drbgtest.h 69 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670
  1. /*
  2. * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
  3. *
  4. * Licensed under the Apache License 2.0 (the "License"). You may not use
  5. * this file except in compliance with the License. You can obtain a copy
  6. * in the file LICENSE in the source distribution or at
  7. * https://www.openssl.org/source/license.html
  8. */
  9. /*
  10. * Known answer tests for SP800-90 DRBG CTR mode.
  11. */
  12. /*
  13. * AES-128 use df PR
  14. */
  15. static const unsigned char aes_128_use_df_pr_entropyinput[] = {
  16. 0x61, 0x52, 0x7c, 0xe3, 0x23, 0x7d, 0x0a, 0x07, 0x10, 0x0c, 0x50, 0x33,
  17. 0xc8, 0xdb, 0xff, 0x12
  18. };
  19. static const unsigned char aes_128_use_df_pr_nonce[] = {
  20. 0x51, 0x0d, 0x85, 0x77, 0xed, 0x22, 0x97, 0x28
  21. };
  22. static const unsigned char aes_128_use_df_pr_personalizationstring[] = {
  23. 0x59, 0x9f, 0xbb, 0xcd, 0xd5, 0x25, 0x69, 0xb5, 0xcb, 0xb5, 0x03, 0xfe,
  24. 0xd7, 0xd7, 0x01, 0x67
  25. };
  26. static const unsigned char aes_128_use_df_pr_additionalinput[] = {
  27. 0xef, 0x88, 0x76, 0x01, 0xaf, 0x3c, 0xfe, 0x8b, 0xaf, 0x26, 0x06, 0x9e,
  28. 0x9a, 0x47, 0x08, 0x76
  29. };
  30. static const unsigned char aes_128_use_df_pr_entropyinputpr[] = {
  31. 0xe2, 0x76, 0xf9, 0xf6, 0x3a, 0xba, 0x10, 0x9f, 0xbf, 0x47, 0x0e, 0x51,
  32. 0x09, 0xfb, 0xa3, 0xb6
  33. };
  34. static const unsigned char aes_128_use_df_pr_int_returnedbits[] = {
  35. 0xd4, 0x98, 0x8a, 0x46, 0x80, 0x4c, 0xdb, 0xa3, 0x59, 0x02, 0x57, 0x52,
  36. 0x66, 0x1c, 0xea, 0x5b
  37. };
  38. static const unsigned char aes_128_use_df_pr_additionalinput2[] = {
  39. 0x88, 0x8c, 0x91, 0xd6, 0xbe, 0x56, 0x6e, 0x08, 0x9a, 0x62, 0x2b, 0x11,
  40. 0x3f, 0x5e, 0x31, 0x06
  41. };
  42. static const unsigned char aes_128_use_df_pr_entropyinputpr2[] = {
  43. 0xc0, 0x5c, 0x6b, 0x98, 0x01, 0x0d, 0x58, 0x18, 0x51, 0x18, 0x96, 0xae,
  44. 0xa7, 0xe3, 0xa8, 0x67
  45. };
  46. static const unsigned char aes_128_use_df_pr_returnedbits[] = {
  47. 0xcf, 0x01, 0xac, 0x22, 0x31, 0x06, 0x8e, 0xfc, 0xce, 0x56, 0xea, 0x24,
  48. 0x0f, 0x38, 0x43, 0xc6
  49. };
  50. /*
  51. * AES-128 use df no PR
  52. */
  53. static const unsigned char aes_128_use_df_entropyinput[] = {
  54. 0x1f, 0x8e, 0x34, 0x82, 0x0c, 0xb7, 0xbe, 0xc5, 0x01, 0x3e, 0xd0, 0xa3,
  55. 0x9d, 0x7d, 0x1c, 0x9b
  56. };
  57. static const unsigned char aes_128_use_df_nonce[] = {
  58. 0xd5, 0x4d, 0xbd, 0x4a, 0x93, 0x7f, 0xb8, 0x96,
  59. };
  60. static const unsigned char aes_128_use_df_personalizationstring[] = {
  61. 0xab, 0xd6, 0x3f, 0x04, 0xfe, 0x27, 0x6b, 0x2d, 0xd7, 0xc3, 0x1c, 0xf3,
  62. 0x38, 0x66, 0xba, 0x1b
  63. };
  64. static const unsigned char aes_128_use_df_additionalinput[] = {
  65. 0xfe, 0xf4, 0x09, 0xa8, 0xb7, 0x73, 0x27, 0x9c, 0x5f, 0xa7, 0xea, 0x46,
  66. 0xb5, 0xe2, 0xb2, 0x41
  67. };
  68. static const unsigned char aes_128_use_df_int_returnedbits[] = {
  69. 0x42, 0xe4, 0x4e, 0x7b, 0x27, 0xdd, 0xcb, 0xbc, 0x0a, 0xcf, 0xa6, 0x67,
  70. 0xe7, 0x57, 0x11, 0xb4
  71. };
  72. static const unsigned char aes_128_use_df_entropyinputreseed[] = {
  73. 0x14, 0x26, 0x69, 0xd9, 0xf3, 0x65, 0x03, 0xd6, 0x6b, 0xb9, 0x44, 0x0b,
  74. 0xc7, 0xc4, 0x9e, 0x39
  75. };
  76. static const unsigned char aes_128_use_df_additionalinputreseed[] = {
  77. 0x55, 0x2e, 0x60, 0x9a, 0x05, 0x72, 0x8a, 0xa8, 0xef, 0x22, 0x81, 0x5a,
  78. 0xc8, 0x93, 0xfa, 0x84
  79. };
  80. static const unsigned char aes_128_use_df_additionalinput2[] = {
  81. 0x3c, 0x40, 0xc8, 0xc4, 0x16, 0x0c, 0x21, 0xa4, 0x37, 0x2c, 0x8f, 0xa5,
  82. 0x06, 0x0c, 0x15, 0x2c
  83. };
  84. static const unsigned char aes_128_use_df_returnedbits[] = {
  85. 0xe1, 0x3e, 0x99, 0x98, 0x86, 0x67, 0x0b, 0x63, 0x7b, 0xbe, 0x3f, 0x88,
  86. 0x46, 0x81, 0xc7, 0x19
  87. };
  88. /*
  89. * AES-192 use df PR
  90. */
  91. static const unsigned char aes_192_use_df_pr_entropyinput[] = {
  92. 0x2b, 0x4e, 0x8b, 0xe1, 0xf1, 0x34, 0x80, 0x56, 0x81, 0xf9, 0x74, 0xec,
  93. 0x17, 0x44, 0x2a, 0xf1, 0x14, 0xb0, 0xbf, 0x97, 0x39, 0xb7, 0x04, 0x7d
  94. };
  95. static const unsigned char aes_192_use_df_pr_nonce[] = {
  96. 0xd6, 0x9d, 0xeb, 0x14, 0x4e, 0x6c, 0x30, 0x1e, 0x39, 0x55, 0x73, 0xd0,
  97. 0xd1, 0x80, 0x78, 0xfa
  98. };
  99. static const unsigned char aes_192_use_df_pr_personalizationstring[] = {
  100. 0xfc, 0x43, 0x4a, 0xf8, 0x9a, 0x55, 0xb3, 0x53, 0x83, 0xe2, 0x18, 0x16,
  101. 0x0c, 0xdc, 0xcd, 0x5e, 0x4f, 0xa0, 0x03, 0x01, 0x2b, 0x9f, 0xe4, 0xd5,
  102. 0x7d, 0x49, 0xf0, 0x41, 0x9e, 0x3d, 0x99, 0x04
  103. };
  104. static const unsigned char aes_192_use_df_pr_additionalinput[] = {
  105. 0x5e, 0x9f, 0x49, 0x6f, 0x21, 0x8b, 0x1d, 0x32, 0xd5, 0x84, 0x5c, 0xac,
  106. 0xaf, 0xdf, 0xe4, 0x79, 0x9e, 0xaf, 0xa9, 0x82, 0xd0, 0xf8, 0x4f, 0xcb,
  107. 0x69, 0x10, 0x0a, 0x7e, 0x81, 0x57, 0xb5, 0x36
  108. };
  109. static const unsigned char aes_192_use_df_pr_entropyinputpr[] = {
  110. 0xd4, 0x81, 0x0c, 0xd7, 0x66, 0x39, 0xec, 0x42, 0x53, 0x87, 0x41, 0xa5,
  111. 0x1e, 0x7d, 0x80, 0x91, 0x8e, 0xbb, 0xed, 0xac, 0x14, 0x02, 0x1a, 0xd5,
  112. };
  113. static const unsigned char aes_192_use_df_pr_int_returnedbits[] = {
  114. 0xdf, 0x1d, 0x39, 0x45, 0x7c, 0x9b, 0xc6, 0x2b, 0x7d, 0x8c, 0x93, 0xe9,
  115. 0x19, 0x30, 0x6b, 0x67
  116. };
  117. static const unsigned char aes_192_use_df_pr_additionalinput2[] = {
  118. 0x00, 0x71, 0x27, 0x4e, 0xd3, 0x14, 0xf1, 0x20, 0x7f, 0x4a, 0x41, 0x32,
  119. 0x2a, 0x97, 0x11, 0x43, 0x8f, 0x4a, 0x15, 0x7b, 0x9b, 0x51, 0x79, 0xda,
  120. 0x49, 0x3d, 0xde, 0xe8, 0xbc, 0x93, 0x91, 0x99
  121. };
  122. static const unsigned char aes_192_use_df_pr_entropyinputpr2[] = {
  123. 0x90, 0xee, 0x76, 0xa1, 0x45, 0x8d, 0xb7, 0x40, 0xb0, 0x11, 0xbf, 0xd0,
  124. 0x65, 0xd7, 0x3c, 0x7c, 0x4f, 0x20, 0x3f, 0x4e, 0x11, 0x9d, 0xb3, 0x5e,
  125. };
  126. static const unsigned char aes_192_use_df_pr_returnedbits[] = {
  127. 0x24, 0x3b, 0x20, 0xa4, 0x37, 0x66, 0xba, 0x72, 0x39, 0x3f, 0xcf, 0x3c,
  128. 0x7e, 0x1a, 0x2b, 0x83
  129. };
  130. /*
  131. * AES-192 use df no PR
  132. */
  133. static const unsigned char aes_192_use_df_entropyinput[] = {
  134. 0x8d, 0x74, 0xa4, 0x50, 0x1a, 0x02, 0x68, 0x0c, 0x2a, 0x69, 0xc4, 0x82,
  135. 0x3b, 0xbb, 0xda, 0x0e, 0x7f, 0x77, 0xa3, 0x17, 0x78, 0x57, 0xb2, 0x7b,
  136. };
  137. static const unsigned char aes_192_use_df_nonce[] = {
  138. 0x75, 0xd5, 0x1f, 0xac, 0xa4, 0x8d, 0x42, 0x78, 0xd7, 0x69, 0x86, 0x9d,
  139. 0x77, 0xd7, 0x41, 0x0e
  140. };
  141. static const unsigned char aes_192_use_df_personalizationstring[] = {
  142. 0x4e, 0x33, 0x41, 0x3c, 0x9c, 0xc2, 0xd2, 0x53, 0xaf, 0x90, 0xea, 0xcf,
  143. 0x19, 0x50, 0x1e, 0xe6, 0x6f, 0x63, 0xc8, 0x32, 0x22, 0xdc, 0x07, 0x65,
  144. 0x9c, 0xd3, 0xf8, 0x30, 0x9e, 0xed, 0x35, 0x70
  145. };
  146. static const unsigned char aes_192_use_df_additionalinput[] = {
  147. 0x5d, 0x8b, 0x8c, 0xc1, 0xdf, 0x0e, 0x02, 0x78, 0xfb, 0x19, 0xb8, 0x69,
  148. 0x78, 0x4e, 0x9c, 0x52, 0xbc, 0xc7, 0x20, 0xc9, 0xe6, 0x5e, 0x77, 0x22,
  149. 0x28, 0x3d, 0x0c, 0x9e, 0x68, 0xa8, 0x45, 0xd7
  150. };
  151. static const unsigned char aes_192_use_df_int_returnedbits[] = {
  152. 0xd5, 0xe7, 0x08, 0xc5, 0x19, 0x99, 0xd5, 0x31, 0x03, 0x0a, 0x74, 0xb6,
  153. 0xb7, 0xed, 0xe9, 0xea
  154. };
  155. static const unsigned char aes_192_use_df_entropyinputreseed[] = {
  156. 0x9c, 0x26, 0xda, 0xf1, 0xac, 0xd9, 0x5a, 0xd6, 0xa8, 0x65, 0xf5, 0x02,
  157. 0x8f, 0xdc, 0xa2, 0x09, 0x54, 0xa6, 0xe2, 0xa4, 0xde, 0x32, 0xe0, 0x01,
  158. };
  159. static const unsigned char aes_192_use_df_additionalinputreseed[] = {
  160. 0x9b, 0x90, 0xb0, 0x3a, 0x0e, 0x3a, 0x80, 0x07, 0x4a, 0xf4, 0xda, 0x76,
  161. 0x28, 0x30, 0x3c, 0xee, 0x54, 0x1b, 0x94, 0x59, 0x51, 0x43, 0x56, 0x77,
  162. 0xaf, 0x88, 0xdd, 0x63, 0x89, 0x47, 0x06, 0x65
  163. };
  164. static const unsigned char aes_192_use_df_additionalinput2[] = {
  165. 0x3c, 0x11, 0x64, 0x7a, 0x96, 0xf5, 0xd8, 0xb8, 0xae, 0xd6, 0x70, 0x4e,
  166. 0x16, 0x96, 0xde, 0xe9, 0x62, 0xbc, 0xee, 0x28, 0x2f, 0x26, 0xa6, 0xf0,
  167. 0x56, 0xef, 0xa3, 0xf1, 0x6b, 0xa1, 0xb1, 0x77
  168. };
  169. static const unsigned char aes_192_use_df_returnedbits[] = {
  170. 0x0b, 0xe2, 0x56, 0x03, 0x1e, 0xdb, 0x2c, 0x6d, 0x7f, 0x1b, 0x15, 0x58,
  171. 0x1a, 0xf9, 0x13, 0x28
  172. };
  173. /*
  174. * AES-256 use df PR
  175. */
  176. static const unsigned char aes_256_use_df_pr_entropyinput[] = {
  177. 0x61, 0x68, 0xfc, 0x1a, 0xf0, 0xb5, 0x95, 0x6b, 0x85, 0x09, 0x9b, 0x74,
  178. 0x3f, 0x13, 0x78, 0x49, 0x3b, 0x85, 0xec, 0x93, 0x13, 0x3b, 0xa9, 0x4f,
  179. 0x96, 0xab, 0x2c, 0xe4, 0xc8, 0x8f, 0xdd, 0x6a
  180. };
  181. static const unsigned char aes_256_use_df_pr_nonce[] = {
  182. 0xad, 0xd2, 0xbb, 0xba, 0xb7, 0x65, 0x89, 0xc3, 0x21, 0x6c, 0x55, 0x33,
  183. 0x2b, 0x36, 0xff, 0xa4
  184. };
  185. static const unsigned char aes_256_use_df_pr_personalizationstring[] = {
  186. 0x6e, 0xca, 0xe7, 0x20, 0x72, 0xd3, 0x84, 0x5a, 0x32, 0xd3, 0x4b, 0x24,
  187. 0x72, 0xc4, 0x63, 0x2b, 0x9d, 0x12, 0x24, 0x0c, 0x23, 0x26, 0x8e, 0x83,
  188. 0x16, 0x37, 0x0b, 0xd1, 0x06, 0x4f, 0x68, 0x6d
  189. };
  190. static const unsigned char aes_256_use_df_pr_additionalinput[] = {
  191. 0x7e, 0x08, 0x4a, 0xbb, 0xe3, 0x21, 0x7c, 0xc9, 0x23, 0xd2, 0xf8, 0xb0,
  192. 0x73, 0x98, 0xba, 0x84, 0x74, 0x23, 0xab, 0x06, 0x8a, 0xe2, 0x22, 0xd3,
  193. 0x7b, 0xce, 0x9b, 0xd2, 0x4a, 0x76, 0xb8, 0xde
  194. };
  195. static const unsigned char aes_256_use_df_pr_entropyinputpr[] = {
  196. 0x0b, 0x23, 0xaf, 0xdf, 0xf1, 0x62, 0xd7, 0xd3, 0x43, 0x97, 0xf8, 0x77,
  197. 0x04, 0xa8, 0x42, 0x20, 0xbd, 0xf6, 0x0f, 0xc1, 0x17, 0x2f, 0x9f, 0x54,
  198. 0xbb, 0x56, 0x17, 0x86, 0x68, 0x0e, 0xba, 0xa9
  199. };
  200. static const unsigned char aes_256_use_df_pr_int_returnedbits[] = {
  201. 0x31, 0x8e, 0xad, 0xaf, 0x40, 0xeb, 0x6b, 0x74, 0x31, 0x46, 0x80, 0xc7,
