CoCalc -- test

GitHub Repository: freebsd/freebsd-src
Path: blob/main/contrib/bearssl/test/test_crypto.c
³⁹⁵³⁶ views
1
/*
2
 * Copyright (c) 2016 Thomas Pornin <[email protected]>
3
 *
4
 * Permission is hereby granted, free of charge, to any person obtaining 
5
 * a copy of this software and associated documentation files (the
6
 * "Software"), to deal in the Software without restriction, including
7
 * without limitation the rights to use, copy, modify, merge, publish,
8
 * distribute, sublicense, and/or sell copies of the Software, and to
9
 * permit persons to whom the Software is furnished to do so, subject to
10
 * the following conditions:
11
 *
12
 * The above copyright notice and this permission notice shall be 
13
 * included in all copies or substantial portions of the Software.
14
 *
15
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
16
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
17
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
18
 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
19
 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
20
 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
21
 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
22
 * SOFTWARE.
23
 */
24

25
#include <stdio.h>
26
#include <stdlib.h>
27
#include <string.h>
28
#include "bearssl.h"
29
#include "inner.h"
30

31
/*
32
 * Decode an hexadecimal string. Returned value is the number of decoded
33
 * bytes.
34
 */
35
static size_t
36
hextobin(unsigned char *dst, const char *src)
37
{
38
	size_t num;
39
	unsigned acc;
40
	int z;
41

42
	num = 0;
43
	z = 0;
44
	acc = 0;
45
	while (*src != 0) {
46
		int c = *src ++;
47
		if (c >= '0' && c <= '9') {
48
			c -= '0';
49
		} else if (c >= 'A' && c <= 'F') {
50
			c -= ('A' - 10);
51
		} else if (c >= 'a' && c <= 'f') {
52
			c -= ('a' - 10);
53
		} else {
54
			continue;
55
		}
56
		if (z) {
57
			*dst ++ = (acc << 4) + c;
58
			num ++;
59
		} else {
60
			acc = c;
61
		}
62
		z = !z;
63
	}
64
	return num;
65
}
66

67
static void
68
check_equals(const char *banner, const void *v1, const void *v2, size_t len)
69
{
70
	size_t u;
71
	const unsigned char *b;
72

73
	if (memcmp(v1, v2, len) == 0) {
74
		return;
75
	}
76
	fprintf(stderr, "\n%s failed\n", banner);
77
	fprintf(stderr, "v1: ");
78
	for (u = 0, b = v1; u < len; u ++) {
79
		fprintf(stderr, "%02X", b[u]);
80
	}
81
	fprintf(stderr, "\nv2: ");
82
	for (u = 0, b = v2; u < len; u ++) {
83
		fprintf(stderr, "%02X", b[u]);
84
	}
85
	fprintf(stderr, "\n");
86
	exit(EXIT_FAILURE);
87
}
88

89
#define HASH_SIZE(cname)   br_ ## cname ## _SIZE
90

91
#define TEST_HASH(Name, cname) \
92
static void \
93
test_ ## cname ## _internal(char *data, char *refres) \
94
{ \
95
	br_ ## cname ## _context mc; \
96
	unsigned char res[HASH_SIZE(cname)], ref[HASH_SIZE(cname)]; \
97
	size_t u, n; \
98
 \
99
	hextobin(ref, refres); \
100
	n = strlen(data); \
101
	br_ ## cname ## _init(&mc); \
102
	br_ ## cname ## _update(&mc, data, n); \
103
	br_ ## cname ## _out(&mc, res); \
104
	check_equals("KAT " #Name " 1", res, ref, HASH_SIZE(cname)); \
105
	br_ ## cname ## _init(&mc); \
106
	for (u = 0; u < n; u ++) { \
107
		br_ ## cname ## _update(&mc, data + u, 1); \
108
	} \
109
	br_ ## cname ## _out(&mc, res); \
110
	check_equals("KAT " #Name " 2", res, ref, HASH_SIZE(cname)); \
111
	for (u = 0; u < n; u ++) { \
112
		br_ ## cname ## _context mc2; \
113
		br_ ## cname ## _init(&mc); \
114
		br_ ## cname ## _update(&mc, data, u); \
115
		mc2 = mc; \
116
		br_ ## cname ## _update(&mc, data + u, n - u); \
117
		br_ ## cname ## _out(&mc, res); \
118
		check_equals("KAT " #Name " 3", res, ref, HASH_SIZE(cname)); \
119
		br_ ## cname ## _update(&mc2, data + u, n - u); \
120
		br_ ## cname ## _out(&mc2, res); \
121
		check_equals("KAT " #Name " 4", res, ref, HASH_SIZE(cname)); \
122
	} \
123
	memset(&mc, 0, sizeof mc); \
124
	memset(res, 0, sizeof res); \
125
	br_ ## cname ## _vtable.init(&mc.vtable); \
126
	mc.vtable->update(&mc.vtable, data, n); \
127
	mc.vtable->out(&mc.vtable, res); \
128
	check_equals("KAT " #Name " 5", res, ref, HASH_SIZE(cname)); \
129
	memset(res, 0, sizeof res); \
130
	mc.vtable->init(&mc.vtable); \
131
	mc.vtable->update(&mc.vtable, data, n); \
132
	mc.vtable->out(&mc.vtable, res); \
133
	check_equals("KAT " #Name " 6", res, ref, HASH_SIZE(cname)); \
134
}
135

136
#define KAT_MILLION_A(Name, cname, refres)   do { \
137
		br_ ## cname ## _context mc; \
138
		unsigned char buf[1000]; \
139
		unsigned char res[HASH_SIZE(cname)], ref[HASH_SIZE(cname)]; \
140
		int i; \
141
 \
142
		hextobin(ref, refres); \
143
		memset(buf, 'a', sizeof buf); \
144
		br_ ## cname ## _init(&mc); \
145
		for (i = 0; i < 1000; i ++) { \
146
			br_ ## cname ## _update(&mc, buf, sizeof buf); \
147
		} \
148
		br_ ## cname ## _out(&mc, res); \
149
		check_equals("KAT " #Name " 5", res, ref, HASH_SIZE(cname)); \
150
	} while (0)
151

152
TEST_HASH(MD5, md5)
153
TEST_HASH(SHA-1, sha1)
154
TEST_HASH(SHA-224, sha224)
155
TEST_HASH(SHA-256, sha256)
156
TEST_HASH(SHA-384, sha384)
157
TEST_HASH(SHA-512, sha512)
158

159
static void
160
test_MD5(void)
161
{
162
	printf("Test MD5: ");
163
	fflush(stdout);
164
	test_md5_internal("", "d41d8cd98f00b204e9800998ecf8427e");
165
	test_md5_internal("a", "0cc175b9c0f1b6a831c399e269772661");
166
	test_md5_internal("abc", "900150983cd24fb0d6963f7d28e17f72");
167
	test_md5_internal("message digest", "f96b697d7cb7938d525a2f31aaf161d0");
168
	test_md5_internal("abcdefghijklmnopqrstuvwxyz",
169
		"c3fcd3d76192e4007dfb496cca67e13b");
170
	test_md5_internal("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstu"
171
		"vwxyz0123456789", "d174ab98d277d9f5a5611c2c9f419d9f");
172
	test_md5_internal("1234567890123456789012345678901234567890123456789"
173
		"0123456789012345678901234567890",
174
		"57edf4a22be3c955ac49da2e2107b67a");
175
	KAT_MILLION_A(MD5, md5,
176
		"7707d6ae4e027c70eea2a935c2296f21");
177
	printf("done.\n");
178
	fflush(stdout);
179
}
180

181
static void
182
test_SHA1(void)
183
{
184
	printf("Test SHA-1: ");
185
	fflush(stdout);
186
	test_sha1_internal("abc", "a9993e364706816aba3e25717850c26c9cd0d89d");
187
	test_sha1_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
188
		"nomnopnopq", "84983e441c3bd26ebaae4aa1f95129e5e54670f1");
189

190
	KAT_MILLION_A(SHA-1, sha1,
191
		"34aa973cd4c4daa4f61eeb2bdbad27316534016f");
192
	printf("done.\n");
193
	fflush(stdout);
194
}
195

196
static void
197
test_SHA224(void)
198
{
199
	printf("Test SHA-224: ");
200
	fflush(stdout);
201
	test_sha224_internal("abc",
202
   "23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7");
203
	test_sha224_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
204
		"nomnopnopq",
205
   "75388b16512776cc5dba5da1fd890150b0c6455cb4f58b1952522525");
206

207
	KAT_MILLION_A(SHA-224, sha224,
208
		"20794655980c91d8bbb4c1ea97618a4bf03f42581948b2ee4ee7ad67");
209
	printf("done.\n");
210
	fflush(stdout);
211
}
212

213
static void
214
test_SHA256(void)
215
{
216
	printf("Test SHA-256: ");
217
	fflush(stdout);
218
	test_sha256_internal("abc",
219
   "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad");
220
	test_sha256_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
221
		"nomnopnopq",
222
   "248d6a61d20638b8e5c026930c3e6039a33ce45964ff2167f6ecedd419db06c1");
223

224
	KAT_MILLION_A(SHA-256, sha256,
225
   "cdc76e5c9914fb9281a1c7e284d73e67f1809a48a497200e046d39ccc7112cd0");
226
	printf("done.\n");
227
	fflush(stdout);
228
}
229

230
static void
231
test_SHA384(void)
232
{
233
	printf("Test SHA-384: ");
234
	fflush(stdout);
235
	test_sha384_internal("abc",
236
		"cb00753f45a35e8bb5a03d699ac65007272c32ab0eded163"
237
		"1a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7");
238
	test_sha384_internal(
239
		"abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
240
		"hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
241
		"09330c33f71147e83d192fc782cd1b4753111b173b3b05d2"
242
		"2fa08086e3b0f712fcc7c71a557e2db966c3e9fa91746039");
243

244
	KAT_MILLION_A(SHA-384, sha384,
245
		"9d0e1809716474cb086e834e310a4a1ced149e9c00f24852"
246
		"7972cec5704c2a5b07b8b3dc38ecc4ebae97ddd87f3d8985");
247
	printf("done.\n");
248
	fflush(stdout);
249
}
250

251
static void
252
test_SHA512(void)
253
{
254
	printf("Test SHA-512: ");
255
	fflush(stdout);
256
	test_sha512_internal("abc",
257
   "ddaf35a193617abacc417349ae20413112e6fa4e89a97ea20a9eeee64b55d39a"
258
   "2192992a274fc1a836ba3c23a3feebbd454d4423643ce80e2a9ac94fa54ca49f");
259
	test_sha512_internal(
260
		"abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
261
		"hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
262
   "8e959b75dae313da8cf4f72814fc143f8f7779c6eb9f7fa17299aeadb6889018"
263
   "501d289e4900f7e4331b99dec4b5433ac7d329eeb6dd26545e96e55b874be909");
264

265
	KAT_MILLION_A(SHA-512, sha512,
266
   "e718483d0ce769644e2e42c7bc15b4638e1f98b13b2044285632a803afa973eb"
267
   "de0ff244877ea60a4cb0432ce577c31beb009c5c2c49aa2e4eadb217ad8cc09b");
268
	printf("done.\n");
269
	fflush(stdout);
270
}
271

272
static void
273
test_MD5_SHA1(void)
274
{
275
	unsigned char buf[500], out[36], outM[16], outS[20];
276
	unsigned char seed[1];
277
	br_hmac_drbg_context rc;
278
	br_md5_context mc;
279
	br_sha1_context sc;
280
	br_md5sha1_context cc;
281
	size_t u;
282

283
	printf("Test MD5+SHA-1: ");
284
	fflush(stdout);
285

286
	seed[0] = 0;
287
	br_hmac_drbg_init(&rc, &br_sha256_vtable, seed, sizeof seed);
288
	for (u = 0; u < sizeof buf; u ++) {
289
		size_t v;
290

291
		br_hmac_drbg_generate(&rc, buf, u);
292
		br_md5_init(&mc);
293
		br_md5_update(&mc, buf, u);
294
		br_md5_out(&mc, outM);
295
		br_sha1_init(&sc);
296
		br_sha1_update(&sc, buf, u);
297
		br_sha1_out(&sc, outS);
298
		br_md5sha1_init(&cc);
299
		br_md5sha1_update(&cc, buf, u);
300
		br_md5sha1_out(&cc, out);
301
		check_equals("MD5+SHA-1 [1]", out, outM, 16);
302
		check_equals("MD5+SHA-1 [2]", out + 16, outS, 20);
303
		br_md5sha1_init(&cc);
304
		for (v = 0; v < u; v ++) {
305
			br_md5sha1_update(&cc, buf + v, 1);
306
		}
307
		br_md5sha1_out(&cc, out);
308
		check_equals("MD5+SHA-1 [3]", out, outM, 16);
309
		check_equals("MD5+SHA-1 [4]", out + 16, outS, 20);
310
	}
311

312
	printf("done.\n");
313
	fflush(stdout);
314
}
315

316
/*
317
 * Compute a hash function, on some data, by ID. Returned value is
318
 * hash output length.
319
 */
320
static size_t
321
do_hash(int id, const void *data, size_t len, void *out)
322
{
323
	br_md5_context cmd5;
324
	br_sha1_context csha1;
325
	br_sha224_context csha224;
326
	br_sha256_context csha256;
327
	br_sha384_context csha384;
328
	br_sha512_context csha512;
329

330
	switch (id) {
331
	case br_md5_ID:
332
		br_md5_init(&cmd5);
333
		br_md5_update(&cmd5, data, len);
334
		br_md5_out(&cmd5, out);
335
		return 16;
336
	case br_sha1_ID:
337
		br_sha1_init(&csha1);
338
		br_sha1_update(&csha1, data, len);
339
		br_sha1_out(&csha1, out);
340
		return 20;
341
	case br_sha224_ID:
342
		br_sha224_init(&csha224);
343
		br_sha224_update(&csha224, data, len);
344
		br_sha224_out(&csha224, out);
345
		return 28;
346
	case br_sha256_ID:
347
		br_sha256_init(&csha256);
348
		br_sha256_update(&csha256, data, len);
349
		br_sha256_out(&csha256, out);
350
		return 32;
351
	case br_sha384_ID:
352
		br_sha384_init(&csha384);
353
		br_sha384_update(&csha384, data, len);
354
		br_sha384_out(&csha384, out);
355
		return 48;
356
	case br_sha512_ID:
357
		br_sha512_init(&csha512);
358
		br_sha512_update(&csha512, data, len);
359
		br_sha512_out(&csha512, out);
360
		return 64;
361
	default:
362
		fprintf(stderr, "Uknown hash function: %d\n", id);
363
		exit(EXIT_FAILURE);
364
		return 0;
365
	}
366
}
367

368
/*
369
 * Tests for a multihash. Returned value should be 258 multiplied by the
370
 * number of hash functions implemented by the context.
371
 */
372
static int
373
test_multihash_inner(br_multihash_context *mc)
374
{
375
	/*
376
	 * Try hashing messages for all lengths from 0 to 257 bytes
377
	 * (inclusive). Each attempt is done twice, with data input
378
	 * either in one go, or byte by byte. In the byte by byte
379
	 * test, intermediate result are obtained and checked.
380
	 */
381
	size_t len;
382
	unsigned char buf[258];
383
	int i;
384
	int tcount;
385

386
	tcount = 0;
387
	for (len = 0; len < sizeof buf; len ++) {
388
		br_sha1_context sc;
389
		unsigned char tmp[20];
390

391
		br_sha1_init(&sc);
392
		br_sha1_update(&sc, buf, len);
393
		br_sha1_out(&sc, tmp);
394
		buf[len] = tmp[0];
395
	}
396
	for (len = 0; len <= 257; len ++) {
397
		size_t u;
398

399
		br_multihash_init(mc);
400
		br_multihash_update(mc, buf, len);
401
		for (i = 1; i <= 6; i ++) {
402
			unsigned char tmp[64], tmp2[64];
403
			size_t olen, olen2;
404

405
			olen = br_multihash_out(mc, i, tmp);
406
			if (olen == 0) {
407
				continue;
408
			}
409
			olen2 = do_hash(i, buf, len, tmp2);
410
			if (olen != olen2) {
411
				fprintf(stderr,
412
					"Bad hash output length: %u / %u\n",
413
					(unsigned)olen, (unsigned)olen2);
414
				exit(EXIT_FAILURE);
415
			}
416
			check_equals("Hash output", tmp, tmp2, olen);
417
			tcount ++;
418
		}
419

420
		br_multihash_init(mc);
421
		for (u = 0; u < len; u ++) {
422
			br_multihash_update(mc, buf + u, 1);
423
			for (i = 1; i <= 6; i ++) {
424
				unsigned char tmp[64], tmp2[64];
425
				size_t olen, olen2;
426

427
				olen = br_multihash_out(mc, i, tmp);
428
				if (olen == 0) {
429
					continue;
430
				}
431
				olen2 = do_hash(i, buf, u + 1, tmp2);
432
				if (olen != olen2) {
433
					fprintf(stderr, "Bad hash output"
434
						" length: %u / %u\n",
435
						(unsigned)olen,
436
						(unsigned)olen2);
437
					exit(EXIT_FAILURE);
438
				}
439
				check_equals("Hash output", tmp, tmp2, olen);
440
			}
441
		}
442
	}
443
	return tcount;
444
}
445

446
static void
447
test_multihash(void)
448
{
449
	br_multihash_context mc;
450

451
	printf("Test MultiHash: ");
452
	fflush(stdout);
453

454
	br_multihash_zero(&mc);
455
	br_multihash_setimpl(&mc, br_md5_ID, &br_md5_vtable);
456
	if (test_multihash_inner(&mc) != 258) {
457
		fprintf(stderr, "Failed test count\n");
458
	}
459
	printf(".");
460
	fflush(stdout);
461

462
	br_multihash_zero(&mc);
463
	br_multihash_setimpl(&mc, br_sha1_ID, &br_sha1_vtable);
464
	if (test_multihash_inner(&mc) != 258) {
465
		fprintf(stderr, "Failed test count\n");
466
	}
467
	printf(".");
468
	fflush(stdout);
469

470
	br_multihash_zero(&mc);
471
	br_multihash_setimpl(&mc, br_sha224_ID, &br_sha224_vtable);
472
	if (test_multihash_inner(&mc) != 258) {
473
		fprintf(stderr, "Failed test count\n");
474
	}
475
	printf(".");
476
	fflush(stdout);
477

478
	br_multihash_zero(&mc);
479
	br_multihash_setimpl(&mc, br_sha256_ID, &br_sha256_vtable);
480
	if (test_multihash_inner(&mc) != 258) {
481
		fprintf(stderr, "Failed test count\n");
482
	}
483
	printf(".");
484
	fflush(stdout);
485

486
	br_multihash_zero(&mc);
487
	br_multihash_setimpl(&mc, br_sha384_ID, &br_sha384_vtable);
488
	if (test_multihash_inner(&mc) != 258) {
489
		fprintf(stderr, "Failed test count\n");
490
	}
491
	printf(".");
492
	fflush(stdout);
493

494
	br_multihash_zero(&mc);
495
	br_multihash_setimpl(&mc, br_sha512_ID, &br_sha512_vtable);
496
	if (test_multihash_inner(&mc) != 258) {
497
		fprintf(stderr, "Failed test count\n");
498
	}
499
	printf(".");
500
	fflush(stdout);
501

502
	br_multihash_zero(&mc);
503
	br_multihash_setimpl(&mc, br_md5_ID, &br_md5_vtable);
504
	br_multihash_setimpl(&mc, br_sha1_ID, &br_sha1_vtable);
505
	br_multihash_setimpl(&mc, br_sha224_ID, &br_sha224_vtable);
506
	br_multihash_setimpl(&mc, br_sha256_ID, &br_sha256_vtable);
507
	br_multihash_setimpl(&mc, br_sha384_ID, &br_sha384_vtable);
508
	br_multihash_setimpl(&mc, br_sha512_ID, &br_sha512_vtable);
509
	if (test_multihash_inner(&mc) != 258 * 6) {
510
		fprintf(stderr, "Failed test count\n");
511
	}
512
	printf(".");
513
	fflush(stdout);
514

515
	printf("done.\n");
516
	fflush(stdout);
517
}
518

519
static void
520
do_KAT_HMAC_bin_bin(const br_hash_class *digest_class,
521
	const void *key, size_t key_len,
522
	const void *data, size_t data_len, const char *href)
523
{
524
	br_hmac_key_context kc;
525
	br_hmac_context ctx;
526
	unsigned char tmp[64], ref[64];
527
	size_t u, len;
528

529
	len = hextobin(ref, href);
530
	br_hmac_key_init(&kc, digest_class, key, key_len);
531
	br_hmac_init(&ctx, &kc, 0);
532
	br_hmac_update(&ctx, data, data_len);
533
	br_hmac_out(&ctx, tmp);
534
	check_equals("KAT HMAC 1", tmp, ref, len);
535

536
	br_hmac_init(&ctx, &kc, 0);
537
	for (u = 0; u < data_len; u ++) {
538
		br_hmac_update(&ctx, (const unsigned char *)data + u, 1);
539
	}
540
	br_hmac_out(&ctx, tmp);
541
	check_equals("KAT HMAC 2", tmp, ref, len);
542

543
	for (u = 0; u < data_len; u ++) {
544
		br_hmac_init(&ctx, &kc, 0);
545
		br_hmac_update(&ctx, data, u);
546
		br_hmac_out(&ctx, tmp);
547
		br_hmac_update(&ctx,
548
			(const unsigned char *)data + u, data_len - u);
549
		br_hmac_out(&ctx, tmp);
550
		check_equals("KAT HMAC 3", tmp, ref, len);
551
	}
552
}
553

554
static void
555
do_KAT_HMAC_str_str(const br_hash_class *digest_class, const char *key,
556
	const char *data, const char *href)
557
{
558
	do_KAT_HMAC_bin_bin(digest_class, key, strlen(key),
559
		data, strlen(data), href);
560
}
561

562
static void
563
do_KAT_HMAC_hex_hex(const br_hash_class *digest_class, const char *skey,
564
	const char *sdata, const char *href)
565
{
566
	unsigned char key[1024];
567
	unsigned char data[1024];
568

569
	do_KAT_HMAC_bin_bin(digest_class, key, hextobin(key, skey),
570
		data, hextobin(data, sdata), href);
571
}
572

573
static void
574
do_KAT_HMAC_hex_str(const br_hash_class *digest_class,
575
	const char *skey, const char *data, const char *href)
576
{
577
	unsigned char key[1024];
578

579
	do_KAT_HMAC_bin_bin(digest_class, key, hextobin(key, skey),
580
		data, strlen(data), href);
581
}
582

583
static void
584
test_HMAC_CT(const br_hash_class *digest_class,
585
	const void *key, size_t key_len, const void *data)
586
{
587
	br_hmac_key_context kc;
588
	br_hmac_context hc1, hc2;
589
	unsigned char buf1[64], buf2[64];
590
	size_t u, v;
591

592
	br_hmac_key_init(&kc, digest_class, key, key_len);
593

594
	for (u = 0; u < 2; u ++) {
595
		for (v = 0; v < 130; v ++) {
596
			size_t min_len, max_len;
597
			size_t w;
598

599
			min_len = v;
600
			max_len = v + 256;
601
			for (w = min_len; w <= max_len; w ++) {
602
				char tmp[30];
603
				size_t hlen1, hlen2;
604

605
				br_hmac_init(&hc1, &kc, 0);
606
				br_hmac_update(&hc1, data, u + w);
607
				hlen1 = br_hmac_out(&hc1, buf1);
608
				br_hmac_init(&hc2, &kc, 0);
609
				br_hmac_update(&hc2, data, u);
610
				hlen2 = br_hmac_outCT(&hc2,
611
					(const unsigned char *)data + u, w,
612
					min_len, max_len, buf2);
613
				if (hlen1 != hlen2) {
614
					fprintf(stderr, "HMAC length mismatch:"
615
						" %u / %u\n", (unsigned)hlen1,
616
						(unsigned)hlen2);
617
					exit(EXIT_FAILURE);
618
				}
619
				sprintf(tmp, "HMAC CT %u,%u,%u",
620
					(unsigned)u, (unsigned)v, (unsigned)w);
621
				check_equals(tmp, buf1, buf2, hlen1);
622
			}
623
		}
624
		printf(".");
625
		fflush(stdout);
626
	}
627
	printf(" ");
628
	fflush(stdout);
629
}
630

631
static void
632
test_HMAC(void)
633
{
634
	unsigned char data[1000];
635
	unsigned x;
636
	size_t u;
637
	const char key[] = "test HMAC key";
638

639
	printf("Test HMAC: ");
640
	fflush(stdout);
641
	do_KAT_HMAC_hex_str(&br_md5_vtable,
642
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
643
		"Hi There",
644
		"9294727a3638bb1c13f48ef8158bfc9d");
645
	do_KAT_HMAC_str_str(&br_md5_vtable,
646
		"Jefe",
647
		"what do ya want for nothing?",
648
		"750c783e6ab0b503eaa86e310a5db738");
649
	do_KAT_HMAC_hex_hex(&br_md5_vtable,
650
		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
651
		"DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD",
652
		"56be34521d144c88dbb8c733f0e8b3f6");
653
	do_KAT_HMAC_hex_hex(&br_md5_vtable,
654
		"0102030405060708090a0b0c0d0e0f10111213141516171819",
655
		"CDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCD",
656
		"697eaf0aca3a3aea3a75164746ffaa79");
657
	do_KAT_HMAC_hex_str(&br_md5_vtable,
658
		"0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
659
		"Test With Truncation",
660
		"56461ef2342edc00f9bab995690efd4c");
661
	do_KAT_HMAC_hex_str(&br_md5_vtable,
662
		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
663
		"Test Using Larger Than Block-Size Key - Hash Key First",
664
		"6b1ab7fe4bd7bf8f0b62e6ce61b9d0cd");
665
	do_KAT_HMAC_hex_str(&br_md5_vtable,
666
		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
667
		"Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data",
668
		"6f630fad67cda0ee1fb1f562db3aa53e");
669

670
	do_KAT_HMAC_hex_str(&br_sha1_vtable,
671
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
672
		"Hi There",
673
		"b617318655057264e28bc0b6fb378c8ef146be00");
674
	do_KAT_HMAC_str_str(&br_sha1_vtable,
675
		"Jefe",
676
		"what do ya want for nothing?",
677
		"effcdf6ae5eb2fa2d27416d5f184df9c259a7c79");
678
	do_KAT_HMAC_hex_hex(&br_sha1_vtable,
679
		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
680
		"DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD",
681
		"125d7342b9ac11cd91a39af48aa17b4f63f175d3");
682
	do_KAT_HMAC_hex_hex(&br_sha1_vtable,
683
		"0102030405060708090a0b0c0d0e0f10111213141516171819",
684
		"CDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCD",
685
		"4c9007f4026250c6bc8414f9bf50c86c2d7235da");
686
	do_KAT_HMAC_hex_str(&br_sha1_vtable,
687
		"0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
688
		"Test With Truncation",
689
		"4c1a03424b55e07fe7f27be1d58bb9324a9a5a04");
690
	do_KAT_HMAC_hex_str(&br_sha1_vtable,
691
		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
692
		"Test Using Larger Than Block-Size Key - Hash Key First",
693
		"aa4ae5e15272d00e95705637ce8a3b55ed402112");
694
	do_KAT_HMAC_hex_str(&br_sha1_vtable,
695
		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
696
		"Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data",
697
		"e8e99d0f45237d786d6bbaa7965c7808bbff1a91");
698

699
	/* From RFC 4231 */
700

701
	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
702
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
703
		"4869205468657265",
704
		"896fb1128abbdf196832107cd49df33f"
705
		"47b4b1169912ba4f53684b22");
706

707
	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
708
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
709
		"4869205468657265",
710
		"b0344c61d8db38535ca8afceaf0bf12b"
711
		"881dc200c9833da726e9376c2e32cff7");
712

713
	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
714
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
715
		"4869205468657265",
716
		"afd03944d84895626b0825f4ab46907f"
717
		"15f9dadbe4101ec682aa034c7cebc59c"
718
		"faea9ea9076ede7f4af152e8b2fa9cb6");
719

720
	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
721
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
722
		"4869205468657265",
723
		"87aa7cdea5ef619d4ff0b4241a1d6cb0"
724
		"2379f4e2ce4ec2787ad0b30545e17cde"
725
		"daa833b7d6b8a702038b274eaea3f4e4"
726
		"be9d914eeb61f1702e696c203a126854");
727

728
	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
729
		"4a656665",
730
		"7768617420646f2079612077616e7420"
731
		"666f72206e6f7468696e673f",
732
		"a30e01098bc6dbbf45690f3a7e9e6d0f"
733
		"8bbea2a39e6148008fd05e44");
734

735
	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
736
		"4a656665",
737
		"7768617420646f2079612077616e7420"
738
		"666f72206e6f7468696e673f",
739
		"5bdcc146bf60754e6a042426089575c7"
740
		"5a003f089d2739839dec58b964ec3843");
741

742
	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
743
		"4a656665",
744
		"7768617420646f2079612077616e7420"
745
		"666f72206e6f7468696e673f",
746
		"af45d2e376484031617f78d2b58a6b1b"
747
		"9c7ef464f5a01b47e42ec3736322445e"
748
		"8e2240ca5e69e2c78b3239ecfab21649");
749

750
	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
751
		"4a656665",
752
		"7768617420646f2079612077616e7420"
753
		"666f72206e6f7468696e673f",
754
		"164b7a7bfcf819e2e395fbe73b56e0a3"
755
		"87bd64222e831fd610270cd7ea250554"
756
		"9758bf75c05a994a6d034f65f8f0e6fd"
757
		"caeab1a34d4a6b4b636e070a38bce737");
758

759
	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
760
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
761
		"aaaaaaaa",
762
		"dddddddddddddddddddddddddddddddd"
763
		"dddddddddddddddddddddddddddddddd"
764
		"dddddddddddddddddddddddddddddddd"
765
		"dddd",
766
		"7fb3cb3588c6c1f6ffa9694d7d6ad264"
767
		"9365b0c1f65d69d1ec8333ea");
768

769
	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
770
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
771
		"aaaaaaaa",
772
		"dddddddddddddddddddddddddddddddd"
773
		"dddddddddddddddddddddddddddddddd"
774
		"dddddddddddddddddddddddddddddddd"
775
		"dddd",
776
		"773ea91e36800e46854db8ebd09181a7"
777
		"2959098b3ef8c122d9635514ced565fe");
778

779
	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
780
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
781
		"aaaaaaaa",
782
		"dddddddddddddddddddddddddddddddd"
783
		"dddddddddddddddddddddddddddddddd"
784
		"dddddddddddddddddddddddddddddddd"
785
		"dddd",
786
		"88062608d3e6ad8a0aa2ace014c8a86f"
787
		"0aa635d947ac9febe83ef4e55966144b"
788
		"2a5ab39dc13814b94e3ab6e101a34f27");
789

790
	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
791
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
792
		"aaaaaaaa",
793
		"dddddddddddddddddddddddddddddddd"
794
		"dddddddddddddddddddddddddddddddd"
795
		"dddddddddddddddddddddddddddddddd"
796
		"dddd",
797
		"fa73b0089d56a284efb0f0756c890be9"
798
		"b1b5dbdd8ee81a3655f83e33b2279d39"
799
		"bf3e848279a722c806b485a47e67c807"
800
		"b946a337bee8942674278859e13292fb");
801

802
	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
803
		"0102030405060708090a0b0c0d0e0f10"
804
		"111213141516171819",
805
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
806
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
807
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
808
		"cdcd",
809
		"6c11506874013cac6a2abc1bb382627c"
810
		"ec6a90d86efc012de7afec5a");
811

812
	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
813
		"0102030405060708090a0b0c0d0e0f10"
814
		"111213141516171819",
815
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
816
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
817
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
818
		"cdcd",
819
		"82558a389a443c0ea4cc819899f2083a"
820
		"85f0faa3e578f8077a2e3ff46729665b");
821

822
	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
823
		"0102030405060708090a0b0c0d0e0f10"
824
		"111213141516171819",
825
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
826
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
827
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
828
		"cdcd",
829
		"3e8a69b7783c25851933ab6290af6ca7"
830
		"7a9981480850009cc5577c6e1f573b4e"
831
		"6801dd23c4a7d679ccf8a386c674cffb");
832

833
	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
834
		"0102030405060708090a0b0c0d0e0f10"
835
		"111213141516171819",
836
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
837
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
838
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
839
		"cdcd",
840
		"b0ba465637458c6990e5a8c5f61d4af7"
841
		"e576d97ff94b872de76f8050361ee3db"
842
		"a91ca5c11aa25eb4d679275cc5788063"
843
		"a5f19741120c4f2de2adebeb10a298dd");
844

845
	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
846
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
847
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
848
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
849
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
850
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
851
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
852
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
853
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
854
		"aaaaaa",
855
		"54657374205573696e67204c61726765"
856
		"72205468616e20426c6f636b2d53697a"
857
		"65204b6579202d2048617368204b6579"
858
		"204669727374",
859
		"95e9a0db962095adaebe9b2d6f0dbce2"
860
		"d499f112f2d2b7273fa6870e");
861

862
	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
863
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
864
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
865
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
866
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
867
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
868
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
869
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
870
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
871
		"aaaaaa",
872
		"54657374205573696e67204c61726765"
873
		"72205468616e20426c6f636b2d53697a"
874
		"65204b6579202d2048617368204b6579"
875
		"204669727374",
876
		"60e431591ee0b67f0d8a26aacbf5b77f"
877
		"8e0bc6213728c5140546040f0ee37f54");
878

879
	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
880
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
881
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
882
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
883
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
884
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
885
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
886
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
887
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
888
		"aaaaaa",
889
		"54657374205573696e67204c61726765"
890
		"72205468616e20426c6f636b2d53697a"
891
		"65204b6579202d2048617368204b6579"
892
		"204669727374",
893
		"4ece084485813e9088d2c63a041bc5b4"
894
		"4f9ef1012a2b588f3cd11f05033ac4c6"
895
		"0c2ef6ab4030fe8296248df163f44952");
896

897
	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
898
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
899
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
900
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
901
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
902
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
903
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
904
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
905
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
906
		"aaaaaa",
907
		"54657374205573696e67204c61726765"
908
		"72205468616e20426c6f636b2d53697a"
909
		"65204b6579202d2048617368204b6579"
910
		"204669727374",
911
		"80b24263c7c1a3ebb71493c1dd7be8b4"
912
		"9b46d1f41b4aeec1121b013783f8f352"
913
		"6b56d037e05f2598bd0fd2215d6a1e52"
914
		"95e64f73f63f0aec8b915a985d786598");
915

916
	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
917
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
918
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
919
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
920
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
921
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
922
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
923
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
924
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
925
		"aaaaaa",
926
		"54686973206973206120746573742075"
927
		"73696e672061206c6172676572207468"
928
		"616e20626c6f636b2d73697a65206b65"
929
		"7920616e642061206c61726765722074"
930
		"68616e20626c6f636b2d73697a652064"
931
		"6174612e20546865206b6579206e6565"
932
		"647320746f2062652068617368656420"
933
		"6265666f7265206265696e6720757365"
934
		"642062792074686520484d414320616c"
935
		"676f726974686d2e",
936
		"3a854166ac5d9f023f54d517d0b39dbd"
937
		"946770db9c2b95c9f6f565d1");
938

939
	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
940
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
941
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
942
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
943
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
944
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
945
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
946
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
947
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
948
		"aaaaaa",
949
		"54686973206973206120746573742075"
950
		"73696e672061206c6172676572207468"
951
		"616e20626c6f636b2d73697a65206b65"
952
		"7920616e642061206c61726765722074"
953
		"68616e20626c6f636b2d73697a652064"
954
		"6174612e20546865206b6579206e6565"
955
		"647320746f2062652068617368656420"
956
		"6265666f7265206265696e6720757365"
957
		"642062792074686520484d414320616c"
958
		"676f726974686d2e",
959
		"9b09ffa71b942fcb27635fbcd5b0e944"
960
		"bfdc63644f0713938a7f51535c3a35e2");
961

962
	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
963
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
964
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
965
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
966
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
967
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
968
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
969
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
970
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
971
		"aaaaaa",
972
		"54686973206973206120746573742075"
973
		"73696e672061206c6172676572207468"
974
		"616e20626c6f636b2d73697a65206b65"
975
		"7920616e642061206c61726765722074"
976
		"68616e20626c6f636b2d73697a652064"
977
		"6174612e20546865206b6579206e6565"
978
		"647320746f2062652068617368656420"
979
		"6265666f7265206265696e6720757365"
980
		"642062792074686520484d414320616c"
981
		"676f726974686d2e",
982
		"6617178e941f020d351e2f254e8fd32c"
983
		"602420feb0b8fb9adccebb82461e99c5"
984
		"a678cc31e799176d3860e6110c46523e");
985

986
	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
987
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
988
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
989
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
990
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
991
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
992
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
993
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
994
		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
995
		"aaaaaa",
996
		"54686973206973206120746573742075"
997
		"73696e672061206c6172676572207468"
998
		"616e20626c6f636b2d73697a65206b65"
999
		"7920616e642061206c61726765722074"
1000
		"68616e20626c6f636b2d73697a652064"
1001
		"6174612e20546865206b6579206e6565"
1002
		"647320746f2062652068617368656420"
1003
		"6265666f7265206265696e6720757365"
1004
		"642062792074686520484d414320616c"
1005
		"676f726974686d2e",
1006
		"e37b6a775dc87dbaa4dfa9f96e5e3ffd"
1007
		"debd71f8867289865df5a32d20cdc944"
1008
		"b6022cac3c4982b10d5eeb55c3e4de15"
1009
		"134676fb6de0446065c97440fa8c6a58");
1010

1011
	for (x = 1, u = 0; u < sizeof data; u ++) {
1012
		data[u] = x;
1013
		x = (x * 45) % 257;
1014
	}
1015
	printf("(MD5) ");
1016
	test_HMAC_CT(&br_md5_vtable, key, sizeof key, data);
1017
	printf("(SHA-1) ");
1018
	test_HMAC_CT(&br_sha1_vtable, key, sizeof key, data);
1019
	printf("(SHA-224) ");
1020
	test_HMAC_CT(&br_sha224_vtable, key, sizeof key, data);
1021
	printf("(SHA-256) ");
1022
	test_HMAC_CT(&br_sha256_vtable, key, sizeof key, data);
1023
	printf("(SHA-384) ");
1024
	test_HMAC_CT(&br_sha384_vtable, key, sizeof key, data);
1025
	printf("(SHA-512) ");
1026
	test_HMAC_CT(&br_sha512_vtable, key, sizeof key, data);
1027

1028
	printf("done.\n");
1029
	fflush(stdout);
1030
}
1031

1032
static void
1033
test_HKDF_inner(const br_hash_class *dig, const char *ikmhex,
1034
	const char *salthex, const char *infohex, const char *okmhex)
1035
{
1036
	unsigned char ikm[100], saltbuf[100], info[100], okm[100], tmp[107];
1037
	const unsigned char *salt;
1038
	size_t ikm_len, salt_len, info_len, okm_len;
1039
	br_hkdf_context hc;
1040
	size_t u;
1041

1042
	ikm_len = hextobin(ikm, ikmhex);
1043
	if (salthex == NULL) {
1044
		salt = BR_HKDF_NO_SALT;
1045
		salt_len = 0;
1046
	} else {
1047
		salt = saltbuf;
1048
		salt_len = hextobin(saltbuf, salthex);
1049
	}
1050
	info_len = hextobin(info, infohex);
1051
	okm_len = hextobin(okm, okmhex);
1052

1053
	br_hkdf_init(&hc, dig, salt, salt_len);
1054
	br_hkdf_inject(&hc, ikm, ikm_len);
1055
	br_hkdf_flip(&hc);
1056
	br_hkdf_produce(&hc, info, info_len, tmp, okm_len);
1057
	check_equals("KAT HKDF 1", tmp, okm, okm_len);
1058

1059
	br_hkdf_init(&hc, dig, salt, salt_len);
1060
	for (u = 0; u < ikm_len; u ++) {
1061
		br_hkdf_inject(&hc, &ikm[u], 1);
1062
	}
1063
	br_hkdf_flip(&hc);
1064
	for (u = 0; u < okm_len; u ++) {
1065
		br_hkdf_produce(&hc, info, info_len, &tmp[u], 1);
1066
	}
1067
	check_equals("KAT HKDF 2", tmp, okm, okm_len);
1068

1069
	br_hkdf_init(&hc, dig, salt, salt_len);
1070
	br_hkdf_inject(&hc, ikm, ikm_len);
1071
	br_hkdf_flip(&hc);
1072
	for (u = 0; u < okm_len; u += 7) {
1073
		br_hkdf_produce(&hc, info, info_len, &tmp[u], 7);
1074
	}
1075
	check_equals("KAT HKDF 3", tmp, okm, okm_len);
1076

1077
	printf(".");
1078
	fflush(stdout);
1079
}
1080

1081
static void
1082
test_HKDF(void)
1083
{
1084
	printf("Test HKDF: ");
1085
	fflush(stdout);
1086

1087
	test_HKDF_inner(&br_sha256_vtable,
1088
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
1089
		"000102030405060708090a0b0c",
1090
		"f0f1f2f3f4f5f6f7f8f9",
1091
		"3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865");
1092

1093
	test_HKDF_inner(&br_sha256_vtable,
1094
		"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f",
1095
		"606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
1096
		"b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
1097
		"b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87");
1098

1099
	test_HKDF_inner(&br_sha256_vtable,
1100
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
1101
		"",
1102
		"",
1103
		"8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8");
1104

1105
	test_HKDF_inner(&br_sha1_vtable,
1106
		"0b0b0b0b0b0b0b0b0b0b0b",
1107
		"000102030405060708090a0b0c",
1108
		"f0f1f2f3f4f5f6f7f8f9",
1109
		"085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896");
1110

1111
	test_HKDF_inner(&br_sha1_vtable,
1112
		"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f",
1113
		"606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
1114
		"b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
1115
		"0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4");
1116

1117
	test_HKDF_inner(&br_sha1_vtable,
1118
		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
1119
		"",
1120
		"",
1121
		"0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918");
1122

1123
	test_HKDF_inner(&br_sha1_vtable,
1124
		"0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
1125
		NULL,
1126
		"",
1127
		"2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48");
1128

1129
	printf(" done.\n");
1130
	fflush(stdout);
1131
}
1132

1133
/*
1134
 * Known-answer test vectors for SHAKE128, from the NIST validation test
1135
 * suite. Each vector is a pair (input,output).
1136
 */
1137
static const char *const KAT_SHAKE128[] = {
1138

1139
	"e4e932fc9907620ebebffd32b10fda7890a5bc20e5f41d5589882a18c2960e7aafd8730ee697469e5b0abb1d84de92ddba169802e31570374ef9939fde2b960e6b34ac7a65d36bacba4cd33bfa028cbbba486f32367548cb3a36dacf422924d0e0a7e3285ee158a2a42e4b765da3507b56e54998263b2c7b14e7078e35b74127d5d7220018e995e6e1572db5f3e8678357922f1cfd90a5afa6b420c600fd737b136c70e9dd14",
1140
	"459ce4fa824ee1910a678abc77c1f769",
1141

1142
	"18636f702f216b1b9302e59d82192f4e002f82d526c3f04cbd4f9b9f0bcd2535ed7a67d326da66bdf7fc821ef0fff1a905d56c81e4472856863908d104301133ad111e39552cd542ef78d9b35f20419b893f4a93aee848e9f86ae3fd53d27fea7fb1fc69631fa0f3a5ff51267785086ab4f682d42baf394b3b6992e9a0bb58a38ce0692df9bbaf183e18523ee1352c5fad817e0c04a3e1c476be7f5e92f482a6fb29cd4bbf09ea",
1143
	"b7b9db481898f888e5ee4ed629859844",
1144

1145
	"5d9ff9fe63c328ddbe0c865ac6ba605c52a14ee8e4870ba320ce849283532f2551959e74cf1a54c8b30ed75dd92e076637e4ad5213b3574e73d6640bd6245bc121378174dccdaa769e6e4f2dc650e1166c775d0a982021c0b160fe9438098e86b6cdc786f2a6d1ef68751551f7e99773daa28598d9961002c0b47ab511c8707df69f9b32796b723bf7685251d2c0d08567ad4e8540ddcc1b8a1a01f6c92aaaadcaf42301d9e53463",
1146
	"f50af2684408915871948779a14c147c",
1147

1148
	"38c0be76e7b60f262f1499e328e0519f864bbb9d134d00345d8942d0ab762c3936c0cd1896eca6b77b3c01089dd285e9f61708a62e5ea4bf57c50decda5c215fb18ac149d7ace09ffdfed91e7fbf068d96908e42cf1e7ee7bc001c7ee9e378a311e44311923de4681f24c92eb5f0fb13d07ef679ded3b733f402168dc050568dbf97fb79afe8db994874783e27ad8d040ba8e75343c6762c6793a42247eee5a6216b908817f5edbbdf",
1149
	"e4786ad8f2ea9c8e420a6f50b5feec9a",
1150

1151
	"ec586d52ad2ced1f96bd9458a5a1f64bc1b4cce1fa52517513c9ebe63d0d0eeb26ae5da73208137e08baa22651599a01bc65cbaa467baeceb8cd013d71d0b2406534fe2e6619da3aa380928f6effb09f42ba1fb7048e90d7898f1dc259b52c51b2d2970cd0c70afb6cf8acba83fd01cc589b0f31bcf2bf3b8df7879d7d2546c514706f6cf97b6a6b6d0a37d018ba553108f0e240f70f03a0ccee86f76589c64594f6cf74679bc330ad9f",
1152
	"191a3710c72d11da7a2410bc73ba9d9f",
1153

1154
	"c201dfe59e03574476e3c220c971c1685ea96ea137daed2ac10845c54d8e6e53c307acdf956f1bdef3868ab53e758c7cbeb4cd02972ba311f998e5f3983000345c8947aa59b78bb301b6ecbe9808ee0de99ed0b938fc19f677997398bd84bcd6f34d5b4ed123d04a093a8f42c1700fa2472f1ecc00957761a2d296bda3d2cbc0f21d8ed4e4fb122b71db1d49a0f516c3402f6046d93de6dae20df7683462557abfbf88437c8678dfa2613b",
1155
	"464121895e5c9d85190bcee0437453dd",
1156

1157
	"bd34acd613e0e0da6bebc45ba73fefa0bd8aa8ebba34040a07944f29eb63adea527101b8cd960e58d9ecddc0643b5e2d8db55170ace4678892e0a57612c50a4dc0647189f839b9a1229e22e0353dfa707acb7ab893f4ebe8bb910cd14f21b8fb8e77c4f19db027e0cd685d60212e0d920b34e96b774bd54f0a0f4ce2ac5f001b4411c19ac2e3a03b63b454eb30f4ddbac959673260d370e708c32d5030682ad56a99322972ba6eda6be9d027",
1158
	"8e167ceae101ea0b3b98175f66e46b0e",
1159

1160
	"166b4fec6967c2a25f80c0075379978124833b84894c3cb3a538f649dcee08b8e41707901f6273a128cce964ac1e9b977bb7fe28de8bc2542c6c07109889cea84d34ada6bde8c8f5358afc46b5ef5db3009fe3a2efd860ed0ad6b540595246c27849abf7eafea9e5af42607519f3c51ddbc353bc633afec56aff69a0c953584d8ede684b4faefeb8be7d7db97e32bc1c35abb73ce3ba8425726d89f98e93ed93b67b4c6993ffafb789c1bbda8d",
1161
	"eb2fa0e8e04e698ca511d6abf7de84fb",
1162

1163
	"62c625d31a400c5ff092d6fd638f1ea911ad912f2aabffea2377b1d2af4efeb6eb2519c5d8482d530f41acdab0fbe43f9c27d357e4df3caa8189fa7745ff95f811ed13e6497a1040852a1149890216d078ee6eb34461cfa6693ba631dbefacf83ce5ba3f531ddeadba16ae50d6eedce20cca0b4b3278e16644535e0859676c3fd5d6b7d7df7bbe2316cc2bfa7f055fffc2835225976d9a737b9ac905a7affc544288b1b7d6dad92901162f4c6d90",
1164
	"bb0acc4423c1d8cfc788e748ade8d5fd",
1165

1166
	"8af63bbe701b84ff9b0c9d2fd830e28b7d557af3fcf4874bb7b69f2116388090d70bff64a600427eeea22f7bee0324900fbce9b8752fe312d40f8a8485231da5d94694daadb3d6bf3e7f2cc83f67f52829cc9cf1d3fcc87d42b3d20ec2e27cb135aee068acbca68734ac7a5ff3e3bd1a738e7be63de39e56aaaa6104f6fd077c964ccc55cba41ca1783003883100e52f94096fdfdc6dcd63b3fd1db148fc24cda22640eb34f19ed4b113ad8a2144d3",
1167
	"4a824cae0f236eab147bd6ebf66eafc2",
1168

1169
	"a8c0f0e4afcda47e02afaaa2357c589e6b94168a6f6f142b019938186efa5b1b645bb4da032694b7376d54f4462e8c1ba5d6869d1003f3b9d98edc9f81c9dbd685058adb7a583c0b5c9debc224bb72c5982bfcdd67b4bdc57579e0467436c0a1b4c75a2d3cea034119455654f6ab7163ed9b61949d09da187d612b556fca724599a80c1970645023156f7df2e584f0bf4c2e9b08d98bb27a984fa7149c0b598adbb089e73f4f8d77f92248e419d0599f",
1170
	"4800f8f5e598a26ee05a0ea141f849d0",
1171

1172
	"a035c12af3fb705602540bd0f4a00395e1625edf2d44af4a145b463585aba46b34ee3203eb9132842000f54dcd234e347c28486ea18414af2d3445916049403adfa3ed3906fdb3b27f2aa4bb149df405c12fb0bf0e1dacb79c50bec3fde2295fc8dd5c97ed46dd28475a80e27017dc50d9feff9b1a1861ac86371791037e49221923e6e44874962d9f18f1898a98ee5dec1e9eca6d7c1ad4166fbac41b2587caf7fef3e7be90c80aafed5f7a0928127321",
1173
	"2d124d81a4a45ad9c0b91cca23cc2991",
1174

1175
	"d41739834414a0792470d53dee0f3f6c5a197314d3a14d75278440048294eab69df6eb7a33c9f807b5082bd93eb29d76c92837f6a2d6c5c21a154c9c7f509ee04b662b099c501a76e404996fe2997163d1abdd73df019c35e06d45b144f4dbb0462fa13767f12f4e1b2bc605c20ce1b9d96c0c94726af953e154d14cb9c8c8aff719f40c7cf45f15c1445ba6c65215024b316d60435905a686929874c6148e64c4eccd90c3a1d1553d18ff57d6b536c58ec3",
1176
	"551fc7eceeee151523be716538258e2e",
1177

1178
	"5bbb333460ffac345e4d2bc2dba303ef75b85c57233590fabd22d547bf9e1d7a4ad43a286b2a4618a0bb42559808fd813bea376ceacc07e608167ad1b9ec7d7ae919fd2991464cf63570c7dfb299b61836bd73a29007cf1faa45b1e5539a00514272c35d58bb877526530187afbcf55a6f1757209c50af4eab96c2ab160e6ea75dc8d6ef4bf2bf3e7a4b3a7619db84efede22a0f960e701b14f0f44c89b18f2640017c05ef51bcf93942b8d3775d2980b80435",
1179
	"2c98dce5b1ec5f1f23554a755fac7700",
1180

1181
	"8040a7296d7553886e5b25c7cf1f64a6a0a143185a83abf5c5813bef18008ec762e9bcc12ab7235552cf67274210b73942ac525f26364af431fc88cc34961169f6bf8872d864f360b9fbc27b18160d0578381db509e72e678402731157555bf9026b1325c1a34c136b863eab9a58ec720cedaa0049bfddb4863d03a6ca65f3dd4f9465c32b9db4d52f19e39f10ffdfe8c475032a2fe5e145ff524073d5ed617fa5e387325f7ab50fcf5cba40c2326bcf6a753019",
1182
	"c0bb8427ef0ca4e457d2887878d91310",
1183

1184
	"cbaceb762e6c2f5f96052d4a681b899b84de459d198b3624bd35b471bdc59655b1405e9a5448b09e93e60941e486ad01d943e164f5655b97be28f75413c0ab08c099bd3650e33316234e8c83c012ad146b331e88fb037667e6e814e69e5f100b20417113c946a1116cc71ed7a3c87119623564d0d26c70dd5cfc75ef03acaea6f8c0e3f96877e0d599d8270635aee25be6d21b0522a82f4149ec8037edaf6b21709c7aafd580daaad00a0fd91fcfe6211d90abef95",
1185
	"626bd9eb0982b6db884d38e8c234854e",
1186

1187
	"1bbee570394bc18d0f8713c7149cabb84e0567dd184510e922d97f5fb96b045f494808c02014f06074bd45b8a8ad12b4cb448ec16285fb27670fce99914f100ad6f504c32fa40ab39beec306667f76f9ab98b3ec18c036b8f1b60d4457a9fe53cbab23a0ee64d72d8a03d6d8d67a9f2ff6eb1d85c25d8746c8b4858794e094e12f54ab80e5ba1f774be5c456810755ffb52415b5e8c6b776f5f37b8bcf5c9b5d0ad7e58a9d0fa938e67ad5aaee8c5f11ef2be3a41362",
1188
	"a489ab3eb43f65ffbd4d4c34169ee762",
1189

1190
	"aeacffca0e87bfdb2e6e74bfb67c9c90a8b6fb918b9be164cafcab7d570d8cd693bd8ee47243d3cbdaf921ce4d6e9e09c8b6d762eb0507bd597d976f6243e1f5e0d839e75ea72e2780da0d5e9f72a7a9b397548f762c3837c6a7c5d74b2081705ba70ab91adb5758e6b94058f2b141d830ff7b007538fb3ad8233f9e5bcbf6adcdd20843ee08d6c7d53cc3a58f53f3fe0997539e2f51d92e56990daad76dc816fd013b6d225634db140e9d2bbe7f45830406e44fee9d59",
1191
	"4eaa27b085d08fc6a7473e672ea2ca1b",
1192

1193
	"a22314d2173ca4d53897924c4b395f0ae52c7fff4880525cee9055f866879af35f22759903b779898676a216feefd4ed75d484f83c00b58383b9279e2732cbc2cb5479b72abee5b4ab0bd0c937537b7a47f461ad419225c6045cca10c191225f0e4389f3355cd3a0d2de822c9d6f3cf984147de3fd3d8a6c9a02a617ddac87114f770b16cc96289321782108d94a00b153bd40651809cabe6c32237a2389e321b67769e89676cdd6c060162592ecadebdd7512fa3bfece04",
1194
	"eea88229becc3608df892998b80cf57b",
1195

1196
	"f99bba3e3b14c8de38c8edecd9c983aa641320a251130f45596a00d2cfeefe7933f1a2c105c78627d782fd07a60001c06a286d14ec706dcdd8a232a613e1ea684ee7ef54dc903ec1c09c2c060bb0549a659fd47ae9e8b9cb3680b7c1c2d11ebf720209c06879d8f51d9ee1afafe263807c01bb9def83db879a89f7eb85c681c6c6cc58cc52893d0b131186cc3b9e16bad7d48c46a74abb492d475beb04c9fdc573cc454242c8534bcc7c822356ea558f9fa3ae3bb844415916",
1197
	"5109746cb7a61482e6e28de02db1a4a5",
1198

1199
	"564da8460dc0c3d20b1fda3628349a399ba52446b5d3626fd0039ab282bc437b166f186b3c5e6c58ffb6bd95f8fe8b73c1b56a07ad37572eb6e148cfb7750760dcc03fac567ad7d3536d80922dda8ac4e118fc29c47ee3677183ea4e06242b6090864591c3ddaf4bef8c4cb52f8e3f35e4140034616faf21e831a9b8d68f5a841a0a52a2eb4f9ac9bb5b488766e251cdb0f29faeeed463640333ad948e7f3ad362948c68379740539f219d8f3ba069952efa0021d273a738aad0",
1200
	"f43552da8b2623a130196e70a770230d",
1201

1202
	"8a54e8bf30eeb2e098955f2eef10af3c0a32391656fdff82120e4785bb35a629c8635e7e98c9eadfa93ed6760ae1d40313000dd85339b528cadfe28258a09e9976643a462477e6d022eb7f6a6338a8fdbf261c28e8ed43869f9a032f28b4d881fb202720bc42cf3b6d650211e35d53b4766a0f0dfd60d121fa05519211bb7d69bf5fcb124870cda8f17406747097fcb0a1968e907adb888341ea75b6fcfbb4d92ae8ce27b04a07a016df3399f330cb77a67040b847a68f33de0f16",
1203
	"c51c6e34cef091a05dfcf30d45b21536",
1204

1205
	"2a64753a74d768b82c5638a0b24ef0da181bc7d6e2c4ffdb0ae50d9c48ecfa0d90880974db5f9ac32a004e25c8186cd7d0e88439f0f652256c03e47f663eff0d5cb7c089f2167ff5f28df82f910badc5f4b3860af28cbb6a1c7af3fafa6dae5398d8e0a14165def78be77ee6948f7a4d8a64167271ed0352203082368de1cd874bd3b2e351b28170fdf42871590d9d179ce27c99f481f287820fd95ba60124517e907e78a9662e09519e3ef868ebdcca311700a603b04fae4afe4090",
1206
	"2d2ee67938422ae12f8cfa8b2e744577",
1207

1208
	"a7d645b70f27f01617e76abc2ae514164f18d6fd4f3464e71a7fc05a67e101a79b3b52d4ecfa3ddac6ec2a116d5222e8e536d9d90fffec9c1442679b06db8aa7c53dcde92006211b3dd779f83b6289f015c4cd21ca16ce83bb3ea162540bb012ee82bddef4722341454f5f59da3cd098a96abbbdc9a19202d61c7697979afa50deb22a9bb067ccb4a6fce51c930a7f4767cfaa9454c9c1832f83ee2318b0f0c95d761c079c0ca2dc28871229aef11f64199ca290b2b5e26d8c1c12ec1f",
1209
	"ec989e0290fc737952de37dd1ebc01c6",
1210

1211
	"3436fe321f2a41478164b8b408a7a8f54ff2a79cb2020bf36118a2e3b3fca414bd42e55624cc4f402f909016209b10f0c55626194a098bb6519d0fa844a68ab3eaa116df39797b1e6c51eb30557df0c4f3d1a2e0471f1d8264fb3288c6c15dcde4daf795083aad2b5f2d31c84c542fb702ea83b7524ca9a1c1b9754ade5604abd375f23f3916cdad31aecaa7b028b7121a2a316713991759925f3fb8366c6795defa6ea77416c4ed095c1f9527026f1d621815b8310d4ff3fc76f798760b",
1212
	"bb5e48212442ad7ae83697092024c22b",
1213

1214
	"01bdb4f89f84b728a9d6b3a03f60709900571c1a2a0f912702cad73677ceeae202babde3d0197e3e23381cb9f6350792e05937703aa76f9a84b5c36705bb58f6b2ea6b1e51ff94a8de174cbc2ec5ae9ad2627a8b3ea45f162b727a7639f71a4cd9f6c6926a5d81d0a21c4c923037ed199f1aef517e2eea03bea9044c5baab84e3f85d625635bcb1c37ef232144b44c770f2b9dab416b96c906016acfb3fbba62ab40a4c08323fcf66437d953b164541cea3a8c81d186eed0cb23b3e98813a9",
1215
	"8bb7ffa4572616f3bc7c33bd70bbcd59",
1216

1217
	"9ae51ed483306c9a5a6db027f03cd4472cf3a71df5f1e11852306123d01ab81c259eeb88128275858efb8cff207ba5278dca3a21b358cbfdb5d223e958f3dca5ad9d2537f128c3dfb1fa564d3157de120f7b7d5524e67fc7abf897d9a5bd6b2c7c0a5348e6c95e920c919778ec7a86effb2ff91f0f44045c7dca46597e216e98d80efe25ba0d4f84e7e9d5e81689a5a6990d34e83e1a62a67371b7d2adc7ecd30ad1ad35359e9d9f8a299b057a2f441e313eb819770fa18cd41572adf856edc4",
1218
	"e7f66f49f70d506a9b5508cc50f65cf2",
1219

1220
	"899c81ea1162514ea7a2d3487d0efcc4648a3067f891131918d59cc19a266b4f3c955c00ddd95cddedf27b86220c432d6ca548e52cf2011da17fd667a2177a7f93e37b8892d51898f1485277e9e046a48cb8b999fcbcf550db53d40602421a3f76cd070a971e2d869beb80a53b54ac30ac0aab0cd1b696bbaf99bb25216ff199cd9a280f567c44b0d4252c98812e1ddab4e445c414aa8d650598b64d6768a7948093051e36b7051c823c7ed6213743a98d8eaf4b2b5e8157c699ea053cf4e53877",
1221
	"52173b139c76a744b7a4d2221d4178c4",
1222

1223
	"e50422869373abac1c26e738fb3ccb577b65975a7998ba096b04ef3aa148ada2cbe6beeabcf52d056d1766c245ab999d97445fdb6d59a0d6843eb4959752c89fe07b8411ddcfebef509482b8896bb43de7c875b29da52606b278b8704c62154b2da9bb237e68aa10cb85814250e4e4de73da200991e51241fd9a45f446de5a4bb959ad4727283510e9d2ac8a207ef0284163aa05d27f2d316e8ca1480f30604a8d74a0a661775398af644bb584a1a2c55c4959d0e7dd3f7c0c3614962fbeefeeafe0",
1224
	"f4c517a82c850c3c4c96d23a8f3106b8",
1225

1226
	"066febbe205ea342cde69fd4c72889442e14a5977d886252bdbc2ff5f8dd8fc5f1f870ce121ab929a6b6227b484648be9b3501443cfdecf8f58d4de834ed1800bb244c18985a8232583ac6fc789aa59d1c5e87ad03994085bbf6e1ba1157d4e4ccbb28a49b6529e54b3b34613d6cc9671855e2dcbba6838176c093737962eaf88c85ab780184d4cae78013b28103dca7f7e3b8d94a6ae0728db30a1c535783c4644a7e9eb4ffac6a95d30cf52ba805e220d0b2aa9a2e7de26a97efbd877ec6d1bad148",
1227
	"bac7162dc8328911fa639f26ba952ab0",
1228

1229
	"ccf92b17b9cf0d8577c1f3db9c19d3c86f16bab4058611f6aa97204783ebd07671eab55e375c4b16e03780675bb5738369aa7cf3b9156cd250f516392f5e0efa30cbb09132b66457756621f947093029e10233938c846513086023252d1bac9dd3442598f004e0b200f7dd79aa3a9122a0c6e77bc7fc8521988050f3c64b32c620fc1b5bba6f458e4791bdcfca731fd66e9da093b1a45264c8ffa48b3f1628dfe19c9ac1d71f1d5214ddc7e4f0da60ae122f67c394a55645628228d5e3a3174fdccbaab4",
1230
	"19a9eadf9c7c000fe340603f27bd830b",
1231

1232
	"a37dcfab50a317e6a7cc51524b5d611a53652b59fc7df0229af3dac4d527d54c1134a14b2ed325d9727d07d9c3d0797f1a34561034be6de98b551dc384132235eaedae7a9b97bb7581a2a0f2c4e8e32f3e294f9b30f646dd33ce58187188146e14f01dc3ffb581c3bc834726b66c4732a98c3f8256ed22077ba8b34c024d53fe798517abc2f61eca0c6722fc02254c9141a54d4e106aaa6d4b2957e6a12c88ed00f4c4bc4c223b92579859fc0edb9b53f0bba286c53786198c9b6c6eb5eb5b4490844b7d06",
1233
	"b9e1455d06233d14b8d3020441351a76",
1234

1235
	"0248b909e1f31ee855a03b6c81366757aa3732d2eca0b06a2b1015584c2d8205a4431fcdb02f6a03077ccf368ecb78b3eb78664b3c7ac157088b6cf9758adda4bc1d2cdedb9a69448a2833cf6f21865795bbd5551be859ed297aa82c288b898e331c07c3c8fcc4b2c4ec90bf8e003a499248a677f1b020357625f079cdf92fcbef89d904e11d23569e0f0e8c52303c93c867023a269bc036d8d36d69ca9c7664daacc92a8dc42c3600dbd4c02278333d216011252271def835ce4783883c0760dbcc00bc33bb",
1236
	"ea4606777e21f27d4ae860b3c25283b7",
1237

1238
	"ce283768aa91488c75c71ee80a4df9495377b6a9ae3351a5962aa8317f08818a0117cf6c391331866d3abc2beea2fa4a43cf32a08385ea2c03dbabe3319104a6c0a3d171061ebed5a23306a8618a81fb63d9dd4c79b42bfdd2a79e05d78290e653f4c6dfd75bf5625ddb85c82bad9444faba3e1558691c004bb50afe37822e320131361d7572e015e559c0f313b53e0d529dde64e74bc41eb52e77361a3ae5721483a795a80a87d684d63f92e347843eb1a8439fef032b3d5a396b154751bd8ed211a3ae37cbf0",
1239
	"dca4d5f9f9b7f8011f4c2f547ce42847",
1240

1241
	"19265f48c1ea240990847dc15d8198785d55ea6243ef7012ac903beabbdc2bd60032fb3a9f397d28aebb27d7deb7cf505eb1b36bfc4dbcfa8e1c044490b695b50e0974d3c5f0de748508d12ed9bfce10eaadde8fa128d3c30c12d0d403f60baf0b53d2fd7a38cc55dc1182b096c11d1ec9f171b879a73bd6ef1aa7825bc5162cbeba1d9f0739d1337c8142445ce645e4c32477cdcdf37e99fedb9236e24a3d94f0e45ea0b41a74762efe19d27555cdc89feef5b6e533237603fe98d8deae084f69799deac9043e86",
1242
	"688e532e15bde53b0b652291edfb7681",
1243

1244
	"1080391fa810c50c7437ec058459d3a8cd23c33071c187474151151c809871b6eaf4cf88f592f84557e1eef5c847d3490912072b25b1919af724c0b5ecb111150bd95460328a0b1ba29613c0bd6486110fe6dfab8cca5fde18f5b0bc4d2dc970781511d2e45fc7385c3da18eeb18b3a9e68593d82c75bbbcadab2e5a29745f6f3a924e039579f4418dbee186d9cc24b896d96bd990186bdcbd3082b70aee9bb95a36531ecc405ae13d011bd10fe69fe728c8aed73d1d38e5506bf4fa770347f7e0eb6749121cc0be75",
1245
	"cbf8ee5d477630dac9457a9a0659497d",
1246

1247
	"0a13ad2c7a239b4ba73ea6592ae84ea9",
1248
	"5feaf99c15f48851943ff9baa6e5055d8377f0dd347aa4dbece51ad3a6d9ce0c01aee9fe2260b80a4673a909b532adcdd1e421c32d6460535b5fe392a58d2634979a5a104d6c470aa3306c400b061db91c463b2848297bca2bc26d1864ba49d7ff949ebca50fbf79a5e63716dc82b600bd52ca7437ed774d169f6bf02e46487956fba2230f34cd2a0485484d",
1249

1250
	NULL
1251
};
1252

1253
/*
1254
 * Known-answer test vectors for SHAKE256, from the NIST validation test
1255
 * suite. Each vector is a pair (input,output).
1256
 */
1257
static const char *const KAT_SHAKE256[] = {
1258
	"389fe2a4eecdab928818c1aa6f14fabd41b8ff1a246247b05b1b4672171ce1008f922683529f3ad8dca192f268b66679068063b7ed25a1b5129ad4a1fa22c673cc1105d1aad6d82f4138783a9fe07d77451897277ed27e6fefec2cb56eb2494d18a5e7559d7b6fdddf66db4cbc9926fe270901327e70c8241798b4761dd652d49ad434d8d4",
1259
	"50717d9da0d528c3da799a3307ec74fc086a7d45acfb157774ac28e01ecc74f7",
1260

1261
	"719effd45ed3a8394bf6c49b43f35879176a598601bd6f598867f966a38f512d21dc51b1488c162cbdc00301a41a09f2078a26937c652cfe02b8c4c92ddbb23583495ba825ae845eb2425c5b6856bda48c2cafae0c0c2e1764942d94be50da2b5d8b24a23b647a37f124d691d8cefbf76ef8fbc0fbdafb0a74a53aaf9f165075784ab485d4d4",
1262
	"6881babbb48e9eea72eeb3524db56e4efc323f3350b6be3cdb1f9c6826e359da",
1263

1264
	"362f1eb00b37a9613b1ae82b90452579d42f8b1f9ede95f86badc6cdf04c9b79af08be4bc94d7cac136979026b92a2d44d2b642ea1431b47d75fce61367919f171486a007cc271d19de0d1c4c6a11c7a2251fe3aee0bb8938a7dd043d0eb0758a4768c95cc9f6f1703075839487879b47c29c10b2c3e5326ac8f363c65aa4ef76f1b8bd363eb60",
1265
	"c6ce60c1852ea780ed845aac4ca6a30e09f5c0064c9675865178717cfeb1dc97",
1266

1267
	"d8f12b97f81d47aebbfb7314ff04172cf2be71c3778e238bcccdeecb691fbd542b00e5b7b1a0abb507f107f781fea700ea7e375fdea9e029754a0ea62216774bda3c59e8783d022360fe9625621c0d93e27f7bc03632942150716f019d048a752ccc0f93139c55df0f4aaa066a0550cf22e8c54e47d0475ba56b9842a392ffbc6bd98f1e4b64abd1",
1268
	"e2e1c432dd07c2ee89a78f31211c92eeb5306c4fa4db93c4e5cd43080d6079e4",
1269

1270
	"a10d05d7e51e75dc150f640ec4722837220b86df2a3580ca1c826ec22ea250977e8663634cc4f212663e6f22e3ffc2a81465e194b885a1356fcbcc0072e1738d80d285e21c70a1f4f5f3296ba6e298a69f3715ff63be4850f5be6cb68cdba5948e3b94dbbce82989aa75b97073e55139aac849a894a71c2294a2776ce6588fb59007b8d796f434da6e",
1271
	"02f17bf86dc7b7f9c3fb96e4b3a10ca574cd0f8dedda50f3dda8008ce9e8fec9",
1272

1273
	"152009657b680243c03af091d05cce6d1e0c3220a1f178ae1c521daba386694f5bab51cd819b9be1ae1c43a859571eb59d8cbd613c039462e5465ba0b28db544f57a10113406ccf772bc9fe5b02538e0b483225209c1eca447ab870e955befae6bf30dd89d92ddae9580ccf0dfac6415ec592a9a0f14c79acce9679f52d65fb8468012cbc225152d9ed2",
1274
	"b341f4114eee547eddeb2e7363b11d1e31d5e1eb5c18ea702b9d96b404938bad",
1275

1276
	"eaf4249b5347c2395104a96d39fbf5322c9af2f8ec6a8c45efdc06a2b246efb5502952ab53b52ed9ca8f25a29cd1789b1b5333eddc29a5fbc76c13456a3eae8c9208c1381d062ff60a061da5d26cec73fb7a6a43eace4953f92cd01bc97ed078da19da095842afd938f1f83f84d53703f397fec2bd635f94ada5a3eb78103ebf4de503e8ad7295cb7dd91e",
1277
	"d14c7422c0832687786f1722f69c81fbe25b5889886bf85c7c7271bf7575517b",
1278

1279
	"a03e55ee76150a6498634099ae418184228320bc838dbfe8276913761516ec9021226f4b597ba622a0823ca499618169c79eb44af2f182d1cc53caefd458a3ed7bbea0a5854653f2b3c20f659f70f23ae786238a8d0e59c29ef49d53125e50abf43b6f65c31f16bc174e43468717dddfcb63f5e21e8d4ba0e674140a97cffab1d5c165f1d9aef968154c60ad",
1280
	"fa889888d3b984c1577fe7c38ca86f0df859291502fe0b2f6e82c778babff377",
1281

1282
	"2fb4178a0af42b155a739e2910b004e0781c1bca697ca479bf8e71430aefc043883cc7a151779013d2ad07a47cd652b5bdfd604130a1c565115ac51ff3c0ae56b5886c1ab2f0572e385e4fc33c430b874b46aedec49f9b6f45c08be3633bdde99ee02d7e9325276b74cc9d0fb6bfd85e093f2c2a8d3dcfa24308ec18c229f2072b8b32545ee0a9d46e3f1a0f53",
1283
	"254a115343d0ebd865e5d3ff6c61c3f9b65fe96ea92865a5681b1f1f0d1b00e9",
1284

1285
	"dd344dd531f415a590a9c1838f242af8605bc0c29c1a71283ff5cd8af581683c94c48095e9e9e042b73804e0fd467ecb78699930696f3b6a9890108b99a0e4384e8a51bbadf99b53c358d8cef9fd545a97a13399861458f35a2e86309009c546136d086f058c0c7fbdf083750cb17250c5ebd8247c6f906c8db978a26123d30dec58ecdb7a0afd6face84efcbdca",
1286
	"2d56bef53fde76ef9849f97be2ed22d3c3d10f23b049eca2a8aba0d1fec33119",
1287

1288
	"353111e447fee6f0bd05d562f30626ab9fb06384a620c49034a5eb3c0bc6d1eb1b86015053e6041ab8ac1cd7b4633512b0a318bfe592e2da6eabb44aa2bead0ba238158c2ea5db56bd7342efccf9d7fe76b8a6af45e0ad594816915f65749054f1d1b7627e4355ecf4e3af72e4d0f5b51877751c6f110f57e86ce942fcef640c31d94e98ecc959238683cb28a3f178",
1289
	"11b27034db724b46882a3086815a835947d19322885e08595be271c511ef783d",
1290

1291
	"c4e5a5afa1c7d2edd5a21db8b4891ed53c926131f82c69d323b3f410114281fecbc9102bfa5f298e06d91fbd7e9b9661bbae43e7c013f3796557cf2db568de7c94a7cbf5a53ee9326ab4740cadbf1a0b1f59b92040156b977eb4c047a1f34a0c66a85f776a0d1ac34a5ca30b099cb0bbb2ba4c453edbd815b7f14fc69e8cce968bf453171374c428eef8342459db6359",
1292
	"f1ebe75725c26b82ffb59c5a577edaa2f24e49c9070cb9ca007e65938f33dae4",
1293

1294
	"3b79da982ac5f2a0646374472826361c9d2d2e481414db678e67e0967e5cf3cdd0c1f570293362207191ecd78fb063347350d8135a4f02614d1de12feb70a0046939c078d7d673fea589460265290334d217d6231274ae0d3891e6f50da725f710c983d9bb16ede20833caef34f9dec3c36a6f9fc4eaa71256ac3a136b6a494dcc5985ba5e5c9773a377c0c78387bc8a4d",
1295
	"1fc7c4802141e2db7a9199c747d885a72d8f068262863843c9f4cbb19db38994",
1296

1297
	"cf9552db2edd8947fd7fbbb2f7189a578343e742891ae6fb85fa0f64da8706e468f0cdc5607539db5726a2679aeddf3ac2ce711e886eff71dad203132e6ac283164e814414c7f686b011fd02c95f8c262920e9725c811a22c1339e0de16e5acd0036d620f2dda98e30c9324c2b778961e0c0b507ad5b205463a448199c9bb60b4f303420a1be3b3cfed5ab0d693cbe331036",
1298
	"b51adb0c2375c9d302ba61859040fa4bfa0091275eec1053fc13950aae706c25",
1299

1300
	"4ebc9225da5f168c07ef62f621d742cd7c71bbd063269f5e51d65ef164791fe90e070f8b0e96f9499ec21843ee52290fd219c3b5b719ebfedcefe4efbf6b4490d57e4df27d59796f37d35734110b96fd634f5f20bc3de9cd1c28479464be84270ae7f16211f0be8839e8c8d0734ab22097dd371859d9be527a4b2fe83bba0637170ba6e3b1a2ef1c0cca121ffa57a4ffd78af2",
1301
	"54a3fd90ae00dfc77644ca16b4964c3b32a4641c5305704ee25d9f8fdbfb5c7f",
1302

1303
	"a83f74dcbb48d679db402433020e33dacfa2c37f1e39b2d9dcdc70e81a2ab3d75f586c274376f90a39f49c0dad642cfa4f810afdae7157050847646d60cc6adcd27f7c6a24dab9049dd7c6111ab37c555ef2dd16aaa34d7e8de5ff41feaaad80a8bb8cec85fd7f2eaef28a8772828ab3a5fc24143a58fc0c15bf27ab1a4de28a8a1584f68f65b151154cd1b6dc5ac0dccba7c73d",
1304
	"5d084841c35b1cd9c43082746960ff5bb2d3de78f9bfdd80dc9ca4f5eae2a66d",
1305

1306
	"734f872c431ab145706b7517e496a3be98bca885fca0105a99b54980f47caa84b60cb3720bf29748483cf7abd0d1f1d9380459dfa968460c86e5d1a54f0b19dac6a78bf9509460e29dd466bb8bdf04e5483b782eb74d6448166f897add43d295e946942ad9a814fab95b4aaede6ae4c8108c8edaeff971f58f7cf96566c9dc9b6812586b70d5bc78e2f829ec8e179a6cd81d224b16",
1307
	"14ec5a3c2ad919aa0f0492f206710347e742e7a58d6fdfd4b2c93dc2183b7b6f",
1308

1309
	"10112498600da6e925d54d3e8cb0cdc90d0488b243d404b9fb879d1c8beb77bb6579b77aebdbf3e785abe61df17e69e8db219f29ae226f7ca9923719350abef876ec6b3920ebb5c28ccedb2a0b70d5d67a0c8a6116b74341922e60a867d24aa96cf1a89ca647d6c361c5922e7f91f9db114db322249c6a50dde28093c94c01166e11d66c26f73c322d1875f0f8e6bd41c86d803480d8",
1310
	"c9a88a3f221a857cc994a858f7cb4567979ada7834a265278e55de04c1fe496a",
1311

1312
	"6969a27ad5d0aae6479b2b044bb4b043642375ff503ccb538e17be2f1e41f6aa88b1db991ffefd6087cfb20875920192b671be8b7381f7e1b33d8ff5213429f110fe475cbc74b3ecd2211f9b33f308fcf536e0d0abc36bd5e7756adefddd7728093730ec339c97313179b9e40e3f8e2a2a5c21f5836bf0d632a7961239a6a7f77b44dc700cdd70d8abbfc90c8dde5bc45dcaca2380df4e",
1313
	"bcdec7a8776380df27a4613cb50b7221995d3f752fa55691798ac2dfa0b15599",
1314

1315
	"163cf8e89b260a81a3d6e4787587a304b35eab8b84faebcef14c626290a9e15f601d135cf503bc9ad5d23e7f213a6146787053f618c6ee90467e3a8df1e03387928acc375608339f7fa45788077fa82f87e11d3c58ce7cf3f8dad6aeaf3e508b722a2a62075df9fa6af4377c707ffe27aa5a11468c3b1c5fce073dae13eac2d1c9a635c5502b96115e69e741a262ee96a78336fcfc34573c",
1316
	"181d10fa5a58ca57077be52eda53910135087312ca7711084e4a5213c81cb4a2",
1317

1318
	"3a023141ab4db8b08c5cb6792ad97abdf0116d512ea8f4141a8b987f1527657d2fd98f7deca55cc6492a3d0bfad53e40f656a1ac3550c63eb8554f24cb11819a87c5ec009af84e304b69b50eb847e46162a4f8e1ec284b902002994e332461a84ab08ef23cad57959aff64a9ed9632c73ee5b818dc964bb2597cbf25d6c9cf508081be7a5b2e3f9e3fd69305202af11a92002a7b8b038d4c6b",
1319
	"b75b698857675f8aff2b482ac437925af3ea86198484cbc87b60e6dacb13e7e8",
1320

