tcrypt.h 206 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072307330743075307630773078307930803081308230833084308530863087308830893090309130923093309430953096309730983099310031013102310331043105310631073108310931103111311231133114311531163117311831193120312131223123312431253126312731283129313031313132313331343135313631373138313931403141314231433144314531463147314831493150315131523153315431553156315731583159316031613162316331643165316631673168316931703171317231733174317531763177317831793180318131823183318431853186318731883189319031913192319331943195319631973198319932003201320232033204320532063207320832093210321132123213321432153216321732183219322032213222322332243225322632273228322932303231323232333234323532363237323832393240324132423243324432453246324732483249325032513252325332543255325632573258325932603261326232633264326532663267326832693270327132723273327432753276327732783279328032813282328332843285328632873288328932903291329232933294329532963297329832993300330133023303330433053306330733083309331033113312331333143315331633173318331933203321332233233324332533263327332833293330333133323333333433353336333733383339334033413342334333443345334633473348334933503351335233533354335533563357335833593360336133623363336433653366336733683369337033713372337333743375337633773378337933803381338233833384338533863387338833893390339133923393339433953396339733983399340034013402340334043405340634073408340934103411341234133414341534163417341834193420342134223423342434253426342734283429343034313432343334343435343634373438343934403441344234433444344534463447344834493450345134523453345434553456345734583459346034613462346334643465346634673468346934703471347234733474347534763477347834793480348134823483348434853486348734883489349034913492349334943495349634973498349935003501350235033504350535063507350835093510351135123513351435153516351735183519352035213522352335243525352635273528352935303531353235333534353535363537353835393540354135423543354435453546354735483549355035513552355335543555355635573558355935603561356235633564356535663567356835693570357135723573357435753576357735783579358035813582358335843585358635873588358935903591359235933594359535963597359835993600360136023603360436053606360736083609361036113612361336143615361636173618361936203621362236233624362536263627362836293630363136323633363436353636363736383639364036413642364336443645364636473648364936503651365236533654365536563657365836593660366136623663366436653666366736683669367036713672367336743675367636773678367936803681368236833684368536863687368836893690369136923693369436953696369736983699370037013702370337043705370637073708370937103711371237133714371537163717371837193720372137223723372437253726372737283729373037313732373337343735373637373738373937403741374237433744374537463747374837493750375137523753375437553756375737583759376037613762376337643765376637673768376937703771377237733774377537763777377837793780378137823783378437853786378737883789379037913792379337943795379637973798379938003801380238033804380538063807380838093810381138123813381438153816381738183819382038213822382338243825382638273828382938303831383238333834383538363837383838393840384138423843384438453846384738483849385038513852385338543855385638573858385938603861386238633864386538663867386838693870387138723873387438753876387738783879388038813882388338843885388638873888388938903891389238933894389538963897389838993900390139023903390439053906390739083909391039113912391339143915391639173918391939203921392239233924392539263927392839293930393139323933393439353936393739383939394039413942394339443945394639473948394939503951395239533954395539563957395839593960396139623963396439653966396739683969397039713972397339743975397639773978397939803981398239833984398539863987398839893990399139923993399439953996399739983999400040014002400340044005400640074008400940104011401240134014401540164017401840194020402140224023402440254026402740284029403040314032403340344035403640374038403940404041404240434044404540464047404840494050405140524053405440554056405740584059406040614062406340644065406640674068406940704071407240734074407540764077407840794080408140824083408440854086408740884089409040914092409340944095409640974098409941004101410241034104410541064107410841094110411141124113411441154116411741184119412041214122412341244125412641274128412941304131413241334134413541364137413841394140414141424143414441454146414741484149415041514152415341544155415641574158415941604161416241634164416541664167416841694170417141724173417441754176417741784179418041814182418341844185418641874188418941904191419241934194419541964197419841994200420142024203420442054206420742084209421042114212421342144215421642174218421942204221422242234224422542264227422842294230423142324233423442354236423742384239424042414242424342444245424642474248424942504251425242534254425542564257425842594260426142624263426442654266426742684269427042714272427342744275427642774278427942804281428242834284428542864287428842894290429142924293429442954296429742984299430043014302430343044305430643074308430943104311431243134314431543164317431843194320432143224323432443254326432743284329433043314332433343344335433643374338433943404341434243434344434543464347434843494350435143524353435443554356435743584359436043614362436343644365436643674368436943704371437243734374437543764377437843794380438143824383438443854386438743884389439043914392439343944395439643974398439944004401440244034404440544064407440844094410441144124413441444154416441744184419442044214422442344244425442644274428442944304431443244334434443544364437443844394440444144424443444444454446444744484449445044514452445344544455445644574458445944604461446244634464446544664467446844694470447144724473447444754476447744784479448044814482448344844485448644874488448944904491449244934494449544964497449844994500450145024503450445054506450745084509451045114512451345144515451645174518451945204521452245234524452545264527452845294530453145324533453445354536453745384539454045414542454345444545454645474548454945504551455245534554455545564557455845594560456145624563456445654566456745684569457045714572457345744575457645774578457945804581458245834584458545864587458845894590459145924593459445954596459745984599460046014602460346044605460646074608460946104611461246134614461546164617461846194620462146224623462446254626462746284629463046314632463346344635463646374638463946404641464246434644464546464647464846494650465146524653465446554656465746584659466046614662466346644665466646674668466946704671467246734674467546764677467846794680468146824683468446854686468746884689469046914692469346944695469646974698469947004701470247034704470547064707470847094710471147124713471447154716471747184719472047214722472347244725472647274728472947304731473247334734473547364737473847394740474147424743474447454746474747484749475047514752475347544755475647574758475947604761476247634764476547664767476847694770477147724773477447754776477747784779478047814782478347844785478647874788478947904791479247934794479547964797479847994800480148024803480448054806480748084809481048114812481348144815481648174818481948204821482248234824482548264827482848294830483148324833483448354836483748384839484048414842484348444845484648474848484948504851485248534854485548564857485848594860486148624863486448654866486748684869487048714872487348744875487648774878487948804881488248834884488548864887488848894890489148924893489448954896489748984899490049014902490349044905490649074908490949104911491249134914491549164917491849194920492149224923492449254926492749284929493049314932493349344935493649374938493949404941494249434944494549464947494849494950495149524953495449554956495749584959496049614962496349644965496649674968496949704971497249734974497549764977497849794980498149824983498449854986498749884989499049914992499349944995499649974998499950005001500250035004500550065007500850095010501150125013501450155016501750185019502050215022502350245025502650275028502950305031503250335034503550365037503850395040504150425043504450455046504750485049505050515052505350545055505650575058505950605061506250635064506550665067506850695070507150725073507450755076507750785079508050815082508350845085508650875088508950905091509250935094509550965097509850995100510151025103510451055106510751085109511051115112511351145115511651175118511951205121512251235124512551265127512851295130513151325133513451355136513751385139514051415142514351445145514651475148514951505151515251535154515551565157515851595160516151625163516451655166516751685169517051715172517351745175517651775178517951805181518251835184518551865187518851895190519151925193519451955196519751985199520052015202520352045205520652075208520952105211521252135214521552165217521852195220522152225223522452255226522752285229523052315232523352345235523652375238523952405241524252435244524552465247524852495250525152525253525452555256525752585259526052615262526352645265526652675268526952705271527252735274527552765277527852795280528152825283528452855286528752885289529052915292529352945295529652975298529953005301530253035304530553065307530853095310531153125313531453155316531753185319532053215322532353245325
  1. /*
  2. * Quick & dirty crypto testing module.
  3. *
  4. * This will only exist until we have a better testing mechanism
  5. * (e.g. a char device).
  6. *
  7. * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
  8. * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
  9. * Copyright (c) 2007 Nokia Siemens Networks
  10. *
  11. * This program is free software; you can redistribute it and/or modify it
  12. * under the terms of the GNU General Public License as published by the Free
  13. * Software Foundation; either version 2 of the License, or (at your option)
  14. * any later version.
  15. *
  16. * 2007-11-13 Added AEAD support
  17. * 2006-12-07 Added SHA384 HMAC and SHA512 HMAC tests
  18. * 2004-08-09 Cipher speed tests by Reyk Floeter <reyk@vantronix.net>
  19. * 2003-09-14 Changes by Kartikey Mahendra Bhatt
  20. *
  21. */
  22. #ifndef _CRYPTO_TCRYPT_H
  23. #define _CRYPTO_TCRYPT_H
  24. #define MAX_DIGEST_SIZE 64
  25. #define MAX_TAP 8
  26. #define MAX_KEYLEN 56
  27. #define MAX_IVLEN 32
  28. struct hash_testvec {
  29. /* only used with keyed hash algorithms */
  30. char key[132] __attribute__ ((__aligned__(4)));
  31. char plaintext[240];
  32. char digest[MAX_DIGEST_SIZE];
  33. unsigned char tap[MAX_TAP];
  34. unsigned char psize;
  35. unsigned char np;
  36. unsigned char ksize;
  37. };
  38. struct cipher_testvec {
  39. char key[MAX_KEYLEN] __attribute__ ((__aligned__(4)));
  40. char iv[MAX_IVLEN];
  41. char input[512];
  42. char result[512];
  43. unsigned char tap[MAX_TAP];
  44. int np;
  45. unsigned char fail;
  46. unsigned char wk; /* weak key flag */
  47. unsigned char klen;
  48. unsigned short ilen;
  49. unsigned short rlen;
  50. };
  51. struct aead_testvec {
  52. char key[MAX_KEYLEN] __attribute__ ((__aligned__(4)));
  53. char iv[MAX_IVLEN];
  54. char input[512];
  55. char assoc[512];
  56. char result[512];
  57. char tag[128];
  58. unsigned char tap[MAX_TAP];
  59. unsigned char atap[MAX_TAP];
  60. int np;
  61. int anp;
  62. unsigned char fail;
  63. unsigned char wk; /* weak key flag */
  64. unsigned char klen;
  65. unsigned short ilen;
  66. unsigned short alen;
  67. unsigned short rlen;
  68. unsigned short tlen;
  69. };
  70. struct cipher_speed {
  71. unsigned char klen;
  72. unsigned int blen;
  73. };
  74. struct hash_speed {
  75. unsigned int blen; /* buffer length */
  76. unsigned int plen; /* per-update length */
  77. };
  78. /*
  79. * MD4 test vectors from RFC1320
  80. */
  81. #define MD4_TEST_VECTORS 7
  82. static struct hash_testvec md4_tv_template [] = {
  83. {
  84. .plaintext = "",
  85. .digest = { 0x31, 0xd6, 0xcf, 0xe0, 0xd1, 0x6a, 0xe9, 0x31,
  86. 0xb7, 0x3c, 0x59, 0xd7, 0xe0, 0xc0, 0x89, 0xc0 },
  87. }, {
  88. .plaintext = "a",
  89. .psize = 1,
  90. .digest = { 0xbd, 0xe5, 0x2c, 0xb3, 0x1d, 0xe3, 0x3e, 0x46,
  91. 0x24, 0x5e, 0x05, 0xfb, 0xdb, 0xd6, 0xfb, 0x24 },
  92. }, {
  93. .plaintext = "abc",
  94. .psize = 3,
  95. .digest = { 0xa4, 0x48, 0x01, 0x7a, 0xaf, 0x21, 0xd8, 0x52,
  96. 0x5f, 0xc1, 0x0a, 0xe8, 0x7a, 0xa6, 0x72, 0x9d },
  97. }, {
  98. .plaintext = "message digest",
  99. .psize = 14,
  100. .digest = { 0xd9, 0x13, 0x0a, 0x81, 0x64, 0x54, 0x9f, 0xe8,
  101. 0x18, 0x87, 0x48, 0x06, 0xe1, 0xc7, 0x01, 0x4b },
  102. }, {
  103. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  104. .psize = 26,
  105. .digest = { 0xd7, 0x9e, 0x1c, 0x30, 0x8a, 0xa5, 0xbb, 0xcd,
  106. 0xee, 0xa8, 0xed, 0x63, 0xdf, 0x41, 0x2d, 0xa9 },
  107. .np = 2,
  108. .tap = { 13, 13 },
  109. }, {
  110. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
  111. .psize = 62,
  112. .digest = { 0x04, 0x3f, 0x85, 0x82, 0xf2, 0x41, 0xdb, 0x35,
  113. 0x1c, 0xe6, 0x27, 0xe1, 0x53, 0xe7, 0xf0, 0xe4 },
  114. }, {
  115. .plaintext = "123456789012345678901234567890123456789012345678901234567890123"
  116. "45678901234567890",
  117. .psize = 80,
  118. .digest = { 0xe3, 0x3b, 0x4d, 0xdc, 0x9c, 0x38, 0xf2, 0x19,
  119. 0x9c, 0x3e, 0x7b, 0x16, 0x4f, 0xcc, 0x05, 0x36 },
  120. },
  121. };
  122. /*
  123. * MD5 test vectors from RFC1321
  124. */
  125. #define MD5_TEST_VECTORS 7
  126. static struct hash_testvec md5_tv_template[] = {
  127. {
  128. .digest = { 0xd4, 0x1d, 0x8c, 0xd9, 0x8f, 0x00, 0xb2, 0x04,
  129. 0xe9, 0x80, 0x09, 0x98, 0xec, 0xf8, 0x42, 0x7e },
  130. }, {
  131. .plaintext = "a",
  132. .psize = 1,
  133. .digest = { 0x0c, 0xc1, 0x75, 0xb9, 0xc0, 0xf1, 0xb6, 0xa8,
  134. 0x31, 0xc3, 0x99, 0xe2, 0x69, 0x77, 0x26, 0x61 },
  135. }, {
  136. .plaintext = "abc",
  137. .psize = 3,
  138. .digest = { 0x90, 0x01, 0x50, 0x98, 0x3c, 0xd2, 0x4f, 0xb0,
  139. 0xd6, 0x96, 0x3f, 0x7d, 0x28, 0xe1, 0x7f, 0x72 },
  140. }, {
  141. .plaintext = "message digest",
  142. .psize = 14,
  143. .digest = { 0xf9, 0x6b, 0x69, 0x7d, 0x7c, 0xb7, 0x93, 0x8d,
  144. 0x52, 0x5a, 0x2f, 0x31, 0xaa, 0xf1, 0x61, 0xd0 },
  145. }, {
  146. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  147. .psize = 26,
  148. .digest = { 0xc3, 0xfc, 0xd3, 0xd7, 0x61, 0x92, 0xe4, 0x00,
  149. 0x7d, 0xfb, 0x49, 0x6c, 0xca, 0x67, 0xe1, 0x3b },
  150. .np = 2,
  151. .tap = {13, 13}
  152. }, {
  153. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
  154. .psize = 62,
  155. .digest = { 0xd1, 0x74, 0xab, 0x98, 0xd2, 0x77, 0xd9, 0xf5,
  156. 0xa5, 0x61, 0x1c, 0x2c, 0x9f, 0x41, 0x9d, 0x9f },
  157. }, {
  158. .plaintext = "12345678901234567890123456789012345678901234567890123456789012"
  159. "345678901234567890",
  160. .psize = 80,
  161. .digest = { 0x57, 0xed, 0xf4, 0xa2, 0x2b, 0xe3, 0xc9, 0x55,
  162. 0xac, 0x49, 0xda, 0x2e, 0x21, 0x07, 0xb6, 0x7a },
  163. }
  164. };
  165. /*
  166. * SHA1 test vectors from from FIPS PUB 180-1
  167. */
  168. #define SHA1_TEST_VECTORS 2
  169. static struct hash_testvec sha1_tv_template[] = {
  170. {
  171. .plaintext = "abc",
  172. .psize = 3,
  173. .digest = { 0xa9, 0x99, 0x3e, 0x36, 0x47, 0x06, 0x81, 0x6a, 0xba, 0x3e,
  174. 0x25, 0x71, 0x78, 0x50, 0xc2, 0x6c, 0x9c, 0xd0, 0xd8, 0x9d },
  175. }, {
  176. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  177. .psize = 56,
  178. .digest = { 0x84, 0x98, 0x3e, 0x44, 0x1c, 0x3b, 0xd2, 0x6e, 0xba, 0xae,
  179. 0x4a, 0xa1, 0xf9, 0x51, 0x29, 0xe5, 0xe5, 0x46, 0x70, 0xf1 },
  180. .np = 2,
  181. .tap = { 28, 28 }
  182. }
  183. };
  184. /*
  185. * SHA224 test vectors from from FIPS PUB 180-2
  186. */
  187. #define SHA224_TEST_VECTORS 2
  188. static struct hash_testvec sha224_tv_template[] = {
  189. {
  190. .plaintext = "abc",
  191. .psize = 3,
  192. .digest = { 0x23, 0x09, 0x7D, 0x22, 0x34, 0x05, 0xD8, 0x22,
  193. 0x86, 0x42, 0xA4, 0x77, 0xBD, 0xA2, 0x55, 0xB3,
  194. 0x2A, 0xAD, 0xBC, 0xE4, 0xBD, 0xA0, 0xB3, 0xF7,
  195. 0xE3, 0x6C, 0x9D, 0xA7},
  196. }, {
  197. .plaintext =
  198. "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  199. .psize = 56,
  200. .digest = { 0x75, 0x38, 0x8B, 0x16, 0x51, 0x27, 0x76, 0xCC,
  201. 0x5D, 0xBA, 0x5D, 0xA1, 0xFD, 0x89, 0x01, 0x50,
  202. 0xB0, 0xC6, 0x45, 0x5C, 0xB4, 0xF5, 0x8B, 0x19,
  203. 0x52, 0x52, 0x25, 0x25 },
  204. .np = 2,
  205. .tap = { 28, 28 }
  206. }
  207. };
  208. /*
  209. * SHA256 test vectors from from NIST
  210. */
  211. #define SHA256_TEST_VECTORS 2
  212. static struct hash_testvec sha256_tv_template[] = {
  213. {
  214. .plaintext = "abc",
  215. .psize = 3,
  216. .digest = { 0xba, 0x78, 0x16, 0xbf, 0x8f, 0x01, 0xcf, 0xea,
  217. 0x41, 0x41, 0x40, 0xde, 0x5d, 0xae, 0x22, 0x23,
  218. 0xb0, 0x03, 0x61, 0xa3, 0x96, 0x17, 0x7a, 0x9c,
  219. 0xb4, 0x10, 0xff, 0x61, 0xf2, 0x00, 0x15, 0xad },
  220. }, {
  221. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  222. .psize = 56,
  223. .digest = { 0x24, 0x8d, 0x6a, 0x61, 0xd2, 0x06, 0x38, 0xb8,
  224. 0xe5, 0xc0, 0x26, 0x93, 0x0c, 0x3e, 0x60, 0x39,
  225. 0xa3, 0x3c, 0xe4, 0x59, 0x64, 0xff, 0x21, 0x67,
  226. 0xf6, 0xec, 0xed, 0xd4, 0x19, 0xdb, 0x06, 0xc1 },
  227. .np = 2,
  228. .tap = { 28, 28 }
  229. },
  230. };
  231. /*
  232. * SHA384 test vectors from from NIST and kerneli
  233. */
  234. #define SHA384_TEST_VECTORS 4
  235. static struct hash_testvec sha384_tv_template[] = {
  236. {
  237. .plaintext= "abc",
  238. .psize = 3,
  239. .digest = { 0xcb, 0x00, 0x75, 0x3f, 0x45, 0xa3, 0x5e, 0x8b,
  240. 0xb5, 0xa0, 0x3d, 0x69, 0x9a, 0xc6, 0x50, 0x07,
  241. 0x27, 0x2c, 0x32, 0xab, 0x0e, 0xde, 0xd1, 0x63,
  242. 0x1a, 0x8b, 0x60, 0x5a, 0x43, 0xff, 0x5b, 0xed,
  243. 0x80, 0x86, 0x07, 0x2b, 0xa1, 0xe7, 0xcc, 0x23,
  244. 0x58, 0xba, 0xec, 0xa1, 0x34, 0xc8, 0x25, 0xa7 },
  245. }, {
  246. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  247. .psize = 56,
  248. .digest = { 0x33, 0x91, 0xfd, 0xdd, 0xfc, 0x8d, 0xc7, 0x39,
  249. 0x37, 0x07, 0xa6, 0x5b, 0x1b, 0x47, 0x09, 0x39,
  250. 0x7c, 0xf8, 0xb1, 0xd1, 0x62, 0xaf, 0x05, 0xab,
  251. 0xfe, 0x8f, 0x45, 0x0d, 0xe5, 0xf3, 0x6b, 0xc6,
  252. 0xb0, 0x45, 0x5a, 0x85, 0x20, 0xbc, 0x4e, 0x6f,
  253. 0x5f, 0xe9, 0x5b, 0x1f, 0xe3, 0xc8, 0x45, 0x2b},
  254. }, {
  255. .plaintext = "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
  256. "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
  257. .psize = 112,
  258. .digest = { 0x09, 0x33, 0x0c, 0x33, 0xf7, 0x11, 0x47, 0xe8,
  259. 0x3d, 0x19, 0x2f, 0xc7, 0x82, 0xcd, 0x1b, 0x47,
  260. 0x53, 0x11, 0x1b, 0x17, 0x3b, 0x3b, 0x05, 0xd2,
  261. 0x2f, 0xa0, 0x80, 0x86, 0xe3, 0xb0, 0xf7, 0x12,
  262. 0xfc, 0xc7, 0xc7, 0x1a, 0x55, 0x7e, 0x2d, 0xb9,
  263. 0x66, 0xc3, 0xe9, 0xfa, 0x91, 0x74, 0x60, 0x39 },
  264. }, {
  265. .plaintext = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcd"
  266. "efghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz",
  267. .psize = 104,
  268. .digest = { 0x3d, 0x20, 0x89, 0x73, 0xab, 0x35, 0x08, 0xdb,
  269. 0xbd, 0x7e, 0x2c, 0x28, 0x62, 0xba, 0x29, 0x0a,
  270. 0xd3, 0x01, 0x0e, 0x49, 0x78, 0xc1, 0x98, 0xdc,
  271. 0x4d, 0x8f, 0xd0, 0x14, 0xe5, 0x82, 0x82, 0x3a,
  272. 0x89, 0xe1, 0x6f, 0x9b, 0x2a, 0x7b, 0xbc, 0x1a,
  273. 0xc9, 0x38, 0xe2, 0xd1, 0x99, 0xe8, 0xbe, 0xa4 },
  274. .np = 4,
  275. .tap = { 26, 26, 26, 26 }
  276. },
  277. };
  278. /*
  279. * SHA512 test vectors from from NIST and kerneli
  280. */
  281. #define SHA512_TEST_VECTORS 4
  282. static struct hash_testvec sha512_tv_template[] = {
  283. {
  284. .plaintext = "abc",
  285. .psize = 3,
  286. .digest = { 0xdd, 0xaf, 0x35, 0xa1, 0x93, 0x61, 0x7a, 0xba,
  287. 0xcc, 0x41, 0x73, 0x49, 0xae, 0x20, 0x41, 0x31,
  288. 0x12, 0xe6, 0xfa, 0x4e, 0x89, 0xa9, 0x7e, 0xa2,
  289. 0x0a, 0x9e, 0xee, 0xe6, 0x4b, 0x55, 0xd3, 0x9a,
  290. 0x21, 0x92, 0x99, 0x2a, 0x27, 0x4f, 0xc1, 0xa8,
  291. 0x36, 0xba, 0x3c, 0x23, 0xa3, 0xfe, 0xeb, 0xbd,
  292. 0x45, 0x4d, 0x44, 0x23, 0x64, 0x3c, 0xe8, 0x0e,
  293. 0x2a, 0x9a, 0xc9, 0x4f, 0xa5, 0x4c, 0xa4, 0x9f },
  294. }, {
  295. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  296. .psize = 56,
  297. .digest = { 0x20, 0x4a, 0x8f, 0xc6, 0xdd, 0xa8, 0x2f, 0x0a,
  298. 0x0c, 0xed, 0x7b, 0xeb, 0x8e, 0x08, 0xa4, 0x16,
  299. 0x57, 0xc1, 0x6e, 0xf4, 0x68, 0xb2, 0x28, 0xa8,
  300. 0x27, 0x9b, 0xe3, 0x31, 0xa7, 0x03, 0xc3, 0x35,
  301. 0x96, 0xfd, 0x15, 0xc1, 0x3b, 0x1b, 0x07, 0xf9,
  302. 0xaa, 0x1d, 0x3b, 0xea, 0x57, 0x78, 0x9c, 0xa0,
  303. 0x31, 0xad, 0x85, 0xc7, 0xa7, 0x1d, 0xd7, 0x03,
  304. 0x54, 0xec, 0x63, 0x12, 0x38, 0xca, 0x34, 0x45 },
  305. }, {
  306. .plaintext = "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
  307. "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
  308. .psize = 112,
  309. .digest = { 0x8e, 0x95, 0x9b, 0x75, 0xda, 0xe3, 0x13, 0xda,
  310. 0x8c, 0xf4, 0xf7, 0x28, 0x14, 0xfc, 0x14, 0x3f,
  311. 0x8f, 0x77, 0x79, 0xc6, 0xeb, 0x9f, 0x7f, 0xa1,
  312. 0x72, 0x99, 0xae, 0xad, 0xb6, 0x88, 0x90, 0x18,
  313. 0x50, 0x1d, 0x28, 0x9e, 0x49, 0x00, 0xf7, 0xe4,
  314. 0x33, 0x1b, 0x99, 0xde, 0xc4, 0xb5, 0x43, 0x3a,
  315. 0xc7, 0xd3, 0x29, 0xee, 0xb6, 0xdd, 0x26, 0x54,
  316. 0x5e, 0x96, 0xe5, 0x5b, 0x87, 0x4b, 0xe9, 0x09 },
  317. }, {
  318. .plaintext = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcd"
  319. "efghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz",
  320. .psize = 104,
  321. .digest = { 0x93, 0x0d, 0x0c, 0xef, 0xcb, 0x30, 0xff, 0x11,
  322. 0x33, 0xb6, 0x89, 0x81, 0x21, 0xf1, 0xcf, 0x3d,
  323. 0x27, 0x57, 0x8a, 0xfc, 0xaf, 0xe8, 0x67, 0x7c,
  324. 0x52, 0x57, 0xcf, 0x06, 0x99, 0x11, 0xf7, 0x5d,
  325. 0x8f, 0x58, 0x31, 0xb5, 0x6e, 0xbf, 0xda, 0x67,
  326. 0xb2, 0x78, 0xe6, 0x6d, 0xff, 0x8b, 0x84, 0xfe,
  327. 0x2b, 0x28, 0x70, 0xf7, 0x42, 0xa5, 0x80, 0xd8,
  328. 0xed, 0xb4, 0x19, 0x87, 0x23, 0x28, 0x50, 0xc9 },
  329. .np = 4,
  330. .tap = { 26, 26, 26, 26 }
  331. },
  332. };
  333. /*
  334. * WHIRLPOOL test vectors from Whirlpool package
  335. * by Vincent Rijmen and Paulo S. L. M. Barreto as part of the NESSIE
  336. * submission
  337. */
  338. #define WP512_TEST_VECTORS 8
  339. static struct hash_testvec wp512_tv_template[] = {
  340. {
  341. .plaintext = "",
  342. .psize = 0,
  343. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  344. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  345. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  346. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7,
  347. 0x3E, 0x83, 0xBE, 0x69, 0x8B, 0x28, 0x8F, 0xEB,
  348. 0xCF, 0x88, 0xE3, 0xE0, 0x3C, 0x4F, 0x07, 0x57,
  349. 0xEA, 0x89, 0x64, 0xE5, 0x9B, 0x63, 0xD9, 0x37,
  350. 0x08, 0xB1, 0x38, 0xCC, 0x42, 0xA6, 0x6E, 0xB3 },
  351. }, {
  352. .plaintext = "a",
  353. .psize = 1,
  354. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  355. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  356. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  357. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42,
  358. 0xD1, 0x1B, 0xC6, 0x45, 0x41, 0x3A, 0xEF, 0xF6,
  359. 0x3A, 0x42, 0x39, 0x1A, 0x39, 0x14, 0x5A, 0x59,
  360. 0x1A, 0x92, 0x20, 0x0D, 0x56, 0x01, 0x95, 0xE5,
  361. 0x3B, 0x47, 0x85, 0x84, 0xFD, 0xAE, 0x23, 0x1A },
  362. }, {
  363. .plaintext = "abc",
  364. .psize = 3,
  365. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  366. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  367. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  368. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C,
  369. 0x71, 0x81, 0xEE, 0xBD, 0xB6, 0xC5, 0x7E, 0x27,
  370. 0x7D, 0x0E, 0x34, 0x95, 0x71, 0x14, 0xCB, 0xD6,
  371. 0xC7, 0x97, 0xFC, 0x9D, 0x95, 0xD8, 0xB5, 0x82,
  372. 0xD2, 0x25, 0x29, 0x20, 0x76, 0xD4, 0xEE, 0xF5 },
  373. }, {
  374. .plaintext = "message digest",
  375. .psize = 14,
  376. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  377. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  378. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  379. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B,
  380. 0x84, 0x21, 0x55, 0x76, 0x59, 0xEF, 0x55, 0xC1,
  381. 0x06, 0xB4, 0xB5, 0x2A, 0xC5, 0xA4, 0xAA, 0xA6,
  382. 0x92, 0xED, 0x92, 0x00, 0x52, 0x83, 0x8F, 0x33,
  383. 0x62, 0xE8, 0x6D, 0xBD, 0x37, 0xA8, 0x90, 0x3E },
  384. }, {
  385. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  386. .psize = 26,
  387. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  388. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  389. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  390. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B,
  391. 0x08, 0xBF, 0x2A, 0x92, 0x51, 0xC3, 0x0B, 0x6A,
  392. 0x0B, 0x8A, 0xAE, 0x86, 0x17, 0x7A, 0xB4, 0xA6,
  393. 0xF6, 0x8F, 0x67, 0x3E, 0x72, 0x07, 0x86, 0x5D,
  394. 0x5D, 0x98, 0x19, 0xA3, 0xDB, 0xA4, 0xEB, 0x3B },
  395. }, {
  396. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  397. "abcdefghijklmnopqrstuvwxyz0123456789",
  398. .psize = 62,
  399. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  400. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  401. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  402. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E,
  403. 0x08, 0xEB, 0xA2, 0x66, 0x29, 0x12, 0x9D, 0x8F,
  404. 0xB7, 0xCB, 0x57, 0x21, 0x1B, 0x92, 0x81, 0xA6,
  405. 0x55, 0x17, 0xCC, 0x87, 0x9D, 0x7B, 0x96, 0x21,
  406. 0x42, 0xC6, 0x5F, 0x5A, 0x7A, 0xF0, 0x14, 0x67 },
  407. }, {
  408. .plaintext = "1234567890123456789012345678901234567890"
  409. "1234567890123456789012345678901234567890",
  410. .psize = 80,
  411. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  412. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  413. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  414. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29,
  415. 0x4D, 0x5B, 0xD8, 0xDF, 0x2A, 0x6C, 0x44, 0xE5,
  416. 0x38, 0xCD, 0x04, 0x7B, 0x26, 0x81, 0xA5, 0x1A,
  417. 0x2C, 0x60, 0x48, 0x1E, 0x88, 0xC5, 0xA2, 0x0B,
  418. 0x2C, 0x2A, 0x80, 0xCF, 0x3A, 0x9A, 0x08, 0x3B },
  419. }, {
  420. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  421. .psize = 32,
  422. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  423. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  424. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  425. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69,
  426. 0x16, 0xBD, 0xC8, 0x03, 0x1B, 0xC5, 0xBE, 0x1B,
  427. 0x7B, 0x94, 0x76, 0x39, 0xFE, 0x05, 0x0B, 0x56,
  428. 0x93, 0x9B, 0xAA, 0xA0, 0xAD, 0xFF, 0x9A, 0xE6,
  429. 0x74, 0x5B, 0x7B, 0x18, 0x1C, 0x3B, 0xE3, 0xFD },
  430. },
  431. };
  432. #define WP384_TEST_VECTORS 8
  433. static struct hash_testvec wp384_tv_template[] = {
  434. {
  435. .plaintext = "",
  436. .psize = 0,
  437. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  438. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  439. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  440. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7,
  441. 0x3E, 0x83, 0xBE, 0x69, 0x8B, 0x28, 0x8F, 0xEB,
  442. 0xCF, 0x88, 0xE3, 0xE0, 0x3C, 0x4F, 0x07, 0x57 },
  443. }, {
  444. .plaintext = "a",
  445. .psize = 1,
  446. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  447. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  448. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  449. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42,
  450. 0xD1, 0x1B, 0xC6, 0x45, 0x41, 0x3A, 0xEF, 0xF6,
  451. 0x3A, 0x42, 0x39, 0x1A, 0x39, 0x14, 0x5A, 0x59 },
  452. }, {
  453. .plaintext = "abc",
  454. .psize = 3,
  455. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  456. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  457. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  458. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C,
  459. 0x71, 0x81, 0xEE, 0xBD, 0xB6, 0xC5, 0x7E, 0x27,
  460. 0x7D, 0x0E, 0x34, 0x95, 0x71, 0x14, 0xCB, 0xD6 },
  461. }, {
  462. .plaintext = "message digest",
  463. .psize = 14,
  464. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  465. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  466. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  467. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B,
  468. 0x84, 0x21, 0x55, 0x76, 0x59, 0xEF, 0x55, 0xC1,
  469. 0x06, 0xB4, 0xB5, 0x2A, 0xC5, 0xA4, 0xAA, 0xA6 },
  470. }, {
  471. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  472. .psize = 26,
  473. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  474. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  475. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  476. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B,
  477. 0x08, 0xBF, 0x2A, 0x92, 0x51, 0xC3, 0x0B, 0x6A,
  478. 0x0B, 0x8A, 0xAE, 0x86, 0x17, 0x7A, 0xB4, 0xA6 },
  479. }, {
  480. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  481. "abcdefghijklmnopqrstuvwxyz0123456789",
  482. .psize = 62,
  483. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  484. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  485. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  486. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E,
  487. 0x08, 0xEB, 0xA2, 0x66, 0x29, 0x12, 0x9D, 0x8F,
  488. 0xB7, 0xCB, 0x57, 0x21, 0x1B, 0x92, 0x81, 0xA6 },
  489. }, {
  490. .plaintext = "1234567890123456789012345678901234567890"
  491. "1234567890123456789012345678901234567890",
  492. .psize = 80,
  493. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  494. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  495. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  496. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29,
  497. 0x4D, 0x5B, 0xD8, 0xDF, 0x2A, 0x6C, 0x44, 0xE5,
  498. 0x38, 0xCD, 0x04, 0x7B, 0x26, 0x81, 0xA5, 0x1A },
  499. }, {
  500. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  501. .psize = 32,
  502. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  503. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  504. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  505. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69,
  506. 0x16, 0xBD, 0xC8, 0x03, 0x1B, 0xC5, 0xBE, 0x1B,
  507. 0x7B, 0x94, 0x76, 0x39, 0xFE, 0x05, 0x0B, 0x56 },
  508. },
  509. };
  510. #define WP256_TEST_VECTORS 8
  511. static struct hash_testvec wp256_tv_template[] = {
  512. {
  513. .plaintext = "",
  514. .psize = 0,
  515. .digest = { 0x19, 0xFA, 0x61, 0xD7, 0x55, 0x22, 0xA4, 0x66,
  516. 0x9B, 0x44, 0xE3, 0x9C, 0x1D, 0x2E, 0x17, 0x26,
  517. 0xC5, 0x30, 0x23, 0x21, 0x30, 0xD4, 0x07, 0xF8,
  518. 0x9A, 0xFE, 0xE0, 0x96, 0x49, 0x97, 0xF7, 0xA7 },
  519. }, {
  520. .plaintext = "a",
  521. .psize = 1,
  522. .digest = { 0x8A, 0xCA, 0x26, 0x02, 0x79, 0x2A, 0xEC, 0x6F,
  523. 0x11, 0xA6, 0x72, 0x06, 0x53, 0x1F, 0xB7, 0xD7,
  524. 0xF0, 0xDF, 0xF5, 0x94, 0x13, 0x14, 0x5E, 0x69,
  525. 0x73, 0xC4, 0x50, 0x01, 0xD0, 0x08, 0x7B, 0x42 },
  526. }, {
  527. .plaintext = "abc",
  528. .psize = 3,
  529. .digest = { 0x4E, 0x24, 0x48, 0xA4, 0xC6, 0xF4, 0x86, 0xBB,
  530. 0x16, 0xB6, 0x56, 0x2C, 0x73, 0xB4, 0x02, 0x0B,
  531. 0xF3, 0x04, 0x3E, 0x3A, 0x73, 0x1B, 0xCE, 0x72,
  532. 0x1A, 0xE1, 0xB3, 0x03, 0xD9, 0x7E, 0x6D, 0x4C },
  533. }, {
  534. .plaintext = "message digest",
  535. .psize = 14,
  536. .digest = { 0x37, 0x8C, 0x84, 0xA4, 0x12, 0x6E, 0x2D, 0xC6,
  537. 0xE5, 0x6D, 0xCC, 0x74, 0x58, 0x37, 0x7A, 0xAC,
  538. 0x83, 0x8D, 0x00, 0x03, 0x22, 0x30, 0xF5, 0x3C,
  539. 0xE1, 0xF5, 0x70, 0x0C, 0x0F, 0xFB, 0x4D, 0x3B },
  540. }, {
  541. .plaintext = "abcdefghijklmnopqrstuvwxyz",
  542. .psize = 26,
  543. .digest = { 0xF1, 0xD7, 0x54, 0x66, 0x26, 0x36, 0xFF, 0xE9,
  544. 0x2C, 0x82, 0xEB, 0xB9, 0x21, 0x2A, 0x48, 0x4A,
  545. 0x8D, 0x38, 0x63, 0x1E, 0xAD, 0x42, 0x38, 0xF5,
  546. 0x44, 0x2E, 0xE1, 0x3B, 0x80, 0x54, 0xE4, 0x1B },
  547. }, {
  548. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
  549. "abcdefghijklmnopqrstuvwxyz0123456789",
  550. .psize = 62,
  551. .digest = { 0xDC, 0x37, 0xE0, 0x08, 0xCF, 0x9E, 0xE6, 0x9B,
  552. 0xF1, 0x1F, 0x00, 0xED, 0x9A, 0xBA, 0x26, 0x90,
  553. 0x1D, 0xD7, 0xC2, 0x8C, 0xDE, 0xC0, 0x66, 0xCC,
  554. 0x6A, 0xF4, 0x2E, 0x40, 0xF8, 0x2F, 0x3A, 0x1E },
  555. }, {
  556. .plaintext = "1234567890123456789012345678901234567890"
  557. "1234567890123456789012345678901234567890",
  558. .psize = 80,
  559. .digest = { 0x46, 0x6E, 0xF1, 0x8B, 0xAB, 0xB0, 0x15, 0x4D,
  560. 0x25, 0xB9, 0xD3, 0x8A, 0x64, 0x14, 0xF5, 0xC0,
  561. 0x87, 0x84, 0x37, 0x2B, 0xCC, 0xB2, 0x04, 0xD6,
  562. 0x54, 0x9C, 0x4A, 0xFA, 0xDB, 0x60, 0x14, 0x29 },
  563. }, {
  564. .plaintext = "abcdbcdecdefdefgefghfghighijhijk",
  565. .psize = 32,
  566. .digest = { 0x2A, 0x98, 0x7E, 0xA4, 0x0F, 0x91, 0x70, 0x61,
  567. 0xF5, 0xD6, 0xF0, 0xA0, 0xE4, 0x64, 0x4F, 0x48,
  568. 0x8A, 0x7A, 0x5A, 0x52, 0xDE, 0xEE, 0x65, 0x62,
  569. 0x07, 0xC5, 0x62, 0xF9, 0x88, 0xE9, 0x5C, 0x69 },
  570. },
  571. };
  572. /*
  573. * TIGER test vectors from Tiger website
  574. */
  575. #define TGR192_TEST_VECTORS 6
  576. static struct hash_testvec tgr192_tv_template[] = {
  577. {
  578. .plaintext = "",
  579. .psize = 0,
  580. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  581. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f,
  582. 0xf3, 0x73, 0xde, 0x2d, 0x49, 0x58, 0x4e, 0x7a },
  583. }, {
  584. .plaintext = "abc",
  585. .psize = 3,
  586. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  587. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf,
  588. 0x93, 0x5f, 0x7b, 0x95, 0x1c, 0x13, 0x29, 0x51 },
  589. }, {
  590. .plaintext = "Tiger",
  591. .psize = 5,
  592. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  593. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec,
  594. 0x37, 0x79, 0x0c, 0x11, 0x6f, 0x9d, 0x2b, 0xdf },
  595. }, {
  596. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  597. .psize = 64,
  598. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  599. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e,
  600. 0xb5, 0x86, 0x44, 0x50, 0x34, 0xa5, 0xa3, 0x86 },
  601. }, {
  602. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  603. .psize = 64,
  604. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  605. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9,
  606. 0x57, 0x89, 0x65, 0x65, 0x97, 0x5f, 0x91, 0x97 },
  607. }, {
  608. .plaintext = "Tiger - A Fast New Hash Function, "
  609. "by Ross Anderson and Eli Biham, "
  610. "proceedings of Fast Software Encryption 3, "
  611. "Cambridge, 1996.",
  612. .psize = 125,
  613. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  614. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24,
  615. 0xdd, 0x68, 0x15, 0x1d, 0x50, 0x39, 0x74, 0xfc },
  616. },
  617. };
  618. #define TGR160_TEST_VECTORS 6
  619. static struct hash_testvec tgr160_tv_template[] = {
  620. {
  621. .plaintext = "",
  622. .psize = 0,
  623. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  624. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f,
  625. 0xf3, 0x73, 0xde, 0x2d },
  626. }, {
  627. .plaintext = "abc",
  628. .psize = 3,
  629. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  630. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf,
  631. 0x93, 0x5f, 0x7b, 0x95 },
  632. }, {
  633. .plaintext = "Tiger",
  634. .psize = 5,
  635. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  636. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec,
  637. 0x37, 0x79, 0x0c, 0x11 },
  638. }, {
  639. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  640. .psize = 64,
  641. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  642. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e,
  643. 0xb5, 0x86, 0x44, 0x50 },
  644. }, {
  645. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  646. .psize = 64,
  647. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  648. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9,
  649. 0x57, 0x89, 0x65, 0x65 },
  650. }, {
  651. .plaintext = "Tiger - A Fast New Hash Function, "
  652. "by Ross Anderson and Eli Biham, "
  653. "proceedings of Fast Software Encryption 3, "
  654. "Cambridge, 1996.",
  655. .psize = 125,
  656. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  657. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24,
  658. 0xdd, 0x68, 0x15, 0x1d },
  659. },
  660. };
  661. #define TGR128_TEST_VECTORS 6
  662. static struct hash_testvec tgr128_tv_template[] = {
  663. {
  664. .plaintext = "",
  665. .psize = 0,
  666. .digest = { 0x24, 0xf0, 0x13, 0x0c, 0x63, 0xac, 0x93, 0x32,
  667. 0x16, 0x16, 0x6e, 0x76, 0xb1, 0xbb, 0x92, 0x5f },
  668. }, {
  669. .plaintext = "abc",
  670. .psize = 3,
  671. .digest = { 0xf2, 0x58, 0xc1, 0xe8, 0x84, 0x14, 0xab, 0x2a,
  672. 0x52, 0x7a, 0xb5, 0x41, 0xff, 0xc5, 0xb8, 0xbf },
  673. }, {
  674. .plaintext = "Tiger",
  675. .psize = 5,
  676. .digest = { 0x9f, 0x00, 0xf5, 0x99, 0x07, 0x23, 0x00, 0xdd,
  677. 0x27, 0x6a, 0xbb, 0x38, 0xc8, 0xeb, 0x6d, 0xec },
  678. }, {
  679. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-",
  680. .psize = 64,
  681. .digest = { 0x87, 0xfb, 0x2a, 0x90, 0x83, 0x85, 0x1c, 0xf7,
  682. 0x47, 0x0d, 0x2c, 0xf8, 0x10, 0xe6, 0xdf, 0x9e },
  683. }, {
  684. .plaintext = "ABCDEFGHIJKLMNOPQRSTUVWXYZ=abcdefghijklmnopqrstuvwxyz+0123456789",
  685. .psize = 64,
  686. .digest = { 0x46, 0x7d, 0xb8, 0x08, 0x63, 0xeb, 0xce, 0x48,
  687. 0x8d, 0xf1, 0xcd, 0x12, 0x61, 0x65, 0x5d, 0xe9 },
  688. }, {
  689. .plaintext = "Tiger - A Fast New Hash Function, "
  690. "by Ross Anderson and Eli Biham, "
  691. "proceedings of Fast Software Encryption 3, "
  692. "Cambridge, 1996.",
  693. .psize = 125,
  694. .digest = { 0x3d, 0x9a, 0xeb, 0x03, 0xd1, 0xbd, 0x1a, 0x63,
  695. 0x57, 0xb2, 0x77, 0x4d, 0xfd, 0x6d, 0x5b, 0x24 },
  696. },
  697. };
  698. /*
  699. * HMAC-MD5 test vectors from RFC2202
  700. * (These need to be fixed to not use strlen).