  202. 0x17, 0xab, 0x3c, 0x7a
  203. };
  204. static const unsigned char aes_256_use_df_pr_additionalinput2[] = {
  205. 0x94, 0x6b, 0xc9, 0x9f, 0xab, 0x8d, 0xc5, 0xec, 0x71, 0x88, 0x1d, 0x00,
  206. 0x8c, 0x89, 0x68, 0xe4, 0xc8, 0x07, 0x77, 0x36, 0x17, 0x6d, 0x79, 0x78,
  207. 0xc7, 0x06, 0x4e, 0x99, 0x04, 0x28, 0x29, 0xc3
  208. };
  209. static const unsigned char aes_256_use_df_pr_entropyinputpr2[] = {
  210. 0xbf, 0x6c, 0x59, 0x2a, 0x0d, 0x44, 0x0f, 0xae, 0x9a, 0x5e, 0x03, 0x73,
  211. 0xd8, 0xa6, 0xe1, 0xcf, 0x25, 0x61, 0x38, 0x24, 0x86, 0x9e, 0x53, 0xe8,
  212. 0xa4, 0xdf, 0x56, 0xf4, 0x06, 0x07, 0x9c, 0x0f
  213. };
  214. static const unsigned char aes_256_use_df_pr_returnedbits[] = {
  215. 0x22, 0x4a, 0xb4, 0xb8, 0xb6, 0xee, 0x7d, 0xb1, 0x9e, 0xc9, 0xf9, 0xa0,
  216. 0xd9, 0xe2, 0x97, 0x00
  217. };
  218. /*
  219. * AES-256 use df no PR
  220. */
  221. static const unsigned char aes_256_use_df_entropyinput[] = {
  222. 0xa5, 0x3e, 0x37, 0x10, 0x17, 0x43, 0x91, 0x93, 0x59, 0x1e, 0x47, 0x50,
  223. 0x87, 0xaa, 0xdd, 0xd5, 0xc1, 0xc3, 0x86, 0xcd, 0xca, 0x0d, 0xdb, 0x68,
  224. 0xe0, 0x02, 0xd8, 0x0f, 0xdc, 0x40, 0x1a, 0x47
  225. };
  226. static const unsigned char aes_256_use_df_nonce[] = {
  227. 0xa9, 0x4d, 0xa5, 0x5a, 0xfd, 0xc5, 0x0c, 0xe5, 0x1c, 0x9a, 0x3b, 0x8a,
  228. 0x4c, 0x44, 0x84, 0x40
  229. };
  230. static const unsigned char aes_256_use_df_personalizationstring[] = {
  231. 0x8b, 0x52, 0xa2, 0x4a, 0x93, 0xc3, 0x4e, 0xa7, 0x1e, 0x1c, 0xa7, 0x05,
  232. 0xeb, 0x82, 0x9b, 0xa6, 0x5d, 0xe4, 0xd4, 0xe0, 0x7f, 0xa3, 0xd8, 0x6b,
  233. 0x37, 0x84, 0x5f, 0xf1, 0xc7, 0xd5, 0xf6, 0xd2
  234. };
  235. static const unsigned char aes_256_use_df_additionalinput[] = {
  236. 0x20, 0xf4, 0x22, 0xed, 0xf8, 0x5c, 0xa1, 0x6a, 0x01, 0xcf, 0xbe, 0x5f,
  237. 0x8d, 0x6c, 0x94, 0x7f, 0xae, 0x12, 0xa8, 0x57, 0xdb, 0x2a, 0xa9, 0xbf,
  238. 0xc7, 0xb3, 0x65, 0x81, 0x80, 0x8d, 0x0d, 0x46
  239. };
  240. static const unsigned char aes_256_use_df_int_returnedbits[] = {
  241. 0x4e, 0x44, 0xfd, 0xf3, 0x9e, 0x29, 0xa2, 0xb8, 0x0f, 0x5d, 0x6c, 0xe1,
  242. 0x28, 0x0c, 0x3b, 0xc1
  243. };
  244. static const unsigned char aes_256_use_df_entropyinputreseed[] = {
  245. 0xdd, 0x40, 0xe5, 0x98, 0x7b, 0x27, 0x16, 0x73, 0x15, 0x68, 0xd2, 0x76,
  246. 0xbf, 0x0c, 0x67, 0x15, 0x75, 0x79, 0x03, 0xd3, 0xde, 0xde, 0x91, 0x46,
  247. 0x42, 0xdd, 0xd4, 0x67, 0xc8, 0x79, 0xc8, 0x1e
  248. };
  249. static const unsigned char aes_256_use_df_additionalinputreseed[] = {
  250. 0x7f, 0xd8, 0x1f, 0xbd, 0x2a, 0xb5, 0x1c, 0x11, 0x5d, 0x83, 0x4e, 0x99,
  251. 0xf6, 0x5c, 0xa5, 0x40, 0x20, 0xed, 0x38, 0x8e, 0xd5, 0x9e, 0xe0, 0x75,
  252. 0x93, 0xfe, 0x12, 0x5e, 0x5d, 0x73, 0xfb, 0x75
  253. };
  254. static const unsigned char aes_256_use_df_additionalinput2[] = {
  255. 0xcd, 0x2c, 0xff, 0x14, 0x69, 0x3e, 0x4c, 0x9e, 0xfd, 0xfe, 0x26, 0x0d,
  256. 0xe9, 0x86, 0x00, 0x49, 0x30, 0xba, 0xb1, 0xc6, 0x50, 0x57, 0x77, 0x2a,
  257. 0x62, 0x39, 0x2c, 0x3b, 0x74, 0xeb, 0xc9, 0x0d
  258. };
  259. static const unsigned char aes_256_use_df_returnedbits[] = {
  260. 0x4f, 0x78, 0xbe, 0xb9, 0x4d, 0x97, 0x8c, 0xe9, 0xd0, 0x97, 0xfe, 0xad,
  261. 0xfa, 0xfd, 0x35, 0x5e
  262. };
  263. /*
  264. * AES-128 no df PR
  265. */
  266. static const unsigned char aes_128_no_df_pr_entropyinput[] = {
  267. 0x9a, 0x25, 0x65, 0x10, 0x67, 0xd5, 0xb6, 0x6b, 0x70, 0xa1, 0xb3, 0xa4,
  268. 0x43, 0x95, 0x80, 0xc0, 0x84, 0x0a, 0x79, 0xb0, 0x88, 0x74, 0xf2, 0xbf,
  269. 0x31, 0x6c, 0x33, 0x38, 0x0b, 0x00, 0xb2, 0x5a
  270. };
  271. static const unsigned char aes_128_no_df_pr_nonce[] = {
  272. 0x78, 0x47, 0x6b, 0xf7, 0x90, 0x8e, 0x87, 0xf1,
  273. };
  274. static const unsigned char aes_128_no_df_pr_personalizationstring[] = {
  275. 0xf7, 0x22, 0x1d, 0x3a, 0xbe, 0x1d, 0xca, 0x32, 0x1b, 0xbd, 0x87, 0x0c,
  276. 0x51, 0x24, 0x19, 0xee, 0xa3, 0x23, 0x09, 0x63, 0x33, 0x3d, 0xa8, 0x0c,
  277. 0x1c, 0xfa, 0x42, 0x89, 0xcc, 0x6f, 0xa0, 0xa8
  278. };
  279. static const unsigned char aes_128_no_df_pr_additionalinput[] = {
  280. 0xc9, 0xe0, 0x80, 0xbf, 0x8c, 0x45, 0x58, 0x39, 0xff, 0x00, 0xab, 0x02,
  281. 0x4c, 0x3e, 0x3a, 0x95, 0x9b, 0x80, 0xa8, 0x21, 0x2a, 0xee, 0xba, 0x73,
  282. 0xb1, 0xd9, 0xcf, 0x28, 0xf6, 0x8f, 0x9b, 0x12
  283. };
  284. static const unsigned char aes_128_no_df_pr_entropyinputpr[] = {
  285. 0x4c, 0xa8, 0xc5, 0xf0, 0x59, 0x9e, 0xa6, 0x8d, 0x26, 0x53, 0xd7, 0x8a,
  286. 0xa9, 0xd8, 0xf7, 0xed, 0xb2, 0xf9, 0x12, 0x42, 0xe1, 0xe5, 0xbd, 0xe7,
  287. 0xe7, 0x1d, 0x74, 0x99, 0x00, 0x9d, 0x31, 0x3e
  288. };
  289. static const unsigned char aes_128_no_df_pr_int_returnedbits[] = {
  290. 0xe2, 0xac, 0x20, 0xf0, 0x80, 0xe7, 0xbc, 0x7e, 0x9c, 0x7b, 0x65, 0x71,
  291. 0xaf, 0x19, 0x32, 0x16
  292. };
  293. static const unsigned char aes_128_no_df_pr_additionalinput2[] = {
  294. 0x32, 0x7f, 0x38, 0x8b, 0x73, 0x0a, 0x78, 0x83, 0xdc, 0x30, 0xbe, 0x9f,
  295. 0x10, 0x1f, 0xf5, 0x1f, 0xca, 0x00, 0xb5, 0x0d, 0xd6, 0x9d, 0x60, 0x83,
  296. 0x51, 0x54, 0x7d, 0x38, 0x23, 0x3a, 0x52, 0x50
  297. };
  298. static const unsigned char aes_128_no_df_pr_entropyinputpr2[] = {
  299. 0x18, 0x61, 0x53, 0x56, 0xed, 0xed, 0xd7, 0x20, 0xfb, 0x71, 0x04, 0x7a,
  300. 0xb2, 0xac, 0xc1, 0x28, 0xcd, 0xf2, 0xc2, 0xfc, 0xaa, 0xb1, 0x06, 0x07,
  301. 0xe9, 0x46, 0x95, 0x02, 0x48, 0x01, 0x78, 0xf9
  302. };
  303. static const unsigned char aes_128_no_df_pr_returnedbits[] = {
  304. 0x29, 0xc8, 0x1b, 0x15, 0xb1, 0xd1, 0xc2, 0xf6, 0x71, 0x86, 0x68, 0x33,
  305. 0x57, 0x82, 0x33, 0xaf
  306. };
  307. /*
  308. * AES-128 no df no PR
  309. */
  310. static const unsigned char aes_128_no_df_entropyinput[] = {
  311. 0xc9, 0xc5, 0x79, 0xbc, 0xe8, 0xc5, 0x19, 0xd8, 0xbc, 0x66, 0x73, 0x67,
  312. 0xf6, 0xd3, 0x72, 0xaa, 0xa6, 0x16, 0xb8, 0x50, 0xb7, 0x47, 0x3a, 0x42,
  313. 0xab, 0xf4, 0x16, 0xb2, 0x96, 0xd2, 0xb6, 0x60
  314. };
  315. static const unsigned char aes_128_no_df_nonce[] = {
  316. 0x5f, 0xbf, 0x97, 0x0c, 0x4b, 0xa4, 0x87, 0x13,
  317. };
  318. static const unsigned char aes_128_no_df_personalizationstring[] = {
  319. 0xce, 0xfb, 0x7b, 0x3f, 0xd4, 0x6b, 0x29, 0x0d, 0x69, 0x06, 0xff, 0xbb,
  320. 0xf2, 0xe5, 0xc6, 0x6c, 0x0a, 0x10, 0xa0, 0xcf, 0x1a, 0x48, 0xc7, 0x8b,
  321. 0x3c, 0x16, 0x88, 0xed, 0x50, 0x13, 0x81, 0xce
  322. };
  323. static const unsigned char aes_128_no_df_additionalinput[] = {
  324. 0x4b, 0x22, 0x46, 0x18, 0x02, 0x7b, 0xd2, 0x1b, 0x22, 0x42, 0x7c, 0x37,
  325. 0xd9, 0xf6, 0xe8, 0x9b, 0x12, 0x30, 0x5f, 0xe9, 0x90, 0xe8, 0x08, 0x24,
  326. 0x4f, 0x06, 0x66, 0xdb, 0x19, 0x2b, 0x13, 0x95
  327. };
  328. static const unsigned char aes_128_no_df_int_returnedbits[] = {
  329. 0x2e, 0x96, 0x70, 0x64, 0xfa, 0xdf, 0xdf, 0x57, 0xb5, 0x82, 0xee, 0xd6,
  330. 0xed, 0x3e, 0x65, 0xc2
  331. };
  332. static const unsigned char aes_128_no_df_entropyinputreseed[] = {
  333. 0x26, 0xc0, 0x72, 0x16, 0x3a, 0x4b, 0xb7, 0x99, 0xd4, 0x07, 0xaf, 0x66,
  334. 0x62, 0x36, 0x96, 0xa4, 0x51, 0x17, 0xfa, 0x07, 0x8b, 0x17, 0x5e, 0xa1,
  335. 0x2f, 0x3c, 0x10, 0xe7, 0x90, 0xd0, 0x46, 0x00
  336. };
  337. static const unsigned char aes_128_no_df_additionalinputreseed[] = {
  338. 0x83, 0x39, 0x37, 0x7b, 0x02, 0x06, 0xd2, 0x12, 0x13, 0x8d, 0x8b, 0xf2,
  339. 0xf0, 0xf6, 0x26, 0xeb, 0xa4, 0x22, 0x7b, 0xc2, 0xe7, 0xba, 0x79, 0xe4,
  340. 0x3b, 0x77, 0x5d, 0x4d, 0x47, 0xb2, 0x2d, 0xb4
  341. };
  342. static const unsigned char aes_128_no_df_additionalinput2[] = {
  343. 0x0b, 0xb9, 0x67, 0x37, 0xdb, 0x83, 0xdf, 0xca, 0x81, 0x8b, 0xf9, 0x3f,
  344. 0xf1, 0x11, 0x1b, 0x2f, 0xf0, 0x61, 0xa6, 0xdf, 0xba, 0xa3, 0xb1, 0xac,
  345. 0xd3, 0xe6, 0x09, 0xb8, 0x2c, 0x6a, 0x67, 0xd6
  346. };
  347. static const unsigned char aes_128_no_df_returnedbits[] = {
  348. 0x1e, 0xa7, 0xa4, 0xe4, 0xe1, 0xa6, 0x7c, 0x69, 0x9a, 0x44, 0x6c, 0x36,
  349. 0x81, 0x37, 0x19, 0xd4
  350. };
  351. /*
  352. * AES-192 no df PR
  353. */
  354. static const unsigned char aes_192_no_df_pr_entropyinput[] = {
  355. 0x9d, 0x2c, 0xd2, 0x55, 0x66, 0xea, 0xe0, 0xbe, 0x18, 0xb7, 0x76, 0xe7,
  356. 0x73, 0x35, 0xd8, 0x1f, 0xad, 0x3a, 0xe3, 0x81, 0x0e, 0x92, 0xd0, 0x61,
  357. 0xc9, 0x12, 0x26, 0xf6, 0x1c, 0xdf, 0xfe, 0x47, 0xaa, 0xfe, 0x7d, 0x5a,
  358. 0x17, 0x1f, 0x8d, 0x9a
  359. };
  360. static const unsigned char aes_192_no_df_pr_nonce[] = {
  361. 0x44, 0x82, 0xed, 0xe8, 0x4c, 0x28, 0x5a, 0x14, 0xff, 0x88, 0x8d, 0x19,
  362. 0x61, 0x5c, 0xee, 0x0f
  363. };
  364. static const unsigned char aes_192_no_df_pr_personalizationstring[] = {
  365. 0x47, 0xd7, 0x9b, 0x99, 0xaa, 0xcb, 0xe7, 0xd2, 0x57, 0x66, 0x2c, 0xe1,
  366. 0x78, 0xd6, 0x2c, 0xea, 0xa3, 0x23, 0x5f, 0x2a, 0xc1, 0x3a, 0xf0, 0xa4,
  367. 0x20, 0x3b, 0xfa, 0x07, 0xd5, 0x05, 0x02, 0xe4, 0x57, 0x01, 0xb6, 0x10,
  368. 0x57, 0x2e, 0xe7, 0x55
  369. };
  370. static const unsigned char aes_192_no_df_pr_additionalinput[] = {
  371. 0x4b, 0x74, 0x0b, 0x40, 0xce, 0x6b, 0xc2, 0x6a, 0x24, 0xb4, 0xf3, 0xad,
  372. 0x7a, 0xa5, 0x7a, 0xa2, 0x15, 0xe2, 0xc8, 0x61, 0x15, 0xc6, 0xb7, 0x85,
  373. 0x69, 0x11, 0xad, 0x7b, 0x14, 0xd2, 0xf6, 0x12, 0xa1, 0x95, 0x5d, 0x3f,
  374. 0xe2, 0xd0, 0x0c, 0x2f
  375. };
  376. static const unsigned char aes_192_no_df_pr_entropyinputpr[] = {
  377. 0x0c, 0x9c, 0xad, 0x05, 0xee, 0xae, 0x48, 0x23, 0x89, 0x59, 0xa1, 0x94,
  378. 0xd7, 0xd8, 0x75, 0xd5, 0x54, 0x93, 0xc7, 0x4a, 0xd9, 0x26, 0xde, 0xeb,
  379. 0xba, 0xb0, 0x7e, 0x30, 0x1d, 0x5f, 0x69, 0x40, 0x9c, 0x3b, 0x17, 0x58,
  380. 0x1d, 0x30, 0xb3, 0x78
  381. };
  382. static const unsigned char aes_192_no_df_pr_int_returnedbits[] = {
  383. 0xf7, 0x93, 0xb0, 0x6d, 0x77, 0x83, 0xd5, 0x38, 0x01, 0xe1, 0x52, 0x40,
  384. 0x7e, 0x3e, 0x0c, 0x26
  385. };
  386. static const unsigned char aes_192_no_df_pr_additionalinput2[] = {
  387. 0xbc, 0x4b, 0x37, 0x44, 0x1c, 0xc5, 0x45, 0x5f, 0x8f, 0x51, 0x62, 0x8a,
