evpmac_common.txt 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535
  1. #
  2. # Copyright 2001-2023 The OpenSSL Project Authors. All Rights Reserved.
  3. #
  4. # Licensed under the Apache License 2.0 (the "License"). You may not use
  5. # this file except in compliance with the License. You can obtain a copy
  6. # in the file LICENSE in the source distribution or at
  7. # https://www.openssl.org/source/license.html
  8. # Tests start with one of these keywords
  9. # Cipher Decrypt Derive Digest Encoding KDF MAC PBE
  10. # PrivPubKeyPair Sign Verify VerifyRecover
  11. # and continue until a blank line. Lines starting with a pound sign are ignored.
  12. # The keyword Availablein must appear before the test name if needed.
  13. Title = HMAC tests (from RFC2104 and others)
  14. Availablein = default
  15. MAC = HMAC
  16. Algorithm = MD5
  17. Key = 0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
  18. Input = "Hi There"
  19. Output = 9294727a3638bb1c13f48ef8158bfc9d
  20. OutputSize = 16
  21. BlockSize = 64
  22. Availablein = default
  23. MAC = HMAC
  24. Algorithm = MD5
  25. Key = "Jefe"
  26. Input = "what do ya want for nothing?"
  27. Output = 750c783e6ab0b503eaa86e310a5db738
  28. OutputSize = 16
  29. Availablein = default
  30. MAC = HMAC
  31. Algorithm = MD5
  32. Key = AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  33. Input = DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
  34. Output = 56be34521d144c88dbb8c733f0e8b3f6
  35. BlockSize = 64
  36. Title = SHA1
  37. # HMAC tests from NIST test data
  38. MAC = HMAC
  39. Algorithm = SHA1
  40. Input = "Sample message for keylen=blocklen"
  41. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
  42. Output = 5FD596EE78D5553C8FF4E72D266DFD192366DA29
  43. OutputSize = 20
  44. BlockSize = 64
  45. MAC = HMAC
  46. Algorithm = SHA1
  47. Input = "Sample message for keylen<blocklen"
  48. Key = 000102030405060708090A0B0C0D0E0F10111213
  49. Output = 4C99FF0CB1B31BD33F8431DBAF4D17FCD356A807
  50. OutputSize = 20
  51. MAC = HMAC
  52. Algorithm = SHA1
  53. Input = "Sample message for keylen=blocklen"
  54. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F60616263
  55. Output = 2D51B2F7750E410584662E38F133435F4C4FD42A
  56. BlockSize = 64
  57. Title = SHA2
  58. Availablein = default
  59. MAC = HMAC
  60. Algorithm = SHA256-192
  61. Input = "Sample message for keylen=blocklen"
  62. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
  63. Output = 48C07F4015447032622F0F1F368EBB02EE1424F3529739D6
  64. OutputSize = 24
  65. BlockSize = 64
  66. Availablein = default
  67. MAC = HMAC
  68. Algorithm = SHA256-192
  69. Input = "Sample message for keylen<blocklen"
  70. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B
  71. Output = 6ECCAB0BE3F7657CAF65CAD9784C8177C9F83A685AB52F4C
  72. Availablein = default
  73. MAC = HMAC
  74. Algorithm = SHA256-192
  75. Input = "Sample message for keylen=blocklen"
  76. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F60616263
  77. Output = 4FC15185394271A626627835B912A9CF641C9CD84F7909A4
  78. MAC = HMAC
  79. Algorithm = SHA224
  80. Input = "Sample message for keylen=blocklen"
  81. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
  82. Output = C7405E3AE058E8CD30B08B4140248581ED174CB34E1224BCC1EFC81B
  83. OutputSize = 28
  84. BlockSize = 64
  85. MAC = HMAC
  86. Algorithm = SHA224
  87. Input = "Sample message for keylen<blocklen"
  88. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B
  89. Output = E3D249A8CFB67EF8B7A169E9A0A599714A2CECBA65999A51BEB8FBBE
  90. MAC = HMAC
  91. Algorithm = SHA224
  92. Input = "Sample message for keylen=blocklen"