  701. */
  702. #define HMAC_MD5_TEST_VECTORS 7
  703. static struct hash_testvec hmac_md5_tv_template[] =
  704. {
  705. {
  706. .key = { [0 ... 15] = 0x0b },
  707. .ksize = 16,
  708. .plaintext = "Hi There",
  709. .psize = 8,
  710. .digest = { 0x92, 0x94, 0x72, 0x7a, 0x36, 0x38, 0xbb, 0x1c,
  711. 0x13, 0xf4, 0x8e, 0xf8, 0x15, 0x8b, 0xfc, 0x9d },
  712. }, {
  713. .key = { 'J', 'e', 'f', 'e' },
  714. .ksize = 4,
  715. .plaintext = "what do ya want for nothing?",
  716. .psize = 28,
  717. .digest = { 0x75, 0x0c, 0x78, 0x3e, 0x6a, 0xb0, 0xb5, 0x03,
  718. 0xea, 0xa8, 0x6e, 0x31, 0x0a, 0x5d, 0xb7, 0x38 },
  719. .np = 2,
  720. .tap = {14, 14}
  721. }, {
  722. .key = { [0 ... 15] = 0xaa },
  723. .ksize = 16,
  724. .plaintext = { [0 ... 49] = 0xdd },
  725. .psize = 50,
  726. .digest = { 0x56, 0xbe, 0x34, 0x52, 0x1d, 0x14, 0x4c, 0x88,
  727. 0xdb, 0xb8, 0xc7, 0x33, 0xf0, 0xe8, 0xb3, 0xf6 },
  728. }, {
  729. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  730. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  731. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, },
  732. .ksize = 25,
  733. .plaintext = { [0 ... 49] = 0xcd },
  734. .psize = 50,
  735. .digest = { 0x69, 0x7e, 0xaf, 0x0a, 0xca, 0x3a, 0x3a, 0xea,
  736. 0x3a, 0x75, 0x16, 0x47, 0x46, 0xff, 0xaa, 0x79 },
  737. }, {
  738. .key = { [0 ... 15] = 0x0c },
  739. .ksize = 16,
  740. .plaintext = "Test With Truncation",
  741. .psize = 20,
  742. .digest = { 0x56, 0x46, 0x1e, 0xf2, 0x34, 0x2e, 0xdc, 0x00,
  743. 0xf9, 0xba, 0xb9, 0x95, 0x69, 0x0e, 0xfd, 0x4c },
  744. }, {
  745. .key = { [0 ... 79] = 0xaa },
  746. .ksize = 80,
  747. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  748. .psize = 54,
  749. .digest = { 0x6b, 0x1a, 0xb7, 0xfe, 0x4b, 0xd7, 0xbf, 0x8f,
  750. 0x0b, 0x62, 0xe6, 0xce, 0x61, 0xb9, 0xd0, 0xcd },
  751. }, {
  752. .key = { [0 ... 79] = 0xaa },
  753. .ksize = 80,
  754. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than One "
  755. "Block-Size Data",
  756. .psize = 73,
  757. .digest = { 0x6f, 0x63, 0x0f, 0xad, 0x67, 0xcd, 0xa0, 0xee,
  758. 0x1f, 0xb1, 0xf5, 0x62, 0xdb, 0x3a, 0xa5, 0x3e },
  759. },
  760. };
  761. /*
  762. * HMAC-SHA1 test vectors from RFC2202
  763. */
  764. #define HMAC_SHA1_TEST_VECTORS 7
  765. static struct hash_testvec hmac_sha1_tv_template[] = {
  766. {
  767. .key = { [0 ... 19] = 0x0b },
  768. .ksize = 20,
  769. .plaintext = "Hi There",
  770. .psize = 8,
  771. .digest = { 0xb6, 0x17, 0x31, 0x86, 0x55, 0x05, 0x72, 0x64,
  772. 0xe2, 0x8b, 0xc0, 0xb6, 0xfb, 0x37, 0x8c, 0x8e, 0xf1,
  773. 0x46, 0xbe },
  774. }, {
  775. .key = { 'J', 'e', 'f', 'e' },
  776. .ksize = 4,
  777. .plaintext = "what do ya want for nothing?",
  778. .psize = 28,
  779. .digest = { 0xef, 0xfc, 0xdf, 0x6a, 0xe5, 0xeb, 0x2f, 0xa2, 0xd2, 0x74,
  780. 0x16, 0xd5, 0xf1, 0x84, 0xdf, 0x9c, 0x25, 0x9a, 0x7c, 0x79 },
  781. .np = 2,
  782. .tap = { 14, 14 }
  783. }, {
  784. .key = { [0 ... 19] = 0xaa },
  785. .ksize = 20,
  786. .plaintext = { [0 ... 49] = 0xdd },
  787. .psize = 50,
  788. .digest = { 0x12, 0x5d, 0x73, 0x42, 0xb9, 0xac, 0x11, 0xcd, 0x91, 0xa3,
  789. 0x9a, 0xf4, 0x8a, 0xa1, 0x7b, 0x4f, 0x63, 0xf1, 0x75, 0xd3 },
  790. }, {
  791. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  792. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  793. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19 },
  794. .ksize = 25,
  795. .plaintext = { [0 ... 49] = 0xcd },
  796. .psize = 50,
  797. .digest = { 0x4c, 0x90, 0x07, 0xf4, 0x02, 0x62, 0x50, 0xc6, 0xbc, 0x84,
  798. 0x14, 0xf9, 0xbf, 0x50, 0xc8, 0x6c, 0x2d, 0x72, 0x35, 0xda },
  799. }, {
  800. .key = { [0 ... 19] = 0x0c },
  801. .ksize = 20,
  802. .plaintext = "Test With Truncation",
  803. .psize = 20,
  804. .digest = { 0x4c, 0x1a, 0x03, 0x42, 0x4b, 0x55, 0xe0, 0x7f, 0xe7, 0xf2,
  805. 0x7b, 0xe1, 0xd5, 0x8b, 0xb9, 0x32, 0x4a, 0x9a, 0x5a, 0x04 },
  806. }, {
  807. .key = { [0 ... 79] = 0xaa },
  808. .ksize = 80,
  809. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  810. .psize = 54,
  811. .digest = { 0xaa, 0x4a, 0xe5, 0xe1, 0x52, 0x72, 0xd0, 0x0e, 0x95, 0x70,
  812. 0x56, 0x37, 0xce, 0x8a, 0x3b, 0x55, 0xed, 0x40, 0x21, 0x12 },
  813. }, {
  814. .key = { [0 ... 79] = 0xaa },
  815. .ksize = 80,
  816. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than One "
  817. "Block-Size Data",
  818. .psize = 73,
  819. .digest = { 0xe8, 0xe9, 0x9d, 0x0f, 0x45, 0x23, 0x7d, 0x78, 0x6d, 0x6b,
  820. 0xba, 0xa7, 0x96, 0x5c, 0x78, 0x08, 0xbb, 0xff, 0x1a, 0x91 },
  821. },
  822. };
  823. /*
  824. * SHA224 HMAC test vectors from RFC4231
  825. */
  826. #define HMAC_SHA224_TEST_VECTORS 4
  827. static struct hash_testvec hmac_sha224_tv_template[] = {
  828. {
  829. .key = { 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  830. 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  831. 0x0b, 0x0b, 0x0b, 0x0b },
  832. .ksize = 20,
  833. /* ("Hi There") */
  834. .plaintext = { 0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 },
  835. .psize = 8,
  836. .digest = { 0x89, 0x6f, 0xb1, 0x12, 0x8a, 0xbb, 0xdf, 0x19,
  837. 0x68, 0x32, 0x10, 0x7c, 0xd4, 0x9d, 0xf3, 0x3f,
  838. 0x47, 0xb4, 0xb1, 0x16, 0x99, 0x12, 0xba, 0x4f,
  839. 0x53, 0x68, 0x4b, 0x22},
  840. }, {
  841. .key = { 0x4a, 0x65, 0x66, 0x65 }, /* ("Jefe") */
  842. .ksize = 4,
  843. /* ("what do ya want for nothing?") */
  844. .plaintext = { 0x77, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x20,
  845. 0x79, 0x61, 0x20, 0x77, 0x61, 0x6e, 0x74, 0x20,
  846. 0x66, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x68,
  847. 0x69, 0x6e, 0x67, 0x3f },
  848. .psize = 28,
  849. .digest = { 0xa3, 0x0e, 0x01, 0x09, 0x8b, 0xc6, 0xdb, 0xbf,
  850. 0x45, 0x69, 0x0f, 0x3a, 0x7e, 0x9e, 0x6d, 0x0f,
  851. 0x8b, 0xbe, 0xa2, 0xa3, 0x9e, 0x61, 0x48, 0x00,
  852. 0x8f, 0xd0, 0x5e, 0x44 },
  853. .np = 4,
  854. .tap = { 7, 7, 7, 7 }
  855. }, {
  856. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  857. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  858. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  859. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  860. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  861. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  862. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  863. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  864. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  865. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  866. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  867. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  868. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  869. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  870. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  871. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  872. 0xaa, 0xaa, 0xaa },
  873. .ksize = 131,
  874. /* ("Test Using Larger Than Block-Size Key - Hash Key First") */
  875. .plaintext = { 0x54, 0x65, 0x73, 0x74, 0x20, 0x55, 0x73, 0x69,
  876. 0x6e, 0x67, 0x20, 0x4c, 0x61, 0x72, 0x67, 0x65,
  877. 0x72, 0x20, 0x54, 0x68, 0x61, 0x6e, 0x20, 0x42,
  878. 0x6c, 0x6f, 0x63, 0x6b, 0x2d, 0x53, 0x69, 0x7a,
  879. 0x65, 0x20, 0x4b, 0x65, 0x79, 0x20, 0x2d, 0x20,
  880. 0x48, 0x61, 0x73, 0x68, 0x20, 0x4b, 0x65, 0x79,
  881. 0x20, 0x46, 0x69, 0x72, 0x73, 0x74 },
  882. .psize = 54,
  883. .digest = { 0x95, 0xe9, 0xa0, 0xdb, 0x96, 0x20, 0x95, 0xad,
  884. 0xae, 0xbe, 0x9b, 0x2d, 0x6f, 0x0d, 0xbc, 0xe2,
  885. 0xd4, 0x99, 0xf1, 0x12, 0xf2, 0xd2, 0xb7, 0x27,
  886. 0x3f, 0xa6, 0x87, 0x0e },
  887. }, {
  888. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  889. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  890. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  891. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  892. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  893. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  894. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  895. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  896. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  897. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  898. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  899. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  900. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  901. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  902. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  903. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  904. 0xaa, 0xaa, 0xaa },
  905. .ksize = 131,
  906. /* ("This is a test using a larger than block-size key and a")
  907. (" larger than block-size data. The key needs to be")
  908. (" hashed before being used by the HMAC algorithm.") */
  909. .plaintext = { 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20,
  910. 0x61, 0x20, 0x74, 0x65, 0x73, 0x74, 0x20, 0x75,
  911. 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x6c,
  912. 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, 0x68,
  913. 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b,
  914. 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x6b, 0x65,
  915. 0x79, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20,
  916. 0x6c, 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74,
  917. 0x68, 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63,
  918. 0x6b, 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x64,
  919. 0x61, 0x74, 0x61, 0x2e, 0x20, 0x54, 0x68, 0x65,
  920. 0x20, 0x6b, 0x65, 0x79, 0x20, 0x6e, 0x65, 0x65,
  921. 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65,
  922. 0x20, 0x68, 0x61, 0x73, 0x68, 0x65, 0x64, 0x20,
  923. 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x62,
  924. 0x65, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65,
  925. 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65,
  926. 0x20, 0x48, 0x4d, 0x41, 0x43, 0x20, 0x61, 0x6c,
  927. 0x67, 0x6f, 0x72, 0x69, 0x74, 0x68, 0x6d, 0x2e },
  928. .psize = 152,
  929. .digest = { 0x3a, 0x85, 0x41, 0x66, 0xac, 0x5d, 0x9f, 0x02,
  930. 0x3f, 0x54, 0xd5, 0x17, 0xd0, 0xb3, 0x9d, 0xbd,
  931. 0x94, 0x67, 0x70, 0xdb, 0x9c, 0x2b, 0x95, 0xc9,
  932. 0xf6, 0xf5, 0x65, 0xd1 },
  933. },
  934. };
  935. /*
  936. * HMAC-SHA256 test vectors from
  937. * draft-ietf-ipsec-ciph-sha-256-01.txt
  938. */
  939. #define HMAC_SHA256_TEST_VECTORS 10
  940. static struct hash_testvec hmac_sha256_tv_template[] = {
  941. {
  942. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  943. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  944. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  945. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20},
  946. .ksize = 32,
  947. .plaintext = "abc",
  948. .psize = 3,
  949. .digest = { 0xa2, 0x1b, 0x1f, 0x5d, 0x4c, 0xf4, 0xf7, 0x3a,
  950. 0x4d, 0xd9, 0x39, 0x75, 0x0f, 0x7a, 0x06, 0x6a,
  951. 0x7f, 0x98, 0xcc, 0x13, 0x1c, 0xb1, 0x6a, 0x66,
  952. 0x92, 0x75, 0x90, 0x21, 0xcf, 0xab, 0x81, 0x81 },
  953. }, {
  954. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  955. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  956. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  957. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20 },
  958. .ksize = 32,
  959. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  960. .psize = 56,
  961. .digest = { 0x10, 0x4f, 0xdc, 0x12, 0x57, 0x32, 0x8f, 0x08,
  962. 0x18, 0x4b, 0xa7, 0x31, 0x31, 0xc5, 0x3c, 0xae,
  963. 0xe6, 0x98, 0xe3, 0x61, 0x19, 0x42, 0x11, 0x49,
  964. 0xea, 0x8c, 0x71, 0x24, 0x56, 0x69, 0x7d, 0x30 },
  965. }, {
  966. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  967. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  968. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  969. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20 },
  970. .ksize = 32,
  971. .plaintext = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
  972. "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  973. .psize = 112,
  974. .digest = { 0x47, 0x03, 0x05, 0xfc, 0x7e, 0x40, 0xfe, 0x34,
  975. 0xd3, 0xee, 0xb3, 0xe7, 0x73, 0xd9, 0x5a, 0xab,
  976. 0x73, 0xac, 0xf0, 0xfd, 0x06, 0x04, 0x47, 0xa5,
  977. 0xeb, 0x45, 0x95, 0xbf, 0x33, 0xa9, 0xd1, 0xa3 },
  978. }, {
  979. .key = { [0 ... 31] = 0x0b },
  980. .ksize = 32,
  981. .plaintext = "Hi There",
  982. .psize = 8,
  983. .digest = { 0x19, 0x8a, 0x60, 0x7e, 0xb4, 0x4b, 0xfb, 0xc6,
  984. 0x99, 0x03, 0xa0, 0xf1, 0xcf, 0x2b, 0xbd, 0xc5,
  985. 0xba, 0x0a, 0xa3, 0xf3, 0xd9, 0xae, 0x3c, 0x1c,
  986. 0x7a, 0x3b, 0x16, 0x96, 0xa0, 0xb6, 0x8c, 0xf7 },
  987. }, {
  988. .key = "Jefe",
  989. .ksize = 4,
  990. .plaintext = "what do ya want for nothing?",
  991. .psize = 28,
  992. .digest = { 0x5b, 0xdc, 0xc1, 0x46, 0xbf, 0x60, 0x75, 0x4e,
  993. 0x6a, 0x04, 0x24, 0x26, 0x08, 0x95, 0x75, 0xc7,
  994. 0x5a, 0x00, 0x3f, 0x08, 0x9d, 0x27, 0x39, 0x83,
  995. 0x9d, 0xec, 0x58, 0xb9, 0x64, 0xec, 0x38, 0x43 },
  996. .np = 2,
  997. .tap = { 14, 14 }
  998. }, {
  999. .key = { [0 ... 31] = 0xaa },
  1000. .ksize = 32,
  1001. .plaintext = { [0 ... 49] = 0xdd },
  1002. .psize = 50,
  1003. .digest = { 0xcd, 0xcb, 0x12, 0x20, 0xd1, 0xec, 0xcc, 0xea,
  1004. 0x91, 0xe5, 0x3a, 0xba, 0x30, 0x92, 0xf9, 0x62,
  1005. 0xe5, 0x49, 0xfe, 0x6c, 0xe9, 0xed, 0x7f, 0xdc,
  1006. 0x43, 0x19, 0x1f, 0xbd, 0xe4, 0x5c, 0x30, 0xb0 },
  1007. }, {
  1008. .key = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  1009. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  1010. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  1011. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
  1012. 0x21, 0x22, 0x23, 0x24, 0x25 },
  1013. .ksize = 37,
  1014. .plaintext = { [0 ... 49] = 0xcd },
  1015. .psize = 50,
  1016. .digest = { 0xd4, 0x63, 0x3c, 0x17, 0xf6, 0xfb, 0x8d, 0x74,
  1017. 0x4c, 0x66, 0xde, 0xe0, 0xf8, 0xf0, 0x74, 0x55,
  1018. 0x6e, 0xc4, 0xaf, 0x55, 0xef, 0x07, 0x99, 0x85,
  1019. 0x41, 0x46, 0x8e, 0xb4, 0x9b, 0xd2, 0xe9, 0x17 },
  1020. }, {
  1021. .key = { [0 ... 31] = 0x0c },
  1022. .ksize = 32,
  1023. .plaintext = "Test With Truncation",
  1024. .psize = 20,
  1025. .digest = { 0x75, 0x46, 0xaf, 0x01, 0x84, 0x1f, 0xc0, 0x9b,
  1026. 0x1a, 0xb9, 0xc3, 0x74, 0x9a, 0x5f, 0x1c, 0x17,
  1027. 0xd4, 0xf5, 0x89, 0x66, 0x8a, 0x58, 0x7b, 0x27,
  1028. 0x00, 0xa9, 0xc9, 0x7c, 0x11, 0x93, 0xcf, 0x42 },
  1029. }, {
  1030. .key = { [0 ... 79] = 0xaa },
  1031. .ksize = 80,
  1032. .plaintext = "Test Using Larger Than Block-Size Key - Hash Key First",
  1033. .psize = 54,
  1034. .digest = { 0x69, 0x53, 0x02, 0x5e, 0xd9, 0x6f, 0x0c, 0x09,
  1035. 0xf8, 0x0a, 0x96, 0xf7, 0x8e, 0x65, 0x38, 0xdb,
  1036. 0xe2, 0xe7, 0xb8, 0x20, 0xe3, 0xdd, 0x97, 0x0e,
  1037. 0x7d, 0xdd, 0x39, 0x09, 0x1b, 0x32, 0x35, 0x2f },
  1038. }, {
  1039. .key = { [0 ... 79] = 0xaa },
  1040. .ksize = 80,
  1041. .plaintext = "Test Using Larger Than Block-Size Key and Larger Than "
  1042. "One Block-Size Data",
  1043. .psize = 73,
  1044. .digest = { 0x63, 0x55, 0xac, 0x22, 0xe8, 0x90, 0xd0, 0xa3,
  1045. 0xc8, 0x48, 0x1a, 0x5c, 0xa4, 0x82, 0x5b, 0xc8,
  1046. 0x84, 0xd3, 0xe7, 0xa1, 0xff, 0x98, 0xa2, 0xfc,
  1047. 0x2a, 0xc7, 0xd8, 0xe0, 0x64, 0xc3, 0xb2, 0xe6 },
  1048. },
  1049. };
  1050. #define XCBC_AES_TEST_VECTORS 6
  1051. static struct hash_testvec aes_xcbc128_tv_template[] = {
  1052. {
  1053. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1054. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1055. .plaintext = { [0 ... 15] = 0 },
  1056. .digest = { 0x75, 0xf0, 0x25, 0x1d, 0x52, 0x8a, 0xc0, 0x1c,
  1057. 0x45, 0x73, 0xdf, 0xd5, 0x84, 0xd7, 0x9f, 0x29 },
  1058. .psize = 0,
  1059. .ksize = 16,
  1060. }, {
  1061. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1062. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1063. .plaintext = { 0x00, 0x01, 0x02 },
  1064. .digest = { 0x5b, 0x37, 0x65, 0x80, 0xae, 0x2f, 0x19, 0xaf,
  1065. 0xe7, 0x21, 0x9c, 0xee, 0xf1, 0x72, 0x75, 0x6f },
  1066. .psize = 3,
  1067. .ksize = 16,
  1068. } , {
  1069. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1070. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1071. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1072. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1073. .digest = { 0xd2, 0xa2, 0x46, 0xfa, 0x34, 0x9b, 0x68, 0xa7,
  1074. 0x99, 0x98, 0xa4, 0x39, 0x4f, 0xf7, 0xa2, 0x63 },
  1075. .psize = 16,
  1076. .ksize = 16,
  1077. }, {
  1078. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1079. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1080. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1081. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1082. 0x10, 0x11, 0x12, 0x13 },
  1083. .digest = { 0x47, 0xf5, 0x1b, 0x45, 0x64, 0x96, 0x62, 0x15,
  1084. 0xb8, 0x98, 0x5c, 0x63, 0x05, 0x5e, 0xd3, 0x08 },
  1085. .tap = { 10, 10 },
  1086. .psize = 20,
  1087. .np = 2,
  1088. .ksize = 16,
  1089. }, {
  1090. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1091. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1092. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1093. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1094. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1095. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  1096. .digest = { 0xf5, 0x4f, 0x0e, 0xc8, 0xd2, 0xb9, 0xf3, 0xd3,
  1097. 0x68, 0x07, 0x73, 0x4b, 0xd5, 0x28, 0x3f, 0xd4 },
  1098. .psize = 32,
  1099. .ksize = 16,
  1100. }, {
  1101. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1102. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1103. .plaintext = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1104. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1105. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1106. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  1107. 0x20, 0x21 },
  1108. .digest = { 0xbe, 0xcb, 0xb3, 0xbc, 0xcd, 0xb5, 0x18, 0xa3,
  1109. 0x06, 0x77, 0xd5, 0x48, 0x1f, 0xb6, 0xb4, 0xd8 },
  1110. .tap = { 17, 17 },
  1111. .psize = 34,
  1112. .np = 2,
  1113. .ksize = 16,
  1114. }
  1115. };
  1116. /*
  1117. * SHA384 HMAC test vectors from RFC4231
  1118. */
  1119. #define HMAC_SHA384_TEST_VECTORS 4
  1120. static struct hash_testvec hmac_sha384_tv_template[] = {
  1121. {
  1122. .key = { 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1123. 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1124. 0x0b, 0x0b, 0x0b, 0x0b }, // (20 bytes)
  1125. .ksize = 20,
  1126. .plaintext = { 0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 }, // ("Hi There")
  1127. .psize = 8,
  1128. .digest = { 0xaf, 0xd0, 0x39, 0x44, 0xd8, 0x48, 0x95, 0x62,
  1129. 0x6b, 0x08, 0x25, 0xf4, 0xab, 0x46, 0x90, 0x7f,
  1130. 0x15, 0xf9, 0xda, 0xdb, 0xe4, 0x10, 0x1e, 0xc6,
  1131. 0x82, 0xaa, 0x03, 0x4c, 0x7c, 0xeb, 0xc5, 0x9c,
  1132. 0xfa, 0xea, 0x9e, 0xa9, 0x07, 0x6e, 0xde, 0x7f,
  1133. 0x4a, 0xf1, 0x52, 0xe8, 0xb2, 0xfa, 0x9c, 0xb6 },
  1134. }, {
  1135. .key = { 0x4a, 0x65, 0x66, 0x65 }, // ("Jefe")
  1136. .ksize = 4,
  1137. .plaintext = { 0x77, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x20,
  1138. 0x79, 0x61, 0x20, 0x77, 0x61, 0x6e, 0x74, 0x20, // ("what do ya want ")
  1139. 0x66, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x68,
  1140. 0x69, 0x6e, 0x67, 0x3f }, // ("for nothing?")
  1141. .psize = 28,
  1142. .digest = { 0xaf, 0x45, 0xd2, 0xe3, 0x76, 0x48, 0x40, 0x31,
  1143. 0x61, 0x7f, 0x78, 0xd2, 0xb5, 0x8a, 0x6b, 0x1b,
  1144. 0x9c, 0x7e, 0xf4, 0x64, 0xf5, 0xa0, 0x1b, 0x47,
  1145. 0xe4, 0x2e, 0xc3, 0x73, 0x63, 0x22, 0x44, 0x5e,
  1146. 0x8e, 0x22, 0x40, 0xca, 0x5e, 0x69, 0xe2, 0xc7,
  1147. 0x8b, 0x32, 0x39, 0xec, 0xfa, 0xb2, 0x16, 0x49 },
  1148. .np = 4,
  1149. .tap = { 7, 7, 7, 7 }
  1150. }, {
  1151. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1152. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1153. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1154. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1155. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1156. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1157. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1158. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1159. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1160. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1161. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1162. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1163. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1164. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1165. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1166. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1167. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1168. .ksize = 131,
  1169. .plaintext = { 0x54, 0x65, 0x73, 0x74, 0x20, 0x55, 0x73, 0x69,
  1170. 0x6e, 0x67, 0x20, 0x4c, 0x61, 0x72, 0x67, 0x65, // ("Test Using Large")
  1171. 0x72, 0x20, 0x54, 0x68, 0x61, 0x6e, 0x20, 0x42,
  1172. 0x6c, 0x6f, 0x63, 0x6b, 0x2d, 0x53, 0x69, 0x7a, // ("r Than Block-Siz")
  1173. 0x65, 0x20, 0x4b, 0x65, 0x79, 0x20, 0x2d, 0x20,
  1174. 0x48, 0x61, 0x73, 0x68, 0x20, 0x4b, 0x65, 0x79, // ("e Key - Hash Key")
  1175. 0x20, 0x46, 0x69, 0x72, 0x73, 0x74 }, // (" First")
  1176. .psize = 54,
  1177. .digest = { 0x4e, 0xce, 0x08, 0x44, 0x85, 0x81, 0x3e, 0x90,
  1178. 0x88, 0xd2, 0xc6, 0x3a, 0x04, 0x1b, 0xc5, 0xb4,
  1179. 0x4f, 0x9e, 0xf1, 0x01, 0x2a, 0x2b, 0x58, 0x8f,
  1180. 0x3c, 0xd1, 0x1f, 0x05, 0x03, 0x3a, 0xc4, 0xc6,
  1181. 0x0c, 0x2e, 0xf6, 0xab, 0x40, 0x30, 0xfe, 0x82,
  1182. 0x96, 0x24, 0x8d, 0xf1, 0x63, 0xf4, 0x49, 0x52 },
  1183. }, {
  1184. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1185. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1186. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1187. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1188. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1189. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1190. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1191. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1192. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1193. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1194. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1195. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1196. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1197. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1198. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1199. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1200. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1201. .ksize = 131,
  1202. .plaintext = { 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20,
  1203. 0x61, 0x20, 0x74, 0x65, 0x73, 0x74, 0x20, 0x75, // ("This is a test u")
  1204. 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x6c,
  1205. 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, 0x68, // ("sing a larger th")
  1206. 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b,
  1207. 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x6b, 0x65, // ("an block-size ke")
  1208. 0x79, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20,
  1209. 0x6c, 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, // ("y and a larger t")
  1210. 0x68, 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63,
  1211. 0x6b, 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x64, // ("han block-size d")
  1212. 0x61, 0x74, 0x61, 0x2e, 0x20, 0x54, 0x68, 0x65,
  1213. 0x20, 0x6b, 0x65, 0x79, 0x20, 0x6e, 0x65, 0x65, // ("ata. The key nee")
  1214. 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65,
  1215. 0x20, 0x68, 0x61, 0x73, 0x68, 0x65, 0x64, 0x20, // ("ds to be hashed ")
  1216. 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x62,
  1217. 0x65, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, // ("before being use")
  1218. 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65,
  1219. 0x20, 0x48, 0x4d, 0x41, 0x43, 0x20, 0x61, 0x6c, // ("d by the HMAC al")
  1220. 0x67, 0x6f, 0x72, 0x69, 0x74, 0x68, 0x6d, 0x2e }, // ("gorithm.")