  388. 0x85, 0x30, 0x1d, 0x7c, 0xe4, 0xcf, 0xf7, 0x44, 0xce, 0x32, 0x3e, 0x57,
  389. 0x95, 0xa4, 0x2a, 0xdf, 0xfd, 0x9e, 0x38, 0x41, 0xb3, 0xf6, 0xc5, 0xee,
  390. 0x0c, 0x4b, 0xee, 0x6e
  391. };
  392. static const unsigned char aes_192_no_df_pr_entropyinputpr2[] = {
  393. 0xec, 0xaf, 0xf6, 0x4f, 0xb1, 0xa0, 0x54, 0xb5, 0x5b, 0xe3, 0x46, 0xb0,
  394. 0x76, 0x5a, 0x7c, 0x3f, 0x7b, 0x94, 0x69, 0x21, 0x51, 0x02, 0xe5, 0x9f,
  395. 0x04, 0x59, 0x02, 0x98, 0xc6, 0x43, 0x2c, 0xcc, 0x26, 0x4c, 0x87, 0x6b,
  396. 0x8e, 0x0a, 0x83, 0xdf
  397. };
  398. static const unsigned char aes_192_no_df_pr_returnedbits[] = {
  399. 0x74, 0x45, 0xfb, 0x53, 0x84, 0x96, 0xbe, 0xff, 0x15, 0xcc, 0x41, 0x91,
  400. 0xb9, 0xa1, 0x21, 0x68
  401. };
  402. /*
  403. * AES-192 no df no PR
  404. */
  405. static const unsigned char aes_192_no_df_entropyinput[] = {
  406. 0x3c, 0x7d, 0xb5, 0xe0, 0x54, 0xd9, 0x6e, 0x8c, 0xa9, 0x86, 0xce, 0x4e,
  407. 0x6b, 0xaf, 0xeb, 0x2f, 0xe7, 0x75, 0xe0, 0x8b, 0xa4, 0x3b, 0x07, 0xfe,
  408. 0xbe, 0x33, 0x75, 0x93, 0x80, 0x27, 0xb5, 0x29, 0x47, 0x8b, 0xc7, 0x28,
  409. 0x94, 0xc3, 0x59, 0x63
  410. };
  411. static const unsigned char aes_192_no_df_nonce[] = {
  412. 0x43, 0xf1, 0x7d, 0xb8, 0xc3, 0xfe, 0xd0, 0x23, 0x6b, 0xb4, 0x92, 0xdb,
  413. 0x29, 0xfd, 0x45, 0x71
  414. };
  415. static const unsigned char aes_192_no_df_personalizationstring[] = {
  416. 0x9f, 0x24, 0x29, 0x99, 0x9e, 0x01, 0xab, 0xe9, 0x19, 0xd8, 0x23, 0x08,
  417. 0xb7, 0xd6, 0x7e, 0x8c, 0xc0, 0x9e, 0x7f, 0x6e, 0x5b, 0x33, 0x20, 0x96,
  418. 0x0b, 0x23, 0x2c, 0xa5, 0x6a, 0xf8, 0x1b, 0x04, 0x26, 0xdb, 0x2e, 0x2b,
  419. 0x3b, 0x88, 0xce, 0x35
  420. };
  421. static const unsigned char aes_192_no_df_additionalinput[] = {
  422. 0x94, 0xe9, 0x7c, 0x3d, 0xa7, 0xdb, 0x60, 0x83, 0x1f, 0x98, 0x3f, 0x0b,
  423. 0x88, 0x59, 0x57, 0x51, 0x88, 0x9f, 0x76, 0x49, 0x9f, 0xa6, 0xda, 0x71,
  424. 0x1d, 0x0d, 0x47, 0x16, 0x63, 0xc5, 0x68, 0xe4, 0x5d, 0x39, 0x69, 0xb3,
  425. 0x3e, 0xbe, 0xd4, 0x8e
  426. };
  427. static const unsigned char aes_192_no_df_int_returnedbits[] = {
  428. 0xf9, 0xd7, 0xad, 0x69, 0xab, 0x8f, 0x23, 0x56, 0x70, 0x17, 0x4f, 0x2a,
  429. 0x45, 0xe7, 0x4a, 0xc5
  430. };
  431. static const unsigned char aes_192_no_df_entropyinputreseed[] = {
  432. 0xa6, 0x71, 0x6a, 0x3d, 0xba, 0xd1, 0xe8, 0x66, 0xa6, 0xef, 0xb2, 0x0e,
  433. 0xa8, 0x9c, 0xaa, 0x4e, 0xaf, 0x17, 0x89, 0x50, 0x00, 0xda, 0xa1, 0xb1,
  434. 0x0b, 0xa4, 0xd9, 0x35, 0x89, 0xc8, 0xe5, 0xb0, 0xd9, 0xb7, 0xc4, 0x33,
  435. 0x9b, 0xcb, 0x7e, 0x75
  436. };
  437. static const unsigned char aes_192_no_df_additionalinputreseed[] = {
  438. 0x27, 0x21, 0xfc, 0xc2, 0xbd, 0xf3, 0x3c, 0xce, 0xc3, 0xca, 0xc1, 0x01,
  439. 0xe0, 0xff, 0x93, 0x12, 0x7d, 0x54, 0x42, 0xe3, 0x9f, 0x03, 0xdf, 0x27,
  440. 0x04, 0x07, 0x3c, 0x53, 0x7f, 0xa8, 0x66, 0xc8, 0x97, 0x4b, 0x61, 0x40,
  441. 0x5d, 0x7a, 0x25, 0x79
  442. };
  443. static const unsigned char aes_192_no_df_additionalinput2[] = {
  444. 0x2d, 0x8e, 0x16, 0x5d, 0x0b, 0x9f, 0xeb, 0xaa, 0xd6, 0xec, 0x28, 0x71,
  445. 0x7c, 0x0b, 0xc1, 0x1d, 0xd4, 0x44, 0x19, 0x47, 0xfd, 0x1d, 0x7c, 0xe5,
  446. 0xf3, 0x27, 0xe1, 0xb6, 0x72, 0x0a, 0xe0, 0xec, 0x0e, 0xcd, 0xef, 0x1a,
  447. 0x91, 0x6a, 0xe3, 0x5f
  448. };
  449. static const unsigned char aes_192_no_df_returnedbits[] = {
  450. 0xe5, 0xda, 0xb8, 0xe0, 0x63, 0x59, 0x5a, 0xcc, 0x3d, 0xdc, 0x9f, 0xe8,
  451. 0x66, 0x67, 0x2c, 0x92
  452. };
  453. /*
  454. * AES-256 no df PR
  455. */
  456. static const unsigned char aes_256_no_df_pr_entropyinput[] = {
  457. 0x15, 0xc7, 0x5d, 0xcb, 0x41, 0x4b, 0x16, 0x01, 0x3a, 0xd1, 0x44, 0xe8,
  458. 0x22, 0x32, 0xc6, 0x9c, 0x3f, 0xe7, 0x43, 0xf5, 0x9a, 0xd3, 0xea, 0xf2,
  459. 0xd7, 0x4e, 0x6e, 0x6a, 0x55, 0x73, 0x40, 0xef, 0x89, 0xad, 0x0d, 0x03,
  460. 0x96, 0x7e, 0x78, 0x81, 0x2f, 0x91, 0x1b, 0x44, 0xb0, 0x02, 0xba, 0x1c,
  461. };
  462. static const unsigned char aes_256_no_df_pr_nonce[] = {
  463. 0xdc, 0xe4, 0xd4, 0x27, 0x7a, 0x90, 0xd7, 0x99, 0x43, 0xa1, 0x3c, 0x30,
  464. 0xcc, 0x4b, 0xee, 0x2e
  465. };
  466. static const unsigned char aes_256_no_df_pr_personalizationstring[] = {
  467. 0xe3, 0xe6, 0xb9, 0x11, 0xe4, 0x7a, 0xa4, 0x40, 0x6b, 0xf8, 0x73, 0xf7,
  468. 0x7e, 0xec, 0xc7, 0xb9, 0x97, 0xbf, 0xf8, 0x25, 0x7b, 0xbe, 0x11, 0x9b,
  469. 0x5b, 0x6a, 0x0c, 0x2e, 0x2b, 0x01, 0x51, 0xcd, 0x41, 0x4b, 0x6b, 0xac,
  470. 0x31, 0xa8, 0x0b, 0xf7, 0xe6, 0x59, 0x42, 0xb8, 0x03, 0x0c, 0xf8, 0x06,
  471. };
  472. static const unsigned char aes_256_no_df_pr_additionalinput[] = {
  473. 0x6a, 0x9f, 0x00, 0x91, 0xae, 0xfe, 0xcf, 0x84, 0x99, 0xce, 0xb1, 0x40,
  474. 0x6d, 0x5d, 0x33, 0x28, 0x84, 0xf4, 0x8c, 0x63, 0x4c, 0x7e, 0xbd, 0x2c,
  475. 0x80, 0x76, 0xee, 0x5a, 0xaa, 0x15, 0x07, 0x31, 0xd8, 0xbb, 0x8c, 0x69,
  476. 0x9d, 0x9d, 0xbc, 0x7e, 0x49, 0xae, 0xec, 0x39, 0x6b, 0xd1, 0x1f, 0x7e,
  477. };
  478. static const unsigned char aes_256_no_df_pr_entropyinputpr[] = {
  479. 0xf3, 0xb9, 0x75, 0x9c, 0xbd, 0x88, 0xea, 0xa2, 0x50, 0xad, 0xd6, 0x16,
  480. 0x1a, 0x12, 0x3c, 0x86, 0x68, 0xaf, 0x6f, 0xbe, 0x19, 0xf2, 0xee, 0xcc,
  481. 0xa5, 0x70, 0x84, 0x53, 0x50, 0xcb, 0x9f, 0x14, 0xa9, 0xe5, 0xee, 0xb9,
  482. 0x48, 0x45, 0x40, 0xe2, 0xc7, 0xc9, 0x9a, 0x74, 0xff, 0x8c, 0x99, 0x1f,
  483. };
  484. static const unsigned char aes_256_no_df_pr_int_returnedbits[] = {
  485. 0x2e, 0xf2, 0x45, 0x4c, 0x62, 0x2e, 0x0a, 0xb9, 0x6b, 0xa2, 0xfd, 0x56,
  486. 0x79, 0x60, 0x93, 0xcf
  487. };
  488. static const unsigned char aes_256_no_df_pr_additionalinput2[] = {
  489. 0xaf, 0x69, 0x20, 0xe9, 0x3b, 0x37, 0x9d, 0x3f, 0xb4, 0x80, 0x02, 0x7a,
  490. 0x25, 0x7d, 0xb8, 0xde, 0x71, 0xc5, 0x06, 0x0c, 0xb4, 0xe2, 0x8f, 0x35,
  491. 0xd8, 0x14, 0x0d, 0x7f, 0x76, 0x63, 0x4e, 0xb5, 0xee, 0xe9, 0x6f, 0x34,
  492. 0xc7, 0x5f, 0x56, 0x14, 0x4a, 0xe8, 0x73, 0x95, 0x5b, 0x1c, 0xb9, 0xcb,
  493. };
  494. static const unsigned char aes_256_no_df_pr_entropyinputpr2[] = {
  495. 0xe5, 0xb0, 0x2e, 0x7e, 0x52, 0x30, 0xe3, 0x63, 0x82, 0xb6, 0x44, 0xd3,
  496. 0x25, 0x19, 0x05, 0x24, 0x9a, 0x9f, 0x5f, 0x27, 0x6a, 0x29, 0xab, 0xfa,
  497. 0x07, 0xa2, 0x42, 0x0f, 0xc5, 0xa8, 0x94, 0x7c, 0x17, 0x7b, 0x85, 0x83,
  498. 0x0c, 0x25, 0x0e, 0x63, 0x0b, 0xe9, 0x12, 0x60, 0xcd, 0xef, 0x80, 0x0f,
  499. };
  500. static const unsigned char aes_256_no_df_pr_returnedbits[] = {
  501. 0x5e, 0xf2, 0x26, 0xef, 0x9f, 0x58, 0x5d, 0xd5, 0x4a, 0x10, 0xfe, 0xa7,
  502. 0x2d, 0x5f, 0x4a, 0x46
  503. };
  504. /*
  505. * AES-256 no df no PR
  506. */
  507. static const unsigned char aes_256_no_df_entropyinput[] = {
  508. 0xfb, 0xcf, 0x1b, 0x61, 0x16, 0x89, 0x78, 0x23, 0xf5, 0xd8, 0x96, 0xe3,
  509. 0x4e, 0x64, 0x0b, 0x29, 0x9a, 0x3f, 0xf8, 0xa5, 0xed, 0xf2, 0xfe, 0xdb,
  510. 0x16, 0xca, 0x7f, 0x10, 0xfa, 0x5e, 0x18, 0x76, 0x2c, 0x63, 0x5e, 0x96,
  511. 0xcf, 0xb3, 0xd6, 0xfc, 0xaf, 0x99, 0x39, 0x28, 0x9c, 0x61, 0xe8, 0xb3,
  512. };
  513. static const unsigned char aes_256_no_df_nonce[] = {
  514. 0x12, 0x96, 0xf0, 0x52, 0xf3, 0x8d, 0x81, 0xcf, 0xde, 0x86, 0xf2, 0x99,
  515. 0x43, 0x96, 0xb9, 0xf0
  516. };
  517. static const unsigned char aes_256_no_df_personalizationstring[] = {
  518. 0x63, 0x0d, 0x78, 0xf5, 0x90, 0x8e, 0x32, 0x47, 0xb0, 0x4d, 0x37, 0x60,
  519. 0x09, 0x96, 0xbc, 0xbf, 0x97, 0x7a, 0x62, 0x14, 0x45, 0xbd, 0x8d, 0xcc,
  520. 0x69, 0xfb, 0x03, 0xe1, 0x80, 0x1c, 0xc7, 0xe2, 0x2a, 0xf9, 0x37, 0x3f,
  521. 0x66, 0x4d, 0x62, 0xd9, 0x10, 0xe0, 0xad, 0xc8, 0x9a, 0xf0, 0xa8, 0x6d,
  522. };
  523. static const unsigned char aes_256_no_df_additionalinput[] = {
  524. 0x36, 0xc6, 0x13, 0x60, 0xbb, 0x14, 0xad, 0x22, 0xb0, 0x38, 0xac, 0xa6,
  525. 0x18, 0x16, 0x93, 0x25, 0x86, 0xb7, 0xdc, 0xdc, 0x36, 0x98, 0x2b, 0xf9,
  526. 0x68, 0x33, 0xd3, 0xc6, 0xff, 0xce, 0x8d, 0x15, 0x59, 0x82, 0x76, 0xed,
  527. 0x6f, 0x8d, 0x49, 0x74, 0x2f, 0xda, 0xdc, 0x1f, 0x17, 0xd0, 0xde, 0x17,
  528. };
  529. static const unsigned char aes_256_no_df_int_returnedbits[] = {
  530. 0x16, 0x2f, 0x8e, 0x3f, 0x21, 0x7a, 0x1c, 0x20, 0x56, 0xd1, 0x92, 0xf6,
  531. 0xd2, 0x25, 0x75, 0x0e
  532. };
  533. static const unsigned char aes_256_no_df_entropyinputreseed[] = {
  534. 0x91, 0x79, 0x76, 0xee, 0xe0, 0xcf, 0x9e, 0xc2, 0xd5, 0xd4, 0x23, 0x9b,
  535. 0x12, 0x8c, 0x7e, 0x0a, 0xb7, 0xd2, 0x8b, 0xd6, 0x7c, 0xa3, 0xc6, 0xe5,
  536. 0x0e, 0xaa, 0xc7, 0x6b, 0xae, 0x0d, 0xfa, 0x53, 0x06, 0x79, 0xa1, 0xed,
  537. 0x4d, 0x6a, 0x0e, 0xd8, 0x9d, 0xbe, 0x1b, 0x31, 0x93, 0x7b, 0xec, 0xfb,
  538. };
  539. static const unsigned char aes_256_no_df_additionalinputreseed[] = {
  540. 0xd2, 0x46, 0x50, 0x22, 0x10, 0x14, 0x63, 0xf7, 0xea, 0x0f, 0xb9, 0x7e,
  541. 0x0d, 0xe1, 0x94, 0x07, 0xaf, 0x09, 0x44, 0x31, 0xea, 0x64, 0xa4, 0x18,
  542. 0x5b, 0xf9, 0xd8, 0xc2, 0xfa, 0x03, 0x47, 0xc5, 0x39, 0x43, 0xd5, 0x3b,
  543. 0x62, 0x86, 0x64, 0xea, 0x2c, 0x73, 0x8c, 0xae, 0x9d, 0x98, 0x98, 0x29,
  544. };
  545. static const unsigned char aes_256_no_df_additionalinput2[] = {
  546. 0x8c, 0xab, 0x18, 0xf8, 0xc3, 0xec, 0x18, 0x5c, 0xb3, 0x1e, 0x9d, 0xbe,
  547. 0x3f, 0x03, 0xb4, 0x00, 0x98, 0x9d, 0xae, 0xeb, 0xf4, 0x94, 0xf8, 0x42,
  548. 0x8f, 0xe3, 0x39, 0x07, 0xe1, 0xc9, 0xad, 0x0b, 0x1f, 0xed, 0xc0, 0xba,
  549. 0xf6, 0xd1, 0xec, 0x27, 0x86, 0x7b, 0xd6, 0x55, 0x9b, 0x60, 0xa5, 0xc6,
  550. };
  551. static const unsigned char aes_256_no_df_returnedbits[] = {
  552. 0xef, 0xd2, 0xd8, 0x5c, 0xdc, 0x62, 0x25, 0x9f, 0xaa, 0x1e, 0x2c, 0x67,
  553. 0xf6, 0x02, 0x32, 0xe2
  554. };
  555. /* SHA-1 PR */
  556. static const unsigned char sha1_pr_entropyinput[] =
  557. {
  558. 0xd2, 0x36, 0xa5, 0x27, 0x31, 0x73, 0xdd, 0x11, 0x4f, 0x93, 0xbd, 0xe2,
  559. 0x31, 0xa5, 0x91, 0x13
  560. };
  561. static const unsigned char sha1_pr_nonce[] =
  562. {
  563. 0xb5, 0xb3, 0x60, 0xef, 0xf7, 0x63, 0x31, 0xf3
  564. };
  565. static const unsigned char sha1_pr_personalizationstring[] =
  566. {