  93. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F60616263
  94. Output = 91C52509E5AF8531601AE6230099D90BEF88AAEFB961F4080ABC014D
  95. MAC = HMAC
  96. Algorithm = SHA256
  97. Input = "Sample message for keylen=blocklen"
  98. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
  99. Output = 8BB9A1DB9806F20DF7F77B82138C7914D174D59E13DC4D0169C9057B133E1D62
  100. OutputSize = 32
  101. BlockSize = 64
  102. MAC = HMAC
  103. Algorithm = SHA256
  104. Input = "Sample message for keylen<blocklen"
  105. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
  106. Output = A28CF43130EE696A98F14A37678B56BCFCBDD9E5CF69717FECF5480F0EBDF790
  107. MAC = HMAC
  108. Algorithm = SHA256
  109. Input = "Sample message for keylen=blocklen"
  110. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F60616263
  111. Output = BDCCB6C72DDEADB500AE768386CB38CC41C63DBB0878DDB9C7A38A431B78378D
  112. MAC = HMAC
  113. Algorithm = SHA384
  114. Input = "Sample message for keylen=blocklen"
  115. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F
  116. Output = 63C5DAA5E651847CA897C95814AB830BEDEDC7D25E83EEF9195CD45857A37F448947858F5AF50CC2B1B730DDF29671A9
  117. OutputSize = 48
  118. BlockSize = 128
  119. MAC = HMAC
  120. Algorithm = SHA384
  121. Input = "Sample message for keylen<blocklen"
  122. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F
  123. Output = 6EB242BDBB582CA17BEBFA481B1E23211464D2B7F8C20B9FF2201637B93646AF5AE9AC316E98DB45D9CAE773675EEED0
  124. MAC = HMAC
  125. Algorithm = SHA384
  126. Input = "Sample message for keylen=blocklen"
  127. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  128. Output = 5B664436DF69B0CA22551231A3F0A3D5B4F97991713CFA84BFF4D0792EFF96C27DCCBBB6F79B65D548B40E8564CEF594
  129. MAC = HMAC
  130. Algorithm = SHA512
  131. Input = "Sample message for keylen=blocklen"
  132. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F
  133. Output = FC25E240658CA785B7A811A8D3F7B4CA48CFA26A8A366BF2CD1F836B05FCB024BD36853081811D6CEA4216EBAD79DA1CFCB95EA4586B8A0CE356596A55FB1347
  134. OutputSize = 64
  135. BlockSize = 128
  136. MAC = HMAC
  137. Algorithm = SHA512
  138. Input = "Sample message for keylen<blocklen"
  139. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F
  140. Output = FD44C18BDA0BB0A6CE0E82B031BF2818F6539BD56EC00BDC10A8A2D730B3634DE2545D639B0F2CF710D0692C72A1896F1F211C2B922D1A96C392E07E7EA9FEDC
  141. MAC = HMAC
  142. Algorithm = SHA512
  143. Input = "Sample message for keylen=blocklen"
  144. Key = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  145. Output = D93EC8D2DE1AD2A9957CB9B83F14E76AD6B5E0CCE285079A127D3B14BCCB7AA7286D4AC0D4CE64215F2BC9E6870B33D97438BE4AAA20CDA5C5A912B48B8E27F3
  146. Title = SHA3
  147. # NIST's test vectors
  148. MAC = HMAC
  149. Algorithm = SHA3-224
  150. Input = "Sample message for keylen<blocklen"
  151. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b
  152. Output = 332cfd59347fdb8e576e77260be4aba2d6dc53117b3bfb52c6d18c04
  153. OutputSize = 28
  154. BlockSize = 144
  155. MAC = HMAC
  156. Algorithm = SHA3-224
  157. Input = "Sample message for keylen=blocklen"
  158. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f
  159. Output = d8b733bcf66c644a12323d564e24dcf3fc75f231f3b67968359100c7
  160. MAC = HMAC
  161. Algorithm = SHA3-224
  162. Input = "Sample message for keylen>blocklen"
  163. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaab
  164. Output = 078695eecc227c636ad31d063a15dd05a7e819a66ec6d8de1e193e59
  165. MAC = HMAC
  166. Algorithm = SHA3-256
  167. Input = "Sample message for keylen<blocklen"
  168. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
  169. Output = 4fe8e202c4f058e8dddc23d8c34e467343e23555e24fc2f025d598f558f67205
