6428 			size_t plain_len, salt_len, sig_len;  in test_RSA_PSS()  local
6433 			plain_len = hextobin(plain, KAT_RSA_PSS[u ++]);  in test_RSA_PSS()
6438 			br_sha1_update(&sc, plain, plain_len);  in test_RSA_PSS()
6688 			size_t plain_len, seed_len, cipher_len;  in test_RSA_OAEP()  local
6693 			plain_len = hextobin(plain, KAT_RSA_OAEP[u ++]);  in test_RSA_OAEP()
6699 				tmp, sizeof tmp, plain, plain_len);  in test_RSA_OAEP()
6718 			if (len != plain_len) {  in test_RSA_OAEP()
6722 					(unsigned long)plain_len);  in test_RSA_OAEP()
7458 		size_t key_len, plain_len, aad_len, iv_len;  in test_GCM()  local
7465 		plain_len = hextobin(plain, KAT_GCM[u + 1]);  in test_GCM()
7479 		memcpy(tmp, plain, plain_len);  in test_GCM()
7483 		br_gcm_run(&gc, 1, tmp, plain_len);  in test_GCM()
7485 		check_equals("KAT GCM 1", tmp, cipher, plain_len);  in test_GCM()
7491 		br_gcm_run(&gc, 0, tmp, plain_len);  in test_GCM()
7492 		check_equals("KAT GCM 3", tmp, plain, plain_len);  in test_GCM()
7498 		for (v = plain_len; v < sizeof tmp; v ++) {  in test_GCM()
7513 		for (v = 0; v < plain_len; v ++) {  in test_GCM()
7516 		check_equals("KAT GCM 4", tmp, cipher, plain_len);  in test_GCM()
7527 		for (v = 0; v < plain_len; v ++) {  in test_GCM()
7531 		check_equals("KAT GCM 5", tmp, plain, plain_len);  in test_GCM()
7538 			memcpy(tmp, cipher, plain_len);  in test_GCM()
7544 			br_gcm_run(&gc, 0, tmp, plain_len);  in test_GCM()
7545 			check_equals("KAT GCM 7", tmp, plain, plain_len);  in test_GCM()
7557 			memcpy(tmp, plain, plain_len);  in test_GCM()
7561 			br_gcm_run(&gc, 1, tmp, plain_len);  in test_GCM()
7571 			memcpy(tmp, plain, plain_len);  in test_GCM()
7575 			br_gcm_run(&gc, 1, tmp, plain_len);  in test_GCM()
7690 		size_t plain_len, key_len, nonce_len, aad_len;  in test_EAX_inner()  local
7697 		plain_len = hextobin(plain, KAT_EAX[u]);  in test_EAX_inner()
7712 		memcpy(tmp, plain, plain_len);  in test_EAX_inner()
7716 		br_eax_run(&ec, 1, tmp, plain_len);  in test_EAX_inner()
7718 		check_equals("KAT EAX 1", tmp, cipher, plain_len);  in test_EAX_inner()
7724 		br_eax_run(&ec, 0, tmp, plain_len);  in test_EAX_inner()
7725 		check_equals("KAT EAX 3", tmp, plain, plain_len);  in test_EAX_inner()
7731 		for (v = plain_len; v < sizeof tmp; v ++) {  in test_EAX_inner()
7746 		for (v = 0; v < plain_len; v ++) {  in test_EAX_inner()
7749 		check_equals("KAT EAX 4", tmp, cipher, plain_len);  in test_EAX_inner()
7760 		for (v = 0; v < plain_len; v ++) {  in test_EAX_inner()
7764 		check_equals("KAT EAX 5", tmp, plain, plain_len);  in test_EAX_inner()
7771 			memcpy(tmp, cipher, plain_len);  in test_EAX_inner()
7777 			br_eax_run(&ec, 0, tmp, plain_len);  in test_EAX_inner()
7778 			check_equals("KAT EAX 7", tmp, plain, plain_len);  in test_EAX_inner()
7790 			memcpy(tmp, plain, plain_len);  in test_EAX_inner()
7794 			br_eax_run(&ec, 1, tmp, plain_len);  in test_EAX_inner()
7804 			memcpy(tmp, plain, plain_len);  in test_EAX_inner()
7808 			br_eax_run(&ec, 1, tmp, plain_len);  in test_EAX_inner()
7821 		if (plain_len == 0) {  in test_EAX_inner()
7835 			memcpy(tmp, plain, plain_len);  in test_EAX_inner()
7836 			br_eax_run(&ec, 1, tmp, plain_len);  in test_EAX_inner()
7838 			check_equals("KAT EAX 9", tmp, cipher, plain_len);  in test_EAX_inner()
7844 			br_eax_run(&ec, 0, tmp, plain_len);  in test_EAX_inner()
7846 			check_equals("KAT EAX 11", tmp, plain, plain_len);  in test_EAX_inner()
7860 		memcpy(tmp, plain, plain_len);  in test_EAX_inner()
7861 		br_eax_run(&ec, 1, tmp, plain_len);  in test_EAX_inner()
7863 		check_equals("KAT EAX 13", tmp, cipher, plain_len);  in test_EAX_inner()
7867 		br_eax_run(&ec, 0, tmp, plain_len);  in test_EAX_inner()
7869 		check_equals("KAT EAX 15", tmp, plain, plain_len);  in test_EAX_inner()
7960 		size_t plain_len, key_len, nonce_len, aad_len, tag_len;  in test_CCM_inner()  local
7982 		plain_len = hextobin(plain, KAT_CCM[u + 3]);  in test_CCM_inner()
7994 		memcpy(tmp, plain, plain_len);  in test_CCM_inner()
7996 			aad_len, plain_len, tag_len))  in test_CCM_inner()
8003 		br_ccm_run(&ec, 1, tmp, plain_len);  in test_CCM_inner()
8008 		check_equals("KAT CCM 1", tmp, cipher, plain_len);  in test_CCM_inner()
8012 			aad_len, plain_len, tag_len);  in test_CCM_inner()
8015 		br_ccm_run(&ec, 0, tmp, plain_len);  in test_CCM_inner()
8016 		check_equals("KAT CCM 3", tmp, plain, plain_len);  in test_CCM_inner()
8022 		for (v = plain_len; v < sizeof tmp; v ++) {  in test_CCM_inner()
8033 			aad_len, plain_len, tag_len);  in test_CCM_inner()
8038 		for (v = 0; v < plain_len; v ++) {  in test_CCM_inner()
8041 		check_equals("KAT CCM 4", tmp, cipher, plain_len);  in test_CCM_inner()
8048 			aad_len, plain_len, tag_len);  in test_CCM_inner()
8053 		for (v = 0; v < plain_len; v ++) {  in test_CCM_inner()
8057 		check_equals("KAT CCM 5", tmp, plain, plain_len);  in test_CCM_inner()
8064 			memcpy(tmp, cipher, plain_len);  in test_CCM_inner()
8066 				aad_len, plain_len, tag_len);  in test_CCM_inner()
8071 			br_ccm_run(&ec, 0, tmp, plain_len);  in test_CCM_inner()
8072 			check_equals("KAT CCM 7", tmp, plain, plain_len);  in test_CCM_inner()