  567. 0xd4, 0xbb, 0x02, 0x10, 0xb2, 0x71, 0xdb, 0x81, 0xd6, 0xf0, 0x42, 0x60,
  568. 0xda, 0xea, 0x77, 0x52
  569. };
  570. static const unsigned char sha1_pr_additionalinput[] =
  571. {
  572. 0x4d, 0xd2, 0x6c, 0x87, 0xfb, 0x2c, 0x4f, 0xa6, 0x8d, 0x16, 0x63, 0x22,
  573. 0x6a, 0x51, 0xe3, 0xf8
  574. };
  575. static const unsigned char sha1_pr_entropyinputpr[] =
  576. {
  577. 0xc9, 0x83, 0x9e, 0x16, 0xf6, 0x1c, 0x0f, 0xb2, 0xec, 0x60, 0x31, 0xa9,
  578. 0xcb, 0xa9, 0x36, 0x7a
  579. };
  580. static const unsigned char sha1_pr_int_returnedbits[] =
  581. {
  582. 0xa8, 0x13, 0x4f, 0xf4, 0x31, 0x02, 0x44, 0xe3, 0xd3, 0x3d, 0x61, 0x9e,
  583. 0xe5, 0xc6, 0x3e, 0x89, 0xb5, 0x9b, 0x0f, 0x35
  584. };
  585. static const unsigned char sha1_pr_additionalinput2[] =
  586. {
  587. 0xf9, 0xe8, 0xd2, 0x72, 0x13, 0x34, 0x95, 0x6f, 0x15, 0x49, 0x47, 0x99,
  588. 0x16, 0x03, 0x19, 0x47
  589. };
  590. static const unsigned char sha1_pr_entropyinputpr2[] =
  591. {
  592. 0x4e, 0x8c, 0x49, 0x9b, 0x4a, 0x5c, 0x9b, 0x9c, 0x3a, 0xee, 0xfb, 0xd2,
  593. 0xae, 0xcd, 0x8c, 0xc4
  594. };
  595. static const unsigned char sha1_pr_returnedbits[] =
  596. {
  597. 0x50, 0xb4, 0xb4, 0xcd, 0x68, 0x57, 0xfc, 0x2e, 0xc1, 0x52, 0xcc, 0xf6,
  598. 0x68, 0xa4, 0x81, 0xed, 0x7e, 0xe4, 0x1d, 0x87
  599. };
  600. /* SHA-1 No PR */
  601. static const unsigned char sha1_entropyinput[] =
  602. {
  603. 0xa9, 0x47, 0x1b, 0x29, 0x2d, 0x1c, 0x05, 0xdf, 0x76, 0xd0, 0x62, 0xf9,
  604. 0xe2, 0x7f, 0x4c, 0x7b
  605. };
  606. static const unsigned char sha1_nonce[] =
  607. {
  608. 0x53, 0x23, 0x24, 0xe3, 0xec, 0x0c, 0x54, 0x14
  609. };
  610. static const unsigned char sha1_personalizationstring[] =
  611. {
  612. 0x7a, 0x87, 0xa1, 0xac, 0x1c, 0xfd, 0xab, 0xae, 0xf7, 0xd6, 0xfb, 0x76,
  613. 0x28, 0xec, 0x6d, 0xca
  614. };
  615. static const unsigned char sha1_additionalinput[] =
  616. {
  617. 0xfc, 0x92, 0x35, 0xd6, 0x7e, 0xb7, 0x24, 0x65, 0xfd, 0x12, 0x27, 0x35,
  618. 0xc0, 0x72, 0xca, 0x28
  619. };
  620. static const unsigned char sha1_int_returnedbits[] =
  621. {
  622. 0x57, 0x88, 0x82, 0xe5, 0x25, 0xa5, 0x2c, 0x4a, 0x06, 0x20, 0x6c, 0x72,
  623. 0x55, 0x61, 0xdd, 0x90, 0x71, 0x9f, 0x95, 0xea
  624. };
  625. static const unsigned char sha1_entropyinputreseed[] =
  626. {
  627. 0x69, 0xa5, 0x40, 0x62, 0x98, 0x47, 0x56, 0x73, 0x4a, 0x8f, 0x60, 0x96,
  628. 0xd6, 0x99, 0x27, 0xed
  629. };
  630. static const unsigned char sha1_additionalinputreseed[] =
  631. {
  632. 0xe5, 0x40, 0x4e, 0xbd, 0x50, 0x00, 0xf5, 0x15, 0xa6, 0xee, 0x45, 0xda,
  633. 0x84, 0x3d, 0xd4, 0xc0
  634. };
  635. static const unsigned char sha1_additionalinput2[] =
  636. {
  637. 0x11, 0x51, 0x14, 0xf0, 0x09, 0x1b, 0x4e, 0x56, 0x0d, 0xe9, 0xf6, 0x1e,
  638. 0x52, 0x65, 0xcd, 0x96
  639. };
  640. static const unsigned char sha1_returnedbits[] =
  641. {
  642. 0xa1, 0x9c, 0x94, 0x6e, 0x29, 0xe1, 0x33, 0x0d, 0x32, 0xd6, 0xaa, 0xce,
  643. 0x71, 0x3f, 0x52, 0x72, 0x8b, 0x42, 0xa8, 0xd7
  644. };
  645. /* SHA-224 PR */
  646. static const unsigned char sha224_pr_entropyinput[] =
  647. {
  648. 0x12, 0x69, 0x32, 0x4f, 0x83, 0xa6, 0xf5, 0x14, 0xe3, 0x49, 0x3e, 0x75,
  649. 0x3e, 0xde, 0xad, 0xa1, 0x29, 0xc3, 0xf3, 0x19, 0x20, 0xb5, 0x4c, 0xd9
  650. };
  651. static const unsigned char sha224_pr_nonce[] =
  652. {
  653. 0x6a, 0x78, 0xd0, 0xeb, 0xbb, 0x5a, 0xf0, 0xee, 0xe8, 0xc3, 0xba, 0x71
  654. };
  655. static const unsigned char sha224_pr_personalizationstring[] =
  656. {
  657. 0xd5, 0xb8, 0xb6, 0xbc, 0xc1, 0x5b, 0x60, 0x31, 0x3c, 0xf5, 0xe5, 0xc0,
  658. 0x8e, 0x52, 0x7a, 0xbd, 0xea, 0x47, 0xa9, 0x5f, 0x8f, 0xf9, 0x8b, 0xae
  659. };
  660. static const unsigned char sha224_pr_additionalinput[] =
  661. {
  662. 0x1f, 0x55, 0xec, 0xae, 0x16, 0x12, 0x84, 0xba, 0x84, 0x16, 0x19, 0x88,
  663. 0x8e, 0xb8, 0x33, 0x25, 0x54, 0xff, 0xca, 0x79, 0xaf, 0x07, 0x25, 0x50
  664. };
  665. static const unsigned char sha224_pr_entropyinputpr[] =
  666. {
  667. 0x92, 0xa3, 0x32, 0xa8, 0x9a, 0x0a, 0x58, 0x7c, 0x1d, 0x5a, 0x7e, 0xe1,
  668. 0xb2, 0x73, 0xab, 0x0e, 0x16, 0x79, 0x23, 0xd3, 0x29, 0x89, 0x81, 0xe1
  669. };
  670. static const unsigned char sha224_pr_int_returnedbits[] =
  671. {
  672. 0xf3, 0x38, 0x91, 0x40, 0x37, 0x7a, 0x51, 0x72, 0x42, 0x74, 0x78, 0x0a,
  673. 0x69, 0xfd, 0xa6, 0x44, 0x43, 0x45, 0x6c, 0x0c, 0x5a, 0x19, 0xff, 0xf1,
  674. 0x54, 0x60, 0xee, 0x6a
  675. };
  676. static const unsigned char sha224_pr_additionalinput2[] =
  677. {
  678. 0x75, 0xf3, 0x04, 0x25, 0xdd, 0x36, 0xa8, 0x37, 0x46, 0xae, 0x0c, 0x52,
  679. 0x05, 0x79, 0x4c, 0x26, 0xdb, 0xe9, 0x71, 0x16, 0x4c, 0x0a, 0xf2, 0x60
  680. };
  681. static const unsigned char sha224_pr_entropyinputpr2[] =
  682. {
  683. 0xea, 0xc5, 0x03, 0x0a, 0x4f, 0xb0, 0x38, 0x8d, 0x23, 0xd4, 0xc8, 0x77,
  684. 0xe2, 0x6d, 0x9c, 0x0b, 0x44, 0xf7, 0x2d, 0x5b, 0xbf, 0x5d, 0x2a, 0x11
  685. };
  686. static const unsigned char sha224_pr_returnedbits[] =
  687. {
  688. 0x60, 0x50, 0x2b, 0xe7, 0x86, 0xd8, 0x26, 0x73, 0xe3, 0x1d, 0x95, 0x20,
  689. 0xb3, 0x2c, 0x32, 0x1c, 0xf5, 0xce, 0x57, 0xa6, 0x67, 0x2b, 0xdc, 0x4e,
  690. 0xdd, 0x11, 0x4c, 0xc4
  691. };
  692. /* SHA-224 No PR */
  693. static const unsigned char sha224_entropyinput[] =
  694. {
  695. 0xb2, 0x1c, 0x77, 0x4d, 0xf6, 0xd3, 0xb6, 0x40, 0xb7, 0x30, 0x3e, 0x29,
  696. 0xb0, 0x85, 0x1c, 0xbe, 0x4a, 0xea, 0x6b, 0x5a, 0xb5, 0x8a, 0x97, 0xeb
  697. };
  698. static const unsigned char sha224_nonce[] =
  699. {
  700. 0x42, 0x02, 0x0a, 0x1c, 0x98, 0x9a, 0x77, 0x9e, 0x9f, 0x80, 0xba, 0xe0
  701. };
  702. static const unsigned char sha224_personalizationstring[] =
  703. {
  704. 0x98, 0xb8, 0x04, 0x41, 0xfc, 0xc1, 0x5d, 0xc5, 0xe9, 0xb9, 0x08, 0xda,
  705. 0xf9, 0xfa, 0x0d, 0x90, 0xce, 0xdf, 0x1d, 0x10, 0xa9, 0x8d, 0x50, 0x0c
  706. };
  707. static const unsigned char sha224_additionalinput[] =
  708. {
  709. 0x9a, 0x8d, 0x39, 0x49, 0x42, 0xd5, 0x0b, 0xae, 0xe1, 0xaf, 0xb7, 0x00,
  710. 0x02, 0xfa, 0x96, 0xb1, 0xa5, 0x1d, 0x2d, 0x25, 0x78, 0xee, 0x83, 0x3f
  711. };
  712. static const unsigned char sha224_int_returnedbits[] =
  713. {
  714. 0xe4, 0xf5, 0x53, 0x79, 0x5a, 0x97, 0x58, 0x06, 0x08, 0xba, 0x7b, 0xfa,
  715. 0xf0, 0x83, 0x05, 0x8c, 0x22, 0xc0, 0xc9, 0xdb, 0x15, 0xe7, 0xde, 0x20,
  716. 0x55, 0x22, 0x9a, 0xad
  717. };
  718. static const unsigned char sha224_entropyinputreseed[] =
  719. {
  720. 0x67, 0x09, 0x48, 0xaa, 0x07, 0x16, 0x99, 0x89, 0x7f, 0x6d, 0xa0, 0xe5,
  721. 0x8f, 0xdf, 0xbc, 0xdb, 0xfe, 0xe5, 0x6c, 0x7a, 0x95, 0x4a, 0x66, 0x17
  722. };
  723. static const unsigned char sha224_additionalinputreseed[] =
  724. {
  725. 0x0f, 0x4b, 0x1c, 0x6f, 0xb7, 0xe3, 0x47, 0xe5, 0x5d, 0x7d, 0x38, 0xd6,
  726. 0x28, 0x9b, 0xeb, 0x55, 0x63, 0x09, 0x3e, 0x7c, 0x56, 0xea, 0xf8, 0x19
  727. };
  728. static const unsigned char sha224_additionalinput2[] =
  729. {
  730. 0x2d, 0x26, 0x7c, 0x37, 0xe4, 0x7a, 0x28, 0x5e, 0x5a, 0x3c, 0xaf, 0x3d,
  731. 0x5a, 0x8e, 0x55, 0xa2, 0x1a, 0x6e, 0xc0, 0xe5, 0xf6, 0x21, 0xd3, 0xf6
  732. };
  733. static const unsigned char sha224_returnedbits[] =
  734. {
  735. 0x4d, 0x83, 0x35, 0xdf, 0x67, 0xa9, 0xfc, 0x17, 0xda, 0x70, 0xcc, 0x8b,
  736. 0x7f, 0x77, 0xae, 0xa2, 0x5f, 0xb9, 0x7e, 0x74, 0x4c, 0x26, 0xc1, 0x7a,
  737. 0x3b, 0xa7, 0x5c, 0x93
  738. };
  739. /* SHA-256 PR */
  740. static const unsigned char sha256_pr_entropyinput[] =
  741. {
  742. 0xce, 0x49, 0x00, 0x7a, 0x56, 0xe3, 0x67, 0x8f, 0xe1, 0xb6, 0xa7, 0xd4,
  743. 0x4f, 0x08, 0x7a, 0x1b, 0x01, 0xf4, 0xfa, 0x6b, 0xef, 0xb7, 0xe5, 0xeb,
  744. 0x07, 0x3d, 0x11, 0x0d, 0xc8, 0xea, 0x2b, 0xfe
  745. };
  746. static const unsigned char sha256_pr_nonce[] =
  747. {
  748. 0x73, 0x41, 0xc8, 0x92, 0x94, 0xe2, 0xc5, 0x5f, 0x93, 0xfd, 0x39, 0x5d,
  749. 0x2b, 0x91, 0x4d, 0x38
  750. };
  751. static const unsigned char sha256_pr_personalizationstring[] =
  752. {
  753. 0x50, 0x6d, 0x01, 0x01, 0x07, 0x5a, 0x80, 0x35, 0x7a, 0x56, 0x1a, 0x56,
  754. 0x2f, 0x9a, 0x0b, 0x35, 0xb2, 0xb1, 0xc9, 0xe5, 0xca, 0x69, 0x61, 0x48,
  755. 0xff, 0xfb, 0x0f, 0xd9, 0x4b, 0x79, 0x1d, 0xba
  756. };
  757. static const unsigned char sha256_pr_additionalinput[] =
  758. {
  759. 0x20, 0xb8, 0xdf, 0x44, 0x77, 0x5a, 0xb8, 0xd3, 0xbf, 0xf6, 0xcf, 0xac,
  760. 0x5e, 0xa6, 0x96, 0x62, 0x73, 0x44, 0x40, 0x4a, 0x30, 0xfb, 0x38, 0xa5,
  761. 0x7b, 0x0d, 0xe4, 0x0d, 0xc6, 0xe4, 0x9a, 0x1f
  762. };
  763. static const unsigned char sha256_pr_entropyinputpr[] =
  764. {
  765. 0x04, 0xc4, 0x65, 0xf4, 0xd3, 0xbf, 0x83, 0x4b, 0xab, 0xc8, 0x41, 0xa8,
  766. 0xc2, 0xe0, 0x44, 0x63, 0x77, 0x4c, 0x6f, 0x6c, 0x49, 0x46, 0xff, 0x94,
  767. 0x17, 0xea, 0xe6, 0x1a, 0x9d, 0x5e, 0x66, 0x78
  768. };
  769. static const unsigned char sha256_pr_int_returnedbits[] =
  770. {
  771. 0x07, 0x4d, 0xac, 0x9b, 0x86, 0xca, 0x4a, 0xaa, 0x6e, 0x7a, 0x03, 0xa2,
  772. 0x5d, 0x10, 0xea, 0x0b, 0xf9, 0x83, 0xcc, 0xd1, 0xfc, 0xe2, 0x07, 0xc7,
  773. 0x06, 0x34, 0x60, 0x6f, 0x83, 0x94, 0x99, 0x76
  774. };
  775. static const unsigned char sha256_pr_additionalinput2[] =
  776. {
  777. 0x89, 0x4e, 0x45, 0x8c, 0x11, 0xf9, 0xbc, 0x5b, 0xac, 0x74, 0x8b, 0x4b,
  778. 0x5f, 0xf7, 0x19, 0xf3, 0xf5, 0x24, 0x54, 0x14, 0xd1, 0x15, 0xb1, 0x43,
  779. 0x12, 0xa4, 0x5f, 0xd4, 0xec, 0xfc, 0xcd, 0x09
  780. };
  781. static const unsigned char sha256_pr_entropyinputpr2[] =
  782. {
  783. 0x0e, 0xeb, 0x1f, 0xd7, 0xfc, 0xd1, 0x9d, 0xd4, 0x05, 0x36, 0x8b, 0xb2,
  784. 0xfb, 0xe4, 0xf4, 0x51, 0x0c, 0x87, 0x9b, 0x02, 0x44, 0xd5, 0x92, 0x4d,
  785. 0x44, 0xfe, 0x1a, 0x03, 0x43, 0x56, 0xbd, 0x86
  786. };
  787. static const unsigned char sha256_pr_returnedbits[] =
  788. {
  789. 0x02, 0xaa, 0xb6, 0x1d, 0x7e, 0x2a, 0x40, 0x03, 0x69, 0x2d, 0x49, 0xa3,
  790. 0x41, 0xe7, 0x44, 0x0b, 0xaf, 0x7b, 0x85, 0xe4, 0x5f, 0x53, 0x3b, 0x64,
  791. 0xbc, 0x89, 0xc8, 0x82, 0xd4, 0x78, 0x37, 0xa2
  792. };
  793. /* SHA-256 No PR */