  1221. .psize = 152,
  1222. .digest = { 0x66, 0x17, 0x17, 0x8e, 0x94, 0x1f, 0x02, 0x0d,
  1223. 0x35, 0x1e, 0x2f, 0x25, 0x4e, 0x8f, 0xd3, 0x2c,
  1224. 0x60, 0x24, 0x20, 0xfe, 0xb0, 0xb8, 0xfb, 0x9a,
  1225. 0xdc, 0xce, 0xbb, 0x82, 0x46, 0x1e, 0x99, 0xc5,
  1226. 0xa6, 0x78, 0xcc, 0x31, 0xe7, 0x99, 0x17, 0x6d,
  1227. 0x38, 0x60, 0xe6, 0x11, 0x0c, 0x46, 0x52, 0x3e },
  1228. },
  1229. };
  1230. /*
  1231. * SHA512 HMAC test vectors from RFC4231
  1232. */
  1233. #define HMAC_SHA512_TEST_VECTORS 4
  1234. static struct hash_testvec hmac_sha512_tv_template[] = {
  1235. {
  1236. .key = { 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1237. 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
  1238. 0x0b, 0x0b, 0x0b, 0x0b }, // (20 bytes)
  1239. .ksize = 20,
  1240. .plaintext = { 0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 }, // ("Hi There")
  1241. .psize = 8,
  1242. .digest = { 0x87, 0xaa, 0x7c, 0xde, 0xa5, 0xef, 0x61, 0x9d,
  1243. 0x4f, 0xf0, 0xb4, 0x24, 0x1a, 0x1d, 0x6c, 0xb0,
  1244. 0x23, 0x79, 0xf4, 0xe2, 0xce, 0x4e, 0xc2, 0x78,
  1245. 0x7a, 0xd0, 0xb3, 0x05, 0x45, 0xe1, 0x7c, 0xde,
  1246. 0xda, 0xa8, 0x33, 0xb7, 0xd6, 0xb8, 0xa7, 0x02,
  1247. 0x03, 0x8b, 0x27, 0x4e, 0xae, 0xa3, 0xf4, 0xe4,
  1248. 0xbe, 0x9d, 0x91, 0x4e, 0xeb, 0x61, 0xf1, 0x70,
  1249. 0x2e, 0x69, 0x6c, 0x20, 0x3a, 0x12, 0x68, 0x54 },
  1250. }, {
  1251. .key = { 0x4a, 0x65, 0x66, 0x65 }, // ("Jefe")
  1252. .ksize = 4,
  1253. .plaintext = { 0x77, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x20,
  1254. 0x79, 0x61, 0x20, 0x77, 0x61, 0x6e, 0x74, 0x20, // ("what do ya want ")
  1255. 0x66, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x68,
  1256. 0x69, 0x6e, 0x67, 0x3f }, // ("for nothing?")
  1257. .psize = 28,
  1258. .digest = { 0x16, 0x4b, 0x7a, 0x7b, 0xfc, 0xf8, 0x19, 0xe2,
  1259. 0xe3, 0x95, 0xfb, 0xe7, 0x3b, 0x56, 0xe0, 0xa3,
  1260. 0x87, 0xbd, 0x64, 0x22, 0x2e, 0x83, 0x1f, 0xd6,
  1261. 0x10, 0x27, 0x0c, 0xd7, 0xea, 0x25, 0x05, 0x54,
  1262. 0x97, 0x58, 0xbf, 0x75, 0xc0, 0x5a, 0x99, 0x4a,
  1263. 0x6d, 0x03, 0x4f, 0x65, 0xf8, 0xf0, 0xe6, 0xfd,
  1264. 0xca, 0xea, 0xb1, 0xa3, 0x4d, 0x4a, 0x6b, 0x4b,
  1265. 0x63, 0x6e, 0x07, 0x0a, 0x38, 0xbc, 0xe7, 0x37 },
  1266. .np = 4,
  1267. .tap = { 7, 7, 7, 7 }
  1268. }, {
  1269. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1270. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1271. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1272. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1273. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1274. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1275. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1276. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1277. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1278. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1279. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1280. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1281. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1282. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1283. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1284. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1285. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1286. .ksize = 131,
  1287. .plaintext = { 0x54, 0x65, 0x73, 0x74, 0x20, 0x55, 0x73, 0x69,
  1288. 0x6e, 0x67, 0x20, 0x4c, 0x61, 0x72, 0x67, 0x65, // ("Test Using Large")
  1289. 0x72, 0x20, 0x54, 0x68, 0x61, 0x6e, 0x20, 0x42,
  1290. 0x6c, 0x6f, 0x63, 0x6b, 0x2d, 0x53, 0x69, 0x7a, // ("r Than Block-Siz")
  1291. 0x65, 0x20, 0x4b, 0x65, 0x79, 0x20, 0x2d, 0x20,
  1292. 0x48, 0x61, 0x73, 0x68, 0x20, 0x4b, 0x65, 0x79, // ("e Key - Hash Key")
  1293. 0x20, 0x46, 0x69, 0x72, 0x73, 0x74 }, // (" First")
  1294. .psize = 54,
  1295. .digest = { 0x80, 0xb2, 0x42, 0x63, 0xc7, 0xc1, 0xa3, 0xeb,
  1296. 0xb7, 0x14, 0x93, 0xc1, 0xdd, 0x7b, 0xe8, 0xb4,
  1297. 0x9b, 0x46, 0xd1, 0xf4, 0x1b, 0x4a, 0xee, 0xc1,
  1298. 0x12, 0x1b, 0x01, 0x37, 0x83, 0xf8, 0xf3, 0x52,
  1299. 0x6b, 0x56, 0xd0, 0x37, 0xe0, 0x5f, 0x25, 0x98,
  1300. 0xbd, 0x0f, 0xd2, 0x21, 0x5d, 0x6a, 0x1e, 0x52,
  1301. 0x95, 0xe6, 0x4f, 0x73, 0xf6, 0x3f, 0x0a, 0xec,
  1302. 0x8b, 0x91, 0x5a, 0x98, 0x5d, 0x78, 0x65, 0x98 },
  1303. }, {
  1304. .key = { 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1305. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1306. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1307. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1308. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1309. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1310. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1311. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1312. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1313. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1314. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1315. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1316. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1317. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1318. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1319. 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa,
  1320. 0xaa, 0xaa, 0xaa }, // (131 bytes)
  1321. .ksize = 131,
  1322. .plaintext = { 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20,
  1323. 0x61, 0x20, 0x74, 0x65, 0x73, 0x74, 0x20, 0x75, // ("This is a test u")
  1324. 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x6c,
  1325. 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, 0x68, // ("sing a larger th")
  1326. 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b,
  1327. 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x6b, 0x65, // ("an block-size ke")
  1328. 0x79, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20,
  1329. 0x6c, 0x61, 0x72, 0x67, 0x65, 0x72, 0x20, 0x74, // ("y and a larger t")
  1330. 0x68, 0x61, 0x6e, 0x20, 0x62, 0x6c, 0x6f, 0x63,
  1331. 0x6b, 0x2d, 0x73, 0x69, 0x7a, 0x65, 0x20, 0x64, // ("han block-size d")
  1332. 0x61, 0x74, 0x61, 0x2e, 0x20, 0x54, 0x68, 0x65,
  1333. 0x20, 0x6b, 0x65, 0x79, 0x20, 0x6e, 0x65, 0x65, // ("ata. The key nee")
  1334. 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65,
  1335. 0x20, 0x68, 0x61, 0x73, 0x68, 0x65, 0x64, 0x20, // ("ds to be hashed ")
  1336. 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x62,
  1337. 0x65, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, // ("before being use")
  1338. 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65,
  1339. 0x20, 0x48, 0x4d, 0x41, 0x43, 0x20, 0x61, 0x6c, // ("d by the HMAC al")
  1340. 0x67, 0x6f, 0x72, 0x69, 0x74, 0x68, 0x6d, 0x2e }, // ("gorithm.")
  1341. .psize = 152,
  1342. .digest = { 0xe3, 0x7b, 0x6a, 0x77, 0x5d, 0xc8, 0x7d, 0xba,
  1343. 0xa4, 0xdf, 0xa9, 0xf9, 0x6e, 0x5e, 0x3f, 0xfd,
  1344. 0xde, 0xbd, 0x71, 0xf8, 0x86, 0x72, 0x89, 0x86,
  1345. 0x5d, 0xf5, 0xa3, 0x2d, 0x20, 0xcd, 0xc9, 0x44,
  1346. 0xb6, 0x02, 0x2c, 0xac, 0x3c, 0x49, 0x82, 0xb1,
  1347. 0x0d, 0x5e, 0xeb, 0x55, 0xc3, 0xe4, 0xde, 0x15,
  1348. 0x13, 0x46, 0x76, 0xfb, 0x6d, 0xe0, 0x44, 0x60,
  1349. 0x65, 0xc9, 0x74, 0x40, 0xfa, 0x8c, 0x6a, 0x58 },
  1350. },
  1351. };
  1352. /*
  1353. * DES test vectors.
  1354. */
  1355. #define DES_ENC_TEST_VECTORS 10
  1356. #define DES_DEC_TEST_VECTORS 4
  1357. #define DES_CBC_ENC_TEST_VECTORS 5
  1358. #define DES_CBC_DEC_TEST_VECTORS 4
  1359. #define DES3_EDE_ENC_TEST_VECTORS 3
  1360. #define DES3_EDE_DEC_TEST_VECTORS 3
  1361. static struct cipher_testvec des_enc_tv_template[] = {
  1362. { /* From Applied Cryptography */
  1363. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1364. .klen = 8,
  1365. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1366. .ilen = 8,
  1367. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1368. .rlen = 8,
  1369. }, { /* Same key, different plaintext block */
  1370. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1371. .klen = 8,
  1372. .input = { 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1373. .ilen = 8,
  1374. .result = { 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1375. .rlen = 8,
  1376. }, { /* Sbox test from NBS */
  1377. .key = { 0x7c, 0xa1, 0x10, 0x45, 0x4a, 0x1a, 0x6e, 0x57 },
  1378. .klen = 8,
  1379. .input = { 0x01, 0xa1, 0xd6, 0xd0, 0x39, 0x77, 0x67, 0x42 },
  1380. .ilen = 8,
  1381. .result = { 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1382. .rlen = 8,
  1383. }, { /* Three blocks */
  1384. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1385. .klen = 8,
  1386. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1387. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  1388. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef },
  1389. .ilen = 24,
  1390. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1391. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  1392. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90 },
  1393. .rlen = 24,
  1394. }, { /* Weak key */
  1395. .fail = 1,
  1396. .wk = 1,
  1397. .key = { 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 },
  1398. .klen = 8,
  1399. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1400. .ilen = 8,
  1401. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1402. .rlen = 8,
  1403. }, { /* Two blocks -- for testing encryption across pages */
  1404. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1405. .klen = 8,
  1406. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1407. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1408. .ilen = 16,
  1409. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1410. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1411. .rlen = 16,
  1412. .np = 2,
  1413. .tap = { 8, 8 }
  1414. }, { /* Four blocks -- for testing encryption with chunking */
  1415. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1416. .klen = 8,
  1417. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1418. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  1419. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef,
  1420. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1421. .ilen = 32,
  1422. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1423. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  1424. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90,
  1425. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1426. .rlen = 32,
  1427. .np = 3,
  1428. .tap = { 14, 10, 8 }
  1429. }, {
  1430. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1431. .klen = 8,
  1432. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1433. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
  1434. 0xca, 0xfe, 0xba, 0xbe, 0xfe, 0xed, 0xbe, 0xef },
  1435. .ilen = 24,
  1436. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1437. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b,
  1438. 0xb4, 0x99, 0x26, 0xf7, 0x1f, 0xe1, 0xd4, 0x90 },
  1439. .rlen = 24,
  1440. .np = 4,
  1441. .tap = { 2, 1, 3, 18 }
  1442. }, {
  1443. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1444. .klen = 8,
  1445. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1446. 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99 },
  1447. .ilen = 16,
  1448. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1449. 0xf7, 0x9c, 0x89, 0x2a, 0x33, 0x8f, 0x4a, 0x8b },
  1450. .rlen = 16,
  1451. .np = 5,
  1452. .tap = { 2, 2, 2, 2, 8 }
  1453. }, {
  1454. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1455. .klen = 8,
  1456. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1457. .ilen = 8,
  1458. .result = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1459. .rlen = 8,
  1460. .np = 8,
  1461. .tap = { 1, 1, 1, 1, 1, 1, 1, 1 }
  1462. },
  1463. };
  1464. static struct cipher_testvec des_dec_tv_template[] = {
  1465. { /* From Applied Cryptography */
  1466. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1467. .klen = 8,
  1468. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d },
  1469. .ilen = 8,
  1470. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7 },
  1471. .rlen = 8,
  1472. }, { /* Sbox test from NBS */
  1473. .key = { 0x7c, 0xa1, 0x10, 0x45, 0x4a, 0x1a, 0x6e, 0x57 },
  1474. .klen = 8,
  1475. .input = { 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1476. .ilen = 8,
  1477. .result = { 0x01, 0xa1, 0xd6, 0xd0, 0x39, 0x77, 0x67, 0x42 },
  1478. .rlen = 8,
  1479. }, { /* Two blocks, for chunking test */
  1480. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1481. .klen = 8,
  1482. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1483. 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1484. .ilen = 16,
  1485. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1486. 0xa3, 0x99, 0x7b, 0xca, 0xaf, 0x69, 0xa0, 0xf5 },
  1487. .rlen = 16,
  1488. .np = 2,
  1489. .tap = { 8, 8 }
  1490. }, {
  1491. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1492. .klen = 8,
  1493. .input = { 0xc9, 0x57, 0x44, 0x25, 0x6a, 0x5e, 0xd3, 0x1d,
  1494. 0x69, 0x0f, 0x5b, 0x0d, 0x9a, 0x26, 0x93, 0x9b },
  1495. .ilen = 16,
  1496. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xe7,
  1497. 0xa3, 0x99, 0x7b, 0xca, 0xaf, 0x69, 0xa0, 0xf5 },
  1498. .rlen = 16,
  1499. .np = 3,
  1500. .tap = { 3, 12, 1 }
  1501. },
  1502. };
  1503. static struct cipher_testvec des_cbc_enc_tv_template[] = {
  1504. { /* From OpenSSL */
  1505. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef},
  1506. .klen = 8,
  1507. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1508. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1509. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1510. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1511. .ilen = 24,
  1512. .result = { 0xcc, 0xd1, 0x73, 0xff, 0xab, 0x20, 0x39, 0xf4,
  1513. 0xac, 0xd8, 0xae, 0xfd, 0xdf, 0xd8, 0xa1, 0xeb,
  1514. 0x46, 0x8e, 0x91, 0x15, 0x78, 0x88, 0xba, 0x68 },
  1515. .rlen = 24,
  1516. }, { /* FIPS Pub 81 */
  1517. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1518. .klen = 8,
  1519. .iv = { 0x12, 0x34, 0x56, 0x78, 0x90, 0xab, 0xcd, 0xef },
  1520. .input = { 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74 },
  1521. .ilen = 8,
  1522. .result = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1523. .rlen = 8,
  1524. }, {
  1525. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1526. .klen = 8,
  1527. .iv = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1528. .input = { 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1529. .ilen = 8,
  1530. .result = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1531. .rlen = 8,
  1532. }, {
  1533. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1534. .klen = 8,
  1535. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1536. .input = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1537. .ilen = 8,
  1538. .result = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1539. .rlen = 8,
  1540. }, { /* Copy of openssl vector for chunk testing */
  1541. /* From OpenSSL */
  1542. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef},
  1543. .klen = 8,
  1544. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1545. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1546. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1547. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1548. .ilen = 24,
  1549. .result = { 0xcc, 0xd1, 0x73, 0xff, 0xab, 0x20, 0x39, 0xf4,
  1550. 0xac, 0xd8, 0xae, 0xfd, 0xdf, 0xd8, 0xa1, 0xeb,
  1551. 0x46, 0x8e, 0x91, 0x15, 0x78, 0x88, 0xba, 0x68 },
  1552. .rlen = 24,
  1553. .np = 2,
  1554. .tap = { 13, 11 }
  1555. },
  1556. };
  1557. static struct cipher_testvec des_cbc_dec_tv_template[] = {
  1558. { /* FIPS Pub 81 */
  1559. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1560. .klen = 8,
  1561. .iv = { 0x12, 0x34, 0x56, 0x78, 0x90, 0xab, 0xcd, 0xef },
  1562. .input = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1563. .ilen = 8,
  1564. .result = { 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74 },
  1565. .rlen = 8,
  1566. }, {
  1567. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1568. .klen = 8,
  1569. .iv = { 0xe5, 0xc7, 0xcd, 0xde, 0x87, 0x2b, 0xf2, 0x7c },
  1570. .input = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1571. .ilen = 8,
  1572. .result = { 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20 },
  1573. .rlen = 8,
  1574. }, {
  1575. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1576. .klen = 8,
  1577. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1578. .input = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1579. .ilen = 8,
  1580. .result = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1581. .rlen = 8,
  1582. }, { /* Copy of above, for chunk testing */
  1583. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1584. .klen = 8,
  1585. .iv = { 0x43, 0xe9, 0x34, 0x00, 0x8c, 0x38, 0x9c, 0x0f },
  1586. .input = { 0x68, 0x37, 0x88, 0x49, 0x9a, 0x7c, 0x05, 0xf6 },
  1587. .ilen = 8,
  1588. .result = { 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20 },
  1589. .rlen = 8,
  1590. .np = 2,
  1591. .tap = { 4, 4 }
  1592. },
  1593. };
  1594. /*
  1595. * We really need some more test vectors, especially for DES3 CBC.
  1596. */
  1597. static struct cipher_testvec des3_ede_enc_tv_template[] = {
  1598. { /* These are from openssl */
  1599. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1600. 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
  1601. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1602. .klen = 24,
  1603. .input = { 0x73, 0x6f, 0x6d, 0x65, 0x64, 0x61, 0x74, 0x61 },
  1604. .ilen = 8,
  1605. .result = { 0x18, 0xd7, 0x48, 0xe5, 0x63, 0x62, 0x05, 0x72 },
  1606. .rlen = 8,
  1607. }, {
  1608. .key = { 0x03, 0x52, 0x02, 0x07, 0x67, 0x20, 0x82, 0x17,
  1609. 0x86, 0x02, 0x87, 0x66, 0x59, 0x08, 0x21, 0x98,
  1610. 0x64, 0x05, 0x6a, 0xbd, 0xfe, 0xa9, 0x34, 0x57 },
  1611. .klen = 24,
  1612. .input = { 0x73, 0x71, 0x75, 0x69, 0x67, 0x67, 0x6c, 0x65 },
  1613. .ilen = 8,
  1614. .result = { 0xc0, 0x7d, 0x2a, 0x0f, 0xa5, 0x66, 0xfa, 0x30 },
  1615. .rlen = 8,
  1616. }, {
  1617. .key = { 0x10, 0x46, 0x10, 0x34, 0x89, 0x98, 0x80, 0x20,
  1618. 0x91, 0x07, 0xd0, 0x15, 0x89, 0x19, 0x01, 0x01,
  1619. 0x19, 0x07, 0x92, 0x10, 0x98, 0x1a, 0x01, 0x01 },
  1620. .klen = 24,
  1621. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1622. .ilen = 8,
  1623. .result = { 0xe1, 0xef, 0x62, 0xc3, 0x32, 0xfe, 0x82, 0x5b },
  1624. .rlen = 8,
  1625. },
  1626. };
  1627. static struct cipher_testvec des3_ede_dec_tv_template[] = {
  1628. { /* These are from openssl */
  1629. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1630. 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
  1631. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
  1632. .klen = 24,
  1633. .input = { 0x18, 0xd7, 0x48, 0xe5, 0x63, 0x62, 0x05, 0x72 },
  1634. .ilen = 8,
  1635. .result = { 0x73, 0x6f, 0x6d, 0x65, 0x64, 0x61, 0x74, 0x61 },
  1636. .rlen = 8,
  1637. }, {
  1638. .key = { 0x03, 0x52, 0x02, 0x07, 0x67, 0x20, 0x82, 0x17,
  1639. 0x86, 0x02, 0x87, 0x66, 0x59, 0x08, 0x21, 0x98,
  1640. 0x64, 0x05, 0x6a, 0xbd, 0xfe, 0xa9, 0x34, 0x57 },
  1641. .klen = 24,
  1642. .input = { 0xc0, 0x7d, 0x2a, 0x0f, 0xa5, 0x66, 0xfa, 0x30 },
  1643. .ilen = 8,
  1644. .result = { 0x73, 0x71, 0x75, 0x69, 0x67, 0x67, 0x6c, 0x65 },
  1645. .rlen = 8,
  1646. }, {
  1647. .key = { 0x10, 0x46, 0x10, 0x34, 0x89, 0x98, 0x80, 0x20,
  1648. 0x91, 0x07, 0xd0, 0x15, 0x89, 0x19, 0x01, 0x01,
  1649. 0x19, 0x07, 0x92, 0x10, 0x98, 0x1a, 0x01, 0x01 },
  1650. .klen = 24,
  1651. .input = { 0xe1, 0xef, 0x62, 0xc3, 0x32, 0xfe, 0x82, 0x5b },
  1652. .ilen = 8,
  1653. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1654. .rlen = 8,
  1655. },
  1656. };
  1657. /*
  1658. * Blowfish test vectors.
  1659. */
  1660. #define BF_ENC_TEST_VECTORS 6
  1661. #define BF_DEC_TEST_VECTORS 6
  1662. #define BF_CBC_ENC_TEST_VECTORS 1
  1663. #define BF_CBC_DEC_TEST_VECTORS 1
  1664. static struct cipher_testvec bf_enc_tv_template[] = {
  1665. { /* DES test vectors from OpenSSL */
  1666. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, },
  1667. .klen = 8,
  1668. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1669. .ilen = 8,
  1670. .result = { 0x4e, 0xf9, 0x97, 0x45, 0x61, 0x98, 0xdd, 0x78 },
  1671. .rlen = 8,
  1672. }, {
  1673. .key = { 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e },
  1674. .klen = 8,
  1675. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1676. .ilen = 8,
  1677. .result = { 0xa7, 0x90, 0x79, 0x51, 0x08, 0xea, 0x3c, 0xae },
  1678. .rlen = 8,
  1679. }, {
  1680. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1681. .klen = 8,
  1682. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1683. .ilen = 8,
  1684. .result = { 0xe8, 0x7a, 0x24, 0x4e, 0x2c, 0xc8, 0x5e, 0x82 },
  1685. .rlen = 8,
  1686. }, { /* Vary the keylength... */
  1687. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1688. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f },
  1689. .klen = 16,
  1690. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1691. .ilen = 8,
  1692. .result = { 0x93, 0x14, 0x28, 0x87, 0xee, 0x3b, 0xe1, 0x5c },
  1693. .rlen = 8,
  1694. }, {
  1695. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1696. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1697. 0x00, 0x11, 0x22, 0x33, 0x44 },
  1698. .klen = 21,
  1699. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1700. .ilen = 8,
  1701. .result = { 0xe6, 0xf5, 0x1e, 0xd7, 0x9b, 0x9d, 0xb2, 0x1f },
  1702. .rlen = 8,
  1703. }, { /* Generated with bf488 */
  1704. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1705. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1706. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1707. 0x04, 0x68, 0x91, 0x04, 0xc2, 0xfd, 0x3b, 0x2f,
  1708. 0x58, 0x40, 0x23, 0x64, 0x1a, 0xba, 0x61, 0x76,
  1709. 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e,
  1710. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  1711. .klen = 56,
  1712. .input = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1713. .ilen = 8,
  1714. .result = { 0xc0, 0x45, 0x04, 0x01, 0x2e, 0x4e, 0x1f, 0x53 },
  1715. .rlen = 8,
  1716. },
  1717. };
  1718. static struct cipher_testvec bf_dec_tv_template[] = {
  1719. { /* DES test vectors from OpenSSL */
  1720. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1721. .klen = 8,
  1722. .input = { 0x4e, 0xf9, 0x97, 0x45, 0x61, 0x98, 0xdd, 0x78 },
  1723. .ilen = 8,
  1724. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  1725. .rlen = 8,
  1726. }, {
  1727. .key = { 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e },
  1728. .klen = 8,
  1729. .input = { 0xa7, 0x90, 0x79, 0x51, 0x08, 0xea, 0x3c, 0xae },
  1730. .ilen = 8,
  1731. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  1732. .rlen = 8,
  1733. }, {
  1734. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1735. .klen = 8,
  1736. .input = { 0xe8, 0x7a, 0x24, 0x4e, 0x2c, 0xc8, 0x5e, 0x82 },
  1737. .ilen = 8,
  1738. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1739. .rlen = 8,
  1740. }, { /* Vary the keylength... */
  1741. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1742. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f },
  1743. .klen = 16,
  1744. .input = { 0x93, 0x14, 0x28, 0x87, 0xee, 0x3b, 0xe1, 0x5c },
  1745. .ilen = 8,
  1746. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1747. .rlen = 8,
  1748. }, {
  1749. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1750. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1751. 0x00, 0x11, 0x22, 0x33, 0x44 },
  1752. .klen = 21,
  1753. .input = { 0xe6, 0xf5, 0x1e, 0xd7, 0x9b, 0x9d, 0xb2, 0x1f },
  1754. .ilen = 8,
  1755. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1756. .rlen = 8,
  1757. }, { /* Generated with bf488, using OpenSSL, Libgcrypt and Nettle */
  1758. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87,
  1759. 0x78, 0x69, 0x5a, 0x4b, 0x3c, 0x2d, 0x1e, 0x0f,
  1760. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1761. 0x04, 0x68, 0x91, 0x04, 0xc2, 0xfd, 0x3b, 0x2f,
  1762. 0x58, 0x40, 0x23, 0x64, 0x1a, 0xba, 0x61, 0x76,
  1763. 0x1f, 0x1f, 0x1f, 0x1f, 0x0e, 0x0e, 0x0e, 0x0e,
  1764. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  1765. .klen = 56,
  1766. .input = { 0xc0, 0x45, 0x04, 0x01, 0x2e, 0x4e, 0x1f, 0x53 },
  1767. .ilen = 8,
  1768. .result = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1769. .rlen = 8,
  1770. },
  1771. };
  1772. static struct cipher_testvec bf_cbc_enc_tv_template[] = {
  1773. { /* From OpenSSL */
  1774. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1775. 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1776. .klen = 16,
  1777. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1778. .input = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1779. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1780. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20,
  1781. 0x66, 0x6f, 0x72, 0x20, 0x00, 0x00, 0x00, 0x00 },
  1782. .ilen = 32,
  1783. .result = { 0x6b, 0x77, 0xb4, 0xd6, 0x30, 0x06, 0xde, 0xe6,
  1784. 0x05, 0xb1, 0x56, 0xe2, 0x74, 0x03, 0x97, 0x93,
  1785. 0x58, 0xde, 0xb9, 0xe7, 0x15, 0x46, 0x16, 0xd9,
  1786. 0x59, 0xf1, 0x65, 0x2b, 0xd5, 0xff, 0x92, 0xcc },
  1787. .rlen = 32,
  1788. },
  1789. };
  1790. static struct cipher_testvec bf_cbc_dec_tv_template[] = {
  1791. { /* From OpenSSL */
  1792. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1793. 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  1794. .klen = 16,
  1795. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  1796. .input = { 0x6b, 0x77, 0xb4, 0xd6, 0x30, 0x06, 0xde, 0xe6,
  1797. 0x05, 0xb1, 0x56, 0xe2, 0x74, 0x03, 0x97, 0x93,
  1798. 0x58, 0xde, 0xb9, 0xe7, 0x15, 0x46, 0x16, 0xd9,
  1799. 0x59, 0xf1, 0x65, 0x2b, 0xd5, 0xff, 0x92, 0xcc },
  1800. .ilen = 32,
  1801. .result = { 0x37, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31, 0x20,
  1802. 0x4e, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x74,
  1803. 0x68, 0x65, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20,
  1804. 0x66, 0x6f, 0x72, 0x20, 0x00, 0x00, 0x00, 0x00 },
  1805. .rlen = 32,
  1806. },
  1807. };
  1808. /*
  1809. * Twofish test vectors.
  1810. */
  1811. #define TF_ENC_TEST_VECTORS 3
  1812. #define TF_DEC_TEST_VECTORS 3
  1813. #define TF_CBC_ENC_TEST_VECTORS 4
  1814. #define TF_CBC_DEC_TEST_VECTORS 4
  1815. static struct cipher_testvec tf_enc_tv_template[] = {
  1816. {
  1817. .key = { [0 ... 15] = 0x00 },
  1818. .klen = 16,
  1819. .input = { [0 ... 15] = 0x00 },
  1820. .ilen = 16,
  1821. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1822. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1823. .rlen = 16,
  1824. }, {
  1825. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1826. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1827. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  1828. .klen = 24,
  1829. .input = { [0 ... 15] = 0x00 },
  1830. .ilen = 16,
  1831. .result = { 0xcf, 0xd1, 0xd2, 0xe5, 0xa9, 0xbe, 0x9c, 0xdf,
  1832. 0x50, 0x1f, 0x13, 0xb8, 0x92, 0xbd, 0x22, 0x48 },
  1833. .rlen = 16,
  1834. }, {
  1835. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1836. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1837. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1838. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1839. .klen = 32,
  1840. .input = { [0 ... 15] = 0x00 },
  1841. .ilen = 16,
  1842. .result = { 0x37, 0x52, 0x7b, 0xe0, 0x05, 0x23, 0x34, 0xb8,
  1843. 0x9f, 0x0c, 0xfc, 0xca, 0xe8, 0x7c, 0xfa, 0x20 },
  1844. .rlen = 16,
  1845. },
  1846. };
  1847. static struct cipher_testvec tf_dec_tv_template[] = {
  1848. {
  1849. .key = { [0 ... 15] = 0x00 },
  1850. .klen = 16,
  1851. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1852. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1853. .ilen = 16,
  1854. .result = { [0 ... 15] = 0x00 },
  1855. .rlen = 16,
  1856. }, {
  1857. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1858. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1859. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  1860. .klen = 24,
  1861. .input = { 0xcf, 0xd1, 0xd2, 0xe5, 0xa9, 0xbe, 0x9c, 0xdf,
  1862. 0x50, 0x1f, 0x13, 0xb8, 0x92, 0xbd, 0x22, 0x48 },
  1863. .ilen = 16,
  1864. .result = { [0 ... 15] = 0x00 },
  1865. .rlen = 16,
  1866. }, {
  1867. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  1868. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  1869. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  1870. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  1871. .klen = 32,
  1872. .input = { 0x37, 0x52, 0x7b, 0xe0, 0x05, 0x23, 0x34, 0xb8,
  1873. 0x9f, 0x0c, 0xfc, 0xca, 0xe8, 0x7c, 0xfa, 0x20 },
  1874. .ilen = 16,
  1875. .result = { [0 ... 15] = 0x00 },
  1876. .rlen = 16,
  1877. },
  1878. };
  1879. static struct cipher_testvec tf_cbc_enc_tv_template[] = {
  1880. { /* Generated with Nettle */
  1881. .key = { [0 ... 15] = 0x00 },
  1882. .klen = 16,
  1883. .iv = { [0 ... 15] = 0x00 },
  1884. .input = { [0 ... 15] = 0x00 },
  1885. .ilen = 16,
  1886. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1887. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1888. .rlen = 16,
  1889. }, {
  1890. .key = { [0 ... 15] = 0x00 },
  1891. .klen = 16,
  1892. .iv = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1893. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1894. .input = { [0 ... 15] = 0x00 },
  1895. .ilen = 16,
  1896. .result = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1897. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1898. .rlen = 16,
  1899. }, {
  1900. .key = { [0 ... 15] = 0x00 },
  1901. .klen = 16,
  1902. .iv = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1903. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1904. .input = { [0 ... 15] = 0x00 },
  1905. .ilen = 16,
  1906. .result = { 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1907. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1908. .rlen = 16,
  1909. }, {
  1910. .key = { [0 ... 15] = 0x00 },
  1911. .klen = 16,
  1912. .iv = { [0 ... 15] = 0x00 },
  1913. .input = { [0 ... 47] = 0x00 },
  1914. .ilen = 48,
  1915. .result = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1916. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a,
  1917. 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1918. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19,
  1919. 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1920. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1921. .rlen = 48,
  1922. },
  1923. };
  1924. static struct cipher_testvec tf_cbc_dec_tv_template[] = {
  1925. { /* Reverse of the first four above */
  1926. .key = { [0 ... 15] = 0x00 },
  1927. .klen = 16,
  1928. .iv = { [0 ... 15] = 0x00 },
  1929. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1930. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1931. .ilen = 16,
  1932. .result = { [0 ... 15] = 0x00 },
  1933. .rlen = 16,
  1934. }, {
  1935. .key = { [0 ... 15] = 0x00 },
  1936. .klen = 16,
  1937. .iv = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1938. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a },
  1939. .input = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1940. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1941. .ilen = 16,
  1942. .result = { [0 ... 15] = 0x00 },
  1943. .rlen = 16,
  1944. }, {
  1945. .key = { [0 ... 15] = 0x00 },
  1946. .klen = 16,
  1947. .iv = { 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1948. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19 },
  1949. .input = { 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1950. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1951. .ilen = 16,
  1952. .result = { [0 ... 15] = 0x00 },
  1953. .rlen = 16,
  1954. }, {
  1955. .key = { [0 ... 15] = 0x00 },
  1956. .klen = 16,
  1957. .iv = { [0 ... 15] = 0x00 },
  1958. .input = { 0x9f, 0x58, 0x9f, 0x5c, 0xf6, 0x12, 0x2c, 0x32,
  1959. 0xb6, 0xbf, 0xec, 0x2f, 0x2a, 0xe8, 0xc3, 0x5a,
  1960. 0xd4, 0x91, 0xdb, 0x16, 0xe7, 0xb1, 0xc3, 0x9e,
  1961. 0x86, 0xcb, 0x08, 0x6b, 0x78, 0x9f, 0x54, 0x19,
  1962. 0x05, 0xef, 0x8c, 0x61, 0xa8, 0x11, 0x58, 0x26,
  1963. 0x34, 0xba, 0x5c, 0xb7, 0x10, 0x6a, 0xa6, 0x41 },
  1964. .ilen = 48,
  1965. .result = { [0 ... 47] = 0x00 },
  1966. .rlen = 48,
  1967. },
  1968. };
  1969. /*
  1970. * Serpent test vectors. These are backwards because Serpent writes
  1971. * octet sequences in right-to-left mode.
