tcrypt.h 205 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023302430253026302730283029303030313032303330343035303630373038303930403041304230433044304530463047304830493050305130523053305430553056305730583059306030613062306330643065306630673068306930703071307230733074307530763077307830793080308130823083308430853086308730883089309030913092309330943095309630973098309931003101310231033104310531063107310831093110311131123113311431153116311731183119312031213122312331243125312631273128312931303131313231333134313531363137313831393140314131423143314431453146314731483149315031513152315331543155315631573158315931603161316231633164316531663167316831693170317131723173317431753176317731783179318031813182318331843185318631873188318931903191319231933194319531963197319831993200320132023203320432053206320732083209321032113212321332143215321632173218321932203221322232233224322532263227322832293230323132323233323432353236323732383239324032413242324332443245324632473248324932503251325232533254325532563257325832593260326132623263326432653266326732683269327032713272327332743275327632773278327932803281328232833284328532863287328832893290329132923293329432953296329732983299330033013302330333043305330633073308330933103311331233133314331533163317331833193320332133223323332433253326332733283329333033313332333333343335333633373338333933403341334233433344334533463347334833493350335133523353335433553356335733583359336033613362336333643365336633673368336933703371337233733374337533763377337833793380338133823383338433853386338733883389339033913392339333943395339633973398339934003401340234033404340534063407340834093410341134123413341434153416341734183419342034213422342334243425342634273428342934303431343234333434343534363437343834393440344134423443344434453446344734483449345034513452345334543455345634573458345934603461346234633464346534663467346834693470347134723473347434753476347734783479348034813482348334843485348634873488348934903491349234933494349534963497349834993500350135023503350435053506350735083509351035113512351335143515351635173518351935203521352235233524352535263527352835293530353135323533353435353536353735383539354035413542354335443545354635473548354935503551355235533554355535563557355835593560356135623563356435653566356735683569357035713572357335743575357635773578357935803581358235833584358535863587358835893590359135923593359435953596359735983599360036013602360336043605360636073608360936103611361236133614361536163617361836193620362136223623362436253626362736283629363036313632363336343635363636373638363936403641364236433644364536463647364836493650365136523653365436553656365736583659366036613662366336643665366636673668366936703671367236733674367536763677367836793680368136823683368436853686368736883689369036913692369336943695369636973698369937003701370237033704370537063707370837093710371137123713371437153716371737183719372037213722372337243725372637273728372937303731373237333734373537363737373837393740374137423743374437453746374737483749375037513752375337543755375637573758375937603761376237633764376537663767376837693770377137723773377437753776377737783779378037813782378337843785378637873788378937903791379237933794379537963797379837993800380138023803380438053806380738083809381038113812381338143815381638173818381938203821382238233824382538263827382838293830383138323833383438353836383738383839384038413842384338443845384638473848384938503851385238533854385538563857385838593860386138623863386438653866386738683869387038713872387338743875387638773878387938803881388238833884388538863887388838893890389138923893389438953896389738983899390039013902390339043905390639073908390939103911391239133914391539163917391839193920392139223923392439253926392739283929393039313932393339343935393639373938393939403941394239433944394539463947394839493950395139523953395439553956395739583959396039613962396339643965396639673968396939703971397239733974397539763977397839793980398139823983398439853986398739883989399039913992399339943995399639973998399940004001400240034004400540064007400840094010401140124013401440154016401740184019402040214022402340244025402640274028402940304031403240334034403540364037403840394040404140424043404440454046404740484049405040514052405340544055405640574058405940604061406240634064406540664067406840694070407140724073407440754076407740784079408040814082408340844085408640874088408940904091409240934094409540964097409840994100410141024103410441054106410741084109411041114112411341144115411641174118411941204121412241234124412541264127412841294130413141324133413441354136413741384139414041414142414341444145414641474148414941504151415241534154415541564157415841594160416141624163416441654166416741684169417041714172417341744175417641774178417941804181418241834184418541864187418841894190419141924193419441954196419741984199420042014202420342044205420642074208420942104211421242134214421542164217421842194220422142224223422442254226422742284229423042314232423342344235423642374238423942404241424242434244424542464247424842494250425142524253425442554256425742584259426042614262426342644265426642674268426942704271427242734274427542764277427842794280428142824283428442854286428742884289429042914292429342944295429642974298429943004301430243034304430543064307430843094310431143124313431443154316431743184319432043214322432343244325432643274328432943304331433243334334433543364337433843394340434143424343434443454346434743484349435043514352435343544355435643574358435943604361436243634364436543664367436843694370437143724373437443754376437743784379438043814382438343844385438643874388438943904391439243934394439543964397439843994400440144024403440444054406440744084409441044114412441344144415441644174418441944204421442244234424442544264427442844294430443144324433443444354436443744384439444044414442444344444445444644474448444944504451445244534454445544564457445844594460446144624463446444654466446744684469447044714472447344744475447644774478447944804481448244834484448544864487448844894490449144924493449444954496449744984499450045014502450345044505450645074508450945104511451245134514451545164517451845194520452145224523452445254526452745284529453045314532453345344535453645374538453945404541454245434544454545464547454845494550455145524553455445554556455745584559456045614562456345644565456645674568456945704571457245734574457545764577457845794580458145824583458445854586458745884589459045914592459345944595459645974598459946004601460246034604460546064607460846094610461146124613461446154616461746184619462046214622462346244625462646274628462946304631463246334634463546364637463846394640464146424643464446454646464746484649465046514652465346544655465646574658465946604661466246634664466546664667466846694670467146724673467446754676467746784679468046814682468346844685468646874688468946904691469246934694469546964697469846994700470147024703470447054706470747084709471047114712471347144715471647174718471947204721472247234724472547264727472847294730473147324733473447354736473747384739474047414742474347444745474647474748474947504751475247534754475547564757475847594760476147624763476447654766476747684769477047714772477347744775477647774778477947804781478247834784478547864787478847894790479147924793479447954796479747984799480048014802480348044805480648074808480948104811481248134814481548164817481848194820482148224823482448254826482748284829483048314832483348344835483648374838483948404841484248434844484548464847484848494850485148524853485448554856485748584859486048614862486348644865486648674868486948704871487248734874487548764877487848794880488148824883488448854886488748884889489048914892489348944895489648974898489949004901490249034904490549064907490849094910491149124913491449154916491749184919492049214922492349244925492649274928492949304931493249334934493549364937493849394940494149424943494449454946494749484949495049514952495349544955495649574958495949604961496249634964496549664967496849694970497149724973497449754976497749784979498049814982498349844985498649874988498949904991499249934994499549964997499849995000500150025003500450055006500750085009501050115012501350145015501650175018501950205021502250235024502550265027502850295030503150325033503450355036503750385039504050415042504350445045504650475048504950505051505250535054505550565057505850595060506150625063506450655066506750685069507050715072507350745075507650775078507950805081508250835084508550865087508850895090509150925093509450955096509750985099510051015102510351045105510651075108510951105111511251135114511551165117511851195120512151225123512451255126512751285129513051315132513351345135513651375138513951405141514251435144514551465147514851495150515151525153515451555156515751585159516051615162516351645165516651675168516951705171517251735174517551765177517851795180518151825183518451855186518751885189519051915192519351945195519651975198519952005201520252035204520552065207520852095210521152125213521452155216521752185219522052215222522352245225522652275228522952305231523252335234523552365237523852395240524152425243524452455246524752485249525052515252525352545255525652575258525952605261526252635264526552665267526852695270527152725273527452755276527752785279528052815282528352845285528652875288528952905291529252935294529552965297529852995300530153025303
  1. /*
  2. * Quick & dirty crypto testing module.
  3. *
  4. * This will only exist until we have a better testing mechanism
  5. * (e.g. a char device).
  6. *
  7. * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
  8. * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
  9. *
  10. * This program is free software; you can redistribute it and/or modify it
  11. * under the terms of the GNU General Public License as published by the Free
  12. * Software Foundation; either version 2 of the License, or (at your option)
  13. * any later version.
  14. *
  15. * 2006-12-07 Added SHA384 HMAC and SHA512 HMAC tests
  16. * 2004-08-09 Cipher speed tests by Reyk Floeter <reyk@vantronix.net>
  17. * 2003-09-14 Changes by Kartikey Mahendra Bhatt
  18. *
  19. */
  20. #ifndef _CRYPTO_TCRYPT_H
  21. #define _CRYPTO_TCRYPT_H
  22. #define MAX_DIGEST_SIZE 64
  23. #define MAX_TAP 8
  24. #define MAX_KEYLEN 56
  25. #define MAX_IVLEN 32
  26. struct hash_testvec {
  27. /* only used with keyed hash algorithms */
  28. char key[132] __attribute__ ((__aligned__(4)));
  29. char plaintext[240];
  30. char digest[MAX_DIGEST_SIZE];
  31. unsigned char tap[MAX_TAP];
  32. unsigned char psize;
  33. unsigned char np;
  34. unsigned char ksize;
  35. };
  36. struct cipher_testvec {
  37. char key[MAX_KEYLEN] __attribute__ ((__aligned__(4)));
  38. char iv[MAX_IVLEN];
  39. char input[512];
  40. char result[512];
  41. unsigned char tap[MAX_TAP];
  42. int np;
  43. unsigned char fail;
  44. unsigned char wk; /* weak key flag */
  45. unsigned char klen;
  46. unsigned short ilen;
  47. unsigned short rlen;
  48. };
  49. struct cipher_speed {
  50. unsigned char klen;
  51. unsigned int blen;
  52. };
  53. struct hash_speed {
  54. unsigned int blen; /* buffer length */
  55. unsigned int plen; /* per-update length */
  56. };
  57. /*
  58. * MD4 test vectors from RFC1320
  59. */
  60. #define MD4_TEST_VECTORS 7
  61. static struct hash_testvec md4_tv_template [] = {
  62. {
  63. .plaintext = "",
  64. .digest = { 0x31, 0xd6, 0xcf, 0xe0, 0xd1, 0x6a, 0xe9, 0x31,
  65. 0xb7, 0x3c, 0x59, 0xd7, 0xe0, 0xc0, 0x89, 0xc0 },
  66. }, {
  67. .plaintext = "a",
  68. .psize = 1,
  69. .digest = { 0xbd, 0xe5, 0x2c, 0xb3, 0x1d, 0xe3, 0x3e, 0x46,
  70. 0x24, 0x5e, 0x05, 0xfb, 0xdb, 0xd6, 0xfb, 0x24 },
  71. }, {
  72. .plaintext = "abc",
  73. .psize = 3,
  74. .digest = { 0xa4, 0x48, 0x01, 0x7a, 0xaf, 0x21, 0xd8, 0x52,
  75. 0x5f, 0xc1, 0x0a, 0xe8, 0x7a, 0xa6, 0x72, 0x9d },
  76. }, {
  77. .plaintext = "message digest",
  78. .psize = 14,
  79. .digest = { 0xd9, 0x13, 0x0a, 0x81, 0x64, 0x54, 0x9f, 0xe8,
  80. 0x18, 0x87, 0x48, 0x06, 0xe1, 0xc7, 0x01, 0x4b },
  81. }, {
  82. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  83. .psize = 26,
  84. .digest = { 0xd7, 0x9e, 0x1c, 0x30, 0x8a, 0xa5, 0xbb, 0xcd,
  85. 0xee, 0xa8, 0xed, 0x63, 0xdf, 0x41, 0x2d, 0xa9 },
  86. .np = 2,
  87. .tap = { 13, 13 },
  88. }, {
  89. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
  90. .psize = 62,
  91. .digest = { 0x04, 0x3f, 0x85, 0x82, 0xf2, 0x41, 0xdb, 0x35,
  92. 0x1c, 0xe6, 0x27, 0xe1, 0x53, 0xe7, 0xf0, 0xe4 },
  93. }, {
  94. .plaintext = "123456789012345678901234567890123456789012345678901234567890123"
  95. "45678901234567890",
  96. .psize = 80,
  97. .digest = { 0xe3, 0x3b, 0x4d, 0xdc, 0x9c, 0x38, 0xf2, 0x19,
  98. 0x9c, 0x3e, 0x7b, 0x16, 0x4f, 0xcc, 0x05, 0x36 },
  99. },
  100. };
  101. /*
  102. * MD5 test vectors from RFC1321
  103. */
  104. #define MD5_TEST_VECTORS 7
  105. static struct hash_testvec md5_tv_template[] = {
  106. {
  107. .digest = { 0xd4, 0x1d, 0x8c, 0xd9, 0x8f, 0x00, 0xb2, 0x04,
  108. 0xe9, 0x80, 0x09, 0x98, 0xec, 0xf8, 0x42, 0x7e },
  109. }, {
  110. .plaintext = "a",
  111. .psize = 1,
  112. .digest = { 0x0c, 0xc1, 0x75, 0xb9, 0xc0, 0xf1, 0xb6, 0xa8,
  113. 0x31, 0xc3, 0x99, 0xe2, 0x69, 0x77, 0x26, 0x61 },
  114. }, {
  115. .plaintext = "abc",
  116. .psize = 3,
  117. .digest = { 0x90, 0x01, 0x50, 0x98, 0x3c, 0xd2, 0x4f, 0xb0,
  118. 0xd6, 0x96, 0x3f, 0x7d, 0x28, 0xe1, 0x7f, 0x72 },
  119. }, {
  120. .plaintext = "message digest",
  121. .psize = 14,
  122. .digest = { 0xf9, 0x6b, 0x69, 0x7d, 0x7c, 0xb7, 0x93, 0x8d,
  123. 0x52, 0x5a, 0x2f, 0x31, 0xaa, 0xf1, 0x61, 0xd0 },
  124. }, {
  125. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  126. .psize = 26,
  127. .digest = { 0xc3, 0xfc, 0xd3, 0xd7, 0x61, 0x92, 0xe4, 0x00,
  128. 0x7d, 0xfb, 0x49, 0x6c, 0xca, 0x67, 0xe1, 0x3b },
  129. .np = 2,
  130. .tap = {13, 13}
  131. }, {
  132. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
  133. .psize = 62,
  134. .digest = { 0xd1, 0x74, 0xab, 0x98, 0xd2, 0x77, 0xd9, 0xf5,
  135. 0xa5, 0x61, 0x1c, 0x2c, 0x9f, 0x41, 0x9d, 0x9f },
  136. }, {
  137. .plaintext = "12345678901234567890123456789012345678901234567890123456789012"
  138. "345678901234567890",
  139. .psize = 80,
  140. .digest = { 0x57, 0xed, 0xf4, 0xa2, 0x2b, 0xe3, 0xc9, 0x55,
  141. 0xac, 0x49, 0xda, 0x2e, 0x21, 0x07, 0xb6, 0x7a },
  142. }
  143. };
  144. /*
  145. * SHA1 test vectors from from FIPS PUB 180-1
  146. */
  147. #define SHA1_TEST_VECTORS 2
  148. static struct hash_testvec sha1_tv_template[] = {
  149. {
  150. .plaintext = "abc",
  151. .psize = 3,
  152. .digest = { 0xa9, 0x99, 0x3e, 0x36, 0x47, 0x06, 0x81, 0x6a, 0xba, 0x3e,
  153. 0x25, 0x71, 0x78, 0x50, 0xc2, 0x6c, 0x9c, 0xd0, 0xd8, 0x9d },
  154. }, {
  155. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  156. .psize = 56,
  157. .digest = { 0x84, 0x98, 0x3e, 0x44, 0x1c, 0x3b, 0xd2, 0x6e, 0xba, 0xae,
  158. 0x4a, 0xa1, 0xf9, 0x51, 0x29, 0xe5, 0xe5, 0x46, 0x70, 0xf1 },
  159. .np = 2,
  160. .tap = { 28, 28 }
  161. }
  162. };
  163. /*
  164. * SHA224 test vectors from from FIPS PUB 180-2
  165. */
  166. #define SHA224_TEST_VECTORS 2
  167. static struct hash_testvec sha224_tv_template[] = {
  168. {
  169. .plaintext = "abc",
  170. .psize = 3,
  171. .digest = { 0x23, 0x09, 0x7D, 0x22, 0x34, 0x05, 0xD8, 0x22,
  172. 0x86, 0x42, 0xA4, 0x77, 0xBD, 0xA2, 0x55, 0xB3,
  173. 0x2A, 0xAD, 0xBC, 0xE4, 0xBD, 0xA0, 0xB3, 0xF7,
  174. 0xE3, 0x6C, 0x9D, 0xA7},
  175. }, {
  176. .plaintext =
  177. "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  178. .psize = 56,
  179. .digest = { 0x75, 0x38, 0x8B, 0x16, 0x51, 0x27, 0x76, 0xCC,
  180. 0x5D, 0xBA, 0x5D, 0xA1, 0xFD, 0x89, 0x01, 0x50,
  181. 0xB0, 0xC6, 0x45, 0x5C, 0xB4, 0xF5, 0x8B, 0x19,
  182. 0x52, 0x52, 0x25, 0x25 },
  183. .np = 2,
  184. .tap = { 28, 28 }
  185. }
  186. };
  187. /*
  188. * SHA256 test vectors from from NIST
  189. */
  190. #define SHA256_TEST_VECTORS 2
  191. static struct hash_testvec sha256_tv_template[] = {
  192. {
  193. .plaintext = "abc",
  194. .psize = 3,
  195. .digest = { 0xba, 0x78, 0x16, 0xbf, 0x8f, 0x01, 0xcf, 0xea,
  196. 0x41, 0x41, 0x40, 0xde, 0x5d, 0xae, 0x22, 0x23,
  197. 0xb0, 0x03, 0x61, 0xa3, 0x96, 0x17, 0x7a, 0x9c,
  198. 0xb4, 0x10, 0xff, 0x61, 0xf2, 0x00, 0x15, 0xad },
  199. }, {
  200. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  201. .psize = 56,
  202. .digest = { 0x24, 0x8d, 0x6a, 0x61, 0xd2, 0x06, 0x38, 0xb8,
  203. 0xe5, 0xc0, 0x26, 0x93, 0x0c, 0x3e, 0x60, 0x39,
  204. 0xa3, 0x3c, 0xe4, 0x59, 0x64, 0xff, 0x21, 0x67,
  205. 0xf6, 0xec, 0xed, 0xd4, 0x19, 0xdb, 0x06, 0xc1 },
  206. .np = 2,
  207. .tap = { 28, 28 }
  208. },
  209. };
  210. /*
  211. * SHA384 test vectors from from NIST and kerneli
  212. */
  213. #define SHA384_TEST_VECTORS 4
  214. static struct hash_testvec sha384_tv_template[] = {
  215. {
  216. .plaintext= "abc",
  217. .psize = 3,
  218. .digest = { 0xcb, 0x00, 0x75, 0x3f, 0x45, 0xa3, 0x5e, 0x8b,
  219. 0xb5, 0xa0, 0x3d, 0x69, 0x9a, 0xc6, 0x50, 0x07,
  220. 0x27, 0x2c, 0x32, 0xab, 0x0e, 0xde, 0xd1, 0x63,
  221. 0x1a, 0x8b, 0x60, 0x5a, 0x43, 0xff, 0x5b, 0xed,
  222. 0x80, 0x86, 0x07, 0x2b, 0xa1, 0xe7, 0xcc, 0x23,
  223. 0x58, 0xba, 0xec, 0xa1, 0x34, 0xc8, 0x25, 0xa7 },
  224. }, {
  225. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  226. .psize = 56,
  227. .digest = { 0x33, 0x91, 0xfd, 0xdd, 0xfc, 0x8d, 0xc7, 0x39,
  228. 0x37, 0x07, 0xa6, 0x5b, 0x1b, 0x47, 0x09, 0x39,
  229. 0x7c, 0xf8, 0xb1, 0xd1, 0x62, 0xaf, 0x05, 0xab,
  230. 0xfe, 0x8f, 0x45, 0x0d, 0xe5, 0xf3, 0x6b, 0xc6,
  231. 0xb0, 0x45, 0x5a, 0x85, 0x20, 0xbc, 0x4e, 0x6f,
  232. 0x5f, 0xe9, 0x5b, 0x1f, 0xe3, 0xc8, 0x45, 0x2b},
  233. }, {
  234. .plaintext = "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
  235. "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
  236. .psize = 112,
  237. .digest = { 0x09, 0x33, 0x0c, 0x33, 0xf7, 0x11, 0x47, 0xe8,
  238. 0x3d, 0x19, 0x2f, 0xc7, 0x82, 0xcd, 0x1b, 0x47,
  239. 0x53, 0x11, 0x1b, 0x17, 0x3b, 0x3b, 0x05, 0xd2,
  240. 0x2f, 0xa0, 0x80, 0x86, 0xe3, 0xb0, 0xf7, 0x12,
  241. 0xfc, 0xc7, 0xc7, 0x1a, 0x55, 0x7e, 0x2d, 0xb9,
  242. 0x66, 0xc3, 0xe9, 0xfa, 0x91, 0x74, 0x60, 0x39 },
  243. }, {
  244. .plaintext = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcd"
  245. "efghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz",
  246. .psize = 104,
  247. .digest = { 0x3d, 0x20, 0x89, 0x73, 0xab, 0x35, 0x08, 0xdb,
  248. 0xbd, 0x7e, 0x2c, 0x28, 0x62, 0xba, 0x29, 0x0a,
  249. 0xd3, 0x01, 0x0e, 0x49, 0x78, 0xc1, 0x98, 0xdc,
  250. 0x4d, 0x8f, 0xd0, 0x14, 0xe5, 0x82, 0x82, 0x3a,
  251. 0x89, 0xe1, 0x6f, 0x9b, 0x2a, 0x7b, 0xbc, 0x1a,
  252. 0xc9, 0x38, 0xe2, 0xd1, 0x99, 0xe8, 0xbe, 0xa4 },
  253. .np = 4,
  254. .tap = { 26, 26, 26, 26 }
  255. },
  256. };
  257. /*
  258. * SHA512 test vectors from from NIST and kerneli
  259. */
  260. #define SHA512_TEST_VECTORS 4
  261. static struct hash_testvec sha512_tv_template[] = {
  262. {
  263. .plaintext = "abc",
  264. .psize = 3,
  265. .digest = { 0xdd, 0xaf, 0x35, 0xa1, 0x93, 0x61, 0x7a, 0xba,
  266. 0xcc, 0x41, 0x73, 0x49, 0xae, 0x20, 0x41, 0x31,
  267. 0x12, 0xe6, 0xfa, 0x4e, 0x89, 0xa9, 0x7e, 0xa2,
  268. 0x0a, 0x9e, 0xee, 0xe6, 0x4b, 0x55, 0xd3, 0x9a,
  269. 0x21, 0x92, 0x99, 0x2a, 0x27, 0x4f, 0xc1, 0xa8,
  270. 0x36, 0xba, 0x3c, 0x23, 0xa3, 0xfe, 0xeb, 0xbd,
  271. 0x45, 0x4d, 0x44, 0x23, 0x64, 0x3c, 0xe8, 0x0e,
  272. 0x2a, 0x9a, 0xc9, 0x4f, 0xa5, 0x4c, 0xa4, 0x9f },
  273. }, {
  274. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  275. .psize = 56,
  276. .digest = { 0x20, 0x4a, 0x8f, 0xc6, 0xdd, 0xa8, 0x2f, 0x0a,
  277. 0x0c, 0xed, 0x7b, 0xeb, 0x8e, 0x08, 0xa4, 0x16,
  278. 0x57, 0xc1, 0x6e, 0xf4, 0x68, 0xb2, 0x28, 0xa8,
  279. 0x27, 0x9b, 0xe3, 0x31, 0xa7, 0x03, 0xc3, 0x35,
  280. 0x96, 0xfd, 0x15, 0xc1, 0x3b, 0x1b, 0x07, 0xf9,
  281. 0xaa, 0x1d, 0x3b, 0xea, 0x57, 0x78, 0x9c, 0xa0,
  282. 0x31, 0xad, 0x85, 0xc7, 0xa7, 0x1d, 0xd7, 0x03,
  283. 0x54, 0xec, 0x63, 0x12, 0x38, 0xca, 0x34, 0x45 },
  284. }, {
  285. .plaintext = "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
  286. "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
  287. .psize = 112,
  288. .digest = { 0x8e, 0x95, 0x9b, 0x75, 0xda, 0xe3, 0x13, 0xda,
  289. 0x8c, 0xf4, 0xf7, 0x28, 0x14, 0xfc, 0x14, 0x3f,
  290. 0x8f, 0x77, 0x79, 0xc6, 0xeb, 0x9f, 0x7f, 0xa1,
  291. 0x72, 0x99, 0xae, 0xad, 0xb6, 0x88, 0x90, 0x18,
  292. 0x50, 0x1d, 0x28, 0x9e, 0x49, 0x00, 0xf7, 0xe4,
  293. 0x33, 0x1b, 0x99, 0xde, 0xc4, 0xb5, 0x43, 0x3a,
  294. 0xc7, 0xd3, 0x29, 0xee, 0xb6, 0xdd, 0x26, 0x54,
  295. 0x5e, 0x96, 0xe5, 0x5b, 0x87, 0x4b, 0xe9, 0x09 },
  296. }, {
  297. .plaintext = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcd"
  298. "efghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz",
  299. .psize = 104,
  300. .digest = { 0x93, 0x0d, 0x0c, 0xef, 0xcb, 0x30, 0xff, 0x11,
  301. 0x33, 0xb6, 0x89, 0x81, 0x21, 0xf1, 0xcf, 0x3d,
  302. 0x27, 0x57, 0x8a, 0xfc, 0xaf, 0xe8, 0x67, 0x7c,
  303. 0x52, 0x57, 0xcf, 0x06, 0x99, 0x11, 0xf7, 0x5d,
  304. 0x8f, 0x58, 0x31, 0xb5, 0x6e, 0xbf, 0xda, 0x67,
  305. 0xb2, 0x78, 0xe6, 0x6d, 0xff, 0x8b, 0x84, 0xfe,
  306. 0x2b, 0x28, 0x70, 0xf7, 0x42, 0xa5, 0x80, 0xd8,
  307. 0xed, 0xb4, 0x19, 0x87, 0x23, 0x28, 0x50, 0xc9 },
  308. .np = 4,
  309. .tap = { 26, 26, 26, 26 }
  310. },
  311. };
  312. /*
  313. * WHIRLPOOL test vectors from Whirlpool package
  314. * by Vincent Rijmen and Paulo S. L. M. Barreto as part of the NESSIE
  315. * submission
  316. */
  317. #define WP512_TEST_VECTORS 8
  318. static struct hash_testvec wp512_tv_template[] = {
  319. {
  320. .plaintext = "",
  321. .psize = 0,
  322. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  323. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  324. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  325. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7,
  326. 0x3E, 0x83, 0xBE, 0x69, 0x8B, 0x28, 0x8F, 0xEB,
  327. 0xCF, 0x88, 0xE3, 0xE0, 0x3C, 0x4F, 0x07, 0x57,
  328. 0xEA, 0x89, 0x64, 0xE5, 0x9B, 0x63, 0xD9, 0x37,
  329. 0x08, 0xB1, 0x38, 0xCC, 0x42, 0xA6, 0x6E, 0xB3 },
  330. }, {
  331. .plaintext = "a",
  332. .psize = 1,
  333. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  334. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  335. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  336. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42,
  337. 0xD1, 0x1B, 0xC6, 0x45, 0x41, 0x3A, 0xEF, 0xF6,
  338. 0x3A, 0x42, 0x39, 0x1A, 0x39, 0x14, 0x5A, 0x59,
  339. 0x1A, 0x92, 0x20, 0x0D, 0x56, 0x01, 0x95, 0xE5,
  340. 0x3B, 0x47, 0x85, 0x84, 0xFD, 0xAE, 0x23, 0x1A },
  341. }, {
  342. .plaintext = "abc",
  343. .psize = 3,
  344. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  345. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  346. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  347. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C,
  348. 0x71, 0x81, 0xEE, 0xBD, 0xB6, 0xC5, 0x7E, 0x27,
  349. 0x7D, 0x0E, 0x34, 0x95, 0x71, 0x14, 0xCB, 0xD6,
  350. 0xC7, 0x97, 0xFC, 0x9D, 0x95, 0xD8, 0xB5, 0x82,
  351. 0xD2, 0x25, 0x29, 0x20, 0x76, 0xD4, 0xEE, 0xF5 },
  352. }, {
  353. .plaintext = "message digest",
  354. .psize = 14,
  355. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  356. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  357. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  358. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B,
  359. 0x84, 0x21, 0x55, 0x76, 0x59, 0xEF, 0x55, 0xC1,
  360. 0x06, 0xB4, 0xB5, 0x2A, 0xC5, 0xA4, 0xAA, 0xA6,
  361. 0x92, 0xED, 0x92, 0x00, 0x52, 0x83, 0x8F, 0x33,
  362. 0x62, 0xE8, 0x6D, 0xBD, 0x37, 0xA8, 0x90, 0x3E },
  363. }, {
  364. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  365. .psize = 26,
  366. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  367. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  368. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  369. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B,
  370. 0x08, 0xBF, 0x2A, 0x92, 0x51, 0xC3, 0x0B, 0x6A,
  371. 0x0B, 0x8A, 0xAE, 0x86, 0x17, 0x7A, 0xB4, 0xA6,
  372. 0xF6, 0x8F, 0x67, 0x3E, 0x72, 0x07, 0x86, 0x5D,
  373. 0x5D, 0x98, 0x19, 0xA3, 0xDB, 0xA4, 0xEB, 0x3B },
  374. }, {
  375. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  376. "abcdefghijklmnopqrstuvwxyz0123456789",
  377. .psize = 62,
  378. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  379. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  380. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  381. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E,
  382. 0x08, 0xEB, 0xA2, 0x66, 0x29, 0x12, 0x9D, 0x8F,
  383. 0xB7, 0xCB, 0x57, 0x21, 0x1B, 0x92, 0x81, 0xA6,
  384. 0x55, 0x17, 0xCC, 0x87, 0x9D, 0x7B, 0x96, 0x21,
  385. 0x42, 0xC6, 0x5F, 0x5A, 0x7A, 0xF0, 0x14, 0x67 },
  386. }, {
  387. .plaintext = "1234567890123456789012345678901234567890"
  388. "1234567890123456789012345678901234567890",
  389. .psize = 80,
  390. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  391. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  392. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  393. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29,
  394. 0x4D, 0x5B, 0xD8, 0xDF, 0x2A, 0x6C, 0x44, 0xE5,
  395. 0x38, 0xCD, 0x04, 0x7B, 0x26, 0x81, 0xA5, 0x1A,
  396. 0x2C, 0x60, 0x48, 0x1E, 0x88, 0xC5, 0xA2, 0x0B,
  397. 0x2C, 0x2A, 0x80, 0xCF, 0x3A, 0x9A, 0x08, 0x3B },
  398. }, {
  399. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  400. .psize = 32,
  401. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  402. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  403. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  404. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69,
  405. 0x16, 0xBD, 0xC8, 0x03, 0x1B, 0xC5, 0xBE, 0x1B,
  406. 0x7B, 0x94, 0x76, 0x39, 0xFE, 0x05, 0x0B, 0x56,
  407. 0x93, 0x9B, 0xAA, 0xA0, 0xAD, 0xFF, 0x9A, 0xE6,
  408. 0x74, 0x5B, 0x7B, 0x18, 0x1C, 0x3B, 0xE3, 0xFD },
  409. },
  410. };
  411. #define WP384_TEST_VECTORS 8
  412. static struct hash_testvec wp384_tv_template[] = {
  413. {
  414. .plaintext = "",
  415. .psize = 0,
  416. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  417. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  418. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  419. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7,
  420. 0x3E, 0x83, 0xBE, 0x69, 0x8B, 0x28, 0x8F, 0xEB,
  421. 0xCF, 0x88, 0xE3, 0xE0, 0x3C, 0x4F, 0x07, 0x57 },
  422. }, {
  423. .plaintext = "a",
  424. .psize = 1,
  425. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  426. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  427. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  428. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42,
  429. 0xD1, 0x1B, 0xC6, 0x45, 0x41, 0x3A, 0xEF, 0xF6,
  430. 0x3A, 0x42, 0x39, 0x1A, 0x39, 0x14, 0x5A, 0x59 },
  431. }, {
  432. .plaintext = "abc",
  433. .psize = 3,
  434. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  435. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  436. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  437. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C,
  438. 0x71, 0x81, 0xEE, 0xBD, 0xB6, 0xC5, 0x7E, 0x27,
  439. 0x7D, 0x0E, 0x34, 0x95, 0x71, 0x14, 0xCB, 0xD6 },
  440. }, {
  441. .plaintext = "message digest",
  442. .psize = 14,
  443. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  444. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  445. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  446. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B,
  447. 0x84, 0x21, 0x55, 0x76, 0x59, 0xEF, 0x55, 0xC1,
  448. 0x06, 0xB4, 0xB5, 0x2A, 0xC5, 0xA4, 0xAA, 0xA6 },
  449. }, {
  450. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  451. .psize = 26,
  452. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  453. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  454. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  455. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B,
  456. 0x08, 0xBF, 0x2A, 0x92, 0x51, 0xC3, 0x0B, 0x6A,
  457. 0x0B, 0x8A, 0xAE, 0x86, 0x17, 0x7A, 0xB4, 0xA6 },
  458. }, {
  459. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  460. "abcdefghijklmnopqrstuvwxyz0123456789",
  461. .psize = 62,
  462. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  463. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  464. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  465. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E,
  466. 0x08, 0xEB, 0xA2, 0x66, 0x29, 0x12, 0x9D, 0x8F,
  467. 0xB7, 0xCB, 0x57, 0x21, 0x1B, 0x92, 0x81, 0xA6 },
  468. }, {
  469. .plaintext = "1234567890123456789012345678901234567890"
  470. "1234567890123456789012345678901234567890",
  471. .psize = 80,
  472. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  473. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  474. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  475. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29,
  476. 0x4D, 0x5B, 0xD8, 0xDF, 0x2A, 0x6C, 0x44, 0xE5,
  477. 0x38, 0xCD, 0x04, 0x7B, 0x26, 0x81, 0xA5, 0x1A },
  478. }, {
  479. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  480. .psize = 32,
  481. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  482. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  483. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  484. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69,
  485. 0x16, 0xBD, 0xC8, 0x03, 0x1B, 0xC5, 0xBE, 0x1B,
  486. 0x7B, 0x94, 0x76, 0x39, 0xFE, 0x05, 0x0B, 0x56 },
  487. },
  488. };
  489. #define WP256_TEST_VECTORS 8
  490. static struct hash_testvec wp256_tv_template[] = {
  491. {
  492. .plaintext = "",
  493. .psize = 0,
  494. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  495. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  496. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  497. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7 },
  498. }, {
  499. .plaintext = "a",
  500. .psize = 1,
  501. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  502. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  503. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  504. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42 },
  505. }, {
  506. .plaintext = "abc",
  507. .psize = 3,
  508. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  509. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  510. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  511. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C },
  512. }, {
  513. .plaintext = "message digest",
  514. .psize = 14,
  515. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  516. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  517. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  518. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B },
  519. }, {
  520. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  521. .psize = 26,
  522. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  523. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  524. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  525. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B },
  526. }, {
  527. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  528. "abcdefghijklmnopqrstuvwxyz0123456789",
  529. .psize = 62,
  530. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  531. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  532. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  533. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E },
  534. }, {
  535. .plaintext = "1234567890123456789012345678901234567890"
  536. "1234567890123456789012345678901234567890",
  537. .psize = 80,
  538. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  539. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  540. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  541. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29 },
  542. }, {
  543. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  544. .psize = 32,
  545. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  546. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  547. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  548. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69 },
  549. },
  550. };
  551. /*
  552. * TIGER test vectors from Tiger website
  553. */
  554. #define TGR192_TEST_VECTORS 6
  555. static struct hash_testvec tgr192_tv_template[] = {
  556. {
  557. .plaintext = "",
  558. .psize = 0,
  559. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  560. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f,
  561. 0xf3, 0x73, 0xde, 0x2d, 0x49, 0x58, 0x4e, 0x7a },
  562. }, {
  563. .plaintext = "abc",
  564. .psize = 3,
  565. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  566. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf,
  567. 0x93, 0x5f, 0x7b, 0x95, 0x1c, 0x13, 0x29, 0x51 },
  568. }, {
  569. .plaintext = "Tiger",
  570. .psize = 5,
  571. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  572. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec,
  573. 0x37, 0x79, 0x0c, 0x11, 0x6f, 0x9d, 0x2b, 0xdf },
  574. }, {
  575. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  576. .psize = 64,
  577. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  578. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e,
  579. 0xb5, 0x86, 0x44, 0x50, 0x34, 0xa5, 0xa3, 0x86 },
  580. }, {
  581. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  582. .psize = 64,
  583. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  584. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9,
  585. 0x57, 0x89, 0x65, 0x65, 0x97, 0x5f, 0x91, 0x97 },
  586. }, {
  587. .plaintext = "Tiger - A Fast New Hash Function, "
  588. "by Ross Anderson and Eli Biham, "
  589. "proceedings of Fast Software Encryption 3, "
  590. "Cambridge, 1996.",
  591. .psize = 125,
  592. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  593. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24,
  594. 0xdd, 0x68, 0x15, 0x1d, 0x50, 0x39, 0x74, 0xfc },
  595. },
  596. };
  597. #define TGR160_TEST_VECTORS 6
  598. static struct hash_testvec tgr160_tv_template[] = {
  599. {
  600. .plaintext = "",
  601. .psize = 0,
  602. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  603. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f,
  604. 0xf3, 0x73, 0xde, 0x2d },
  605. }, {
  606. .plaintext = "abc",
  607. .psize = 3,
  608. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  609. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf,
  610. 0x93, 0x5f, 0x7b, 0x95 },
  611. }, {
  612. .plaintext = "Tiger",
  613. .psize = 5,
  614. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  615. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec,
  616. 0x37, 0x79, 0x0c, 0x11 },
  617. }, {
  618. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  619. .psize = 64,
  620. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  621. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e,
  622. 0xb5, 0x86, 0x44, 0x50 },
  623. }, {
  624. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  625. .psize = 64,
  626. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  627. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9,
  628. 0x57, 0x89, 0x65, 0x65 },
  629. }, {
  630. .plaintext = "Tiger - A Fast New Hash Function, "
  631. "by Ross Anderson and Eli Biham, "
  632. "proceedings of Fast Software Encryption 3, "
  633. "Cambridge, 1996.",
  634. .psize = 125,
  635. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  636. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24,
  637. 0xdd, 0x68, 0x15, 0x1d },
  638. },
  639. };
  640. #define TGR128_TEST_VECTORS 6
  641. static struct hash_testvec tgr128_tv_template[] = {
  642. {
  643. .plaintext = "",
  644. .psize = 0,
  645. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  646. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f },
  647. }, {
  648. .plaintext = "abc",
  649. .psize = 3,
  650. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  651. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf },
  652. }, {
  653. .plaintext = "Tiger",
  654. .psize = 5,
  655. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  656. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec },
  657. }, {
  658. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  659. .psize = 64,
  660. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  661. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e },
  662. }, {
  663. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  664. .psize = 64,
  665. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  666. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9 },
  667. }, {
  668. .plaintext = "Tiger - A Fast New Hash Function, "
  669. "by Ross Anderson and Eli Biham, "
  670. "proceedings of Fast Software Encryption 3, "
  671. "Cambridge, 1996.",
  672. .psize = 125,
  673. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  674. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24 },
  675. },
  676. };
  677. /*
  678. * HMAC-MD5 test vectors from RFC2202
  679. * (These need to be fixed to not use strlen).
