xref: /freebsd/contrib/bearssl/test/test_crypto.c (revision 8ddb146abcdf061be9f2c0db7e391697dafad85c) 
1 /*
2  * Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
3  *
4  * Permission is hereby granted, free of charge, to any person obtaining
5  * a copy of this software and associated documentation files (the
6  * "Software"), to deal in the Software without restriction, including
7  * without limitation the rights to use, copy, modify, merge, publish,
8  * distribute, sublicense, and/or sell copies of the Software, and to
9  * permit persons to whom the Software is furnished to do so, subject to
10  * the following conditions:
11  *
12  * The above copyright notice and this permission notice shall be
13  * included in all copies or substantial portions of the Software.
14  *
15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
16  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
17  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
18  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
19  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
20  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
21  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
22  * SOFTWARE.
23  */
24 
25 #include <stdio.h>
26 #include <stdlib.h>
27 #include <string.h>
28 #include "bearssl.h"
29 #include "inner.h"
30 
31 /*
32  * Decode an hexadecimal string. Returned value is the number of decoded
33  * bytes.
34  */
35 static size_t
36 hextobin(unsigned char *dst, const char *src)
37 {
38 	size_t num;
39 	unsigned acc;
40 	int z;
41 
42 	num = 0;
43 	z = 0;
44 	acc = 0;
45 	while (*src != 0) {
46 		int c = *src ++;
47 		if (c >= '0' && c <= '9') {
48 			c -= '0';
49 		} else if (c >= 'A' && c <= 'F') {
50 			c -= ('A' - 10);
51 		} else if (c >= 'a' && c <= 'f') {
52 			c -= ('a' - 10);
53 		} else {
54 			continue;
55 		}
56 		if (z) {
57 			*dst ++ = (acc << 4) + c;
58 			num ++;
59 		} else {
60 			acc = c;
61 		}
62 		z = !z;
63 	}
64 	return num;
65 }
66 
67 static void
68 check_equals(const char *banner, const void *v1, const void *v2, size_t len)
69 {
70 	size_t u;
71 	const unsigned char *b;
72 
73 	if (memcmp(v1, v2, len) == 0) {
74 		return;
75 	}
76 	fprintf(stderr, "\n%s failed\n", banner);
77 	fprintf(stderr, "v1: ");
78 	for (u = 0, b = v1; u < len; u ++) {
79 		fprintf(stderr, "%02X", b[u]);
80 	}
81 	fprintf(stderr, "\nv2: ");
82 	for (u = 0, b = v2; u < len; u ++) {
83 		fprintf(stderr, "%02X", b[u]);
84 	}
85 	fprintf(stderr, "\n");
86 	exit(EXIT_FAILURE);
87 }
88 
89 #define HASH_SIZE(cname)   br_ ## cname ## _SIZE
90 
91 #define TEST_HASH(Name, cname) \
92 static void \
93 test_ ## cname ## _internal(char *data, char *refres) \
94 { \
95 	br_ ## cname ## _context mc; \
96 	unsigned char res[HASH_SIZE(cname)], ref[HASH_SIZE(cname)]; \
97 	size_t u, n; \
98  \
99 	hextobin(ref, refres); \
100 	n = strlen(data); \
101 	br_ ## cname ## _init(&mc); \
102 	br_ ## cname ## _update(&mc, data, n); \
103 	br_ ## cname ## _out(&mc, res); \
104 	check_equals("KAT " #Name " 1", res, ref, HASH_SIZE(cname)); \
