tcrypt.h 104 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014
  1. /*
  2. * Quick & dirty crypto testing module.
  3. *
  4. * This will only exist until we have a better testing mechanism
  5. * (e.g. a char device).
  6. *
  7. * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
  8. * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
  9. *
  10. * This program is free software; you can redistribute it and/or modify it
  11. * under the terms of the GNU General Public License as published by the Free
  12. * Software Foundation; either version 2 of the License, or (at your option)
  13. * any later version.
  14. *
  15. * 2004-08-09 Cipher speed tests by Reyk Floeter <reyk@vantronix.net>
  16. * 2003-09-14 Changes by Kartikey Mahendra Bhatt
  17. *
  18. */
  19. #ifndef _CRYPTO_TCRYPT_H
  20. #define _CRYPTO_TCRYPT_H
  21. #define MAX_DIGEST_SIZE 64
  22. #define MAX_TAP 8
  23. #define MAX_KEYLEN 56
  24. #define MAX_IVLEN 32
  25. struct hash_testvec {
  26. /* only used with keyed hash algorithms */
  27. char key[128] __attribute__ ((__aligned__(4)));
  28. char plaintext[128];
  29. char digest[MAX_DIGEST_SIZE];
  30. unsigned char tap[MAX_TAP];
  31. unsigned char psize;
  32. unsigned char np;
  33. unsigned char ksize;
  34. };
  35. struct hmac_testvec {
  36. char key[128];
  37. char plaintext[128];
  38. char digest[MAX_DIGEST_SIZE];
  39. unsigned char tap[MAX_TAP];
  40. unsigned char ksize;
  41. unsigned char psize;
  42. unsigned char np;
  43. };
  44. struct cipher_testvec {
  45. char key[MAX_KEYLEN] __attribute__ ((__aligned__(4)));
  46. char iv[MAX_IVLEN];
  47. char input[48];
  48. char result[48];
  49. unsigned char tap[MAX_TAP];
  50. int np;
  51. unsigned char fail;
  52. unsigned char wk; /* weak key flag */
  53. unsigned char klen;
  54. unsigned char ilen;
  55. unsigned char rlen;
  56. };
  57. struct cipher_speed {
  58. unsigned char klen;
  59. unsigned int blen;
  60. };
  61. struct digest_speed {
  62. unsigned int blen; /* buffer length */
  63. unsigned int plen; /* per-update length */
  64. };
  65. /*
  66. * MD4 test vectors from RFC1320
  67. */
  68. #define MD4_TEST_VECTORS 7
  69. static struct hash_testvec md4_tv_template [] = {
  70. {
  71. .plaintext = "",
  72. .digest = { 0x31, 0xd6, 0xcf, 0xe0, 0xd1, 0x6a, 0xe9, 0x31,
  73. 0xb7, 0x3c, 0x59, 0xd7, 0xe0, 0xc0, 0x89, 0xc0 },
  74. }, {
  75. .plaintext = "a",
  76. .psize = 1,
  77. .digest = { 0xbd, 0xe5, 0x2c, 0xb3, 0x1d, 0xe3, 0x3e, 0x46,
  78. 0x24, 0x5e, 0x05, 0xfb, 0xdb, 0xd6, 0xfb, 0x24 },
  79. }, {
  80. .plaintext = "abc",
  81. .psize = 3,
  82. .digest = { 0xa4, 0x48, 0x01, 0x7a, 0xaf, 0x21, 0xd8, 0x52,
  83. 0x5f, 0xc1, 0x0a, 0xe8, 0x7a, 0xa6, 0x72, 0x9d },
  84. }, {
  85. .plaintext = "message digest",
  86. .psize = 14,
  87. .digest = { 0xd9, 0x13, 0x0a, 0x81, 0x64, 0x54, 0x9f, 0xe8,
  88. 0x18, 0x87, 0x48, 0x06, 0xe1, 0xc7, 0x01, 0x4b },
  89. }, {
  90. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  91. .psize = 26,
  92. .digest = { 0xd7, 0x9e, 0x1c, 0x30, 0x8a, 0xa5, 0xbb, 0xcd,
  93. 0xee, 0xa8, 0xed, 0x63, 0xdf, 0x41, 0x2d, 0xa9 },
  94. .np = 2,
  95. .tap = { 13, 13 },
  96. }, {
  97. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
  98. .psize = 62,
  99. .digest = { 0x04, 0x3f, 0x85, 0x82, 0xf2, 0x41, 0xdb, 0x35,
  100. 0x1c, 0xe6, 0x27, 0xe1, 0x53, 0xe7, 0xf0, 0xe4 },
  101. }, {
  102. .plaintext = "123456789012345678901234567890123456789012345678901234567890123"
  103. "45678901234567890",
  104. .psize = 80,
  105. .digest = { 0xe3, 0x3b, 0x4d, 0xdc, 0x9c, 0x38, 0xf2, 0x19,
  106. 0x9c, 0x3e, 0x7b, 0x16, 0x4f, 0xcc, 0x05, 0x36 },
  107. },
  108. };
  109. /*
  110. * MD5 test vectors from RFC1321
  111. */
  112. #define MD5_TEST_VECTORS 7
  113. static struct hash_testvec md5_tv_template[] = {
  114. {
  115. .digest = { 0xd4, 0x1d, 0x8c, 0xd9, 0x8f, 0x00, 0xb2, 0x04,
  116. 0xe9, 0x80, 0x09, 0x98, 0xec, 0xf8, 0x42, 0x7e },
  117. }, {
  118. .plaintext = "a",
  119. .psize = 1,
  120. .digest = { 0x0c, 0xc1, 0x75, 0xb9, 0xc0, 0xf1, 0xb6, 0xa8,
  121. 0x31, 0xc3, 0x99, 0xe2, 0x69, 0x77, 0x26, 0x61 },
  122. }, {
  123. .plaintext = "abc",
  124. .psize = 3,
  125. .digest = { 0x90, 0x01, 0x50, 0x98, 0x3c, 0xd2, 0x4f, 0xb0,
  126. 0xd6, 0x96, 0x3f, 0x7d, 0x28, 0xe1, 0x7f, 0x72 },
  127. }, {
  128. .plaintext = "message digest",
  129. .psize = 14,
  130. .digest = { 0xf9, 0x6b, 0x69, 0x7d, 0x7c, 0xb7, 0x93, 0x8d,
  131. 0x52, 0x5a, 0x2f, 0x31, 0xaa, 0xf1, 0x61, 0xd0 },
  132. }, {
  133. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  134. .psize = 26,
  135. .digest = { 0xc3, 0xfc, 0xd3, 0xd7, 0x61, 0x92, 0xe4, 0x00,
  136. 0x7d, 0xfb, 0x49, 0x6c, 0xca, 0x67, 0xe1, 0x3b },
  137. .np = 2,
  138. .tap = {13, 13}
  139. }, {
  140. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
  141. .psize = 62,
  142. .digest = { 0xd1, 0x74, 0xab, 0x98, 0xd2, 0x77, 0xd9, 0xf5,
  143. 0xa5, 0x61, 0x1c, 0x2c, 0x9f, 0x41, 0x9d, 0x9f },
  144. }, {
  145. .plaintext = "12345678901234567890123456789012345678901234567890123456789012"
  146. "345678901234567890",
  147. .psize = 80,
  148. .digest = { 0x57, 0xed, 0xf4, 0xa2, 0x2b, 0xe3, 0xc9, 0x55,
  149. 0xac, 0x49, 0xda, 0x2e, 0x21, 0x07, 0xb6, 0x7a },
  150. }
  151. };
  152. /*
  153. * SHA1 test vectors from from FIPS PUB 180-1
  154. */
  155. #define SHA1_TEST_VECTORS 2
  156. static struct hash_testvec sha1_tv_template[] = {
  157. {
  158. .plaintext = "abc",
  159. .psize = 3,
  160. .digest = { 0xa9, 0x99, 0x3e, 0x36, 0x47, 0x06, 0x81, 0x6a, 0xba, 0x3e,
  161. 0x25, 0x71, 0x78, 0x50, 0xc2, 0x6c, 0x9c, 0xd0, 0xd8, 0x9d },
  162. }, {
  163. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  164. .psize = 56,
  165. .digest = { 0x84, 0x98, 0x3e, 0x44, 0x1c, 0x3b, 0xd2, 0x6e, 0xba, 0xae,
  166. 0x4a, 0xa1, 0xf9, 0x51, 0x29, 0xe5, 0xe5, 0x46, 0x70, 0xf1 },
  167. .np = 2,
  168. .tap = { 28, 28 }
  169. }
  170. };
  171. /*
  172. * SHA256 test vectors from from NIST
  173. */
  174. #define SHA256_TEST_VECTORS 2
  175. static struct hash_testvec sha256_tv_template[] = {
  176. {
  177. .plaintext = "abc",
  178. .psize = 3,
  179. .digest = { 0xba, 0x78, 0x16, 0xbf, 0x8f, 0x01, 0xcf, 0xea,
  180. 0x41, 0x41, 0x40, 0xde, 0x5d, 0xae, 0x22, 0x23,
  181. 0xb0, 0x03, 0x61, 0xa3, 0x96, 0x17, 0x7a, 0x9c,
  182. 0xb4, 0x10, 0xff, 0x61, 0xf2, 0x00, 0x15, 0xad },
  183. }, {
  184. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  185. .psize = 56,
  186. .digest = { 0x24, 0x8d, 0x6a, 0x61, 0xd2, 0x06, 0x38, 0xb8,
  187. 0xe5, 0xc0, 0x26, 0x93, 0x0c, 0x3e, 0x60, 0x39,
  188. 0xa3, 0x3c, 0xe4, 0x59, 0x64, 0xff, 0x21, 0x67,
  189. 0xf6, 0xec, 0xed, 0xd4, 0x19, 0xdb, 0x06, 0xc1 },
  190. .np = 2,
  191. .tap = { 28, 28 }
  192. },
  193. };
  194. /*
  195. * SHA384 test vectors from from NIST and kerneli
  196. */
  197. #define SHA384_TEST_VECTORS 4
  198. static struct hash_testvec sha384_tv_template[] = {
  199. {
  200. .plaintext= "abc",
  201. .psize = 3,
  202. .digest = { 0xcb, 0x00, 0x75, 0x3f, 0x45, 0xa3, 0x5e, 0x8b,
  203. 0xb5, 0xa0, 0x3d, 0x69, 0x9a, 0xc6, 0x50, 0x07,
  204. 0x27, 0x2c, 0x32, 0xab, 0x0e, 0xde, 0xd1, 0x63,
  205. 0x1a, 0x8b, 0x60, 0x5a, 0x43, 0xff, 0x5b, 0xed,
  206. 0x80, 0x86, 0x07, 0x2b, 0xa1, 0xe7, 0xcc, 0x23,
  207. 0x58, 0xba, 0xec, 0xa1, 0x34, 0xc8, 0x25, 0xa7 },
  208. }, {
  209. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  210. .psize = 56,
  211. .digest = { 0x33, 0x91, 0xfd, 0xdd, 0xfc, 0x8d, 0xc7, 0x39,
  212. 0x37, 0x07, 0xa6, 0x5b, 0x1b, 0x47, 0x09, 0x39,
  213. 0x7c, 0xf8, 0xb1, 0xd1, 0x62, 0xaf, 0x05, 0xab,
  214. 0xfe, 0x8f, 0x45, 0x0d, 0xe5, 0xf3, 0x6b, 0xc6,
  215. 0xb0, 0x45, 0x5a, 0x85, 0x20, 0xbc, 0x4e, 0x6f,
  216. 0x5f, 0xe9, 0x5b, 0x1f, 0xe3, 0xc8, 0x45, 0x2b},
  217. }, {
  218. .plaintext = "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
  219. "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
  220. .psize = 112,
  221. .digest = { 0x09, 0x33, 0x0c, 0x33, 0xf7, 0x11, 0x47, 0xe8,
  222. 0x3d, 0x19, 0x2f, 0xc7, 0x82, 0xcd, 0x1b, 0x47,
  223. 0x53, 0x11, 0x1b, 0x17, 0x3b, 0x3b, 0x05, 0xd2,
  224. 0x2f, 0xa0, 0x80, 0x86, 0xe3, 0xb0, 0xf7, 0x12,
  225. 0xfc, 0xc7, 0xc7, 0x1a, 0x55, 0x7e, 0x2d, 0xb9,
  226. 0x66, 0xc3, 0xe9, 0xfa, 0x91, 0x74, 0x60, 0x39 },
  227. }, {
  228. .plaintext = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcd"
  229. "efghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz",
  230. .psize = 104,
  231. .digest = { 0x3d, 0x20, 0x89, 0x73, 0xab, 0x35, 0x08, 0xdb,
  232. 0xbd, 0x7e, 0x2c, 0x28, 0x62, 0xba, 0x29, 0x0a,
  233. 0xd3, 0x01, 0x0e, 0x49, 0x78, 0xc1, 0x98, 0xdc,
  234. 0x4d, 0x8f, 0xd0, 0x14, 0xe5, 0x82, 0x82, 0x3a,
  235. 0x89, 0xe1, 0x6f, 0x9b, 0x2a, 0x7b, 0xbc, 0x1a,
  236. 0xc9, 0x38, 0xe2, 0xd1, 0x99, 0xe8, 0xbe, 0xa4 },
  237. .np = 4,
  238. .tap = { 26, 26, 26, 26 }
  239. },
  240. };
  241. /*
  242. * SHA512 test vectors from from NIST and kerneli
  243. */
  244. #define SHA512_TEST_VECTORS 4
  245. static struct hash_testvec sha512_tv_template[] = {
  246. {
  247. .plaintext = "abc",
  248. .psize = 3,
  249. .digest = { 0xdd, 0xaf, 0x35, 0xa1, 0x93, 0x61, 0x7a, 0xba,
  250. 0xcc, 0x41, 0x73, 0x49, 0xae, 0x20, 0x41, 0x31,
  251. 0x12, 0xe6, 0xfa, 0x4e, 0x89, 0xa9, 0x7e, 0xa2,
  252. 0x0a, 0x9e, 0xee, 0xe6, 0x4b, 0x55, 0xd3, 0x9a,
  253. 0x21, 0x92, 0x99, 0x2a, 0x27, 0x4f, 0xc1, 0xa8,
  254. 0x36, 0xba, 0x3c, 0x23, 0xa3, 0xfe, 0xeb, 0xbd,
  255. 0x45, 0x4d, 0x44, 0x23, 0x64, 0x3c, 0xe8, 0x0e,
  256. 0x2a, 0x9a, 0xc9, 0x4f, 0xa5, 0x4c, 0xa4, 0x9f },
  257. }, {
  258. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  259. .psize = 56,
  260. .digest = { 0x20, 0x4a, 0x8f, 0xc6, 0xdd, 0xa8, 0x2f, 0x0a,
  261. 0x0c, 0xed, 0x7b, 0xeb, 0x8e, 0x08, 0xa4, 0x16,
  262. 0x57, 0xc1, 0x6e, 0xf4, 0x68, 0xb2, 0x28, 0xa8,
  263. 0x27, 0x9b, 0xe3, 0x31, 0xa7, 0x03, 0xc3, 0x35,
  264. 0x96, 0xfd, 0x15, 0xc1, 0x3b, 0x1b, 0x07, 0xf9,
  265. 0xaa, 0x1d, 0x3b, 0xea, 0x57, 0x78, 0x9c, 0xa0,
  266. 0x31, 0xad, 0x85, 0xc7, 0xa7, 0x1d, 0xd7, 0x03,
  267. 0x54, 0xec, 0x63, 0x12, 0x38, 0xca, 0x34, 0x45 },
  268. }, {
  269. .plaintext = "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
  270. "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
  271. .psize = 112,
  272. .digest = { 0x8e, 0x95, 0x9b, 0x75, 0xda, 0xe3, 0x13, 0xda,
  273. 0x8c, 0xf4, 0xf7, 0x28, 0x14, 0xfc, 0x14, 0x3f,
  274. 0x8f, 0x77, 0x79, 0xc6, 0xeb, 0x9f, 0x7f, 0xa1,
  275. 0x72, 0x99, 0xae, 0xad, 0xb6, 0x88, 0x90, 0x18,
  276. 0x50, 0x1d, 0x28, 0x9e, 0x49, 0x00, 0xf7, 0xe4,
  277. 0x33, 0x1b, 0x99, 0xde, 0xc4, 0xb5, 0x43, 0x3a,
  278. 0xc7, 0xd3, 0x29, 0xee, 0xb6, 0xdd, 0x26, 0x54,
  279. 0x5e, 0x96, 0xe5, 0x5b, 0x87, 0x4b, 0xe9, 0x09 },
  280. }, {
  281. .plaintext = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcd"
  282. "efghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz",
  283. .psize = 104,
  284. .digest = { 0x93, 0x0d, 0x0c, 0xef, 0xcb, 0x30, 0xff, 0x11,
  285. 0x33, 0xb6, 0x89, 0x81, 0x21, 0xf1, 0xcf, 0x3d,
  286. 0x27, 0x57, 0x8a, 0xfc, 0xaf, 0xe8, 0x67, 0x7c,
  287. 0x52, 0x57, 0xcf, 0x06, 0x99, 0x11, 0xf7, 0x5d,
  288. 0x8f, 0x58, 0x31, 0xb5, 0x6e, 0xbf, 0xda, 0x67,
  289. 0xb2, 0x78, 0xe6, 0x6d, 0xff, 0x8b, 0x84, 0xfe,
  290. 0x2b, 0x28, 0x70, 0xf7, 0x42, 0xa5, 0x80, 0xd8,
  291. 0xed, 0xb4, 0x19, 0x87, 0x23, 0x28, 0x50, 0xc9 },
  292. .np = 4,
  293. .tap = { 26, 26, 26, 26 }
  294. },
  295. };
  296. /*
  297. * WHIRLPOOL test vectors from Whirlpool package
  298. * by Vincent Rijmen and Paulo S. L. M. Barreto as part of the NESSIE
  299. * submission
  300. */
  301. #define WP512_TEST_VECTORS 8
  302. static struct hash_testvec wp512_tv_template[] = {
  303. {
  304. .plaintext = "",
  305. .psize = 0,
  306. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  307. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  308. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  309. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7,
  310. 0x3E, 0x83, 0xBE, 0x69, 0x8B, 0x28, 0x8F, 0xEB,
  311. 0xCF, 0x88, 0xE3, 0xE0, 0x3C, 0x4F, 0x07, 0x57,
  312. 0xEA, 0x89, 0x64, 0xE5, 0x9B, 0x63, 0xD9, 0x37,
  313. 0x08, 0xB1, 0x38, 0xCC, 0x42, 0xA6, 0x6E, 0xB3 },
  314. }, {
  315. .plaintext = "a",
  316. .psize = 1,
  317. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  318. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  319. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  320. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42,
  321. 0xD1, 0x1B, 0xC6, 0x45, 0x41, 0x3A, 0xEF, 0xF6,
  322. 0x3A, 0x42, 0x39, 0x1A, 0x39, 0x14, 0x5A, 0x59,
  323. 0x1A, 0x92, 0x20, 0x0D, 0x56, 0x01, 0x95, 0xE5,
  324. 0x3B, 0x47, 0x85, 0x84, 0xFD, 0xAE, 0x23, 0x1A },
  325. }, {
  326. .plaintext = "abc",
  327. .psize = 3,
  328. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  329. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  330. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  331. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C,
  332. 0x71, 0x81, 0xEE, 0xBD, 0xB6, 0xC5, 0x7E, 0x27,
  333. 0x7D, 0x0E, 0x34, 0x95, 0x71, 0x14, 0xCB, 0xD6,
  334. 0xC7, 0x97, 0xFC, 0x9D, 0x95, 0xD8, 0xB5, 0x82,
  335. 0xD2, 0x25, 0x29, 0x20, 0x76, 0xD4, 0xEE, 0xF5 },
  336. }, {
  337. .plaintext = "message digest",
  338. .psize = 14,
  339. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  340. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  341. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  342. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B,
  343. 0x84, 0x21, 0x55, 0x76, 0x59, 0xEF, 0x55, 0xC1,
  344. 0x06, 0xB4, 0xB5, 0x2A, 0xC5, 0xA4, 0xAA, 0xA6,
  345. 0x92, 0xED, 0x92, 0x00, 0x52, 0x83, 0x8F, 0x33,