  1972. */
  1973. #define SERPENT_ENC_TEST_VECTORS 4
  1974. #define SERPENT_DEC_TEST_VECTORS 4
  1975. #define TNEPRES_ENC_TEST_VECTORS 4
  1976. #define TNEPRES_DEC_TEST_VECTORS 4
  1977. static struct cipher_testvec serpent_enc_tv_template[] = {
  1978. {
  1979. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1980. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1981. .ilen = 16,
  1982. .result = { 0x12, 0x07, 0xfc, 0xce, 0x9b, 0xd0, 0xd6, 0x47,
  1983. 0x6a, 0xe9, 0x8f, 0xbe, 0xd1, 0x43, 0xa0, 0xe2 },
  1984. .rlen = 16,
  1985. }, {
  1986. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1987. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1988. .klen = 16,
  1989. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1990. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  1991. .ilen = 16,
  1992. .result = { 0x4c, 0x7d, 0x8a, 0x32, 0x80, 0x72, 0xa2, 0x2c,
  1993. 0x82, 0x3e, 0x4a, 0x1f, 0x3a, 0xcd, 0xa1, 0x6d },
  1994. .rlen = 16,
  1995. }, {
  1996. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  1997. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  1998. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  1999. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2000. .klen = 32,
  2001. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2002. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2003. .ilen = 16,
  2004. .result = { 0xde, 0x26, 0x9f, 0xf8, 0x33, 0xe4, 0x32, 0xb8,
  2005. 0x5b, 0x2e, 0x88, 0xd2, 0x70, 0x1c, 0xe7, 0x5c },
  2006. .rlen = 16,
  2007. }, {
  2008. .key = { [15] = 0x80 },
  2009. .klen = 16,
  2010. .input = { [0 ... 15] = 0x00 },
  2011. .ilen = 16,
  2012. .result = { 0xdd, 0xd2, 0x6b, 0x98, 0xa5, 0xff, 0xd8, 0x2c,
  2013. 0x05, 0x34, 0x5a, 0x9d, 0xad, 0xbf, 0xaf, 0x49},
  2014. .rlen = 16,
  2015. },
  2016. };
  2017. static struct cipher_testvec tnepres_enc_tv_template[] = {
  2018. { /* KeySize=128, PT=0, I=1 */
  2019. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2020. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2021. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2022. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2023. .klen = 16,
  2024. .ilen = 16,
  2025. .result = { 0x49, 0xaf, 0xbf, 0xad, 0x9d, 0x5a, 0x34, 0x05,
  2026. 0x2c, 0xd8, 0xff, 0xa5, 0x98, 0x6b, 0xd2, 0xdd },
  2027. .rlen = 16,
  2028. }, { /* KeySize=192, PT=0, I=1 */
  2029. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2030. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2031. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2032. .klen = 24,
  2033. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2034. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2035. .ilen = 16,
  2036. .result = { 0xe7, 0x8e, 0x54, 0x02, 0xc7, 0x19, 0x55, 0x68,
  2037. 0xac, 0x36, 0x78, 0xf7, 0xa3, 0xf6, 0x0c, 0x66 },
  2038. .rlen = 16,
  2039. }, { /* KeySize=256, PT=0, I=1 */
  2040. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2041. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2042. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2043. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2044. .klen = 32,
  2045. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2046. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2047. .ilen = 16,
  2048. .result = { 0xab, 0xed, 0x96, 0xe7, 0x66, 0xbf, 0x28, 0xcb,
  2049. 0xc0, 0xeb, 0xd2, 0x1a, 0x82, 0xef, 0x08, 0x19 },
  2050. .rlen = 16,
  2051. }, { /* KeySize=256, I=257 */
  2052. .key = { 0x1f, 0x1e, 0x1d, 0x1c, 0x1b, 0x1a, 0x19, 0x18,
  2053. 0x17, 0x16, 0x15, 0x14, 0x13, 0x12, 0x11, 0x10,
  2054. 0x0f, 0x0e, 0x0d, 0x0c, 0x0b, 0x0a, 0x09, 0x08,
  2055. 0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00 },
  2056. .klen = 32,
  2057. .input = { 0x0f, 0x0e, 0x0d, 0x0c, 0x0b, 0x0a, 0x09, 0x08,
  2058. 0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00 },
  2059. .ilen = 16,
  2060. .result = { 0x5c, 0xe7, 0x1c, 0x70, 0xd2, 0x88, 0x2e, 0x5b,
  2061. 0xb8, 0x32, 0xe4, 0x33, 0xf8, 0x9f, 0x26, 0xde },
  2062. .rlen = 16,
  2063. },
  2064. };
  2065. static struct cipher_testvec serpent_dec_tv_template[] = {
  2066. {
  2067. .input = { 0x12, 0x07, 0xfc, 0xce, 0x9b, 0xd0, 0xd6, 0x47,
  2068. 0x6a, 0xe9, 0x8f, 0xbe, 0xd1, 0x43, 0xa0, 0xe2 },
  2069. .ilen = 16,
  2070. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2071. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2072. .rlen = 16,
  2073. }, {
  2074. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2075. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2076. .klen = 16,
  2077. .input = { 0x4c, 0x7d, 0x8a, 0x32, 0x80, 0x72, 0xa2, 0x2c,
  2078. 0x82, 0x3e, 0x4a, 0x1f, 0x3a, 0xcd, 0xa1, 0x6d },
  2079. .ilen = 16,
  2080. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2081. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2082. .rlen = 16,
  2083. }, {
  2084. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2085. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2086. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2087. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2088. .klen = 32,
  2089. .input = { 0xde, 0x26, 0x9f, 0xf8, 0x33, 0xe4, 0x32, 0xb8,
  2090. 0x5b, 0x2e, 0x88, 0xd2, 0x70, 0x1c, 0xe7, 0x5c },
  2091. .ilen = 16,
  2092. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2093. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2094. .rlen = 16,
  2095. }, {
  2096. .key = { [15] = 0x80 },
  2097. .klen = 16,
  2098. .input = { 0xdd, 0xd2, 0x6b, 0x98, 0xa5, 0xff, 0xd8, 0x2c,
  2099. 0x05, 0x34, 0x5a, 0x9d, 0xad, 0xbf, 0xaf, 0x49},
  2100. .ilen = 16,
  2101. .result = { [0 ... 15] = 0x00 },
  2102. .rlen = 16,
  2103. },
  2104. };
  2105. static struct cipher_testvec tnepres_dec_tv_template[] = {
  2106. {
  2107. .input = { 0x41, 0xcc, 0x6b, 0x31, 0x59, 0x31, 0x45, 0x97,
  2108. 0x6d, 0x6f, 0xbb, 0x38, 0x4b, 0x37, 0x21, 0x28 },
  2109. .ilen = 16,
  2110. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2111. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2112. .rlen = 16,
  2113. }, {
  2114. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2115. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2116. .klen = 16,
  2117. .input = { 0xea, 0xf4, 0xd7, 0xfc, 0xd8, 0x01, 0x34, 0x47,
  2118. 0x81, 0x45, 0x0b, 0xfa, 0x0c, 0xd6, 0xad, 0x6e },
  2119. .ilen = 16,
  2120. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2121. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2122. .rlen = 16,
  2123. }, {
  2124. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2125. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2126. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2127. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2128. .klen = 32,
  2129. .input = { 0x64, 0xa9, 0x1a, 0x37, 0xed, 0x9f, 0xe7, 0x49,
  2130. 0xa8, 0x4e, 0x76, 0xd6, 0xf5, 0x0d, 0x78, 0xee },
  2131. .ilen = 16,
  2132. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2133. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2134. .rlen = 16,
  2135. }, { /* KeySize=128, I=121 */
  2136. .key = { [15] = 0x80 },
  2137. .klen = 16,
  2138. .input = { 0x3d, 0xda, 0xbf, 0xc0, 0x06, 0xda, 0xab, 0x06,
  2139. 0x46, 0x2a, 0xf4, 0xef, 0x81, 0x54, 0x4e, 0x26 },
  2140. .ilen = 16,
  2141. .result = { [0 ... 15] = 0x00 },
  2142. .rlen = 16,
  2143. },
  2144. };
  2145. /* Cast6 test vectors from RFC 2612 */
  2146. #define CAST6_ENC_TEST_VECTORS 3
  2147. #define CAST6_DEC_TEST_VECTORS 3
  2148. static struct cipher_testvec cast6_enc_tv_template[] = {
  2149. {
  2150. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2151. 0x0a, 0xf7, 0x56, 0x47, 0xf2, 0x9f, 0x61, 0x5d },
  2152. .klen = 16,
  2153. .input = { [0 ... 15] = 0x00 },
  2154. .ilen = 16,
  2155. .result = { 0xc8, 0x42, 0xa0, 0x89, 0x72, 0xb4, 0x3d, 0x20,
  2156. 0x83, 0x6c, 0x91, 0xd1, 0xb7, 0x53, 0x0f, 0x6b },
  2157. .rlen = 16,
  2158. }, {
  2159. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2160. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2161. 0xba, 0xc7, 0x7a, 0x77, 0x17, 0x94, 0x28, 0x63 },
  2162. .klen = 24,
  2163. .input = { [0 ... 15] = 0x00 },
  2164. .ilen = 16,
  2165. .result = { 0x1b, 0x38, 0x6c, 0x02, 0x10, 0xdc, 0xad, 0xcb,
  2166. 0xdd, 0x0e, 0x41, 0xaa, 0x08, 0xa7, 0xa7, 0xe8 },
  2167. .rlen = 16,
  2168. }, {
  2169. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2170. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2171. 0x8d, 0x7c, 0x47, 0xce, 0x26, 0x49, 0x08, 0x46,
  2172. 0x1c, 0xc1, 0xb5, 0x13, 0x7a, 0xe6, 0xb6, 0x04 },
  2173. .klen = 32,
  2174. .input = { [0 ... 15] = 0x00 },
  2175. .ilen = 16,
  2176. .result = { 0x4f, 0x6a, 0x20, 0x38, 0x28, 0x68, 0x97, 0xb9,
  2177. 0xc9, 0x87, 0x01, 0x36, 0x55, 0x33, 0x17, 0xfa },
  2178. .rlen = 16,
  2179. },
  2180. };
  2181. static struct cipher_testvec cast6_dec_tv_template[] = {
  2182. {
  2183. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2184. 0x0a, 0xf7, 0x56, 0x47, 0xf2, 0x9f, 0x61, 0x5d },
  2185. .klen = 16,
  2186. .input = { 0xc8, 0x42, 0xa0, 0x89, 0x72, 0xb4, 0x3d, 0x20,
  2187. 0x83, 0x6c, 0x91, 0xd1, 0xb7, 0x53, 0x0f, 0x6b },
  2188. .ilen = 16,
  2189. .result = { [0 ... 15] = 0x00 },
  2190. .rlen = 16,
  2191. }, {
  2192. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2193. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2194. 0xba, 0xc7, 0x7a, 0x77, 0x17, 0x94, 0x28, 0x63 },
  2195. .klen = 24,
  2196. .input = { 0x1b, 0x38, 0x6c, 0x02, 0x10, 0xdc, 0xad, 0xcb,
  2197. 0xdd, 0x0e, 0x41, 0xaa, 0x08, 0xa7, 0xa7, 0xe8 },
  2198. .ilen = 16,
  2199. .result = { [0 ... 15] = 0x00 },
  2200. .rlen = 16,
  2201. }, {
  2202. .key = { 0x23, 0x42, 0xbb, 0x9e, 0xfa, 0x38, 0x54, 0x2c,
  2203. 0xbe, 0xd0, 0xac, 0x83, 0x94, 0x0a, 0xc2, 0x98,
  2204. 0x8d, 0x7c, 0x47, 0xce, 0x26, 0x49, 0x08, 0x46,
  2205. 0x1c, 0xc1, 0xb5, 0x13, 0x7a, 0xe6, 0xb6, 0x04 },
  2206. .klen = 32,
  2207. .input = { 0x4f, 0x6a, 0x20, 0x38, 0x28, 0x68, 0x97, 0xb9,
  2208. 0xc9, 0x87, 0x01, 0x36, 0x55, 0x33, 0x17, 0xfa },
  2209. .ilen = 16,
  2210. .result = { [0 ... 15] = 0x00 },
  2211. .rlen = 16,
  2212. },
  2213. };
  2214. /*
  2215. * AES test vectors.
  2216. */
  2217. #define AES_ENC_TEST_VECTORS 3
  2218. #define AES_DEC_TEST_VECTORS 3
  2219. #define AES_CBC_ENC_TEST_VECTORS 2
  2220. #define AES_CBC_DEC_TEST_VECTORS 2
  2221. #define AES_LRW_ENC_TEST_VECTORS 8
  2222. #define AES_LRW_DEC_TEST_VECTORS 8
  2223. #define AES_XTS_ENC_TEST_VECTORS 4
  2224. #define AES_XTS_DEC_TEST_VECTORS 4
  2225. #define AES_CTR_ENC_TEST_VECTORS 6
  2226. #define AES_CTR_DEC_TEST_VECTORS 6
  2227. static struct cipher_testvec aes_enc_tv_template[] = {
  2228. { /* From FIPS-197 */
  2229. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2230. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2231. .klen = 16,
  2232. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2233. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2234. .ilen = 16,
  2235. .result = { 0x69, 0xc4, 0xe0, 0xd8, 0x6a, 0x7b, 0x04, 0x30,
  2236. 0xd8, 0xcd, 0xb7, 0x80, 0x70, 0xb4, 0xc5, 0x5a },
  2237. .rlen = 16,
  2238. }, {
  2239. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2240. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2241. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17 },
  2242. .klen = 24,
  2243. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2244. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2245. .ilen = 16,
  2246. .result = { 0xdd, 0xa9, 0x7c, 0xa4, 0x86, 0x4c, 0xdf, 0xe0,
  2247. 0x6e, 0xaf, 0x70, 0xa0, 0xec, 0x0d, 0x71, 0x91 },
  2248. .rlen = 16,
  2249. }, {
  2250. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2251. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2252. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2253. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2254. .klen = 32,
  2255. .input = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2256. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2257. .ilen = 16,
  2258. .result = { 0x8e, 0xa2, 0xb7, 0xca, 0x51, 0x67, 0x45, 0xbf,
  2259. 0xea, 0xfc, 0x49, 0x90, 0x4b, 0x49, 0x60, 0x89 },
  2260. .rlen = 16,
  2261. },
  2262. };
  2263. static struct cipher_testvec aes_dec_tv_template[] = {
  2264. { /* From FIPS-197 */
  2265. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2266. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  2267. .klen = 16,
  2268. .input = { 0x69, 0xc4, 0xe0, 0xd8, 0x6a, 0x7b, 0x04, 0x30,
  2269. 0xd8, 0xcd, 0xb7, 0x80, 0x70, 0xb4, 0xc5, 0x5a },
  2270. .ilen = 16,
  2271. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2272. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2273. .rlen = 16,
  2274. }, {
  2275. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2276. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2277. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17 },
  2278. .klen = 24,
  2279. .input = { 0xdd, 0xa9, 0x7c, 0xa4, 0x86, 0x4c, 0xdf, 0xe0,
  2280. 0x6e, 0xaf, 0x70, 0xa0, 0xec, 0x0d, 0x71, 0x91 },
  2281. .ilen = 16,
  2282. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2283. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2284. .rlen = 16,
  2285. }, {
  2286. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2287. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2288. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2289. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2290. .klen = 32,
  2291. .input = { 0x8e, 0xa2, 0xb7, 0xca, 0x51, 0x67, 0x45, 0xbf,
  2292. 0xea, 0xfc, 0x49, 0x90, 0x4b, 0x49, 0x60, 0x89 },
  2293. .ilen = 16,
  2294. .result = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  2295. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  2296. .rlen = 16,
  2297. },
  2298. };
  2299. static struct cipher_testvec aes_cbc_enc_tv_template[] = {
  2300. { /* From RFC 3602 */
  2301. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  2302. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  2303. .klen = 16,
  2304. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  2305. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  2306. .input = { "Single block msg" },
  2307. .ilen = 16,
  2308. .result = { 0xe3, 0x53, 0x77, 0x9c, 0x10, 0x79, 0xae, 0xb8,
  2309. 0x27, 0x08, 0x94, 0x2d, 0xbe, 0x77, 0x18, 0x1a },
  2310. .rlen = 16,
  2311. }, {
  2312. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  2313. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  2314. .klen = 16,
  2315. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  2316. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  2317. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2318. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2319. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2320. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2321. .ilen = 32,
  2322. .result = { 0xd2, 0x96, 0xcd, 0x94, 0xc2, 0xcc, 0xcf, 0x8a,
  2323. 0x3a, 0x86, 0x30, 0x28, 0xb5, 0xe1, 0xdc, 0x0a,
  2324. 0x75, 0x86, 0x60, 0x2d, 0x25, 0x3c, 0xff, 0xf9,
  2325. 0x1b, 0x82, 0x66, 0xbe, 0xa6, 0xd6, 0x1a, 0xb1 },
  2326. .rlen = 32,
  2327. },
  2328. };
  2329. static struct cipher_testvec aes_cbc_dec_tv_template[] = {
  2330. { /* From RFC 3602 */
  2331. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  2332. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  2333. .klen = 16,
  2334. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  2335. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  2336. .input = { 0xe3, 0x53, 0x77, 0x9c, 0x10, 0x79, 0xae, 0xb8,
  2337. 0x27, 0x08, 0x94, 0x2d, 0xbe, 0x77, 0x18, 0x1a },
  2338. .ilen = 16,
  2339. .result = { "Single block msg" },
  2340. .rlen = 16,
  2341. }, {
  2342. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  2343. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  2344. .klen = 16,
  2345. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  2346. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  2347. .input = { 0xd2, 0x96, 0xcd, 0x94, 0xc2, 0xcc, 0xcf, 0x8a,
  2348. 0x3a, 0x86, 0x30, 0x28, 0xb5, 0xe1, 0xdc, 0x0a,
  2349. 0x75, 0x86, 0x60, 0x2d, 0x25, 0x3c, 0xff, 0xf9,
  2350. 0x1b, 0x82, 0x66, 0xbe, 0xa6, 0xd6, 0x1a, 0xb1 },
  2351. .ilen = 32,
  2352. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2353. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2354. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2355. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  2356. .rlen = 32,
  2357. },
  2358. };
  2359. static struct cipher_testvec aes_lrw_enc_tv_template[] = {
  2360. /* from http://grouper.ieee.org/groups/1619/email/pdf00017.pdf */
  2361. { /* LRW-32-AES 1 */
  2362. .key = { 0x45, 0x62, 0xac, 0x25, 0xf8, 0x28, 0x17, 0x6d,
  2363. 0x4c, 0x26, 0x84, 0x14, 0xb5, 0x68, 0x01, 0x85,
  2364. 0x25, 0x8e, 0x2a, 0x05, 0xe7, 0x3e, 0x9d, 0x03,
  2365. 0xee, 0x5a, 0x83, 0x0c, 0xcc, 0x09, 0x4c, 0x87 },
  2366. .klen = 32,
  2367. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2368. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2369. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2370. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2371. .ilen = 16,
  2372. .result = { 0xf1, 0xb2, 0x73, 0xcd, 0x65, 0xa3, 0xdf, 0x5f,
  2373. 0xe9, 0x5d, 0x48, 0x92, 0x54, 0x63, 0x4e, 0xb8 },
  2374. .rlen = 16,
  2375. }, { /* LRW-32-AES 2 */
  2376. .key = { 0x59, 0x70, 0x47, 0x14, 0xf5, 0x57, 0x47, 0x8c,
  2377. 0xd7, 0x79, 0xe8, 0x0f, 0x54, 0x88, 0x79, 0x44,
  2378. 0x0d, 0x48, 0xf0, 0xb7, 0xb1, 0x5a, 0x53, 0xea,
  2379. 0x1c, 0xaa, 0x6b, 0x29, 0xc2, 0xca, 0xfb, 0xaf
  2380. },
  2381. .klen = 32,
  2382. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2383. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02 },
  2384. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2385. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2386. .ilen = 16,
  2387. .result = { 0x00, 0xc8, 0x2b, 0xae, 0x95, 0xbb, 0xcd, 0xe5,
  2388. 0x27, 0x4f, 0x07, 0x69, 0xb2, 0x60, 0xe1, 0x36 },
  2389. .rlen = 16,
  2390. }, { /* LRW-32-AES 3 */
  2391. .key = { 0xd8, 0x2a, 0x91, 0x34, 0xb2, 0x6a, 0x56, 0x50,
  2392. 0x30, 0xfe, 0x69, 0xe2, 0x37, 0x7f, 0x98, 0x47,
  2393. 0xcd, 0xf9, 0x0b, 0x16, 0x0c, 0x64, 0x8f, 0xb6,
  2394. 0xb0, 0x0d, 0x0d, 0x1b, 0xae, 0x85, 0x87, 0x1f },
  2395. .klen = 32,
  2396. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2397. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2398. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2399. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2400. .ilen = 16,
  2401. .result = { 0x76, 0x32, 0x21, 0x83, 0xed, 0x8f, 0xf1, 0x82,
  2402. 0xf9, 0x59, 0x62, 0x03, 0x69, 0x0e, 0x5e, 0x01 },
  2403. .rlen = 16,
  2404. }, { /* LRW-32-AES 4 */
  2405. .key = { 0x0f, 0x6a, 0xef, 0xf8, 0xd3, 0xd2, 0xbb, 0x15,
  2406. 0x25, 0x83, 0xf7, 0x3c, 0x1f, 0x01, 0x28, 0x74,
  2407. 0xca, 0xc6, 0xbc, 0x35, 0x4d, 0x4a, 0x65, 0x54,
  2408. 0x90, 0xae, 0x61, 0xcf, 0x7b, 0xae, 0xbd, 0xcc,
  2409. 0xad, 0xe4, 0x94, 0xc5, 0x4a, 0x29, 0xae, 0x70 },
  2410. .klen = 40,
  2411. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2412. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2413. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2414. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2415. .ilen = 16,
  2416. .result = { 0x9c, 0x0f, 0x15, 0x2f, 0x55, 0xa2, 0xd8, 0xf0,
  2417. 0xd6, 0x7b, 0x8f, 0x9e, 0x28, 0x22, 0xbc, 0x41 },
  2418. .rlen = 16,
  2419. }, { /* LRW-32-AES 5 */
  2420. .key = { 0x8a, 0xd4, 0xee, 0x10, 0x2f, 0xbd, 0x81, 0xff,
  2421. 0xf8, 0x86, 0xce, 0xac, 0x93, 0xc5, 0xad, 0xc6,
  2422. 0xa0, 0x19, 0x07, 0xc0, 0x9d, 0xf7, 0xbb, 0xdd,
  2423. 0x52, 0x13, 0xb2, 0xb7, 0xf0, 0xff, 0x11, 0xd8,
  2424. 0xd6, 0x08, 0xd0, 0xcd, 0x2e, 0xb1, 0x17, 0x6f },
  2425. .klen = 40,
  2426. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2427. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2428. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2429. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2430. .ilen = 16,
  2431. .result = { 0xd4, 0x27, 0x6a, 0x7f, 0x14, 0x91, 0x3d, 0x65,
  2432. 0xc8, 0x60, 0x48, 0x02, 0x87, 0xe3, 0x34, 0x06 },
  2433. .rlen = 16,
  2434. }, { /* LRW-32-AES 6 */
  2435. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2436. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2437. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2438. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2439. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2440. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2441. .klen = 48,
  2442. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2443. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2444. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2445. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2446. .ilen = 16,
  2447. .result = { 0xbd, 0x06, 0xb8, 0xe1, 0xdb, 0x98, 0x89, 0x9e,
  2448. 0xc4, 0x98, 0xe4, 0x91, 0xcf, 0x1c, 0x70, 0x2b },
  2449. .rlen = 16,
  2450. }, { /* LRW-32-AES 7 */
  2451. .key = { 0xfb, 0x76, 0x15, 0xb2, 0x3d, 0x80, 0x89, 0x1d,
  2452. 0xd4, 0x70, 0x98, 0x0b, 0xc7, 0x95, 0x84, 0xc8,
  2453. 0xb2, 0xfb, 0x64, 0xce, 0x60, 0x97, 0x87, 0x8d,
  2454. 0x17, 0xfc, 0xe4, 0x5a, 0x49, 0xe8, 0x30, 0xb7,
  2455. 0x6e, 0x78, 0x17, 0xe7, 0x2d, 0x5e, 0x12, 0xd4,
  2456. 0x60, 0x64, 0x04, 0x7a, 0xf1, 0x2f, 0x9e, 0x0c },
  2457. .klen = 48,
  2458. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2459. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2460. .input = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2461. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2462. .ilen = 16,
  2463. .result = { 0x5b, 0x90, 0x8e, 0xc1, 0xab, 0xdd, 0x67, 0x5f,
  2464. 0x3d, 0x69, 0x8a, 0x95, 0x53, 0xc8, 0x9c, 0xe5 },
  2465. .rlen = 16,
  2466. }, {
  2467. /* http://www.mail-archive.com/stds-p1619@listserv.ieee.org/msg00173.html */
  2468. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2469. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2470. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2471. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2472. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2473. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2474. .klen = 48,
  2475. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2476. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2477. .input = { 0x05, 0x11, 0xb7, 0x18, 0xab, 0xc6, 0x2d, 0xac,
  2478. 0x70, 0x5d, 0xf6, 0x22, 0x94, 0xcd, 0xe5, 0x6c,
  2479. 0x17, 0x6b, 0xf6, 0x1c, 0xf0, 0xf3, 0x6e, 0xf8,
  2480. 0x50, 0x38, 0x1f, 0x71, 0x49, 0xb6, 0x57, 0xd6,
  2481. 0x8f, 0xcb, 0x8d, 0x6b, 0xe3, 0xa6, 0x29, 0x90,
  2482. 0xfe, 0x2a, 0x62, 0x82, 0xae, 0x6d, 0x8b, 0xf6,
  2483. 0xad, 0x1e, 0x9e, 0x20, 0x5f, 0x38, 0xbe, 0x04,
  2484. 0xda, 0x10, 0x8e, 0xed, 0xa2, 0xa4, 0x87, 0xab,
  2485. 0xda, 0x6b, 0xb4, 0x0c, 0x75, 0xba, 0xd3, 0x7c,
  2486. 0xc9, 0xac, 0x42, 0x31, 0x95, 0x7c, 0xc9, 0x04,
  2487. 0xeb, 0xd5, 0x6e, 0x32, 0x69, 0x8a, 0xdb, 0xa6,
  2488. 0x15, 0xd7, 0x3f, 0x4f, 0x2f, 0x66, 0x69, 0x03,
  2489. 0x9c, 0x1f, 0x54, 0x0f, 0xde, 0x1f, 0xf3, 0x65,
  2490. 0x4c, 0x96, 0x12, 0xed, 0x7c, 0x92, 0x03, 0x01,
  2491. 0x6f, 0xbc, 0x35, 0x93, 0xac, 0xf1, 0x27, 0xf1,
  2492. 0xb4, 0x96, 0x82, 0x5a, 0x5f, 0xb0, 0xa0, 0x50,
  2493. 0x89, 0xa4, 0x8e, 0x66, 0x44, 0x85, 0xcc, 0xfd,
  2494. 0x33, 0x14, 0x70, 0xe3, 0x96, 0xb2, 0xc3, 0xd3,
  2495. 0xbb, 0x54, 0x5a, 0x1a, 0xf9, 0x74, 0xa2, 0xc5,
  2496. 0x2d, 0x64, 0x75, 0xdd, 0xb4, 0x54, 0xe6, 0x74,
  2497. 0x8c, 0xd3, 0x9d, 0x9e, 0x86, 0xab, 0x51, 0x53,
  2498. 0xb7, 0x93, 0x3e, 0x6f, 0xd0, 0x4e, 0x2c, 0x40,
  2499. 0xf6, 0xa8, 0x2e, 0x3e, 0x9d, 0xf4, 0x66, 0xa5,
  2500. 0x76, 0x12, 0x73, 0x44, 0x1a, 0x56, 0xd7, 0x72,
  2501. 0x88, 0xcd, 0x21, 0x8c, 0x4c, 0x0f, 0xfe, 0xda,
  2502. 0x95, 0xe0, 0x3a, 0xa6, 0xa5, 0x84, 0x46, 0xcd,
  2503. 0xd5, 0x3e, 0x9d, 0x3a, 0xe2, 0x67, 0xe6, 0x60,
  2504. 0x1a, 0xe2, 0x70, 0x85, 0x58, 0xc2, 0x1b, 0x09,
  2505. 0xe1, 0xd7, 0x2c, 0xca, 0xad, 0xa8, 0x8f, 0xf9,
  2506. 0xac, 0xb3, 0x0e, 0xdb, 0xca, 0x2e, 0xe2, 0xb8,
  2507. 0x51, 0x71, 0xd9, 0x3c, 0x6c, 0xf1, 0x56, 0xf8,
  2508. 0xea, 0x9c, 0xf1, 0xfb, 0x0c, 0xe6, 0xb7, 0x10,
  2509. 0x1c, 0xf8, 0xa9, 0x7c, 0xe8, 0x53, 0x35, 0xc1,
  2510. 0x90, 0x3e, 0x76, 0x4a, 0x74, 0xa4, 0x21, 0x2c,
  2511. 0xf6, 0x2c, 0x4e, 0x0f, 0x94, 0x3a, 0x88, 0x2e,
  2512. 0x41, 0x09, 0x6a, 0x33, 0x7d, 0xf6, 0xdd, 0x3f,
  2513. 0x8d, 0x23, 0x31, 0x74, 0x84, 0xeb, 0x88, 0x6e,
  2514. 0xcc, 0xb9, 0xbc, 0x22, 0x83, 0x19, 0x07, 0x22,
  2515. 0xa5, 0x2d, 0xdf, 0xa5, 0xf3, 0x80, 0x85, 0x78,
  2516. 0x84, 0x39, 0x6a, 0x6d, 0x6a, 0x99, 0x4f, 0xa5,
  2517. 0x15, 0xfe, 0x46, 0xb0, 0xe4, 0x6c, 0xa5, 0x41,
  2518. 0x3c, 0xce, 0x8f, 0x42, 0x60, 0x71, 0xa7, 0x75,
  2519. 0x08, 0x40, 0x65, 0x8a, 0x82, 0xbf, 0xf5, 0x43,
  2520. 0x71, 0x96, 0xa9, 0x4d, 0x44, 0x8a, 0x20, 0xbe,
  2521. 0xfa, 0x4d, 0xbb, 0xc0, 0x7d, 0x31, 0x96, 0x65,
  2522. 0xe7, 0x75, 0xe5, 0x3e, 0xfd, 0x92, 0x3b, 0xc9,
  2523. 0x55, 0xbb, 0x16, 0x7e, 0xf7, 0xc2, 0x8c, 0xa4,
  2524. 0x40, 0x1d, 0xe5, 0xef, 0x0e, 0xdf, 0xe4, 0x9a,
  2525. 0x62, 0x73, 0x65, 0xfd, 0x46, 0x63, 0x25, 0x3d,
  2526. 0x2b, 0xaf, 0xe5, 0x64, 0xfe, 0xa5, 0x5c, 0xcf,
  2527. 0x24, 0xf3, 0xb4, 0xac, 0x64, 0xba, 0xdf, 0x4b,
  2528. 0xc6, 0x96, 0x7d, 0x81, 0x2d, 0x8d, 0x97, 0xf7,
  2529. 0xc5, 0x68, 0x77, 0x84, 0x32, 0x2b, 0xcc, 0x85,
  2530. 0x74, 0x96, 0xf0, 0x12, 0x77, 0x61, 0xb9, 0xeb,
  2531. 0x71, 0xaa, 0x82, 0xcb, 0x1c, 0xdb, 0x89, 0xc8,
  2532. 0xc6, 0xb5, 0xe3, 0x5c, 0x7d, 0x39, 0x07, 0x24,
  2533. 0xda, 0x39, 0x87, 0x45, 0xc0, 0x2b, 0xbb, 0x01,
  2534. 0xac, 0xbc, 0x2a, 0x5c, 0x7f, 0xfc, 0xe8, 0xce,
  2535. 0x6d, 0x9c, 0x6f, 0xed, 0xd3, 0xc1, 0xa1, 0xd6,
  2536. 0xc5, 0x55, 0xa9, 0x66, 0x2f, 0xe1, 0xc8, 0x32,
  2537. 0xa6, 0x5d, 0xa4, 0x3a, 0x98, 0x73, 0xe8, 0x45,
  2538. 0xa4, 0xc7, 0xa8, 0xb4, 0xf6, 0x13, 0x03, 0xf6,
  2539. 0xe9, 0x2e, 0xc4, 0x29, 0x0f, 0x84, 0xdb, 0xc4,
  2540. 0x21, 0xc4, 0xc2, 0x75, 0x67, 0x89, 0x37, 0x0a },
  2541. .ilen = 512,
  2542. .result = { 0x1a, 0x1d, 0xa9, 0x30, 0xad, 0xf9, 0x2f, 0x9b,
  2543. 0xb6, 0x1d, 0xae, 0xef, 0xf0, 0x2f, 0xf8, 0x5a,
  2544. 0x39, 0x3c, 0xbf, 0x2a, 0xb2, 0x45, 0xb2, 0x23,
  2545. 0x1b, 0x63, 0x3c, 0xcf, 0xaa, 0xbe, 0xcf, 0x4e,
  2546. 0xfa, 0xe8, 0x29, 0xc2, 0x20, 0x68, 0x2b, 0x3c,
  2547. 0x2e, 0x8b, 0xf7, 0x6e, 0x25, 0xbd, 0xe3, 0x3d,
  2548. 0x66, 0x27, 0xd6, 0xaf, 0xd6, 0x64, 0x3e, 0xe3,
  2549. 0xe8, 0x58, 0x46, 0x97, 0x39, 0x51, 0x07, 0xde,
  2550. 0xcb, 0x37, 0xbc, 0xa9, 0xc0, 0x5f, 0x75, 0xc3,
  2551. 0x0e, 0x84, 0x23, 0x1d, 0x16, 0xd4, 0x1c, 0x59,
  2552. 0x9c, 0x1a, 0x02, 0x55, 0xab, 0x3a, 0x97, 0x1d,
  2553. 0xdf, 0xdd, 0xc7, 0x06, 0x51, 0xd7, 0x70, 0xae,
  2554. 0x23, 0xc6, 0x8c, 0xf5, 0x1e, 0xa0, 0xe5, 0x82,
  2555. 0xb8, 0xb2, 0xbf, 0x04, 0xa0, 0x32, 0x8e, 0x68,
  2556. 0xeb, 0xaf, 0x6e, 0x2d, 0x94, 0x22, 0x2f, 0xce,
  2557. 0x4c, 0xb5, 0x59, 0xe2, 0xa2, 0x2f, 0xa0, 0x98,
  2558. 0x1a, 0x97, 0xc6, 0xd4, 0xb5, 0x00, 0x59, 0xf2,
  2559. 0x84, 0x14, 0x72, 0xb1, 0x9a, 0x6e, 0xa3, 0x7f,
  2560. 0xea, 0x20, 0xe7, 0xcb, 0x65, 0x77, 0x3a, 0xdf,
  2561. 0xc8, 0x97, 0x67, 0x15, 0xc2, 0x2a, 0x27, 0xcc,
  2562. 0x18, 0x55, 0xa1, 0x24, 0x0b, 0x24, 0x24, 0xaf,
  2563. 0x5b, 0xec, 0x68, 0xb8, 0xc8, 0xf5, 0xba, 0x63,
  2564. 0xff, 0xed, 0x89, 0xce, 0xd5, 0x3d, 0x88, 0xf3,
  2565. 0x25, 0xef, 0x05, 0x7c, 0x3a, 0xef, 0xeb, 0xd8,
  2566. 0x7a, 0x32, 0x0d, 0xd1, 0x1e, 0x58, 0x59, 0x99,
  2567. 0x90, 0x25, 0xb5, 0x26, 0xb0, 0xe3, 0x2b, 0x6c,
  2568. 0x4c, 0xa9, 0x8b, 0x84, 0x4f, 0x5e, 0x01, 0x50,
  2569. 0x41, 0x30, 0x58, 0xc5, 0x62, 0x74, 0x52, 0x1d,
  2570. 0x45, 0x24, 0x6a, 0x42, 0x64, 0x4f, 0x97, 0x1c,
  2571. 0xa8, 0x66, 0xb5, 0x6d, 0x79, 0xd4, 0x0d, 0x48,
  2572. 0xc5, 0x5f, 0xf3, 0x90, 0x32, 0xdd, 0xdd, 0xe1,
  2573. 0xe4, 0xa9, 0x9f, 0xfc, 0xc3, 0x52, 0x5a, 0x46,
  2574. 0xe4, 0x81, 0x84, 0x95, 0x36, 0x59, 0x7a, 0x6b,
  2575. 0xaa, 0xb3, 0x60, 0xad, 0xce, 0x9f, 0x9f, 0x28,
  2576. 0xe0, 0x01, 0x75, 0x22, 0xc4, 0x4e, 0xa9, 0x62,
  2577. 0x5c, 0x62, 0x0d, 0x00, 0xcb, 0x13, 0xe8, 0x43,
  2578. 0x72, 0xd4, 0x2d, 0x53, 0x46, 0xb5, 0xd1, 0x16,
  2579. 0x22, 0x18, 0xdf, 0x34, 0x33, 0xf5, 0xd6, 0x1c,
  2580. 0xb8, 0x79, 0x78, 0x97, 0x94, 0xff, 0x72, 0x13,
  2581. 0x4c, 0x27, 0xfc, 0xcb, 0xbf, 0x01, 0x53, 0xa6,
  2582. 0xb4, 0x50, 0x6e, 0xde, 0xdf, 0xb5, 0x43, 0xa4,
  2583. 0x59, 0xdf, 0x52, 0xf9, 0x7c, 0xe0, 0x11, 0x6f,
  2584. 0x2d, 0x14, 0x8e, 0x24, 0x61, 0x2c, 0xe1, 0x17,
  2585. 0xcc, 0xce, 0x51, 0x0c, 0x19, 0x8a, 0x82, 0x30,
  2586. 0x94, 0xd5, 0x3d, 0x6a, 0x53, 0x06, 0x5e, 0xbd,
  2587. 0xb7, 0xeb, 0xfa, 0xfd, 0x27, 0x51, 0xde, 0x85,
  2588. 0x1e, 0x86, 0x53, 0x11, 0x53, 0x94, 0x00, 0xee,
  2589. 0x2b, 0x8c, 0x08, 0x2a, 0xbf, 0xdd, 0xae, 0x11,
  2590. 0xcb, 0x1e, 0xa2, 0x07, 0x9a, 0x80, 0xcf, 0x62,
  2591. 0x9b, 0x09, 0xdc, 0x95, 0x3c, 0x96, 0x8e, 0xb1,
  2592. 0x09, 0xbd, 0xe4, 0xeb, 0xdb, 0xca, 0x70, 0x7a,
  2593. 0x9e, 0xfa, 0x31, 0x18, 0x45, 0x3c, 0x21, 0x33,
  2594. 0xb0, 0xb3, 0x2b, 0xea, 0xf3, 0x71, 0x2d, 0xe1,