  680. */
  681. #define HMAC_MD5_TEST_VECTORS 7
  682. static struct hash_testvec hmac_md5_tv_template[] =
  683. {
  684. {
  685. .key = { [0 ... 15] = 0x0b },
  686. .ksize = 16,
  687. .plaintext = "Hi There",
  688. .psize = 8,
  689. .digest = { 0x92, 0x94, 0x72, 0x7a, 0x36, 0x38, 0xbb, 0x1c,
  690. 0x13, 0xf4, 0x8e, 0xf8, 0x15, 0x8b, 0xfc, 0x9d },
  691. }, {
  692. .key = { 'J', 'e', 'f', 'e' },
  693. .ksize = 4,
  694. .plaintext = "what do ya want for nothing?",
  695. .psize = 28,
  696. .digest = { 0x75, 0x0c, 0x78, 0x3e, 0x6a, 0xb0, 0xb5, 0x03,
  697. 0xea, 0xa8, 0x6e, 0x31, 0x0a, 0x5d, 0xb7, 0x38 },
  698. .np = 2,
  699. .tap = {14, 14}
  700. }, {
  701. .key = { [0 ... 15] = 0xaa },
  702. .ksize = 16,
  703. .plaintext = { [0 ... 49] = 0xdd },
  704. .psize = 50,
  705. .digest = { 0x56, 0xbe, 0x34, 0x52, 0x1d, 0x14, 0x4c, 0x88,
  706. 0xdb, 0xb8, 0xc7, 0x33, 0xf0, 0xe8, 0xb3, 0xf6 },
  707. }, {
  708. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  709. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  710. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, },
  711. .ksize = 25,
  712. .plaintext = { [0 ... 49] = 0xcd },
  713. .psize = 50,
  714. .digest = { 0x69, 0x7e, 0xaf, 0x0a, 0xca, 0x3a, 0x3a, 0xea,
  715. 0x3a, 0x75, 0x16, 0x47, 0x46, 0xff, 0xaa, 0x79 },
  716. }, {
  717. .key = { [0 ... 15] = 0x0c },
  718. .ksize = 16,
  719. .plaintext = "Test With Truncation",
  720. .psize = 20,
  721. .digest = { 0x56, 0x46, 0x1e, 0xf2, 0x34, 0x2e, 0xdc, 0x00,
  722. 0xf9, 0xba, 0xb9, 0x95, 0x69, 0x0e, 0xfd, 0x4c },
  723. }, {
  724. .key = { [0 ... 79] = 0xaa },
  725. .ksize = 80,
  726. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  727. .psize = 54,
  728. .digest = { 0x6b, 0x1a, 0xb7, 0xfe, 0x4b, 0xd7, 0xbf, 0x8f,
  729. 0x0b, 0x62, 0xe6, 0xce, 0x61, 0xb9, 0xd0, 0xcd },
  730. }, {
  731. .key = { [0 ... 79] = 0xaa },
  732. .ksize = 80,
  733. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than One "
  734. "Block-Size Data",
  735. .psize = 73,
  736. .digest = { 0x6f, 0x63, 0x0f, 0xad, 0x67, 0xcd, 0xa0, 0xee,
  737. 0x1f, 0xb1, 0xf5, 0x62, 0xdb, 0x3a, 0xa5, 0x3e },
  738. },
  739. };
  740. /*
  741. * HMAC-SHA1 test vectors from RFC2202
  742. */
  743. #define HMAC_SHA1_TEST_VECTORS 7
  744. static struct hash_testvec hmac_sha1_tv_template[] = {
  745. {
  746. .key = { [0 ... 19] = 0x0b },
  747. .ksize = 20,
  748. .plaintext = "Hi There",
  749. .psize = 8,
  750. .digest = { 0xb6, 0x17, 0x31, 0x86, 0x55, 0x05, 0x72, 0x64,
  751. 0xe2, 0x8b, 0xc0, 0xb6, 0xfb, 0x37, 0x8c, 0x8e, 0xf1,
  752. 0x46, 0xbe },
  753. }, {
  754. .key = { 'J', 'e', 'f', 'e' },
  755. .ksize = 4,
  756. .plaintext = "what do ya want for nothing?",
  757. .psize = 28,
  758. .digest = { 0xef, 0xfc, 0xdf, 0x6a, 0xe5, 0xeb, 0x2f, 0xa2, 0xd2, 0x74,
  759. 0x16, 0xd5, 0xf1, 0x84, 0xdf, 0x9c, 0x25, 0x9a, 0x7c, 0x79 },
  760. .np = 2,
  761. .tap = { 14, 14 }
  762. }, {
  763. .key = { [0 ... 19] = 0xaa },
  764. .ksize = 20,
  765. .plaintext = { [0 ... 49] = 0xdd },
  766. .psize = 50,
  767. .digest = { 0x12, 0x5d, 0x73, 0x42, 0xb9, 0xac, 0x11, 0xcd, 0x91, 0xa3,
  768. 0x9a, 0xf4, 0x8a, 0xa1, 0x7b, 0x4f, 0x63, 0xf1, 0x75, 0xd3 },
  769. }, {
  770. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  771. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  772. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19 },
  773. .ksize = 25,
  774. .plaintext = { [0 ... 49] = 0xcd },
  775. .psize = 50,
  776. .digest = { 0x4c, 0x90, 0x07, 0xf4, 0x02, 0x62, 0x50, 0xc6, 0xbc, 0x84,
  777. 0x14, 0xf9, 0xbf, 0x50, 0xc8, 0x6c, 0x2d, 0x72, 0x35, 0xda },
  778. }, {
  779. .key = { [0 ... 19] = 0x0c },
  780. .ksize = 20,
  781. .plaintext = "Test With Truncation",
  782. .psize = 20,
  783. .digest = { 0x4c, 0x1a, 0x03, 0x42, 0x4b, 0x55, 0xe0, 0x7f, 0xe7, 0xf2,
  784. 0x7b, 0xe1, 0xd5, 0x8b, 0xb9, 0x32, 0x4a, 0x9a, 0x5a, 0x04 },
  785. }, {
  786. .key = { [0 ... 79] = 0xaa },
  787. .ksize = 80,
  788. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  789. .psize = 54,
  790. .digest = { 0xaa, 0x4a, 0xe5, 0xe1, 0x52, 0x72, 0xd0, 0x0e, 0x95, 0x70,
  791. 0x56, 0x37, 0xce, 0x8a, 0x3b, 0x55, 0xed, 0x40, 0x21, 0x12 },
  792. }, {
  793. .key = { [0 ... 79] = 0xaa },
  794. .ksize = 80,
  795. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than One "
  796. "Block-Size Data",
  797. .psize = 73,
  798. .digest = { 0xe8, 0xe9, 0x9d, 0x0f, 0x45, 0x23, 0x7d, 0x78, 0x6d, 0x6b,
  799. 0xba, 0xa7, 0x96, 0x5c, 0x78, 0x08, 0xbb, 0xff, 0x1a, 0x91 },
  800. },
  801. };
  802. /*
  803. * SHA224 HMAC test vectors from RFC4231
  804. */
  805. #define HMAC_SHA224_TEST_VECTORS 4
  806. static struct hash_testvec hmac_sha224_tv_template[] = {
  807. {
  808. .key = { 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  809. 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  810. 0x0b, 0x0b, 0x0b, 0x0b },
  811. .ksize = 20,
  812. /* ("Hi There") */
  813. .plaintext = { 0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 },
  814. .psize = 8,
  815. .digest = { 0x89, 0x6f, 0xb1, 0x12, 0x8a, 0xbb, 0xdf, 0x19,
  816. 0x68, 0x32, 0x10, 0x7c, 0xd4, 0x9d, 0xf3, 0x3f,
  817. 0x47, 0xb4, 0xb1, 0x16, 0x99, 0x12, 0xba, 0x4f,
  818. 0x53, 0x68, 0x4b, 0x22},
  819. }, {
  820. .key = { 0x4a, 0x65, 0x66, 0x65 }, /* ("Jefe") */
  821. .ksize = 4,
  822. /* ("what do ya want for nothing?") */
  823. .plaintext = { 0x77, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x20,
  824. 0x79, 0x61, 0x20, 0x77, 0x61, 0x6e, 0x74, 0x20,
  825. 0x66, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x68,
  826. 0x69, 0x6e, 0x67, 0x3f },
  827. .psize = 28,
  828. .digest = { 0xa3, 0x0e, 0x01, 0x09, 0x8b, 0xc6, 0xdb, 0xbf,
  829. 0x45, 0x69, 0x0f, 0x3a, 0x7e, 0x9e, 0x6d, 0x0f,
  830. 0x8b, 0xbe, 0xa2, 0xa3, 0x9e, 0x61, 0x48, 0x00,
  831. 0x8f, 0xd0, 0x5e, 0x44 },
  832. .np = 4,
  833. .tap = { 7, 7, 7, 7 }
  834. }, {
  835. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  836. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  837. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  838. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  839. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  840. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  841. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  842. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  843. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  844. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  845. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  846. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  847. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  848. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  849. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  850. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  851. 0xaa, 0xaa, 0xaa },
  852. .ksize = 131,
  853. /* ("Test Using Larger Than Block-Size Key - Hash Key First") */
  854. .plaintext = { 0x54, 0x65, 0x73, 0x74, 0x20, 0x55, 0x73, 0x69,
  855. 0x6e, 0x67, 0x20, 0x4c, 0x61, 0x72, 0x67, 0x65,
  856. 0x72, 0x20, 0x54, 0x68, 0x61, 0x6e, 0x20, 0x42,
  857. 0x6c, 0x6f, 0x63, 0x6b, 0x2d, 0x53, 0x69, 0x7a,
  858. 0x65, 0x20, 0x4b, 0x65, 0x79, 0x20, 0x2d, 0x20,
  859. 0x48, 0x61, 0x73, 0x68, 0x20, 0x4b, 0x65, 0x79,
  860. 0x20, 0x46, 0x69, 0x72, 0x73, 0x74 },
  861. .psize = 54,
  862. .digest = { 0x95, 0xe9, 0xa0, 0xdb, 0x96, 0x20, 0x95, 0xad,
  863. 0xae, 0xbe, 0x9b, 0x2d, 0x6f, 0x0d, 0xbc, 0xe2,
  864. 0xd4, 0x99, 0xf1, 0x12, 0xf2, 0xd2, 0xb7, 0x27,
  865. 0x3f, 0xa6, 0x87, 0x0e },
  866. }, {
  867. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  868. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  869. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  870. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  871. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  872. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  873. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  874. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  875. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  876. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  877. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  878. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  879. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  880. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  881. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  882. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  883. 0xaa, 0xaa, 0xaa },
  884. .ksize = 131,
  885. /* ("This is a test using a larger than block-size key and a")
  886. (" larger than block-size data. The key needs to be")
  887. (" hashed before being used by the HMAC algorithm.") */
  888. .plaintext = { 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20,
  889. 0x61, 0x20, 0x74, 0x65, 0x73, 0x74, 0x20, 0x75,
  890. 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x6c,
  891. 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, 0x68,
  892. 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b,
  893. 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x6b, 0x65,
  894. 0x79, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20,
  895. 0x6c, 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74,
  896. 0x68, 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63,
  897. 0x6b, 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x64,
  898. 0x61, 0x74, 0x61, 0x2e, 0x20, 0x54, 0x68, 0x65,
  899. 0x20, 0x6b, 0x65, 0x79, 0x20, 0x6e, 0x65, 0x65,
  900. 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65,
  901. 0x20, 0x68, 0x61, 0x73, 0x68, 0x65, 0x64, 0x20,
  902. 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x62,
  903. 0x65, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65,
  904. 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65,
  905. 0x20, 0x48, 0x4d, 0x41, 0x43, 0x20, 0x61, 0x6c,
  906. 0x67, 0x6f, 0x72, 0x69, 0x74, 0x68, 0x6d, 0x2e },
  907. .psize = 152,
  908. .digest = { 0x3a, 0x85, 0x41, 0x66, 0xac, 0x5d, 0x9f, 0x02,
  909. 0x3f, 0x54, 0xd5, 0x17, 0xd0, 0xb3, 0x9d, 0xbd,
  910. 0x94, 0x67, 0x70, 0xdb, 0x9c, 0x2b, 0x95, 0xc9,
  911. 0xf6, 0xf5, 0x65, 0xd1 },
  912. },
  913. };
  914. /*
  915. * HMAC-SHA256 test vectors from
  916. * draft-ietf-ipsec-ciph-sha-256-01.txt
  917. */
  918. #define HMAC_SHA256_TEST_VECTORS 10
  919. static struct hash_testvec hmac_sha256_tv_template[] = {
  920. {
  921. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  922. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  923. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  924. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20},
  925. .ksize = 32,
  926. .plaintext = "abc",
  927. .psize = 3,
  928. .digest = { 0xa2, 0x1b, 0x1f, 0x5d, 0x4c, 0xf4, 0xf7, 0x3a,
  929. 0x4d, 0xd9, 0x39, 0x75, 0x0f, 0x7a, 0x06, 0x6a,
  930. 0x7f, 0x98, 0xcc, 0x13, 0x1c, 0xb1, 0x6a, 0x66,
  931. 0x92, 0x75, 0x90, 0x21, 0xcf, 0xab, 0x81, 0x81 },
  932. }, {
  933. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  934. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  935. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  936. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20 },
  937. .ksize = 32,
  938. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  939. .psize = 56,
  940. .digest = { 0x10, 0x4f, 0xdc, 0x12, 0x57, 0x32, 0x8f, 0x08,
  941. 0x18, 0x4b, 0xa7, 0x31, 0x31, 0xc5, 0x3c, 0xae,
  942. 0xe6, 0x98, 0xe3, 0x61, 0x19, 0x42, 0x11, 0x49,
  943. 0xea, 0x8c, 0x71, 0x24, 0x56, 0x69, 0x7d, 0x30 },
  944. }, {
  945. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  946. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  947. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  948. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20 },
  949. .ksize = 32,
  950. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
  951. "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  952. .psize = 112,
  953. .digest = { 0x47, 0x03, 0x05, 0xfc, 0x7e, 0x40, 0xfe, 0x34,
  954. 0xd3, 0xee, 0xb3, 0xe7, 0x73, 0xd9, 0x5a, 0xab,
  955. 0x73, 0xac, 0xf0, 0xfd, 0x06, 0x04, 0x47, 0xa5,
  956. 0xeb, 0x45, 0x95, 0xbf, 0x33, 0xa9, 0xd1, 0xa3 },
  957. }, {
  958. .key = { [0 ... 31] = 0x0b },
  959. .ksize = 32,
  960. .plaintext = "Hi There",
  961. .psize = 8,
  962. .digest = { 0x19, 0x8a, 0x60, 0x7e, 0xb4, 0x4b, 0xfb, 0xc6,
  963. 0x99, 0x03, 0xa0, 0xf1, 0xcf, 0x2b, 0xbd, 0xc5,
  964. 0xba, 0x0a, 0xa3, 0xf3, 0xd9, 0xae, 0x3c, 0x1c,
  965. 0x7a, 0x3b, 0x16, 0x96, 0xa0, 0xb6, 0x8c, 0xf7 },
  966. }, {
  967. .key = "Jefe",
  968. .ksize = 4,
  969. .plaintext = "what do ya want for nothing?",
  970. .psize = 28,
  971. .digest = { 0x5b, 0xdc, 0xc1, 0x46, 0xbf, 0x60, 0x75, 0x4e,
  972. 0x6a, 0x04, 0x24, 0x26, 0x08, 0x95, 0x75, 0xc7,
  973. 0x5a, 0x00, 0x3f, 0x08, 0x9d, 0x27, 0x39, 0x83,
  974. 0x9d, 0xec, 0x58, 0xb9, 0x64, 0xec, 0x38, 0x43 },
  975. .np = 2,
  976. .tap = { 14, 14 }
  977. }, {
  978. .key = { [0 ... 31] = 0xaa },
  979. .ksize = 32,
  980. .plaintext = { [0 ... 49] = 0xdd },
  981. .psize = 50,
  982. .digest = { 0xcd, 0xcb, 0x12, 0x20, 0xd1, 0xec, 0xcc, 0xea,
  983. 0x91, 0xe5, 0x3a, 0xba, 0x30, 0x92, 0xf9, 0x62,
  984. 0xe5, 0x49, 0xfe, 0x6c, 0xe9, 0xed, 0x7f, 0xdc,
  985. 0x43, 0x19, 0x1f, 0xbd, 0xe4, 0x5c, 0x30, 0xb0 },
  986. }, {
  987. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  988. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  989. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  990. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
  991. 0x21, 0x22, 0x23, 0x24, 0x25 },
  992. .ksize = 37,
  993. .plaintext = { [0 ... 49] = 0xcd },
  994. .psize = 50,
  995. .digest = { 0xd4, 0x63, 0x3c, 0x17, 0xf6, 0xfb, 0x8d, 0x74,
  996. 0x4c, 0x66, 0xde, 0xe0, 0xf8, 0xf0, 0x74, 0x55,
  997. 0x6e, 0xc4, 0xaf, 0x55, 0xef, 0x07, 0x99, 0x85,
  998. 0x41, 0x46, 0x8e, 0xb4, 0x9b, 0xd2, 0xe9, 0x17 },
  999. }, {
  1000. .key = { [0 ... 31] = 0x0c },
  1001. .ksize = 32,
  1002. .plaintext = "Test With Truncation",
  1003. .psize = 20,
  1004. .digest = { 0x75, 0x46, 0xaf, 0x01, 0x84, 0x1f, 0xc0, 0x9b,
  1005. 0x1a, 0xb9, 0xc3, 0x74, 0x9a, 0x5f, 0x1c, 0x17,
  1006. 0xd4, 0xf5, 0x89, 0x66, 0x8a, 0x58, 0x7b, 0x27,
  1007. 0x00, 0xa9, 0xc9, 0x7c, 0x11, 0x93, 0xcf, 0x42 },
  1008. }, {
  1009. .key = { [0 ... 79] = 0xaa },
  1010. .ksize = 80,
  1011. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  1012. .psize = 54,
  1013. .digest = { 0x69, 0x53, 0x02, 0x5e, 0xd9, 0x6f, 0x0c, 0x09,
  1014. 0xf8, 0x0a, 0x96, 0xf7, 0x8e, 0x65, 0x38, 0xdb,
  1015. 0xe2, 0xe7, 0xb8, 0x20, 0xe3, 0xdd, 0x97, 0x0e,
  1016. 0x7d, 0xdd, 0x39, 0x09, 0x1b, 0x32, 0x35, 0x2f },
  1017. }, {
  1018. .key = { [0 ... 79] = 0xaa },
  1019. .ksize = 80,
  1020. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than "
  1021. "One Block-Size Data",
  1022. .psize = 73,
  1023. .digest = { 0x63, 0x55, 0xac, 0x22, 0xe8, 0x90, 0xd0, 0xa3,
  1024. 0xc8, 0x48, 0x1a, 0x5c, 0xa4, 0x82, 0x5b, 0xc8,
  1025. 0x84, 0xd3, 0xe7, 0xa1, 0xff, 0x98, 0xa2, 0xfc,
  1026. 0x2a, 0xc7, 0xd8, 0xe0, 0x64, 0xc3, 0xb2, 0xe6 },
  1027. },
  1028. };
  1029. #define XCBC_AES_TEST_VECTORS 6
  1030. static struct hash_testvec aes_xcbc128_tv_template[] = {
  1031. {
  1032. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1033. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1034. .plaintext = { [0 ... 15] = 0 },
  1035. .digest = { 0x75, 0xf0, 0x25, 0x1d, 0x52, 0x8a, 0xc0, 0x1c,
  1036. 0x45, 0x73, 0xdf, 0xd5, 0x84, 0xd7, 0x9f, 0x29 },
  1037. .psize = 0,
  1038. .ksize = 16,
  1039. }, {
  1040. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1041. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1042. .plaintext = { 0x00, 0x01, 0x02 },
  1043. .digest = { 0x5b, 0x37, 0x65, 0x80, 0xae, 0x2f, 0x19, 0xaf,
  1044. 0xe7, 0x21, 0x9c, 0xee, 0xf1, 0x72, 0x75, 0x6f },
  1045. .psize = 3,
  1046. .ksize = 16,
  1047. } , {
  1048. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1049. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1050. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1051. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1052. .digest = { 0xd2, 0xa2, 0x46, 0xfa, 0x34, 0x9b, 0x68, 0xa7,
  1053. 0x99, 0x98, 0xa4, 0x39, 0x4f, 0xf7, 0xa2, 0x63 },
  1054. .psize = 16,
  1055. .ksize = 16,
  1056. }, {
  1057. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1058. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1059. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1060. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1061. 0x10, 0x11, 0x12, 0x13 },
  1062. .digest = { 0x47, 0xf5, 0x1b, 0x45, 0x64, 0x96, 0x62, 0x15,
  1063. 0xb8, 0x98, 0x5c, 0x63, 0x05, 0x5e, 0xd3, 0x08 },
  1064. .tap = { 10, 10 },
  1065. .psize = 20,
  1066. .np = 2,
  1067. .ksize = 16,
  1068. }, {
  1069. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1070. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1071. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1072. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1073. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1074. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1075. .digest = { 0xf5, 0x4f, 0x0e, 0xc8, 0xd2, 0xb9, 0xf3, 0xd3,
  1076. 0x68, 0x07, 0x73, 0x4b, 0xd5, 0x28, 0x3f, 0xd4 },
  1077. .psize = 32,
  1078. .ksize = 16,
  1079. }, {
  1080. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1081. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1082. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1083. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1084. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1085. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  1086. 0x20, 0x21 },
  1087. .digest = { 0xbe, 0xcb, 0xb3, 0xbc, 0xcd, 0xb5, 0x18, 0xa3,
  1088. 0x06, 0x77, 0xd5, 0x48, 0x1f, 0xb6, 0xb4, 0xd8 },
  1089. .tap = { 17, 17 },
  1090. .psize = 34,
  1091. .np = 2,
  1092. .ksize = 16,
  1093. }
  1094. };
  1095. /*
  1096. * SHA384 HMAC test vectors from RFC4231
  1097. */
  1098. #define HMAC_SHA384_TEST_VECTORS 4
  1099. static struct hash_testvec hmac_sha384_tv_template[] = {
  1100. {
  1101. .key = { 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1102. 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1103. 0x0b, 0x0b, 0x0b, 0x0b }, // (20 bytes)
  1104. .ksize = 20,
  1105. .plaintext = { 0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 }, // ("Hi There")
  1106. .psize = 8,
  1107. .digest = { 0xaf, 0xd0, 0x39, 0x44, 0xd8, 0x48, 0x95, 0x62,
  1108. 0x6b, 0x08, 0x25, 0xf4, 0xab, 0x46, 0x90, 0x7f,
  1109. 0x15, 0xf9, 0xda, 0xdb, 0xe4, 0x10, 0x1e, 0xc6,
  1110. 0x82, 0xaa, 0x03, 0x4c, 0x7c, 0xeb, 0xc5, 0x9c,
  1111. 0xfa, 0xea, 0x9e, 0xa9, 0x07, 0x6e, 0xde, 0x7f,
  1112. 0x4a, 0xf1, 0x52, 0xe8, 0xb2, 0xfa, 0x9c, 0xb6 },
  1113. }, {
  1114. .key = { 0x4a, 0x65, 0x66, 0x65 }, // ("Jefe")
  1115. .ksize = 4,
  1116. .plaintext = { 0x77, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x20,
  1117. 0x79, 0x61, 0x20, 0x77, 0x61, 0x6e, 0x74, 0x20, // ("what do ya want ")
  1118. 0x66, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x68,
  1119. 0x69, 0x6e, 0x67, 0x3f }, // ("for nothing?")
  1120. .psize = 28,
  1121. .digest = { 0xaf, 0x45, 0xd2, 0xe3, 0x76, 0x48, 0x40, 0x31,
  1122. 0x61, 0x7f, 0x78, 0xd2, 0xb5, 0x8a, 0x6b, 0x1b,
  1123. 0x9c, 0x7e, 0xf4, 0x64, 0xf5, 0xa0, 0x1b, 0x47,
  1124. 0xe4, 0x2e, 0xc3, 0x73, 0x63, 0x22, 0x44, 0x5e,
  1125. 0x8e, 0x22, 0x40, 0xca, 0x5e, 0x69, 0xe2, 0xc7,
  1126. 0x8b, 0x32, 0x39, 0xec, 0xfa, 0xb2, 0x16, 0x49 },
  1127. .np = 4,
  1128. .tap = { 7, 7, 7, 7 }
  1129. }, {
  1130. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1131. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1132. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1133. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1134. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1135. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1136. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1137. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1138. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1139. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1140. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1141. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1142. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1143. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1144. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1145. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1146. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1147. .ksize = 131,
  1148. .plaintext = { 0x54, 0x65, 0x73, 0x74, 0x20, 0x55, 0x73, 0x69,
  1149. 0x6e, 0x67, 0x20, 0x4c, 0x61, 0x72, 0x67, 0x65, // ("Test Using Large")
  1150. 0x72, 0x20, 0x54, 0x68, 0x61, 0x6e, 0x20, 0x42,
  1151. 0x6c, 0x6f, 0x63, 0x6b, 0x2d, 0x53, 0x69, 0x7a, // ("r Than Block-Siz")
  1152. 0x65, 0x20, 0x4b, 0x65, 0x79, 0x20, 0x2d, 0x20,
  1153. 0x48, 0x61, 0x73, 0x68, 0x20, 0x4b, 0x65, 0x79, // ("e Key - Hash Key")
  1154. 0x20, 0x46, 0x69, 0x72, 0x73, 0x74 }, // (" First")
  1155. .psize = 54,
  1156. .digest = { 0x4e, 0xce, 0x08, 0x44, 0x85, 0x81, 0x3e, 0x90,
  1157. 0x88, 0xd2, 0xc6, 0x3a, 0x04, 0x1b, 0xc5, 0xb4,
  1158. 0x4f, 0x9e, 0xf1, 0x01, 0x2a, 0x2b, 0x58, 0x8f,
  1159. 0x3c, 0xd1, 0x1f, 0x05, 0x03, 0x3a, 0xc4, 0xc6,
  1160. 0x0c, 0x2e, 0xf6, 0xab, 0x40, 0x30, 0xfe, 0x82,
  1161. 0x96, 0x24, 0x8d, 0xf1, 0x63, 0xf4, 0x49, 0x52 },
  1162. }, {
  1163. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1164. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1165. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1166. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1167. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1168. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1169. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1170. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1171. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1172. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1173. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1174. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1175. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1176. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1177. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1178. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1179. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1180. .ksize = 131,
  1181. .plaintext = { 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20,
  1182. 0x61, 0x20, 0x74, 0x65, 0x73, 0x74, 0x20, 0x75, // ("This is a test u")
  1183. 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x6c,
  1184. 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, 0x68, // ("sing a larger th")
  1185. 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b,
  1186. 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x6b, 0x65, // ("an block-size ke")
  1187. 0x79, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20,
  1188. 0x6c, 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, // ("y and a larger t")
  1189. 0x68, 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63,
  1190. 0x6b, 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x64, // ("han block-size d")
  1191. 0x61, 0x74, 0x61, 0x2e, 0x20, 0x54, 0x68, 0x65,
  1192. 0x20, 0x6b, 0x65, 0x79, 0x20, 0x6e, 0x65, 0x65, // ("ata. The key nee")
  1193. 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65,
  1194. 0x20, 0x68, 0x61, 0x73, 0x68, 0x65, 0x64, 0x20, // ("ds to be hashed ")
  1195. 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x62,
  1196. 0x65, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, // ("before being use")
  1197. 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65,
  1198. 0x20, 0x48, 0x4d, 0x41, 0x43, 0x20, 0x61, 0x6c, // ("d by the HMAC al")
  1199. 0x67, 0x6f, 0x72, 0x69, 0x74, 0x68, 0x6d, 0x2e }, // ("gorithm.")