1321
	"2fd7ed70c6946b11c819775fd45bc0924c02e131ab6d4a3618f67e6d3b77801d4f0d87ea781bf9fa57929757dc70f5945c872eb4e480d547cc1f2fd68fc99f81da4361e7e2bc7b46fb0ef1e3674139ad6b50ee1da830c960a90fccb8b9dac020f701e22fac7eda3edb14eccd1ad47223a1e68a35a1860cc9d74dbfdb60b2cc40cfd072897d6afc2a202cf0dc9f338a3f25d068c4758987ca7d61",
1322
	"85c9275ec610ffbcd7f785c0ad24b7700b32ee352e6720f1ea2305bdb7f45277",
1323

1324
	"cecb838187223873bab25205a54dadb1ab5a633958cbef3aa04f930467c8f7a947ff12548d964ddc843fe699f72c9377f1c76948c7a2fb5f58b1c65a94b7cd3f3bfe80cbe74be2064d11eb1bc0e52b67f732b1d00f2e2b58d30c4ff13c7479943430958d9f283f199c9029320860bdaa450404773955c74e99c9f47367e642cfb9fd1843bd14ac3cfa246887d885916763a62ae54c011668304e7e",
1325
	"3a5dd05e009e7f985a2668885dd0ea30c5502a1b5c575db6a4c1149c2e6229c1",
1326

1327
	"283dfdb2e1dc081e3c2b377ba5bc6491cc4af08c40fbfa5e3fe2d45fcdc8b736032cb5fdaa88f0a008d60a86fa53dc7443836bae2475175f2d48163a52ee216241306d87f3f2dd5281b976043a6a135af2555ab39c71ee741ce9e6ac56d87ff48b510d9ae5a338fe50db643b8c8a710a80c8a5e4d278e667b4ce2dfb010f37b588987e7ca822676a1d44bd7419395e4e96e43489eb1167ff9efed170",
1328
	"5643c4252210fd45a2a67cd0a97d37e80d1b4a3c2fc86b0c3a3b4d3c1723b9ec",
1329

1330
	"f32d2e50e8d5df7ce59a9d60255a19f48bffe790e3b1e0ba6b4bc53d920b257bff8d8003d5faac66367d784706f690b2f1f3a0afafdcbc16866d00a41169734f418d31d7a1c3ca9ede99e5b986f1294710fa5d011d5fcd13fdbef02b755b49cfbf168bf3d39a00cbe5d82bde2fb4ad5cf0fd65b1b5a3db5ad724dff745486da2830ed480f3e61795542094dd88a5e3989ae501e5ff10ae921c89133309",
1331
	"1ead94e30440b647d4cb4d7b3ed6b87ac07e8d72b3e5f28352bf14a78232ff1d",
1332

1333
	"8bbc18eab6bcd9a3d6b90ec56d3be949e02a8866d69c7808e1ec787e600c7f72a41c001f513b6cbe079df94142dda2447f956e41a12df60392f0215d2d65331b5cdc06397d4796530b4bc45d7a975394627537b4e09e0f6c3a53f00fc1a9648cfc25b2a00288604a28ecf780dc100620d1f169295d9acb2b1f3c6afce4811aadcb1e8dbca8a8d18ba7a81a1132f1c2d014318e07dec7332889d4198c5e95",
1334
	"429f15c653f92734bfe4d1749e84da8c28861b70c5158bf59809ece810221774",
1335

1336
	"a3d0eecfeff88df1cdd1e86df7bd2ec3ba60bcedfc9c42ef7dc021b05dfc1808df19201a6c6694e4dbf69514ef08ad1d21c7b28ba034ee9397607cefaedef5e9d3784db53a21f703a22b50d5dbba3a8e8579074c1a8b9a782fc5c89cf61a047408563c476110fe77acd9df58c2ba1d3e6dde83da718b8dc6cd57cd5e3e988dd2051cb679ea1af16881690b44acf09e54615eeedaad1b11a4f97e53de8d40d8",
1337
	"afccfd3b18f6d292d2e125884b721b3e3099c4dac8aef05ab0fba26799043d02",
1338

1339
	"2ecb657808b29574b020545fb7f94071406047ef4de20c003cf08cbd91930187f55b079d7f99fded33cdae2bc8623021af990d4650c4a19197b4c38faf74a8b40d3803efb1907180a8e1150ed6167ff4f293d3ddd26a2790e9d22c0d0ed511d87e48a4952500bbd51943d230687df5941334e1dc5a3e66a43a320f5c351c059c517531b76352a1938ddb2db806ff5aa619667e6c71a7257693bcb4a7acb34ca8",
1340
	"c994acd17e08e8efd3ba83915245781e3727bac445672c44e6335e4f7deaf90b",
1341

1342
	"e649888592d192c5fb59f10560f5f5a7b0ac21739c35dd80f1fe6b5825731c572f7cc4549c476b84e049459aea7fe533fbfaad72b79a89e77d1addb6f44cbbf5e6a65a5552fec305bc92ced3c84b4d95074387c71184e875d413f65c2b2d874cb3d031d0da7d0311383d72f823e296937d8f97bad17a62f29ef1a091f39be8233c01330d5c4c9170fc501b5022ca29f605e6c59220055f2585bcc29e742046432c",
1343
	"88a9aa4b4ffac981d1ef0e8b233cb309695f89211cd4e94d50760909e3cb919c",
1344

1345
	"816b0bffd99b0f7821e6093ef152723a9cb45f7a082ef8d6bdf72cd33b5aa3c79102f43e2b74199decdd20057d0e227ae4c57945582e2e9653a9b16eeacecdbc5aaedac7e35c35cbd9adede7f83bbf36f8b0453d61416a85a17821885b3757d203fa2560a85c4b4c10dddaac0ae230b700fd2929cc6f94e9ccebe4e9399d284eb46b3ed2227b4366baf54d1b5c0a5d4225358fd240c0940bff8b62592a092a7b978b",
1346
	"c593f3d663c48426ce892f22584d49a3335cce3456194b7b5ee4814fab477fcb",
1347

1348
	"a10918880cf31a8551af80bcb0d1a6ed71ca42c71e533967ef0fb71c866b7e6ddcca7e5d7cdfa6edef59fbe377c6e7ca00b1d33a530ef8598dd971a2cff995e5386a858f109b012c4615802a1d5e7fe0221d19cf617ed827d8d8cb8d2c8ed81b9b3354a832f1d14a402b371a0a611737c0543b0eb06b82d8ba56eb6304f1ef16ef6b143049a7bf50c4e2493aa69756d8c39f627fa89d9d741a99f9afbfeb81de1a5bec",
1349
	"d557aed03eb7c4c4c8091efdee992c9ad7f8d2e79e9296b40a08acae37868d48",
1350

1351
	"de7ba70e45c879ad6c90ada6fda071c2b692840f7893eeca9b69ef8285b4357b7b735151b6cb6cddba04365ce3d520ce41e1cb9da681c07ffcc4619ddcb420f55ddbeefd2a06f689d8498cee7643606865a3f8b96aeb5d1301751438f4b34fe02dba655bc80280776d6795a4dd749a56cae1f3abec5a2d4e5183ee9bf5382c0492199eb3b946707022673bc641f0346119a3a4bb555698f895f6d90e06cc1e2835ff814d",
1352
	"06cfdd9cd7ce04abcdbf3121a9ba379505dbbb52f148c9d28ad9b50facf573ab",
1353

1354
	"6e9a5752ff8ae7c385b088e651ef2543daae1624562052f787c9e0f5d83e8f01a82ce7d3e69b5f55de74d14d52412a3dcd356687346cbcd59e7315b8650bc3907e2a70ab054354b11cc7ac3ff6ec67d22fad22e75f125660eeb1d02a2a75621d969ed92385092e9de8b20102657742c9a91f328afe9a8a60208af9914c03d4719b8f0a838e7656e2ea3cb8dfc66a25ece2927eb93a8dbf9cdb077936f63e82543306ea1347",
1355
	"cb1e8082bb94629f162f20d815bcf3b212007bc049951a29ddb18a1f556bf3d1",
1356

1357
	"b05007119789d382fa750d2087dde79b37a5459c24522b649ac976b07059cbdf99fcce56f6da94246e0f5ae241ae77dd99068f7863240acb5c99c4906f7d06403eb3b679ff6fcaa389f602d3aea5d7efcc35af149f3d523459f8a104f5498615c8fc2740594f5f4872b16ebb77c9ef19f7ba0b3881a6ede7b97175d2aac731a65e608975ac82395b52c805624423a7a3431e0daeb066c12ca389a9c338fef03a296644dea211",
1358
	"9021fefc1a020cd0c579e3dd67a66dacfabedde9cd36ddfc7d5c5c7c47be2721",
1359

1360
	"a19909e14ddf9b3c470df6bb604604ad767c38c83b2b747937472b791173c3a10a733dffcae417295f2a71d183ab709a1d3be02a0bd61d811f95338967db44eeb2cf2a2f4f105ef618a418a5b031b831086f653328ddf43c2cb30b698c188638a196199a65cb374a7b61335c6f40a6193e01100a19a6c2536689fb4308935128e0ae5268937d6ccd8e4a0a21484000fbc7da29d8669b4e6dd5004a3c61b36c6676011dc0628ec3",
1361
	"7dcbf4dd9c27fd8340f51c553898502cec53d3bc83198352fc58465625c076a2",
1362

1363
	"b0dffe4a5f64f612359397e4e070a8fa01296c1d8cee25177104d76a7c154e4279cb62a99d9d7afa21e84f983041f3df030a115b4b437638cfa3d0fa56e7b66fc76be9e18ff7da8f43db6c5f863efacd2eb39c27a20da6fc867572d29bb96017e0e71a5afe1b1dbbe29575a0ac0ec7aac84c95e85af5be4ae0a14458133252230d687e7cb1b04b65483df2c5685a62601aff85053ba2c509234fcff585fb967c96169bb0725f6d75",
1364
	"8e7023d18902a9184a0191f1c7a2b79030e833800baeeb33e2d0673500245dfa",
1365

1366
	"dda3625c78f733c7df0b5f4987cd30d7207afa40ca07f3b686c0458aea2f62371a3f98a2f3a1e5a0896f0cb9d40fe82ca65b0132e0fe5d87e621992750483855e3763ae2bf98f0acd9201065acf105962c7b88e3fc277490e0f5d6447563440d209271a544a4fef4b86892d578392c1d9a23b8da8448e1d85d82276ac14a3166b9d96472ea8cb47e0c8dba929eb007cad89bb99fe22a4c674312b21f9cc4a56996943cd1191abc54bf",
1367
	"ad83957a387225aad811b0737f582dbe7eb616187a8ba8e09b00db5d0bee4a7b",
1368

1369
	"5cd623be5b6bf6d1bcb414c826d0f4ce60793791b6d82dae9f9e9b699e50bba266e2850541882d80b2c9edfa59d504421818ff45740f37853e5b9bc67214af0a5f5fd5c00843cc39cbb8765b4001de99643c7923f738ac5922868f865dd3f1cb90759c597843d9e34daa3754a2fd89bd8c0d2e9106fa95149448ff11273587cb414a603759315f6881c6b94b46700d94d8b2a5f86bfdf99ddcc974cf98e47bf4ba09acc273b463afaf35",
1370
	"f754a71e3439760aec2d763751e160d05d3de0809dd4fd6aeef588da8b86a517",
1371

1372
	"42c0a452e83840ae858c094c044961d5f2195ddb34a21cd1f5ab575be3803ac99b9872dd617688d515cd6da562e756853947c9ab7e8ef85a019b4f1baff6494b0a6f87d5d602234115fe42ee3667e89b8a98112cf72cfdabf01fcb8ea4314938768b0bc2aea5bafa6e67aface78fc021cc525ae60746d1ceac7ff33a2bf8e398c935252a5127f5090650dd69dd28861ee9becf6017a21ccb1b03f0a9aa15bf74eab5fd9727507b75c701f3",
1373
	"d5980482d666dde4f2c3a99b45e523fd6410be999a96ba8c5df397c950605e70",
1374

1375
	"fece673103322483b85340e991e478c2c15e2d795a98adb5b697b4cf17a733898aaa4ffd11b1add300c9edb7a818740a33286fd8cf82140b0f7f2bde8d5bce94d58b6d697e5015c99a8df1c051d611b2c8c96a4c48a11eba9c08fe1aba2d4d31a617c75d9439e2cb4d4654ead346d52048ea26bb0c1c522a26db346de54639cac6f668c299919f43e09c1f1f78914abd7b32ac0f641c39c3749fd5be55cd1ac6fed1557ed683d1981c395946",
1376
	"17f4b2f60cb364da5e8a62db58e07eb1c44b888c433adc1e62461879cd271463",
1377

1378
	"a542b2bdf8e04ec2a004cccd2f89e7bfd17ace1ad285c91360ac20e9913e3976a806000494c28b61b9d7ff36f342ad94d8d281d03e949d91fe8f4127f7b2ee1e550bcb13133a47c7be2400727cece45a4e1f95a3922e1269cc22950ca58bb7cb34b9da957d2fc81b3755982ad36dd238b9c8d33dd53a72c452cbe341a5afdca5ce79f730da8b5886add18f06feafbf57a33700430fa003c919f3f56dff08a5d3aab1e88c33353d30a700adad07",
1379
	"50cf700b5b6c802e20da4c1f9b75bd0a6632678212bd0e2418201f3a10389994",
1380

1381
	"8fa67f49db80f22bc267a70e5636dfbc8a21c83d9691fe4b9c3051068b3fc9e94430e7fdfb712e4ce086e299ff5a104e65d7ceb685b4c46cda8eeb14cd3b9548d85baed5ec2f412810af3d034cd67a75c541f70829f8663c4d8cea3415621fb0954e5b3b756333a69a0a41b402522517f087ca9b4a06eba23f4fd5d02c5c6e07c132769660b50dadc5c07515ec751a1d2fd2cfd8b0855b85f602344fdbd28a37a52e874e73ccd627dbf9628cd1e8",
1382
	"3379265620eb781d6b59e331cc525e60e8c063e19f96cfabb2fda9aa83cdeba5",
1383

1384
	"23ae9cd31da25c0187c0247be19e089872742d772f73d0efde5889c97b40d12ddbbec35b8f2b1f9c0b3d947708db3f2726306f4dd6ffabe37736f671bfc551835db0825adc6314e2cb479fe41b92497dc8638dcfbc0e3bf6f0b4c03dd418a892f1ad6138ccf442bc0e04cb2ae36a2f80a0340f63a849891190fc719781e0de44dedde95d2783b1121e9fa3b1280cf81af5cc7e7363579c1da03390e68fc5fc806e67a132b5bb6acd413eace2b120ac",
1385
	"a17a00ac106c0af50c4f449d3cdcc2cdbb9848d2d85a36ff434099162e25606c",
1386

1387
	"3bfa57a5f9f60203059defd501977628908ee42116e4674dc0a52a32c5bac02aeb60c6714cd9c47c5a61558c21648884ccee85f76b637486f3709a698641c54bf5f5eb5b844f0ea0edae628ca73fb2d567710080e8a96c3fe83857fc738ac7b6639f0d8c28bfa617c56a60fd1b8fbdc36afe9ce3151e161fa5e3a71411fb8e123d48762bc093558aea7f950706bb72f8dc7ca3497a2b3ccf345ad3d9eafde10889d76c61d432e3a165d34ad0ee2d9619",
1388
	"1a2cfebf3483c33a5eba84121737d892cf8bd6c3ba324fd4ae4c2db42872e54f",
1389

1390
	"e9b9525afd5634cf8d16df4ae7e12e8ae206c6ed6e7d4dd96f6fd75accf7a10cc22b023c7f569e4aec88dd51ca519c0a00c922ee33d3559b98a32d79067e6a9d50c182eed125de864841455be751991ea635c163ddbde6031223e2be0fd9f5253885bab81c4b5a4b4a4a00ae66698d8c7c538c9493c068d786f7dc710f90ac6c257f93e1884e7c609aaaf5927021e01d292a6bc87e6643e09b2505da2d2cf639bdb6f3b33cb8ab8fdf690b512d02fa9956",
1391
	"3ff47b4bf4f908aace95b0468a54b7e6644fe07df69ae327c0ff2e45325b97b9",
1392

1393
	"13ec10c6b27a6ce6fdd5e2314e8626a28a69f313ec62f29b044cde1aff32e61228c252b9affe6a4ca93593a55932bc10aeb3f85b0c1d6c2c506d6c970e72e1f01c3aeede55cad3b1971111f60e1fcf48b5937c691952b691617f6a058ba73decf83b2b5e2b446ebfce52a24bf5b526f1a7f0c5659b6b96713f68208cfe38c2adc3af5361b9d5051c56de8fcc975d8bb48db41c7818cfd574f312d652f08f38dc857dac0e88e55e70379f20a37b7dc4396ec6",
1394
	"9703a69f279ef15b843b355f86b3f7098a46eafcad625920d93e0e3fb136fc5f",
1395

1396
	"3d8263a177af8c5beabc76a4388e0816ab1bf1f5856e985791f15688feebe4ac6d480fa64999b339575be66d8e7c7435281b8c4ef990b86a00ac128e3c41b6b9c0e573c60af4c69391d408639d7de6815b38122731a6389d4f0534a587af82175ee3f5c963c8acb1bfaf434e0e9946436df9eb46d4bb0038a7842295873c300f6ecaff76fb1e4fdb0a75fef588d87cc486e67f738bd4f8832fb24526e5f0a8e91920f8967bfd96599aada321b4437049cc8836",
1397
	"e82d636a61c7657029699374a2da3dfabfae366e7708c7e4ba2dacd8b786a36f",
1398

1399
	"01f793fa05548645f644a64ee1b5ff7fd38eaa233f874cd59f3ddf385e86b5e9f601b9b256f2f901864d61988d11c98593d7335543ab4d85731a3e39078c9e3012d5c6f83f064b5e7089c529a46dd5081efe66c8c49932cac5be88b57e674d689f98423389388446fb1f5969ee7029eebd29cbe489f8038edc5148148cbdca77e375b3cafc2fada07038a5c133c3cf21b881eb125c71c6b801fa03bdf9371b472792a3276094ce5417fb32973a0dcf87572d4db8",
1400
	"98bf0fd777137c94300ab5b1bff7b3f487a03a788e6bb96c715ba6f10ba1922b",
1401

1402
	"71a986d2f662bf36dcbadbba0657f4e2797b569610e2d82271ee6d813f01f6db922a5a4ca405d9e7cddc9dfbb1129294b8c27845bea337250c2f721887045e50288ad513acd6a6be8dce300a308e2f8e600bd585fbf61dd2ebe45c4158ab18101c0f1eae789ecfc205d8bb6fed9371d65a9e94dd2fa5322ff75452851abfcc2357025ea56e24fbfb1d4266b34ee900768fc3dfd6c2761f4716c97d6a36092192c0abbc81f832d372be535b5dbd578576e6c2dbf61d",
1403
	"27255d504a38296857b8d382dc8ad4f1ca03ef3a8d1983e54bc01ef97b04e581",
1404

1405
	"69ee06f5f53f74c76674751f8fa80efb42f43e71132ae0fc5ec6d2148c21570191e8baf0b9cd3547a57c103690d10d8ed84804d7b9b5cb9d5b35580a0f642abad5d0e5ca23ae3c32e1cc1355b8c7e5d78c7e64af47c6607dd960ea1d7d28b97c3d8ecdaab84a5131234cc6a68ef25e7d687ea62146c76845e02fd0745cd4cdf0d00bbab9020a3eec72e4714e9abb4029743012573d1fac9c798a513937d22ebd962df61f8854ca0ad67c5b7864885282b77df076b436",
1406
	"600b41954a9398ee66ea0e603c8c80d936fbc8be98c74f44ae13b0aa4b50b8d5",
1407

1408
	"2a74e9800ce49aac07af3df2e451f245d4ffa5304c318574135eb7f39a064bcc8bf66fc8a4c8e2f5c6a9ac90495f0d28938ab301e9292fb78461aa23e87ad482712b1ed42f172983f4977e45aaba7f43ea8a9e7bcb91cc63f89c34cf06bf2a1404995e6e53d9569fb8011bd9af6b32de0289cd669b7043c19698bebd9bdd33ca6bca985cb81751913a70eb14ff790c41030eaa8a00cf7c1987dcaeb650ddd9eccf46326707d902a1a36c56be43ecf7b414a29caea3b55f",
1409
	"4e549f206099a8b3183fa3b86af220b1b6554ac3d8d52c54d093e68f60597256",
1410

1411
	"5b2e2f2fd3ecc733a6198d34e5d143c176b60c3cc3dac6deafdf99fbce5cd088d583e8da4f01e7b09226f074f24613be345f691a46fb610b2d5855503ec761659152744db3a1a78f9b1fce7fdf584dbe28a52e04e40c701d3a62a13243b2af4a77e3fb106594afd7a84b52db16cf99ca3ad2808305d39a1dc043a52b45e7623e6f7da4accfa2a690a0f3a112fd739ee9522d891e111a8812a6448bc2ac2c234a616997a8579335c36d5fe6acfe0b052358fd715d70a7e104",
1412
	"24a3de94be98126ce95cfd3140754230b6880c71cfe4ec215c3f451bdc8bb690",
1413

1414
	"013944b7958b6b3686b14bdb042f2f5b42768edc20fdd6a90894692b15f6e5157b9da9de23da95749524102f1bb150032343d6fbe64537e247162243fea59f95f53e95aff2a38f82775fbf06e7574475e9a2a8b8119aad1ebe3349543e8cef9239c410124c0fe2c6f409604aae4a92185c3a0efbeb26bfc63394e5451ed45d740dd823ef774615aad3caf9e2b9b1c25344b40facba11f5406fe1fefee6a571a33a22d42ebc6fb094de4c94b650b55c9068b7b3b3c783d7f53a",
1415
	"009661924d01ad811d4c598580eb954362b8554c5e9cd13686acbe41ac8c3940",
1416

1417
	"72c2880163482bbe822cf72ff0e02be7081d271b366fd94c0cf37926925f76a9de44b086e590e7cc915773c314d336187ba9d03b866d1106b769b49fa99a4a9fa3fc74746d085504627a4792c757cde65b2fcaa82f9ff00eb81b7ab723ea1ed6e8723d92a2b65ead1e1dda64b275d897d0377c2ada0d5cab38913435a958da94d62f74a92da4e810ecc994017c344074014a50892fbe3e265f5448e2e2eb662295ba7f81b5dadc76f504dd31ce9debc517efad8cd5ba7fc754eb",
1418
	"77cf32d62a3d0622cd90f7c858ce1ae3bda60f9edc9cf50f7ecc9d7253d8d18d",
1419

1420
	"c6dad2ff2cba3ed8873955178068b5704cbccf1e8c62eed472d275f726a7670a68ae2d6a763d943b30c616a27aab5a34e254feaf838093e828d8e905b5ca8decc39491fc8b9f8bfa050fe04e5198436f5593789ca8515ecdaeaf2ce905eafb3920b5851d32892cfd4e3d3e83ccd67707eea0c74bc47e56694c7ec609deb0b8d7c739913535a37e2c5377b5a9b40efee6f5a472269eae83a54a6d3dcf08c4ccb000473dac5a9489705be6cf28d1e7e1f2b2c60293008aee6aefa61b",
1421
	"8708b77ac39005607b179857c037f64860540e80ed7c7a4240e09ae62c88f87e",
1422

1423
	"02553a2117e654ac28d948a6f67a83daf2089a95ff6631ff78131baa755cc36c4ad0ca6a51f5f176ea393a9bbf2b4af54deb12c6a0dfaec75da88dbc0655d34b7ad6fb0ebbb3c1e7f4fe3f94bb865683934d4fe7b53cc20b1016b7e68eab0cf1994e1735de888ba8500ea0b970f16e2acc159a1ec6e435739743e15194c53603af1f640640dd19600653a53368d55c92012b3b935c3fcfa6fc195325a00d192cc5332baa6b1831b81cb3952a2b9be6643a777a70feb5584d477f5489",
1424
	"376b551c1e8f908d7e1979efa436ab69013d2e85c34430dc826179b4f94480ae",
1425

1426
	"9945c4f0e067b943986b6841b8fd21109e91d2f2549c711a11039abf03d37a6e4b34eba44a98e09c1b38046660c19e39424ab80ab38a805df648ee5c6212a72663322269c1de093325afe205d955ee2acf885146e5417432672ba807d5540c79e729b067cfa1faafbeb84947a91fd98a4d32e7cf712a15406b940feae5026f10e100dec5fb497cbaee3b83545a892701c530c0cddfac2a300a6b6c2a19829992589ff4accd3e57f9be20d65374f99f393e6a2467b82e7da94c9807f2fa",
1427
	"a4ab2e8f96b69097d84596b628e7bb76f460c001043ce5fa6e379fd29d1eabba",
1428

1429
	"a4d7897eaf5c49979b361c39a67f47e26c2f75e5ffe0645539d4de245138eb8cadaa45aef7fa0c7a732dbbce90c85be2bd4bf6e37dfb4fdebee4d0e0671fc45c3051c6ccb674799bcfda7a431a6e93b3db3e32f30636190a9a2e5620302876e0d4d2f6201353fac4554341df6efb591c6f100f5dc21a2aa176ba592bd7db69e14237bbf2371df6bbb072f9ecb1f714e621c97768d82eea6bf98ebf4a82c005262188ff894a5dd549866f88b00ee82bd99872515d71fac230ccb472c55a60",
1430
	"9510ff5231813a865918badd0011f05915364165492ef17b85929a63e4951589",
1431

1432
	"22813ee9edc5c2a90d8b3f07b48d9534e60f08312dc296d68fe78719bdb7478d8d037129aa182c4b8ae5bafca1604e76d5251ee43160ba68ddee9c624ebf00f0ba7ff6b1cf75b5cfa4ab323cf04ff13b7a591b23d06ed25f3c04c1baf4c8f7da913cf509c2a5053c4224ce4d0723268cbdf2277672b285c493731ea81799d353fa8497baed70c59a4c99b7b950a39470863a69667ff67c9ec981ddb41ffb3d63dd9d034bb79d9df1a95214083199e4efbd770a7a5f005ef5c877236674b6dd",
1433
	"44f8a8b05fc643566f1f53a93a122f7902d2cab68bb02267c0479339371a7304",
1434

1435
	"eebfa2629596f61a926c4cd472ecb03eb2ecaf7f7650b12f7d2b8aa755284b7ccb295e46a62dd2a69577f38765ed1ea377bed34972470c5e3538cda310f2fd353334745a66f7557afb969e6c0132fdf4bb55e68951d5e25bc4fc2a9427e574de0d290d263ebc28a0ae11760caf85f63765fa0fc47ac2dc2c14c0c70404c9597f415050339443f2209430a2eed5acb1765df5768457d6a1db0ccbcc7a0e66531eb6f16608d1555c00973b4a9add70d5b88b8e44504fd9da709367627fad840bc5",
1436
	"9949d3ac3c05b4a08b85fa371811fd3f0b50c71950fef50acbb59c450ab1c587",
1437

1438
	"ddf38f51b732aea3fdf1fe4c756d17961262163d737f407fad17e9724a19959a92425cbb099193ec38fca8edb0614eba4dbfda60b8a6ed102fec547289a22c3b74464a02023ada50647545f6f57959a37a85a4b5a70b2050e66416ad55c33cb50d6820cfaa16caf608c69d0e4a9d7f78211c3ae44b97216659e8f6cdb6640b30e50ea8c90a0bad06ac5678deb9b50962caec6494a930377b11debd77b46de2d382a2a8992902c9aad88d9e0d49a93f88fe5dec6dcbbfacb794b0335558c609c66e",
1439
	"954473b4965a57c4cbb20e199b8730487eb621f5fd694a1eb1667940da0d6728",
1440

1441
	"184e1b9ccec71f837dca25838db073d51cacc26246fda091a468135d12e67faab69ac9d93e05bd9a687dad01c8db5bddc6751a45e64c2f734c867dd67f1e62626ddadc2baf7df0320f3e4c7e477a2b6f0ca679504b87372bb3a522e173fd8f7945f69ab9ab967ff378f6482293f3a936f82728abff188060e1ae48a778ebd09846d64cacb9b83487ad8bea1433b09ed791e06f7f8a65d2bbdf8a384f1550eb677962392b624bd593b6e77a7daf17d1fddfb995f472d8f5e4b41f3a02d394a98de583",
1442
	"0a7506e1b6cc43acdb4f2ec456e069e6e4b7608deb70dbe7ccb88578658be9da",
1443

1444
	"c436d19f05550b6979bdc69bfd27ea4cd80c1a60f00a8b093e89178c7f9e8d492c304cf6ad59102bca0e0b23620338c15fc9ecd1e939ae91da16486f72ee1e154d41bfa391e6ba3b6ca9b3c3be39b5e61242ca5cd3d6c96cbd1170af91fdb2160db3522e1bc3b1a349d6e50479920ac5d9bedd8a16a787a3cdc2b6d24392f25555cc2f20b2ba9e6b47ddc96cfbd6df669d874ce21a758d3cf4704362ef7786d90ed67b01bd91299950058885accddbcf44e340ed4807864218653ee7ff7215aa1e1761",
1445
	"206be726fc681367387ff0a15303533058070f9655438ad8142cf39a0523b2ce",
1446

1447
	"daf7c7526cdb85127df59220fbcb67dc5069ef58dc069a18a2e4ad164178dc0927cb1ae70120b0a975d78c4e1491dc228a95dc401873ec5645e7e6a8d0ffae58e8800be49f87b5f09d6caf4611ebd61bee86bb945325ae884a001b88b6be1a1c87de41503057bc6f5b7ba00fdb217d4de203335a746506371bf8f4bcddfd45df6bad65339bd9efaf18ce0ab1587bf842cfd6ec9c637b1cea1f96184e2b045a28fcb51e96c85574373d2b9335724170821ec58f6108af1929bea430458a1a7f80a2be1580",
1448
	"742389244ad26d7a16d1f2b01e9c83e987a283bbf3aa2907a556746fe8c98c38",
1449

1450
	"597dadb776945e01c564f17eed4b5c1bbb34eebb13bce37d2d93363efe24b660f3785cc9e557dc2e4ab17a91a83d1f085060acc148508e43897993f66a20fbe65d46d3c4d9cf7e2e97e3952f0195f10ae8c20533753c719f6228d53d69a5e3c5fdafb9b039426d8716c2e961e09af9a8eb24a21b82c9b6192069a51ce3fc96843d7ab696edf9d0c42d151f2e2d95606ac14c2a80563c82392b02ab9abe6e3bab8471747ddc3cd06a46a6de9fd0ce4dd8d202466bdbe00088ebbb8ebfe341fbc2395a986df0",
1451
	"892985bdf2379f8ae138aac016894ee23408955d627cfa699fa5fa1439340a91",
1452

1453
	"0efc14917a94f5320eb734c2b9e45f659d06c9f5c454deff0e76b30f6ee9e22e56a494a870fcdf138fc5538ce5bacf44761f993ccca4ae4ced8d576a8a10fd2979fe3e8066a641cdc5f746190ae4819e1d0d2886089bcbf6f36be44b5370afa45e523ba0c25bc169969436f1912b1c7b7a189d5edf00da050a5a813b31d09da5ede8b390ede30aeeece64a9ae05749e4758a2149b99d868219a056c18cf972370e07cdd95006c264ae33ab9e6130afdff6a9dbd1fe38747408868c65ccb4d45fa9f9b102528c",
1454
	"73088e0551c89477bcb675245c5c6347b4230390285832c7d723bf668c8061fb",
1455

1456
	"9ac34ec974d28b18b7bcf6982eac60ebc670b0674e2acd697b49bfeb2fb81159fa5579a1e2a5bb8a5fc6ca46aaa5304a3771b15d804f2bef054fc1ad919e3852befea1c0bb74394f4d408d651412e247107bd32e64a23c9e593857f3a5ae253deea5104d8aa6ce108913881cf55d3c89587860027f8cc81b7eeec9e5f44e9fc190320c71d4a3427519250394d4ed07b9174f9e005b7696117c575fad05e76d86ae8cde5423d25d25076046f4392a0a7e56e8d6517fc66f265c5d617060e258354f9dce1dfe9de6",
1457
	"17cba68f47a0615b3513d28a44feda6ad36b6e6eb1ead7232f4e2a4e1a64bf50",
1458

1459
	"d00df64c4bb9e2fd16fb6f9ca746d6cf162015ec7326e41a5d51e9b3d0792fed3f17d5bae34f03ec522e229d53304dcef105024ece941edeba410892846b2c7a1039ab82aa9750979a7bc70bf96d093bc3461b6f2d38f801380eccc286b562996cfce06d4a98b245176bc4ae4006f45eb36cc71636185acdfe429c0a7d5fbb927be7dc43685a0f40f185824ed102f57eeafe6d0d943e2d883564e233126f1eac648207ccafe651ce4f5169b35369f3e48f84771aedb2577b04fd0506ecef72305055cacfc4435e38",
1460
	"67302648e0082254d8d342b4eb8070ef9a44e0fc55c3d9a3f20613e4824aff21",
1461

1462
	"fff5deb2bc7f43bd2db44ceff874e9c3b7c1a2f54cc6889f74186ca2a03d5047006b1b26e0919147379c81887df3403ebe43571fed8279607a2eb81a26d6f8f217dca3f927799ed182017c127069f2eb6f068b0d85979dc4d4867c676f6bedf36cd2def33b3e54a3366ea45478dee612f391a785bd0ede15aba921512103199228d434dbc1e899047a6861183e5b04fb716c11503dee2399261d10a0e5a76317736b0d7b6480573e76791b246ae734ee12203336ac3f539a6e6cb01c625eb3c9741dd199ca0d759753",
1463
	"bf64c9ab7042245fb2d8054edd699086dbe27a1ce904174d28bc0831ed9acf97",
1464

1465
	"8d8001e2c096f1b88e7c9224a086efd4797fbf74a8033a2d422a2b6b8f6747e4",
1466
	"2e975f6a8a14f0704d51b13667d8195c219f71e6345696c49fa4b9d08e9225d3d39393425152c97e71dd24601c11abcfa0f12f53c680bd3ae757b8134a9c10d429615869217fdd5885c4db174985703a6d6de94a667eac3023443a8337ae1bc601b76d7d38ec3c34463105f0d3949d78e562a039e4469548b609395de5a4fd43c46ca9fd6ee29ada5efc07d84d553249450dab4a49c483ded250c9338f85cd937ae66bb436f3b4026e859fda1ca571432f3bfc09e7c03ca4d183b741111ca0483d0edabc03feb23b17ee48e844ba2408d9dcfd0139d2e8c7310125aee801c61ab7900d1efc47c078281766f361c5e6111346235e1dc38325666c",
1467

1468
	NULL
1469
};
1470

1471
static void
1472
test_SHAKE_KAT(int security_level, const char *const *kat)
1473
{
1474
	size_t u;
1475

1476
	for (u = 0; kat[u] != NULL; u += 2) {
1477
		unsigned char msg[250], out[250], ref[250];
1478
		size_t msg_len, out_len, v;
1479
		br_shake_context sc;
1480

1481
		msg_len = hextobin(msg, kat[u]);
1482
		out_len = hextobin(ref, kat[u + 1]);
1483
		br_shake_init(&sc, security_level);
1484
		br_shake_inject(&sc, msg, msg_len);
1485
		br_shake_flip(&sc);
1486
		br_shake_produce(&sc, out, out_len);
1487
		check_equals("KAT 1", out, ref, out_len);
1488

1489
		br_shake_init(&sc, security_level);
1490
		for (v = 0; v < msg_len; v ++) {
1491
			br_shake_inject(&sc, msg + v, 1);
1492
		}
1493
		br_shake_flip(&sc);
1494
		br_shake_produce(&sc, out, out_len);
1495
		check_equals("KAT 2", out, ref, out_len);
1496

1497
		br_shake_init(&sc, security_level);
1498
		br_shake_inject(&sc, msg, msg_len);
1499
		br_shake_flip(&sc);
1500
		for (v = 0; v < out_len; v ++) {
1501
			unsigned char x;
1502

1503
			br_shake_produce(&sc, &x, 1);
1504
			if (x != ref[v]) {
1505
				fprintf(stderr, "KAT 3 (byte %u)\n",
1506
					(unsigned)v);
1507
				exit(EXIT_FAILURE);
1508
			}
1509
		}
1510

1511
		printf(".");
1512
		fflush(stdout);
1513
	}
1514
}
1515

1516
static void
1517
test_SHAKE_MonteCarlo(int security_level,
1518
	size_t minoutlen, size_t maxoutlen, const char *smsg, const char *sref)
1519
{
1520
	unsigned char out[250], ref[250];
1521
	size_t len, rlen, outlen, range;
1522
	int i, j;
1523

1524
	hextobin(out, smsg);
1525
	outlen = maxoutlen;
1526
	range = maxoutlen - minoutlen + 1;
1527
	for (j = 0; j < 100; j ++) {
1528
		for (i = 1; i < 1001; i ++) {
1529
			br_shake_context sc;
1530

1531
			len = outlen;
1532
			br_shake_init(&sc, security_level);
1533
			br_shake_inject(&sc, out, 16);
1534
			br_shake_flip(&sc);
1535
			br_shake_produce(&sc, out, len);
1536
			if (len < 16) {
1537
				memset(out + len, 0, 16 - len);
1538
			}
1539
			outlen = minoutlen
1540
				+ (br_dec16be(out + len - 2) % range);
1541
		}
1542
		printf(".");
1543
		fflush(stdout);
1544
	}
1545
	rlen = hextobin(ref, sref);
1546
	if (rlen != len) {
1547
		fprintf(stderr, "MC: bad length (%u vs %u)\n",
1548
			(unsigned)len, (unsigned)rlen);
1549
		exit(EXIT_FAILURE);
1550
	}
1551
	check_equals("KAT MC", out, ref, len);
1552
}
1553

1554
static void
1555
test_SHAKE(void)
1556
{
1557
	printf("Test SHAKE: ");
1558
	fflush(stdout);
1559

1560
	test_SHAKE_KAT(128, KAT_SHAKE128);
1561

1562
	printf(" ");
1563
	fflush(stdout);
1564

1565
	test_SHAKE_MonteCarlo(128, 16, 140,
1566
		"c8b310cb97efa3855434998fa81c7674",
1567
		"4aa371f0099b04a909f9b1680e8b52a21c6510ea2640137d501ffa114bf84717b1f725d64bae4ae5d87a");
1568

1569
	printf(" ");
1570
	fflush(stdout);
1571

1572
	test_SHAKE_KAT(256, KAT_SHAKE256);
1573

1574
	printf(" ");
1575
	fflush(stdout);
1576

1577
	test_SHAKE_MonteCarlo(256, 2, 250,
1578
		"48a0321b3653e4e86446d00f6a036efd",
1579
		"d4c8c26ded38cca426d8d1c8f8aedb5c543541333839deca8713cfd8684480fe923f57c3a5c89cb61427c220c7");
1580

1581
	printf(" done.\n");
1582
	fflush(stdout);
1583
}
1584

1585
static void
1586
test_HMAC_DRBG(void)
1587
{
1588
	br_hmac_drbg_context ctx;
1589
	unsigned char seed[42], tmp[30];
1590
	unsigned char ref1[30], ref2[30], ref3[30];
1591
	size_t seed_len;
1592

1593
	printf("Test HMAC_DRBG: ");
1594
	fflush(stdout);
1595

1596
	seed_len = hextobin(seed,
1597
		"009A4D6792295A7F730FC3F2B49CBC0F62E862272F"
1598
		"01795EDF0D54DB760F156D0DAC04C0322B3A204224");
1599
	hextobin(ref1,
1600
		"9305A46DE7FF8EB107194DEBD3FD48AA"
1601
		"20D5E7656CBE0EA69D2A8D4E7C67");
1602
	hextobin(ref2,
1603
		"C70C78608A3B5BE9289BE90EF6E81A9E"
1604
		"2C1516D5751D2F75F50033E45F73");
1605
	hextobin(ref3,
1606
		"475E80E992140567FCC3A50DAB90FE84"
1607
		"BCD7BB03638E9C4656A06F37F650");
1608
	br_hmac_drbg_init(&ctx, &br_sha256_vtable, seed, seed_len);
1609
	br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1610
	check_equals("KAT HMAC_DRBG 1", tmp, ref1, sizeof tmp);
1611
	br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1612
	check_equals("KAT HMAC_DRBG 2", tmp, ref2, sizeof tmp);
1613
	br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1614
	check_equals("KAT HMAC_DRBG 3", tmp, ref3, sizeof tmp);
1615

1616
	memset(&ctx, 0, sizeof ctx);
1617
	br_hmac_drbg_vtable.init(&ctx.vtable,
1618
		&br_sha256_vtable, seed, seed_len);
1619
	ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1620
	check_equals("KAT HMAC_DRBG 4", tmp, ref1, sizeof tmp);
1621
	ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1622
	check_equals("KAT HMAC_DRBG 5", tmp, ref2, sizeof tmp);
1623
	ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1624
	check_equals("KAT HMAC_DRBG 6", tmp, ref3, sizeof tmp);
1625

1626
	printf("done.\n");
1627
	fflush(stdout);
1628
}
1629

1630
static void
1631
test_AESCTR_DRBG(void)
1632
{
1633
	br_aesctr_drbg_context ctx;
1634
	const br_block_ctr_class *ictr;
1635
	unsigned char tmp1[64], tmp2[64];
1636

1637
	printf("Test AESCTR_DRBG: ");
1638
	fflush(stdout);
1639

1640
	ictr = br_aes_x86ni_ctr_get_vtable();
1641
	if (ictr == NULL) {
1642
		ictr = br_aes_pwr8_ctr_get_vtable();
1643
		if (ictr == NULL) {
1644
#if BR_64
1645
			ictr = &br_aes_ct64_ctr_vtable;
1646
#else
1647
			ictr = &br_aes_ct_ctr_vtable;
1648
#endif
1649
		}
1650
	}
1651
	br_aesctr_drbg_init(&ctx, ictr, NULL, 0);
1652
	ctx.vtable->generate(&ctx.vtable, tmp1, sizeof tmp1);
1653
	ctx.vtable->update(&ctx.vtable, "new seed", 8);
1654
	ctx.vtable->generate(&ctx.vtable, tmp2, sizeof tmp2);
1655

1656
	if (memcmp(tmp1, tmp2, sizeof tmp1) == 0) {
1657
		fprintf(stderr, "AESCTR_DRBG failure\n");
1658
		exit(EXIT_FAILURE);
1659
	}
1660

1661
	printf("done.\n");
1662
	fflush(stdout);
1663
}
1664

1665
static void
1666
do_KAT_PRF(br_tls_prf_impl prf,
1667
	const char *ssecret, const char *label, const char *sseed,
1668
	const char *sref)
1669
{
1670
	unsigned char secret[100], seed[100], ref[500], out[500];
1671
	size_t secret_len, seed_len, ref_len;
1672
	br_tls_prf_seed_chunk chunks[2];
1673

1674
	secret_len = hextobin(secret, ssecret);
1675
	seed_len = hextobin(seed, sseed);
1676
	ref_len = hextobin(ref, sref);
1677

1678
	chunks[0].data = seed;
1679
	chunks[0].len = seed_len;
1680
	prf(out, ref_len, secret, secret_len, label, 1, chunks);
1681
	check_equals("TLS PRF KAT 1", out, ref, ref_len);
1682

1683
	chunks[0].data = seed;
1684
	chunks[0].len = seed_len;
1685
	chunks[1].data = NULL;
1686
	chunks[1].len = 0;
1687
	prf(out, ref_len, secret, secret_len, label, 2, chunks);
1688
	check_equals("TLS PRF KAT 2", out, ref, ref_len);
1689

1690
	chunks[0].data = NULL;
1691
	chunks[0].len = 0;
1692
	chunks[1].data = seed;
1693
	chunks[1].len = seed_len;
1694
	prf(out, ref_len, secret, secret_len, label, 2, chunks);
1695
	check_equals("TLS PRF KAT 3", out, ref, ref_len);
1696

1697
	chunks[0].data = seed;
1698
	chunks[0].len = seed_len >> 1;
1699
	chunks[1].data = seed + chunks[0].len;
1700
	chunks[1].len = seed_len - chunks[0].len;
1701
	prf(out, ref_len, secret, secret_len, label, 2, chunks);
1702
	check_equals("TLS PRF KAT 4", out, ref, ref_len);
1703
}
1704

1705
static void
1706
test_PRF(void)
1707
{
1708
	printf("Test TLS PRF: ");
1709
	fflush(stdout);
1710

1711
	/*
1712
	 * Test vector taken from an email that was on:
1713
	 * http://www.imc.org/ietf-tls/mail-archive/msg01589.html
1714
	 * but no longer exists there; a version archived in 2008
1715
	 * can be found on http://www.archive.org/
1716
	 */
1717
	do_KAT_PRF(&br_tls10_prf,
1718
		"abababababababababababababababababababababababababababababababababababababababababababababababab",
1719
		"PRF Testvector",
1720
		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
1721
		"d3d4d1e349b5d515044666d51de32bab258cb521b6b053463e354832fd976754443bcf9a296519bc289abcbc1187e4ebd31e602353776c408aafb74cbc85eff69255f9788faa184cbb957a9819d84a5d7eb006eb459d3ae8de9810454b8b2d8f1afbc655a8c9a013");
1722

1723
	/*
1724
	 * Test vectors are taken from:
1725
	 * https://www.ietf.org/mail-archive/web/tls/current/msg03416.html
1726
	 */
1727
	do_KAT_PRF(&br_tls12_sha256_prf,
1728
		"9bbe436ba940f017b17652849a71db35",
1729
		"test label",
1730
		"a0ba9f936cda311827a6f796ffd5198c",
1731
		"e3f229ba727be17b8d122620557cd453c2aab21d07c3d495329b52d4e61edb5a6b301791e90d35c9c9a46b4e14baf9af0fa022f7077def17abfd3797c0564bab4fbc91666e9def9b97fce34f796789baa48082d122ee42c5a72e5a5110fff70187347b66");
1732
	do_KAT_PRF(&br_tls12_sha384_prf,
1733
		"b80b733d6ceefcdc71566ea48e5567df",
1734
		"test label",
1735
		"cd665cf6a8447dd6ff8b27555edb7465",
1736
		"7b0c18e9ced410ed1804f2cfa34a336a1c14dffb4900bb5fd7942107e81c83cde9ca0faa60be9fe34f82b1233c9146a0e534cb400fed2700884f9dc236f80edd8bfa961144c9e8d792eca722a7b32fc3d416d473ebc2c5fd4abfdad05d9184259b5bf8cd4d90fa0d31e2dec479e4f1a26066f2eea9a69236a3e52655c9e9aee691c8f3a26854308d5eaa3be85e0990703d73e56f");
1737

1738
	printf("done.\n");
1739
	fflush(stdout);
1740
}
1741

1742
/*
1743
 * AES known-answer tests. Order: key, plaintext, ciphertext.
1744
 */
1745
static const char *const KAT_AES[] = {
1746
	/*
1747
	 * From FIPS-197.
1748
	 */
1749
	"000102030405060708090a0b0c0d0e0f",
1750
	"00112233445566778899aabbccddeeff",
1751
	"69c4e0d86a7b0430d8cdb78070b4c55a",
1752

1753
	"000102030405060708090a0b0c0d0e0f1011121314151617",
1754
	"00112233445566778899aabbccddeeff",
1755
	"dda97ca4864cdfe06eaf70a0ec0d7191",
1756

1757
	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
1758
	"00112233445566778899aabbccddeeff",
1759
	"8ea2b7ca516745bfeafc49904b496089",
1760

1761
	/*
1762
	 * From NIST validation suite (ECBVarTxt128.rsp).
1763
	 */
1764
	"00000000000000000000000000000000",
1765
	"80000000000000000000000000000000",
1766
	"3ad78e726c1ec02b7ebfe92b23d9ec34",
1767

1768
	"00000000000000000000000000000000",
1769
	"c0000000000000000000000000000000",
1770
	"aae5939c8efdf2f04e60b9fe7117b2c2",
1771

1772
	"00000000000000000000000000000000",
1773
	"e0000000000000000000000000000000",
1774
	"f031d4d74f5dcbf39daaf8ca3af6e527",
1775

1776
	"00000000000000000000000000000000",
1777
	"f0000000000000000000000000000000",
1778
	"96d9fd5cc4f07441727df0f33e401a36",
1779

1780
	"00000000000000000000000000000000",
1781
	"f8000000000000000000000000000000",
1782
	"30ccdb044646d7e1f3ccea3dca08b8c0",
1783

1784
	"00000000000000000000000000000000",
1785
	"fc000000000000000000000000000000",
1786
	"16ae4ce5042a67ee8e177b7c587ecc82",
1787

1788
	"00000000000000000000000000000000",
1789
	"fe000000000000000000000000000000",
1790
	"b6da0bb11a23855d9c5cb1b4c6412e0a",
1791

1792
	"00000000000000000000000000000000",
1793
	"ff000000000000000000000000000000",
1794
	"db4f1aa530967d6732ce4715eb0ee24b",
1795

1796
	"00000000000000000000000000000000",
1797
	"ff800000000000000000000000000000",
1798
	"a81738252621dd180a34f3455b4baa2f",
1799

1800
	"00000000000000000000000000000000",
1801
	"ffc00000000000000000000000000000",
1802
	"77e2b508db7fd89234caf7939ee5621a",
1803

1804
	"00000000000000000000000000000000",
1805
	"ffe00000000000000000000000000000",
1806
	"b8499c251f8442ee13f0933b688fcd19",
1807

1808
	"00000000000000000000000000000000",
1809
	"fff00000000000000000000000000000",
1810
	"965135f8a81f25c9d630b17502f68e53",
1811

1812
	"00000000000000000000000000000000",
1813
	"fff80000000000000000000000000000",
1814
	"8b87145a01ad1c6cede995ea3670454f",
1815

1816
	"00000000000000000000000000000000",
1817
	"fffc0000000000000000000000000000",
1818
	"8eae3b10a0c8ca6d1d3b0fa61e56b0b2",
1819

1820
	"00000000000000000000000000000000",
1821
	"fffe0000000000000000000000000000",
1822
	"64b4d629810fda6bafdf08f3b0d8d2c5",
1823

1824
	"00000000000000000000000000000000",
1825
	"ffff0000000000000000000000000000",
1826
	"d7e5dbd3324595f8fdc7d7c571da6c2a",
1827

1828
	"00000000000000000000000000000000",
1829
	"ffff8000000000000000000000000000",
1830
	"f3f72375264e167fca9de2c1527d9606",
1831

1832
	"00000000000000000000000000000000",
1833
	"ffffc000000000000000000000000000",
1834
	"8ee79dd4f401ff9b7ea945d86666c13b",
1835

1836
	"00000000000000000000000000000000",
1837
	"ffffe000000000000000000000000000",
1838
	"dd35cea2799940b40db3f819cb94c08b",
1839

1840
	"00000000000000000000000000000000",
1841
	"fffff000000000000000000000000000",
1842
	"6941cb6b3e08c2b7afa581ebdd607b87",
1843

1844
	"00000000000000000000000000000000",
1845
	"fffff800000000000000000000000000",
1846
	"2c20f439f6bb097b29b8bd6d99aad799",
1847

1848
	"00000000000000000000000000000000",
1849
	"fffffc00000000000000000000000000",
1850
	"625d01f058e565f77ae86378bd2c49b3",
1851

1852
	"00000000000000000000000000000000",
1853
	"fffffe00000000000000000000000000",
1854
	"c0b5fd98190ef45fbb4301438d095950",
1855

1856
	"00000000000000000000000000000000",
1857
	"ffffff00000000000000000000000000",
1858
	"13001ff5d99806efd25da34f56be854b",
1859

1860
	"00000000000000000000000000000000",
1861
	"ffffff80000000000000000000000000",
1862
	"3b594c60f5c8277a5113677f94208d82",
1863

1864
	"00000000000000000000000000000000",
1865
	"ffffffc0000000000000000000000000",
1866
	"e9c0fc1818e4aa46bd2e39d638f89e05",
1867

1868
	"00000000000000000000000000000000",
1869
	"ffffffe0000000000000000000000000",
1870
	"f8023ee9c3fdc45a019b4e985c7e1a54",
1871

1872
	"00000000000000000000000000000000",
1873
	"fffffff0000000000000000000000000",
1874
	"35f40182ab4662f3023baec1ee796b57",
1875

1876
	"00000000000000000000000000000000",
1877
	"fffffff8000000000000000000000000",
1878
	"3aebbad7303649b4194a6945c6cc3694",
1879

1880
	"00000000000000000000000000000000",
1881
	"fffffffc000000000000000000000000",
1882
	"a2124bea53ec2834279bed7f7eb0f938",
1883

1884
	"00000000000000000000000000000000",
1885
	"fffffffe000000000000000000000000",
1886
	"b9fb4399fa4facc7309e14ec98360b0a",
1887

1888
	"00000000000000000000000000000000",
1889
	"ffffffff000000000000000000000000",
1890
	"c26277437420c5d634f715aea81a9132",
1891

1892
	"00000000000000000000000000000000",
1893
	"ffffffff800000000000000000000000",
1894
	"171a0e1b2dd424f0e089af2c4c10f32f",
1895

1896
	"00000000000000000000000000000000",
1897
	"ffffffffc00000000000000000000000",
1898
	"7cadbe402d1b208fe735edce00aee7ce",
1899

1900
	"00000000000000000000000000000000",
1901
	"ffffffffe00000000000000000000000",
1902
	"43b02ff929a1485af6f5c6d6558baa0f",
1903

1904
	"00000000000000000000000000000000",
1905
	"fffffffff00000000000000000000000",
1906
	"092faacc9bf43508bf8fa8613ca75dea",
1907

1908
	"00000000000000000000000000000000",
1909
	"fffffffff80000000000000000000000",
1910
	"cb2bf8280f3f9742c7ed513fe802629c",
1911

1912
	"00000000000000000000000000000000",
1913
	"fffffffffc0000000000000000000000",
1914
	"215a41ee442fa992a6e323986ded3f68",
1915

1916
	"00000000000000000000000000000000",
1917
	"fffffffffe0000000000000000000000",
1918
	"f21e99cf4f0f77cea836e11a2fe75fb1",
1919

1920
	"00000000000000000000000000000000",
1921
	"ffffffffff0000000000000000000000",
1922
	"95e3a0ca9079e646331df8b4e70d2cd6",
1923

1924
	"00000000000000000000000000000000",
1925
	"ffffffffff8000000000000000000000",
1926
	"4afe7f120ce7613f74fc12a01a828073",
1927

1928
	"00000000000000000000000000000000",
1929
	"ffffffffffc000000000000000000000",
1930
	"827f000e75e2c8b9d479beed913fe678",
1931

1932
	"00000000000000000000000000000000",
1933
	"ffffffffffe000000000000000000000",
1934
	"35830c8e7aaefe2d30310ef381cbf691",
1935

1936
	"00000000000000000000000000000000",
1937
	"fffffffffff000000000000000000000",
1938
	"191aa0f2c8570144f38657ea4085ebe5",
1939

1940
	"00000000000000000000000000000000",
1941
	"fffffffffff800000000000000000000",
1942
	"85062c2c909f15d9269b6c18ce99c4f0",
1943

1944
	"00000000000000000000000000000000",
1945
	"fffffffffffc00000000000000000000",
1946
	"678034dc9e41b5a560ed239eeab1bc78",
1947

1948
	"00000000000000000000000000000000",
1949
	"fffffffffffe00000000000000000000",
1950
	"c2f93a4ce5ab6d5d56f1b93cf19911c1",
1951

1952
	"00000000000000000000000000000000",
1953
	"ffffffffffff00000000000000000000",
1954
	"1c3112bcb0c1dcc749d799743691bf82",
1955

1956
	"00000000000000000000000000000000",
1957
	"ffffffffffff80000000000000000000",
1958
	"00c55bd75c7f9c881989d3ec1911c0d4",
1959

1960
	"00000000000000000000000000000000",
1961
	"ffffffffffffc0000000000000000000",
1962
	"ea2e6b5ef182b7dff3629abd6a12045f",
1963

1964
	"00000000000000000000000000000000",
1965
	"ffffffffffffe0000000000000000000",
1966
	"22322327e01780b17397f24087f8cc6f",
1967

1968
	"00000000000000000000000000000000",
1969
	"fffffffffffff0000000000000000000",
1970
	"c9cacb5cd11692c373b2411768149ee7",
1971

1972
	"00000000000000000000000000000000",
1973
	"fffffffffffff8000000000000000000",
1974
	"a18e3dbbca577860dab6b80da3139256",
1975

1976
	"00000000000000000000000000000000",
1977
	"fffffffffffffc000000000000000000",
1978
	"79b61c37bf328ecca8d743265a3d425c",
1979

1980
	"00000000000000000000000000000000",
1981
	"fffffffffffffe000000000000000000",
1982
	"d2d99c6bcc1f06fda8e27e8ae3f1ccc7",
1983

1984
	"00000000000000000000000000000000",
1985
	"ffffffffffffff000000000000000000",
1986
	"1bfd4b91c701fd6b61b7f997829d663b",
1987

1988
	"00000000000000000000000000000000",
1989
	"ffffffffffffff800000000000000000",
1990
	"11005d52f25f16bdc9545a876a63490a",
1991

1992
	"00000000000000000000000000000000",
1993
	"ffffffffffffffc00000000000000000",
1994
	"3a4d354f02bb5a5e47d39666867f246a",
1995

1996
	"00000000000000000000000000000000",
1997
	"ffffffffffffffe00000000000000000",
1998
	"d451b8d6e1e1a0ebb155fbbf6e7b7dc3",
1999

2000
	"00000000000000000000000000000000",
2001
	"fffffffffffffff00000000000000000",
2002
	"6898d4f42fa7ba6a10ac05e87b9f2080",
2003

2004
	"00000000000000000000000000000000",
2005
	"fffffffffffffff80000000000000000",
2006
	"b611295e739ca7d9b50f8e4c0e754a3f",
2007

2008
	"00000000000000000000000000000000",
2009
	"fffffffffffffffc0000000000000000",
2010
	"7d33fc7d8abe3ca1936759f8f5deaf20",
2011

2012
	"00000000000000000000000000000000",
2013
	"fffffffffffffffe0000000000000000",
2014
	"3b5e0f566dc96c298f0c12637539b25c",
2015

2016
	"00000000000000000000000000000000",
2017
	"ffffffffffffffff0000000000000000",
2018
	"f807c3e7985fe0f5a50e2cdb25c5109e",
2019

2020
	"00000000000000000000000000000000",
2021
	"ffffffffffffffff8000000000000000",
2022
	"41f992a856fb278b389a62f5d274d7e9",
2023

2024
	"00000000000000000000000000000000",
2025
	"ffffffffffffffffc000000000000000",
2026
	"10d3ed7a6fe15ab4d91acbc7d0767ab1",
2027

2028
	"00000000000000000000000000000000",
2029
	"ffffffffffffffffe000000000000000",
2030
	"21feecd45b2e675973ac33bf0c5424fc",
2031

2032
	"00000000000000000000000000000000",
2033
	"fffffffffffffffff000000000000000",
2034
	"1480cb3955ba62d09eea668f7c708817",
2035

2036
	"00000000000000000000000000000000",
2037
	"fffffffffffffffff800000000000000",
2038
	"66404033d6b72b609354d5496e7eb511",
2039

2040
	"00000000000000000000000000000000",
2041
	"fffffffffffffffffc00000000000000",
2042
	"1c317a220a7d700da2b1e075b00266e1",
2043

2044
	"00000000000000000000000000000000",
2045
	"fffffffffffffffffe00000000000000",
2046
	"ab3b89542233f1271bf8fd0c0f403545",
2047

2048
	"00000000000000000000000000000000",
2049
	"ffffffffffffffffff00000000000000",
2050
	"d93eae966fac46dca927d6b114fa3f9e",
2051

2052
	"00000000000000000000000000000000",
2053
	"ffffffffffffffffff80000000000000",
2054
	"1bdec521316503d9d5ee65df3ea94ddf",
2055

2056
	"00000000000000000000000000000000",
2057
	"ffffffffffffffffffc0000000000000",
2058
	"eef456431dea8b4acf83bdae3717f75f",
2059

2060
	"00000000000000000000000000000000",
2061
	"ffffffffffffffffffe0000000000000",
2062
	"06f2519a2fafaa596bfef5cfa15c21b9",
2063

2064
	"00000000000000000000000000000000",
2065
	"fffffffffffffffffff0000000000000",
2066
	"251a7eac7e2fe809e4aa8d0d7012531a",
2067

2068
	"00000000000000000000000000000000",
2069
	"fffffffffffffffffff8000000000000",
2070
	"3bffc16e4c49b268a20f8d96a60b4058",
2071

2072
	"00000000000000000000000000000000",
2073
	"fffffffffffffffffffc000000000000",
2074
	"e886f9281999c5bb3b3e8862e2f7c988",
2075

2076
	"00000000000000000000000000000000",
2077
	"fffffffffffffffffffe000000000000",
2078
	"563bf90d61beef39f48dd625fcef1361",
2079

2080
	"00000000000000000000000000000000",
2081
	"ffffffffffffffffffff000000000000",
2082
	"4d37c850644563c69fd0acd9a049325b",
2083

2084
	"00000000000000000000000000000000",
2085
	"ffffffffffffffffffff800000000000",
2086
	"b87c921b91829ef3b13ca541ee1130a6",
2087

2088
	"00000000000000000000000000000000",
2089
	"ffffffffffffffffffffc00000000000",
2090
	"2e65eb6b6ea383e109accce8326b0393",
2091

2092
	"00000000000000000000000000000000",
2093
	"ffffffffffffffffffffe00000000000",
2094
	"9ca547f7439edc3e255c0f4d49aa8990",
2095

2096
	"00000000000000000000000000000000",
2097
	"fffffffffffffffffffff00000000000",
2098
	"a5e652614c9300f37816b1f9fd0c87f9",
2099

2100
	"00000000000000000000000000000000",
2101
	"fffffffffffffffffffff80000000000",
2102
	"14954f0b4697776f44494fe458d814ed",
2103

2104
	"00000000000000000000000000000000",
2105
	"fffffffffffffffffffffc0000000000",
2106
	"7c8d9ab6c2761723fe42f8bb506cbcf7",
2107

2108
	"00000000000000000000000000000000",
2109
	"fffffffffffffffffffffe0000000000",
2110
	"db7e1932679fdd99742aab04aa0d5a80",
2111

2112
	"00000000000000000000000000000000",
2113
	"ffffffffffffffffffffff0000000000",
2114
	"4c6a1c83e568cd10f27c2d73ded19c28",
2115

2116
	"00000000000000000000000000000000",
2117
	"ffffffffffffffffffffff8000000000",
2118
	"90ecbe6177e674c98de412413f7ac915",
2119

2120
	"00000000000000000000000000000000",
2121
	"ffffffffffffffffffffffc000000000",
2122
	"90684a2ac55fe1ec2b8ebd5622520b73",
2123

2124
	"00000000000000000000000000000000",
2125
	"ffffffffffffffffffffffe000000000",
2126
	"7472f9a7988607ca79707795991035e6",
2127

2128
	"00000000000000000000000000000000",
2129
	"fffffffffffffffffffffff000000000",
2130
	"56aff089878bf3352f8df172a3ae47d8",
2131

2132
	"00000000000000000000000000000000",
2133
	"fffffffffffffffffffffff800000000",
2134
	"65c0526cbe40161b8019a2a3171abd23",
2135

2136
	"00000000000000000000000000000000",
2137
	"fffffffffffffffffffffffc00000000",
2138
	"377be0be33b4e3e310b4aabda173f84f",
2139

2140
	"00000000000000000000000000000000",
2141
	"fffffffffffffffffffffffe00000000",
2142
	"9402e9aa6f69de6504da8d20c4fcaa2f",
2143

2144
	"00000000000000000000000000000000",
2145
	"ffffffffffffffffffffffff00000000",
2146
	"123c1f4af313ad8c2ce648b2e71fb6e1",
2147

2148
	"00000000000000000000000000000000",
2149
	"ffffffffffffffffffffffff80000000",
2150
	"1ffc626d30203dcdb0019fb80f726cf4",
2151

2152
	"00000000000000000000000000000000",
2153
	"ffffffffffffffffffffffffc0000000",
2154
	"76da1fbe3a50728c50fd2e621b5ad885",
2155

2156
	"00000000000000000000000000000000",
2157
	"ffffffffffffffffffffffffe0000000",
2158
	"082eb8be35f442fb52668e16a591d1d6",
2159

2160
	"00000000000000000000000000000000",
2161
	"fffffffffffffffffffffffff0000000",
2162
	"e656f9ecf5fe27ec3e4a73d00c282fb3",
2163

2164
	"00000000000000000000000000000000",
2165
	"fffffffffffffffffffffffff8000000",
2166
	"2ca8209d63274cd9a29bb74bcd77683a",
2167

2168
	"00000000000000000000000000000000",
2169
	"fffffffffffffffffffffffffc000000",
2170
	"79bf5dce14bb7dd73a8e3611de7ce026",
2171

2172
	"00000000000000000000000000000000",
2173
	"fffffffffffffffffffffffffe000000",
2174
	"3c849939a5d29399f344c4a0eca8a576",
2175

2176
	"00000000000000000000000000000000",
2177
	"ffffffffffffffffffffffffff000000",
2178
	"ed3c0a94d59bece98835da7aa4f07ca2",
2179

2180
	"00000000000000000000000000000000",
2181
	"ffffffffffffffffffffffffff800000",
2182
	"63919ed4ce10196438b6ad09d99cd795",
2183

2184
	"00000000000000000000000000000000",
2185
	"ffffffffffffffffffffffffffc00000",
2186
	"7678f3a833f19fea95f3c6029e2bc610",
2187

2188
	"00000000000000000000000000000000",
2189
	"ffffffffffffffffffffffffffe00000",
2190
	"3aa426831067d36b92be7c5f81c13c56",
2191

2192
	"00000000000000000000000000000000",
2193
	"fffffffffffffffffffffffffff00000",
2194
	"9272e2d2cdd11050998c845077a30ea0",
2195

2196
	"00000000000000000000000000000000",
2197
	"fffffffffffffffffffffffffff80000",
2198
	"088c4b53f5ec0ff814c19adae7f6246c",
2199

2200
	"00000000000000000000000000000000",
2201
	"fffffffffffffffffffffffffffc0000",
2202
	"4010a5e401fdf0a0354ddbcc0d012b17",
2203

2204
	"00000000000000000000000000000000",
2205
	"fffffffffffffffffffffffffffe0000",
2206
	"a87a385736c0a6189bd6589bd8445a93",
2207

2208
	"00000000000000000000000000000000",
2209
	"ffffffffffffffffffffffffffff0000",
2210
	"545f2b83d9616dccf60fa9830e9cd287",
2211

2212
	"00000000000000000000000000000000",
2213
	"ffffffffffffffffffffffffffff8000",
2214
	"4b706f7f92406352394037a6d4f4688d",
2215

2216
	"00000000000000000000000000000000",
2217
	"ffffffffffffffffffffffffffffc000",
2218
	"b7972b3941c44b90afa7b264bfba7387",
2219

2220
	"00000000000000000000000000000000",
2221
	"ffffffffffffffffffffffffffffe000",
2222
	"6f45732cf10881546f0fd23896d2bb60",
2223

2224
	"00000000000000000000000000000000",
2225
	"fffffffffffffffffffffffffffff000",
2226
	"2e3579ca15af27f64b3c955a5bfc30ba",
2227

2228
	"00000000000000000000000000000000",
2229
	"fffffffffffffffffffffffffffff800",
2230
	"34a2c5a91ae2aec99b7d1b5fa6780447",
2231

2232
	"00000000000000000000000000000000",
2233
	"fffffffffffffffffffffffffffffc00",
2234
	"a4d6616bd04f87335b0e53351227a9ee",
2235

2236
	"00000000000000000000000000000000",
2237
	"fffffffffffffffffffffffffffffe00",
2238
	"7f692b03945867d16179a8cefc83ea3f",
2239

2240
	"00000000000000000000000000000000",
2241
	"ffffffffffffffffffffffffffffff00",
2242
	"3bd141ee84a0e6414a26e7a4f281f8a2",
2243

2244
	"00000000000000000000000000000000",
2245
	"ffffffffffffffffffffffffffffff80",
2246
	"d1788f572d98b2b16ec5d5f3922b99bc",
2247

2248
	"00000000000000000000000000000000",
2249
	"ffffffffffffffffffffffffffffffc0",
2250
	"0833ff6f61d98a57b288e8c3586b85a6",
2251

2252
	"00000000000000000000000000000000",
2253
	"ffffffffffffffffffffffffffffffe0",
2254
	"8568261797de176bf0b43becc6285afb",
2255

2256
	"00000000000000000000000000000000",
2257
	"fffffffffffffffffffffffffffffff0",
2258
	"f9b0fda0c4a898f5b9e6f661c4ce4d07",
2259

2260
	"00000000000000000000000000000000",
2261
	"fffffffffffffffffffffffffffffff8",
2262
	"8ade895913685c67c5269f8aae42983e",
2263

2264
	"00000000000000000000000000000000",
2265
	"fffffffffffffffffffffffffffffffc",
2266
	"39bde67d5c8ed8a8b1c37eb8fa9f5ac0",
2267

2268
	"00000000000000000000000000000000",
2269
	"fffffffffffffffffffffffffffffffe",
2270
	"5c005e72c1418c44f569f2ea33ba54f3",
2271

2272
	"00000000000000000000000000000000",
2273
	"ffffffffffffffffffffffffffffffff",
2274
	"3f5b8cc9ea855a0afa7347d23e8d664e",
2275

2276
	/*
2277
	 * From NIST validation suite (ECBVarTxt192.rsp).
2278
	 */
2279
	"000000000000000000000000000000000000000000000000",
2280
	"80000000000000000000000000000000",
2281
	"6cd02513e8d4dc986b4afe087a60bd0c",
2282

2283
	"000000000000000000000000000000000000000000000000",
2284
	"c0000000000000000000000000000000",
2285
	"2ce1f8b7e30627c1c4519eada44bc436",
2286

2287
	"000000000000000000000000000000000000000000000000",
2288
	"e0000000000000000000000000000000",
2289
	"9946b5f87af446f5796c1fee63a2da24",
2290

2291
	"000000000000000000000000000000000000000000000000",
2292
	"f0000000000000000000000000000000",
2293
	"2a560364ce529efc21788779568d5555",
2294

2295
	"000000000000000000000000000000000000000000000000",
2296
	"f8000000000000000000000000000000",
2297
	"35c1471837af446153bce55d5ba72a0a",
2298

2299
	"000000000000000000000000000000000000000000000000",
2300
	"fc000000000000000000000000000000",
2301
	"ce60bc52386234f158f84341e534cd9e",
2302

2303
	"000000000000000000000000000000000000000000000000",
2304
	"fe000000000000000000000000000000",
2305
	"8c7c27ff32bcf8dc2dc57c90c2903961",
2306

2307
	"000000000000000000000000000000000000000000000000",
2308
	"ff000000000000000000000000000000",
2309
	"32bb6a7ec84499e166f936003d55a5bb",
2310

2311
	"000000000000000000000000000000000000000000000000",
2312
	"ff800000000000000000000000000000",
2313
	"a5c772e5c62631ef660ee1d5877f6d1b",
2314

2315
	"000000000000000000000000000000000000000000000000",
2316
	"ffc00000000000000000000000000000",
2317
	"030d7e5b64f380a7e4ea5387b5cd7f49",
2318

2319
	"000000000000000000000000000000000000000000000000",
2320
	"ffe00000000000000000000000000000",
2321
	"0dc9a2610037009b698f11bb7e86c83e",
2322

2323
	"000000000000000000000000000000000000000000000000",
2324
	"fff00000000000000000000000000000",
2325
	"0046612c766d1840c226364f1fa7ed72",
2326

2327
	"000000000000000000000000000000000000000000000000",
2328
	"fff80000000000000000000000000000",
2329
	"4880c7e08f27befe78590743c05e698b",
2330

2331
	"000000000000000000000000000000000000000000000000",
2332
	"fffc0000000000000000000000000000",
2333
	"2520ce829a26577f0f4822c4ecc87401",
2334

2335
	"000000000000000000000000000000000000000000000000",
2336
	"fffe0000000000000000000000000000",
2337
	"8765e8acc169758319cb46dc7bcf3dca",
2338

2339
	"000000000000000000000000000000000000000000000000",
2340
	"ffff0000000000000000000000000000",
2341
	"e98f4ba4f073df4baa116d011dc24a28",
2342

2343
	"000000000000000000000000000000000000000000000000",
2344
	"ffff8000000000000000000000000000",
2345
	"f378f68c5dbf59e211b3a659a7317d94",
2346

2347
	"000000000000000000000000000000000000000000000000",
2348
	"ffffc000000000000000000000000000",
2349
	"283d3b069d8eb9fb432d74b96ca762b4",
2350

2351
	"000000000000000000000000000000000000000000000000",
2352
	"ffffe000000000000000000000000000",
2353
	"a7e1842e8a87861c221a500883245c51",
2354

2355
	"000000000000000000000000000000000000000000000000",
2356
	"fffff000000000000000000000000000",
2357
	"77aa270471881be070fb52c7067ce732",
2358

2359
	"000000000000000000000000000000000000000000000000",
2360
	"fffff800000000000000000000000000",
2361
	"01b0f476d484f43f1aeb6efa9361a8ac",
2362

2363
	"000000000000000000000000000000000000000000000000",
2364
	"fffffc00000000000000000000000000",
2365
	"1c3a94f1c052c55c2d8359aff2163b4f",
2366

2367
	"000000000000000000000000000000000000000000000000",
2368
	"fffffe00000000000000000000000000",
2369
	"e8a067b604d5373d8b0f2e05a03b341b",
2370

2371
	"000000000000000000000000000000000000000000000000",
2372
	"ffffff00000000000000000000000000",
2373
	"a7876ec87f5a09bfea42c77da30fd50e",
2374

2375
	"000000000000000000000000000000000000000000000000",
2376
	"ffffff80000000000000000000000000",
2377
	"0cf3e9d3a42be5b854ca65b13f35f48d",
2378

2379
	"000000000000000000000000000000000000000000000000",
2380
	"ffffffc0000000000000000000000000",
2381
	"6c62f6bbcab7c3e821c9290f08892dda",
2382

2383
	"000000000000000000000000000000000000000000000000",
2384
	"ffffffe0000000000000000000000000",
2385
	"7f5e05bd2068738196fee79ace7e3aec",
2386

2387
	"000000000000000000000000000000000000000000000000",
2388
	"fffffff0000000000000000000000000",
2389
	"440e0d733255cda92fb46e842fe58054",
2390

2391
	"000000000000000000000000000000000000000000000000",
2392
	"fffffff8000000000000000000000000",
2393
	"aa5d5b1c4ea1b7a22e5583ac2e9ed8a7",
2394

2395
	"000000000000000000000000000000000000000000000000",
2396
	"fffffffc000000000000000000000000",
2397
	"77e537e89e8491e8662aae3bc809421d",
2398

2399
	"000000000000000000000000000000000000000000000000",
2400
	"fffffffe000000000000000000000000",
2401
	"997dd3e9f1598bfa73f75973f7e93b76",
2402

2403
	"000000000000000000000000000000000000000000000000",
2404
	"ffffffff000000000000000000000000",
2405
	"1b38d4f7452afefcb7fc721244e4b72e",
2406

2407
	"000000000000000000000000000000000000000000000000",
2408
	"ffffffff800000000000000000000000",
2409
	"0be2b18252e774dda30cdda02c6906e3",
2410

2411
	"000000000000000000000000000000000000000000000000",
2412
	"ffffffffc00000000000000000000000",
2413
	"d2695e59c20361d82652d7d58b6f11b2",
2414

2415
	"000000000000000000000000000000000000000000000000",
2416
	"ffffffffe00000000000000000000000",
2417
	"902d88d13eae52089abd6143cfe394e9",
2418

2419
	"000000000000000000000000000000000000000000000000",
2420
	"fffffffff00000000000000000000000",
2421
	"d49bceb3b823fedd602c305345734bd2",
2422

2423
	"000000000000000000000000000000000000000000000000",
2424
	"fffffffff80000000000000000000000",
2425
	"707b1dbb0ffa40ef7d95def421233fae",
2426

2427
	"000000000000000000000000000000000000000000000000",
2428
	"fffffffffc0000000000000000000000",
2429
	"7ca0c1d93356d9eb8aa952084d75f913",
2430

2431
	"000000000000000000000000000000000000000000000000",
2432
	"fffffffffe0000000000000000000000",
2433
	"f2cbf9cb186e270dd7bdb0c28febc57d",
2434

2435
	"000000000000000000000000000000000000000000000000",
2436
	"ffffffffff0000000000000000000000",
2437
	"c94337c37c4e790ab45780bd9c3674a0",
2438

2439
	"000000000000000000000000000000000000000000000000",
2440
	"ffffffffff8000000000000000000000",
2441
	"8e3558c135252fb9c9f367ed609467a1",
2442

2443
	"000000000000000000000000000000000000000000000000",
2444
	"ffffffffffc000000000000000000000",
2445
	"1b72eeaee4899b443914e5b3a57fba92",
2446

2447
	"000000000000000000000000000000000000000000000000",
2448
	"ffffffffffe000000000000000000000",
2449
	"011865f91bc56868d051e52c9efd59b7",
2450

2451
	"000000000000000000000000000000000000000000000000",
2452
	"fffffffffff000000000000000000000",
2453
	"e4771318ad7a63dd680f6e583b7747ea",
2454

2455
	"000000000000000000000000000000000000000000000000",
2456
	"fffffffffff800000000000000000000",
2457
	"61e3d194088dc8d97e9e6db37457eac5",
2458

2459
	"000000000000000000000000000000000000000000000000",
2460
	"fffffffffffc00000000000000000000",
2461
	"36ff1ec9ccfbc349e5d356d063693ad6",
2462

2463
	"000000000000000000000000000000000000000000000000",
2464
	"fffffffffffe00000000000000000000",
2465
	"3cc9e9a9be8cc3f6fb2ea24088e9bb19",
2466

2467
	"000000000000000000000000000000000000000000000000",
2468
	"ffffffffffff00000000000000000000",
2469
	"1ee5ab003dc8722e74905d9a8fe3d350",
2470

2471
	"000000000000000000000000000000000000000000000000",
2472
	"ffffffffffff80000000000000000000",
2473
	"245339319584b0a412412869d6c2eada",
2474

2475
	"000000000000000000000000000000000000000000000000",
2476
	"ffffffffffffc0000000000000000000",
2477
	"7bd496918115d14ed5380852716c8814",
2478

2479
	"000000000000000000000000000000000000000000000000",
2480
	"ffffffffffffe0000000000000000000",
2481
	"273ab2f2b4a366a57d582a339313c8b1",
2482

2483
	"000000000000000000000000000000000000000000000000",
2484
	"fffffffffffff0000000000000000000",
2485
	"113365a9ffbe3b0ca61e98507554168b",
2486

2487
	"000000000000000000000000000000000000000000000000",
2488
	"fffffffffffff8000000000000000000",
2489
	"afa99c997ac478a0dea4119c9e45f8b1",
2490

2491
	"000000000000000000000000000000000000000000000000",
2492
	"fffffffffffffc000000000000000000",
2493
	"9216309a7842430b83ffb98638011512",
2494

2495
	"000000000000000000000000000000000000000000000000",
2496
	"fffffffffffffe000000000000000000",
2497
	"62abc792288258492a7cb45145f4b759",
2498

2499
	"000000000000000000000000000000000000000000000000",
2500
	"ffffffffffffff000000000000000000",
2501
	"534923c169d504d7519c15d30e756c50",
2502