  170. OutputSize = 32
  171. BlockSize = 136
  172. MAC = HMAC
  173. Algorithm = SHA3-256
  174. Input = "Sample message for keylen=blocklen"
  175. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f8081828384858687
  176. Output = 68b94e2e538a9be4103bebb5aa016d47961d4d1aa906061313b557f8af2c3faa
  177. MAC = HMAC
  178. Algorithm = SHA3-256
  179. Input = "Sample message for keylen>blocklen"
  180. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7
  181. Output = 9bcf2c238e235c3ce88404e813bd2f3a97185ac6f238c63d6229a00b07974258
  182. MAC = HMAC
  183. Algorithm = SHA3-384
  184. Input = "Sample message for keylen<blocklen"
  185. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f
  186. Output = d588a3c51f3f2d906e8298c1199aa8ff6296218127f6b38a90b6afe2c5617725bc99987f79b22a557b6520db710b7f42
  187. OutputSize = 48
  188. BlockSize = 104
  189. MAC = HMAC
  190. Algorithm = SHA3-384
  191. Input = "Sample message for keylen=blocklen"
  192. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f6061626364656667
  193. Output = a27d24b592e8c8cbf6d4ce6fc5bf62d8fc98bf2d486640d9eb8099e24047837f5f3bffbe92dcce90b4ed5b1e7e44fa90
  194. MAC = HMAC
  195. Algorithm = SHA3-384
  196. Input = "Sample message for keylen>blocklen"
  197. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f9091929394959697
  198. Output = e5ae4c739f455279368ebf36d4f5354c95aa184c899d3870e460ebc288ef1f9470053f73f7c6da2a71bcaec38ce7d6ac
  199. MAC = HMAC
  200. Algorithm = SHA3-512
  201. Input = "Sample message for keylen<blocklen"
  202. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f
  203. Output = 4efd629d6c71bf86162658f29943b1c308ce27cdfa6db0d9c3ce81763f9cbce5f7ebe9868031db1a8f8eb7b6b95e5c5e3f657a8996c86a2f6527e307f0213196
  204. OutputSize = 64
  205. BlockSize = 72
  206. MAC = HMAC
  207. Algorithm = SHA3-512
  208. Input = "Sample message for keylen=blocklen"
  209. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f4041424344454647
  210. Output = 544e257ea2a3e5ea19a590e6a24b724ce6327757723fe2751b75bf007d80f6b360744bf1b7a88ea585f9765b47911976d3191cf83c039f5ffab0d29cc9d9b6da
  211. MAC = HMAC by EVP_PKEY
  212. Algorithm = SHA3-512
  213. Input = "Sample message for keylen>blocklen"
  214. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f8081828384858687
  215. Output = 5f464f5e5b7848e3885e49b2c385f0694985d0e38966242dc4a5fe3fea4b37d46b65ceced5dcf59438dd840bab22269f0ba7febdb9fcf74602a35666b2a32915
  216. Title = HMAC self generated tests
  217. MAC = HMAC
  218. Algorithm = SHAKE128
  219. Input = "Test that SHAKE128 fails"
  220. Key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
  221. Result = MAC_INIT_ERROR
  222. Title = CMAC tests (from FIPS module)
  223. MAC = CMAC
  224. Algorithm = AES-128-CBC
  225. Key = 77A77FAF290C1FA30C683DF16BA7A77B
  226. Input = 020683E1F0392F4CAC54318B6029259E9C553DBC4B6AD998E64D58E4E7DC2E13
  227. Output = FBFEA41BF9740CB501F1292C21CEBB40
  228. MAC = CMAC by EVP_PKEY
  229. Algorithm = AES-192-CBC
  230. Key = 7B32391369AA4CA97558095BE3C3EC862BD057CEF1E32D62
  231. Input =
  232. Output = E4D9340B03E67DEFD4969CC1ED3735E6
  233. MAC = CMAC
  234. Algorithm = AES-256-CBC
  235. Key = 0B122AC8F34ED1FE082A3625D157561454167AC145A10BBF77C6A70596D574F1
  236. Input = 498B53FDEC87EDCBF07097DCCDE93A084BAD7501A224E388DF349CE18959FE8485F8AD1537F0D896EA73BEDC7214713F
  237. Output = F62C46329B41085625669BAF51DEA66A
  238. FIPSversion = >=3.1.0
  239. MAC = CMAC
  240. Algorithm = AES-256-ECB
  241. Key = 0B122AC8F34ED1FE082A3625D157561454167AC145A10BBF77C6A70596D574F1
  242. Input = 498B53FDEC87EDCBF07097DCCDE93A084BAD7501A224E388DF349CE18959FE8485F8AD1537F0D896EA73BEDC7214713F
  243. Result = MAC_INIT_ERROR