  1200. .psize = 152,
  1201. .digest = { 0x66, 0x17, 0x17, 0x8e, 0x94, 0x1f, 0x02, 0x0d,
  1202. 0x35, 0x1e, 0x2f, 0x25, 0x4e, 0x8f, 0xd3, 0x2c,
  1203. 0x60, 0x24, 0x20, 0xfe, 0xb0, 0xb8, 0xfb, 0x9a,
  1204. 0xdc, 0xce, 0xbb, 0x82, 0x46, 0x1e, 0x99, 0xc5,
  1205. 0xa6, 0x78, 0xcc, 0x31, 0xe7, 0x99, 0x17, 0x6d,
  1206. 0x38, 0x60, 0xe6, 0x11, 0x0c, 0x46, 0x52, 0x3e },
  1207. },
  1208. };
  1209. /*
  1210. * SHA512 HMAC test vectors from RFC4231
  1211. */
  1212. #define HMAC_SHA512_TEST_VECTORS 4
  1213. static struct hash_testvec hmac_sha512_tv_template[] = {
  1214. {
  1215. .key = { 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1216. 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1217. 0x0b, 0x0b, 0x0b, 0x0b }, // (20 bytes)
  1218. .ksize = 20,
  1219. .plaintext = { 0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 }, // ("Hi There")
  1220. .psize = 8,
  1221. .digest = { 0x87, 0xaa, 0x7c, 0xde, 0xa5, 0xef, 0x61, 0x9d,
  1222. 0x4f, 0xf0, 0xb4, 0x24, 0x1a, 0x1d, 0x6c, 0xb0,
  1223. 0x23, 0x79, 0xf4, 0xe2, 0xce, 0x4e, 0xc2, 0x78,
  1224. 0x7a, 0xd0, 0xb3, 0x05, 0x45, 0xe1, 0x7c, 0xde,
  1225. 0xda, 0xa8, 0x33, 0xb7, 0xd6, 0xb8, 0xa7, 0x02,
  1226. 0x03, 0x8b, 0x27, 0x4e, 0xae, 0xa3, 0xf4, 0xe4,
  1227. 0xbe, 0x9d, 0x91, 0x4e, 0xeb, 0x61, 0xf1, 0x70,
  1228. 0x2e, 0x69, 0x6c, 0x20, 0x3a, 0x12, 0x68, 0x54 },
  1229. }, {
  1230. .key = { 0x4a, 0x65, 0x66, 0x65 }, // ("Jefe")
  1231. .ksize = 4,
  1232. .plaintext = { 0x77, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x20,
  1233. 0x79, 0x61, 0x20, 0x77, 0x61, 0x6e, 0x74, 0x20, // ("what do ya want ")
  1234. 0x66, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x68,
  1235. 0x69, 0x6e, 0x67, 0x3f }, // ("for nothing?")
  1236. .psize = 28,
  1237. .digest = { 0x16, 0x4b, 0x7a, 0x7b, 0xfc, 0xf8, 0x19, 0xe2,
  1238. 0xe3, 0x95, 0xfb, 0xe7, 0x3b, 0x56, 0xe0, 0xa3,
  1239. 0x87, 0xbd, 0x64, 0x22, 0x2e, 0x83, 0x1f, 0xd6,
  1240. 0x10, 0x27, 0x0c, 0xd7, 0xea, 0x25, 0x05, 0x54,
  1241. 0x97, 0x58, 0xbf, 0x75, 0xc0, 0x5a, 0x99, 0x4a,
  1242. 0x6d, 0x03, 0x4f, 0x65, 0xf8, 0xf0, 0xe6, 0xfd,
  1243. 0xca, 0xea, 0xb1, 0xa3, 0x4d, 0x4a, 0x6b, 0x4b,
  1244. 0x63, 0x6e, 0x07, 0x0a, 0x38, 0xbc, 0xe7, 0x37 },
  1245. .np = 4,
  1246. .tap = { 7, 7, 7, 7 }
  1247. }, {
  1248. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1249. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1250. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1251. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1252. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1253. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1254. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1255. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1256. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1257. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1258. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1259. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1260. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1261. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1262. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1263. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1264. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1265. .ksize = 131,
  1266. .plaintext = { 0x54, 0x65, 0x73, 0x74, 0x20, 0x55, 0x73, 0x69,
  1267. 0x6e, 0x67, 0x20, 0x4c, 0x61, 0x72, 0x67, 0x65, // ("Test Using Large")
  1268. 0x72, 0x20, 0x54, 0x68, 0x61, 0x6e, 0x20, 0x42,
  1269. 0x6c, 0x6f, 0x63, 0x6b, 0x2d, 0x53, 0x69, 0x7a, // ("r Than Block-Siz")
  1270. 0x65, 0x20, 0x4b, 0x65, 0x79, 0x20, 0x2d, 0x20,
  1271. 0x48, 0x61, 0x73, 0x68, 0x20, 0x4b, 0x65, 0x79, // ("e Key - Hash Key")
  1272. 0x20, 0x46, 0x69, 0x72, 0x73, 0x74 }, // (" First")
  1273. .psize = 54,
  1274. .digest = { 0x80, 0xb2, 0x42, 0x63, 0xc7, 0xc1, 0xa3, 0xeb,
  1275. 0xb7, 0x14, 0x93, 0xc1, 0xdd, 0x7b, 0xe8, 0xb4,
  1276. 0x9b, 0x46, 0xd1, 0xf4, 0x1b, 0x4a, 0xee, 0xc1,
  1277. 0x12, 0x1b, 0x01, 0x37, 0x83, 0xf8, 0xf3, 0x52,
  1278. 0x6b, 0x56, 0xd0, 0x37, 0xe0, 0x5f, 0x25, 0x98,
  1279. 0xbd, 0x0f, 0xd2, 0x21, 0x5d, 0x6a, 0x1e, 0x52,
  1280. 0x95, 0xe6, 0x4f, 0x73, 0xf6, 0x3f, 0x0a, 0xec,
  1281. 0x8b, 0x91, 0x5a, 0x98, 0x5d, 0x78, 0x65, 0x98 },
  1282. }, {
  1283. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1284. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1285. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1286. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1287. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1288. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1289. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1290. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1291. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1292. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1293. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1294. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1295. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1296. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1297. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1298. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1299. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1300. .ksize = 131,
  1301. .plaintext = { 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20,
  1302. 0x61, 0x20, 0x74, 0x65, 0x73, 0x74, 0x20, 0x75, // ("This is a test u")
  1303. 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x6c,
  1304. 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, 0x68, // ("sing a larger th")
  1305. 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b,
  1306. 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x6b, 0x65, // ("an block-size ke")
  1307. 0x79, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20,
  1308. 0x6c, 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, // ("y and a larger t")
  1309. 0x68, 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63,
  1310. 0x6b, 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x64, // ("han block-size d")
  1311. 0x61, 0x74, 0x61, 0x2e, 0x20, 0x54, 0x68, 0x65,
  1312. 0x20, 0x6b, 0x65, 0x79, 0x20, 0x6e, 0x65, 0x65, // ("ata. The key nee")
  1313. 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65,
  1314. 0x20, 0x68, 0x61, 0x73, 0x68, 0x65, 0x64, 0x20, // ("ds to be hashed ")
  1315. 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x62,
  1316. 0x65, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, // ("before being use")
  1317. 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65,
  1318. 0x20, 0x48, 0x4d, 0x41, 0x43, 0x20, 0x61, 0x6c, // ("d by the HMAC al")
  1319. 0x67, 0x6f, 0x72, 0x69, 0x74, 0x68, 0x6d, 0x2e }, // ("gorithm.")
  1320. .psize = 152,
  1321. .digest = { 0xe3, 0x7b, 0x6a, 0x77, 0x5d, 0xc8, 0x7d, 0xba,
  1322. 0xa4, 0xdf, 0xa9, 0xf9, 0x6e, 0x5e, 0x3f, 0xfd,
  1323. 0xde, 0xbd, 0x71, 0xf8, 0x86, 0x72, 0x89, 0x86,
  1324. 0x5d, 0xf5, 0xa3, 0x2d, 0x20, 0xcd, 0xc9, 0x44,
  1325. 0xb6, 0x02, 0x2c, 0xac, 0x3c, 0x49, 0x82, 0xb1,
  1326. 0x0d, 0x5e, 0xeb, 0x55, 0xc3, 0xe4, 0xde, 0x15,
  1327. 0x13, 0x46, 0x76, 0xfb, 0x6d, 0xe0, 0x44, 0x60,
  1328. 0x65, 0xc9, 0x74, 0x40, 0xfa, 0x8c, 0x6a, 0x58 },
  1329. },
  1330. };
  1331. /*
  1332. * DES test vectors.
  1333. */
  1334. #define DES_ENC_TEST_VECTORS 10
  1335. #define DES_DEC_TEST_VECTORS 4
  1336. #define DES_CBC_ENC_TEST_VECTORS 5
  1337. #define DES_CBC_DEC_TEST_VECTORS 4
  1338. #define DES3_EDE_ENC_TEST_VECTORS 3
  1339. #define DES3_EDE_DEC_TEST_VECTORS 3
  1340. static struct cipher_testvec des_enc_tv_template[] = {
  1341. { /* From Applied Cryptography */
  1342. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1343. .klen = 8,
  1344. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1345. .ilen = 8,
  1346. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1347. .rlen = 8,
  1348. }, { /* Same key, different plaintext block */
  1349. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1350. .klen = 8,
  1351. .input = { 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1352. .ilen = 8,
  1353. .result = { 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1354. .rlen = 8,
  1355. }, { /* Sbox test from NBS */
  1356. .key = { 0x7c, 0xa1, 0x10, 0x45, 0x4a, 0x1a, 0x6e, 0x57 },
  1357. .klen = 8,
  1358. .input = { 0x01, 0xa1, 0xd6, 0xd0, 0x39, 0x77, 0x67, 0x42 },
  1359. .ilen = 8,
  1360. .result = { 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1361. .rlen = 8,
  1362. }, { /* Three blocks */
  1363. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1364. .klen = 8,
  1365. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1366. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  1367. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef },
  1368. .ilen = 24,
  1369. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1370. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  1371. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90 },
  1372. .rlen = 24,
  1373. }, { /* Weak key */
  1374. .fail = 1,
  1375. .wk = 1,
  1376. .key = { 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 },
  1377. .klen = 8,
  1378. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1379. .ilen = 8,
  1380. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1381. .rlen = 8,
  1382. }, { /* Two blocks -- for testing encryption across pages */
  1383. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1384. .klen = 8,
  1385. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1386. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1387. .ilen = 16,
  1388. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1389. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1390. .rlen = 16,
  1391. .np = 2,
  1392. .tap = { 8, 8 }
  1393. }, { /* Four blocks -- for testing encryption with chunking */
  1394. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1395. .klen = 8,
  1396. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1397. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  1398. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef,
  1399. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1400. .ilen = 32,
  1401. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1402. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  1403. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90,
  1404. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1405. .rlen = 32,
  1406. .np = 3,
  1407. .tap = { 14, 10, 8 }
  1408. }, {
  1409. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1410. .klen = 8,
  1411. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1412. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  1413. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef },
  1414. .ilen = 24,
  1415. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1416. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  1417. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90 },
  1418. .rlen = 24,
  1419. .np = 4,
  1420. .tap = { 2, 1, 3, 18 }
  1421. }, {
  1422. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1423. .klen = 8,
  1424. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1425. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1426. .ilen = 16,
  1427. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1428. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1429. .rlen = 16,
  1430. .np = 5,
  1431. .tap = { 2, 2, 2, 2, 8 }
  1432. }, {
  1433. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1434. .klen = 8,
  1435. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1436. .ilen = 8,
  1437. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1438. .rlen = 8,
  1439. .np = 8,
  1440. .tap = { 1, 1, 1, 1, 1, 1, 1, 1 }
  1441. },
  1442. };
  1443. static struct cipher_testvec des_dec_tv_template[] = {
  1444. { /* From Applied Cryptography */
  1445. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1446. .klen = 8,
  1447. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1448. .ilen = 8,
  1449. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1450. .rlen = 8,
  1451. }, { /* Sbox test from NBS */
  1452. .key = { 0x7c, 0xa1, 0x10, 0x45, 0x4a, 0x1a, 0x6e, 0x57 },
  1453. .klen = 8,
  1454. .input = { 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1455. .ilen = 8,
  1456. .result = { 0x01, 0xa1, 0xd6, 0xd0, 0x39, 0x77, 0x67, 0x42 },
  1457. .rlen = 8,
  1458. }, { /* Two blocks, for chunking test */
  1459. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1460. .klen = 8,
  1461. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1462. 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1463. .ilen = 16,
  1464. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1465. 0xa3, 0x99, 0x7b, 0xca, 0xaf, 0x69, 0xa0, 0xf5 },
  1466. .rlen = 16,
  1467. .np = 2,
  1468. .tap = { 8, 8 }
  1469. }, {
  1470. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1471. .klen = 8,
  1472. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1473. 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1474. .ilen = 16,
  1475. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1476. 0xa3, 0x99, 0x7b, 0xca, 0xaf, 0x69, 0xa0, 0xf5 },
  1477. .rlen = 16,
  1478. .np = 3,
  1479. .tap = { 3, 12, 1 }
  1480. },
  1481. };
  1482. static struct cipher_testvec des_cbc_enc_tv_template[] = {
  1483. { /* From OpenSSL */
  1484. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef},
  1485. .klen = 8,
  1486. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1487. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1488. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1489. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1490. .ilen = 24,
  1491. .result = { 0xcc, 0xd1, 0x73, 0xff, 0xab, 0x20, 0x39, 0xf4,
  1492. 0xac, 0xd8, 0xae, 0xfd, 0xdf, 0xd8, 0xa1, 0xeb,
  1493. 0x46, 0x8e, 0x91, 0x15, 0x78, 0x88, 0xba, 0x68 },
  1494. .rlen = 24,
  1495. }, { /* FIPS Pub 81 */
  1496. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1497. .klen = 8,
  1498. .iv = { 0x12, 0x34, 0x56, 0x78, 0x90, 0xab, 0xcd, 0xef },
  1499. .input = { 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74 },
  1500. .ilen = 8,
  1501. .result = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1502. .rlen = 8,
  1503. }, {
  1504. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1505. .klen = 8,
  1506. .iv = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1507. .input = { 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1508. .ilen = 8,
  1509. .result = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1510. .rlen = 8,
  1511. }, {
  1512. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1513. .klen = 8,
  1514. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1515. .input = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1516. .ilen = 8,
  1517. .result = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1518. .rlen = 8,
  1519. }, { /* Copy of openssl vector for chunk testing */
  1520. /* From OpenSSL */
  1521. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef},
  1522. .klen = 8,
  1523. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1524. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1525. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1526. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1527. .ilen = 24,
  1528. .result = { 0xcc, 0xd1, 0x73, 0xff, 0xab, 0x20, 0x39, 0xf4,
  1529. 0xac, 0xd8, 0xae, 0xfd, 0xdf, 0xd8, 0xa1, 0xeb,
  1530. 0x46, 0x8e, 0x91, 0x15, 0x78, 0x88, 0xba, 0x68 },
  1531. .rlen = 24,
  1532. .np = 2,
  1533. .tap = { 13, 11 }
  1534. },
  1535. };
  1536. static struct cipher_testvec des_cbc_dec_tv_template[] = {
  1537. { /* FIPS Pub 81 */
  1538. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1539. .klen = 8,
  1540. .iv = { 0x12, 0x34, 0x56, 0x78, 0x90, 0xab, 0xcd, 0xef },
  1541. .input = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1542. .ilen = 8,
  1543. .result = { 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74 },
  1544. .rlen = 8,
  1545. }, {
  1546. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1547. .klen = 8,
  1548. .iv = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1549. .input = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1550. .ilen = 8,
  1551. .result = { 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1552. .rlen = 8,
  1553. }, {
  1554. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1555. .klen = 8,
  1556. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1557. .input = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1558. .ilen = 8,
  1559. .result = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1560. .rlen = 8,
  1561. }, { /* Copy of above, for chunk testing */
  1562. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1563. .klen = 8,
  1564. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1565. .input = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1566. .ilen = 8,
  1567. .result = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1568. .rlen = 8,
  1569. .np = 2,
  1570. .tap = { 4, 4 }
  1571. },
  1572. };
  1573. /*
  1574. * We really need some more test vectors, especially for DES3 CBC.
  1575. */
  1576. static struct cipher_testvec des3_ede_enc_tv_template[] = {
  1577. { /* These are from openssl */
  1578. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1579. 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
  1580. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1581. .klen = 24,
  1582. .input = { 0x73, 0x6f, 0x6d, 0x65, 0x64, 0x61, 0x74, 0x61 },
  1583. .ilen = 8,
  1584. .result = { 0x18, 0xd7, 0x48, 0xe5, 0x63, 0x62, 0x05, 0x72 },
  1585. .rlen = 8,
  1586. }, {
  1587. .key = { 0x03, 0x52, 0x02, 0x07, 0x67, 0x20, 0x82, 0x17,
  1588. 0x86, 0x02, 0x87, 0x66, 0x59, 0x08, 0x21, 0x98,
  1589. 0x64, 0x05, 0x6a, 0xbd, 0xfe, 0xa9, 0x34, 0x57 },
  1590. .klen = 24,
  1591. .input = { 0x73, 0x71, 0x75, 0x69, 0x67, 0x67, 0x6c, 0x65 },
  1592. .ilen = 8,
  1593. .result = { 0xc0, 0x7d, 0x2a, 0x0f, 0xa5, 0x66, 0xfa, 0x30 },
  1594. .rlen = 8,
  1595. }, {
  1596. .key = { 0x10, 0x46, 0x10, 0x34, 0x89, 0x98, 0x80, 0x20,
  1597. 0x91, 0x07, 0xd0, 0x15, 0x89, 0x19, 0x01, 0x01,
  1598. 0x19, 0x07, 0x92, 0x10, 0x98, 0x1a, 0x01, 0x01 },
  1599. .klen = 24,
  1600. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1601. .ilen = 8,
  1602. .result = { 0xe1, 0xef, 0x62, 0xc3, 0x32, 0xfe, 0x82, 0x5b },
  1603. .rlen = 8,
  1604. },
  1605. };
  1606. static struct cipher_testvec des3_ede_dec_tv_template[] = {
  1607. { /* These are from openssl */
  1608. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1609. 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
  1610. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1611. .klen = 24,
  1612. .input = { 0x18, 0xd7, 0x48, 0xe5, 0x63, 0x62, 0x05, 0x72 },
  1613. .ilen = 8,
  1614. .result = { 0x73, 0x6f, 0x6d, 0x65, 0x64, 0x61, 0x74, 0x61 },
  1615. .rlen = 8,
  1616. }, {
  1617. .key = { 0x03, 0x52, 0x02, 0x07, 0x67, 0x20, 0x82, 0x17,
  1618. 0x86, 0x02, 0x87, 0x66, 0x59, 0x08, 0x21, 0x98,
  1619. 0x64, 0x05, 0x6a, 0xbd, 0xfe, 0xa9, 0x34, 0x57 },
  1620. .klen = 24,
  1621. .input = { 0xc0, 0x7d, 0x2a, 0x0f, 0xa5, 0x66, 0xfa, 0x30 },
  1622. .ilen = 8,
  1623. .result = { 0x73, 0x71, 0x75, 0x69, 0x67, 0x67, 0x6c, 0x65 },
  1624. .rlen = 8,
  1625. }, {
  1626. .key = { 0x10, 0x46, 0x10, 0x34, 0x89, 0x98, 0x80, 0x20,
  1627. 0x91, 0x07, 0xd0, 0x15, 0x89, 0x19, 0x01, 0x01,
  1628. 0x19, 0x07, 0x92, 0x10, 0x98, 0x1a, 0x01, 0x01 },
  1629. .klen = 24,
  1630. .input = { 0xe1, 0xef, 0x62, 0xc3, 0x32, 0xfe, 0x82, 0x5b },
  1631. .ilen = 8,
  1632. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1633. .rlen = 8,
  1634. },
  1635. };
  1636. /*
  1637. * Blowfish test vectors.
  1638. */
  1639. #define BF_ENC_TEST_VECTORS 6
  1640. #define BF_DEC_TEST_VECTORS 6
  1641. #define BF_CBC_ENC_TEST_VECTORS 1
  1642. #define BF_CBC_DEC_TEST_VECTORS 1
  1643. static struct cipher_testvec bf_enc_tv_template[] = {
  1644. { /* DES test vectors from OpenSSL */
  1645. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, },
  1646. .klen = 8,
  1647. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1648. .ilen = 8,
  1649. .result = { 0x4e, 0xf9, 0x97, 0x45, 0x61, 0x98, 0xdd, 0x78 },
  1650. .rlen = 8,
  1651. }, {
  1652. .key = { 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e },
  1653. .klen = 8,
  1654. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1655. .ilen = 8,
  1656. .result = { 0xa7, 0x90, 0x79, 0x51, 0x08, 0xea, 0x3c, 0xae },
  1657. .rlen = 8,
  1658. }, {
  1659. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1660. .klen = 8,
  1661. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1662. .ilen = 8,
  1663. .result = { 0xe8, 0x7a, 0x24, 0x4e, 0x2c, 0xc8, 0x5e, 0x82 },
  1664. .rlen = 8,
  1665. }, { /* Vary the keylength... */
  1666. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1667. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f },
  1668. .klen = 16,
  1669. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1670. .ilen = 8,
  1671. .result = { 0x93, 0x14, 0x28, 0x87, 0xee, 0x3b, 0xe1, 0x5c },
  1672. .rlen = 8,
  1673. }, {
  1674. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1675. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1676. 0x00, 0x11, 0x22, 0x33, 0x44 },
  1677. .klen = 21,
  1678. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1679. .ilen = 8,
  1680. .result = { 0xe6, 0xf5, 0x1e, 0xd7, 0x9b, 0x9d, 0xb2, 0x1f },
  1681. .rlen = 8,
  1682. }, { /* Generated with bf488 */
  1683. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1684. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1685. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1686. 0x04, 0x68, 0x91, 0x04, 0xc2, 0xfd, 0x3b, 0x2f,
  1687. 0x58, 0x40, 0x23, 0x64, 0x1a, 0xba, 0x61, 0x76,
  1688. 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e,
  1689. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  1690. .klen = 56,
  1691. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1692. .ilen = 8,
  1693. .result = { 0xc0, 0x45, 0x04, 0x01, 0x2e, 0x4e, 0x1f, 0x53 },
  1694. .rlen = 8,
  1695. },
  1696. };
  1697. static struct cipher_testvec bf_dec_tv_template[] = {
  1698. { /* DES test vectors from OpenSSL */
  1699. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1700. .klen = 8,
  1701. .input = { 0x4e, 0xf9, 0x97, 0x45, 0x61, 0x98, 0xdd, 0x78 },
  1702. .ilen = 8,
  1703. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1704. .rlen = 8,
  1705. }, {
  1706. .key = { 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e },
  1707. .klen = 8,
  1708. .input = { 0xa7, 0x90, 0x79, 0x51, 0x08, 0xea, 0x3c, 0xae },
  1709. .ilen = 8,
  1710. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1711. .rlen = 8,
  1712. }, {
  1713. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1714. .klen = 8,
  1715. .input = { 0xe8, 0x7a, 0x24, 0x4e, 0x2c, 0xc8, 0x5e, 0x82 },
  1716. .ilen = 8,
  1717. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1718. .rlen = 8,
  1719. }, { /* Vary the keylength... */
  1720. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1721. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f },
  1722. .klen = 16,
  1723. .input = { 0x93, 0x14, 0x28, 0x87, 0xee, 0x3b, 0xe1, 0x5c },
  1724. .ilen = 8,
  1725. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1726. .rlen = 8,
  1727. }, {
  1728. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1729. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1730. 0x00, 0x11, 0x22, 0x33, 0x44 },
  1731. .klen = 21,
  1732. .input = { 0xe6, 0xf5, 0x1e, 0xd7, 0x9b, 0x9d, 0xb2, 0x1f },
  1733. .ilen = 8,
  1734. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1735. .rlen = 8,
  1736. }, { /* Generated with bf488, using OpenSSL, Libgcrypt and Nettle */
  1737. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1738. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1739. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1740. 0x04, 0x68, 0x91, 0x04, 0xc2, 0xfd, 0x3b, 0x2f,
  1741. 0x58, 0x40, 0x23, 0x64, 0x1a, 0xba, 0x61, 0x76,
  1742. 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e,
  1743. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  1744. .klen = 56,
  1745. .input = { 0xc0, 0x45, 0x04, 0x01, 0x2e, 0x4e, 0x1f, 0x53 },
  1746. .ilen = 8,
  1747. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1748. .rlen = 8,
  1749. },
  1750. };
  1751. static struct cipher_testvec bf_cbc_enc_tv_template[] = {
  1752. { /* From OpenSSL */
  1753. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1754. 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1755. .klen = 16,
  1756. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1757. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1758. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1759. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20,
  1760. 0x66, 0x6f, 0x72, 0x20, 0x00, 0x00, 0x00, 0x00 },
  1761. .ilen = 32,
  1762. .result = { 0x6b, 0x77, 0xb4, 0xd6, 0x30, 0x06, 0xde, 0xe6,
  1763. 0x05, 0xb1, 0x56, 0xe2, 0x74, 0x03, 0x97, 0x93,
  1764. 0x58, 0xde, 0xb9, 0xe7, 0x15, 0x46, 0x16, 0xd9,
  1765. 0x59, 0xf1, 0x65, 0x2b, 0xd5, 0xff, 0x92, 0xcc },
  1766. .rlen = 32,
  1767. },
  1768. };
  1769. static struct cipher_testvec bf_cbc_dec_tv_template[] = {
  1770. { /* From OpenSSL */
  1771. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1772. 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1773. .klen = 16,
  1774. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1775. .input = { 0x6b, 0x77, 0xb4, 0xd6, 0x30, 0x06, 0xde, 0xe6,
  1776. 0x05, 0xb1, 0x56, 0xe2, 0x74, 0x03, 0x97, 0x93,
  1777. 0x58, 0xde, 0xb9, 0xe7, 0x15, 0x46, 0x16, 0xd9,
  1778. 0x59, 0xf1, 0x65, 0x2b, 0xd5, 0xff, 0x92, 0xcc },
  1779. .ilen = 32,
  1780. .result = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1781. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1782. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20,
  1783. 0x66, 0x6f, 0x72, 0x20, 0x00, 0x00, 0x00, 0x00 },
  1784. .rlen = 32,
  1785. },
  1786. };
  1787. /*
  1788. * Twofish test vectors.
  1789. */
  1790. #define TF_ENC_TEST_VECTORS 3
  1791. #define TF_DEC_TEST_VECTORS 3
  1792. #define TF_CBC_ENC_TEST_VECTORS 4
  1793. #define TF_CBC_DEC_TEST_VECTORS 4
  1794. static struct cipher_testvec tf_enc_tv_template[] = {
  1795. {
  1796. .key = { [0 ... 15] = 0x00 },
  1797. .klen = 16,
  1798. .input = { [0 ... 15] = 0x00 },
  1799. .ilen = 16,
  1800. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1801. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1802. .rlen = 16,
  1803. }, {
  1804. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1805. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1806. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  1807. .klen = 24,
  1808. .input = { [0 ... 15] = 0x00 },
  1809. .ilen = 16,
  1810. .result = { 0xcf, 0xd1, 0xd2, 0xe5, 0xa9, 0xbe, 0x9c, 0xdf,
  1811. 0x50, 0x1f, 0x13, 0xb8, 0x92, 0xbd, 0x22, 0x48 },
  1812. .rlen = 16,
  1813. }, {
  1814. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1815. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1816. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1817. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1818. .klen = 32,
  1819. .input = { [0 ... 15] = 0x00 },
  1820. .ilen = 16,
  1821. .result = { 0x37, 0x52, 0x7b, 0xe0, 0x05, 0x23, 0x34, 0xb8,
  1822. 0x9f, 0x0c, 0xfc, 0xca, 0xe8, 0x7c, 0xfa, 0x20 },
  1823. .rlen = 16,
  1824. },
  1825. };
  1826. static struct cipher_testvec tf_dec_tv_template[] = {
  1827. {
  1828. .key = { [0 ... 15] = 0x00 },
  1829. .klen = 16,
  1830. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1831. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1832. .ilen = 16,
  1833. .result = { [0 ... 15] = 0x00 },
  1834. .rlen = 16,
  1835. }, {
  1836. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1837. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1838. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  1839. .klen = 24,
  1840. .input = { 0xcf, 0xd1, 0xd2, 0xe5, 0xa9, 0xbe, 0x9c, 0xdf,
  1841. 0x50, 0x1f, 0x13, 0xb8, 0x92, 0xbd, 0x22, 0x48 },
  1842. .ilen = 16,
  1843. .result = { [0 ... 15] = 0x00 },
  1844. .rlen = 16,
  1845. }, {
  1846. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1847. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1848. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1849. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1850. .klen = 32,
  1851. .input = { 0x37, 0x52, 0x7b, 0xe0, 0x05, 0x23, 0x34, 0xb8,
  1852. 0x9f, 0x0c, 0xfc, 0xca, 0xe8, 0x7c, 0xfa, 0x20 },
  1853. .ilen = 16,
  1854. .result = { [0 ... 15] = 0x00 },
  1855. .rlen = 16,
  1856. },
  1857. };
  1858. static struct cipher_testvec tf_cbc_enc_tv_template[] = {
  1859. { /* Generated with Nettle */
  1860. .key = { [0 ... 15] = 0x00 },
  1861. .klen = 16,
  1862. .iv = { [0 ... 15] = 0x00 },
  1863. .input = { [0 ... 15] = 0x00 },
  1864. .ilen = 16,
  1865. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1866. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1867. .rlen = 16,
  1868. }, {
  1869. .key = { [0 ... 15] = 0x00 },
  1870. .klen = 16,
  1871. .iv = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1872. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1873. .input = { [0 ... 15] = 0x00 },
  1874. .ilen = 16,
  1875. .result = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1876. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1877. .rlen = 16,
  1878. }, {
  1879. .key = { [0 ... 15] = 0x00 },
  1880. .klen = 16,
  1881. .iv = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1882. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1883. .input = { [0 ... 15] = 0x00 },
  1884. .ilen = 16,
  1885. .result = { 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1886. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1887. .rlen = 16,
  1888. }, {
  1889. .key = { [0 ... 15] = 0x00 },
  1890. .klen = 16,
  1891. .iv = { [0 ... 15] = 0x00 },
  1892. .input = { [0 ... 47] = 0x00 },
  1893. .ilen = 48,
  1894. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1895. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a,
  1896. 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1897. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19,
  1898. 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1899. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1900. .rlen = 48,
  1901. },
  1902. };
  1903. static struct cipher_testvec tf_cbc_dec_tv_template[] = {
  1904. { /* Reverse of the first four above */
  1905. .key = { [0 ... 15] = 0x00 },
  1906. .klen = 16,
  1907. .iv = { [0 ... 15] = 0x00 },
  1908. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1909. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1910. .ilen = 16,
  1911. .result = { [0 ... 15] = 0x00 },
  1912. .rlen = 16,
  1913. }, {
  1914. .key = { [0 ... 15] = 0x00 },
  1915. .klen = 16,
  1916. .iv = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1917. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1918. .input = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1919. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1920. .ilen = 16,
  1921. .result = { [0 ... 15] = 0x00 },
  1922. .rlen = 16,
  1923. }, {
  1924. .key = { [0 ... 15] = 0x00 },
  1925. .klen = 16,
  1926. .iv = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1927. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1928. .input = { 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1929. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1930. .ilen = 16,
  1931. .result = { [0 ... 15] = 0x00 },
  1932. .rlen = 16,
  1933. }, {
  1934. .key = { [0 ... 15] = 0x00 },
  1935. .klen = 16,
  1936. .iv = { [0 ... 15] = 0x00 },
  1937. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1938. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a,
  1939. 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1940. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19,
  1941. 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1942. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1943. .ilen = 48,
  1944. .result = { [0 ... 47] = 0x00 },
  1945. .rlen = 48,
  1946. },
  1947. };
  1948. /*
  1949. * Serpent test vectors. These are backwards because Serpent writes
  1950. * octet sequences in right-to-left mode.