  794. static const unsigned char sha256_entropyinput[] =
  795. {
  796. 0x5b, 0x1b, 0xec, 0x4d, 0xa9, 0x38, 0x74, 0x5a, 0x34, 0x0b, 0x7b, 0xc5,
  797. 0xe5, 0xd7, 0x66, 0x7c, 0xbc, 0x82, 0xb9, 0x0e, 0x2d, 0x1f, 0x92, 0xd7,
  798. 0xc1, 0xbc, 0x67, 0x69, 0xec, 0x6b, 0x03, 0x3c
  799. };
  800. static const unsigned char sha256_nonce[] =
  801. {
  802. 0xa4, 0x0c, 0xd8, 0x9c, 0x61, 0xd8, 0xc3, 0x54, 0xfe, 0x53, 0xc9, 0xe5,
  803. 0x5d, 0x6f, 0x6d, 0x35
  804. };
  805. static const unsigned char sha256_personalizationstring[] =
  806. {
  807. 0x22, 0x5e, 0x62, 0x93, 0x42, 0x83, 0x78, 0x24, 0xd8, 0x40, 0x8c, 0xde,
  808. 0x6f, 0xf9, 0xa4, 0x7a, 0xc5, 0xa7, 0x3b, 0x88, 0xa3, 0xee, 0x42, 0x20,
  809. 0xfd, 0x61, 0x56, 0xc6, 0x4c, 0x13, 0x41, 0x9c
  810. };
  811. static const unsigned char sha256_additionalinput[] =
  812. {
  813. 0xbf, 0x74, 0x5b, 0xf6, 0xc5, 0x64, 0x5e, 0x99, 0x34, 0x8f, 0xbc, 0xa4,
  814. 0xe2, 0xbd, 0xd8, 0x85, 0x26, 0x37, 0xea, 0xba, 0x4f, 0xf2, 0x9a, 0x9a,
  815. 0x66, 0xfc, 0xdf, 0x63, 0x26, 0x26, 0x19, 0x87
  816. };
  817. static const unsigned char sha256_int_returnedbits[] =
  818. {
  819. 0xb3, 0xc6, 0x07, 0x07, 0xd6, 0x75, 0xf6, 0x2b, 0xd6, 0x21, 0x96, 0xf1,
  820. 0xae, 0xdb, 0x2b, 0xac, 0x25, 0x2a, 0xae, 0xae, 0x41, 0x72, 0x03, 0x5e,
  821. 0xbf, 0xd3, 0x64, 0xbc, 0x59, 0xf9, 0xc0, 0x76
  822. };
  823. static const unsigned char sha256_entropyinputreseed[] =
  824. {
  825. 0xbf, 0x20, 0x33, 0x56, 0x29, 0xa8, 0x37, 0x04, 0x1f, 0x78, 0x34, 0x3d,
  826. 0x81, 0x2a, 0xc9, 0x86, 0xc6, 0x7a, 0x2f, 0x88, 0x5e, 0xd5, 0xbe, 0x34,
  827. 0x46, 0x20, 0xa4, 0x35, 0xeb, 0xc7, 0xe2, 0x9d
  828. };
  829. static const unsigned char sha256_additionalinputreseed[] =
  830. {
  831. 0x9b, 0xae, 0x2d, 0x2d, 0x61, 0xa4, 0x89, 0xeb, 0x43, 0x46, 0xa7, 0xda,
  832. 0xef, 0x40, 0xca, 0x4a, 0x99, 0x11, 0x41, 0xdc, 0x5c, 0x94, 0xe9, 0xac,
  833. 0xd4, 0xd0, 0xe6, 0xbd, 0xfb, 0x03, 0x9c, 0xa8
  834. };
  835. static const unsigned char sha256_additionalinput2[] =
  836. {
  837. 0x23, 0xaa, 0x0c, 0xbd, 0x28, 0x33, 0xe2, 0x51, 0xfc, 0x71, 0xd2, 0x15,
  838. 0x1f, 0x76, 0xfd, 0x0d, 0xe0, 0xb7, 0xb5, 0x84, 0x75, 0x5b, 0xbe, 0xf3,
  839. 0x5c, 0xca, 0xc5, 0x30, 0xf2, 0x75, 0x1f, 0xda
  840. };
  841. static const unsigned char sha256_returnedbits[] =
  842. {
  843. 0x90, 0x3c, 0xc1, 0x10, 0x8c, 0x12, 0x01, 0xc6, 0xa6, 0x3a, 0x0f, 0x4d,
  844. 0xb6, 0x3a, 0x4f, 0x41, 0x9c, 0x61, 0x75, 0x84, 0xe9, 0x74, 0x75, 0xfd,
  845. 0xfe, 0xf2, 0x1f, 0x43, 0xd8, 0x5e, 0x24, 0xa3
  846. };
  847. /* SHA-384 PR */
  848. static const unsigned char sha384_pr_entropyinput[] =
  849. {
  850. 0x71, 0x9d, 0xb2, 0x5a, 0x71, 0x6d, 0x04, 0xe9, 0x1e, 0xc7, 0x92, 0x24,
  851. 0x6e, 0x12, 0x33, 0xa9, 0x52, 0x64, 0x31, 0xef, 0x71, 0xeb, 0x22, 0x55,
  852. 0x28, 0x97, 0x06, 0x6a, 0xc0, 0x0c, 0xa0, 0x7e
  853. };
  854. static const unsigned char sha384_pr_nonce[] =
  855. {
  856. 0xf5, 0x0d, 0xfa, 0xb0, 0xec, 0x6a, 0x7c, 0xd6, 0xbd, 0x9b, 0x05, 0xfd,
  857. 0x38, 0x3e, 0x2e, 0x56
  858. };
  859. static const unsigned char sha384_pr_personalizationstring[] =
  860. {
  861. 0x74, 0xac, 0x7e, 0x6d, 0xb1, 0xa4, 0xe7, 0x21, 0xd1, 0x1e, 0x6e, 0x96,
  862. 0x6d, 0x4d, 0x53, 0x46, 0x82, 0x96, 0x6e, 0xcf, 0xaa, 0x81, 0x8d, 0x7d,
  863. 0x9e, 0xe1, 0x0f, 0x15, 0xea, 0x41, 0xbf, 0xe3
  864. };
  865. static const unsigned char sha384_pr_additionalinput[] =
  866. {
  867. 0xda, 0x95, 0xd4, 0xd0, 0xb8, 0x11, 0xd3, 0x49, 0x27, 0x5d, 0xa9, 0x39,
  868. 0x68, 0xf3, 0xa8, 0xe9, 0x5d, 0x19, 0x8a, 0x2b, 0x66, 0xe8, 0x69, 0x06,
  869. 0x7c, 0x9e, 0x03, 0xa1, 0x8b, 0x26, 0x2d, 0x6e
  870. };
  871. static const unsigned char sha384_pr_entropyinputpr[] =
  872. {
  873. 0x49, 0xdf, 0x44, 0x00, 0xe4, 0x1c, 0x75, 0x0b, 0x26, 0x5a, 0x59, 0x64,
  874. 0x1f, 0x4e, 0xb1, 0xb2, 0x13, 0xf1, 0x22, 0x4e, 0xb4, 0x6d, 0x9a, 0xcc,
  875. 0xa0, 0x48, 0xe6, 0xcf, 0x1d, 0xd1, 0x92, 0x0d
  876. };
  877. static const unsigned char sha384_pr_int_returnedbits[] =
  878. {
  879. 0xc8, 0x52, 0xae, 0xbf, 0x04, 0x3c, 0x27, 0xb7, 0x78, 0x18, 0xaa, 0x8f,
  880. 0xff, 0xcf, 0xa4, 0xf1, 0xcc, 0xe7, 0x68, 0xfa, 0x22, 0xa2, 0x13, 0x45,
  881. 0xe8, 0xdd, 0x87, 0xe6, 0xf2, 0x6e, 0xdd, 0xc7, 0x52, 0x90, 0x9f, 0x7b,
  882. 0xfa, 0x61, 0x2d, 0x9d, 0x9e, 0xcf, 0x98, 0xac, 0x52, 0x40, 0xce, 0xaf
  883. };
  884. static const unsigned char sha384_pr_additionalinput2[] =
  885. {
  886. 0x61, 0x7c, 0x03, 0x9a, 0x3e, 0x50, 0x57, 0x60, 0xc5, 0x83, 0xc9, 0xb2,
  887. 0xd1, 0x87, 0x85, 0x66, 0x92, 0x5d, 0x84, 0x0e, 0x53, 0xfb, 0x70, 0x03,
  888. 0x72, 0xfd, 0xba, 0xae, 0x9c, 0x8f, 0xf8, 0x18
  889. };
  890. static const unsigned char sha384_pr_entropyinputpr2[] =
  891. {
  892. 0xf8, 0xeb, 0x89, 0xb1, 0x8d, 0x78, 0xbe, 0x21, 0xe0, 0xbb, 0x9d, 0xb7,
  893. 0x95, 0x0e, 0xd9, 0x46, 0x0c, 0x8c, 0xe2, 0x63, 0xb7, 0x9d, 0x67, 0x90,
  894. 0xbd, 0xc7, 0x0b, 0xa5, 0xce, 0xb2, 0x65, 0x81
  895. };
  896. static const unsigned char sha384_pr_returnedbits[] =
  897. {
  898. 0xe6, 0x9f, 0xfe, 0x68, 0xd6, 0xb5, 0x79, 0xf1, 0x06, 0x5f, 0xa3, 0xbb,
  899. 0x23, 0x85, 0xd8, 0xf0, 0x29, 0x5a, 0x68, 0x9e, 0xf5, 0xf4, 0xa6, 0x12,
  900. 0xe0, 0x9a, 0xe2, 0xac, 0x00, 0x1d, 0x98, 0x26, 0xfc, 0x53, 0x95, 0x53,
  901. 0xe4, 0x3e, 0x17, 0xd5, 0x08, 0x0b, 0x70, 0x3d, 0x67, 0x99, 0xac, 0x66
  902. };
  903. /* SHA-384 No PR */
  904. static const unsigned char sha384_entropyinput[] =
  905. {
  906. 0x07, 0x15, 0x27, 0x2a, 0xaf, 0x74, 0x24, 0x37, 0xbc, 0xd5, 0x14, 0x69,
  907. 0xce, 0x11, 0xff, 0xa2, 0x6b, 0xb8, 0x05, 0x67, 0x34, 0xf8, 0xbd, 0x6d,
  908. 0x6a, 0xcc, 0xcd, 0x60, 0xa3, 0x68, 0xca, 0xf4
  909. };
  910. static const unsigned char sha384_nonce[] =
  911. {
  912. 0x70, 0x17, 0xc2, 0x5b, 0x5d, 0x22, 0x0b, 0x06, 0x15, 0x54, 0x78, 0x77,
  913. 0x44, 0xaf, 0x2f, 0x09
  914. };
  915. static const unsigned char sha384_personalizationstring[] =
  916. {
  917. 0x89, 0x39, 0x28, 0xb0, 0x60, 0xeb, 0x3d, 0xdc, 0x55, 0x75, 0x86, 0xeb,
  918. 0xae, 0xa2, 0x8f, 0xbc, 0x1b, 0x75, 0xd4, 0xe1, 0x0f, 0xaa, 0x38, 0xca,
  919. 0x62, 0x8b, 0xcb, 0x2c, 0x26, 0xf6, 0xbc, 0xb1
  920. };
  921. static const unsigned char sha384_additionalinput[] =
  922. {
  923. 0x30, 0x2b, 0x42, 0x35, 0xef, 0xda, 0x40, 0x55, 0x28, 0xc6, 0x95, 0xfb,
  924. 0x54, 0x01, 0x62, 0xd7, 0x87, 0x14, 0x48, 0x6d, 0x90, 0x4c, 0xa9, 0x02,
  925. 0x54, 0x40, 0x22, 0xc8, 0x66, 0xa5, 0x48, 0x48
  926. };
  927. static const unsigned char sha384_int_returnedbits[] =
  928. {
  929. 0x82, 0xc4, 0xa1, 0x9c, 0x21, 0xd2, 0xe7, 0xa5, 0xa6, 0xf6, 0x5f, 0x04,
  930. 0x5c, 0xc7, 0x31, 0x9d, 0x8d, 0x59, 0x74, 0x50, 0x19, 0x89, 0x2f, 0x63,
  931. 0xd5, 0xb7, 0x7e, 0xeb, 0x15, 0xe3, 0x70, 0x83, 0xa1, 0x24, 0x59, 0xfa,
  932. 0x2c, 0x56, 0xf6, 0x88, 0x3a, 0x92, 0x93, 0xa1, 0xfb, 0x79, 0xc1, 0x7a
  933. };
  934. static const unsigned char sha384_entropyinputreseed[] =
  935. {
  936. 0x39, 0xa6, 0xe8, 0x5c, 0x82, 0x17, 0x71, 0x26, 0x57, 0x4f, 0x9f, 0xc2,
  937. 0x55, 0xff, 0x5c, 0x9b, 0x53, 0x1a, 0xd1, 0x5f, 0xbc, 0x62, 0xe4, 0x27,
  938. 0x2d, 0x32, 0xf0, 0xe4, 0x52, 0x8c, 0xc5, 0x0c
  939. };
  940. static const unsigned char sha384_additionalinputreseed[] =
  941. {
  942. 0x8d, 0xcb, 0x8d, 0xce, 0x08, 0xea, 0x80, 0xe8, 0x9b, 0x61, 0xa8, 0x0f,
  943. 0xaf, 0x49, 0x20, 0x9e, 0x74, 0xcb, 0x57, 0x80, 0x42, 0xb0, 0x84, 0x5e,
  944. 0x30, 0x2a, 0x67, 0x08, 0xf4, 0xe3, 0x40, 0x22
  945. };
  946. static const unsigned char sha384_additionalinput2[] =
  947. {
  948. 0x7c, 0x8f, 0xc2, 0xae, 0x22, 0x4a, 0xd6, 0xf6, 0x05, 0xa4, 0x7a, 0xea,
  949. 0xbb, 0x25, 0xd0, 0xb7, 0x5a, 0xd6, 0xcf, 0x9d, 0xf3, 0x6c, 0xe2, 0xb2,
  950. 0x4e, 0xb4, 0xbd, 0xf4, 0xe5, 0x40, 0x80, 0x94
  951. };
  952. static const unsigned char sha384_returnedbits[] =
  953. {
  954. 0x9e, 0x7e, 0xfb, 0x59, 0xbb, 0xaa, 0x3c, 0xf7, 0xe1, 0xf8, 0x76, 0xdd,
  955. 0x63, 0x5f, 0xaf, 0x23, 0xd6, 0x64, 0x61, 0xc0, 0x9a, 0x09, 0x47, 0xc9,
  956. 0x33, 0xdf, 0x6d, 0x55, 0x91, 0x34, 0x79, 0x70, 0xc4, 0x99, 0x6e, 0x54,
  957. 0x09, 0x64, 0x21, 0x1a, 0xbd, 0x1e, 0x80, 0x40, 0x34, 0xad, 0xfa, 0xd7
  958. };
  959. /* SHA-512 PR */
  960. static const unsigned char sha512_pr_entropyinput[] =
  961. {
  962. 0x13, 0xf7, 0x61, 0x75, 0x65, 0x28, 0xa2, 0x59, 0x13, 0x5a, 0x4a, 0x4f,
  963. 0x56, 0x60, 0x8c, 0x53, 0x7d, 0xb0, 0xbd, 0x06, 0x4f, 0xed, 0xcc, 0xd2,
  964. 0xa2, 0xb5, 0xfd, 0x5b, 0x3a, 0xab, 0xec, 0x28
  965. };
  966. static const unsigned char sha512_pr_nonce[] =
  967. {
  968. 0xbe, 0xa3, 0x91, 0x93, 0x1d, 0xc3, 0x31, 0x3a, 0x23, 0x33, 0x50, 0x67,
  969. 0x88, 0xc7, 0xa2, 0xc4
  970. };
  971. static const unsigned char sha512_pr_personalizationstring[] =
  972. {
  973. 0x1f, 0x59, 0x4d, 0x7b, 0xe6, 0x46, 0x91, 0x48, 0xc1, 0x25, 0xfa, 0xff,
  974. 0x89, 0x12, 0x77, 0x35, 0xdf, 0x3e, 0xf4, 0x80, 0x5f, 0xd9, 0xb0, 0x07,
  975. 0x22, 0x41, 0xdd, 0x48, 0x78, 0x6b, 0x77, 0x2b
  976. };
  977. static const unsigned char sha512_pr_additionalinput[] =
  978. {
  979. 0x30, 0xff, 0x63, 0x6f, 0xac, 0xd9, 0x84, 0x39, 0x6f, 0xe4, 0x99, 0xce,
  980. 0x91, 0x7d, 0x7e, 0xc8, 0x58, 0xf2, 0x12, 0xc3, 0xb6, 0xad, 0xda, 0x22,
  981. 0x04, 0xa0, 0xd2, 0x21, 0xfe, 0xf2, 0x95, 0x1d
  982. };
  983. static const unsigned char sha512_pr_entropyinputpr[] =
  984. {
  985. 0x64, 0x54, 0x13, 0xec, 0x4f, 0x77, 0xda, 0xb2, 0x92, 0x2e, 0x52, 0x80,
  986. 0x11, 0x10, 0xc2, 0xf8, 0xe6, 0xa7, 0xcd, 0x4b, 0xfc, 0x32, 0x2e, 0x9e,
  987. 0xeb, 0xbb, 0xb1, 0xbf, 0x15, 0x5c, 0x73, 0x08
  988. };
  989. static const unsigned char sha512_pr_int_returnedbits[] =
  990. {
  991. 0xef, 0x1e, 0xdc, 0x0a, 0xa4, 0x36, 0x91, 0x9c, 0x3d, 0x27, 0x97, 0x50,
  992. 0x8d, 0x36, 0x29, 0x8d, 0xce, 0x6a, 0x0c, 0xf7, 0x21, 0xc0, 0x91, 0xae,
  993. 0x0c, 0x96, 0x72, 0xbd, 0x52, 0x81, 0x58, 0xfc, 0x6d, 0xe5, 0xf7, 0xa5,
  994. 0xfd, 0x5d, 0xa7, 0x58, 0x68, 0xc8, 0x99, 0x58, 0x8e, 0xc8, 0xce, 0x95,