  244. Title = GMAC Tests (from NIST)
  245. MAC = GMAC
  246. Algorithm = AES-128-GCM
  247. Key = 77BE63708971C4E240D1CB79E8D77FEB
  248. IV = E0E00F19FED7BA0136A797F3
  249. Input = 7A43EC1D9C0A5A78A0B16533A6213CAB
  250. Output = 209FCC8D3675ED938E9C7166709DD946
  251. Title = GMAC Tests (from http://www.ieee802.org/1/files/public/docs2011/bn-randall-test-vectors-0511-v1.pdf)
  252. MAC = GMAC
  253. Algorithm = AES-128-GCM
  254. Key = AD7A2BD03EAC835A6F620FDCB506B345
  255. IV = 12153524C0895E81B2C28465
  256. Input = D609B1F056637A0D46DF998D88E5222AB2C2846512153524C0895E8108000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F30313233340001
  257. Output = F09478A9B09007D06F46E9B6A1DA25DD
  258. MAC = GMAC
  259. Algorithm = AES-256-GCM
  260. Key = E3C08A8F06C6E3AD95A70557B23F75483CE33021A9C72B7025666204C69C0B72
  261. IV = 12153524C0895E81B2C28465
  262. Input = D609B1F056637A0D46DF998D88E5222AB2C2846512153524C0895E8108000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F30313233340001
  263. Output = 2F0BC5AF409E06D609EA8B7D0FA5EA50
  264. MAC = GMAC
  265. Algorithm = AES-128-GCM
  266. Key = 071B113B0CA743FECCCF3D051F737382
  267. IV = F0761E8DCD3D000176D457ED
  268. Input = E20106D7CD0DF0761E8DCD3D88E5400076D457ED08000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A0003
  269. Output = 0C017BC73B227DFCC9BAFA1C41ACC353
  270. MAC = GMAC
  271. Algorithm = AES-256-GCM
  272. Key = 691D3EE909D7F54167FD1CA0B5D769081F2BDE1AEE655FDBAB80BD5295AE6BE7
  273. IV = F0761E8DCD3D000176D457ED
  274. Input = E20106D7CD0DF0761E8DCD3D88E5400076D457ED08000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A0003
  275. Output = 35217C774BBC31B63166BCF9D4ABED07
  276. MAC = GMAC
  277. Algorithm = AES-128-GCM
  278. Key = 013FE00B5F11BE7F866D0CBBC55A7A90
  279. IV = 7CFDE9F9E33724C68932D612
  280. Input = 84C5D513D2AAF6E5BBD2727788E523008932D6127CFDE9F9E33724C608000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F0005
  281. Output = 217867E50C2DAD74C28C3B50ABDF695A
  282. MAC = GMAC
  283. Algorithm = AES-256-GCM
  284. Key = 83C093B58DE7FFE1C0DA926AC43FB3609AC1C80FEE1B624497EF942E2F79A823
  285. IV = 7CFDE9F9E33724C68932D612
  286. Input = 84C5D513D2AAF6E5BBD2727788E523008932D6127CFDE9F9E33724C608000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F0005
  287. Output = 6EE160E8FAECA4B36C86B234920CA975
  288. MAC = GMAC
  289. Algorithm = AES-128-GCM
  290. Key = 88EE087FD95DA9FBF6725AA9D757B0CD
  291. IV = 7AE8E2CA4EC500012E58495C
  292. Input = 68F2E77696CE7AE8E2CA4EC588E541002E58495C08000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D0007
  293. Output = 07922B8EBCF10BB2297588CA4C614523
  294. MAC = GMAC
  295. Algorithm = AES-256-GCM
  296. Key = 4C973DBC7364621674F8B5B89E5C15511FCED9216490FB1C1A2CAA0FFE0407E5
  297. IV = 7AE8E2CA4EC500012E58495C
  298. Input = 68F2E77696CE7AE8E2CA4EC588E541002E58495C08000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D0007
  299. Output = 00BDA1B7E87608BCBF470F12157F4C07
  300. MAC = GMAC
  301. Algorithm = AES-256-CBC
  302. Key = 4C973DBC7364621674F8B5B89E5C15511FCED9216490FB1C1A2CAA0FFE0407E5
  303. IV = 7AE8E2CA4EC500012E58495C
  304. Input = 68F2E77696CE7AE8E2CA4EC588E541002E58495C08000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D0007
  305. Result = MAC_INIT_ERROR
  306. Title = KMAC Tests (From NIST)
  307. MAC = KMAC128
  308. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  309. Input = 00010203
  310. Custom = ""
  311. Output = E5780B0D3EA6F7D3A429C5706AA43A00FADBD7D49628839E3187243F456EE14E
  312. Ctrl = xof:0
  313. OutputSize = 32
  314. BlockSize = 168
  315. MAC = KMAC128
  316. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  317. Input = 00010203