  1951. */
  1952. #define SERPENT_ENC_TEST_VECTORS 4
  1953. #define SERPENT_DEC_TEST_VECTORS 4
  1954. #define TNEPRES_ENC_TEST_VECTORS 4
  1955. #define TNEPRES_DEC_TEST_VECTORS 4
  1956. static struct cipher_testvec serpent_enc_tv_template[] = {
  1957. {
  1958. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1959. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1960. .ilen = 16,
  1961. .result = { 0x12, 0x07, 0xfc, 0xce, 0x9b, 0xd0, 0xd6, 0x47,
  1962. 0x6a, 0xe9, 0x8f, 0xbe, 0xd1, 0x43, 0xa0, 0xe2 },
  1963. .rlen = 16,
  1964. }, {
  1965. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1966. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1967. .klen = 16,
  1968. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1969. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1970. .ilen = 16,
  1971. .result = { 0x4c, 0x7d, 0x8a, 0x32, 0x80, 0x72, 0xa2, 0x2c,
  1972. 0x82, 0x3e, 0x4a, 0x1f, 0x3a, 0xcd, 0xa1, 0x6d },
  1973. .rlen = 16,
  1974. }, {
  1975. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1976. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1977. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1978. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1979. .klen = 32,
  1980. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1981. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1982. .ilen = 16,
  1983. .result = { 0xde, 0x26, 0x9f, 0xf8, 0x33, 0xe4, 0x32, 0xb8,
  1984. 0x5b, 0x2e, 0x88, 0xd2, 0x70, 0x1c, 0xe7, 0x5c },
  1985. .rlen = 16,
  1986. }, {
  1987. .key = { [15] = 0x80 },
  1988. .klen = 16,
  1989. .input = { [0 ... 15] = 0x00 },
  1990. .ilen = 16,
  1991. .result = { 0xdd, 0xd2, 0x6b, 0x98, 0xa5, 0xff, 0xd8, 0x2c,
  1992. 0x05, 0x34, 0x5a, 0x9d, 0xad, 0xbf, 0xaf, 0x49},
  1993. .rlen = 16,
  1994. },
  1995. };
  1996. static struct cipher_testvec tnepres_enc_tv_template[] = {
  1997. { /* KeySize=128, PT=0, I=1 */
  1998. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1999. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2000. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2001. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2002. .klen = 16,
  2003. .ilen = 16,
  2004. .result = { 0x49, 0xaf, 0xbf, 0xad, 0x9d, 0x5a, 0x34, 0x05,
  2005. 0x2c, 0xd8, 0xff, 0xa5, 0x98, 0x6b, 0xd2, 0xdd },
  2006. .rlen = 16,
  2007. }, { /* KeySize=192, PT=0, I=1 */
  2008. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2009. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2010. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2011. .klen = 24,
  2012. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2013. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2014. .ilen = 16,
  2015. .result = { 0xe7, 0x8e, 0x54, 0x02, 0xc7, 0x19, 0x55, 0x68,
  2016. 0xac, 0x36, 0x78, 0xf7, 0xa3, 0xf6, 0x0c, 0x66 },
  2017. .rlen = 16,
  2018. }, { /* KeySize=256, PT=0, I=1 */
  2019. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2020. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2021. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2022. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2023. .klen = 32,
  2024. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2025. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2026. .ilen = 16,
  2027. .result = { 0xab, 0xed, 0x96, 0xe7, 0x66, 0xbf, 0x28, 0xcb,
  2028. 0xc0, 0xeb, 0xd2, 0x1a, 0x82, 0xef, 0x08, 0x19 },
  2029. .rlen = 16,
  2030. }, { /* KeySize=256, I=257 */
  2031. .key = { 0x1f, 0x1e, 0x1d, 0x1c, 0x1b, 0x1a, 0x19, 0x18,
  2032. 0x17, 0x16, 0x15, 0x14, 0x13, 0x12, 0x11, 0x10,
  2033. 0x0f, 0x0e, 0x0d, 0x0c, 0x0b, 0x0a, 0x09, 0x08,
  2034. 0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00 },
  2035. .klen = 32,
  2036. .input = { 0x0f, 0x0e, 0x0d, 0x0c, 0x0b, 0x0a, 0x09, 0x08,
  2037. 0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00 },
  2038. .ilen = 16,
  2039. .result = { 0x5c, 0xe7, 0x1c, 0x70, 0xd2, 0x88, 0x2e, 0x5b,
  2040. 0xb8, 0x32, 0xe4, 0x33, 0xf8, 0x9f, 0x26, 0xde },
  2041. .rlen = 16,
  2042. },
  2043. };
  2044. static struct cipher_testvec serpent_dec_tv_template[] = {
  2045. {
  2046. .input = { 0x12, 0x07, 0xfc, 0xce, 0x9b, 0xd0, 0xd6, 0x47,
  2047. 0x6a, 0xe9, 0x8f, 0xbe, 0xd1, 0x43, 0xa0, 0xe2 },
  2048. .ilen = 16,
  2049. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2050. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2051. .rlen = 16,
  2052. }, {
  2053. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2054. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2055. .klen = 16,
  2056. .input = { 0x4c, 0x7d, 0x8a, 0x32, 0x80, 0x72, 0xa2, 0x2c,
  2057. 0x82, 0x3e, 0x4a, 0x1f, 0x3a, 0xcd, 0xa1, 0x6d },
  2058. .ilen = 16,
  2059. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2060. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2061. .rlen = 16,
  2062. }, {
  2063. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2064. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2065. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2066. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2067. .klen = 32,
  2068. .input = { 0xde, 0x26, 0x9f, 0xf8, 0x33, 0xe4, 0x32, 0xb8,
  2069. 0x5b, 0x2e, 0x88, 0xd2, 0x70, 0x1c, 0xe7, 0x5c },
  2070. .ilen = 16,
  2071. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2072. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2073. .rlen = 16,
  2074. }, {
  2075. .key = { [15] = 0x80 },
  2076. .klen = 16,
  2077. .input = { 0xdd, 0xd2, 0x6b, 0x98, 0xa5, 0xff, 0xd8, 0x2c,
  2078. 0x05, 0x34, 0x5a, 0x9d, 0xad, 0xbf, 0xaf, 0x49},
  2079. .ilen = 16,
  2080. .result = { [0 ... 15] = 0x00 },
  2081. .rlen = 16,
  2082. },
  2083. };
  2084. static struct cipher_testvec tnepres_dec_tv_template[] = {
  2085. {
  2086. .input = { 0x41, 0xcc, 0x6b, 0x31, 0x59, 0x31, 0x45, 0x97,
  2087. 0x6d, 0x6f, 0xbb, 0x38, 0x4b, 0x37, 0x21, 0x28 },
  2088. .ilen = 16,
  2089. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2090. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2091. .rlen = 16,
  2092. }, {
  2093. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2094. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2095. .klen = 16,
  2096. .input = { 0xea, 0xf4, 0xd7, 0xfc, 0xd8, 0x01, 0x34, 0x47,
  2097. 0x81, 0x45, 0x0b, 0xfa, 0x0c, 0xd6, 0xad, 0x6e },
  2098. .ilen = 16,
  2099. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2100. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2101. .rlen = 16,
  2102. }, {
  2103. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2104. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2105. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2106. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2107. .klen = 32,
  2108. .input = { 0x64, 0xa9, 0x1a, 0x37, 0xed, 0x9f, 0xe7, 0x49,
  2109. 0xa8, 0x4e, 0x76, 0xd6, 0xf5, 0x0d, 0x78, 0xee },
  2110. .ilen = 16,
  2111. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2112. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2113. .rlen = 16,
  2114. }, { /* KeySize=128, I=121 */
  2115. .key = { [15] = 0x80 },
  2116. .klen = 16,
  2117. .input = { 0x3d, 0xda, 0xbf, 0xc0, 0x06, 0xda, 0xab, 0x06,
  2118. 0x46, 0x2a, 0xf4, 0xef, 0x81, 0x54, 0x4e, 0x26 },
  2119. .ilen = 16,
  2120. .result = { [0 ... 15] = 0x00 },
  2121. .rlen = 16,
  2122. },
  2123. };
  2124. /* Cast6 test vectors from RFC 2612 */
  2125. #define CAST6_ENC_TEST_VECTORS 3
  2126. #define CAST6_DEC_TEST_VECTORS 3
  2127. static struct cipher_testvec cast6_enc_tv_template[] = {
  2128. {
  2129. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2130. 0x0a, 0xf7, 0x56, 0x47, 0xf2, 0x9f, 0x61, 0x5d },
  2131. .klen = 16,
  2132. .input = { [0 ... 15] = 0x00 },
  2133. .ilen = 16,
  2134. .result = { 0xc8, 0x42, 0xa0, 0x89, 0x72, 0xb4, 0x3d, 0x20,
  2135. 0x83, 0x6c, 0x91, 0xd1, 0xb7, 0x53, 0x0f, 0x6b },
  2136. .rlen = 16,
  2137. }, {
  2138. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2139. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2140. 0xba, 0xc7, 0x7a, 0x77, 0x17, 0x94, 0x28, 0x63 },
  2141. .klen = 24,
  2142. .input = { [0 ... 15] = 0x00 },
  2143. .ilen = 16,
  2144. .result = { 0x1b, 0x38, 0x6c, 0x02, 0x10, 0xdc, 0xad, 0xcb,
  2145. 0xdd, 0x0e, 0x41, 0xaa, 0x08, 0xa7, 0xa7, 0xe8 },
  2146. .rlen = 16,
  2147. }, {
  2148. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2149. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2150. 0x8d, 0x7c, 0x47, 0xce, 0x26, 0x49, 0x08, 0x46,
  2151. 0x1c, 0xc1, 0xb5, 0x13, 0x7a, 0xe6, 0xb6, 0x04 },
  2152. .klen = 32,
  2153. .input = { [0 ... 15] = 0x00 },
  2154. .ilen = 16,
  2155. .result = { 0x4f, 0x6a, 0x20, 0x38, 0x28, 0x68, 0x97, 0xb9,
  2156. 0xc9, 0x87, 0x01, 0x36, 0x55, 0x33, 0x17, 0xfa },
  2157. .rlen = 16,
  2158. },
  2159. };
  2160. static struct cipher_testvec cast6_dec_tv_template[] = {
  2161. {
  2162. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2163. 0x0a, 0xf7, 0x56, 0x47, 0xf2, 0x9f, 0x61, 0x5d },
  2164. .klen = 16,
  2165. .input = { 0xc8, 0x42, 0xa0, 0x89, 0x72, 0xb4, 0x3d, 0x20,
  2166. 0x83, 0x6c, 0x91, 0xd1, 0xb7, 0x53, 0x0f, 0x6b },
  2167. .ilen = 16,
  2168. .result = { [0 ... 15] = 0x00 },
  2169. .rlen = 16,
  2170. }, {
  2171. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2172. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2173. 0xba, 0xc7, 0x7a, 0x77, 0x17, 0x94, 0x28, 0x63 },
  2174. .klen = 24,
  2175. .input = { 0x1b, 0x38, 0x6c, 0x02, 0x10, 0xdc, 0xad, 0xcb,
  2176. 0xdd, 0x0e, 0x41, 0xaa, 0x08, 0xa7, 0xa7, 0xe8 },
  2177. .ilen = 16,
  2178. .result = { [0 ... 15] = 0x00 },
  2179. .rlen = 16,
  2180. }, {
  2181. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2182. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2183. 0x8d, 0x7c, 0x47, 0xce, 0x26, 0x49, 0x08, 0x46,
  2184. 0x1c, 0xc1, 0xb5, 0x13, 0x7a, 0xe6, 0xb6, 0x04 },
  2185. .klen = 32,
  2186. .input = { 0x4f, 0x6a, 0x20, 0x38, 0x28, 0x68, 0x97, 0xb9,
  2187. 0xc9, 0x87, 0x01, 0x36, 0x55, 0x33, 0x17, 0xfa },
  2188. .ilen = 16,
  2189. .result = { [0 ... 15] = 0x00 },
  2190. .rlen = 16,
  2191. },
  2192. };
  2193. /*
  2194. * AES test vectors.
  2195. */
  2196. #define AES_ENC_TEST_VECTORS 3
  2197. #define AES_DEC_TEST_VECTORS 3
  2198. #define AES_CBC_ENC_TEST_VECTORS 2
  2199. #define AES_CBC_DEC_TEST_VECTORS 2
  2200. #define AES_LRW_ENC_TEST_VECTORS 8
  2201. #define AES_LRW_DEC_TEST_VECTORS 8
  2202. #define AES_XTS_ENC_TEST_VECTORS 4
  2203. #define AES_XTS_DEC_TEST_VECTORS 4
  2204. #define AES_CTR_ENC_TEST_VECTORS 6
  2205. #define AES_CTR_DEC_TEST_VECTORS 6
  2206. static struct cipher_testvec aes_enc_tv_template[] = {
  2207. { /* From FIPS-197 */
  2208. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2209. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2210. .klen = 16,
  2211. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2212. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2213. .ilen = 16,
  2214. .result = { 0x69, 0xc4, 0xe0, 0xd8, 0x6a, 0x7b, 0x04, 0x30,
  2215. 0xd8, 0xcd, 0xb7, 0x80, 0x70, 0xb4, 0xc5, 0x5a },
  2216. .rlen = 16,
  2217. }, {
  2218. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2219. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2220. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17 },
  2221. .klen = 24,
  2222. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2223. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2224. .ilen = 16,
  2225. .result = { 0xdd, 0xa9, 0x7c, 0xa4, 0x86, 0x4c, 0xdf, 0xe0,
  2226. 0x6e, 0xaf, 0x70, 0xa0, 0xec, 0x0d, 0x71, 0x91 },
  2227. .rlen = 16,
  2228. }, {
  2229. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2230. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2231. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2232. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2233. .klen = 32,
  2234. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2235. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2236. .ilen = 16,
  2237. .result = { 0x8e, 0xa2, 0xb7, 0xca, 0x51, 0x67, 0x45, 0xbf,
  2238. 0xea, 0xfc, 0x49, 0x90, 0x4b, 0x49, 0x60, 0x89 },
  2239. .rlen = 16,
  2240. },
  2241. };
  2242. static struct cipher_testvec aes_dec_tv_template[] = {
  2243. { /* From FIPS-197 */
  2244. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2245. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2246. .klen = 16,
  2247. .input = { 0x69, 0xc4, 0xe0, 0xd8, 0x6a, 0x7b, 0x04, 0x30,
  2248. 0xd8, 0xcd, 0xb7, 0x80, 0x70, 0xb4, 0xc5, 0x5a },
  2249. .ilen = 16,
  2250. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2251. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2252. .rlen = 16,
  2253. }, {
  2254. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2255. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2256. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17 },
  2257. .klen = 24,
  2258. .input = { 0xdd, 0xa9, 0x7c, 0xa4, 0x86, 0x4c, 0xdf, 0xe0,
  2259. 0x6e, 0xaf, 0x70, 0xa0, 0xec, 0x0d, 0x71, 0x91 },
  2260. .ilen = 16,
  2261. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2262. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2263. .rlen = 16,
  2264. }, {
  2265. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2266. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2267. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2268. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2269. .klen = 32,
  2270. .input = { 0x8e, 0xa2, 0xb7, 0xca, 0x51, 0x67, 0x45, 0xbf,
  2271. 0xea, 0xfc, 0x49, 0x90, 0x4b, 0x49, 0x60, 0x89 },
  2272. .ilen = 16,
  2273. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2274. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2275. .rlen = 16,
  2276. },
  2277. };
  2278. static struct cipher_testvec aes_cbc_enc_tv_template[] = {
  2279. { /* From RFC 3602 */
  2280. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  2281. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  2282. .klen = 16,
  2283. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  2284. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  2285. .input = { "Single block msg" },
  2286. .ilen = 16,
  2287. .result = { 0xe3, 0x53, 0x77, 0x9c, 0x10, 0x79, 0xae, 0xb8,
  2288. 0x27, 0x08, 0x94, 0x2d, 0xbe, 0x77, 0x18, 0x1a },
  2289. .rlen = 16,
  2290. }, {
  2291. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  2292. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  2293. .klen = 16,
  2294. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  2295. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  2296. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2297. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2298. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2299. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2300. .ilen = 32,
  2301. .result = { 0xd2, 0x96, 0xcd, 0x94, 0xc2, 0xcc, 0xcf, 0x8a,
  2302. 0x3a, 0x86, 0x30, 0x28, 0xb5, 0xe1, 0xdc, 0x0a,
  2303. 0x75, 0x86, 0x60, 0x2d, 0x25, 0x3c, 0xff, 0xf9,
  2304. 0x1b, 0x82, 0x66, 0xbe, 0xa6, 0xd6, 0x1a, 0xb1 },
  2305. .rlen = 32,
  2306. },
  2307. };
  2308. static struct cipher_testvec aes_cbc_dec_tv_template[] = {
  2309. { /* From RFC 3602 */
  2310. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  2311. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  2312. .klen = 16,
  2313. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  2314. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  2315. .input = { 0xe3, 0x53, 0x77, 0x9c, 0x10, 0x79, 0xae, 0xb8,
  2316. 0x27, 0x08, 0x94, 0x2d, 0xbe, 0x77, 0x18, 0x1a },
  2317. .ilen = 16,
  2318. .result = { "Single block msg" },
  2319. .rlen = 16,
  2320. }, {
  2321. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  2322. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  2323. .klen = 16,
  2324. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  2325. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  2326. .input = { 0xd2, 0x96, 0xcd, 0x94, 0xc2, 0xcc, 0xcf, 0x8a,
  2327. 0x3a, 0x86, 0x30, 0x28, 0xb5, 0xe1, 0xdc, 0x0a,
  2328. 0x75, 0x86, 0x60, 0x2d, 0x25, 0x3c, 0xff, 0xf9,
  2329. 0x1b, 0x82, 0x66, 0xbe, 0xa6, 0xd6, 0x1a, 0xb1 },
  2330. .ilen = 32,
  2331. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2332. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2333. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2334. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2335. .rlen = 32,
  2336. },
  2337. };
  2338. static struct cipher_testvec aes_lrw_enc_tv_template[] = {
  2339. /* from http://grouper.ieee.org/groups/1619/email/pdf00017.pdf */
  2340. { /* LRW-32-AES 1 */
  2341. .key = { 0x45, 0x62, 0xac, 0x25, 0xf8, 0x28, 0x17, 0x6d,
  2342. 0x4c, 0x26, 0x84, 0x14, 0xb5, 0x68, 0x01, 0x85,
  2343. 0x25, 0x8e, 0x2a, 0x05, 0xe7, 0x3e, 0x9d, 0x03,
  2344. 0xee, 0x5a, 0x83, 0x0c, 0xcc, 0x09, 0x4c, 0x87 },
  2345. .klen = 32,
  2346. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2347. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2348. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2349. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2350. .ilen = 16,
  2351. .result = { 0xf1, 0xb2, 0x73, 0xcd, 0x65, 0xa3, 0xdf, 0x5f,
  2352. 0xe9, 0x5d, 0x48, 0x92, 0x54, 0x63, 0x4e, 0xb8 },
  2353. .rlen = 16,
  2354. }, { /* LRW-32-AES 2 */
  2355. .key = { 0x59, 0x70, 0x47, 0x14, 0xf5, 0x57, 0x47, 0x8c,
  2356. 0xd7, 0x79, 0xe8, 0x0f, 0x54, 0x88, 0x79, 0x44,
  2357. 0x0d, 0x48, 0xf0, 0xb7, 0xb1, 0x5a, 0x53, 0xea,
  2358. 0x1c, 0xaa, 0x6b, 0x29, 0xc2, 0xca, 0xfb, 0xaf
  2359. },
  2360. .klen = 32,
  2361. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2362. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02 },
  2363. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2364. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2365. .ilen = 16,
  2366. .result = { 0x00, 0xc8, 0x2b, 0xae, 0x95, 0xbb, 0xcd, 0xe5,
  2367. 0x27, 0x4f, 0x07, 0x69, 0xb2, 0x60, 0xe1, 0x36 },
  2368. .rlen = 16,
  2369. }, { /* LRW-32-AES 3 */
  2370. .key = { 0xd8, 0x2a, 0x91, 0x34, 0xb2, 0x6a, 0x56, 0x50,
  2371. 0x30, 0xfe, 0x69, 0xe2, 0x37, 0x7f, 0x98, 0x47,
  2372. 0xcd, 0xf9, 0x0b, 0x16, 0x0c, 0x64, 0x8f, 0xb6,
  2373. 0xb0, 0x0d, 0x0d, 0x1b, 0xae, 0x85, 0x87, 0x1f },
  2374. .klen = 32,
  2375. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2376. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2377. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2378. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2379. .ilen = 16,
  2380. .result = { 0x76, 0x32, 0x21, 0x83, 0xed, 0x8f, 0xf1, 0x82,
  2381. 0xf9, 0x59, 0x62, 0x03, 0x69, 0x0e, 0x5e, 0x01 },
  2382. .rlen = 16,
  2383. }, { /* LRW-32-AES 4 */
  2384. .key = { 0x0f, 0x6a, 0xef, 0xf8, 0xd3, 0xd2, 0xbb, 0x15,
  2385. 0x25, 0x83, 0xf7, 0x3c, 0x1f, 0x01, 0x28, 0x74,
  2386. 0xca, 0xc6, 0xbc, 0x35, 0x4d, 0x4a, 0x65, 0x54,
  2387. 0x90, 0xae, 0x61, 0xcf, 0x7b, 0xae, 0xbd, 0xcc,
  2388. 0xad, 0xe4, 0x94, 0xc5, 0x4a, 0x29, 0xae, 0x70 },
  2389. .klen = 40,
  2390. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2391. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2392. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2393. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2394. .ilen = 16,
  2395. .result = { 0x9c, 0x0f, 0x15, 0x2f, 0x55, 0xa2, 0xd8, 0xf0,
  2396. 0xd6, 0x7b, 0x8f, 0x9e, 0x28, 0x22, 0xbc, 0x41 },
  2397. .rlen = 16,
  2398. }, { /* LRW-32-AES 5 */
  2399. .key = { 0x8a, 0xd4, 0xee, 0x10, 0x2f, 0xbd, 0x81, 0xff,
  2400. 0xf8, 0x86, 0xce, 0xac, 0x93, 0xc5, 0xad, 0xc6,
  2401. 0xa0, 0x19, 0x07, 0xc0, 0x9d, 0xf7, 0xbb, 0xdd,
  2402. 0x52, 0x13, 0xb2, 0xb7, 0xf0, 0xff, 0x11, 0xd8,
  2403. 0xd6, 0x08, 0xd0, 0xcd, 0x2e, 0xb1, 0x17, 0x6f },
  2404. .klen = 40,
  2405. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2406. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2407. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2408. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2409. .ilen = 16,
  2410. .result = { 0xd4, 0x27, 0x6a, 0x7f, 0x14, 0x91, 0x3d, 0x65,
  2411. 0xc8, 0x60, 0x48, 0x02, 0x87, 0xe3, 0x34, 0x06 },
  2412. .rlen = 16,
  2413. }, { /* LRW-32-AES 6 */
  2414. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2415. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2416. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2417. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2418. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2419. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2420. .klen = 48,
  2421. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2422. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2423. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2424. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2425. .ilen = 16,
  2426. .result = { 0xbd, 0x06, 0xb8, 0xe1, 0xdb, 0x98, 0x89, 0x9e,
  2427. 0xc4, 0x98, 0xe4, 0x91, 0xcf, 0x1c, 0x70, 0x2b },
  2428. .rlen = 16,
  2429. }, { /* LRW-32-AES 7 */
  2430. .key = { 0xfb, 0x76, 0x15, 0xb2, 0x3d, 0x80, 0x89, 0x1d,
  2431. 0xd4, 0x70, 0x98, 0x0b, 0xc7, 0x95, 0x84, 0xc8,
  2432. 0xb2, 0xfb, 0x64, 0xce, 0x60, 0x97, 0x87, 0x8d,
  2433. 0x17, 0xfc, 0xe4, 0x5a, 0x49, 0xe8, 0x30, 0xb7,
  2434. 0x6e, 0x78, 0x17, 0xe7, 0x2d, 0x5e, 0x12, 0xd4,
  2435. 0x60, 0x64, 0x04, 0x7a, 0xf1, 0x2f, 0x9e, 0x0c },
  2436. .klen = 48,
  2437. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2438. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2439. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2440. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2441. .ilen = 16,
  2442. .result = { 0x5b, 0x90, 0x8e, 0xc1, 0xab, 0xdd, 0x67, 0x5f,
  2443. 0x3d, 0x69, 0x8a, 0x95, 0x53, 0xc8, 0x9c, 0xe5 },
  2444. .rlen = 16,
  2445. }, {
  2446. /* http://www.mail-archive.com/stds-p1619@listserv.ieee.org/msg00173.html */
  2447. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2448. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2449. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2450. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2451. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2452. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2453. .klen = 48,
  2454. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2455. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2456. .input = { 0x05, 0x11, 0xb7, 0x18, 0xab, 0xc6, 0x2d, 0xac,
  2457. 0x70, 0x5d, 0xf6, 0x22, 0x94, 0xcd, 0xe5, 0x6c,
  2458. 0x17, 0x6b, 0xf6, 0x1c, 0xf0, 0xf3, 0x6e, 0xf8,
  2459. 0x50, 0x38, 0x1f, 0x71, 0x49, 0xb6, 0x57, 0xd6,
  2460. 0x8f, 0xcb, 0x8d, 0x6b, 0xe3, 0xa6, 0x29, 0x90,
  2461. 0xfe, 0x2a, 0x62, 0x82, 0xae, 0x6d, 0x8b, 0xf6,
  2462. 0xad, 0x1e, 0x9e, 0x20, 0x5f, 0x38, 0xbe, 0x04,
  2463. 0xda, 0x10, 0x8e, 0xed, 0xa2, 0xa4, 0x87, 0xab,
  2464. 0xda, 0x6b, 0xb4, 0x0c, 0x75, 0xba, 0xd3, 0x7c,
  2465. 0xc9, 0xac, 0x42, 0x31, 0x95, 0x7c, 0xc9, 0x04,
  2466. 0xeb, 0xd5, 0x6e, 0x32, 0x69, 0x8a, 0xdb, 0xa6,
  2467. 0x15, 0xd7, 0x3f, 0x4f, 0x2f, 0x66, 0x69, 0x03,
  2468. 0x9c, 0x1f, 0x54, 0x0f, 0xde, 0x1f, 0xf3, 0x65,
  2469. 0x4c, 0x96, 0x12, 0xed, 0x7c, 0x92, 0x03, 0x01,
  2470. 0x6f, 0xbc, 0x35, 0x93, 0xac, 0xf1, 0x27, 0xf1,
  2471. 0xb4, 0x96, 0x82, 0x5a, 0x5f, 0xb0, 0xa0, 0x50,
  2472. 0x89, 0xa4, 0x8e, 0x66, 0x44, 0x85, 0xcc, 0xfd,
  2473. 0x33, 0x14, 0x70, 0xe3, 0x96, 0xb2, 0xc3, 0xd3,
  2474. 0xbb, 0x54, 0x5a, 0x1a, 0xf9, 0x74, 0xa2, 0xc5,
  2475. 0x2d, 0x64, 0x75, 0xdd, 0xb4, 0x54, 0xe6, 0x74,
  2476. 0x8c, 0xd3, 0x9d, 0x9e, 0x86, 0xab, 0x51, 0x53,
  2477. 0xb7, 0x93, 0x3e, 0x6f, 0xd0, 0x4e, 0x2c, 0x40,
  2478. 0xf6, 0xa8, 0x2e, 0x3e, 0x9d, 0xf4, 0x66, 0xa5,
  2479. 0x76, 0x12, 0x73, 0x44, 0x1a, 0x56, 0xd7, 0x72,
  2480. 0x88, 0xcd, 0x21, 0x8c, 0x4c, 0x0f, 0xfe, 0xda,
  2481. 0x95, 0xe0, 0x3a, 0xa6, 0xa5, 0x84, 0x46, 0xcd,
  2482. 0xd5, 0x3e, 0x9d, 0x3a, 0xe2, 0x67, 0xe6, 0x60,
  2483. 0x1a, 0xe2, 0x70, 0x85, 0x58, 0xc2, 0x1b, 0x09,
  2484. 0xe1, 0xd7, 0x2c, 0xca, 0xad, 0xa8, 0x8f, 0xf9,
  2485. 0xac, 0xb3, 0x0e, 0xdb, 0xca, 0x2e, 0xe2, 0xb8,
  2486. 0x51, 0x71, 0xd9, 0x3c, 0x6c, 0xf1, 0x56, 0xf8,
  2487. 0xea, 0x9c, 0xf1, 0xfb, 0x0c, 0xe6, 0xb7, 0x10,
  2488. 0x1c, 0xf8, 0xa9, 0x7c, 0xe8, 0x53, 0x35, 0xc1,
  2489. 0x90, 0x3e, 0x76, 0x4a, 0x74, 0xa4, 0x21, 0x2c,
  2490. 0xf6, 0x2c, 0x4e, 0x0f, 0x94, 0x3a, 0x88, 0x2e,
  2491. 0x41, 0x09, 0x6a, 0x33, 0x7d, 0xf6, 0xdd, 0x3f,
  2492. 0x8d, 0x23, 0x31, 0x74, 0x84, 0xeb, 0x88, 0x6e,
  2493. 0xcc, 0xb9, 0xbc, 0x22, 0x83, 0x19, 0x07, 0x22,
  2494. 0xa5, 0x2d, 0xdf, 0xa5, 0xf3, 0x80, 0x85, 0x78,
  2495. 0x84, 0x39, 0x6a, 0x6d, 0x6a, 0x99, 0x4f, 0xa5,
  2496. 0x15, 0xfe, 0x46, 0xb0, 0xe4, 0x6c, 0xa5, 0x41,
  2497. 0x3c, 0xce, 0x8f, 0x42, 0x60, 0x71, 0xa7, 0x75,
  2498. 0x08, 0x40, 0x65, 0x8a, 0x82, 0xbf, 0xf5, 0x43,
  2499. 0x71, 0x96, 0xa9, 0x4d, 0x44, 0x8a, 0x20, 0xbe,
  2500. 0xfa, 0x4d, 0xbb, 0xc0, 0x7d, 0x31, 0x96, 0x65,
  2501. 0xe7, 0x75, 0xe5, 0x3e, 0xfd, 0x92, 0x3b, 0xc9,
  2502. 0x55, 0xbb, 0x16, 0x7e, 0xf7, 0xc2, 0x8c, 0xa4,
  2503. 0x40, 0x1d, 0xe5, 0xef, 0x0e, 0xdf, 0xe4, 0x9a,
  2504. 0x62, 0x73, 0x65, 0xfd, 0x46, 0x63, 0x25, 0x3d,
  2505. 0x2b, 0xaf, 0xe5, 0x64, 0xfe, 0xa5, 0x5c, 0xcf,
  2506. 0x24, 0xf3, 0xb4, 0xac, 0x64, 0xba, 0xdf, 0x4b,
  2507. 0xc6, 0x96, 0x7d, 0x81, 0x2d, 0x8d, 0x97, 0xf7,
  2508. 0xc5, 0x68, 0x77, 0x84, 0x32, 0x2b, 0xcc, 0x85,
  2509. 0x74, 0x96, 0xf0, 0x12, 0x77, 0x61, 0xb9, 0xeb,
  2510. 0x71, 0xaa, 0x82, 0xcb, 0x1c, 0xdb, 0x89, 0xc8,
  2511. 0xc6, 0xb5, 0xe3, 0x5c, 0x7d, 0x39, 0x07, 0x24,
  2512. 0xda, 0x39, 0x87, 0x45, 0xc0, 0x2b, 0xbb, 0x01,
  2513. 0xac, 0xbc, 0x2a, 0x5c, 0x7f, 0xfc, 0xe8, 0xce,
  2514. 0x6d, 0x9c, 0x6f, 0xed, 0xd3, 0xc1, 0xa1, 0xd6,
  2515. 0xc5, 0x55, 0xa9, 0x66, 0x2f, 0xe1, 0xc8, 0x32,
  2516. 0xa6, 0x5d, 0xa4, 0x3a, 0x98, 0x73, 0xe8, 0x45,
  2517. 0xa4, 0xc7, 0xa8, 0xb4, 0xf6, 0x13, 0x03, 0xf6,
  2518. 0xe9, 0x2e, 0xc4, 0x29, 0x0f, 0x84, 0xdb, 0xc4,
  2519. 0x21, 0xc4, 0xc2, 0x75, 0x67, 0x89, 0x37, 0x0a },
  2520. .ilen = 512,
  2521. .result = { 0x1a, 0x1d, 0xa9, 0x30, 0xad, 0xf9, 0x2f, 0x9b,
  2522. 0xb6, 0x1d, 0xae, 0xef, 0xf0, 0x2f, 0xf8, 0x5a,
  2523. 0x39, 0x3c, 0xbf, 0x2a, 0xb2, 0x45, 0xb2, 0x23,
  2524. 0x1b, 0x63, 0x3c, 0xcf, 0xaa, 0xbe, 0xcf, 0x4e,
  2525. 0xfa, 0xe8, 0x29, 0xc2, 0x20, 0x68, 0x2b, 0x3c,
  2526. 0x2e, 0x8b, 0xf7, 0x6e, 0x25, 0xbd, 0xe3, 0x3d,
  2527. 0x66, 0x27, 0xd6, 0xaf, 0xd6, 0x64, 0x3e, 0xe3,
  2528. 0xe8, 0x58, 0x46, 0x97, 0x39, 0x51, 0x07, 0xde,
  2529. 0xcb, 0x37, 0xbc, 0xa9, 0xc0, 0x5f, 0x75, 0xc3,
  2530. 0x0e, 0x84, 0x23, 0x1d, 0x16, 0xd4, 0x1c, 0x59,
  2531. 0x9c, 0x1a, 0x02, 0x55, 0xab, 0x3a, 0x97, 0x1d,
  2532. 0xdf, 0xdd, 0xc7, 0x06, 0x51, 0xd7, 0x70, 0xae,
  2533. 0x23, 0xc6, 0x8c, 0xf5, 0x1e, 0xa0, 0xe5, 0x82,
  2534. 0xb8, 0xb2, 0xbf, 0x04, 0xa0, 0x32, 0x8e, 0x68,
  2535. 0xeb, 0xaf, 0x6e, 0x2d, 0x94, 0x22, 0x2f, 0xce,
  2536. 0x4c, 0xb5, 0x59, 0xe2, 0xa2, 0x2f, 0xa0, 0x98,
  2537. 0x1a, 0x97, 0xc6, 0xd4, 0xb5, 0x00, 0x59, 0xf2,
  2538. 0x84, 0x14, 0x72, 0xb1, 0x9a, 0x6e, 0xa3, 0x7f,
  2539. 0xea, 0x20, 0xe7, 0xcb, 0x65, 0x77, 0x3a, 0xdf,
  2540. 0xc8, 0x97, 0x67, 0x15, 0xc2, 0x2a, 0x27, 0xcc,
  2541. 0x18, 0x55, 0xa1, 0x24, 0x0b, 0x24, 0x24, 0xaf,
  2542. 0x5b, 0xec, 0x68, 0xb8, 0xc8, 0xf5, 0xba, 0x63,
  2543. 0xff, 0xed, 0x89, 0xce, 0xd5, 0x3d, 0x88, 0xf3,
  2544. 0x25, 0xef, 0x05, 0x7c, 0x3a, 0xef, 0xeb, 0xd8,
  2545. 0x7a, 0x32, 0x0d, 0xd1, 0x1e, 0x58, 0x59, 0x99,
  2546. 0x90, 0x25, 0xb5, 0x26, 0xb0, 0xe3, 0x2b, 0x6c,
  2547. 0x4c, 0xa9, 0x8b, 0x84, 0x4f, 0x5e, 0x01, 0x50,
  2548. 0x41, 0x30, 0x58, 0xc5, 0x62, 0x74, 0x52, 0x1d,
  2549. 0x45, 0x24, 0x6a, 0x42, 0x64, 0x4f, 0x97, 0x1c,
  2550. 0xa8, 0x66, 0xb5, 0x6d, 0x79, 0xd4, 0x0d, 0x48,
  2551. 0xc5, 0x5f, 0xf3, 0x90, 0x32, 0xdd, 0xdd, 0xe1,
  2552. 0xe4, 0xa9, 0x9f, 0xfc, 0xc3, 0x52, 0x5a, 0x46,
  2553. 0xe4, 0x81, 0x84, 0x95, 0x36, 0x59, 0x7a, 0x6b,
  2554. 0xaa, 0xb3, 0x60, 0xad, 0xce, 0x9f, 0x9f, 0x28,
  2555. 0xe0, 0x01, 0x75, 0x22, 0xc4, 0x4e, 0xa9, 0x62,
  2556. 0x5c, 0x62, 0x0d, 0x00, 0xcb, 0x13, 0xe8, 0x43,
  2557. 0x72, 0xd4, 0x2d, 0x53, 0x46, 0xb5, 0xd1, 0x16,
  2558. 0x22, 0x18, 0xdf, 0x34, 0x33, 0xf5, 0xd6, 0x1c,
  2559. 0xb8, 0x79, 0x78, 0x97, 0x94, 0xff, 0x72, 0x13,
  2560. 0x4c, 0x27, 0xfc, 0xcb, 0xbf, 0x01, 0x53, 0xa6,
  2561. 0xb4, 0x50, 0x6e, 0xde, 0xdf, 0xb5, 0x43, 0xa4,
  2562. 0x59, 0xdf, 0x52, 0xf9, 0x7c, 0xe0, 0x11, 0x6f,
  2563. 0x2d, 0x14, 0x8e, 0x24, 0x61, 0x2c, 0xe1, 0x17,
  2564. 0xcc, 0xce, 0x51, 0x0c, 0x19, 0x8a, 0x82, 0x30,
  2565. 0x94, 0xd5, 0x3d, 0x6a, 0x53, 0x06, 0x5e, 0xbd,
  2566. 0xb7, 0xeb, 0xfa, 0xfd, 0x27, 0x51, 0xde, 0x85,
  2567. 0x1e, 0x86, 0x53, 0x11, 0x53, 0x94, 0x00, 0xee,
  2568. 0x2b, 0x8c, 0x08, 0x2a, 0xbf, 0xdd, 0xae, 0x11,
  2569. 0xcb, 0x1e, 0xa2, 0x07, 0x9a, 0x80, 0xcf, 0x62,
  2570. 0x9b, 0x09, 0xdc, 0x95, 0x3c, 0x96, 0x8e, 0xb1,
  2571. 0x09, 0xbd, 0xe4, 0xeb, 0xdb, 0xca, 0x70, 0x7a,
  2572. 0x9e, 0xfa, 0x31, 0x18, 0x45, 0x3c, 0x21, 0x33,
  2573. 0xb0, 0xb3, 0x2b, 0xea, 0xf3, 0x71, 0x2d, 0xe1,