2503
	"000000000000000000000000000000000000000000000000",
2504
	"ffffffffffffff800000000000000000",
2505
	"fa75e05bcdc7e00c273fa33f6ee441d2",
2506

2507
	"000000000000000000000000000000000000000000000000",
2508
	"ffffffffffffffc00000000000000000",
2509
	"7d350fa6057080f1086a56b17ec240db",
2510

2511
	"000000000000000000000000000000000000000000000000",
2512
	"ffffffffffffffe00000000000000000",
2513
	"f34e4a6324ea4a5c39a661c8fe5ada8f",
2514

2515
	"000000000000000000000000000000000000000000000000",
2516
	"fffffffffffffff00000000000000000",
2517
	"0882a16f44088d42447a29ac090ec17e",
2518

2519
	"000000000000000000000000000000000000000000000000",
2520
	"fffffffffffffff80000000000000000",
2521
	"3a3c15bfc11a9537c130687004e136ee",
2522

2523
	"000000000000000000000000000000000000000000000000",
2524
	"fffffffffffffffc0000000000000000",
2525
	"22c0a7678dc6d8cf5c8a6d5a9960767c",
2526

2527
	"000000000000000000000000000000000000000000000000",
2528
	"fffffffffffffffe0000000000000000",
2529
	"b46b09809d68b9a456432a79bdc2e38c",
2530

2531
	"000000000000000000000000000000000000000000000000",
2532
	"ffffffffffffffff0000000000000000",
2533
	"93baaffb35fbe739c17c6ac22eecf18f",
2534

2535
	"000000000000000000000000000000000000000000000000",
2536
	"ffffffffffffffff8000000000000000",
2537
	"c8aa80a7850675bc007c46df06b49868",
2538

2539
	"000000000000000000000000000000000000000000000000",
2540
	"ffffffffffffffffc000000000000000",
2541
	"12c6f3877af421a918a84b775858021d",
2542

2543
	"000000000000000000000000000000000000000000000000",
2544
	"ffffffffffffffffe000000000000000",
2545
	"33f123282c5d633924f7d5ba3f3cab11",
2546

2547
	"000000000000000000000000000000000000000000000000",
2548
	"fffffffffffffffff000000000000000",
2549
	"a8f161002733e93ca4527d22c1a0c5bb",
2550

2551
	"000000000000000000000000000000000000000000000000",
2552
	"fffffffffffffffff800000000000000",
2553
	"b72f70ebf3e3fda23f508eec76b42c02",
2554

2555
	"000000000000000000000000000000000000000000000000",
2556
	"fffffffffffffffffc00000000000000",
2557
	"6a9d965e6274143f25afdcfc88ffd77c",
2558

2559
	"000000000000000000000000000000000000000000000000",
2560
	"fffffffffffffffffe00000000000000",
2561
	"a0c74fd0b9361764ce91c5200b095357",
2562

2563
	"000000000000000000000000000000000000000000000000",
2564
	"ffffffffffffffffff00000000000000",
2565
	"091d1fdc2bd2c346cd5046a8c6209146",
2566

2567
	"000000000000000000000000000000000000000000000000",
2568
	"ffffffffffffffffff80000000000000",
2569
	"e2a37580116cfb71856254496ab0aca8",
2570

2571
	"000000000000000000000000000000000000000000000000",
2572
	"ffffffffffffffffffc0000000000000",
2573
	"e0b3a00785917c7efc9adba322813571",
2574

2575
	"000000000000000000000000000000000000000000000000",
2576
	"ffffffffffffffffffe0000000000000",
2577
	"733d41f4727b5ef0df4af4cf3cffa0cb",
2578

2579
	"000000000000000000000000000000000000000000000000",
2580
	"fffffffffffffffffff0000000000000",
2581
	"a99ebb030260826f981ad3e64490aa4f",
2582

2583
	"000000000000000000000000000000000000000000000000",
2584
	"fffffffffffffffffff8000000000000",
2585
	"73f34c7d3eae5e80082c1647524308ee",
2586

2587
	"000000000000000000000000000000000000000000000000",
2588
	"fffffffffffffffffffc000000000000",
2589
	"40ebd5ad082345b7a2097ccd3464da02",
2590

2591
	"000000000000000000000000000000000000000000000000",
2592
	"fffffffffffffffffffe000000000000",
2593
	"7cc4ae9a424b2cec90c97153c2457ec5",
2594

2595
	"000000000000000000000000000000000000000000000000",
2596
	"ffffffffffffffffffff000000000000",
2597
	"54d632d03aba0bd0f91877ebdd4d09cb",
2598

2599
	"000000000000000000000000000000000000000000000000",
2600
	"ffffffffffffffffffff800000000000",
2601
	"d3427be7e4d27cd54f5fe37b03cf0897",
2602

2603
	"000000000000000000000000000000000000000000000000",
2604
	"ffffffffffffffffffffc00000000000",
2605
	"b2099795e88cc158fd75ea133d7e7fbe",
2606

2607
	"000000000000000000000000000000000000000000000000",
2608
	"ffffffffffffffffffffe00000000000",
2609
	"a6cae46fb6fadfe7a2c302a34242817b",
2610

2611
	"000000000000000000000000000000000000000000000000",
2612
	"fffffffffffffffffffff00000000000",
2613
	"026a7024d6a902e0b3ffccbaa910cc3f",
2614

2615
	"000000000000000000000000000000000000000000000000",
2616
	"fffffffffffffffffffff80000000000",
2617
	"156f07767a85a4312321f63968338a01",
2618

2619
	"000000000000000000000000000000000000000000000000",
2620
	"fffffffffffffffffffffc0000000000",
2621
	"15eec9ebf42b9ca76897d2cd6c5a12e2",
2622

2623
	"000000000000000000000000000000000000000000000000",
2624
	"fffffffffffffffffffffe0000000000",
2625
	"db0d3a6fdcc13f915e2b302ceeb70fd8",
2626

2627
	"000000000000000000000000000000000000000000000000",
2628
	"ffffffffffffffffffffff0000000000",
2629
	"71dbf37e87a2e34d15b20e8f10e48924",
2630

2631
	"000000000000000000000000000000000000000000000000",
2632
	"ffffffffffffffffffffff8000000000",
2633
	"c745c451e96ff3c045e4367c833e3b54",
2634

2635
	"000000000000000000000000000000000000000000000000",
2636
	"ffffffffffffffffffffffc000000000",
2637
	"340da09c2dd11c3b679d08ccd27dd595",
2638

2639
	"000000000000000000000000000000000000000000000000",
2640
	"ffffffffffffffffffffffe000000000",
2641
	"8279f7c0c2a03ee660c6d392db025d18",
2642

2643
	"000000000000000000000000000000000000000000000000",
2644
	"fffffffffffffffffffffff000000000",
2645
	"a4b2c7d8eba531ff47c5041a55fbd1ec",
2646

2647
	"000000000000000000000000000000000000000000000000",
2648
	"fffffffffffffffffffffff800000000",
2649
	"74569a2ca5a7bd5131ce8dc7cbfbf72f",
2650

2651
	"000000000000000000000000000000000000000000000000",
2652
	"fffffffffffffffffffffffc00000000",
2653
	"3713da0c0219b63454035613b5a403dd",
2654

2655
	"000000000000000000000000000000000000000000000000",
2656
	"fffffffffffffffffffffffe00000000",
2657
	"8827551ddcc9df23fa72a3de4e9f0b07",
2658

2659
	"000000000000000000000000000000000000000000000000",
2660
	"ffffffffffffffffffffffff00000000",
2661
	"2e3febfd625bfcd0a2c06eb460da1732",
2662

2663
	"000000000000000000000000000000000000000000000000",
2664
	"ffffffffffffffffffffffff80000000",
2665
	"ee82e6ba488156f76496311da6941deb",
2666

2667
	"000000000000000000000000000000000000000000000000",
2668
	"ffffffffffffffffffffffffc0000000",
2669
	"4770446f01d1f391256e85a1b30d89d3",
2670

2671
	"000000000000000000000000000000000000000000000000",
2672
	"ffffffffffffffffffffffffe0000000",
2673
	"af04b68f104f21ef2afb4767cf74143c",
2674

2675
	"000000000000000000000000000000000000000000000000",
2676
	"fffffffffffffffffffffffff0000000",
2677
	"cf3579a9ba38c8e43653173e14f3a4c6",
2678

2679
	"000000000000000000000000000000000000000000000000",
2680
	"fffffffffffffffffffffffff8000000",
2681
	"b3bba904f4953e09b54800af2f62e7d4",
2682

2683
	"000000000000000000000000000000000000000000000000",
2684
	"fffffffffffffffffffffffffc000000",
2685
	"fc4249656e14b29eb9c44829b4c59a46",
2686

2687
	"000000000000000000000000000000000000000000000000",
2688
	"fffffffffffffffffffffffffe000000",
2689
	"9b31568febe81cfc2e65af1c86d1a308",
2690

2691
	"000000000000000000000000000000000000000000000000",
2692
	"ffffffffffffffffffffffffff000000",
2693
	"9ca09c25f273a766db98a480ce8dfedc",
2694

2695
	"000000000000000000000000000000000000000000000000",
2696
	"ffffffffffffffffffffffffff800000",
2697
	"b909925786f34c3c92d971883c9fbedf",
2698

2699
	"000000000000000000000000000000000000000000000000",
2700
	"ffffffffffffffffffffffffffc00000",
2701
	"82647f1332fe570a9d4d92b2ee771d3b",
2702

2703
	"000000000000000000000000000000000000000000000000",
2704
	"ffffffffffffffffffffffffffe00000",
2705
	"3604a7e80832b3a99954bca6f5b9f501",
2706

2707
	"000000000000000000000000000000000000000000000000",
2708
	"fffffffffffffffffffffffffff00000",
2709
	"884607b128c5de3ab39a529a1ef51bef",
2710

2711
	"000000000000000000000000000000000000000000000000",
2712
	"fffffffffffffffffffffffffff80000",
2713
	"670cfa093d1dbdb2317041404102435e",
2714

2715
	"000000000000000000000000000000000000000000000000",
2716
	"fffffffffffffffffffffffffffc0000",
2717
	"7a867195f3ce8769cbd336502fbb5130",
2718

2719
	"000000000000000000000000000000000000000000000000",
2720
	"fffffffffffffffffffffffffffe0000",
2721
	"52efcf64c72b2f7ca5b3c836b1078c15",
2722

2723
	"000000000000000000000000000000000000000000000000",
2724
	"ffffffffffffffffffffffffffff0000",
2725
	"4019250f6eefb2ac5ccbcae044e75c7e",
2726

2727
	"000000000000000000000000000000000000000000000000",
2728
	"ffffffffffffffffffffffffffff8000",
2729
	"022c4f6f5a017d292785627667ddef24",
2730

2731
	"000000000000000000000000000000000000000000000000",
2732
	"ffffffffffffffffffffffffffffc000",
2733
	"e9c21078a2eb7e03250f71000fa9e3ed",
2734

2735
	"000000000000000000000000000000000000000000000000",
2736
	"ffffffffffffffffffffffffffffe000",
2737
	"a13eaeeb9cd391da4e2b09490b3e7fad",
2738

2739
	"000000000000000000000000000000000000000000000000",
2740
	"fffffffffffffffffffffffffffff000",
2741
	"c958a171dca1d4ed53e1af1d380803a9",
2742

2743
	"000000000000000000000000000000000000000000000000",
2744
	"fffffffffffffffffffffffffffff800",
2745
	"21442e07a110667f2583eaeeee44dc8c",
2746

2747
	"000000000000000000000000000000000000000000000000",
2748
	"fffffffffffffffffffffffffffffc00",
2749
	"59bbb353cf1dd867a6e33737af655e99",
2750

2751
	"000000000000000000000000000000000000000000000000",
2752
	"fffffffffffffffffffffffffffffe00",
2753
	"43cd3b25375d0ce41087ff9fe2829639",
2754

2755
	"000000000000000000000000000000000000000000000000",
2756
	"ffffffffffffffffffffffffffffff00",
2757
	"6b98b17e80d1118e3516bd768b285a84",
2758

2759
	"000000000000000000000000000000000000000000000000",
2760
	"ffffffffffffffffffffffffffffff80",
2761
	"ae47ed3676ca0c08deea02d95b81db58",
2762

2763
	"000000000000000000000000000000000000000000000000",
2764
	"ffffffffffffffffffffffffffffffc0",
2765
	"34ec40dc20413795ed53628ea748720b",
2766

2767
	"000000000000000000000000000000000000000000000000",
2768
	"ffffffffffffffffffffffffffffffe0",
2769
	"4dc68163f8e9835473253542c8a65d46",
2770

2771
	"000000000000000000000000000000000000000000000000",
2772
	"fffffffffffffffffffffffffffffff0",
2773
	"2aabb999f43693175af65c6c612c46fb",
2774

2775
	"000000000000000000000000000000000000000000000000",
2776
	"fffffffffffffffffffffffffffffff8",
2777
	"e01f94499dac3547515c5b1d756f0f58",
2778

2779
	"000000000000000000000000000000000000000000000000",
2780
	"fffffffffffffffffffffffffffffffc",
2781
	"9d12435a46480ce00ea349f71799df9a",
2782

2783
	"000000000000000000000000000000000000000000000000",
2784
	"fffffffffffffffffffffffffffffffe",
2785
	"cef41d16d266bdfe46938ad7884cc0cf",
2786

2787
	"000000000000000000000000000000000000000000000000",
2788
	"ffffffffffffffffffffffffffffffff",
2789
	"b13db4da1f718bc6904797c82bcf2d32",
2790

2791
	/*
2792
	 * From NIST validation suite (ECBVarTxt256.rsp).
2793
	 */
2794
	"0000000000000000000000000000000000000000000000000000000000000000",
2795
	"80000000000000000000000000000000",
2796
	"ddc6bf790c15760d8d9aeb6f9a75fd4e",
2797

2798
	"0000000000000000000000000000000000000000000000000000000000000000",
2799
	"c0000000000000000000000000000000",
2800
	"0a6bdc6d4c1e6280301fd8e97ddbe601",
2801

2802
	"0000000000000000000000000000000000000000000000000000000000000000",
2803
	"e0000000000000000000000000000000",
2804
	"9b80eefb7ebe2d2b16247aa0efc72f5d",
2805

2806
	"0000000000000000000000000000000000000000000000000000000000000000",
2807
	"f0000000000000000000000000000000",
2808
	"7f2c5ece07a98d8bee13c51177395ff7",
2809

2810
	"0000000000000000000000000000000000000000000000000000000000000000",
2811
	"f8000000000000000000000000000000",
2812
	"7818d800dcf6f4be1e0e94f403d1e4c2",
2813

2814
	"0000000000000000000000000000000000000000000000000000000000000000",
2815
	"fc000000000000000000000000000000",
2816
	"e74cd1c92f0919c35a0324123d6177d3",
2817

2818
	"0000000000000000000000000000000000000000000000000000000000000000",
2819
	"fe000000000000000000000000000000",
2820
	"8092a4dcf2da7e77e93bdd371dfed82e",
2821

2822
	"0000000000000000000000000000000000000000000000000000000000000000",
2823
	"ff000000000000000000000000000000",
2824
	"49af6b372135acef10132e548f217b17",
2825

2826
	"0000000000000000000000000000000000000000000000000000000000000000",
2827
	"ff800000000000000000000000000000",
2828
	"8bcd40f94ebb63b9f7909676e667f1e7",
2829

2830
	"0000000000000000000000000000000000000000000000000000000000000000",
2831
	"ffc00000000000000000000000000000",
2832
	"fe1cffb83f45dcfb38b29be438dbd3ab",
2833

2834
	"0000000000000000000000000000000000000000000000000000000000000000",
2835
	"ffe00000000000000000000000000000",
2836
	"0dc58a8d886623705aec15cb1e70dc0e",
2837

2838
	"0000000000000000000000000000000000000000000000000000000000000000",
2839
	"fff00000000000000000000000000000",
2840
	"c218faa16056bd0774c3e8d79c35a5e4",
2841

2842
	"0000000000000000000000000000000000000000000000000000000000000000",
2843
	"fff80000000000000000000000000000",
2844
	"047bba83f7aa841731504e012208fc9e",
2845

2846
	"0000000000000000000000000000000000000000000000000000000000000000",
2847
	"fffc0000000000000000000000000000",
2848
	"dc8f0e4915fd81ba70a331310882f6da",
2849

2850
	"0000000000000000000000000000000000000000000000000000000000000000",
2851
	"fffe0000000000000000000000000000",
2852
	"1569859ea6b7206c30bf4fd0cbfac33c",
2853

2854
	"0000000000000000000000000000000000000000000000000000000000000000",
2855
	"ffff0000000000000000000000000000",
2856
	"300ade92f88f48fa2df730ec16ef44cd",
2857

2858
	"0000000000000000000000000000000000000000000000000000000000000000",
2859
	"ffff8000000000000000000000000000",
2860
	"1fe6cc3c05965dc08eb0590c95ac71d0",
2861

2862
	"0000000000000000000000000000000000000000000000000000000000000000",
2863
	"ffffc000000000000000000000000000",
2864
	"59e858eaaa97fec38111275b6cf5abc0",
2865

2866
	"0000000000000000000000000000000000000000000000000000000000000000",
2867
	"ffffe000000000000000000000000000",
2868
	"2239455e7afe3b0616100288cc5a723b",
2869

2870
	"0000000000000000000000000000000000000000000000000000000000000000",
2871
	"fffff000000000000000000000000000",
2872
	"3ee500c5c8d63479717163e55c5c4522",
2873

2874
	"0000000000000000000000000000000000000000000000000000000000000000",
2875
	"fffff800000000000000000000000000",
2876
	"d5e38bf15f16d90e3e214041d774daa8",
2877

2878
	"0000000000000000000000000000000000000000000000000000000000000000",
2879
	"fffffc00000000000000000000000000",
2880
	"b1f4066e6f4f187dfe5f2ad1b17819d0",
2881

2882
	"0000000000000000000000000000000000000000000000000000000000000000",
2883
	"fffffe00000000000000000000000000",
2884
	"6ef4cc4de49b11065d7af2909854794a",
2885

2886
	"0000000000000000000000000000000000000000000000000000000000000000",
2887
	"ffffff00000000000000000000000000",
2888
	"ac86bc606b6640c309e782f232bf367f",
2889

2890
	"0000000000000000000000000000000000000000000000000000000000000000",
2891
	"ffffff80000000000000000000000000",
2892
	"36aff0ef7bf3280772cf4cac80a0d2b2",
2893

2894
	"0000000000000000000000000000000000000000000000000000000000000000",
2895
	"ffffffc0000000000000000000000000",
2896
	"1f8eedea0f62a1406d58cfc3ecea72cf",
2897

2898
	"0000000000000000000000000000000000000000000000000000000000000000",
2899
	"ffffffe0000000000000000000000000",
2900
	"abf4154a3375a1d3e6b1d454438f95a6",
2901

2902
	"0000000000000000000000000000000000000000000000000000000000000000",
2903
	"fffffff0000000000000000000000000",
2904
	"96f96e9d607f6615fc192061ee648b07",
2905

2906
	"0000000000000000000000000000000000000000000000000000000000000000",
2907
	"fffffff8000000000000000000000000",
2908
	"cf37cdaaa0d2d536c71857634c792064",
2909

2910
	"0000000000000000000000000000000000000000000000000000000000000000",
2911
	"fffffffc000000000000000000000000",
2912
	"fbd6640c80245c2b805373f130703127",
2913

2914
	"0000000000000000000000000000000000000000000000000000000000000000",
2915
	"fffffffe000000000000000000000000",
2916
	"8d6a8afe55a6e481badae0d146f436db",
2917

2918
	"0000000000000000000000000000000000000000000000000000000000000000",
2919
	"ffffffff000000000000000000000000",
2920
	"6a4981f2915e3e68af6c22385dd06756",
2921

2922
	"0000000000000000000000000000000000000000000000000000000000000000",
2923
	"ffffffff800000000000000000000000",
2924
	"42a1136e5f8d8d21d3101998642d573b",
2925

2926
	"0000000000000000000000000000000000000000000000000000000000000000",
2927
	"ffffffffc00000000000000000000000",
2928
	"9b471596dc69ae1586cee6158b0b0181",
2929

2930
	"0000000000000000000000000000000000000000000000000000000000000000",
2931
	"ffffffffe00000000000000000000000",
2932
	"753665c4af1eff33aa8b628bf8741cfd",
2933

2934
	"0000000000000000000000000000000000000000000000000000000000000000",
2935
	"fffffffff00000000000000000000000",
2936
	"9a682acf40be01f5b2a4193c9a82404d",
2937

2938
	"0000000000000000000000000000000000000000000000000000000000000000",
2939
	"fffffffff80000000000000000000000",
2940
	"54fafe26e4287f17d1935f87eb9ade01",
2941

2942
	"0000000000000000000000000000000000000000000000000000000000000000",
2943
	"fffffffffc0000000000000000000000",
2944
	"49d541b2e74cfe73e6a8e8225f7bd449",
2945

2946
	"0000000000000000000000000000000000000000000000000000000000000000",
2947
	"fffffffffe0000000000000000000000",
2948
	"11a45530f624ff6f76a1b3826626ff7b",
2949

2950
	"0000000000000000000000000000000000000000000000000000000000000000",
2951
	"ffffffffff0000000000000000000000",
2952
	"f96b0c4a8bc6c86130289f60b43b8fba",
2953

2954
	"0000000000000000000000000000000000000000000000000000000000000000",
2955
	"ffffffffff8000000000000000000000",
2956
	"48c7d0e80834ebdc35b6735f76b46c8b",
2957

2958
	"0000000000000000000000000000000000000000000000000000000000000000",
2959
	"ffffffffffc000000000000000000000",
2960
	"2463531ab54d66955e73edc4cb8eaa45",
2961

2962
	"0000000000000000000000000000000000000000000000000000000000000000",
2963
	"ffffffffffe000000000000000000000",
2964
	"ac9bd8e2530469134b9d5b065d4f565b",
2965

2966
	"0000000000000000000000000000000000000000000000000000000000000000",
2967
	"fffffffffff000000000000000000000",
2968
	"3f5f9106d0e52f973d4890e6f37e8a00",
2969

2970
	"0000000000000000000000000000000000000000000000000000000000000000",
2971
	"fffffffffff800000000000000000000",
2972
	"20ebc86f1304d272e2e207e59db639f0",
2973

2974
	"0000000000000000000000000000000000000000000000000000000000000000",
2975
	"fffffffffffc00000000000000000000",
2976
	"e67ae6426bf9526c972cff072b52252c",
2977

2978
	"0000000000000000000000000000000000000000000000000000000000000000",
2979
	"fffffffffffe00000000000000000000",
2980
	"1a518dddaf9efa0d002cc58d107edfc8",
2981

2982
	"0000000000000000000000000000000000000000000000000000000000000000",
2983
	"ffffffffffff00000000000000000000",
2984
	"ead731af4d3a2fe3b34bed047942a49f",
2985

2986
	"0000000000000000000000000000000000000000000000000000000000000000",
2987
	"ffffffffffff80000000000000000000",
2988
	"b1d4efe40242f83e93b6c8d7efb5eae9",
2989

2990
	"0000000000000000000000000000000000000000000000000000000000000000",
2991
	"ffffffffffffc0000000000000000000",
2992
	"cd2b1fec11fd906c5c7630099443610a",
2993

2994
	"0000000000000000000000000000000000000000000000000000000000000000",
2995
	"ffffffffffffe0000000000000000000",
2996
	"a1853fe47fe29289d153161d06387d21",
2997

2998
	"0000000000000000000000000000000000000000000000000000000000000000",
2999
	"fffffffffffff0000000000000000000",
3000
	"4632154179a555c17ea604d0889fab14",
3001

3002
	"0000000000000000000000000000000000000000000000000000000000000000",
3003
	"fffffffffffff8000000000000000000",
3004
	"dd27cac6401a022e8f38f9f93e774417",
3005

3006
	"0000000000000000000000000000000000000000000000000000000000000000",
3007
	"fffffffffffffc000000000000000000",
3008
	"c090313eb98674f35f3123385fb95d4d",
3009

3010
	"0000000000000000000000000000000000000000000000000000000000000000",
3011
	"fffffffffffffe000000000000000000",
3012
	"cc3526262b92f02edce548f716b9f45c",
3013

3014
	"0000000000000000000000000000000000000000000000000000000000000000",
3015
	"ffffffffffffff000000000000000000",
3016
	"c0838d1a2b16a7c7f0dfcc433c399c33",
3017

3018
	"0000000000000000000000000000000000000000000000000000000000000000",
3019
	"ffffffffffffff800000000000000000",
3020
	"0d9ac756eb297695eed4d382eb126d26",
3021

3022
	"0000000000000000000000000000000000000000000000000000000000000000",
3023
	"ffffffffffffffc00000000000000000",
3024
	"56ede9dda3f6f141bff1757fa689c3e1",
3025

3026
	"0000000000000000000000000000000000000000000000000000000000000000",
3027
	"ffffffffffffffe00000000000000000",
3028
	"768f520efe0f23e61d3ec8ad9ce91774",
3029

3030
	"0000000000000000000000000000000000000000000000000000000000000000",
3031
	"fffffffffffffff00000000000000000",
3032
	"b1144ddfa75755213390e7c596660490",
3033

3034
	"0000000000000000000000000000000000000000000000000000000000000000",
3035
	"fffffffffffffff80000000000000000",
3036
	"1d7c0c4040b355b9d107a99325e3b050",
3037

3038
	"0000000000000000000000000000000000000000000000000000000000000000",
3039
	"fffffffffffffffc0000000000000000",
3040
	"d8e2bb1ae8ee3dcf5bf7d6c38da82a1a",
3041

3042
	"0000000000000000000000000000000000000000000000000000000000000000",
3043
	"fffffffffffffffe0000000000000000",
3044
	"faf82d178af25a9886a47e7f789b98d7",
3045

3046
	"0000000000000000000000000000000000000000000000000000000000000000",
3047
	"ffffffffffffffff0000000000000000",
3048
	"9b58dbfd77fe5aca9cfc190cd1b82d19",
3049

3050
	"0000000000000000000000000000000000000000000000000000000000000000",
3051
	"ffffffffffffffff8000000000000000",
3052
	"77f392089042e478ac16c0c86a0b5db5",
3053

3054
	"0000000000000000000000000000000000000000000000000000000000000000",
3055
	"ffffffffffffffffc000000000000000",
3056
	"19f08e3420ee69b477ca1420281c4782",
3057

3058
	"0000000000000000000000000000000000000000000000000000000000000000",
3059
	"ffffffffffffffffe000000000000000",
3060
	"a1b19beee4e117139f74b3c53fdcb875",
3061

3062
	"0000000000000000000000000000000000000000000000000000000000000000",
3063
	"fffffffffffffffff000000000000000",
3064
	"a37a5869b218a9f3a0868d19aea0ad6a",
3065

3066
	"0000000000000000000000000000000000000000000000000000000000000000",
3067
	"fffffffffffffffff800000000000000",
3068
	"bc3594e865bcd0261b13202731f33580",
3069

3070
	"0000000000000000000000000000000000000000000000000000000000000000",
3071
	"fffffffffffffffffc00000000000000",
3072
	"811441ce1d309eee7185e8c752c07557",
3073

3074
	"0000000000000000000000000000000000000000000000000000000000000000",
3075
	"fffffffffffffffffe00000000000000",
3076
	"959971ce4134190563518e700b9874d1",
3077

3078
	"0000000000000000000000000000000000000000000000000000000000000000",
3079
	"ffffffffffffffffff00000000000000",
3080
	"76b5614a042707c98e2132e2e805fe63",
3081

3082
	"0000000000000000000000000000000000000000000000000000000000000000",
3083
	"ffffffffffffffffff80000000000000",
3084
	"7d9fa6a57530d0f036fec31c230b0cc6",
3085

3086
	"0000000000000000000000000000000000000000000000000000000000000000",
3087
	"ffffffffffffffffffc0000000000000",
3088
	"964153a83bf6989a4ba80daa91c3e081",
3089

3090
	"0000000000000000000000000000000000000000000000000000000000000000",
3091
	"ffffffffffffffffffe0000000000000",
3092
	"a013014d4ce8054cf2591d06f6f2f176",
3093

3094
	"0000000000000000000000000000000000000000000000000000000000000000",
3095
	"fffffffffffffffffff0000000000000",
3096
	"d1c5f6399bf382502e385eee1474a869",
3097

3098
	"0000000000000000000000000000000000000000000000000000000000000000",
3099
	"fffffffffffffffffff8000000000000",
3100
	"0007e20b8298ec354f0f5fe7470f36bd",
3101

3102
	"0000000000000000000000000000000000000000000000000000000000000000",
3103
	"fffffffffffffffffffc000000000000",
3104
	"b95ba05b332da61ef63a2b31fcad9879",
3105

3106
	"0000000000000000000000000000000000000000000000000000000000000000",
3107
	"fffffffffffffffffffe000000000000",
3108
	"4620a49bd967491561669ab25dce45f4",
3109

3110
	"0000000000000000000000000000000000000000000000000000000000000000",
3111
	"ffffffffffffffffffff000000000000",
3112
	"12e71214ae8e04f0bb63d7425c6f14d5",
3113

3114
	"0000000000000000000000000000000000000000000000000000000000000000",
3115
	"ffffffffffffffffffff800000000000",
3116
	"4cc42fc1407b008fe350907c092e80ac",
3117

3118
	"0000000000000000000000000000000000000000000000000000000000000000",
3119
	"ffffffffffffffffffffc00000000000",
3120
	"08b244ce7cbc8ee97fbba808cb146fda",
3121

3122
	"0000000000000000000000000000000000000000000000000000000000000000",
3123
	"ffffffffffffffffffffe00000000000",
3124
	"39b333e8694f21546ad1edd9d87ed95b",
3125

3126
	"0000000000000000000000000000000000000000000000000000000000000000",
3127
	"fffffffffffffffffffff00000000000",
3128
	"3b271f8ab2e6e4a20ba8090f43ba78f3",
3129

3130
	"0000000000000000000000000000000000000000000000000000000000000000",
3131
	"fffffffffffffffffffff80000000000",
3132
	"9ad983f3bf651cd0393f0a73cccdea50",
3133

3134
	"0000000000000000000000000000000000000000000000000000000000000000",
3135
	"fffffffffffffffffffffc0000000000",
3136
	"8f476cbff75c1f725ce18e4bbcd19b32",
3137

3138
	"0000000000000000000000000000000000000000000000000000000000000000",
3139
	"fffffffffffffffffffffe0000000000",
3140
	"905b6267f1d6ab5320835a133f096f2a",
3141

3142
	"0000000000000000000000000000000000000000000000000000000000000000",
3143
	"ffffffffffffffffffffff0000000000",
3144
	"145b60d6d0193c23f4221848a892d61a",
3145

3146
	"0000000000000000000000000000000000000000000000000000000000000000",
3147
	"ffffffffffffffffffffff8000000000",
3148
	"55cfb3fb6d75cad0445bbc8dafa25b0f",
3149

3150
	"0000000000000000000000000000000000000000000000000000000000000000",
3151
	"ffffffffffffffffffffffc000000000",
3152
	"7b8e7098e357ef71237d46d8b075b0f5",
3153

3154
	"0000000000000000000000000000000000000000000000000000000000000000",
3155
	"ffffffffffffffffffffffe000000000",
3156
	"2bf27229901eb40f2df9d8398d1505ae",
3157

3158
	"0000000000000000000000000000000000000000000000000000000000000000",
3159
	"fffffffffffffffffffffff000000000",
3160
	"83a63402a77f9ad5c1e931a931ecd706",
3161

3162
	"0000000000000000000000000000000000000000000000000000000000000000",
3163
	"fffffffffffffffffffffff800000000",
3164
	"6f8ba6521152d31f2bada1843e26b973",
3165

3166
	"0000000000000000000000000000000000000000000000000000000000000000",
3167
	"fffffffffffffffffffffffc00000000",
3168
	"e5c3b8e30fd2d8e6239b17b44bd23bbd",
3169

3170
	"0000000000000000000000000000000000000000000000000000000000000000",
3171
	"fffffffffffffffffffffffe00000000",
3172
	"1ac1f7102c59933e8b2ddc3f14e94baa",
3173

3174
	"0000000000000000000000000000000000000000000000000000000000000000",
3175
	"ffffffffffffffffffffffff00000000",
3176
	"21d9ba49f276b45f11af8fc71a088e3d",
3177

3178
	"0000000000000000000000000000000000000000000000000000000000000000",
3179
	"ffffffffffffffffffffffff80000000",
3180
	"649f1cddc3792b4638635a392bc9bade",
3181

3182
	"0000000000000000000000000000000000000000000000000000000000000000",
3183
	"ffffffffffffffffffffffffc0000000",
3184
	"e2775e4b59c1bc2e31a2078c11b5a08c",
3185

3186
	"0000000000000000000000000000000000000000000000000000000000000000",
3187
	"ffffffffffffffffffffffffe0000000",
3188
	"2be1fae5048a25582a679ca10905eb80",
3189

3190
	"0000000000000000000000000000000000000000000000000000000000000000",
3191
	"fffffffffffffffffffffffff0000000",
3192
	"da86f292c6f41ea34fb2068df75ecc29",
3193

3194
	"0000000000000000000000000000000000000000000000000000000000000000",
3195
	"fffffffffffffffffffffffff8000000",
3196
	"220df19f85d69b1b562fa69a3c5beca5",
3197

3198
	"0000000000000000000000000000000000000000000000000000000000000000",
3199
	"fffffffffffffffffffffffffc000000",
3200
	"1f11d5d0355e0b556ccdb6c7f5083b4d",
3201

3202
	"0000000000000000000000000000000000000000000000000000000000000000",
3203
	"fffffffffffffffffffffffffe000000",
3204
	"62526b78be79cb384633c91f83b4151b",
3205

3206
	"0000000000000000000000000000000000000000000000000000000000000000",
3207
	"ffffffffffffffffffffffffff000000",
3208
	"90ddbcb950843592dd47bbef00fdc876",
3209

3210
	"0000000000000000000000000000000000000000000000000000000000000000",
3211
	"ffffffffffffffffffffffffff800000",
3212
	"2fd0e41c5b8402277354a7391d2618e2",
3213

3214
	"0000000000000000000000000000000000000000000000000000000000000000",
3215
	"ffffffffffffffffffffffffffc00000",
3216
	"3cdf13e72dee4c581bafec70b85f9660",
3217

3218
	"0000000000000000000000000000000000000000000000000000000000000000",
3219
	"ffffffffffffffffffffffffffe00000",
3220
	"afa2ffc137577092e2b654fa199d2c43",
3221

3222
	"0000000000000000000000000000000000000000000000000000000000000000",
3223
	"fffffffffffffffffffffffffff00000",
3224
	"8d683ee63e60d208e343ce48dbc44cac",
3225

3226
	"0000000000000000000000000000000000000000000000000000000000000000",
3227
	"fffffffffffffffffffffffffff80000",
3228
	"705a4ef8ba2133729c20185c3d3a4763",
3229

3230
	"0000000000000000000000000000000000000000000000000000000000000000",
3231
	"fffffffffffffffffffffffffffc0000",
3232
	"0861a861c3db4e94194211b77ed761b9",
3233

3234
	"0000000000000000000000000000000000000000000000000000000000000000",
3235
	"fffffffffffffffffffffffffffe0000",
3236
	"4b00c27e8b26da7eab9d3a88dec8b031",
3237

3238
	"0000000000000000000000000000000000000000000000000000000000000000",
3239
	"ffffffffffffffffffffffffffff0000",
3240
	"5f397bf03084820cc8810d52e5b666e9",
3241

3242
	"0000000000000000000000000000000000000000000000000000000000000000",
3243
	"ffffffffffffffffffffffffffff8000",
3244
	"63fafabb72c07bfbd3ddc9b1203104b8",
3245

3246
	"0000000000000000000000000000000000000000000000000000000000000000",
3247
	"ffffffffffffffffffffffffffffc000",
3248
	"683e2140585b18452dd4ffbb93c95df9",
3249

3250
	"0000000000000000000000000000000000000000000000000000000000000000",
3251
	"ffffffffffffffffffffffffffffe000",
3252
	"286894e48e537f8763b56707d7d155c8",
3253

3254
	"0000000000000000000000000000000000000000000000000000000000000000",
3255
	"fffffffffffffffffffffffffffff000",
3256
	"a423deabc173dcf7e2c4c53e77d37cd1",
3257

3258
	"0000000000000000000000000000000000000000000000000000000000000000",
3259
	"fffffffffffffffffffffffffffff800",
3260
	"eb8168313e1cfdfdb5e986d5429cf172",
3261

3262
	"0000000000000000000000000000000000000000000000000000000000000000",
3263
	"fffffffffffffffffffffffffffffc00",
3264
	"27127daafc9accd2fb334ec3eba52323",
3265

3266
	"0000000000000000000000000000000000000000000000000000000000000000",
3267
	"fffffffffffffffffffffffffffffe00",
3268
	"ee0715b96f72e3f7a22a5064fc592f4c",
3269

3270
	"0000000000000000000000000000000000000000000000000000000000000000",
3271
	"ffffffffffffffffffffffffffffff00",
3272
	"29ee526770f2a11dcfa989d1ce88830f",
3273

3274
	"0000000000000000000000000000000000000000000000000000000000000000",
3275
	"ffffffffffffffffffffffffffffff80",
3276
	"0493370e054b09871130fe49af730a5a",
3277

3278
	"0000000000000000000000000000000000000000000000000000000000000000",
3279
	"ffffffffffffffffffffffffffffffc0",
3280
	"9b7b940f6c509f9e44a4ee140448ee46",
3281

3282
	"0000000000000000000000000000000000000000000000000000000000000000",
3283
	"ffffffffffffffffffffffffffffffe0",
3284
	"2915be4a1ecfdcbe3e023811a12bb6c7",
3285

3286
	"0000000000000000000000000000000000000000000000000000000000000000",
3287
	"fffffffffffffffffffffffffffffff0",
3288
	"7240e524bc51d8c4d440b1be55d1062c",
3289

3290
	"0000000000000000000000000000000000000000000000000000000000000000",
3291
	"fffffffffffffffffffffffffffffff8",
3292
	"da63039d38cb4612b2dc36ba26684b93",
3293

3294
	"0000000000000000000000000000000000000000000000000000000000000000",
3295
	"fffffffffffffffffffffffffffffffc",
3296
	"0f59cb5a4b522e2ac56c1a64f558ad9a",
3297

3298
	"0000000000000000000000000000000000000000000000000000000000000000",
3299
	"fffffffffffffffffffffffffffffffe",
3300
	"7bfe9d876c6d63c1d035da8fe21c409d",
3301

3302
	"0000000000000000000000000000000000000000000000000000000000000000",
3303
	"ffffffffffffffffffffffffffffffff",
3304
	"acdace8078a32b1a182bfa4987ca1347",
3305

3306
	/*
3307
	 * Table end marker.
3308
	 */
3309
	NULL
3310
};
3311

3312
/*
3313
 * AES known-answer tests for CBC. Order: key, IV, plaintext, ciphertext.
3314
 */
3315
static const char *const KAT_AES_CBC[] = {
3316
	/*
3317
	 * From NIST validation suite "Multiblock Message Test"
3318
	 * (cbcmmt128.rsp).
3319
	 */
3320
	"1f8e4973953f3fb0bd6b16662e9a3c17",
3321
	"2fe2b333ceda8f98f4a99b40d2cd34a8",
3322
	"45cf12964fc824ab76616ae2f4bf0822",
3323
	"0f61c4d44c5147c03c195ad7e2cc12b2",
3324

3325
	"0700d603a1c514e46b6191ba430a3a0c",
3326
	"aad1583cd91365e3bb2f0c3430d065bb",
3327
	"068b25c7bfb1f8bdd4cfc908f69dffc5ddc726a197f0e5f720f730393279be91",
3328
	"c4dc61d9725967a3020104a9738f23868527ce839aab1752fd8bdb95a82c4d00",
3329

3330
	"3348aa51e9a45c2dbe33ccc47f96e8de",
3331
	"19153c673160df2b1d38c28060e59b96",
3332
	"9b7cee827a26575afdbb7c7a329f887238052e3601a7917456ba61251c214763d5e1847a6ad5d54127a399ab07ee3599",
3333
	"d5aed6c9622ec451a15db12819952b6752501cf05cdbf8cda34a457726ded97818e1f127a28d72db5652749f0c6afee5",
3334

3335
	"b7f3c9576e12dd0db63e8f8fac2b9a39",
3336
	"c80f095d8bb1a060699f7c19974a1aa0",
3337
	"9ac19954ce1319b354d3220460f71c1e373f1cd336240881160cfde46ebfed2e791e8d5a1a136ebd1dc469dec00c4187722b841cdabcb22c1be8a14657da200e",
3338
	"19b9609772c63f338608bf6eb52ca10be65097f89c1e0905c42401fd47791ae2c5440b2d473116ca78bd9ff2fb6015cfd316524eae7dcb95ae738ebeae84a467",
3339

3340
	"b6f9afbfe5a1562bba1368fc72ac9d9c",
3341
	"3f9d5ebe250ee7ce384b0d00ee849322",
3342
	"db397ec22718dbffb9c9d13de0efcd4611bf792be4fce0dc5f25d4f577ed8cdbd4eb9208d593dda3d4653954ab64f05676caa3ce9bfa795b08b67ceebc923fdc89a8c431188e9e482d8553982cf304d1",
3343
	"10ea27b19e16b93af169c4a88e06e35c99d8b420980b058e34b4b8f132b13766f72728202b089f428fecdb41c79f8aa0d0ef68f5786481cca29e2126f69bc14160f1ae2187878ba5c49cf3961e1b7ee9",
3344

3345
	"bbe7b7ba07124ff1ae7c3416fe8b465e",
3346
	"7f65b5ee3630bed6b84202d97fb97a1e",
3347
	"2aad0c2c4306568bad7447460fd3dac054346d26feddbc9abd9110914011b4794be2a9a00a519a51a5b5124014f4ed2735480db21b434e99a911bb0b60fe0253763725b628d5739a5117b7ee3aefafc5b4c1bf446467e7bf5f78f31ff7caf187",
3348
	"3b8611bfc4973c5cd8e982b073b33184cd26110159172e44988eb5ff5661a1e16fad67258fcbfee55469267a12dc374893b4e3533d36f5634c3095583596f135aa8cd1138dc898bc5651ee35a92ebf89ab6aeb5366653bc60a70e0074fc11efe",
3349

3350
	"89a553730433f7e6d67d16d373bd5360",
3351
	"f724558db3433a523f4e51a5bea70497",
3352
	"807bc4ea684eedcfdcca30180680b0f1ae2814f35f36d053c5aea6595a386c1442770f4d7297d8b91825ee7237241da8925dd594ccf676aecd46ca2068e8d37a3a0ec8a7d5185a201e663b5ff36ae197110188a23503763b8218826d23ced74b31e9f6e2d7fbfa6cb43420c7807a8625",
3353
	"406af1429a478c3d07e555c5287a60500d37fc39b68e5bbb9bafd6ddb223828561d6171a308d5b1a4551e8a5e7d572918d25c968d3871848d2f16635caa9847f38590b1df58ab5efb985f2c66cfaf86f61b3f9c0afad6c963c49cee9b8bc81a2ddb06c967f325515a4849eec37ce721a",
3354

3355
	"c491ca31f91708458e29a925ec558d78",
3356
	"9ef934946e5cd0ae97bd58532cb49381",
3357
	"cb6a787e0dec56f9a165957f81af336ca6b40785d9e94093c6190e5152649f882e874d79ac5e167bd2a74ce5ae088d2ee854f6539e0a94796b1e1bd4c9fcdbc79acbef4d01eeb89776d18af71ae2a4fc47dd66df6c4dbe1d1850e466549a47b636bcc7c2b3a62495b56bb67b6d455f1eebd9bfefecbca6c7f335cfce9b45cb9d",
3358
	"7b2931f5855f717145e00f152a9f4794359b1ffcb3e55f594e33098b51c23a6c74a06c1d94fded7fd2ae42c7db7acaef5844cb33aeddc6852585ed0020a6699d2cb53809cefd169148ce42292afab063443978306c582c18b9ce0da3d084ce4d3c482cfd8fcf1a85084e89fb88b40a084d5e972466d07666126fb761f84078f2",
3359

3360
	"f6e87d71b0104d6eb06a68dc6a71f498",
3361
	"1c245f26195b76ebebc2edcac412a2f8",
3362
	"f82bef3c73a6f7f80db285726d691db6bf55eec25a859d3ba0e0445f26b9bb3b16a3161ed1866e4dd8f2e5f8ecb4e46d74a7a78c20cdfc7bcc9e479ba7a0caba9438238ad0c01651d5d98de37f03ddce6e6b4bd4ab03cf9e8ed818aedfa1cf963b932067b97d776dce1087196e7e913f7448e38244509f0caf36bd8217e15336d35c149fd4e41707893fdb84014f8729",
3363
	"b09512f3eff9ed0d85890983a73dadbb7c3678d52581be64a8a8fc586f490f2521297a478a0598040ebd0f5509fafb0969f9d9e600eaef33b1b93eed99687b167f89a5065aac439ce46f3b8d22d30865e64e45ef8cd30b6984353a844a11c8cd60dba0e8866b3ee30d24b3fa8a643b328353e06010fa8273c8fd54ef0a2b6930e5520aae5cd5902f9b86a33592ca4365",
3364

3365
	"2c14413751c31e2730570ba3361c786b",
3366
	"1dbbeb2f19abb448af849796244a19d7",
3367
	"40d930f9a05334d9816fe204999c3f82a03f6a0457a8c475c94553d1d116693adc618049f0a769a2eed6a6cb14c0143ec5cccdbc8dec4ce560cfd206225709326d4de7948e54d603d01b12d7fed752fb23f1aa4494fbb00130e9ded4e77e37c079042d828040c325b1a5efd15fc842e44014ca4374bf38f3c3fc3ee327733b0c8aee1abcd055772f18dc04603f7b2c1ea69ff662361f2be0a171bbdcea1e5d3f",
3368
	"6be8a12800455a320538853e0cba31bd2d80ea0c85164a4c5c261ae485417d93effe2ebc0d0a0b51d6ea18633d210cf63c0c4ddbc27607f2e81ed9113191ef86d56f3b99be6c415a4150299fb846ce7160b40b63baf1179d19275a2e83698376d28b92548c68e06e6d994e2c1501ed297014e702cdefee2f656447706009614d801de1caaf73f8b7fa56cf1ba94b631933bbe577624380850f117435a0355b2b",
3369

3370
	/*
3371
	 * From NIST validation suite "Multiblock Message Test"
3372
	 * (cbcmmt192.rsp).
3373
	 */
3374
	"ba75f4d1d9d7cf7f551445d56cc1a8ab2a078e15e049dc2c",
3375
	"531ce78176401666aa30db94ec4a30eb",
3376
	"c51fc276774dad94bcdc1d2891ec8668",
3377
	"70dd95a14ee975e239df36ff4aee1d5d",
3378

3379
	"eab3b19c581aa873e1981c83ab8d83bbf8025111fb2e6b21",
3380
	"f3d6667e8d4d791e60f7505ba383eb05",
3381
	"9d4e4cccd1682321856df069e3f1c6fa391a083a9fb02d59db74c14081b3acc4",
3382
	"51d44779f90d40a80048276c035cb49ca2a47bcb9b9cf7270b9144793787d53f",
3383

3384
	"16c93bb398f1fc0cf6d68fc7a5673cdf431fa147852b4a2d",
3385
	"eaaeca2e07ddedf562f94df63f0a650f",
3386
	"c5ce958613bf741718c17444484ebaf1050ddcacb59b9590178cbe69d7ad7919608cb03af13bbe04f3506b718a301ea0",
3387
	"ed6a50e0c6921d52d6647f75d67b4fd56ace1fedb8b5a6a997b4d131640547d22c5d884a75e6752b5846b5b33a5181f4",
3388

3389
	"067bb17b4df785697eaccf961f98e212cb75e6797ce935cb",
3390
	"8b59c9209c529ca8391c9fc0ce033c38",
3391
	"db3785a889b4bd387754da222f0e4c2d2bfe0d79e05bc910fba941beea30f1239eacf0068f4619ec01c368e986fca6b7c58e490579d29611bd10087986eff54f",
3392
	"d5f5589760bf9c762228fde236de1fa2dd2dad448db3fa9be0c4196efd46a35c84dd1ac77d9db58c95918cb317a6430a08d2fb6a8e8b0f1c9b72c7a344dc349f",
3393

3394
	"0fd39de83e0be77a79c8a4a612e3dd9c8aae2ce35e7a2bf8",
3395
	"7e1d629b84f93b079be51f9a5f5cb23c",
3396
	"38fbda37e28fa86d9d83a4345e419dea95d28c7818ff25925db6ac3aedaf0a86154e20a4dfcc5b1b4192895393e5eb5846c88bdbd41ecf7af3104f410eaee470f5d9017ed460475f626953035a13db1f",
3397
	"edadae2f9a45ff3473e02d904c94d94a30a4d92da4deb6bcb4b0774472694571842039f21c496ef93fd658842c735f8a81fcd0aa578442ab893b18f606aed1bab11f81452dd45e9b56adf2eccf4ea095",
3398

3399
	"e3fecc75f0075a09b383dfd389a3d33cc9b854b3b254c0f4",
3400
	"36eab883afef936cc38f63284619cd19",
3401
	"931b2f5f3a5820d53a6beaaa6431083a3488f4eb03b0f5b57ef838e1579623103bd6e6800377538b2e51ef708f3c4956432e8a8ee6a34e190642b26ad8bdae6c2af9a6c7996f3b6004d2671e41f1c9f40ee03d1c4a52b0a0654a331f15f34dce",
3402
	"75395974bd32b3665654a6c8e396b88ae34b123575872a7ab687d8e76b46df911a8a590cd01d2f5c330be3a6626e9dd3aa5e10ed14e8ff829811b6fed50f3f533ca4385a1cbca78f5c4744e50f2f8359165c2485d1324e76c3eae76a0ccac629",
3403

3404
	"f9c27565eb07947c8cb51b79248430f7b1066c3d2fdc3d13",
3405
	"2bd67cc89ab7948d644a49672843cbd9",
3406
	"6abcc270173cf114d44847e911a050db57ba7a2e2c161c6f37ccb6aaa4677bddcaf50cad0b5f8758fcf7c0ebc650ceb5cd52cafb8f8dd3edcece55d9f1f08b9fa8f54365cf56e28b9596a7e1dd1d3418e4444a7724add4cf79d527b183ec88de4be4eeff29c80a97e54f85351cb189ee",
3407
	"ca282924a61187feb40520979106e5cc861957f23828dcb7285e0eaac8a0ca2a6b60503d63d6039f4693dba32fa1f73ae2e709ca94911f28a5edd1f30eaddd54680c43acc9c74cd90d8bb648b4e544275f47e514daa20697f66c738eb30337f017fca1a26da4d1a0cc0a0e98e2463070",
3408

3409
	"fb09cf9e00dbf883689d079c920077c0073c31890b55bab5",
3410
	"e3c89bd097c3abddf64f4881db6dbfe2",
3411
	"c1a37683fb289467dd1b2c89efba16bbd2ee24cf18d19d44596ded2682c79a2f711c7a32bf6a24badd32a4ee637c73b7a41da6258635650f91fb9ffa45bdfc3cb122136241b3deced8996aa51ea8d3e81c9d70e006a44bc0571ed48623a0d622a93fa9da290baaedf5d9e876c94620945ff8ecc83f27379ed55cf490c5790f27",
3412
	"8158e21420f25b59d6ae943fa1cbf21f02e979f419dab0126a721b7eef55bee9ad97f5ccff7d239057bbc19a8c378142f7672f1d5e7e17d7bebcb0070e8355cace6660171a53b61816ae824a6ef69ce470b6ffd3b5bb4b438874d91d27854d3b6f25860d3868958de3307d62b1339bdddb8a318c0ce0f33c17caf0e9f6040820",
3413

3414
	"bca6fa3c67fd294e958f66fe8bd64f45f428f5bc8e9733a7",
3415
	"92a47f2833f1450d1da41717bdc6e83c",
3416
	"5becbc31d8bead6d36ae014a5863d14a431e6b55d29ea6baaa417271716db3a33b2e506b452086dfe690834ac2de30bc41254ec5401ec47d064237c7792fdcd7914d8af20eb114756642d519021a8c75a92f6bc53d326ae9a5b7e1b10a9756574692934d9939fc399e0c203f7edf8e7e6482eadd31a0400770e897b48c6bca2b404593045080e93377358c42a0f4dede",
3417
	"926db248cc1ba20f0c57631a7c8aef094f791937b905949e3460240e8bfa6fa483115a1b310b6e4369caebc5262888377b1ddaa5800ea496a2bdff0f9a1031e7129c9a20e35621e7f0b8baca0d87030f2ae7ca8593c8599677a06fd4b26009ead08fecac24caa9cf2cad3b470c8227415a7b1e0f2eab3fad96d70a209c8bb26c627677e2531b9435ca6e3c444d195b5f",
3418

3419
	"162ad50ee64a0702aa551f571dedc16b2c1b6a1e4d4b5eee",
3420
	"24408038161a2ccae07b029bb66355c1",
3421
	"be8abf00901363987a82cc77d0ec91697ba3857f9e4f84bd79406c138d02698f003276d0449120bef4578d78fecabe8e070e11710b3f0a2744bd52434ec70015884c181ebdfd51c604a71c52e4c0e110bc408cd462b248a80b8a8ac06bb952ac1d7faed144807f1a731b7febcaf7835762defe92eccfc7a9944e1c702cffe6bc86733ed321423121085ac02df8962bcbc1937092eebf0e90a8b20e3dd8c244ae",
3422
	"c82cf2c476dea8cb6a6e607a40d2f0391be82ea9ec84a537a6820f9afb997b76397d005424faa6a74dc4e8c7aa4a8900690f894b6d1dca80675393d2243adac762f159301e357e98b724762310cd5a7bafe1c2a030dba46fd93a9fdb89cc132ca9c17dc72031ec6822ee5a9d99dbca66c784c01b0885cbb62e29d97801927ec415a5d215158d325f9ee689437ad1b7684ad33c0d92739451ac87f39ff8c31b84",
3423

3424
	/*
3425
	 * From NIST validation suite "Multiblock Message Test"
3426
	 * (cbcmmt256.rsp).
3427
	 */
3428
	"6ed76d2d97c69fd1339589523931f2a6cff554b15f738f21ec72dd97a7330907",
3429
	"851e8764776e6796aab722dbb644ace8",
3430
	"6282b8c05c5c1530b97d4816ca434762",
3431
	"6acc04142e100a65f51b97adf5172c41",
3432

3433
	"dce26c6b4cfb286510da4eecd2cffe6cdf430f33db9b5f77b460679bd49d13ae",
3434
	"fdeaa134c8d7379d457175fd1a57d3fc",
3435
	"50e9eee1ac528009e8cbcd356975881f957254b13f91d7c6662d10312052eb00",
3436
	"2fa0df722a9fd3b64cb18fb2b3db55ff2267422757289413f8f657507412a64c",
3437

3438
	"fe8901fecd3ccd2ec5fdc7c7a0b50519c245b42d611a5ef9e90268d59f3edf33",
3439
	"bd416cb3b9892228d8f1df575692e4d0",
3440
	"8d3aa196ec3d7c9b5bb122e7fe77fb1295a6da75abe5d3a510194d3a8a4157d5c89d40619716619859da3ec9b247ced9",
3441
	"608e82c7ab04007adb22e389a44797fed7de090c8c03ca8a2c5acd9e84df37fbc58ce8edb293e98f02b640d6d1d72464",
3442

3443
	"0493ff637108af6a5b8e90ac1fdf035a3d4bafd1afb573be7ade9e8682e663e5",
3444
	"c0cd2bebccbb6c49920bd5482ac756e8",
3445
	"8b37f9148df4bb25956be6310c73c8dc58ea9714ff49b643107b34c9bff096a94fedd6823526abc27a8e0b16616eee254ab4567dd68e8ccd4c38ac563b13639c",
3446
	"05d5c77729421b08b737e41119fa4438d1f570cc772a4d6c3df7ffeda0384ef84288ce37fc4c4c7d1125a499b051364c389fd639bdda647daa3bdadab2eb5594",
3447

3448
	"9adc8fbd506e032af7fa20cf5343719de6d1288c158c63d6878aaf64ce26ca85",
3449
	"11958dc6ab81e1c7f01631e9944e620f",
3450
	"c7917f84f747cd8c4b4fedc2219bdbc5f4d07588389d8248854cf2c2f89667a2d7bcf53e73d32684535f42318e24cd45793950b3825e5d5c5c8fcd3e5dda4ce9246d18337ef3052d8b21c5561c8b660e",
3451
	"9c99e68236bb2e929db1089c7750f1b356d39ab9d0c40c3e2f05108ae9d0c30b04832ccdbdc08ebfa426b7f5efde986ed05784ce368193bb3699bc691065ac62e258b9aa4cc557e2b45b49ce05511e65",
3452

3453
	"73b8faf00b3302ac99855cf6f9e9e48518690a5906a4869d4dcf48d282faae2a",
3454
	"b3cb97a80a539912b8c21f450d3b9395",
3455
	"3adea6e06e42c4f041021491f2775ef6378cb08824165edc4f6448e232175b60d0345b9f9c78df6596ec9d22b7b9e76e8f3c76b32d5d67273f1d83fe7a6fc3dd3c49139170fa5701b3beac61b490f0a9e13f844640c4500f9ad3087adfb0ae10",
3456
	"ac3d6dbafe2e0f740632fd9e820bf6044cd5b1551cbb9cc03c0b25c39ccb7f33b83aacfca40a3265f2bbff879153448acacb88fcfb3bb7b10fe463a68c0109f028382e3e557b1adf02ed648ab6bb895df0205d26ebbfa9a5fd8cebd8e4bee3dc",
3457

3458
	"9ddf3745896504ff360a51a3eb49c01b79fccebc71c3abcb94a949408b05b2c9",
3459
	"e79026639d4aa230b5ccffb0b29d79bc",
3460
	"cf52e5c3954c51b94c9e38acb8c9a7c76aebdaa9943eae0a1ce155a2efdb4d46985d935511471452d9ee64d2461cb2991d59fc0060697f9a671672163230f367fed1422316e52d29eceacb8768f56d9b80f6d278093c9a8acd3cfd7edd8ebd5c293859f64d2f8486ae1bd593c65bc014",
3461
	"34df561bd2cfebbcb7af3b4b8d21ca5258312e7e2e4e538e35ad2490b6112f0d7f148f6aa8d522a7f3c61d785bd667db0e1dc4606c318ea4f26af4fe7d11d4dcff0456511b4aed1a0d91ba4a1fd6cd9029187bc5881a5a07fe02049d39368e83139b12825bae2c7be81e6f12c61bb5c5",
3462

3463
	"458b67bf212d20f3a57fce392065582dcefbf381aa22949f8338ab9052260e1d",
3464
	"4c12effc5963d40459602675153e9649",
3465
	"256fd73ce35ae3ea9c25dd2a9454493e96d8633fe633b56176dce8785ce5dbbb84dbf2c8a2eeb1e96b51899605e4f13bbc11b93bf6f39b3469be14858b5b720d4a522d36feed7a329c9b1e852c9280c47db8039c17c4921571a07d1864128330e09c308ddea1694e95c84500f1a61e614197e86a30ecc28df64ccb3ccf5437aa",
3466
	"90b7b9630a2378f53f501ab7beff039155008071bc8438e789932cfd3eb1299195465e6633849463fdb44375278e2fdb1310821e6492cf80ff15cb772509fb426f3aeee27bd4938882fd2ae6b5bd9d91fa4a43b17bb439ebbe59c042310163a82a5fe5388796eee35a181a1271f00be29b852d8fa759bad01ff4678f010594cd",
3467

3468
	"d2412db0845d84e5732b8bbd642957473b81fb99ca8bff70e7920d16c1dbec89",
3469
	"51c619fcf0b23f0c7925f400a6cacb6d",
3470
	"026006c4a71a180c9929824d9d095b8faaa86fc4fa25ecac61d85ff6de92dfa8702688c02a282c1b8af4449707f22d75e91991015db22374c95f8f195d5bb0afeb03040ff8965e0e1339dba5653e174f8aa5a1b39fe3ac839ce307a4e44b4f8f1b0063f738ec18acdbff2ebfe07383e734558723e741f0a1836dafdf9de82210a9248bc113b3c1bc8b4e252ca01bd803",
3471
	"0254b23463bcabec5a395eb74c8fb0eb137a07bc6f5e9f61ec0b057de305714f8fa294221c91a159c315939b81e300ee902192ec5f15254428d8772f79324ec43298ca21c00b370273ee5e5ed90e43efa1e05a5d171209fe34f9f29237dba2a6726650fd3b1321747d1208863c6c3c6b3e2d879ab5f25782f08ba8f2abbe63e0bedb4a227e81afb36bb6645508356d34",
3472

3473
	"48be597e632c16772324c8d3fa1d9c5a9ecd010f14ec5d110d3bfec376c5532b",
3474
	"d6d581b8cf04ebd3b6eaa1b53f047ee1",
3475
	"0c63d413d3864570e70bb6618bf8a4b9585586688c32bba0a5ecc1362fada74ada32c52acfd1aa7444ba567b4e7daaecf7cc1cb29182af164ae5232b002868695635599807a9a7f07a1f137e97b1e1c9dabc89b6a5e4afa9db5855edaa575056a8f4f8242216242bb0c256310d9d329826ac353d715fa39f80cec144d6424558f9f70b98c920096e0f2c855d594885a00625880e9dfb734163cecef72cf030b8",
3476
	"fc5873e50de8faf4c6b84ba707b0854e9db9ab2e9f7d707fbba338c6843a18fc6facebaf663d26296fb329b4d26f18494c79e09e779647f9bafa87489630d79f4301610c2300c19dbf3148b7cac8c4f4944102754f332e92b6f7c5e75bc6179eb877a078d4719009021744c14f13fd2a55a2b9c44d18000685a845a4f632c7c56a77306efa66a24d05d088dcd7c13fe24fc447275965db9e4d37fbc9304448cd",
3477

3478
	/*
3479
	 * End-of-table marker.
3480
	 */
3481
	NULL
3482
};
3483

3484
/*
3485
 * AES known-answer tests for CTR. Order: key, IV, plaintext, ciphertext.
3486
 */
3487
static const char *const KAT_AES_CTR[] = {
3488
	/*
3489
	 * From RFC 3686.
3490
	 */
3491
	"ae6852f8121067cc4bf7a5765577f39e",
3492
	"000000300000000000000000",
3493
	"53696e676c6520626c6f636b206d7367",
3494
	"e4095d4fb7a7b3792d6175a3261311b8",
3495

3496
	"7e24067817fae0d743d6ce1f32539163",
3497
	"006cb6dbc0543b59da48d90b",
3498
	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
3499
	"5104a106168a72d9790d41ee8edad388eb2e1efc46da57c8fce630df9141be28",
3500

3501
	"7691be035e5020a8ac6e618529f9a0dc",
3502
	"00e0017b27777f3f4a1786f0",
3503
	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
3504
	"c1cf48a89f2ffdd9cf4652e9efdb72d74540a42bde6d7836d59a5ceaaef3105325b2072f",
3505

3506
	"16af5b145fc9f579c175f93e3bfb0eed863d06ccfdb78515",
3507
	"0000004836733c147d6d93cb",
3508
	"53696e676c6520626c6f636b206d7367",
3509
	"4b55384fe259c9c84e7935a003cbe928",
3510

3511
	"7c5cb2401b3dc33c19e7340819e0f69c678c3db8e6f6a91a",
3512
	"0096b03b020c6eadc2cb500d",
3513
	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
3514
	"453243fc609b23327edfaafa7131cd9f8490701c5ad4a79cfc1fe0ff42f4fb00",
3515

3516
	"02bf391ee8ecb159b959617b0965279bf59b60a786d3e0fe",
3517
	"0007bdfd5cbd60278dcc0912",
3518
	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
3519
	"96893fc55e5c722f540b7dd1ddf7e758d288bc95c69165884536c811662f2188abee0935",
3520

3521
	"776beff2851db06f4c8a0542c8696f6c6a81af1eec96b4d37fc1d689e6c1c104",
3522
	"00000060db5672c97aa8f0b2",
3523
	"53696e676c6520626c6f636b206d7367",
3524
	"145ad01dbf824ec7560863dc71e3e0c0",
3525

3526
	"f6d66d6bd52d59bb0796365879eff886c66dd51a5b6a99744b50590c87a23884",
3527
	"00faac24c1585ef15a43d875",
3528
	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
3529
	"f05e231b3894612c49ee000b804eb2a9b8306b508f839d6a5530831d9344af1c",
3530

3531
	"ff7a617ce69148e4f1726e2f43581de2aa62d9f805532edff1eed687fb54153d",
3532
	"001cc5b751a51d70a1c11148",
3533
	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
3534
	"eb6c52821d0bbbf7ce7594462aca4faab407df866569fd07f48cc0b583d6071f1ec0e6b8",
3535

3536
	/*
3537
	 * End-of-table marker.
3538
	 */
3539
	NULL
3540
};
3541

3542
static void
3543
monte_carlo_AES_encrypt(const br_block_cbcenc_class *ve,
3544
	char *skey, char *splain, char *scipher)
3545
{
3546
	unsigned char key[32];
3547
	unsigned char buf[16];
3548
	unsigned char pbuf[16];
3549
	unsigned char cipher[16];
3550
	size_t key_len;
3551
	int i, j, k;
3552
	br_aes_gen_cbcenc_keys v_ec;
3553
	const br_block_cbcenc_class **ec;
3554

3555
	ec = &v_ec.vtable;
3556
	key_len = hextobin(key, skey);
3557
	hextobin(buf, splain);
3558
	hextobin(cipher, scipher);
3559
	for (i = 0; i < 100; i ++) {
3560
		ve->init(ec, key, key_len);
3561
		for (j = 0; j < 1000; j ++) {
3562
			unsigned char iv[16];
3563

3564
			memcpy(pbuf, buf, sizeof buf);
3565
			memset(iv, 0, sizeof iv);
3566
			ve->run(ec, iv, buf, sizeof buf);
3567
		}
3568
		switch (key_len) {
3569
		case 16:
3570
			for (k = 0; k < 16; k ++) {
3571
				key[k] ^= buf[k];
3572
			}
3573
			break;
3574
		case 24:
3575
			for (k = 0; k < 8; k ++) {
3576
				key[k] ^= pbuf[8 + k];
3577
			}
3578
			for (k = 0; k < 16; k ++) {
3579
				key[8 + k] ^= buf[k];
3580
			}
3581
			break;
3582
		default:
3583
			for (k = 0; k < 16; k ++) {
3584
				key[k] ^= pbuf[k];
3585
				key[16 + k] ^= buf[k];
3586
			}
3587
			break;
3588
		}
3589
		printf(".");
3590
		fflush(stdout);
3591
	}
3592
	printf(" ");
3593
	fflush(stdout);
3594
	check_equals("MC AES encrypt", buf, cipher, sizeof buf);
3595
}
3596

3597
static void
3598
monte_carlo_AES_decrypt(const br_block_cbcdec_class *vd,
3599
	char *skey, char *scipher, char *splain)
3600
{
3601
	unsigned char key[32];
3602
	unsigned char buf[16];
3603
	unsigned char pbuf[16];
3604
	unsigned char plain[16];
3605
	size_t key_len;
3606
	int i, j, k;
3607
	br_aes_gen_cbcdec_keys v_dc;
3608
	const br_block_cbcdec_class **dc;
3609

3610
	dc = &v_dc.vtable;
3611
	key_len = hextobin(key, skey);
3612
	hextobin(buf, scipher);
3613
	hextobin(plain, splain);
3614
	for (i = 0; i < 100; i ++) {
3615
		vd->init(dc, key, key_len);
3616
		for (j = 0; j < 1000; j ++) {
3617
			unsigned char iv[16];
3618

3619
			memcpy(pbuf, buf, sizeof buf);
3620
			memset(iv, 0, sizeof iv);
3621
			vd->run(dc, iv, buf, sizeof buf);
3622
		}
3623
		switch (key_len) {
3624
		case 16:
3625
			for (k = 0; k < 16; k ++) {
3626
				key[k] ^= buf[k];
3627
			}
3628
			break;
3629
		case 24:
3630
			for (k = 0; k < 8; k ++) {
3631
				key[k] ^= pbuf[8 + k];
3632
			}
3633
			for (k = 0; k < 16; k ++) {
3634
				key[8 + k] ^= buf[k];
3635
			}
3636
			break;
3637
		default:
3638
			for (k = 0; k < 16; k ++) {
3639
				key[k] ^= pbuf[k];
3640
				key[16 + k] ^= buf[k];
3641
			}
3642
			break;
3643
		}
3644
		printf(".");
3645
		fflush(stdout);
3646
	}
3647
	printf(" ");
3648
	fflush(stdout);
3649
	check_equals("MC AES decrypt", buf, plain, sizeof buf);
3650
}
3651

3652
static void
3653
test_AES_generic(char *name,
3654
	const br_block_cbcenc_class *ve,
3655
	const br_block_cbcdec_class *vd,
3656
	const br_block_ctr_class *vc,
3657
	int with_MC, int with_CBC)
3658
{
3659
	size_t u;
3660

3661
	printf("Test %s: ", name);
3662
	fflush(stdout);
3663

3664
	if (ve->block_size != 16 || vd->block_size != 16
3665
		|| ve->log_block_size != 4 || vd->log_block_size != 4)
3666
	{
3667
		fprintf(stderr, "%s failed: wrong block size\n", name);
3668
		exit(EXIT_FAILURE);
3669
	}
3670

3671
	for (u = 0; KAT_AES[u]; u += 3) {
3672
		unsigned char key[32];
3673
		unsigned char plain[16];
3674
		unsigned char cipher[16];
3675
		unsigned char buf[16];
3676
		unsigned char iv[16];
3677
		size_t key_len;
3678
		br_aes_gen_cbcenc_keys v_ec;
3679
		br_aes_gen_cbcdec_keys v_dc;
3680
		const br_block_cbcenc_class **ec;
3681
		const br_block_cbcdec_class **dc;
3682

3683
		ec = &v_ec.vtable;
3684
		dc = &v_dc.vtable;
3685
		key_len = hextobin(key, KAT_AES[u]);
3686
		hextobin(plain, KAT_AES[u + 1]);
3687
		hextobin(cipher, KAT_AES[u + 2]);
3688
		ve->init(ec, key, key_len);
3689
		memcpy(buf, plain, sizeof plain);
3690
		memset(iv, 0, sizeof iv);
3691
		ve->run(ec, iv, buf, sizeof buf);
3692
		check_equals("KAT AES encrypt", buf, cipher, sizeof cipher);
3693
		vd->init(dc, key, key_len);
3694
		memset(iv, 0, sizeof iv);
3695
		vd->run(dc, iv, buf, sizeof buf);
3696
		check_equals("KAT AES decrypt", buf, plain, sizeof plain);
3697
	}
3698

3699
	if (with_CBC) {
3700
		for (u = 0; KAT_AES_CBC[u]; u += 4) {
3701
			unsigned char key[32];
3702
			unsigned char ivref[16];
3703
			unsigned char plain[200];
3704
			unsigned char cipher[200];
3705
			unsigned char buf[200];
3706
			unsigned char iv[16];
3707
			size_t key_len, data_len, v;
3708
			br_aes_gen_cbcenc_keys v_ec;
3709
			br_aes_gen_cbcdec_keys v_dc;
3710
			const br_block_cbcenc_class **ec;
3711
			const br_block_cbcdec_class **dc;
3712

3713
			ec = &v_ec.vtable;
3714
			dc = &v_dc.vtable;
3715
			key_len = hextobin(key, KAT_AES_CBC[u]);
3716
			hextobin(ivref, KAT_AES_CBC[u + 1]);
3717
			data_len = hextobin(plain, KAT_AES_CBC[u + 2]);
3718
			hextobin(cipher, KAT_AES_CBC[u + 3]);
3719
			ve->init(ec, key, key_len);
3720

3721
			memcpy(buf, plain, data_len);
3722
			memcpy(iv, ivref, 16);
3723
			ve->run(ec, iv, buf, data_len);
3724
			check_equals("KAT CBC AES encrypt",
3725
				buf, cipher, data_len);
3726
			vd->init(dc, key, key_len);
3727
			memcpy(iv, ivref, 16);
3728
			vd->run(dc, iv, buf, data_len);
3729
			check_equals("KAT CBC AES decrypt",
3730
				buf, plain, data_len);
3731

3732
			memcpy(buf, plain, data_len);
3733
			memcpy(iv, ivref, 16);
3734
			for (v = 0; v < data_len; v += 16) {
3735
				ve->run(ec, iv, buf + v, 16);
3736
			}
3737
			check_equals("KAT CBC AES encrypt (2)",
3738
				buf, cipher, data_len);
3739
			memcpy(iv, ivref, 16);
3740
			for (v = 0; v < data_len; v += 16) {
3741
				vd->run(dc, iv, buf + v, 16);
3742
			}
3743
			check_equals("KAT CBC AES decrypt (2)",
3744
				buf, plain, data_len);
3745
		}
3746

3747
		/*
3748
		 * We want to check proper IV management for CBC:
3749
		 * encryption and decryption must properly copy the _last_
3750
		 * encrypted block as new IV, for all sizes.
3751
		 */
3752
		for (u = 1; u <= 35; u ++) {
3753
			br_hmac_drbg_context rng;
3754
			unsigned char x;
3755
			size_t key_len, data_len;
3756
			size_t v;
3757

3758
			br_hmac_drbg_init(&rng, &br_sha256_vtable,
3759
				"seed for AES/CBC", 16);
3760
			x = u;
3761
			br_hmac_drbg_update(&rng, &x, 1);
3762
			data_len = u << 4;
3763
			for (key_len = 16; key_len <= 32; key_len += 16) {
3764
				unsigned char key[32];
3765
				unsigned char iv[16], iv1[16], iv2[16];
3766
				unsigned char plain[35 * 16];
3767
				unsigned char tmp1[sizeof plain];
3768
				unsigned char tmp2[sizeof plain];
3769
				br_aes_gen_cbcenc_keys v_ec;
3770
				br_aes_gen_cbcdec_keys v_dc;
3771
				const br_block_cbcenc_class **ec;
3772
				const br_block_cbcdec_class **dc;
3773

3774
				br_hmac_drbg_generate(&rng, key, key_len);
3775
				br_hmac_drbg_generate(&rng, iv, sizeof iv);
3776
				br_hmac_drbg_generate(&rng, plain, data_len);
3777

3778
				ec = &v_ec.vtable;
3779
				ve->init(ec, key, key_len);
3780
				memcpy(iv1, iv, sizeof iv);
3781
				memcpy(tmp1, plain, data_len);
3782
				ve->run(ec, iv1, tmp1, data_len);
3783
				check_equals("IV CBC AES (1)",
3784
					tmp1 + data_len - 16, iv1, 16);
3785
				memcpy(iv2, iv, sizeof iv);
3786
				memcpy(tmp2, plain, data_len);
3787
				for (v = 0; v < data_len; v += 16) {
3788
					ve->run(ec, iv2, tmp2 + v, 16);
3789
				}
3790
				check_equals("IV CBC AES (2)",
3791
					tmp2 + data_len - 16, iv2, 16);
3792
				check_equals("IV CBC AES (3)",
3793
					tmp1, tmp2, data_len);
3794

3795
				dc = &v_dc.vtable;
3796
				vd->init(dc, key, key_len);
3797
				memcpy(iv1, iv, sizeof iv);
3798
				vd->run(dc, iv1, tmp1, data_len);
3799
				check_equals("IV CBC AES (4)", iv1, iv2, 16);
3800
				check_equals("IV CBC AES (5)",
3801
					tmp1, plain, data_len);
3802
				memcpy(iv2, iv, sizeof iv);
3803
				for (v = 0; v < data_len; v += 16) {
3804
					vd->run(dc, iv2, tmp2 + v, 16);
3805
				}
3806
				check_equals("IV CBC AES (6)", iv1, iv2, 16);
3807
				check_equals("IV CBC AES (7)",
3808
					tmp2, plain, data_len);
3809
			}
3810
		}
3811
	}
3812

3813
	if (vc != NULL) {
3814
		if (vc->block_size != 16 || vc->log_block_size != 4) {
3815
			fprintf(stderr, "%s failed: wrong block size\n", name);
3816
			exit(EXIT_FAILURE);
3817
		}
3818
		for (u = 0; KAT_AES_CTR[u]; u += 4) {
3819
			unsigned char key[32];
3820
			unsigned char iv[12];
3821
			unsigned char plain[200];
3822
			unsigned char cipher[200];
3823
			unsigned char buf[200];
3824
			size_t key_len, data_len, v;
3825
			uint32_t c;
3826
			br_aes_gen_ctr_keys v_xc;
3827
			const br_block_ctr_class **xc;
3828

3829
			xc = &v_xc.vtable;
3830
			key_len = hextobin(key, KAT_AES_CTR[u]);
3831
			hextobin(iv, KAT_AES_CTR[u + 1]);
3832
			data_len = hextobin(plain, KAT_AES_CTR[u + 2]);
3833
			hextobin(cipher, KAT_AES_CTR[u + 3]);
3834
			vc->init(xc, key, key_len);
3835
			memcpy(buf, plain, data_len);
3836
			vc->run(xc, iv, 1, buf, data_len);
3837
			check_equals("KAT CTR AES (1)", buf, cipher, data_len);
3838
			vc->run(xc, iv, 1, buf, data_len);
3839
			check_equals("KAT CTR AES (2)", buf, plain, data_len);
3840

3841
			memcpy(buf, plain, data_len);
3842
			c = 1;
3843
			for (v = 0; v < data_len; v += 32) {
3844
				size_t clen;
3845

3846
				clen = data_len - v;
3847
				if (clen > 32) {
3848
					clen = 32;
3849
				}
3850
				c = vc->run(xc, iv, c, buf + v, clen);
3851
			}
3852
			check_equals("KAT CTR AES (3)", buf, cipher, data_len);
3853

3854
			memcpy(buf, plain, data_len);
3855
			c = 1;
3856
			for (v = 0; v < data_len; v += 16) {
3857
				size_t clen;
3858

3859
				clen = data_len - v;
3860
				if (clen > 16) {
3861
					clen = 16;
3862
				}
3863
				c = vc->run(xc, iv, c, buf + v, clen);
3864
			}
3865
			check_equals("KAT CTR AES (4)", buf, cipher, data_len);
3866
		}
3867
	}
3868

3869
	if (with_MC) {
3870
		monte_carlo_AES_encrypt(
3871
			ve,
3872
			"139a35422f1d61de3c91787fe0507afd",
3873
			"b9145a768b7dc489a096b546f43b231f",
3874
			"fb2649694783b551eacd9d5db6126d47");
3875
		monte_carlo_AES_decrypt(
3876
			vd,
3877
			"0c60e7bf20ada9baa9e1ddf0d1540726",
3878
			"b08a29b11a500ea3aca42c36675b9785",
3879
			"d1d2bfdc58ffcad2341b095bce55221e");
3880

3881
		monte_carlo_AES_encrypt(
3882
			ve,
3883
			"b9a63e09e1dfc42e93a90d9bad739e5967aef672eedd5da9",
3884
			"85a1f7a58167b389cddc8a9ff175ee26",
3885
			"5d1196da8f184975e240949a25104554");
3886
		monte_carlo_AES_decrypt(
3887
			vd,
3888
			"4b97585701c03fbebdfa8555024f589f1482c58a00fdd9fd",
3889
			"d0bd0e02ded155e4516be83f42d347a4",
3890
			"b63ef1b79507a62eba3dafcec54a6328");
3891