  318. Custom = "My Tagged Application"
  319. Output = 3B1FBA963CD8B0B59E8C1A6D71888B7143651AF8BA0A7070C0979E2811324AA5
  320. MAC = KMAC128
  321. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  322. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  323. Custom = "My Tagged Application"
  324. Output = 1F5B4E6CCA02209E0DCB5CA635B89A15E271ECC760071DFD805FAA38F9729230
  325. Ctrl = size:32
  326. MAC = KMAC256
  327. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  328. Input = 00010203
  329. Custom = "My Tagged Application"
  330. Output = 20C570C31346F703C9AC36C61C03CB64C3970D0CFC787E9B79599D273A68D2F7F69D4CC3DE9D104A351689F27CF6F5951F0103F33F4F24871024D9C27773A8DD
  331. OutputSize = 64
  332. BlockSize = 136
  333. MAC = KMAC256
  334. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  335. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  336. Custom = ""
  337. Output = 75358CF39E41494E949707927CEE0AF20A3FF553904C86B08F21CC414BCFD691589D27CF5E15369CBBFF8B9A4C2EB17800855D0235FF635DA82533EC6B759B69
  338. MAC = KMAC256
  339. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  340. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  341. Custom = "My Tagged Application"
  342. Output = B58618F71F92E1D56C1B8C55DDD7CD188B97B4CA4D99831EB2699A837DA2E4D970FBACFDE50033AEA585F1A2708510C32D07880801BD182898FE476876FC8965
  343. Ctrl = size:64
  344. Title = KMAC XOF Tests (From NIST)
  345. MAC = KMAC128
  346. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  347. Input = 00010203
  348. Output = CD83740BBD92CCC8CF032B1481A0F4460E7CA9DD12B08A0C4031178BACD6EC35
  349. XOF = 1
  350. MAC = KMAC128
  351. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  352. Input = 00010203
  353. Custom = "My Tagged Application"
  354. Output = 31A44527B4ED9F5C6101D11DE6D26F0620AA5C341DEF41299657FE9DF1A3B16C
  355. XOF = 1
  356. MAC = KMAC128
  357. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  358. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  359. Custom = "My Tagged Application"
  360. Output = 47026C7CD793084AA0283C253EF658490C0DB61438B8326FE9BDDF281B83AE0F
  361. XOF = 1
  362. Ctrl = size:32
  363. MAC = KMAC256
  364. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  365. Input = 00010203
  366. Custom = "My Tagged Application"
  367. Output = 1755133F1534752AAD0748F2C706FB5C784512CAB835CD15676B16C0C6647FA96FAA7AF634A0BF8FF6DF39374FA00FAD9A39E322A7C92065A64EB1FB0801EB2B
  368. XOF = 1
  369. MAC = KMAC256
  370. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  371. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  372. Custom = ""
  373. Output = FF7B171F1E8A2B24683EED37830EE797538BA8DC563F6DA1E667391A75EDC02CA633079F81CE12A25F45615EC89972031D18337331D24CEB8F8CA8E6A19FD98B
  374. XOF = 1
  375. MAC = KMAC256
  376. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  377. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  378. Custom = "My Tagged Application"
  379. Output = D5BE731C954ED7732846BB59DBE3A8E30F83E77A4BFF4459F2F1C2B4ECEBB8CE67BA01C62E8AB8578D2D499BD1BB276768781190020A306A97DE281DCC30305D
  380. Ctrl = size:64
  381. XOF = 1
  382. Title = KMAC long customisation string (from NIST ACVP)
  383. MAC = KMAC256
  384. Key = 9743DBF93102FAF11227B154B8ACD16CF142671F7AA16C559A393A38B4CEF461ED29A6A328D7379C99718790E38B54CA25E9E831CBEA463EE704D1689F94629AB795DF0C77F756DA743309C0E054596BA2D9CC1768ACF7CD351D9A7EB1ABD0A3
  385. Input = BA63AC9C711F143CCE7FF92D0322649D1BE437D805FD225C0A2879A008373EC3BCCDB09971FAD2BCE5F4347AF7E5238EF01A90ED34193D6AFC1D
  386. Custom = "]J&/.?L/c&}p(b!X|?>i7!]CAH6P@1<R'6|uOu2Vu^kCM!$ Een^pn&Zlale){mQhKjqe,)'-fsX6:u@D6+ZA^b70A)n)LMxo:Y!62;:[hP*yLERjL@rq30+iRaD#9|"
