blob: 65a75873e4985d767376b84c512df8587aa46706 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
|
#test cpuid aesni ssse3 clmul
[AES-128/GCM]
# Nist | Test Case 1
Key = 00000000000000000000000000000000
Nonce = 000000000000000000000000
In =
Out = 58E2FCCEFA7E3061367F1D57A4E7455A
# Nist | Test Case 2
Key = 00000000000000000000000000000000
Nonce = 000000000000000000000000
In = 00000000000000000000000000000000
Out = 0388DACE60B6A392F328C2B971B2FE78AB6E47D42CEC13BDF53A67B21257BDDF
# Nist | Test Case 3
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = CAFEBABEFACEDBADDECAF888
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B391AAFD255
Out = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E091473F59854D5C2AF327CD64A62CF35ABD2BA6FAB4
# Nist | Test Case 4
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = CAFEBABEFACEDBADDECAF888
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E0915BC94FBC3221A5DB94FAE95AE7121A47
# Nist | Test Case 5
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = CAFEBABEFACEDBAD
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 61353B4C2806934A777FF51FA22A4755699B2A714FCDC6F83766E5F97B6C742373806900E49F24B22B097544D4896B424989B5E1EBAC0F07C23F45983612D2E79E3B0785561BE14AACA2FCCB
# Nist | Test Case 6
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = 9313225DF88406E555909C5AFF5269AA6A7A9538534F7DA1E4C303D2A318A728C3C0C95156809539FCF0E2429A6B525416AEDBF5A0DE6A57A637B39B
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 8CE24998625615B603A033ACA13FB894BE9112A5C3A211A8BA262A3CCA7E2CA701E4A9A4FBA43C90CCDCB281D48C7C6FD62875D2ACA417034C34AEE5619CC5AEFFFE0BFA462AF43C1699D050
# GCM vectors generated by OpenSSL via Python cryptography
#
# These GCM nonces are not 96 bits and so are hashed with GHASH to
# produce the counter value. For these inputs the CTR value is
# very near 2^32, which exposed a bug in GCM when the counter overflowed
Key = 00000000000000000000000000000000
Nonce = 0AAC82F3E53C2756034F7BD5827C9EDD
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out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
Key = 00000000000000000000000000000000
Nonce = 63ADFF969337DB7AAA3D862A8A827558
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = E7813D2279516D5EE54E03371B0192FE2B66EF4BF3C7F741D2B8E1809CA5C1805908ADEFE6C5884736DF98B7EBCB08110B58C384E4A2FF25644CDFEAA2104FA3B33F00B689319EF7F09B2F066AEC96DC
Key = 00000000000000000000000000000000
Nonce = E60108DFED8198FB286E0A77E699DA7B
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = A833DCC2EC04BEF5ED9E7E7FB08D61244CD795C21FEE194E7AAF7D9BD66B324F39FFC46DB5A7B9E1D6703F95290027DE6AC274CAE11C632F16261B71CE97EEA6CBE8A82B4F55F5A8B5CE1B268A7B35D8
[AES-192/GCM]
# Nist | Test Case 7
Key = 000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In =
Out = cd33b28ac773f74ba00ed1f312572435
# Nist | Test Case 8
Key = 000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In = 00000000000000000000000000000000
Out = 98e7247c07f0fe411c267e4384b0f6002ff58d80033927ab8ef4d4587514f0fb
# Nist | Test Case 9
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade2569924a7c8587336bfb118024db8674a14
# Nist | Test Case 10
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda27102519498e80f1478f37ba55bd6d27618c
# Nist | Test Case 11
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f765dcc57fcf623a24094fcca40d3533f8
# Nist | Test Case 12
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373bdcf566ff291c25bbb8568fc3d376a6d9
[AES-256/GCM]
# Nist | Test Case 13
Key = 0000000000000000000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In =
Out = 530f8afbc74536b9a963b4f1c4cb738b
# Nist | Test Case 14
Key = 0000000000000000000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In = 00000000000000000000000000000000
Out = cea7403d4d606b6e074ec5d3baf39d18d0d1c8a799996bf0265b98b5d48ab919
# Nist | Test Case 15
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015adb094dac5d93471bdec1a502270e3cc6c
# Nist | Test Case 16
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853bb2d551b
# Nist | Test Case 17
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913fe2ea8f2
# Nist | Test Case 18
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3fa44a8266ee1c8eb0c8b5d4cf5ae9f19a
[AES-128/GCM(8)]
Key = 00000000000000000000000000000000
Nonce = 000000000000000000000000
In =
Out = 58E2FCCEFA7E3061
# Wycheproof GCM tests
[AES-128/GCM(8)]
# This was a 96 bit tag test, truncated since Botan GCM supports only 64/128
Key = 5b9604fe14eadba931b0ccf34843dab9
Nonce = 921d2507fa8007b7bd067d34
AD = 00112233445566778899aabbccddeeff
In = 001d0c231287c1182784554ca3a21908
Out = 49d8b9783e911913d87094d1f63cc7651e348ba07cca2cf0
[AES-128/GCM]
In = 001d0c231287c1182784554ca3a21908
Key = 5b9604fe14eadba931b0ccf34843dab9
Nonce = 028318abc1824029138141a2
Out = 26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
In = 2035af313d1346ab00154fea78322105
Key = aa023d0478dcb2b2312498293d9a9129
Nonce = 0432bc49ac34412081288127
AD = aac39231129872a2
Out = eea945f3d0f98cc0fbab472a0cf24e874bb9b4812519dadf9e1232016d068133
In = 2035af313d1346ab00154fea78322105
Key = aa023d0478dcb2b2312498293d9a9129
Nonce = 0432bc49ac344120
AD = aac39231129872a2
Out = 64c36bb3b732034e3a7d04efc5197785b7d0dd70b00d65b97cfd080ff4b819d1
In = 02efd2e5782312827ed5d230189a2a342b277ce048462193
Key = 2034a82547276c83dd3212a813572bce
Nonce = 3254202d854734812398127a3d134421
AD = 1a0293d8f90219058902139013908190bc490890d3ff12a3
Out = 64069c2d58690561f27ee199e6b479b6369eec688672bde99b7abadd6e69c1d9ec925786534f5075
|