  2595. 0x03, 0xad, 0x1b, 0x48, 0xd4, 0x67, 0x27, 0xf0,
  2596. 0x62, 0xe4, 0x3d, 0xfb, 0x9b, 0x08, 0x76, 0xe7,
  2597. 0xdd, 0x2b, 0x01, 0x39, 0x04, 0x5a, 0x58, 0x7a,
  2598. 0xf7, 0x11, 0x90, 0xec, 0xbd, 0x51, 0x5c, 0x32,
  2599. 0x6b, 0xd7, 0x35, 0x39, 0x02, 0x6b, 0xf2, 0xa6,
  2600. 0xd0, 0x0d, 0x07, 0xe1, 0x06, 0xc4, 0x5b, 0x7d,
  2601. 0xe4, 0x6a, 0xd7, 0xee, 0x15, 0x1f, 0x83, 0xb4,
  2602. 0xa3, 0xa7, 0x5e, 0xc3, 0x90, 0xb7, 0xef, 0xd3,
  2603. 0xb7, 0x4f, 0xf8, 0x92, 0x4c, 0xb7, 0x3c, 0x29,
  2604. 0xcd, 0x7e, 0x2b, 0x5d, 0x43, 0xea, 0x42, 0xe7,
  2605. 0x74, 0x3f, 0x7d, 0x58, 0x88, 0x75, 0xde, 0x3e },
  2606. .rlen = 512,
  2607. }
  2608. };
  2609. static struct cipher_testvec aes_lrw_dec_tv_template[] = {
  2610. /* from http://grouper.ieee.org/groups/1619/email/pdf00017.pdf */
  2611. /* same as enc vectors with input and result reversed */
  2612. { /* LRW-32-AES 1 */
  2613. .key = { 0x45, 0x62, 0xac, 0x25, 0xf8, 0x28, 0x17, 0x6d,
  2614. 0x4c, 0x26, 0x84, 0x14, 0xb5, 0x68, 0x01, 0x85,
  2615. 0x25, 0x8e, 0x2a, 0x05, 0xe7, 0x3e, 0x9d, 0x03,
  2616. 0xee, 0x5a, 0x83, 0x0c, 0xcc, 0x09, 0x4c, 0x87 },
  2617. .klen = 32,
  2618. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2619. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2620. .input = { 0xf1, 0xb2, 0x73, 0xcd, 0x65, 0xa3, 0xdf, 0x5f,
  2621. 0xe9, 0x5d, 0x48, 0x92, 0x54, 0x63, 0x4e, 0xb8 },
  2622. .ilen = 16,
  2623. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2624. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2625. .rlen = 16,
  2626. }, { /* LRW-32-AES 2 */
  2627. .key = { 0x59, 0x70, 0x47, 0x14, 0xf5, 0x57, 0x47, 0x8c,
  2628. 0xd7, 0x79, 0xe8, 0x0f, 0x54, 0x88, 0x79, 0x44,
  2629. 0x0d, 0x48, 0xf0, 0xb7, 0xb1, 0x5a, 0x53, 0xea,
  2630. 0x1c, 0xaa, 0x6b, 0x29, 0xc2, 0xca, 0xfb, 0xaf
  2631. },
  2632. .klen = 32,
  2633. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2634. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02 },
  2635. .input = { 0x00, 0xc8, 0x2b, 0xae, 0x95, 0xbb, 0xcd, 0xe5,
  2636. 0x27, 0x4f, 0x07, 0x69, 0xb2, 0x60, 0xe1, 0x36 },
  2637. .ilen = 16,
  2638. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2639. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2640. .rlen = 16,
  2641. }, { /* LRW-32-AES 3 */
  2642. .key = { 0xd8, 0x2a, 0x91, 0x34, 0xb2, 0x6a, 0x56, 0x50,
  2643. 0x30, 0xfe, 0x69, 0xe2, 0x37, 0x7f, 0x98, 0x47,
  2644. 0xcd, 0xf9, 0x0b, 0x16, 0x0c, 0x64, 0x8f, 0xb6,
  2645. 0xb0, 0x0d, 0x0d, 0x1b, 0xae, 0x85, 0x87, 0x1f },
  2646. .klen = 32,
  2647. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2648. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2649. .input = { 0x76, 0x32, 0x21, 0x83, 0xed, 0x8f, 0xf1, 0x82,
  2650. 0xf9, 0x59, 0x62, 0x03, 0x69, 0x0e, 0x5e, 0x01 },
  2651. .ilen = 16,
  2652. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2653. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2654. .rlen = 16,
  2655. }, { /* LRW-32-AES 4 */
  2656. .key = { 0x0f, 0x6a, 0xef, 0xf8, 0xd3, 0xd2, 0xbb, 0x15,
  2657. 0x25, 0x83, 0xf7, 0x3c, 0x1f, 0x01, 0x28, 0x74,
  2658. 0xca, 0xc6, 0xbc, 0x35, 0x4d, 0x4a, 0x65, 0x54,
  2659. 0x90, 0xae, 0x61, 0xcf, 0x7b, 0xae, 0xbd, 0xcc,
  2660. 0xad, 0xe4, 0x94, 0xc5, 0x4a, 0x29, 0xae, 0x70 },
  2661. .klen = 40,
  2662. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2663. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2664. .input = { 0x9c, 0x0f, 0x15, 0x2f, 0x55, 0xa2, 0xd8, 0xf0,
  2665. 0xd6, 0x7b, 0x8f, 0x9e, 0x28, 0x22, 0xbc, 0x41 },
  2666. .ilen = 16,
  2667. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2668. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2669. .rlen = 16,
  2670. }, { /* LRW-32-AES 5 */
  2671. .key = { 0x8a, 0xd4, 0xee, 0x10, 0x2f, 0xbd, 0x81, 0xff,
  2672. 0xf8, 0x86, 0xce, 0xac, 0x93, 0xc5, 0xad, 0xc6,
  2673. 0xa0, 0x19, 0x07, 0xc0, 0x9d, 0xf7, 0xbb, 0xdd,
  2674. 0x52, 0x13, 0xb2, 0xb7, 0xf0, 0xff, 0x11, 0xd8,
  2675. 0xd6, 0x08, 0xd0, 0xcd, 0x2e, 0xb1, 0x17, 0x6f },
  2676. .klen = 40,
  2677. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2678. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2679. .input = { 0xd4, 0x27, 0x6a, 0x7f, 0x14, 0x91, 0x3d, 0x65,
  2680. 0xc8, 0x60, 0x48, 0x02, 0x87, 0xe3, 0x34, 0x06 },
  2681. .ilen = 16,
  2682. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2683. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2684. .rlen = 16,
  2685. }, { /* LRW-32-AES 6 */
  2686. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2687. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2688. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2689. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2690. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2691. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2692. .klen = 48,
  2693. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2694. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2695. .input = { 0xbd, 0x06, 0xb8, 0xe1, 0xdb, 0x98, 0x89, 0x9e,
  2696. 0xc4, 0x98, 0xe4, 0x91, 0xcf, 0x1c, 0x70, 0x2b },
  2697. .ilen = 16,
  2698. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2699. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2700. .rlen = 16,
  2701. }, { /* LRW-32-AES 7 */
  2702. .key = { 0xfb, 0x76, 0x15, 0xb2, 0x3d, 0x80, 0x89, 0x1d,
  2703. 0xd4, 0x70, 0x98, 0x0b, 0xc7, 0x95, 0x84, 0xc8,
  2704. 0xb2, 0xfb, 0x64, 0xce, 0x60, 0x97, 0x87, 0x8d,
  2705. 0x17, 0xfc, 0xe4, 0x5a, 0x49, 0xe8, 0x30, 0xb7,
  2706. 0x6e, 0x78, 0x17, 0xe7, 0x2d, 0x5e, 0x12, 0xd4,
  2707. 0x60, 0x64, 0x04, 0x7a, 0xf1, 0x2f, 0x9e, 0x0c },
  2708. .klen = 48,
  2709. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2710. 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00 },
  2711. .input = { 0x5b, 0x90, 0x8e, 0xc1, 0xab, 0xdd, 0x67, 0x5f,
  2712. 0x3d, 0x69, 0x8a, 0x95, 0x53, 0xc8, 0x9c, 0xe5 },
  2713. .ilen = 16,
  2714. .result = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2715. 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46 },
  2716. .rlen = 16,
  2717. }, {
  2718. /* http://www.mail-archive.com/stds-p1619@listserv.ieee.org/msg00173.html */
  2719. .key = { 0xf8, 0xd4, 0x76, 0xff, 0xd6, 0x46, 0xee, 0x6c,
  2720. 0x23, 0x84, 0xcb, 0x1c, 0x77, 0xd6, 0x19, 0x5d,
  2721. 0xfe, 0xf1, 0xa9, 0xf3, 0x7b, 0xbc, 0x8d, 0x21,
  2722. 0xa7, 0x9c, 0x21, 0xf8, 0xcb, 0x90, 0x02, 0x89,
  2723. 0xa8, 0x45, 0x34, 0x8e, 0xc8, 0xc5, 0xb5, 0xf1,
  2724. 0x26, 0xf5, 0x0e, 0x76, 0xfe, 0xfd, 0x1b, 0x1e },
  2725. .klen = 48,
  2726. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2727. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
  2728. .input = { 0x1a, 0x1d, 0xa9, 0x30, 0xad, 0xf9, 0x2f, 0x9b,
  2729. 0xb6, 0x1d, 0xae, 0xef, 0xf0, 0x2f, 0xf8, 0x5a,
  2730. 0x39, 0x3c, 0xbf, 0x2a, 0xb2, 0x45, 0xb2, 0x23,
  2731. 0x1b, 0x63, 0x3c, 0xcf, 0xaa, 0xbe, 0xcf, 0x4e,
  2732. 0xfa, 0xe8, 0x29, 0xc2, 0x20, 0x68, 0x2b, 0x3c,
  2733. 0x2e, 0x8b, 0xf7, 0x6e, 0x25, 0xbd, 0xe3, 0x3d,
  2734. 0x66, 0x27, 0xd6, 0xaf, 0xd6, 0x64, 0x3e, 0xe3,
  2735. 0xe8, 0x58, 0x46, 0x97, 0x39, 0x51, 0x07, 0xde,
  2736. 0xcb, 0x37, 0xbc, 0xa9, 0xc0, 0x5f, 0x75, 0xc3,
  2737. 0x0e, 0x84, 0x23, 0x1d, 0x16, 0xd4, 0x1c, 0x59,
  2738. 0x9c, 0x1a, 0x02, 0x55, 0xab, 0x3a, 0x97, 0x1d,
  2739. 0xdf, 0xdd, 0xc7, 0x06, 0x51, 0xd7, 0x70, 0xae,
  2740. 0x23, 0xc6, 0x8c, 0xf5, 0x1e, 0xa0, 0xe5, 0x82,
  2741. 0xb8, 0xb2, 0xbf, 0x04, 0xa0, 0x32, 0x8e, 0x68,
  2742. 0xeb, 0xaf, 0x6e, 0x2d, 0x94, 0x22, 0x2f, 0xce,
  2743. 0x4c, 0xb5, 0x59, 0xe2, 0xa2, 0x2f, 0xa0, 0x98,
  2744. 0x1a, 0x97, 0xc6, 0xd4, 0xb5, 0x00, 0x59, 0xf2,
  2745. 0x84, 0x14, 0x72, 0xb1, 0x9a, 0x6e, 0xa3, 0x7f,
  2746. 0xea, 0x20, 0xe7, 0xcb, 0x65, 0x77, 0x3a, 0xdf,
  2747. 0xc8, 0x97, 0x67, 0x15, 0xc2, 0x2a, 0x27, 0xcc,
  2748. 0x18, 0x55, 0xa1, 0x24, 0x0b, 0x24, 0x24, 0xaf,
  2749. 0x5b, 0xec, 0x68, 0xb8, 0xc8, 0xf5, 0xba, 0x63,
  2750. 0xff, 0xed, 0x89, 0xce, 0xd5, 0x3d, 0x88, 0xf3,
  2751. 0x25, 0xef, 0x05, 0x7c, 0x3a, 0xef, 0xeb, 0xd8,
  2752. 0x7a, 0x32, 0x0d, 0xd1, 0x1e, 0x58, 0x59, 0x99,
  2753. 0x90, 0x25, 0xb5, 0x26, 0xb0, 0xe3, 0x2b, 0x6c,
  2754. 0x4c, 0xa9, 0x8b, 0x84, 0x4f, 0x5e, 0x01, 0x50,
  2755. 0x41, 0x30, 0x58, 0xc5, 0x62, 0x74, 0x52, 0x1d,
  2756. 0x45, 0x24, 0x6a, 0x42, 0x64, 0x4f, 0x97, 0x1c,
  2757. 0xa8, 0x66, 0xb5, 0x6d, 0x79, 0xd4, 0x0d, 0x48,
  2758. 0xc5, 0x5f, 0xf3, 0x90, 0x32, 0xdd, 0xdd, 0xe1,
  2759. 0xe4, 0xa9, 0x9f, 0xfc, 0xc3, 0x52, 0x5a, 0x46,
  2760. 0xe4, 0x81, 0x84, 0x95, 0x36, 0x59, 0x7a, 0x6b,
  2761. 0xaa, 0xb3, 0x60, 0xad, 0xce, 0x9f, 0x9f, 0x28,
  2762. 0xe0, 0x01, 0x75, 0x22, 0xc4, 0x4e, 0xa9, 0x62,
  2763. 0x5c, 0x62, 0x0d, 0x00, 0xcb, 0x13, 0xe8, 0x43,
  2764. 0x72, 0xd4, 0x2d, 0x53, 0x46, 0xb5, 0xd1, 0x16,
  2765. 0x22, 0x18, 0xdf, 0x34, 0x33, 0xf5, 0xd6, 0x1c,
  2766. 0xb8, 0x79, 0x78, 0x97, 0x94, 0xff, 0x72, 0x13,
  2767. 0x4c, 0x27, 0xfc, 0xcb, 0xbf, 0x01, 0x53, 0xa6,
  2768. 0xb4, 0x50, 0x6e, 0xde, 0xdf, 0xb5, 0x43, 0xa4,
  2769. 0x59, 0xdf, 0x52, 0xf9, 0x7c, 0xe0, 0x11, 0x6f,
  2770. 0x2d, 0x14, 0x8e, 0x24, 0x61, 0x2c, 0xe1, 0x17,
  2771. 0xcc, 0xce, 0x51, 0x0c, 0x19, 0x8a, 0x82, 0x30,
  2772. 0x94, 0xd5, 0x3d, 0x6a, 0x53, 0x06, 0x5e, 0xbd,
  2773. 0xb7, 0xeb, 0xfa, 0xfd, 0x27, 0x51, 0xde, 0x85,
  2774. 0x1e, 0x86, 0x53, 0x11, 0x53, 0x94, 0x00, 0xee,
  2775. 0x2b, 0x8c, 0x08, 0x2a, 0xbf, 0xdd, 0xae, 0x11,
  2776. 0xcb, 0x1e, 0xa2, 0x07, 0x9a, 0x80, 0xcf, 0x62,
  2777. 0x9b, 0x09, 0xdc, 0x95, 0x3c, 0x96, 0x8e, 0xb1,
  2778. 0x09, 0xbd, 0xe4, 0xeb, 0xdb, 0xca, 0x70, 0x7a,
  2779. 0x9e, 0xfa, 0x31, 0x18, 0x45, 0x3c, 0x21, 0x33,
  2780. 0xb0, 0xb3, 0x2b, 0xea, 0xf3, 0x71, 0x2d, 0xe1,
  2781. 0x03, 0xad, 0x1b, 0x48, 0xd4, 0x67, 0x27, 0xf0,
  2782. 0x62, 0xe4, 0x3d, 0xfb, 0x9b, 0x08, 0x76, 0xe7,
  2783. 0xdd, 0x2b, 0x01, 0x39, 0x04, 0x5a, 0x58, 0x7a,
  2784. 0xf7, 0x11, 0x90, 0xec, 0xbd, 0x51, 0x5c, 0x32,
  2785. 0x6b, 0xd7, 0x35, 0x39, 0x02, 0x6b, 0xf2, 0xa6,
  2786. 0xd0, 0x0d, 0x07, 0xe1, 0x06, 0xc4, 0x5b, 0x7d,
  2787. 0xe4, 0x6a, 0xd7, 0xee, 0x15, 0x1f, 0x83, 0xb4,
  2788. 0xa3, 0xa7, 0x5e, 0xc3, 0x90, 0xb7, 0xef, 0xd3,
  2789. 0xb7, 0x4f, 0xf8, 0x92, 0x4c, 0xb7, 0x3c, 0x29,
  2790. 0xcd, 0x7e, 0x2b, 0x5d, 0x43, 0xea, 0x42, 0xe7,
  2791. 0x74, 0x3f, 0x7d, 0x58, 0x88, 0x75, 0xde, 0x3e },
  2792. .ilen = 512,
  2793. .result = { 0x05, 0x11, 0xb7, 0x18, 0xab, 0xc6, 0x2d, 0xac,
  2794. 0x70, 0x5d, 0xf6, 0x22, 0x94, 0xcd, 0xe5, 0x6c,
  2795. 0x17, 0x6b, 0xf6, 0x1c, 0xf0, 0xf3, 0x6e, 0xf8,
  2796. 0x50, 0x38, 0x1f, 0x71, 0x49, 0xb6, 0x57, 0xd6,
  2797. 0x8f, 0xcb, 0x8d, 0x6b, 0xe3, 0xa6, 0x29, 0x90,
  2798. 0xfe, 0x2a, 0x62, 0x82, 0xae, 0x6d, 0x8b, 0xf6,
  2799. 0xad, 0x1e, 0x9e, 0x20, 0x5f, 0x38, 0xbe, 0x04,
  2800. 0xda, 0x10, 0x8e, 0xed, 0xa2, 0xa4, 0x87, 0xab,
  2801. 0xda, 0x6b, 0xb4, 0x0c, 0x75, 0xba, 0xd3, 0x7c,
  2802. 0xc9, 0xac, 0x42, 0x31, 0x95, 0x7c, 0xc9, 0x04,
  2803. 0xeb, 0xd5, 0x6e, 0x32, 0x69, 0x8a, 0xdb, 0xa6,
  2804. 0x15, 0xd7, 0x3f, 0x4f, 0x2f, 0x66, 0x69, 0x03,
  2805. 0x9c, 0x1f, 0x54, 0x0f, 0xde, 0x1f, 0xf3, 0x65,
  2806. 0x4c, 0x96, 0x12, 0xed, 0x7c, 0x92, 0x03, 0x01,
  2807. 0x6f, 0xbc, 0x35, 0x93, 0xac, 0xf1, 0x27, 0xf1,
  2808. 0xb4, 0x96, 0x82, 0x5a, 0x5f, 0xb0, 0xa0, 0x50,
  2809. 0x89, 0xa4, 0x8e, 0x66, 0x44, 0x85, 0xcc, 0xfd,
  2810. 0x33, 0x14, 0x70, 0xe3, 0x96, 0xb2, 0xc3, 0xd3,
  2811. 0xbb, 0x54, 0x5a, 0x1a, 0xf9, 0x74, 0xa2, 0xc5,
  2812. 0x2d, 0x64, 0x75, 0xdd, 0xb4, 0x54, 0xe6, 0x74,
  2813. 0x8c, 0xd3, 0x9d, 0x9e, 0x86, 0xab, 0x51, 0x53,
  2814. 0xb7, 0x93, 0x3e, 0x6f, 0xd0, 0x4e, 0x2c, 0x40,
  2815. 0xf6, 0xa8, 0x2e, 0x3e, 0x9d, 0xf4, 0x66, 0xa5,
  2816. 0x76, 0x12, 0x73, 0x44, 0x1a, 0x56, 0xd7, 0x72,
  2817. 0x88, 0xcd, 0x21, 0x8c, 0x4c, 0x0f, 0xfe, 0xda,
  2818. 0x95, 0xe0, 0x3a, 0xa6, 0xa5, 0x84, 0x46, 0xcd,
  2819. 0xd5, 0x3e, 0x9d, 0x3a, 0xe2, 0x67, 0xe6, 0x60,
  2820. 0x1a, 0xe2, 0x70, 0x85, 0x58, 0xc2, 0x1b, 0x09,
  2821. 0xe1, 0xd7, 0x2c, 0xca, 0xad, 0xa8, 0x8f, 0xf9,
  2822. 0xac, 0xb3, 0x0e, 0xdb, 0xca, 0x2e, 0xe2, 0xb8,
  2823. 0x51, 0x71, 0xd9, 0x3c, 0x6c, 0xf1, 0x56, 0xf8,
  2824. 0xea, 0x9c, 0xf1, 0xfb, 0x0c, 0xe6, 0xb7, 0x10,
  2825. 0x1c, 0xf8, 0xa9, 0x7c, 0xe8, 0x53, 0x35, 0xc1,
  2826. 0x90, 0x3e, 0x76, 0x4a, 0x74, 0xa4, 0x21, 0x2c,
  2827. 0xf6, 0x2c, 0x4e, 0x0f, 0x94, 0x3a, 0x88, 0x2e,
  2828. 0x41, 0x09, 0x6a, 0x33, 0x7d, 0xf6, 0xdd, 0x3f,
  2829. 0x8d, 0x23, 0x31, 0x74, 0x84, 0xeb, 0x88, 0x6e,
  2830. 0xcc, 0xb9, 0xbc, 0x22, 0x83, 0x19, 0x07, 0x22,
  2831. 0xa5, 0x2d, 0xdf, 0xa5, 0xf3, 0x80, 0x85, 0x78,
  2832. 0x84, 0x39, 0x6a, 0x6d, 0x6a, 0x99, 0x4f, 0xa5,
  2833. 0x15, 0xfe, 0x46, 0xb0, 0xe4, 0x6c, 0xa5, 0x41,
  2834. 0x3c, 0xce, 0x8f, 0x42, 0x60, 0x71, 0xa7, 0x75,
  2835. 0x08, 0x40, 0x65, 0x8a, 0x82, 0xbf, 0xf5, 0x43,
  2836. 0x71, 0x96, 0xa9, 0x4d, 0x44, 0x8a, 0x20, 0xbe,
  2837. 0xfa, 0x4d, 0xbb, 0xc0, 0x7d, 0x31, 0x96, 0x65,
  2838. 0xe7, 0x75, 0xe5, 0x3e, 0xfd, 0x92, 0x3b, 0xc9,
  2839. 0x55, 0xbb, 0x16, 0x7e, 0xf7, 0xc2, 0x8c, 0xa4,
  2840. 0x40, 0x1d, 0xe5, 0xef, 0x0e, 0xdf, 0xe4, 0x9a,
  2841. 0x62, 0x73, 0x65, 0xfd, 0x46, 0x63, 0x25, 0x3d,
  2842. 0x2b, 0xaf, 0xe5, 0x64, 0xfe, 0xa5, 0x5c, 0xcf,
  2843. 0x24, 0xf3, 0xb4, 0xac, 0x64, 0xba, 0xdf, 0x4b,
  2844. 0xc6, 0x96, 0x7d, 0x81, 0x2d, 0x8d, 0x97, 0xf7,
  2845. 0xc5, 0x68, 0x77, 0x84, 0x32, 0x2b, 0xcc, 0x85,
  2846. 0x74, 0x96, 0xf0, 0x12, 0x77, 0x61, 0xb9, 0xeb,
  2847. 0x71, 0xaa, 0x82, 0xcb, 0x1c, 0xdb, 0x89, 0xc8,
  2848. 0xc6, 0xb5, 0xe3, 0x5c, 0x7d, 0x39, 0x07, 0x24,
  2849. 0xda, 0x39, 0x87, 0x45, 0xc0, 0x2b, 0xbb, 0x01,
  2850. 0xac, 0xbc, 0x2a, 0x5c, 0x7f, 0xfc, 0xe8, 0xce,
  2851. 0x6d, 0x9c, 0x6f, 0xed, 0xd3, 0xc1, 0xa1, 0xd6,
  2852. 0xc5, 0x55, 0xa9, 0x66, 0x2f, 0xe1, 0xc8, 0x32,
  2853. 0xa6, 0x5d, 0xa4, 0x3a, 0x98, 0x73, 0xe8, 0x45,
  2854. 0xa4, 0xc7, 0xa8, 0xb4, 0xf6, 0x13, 0x03, 0xf6,
  2855. 0xe9, 0x2e, 0xc4, 0x29, 0x0f, 0x84, 0xdb, 0xc4,
  2856. 0x21, 0xc4, 0xc2, 0x75, 0x67, 0x89, 0x37, 0x0a },
  2857. .rlen = 512,
  2858. }
  2859. };
  2860. static struct cipher_testvec aes_xts_enc_tv_template[] = {
  2861. /* http://grouper.ieee.org/groups/1619/email/pdf00086.pdf */
  2862. { /* XTS-AES 1 */
  2863. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2864. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2865. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2866. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2867. .klen = 32,
  2868. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2869. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2870. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2871. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2872. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2873. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2874. .ilen = 32,
  2875. .result = { 0x91, 0x7c, 0xf6, 0x9e, 0xbd, 0x68, 0xb2, 0xec,
  2876. 0x9b, 0x9f, 0xe9, 0xa3, 0xea, 0xdd, 0xa6, 0x92,
  2877. 0xcd, 0x43, 0xd2, 0xf5, 0x95, 0x98, 0xed, 0x85,
  2878. 0x8c, 0x02, 0xc2, 0x65, 0x2f, 0xbf, 0x92, 0x2e },
  2879. .rlen = 32,
  2880. }, { /* XTS-AES 2 */
  2881. .key = { 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  2882. 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  2883. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  2884. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  2885. .klen = 32,
  2886. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  2887. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2888. .input = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2889. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2890. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2891. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  2892. .ilen = 32,
  2893. .result = { 0xc4, 0x54, 0x18, 0x5e, 0x6a, 0x16, 0x93, 0x6e,
  2894. 0x39, 0x33, 0x40, 0x38, 0xac, 0xef, 0x83, 0x8b,
  2895. 0xfb, 0x18, 0x6f, 0xff, 0x74, 0x80, 0xad, 0xc4,
  2896. 0x28, 0x93, 0x82, 0xec, 0xd6, 0xd3, 0x94, 0xf0 },
  2897. .rlen = 32,
  2898. }, { /* XTS-AES 3 */
  2899. .key = { 0xff, 0xfe, 0xfd, 0xfc, 0xfb, 0xfa, 0xf9, 0xf8,
  2900. 0xf7, 0xf6, 0xf5, 0xf4, 0xf3, 0xf2, 0xf1, 0xf0,
  2901. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  2902. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  2903. .klen = 32,
  2904. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  2905. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2906. .input = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2907. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2908. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  2909. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  2910. .ilen = 32,
  2911. .result = { 0xaf, 0x85, 0x33, 0x6b, 0x59, 0x7a, 0xfc, 0x1a,
  2912. 0x90, 0x0b, 0x2e, 0xb2, 0x1e, 0xc9, 0x49, 0xd2,
  2913. 0x92, 0xdf, 0x4c, 0x04, 0x7e, 0x0b, 0x21, 0x53,
  2914. 0x21, 0x86, 0xa5, 0x97, 0x1a, 0x22, 0x7a, 0x89 },
  2915. .rlen = 32,
  2916. }, { /* XTS-AES 4 */
  2917. .key = { 0x27, 0x18, 0x28, 0x18, 0x28, 0x45, 0x90, 0x45,
  2918. 0x23, 0x53, 0x60, 0x28, 0x74, 0x71, 0x35, 0x26,
  2919. 0x31, 0x41, 0x59, 0x26, 0x53, 0x58, 0x97, 0x93,
  2920. 0x23, 0x84, 0x62, 0x64, 0x33, 0x83, 0x27, 0x95 },
  2921. .klen = 32,
  2922. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  2923. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  2924. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2925. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2926. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2927. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  2928. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  2929. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  2930. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2931. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  2932. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  2933. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  2934. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  2935. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  2936. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  2937. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  2938. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  2939. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  2940. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  2941. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  2942. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  2943. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  2944. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  2945. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  2946. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  2947. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  2948. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  2949. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  2950. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  2951. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  2952. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  2953. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  2954. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  2955. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff,
  2956. 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  2957. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  2958. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  2959. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  2960. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  2961. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  2962. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  2963. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  2964. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  2965. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  2966. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  2967. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  2968. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  2969. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  2970. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  2971. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  2972. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  2973. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  2974. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  2975. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  2976. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  2977. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  2978. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  2979. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  2980. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  2981. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  2982. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  2983. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  2984. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  2985. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  2986. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  2987. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff },
  2988. .ilen = 512,
  2989. .result = { 0x27, 0xa7, 0x47, 0x9b, 0xef, 0xa1, 0xd4, 0x76,
  2990. 0x48, 0x9f, 0x30, 0x8c, 0xd4, 0xcf, 0xa6, 0xe2,
  2991. 0xa9, 0x6e, 0x4b, 0xbe, 0x32, 0x08, 0xff, 0x25,
  2992. 0x28, 0x7d, 0xd3, 0x81, 0x96, 0x16, 0xe8, 0x9c,
  2993. 0xc7, 0x8c, 0xf7, 0xf5, 0xe5, 0x43, 0x44, 0x5f,
  2994. 0x83, 0x33, 0xd8, 0xfa, 0x7f, 0x56, 0x00, 0x00,
  2995. 0x05, 0x27, 0x9f, 0xa5, 0xd8, 0xb5, 0xe4, 0xad,
  2996. 0x40, 0xe7, 0x36, 0xdd, 0xb4, 0xd3, 0x54, 0x12,
  2997. 0x32, 0x80, 0x63, 0xfd, 0x2a, 0xab, 0x53, 0xe5,
  2998. 0xea, 0x1e, 0x0a, 0x9f, 0x33, 0x25, 0x00, 0xa5,
  2999. 0xdf, 0x94, 0x87, 0xd0, 0x7a, 0x5c, 0x92, 0xcc,
  3000. 0x51, 0x2c, 0x88, 0x66, 0xc7, 0xe8, 0x60, 0xce,
  3001. 0x93, 0xfd, 0xf1, 0x66, 0xa2, 0x49, 0x12, 0xb4,
  3002. 0x22, 0x97, 0x61, 0x46, 0xae, 0x20, 0xce, 0x84,
  3003. 0x6b, 0xb7, 0xdc, 0x9b, 0xa9, 0x4a, 0x76, 0x7a,
  3004. 0xae, 0xf2, 0x0c, 0x0d, 0x61, 0xad, 0x02, 0x65,
  3005. 0x5e, 0xa9, 0x2d, 0xc4, 0xc4, 0xe4, 0x1a, 0x89,
  3006. 0x52, 0xc6, 0x51, 0xd3, 0x31, 0x74, 0xbe, 0x51,
  3007. 0xa1, 0x0c, 0x42, 0x11, 0x10, 0xe6, 0xd8, 0x15,
  3008. 0x88, 0xed, 0xe8, 0x21, 0x03, 0xa2, 0x52, 0xd8,
  3009. 0xa7, 0x50, 0xe8, 0x76, 0x8d, 0xef, 0xff, 0xed,
  3010. 0x91, 0x22, 0x81, 0x0a, 0xae, 0xb9, 0x9f, 0x91,
  3011. 0x72, 0xaf, 0x82, 0xb6, 0x04, 0xdc, 0x4b, 0x8e,
  3012. 0x51, 0xbc, 0xb0, 0x82, 0x35, 0xa6, 0xf4, 0x34,
  3013. 0x13, 0x32, 0xe4, 0xca, 0x60, 0x48, 0x2a, 0x4b,
  3014. 0xa1, 0xa0, 0x3b, 0x3e, 0x65, 0x00, 0x8f, 0xc5,
  3015. 0xda, 0x76, 0xb7, 0x0b, 0xf1, 0x69, 0x0d, 0xb4,
  3016. 0xea, 0xe2, 0x9c, 0x5f, 0x1b, 0xad, 0xd0, 0x3c,
  3017. 0x5c, 0xcf, 0x2a, 0x55, 0xd7, 0x05, 0xdd, 0xcd,
  3018. 0x86, 0xd4, 0x49, 0x51, 0x1c, 0xeb, 0x7e, 0xc3,
  3019. 0x0b, 0xf1, 0x2b, 0x1f, 0xa3, 0x5b, 0x91, 0x3f,
  3020. 0x9f, 0x74, 0x7a, 0x8a, 0xfd, 0x1b, 0x13, 0x0e,
  3021. 0x94, 0xbf, 0xf9, 0x4e, 0xff, 0xd0, 0x1a, 0x91,
  3022. 0x73, 0x5c, 0xa1, 0x72, 0x6a, 0xcd, 0x0b, 0x19,
  3023. 0x7c, 0x4e, 0x5b, 0x03, 0x39, 0x36, 0x97, 0xe1,
  3024. 0x26, 0x82, 0x6f, 0xb6, 0xbb, 0xde, 0x8e, 0xcc,
  3025. 0x1e, 0x08, 0x29, 0x85, 0x16, 0xe2, 0xc9, 0xed,
  3026. 0x03, 0xff, 0x3c, 0x1b, 0x78, 0x60, 0xf6, 0xde,
  3027. 0x76, 0xd4, 0xce, 0xcd, 0x94, 0xc8, 0x11, 0x98,
  3028. 0x55, 0xef, 0x52, 0x97, 0xca, 0x67, 0xe9, 0xf3,
  3029. 0xe7, 0xff, 0x72, 0xb1, 0xe9, 0x97, 0x85, 0xca,
  3030. 0x0a, 0x7e, 0x77, 0x20, 0xc5, 0xb3, 0x6d, 0xc6,
  3031. 0xd7, 0x2c, 0xac, 0x95, 0x74, 0xc8, 0xcb, 0xbc,
  3032. 0x2f, 0x80, 0x1e, 0x23, 0xe5, 0x6f, 0xd3, 0x44,
  3033. 0xb0, 0x7f, 0x22, 0x15, 0x4b, 0xeb, 0xa0, 0xf0,
  3034. 0x8c, 0xe8, 0x89, 0x1e, 0x64, 0x3e, 0xd9, 0x95,
  3035. 0xc9, 0x4d, 0x9a, 0x69, 0xc9, 0xf1, 0xb5, 0xf4,
  3036. 0x99, 0x02, 0x7a, 0x78, 0x57, 0x2a, 0xee, 0xbd,
  3037. 0x74, 0xd2, 0x0c, 0xc3, 0x98, 0x81, 0xc2, 0x13,
  3038. 0xee, 0x77, 0x0b, 0x10, 0x10, 0xe4, 0xbe, 0xa7,
  3039. 0x18, 0x84, 0x69, 0x77, 0xae, 0x11, 0x9f, 0x7a,
  3040. 0x02, 0x3a, 0xb5, 0x8c, 0xca, 0x0a, 0xd7, 0x52,
  3041. 0xaf, 0xe6, 0x56, 0xbb, 0x3c, 0x17, 0x25, 0x6a,
  3042. 0x9f, 0x6e, 0x9b, 0xf1, 0x9f, 0xdd, 0x5a, 0x38,
  3043. 0xfc, 0x82, 0xbb, 0xe8, 0x72, 0xc5, 0x53, 0x9e,
  3044. 0xdb, 0x60, 0x9e, 0xf4, 0xf7, 0x9c, 0x20, 0x3e,
  3045. 0xbb, 0x14, 0x0f, 0x2e, 0x58, 0x3c, 0xb2, 0xad,
  3046. 0x15, 0xb4, 0xaa, 0x5b, 0x65, 0x50, 0x16, 0xa8,
  3047. 0x44, 0x92, 0x77, 0xdb, 0xd4, 0x77, 0xef, 0x2c,
  3048. 0x8d, 0x6c, 0x01, 0x7d, 0xb7, 0x38, 0xb1, 0x8d,
  3049. 0xeb, 0x4a, 0x42, 0x7d, 0x19, 0x23, 0xce, 0x3f,
  3050. 0xf2, 0x62, 0x73, 0x57, 0x79, 0xa4, 0x18, 0xf2,
  3051. 0x0a, 0x28, 0x2d, 0xf9, 0x20, 0x14, 0x7b, 0xea,
  3052. 0xbe, 0x42, 0x1e, 0xe5, 0x31, 0x9d, 0x05, 0x68 },
  3053. .rlen = 512,
  3054. }
  3055. };
  3056. static struct cipher_testvec aes_xts_dec_tv_template[] = {
  3057. /* http://grouper.ieee.org/groups/1619/email/pdf00086.pdf */
  3058. { /* XTS-AES 1 */
  3059. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3060. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3061. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3062. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3063. .klen = 32,
  3064. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3065. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3066. .input = { 0x91, 0x7c, 0xf6, 0x9e, 0xbd, 0x68, 0xb2, 0xec,
  3067. 0x9b, 0x9f, 0xe9, 0xa3, 0xea, 0xdd, 0xa6, 0x92,
  3068. 0xcd, 0x43, 0xd2, 0xf5, 0x95, 0x98, 0xed, 0x85,
  3069. 0x8c, 0x02, 0xc2, 0x65, 0x2f, 0xbf, 0x92, 0x2e },
  3070. .ilen = 32,
  3071. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3072. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3073. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3074. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3075. .rlen = 32,
  3076. }, { /* XTS-AES 2 */
  3077. .key = { 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  3078. 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11,
  3079. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  3080. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  3081. .klen = 32,
  3082. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  3083. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3084. .input = { 0xc4, 0x54, 0x18, 0x5e, 0x6a, 0x16, 0x93, 0x6e,
  3085. 0x39, 0x33, 0x40, 0x38, 0xac, 0xef, 0x83, 0x8b,
  3086. 0xfb, 0x18, 0x6f, 0xff, 0x74, 0x80, 0xad, 0xc4,
  3087. 0x28, 0x93, 0x82, 0xec, 0xd6, 0xd3, 0x94, 0xf0 },
  3088. .ilen = 32,
  3089. .result = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3090. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3091. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3092. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  3093. .rlen = 32,
  3094. }, { /* XTS-AES 3 */
  3095. .key = { 0xff, 0xfe, 0xfd, 0xfc, 0xfb, 0xfa, 0xf9, 0xf8,
  3096. 0xf7, 0xf6, 0xf5, 0xf4, 0xf3, 0xf2, 0xf1, 0xf0,
  3097. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22,
  3098. 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22 },
  3099. .klen = 32,
  3100. .iv = { 0x33, 0x33, 0x33, 0x33, 0x33, 0x00, 0x00, 0x00,
  3101. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3102. .input = { 0xaf, 0x85, 0x33, 0x6b, 0x59, 0x7a, 0xfc, 0x1a,
  3103. 0x90, 0x0b, 0x2e, 0xb2, 0x1e, 0xc9, 0x49, 0xd2,
  3104. 0x92, 0xdf, 0x4c, 0x04, 0x7e, 0x0b, 0x21, 0x53,
  3105. 0x21, 0x86, 0xa5, 0x97, 0x1a, 0x22, 0x7a, 0x89 },
  3106. .ilen = 32,
  3107. .result = { 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3108. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3109. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44,
  3110. 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44 },
  3111. .rlen = 32,
  3112. }, { /* XTS-AES 4 */
  3113. .key = { 0x27, 0x18, 0x28, 0x18, 0x28, 0x45, 0x90, 0x45,
  3114. 0x23, 0x53, 0x60, 0x28, 0x74, 0x71, 0x35, 0x26,
  3115. 0x31, 0x41, 0x59, 0x26, 0x53, 0x58, 0x97, 0x93,
  3116. 0x23, 0x84, 0x62, 0x64, 0x33, 0x83, 0x27, 0x95 },
  3117. .klen = 32,
  3118. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3119. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3120. .input = { 0x27, 0xa7, 0x47, 0x9b, 0xef, 0xa1, 0xd4, 0x76,
  3121. 0x48, 0x9f, 0x30, 0x8c, 0xd4, 0xcf, 0xa6, 0xe2,
  3122. 0xa9, 0x6e, 0x4b, 0xbe, 0x32, 0x08, 0xff, 0x25,
  3123. 0x28, 0x7d, 0xd3, 0x81, 0x96, 0x16, 0xe8, 0x9c,
  3124. 0xc7, 0x8c, 0xf7, 0xf5, 0xe5, 0x43, 0x44, 0x5f,
  3125. 0x83, 0x33, 0xd8, 0xfa, 0x7f, 0x56, 0x00, 0x00,
  3126. 0x05, 0x27, 0x9f, 0xa5, 0xd8, 0xb5, 0xe4, 0xad,
  3127. 0x40, 0xe7, 0x36, 0xdd, 0xb4, 0xd3, 0x54, 0x12,
  3128. 0x32, 0x80, 0x63, 0xfd, 0x2a, 0xab, 0x53, 0xe5,
  3129. 0xea, 0x1e, 0x0a, 0x9f, 0x33, 0x25, 0x00, 0xa5,
  3130. 0xdf, 0x94, 0x87, 0xd0, 0x7a, 0x5c, 0x92, 0xcc,
  3131. 0x51, 0x2c, 0x88, 0x66, 0xc7, 0xe8, 0x60, 0xce,
  3132. 0x93, 0xfd, 0xf1, 0x66, 0xa2, 0x49, 0x12, 0xb4,
  3133. 0x22, 0x97, 0x61, 0x46, 0xae, 0x20, 0xce, 0x84,
  3134. 0x6b, 0xb7, 0xdc, 0x9b, 0xa9, 0x4a, 0x76, 0x7a,
  3135. 0xae, 0xf2, 0x0c, 0x0d, 0x61, 0xad, 0x02, 0x65,
  3136. 0x5e, 0xa9, 0x2d, 0xc4, 0xc4, 0xe4, 0x1a, 0x89,