3892
		monte_carlo_AES_encrypt(
3893
			ve,
3894
			"f9e8389f5b80712e3886cc1fa2d28a3b8c9cd88a2d4a54c6aa86ce0fef944be0",
3895
			"b379777f9050e2a818f2940cbbd9aba4",
3896
			"c5d2cb3d5b7ff0e23e308967ee074825");
3897
		monte_carlo_AES_decrypt(
3898
			vd,
3899
			"2b09ba39b834062b9e93f48373b8dd018dedf1e5ba1b8af831ebbacbc92a2643",
3900
			"89649bd0115f30bd878567610223a59d",
3901
			"e3d3868f578caf34e36445bf14cefc68");
3902
	}
3903

3904
	printf("done.\n");
3905
	fflush(stdout);
3906
}
3907

3908
static void
3909
test_AES_big(void)
3910
{
3911
	test_AES_generic("AES_big",
3912
		&br_aes_big_cbcenc_vtable,
3913
		&br_aes_big_cbcdec_vtable,
3914
		&br_aes_big_ctr_vtable,
3915
		1, 1);
3916
}
3917

3918
static void
3919
test_AES_small(void)
3920
{
3921
	test_AES_generic("AES_small",
3922
		&br_aes_small_cbcenc_vtable,
3923
		&br_aes_small_cbcdec_vtable,
3924
		&br_aes_small_ctr_vtable,
3925
		1, 1);
3926
}
3927

3928
static void
3929
test_AES_ct(void)
3930
{
3931
	test_AES_generic("AES_ct",
3932
		&br_aes_ct_cbcenc_vtable,
3933
		&br_aes_ct_cbcdec_vtable,
3934
		&br_aes_ct_ctr_vtable,
3935
		1, 1);
3936
}
3937

3938
static void
3939
test_AES_ct64(void)
3940
{
3941
	test_AES_generic("AES_ct64",
3942
		&br_aes_ct64_cbcenc_vtable,
3943
		&br_aes_ct64_cbcdec_vtable,
3944
		&br_aes_ct64_ctr_vtable,
3945
		1, 1);
3946
}
3947

3948
static void
3949
test_AES_x86ni(void)
3950
{
3951
	const br_block_cbcenc_class *x_cbcenc;
3952
	const br_block_cbcdec_class *x_cbcdec;
3953
	const br_block_ctr_class *x_ctr;
3954
	int hcbcenc, hcbcdec, hctr;
3955

3956
	x_cbcenc = br_aes_x86ni_cbcenc_get_vtable();
3957
	x_cbcdec = br_aes_x86ni_cbcdec_get_vtable();
3958
	x_ctr = br_aes_x86ni_ctr_get_vtable();
3959
	hcbcenc = (x_cbcenc != NULL);
3960
	hcbcdec = (x_cbcdec != NULL);
3961
	hctr = (x_ctr != NULL);
3962
	if (hcbcenc != hctr || hcbcdec != hctr) {
3963
		fprintf(stderr, "AES_x86ni availability mismatch (%d/%d/%d)\n",
3964
			hcbcenc, hcbcdec, hctr);
3965
		exit(EXIT_FAILURE);
3966
	}
3967
	if (hctr) {
3968
		test_AES_generic("AES_x86ni",
3969
			x_cbcenc, x_cbcdec, x_ctr, 1, 1);
3970
	} else {
3971
		printf("Test AES_x86ni: UNAVAILABLE\n");
3972
	}
3973
}
3974

3975
static void
3976
test_AES_pwr8(void)
3977
{
3978
	const br_block_cbcenc_class *x_cbcenc;
3979
	const br_block_cbcdec_class *x_cbcdec;
3980
	const br_block_ctr_class *x_ctr;
3981
	int hcbcenc, hcbcdec, hctr;
3982

3983
	x_cbcenc = br_aes_pwr8_cbcenc_get_vtable();
3984
	x_cbcdec = br_aes_pwr8_cbcdec_get_vtable();
3985
	x_ctr = br_aes_pwr8_ctr_get_vtable();
3986
	hcbcenc = (x_cbcenc != NULL);
3987
	hcbcdec = (x_cbcdec != NULL);
3988
	hctr = (x_ctr != NULL);
3989
	if (hcbcenc != hctr || hcbcdec != hctr) {
3990
		fprintf(stderr, "AES_pwr8 availability mismatch (%d/%d/%d)\n",
3991
			hcbcenc, hcbcdec, hctr);
3992
		exit(EXIT_FAILURE);
3993
	}
3994
	if (hctr) {
3995
		test_AES_generic("AES_pwr8",
3996
			x_cbcenc, x_cbcdec, x_ctr, 1, 1);
3997
	} else {
3998
		printf("Test AES_pwr8: UNAVAILABLE\n");
3999
	}
4000
}
4001

4002
/*
4003
 * Custom CTR + CBC-MAC AES implementation. Can also do CTR-only, and
4004
 * CBC-MAC-only. The 'aes_big' implementation (CTR) is used. This is
4005
 * meant for comparisons.
4006
 *
4007
 * If 'ctr' is NULL then no encryption/decryption is done; otherwise,
4008
 * CTR encryption/decryption is performed (full-block counter) and the
4009
 * 'ctr' array is updated with the new counter value.
4010
 *
4011
 * If 'cbcmac' is NULL then no CBC-MAC is done; otherwise, CBC-MAC is
4012
 * applied on the encrypted data, with 'cbcmac' as IV and destination
4013
 * buffer for the output. If 'ctr' is not NULL and 'encrypt' is non-zero,
4014
 * then CBC-MAC is computed over the result of CTR processing; otherwise,
4015
 * CBC-MAC is computed over the input data itself.
4016
 */
4017
static void
4018
do_aes_ctrcbc(const void *key, size_t key_len, int encrypt,
4019
	void *ctr, void *cbcmac, unsigned char *data, size_t len)
4020
{
4021
	br_aes_big_ctr_keys bc;
4022
	int i;
4023

4024
	br_aes_big_ctr_init(&bc, key, key_len);
4025
	for (i = 0; i < 2; i ++) {
4026
		/*
4027
		 * CBC-MAC is computed on the encrypted data, so in
4028
		 * first pass if decrypting, second pass if encrypting.
4029
		 */
4030
		if (cbcmac != NULL
4031
			&& ((encrypt && i == 1) || (!encrypt && i == 0)))
4032
		{
4033
			unsigned char zz[16];
4034
			size_t u;
4035

4036
			memcpy(zz, cbcmac, sizeof zz);
4037
			for (u = 0; u < len; u += 16) {
4038
				unsigned char tmp[16];
4039
				size_t v;
4040

4041
				for (v = 0; v < 16; v ++) {
4042
					tmp[v] = zz[v] ^ data[u + v];
4043
				}
4044
				memset(zz, 0, sizeof zz);
4045
				br_aes_big_ctr_run(&bc,
4046
					tmp, br_dec32be(tmp + 12), zz, 16);
4047
			}
4048
			memcpy(cbcmac, zz, sizeof zz);
4049
		}
4050

4051
		/*
4052
		 * CTR encryption/decryption is done only in the first pass.
4053
		 * We process data block per block, because the CTR-only
4054
		 * class uses a 32-bit counter, while the CTR+CBC-MAC
4055
		 * class uses a 128-bit counter.
4056
		 */
4057
		if (ctr != NULL && i == 0) {
4058
			unsigned char zz[16];
4059
			size_t u;
4060

4061
			memcpy(zz, ctr, sizeof zz);
4062
			for (u = 0; u < len; u += 16) {
4063
				int i;
4064

4065
				br_aes_big_ctr_run(&bc,
4066
					zz, br_dec32be(zz + 12), data + u, 16);
4067
				for (i = 15; i >= 0; i --) {
4068
					zz[i] = (zz[i] + 1) & 0xFF;
4069
					if (zz[i] != 0) {
4070
						break;
4071
					}
4072
				}
4073
			}
4074
			memcpy(ctr, zz, sizeof zz);
4075
		}
4076
	}
4077
}
4078

4079
static void
4080
test_AES_CTRCBC_inner(const char *name, const br_block_ctrcbc_class *vt)
4081
{
4082
	br_hmac_drbg_context rng;
4083
	size_t key_len;
4084

4085
	printf("Test AES CTR/CBC-MAC %s: ", name);
4086
	fflush(stdout);
4087

4088
	br_hmac_drbg_init(&rng, &br_sha256_vtable, name, strlen(name));
4089
	for (key_len = 16; key_len <= 32; key_len += 8) {
4090
		br_aes_gen_ctrcbc_keys bc;
4091
		unsigned char key[32];
4092
		size_t data_len;
4093

4094
		br_hmac_drbg_generate(&rng, key, key_len);
4095
		vt->init(&bc.vtable, key, key_len);
4096
		for (data_len = 0; data_len <= 512; data_len += 16) {
4097
			unsigned char plain[512];
4098
			unsigned char data1[sizeof plain];
4099
			unsigned char data2[sizeof plain];
4100
			unsigned char ctr[16], cbcmac[16];
4101
			unsigned char ctr1[16], cbcmac1[16];
4102
			unsigned char ctr2[16], cbcmac2[16];
4103
			int i;
4104

4105
			br_hmac_drbg_generate(&rng, plain, data_len);
4106

4107
			for (i = 0; i <= 16; i ++) {
4108
				if (i == 0) {
4109
					br_hmac_drbg_generate(&rng, ctr, 16);
4110
				} else {
4111
					memset(ctr, 0, i - 1);
4112
					memset(ctr + i - 1, 0xFF, 17 - i);
4113
				}
4114
				br_hmac_drbg_generate(&rng, cbcmac, 16);
4115

4116
				memcpy(data1, plain, data_len);
4117
				memcpy(ctr1, ctr, 16);
4118
				vt->ctr(&bc.vtable, ctr1, data1, data_len);
4119
				memcpy(data2, plain, data_len);
4120
				memcpy(ctr2, ctr, 16);
4121
				do_aes_ctrcbc(key, key_len, 1,
4122
					ctr2, NULL, data2, data_len);
4123
				check_equals("CTR-only data",
4124
					data1, data2, data_len);
4125
				check_equals("CTR-only counter",
4126
					ctr1, ctr2, 16);
4127

4128
				memcpy(data1, plain, data_len);
4129
				memcpy(cbcmac1, cbcmac, 16);
4130
				vt->mac(&bc.vtable, cbcmac1, data1, data_len);
4131
				memcpy(data2, plain, data_len);
4132
				memcpy(cbcmac2, cbcmac, 16);
4133
				do_aes_ctrcbc(key, key_len, 1,
4134
					NULL, cbcmac2, data2, data_len);
4135
				check_equals("CBC-MAC-only",
4136
					cbcmac1, cbcmac2, 16);
4137

4138
				memcpy(data1, plain, data_len);
4139
				memcpy(ctr1, ctr, 16);
4140
				memcpy(cbcmac1, cbcmac, 16);
4141
				vt->encrypt(&bc.vtable,
4142
					ctr1, cbcmac1, data1, data_len);
4143
				memcpy(data2, plain, data_len);
4144
				memcpy(ctr2, ctr, 16);
4145
				memcpy(cbcmac2, cbcmac, 16);
4146
				do_aes_ctrcbc(key, key_len, 1,
4147
					ctr2, cbcmac2, data2, data_len);
4148
				check_equals("encrypt: combined data",
4149
					data1, data2, data_len);
4150
				check_equals("encrypt: combined counter",
4151
					ctr1, ctr2, 16);
4152
				check_equals("encrypt: combined CBC-MAC",
4153
					cbcmac1, cbcmac2, 16);
4154

4155
				memcpy(ctr1, ctr, 16);
4156
				memcpy(cbcmac1, cbcmac, 16);
4157
				vt->decrypt(&bc.vtable,
4158
					ctr1, cbcmac1, data1, data_len);
4159
				memcpy(ctr2, ctr, 16);
4160
				memcpy(cbcmac2, cbcmac, 16);
4161
				do_aes_ctrcbc(key, key_len, 0,
4162
					ctr2, cbcmac2, data2, data_len);
4163
				check_equals("decrypt: combined data",
4164
					data1, data2, data_len);
4165
				check_equals("decrypt: combined counter",
4166
					ctr1, ctr2, 16);
4167
				check_equals("decrypt: combined CBC-MAC",
4168
					cbcmac1, cbcmac2, 16);
4169
			}
4170

4171
			printf(".");
4172
			fflush(stdout);
4173
		}
4174

4175
		printf(" ");
4176
		fflush(stdout);
4177
	}
4178

4179
	printf("done.\n");
4180
	fflush(stdout);
4181
}
4182

4183
static void
4184
test_AES_CTRCBC_big(void)
4185
{
4186
	test_AES_CTRCBC_inner("big", &br_aes_big_ctrcbc_vtable);
4187
}
4188

4189
static void
4190
test_AES_CTRCBC_small(void)
4191
{
4192
	test_AES_CTRCBC_inner("small", &br_aes_small_ctrcbc_vtable);
4193
}
4194

4195
static void
4196
test_AES_CTRCBC_ct(void)
4197
{
4198
	test_AES_CTRCBC_inner("ct", &br_aes_ct_ctrcbc_vtable);
4199
}
4200

4201
static void
4202
test_AES_CTRCBC_ct64(void)
4203
{
4204
	test_AES_CTRCBC_inner("ct64", &br_aes_ct64_ctrcbc_vtable);
4205
}
4206

4207
static void
4208
test_AES_CTRCBC_x86ni(void)
4209
{
4210
	const br_block_ctrcbc_class *vt;
4211

4212
	vt = br_aes_x86ni_ctrcbc_get_vtable();
4213
	if (vt != NULL) {
4214
		test_AES_CTRCBC_inner("x86ni", vt);
4215
	} else {
4216
		printf("Test AES CTR/CBC-MAC x86ni: UNAVAILABLE\n");
4217
	}
4218
}
4219

4220
static void
4221
test_AES_CTRCBC_pwr8(void)
4222
{
4223
	const br_block_ctrcbc_class *vt;
4224

4225
	vt = br_aes_pwr8_ctrcbc_get_vtable();
4226
	if (vt != NULL) {
4227
		test_AES_CTRCBC_inner("pwr8", vt);
4228
	} else {
4229
		printf("Test AES CTR/CBC-MAC pwr8: UNAVAILABLE\n");
4230
	}
4231
}
4232

4233
/*
4234
 * DES known-answer tests. Order: plaintext, key, ciphertext.
4235
 * (mostly from NIST SP 800-20).
4236
 */
4237
static const char *const KAT_DES[] = {
4238
	"10316E028C8F3B4A", "0000000000000000", "82DCBAFBDEAB6602",
4239
	"8000000000000000", "0000000000000000", "95A8D72813DAA94D",
4240
	"4000000000000000", "0000000000000000", "0EEC1487DD8C26D5",
4241
	"2000000000000000", "0000000000000000", "7AD16FFB79C45926",
4242
	"1000000000000000", "0000000000000000", "D3746294CA6A6CF3",
4243
	"0800000000000000", "0000000000000000", "809F5F873C1FD761",
4244
	"0400000000000000", "0000000000000000", "C02FAFFEC989D1FC",
4245
	"0200000000000000", "0000000000000000", "4615AA1D33E72F10",
4246
	"0100000000000000", "0000000000000000", "8CA64DE9C1B123A7",
4247
	"0080000000000000", "0000000000000000", "2055123350C00858",
4248
	"0040000000000000", "0000000000000000", "DF3B99D6577397C8",
4249
	"0020000000000000", "0000000000000000", "31FE17369B5288C9",
4250
	"0010000000000000", "0000000000000000", "DFDD3CC64DAE1642",
4251
	"0008000000000000", "0000000000000000", "178C83CE2B399D94",
4252
	"0004000000000000", "0000000000000000", "50F636324A9B7F80",
4253
	"0002000000000000", "0000000000000000", "A8468EE3BC18F06D",
4254
	"0001000000000000", "0000000000000000", "8CA64DE9C1B123A7",
4255
	"0000800000000000", "0000000000000000", "A2DC9E92FD3CDE92",
4256
	"0000400000000000", "0000000000000000", "CAC09F797D031287",
4257
	"0000200000000000", "0000000000000000", "90BA680B22AEB525",
4258
	"0000100000000000", "0000000000000000", "CE7A24F350E280B6",
4259
	"0000080000000000", "0000000000000000", "882BFF0AA01A0B87",
4260
	"0000040000000000", "0000000000000000", "25610288924511C2",
4261
	"0000020000000000", "0000000000000000", "C71516C29C75D170",
4262
	"0000010000000000", "0000000000000000", "8CA64DE9C1B123A7",
4263
	"0000008000000000", "0000000000000000", "5199C29A52C9F059",
4264
	"0000004000000000", "0000000000000000", "C22F0A294A71F29F",
4265
	"0000002000000000", "0000000000000000", "EE371483714C02EA",
4266
	"0000001000000000", "0000000000000000", "A81FBD448F9E522F",
4267
	"0000000800000000", "0000000000000000", "4F644C92E192DFED",
4268
	"0000000400000000", "0000000000000000", "1AFA9A66A6DF92AE",
4269
	"0000000200000000", "0000000000000000", "B3C1CC715CB879D8",
4270
	"0000000100000000", "0000000000000000", "8CA64DE9C1B123A7",
4271
	"0000000080000000", "0000000000000000", "19D032E64AB0BD8B",
4272
	"0000000040000000", "0000000000000000", "3CFAA7A7DC8720DC",
4273
	"0000000020000000", "0000000000000000", "B7265F7F447AC6F3",
4274
	"0000000010000000", "0000000000000000", "9DB73B3C0D163F54",
4275
	"0000000008000000", "0000000000000000", "8181B65BABF4A975",
4276
	"0000000004000000", "0000000000000000", "93C9B64042EAA240",
4277
	"0000000002000000", "0000000000000000", "5570530829705592",
4278
	"0000000001000000", "0000000000000000", "8CA64DE9C1B123A7",
4279
	"0000000000800000", "0000000000000000", "8638809E878787A0",
4280
	"0000000000400000", "0000000000000000", "41B9A79AF79AC208",
4281
	"0000000000200000", "0000000000000000", "7A9BE42F2009A892",
4282
	"0000000000100000", "0000000000000000", "29038D56BA6D2745",
4283
	"0000000000080000", "0000000000000000", "5495C6ABF1E5DF51",
4284
	"0000000000040000", "0000000000000000", "AE13DBD561488933",
4285
	"0000000000020000", "0000000000000000", "024D1FFA8904E389",
4286
	"0000000000010000", "0000000000000000", "8CA64DE9C1B123A7",
4287
	"0000000000008000", "0000000000000000", "D1399712F99BF02E",
4288
	"0000000000004000", "0000000000000000", "14C1D7C1CFFEC79E",
4289
	"0000000000002000", "0000000000000000", "1DE5279DAE3BED6F",
4290
	"0000000000001000", "0000000000000000", "E941A33F85501303",
4291
	"0000000000000800", "0000000000000000", "DA99DBBC9A03F379",
4292
	"0000000000000400", "0000000000000000", "B7FC92F91D8E92E9",
4293
	"0000000000000200", "0000000000000000", "AE8E5CAA3CA04E85",
4294
	"0000000000000100", "0000000000000000", "8CA64DE9C1B123A7",
4295
	"0000000000000080", "0000000000000000", "9CC62DF43B6EED74",
4296
	"0000000000000040", "0000000000000000", "D863DBB5C59A91A0",
4297
	"0000000000000020", "0000000000000000", "A1AB2190545B91D7",
4298
	"0000000000000010", "0000000000000000", "0875041E64C570F7",
4299
	"0000000000000008", "0000000000000000", "5A594528BEBEF1CC",
4300
	"0000000000000004", "0000000000000000", "FCDB3291DE21F0C0",
4301
	"0000000000000002", "0000000000000000", "869EFD7F9F265A09",
4302
	"0000000000000001", "0000000000000000", "8CA64DE9C1B123A7",
4303
	"0000000000000000", "8000000000000000", "95F8A5E5DD31D900",
4304
	"0000000000000000", "4000000000000000", "DD7F121CA5015619",
4305
	"0000000000000000", "2000000000000000", "2E8653104F3834EA",
4306
	"0000000000000000", "1000000000000000", "4BD388FF6CD81D4F",
4307
	"0000000000000000", "0800000000000000", "20B9E767B2FB1456",
4308
	"0000000000000000", "0400000000000000", "55579380D77138EF",
4309
	"0000000000000000", "0200000000000000", "6CC5DEFAAF04512F",
4310
	"0000000000000000", "0100000000000000", "0D9F279BA5D87260",
4311
	"0000000000000000", "0080000000000000", "D9031B0271BD5A0A",
4312
	"0000000000000000", "0040000000000000", "424250B37C3DD951",
4313
	"0000000000000000", "0020000000000000", "B8061B7ECD9A21E5",
4314
	"0000000000000000", "0010000000000000", "F15D0F286B65BD28",
4315
	"0000000000000000", "0008000000000000", "ADD0CC8D6E5DEBA1",
4316
	"0000000000000000", "0004000000000000", "E6D5F82752AD63D1",
4317
	"0000000000000000", "0002000000000000", "ECBFE3BD3F591A5E",
4318
	"0000000000000000", "0001000000000000", "F356834379D165CD",
4319
	"0000000000000000", "0000800000000000", "2B9F982F20037FA9",
4320
	"0000000000000000", "0000400000000000", "889DE068A16F0BE6",
4321
	"0000000000000000", "0000200000000000", "E19E275D846A1298",
4322
	"0000000000000000", "0000100000000000", "329A8ED523D71AEC",
4323
	"0000000000000000", "0000080000000000", "E7FCE22557D23C97",
4324
	"0000000000000000", "0000040000000000", "12A9F5817FF2D65D",
4325
	"0000000000000000", "0000020000000000", "A484C3AD38DC9C19",
4326
	"0000000000000000", "0000010000000000", "FBE00A8A1EF8AD72",
4327
	"0000000000000000", "0000008000000000", "750D079407521363",
4328
	"0000000000000000", "0000004000000000", "64FEED9C724C2FAF",
4329
	"0000000000000000", "0000002000000000", "F02B263B328E2B60",
4330
	"0000000000000000", "0000001000000000", "9D64555A9A10B852",
4331
	"0000000000000000", "0000000800000000", "D106FF0BED5255D7",
4332
	"0000000000000000", "0000000400000000", "E1652C6B138C64A5",
4333
	"0000000000000000", "0000000200000000", "E428581186EC8F46",
4334
	"0000000000000000", "0000000100000000", "AEB5F5EDE22D1A36",
4335
	"0000000000000000", "0000000080000000", "E943D7568AEC0C5C",
4336
	"0000000000000000", "0000000040000000", "DF98C8276F54B04B",
4337
	"0000000000000000", "0000000020000000", "B160E4680F6C696F",
4338
	"0000000000000000", "0000000010000000", "FA0752B07D9C4AB8",
4339
	"0000000000000000", "0000000008000000", "CA3A2B036DBC8502",
4340
	"0000000000000000", "0000000004000000", "5E0905517BB59BCF",
4341
	"0000000000000000", "0000000002000000", "814EEB3B91D90726",
4342
	"0000000000000000", "0000000001000000", "4D49DB1532919C9F",
4343
	"0000000000000000", "0000000000800000", "25EB5FC3F8CF0621",
4344
	"0000000000000000", "0000000000400000", "AB6A20C0620D1C6F",
4345
	"0000000000000000", "0000000000200000", "79E90DBC98F92CCA",
4346
	"0000000000000000", "0000000000100000", "866ECEDD8072BB0E",
4347
	"0000000000000000", "0000000000080000", "8B54536F2F3E64A8",
4348
	"0000000000000000", "0000000000040000", "EA51D3975595B86B",
4349
	"0000000000000000", "0000000000020000", "CAFFC6AC4542DE31",
4350
	"0000000000000000", "0000000000010000", "8DD45A2DDF90796C",
4351
	"0000000000000000", "0000000000008000", "1029D55E880EC2D0",
4352
	"0000000000000000", "0000000000004000", "5D86CB23639DBEA9",
4353
	"0000000000000000", "0000000000002000", "1D1CA853AE7C0C5F",
4354
	"0000000000000000", "0000000000001000", "CE332329248F3228",
4355
	"0000000000000000", "0000000000000800", "8405D1ABE24FB942",
4356
	"0000000000000000", "0000000000000400", "E643D78090CA4207",
4357
	"0000000000000000", "0000000000000200", "48221B9937748A23",
4358
	"0000000000000000", "0000000000000100", "DD7C0BBD61FAFD54",
4359
	"0000000000000000", "0000000000000080", "2FBC291A570DB5C4",
4360
	"0000000000000000", "0000000000000040", "E07C30D7E4E26E12",
4361
	"0000000000000000", "0000000000000020", "0953E2258E8E90A1",
4362
	"0000000000000000", "0000000000000010", "5B711BC4CEEBF2EE",
4363
	"0000000000000000", "0000000000000008", "CC083F1E6D9E85F6",
4364
	"0000000000000000", "0000000000000004", "D2FD8867D50D2DFE",
4365
	"0000000000000000", "0000000000000002", "06E7EA22CE92708F",
4366
	"0000000000000000", "0000000000000001", "166B40B44ABA4BD6",
4367
	"0000000000000000", "0000000000000000", "8CA64DE9C1B123A7",
4368
	"0101010101010101", "0101010101010101", "994D4DC157B96C52",
4369
	"0202020202020202", "0202020202020202", "E127C2B61D98E6E2",
4370
	"0303030303030303", "0303030303030303", "984C91D78A269CE3",
4371
	"0404040404040404", "0404040404040404", "1F4570BB77550683",
4372
	"0505050505050505", "0505050505050505", "3990ABF98D672B16",
4373
	"0606060606060606", "0606060606060606", "3F5150BBA081D585",
4374
	"0707070707070707", "0707070707070707", "C65242248C9CF6F2",
4375
	"0808080808080808", "0808080808080808", "10772D40FAD24257",
4376
	"0909090909090909", "0909090909090909", "F0139440647A6E7B",
4377
	"0A0A0A0A0A0A0A0A", "0A0A0A0A0A0A0A0A", "0A288603044D740C",
4378
	"0B0B0B0B0B0B0B0B", "0B0B0B0B0B0B0B0B", "6359916942F7438F",
4379
	"0C0C0C0C0C0C0C0C", "0C0C0C0C0C0C0C0C", "934316AE443CF08B",
4380
	"0D0D0D0D0D0D0D0D", "0D0D0D0D0D0D0D0D", "E3F56D7F1130A2B7",
4381
	"0E0E0E0E0E0E0E0E", "0E0E0E0E0E0E0E0E", "A2E4705087C6B6B4",
4382
	"0F0F0F0F0F0F0F0F", "0F0F0F0F0F0F0F0F", "D5D76E09A447E8C3",
4383
	"1010101010101010", "1010101010101010", "DD7515F2BFC17F85",
4384
	"1111111111111111", "1111111111111111", "F40379AB9E0EC533",
4385
	"1212121212121212", "1212121212121212", "96CD27784D1563E5",
4386
	"1313131313131313", "1313131313131313", "2911CF5E94D33FE1",
4387
	"1414141414141414", "1414141414141414", "377B7F7CA3E5BBB3",
4388
	"1515151515151515", "1515151515151515", "701AA63832905A92",
4389
	"1616161616161616", "1616161616161616", "2006E716C4252D6D",
4390
	"1717171717171717", "1717171717171717", "452C1197422469F8",
4391
	"1818181818181818", "1818181818181818", "C33FD1EB49CB64DA",
4392
	"1919191919191919", "1919191919191919", "7572278F364EB50D",
4393
	"1A1A1A1A1A1A1A1A", "1A1A1A1A1A1A1A1A", "69E51488403EF4C3",
4394
	"1B1B1B1B1B1B1B1B", "1B1B1B1B1B1B1B1B", "FF847E0ADF192825",
4395
	"1C1C1C1C1C1C1C1C", "1C1C1C1C1C1C1C1C", "521B7FB3B41BB791",
4396
	"1D1D1D1D1D1D1D1D", "1D1D1D1D1D1D1D1D", "26059A6A0F3F6B35",
4397
	"1E1E1E1E1E1E1E1E", "1E1E1E1E1E1E1E1E", "F24A8D2231C77538",
4398
	"1F1F1F1F1F1F1F1F", "1F1F1F1F1F1F1F1F", "4FD96EC0D3304EF6",
4399
	"2020202020202020", "2020202020202020", "18A9D580A900B699",
4400
	"2121212121212121", "2121212121212121", "88586E1D755B9B5A",
4401
	"2222222222222222", "2222222222222222", "0F8ADFFB11DC2784",
4402
	"2323232323232323", "2323232323232323", "2F30446C8312404A",
4403
	"2424242424242424", "2424242424242424", "0BA03D9E6C196511",
4404
	"2525252525252525", "2525252525252525", "3E55E997611E4B7D",
4405
	"2626262626262626", "2626262626262626", "B2522FB5F158F0DF",
4406
	"2727272727272727", "2727272727272727", "2109425935406AB8",
4407
	"2828282828282828", "2828282828282828", "11A16028F310FF16",
4408
	"2929292929292929", "2929292929292929", "73F0C45F379FE67F",
4409
	"2A2A2A2A2A2A2A2A", "2A2A2A2A2A2A2A2A", "DCAD4338F7523816",
4410
	"2B2B2B2B2B2B2B2B", "2B2B2B2B2B2B2B2B", "B81634C1CEAB298C",
4411
	"2C2C2C2C2C2C2C2C", "2C2C2C2C2C2C2C2C", "DD2CCB29B6C4C349",
4412
	"2D2D2D2D2D2D2D2D", "2D2D2D2D2D2D2D2D", "7D07A77A2ABD50A7",
4413
	"2E2E2E2E2E2E2E2E", "2E2E2E2E2E2E2E2E", "30C1B0C1FD91D371",
4414
	"2F2F2F2F2F2F2F2F", "2F2F2F2F2F2F2F2F", "C4427B31AC61973B",
4415
	"3030303030303030", "3030303030303030", "F47BB46273B15EB5",
4416
	"3131313131313131", "3131313131313131", "655EA628CF62585F",
4417
	"3232323232323232", "3232323232323232", "AC978C247863388F",
4418
	"3333333333333333", "3333333333333333", "0432ED386F2DE328",
4419
	"3434343434343434", "3434343434343434", "D254014CB986B3C2",
4420
	"3535353535353535", "3535353535353535", "B256E34BEDB49801",
4421
	"3636363636363636", "3636363636363636", "37F8759EB77E7BFC",
4422
	"3737373737373737", "3737373737373737", "5013CA4F62C9CEA0",
4423
	"3838383838383838", "3838383838383838", "8940F7B3EACA5939",
4424
	"3939393939393939", "3939393939393939", "E22B19A55086774B",
4425
	"3A3A3A3A3A3A3A3A", "3A3A3A3A3A3A3A3A", "B04A2AAC925ABB0B",
4426
	"3B3B3B3B3B3B3B3B", "3B3B3B3B3B3B3B3B", "8D250D58361597FC",
4427
	"3C3C3C3C3C3C3C3C", "3C3C3C3C3C3C3C3C", "51F0114FB6A6CD37",
4428
	"3D3D3D3D3D3D3D3D", "3D3D3D3D3D3D3D3D", "9D0BB4DB830ECB73",
4429
	"3E3E3E3E3E3E3E3E", "3E3E3E3E3E3E3E3E", "E96089D6368F3E1A",
4430
	"3F3F3F3F3F3F3F3F", "3F3F3F3F3F3F3F3F", "5C4CA877A4E1E92D",
4431
	"4040404040404040", "4040404040404040", "6D55DDBC8DEA95FF",
4432
	"4141414141414141", "4141414141414141", "19DF84AC95551003",
4433
	"4242424242424242", "4242424242424242", "724E7332696D08A7",
4434
	"4343434343434343", "4343434343434343", "B91810B8CDC58FE2",
4435
	"4444444444444444", "4444444444444444", "06E23526EDCCD0C4",
4436
	"4545454545454545", "4545454545454545", "EF52491D5468D441",
4437
	"4646464646464646", "4646464646464646", "48019C59E39B90C5",
4438
	"4747474747474747", "4747474747474747", "0544083FB902D8C0",
4439
	"4848484848484848", "4848484848484848", "63B15CADA668CE12",
4440
	"4949494949494949", "4949494949494949", "EACC0C1264171071",
4441
	"4A4A4A4A4A4A4A4A", "4A4A4A4A4A4A4A4A", "9D2B8C0AC605F274",
4442
	"4B4B4B4B4B4B4B4B", "4B4B4B4B4B4B4B4B", "C90F2F4C98A8FB2A",
4443
	"4C4C4C4C4C4C4C4C", "4C4C4C4C4C4C4C4C", "03481B4828FD1D04",
4444
	"4D4D4D4D4D4D4D4D", "4D4D4D4D4D4D4D4D", "C78FC45A1DCEA2E2",
4445
	"4E4E4E4E4E4E4E4E", "4E4E4E4E4E4E4E4E", "DB96D88C3460D801",
4446
	"4F4F4F4F4F4F4F4F", "4F4F4F4F4F4F4F4F", "6C69E720F5105518",
4447
	"5050505050505050", "5050505050505050", "0D262E418BC893F3",
4448
	"5151515151515151", "5151515151515151", "6AD84FD7848A0A5C",
4449
	"5252525252525252", "5252525252525252", "C365CB35B34B6114",
4450
	"5353535353535353", "5353535353535353", "1155392E877F42A9",
4451
	"5454545454545454", "5454545454545454", "531BE5F9405DA715",
4452
	"5555555555555555", "5555555555555555", "3BCDD41E6165A5E8",
4453
	"5656565656565656", "5656565656565656", "2B1FF5610A19270C",
4454
	"5757575757575757", "5757575757575757", "D90772CF3F047CFD",
4455
	"5858585858585858", "5858585858585858", "1BEA27FFB72457B7",
4456
	"5959595959595959", "5959595959595959", "85C3E0C429F34C27",
4457
	"5A5A5A5A5A5A5A5A", "5A5A5A5A5A5A5A5A", "F9038021E37C7618",
4458
	"5B5B5B5B5B5B5B5B", "5B5B5B5B5B5B5B5B", "35BC6FF838DBA32F",
4459
	"5C5C5C5C5C5C5C5C", "5C5C5C5C5C5C5C5C", "4927ACC8CE45ECE7",
4460
	"5D5D5D5D5D5D5D5D", "5D5D5D5D5D5D5D5D", "E812EE6E3572985C",
4461
	"5E5E5E5E5E5E5E5E", "5E5E5E5E5E5E5E5E", "9BB93A89627BF65F",
4462
	"5F5F5F5F5F5F5F5F", "5F5F5F5F5F5F5F5F", "EF12476884CB74CA",
4463
	"6060606060606060", "6060606060606060", "1BF17E00C09E7CBF",
4464
	"6161616161616161", "6161616161616161", "29932350C098DB5D",
4465
	"6262626262626262", "6262626262626262", "B476E6499842AC54",
4466
	"6363636363636363", "6363636363636363", "5C662C29C1E96056",
4467
	"6464646464646464", "6464646464646464", "3AF1703D76442789",
4468
	"6565656565656565", "6565656565656565", "86405D9B425A8C8C",
4469
	"6666666666666666", "6666666666666666", "EBBF4810619C2C55",
4470
	"6767676767676767", "6767676767676767", "F8D1CD7367B21B5D",
4471
	"6868686868686868", "6868686868686868", "9EE703142BF8D7E2",
4472
	"6969696969696969", "6969696969696969", "5FDFFFC3AAAB0CB3",
4473
	"6A6A6A6A6A6A6A6A", "6A6A6A6A6A6A6A6A", "26C940AB13574231",
4474
	"6B6B6B6B6B6B6B6B", "6B6B6B6B6B6B6B6B", "1E2DC77E36A84693",
4475
	"6C6C6C6C6C6C6C6C", "6C6C6C6C6C6C6C6C", "0F4FF4D9BC7E2244",
4476
	"6D6D6D6D6D6D6D6D", "6D6D6D6D6D6D6D6D", "A4C9A0D04D3280CD",
4477
	"6E6E6E6E6E6E6E6E", "6E6E6E6E6E6E6E6E", "9FAF2C96FE84919D",
4478
	"6F6F6F6F6F6F6F6F", "6F6F6F6F6F6F6F6F", "115DBC965E6096C8",
4479
	"7070707070707070", "7070707070707070", "AF531E9520994017",
4480
	"7171717171717171", "7171717171717171", "B971ADE70E5C89EE",
4481
	"7272727272727272", "7272727272727272", "415D81C86AF9C376",
4482
	"7373737373737373", "7373737373737373", "8DFB864FDB3C6811",
4483
	"7474747474747474", "7474747474747474", "10B1C170E3398F91",
4484
	"7575757575757575", "7575757575757575", "CFEF7A1C0218DB1E",
4485
	"7676767676767676", "7676767676767676", "DBAC30A2A40B1B9C",
4486
	"7777777777777777", "7777777777777777", "89D3BF37052162E9",
4487
	"7878787878787878", "7878787878787878", "80D9230BDAEB67DC",
4488
	"7979797979797979", "7979797979797979", "3440911019AD68D7",
4489
	"7A7A7A7A7A7A7A7A", "7A7A7A7A7A7A7A7A", "9626FE57596E199E",
4490
	"7B7B7B7B7B7B7B7B", "7B7B7B7B7B7B7B7B", "DEA0B796624BB5BA",
4491
	"7C7C7C7C7C7C7C7C", "7C7C7C7C7C7C7C7C", "E9E40542BDDB3E9D",
4492
	"7D7D7D7D7D7D7D7D", "7D7D7D7D7D7D7D7D", "8AD99914B354B911",
4493
	"7E7E7E7E7E7E7E7E", "7E7E7E7E7E7E7E7E", "6F85B98DD12CB13B",
4494
	"7F7F7F7F7F7F7F7F", "7F7F7F7F7F7F7F7F", "10130DA3C3A23924",
4495
	"8080808080808080", "8080808080808080", "EFECF25C3C5DC6DB",
4496
	"8181818181818181", "8181818181818181", "907A46722ED34EC4",
4497
	"8282828282828282", "8282828282828282", "752666EB4CAB46EE",
4498
	"8383838383838383", "8383838383838383", "161BFABD4224C162",
4499
	"8484848484848484", "8484848484848484", "215F48699DB44A45",
4500
	"8585858585858585", "8585858585858585", "69D901A8A691E661",
4501
	"8686868686868686", "8686868686868686", "CBBF6EEFE6529728",
4502
	"8787878787878787", "8787878787878787", "7F26DCF425149823",
4503
	"8888888888888888", "8888888888888888", "762C40C8FADE9D16",
4504
	"8989898989898989", "8989898989898989", "2453CF5D5BF4E463",
4505
	"8A8A8A8A8A8A8A8A", "8A8A8A8A8A8A8A8A", "301085E3FDE724E1",
4506
	"8B8B8B8B8B8B8B8B", "8B8B8B8B8B8B8B8B", "EF4E3E8F1CC6706E",
4507
	"8C8C8C8C8C8C8C8C", "8C8C8C8C8C8C8C8C", "720479B024C397EE",
4508
	"8D8D8D8D8D8D8D8D", "8D8D8D8D8D8D8D8D", "BEA27E3795063C89",
4509
	"8E8E8E8E8E8E8E8E", "8E8E8E8E8E8E8E8E", "468E5218F1A37611",
4510
	"8F8F8F8F8F8F8F8F", "8F8F8F8F8F8F8F8F", "50ACE16ADF66BFE8",
4511
	"9090909090909090", "9090909090909090", "EEA24369A19F6937",
4512
	"9191919191919191", "9191919191919191", "6050D369017B6E62",
4513
	"9292929292929292", "9292929292929292", "5B365F2FB2CD7F32",
4514
	"9393939393939393", "9393939393939393", "F0B00B264381DDBB",
4515
	"9494949494949494", "9494949494949494", "E1D23881C957B96C",
4516
	"9595959595959595", "9595959595959595", "D936BF54ECA8BDCE",
4517
	"9696969696969696", "9696969696969696", "A020003C5554F34C",
4518
	"9797979797979797", "9797979797979797", "6118FCEBD407281D",
4519
	"9898989898989898", "9898989898989898", "072E328C984DE4A2",
4520
	"9999999999999999", "9999999999999999", "1440B7EF9E63D3AA",
4521
	"9A9A9A9A9A9A9A9A", "9A9A9A9A9A9A9A9A", "79BFA264BDA57373",
4522
	"9B9B9B9B9B9B9B9B", "9B9B9B9B9B9B9B9B", "C50E8FC289BBD876",
4523
	"9C9C9C9C9C9C9C9C", "9C9C9C9C9C9C9C9C", "A399D3D63E169FA9",
4524
	"9D9D9D9D9D9D9D9D", "9D9D9D9D9D9D9D9D", "4B8919B667BD53AB",
4525
	"9E9E9E9E9E9E9E9E", "9E9E9E9E9E9E9E9E", "D66CDCAF3F6724A2",
4526
	"9F9F9F9F9F9F9F9F", "9F9F9F9F9F9F9F9F", "E40E81FF3F618340",
4527
	"A0A0A0A0A0A0A0A0", "A0A0A0A0A0A0A0A0", "10EDB8977B348B35",
4528
	"A1A1A1A1A1A1A1A1", "A1A1A1A1A1A1A1A1", "6446C5769D8409A0",
4529
	"A2A2A2A2A2A2A2A2", "A2A2A2A2A2A2A2A2", "17ED1191CA8D67A3",
4530
	"A3A3A3A3A3A3A3A3", "A3A3A3A3A3A3A3A3", "B6D8533731BA1318",
4531
	"A4A4A4A4A4A4A4A4", "A4A4A4A4A4A4A4A4", "CA439007C7245CD0",
4532
	"A5A5A5A5A5A5A5A5", "A5A5A5A5A5A5A5A5", "06FC7FDE1C8389E7",
4533
	"A6A6A6A6A6A6A6A6", "A6A6A6A6A6A6A6A6", "7A3C1F3BD60CB3D8",
4534
	"A7A7A7A7A7A7A7A7", "A7A7A7A7A7A7A7A7", "E415D80048DBA848",
4535
	"A8A8A8A8A8A8A8A8", "A8A8A8A8A8A8A8A8", "26F88D30C0FB8302",
4536
	"A9A9A9A9A9A9A9A9", "A9A9A9A9A9A9A9A9", "D4E00A9EF5E6D8F3",
4537
	"AAAAAAAAAAAAAAAA", "AAAAAAAAAAAAAAAA", "C4322BE19E9A5A17",
4538
	"ABABABABABABABAB", "ABABABABABABABAB", "ACE41A06BFA258EA",
4539
	"ACACACACACACACAC", "ACACACACACACACAC", "EEAAC6D17880BD56",
4540
	"ADADADADADADADAD", "ADADADADADADADAD", "3C9A34CA4CB49EEB",
4541
	"AEAEAEAEAEAEAEAE", "AEAEAEAEAEAEAEAE", "9527B0287B75F5A3",
4542
	"AFAFAFAFAFAFAFAF", "AFAFAFAFAFAFAFAF", "F2D9D1BE74376C0C",
4543
	"B0B0B0B0B0B0B0B0", "B0B0B0B0B0B0B0B0", "939618DF0AEFAAE7",
4544
	"B1B1B1B1B1B1B1B1", "B1B1B1B1B1B1B1B1", "24692773CB9F27FE",
4545
	"B2B2B2B2B2B2B2B2", "B2B2B2B2B2B2B2B2", "38703BA5E2315D1D",
4546
	"B3B3B3B3B3B3B3B3", "B3B3B3B3B3B3B3B3", "FCB7E4B7D702E2FB",
4547
	"B4B4B4B4B4B4B4B4", "B4B4B4B4B4B4B4B4", "36F0D0B3675704D5",
4548
	"B5B5B5B5B5B5B5B5", "B5B5B5B5B5B5B5B5", "62D473F539FA0D8B",
4549
	"B6B6B6B6B6B6B6B6", "B6B6B6B6B6B6B6B6", "1533F3ED9BE8EF8E",
4550
	"B7B7B7B7B7B7B7B7", "B7B7B7B7B7B7B7B7", "9C4EA352599731ED",
4551
	"B8B8B8B8B8B8B8B8", "B8B8B8B8B8B8B8B8", "FABBF7C046FD273F",
4552
	"B9B9B9B9B9B9B9B9", "B9B9B9B9B9B9B9B9", "B7FE63A61C646F3A",
4553
	"BABABABABABABABA", "BABABABABABABABA", "10ADB6E2AB972BBE",
4554
	"BBBBBBBBBBBBBBBB", "BBBBBBBBBBBBBBBB", "F91DCAD912332F3B",
4555
	"BCBCBCBCBCBCBCBC", "BCBCBCBCBCBCBCBC", "46E7EF47323A701D",
4556
	"BDBDBDBDBDBDBDBD", "BDBDBDBDBDBDBDBD", "8DB18CCD9692F758",
4557
	"BEBEBEBEBEBEBEBE", "BEBEBEBEBEBEBEBE", "E6207B536AAAEFFC",
4558
	"BFBFBFBFBFBFBFBF", "BFBFBFBFBFBFBFBF", "92AA224372156A00",
4559
	"C0C0C0C0C0C0C0C0", "C0C0C0C0C0C0C0C0", "A3B357885B1E16D2",
4560
	"C1C1C1C1C1C1C1C1", "C1C1C1C1C1C1C1C1", "169F7629C970C1E5",
4561
	"C2C2C2C2C2C2C2C2", "C2C2C2C2C2C2C2C2", "62F44B247CF1348C",
4562
	"C3C3C3C3C3C3C3C3", "C3C3C3C3C3C3C3C3", "AE0FEEB0495932C8",
4563
	"C4C4C4C4C4C4C4C4", "C4C4C4C4C4C4C4C4", "72DAF2A7C9EA6803",
4564
	"C5C5C5C5C5C5C5C5", "C5C5C5C5C5C5C5C5", "4FB5D5536DA544F4",
4565
	"C6C6C6C6C6C6C6C6", "C6C6C6C6C6C6C6C6", "1DD4E65AAF7988B4",
4566
	"C7C7C7C7C7C7C7C7", "C7C7C7C7C7C7C7C7", "76BF084C1535A6C6",
4567
	"C8C8C8C8C8C8C8C8", "C8C8C8C8C8C8C8C8", "AFEC35B09D36315F",
4568
	"C9C9C9C9C9C9C9C9", "C9C9C9C9C9C9C9C9", "C8078A6148818403",
4569
	"CACACACACACACACA", "CACACACACACACACA", "4DA91CB4124B67FE",
4570
	"CBCBCBCBCBCBCBCB", "CBCBCBCBCBCBCBCB", "2DABFEB346794C3D",
4571
	"CCCCCCCCCCCCCCCC", "CCCCCCCCCCCCCCCC", "FBCD12C790D21CD7",
4572
	"CDCDCDCDCDCDCDCD", "CDCDCDCDCDCDCDCD", "536873DB879CC770",
4573
	"CECECECECECECECE", "CECECECECECECECE", "9AA159D7309DA7A0",
4574
	"CFCFCFCFCFCFCFCF", "CFCFCFCFCFCFCFCF", "0B844B9D8C4EA14A",
4575
	"D0D0D0D0D0D0D0D0", "D0D0D0D0D0D0D0D0", "3BBD84CE539E68C4",
4576
	"D1D1D1D1D1D1D1D1", "D1D1D1D1D1D1D1D1", "CF3E4F3E026E2C8E",
4577
	"D2D2D2D2D2D2D2D2", "D2D2D2D2D2D2D2D2", "82F85885D542AF58",
4578
	"D3D3D3D3D3D3D3D3", "D3D3D3D3D3D3D3D3", "22D334D6493B3CB6",
4579
	"D4D4D4D4D4D4D4D4", "D4D4D4D4D4D4D4D4", "47E9CB3E3154D673",
4580
	"D5D5D5D5D5D5D5D5", "D5D5D5D5D5D5D5D5", "2352BCC708ADC7E9",
4581
	"D6D6D6D6D6D6D6D6", "D6D6D6D6D6D6D6D6", "8C0F3BA0C8601980",
4582
	"D7D7D7D7D7D7D7D7", "D7D7D7D7D7D7D7D7", "EE5E9FD70CEF00E9",
4583
	"D8D8D8D8D8D8D8D8", "D8D8D8D8D8D8D8D8", "DEF6BDA6CABF9547",
4584
	"D9D9D9D9D9D9D9D9", "D9D9D9D9D9D9D9D9", "4DADD04A0EA70F20",
4585
	"DADADADADADADADA", "DADADADADADADADA", "C1AA16689EE1B482",
4586
	"DBDBDBDBDBDBDBDB", "DBDBDBDBDBDBDBDB", "F45FC26193E69AEE",
4587
	"DCDCDCDCDCDCDCDC", "DCDCDCDCDCDCDCDC", "D0CFBB937CEDBFB5",
4588
	"DDDDDDDDDDDDDDDD", "DDDDDDDDDDDDDDDD", "F0752004EE23D87B",
4589
	"DEDEDEDEDEDEDEDE", "DEDEDEDEDEDEDEDE", "77A791E28AA464A5",
4590
	"DFDFDFDFDFDFDFDF", "DFDFDFDFDFDFDFDF", "E7562A7F56FF4966",
4591
	"E0E0E0E0E0E0E0E0", "E0E0E0E0E0E0E0E0", "B026913F2CCFB109",
4592
	"E1E1E1E1E1E1E1E1", "E1E1E1E1E1E1E1E1", "0DB572DDCE388AC7",
4593
	"E2E2E2E2E2E2E2E2", "E2E2E2E2E2E2E2E2", "D9FA6595F0C094CA",
4594
	"E3E3E3E3E3E3E3E3", "E3E3E3E3E3E3E3E3", "ADE4804C4BE4486E",
4595
	"E4E4E4E4E4E4E4E4", "E4E4E4E4E4E4E4E4", "007B81F520E6D7DA",
4596
	"E5E5E5E5E5E5E5E5", "E5E5E5E5E5E5E5E5", "961AEB77BFC10B3C",
4597
	"E6E6E6E6E6E6E6E6", "E6E6E6E6E6E6E6E6", "8A8DD870C9B14AF2",
4598
	"E7E7E7E7E7E7E7E7", "E7E7E7E7E7E7E7E7", "3CC02E14B6349B25",
4599
	"E8E8E8E8E8E8E8E8", "E8E8E8E8E8E8E8E8", "BAD3EE68BDDB9607",
4600
	"E9E9E9E9E9E9E9E9", "E9E9E9E9E9E9E9E9", "DFF918E93BDAD292",
4601
	"EAEAEAEAEAEAEAEA", "EAEAEAEAEAEAEAEA", "8FE559C7CD6FA56D",
4602
	"EBEBEBEBEBEBEBEB", "EBEBEBEBEBEBEBEB", "C88480835C1A444C",
4603
	"ECECECECECECECEC", "ECECECECECECECEC", "D6EE30A16B2CC01E",
4604
	"EDEDEDEDEDEDEDED", "EDEDEDEDEDEDEDED", "6932D887B2EA9C1A",
4605
	"EEEEEEEEEEEEEEEE", "EEEEEEEEEEEEEEEE", "0BFC865461F13ACC",
4606
	"EFEFEFEFEFEFEFEF", "EFEFEFEFEFEFEFEF", "228AEA0D403E807A",
4607
	"F0F0F0F0F0F0F0F0", "F0F0F0F0F0F0F0F0", "2A2891F65BB8173C",
4608
	"F1F1F1F1F1F1F1F1", "F1F1F1F1F1F1F1F1", "5D1B8FAF7839494B",
4609
	"F2F2F2F2F2F2F2F2", "F2F2F2F2F2F2F2F2", "1C0A9280EECF5D48",
4610
	"F3F3F3F3F3F3F3F3", "F3F3F3F3F3F3F3F3", "6CBCE951BBC30F74",
4611
	"F4F4F4F4F4F4F4F4", "F4F4F4F4F4F4F4F4", "9CA66E96BD08BC70",
4612
	"F5F5F5F5F5F5F5F5", "F5F5F5F5F5F5F5F5", "F5D779FCFBB28BF3",
4613
	"F6F6F6F6F6F6F6F6", "F6F6F6F6F6F6F6F6", "0FEC6BBF9B859184",
4614
	"F7F7F7F7F7F7F7F7", "F7F7F7F7F7F7F7F7", "EF88D2BF052DBDA8",
4615
	"F8F8F8F8F8F8F8F8", "F8F8F8F8F8F8F8F8", "39ADBDDB7363090D",
4616
	"F9F9F9F9F9F9F9F9", "F9F9F9F9F9F9F9F9", "C0AEAF445F7E2A7A",
4617
	"FAFAFAFAFAFAFAFA", "FAFAFAFAFAFAFAFA", "C66F54067298D4E9",
4618
	"FBFBFBFBFBFBFBFB", "FBFBFBFBFBFBFBFB", "E0BA8F4488AAF97C",
4619
	"FCFCFCFCFCFCFCFC", "FCFCFCFCFCFCFCFC", "67B36E2875D9631C",
4620
	"FDFDFDFDFDFDFDFD", "FDFDFDFDFDFDFDFD", "1ED83D49E267191D",
4621
	"FEFEFEFEFEFEFEFE", "FEFEFEFEFEFEFEFE", "66B2B23EA84693AD",
4622
	"FFFFFFFFFFFFFFFF", "FFFFFFFFFFFFFFFF", "7359B2163E4EDC58",
4623
	"0001020304050607", "0011223344556677", "3EF0A891CF8ED990",
4624
	"2BD6459F82C5B300", "EA024714AD5C4D84", "126EFE8ED312190A",
4625

4626
	NULL
4627
};
4628

4629
/*
4630
 * Known-answer tests for DES/3DES in CBC mode. Order: key, IV,
4631
 * plaintext, ciphertext.
4632
 */
4633
static const char *const KAT_DES_CBC[] = {
4634
	/*
4635
	 * From NIST validation suite (tdesmmt.zip).
4636
	 */
4637
	"34a41a8c293176c1b30732ecfe38ae8a34a41a8c293176c1",
4638
	"f55b4855228bd0b4",
4639
	"7dd880d2a9ab411c",
4640
	"c91892948b6cadb4",
4641

4642
	"70a88fa1dfb9942fa77f40157ffef2ad70a88fa1dfb9942f",
4643
	"ece08ce2fdc6ce80",
4644
	"bc225304d5a3a5c9918fc5006cbc40cc",
4645
	"27f67dc87af7ddb4b68f63fa7c2d454a",
4646

4647
	"e091790be55be0bc0780153861a84adce091790be55be0bc",
4648
	"fd7d430f86fbbffe",
4649
	"03c7fffd7f36499c703dedc9df4de4a92dd4382e576d6ae9",
4650
	"053aeba85dd3a23bfbe8440a432f9578f312be60fb9f0035",
4651

4652
	"857feacd16157c58e5347a70e56e578a857feacd16157c58",
4653
	"002dcb6d46ef0969",
4654
	"1f13701c7f0d7385307507a18e89843ebd295bd5e239ef109347a6898c6d3fd5",
4655
	"a0e4edde34f05bd8397ce279e49853e9387ba04be562f5fa19c3289c3f5a3391",
4656

4657
	"a173545b265875ba852331fbb95b49a8a173545b265875ba",
4658
	"ab385756391d364c",
4659
	"d08894c565608d9ae51dda63b85b3b33b1703bb5e4f1abcbb8794e743da5d6f3bf630f2e9b6d5b54",
4660
	"370b47acf89ac6bdbb13c9a7336787dc41e1ad8beead32281d0609fb54968404bdf2894892590658",
4661

4662
	"26376bcb2f23df1083cd684fe00ed3c726376bcb2f23df10",
4663
	"33acfb0f3d240ea6",
4664
	"903a1911da1e6877f23c1985a9b61786ef438e0ce1240885035ad60fc916b18e5d71a1fb9c5d1eff61db75c0076f6efb",
4665
	"7a4f7510f6ec0b93e2495d21a8355684d303a770ebda2e0e51ff33d72b20cb73e58e2e3de2ef6b2e12c504c0f181ba63",
4666

4667
	"3e1f98135d027cec752f67765408a7913e1f98135d027cec",
4668
	"11f5f2304b28f68b",
4669
	"7c022f5af24f7925d323d4d0e20a2ce49272c5e764b22c806f4b6ddc406d864fe5bd1c3f45556d3eb30c8676c2f8b54a5a32423a0bd95a07",
4670
	"2bb4b131fa4ae0b4f0378a2cdb68556af6eee837613016d7ea936f3931f25f8b3ae351d5e9d00be665676e2400408b5db9892d95421e7f1a",
4671

4672
	"13b9d549cd136ec7bf9e9810ef2cdcbf13b9d549cd136ec7",
4673
	"a82c1b1057badcc8",
4674
	"1fff1563bc1645b55cb23ea34a0049dfc06607150614b621dedcb07f20433402a2d869c95ac4a070c7a3da838c928a385f899c5d21ecb58f4e5cbdad98d39b8c",
4675
	"75f804d4a2c542a31703e23df26cc38861a0729090e6eae5672c1db8c0b09fba9b125bbca7d6c7d330b3859e6725c6d26de21c4e3af7f5ea94df3cde2349ce37",
4676

4677
	"20320dfdad579bb57c6e4acd769dbadf20320dfdad579bb5",
4678
	"879201b5857ccdea",
4679
	"0431283cc8bb4dc7750a9d5c68578486932091632a12d0a79f2c54e3d122130881fff727050f317a40fcd1a8d13793458b99fc98254ba6a233e3d95b55cf5a3faff78809999ea4bf",
4680
	"85d17840eb2af5fc727027336bfd71a2b31bd14a1d9eb64f8a08bfc4f56eaa9ca7654a5ae698287869cc27324813730de4f1384e0b8cfbc472ff5470e3c5e4bd8ceb23dc2d91988c",
4681

4682
	"23abb073a2df34cb3d1fdce6b092582c23abb073a2df34cb",
4683
	"7d7fbf19e8562d32",
4684
	"31e718fd95e6d7ca4f94763191add2674ab07c909d88c486916c16d60a048a0cf8cdb631cebec791362cd0c202eb61e166b65c1f65d0047c8aec57d3d84b9e17032442dce148e1191b06a12c284cc41e",
4685
	"c9a3f75ab6a7cd08a7fd53ca540aafe731d257ee1c379fadcc4cc1a06e7c12bddbeb7562c436d1da849ed072629e82a97b56d9becc25ff4f16f21c5f2a01911604f0b5c49df96cb641faee662ca8aa68",
4686

4687
	"b5cb1504802326c73df186e3e352a20de643b0d63ee30e37",
4688
	"43f791134c5647ba",
4689
	"dcc153cef81d6f24",
4690
	"92538bd8af18d3ba",
4691

4692
	"a49d7564199e97cb529d2c9d97bf2f98d35edf57ba1f7358",
4693
	"c2e999cb6249023c",
4694
	"c689aee38a301bb316da75db36f110b5",
4695
	"e9afaba5ec75ea1bbe65506655bb4ecb",
4696

4697
	"1a5d4c0825072a15a8ad9dfdaeda8c048adffb85bc4fced0",
4698
	"7fcfa736f7548b6f",
4699
	"983c3edacd939406010e1bc6ff9e12320ac5008117fa8f84",
4700
	"d84fa24f38cf451ca2c9adc960120bd8ff9871584fe31cee",
4701

4702
	"d98aadc76d4a3716158c32866efbb9ce834af2297379a49d",
4703
	"3c5220327c502b44",
4704
	"6174079dda53ca723ebf00a66837f8d5ce648c08acaa5ee45ffe62210ef79d3e",
4705
	"f5bd4d600bed77bec78409e3530ebda1d815506ed53103015b87e371ae000958",
4706

4707
	"ef6d3e54266d978ffb0b8ce6689d803e2cd34cc802fd0252",
4708
	"38bae5bce06d0ad9",
4709
	"c4f228b537223cd01c0debb5d9d4e12ba71656618d119b2f8f0af29d23efa3a9e43c4c458a1b79a0",
4710
	"9e3289fb18379f55aa4e45a7e0e6df160b33b75f8627ad0954f8fdcb78cee55a4664caeda1000fe5",
4711

4712
	"625bc19b19df83abfb2f5bec9d4f2062017525a75bc26e70",
4713
	"bd0cff364ff69a91",
4714
	"8152d2ab876c3c8201403a5a406d3feaf27319dbea6ad01e24f4d18203704b86de70da6bbb6d638e5aba3ff576b79b28",
4715
	"706fe7a973fac40e25b2b4499ce527078944c70e976d017b6af86a3a7a6b52943a72ba18a58000d2b61fdc3bfef2bc4a",
4716

4717
	"b6383176046e6880a1023bf45768b5bf5119022fe054bfe5",
4718
	"ec13ca541c43401e",
4719
	"cd5a886e9af011346c4dba36a424f96a78a1ddf28aaa4188bf65451f4efaffc7179a6dd237c0ae35d9b672314e5cb032612597f7e462c6f3",
4720
	"b030f976f46277ee211c4a324d5c87555d1084513a1223d3b84416b52bbc28f4b77f3a9d8d0d91dc37d3dbe8af8be98f74674b02f9a38527",
4721

4722
	"3d8cf273d343b9aedccddacb91ad86206737adc86b4a49a7",
4723
	"bb3a9a0c71c62ef0",
4724
	"1fde3991c32ce220b5b6666a9234f2fd7bd24b921829fd9cdc6eb4218be9eac9faa9c2351777349128086b6d58776bc86ff2f76ee1b3b2850a318462b8983fa1",
4725
	"422ce705a46bb52ad928dab6c863166d617c6fc24003633120d91918314bbf464cea7345c3c35f2042f2d6929735d74d7728f22fea618a0b9cf5b1281acb13fb",
4726

4727
	"fbceb5cb646b925be0b92f7f6b493d5e5b16e9159732732a",
4728
	"2e17b3c7025ae86b",
4729
	"4c309bc8e1e464fdd2a2b8978645d668d455f7526bd8d7b6716a722f6a900b815c4a73cc30e788065c1dfca7bf5958a6cc5440a5ebe7f8691c20278cde95db764ff8ce8994ece89c",
4730
	"c02129bdf4bbbd75e71605a00b12c80db6b4e05308e916615011f09147ed915dd1bc67f27f9e027e4e13df36b55464a31c11b4d1fe3d855d89df492e1a7201b995c1ba16a8dbabee",
4731

4732
	"9b162a0df8ad9b61c88676e3d586434570b902f12a2046e0",
4733
	"ebd6fefe029ad54b",
4734
	"f4c1c918e77355c8156f0fd778da52bff121ae5f2f44eaf4d2754946d0e10d1f18ce3a0176e69c18b7d20b6e0d0bee5eb5edfe4bd60e4d92adcd86bce72e76f94ee5cbcaa8b01cfddcea2ade575e66ac",
4735
	"1ff3c8709f403a8eff291aedf50c010df5c5ff64a8b205f1fce68564798897a390db16ee0d053856b75898009731da290fcc119dad987277aacef694872e880c4bb41471063fae05c89f25e4bd0cad6a",
4736

4737
	NULL
4738
};
4739

4740
static void
4741
xor_buf(unsigned char *dst, const unsigned char *src, size_t len)
4742
{
4743
	while (len -- > 0) {
4744
		*dst ++ ^= *src ++;
4745
	}
4746
}
4747

4748
static void
4749
monte_carlo_DES_encrypt(const br_block_cbcenc_class *ve)
4750
{
4751
	unsigned char k1[8], k2[8], k3[8];
4752
	unsigned char buf[8];
4753
	unsigned char cipher[8];
4754
	int i, j;
4755
	br_des_gen_cbcenc_keys v_ec;
4756
	void *ec;
4757

4758
	ec = &v_ec;
4759
	hextobin(k1, "9ec2372c86379df4");
4760
	hextobin(k2, "ad7ac4464f73805d");
4761
	hextobin(k3, "20c4f87564527c91");
4762
	hextobin(buf, "b624d6bd41783ab1");
4763
	hextobin(cipher, "eafd97b190b167fe");
4764
	for (i = 0; i < 400; i ++) {
4765
		unsigned char key[24];
4766

4767
		memcpy(key, k1, 8);
4768
		memcpy(key + 8, k2, 8);
4769
		memcpy(key + 16, k3, 8);
4770
		ve->init(ec, key, sizeof key);
4771
		for (j = 0; j < 10000; j ++) {
4772
			unsigned char iv[8];
4773

4774
			memset(iv, 0, sizeof iv);
4775
			ve->run(ec, iv, buf, sizeof buf);
4776
			switch (j) {
4777
			case 9997: xor_buf(k3, buf, 8); break;
4778
			case 9998: xor_buf(k2, buf, 8); break;
4779
			case 9999: xor_buf(k1, buf, 8); break;
4780
			}
4781
		}
4782
		printf(".");
4783
		fflush(stdout);
4784
	}
4785
	printf(" ");
4786
	fflush(stdout);
4787
	check_equals("MC DES encrypt", buf, cipher, sizeof buf);
4788
}
4789

4790
static void
4791
monte_carlo_DES_decrypt(const br_block_cbcdec_class *vd)
4792
{
4793
	unsigned char k1[8], k2[8], k3[8];
4794
	unsigned char buf[8];
4795
	unsigned char plain[8];
4796
	int i, j;
4797
	br_des_gen_cbcdec_keys v_dc;
4798
	void *dc;
4799

4800
	dc = &v_dc;
4801
	hextobin(k1, "79b63486e0ce37e0");
4802
	hextobin(k2, "08e65231abae3710");
4803
	hextobin(k3, "1f5eb69e925ef185");
4804
	hextobin(buf, "2783aa729432fe96");
4805
	hextobin(plain, "44937ca532cdbf98");
4806
	for (i = 0; i < 400; i ++) {
4807
		unsigned char key[24];
4808

4809
		memcpy(key, k1, 8);
4810
		memcpy(key + 8, k2, 8);
4811
		memcpy(key + 16, k3, 8);
4812
		vd->init(dc, key, sizeof key);
4813
		for (j = 0; j < 10000; j ++) {
4814
			unsigned char iv[8];
4815

4816
			memset(iv, 0, sizeof iv);
4817
			vd->run(dc, iv, buf, sizeof buf);
4818
			switch (j) {
4819
			case 9997: xor_buf(k3, buf, 8); break;
4820
			case 9998: xor_buf(k2, buf, 8); break;
4821
			case 9999: xor_buf(k1, buf, 8); break;
4822
			}
4823
		}
4824
		printf(".");
4825
		fflush(stdout);
4826
	}
4827
	printf(" ");
4828
	fflush(stdout);
4829
	check_equals("MC DES decrypt", buf, plain, sizeof buf);
4830
}
4831

4832
static void
4833
test_DES_generic(char *name,
4834
	const br_block_cbcenc_class *ve,
4835
	const br_block_cbcdec_class *vd,
4836
	int with_MC, int with_CBC)
4837
{
4838
	size_t u;
4839

4840
	printf("Test %s: ", name);
4841
	fflush(stdout);
4842

4843
	if (ve->block_size != 8 || vd->block_size != 8) {
4844
		fprintf(stderr, "%s failed: wrong block size\n", name);
4845
		exit(EXIT_FAILURE);
4846
	}
4847

4848
	for (u = 0; KAT_DES[u]; u += 3) {
4849
		unsigned char key[24];
4850
		unsigned char plain[8];
4851
		unsigned char cipher[8];
4852
		unsigned char buf[8];
4853
		unsigned char iv[8];
4854
		size_t key_len;
4855
		br_des_gen_cbcenc_keys v_ec;
4856
		br_des_gen_cbcdec_keys v_dc;
4857
		const br_block_cbcenc_class **ec;
4858
		const br_block_cbcdec_class **dc;
4859

4860
		ec = &v_ec.vtable;
4861
		dc = &v_dc.vtable;
4862
		key_len = hextobin(key, KAT_DES[u]);
4863
		hextobin(plain, KAT_DES[u + 1]);
4864
		hextobin(cipher, KAT_DES[u + 2]);
4865
		ve->init(ec, key, key_len);
4866
		memcpy(buf, plain, sizeof plain);
4867
		memset(iv, 0, sizeof iv);
4868
		ve->run(ec, iv, buf, sizeof buf);
4869
		check_equals("KAT DES encrypt", buf, cipher, sizeof cipher);
4870
		vd->init(dc, key, key_len);
4871
		memset(iv, 0, sizeof iv);
4872
		vd->run(dc, iv, buf, sizeof buf);
4873
		check_equals("KAT DES decrypt", buf, plain, sizeof plain);
4874

4875
		if (key_len == 8) {
4876
			memcpy(key + 8, key, 8);
4877
			memcpy(key + 16, key, 8);
4878
			ve->init(ec, key, 24);
4879
			memcpy(buf, plain, sizeof plain);
4880
			memset(iv, 0, sizeof iv);
4881
			ve->run(ec, iv, buf, sizeof buf);
4882
			check_equals("KAT DES->3 encrypt",
4883
				buf, cipher, sizeof cipher);
4884
			vd->init(dc, key, 24);
4885
			memset(iv, 0, sizeof iv);
4886
			vd->run(dc, iv, buf, sizeof buf);
4887
			check_equals("KAT DES->3 decrypt",
4888
				buf, plain, sizeof plain);
4889
		}
4890
	}
4891

4892
	if (with_CBC) {
4893
		for (u = 0; KAT_DES_CBC[u]; u += 4) {
4894
			unsigned char key[24];
4895
			unsigned char ivref[8];
4896
			unsigned char plain[200];
4897
			unsigned char cipher[200];
4898
			unsigned char buf[200];
4899
			unsigned char iv[8];
4900
			size_t key_len, data_len, v;
4901
			br_des_gen_cbcenc_keys v_ec;
4902
			br_des_gen_cbcdec_keys v_dc;
4903
			const br_block_cbcenc_class **ec;
4904
			const br_block_cbcdec_class **dc;
4905

4906
			ec = &v_ec.vtable;
4907
			dc = &v_dc.vtable;
4908
			key_len = hextobin(key, KAT_DES_CBC[u]);
4909
			hextobin(ivref, KAT_DES_CBC[u + 1]);
4910
			data_len = hextobin(plain, KAT_DES_CBC[u + 2]);
4911
			hextobin(cipher, KAT_DES_CBC[u + 3]);
4912
			ve->init(ec, key, key_len);
4913

4914
			memcpy(buf, plain, data_len);
4915
			memcpy(iv, ivref, 8);
4916
			ve->run(ec, iv, buf, data_len);
4917
			check_equals("KAT CBC DES encrypt",
4918
				buf, cipher, data_len);
4919
			vd->init(dc, key, key_len);
4920
			memcpy(iv, ivref, 8);
4921
			vd->run(dc, iv, buf, data_len);
4922
			check_equals("KAT CBC DES decrypt",
4923
				buf, plain, data_len);
4924

4925
			memcpy(buf, plain, data_len);
4926
			memcpy(iv, ivref, 8);
4927
			for (v = 0; v < data_len; v += 8) {
4928
				ve->run(ec, iv, buf + v, 8);
4929
			}
4930
			check_equals("KAT CBC DES encrypt (2)",
4931
				buf, cipher, data_len);
4932
			memcpy(iv, ivref, 8);
4933
			for (v = 0; v < data_len; v += 8) {
4934
				vd->run(dc, iv, buf + v, 8);
4935
			}
4936
			check_equals("KAT CBC DES decrypt (2)",
4937
				buf, plain, data_len);
4938
		}
4939
	}
4940

4941
	if (with_MC) {
4942
		monte_carlo_DES_encrypt(ve);
4943
		monte_carlo_DES_decrypt(vd);
4944
	}
4945

4946
	printf("done.\n");
4947
	fflush(stdout);
4948
}
4949

4950
static void
4951
test_DES_tab(void)
4952
{
4953
	test_DES_generic("DES_tab",
4954
		&br_des_tab_cbcenc_vtable,
4955
		&br_des_tab_cbcdec_vtable,
4956
		1, 1);
4957
}
4958

4959
static void
4960
test_DES_ct(void)
4961
{
4962
	test_DES_generic("DES_ct",
4963
		&br_des_ct_cbcenc_vtable,
4964
		&br_des_ct_cbcdec_vtable,
4965
		1, 1);
4966
}
4967

4968
static const struct {
4969
	const char *skey;
4970
	const char *snonce;
4971
	uint32_t counter;
4972
	const char *splain;
4973
	const char *scipher;
4974
} KAT_CHACHA20[] = {
4975
	{
4976
		"0000000000000000000000000000000000000000000000000000000000000000",
4977
		"000000000000000000000000",
4978
		0,
4979
		"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
4980
		"76b8e0ada0f13d90405d6ae55386bd28bdd219b8a08ded1aa836efcc8b770dc7da41597c5157488d7724e03fb8d84a376a43b8f41518a11cc387b669b2ee6586"
4981
	},
4982
	{
4983
		"0000000000000000000000000000000000000000000000000000000000000001",
4984
		"000000000000000000000002",
4985
		1,
4986
		"416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207768696368206172652061646472657373656420746f",
4987
		"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"
4988
	},
4989
	{
4990
		"1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0",
4991
		"000000000000000000000002",
4992
		42,
4993
		"2754776173206272696c6c69672c20616e642074686520736c6974687920746f7665730a446964206779726520616e642067696d626c6520696e2074686520776162653a0a416c6c206d696d737920776572652074686520626f726f676f7665732c0a416e6420746865206d6f6d65207261746873206f757467726162652e",
4994
		"62e6347f95ed87a45ffae7426f27a1df5fb69110044c0d73118effa95b01e5cf166d3df2d721caf9b21e5fb14c616871fd84c54f9d65b283196c7fe4f60553ebf39c6402c42234e32a356b3e764312a61a5532055716ead6962568f87d3f3f7704c6a8d1bcd1bf4d50d6154b6da731b187b58dfd728afa36757a797ac188d1"
4995
	},
4996
	{ 0, 0, 0, 0, 0 }
4997
};
4998

4999
static void
5000
test_ChaCha20_generic(const char *name, br_chacha20_run cr)
5001
{
5002
	size_t u;
5003

5004
	printf("Test %s: ", name);
5005
	fflush(stdout);
5006
	if (cr == 0) {
5007
		printf("UNAVAILABLE\n");
5008
		return;
5009
	}
5010

5011
	for (u = 0; KAT_CHACHA20[u].skey; u ++) {
5012
		unsigned char key[32], nonce[12], plain[400], cipher[400];
5013
		uint32_t cc;
5014
		size_t v, len;
5015

5016
		hextobin(key, KAT_CHACHA20[u].skey);
5017
		hextobin(nonce, KAT_CHACHA20[u].snonce);
5018
		cc = KAT_CHACHA20[u].counter;
5019
		len = hextobin(plain, KAT_CHACHA20[u].splain);
5020
		hextobin(cipher, KAT_CHACHA20[u].scipher);
5021

5022
		for (v = 0; v < len; v ++) {
5023
			unsigned char tmp[400];
5024
			size_t w;
5025
			uint32_t cc2;
5026

5027
			memset(tmp, 0, sizeof tmp);
5028
			memcpy(tmp, plain, v);
5029
			if (cr(key, nonce, cc, tmp, v)
5030
				!= cc + (uint32_t)((v + 63) >> 6))
5031
			{
5032
				fprintf(stderr, "ChaCha20: wrong counter\n");
5033
				exit(EXIT_FAILURE);
5034
			}
5035
			if (memcmp(tmp, cipher, v) != 0) {
5036
				fprintf(stderr, "ChaCha20 KAT fail (1)\n");
5037
				exit(EXIT_FAILURE);
5038
			}
5039
			for (w = v; w < sizeof tmp; w ++) {
5040
				if (tmp[w] != 0) {
5041
					fprintf(stderr, "ChaCha20: overrun\n");
5042
					exit(EXIT_FAILURE);
5043
				}
5044
			}
5045
			for (w = 0, cc2 = cc; w < v; w += 64, cc2 ++) {
5046
				size_t x;
5047

5048
				x = v - w;
5049
				if (x > 64) {
5050
					x = 64;
5051
				}
5052
				if (cr(key, nonce, cc2, tmp + w, x)
5053
					!= (cc2 + 1))
5054
				{
5055
					fprintf(stderr, "ChaCha20:"
5056
						" wrong counter (2)\n");
5057
					exit(EXIT_FAILURE);
5058
				}
5059
			}
5060
			if (memcmp(tmp, plain, v) != 0) {
5061
				fprintf(stderr, "ChaCha20 KAT fail (2)\n");
5062
				exit(EXIT_FAILURE);
5063
			}
5064
		}
5065

5066
		printf(".");
5067
		fflush(stdout);
5068
	}
5069

5070
	printf(" done.\n");
5071
	fflush(stdout);
5072
}
5073

5074
static void
5075
test_ChaCha20_ct(void)
5076
{
5077
	test_ChaCha20_generic("ChaCha20_ct", &br_chacha20_ct_run);
5078
}
5079

5080
static void
5081
test_ChaCha20_sse2(void)
5082
{
5083
	test_ChaCha20_generic("ChaCha20_sse2", br_chacha20_sse2_get());
5084
}
5085

5086
static const struct {
5087
	const char *splain;
5088
	const char *saad;
5089
	const char *skey;
5090
	const char *snonce;
5091
	const char *scipher;
5092
	const char *stag;
5093
} KAT_POLY1305[] = {
5094
	{
5095
		"4c616469657320616e642047656e746c656d656e206f662074686520636c617373206f66202739393a204966204920636f756c64206f6666657220796f75206f6e6c79206f6e652074697020666f7220746865206675747572652c2073756e73637265656e20776f756c642062652069742e",
5096
		"50515253c0c1c2c3c4c5c6c7",
5097
		"808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f",
5098
		"070000004041424344454647",
5099
		"d31a8d34648e60db7b86afbc53ef7ec2a4aded51296e08fea9e2b5a736ee62d63dbea45e8ca9671282fafb69da92728b1a71de0a9e060b2905d6a5b67ecd3b3692ddbd7f2d778b8c9803aee328091b58fab324e4fad675945585808b4831d7bc3ff4def08e4b7a9de576d26586cec64b6116",
5100
		"1ae10b594f09e26a7e902ecbd0600691"
5101
	},
5102
	{ 0, 0, 0, 0, 0, 0 }
5103
};
5104

5105
static void
5106
test_Poly1305_inner(const char *name, br_poly1305_run ipoly,
5107
	br_poly1305_run iref)
5108
{
5109
	size_t u;
5110
	br_hmac_drbg_context rng;
5111

5112
	printf("Test %s: ", name);
5113
	fflush(stdout);
5114

5115
	for (u = 0; KAT_POLY1305[u].skey; u ++) {
5116
		unsigned char key[32], nonce[12], plain[400], cipher[400];
5117
		unsigned char aad[400], tag[16], data[400], tmp[16];
5118
		size_t len, aad_len;
5119

5120
		len = hextobin(plain, KAT_POLY1305[u].splain);
5121
		aad_len = hextobin(aad, KAT_POLY1305[u].saad);
5122
		hextobin(key, KAT_POLY1305[u].skey);
5123
		hextobin(nonce, KAT_POLY1305[u].snonce);
5124
		hextobin(cipher, KAT_POLY1305[u].scipher);
5125
		hextobin(tag, KAT_POLY1305[u].stag);
5126

5127
		memcpy(data, plain, len);
5128
		ipoly(key, nonce, data, len,
5129
			aad, aad_len, tmp, br_chacha20_ct_run, 1);
5130
		check_equals("ChaCha20+Poly1305 KAT (1)", data, cipher, len);
5131
		check_equals("ChaCha20+Poly1305 KAT (2)", tmp, tag, 16);
5132
		ipoly(key, nonce, data, len,
5133
			aad, aad_len, tmp, br_chacha20_ct_run, 0);
5134
		check_equals("ChaCha20+Poly1305 KAT (3)", data, plain, len);
5135
		check_equals("ChaCha20+Poly1305 KAT (4)", tmp, tag, 16);
5136