  346. 0x62, 0xE8, 0x6D, 0xBD, 0x37, 0xA8, 0x90, 0x3E },
  347. }, {
  348. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  349. .psize = 26,
  350. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  351. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  352. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  353. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B,
  354. 0x08, 0xBF, 0x2A, 0x92, 0x51, 0xC3, 0x0B, 0x6A,
  355. 0x0B, 0x8A, 0xAE, 0x86, 0x17, 0x7A, 0xB4, 0xA6,
  356. 0xF6, 0x8F, 0x67, 0x3E, 0x72, 0x07, 0x86, 0x5D,
  357. 0x5D, 0x98, 0x19, 0xA3, 0xDB, 0xA4, 0xEB, 0x3B },
  358. }, {
  359. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  360. "abcdefghijklmnopqrstuvwxyz0123456789",
  361. .psize = 62,
  362. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  363. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  364. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  365. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E,
  366. 0x08, 0xEB, 0xA2, 0x66, 0x29, 0x12, 0x9D, 0x8F,
  367. 0xB7, 0xCB, 0x57, 0x21, 0x1B, 0x92, 0x81, 0xA6,
  368. 0x55, 0x17, 0xCC, 0x87, 0x9D, 0x7B, 0x96, 0x21,
  369. 0x42, 0xC6, 0x5F, 0x5A, 0x7A, 0xF0, 0x14, 0x67 },
  370. }, {
  371. .plaintext = "1234567890123456789012345678901234567890"
  372. "1234567890123456789012345678901234567890",
  373. .psize = 80,
  374. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  375. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  376. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  377. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29,
  378. 0x4D, 0x5B, 0xD8, 0xDF, 0x2A, 0x6C, 0x44, 0xE5,
  379. 0x38, 0xCD, 0x04, 0x7B, 0x26, 0x81, 0xA5, 0x1A,
  380. 0x2C, 0x60, 0x48, 0x1E, 0x88, 0xC5, 0xA2, 0x0B,
  381. 0x2C, 0x2A, 0x80, 0xCF, 0x3A, 0x9A, 0x08, 0x3B },
  382. }, {
  383. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  384. .psize = 32,
  385. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  386. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  387. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  388. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69,
  389. 0x16, 0xBD, 0xC8, 0x03, 0x1B, 0xC5, 0xBE, 0x1B,
  390. 0x7B, 0x94, 0x76, 0x39, 0xFE, 0x05, 0x0B, 0x56,
  391. 0x93, 0x9B, 0xAA, 0xA0, 0xAD, 0xFF, 0x9A, 0xE6,
  392. 0x74, 0x5B, 0x7B, 0x18, 0x1C, 0x3B, 0xE3, 0xFD },
  393. },
  394. };
  395. #define WP384_TEST_VECTORS 8
  396. static struct hash_testvec wp384_tv_template[] = {
  397. {
  398. .plaintext = "",
  399. .psize = 0,
  400. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  401. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  402. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  403. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7,
  404. 0x3E, 0x83, 0xBE, 0x69, 0x8B, 0x28, 0x8F, 0xEB,
  405. 0xCF, 0x88, 0xE3, 0xE0, 0x3C, 0x4F, 0x07, 0x57 },
  406. }, {
  407. .plaintext = "a",
  408. .psize = 1,
  409. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  410. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  411. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  412. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42,
  413. 0xD1, 0x1B, 0xC6, 0x45, 0x41, 0x3A, 0xEF, 0xF6,
  414. 0x3A, 0x42, 0x39, 0x1A, 0x39, 0x14, 0x5A, 0x59 },
  415. }, {
  416. .plaintext = "abc",
  417. .psize = 3,
  418. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  419. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  420. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  421. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C,
  422. 0x71, 0x81, 0xEE, 0xBD, 0xB6, 0xC5, 0x7E, 0x27,
  423. 0x7D, 0x0E, 0x34, 0x95, 0x71, 0x14, 0xCB, 0xD6 },
  424. }, {
  425. .plaintext = "message digest",
  426. .psize = 14,
  427. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  428. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  429. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  430. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B,
  431. 0x84, 0x21, 0x55, 0x76, 0x59, 0xEF, 0x55, 0xC1,
  432. 0x06, 0xB4, 0xB5, 0x2A, 0xC5, 0xA4, 0xAA, 0xA6 },
  433. }, {
  434. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  435. .psize = 26,
  436. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  437. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  438. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  439. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B,
  440. 0x08, 0xBF, 0x2A, 0x92, 0x51, 0xC3, 0x0B, 0x6A,
  441. 0x0B, 0x8A, 0xAE, 0x86, 0x17, 0x7A, 0xB4, 0xA6 },
  442. }, {
  443. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  444. "abcdefghijklmnopqrstuvwxyz0123456789",
  445. .psize = 62,
  446. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  447. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  448. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  449. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E,
  450. 0x08, 0xEB, 0xA2, 0x66, 0x29, 0x12, 0x9D, 0x8F,
  451. 0xB7, 0xCB, 0x57, 0x21, 0x1B, 0x92, 0x81, 0xA6 },
  452. }, {
  453. .plaintext = "1234567890123456789012345678901234567890"
  454. "1234567890123456789012345678901234567890",
  455. .psize = 80,
  456. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  457. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  458. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  459. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29,
  460. 0x4D, 0x5B, 0xD8, 0xDF, 0x2A, 0x6C, 0x44, 0xE5,
  461. 0x38, 0xCD, 0x04, 0x7B, 0x26, 0x81, 0xA5, 0x1A },
  462. }, {
  463. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  464. .psize = 32,
  465. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  466. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  467. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  468. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69,
  469. 0x16, 0xBD, 0xC8, 0x03, 0x1B, 0xC5, 0xBE, 0x1B,
  470. 0x7B, 0x94, 0x76, 0x39, 0xFE, 0x05, 0x0B, 0x56 },
  471. },
  472. };
  473. #define WP256_TEST_VECTORS 8
  474. static struct hash_testvec wp256_tv_template[] = {
  475. {
  476. .plaintext = "",
  477. .psize = 0,
  478. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  479. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  480. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  481. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7 },
  482. }, {
  483. .plaintext = "a",
  484. .psize = 1,
  485. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  486. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  487. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  488. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42 },
  489. }, {
  490. .plaintext = "abc",
  491. .psize = 3,
  492. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  493. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  494. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  495. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C },
  496. }, {
  497. .plaintext = "message digest",
  498. .psize = 14,
  499. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  500. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  501. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  502. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B },
  503. }, {
  504. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  505. .psize = 26,
  506. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  507. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  508. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  509. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B },
  510. }, {
  511. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  512. "abcdefghijklmnopqrstuvwxyz0123456789",
  513. .psize = 62,
  514. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  515. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  516. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  517. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E },
  518. }, {
  519. .plaintext = "1234567890123456789012345678901234567890"
  520. "1234567890123456789012345678901234567890",
  521. .psize = 80,
  522. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  523. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  524. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  525. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29 },
  526. }, {
  527. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  528. .psize = 32,
  529. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  530. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  531. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  532. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69 },
  533. },
  534. };
  535. /*
  536. * TIGER test vectors from Tiger website
  537. */
  538. #define TGR192_TEST_VECTORS 6
  539. static struct hash_testvec tgr192_tv_template[] = {
  540. {
  541. .plaintext = "",
  542. .psize = 0,
  543. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  544. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f,
  545. 0xf3, 0x73, 0xde, 0x2d, 0x49, 0x58, 0x4e, 0x7a },
  546. }, {
  547. .plaintext = "abc",
  548. .psize = 3,
  549. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  550. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf,
  551. 0x93, 0x5f, 0x7b, 0x95, 0x1c, 0x13, 0x29, 0x51 },
  552. }, {
  553. .plaintext = "Tiger",
  554. .psize = 5,
  555. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  556. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec,
  557. 0x37, 0x79, 0x0c, 0x11, 0x6f, 0x9d, 0x2b, 0xdf },
  558. }, {
  559. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  560. .psize = 64,
  561. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  562. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e,
  563. 0xb5, 0x86, 0x44, 0x50, 0x34, 0xa5, 0xa3, 0x86 },
  564. }, {
  565. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  566. .psize = 64,
  567. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  568. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9,
  569. 0x57, 0x89, 0x65, 0x65, 0x97, 0x5f, 0x91, 0x97 },
  570. }, {
  571. .plaintext = "Tiger - A Fast New Hash Function, "
  572. "by Ross Anderson and Eli Biham, "
  573. "proceedings of Fast Software Encryption 3, "
  574. "Cambridge, 1996.",
  575. .psize = 125,
  576. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  577. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24,
  578. 0xdd, 0x68, 0x15, 0x1d, 0x50, 0x39, 0x74, 0xfc },
  579. },
  580. };
  581. #define TGR160_TEST_VECTORS 6
  582. static struct hash_testvec tgr160_tv_template[] = {
  583. {
  584. .plaintext = "",
  585. .psize = 0,
  586. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  587. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f,
  588. 0xf3, 0x73, 0xde, 0x2d },
  589. }, {
  590. .plaintext = "abc",
  591. .psize = 3,
  592. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  593. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf,
  594. 0x93, 0x5f, 0x7b, 0x95 },
  595. }, {
  596. .plaintext = "Tiger",
  597. .psize = 5,
  598. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  599. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec,
  600. 0x37, 0x79, 0x0c, 0x11 },
  601. }, {
  602. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  603. .psize = 64,
  604. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  605. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e,
  606. 0xb5, 0x86, 0x44, 0x50 },
  607. }, {
  608. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  609. .psize = 64,
  610. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  611. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9,
  612. 0x57, 0x89, 0x65, 0x65 },
  613. }, {
  614. .plaintext = "Tiger - A Fast New Hash Function, "
  615. "by Ross Anderson and Eli Biham, "
  616. "proceedings of Fast Software Encryption 3, "
  617. "Cambridge, 1996.",
  618. .psize = 125,
  619. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  620. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24,
  621. 0xdd, 0x68, 0x15, 0x1d },
  622. },
  623. };
  624. #define TGR128_TEST_VECTORS 6
  625. static struct hash_testvec tgr128_tv_template[] = {
  626. {
  627. .plaintext = "",
  628. .psize = 0,
  629. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  630. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f },
  631. }, {
  632. .plaintext = "abc",
  633. .psize = 3,
  634. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  635. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf },
  636. }, {
  637. .plaintext = "Tiger",
  638. .psize = 5,
  639. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  640. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec },
  641. }, {
  642. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  643. .psize = 64,
  644. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  645. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e },
  646. }, {
  647. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  648. .psize = 64,
  649. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  650. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9 },
  651. }, {
  652. .plaintext = "Tiger - A Fast New Hash Function, "
  653. "by Ross Anderson and Eli Biham, "
  654. "proceedings of Fast Software Encryption 3, "
  655. "Cambridge, 1996.",
  656. .psize = 125,
  657. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  658. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24 },
  659. },
  660. };
  661. #ifdef CONFIG_CRYPTO_HMAC
  662. /*
  663. * HMAC-MD5 test vectors from RFC2202
  664. * (These need to be fixed to not use strlen).