  3137. 0x52, 0xc6, 0x51, 0xd3, 0x31, 0x74, 0xbe, 0x51,
  3138. 0xa1, 0x0c, 0x42, 0x11, 0x10, 0xe6, 0xd8, 0x15,
  3139. 0x88, 0xed, 0xe8, 0x21, 0x03, 0xa2, 0x52, 0xd8,
  3140. 0xa7, 0x50, 0xe8, 0x76, 0x8d, 0xef, 0xff, 0xed,
  3141. 0x91, 0x22, 0x81, 0x0a, 0xae, 0xb9, 0x9f, 0x91,
  3142. 0x72, 0xaf, 0x82, 0xb6, 0x04, 0xdc, 0x4b, 0x8e,
  3143. 0x51, 0xbc, 0xb0, 0x82, 0x35, 0xa6, 0xf4, 0x34,
  3144. 0x13, 0x32, 0xe4, 0xca, 0x60, 0x48, 0x2a, 0x4b,
  3145. 0xa1, 0xa0, 0x3b, 0x3e, 0x65, 0x00, 0x8f, 0xc5,
  3146. 0xda, 0x76, 0xb7, 0x0b, 0xf1, 0x69, 0x0d, 0xb4,
  3147. 0xea, 0xe2, 0x9c, 0x5f, 0x1b, 0xad, 0xd0, 0x3c,
  3148. 0x5c, 0xcf, 0x2a, 0x55, 0xd7, 0x05, 0xdd, 0xcd,
  3149. 0x86, 0xd4, 0x49, 0x51, 0x1c, 0xeb, 0x7e, 0xc3,
  3150. 0x0b, 0xf1, 0x2b, 0x1f, 0xa3, 0x5b, 0x91, 0x3f,
  3151. 0x9f, 0x74, 0x7a, 0x8a, 0xfd, 0x1b, 0x13, 0x0e,
  3152. 0x94, 0xbf, 0xf9, 0x4e, 0xff, 0xd0, 0x1a, 0x91,
  3153. 0x73, 0x5c, 0xa1, 0x72, 0x6a, 0xcd, 0x0b, 0x19,
  3154. 0x7c, 0x4e, 0x5b, 0x03, 0x39, 0x36, 0x97, 0xe1,
  3155. 0x26, 0x82, 0x6f, 0xb6, 0xbb, 0xde, 0x8e, 0xcc,
  3156. 0x1e, 0x08, 0x29, 0x85, 0x16, 0xe2, 0xc9, 0xed,
  3157. 0x03, 0xff, 0x3c, 0x1b, 0x78, 0x60, 0xf6, 0xde,
  3158. 0x76, 0xd4, 0xce, 0xcd, 0x94, 0xc8, 0x11, 0x98,
  3159. 0x55, 0xef, 0x52, 0x97, 0xca, 0x67, 0xe9, 0xf3,
  3160. 0xe7, 0xff, 0x72, 0xb1, 0xe9, 0x97, 0x85, 0xca,
  3161. 0x0a, 0x7e, 0x77, 0x20, 0xc5, 0xb3, 0x6d, 0xc6,
  3162. 0xd7, 0x2c, 0xac, 0x95, 0x74, 0xc8, 0xcb, 0xbc,
  3163. 0x2f, 0x80, 0x1e, 0x23, 0xe5, 0x6f, 0xd3, 0x44,
  3164. 0xb0, 0x7f, 0x22, 0x15, 0x4b, 0xeb, 0xa0, 0xf0,
  3165. 0x8c, 0xe8, 0x89, 0x1e, 0x64, 0x3e, 0xd9, 0x95,
  3166. 0xc9, 0x4d, 0x9a, 0x69, 0xc9, 0xf1, 0xb5, 0xf4,
  3167. 0x99, 0x02, 0x7a, 0x78, 0x57, 0x2a, 0xee, 0xbd,
  3168. 0x74, 0xd2, 0x0c, 0xc3, 0x98, 0x81, 0xc2, 0x13,
  3169. 0xee, 0x77, 0x0b, 0x10, 0x10, 0xe4, 0xbe, 0xa7,
  3170. 0x18, 0x84, 0x69, 0x77, 0xae, 0x11, 0x9f, 0x7a,
  3171. 0x02, 0x3a, 0xb5, 0x8c, 0xca, 0x0a, 0xd7, 0x52,
  3172. 0xaf, 0xe6, 0x56, 0xbb, 0x3c, 0x17, 0x25, 0x6a,
  3173. 0x9f, 0x6e, 0x9b, 0xf1, 0x9f, 0xdd, 0x5a, 0x38,
  3174. 0xfc, 0x82, 0xbb, 0xe8, 0x72, 0xc5, 0x53, 0x9e,
  3175. 0xdb, 0x60, 0x9e, 0xf4, 0xf7, 0x9c, 0x20, 0x3e,
  3176. 0xbb, 0x14, 0x0f, 0x2e, 0x58, 0x3c, 0xb2, 0xad,
  3177. 0x15, 0xb4, 0xaa, 0x5b, 0x65, 0x50, 0x16, 0xa8,
  3178. 0x44, 0x92, 0x77, 0xdb, 0xd4, 0x77, 0xef, 0x2c,
  3179. 0x8d, 0x6c, 0x01, 0x7d, 0xb7, 0x38, 0xb1, 0x8d,
  3180. 0xeb, 0x4a, 0x42, 0x7d, 0x19, 0x23, 0xce, 0x3f,
  3181. 0xf2, 0x62, 0x73, 0x57, 0x79, 0xa4, 0x18, 0xf2,
  3182. 0x0a, 0x28, 0x2d, 0xf9, 0x20, 0x14, 0x7b, 0xea,
  3183. 0xbe, 0x42, 0x1e, 0xe5, 0x31, 0x9d, 0x05, 0x68 },
  3184. .ilen = 512,
  3185. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3186. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3187. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3188. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  3189. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  3190. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  3191. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  3192. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  3193. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  3194. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  3195. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  3196. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  3197. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  3198. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  3199. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  3200. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  3201. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  3202. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  3203. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  3204. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  3205. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  3206. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  3207. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  3208. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  3209. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  3210. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  3211. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  3212. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  3213. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  3214. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  3215. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  3216. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff,
  3217. 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3218. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3219. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3220. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
  3221. 0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
  3222. 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
  3223. 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
  3224. 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
  3225. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  3226. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
  3227. 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
  3228. 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
  3229. 0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
  3230. 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
  3231. 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
  3232. 0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
  3233. 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
  3234. 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
  3235. 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
  3236. 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
  3237. 0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
  3238. 0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
  3239. 0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
  3240. 0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
  3241. 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
  3242. 0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
  3243. 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
  3244. 0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
  3245. 0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
  3246. 0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
  3247. 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
  3248. 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff },
  3249. .rlen = 512,
  3250. }
  3251. };
  3252. static struct cipher_testvec aes_ctr_enc_tv_template[] = {
  3253. { /* From RFC 3686 */
  3254. .key = { 0xae, 0x68, 0x52, 0xf8, 0x12, 0x10, 0x67, 0xcc,
  3255. 0x4b, 0xf7, 0xa5, 0x76, 0x55, 0x77, 0xf3, 0x9e,
  3256. 0x00, 0x00, 0x00, 0x30 },
  3257. .klen = 20,
  3258. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3259. .input = { "Single block msg" },
  3260. .ilen = 16,
  3261. .result = { 0xe4, 0x09, 0x5d, 0x4f, 0xb7, 0xa7, 0xb3, 0x79,
  3262. 0x2d, 0x61, 0x75, 0xa3, 0x26, 0x13, 0x11, 0xb8 },
  3263. .rlen = 16,
  3264. }, {
  3265. .key = { 0x7e, 0x24, 0x06, 0x78, 0x17, 0xfa, 0xe0, 0xd7,
  3266. 0x43, 0xd6, 0xce, 0x1f, 0x32, 0x53, 0x91, 0x63,
  3267. 0x00, 0x6c, 0xb6, 0xdb },
  3268. .klen = 20,
  3269. .iv = { 0xc0, 0x54, 0x3b, 0x59, 0xda, 0x48, 0xd9, 0x0b },
  3270. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3271. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3272. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3273. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3274. .ilen = 32,
  3275. .result = { 0x51, 0x04, 0xa1, 0x06, 0x16, 0x8a, 0x72, 0xd9,
  3276. 0x79, 0x0d, 0x41, 0xee, 0x8e, 0xda, 0xd3, 0x88,
  3277. 0xeb, 0x2e, 0x1e, 0xfc, 0x46, 0xda, 0x57, 0xc8,
  3278. 0xfc, 0xe6, 0x30, 0xdf, 0x91, 0x41, 0xbe, 0x28 },
  3279. .rlen = 32,
  3280. }, {
  3281. .key = { 0x16, 0xaf, 0x5b, 0x14, 0x5f, 0xc9, 0xf5, 0x79,
  3282. 0xc1, 0x75, 0xf9, 0x3e, 0x3b, 0xfb, 0x0e, 0xed,
  3283. 0x86, 0x3d, 0x06, 0xcc, 0xfd, 0xb7, 0x85, 0x15,
  3284. 0x00, 0x00, 0x00, 0x48 },
  3285. .klen = 28,
  3286. .iv = { 0x36, 0x73, 0x3c, 0x14, 0x7d, 0x6d, 0x93, 0xcb },
  3287. .input = { "Single block msg" },
  3288. .ilen = 16,
  3289. .result = { 0x4b, 0x55, 0x38, 0x4f, 0xe2, 0x59, 0xc9, 0xc8,
  3290. 0x4e, 0x79, 0x35, 0xa0, 0x03, 0xcb, 0xe9, 0x28 },
  3291. .rlen = 16,
  3292. }, {
  3293. .key = { 0x7c, 0x5c, 0xb2, 0x40, 0x1b, 0x3d, 0xc3, 0x3c,
  3294. 0x19, 0xe7, 0x34, 0x08, 0x19, 0xe0, 0xf6, 0x9c,
  3295. 0x67, 0x8c, 0x3d, 0xb8, 0xe6, 0xf6, 0xa9, 0x1a,
  3296. 0x00, 0x96, 0xb0, 0x3b },
  3297. .klen = 28,
  3298. .iv = { 0x02, 0x0c, 0x6e, 0xad, 0xc2, 0xcb, 0x50, 0x0d },
  3299. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3300. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3301. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3302. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3303. .ilen = 32,
  3304. .result = { 0x45, 0x32, 0x43, 0xfc, 0x60, 0x9b, 0x23, 0x32,
  3305. 0x7e, 0xdf, 0xaa, 0xfa, 0x71, 0x31, 0xcd, 0x9f,
  3306. 0x84, 0x90, 0x70, 0x1c, 0x5a, 0xd4, 0xa7, 0x9c,
  3307. 0xfc, 0x1f, 0xe0, 0xff, 0x42, 0xf4, 0xfb, 0x00 },
  3308. .rlen = 32,
  3309. }, {
  3310. .key = { 0x77, 0x6b, 0xef, 0xf2, 0x85, 0x1d, 0xb0, 0x6f,
  3311. 0x4c, 0x8a, 0x05, 0x42, 0xc8, 0x69, 0x6f, 0x6c,
  3312. 0x6a, 0x81, 0xaf, 0x1e, 0xec, 0x96, 0xb4, 0xd3,
  3313. 0x7f, 0xc1, 0xd6, 0x89, 0xe6, 0xc1, 0xc1, 0x04,
  3314. 0x00, 0x00, 0x00, 0x60 },
  3315. .klen = 36,
  3316. .iv = { 0xdb, 0x56, 0x72, 0xc9, 0x7a, 0xa8, 0xf0, 0xb2 },
  3317. .input = { "Single block msg" },
  3318. .ilen = 16,
  3319. .result = { 0x14, 0x5a, 0xd0, 0x1d, 0xbf, 0x82, 0x4e, 0xc7,
  3320. 0x56, 0x08, 0x63, 0xdc, 0x71, 0xe3, 0xe0, 0xc0 },
  3321. .rlen = 16,
  3322. }, {
  3323. .key = { 0xf6, 0xd6, 0x6d, 0x6b, 0xd5, 0x2d, 0x59, 0xbb,
  3324. 0x07, 0x96, 0x36, 0x58, 0x79, 0xef, 0xf8, 0x86,
  3325. 0xc6, 0x6d, 0xd5, 0x1a, 0x5b, 0x6a, 0x99, 0x74,
  3326. 0x4b, 0x50, 0x59, 0x0c, 0x87, 0xa2, 0x38, 0x84,
  3327. 0x00, 0xfa, 0xac, 0x24 },
  3328. .klen = 36,
  3329. .iv = { 0xc1, 0x58, 0x5e, 0xf1, 0x5a, 0x43, 0xd8, 0x75 },
  3330. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3331. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3332. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3333. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3334. .ilen = 32,
  3335. .result = { 0xf0, 0x5e, 0x23, 0x1b, 0x38, 0x94, 0x61, 0x2c,
  3336. 0x49, 0xee, 0x00, 0x0b, 0x80, 0x4e, 0xb2, 0xa9,
  3337. 0xb8, 0x30, 0x6b, 0x50, 0x8f, 0x83, 0x9d, 0x6a,
  3338. 0x55, 0x30, 0x83, 0x1d, 0x93, 0x44, 0xaf, 0x1c },
  3339. .rlen = 32,
  3340. },
  3341. };
  3342. static struct cipher_testvec aes_ctr_dec_tv_template[] = {
  3343. { /* From RFC 3686 */
  3344. .key = { 0xae, 0x68, 0x52, 0xf8, 0x12, 0x10, 0x67, 0xcc,
  3345. 0x4b, 0xf7, 0xa5, 0x76, 0x55, 0x77, 0xf3, 0x9e,
  3346. 0x00, 0x00, 0x00, 0x30 },
  3347. .klen = 20,
  3348. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3349. .input = { 0xe4, 0x09, 0x5d, 0x4f, 0xb7, 0xa7, 0xb3, 0x79,
  3350. 0x2d, 0x61, 0x75, 0xa3, 0x26, 0x13, 0x11, 0xb8 },
  3351. .ilen = 16,
  3352. .result = { "Single block msg" },
  3353. .rlen = 16,
  3354. }, {
  3355. .key = { 0x7e, 0x24, 0x06, 0x78, 0x17, 0xfa, 0xe0, 0xd7,
  3356. 0x43, 0xd6, 0xce, 0x1f, 0x32, 0x53, 0x91, 0x63,
  3357. 0x00, 0x6c, 0xb6, 0xdb },
  3358. .klen = 20,
  3359. .iv = { 0xc0, 0x54, 0x3b, 0x59, 0xda, 0x48, 0xd9, 0x0b },
  3360. .input = { 0x51, 0x04, 0xa1, 0x06, 0x16, 0x8a, 0x72, 0xd9,
  3361. 0x79, 0x0d, 0x41, 0xee, 0x8e, 0xda, 0xd3, 0x88,
  3362. 0xeb, 0x2e, 0x1e, 0xfc, 0x46, 0xda, 0x57, 0xc8,
  3363. 0xfc, 0xe6, 0x30, 0xdf, 0x91, 0x41, 0xbe, 0x28 },
  3364. .ilen = 32,
  3365. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3366. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3367. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3368. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3369. .rlen = 32,
  3370. }, {
  3371. .key = { 0x16, 0xaf, 0x5b, 0x14, 0x5f, 0xc9, 0xf5, 0x79,
  3372. 0xc1, 0x75, 0xf9, 0x3e, 0x3b, 0xfb, 0x0e, 0xed,
  3373. 0x86, 0x3d, 0x06, 0xcc, 0xfd, 0xb7, 0x85, 0x15,
  3374. 0x00, 0x00, 0x00, 0x48 },
  3375. .klen = 28,
  3376. .iv = { 0x36, 0x73, 0x3c, 0x14, 0x7d, 0x6d, 0x93, 0xcb },
  3377. .input = { 0x4b, 0x55, 0x38, 0x4f, 0xe2, 0x59, 0xc9, 0xc8,
  3378. 0x4e, 0x79, 0x35, 0xa0, 0x03, 0xcb, 0xe9, 0x28 },
  3379. .ilen = 16,
  3380. .result = { "Single block msg" },
  3381. .rlen = 16,
  3382. }, {
  3383. .key = { 0x7c, 0x5c, 0xb2, 0x40, 0x1b, 0x3d, 0xc3, 0x3c,
  3384. 0x19, 0xe7, 0x34, 0x08, 0x19, 0xe0, 0xf6, 0x9c,
  3385. 0x67, 0x8c, 0x3d, 0xb8, 0xe6, 0xf6, 0xa9, 0x1a,
  3386. 0x00, 0x96, 0xb0, 0x3b },
  3387. .klen = 28,
  3388. .iv = { 0x02, 0x0c, 0x6e, 0xad, 0xc2, 0xcb, 0x50, 0x0d },
  3389. .input = { 0x45, 0x32, 0x43, 0xfc, 0x60, 0x9b, 0x23, 0x32,
  3390. 0x7e, 0xdf, 0xaa, 0xfa, 0x71, 0x31, 0xcd, 0x9f,
  3391. 0x84, 0x90, 0x70, 0x1c, 0x5a, 0xd4, 0xa7, 0x9c,
  3392. 0xfc, 0x1f, 0xe0, 0xff, 0x42, 0xf4, 0xfb, 0x00 },
  3393. .ilen = 32,
  3394. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3395. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3396. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3397. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3398. .rlen = 32,
  3399. }, {
  3400. .key = { 0x77, 0x6b, 0xef, 0xf2, 0x85, 0x1d, 0xb0, 0x6f,
  3401. 0x4c, 0x8a, 0x05, 0x42, 0xc8, 0x69, 0x6f, 0x6c,
  3402. 0x6a, 0x81, 0xaf, 0x1e, 0xec, 0x96, 0xb4, 0xd3,
  3403. 0x7f, 0xc1, 0xd6, 0x89, 0xe6, 0xc1, 0xc1, 0x04,
  3404. 0x00, 0x00, 0x00, 0x60 },
  3405. .klen = 36,
  3406. .iv = { 0xdb, 0x56, 0x72, 0xc9, 0x7a, 0xa8, 0xf0, 0xb2 },
  3407. .input = { 0x14, 0x5a, 0xd0, 0x1d, 0xbf, 0x82, 0x4e, 0xc7,
  3408. 0x56, 0x08, 0x63, 0xdc, 0x71, 0xe3, 0xe0, 0xc0 },
  3409. .ilen = 16,
  3410. .result = { "Single block msg" },
  3411. .rlen = 16,
  3412. }, {
  3413. .key = { 0xf6, 0xd6, 0x6d, 0x6b, 0xd5, 0x2d, 0x59, 0xbb,
  3414. 0x07, 0x96, 0x36, 0x58, 0x79, 0xef, 0xf8, 0x86,
  3415. 0xc6, 0x6d, 0xd5, 0x1a, 0x5b, 0x6a, 0x99, 0x74,
  3416. 0x4b, 0x50, 0x59, 0x0c, 0x87, 0xa2, 0x38, 0x84,
  3417. 0x00, 0xfa, 0xac, 0x24 },
  3418. .klen = 36,
  3419. .iv = { 0xc1, 0x58, 0x5e, 0xf1, 0x5a, 0x43, 0xd8, 0x75 },
  3420. .input = { 0xf0, 0x5e, 0x23, 0x1b, 0x38, 0x94, 0x61, 0x2c,
  3421. 0x49, 0xee, 0x00, 0x0b, 0x80, 0x4e, 0xb2, 0xa9,
  3422. 0xb8, 0x30, 0x6b, 0x50, 0x8f, 0x83, 0x9d, 0x6a,
  3423. 0x55, 0x30, 0x83, 0x1d, 0x93, 0x44, 0xaf, 0x1c },
  3424. .ilen = 32,
  3425. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  3426. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  3427. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  3428. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  3429. .rlen = 32,
  3430. },
  3431. };
  3432. /* Cast5 test vectors from RFC 2144 */
  3433. #define CAST5_ENC_TEST_VECTORS 3
  3434. #define CAST5_DEC_TEST_VECTORS 3
  3435. static struct cipher_testvec cast5_enc_tv_template[] = {
  3436. {
  3437. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3438. 0x23, 0x45, 0x67, 0x89, 0x34, 0x56, 0x78, 0x9a },
  3439. .klen = 16,
  3440. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3441. .ilen = 8,
  3442. .result = { 0x23, 0x8b, 0x4f, 0xe5, 0x84, 0x7e, 0x44, 0xb2 },
  3443. .rlen = 8,
  3444. }, {
  3445. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3446. 0x23, 0x45 },
  3447. .klen = 10,
  3448. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3449. .ilen = 8,
  3450. .result = { 0xeb, 0x6a, 0x71, 0x1a, 0x2c, 0x02, 0x27, 0x1b },
  3451. .rlen = 8,
  3452. }, {
  3453. .key = { 0x01, 0x23, 0x45, 0x67, 0x12 },
  3454. .klen = 5,
  3455. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3456. .ilen = 8,
  3457. .result = { 0x7a, 0xc8, 0x16, 0xd1, 0x6e, 0x9b, 0x30, 0x2e },
  3458. .rlen = 8,
  3459. },
  3460. };
  3461. static struct cipher_testvec cast5_dec_tv_template[] = {
  3462. {
  3463. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3464. 0x23, 0x45, 0x67, 0x89, 0x34, 0x56, 0x78, 0x9a },
  3465. .klen = 16,
  3466. .input = { 0x23, 0x8b, 0x4f, 0xe5, 0x84, 0x7e, 0x44, 0xb2 },
  3467. .ilen = 8,
  3468. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3469. .rlen = 8,
  3470. }, {
  3471. .key = { 0x01, 0x23, 0x45, 0x67, 0x12, 0x34, 0x56, 0x78,
  3472. 0x23, 0x45 },
  3473. .klen = 10,
  3474. .input = { 0xeb, 0x6a, 0x71, 0x1a, 0x2c, 0x02, 0x27, 0x1b },
  3475. .ilen = 8,
  3476. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3477. .rlen = 8,
  3478. }, {
  3479. .key = { 0x01, 0x23, 0x45, 0x67, 0x12 },
  3480. .klen = 5,
  3481. .input = { 0x7a, 0xc8, 0x16, 0xd1, 0x6e, 0x9b, 0x30, 0x2e },
  3482. .ilen = 8,
  3483. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3484. .rlen = 8,
  3485. },
  3486. };
  3487. /*
  3488. * ARC4 test vectors from OpenSSL
  3489. */
  3490. #define ARC4_ENC_TEST_VECTORS 7
  3491. #define ARC4_DEC_TEST_VECTORS 7
  3492. static struct cipher_testvec arc4_enc_tv_template[] = {
  3493. {
  3494. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3495. .klen = 8,
  3496. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3497. .ilen = 8,
  3498. .result = { 0x75, 0xb7, 0x87, 0x80, 0x99, 0xe0, 0xc5, 0x96 },
  3499. .rlen = 8,
  3500. }, {
  3501. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3502. .klen = 8,
  3503. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3504. .ilen = 8,
  3505. .result = { 0x74, 0x94, 0xc2, 0xe7, 0x10, 0x4b, 0x08, 0x79 },
  3506. .rlen = 8,
  3507. }, {
  3508. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3509. .klen = 8,
  3510. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3511. .ilen = 8,
  3512. .result = { 0xde, 0x18, 0x89, 0x41, 0xa3, 0x37, 0x5d, 0x3a },
  3513. .rlen = 8,
  3514. }, {
  3515. .key = { 0xef, 0x01, 0x23, 0x45},
  3516. .klen = 4,
  3517. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3518. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3519. 0x00, 0x00, 0x00, 0x00 },
  3520. .ilen = 20,
  3521. .result = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3522. 0xbd, 0x61, 0x5a, 0x11, 0x62, 0xe1, 0xc7, 0xba,
  3523. 0x36, 0xb6, 0x78, 0x58 },
  3524. .rlen = 20,
  3525. }, {
  3526. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3527. .klen = 8,
  3528. .input = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3529. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3530. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3531. 0x12, 0x34, 0x56, 0x78 },
  3532. .ilen = 28,
  3533. .result = { 0x66, 0xa0, 0x94, 0x9f, 0x8a, 0xf7, 0xd6, 0x89,
  3534. 0x1f, 0x7f, 0x83, 0x2b, 0xa8, 0x33, 0xc0, 0x0c,
  3535. 0x89, 0x2e, 0xbe, 0x30, 0x14, 0x3c, 0xe2, 0x87,
  3536. 0x40, 0x01, 0x1e, 0xcf },
  3537. .rlen = 28,
  3538. }, {
  3539. .key = { 0xef, 0x01, 0x23, 0x45 },
  3540. .klen = 4,
  3541. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3542. 0x00, 0x00 },
  3543. .ilen = 10,
  3544. .result = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3545. 0xbd, 0x61 },
  3546. .rlen = 10,
  3547. }, {
  3548. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF,
  3549. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3550. .klen = 16,
  3551. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
  3552. .ilen = 8,
  3553. .result = { 0x69, 0x72, 0x36, 0x59, 0x1B, 0x52, 0x42, 0xB1 },
  3554. .rlen = 8,
  3555. },
  3556. };
  3557. static struct cipher_testvec arc4_dec_tv_template[] = {
  3558. {
  3559. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3560. .klen = 8,
  3561. .input = { 0x75, 0xb7, 0x87, 0x80, 0x99, 0xe0, 0xc5, 0x96 },
  3562. .ilen = 8,
  3563. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3564. .rlen = 8,
  3565. }, {
  3566. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3567. .klen = 8,
  3568. .input = { 0x74, 0x94, 0xc2, 0xe7, 0x10, 0x4b, 0x08, 0x79 },
  3569. .ilen = 8,
  3570. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3571. .rlen = 8,
  3572. }, {
  3573. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3574. .klen = 8,
  3575. .input = { 0xde, 0x18, 0x89, 0x41, 0xa3, 0x37, 0x5d, 0x3a },
  3576. .ilen = 8,
  3577. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3578. .rlen = 8,
  3579. }, {
  3580. .key = { 0xef, 0x01, 0x23, 0x45},
  3581. .klen = 4,
  3582. .input = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3583. 0xbd, 0x61, 0x5a, 0x11, 0x62, 0xe1, 0xc7, 0xba,
  3584. 0x36, 0xb6, 0x78, 0x58 },
  3585. .ilen = 20,
  3586. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3587. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3588. 0x00, 0x00, 0x00, 0x00 },
  3589. .rlen = 20,
  3590. }, {
  3591. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef },
  3592. .klen = 8,
  3593. .input = { 0x66, 0xa0, 0x94, 0x9f, 0x8a, 0xf7, 0xd6, 0x89,
  3594. 0x1f, 0x7f, 0x83, 0x2b, 0xa8, 0x33, 0xc0, 0x0c,
  3595. 0x89, 0x2e, 0xbe, 0x30, 0x14, 0x3c, 0xe2, 0x87,
  3596. 0x40, 0x01, 0x1e, 0xcf },
  3597. .ilen = 28,
  3598. .result = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3599. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3600. 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0,
  3601. 0x12, 0x34, 0x56, 0x78 },
  3602. .rlen = 28,
  3603. }, {
  3604. .key = { 0xef, 0x01, 0x23, 0x45 },
  3605. .klen = 4,
  3606. .input = { 0xd6, 0xa1, 0x41, 0xa7, 0xec, 0x3c, 0x38, 0xdf,
  3607. 0xbd, 0x61 },
  3608. .ilen = 10,
  3609. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3610. 0x00, 0x00 },
  3611. .rlen = 10,
  3612. }, {
  3613. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF,
  3614. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3615. .klen = 16,
  3616. .input = { 0x69, 0x72, 0x36, 0x59, 0x1B, 0x52, 0x42, 0xB1 },
  3617. .ilen = 8,
  3618. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF },
  3619. .rlen = 8,
  3620. },
  3621. };
  3622. /*
  3623. * TEA test vectors
  3624. */
  3625. #define TEA_ENC_TEST_VECTORS 4
  3626. #define TEA_DEC_TEST_VECTORS 4
  3627. static struct cipher_testvec tea_enc_tv_template[] = {
  3628. {
  3629. .key = { [0 ... 15] = 0x00 },
  3630. .klen = 16,
  3631. .input = { [0 ... 8] = 0x00 },
  3632. .ilen = 8,
  3633. .result = { 0x0a, 0x3a, 0xea, 0x41, 0x40, 0xa9, 0xba, 0x94 },
  3634. .rlen = 8,
  3635. }, {
  3636. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3637. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3638. .klen = 16,
  3639. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3640. .ilen = 8,
  3641. .result = { 0x77, 0x5d, 0x2a, 0x6a, 0xf6, 0xce, 0x92, 0x09 },
  3642. .rlen = 8,
  3643. }, {
  3644. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3645. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3646. .klen = 16,
  3647. .input = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  3648. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3649. .ilen = 16,
  3650. .result = { 0xbe, 0x7a, 0xbb, 0x81, 0x95, 0x2d, 0x1f, 0x1e,
  3651. 0xdd, 0x89, 0xa1, 0x25, 0x04, 0x21, 0xdf, 0x95 },
  3652. .rlen = 16,
  3653. }, {
  3654. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3655. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3656. .klen = 16,
  3657. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3658. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3659. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3660. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3661. .ilen = 32,
  3662. .result = { 0xe0, 0x4d, 0x5d, 0x3c, 0xb7, 0x8c, 0x36, 0x47,
  3663. 0x94, 0x18, 0x95, 0x91, 0xa9, 0xfc, 0x49, 0xf8,
  3664. 0x44, 0xd1, 0x2d, 0xc2, 0x99, 0xb8, 0x08, 0x2a,
  3665. 0x07, 0x89, 0x73, 0xc2, 0x45, 0x92, 0xc6, 0x90 },
  3666. .rlen = 32,
  3667. }
  3668. };
  3669. static struct cipher_testvec tea_dec_tv_template[] = {
  3670. {
  3671. .key = { [0 ... 15] = 0x00 },
  3672. .klen = 16,
  3673. .input = { 0x0a, 0x3a, 0xea, 0x41, 0x40, 0xa9, 0xba, 0x94 },
  3674. .ilen = 8,
  3675. .result = { [0 ... 8] = 0x00 },
  3676. .rlen = 8,
  3677. }, {
  3678. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3679. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3680. .klen = 16,
  3681. .input = { 0x77, 0x5d, 0x2a, 0x6a, 0xf6, 0xce, 0x92, 0x09 },
  3682. .ilen = 8,
  3683. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3684. .rlen = 8,
  3685. }, {
  3686. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3687. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3688. .klen = 16,
  3689. .input = { 0xbe, 0x7a, 0xbb, 0x81, 0x95, 0x2d, 0x1f, 0x1e,
  3690. 0xdd, 0x89, 0xa1, 0x25, 0x04, 0x21, 0xdf, 0x95 },
  3691. .ilen = 16,
  3692. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  3693. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3694. .rlen = 16,
  3695. }, {
  3696. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3697. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3698. .klen = 16,
  3699. .input = { 0xe0, 0x4d, 0x5d, 0x3c, 0xb7, 0x8c, 0x36, 0x47,
  3700. 0x94, 0x18, 0x95, 0x91, 0xa9, 0xfc, 0x49, 0xf8,
  3701. 0x44, 0xd1, 0x2d, 0xc2, 0x99, 0xb8, 0x08, 0x2a,
  3702. 0x07, 0x89, 0x73, 0xc2, 0x45, 0x92, 0xc6, 0x90 },
  3703. .ilen = 32,
  3704. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3705. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3706. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3707. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3708. .rlen = 32,
  3709. }
  3710. };
  3711. /*
  3712. * XTEA test vectors
  3713. */
  3714. #define XTEA_ENC_TEST_VECTORS 4
  3715. #define XTEA_DEC_TEST_VECTORS 4
  3716. static struct cipher_testvec xtea_enc_tv_template[] = {
  3717. {
  3718. .key = { [0 ... 15] = 0x00 },
  3719. .klen = 16,
  3720. .input = { [0 ... 8] = 0x00 },
  3721. .ilen = 8,
  3722. .result = { 0xd8, 0xd4, 0xe9, 0xde, 0xd9, 0x1e, 0x13, 0xf7 },
  3723. .rlen = 8,
  3724. }, {
  3725. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3726. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3727. .klen = 16,
  3728. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3729. .ilen = 8,
  3730. .result = { 0x94, 0xeb, 0xc8, 0x96, 0x84, 0x6a, 0x49, 0xa8 },
  3731. .rlen = 8,
  3732. }, {
  3733. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3734. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3735. .klen = 16,
  3736. .input = { 0x3e, 0xce, 0xae, 0x22, 0x60, 0x56, 0xa8, 0x9d,
  3737. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3738. .ilen = 16,
  3739. .result = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  3740. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  3741. .rlen = 16,
  3742. }, {
  3743. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3744. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3745. .klen = 16,
  3746. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3747. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3748. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3749. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3750. .ilen = 32,
  3751. .result = { 0x99, 0x81, 0x9f, 0x5d, 0x6f, 0x4b, 0x31, 0x3a,
  3752. 0x86, 0xff, 0x6f, 0xd0, 0xe3, 0x87, 0x70, 0x07,
  3753. 0x4d, 0xb8, 0xcf, 0xf3, 0x99, 0x50, 0xb3, 0xd4,
  3754. 0x73, 0xa2, 0xfa, 0xc9, 0x16, 0x59, 0x5d, 0x81 },
  3755. .rlen = 32,
  3756. }
  3757. };
  3758. static struct cipher_testvec xtea_dec_tv_template[] = {
  3759. {
  3760. .key = { [0 ... 15] = 0x00 },
  3761. .klen = 16,
  3762. .input = { 0xd8, 0xd4, 0xe9, 0xde, 0xd9, 0x1e, 0x13, 0xf7 },
  3763. .ilen = 8,
  3764. .result = { [0 ... 8] = 0x00 },
  3765. .rlen = 8,
  3766. }, {
  3767. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  3768. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  3769. .klen = 16,
  3770. .input = { 0x94, 0xeb, 0xc8, 0x96, 0x84, 0x6a, 0x49, 0xa8 },
  3771. .ilen = 8,
  3772. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  3773. .rlen = 8,
  3774. }, {
  3775. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  3776. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  3777. .klen = 16,
  3778. .input = { 0x3e, 0xce, 0xae, 0x22, 0x60, 0x56, 0xa8, 0x9d,
  3779. 0x77, 0x4d, 0xd4, 0xb4, 0x87, 0x24, 0xe3, 0x9a },
  3780. .ilen = 16,
  3781. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  3782. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  3783. .rlen = 16,
  3784. }, {
  3785. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  3786. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  3787. .klen = 16,
  3788. .input = { 0x99, 0x81, 0x9f, 0x5d, 0x6f, 0x4b, 0x31, 0x3a,
  3789. 0x86, 0xff, 0x6f, 0xd0, 0xe3, 0x87, 0x70, 0x07,
  3790. 0x4d, 0xb8, 0xcf, 0xf3, 0x99, 0x50, 0xb3, 0xd4,
  3791. 0x73, 0xa2, 0xfa, 0xc9, 0x16, 0x59, 0x5d, 0x81 },
  3792. .ilen = 32,
  3793. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  3794. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  3795. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  3796. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  3797. .rlen = 32,
  3798. }
  3799. };
  3800. /*
  3801. * KHAZAD test vectors.