5137
		printf(".");
5138
		fflush(stdout);
5139
	}
5140

5141
	printf(" ");
5142
	fflush(stdout);
5143

5144
	/*
5145
	 * We compare the "ipoly" and "iref" implementations together on
5146
	 * a bunch of pseudo-random messages.
5147
	 */
5148
	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for Poly1305", 17);
5149
	for (u = 0; u < 100; u ++) {
5150
		unsigned char plain[100], aad[100], tmp[100];
5151
		unsigned char key[32], iv[12], tag1[16], tag2[16];
5152

5153
		br_hmac_drbg_generate(&rng, key, sizeof key);
5154
		br_hmac_drbg_generate(&rng, iv, sizeof iv);
5155
		br_hmac_drbg_generate(&rng, plain, u);
5156
		br_hmac_drbg_generate(&rng, aad, u);
5157
		memcpy(tmp, plain, u);
5158
		memset(tmp + u, 0xFF, (sizeof tmp) - u);
5159
		ipoly(key, iv, tmp, u, aad, u, tag1,
5160
			&br_chacha20_ct_run, 1);
5161
		memset(tmp + u, 0x00, (sizeof tmp) - u);
5162
		iref(key, iv, tmp, u, aad, u, tag2,
5163
			&br_chacha20_ct_run, 0);
5164
		if (memcmp(tmp, plain, u) != 0) {
5165
			fprintf(stderr, "cross enc/dec failed\n");
5166
			exit(EXIT_FAILURE);
5167
		}
5168
		if (memcmp(tag1, tag2, sizeof tag1) != 0) {
5169
			fprintf(stderr, "cross MAC failed\n");
5170
			exit(EXIT_FAILURE);
5171
		}
5172
		printf(".");
5173
		fflush(stdout);
5174
	}
5175

5176
	printf(" done.\n");
5177
	fflush(stdout);
5178
}
5179

5180
static void
5181
test_Poly1305_ctmul(void)
5182
{
5183
	test_Poly1305_inner("Poly1305_ctmul", &br_poly1305_ctmul_run,
5184
		&br_poly1305_i15_run);
5185
}
5186

5187
static void
5188
test_Poly1305_ctmul32(void)
5189
{
5190
	test_Poly1305_inner("Poly1305_ctmul32", &br_poly1305_ctmul32_run,
5191
		&br_poly1305_i15_run);
5192
}
5193

5194
static void
5195
test_Poly1305_i15(void)
5196
{
5197
	test_Poly1305_inner("Poly1305_i15", &br_poly1305_i15_run,
5198
		&br_poly1305_ctmul_run);
5199
}
5200

5201
static void
5202
test_Poly1305_ctmulq(void)
5203
{
5204
	br_poly1305_run bp;
5205

5206
	bp = br_poly1305_ctmulq_get();
5207
	if (bp == 0) {
5208
		printf("Test Poly1305_ctmulq: UNAVAILABLE\n");
5209
	} else {
5210
		test_Poly1305_inner("Poly1305_ctmulq", bp,
5211
			&br_poly1305_ctmul_run);
5212
	}
5213
}
5214

5215
/*
5216
 * A 1024-bit RSA key, generated with OpenSSL.
5217
 */
5218
static const unsigned char RSA_N[] = {
5219
	0xBF, 0xB4, 0xA6, 0x2E, 0x87, 0x3F, 0x9C, 0x8D,
5220
	0xA0, 0xC4, 0x2E, 0x7B, 0x59, 0x36, 0x0F, 0xB0,
5221
	0xFF, 0xE1, 0x25, 0x49, 0xE5, 0xE6, 0x36, 0xB0,
5222
	0x48, 0xC2, 0x08, 0x6B, 0x77, 0xA7, 0xC0, 0x51,
5223
	0x66, 0x35, 0x06, 0xA9, 0x59, 0xDF, 0x17, 0x7F,
5224
	0x15, 0xF6, 0xB4, 0xE5, 0x44, 0xEE, 0x72, 0x3C,
5225
	0x53, 0x11, 0x52, 0xC9, 0xC9, 0x61, 0x4F, 0x92,
5226
	0x33, 0x64, 0x70, 0x43, 0x07, 0xF1, 0x3F, 0x7F,
5227
	0x15, 0xAC, 0xF0, 0xC1, 0x54, 0x7D, 0x55, 0xC0,
5228
	0x29, 0xDC, 0x9E, 0xCC, 0xE4, 0x1D, 0x11, 0x72,
5229
	0x45, 0xF4, 0xD2, 0x70, 0xFC, 0x34, 0xB2, 0x1F,
5230
	0xF3, 0xAD, 0x6A, 0xF0, 0xE5, 0x56, 0x11, 0xF8,
5231
	0x0C, 0x3A, 0x8B, 0x04, 0x46, 0x7C, 0x77, 0xD9,
5232
	0x41, 0x1F, 0x40, 0xBE, 0x93, 0x80, 0x9D, 0x23,
5233
	0x75, 0x80, 0x12, 0x26, 0x5A, 0x72, 0x1C, 0xDD,
5234
	0x47, 0xB3, 0x2A, 0x33, 0xD8, 0x19, 0x61, 0xE3
5235
};
5236
static const unsigned char RSA_E[] = {
5237
	0x01, 0x00, 0x01
5238
};
5239
/* unused
5240
static const unsigned char RSA_D[] = {
5241
	0xAE, 0x56, 0x0B, 0x56, 0x7E, 0xDA, 0x83, 0x75,
5242
	0x6C, 0xC1, 0x5C, 0x00, 0x02, 0x96, 0x1E, 0x58,
5243
	0xF9, 0xA9, 0xF7, 0x2E, 0x27, 0xEB, 0x5E, 0xCA,
5244
	0x9B, 0xB0, 0x10, 0xD6, 0x22, 0x7F, 0xA4, 0x6E,
5245
	0xA2, 0x03, 0x10, 0xE6, 0xCB, 0x7B, 0x0D, 0x34,
5246
	0x1E, 0x76, 0x37, 0xF5, 0xD3, 0xE5, 0x00, 0x70,
5247
	0x09, 0x9E, 0xD4, 0x69, 0xFB, 0x40, 0x0A, 0x8B,
5248
	0xCB, 0x3E, 0xC8, 0xB4, 0xBC, 0xB1, 0x50, 0xEA,
5249
	0x9D, 0xD9, 0x89, 0x8A, 0x98, 0x40, 0x79, 0xD1,
5250
	0x07, 0x66, 0xA7, 0x90, 0x63, 0x82, 0xB1, 0xE0,
5251
	0x24, 0xD0, 0x89, 0x6A, 0xEC, 0xC5, 0xF3, 0x21,
5252
	0x7D, 0xB8, 0xA5, 0x45, 0x3A, 0x3B, 0x34, 0x42,
5253
	0xC2, 0x82, 0x3C, 0x8D, 0xFA, 0x5D, 0xA0, 0xA8,
5254
	0x24, 0xC8, 0x40, 0x22, 0x19, 0xCB, 0xB5, 0x85,
5255
	0x67, 0x69, 0x60, 0xE4, 0xD0, 0x7E, 0xA3, 0x3B,
5256
	0xF7, 0x70, 0x50, 0xC9, 0x5C, 0x97, 0x29, 0x49
5257
};
5258
*/
5259
static const unsigned char RSA_P[] = {
5260
	0xF2, 0xE7, 0x6F, 0x66, 0x2E, 0xC4, 0x03, 0xD4,
5261
	0x89, 0x24, 0xCC, 0xE1, 0xCD, 0x3F, 0x01, 0x82,
5262
	0xC1, 0xFB, 0xAF, 0x44, 0xFA, 0xCC, 0x0E, 0xAA,
5263
	0x9D, 0x74, 0xA9, 0x65, 0xEF, 0xED, 0x4C, 0x87,
5264
	0xF0, 0xB3, 0xC6, 0xEA, 0x61, 0x85, 0xDE, 0x4E,
5265
	0x66, 0xB2, 0x5A, 0x9F, 0x7A, 0x41, 0xC5, 0x66,
5266
	0x57, 0xDF, 0x88, 0xF0, 0xB5, 0xF2, 0xC7, 0x7E,
5267
	0xE6, 0x55, 0x21, 0x96, 0x83, 0xD8, 0xAB, 0x57
5268
};
5269
static const unsigned char RSA_Q[] = {
5270
	0xCA, 0x0A, 0x92, 0xBF, 0x58, 0xB0, 0x2E, 0xF6,
5271
	0x66, 0x50, 0xB1, 0x48, 0x29, 0x42, 0x86, 0x6C,
5272
	0x98, 0x06, 0x7E, 0xB8, 0xB5, 0x4F, 0xFB, 0xC4,
5273
	0xF3, 0xC3, 0x36, 0x91, 0x07, 0xB6, 0xDB, 0xE9,
5274
	0x56, 0x3C, 0x51, 0x7D, 0xB5, 0xEC, 0x0A, 0xA9,
5275
	0x7C, 0x66, 0xF9, 0xD8, 0x25, 0xDE, 0xD2, 0x94,
5276
	0x5A, 0x58, 0xF1, 0x93, 0xE4, 0xF0, 0x5F, 0x27,
5277
	0xBD, 0x83, 0xC7, 0xCA, 0x48, 0x6A, 0xB2, 0x55
5278
};
5279
static const unsigned char RSA_DP[] = {
5280
	0xAF, 0x97, 0xBE, 0x60, 0x0F, 0xCE, 0x83, 0x36,
5281
	0x51, 0x2D, 0xD9, 0x2E, 0x22, 0x41, 0x39, 0xC6,
5282
	0x5C, 0x94, 0xA4, 0xCF, 0x28, 0xBD, 0xFA, 0x9C,
5283
	0x3B, 0xD6, 0xE9, 0xDE, 0x56, 0xE3, 0x24, 0x3F,
5284
	0xE1, 0x31, 0x14, 0xCA, 0xBA, 0x55, 0x1B, 0xAF,
5285
	0x71, 0x6D, 0xDD, 0x35, 0x0C, 0x1C, 0x1F, 0xA7,
5286
	0x2C, 0x3E, 0xDB, 0xAF, 0xA6, 0xD8, 0x2A, 0x7F,
5287
	0x01, 0xE2, 0xE8, 0xB4, 0xF5, 0xFA, 0xDB, 0x61
5288
};
5289
static const unsigned char RSA_DQ[] = {
5290
	0x29, 0xC0, 0x4B, 0x98, 0xFD, 0x13, 0xD3, 0x70,
5291
	0x99, 0xAE, 0x1D, 0x24, 0x83, 0x5A, 0x3A, 0xFB,
5292
	0x1F, 0xE3, 0x5F, 0xB6, 0x7D, 0xC9, 0x5C, 0x86,
5293
	0xD3, 0xB4, 0xC8, 0x86, 0xE9, 0xE8, 0x30, 0xC3,
5294
	0xA4, 0x4D, 0x6C, 0xAD, 0xA4, 0xB5, 0x75, 0x72,
5295
	0x96, 0xC1, 0x94, 0xE9, 0xC4, 0xD1, 0xAA, 0x04,
5296
	0x7C, 0x33, 0x1B, 0x20, 0xEB, 0xD3, 0x7C, 0x66,
5297
	0x72, 0xF4, 0x53, 0x8A, 0x0A, 0xB2, 0xF9, 0xCD
5298
};
5299
static const unsigned char RSA_IQ[] = {
5300
	0xE8, 0xEB, 0x04, 0x79, 0xA5, 0xC1, 0x79, 0xDE,
5301
	0xD5, 0x49, 0xA1, 0x0B, 0x48, 0xB9, 0x0E, 0x55,
5302
	0x74, 0x2C, 0x54, 0xEE, 0xA8, 0xB0, 0x01, 0xC2,
5303
	0xD2, 0x3C, 0x3E, 0x47, 0x3A, 0x7C, 0xC8, 0x3D,
5304
	0x2E, 0x33, 0x54, 0x4D, 0x40, 0x29, 0x41, 0x74,
5305
	0xBA, 0xE1, 0x93, 0x09, 0xEC, 0xE0, 0x1B, 0x4D,
5306
	0x1F, 0x2A, 0xCA, 0x4A, 0x0B, 0x5F, 0xE6, 0xBE,
5307
	0x59, 0x0A, 0xC4, 0xC9, 0xD9, 0x82, 0xAC, 0xE1
5308
};
5309

5310
static const br_rsa_public_key RSA_PK = {
5311
	(void *)RSA_N, sizeof RSA_N,
5312
	(void *)RSA_E, sizeof RSA_E
5313
};
5314

5315
static const br_rsa_private_key RSA_SK = {
5316
	1024,
5317
	(void *)RSA_P, sizeof RSA_P,
5318
	(void *)RSA_Q, sizeof RSA_Q,
5319
	(void *)RSA_DP, sizeof RSA_DP,
5320
	(void *)RSA_DQ, sizeof RSA_DQ,
5321
	(void *)RSA_IQ, sizeof RSA_IQ
5322
};
5323

5324
/*
5325
 * A 2048-bit RSA key, generated with OpenSSL.
5326
 */
5327
static const unsigned char RSA2048_N[] = {
5328
	0xEA, 0xB1, 0xB0, 0x87, 0x60, 0xE2, 0x69, 0xF5,
5329
	0xC9, 0x3F, 0xCB, 0x4F, 0x9E, 0x7D, 0xD0, 0x56,
5330
	0x54, 0x8F, 0xF5, 0x59, 0x97, 0x04, 0x3F, 0x30,
5331
	0xE1, 0xFB, 0x7B, 0xF5, 0xA0, 0xEB, 0xA7, 0x7B,
5332
	0x29, 0x96, 0x7B, 0x32, 0x48, 0x48, 0xA4, 0x99,
5333
	0x90, 0x92, 0x48, 0xFB, 0xDC, 0xEC, 0x8A, 0x3B,
5334
	0xE0, 0x57, 0x6E, 0xED, 0x1C, 0x5B, 0x78, 0xCF,
5335
	0x07, 0x41, 0x96, 0x4C, 0x2F, 0xA2, 0xD1, 0xC8,
5336
	0xA0, 0x5F, 0xFC, 0x2A, 0x5B, 0x3F, 0xBC, 0xD7,
5337
	0xE6, 0x91, 0xF1, 0x44, 0xD6, 0xD8, 0x41, 0x66,
5338
	0x3E, 0x80, 0xEE, 0x98, 0x73, 0xD5, 0x32, 0x60,
5339
	0x7F, 0xDF, 0xBF, 0xB2, 0x0B, 0xA5, 0xCA, 0x11,
5340
	0x88, 0x1A, 0x0E, 0xA1, 0x61, 0x4C, 0x5A, 0x70,
5341
	0xCE, 0x12, 0xC0, 0x61, 0xF5, 0x50, 0x0E, 0xF6,
5342
	0xC1, 0xC2, 0x88, 0x8B, 0xE5, 0xCE, 0xAE, 0x90,
5343
	0x65, 0x23, 0xA7, 0xAD, 0xCB, 0x04, 0x17, 0x00,
5344
	0xA2, 0xDB, 0xB0, 0x21, 0x49, 0xDD, 0x3C, 0x2E,
5345
	0x8C, 0x47, 0x27, 0xF2, 0x84, 0x51, 0x63, 0xEB,
5346
	0xF8, 0xAF, 0x63, 0xA7, 0x89, 0xE1, 0xF0, 0x2F,
5347
	0xF9, 0x9C, 0x0A, 0x8A, 0xBC, 0x57, 0x05, 0xB0,
5348
	0xEF, 0xA0, 0xDA, 0x67, 0x70, 0xAF, 0x3F, 0xA4,
5349
	0x92, 0xFC, 0x4A, 0xAC, 0xEF, 0x89, 0x41, 0x58,
5350
	0x57, 0x63, 0x0F, 0x6A, 0x89, 0x68, 0x45, 0x4C,
5351
	0x20, 0xF9, 0x7F, 0x50, 0x9D, 0x8C, 0x52, 0xC4,
5352
	0xC1, 0x33, 0xCD, 0x42, 0x35, 0x12, 0xEC, 0x82,
5353
	0xF9, 0xC1, 0xB7, 0x60, 0x7B, 0x52, 0x61, 0xD0,
5354
	0xAE, 0xFD, 0x4B, 0x68, 0xB1, 0x55, 0x0E, 0xAB,
5355
	0x99, 0x24, 0x52, 0x60, 0x8E, 0xDB, 0x90, 0x34,
5356
	0x61, 0xE3, 0x95, 0x7C, 0x34, 0x64, 0x06, 0xCB,
5357
	0x44, 0x17, 0x70, 0x78, 0xC1, 0x1B, 0x87, 0x8F,
5358
	0xCF, 0xB0, 0x7D, 0x93, 0x59, 0x84, 0x49, 0xF5,
5359
	0x55, 0xBB, 0x48, 0xCA, 0xD3, 0x76, 0x1E, 0x7F
5360
};
5361
static const unsigned char RSA2048_E[] = {
5362
	0x01, 0x00, 0x01
5363
};
5364
static const unsigned char RSA2048_P[] = {
5365
	0xF9, 0xA7, 0xB5, 0xC4, 0xE8, 0x52, 0xEC, 0xB1,
5366
	0x33, 0x6A, 0x68, 0x32, 0x63, 0x2D, 0xBA, 0xE5,
5367
	0x61, 0x14, 0x69, 0x82, 0xC8, 0x31, 0x14, 0xD5,
5368
	0xC2, 0x6C, 0x1A, 0xBE, 0xA0, 0x68, 0xA6, 0xC5,
5369
	0xEA, 0x40, 0x59, 0xFB, 0x0A, 0x30, 0x3D, 0xD5,
5370
	0xDD, 0x94, 0xAE, 0x0C, 0x9F, 0xEE, 0x19, 0x0C,
5371
	0xA8, 0xF2, 0x85, 0x27, 0x60, 0xAA, 0xD5, 0x7C,
5372
	0x59, 0x91, 0x1F, 0xAF, 0x5E, 0x00, 0xC8, 0x2D,
5373
	0xCA, 0xB4, 0x70, 0xA1, 0xF8, 0x8C, 0x0A, 0xB3,
5374
	0x08, 0x95, 0x03, 0x9E, 0xA4, 0x6B, 0x9D, 0x55,
5375
	0x47, 0xE0, 0xEC, 0xB3, 0x21, 0x7C, 0xE4, 0x16,
5376
	0x91, 0xE3, 0xD7, 0x1B, 0x3D, 0x81, 0xF1, 0xED,
5377
	0x16, 0xF9, 0x05, 0x0E, 0xA6, 0x9F, 0x37, 0x73,
5378
	0x18, 0x1B, 0x9C, 0x9D, 0x33, 0xAD, 0x25, 0xEF,
5379
	0x3A, 0xC0, 0x4B, 0x34, 0x24, 0xF5, 0xFD, 0x59,
5380
	0xF5, 0x65, 0xE6, 0x92, 0x2A, 0x04, 0x06, 0x3D
5381
};
5382
static const unsigned char RSA2048_Q[] = {
5383
	0xF0, 0xA8, 0xA4, 0x20, 0xDD, 0xF3, 0x99, 0xE6,
5384
	0x1C, 0xB1, 0x21, 0xE8, 0x66, 0x68, 0x48, 0x00,
5385
	0x04, 0xE3, 0x21, 0xA3, 0xE8, 0xC5, 0xFD, 0x85,
5386
	0x6D, 0x2C, 0x98, 0xE3, 0x36, 0x39, 0x3E, 0x80,
5387
	0xB7, 0x36, 0xA5, 0xA9, 0xBB, 0xEB, 0x1E, 0xB8,
5388
	0xEB, 0x44, 0x65, 0xE8, 0x81, 0x7D, 0xE0, 0x87,
5389
	0xC1, 0x08, 0x94, 0xDD, 0x92, 0x40, 0xF4, 0x8B,
5390
	0x3C, 0xB5, 0xC1, 0xAD, 0x9D, 0x4C, 0x14, 0xCD,
5391
	0xD9, 0x2D, 0xB6, 0xE4, 0x99, 0xB3, 0x71, 0x63,
5392
	0x64, 0xE1, 0x31, 0x7E, 0x34, 0x95, 0x96, 0x52,
5393
	0x85, 0x27, 0xBE, 0x40, 0x10, 0x0A, 0x9E, 0x01,
5394
	0x1C, 0xBB, 0xB2, 0x5B, 0x40, 0x85, 0x65, 0x6E,
5395
	0xA0, 0x88, 0x73, 0xF6, 0x22, 0xCC, 0x23, 0x26,
5396
	0x62, 0xAD, 0x92, 0x57, 0x57, 0xF4, 0xD4, 0xDF,
5397
	0xD9, 0x7C, 0xDE, 0xAD, 0xD2, 0x1F, 0x32, 0x29,
5398
	0xBA, 0xE7, 0xE2, 0x32, 0xA1, 0xA0, 0xBF, 0x6B
5399
};
5400
static const unsigned char RSA2048_DP[] = {
5401
	0xB2, 0xF9, 0xD7, 0x66, 0xC5, 0x83, 0x05, 0x6A,
5402
	0x77, 0xC8, 0xB5, 0xD0, 0x41, 0xA7, 0xBC, 0x0F,
5403
	0xCB, 0x4B, 0xFD, 0xE4, 0x23, 0x2E, 0x84, 0x98,
5404
	0x46, 0x1C, 0x88, 0x03, 0xD7, 0x2D, 0x8F, 0x39,
5405
	0xDD, 0x98, 0xAA, 0xA9, 0x3D, 0x01, 0x9E, 0xA2,
5406
	0xDE, 0x8A, 0x43, 0x48, 0x8B, 0xB2, 0xFE, 0xC4,
5407
	0x43, 0xAE, 0x31, 0x65, 0x2C, 0x78, 0xEC, 0x39,
5408
	0x8C, 0x60, 0x6C, 0xCD, 0xA4, 0xDF, 0x7C, 0xA2,
5409
	0xCF, 0x6A, 0x12, 0x41, 0x1B, 0xD5, 0x11, 0xAA,
5410
	0x8D, 0xE1, 0x7E, 0x49, 0xD1, 0xE7, 0xD0, 0x50,
5411
	0x1E, 0x0A, 0x92, 0xC6, 0x4C, 0xA0, 0xA3, 0x47,
5412
	0xC6, 0xE9, 0x07, 0x01, 0xE1, 0x53, 0x72, 0x23,
5413
	0x9D, 0x4F, 0x82, 0x9F, 0xA1, 0x36, 0x0D, 0x63,
5414
	0x76, 0x89, 0xFC, 0xF9, 0xF9, 0xDD, 0x0C, 0x8F,
5415
	0xF7, 0x97, 0x79, 0x92, 0x75, 0x58, 0xE0, 0x7B,
5416
	0x08, 0x61, 0x38, 0x2D, 0xDA, 0xEF, 0x2D, 0xA5
5417
};
5418
static const unsigned char RSA2048_DQ[] = {
5419
	0x8B, 0x69, 0x56, 0x33, 0x08, 0x00, 0x8F, 0x3D,
5420
	0xC3, 0x8F, 0x45, 0x52, 0x48, 0xC8, 0xCE, 0x34,
5421
	0xDC, 0x9F, 0xEB, 0x23, 0xF5, 0xBB, 0x84, 0x62,
5422
	0xDF, 0xDC, 0xBE, 0xF0, 0x98, 0xBF, 0xCE, 0x9A,
5423
	0x68, 0x08, 0x4B, 0x2D, 0xA9, 0x83, 0xC9, 0xF7,
5424
	0x5B, 0xAA, 0xF2, 0xD2, 0x1E, 0xF9, 0x99, 0xB1,
5425
	0x6A, 0xBC, 0x9A, 0xE8, 0x44, 0x4A, 0x46, 0x9F,
5426
	0xC6, 0x5A, 0x90, 0x49, 0x0F, 0xDF, 0x3C, 0x0A,
5427
	0x07, 0x6E, 0xB9, 0x0D, 0x72, 0x90, 0x85, 0xF6,
5428
	0x0B, 0x41, 0x7D, 0x17, 0x5C, 0x44, 0xEF, 0xA0,
5429
	0xFC, 0x2C, 0x0A, 0xC5, 0x37, 0xC5, 0xBE, 0xC4,
5430
	0x6C, 0x2D, 0xBB, 0x63, 0xAB, 0x5B, 0xDB, 0x67,
5431
	0x9B, 0xAD, 0x90, 0x67, 0x9C, 0xBE, 0xDE, 0xF9,
5432
	0xE4, 0x9E, 0x22, 0x31, 0x60, 0xED, 0x9E, 0xC7,
5433
	0xD2, 0x48, 0xC9, 0x02, 0xAE, 0xBF, 0x8D, 0xA2,
5434
	0xA8, 0xF8, 0x9D, 0x8B, 0xB1, 0x1F, 0xDA, 0xE3
5435
};
5436
static const unsigned char RSA2048_IQ[] = {
5437
	0xB5, 0x48, 0xD4, 0x48, 0x5A, 0x33, 0xCD, 0x13,
5438
	0xFE, 0xC6, 0xF7, 0x01, 0x0A, 0x3E, 0x40, 0xA3,
5439
	0x45, 0x94, 0x6F, 0x85, 0xE4, 0x68, 0x66, 0xEC,
5440
	0x69, 0x6A, 0x3E, 0xE0, 0x62, 0x3F, 0x0C, 0xEF,
5441
	0x21, 0xCC, 0xDA, 0xAD, 0x75, 0x98, 0x12, 0xCA,
5442
	0x9E, 0x31, 0xDD, 0x95, 0x0D, 0xBD, 0x55, 0xEB,
5443
	0x92, 0xF7, 0x9E, 0xBD, 0xFC, 0x28, 0x35, 0x96,
5444
	0x31, 0xDC, 0x53, 0x80, 0xA3, 0x57, 0x89, 0x3C,
5445
	0x4A, 0xEC, 0x40, 0x75, 0x13, 0xAC, 0x4F, 0x36,
5446
	0x3A, 0x86, 0x9A, 0xA6, 0x58, 0xC9, 0xED, 0xCB,
5447
	0xD6, 0xBB, 0xB2, 0xD9, 0xAA, 0x04, 0xC4, 0xE8,
5448
	0x47, 0x3E, 0xBD, 0x14, 0x9B, 0x8F, 0x61, 0x70,
5449
	0x69, 0x66, 0x23, 0x62, 0x18, 0xE3, 0x52, 0x98,
5450
	0xE3, 0x22, 0xE9, 0x6F, 0xDA, 0x28, 0x68, 0x08,
5451
	0xB8, 0xB9, 0x8B, 0x97, 0x8B, 0x77, 0x3F, 0xCA,
5452
	0x9D, 0x9D, 0xBE, 0xD5, 0x2D, 0x3E, 0xC2, 0x11
5453
};
5454

5455
static const br_rsa_public_key RSA2048_PK = {
5456
	(void *)RSA2048_N, sizeof RSA2048_N,
5457
	(void *)RSA2048_E, sizeof RSA2048_E
5458
};
5459

5460
static const br_rsa_private_key RSA2048_SK = {
5461
	2048,
5462
	(void *)RSA2048_P, sizeof RSA2048_P,
5463
	(void *)RSA2048_Q, sizeof RSA2048_Q,
5464
	(void *)RSA2048_DP, sizeof RSA2048_DP,
5465
	(void *)RSA2048_DQ, sizeof RSA2048_DQ,
5466
	(void *)RSA2048_IQ, sizeof RSA2048_IQ
5467
};
5468

5469
/*
5470
 * A 4096-bit RSA key, generated with OpenSSL.
5471
 */
5472
static const unsigned char RSA4096_N[] = {
5473
	0xAA, 0x17, 0x71, 0xBC, 0x92, 0x3E, 0xB5, 0xBD,
5474
	0x3E, 0x64, 0xCF, 0x03, 0x9B, 0x24, 0x65, 0x33,
5475
	0x5F, 0xB4, 0x47, 0x89, 0xE5, 0x63, 0xE4, 0xA0,
5476
	0x5A, 0x51, 0x95, 0x07, 0x73, 0xEE, 0x00, 0xF6,
5477
	0x3E, 0x31, 0x0E, 0xDA, 0x15, 0xC3, 0xAA, 0x21,
5478
	0x6A, 0xCD, 0xFF, 0x46, 0x6B, 0xDF, 0x0A, 0x7F,
5479
	0x8A, 0xC2, 0x25, 0x19, 0x47, 0x44, 0xD8, 0x52,
5480
	0xC1, 0x56, 0x25, 0x6A, 0xE0, 0xD2, 0x61, 0x11,
5481
	0x2C, 0xF7, 0x73, 0x9F, 0x5F, 0x74, 0xAA, 0xDD,
5482
	0xDE, 0xAF, 0x81, 0xF6, 0x0C, 0x1A, 0x3A, 0xF9,
5483
	0xC5, 0x47, 0x82, 0x75, 0x1D, 0x41, 0xF0, 0xB2,
5484
	0xFD, 0xBA, 0xE2, 0xA4, 0xA1, 0xB8, 0x32, 0x48,
5485
	0x06, 0x0D, 0x29, 0x2F, 0x44, 0x14, 0xF5, 0xAC,
5486
	0x54, 0x83, 0xC4, 0xB6, 0x85, 0x85, 0x9B, 0x1C,
5487
	0x05, 0x61, 0x28, 0x62, 0x24, 0xA8, 0xF0, 0xE6,
5488
	0x80, 0xA7, 0x91, 0xE8, 0xC7, 0x8E, 0x52, 0x17,
5489
	0xBE, 0xAF, 0xC6, 0x0A, 0xA3, 0xFB, 0xD1, 0x04,
5490
	0x15, 0x3B, 0x14, 0x35, 0xA5, 0x41, 0xF5, 0x30,
5491
	0xFE, 0xEF, 0x53, 0xA7, 0x89, 0x91, 0x78, 0x30,
5492
	0xBE, 0x3A, 0xB1, 0x4B, 0x2E, 0x4A, 0x0E, 0x25,
5493
	0x1D, 0xCF, 0x51, 0x54, 0x52, 0xF1, 0x88, 0x85,
5494
	0x36, 0x23, 0xDE, 0xBA, 0x66, 0x25, 0x60, 0x8D,
5495
	0x45, 0xD7, 0xD8, 0x10, 0x41, 0x64, 0xC7, 0x4B,
5496
	0xCE, 0x72, 0x13, 0xD7, 0x20, 0xF8, 0x2A, 0x74,
5497
	0xA5, 0x05, 0xF4, 0x5A, 0x90, 0xF4, 0x9C, 0xE7,
5498
	0xC9, 0xCF, 0x1E, 0xD5, 0x9C, 0xAC, 0xE5, 0x00,
5499
	0x83, 0x73, 0x9F, 0xE7, 0xC6, 0x93, 0xC0, 0x06,
5500
	0xA7, 0xB8, 0xF8, 0x46, 0x90, 0xC8, 0x78, 0x27,
5501
	0x2E, 0xCC, 0xC0, 0x2A, 0x20, 0xC5, 0xFC, 0x63,
5502
	0x22, 0xA1, 0xD6, 0x16, 0xAD, 0x9C, 0xD6, 0xFC,
5503
	0x7A, 0x6E, 0x9C, 0x98, 0x51, 0xEE, 0x6B, 0x6D,
5504
	0x8F, 0xEF, 0xCE, 0x7C, 0x5D, 0x16, 0xB0, 0xCE,
5505
	0x9C, 0xEE, 0x92, 0xCF, 0xB7, 0xEB, 0x41, 0x36,
5506
	0x3A, 0x6C, 0xF2, 0x0D, 0x26, 0x11, 0x2F, 0x6C,
5507
	0x27, 0x62, 0xA2, 0xCC, 0x63, 0x53, 0xBD, 0xFC,
5508
	0x9F, 0xBE, 0x9B, 0xBD, 0xE5, 0xA7, 0xDA, 0xD4,
5509
	0xF8, 0xED, 0x5E, 0x59, 0x2D, 0xAC, 0xCD, 0x13,
5510
	0xEB, 0xE5, 0x9E, 0x39, 0x82, 0x8B, 0xFD, 0xA8,
5511
	0xFB, 0xCB, 0x86, 0x27, 0xC7, 0x4B, 0x4C, 0xD0,
5512
	0xBA, 0x12, 0xD0, 0x76, 0x1A, 0xDB, 0x30, 0xC5,
5513
	0xB3, 0x2C, 0x4C, 0xC5, 0x32, 0x03, 0x05, 0x67,
5514
	0x8D, 0xD0, 0x14, 0x37, 0x59, 0x2B, 0xE3, 0x1C,
5515
	0x25, 0x3E, 0xA5, 0xE4, 0xF1, 0x0D, 0x34, 0xBB,
5516
	0xD5, 0xF6, 0x76, 0x45, 0x5B, 0x0F, 0x1E, 0x07,
5517
	0x0A, 0xBA, 0x9D, 0x71, 0x87, 0xDE, 0x45, 0x50,
5518
	0xE5, 0x0F, 0x32, 0xBB, 0x5C, 0x32, 0x2D, 0x40,
5519
	0xCD, 0x19, 0x95, 0x4E, 0xC5, 0x54, 0x3A, 0x9A,
5520
	0x46, 0x9B, 0x85, 0xFE, 0x53, 0xB7, 0xD8, 0x65,
5521
	0x6D, 0x68, 0x0C, 0xBB, 0xE3, 0x3D, 0x8E, 0x64,
5522
	0xBE, 0x27, 0x15, 0xAB, 0x12, 0x20, 0xD9, 0x84,
5523
	0xF5, 0x02, 0xE4, 0xBB, 0xDD, 0xAB, 0x59, 0x51,
5524
	0xF4, 0xE1, 0x79, 0xBE, 0xB8, 0xA3, 0x8E, 0xD1,
5525
	0x1C, 0xB0, 0xFA, 0x48, 0x76, 0xC2, 0x9D, 0x7A,
5526
	0x01, 0xA5, 0xAF, 0x8C, 0xBA, 0xAA, 0x4C, 0x06,
5527
	0x2B, 0x0A, 0x62, 0xF0, 0x79, 0x5B, 0x42, 0xFC,
5528
	0xF8, 0xBF, 0xD4, 0xDD, 0x62, 0x32, 0xE3, 0xCE,
5529
	0xF1, 0x2C, 0xE6, 0xED, 0xA8, 0x8A, 0x41, 0xA3,
5530
	0xC1, 0x1E, 0x07, 0xB6, 0x43, 0x10, 0x80, 0xB7,
5531
	0xF3, 0xD0, 0x53, 0x2A, 0x9A, 0x98, 0xA7, 0x4F,
5532
	0x9E, 0xA3, 0x3E, 0x1B, 0xDA, 0x93, 0x15, 0xF2,
5533
	0xF4, 0x20, 0xA5, 0xA8, 0x4F, 0x8A, 0xBA, 0xED,
5534
	0xB1, 0x17, 0x6C, 0x0F, 0xD9, 0x8F, 0x38, 0x11,
5535
	0xF3, 0xD9, 0x5E, 0x88, 0xA1, 0xA1, 0x82, 0x8B,
5536
	0x30, 0xD7, 0xC6, 0xCE, 0x4E, 0x30, 0x55, 0x57
5537
};
5538
static const unsigned char RSA4096_E[] = {
5539
	0x01, 0x00, 0x01
5540
};
5541
static const unsigned char RSA4096_P[] = {
5542
	0xD3, 0x7A, 0x22, 0xD8, 0x9B, 0xBF, 0x42, 0xB4,
5543
	0x53, 0x04, 0x10, 0x6A, 0x84, 0xFD, 0x7C, 0x1D,
5544
	0xF6, 0xF4, 0x10, 0x65, 0xAA, 0xE5, 0xE1, 0x4E,
5545
	0xB4, 0x37, 0xF7, 0xAC, 0xF7, 0xD3, 0xB2, 0x3B,
5546
	0xFE, 0xE7, 0x63, 0x42, 0xE9, 0xF0, 0x3C, 0xE0,
5547
	0x42, 0xB4, 0xBB, 0x09, 0xD0, 0xB2, 0x7C, 0x70,
5548
	0xA4, 0x11, 0x97, 0x90, 0x01, 0xD0, 0x0E, 0x7B,
5549
	0xAF, 0x7D, 0x30, 0x4E, 0x6B, 0x3A, 0xCC, 0x50,
5550
	0x4E, 0xAF, 0x2F, 0xC3, 0xC2, 0x4F, 0x7E, 0xC5,
5551
	0xB3, 0x76, 0x33, 0xFB, 0xA7, 0xB1, 0x96, 0xA5,
5552
	0x46, 0x41, 0xC6, 0xDA, 0x5A, 0xFD, 0x17, 0x0A,
5553
	0x6A, 0x86, 0x54, 0x83, 0xE1, 0x57, 0xE7, 0xAF,
5554
	0x8C, 0x42, 0xE5, 0x39, 0xF2, 0xC7, 0xFC, 0x4A,
5555
	0x3D, 0x3C, 0x94, 0x89, 0xC2, 0xC6, 0x2D, 0x0A,
5556
	0x5F, 0xD0, 0x21, 0x23, 0x5C, 0xC9, 0xC8, 0x44,
5557
	0x8A, 0x96, 0x72, 0x4D, 0x96, 0xC6, 0x17, 0x0C,
5558
	0x36, 0x43, 0x7F, 0xD8, 0xA0, 0x7A, 0x31, 0x7E,
5559
	0xCE, 0x13, 0xE3, 0x13, 0x2E, 0xE0, 0x91, 0xC2,
5560
	0x61, 0x13, 0x16, 0x8D, 0x99, 0xCB, 0xA9, 0x2C,
5561
	0x4D, 0x9D, 0xDD, 0x1D, 0x03, 0xE7, 0xA7, 0x50,
5562
	0xF4, 0x16, 0x43, 0xB1, 0x7F, 0x99, 0x61, 0x3F,
5563
	0xA5, 0x59, 0x91, 0x16, 0xC3, 0x06, 0x63, 0x59,
5564
	0xE9, 0xDA, 0xB5, 0x06, 0x2E, 0x0C, 0xD9, 0xAB,
5565
	0x93, 0x89, 0x12, 0x82, 0xFB, 0x90, 0xD9, 0x30,
5566
	0x60, 0xF7, 0x35, 0x2D, 0x18, 0x78, 0xEB, 0x2B,
5567
	0xA1, 0x06, 0x67, 0x37, 0xDE, 0x72, 0x20, 0xD2,
5568
	0x80, 0xE5, 0x2C, 0xD7, 0x5E, 0xC7, 0x67, 0x2D,
5569
	0x40, 0xE7, 0x7A, 0xCF, 0x4A, 0x69, 0x9D, 0xA7,
5570
	0x90, 0x9F, 0x3B, 0xDF, 0x07, 0x97, 0x64, 0x69,
5571
	0x06, 0x4F, 0xBA, 0xF4, 0xE5, 0xBD, 0x71, 0x60,
5572
	0x36, 0xB7, 0xA3, 0xDE, 0x76, 0xC5, 0x38, 0xD7,
5573
	0x1D, 0x9A, 0xFC, 0x36, 0x3D, 0x3B, 0xDC, 0xCF
5574
};
5575
static const unsigned char RSA4096_Q[] = {
5576
	0xCD, 0xE6, 0xC6, 0xA6, 0x42, 0x4C, 0x45, 0x65,
5577
	0x8B, 0x85, 0x76, 0xFC, 0x21, 0xB6, 0x57, 0x79,
5578
	0x3C, 0xE4, 0xE3, 0x85, 0x55, 0x2F, 0x59, 0xD3,
5579
	0x3F, 0x74, 0xAF, 0x9F, 0x11, 0x04, 0x10, 0x8B,
5580
	0xF9, 0x5F, 0x4D, 0x25, 0xEE, 0x20, 0xF9, 0x69,
5581
	0x3B, 0x02, 0xB6, 0x43, 0x0D, 0x0C, 0xED, 0x30,
5582
	0x31, 0x57, 0xE7, 0x9A, 0x57, 0x24, 0x6B, 0x4A,
5583
	0x5E, 0xA2, 0xBF, 0xD4, 0x47, 0x7D, 0xFA, 0x78,
5584
	0x51, 0x86, 0x80, 0x68, 0x85, 0x7C, 0x7B, 0x08,
5585
	0x4A, 0x35, 0x24, 0x4F, 0x8B, 0x24, 0x49, 0xF8,
5586
	0x16, 0x06, 0x9C, 0x57, 0x4E, 0x94, 0x4C, 0xBD,
5587
	0x6E, 0x53, 0x52, 0xC9, 0xC1, 0x64, 0x43, 0x22,
5588
	0x1E, 0xDD, 0xEB, 0xAC, 0x90, 0x58, 0xCA, 0xBA,
5589
	0x9C, 0xAC, 0xCF, 0xDD, 0x08, 0x6D, 0xB7, 0x31,
5590
	0xDB, 0x0D, 0x83, 0xE6, 0x50, 0xA6, 0x69, 0xB1,
5591
	0x1C, 0x68, 0x92, 0xB4, 0xB5, 0x76, 0xDE, 0xBD,
5592
	0x4F, 0xA5, 0x30, 0xED, 0x23, 0xFF, 0xE5, 0x80,
5593
	0x21, 0xAB, 0xED, 0xE6, 0xDC, 0x32, 0x3D, 0xF7,
5594
	0x45, 0xB8, 0x19, 0x3D, 0x8E, 0x15, 0x7C, 0xE5,
5595
	0x0D, 0xC8, 0x9B, 0x7D, 0x1F, 0x7C, 0x14, 0x14,
5596
	0x41, 0x09, 0xA7, 0xEB, 0xFB, 0xD9, 0x5F, 0x9A,
5597
	0x94, 0xB6, 0xD5, 0xA0, 0x2C, 0xAF, 0xB5, 0xEF,
5598
	0x5C, 0x5A, 0x8E, 0x34, 0xA1, 0x8F, 0xEB, 0x38,
5599
	0x0F, 0x31, 0x6E, 0x45, 0x21, 0x7A, 0xAA, 0xAF,
5600
	0x6C, 0xB1, 0x8E, 0xB2, 0xB9, 0xD4, 0x1E, 0xEF,
5601
	0x66, 0xD8, 0x4E, 0x3D, 0xF2, 0x0C, 0xF1, 0xBA,
5602
	0xFB, 0xA9, 0x27, 0xD2, 0x45, 0x54, 0x83, 0x4B,
5603
	0x10, 0xC4, 0x9A, 0x32, 0x9C, 0xC7, 0x9A, 0xCF,
5604
	0x4E, 0xBF, 0x07, 0xFC, 0x27, 0xB7, 0x96, 0x1D,
5605
	0xDE, 0x9D, 0xE4, 0x84, 0x68, 0x00, 0x9A, 0x9F,
5606
	0x3D, 0xE6, 0xC7, 0x26, 0x11, 0x48, 0x79, 0xFA,
5607
	0x09, 0x76, 0xC8, 0x25, 0x3A, 0xE4, 0x70, 0xF9
5608
};
5609
static const unsigned char RSA4096_DP[] = {
5610
	0x5C, 0xE3, 0x3E, 0xBF, 0x09, 0xD9, 0xFE, 0x80,
5611
	0x9A, 0x1E, 0x24, 0xDF, 0xC4, 0xBE, 0x5A, 0x70,
5612
	0x06, 0xF2, 0xB8, 0xE9, 0x0F, 0x21, 0x9D, 0xCF,
5613
	0x26, 0x15, 0x97, 0x32, 0x60, 0x40, 0x99, 0xFF,
5614
	0x04, 0x3D, 0xBA, 0x39, 0xBF, 0xEB, 0x87, 0xB1,
5615
	0xB1, 0x5B, 0x14, 0xF4, 0x80, 0xB8, 0x85, 0x34,
5616
	0x2C, 0xBC, 0x95, 0x67, 0xE9, 0x83, 0xEB, 0x78,
5617
	0xA4, 0x62, 0x46, 0x7F, 0x8B, 0x55, 0xEE, 0x3C,
5618
	0x2F, 0xF3, 0x7E, 0xF5, 0x6B, 0x39, 0xE3, 0xA3,
5619
	0x0E, 0xEA, 0x92, 0x76, 0xAC, 0xF7, 0xB2, 0x05,
5620
	0xB2, 0x50, 0x5D, 0xF9, 0xB7, 0x11, 0x87, 0xB7,
5621
	0x49, 0x86, 0xEB, 0x44, 0x6A, 0x0C, 0x64, 0x75,
5622
	0x95, 0x14, 0x24, 0xFF, 0x49, 0x06, 0x52, 0x68,
5623
	0x81, 0x71, 0x44, 0x85, 0x26, 0x0A, 0x49, 0xEA,
5624
	0x4E, 0x9F, 0x6A, 0x8E, 0xCF, 0xC8, 0xC9, 0xB0,
5625
	0x61, 0x77, 0x27, 0x89, 0xB0, 0xFA, 0x1D, 0x51,
5626
	0x7D, 0xDC, 0x34, 0x21, 0x80, 0x8B, 0x6B, 0x86,
5627
	0x19, 0x1A, 0x5F, 0x19, 0x23, 0xF3, 0xFB, 0xD1,
5628
	0xF7, 0x35, 0x9D, 0x28, 0x61, 0x2F, 0x35, 0x85,
5629
	0x82, 0x2A, 0x1E, 0xDF, 0x09, 0xC2, 0x0C, 0x99,
5630
	0xE0, 0x3C, 0x8F, 0x4B, 0x3D, 0x92, 0xAF, 0x46,
5631
	0x77, 0x68, 0x59, 0xF4, 0x37, 0x81, 0x6C, 0xCE,
5632
	0x27, 0x8B, 0xAB, 0x0B, 0xA5, 0xDA, 0x7B, 0x19,
5633
	0x83, 0xDA, 0x27, 0x49, 0x65, 0x1A, 0x00, 0x6B,
5634
	0xE1, 0x8B, 0x73, 0xCD, 0xF4, 0xFB, 0xD7, 0xBF,
5635
	0xF8, 0x20, 0x89, 0xE1, 0xDE, 0x51, 0x1E, 0xDD,
5636
	0x97, 0x44, 0x12, 0x68, 0x1E, 0xF7, 0x52, 0xF8,
5637
	0x6B, 0x93, 0xC1, 0x3B, 0x9F, 0xA1, 0xB8, 0x5F,
5638
	0xCB, 0x84, 0x45, 0x95, 0xF7, 0x0D, 0xA6, 0x4B,
5639
	0x03, 0x3C, 0xAE, 0x0F, 0xB7, 0x81, 0x78, 0x75,
5640
	0x1C, 0x53, 0x99, 0x24, 0xB3, 0xE2, 0x78, 0xCE,
5641
	0xF3, 0xF0, 0x09, 0x6C, 0x01, 0x85, 0x73, 0xBD
5642
};
5643
static const unsigned char RSA4096_DQ[] = {
5644
	0xCD, 0x88, 0xAC, 0x8B, 0x92, 0x6A, 0xA8, 0x6B,
5645
	0x71, 0x16, 0xCD, 0x6B, 0x6A, 0x0B, 0xA6, 0xCD,
5646
	0xF3, 0x27, 0x58, 0xA6, 0xE4, 0x1D, 0xDC, 0x40,
5647
	0xAF, 0x7B, 0x3F, 0x44, 0x3D, 0xAC, 0x1D, 0x08,
5648
	0x5C, 0xE9, 0xF1, 0x0D, 0x07, 0xE4, 0x0A, 0x94,
5649
	0x2C, 0xBF, 0xCC, 0x48, 0xAA, 0x62, 0x58, 0xF2,
5650
	0x5E, 0x8F, 0x2D, 0x36, 0x37, 0xFE, 0xB6, 0xCB,
5651
	0x0A, 0x24, 0xD3, 0xF0, 0x87, 0x5D, 0x0E, 0x05,
5652
	0xC4, 0xFB, 0xCA, 0x7A, 0x8B, 0xA5, 0x72, 0xFB,
5653
	0x17, 0x78, 0x6C, 0xC2, 0xAA, 0x56, 0x93, 0x2F,
5654
	0xFE, 0x6C, 0xA2, 0xEB, 0xD4, 0x18, 0xDD, 0x71,
5655
	0xCB, 0x0B, 0x89, 0xFC, 0xB3, 0xFB, 0xED, 0xB7,
5656
	0xC5, 0xB0, 0x29, 0x6D, 0x9C, 0xB9, 0xC5, 0xC4,
5657
	0xFA, 0x58, 0xD7, 0x36, 0x01, 0x0F, 0xE4, 0x6A,
5658
	0xF4, 0x0B, 0x4D, 0xBB, 0x3E, 0x8E, 0x9F, 0xBA,
5659
	0x98, 0x6D, 0x1A, 0xE5, 0x20, 0xAF, 0x84, 0x30,
5660
	0xDD, 0xAC, 0x3C, 0x66, 0xBC, 0x24, 0xD9, 0x67,
5661
	0x4A, 0x35, 0x61, 0xC9, 0xAD, 0xCC, 0xC9, 0x66,
5662
	0x68, 0x46, 0x19, 0x8C, 0x04, 0xA5, 0x16, 0x83,
5663
	0x5F, 0x7A, 0xFD, 0x1B, 0xAD, 0xAE, 0x22, 0x2D,
5664
	0x05, 0xAF, 0x29, 0xDC, 0xBB, 0x0E, 0x86, 0x0C,
5665
	0xBC, 0x9E, 0xB6, 0x28, 0xA9, 0xF2, 0xCC, 0x5E,
5666
	0x1F, 0x86, 0x95, 0xA5, 0x9C, 0x11, 0x19, 0xF0,
5667
	0x5F, 0xDA, 0x2C, 0x04, 0xFE, 0x22, 0x80, 0xF7,
5668
	0x94, 0x3C, 0xBA, 0x01, 0x56, 0xD6, 0x93, 0xFA,
5669
	0xCE, 0x62, 0xE5, 0xD7, 0x98, 0x23, 0xAB, 0xB9,
5670
	0xC7, 0x35, 0x57, 0xF6, 0xE2, 0x16, 0x36, 0xE9,
5671
	0x5B, 0xD7, 0xA5, 0x45, 0x18, 0x93, 0x77, 0xC9,
5672
	0xB1, 0x05, 0xA8, 0x66, 0xE1, 0x0E, 0xB5, 0xDF,
5673
	0x23, 0x35, 0xE1, 0xC2, 0xFA, 0x3E, 0x80, 0x1A,
5674
	0xAD, 0xA4, 0x0C, 0xEF, 0xC7, 0x18, 0xDE, 0x09,
5675
	0xE6, 0x20, 0x98, 0x31, 0xF1, 0xD3, 0xCF, 0xA1
5676
};
5677
static const unsigned char RSA4096_IQ[] = {
5678
	0x76, 0xD7, 0x75, 0xDF, 0xA3, 0x0C, 0x9D, 0x64,
5679
	0x6E, 0x00, 0x82, 0x2E, 0x5C, 0x5E, 0x43, 0xC4,
5680
	0xD2, 0x28, 0xB0, 0xB1, 0xA8, 0xD8, 0x26, 0x91,
5681
	0xA0, 0xF5, 0xC8, 0x69, 0xFF, 0x24, 0x33, 0xAB,
5682
	0x67, 0xC7, 0xA3, 0xAE, 0xBB, 0x17, 0x27, 0x5B,
5683
	0x5A, 0xCD, 0x67, 0xA3, 0x70, 0x91, 0x9E, 0xD5,
5684
	0xF1, 0x97, 0x00, 0x0A, 0x30, 0x64, 0x3D, 0x9B,
5685
	0xBF, 0xB5, 0x8C, 0xAC, 0xC7, 0x20, 0x0A, 0xD2,
5686
	0x76, 0x36, 0x36, 0x5D, 0xE4, 0xAC, 0x5D, 0xBC,
5687
	0x44, 0x32, 0xB0, 0x76, 0x33, 0x40, 0xDD, 0x29,
5688
	0x22, 0xE0, 0xFF, 0x55, 0x4C, 0xCE, 0x3F, 0x43,
5689
	0x34, 0x95, 0x94, 0x7C, 0x22, 0x0D, 0xAB, 0x20,
5690
	0x38, 0x70, 0xC3, 0x4A, 0x19, 0xCF, 0x81, 0xCE,
5691
	0x79, 0x28, 0x6C, 0xC2, 0xA3, 0xB3, 0x48, 0x20,
5692
	0x2D, 0x3E, 0x74, 0x45, 0x2C, 0xAA, 0x9F, 0xA5,
5693
	0xC2, 0xE3, 0x2D, 0x41, 0x95, 0xBD, 0x78, 0xAB,
5694
	0x6A, 0xA8, 0x7A, 0x45, 0x52, 0xE2, 0x66, 0xE7,
5695
	0x6C, 0x38, 0x03, 0xA5, 0xDA, 0xAD, 0x94, 0x3C,
5696
	0x6A, 0xA1, 0xA2, 0xD5, 0xCD, 0xDE, 0x05, 0xCC,
5697
	0x6E, 0x3D, 0x8A, 0xF6, 0x9A, 0xA5, 0x0F, 0xA9,
5698
	0x18, 0xC4, 0xF9, 0x9C, 0x2F, 0xB3, 0xF1, 0x30,
5699
	0x38, 0x60, 0x69, 0x09, 0x67, 0x2C, 0xE9, 0x42,
5700
	0x68, 0x3C, 0x70, 0x32, 0x1A, 0x44, 0x32, 0x02,
5701
	0x82, 0x9F, 0x60, 0xE8, 0xA4, 0x42, 0x74, 0xA2,
5702
	0xA2, 0x5A, 0x99, 0xDC, 0xC8, 0xCA, 0x15, 0x4D,
5703
	0xFF, 0xF1, 0x8A, 0x23, 0xD8, 0xD3, 0xB1, 0x9A,
5704
	0xB4, 0x0B, 0xBB, 0xE8, 0x38, 0x74, 0x0C, 0x52,
5705
	0xC7, 0x8B, 0x63, 0x4C, 0xEA, 0x7D, 0x5F, 0x58,
5706
	0x34, 0x53, 0x3E, 0x23, 0x10, 0xBB, 0x60, 0x6B,
5707
	0x52, 0x9D, 0x89, 0x9F, 0xF0, 0x5F, 0xCE, 0xB3,
5708
	0x9C, 0x0E, 0x75, 0x0F, 0x87, 0xF6, 0x66, 0xA5,
5709
	0x4C, 0x94, 0x84, 0xFE, 0x94, 0xB9, 0x04, 0xB7
5710
};
5711

5712
static const br_rsa_public_key RSA4096_PK = {
5713
	(void *)RSA4096_N, sizeof RSA4096_N,
5714
	(void *)RSA4096_E, sizeof RSA4096_E
5715
};
5716

5717
static const br_rsa_private_key RSA4096_SK = {
5718
	4096,
5719
	(void *)RSA4096_P, sizeof RSA4096_P,
5720
	(void *)RSA4096_Q, sizeof RSA4096_Q,
5721
	(void *)RSA4096_DP, sizeof RSA4096_DP,
5722
	(void *)RSA4096_DQ, sizeof RSA4096_DQ,
5723
	(void *)RSA4096_IQ, sizeof RSA4096_IQ
5724
};
5725

5726
static void
5727
test_RSA_core(const char *name, br_rsa_public fpub, br_rsa_private fpriv)
5728
{
5729
	unsigned char t1[512], t2[512], t3[512];
5730
	size_t len;
5731

5732
	printf("Test %s: ", name);
5733
	fflush(stdout);
5734

5735
	/*
5736
	 * A KAT test (computed with OpenSSL).
5737
	 */
5738
	len = hextobin(t1, "45A3DC6A106BCD3BD0E48FB579643AA3FF801E5903E80AA9B43A695A8E7F454E93FA208B69995FF7A6D5617C2FEB8E546375A664977A48931842AAE796B5A0D64393DCA35F3490FC157F5BD83B9D58C2F7926E6AE648A2BD96CAB8FCCD3D35BB11424AD47D973FF6D69CA774841AEC45DFAE99CCF79893E7047FDE6CB00AA76D");
5739
	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003021300906052B0E03021A05000414A94A8FE5CCB19BA61C4C0873D391E987982FBBD3");
5740
	memcpy(t3, t1, len);
5741
	if (!fpub(t3, len, &RSA_PK)) {
5742
		fprintf(stderr, "RSA public operation failed (1)\n");
5743
		exit(EXIT_FAILURE);
5744
	}
5745
	check_equals("KAT RSA pub", t2, t3, len);
5746
	if (!fpriv(t3, &RSA_SK)) {
5747
		fprintf(stderr, "RSA private operation failed (1)\n");
5748
		exit(EXIT_FAILURE);
5749
	}
5750
	check_equals("KAT RSA priv (1)", t1, t3, len);
5751

5752
	/*
5753
	 * Another KAT test, with a (fake) hash value slightly different
5754
	 * (last byte is 0xD9 instead of 0xD3).
5755
	 */
5756
	len = hextobin(t1, "32C2DB8B2C73BBCA9960CB3F11FEDEE7B699359EF2EEC3A632E56B7FF3DE2F371E5179BAB03F17E0BB20D2891ACAB679F95DA9B43A01DAAD192FADD25D8ACCF1498EC80F5BBCAC88EA59D60E3BC9D3CE27743981DE42385FFFFF04DD2D716E1A46C04A28ECAF6CD200DAB81083A830D61538D69BB39A183107BD50302AA6BC28");
5757
	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003021300906052B0E03021A05000414A94A8FE5CCB19BA61C4C0873D391E987982FBBD9");
5758
	memcpy(t3, t1, len);
5759
	if (!fpub(t3, len, &RSA_PK)) {
5760
		fprintf(stderr, "RSA public operation failed (2)\n");
5761
		exit(EXIT_FAILURE);
5762
	}
5763
	check_equals("KAT RSA pub", t2, t3, len);
5764
	if (!fpriv(t3, &RSA_SK)) {
5765
		fprintf(stderr, "RSA private operation failed (2)\n");
5766
		exit(EXIT_FAILURE);
5767
	}
5768
	check_equals("KAT RSA priv (2)", t1, t3, len);
5769

5770
	/*
5771
	 * Third KAT vector is invalid, because the encrypted value is
5772
	 * out of range: instead of x, value is x+n (where n is the
5773
	 * modulus). Mathematically, this still works, but implementations
5774
	 * are supposed to reject such cases.
5775
	 */
5776
	len = hextobin(t1, "F27781B9B3B358583A24F9BA6B34EE98B67A5AE8D8D4FA567BA773EB6B85EF88848680640A1E2F5FD117876E5FB928B64C6EFC7E03632A3F4C941E15657C0C705F3BB8D0B03A0249143674DB1FE6E5406D690BF2DA76EA7FF3AC6FCE12C7801252FAD52D332BE4AB41F9F8CF1728CDF98AB8E8C20E0C350E4F707A6402C01E0B");
5777
	hextobin(t2, "BFB6A62E873F9C8DA0C42E7B59360FB0FFE12549E5E636B048C2086B77A7C051663506A959DF177F15F6B4E544EE723C531152C9C9614F923364704307F13F7F15ACF0C1547D55C029DC9ECCE41D117245F4D270FC34B21FF3AD6AEFE58633281540902F547F79F3461F44D33CCB2D094231ADCC76BE25511B4513BB70491DBC");
5778
	memcpy(t3, t1, len);
5779
	if (fpub(t3, len, &RSA_PK)) {
5780
		size_t u;
5781
		fprintf(stderr, "RSA public operation should have failed"
5782
			" (value out of range)\n");
5783
		fprintf(stderr, "x = ");
5784
		for (u = 0; u < len; u ++) {
5785
			fprintf(stderr, "%02X", t3[u]);
5786
		}
5787
		fprintf(stderr, "\n");
5788
		exit(EXIT_FAILURE);
5789
	}
5790
	memcpy(t3, t2, len);
5791
	if (fpriv(t3, &RSA_SK)) {
5792
		size_t u;
5793
		fprintf(stderr, "RSA private operation should have failed"
5794
			" (value out of range)\n");
5795
		fprintf(stderr, "x = ");
5796
		for (u = 0; u < len; u ++) {
5797
			fprintf(stderr, "%02X", t3[u]);
5798
		}
5799
		fprintf(stderr, "\n");
5800
		exit(EXIT_FAILURE);
5801
	}
5802

5803
	/*
5804
	 * RSA-2048 test vector.
5805
	 */
5806
	len = hextobin(t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
5807
	hextobin(t2, "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");
5808
	memcpy(t3, t1, len);
5809
	if (!fpub(t3, len, &RSA2048_PK)) {
5810
		fprintf(stderr, "RSA public operation failed (2048)\n");
5811
		exit(EXIT_FAILURE);
5812
	}
5813
	check_equals("KAT RSA pub", t2, t3, len);
5814
	if (!fpriv(t3, &RSA2048_SK)) {
5815
		fprintf(stderr, "RSA private operation failed (2048)\n");
5816
		exit(EXIT_FAILURE);
5817
	}
5818
	check_equals("KAT RSA priv (2048)", t1, t3, len);
5819

5820
	/*
5821
	 * RSA-4096 test vector.
5822
	 */
5823
	len = hextobin(t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
5824
	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003031300D0609608648016503040201050004205B60DD5AD5B3C62E0DA25FD0D8CB26325E1CE32CC9ED234B288235BCCF6ED2C8");
5825
	memcpy(t3, t1, len);
5826
	if (!fpub(t3, len, &RSA4096_PK)) {
5827
		fprintf(stderr, "RSA public operation failed (4096)\n");
5828
		exit(EXIT_FAILURE);
5829
	}
5830
	check_equals("KAT RSA pub", t2, t3, len);
5831
	if (!fpriv(t3, &RSA4096_SK)) {
5832
		fprintf(stderr, "RSA private operation failed (4096)\n");
5833
		exit(EXIT_FAILURE);
5834
	}
5835
	check_equals("KAT RSA priv (4096)", t1, t3, len);
5836

5837
	printf("done.\n");
5838
	fflush(stdout);
5839
}
5840

5841
static const unsigned char SHA1_OID[] = {
5842
	0x05, 0x2B, 0x0E, 0x03, 0x02, 0x1A
5843
};
5844

5845
static void
5846
test_RSA_sign(const char *name, br_rsa_private fpriv,
5847
	br_rsa_pkcs1_sign fsign, br_rsa_pkcs1_vrfy fvrfy)
5848
{
5849
	unsigned char t1[128], t2[128];
5850
	unsigned char hv[20], tmp[20];
5851
	unsigned char rsa_n[128], rsa_e[3], rsa_p[64], rsa_q[64];
5852
	unsigned char rsa_dp[64], rsa_dq[64], rsa_iq[64];
5853
	br_rsa_public_key rsa_pk;
5854
	br_rsa_private_key rsa_sk;
5855
	unsigned char hv2[64], tmp2[64], sig[128];
5856
	br_sha1_context hc;
5857
	size_t u;
5858

5859
	printf("Test %s: ", name);
5860
	fflush(stdout);
5861

5862
	/*
5863
	 * Verify the KAT test (computed with OpenSSL).
5864
	 */
5865
	hextobin(t1, "45A3DC6A106BCD3BD0E48FB579643AA3FF801E5903E80AA9B43A695A8E7F454E93FA208B69995FF7A6D5617C2FEB8E546375A664977A48931842AAE796B5A0D64393DCA35F3490FC157F5BD83B9D58C2F7926E6AE648A2BD96CAB8FCCD3D35BB11424AD47D973FF6D69CA774841AEC45DFAE99CCF79893E7047FDE6CB00AA76D");
5866
	br_sha1_init(&hc);
5867
	br_sha1_update(&hc, "test", 4);
5868
	br_sha1_out(&hc, hv);
5869
	if (!fvrfy(t1, sizeof t1, SHA1_OID, sizeof tmp, &RSA_PK, tmp)) {
5870
		fprintf(stderr, "Signature verification failed\n");
5871
		exit(EXIT_FAILURE);
5872
	}
5873
	check_equals("Extracted hash value", hv, tmp, sizeof tmp);
5874

5875
	/*
5876
	 * Regenerate the signature. This should yield the same value as
5877
	 * the KAT test, since PKCS#1 v1.5 signatures are deterministic
5878
	 * (except the usual detail about hash function parameter
5879
	 * encoding, but OpenSSL uses the same convention as BearSSL).
5880
	 */
5881
	if (!fsign(SHA1_OID, hv, 20, &RSA_SK, t2)) {
5882
		fprintf(stderr, "Signature generation failed\n");
5883
		exit(EXIT_FAILURE);
5884
	}
5885
	check_equals("Regenerated signature", t1, t2, sizeof t1);
5886

5887
	/*
5888
	 * Use the raw private core to generate fake signatures, where
5889
	 * one byte of the padded hash value is altered. They should all be
5890
	 * rejected.
5891
	 */
5892
	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003021300906052B0E03021A05000414A94A8FE5CCB19BA61C4C0873D391E987982FBBD3");
5893
	for (u = 0; u < (sizeof t2) - 20; u ++) {
5894
		memcpy(t1, t2, sizeof t2);
5895
		t1[u] ^= 0x01;
5896
		if (!fpriv(t1, &RSA_SK)) {
5897
			fprintf(stderr, "RSA private key operation failed\n");
5898
			exit(EXIT_FAILURE);
5899
		}
5900
		if (fvrfy(t1, sizeof t1, SHA1_OID, sizeof tmp, &RSA_PK, tmp)) {
5901
			fprintf(stderr,
5902
				"Signature verification should have failed\n");
5903
			exit(EXIT_FAILURE);
5904
		}
5905
		printf(".");
5906
		fflush(stdout);
5907
	}
5908

5909
	/*
5910
	 * Another KAT test, which historically showed a bug.
5911
	 */
5912
	rsa_pk.n = rsa_n;
5913
	rsa_pk.nlen = hextobin(rsa_n, "E65DAEF196D22C300B3DAE1CE5157EDF821BB6038E419D8D363A8B2DA84A1321042330E6F87A8BD8FE6BA1D2A17031955ED2315CC5FD2397197E238A5E0D2D0AFD25717E814EC4D2BBA887327A3C5B3A450FD8D547BDFCBB0F73B997CA13DD5E7572C4D5BAA764A349BAB2F868ACF4574AE2C7AEC94B77D2EE00A21B6CB175BB");
5914
	rsa_pk.e = rsa_e;
5915
	rsa_pk.elen = hextobin(rsa_e, "010001");
5916

5917
	rsa_sk.n_bitlen = 1024;
5918
	rsa_sk.p = rsa_p;
5919
	rsa_sk.plen = hextobin(rsa_p, "FF58513DBA4F3F42DFDFD3E6AFB6BD62DE27E06BA3C9D9F9B542CB21228C2AAE67936514161C8FDC1A248A50195CAF22ADC50DA89BFED1B9EEFBB37304241357");
5920
	rsa_sk.q = rsa_q;
5921
	rsa_sk.qlen = hextobin(rsa_q, "E6F4F66818B7442297DDEB45E9B3D438E5B57BB5EF86EFF2462AD6B9C10F383517CDD2E7E36EAD4BEBCC57CFE8AA985F7E7B38B96D30FFBE9ED9FE21B1CFB63D");
5922
	rsa_sk.dp = rsa_dp;
5923
	rsa_sk.dplen = hextobin(rsa_dp, "6F89517B682D83919F9EF2BDBA955526A1A9C382E139A3A84AC01160B8E9871F458901C7035D988D6931FAE4C01F57350BB89E9DBEFE50F829E6F25CD43B39E3");
5924
	rsa_sk.dq = rsa_dq;
5925
	rsa_sk.dqlen = hextobin(rsa_dq, "409E08D2D7176F58BE64B88EB6F4394C31F8B4C412600E821A5FA1F416AFCB6A0F5EE6C33A3E9CFDC0DB4B3640427A9F3D23FC9AE491F0FBC435F98433DB8981");
5926
	rsa_sk.iq = rsa_iq;
5927
	rsa_sk.iqlen = hextobin(rsa_iq, "CF333D6AD66D02B4D11C8C23CA669D14D71803ADC3943BE03B1E48F52F385BCFDDFD0F85AD02A984E504FC6612549D4E7867B7D09DD13196BFC3FAA4B57393A9");
5928
	hextobin(sig, "CFB84D161E6DB130736FC6212EBE575571AF341CEF5757C19952A5364C90E3C47549E520E26253DAE70F645F31FA8B5DA9AE282741D3CA4B1CC365B7BD75D6D61D4CFD9AD9EDD17D23E0BA7D9775138DBABC7FF2A57587FE1EA1B51E8F3C68326E26FF89D8CF92BDD4C787D04857DFC3266E6B33B92AA08809929C72642F35C2");
5929

5930
	hextobin(hv2, "F66C62B38E1CC69C378C0E16574AE5C6443FDFA3E85C6205C00B3231CAA3074EC1481BDC22AB575E6CF3CCD9EDA6B39F83923FC0E6475C799D257545F77233B4");
5931
	if (!fsign(BR_HASH_OID_SHA512, hv2, 64, &rsa_sk, t2)) {
5932
		fprintf(stderr, "Signature generation failed (2)\n");
5933
		exit(EXIT_FAILURE);
5934
	}
5935
	check_equals("Regenerated signature (2)", t2, sig, sizeof t2);
5936
	if (!fvrfy(t2, sizeof t2, BR_HASH_OID_SHA512,
5937
		sizeof tmp2, &rsa_pk, tmp2))
5938
	{
5939
		fprintf(stderr, "Signature verification failed (2)\n");
5940
		exit(EXIT_FAILURE);
5941
	}
5942
	check_equals("Extracted hash value (2)", hv2, tmp2, sizeof tmp2);
5943

5944
	printf(" done.\n");
5945
	fflush(stdout);
5946
}
5947

5948
/*
5949
 * Fake RNG that returns exactly the provided bytes.
5950
 */
5951
typedef struct {
5952
	const br_prng_class *vtable;
5953
	unsigned char buf[128];
5954
	size_t ptr, len;
5955
} rng_fake_ctx;
5956

5957
static void rng_fake_init(rng_fake_ctx *cc,
5958
	const void *params, const void *seed, size_t len);
5959
static void rng_fake_generate(rng_fake_ctx *cc, void *dst, size_t len);
5960
static void rng_fake_update(rng_fake_ctx *cc, const void *src, size_t len);
5961

5962
static const br_prng_class rng_fake_vtable = {
5963
	sizeof(rng_fake_ctx),
5964
	(void (*)(const br_prng_class **,
5965
		const void *, const void *, size_t))&rng_fake_init,
5966
	(void (*)(const br_prng_class **,
5967
		void *, size_t))&rng_fake_generate,
5968
	(void (*)(const br_prng_class **,
5969
		const void *, size_t))&rng_fake_update
5970
};
5971

5972
static void
5973
rng_fake_init(rng_fake_ctx *cc, const void *params,
5974
	const void *seed, size_t len)
5975
{
5976
	(void)params;
5977
	if (len > sizeof cc->buf) {
5978
		fprintf(stderr, "seed is too large (%lu bytes)\n",
5979
			(unsigned long)len);
5980
		exit(EXIT_FAILURE);
5981
	}
5982
	cc->vtable = &rng_fake_vtable;
5983
	memcpy(cc->buf, seed, len);
5984
	cc->ptr = 0;
5985
	cc->len = len;
5986
}
5987

5988
static void
5989
rng_fake_generate(rng_fake_ctx *cc, void *dst, size_t len)
5990
{
5991
	if (len > (cc->len - cc->ptr)) {
5992
		fprintf(stderr, "asking for more data than expected\n");
5993
		exit(EXIT_FAILURE);
5994
	}
5995
	memcpy(dst, cc->buf + cc->ptr, len);
5996
	cc->ptr += len;
5997
}
5998

5999
static void
6000
rng_fake_update(rng_fake_ctx *cc, const void *src, size_t len)
6001
{
6002
	(void)cc;
6003
	(void)src;
6004
	(void)len;
6005
	fprintf(stderr, "unexpected update\n");
6006
	exit(EXIT_FAILURE);
6007
}
6008

6009
/*
6010
 * Test vectors from pkcs-1v2-1d2-vec.zip (originally from ftp.rsa.com).
6011
 * There are ten RSA keys, and for each RSA key, there are 6 messages,
6012
 * each with an explicit salt.
6013
 *
6014
 * Field order:
6015
 *    modulus (n)
6016
 *    public exponent (e)
6017
 *    first factor (p)
6018
 *    second factor (q)
6019
 *    first private exponent (dp)
6020
 *    second private exponent (dq)
6021
 *    CRT coefficient (iq)
6022
 *    message 1
6023
 *    salt 1 (20-byte random value)
6024
 *    signature 1
6025
 *    message 2
6026
 *    salt 2 (20-byte random value)
6027
 *    signature 2
6028
 *    ...
6029
 *    message 6
6030
 *    salt 6 (20-byte random value)
6031
 *    signature 6
6032
 *
6033
 * This pattern is repeated for all keys. The array stops on a NULL.
6034
 */
6035
static const char *KAT_RSA_PSS[] = {
6036

6037
	/* 1024-bit key */
6038
	"a56e4a0e701017589a5187dc7ea841d156f2ec0e36ad52a44dfeb1e61f7ad991d8c51056ffedb162b4c0f283a12a88a394dff526ab7291cbb307ceabfce0b1dfd5cd9508096d5b2b8b6df5d671ef6377c0921cb23c270a70e2598e6ff89d19f105acc2d3f0cb35f29280e1386b6f64c4ef22e1e1f20d0ce8cffb2249bd9a2137",
6039
	"010001",
6040
	"33a5042a90b27d4f5451ca9bbbd0b44771a101af884340aef9885f2a4bbe92e894a724ac3c568c8f97853ad07c0266c8c6a3ca0929f1e8f11231884429fc4d9ae55fee896a10ce707c3ed7e734e44727a39574501a532683109c2abacaba283c31b4bd2f53c3ee37e352cee34f9e503bd80c0622ad79c6dcee883547c6a3b325",
6041
	"e7e8942720a877517273a356053ea2a1bc0c94aa72d55c6e86296b2dfc967948c0a72cbccca7eacb35706e09a1df55a1535bd9b3cc34160b3b6dcd3eda8e6443",
6042
	"b69dca1cf7d4d7ec81e75b90fcca874abcde123fd2700180aa90479b6e48de8d67ed24f9f19d85ba275874f542cd20dc723e6963364a1f9425452b269a6799fd",
6043
	"28fa13938655be1f8a159cbaca5a72ea190c30089e19cd274a556f36c4f6e19f554b34c077790427bbdd8dd3ede2448328f385d81b30e8e43b2fffa027861979",
6044
	"1a8b38f398fa712049898d7fb79ee0a77668791299cdfa09efc0e507acb21ed74301ef5bfd48be455eaeb6e1678255827580a8e4e8e14151d1510a82a3f2e729",
6045
	"27156aba4126d24a81f3a528cbfb27f56886f840a9f6e86e17a44b94fe9319584b8e22fdde1e5a2e3bd8aa5ba8d8584194eb2190acf832b847f13a3d24a79f4d",
6046

6047
	"cdc87da223d786df3b45e0bbbc721326d1ee2af806cc315475cc6f0d9c66e1b62371d45ce2392e1ac92844c310102f156a0d8d52c1f4c40ba3aa65095786cb769757a6563ba958fed0bcc984e8b517a3d5f515b23b8a41e74aa867693f90dfb061a6e86dfaaee64472c00e5f20945729cbebe77f06ce78e08f4098fba41f9d6193c0317e8b60d4b6084acb42d29e3808a3bc372d85e331170fcbf7cc72d0b71c296648b3a4d10f416295d0807aa625cab2744fd9ea8fd223c42537029828bd16be02546f130fd2e33b936d2676e08aed1b73318b750a0167d0",
6048
	"dee959c7e06411361420ff80185ed57f3e6776af",
6049
	"9074308fb598e9701b2294388e52f971faac2b60a5145af185df5287b5ed2887e57ce7fd44dc8634e407c8e0e4360bc226f3ec227f9d9e54638e8d31f5051215df6ebb9c2f9579aa77598a38f914b5b9c1bd83c4e2f9f382a0d0aa3542ffee65984a601bc69eb28deb27dca12c82c2d4c3f66cd500f1ff2b994d8a4e30cbb33c",
6050

6051
	"851384cdfe819c22ed6c4ccb30daeb5cf059bc8e1166b7e3530c4c233e2b5f8f71a1cca582d43ecc72b1bca16dfc7013226b9e",
6052
	"ef2869fa40c346cb183dab3d7bffc98fd56df42d",
6053
	"3ef7f46e831bf92b32274142a585ffcefbdca7b32ae90d10fb0f0c729984f04ef29a9df0780775ce43739b97838390db0a5505e63de927028d9d29b219ca2c4517832558a55d694a6d25b9dab66003c4cccd907802193be5170d26147d37b93590241be51c25055f47ef62752cfbe21418fafe98c22c4d4d47724fdb5669e843",
6054

6055
	"a4b159941761c40c6a82f2b80d1b94f5aa2654fd17e12d588864679b54cd04ef8bd03012be8dc37f4b83af7963faff0dfa225477437c48017ff2be8191cf3955fc07356eab3f322f7f620e21d254e5db4324279fe067e0910e2e81ca2cab31c745e67a54058eb50d993cdb9ed0b4d029c06d21a94ca661c3ce27fae1d6cb20f4564d66ce4767583d0e5f060215b59017be85ea848939127bd8c9c4d47b51056c031cf336f17c9980f3b8f5b9b6878e8b797aa43b882684333e17893fe9caa6aa299f7ed1a18ee2c54864b7b2b99b72618fb02574d139ef50f019c9eef416971338e7d470",
6056
	"710b9c4747d800d4de87f12afdce6df18107cc77",
6057
	"666026fba71bd3e7cf13157cc2c51a8e4aa684af9778f91849f34335d141c00154c4197621f9624a675b5abc22ee7d5baaffaae1c9baca2cc373b3f33e78e6143c395a91aa7faca664eb733afd14d8827259d99a7550faca501ef2b04e33c23aa51f4b9e8282efdb728cc0ab09405a91607c6369961bc8270d2d4f39fce612b1",
6058

6059
	"bc656747fa9eafb3f0",
6060
	"056f00985de14d8ef5cea9e82f8c27bef720335e",
6061
	"4609793b23e9d09362dc21bb47da0b4f3a7622649a47d464019b9aeafe53359c178c91cd58ba6bcb78be0346a7bc637f4b873d4bab38ee661f199634c547a1ad8442e03da015b136e543f7ab07c0c13e4225b8de8cce25d4f6eb8400f81f7e1833b7ee6e334d370964ca79fdb872b4d75223b5eeb08101591fb532d155a6de87",
6062

6063
	"b45581547e5427770c768e8b82b75564e0ea4e9c32594d6bff706544de0a8776c7a80b4576550eee1b2acabc7e8b7d3ef7bb5b03e462c11047eadd00629ae575480ac1470fe046f13a2bf5af17921dc4b0aa8b02bee6334911651d7f8525d10f32b51d33be520d3ddf5a709955a3dfe78283b9e0ab54046d150c177f037fdccc5be4ea5f68b5e5a38c9d7edcccc4975f455a6909b4",
6064
	"80e70ff86a08de3ec60972b39b4fbfdcea67ae8e",
6065
	"1d2aad221ca4d31ddf13509239019398e3d14b32dc34dc5af4aeaea3c095af73479cf0a45e5629635a53a018377615b16cb9b13b3e09d671eb71e387b8545c5960da5a64776e768e82b2c93583bf104c3fdb23512b7b4e89f633dd0063a530db4524b01c3f384c09310e315a79dcd3d684022a7f31c865a664e316978b759fad",
6066