  665. */
  666. #define HMAC_MD5_TEST_VECTORS 7
  667. static struct hmac_testvec hmac_md5_tv_template[] =
  668. {
  669. {
  670. .key = { [0 ... 15] = 0x0b },
  671. .ksize = 16,
  672. .plaintext = "Hi There",
  673. .psize = 8,
  674. .digest = { 0x92, 0x94, 0x72, 0x7a, 0x36, 0x38, 0xbb, 0x1c,
  675. 0x13, 0xf4, 0x8e, 0xf8, 0x15, 0x8b, 0xfc, 0x9d },
  676. }, {
  677. .key = { 'J', 'e', 'f', 'e' },
  678. .ksize = 4,
  679. .plaintext = "what do ya want for nothing?",
  680. .psize = 28,
  681. .digest = { 0x75, 0x0c, 0x78, 0x3e, 0x6a, 0xb0, 0xb5, 0x03,
  682. 0xea, 0xa8, 0x6e, 0x31, 0x0a, 0x5d, 0xb7, 0x38 },
  683. .np = 2,
  684. .tap = {14, 14}
  685. }, {
  686. .key = { [0 ... 15] = 0xaa },
  687. .ksize = 16,
  688. .plaintext = { [0 ... 49] = 0xdd },
  689. .psize = 50,
  690. .digest = { 0x56, 0xbe, 0x34, 0x52, 0x1d, 0x14, 0x4c, 0x88,
  691. 0xdb, 0xb8, 0xc7, 0x33, 0xf0, 0xe8, 0xb3, 0xf6 },
  692. }, {
  693. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  694. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  695. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, },
  696. .ksize = 25,
  697. .plaintext = { [0 ... 49] = 0xcd },
  698. .psize = 50,
  699. .digest = { 0x69, 0x7e, 0xaf, 0x0a, 0xca, 0x3a, 0x3a, 0xea,
  700. 0x3a, 0x75, 0x16, 0x47, 0x46, 0xff, 0xaa, 0x79 },
  701. }, {
  702. .key = { [0 ... 15] = 0x0c },
  703. .ksize = 16,
  704. .plaintext = "Test With Truncation",
  705. .psize = 20,
  706. .digest = { 0x56, 0x46, 0x1e, 0xf2, 0x34, 0x2e, 0xdc, 0x00,
  707. 0xf9, 0xba, 0xb9, 0x95, 0x69, 0x0e, 0xfd, 0x4c },
  708. }, {
  709. .key = { [0 ... 79] = 0xaa },
  710. .ksize = 80,
  711. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  712. .psize = 54,
  713. .digest = { 0x6b, 0x1a, 0xb7, 0xfe, 0x4b, 0xd7, 0xbf, 0x8f,
  714. 0x0b, 0x62, 0xe6, 0xce, 0x61, 0xb9, 0xd0, 0xcd },
  715. }, {
  716. .key = { [0 ... 79] = 0xaa },
  717. .ksize = 80,
  718. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than One "
  719. "Block-Size Data",
  720. .psize = 73,
  721. .digest = { 0x6f, 0x63, 0x0f, 0xad, 0x67, 0xcd, 0xa0, 0xee,
  722. 0x1f, 0xb1, 0xf5, 0x62, 0xdb, 0x3a, 0xa5, 0x3e },
  723. },
  724. };
  725. /*
  726. * HMAC-SHA1 test vectors from RFC2202
  727. */
  728. #define HMAC_SHA1_TEST_VECTORS 7
  729. static struct hmac_testvec hmac_sha1_tv_template[] = {
  730. {
  731. .key = { [0 ... 19] = 0x0b },
  732. .ksize = 20,
  733. .plaintext = "Hi There",
  734. .psize = 8,
  735. .digest = { 0xb6, 0x17, 0x31, 0x86, 0x55, 0x05, 0x72, 0x64,
  736. 0xe2, 0x8b, 0xc0, 0xb6, 0xfb, 0x37, 0x8c, 0x8e, 0xf1,
  737. 0x46, 0xbe },
  738. }, {
  739. .key = { 'J', 'e', 'f', 'e' },
  740. .ksize = 4,
  741. .plaintext = "what do ya want for nothing?",
  742. .psize = 28,
  743. .digest = { 0xef, 0xfc, 0xdf, 0x6a, 0xe5, 0xeb, 0x2f, 0xa2, 0xd2, 0x74,
  744. 0x16, 0xd5, 0xf1, 0x84, 0xdf, 0x9c, 0x25, 0x9a, 0x7c, 0x79 },
  745. .np = 2,
  746. .tap = { 14, 14 }
  747. }, {
  748. .key = { [0 ... 19] = 0xaa },
  749. .ksize = 20,
  750. .plaintext = { [0 ... 49] = 0xdd },
  751. .psize = 50,
  752. .digest = { 0x12, 0x5d, 0x73, 0x42, 0xb9, 0xac, 0x11, 0xcd, 0x91, 0xa3,
  753. 0x9a, 0xf4, 0x8a, 0xa1, 0x7b, 0x4f, 0x63, 0xf1, 0x75, 0xd3 },
  754. }, {
  755. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  756. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  757. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19 },
  758. .ksize = 25,
  759. .plaintext = { [0 ... 49] = 0xcd },
  760. .psize = 50,
  761. .digest = { 0x4c, 0x90, 0x07, 0xf4, 0x02, 0x62, 0x50, 0xc6, 0xbc, 0x84,
  762. 0x14, 0xf9, 0xbf, 0x50, 0xc8, 0x6c, 0x2d, 0x72, 0x35, 0xda },
  763. }, {
  764. .key = { [0 ... 19] = 0x0c },
  765. .ksize = 20,
  766. .plaintext = "Test With Truncation",
  767. .psize = 20,
  768. .digest = { 0x4c, 0x1a, 0x03, 0x42, 0x4b, 0x55, 0xe0, 0x7f, 0xe7, 0xf2,
  769. 0x7b, 0xe1, 0xd5, 0x8b, 0xb9, 0x32, 0x4a, 0x9a, 0x5a, 0x04 },
  770. }, {
  771. .key = { [0 ... 79] = 0xaa },
  772. .ksize = 80,
  773. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  774. .psize = 54,
  775. .digest = { 0xaa, 0x4a, 0xe5, 0xe1, 0x52, 0x72, 0xd0, 0x0e, 0x95, 0x70,
  776. 0x56, 0x37, 0xce, 0x8a, 0x3b, 0x55, 0xed, 0x40, 0x21, 0x12 },
  777. }, {
  778. .key = { [0 ... 79] = 0xaa },
  779. .ksize = 80,
  780. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than One "
  781. "Block-Size Data",
  782. .psize = 73,
  783. .digest = { 0xe8, 0xe9, 0x9d, 0x0f, 0x45, 0x23, 0x7d, 0x78, 0x6d, 0x6b,
  784. 0xba, 0xa7, 0x96, 0x5c, 0x78, 0x08, 0xbb, 0xff, 0x1a, 0x91 },
  785. },
  786. };
  787. /*
  788. * HMAC-SHA256 test vectors from
  789. * draft-ietf-ipsec-ciph-sha-256-01.txt
  790. */
  791. #define HMAC_SHA256_TEST_VECTORS 10
  792. static struct hmac_testvec hmac_sha256_tv_template[] = {
  793. {
  794. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  795. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  796. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  797. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20},
  798. .ksize = 32,
  799. .plaintext = "abc",
  800. .psize = 3,
  801. .digest = { 0xa2, 0x1b, 0x1f, 0x5d, 0x4c, 0xf4, 0xf7, 0x3a,
  802. 0x4d, 0xd9, 0x39, 0x75, 0x0f, 0x7a, 0x06, 0x6a,
  803. 0x7f, 0x98, 0xcc, 0x13, 0x1c, 0xb1, 0x6a, 0x66,
  804. 0x92, 0x75, 0x90, 0x21, 0xcf, 0xab, 0x81, 0x81 },
  805. }, {
  806. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  807. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  808. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  809. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20 },
  810. .ksize = 32,
  811. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  812. .psize = 56,
  813. .digest = { 0x10, 0x4f, 0xdc, 0x12, 0x57, 0x32, 0x8f, 0x08,
  814. 0x18, 0x4b, 0xa7, 0x31, 0x31, 0xc5, 0x3c, 0xae,
  815. 0xe6, 0x98, 0xe3, 0x61, 0x19, 0x42, 0x11, 0x49,
  816. 0xea, 0x8c, 0x71, 0x24, 0x56, 0x69, 0x7d, 0x30 },
  817. }, {
  818. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  819. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  820. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  821. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20 },
  822. .ksize = 32,
  823. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
  824. "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  825. .psize = 112,
  826. .digest = { 0x47, 0x03, 0x05, 0xfc, 0x7e, 0x40, 0xfe, 0x34,
  827. 0xd3, 0xee, 0xb3, 0xe7, 0x73, 0xd9, 0x5a, 0xab,
  828. 0x73, 0xac, 0xf0, 0xfd, 0x06, 0x04, 0x47, 0xa5,
  829. 0xeb, 0x45, 0x95, 0xbf, 0x33, 0xa9, 0xd1, 0xa3 },
  830. }, {
  831. .key = { [0 ... 31] = 0x0b },
  832. .ksize = 32,
  833. .plaintext = "Hi There",
  834. .psize = 8,
  835. .digest = { 0x19, 0x8a, 0x60, 0x7e, 0xb4, 0x4b, 0xfb, 0xc6,
  836. 0x99, 0x03, 0xa0, 0xf1, 0xcf, 0x2b, 0xbd, 0xc5,
  837. 0xba, 0x0a, 0xa3, 0xf3, 0xd9, 0xae, 0x3c, 0x1c,
  838. 0x7a, 0x3b, 0x16, 0x96, 0xa0, 0xb6, 0x8c, 0xf7 },
  839. }, {
  840. .key = "Jefe",
  841. .ksize = 4,
  842. .plaintext = "what do ya want for nothing?",
  843. .psize = 28,
  844. .digest = { 0x5b, 0xdc, 0xc1, 0x46, 0xbf, 0x60, 0x75, 0x4e,
  845. 0x6a, 0x04, 0x24, 0x26, 0x08, 0x95, 0x75, 0xc7,
  846. 0x5a, 0x00, 0x3f, 0x08, 0x9d, 0x27, 0x39, 0x83,
  847. 0x9d, 0xec, 0x58, 0xb9, 0x64, 0xec, 0x38, 0x43 },
  848. .np = 2,
  849. .tap = { 14, 14 }
  850. }, {
  851. .key = { [0 ... 31] = 0xaa },
  852. .ksize = 32,
  853. .plaintext = { [0 ... 49] = 0xdd },
  854. .psize = 50,
  855. .digest = { 0xcd, 0xcb, 0x12, 0x20, 0xd1, 0xec, 0xcc, 0xea,
  856. 0x91, 0xe5, 0x3a, 0xba, 0x30, 0x92, 0xf9, 0x62,
  857. 0xe5, 0x49, 0xfe, 0x6c, 0xe9, 0xed, 0x7f, 0xdc,
  858. 0x43, 0x19, 0x1f, 0xbd, 0xe4, 0x5c, 0x30, 0xb0 },
  859. }, {
  860. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  861. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  862. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  863. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
  864. 0x21, 0x22, 0x23, 0x24, 0x25 },
  865. .ksize = 37,
  866. .plaintext = { [0 ... 49] = 0xcd },
  867. .psize = 50,
  868. .digest = { 0xd4, 0x63, 0x3c, 0x17, 0xf6, 0xfb, 0x8d, 0x74,
  869. 0x4c, 0x66, 0xde, 0xe0, 0xf8, 0xf0, 0x74, 0x55,
  870. 0x6e, 0xc4, 0xaf, 0x55, 0xef, 0x07, 0x99, 0x85,
  871. 0x41, 0x46, 0x8e, 0xb4, 0x9b, 0xd2, 0xe9, 0x17 },
  872. }, {
  873. .key = { [0 ... 31] = 0x0c },
  874. .ksize = 32,
  875. .plaintext = "Test With Truncation",
  876. .psize = 20,
  877. .digest = { 0x75, 0x46, 0xaf, 0x01, 0x84, 0x1f, 0xc0, 0x9b,
  878. 0x1a, 0xb9, 0xc3, 0x74, 0x9a, 0x5f, 0x1c, 0x17,
  879. 0xd4, 0xf5, 0x89, 0x66, 0x8a, 0x58, 0x7b, 0x27,
  880. 0x00, 0xa9, 0xc9, 0x7c, 0x11, 0x93, 0xcf, 0x42 },
  881. }, {
  882. .key = { [0 ... 79] = 0xaa },
  883. .ksize = 80,
  884. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  885. .psize = 54,
  886. .digest = { 0x69, 0x53, 0x02, 0x5e, 0xd9, 0x6f, 0x0c, 0x09,
  887. 0xf8, 0x0a, 0x96, 0xf7, 0x8e, 0x65, 0x38, 0xdb,
  888. 0xe2, 0xe7, 0xb8, 0x20, 0xe3, 0xdd, 0x97, 0x0e,
  889. 0x7d, 0xdd, 0x39, 0x09, 0x1b, 0x32, 0x35, 0x2f },
  890. }, {
  891. .key = { [0 ... 79] = 0xaa },
  892. .ksize = 80,
  893. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than "
  894. "One Block-Size Data",
  895. .psize = 73,
  896. .digest = { 0x63, 0x55, 0xac, 0x22, 0xe8, 0x90, 0xd0, 0xa3,
  897. 0xc8, 0x48, 0x1a, 0x5c, 0xa4, 0x82, 0x5b, 0xc8,
  898. 0x84, 0xd3, 0xe7, 0xa1, 0xff, 0x98, 0xa2, 0xfc,
  899. 0x2a, 0xc7, 0xd8, 0xe0, 0x64, 0xc3, 0xb2, 0xe6 },
  900. },
  901. };
  902. #endif /* CONFIG_CRYPTO_HMAC */
  903. /*
  904. * DES test vectors.
