9604fe14eadba931b0ccf34843dab9
Nonce = 921d2507fa8007b7bd067d34
AD = 00112233445566778899aabbccddeeff
In =  001d0c231287c1182784554ca3a21908
Out = 49d8b9783e911913d87094d1f63cc7651e348ba07cca2cf0

[AES-128/GCM]
In = 001d0c231287c1182784554ca3a21908
Key = 5b9604fe14eadba931b0ccf34843dab9
Nonce = 028318abc1824029138141a2
Out = 26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554

In = 2035af313d1346ab00154fea78322105
Key = aa023d0478dcb2b2312498293d9a9129
Nonce = 0432bc49ac34412081288127
AD = aac39231129872a2
Out = eea945f3d0f98cc0fbab472a0cf24e874bb9b4812519dadf9e1232016d068133

In = 2035af313d1346ab00154fea78322105
Key = aa023d0478dcb2b2312498293d9a9129
Nonce = 0432bc49ac344120
AD = aac39231129872a2
Out = 64c36bb3b732034e3a7d04efc5197785b7d0dd70b00d65b97cfd080ff4b819d1

In = 02efd2e5782312827ed5d230189a2a342b277ce048462193
Key = 2034a82547276c83dd3212a813572bce
Nonce = 3254202d854734812398127a3d134421
AD = 1a0293d8f90219058902139013908190bc490890d3ff12a3
Out = 64069c2d58690561f27ee199e6b479b6369eec688672bde99b7abadd6e69c1d9ec925786534f5075