6067
	"10aae9a0ab0b595d0841207b700d48d75faedde3b775cd6b4cc88ae06e4694ec74ba18f8520d4f5ea69cbbe7cc2beba43efdc10215ac4eb32dc302a1f53dc6c4352267e7936cfebf7c8d67035784a3909fa859c7b7b59b8e39c5c2349f1886b705a30267d402f7486ab4f58cad5d69adb17ab8cd0ce1caf5025af4ae24b1fb8794c6070cc09a51e2f9911311e3877d0044c71c57a993395008806b723ac38373d395481818528c1e7053739282053529510e935cd0fa77b8fa53cc2d474bd4fb3cc5c672d6ffdc90a00f9848712c4bcfe46c60573659b11e6457e861f0f604b6138d144f8ce4e2da73",
6068
	"a8ab69dd801f0074c2a1fc60649836c616d99681",
6069
	"2a34f6125e1f6b0bf971e84fbd41c632be8f2c2ace7de8b6926e31ff93e9af987fbc06e51e9be14f5198f91f3f953bd67da60a9df59764c3dc0fe08e1cbef0b75f868d10ad3fba749fef59fb6dac46a0d6e504369331586f58e4628f39aa278982543bc0eeb537dc61958019b394fb273f215858a0a01ac4d650b955c67f4c58",
6070

6071
	/* 1025-bit key */
6072
	"01d40c1bcf97a68ae7cdbd8a7bf3e34fa19dcca4ef75a47454375f94514d88fed006fb829f8419ff87d6315da68a1ff3a0938e9abb3464011c303ad99199cf0c7c7a8b477dce829e8844f625b115e5e9c4a59cf8f8113b6834336a2fd2689b472cbb5e5cabe674350c59b6c17e176874fb42f8fc3d176a017edc61fd326c4b33c9",
6073
	"010001",
6074
	"027d147e4673057377fd1ea201565772176a7dc38358d376045685a2e787c23c15576bc16b9f444402d6bfc5d98a3e88ea13ef67c353eca0c0ddba9255bd7b8bb50a644afdfd1dd51695b252d22e7318d1b6687a1c10ff75545f3db0fe602d5f2b7f294e3601eab7b9d1cecd767f64692e3e536ca2846cb0c2dd486a39fa75b1",
6075
	"016601e926a0f8c9e26ecab769ea65a5e7c52cc9e080ef519457c644da6891c5a104d3ea7955929a22e7c68a7af9fcad777c3ccc2b9e3d3650bce404399b7e59d1",
6076
	"014eafa1d4d0184da7e31f877d1281ddda625664869e8379e67ad3b75eae74a580e9827abd6eb7a002cb5411f5266797768fb8e95ae40e3e8a01f35ff89e56c079",
6077
	"e247cce504939b8f0a36090de200938755e2444b29539a7da7a902f6056835c0db7b52559497cfe2c61a8086d0213c472c78851800b171f6401de2e9c2756f31",
6078
	"b12fba757855e586e46f64c38a70c68b3f548d93d787b399999d4c8f0bbd2581c21e19ed0018a6d5d3df86424b3abcad40199d31495b61309f27c1bf55d487c1",
6079
	"564b1e1fa003bda91e89090425aac05b91da9ee25061e7628d5f51304a84992fdc33762bd378a59f030a334d532bd0dae8f298ea9ed844636ad5fb8cbdc03cad",
6080

6081
	"daba032066263faedb659848115278a52c44faa3a76f37515ed336321072c40a9d9b53bc05014078adf520875146aae70ff060226dcb7b1f1fc27e9360",
6082
	"57bf160bcb02bb1dc7280cf0458530b7d2832ff7",
6083
	"014c5ba5338328ccc6e7a90bf1c0ab3fd606ff4796d3c12e4b639ed9136a5fec6c16d8884bdd99cfdc521456b0742b736868cf90de099adb8d5ffd1deff39ba4007ab746cefdb22d7df0e225f54627dc65466131721b90af445363a8358b9f607642f78fab0ab0f43b7168d64bae70d8827848d8ef1e421c5754ddf42c2589b5b3",
6084

6085
	"e4f8601a8a6da1be34447c0959c058570c3668cfd51dd5f9ccd6ad4411fe8213486d78a6c49f93efc2ca2288cebc2b9b60bd04b1e220d86e3d4848d709d032d1e8c6a070c6af9a499fcf95354b14ba6127c739de1bb0fd16431e46938aec0cf8ad9eb72e832a7035de9b7807bdc0ed8b68eb0f5ac2216be40ce920c0db0eddd3860ed788efaccaca502d8f2bd6d1a7c1f41ff46f1681c8f1f818e9c4f6d91a0c7803ccc63d76a6544d843e084e363b8acc55aa531733edb5dee5b5196e9f03e8b731b3776428d9e457fe3fbcb3db7274442d785890e9cb0854b6444dace791d7273de1889719338a77fe",
6086
	"7f6dd359e604e60870e898e47b19bf2e5a7b2a90",
6087
	"010991656cca182b7f29d2dbc007e7ae0fec158eb6759cb9c45c5ff87c7635dd46d150882f4de1e9ae65e7f7d9018f6836954a47c0a81a8a6b6f83f2944d6081b1aa7c759b254b2c34b691da67cc0226e20b2f18b42212761dcd4b908a62b371b5918c5742af4b537e296917674fb914194761621cc19a41f6fb953fbcbb649dea",
6088

6089
	"52a1d96c8ac39e41e455809801b927a5b445c10d902a0dcd3850d22a66d2bb0703e67d5867114595aabf5a7aeb5a8f87034bbb30e13cfd4817a9be76230023606d0286a3faf8a4d22b728ec518079f9e64526e3a0cc7941aa338c437997c680ccac67c66bfa1",
6090
	"fca862068bce2246724b708a0519da17e648688c",
6091
	"007f0030018f53cdc71f23d03659fde54d4241f758a750b42f185f87578520c30742afd84359b6e6e8d3ed959dc6fe486bedc8e2cf001f63a7abe16256a1b84df0d249fc05d3194ce5f0912742dbbf80dd174f6c51f6bad7f16cf3364eba095a06267dc3793803ac7526aebe0a475d38b8c2247ab51c4898df7047dc6adf52c6c4",
6092

6093
	"a7182c83ac18be6570a106aa9d5c4e3dbbd4afaeb0c60c4a23e1969d79ff",
6094
	"8070ef2de945c02387684ba0d33096732235d440",
6095
	"009cd2f4edbe23e12346ae8c76dd9ad3230a62076141f16c152ba18513a48ef6f010e0e37fd3df10a1ec629a0cb5a3b5d2893007298c30936a95903b6ba85555d9ec3673a06108fd62a2fda56d1ce2e85c4db6b24a81ca3b496c36d4fd06eb7c9166d8e94877c42bea622b3bfe9251fdc21d8d5371badad78a488214796335b40b",
6096

6097
	"86a83d4a72ee932a4f5630af6579a386b78fe88999e0abd2d49034a4bfc854dd94f1094e2e8cd7a179d19588e4aefc1b1bd25e95e3dd461f",
6098
	"17639a4e88d722c4fca24d079a8b29c32433b0c9",
6099
	"00ec430824931ebd3baa43034dae98ba646b8c36013d1671c3cf1cf8260c374b19f8e1cc8d965012405e7e9bf7378612dfcc85fce12cda11f950bd0ba8876740436c1d2595a64a1b32efcfb74a21c873b3cc33aaf4e3dc3953de67f0674c0453b4fd9f604406d441b816098cb106fe3472bc251f815f59db2e4378a3addc181ecf",
6100

6101
	"049f9154d871ac4a7c7ab45325ba7545a1ed08f70525b2667cf1",
6102
	"37810def1055ed922b063df798de5d0aabf886ee",
6103
	"00475b1648f814a8dc0abdc37b5527f543b666bb6e39d30e5b49d3b876dccc58eac14e32a2d55c2616014456ad2f246fc8e3d560da3ddf379a1c0bd200f10221df078c219a151bc8d4ec9d2fc2564467811014ef15d8ea01c2ebbff8c2c8efab38096e55fcbe3285c7aa558851254faffa92c1c72b78758663ef4582843139d7a6",
6104

6105
	/* 1026-bit key */
6106
	"02f246ef451ed3eebb9a310200cc25859c048e4be798302991112eb68ce6db674e280da21feded1ae74880ca522b18db249385012827c515f0e466a1ffa691d98170574e9d0eadb087586ca48933da3cc953d95bd0ed50de10ddcb6736107d6c831c7f663e833ca4c097e700ce0fb945f88fb85fe8e5a773172565b914a471a443",
6107
	"010001",
6108
	"651451733b56de5ac0a689a4aeb6e6894a69014e076c88dd7a667eab3232bbccd2fc44ba2fa9c31db46f21edd1fdb23c5c128a5da5bab91e7f952b67759c7cff705415ac9fa0907c7ca6178f668fb948d869da4cc3b7356f4008dfd5449d32ee02d9a477eb69fc29266e5d9070512375a50fbbcc27e238ad98425f6ebbf88991",
6109
	"01bd36e18ece4b0fdb2e9c9d548bd1a7d6e2c21c6fdc35074a1d05b1c6c8b3d558ea2639c9a9a421680169317252558bd148ad215aac550e2dcf12a82d0ebfe853",
6110
	"01b1b656ad86d8e19d5dc86292b3a192fdf6e0dd37877bad14822fa00190cab265f90d3f02057b6f54d6ecb14491e5adeacebc48bf0ebd2a2ad26d402e54f61651",
6111
	"1f2779fd2e3e5e6bae05539518fba0cd0ead1aa4513a7cba18f1cf10e3f68195693d278a0f0ee72f89f9bc760d80e2f9d0261d516501c6ae39f14a476ce2ccf5",
6112
	"011a0d36794b04a854aab4b2462d439a5046c91d940b2bc6f75b62956fef35a2a6e63c5309817f307bbff9d59e7e331bd363f6d66849b18346adea169f0ae9aec1",
6113
	"0b30f0ecf558752fb3a6ce4ba2b8c675f659eba6c376585a1b39712d038ae3d2b46fcb418ae15d0905da6440e1513a30b9b7d6668fbc5e88e5ab7a175e73ba35",
6114

6115
	"594b37333bbb2c84524a87c1a01f75fcec0e3256f108e38dca36d70d0057",
6116
	"f31ad6c8cf89df78ed77feacbcc2f8b0a8e4cfaa",
6117
	"0088b135fb1794b6b96c4a3e678197f8cac52b64b2fe907d6f27de761124964a99a01a882740ecfaed6c01a47464bb05182313c01338a8cd097214cd68ca103bd57d3bc9e816213e61d784f182467abf8a01cf253e99a156eaa8e3e1f90e3c6e4e3aa2d83ed0345b89fafc9c26077c14b6ac51454fa26e446e3a2f153b2b16797f",
6118

6119
	"8b769528884a0d1ffd090cf102993e796dadcfbddd38e44ff6324ca451",
6120
	"fcf9f0e1f199a3d1d0da681c5b8606fc642939f7",
6121
	"02a5f0a858a0864a4f65017a7d69454f3f973a2999839b7bbc48bf78641169179556f595fa41f6ff18e286c2783079bc0910ee9cc34f49ba681124f923dfa88f426141a368a5f5a930c628c2c3c200e18a7644721a0cbec6dd3f6279bde3e8f2be5e2d4ee56f97e7ceaf33054be7042bd91a63bb09f897bd41e81197dee99b11af",
6122

6123
	"1abdba489c5ada2f995ed16f19d5a94d9e6ec34a8d84f84557d26e5ef9b02b22887e3f9a4b690ad1149209c20c61431f0c017c36c2657b35d7b07d3f5ad8708507a9c1b831df835a56f831071814ea5d3d8d8f6ade40cba38b42db7a2d3d7a29c8f0a79a7838cf58a9757fa2fe4c40df9baa193bfc6f92b123ad57b07ace3e6ac068c9f106afd9eeb03b4f37c25dbfbcfb3071f6f9771766d072f3bb070af6605532973ae25051",
6124
	"986e7c43dbb671bd41b9a7f4b6afc80e805f2423",
6125
	"0244bcd1c8c16955736c803be401272e18cb990811b14f72db964124d5fa760649cbb57afb8755dbb62bf51f466cf23a0a1607576e983d778fceffa92df7548aea8ea4ecad2c29dd9f95bc07fe91ecf8bee255bfe8762fd7690aa9bfa4fa0849ef728c2c42c4532364522df2ab7f9f8a03b63f7a499175828668f5ef5a29e3802c",
6126

6127
	"8fb431f5ee792b6c2ac7db53cc428655aeb32d03f4e889c5c25de683c461b53acf89f9f8d3aabdf6b9f0c2a1de12e15b49edb3919a652fe9491c25a7fce1f722c2543608b69dc375ec",
6128
	"f8312d9c8eea13ec0a4c7b98120c87509087c478",
6129
	"0196f12a005b98129c8df13c4cb16f8aa887d3c40d96df3a88e7532ef39cd992f273abc370bc1be6f097cfebbf0118fd9ef4b927155f3df22b904d90702d1f7ba7a52bed8b8942f412cd7bd676c9d18e170391dcd345c06a730964b3f30bcce0bb20ba106f9ab0eeb39cf8a6607f75c0347f0af79f16afa081d2c92d1ee6f836b8",
6130

6131
	"fef4161dfaaf9c5295051dfc1ff3810c8c9ec2e866f7075422c8ec4216a9c4ff49427d483cae10c8534a41b2fd15fee06960ec6fb3f7a7e94a2f8a2e3e43dc4a40576c3097ac953b1de86f0b4ed36d644f23ae14425529622464ca0cbf0b1741347238157fab59e4de5524096d62baec63ac64",
6132
	"50327efec6292f98019fc67a2a6638563e9b6e2d",
6133
	"021eca3ab4892264ec22411a752d92221076d4e01c0e6f0dde9afd26ba5acf6d739ef987545d16683e5674c9e70f1de649d7e61d48d0caeb4fb4d8b24fba84a6e3108fee7d0705973266ac524b4ad280f7ae17dc59d96d3351586b5a3bdb895d1e1f7820ac6135d8753480998382ba32b7349559608c38745290a85ef4e9f9bd83",
6134

6135
	"efd237bb098a443aeeb2bf6c3f8c81b8c01b7fcb3feb",
6136
	"b0de3fc25b65f5af96b1d5cc3b27d0c6053087b3",
6137
	"012fafec862f56e9e92f60ab0c77824f4299a0ca734ed26e0644d5d222c7f0bde03964f8e70a5cb65ed44e44d56ae0edf1ff86ca032cc5dd4404dbb76ab854586c44eed8336d08d457ce6c03693b45c0f1efef93624b95b8ec169c616d20e5538ebc0b6737a6f82b4bc0570924fc6b35759a3348426279f8b3d7744e2d222426ce",
6138

6139
	/* 1027-bit key */
6140
	"054adb7886447efe6f57e0368f06cf52b0a3370760d161cef126b91be7f89c421b62a6ec1da3c311d75ed50e0ab5fff3fd338acc3aa8a4e77ee26369acb81ba900fa83f5300cf9bb6c53ad1dc8a178b815db4235a9a9da0c06de4e615ea1277ce559e9c108de58c14a81aa77f5a6f8d1335494498848c8b95940740be7bf7c3705",
6141
	"010001",
6142
	"fa041f8cd9697ceed38ec8caa275523b4dd72b09a301d3541d72f5d31c05cbce2d6983b36183af10690bd46c46131e35789431a556771dd0049b57461bf060c1f68472e8a67c25f357e5b6b4738fa541a730346b4a07649a2dfa806a69c975b6aba64678acc7f5913e89c622f2d8abb1e3e32554e39df94ba60c002e387d9011",
6143
	"029232336d2838945dba9dd7723f4e624a05f7375b927a87abe6a893a1658fd49f47f6c7b0fa596c65fa68a23f0ab432962d18d4343bd6fd671a5ea8d148413995",
6144
	"020ef5efe7c5394aed2272f7e81a74f4c02d145894cb1b3cab23a9a0710a2afc7e3329acbb743d01f680c4d02afb4c8fde7e20930811bb2b995788b5e872c20bb1",
6145
	"026e7e28010ecf2412d9523ad704647fb4fe9b66b1a681581b0e15553a89b1542828898f27243ebab45ff5e1acb9d4df1b051fbc62824dbc6f6c93261a78b9a759",
6146
	"012ddcc86ef655998c39ddae11718669e5e46cf1495b07e13b1014cd69b3af68304ad2a6b64321e78bf3bbca9bb494e91d451717e2d97564c6549465d0205cf421",
6147
	"010600c4c21847459fe576703e2ebecae8a5094ee63f536bf4ac68d3c13e5e4f12ac5cc10ab6a2d05a199214d1824747d551909636b774c22cac0b837599abcc75",
6148

6149
	"9fb03b827c8217d9",
6150
	"ed7c98c95f30974fbe4fbddcf0f28d6021c0e91d",
6151
	"0323d5b7bf20ba4539289ae452ae4297080feff4518423ff4811a817837e7d82f1836cdfab54514ff0887bddeebf40bf99b047abc3ecfa6a37a3ef00f4a0c4a88aae0904b745c846c4107e8797723e8ac810d9e3d95dfa30ff4966f4d75d13768d20857f2b1406f264cfe75e27d7652f4b5ed3575f28a702f8c4ed9cf9b2d44948",
6152

6153
	"0ca2ad77797ece86de5bf768750ddb5ed6a3116ad99bbd17edf7f782f0db1cd05b0f677468c5ea420dc116b10e80d110de2b0461ea14a38be68620392e7e893cb4ea9393fb886c20ff790642305bf302003892e54df9f667509dc53920df583f50a3dd61abb6fab75d600377e383e6aca6710eeea27156e06752c94ce25ae99fcbf8592dbe2d7e27453cb44de07100ebb1a2a19811a478adbeab270f94e8fe369d90b3ca612f9f",
6154
	"22d71d54363a4217aa55113f059b3384e3e57e44",
6155
	"049d0185845a264d28feb1e69edaec090609e8e46d93abb38371ce51f4aa65a599bdaaa81d24fba66a08a116cb644f3f1e653d95c89db8bbd5daac2709c8984000178410a7c6aa8667ddc38c741f710ec8665aa9052be929d4e3b16782c1662114c5414bb0353455c392fc28f3db59054b5f365c49e1d156f876ee10cb4fd70598",
6156

6157
	"288062afc08fcdb7c5f8650b29837300461dd5676c17a20a3c8fb5148949e3f73d66b3ae82c7240e27c5b3ec4328ee7d6ddf6a6a0c9b5b15bcda196a9d0c76b119d534d85abd123962d583b76ce9d180bce1ca",
6158
	"4af870fbc6516012ca916c70ba862ac7e8243617",
6159
	"03fbc410a2ced59500fb99f9e2af2781ada74e13145624602782e2994813eefca0519ecd253b855fb626a90d771eae028b0c47a199cbd9f8e3269734af4163599090713a3fa910fa0960652721432b971036a7181a2bc0cab43b0b598bc6217461d7db305ff7e954c5b5bb231c39e791af6bcfa76b147b081321f72641482a2aad",
6160

6161
	"6f4f9ab9501199cef55c6cf408fe7b36c557c49d420a4763d2463c8ad44b3cfc5be2742c0e7d9b0f6608f08c7f47b693ee",
6162
	"40d2e180fae1eac439c190b56c2c0e14ddf9a226",
6163
	"0486644bc66bf75d28335a6179b10851f43f09bded9fac1af33252bb9953ba4298cd6466b27539a70adaa3f89b3db3c74ab635d122f4ee7ce557a61e59b82ffb786630e5f9db53c77d9a0c12fab5958d4c2ce7daa807cd89ba2cc7fcd02ff470ca67b229fcce814c852c73cc93bea35be68459ce478e9d4655d121c8472f371d4f",
6164

6165
	"e17d20385d501955823c3f666254c1d3dd36ad5168b8f18d286fdcf67a7dad94097085fab7ed86fe2142a28771717997ef1a7a08884efc39356d76077aaf82459a7fad45848875f2819b098937fe923bcc9dc442d72d754d812025090c9bc03db3080c138dd63b355d0b4b85d6688ac19f4de15084a0ba4e373b93ef4a555096691915dc23c00e954cdeb20a47cd55d16c3d8681d46ed7f2ed5ea42795be17baed25f0f4d113b3636addd585f16a8b5aec0c8fa9c5f03cbf3b9b73",
6166
	"2497dc2b4615dfae5a663d49ffd56bf7efc11304",
6167
	"022a80045353904cb30cbb542d7d4990421a6eec16a8029a8422adfd22d6aff8c4cc0294af110a0c067ec86a7d364134459bb1ae8ff836d5a8a2579840996b320b19f13a13fad378d931a65625dae2739f0c53670b35d9d3cbac08e733e4ec2b83af4b9196d63e7c4ff1ddeae2a122791a125bfea8deb0de8ccf1f4ffaf6e6fb0a",
6168

6169
	"afbc19d479249018fdf4e09f618726440495de11ddeee38872d775fcea74a23896b5343c9c38d46af0dba224d047580cc60a65e9391cf9b59b36a860598d4e8216722f993b91cfae87bc255af89a6a199bca4a391eadbc3a24903c0bd667368f6be78e3feabfb4ffd463122763740ffbbefeab9a25564bc5d1c24c93e422f75073e2ad72bf45b10df00b52a147128e73fee33fa3f0577d77f80fbc2df1bed313290c12777f50",
6170
	"a334db6faebf11081a04f87c2d621cdec7930b9b",
6171
	"00938dcb6d583046065f69c78da7a1f1757066a7fa75125a9d2929f0b79a60b627b082f11f5b196f28eb9daa6f21c05e5140f6aef1737d2023075c05ecf04a028c686a2ab3e7d5a0664f295ce12995e890908b6ad21f0839eb65b70393a7b5afd9871de0caa0cedec5b819626756209d13ab1e7bb9546a26ff37e9a51af9fd562e",
6172

6173
	/* 1028-bit key */
6174
	"0d10f661f29940f5ed39aa260966deb47843679d2b6fb25b3de370f3ac7c19916391fd25fb527ebfa6a4b4df45a1759d996c4bb4ebd18828c44fc52d0191871740525f47a4b0cc8da325ed8aa676b0d0f626e0a77f07692170acac8082f42faa7dc7cd123e730e31a87985204cabcbe6670d43a2dd2b2ddef5e05392fc213bc507",
6175
	"010001",
6176
	"03ce08b104fff396a979bd3e4e46925b6319ddb63acbcfd819f17d16b8077b3a87101ff34b77fe48b8b205a96e9151ba8ecea64d0cce7b23c3e6a6b83058bc49dae816ae736db5a4708e2ad435232b567f9096ce59ff28061e79ab1c02d717e6b23cea6db8eb5192fa7c1eab227dba74621c45601896eef13792c8440beb15aac1",
6177
	"03f2f331f4142d4f24b43aa10279a89652d4e7537221a1a7b2a25deb551e5de9ac497411c227a94e45f91c2d1c13cc046cf4ce14e32d058734210d44a87ee1b73f",
6178
	"034f090d73b55803030cf0361a5d8081bfb79f851523feac0a2124d08d4013ff08487771a870d0479dc0686c62f7718dfecf024b17c9267678059171339cc00839",
6179
	"02aa663adbf51ab887a018cb426e78bc2fe182dcb2f7bcb50441d17fdf0f06798b5071c6e2f5feb4d54ad8182311c1ef62d4c49f18d1f51f54b2d2cffba4da1be5",
6180
	"02bbe706078b5c0b391512d411db1b199b5a5664b84042ead37fe994ae72b9532dfbfb3e9e6981a0fbb806513141b7c2163fe56c395e4bfaee57e3833f9b918df9",
6181
	"0242b6cd00d30a767aee9a898ead453c8eaea63d500b7d1e00713edae51ce36b23b664df26e63e266ec8f76e6e63ed1ba41eb033b120f7ea5212ae21a98fbc16",
6182

6183
	"30c7d557458b436decfdc14d06cb7b96b06718c48d7de57482a868ae7f065870a6216506d11b779323dfdf046cf5775129134b4d5689e4d9c0ce1e12d7d4b06cb5fc5820decfa41baf59bf257b32f025b7679b445b9499c92555145885992f1b76f84891ee4d3be0f5150fd5901e3a4c8ed43fd36b61d022e65ad5008dbf33293c22bfbfd07321f0f1d5fa9fdf0014c2fcb0358aad0e354b0d29",
6184
	"081b233b43567750bd6e78f396a88b9f6a445151",
6185
	"0ba373f76e0921b70a8fbfe622f0bf77b28a3db98e361051c3d7cb92ad0452915a4de9c01722f6823eeb6adf7e0ca8290f5de3e549890ac2a3c5950ab217ba58590894952de96f8df111b2575215da6c161590c745be612476ee578ed384ab33e3ece97481a252f5c79a98b5532ae00cdd62f2ecc0cd1baefe80d80b962193ec1d",
6186

6187
	"e7b32e1556ea1b2795046ac69739d22ac8966bf11c116f614b166740e96b90653e5750945fcf772186c03790a07fda323e1a61916b06ee2157db3dff80d67d5e39a53ae268c8f09ed99a732005b0bc6a04af4e08d57a00e7201b3060efaadb73113bfc087fd837093aa25235b8c149f56215f031c24ad5bde7f29960df7d524070f7449c6f785084be1a0f733047f336f9154738674547db02a9f44dfc6e60301081e1ce99847f3b5b601ff06b4d5776a9740b9aa0d34058fd3b906e4f7859dfb07d7173e5e6f6350adac21f27b2307469",
6188
	"bd0ce19549d0700120cbe51077dbbbb00a8d8b09",
6189
	"08180de825e4b8b014a32da8ba761555921204f2f90d5f24b712908ff84f3e220ad17997c0dd6e706630ba3e84add4d5e7ab004e58074b549709565d43ad9e97b5a7a1a29e85b9f90f4aafcdf58321de8c5974ef9abf2d526f33c0f2f82e95d158ea6b81f1736db8d1af3d6ac6a83b32d18bae0ff1b2fe27de4c76ed8c7980a34e",
6190

6191
	"8d8396e36507fe1ef6a19017548e0c716674c2fec233adb2f775665ec41f2bd0ba396b061a9daa7e866f7c23fd3531954300a342f924535ea1498c48f6c879932865fc02000c528723b7ad0335745b51209a0afed932af8f0887c219004d2abd894ea92559ee3198af3a734fe9b9638c263a728ad95a5ae8ce3eb15839f3aa7852bb390706e7760e43a71291a2e3f827237deda851874c517665f545f27238df86557f375d09ccd8bd15d8ccf61f5d78ca5c7f5cde782e6bf5d0057056d4bad98b3d2f9575e824ab7a33ff57b0ac100ab0d6ead7aa0b50f6e4d3e5ec0b966b",
6192
	"815779a91b3a8bd049bf2aeb920142772222c9ca",
6193
	"05e0fdbdf6f756ef733185ccfa8ced2eb6d029d9d56e35561b5db8e70257ee6fd019d2f0bbf669fe9b9821e78df6d41e31608d58280f318ee34f559941c8df13287574bac000b7e58dc4f414ba49fb127f9d0f8936638c76e85356c994f79750f7fa3cf4fd482df75e3fb9978cd061f7abb17572e6e63e0bde12cbdcf18c68b979",
6194

6195
	"328c659e0a6437433cceb73c14",
6196
	"9aec4a7480d5bbc42920d7ca235db674989c9aac",
6197
	"0bc989853bc2ea86873271ce183a923ab65e8a53100e6df5d87a24c4194eb797813ee2a187c097dd872d591da60c568605dd7e742d5af4e33b11678ccb63903204a3d080b0902c89aba8868f009c0f1c0cb85810bbdd29121abb8471ff2d39e49fd92d56c655c8e037ad18fafbdc92c95863f7f61ea9efa28fea401369d19daea1",
6198

6199
	"f37b962379a47d415a376eec8973150bcb34edd5ab654041b61430560c2144582ba133c867d852d6b8e23321901302ecb45b09ec88b1527178fa043263f3067d9ffe973032a99f4cb08ad2c7e0a2456cdd57a7df56fe6053527a5aeb67d7e552063c1ca97b1beffa7b39e997caf27878ea0f62cbebc8c21df4c889a202851e949088490c249b6e9acf1d8063f5be2343989bf95c4da01a2be78b4ab6b378015bc37957f76948b5e58e440c28453d40d7cfd57e7d690600474ab5e75973b1ea0c5f1e45d14190afe2f4eb6d3bdf71f1d2f8bb156a1c295d04aaeb9d689dce79ed62bc443e",
6200
	"e20c1e9878512c39970f58375e1549a68b64f31d",
6201
	"0aefa943b698b9609edf898ad22744ac28dc239497cea369cbbd84f65c95c0ad776b594740164b59a739c6ff7c2f07c7c077a86d95238fe51e1fcf33574a4ae0684b42a3f6bf677d91820ca89874467b2c23add77969c80717430d0efc1d3695892ce855cb7f7011630f4df26def8ddf36fc23905f57fa6243a485c770d5681fcd",
6202

6203
	"c6103c330c1ef718c141e47b8fa859be4d5b96259e7d142070ecd485839dba5a8369c17c1114035e532d195c74f44a0476a2d3e8a4da210016caced0e367cb867710a4b5aa2df2b8e5daf5fdc647807d4d5ebb6c56b9763ccdae4dea3308eb0ac2a89501cb209d2639fa5bf87ce790747d3cb2d295e84564f2f637824f0c13028129b0aa4a422d162282",
6204
	"23291e4a3307e8bbb776623ab34e4a5f4cc8a8db",
6205
	"02802dccfa8dfaf5279bf0b4a29ba1b157611faeaaf419b8919d15941900c1339e7e92e6fae562c53e6cc8e84104b110bce03ad18525e3c49a0eadad5d3f28f244a8ed89edbafbb686277cfa8ae909714d6b28f4bf8e293aa04c41efe7c0a81266d5c061e2575be032aa464674ff71626219bd74cc45f0e7ed4e3ff96eee758e8f",
6206

6207
	/* 1029-bit key */
6208
	"164ca31cff609f3a0e7101b039f2e4fe6dd37519ab98598d179e174996598071f47d3a04559158d7be373cf1aa53f0aa6ef09039e5678c2a4c63900514c8c4f8aaed5de12a5f10b09c311af8c0ffb5b7a297f2efc63b8d6b0510931f0b98e48bf5fc6ec4e7b8db1ffaeb08c38e02adb8f03a48229c99e969431f61cb8c4dc698d1",
6209
	"010001",
6210
	"03b664ee3b7566723fc6eaf28abb430a3980f1126c81de8ad709eab39ac9dcd0b1550b3729d87068e952009df544534c1f50829a78f4591eb8fd57140426a6bb0405b6a6f51a57d9267b7bbc653391a699a2a90dac8ae226bcc60fa8cd934c73c7b03b1f6b818158631838a8612e6e6ea92be24f8324faf5b1fd8587225267ba6f",
6211
	"04f0548c9626ab1ebf1244934741d99a06220efa2a5856aa0e75730b2ec96adc86be894fa2803b53a5e85d276acbd29ab823f80a7391bb54a5051672fb04eeb543",
6212
	"0483e0ae47915587743ff345362b555d3962d98bb6f15f848b4c92b1771ca8ed107d8d3ee65ec44517dd0faa481a387e902f7a2e747c269e7ea44480bc538b8e5b",
6213
	"03a8e8aea9920c1aa3b2f0d846e4b850d81ca306a51c83544f949f64f90dcf3f8e2661f07e561220a180388fbe273e70e2e5dca83a0e1348dd6490c731d6ece1ab",
6214
	"0135bdcdb60bf2197c436ed34b32cd8b4fc77778832ba76703551fb242b301699593af77fd8fc394a8526ad23cc41a03806bd897fe4b0ea646558aaddcc99e8a25",
6215
	"0304c03d9c736503a984abbd9ba22301407c4a2ab1dd85766481b60d45401152e692be14f4121d9aa3fd6e0b4d1d3a973538a31d42ee6e1e5ef620231a2bbaf35f",
6216

6217
	"0a20b774addc2fa51245ed7cb9da609e50cac6636a52543f97458eed7340f8d53ffc64918f949078ee03ef60d42b5fec246050bd5505cd8cb597bad3c4e713b0ef30644e76adabb0de01a1561efb255158c74fc801e6e919e581b46f0f0ddd08e4f34c7810b5ed8318f91d7c8c",
6218
	"5b4ea2ef629cc22f3b538e016904b47b1e40bfd5",
6219
	"04c0cfacec04e5badbece159a5a1103f69b3f32ba593cb4cc4b1b7ab455916a96a27cd2678ea0f46ba37f7fc9c86325f29733b389f1d97f43e7201c0f348fc45fe42892335362eee018b5b161f2f9393031225c713012a576bc88e23052489868d9010cbf033ecc568e8bc152bdc59d560e41291915d28565208e22aeec9ef85d1",
6220

6221
	"2aaff6631f621ce615760a9ebce94bb333077ad86488c861d4b76d29c1f48746c611ae1e03ced4445d7cfa1fe5f62e1b3f08452bde3b6ef81973bafbb57f97bceef873985395b8260589aa88cb7db50ab469262e551bdcd9a56f275a0ac4fe484700c35f3dbf2b469ede864741b86fa59172a360ba95a02e139be50ddfb7cf0b42faeabbfbbaa86a4497699c4f2dfd5b08406af7e14144427c253ec0efa20eaf9a8be8cd49ce1f1bc4e93e619cf2aa8ed4fb39bc8590d0f7b96488f7317ac9abf7bee4e3a0e715",
6222
	"83146a9e782722c28b014f98b4267bda2ac9504f",
6223
	"0a2314250cf52b6e4e908de5b35646bcaa24361da8160fb0f9257590ab3ace42b0dc3e77ad2db7c203a20bd952fbb56b1567046ecfaa933d7b1000c3de9ff05b7d989ba46fd43bc4c2d0a3986b7ffa13471d37eb5b47d64707bd290cfd6a9f393ad08ec1e3bd71bb5792615035cdaf2d8929aed3be098379377e777ce79aaa4773",
6224

6225
	"0f6195d04a6e6fc7e2c9600dbf840c39ea8d4d624fd53507016b0e26858a5e0aecd7ada543ae5c0ab3a62599cba0a54e6bf446e262f989978f9ddf5e9a41",
6226
	"a87b8aed07d7b8e2daf14ddca4ac68c4d0aabff8",
6227
	"086df6b500098c120f24ff8423f727d9c61a5c9007d3b6a31ce7cf8f3cbec1a26bb20e2bd4a046793299e03e37a21b40194fb045f90b18bf20a47992ccd799cf9c059c299c0526854954aade8a6ad9d97ec91a1145383f42468b231f4d72f23706d9853c3fa43ce8ace8bfe7484987a1ec6a16c8daf81f7c8bf42774707a9df456",
6228

6229
	"337d25fe9810ebca0de4d4658d3ceb8e0fe4c066aba3bcc48b105d3bf7e0257d44fecea6596f4d0c59a08402833678f70620f9138dfeb7ded905e4a6d5f05c473d55936652e2a5df43c0cfda7bacaf3087f4524b06cf42157d01539739f7fddec9d58125df31a32eab06c19b71f1d5bf",
6230
	"a37932f8a7494a942d6f767438e724d6d0c0ef18",
6231
	"0b5b11ad549863ffa9c51a14a1106c2a72cc8b646e5c7262509786105a984776534ca9b54c1cc64bf2d5a44fd7e8a69db699d5ea52087a4748fd2abc1afed1e5d6f7c89025530bdaa2213d7e030fa55df6f34bcf1ce46d2edf4e3ae4f3b01891a068c9e3a44bbc43133edad6ecb9f35400c4252a5762d65744b99cb9f4c559329f",
6232

6233
	"84ec502b072e8287789d8f9235829ea3b187afd4d4c785611bda5f9eb3cb96717efa7007227f1c08cbcb972e667235e0fb7d431a6570326d2ecce35adb373dc753b3be5f829b89175493193fab16badb41371b3aac0ae670076f24bef420c135add7cee8d35fbc944d79fafb9e307a13b0f556cb654a06f973ed22672330197ef5a748bf826a5db2383a25364b686b9372bb2339aeb1ac9e9889327d016f1670776db06201adbdcaf8a5e3b74e108b73",
6234
	"7b790c1d62f7b84e94df6af28917cf571018110e",
6235
	"02d71fa9b53e4654fefb7f08385cf6b0ae3a817942ebf66c35ac67f0b069952a3ce9c7e1f1b02e480a9500836de5d64cdb7ecde04542f7a79988787e24c2ba05f5fd482c023ed5c30e04839dc44bed2a3a3a4fee01113c891a47d32eb8025c28cb050b5cdb576c70fe76ef523405c08417faf350b037a43c379339fcb18d3a356b",
6236

6237
	"9906d89f97a9fdedd3ccd824db687326f30f00aa25a7fca2afcb3b0f86cd41e73f0e8ff7d2d83f59e28ed31a5a0d551523374de22e4c7e8ff568b386ee3dc41163f10bf67bb006261c9082f9af90bf1d9049a6b9fae71c7f84fbe6e55f02789de774f230f115026a4b4e96c55b04a95da3aacbb2cece8f81764a1f1c99515411087cf7d34aeded0932c183",
6238
	"fbbe059025b69b89fb14ae2289e7aaafe60c0fcd",
6239
	"0a40a16e2fe2b38d1df90546167cf9469c9e3c3681a3442b4b2c2f581deb385ce99fc6188bb02a841d56e76d301891e24560550fcc2a26b55f4ccb26d837d350a154bcaca8392d98fa67959e9727b78cad03269f56968fc56b68bd679926d83cc9cb215550645ccda31c760ff35888943d2d8a1d351e81e5d07b86182e751081ef",
6240

6241
	/* 1030-bit key */
6242
	"37c9da4a66c8c408b8da27d0c9d79f8ccb1eafc1d2fe48746d940b7c4ef5dee18ad12647cefaa0c4b3188b221c515386759b93f02024b25ab9242f8357d8f3fd49640ee5e643eaf6c64deefa7089727c8ff03993333915c6ef21bf5975b6e50d118b51008ec33e9f01a0a545a10a836a43ddbca9d8b5c5d3548022d7064ea29ab3",
6243
	"010001",
6244
	"3bed999052d957bc06d651eef6e3a98094b1621bd38b5449bd6c4aea3de7e084679a4484ded25be0f0826cf3377825414b14d4d61db14de626fbb80e5f4faec956f9a0a2d24f99576380f084eb62e46a57d554278b535626193ce02060575eb66c5798d36f6c5d40fb00d809b42a73102c1c74ee95bd71420fffef6318b52c29",
6245
	"07eefb424b0e3a40e4208ee5afb280b22317308114dde0b4b64f730184ec68da6ce2867a9f48ed7726d5e2614ed04a5410736c8c714ee702474298c6292af07535",
6246
	"070830dbf947eac0228de26314b59b66994cc60e8360e75d3876298f8f8a7d141da064e5ca026a973e28f254738cee669c721b034cb5f8e244dadd7cd1e159d547",
6247
	"0524d20c3d95cff75af2313483227d8702717aa576de155f960515501adb1d70e1c04de91b75b161dbf0398356127ededa7bbc19a32dc1621cc9f53c265d0ce331",
6248
	"05f984a1f23c938d6a0e89724bcf3dd93f9946926037fe7c6b13a29e5284855f89089591d440975627bf5c9e3a8b5ca79c772ad273e40d321af4a6c97dfded78d3",
6249
	"ddd918adada29dcab981ff9acba4257023c09a3801ccce098ce268f855d0df570cd6e7b9b14bd9a5a9254cbc315be6f8ba1e2546ddd569c5ea19eed8353bde5e",
6250

6251
	"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",
6252
	"b7867a59958cb54328f8775e6546ec06d27eaa50",
6253
	"187f390723c8902591f0154bae6d4ecbffe067f0e8b795476ea4f4d51ccc810520bb3ca9bca7d0b1f2ea8a17d873fa27570acd642e3808561cb9e975ccfd80b23dc5771cdb3306a5f23159dacbd3aa2db93d46d766e09ed15d900ad897a8d274dc26b47e994a27e97e2268a766533ae4b5e42a2fcaf755c1c4794b294c60555823",
6254

6255
	"8d80d2d08dbd19c154df3f14673a14bd03735231f24e86bf153d0e69e74cbff7b1836e664de83f680124370fc0f96c9b65c07a366b644c4ab3",
6256
	"0c09582266df086310821ba7e18df64dfee6de09",
6257
	"10fd89768a60a67788abb5856a787c8561f3edcf9a83e898f7dc87ab8cce79429b43e56906941a886194f137e591fe7c339555361fbbe1f24feb2d4bcdb80601f3096bc9132deea60ae13082f44f9ad41cd628936a4d51176e42fc59cb76db815ce5ab4db99a104aafea68f5d330329ebf258d4ede16064bd1d00393d5e1570eb8",
6258

6259
	"808405cdfc1a58b9bb0397c720722a81fffb76278f335917ef9c473814b3e016ba2973cd2765f8f3f82d6cc38aa7f8551827fe8d1e3884b7e61c94683b8f82f1843bdae2257eeec9812ad4c2cf283c34e0b0ae0fe3cb990cf88f2ef9",
6260
	"28039dcfe106d3b8296611258c4a56651c9e92dd",
6261
	"2b31fde99859b977aa09586d8e274662b25a2a640640b457f594051cb1e7f7a911865455242926cf88fe80dfa3a75ba9689844a11e634a82b075afbd69c12a0df9d25f84ad4945df3dc8fe90c3cefdf26e95f0534304b5bdba20d3e5640a2ebfb898aac35ae40f26fce5563c2f9f24f3042af76f3c7072d687bbfb959a88460af1",
6262

6263
	"f337b9bad937de22a1a052dff11134a8ce26976202981939b91e0715ae5e609649da1adfcef3f4cca59b238360e7d1e496c7bf4b204b5acff9bbd6166a1d87a36ef2247373751039f8a800b8399807b3a85f44893497c0d05fb7017b82228152de6f25e6116dcc7503c786c875c28f3aa607e94ab0f19863ab1b5073770b0cd5f533acde30c6fb953cf3da680264e30fc11bff9a19bffab4779b6223c3fb3fe0f71abade4eb7c09c41e24c22d23fa148e6a173feb63984d1bc6ee3a02d915b752ceaf92a3015eceb38ca586c6801b37c34cefb2cff25ea23c08662dcab26a7a93a285d05d3044c",
6264
	"a77821ebbbef24628e4e12e1d0ea96de398f7b0f",
6265
	"32c7ca38ff26949a15000c4ba04b2b13b35a3810e568184d7ecabaa166b7ffabddf2b6cf4ba07124923790f2e5b1a5be040aea36fe132ec130e1f10567982d17ac3e89b8d26c3094034e762d2e031264f01170beecb3d1439e05846f25458367a7d9c02060444672671e64e877864559ca19b2074d588a281b5804d23772fbbe19",
6266

6267
	"45013cebafd960b255476a8e2598b9aa32efbe6dc1f34f4a498d8cf5a2b4548d08c55d5f95f7bcc9619163056f2d58b52fa032",
6268
	"9d5ad8eb452134b65dc3a98b6a73b5f741609cd6",
6269
	"07eb651d75f1b52bc263b2e198336e99fbebc4f332049a922a10815607ee2d989db3a4495b7dccd38f58a211fb7e193171a3d891132437ebca44f318b280509e52b5fa98fcce8205d9697c8ee4b7ff59d4c59c79038a1970bd2a0d451ecdc5ef11d9979c9d35f8c70a6163717607890d586a7c6dc01c79f86a8f28e85235f8c2f1",
6270

6271
	"2358097086c899323e75d9c90d0c09f12d9d54edfbdf70a9c2eb5a04d8f36b9b2bdf2aabe0a5bda1968937f9d6ebd3b6b257efb3136d4131f9acb59b85e2602c2a3fcdc835494a1f4e5ec18b226c80232b36a75a45fdf09a7ea9e98efbde1450d1194bf12e15a4c5f9eb5c0bce5269e0c3b28cfab655d81a61a20b4be2f54459bb25a0db94c52218be109a7426de83014424789aaa90e5056e632a698115e282c1a56410f26c2072f193481a9dcd880572005e64f4082ecf",
6272
	"3f2efc595880a7d47fcf3cba04983ea54c4b73fb",
6273
	"18da3cdcfe79bfb77fd9c32f377ad399146f0a8e810620233271a6e3ed3248903f5cdc92dc79b55d3e11615aa056a795853792a3998c349ca5c457e8ca7d29d796aa24f83491709befcfb1510ea513c92829a3f00b104f655634f320752e130ec0ccf6754ff893db302932bb025eb60e87822598fc619e0e981737a9a4c4152d33",
6274

6275
	/* 1031-bit key */
6276
	"495370a1fb18543c16d3631e3163255df62be6eee890d5f25509e4f778a8ea6fbbbcdf85dff64e0d972003ab3681fbba6dd41fd541829b2e582de9f2a4a4e0a2d0900bef4753db3cee0ee06c7dfae8b1d53b5953218f9cceea695b08668edeaadced9463b1d790d5ebf27e9115b46cad4d9a2b8efab0561b0810344739ada0733f",
6277
	"010001",
6278
	"6c66ffe98980c38fcdeab5159898836165f4b4b817c4f6a8d486ee4ea9130fe9b9092bd136d184f95f504a607eac565846d2fdd6597a8967c7396ef95a6eeebb4578a643966dca4d8ee3de842de63279c618159c1ab54a89437b6a6120e4930afb52a4ba6ced8a4947ac64b30a3497cbe701c2d6266d517219ad0ec6d347dbe9",
6279
	"08dad7f11363faa623d5d6d5e8a319328d82190d7127d2846c439b0ab72619b0a43a95320e4ec34fc3a9cea876422305bd76c5ba7be9e2f410c8060645a1d29edb",
6280
	"0847e732376fc7900f898ea82eb2b0fc418565fdae62f7d9ec4ce2217b97990dd272db157f99f63c0dcbb9fbacdbd4c4dadb6df67756358ca4174825b48f49706d",
6281
	"05c2a83c124b3621a2aa57ea2c3efe035eff4560f33ddebb7adab81fce69a0c8c2edc16520dda83d59a23be867963ac65f2cc710bbcfb96ee103deb771d105fd85",
6282
	"04cae8aa0d9faa165c87b682ec140b8ed3b50b24594b7a3b2c220b3669bb819f984f55310a1ae7823651d4a02e99447972595139363434e5e30a7e7d241551e1b9",
6283
	"07d3e47bf686600b11ac283ce88dbb3f6051e8efd04680e44c171ef531b80b2b7c39fc766320e2cf15d8d99820e96ff30dc69691839c4b40d7b06e45307dc91f3f",
6284

6285
	"81332f4be62948415ea1d899792eeacf6c6e1db1da8be13b5cea41db2fed467092e1ff398914c714259775f595f8547f735692a575e6923af78f22c6997ddb90fb6f72d7bb0dd5744a31decd3dc3685849836ed34aec596304ad11843c4f88489f209735f5fb7fdaf7cec8addc5818168f880acbf490d51005b7a8e84e43e54287977571dd99eea4b161eb2df1f5108f12a4142a83322edb05a75487a3435c9a78ce53ed93bc550857d7a9fb",
6286
	"1d65491d79c864b373009be6f6f2467bac4c78fa",
6287
	"0262ac254bfa77f3c1aca22c5179f8f040422b3c5bafd40a8f21cf0fa5a667ccd5993d42dbafb409c520e25fce2b1ee1e716577f1efa17f3da28052f40f0419b23106d7845aaf01125b698e7a4dfe92d3967bb00c4d0d35ba3552ab9a8b3eef07c7fecdbc5424ac4db1e20cb37d0b2744769940ea907e17fbbca673b20522380c5",
6288

6289
	"e2f96eaf0e05e7ba326ecca0ba7fd2f7c02356f3cede9d0faabf4fcc8e60a973e5595fd9ea08",
6290
	"435c098aa9909eb2377f1248b091b68987ff1838",
6291
	"2707b9ad5115c58c94e932e8ec0a280f56339e44a1b58d4ddcff2f312e5f34dcfe39e89c6a94dcee86dbbdae5b79ba4e0819a9e7bfd9d982e7ee6c86ee68396e8b3a14c9c8f34b178eb741f9d3f121109bf5c8172fada2e768f9ea1433032c004a8aa07eb990000a48dc94c8bac8aabe2b09b1aa46c0a2aa0e12f63fbba775ba7e",
6292

6293
	"e35c6ed98f64a6d5a648fcab8adb16331db32e5d15c74a40edf94c3dc4a4de792d190889f20f1e24ed12054a6b28798fcb42d1c548769b734c96373142092aed277603f4738df4dc1446586d0ec64da4fb60536db2ae17fc7e3c04bbfbbbd907bf117c08636fa16f95f51a6216934d3e34f85030f17bbbc5ba69144058aff081e0b19cf03c17195c5e888ba58f6fe0a02e5c3bda9719a7",
6294
	"c6ebbe76df0c4aea32c474175b2f136862d04529",
6295
	"2ad20509d78cf26d1b6c406146086e4b0c91a91c2bd164c87b966b8faa42aa0ca446022323ba4b1a1b89706d7f4c3be57d7b69702d168ab5955ee290356b8c4a29ed467d547ec23cbadf286ccb5863c6679da467fc9324a151c7ec55aac6db4084f82726825cfe1aa421bc64049fb42f23148f9c25b2dc300437c38d428aa75f96",
6296

6297
	"dbc5f750a7a14be2b93e838d18d14a8695e52e8add9c0ac733b8f56d2747e529a0cca532dd49b902aefed514447f9e81d16195c2853868cb9b30f7d0d495c69d01b5c5d50b27045db3866c2324a44a110b1717746de457d1c8c45c3cd2a92970c3d59632055d4c98a41d6e99e2a3ddd5f7f9979ab3cd18f37505d25141de2a1bff17b3a7dce9419ecc385cf11d72840f19953fd0509251f6cafde2893d0e75c781ba7a5012ca401a4fa99e04b3c3249f926d5afe82cc87dab22c3c1b105de48e34ace9c9124e59597ac7ebf8",
6298
	"021fdcc6ebb5e19b1cb16e9c67f27681657fe20a",
6299
	"1e24e6e58628e5175044a9eb6d837d48af1260b0520e87327de7897ee4d5b9f0df0be3e09ed4dea8c1454ff3423bb08e1793245a9df8bf6ab3968c8eddc3b5328571c77f091cc578576912dfebd164b9de5454fe0be1c1f6385b328360ce67ec7a05f6e30eb45c17c48ac70041d2cab67f0a2ae7aafdcc8d245ea3442a6300ccc7",
6300

6301
	"04dc251be72e88e5723485b6383a637e2fefe07660c519a560b8bc18bdedb86eae2364ea53ba9dca6eb3d2e7d6b806af42b3e87f291b4a8881d5bf572cc9a85e19c86acb28f098f9da0383c566d3c0f58cfd8f395dcf602e5cd40e8c7183f714996e2297ef",
6302
	"c558d7167cbb4508ada042971e71b1377eea4269",
6303
	"33341ba3576a130a50e2a5cf8679224388d5693f5accc235ac95add68e5eb1eec31666d0ca7a1cda6f70a1aa762c05752a51950cdb8af3c5379f18cfe6b5bc55a4648226a15e912ef19ad77adeea911d67cfefd69ba43fa4119135ff642117ba985a7e0100325e9519f1ca6a9216bda055b5785015291125e90dcd07a2ca9673ee",
6304

6305
	"0ea37df9a6fea4a8b610373c24cf390c20fa6e2135c400c8a34f5c183a7e8ea4c9ae090ed31759f42dc77719cca400ecdcc517acfc7ac6902675b2ef30c509665f3321482fc69a9fb570d15e01c845d0d8e50d2a24cbf1cf0e714975a5db7b18d9e9e9cb91b5cb16869060ed18b7b56245503f0caf90352b8de81cb5a1d9c6336092f0cd",
6306
	"76fd4e64fdc98eb927a0403e35a084e76ba9f92a",
6307
	"1ed1d848fb1edb44129bd9b354795af97a069a7a00d0151048593e0c72c3517ff9ff2a41d0cb5a0ac860d736a199704f7cb6a53986a88bbd8abcc0076a2ce847880031525d449da2ac78356374c536e343faa7cba42a5aaa6506087791c06a8e989335aed19bfab2d5e67e27fb0c2875af896c21b6e8e7309d04e4f6727e69463e",
6308

6309
	/* 1536-bit key */
6310
	"e6bd692ac96645790403fdd0f5beb8b9bf92ed10007fc365046419dd06c05c5b5b2f48ecf989e4ce269109979cbb40b4a0ad24d22483d1ee315ad4ccb1534268352691c524f6dd8e6c29d224cf246973aec86c5bf6b1401a850d1b9ad1bb8cbcec47b06f0f8c7f45d3fc8f319299c5433ddbc2b3053b47ded2ecd4a4caefd614833dc8bb622f317ed076b8057fe8de3f84480ad5e83e4a61904a4f248fb397027357e1d30e463139815c6fd4fd5ac5b8172a45230ecb6318a04f1455d84e5a8b",
6311
	"010001",
6312
	"6a7fd84fb85fad073b34406db74f8d61a6abc12196a961dd79565e9da6e5187bce2d980250f7359575359270d91590bb0e427c71460b55d51410b191bcf309fea131a92c8e702738fa719f1e0041f52e40e91f229f4d96a1e6f172e15596b4510a6daec26105f2bebc53316b87bdf21311666070e8dfee69d52c71a976caae79c72b68d28580dc686d9f5129d225f82b3d615513a882b3db91416b48ce08888213e37eeb9af800d81cab328ce420689903c00c7b5fd31b75503a6d419684d629",
6313
	"f8eb97e98df12664eefdb761596a69ddcd0e76daece6ed4bf5a1b50ac086f7928a4d2f8726a77e515b74da41988f220b1cc87aa1fc810ce99a82f2d1ce821edced794c6941f42c7a1a0b8c4d28c75ec60b652279f6154a762aed165d47dee367",
6314
	"ed4d71d0a6e24b93c2e5f6b4bbe05f5fb0afa042d204fe3378d365c2f288b6a8dad7efe45d153eef40cacc7b81ff934002d108994b94a5e4728cd9c963375ae49965bda55cbf0efed8d6553b4027f2d86208a6e6b489c176128092d629e49d3d",
6315
	"2bb68bddfb0c4f56c8558bffaf892d8043037841e7fa81cfa61a38c5e39b901c8ee71122a5da2227bd6cdeeb481452c12ad3d61d5e4f776a0ab556591befe3e59e5a7fddb8345e1f2f35b9f4cee57c32414c086aec993e9353e480d9eec6289f",
6316
	"4ff897709fad079746494578e70fd8546130eeab5627c49b080f05ee4ad9f3e4b7cba9d6a5dff113a41c3409336833f190816d8a6bc42e9bec56b7567d0f3c9c696db619b245d901dd856db7c8092e77e9a1cccd56ee4dba42c5fdb61aec2669",
6317
	"77b9d1137b50404a982729316efafc7dfe66d34e5a182600d5f30a0a8512051c560d081d4d0a1835ec3d25a60f4e4d6aa948b2bf3dbb5b124cbbc3489255a3a948372f6978496745f943e1db4f18382ceaa505dfc65757bb3f857a58dce52156",
6318

6319
	"a88e265855e9d7ca36c68795f0b31b591cd6587c71d060a0b3f7f3eaef43795922028bc2b6ad467cfc2d7f659c5385aa70ba3672cdde4cfe4970cc7904601b278872bf51321c4a972f3c95570f3445d4f57980e0f20df54846e6a52c668f1288c03f95006ea32f562d40d52af9feb32f0fa06db65b588a237b34e592d55cf979f903a642ef64d2ed542aa8c77dc1dd762f45a59303ed75e541ca271e2b60ca709e44fa0661131e8d5d4163fd8d398566ce26de8730e72f9cca737641c244159420637028df0a18079d6208ea8b4711a2c750f5",
6320
	"c0a425313df8d7564bd2434d311523d5257eed80",
6321
	"586107226c3ce013a7c8f04d1a6a2959bb4b8e205ba43a27b50f124111bc35ef589b039f5932187cb696d7d9a32c0c38300a5cdda4834b62d2eb240af33f79d13dfbf095bf599e0d9686948c1964747b67e89c9aba5cd85016236f566cc5802cb13ead51bc7ca6bef3b94dcbdbb1d570469771df0e00b1a8a06777472d2316279edae86474668d4e1efff95f1de61c6020da32ae92bbf16520fef3cf4d88f61121f24bbd9fe91b59caf1235b2a93ff81fc403addf4ebdea84934a9cdaf8e1a9e",
6322

6323
	"c8c9c6af04acda414d227ef23e0820c3732c500dc87275e95b0d095413993c2658bc1d988581ba879c2d201f14cb88ced153a01969a7bf0a7be79c84c1486bc12b3fa6c59871b6827c8ce253ca5fefa8a8c690bf326e8e37cdb96d90a82ebab69f86350e1822e8bd536a2e",
6324
	"b307c43b4850a8dac2f15f32e37839ef8c5c0e91",
6325
	"80b6d643255209f0a456763897ac9ed259d459b49c2887e5882ecb4434cfd66dd7e1699375381e51cd7f554f2c271704b399d42b4be2540a0eca61951f55267f7c2878c122842dadb28b01bd5f8c025f7e228418a673c03d6bc0c736d0a29546bd67f786d9d692ccea778d71d98c2063b7a71092187a4d35af108111d83e83eae46c46aa34277e06044589903788f1d5e7cee25fb485e92949118814d6f2c3ee361489016f327fb5bc517eb50470bffa1afa5f4ce9aa0ce5b8ee19bf5501b958",
6326

6327
	"0afad42ccd4fc60654a55002d228f52a4a5fe03b8bbb08ca82daca558b44dbe1266e50c0e745a36d9d2904e3408abcd1fd569994063f4a75cc72f2fee2a0cd893a43af1c5b8b487df0a71610024e4f6ddf9f28ad0813c1aab91bcb3c9064d5ff742deffea657094139369e5ea6f4a96319a5cc8224145b545062758fefd1fe3409ae169259c6cdfd6b5f2958e314faecbe69d2cace58ee55179ab9b3e6d1ecc14a557c5febe988595264fc5da1c571462eca798a18a1a4940cdab4a3e92009ccd42e1e947b1314e32238a2dece7d23a89b5b30c751fd0a4a430d2c548594",
6328
	"9a2b007e80978bbb192c354eb7da9aedfc74dbf5",
6329
	"484408f3898cd5f53483f80819efbf2708c34d27a8b2a6fae8b322f9240237f981817aca1846f1084daa6d7c0795f6e5bf1af59c38e1858437ce1f7ec419b98c8736adf6dd9a00b1806d2bd3ad0a73775e05f52dfef3a59ab4b08143f0df05cd1ad9d04bececa6daa4a2129803e200cbc77787caf4c1d0663a6c5987b605952019782caf2ec1426d68fb94ed1d4be816a7ed081b77e6ab330b3ffc073820fecde3727fcbe295ee61a050a343658637c3fd659cfb63736de32d9f90d3c2f63eca",
6330

6331
	"1dfd43b46c93db82629bdae2bd0a12b882ea04c3b465f5cf93023f01059626dbbe99f26bb1be949dddd16dc7f3debb19a194627f0b224434df7d8700e9e98b06e360c12fdbe3d19f51c9684eb9089ecbb0a2f0450399d3f59eac7294085d044f5393c6ce737423d8b86c415370d389e30b9f0a3c02d25d0082e8ad6f3f1ef24a45c3cf82b383367063a4d4613e4264f01b2dac2e5aa42043f8fb5f69fa871d14fb273e767a531c40f02f343bc2fb45a0c7e0f6be2561923a77211d66a6e2dbb43c366350beae22da3ac2c1f5077096fcb5c4bf255f7574351ae0b1e1f03632817c0856d4a8ba97afbdc8b85855402bc56926fcec209f9ea8",
6332
	"70f382bddf4d5d2dd88b3bc7b7308be632b84045",
6333
	"84ebeb481be59845b46468bafb471c0112e02b235d84b5d911cbd1926ee5074ae0424495cb20e82308b8ebb65f419a03fb40e72b78981d88aad143053685172c97b29c8b7bf0ae73b5b2263c403da0ed2f80ff7450af7828eb8b86f0028bd2a8b176a4d228cccea18394f238b09ff758cc00bc04301152355742f282b54e663a919e709d8da24ade5500a7b9aa50226e0ca52923e6c2d860ec50ff480fa57477e82b0565f4379f79c772d5c2da80af9fbf325ece6fc20b00961614bee89a183e",
6334

6335
	"1bdc6e7c98fb8cf54e9b097b66a831e9cfe52d9d4888448ee4b0978093ba1d7d73ae78b3a62ba4ad95cd289ccb9e005226bb3d178bccaa821fb044a4e21ee97696c14d0678c94c2dae93b0ad73922218553daa7e44ebe57725a7a45cc72b9b2138a6b17c8db411ce8279ee1241aff0a8bec6f77f87edb0c69cb27236e3435a800b192e4f11e519e3fe30fc30eaccca4fbb41769029bf708e817a9e683805be67fa100984683b74838e3bcffa79366eed1d481c76729118838f31ba8a048a93c1be4424598e8df6328b7a77880a3f9c7e2e8dfca8eb5a26fb86bdc556d42bbe01d9fa6ed80646491c9341",
6336
	"d689257a86effa68212c5e0c619eca295fb91b67",
6337
	"82102df8cb91e7179919a04d26d335d64fbc2f872c44833943241de8454810274cdf3db5f42d423db152af7135f701420e39b494a67cbfd19f9119da233a23da5c6439b5ba0d2bc373eee3507001378d4a4073856b7fe2aba0b5ee93b27f4afec7d4d120921c83f606765b02c19e4d6a1a3b95fa4c422951be4f52131077ef17179729cddfbdb56950dbaceefe78cb16640a099ea56d24389eef10f8fecb31ba3ea3b227c0a86698bb89e3e9363905bf22777b2a3aa521b65b4cef76d83bde4c",
6338

6339
	"88c7a9f1360401d90e53b101b61c5325c3c75db1b411fbeb8e830b75e96b56670ad245404e16793544ee354bc613a90cc9848715a73db5893e7f6d279815c0c1de83ef8e2956e3a56ed26a888d7a9cdcd042f4b16b7fa51ef1a0573662d16a302d0ec5b285d2e03ad96529c87b3d374db372d95b2443d061b6b1a350ba87807ed083afd1eb05c3f52f4eba5ed2227714fdb50b9d9d9dd6814f62f6272fcd5cdbce7a9ef797",
6340
	"c25f13bf67d081671a0481a1f1820d613bba2276",
6341
	"a7fdb0d259165ca2c88d00bbf1028a867d337699d061193b17a9648e14ccbbaadeacaacdec815e7571294ebb8a117af205fa078b47b0712c199e3ad05135c504c24b81705115740802487992ffd511d4afc6b854491eb3f0dd523139542ff15c3101ee85543517c6a3c79417c67e2dd9aa741e9a29b06dcb593c2336b3670ae3afbac7c3e76e215473e866e338ca244de00b62624d6b9426822ceae9f8cc460895f41250073fd45c5a1e7b425c204a423a699159f6903e710b37a7bb2bc8049f",
6342

6343
	/* 2048-bit key */
6344
	"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",
6345
	"010001",
6346
	"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",
6347
	"cfd50283feeeb97f6f08d73cbc7b3836f82bbcd499479f5e6f76fdfcb8b38c4f71dc9e88bd6a6f76371afd65d2af1862b32afb34a95f71b8b132043ffebe3a952baf7592448148c03f9c69b1d68e4ce5cf32c86baf46fed301ca1ab403069b32f456b91f71898ab081cd8c4252ef5271915c9794b8f295851da7510f99cb73eb",
6348
	"cc4e90d2a1b3a065d3b2d1f5a8fce31b544475664eab561d2971b99fb7bef844e8ec1f360b8c2ac8359692971ea6a38f723fcc211f5dbcb177a0fdac5164a1d4ff7fbb4e829986353cb983659a148cdd420c7d31ba3822ea90a32be46c030e8c17e1fa0ad37859e06b0aa6fa3b216d9cbe6c0e22339769c0a615913e5da719cf",
6349
	"1c2d1fc32f6bc4004fd85dfde0fbbf9a4c38f9c7c4e41dea1aa88234a201cd92f3b7da526583a98ad85bb360fb983b711e23449d561d1778d7a515486bcbf47b46c9e9e1a3a1f77000efbeb09a8afe47e5b857cda99cb16d7fff9b712e3bd60ca96d9c7973d616d46934a9c050281c004399ceff1db7dda78766a8a9b9cb0873",
6350
	"cb3b3c04caa58c60be7d9b2debb3e39643f4f57397be08236a1e9eafaa706536e71c3acfe01cc651f23c9e05858fee13bb6a8afc47df4edc9a4ba30bcecb73d0157852327ee789015c2e8dee7b9f05a0f31ac94eb6173164740c5c95147cd5f3b5ae2cb4a83787f01d8ab31f27c2d0eea2dd8a11ab906aba207c43c6ee125331",
6351
	"12f6b2cf1374a736fad05616050f96ab4b61d1177c7f9d525a29f3d180e77667e99d99abf0525d0758660f3752655b0f25b8df8431d9a8ff77c16c12a0a5122a9f0bf7cfd5a266a35c159f991208b90316ff444f3e0b6bd0e93b8a7a2448e957e3dda6cfcf2266b106013ac46808d3b3887b3b00344baac9530b4ce708fc32b6",
6352

6353
	"883177e5126b9be2d9a9680327d5370c6f26861f5820c43da67a3ad609",
6354
	"04e215ee6ff934b9da70d7730c8734abfcecde89",
6355
	"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",
6356

6357
	"dd670a01465868adc93f26131957a50c52fb777cdbaa30892c9e12361164ec13979d43048118e4445db87bee58dd987b3425d02071d8dbae80708b039dbb64dbd1de5657d9fed0c118a54143742e0ff3c87f74e45857647af3f79eb0a14c9d75ea9a1a04b7cf478a897a708fd988f48e801edb0b7039df8c23bb3c56f4e821ac",
6358
	"8b2bdd4b40faf545c778ddf9bc1a49cb57f9b71b",
6359
	"14ae35d9dd06ba92f7f3b897978aed7cd4bf5ff0b585a40bd46ce1b42cd2703053bb9044d64e813d8f96db2dd7007d10118f6f8f8496097ad75e1ff692341b2892ad55a633a1c55e7f0a0ad59a0e203a5b8278aec54dd8622e2831d87174f8caff43ee6c46445345d84a59659bfb92ecd4c818668695f34706f66828a89959637f2bf3e3251c24bdba4d4b7649da0022218b119c84e79a6527ec5b8a5f861c159952e23ec05e1e717346faefe8b1686825bd2b262fb2531066c0de09acde2e4231690728b5d85e115a2f6b92b79c25abc9bd9399ff8bcf825a52ea1f56ea76dd26f43baafa18bfa92a504cbd35699e26d1dcc5a2887385f3c63232f06f3244c3",
6360

6361
	"48b2b6a57a63c84cea859d65c668284b08d96bdcaabe252db0e4a96cb1bac6019341db6fbefb8d106b0e90eda6bcc6c6262f37e7ea9c7e5d226bd7df85ec5e71efff2f54c5db577ff729ff91b842491de2741d0c631607df586b905b23b91af13da12304bf83eca8a73e871ff9db",
6362
	"4e96fc1b398f92b44671010c0dc3efd6e20c2d73",
6363
	"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",
6364

6365
	"0b8777c7f839baf0a64bbbdbc5ce79755c57a205b845c174e2d2e90546a089c4e6ec8adffa23a7ea97bae6b65d782b82db5d2b5a56d22a29a05e7c4433e2b82a621abba90add05ce393fc48a840542451a",
6366
	"c7cd698d84b65128d8835e3a8b1eb0e01cb541ec",
6367
	"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",
6368

6369
	"f1036e008e71e964dadc9219ed30e17f06b4b68a955c16b312b1eddf028b74976bed6b3f6a63d4e77859243c9cccdc98016523abb02483b35591c33aad81213bb7c7bb1a470aabc10d44256c4d4559d916",
6370
	"efa8bff96212b2f4a3f371a10d574152655f5dfb",
6371
	"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",
6372

6373
	"25f10895a87716c137450bb9519dfaa1f207faa942ea88abf71e9c17980085b555aebab76264ae2a3ab93c2d12981191ddac6fb5949eb36aee3c5da940f00752c916d94608fa7d97ba6a2915b688f20323d4e9d96801d89a72ab5892dc2117c07434fcf972e058cf8c41ca4b4ff554f7d5068ad3155fced0f3125bc04f9193378a8f5c4c3b8cb4dd6d1cc69d30ecca6eaa51e36a05730e9e342e855baf099defb8afd7",
6374
	"ad8b1523703646224b660b550885917ca2d1df28",
6375
	"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",
6376

6377
	NULL
6378
};
6379

6380
static void
6381
test_RSA_PSS(const char *name,
6382
	br_rsa_pss_sign sign, br_rsa_pss_vrfy vrfy)
6383
{
6384
	size_t u;
6385

6386
	printf("Test %s: ", name);
6387
	fflush(stdout);
6388

6389
	u = 0;
6390
	while (KAT_RSA_PSS[u] != NULL) {
6391
		unsigned char n[512];
6392
		unsigned char e[8];
6393
		unsigned char d[512];
6394
		unsigned char p[256];
6395
		unsigned char q[256];
6396
		unsigned char dp[256];
6397
		unsigned char dq[256];
6398
		unsigned char iq[256];
6399
		br_rsa_public_key pk;
6400
		br_rsa_private_key sk;
6401
		size_t v;
6402

6403
		pk.n = n;
6404
		pk.nlen = hextobin(n, KAT_RSA_PSS[u ++]);
6405
		pk.e = e;
6406
		pk.elen = hextobin(e, KAT_RSA_PSS[u ++]);
6407

6408
		/*
6409
		 * 'd' is in the test vectors, but we don't use it.
6410
		 */
6411
		hextobin(d, KAT_RSA_PSS[u ++]);
6412

6413
		for (v = 0; n[v] == 0; v ++);
6414
		sk.n_bitlen = BIT_LENGTH(n[v]) + ((pk.nlen - 1 - v) << 3);
6415
		sk.p = p;
6416
		sk.plen = hextobin(p, KAT_RSA_PSS[u ++]);
6417
		sk.q = q;
6418
		sk.qlen = hextobin(q, KAT_RSA_PSS[u ++]);
6419
		sk.dp = dp;
6420
		sk.dplen = hextobin(dp, KAT_RSA_PSS[u ++]);
6421
		sk.dq = dq;
6422
		sk.dqlen = hextobin(dq, KAT_RSA_PSS[u ++]);
6423
		sk.iq = iq;
6424
		sk.iqlen = hextobin(iq, KAT_RSA_PSS[u ++]);
6425

6426
		for (v = 0; v < 6; v ++) {
6427
			unsigned char plain[512], salt[128], sig[512];
6428
			size_t plain_len, salt_len, sig_len;
6429
			rng_fake_ctx rng;
6430
			unsigned char hash[20], tmp[513];
6431
			br_sha1_context sc;
6432

6433
			plain_len = hextobin(plain, KAT_RSA_PSS[u ++]);
6434
			salt_len = hextobin(salt, KAT_RSA_PSS[u ++]);
6435
			sig_len = hextobin(sig, KAT_RSA_PSS[u ++]);
6436

6437
			br_sha1_init(&sc);
6438
			br_sha1_update(&sc, plain, plain_len);
6439
			br_sha1_out(&sc, hash);
6440
			rng_fake_init(&rng, NULL, salt, salt_len);
6441

6442
			memset(tmp, 0, sizeof tmp);
6443
			if (sign(&rng.vtable,
6444
				&br_sha1_vtable, &br_sha1_vtable,
6445
				hash, salt_len, &sk, tmp) != 1)
6446
			{
6447
				fprintf(stderr, "signature failed\n");
6448
			}
6449
			if (rng.ptr != rng.len) {
6450
				fprintf(stderr, "salt not fully consumed\n");
6451
				exit(EXIT_FAILURE);
6452
			}
6453
			check_equals("KAT RSA/PSS sign", tmp, sig, sig_len);
6454

6455
			if (vrfy(sig, sig_len,
6456
				&br_sha1_vtable, &br_sha1_vtable,
6457
				hash, salt_len, &pk) != 1)
6458
			{
6459
				fprintf(stderr, "verification failed\n");
6460
				exit(EXIT_FAILURE);
6461
			}
6462

6463
			sig[sig_len >> 1] ^= 0x01;
6464
			if (vrfy(sig, sig_len,
6465
				&br_sha1_vtable, &br_sha1_vtable,
6466
				hash, salt_len, &pk) != 0)
6467
			{
6468
				fprintf(stderr,
6469
					"verification should have failed\n");
6470
				exit(EXIT_FAILURE);
6471
			}
6472

6473
			printf(".");
6474
			fflush(stdout);
6475
		}
6476
	}
6477

6478
	printf(" done.\n");
6479
	fflush(stdout);
6480
}
6481

6482
/*
6483
 * Test vectors from pkcs-1v2-1d2-vec.zip (originally from ftp.rsa.com).
6484
 * There are ten RSA keys, and for each RSA key, there are 6 messages,
6485
 * each with an explicit seed.
6486
 *
6487
 * Field order:
6488
 *    modulus (n)
6489
 *    public exponent (e)
6490
 *    first factor (p)
6491
 *    second factor (q)
6492
 *    first private exponent (dp)
6493
 *    second private exponent (dq)
6494
 *    CRT coefficient (iq)
6495
 *    cleartext 1
6496
 *    seed 1 (20-byte random value)
6497
 *    ciphertext 1
6498
 *    cleartext 2
6499
 *    seed 2 (20-byte random value)
6500
 *    ciphertext 2
6501
 *    ...
6502
 *    cleartext 6
6503
 *    seed 6 (20-byte random value)
6504
 *    ciphertext 6
6505
 *
6506
 * This pattern is repeated for all keys. The array stops on a NULL.
6507
 */
6508
static const char *KAT_RSA_OAEP[] = {
6509
	/* 1024-bit key, from oeap-int.txt */
6510
	"BBF82F090682CE9C2338AC2B9DA871F7368D07EED41043A440D6B6F07454F51FB8DFBAAF035C02AB61EA48CEEB6FCD4876ED520D60E1EC4619719D8A5B8B807FAFB8E0A3DFC737723EE6B4B7D93A2584EE6A649D060953748834B2454598394EE0AAB12D7B61A51F527A9A41F6C1687FE2537298CA2A8F5946F8E5FD091DBDCB",
6511
	"11",
6512
	"EECFAE81B1B9B3C908810B10A1B5600199EB9F44AEF4FDA493B81A9E3D84F632124EF0236E5D1E3B7E28FAE7AA040A2D5B252176459D1F397541BA2A58FB6599",
6513
	"C97FB1F027F453F6341233EAAAD1D9353F6C42D08866B1D05A0F2035028B9D869840B41666B42E92EA0DA3B43204B5CFCE3352524D0416A5A441E700AF461503",
6514
	"54494CA63EBA0337E4E24023FCD69A5AEB07DDDC0183A4D0AC9B54B051F2B13ED9490975EAB77414FF59C1F7692E9A2E202B38FC910A474174ADC93C1F67C981",
6515
	"471E0290FF0AF0750351B7F878864CA961ADBD3A8A7E991C5C0556A94C3146A7F9803F8F6F8AE342E931FD8AE47A220D1B99A495849807FE39F9245A9836DA3D",
6516
	"B06C4FDABB6301198D265BDBAE9423B380F271F73453885093077FCD39E2119FC98632154F5883B167A967BF402B4E9E2E0F9656E698EA3666EDFB25798039F7",
6517

6518
	/* oaep-int.txt contains only one message, so we repeat it six
6519
	   times to respect our array format. */
6520
	"D436E99569FD32A7C8A05BBC90D32C49",
6521
	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6522
	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6523

6524
	"D436E99569FD32A7C8A05BBC90D32C49",
6525
	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6526
	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6527

6528
	"D436E99569FD32A7C8A05BBC90D32C49",
6529
	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6530
	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6531

6532
	"D436E99569FD32A7C8A05BBC90D32C49",
6533
	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6534
	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6535

6536
	"D436E99569FD32A7C8A05BBC90D32C49",
6537
	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6538
	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6539

6540
	"D436E99569FD32A7C8A05BBC90D32C49",
6541
	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6542
	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6543

6544
	/* 1024-bit key */
6545
	"A8B3B284AF8EB50B387034A860F146C4919F318763CD6C5598C8AE4811A1E0ABC4C7E0B082D693A5E7FCED675CF4668512772C0CBC64A742C6C630F533C8CC72F62AE833C40BF25842E984BB78BDBF97C0107D55BDB662F5C4E0FAB9845CB5148EF7392DD3AAFF93AE1E6B667BB3D4247616D4F5BA10D4CFD226DE88D39F16FB",
6546
	"010001",
6547
	"D32737E7267FFE1341B2D5C0D150A81B586FB3132BED2F8D5262864A9CB9F30AF38BE448598D413A172EFB802C21ACF1C11C520C2F26A471DCAD212EAC7CA39D",
6548
	"CC8853D1D54DA630FAC004F471F281C7B8982D8224A490EDBEB33D3E3D5CC93C4765703D1DD791642F1F116A0DD852BE2419B2AF72BFE9A030E860B0288B5D77",
6549
	"0E12BF1718E9CEF5599BA1C3882FE8046A90874EEFCE8F2CCC20E4F2741FB0A33A3848AEC9C9305FBECBD2D76819967D4671ACC6431E4037968DB37878E695C1",
6550
	"95297B0F95A2FA67D00707D609DFD4FC05C89DAFC2EF6D6EA55BEC771EA333734D9251E79082ECDA866EFEF13C459E1A631386B7E354C899F5F112CA85D71583",
6551
	"4F456C502493BDC0ED2AB756A3A6ED4D67352A697D4216E93212B127A63D5411CE6FA98D5DBEFD73263E3728142743818166ED7DD63687DD2A8CA1D2F4FBD8E1",
6552

6553
	"6628194E12073DB03BA94CDA9EF9532397D50DBA79B987004AFEFE34",
6554
	"18B776EA21069D69776A33E96BAD48E1DDA0A5EF",
6555
	"354FE67B4A126D5D35FE36C777791A3F7BA13DEF484E2D3908AFF722FAD468FB21696DE95D0BE911C2D3174F8AFCC201035F7B6D8E69402DE5451618C21A535FA9D7BFC5B8DD9FC243F8CF927DB31322D6E881EAA91A996170E657A05A266426D98C88003F8477C1227094A0D9FA1E8C4024309CE1ECCCB5210035D47AC72E8A",
6556

6557
	"750C4047F547E8E41411856523298AC9BAE245EFAF1397FBE56F9DD5",
6558
	"0CC742CE4A9B7F32F951BCB251EFD925FE4FE35F",
6559
	"640DB1ACC58E0568FE5407E5F9B701DFF8C3C91E716C536FC7FCEC6CB5B71C1165988D4A279E1577D730FC7A29932E3F00C81515236D8D8E31017A7A09DF4352D904CDEB79AA583ADCC31EA698A4C05283DABA9089BE5491F67C1A4EE48DC74BBBE6643AEF846679B4CB395A352D5ED115912DF696FFE0702932946D71492B44",
6560