  905. */
  906. #define DES_ENC_TEST_VECTORS 10
  907. #define DES_DEC_TEST_VECTORS 4
  908. #define DES_CBC_ENC_TEST_VECTORS 5
  909. #define DES_CBC_DEC_TEST_VECTORS 4
  910. #define DES3_EDE_ENC_TEST_VECTORS 3
  911. #define DES3_EDE_DEC_TEST_VECTORS 3
  912. static struct cipher_testvec des_enc_tv_template[] = {
  913. { /* From Applied Cryptography */
  914. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  915. .klen = 8,
  916. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  917. .ilen = 8,
  918. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  919. .rlen = 8,
  920. }, { /* Same key, different plaintext block */
  921. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  922. .klen = 8,
  923. .input = { 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  924. .ilen = 8,
  925. .result = { 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  926. .rlen = 8,
  927. }, { /* Sbox test from NBS */
  928. .key = { 0x7c, 0xa1, 0x10, 0x45, 0x4a, 0x1a, 0x6e, 0x57 },
  929. .klen = 8,
  930. .input = { 0x01, 0xa1, 0xd6, 0xd0, 0x39, 0x77, 0x67, 0x42 },
  931. .ilen = 8,
  932. .result = { 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  933. .rlen = 8,
  934. }, { /* Three blocks */
  935. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  936. .klen = 8,
  937. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  938. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  939. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef },
  940. .ilen = 24,
  941. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  942. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  943. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90 },
  944. .rlen = 24,
  945. }, { /* Weak key */
  946. .fail = 1,
  947. .wk = 1,
  948. .key = { 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 },
  949. .klen = 8,
  950. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  951. .ilen = 8,
  952. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  953. .rlen = 8,
  954. }, { /* Two blocks -- for testing encryption across pages */
  955. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  956. .klen = 8,
  957. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  958. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  959. .ilen = 16,
  960. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  961. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  962. .rlen = 16,
  963. .np = 2,
  964. .tap = { 8, 8 }
  965. }, { /* Four blocks -- for testing encryption with chunking */
  966. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  967. .klen = 8,
  968. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  969. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  970. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef,
  971. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  972. .ilen = 32,
  973. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  974. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  975. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90,
  976. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  977. .rlen = 32,
  978. .np = 3,
  979. .tap = { 14, 10, 8 }
  980. }, {
  981. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  982. .klen = 8,
  983. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  984. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  985. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef },
  986. .ilen = 24,
  987. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  988. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  989. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90 },
  990. .rlen = 24,
  991. .np = 4,
  992. .tap = { 2, 1, 3, 18 }
  993. }, {
  994. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  995. .klen = 8,
  996. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  997. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  998. .ilen = 16,
  999. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1000. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1001. .rlen = 16,
  1002. .np = 5,
  1003. .tap = { 2, 2, 2, 2, 8 }
  1004. }, {
  1005. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1006. .klen = 8,
  1007. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1008. .ilen = 8,
  1009. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1010. .rlen = 8,
  1011. .np = 8,
  1012. .tap = { 1, 1, 1, 1, 1, 1, 1, 1 }
  1013. },
  1014. };
  1015. static struct cipher_testvec des_dec_tv_template[] = {
  1016. { /* From Applied Cryptography */
  1017. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1018. .klen = 8,
  1019. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1020. .ilen = 8,
  1021. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1022. .rlen = 8,
  1023. }, { /* Sbox test from NBS */
  1024. .key = { 0x7c, 0xa1, 0x10, 0x45, 0x4a, 0x1a, 0x6e, 0x57 },
  1025. .klen = 8,
  1026. .input = { 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1027. .ilen = 8,
  1028. .result = { 0x01, 0xa1, 0xd6, 0xd0, 0x39, 0x77, 0x67, 0x42 },
  1029. .rlen = 8,
  1030. }, { /* Two blocks, for chunking test */
  1031. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1032. .klen = 8,
  1033. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1034. 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1035. .ilen = 16,
  1036. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1037. 0xa3, 0x99, 0x7b, 0xca, 0xaf, 0x69, 0xa0, 0xf5 },
  1038. .rlen = 16,
  1039. .np = 2,
  1040. .tap = { 8, 8 }
  1041. }, {
  1042. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1043. .klen = 8,
  1044. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1045. 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1046. .ilen = 16,
  1047. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1048. 0xa3, 0x99, 0x7b, 0xca, 0xaf, 0x69, 0xa0, 0xf5 },
  1049. .rlen = 16,
  1050. .np = 3,
  1051. .tap = { 3, 12, 1 }
  1052. },
  1053. };
  1054. static struct cipher_testvec des_cbc_enc_tv_template[] = {
  1055. { /* From OpenSSL */
  1056. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef},
  1057. .klen = 8,
  1058. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1059. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1060. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1061. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1062. .ilen = 24,
  1063. .result = { 0xcc, 0xd1, 0x73, 0xff, 0xab, 0x20, 0x39, 0xf4,
  1064. 0xac, 0xd8, 0xae, 0xfd, 0xdf, 0xd8, 0xa1, 0xeb,
  1065. 0x46, 0x8e, 0x91, 0x15, 0x78, 0x88, 0xba, 0x68 },
  1066. .rlen = 24,
  1067. }, { /* FIPS Pub 81 */
  1068. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1069. .klen = 8,
  1070. .iv = { 0x12, 0x34, 0x56, 0x78, 0x90, 0xab, 0xcd, 0xef },
  1071. .input = { 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74 },
  1072. .ilen = 8,
  1073. .result = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1074. .rlen = 8,
  1075. }, {
  1076. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1077. .klen = 8,
  1078. .iv = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1079. .input = { 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1080. .ilen = 8,
  1081. .result = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1082. .rlen = 8,
  1083. }, {
  1084. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1085. .klen = 8,
  1086. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1087. .input = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1088. .ilen = 8,
  1089. .result = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1090. .rlen = 8,
  1091. }, { /* Copy of openssl vector for chunk testing */
  1092. /* From OpenSSL */
  1093. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef},
  1094. .klen = 8,
  1095. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1096. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1097. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1098. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1099. .ilen = 24,
  1100. .result = { 0xcc, 0xd1, 0x73, 0xff, 0xab, 0x20, 0x39, 0xf4,
  1101. 0xac, 0xd8, 0xae, 0xfd, 0xdf, 0xd8, 0xa1, 0xeb,
  1102. 0x46, 0x8e, 0x91, 0x15, 0x78, 0x88, 0xba, 0x68 },
  1103. .rlen = 24,
  1104. .np = 2,
  1105. .tap = { 13, 11 }
  1106. },
  1107. };
  1108. static struct cipher_testvec des_cbc_dec_tv_template[] = {
  1109. { /* FIPS Pub 81 */
  1110. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1111. .klen = 8,
  1112. .iv = { 0x12, 0x34, 0x56, 0x78, 0x90, 0xab, 0xcd, 0xef },
  1113. .input = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1114. .ilen = 8,
  1115. .result = { 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74 },
  1116. .rlen = 8,
  1117. }, {
  1118. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1119. .klen = 8,
  1120. .iv = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1121. .input = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1122. .ilen = 8,
  1123. .result = { 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1124. .rlen = 8,
  1125. }, {
  1126. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1127. .klen = 8,
  1128. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1129. .input = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1130. .ilen = 8,
  1131. .result = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1132. .rlen = 8,
  1133. }, { /* Copy of above, for chunk testing */
  1134. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1135. .klen = 8,
  1136. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1137. .input = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1138. .ilen = 8,
  1139. .result = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1140. .rlen = 8,
  1141. .np = 2,
  1142. .tap = { 4, 4 }
  1143. },
  1144. };
  1145. /*
  1146. * We really need some more test vectors, especially for DES3 CBC.
  1147. */
  1148. static struct cipher_testvec des3_ede_enc_tv_template[] = {
  1149. { /* These are from openssl */
  1150. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1151. 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
  1152. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1153. .klen = 24,
  1154. .input = { 0x73, 0x6f, 0x6d, 0x65, 0x64, 0x61, 0x74, 0x61 },
  1155. .ilen = 8,
  1156. .result = { 0x18, 0xd7, 0x48, 0xe5, 0x63, 0x62, 0x05, 0x72 },
  1157. .rlen = 8,
  1158. }, {
  1159. .key = { 0x03, 0x52, 0x02, 0x07, 0x67, 0x20, 0x82, 0x17,
  1160. 0x86, 0x02, 0x87, 0x66, 0x59, 0x08, 0x21, 0x98,
  1161. 0x64, 0x05, 0x6a, 0xbd, 0xfe, 0xa9, 0x34, 0x57 },
  1162. .klen = 24,
  1163. .input = { 0x73, 0x71, 0x75, 0x69, 0x67, 0x67, 0x6c, 0x65 },
  1164. .ilen = 8,
  1165. .result = { 0xc0, 0x7d, 0x2a, 0x0f, 0xa5, 0x66, 0xfa, 0x30 },
  1166. .rlen = 8,
  1167. }, {
  1168. .key = { 0x10, 0x46, 0x10, 0x34, 0x89, 0x98, 0x80, 0x20,
  1169. 0x91, 0x07, 0xd0, 0x15, 0x89, 0x19, 0x01, 0x01,
  1170. 0x19, 0x07, 0x92, 0x10, 0x98, 0x1a, 0x01, 0x01 },
  1171. .klen = 24,
  1172. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1173. .ilen = 8,
  1174. .result = { 0xe1, 0xef, 0x62, 0xc3, 0x32, 0xfe, 0x82, 0x5b },
  1175. .rlen = 8,
  1176. },
  1177. };
  1178. static struct cipher_testvec des3_ede_dec_tv_template[] = {
  1179. { /* These are from openssl */
  1180. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1181. 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
  1182. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1183. .klen = 24,
  1184. .input = { 0x18, 0xd7, 0x48, 0xe5, 0x63, 0x62, 0x05, 0x72 },
  1185. .ilen = 8,
  1186. .result = { 0x73, 0x6f, 0x6d, 0x65, 0x64, 0x61, 0x74, 0x61 },
  1187. .rlen = 8,
  1188. }, {
  1189. .key = { 0x03, 0x52, 0x02, 0x07, 0x67, 0x20, 0x82, 0x17,
  1190. 0x86, 0x02, 0x87, 0x66, 0x59, 0x08, 0x21, 0x98,
  1191. 0x64, 0x05, 0x6a, 0xbd, 0xfe, 0xa9, 0x34, 0x57 },
  1192. .klen = 24,
  1193. .input = { 0xc0, 0x7d, 0x2a, 0x0f, 0xa5, 0x66, 0xfa, 0x30 },
  1194. .ilen = 8,
  1195. .result = { 0x73, 0x71, 0x75, 0x69, 0x67, 0x67, 0x6c, 0x65 },
  1196. .rlen = 8,
  1197. }, {
  1198. .key = { 0x10, 0x46, 0x10, 0x34, 0x89, 0x98, 0x80, 0x20,
  1199. 0x91, 0x07, 0xd0, 0x15, 0x89, 0x19, 0x01, 0x01,
  1200. 0x19, 0x07, 0x92, 0x10, 0x98, 0x1a, 0x01, 0x01 },
  1201. .klen = 24,
  1202. .input = { 0xe1, 0xef, 0x62, 0xc3, 0x32, 0xfe, 0x82, 0x5b },
  1203. .ilen = 8,
  1204. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1205. .rlen = 8,
  1206. },
  1207. };
  1208. /*
  1209. * Blowfish test vectors.
  1210. */
  1211. #define BF_ENC_TEST_VECTORS 6
  1212. #define BF_DEC_TEST_VECTORS 6
  1213. #define BF_CBC_ENC_TEST_VECTORS 1
  1214. #define BF_CBC_DEC_TEST_VECTORS 1
  1215. static struct cipher_testvec bf_enc_tv_template[] = {
  1216. { /* DES test vectors from OpenSSL */
  1217. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, },
  1218. .klen = 8,
  1219. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1220. .ilen = 8,
  1221. .result = { 0x4e, 0xf9, 0x97, 0x45, 0x61, 0x98, 0xdd, 0x78 },
  1222. .rlen = 8,
  1223. }, {
  1224. .key = { 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e },
  1225. .klen = 8,
  1226. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1227. .ilen = 8,
  1228. .result = { 0xa7, 0x90, 0x79, 0x51, 0x08, 0xea, 0x3c, 0xae },
  1229. .rlen = 8,
  1230. }, {
  1231. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1232. .klen = 8,
  1233. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1234. .ilen = 8,
  1235. .result = { 0xe8, 0x7a, 0x24, 0x4e, 0x2c, 0xc8, 0x5e, 0x82 },
  1236. .rlen = 8,
  1237. }, { /* Vary the keylength... */
  1238. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1239. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f },
  1240. .klen = 16,
  1241. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1242. .ilen = 8,
  1243. .result = { 0x93, 0x14, 0x28, 0x87, 0xee, 0x3b, 0xe1, 0x5c },
  1244. .rlen = 8,
  1245. }, {
  1246. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1247. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1248. 0x00, 0x11, 0x22, 0x33, 0x44 },
  1249. .klen = 21,
  1250. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1251. .ilen = 8,
  1252. .result = { 0xe6, 0xf5, 0x1e, 0xd7, 0x9b, 0x9d, 0xb2, 0x1f },
  1253. .rlen = 8,
  1254. }, { /* Generated with bf488 */
  1255. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1256. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1257. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1258. 0x04, 0x68, 0x91, 0x04, 0xc2, 0xfd, 0x3b, 0x2f,
  1259. 0x58, 0x40, 0x23, 0x64, 0x1a, 0xba, 0x61, 0x76,
  1260. 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e,
  1261. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  1262. .klen = 56,
  1263. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1264. .ilen = 8,
  1265. .result = { 0xc0, 0x45, 0x04, 0x01, 0x2e, 0x4e, 0x1f, 0x53 },
  1266. .rlen = 8,
  1267. },
  1268. };
  1269. static struct cipher_testvec bf_dec_tv_template[] = {
  1270. { /* DES test vectors from OpenSSL */
  1271. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1272. .klen = 8,
  1273. .input = { 0x4e, 0xf9, 0x97, 0x45, 0x61, 0x98, 0xdd, 0x78 },
  1274. .ilen = 8,
  1275. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1276. .rlen = 8,
  1277. }, {
  1278. .key = { 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e },
  1279. .klen = 8,
  1280. .input = { 0xa7, 0x90, 0x79, 0x51, 0x08, 0xea, 0x3c, 0xae },
  1281. .ilen = 8,
  1282. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1283. .rlen = 8,
  1284. }, {
  1285. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1286. .klen = 8,
  1287. .input = { 0xe8, 0x7a, 0x24, 0x4e, 0x2c, 0xc8, 0x5e, 0x82 },
  1288. .ilen = 8,
  1289. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1290. .rlen = 8,
  1291. }, { /* Vary the keylength... */
  1292. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1293. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f },
  1294. .klen = 16,
  1295. .input = { 0x93, 0x14, 0x28, 0x87, 0xee, 0x3b, 0xe1, 0x5c },
  1296. .ilen = 8,
  1297. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1298. .rlen = 8,
  1299. }, {
  1300. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1301. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1302. 0x00, 0x11, 0x22, 0x33, 0x44 },
  1303. .klen = 21,
  1304. .input = { 0xe6, 0xf5, 0x1e, 0xd7, 0x9b, 0x9d, 0xb2, 0x1f },
  1305. .ilen = 8,
  1306. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1307. .rlen = 8,
  1308. }, { /* Generated with bf488, using OpenSSL, Libgcrypt and Nettle */
  1309. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1310. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1311. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1312. 0x04, 0x68, 0x91, 0x04, 0xc2, 0xfd, 0x3b, 0x2f,
  1313. 0x58, 0x40, 0x23, 0x64, 0x1a, 0xba, 0x61, 0x76,
  1314. 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e,
  1315. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  1316. .klen = 56,
  1317. .input = { 0xc0, 0x45, 0x04, 0x01, 0x2e, 0x4e, 0x1f, 0x53 },
  1318. .ilen = 8,
  1319. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1320. .rlen = 8,
  1321. },
  1322. };
  1323. static struct cipher_testvec bf_cbc_enc_tv_template[] = {
  1324. { /* From OpenSSL */
  1325. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1326. 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1327. .klen = 16,
  1328. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1329. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1330. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1331. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20,
  1332. 0x66, 0x6f, 0x72, 0x20, 0x00, 0x00, 0x00, 0x00 },
  1333. .ilen = 32,
  1334. .result = { 0x6b, 0x77, 0xb4, 0xd6, 0x30, 0x06, 0xde, 0xe6,
  1335. 0x05, 0xb1, 0x56, 0xe2, 0x74, 0x03, 0x97, 0x93,
  1336. 0x58, 0xde, 0xb9, 0xe7, 0x15, 0x46, 0x16, 0xd9,
  1337. 0x59, 0xf1, 0x65, 0x2b, 0xd5, 0xff, 0x92, 0xcc },
  1338. .rlen = 32,
  1339. },
  1340. };
  1341. static struct cipher_testvec bf_cbc_dec_tv_template[] = {
  1342. { /* From OpenSSL */
  1343. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1344. 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1345. .klen = 16,
  1346. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1347. .input = { 0x6b, 0x77, 0xb4, 0xd6, 0x30, 0x06, 0xde, 0xe6,
  1348. 0x05, 0xb1, 0x56, 0xe2, 0x74, 0x03, 0x97, 0x93,
  1349. 0x58, 0xde, 0xb9, 0xe7, 0x15, 0x46, 0x16, 0xd9,
  1350. 0x59, 0xf1, 0x65, 0x2b, 0xd5, 0xff, 0x92, 0xcc },
  1351. .ilen = 32,
  1352. .result = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1353. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1354. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20,
  1355. 0x66, 0x6f, 0x72, 0x20, 0x00, 0x00, 0x00, 0x00 },
  1356. .rlen = 32,
  1357. },
  1358. };
  1359. /*
  1360. * Twofish test vectors.