  995. 0x01, 0x7d, 0xff, 0xa4, 0xc8, 0xf7, 0x63, 0xfe, 0x5f, 0x69, 0x83, 0x53,
  996. 0xe2, 0xc6, 0x8b, 0xc3
  997. };
  998. static const unsigned char sha512_pr_additionalinput2[] =
  999. {
  1000. 0xe6, 0x9b, 0xc4, 0x88, 0x34, 0xca, 0xea, 0x29, 0x2f, 0x98, 0x05, 0xa4,
  1001. 0xd3, 0xc0, 0x7b, 0x11, 0xe8, 0xbb, 0x75, 0xf2, 0xbd, 0x29, 0xb7, 0x40,
  1002. 0x25, 0x7f, 0xc1, 0xb7, 0xb1, 0xf1, 0x25, 0x61
  1003. };
  1004. static const unsigned char sha512_pr_entropyinputpr2[] =
  1005. {
  1006. 0x23, 0x6d, 0xff, 0xde, 0xfb, 0xd1, 0xba, 0x33, 0x18, 0xe6, 0xbe, 0xb5,
  1007. 0x48, 0x77, 0x6d, 0x7f, 0xa7, 0xe1, 0x4d, 0x48, 0x1e, 0x3c, 0xa7, 0x34,
  1008. 0x1a, 0xc8, 0x60, 0xdb, 0x8f, 0x99, 0x15, 0x99
  1009. };
  1010. static const unsigned char sha512_pr_returnedbits[] =
  1011. {
  1012. 0x70, 0x27, 0x31, 0xdb, 0x92, 0x70, 0x21, 0xfe, 0x16, 0xb6, 0xc8, 0x51,
  1013. 0x34, 0x87, 0x65, 0xd0, 0x4e, 0xfd, 0xfe, 0x68, 0xec, 0xac, 0xdc, 0x93,
  1014. 0x41, 0x38, 0x92, 0x90, 0xb4, 0x94, 0xf9, 0x0d, 0xa4, 0xf7, 0x4e, 0x80,
  1015. 0x92, 0x67, 0x48, 0x40, 0xa7, 0x08, 0xc7, 0xbc, 0x66, 0x00, 0xfd, 0xf7,
  1016. 0x4c, 0x8b, 0x17, 0x6e, 0xd1, 0x8f, 0x9b, 0xf3, 0x6f, 0xf6, 0x34, 0xdd,
  1017. 0x67, 0xf7, 0x68, 0xdd
  1018. };
  1019. /* SHA-512 No PR */
  1020. static const unsigned char sha512_entropyinput[] =
  1021. {
  1022. 0xb6, 0x0b, 0xb7, 0xbc, 0x84, 0x56, 0xf6, 0x12, 0xaf, 0x45, 0x67, 0x17,
  1023. 0x7c, 0xd1, 0xb2, 0x78, 0x2b, 0xa0, 0xf2, 0xbe, 0xb6, 0x6d, 0x8b, 0x56,
  1024. 0xc6, 0xbc, 0x4d, 0xe1, 0xf7, 0xbe, 0xce, 0xbd
  1025. };
  1026. static const unsigned char sha512_nonce[] =
  1027. {
  1028. 0x9d, 0xed, 0xc0, 0xe5, 0x5a, 0x98, 0x6a, 0xcb, 0x51, 0x7d, 0x76, 0x31,
  1029. 0x5a, 0x64, 0xf0, 0xf7
  1030. };
  1031. static const unsigned char sha512_personalizationstring[] =
  1032. {
  1033. 0xc2, 0x6d, 0xa3, 0xc3, 0x06, 0x74, 0xe5, 0x01, 0x5c, 0x10, 0x17, 0xc7,
  1034. 0xaf, 0x83, 0x9d, 0x59, 0x8d, 0x2d, 0x29, 0x38, 0xc5, 0x59, 0x70, 0x8b,
  1035. 0x46, 0x48, 0x2d, 0xcf, 0x36, 0x7d, 0x59, 0xc0
  1036. };
  1037. static const unsigned char sha512_additionalinput[] =
  1038. {
  1039. 0xec, 0x8c, 0xd4, 0xf7, 0x61, 0x6e, 0x0d, 0x95, 0x79, 0xb7, 0x28, 0xad,
  1040. 0x5f, 0x69, 0x74, 0x5f, 0x2d, 0x36, 0x06, 0x8a, 0x6b, 0xac, 0x54, 0x97,
  1041. 0xc4, 0xa1, 0x12, 0x85, 0x0a, 0xdf, 0x4b, 0x34
  1042. };
  1043. static const unsigned char sha512_int_returnedbits[] =
  1044. {
  1045. 0x84, 0x2f, 0x1f, 0x68, 0x6a, 0xa3, 0xad, 0x1e, 0xfb, 0xf4, 0x15, 0xbd,
  1046. 0xde, 0x38, 0xd4, 0x30, 0x80, 0x51, 0xe9, 0xd3, 0xc7, 0x20, 0x88, 0xe9,
  1047. 0xf5, 0xcc, 0xdf, 0x57, 0x5c, 0x47, 0x2f, 0x57, 0x3c, 0x5f, 0x13, 0x56,
  1048. 0xcc, 0xc5, 0x4f, 0x84, 0xf8, 0x10, 0x41, 0xd5, 0x7e, 0x58, 0x6e, 0x19,
  1049. 0x19, 0x9e, 0xaf, 0xc2, 0x22, 0x58, 0x41, 0x50, 0x79, 0xc2, 0xd8, 0x04,
  1050. 0x28, 0xd4, 0x39, 0x9a
  1051. };
  1052. static const unsigned char sha512_entropyinputreseed[] =
  1053. {
  1054. 0xfa, 0x7f, 0x46, 0x51, 0x83, 0x62, 0x98, 0x16, 0x9a, 0x19, 0xa2, 0x49,
  1055. 0xa9, 0xe6, 0x4a, 0xd8, 0x85, 0xe7, 0xd4, 0x3b, 0x2c, 0x82, 0xc5, 0x82,
  1056. 0xbf, 0x11, 0xf9, 0x9e, 0xbc, 0xd0, 0x01, 0xee
  1057. };
  1058. static const unsigned char sha512_additionalinputreseed[] =
  1059. {
  1060. 0xb9, 0x12, 0xe0, 0x4f, 0xf7, 0xa7, 0xc4, 0xd8, 0xd0, 0x8e, 0x99, 0x29,
  1061. 0x7c, 0x9a, 0xe9, 0xcf, 0xc4, 0x6c, 0xf8, 0xc3, 0xa7, 0x41, 0x83, 0xd6,
  1062. 0x2e, 0xfa, 0xb8, 0x5e, 0x8e, 0x6b, 0x78, 0x20
  1063. };
  1064. static const unsigned char sha512_additionalinput2[] =
  1065. {
  1066. 0xd7, 0x07, 0x52, 0xb9, 0x83, 0x2c, 0x03, 0x71, 0xee, 0xc9, 0xc0, 0x85,
  1067. 0xe1, 0x57, 0xb2, 0xcd, 0x3a, 0xf0, 0xc9, 0x34, 0x24, 0x41, 0x1c, 0x42,
  1068. 0x99, 0xb2, 0x84, 0xe9, 0x17, 0xd2, 0x76, 0x92
  1069. };
  1070. static const unsigned char sha512_returnedbits[] =
  1071. {
  1072. 0x36, 0x17, 0x5d, 0x98, 0x2b, 0x65, 0x25, 0x8e, 0xc8, 0x29, 0xdf, 0x27,
  1073. 0x05, 0x36, 0x26, 0x12, 0x8a, 0x68, 0x74, 0x27, 0x37, 0xd4, 0x7f, 0x32,
  1074. 0xb1, 0x12, 0xd6, 0x85, 0x83, 0xeb, 0x2e, 0xa0, 0xed, 0x4b, 0xb5, 0x7b,
  1075. 0x6f, 0x39, 0x3c, 0x71, 0x77, 0x02, 0x12, 0xcc, 0x2c, 0x3a, 0x8e, 0x63,
  1076. 0xdf, 0x4a, 0xbd, 0x6f, 0x6e, 0x2e, 0xed, 0x0a, 0x85, 0xa5, 0x2f, 0xa2,
  1077. 0x68, 0xde, 0x42, 0xb5
  1078. };
  1079. /* HMAC SHA-1 PR */
  1080. static const unsigned char hmac_sha1_pr_entropyinput[] =
  1081. {
  1082. 0x26, 0x5f, 0x36, 0x14, 0xff, 0x3d, 0x83, 0xfa, 0x73, 0x5e, 0x75, 0xdc,
  1083. 0x2c, 0x18, 0x17, 0x1b
  1084. };
  1085. static const unsigned char hmac_sha1_pr_nonce[] =
  1086. {
  1087. 0xc8, 0xe3, 0x57, 0xa5, 0x7b, 0x74, 0x86, 0x6e
  1088. };
  1089. static const unsigned char hmac_sha1_pr_personalizationstring[] =
  1090. {
  1091. 0x6e, 0xdb, 0x0d, 0xfe, 0x7d, 0xac, 0x79, 0xd0, 0xa5, 0x3a, 0x48, 0x85,
  1092. 0x80, 0xe2, 0x7f, 0x2a
  1093. };
  1094. static const unsigned char hmac_sha1_pr_additionalinput[] =
  1095. {
  1096. 0x31, 0xcd, 0x5e, 0x43, 0xdc, 0xfb, 0x7a, 0x79, 0xca, 0x88, 0xde, 0x1f,
  1097. 0xd7, 0xbb, 0x42, 0x09
  1098. };
  1099. static const unsigned char hmac_sha1_pr_entropyinputpr[] =
  1100. {
  1101. 0x7c, 0x23, 0x95, 0x38, 0x00, 0x95, 0xc1, 0x78, 0x1f, 0x8f, 0xd7, 0x63,
  1102. 0x23, 0x87, 0x2a, 0xed
  1103. };
  1104. static const unsigned char hmac_sha1_pr_int_returnedbits[] =
  1105. {
  1106. 0xbb, 0x34, 0xe7, 0x93, 0xa3, 0x02, 0x2c, 0x4a, 0xd0, 0x89, 0xda, 0x7f,
  1107. 0xed, 0xf4, 0x4c, 0xde, 0x17, 0xec, 0xe5, 0x6c
  1108. };
  1109. static const unsigned char hmac_sha1_pr_additionalinput2[] =
  1110. {
  1111. 0x49, 0xbc, 0x2d, 0x2c, 0xb7, 0x32, 0xcb, 0x20, 0xdf, 0xf5, 0x77, 0x58,
  1112. 0xa0, 0x4b, 0x93, 0x6e
  1113. };
  1114. static const unsigned char hmac_sha1_pr_entropyinputpr2[] =
  1115. {
  1116. 0x3c, 0xaa, 0xb0, 0x21, 0x42, 0xb0, 0xdd, 0x34, 0xf0, 0x16, 0x7f, 0x0c,
  1117. 0x0f, 0xff, 0x2e, 0xaf
  1118. };
  1119. static const unsigned char hmac_sha1_pr_returnedbits[] =
  1120. {
  1121. 0x8e, 0xcb, 0xa3, 0x64, 0xb2, 0xb8, 0x33, 0x6c, 0x64, 0x3b, 0x78, 0x16,
  1122. 0x99, 0x35, 0xc8, 0x30, 0xcb, 0x3e, 0xa0, 0xd8
  1123. };
  1124. /* HMAC SHA-1 No PR */
  1125. static const unsigned char hmac_sha1_entropyinput[] =
  1126. {
  1127. 0x32, 0x9a, 0x2a, 0x87, 0x7b, 0x89, 0x7c, 0xf6, 0xcb, 0x95, 0xd5, 0x40,
  1128. 0x17, 0xfe, 0x47, 0x70
  1129. };
  1130. static const unsigned char hmac_sha1_nonce[] =
  1131. {
  1132. 0x16, 0xd8, 0xe0, 0xc7, 0x52, 0xcf, 0x4a, 0x25
  1133. };
  1134. static const unsigned char hmac_sha1_personalizationstring[] =
  1135. {
  1136. 0x35, 0x35, 0xa9, 0xa5, 0x40, 0xbe, 0x9b, 0xd1, 0x56, 0xdd, 0x44, 0x00,
  1137. 0x72, 0xf7, 0xd3, 0x5e
  1138. };
  1139. static const unsigned char hmac_sha1_additionalinput[] =
  1140. {
  1141. 0x1b, 0x2c, 0x84, 0x2d, 0x4a, 0x89, 0x8f, 0x69, 0x19, 0xf1, 0xf3, 0xdb,
  1142. 0xbb, 0xe3, 0xaa, 0xea
  1143. };
  1144. static const unsigned char hmac_sha1_int_returnedbits[] =
  1145. {
  1146. 0xcf, 0xfa, 0x7d, 0x72, 0x0f, 0xe6, 0xc7, 0x96, 0xa0, 0x69, 0x31, 0x11,
  1147. 0x9b, 0x0b, 0x1a, 0x20, 0x1f, 0x3f, 0xaa, 0xd1
  1148. };
  1149. static const unsigned char hmac_sha1_entropyinputreseed[] =
  1150. {
  1151. 0x90, 0x75, 0x15, 0x04, 0x95, 0xf1, 0xba, 0x81, 0x0c, 0x37, 0x94, 0x6f,
  1152. 0x86, 0x52, 0x6d, 0x9c
  1153. };
  1154. static const unsigned char hmac_sha1_additionalinputreseed[] =
  1155. {
  1156. 0x5b, 0x40, 0xba, 0x5f, 0x17, 0x70, 0xf0, 0x4b, 0xdf, 0xc9, 0x97, 0x92,
  1157. 0x79, 0xc5, 0x82, 0x28
  1158. };
  1159. static const unsigned char hmac_sha1_additionalinput2[] =
  1160. {
  1161. 0x97, 0xc8, 0x80, 0x90, 0xb3, 0xaa, 0x6e, 0x60, 0xea, 0x83, 0x7a, 0xe3,
  1162. 0x8a, 0xca, 0xa4, 0x7f
  1163. };
  1164. static const unsigned char hmac_sha1_returnedbits[] =
  1165. {
  1166. 0x90, 0xbd, 0x05, 0x56, 0x6d, 0xb5, 0x22, 0xd5, 0xb9, 0x5a, 0x29, 0x2d,
  1167. 0xe9, 0x0b, 0xe1, 0xac, 0xde, 0x27, 0x0b, 0xb0
  1168. };
  1169. /* HMAC SHA-224 PR */
  1170. static const unsigned char hmac_sha224_pr_entropyinput[] =
  1171. {
  1172. 0x17, 0x32, 0x2b, 0x2e, 0x6f, 0x1b, 0x9c, 0x6d, 0x31, 0xe0, 0x34, 0x07,
  1173. 0xcf, 0xed, 0xf6, 0xb6, 0x5a, 0x76, 0x4c, 0xbc, 0x62, 0x85, 0x01, 0x90
  1174. };
  1175. static const unsigned char hmac_sha224_pr_nonce[] =
  1176. {
  1177. 0x38, 0xbf, 0x5f, 0x20, 0xb3, 0x68, 0x2f, 0x43, 0x61, 0x05, 0x8f, 0x23
  1178. };
  1179. static const unsigned char hmac_sha224_pr_personalizationstring[] =
  1180. {
  1181. 0xc0, 0xc9, 0x45, 0xac, 0x8d, 0x27, 0x77, 0x08, 0x0b, 0x17, 0x6d, 0xed,
  1182. 0xc1, 0x7d, 0xd5, 0x07, 0x9d, 0x6e, 0xf8, 0x23, 0x2a, 0x22, 0x13, 0xbd
  1183. };
  1184. static const unsigned char hmac_sha224_pr_additionalinput[] =
  1185. {
  1186. 0xa4, 0x3c, 0xe7, 0x3b, 0xea, 0x19, 0x45, 0x32, 0xc2, 0x83, 0x6d, 0x21,
  1187. 0x8a, 0xc0, 0xee, 0x67, 0x45, 0xde, 0x13, 0x7d, 0x9d, 0x61, 0x00, 0x3b
  1188. };
  1189. static const unsigned char hmac_sha224_pr_entropyinputpr[] =
  1190. {
  1191. 0x15, 0x05, 0x74, 0x4a, 0x7f, 0x8d, 0x5c, 0x60, 0x16, 0xe5, 0x7b, 0xad,
  1192. 0xf5, 0x41, 0x8f, 0x55, 0x60, 0xc4, 0x09, 0xee, 0x1e, 0x11, 0x81, 0xab
  1193. };
  1194. static const unsigned char hmac_sha224_pr_int_returnedbits[] =
  1195. {
  1196. 0x6f, 0xf5, 0x9a, 0xe2, 0x54, 0x53, 0x30, 0x3d, 0x5a, 0x27, 0x29, 0x38,
  1197. 0x27, 0xf2, 0x0d, 0x05, 0xe9, 0x26, 0xcb, 0x16, 0xc3, 0x51, 0x5f, 0x13,
  1198. 0x41, 0xfe, 0x99, 0xf2
  1199. };
  1200. static const unsigned char hmac_sha224_pr_additionalinput2[] =
  1201. {
  1202. 0x73, 0x81, 0x88, 0x84, 0x8f, 0xed, 0x6f, 0x10, 0x9f, 0x93, 0xbf, 0x17,
  1203. 0x35, 0x7c, 0xef, 0xd5, 0x8d, 0x26, 0xa6, 0x7a, 0xe8, 0x09, 0x36, 0x4f
  1204. };
  1205. static const unsigned char hmac_sha224_pr_entropyinputpr2[] =
  1206. {
  1207. 0xe6, 0xcf, 0xcf, 0x7e, 0x12, 0xe5, 0x43, 0xd2, 0x38, 0xd8, 0x24, 0x6f,
  1208. 0x5a, 0x37, 0x68, 0xbf, 0x4f, 0xa0, 0xff, 0xd5, 0x61, 0x8a, 0x93, 0xe0
  1209. };
  1210. static const unsigned char hmac_sha224_pr_returnedbits[] =