6561
	"D94AE0832E6445CE42331CB06D531A82B1DB4BAAD30F746DC916DF24D4E3C2451FFF59A6423EB0E1D02D4FE646CF699DFD818C6E97B051",
6562
	"2514DF4695755A67B288EAF4905C36EEC66FD2FD",
6563
	"423736ED035F6026AF276C35C0B3741B365E5F76CA091B4E8C29E2F0BEFEE603595AA8322D602D2E625E95EB81B2F1C9724E822ECA76DB8618CF09C5343503A4360835B5903BC637E3879FB05E0EF32685D5AEC5067CD7CC96FE4B2670B6EAC3066B1FCF5686B68589AAFB7D629B02D8F8625CA3833624D4800FB081B1CF94EB",
6564

6565
	"52E650D98E7F2A048B4F86852153B97E01DD316F346A19F67A85",
6566
	"C4435A3E1A18A68B6820436290A37CEFB85DB3FB",
6567
	"45EAD4CA551E662C9800F1ACA8283B0525E6ABAE30BE4B4ABA762FA40FD3D38E22ABEFC69794F6EBBBC05DDBB11216247D2F412FD0FBA87C6E3ACD888813646FD0E48E785204F9C3F73D6D8239562722DDDD8771FEC48B83A31EE6F592C4CFD4BC88174F3B13A112AAE3B9F7B80E0FC6F7255BA880DC7D8021E22AD6A85F0755",
6568

6569
	"8DA89FD9E5F974A29FEFFB462B49180F6CF9E802",
6570
	"B318C42DF3BE0F83FEA823F5A7B47ED5E425A3B5",
6571
	"36F6E34D94A8D34DAACBA33A2139D00AD85A9345A86051E73071620056B920E219005855A213A0F23897CDCD731B45257C777FE908202BEFDD0B58386B1244EA0CF539A05D5D10329DA44E13030FD760DCD644CFEF2094D1910D3F433E1C7C6DD18BC1F2DF7F643D662FB9DD37EAD9059190F4FA66CA39E869C4EB449CBDC439",
6572

6573
	"26521050844271",
6574
	"E4EC0982C2336F3A677F6A356174EB0CE887ABC2",
6575
	"42CEE2617B1ECEA4DB3F4829386FBD61DAFBF038E180D837C96366DF24C097B4AB0FAC6BDF590D821C9F10642E681AD05B8D78B378C0F46CE2FAD63F74E0AD3DF06B075D7EB5F5636F8D403B9059CA761B5C62BB52AA45002EA70BAACE08DED243B9D8CBD62A68ADE265832B56564E43A6FA42ED199A099769742DF1539E8255",
6576

6577
	/* 1025-bit key */
6578
	"01947C7FCE90425F47279E70851F25D5E62316FE8A1DF19371E3E628E260543E4901EF6081F68C0B8141190D2AE8DABA7D1250EC6DB636E944EC3722877C7C1D0A67F14B1694C5F0379451A43E49A32DDE83670B73DA91A1C99BC23B436A60055C610F0BAF99C1A079565B95A3F1526632D1D4DA60F20EDA25E653C4F002766F45",
6579
	"010001",
6580
	"0159DBDE04A33EF06FB608B80B190F4D3E22BCC13AC8E4A081033ABFA416EDB0B338AA08B57309EA5A5240E7DC6E54378C69414C31D97DDB1F406DB3769CC41A43",
6581
	"012B652F30403B38B40995FD6FF41A1ACC8ADA70373236B7202D39B2EE30CFB46DB09511F6F307CC61CC21606C18A75B8A62F822DF031BA0DF0DAFD5506F568BD7",
6582
	"436EF508DE736519C2DA4C580D98C82CB7452A3FB5EFADC3B9C7789A1BC6584F795ADDBBD32439C74686552ECB6C2C307A4D3AF7F539EEC157248C7B31F1A255",
6583
	"012B15A89F3DFB2B39073E73F02BDD0C1A7B379DD435F05CDDE2EFF9E462948B7CEC62EE9050D5E0816E0785A856B49108DCB75F3683874D1CA6329A19013066FF",
6584
	"0270DB17D5914B018D76118B24389A7350EC836B0063A21721236FD8EDB6D89B51E7EEB87B611B7132CB7EA7356C23151C1E7751507C786D9EE1794170A8C8E8",
6585

6586
	"8FF00CAA605C702830634D9A6C3D42C652B58CF1D92FEC570BEEE7",
6587
	"8C407B5EC2899E5099C53E8CE793BF94E71B1782",
6588
	"0181AF8922B9FCB4D79D92EBE19815992FC0C1439D8BCD491398A0F4AD3A329A5BD9385560DB532683C8B7DA04E4B12AED6AACDF471C34C9CDA891ADDCC2DF3456653AA6382E9AE59B54455257EB099D562BBE10453F2B6D13C59C02E10F1F8ABB5DA0D0570932DACF2D0901DB729D0FEFCC054E70968EA540C81B04BCAEFE720E",
6589

6590
	"2D",
6591
	"B600CF3C2E506D7F16778C910D3A8B003EEE61D5",
6592
	"018759FF1DF63B2792410562314416A8AEAF2AC634B46F940AB82D64DBF165EEE33011DA749D4BAB6E2FCD18129C9E49277D8453112B429A222A8471B070993998E758861C4D3F6D749D91C4290D332C7A4AB3F7EA35FF3A07D497C955FF0FFC95006B62C6D296810D9BFAB024196C7934012C2DF978EF299ABA239940CBA10245",
6593

6594
	"74FC88C51BC90F77AF9D5E9A4A70133D4B4E0B34DA3C37C7EF8E",
6595
	"A73768AEEAA91F9D8C1ED6F9D2B63467F07CCAE3",
6596
	"018802BAB04C60325E81C4962311F2BE7C2ADCE93041A00719C88F957575F2C79F1B7BC8CED115C706B311C08A2D986CA3B6A9336B147C29C6F229409DDEC651BD1FDD5A0B7F610C9937FDB4A3A762364B8B3206B4EA485FD098D08F63D4AA8BB2697D027B750C32D7F74EAF5180D2E9B66B17CB2FA55523BC280DA10D14BE2053",
6597

6598
	"A7EB2A5036931D27D4E891326D99692FFADDA9BF7EFD3E34E622C4ADC085F721DFE885072C78A203B151739BE540FA8C153A10F00A",
6599
	"9A7B3B0E708BD96F8190ECAB4FB9B2B3805A8156",
6600
	"00A4578CBC176318A638FBA7D01DF15746AF44D4F6CD96D7E7C495CBF425B09C649D32BF886DA48FBAF989A2117187CAFB1FB580317690E3CCD446920B7AF82B31DB5804D87D01514ACBFA9156E782F867F6BED9449E0E9A2C09BCECC6AA087636965E34B3EC766F2FE2E43018A2FDDEB140616A0E9D82E5331024EE0652FC7641",
6601

6602
	"2EF2B066F854C33F3BDCBB5994A435E73D6C6C",
6603
	"EB3CEBBC4ADC16BB48E88C8AEC0E34AF7F427FD3",
6604
	"00EBC5F5FDA77CFDAD3C83641A9025E77D72D8A6FB33A810F5950F8D74C73E8D931E8634D86AB1246256AE07B6005B71B7F2FB98351218331CE69B8FFBDC9DA08BBC9C704F876DEB9DF9FC2EC065CAD87F9090B07ACC17AA7F997B27ACA48806E897F771D95141FE4526D8A5301B678627EFAB707FD40FBEBD6E792A25613E7AEC",
6605

6606
	"8A7FB344C8B6CB2CF2EF1F643F9A3218F6E19BBA89C0",
6607
	"4C45CF4D57C98E3D6D2095ADC51C489EB50DFF84",
6608
	"010839EC20C27B9052E55BEFB9B77E6FC26E9075D7A54378C646ABDF51E445BD5715DE81789F56F1803D9170764A9E93CB78798694023EE7393CE04BC5D8F8C5A52C171D43837E3ACA62F609EB0AA5FFB0960EF04198DD754F57F7FBE6ABF765CF118B4CA443B23B5AAB266F952326AC4581100644325F8B721ACD5D04FF14EF3A",
6609

6610
	/* 2048-bit key */
6611
	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
6612
	"010001",
6613
	"ECF5AECD1E5515FFFACBD75A2816C6EBF49018CDFB4638E185D66A7396B6F8090F8018C7FD95CC34B857DC17F0CC6516BB1346AB4D582CADAD7B4103352387B70338D084047C9D9539B6496204B3DD6EA442499207BEC01F964287FF6336C3984658336846F56E46861881C10233D2176BF15A5E96DDC780BC868AA77D3CE769",
6614
	"BC46C464FC6AC4CA783B0EB08A3C841B772F7E9B2F28BABD588AE885E1A0C61E4858A0FB25AC299990F35BE85164C259BA1175CDD7192707135184992B6C29B746DD0D2CABE142835F7D148CC161524B4A09946D48B828473F1CE76B6CB6886C345C03E05F41D51B5C3A90A3F24073C7D74A4FE25D9CF21C75960F3FC3863183",
6615
	"C73564571D00FB15D08A3DE9957A50915D7126E9442DACF42BC82E862E5673FF6A008ED4D2E374617DF89F17A160B43B7FDA9CB6B6B74218609815F7D45CA263C159AA32D272D127FAF4BC8CA2D77378E8AEB19B0AD7DA3CB3DE0AE7314980F62B6D4B0A875D1DF03C1BAE39CCD833EF6CD7E2D9528BF084D1F969E794E9F6C1",
6616
	"2658B37F6DF9C1030BE1DB68117FA9D87E39EA2B693B7E6D3A2F70947413EEC6142E18FB8DFCB6AC545D7C86A0AD48F8457170F0EFB26BC48126C53EFD1D16920198DC2A1107DC282DB6A80CD3062360BA3FA13F70E4312FF1A6CD6B8FC4CD9C5C3DB17C6D6A57212F73AE29F619327BAD59B153858585BA4E28B60A62A45E49",
6617
	"6F38526B3925085534EF3E415A836EDE8B86158A2C7CBFECCB0BD834304FEC683BA8D4F479C433D43416E63269623CEA100776D85AFF401D3FFF610EE65411CE3B1363D63A9709EEDE42647CEA561493D54570A879C18682CD97710B96205EC31117D73B5F36223FADD6E8BA90DD7C0EE61D44E163251E20C7F66EB305117CB8",
6618

6619
	"8BBA6BF82A6C0F86D5F1756E97956870B08953B06B4EB205BC1694EE",
6620
	"47E1AB7119FEE56C95EE5EAAD86F40D0AA63BD33",
6621
	"53EA5DC08CD260FB3B858567287FA91552C30B2FEBFBA213F0AE87702D068D19BAB07FE574523DFB42139D68C3C5AFEEE0BFE4CB7969CBF382B804D6E61396144E2D0E60741F8993C3014B58B9B1957A8BABCD23AF854F4C356FB1662AA72BFCC7E586559DC4280D160C126785A723EBEEBEFF71F11594440AAEF87D10793A8774A239D4A04C87FE1467B9DAF85208EC6C7255794A96CC29142F9A8BD418E3C1FD67344B0CD0829DF3B2BEC60253196293C6B34D3F75D32F213DD45C6273D505ADF4CCED1057CB758FC26AEEFA441255ED4E64C199EE075E7F16646182FDB464739B68AB5DAFF0E63E9552016824F054BF4D3C8C90A97BB6B6553284EB429FCC",
6622

6623
	"E6AD181F053B58A904F2457510373E57",
6624
	"6D17F5B4C1FFAC351D195BF7B09D09F09A4079CF",
6625
	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
6626

6627
	"510A2CF60E866FA2340553C94EA39FBC256311E83E94454B4124",
6628
	"385387514DECCC7C740DD8CDF9DAEE49A1CBFD54",
6629
	"9886C3E6764A8B9A84E84148EBD8C3B1AA8050381A78F668714C16D9CFD2A6EDC56979C535D9DEE3B44B85C18BE8928992371711472216D95DDA98D2EE8347C9B14DFFDFF84AA48D25AC06F7D7E65398AC967B1CE90925F67DCE049B7F812DB0742997A74D44FE81DBE0E7A3FEAF2E5C40AF888D550DDBBE3BC20657A29543F8FC2913B9BD1A61B2AB2256EC409BBD7DC0D17717EA25C43F42ED27DF8738BF4AFC6766FF7AFF0859555EE283920F4C8A63C4A7340CBAFDDC339ECDB4B0515002F96C932B5B79167AF699C0AD3FCCFDF0F44E85A70262BF2E18FE34B850589975E867FF969D48EABF212271546CDC05A69ECB526E52870C836F307BD798780EDE",
6630

6631
	"BCDD190DA3B7D300DF9A06E22CAAE2A75F10C91FF667B7C16BDE8B53064A2649A94045C9",
6632
	"5CACA6A0F764161A9684F85D92B6E0EF37CA8B65",
6633
	"6318E9FB5C0D05E5307E1683436E903293AC4642358AAA223D7163013ABA87E2DFDA8E60C6860E29A1E92686163EA0B9175F329CA3B131A1EDD3A77759A8B97BAD6A4F8F4396F28CF6F39CA58112E48160D6E203DAA5856F3ACA5FFED577AF499408E3DFD233E3E604DBE34A9C4C9082DE65527CAC6331D29DC80E0508A0FA7122E7F329F6CCA5CFA34D4D1DA417805457E008BEC549E478FF9E12A763C477D15BBB78F5B69BD57830FC2C4ED686D79BC72A95D85F88134C6B0AFE56A8CCFBC855828BB339BD17909CF1D70DE3335AE07039093E606D655365DE6550B872CD6DE1D440EE031B61945F629AD8A353B0D40939E96A3C450D2A8D5EEE9F678093C8",
6634

6635
	"A7DD6C7DC24B46F9DD5F1E91ADA4C3B3DF947E877232A9",
6636
	"95BCA9E3859894B3DD869FA7ECD5BBC6401BF3E4",
6637
	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
6638

6639
	"EAF1A73A1B0C4609537DE69CD9228BBCFB9A8CA8C6C3EFAF056FE4A7F4634ED00B7C39EC6922D7B8EA2C04EBAC",
6640
	"9F47DDF42E97EEA856A9BDBC714EB3AC22F6EB32",
6641
	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
6642

6643
	NULL
6644
};
6645

6646
static void
6647
test_RSA_OAEP(const char *name,
6648
	br_rsa_oaep_encrypt menc, br_rsa_oaep_decrypt mdec)
6649
{
6650
	size_t u;
6651

6652
	printf("Test %s: ", name);
6653
	fflush(stdout);
6654

6655
	u = 0;
6656
	while (KAT_RSA_OAEP[u] != NULL) {
6657
		unsigned char n[512];
6658
		unsigned char e[8];
6659
		unsigned char p[256];
6660
		unsigned char q[256];
6661
		unsigned char dp[256];
6662
		unsigned char dq[256];
6663
		unsigned char iq[256];
6664
		br_rsa_public_key pk;
6665
		br_rsa_private_key sk;
6666
		size_t v;
6667

6668
		pk.n = n;
6669
		pk.nlen = hextobin(n, KAT_RSA_OAEP[u ++]);
6670
		pk.e = e;
6671
		pk.elen = hextobin(e, KAT_RSA_OAEP[u ++]);
6672

6673
		for (v = 0; n[v] == 0; v ++);
6674
		sk.n_bitlen = BIT_LENGTH(n[v]) + ((pk.nlen - 1 - v) << 3);
6675
		sk.p = p;
6676
		sk.plen = hextobin(p, KAT_RSA_OAEP[u ++]);
6677
		sk.q = q;
6678
		sk.qlen = hextobin(q, KAT_RSA_OAEP[u ++]);
6679
		sk.dp = dp;
6680
		sk.dplen = hextobin(dp, KAT_RSA_OAEP[u ++]);
6681
		sk.dq = dq;
6682
		sk.dqlen = hextobin(dq, KAT_RSA_OAEP[u ++]);
6683
		sk.iq = iq;
6684
		sk.iqlen = hextobin(iq, KAT_RSA_OAEP[u ++]);
6685

6686
		for (v = 0; v < 6; v ++) {
6687
			unsigned char plain[512], seed[128], cipher[512];
6688
			size_t plain_len, seed_len, cipher_len;
6689
			rng_fake_ctx rng;
6690
			unsigned char tmp[513];
6691
			size_t len;
6692

6693
			plain_len = hextobin(plain, KAT_RSA_OAEP[u ++]);
6694
			seed_len = hextobin(seed, KAT_RSA_OAEP[u ++]);
6695
			cipher_len = hextobin(cipher, KAT_RSA_OAEP[u ++]);
6696
			rng_fake_init(&rng, NULL, seed, seed_len);
6697

6698
			len = menc(&rng.vtable, &br_sha1_vtable, NULL, 0, &pk,
6699
				tmp, sizeof tmp, plain, plain_len);
6700
			if (len != cipher_len) {
6701
				fprintf(stderr,
6702
					"wrong encrypted length: %lu vs %lu\n",
6703
					(unsigned long)len,
6704
					(unsigned long)cipher_len);
6705
			}
6706
			if (rng.ptr != rng.len) {
6707
				fprintf(stderr, "seed not fully consumed\n");
6708
				exit(EXIT_FAILURE);
6709
			}
6710
			check_equals("KAT RSA/OAEP encrypt", tmp, cipher, len);
6711

6712
			if (mdec(&br_sha1_vtable, NULL, 0,
6713
				&sk, tmp, &len) != 1)
6714
			{
6715
				fprintf(stderr, "decryption failed\n");
6716
				exit(EXIT_FAILURE);
6717
			}
6718
			if (len != plain_len) {
6719
				fprintf(stderr,
6720
					"wrong decrypted length: %lu vs %lu\n",
6721
					(unsigned long)len,
6722
					(unsigned long)plain_len);
6723
			}
6724
			check_equals("KAT RSA/OAEP decrypt", tmp, plain, len);
6725

6726
			/*
6727
			 * Try with a different label; it should fail.
6728
			 */
6729
			memcpy(tmp, cipher, cipher_len);
6730
			len = cipher_len;
6731
			if (mdec(&br_sha1_vtable, "T", 1,
6732
				&sk, tmp, &len) != 0)
6733
			{
6734
				fprintf(stderr, "decryption should have failed"
6735
					" (wrong label)\n");
6736
				exit(EXIT_FAILURE);
6737
			}
6738

6739
			/*
6740
			 * Try with a the wrong length; it should fail.
6741
			 */
6742
			tmp[0] = 0x00;
6743
			memcpy(tmp + 1, cipher, cipher_len);
6744
			len = cipher_len + 1;
6745
			if (mdec(&br_sha1_vtable, "T", 1,
6746
				&sk, tmp, &len) != 0)
6747
			{
6748
				fprintf(stderr, "decryption should have failed"
6749
					" (wrong length)\n");
6750
				exit(EXIT_FAILURE);
6751
			}
6752

6753
			printf(".");
6754
			fflush(stdout);
6755
		}
6756
	}
6757

6758
	printf(" done.\n");
6759
	fflush(stdout);
6760
}
6761

6762
static void
6763
test_RSA_keygen(const char *name, br_rsa_keygen kg, br_rsa_compute_modulus cm,
6764
	br_rsa_compute_pubexp ce, br_rsa_compute_privexp cd,
6765
	br_rsa_public pub, br_rsa_pkcs1_sign sign, br_rsa_pkcs1_vrfy vrfy)
6766
{
6767
	br_hmac_drbg_context rng;
6768
	int i;
6769

6770
	printf("Test %s: ", name);
6771
	fflush(stdout);
6772

6773
	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for RSA keygen", 19);
6774

6775
	for (i = 0; i <= 42; i ++) {
6776
		unsigned size;
6777
		uint32_t pubexp, z;
6778
		br_rsa_private_key sk;
6779
		br_rsa_public_key pk, pk2;
6780
		unsigned char kbuf_priv[BR_RSA_KBUF_PRIV_SIZE(2048)];
6781
		unsigned char kbuf_pub[BR_RSA_KBUF_PUB_SIZE(2048)];
6782
		unsigned char n2[256], d[256], msg1[256], msg2[256];
6783
		uint32_t mod[256];
6784
		uint32_t cc;
6785
		size_t u, v;
6786
		unsigned char sig[257], hv[32], hv2[32];
6787
		unsigned mask1, mask2;
6788
		int j;
6789

6790
		if (i <= 35) {
6791
			size = 1024 + i;
6792
			pubexp = 17;
6793
		} else if (i <= 40) {
6794
			size = 2048;
6795
			pubexp = (i << 1) - 69;
6796
		} else {
6797
			size = 2048;
6798
			pubexp = 0xFFFFFFFF;
6799
		}
6800

6801
		if (!kg(&rng.vtable,
6802
			&sk, kbuf_priv, &pk, kbuf_pub, size, pubexp))
6803
		{
6804
			fprintf(stderr, "RSA key pair generation failure\n");
6805
			exit(EXIT_FAILURE);
6806
		}
6807

6808
		z = pubexp;
6809
		for (u = pk.elen; u > 0; u --) {
6810
			if (pk.e[u - 1] != (z & 0xFF)) {
6811
				fprintf(stderr, "wrong public exponent\n");
6812
				exit(EXIT_FAILURE);
6813
			}
6814
			z >>= 8;
6815
		}
6816
		if (z != 0) {
6817
			fprintf(stderr, "truncated public exponent\n");
6818
			exit(EXIT_FAILURE);
6819
		}
6820

6821
		memset(mod, 0, sizeof mod);
6822
		for (u = 0; u < sk.plen; u ++) {
6823
			for (v = 0; v < sk.qlen; v ++) {
6824
				mod[u + v] += (uint32_t)sk.p[sk.plen - 1 - u]
6825
					* (uint32_t)sk.q[sk.qlen - 1 - v];
6826
			}
6827
		}
6828
		cc = 0;
6829
		for (u = 0; u < sk.plen + sk.qlen; u ++) {
6830
			mod[u] += cc;
6831
			cc = mod[u] >> 8;
6832
			mod[u] &= 0xFF;
6833
		}
6834
		for (u = 0; u < pk.nlen; u ++) {
6835
			if (mod[pk.nlen - 1 - u] != pk.n[u]) {
6836
				fprintf(stderr, "wrong modulus\n");
6837
				exit(EXIT_FAILURE);
6838
			}
6839
		}
6840
		if (sk.n_bitlen != size) {
6841
			fprintf(stderr, "wrong key size\n");
6842
			exit(EXIT_FAILURE);
6843
		}
6844
		if (pk.nlen != (size + 7) >> 3) {
6845
			fprintf(stderr, "wrong modulus size (bytes)\n");
6846
			exit(EXIT_FAILURE);
6847
		}
6848
		mask1 = 0x01 << ((size + 7) & 7);
6849
		mask2 = 0xFF & -mask1;
6850
		if ((pk.n[0] & mask2) != mask1) {
6851
			fprintf(stderr, "wrong modulus size (bits)\n");
6852
			exit(EXIT_FAILURE);
6853
		}
6854

6855
		if (cm(NULL, &sk) != pk.nlen) {
6856
			fprintf(stderr, "wrong recomputed modulus length\n");
6857
			exit(EXIT_FAILURE);
6858
		}
6859
		if (cm(n2, &sk) != pk.nlen || memcmp(pk.n, n2, pk.nlen) != 0) {
6860
			fprintf(stderr, "wrong recomputed modulus value\n");
6861
			exit(EXIT_FAILURE);
6862
		}
6863

6864
		z = ce(&sk);
6865
		if (z != pubexp) {
6866
			fprintf(stderr,
6867
				"wrong recomputed pubexp: %lu (exp: %lu)\n",
6868
				(unsigned long)z, (unsigned long)pubexp);
6869
			exit(EXIT_FAILURE);
6870
		}
6871

6872
		if (cd(NULL, &sk, pubexp) != pk.nlen) {
6873
			fprintf(stderr,
6874
				"wrong recomputed privexp length (1)\n");
6875
			exit(EXIT_FAILURE);
6876
		}
6877
		if (cd(d, &sk, pubexp) != pk.nlen) {
6878
			fprintf(stderr,
6879
				"wrong recomputed privexp length (2)\n");
6880
			exit(EXIT_FAILURE);
6881
		}
6882
		/*
6883
		 * To check that the private exponent is correct, we make
6884
		 * it into a _public_ key, and use the public-key operation
6885
		 * to perform the modular exponentiation.
6886
		 */
6887
		pk2 = pk;
6888
		pk2.e = d;
6889
		pk2.elen = pk.nlen;
6890
		rng.vtable->generate(&rng.vtable, msg1, pk.nlen);
6891
		msg1[0] = 0x00;
6892
		memcpy(msg2, msg1, pk.nlen);
6893
		if (!pub(msg2, pk.nlen, &pk2) || !pub(msg2, pk.nlen, &pk)) {
6894
			fprintf(stderr, "public-key operation error\n");
6895
			exit(EXIT_FAILURE);
6896
		}
6897
		if (memcmp(msg1, msg2, pk.nlen) != 0) {
6898
			fprintf(stderr, "wrong recomputed privexp\n");
6899
			exit(EXIT_FAILURE);
6900
		}
6901

6902
		/*
6903
		 * We test the RSA operation over a some random messages.
6904
		 */
6905
		for (j = 0; j < 20; j ++) {
6906
			rng.vtable->generate(&rng.vtable, hv, sizeof hv);
6907
			memset(sig, 0, sizeof sig);
6908
			sig[pk.nlen] = 0x00;
6909
			if (!sign(BR_HASH_OID_SHA256,
6910
				hv, sizeof hv, &sk, sig))
6911
			{
6912
				fprintf(stderr,
6913
					"signature error (%d)\n", j);
6914
				exit(EXIT_FAILURE);
6915
			}
6916
			if (sig[pk.nlen] != 0x00) {
6917
				fprintf(stderr,
6918
					"signature length error (%d)\n", j);
6919
				exit(EXIT_FAILURE);
6920
			}
6921
			if (!vrfy(sig, pk.nlen, BR_HASH_OID_SHA256, sizeof hv,
6922
				&pk, hv2))
6923
			{
6924
				fprintf(stderr,
6925
					"signature verif error (%d)\n", j);
6926
				exit(EXIT_FAILURE);
6927
			}
6928
			if (memcmp(hv, hv2, sizeof hv) != 0) {
6929
				fprintf(stderr,
6930
					"signature extract error (%d)\n", j);
6931
				exit(EXIT_FAILURE);
6932
			}
6933
		}
6934

6935
		printf(".");
6936
		fflush(stdout);
6937
	}
6938

6939
	printf(" done.\n");
6940
	fflush(stdout);
6941
}
6942

6943
static void
6944
test_RSA_i15(void)
6945
{
6946
	test_RSA_core("RSA i15 core", &br_rsa_i15_public, &br_rsa_i15_private);
6947
	test_RSA_sign("RSA i15 sign", &br_rsa_i15_private,
6948
		&br_rsa_i15_pkcs1_sign, &br_rsa_i15_pkcs1_vrfy);
6949
	test_RSA_OAEP("RSA i15 OAEP",
6950
		&br_rsa_i15_oaep_encrypt, &br_rsa_i15_oaep_decrypt);
6951
	test_RSA_PSS("RSA i15 PSS",
6952
		&br_rsa_i15_pss_sign, &br_rsa_i15_pss_vrfy);
6953
	test_RSA_keygen("RSA i15 keygen", &br_rsa_i15_keygen,
6954
		&br_rsa_i15_compute_modulus, &br_rsa_i15_compute_pubexp,
6955
		&br_rsa_i15_compute_privexp, &br_rsa_i15_public,
6956
		&br_rsa_i15_pkcs1_sign, &br_rsa_i15_pkcs1_vrfy);
6957
}
6958

6959
static void
6960
test_RSA_i31(void)
6961
{
6962
	test_RSA_core("RSA i31 core", &br_rsa_i31_public, &br_rsa_i31_private);
6963
	test_RSA_sign("RSA i31 sign", &br_rsa_i31_private,
6964
		&br_rsa_i31_pkcs1_sign, &br_rsa_i31_pkcs1_vrfy);
6965
	test_RSA_OAEP("RSA i31 OAEP",
6966
		&br_rsa_i31_oaep_encrypt, &br_rsa_i31_oaep_decrypt);
6967
	test_RSA_PSS("RSA i31 PSS",
6968
		&br_rsa_i31_pss_sign, &br_rsa_i31_pss_vrfy);
6969
	test_RSA_keygen("RSA i31 keygen", &br_rsa_i31_keygen,
6970
		&br_rsa_i31_compute_modulus, &br_rsa_i31_compute_pubexp,
6971
		&br_rsa_i31_compute_privexp, &br_rsa_i31_public,
6972
		&br_rsa_i31_pkcs1_sign, &br_rsa_i31_pkcs1_vrfy);
6973
}
6974

6975
static void
6976
test_RSA_i32(void)
6977
{
6978
	test_RSA_core("RSA i32 core", &br_rsa_i32_public, &br_rsa_i32_private);
6979
	test_RSA_sign("RSA i32 sign", &br_rsa_i32_private,
6980
		&br_rsa_i32_pkcs1_sign, &br_rsa_i32_pkcs1_vrfy);
6981
	test_RSA_OAEP("RSA i32 OAEP",
6982
		&br_rsa_i32_oaep_encrypt, &br_rsa_i32_oaep_decrypt);
6983
	test_RSA_PSS("RSA i32 PSS",
6984
		&br_rsa_i32_pss_sign, &br_rsa_i32_pss_vrfy);
6985
}
6986

6987
static void
6988
test_RSA_i62(void)
6989
{
6990
	br_rsa_public pub;
6991
	br_rsa_private priv;
6992
	br_rsa_pkcs1_sign sign;
6993
	br_rsa_pkcs1_vrfy vrfy;
6994
	br_rsa_pss_sign pss_sign;
6995
	br_rsa_pss_vrfy pss_vrfy;
6996
	br_rsa_oaep_encrypt menc;
6997
	br_rsa_oaep_decrypt mdec;
6998
	br_rsa_keygen kgen;
6999

7000
	pub = br_rsa_i62_public_get();
7001
	priv = br_rsa_i62_private_get();
7002
	sign = br_rsa_i62_pkcs1_sign_get();
7003
	vrfy = br_rsa_i62_pkcs1_vrfy_get();
7004
	pss_sign = br_rsa_i62_pss_sign_get();
7005
	pss_vrfy = br_rsa_i62_pss_vrfy_get();
7006
	menc = br_rsa_i62_oaep_encrypt_get();
7007
	mdec = br_rsa_i62_oaep_decrypt_get();
7008
	kgen = br_rsa_i62_keygen_get();
7009
	if (pub) {
7010
		if (!priv || !sign || !vrfy || !pss_sign || !pss_vrfy
7011
			|| !menc || !mdec || !kgen)
7012
		{
7013
			fprintf(stderr, "Inconsistent i62 availability\n");
7014
			exit(EXIT_FAILURE);
7015
		}
7016
		test_RSA_core("RSA i62 core", pub, priv);
7017
		test_RSA_sign("RSA i62 sign", priv, sign, vrfy);
7018
		test_RSA_OAEP("RSA i62 OAEP", menc, mdec);
7019
		test_RSA_PSS("RSA i62 PSS", pss_sign, pss_vrfy);
7020
		test_RSA_keygen("RSA i62 keygen", kgen,
7021
			&br_rsa_i31_compute_modulus, &br_rsa_i31_compute_pubexp,
7022
			&br_rsa_i31_compute_privexp, pub,
7023
			sign, vrfy);
7024
	} else {
7025
		if (priv || sign || vrfy || pss_sign || pss_vrfy
7026
			|| menc || mdec || kgen)
7027
		{
7028
			fprintf(stderr, "Inconsistent i62 availability\n");
7029
			exit(EXIT_FAILURE);
7030
		}
7031
		printf("Test RSA i62: UNAVAILABLE\n");
7032
	}
7033
}
7034

7035
#if 0
7036
static void
7037
test_RSA_signatures(void)
7038
{
7039
	uint32_t n[40], e[2], p[20], q[20], dp[20], dq[20], iq[20], x[40];
7040
	unsigned char hv[20], sig[128];
7041
	unsigned char ref[128], tmp[128];
7042
	br_sha1_context hc;
7043

7044
	printf("Test RSA signatures: ");
7045
	fflush(stdout);
7046

7047
	/*
7048
	 * Decode RSA key elements.
7049
	 */
7050
	br_int_decode(n, sizeof n / sizeof n[0], RSA_N, sizeof RSA_N);
7051
	br_int_decode(e, sizeof e / sizeof e[0], RSA_E, sizeof RSA_E);
7052
	br_int_decode(p, sizeof p / sizeof p[0], RSA_P, sizeof RSA_P);
7053
	br_int_decode(q, sizeof q / sizeof q[0], RSA_Q, sizeof RSA_Q);
7054
	br_int_decode(dp, sizeof dp / sizeof dp[0], RSA_DP, sizeof RSA_DP);
7055
	br_int_decode(dq, sizeof dq / sizeof dq[0], RSA_DQ, sizeof RSA_DQ);
7056
	br_int_decode(iq, sizeof iq / sizeof iq[0], RSA_IQ, sizeof RSA_IQ);
7057

7058
	/*
7059
	 * Decode reference signature (computed with OpenSSL).
7060
	 */
7061
	hextobin(ref, "45A3DC6A106BCD3BD0E48FB579643AA3FF801E5903E80AA9B43A695A8E7F454E93FA208B69995FF7A6D5617C2FEB8E546375A664977A48931842AAE796B5A0D64393DCA35F3490FC157F5BD83B9D58C2F7926E6AE648A2BD96CAB8FCCD3D35BB11424AD47D973FF6D69CA774841AEC45DFAE99CCF79893E7047FDE6CB00AA76D");
7062

7063
	/*
7064
	 * Recompute signature. Since PKCS#1 v1.5 signatures are
7065
	 * deterministic, we should get the same as the reference signature.
7066
	 */
7067
	br_sha1_init(&hc);
7068
	br_sha1_update(&hc, "test", 4);
7069
	br_sha1_out(&hc, hv);
7070
	if (!br_rsa_sign(sig, sizeof sig, p, q, dp, dq, iq, br_sha1_ID, hv)) {
7071
		fprintf(stderr, "RSA-1024/SHA-1 sig generate failed\n");
7072
		exit(EXIT_FAILURE);
7073
	}
7074
	check_equals("KAT RSA-sign 1", sig, ref, sizeof sig);
7075

7076
	/*
7077
	 * Verify signature.
7078
	 */
7079
	if (!br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7080
		fprintf(stderr, "RSA-1024/SHA-1 sig verify failed\n");
7081
		exit(EXIT_FAILURE);
7082
	}
7083
	hv[5] ^= 0x01;
7084
	if (br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7085
		fprintf(stderr, "RSA-1024/SHA-1 sig verify should have failed\n");
7086
		exit(EXIT_FAILURE);
7087
	}
7088
	hv[5] ^= 0x01;
7089

7090
	/*
7091
	 * Generate a signature with the alternate encoding (no NULL) and
7092
	 * verify it.
7093
	 */
7094
	hextobin(tmp, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00301F300706052B0E03021A0414A94A8FE5CCB19BA61C4C0873D391E987982FBBD3");
7095
	br_int_decode(x, sizeof x / sizeof x[0], tmp, sizeof tmp);
7096
	x[0] = n[0];
7097
	br_rsa_private_core(x, p, q, dp, dq, iq);
7098
	br_int_encode(sig, sizeof sig, x);
7099
	if (!br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7100
		fprintf(stderr, "RSA-1024/SHA-1 sig verify (alt) failed\n");
7101
		exit(EXIT_FAILURE);
7102
	}
7103
	hv[5] ^= 0x01;
7104
	if (br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7105
		fprintf(stderr, "RSA-1024/SHA-1 sig verify (alt) should have failed\n");
7106
		exit(EXIT_FAILURE);
7107
	}
7108
	hv[5] ^= 0x01;
7109

7110
	printf("done.\n");
7111
	fflush(stdout);
7112
}
7113
#endif
7114

7115
/*
7116
 * From: http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf
7117
 */
7118
static const char *const KAT_GHASH[] = {
7119

7120
	"66e94bd4ef8a2c3b884cfa59ca342b2e",
7121
	"",
7122
	"",
7123
	"00000000000000000000000000000000",
7124

7125
	"66e94bd4ef8a2c3b884cfa59ca342b2e",
7126
	"",
7127
	"0388dace60b6a392f328c2b971b2fe78",
7128
	"f38cbb1ad69223dcc3457ae5b6b0f885",
7129

7130
	"b83b533708bf535d0aa6e52980d53b78",
7131
	"",
7132
	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091473f5985",
7133
	"7f1b32b81b820d02614f8895ac1d4eac",
7134

7135
	"b83b533708bf535d0aa6e52980d53b78",
7136
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7137
	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091",
7138
	"698e57f70e6ecc7fd9463b7260a9ae5f",
7139

7140
	"b83b533708bf535d0aa6e52980d53b78",
7141
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7142
	"61353b4c2806934a777ff51fa22a4755699b2a714fcdc6f83766e5f97b6c742373806900e49f24b22b097544d4896b424989b5e1ebac0f07c23f4598",
7143
	"df586bb4c249b92cb6922877e444d37b",
7144

7145
	"b83b533708bf535d0aa6e52980d53b78",
7146
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7147
	"8ce24998625615b603a033aca13fb894be9112a5c3a211a8ba262a3cca7e2ca701e4a9a4fba43c90ccdcb281d48c7c6fd62875d2aca417034c34aee5",
7148
	"1c5afe9760d3932f3c9a878aac3dc3de",
7149

7150
	"aae06992acbf52a3e8f4a96ec9300bd7",
7151
	"",
7152
	"98e7247c07f0fe411c267e4384b0f600",
7153
	"e2c63f0ac44ad0e02efa05ab6743d4ce",
7154

7155
	"466923ec9ae682214f2c082badb39249",
7156
	"",
7157
	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade256",
7158
	"51110d40f6c8fff0eb1ae33445a889f0",
7159

7160
	"466923ec9ae682214f2c082badb39249",
7161
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7162
	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710",
7163
	"ed2ce3062e4a8ec06db8b4c490e8a268",
7164

7165
	"466923ec9ae682214f2c082badb39249",
7166
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7167
	"0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f7",
7168
	"1e6a133806607858ee80eaf237064089",
7169

7170
	"466923ec9ae682214f2c082badb39249",
7171
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7172
	"d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373b",
7173
	"82567fb0b4cc371801eadec005968e94",
7174

7175
	"dc95c078a2408989ad48a21492842087",
7176
	"",
7177
	"cea7403d4d606b6e074ec5d3baf39d18",
7178
	"83de425c5edc5d498f382c441041ca92",
7179

7180
	"acbef20579b4b8ebce889bac8732dad7",
7181
	"",
7182
	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015ad",
7183
	"4db870d37cb75fcb46097c36230d1612",
7184

7185
	"acbef20579b4b8ebce889bac8732dad7",
7186
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7187
	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662",
7188
	"8bd0c4d8aacd391e67cca447e8c38f65",
7189

7190
	"acbef20579b4b8ebce889bac8732dad7",
7191
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7192
	"c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f",
7193
	"75a34288b8c68f811c52b2e9a2f97f63",
7194

7195
	"acbef20579b4b8ebce889bac8732dad7",
7196
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7197
	"5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3f",
7198
	"d5ffcf6fc5ac4d69722187421a7f170b",
7199

7200
	NULL,
7201
};
7202

7203
static void
7204
test_GHASH(const char *name, br_ghash gh)
7205
{
7206
	size_t u;
7207

7208
	printf("Test %s: ", name);
7209
	fflush(stdout);
7210

7211
	for (u = 0; KAT_GHASH[u]; u += 4) {
7212
		unsigned char h[16];
7213
		unsigned char a[100];
7214
		size_t a_len;
7215
		unsigned char c[100];
7216
		size_t c_len;
7217
		unsigned char p[16];
7218
		unsigned char y[16];
7219
		unsigned char ref[16];
7220

7221
		hextobin(h, KAT_GHASH[u]);
7222
		a_len = hextobin(a, KAT_GHASH[u + 1]);
7223
		c_len = hextobin(c, KAT_GHASH[u + 2]);
7224
		hextobin(ref, KAT_GHASH[u + 3]);
7225
		memset(y, 0, sizeof y);
7226
		gh(y, h, a, a_len);
7227
		gh(y, h, c, c_len);
7228
		memset(p, 0, sizeof p);
7229
		br_enc32be(p + 4, (uint32_t)a_len << 3);
7230
		br_enc32be(p + 12, (uint32_t)c_len << 3);
7231
		gh(y, h, p, sizeof p);
7232
		check_equals("KAT GHASH", y, ref, sizeof ref);
7233
	}
7234

7235
	for (u = 0; u <= 1024; u ++) {
7236
		unsigned char key[32], iv[12];
7237
		unsigned char buf[1024 + 32];
7238
		unsigned char y0[16], y1[16];
7239
		char tmp[100];
7240

7241
		memset(key, 0, sizeof key);
7242
		memset(iv, 0, sizeof iv);
7243
		br_enc32be(key, u);
7244
		memset(buf, 0, sizeof buf);
7245
		br_chacha20_ct_run(key, iv, 1, buf, sizeof buf);
7246

7247
		memcpy(y0, buf, 16);
7248
		br_ghash_ctmul32(y0, buf + 16, buf + 32, u);
7249
		memcpy(y1, buf, 16);
7250
		gh(y1, buf + 16, buf + 32, u);
7251
		sprintf(tmp, "XREF %s (len = %u)", name, (unsigned)u);
7252
		check_equals(tmp, y0, y1, 16);
7253

7254
		if ((u & 31) == 0) {
7255
			printf(".");
7256
			fflush(stdout);
7257
		}
7258
	}
7259

7260
	printf("done.\n");
7261
	fflush(stdout);
7262
}
7263

7264
static void
7265
test_GHASH_ctmul(void)
7266
{
7267
	test_GHASH("GHASH_ctmul", br_ghash_ctmul);
7268
}
7269

7270
static void
7271
test_GHASH_ctmul32(void)
7272
{
7273
	test_GHASH("GHASH_ctmul32", br_ghash_ctmul32);
7274
}
7275

7276
static void
7277
test_GHASH_ctmul64(void)
7278
{
7279
	test_GHASH("GHASH_ctmul64", br_ghash_ctmul64);
7280
}
7281

7282
static void
7283
test_GHASH_pclmul(void)
7284
{
7285
	br_ghash gh;
7286

7287
	gh = br_ghash_pclmul_get();
7288
	if (gh == 0) {
7289
		printf("Test GHASH_pclmul: UNAVAILABLE\n");
7290
	} else {
7291
		test_GHASH("GHASH_pclmul", gh);
7292
	}
7293
}
7294

7295
static void
7296
test_GHASH_pwr8(void)
7297
{
7298
	br_ghash gh;
7299

7300
	gh = br_ghash_pwr8_get();
7301
	if (gh == 0) {
7302
		printf("Test GHASH_pwr8: UNAVAILABLE\n");
7303
	} else {
7304
		test_GHASH("GHASH_pwr8", gh);
7305
	}
7306
}
7307

7308
/*
7309
 * From: http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf
7310
 *
7311
 * Order: key, plaintext, AAD, IV, ciphertext, tag
7312
 */
7313
static const char *const KAT_GCM[] = {
7314
	"00000000000000000000000000000000",
7315
	"",
7316
	"",
7317
	"000000000000000000000000",
7318
	"",
7319
	"58e2fccefa7e3061367f1d57a4e7455a",
7320

7321
	"00000000000000000000000000000000",
7322
	"00000000000000000000000000000000",
7323
	"",
7324
	"000000000000000000000000",
7325
	"0388dace60b6a392f328c2b971b2fe78",
7326
	"ab6e47d42cec13bdf53a67b21257bddf",
7327

7328
	"feffe9928665731c6d6a8f9467308308",
7329
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255",
7330
	"",
7331
	"cafebabefacedbaddecaf888",
7332
	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091473f5985",
7333
	"4d5c2af327cd64a62cf35abd2ba6fab4",
7334

7335
	"feffe9928665731c6d6a8f9467308308",
7336
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7337
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7338
	"cafebabefacedbaddecaf888",
7339
	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091",
7340
	"5bc94fbc3221a5db94fae95ae7121a47",
7341

7342
	"feffe9928665731c6d6a8f9467308308",
7343
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7344
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7345
	"cafebabefacedbad",
7346
	"61353b4c2806934a777ff51fa22a4755699b2a714fcdc6f83766e5f97b6c742373806900e49f24b22b097544d4896b424989b5e1ebac0f07c23f4598",
7347
	"3612d2e79e3b0785561be14aaca2fccb",
7348

7349
	"feffe9928665731c6d6a8f9467308308",
7350
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7351
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7352
	"9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b",
7353
	"8ce24998625615b603a033aca13fb894be9112a5c3a211a8ba262a3cca7e2ca701e4a9a4fba43c90ccdcb281d48c7c6fd62875d2aca417034c34aee5",
7354
	"619cc5aefffe0bfa462af43c1699d050",
7355

7356
	"000000000000000000000000000000000000000000000000",
7357
	"",
7358
	"",
7359
	"000000000000000000000000",
7360
	"",
7361
	"cd33b28ac773f74ba00ed1f312572435",
7362

7363
	"000000000000000000000000000000000000000000000000",
7364
	"00000000000000000000000000000000",
7365
	"",
7366
	"000000000000000000000000",
7367
	"98e7247c07f0fe411c267e4384b0f600",
7368
	"2ff58d80033927ab8ef4d4587514f0fb",
7369

7370
	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7371
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255",
7372
	"",
7373
	"cafebabefacedbaddecaf888",
7374
	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade256",
7375
	"9924a7c8587336bfb118024db8674a14",
7376

7377
	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7378
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7379
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7380
	"cafebabefacedbaddecaf888",
7381
	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710",
7382
	"2519498e80f1478f37ba55bd6d27618c",
7383

7384
	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7385
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7386
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7387
	"cafebabefacedbad",
7388
	"0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f7",
7389
	"65dcc57fcf623a24094fcca40d3533f8",
7390

7391
	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7392
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7393
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7394
	"9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b",
7395
	"d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373b",
7396
	"dcf566ff291c25bbb8568fc3d376a6d9",
7397

7398
	"0000000000000000000000000000000000000000000000000000000000000000",
7399
	"",
7400
	"",
7401
	"000000000000000000000000",
7402
	"",
7403
	"530f8afbc74536b9a963b4f1c4cb738b",
7404

7405
	"0000000000000000000000000000000000000000000000000000000000000000",
7406
	"00000000000000000000000000000000",
7407
	"",
7408
	"000000000000000000000000",
7409
	"cea7403d4d606b6e074ec5d3baf39d18",
7410
	"d0d1c8a799996bf0265b98b5d48ab919",
7411

7412
	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7413
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255",
7414
	"",
7415
	"cafebabefacedbaddecaf888",
7416
	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015ad",
7417
	"b094dac5d93471bdec1a502270e3cc6c",
7418

7419
	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7420
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7421
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7422
	"cafebabefacedbaddecaf888",
7423
	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662",
7424
	"76fc6ece0f4e1768cddf8853bb2d551b",
7425

7426
	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7427
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7428
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7429
	"cafebabefacedbad",
7430
	"c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f",
7431
	"3a337dbf46a792c45e454913fe2ea8f2",
7432

7433
	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7434
	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7435
	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7436
	"9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b",
7437
	"5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3f",
7438
	"a44a8266ee1c8eb0c8b5d4cf5ae9f19a",
7439

7440
	NULL
7441
};
7442

7443
static void
7444
test_GCM(void)
7445
{
7446
	size_t u;
7447

7448
	printf("Test GCM: ");
7449
	fflush(stdout);
7450

7451
	for (u = 0; KAT_GCM[u]; u += 6) {
7452
		unsigned char key[32];
7453
		unsigned char plain[100];
7454
		unsigned char aad[100];
7455
		unsigned char iv[100];
7456
		unsigned char cipher[100];
7457
		unsigned char tag[100];
7458
		size_t key_len, plain_len, aad_len, iv_len;
7459
		br_aes_ct_ctr_keys bc;
7460
		br_gcm_context gc;
7461
		unsigned char tmp[100], out[16];
7462
		size_t v, tag_len;
7463

7464
		key_len = hextobin(key, KAT_GCM[u]);
7465
		plain_len = hextobin(plain, KAT_GCM[u + 1]);
7466
		aad_len = hextobin(aad, KAT_GCM[u + 2]);
7467
		iv_len = hextobin(iv, KAT_GCM[u + 3]);
7468
		hextobin(cipher, KAT_GCM[u + 4]);
7469
		hextobin(tag, KAT_GCM[u + 5]);
7470

7471
		br_aes_ct_ctr_init(&bc, key, key_len);
7472
		br_gcm_init(&gc, &bc.vtable, br_ghash_ctmul32);
7473

7474
		memset(tmp, 0x54, sizeof tmp);
7475

7476
		/*
7477
		 * Basic operation.
7478
		 */
7479
		memcpy(tmp, plain, plain_len);
7480
		br_gcm_reset(&gc, iv, iv_len);
7481
		br_gcm_aad_inject(&gc, aad, aad_len);
7482
		br_gcm_flip(&gc);
7483
		br_gcm_run(&gc, 1, tmp, plain_len);
7484
		br_gcm_get_tag(&gc, out);
7485
		check_equals("KAT GCM 1", tmp, cipher, plain_len);
7486
		check_equals("KAT GCM 2", out, tag, 16);
7487

7488
		br_gcm_reset(&gc, iv, iv_len);
7489
		br_gcm_aad_inject(&gc, aad, aad_len);
7490
		br_gcm_flip(&gc);
7491
		br_gcm_run(&gc, 0, tmp, plain_len);
7492
		check_equals("KAT GCM 3", tmp, plain, plain_len);
7493
		if (!br_gcm_check_tag(&gc, tag)) {
7494
			fprintf(stderr, "Tag not verified (1)\n");
7495
			exit(EXIT_FAILURE);
7496
		}
7497

7498
		for (v = plain_len; v < sizeof tmp; v ++) {
7499
			if (tmp[v] != 0x54) {
7500
				fprintf(stderr, "overflow on data\n");
7501
				exit(EXIT_FAILURE);
7502
			}
7503
		}
7504

7505
		/*
7506
		 * Byte-by-byte injection.
7507
		 */
7508
		br_gcm_reset(&gc, iv, iv_len);
7509
		for (v = 0; v < aad_len; v ++) {
7510
			br_gcm_aad_inject(&gc, aad + v, 1);
7511
		}
7512
		br_gcm_flip(&gc);
7513
		for (v = 0; v < plain_len; v ++) {
7514
			br_gcm_run(&gc, 1, tmp + v, 1);
7515
		}
7516
		check_equals("KAT GCM 4", tmp, cipher, plain_len);
7517
		if (!br_gcm_check_tag(&gc, tag)) {
7518
			fprintf(stderr, "Tag not verified (2)\n");
7519
			exit(EXIT_FAILURE);
7520
		}
7521

7522
		br_gcm_reset(&gc, iv, iv_len);
7523
		for (v = 0; v < aad_len; v ++) {
7524
			br_gcm_aad_inject(&gc, aad + v, 1);
7525
		}
7526
		br_gcm_flip(&gc);
7527
		for (v = 0; v < plain_len; v ++) {
7528
			br_gcm_run(&gc, 0, tmp + v, 1);
7529
		}
7530
		br_gcm_get_tag(&gc, out);
7531
		check_equals("KAT GCM 5", tmp, plain, plain_len);
7532
		check_equals("KAT GCM 6", out, tag, 16);
7533

7534
		/*
7535
		 * Check that alterations are detected.
7536
		 */
7537
		for (v = 0; v < aad_len; v ++) {
7538
			memcpy(tmp, cipher, plain_len);
7539
			br_gcm_reset(&gc, iv, iv_len);
7540
			aad[v] ^= 0x04;
7541
			br_gcm_aad_inject(&gc, aad, aad_len);
7542
			aad[v] ^= 0x04;
7543
			br_gcm_flip(&gc);
7544
			br_gcm_run(&gc, 0, tmp, plain_len);
7545
			check_equals("KAT GCM 7", tmp, plain, plain_len);
7546
			if (br_gcm_check_tag(&gc, tag)) {
7547
				fprintf(stderr, "Tag should have changed\n");
7548
				exit(EXIT_FAILURE);
7549
			}
7550
		}
7551

7552
		/*
7553
		 * Tag truncation.
7554
		 */
7555
		for (tag_len = 1; tag_len <= 16; tag_len ++) {
7556
			memset(out, 0x54, sizeof out);
7557
			memcpy(tmp, plain, plain_len);
7558
			br_gcm_reset(&gc, iv, iv_len);
7559
			br_gcm_aad_inject(&gc, aad, aad_len);
7560
			br_gcm_flip(&gc);
7561
			br_gcm_run(&gc, 1, tmp, plain_len);
7562
			br_gcm_get_tag_trunc(&gc, out, tag_len);
7563
			check_equals("KAT GCM 8", out, tag, tag_len);
7564
			for (v = tag_len; v < sizeof out; v ++) {
7565
				if (out[v] != 0x54) {
7566
					fprintf(stderr, "overflow on tag\n");
7567
					exit(EXIT_FAILURE);
7568
				}
7569
			}
7570

7571
			memcpy(tmp, plain, plain_len);
7572
			br_gcm_reset(&gc, iv, iv_len);
7573
			br_gcm_aad_inject(&gc, aad, aad_len);
7574
			br_gcm_flip(&gc);
7575
			br_gcm_run(&gc, 1, tmp, plain_len);
7576
			if (!br_gcm_check_tag_trunc(&gc, out, tag_len)) {
7577
				fprintf(stderr, "Tag not verified (3)\n");
7578
				exit(EXIT_FAILURE);
7579
			}
7580
		}
7581

7582
		printf(".");
7583
		fflush(stdout);
7584
	}
7585

7586
	printf(" done.\n");
7587
	fflush(stdout);
7588
}
7589

7590
/*
7591
 * From "The EAX Mode of Operation (A Two-Pass Authenticated Encryption
7592
 * Scheme Optimized for Simplicity and Efficiency)" (Bellare, Rogaway,
7593
 * Wagner), presented at FSE 2004. Full article is available at:
7594
 *   http://web.cs.ucdavis.edu/~rogaway/papers/eax.html
7595
 *
7596
 * EAX specification concatenates the authentication tag at the end of
7597
 * the ciphertext; in our API and the vectors below, the tag is separate.
7598
 *
7599
 * Order is: plaintext, key, nonce, header, ciphertext, tag.
7600
 */
7601
static const char *const KAT_EAX[] = {
7602
	"",
7603
	"233952dee4d5ed5f9b9c6d6ff80ff478",
7604
	"62ec67f9c3a4a407fcb2a8c49031a8b3",
7605
	"6bfb914fd07eae6b",
7606
	"",
7607
	"e037830e8389f27b025a2d6527e79d01",
7608

7609
	"f7fb",
7610
	"91945d3f4dcbee0bf45ef52255f095a4",
7611
	"becaf043b0a23d843194ba972c66debd",
7612
	"fa3bfd4806eb53fa",
7613
	"19dd",
7614
	"5c4c9331049d0bdab0277408f67967e5",
7615

7616
	"1a47cb4933",
7617
	"01f74ad64077f2e704c0f60ada3dd523",
7618
	"70c3db4f0d26368400a10ed05d2bff5e",
7619
	"234a3463c1264ac6",
7620
	"d851d5bae0",
7621
	"3a59f238a23e39199dc9266626c40f80",
7622

7623
	"481c9e39b1",
7624
	"d07cf6cbb7f313bdde66b727afd3c5e8",
7625
	"8408dfff3c1a2b1292dc199e46b7d617",
7626
	"33cce2eabff5a79d",
7627
	"632a9d131a",
7628
	"d4c168a4225d8e1ff755939974a7bede",
7629

7630
	"40d0c07da5e4",
7631
	"35b6d0580005bbc12b0587124557d2c2",
7632
	"fdb6b06676eedc5c61d74276e1f8e816",
7633
	"aeb96eaebe2970e9",
7634
	"071dfe16c675",
7635
	"cb0677e536f73afe6a14b74ee49844dd",
7636

7637
	"4de3b35c3fc039245bd1fb7d",
7638
	"bd8e6e11475e60b268784c38c62feb22",
7639
	"6eac5c93072d8e8513f750935e46da1b",
7640
	"d4482d1ca78dce0f",
7641
	"835bb4f15d743e350e728414",
7642
	"abb8644fd6ccb86947c5e10590210a4f",
7643

7644
	"8b0a79306c9ce7ed99dae4f87f8dd61636",
7645
	"7c77d6e813bed5ac98baa417477a2e7d",
7646
	"1a8c98dcd73d38393b2bf1569deefc19",
7647
	"65d2017990d62528",
7648
	"02083e3979da014812f59f11d52630da30",
7649
	"137327d10649b0aa6e1c181db617d7f2",
7650

7651
	"1bda122bce8a8dbaf1877d962b8592dd2d56",
7652
	"5fff20cafab119ca2fc73549e20f5b0d",
7653
	"dde59b97d722156d4d9aff2bc7559826",
7654
	"54b9f04e6a09189a",
7655
	"2ec47b2c4954a489afc7ba4897edcdae8cc3",
7656
	"3b60450599bd02c96382902aef7f832a",
7657

7658
	"6cf36720872b8513f6eab1a8a44438d5ef11",
7659
	"a4a4782bcffd3ec5e7ef6d8c34a56123",
7660
	"b781fcf2f75fa5a8de97a9ca48e522ec",
7661
	"899a175897561d7e",
7662
	"0de18fd0fdd91e7af19f1d8ee8733938b1e8",
7663
	"e7f6d2231618102fdb7fe55ff1991700",
7664

7665
	"ca40d7446e545ffaed3bd12a740a659ffbbb3ceab7",
7666
	"8395fcf1e95bebd697bd010bc766aac3",
7667
	"22e7add93cfc6393c57ec0b3c17d6b44",
7668
	"126735fcc320d25a",
7669
	"cb8920f87a6c75cff39627b56e3ed197c552d295a7",
7670
	"cfc46afc253b4652b1af3795b124ab6e",
7671

7672
	NULL
7673
};
7674

7675
static void
7676
test_EAX_inner(const char *name, const br_block_ctrcbc_class *vt)
7677
{
7678
	size_t u;
7679

7680
	printf("Test EAX %s: ", name);
7681
	fflush(stdout);
7682

7683
	for (u = 0; KAT_EAX[u]; u += 6) {
7684
		unsigned char plain[100];
7685
		unsigned char key[32];
7686
		unsigned char nonce[100];
7687
		unsigned char aad[100];
7688
		unsigned char cipher[100];
7689
		unsigned char tag[100];
7690
		size_t plain_len, key_len, nonce_len, aad_len;
7691
		br_aes_gen_ctrcbc_keys bc;
7692
		br_eax_context ec;
7693
		br_eax_state st;
7694
		unsigned char tmp[100], out[16];
7695
		size_t v, tag_len;
7696

7697
		plain_len = hextobin(plain, KAT_EAX[u]);
7698
		key_len = hextobin(key, KAT_EAX[u + 1]);
7699
		nonce_len = hextobin(nonce, KAT_EAX[u + 2]);
7700
		aad_len = hextobin(aad, KAT_EAX[u + 3]);
7701
		hextobin(cipher, KAT_EAX[u + 4]);
7702
		hextobin(tag, KAT_EAX[u + 5]);
7703

7704
		vt->init(&bc.vtable, key, key_len);
7705
		br_eax_init(&ec, &bc.vtable);
7706

7707
		memset(tmp, 0x54, sizeof tmp);
7708

7709
		/*
7710
		 * Basic operation.
7711
		 */
7712
		memcpy(tmp, plain, plain_len);
7713
		br_eax_reset(&ec, nonce, nonce_len);
7714
		br_eax_aad_inject(&ec, aad, aad_len);
7715
		br_eax_flip(&ec);
7716
		br_eax_run(&ec, 1, tmp, plain_len);
7717
		br_eax_get_tag(&ec, out);
7718
		check_equals("KAT EAX 1", tmp, cipher, plain_len);
7719
		check_equals("KAT EAX 2", out, tag, 16);
7720

7721
		br_eax_reset(&ec, nonce, nonce_len);
7722
		br_eax_aad_inject(&ec, aad, aad_len);
7723
		br_eax_flip(&ec);
7724
		br_eax_run(&ec, 0, tmp, plain_len);
7725
		check_equals("KAT EAX 3", tmp, plain, plain_len);
7726
		if (!br_eax_check_tag(&ec, tag)) {
7727
			fprintf(stderr, "Tag not verified (1)\n");
7728
			exit(EXIT_FAILURE);
7729
		}
7730

7731
		for (v = plain_len; v < sizeof tmp; v ++) {
7732
			if (tmp[v] != 0x54) {
7733
				fprintf(stderr, "overflow on data\n");
7734
				exit(EXIT_FAILURE);
7735
			}
7736
		}
7737

7738
		/*
7739
		 * Byte-by-byte injection.
7740
		 */
7741
		br_eax_reset(&ec, nonce, nonce_len);
7742
		for (v = 0; v < aad_len; v ++) {
7743
			br_eax_aad_inject(&ec, aad + v, 1);
7744
		}
7745
		br_eax_flip(&ec);
7746
		for (v = 0; v < plain_len; v ++) {
7747
			br_eax_run(&ec, 1, tmp + v, 1);
7748
		}
7749
		check_equals("KAT EAX 4", tmp, cipher, plain_len);
7750
		if (!br_eax_check_tag(&ec, tag)) {
7751
			fprintf(stderr, "Tag not verified (2)\n");
7752
			exit(EXIT_FAILURE);
7753
		}
7754

7755
		br_eax_reset(&ec, nonce, nonce_len);
7756
		for (v = 0; v < aad_len; v ++) {
7757
			br_eax_aad_inject(&ec, aad + v, 1);
7758
		}
7759
		br_eax_flip(&ec);
7760
		for (v = 0; v < plain_len; v ++) {
7761
			br_eax_run(&ec, 0, tmp + v, 1);
7762
		}
7763
		br_eax_get_tag(&ec, out);
7764
		check_equals("KAT EAX 5", tmp, plain, plain_len);
7765
		check_equals("KAT EAX 6", out, tag, 16);
7766

7767
		/*
7768
		 * Check that alterations are detected.
7769
		 */
7770
		for (v = 0; v < aad_len; v ++) {
7771
			memcpy(tmp, cipher, plain_len);
7772
			br_eax_reset(&ec, nonce, nonce_len);
7773
			aad[v] ^= 0x04;
7774
			br_eax_aad_inject(&ec, aad, aad_len);
7775
			aad[v] ^= 0x04;
7776
			br_eax_flip(&ec);
7777
			br_eax_run(&ec, 0, tmp, plain_len);
7778
			check_equals("KAT EAX 7", tmp, plain, plain_len);
7779
			if (br_eax_check_tag(&ec, tag)) {
7780
				fprintf(stderr, "Tag should have changed\n");
7781
				exit(EXIT_FAILURE);
7782
			}
7783
		}
7784

7785
		/*
7786
		 * Tag truncation.
7787
		 */
7788
		for (tag_len = 1; tag_len <= 16; tag_len ++) {
7789
			memset(out, 0x54, sizeof out);
7790
			memcpy(tmp, plain, plain_len);
7791
			br_eax_reset(&ec, nonce, nonce_len);
7792
			br_eax_aad_inject(&ec, aad, aad_len);
7793
			br_eax_flip(&ec);
7794
			br_eax_run(&ec, 1, tmp, plain_len);
7795
			br_eax_get_tag_trunc(&ec, out, tag_len);
7796
			check_equals("KAT EAX 8", out, tag, tag_len);
7797
			for (v = tag_len; v < sizeof out; v ++) {
7798
				if (out[v] != 0x54) {
7799
					fprintf(stderr, "overflow on tag\n");
7800
					exit(EXIT_FAILURE);
7801
				}
7802
			}
7803

7804
			memcpy(tmp, plain, plain_len);
7805
			br_eax_reset(&ec, nonce, nonce_len);
7806
			br_eax_aad_inject(&ec, aad, aad_len);
7807
			br_eax_flip(&ec);
7808
			br_eax_run(&ec, 1, tmp, plain_len);
7809
			if (!br_eax_check_tag_trunc(&ec, out, tag_len)) {
7810
				fprintf(stderr, "Tag not verified (3)\n");
7811
				exit(EXIT_FAILURE);
7812
			}
7813
		}
7814

7815
		printf(".");
7816
		fflush(stdout);
7817

7818
		/*
7819
		 * For capture tests, we need the message to be non-empty.
7820
		 */
7821
		if (plain_len == 0) {
7822
			continue;
7823
		}
7824

7825
		/*
7826
		 * Captured state, pre-AAD. This requires the AAD and the
7827
		 * message to be non-empty.
7828
		 */
7829
		br_eax_capture(&ec, &st);
7830

7831
		if (aad_len > 0) {
7832
			br_eax_reset_pre_aad(&ec, &st, nonce, nonce_len);
7833
			br_eax_aad_inject(&ec, aad, aad_len);
7834
			br_eax_flip(&ec);
7835
			memcpy(tmp, plain, plain_len);
7836
			br_eax_run(&ec, 1, tmp, plain_len);
7837
			br_eax_get_tag(&ec, out);
7838
			check_equals("KAT EAX 9", tmp, cipher, plain_len);
7839
			check_equals("KAT EAX 10", out, tag, 16);
7840

7841
			br_eax_reset_pre_aad(&ec, &st, nonce, nonce_len);
7842
			br_eax_aad_inject(&ec, aad, aad_len);
7843
			br_eax_flip(&ec);
7844
			br_eax_run(&ec, 0, tmp, plain_len);
7845
			br_eax_get_tag(&ec, out);
7846
			check_equals("KAT EAX 11", tmp, plain, plain_len);
7847
			check_equals("KAT EAX 12", out, tag, 16);
7848
		}
7849

7850
		/*
7851
		 * Captured state, post-AAD. This requires the message to
7852
		 * be non-empty.
7853
		 */
7854
		br_eax_reset(&ec, nonce, nonce_len);
7855
		br_eax_aad_inject(&ec, aad, aad_len);
7856
		br_eax_flip(&ec);
7857
		br_eax_get_aad_mac(&ec, &st);
7858

7859
		br_eax_reset_post_aad(&ec, &st, nonce, nonce_len);
7860
		memcpy(tmp, plain, plain_len);
7861
		br_eax_run(&ec, 1, tmp, plain_len);
7862
		br_eax_get_tag(&ec, out);
7863
		check_equals("KAT EAX 13", tmp, cipher, plain_len);
7864
		check_equals("KAT EAX 14", out, tag, 16);
7865

7866
		br_eax_reset_post_aad(&ec, &st, nonce, nonce_len);
7867
		br_eax_run(&ec, 0, tmp, plain_len);
7868
		br_eax_get_tag(&ec, out);
7869
		check_equals("KAT EAX 15", tmp, plain, plain_len);
7870
		check_equals("KAT EAX 16", out, tag, 16);
7871

7872
		printf(".");
7873
		fflush(stdout);
7874
	}
7875

7876
	printf(" done.\n");
7877
	fflush(stdout);
7878
}
7879

7880
static void
7881
test_EAX(void)
7882
{
7883
	const br_block_ctrcbc_class *x_ctrcbc;
7884

7885
	test_EAX_inner("aes_big", &br_aes_big_ctrcbc_vtable);
7886
	test_EAX_inner("aes_small", &br_aes_small_ctrcbc_vtable);
7887
	test_EAX_inner("aes_ct", &br_aes_ct_ctrcbc_vtable);
7888
	test_EAX_inner("aes_ct64", &br_aes_ct64_ctrcbc_vtable);
7889

7890
	x_ctrcbc = br_aes_x86ni_ctrcbc_get_vtable();
7891
	if (x_ctrcbc != NULL) {
7892
		test_EAX_inner("aes_x86ni", x_ctrcbc);
7893
	} else {
7894
		printf("Test EAX aes_x86ni: UNAVAILABLE\n");
7895
	}
7896

7897
	x_ctrcbc = br_aes_pwr8_ctrcbc_get_vtable();
7898
	if (x_ctrcbc != NULL) {
7899
		test_EAX_inner("aes_pwr8", x_ctrcbc);
7900
	} else {
7901
		printf("Test EAX aes_pwr8: UNAVAILABLE\n");
7902
	}
7903
}
7904

7905
/*
7906
 * From NIST SP 800-38C, appendix C.
7907
 *
7908
 * CCM specification concatenates the authentication tag at the end of
7909
 * the ciphertext; in our API and the vectors below, the tag is separate.
7910
 *
7911
 * Order is: key, nonce, aad, plaintext, ciphertext, tag.
7912
 */
7913
static const char *const KAT_CCM[] = {
7914
	"404142434445464748494a4b4c4d4e4f",
7915
	"10111213141516",
7916
	"0001020304050607",
7917
	"20212223",
7918
	"7162015b",
7919
	"4dac255d",
7920

7921
	"404142434445464748494a4b4c4d4e4f",
7922
	"1011121314151617",
7923
	"000102030405060708090a0b0c0d0e0f",
7924
	"202122232425262728292a2b2c2d2e2f",
7925
	"d2a1f0e051ea5f62081a7792073d593d",
7926
	"1fc64fbfaccd",
7927

7928
	"404142434445464748494a4b4c4d4e4f",
7929
	"101112131415161718191a1b",
7930
	"000102030405060708090a0b0c0d0e0f10111213",
7931
	"202122232425262728292a2b2c2d2e2f3031323334353637",
7932
	"e3b201a9f5b71a7a9b1ceaeccd97e70b6176aad9a4428aa5",
7933
	"484392fbc1b09951",
7934

7935
	"404142434445464748494a4b4c4d4e4f",
7936
	"101112131415161718191a1b1c",
7937
	NULL,
7938
	"202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f",
7939
	"69915dad1e84c6376a68c2967e4dab615ae0fd1faec44cc484828529463ccf72",
7940
	"b4ac6bec93e8598e7f0dadbcea5b",
7941

7942
	NULL
7943
};
7944

7945
static void
7946
test_CCM_inner(const char *name, const br_block_ctrcbc_class *vt)
7947
{
7948
	size_t u;
7949

7950
	printf("Test CCM %s: ", name);
7951
	fflush(stdout);
7952

7953
	for (u = 0; KAT_CCM[u]; u += 6) {
7954
		unsigned char plain[100];
7955
		unsigned char key[32];
7956
		unsigned char nonce[100];
7957
		unsigned char aad_buf[100], *aad;
7958
		unsigned char cipher[100];
7959
		unsigned char tag[100];
7960
		size_t plain_len, key_len, nonce_len, aad_len, tag_len;
7961
		br_aes_gen_ctrcbc_keys bc;
7962
		br_ccm_context ec;
7963
		unsigned char tmp[100], out[16];
7964
		size_t v;
7965

7966
		key_len = hextobin(key, KAT_CCM[u]);
7967
		nonce_len = hextobin(nonce, KAT_CCM[u + 1]);
7968
		if (KAT_CCM[u + 2] == NULL) {
7969
			aad_len = 65536;
7970
			aad = malloc(aad_len);
7971
			if (aad == NULL) {
7972
				fprintf(stderr, "OOM error\n");
7973
				exit(EXIT_FAILURE);
7974
			}
7975
			for (v = 0; v < 65536; v ++) {
7976
				aad[v] = (unsigned char)v;
7977
			}
7978
		} else {
7979
			aad = aad_buf;
7980
			aad_len = hextobin(aad, KAT_CCM[u + 2]);
7981
		}
7982
		plain_len = hextobin(plain, KAT_CCM[u + 3]);
7983
		hextobin(cipher, KAT_CCM[u + 4]);
7984
		tag_len = hextobin(tag, KAT_CCM[u + 5]);
7985

7986
		vt->init(&bc.vtable, key, key_len);
7987
		br_ccm_init(&ec, &bc.vtable);
7988

7989
		memset(tmp, 0x54, sizeof tmp);
7990

7991
		/*
7992
		 * Basic operation.
7993
		 */
7994
		memcpy(tmp, plain, plain_len);
7995
		if (!br_ccm_reset(&ec, nonce, nonce_len,
7996
			aad_len, plain_len, tag_len))
7997
		{
7998
			fprintf(stderr, "CCM reset failed\n");
7999
			exit(EXIT_FAILURE);
8000
		}
8001
		br_ccm_aad_inject(&ec, aad, aad_len);
8002
		br_ccm_flip(&ec);
8003
		br_ccm_run(&ec, 1, tmp, plain_len);
8004
		if (br_ccm_get_tag(&ec, out) != tag_len) {
8005
			fprintf(stderr, "CCM returned wrong tag length\n");
8006
			exit(EXIT_FAILURE);
8007
		}
8008
		check_equals("KAT CCM 1", tmp, cipher, plain_len);
8009
		check_equals("KAT CCM 2", out, tag, tag_len);
8010

8011
		br_ccm_reset(&ec, nonce, nonce_len,
8012
			aad_len, plain_len, tag_len);
8013
		br_ccm_aad_inject(&ec, aad, aad_len);
8014
		br_ccm_flip(&ec);
8015
		br_ccm_run(&ec, 0, tmp, plain_len);
8016
		check_equals("KAT CCM 3", tmp, plain, plain_len);
8017
		if (!br_ccm_check_tag(&ec, tag)) {
8018
			fprintf(stderr, "Tag not verified (1)\n");
8019
			exit(EXIT_FAILURE);
8020
		}
8021

8022
		for (v = plain_len; v < sizeof tmp; v ++) {
8023
			if (tmp[v] != 0x54) {
8024
				fprintf(stderr, "overflow on data\n");
8025
				exit(EXIT_FAILURE);
8026
			}
8027
		}
8028

8029
		/*
8030
		 * Byte-by-byte injection.
8031
		 */
8032
		br_ccm_reset(&ec, nonce, nonce_len,
8033
			aad_len, plain_len, tag_len);
8034
		for (v = 0; v < aad_len; v ++) {
8035
			br_ccm_aad_inject(&ec, aad + v, 1);
8036
		}
8037
		br_ccm_flip(&ec);
8038
		for (v = 0; v < plain_len; v ++) {
8039
			br_ccm_run(&ec, 1, tmp + v, 1);
8040
		}
8041
		check_equals("KAT CCM 4", tmp, cipher, plain_len);
8042
		if (!br_ccm_check_tag(&ec, tag)) {
8043
			fprintf(stderr, "Tag not verified (2)\n");
8044
			exit(EXIT_FAILURE);
8045
		}
8046

8047
		br_ccm_reset(&ec, nonce, nonce_len,
8048
			aad_len, plain_len, tag_len);
8049
		for (v = 0; v < aad_len; v ++) {
8050
			br_ccm_aad_inject(&ec, aad + v, 1);
8051
		}
8052
		br_ccm_flip(&ec);
8053
		for (v = 0; v < plain_len; v ++) {
8054
			br_ccm_run(&ec, 0, tmp + v, 1);
8055
		}
8056
		br_ccm_get_tag(&ec, out);
8057
		check_equals("KAT CCM 5", tmp, plain, plain_len);
8058
		check_equals("KAT CCM 6", out, tag, tag_len);
8059

8060
		/*
8061
		 * Check that alterations are detected.
8062
		 */
8063
		for (v = 0; v < aad_len; v ++) {
8064
			memcpy(tmp, cipher, plain_len);
8065
			br_ccm_reset(&ec, nonce, nonce_len,
8066
				aad_len, plain_len, tag_len);
8067
			aad[v] ^= 0x04;
8068
			br_ccm_aad_inject(&ec, aad, aad_len);
8069
			aad[v] ^= 0x04;
8070
			br_ccm_flip(&ec);
8071
			br_ccm_run(&ec, 0, tmp, plain_len);
8072
			check_equals("KAT CCM 7", tmp, plain, plain_len);
8073
			if (br_ccm_check_tag(&ec, tag)) {
8074
				fprintf(stderr, "Tag should have changed\n");
8075
				exit(EXIT_FAILURE);
8076
			}
8077

8078
			/*
8079
			 * When the AAD is really big, we don't want to do
8080
			 * the complete quadratic operation.
8081
			 */
8082
			if (v >= 32) {
8083
				break;
8084
			}
8085
		}
8086

8087
		if (aad != aad_buf) {
8088
			free(aad);
8089
		}
8090

8091
		printf(".");
8092
		fflush(stdout);
8093
	}
8094

8095
	printf(" done.\n");
8096
	fflush(stdout);
8097
}
8098

8099
static void
8100
test_CCM(void)
8101
{
8102
	const br_block_ctrcbc_class *x_ctrcbc;
8103

8104
	test_CCM_inner("aes_big", &br_aes_big_ctrcbc_vtable);
8105
	test_CCM_inner("aes_small", &br_aes_small_ctrcbc_vtable);
8106
	test_CCM_inner("aes_ct", &br_aes_ct_ctrcbc_vtable);
8107
	test_CCM_inner("aes_ct64", &br_aes_ct64_ctrcbc_vtable);
8108

8109
	x_ctrcbc = br_aes_x86ni_ctrcbc_get_vtable();
8110
	if (x_ctrcbc != NULL) {
8111
		test_CCM_inner("aes_x86ni", x_ctrcbc);
8112
	} else {
8113
		printf("Test CCM aes_x86ni: UNAVAILABLE\n");
8114
	}
8115

8116
	x_ctrcbc = br_aes_pwr8_ctrcbc_get_vtable();
8117
	if (x_ctrcbc != NULL) {
8118
		test_CCM_inner("aes_pwr8", x_ctrcbc);
8119
	} else {
8120
		printf("Test CCM aes_pwr8: UNAVAILABLE\n");
8121
	}
8122
}
8123

8124
static void
8125
test_EC_inner(const char *sk, const char *sU,
8126
	const br_ec_impl *impl, int curve)
8127
{
8128
	unsigned char bk[70];
8129
	unsigned char eG[150], eU[150];
8130
	uint32_t n[22], n0i;
8131
	size_t klen, ulen, nlen;
8132
	const br_ec_curve_def *cd;
8133
	br_hmac_drbg_context rng;
8134
	int i;
8135

8136
	klen = hextobin(bk, sk);
8137
	ulen = hextobin(eU, sU);
8138
	switch (curve) {
8139
	case BR_EC_secp256r1:
8140
		cd = &br_secp256r1;
8141
		break;
8142
	case BR_EC_secp384r1:
8143
		cd = &br_secp384r1;
8144
		break;
8145
	case BR_EC_secp521r1:
8146
		cd = &br_secp521r1;
8147
		break;
8148
	default:
8149
		fprintf(stderr, "Unknown curve: %d\n", curve);
8150
		exit(EXIT_FAILURE);
8151
		break;
8152
	}
8153
	if (ulen != cd->generator_len) {
8154
		fprintf(stderr, "KAT vector wrong (%lu / %lu)\n",
8155
			(unsigned long)ulen,
8156
			(unsigned long)cd->generator_len);
8157
	}
8158
	memcpy(eG, cd->generator, ulen);
8159
	if (impl->mul(eG, ulen, bk, klen, curve) != 1) {
8160
		fprintf(stderr, "KAT multiplication failed\n");
8161
		exit(EXIT_FAILURE);
8162
	}
8163
	if (memcmp(eG, eU, ulen) != 0) {
8164
		fprintf(stderr, "KAT mul: mismatch\n");
8165
		exit(EXIT_FAILURE);
8166
	}
8167

8168
	/*
8169
	 * Test the two-point-mul function. We want to test the basic
8170
	 * functionality, and the following special cases:
8171
	 *   x = y
8172
	 *   x + y = curve order
8173
	 */
8174
	nlen = cd->order_len;
8175
	br_i31_decode(n, cd->order, nlen);
8176
	n0i = br_i31_ninv31(n[1]);
8177
	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for EC", 11);
8178
	for (i = 0; i < 10; i ++) {
8179
		unsigned char ba[80], bb[80], bx[80], by[80], bz[80];
8180
		uint32_t a[22], b[22], x[22], y[22], z[22], t1[22], t2[22];
8181
		uint32_t r;
8182
		unsigned char eA[160], eB[160], eC[160], eD[160];
8183