  3802. */
  3803. #define KHAZAD_ENC_TEST_VECTORS 5
  3804. #define KHAZAD_DEC_TEST_VECTORS 5
  3805. static struct cipher_testvec khazad_enc_tv_template[] = {
  3806. {
  3807. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3808. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3809. .klen = 16,
  3810. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3811. .ilen = 8,
  3812. .result = { 0x49, 0xa4, 0xce, 0x32, 0xac, 0x19, 0x0e, 0x3f },
  3813. .rlen = 8,
  3814. }, {
  3815. .key = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38,
  3816. 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3817. .klen = 16,
  3818. .input = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3819. .ilen = 8,
  3820. .result = { 0x7e, 0x82, 0x12, 0xa1, 0Xd9, 0X5b, 0Xe4, 0Xf9 },
  3821. .rlen = 8,
  3822. }, {
  3823. .key = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2,
  3824. 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3825. .klen = 16,
  3826. .input = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3827. .ilen = 8,
  3828. .result = { 0Xaa, 0Xbe, 0Xc1, 0X95, 0Xc5, 0X94, 0X1a, 0X9c },
  3829. .rlen = 8,
  3830. }, {
  3831. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3832. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3833. .klen = 16,
  3834. .input = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3835. .ilen = 8,
  3836. .result = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3837. .rlen = 8,
  3838. }, {
  3839. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3840. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3841. .klen = 16,
  3842. .input = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f ,
  3843. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3844. .ilen = 16,
  3845. .result = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 ,
  3846. 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3847. .rlen = 16,
  3848. },
  3849. };
  3850. static struct cipher_testvec khazad_dec_tv_template[] = {
  3851. {
  3852. .key = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  3853. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3854. .klen = 16,
  3855. .input = { 0X49, 0Xa4, 0Xce, 0X32, 0Xac, 0X19, 0X0e, 0X3f },
  3856. .ilen = 8,
  3857. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  3858. .rlen = 8,
  3859. }, {
  3860. .key = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38,
  3861. 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3862. .klen = 16,
  3863. .input = { 0X7e, 0X82, 0X12, 0Xa1, 0Xd9, 0X5b, 0Xe4, 0Xf9 },
  3864. .ilen = 8,
  3865. .result = { 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38, 0x38 },
  3866. .rlen = 8,
  3867. }, {
  3868. .key = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2,
  3869. 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3870. .klen = 16,
  3871. .input = { 0Xaa, 0Xbe, 0Xc1, 0X95, 0Xc5, 0X94, 0X1a, 0X9c },
  3872. .ilen = 8,
  3873. .result = { 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2, 0Xa2 },
  3874. .rlen = 8,
  3875. }, {
  3876. .key = { 0x2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3877. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3878. .klen = 16,
  3879. .input = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3880. .ilen = 8,
  3881. .result = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3882. .rlen = 8,
  3883. }, {
  3884. .key = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f,
  3885. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3886. .klen = 16,
  3887. .input = { 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 ,
  3888. 0X04, 0X74, 0Xf5, 0X70, 0X50, 0X16, 0Xd3, 0Xb8 },
  3889. .ilen = 16,
  3890. .result = { 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f ,
  3891. 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f, 0X2f },
  3892. .rlen = 16,
  3893. },
  3894. };
  3895. /*
  3896. * Anubis test vectors.
  3897. */
  3898. #define ANUBIS_ENC_TEST_VECTORS 5
  3899. #define ANUBIS_DEC_TEST_VECTORS 5
  3900. #define ANUBIS_CBC_ENC_TEST_VECTORS 2
  3901. #define ANUBIS_CBC_DEC_TEST_VECTORS 2
  3902. static struct cipher_testvec anubis_enc_tv_template[] = {
  3903. {
  3904. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3905. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3906. .klen = 16,
  3907. .input = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3908. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3909. .ilen = 16,
  3910. .result = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  3911. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90 },
  3912. .rlen = 16,
  3913. }, {
  3914. .key = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3915. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3916. 0x03, 0x03, 0x03, 0x03 },
  3917. .klen = 20,
  3918. .input = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3919. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03 },
  3920. .ilen = 16,
  3921. .result = { 0xdb, 0xf1, 0x42, 0xf4, 0xd1, 0x8a, 0xc7, 0x49,
  3922. 0x87, 0x41, 0x6f, 0x82, 0x0a, 0x98, 0x64, 0xae },
  3923. .rlen = 16,
  3924. }, {
  3925. .key = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3926. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3927. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3928. 0x24, 0x24, 0x24, 0x24 },
  3929. .klen = 28,
  3930. .input = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3931. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24 },
  3932. .ilen = 16,
  3933. .result = { 0xfd, 0x1b, 0x4a, 0xe3, 0xbf, 0xf0, 0xad, 0x3d,
  3934. 0x06, 0xd3, 0x61, 0x27, 0xfd, 0x13, 0x9e, 0xde },
  3935. .rlen = 16,
  3936. }, {
  3937. .key = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3938. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3939. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3940. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  3941. .klen = 32,
  3942. .input = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3943. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  3944. .ilen = 16,
  3945. .result = { 0x1a, 0x91, 0xfb, 0x2b, 0xb7, 0x78, 0x6b, 0xc4,
  3946. 0x17, 0xd9, 0xff, 0x40, 0x3b, 0x0e, 0xe5, 0xfe },
  3947. .rlen = 16,
  3948. }, {
  3949. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3950. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3951. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3952. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3953. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  3954. .klen = 40,
  3955. .input = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  3956. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  3957. .ilen = 16,
  3958. .result = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  3959. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee },
  3960. .rlen = 16,
  3961. },
  3962. };
  3963. static struct cipher_testvec anubis_dec_tv_template[] = {
  3964. {
  3965. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3966. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3967. .klen = 16,
  3968. .input = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  3969. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90 },
  3970. .ilen = 16,
  3971. .result = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  3972. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  3973. .rlen = 16,
  3974. }, {
  3975. .key = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3976. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3977. 0x03, 0x03, 0x03, 0x03 },
  3978. .klen = 20,
  3979. .input = { 0xdb, 0xf1, 0x42, 0xf4, 0xd1, 0x8a, 0xc7, 0x49,
  3980. 0x87, 0x41, 0x6f, 0x82, 0x0a, 0x98, 0x64, 0xae },
  3981. .ilen = 16,
  3982. .result = { 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03,
  3983. 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03, 0x03 },
  3984. .rlen = 16,
  3985. }, {
  3986. .key = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3987. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3988. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3989. 0x24, 0x24, 0x24, 0x24 },
  3990. .klen = 28,
  3991. .input = { 0xfd, 0x1b, 0x4a, 0xe3, 0xbf, 0xf0, 0xad, 0x3d,
  3992. 0x06, 0xd3, 0x61, 0x27, 0xfd, 0x13, 0x9e, 0xde },
  3993. .ilen = 16,
  3994. .result = { 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24,
  3995. 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24, 0x24 },
  3996. .rlen = 16,
  3997. }, {
  3998. .key = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  3999. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  4000. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  4001. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  4002. .klen = 32,
  4003. .input = { 0x1a, 0x91, 0xfb, 0x2b, 0xb7, 0x78, 0x6b, 0xc4,
  4004. 0x17, 0xd9, 0xff, 0x40, 0x3b, 0x0e, 0xe5, 0xfe },
  4005. .ilen = 16,
  4006. .result = { 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25,
  4007. 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25, 0x25 },
  4008. .rlen = 16,
  4009. }, {
  4010. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4011. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4012. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4013. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4014. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4015. .input = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  4016. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee },
  4017. .klen = 40,
  4018. .ilen = 16,
  4019. .result = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4020. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4021. .rlen = 16,
  4022. },
  4023. };
  4024. static struct cipher_testvec anubis_cbc_enc_tv_template[] = {
  4025. {
  4026. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4027. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4028. .klen = 16,
  4029. .input = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4030. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4031. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4032. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4033. .ilen = 32,
  4034. .result = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  4035. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90,
  4036. 0x86, 0xd8, 0xb5, 0x6f, 0x98, 0x5e, 0x8a, 0x66,
  4037. 0x4f, 0x1f, 0x78, 0xa1, 0xbb, 0x37, 0xf1, 0xbe },
  4038. .rlen = 32,
  4039. }, {
  4040. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4041. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4042. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4043. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4044. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4045. .klen = 40,
  4046. .input = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4047. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4048. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4049. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4050. .ilen = 32,
  4051. .result = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  4052. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee,
  4053. 0xa2, 0xbc, 0x06, 0x98, 0xc6, 0x4b, 0xda, 0x75,
  4054. 0x2e, 0xaa, 0xbe, 0x58, 0xce, 0x01, 0x5b, 0xc7 },
  4055. .rlen = 32,
  4056. },
  4057. };
  4058. static struct cipher_testvec anubis_cbc_dec_tv_template[] = {
  4059. {
  4060. .key = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4061. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4062. .klen = 16,
  4063. .input = { 0x6d, 0xc5, 0xda, 0xa2, 0x26, 0x7d, 0x62, 0x6f,
  4064. 0x08, 0xb7, 0x52, 0x8e, 0x6e, 0x6e, 0x86, 0x90,
  4065. 0x86, 0xd8, 0xb5, 0x6f, 0x98, 0x5e, 0x8a, 0x66,
  4066. 0x4f, 0x1f, 0x78, 0xa1, 0xbb, 0x37, 0xf1, 0xbe },
  4067. .ilen = 32,
  4068. .result = { 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4069. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4070. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe,
  4071. 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe, 0xfe },
  4072. .rlen = 32,
  4073. }, {
  4074. .key = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4075. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4076. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4077. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4078. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4079. .klen = 40,
  4080. .input = { 0xa5, 0x2c, 0x85, 0x6f, 0x9c, 0xba, 0xa0, 0x97,
  4081. 0x9e, 0xc6, 0x84, 0x0f, 0x17, 0x21, 0x07, 0xee,
  4082. 0xa2, 0xbc, 0x06, 0x98, 0xc6, 0x4b, 0xda, 0x75,
  4083. 0x2e, 0xaa, 0xbe, 0x58, 0xce, 0x01, 0x5b, 0xc7 },
  4084. .ilen = 32,
  4085. .result = { 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4086. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4087. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
  4088. 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35 },
  4089. .rlen = 32,
  4090. },
  4091. };
  4092. /*
  4093. * XETA test vectors
  4094. */
  4095. #define XETA_ENC_TEST_VECTORS 4
  4096. #define XETA_DEC_TEST_VECTORS 4
  4097. static struct cipher_testvec xeta_enc_tv_template[] = {
  4098. {
  4099. .key = { [0 ... 15] = 0x00 },
  4100. .klen = 16,
  4101. .input = { [0 ... 8] = 0x00 },
  4102. .ilen = 8,
  4103. .result = { 0xaa, 0x22, 0x96, 0xe5, 0x6c, 0x61, 0xf3, 0x45 },
  4104. .rlen = 8,
  4105. }, {
  4106. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  4107. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  4108. .klen = 16,
  4109. .input = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  4110. .ilen = 8,
  4111. .result = { 0x82, 0x3e, 0xeb, 0x35, 0xdc, 0xdd, 0xd9, 0xc3 },
  4112. .rlen = 8,
  4113. }, {
  4114. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  4115. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  4116. .klen = 16,
  4117. .input = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  4118. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  4119. .ilen = 16,
  4120. .result = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  4121. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  4122. .rlen = 16,
  4123. }, {
  4124. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  4125. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  4126. .klen = 16,
  4127. .input = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  4128. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  4129. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  4130. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  4131. .ilen = 32,
  4132. .result = { 0x0b, 0x03, 0xcd, 0x8a, 0xbe, 0x95, 0xfd, 0xb1,
  4133. 0xc1, 0x44, 0x91, 0x0b, 0xa5, 0xc9, 0x1b, 0xb4,
  4134. 0xa9, 0xda, 0x1e, 0x9e, 0xb1, 0x3e, 0x2a, 0x8f,
  4135. 0xea, 0xa5, 0x6a, 0x85, 0xd1, 0xf4, 0xa8, 0xa5 },
  4136. .rlen = 32,
  4137. }
  4138. };
  4139. static struct cipher_testvec xeta_dec_tv_template[] = {
  4140. {
  4141. .key = { [0 ... 15] = 0x00 },
  4142. .klen = 16,
  4143. .input = { 0xaa, 0x22, 0x96, 0xe5, 0x6c, 0x61, 0xf3, 0x45 },
  4144. .ilen = 8,
  4145. .result = { [0 ... 8] = 0x00 },
  4146. .rlen = 8,
  4147. }, {
  4148. .key = { 0x2b, 0x02, 0x05, 0x68, 0x06, 0x14, 0x49, 0x76,
  4149. 0x77, 0x5d, 0x0e, 0x26, 0x6c, 0x28, 0x78, 0x43 },
  4150. .klen = 16,
  4151. .input = { 0x82, 0x3e, 0xeb, 0x35, 0xdc, 0xdd, 0xd9, 0xc3 },
  4152. .ilen = 8,
  4153. .result = { 0x74, 0x65, 0x73, 0x74, 0x20, 0x6d, 0x65, 0x2e },
  4154. .rlen = 8,
  4155. }, {
  4156. .key = { 0x09, 0x65, 0x43, 0x11, 0x66, 0x44, 0x39, 0x25,
  4157. 0x51, 0x3a, 0x16, 0x10, 0x0a, 0x08, 0x12, 0x6e },
  4158. .klen = 16,
  4159. .input = { 0xe2, 0x04, 0xdb, 0xf2, 0x89, 0x85, 0x9e, 0xea,
  4160. 0x61, 0x35, 0xaa, 0xed, 0xb5, 0xcb, 0x71, 0x2c },
  4161. .ilen = 16,
  4162. .result = { 0x6c, 0x6f, 0x6e, 0x67, 0x65, 0x72, 0x5f, 0x74,
  4163. 0x65, 0x73, 0x74, 0x5f, 0x76, 0x65, 0x63, 0x74 },
  4164. .rlen = 16,
  4165. }, {
  4166. .key = { 0x4d, 0x76, 0x32, 0x17, 0x05, 0x3f, 0x75, 0x2c,
  4167. 0x5d, 0x04, 0x16, 0x36, 0x15, 0x72, 0x63, 0x2f },
  4168. .klen = 16,
  4169. .input = { 0x0b, 0x03, 0xcd, 0x8a, 0xbe, 0x95, 0xfd, 0xb1,
  4170. 0xc1, 0x44, 0x91, 0x0b, 0xa5, 0xc9, 0x1b, 0xb4,
  4171. 0xa9, 0xda, 0x1e, 0x9e, 0xb1, 0x3e, 0x2a, 0x8f,
  4172. 0xea, 0xa5, 0x6a, 0x85, 0xd1, 0xf4, 0xa8, 0xa5 },
  4173. .ilen = 32,
  4174. .result = { 0x54, 0x65, 0x61, 0x20, 0x69, 0x73, 0x20, 0x67,
  4175. 0x6f, 0x6f, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20,
  4176. 0x79, 0x6f, 0x75, 0x21, 0x21, 0x21, 0x20, 0x72,
  4177. 0x65, 0x61, 0x6c, 0x6c, 0x79, 0x21, 0x21, 0x21 },
  4178. .rlen = 32,
  4179. }
  4180. };
  4181. /*
  4182. * FCrypt test vectors
  4183. */
  4184. #define FCRYPT_ENC_TEST_VECTORS ARRAY_SIZE(fcrypt_pcbc_enc_tv_template)
  4185. #define FCRYPT_DEC_TEST_VECTORS ARRAY_SIZE(fcrypt_pcbc_dec_tv_template)
  4186. static struct cipher_testvec fcrypt_pcbc_enc_tv_template[] = {
  4187. { /* http://www.openafs.org/pipermail/openafs-devel/2000-December/005320.html */
  4188. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4189. .klen = 8,
  4190. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4191. .input = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4192. .ilen = 8,
  4193. .result = { 0x0E, 0x09, 0x00, 0xC7, 0x3E, 0xF7, 0xED, 0x41 },
  4194. .rlen = 8,
  4195. }, {
  4196. .key = { 0x11, 0x44, 0x77, 0xAA, 0xDD, 0x00, 0x33, 0x66 },
  4197. .klen = 8,
  4198. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4199. .input = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0 },
  4200. .ilen = 8,
  4201. .result = { 0xD8, 0xED, 0x78, 0x74, 0x77, 0xEC, 0x06, 0x80 },
  4202. .rlen = 8,
  4203. }, { /* From Arla */
  4204. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4205. .klen = 8,
  4206. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4207. .input = "The quick brown fox jumps over the lazy dogs.\0\0",
  4208. .ilen = 48,
  4209. .result = { 0x00, 0xf0, 0xe, 0x11, 0x75, 0xe6, 0x23, 0x82,
  4210. 0xee, 0xac, 0x98, 0x62, 0x44, 0x51, 0xe4, 0x84,
  4211. 0xc3, 0x59, 0xd8, 0xaa, 0x64, 0x60, 0xae, 0xf7,
  4212. 0xd2, 0xd9, 0x13, 0x79, 0x72, 0xa3, 0x45, 0x03,
  4213. 0x23, 0xb5, 0x62, 0xd7, 0x0c, 0xf5, 0x27, 0xd1,
  4214. 0xf8, 0x91, 0x3c, 0xac, 0x44, 0x22, 0x92, 0xef },
  4215. .rlen = 48,
  4216. }, {
  4217. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4218. .klen = 8,
  4219. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4220. .input = "The quick brown fox jumps over the lazy dogs.\0\0",
  4221. .ilen = 48,
  4222. .result = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4223. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4224. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4225. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4226. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4227. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4228. .rlen = 48,
  4229. }, { /* split-page version */
  4230. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4231. .klen = 8,
  4232. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4233. .input = "The quick brown fox jumps over the lazy dogs.\0\0",
  4234. .ilen = 48,
  4235. .result = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4236. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4237. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4238. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4239. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4240. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4241. .rlen = 48,
  4242. .np = 2,
  4243. .tap = { 20, 28 },
  4244. }
  4245. };
  4246. static struct cipher_testvec fcrypt_pcbc_dec_tv_template[] = {
  4247. { /* http://www.openafs.org/pipermail/openafs-devel/2000-December/005320.html */
  4248. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4249. .klen = 8,
  4250. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4251. .input = { 0x0E, 0x09, 0x00, 0xC7, 0x3E, 0xF7, 0xED, 0x41 },
  4252. .ilen = 8,
  4253. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4254. .rlen = 8,
  4255. }, {
  4256. .key = { 0x11, 0x44, 0x77, 0xAA, 0xDD, 0x00, 0x33, 0x66 },
  4257. .klen = 8,
  4258. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4259. .input = { 0xD8, 0xED, 0x78, 0x74, 0x77, 0xEC, 0x06, 0x80 },
  4260. .ilen = 8,
  4261. .result = { 0x12, 0x34, 0x56, 0x78, 0x9A, 0xBC, 0xDE, 0xF0 },
  4262. .rlen = 8,
  4263. }, { /* From Arla */
  4264. .key = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4265. .klen = 8,
  4266. .iv = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4267. .input = { 0x00, 0xf0, 0xe, 0x11, 0x75, 0xe6, 0x23, 0x82,
  4268. 0xee, 0xac, 0x98, 0x62, 0x44, 0x51, 0xe4, 0x84,
  4269. 0xc3, 0x59, 0xd8, 0xaa, 0x64, 0x60, 0xae, 0xf7,
  4270. 0xd2, 0xd9, 0x13, 0x79, 0x72, 0xa3, 0x45, 0x03,
  4271. 0x23, 0xb5, 0x62, 0xd7, 0x0c, 0xf5, 0x27, 0xd1,
  4272. 0xf8, 0x91, 0x3c, 0xac, 0x44, 0x22, 0x92, 0xef },
  4273. .ilen = 48,
  4274. .result = "The quick brown fox jumps over the lazy dogs.\0\0",
  4275. .rlen = 48,
  4276. }, {
  4277. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4278. .klen = 8,
  4279. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4280. .input = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4281. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4282. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4283. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4284. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4285. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4286. .ilen = 48,
  4287. .result = "The quick brown fox jumps over the lazy dogs.\0\0",
  4288. .rlen = 48,
  4289. }, { /* split-page version */
  4290. .key = { 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4291. .klen = 8,
  4292. .iv = { 0xf0, 0xe1, 0xd2, 0xc3, 0xb4, 0xa5, 0x96, 0x87 },
  4293. .input = { 0xca, 0x90, 0xf5, 0x9d, 0xcb, 0xd4, 0xd2, 0x3c,
  4294. 0x01, 0x88, 0x7f, 0x3e, 0x31, 0x6e, 0x62, 0x9d,
  4295. 0xd8, 0xe0, 0x57, 0xa3, 0x06, 0x3a, 0x42, 0x58,
  4296. 0x2a, 0x28, 0xfe, 0x72, 0x52, 0x2f, 0xdd, 0xe0,
  4297. 0x19, 0x89, 0x09, 0x1c, 0x2a, 0x8e, 0x8c, 0x94,
  4298. 0xfc, 0xc7, 0x68, 0xe4, 0x88, 0xaa, 0xde, 0x0f },
  4299. .ilen = 48,
  4300. .result = "The quick brown fox jumps over the lazy dogs.\0\0",
  4301. .rlen = 48,
  4302. .np = 2,
  4303. .tap = { 20, 28 },
  4304. }
  4305. };
  4306. /*
  4307. * CAMELLIA test vectors.
  4308. */
  4309. #define CAMELLIA_ENC_TEST_VECTORS 3
  4310. #define CAMELLIA_DEC_TEST_VECTORS 3
  4311. #define CAMELLIA_CBC_ENC_TEST_VECTORS 2
  4312. #define CAMELLIA_CBC_DEC_TEST_VECTORS 2
  4313. static struct cipher_testvec camellia_enc_tv_template[] = {
  4314. {
  4315. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4316. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4317. .klen = 16,
  4318. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4319. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4320. .ilen = 16,
  4321. .result = { 0x67, 0x67, 0x31, 0x38, 0x54, 0x96, 0x69, 0x73,
  4322. 0x08, 0x57, 0x06, 0x56, 0x48, 0xea, 0xbe, 0x43 },
  4323. .rlen = 16,
  4324. }, {
  4325. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4326. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4327. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  4328. .klen = 24,
  4329. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4330. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4331. .ilen = 16,
  4332. .result = { 0xb4, 0x99, 0x34, 0x01, 0xb3, 0xe9, 0x96, 0xf8,
  4333. 0x4e, 0xe5, 0xce, 0xe7, 0xd7, 0x9b, 0x09, 0xb9 },
  4334. .rlen = 16,
  4335. }, {
  4336. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4337. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4338. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  4339. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  4340. .klen = 32,
  4341. .input = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4342. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4343. .ilen = 16,
  4344. .result = { 0x9a, 0xcc, 0x23, 0x7d, 0xff, 0x16, 0xd7, 0x6c,
  4345. 0x20, 0xef, 0x7c, 0x91, 0x9e, 0x3a, 0x75, 0x09 },
  4346. .rlen = 16,
  4347. },
  4348. };
  4349. static struct cipher_testvec camellia_dec_tv_template[] = {
  4350. {
  4351. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4352. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4353. .klen = 16,
  4354. .input = { 0x67, 0x67, 0x31, 0x38, 0x54, 0x96, 0x69, 0x73,
  4355. 0x08, 0x57, 0x06, 0x56, 0x48, 0xea, 0xbe, 0x43 },
  4356. .ilen = 16,
  4357. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4358. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4359. .rlen = 16,
  4360. }, {
  4361. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4362. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4363. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77 },
  4364. .klen = 24,
  4365. .input = { 0xb4, 0x99, 0x34, 0x01, 0xb3, 0xe9, 0x96, 0xf8,
  4366. 0x4e, 0xe5, 0xce, 0xe7, 0xd7, 0x9b, 0x09, 0xb9 },
  4367. .ilen = 16,
  4368. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4369. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4370. .rlen = 16,
  4371. }, {
  4372. .key = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4373. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
  4374. 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,
  4375. 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff },
  4376. .klen = 32,
  4377. .input = { 0x9a, 0xcc, 0x23, 0x7d, 0xff, 0x16, 0xd7, 0x6c,
  4378. 0x20, 0xef, 0x7c, 0x91, 0x9e, 0x3a, 0x75, 0x09 },
  4379. .ilen = 16,
  4380. .result = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
  4381. 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10 },
  4382. .rlen = 16,
  4383. },
  4384. };
  4385. static struct cipher_testvec camellia_cbc_enc_tv_template[] = {
  4386. {
  4387. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  4388. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  4389. .klen = 16,
  4390. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  4391. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  4392. .input = { "Single block msg" },
  4393. .ilen = 16,
  4394. .result = { 0xea, 0x32, 0x12, 0x76, 0x3b, 0x50, 0x10, 0xe7,
  4395. 0x18, 0xf6, 0xfd, 0x5d, 0xf6, 0x8f, 0x13, 0x51 },
  4396. .rlen = 16,
  4397. }, {
  4398. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  4399. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  4400. .klen = 16,
  4401. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  4402. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  4403. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4404. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  4405. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  4406. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  4407. .ilen = 32,
  4408. .result = { 0xa5, 0xdf, 0x6e, 0x50, 0xda, 0x70, 0x6c, 0x01,
  4409. 0x4a, 0xab, 0xf3, 0xf2, 0xd6, 0xfc, 0x6c, 0xfd,
  4410. 0x19, 0xb4, 0x3e, 0x57, 0x1c, 0x02, 0x5e, 0xa0,
  4411. 0x15, 0x78, 0xe0, 0x5e, 0xf2, 0xcb, 0x87, 0x16 },
  4412. .rlen = 32,
  4413. },
  4414. };
  4415. static struct cipher_testvec camellia_cbc_dec_tv_template[] = {
  4416. {
  4417. .key = { 0x06, 0xa9, 0x21, 0x40, 0x36, 0xb8, 0xa1, 0x5b,
  4418. 0x51, 0x2e, 0x03, 0xd5, 0x34, 0x12, 0x00, 0x06 },
  4419. .klen = 16,
  4420. .iv = { 0x3d, 0xaf, 0xba, 0x42, 0x9d, 0x9e, 0xb4, 0x30,
  4421. 0xb4, 0x22, 0xda, 0x80, 0x2c, 0x9f, 0xac, 0x41 },
  4422. .input = { 0xea, 0x32, 0x12, 0x76, 0x3b, 0x50, 0x10, 0xe7,
  4423. 0x18, 0xf6, 0xfd, 0x5d, 0xf6, 0x8f, 0x13, 0x51 },
  4424. .ilen = 16,
  4425. .result = { "Single block msg" },
  4426. .rlen = 16,
  4427. }, {
  4428. .key = { 0xc2, 0x86, 0x69, 0x6d, 0x88, 0x7c, 0x9a, 0xa0,
  4429. 0x61, 0x1b, 0xbb, 0x3e, 0x20, 0x25, 0xa4, 0x5a },
  4430. .klen = 16,
  4431. .iv = { 0x56, 0x2e, 0x17, 0x99, 0x6d, 0x09, 0x3d, 0x28,
  4432. 0xdd, 0xb3, 0xba, 0x69, 0x5a, 0x2e, 0x6f, 0x58 },
  4433. .input = { 0xa5, 0xdf, 0x6e, 0x50, 0xda, 0x70, 0x6c, 0x01,
  4434. 0x4a, 0xab, 0xf3, 0xf2, 0xd6, 0xfc, 0x6c, 0xfd,
  4435. 0x19, 0xb4, 0x3e, 0x57, 0x1c, 0x02, 0x5e, 0xa0,
  4436. 0x15, 0x78, 0xe0, 0x5e, 0xf2, 0xcb, 0x87, 0x16 },
  4437. .ilen = 32,
  4438. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4439. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
  4440. 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
  4441. 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
  4442. .rlen = 32,
  4443. },
  4444. };
  4445. /*
  4446. * SEED test vectors
  4447. */
  4448. #define SEED_ENC_TEST_VECTORS 4
  4449. #define SEED_DEC_TEST_VECTORS 4
  4450. static struct cipher_testvec seed_enc_tv_template[] = {
  4451. {
  4452. .key = { [0 ... 15] = 0x00 },
  4453. .klen = 16,
  4454. .input = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4455. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4456. .ilen = 16,
  4457. .result = { 0x5e, 0xba, 0xc6, 0xe0, 0x05, 0x4e, 0x16, 0x68,
  4458. 0x19, 0xaf, 0xf1, 0xcc, 0x6d, 0x34, 0x6c, 0xdb },
  4459. .rlen = 16,
  4460. }, {
  4461. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4462. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4463. .klen = 16,
  4464. .input = { [0 ... 15] = 0x00 },
  4465. .ilen = 16,
  4466. .result = { 0xc1, 0x1f, 0x22, 0xf2, 0x01, 0x40, 0x50, 0x50,
  4467. 0x84, 0x48, 0x35, 0x97, 0xe4, 0x37, 0x0f, 0x43 },
  4468. .rlen = 16,
  4469. }, {
  4470. .key = { 0x47, 0x06, 0x48, 0x08, 0x51, 0xe6, 0x1b, 0xe8,
  4471. 0x5d, 0x74, 0xbf, 0xb3, 0xfd, 0x95, 0x61, 0x85 },
  4472. .klen = 16,
  4473. .input = { 0x83, 0xa2, 0xf8, 0xa2, 0x88, 0x64, 0x1f, 0xb9,
  4474. 0xa4, 0xe9, 0xa5, 0xcc, 0x2f, 0x13, 0x1c, 0x7d },
  4475. .ilen = 16,
  4476. .result = { 0xee, 0x54, 0xd1, 0x3e, 0xbc, 0xae, 0x70, 0x6d,
  4477. 0x22, 0x6b, 0xc3, 0x14, 0x2c, 0xd4, 0x0d, 0x4a },
  4478. .rlen = 16,
  4479. }, {
  4480. .key = { 0x28, 0xdb, 0xc3, 0xbc, 0x49, 0xff, 0xd8, 0x7d,
  4481. 0xcf, 0xa5, 0x09, 0xb1, 0x1d, 0x42, 0x2b, 0xe7 },
  4482. .klen = 16,
  4483. .input = { 0xb4, 0x1e, 0x6b, 0xe2, 0xeb, 0xa8, 0x4a, 0x14,
  4484. 0x8e, 0x2e, 0xed, 0x84, 0x59, 0x3c, 0x5e, 0xc7 },
  4485. .ilen = 16,
  4486. .result = { 0x9b, 0x9b, 0x7b, 0xfc, 0xd1, 0x81, 0x3c, 0xb9,
  4487. 0x5d, 0x0b, 0x36, 0x18, 0xf4, 0x0f, 0x51, 0x22 },
  4488. .rlen = 16,
  4489. }
  4490. };
  4491. static struct cipher_testvec seed_dec_tv_template[] = {
  4492. {
  4493. .key = { [0 ... 15] = 0x00 },
  4494. .klen = 16,
  4495. .input = { 0x5e, 0xba, 0xc6, 0xe0, 0x05, 0x4e, 0x16, 0x68,
  4496. 0x19, 0xaf, 0xf1, 0xcc, 0x6d, 0x34, 0x6c, 0xdb },
  4497. .ilen = 16,
  4498. .result = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4499. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4500. .rlen = 16,
  4501. }, {
  4502. .key = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4503. 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
  4504. .klen = 16,
  4505. .input = { 0xc1, 0x1f, 0x22, 0xf2, 0x01, 0x40, 0x50, 0x50,
  4506. 0x84, 0x48, 0x35, 0x97, 0xe4, 0x37, 0x0f, 0x43 },
  4507. .ilen = 16,
  4508. .result = { [0 ... 15] = 0x00 },
  4509. .rlen = 16,
  4510. }, {
  4511. .key = { 0x47, 0x06, 0x48, 0x08, 0x51, 0xe6, 0x1b, 0xe8,
  4512. 0x5d, 0x74, 0xbf, 0xb3, 0xfd, 0x95, 0x61, 0x85 },
  4513. .klen = 16,
  4514. .input = { 0xee, 0x54, 0xd1, 0x3e, 0xbc, 0xae, 0x70, 0x6d,
  4515. 0x22, 0x6b, 0xc3, 0x14, 0x2c, 0xd4, 0x0d, 0x4a },
  4516. .ilen = 16,
  4517. .result = { 0x83, 0xa2, 0xf8, 0xa2, 0x88, 0x64, 0x1f, 0xb9,
  4518. 0xa4, 0xe9, 0xa5, 0xcc, 0x2f, 0x13, 0x1c, 0x7d },
  4519. .rlen = 16,
  4520. }, {
  4521. .key = { 0x28, 0xdb, 0xc3, 0xbc, 0x49, 0xff, 0xd8, 0x7d,
  4522. 0xcf, 0xa5, 0x09, 0xb1, 0x1d, 0x42, 0x2b, 0xe7 },
  4523. .klen = 16,
  4524. .input = { 0x9b, 0x9b, 0x7b, 0xfc, 0xd1, 0x81, 0x3c, 0xb9,
  4525. 0x5d, 0x0b, 0x36, 0x18, 0xf4, 0x0f, 0x51, 0x22 },
  4526. .ilen = 16,
  4527. .result = { 0xb4, 0x1e, 0x6b, 0xe2, 0xeb, 0xa8, 0x4a, 0x14,
  4528. 0x8e, 0x2e, 0xed, 0x84, 0x59, 0x3c, 0x5e, 0xc7 },
  4529. .rlen = 16,
  4530. }
  4531. };
  4532. #define SALSA20_STREAM_ENC_TEST_VECTORS 4
  4533. static struct cipher_testvec salsa20_stream_enc_tv_template[] = {
  4534. /*
  4535. * Testvectors from verified.test-vectors submitted to ECRYPT.