105 	br_ ## cname ## _init(&mc); \
106 	for (u = 0; u < n; u ++) { \
107 		br_ ## cname ## _update(&mc, data + u, 1); \
108 	} \
109 	br_ ## cname ## _out(&mc, res); \
110 	check_equals("KAT " #Name " 2", res, ref, HASH_SIZE(cname)); \
111 	for (u = 0; u < n; u ++) { \
112 		br_ ## cname ## _context mc2; \
113 		br_ ## cname ## _init(&mc); \
114 		br_ ## cname ## _update(&mc, data, u); \
115 		mc2 = mc; \
116 		br_ ## cname ## _update(&mc, data + u, n - u); \
117 		br_ ## cname ## _out(&mc, res); \
118 		check_equals("KAT " #Name " 3", res, ref, HASH_SIZE(cname)); \
119 		br_ ## cname ## _update(&mc2, data + u, n - u); \
120 		br_ ## cname ## _out(&mc2, res); \
121 		check_equals("KAT " #Name " 4", res, ref, HASH_SIZE(cname)); \
122 	} \
123 	memset(&mc, 0, sizeof mc); \
124 	memset(res, 0, sizeof res); \
125 	br_ ## cname ## _vtable.init(&mc.vtable); \
126 	mc.vtable->update(&mc.vtable, data, n); \
127 	mc.vtable->out(&mc.vtable, res); \
128 	check_equals("KAT " #Name " 5", res, ref, HASH_SIZE(cname)); \
129 	memset(res, 0, sizeof res); \
130 	mc.vtable->init(&mc.vtable); \
131 	mc.vtable->update(&mc.vtable, data, n); \
132 	mc.vtable->out(&mc.vtable, res); \
133 	check_equals("KAT " #Name " 6", res, ref, HASH_SIZE(cname)); \
134 }
135 
136 #define KAT_MILLION_A(Name, cname, refres)   do { \
137 		br_ ## cname ## _context mc; \
138 		unsigned char buf[1000]; \
139 		unsigned char res[HASH_SIZE(cname)], ref[HASH_SIZE(cname)]; \
140 		int i; \
141  \
142 		hextobin(ref, refres); \
143 		memset(buf, 'a', sizeof buf); \
144 		br_ ## cname ## _init(&mc); \
145 		for (i = 0; i < 1000; i ++) { \
146 			br_ ## cname ## _update(&mc, buf, sizeof buf); \
147 		} \
148 		br_ ## cname ## _out(&mc, res); \
149 		check_equals("KAT " #Name " 5", res, ref, HASH_SIZE(cname)); \
150 	} while (0)
151 
152 TEST_HASH(MD5, md5)
153 TEST_HASH(SHA-1, sha1)
154 TEST_HASH(SHA-224, sha224)
155 TEST_HASH(SHA-256, sha256)
156 TEST_HASH(SHA-384, sha384)
157 TEST_HASH(SHA-512, sha512)
158 
159 static void
160 test_MD5(void)
161 {
162 	printf("Test MD5: ");
163 	fflush(stdout);
164 	test_md5_internal("", "d41d8cd98f00b204e9800998ecf8427e");
165 	test_md5_internal("a", "0cc175b9c0f1b6a831c399e269772661");
166 	test_md5_internal("abc", "900150983cd24fb0d6963f7d28e17f72");
167 	test_md5_internal("message digest", "f96b697d7cb7938d525a2f31aaf161d0");
168 	test_md5_internal("abcdefghijklmnopqrstuvwxyz",
169 		"c3fcd3d76192e4007dfb496cca67e13b");
170 	test_md5_internal("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstu"
171 		"vwxyz0123456789", "d174ab98d277d9f5a5611c2c9f419d9f");
172 	test_md5_internal("1234567890123456789012345678901234567890123456789"
173 		"0123456789012345678901234567890",
174 		"57edf4a22be3c955ac49da2e2107b67a");
175 	KAT_MILLION_A(MD5, md5,
176 		"7707d6ae4e027c70eea2a935c2296f21");
177 	printf("done.\n");
178 	fflush(stdout);
179 }
180 
181 static void
182 test_SHA1(void)
183 {
184 	printf("Test SHA-1: ");
185 	fflush(stdout);
186 	test_sha1_internal("abc", "a9993e364706816aba3e25717850c26c9cd0d89d");