  1361. */
  1362. #define TF_ENC_TEST_VECTORS 3
  1363. #define TF_DEC_TEST_VECTORS 3
  1364. #define TF_CBC_ENC_TEST_VECTORS 4
  1365. #define TF_CBC_DEC_TEST_VECTORS 4
  1366. static struct cipher_testvec tf_enc_tv_template[] = {
  1367. {
  1368. .key = { [0 ... 15] = 0x00 },
  1369. .klen = 16,
  1370. .input = { [0 ... 15] = 0x00 },
  1371. .ilen = 16,
  1372. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1373. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1374. .rlen = 16,
  1375. }, {
  1376. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1377. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1378. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  1379. .klen = 24,
  1380. .input = { [0 ... 15] = 0x00 },
  1381. .ilen = 16,
  1382. .result = { 0xcf, 0xd1, 0xd2, 0xe5, 0xa9, 0xbe, 0x9c, 0xdf,
  1383. 0x50, 0x1f, 0x13, 0xb8, 0x92, 0xbd, 0x22, 0x48 },
  1384. .rlen = 16,
  1385. }, {
  1386. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1387. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1388. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1389. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1390. .klen = 32,
  1391. .input = { [0 ... 15] = 0x00 },
  1392. .ilen = 16,
  1393. .result = { 0x37, 0x52, 0x7b, 0xe0, 0x05, 0x23, 0x34, 0xb8,
  1394. 0x9f, 0x0c, 0xfc, 0xca, 0xe8, 0x7c, 0xfa, 0x20 },
  1395. .rlen = 16,
  1396. },
  1397. };
  1398. static struct cipher_testvec tf_dec_tv_template[] = {
  1399. {
  1400. .key = { [0 ... 15] = 0x00 },
  1401. .klen = 16,
  1402. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1403. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1404. .ilen = 16,
  1405. .result = { [0 ... 15] = 0x00 },
  1406. .rlen = 16,
  1407. }, {
  1408. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1409. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1410. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  1411. .klen = 24,
  1412. .input = { 0xcf, 0xd1, 0xd2, 0xe5, 0xa9, 0xbe, 0x9c, 0xdf,
  1413. 0x50, 0x1f, 0x13, 0xb8, 0x92, 0xbd, 0x22, 0x48 },
  1414. .ilen = 16,
  1415. .result = { [0 ... 15] = 0x00 },
  1416. .rlen = 16,
  1417. }, {
  1418. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1419. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1420. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1421. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1422. .klen = 32,
  1423. .input = { 0x37, 0x52, 0x7b, 0xe0, 0x05, 0x23, 0x34, 0xb8,
  1424. 0x9f, 0x0c, 0xfc, 0xca, 0xe8, 0x7c, 0xfa, 0x20 },
  1425. .ilen = 16,
  1426. .result = { [0 ... 15] = 0x00 },
  1427. .rlen = 16,
  1428. },
  1429. };
  1430. static struct cipher_testvec tf_cbc_enc_tv_template[] = {
  1431. { /* Generated with Nettle */
  1432. .key = { [0 ... 15] = 0x00 },
  1433. .klen = 16,
  1434. .iv = { [0 ... 15] = 0x00 },
  1435. .input = { [0 ... 15] = 0x00 },
  1436. .ilen = 16,
  1437. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1438. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1439. .rlen = 16,
  1440. }, {
  1441. .key = { [0 ... 15] = 0x00 },
  1442. .klen = 16,
  1443. .iv = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1444. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1445. .input = { [0 ... 15] = 0x00 },
  1446. .ilen = 16,
  1447. .result = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1448. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1449. .rlen = 16,
  1450. }, {
  1451. .key = { [0 ... 15] = 0x00 },
  1452. .klen = 16,
  1453. .iv = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1454. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1455. .input = { [0 ... 15] = 0x00 },
  1456. .ilen = 16,
  1457. .result = { 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1458. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1459. .rlen = 16,
  1460. }, {
  1461. .key = { [0 ... 15] = 0x00 },
  1462. .klen = 16,
  1463. .iv = { [0 ... 15] = 0x00 },
  1464. .input = { [0 ... 47] = 0x00 },
  1465. .ilen = 48,
  1466. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1467. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a,
  1468. 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1469. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19,
  1470. 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1471. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1472. .rlen = 48,
  1473. },
  1474. };
  1475. static struct cipher_testvec tf_cbc_dec_tv_template[] = {
  1476. { /* Reverse of the first four above */
  1477. .key = { [0 ... 15] = 0x00 },
  1478. .klen = 16,
  1479. .iv = { [0 ... 15] = 0x00 },
  1480. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1481. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1482. .ilen = 16,
  1483. .result = { [0 ... 15] = 0x00 },
  1484. .rlen = 16,
  1485. }, {
  1486. .key = { [0 ... 15] = 0x00 },
  1487. .klen = 16,
  1488. .iv = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1489. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1490. .input = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1491. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1492. .ilen = 16,
  1493. .result = { [0 ... 15] = 0x00 },
  1494. .rlen = 16,
  1495. }, {
  1496. .key = { [0 ... 15] = 0x00 },
  1497. .klen = 16,
  1498. .iv = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1499. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1500. .input = { 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1501. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1502. .ilen = 16,
  1503. .result = { [0 ... 15] = 0x00 },
  1504. .rlen = 16,
  1505. }, {
  1506. .key = { [0 ... 15] = 0x00 },
  1507. .klen = 16,
  1508. .iv = { [0 ... 15] = 0x00 },
  1509. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1510. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a,
  1511. 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1512. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19,
  1513. 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1514. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1515. .ilen = 48,
  1516. .result = { [0 ... 47] = 0x00 },
  1517. .rlen = 48,
  1518. },
  1519. };
  1520. /*
  1521. * Serpent test vectors. These are backwards because Serpent writes
  1522. * octet sequences in right-to-left mode.
  1523. */
  1524. #define SERPENT_ENC_TEST_VECTORS 4
  1525. #define SERPENT_DEC_TEST_VECTORS 4
  1526. #define TNEPRES_ENC_TEST_VECTORS 4
  1527. #define TNEPRES_DEC_TEST_VECTORS 4
  1528. static struct cipher_testvec serpent_enc_tv_template[] = {
  1529. {
  1530. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1531. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1532. .ilen = 16,
  1533. .result = { 0x12, 0x07, 0xfc, 0xce, 0x9b, 0xd0, 0xd6, 0x47,
  1534. 0x6a, 0xe9, 0x8f, 0xbe, 0xd1, 0x43, 0xa0, 0xe2 },
  1535. .rlen = 16,
  1536. }, {
  1537. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1538. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1539. .klen = 16,
  1540. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1541. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1542. .ilen = 16,
  1543. .result = { 0x4c, 0x7d, 0x8a, 0x32, 0x80, 0x72, 0xa2, 0x2c,
  1544. 0x82, 0x3e, 0x4a, 0x1f, 0x3a, 0xcd, 0xa1, 0x6d },
  1545. .rlen = 16,
  1546. }, {
  1547. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1548. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1549. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1550. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1551. .klen = 32,
  1552. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1553. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1554. .ilen = 16,
  1555. .result = { 0xde, 0x26, 0x9f, 0xf8, 0x33, 0xe4, 0x32, 0xb8,
  1556. 0x5b, 0x2e, 0x88, 0xd2, 0x70, 0x1c, 0xe7, 0x5c },
  1557. .rlen = 16,
  1558. }, {
  1559. .key = { [15] = 0x80 },
  1560. .klen = 16,
  1561. .input = { [0 ... 15] = 0x00 },
  1562. .ilen = 16,
  1563. .result = { 0xdd, 0xd2, 0x6b, 0x98, 0xa5, 0xff, 0xd8, 0x2c,
  1564. 0x05, 0x34, 0x5a, 0x9d, 0xad, 0xbf, 0xaf, 0x49},
  1565. .rlen = 16,
  1566. },
  1567. };
  1568. static struct cipher_testvec tnepres_enc_tv_template[] = {
  1569. { /* KeySize=128, PT=0, I=1 */
  1570. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1571. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1572. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1573. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1574. .klen = 16,
  1575. .ilen = 16,
  1576. .result = { 0x49, 0xaf, 0xbf, 0xad, 0x9d, 0x5a, 0x34, 0x05,
  1577. 0x2c, 0xd8, 0xff, 0xa5, 0x98, 0x6b, 0xd2, 0xdd },
  1578. .rlen = 16,
  1579. }, { /* KeySize=192, PT=0, I=1 */
  1580. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1581. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1582. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1583. .klen = 24,
  1584. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1585. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1586. .ilen = 16,
  1587. .result = { 0xe7, 0x8e, 0x54, 0x02, 0xc7, 0x19, 0x55, 0x68,
  1588. 0xac, 0x36, 0x78, 0xf7, 0xa3, 0xf6, 0x0c, 0x66 },
  1589. .rlen = 16,
  1590. }, { /* KeySize=256, PT=0, I=1 */
  1591. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1592. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1593. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1594. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1595. .klen = 32,
  1596. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1597. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1598. .ilen = 16,
  1599. .result = { 0xab, 0xed, 0x96, 0xe7, 0x66, 0xbf, 0x28, 0xcb,
  1600. 0xc0, 0xeb, 0xd2, 0x1a, 0x82, 0xef, 0x08, 0x19 },
  1601. .rlen = 16,
  1602. }, { /* KeySize=256, I=257 */
  1603. .key = { 0x1f, 0x1e, 0x1d, 0x1c, 0x1b, 0x1a, 0x19, 0x18,
  1604. 0x17, 0x16, 0x15, 0x14, 0x13, 0x12, 0x11, 0x10,
  1605. 0x0f, 0x0e, 0x0d, 0x0c, 0x0b, 0x0a, 0x09, 0x08,
  1606. 0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00 },
  1607. .klen = 32,
  1608. .input = { 0x0f, 0x0e, 0x0d, 0x0c, 0x0b, 0x0a, 0x09, 0x08,
  1609. 0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00 },
  1610. .ilen = 16,
  1611. .result = { 0x5c, 0xe7, 0x1c, 0x70, 0xd2, 0x88, 0x2e, 0x5b,
  1612. 0xb8, 0x32, 0xe4, 0x33, 0xf8, 0x9f, 0x26, 0xde },
  1613. .rlen = 16,
  1614. },
  1615. };
  1616. static struct cipher_testvec serpent_dec_tv_template[] = {
  1617. {
  1618. .input = { 0x12, 0x07, 0xfc, 0xce, 0x9b, 0xd0, 0xd6, 0x47,
  1619. 0x6a, 0xe9, 0x8f, 0xbe, 0xd1, 0x43, 0xa0, 0xe2 },
  1620. .ilen = 16,
  1621. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1622. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1623. .rlen = 16,
  1624. }, {
  1625. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1626. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1627. .klen = 16,
  1628. .input = { 0x4c, 0x7d, 0x8a, 0x32, 0x80, 0x72, 0xa2, 0x2c,
  1629. 0x82, 0x3e, 0x4a, 0x1f, 0x3a, 0xcd, 0xa1, 0x6d },
  1630. .ilen = 16,
  1631. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1632. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1633. .rlen = 16,
  1634. }, {
  1635. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1636. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1637. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1638. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1639. .klen = 32,
  1640. .input = { 0xde, 0x26, 0x9f, 0xf8, 0x33, 0xe4, 0x32, 0xb8,
  1641. 0x5b, 0x2e, 0x88, 0xd2, 0x70, 0x1c, 0xe7, 0x5c },
  1642. .ilen = 16,
  1643. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1644. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1645. .rlen = 16,
  1646. }, {
  1647. .key = { [15] = 0x80 },
  1648. .klen = 16,
  1649. .input = { 0xdd, 0xd2, 0x6b, 0x98, 0xa5, 0xff, 0xd8, 0x2c,
  1650. 0x05, 0x34, 0x5a, 0x9d, 0xad, 0xbf, 0xaf, 0x49},
  1651. .ilen = 16,
  1652. .result = { [0 ... 15] = 0x00 },
  1653. .rlen = 16,
  1654. },
  1655. };
  1656. static struct cipher_testvec tnepres_dec_tv_template[] = {
  1657. {
  1658. .input = { 0x41, 0xcc, 0x6b, 0x31, 0x59, 0x31, 0x45, 0x97,
  1659. 0x6d, 0x6f, 0xbb, 0x38, 0x4b, 0x37, 0x21, 0x28 },
  1660. .ilen = 16,
  1661. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1662. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1663. .rlen = 16,
  1664. }, {
  1665. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1666. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1667. .klen = 16,
  1668. .input = { 0xea, 0xf4, 0xd7, 0xfc, 0xd8, 0x01, 0x34, 0x47,
  1669. 0x81, 0x45, 0x0b, 0xfa, 0x0c, 0xd6, 0xad, 0x6e },
  1670. .ilen = 16,
  1671. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1672. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1673. .rlen = 16,
  1674. }, {
  1675. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1676. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1677. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1678. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1679. .klen = 32,
  1680. .input = { 0x64, 0xa9, 0x1a, 0x37, 0xed, 0x9f, 0xe7, 0x49,
  1681. 0xa8, 0x4e, 0x76, 0xd6, 0xf5, 0x0d, 0x78, 0xee },
  1682. .ilen = 16,
  1683. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1684. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1685. .rlen = 16,
  1686. }, { /* KeySize=128, I=121 */
  1687. .key = { [15] = 0x80 },
  1688. .klen = 16,
  1689. .input = { 0x3d, 0xda, 0xbf, 0xc0, 0x06, 0xda, 0xab, 0x06,
  1690. 0x46, 0x2a, 0xf4, 0xef, 0x81, 0x54, 0x4e, 0x26 },
  1691. .ilen = 16,
  1692. .result = { [0 ... 15] = 0x00 },
  1693. .rlen = 16,
  1694. },
  1695. };
  1696. /* Cast6 test vectors from RFC 2612 */
  1697. #define CAST6_ENC_TEST_VECTORS 3
  1698. #define CAST6_DEC_TEST_VECTORS 3
  1699. static struct cipher_testvec cast6_enc_tv_template[] = {
  1700. {
  1701. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  1702. 0x0a, 0xf7, 0x56, 0x47, 0xf2, 0x9f, 0x61, 0x5d },
  1703. .klen = 16,
  1704. .input = { [0 ... 15] = 0x00 },
  1705. .ilen = 16,
  1706. .result = { 0xc8, 0x42, 0xa0, 0x89, 0x72, 0xb4, 0x3d, 0x20,
  1707. 0x83, 0x6c, 0x91, 0xd1, 0xb7, 0x53, 0x0f, 0x6b },
  1708. .rlen = 16,
  1709. }, {
  1710. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  1711. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  1712. 0xba, 0xc7, 0x7a, 0x77, 0x17, 0x94, 0x28, 0x63 },
  1713. .klen = 24,
  1714. .input = { [0 ... 15] = 0x00 },
  1715. .ilen = 16,
  1716. .result = { 0x1b, 0x38, 0x6c, 0x02, 0x10, 0xdc, 0xad, 0xcb,
  1717. 0xdd, 0x0e, 0x41, 0xaa, 0x08, 0xa7, 0xa7, 0xe8 },
  1718. .rlen = 16,
  1719. }, {
  1720. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  1721. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  1722. 0x8d, 0x7c, 0x47, 0xce, 0x26, 0x49, 0x08, 0x46,
  1723. 0x1c, 0xc1, 0xb5, 0x13, 0x7a, 0xe6, 0xb6, 0x04 },
  1724. .klen = 32,
  1725. .input = { [0 ... 15] = 0x00 },
  1726. .ilen = 16,
  1727. .result = { 0x4f, 0x6a, 0x20, 0x38, 0x28, 0x68, 0x97, 0xb9,
  1728. 0xc9, 0x87, 0x01, 0x36, 0x55, 0x33, 0x17, 0xfa },
  1729. .rlen = 16,
  1730. },
  1731. };
  1732. static struct cipher_testvec cast6_dec_tv_template[] = {
  1733. {
  1734. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  1735. 0x0a, 0xf7, 0x56, 0x47, 0xf2, 0x9f, 0x61, 0x5d },
  1736. .klen = 16,
  1737. .input = { 0xc8, 0x42, 0xa0, 0x89, 0x72, 0xb4, 0x3d, 0x20,
  1738. 0x83, 0x6c, 0x91, 0xd1, 0xb7, 0x53, 0x0f, 0x6b },
  1739. .ilen = 16,
  1740. .result = { [0 ... 15] = 0x00 },
  1741. .rlen = 16,
  1742. }, {
  1743. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  1744. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  1745. 0xba, 0xc7, 0x7a, 0x77, 0x17, 0x94, 0x28, 0x63 },
  1746. .klen = 24,
  1747. .input = { 0x1b, 0x38, 0x6c, 0x02, 0x10, 0xdc, 0xad, 0xcb,
  1748. 0xdd, 0x0e, 0x41, 0xaa, 0x08, 0xa7, 0xa7, 0xe8 },
  1749. .ilen = 16,
  1750. .result = { [0 ... 15] = 0x00 },
  1751. .rlen = 16,
  1752. }, {
  1753. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  1754. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  1755. 0x8d, 0x7c, 0x47, 0xce, 0x26, 0x49, 0x08, 0x46,
  1756. 0x1c, 0xc1, 0xb5, 0x13, 0x7a, 0xe6, 0xb6, 0x04 },
  1757. .klen = 32,
  1758. .input = { 0x4f, 0x6a, 0x20, 0x38, 0x28, 0x68, 0x97, 0xb9,
  1759. 0xc9, 0x87, 0x01, 0x36, 0x55, 0x33, 0x17, 0xfa },
  1760. .ilen = 16,
  1761. .result = { [0 ... 15] = 0x00 },
  1762. .rlen = 16,
  1763. },
  1764. };
  1765. /*
  1766. * AES test vectors.