  2574. 0x03, 0xad, 0x1b, 0x48, 0xd4, 0x67, 0x27, 0xf0,
  2575. 0x62, 0xe4, 0x3d, 0xfb, 0x9b, 0x08, 0x76, 0xe7,
  2576. 0xdd, 0x2b, 0x01, 0x39, 0x04, 0x5a, 0x58, 0x7a,
  2577. 0xf7, 0x11, 0x90, 0xec, 0xbd, 0x51, 0x5c, 0x32,
  2578. 0x6b, 0xd7, 0x35, 0x39, 0x02, 0x6b, 0xf2, 0xa6,
  2579. 0xd0, 0x0d, 0x07, 0xe1, 0x06, 0xc4, 0x5b, 0x7d,
  2580. 0xe4, 0x6a, 0xd7, 0xee, 0x15, 0x1f, 0x83, 0xb4,
  2581. 0xa3, 0xa7, 0x5e, 0xc3, 0x90, 0xb7, 0xef, 0xd3,
  2582. 0xb7, 0x4f, 0xf8, 0x92, 0x4c, 0xb7, 0x3c, 0x29,
  2583. 0xcd, 0x7e, 0x2b, 0x5d, 0x43, 0xea, 0x42, 0xe7,
  2584. 0x74, 0x3f, 0x7d, 0x58, 0x88, 0x75, 0xde, 0x3e },
  2585. .rlen = 512,
  2586. }
  2587. };
  2588. static struct cipher_testvec aes_lrw_dec_tv_template[] = {
  2589. /* from http://grouper.ieee.org/groups/1619/email/pdf00017.pdf */
  2590. /* same as enc vectors with input and result reversed */
  2591. { /* LRW-32-AES 1 */
  2592. .key = { 0x45, 0x62, 0xac, 0x25, 0xf8, 0x28, 0x17, 0x6d,
  2593. 0x4c, 0x26, 0x84, 0x14, 0xb5, 0x68, 0x01, 0x85,
  2594. 0x25, 0x8e, 0x2a, 0x05, 0xe7, 0x3e, 0x9d, 0x03,
  2595. 0xee, 0x5a, 0x83, 0x0c, 0xcc, 0x09, 0x4c, 0x87 },
  2596. .klen = 32,
  2597. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2598. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2599. .input = { 0xf1, 0xb2, 0x73, 0xcd, 0x65, 0xa3, 0xdf, 0x5f,
  2600. 0xe9, 0x5d, 0x48, 0x92, 0x54, 0x63, 0x4e, 0xb8 },
  2601. .ilen = 16,
  2602. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2603. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2604. .rlen = 16,
  2605. }, { /* LRW-32-AES 2 */
  2606. .key = { 0x59, 0x70, 0x47, 0x14, 0xf5, 0x57, 0x47, 0x8c,
  2607. 0xd7, 0x79, 0xe8, 0x0f, 0x54, 0x88, 0x79, 0x44,
  2608. 0x0d, 0x48, 0xf0, 0xb7, 0xb1, 0x5a, 0x53, 0xea,
  2609. 0x1c, 0xaa, 0x6b, 0x29, 0xc2, 0xca, 0xfb, 0xaf
  2610. },
  2611. .klen = 32,
  2612. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2613. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02 },
  2614. .input = { 0x00, 0xc8, 0x2b, 0xae, 0x95, 0xbb, 0xcd, 0xe5,
  2615. 0x27, 0x4f, 0x07, 0x69, 0xb2, 0x60, 0xe1, 0x36 },
  2616. .ilen = 16,
  2617. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2618. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2619. .rlen = 16,
  2620. }, { /* LRW-32-AES 3 */
  2621. .key = { 0xd8, 0x2a, 0x91, 0x34, 0xb2, 0x6a, 0x56, 0x50,
  2622. 0x30, 0xfe, 0x69, 0xe2, 0x37, 0x7f, 0x98, 0x47,
  2623. 0xcd, 0xf9, 0x0b, 0x16, 0x0c, 0x64, 0x8f, 0xb6,
  2624. 0xb0, 0x0d, 0x0d, 0x1b, 0xae, 0x85, 0x87, 0x1f },
  2625. .klen = 32,
  2626. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2627. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2628. .input = { 0x76, 0x32, 0x21, 0x83, 0xed, 0x8f, 0xf1, 0x82,
  2629. 0xf9, 0x59, 0x62, 0x03, 0x69, 0x0e, 0x5e, 0x01 },
  2630. .ilen = 16,
  2631. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2632. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2633. .rlen = 16,
  2634. }, { /* LRW-32-AES 4 */
  2635. .key = { 0x0f, 0x6a, 0xef, 0xf8, 0xd3, 0xd2, 0xbb, 0x15,
  2636. 0x25, 0x83, 0xf7, 0x3c, 0x1f, 0x01, 0x28, 0x74,
  2637. 0xca, 0xc6, 0xbc, 0x35, 0x4d, 0x4a, 0x65, 0x54,
  2638. 0x90, 0xae, 0x61, 0xcf, 0x7b, 0xae, 0xbd, 0xcc,
  2639. 0xad, 0xe4, 0x94, 0xc5, 0x4a, 0x29, 0xae, 0x70 },
  2640. .klen = 40,
  2641. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2642. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2643. .input = { 0x9c, 0x0f, 0x15, 0x2f, 0x55, 0xa2, 0xd8, 0xf0,
  2644. 0xd6, 0x7b, 0x8f, 0x9e, 0x28, 0x22, 0xbc, 0x41 },
  2645. .ilen = 16,
  2646. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2647. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2648. .rlen = 16,
  2649. }, { /* LRW-32-AES 5 */
  2650. .key = { 0x8a, 0xd4, 0xee, 0x10, 0x2f, 0xbd, 0x81, 0xff,
  2651. 0xf8, 0x86, 0xce, 0xac, 0x93, 0xc5, 0xad, 0xc6,
  2652. 0xa0, 0x19, 0x07, 0xc0, 0x9d, 0xf7, 0xbb, 0xdd,
  2653. 0x52, 0x13, 0xb2, 0xb7, 0xf0, 0xff, 0x11, 0xd8,
  2654. 0xd6, 0x08, 0xd0, 0xcd, 0x2e, 0xb1, 0x17, 0x6f },
  2655. .klen = 40,
  2656. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2657. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2658. .input = { 0xd4, 0x27, 0x6a, 0x7f, 0x14, 0x91, 0x3d, 0x65,
  2659. 0xc8, 0x60, 0x48, 0x02, 0x87, 0xe3, 0x34, 0x06 },
  2660. .ilen = 16,
  2661. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2662. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2663. .rlen = 16,
  2664. }, { /* LRW-32-AES 6 */
  2665. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2666. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2667. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2668. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2669. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2670. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2671. .klen = 48,
  2672. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2673. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2674. .input = { 0xbd, 0x06, 0xb8, 0xe1, 0xdb, 0x98, 0x89, 0x9e,
  2675. 0xc4, 0x98, 0xe4, 0x91, 0xcf, 0x1c, 0x70, 0x2b },
  2676. .ilen = 16,
  2677. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2678. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2679. .rlen = 16,
  2680. }, { /* LRW-32-AES 7 */
  2681. .key = { 0xfb, 0x76, 0x15, 0xb2, 0x3d, 0x80, 0x89, 0x1d,
  2682. 0xd4, 0x70, 0x98, 0x0b, 0xc7, 0x95, 0x84, 0xc8,
  2683. 0xb2, 0xfb, 0x64, 0xce, 0x60, 0x97, 0x87, 0x8d,
  2684. 0x17, 0xfc, 0xe4, 0x5a, 0x49, 0xe8, 0x30, 0xb7,
  2685. 0x6e, 0x78, 0x17, 0xe7, 0x2d, 0x5e, 0x12, 0xd4,
  2686. 0x60, 0x64, 0x04, 0x7a, 0xf1, 0x2f, 0x9e, 0x0c },
  2687. .klen = 48,
  2688. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2689. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2690. .input = { 0x5b, 0x90, 0x8e, 0xc1, 0xab, 0xdd, 0x67, 0x5f,
  2691. 0x3d, 0x69, 0x8a, 0x95, 0x53, 0xc8, 0x9c, 0xe5 },
  2692. .ilen = 16,
  2693. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2694. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2695. .rlen = 16,
  2696. }, {
  2697. /* http://www.mail-archive.com/stds-p1619@listserv.ieee.org/msg00173.html */
  2698. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2699. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2700. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2701. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2702. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2703. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2704. .klen = 48,
  2705. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2706. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2707. .input = { 0x1a, 0x1d, 0xa9, 0x30, 0xad, 0xf9, 0x2f, 0x9b,
  2708. 0xb6, 0x1d, 0xae, 0xef, 0xf0, 0x2f, 0xf8, 0x5a,
  2709. 0x39, 0x3c, 0xbf, 0x2a, 0xb2, 0x45, 0xb2, 0x23,
  2710. 0x1b, 0x63, 0x3c, 0xcf, 0xaa, 0xbe, 0xcf, 0x4e,
  2711. 0xfa, 0xe8, 0x29, 0xc2, 0x20, 0x68, 0x2b, 0x3c,
  2712. 0x2e, 0x8b, 0xf7, 0x6e, 0x25, 0xbd, 0xe3, 0x3d,
  2713. 0x66, 0x27, 0xd6, 0xaf, 0xd6, 0x64, 0x3e, 0xe3,
  2714. 0xe8, 0x58, 0x46, 0x97, 0x39, 0x51, 0x07, 0xde,
  2715. 0xcb, 0x37, 0xbc, 0xa9, 0xc0, 0x5f, 0x75, 0xc3,
  2716. 0x0e, 0x84, 0x23, 0x1d, 0x16, 0xd4, 0x1c, 0x59,
  2717. 0x9c, 0x1a, 0x02, 0x55, 0xab, 0x3a, 0x97, 0x1d,
  2718. 0xdf, 0xdd, 0xc7, 0x06, 0x51, 0xd7, 0x70, 0xae,
  2719. 0x23, 0xc6, 0x8c, 0xf5, 0x1e, 0xa0, 0xe5, 0x82,
  2720. 0xb8, 0xb2, 0xbf, 0x04, 0xa0, 0x32, 0x8e, 0x68,
  2721. 0xeb, 0xaf, 0x6e, 0x2d, 0x94, 0x22, 0x2f, 0xce,
  2722. 0x4c, 0xb5, 0x59, 0xe2, 0xa2, 0x2f, 0xa0, 0x98,
  2723. 0x1a, 0x97, 0xc6, 0xd4, 0xb5, 0x00, 0x59, 0xf2,
  2724. 0x84, 0x14, 0x72, 0xb1, 0x9a, 0x6e, 0xa3, 0x7f,
  2725. 0xea, 0x20, 0xe7, 0xcb, 0x65, 0x77, 0x3a, 0xdf,
  2726. 0xc8, 0x97, 0x67, 0x15, 0xc2, 0x2a, 0x27, 0xcc,
  2727. 0x18, 0x55, 0xa1, 0x24, 0x0b, 0x24, 0x24, 0xaf,
  2728. 0x5b, 0xec, 0x68, 0xb8, 0xc8, 0xf5, 0xba, 0x63,
  2729. 0xff, 0xed, 0x89, 0xce, 0xd5, 0x3d, 0x88, 0xf3,
  2730. 0x25, 0xef, 0x05, 0x7c, 0x3a, 0xef, 0xeb, 0xd8,
  2731. 0x7a, 0x32, 0x0d, 0xd1, 0x1e, 0x58, 0x59, 0x99,
  2732. 0x90, 0x25, 0xb5, 0x26, 0xb0, 0xe3, 0x2b, 0x6c,
  2733. 0x4c, 0xa9, 0x8b, 0x84, 0x4f, 0x5e, 0x01, 0x50,
  2734. 0x41, 0x30, 0x58, 0xc5, 0x62, 0x74, 0x52, 0x1d,
  2735. 0x45, 0x24, 0x6a, 0x42, 0x64, 0x4f, 0x97, 0x1c,
  2736. 0xa8, 0x66, 0xb5, 0x6d, 0x79, 0xd4, 0x0d, 0x48,
  2737. 0xc5, 0x5f, 0xf3, 0x90, 0x32, 0xdd, 0xdd, 0xe1,
  2738. 0xe4, 0xa9, 0x9f, 0xfc, 0xc3, 0x52, 0x5a, 0x46,
  2739. 0xe4, 0x81, 0x84, 0x95, 0x36, 0x59, 0x7a, 0x6b,
  2740. 0xaa, 0xb3, 0x60, 0xad, 0xce, 0x9f, 0x9f, 0x28,
  2741. 0xe0, 0x01, 0x75, 0x22, 0xc4, 0x4e, 0xa9, 0x62,
  2742. 0x5c, 0x62, 0x0d, 0x00, 0xcb, 0x13, 0xe8, 0x43,
  2743. 0x72, 0xd4, 0x2d, 0x53, 0x46, 0xb5, 0xd1, 0x16,
  2744. 0x22, 0x18, 0xdf, 0x34, 0x33, 0xf5, 0xd6, 0x1c,
  2745. 0xb8, 0x79, 0x78, 0x97, 0x94, 0xff, 0x72, 0x13,
  2746. 0x4c, 0x27, 0xfc, 0xcb, 0xbf, 0x01, 0x53, 0xa6,
  2747. 0xb4, 0x50, 0x6e, 0xde, 0xdf, 0xb5, 0x43, 0xa4,
  2748. 0x59, 0xdf, 0x52, 0xf9, 0x7c, 0xe0, 0x11, 0x6f,
  2749. 0x2d, 0x14, 0x8e, 0x24, 0x61, 0x2c, 0xe1, 0x17,
  2750. 0xcc, 0xce, 0x51, 0x0c, 0x19, 0x8a, 0x82, 0x30,
  2751. 0x94, 0xd5, 0x3d, 0x6a, 0x53, 0x06, 0x5e, 0xbd,
  2752. 0xb7, 0xeb, 0xfa, 0xfd, 0x27, 0x51, 0xde, 0x85,
  2753. 0x1e, 0x86, 0x53, 0x11, 0x53, 0x94, 0x00, 0xee,
  2754. 0x2b, 0x8c, 0x08, 0x2a, 0xbf, 0xdd, 0xae, 0x11,
  2755. 0xcb, 0x1e, 0xa2, 0x07, 0x9a, 0x80, 0xcf, 0x62,
  2756. 0x9b, 0x09, 0xdc, 0x95, 0x3c, 0x96, 0x8e, 0xb1,
  2757. 0x09, 0xbd, 0xe4, 0xeb, 0xdb, 0xca, 0x70, 0x7a,
  2758. 0x9e, 0xfa, 0x31, 0x18, 0x45, 0x3c, 0x21, 0x33,
  2759. 0xb0, 0xb3, 0x2b, 0xea, 0xf3, 0x71, 0x2d, 0xe1,
  2760. 0x03, 0xad, 0x1b, 0x48, 0xd4, 0x67, 0x27, 0xf0,
  2761. 0x62, 0xe4, 0x3d, 0xfb, 0x9b, 0x08, 0x76, 0xe7,
  2762. 0xdd, 0x2b, 0x01, 0x39, 0x04, 0x5a, 0x58, 0x7a,
  2763. 0xf7, 0x11, 0x90, 0xec, 0xbd, 0x51, 0x5c, 0x32,
  2764. 0x6b, 0xd7, 0x35, 0x39, 0x02, 0x6b, 0xf2, 0xa6,
  2765. 0xd0, 0x0d, 0x07, 0xe1, 0x06, 0xc4, 0x5b, 0x7d,
  2766. 0xe4, 0x6a, 0xd7, 0xee, 0x15, 0x1f, 0x83, 0xb4,
  2767. 0xa3, 0xa7, 0x5e, 0xc3, 0x90, 0xb7, 0xef, 0xd3,
  2768. 0xb7, 0x4f, 0xf8, 0x92, 0x4c, 0xb7, 0x3c, 0x29,
  2769. 0xcd, 0x7e, 0x2b, 0x5d, 0x43, 0xea, 0x42, 0xe7,
  2770. 0x74, 0x3f, 0x7d, 0x58, 0x88, 0x75, 0xde, 0x3e },
  2771. .ilen = 512,
  2772. .result = { 0x05, 0x11, 0xb7, 0x18, 0xab, 0xc6, 0x2d, 0xac,
  2773. 0x70, 0x5d, 0xf6, 0x22, 0x94, 0xcd, 0xe5, 0x6c,
  2774. 0x17, 0x6b, 0xf6, 0x1c, 0xf0, 0xf3, 0x6e, 0xf8,
  2775. 0x50, 0x38, 0x1f, 0x71, 0x49, 0xb6, 0x57, 0xd6,
  2776. 0x8f, 0xcb, 0x8d, 0x6b, 0xe3, 0xa6, 0x29, 0x90,
  2777. 0xfe, 0x2a, 0x62, 0x82, 0xae, 0x6d, 0x8b, 0xf6,
  2778. 0xad, 0x1e, 0x9e, 0x20, 0x5f, 0x38, 0xbe, 0x04,
  2779. 0xda, 0x10, 0x8e, 0xed, 0xa2, 0xa4, 0x87, 0xab,
  2780. 0xda, 0x6b, 0xb4, 0x0c, 0x75, 0xba, 0xd3, 0x7c,
  2781. 0xc9, 0xac, 0x42, 0x31, 0x95, 0x7c, 0xc9, 0x04,
  2782. 0xeb, 0xd5, 0x6e, 0x32, 0x69, 0x8a, 0xdb, 0xa6,
  2783. 0x15, 0xd7, 0x3f, 0x4f, 0x2f, 0x66, 0x69, 0x03,
  2784. 0x9c, 0x1f, 0x54, 0x0f, 0xde, 0x1f, 0xf3, 0x65,
  2785. 0x4c, 0x96, 0x12, 0xed, 0x7c, 0x92, 0x03, 0x01,
  2786. 0x6f, 0xbc, 0x35, 0x93, 0xac, 0xf1, 0x27, 0xf1,
  2787. 0xb4, 0x96, 0x82, 0x5a, 0x5f, 0xb0, 0xa0, 0x50,
  2788. 0x89, 0xa4, 0x8e, 0x66, 0x44, 0x85, 0xcc, 0xfd,
  2789. 0x33, 0x14, 0x70, 0xe3, 0x96, 0xb2, 0xc3, 0xd3,
  2790. 0xbb, 0x54, 0x5a, 0x1a, 0xf9, 0x74, 0xa2, 0xc5,
  2791. 0x2d, 0x64, 0x75, 0xdd, 0xb4, 0x54, 0xe6, 0x74,
  2792. 0x8c, 0xd3, 0x9d, 0x9e, 0x86, 0xab, 0x51, 0x53,
  2793. 0xb7, 0x93, 0x3e, 0x6f, 0xd0, 0x4e, 0x2c, 0x40,
  2794. 0xf6, 0xa8, 0x2e, 0x3e, 0x9d, 0xf4, 0x66, 0xa5,
  2795. 0x76, 0x12, 0x73, 0x44, 0x1a, 0x56, 0xd7, 0x72,
  2796. 0x88, 0xcd, 0x21, 0x8c, 0x4c, 0x0f, 0xfe, 0xda,
  2797. 0x95, 0xe0, 0x3a, 0xa6, 0xa5, 0x84, 0x46, 0xcd,
  2798. 0xd5, 0x3e, 0x9d, 0x3a, 0xe2, 0x67, 0xe6, 0x60,
  2799. 0x1a, 0xe2, 0x70, 0x85, 0x58, 0xc2, 0x1b, 0x09,
  2800. 0xe1, 0xd7, 0x2c, 0xca, 0xad, 0xa8, 0x8f, 0xf9,
  2801. 0xac, 0xb3, 0x0e, 0xdb, 0xca, 0x2e, 0xe2, 0xb8,
  2802. 0x51, 0x71, 0xd9, 0x3c, 0x6c, 0xf1, 0x56, 0xf8,
  2803. 0xea, 0x9c, 0xf1, 0xfb, 0x0c, 0xe6, 0xb7, 0x10,
  2804. 0x1c, 0xf8, 0xa9, 0x7c, 0xe8, 0x53, 0x35, 0xc1,
  2805. 0x90, 0x3e, 0x76, 0x4a, 0x74, 0xa4, 0x21, 0x2c,
  2806. 0xf6, 0x2c, 0x4e, 0x0f, 0x94, 0x3a, 0x88, 0x2e,
  2807. 0x41, 0x09, 0x6a, 0x33, 0x7d, 0xf6, 0xdd, 0x3f,
  2808. 0x8d, 0x23, 0x31, 0x74, 0x84, 0xeb, 0x88, 0x6e,
  2809. 0xcc, 0xb9, 0xbc, 0x22, 0x83, 0x19, 0x07, 0x22,
  2810. 0xa5, 0x2d, 0xdf, 0xa5, 0xf3, 0x80, 0x85, 0x78,
  2811. 0x84, 0x39, 0x6a, 0x6d, 0x6a, 0x99, 0x4f, 0xa5,
  2812. 0x15, 0xfe, 0x46, 0xb0, 0xe4, 0x6c, 0xa5, 0x41,
  2813. 0x3c, 0xce, 0x8f, 0x42, 0x60, 0x71, 0xa7, 0x75,
  2814. 0x08, 0x40, 0x65, 0x8a, 0x82, 0xbf, 0xf5, 0x43,
  2815. 0x71, 0x96, 0xa9, 0x4d, 0x44, 0x8a, 0x20, 0xbe,
  2816. 0xfa, 0x4d, 0xbb, 0xc0, 0x7d, 0x31, 0x96, 0x65,
  2817. 0xe7, 0x75, 0xe5, 0x3e, 0xfd, 0x92, 0x3b, 0xc9,
  2818. 0x55, 0xbb, 0x16, 0x7e, 0xf7, 0xc2, 0x8c, 0xa4,
  2819. 0x40, 0x1d, 0xe5, 0xef, 0x0e, 0xdf, 0xe4, 0x9a,
  2820. 0x62, 0x73, 0x65, 0xfd, 0x46, 0x63, 0x25, 0x3d,
  2821. 0x2b, 0xaf, 0xe5, 0x64, 0xfe, 0xa5, 0x5c, 0xcf,
  2822. 0x24, 0xf3, 0xb4, 0xac, 0x64, 0xba, 0xdf, 0x4b,
  2823. 0xc6, 0x96, 0x7d, 0x81, 0x2d, 0x8d, 0x97, 0xf7,
  2824. 0xc5, 0x68, 0x77, 0x84, 0x32, 0x2b, 0xcc, 0x85,
  2825. 0x74, 0x96, 0xf0, 0x12, 0x77, 0x61, 0xb9, 0xeb,
  2826. 0x71, 0xaa, 0x82, 0xcb, 0x1c, 0xdb, 0x89, 0xc8,
  2827. 0xc6, 0xb5, 0xe3, 0x5c, 0x7d, 0x39, 0x07, 0x24,
  2828. 0xda, 0x39, 0x87, 0x45, 0xc0, 0x2b, 0xbb, 0x01,
  2829. 0xac, 0xbc, 0x2a, 0x5c, 0x7f, 0xfc, 0xe8, 0xce,
  2830. 0x6d, 0x9c, 0x6f, 0xed, 0xd3, 0xc1, 0xa1, 0xd6,
  2831. 0xc5, 0x55, 0xa9, 0x66, 0x2f, 0xe1, 0xc8, 0x32,
  2832. 0xa6, 0x5d, 0xa4, 0x3a, 0x98, 0x73, 0xe8, 0x45,
  2833. 0xa4, 0xc7, 0xa8, 0xb4, 0xf6, 0x13, 0x03, 0xf6,
  2834. 0xe9, 0x2e, 0xc4, 0x29, 0x0f, 0x84, 0xdb, 0xc4,
  2835. 0x21, 0xc4, 0xc2, 0x75, 0x67, 0x89, 0x37, 0x0a },
  2836. .rlen = 512,
  2837. }
  2838. };
  2839. static struct cipher_testvec aes_xts_enc_tv_template[] = {
  2840. /* http://grouper.ieee.org/groups/1619/email/pdf00086.pdf */
  2841. { /* XTS-AES 1 */
  2842. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2843. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2844. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2845. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2846. .klen = 32,
  2847. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2848. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2849. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2850. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2851. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2852. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2853. .ilen = 32,
  2854. .result = { 0x91, 0x7c, 0xf6, 0x9e, 0xbd, 0x68, 0xb2, 0xec,
  2855. 0x9b, 0x9f, 0xe9, 0xa3, 0xea, 0xdd, 0xa6, 0x92,
  2856. 0xcd, 0x43, 0xd2, 0xf5, 0x95, 0x98, 0xed, 0x85,
  2857. 0x8c, 0x02, 0xc2, 0x65, 0x2f, 0xbf, 0x92, 0x2e },
  2858. .rlen = 32,
  2859. }, { /* XTS-AES 2 */
  2860. .key = { 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  2861. 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  2862. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  2863. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  2864. .klen = 32,
  2865. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  2866. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2867. .input = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2868. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2869. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2870. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  2871. .ilen = 32,
  2872. .result = { 0xc4, 0x54, 0x18, 0x5e, 0x6a, 0x16, 0x93, 0x6e,
  2873. 0x39, 0x33, 0x40, 0x38, 0xac, 0xef, 0x83, 0x8b,
  2874. 0xfb, 0x18, 0x6f, 0xff, 0x74, 0x80, 0xad, 0xc4,
  2875. 0x28, 0x93, 0x82, 0xec, 0xd6, 0xd3, 0x94, 0xf0 },
  2876. .rlen = 32,
  2877. }, { /* XTS-AES 3 */
  2878. .key = { 0xff, 0xfe, 0xfd, 0xfc, 0xfb, 0xfa, 0xf9, 0xf8,
  2879. 0xf7, 0xf6, 0xf5, 0xf4, 0xf3, 0xf2, 0xf1, 0xf0,
  2880. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  2881. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  2882. .klen = 32,
  2883. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  2884. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2885. .input = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2886. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2887. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2888. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  2889. .ilen = 32,
  2890. .result = { 0xaf, 0x85, 0x33, 0x6b, 0x59, 0x7a, 0xfc, 0x1a,
  2891. 0x90, 0x0b, 0x2e, 0xb2, 0x1e, 0xc9, 0x49, 0xd2,
  2892. 0x92, 0xdf, 0x4c, 0x04, 0x7e, 0x0b, 0x21, 0x53,
  2893. 0x21, 0x86, 0xa5, 0x97, 0x1a, 0x22, 0x7a, 0x89 },
  2894. .rlen = 32,
  2895. }, { /* XTS-AES 4 */
  2896. .key = { 0x27, 0x18, 0x28, 0x18, 0x28, 0x45, 0x90, 0x45,
  2897. 0x23, 0x53, 0x60, 0x28, 0x74, 0x71, 0x35, 0x26,
  2898. 0x31, 0x41, 0x59, 0x26, 0x53, 0x58, 0x97, 0x93,
  2899. 0x23, 0x84, 0x62, 0x64, 0x33, 0x83, 0x27, 0x95 },
  2900. .klen = 32,
  2901. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2902. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2903. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2904. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2905. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2906. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  2907. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  2908. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  2909. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2910. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  2911. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  2912. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  2913. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  2914. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  2915. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  2916. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  2917. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  2918. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  2919. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  2920. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  2921. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  2922. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  2923. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  2924. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  2925. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  2926. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  2927. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  2928. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  2929. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  2930. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  2931. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  2932. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  2933. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  2934. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff,
  2935. 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2936. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2937. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2938. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  2939. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  2940. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  2941. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2942. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  2943. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  2944. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  2945. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  2946. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  2947. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  2948. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  2949. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  2950. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  2951. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  2952. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  2953. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  2954. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  2955. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  2956. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  2957. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  2958. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  2959. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  2960. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  2961. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  2962. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  2963. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  2964. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  2965. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  2966. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff },
  2967. .ilen = 512,
  2968. .result = { 0x27, 0xa7, 0x47, 0x9b, 0xef, 0xa1, 0xd4, 0x76,
  2969. 0x48, 0x9f, 0x30, 0x8c, 0xd4, 0xcf, 0xa6, 0xe2,
  2970. 0xa9, 0x6e, 0x4b, 0xbe, 0x32, 0x08, 0xff, 0x25,
  2971. 0x28, 0x7d, 0xd3, 0x81, 0x96, 0x16, 0xe8, 0x9c,
  2972. 0xc7, 0x8c, 0xf7, 0xf5, 0xe5, 0x43, 0x44, 0x5f,
  2973. 0x83, 0x33, 0xd8, 0xfa, 0x7f, 0x56, 0x00, 0x00,
  2974. 0x05, 0x27, 0x9f, 0xa5, 0xd8, 0xb5, 0xe4, 0xad,
  2975. 0x40, 0xe7, 0x36, 0xdd, 0xb4, 0xd3, 0x54, 0x12,
  2976. 0x32, 0x80, 0x63, 0xfd, 0x2a, 0xab, 0x53, 0xe5,
  2977. 0xea, 0x1e, 0x0a, 0x9f, 0x33, 0x25, 0x00, 0xa5,
  2978. 0xdf, 0x94, 0x87, 0xd0, 0x7a, 0x5c, 0x92, 0xcc,
  2979. 0x51, 0x2c, 0x88, 0x66, 0xc7, 0xe8, 0x60, 0xce,
  2980. 0x93, 0xfd, 0xf1, 0x66, 0xa2, 0x49, 0x12, 0xb4,
  2981. 0x22, 0x97, 0x61, 0x46, 0xae, 0x20, 0xce, 0x84,
  2982. 0x6b, 0xb7, 0xdc, 0x9b, 0xa9, 0x4a, 0x76, 0x7a,
  2983. 0xae, 0xf2, 0x0c, 0x0d, 0x61, 0xad, 0x02, 0x65,
  2984. 0x5e, 0xa9, 0x2d, 0xc4, 0xc4, 0xe4, 0x1a, 0x89,
  2985. 0x52, 0xc6, 0x51, 0xd3, 0x31, 0x74, 0xbe, 0x51,
  2986. 0xa1, 0x0c, 0x42, 0x11, 0x10, 0xe6, 0xd8, 0x15,
  2987. 0x88, 0xed, 0xe8, 0x21, 0x03, 0xa2, 0x52, 0xd8,
  2988. 0xa7, 0x50, 0xe8, 0x76, 0x8d, 0xef, 0xff, 0xed,
  2989. 0x91, 0x22, 0x81, 0x0a, 0xae, 0xb9, 0x9f, 0x91,
  2990. 0x72, 0xaf, 0x82, 0xb6, 0x04, 0xdc, 0x4b, 0x8e,
  2991. 0x51, 0xbc, 0xb0, 0x82, 0x35, 0xa6, 0xf4, 0x34,
  2992. 0x13, 0x32, 0xe4, 0xca, 0x60, 0x48, 0x2a, 0x4b,
  2993. 0xa1, 0xa0, 0x3b, 0x3e, 0x65, 0x00, 0x8f, 0xc5,
  2994. 0xda, 0x76, 0xb7, 0x0b, 0xf1, 0x69, 0x0d, 0xb4,
  2995. 0xea, 0xe2, 0x9c, 0x5f, 0x1b, 0xad, 0xd0, 0x3c,
  2996. 0x5c, 0xcf, 0x2a, 0x55, 0xd7, 0x05, 0xdd, 0xcd,
  2997. 0x86, 0xd4, 0x49, 0x51, 0x1c, 0xeb, 0x7e, 0xc3,
  2998. 0x0b, 0xf1, 0x2b, 0x1f, 0xa3, 0x5b, 0x91, 0x3f,
  2999. 0x9f, 0x74, 0x7a, 0x8a, 0xfd, 0x1b, 0x13, 0x0e,
  3000. 0x94, 0xbf, 0xf9, 0x4e, 0xff, 0xd0, 0x1a, 0x91,
  3001. 0x73, 0x5c, 0xa1, 0x72, 0x6a, 0xcd, 0x0b, 0x19,
  3002. 0x7c, 0x4e, 0x5b, 0x03, 0x39, 0x36, 0x97, 0xe1,
  3003. 0x26, 0x82, 0x6f, 0xb6, 0xbb, 0xde, 0x8e, 0xcc,
  3004. 0x1e, 0x08, 0x29, 0x85, 0x16, 0xe2, 0xc9, 0xed,
  3005. 0x03, 0xff, 0x3c, 0x1b, 0x78, 0x60, 0xf6, 0xde,
  3006. 0x76, 0xd4, 0xce, 0xcd, 0x94, 0xc8, 0x11, 0x98,
  3007. 0x55, 0xef, 0x52, 0x97, 0xca, 0x67, 0xe9, 0xf3,
  3008. 0xe7, 0xff, 0x72, 0xb1, 0xe9, 0x97, 0x85, 0xca,
  3009. 0x0a, 0x7e, 0x77, 0x20, 0xc5, 0xb3, 0x6d, 0xc6,
  3010. 0xd7, 0x2c, 0xac, 0x95, 0x74, 0xc8, 0xcb, 0xbc,
  3011. 0x2f, 0x80, 0x1e, 0x23, 0xe5, 0x6f, 0xd3, 0x44,
  3012. 0xb0, 0x7f, 0x22, 0x15, 0x4b, 0xeb, 0xa0, 0xf0,
  3013. 0x8c, 0xe8, 0x89, 0x1e, 0x64, 0x3e, 0xd9, 0x95,
  3014. 0xc9, 0x4d, 0x9a, 0x69, 0xc9, 0xf1, 0xb5, 0xf4,
  3015. 0x99, 0x02, 0x7a, 0x78, 0x57, 0x2a, 0xee, 0xbd,
  3016. 0x74, 0xd2, 0x0c, 0xc3, 0x98, 0x81, 0xc2, 0x13,
  3017. 0xee, 0x77, 0x0b, 0x10, 0x10, 0xe4, 0xbe, 0xa7,
  3018. 0x18, 0x84, 0x69, 0x77, 0xae, 0x11, 0x9f, 0x7a,
  3019. 0x02, 0x3a, 0xb5, 0x8c, 0xca, 0x0a, 0xd7, 0x52,
  3020. 0xaf, 0xe6, 0x56, 0xbb, 0x3c, 0x17, 0x25, 0x6a,
  3021. 0x9f, 0x6e, 0x9b, 0xf1, 0x9f, 0xdd, 0x5a, 0x38,
  3022. 0xfc, 0x82, 0xbb, 0xe8, 0x72, 0xc5, 0x53, 0x9e,
  3023. 0xdb, 0x60, 0x9e, 0xf4, 0xf7, 0x9c, 0x20, 0x3e,
  3024. 0xbb, 0x14, 0x0f, 0x2e, 0x58, 0x3c, 0xb2, 0xad,
  3025. 0x15, 0xb4, 0xaa, 0x5b, 0x65, 0x50, 0x16, 0xa8,
  3026. 0x44, 0x92, 0x77, 0xdb, 0xd4, 0x77, 0xef, 0x2c,
  3027. 0x8d, 0x6c, 0x01, 0x7d, 0xb7, 0x38, 0xb1, 0x8d,
  3028. 0xeb, 0x4a, 0x42, 0x7d, 0x19, 0x23, 0xce, 0x3f,
  3029. 0xf2, 0x62, 0x73, 0x57, 0x79, 0xa4, 0x18, 0xf2,
  3030. 0x0a, 0x28, 0x2d, 0xf9, 0x20, 0x14, 0x7b, 0xea,
  3031. 0xbe, 0x42, 0x1e, 0xe5, 0x31, 0x9d, 0x05, 0x68 },
  3032. .rlen = 512,
  3033. }
  3034. };
  3035. static struct cipher_testvec aes_xts_dec_tv_template[] = {
  3036. /* http://grouper.ieee.org/groups/1619/email/pdf00086.pdf */
  3037. { /* XTS-AES 1 */
  3038. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3039. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3040. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3041. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3042. .klen = 32,
  3043. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3044. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3045. .input = { 0x91, 0x7c, 0xf6, 0x9e, 0xbd, 0x68, 0xb2, 0xec,
  3046. 0x9b, 0x9f, 0xe9, 0xa3, 0xea, 0xdd, 0xa6, 0x92,
  3047. 0xcd, 0x43, 0xd2, 0xf5, 0x95, 0x98, 0xed, 0x85,
  3048. 0x8c, 0x02, 0xc2, 0x65, 0x2f, 0xbf, 0x92, 0x2e },
  3049. .ilen = 32,
  3050. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3051. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3052. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3053. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3054. .rlen = 32,
  3055. }, { /* XTS-AES 2 */
  3056. .key = { 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  3057. 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  3058. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  3059. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  3060. .klen = 32,
  3061. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  3062. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3063. .input = { 0xc4, 0x54, 0x18, 0x5e, 0x6a, 0x16, 0x93, 0x6e,
  3064. 0x39, 0x33, 0x40, 0x38, 0xac, 0xef, 0x83, 0x8b,
  3065. 0xfb, 0x18, 0x6f, 0xff, 0x74, 0x80, 0xad, 0xc4,
  3066. 0x28, 0x93, 0x82, 0xec, 0xd6, 0xd3, 0x94, 0xf0 },
  3067. .ilen = 32,
  3068. .result = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3069. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3070. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3071. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  3072. .rlen = 32,
  3073. }, { /* XTS-AES 3 */
  3074. .key = { 0xff, 0xfe, 0xfd, 0xfc, 0xfb, 0xfa, 0xf9, 0xf8,
  3075. 0xf7, 0xf6, 0xf5, 0xf4, 0xf3, 0xf2, 0xf1, 0xf0,
  3076. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  3077. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  3078. .klen = 32,
  3079. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  3080. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3081. .input = { 0xaf, 0x85, 0x33, 0x6b, 0x59, 0x7a, 0xfc, 0x1a,
  3082. 0x90, 0x0b, 0x2e, 0xb2, 0x1e, 0xc9, 0x49, 0xd2,
  3083. 0x92, 0xdf, 0x4c, 0x04, 0x7e, 0x0b, 0x21, 0x53,
  3084. 0x21, 0x86, 0xa5, 0x97, 0x1a, 0x22, 0x7a, 0x89 },
  3085. .ilen = 32,
  3086. .result = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3087. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3088. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3089. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  3090. .rlen = 32,
  3091. }, { /* XTS-AES 4 */
  3092. .key = { 0x27, 0x18, 0x28, 0x18, 0x28, 0x45, 0x90, 0x45,
  3093. 0x23, 0x53, 0x60, 0x28, 0x74, 0x71, 0x35, 0x26,
  3094. 0x31, 0x41, 0x59, 0x26, 0x53, 0x58, 0x97, 0x93,
  3095. 0x23, 0x84, 0x62, 0x64, 0x33, 0x83, 0x27, 0x95 },
  3096. .klen = 32,
  3097. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3098. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3099. .input = { 0x27, 0xa7, 0x47, 0x9b, 0xef, 0xa1, 0xd4, 0x76,
  3100. 0x48, 0x9f, 0x30, 0x8c, 0xd4, 0xcf, 0xa6, 0xe2,
  3101. 0xa9, 0x6e, 0x4b, 0xbe, 0x32, 0x08, 0xff, 0x25,
  3102. 0x28, 0x7d, 0xd3, 0x81, 0x96, 0x16, 0xe8, 0x9c,
  3103. 0xc7, 0x8c, 0xf7, 0xf5, 0xe5, 0x43, 0x44, 0x5f,
  3104. 0x83, 0x33, 0xd8, 0xfa, 0x7f, 0x56, 0x00, 0x00,
  3105. 0x05, 0x27, 0x9f, 0xa5, 0xd8, 0xb5, 0xe4, 0xad,
  3106. 0x40, 0xe7, 0x36, 0xdd, 0xb4, 0xd3, 0x54, 0x12,
  3107. 0x32, 0x80, 0x63, 0xfd, 0x2a, 0xab, 0x53, 0xe5,
  3108. 0xea, 0x1e, 0x0a, 0x9f, 0x33, 0x25, 0x00, 0xa5,
  3109. 0xdf, 0x94, 0x87, 0xd0, 0x7a, 0x5c, 0x92, 0xcc,
  3110. 0x51, 0x2c, 0x88, 0x66, 0xc7, 0xe8, 0x60, 0xce,
  3111. 0x93, 0xfd, 0xf1, 0x66, 0xa2, 0x49, 0x12, 0xb4,
  3112. 0x22, 0x97, 0x61, 0x46, 0xae, 0x20, 0xce, 0x84,
  3113. 0x6b, 0xb7, 0xdc, 0x9b, 0xa9, 0x4a, 0x76, 0x7a,
  3114. 0xae, 0xf2, 0x0c, 0x0d, 0x61, 0xad, 0x02, 0x65,
  3115. 0x5e, 0xa9, 0x2d, 0xc4, 0xc4, 0xe4, 0x1a, 0x89,