  4536. * They are truncated to size 39, 64, 111, 129 to test a variety
  4537. * of input length.
  4538. */
  4539. { /* Set 3, vector 0 */
  4540. .key = {
  4541. 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
  4542. 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F
  4543. },
  4544. .klen = 16,
  4545. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4546. .input = {
  4547. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4548. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4549. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4550. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4551. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4552. },
  4553. .ilen = 39,
  4554. .result = {
  4555. 0x2D, 0xD5, 0xC3, 0xF7, 0xBA, 0x2B, 0x20, 0xF7,
  4556. 0x68, 0x02, 0x41, 0x0C, 0x68, 0x86, 0x88, 0x89,
  4557. 0x5A, 0xD8, 0xC1, 0xBD, 0x4E, 0xA6, 0xC9, 0xB1,
  4558. 0x40, 0xFB, 0x9B, 0x90, 0xE2, 0x10, 0x49, 0xBF,
  4559. 0x58, 0x3F, 0x52, 0x79, 0x70, 0xEB, 0xC1,
  4560. },
  4561. .rlen = 39,
  4562. }, { /* Set 5, vector 0 */
  4563. .key = {
  4564. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4565. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
  4566. },
  4567. .klen = 16,
  4568. .iv = { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4569. .input = {
  4570. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4571. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4572. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4573. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4574. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4575. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4576. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4577. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4578. },
  4579. .ilen = 64,
  4580. .result = {
  4581. 0xB6, 0x6C, 0x1E, 0x44, 0x46, 0xDD, 0x95, 0x57,
  4582. 0xE5, 0x78, 0xE2, 0x23, 0xB0, 0xB7, 0x68, 0x01,
  4583. 0x7B, 0x23, 0xB2, 0x67, 0xBB, 0x02, 0x34, 0xAE,
  4584. 0x46, 0x26, 0xBF, 0x44, 0x3F, 0x21, 0x97, 0x76,
  4585. 0x43, 0x6F, 0xB1, 0x9F, 0xD0, 0xE8, 0x86, 0x6F,
  4586. 0xCD, 0x0D, 0xE9, 0xA9, 0x53, 0x8F, 0x4A, 0x09,
  4587. 0xCA, 0x9A, 0xC0, 0x73, 0x2E, 0x30, 0xBC, 0xF9,
  4588. 0x8E, 0x4F, 0x13, 0xE4, 0xB9, 0xE2, 0x01, 0xD9,
  4589. },
  4590. .rlen = 64,
  4591. }, { /* Set 3, vector 27 */
  4592. .key = {
  4593. 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x20, 0x21, 0x22,
  4594. 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A,
  4595. 0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x30, 0x31, 0x32,
  4596. 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x3A
  4597. },
  4598. .klen = 32,
  4599. .iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4600. .input = {
  4601. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4602. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4603. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4604. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4605. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4606. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4607. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4608. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4609. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4610. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4611. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4612. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4613. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4614. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4615. },
  4616. .ilen = 111,
  4617. .result = {
  4618. 0xAE, 0x39, 0x50, 0x8E, 0xAC, 0x9A, 0xEC, 0xE7,
  4619. 0xBF, 0x97, 0xBB, 0x20, 0xB9, 0xDE, 0xE4, 0x1F,
  4620. 0x87, 0xD9, 0x47, 0xF8, 0x28, 0x91, 0x35, 0x98,
  4621. 0xDB, 0x72, 0xCC, 0x23, 0x29, 0x48, 0x56, 0x5E,
  4622. 0x83, 0x7E, 0x0B, 0xF3, 0x7D, 0x5D, 0x38, 0x7B,
  4623. 0x2D, 0x71, 0x02, 0xB4, 0x3B, 0xB5, 0xD8, 0x23,
  4624. 0xB0, 0x4A, 0xDF, 0x3C, 0xEC, 0xB6, 0xD9, 0x3B,
  4625. 0x9B, 0xA7, 0x52, 0xBE, 0xC5, 0xD4, 0x50, 0x59,
  4626. 0x15, 0x14, 0xB4, 0x0E, 0x40, 0xE6, 0x53, 0xD1,
  4627. 0x83, 0x9C, 0x5B, 0xA0, 0x92, 0x29, 0x6B, 0x5E,
  4628. 0x96, 0x5B, 0x1E, 0x2F, 0xD3, 0xAC, 0xC1, 0x92,
  4629. 0xB1, 0x41, 0x3F, 0x19, 0x2F, 0xC4, 0x3B, 0xC6,
  4630. 0x95, 0x46, 0x45, 0x54, 0xE9, 0x75, 0x03, 0x08,
  4631. 0x44, 0xAF, 0xE5, 0x8A, 0x81, 0x12, 0x09,
  4632. },
  4633. .rlen = 111,
  4634. }, { /* Set 5, vector 27 */
  4635. .key = {
  4636. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4637. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4638. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4639. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
  4640. },
  4641. .klen = 32,
  4642. .iv = { 0x00, 0x00, 0x00, 0x10, 0x00, 0x00, 0x00, 0x00 },
  4643. .input = {
  4644. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4645. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4646. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4647. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4648. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4649. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4650. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4651. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4652. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4653. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4654. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4655. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4656. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4657. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4658. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4659. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  4660. 0x00,
  4661. },
  4662. .ilen = 129,
  4663. .result = {
  4664. 0xD2, 0xDB, 0x1A, 0x5C, 0xF1, 0xC1, 0xAC, 0xDB,
  4665. 0xE8, 0x1A, 0x7A, 0x43, 0x40, 0xEF, 0x53, 0x43,
  4666. 0x5E, 0x7F, 0x4B, 0x1A, 0x50, 0x52, 0x3F, 0x8D,
  4667. 0x28, 0x3D, 0xCF, 0x85, 0x1D, 0x69, 0x6E, 0x60,
  4668. 0xF2, 0xDE, 0x74, 0x56, 0x18, 0x1B, 0x84, 0x10,
  4669. 0xD4, 0x62, 0xBA, 0x60, 0x50, 0xF0, 0x61, 0xF2,
  4670. 0x1C, 0x78, 0x7F, 0xC1, 0x24, 0x34, 0xAF, 0x58,
  4671. 0xBF, 0x2C, 0x59, 0xCA, 0x90, 0x77, 0xF3, 0xB0,
  4672. 0x5B, 0x4A, 0xDF, 0x89, 0xCE, 0x2C, 0x2F, 0xFC,
  4673. 0x67, 0xF0, 0xE3, 0x45, 0xE8, 0xB3, 0xB3, 0x75,
  4674. 0xA0, 0x95, 0x71, 0xA1, 0x29, 0x39, 0x94, 0xCA,
  4675. 0x45, 0x2F, 0xBD, 0xCB, 0x10, 0xB6, 0xBE, 0x9F,
  4676. 0x8E, 0xF9, 0xB2, 0x01, 0x0A, 0x5A, 0x0A, 0xB7,
  4677. 0x6B, 0x9D, 0x70, 0x8E, 0x4B, 0xD6, 0x2F, 0xCD,
  4678. 0x2E, 0x40, 0x48, 0x75, 0xE9, 0xE2, 0x21, 0x45,
  4679. 0x0B, 0xC9, 0xB6, 0xB5, 0x66, 0xBC, 0x9A, 0x59,
  4680. 0x5A,
  4681. },
  4682. .rlen = 129,
  4683. }
  4684. };
  4685. /*
  4686. * Compression stuff.
  4687. */
  4688. #define COMP_BUF_SIZE 512
  4689. struct comp_testvec {
  4690. int inlen, outlen;
  4691. char input[COMP_BUF_SIZE];
  4692. char output[COMP_BUF_SIZE];
  4693. };
  4694. /*
  4695. * Deflate test vectors (null-terminated strings).
  4696. * Params: winbits=11, Z_DEFAULT_COMPRESSION, MAX_MEM_LEVEL.
  4697. */
  4698. #define DEFLATE_COMP_TEST_VECTORS 2
  4699. #define DEFLATE_DECOMP_TEST_VECTORS 2
  4700. static struct comp_testvec deflate_comp_tv_template[] = {
  4701. {
  4702. .inlen = 70,
  4703. .outlen = 38,
  4704. .input = "Join us now and share the software "
  4705. "Join us now and share the software ",
  4706. .output = { 0xf3, 0xca, 0xcf, 0xcc, 0x53, 0x28, 0x2d, 0x56,
  4707. 0xc8, 0xcb, 0x2f, 0x57, 0x48, 0xcc, 0x4b, 0x51,
  4708. 0x28, 0xce, 0x48, 0x2c, 0x4a, 0x55, 0x28, 0xc9,
  4709. 0x48, 0x55, 0x28, 0xce, 0x4f, 0x2b, 0x29, 0x07,
  4710. 0x71, 0xbc, 0x08, 0x2b, 0x01, 0x00 },
  4711. }, {
  4712. .inlen = 191,
  4713. .outlen = 122,
  4714. .input = "This document describes a compression method based on the DEFLATE"
  4715. "compression algorithm. This document defines the application of "
  4716. "the DEFLATE algorithm to the IP Payload Compression Protocol.",
  4717. .output = { 0x5d, 0x8d, 0x31, 0x0e, 0xc2, 0x30, 0x10, 0x04,
  4718. 0xbf, 0xb2, 0x2f, 0xc8, 0x1f, 0x10, 0x04, 0x09,
  4719. 0x89, 0xc2, 0x85, 0x3f, 0x70, 0xb1, 0x2f, 0xf8,
  4720. 0x24, 0xdb, 0x67, 0xd9, 0x47, 0xc1, 0xef, 0x49,
  4721. 0x68, 0x12, 0x51, 0xae, 0x76, 0x67, 0xd6, 0x27,
  4722. 0x19, 0x88, 0x1a, 0xde, 0x85, 0xab, 0x21, 0xf2,
  4723. 0x08, 0x5d, 0x16, 0x1e, 0x20, 0x04, 0x2d, 0xad,
  4724. 0xf3, 0x18, 0xa2, 0x15, 0x85, 0x2d, 0x69, 0xc4,
  4725. 0x42, 0x83, 0x23, 0xb6, 0x6c, 0x89, 0x71, 0x9b,
  4726. 0xef, 0xcf, 0x8b, 0x9f, 0xcf, 0x33, 0xca, 0x2f,
  4727. 0xed, 0x62, 0xa9, 0x4c, 0x80, 0xff, 0x13, 0xaf,
  4728. 0x52, 0x37, 0xed, 0x0e, 0x52, 0x6b, 0x59, 0x02,
  4729. 0xd9, 0x4e, 0xe8, 0x7a, 0x76, 0x1d, 0x02, 0x98,
  4730. 0xfe, 0x8a, 0x87, 0x83, 0xa3, 0x4f, 0x56, 0x8a,
  4731. 0xb8, 0x9e, 0x8e, 0x5c, 0x57, 0xd3, 0xa0, 0x79,
  4732. 0xfa, 0x02 },
  4733. },
  4734. };
  4735. static struct comp_testvec deflate_decomp_tv_template[] = {
  4736. {
  4737. .inlen = 122,
  4738. .outlen = 191,
  4739. .input = { 0x5d, 0x8d, 0x31, 0x0e, 0xc2, 0x30, 0x10, 0x04,
  4740. 0xbf, 0xb2, 0x2f, 0xc8, 0x1f, 0x10, 0x04, 0x09,
  4741. 0x89, 0xc2, 0x85, 0x3f, 0x70, 0xb1, 0x2f, 0xf8,
  4742. 0x24, 0xdb, 0x67, 0xd9, 0x47, 0xc1, 0xef, 0x49,
  4743. 0x68, 0x12, 0x51, 0xae, 0x76, 0x67, 0xd6, 0x27,
  4744. 0x19, 0x88, 0x1a, 0xde, 0x85, 0xab, 0x21, 0xf2,
  4745. 0x08, 0x5d, 0x16, 0x1e, 0x20, 0x04, 0x2d, 0xad,
  4746. 0xf3, 0x18, 0xa2, 0x15, 0x85, 0x2d, 0x69, 0xc4,
  4747. 0x42, 0x83, 0x23, 0xb6, 0x6c, 0x89, 0x71, 0x9b,
  4748. 0xef, 0xcf, 0x8b, 0x9f, 0xcf, 0x33, 0xca, 0x2f,
  4749. 0xed, 0x62, 0xa9, 0x4c, 0x80, 0xff, 0x13, 0xaf,
  4750. 0x52, 0x37, 0xed, 0x0e, 0x52, 0x6b, 0x59, 0x02,
  4751. 0xd9, 0x4e, 0xe8, 0x7a, 0x76, 0x1d, 0x02, 0x98,
  4752. 0xfe, 0x8a, 0x87, 0x83, 0xa3, 0x4f, 0x56, 0x8a,
  4753. 0xb8, 0x9e, 0x8e, 0x5c, 0x57, 0xd3, 0xa0, 0x79,
  4754. 0xfa, 0x02 },
  4755. .output = "This document describes a compression method based on the DEFLATE"
  4756. "compression algorithm. This document defines the application of "
  4757. "the DEFLATE algorithm to the IP Payload Compression Protocol.",
  4758. }, {
  4759. .inlen = 38,
  4760. .outlen = 70,
  4761. .input = { 0xf3, 0xca, 0xcf, 0xcc, 0x53, 0x28, 0x2d, 0x56,
  4762. 0xc8, 0xcb, 0x2f, 0x57, 0x48, 0xcc, 0x4b, 0x51,
  4763. 0x28, 0xce, 0x48, 0x2c, 0x4a, 0x55, 0x28, 0xc9,
  4764. 0x48, 0x55, 0x28, 0xce, 0x4f, 0x2b, 0x29, 0x07,
  4765. 0x71, 0xbc, 0x08, 0x2b, 0x01, 0x00 },
  4766. .output = "Join us now and share the software "
  4767. "Join us now and share the software ",
  4768. },
  4769. };
  4770. /*
  4771. * Michael MIC test vectors from IEEE 802.11i
  4772. */
  4773. #define MICHAEL_MIC_TEST_VECTORS 6
  4774. static struct hash_testvec michael_mic_tv_template[] = {
  4775. {
  4776. .key = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  4777. .ksize = 8,
  4778. .plaintext = { },
  4779. .psize = 0,
  4780. .digest = { 0x82, 0x92, 0x5c, 0x1c, 0xa1, 0xd1, 0x30, 0xb8 }
  4781. },
  4782. {
  4783. .key = { 0x82, 0x92, 0x5c, 0x1c, 0xa1, 0xd1, 0x30, 0xb8 },
  4784. .ksize = 8,
  4785. .plaintext = { 'M' },
  4786. .psize = 1,
  4787. .digest = { 0x43, 0x47, 0x21, 0xca, 0x40, 0x63, 0x9b, 0x3f }
  4788. },
  4789. {
  4790. .key = { 0x43, 0x47, 0x21, 0xca, 0x40, 0x63, 0x9b, 0x3f },
  4791. .ksize = 8,
  4792. .plaintext = { 'M', 'i' },
  4793. .psize = 2,
  4794. .digest = { 0xe8, 0xf9, 0xbe, 0xca, 0xe9, 0x7e, 0x5d, 0x29 }
  4795. },
  4796. {
  4797. .key = { 0xe8, 0xf9, 0xbe, 0xca, 0xe9, 0x7e, 0x5d, 0x29 },
  4798. .ksize = 8,
  4799. .plaintext = { 'M', 'i', 'c' },
  4800. .psize = 3,
  4801. .digest = { 0x90, 0x03, 0x8f, 0xc6, 0xcf, 0x13, 0xc1, 0xdb }
  4802. },
  4803. {
  4804. .key = { 0x90, 0x03, 0x8f, 0xc6, 0xcf, 0x13, 0xc1, 0xdb },
  4805. .ksize = 8,
  4806. .plaintext = { 'M', 'i', 'c', 'h' },
  4807. .psize = 4,
  4808. .digest = { 0xd5, 0x5e, 0x10, 0x05, 0x10, 0x12, 0x89, 0x86 }
  4809. },
  4810. {
  4811. .key = { 0xd5, 0x5e, 0x10, 0x05, 0x10, 0x12, 0x89, 0x86 },
  4812. .ksize = 8,
  4813. .plaintext = { 'M', 'i', 'c', 'h', 'a', 'e', 'l' },
  4814. .psize = 7,
  4815. .digest = { 0x0a, 0x94, 0x2b, 0x12, 0x4e, 0xca, 0xa5, 0x46 },
  4816. }
  4817. };
  4818. /*
  4819. * CRC32C test vectors
  4820. */
  4821. #define CRC32C_TEST_VECTORS 14
  4822. static struct hash_testvec crc32c_tv_template[] = {
  4823. {
  4824. .psize = 0,
  4825. .digest = { 0x00, 0x00, 0x00, 0x00 }
  4826. },
  4827. {
  4828. .key = { 0x87, 0xa9, 0xcb, 0xed },
  4829. .ksize = 4,
  4830. .psize = 0,
  4831. .digest = { 0x78, 0x56, 0x34, 0x12 },
  4832. },
  4833. {
  4834. .key = { 0xff, 0xff, 0xff, 0xff },
  4835. .ksize = 4,
  4836. .plaintext = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  4837. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  4838. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  4839. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
  4840. 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28 },
  4841. .psize = 40,
  4842. .digest = { 0x7f, 0x15, 0x2c, 0x0e }
  4843. },
  4844. {
  4845. .key = { 0xff, 0xff, 0xff, 0xff },
  4846. .ksize = 4,
  4847. .plaintext = { 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
  4848. 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  4849. 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
  4850. 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
  4851. 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50 },
  4852. .psize = 40,
  4853. .digest = { 0xf6, 0xeb, 0x80, 0xe9 }
  4854. },
  4855. {
  4856. .key = { 0xff, 0xff, 0xff, 0xff },
  4857. .ksize = 4,
  4858. .plaintext = { 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
  4859. 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
  4860. 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68,
  4861. 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70,
  4862. 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78 },
  4863. .psize = 40,
  4864. .digest = { 0xed, 0xbd, 0x74, 0xde }
  4865. },
  4866. {
  4867. .key = { 0xff, 0xff, 0xff, 0xff },
  4868. .ksize = 4,
  4869. .plaintext = { 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80,
  4870. 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88,
  4871. 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90,
  4872. 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98,
  4873. 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, 0xa0 },
  4874. .psize = 40,
  4875. .digest = { 0x62, 0xc8, 0x79, 0xd5 }
  4876. },
  4877. {
  4878. .key = { 0xff, 0xff, 0xff, 0xff },
  4879. .ksize = 4,
  4880. .plaintext = { 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8,
  4881. 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf, 0xb0,
  4882. 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7, 0xb8,
  4883. 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf, 0xc0,
  4884. 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8 },
  4885. .psize = 40,
  4886. .digest = { 0xd0, 0x9a, 0x97, 0xba }
  4887. },
  4888. {
  4889. .key = { 0xff, 0xff, 0xff, 0xff },
  4890. .ksize = 4,
  4891. .plaintext = { 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf, 0xd0,
  4892. 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8,
  4893. 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe0,
  4894. 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8,
  4895. 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef, 0xf0 },
  4896. .psize = 40,
  4897. .digest = { 0x13, 0xd9, 0x29, 0x2b }
  4898. },
  4899. {
  4900. .key = { 0x80, 0xea, 0xd3, 0xf1 },
  4901. .ksize = 4,
  4902. .plaintext = { 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
  4903. 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  4904. 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
  4905. 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
  4906. 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50 },
  4907. .psize = 40,
  4908. .digest = { 0x0c, 0xb5, 0xe2, 0xa2 }
  4909. },
  4910. {
  4911. .key = { 0xf3, 0x4a, 0x1d, 0x5d },
  4912. .ksize = 4,
  4913. .plaintext = { 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
  4914. 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
  4915. 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68,
  4916. 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70,
  4917. 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78 },
  4918. .psize = 40,
  4919. .digest = { 0xd1, 0x7f, 0xfb, 0xa6 }
  4920. },
  4921. {
  4922. .key = { 0x2e, 0x80, 0x04, 0x59 },
  4923. .ksize = 4,
  4924. .plaintext = { 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80,
  4925. 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88,
  4926. 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90,
  4927. 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98,
  4928. 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, 0xa0 },
  4929. .psize = 40,
  4930. .digest = { 0x59, 0x33, 0xe6, 0x7a }
  4931. },
  4932. {
  4933. .key = { 0xa6, 0xcc, 0x19, 0x85 },
  4934. .ksize = 4,
  4935. .plaintext = { 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8,
  4936. 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf, 0xb0,
  4937. 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7, 0xb8,
  4938. 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf, 0xc0,
  4939. 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8 },
  4940. .psize = 40,
  4941. .digest = { 0xbe, 0x03, 0x01, 0xd2 }
  4942. },
  4943. {
  4944. .key = { 0x41, 0xfc, 0xfe, 0x2d },
  4945. .ksize = 4,
  4946. .plaintext = { 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf, 0xd0,
  4947. 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8,
  4948. 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe0,
  4949. 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8,
  4950. 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef, 0xf0 },
  4951. .psize = 40,
  4952. .digest = { 0x75, 0xd3, 0xc5, 0x24 }
  4953. },
  4954. {
  4955. .key = { 0xff, 0xff, 0xff, 0xff },
  4956. .ksize = 4,
  4957. .plaintext = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
  4958. 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,
  4959. 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
  4960. 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x20,
  4961. 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28,
  4962. 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f, 0x30,
  4963. 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  4964. 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f, 0x40,
  4965. 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48,
  4966. 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50,
  4967. 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
  4968. 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f, 0x60,
  4969. 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68,
  4970. 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70,
  4971. 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78,
  4972. 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x80,
  4973. 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88,
  4974. 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90,
  4975. 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98,
  4976. 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, 0xa0,
  4977. 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7, 0xa8,
  4978. 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf, 0xb0,
  4979. 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7, 0xb8,
  4980. 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf, 0xc0,
  4981. 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8,
  4982. 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf, 0xd0,
  4983. 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8,
  4984. 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe0,
  4985. 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7, 0xe8,
  4986. 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef, 0xf0 },
  4987. .psize = 240,
  4988. .digest = { 0x75, 0xd3, 0xc5, 0x24 },
  4989. .np = 2,
  4990. .tap = { 31, 209 }
  4991. },
  4992. };
  4993. /*
  4994. * Cipher speed tests
  4995. */
  4996. static struct cipher_speed aes_speed_template[] = {
  4997. { .klen = 16, .blen = 16, },
  4998. { .klen = 16, .blen = 64, },
  4999. { .klen = 16, .blen = 256, },
  5000. { .klen = 16, .blen = 1024, },
  5001. { .klen = 16, .blen = 8192, },
  5002. { .klen = 24, .blen = 16, },
  5003. { .klen = 24, .blen = 64, },
  5004. { .klen = 24, .blen = 256, },
  5005. { .klen = 24, .blen = 1024, },
  5006. { .klen = 24, .blen = 8192, },
  5007. { .klen = 32, .blen = 16, },
  5008. { .klen = 32, .blen = 64, },
  5009. { .klen = 32, .blen = 256, },
  5010. { .klen = 32, .blen = 1024, },
  5011. { .klen = 32, .blen = 8192, },
  5012. /* End marker */
  5013. { .klen = 0, .blen = 0, }
  5014. };
  5015. static struct cipher_speed aes_lrw_speed_template[] = {
  5016. { .klen = 32, .blen = 16, },
  5017. { .klen = 32, .blen = 64, },
  5018. { .klen = 32, .blen = 256, },
  5019. { .klen = 32, .blen = 1024, },
  5020. { .klen = 32, .blen = 8192, },
  5021. { .klen = 40, .blen = 16, },
  5022. { .klen = 40, .blen = 64, },
  5023. { .klen = 40, .blen = 256, },
  5024. { .klen = 40, .blen = 1024, },
  5025. { .klen = 40, .blen = 8192, },
  5026. { .klen = 48, .blen = 16, },
  5027. { .klen = 48, .blen = 64, },
  5028. { .klen = 48, .blen = 256, },
  5029. { .klen = 48, .blen = 1024, },
  5030. { .klen = 48, .blen = 8192, },
  5031. /* End marker */
  5032. { .klen = 0, .blen = 0, }
  5033. };
  5034. static struct cipher_speed aes_xts_speed_template[] = {
  5035. { .klen = 32, .blen = 16, },
  5036. { .klen = 32, .blen = 64, },
  5037. { .klen = 32, .blen = 256, },
  5038. { .klen = 32, .blen = 1024, },
  5039. { .klen = 32, .blen = 8192, },
  5040. { .klen = 48, .blen = 16, },
  5041. { .klen = 48, .blen = 64, },
  5042. { .klen = 48, .blen = 256, },
  5043. { .klen = 48, .blen = 1024, },
  5044. { .klen = 48, .blen = 8192, },
  5045. { .klen = 64, .blen = 16, },
  5046. { .klen = 64, .blen = 64, },
  5047. { .klen = 64, .blen = 256, },
  5048. { .klen = 64, .blen = 1024, },
  5049. { .klen = 64, .blen = 8192, },
  5050. /* End marker */
  5051. { .klen = 0, .blen = 0, }
  5052. };
  5053. static struct cipher_speed des3_ede_speed_template[] = {
  5054. { .klen = 24, .blen = 16, },
  5055. { .klen = 24, .blen = 64, },
  5056. { .klen = 24, .blen = 256, },
  5057. { .klen = 24, .blen = 1024, },
  5058. { .klen = 24, .blen = 8192, },
  5059. /* End marker */
  5060. { .klen = 0, .blen = 0, }
  5061. };
  5062. static struct cipher_speed twofish_speed_template[] = {
  5063. { .klen = 16, .blen = 16, },
  5064. { .klen = 16, .blen = 64, },
  5065. { .klen = 16, .blen = 256, },
  5066. { .klen = 16, .blen = 1024, },
  5067. { .klen = 16, .blen = 8192, },
  5068. { .klen = 24, .blen = 16, },
  5069. { .klen = 24, .blen = 64, },
  5070. { .klen = 24, .blen = 256, },
  5071. { .klen = 24, .blen = 1024, },
  5072. { .klen = 24, .blen = 8192, },
  5073. { .klen = 32, .blen = 16, },
  5074. { .klen = 32, .blen = 64, },
  5075. { .klen = 32, .blen = 256, },
  5076. { .klen = 32, .blen = 1024, },
  5077. { .klen = 32, .blen = 8192, },
  5078. /* End marker */
  5079. { .klen = 0, .blen = 0, }
  5080. };
  5081. static struct cipher_speed blowfish_speed_template[] = {
  5082. /* Don't support blowfish keys > 256 bit in this test */
  5083. { .klen = 8, .blen = 16, },
  5084. { .klen = 8, .blen = 64, },
  5085. { .klen = 8, .blen = 256, },
  5086. { .klen = 8, .blen = 1024, },
  5087. { .klen = 8, .blen = 8192, },
  5088. { .klen = 32, .blen = 16, },
  5089. { .klen = 32, .blen = 64, },
  5090. { .klen = 32, .blen = 256, },
  5091. { .klen = 32, .blen = 1024, },
  5092. { .klen = 32, .blen = 8192, },
  5093. /* End marker */
  5094. { .klen = 0, .blen = 0, }
  5095. };
  5096. static struct cipher_speed des_speed_template[] = {
  5097. { .klen = 8, .blen = 16, },
  5098. { .klen = 8, .blen = 64, },
  5099. { .klen = 8, .blen = 256, },
  5100. { .klen = 8, .blen = 1024, },
  5101. { .klen = 8, .blen = 8192, },
  5102. /* End marker */
  5103. { .klen = 0, .blen = 0, }
  5104. };
  5105. /*
  5106. * Digest speed tests
  5107. */
  5108. static struct hash_speed generic_hash_speed_template[] = {
  5109. { .blen = 16, .plen = 16, },
  5110. { .blen = 64, .plen = 16, },
  5111. { .blen = 64, .plen = 64, },
  5112. { .blen = 256, .plen = 16, },
  5113. { .blen = 256, .plen = 64, },
  5114. { .blen = 256, .plen = 256, },
  5115. { .blen = 1024, .plen = 16, },
  5116. { .blen = 1024, .plen = 256, },
  5117. { .blen = 1024, .plen = 1024, },
  5118. { .blen = 2048, .plen = 16, },
  5119. { .blen = 2048, .plen = 256, },
  5120. { .blen = 2048, .plen = 1024, },
  5121. { .blen = 2048, .plen = 2048, },
  5122. { .blen = 4096, .plen = 16, },
  5123. { .blen = 4096, .plen = 256, },
  5124. { .blen = 4096, .plen = 1024, },
  5125. { .blen = 4096, .plen = 4096, },
  5126. { .blen = 8192, .plen = 16, },
  5127. { .blen = 8192, .plen = 256, },
  5128. { .blen = 8192, .plen = 1024, },
  5129. { .blen = 8192, .plen = 4096, },
  5130. { .blen = 8192, .plen = 8192, },
  5131. /* End marker */
  5132. { .blen = 0, .plen = 0, }
  5133. };
  5134. static struct cipher_speed camellia_speed_template[] = {
  5135. { .klen = 16, .blen = 16, },
  5136. { .klen = 16, .blen = 64, },
  5137. { .klen = 16, .blen = 256, },
  5138. { .klen = 16, .blen = 1024, },
  5139. { .klen = 16, .blen = 8192, },
  5140. { .klen = 24, .blen = 16, },
  5141. { .klen = 24, .blen = 64, },
  5142. { .klen = 24, .blen = 256, },
  5143. { .klen = 24, .blen = 1024, },
  5144. { .klen = 24, .blen = 8192, },
  5145. { .klen = 32, .blen = 16, },
  5146. { .klen = 32, .blen = 64, },
  5147. { .klen = 32, .blen = 256, },
  5148. { .klen = 32, .blen = 1024, },
  5149. { .klen = 32, .blen = 8192, },
  5150. /* End marker */
  5151. { .klen = 0, .blen = 0, }
  5152. };
  5153. #endif /* _CRYPTO_TCRYPT_H */