  387. Output = 4057EFD76A63049418AFC54559589821322B6029808A3BCAE4D49E961F909F5F667ACAD56BBCFB8033DCB4CC10AF1B53F014B8
  388. Ctrl = size:51
  389. XOF = 1
  390. Title = KMAC XOF Tests via ctrl (From NIST)
  391. MAC = KMAC128
  392. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  393. Input = 00010203
  394. Output = CD83740BBD92CCC8CF032B1481A0F4460E7CA9DD12B08A0C4031178BACD6EC35
  395. Ctrl = xof:1
  396. MAC = KMAC128
  397. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  398. Input = 00010203
  399. Custom = "My Tagged Application"
  400. Output = 31A44527B4ED9F5C6101D11DE6D26F0620AA5C341DEF41299657FE9DF1A3B16C
  401. Ctrl = xof:1
  402. MAC = KMAC128
  403. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  404. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  405. Custom = "My Tagged Application"
  406. Output = 47026C7CD793084AA0283C253EF658490C0DB61438B8326FE9BDDF281B83AE0F
  407. Ctrl = xof:1
  408. Ctrl = size:32
  409. MAC = KMAC256
  410. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  411. Input = 00010203
  412. Custom = "My Tagged Application"
  413. Output = 1755133F1534752AAD0748F2C706FB5C784512CAB835CD15676B16C0C6647FA96FAA7AF634A0BF8FF6DF39374FA00FAD9A39E322A7C92065A64EB1FB0801EB2B
  414. Ctrl = xof:1
  415. MAC = KMAC256
  416. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  417. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  418. Custom = ""
  419. Output = FF7B171F1E8A2B24683EED37830EE797538BA8DC563F6DA1E667391A75EDC02CA633079F81CE12A25F45615EC89972031D18337331D24CEB8F8CA8E6A19FD98B
  420. Ctrl = xof:1
  421. MAC = KMAC256
  422. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  423. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  424. Custom = "My Tagged Application"
  425. Output = D5BE731C954ED7732846BB59DBE3A8E30F83E77A4BFF4459F2F1C2B4ECEBB8CE67BA01C62E8AB8578D2D499BD1BB276768781190020A306A97DE281DCC30305D
  426. Ctrl = size:64
  427. Ctrl = xof:1
  428. Title = KMAC long customisation string via ctrl (from NIST ACVP)
  429. MAC = KMAC256
  430. Key = 9743DBF93102FAF11227B154B8ACD16CF142671F7AA16C559A393A38B4CEF461ED29A6A328D7379C99718790E38B54CA25E9E831CBEA463EE704D1689F94629AB795DF0C77F756DA743309C0E054596BA2D9CC1768ACF7CD351D9A7EB1ABD0A3
  431. Input = BA63AC9C711F143CCE7FF92D0322649D1BE437D805FD225C0A2879A008373EC3BCCDB09971FAD2BCE5F4347AF7E5238EF01A90ED34193D6AFC1D
  432. Custom = "]J&/.?L/c&}p(b!X|?>i7!]CAH6P@1<R'6|uOu2Vu^kCM!$ Een^pn&Zlale){mQhKjqe,)'-fsX6:u@D6+ZA^b70A)n)LMxo:Y!62;:[hP*yLERjL@rq30+iRaD#9|"
  433. Output = 4057EFD76A63049418AFC54559589821322B6029808A3BCAE4D49E961F909F5F667ACAD56BBCFB8033DCB4CC10AF1B53F014B8
  434. Ctrl = size:51
  435. Ctrl = xof:1
  436. Title = KMAC long customisation string negative test
  437. MAC = KMAC128
  438. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  439. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  440. Custom = ":abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789::abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789::abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789::abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789:::abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789::abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789::abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789::abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789::"
  441. Result = MAC_INIT_ERROR
  442. Title = KMAC output is too large
  443. MAC = KMAC256
  444. Key = 404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F
  445. Input = 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7
  446. Custom = "My Tagged Application"
  447. Ctrl = size:2097152
  448. Result = MAC_INIT_ERROR