8184
		/*
8185
		 * Generate random a and b, and compute A = a*G and B = b*G.
8186
		 */
8187
		br_hmac_drbg_generate(&rng, ba, sizeof ba);
8188
		br_i31_decode_reduce(a, ba, sizeof ba, n);
8189
		br_i31_encode(ba, nlen, a);
8190
		br_hmac_drbg_generate(&rng, bb, sizeof bb);
8191
		br_i31_decode_reduce(b, bb, sizeof bb, n);
8192
		br_i31_encode(bb, nlen, b);
8193
		memcpy(eA, cd->generator, ulen);
8194
		impl->mul(eA, ulen, ba, nlen, cd->curve);
8195
		memcpy(eB, cd->generator, ulen);
8196
		impl->mul(eB, ulen, bb, nlen, cd->curve);
8197

8198
		/*
8199
		 * Generate random x and y (modulo n).
8200
		 */
8201
		br_hmac_drbg_generate(&rng, bx, sizeof bx);
8202
		br_i31_decode_reduce(x, bx, sizeof bx, n);
8203
		br_i31_encode(bx, nlen, x);
8204
		br_hmac_drbg_generate(&rng, by, sizeof by);
8205
		br_i31_decode_reduce(y, by, sizeof by, n);
8206
		br_i31_encode(by, nlen, y);
8207

8208
		/*
8209
		 * Compute z = a*x + b*y (mod n).
8210
		 */
8211
		memcpy(t1, x, sizeof x);
8212
		br_i31_to_monty(t1, n);
8213
		br_i31_montymul(z, a, t1, n, n0i);
8214
		memcpy(t1, y, sizeof y);
8215
		br_i31_to_monty(t1, n);
8216
		br_i31_montymul(t2, b, t1, n, n0i);
8217
		r = br_i31_add(z, t2, 1);
8218
		r |= br_i31_sub(z, n, 0) ^ 1;
8219
		br_i31_sub(z, n, r);
8220
		br_i31_encode(bz, nlen, z);
8221

8222
		/*
8223
		 * Compute C = x*A + y*B with muladd(), and also
8224
		 * D = z*G with mul(). The two points must match.
8225
		 */
8226
		memcpy(eC, eA, ulen);
8227
		if (impl->muladd(eC, eB, ulen,
8228
			bx, nlen, by, nlen, cd->curve) != 1)
8229
		{
8230
			fprintf(stderr, "muladd() failed (1)\n");
8231
			exit(EXIT_FAILURE);
8232
		}
8233
		memcpy(eD, cd->generator, ulen);
8234
		if (impl->mul(eD, ulen, bz, nlen, cd->curve) != 1) {
8235
			fprintf(stderr, "mul() failed (1)\n");
8236
			exit(EXIT_FAILURE);
8237
		}
8238
		if (memcmp(eC, eD, nlen) != 0) {
8239
			fprintf(stderr, "mul() / muladd() mismatch\n");
8240
			exit(EXIT_FAILURE);
8241
		}
8242

8243
		/*
8244
		 * Also recomputed D = z*G with mulgen(). This must
8245
		 * again match.
8246
		 */
8247
		memset(eD, 0, ulen);
8248
		if (impl->mulgen(eD, bz, nlen, cd->curve) != ulen) {
8249
			fprintf(stderr, "mulgen() failed: wrong length\n");
8250
			exit(EXIT_FAILURE);
8251
		}
8252
		if (memcmp(eC, eD, nlen) != 0) {
8253
			fprintf(stderr, "mulgen() / muladd() mismatch\n");
8254
			exit(EXIT_FAILURE);
8255
		}
8256

8257
		/*
8258
		 * Check with x*A = y*B. We do so by setting b = x and y = a.
8259
		 */
8260
		memcpy(b, x, sizeof x);
8261
		br_i31_encode(bb, nlen, b);
8262
		memcpy(eB, cd->generator, ulen);
8263
		impl->mul(eB, ulen, bb, nlen, cd->curve);
8264
		memcpy(y, a, sizeof a);
8265
		br_i31_encode(by, nlen, y);
8266

8267
		memcpy(t1, x, sizeof x);
8268
		br_i31_to_monty(t1, n);
8269
		br_i31_montymul(z, a, t1, n, n0i);
8270
		memcpy(t1, y, sizeof y);
8271
		br_i31_to_monty(t1, n);
8272
		br_i31_montymul(t2, b, t1, n, n0i);
8273
		r = br_i31_add(z, t2, 1);
8274
		r |= br_i31_sub(z, n, 0) ^ 1;
8275
		br_i31_sub(z, n, r);
8276
		br_i31_encode(bz, nlen, z);
8277

8278
		memcpy(eC, eA, ulen);
8279
		if (impl->muladd(eC, eB, ulen,
8280
			bx, nlen, by, nlen, cd->curve) != 1)
8281
		{
8282
			fprintf(stderr, "muladd() failed (2)\n");
8283
			exit(EXIT_FAILURE);
8284
		}
8285
		memcpy(eD, cd->generator, ulen);
8286
		if (impl->mul(eD, ulen, bz, nlen, cd->curve) != 1) {
8287
			fprintf(stderr, "mul() failed (2)\n");
8288
			exit(EXIT_FAILURE);
8289
		}
8290
		if (memcmp(eC, eD, nlen) != 0) {
8291
			fprintf(stderr,
8292
				"mul() / muladd() mismatch (x*A=y*B)\n");
8293
			exit(EXIT_FAILURE);
8294
		}
8295

8296
		/*
8297
		 * Check with x*A + y*B = 0. At that point, b = x, so we
8298
		 * just need to set y = -a (mod n).
8299
		 */
8300
		memcpy(y, n, sizeof n);
8301
		br_i31_sub(y, a, 1);
8302
		br_i31_encode(by, nlen, y);
8303
		memcpy(eC, eA, ulen);
8304
		if (impl->muladd(eC, eB, ulen,
8305
			bx, nlen, by, nlen, cd->curve) != 0)
8306
		{
8307
			fprintf(stderr, "muladd() should have failed\n");
8308
			exit(EXIT_FAILURE);
8309
		}
8310
	}
8311

8312
	printf(".");
8313
	fflush(stdout);
8314
}
8315

8316
static void
8317
test_EC_P256_carry_inner(const br_ec_impl *impl, const char *sP, const char *sQ)
8318
{
8319
	unsigned char P[65], Q[65], k[1];
8320
	size_t plen, qlen;
8321

8322
	plen = hextobin(P, sP);
8323
	qlen = hextobin(Q, sQ);
8324
	if (plen != sizeof P || qlen != sizeof P) {
8325
		fprintf(stderr, "KAT is incorrect\n");
8326
		exit(EXIT_FAILURE);
8327
	}
8328
	k[0] = 0x10;
8329
	if (impl->mul(P, plen, k, 1, BR_EC_secp256r1) != 1) {
8330
		fprintf(stderr, "P-256 multiplication failed\n");
8331
		exit(EXIT_FAILURE);
8332
	}
8333
	check_equals("P256_carry", P, Q, plen);
8334
	printf(".");
8335
	fflush(stdout);
8336
}
8337

8338
static void
8339
test_EC_P256_carry(const br_ec_impl *impl)
8340
{
8341
	test_EC_P256_carry_inner(impl,
8342
		"0435BAA24B2B6E1B3C88E22A383BD88CC4B9A3166E7BCF94FF6591663AE066B33B821EBA1B4FC8EA609A87EB9A9C9A1CCD5C9F42FA1365306F64D7CAA718B8C978",
8343
		"0447752A76CA890328D34E675C4971EC629132D1FC4863EDB61219B72C4E58DC5E9D51E7B293488CFD913C3CF20E438BB65C2BA66A7D09EABB45B55E804260C5EB");
8344
	test_EC_P256_carry_inner(impl,
8345
		"04DCAE9D9CE211223602024A6933BD42F77B6BF4EAB9C8915F058C149419FADD2CC9FC0707B270A1B5362BA4D249AFC8AC3DA1EFCA8270176EEACA525B49EE19E6",
8346
		"048DAC7B0BE9B3206FCE8B24B6B4AEB122F2A67D13E536B390B6585CA193427E63F222388B5F51D744D6F5D47536D89EEEC89552BCB269E7828019C4410DFE980A");
8347
}
8348

8349
static void
8350
test_EC_KAT(const char *name, const br_ec_impl *impl, uint32_t curve_mask)
8351
{
8352
	printf("Test %s: ", name);
8353
	fflush(stdout);
8354

8355
	if (curve_mask & ((uint32_t)1 << BR_EC_secp256r1)) {
8356
		test_EC_inner(
8357
			"C9AFA9D845BA75166B5C215767B1D6934E50C3DB36E89B127B8A622B120F6721",
8358
			"0460FED4BA255A9D31C961EB74C6356D68C049B8923B61FA6CE669622E60F29FB67903FE1008B8BC99A41AE9E95628BC64F2F1B20C2D7E9F5177A3C294D4462299",
8359
			impl, BR_EC_secp256r1);
8360
		test_EC_P256_carry(impl);
8361
	}
8362
	if (curve_mask & ((uint32_t)1 << BR_EC_secp384r1)) {
8363
		test_EC_inner(
8364
			"6B9D3DAD2E1B8C1C05B19875B6659F4DE23C3B667BF297BA9AA47740787137D896D5724E4C70A825F872C9EA60D2EDF5",
8365
			"04EC3A4E415B4E19A4568618029F427FA5DA9A8BC4AE92E02E06AAE5286B300C64DEF8F0EA9055866064A254515480BC138015D9B72D7D57244EA8EF9AC0C621896708A59367F9DFB9F54CA84B3F1C9DB1288B231C3AE0D4FE7344FD2533264720",
8366
			impl, BR_EC_secp384r1);
8367
	}
8368
	if (curve_mask & ((uint32_t)1 << BR_EC_secp521r1)) {
8369
		test_EC_inner(
8370
			"00FAD06DAA62BA3B25D2FB40133DA757205DE67F5BB0018FEE8C86E1B68C7E75CAA896EB32F1F47C70855836A6D16FCC1466F6D8FBEC67DB89EC0C08B0E996B83538",
8371
			"0401894550D0785932E00EAA23B694F213F8C3121F86DC97A04E5A7167DB4E5BCD371123D46E45DB6B5D5370A7F20FB633155D38FFA16D2BD761DCAC474B9A2F5023A400493101C962CD4D2FDDF782285E64584139C2F91B47F87FF82354D6630F746A28A0DB25741B5B34A828008B22ACC23F924FAAFBD4D33F81EA66956DFEAA2BFDFCF5",
8372
			impl, BR_EC_secp521r1);
8373
	}
8374

8375
	printf(" done.\n");
8376
	fflush(stdout);
8377
}
8378

8379
static void
8380
test_EC_keygen(const char *name, const br_ec_impl *impl, uint32_t curves)
8381
{
8382
	int curve;
8383
	br_hmac_drbg_context rng;
8384

8385
	printf("Test %s keygen: ", name);
8386
	fflush(stdout);
8387

8388
	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for EC keygen", 18);
8389
	br_hmac_drbg_update(&rng, name, strlen(name));
8390

8391
	for (curve = -1; curve <= 35; curve ++) {
8392
		br_ec_private_key sk;
8393
		br_ec_public_key pk;
8394
		unsigned char kbuf_priv[BR_EC_KBUF_PRIV_MAX_SIZE];
8395
		unsigned char kbuf_pub[BR_EC_KBUF_PUB_MAX_SIZE];
8396

8397
		if (curve < 0 || curve >= 32 || ((curves >> curve) & 1) == 0) {
8398
			if (br_ec_keygen(&rng.vtable, impl,
8399
				&sk, kbuf_priv, curve) != 0)
8400
			{
8401
				fprintf(stderr, "br_ec_keygen() did not"
8402
					" reject unsupported curve %d\n",
8403
					curve);
8404
				exit(EXIT_FAILURE);
8405
			}
8406
			sk.curve = curve;
8407
			if (br_ec_compute_pub(impl, NULL, NULL, &sk) != 0) {
8408
				fprintf(stderr, "br_ec_keygen() did not"
8409
					" reject unsupported curve %d\n",
8410
					curve);
8411
				exit(EXIT_FAILURE);
8412
			}
8413
		} else {
8414
			size_t len, u;
8415
			unsigned char tmp_priv[sizeof kbuf_priv];
8416
			unsigned char tmp_pub[sizeof kbuf_pub];
8417
			unsigned z;
8418

8419
			len = br_ec_keygen(&rng.vtable, impl,
8420
				NULL, NULL, curve);
8421
			if (len == 0) {
8422
				fprintf(stderr, "br_ec_keygen() rejects"
8423
					" supported curve %d\n", curve);
8424
				exit(EXIT_FAILURE);
8425
			}
8426
			if (len > sizeof kbuf_priv) {
8427
				fprintf(stderr, "oversized kbuf_priv\n");
8428
				exit(EXIT_FAILURE);
8429
			}
8430
			memset(kbuf_priv, 0, sizeof kbuf_priv);
8431
			if (br_ec_keygen(&rng.vtable, impl,
8432
				NULL, kbuf_priv, curve) != len)
8433
			{
8434
				fprintf(stderr, "kbuf_priv length mismatch\n");
8435
				exit(EXIT_FAILURE);
8436
			}
8437
			z = 0;
8438
			for (u = 0; u < len; u ++) {
8439
				z |= kbuf_priv[u];
8440
			}
8441
			if (z == 0) {
8442
				fprintf(stderr, "kbuf_priv not initialized\n");
8443
				exit(EXIT_FAILURE);
8444
			}
8445
			for (u = len; u < sizeof kbuf_priv; u ++) {
8446
				if (kbuf_priv[u] != 0) {
8447
					fprintf(stderr, "kbuf_priv overflow\n");
8448
					exit(EXIT_FAILURE);
8449
				}
8450
			}
8451
			if (br_ec_keygen(&rng.vtable, impl,
8452
				NULL, tmp_priv, curve) != len)
8453
			{
8454
				fprintf(stderr, "tmp_priv length mismatch\n");
8455
				exit(EXIT_FAILURE);
8456
			}
8457
			if (memcmp(kbuf_priv, tmp_priv, len) == 0) {
8458
				fprintf(stderr, "keygen stutter\n");
8459
				exit(EXIT_FAILURE);
8460
			}
8461
			memset(&sk, 0, sizeof sk);
8462
			if (br_ec_keygen(&rng.vtable, impl,
8463
				&sk, kbuf_priv, curve) != len)
8464
			{
8465
				fprintf(stderr,
8466
					"kbuf_priv length mismatch (2)\n");
8467
				exit(EXIT_FAILURE);
8468
			}
8469
			if (sk.curve != curve || sk.x != kbuf_priv
8470
				|| sk.xlen != len)
8471
			{
8472
				fprintf(stderr, "sk not initialized\n");
8473
				exit(EXIT_FAILURE);
8474
			}
8475

8476
			len = br_ec_compute_pub(impl, NULL, NULL, &sk);
8477
			if (len > sizeof kbuf_pub) {
8478
				fprintf(stderr, "oversized kbuf_pub\n");
8479
				exit(EXIT_FAILURE);
8480
			}
8481
			memset(kbuf_pub, 0, sizeof kbuf_pub);
8482
			if (br_ec_compute_pub(impl, NULL,
8483
				kbuf_pub, &sk) != len)
8484
			{
8485
				fprintf(stderr, "kbuf_pub length mismatch\n");
8486
				exit(EXIT_FAILURE);
8487
			}
8488
			for (u = len; u < sizeof kbuf_pub; u ++) {
8489
				if (kbuf_pub[u] != 0) {
8490
					fprintf(stderr, "kbuf_pub overflow\n");
8491
					exit(EXIT_FAILURE);
8492
				}
8493
			}
8494
			memset(&pk, 0, sizeof pk);
8495
			if (br_ec_compute_pub(impl, &pk,
8496
				tmp_pub, &sk) != len)
8497
			{
8498
				fprintf(stderr, "tmp_pub length mismatch\n");
8499
				exit(EXIT_FAILURE);
8500
			}
8501
			if (memcmp(kbuf_pub, tmp_pub, len) != 0) {
8502
				fprintf(stderr, "pubkey mismatch\n");
8503
				exit(EXIT_FAILURE);
8504
			}
8505
			if (pk.curve != curve || pk.q != tmp_pub
8506
				|| pk.qlen != len)
8507
			{
8508
				fprintf(stderr, "pk not initialized\n");
8509
				exit(EXIT_FAILURE);
8510
			}
8511

8512
			if (impl->mulgen(kbuf_pub,
8513
				sk.x, sk.xlen, curve) != len
8514
				|| memcmp(pk.q, kbuf_pub, len) != 0)
8515
			{
8516
				fprintf(stderr, "wrong pubkey\n");
8517
				exit(EXIT_FAILURE);
8518
			}
8519
		}
8520
		printf(".");
8521
		fflush(stdout);
8522
	}
8523

8524
	printf(" done.\n");
8525
	fflush(stdout);
8526
}
8527

8528
static void
8529
test_EC_prime_i15(void)
8530
{
8531
	test_EC_KAT("EC_prime_i15", &br_ec_prime_i15,
8532
		(uint32_t)1 << BR_EC_secp256r1
8533
		| (uint32_t)1 << BR_EC_secp384r1
8534
		| (uint32_t)1 << BR_EC_secp521r1);
8535
	test_EC_keygen("EC_prime_i15", &br_ec_prime_i15,
8536
		(uint32_t)1 << BR_EC_secp256r1
8537
		| (uint32_t)1 << BR_EC_secp384r1
8538
		| (uint32_t)1 << BR_EC_secp521r1);
8539
}
8540

8541
static void
8542
test_EC_prime_i31(void)
8543
{
8544
	test_EC_KAT("EC_prime_i31", &br_ec_prime_i31,
8545
		(uint32_t)1 << BR_EC_secp256r1
8546
		| (uint32_t)1 << BR_EC_secp384r1
8547
		| (uint32_t)1 << BR_EC_secp521r1);
8548
	test_EC_keygen("EC_prime_i31", &br_ec_prime_i31,
8549
		(uint32_t)1 << BR_EC_secp256r1
8550
		| (uint32_t)1 << BR_EC_secp384r1
8551
		| (uint32_t)1 << BR_EC_secp521r1);
8552
}
8553

8554
static void
8555
test_EC_p256_m15(void)
8556
{
8557
	test_EC_KAT("EC_p256_m15", &br_ec_p256_m15,
8558
		(uint32_t)1 << BR_EC_secp256r1);
8559
	test_EC_keygen("EC_p256_m15", &br_ec_p256_m15,
8560
		(uint32_t)1 << BR_EC_secp256r1);
8561
}
8562

8563
static void
8564
test_EC_p256_m31(void)
8565
{
8566
	test_EC_KAT("EC_p256_m31", &br_ec_p256_m31,
8567
		(uint32_t)1 << BR_EC_secp256r1);
8568
	test_EC_keygen("EC_p256_m31", &br_ec_p256_m31,
8569
		(uint32_t)1 << BR_EC_secp256r1);
8570
}
8571

8572
static void
8573
test_EC_p256_m62(void)
8574
{
8575
	const br_ec_impl *ec;
8576

8577
	ec = br_ec_p256_m62_get();
8578
	if (ec != NULL) {
8579
		test_EC_KAT("EC_p256_m62", ec,
8580
			(uint32_t)1 << BR_EC_secp256r1);
8581
		test_EC_keygen("EC_p256_m62", ec,
8582
			(uint32_t)1 << BR_EC_secp256r1);
8583
	} else {
8584
		printf("Test EC_p256_m62: UNAVAILABLE\n");
8585
		printf("Test EC_p256_m62 keygen: UNAVAILABLE\n");
8586
	}
8587
}
8588

8589
static void
8590
test_EC_p256_m64(void)
8591
{
8592
	const br_ec_impl *ec;
8593

8594
	ec = br_ec_p256_m64_get();
8595
	if (ec != NULL) {
8596
		test_EC_KAT("EC_p256_m64", ec,
8597
			(uint32_t)1 << BR_EC_secp256r1);
8598
		test_EC_keygen("EC_p256_m64", ec,
8599
			(uint32_t)1 << BR_EC_secp256r1);
8600
	} else {
8601
		printf("Test EC_p256_m64: UNAVAILABLE\n");
8602
		printf("Test EC_p256_m64 keygen: UNAVAILABLE\n");
8603
	}
8604
}
8605

8606
const struct {
8607
	const char *scalar_le;
8608
	const char *u_in;
8609
	const char *u_out;
8610
} C25519_KAT[] = {
8611
	{ "A546E36BF0527C9D3B16154B82465EDD62144C0AC1FC5A18506A2244BA449AC4",
8612
	  "E6DB6867583030DB3594C1A424B15F7C726624EC26B3353B10A903A6D0AB1C4C",
8613
	  "C3DA55379DE9C6908E94EA4DF28D084F32ECCF03491C71F754B4075577A28552" },
8614
	{ "4B66E9D4D1B4673C5AD22691957D6AF5C11B6421E0EA01D42CA4169E7918BA0D",
8615
	  "E5210F12786811D3F4B7959D0538AE2C31DBE7106FC03C3EFC4CD549C715A493",
8616
	  "95CBDE9476E8907D7AADE45CB4B873F88B595A68799FA152E6F8F7647AAC7957" },
8617
	{ 0, 0, 0 }
8618
};
8619

8620
static void
8621
revbytes(unsigned char *buf, size_t len)
8622
{
8623
	size_t u;
8624

8625
	for (u = 0; u < (len >> 1); u ++) {
8626
		unsigned t;
8627

8628
		t = buf[u];
8629
		buf[u] = buf[len - 1 - u];
8630
		buf[len - 1 - u] = t;
8631
	}
8632
}
8633

8634
static void
8635
test_EC_c25519(const char *name, const br_ec_impl *iec)
8636
{
8637
	unsigned char bu[32], bk[32], br[32];
8638
	size_t v;
8639
	int i;
8640

8641
	printf("Test %s: ", name);
8642
	fflush(stdout);
8643
	for (v = 0; C25519_KAT[v].scalar_le; v ++) {
8644
		hextobin(bk, C25519_KAT[v].scalar_le);
8645
		revbytes(bk, sizeof bk);
8646
		hextobin(bu, C25519_KAT[v].u_in);
8647
		hextobin(br, C25519_KAT[v].u_out);
8648
		if (!iec->mul(bu, sizeof bu, bk, sizeof bk, BR_EC_curve25519)) {
8649
			fprintf(stderr, "Curve25519 multiplication failed\n");
8650
			exit(EXIT_FAILURE);
8651
		}
8652
		if (memcmp(bu, br, sizeof bu) != 0) {
8653
			fprintf(stderr, "Curve25519 failed KAT\n");
8654
			exit(EXIT_FAILURE);
8655
		}
8656
		printf(".");
8657
		fflush(stdout);
8658
	}
8659
	printf(" ");
8660
	fflush(stdout);
8661

8662
	memset(bu, 0, sizeof bu);
8663
	bu[0] = 0x09;
8664
	memcpy(bk, bu, sizeof bu);
8665
	for (i = 1; i <= 1000; i ++) {
8666
		revbytes(bk, sizeof bk);
8667
		if (!iec->mul(bu, sizeof bu, bk, sizeof bk, BR_EC_curve25519)) {
8668
			fprintf(stderr, "Curve25519 multiplication failed"
8669
				" (iter=%d)\n", i);
8670
			exit(EXIT_FAILURE);
8671
		}
8672
		revbytes(bk, sizeof bk);
8673
		for (v = 0; v < sizeof bu; v ++) {
8674
			unsigned t;
8675

8676
			t = bu[v];
8677
			bu[v] = bk[v];
8678
			bk[v] = t;
8679
		}
8680
		if (i == 1 || i == 1000) {
8681
			const char *sref;
8682

8683
			sref = (i == 1)
8684
				? "422C8E7A6227D7BCA1350B3E2BB7279F7897B87BB6854B783C60E80311AE3079"
8685
				: "684CF59BA83309552800EF566F2F4D3C1C3887C49360E3875F2EB94D99532C51";
8686
			hextobin(br, sref);
8687
			if (memcmp(bk, br, sizeof bk) != 0) {
8688
				fprintf(stderr,
8689
					"Curve25519 failed KAT (iter=%d)\n", i);
8690
				exit(EXIT_FAILURE);
8691
			}
8692
		}
8693
		if (i % 100 == 0) {
8694
			printf(".");
8695
			fflush(stdout);
8696
		}
8697
	}
8698

8699
	printf(" done.\n");
8700
	fflush(stdout);
8701
}
8702

8703
static void
8704
test_EC_c25519_i15(void)
8705
{
8706
	test_EC_c25519("EC_c25519_i15", &br_ec_c25519_i15);
8707
	test_EC_keygen("EC_c25519_i15", &br_ec_c25519_i15,
8708
		(uint32_t)1 << BR_EC_curve25519);
8709
}
8710

8711
static void
8712
test_EC_c25519_i31(void)
8713
{
8714
	test_EC_c25519("EC_c25519_i31", &br_ec_c25519_i31);
8715
	test_EC_keygen("EC_c25519_i31", &br_ec_c25519_i31,
8716
		(uint32_t)1 << BR_EC_curve25519);
8717
}
8718

8719
static void
8720
test_EC_c25519_m15(void)
8721
{
8722
	test_EC_c25519("EC_c25519_m15", &br_ec_c25519_m15);
8723
	test_EC_keygen("EC_c25519_m15", &br_ec_c25519_m15,
8724
		(uint32_t)1 << BR_EC_curve25519);
8725
}
8726

8727
static void
8728
test_EC_c25519_m31(void)
8729
{
8730
	test_EC_c25519("EC_c25519_m31", &br_ec_c25519_m31);
8731
	test_EC_keygen("EC_c25519_m31", &br_ec_c25519_m31,
8732
		(uint32_t)1 << BR_EC_curve25519);
8733
}
8734

8735
static void
8736
test_EC_c25519_m62(void)
8737
{
8738
	const br_ec_impl *ec;
8739

8740
	ec = br_ec_c25519_m62_get();
8741
	if (ec != NULL) {
8742
		test_EC_c25519("EC_c25519_m62", ec);
8743
		test_EC_keygen("EC_c25519_m62", ec,
8744
			(uint32_t)1 << BR_EC_curve25519);
8745
	} else {
8746
		printf("Test EC_c25519_m62: UNAVAILABLE\n");
8747
		printf("Test EC_c25519_m62 keygen: UNAVAILABLE\n");
8748
	}
8749
}
8750

8751
static void
8752
test_EC_c25519_m64(void)
8753
{
8754
	const br_ec_impl *ec;
8755

8756
	ec = br_ec_c25519_m64_get();
8757
	if (ec != NULL) {
8758
		test_EC_c25519("EC_c25519_m64", ec);
8759
		test_EC_keygen("EC_c25519_m64", ec,
8760
			(uint32_t)1 << BR_EC_curve25519);
8761
	} else {
8762
		printf("Test EC_c25519_m64: UNAVAILABLE\n");
8763
		printf("Test EC_c25519_m64 keygen: UNAVAILABLE\n");
8764
	}
8765
}
8766

8767
static const unsigned char EC_P256_PUB_POINT[] = {
8768
	0x04, 0x60, 0xFE, 0xD4, 0xBA, 0x25, 0x5A, 0x9D,
8769
	0x31, 0xC9, 0x61, 0xEB, 0x74, 0xC6, 0x35, 0x6D,
8770
	0x68, 0xC0, 0x49, 0xB8, 0x92, 0x3B, 0x61, 0xFA,
8771
	0x6C, 0xE6, 0x69, 0x62, 0x2E, 0x60, 0xF2, 0x9F,
8772
	0xB6, 0x79, 0x03, 0xFE, 0x10, 0x08, 0xB8, 0xBC,
8773
	0x99, 0xA4, 0x1A, 0xE9, 0xE9, 0x56, 0x28, 0xBC,
8774
	0x64, 0xF2, 0xF1, 0xB2, 0x0C, 0x2D, 0x7E, 0x9F,
8775
	0x51, 0x77, 0xA3, 0xC2, 0x94, 0xD4, 0x46, 0x22,
8776
	0x99
8777
};
8778

8779
static const unsigned char EC_P256_PRIV_X[] = {
8780
	0xC9, 0xAF, 0xA9, 0xD8, 0x45, 0xBA, 0x75, 0x16,
8781
	0x6B, 0x5C, 0x21, 0x57, 0x67, 0xB1, 0xD6, 0x93,
8782
	0x4E, 0x50, 0xC3, 0xDB, 0x36, 0xE8, 0x9B, 0x12,
8783
	0x7B, 0x8A, 0x62, 0x2B, 0x12, 0x0F, 0x67, 0x21
8784
};
8785

8786
static const br_ec_public_key EC_P256_PUB = {
8787
	BR_EC_secp256r1,
8788
	(unsigned char *)EC_P256_PUB_POINT, sizeof EC_P256_PUB_POINT
8789
};
8790

8791
static const br_ec_private_key EC_P256_PRIV = {
8792
	BR_EC_secp256r1,
8793
	(unsigned char *)EC_P256_PRIV_X, sizeof EC_P256_PRIV_X
8794
};
8795

8796
static const unsigned char EC_P384_PUB_POINT[] = {
8797
	0x04, 0xEC, 0x3A, 0x4E, 0x41, 0x5B, 0x4E, 0x19,
8798
	0xA4, 0x56, 0x86, 0x18, 0x02, 0x9F, 0x42, 0x7F,
8799
	0xA5, 0xDA, 0x9A, 0x8B, 0xC4, 0xAE, 0x92, 0xE0,
8800
	0x2E, 0x06, 0xAA, 0xE5, 0x28, 0x6B, 0x30, 0x0C,
8801
	0x64, 0xDE, 0xF8, 0xF0, 0xEA, 0x90, 0x55, 0x86,
8802
	0x60, 0x64, 0xA2, 0x54, 0x51, 0x54, 0x80, 0xBC,
8803
	0x13, 0x80, 0x15, 0xD9, 0xB7, 0x2D, 0x7D, 0x57,
8804
	0x24, 0x4E, 0xA8, 0xEF, 0x9A, 0xC0, 0xC6, 0x21,
8805
	0x89, 0x67, 0x08, 0xA5, 0x93, 0x67, 0xF9, 0xDF,
8806
	0xB9, 0xF5, 0x4C, 0xA8, 0x4B, 0x3F, 0x1C, 0x9D,
8807
	0xB1, 0x28, 0x8B, 0x23, 0x1C, 0x3A, 0xE0, 0xD4,
8808
	0xFE, 0x73, 0x44, 0xFD, 0x25, 0x33, 0x26, 0x47,
8809
	0x20
8810
};
8811

8812
static const unsigned char EC_P384_PRIV_X[] = {
8813
	0x6B, 0x9D, 0x3D, 0xAD, 0x2E, 0x1B, 0x8C, 0x1C,
8814
	0x05, 0xB1, 0x98, 0x75, 0xB6, 0x65, 0x9F, 0x4D,
8815
	0xE2, 0x3C, 0x3B, 0x66, 0x7B, 0xF2, 0x97, 0xBA,
8816
	0x9A, 0xA4, 0x77, 0x40, 0x78, 0x71, 0x37, 0xD8,
8817
	0x96, 0xD5, 0x72, 0x4E, 0x4C, 0x70, 0xA8, 0x25,
8818
	0xF8, 0x72, 0xC9, 0xEA, 0x60, 0xD2, 0xED, 0xF5
8819
};
8820

8821
static const br_ec_public_key EC_P384_PUB = {
8822
	BR_EC_secp384r1,
8823
	(unsigned char *)EC_P384_PUB_POINT, sizeof EC_P384_PUB_POINT
8824
};
8825

8826
static const br_ec_private_key EC_P384_PRIV = {
8827
	BR_EC_secp384r1,
8828
	(unsigned char *)EC_P384_PRIV_X, sizeof EC_P384_PRIV_X
8829
};
8830

8831
static const unsigned char EC_P521_PUB_POINT[] = {
8832
	0x04, 0x01, 0x89, 0x45, 0x50, 0xD0, 0x78, 0x59,
8833
	0x32, 0xE0, 0x0E, 0xAA, 0x23, 0xB6, 0x94, 0xF2,
8834
	0x13, 0xF8, 0xC3, 0x12, 0x1F, 0x86, 0xDC, 0x97,
8835
	0xA0, 0x4E, 0x5A, 0x71, 0x67, 0xDB, 0x4E, 0x5B,
8836
	0xCD, 0x37, 0x11, 0x23, 0xD4, 0x6E, 0x45, 0xDB,
8837
	0x6B, 0x5D, 0x53, 0x70, 0xA7, 0xF2, 0x0F, 0xB6,
8838
	0x33, 0x15, 0x5D, 0x38, 0xFF, 0xA1, 0x6D, 0x2B,
8839
	0xD7, 0x61, 0xDC, 0xAC, 0x47, 0x4B, 0x9A, 0x2F,
8840
	0x50, 0x23, 0xA4, 0x00, 0x49, 0x31, 0x01, 0xC9,
8841
	0x62, 0xCD, 0x4D, 0x2F, 0xDD, 0xF7, 0x82, 0x28,
8842
	0x5E, 0x64, 0x58, 0x41, 0x39, 0xC2, 0xF9, 0x1B,
8843
	0x47, 0xF8, 0x7F, 0xF8, 0x23, 0x54, 0xD6, 0x63,
8844
	0x0F, 0x74, 0x6A, 0x28, 0xA0, 0xDB, 0x25, 0x74,
8845
	0x1B, 0x5B, 0x34, 0xA8, 0x28, 0x00, 0x8B, 0x22,
8846
	0xAC, 0xC2, 0x3F, 0x92, 0x4F, 0xAA, 0xFB, 0xD4,
8847
	0xD3, 0x3F, 0x81, 0xEA, 0x66, 0x95, 0x6D, 0xFE,
8848
	0xAA, 0x2B, 0xFD, 0xFC, 0xF5
8849
};
8850

8851
static const unsigned char EC_P521_PRIV_X[] = {
8852
	0x00, 0xFA, 0xD0, 0x6D, 0xAA, 0x62, 0xBA, 0x3B,
8853
	0x25, 0xD2, 0xFB, 0x40, 0x13, 0x3D, 0xA7, 0x57,
8854
	0x20, 0x5D, 0xE6, 0x7F, 0x5B, 0xB0, 0x01, 0x8F,
8855
	0xEE, 0x8C, 0x86, 0xE1, 0xB6, 0x8C, 0x7E, 0x75,
8856
	0xCA, 0xA8, 0x96, 0xEB, 0x32, 0xF1, 0xF4, 0x7C,
8857
	0x70, 0x85, 0x58, 0x36, 0xA6, 0xD1, 0x6F, 0xCC,
8858
	0x14, 0x66, 0xF6, 0xD8, 0xFB, 0xEC, 0x67, 0xDB,
8859
	0x89, 0xEC, 0x0C, 0x08, 0xB0, 0xE9, 0x96, 0xB8,
8860
	0x35, 0x38
8861
};
8862

8863
static const br_ec_public_key EC_P521_PUB = {
8864
	BR_EC_secp521r1,
8865
	(unsigned char *)EC_P521_PUB_POINT, sizeof EC_P521_PUB_POINT
8866
};
8867

8868
static const br_ec_private_key EC_P521_PRIV = {
8869
	BR_EC_secp521r1,
8870
	(unsigned char *)EC_P521_PRIV_X, sizeof EC_P521_PRIV_X
8871
};
8872

8873
typedef struct {
8874
	const br_ec_public_key *pub;
8875
	const br_ec_private_key *priv;
8876
	const br_hash_class *hf;
8877
	const char *msg;
8878
	const char *sk;
8879
	const char *sraw;
8880
	const char *sasn1;
8881
} ecdsa_kat_vector;
8882

8883
const ecdsa_kat_vector ECDSA_KAT[] = {
8884

8885
	/* Test vectors for P-256, from RFC 6979. */
8886
	{
8887
		&EC_P256_PUB,
8888
		&EC_P256_PRIV,
8889
		&br_sha1_vtable, "sample",
8890
		"882905F1227FD620FBF2ABF21244F0BA83D0DC3A9103DBBEE43A1FB858109DB4",
8891
		"61340C88C3AAEBEB4F6D667F672CA9759A6CCAA9FA8811313039EE4A35471D326D7F147DAC089441BB2E2FE8F7A3FA264B9C475098FDCF6E00D7C996E1B8B7EB",
8892
		"3044022061340C88C3AAEBEB4F6D667F672CA9759A6CCAA9FA8811313039EE4A35471D3202206D7F147DAC089441BB2E2FE8F7A3FA264B9C475098FDCF6E00D7C996E1B8B7EB"
8893
	},
8894
	{
8895
		&EC_P256_PUB,
8896
		&EC_P256_PRIV,
8897
		&br_sha224_vtable, "sample",
8898
		"103F90EE9DC52E5E7FB5132B7033C63066D194321491862059967C715985D473",
8899
		"53B2FFF5D1752B2C689DF257C04C40A587FABABB3F6FC2702F1343AF7CA9AA3FB9AFB64FDC03DC1A131C7D2386D11E349F070AA432A4ACC918BEA988BF75C74C",
8900
		"3045022053B2FFF5D1752B2C689DF257C04C40A587FABABB3F6FC2702F1343AF7CA9AA3F022100B9AFB64FDC03DC1A131C7D2386D11E349F070AA432A4ACC918BEA988BF75C74C"
8901
	},
8902
	{
8903
		&EC_P256_PUB,
8904
		&EC_P256_PRIV,
8905
		&br_sha256_vtable, "sample",
8906
		"A6E3C57DD01ABE90086538398355DD4C3B17AA873382B0F24D6129493D8AAD60",
8907
		"EFD48B2AACB6A8FD1140DD9CD45E81D69D2C877B56AAF991C34D0EA84EAF3716F7CB1C942D657C41D436C7A1B6E29F65F3E900DBB9AFF4064DC4AB2F843ACDA8",
8908
		"3046022100EFD48B2AACB6A8FD1140DD9CD45E81D69D2C877B56AAF991C34D0EA84EAF3716022100F7CB1C942D657C41D436C7A1B6E29F65F3E900DBB9AFF4064DC4AB2F843ACDA8"
8909
	},
8910
	{
8911
		&EC_P256_PUB,
8912
		&EC_P256_PRIV,
8913
		&br_sha384_vtable, "sample",
8914
		"09F634B188CEFD98E7EC88B1AA9852D734D0BC272F7D2A47DECC6EBEB375AAD4",
8915
		"0EAFEA039B20E9B42309FB1D89E213057CBF973DC0CFC8F129EDDDC800EF77194861F0491E6998B9455193E34E7B0D284DDD7149A74B95B9261F13ABDE940954",
8916
		"304402200EAFEA039B20E9B42309FB1D89E213057CBF973DC0CFC8F129EDDDC800EF771902204861F0491E6998B9455193E34E7B0D284DDD7149A74B95B9261F13ABDE940954"
8917
	},
8918
	{
8919
		&EC_P256_PUB,
8920
		&EC_P256_PRIV,
8921
		&br_sha512_vtable, "sample",
8922
		"5FA81C63109BADB88C1F367B47DA606DA28CAD69AA22C4FE6AD7DF73A7173AA5",
8923
		"8496A60B5E9B47C825488827E0495B0E3FA109EC4568FD3F8D1097678EB97F002362AB1ADBE2B8ADF9CB9EDAB740EA6049C028114F2460F96554F61FAE3302FE",
8924
		"30450221008496A60B5E9B47C825488827E0495B0E3FA109EC4568FD3F8D1097678EB97F0002202362AB1ADBE2B8ADF9CB9EDAB740EA6049C028114F2460F96554F61FAE3302FE"
8925
	},
8926
	{
8927
		&EC_P256_PUB,
8928
		&EC_P256_PRIV,
8929
		&br_sha1_vtable, "test",
8930
		"8C9520267C55D6B980DF741E56B4ADEE114D84FBFA2E62137954164028632A2E",
8931
		"0CBCC86FD6ABD1D99E703E1EC50069EE5C0B4BA4B9AC60E409E8EC5910D81A8901B9D7B73DFAA60D5651EC4591A0136F87653E0FD780C3B1BC872FFDEAE479B1",
8932
		"304402200CBCC86FD6ABD1D99E703E1EC50069EE5C0B4BA4B9AC60E409E8EC5910D81A89022001B9D7B73DFAA60D5651EC4591A0136F87653E0FD780C3B1BC872FFDEAE479B1"
8933
	},
8934
	{
8935
		&EC_P256_PUB,
8936
		&EC_P256_PRIV,
8937
		&br_sha224_vtable, "test",
8938
		"669F4426F2688B8BE0DB3A6BD1989BDAEFFF84B649EEB84F3DD26080F667FAA7",
8939
		"C37EDB6F0AE79D47C3C27E962FA269BB4F441770357E114EE511F662EC34A692C820053A05791E521FCAAD6042D40AEA1D6B1A540138558F47D0719800E18F2D",
8940
		"3046022100C37EDB6F0AE79D47C3C27E962FA269BB4F441770357E114EE511F662EC34A692022100C820053A05791E521FCAAD6042D40AEA1D6B1A540138558F47D0719800E18F2D"
8941
	},
8942
	{
8943
		&EC_P256_PUB,
8944
		&EC_P256_PRIV,
8945
		&br_sha256_vtable, "test",
8946
		"D16B6AE827F17175E040871A1C7EC3500192C4C92677336EC2537ACAEE0008E0",
8947
		"F1ABB023518351CD71D881567B1EA663ED3EFCF6C5132B354F28D3B0B7D38367019F4113742A2B14BD25926B49C649155F267E60D3814B4C0CC84250E46F0083",
8948
		"3045022100F1ABB023518351CD71D881567B1EA663ED3EFCF6C5132B354F28D3B0B7D383670220019F4113742A2B14BD25926B49C649155F267E60D3814B4C0CC84250E46F0083"
8949
	},
8950
	{
8951
		&EC_P256_PUB,
8952
		&EC_P256_PRIV,
8953
		&br_sha384_vtable, "test",
8954
		"16AEFFA357260B04B1DD199693960740066C1A8F3E8EDD79070AA914D361B3B8",
8955
		"83910E8B48BB0C74244EBDF7F07A1C5413D61472BD941EF3920E623FBCCEBEB68DDBEC54CF8CD5874883841D712142A56A8D0F218F5003CB0296B6B509619F2C",
8956
		"304602210083910E8B48BB0C74244EBDF7F07A1C5413D61472BD941EF3920E623FBCCEBEB60221008DDBEC54CF8CD5874883841D712142A56A8D0F218F5003CB0296B6B509619F2C"
8957
	},
8958
	{
8959
		&EC_P256_PUB,
8960
		&EC_P256_PRIV,
8961
		&br_sha512_vtable, "test",
8962
		"6915D11632ACA3C40D5D51C08DAF9C555933819548784480E93499000D9F0B7F",
8963
		"461D93F31B6540894788FD206C07CFA0CC35F46FA3C91816FFF1040AD1581A0439AF9F15DE0DB8D97E72719C74820D304CE5226E32DEDAE67519E840D1194E55",
8964
		"30440220461D93F31B6540894788FD206C07CFA0CC35F46FA3C91816FFF1040AD1581A04022039AF9F15DE0DB8D97E72719C74820D304CE5226E32DEDAE67519E840D1194E55"
8965
	},
8966

8967
	/* Test vectors for P-384, from RFC 6979. */
8968
	{
8969
		&EC_P384_PUB,
8970
		&EC_P384_PRIV,
8971
		&br_sha1_vtable, "sample",
8972
		"4471EF7518BB2C7C20F62EAE1C387AD0C5E8E470995DB4ACF694466E6AB096630F29E5938D25106C3C340045A2DB01A7",
8973
		"EC748D839243D6FBEF4FC5C4859A7DFFD7F3ABDDF72014540C16D73309834FA37B9BA002899F6FDA3A4A9386790D4EB2A3BCFA947BEEF4732BF247AC17F71676CB31A847B9FF0CBC9C9ED4C1A5B3FACF26F49CA031D4857570CCB5CA4424A443",
8974
		"3066023100EC748D839243D6FBEF4FC5C4859A7DFFD7F3ABDDF72014540C16D73309834FA37B9BA002899F6FDA3A4A9386790D4EB2023100A3BCFA947BEEF4732BF247AC17F71676CB31A847B9FF0CBC9C9ED4C1A5B3FACF26F49CA031D4857570CCB5CA4424A443"
8975
	},
8976

8977
	{
8978
		&EC_P384_PUB,
8979
		&EC_P384_PRIV,
8980
		&br_sha224_vtable, "sample",
8981
		"A4E4D2F0E729EB786B31FC20AD5D849E304450E0AE8E3E341134A5C1AFA03CAB8083EE4E3C45B06A5899EA56C51B5879",
8982
		"42356E76B55A6D9B4631C865445DBE54E056D3B3431766D0509244793C3F9366450F76EE3DE43F5A125333A6BE0601229DA0C81787064021E78DF658F2FBB0B042BF304665DB721F077A4298B095E4834C082C03D83028EFBF93A3C23940CA8D",
8983
		"3065023042356E76B55A6D9B4631C865445DBE54E056D3B3431766D0509244793C3F9366450F76EE3DE43F5A125333A6BE0601220231009DA0C81787064021E78DF658F2FBB0B042BF304665DB721F077A4298B095E4834C082C03D83028EFBF93A3C23940CA8D"
8984
	},
8985
	{
8986
		&EC_P384_PUB,
8987
		&EC_P384_PRIV,
8988
		&br_sha256_vtable, "sample",
8989
		"180AE9F9AEC5438A44BC159A1FCB277C7BE54FA20E7CF404B490650A8ACC414E375572342863C899F9F2EDF9747A9B60",
8990
		"21B13D1E013C7FA1392D03C5F99AF8B30C570C6F98D4EA8E354B63A21D3DAA33BDE1E888E63355D92FA2B3C36D8FB2CDF3AA443FB107745BF4BD77CB3891674632068A10CA67E3D45DB2266FA7D1FEEBEFDC63ECCD1AC42EC0CB8668A4FA0AB0",
8991
		"3065023021B13D1E013C7FA1392D03C5F99AF8B30C570C6F98D4EA8E354B63A21D3DAA33BDE1E888E63355D92FA2B3C36D8FB2CD023100F3AA443FB107745BF4BD77CB3891674632068A10CA67E3D45DB2266FA7D1FEEBEFDC63ECCD1AC42EC0CB8668A4FA0AB0"
8992
	},
8993
	{
8994
		&EC_P384_PUB,
8995
		&EC_P384_PRIV,
8996
		&br_sha384_vtable, "sample",
8997
		"94ED910D1A099DAD3254E9242AE85ABDE4BA15168EAF0CA87A555FD56D10FBCA2907E3E83BA95368623B8C4686915CF9",
8998
		"94EDBB92A5ECB8AAD4736E56C691916B3F88140666CE9FA73D64C4EA95AD133C81A648152E44ACF96E36DD1E80FABE4699EF4AEB15F178CEA1FE40DB2603138F130E740A19624526203B6351D0A3A94FA329C145786E679E7B82C71A38628AC8",
8999
		"306602310094EDBB92A5ECB8AAD4736E56C691916B3F88140666CE9FA73D64C4EA95AD133C81A648152E44ACF96E36DD1E80FABE4602310099EF4AEB15F178CEA1FE40DB2603138F130E740A19624526203B6351D0A3A94FA329C145786E679E7B82C71A38628AC8"
9000
	},
9001
	{
9002
		&EC_P384_PUB,
9003
		&EC_P384_PRIV,
9004
		&br_sha512_vtable, "sample",
9005
		"92FC3C7183A883E24216D1141F1A8976C5B0DD797DFA597E3D7B32198BD35331A4E966532593A52980D0E3AAA5E10EC3",
9006
		"ED0959D5880AB2D869AE7F6C2915C6D60F96507F9CB3E047C0046861DA4A799CFE30F35CC900056D7C99CD7882433709512C8CCEEE3890A84058CE1E22DBC2198F42323CE8ACA9135329F03C068E5112DC7CC3EF3446DEFCEB01A45C2667FDD5",
9007
		"3065023100ED0959D5880AB2D869AE7F6C2915C6D60F96507F9CB3E047C0046861DA4A799CFE30F35CC900056D7C99CD78824337090230512C8CCEEE3890A84058CE1E22DBC2198F42323CE8ACA9135329F03C068E5112DC7CC3EF3446DEFCEB01A45C2667FDD5"
9008
	},
9009
	{
9010
		&EC_P384_PUB,
9011
		&EC_P384_PRIV,
9012
		&br_sha1_vtable, "test",
9013
		"66CC2C8F4D303FC962E5FF6A27BD79F84EC812DDAE58CF5243B64A4AD8094D47EC3727F3A3C186C15054492E30698497",
9014
		"4BC35D3A50EF4E30576F58CD96CE6BF638025EE624004A1F7789A8B8E43D0678ACD9D29876DAF46638645F7F404B11C7D5A6326C494ED3FF614703878961C0FDE7B2C278F9A65FD8C4B7186201A2991695BA1C84541327E966FA7B50F7382282",
9015
		"306502304BC35D3A50EF4E30576F58CD96CE6BF638025EE624004A1F7789A8B8E43D0678ACD9D29876DAF46638645F7F404B11C7023100D5A6326C494ED3FF614703878961C0FDE7B2C278F9A65FD8C4B7186201A2991695BA1C84541327E966FA7B50F7382282"
9016
	},
9017
	{
9018
		&EC_P384_PUB,
9019
		&EC_P384_PRIV,
9020
		&br_sha224_vtable, "test",
9021
		"18FA39DB95AA5F561F30FA3591DC59C0FA3653A80DAFFA0B48D1A4C6DFCBFF6E3D33BE4DC5EB8886A8ECD093F2935726",
9022
		"E8C9D0B6EA72A0E7837FEA1D14A1A9557F29FAA45D3E7EE888FC5BF954B5E62464A9A817C47FF78B8C11066B24080E7207041D4A7A0379AC7232FF72E6F77B6DDB8F09B16CCE0EC3286B2BD43FA8C6141C53EA5ABEF0D8231077A04540A96B66",
9023
		"3065023100E8C9D0B6EA72A0E7837FEA1D14A1A9557F29FAA45D3E7EE888FC5BF954B5E62464A9A817C47FF78B8C11066B24080E72023007041D4A7A0379AC7232FF72E6F77B6DDB8F09B16CCE0EC3286B2BD43FA8C6141C53EA5ABEF0D8231077A04540A96B66"
9024
	},
9025
	{
9026
		&EC_P384_PUB,
9027
		&EC_P384_PRIV,
9028
		&br_sha256_vtable, "test",
9029
		"0CFAC37587532347DC3389FDC98286BBA8C73807285B184C83E62E26C401C0FAA48DD070BA79921A3457ABFF2D630AD7",
9030
		"6D6DEFAC9AB64DABAFE36C6BF510352A4CC27001263638E5B16D9BB51D451559F918EEDAF2293BE5B475CC8F0188636B2D46F3BECBCC523D5F1A1256BF0C9B024D879BA9E838144C8BA6BAEB4B53B47D51AB373F9845C0514EEFB14024787265",
9031
		"306402306D6DEFAC9AB64DABAFE36C6BF510352A4CC27001263638E5B16D9BB51D451559F918EEDAF2293BE5B475CC8F0188636B02302D46F3BECBCC523D5F1A1256BF0C9B024D879BA9E838144C8BA6BAEB4B53B47D51AB373F9845C0514EEFB14024787265"
9032
	},
9033
	{
9034
		&EC_P384_PUB,
9035
		&EC_P384_PRIV,
9036
		&br_sha384_vtable, "test",
9037
		"015EE46A5BF88773ED9123A5AB0807962D193719503C527B031B4C2D225092ADA71F4A459BC0DA98ADB95837DB8312EA",
9038
		"8203B63D3C853E8D77227FB377BCF7B7B772E97892A80F36AB775D509D7A5FEB0542A7F0812998DA8F1DD3CA3CF023DBDDD0760448D42D8A43AF45AF836FCE4DE8BE06B485E9B61B827C2F13173923E06A739F040649A667BF3B828246BAA5A5",
9039
		"30660231008203B63D3C853E8D77227FB377BCF7B7B772E97892A80F36AB775D509D7A5FEB0542A7F0812998DA8F1DD3CA3CF023DB023100DDD0760448D42D8A43AF45AF836FCE4DE8BE06B485E9B61B827C2F13173923E06A739F040649A667BF3B828246BAA5A5"
9040
	},
9041
	{
9042
		&EC_P384_PUB,
9043
		&EC_P384_PRIV,
9044
		&br_sha512_vtable, "test",
9045
		"3780C4F67CB15518B6ACAE34C9F83568D2E12E47DEAB6C50A4E4EE5319D1E8CE0E2CC8A136036DC4B9C00E6888F66B6C",
9046
		"A0D5D090C9980FAF3C2CE57B7AE951D31977DD11C775D314AF55F76C676447D06FB6495CD21B4B6E340FC236584FB277976984E59B4C77B0E8E4460DCA3D9F20E07B9BB1F63BEEFAF576F6B2E8B224634A2092CD3792E0159AD9CEE37659C736",
9047
		"3066023100A0D5D090C9980FAF3C2CE57B7AE951D31977DD11C775D314AF55F76C676447D06FB6495CD21B4B6E340FC236584FB277023100976984E59B4C77B0E8E4460DCA3D9F20E07B9BB1F63BEEFAF576F6B2E8B224634A2092CD3792E0159AD9CEE37659C736"
9048
	},
9049

9050
	/* Test vectors for P-521, from RFC 6979. */
9051
	{
9052
		&EC_P521_PUB,
9053
		&EC_P521_PRIV,
9054
		&br_sha1_vtable, "sample",
9055
		"0089C071B419E1C2820962321787258469511958E80582E95D8378E0C2CCDB3CB42BEDE42F50E3FA3C71F5A76724281D31D9C89F0F91FC1BE4918DB1C03A5838D0F9",
9056
		"00343B6EC45728975EA5CBA6659BBB6062A5FF89EEA58BE3C80B619F322C87910FE092F7D45BB0F8EEE01ED3F20BABEC079D202AE677B243AB40B5431D497C55D75D00E7B0E675A9B24413D448B8CC119D2BF7B2D2DF032741C096634D6D65D0DBE3D5694625FB9E8104D3B842C1B0E2D0B98BEA19341E8676AEF66AE4EBA3D5475D5D16",
9057
		"3081870241343B6EC45728975EA5CBA6659BBB6062A5FF89EEA58BE3C80B619F322C87910FE092F7D45BB0F8EEE01ED3F20BABEC079D202AE677B243AB40B5431D497C55D75D024200E7B0E675A9B24413D448B8CC119D2BF7B2D2DF032741C096634D6D65D0DBE3D5694625FB9E8104D3B842C1B0E2D0B98BEA19341E8676AEF66AE4EBA3D5475D5D16"
9058
	},
9059
	{
9060
		&EC_P521_PUB,
9061
		&EC_P521_PRIV,
9062
		&br_sha224_vtable, "sample",
9063
		"0121415EC2CD7726330A61F7F3FA5DE14BE9436019C4DB8CB4041F3B54CF31BE0493EE3F427FB906393D895A19C9523F3A1D54BB8702BD4AA9C99DAB2597B92113F3",
9064
		"01776331CFCDF927D666E032E00CF776187BC9FDD8E69D0DABB4109FFE1B5E2A30715F4CC923A4A5E94D2503E9ACFED92857B7F31D7152E0F8C00C15FF3D87E2ED2E0050CB5265417FE2320BBB5A122B8E1A32BD699089851128E360E620A30C7E17BA41A666AF126CE100E5799B153B60528D5300D08489CA9178FB610A2006C254B41F",
9065
		"308187024201776331CFCDF927D666E032E00CF776187BC9FDD8E69D0DABB4109FFE1B5E2A30715F4CC923A4A5E94D2503E9ACFED92857B7F31D7152E0F8C00C15FF3D87E2ED2E024150CB5265417FE2320BBB5A122B8E1A32BD699089851128E360E620A30C7E17BA41A666AF126CE100E5799B153B60528D5300D08489CA9178FB610A2006C254B41F"
9066
	},
9067
	{
9068
		&EC_P521_PUB,
9069
		&EC_P521_PRIV,
9070
		&br_sha256_vtable, "sample",
9071
		"00EDF38AFCAAECAB4383358B34D67C9F2216C8382AAEA44A3DAD5FDC9C32575761793FEF24EB0FC276DFC4F6E3EC476752F043CF01415387470BCBD8678ED2C7E1A0",
9072
		"01511BB4D675114FE266FC4372B87682BAECC01D3CC62CF2303C92B3526012659D16876E25C7C1E57648F23B73564D67F61C6F14D527D54972810421E7D87589E1A7004A171143A83163D6DF460AAF61522695F207A58B95C0644D87E52AA1A347916E4F7A72930B1BC06DBE22CE3F58264AFD23704CBB63B29B931F7DE6C9D949A7ECFC",
9073
		"308187024201511BB4D675114FE266FC4372B87682BAECC01D3CC62CF2303C92B3526012659D16876E25C7C1E57648F23B73564D67F61C6F14D527D54972810421E7D87589E1A702414A171143A83163D6DF460AAF61522695F207A58B95C0644D87E52AA1A347916E4F7A72930B1BC06DBE22CE3F58264AFD23704CBB63B29B931F7DE6C9D949A7ECFC"
9074
	},
9075
	{
9076
		&EC_P521_PUB,
9077
		&EC_P521_PRIV,
9078
		&br_sha384_vtable, "sample",
9079
		"01546A108BC23A15D6F21872F7DED661FA8431DDBD922D0DCDB77CC878C8553FFAD064C95A920A750AC9137E527390D2D92F153E66196966EA554D9ADFCB109C4211",
9080
		"01EA842A0E17D2DE4F92C15315C63DDF72685C18195C2BB95E572B9C5136CA4B4B576AD712A52BE9730627D16054BA40CC0B8D3FF035B12AE75168397F5D50C6745101F21A3CEE066E1961025FB048BD5FE2B7924D0CD797BABE0A83B66F1E35EEAF5FDE143FA85DC394A7DEE766523393784484BDF3E00114A1C857CDE1AA203DB65D61",
9081
		"308188024201EA842A0E17D2DE4F92C15315C63DDF72685C18195C2BB95E572B9C5136CA4B4B576AD712A52BE9730627D16054BA40CC0B8D3FF035B12AE75168397F5D50C67451024201F21A3CEE066E1961025FB048BD5FE2B7924D0CD797BABE0A83B66F1E35EEAF5FDE143FA85DC394A7DEE766523393784484BDF3E00114A1C857CDE1AA203DB65D61"
9082
	},
9083
	{
9084
		&EC_P521_PUB,
9085
		&EC_P521_PRIV,
9086
		&br_sha512_vtable, "sample",
9087
		"01DAE2EA071F8110DC26882D4D5EAE0621A3256FC8847FB9022E2B7D28E6F10198B1574FDD03A9053C08A1854A168AA5A57470EC97DD5CE090124EF52A2F7ECBFFD3",
9088
		"00C328FAFCBD79DD77850370C46325D987CB525569FB63C5D3BC53950E6D4C5F174E25A1EE9017B5D450606ADD152B534931D7D4E8455CC91F9B15BF05EC36E377FA00617CCE7CF5064806C467F678D3B4080D6F1CC50AF26CA209417308281B68AF282623EAA63E5B5C0723D8B8C37FF0777B1A20F8CCB1DCCC43997F1EE0E44DA4A67A",
9089
		"308187024200C328FAFCBD79DD77850370C46325D987CB525569FB63C5D3BC53950E6D4C5F174E25A1EE9017B5D450606ADD152B534931D7D4E8455CC91F9B15BF05EC36E377FA0241617CCE7CF5064806C467F678D3B4080D6F1CC50AF26CA209417308281B68AF282623EAA63E5B5C0723D8B8C37FF0777B1A20F8CCB1DCCC43997F1EE0E44DA4A67A"
9090
	},
9091
	{
9092
		&EC_P521_PUB,
9093
		&EC_P521_PRIV,
9094
		&br_sha1_vtable, "test",
9095
		"00BB9F2BF4FE1038CCF4DABD7139A56F6FD8BB1386561BD3C6A4FC818B20DF5DDBA80795A947107A1AB9D12DAA615B1ADE4F7A9DC05E8E6311150F47F5C57CE8B222",
9096
		"013BAD9F29ABE20DE37EBEB823C252CA0F63361284015A3BF430A46AAA80B87B0693F0694BD88AFE4E661FC33B094CD3B7963BED5A727ED8BD6A3A202ABE009D036701E9BB81FF7944CA409AD138DBBEE228E1AFCC0C890FC78EC8604639CB0DBDC90F717A99EAD9D272855D00162EE9527567DD6A92CBD629805C0445282BBC916797FF",
9097
		"3081880242013BAD9F29ABE20DE37EBEB823C252CA0F63361284015A3BF430A46AAA80B87B0693F0694BD88AFE4E661FC33B094CD3B7963BED5A727ED8BD6A3A202ABE009D0367024201E9BB81FF7944CA409AD138DBBEE228E1AFCC0C890FC78EC8604639CB0DBDC90F717A99EAD9D272855D00162EE9527567DD6A92CBD629805C0445282BBC916797FF"
9098
	},
9099
	{
9100
		&EC_P521_PUB,
9101
		&EC_P521_PRIV,
9102
		&br_sha224_vtable, "test",
9103
		"0040D09FCF3C8A5F62CF4FB223CBBB2B9937F6B0577C27020A99602C25A01136987E452988781484EDBBCF1C47E554E7FC901BC3085E5206D9F619CFF07E73D6F706",
9104
		"01C7ED902E123E6815546065A2C4AF977B22AA8EADDB68B2C1110E7EA44D42086BFE4A34B67DDC0E17E96536E358219B23A706C6A6E16BA77B65E1C595D43CAE17FB0177336676304FCB343CE028B38E7B4FBA76C1C1B277DA18CAD2A8478B2A9A9F5BEC0F3BA04F35DB3E4263569EC6AADE8C92746E4C82F8299AE1B8F1739F8FD519A4",
9105
		"308188024201C7ED902E123E6815546065A2C4AF977B22AA8EADDB68B2C1110E7EA44D42086BFE4A34B67DDC0E17E96536E358219B23A706C6A6E16BA77B65E1C595D43CAE17FB02420177336676304FCB343CE028B38E7B4FBA76C1C1B277DA18CAD2A8478B2A9A9F5BEC0F3BA04F35DB3E4263569EC6AADE8C92746E4C82F8299AE1B8F1739F8FD519A4"
9106
	},
9107
	{
9108
		&EC_P521_PUB,
9109
		&EC_P521_PRIV,
9110
		&br_sha256_vtable, "test",
9111
		"001DE74955EFAABC4C4F17F8E84D881D1310B5392D7700275F82F145C61E843841AF09035BF7A6210F5A431A6A9E81C9323354A9E69135D44EBD2FCAA7731B909258",
9112
		"000E871C4A14F993C6C7369501900C4BC1E9C7B0B4BA44E04868B30B41D8071042EB28C4C250411D0CE08CD197E4188EA4876F279F90B3D8D74A3C76E6F1E4656AA800CD52DBAA33B063C3A6CD8058A1FB0A46A4754B034FCC644766CA14DA8CA5CA9FDE00E88C1AD60CCBA759025299079D7A427EC3CC5B619BFBC828E7769BCD694E86",
9113
		"30818702410E871C4A14F993C6C7369501900C4BC1E9C7B0B4BA44E04868B30B41D8071042EB28C4C250411D0CE08CD197E4188EA4876F279F90B3D8D74A3C76E6F1E4656AA8024200CD52DBAA33B063C3A6CD8058A1FB0A46A4754B034FCC644766CA14DA8CA5CA9FDE00E88C1AD60CCBA759025299079D7A427EC3CC5B619BFBC828E7769BCD694E86"
9114
	},
9115
	{
9116
		&EC_P521_PUB,
9117
		&EC_P521_PRIV,
9118
		&br_sha384_vtable, "test",
9119
		"01F1FC4A349A7DA9A9E116BFDD055DC08E78252FF8E23AC276AC88B1770AE0B5DCEB1ED14A4916B769A523CE1E90BA22846AF11DF8B300C38818F713DADD85DE0C88",
9120
		"014BEE21A18B6D8B3C93FAB08D43E739707953244FDBE924FA926D76669E7AC8C89DF62ED8975C2D8397A65A49DCC09F6B0AC62272741924D479354D74FF6075578C0133330865C067A0EAF72362A65E2D7BC4E461E8C8995C3B6226A21BD1AA78F0ED94FE536A0DCA35534F0CD1510C41525D163FE9D74D134881E35141ED5E8E95B979",
9121
		"3081880242014BEE21A18B6D8B3C93FAB08D43E739707953244FDBE924FA926D76669E7AC8C89DF62ED8975C2D8397A65A49DCC09F6B0AC62272741924D479354D74FF6075578C02420133330865C067A0EAF72362A65E2D7BC4E461E8C8995C3B6226A21BD1AA78F0ED94FE536A0DCA35534F0CD1510C41525D163FE9D74D134881E35141ED5E8E95B979"
9122
	},
9123
	{
9124
		&EC_P521_PUB,
9125
		&EC_P521_PRIV,
9126
		&br_sha512_vtable, "test",
9127
		"016200813020EC986863BEDFC1B121F605C1215645018AEA1A7B215A564DE9EB1B38A67AA1128B80CE391C4FB71187654AAA3431027BFC7F395766CA988C964DC56D",
9128
		"013E99020ABF5CEE7525D16B69B229652AB6BDF2AFFCAEF38773B4B7D08725F10CDB93482FDCC54EDCEE91ECA4166B2A7C6265EF0CE2BD7051B7CEF945BABD47EE6D01FBD0013C674AA79CB39849527916CE301C66EA7CE8B80682786AD60F98F7E78A19CA69EFF5C57400E3B3A0AD66CE0978214D13BAF4E9AC60752F7B155E2DE4DCE3",
9129
		"3081880242013E99020ABF5CEE7525D16B69B229652AB6BDF2AFFCAEF38773B4B7D08725F10CDB93482FDCC54EDCEE91ECA4166B2A7C6265EF0CE2BD7051B7CEF945BABD47EE6D024201FBD0013C674AA79CB39849527916CE301C66EA7CE8B80682786AD60F98F7E78A19CA69EFF5C57400E3B3A0AD66CE0978214D13BAF4E9AC60752F7B155E2DE4DCE3"
9130
	},
9131

9132
	/* Terminator for list of test vectors. */
9133
	{
9134
		0, 0, 0, 0, 0, 0, 0
9135
	}
9136
};
9137

9138
static void
9139
test_ECDSA_KAT(const br_ec_impl *iec,
9140
	br_ecdsa_sign sign, br_ecdsa_vrfy vrfy, int asn1)
9141
{
9142
	size_t u;
9143

9144
	for (u = 0;; u ++) {
9145
		const ecdsa_kat_vector *kv;
9146
		unsigned char hash[64];
9147
		size_t hash_len;
9148
		unsigned char sig[150], sig2[150];
9149
		size_t sig_len, sig2_len;
9150
		br_hash_compat_context hc;
9151

9152
		kv = &ECDSA_KAT[u];
9153
		if (kv->pub == 0) {
9154
			break;
9155
		}
9156
		kv->hf->init(&hc.vtable);
9157
		kv->hf->update(&hc.vtable, kv->msg, strlen(kv->msg));
9158
		kv->hf->out(&hc.vtable, hash);
9159
		hash_len = (kv->hf->desc >> BR_HASHDESC_OUT_OFF)
9160
			& BR_HASHDESC_OUT_MASK;
9161
		if (asn1) {
9162
			sig_len = hextobin(sig, kv->sasn1);
9163
		} else {
9164
			sig_len = hextobin(sig, kv->sraw);
9165
		}
9166

9167
		if (vrfy(iec, hash, hash_len,
9168
			kv->pub, sig, sig_len) != 1)
9169
		{
9170
			fprintf(stderr, "ECDSA KAT verify failed (1)\n");
9171
			exit(EXIT_FAILURE);
9172
		}
9173
		hash[0] ^= 0x80;
9174
		if (vrfy(iec, hash, hash_len,
9175
			kv->pub, sig, sig_len) != 0)
9176
		{
9177
			fprintf(stderr, "ECDSA KAT verify shoud have failed\n");
9178
			exit(EXIT_FAILURE);
9179
		}
9180
		hash[0] ^= 0x80;
9181
		if (vrfy(iec, hash, hash_len,
9182
			kv->pub, sig, sig_len) != 1)
9183
		{
9184
			fprintf(stderr, "ECDSA KAT verify failed (2)\n");
9185
			exit(EXIT_FAILURE);
9186
		}
9187

9188
		sig2_len = sign(iec, kv->hf, hash, kv->priv, sig2);
9189
		if (sig2_len == 0) {
9190
			fprintf(stderr, "ECDSA KAT sign failed\n");
9191
			exit(EXIT_FAILURE);
9192
		}
9193
		if (sig2_len != sig_len || memcmp(sig, sig2, sig_len) != 0) {
9194
			fprintf(stderr, "ECDSA KAT wrong signature value\n");
9195
			exit(EXIT_FAILURE);
9196
		}
9197

9198
		printf(".");
9199
		fflush(stdout);
9200
	}
9201
}
9202

9203
static void
9204
test_ECDSA_i31(void)
9205
{
9206
	printf("Test ECDSA/i31: ");
9207
	fflush(stdout);
9208
	printf("[raw]");
9209
	fflush(stdout);
9210
	test_ECDSA_KAT(&br_ec_prime_i31,
9211
		&br_ecdsa_i31_sign_raw, &br_ecdsa_i31_vrfy_raw, 0);
9212
	printf(" [asn1]");
9213
	fflush(stdout);
9214
	test_ECDSA_KAT(&br_ec_prime_i31,
9215
		&br_ecdsa_i31_sign_asn1, &br_ecdsa_i31_vrfy_asn1, 1);
9216
	printf(" done.\n");
9217
	fflush(stdout);
9218
}
9219

9220
static void
9221
test_ECDSA_i15(void)
9222
{
9223
	printf("Test ECDSA/i15: ");
9224
	fflush(stdout);
9225
	printf("[raw]");
9226
	fflush(stdout);
9227
	test_ECDSA_KAT(&br_ec_prime_i15,
9228
		&br_ecdsa_i15_sign_raw, &br_ecdsa_i15_vrfy_raw, 0);
9229
	printf(" [asn1]");
9230
	fflush(stdout);
9231
	test_ECDSA_KAT(&br_ec_prime_i31,
9232
		&br_ecdsa_i15_sign_asn1, &br_ecdsa_i15_vrfy_asn1, 1);
9233
	printf(" done.\n");
9234
	fflush(stdout);
9235
}
9236

9237
static void
9238
test_modpow_i31(void)
9239
{
9240
	br_hmac_drbg_context hc;
9241
	int k;
9242

9243
	printf("Test ModPow/i31: ");
9244

9245
	br_hmac_drbg_init(&hc, &br_sha256_vtable, "seed modpow", 11);
9246
	for (k = 10; k <= 500; k ++) {
9247
		size_t blen;
9248
		unsigned char bm[128], bx[128], bx1[128], bx2[128];
9249
		unsigned char be[128];
9250
		unsigned mask;
9251
		uint32_t x1[35], m1[35];
9252
		uint16_t x2[70], m2[70];
9253
		uint32_t tmp1[1000];
9254
		uint16_t tmp2[2000];
9255

9256
		blen = (k + 7) >> 3;
9257
		br_hmac_drbg_generate(&hc, bm, blen);
9258
		br_hmac_drbg_generate(&hc, bx, blen);
9259
		br_hmac_drbg_generate(&hc, be, blen);
9260
		bm[blen - 1] |= 0x01;
9261
		mask = 0xFF >> ((int)(blen << 3) - k);
9262
		bm[0] &= mask;
9263
		bm[0] |= (mask - (mask >> 1));
9264
		bx[0] &= (mask >> 1);
9265

9266
		br_i31_decode(m1, bm, blen);
9267
		br_i31_decode_mod(x1, bx, blen, m1);
9268
		br_i31_modpow_opt(x1, be, blen, m1, br_i31_ninv31(m1[1]),
9269
			tmp1, (sizeof tmp1) / (sizeof tmp1[0]));
9270
		br_i31_encode(bx1, blen, x1);
9271

9272
		br_i15_decode(m2, bm, blen);
9273
		br_i15_decode_mod(x2, bx, blen, m2);
9274
		br_i15_modpow_opt(x2, be, blen, m2, br_i15_ninv15(m2[1]),
9275
			tmp2, (sizeof tmp2) / (sizeof tmp2[0]));
9276
		br_i15_encode(bx2, blen, x2);
9277

9278
		check_equals("ModPow i31/i15", bx1, bx2, blen);
9279

9280
		printf(".");
9281
		fflush(stdout);
9282
	}
9283

9284
	printf(" done.\n");
9285
	fflush(stdout);
9286
}
9287

9288
static void
9289
test_modpow_i62(void)
9290
{
9291
	br_hmac_drbg_context hc;
9292
	int k;
9293

9294
	printf("Test ModPow/i62: ");
9295

9296
	br_hmac_drbg_init(&hc, &br_sha256_vtable, "seed modpow", 11);
9297
	for (k = 10; k <= 500; k ++) {
9298
		size_t blen;
9299
		unsigned char bm[128], bx[128], bx1[128], bx2[128];
9300
		unsigned char be[128];
9301
		unsigned mask;
9302
		uint32_t x1[35], m1[35];
9303
		uint16_t x2[70], m2[70];
9304
		uint64_t tmp1[500];
9305
		uint16_t tmp2[2000];
9306

9307
		blen = (k + 7) >> 3;
9308
		br_hmac_drbg_generate(&hc, bm, blen);
9309
		br_hmac_drbg_generate(&hc, bx, blen);
9310
		br_hmac_drbg_generate(&hc, be, blen);
9311
		bm[blen - 1] |= 0x01;
9312
		mask = 0xFF >> ((int)(blen << 3) - k);
9313
		bm[0] &= mask;
9314
		bm[0] |= (mask - (mask >> 1));
9315
		bx[0] &= (mask >> 1);
9316

9317
		br_i31_decode(m1, bm, blen);
9318
		br_i31_decode_mod(x1, bx, blen, m1);
9319
		br_i62_modpow_opt(x1, be, blen, m1, br_i31_ninv31(m1[1]),
9320
			tmp1, (sizeof tmp1) / (sizeof tmp1[0]));
9321
		br_i31_encode(bx1, blen, x1);
9322

9323
		br_i15_decode(m2, bm, blen);
9324
		br_i15_decode_mod(x2, bx, blen, m2);
9325
		br_i15_modpow_opt(x2, be, blen, m2, br_i15_ninv15(m2[1]),
9326
			tmp2, (sizeof tmp2) / (sizeof tmp2[0]));
9327
		br_i15_encode(bx2, blen, x2);
9328

9329
		check_equals("ModPow i62/i15", bx1, bx2, blen);
9330

9331
		printf(".");
9332
		fflush(stdout);
9333
	}
9334

9335
	printf(" done.\n");
9336
	fflush(stdout);
9337
}
9338

9339
static int
9340
eq_name(const char *s1, const char *s2)
9341
{
9342
	for (;;) {
9343
		int c1, c2;
9344

9345
		for (;;) {
9346
			c1 = *s1 ++;
9347
			if (c1 >= 'A' && c1 <= 'Z') {
9348
				c1 += 'a' - 'A';
9349
			} else {
9350
				switch (c1) {
9351
				case '-': case '_': case '.': case ' ':
9352
					continue;
9353
				}
9354
			}
9355
			break;
9356
		}
9357
		for (;;) {
9358
			c2 = *s2 ++;
9359
			if (c2 >= 'A' && c2 <= 'Z') {
9360
				c2 += 'a' - 'A';
9361
			} else {
9362
				switch (c2) {
9363
				case '-': case '_': case '.': case ' ':
9364
					continue;
9365
				}
9366
			}
9367
			break;
9368
		}
9369
		if (c1 != c2) {
9370
			return 0;
9371
		}
9372
		if (c1 == 0) {
9373
			return 1;
9374
		}
9375
	}
9376
}
9377

9378
#define STU(x)   { &test_ ## x, #x }
9379

9380
static const struct {
9381
	void (*fn)(void);
9382
	const char *name;
9383
} tfns[] = {
9384
	STU(MD5),
9385
	STU(SHA1),
9386
	STU(SHA224),
9387
	STU(SHA256),
9388
	STU(SHA384),
9389
	STU(SHA512),
9390
	STU(MD5_SHA1),
9391
	STU(multihash),
9392
	STU(HMAC),
9393
	STU(HKDF),
9394
	STU(SHAKE),
9395
	STU(HMAC_DRBG),
9396
	STU(AESCTR_DRBG),
9397
	STU(PRF),
9398
	STU(AES_big),
9399
	STU(AES_small),
9400
	STU(AES_ct),
9401
	STU(AES_ct64),
9402
	STU(AES_pwr8),
9403
	STU(AES_x86ni),
9404
	STU(AES_CTRCBC_big),
9405
	STU(AES_CTRCBC_small),
9406
	STU(AES_CTRCBC_ct),
9407
	STU(AES_CTRCBC_ct64),
9408
	STU(AES_CTRCBC_x86ni),
9409
	STU(AES_CTRCBC_pwr8),
9410
	STU(DES_tab),
9411
	STU(DES_ct),
9412
	STU(ChaCha20_ct),
9413
	STU(ChaCha20_sse2),
9414
	STU(Poly1305_ctmul),
9415
	STU(Poly1305_ctmul32),
9416
	STU(Poly1305_ctmulq),
9417
	STU(Poly1305_i15),
9418
	STU(RSA_i15),
9419
	STU(RSA_i31),
9420
	STU(RSA_i32),
9421
	STU(RSA_i62),
9422
	STU(GHASH_ctmul),
9423
	STU(GHASH_ctmul32),
9424
	STU(GHASH_ctmul64),
9425
	STU(GHASH_pclmul),
9426
	STU(GHASH_pwr8),
9427
	STU(CCM),
9428
	STU(EAX),
9429
	STU(GCM),
9430
	STU(EC_prime_i15),
9431
	STU(EC_prime_i31),
9432
	STU(EC_p256_m15),
9433
	STU(EC_p256_m31),
9434
	STU(EC_p256_m62),
9435
	STU(EC_p256_m64),
9436
	STU(EC_c25519_i15),
9437
	STU(EC_c25519_i31),
9438
	STU(EC_c25519_m15),
9439
	STU(EC_c25519_m31),
9440
	STU(EC_c25519_m62),
9441
	STU(EC_c25519_m64),
9442
	STU(ECDSA_i15),
9443
	STU(ECDSA_i31),
9444
	STU(modpow_i31),
9445
	STU(modpow_i62),
9446
	{ 0, 0 }
9447
};
9448

9449
int
9450
main(int argc, char *argv[])
9451
{
9452
	size_t u;
9453

9454
	if (argc <= 1) {
9455
		printf("usage: testcrypto all | name...\n");
9456
		printf("individual test names:\n");
9457
		for (u = 0; tfns[u].name; u ++) {
9458
			printf("   %s\n", tfns[u].name);
9459
		}
9460
	} else {
9461
		for (u = 0; tfns[u].name; u ++) {
9462
			int i;
9463

9464
			for (i = 1; i < argc; i ++) {
9465
				if (eq_name(argv[i], tfns[u].name)
9466
					|| eq_name(argv[i], "all"))
9467
				{
9468
					tfns[u].fn();
9469
					break;
9470
				}
9471
			}
9472
		}
9473
	}
9474
	return 0;
9475
}
9476

9477
Product

Resources

Company