  3116. 0x52, 0xc6, 0x51, 0xd3, 0x31, 0x74, 0xbe, 0x51,
  3117. 0xa1, 0x0c, 0x42, 0x11, 0x10, 0xe6, 0xd8, 0x15,
  3118. 0x88, 0xed, 0xe8, 0x21, 0x03, 0xa2, 0x52, 0xd8,
  3119. 0xa7, 0x50, 0xe8, 0x76, 0x8d, 0xef, 0xff, 0xed,
  3120. 0x91, 0x22, 0x81, 0x0a, 0xae, 0xb9, 0x9f, 0x91,
  3121. 0x72, 0xaf, 0x82, 0xb6, 0x04, 0xdc, 0x4b, 0x8e,
  3122. 0x51, 0xbc, 0xb0, 0x82, 0x35, 0xa6, 0xf4, 0x34,
  3123. 0x13, 0x32, 0xe4, 0xca, 0x60, 0x48, 0x2a, 0x4b,
  3124. 0xa1, 0xa0, 0x3b, 0x3e, 0x65, 0x00, 0x8f, 0xc5,
  3125. 0xda, 0x76, 0xb7, 0x0b, 0xf1, 0x69, 0x0d, 0xb4,
  3126. 0xea, 0xe2, 0x9c, 0x5f, 0x1b, 0xad, 0xd0, 0x3c,
  3127. 0x5c, 0xcf, 0x2a, 0x55, 0xd7, 0x05, 0xdd, 0xcd,
  3128. 0x86, 0xd4, 0x49, 0x51, 0x1c, 0xeb, 0x7e, 0xc3,
  3129. 0x0b, 0xf1, 0x2b, 0x1f, 0xa3, 0x5b, 0x91, 0x3f,
  3130. 0x9f, 0x74, 0x7a, 0x8a, 0xfd, 0x1b, 0x13, 0x0e,
  3131. 0x94, 0xbf, 0xf9, 0x4e, 0xff, 0xd0, 0x1a, 0x91,
  3132. 0x73, 0x5c, 0xa1, 0x72, 0x6a, 0xcd, 0x0b, 0x19,
  3133. 0x7c, 0x4e, 0x5b, 0x03, 0x39, 0x36, 0x97, 0xe1,
  3134. 0x26, 0x82, 0x6f, 0xb6, 0xbb, 0xde, 0x8e, 0xcc,
  3135. 0x1e, 0x08, 0x29, 0x85, 0x16, 0xe2, 0xc9, 0xed,
  3136. 0x03, 0xff, 0x3c, 0x1b, 0x78, 0x60, 0xf6, 0xde,
  3137. 0x76, 0xd4, 0xce, 0xcd, 0x94, 0xc8, 0x11, 0x98,
  3138. 0x55, 0xef, 0x52, 0x97, 0xca, 0x67, 0xe9, 0xf3,
  3139. 0xe7, 0xff, 0x72, 0xb1, 0xe9, 0x97, 0x85, 0xca,
  3140. 0x0a, 0x7e, 0x77, 0x20, 0xc5, 0xb3, 0x6d, 0xc6,
  3141. 0xd7, 0x2c, 0xac, 0x95, 0x74, 0xc8, 0xcb, 0xbc,
  3142. 0x2f, 0x80, 0x1e, 0x23, 0xe5, 0x6f, 0xd3, 0x44,
  3143. 0xb0, 0x7f, 0x22, 0x15, 0x4b, 0xeb, 0xa0, 0xf0,
  3144. 0x8c, 0xe8, 0x89, 0x1e, 0x64, 0x3e, 0xd9, 0x95,
  3145. 0xc9, 0x4d, 0x9a, 0x69, 0xc9, 0xf1, 0xb5, 0xf4,
  3146. 0x99, 0x02, 0x7a, 0x78, 0x57, 0x2a, 0xee, 0xbd,
  3147. 0x74, 0xd2, 0x0c, 0xc3, 0x98, 0x81, 0xc2, 0x13,
  3148. 0xee, 0x77, 0x0b, 0x10, 0x10, 0xe4, 0xbe, 0xa7,
  3149. 0x18, 0x84, 0x69, 0x77, 0xae, 0x11, 0x9f, 0x7a,
  3150. 0x02, 0x3a, 0xb5, 0x8c, 0xca, 0x0a, 0xd7, 0x52,
  3151. 0xaf, 0xe6, 0x56, 0xbb, 0x3c, 0x17, 0x25, 0x6a,
  3152. 0x9f, 0x6e, 0x9b, 0xf1, 0x9f, 0xdd, 0x5a, 0x38,
  3153. 0xfc, 0x82, 0xbb, 0xe8, 0x72, 0xc5, 0x53, 0x9e,
  3154. 0xdb, 0x60, 0x9e, 0xf4, 0xf7, 0x9c, 0x20, 0x3e,
  3155. 0xbb, 0x14, 0x0f, 0x2e, 0x58, 0x3c, 0xb2, 0xad,
  3156. 0x15, 0xb4, 0xaa, 0x5b, 0x65, 0x50, 0x16, 0xa8,
  3157. 0x44, 0x92, 0x77, 0xdb, 0xd4, 0x77, 0xef, 0x2c,
  3158. 0x8d, 0x6c, 0x01, 0x7d, 0xb7, 0x38, 0xb1, 0x8d,
  3159. 0xeb, 0x4a, 0x42, 0x7d, 0x19, 0x23, 0xce, 0x3f,
  3160. 0xf2, 0x62, 0x73, 0x57, 0x79, 0xa4, 0x18, 0xf2,
  3161. 0x0a, 0x28, 0x2d, 0xf9, 0x20, 0x14, 0x7b, 0xea,
  3162. 0xbe, 0x42, 0x1e, 0xe5, 0x31, 0x9d, 0x05, 0x68 },
  3163. .ilen = 512,
  3164. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3165. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3166. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3167. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  3168. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  3169. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  3170. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  3171. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  3172. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  3173. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  3174. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  3175. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  3176. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  3177. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  3178. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  3179. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  3180. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  3181. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  3182. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  3183. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  3184. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  3185. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  3186. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  3187. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  3188. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  3189. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  3190. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  3191. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  3192. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  3193. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  3194. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  3195. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff,
  3196. 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3197. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3198. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3199. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  3200. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  3201. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  3202. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  3203. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  3204. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  3205. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  3206. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  3207. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  3208. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  3209. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  3210. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  3211. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  3212. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  3213. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  3214. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  3215. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  3216. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  3217. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  3218. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  3219. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  3220. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  3221. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  3222. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  3223. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  3224. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  3225. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  3226. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  3227. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff },
  3228. .rlen = 512,
  3229. }
  3230. };
  3231. static struct cipher_testvec aes_ctr_enc_tv_template[] = {
  3232. { /* From RFC 3686 */
  3233. .key = { 0xae, 0x68, 0x52, 0xf8, 0x12, 0x10, 0x67, 0xcc,
  3234. 0x4b, 0xf7, 0xa5, 0x76, 0x55, 0x77, 0xf3, 0x9e,
  3235. 0x00, 0x00, 0x00, 0x30 },
  3236. .klen = 20,
  3237. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3238. .input = { "Single block msg" },
  3239. .ilen = 16,
  3240. .result = { 0xe4, 0x09, 0x5d, 0x4f, 0xb7, 0xa7, 0xb3, 0x79,
  3241. 0x2d, 0x61, 0x75, 0xa3, 0x26, 0x13, 0x11, 0xb8 },
  3242. .rlen = 16,
  3243. }, {
  3244. .key = { 0x7e, 0x24, 0x06, 0x78, 0x17, 0xfa, 0xe0, 0xd7,
  3245. 0x43, 0xd6, 0xce, 0x1f, 0x32, 0x53, 0x91, 0x63,
  3246. 0x00, 0x6c, 0xb6, 0xdb },
  3247. .klen = 20,
  3248. .iv = { 0xc0, 0x54, 0x3b, 0x59, 0xda, 0x48, 0xd9, 0x0b },
  3249. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3250. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3251. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3252. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3253. .ilen = 32,
  3254. .result = { 0x51, 0x04, 0xa1, 0x06, 0x16, 0x8a, 0x72, 0xd9,
  3255. 0x79, 0x0d, 0x41, 0xee, 0x8e, 0xda, 0xd3, 0x88,
  3256. 0xeb, 0x2e, 0x1e, 0xfc, 0x46, 0xda, 0x57, 0xc8,
  3257. 0xfc, 0xe6, 0x30, 0xdf, 0x91, 0x41, 0xbe, 0x28 },
  3258. .rlen = 32,
  3259. }, {
  3260. .key = { 0x16, 0xaf, 0x5b, 0x14, 0x5f, 0xc9, 0xf5, 0x79,
  3261. 0xc1, 0x75, 0xf9, 0x3e, 0x3b, 0xfb, 0x0e, 0xed,
  3262. 0x86, 0x3d, 0x06, 0xcc, 0xfd, 0xb7, 0x85, 0x15,
  3263. 0x00, 0x00, 0x00, 0x48 },
  3264. .klen = 28,
  3265. .iv = { 0x36, 0x73, 0x3c, 0x14, 0x7d, 0x6d, 0x93, 0xcb },
  3266. .input = { "Single block msg" },
  3267. .ilen = 16,
  3268. .result = { 0x4b, 0x55, 0x38, 0x4f, 0xe2, 0x59, 0xc9, 0xc8,
  3269. 0x4e, 0x79, 0x35, 0xa0, 0x03, 0xcb, 0xe9, 0x28 },
  3270. .rlen = 16,
  3271. }, {
  3272. .key = { 0x7c, 0x5c, 0xb2, 0x40, 0x1b, 0x3d, 0xc3, 0x3c,
  3273. 0x19, 0xe7, 0x34, 0x08, 0x19, 0xe0, 0xf6, 0x9c,
  3274. 0x67, 0x8c, 0x3d, 0xb8, 0xe6, 0xf6, 0xa9, 0x1a,
  3275. 0x00, 0x96, 0xb0, 0x3b },
  3276. .klen = 28,
  3277. .iv = { 0x02, 0x0c, 0x6e, 0xad, 0xc2, 0xcb, 0x50, 0x0d },
  3278. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3279. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3280. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3281. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3282. .ilen = 32,
  3283. .result = { 0x45, 0x32, 0x43, 0xfc, 0x60, 0x9b, 0x23, 0x32,
  3284. 0x7e, 0xdf, 0xaa, 0xfa, 0x71, 0x31, 0xcd, 0x9f,
  3285. 0x84, 0x90, 0x70, 0x1c, 0x5a, 0xd4, 0xa7, 0x9c,
  3286. 0xfc, 0x1f, 0xe0, 0xff, 0x42, 0xf4, 0xfb, 0x00 },
  3287. .rlen = 32,
  3288. }, {
  3289. .key = { 0x77, 0x6b, 0xef, 0xf2, 0x85, 0x1d, 0xb0, 0x6f,
  3290. 0x4c, 0x8a, 0x05, 0x42, 0xc8, 0x69, 0x6f, 0x6c,
  3291. 0x6a, 0x81, 0xaf, 0x1e, 0xec, 0x96, 0xb4, 0xd3,
  3292. 0x7f, 0xc1, 0xd6, 0x89, 0xe6, 0xc1, 0xc1, 0x04,
  3293. 0x00, 0x00, 0x00, 0x60 },
  3294. .klen = 36,
  3295. .iv = { 0xdb, 0x56, 0x72, 0xc9, 0x7a, 0xa8, 0xf0, 0xb2 },
  3296. .input = { "Single block msg" },
  3297. .ilen = 16,
  3298. .result = { 0x14, 0x5a, 0xd0, 0x1d, 0xbf, 0x82, 0x4e, 0xc7,
  3299. 0x56, 0x08, 0x63, 0xdc, 0x71, 0xe3, 0xe0, 0xc0 },
  3300. .rlen = 16,
  3301. }, {
  3302. .key = { 0xf6, 0xd6, 0x6d, 0x6b, 0xd5, 0x2d, 0x59, 0xbb,
  3303. 0x07, 0x96, 0x36, 0x58, 0x79, 0xef, 0xf8, 0x86,
  3304. 0xc6, 0x6d, 0xd5, 0x1a, 0x5b, 0x6a, 0x99, 0x74,
  3305. 0x4b, 0x50, 0x59, 0x0c, 0x87, 0xa2, 0x38, 0x84,
  3306. 0x00, 0xfa, 0xac, 0x24 },
  3307. .klen = 36,
  3308. .iv = { 0xc1, 0x58, 0x5e, 0xf1, 0x5a, 0x43, 0xd8, 0x75 },
  3309. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3310. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3311. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3312. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3313. .ilen = 32,
  3314. .result = { 0xf0, 0x5e, 0x23, 0x1b, 0x38, 0x94, 0x61, 0x2c,
  3315. 0x49, 0xee, 0x00, 0x0b, 0x80, 0x4e, 0xb2, 0xa9,
  3316. 0xb8, 0x30, 0x6b, 0x50, 0x8f, 0x83, 0x9d, 0x6a,
  3317. 0x55, 0x30, 0x83, 0x1d, 0x93, 0x44, 0xaf, 0x1c },
  3318. .rlen = 32,
  3319. },
  3320. };
  3321. static struct cipher_testvec aes_ctr_dec_tv_template[] = {
  3322. { /* From RFC 3686 */
  3323. .key = { 0xae, 0x68, 0x52, 0xf8, 0x12, 0x10, 0x67, 0xcc,
  3324. 0x4b, 0xf7, 0xa5, 0x76, 0x55, 0x77, 0xf3, 0x9e,
  3325. 0x00, 0x00, 0x00, 0x30 },
  3326. .klen = 20,
  3327. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3328. .input = { 0xe4, 0x09, 0x5d, 0x4f, 0xb7, 0xa7, 0xb3, 0x79,
  3329. 0x2d, 0x61, 0x75, 0xa3, 0x26, 0x13, 0x11, 0xb8 },
  3330. .ilen = 16,
  3331. .result = { "Single block msg" },
  3332. .rlen = 16,
  3333. }, {
  3334. .key = { 0x7e, 0x24, 0x06, 0x78, 0x17, 0xfa, 0xe0, 0xd7,
  3335. 0x43, 0xd6, 0xce, 0x1f, 0x32, 0x53, 0x91, 0x63,
  3336. 0x00, 0x6c, 0xb6, 0xdb },
  3337. .klen = 20,
  3338. .iv = { 0xc0, 0x54, 0x3b, 0x59, 0xda, 0x48, 0xd9, 0x0b },
  3339. .input = { 0x51, 0x04, 0xa1, 0x06, 0x16, 0x8a, 0x72, 0xd9,
  3340. 0x79, 0x0d, 0x41, 0xee, 0x8e, 0xda, 0xd3, 0x88,
  3341. 0xeb, 0x2e, 0x1e, 0xfc, 0x46, 0xda, 0x57, 0xc8,
  3342. 0xfc, 0xe6, 0x30, 0xdf, 0x91, 0x41, 0xbe, 0x28 },
  3343. .ilen = 32,
  3344. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3345. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3346. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3347. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3348. .rlen = 32,
  3349. }, {
  3350. .key = { 0x16, 0xaf, 0x5b, 0x14, 0x5f, 0xc9, 0xf5, 0x79,
  3351. 0xc1, 0x75, 0xf9, 0x3e, 0x3b, 0xfb, 0x0e, 0xed,
  3352. 0x86, 0x3d, 0x06, 0xcc, 0xfd, 0xb7, 0x85, 0x15,
  3353. 0x00, 0x00, 0x00, 0x48 },
  3354. .klen = 28,
  3355. .iv = { 0x36, 0x73, 0x3c, 0x14, 0x7d, 0x6d, 0x93, 0xcb },
  3356. .input = { 0x4b, 0x55, 0x38, 0x4f, 0xe2, 0x59, 0xc9, 0xc8,
  3357. 0x4e, 0x79, 0x35, 0xa0, 0x03, 0xcb, 0xe9, 0x28 },
  3358. .ilen = 16,
  3359. .result = { "Single block msg" },
  3360. .rlen = 16,
  3361. }, {
  3362. .key = { 0x7c, 0x5c, 0xb2, 0x40, 0x1b, 0x3d, 0xc3, 0x3c,
  3363. 0x19, 0xe7, 0x34, 0x08, 0x19, 0xe0, 0xf6, 0x9c,
  3364. 0x67, 0x8c, 0x3d, 0xb8, 0xe6, 0xf6, 0xa9, 0x1a,
  3365. 0x00, 0x96, 0xb0, 0x3b },
  3366. .klen = 28,
  3367. .iv = { 0x02, 0x0c, 0x6e, 0xad, 0xc2, 0xcb, 0x50, 0x0d },
  3368. .input = { 0x45, 0x32, 0x43, 0xfc, 0x60, 0x9b, 0x23, 0x32,
  3369. 0x7e, 0xdf, 0xaa, 0xfa, 0x71, 0x31, 0xcd, 0x9f,
  3370. 0x84, 0x90, 0x70, 0x1c, 0x5a, 0xd4, 0xa7, 0x9c,
  3371. 0xfc, 0x1f, 0xe0, 0xff, 0x42, 0xf4, 0xfb, 0x00 },
  3372. .ilen = 32,
  3373. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3374. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3375. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3376. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3377. .rlen = 32,
  3378. }, {
  3379. .key = { 0x77, 0x6b, 0xef, 0xf2, 0x85, 0x1d, 0xb0, 0x6f,
  3380. 0x4c, 0x8a, 0x05, 0x42, 0xc8, 0x69, 0x6f, 0x6c,
  3381. 0x6a, 0x81, 0xaf, 0x1e, 0xec, 0x96, 0xb4, 0xd3,
  3382. 0x7f, 0xc1, 0xd6, 0x89, 0xe6, 0xc1, 0xc1, 0x04,
  3383. 0x00, 0x00, 0x00, 0x60 },
  3384. .klen = 36,
  3385. .iv = { 0xdb, 0x56, 0x72, 0xc9, 0x7a, 0xa8, 0xf0, 0xb2 },
  3386. .input = { 0x14, 0x5a, 0xd0, 0x1d, 0xbf, 0x82, 0x4e, 0xc7,
  3387. 0x56, 0x08, 0x63, 0xdc, 0x71, 0xe3, 0xe0, 0xc0 },
  3388. .ilen = 16,
  3389. .result = { "Single block msg" },
  3390. .rlen = 16,
  3391. }, {
  3392. .key = { 0xf6, 0xd6, 0x6d, 0x6b, 0xd5, 0x2d, 0x59, 0xbb,
  3393. 0x07, 0x96, 0x36, 0x58, 0x79, 0xef, 0xf8, 0x86,
  3394. 0xc6, 0x6d, 0xd5, 0x1a, 0x5b, 0x6a, 0x99, 0x74,
  3395. 0x4b, 0x50, 0x59, 0x0c, 0x87, 0xa2, 0x38, 0x84,
  3396. 0x00, 0xfa, 0xac, 0x24 },
  3397. .klen = 36,
  3398. .iv = { 0xc1, 0x58, 0x5e, 0xf1, 0x5a, 0x43, 0xd8, 0x75 },
  3399. .input = { 0xf0, 0x5e, 0x23, 0x1b, 0x38, 0x94, 0x61, 0x2c,
  3400. 0x49, 0xee, 0x00, 0x0b, 0x80, 0x4e, 0xb2, 0xa9,
  3401. 0xb8, 0x30, 0x6b, 0x50, 0x8f, 0x83, 0x9d, 0x6a,
  3402. 0x55, 0x30, 0x83, 0x1d, 0x93, 0x44, 0xaf, 0x1c },
  3403. .ilen = 32,
  3404. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3405. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3406. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3407. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3408. .rlen = 32,
  3409. },
  3410. };
  3411. /* Cast5 test vectors from RFC 2144 */
  3412. #define CAST5_ENC_TEST_VECTORS 3
  3413. #define CAST5_DEC_TEST_VECTORS 3
  3414. static struct cipher_testvec cast5_enc_tv_template[] = {
  3415. {
  3416. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3417. 0x23, 0x45, 0x67, 0x89, 0x34, 0x56, 0x78, 0x9a },
  3418. .klen = 16,
  3419. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3420. .ilen = 8,
  3421. .result = { 0x23, 0x8b, 0x4f, 0xe5, 0x84, 0x7e, 0x44, 0xb2 },
  3422. .rlen = 8,
  3423. }, {
  3424. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3425. 0x23, 0x45 },
  3426. .klen = 10,
  3427. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3428. .ilen = 8,
  3429. .result = { 0xeb, 0x6a, 0x71, 0x1a, 0x2c, 0x02, 0x27, 0x1b },
  3430. .rlen = 8,
  3431. }, {
  3432. .key = { 0x01, 0x23, 0x45, 0x67, 0x12 },
  3433. .klen = 5,
  3434. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3435. .ilen = 8,
  3436. .result = { 0x7a, 0xc8, 0x16, 0xd1, 0x6e, 0x9b, 0x30, 0x2e },
  3437. .rlen = 8,
  3438. },
  3439. };
  3440. static struct cipher_testvec cast5_dec_tv_template[] = {
  3441. {
  3442. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3443. 0x23, 0x45, 0x67, 0x89, 0x34, 0x56, 0x78, 0x9a },
  3444. .klen = 16,
  3445. .input = { 0x23, 0x8b, 0x4f, 0xe5, 0x84, 0x7e, 0x44, 0xb2 },
  3446. .ilen = 8,
  3447. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3448. .rlen = 8,
  3449. }, {
  3450. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3451. 0x23, 0x45 },
  3452. .klen = 10,
  3453. .input = { 0xeb, 0x6a, 0x71, 0x1a, 0x2c, 0x02, 0x27, 0x1b },
  3454. .ilen = 8,
  3455. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3456. .rlen = 8,
  3457. }, {
  3458. .key = { 0x01, 0x23, 0x45, 0x67, 0x12 },
  3459. .klen = 5,
  3460. .input = { 0x7a, 0xc8, 0x16, 0xd1, 0x6e, 0x9b, 0x30, 0x2e },
  3461. .ilen = 8,
  3462. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3463. .rlen = 8,
  3464. },
  3465. };
  3466. /*
  3467. * ARC4 test vectors from OpenSSL
  3468. */
  3469. #define ARC4_ENC_TEST_VECTORS 7
  3470. #define ARC4_DEC_TEST_VECTORS 7
  3471. static struct cipher_testvec arc4_enc_tv_template[] = {
  3472. {
  3473. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3474. .klen = 8,
  3475. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3476. .ilen = 8,
  3477. .result = { 0x75, 0xb7, 0x87, 0x80, 0x99, 0xe0, 0xc5, 0x96 },
  3478. .rlen = 8,
  3479. }, {
  3480. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3481. .klen = 8,
  3482. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3483. .ilen = 8,
  3484. .result = { 0x74, 0x94, 0xc2, 0xe7, 0x10, 0x4b, 0x08, 0x79 },
  3485. .rlen = 8,
  3486. }, {
  3487. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3488. .klen = 8,
  3489. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3490. .ilen = 8,
  3491. .result = { 0xde, 0x18, 0x89, 0x41, 0xa3, 0x37, 0x5d, 0x3a },
  3492. .rlen = 8,
  3493. }, {
  3494. .key = { 0xef, 0x01, 0x23, 0x45},
  3495. .klen = 4,
  3496. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3497. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3498. 0x00, 0x00, 0x00, 0x00 },
  3499. .ilen = 20,
  3500. .result = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3501. 0xbd, 0x61, 0x5a, 0x11, 0x62, 0xe1, 0xc7, 0xba,
  3502. 0x36, 0xb6, 0x78, 0x58 },
  3503. .rlen = 20,
  3504. }, {
  3505. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3506. .klen = 8,
  3507. .input = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3508. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3509. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3510. 0x12, 0x34, 0x56, 0x78 },
  3511. .ilen = 28,
  3512. .result = { 0x66, 0xa0, 0x94, 0x9f, 0x8a, 0xf7, 0xd6, 0x89,
  3513. 0x1f, 0x7f, 0x83, 0x2b, 0xa8, 0x33, 0xc0, 0x0c,
  3514. 0x89, 0x2e, 0xbe, 0x30, 0x14, 0x3c, 0xe2, 0x87,
  3515. 0x40, 0x01, 0x1e, 0xcf },
  3516. .rlen = 28,
  3517. }, {
  3518. .key = { 0xef, 0x01, 0x23, 0x45 },
  3519. .klen = 4,
  3520. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3521. 0x00, 0x00 },
  3522. .ilen = 10,
  3523. .result = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3524. 0xbd, 0x61 },
  3525. .rlen = 10,
  3526. }, {
  3527. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF,
  3528. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3529. .klen = 16,
  3530. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
  3531. .ilen = 8,
  3532. .result = { 0x69, 0x72, 0x36, 0x59, 0x1B, 0x52, 0x42, 0xB1 },
  3533. .rlen = 8,
  3534. },
  3535. };
  3536. static struct cipher_testvec arc4_dec_tv_template[] = {
  3537. {
  3538. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3539. .klen = 8,
  3540. .input = { 0x75, 0xb7, 0x87, 0x80, 0x99, 0xe0, 0xc5, 0x96 },
  3541. .ilen = 8,
  3542. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3543. .rlen = 8,
  3544. }, {
  3545. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3546. .klen = 8,
  3547. .input = { 0x74, 0x94, 0xc2, 0xe7, 0x10, 0x4b, 0x08, 0x79 },
  3548. .ilen = 8,
  3549. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3550. .rlen = 8,
  3551. }, {
  3552. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3553. .klen = 8,
  3554. .input = { 0xde, 0x18, 0x89, 0x41, 0xa3, 0x37, 0x5d, 0x3a },
  3555. .ilen = 8,
  3556. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3557. .rlen = 8,
  3558. }, {
  3559. .key = { 0xef, 0x01, 0x23, 0x45},
  3560. .klen = 4,
  3561. .input = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3562. 0xbd, 0x61, 0x5a, 0x11, 0x62, 0xe1, 0xc7, 0xba,
  3563. 0x36, 0xb6, 0x78, 0x58 },
  3564. .ilen = 20,
  3565. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3566. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3567. 0x00, 0x00, 0x00, 0x00 },
  3568. .rlen = 20,
  3569. }, {
  3570. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3571. .klen = 8,
  3572. .input = { 0x66, 0xa0, 0x94, 0x9f, 0x8a, 0xf7, 0xd6, 0x89,
  3573. 0x1f, 0x7f, 0x83, 0x2b, 0xa8, 0x33, 0xc0, 0x0c,
  3574. 0x89, 0x2e, 0xbe, 0x30, 0x14, 0x3c, 0xe2, 0x87,
  3575. 0x40, 0x01, 0x1e, 0xcf },
  3576. .ilen = 28,
  3577. .result = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3578. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3579. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3580. 0x12, 0x34, 0x56, 0x78 },
  3581. .rlen = 28,
  3582. }, {
  3583. .key = { 0xef, 0x01, 0x23, 0x45 },
  3584. .klen = 4,
  3585. .input = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3586. 0xbd, 0x61 },
  3587. .ilen = 10,
  3588. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3589. 0x00, 0x00 },
  3590. .rlen = 10,
  3591. }, {
  3592. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF,
  3593. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3594. .klen = 16,
  3595. .input = { 0x69, 0x72, 0x36, 0x59, 0x1B, 0x52, 0x42, 0xB1 },
  3596. .ilen = 8,
  3597. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
  3598. .rlen = 8,
  3599. },
  3600. };
  3601. /*
  3602. * TEA test vectors
  3603. */
  3604. #define TEA_ENC_TEST_VECTORS 4
  3605. #define TEA_DEC_TEST_VECTORS 4
  3606. static struct cipher_testvec tea_enc_tv_template[] = {
  3607. {
  3608. .key = { [0 ... 15] = 0x00 },
  3609. .klen = 16,
  3610. .input = { [0 ... 8] = 0x00 },
  3611. .ilen = 8,
  3612. .result = { 0x0a, 0x3a, 0xea, 0x41, 0x40, 0xa9, 0xba, 0x94 },
  3613. .rlen = 8,
  3614. }, {
  3615. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3616. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3617. .klen = 16,
  3618. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3619. .ilen = 8,
  3620. .result = { 0x77, 0x5d, 0x2a, 0x6a, 0xf6, 0xce, 0x92, 0x09 },
  3621. .rlen = 8,
  3622. }, {
  3623. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3624. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3625. .klen = 16,
  3626. .input = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  3627. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3628. .ilen = 16,
  3629. .result = { 0xbe, 0x7a, 0xbb, 0x81, 0x95, 0x2d, 0x1f, 0x1e,
  3630. 0xdd, 0x89, 0xa1, 0x25, 0x04, 0x21, 0xdf, 0x95 },
  3631. .rlen = 16,
  3632. }, {
  3633. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3634. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3635. .klen = 16,
  3636. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3637. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3638. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3639. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3640. .ilen = 32,
  3641. .result = { 0xe0, 0x4d, 0x5d, 0x3c, 0xb7, 0x8c, 0x36, 0x47,
  3642. 0x94, 0x18, 0x95, 0x91, 0xa9, 0xfc, 0x49, 0xf8,
  3643. 0x44, 0xd1, 0x2d, 0xc2, 0x99, 0xb8, 0x08, 0x2a,
  3644. 0x07, 0x89, 0x73, 0xc2, 0x45, 0x92, 0xc6, 0x90 },
  3645. .rlen = 32,
  3646. }
  3647. };
  3648. static struct cipher_testvec tea_dec_tv_template[] = {
  3649. {
  3650. .key = { [0 ... 15] = 0x00 },
  3651. .klen = 16,
  3652. .input = { 0x0a, 0x3a, 0xea, 0x41, 0x40, 0xa9, 0xba, 0x94 },
  3653. .ilen = 8,
  3654. .result = { [0 ... 8] = 0x00 },
  3655. .rlen = 8,
  3656. }, {
  3657. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3658. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3659. .klen = 16,
  3660. .input = { 0x77, 0x5d, 0x2a, 0x6a, 0xf6, 0xce, 0x92, 0x09 },
  3661. .ilen = 8,
  3662. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3663. .rlen = 8,
  3664. }, {
  3665. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3666. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3667. .klen = 16,
  3668. .input = { 0xbe, 0x7a, 0xbb, 0x81, 0x95, 0x2d, 0x1f, 0x1e,
  3669. 0xdd, 0x89, 0xa1, 0x25, 0x04, 0x21, 0xdf, 0x95 },
  3670. .ilen = 16,
  3671. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  3672. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3673. .rlen = 16,
  3674. }, {
  3675. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3676. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3677. .klen = 16,
  3678. .input = { 0xe0, 0x4d, 0x5d, 0x3c, 0xb7, 0x8c, 0x36, 0x47,
  3679. 0x94, 0x18, 0x95, 0x91, 0xa9, 0xfc, 0x49, 0xf8,
  3680. 0x44, 0xd1, 0x2d, 0xc2, 0x99, 0xb8, 0x08, 0x2a,
  3681. 0x07, 0x89, 0x73, 0xc2, 0x45, 0x92, 0xc6, 0x90 },
  3682. .ilen = 32,
  3683. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3684. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3685. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3686. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3687. .rlen = 32,
  3688. }
  3689. };
  3690. /*
  3691. * XTEA test vectors
  3692. */
  3693. #define XTEA_ENC_TEST_VECTORS 4
  3694. #define XTEA_DEC_TEST_VECTORS 4
  3695. static struct cipher_testvec xtea_enc_tv_template[] = {
  3696. {
  3697. .key = { [0 ... 15] = 0x00 },
  3698. .klen = 16,
  3699. .input = { [0 ... 8] = 0x00 },
  3700. .ilen = 8,
  3701. .result = { 0xd8, 0xd4, 0xe9, 0xde, 0xd9, 0x1e, 0x13, 0xf7 },
  3702. .rlen = 8,
  3703. }, {
  3704. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3705. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3706. .klen = 16,
  3707. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3708. .ilen = 8,
  3709. .result = { 0x94, 0xeb, 0xc8, 0x96, 0x84, 0x6a, 0x49, 0xa8 },
  3710. .rlen = 8,
  3711. }, {
  3712. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3713. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3714. .klen = 16,
  3715. .input = { 0x3e, 0xce, 0xae, 0x22, 0x60, 0x56, 0xa8, 0x9d,
  3716. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3717. .ilen = 16,
  3718. .result = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  3719. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  3720. .rlen = 16,
  3721. }, {
  3722. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3723. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3724. .klen = 16,
  3725. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3726. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3727. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3728. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3729. .ilen = 32,
  3730. .result = { 0x99, 0x81, 0x9f, 0x5d, 0x6f, 0x4b, 0x31, 0x3a,
  3731. 0x86, 0xff, 0x6f, 0xd0, 0xe3, 0x87, 0x70, 0x07,
  3732. 0x4d, 0xb8, 0xcf, 0xf3, 0x99, 0x50, 0xb3, 0xd4,
  3733. 0x73, 0xa2, 0xfa, 0xc9, 0x16, 0x59, 0x5d, 0x81 },
  3734. .rlen = 32,
  3735. }
  3736. };
  3737. static struct cipher_testvec xtea_dec_tv_template[] = {
  3738. {
  3739. .key = { [0 ... 15] = 0x00 },
  3740. .klen = 16,
  3741. .input = { 0xd8, 0xd4, 0xe9, 0xde, 0xd9, 0x1e, 0x13, 0xf7 },
  3742. .ilen = 8,
  3743. .result = { [0 ... 8] = 0x00 },
  3744. .rlen = 8,
  3745. }, {
  3746. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3747. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3748. .klen = 16,
  3749. .input = { 0x94, 0xeb, 0xc8, 0x96, 0x84, 0x6a, 0x49, 0xa8 },
  3750. .ilen = 8,
  3751. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3752. .rlen = 8,
  3753. }, {
  3754. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3755. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3756. .klen = 16,
  3757. .input = { 0x3e, 0xce, 0xae, 0x22, 0x60, 0x56, 0xa8, 0x9d,
  3758. 0x77, 0x4d, 0xd4, 0xb4, 0x87, 0x24, 0xe3, 0x9a },
  3759. .ilen = 16,
  3760. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  3761. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3762. .rlen = 16,
  3763. }, {
  3764. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3765. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3766. .klen = 16,
  3767. .input = { 0x99, 0x81, 0x9f, 0x5d, 0x6f, 0x4b, 0x31, 0x3a,
  3768. 0x86, 0xff, 0x6f, 0xd0, 0xe3, 0x87, 0x70, 0x07,
  3769. 0x4d, 0xb8, 0xcf, 0xf3, 0x99, 0x50, 0xb3, 0xd4,
  3770. 0x73, 0xa2, 0xfa, 0xc9, 0x16, 0x59, 0x5d, 0x81 },
  3771. .ilen = 32,
  3772. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3773. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3774. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3775. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3776. .rlen = 32,
  3777. }
  3778. };
  3779. /*
  3780. * KHAZAD test vectors.