  1211. {
  1212. 0xaf, 0xf9, 0xd8, 0x19, 0x91, 0x30, 0x82, 0x6f, 0xa9, 0x1e, 0x9d, 0xd7,
  1213. 0xf3, 0x50, 0xe0, 0xc7, 0xd5, 0x64, 0x96, 0x7d, 0x4c, 0x4d, 0x78, 0x03,
  1214. 0x6d, 0xd8, 0x9e, 0x72
  1215. };
  1216. /* HMAC SHA-224 No PR */
  1217. static const unsigned char hmac_sha224_entropyinput[] =
  1218. {
  1219. 0x11, 0x82, 0xfd, 0xd9, 0x42, 0xf4, 0xfa, 0xc8, 0xf2, 0x41, 0xe6, 0x54,
  1220. 0x01, 0xae, 0x22, 0x6e, 0xc6, 0xaf, 0xaf, 0xd0, 0xa6, 0xb2, 0xe2, 0x6d
  1221. };
  1222. static const unsigned char hmac_sha224_nonce[] =
  1223. {
  1224. 0xa9, 0x48, 0xd7, 0x92, 0x39, 0x7e, 0x2a, 0xdc, 0x30, 0x1f, 0x0e, 0x2b
  1225. };
  1226. static const unsigned char hmac_sha224_personalizationstring[] =
  1227. {
  1228. 0x11, 0xd5, 0xf4, 0xbd, 0x67, 0x8c, 0x31, 0xcf, 0xa3, 0x3f, 0x1e, 0x6b,
  1229. 0xa8, 0x07, 0x02, 0x0b, 0xc8, 0x2e, 0x6c, 0x64, 0x41, 0x5b, 0xc8, 0x37
  1230. };
  1231. static const unsigned char hmac_sha224_additionalinput[] =
  1232. {
  1233. 0x68, 0x18, 0xc2, 0x06, 0xeb, 0x3e, 0x04, 0x95, 0x44, 0x5e, 0xfb, 0xe6,
  1234. 0x41, 0xc1, 0x5c, 0xcc, 0x40, 0x2f, 0xb7, 0xd2, 0x0f, 0xf3, 0x6b, 0xe7
  1235. };
  1236. static const unsigned char hmac_sha224_int_returnedbits[] =
  1237. {
  1238. 0x7f, 0x45, 0xc7, 0x5d, 0x32, 0xe6, 0x17, 0x60, 0xba, 0xdc, 0xb8, 0x42,
  1239. 0x1b, 0x9c, 0xf1, 0xfa, 0x3b, 0x4d, 0x29, 0x54, 0xc6, 0x90, 0xff, 0x5c,
  1240. 0xcd, 0xd6, 0xa9, 0xcc
  1241. };
  1242. static const unsigned char hmac_sha224_entropyinputreseed[] =
  1243. {
  1244. 0xc4, 0x8e, 0x37, 0x95, 0x69, 0x53, 0x28, 0xd7, 0x37, 0xbb, 0x70, 0x95,
  1245. 0x1c, 0x07, 0x1d, 0xd9, 0xb7, 0xe6, 0x1b, 0xbb, 0xfe, 0x41, 0xeb, 0xc9
  1246. };
  1247. static const unsigned char hmac_sha224_additionalinputreseed[] =
  1248. {
  1249. 0x53, 0x17, 0xa1, 0x6a, 0xfa, 0x77, 0x47, 0xb0, 0x95, 0x56, 0x9a, 0x20,
  1250. 0x57, 0xde, 0x5c, 0x89, 0x9f, 0x7f, 0xe2, 0xde, 0x17, 0x3a, 0x50, 0x23
  1251. };
  1252. static const unsigned char hmac_sha224_additionalinput2[] =
  1253. {
  1254. 0x3a, 0x32, 0xf9, 0x85, 0x0c, 0xc1, 0xed, 0x76, 0x2d, 0xdf, 0x40, 0xc3,
  1255. 0x06, 0x22, 0x66, 0xd4, 0x9a, 0x9a, 0xff, 0x5a, 0x7e, 0x7a, 0xf3, 0x96
  1256. };
  1257. static const unsigned char hmac_sha224_returnedbits[] =
  1258. {
  1259. 0x43, 0xb4, 0x57, 0x5c, 0x38, 0x25, 0x9d, 0xae, 0xec, 0x96, 0xd1, 0x85,
  1260. 0x3a, 0x84, 0x8d, 0xfe, 0x68, 0xd5, 0x0e, 0x5c, 0x8f, 0x65, 0xa5, 0x4e,
  1261. 0x45, 0x84, 0xa8, 0x94
  1262. };
  1263. /* HMAC SHA-256 PR */
  1264. static const unsigned char hmac_sha256_pr_entropyinput[] =
  1265. {
  1266. 0x4d, 0xb0, 0x43, 0xd8, 0x34, 0x4b, 0x10, 0x70, 0xb1, 0x8b, 0xed, 0xea,
  1267. 0x07, 0x92, 0x9f, 0x6c, 0x79, 0x31, 0xaf, 0x81, 0x29, 0xeb, 0x6e, 0xca,
  1268. 0x32, 0x48, 0x28, 0xe7, 0x02, 0x5d, 0xa6, 0xa6
  1269. };
  1270. static const unsigned char hmac_sha256_pr_nonce[] =
  1271. {
  1272. 0x3a, 0xae, 0x15, 0xa9, 0x99, 0xdc, 0xe4, 0x67, 0x34, 0x3b, 0x70, 0x15,
  1273. 0xaa, 0xd3, 0x30, 0x9a
  1274. };
  1275. static const unsigned char hmac_sha256_pr_personalizationstring[] =
  1276. {
  1277. 0x13, 0x1d, 0x24, 0x04, 0xb0, 0x18, 0x81, 0x15, 0x21, 0x51, 0x2a, 0x24,
  1278. 0x52, 0x61, 0xbe, 0x64, 0x82, 0x6b, 0x55, 0x2f, 0xe2, 0xf1, 0x40, 0x7d,
  1279. 0x71, 0xd8, 0x01, 0x86, 0x15, 0xb7, 0x8b, 0xb5
  1280. };
  1281. static const unsigned char hmac_sha256_pr_additionalinput[] =
  1282. {
  1283. 0x8f, 0xa6, 0x54, 0x5f, 0xb1, 0xd0, 0xd8, 0xc3, 0xe7, 0x0c, 0x15, 0xa9,
  1284. 0x23, 0x6e, 0xfe, 0xfb, 0x93, 0xf7, 0x3a, 0xbd, 0x59, 0x01, 0xfa, 0x18,
  1285. 0x8e, 0xe9, 0x1a, 0xa9, 0x78, 0xfc, 0x79, 0x0b
  1286. };
  1287. static const unsigned char hmac_sha256_pr_entropyinputpr[] =
  1288. {
  1289. 0xcf, 0x24, 0xb9, 0xeb, 0xb3, 0xd4, 0xcd, 0x17, 0x37, 0x38, 0x75, 0x79,
  1290. 0x15, 0xcb, 0x2d, 0x75, 0x51, 0xf1, 0xcc, 0xaa, 0x32, 0xa4, 0xa7, 0x36,
  1291. 0x7c, 0x5c, 0xe4, 0x47, 0xf1, 0x3e, 0x1d, 0xe5
  1292. };
  1293. static const unsigned char hmac_sha256_pr_int_returnedbits[] =
  1294. {
  1295. 0x52, 0x42, 0xfa, 0xeb, 0x85, 0xe0, 0x30, 0x22, 0x79, 0x00, 0x16, 0xb2,
  1296. 0x88, 0x2f, 0x14, 0x6a, 0xb7, 0xfc, 0xb7, 0x53, 0xdc, 0x4a, 0x12, 0xef,
  1297. 0x54, 0xd6, 0x33, 0xe9, 0x20, 0xd6, 0xfd, 0x56
  1298. };
  1299. static const unsigned char hmac_sha256_pr_additionalinput2[] =
  1300. {
  1301. 0xf4, 0xf6, 0x49, 0xa1, 0x2d, 0x64, 0x2b, 0x30, 0x58, 0xf8, 0xbd, 0xb8,
  1302. 0x75, 0xeb, 0xbb, 0x5e, 0x1c, 0x9b, 0x81, 0x6a, 0xda, 0x14, 0x86, 0x6e,
  1303. 0xd0, 0xda, 0x18, 0xb7, 0x88, 0xfb, 0x59, 0xf3
  1304. };
  1305. static const unsigned char hmac_sha256_pr_entropyinputpr2[] =
  1306. {
  1307. 0x21, 0xcd, 0x6e, 0x46, 0xad, 0x99, 0x07, 0x17, 0xb4, 0x3d, 0x76, 0x0a,
  1308. 0xff, 0x5b, 0x52, 0x50, 0x78, 0xdf, 0x1f, 0x24, 0x06, 0x0d, 0x3f, 0x74,
  1309. 0xa9, 0xc9, 0x37, 0xcf, 0xd8, 0x26, 0x25, 0x91
  1310. };
  1311. static const unsigned char hmac_sha256_pr_returnedbits[] =
  1312. {
  1313. 0xa7, 0xaf, 0x2f, 0x29, 0xe0, 0x3a, 0x72, 0x95, 0x96, 0x1c, 0xa9, 0xf0,
  1314. 0x4a, 0x17, 0x4d, 0x66, 0x06, 0x10, 0xbf, 0x39, 0x89, 0x88, 0xb8, 0x91,
  1315. 0x37, 0x18, 0x99, 0xcf, 0x8c, 0x53, 0x3b, 0x7e
  1316. };
  1317. /* HMAC SHA-256 No PR */
  1318. static const unsigned char hmac_sha256_entropyinput[] =
  1319. {
  1320. 0x96, 0xb7, 0x53, 0x22, 0x1e, 0x52, 0x2a, 0x96, 0xb1, 0x15, 0x3c, 0x35,
  1321. 0x5a, 0x8b, 0xd3, 0x4a, 0xa6, 0x6c, 0x83, 0x0a, 0x7d, 0xa3, 0x23, 0x3d,
  1322. 0x43, 0xa1, 0x07, 0x2c, 0x2d, 0xe3, 0x81, 0xcc
  1323. };
  1324. static const unsigned char hmac_sha256_nonce[] =
  1325. {
  1326. 0xf1, 0xac, 0x97, 0xcb, 0x5e, 0x06, 0x48, 0xd2, 0x94, 0xbe, 0x15, 0x2e,
  1327. 0xc7, 0xfc, 0xc2, 0x01
  1328. };
  1329. static const unsigned char hmac_sha256_personalizationstring[] =
  1330. {
  1331. 0x98, 0xc5, 0x1e, 0x35, 0x5e, 0x89, 0x0d, 0xce, 0x64, 0x6d, 0x18, 0xa7,
  1332. 0x5a, 0xc6, 0xf3, 0xe7, 0xd6, 0x9e, 0xc0, 0xea, 0xb7, 0x3a, 0x8d, 0x65,
  1333. 0xb8, 0xeb, 0x10, 0xd7, 0x57, 0x18, 0xa0, 0x32
  1334. };
  1335. static const unsigned char hmac_sha256_additionalinput[] =
  1336. {
  1337. 0x1b, 0x10, 0xaf, 0xac, 0xd0, 0x65, 0x95, 0xad, 0x04, 0xad, 0x03, 0x1c,
  1338. 0xe0, 0x40, 0xd6, 0x3e, 0x1c, 0x46, 0x53, 0x39, 0x7c, 0xe2, 0xbc, 0xda,
  1339. 0x8c, 0xa2, 0x33, 0xa7, 0x9a, 0x26, 0xd3, 0x27
  1340. };
  1341. static const unsigned char hmac_sha256_int_returnedbits[] =
  1342. {
  1343. 0xba, 0x61, 0x0e, 0x55, 0xfe, 0x11, 0x8a, 0x9e, 0x0f, 0x80, 0xdf, 0x1d,
  1344. 0x03, 0x0a, 0xfe, 0x15, 0x94, 0x28, 0x4b, 0xba, 0xf4, 0x9f, 0x51, 0x25,
  1345. 0x88, 0xe5, 0x4e, 0xfb, 0xaf, 0xce, 0x69, 0x90
  1346. };
  1347. static const unsigned char hmac_sha256_entropyinputreseed[] =
  1348. {
  1349. 0x62, 0x7f, 0x1e, 0x6b, 0xe8, 0x8e, 0xe1, 0x35, 0x7d, 0x9b, 0x4f, 0xc7,
  1350. 0xec, 0xc8, 0xac, 0xef, 0x6b, 0x13, 0x9e, 0x05, 0x56, 0xc1, 0x08, 0xf9,
  1351. 0x2f, 0x0f, 0x27, 0x9c, 0xd4, 0x15, 0xed, 0x2d
  1352. };
  1353. static const unsigned char hmac_sha256_additionalinputreseed[] =
  1354. {
  1355. 0xc7, 0x76, 0x6e, 0xa9, 0xd2, 0xb2, 0x76, 0x40, 0x82, 0x25, 0x2c, 0xb3,
  1356. 0x6f, 0xac, 0xe9, 0x74, 0xef, 0x8f, 0x3c, 0x8e, 0xcd, 0xf1, 0xbf, 0xb3,
  1357. 0x49, 0x77, 0x34, 0x88, 0x52, 0x36, 0xe6, 0x2e
  1358. };
  1359. static const unsigned char hmac_sha256_additionalinput2[] =
  1360. {
  1361. 0x8d, 0xb8, 0x0c, 0xd1, 0xbf, 0x70, 0xf6, 0x19, 0xc3, 0x41, 0x80, 0x9f,
  1362. 0xe1, 0xa5, 0xa4, 0x1f, 0x2c, 0x26, 0xb1, 0xe5, 0xd8, 0xeb, 0xbe, 0xf8,
  1363. 0xdf, 0x88, 0x6a, 0x89, 0xd6, 0x05, 0xd8, 0x9d
  1364. };
  1365. static const unsigned char hmac_sha256_returnedbits[] =
  1366. {
  1367. 0x43, 0x12, 0x2a, 0x2c, 0x40, 0x53, 0x2e, 0x7c, 0x66, 0x34, 0xac, 0xc3,
  1368. 0x43, 0xe3, 0xe0, 0x6a, 0xfc, 0xfa, 0xea, 0x87, 0x21, 0x1f, 0xe2, 0x26,
  1369. 0xc4, 0xf9, 0x09, 0x9a, 0x0d, 0x6e, 0x7f, 0xe0
  1370. };
  1371. /* HMAC SHA-384 PR */
  1372. static const unsigned char hmac_sha384_pr_entropyinput[] =
  1373. {
  1374. 0x69, 0x81, 0x98, 0x88, 0x44, 0xf5, 0xd6, 0x2e, 0x00, 0x08, 0x3b, 0xc5,
  1375. 0xfb, 0xd7, 0x8e, 0x6f, 0x23, 0xf8, 0x6d, 0x09, 0xd6, 0x85, 0x49, 0xd1,
  1376. 0xf8, 0x6d, 0xa4, 0x58, 0x54, 0xfd, 0x88, 0xa9
  1377. };
  1378. static const unsigned char hmac_sha384_pr_nonce[] =
  1379. {
  1380. 0x6e, 0x38, 0x81, 0xca, 0xb7, 0xe8, 0x6e, 0x66, 0x49, 0x8a, 0xb2, 0x59,
  1381. 0xee, 0x16, 0xc9, 0xde
  1382. };
  1383. static const unsigned char hmac_sha384_pr_personalizationstring[] =
  1384. {
  1385. 0xfe, 0x4c, 0xd9, 0xf4, 0x78, 0x3b, 0x08, 0x41, 0x8d, 0x8f, 0x55, 0xc4,
  1386. 0x43, 0x56, 0xb6, 0x12, 0x36, 0x6b, 0x30, 0xb7, 0x5e, 0xe1, 0xb9, 0x47,
  1387. 0x04, 0xb1, 0x4e, 0xa9, 0x00, 0xa1, 0x52, 0xa1
  1388. };
  1389. static const unsigned char hmac_sha384_pr_additionalinput[] =
  1390. {
  1391. 0x89, 0xe9, 0xcc, 0x8f, 0x27, 0x3c, 0x26, 0xd1, 0x95, 0xc8, 0x7d, 0x0f,
  1392. 0x5b, 0x1a, 0xf0, 0x78, 0x39, 0x56, 0x6f, 0xa4, 0x23, 0xe7, 0xd1, 0xda,
  1393. 0x7c, 0x66, 0x33, 0xa0, 0x90, 0xc9, 0x92, 0x88
  1394. };
  1395. static const unsigned char hmac_sha384_pr_entropyinputpr[] =
  1396. {
  1397. 0xbe, 0x3d, 0x7c, 0x0d, 0xca, 0xda, 0x7c, 0x49, 0xb8, 0x12, 0x36, 0xc0,
  1398. 0xdb, 0xad, 0x35, 0xa8, 0xc7, 0x0b, 0x2a, 0x2c, 0x69, 0x6d, 0x25, 0x56,
  1399. 0x63, 0x82, 0x11, 0x3e, 0xa7, 0x33, 0x70, 0x72
  1400. };
  1401. static const unsigned char hmac_sha384_pr_int_returnedbits[] =
  1402. {
  1403. 0x82, 0x3d, 0xe6, 0x54, 0x80, 0x42, 0xf8, 0xba, 0x90, 0x4f, 0x06, 0xa6,
  1404. 0xd2, 0x7f, 0xbf, 0x79, 0x7c, 0x12, 0x7d, 0xa6, 0xa2, 0x66, 0xe8, 0xa6,
  1405. 0xc0, 0xd6, 0x4a, 0x55, 0xbf, 0xd8, 0x0a, 0xc5, 0xf8, 0x03, 0x88, 0xdd,
  1406. 0x8e, 0x87, 0xd1, 0x5a, 0x48, 0x26, 0x72, 0x2a, 0x8e, 0xcf, 0xee, 0xba
  1407. };
  1408. static const unsigned char hmac_sha384_pr_additionalinput2[] =
  1409. {
  1410. 0x8f, 0xff, 0xd9, 0x84, 0xbb, 0x85, 0x3a, 0x66, 0xa1, 0x21, 0xce, 0xb2,
  1411. 0x3a, 0x3a, 0x17, 0x22, 0x19, 0xae, 0xc7, 0xb6, 0x63, 0x81, 0xd5, 0xff,
