aboutsummaryrefslogtreecommitdiffstats
path: root/src/tests/data/aead/gcm.vec
blob: be8250792c6bf5107b3877e389ffdc49c9981367 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151

#test cpuid aesni ssse3 clmul

[AES-128/GCM]
# Nist | Test Case 1
Key    = 00000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = 58E2FCCEFA7E3061367F1D57A4E7455A

# Nist | Test Case 2
Key    = 00000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 00000000000000000000000000000000
Out    = 0388DACE60B6A392F328C2B971B2FE78AB6E47D42CEC13BDF53A67B21257BDDF

# Nist | Test Case 3
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = CAFEBABEFACEDBADDECAF888
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B391AAFD255
Out    = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E091473F59854D5C2AF327CD64A62CF35ABD2BA6FAB4

# Nist | Test Case 4
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = CAFEBABEFACEDBADDECAF888
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD     = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out    = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E0915BC94FBC3221A5DB94FAE95AE7121A47

# Nist | Test Case 5
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = CAFEBABEFACEDBAD
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD     = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out    = 61353B4C2806934A777FF51FA22A4755699B2A714FCDC6F83766E5F97B6C742373806900E49F24B22B097544D4896B424989B5E1EBAC0F07C23F45983612D2E79E3B0785561BE14AACA2FCCB

# Nist | Test Case 6
Key    = FEFFE9928665731C6D6A8F9467308308
Nonce  = 9313225DF88406E555909C5AFF5269AA6A7A9538534F7DA1E4C303D2A318A728C3C0C95156809539FCF0E2429A6B525416AEDBF5A0DE6A57A637B39B
In     = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD     = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out    = 8CE24998625615B603A033ACA13FB894BE9112A5C3A211A8BA262A3CCA7E2CA701E4A9A4FBA43C90CCDCB281D48C7C6FD62875D2ACA417034C34AEE5619CC5AEFFFE0BFA462AF43C1699D050

# GCM vectors generated by OpenSSL via Python cryptography
#
# These GCM nonces are not 96 bits and so are hashed with GHASH to
# produce the counter value. For these inputs the CTR value is
# very near 2^32, which exposed a bug in GCM when the counter overflowed

Key    = 00000000000000000000000000000000
Nonce  = 0AAC82F3E53C2756034F7BD5827C9EDD
In     = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out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

Key    = 00000000000000000000000000000000
Nonce  = 63ADFF969337DB7AAA3D862A8A827558
In     = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out    = E7813D2279516D5EE54E03371B0192FE2B66EF4BF3C7F741D2B8E1809CA5C1805908ADEFE6C5884736DF98B7EBCB08110B58C384E4A2FF25644CDFEAA2104FA3B33F00B689319EF7F09B2F066AEC96DC

Key    = 00000000000000000000000000000000
Nonce  = E60108DFED8198FB286E0A77E699DA7B
In     = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out    = A833DCC2EC04BEF5ED9E7E7FB08D61244CD795C21FEE194E7AAF7D9BD66B324F39FFC46DB5A7B9E1D6703F95290027DE6AC274CAE11C632F16261B71CE97EEA6CBE8A82B4F55F5A8B5CE1B268A7B35D8



[AES-192/GCM]
# Nist | Test Case 7
Key    = 000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = cd33b28ac773f74ba00ed1f312572435

# Nist | Test Case 8
Key    = 000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 00000000000000000000000000000000
Out    = 98e7247c07f0fe411c267e4384b0f6002ff58d80033927ab8ef4d4587514f0fb

# Nist | Test Case 9
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out    = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade2569924a7c8587336bfb118024db8674a14

# Nist | Test Case 10
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda27102519498e80f1478f37ba55bd6d27618c

# Nist | Test Case 11
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = cafebabefacedbad
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f765dcc57fcf623a24094fcca40d3533f8

# Nist | Test Case 12
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce  = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373bdcf566ff291c25bbb8568fc3d376a6d9

[AES-256/GCM]
# Nist | Test Case 13
Key    = 0000000000000000000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = 530f8afbc74536b9a963b4f1c4cb738b

# Nist | Test Case 14
Key    = 0000000000000000000000000000000000000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 00000000000000000000000000000000
Out    = cea7403d4d606b6e074ec5d3baf39d18d0d1c8a799996bf0265b98b5d48ab919

# Nist | Test Case 15
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out    = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015adb094dac5d93471bdec1a502270e3cc6c

# Nist | Test Case 16
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = cafebabefacedbaddecaf888
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853bb2d551b

# Nist | Test Case 17
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = cafebabefacedbad
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913fe2ea8f2

# Nist | Test Case 18
Key    = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce  = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In     = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD     = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out    = 5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3fa44a8266ee1c8eb0c8b5d4cf5ae9f19a

[AES-128/GCM(8)]
Key    = 00000000000000000000000000000000
Nonce  = 000000000000000000000000
In     = 
Out    = 58E2FCCEFA7E3061