  3781. */
  3782. #define KHAZAD_ENC_TEST_VECTORS 5
  3783. #define KHAZAD_DEC_TEST_VECTORS 5
  3784. static struct cipher_testvec khazad_enc_tv_template[] = {
  3785. {
  3786. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3787. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3788. .klen = 16,
  3789. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3790. .ilen = 8,
  3791. .result = { 0x49, 0xa4, 0xce, 0x32, 0xac, 0x19, 0x0e, 0x3f },
  3792. .rlen = 8,
  3793. }, {
  3794. .key = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38,
  3795. 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3796. .klen = 16,
  3797. .input = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3798. .ilen = 8,
  3799. .result = { 0x7e, 0x82, 0x12, 0xa1, 0Xd9, 0X5b, 0Xe4, 0Xf9 },
  3800. .rlen = 8,
  3801. }, {
  3802. .key = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2,
  3803. 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3804. .klen = 16,
  3805. .input = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3806. .ilen = 8,
  3807. .result = { 0Xaa, 0Xbe, 0Xc1, 0X95, 0Xc5, 0X94, 0X1a, 0X9c },
  3808. .rlen = 8,
  3809. }, {
  3810. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3811. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3812. .klen = 16,
  3813. .input = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3814. .ilen = 8,
  3815. .result = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3816. .rlen = 8,
  3817. }, {
  3818. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3819. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3820. .klen = 16,
  3821. .input = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f ,
  3822. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3823. .ilen = 16,
  3824. .result = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 ,
  3825. 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3826. .rlen = 16,
  3827. },
  3828. };
  3829. static struct cipher_testvec khazad_dec_tv_template[] = {
  3830. {
  3831. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3832. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3833. .klen = 16,
  3834. .input = { 0X49, 0Xa4, 0Xce, 0X32, 0Xac, 0X19, 0X0e, 0X3f },
  3835. .ilen = 8,
  3836. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3837. .rlen = 8,
  3838. }, {
  3839. .key = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38,
  3840. 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3841. .klen = 16,
  3842. .input = { 0X7e, 0X82, 0X12, 0Xa1, 0Xd9, 0X5b, 0Xe4, 0Xf9 },
  3843. .ilen = 8,
  3844. .result = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3845. .rlen = 8,
  3846. }, {
  3847. .key = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2,
  3848. 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3849. .klen = 16,
  3850. .input = { 0Xaa, 0Xbe, 0Xc1, 0X95, 0Xc5, 0X94, 0X1a, 0X9c },
  3851. .ilen = 8,
  3852. .result = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3853. .rlen = 8,
  3854. }, {
  3855. .key = { 0x2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3856. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3857. .klen = 16,
  3858. .input = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3859. .ilen = 8,
  3860. .result = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3861. .rlen = 8,
  3862. }, {
  3863. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3864. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3865. .klen = 16,
  3866. .input = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 ,
  3867. 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3868. .ilen = 16,
  3869. .result = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f ,
  3870. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3871. .rlen = 16,
  3872. },
  3873. };
  3874. /*
  3875. * Anubis test vectors.
  3876. */
  3877. #define ANUBIS_ENC_TEST_VECTORS 5
  3878. #define ANUBIS_DEC_TEST_VECTORS 5
  3879. #define ANUBIS_CBC_ENC_TEST_VECTORS 2
  3880. #define ANUBIS_CBC_DEC_TEST_VECTORS 2
  3881. static struct cipher_testvec anubis_enc_tv_template[] = {
  3882. {
  3883. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3884. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3885. .klen = 16,
  3886. .input = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3887. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3888. .ilen = 16,
  3889. .result = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  3890. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90 },
  3891. .rlen = 16,
  3892. }, {
  3893. .key = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3894. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3895. 0x03, 0x03, 0x03, 0x03 },
  3896. .klen = 20,
  3897. .input = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3898. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03 },
  3899. .ilen = 16,
  3900. .result = { 0xdb, 0xf1, 0x42, 0xf4, 0xd1, 0x8a, 0xc7, 0x49,
  3901. 0x87, 0x41, 0x6f, 0x82, 0x0a, 0x98, 0x64, 0xae },
  3902. .rlen = 16,
  3903. }, {
  3904. .key = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3905. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3906. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3907. 0x24, 0x24, 0x24, 0x24 },
  3908. .klen = 28,
  3909. .input = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3910. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24 },
  3911. .ilen = 16,
  3912. .result = { 0xfd, 0x1b, 0x4a, 0xe3, 0xbf, 0xf0, 0xad, 0x3d,
  3913. 0x06, 0xd3, 0x61, 0x27, 0xfd, 0x13, 0x9e, 0xde },
  3914. .rlen = 16,
  3915. }, {
  3916. .key = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3917. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3918. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3919. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  3920. .klen = 32,
  3921. .input = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3922. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  3923. .ilen = 16,
  3924. .result = { 0x1a, 0x91, 0xfb, 0x2b, 0xb7, 0x78, 0x6b, 0xc4,
  3925. 0x17, 0xd9, 0xff, 0x40, 0x3b, 0x0e, 0xe5, 0xfe },
  3926. .rlen = 16,
  3927. }, {
  3928. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3929. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3930. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3931. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3932. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  3933. .klen = 40,
  3934. .input = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3935. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  3936. .ilen = 16,
  3937. .result = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  3938. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee },
  3939. .rlen = 16,
  3940. },
  3941. };
  3942. static struct cipher_testvec anubis_dec_tv_template[] = {
  3943. {
  3944. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3945. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3946. .klen = 16,
  3947. .input = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  3948. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90 },
  3949. .ilen = 16,
  3950. .result = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3951. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3952. .rlen = 16,
  3953. }, {
  3954. .key = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3955. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3956. 0x03, 0x03, 0x03, 0x03 },
  3957. .klen = 20,
  3958. .input = { 0xdb, 0xf1, 0x42, 0xf4, 0xd1, 0x8a, 0xc7, 0x49,
  3959. 0x87, 0x41, 0x6f, 0x82, 0x0a, 0x98, 0x64, 0xae },
  3960. .ilen = 16,
  3961. .result = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3962. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03 },
  3963. .rlen = 16,
  3964. }, {
  3965. .key = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3966. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3967. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3968. 0x24, 0x24, 0x24, 0x24 },
  3969. .klen = 28,
  3970. .input = { 0xfd, 0x1b, 0x4a, 0xe3, 0xbf, 0xf0, 0xad, 0x3d,
  3971. 0x06, 0xd3, 0x61, 0x27, 0xfd, 0x13, 0x9e, 0xde },
  3972. .ilen = 16,
  3973. .result = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3974. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24 },
  3975. .rlen = 16,
  3976. }, {
  3977. .key = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3978. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3979. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3980. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  3981. .klen = 32,
  3982. .input = { 0x1a, 0x91, 0xfb, 0x2b, 0xb7, 0x78, 0x6b, 0xc4,
  3983. 0x17, 0xd9, 0xff, 0x40, 0x3b, 0x0e, 0xe5, 0xfe },
  3984. .ilen = 16,
  3985. .result = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3986. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  3987. .rlen = 16,
  3988. }, {
  3989. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3990. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3991. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3992. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3993. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  3994. .input = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  3995. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee },
  3996. .klen = 40,
  3997. .ilen = 16,
  3998. .result = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3999. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4000. .rlen = 16,
  4001. },
  4002. };
  4003. static struct cipher_testvec anubis_cbc_enc_tv_template[] = {
  4004. {
  4005. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4006. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4007. .klen = 16,
  4008. .input = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4009. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4010. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4011. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4012. .ilen = 32,
  4013. .result = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  4014. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90,
  4015. 0x86, 0xd8, 0xb5, 0x6f, 0x98, 0x5e, 0x8a, 0x66,
  4016. 0x4f, 0x1f, 0x78, 0xa1, 0xbb, 0x37, 0xf1, 0xbe },
  4017. .rlen = 32,
  4018. }, {
  4019. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4020. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4021. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4022. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4023. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4024. .klen = 40,
  4025. .input = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4026. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4027. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4028. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4029. .ilen = 32,
  4030. .result = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  4031. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee,
  4032. 0xa2, 0xbc, 0x06, 0x98, 0xc6, 0x4b, 0xda, 0x75,
  4033. 0x2e, 0xaa, 0xbe, 0x58, 0xce, 0x01, 0x5b, 0xc7 },
  4034. .rlen = 32,
  4035. },
  4036. };
  4037. static struct cipher_testvec anubis_cbc_dec_tv_template[] = {
  4038. {
  4039. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4040. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4041. .klen = 16,
  4042. .input = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  4043. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90,
  4044. 0x86, 0xd8, 0xb5, 0x6f, 0x98, 0x5e, 0x8a, 0x66,
  4045. 0x4f, 0x1f, 0x78, 0xa1, 0xbb, 0x37, 0xf1, 0xbe },
  4046. .ilen = 32,
  4047. .result = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4048. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4049. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4050. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4051. .rlen = 32,
  4052. }, {
  4053. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4054. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4055. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4056. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4057. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4058. .klen = 40,
  4059. .input = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  4060. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee,
  4061. 0xa2, 0xbc, 0x06, 0x98, 0xc6, 0x4b, 0xda, 0x75,
  4062. 0x2e, 0xaa, 0xbe, 0x58, 0xce, 0x01, 0x5b, 0xc7 },
  4063. .ilen = 32,
  4064. .result = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4065. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4066. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4067. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4068. .rlen = 32,
  4069. },
  4070. };
  4071. /*
  4072. * XETA test vectors
  4073. */
  4074. #define XETA_ENC_TEST_VECTORS 4
  4075. #define XETA_DEC_TEST_VECTORS 4
  4076. static struct cipher_testvec xeta_enc_tv_template[] = {
  4077. {
  4078. .key = { [0 ... 15] = 0x00 },
  4079. .klen = 16,
  4080. .input = { [0 ... 8] = 0x00 },
  4081. .ilen = 8,
  4082. .result = { 0xaa, 0x22, 0x96, 0xe5, 0x6c, 0x61, 0xf3, 0x45 },
  4083. .rlen = 8,
  4084. }, {
  4085. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  4086. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  4087. .klen = 16,
  4088. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  4089. .ilen = 8,
  4090. .result = { 0x82, 0x3e, 0xeb, 0x35, 0xdc, 0xdd, 0xd9, 0xc3 },
  4091. .rlen = 8,
  4092. }, {
  4093. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  4094. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  4095. .klen = 16,
  4096. .input = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  4097. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  4098. .ilen = 16,
  4099. .result = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  4100. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  4101. .rlen = 16,
  4102. }, {
  4103. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  4104. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  4105. .klen = 16,
  4106. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  4107. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  4108. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  4109. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  4110. .ilen = 32,
  4111. .result = { 0x0b, 0x03, 0xcd, 0x8a, 0xbe, 0x95, 0xfd, 0xb1,
  4112. 0xc1, 0x44, 0x91, 0x0b, 0xa5, 0xc9, 0x1b, 0xb4,
  4113. 0xa9, 0xda, 0x1e, 0x9e, 0xb1, 0x3e, 0x2a, 0x8f,
  4114. 0xea, 0xa5, 0x6a, 0x85, 0xd1, 0xf4, 0xa8, 0xa5 },
  4115. .rlen = 32,
  4116. }
  4117. };
  4118. static struct cipher_testvec xeta_dec_tv_template[] = {
  4119. {
  4120. .key = { [0 ... 15] = 0x00 },
  4121. .klen = 16,
  4122. .input = { 0xaa, 0x22, 0x96, 0xe5, 0x6c, 0x61, 0xf3, 0x45 },
  4123. .ilen = 8,
  4124. .result = { [0 ... 8] = 0x00 },
  4125. .rlen = 8,
  4126. }, {
  4127. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  4128. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  4129. .klen = 16,
  4130. .input = { 0x82, 0x3e, 0xeb, 0x35, 0xdc, 0xdd, 0xd9, 0xc3 },
  4131. .ilen = 8,
  4132. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  4133. .rlen = 8,
  4134. }, {
  4135. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  4136. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  4137. .klen = 16,
  4138. .input = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  4139. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  4140. .ilen = 16,
  4141. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  4142. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  4143. .rlen = 16,
  4144. }, {
  4145. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  4146. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  4147. .klen = 16,
  4148. .input = { 0x0b, 0x03, 0xcd, 0x8a, 0xbe, 0x95, 0xfd, 0xb1,
  4149. 0xc1, 0x44, 0x91, 0x0b, 0xa5, 0xc9, 0x1b, 0xb4,
  4150. 0xa9, 0xda, 0x1e, 0x9e, 0xb1, 0x3e, 0x2a, 0x8f,
  4151. 0xea, 0xa5, 0x6a, 0x85, 0xd1, 0xf4, 0xa8, 0xa5 },
  4152. .ilen = 32,
  4153. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  4154. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  4155. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  4156. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  4157. .rlen = 32,
  4158. }
  4159. };
  4160. /*
  4161. * FCrypt test vectors
  4162. */
  4163. #define FCRYPT_ENC_TEST_VECTORS ARRAY_SIZE(fcrypt_pcbc_enc_tv_template)
  4164. #define FCRYPT_DEC_TEST_VECTORS ARRAY_SIZE(fcrypt_pcbc_dec_tv_template)
  4165. static struct cipher_testvec fcrypt_pcbc_enc_tv_template[] = {
  4166. { /* http://www.openafs.org/pipermail/openafs-devel/2000-December/005320.html */
  4167. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4168. .klen = 8,
  4169. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4170. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4171. .ilen = 8,
  4172. .result = { 0x0E, 0x09, 0x00, 0xC7, 0x3E, 0xF7, 0xED, 0x41 },
  4173. .rlen = 8,
  4174. }, {
  4175. .key = { 0x11, 0x44, 0x77, 0xAA, 0xDD, 0x00, 0x33, 0x66 },
  4176. .klen = 8,
  4177. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4178. .input = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0 },
  4179. .ilen = 8,
  4180. .result = { 0xD8, 0xED, 0x78, 0x74, 0x77, 0xEC, 0x06, 0x80 },
  4181. .rlen = 8,
  4182. }, { /* From Arla */
  4183. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4184. .klen = 8,
  4185. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4186. .input = "The quick brown fox jumps over the lazy dogs.\0\0",
  4187. .ilen = 48,
  4188. .result = { 0x00, 0xf0, 0xe, 0x11, 0x75, 0xe6, 0x23, 0x82,
  4189. 0xee, 0xac, 0x98, 0x62, 0x44, 0x51, 0xe4, 0x84,
  4190. 0xc3, 0x59, 0xd8, 0xaa, 0x64, 0x60, 0xae, 0xf7,
  4191. 0xd2, 0xd9, 0x13, 0x79, 0x72, 0xa3, 0x45, 0x03,
  4192. 0x23, 0xb5, 0x62, 0xd7, 0x0c, 0xf5, 0x27, 0xd1,
  4193. 0xf8, 0x91, 0x3c, 0xac, 0x44, 0x22, 0x92, 0xef },
  4194. .rlen = 48,
  4195. }, {
  4196. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4197. .klen = 8,
  4198. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4199. .input = "The quick brown fox jumps over the lazy dogs.\0\0",
  4200. .ilen = 48,
  4201. .result = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4202. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4203. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4204. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4205. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4206. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4207. .rlen = 48,
  4208. }, { /* split-page version */
  4209. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4210. .klen = 8,
  4211. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4212. .input = "The quick brown fox jumps over the lazy dogs.\0\0",
  4213. .ilen = 48,
  4214. .result = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4215. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4216. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4217. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4218. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4219. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4220. .rlen = 48,
  4221. .np = 2,
  4222. .tap = { 20, 28 },
  4223. }
  4224. };
  4225. static struct cipher_testvec fcrypt_pcbc_dec_tv_template[] = {
  4226. { /* http://www.openafs.org/pipermail/openafs-devel/2000-December/005320.html */
  4227. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4228. .klen = 8,
  4229. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4230. .input = { 0x0E, 0x09, 0x00, 0xC7, 0x3E, 0xF7, 0xED, 0x41 },
  4231. .ilen = 8,
  4232. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4233. .rlen = 8,
  4234. }, {
  4235. .key = { 0x11, 0x44, 0x77, 0xAA, 0xDD, 0x00, 0x33, 0x66 },
  4236. .klen = 8,
  4237. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4238. .input = { 0xD8, 0xED, 0x78, 0x74, 0x77, 0xEC, 0x06, 0x80 },
  4239. .ilen = 8,
  4240. .result = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0 },
  4241. .rlen = 8,
  4242. }, { /* From Arla */
  4243. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4244. .klen = 8,
  4245. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4246. .input = { 0x00, 0xf0, 0xe, 0x11, 0x75, 0xe6, 0x23, 0x82,
  4247. 0xee, 0xac, 0x98, 0x62, 0x44, 0x51, 0xe4, 0x84,
  4248. 0xc3, 0x59, 0xd8, 0xaa, 0x64, 0x60, 0xae, 0xf7,
  4249. 0xd2, 0xd9, 0x13, 0x79, 0x72, 0xa3, 0x45, 0x03,
  4250. 0x23, 0xb5, 0x62, 0xd7, 0x0c, 0xf5, 0x27, 0xd1,
  4251. 0xf8, 0x91, 0x3c, 0xac, 0x44, 0x22, 0x92, 0xef },
  4252. .ilen = 48,
  4253. .result = "The quick brown fox jumps over the lazy dogs.\0\0",
  4254. .rlen = 48,
  4255. }, {
  4256. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4257. .klen = 8,
  4258. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4259. .input = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4260. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4261. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4262. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4263. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4264. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4265. .ilen = 48,
  4266. .result = "The quick brown fox jumps over the lazy dogs.\0\0",
  4267. .rlen = 48,
  4268. }, { /* split-page version */
  4269. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4270. .klen = 8,
  4271. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4272. .input = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4273. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4274. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4275. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4276. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4277. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4278. .ilen = 48,
  4279. .result = "The quick brown fox jumps over the lazy dogs.\0\0",
  4280. .rlen = 48,
  4281. .np = 2,
  4282. .tap = { 20, 28 },
  4283. }
  4284. };
  4285. /*
  4286. * CAMELLIA test vectors.
  4287. */
  4288. #define CAMELLIA_ENC_TEST_VECTORS 3
  4289. #define CAMELLIA_DEC_TEST_VECTORS 3
  4290. #define CAMELLIA_CBC_ENC_TEST_VECTORS 2
  4291. #define CAMELLIA_CBC_DEC_TEST_VECTORS 2
  4292. static struct cipher_testvec camellia_enc_tv_template[] = {
  4293. {
  4294. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4295. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4296. .klen = 16,
  4297. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4298. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4299. .ilen = 16,
  4300. .result = { 0x67, 0x67, 0x31, 0x38, 0x54, 0x96, 0x69, 0x73,
  4301. 0x08, 0x57, 0x06, 0x56, 0x48, 0xea, 0xbe, 0x43 },
  4302. .rlen = 16,
  4303. }, {
  4304. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4305. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4306. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  4307. .klen = 24,
  4308. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4309. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4310. .ilen = 16,
  4311. .result = { 0xb4, 0x99, 0x34, 0x01, 0xb3, 0xe9, 0x96, 0xf8,
  4312. 0x4e, 0xe5, 0xce, 0xe7, 0xd7, 0x9b, 0x09, 0xb9 },
  4313. .rlen = 16,
  4314. }, {
  4315. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4316. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4317. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  4318. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  4319. .klen = 32,
  4320. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4321. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4322. .ilen = 16,
  4323. .result = { 0x9a, 0xcc, 0x23, 0x7d, 0xff, 0x16, 0xd7, 0x6c,
  4324. 0x20, 0xef, 0x7c, 0x91, 0x9e, 0x3a, 0x75, 0x09 },
  4325. .rlen = 16,
  4326. },
  4327. };
  4328. static struct cipher_testvec camellia_dec_tv_template[] = {
  4329. {
  4330. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4331. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4332. .klen = 16,
  4333. .input = { 0x67, 0x67, 0x31, 0x38, 0x54, 0x96, 0x69, 0x73,
  4334. 0x08, 0x57, 0x06, 0x56, 0x48, 0xea, 0xbe, 0x43 },
  4335. .ilen = 16,
  4336. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4337. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4338. .rlen = 16,
  4339. }, {
  4340. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4341. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4342. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  4343. .klen = 24,
  4344. .input = { 0xb4, 0x99, 0x34, 0x01, 0xb3, 0xe9, 0x96, 0xf8,
  4345. 0x4e, 0xe5, 0xce, 0xe7, 0xd7, 0x9b, 0x09, 0xb9 },
  4346. .ilen = 16,
  4347. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4348. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4349. .rlen = 16,
  4350. }, {
  4351. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4352. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4353. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  4354. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  4355. .klen = 32,
  4356. .input = { 0x9a, 0xcc, 0x23, 0x7d, 0xff, 0x16, 0xd7, 0x6c,
  4357. 0x20, 0xef, 0x7c, 0x91, 0x9e, 0x3a, 0x75, 0x09 },
  4358. .ilen = 16,
  4359. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4360. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4361. .rlen = 16,
  4362. },
  4363. };
  4364. static struct cipher_testvec camellia_cbc_enc_tv_template[] = {
  4365. {
  4366. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  4367. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  4368. .klen = 16,
  4369. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  4370. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  4371. .input = { "Single block msg" },
  4372. .ilen = 16,
  4373. .result = { 0xea, 0x32, 0x12, 0x76, 0x3b, 0x50, 0x10, 0xe7,
  4374. 0x18, 0xf6, 0xfd, 0x5d, 0xf6, 0x8f, 0x13, 0x51 },
  4375. .rlen = 16,
  4376. }, {
  4377. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  4378. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  4379. .klen = 16,
  4380. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  4381. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  4382. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4383. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  4384. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  4385. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  4386. .ilen = 32,
  4387. .result = { 0xa5, 0xdf, 0x6e, 0x50, 0xda, 0x70, 0x6c, 0x01,
  4388. 0x4a, 0xab, 0xf3, 0xf2, 0xd6, 0xfc, 0x6c, 0xfd,
  4389. 0x19, 0xb4, 0x3e, 0x57, 0x1c, 0x02, 0x5e, 0xa0,
  4390. 0x15, 0x78, 0xe0, 0x5e, 0xf2, 0xcb, 0x87, 0x16 },
  4391. .rlen = 32,
  4392. },
  4393. };
  4394. static struct cipher_testvec camellia_cbc_dec_tv_template[] = {
  4395. {
  4396. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  4397. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  4398. .klen = 16,
  4399. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  4400. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  4401. .input = { 0xea, 0x32, 0x12, 0x76, 0x3b, 0x50, 0x10, 0xe7,
  4402. 0x18, 0xf6, 0xfd, 0x5d, 0xf6, 0x8f, 0x13, 0x51 },
  4403. .ilen = 16,
  4404. .result = { "Single block msg" },
  4405. .rlen = 16,
  4406. }, {
  4407. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  4408. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  4409. .klen = 16,
  4410. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  4411. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  4412. .input = { 0xa5, 0xdf, 0x6e, 0x50, 0xda, 0x70, 0x6c, 0x01,
  4413. 0x4a, 0xab, 0xf3, 0xf2, 0xd6, 0xfc, 0x6c, 0xfd,
  4414. 0x19, 0xb4, 0x3e, 0x57, 0x1c, 0x02, 0x5e, 0xa0,
  4415. 0x15, 0x78, 0xe0, 0x5e, 0xf2, 0xcb, 0x87, 0x16 },
  4416. .ilen = 32,
  4417. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4418. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  4419. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  4420. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  4421. .rlen = 32,
  4422. },
  4423. };
  4424. /*
  4425. * SEED test vectors
  4426. */
  4427. #define SEED_ENC_TEST_VECTORS 4
  4428. #define SEED_DEC_TEST_VECTORS 4
  4429. static struct cipher_testvec seed_enc_tv_template[] = {
  4430. {
  4431. .key = { [0 ... 15] = 0x00 },
  4432. .klen = 16,
  4433. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4434. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4435. .ilen = 16,
  4436. .result = { 0x5e, 0xba, 0xc6, 0xe0, 0x05, 0x4e, 0x16, 0x68,
  4437. 0x19, 0xaf, 0xf1, 0xcc, 0x6d, 0x34, 0x6c, 0xdb },
  4438. .rlen = 16,
  4439. }, {
  4440. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4441. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4442. .klen = 16,
  4443. .input = { [0 ... 15] = 0x00 },
  4444. .ilen = 16,
  4445. .result = { 0xc1, 0x1f, 0x22, 0xf2, 0x01, 0x40, 0x50, 0x50,
  4446. 0x84, 0x48, 0x35, 0x97, 0xe4, 0x37, 0x0f, 0x43 },
  4447. .rlen = 16,
  4448. }, {
  4449. .key = { 0x47, 0x06, 0x48, 0x08, 0x51, 0xe6, 0x1b, 0xe8,
  4450. 0x5d, 0x74, 0xbf, 0xb3, 0xfd, 0x95, 0x61, 0x85 },
  4451. .klen = 16,
  4452. .input = { 0x83, 0xa2, 0xf8, 0xa2, 0x88, 0x64, 0x1f, 0xb9,
  4453. 0xa4, 0xe9, 0xa5, 0xcc, 0x2f, 0x13, 0x1c, 0x7d },
  4454. .ilen = 16,
  4455. .result = { 0xee, 0x54, 0xd1, 0x3e, 0xbc, 0xae, 0x70, 0x6d,
  4456. 0x22, 0x6b, 0xc3, 0x14, 0x2c, 0xd4, 0x0d, 0x4a },
  4457. .rlen = 16,
  4458. }, {
  4459. .key = { 0x28, 0xdb, 0xc3, 0xbc, 0x49, 0xff, 0xd8, 0x7d,
  4460. 0xcf, 0xa5, 0x09, 0xb1, 0x1d, 0x42, 0x2b, 0xe7 },
  4461. .klen = 16,
  4462. .input = { 0xb4, 0x1e, 0x6b, 0xe2, 0xeb, 0xa8, 0x4a, 0x14,
  4463. 0x8e, 0x2e, 0xed, 0x84, 0x59, 0x3c, 0x5e, 0xc7 },
  4464. .ilen = 16,
  4465. .result = { 0x9b, 0x9b, 0x7b, 0xfc, 0xd1, 0x81, 0x3c, 0xb9,
  4466. 0x5d, 0x0b, 0x36, 0x18, 0xf4, 0x0f, 0x51, 0x22 },
  4467. .rlen = 16,
  4468. }
  4469. };
  4470. static struct cipher_testvec seed_dec_tv_template[] = {
  4471. {
  4472. .key = { [0 ... 15] = 0x00 },
  4473. .klen = 16,
  4474. .input = { 0x5e, 0xba, 0xc6, 0xe0, 0x05, 0x4e, 0x16, 0x68,
  4475. 0x19, 0xaf, 0xf1, 0xcc, 0x6d, 0x34, 0x6c, 0xdb },
  4476. .ilen = 16,
  4477. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4478. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4479. .rlen = 16,
  4480. }, {
  4481. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4482. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4483. .klen = 16,
  4484. .input = { 0xc1, 0x1f, 0x22, 0xf2, 0x01, 0x40, 0x50, 0x50,
  4485. 0x84, 0x48, 0x35, 0x97, 0xe4, 0x37, 0x0f, 0x43 },
  4486. .ilen = 16,
  4487. .result = { [0 ... 15] = 0x00 },
  4488. .rlen = 16,
  4489. }, {
  4490. .key = { 0x47, 0x06, 0x48, 0x08, 0x51, 0xe6, 0x1b, 0xe8,
  4491. 0x5d, 0x74, 0xbf, 0xb3, 0xfd, 0x95, 0x61, 0x85 },
  4492. .klen = 16,
  4493. .input = { 0xee, 0x54, 0xd1, 0x3e, 0xbc, 0xae, 0x70, 0x6d,
  4494. 0x22, 0x6b, 0xc3, 0x14, 0x2c, 0xd4, 0x0d, 0x4a },
  4495. .ilen = 16,
  4496. .result = { 0x83, 0xa2, 0xf8, 0xa2, 0x88, 0x64, 0x1f, 0xb9,
  4497. 0xa4, 0xe9, 0xa5, 0xcc, 0x2f, 0x13, 0x1c, 0x7d },
  4498. .rlen = 16,
  4499. }, {
  4500. .key = { 0x28, 0xdb, 0xc3, 0xbc, 0x49, 0xff, 0xd8, 0x7d,
  4501. 0xcf, 0xa5, 0x09, 0xb1, 0x1d, 0x42, 0x2b, 0xe7 },
  4502. .klen = 16,
  4503. .input = { 0x9b, 0x9b, 0x7b, 0xfc, 0xd1, 0x81, 0x3c, 0xb9,
  4504. 0x5d, 0x0b, 0x36, 0x18, 0xf4, 0x0f, 0x51, 0x22 },
  4505. .ilen = 16,
  4506. .result = { 0xb4, 0x1e, 0x6b, 0xe2, 0xeb, 0xa8, 0x4a, 0x14,
  4507. 0x8e, 0x2e, 0xed, 0x84, 0x59, 0x3c, 0x5e, 0xc7 },
  4508. .rlen = 16,
  4509. }
  4510. };
  4511. #define SALSA20_STREAM_ENC_TEST_VECTORS 4
  4512. static struct cipher_testvec salsa20_stream_enc_tv_template[] = {
  4513. /*
  4514. * Testvectors from verified.test-vectors submitted to ECRYPT.