  1412. 0x0d, 0xc8, 0xe1, 0xaf, 0x57, 0xd2, 0xcb, 0x60
  1413. };
  1414. static const unsigned char hmac_sha384_pr_entropyinputpr2[] =
  1415. {
  1416. 0xd7, 0xfb, 0xc9, 0xe8, 0xe2, 0xf2, 0xaa, 0x4c, 0xb8, 0x51, 0x2f, 0xe1,
  1417. 0x22, 0xba, 0xf3, 0xda, 0x0a, 0x19, 0x76, 0x71, 0x57, 0xb2, 0x1d, 0x94,
  1418. 0x09, 0x69, 0x6c, 0xd3, 0x97, 0x51, 0x81, 0x87
  1419. };
  1420. static const unsigned char hmac_sha384_pr_returnedbits[] =
  1421. {
  1422. 0xe6, 0x19, 0x28, 0xa8, 0x21, 0xce, 0x5e, 0xdb, 0x24, 0x79, 0x8c, 0x76,
  1423. 0x5d, 0x73, 0xb2, 0xdf, 0xac, 0xef, 0x85, 0xa7, 0x3b, 0x19, 0x09, 0x8b,
  1424. 0x7f, 0x98, 0x28, 0xa9, 0x93, 0xd8, 0x7a, 0xad, 0x55, 0x8b, 0x24, 0x9d,
  1425. 0xe6, 0x98, 0xfe, 0x47, 0xd5, 0x48, 0xc1, 0x23, 0xd8, 0x1d, 0x62, 0x75
  1426. };
  1427. /* HMAC SHA-384 No PR */
  1428. static const unsigned char hmac_sha384_entropyinput[] =
  1429. {
  1430. 0xc3, 0x56, 0x2b, 0x1d, 0xc2, 0xbb, 0xa8, 0xf0, 0xae, 0x1b, 0x0d, 0xd3,
  1431. 0x5a, 0x6c, 0xda, 0x57, 0x8e, 0xa5, 0x8a, 0x0d, 0x6c, 0x4b, 0x18, 0xb1,
  1432. 0x04, 0x3e, 0xb4, 0x99, 0x35, 0xc4, 0xc0, 0x5f
  1433. };
  1434. static const unsigned char hmac_sha384_nonce[] =
  1435. {
  1436. 0xc5, 0x49, 0x1e, 0x66, 0x27, 0x92, 0xbe, 0xec, 0xb5, 0x1e, 0x4b, 0xb1,
  1437. 0x38, 0xe3, 0xeb, 0x62
  1438. };
  1439. static const unsigned char hmac_sha384_personalizationstring[] =
  1440. {
  1441. 0xbe, 0xe7, 0x6b, 0x57, 0xde, 0x88, 0x11, 0x96, 0x9b, 0x6e, 0xea, 0xe5,
  1442. 0x63, 0x83, 0x4c, 0xb6, 0x8d, 0x66, 0xaa, 0x1f, 0x8b, 0x54, 0xe7, 0x62,
  1443. 0x6d, 0x5a, 0xfc, 0xbf, 0x97, 0xba, 0xcd, 0x77
  1444. };
  1445. static const unsigned char hmac_sha384_additionalinput[] =
  1446. {
  1447. 0xe5, 0x28, 0x5f, 0x43, 0xf5, 0x83, 0x6e, 0x0a, 0x83, 0x5c, 0xe3, 0x81,
  1448. 0x03, 0xf2, 0xf8, 0x78, 0x00, 0x7c, 0x95, 0x87, 0x16, 0xd6, 0x6c, 0x58,
  1449. 0x33, 0x6c, 0x53, 0x35, 0x0d, 0x66, 0xe3, 0xce
  1450. };
  1451. static const unsigned char hmac_sha384_int_returnedbits[] =
  1452. {
  1453. 0xe2, 0x1f, 0xf3, 0xda, 0x0d, 0x19, 0x99, 0x87, 0xc4, 0x90, 0xa2, 0x31,
  1454. 0xca, 0x2a, 0x89, 0x58, 0x43, 0x44, 0xb8, 0xde, 0xcf, 0xa4, 0xbe, 0x3b,
  1455. 0x53, 0x26, 0x22, 0x31, 0x76, 0x41, 0x22, 0xb5, 0xa8, 0x70, 0x2f, 0x4b,
  1456. 0x64, 0x95, 0x4d, 0x48, 0x96, 0x35, 0xe6, 0xbd, 0x3c, 0x34, 0xdb, 0x1b
  1457. };
  1458. static const unsigned char hmac_sha384_entropyinputreseed[] =
  1459. {
  1460. 0x77, 0x61, 0xba, 0xbc, 0xf2, 0xc1, 0xf3, 0x4b, 0x86, 0x65, 0xfd, 0x48,
  1461. 0x0e, 0x3c, 0x02, 0x5e, 0xa2, 0x7a, 0x6b, 0x7c, 0xed, 0x21, 0x5e, 0xf9,
  1462. 0xcd, 0xcd, 0x77, 0x07, 0x2b, 0xbe, 0xc5, 0x5c
  1463. };
  1464. static const unsigned char hmac_sha384_additionalinputreseed[] =
  1465. {
  1466. 0x18, 0x24, 0x5f, 0xc6, 0x84, 0xd1, 0x67, 0xc3, 0x9a, 0x11, 0xa5, 0x8c,
  1467. 0x07, 0x39, 0x21, 0x83, 0x4d, 0x04, 0xc4, 0x6a, 0x28, 0x19, 0xcf, 0x92,
  1468. 0x21, 0xd9, 0x9e, 0x41, 0x72, 0x6c, 0x9e, 0x63
  1469. };
  1470. static const unsigned char hmac_sha384_additionalinput2[] =
  1471. {
  1472. 0x96, 0x67, 0x41, 0x28, 0x9b, 0xb7, 0x92, 0x8d, 0x64, 0x3b, 0xe4, 0xcf,
  1473. 0x7e, 0xaa, 0x1e, 0xb1, 0x4b, 0x1d, 0x09, 0x56, 0x67, 0x9c, 0xc6, 0x6d,
  1474. 0x3b, 0xe8, 0x91, 0x9d, 0xe1, 0x8a, 0xb7, 0x32
  1475. };
  1476. static const unsigned char hmac_sha384_returnedbits[] =
  1477. {
  1478. 0xe3, 0x59, 0x61, 0x38, 0x92, 0xec, 0xe2, 0x3c, 0xff, 0xb7, 0xdb, 0x19,
  1479. 0x0f, 0x5b, 0x93, 0x68, 0x0d, 0xa4, 0x94, 0x40, 0x72, 0x0b, 0xe0, 0xed,
  1480. 0x4d, 0xcd, 0x68, 0xa0, 0x1e, 0xfe, 0x67, 0xb2, 0xfa, 0x21, 0x56, 0x74,
  1481. 0xa4, 0xad, 0xcf, 0xb7, 0x60, 0x66, 0x2e, 0x40, 0xde, 0x82, 0xca, 0xfb
  1482. };
  1483. /* HMAC SHA-512 PR */
  1484. static const unsigned char hmac_sha512_pr_entropyinput[] =
  1485. {
  1486. 0xaa, 0x9e, 0x45, 0x67, 0x0e, 0x00, 0x2a, 0x67, 0x98, 0xd6, 0xda, 0x0b,
  1487. 0x0f, 0x17, 0x7e, 0xac, 0xfd, 0x27, 0xc4, 0xca, 0x84, 0xdf, 0xde, 0xba,
  1488. 0x85, 0xd9, 0xbe, 0x8f, 0xf3, 0xff, 0x91, 0x4d
  1489. };
  1490. static const unsigned char hmac_sha512_pr_nonce[] =
  1491. {
  1492. 0x8c, 0x49, 0x2f, 0x58, 0x1e, 0x7a, 0xda, 0x4b, 0x7e, 0x8a, 0x30, 0x7b,
  1493. 0x86, 0xea, 0xaf, 0xa2
  1494. };
  1495. static const unsigned char hmac_sha512_pr_personalizationstring[] =
  1496. {
  1497. 0x71, 0xe1, 0xbb, 0xad, 0xa7, 0x4b, 0x2e, 0x31, 0x3b, 0x0b, 0xec, 0x24,
  1498. 0x99, 0x38, 0xbc, 0xaa, 0x05, 0x4c, 0x46, 0x44, 0xfa, 0xad, 0x8e, 0x02,
  1499. 0xc1, 0x7e, 0xad, 0xec, 0x54, 0xa6, 0xd0, 0xad
  1500. };
  1501. static const unsigned char hmac_sha512_pr_additionalinput[] =
  1502. {
  1503. 0x3d, 0x6e, 0xa6, 0xa8, 0x29, 0x2a, 0xb2, 0xf5, 0x98, 0x42, 0xe4, 0x92,
  1504. 0x78, 0x22, 0x67, 0xfd, 0x1b, 0x15, 0x1e, 0x29, 0xaa, 0x71, 0x3c, 0x3c,
  1505. 0xe7, 0x05, 0x20, 0xa9, 0x29, 0xc6, 0x75, 0x71
  1506. };
  1507. static const unsigned char hmac_sha512_pr_entropyinputpr[] =
  1508. {
  1509. 0xab, 0xb9, 0x16, 0xd8, 0x55, 0x35, 0x54, 0xb7, 0x97, 0x3f, 0x94, 0xbc,
  1510. 0x2f, 0x7c, 0x70, 0xc7, 0xd0, 0xed, 0xb7, 0x4b, 0xf7, 0xf6, 0x6c, 0x03,
  1511. 0x0c, 0xb0, 0x03, 0xd8, 0xbb, 0x71, 0xd9, 0x10
  1512. };
  1513. static const unsigned char hmac_sha512_pr_int_returnedbits[] =
  1514. {
  1515. 0x8e, 0xd3, 0xfd, 0x52, 0x9e, 0x83, 0x08, 0x49, 0x18, 0x6e, 0x23, 0x56,
  1516. 0x5c, 0x45, 0x93, 0x34, 0x05, 0xe2, 0x98, 0x8f, 0x0c, 0xd4, 0x32, 0x0c,
  1517. 0xfd, 0xda, 0x5f, 0x92, 0x3a, 0x8c, 0x81, 0xbd, 0xf6, 0x6c, 0x55, 0xfd,
  1518. 0xb8, 0x20, 0xce, 0x8d, 0x97, 0x27, 0xe8, 0xe8, 0xe0, 0xb3, 0x85, 0x50,
  1519. 0xa2, 0xc2, 0xb2, 0x95, 0x1d, 0x48, 0xd3, 0x7b, 0x4b, 0x78, 0x13, 0x35,
  1520. 0x05, 0x17, 0xbe, 0x0d
  1521. };
  1522. static const unsigned char hmac_sha512_pr_additionalinput2[] =
  1523. {
  1524. 0xc3, 0xfc, 0x95, 0xaa, 0x69, 0x06, 0xae, 0x59, 0x41, 0xce, 0x26, 0x08,
  1525. 0x29, 0x6d, 0x45, 0xda, 0xe8, 0xb3, 0x6c, 0x95, 0x60, 0x0f, 0x70, 0x2c,
  1526. 0x10, 0xba, 0x38, 0x8c, 0xcf, 0x29, 0x99, 0xaa
  1527. };
  1528. static const unsigned char hmac_sha512_pr_entropyinputpr2[] =
  1529. {
  1530. 0x3b, 0x9a, 0x25, 0xce, 0xd7, 0xf9, 0x5c, 0xd1, 0x3a, 0x3e, 0xaa, 0x71,
  1531. 0x14, 0x3e, 0x19, 0xe8, 0xce, 0xe6, 0xfe, 0x51, 0x84, 0xe9, 0x1b, 0xfe,
  1532. 0x3f, 0xa7, 0xf2, 0xfd, 0x76, 0x5f, 0x6a, 0xe7
  1533. };
  1534. static const unsigned char hmac_sha512_pr_returnedbits[] =
  1535. {
  1536. 0xb7, 0x82, 0xa9, 0x57, 0x81, 0x67, 0x53, 0xb5, 0xa1, 0xe9, 0x3d, 0x35,
  1537. 0xf9, 0xe4, 0x97, 0xbe, 0xa6, 0xca, 0xf1, 0x01, 0x13, 0x09, 0xe7, 0x21,
  1538. 0xc0, 0xed, 0x93, 0x5d, 0x4b, 0xf4, 0xeb, 0x8d, 0x53, 0x25, 0x8a, 0xc4,
  1539. 0xb1, 0x6f, 0x6e, 0x37, 0xcd, 0x2e, 0xac, 0x39, 0xb2, 0xb6, 0x99, 0xa3,
  1540. 0x82, 0x00, 0xb0, 0x21, 0xf0, 0xc7, 0x2f, 0x4c, 0x73, 0x92, 0xfd, 0x00,
  1541. 0xb6, 0xaf, 0xbc, 0xd3
  1542. };
  1543. /* HMAC SHA-512 No PR */
  1544. static const unsigned char hmac_sha512_entropyinput[] =
  1545. {
  1546. 0x6e, 0x85, 0xe6, 0x25, 0x96, 0x29, 0xa7, 0x52, 0x5b, 0x60, 0xba, 0xaa,
  1547. 0xde, 0xdb, 0x36, 0x0a, 0x51, 0x9a, 0x15, 0xae, 0x6e, 0x18, 0xd3, 0xfe,
  1548. 0x39, 0xb9, 0x4a, 0x96, 0xf8, 0x77, 0xcb, 0x95
  1549. };
  1550. static const unsigned char hmac_sha512_nonce[] =
  1551. {
  1552. 0xe0, 0xa6, 0x5d, 0x08, 0xc3, 0x7c, 0xae, 0x25, 0x2e, 0x80, 0xd1, 0x3e,
  1553. 0xd9, 0xaf, 0x43, 0x3c
  1554. };
  1555. static const unsigned char hmac_sha512_personalizationstring[] =
  1556. {
  1557. 0x53, 0x99, 0x52, 0x5f, 0x11, 0xa9, 0x64, 0x66, 0x20, 0x5e, 0x1b, 0x5f,
  1558. 0x42, 0xb3, 0xf4, 0xda, 0xed, 0xbb, 0x63, 0xc1, 0x23, 0xaf, 0xd0, 0x01,
  1559. 0x90, 0x3b, 0xd0, 0x78, 0xe4, 0x0b, 0xa7, 0x20
  1560. };
  1561. static const unsigned char hmac_sha512_additionalinput[] =
  1562. {
  1563. 0x85, 0x90, 0x80, 0xd3, 0x98, 0xf1, 0x53, 0x6d, 0x68, 0x15, 0x8f, 0xe5,
  1564. 0x60, 0x3f, 0x17, 0x29, 0x55, 0x8d, 0x33, 0xb1, 0x45, 0x64, 0x64, 0x8d,
  1565. 0x50, 0x21, 0x89, 0xae, 0xf6, 0xfd, 0x32, 0x73
  1566. };
  1567. static const unsigned char hmac_sha512_int_returnedbits[] =
  1568. {
  1569. 0x28, 0x56, 0x30, 0x6f, 0xf4, 0xa1, 0x48, 0xe0, 0xc9, 0xf5, 0x75, 0x90,
  1570. 0xcc, 0xfb, 0xdf, 0xdf, 0x71, 0x3d, 0x0a, 0x9a, 0x03, 0x65, 0x3b, 0x18,
  1571. 0x61, 0xe3, 0xd1, 0xda, 0xcc, 0x4a, 0xfe, 0x55, 0x38, 0xf8, 0x21, 0x6b,
  1572. 0xfa, 0x18, 0x01, 0x42, 0x39, 0x2f, 0x99, 0x53, 0x38, 0x15, 0x82, 0x34,
  1573. 0xc5, 0x93, 0x92, 0xbc, 0x4d, 0x75, 0x1a, 0x5f, 0x21, 0x27, 0xcc, 0xa1,
  1574. 0xb1, 0x57, 0x69, 0xe8
  1575. };
  1576. static const unsigned char hmac_sha512_entropyinputreseed[] =
  1577. {
  1578. 0x8c, 0x52, 0x7e, 0x77, 0x72, 0x3f, 0xa3, 0x04, 0x97, 0x10, 0x9b, 0x41,
  1579. 0xbd, 0xe8, 0xff, 0x89, 0xed, 0x80, 0xe3, 0xbd, 0xaa, 0x12, 0x2d, 0xca,
  1580. 0x75, 0x82, 0x36, 0x77, 0x88, 0xcd, 0xa6, 0x73
  1581. };
  1582. static const unsigned char hmac_sha512_additionalinputreseed[] =
  1583. {
  1584. 0x7e, 0x32, 0xe3, 0x69, 0x69, 0x07, 0x34, 0xa2, 0x16, 0xa2, 0x5d, 0x1a,
  1585. 0x10, 0x91, 0xd3, 0xe2, 0x21, 0xa2, 0xa3, 0xdd, 0xcd, 0x0c, 0x09, 0x86,
  1586. 0x11, 0xe1, 0x50, 0xff, 0x5c, 0xb7, 0xeb, 0x5c
  1587. };
  1588. static const unsigned char hmac_sha512_additionalinput2[] =
  1589. {
  1590. 0x7f, 0x78, 0x66, 0xd8, 0xfb, 0x67, 0xcf, 0x8d, 0x8c, 0x08, 0x30, 0xa5,
  1591. 0xf8, 0x7d, 0xcf, 0x44, 0x59, 0xce, 0xf8, 0xdf, 0x58, 0xd3, 0x60, 0xcb,
  1592. 0xa8, 0x60, 0xb9, 0x07, 0xc4, 0xb1, 0x95, 0x48
  1593. };
  1594. static const unsigned char hmac_sha512_returnedbits[] =
  1595. {
  1596. 0xdf, 0xa7, 0x36, 0xd4, 0xdc, 0x5d, 0x4d, 0x31, 0xad, 0x69, 0x46, 0x9f,
  1597. 0xf1, 0x7c, 0xd7, 0x3b, 0x4f, 0x55, 0xf2, 0xd7, 0xb9, 0x9d, 0xad, 0x7a,
  1598. 0x79, 0x08, 0x59, 0xa5, 0xdc, 0x74, 0xf5, 0x9b, 0x73, 0xd2, 0x13, 0x25,
  1599. 0x0b, 0x81, 0x08, 0x08, 0x25, 0xfb, 0x39, 0xf2, 0xf0, 0xa3, 0xa4, 0x8d,
  1600. 0xef, 0x05, 0x9e, 0xb8, 0xc7, 0x52, 0xe4, 0x0e, 0x42, 0xaa, 0x7c, 0x79,
  1601. 0xc2, 0xd6, 0xfd, 0xa5
  1602. };