  1767. */
  1768. #define AES_ENC_TEST_VECTORS 3
  1769. #define AES_DEC_TEST_VECTORS 3
  1770. #define AES_CBC_ENC_TEST_VECTORS 2
  1771. #define AES_CBC_DEC_TEST_VECTORS 2
  1772. static struct cipher_testvec aes_enc_tv_template[] = {
  1773. { /* From FIPS-197 */
  1774. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1775. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1776. .klen = 16,
  1777. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1778. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1779. .ilen = 16,
  1780. .result = { 0x69, 0xc4, 0xe0, 0xd8, 0x6a, 0x7b, 0x04, 0x30,
  1781. 0xd8, 0xcd, 0xb7, 0x80, 0x70, 0xb4, 0xc5, 0x5a },
  1782. .rlen = 16,
  1783. }, {
  1784. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1785. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1786. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17 },
  1787. .klen = 24,
  1788. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1789. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1790. .ilen = 16,
  1791. .result = { 0xdd, 0xa9, 0x7c, 0xa4, 0x86, 0x4c, 0xdf, 0xe0,
  1792. 0x6e, 0xaf, 0x70, 0xa0, 0xec, 0x0d, 0x71, 0x91 },
  1793. .rlen = 16,
  1794. }, {
  1795. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1796. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1797. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1798. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1799. .klen = 32,
  1800. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1801. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1802. .ilen = 16,
  1803. .result = { 0x8e, 0xa2, 0xb7, 0xca, 0x51, 0x67, 0x45, 0xbf,
  1804. 0xea, 0xfc, 0x49, 0x90, 0x4b, 0x49, 0x60, 0x89 },
  1805. .rlen = 16,
  1806. },
  1807. };
  1808. static struct cipher_testvec aes_dec_tv_template[] = {
  1809. { /* From FIPS-197 */
  1810. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1811. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1812. .klen = 16,
  1813. .input = { 0x69, 0xc4, 0xe0, 0xd8, 0x6a, 0x7b, 0x04, 0x30,
  1814. 0xd8, 0xcd, 0xb7, 0x80, 0x70, 0xb4, 0xc5, 0x5a },
  1815. .ilen = 16,
  1816. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1817. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1818. .rlen = 16,
  1819. }, {
  1820. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1821. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1822. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17 },
  1823. .klen = 24,
  1824. .input = { 0xdd, 0xa9, 0x7c, 0xa4, 0x86, 0x4c, 0xdf, 0xe0,
  1825. 0x6e, 0xaf, 0x70, 0xa0, 0xec, 0x0d, 0x71, 0x91 },
  1826. .ilen = 16,
  1827. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1828. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1829. .rlen = 16,
  1830. }, {
  1831. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1832. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1833. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1834. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1835. .klen = 32,
  1836. .input = { 0x8e, 0xa2, 0xb7, 0xca, 0x51, 0x67, 0x45, 0xbf,
  1837. 0xea, 0xfc, 0x49, 0x90, 0x4b, 0x49, 0x60, 0x89 },
  1838. .ilen = 16,
  1839. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1840. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1841. .rlen = 16,
  1842. },
  1843. };
  1844. static struct cipher_testvec aes_cbc_enc_tv_template[] = {
  1845. { /* From RFC 3602 */
  1846. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  1847. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  1848. .klen = 16,
  1849. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  1850. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  1851. .input = { "Single block msg" },
  1852. .ilen = 16,
  1853. .result = { 0xe3, 0x53, 0x77, 0x9c, 0x10, 0x79, 0xae, 0xb8,
  1854. 0x27, 0x08, 0x94, 0x2d, 0xbe, 0x77, 0x18, 0x1a },
  1855. .rlen = 16,
  1856. }, {
  1857. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  1858. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  1859. .klen = 16,
  1860. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  1861. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  1862. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1863. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1864. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1865. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1866. .ilen = 32,
  1867. .result = { 0xd2, 0x96, 0xcd, 0x94, 0xc2, 0xcc, 0xcf, 0x8a,
  1868. 0x3a, 0x86, 0x30, 0x28, 0xb5, 0xe1, 0xdc, 0x0a,
  1869. 0x75, 0x86, 0x60, 0x2d, 0x25, 0x3c, 0xff, 0xf9,
  1870. 0x1b, 0x82, 0x66, 0xbe, 0xa6, 0xd6, 0x1a, 0xb1 },
  1871. .rlen = 32,
  1872. },
  1873. };
  1874. static struct cipher_testvec aes_cbc_dec_tv_template[] = {
  1875. { /* From RFC 3602 */
  1876. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  1877. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  1878. .klen = 16,
  1879. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  1880. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  1881. .input = { 0xe3, 0x53, 0x77, 0x9c, 0x10, 0x79, 0xae, 0xb8,
  1882. 0x27, 0x08, 0x94, 0x2d, 0xbe, 0x77, 0x18, 0x1a },
  1883. .ilen = 16,
  1884. .result = { "Single block msg" },
  1885. .rlen = 16,
  1886. }, {
  1887. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  1888. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  1889. .klen = 16,
  1890. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  1891. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  1892. .input = { 0xd2, 0x96, 0xcd, 0x94, 0xc2, 0xcc, 0xcf, 0x8a,
  1893. 0x3a, 0x86, 0x30, 0x28, 0xb5, 0xe1, 0xdc, 0x0a,
  1894. 0x75, 0x86, 0x60, 0x2d, 0x25, 0x3c, 0xff, 0xf9,
  1895. 0x1b, 0x82, 0x66, 0xbe, 0xa6, 0xd6, 0x1a, 0xb1 },
  1896. .ilen = 32,
  1897. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1898. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1899. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1900. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1901. .rlen = 32,
  1902. },
  1903. };
  1904. /* Cast5 test vectors from RFC 2144 */
  1905. #define CAST5_ENC_TEST_VECTORS 3
  1906. #define CAST5_DEC_TEST_VECTORS 3
  1907. static struct cipher_testvec cast5_enc_tv_template[] = {
  1908. {
  1909. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  1910. 0x23, 0x45, 0x67, 0x89, 0x34, 0x56, 0x78, 0x9a },
  1911. .klen = 16,
  1912. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1913. .ilen = 8,
  1914. .result = { 0x23, 0x8b, 0x4f, 0xe5, 0x84, 0x7e, 0x44, 0xb2 },
  1915. .rlen = 8,
  1916. }, {
  1917. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  1918. 0x23, 0x45 },
  1919. .klen = 10,
  1920. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1921. .ilen = 8,
  1922. .result = { 0xeb, 0x6a, 0x71, 0x1a, 0x2c, 0x02, 0x27, 0x1b },
  1923. .rlen = 8,
  1924. }, {
  1925. .key = { 0x01, 0x23, 0x45, 0x67, 0x12 },
  1926. .klen = 5,
  1927. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1928. .ilen = 8,
  1929. .result = { 0x7a, 0xc8, 0x16, 0xd1, 0x6e, 0x9b, 0x30, 0x2e },
  1930. .rlen = 8,
  1931. },
  1932. };
  1933. static struct cipher_testvec cast5_dec_tv_template[] = {
  1934. {
  1935. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  1936. 0x23, 0x45, 0x67, 0x89, 0x34, 0x56, 0x78, 0x9a },
  1937. .klen = 16,
  1938. .input = { 0x23, 0x8b, 0x4f, 0xe5, 0x84, 0x7e, 0x44, 0xb2 },
  1939. .ilen = 8,
  1940. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1941. .rlen = 8,
  1942. }, {
  1943. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  1944. 0x23, 0x45 },
  1945. .klen = 10,
  1946. .input = { 0xeb, 0x6a, 0x71, 0x1a, 0x2c, 0x02, 0x27, 0x1b },
  1947. .ilen = 8,
  1948. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1949. .rlen = 8,
  1950. }, {
  1951. .key = { 0x01, 0x23, 0x45, 0x67, 0x12 },
  1952. .klen = 5,
  1953. .input = { 0x7a, 0xc8, 0x16, 0xd1, 0x6e, 0x9b, 0x30, 0x2e },
  1954. .ilen = 8,
  1955. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1956. .rlen = 8,
  1957. },
  1958. };
  1959. /*
  1960. * ARC4 test vectors from OpenSSL
  1961. */
  1962. #define ARC4_ENC_TEST_VECTORS 7
  1963. #define ARC4_DEC_TEST_VECTORS 7
  1964. static struct cipher_testvec arc4_enc_tv_template[] = {
  1965. {
  1966. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1967. .klen = 8,
  1968. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1969. .ilen = 8,
  1970. .result = { 0x75, 0xb7, 0x87, 0x80, 0x99, 0xe0, 0xc5, 0x96 },
  1971. .rlen = 8,
  1972. }, {
  1973. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1974. .klen = 8,
  1975. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1976. .ilen = 8,
  1977. .result = { 0x74, 0x94, 0xc2, 0xe7, 0x10, 0x4b, 0x08, 0x79 },
  1978. .rlen = 8,
  1979. }, {
  1980. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1981. .klen = 8,
  1982. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1983. .ilen = 8,
  1984. .result = { 0xde, 0x18, 0x89, 0x41, 0xa3, 0x37, 0x5d, 0x3a },
  1985. .rlen = 8,
  1986. }, {
  1987. .key = { 0xef, 0x01, 0x23, 0x45},
  1988. .klen = 4,
  1989. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1990. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1991. 0x00, 0x00, 0x00, 0x00 },
  1992. .ilen = 20,
  1993. .result = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  1994. 0xbd, 0x61, 0x5a, 0x11, 0x62, 0xe1, 0xc7, 0xba,
  1995. 0x36, 0xb6, 0x78, 0x58 },
  1996. .rlen = 20,
  1997. }, {
  1998. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1999. .klen = 8,
  2000. .input = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  2001. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  2002. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  2003. 0x12, 0x34, 0x56, 0x78 },
  2004. .ilen = 28,
  2005. .result = { 0x66, 0xa0, 0x94, 0x9f, 0x8a, 0xf7, 0xd6, 0x89,
  2006. 0x1f, 0x7f, 0x83, 0x2b, 0xa8, 0x33, 0xc0, 0x0c,
  2007. 0x89, 0x2e, 0xbe, 0x30, 0x14, 0x3c, 0xe2, 0x87,
  2008. 0x40, 0x01, 0x1e, 0xcf },
  2009. .rlen = 28,
  2010. }, {
  2011. .key = { 0xef, 0x01, 0x23, 0x45 },
  2012. .klen = 4,
  2013. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2014. 0x00, 0x00 },
  2015. .ilen = 10,
  2016. .result = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  2017. 0xbd, 0x61 },
  2018. .rlen = 10,
  2019. }, {
  2020. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF,
  2021. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2022. .klen = 16,
  2023. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
  2024. .ilen = 8,
  2025. .result = { 0x69, 0x72, 0x36, 0x59, 0x1B, 0x52, 0x42, 0xB1 },
  2026. .rlen = 8,
  2027. },
  2028. };
  2029. static struct cipher_testvec arc4_dec_tv_template[] = {
  2030. {
  2031. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  2032. .klen = 8,
  2033. .input = { 0x75, 0xb7, 0x87, 0x80, 0x99, 0xe0, 0xc5, 0x96 },
  2034. .ilen = 8,
  2035. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  2036. .rlen = 8,
  2037. }, {
  2038. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  2039. .klen = 8,
  2040. .input = { 0x74, 0x94, 0xc2, 0xe7, 0x10, 0x4b, 0x08, 0x79 },
  2041. .ilen = 8,
  2042. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2043. .rlen = 8,
  2044. }, {
  2045. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2046. .klen = 8,
  2047. .input = { 0xde, 0x18, 0x89, 0x41, 0xa3, 0x37, 0x5d, 0x3a },
  2048. .ilen = 8,
  2049. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2050. .rlen = 8,
  2051. }, {
  2052. .key = { 0xef, 0x01, 0x23, 0x45},
  2053. .klen = 4,
  2054. .input = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  2055. 0xbd, 0x61, 0x5a, 0x11, 0x62, 0xe1, 0xc7, 0xba,
  2056. 0x36, 0xb6, 0x78, 0x58 },
  2057. .ilen = 20,
  2058. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2059. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2060. 0x00, 0x00, 0x00, 0x00 },
  2061. .rlen = 20,
  2062. }, {
  2063. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  2064. .klen = 8,
  2065. .input = { 0x66, 0xa0, 0x94, 0x9f, 0x8a, 0xf7, 0xd6, 0x89,
  2066. 0x1f, 0x7f, 0x83, 0x2b, 0xa8, 0x33, 0xc0, 0x0c,
  2067. 0x89, 0x2e, 0xbe, 0x30, 0x14, 0x3c, 0xe2, 0x87,
  2068. 0x40, 0x01, 0x1e, 0xcf },
  2069. .ilen = 28,
  2070. .result = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  2071. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  2072. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  2073. 0x12, 0x34, 0x56, 0x78 },
  2074. .rlen = 28,
  2075. }, {
  2076. .key = { 0xef, 0x01, 0x23, 0x45 },
  2077. .klen = 4,
  2078. .input = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  2079. 0xbd, 0x61 },
  2080. .ilen = 10,
  2081. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2082. 0x00, 0x00 },
  2083. .rlen = 10,
  2084. }, {
  2085. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF,
  2086. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2087. .klen = 16,
  2088. .input = { 0x69, 0x72, 0x36, 0x59, 0x1B, 0x52, 0x42, 0xB1 },
  2089. .ilen = 8,
  2090. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
  2091. .rlen = 8,
  2092. },
  2093. };
  2094. /*
  2095. * TEA test vectors
  2096. */
  2097. #define TEA_ENC_TEST_VECTORS 4
  2098. #define TEA_DEC_TEST_VECTORS 4
  2099. static struct cipher_testvec tea_enc_tv_template[] = {
  2100. {
  2101. .key = { [0 ... 15] = 0x00 },
  2102. .klen = 16,
  2103. .input = { [0 ... 8] = 0x00 },
  2104. .ilen = 8,
  2105. .result = { 0x0a, 0x3a, 0xea, 0x41, 0x40, 0xa9, 0xba, 0x94 },
  2106. .rlen = 8,
  2107. }, {
  2108. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  2109. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  2110. .klen = 16,
  2111. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  2112. .ilen = 8,
  2113. .result = { 0x77, 0x5d, 0x2a, 0x6a, 0xf6, 0xce, 0x92, 0x09 },
  2114. .rlen = 8,
  2115. }, {
  2116. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  2117. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  2118. .klen = 16,
  2119. .input = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  2120. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  2121. .ilen = 16,
  2122. .result = { 0xbe, 0x7a, 0xbb, 0x81, 0x95, 0x2d, 0x1f, 0x1e,
  2123. 0xdd, 0x89, 0xa1, 0x25, 0x04, 0x21, 0xdf, 0x95 },
  2124. .rlen = 16,
  2125. }, {
  2126. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  2127. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  2128. .klen = 16,
  2129. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  2130. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  2131. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  2132. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  2133. .ilen = 32,
  2134. .result = { 0xe0, 0x4d, 0x5d, 0x3c, 0xb7, 0x8c, 0x36, 0x47,
  2135. 0x94, 0x18, 0x95, 0x91, 0xa9, 0xfc, 0x49, 0xf8,
  2136. 0x44, 0xd1, 0x2d, 0xc2, 0x99, 0xb8, 0x08, 0x2a,
  2137. 0x07, 0x89, 0x73, 0xc2, 0x45, 0x92, 0xc6, 0x90 },
  2138. .rlen = 32,
  2139. }
  2140. };
  2141. static struct cipher_testvec tea_dec_tv_template[] = {
  2142. {
  2143. .key = { [0 ... 15] = 0x00 },
  2144. .klen = 16,
  2145. .input = { 0x0a, 0x3a, 0xea, 0x41, 0x40, 0xa9, 0xba, 0x94 },
  2146. .ilen = 8,
  2147. .result = { [0 ... 8] = 0x00 },
  2148. .rlen = 8,
  2149. }, {
  2150. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  2151. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  2152. .klen = 16,
  2153. .input = { 0x77, 0x5d, 0x2a, 0x6a, 0xf6, 0xce, 0x92, 0x09 },
  2154. .ilen = 8,
  2155. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  2156. .rlen = 8,
  2157. }, {
  2158. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  2159. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  2160. .klen = 16,
  2161. .input = { 0xbe, 0x7a, 0xbb, 0x81, 0x95, 0x2d, 0x1f, 0x1e,
  2162. 0xdd, 0x89, 0xa1, 0x25, 0x04, 0x21, 0xdf, 0x95 },
  2163. .ilen = 16,
  2164. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  2165. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  2166. .rlen = 16,
  2167. }, {
  2168. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  2169. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  2170. .klen = 16,
  2171. .input = { 0xe0, 0x4d, 0x5d, 0x3c, 0xb7, 0x8c, 0x36, 0x47,
  2172. 0x94, 0x18, 0x95, 0x91, 0xa9, 0xfc, 0x49, 0xf8,
  2173. 0x44, 0xd1, 0x2d, 0xc2, 0x99, 0xb8, 0x08, 0x2a,
  2174. 0x07, 0x89, 0x73, 0xc2, 0x45, 0x92, 0xc6, 0x90 },
  2175. .ilen = 32,
  2176. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  2177. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  2178. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  2179. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  2180. .rlen = 32,
  2181. }
  2182. };
  2183. /*
  2184. * XTEA test vectors
  2185. */
  2186. #define XTEA_ENC_TEST_VECTORS 4
  2187. #define XTEA_DEC_TEST_VECTORS 4
  2188. static struct cipher_testvec xtea_enc_tv_template[] = {
  2189. {
  2190. .key = { [0 ... 15] = 0x00 },
  2191. .klen = 16,
  2192. .input = { [0 ... 8] = 0x00 },
  2193. .ilen = 8,
  2194. .result = { 0xd8, 0xd4, 0xe9, 0xde, 0xd9, 0x1e, 0x13, 0xf7 },
  2195. .rlen = 8,
  2196. }, {
  2197. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  2198. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  2199. .klen = 16,
  2200. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  2201. .ilen = 8,
  2202. .result = { 0x94, 0xeb, 0xc8, 0x96, 0x84, 0x6a, 0x49, 0xa8 },
  2203. .rlen = 8,
  2204. }, {
  2205. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  2206. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  2207. .klen = 16,
  2208. .input = { 0x3e, 0xce, 0xae, 0x22, 0x60, 0x56, 0xa8, 0x9d,
  2209. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  2210. .ilen = 16,
  2211. .result = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  2212. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  2213. .rlen = 16,
  2214. }, {
  2215. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  2216. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  2217. .klen = 16,
  2218. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  2219. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  2220. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  2221. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  2222. .ilen = 32,
  2223. .result = { 0x99, 0x81, 0x9f, 0x5d, 0x6f, 0x4b, 0x31, 0x3a,
  2224. 0x86, 0xff, 0x6f, 0xd0, 0xe3, 0x87, 0x70, 0x07,