  4515. * They are truncated to size 39, 64, 111, 129 to test a variety
  4516. * of input length.
  4517. */
  4518. { /* Set 3, vector 0 */
  4519. .key = {
  4520. 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4521. 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F
  4522. },
  4523. .klen = 16,
  4524. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4525. .input = {
  4526. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4527. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4528. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4529. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4530. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4531. },
  4532. .ilen = 39,
  4533. .result = {
  4534. 0x2D, 0xD5, 0xC3, 0xF7, 0xBA, 0x2B, 0x20, 0xF7,
  4535. 0x68, 0x02, 0x41, 0x0C, 0x68, 0x86, 0x88, 0x89,
  4536. 0x5A, 0xD8, 0xC1, 0xBD, 0x4E, 0xA6, 0xC9, 0xB1,
  4537. 0x40, 0xFB, 0x9B, 0x90, 0xE2, 0x10, 0x49, 0xBF,
  4538. 0x58, 0x3F, 0x52, 0x79, 0x70, 0xEB, 0xC1,
  4539. },
  4540. .rlen = 39,
  4541. }, { /* Set 5, vector 0 */
  4542. .key = {
  4543. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4544. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
  4545. },
  4546. .klen = 16,
  4547. .iv = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4548. .input = {
  4549. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4550. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4551. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4552. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4553. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4554. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4555. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4556. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4557. },
  4558. .ilen = 64,
  4559. .result = {
  4560. 0xB6, 0x6C, 0x1E, 0x44, 0x46, 0xDD, 0x95, 0x57,
  4561. 0xE5, 0x78, 0xE2, 0x23, 0xB0, 0xB7, 0x68, 0x01,
  4562. 0x7B, 0x23, 0xB2, 0x67, 0xBB, 0x02, 0x34, 0xAE,
  4563. 0x46, 0x26, 0xBF, 0x44, 0x3F, 0x21, 0x97, 0x76,
  4564. 0x43, 0x6F, 0xB1, 0x9F, 0xD0, 0xE8, 0x86, 0x6F,
  4565. 0xCD, 0x0D, 0xE9, 0xA9, 0x53, 0x8F, 0x4A, 0x09,
  4566. 0xCA, 0x9A, 0xC0, 0x73, 0x2E, 0x30, 0xBC, 0xF9,
  4567. 0x8E, 0x4F, 0x13, 0xE4, 0xB9, 0xE2, 0x01, 0xD9,
  4568. },
  4569. .rlen = 64,
  4570. }, { /* Set 3, vector 27 */
  4571. .key = {
  4572. 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x20, 0x21, 0x22,
  4573. 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A,
  4574. 0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x30, 0x31, 0x32,
  4575. 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x3A
  4576. },
  4577. .klen = 32,
  4578. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4579. .input = {
  4580. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4581. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4582. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4583. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4584. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4585. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4586. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4587. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4588. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4589. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4590. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4591. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4592. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4593. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4594. },
  4595. .ilen = 111,
  4596. .result = {
  4597. 0xAE, 0x39, 0x50, 0x8E, 0xAC, 0x9A, 0xEC, 0xE7,
  4598. 0xBF, 0x97, 0xBB, 0x20, 0xB9, 0xDE, 0xE4, 0x1F,
  4599. 0x87, 0xD9, 0x47, 0xF8, 0x28, 0x91, 0x35, 0x98,
  4600. 0xDB, 0x72, 0xCC, 0x23, 0x29, 0x48, 0x56, 0x5E,
  4601. 0x83, 0x7E, 0x0B, 0xF3, 0x7D, 0x5D, 0x38, 0x7B,
  4602. 0x2D, 0x71, 0x02, 0xB4, 0x3B, 0xB5, 0xD8, 0x23,
  4603. 0xB0, 0x4A, 0xDF, 0x3C, 0xEC, 0xB6, 0xD9, 0x3B,
  4604. 0x9B, 0xA7, 0x52, 0xBE, 0xC5, 0xD4, 0x50, 0x59,
  4605. 0x15, 0x14, 0xB4, 0x0E, 0x40, 0xE6, 0x53, 0xD1,
  4606. 0x83, 0x9C, 0x5B, 0xA0, 0x92, 0x29, 0x6B, 0x5E,
  4607. 0x96, 0x5B, 0x1E, 0x2F, 0xD3, 0xAC, 0xC1, 0x92,
  4608. 0xB1, 0x41, 0x3F, 0x19, 0x2F, 0xC4, 0x3B, 0xC6,
  4609. 0x95, 0x46, 0x45, 0x54, 0xE9, 0x75, 0x03, 0x08,
  4610. 0x44, 0xAF, 0xE5, 0x8A, 0x81, 0x12, 0x09,
  4611. },
  4612. .rlen = 111,
  4613. }, { /* Set 5, vector 27 */
  4614. .key = {
  4615. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4616. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4617. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4618. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
  4619. },
  4620. .klen = 32,
  4621. .iv = { 0x00, 0x00, 0x00, 0x10, 0x00, 0x00, 0x00, 0x00 },
  4622. .input = {
  4623. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4624. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4625. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4626. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4627. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4628. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4629. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4630. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4631. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4632. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4633. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4634. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4635. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4636. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4637. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4638. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4639. 0x00,
  4640. },
  4641. .ilen = 129,
  4642. .result = {
  4643. 0xD2, 0xDB, 0x1A, 0x5C, 0xF1, 0xC1, 0xAC, 0xDB,
  4644. 0xE8, 0x1A, 0x7A, 0x43, 0x40, 0xEF, 0x53, 0x43,
  4645. 0x5E, 0x7F, 0x4B, 0x1A, 0x50, 0x52, 0x3F, 0x8D,
  4646. 0x28, 0x3D, 0xCF, 0x85, 0x1D, 0x69, 0x6E, 0x60,
  4647. 0xF2, 0xDE, 0x74, 0x56, 0x18, 0x1B, 0x84, 0x10,
  4648. 0xD4, 0x62, 0xBA, 0x60, 0x50, 0xF0, 0x61, 0xF2,
  4649. 0x1C, 0x78, 0x7F, 0xC1, 0x24, 0x34, 0xAF, 0x58,
  4650. 0xBF, 0x2C, 0x59, 0xCA, 0x90, 0x77, 0xF3, 0xB0,
  4651. 0x5B, 0x4A, 0xDF, 0x89, 0xCE, 0x2C, 0x2F, 0xFC,
  4652. 0x67, 0xF0, 0xE3, 0x45, 0xE8, 0xB3, 0xB3, 0x75,
  4653. 0xA0, 0x95, 0x71, 0xA1, 0x29, 0x39, 0x94, 0xCA,
  4654. 0x45, 0x2F, 0xBD, 0xCB, 0x10, 0xB6, 0xBE, 0x9F,
  4655. 0x8E, 0xF9, 0xB2, 0x01, 0x0A, 0x5A, 0x0A, 0xB7,
  4656. 0x6B, 0x9D, 0x70, 0x8E, 0x4B, 0xD6, 0x2F, 0xCD,
  4657. 0x2E, 0x40, 0x48, 0x75, 0xE9, 0xE2, 0x21, 0x45,
  4658. 0x0B, 0xC9, 0xB6, 0xB5, 0x66, 0xBC, 0x9A, 0x59,
  4659. 0x5A,
  4660. },
  4661. .rlen = 129,
  4662. }
  4663. };
  4664. /*
  4665. * Compression stuff.
  4666. */
  4667. #define COMP_BUF_SIZE 512
  4668. struct comp_testvec {
  4669. int inlen, outlen;
  4670. char input[COMP_BUF_SIZE];
  4671. char output[COMP_BUF_SIZE];
  4672. };
  4673. /*
  4674. * Deflate test vectors (null-terminated strings).
  4675. * Params: winbits=11, Z_DEFAULT_COMPRESSION, MAX_MEM_LEVEL.
  4676. */
  4677. #define DEFLATE_COMP_TEST_VECTORS 2
  4678. #define DEFLATE_DECOMP_TEST_VECTORS 2
  4679. static struct comp_testvec deflate_comp_tv_template[] = {
  4680. {
  4681. .inlen = 70,
  4682. .outlen = 38,
  4683. .input = "Join us now and share the software "
  4684. "Join us now and share the software ",
  4685. .output = { 0xf3, 0xca, 0xcf, 0xcc, 0x53, 0x28, 0x2d, 0x56,
  4686. 0xc8, 0xcb, 0x2f, 0x57, 0x48, 0xcc, 0x4b, 0x51,
  4687. 0x28, 0xce, 0x48, 0x2c, 0x4a, 0x55, 0x28, 0xc9,
  4688. 0x48, 0x55, 0x28, 0xce, 0x4f, 0x2b, 0x29, 0x07,
  4689. 0x71, 0xbc, 0x08, 0x2b, 0x01, 0x00 },
  4690. }, {
  4691. .inlen = 191,
  4692. .outlen = 122,
  4693. .input = "This document describes a compression method based on the DEFLATE"
  4694. "compression algorithm. This document defines the application of "
  4695. "the DEFLATE algorithm to the IP Payload Compression Protocol.",
  4696. .output = { 0x5d, 0x8d, 0x31, 0x0e, 0xc2, 0x30, 0x10, 0x04,
  4697. 0xbf, 0xb2, 0x2f, 0xc8, 0x1f, 0x10, 0x04, 0x09,
  4698. 0x89, 0xc2, 0x85, 0x3f, 0x70, 0xb1, 0x2f, 0xf8,
  4699. 0x24, 0xdb, 0x67, 0xd9, 0x47, 0xc1, 0xef, 0x49,
  4700. 0x68, 0x12, 0x51, 0xae, 0x76, 0x67, 0xd6, 0x27,
  4701. 0x19, 0x88, 0x1a, 0xde, 0x85, 0xab, 0x21, 0xf2,
  4702. 0x08, 0x5d, 0x16, 0x1e, 0x20, 0x04, 0x2d, 0xad,
  4703. 0xf3, 0x18, 0xa2, 0x15, 0x85, 0x2d, 0x69, 0xc4,
  4704. 0x42, 0x83, 0x23, 0xb6, 0x6c, 0x89, 0x71, 0x9b,
  4705. 0xef, 0xcf, 0x8b, 0x9f, 0xcf, 0x33, 0xca, 0x2f,
  4706. 0xed, 0x62, 0xa9, 0x4c, 0x80, 0xff, 0x13, 0xaf,
  4707. 0x52, 0x37, 0xed, 0x0e, 0x52, 0x6b, 0x59, 0x02,
  4708. 0xd9, 0x4e, 0xe8, 0x7a, 0x76, 0x1d, 0x02, 0x98,
  4709. 0xfe, 0x8a, 0x87, 0x83, 0xa3, 0x4f, 0x56, 0x8a,
  4710. 0xb8, 0x9e, 0x8e, 0x5c, 0x57, 0xd3, 0xa0, 0x79,
  4711. 0xfa, 0x02 },
  4712. },
  4713. };
  4714. static struct comp_testvec deflate_decomp_tv_template[] = {
  4715. {
  4716. .inlen = 122,
  4717. .outlen = 191,
  4718. .input = { 0x5d, 0x8d, 0x31, 0x0e, 0xc2, 0x30, 0x10, 0x04,
  4719. 0xbf, 0xb2, 0x2f, 0xc8, 0x1f, 0x10, 0x04, 0x09,
  4720. 0x89, 0xc2, 0x85, 0x3f, 0x70, 0xb1, 0x2f, 0xf8,
  4721. 0x24, 0xdb, 0x67, 0xd9, 0x47, 0xc1, 0xef, 0x49,
  4722. 0x68, 0x12, 0x51, 0xae, 0x76, 0x67, 0xd6, 0x27,
  4723. 0x19, 0x88, 0x1a, 0xde, 0x85, 0xab, 0x21, 0xf2,
  4724. 0x08, 0x5d, 0x16, 0x1e, 0x20, 0x04, 0x2d, 0xad,
  4725. 0xf3, 0x18, 0xa2, 0x15, 0x85, 0x2d, 0x69, 0xc4,
  4726. 0x42, 0x83, 0x23, 0xb6, 0x6c, 0x89, 0x71, 0x9b,
  4727. 0xef, 0xcf, 0x8b, 0x9f, 0xcf, 0x33, 0xca, 0x2f,
  4728. 0xed, 0x62, 0xa9, 0x4c, 0x80, 0xff, 0x13, 0xaf,
  4729. 0x52, 0x37, 0xed, 0x0e, 0x52, 0x6b, 0x59, 0x02,
  4730. 0xd9, 0x4e, 0xe8, 0x7a, 0x76, 0x1d, 0x02, 0x98,
  4731. 0xfe, 0x8a, 0x87, 0x83, 0xa3, 0x4f, 0x56, 0x8a,
  4732. 0xb8, 0x9e, 0x8e, 0x5c, 0x57, 0xd3, 0xa0, 0x79,
  4733. 0xfa, 0x02 },
  4734. .output = "This document describes a compression method based on the DEFLATE"
  4735. "compression algorithm. This document defines the application of "
  4736. "the DEFLATE algorithm to the IP Payload Compression Protocol.",
  4737. }, {
  4738. .inlen = 38,
  4739. .outlen = 70,
  4740. .input = { 0xf3, 0xca, 0xcf, 0xcc, 0x53, 0x28, 0x2d, 0x56,
  4741. 0xc8, 0xcb, 0x2f, 0x57, 0x48, 0xcc, 0x4b, 0x51,
  4742. 0x28, 0xce, 0x48, 0x2c, 0x4a, 0x55, 0x28, 0xc9,
  4743. 0x48, 0x55, 0x28, 0xce, 0x4f, 0x2b, 0x29, 0x07,
  4744. 0x71, 0xbc, 0x08, 0x2b, 0x01, 0x00 },
  4745. .output = "Join us now and share the software "
  4746. "Join us now and share the software ",
  4747. },
  4748. };
  4749. /*
  4750. * Michael MIC test vectors from IEEE 802.11i
  4751. */
  4752. #define MICHAEL_MIC_TEST_VECTORS 6
  4753. static struct hash_testvec michael_mic_tv_template[] = {
  4754. {
  4755. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4756. .ksize = 8,
  4757. .plaintext = { },
  4758. .psize = 0,
  4759. .digest = { 0x82, 0x92, 0x5c, 0x1c, 0xa1, 0xd1, 0x30, 0xb8 }
  4760. },
  4761. {
  4762. .key = { 0x82, 0x92, 0x5c, 0x1c, 0xa1, 0xd1, 0x30, 0xb8 },
  4763. .ksize = 8,
  4764. .plaintext = { 'M' },
  4765. .psize = 1,
  4766. .digest = { 0x43, 0x47, 0x21, 0xca, 0x40, 0x63, 0x9b, 0x3f }
  4767. },
  4768. {
  4769. .key = { 0x43, 0x47, 0x21, 0xca, 0x40, 0x63, 0x9b, 0x3f },
  4770. .ksize = 8,
  4771. .plaintext = { 'M', 'i' },
  4772. .psize = 2,
  4773. .digest = { 0xe8, 0xf9, 0xbe, 0xca, 0xe9, 0x7e, 0x5d, 0x29 }
  4774. },
  4775. {
  4776. .key = { 0xe8, 0xf9, 0xbe, 0xca, 0xe9, 0x7e, 0x5d, 0x29 },
  4777. .ksize = 8,
  4778. .plaintext = { 'M', 'i', 'c' },
  4779. .psize = 3,
  4780. .digest = { 0x90, 0x03, 0x8f, 0xc6, 0xcf, 0x13, 0xc1, 0xdb }
  4781. },
  4782. {
  4783. .key = { 0x90, 0x03, 0x8f, 0xc6, 0xcf, 0x13, 0xc1, 0xdb },
  4784. .ksize = 8,
  4785. .plaintext = { 'M', 'i', 'c', 'h' },
  4786. .psize = 4,
  4787. .digest = { 0xd5, 0x5e, 0x10, 0x05, 0x10, 0x12, 0x89, 0x86 }
  4788. },
  4789. {
  4790. .key = { 0xd5, 0x5e, 0x10, 0x05, 0x10, 0x12, 0x89, 0x86 },
  4791. .ksize = 8,
  4792. .plaintext = { 'M', 'i', 'c', 'h', 'a', 'e', 'l' },
  4793. .psize = 7,
  4794. .digest = { 0x0a, 0x94, 0x2b, 0x12, 0x4e, 0xca, 0xa5, 0x46 },
  4795. }
  4796. };
  4797. /*
  4798. * CRC32C test vectors
  4799. */
  4800. #define CRC32C_TEST_VECTORS 14
  4801. static struct hash_testvec crc32c_tv_template[] = {
  4802. {
  4803. .psize = 0,
  4804. .digest = { 0x00, 0x00, 0x00, 0x00 }
  4805. },
  4806. {
  4807. .key = { 0x87, 0xa9, 0xcb, 0xed },
  4808. .ksize = 4,
  4809. .psize = 0,
  4810. .digest = { 0x78, 0x56, 0x34, 0x12 },
  4811. },
  4812. {
  4813. .key = { 0xff, 0xff, 0xff, 0xff },
  4814. .ksize = 4,
  4815. .plaintext = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  4816. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  4817. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  4818. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
  4819. 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28 },
  4820. .psize = 40,
  4821. .digest = { 0x7f, 0x15, 0x2c, 0x0e }
  4822. },
  4823. {
  4824. .key = { 0xff, 0xff, 0xff, 0xff },
  4825. .ksize = 4,
  4826. .plaintext = { 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
  4827. 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  4828. 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
  4829. 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
  4830. 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50 },
  4831. .psize = 40,
  4832. .digest = { 0xf6, 0xeb, 0x80, 0xe9 }
  4833. },
  4834. {
  4835. .key = { 0xff, 0xff, 0xff, 0xff },
  4836. .ksize = 4,
  4837. .plaintext = { 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
  4838. 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
  4839. 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68,
  4840. 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70,
  4841. 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78 },
  4842. .psize = 40,
  4843. .digest = { 0xed, 0xbd, 0x74, 0xde }
  4844. },
  4845. {
  4846. .key = { 0xff, 0xff, 0xff, 0xff },
  4847. .ksize = 4,
  4848. .plaintext = { 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80,
  4849. 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88,
  4850. 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90,
  4851. 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98,
  4852. 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, 0xa0 },
  4853. .psize = 40,
  4854. .digest = { 0x62, 0xc8, 0x79, 0xd5 }
  4855. },
  4856. {
  4857. .key = { 0xff, 0xff, 0xff, 0xff },
  4858. .ksize = 4,
  4859. .plaintext = { 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8,
  4860. 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf, 0xb0,
  4861. 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7, 0xb8,
  4862. 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf, 0xc0,
  4863. 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8 },
  4864. .psize = 40,
  4865. .digest = { 0xd0, 0x9a, 0x97, 0xba }
  4866. },
  4867. {
  4868. .key = { 0xff, 0xff, 0xff, 0xff },
  4869. .ksize = 4,
  4870. .plaintext = { 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf, 0xd0,
  4871. 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8,
  4872. 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe0,
  4873. 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8,
  4874. 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef, 0xf0 },
  4875. .psize = 40,
  4876. .digest = { 0x13, 0xd9, 0x29, 0x2b }
  4877. },
  4878. {
  4879. .key = { 0x80, 0xea, 0xd3, 0xf1 },
  4880. .ksize = 4,
  4881. .plaintext = { 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
  4882. 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  4883. 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
  4884. 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
  4885. 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50 },
  4886. .psize = 40,
  4887. .digest = { 0x0c, 0xb5, 0xe2, 0xa2 }
  4888. },
  4889. {
  4890. .key = { 0xf3, 0x4a, 0x1d, 0x5d },
  4891. .ksize = 4,
  4892. .plaintext = { 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
  4893. 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
  4894. 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68,
  4895. 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70,
  4896. 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78 },
  4897. .psize = 40,
  4898. .digest = { 0xd1, 0x7f, 0xfb, 0xa6 }
  4899. },
  4900. {
  4901. .key = { 0x2e, 0x80, 0x04, 0x59 },
  4902. .ksize = 4,
  4903. .plaintext = { 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80,
  4904. 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88,
  4905. 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90,
  4906. 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98,
  4907. 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, 0xa0 },
  4908. .psize = 40,
  4909. .digest = { 0x59, 0x33, 0xe6, 0x7a }
  4910. },
  4911. {
  4912. .key = { 0xa6, 0xcc, 0x19, 0x85 },
  4913. .ksize = 4,
  4914. .plaintext = { 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8,
  4915. 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf, 0xb0,
  4916. 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7, 0xb8,
  4917. 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf, 0xc0,
  4918. 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8 },
  4919. .psize = 40,
  4920. .digest = { 0xbe, 0x03, 0x01, 0xd2 }
  4921. },
  4922. {
  4923. .key = { 0x41, 0xfc, 0xfe, 0x2d },
  4924. .ksize = 4,
  4925. .plaintext = { 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf, 0xd0,
  4926. 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8,
  4927. 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe0,
  4928. 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8,
  4929. 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef, 0xf0 },
  4930. .psize = 40,
  4931. .digest = { 0x75, 0xd3, 0xc5, 0x24 }
  4932. },
  4933. {
  4934. .key = { 0xff, 0xff, 0xff, 0xff },
  4935. .ksize = 4,
  4936. .plaintext = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  4937. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  4938. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  4939. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
  4940. 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28,
  4941. 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
  4942. 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  4943. 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
  4944. 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
  4945. 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50,
  4946. 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
  4947. 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
  4948. 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68,
  4949. 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70,
  4950. 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78,
  4951. 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80,
  4952. 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88,
  4953. 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90,
  4954. 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98,
  4955. 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, 0xa0,
  4956. 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8,
  4957. 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf, 0xb0,
  4958. 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7, 0xb8,
  4959. 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf, 0xc0,
  4960. 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8,
  4961. 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf, 0xd0,
  4962. 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8,
  4963. 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe0,
  4964. 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8,
  4965. 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef, 0xf0 },
  4966. .psize = 240,
  4967. .digest = { 0x75, 0xd3, 0xc5, 0x24 },
  4968. .np = 2,
  4969. .tap = { 31, 209 }
  4970. },
  4971. };
  4972. /*
  4973. * Cipher speed tests
  4974. */
  4975. static struct cipher_speed aes_speed_template[] = {
  4976. { .klen = 16, .blen = 16, },
  4977. { .klen = 16, .blen = 64, },
  4978. { .klen = 16, .blen = 256, },
  4979. { .klen = 16, .blen = 1024, },
  4980. { .klen = 16, .blen = 8192, },
  4981. { .klen = 24, .blen = 16, },
  4982. { .klen = 24, .blen = 64, },
  4983. { .klen = 24, .blen = 256, },
  4984. { .klen = 24, .blen = 1024, },
  4985. { .klen = 24, .blen = 8192, },
  4986. { .klen = 32, .blen = 16, },
  4987. { .klen = 32, .blen = 64, },
  4988. { .klen = 32, .blen = 256, },
  4989. { .klen = 32, .blen = 1024, },
  4990. { .klen = 32, .blen = 8192, },
  4991. /* End marker */
  4992. { .klen = 0, .blen = 0, }
  4993. };
  4994. static struct cipher_speed aes_lrw_speed_template[] = {
  4995. { .klen = 32, .blen = 16, },
  4996. { .klen = 32, .blen = 64, },
  4997. { .klen = 32, .blen = 256, },
  4998. { .klen = 32, .blen = 1024, },
  4999. { .klen = 32, .blen = 8192, },
  5000. { .klen = 40, .blen = 16, },
  5001. { .klen = 40, .blen = 64, },
  5002. { .klen = 40, .blen = 256, },
  5003. { .klen = 40, .blen = 1024, },
  5004. { .klen = 40, .blen = 8192, },
  5005. { .klen = 48, .blen = 16, },
  5006. { .klen = 48, .blen = 64, },
  5007. { .klen = 48, .blen = 256, },
  5008. { .klen = 48, .blen = 1024, },
  5009. { .klen = 48, .blen = 8192, },
  5010. /* End marker */
  5011. { .klen = 0, .blen = 0, }
  5012. };
  5013. static struct cipher_speed aes_xts_speed_template[] = {
  5014. { .klen = 32, .blen = 16, },
  5015. { .klen = 32, .blen = 64, },
  5016. { .klen = 32, .blen = 256, },
  5017. { .klen = 32, .blen = 1024, },
  5018. { .klen = 32, .blen = 8192, },
  5019. { .klen = 48, .blen = 16, },
  5020. { .klen = 48, .blen = 64, },
  5021. { .klen = 48, .blen = 256, },
  5022. { .klen = 48, .blen = 1024, },
  5023. { .klen = 48, .blen = 8192, },
  5024. { .klen = 64, .blen = 16, },
  5025. { .klen = 64, .blen = 64, },
  5026. { .klen = 64, .blen = 256, },
  5027. { .klen = 64, .blen = 1024, },
  5028. { .klen = 64, .blen = 8192, },
  5029. /* End marker */
  5030. { .klen = 0, .blen = 0, }
  5031. };
  5032. static struct cipher_speed des3_ede_speed_template[] = {
  5033. { .klen = 24, .blen = 16, },
  5034. { .klen = 24, .blen = 64, },
  5035. { .klen = 24, .blen = 256, },
  5036. { .klen = 24, .blen = 1024, },
  5037. { .klen = 24, .blen = 8192, },
  5038. /* End marker */
  5039. { .klen = 0, .blen = 0, }
  5040. };
  5041. static struct cipher_speed twofish_speed_template[] = {
  5042. { .klen = 16, .blen = 16, },
  5043. { .klen = 16, .blen = 64, },
  5044. { .klen = 16, .blen = 256, },
  5045. { .klen = 16, .blen = 1024, },
  5046. { .klen = 16, .blen = 8192, },
  5047. { .klen = 24, .blen = 16, },
  5048. { .klen = 24, .blen = 64, },
  5049. { .klen = 24, .blen = 256, },
  5050. { .klen = 24, .blen = 1024, },
  5051. { .klen = 24, .blen = 8192, },
  5052. { .klen = 32, .blen = 16, },
  5053. { .klen = 32, .blen = 64, },
  5054. { .klen = 32, .blen = 256, },
  5055. { .klen = 32, .blen = 1024, },
  5056. { .klen = 32, .blen = 8192, },
  5057. /* End marker */
  5058. { .klen = 0, .blen = 0, }
  5059. };
  5060. static struct cipher_speed blowfish_speed_template[] = {
  5061. /* Don't support blowfish keys > 256 bit in this test */
  5062. { .klen = 8, .blen = 16, },
  5063. { .klen = 8, .blen = 64, },
  5064. { .klen = 8, .blen = 256, },
  5065. { .klen = 8, .blen = 1024, },
  5066. { .klen = 8, .blen = 8192, },
  5067. { .klen = 32, .blen = 16, },
  5068. { .klen = 32, .blen = 64, },
  5069. { .klen = 32, .blen = 256, },
  5070. { .klen = 32, .blen = 1024, },
  5071. { .klen = 32, .blen = 8192, },
  5072. /* End marker */
  5073. { .klen = 0, .blen = 0, }
  5074. };
  5075. static struct cipher_speed des_speed_template[] = {
  5076. { .klen = 8, .blen = 16, },
  5077. { .klen = 8, .blen = 64, },
  5078. { .klen = 8, .blen = 256, },
  5079. { .klen = 8, .blen = 1024, },
  5080. { .klen = 8, .blen = 8192, },
  5081. /* End marker */
  5082. { .klen = 0, .blen = 0, }
  5083. };
  5084. /*
  5085. * Digest speed tests
  5086. */
  5087. static struct hash_speed generic_hash_speed_template[] = {
  5088. { .blen = 16, .plen = 16, },
  5089. { .blen = 64, .plen = 16, },
  5090. { .blen = 64, .plen = 64, },
  5091. { .blen = 256, .plen = 16, },
  5092. { .blen = 256, .plen = 64, },
  5093. { .blen = 256, .plen = 256, },
  5094. { .blen = 1024, .plen = 16, },
  5095. { .blen = 1024, .plen = 256, },
  5096. { .blen = 1024, .plen = 1024, },
  5097. { .blen = 2048, .plen = 16, },
  5098. { .blen = 2048, .plen = 256, },
  5099. { .blen = 2048, .plen = 1024, },
  5100. { .blen = 2048, .plen = 2048, },
  5101. { .blen = 4096, .plen = 16, },
  5102. { .blen = 4096, .plen = 256, },
  5103. { .blen = 4096, .plen = 1024, },
  5104. { .blen = 4096, .plen = 4096, },
  5105. { .blen = 8192, .plen = 16, },
  5106. { .blen = 8192, .plen = 256, },
  5107. { .blen = 8192, .plen = 1024, },
  5108. { .blen = 8192, .plen = 4096, },
  5109. { .blen = 8192, .plen = 8192, },
  5110. /* End marker */
  5111. { .blen = 0, .plen = 0, }
  5112. };
  5113. static struct cipher_speed camellia_speed_template[] = {
  5114. { .klen = 16, .blen = 16, },
  5115. { .klen = 16, .blen = 64, },
  5116. { .klen = 16, .blen = 256, },
  5117. { .klen = 16, .blen = 1024, },
  5118. { .klen = 16, .blen = 8192, },
  5119. { .klen = 24, .blen = 16, },
  5120. { .klen = 24, .blen = 64, },
  5121. { .klen = 24, .blen = 256, },
  5122. { .klen = 24, .blen = 1024, },
  5123. { .klen = 24, .blen = 8192, },
  5124. { .klen = 32, .blen = 16, },
  5125. { .klen = 32, .blen = 64, },
  5126. { .klen = 32, .blen = 256, },
  5127. { .klen = 32, .blen = 1024, },
  5128. { .klen = 32, .blen = 8192, },
  5129. /* End marker */
  5130. { .klen = 0, .blen = 0, }
  5131. };
  5132. #endif /* _CRYPTO_TCRYPT_H */