  2225. 0x4d, 0xb8, 0xcf, 0xf3, 0x99, 0x50, 0xb3, 0xd4,
  2226. 0x73, 0xa2, 0xfa, 0xc9, 0x16, 0x59, 0x5d, 0x81 },
  2227. .rlen = 32,
  2228. }
  2229. };
  2230. static struct cipher_testvec xtea_dec_tv_template[] = {
  2231. {
  2232. .key = { [0 ... 15] = 0x00 },
  2233. .klen = 16,
  2234. .input = { 0xd8, 0xd4, 0xe9, 0xde, 0xd9, 0x1e, 0x13, 0xf7 },
  2235. .ilen = 8,
  2236. .result = { [0 ... 8] = 0x00 },
  2237. .rlen = 8,
  2238. }, {
  2239. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  2240. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  2241. .klen = 16,
  2242. .input = { 0x94, 0xeb, 0xc8, 0x96, 0x84, 0x6a, 0x49, 0xa8 },
  2243. .ilen = 8,
  2244. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  2245. .rlen = 8,
  2246. }, {
  2247. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  2248. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  2249. .klen = 16,
  2250. .input = { 0x3e, 0xce, 0xae, 0x22, 0x60, 0x56, 0xa8, 0x9d,
  2251. 0x77, 0x4d, 0xd4, 0xb4, 0x87, 0x24, 0xe3, 0x9a },
  2252. .ilen = 16,
  2253. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  2254. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  2255. .rlen = 16,
  2256. }, {
  2257. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  2258. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  2259. .klen = 16,
  2260. .input = { 0x99, 0x81, 0x9f, 0x5d, 0x6f, 0x4b, 0x31, 0x3a,
  2261. 0x86, 0xff, 0x6f, 0xd0, 0xe3, 0x87, 0x70, 0x07,
  2262. 0x4d, 0xb8, 0xcf, 0xf3, 0x99, 0x50, 0xb3, 0xd4,
  2263. 0x73, 0xa2, 0xfa, 0xc9, 0x16, 0x59, 0x5d, 0x81 },
  2264. .ilen = 32,
  2265. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  2266. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  2267. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  2268. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  2269. .rlen = 32,
  2270. }
  2271. };
  2272. /*
  2273. * KHAZAD test vectors.
  2274. */
  2275. #define KHAZAD_ENC_TEST_VECTORS 5
  2276. #define KHAZAD_DEC_TEST_VECTORS 5
  2277. static struct cipher_testvec khazad_enc_tv_template[] = {
  2278. {
  2279. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2280. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2281. .klen = 16,
  2282. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2283. .ilen = 8,
  2284. .result = { 0x49, 0xa4, 0xce, 0x32, 0xac, 0x19, 0x0e, 0x3f },
  2285. .rlen = 8,
  2286. }, {
  2287. .key = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38,
  2288. 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  2289. .klen = 16,
  2290. .input = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  2291. .ilen = 8,
  2292. .result = { 0x7e, 0x82, 0x12, 0xa1, 0Xd9, 0X5b, 0Xe4, 0Xf9 },
  2293. .rlen = 8,
  2294. }, {
  2295. .key = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2,
  2296. 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  2297. .klen = 16,
  2298. .input = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  2299. .ilen = 8,
  2300. .result = { 0Xaa, 0Xbe, 0Xc1, 0X95, 0Xc5, 0X94, 0X1a, 0X9c },
  2301. .rlen = 8,
  2302. }, {
  2303. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  2304. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2305. .klen = 16,
  2306. .input = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2307. .ilen = 8,
  2308. .result = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  2309. .rlen = 8,
  2310. }, {
  2311. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  2312. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2313. .klen = 16,
  2314. .input = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f ,
  2315. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2316. .ilen = 16,
  2317. .result = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 ,
  2318. 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  2319. .rlen = 16,
  2320. },
  2321. };
  2322. static struct cipher_testvec khazad_dec_tv_template[] = {
  2323. {
  2324. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2325. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2326. .klen = 16,
  2327. .input = { 0X49, 0Xa4, 0Xce, 0X32, 0Xac, 0X19, 0X0e, 0X3f },
  2328. .ilen = 8,
  2329. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2330. .rlen = 8,
  2331. }, {
  2332. .key = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38,
  2333. 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  2334. .klen = 16,
  2335. .input = { 0X7e, 0X82, 0X12, 0Xa1, 0Xd9, 0X5b, 0Xe4, 0Xf9 },
  2336. .ilen = 8,
  2337. .result = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  2338. .rlen = 8,
  2339. }, {
  2340. .key = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2,
  2341. 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  2342. .klen = 16,
  2343. .input = { 0Xaa, 0Xbe, 0Xc1, 0X95, 0Xc5, 0X94, 0X1a, 0X9c },
  2344. .ilen = 8,
  2345. .result = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  2346. .rlen = 8,
  2347. }, {
  2348. .key = { 0x2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  2349. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2350. .klen = 16,
  2351. .input = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  2352. .ilen = 8,
  2353. .result = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2354. .rlen = 8,
  2355. }, {
  2356. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  2357. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2358. .klen = 16,
  2359. .input = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 ,
  2360. 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  2361. .ilen = 16,
  2362. .result = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f ,
  2363. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  2364. .rlen = 16,
  2365. },
  2366. };
  2367. /*
  2368. * Anubis test vectors.
  2369. */
  2370. #define ANUBIS_ENC_TEST_VECTORS 5
  2371. #define ANUBIS_DEC_TEST_VECTORS 5
  2372. #define ANUBIS_CBC_ENC_TEST_VECTORS 2
  2373. #define ANUBIS_CBC_DEC_TEST_VECTORS 2
  2374. static struct cipher_testvec anubis_enc_tv_template[] = {
  2375. {
  2376. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2377. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2378. .klen = 16,
  2379. .input = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2380. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2381. .ilen = 16,
  2382. .result = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  2383. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90 },
  2384. .rlen = 16,
  2385. }, {
  2386. .key = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  2387. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  2388. 0x03, 0x03, 0x03, 0x03 },
  2389. .klen = 20,
  2390. .input = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  2391. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03 },
  2392. .ilen = 16,
  2393. .result = { 0xdb, 0xf1, 0x42, 0xf4, 0xd1, 0x8a, 0xc7, 0x49,
  2394. 0x87, 0x41, 0x6f, 0x82, 0x0a, 0x98, 0x64, 0xae },
  2395. .rlen = 16,
  2396. }, {
  2397. .key = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2398. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2399. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2400. 0x24, 0x24, 0x24, 0x24 },
  2401. .klen = 28,
  2402. .input = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2403. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24 },
  2404. .ilen = 16,
  2405. .result = { 0xfd, 0x1b, 0x4a, 0xe3, 0xbf, 0xf0, 0xad, 0x3d,
  2406. 0x06, 0xd3, 0x61, 0x27, 0xfd, 0x13, 0x9e, 0xde },
  2407. .rlen = 16,
  2408. }, {
  2409. .key = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2410. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2411. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2412. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  2413. .klen = 32,
  2414. .input = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2415. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  2416. .ilen = 16,
  2417. .result = { 0x1a, 0x91, 0xfb, 0x2b, 0xb7, 0x78, 0x6b, 0xc4,
  2418. 0x17, 0xd9, 0xff, 0x40, 0x3b, 0x0e, 0xe5, 0xfe },
  2419. .rlen = 16,
  2420. }, {
  2421. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2422. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2423. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2424. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2425. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2426. .klen = 40,
  2427. .input = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2428. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2429. .ilen = 16,
  2430. .result = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  2431. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee },
  2432. .rlen = 16,
  2433. },
  2434. };
  2435. static struct cipher_testvec anubis_dec_tv_template[] = {
  2436. {
  2437. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2438. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2439. .klen = 16,
  2440. .input = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  2441. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90 },
  2442. .ilen = 16,
  2443. .result = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2444. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2445. .rlen = 16,
  2446. }, {
  2447. .key = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  2448. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  2449. 0x03, 0x03, 0x03, 0x03 },
  2450. .klen = 20,
  2451. .input = { 0xdb, 0xf1, 0x42, 0xf4, 0xd1, 0x8a, 0xc7, 0x49,
  2452. 0x87, 0x41, 0x6f, 0x82, 0x0a, 0x98, 0x64, 0xae },
  2453. .ilen = 16,
  2454. .result = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  2455. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03 },
  2456. .rlen = 16,
  2457. }, {
  2458. .key = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2459. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2460. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2461. 0x24, 0x24, 0x24, 0x24 },
  2462. .klen = 28,
  2463. .input = { 0xfd, 0x1b, 0x4a, 0xe3, 0xbf, 0xf0, 0xad, 0x3d,
  2464. 0x06, 0xd3, 0x61, 0x27, 0xfd, 0x13, 0x9e, 0xde },
  2465. .ilen = 16,
  2466. .result = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  2467. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24 },
  2468. .rlen = 16,
  2469. }, {
  2470. .key = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2471. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2472. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2473. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  2474. .klen = 32,
  2475. .input = { 0x1a, 0x91, 0xfb, 0x2b, 0xb7, 0x78, 0x6b, 0xc4,
  2476. 0x17, 0xd9, 0xff, 0x40, 0x3b, 0x0e, 0xe5, 0xfe },
  2477. .ilen = 16,
  2478. .result = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  2479. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  2480. .rlen = 16,
  2481. }, {
  2482. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2483. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2484. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2485. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2486. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2487. .input = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  2488. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee },
  2489. .klen = 40,
  2490. .ilen = 16,
  2491. .result = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2492. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2493. .rlen = 16,
  2494. },
  2495. };
  2496. static struct cipher_testvec anubis_cbc_enc_tv_template[] = {
  2497. {
  2498. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2499. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2500. .klen = 16,
  2501. .input = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2502. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2503. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2504. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2505. .ilen = 32,
  2506. .result = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  2507. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90,
  2508. 0x86, 0xd8, 0xb5, 0x6f, 0x98, 0x5e, 0x8a, 0x66,
  2509. 0x4f, 0x1f, 0x78, 0xa1, 0xbb, 0x37, 0xf1, 0xbe },
  2510. .rlen = 32,
  2511. }, {
  2512. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2513. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2514. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2515. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2516. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2517. .klen = 40,
  2518. .input = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2519. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2520. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2521. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2522. .ilen = 32,
  2523. .result = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  2524. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee,
  2525. 0xa2, 0xbc, 0x06, 0x98, 0xc6, 0x4b, 0xda, 0x75,
  2526. 0x2e, 0xaa, 0xbe, 0x58, 0xce, 0x01, 0x5b, 0xc7 },
  2527. .rlen = 32,
  2528. },
  2529. };
  2530. static struct cipher_testvec anubis_cbc_dec_tv_template[] = {
  2531. {
  2532. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2533. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2534. .klen = 16,
  2535. .input = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  2536. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90,
  2537. 0x86, 0xd8, 0xb5, 0x6f, 0x98, 0x5e, 0x8a, 0x66,
  2538. 0x4f, 0x1f, 0x78, 0xa1, 0xbb, 0x37, 0xf1, 0xbe },
  2539. .ilen = 32,
  2540. .result = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2541. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2542. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  2543. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  2544. .rlen = 32,
  2545. }, {
  2546. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2547. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2548. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2549. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2550. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2551. .klen = 40,
  2552. .input = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  2553. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee,
  2554. 0xa2, 0xbc, 0x06, 0x98, 0xc6, 0x4b, 0xda, 0x75,
  2555. 0x2e, 0xaa, 0xbe, 0x58, 0xce, 0x01, 0x5b, 0xc7 },
  2556. .ilen = 32,
  2557. .result = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2558. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2559. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  2560. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  2561. .rlen = 32,
  2562. },
  2563. };
  2564. /*
  2565. * XETA test vectors
  2566. */
  2567. #define XETA_ENC_TEST_VECTORS 4
  2568. #define XETA_DEC_TEST_VECTORS 4
  2569. static struct cipher_testvec xeta_enc_tv_template[] = {
  2570. {
  2571. .key = { [0 ... 15] = 0x00 },
  2572. .klen = 16,
  2573. .input = { [0 ... 8] = 0x00 },
  2574. .ilen = 8,
  2575. .result = { 0xaa, 0x22, 0x96, 0xe5, 0x6c, 0x61, 0xf3, 0x45 },
  2576. .rlen = 8,
  2577. }, {
  2578. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  2579. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  2580. .klen = 16,
  2581. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  2582. .ilen = 8,
  2583. .result = { 0x82, 0x3e, 0xeb, 0x35, 0xdc, 0xdd, 0xd9, 0xc3 },
  2584. .rlen = 8,
  2585. }, {
  2586. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  2587. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  2588. .klen = 16,
  2589. .input = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  2590. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  2591. .ilen = 16,
  2592. .result = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  2593. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  2594. .rlen = 16,
  2595. }, {
  2596. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  2597. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  2598. .klen = 16,
  2599. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  2600. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  2601. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  2602. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  2603. .ilen = 32,
  2604. .result = { 0x0b, 0x03, 0xcd, 0x8a, 0xbe, 0x95, 0xfd, 0xb1,
  2605. 0xc1, 0x44, 0x91, 0x0b, 0xa5, 0xc9, 0x1b, 0xb4,
  2606. 0xa9, 0xda, 0x1e, 0x9e, 0xb1, 0x3e, 0x2a, 0x8f,
  2607. 0xea, 0xa5, 0x6a, 0x85, 0xd1, 0xf4, 0xa8, 0xa5 },
  2608. .rlen = 32,
  2609. }
  2610. };
  2611. static struct cipher_testvec xeta_dec_tv_template[] = {
  2612. {
  2613. .key = { [0 ... 15] = 0x00 },
  2614. .klen = 16,
  2615. .input = { 0xaa, 0x22, 0x96, 0xe5, 0x6c, 0x61, 0xf3, 0x45 },
  2616. .ilen = 8,
  2617. .result = { [0 ... 8] = 0x00 },
  2618. .rlen = 8,
  2619. }, {
  2620. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  2621. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  2622. .klen = 16,
  2623. .input = { 0x82, 0x3e, 0xeb, 0x35, 0xdc, 0xdd, 0xd9, 0xc3 },
  2624. .ilen = 8,
  2625. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  2626. .rlen = 8,
  2627. }, {
  2628. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  2629. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  2630. .klen = 16,
  2631. .input = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  2632. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  2633. .ilen = 16,
  2634. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  2635. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  2636. .rlen = 16,
  2637. }, {
  2638. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  2639. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  2640. .klen = 16,
  2641. .input = { 0x0b, 0x03, 0xcd, 0x8a, 0xbe, 0x95, 0xfd, 0xb1,
  2642. 0xc1, 0x44, 0x91, 0x0b, 0xa5, 0xc9, 0x1b, 0xb4,
  2643. 0xa9, 0xda, 0x1e, 0x9e, 0xb1, 0x3e, 0x2a, 0x8f,
  2644. 0xea, 0xa5, 0x6a, 0x85, 0xd1, 0xf4, 0xa8, 0xa5 },
  2645. .ilen = 32,
  2646. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  2647. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  2648. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  2649. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  2650. .rlen = 32,
  2651. }
  2652. };
  2653. /*
  2654. * Compression stuff.
  2655. */
  2656. #define COMP_BUF_SIZE 512
  2657. struct comp_testvec {
  2658. int inlen, outlen;
  2659. char input[COMP_BUF_SIZE];
  2660. char output[COMP_BUF_SIZE];
  2661. };
  2662. /*
  2663. * Deflate test vectors (null-terminated strings).
  2664. * Params: winbits=11, Z_DEFAULT_COMPRESSION, MAX_MEM_LEVEL.
  2665. */
  2666. #define DEFLATE_COMP_TEST_VECTORS 2
  2667. #define DEFLATE_DECOMP_TEST_VECTORS 2
  2668. static struct comp_testvec deflate_comp_tv_template[] = {
  2669. {
  2670. .inlen = 70,
  2671. .outlen = 38,
  2672. .input = "Join us now and share the software "
  2673. "Join us now and share the software ",
  2674. .output = { 0xf3, 0xca, 0xcf, 0xcc, 0x53, 0x28, 0x2d, 0x56,
  2675. 0xc8, 0xcb, 0x2f, 0x57, 0x48, 0xcc, 0x4b, 0x51,
  2676. 0x28, 0xce, 0x48, 0x2c, 0x4a, 0x55, 0x28, 0xc9,
  2677. 0x48, 0x55, 0x28, 0xce, 0x4f, 0x2b, 0x29, 0x07,
  2678. 0x71, 0xbc, 0x08, 0x2b, 0x01, 0x00 },
  2679. }, {
  2680. .inlen = 191,
  2681. .outlen = 122,
  2682. .input = "This document describes a compression method based on the DEFLATE"
  2683. "compression algorithm. This document defines the application of "
  2684. "the DEFLATE algorithm to the IP Payload Compression Protocol.",
  2685. .output = { 0x5d, 0x8d, 0x31, 0x0e, 0xc2, 0x30, 0x10, 0x04,
  2686. 0xbf, 0xb2, 0x2f, 0xc8, 0x1f, 0x10, 0x04, 0x09,
  2687. 0x89, 0xc2, 0x85, 0x3f, 0x70, 0xb1, 0x2f, 0xf8,
  2688. 0x24, 0xdb, 0x67, 0xd9, 0x47, 0xc1, 0xef, 0x49,
  2689. 0x68, 0x12, 0x51, 0xae, 0x76, 0x67, 0xd6, 0x27,
  2690. 0x19, 0x88, 0x1a, 0xde, 0x85, 0xab, 0x21, 0xf2,
  2691. 0x08, 0x5d, 0x16, 0x1e, 0x20, 0x04, 0x2d, 0xad,
  2692. 0xf3, 0x18, 0xa2, 0x15, 0x85, 0x2d, 0x69, 0xc4,
  2693. 0x42, 0x83, 0x23, 0xb6, 0x6c, 0x89, 0x71, 0x9b,
  2694. 0xef, 0xcf, 0x8b, 0x9f, 0xcf, 0x33, 0xca, 0x2f,
  2695. 0xed, 0x62, 0xa9, 0x4c, 0x80, 0xff, 0x13, 0xaf,
  2696. 0x52, 0x37, 0xed, 0x0e, 0x52, 0x6b, 0x59, 0x02,
  2697. 0xd9, 0x4e, 0xe8, 0x7a, 0x76, 0x1d, 0x02, 0x98,
  2698. 0xfe, 0x8a, 0x87, 0x83, 0xa3, 0x4f, 0x56, 0x8a,
  2699. 0xb8, 0x9e, 0x8e, 0x5c, 0x57, 0xd3, 0xa0, 0x79,
  2700. 0xfa, 0x02 },
  2701. },
  2702. };
  2703. static struct comp_testvec deflate_decomp_tv_template[] = {
  2704. {
  2705. .inlen = 122,
  2706. .outlen = 191,
  2707. .input = { 0x5d, 0x8d, 0x31, 0x0e, 0xc2, 0x30, 0x10, 0x04,
  2708. 0xbf, 0xb2, 0x2f, 0xc8, 0x1f, 0x10, 0x04, 0x09,
  2709. 0x89, 0xc2, 0x85, 0x3f, 0x70, 0xb1, 0x2f, 0xf8,
  2710. 0x24, 0xdb, 0x67, 0xd9, 0x47, 0xc1, 0xef, 0x49,
  2711. 0x68, 0x12, 0x51, 0xae, 0x76, 0x67, 0xd6, 0x27,
  2712. 0x19, 0x88, 0x1a, 0xde, 0x85, 0xab, 0x21, 0xf2,
  2713. 0x08, 0x5d, 0x16, 0x1e, 0x20, 0x04, 0x2d, 0xad,
  2714. 0xf3, 0x18, 0xa2, 0x15, 0x85, 0x2d, 0x69, 0xc4,
  2715. 0x42, 0x83, 0x23, 0xb6, 0x6c, 0x89, 0x71, 0x9b,
  2716. 0xef, 0xcf, 0x8b, 0x9f, 0xcf, 0x33, 0xca, 0x2f,
  2717. 0xed, 0x62, 0xa9, 0x4c, 0x80, 0xff, 0x13, 0xaf,
  2718. 0x52, 0x37, 0xed, 0x0e, 0x52, 0x6b, 0x59, 0x02,
  2719. 0xd9, 0x4e, 0xe8, 0x7a, 0x76, 0x1d, 0x02, 0x98,
  2720. 0xfe, 0x8a, 0x87, 0x83, 0xa3, 0x4f, 0x56, 0x8a,
  2721. 0xb8, 0x9e, 0x8e, 0x5c, 0x57, 0xd3, 0xa0, 0x79,
  2722. 0xfa, 0x02 },
  2723. .output = "This document describes a compression method based on the DEFLATE"
  2724. "compression algorithm. This document defines the application of "
  2725. "the DEFLATE algorithm to the IP Payload Compression Protocol.",
  2726. }, {
  2727. .inlen = 38,
  2728. .outlen = 70,
  2729. .input = { 0xf3, 0xca, 0xcf, 0xcc, 0x53, 0x28, 0x2d, 0x56,
  2730. 0xc8, 0xcb, 0x2f, 0x57, 0x48, 0xcc, 0x4b, 0x51,
  2731. 0x28, 0xce, 0x48, 0x2c, 0x4a, 0x55, 0x28, 0xc9,
  2732. 0x48, 0x55, 0x28, 0xce, 0x4f, 0x2b, 0x29, 0x07,
  2733. 0x71, 0xbc, 0x08, 0x2b, 0x01, 0x00 },
  2734. .output = "Join us now and share the software "
  2735. "Join us now and share the software ",
  2736. },
  2737. };
  2738. /*
  2739. * Michael MIC test vectors from IEEE 802.11i
  2740. */
  2741. #define MICHAEL_MIC_TEST_VECTORS 6
  2742. static struct hash_testvec michael_mic_tv_template[] = {
  2743. {
  2744. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2745. .ksize = 8,
  2746. .plaintext = { },
  2747. .psize = 0,
  2748. .digest = { 0x82, 0x92, 0x5c, 0x1c, 0xa1, 0xd1, 0x30, 0xb8 }
  2749. },
  2750. {
  2751. .key = { 0x82, 0x92, 0x5c, 0x1c, 0xa1, 0xd1, 0x30, 0xb8 },
  2752. .ksize = 8,
  2753. .plaintext = { 'M' },
  2754. .psize = 1,
  2755. .digest = { 0x43, 0x47, 0x21, 0xca, 0x40, 0x63, 0x9b, 0x3f }
  2756. },
  2757. {
  2758. .key = { 0x43, 0x47, 0x21, 0xca, 0x40, 0x63, 0x9b, 0x3f },
  2759. .ksize = 8,
  2760. .plaintext = { 'M', 'i' },
  2761. .psize = 2,
  2762. .digest = { 0xe8, 0xf9, 0xbe, 0xca, 0xe9, 0x7e, 0x5d, 0x29 }
  2763. },
  2764. {
  2765. .key = { 0xe8, 0xf9, 0xbe, 0xca, 0xe9, 0x7e, 0x5d, 0x29 },
  2766. .ksize = 8,
  2767. .plaintext = { 'M', 'i', 'c' },
  2768. .psize = 3,
  2769. .digest = { 0x90, 0x03, 0x8f, 0xc6, 0xcf, 0x13, 0xc1, 0xdb }
  2770. },
  2771. {
  2772. .key = { 0x90, 0x03, 0x8f, 0xc6, 0xcf, 0x13, 0xc1, 0xdb },
  2773. .ksize = 8,
  2774. .plaintext = { 'M', 'i', 'c', 'h' },
  2775. .psize = 4,
  2776. .digest = { 0xd5, 0x5e, 0x10, 0x05, 0x10, 0x12, 0x89, 0x86 }
  2777. },
  2778. {
  2779. .key = { 0xd5, 0x5e, 0x10, 0x05, 0x10, 0x12, 0x89, 0x86 },
  2780. .ksize = 8,
  2781. .plaintext = { 'M', 'i', 'c', 'h', 'a', 'e', 'l' },
  2782. .psize = 7,
  2783. .digest = { 0x0a, 0x94, 0x2b, 0x12, 0x4e, 0xca, 0xa5, 0x46 },
  2784. }
  2785. };
  2786. /*
  2787. * Cipher speed tests
  2788. */
  2789. static struct cipher_speed aes_speed_template[] = {
  2790. { .klen = 16, .blen = 16, },
  2791. { .klen = 16, .blen = 64, },
  2792. { .klen = 16, .blen = 256, },
  2793. { .klen = 16, .blen = 1024, },
  2794. { .klen = 16, .blen = 8192, },
  2795. { .klen = 24, .blen = 16, },
  2796. { .klen = 24, .blen = 64, },
  2797. { .klen = 24, .blen = 256, },
  2798. { .klen = 24, .blen = 1024, },
  2799. { .klen = 24, .blen = 8192, },
  2800. { .klen = 32, .blen = 16, },
  2801. { .klen = 32, .blen = 64, },
  2802. { .klen = 32, .blen = 256, },
  2803. { .klen = 32, .blen = 1024, },
  2804. { .klen = 32, .blen = 8192, },
  2805. /* End marker */
  2806. { .klen = 0, .blen = 0, }
  2807. };
  2808. static struct cipher_speed des3_ede_speed_template[] = {
  2809. { .klen = 24, .blen = 16, },
  2810. { .klen = 24, .blen = 64, },
  2811. { .klen = 24, .blen = 256, },
  2812. { .klen = 24, .blen = 1024, },
  2813. { .klen = 24, .blen = 8192, },
  2814. /* End marker */
  2815. { .klen = 0, .blen = 0, }
  2816. };
  2817. static struct cipher_speed twofish_speed_template[] = {
  2818. { .klen = 16, .blen = 16, },
  2819. { .klen = 16, .blen = 64, },
  2820. { .klen = 16, .blen = 256, },
  2821. { .klen = 16, .blen = 1024, },
  2822. { .klen = 16, .blen = 8192, },
  2823. { .klen = 24, .blen = 16, },
  2824. { .klen = 24, .blen = 64, },
  2825. { .klen = 24, .blen = 256, },
  2826. { .klen = 24, .blen = 1024, },
  2827. { .klen = 24, .blen = 8192, },
  2828. { .klen = 32, .blen = 16, },
  2829. { .klen = 32, .blen = 64, },
  2830. { .klen = 32, .blen = 256, },
  2831. { .klen = 32, .blen = 1024, },
  2832. { .klen = 32, .blen = 8192, },
  2833. /* End marker */
  2834. { .klen = 0, .blen = 0, }
  2835. };
  2836. static struct cipher_speed blowfish_speed_template[] = {
  2837. /* Don't support blowfish keys > 256 bit in this test */
  2838. { .klen = 8, .blen = 16, },
  2839. { .klen = 8, .blen = 64, },
  2840. { .klen = 8, .blen = 256, },
  2841. { .klen = 8, .blen = 1024, },
  2842. { .klen = 8, .blen = 8192, },
  2843. { .klen = 32, .blen = 16, },
  2844. { .klen = 32, .blen = 64, },
  2845. { .klen = 32, .blen = 256, },
  2846. { .klen = 32, .blen = 1024, },
  2847. { .klen = 32, .blen = 8192, },
  2848. /* End marker */
  2849. { .klen = 0, .blen = 0, }
  2850. };
  2851. static struct cipher_speed des_speed_template[] = {
  2852. { .klen = 8, .blen = 16, },
  2853. { .klen = 8, .blen = 64, },
  2854. { .klen = 8, .blen = 256, },
  2855. { .klen = 8, .blen = 1024, },
  2856. { .klen = 8, .blen = 8192, },
  2857. /* End marker */
  2858. { .klen = 0, .blen = 0, }
  2859. };
  2860. /*
  2861. * Digest speed tests
  2862. */
  2863. static struct digest_speed generic_digest_speed_template[] = {
  2864. { .blen = 16, .plen = 16, },
  2865. { .blen = 64, .plen = 16, },
  2866. { .blen = 64, .plen = 64, },
  2867. { .blen = 256, .plen = 16, },
  2868. { .blen = 256, .plen = 64, },
  2869. { .blen = 256, .plen = 256, },
  2870. { .blen = 1024, .plen = 16, },
  2871. { .blen = 1024, .plen = 256, },
  2872. { .blen = 1024, .plen = 1024, },
  2873. { .blen = 2048, .plen = 16, },
  2874. { .blen = 2048, .plen = 256, },
  2875. { .blen = 2048, .plen = 1024, },
  2876. { .blen = 2048, .plen = 2048, },
  2877. { .blen = 4096, .plen = 16, },
  2878. { .blen = 4096, .plen = 256, },
  2879. { .blen = 4096, .plen = 1024, },
  2880. { .blen = 4096, .plen = 4096, },
  2881. { .blen = 8192, .plen = 16, },
  2882. { .blen = 8192, .plen = 256, },
  2883. { .blen = 8192, .plen = 1024, },
  2884. { .blen = 8192, .plen = 4096, },
  2885. { .blen = 8192, .plen = 8192, },
  2886. /* End marker */
  2887. { .blen = 0, .plen = 0, }
  2888. };
  2889. #endif /* _CRYPTO_TCRYPT_H */