187 	test_sha1_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
188 		"nomnopnopq", "84983e441c3bd26ebaae4aa1f95129e5e54670f1");
189 
190 	KAT_MILLION_A(SHA-1, sha1,
191 		"34aa973cd4c4daa4f61eeb2bdbad27316534016f");
192 	printf("done.\n");
193 	fflush(stdout);
194 }
195 
196 static void
197 test_SHA224(void)
198 {
199 	printf("Test SHA-224: ");
200 	fflush(stdout);
201 	test_sha224_internal("abc",
202    "23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7");
203 	test_sha224_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
204 		"nomnopnopq",
205    "75388b16512776cc5dba5da1fd890150b0c6455cb4f58b1952522525");
206 
207 	KAT_MILLION_A(SHA-224, sha224,
208 		"20794655980c91d8bbb4c1ea97618a4bf03f42581948b2ee4ee7ad67");
209 	printf("done.\n");
210 	fflush(stdout);
211 }
212 
213 static void
214 test_SHA256(void)
215 {
216 	printf("Test SHA-256: ");
217 	fflush(stdout);
218 	test_sha256_internal("abc",
219    "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad");
220 	test_sha256_internal("abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlm"
221 		"nomnopnopq",
222    "248d6a61d20638b8e5c026930c3e6039a33ce45964ff2167f6ecedd419db06c1");
223 
224 	KAT_MILLION_A(SHA-256, sha256,
225    "cdc76e5c9914fb9281a1c7e284d73e67f1809a48a497200e046d39ccc7112cd0");
226 	printf("done.\n");
227 	fflush(stdout);
228 }
229 
230 static void
231 test_SHA384(void)
232 {
233 	printf("Test SHA-384: ");
234 	fflush(stdout);
235 	test_sha384_internal("abc",
236 		"cb00753f45a35e8bb5a03d699ac65007272c32ab0eded163"
237 		"1a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7");
238 	test_sha384_internal(
239 		"abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
240 		"hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
241 		"09330c33f71147e83d192fc782cd1b4753111b173b3b05d2"
242 		"2fa08086e3b0f712fcc7c71a557e2db966c3e9fa91746039");
243 
244 	KAT_MILLION_A(SHA-384, sha384,
245 		"9d0e1809716474cb086e834e310a4a1ced149e9c00f24852"
246 		"7972cec5704c2a5b07b8b3dc38ecc4ebae97ddd87f3d8985");
247 	printf("done.\n");
248 	fflush(stdout);
249 }
250 
251 static void
252 test_SHA512(void)
253 {
254 	printf("Test SHA-512: ");
255 	fflush(stdout);
256 	test_sha512_internal("abc",
257    "ddaf35a193617abacc417349ae20413112e6fa4e89a97ea20a9eeee64b55d39a"
258    "2192992a274fc1a836ba3c23a3feebbd454d4423643ce80e2a9ac94fa54ca49f");
259 	test_sha512_internal(
260 		"abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn"
261 		"hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu",
262    "8e959b75dae313da8cf4f72814fc143f8f7779c6eb9f7fa17299aeadb6889018"
263    "501d289e4900f7e4331b99dec4b5433ac7d329eeb6dd26545e96e55b874be909");
264 
265 	KAT_MILLION_A(SHA-512, sha512,
266    "e718483d0ce769644e2e42c7bc15b4638e1f98b13b2044285632a803afa973eb"
267    "de0ff244877ea60a4cb0432ce577c31beb009c5c2c49aa2e4eadb217ad8cc09b");
268 	printf("done.\n");
269 	fflush(stdout);
270 }
271 
272 static void
273 test_MD5_SHA1(void)
274 {
275 	unsigned char buf[500], out[36], outM[16], outS[20];
276 	unsigned char seed[1];
277 	br_hmac_drbg_context rc;
278 	br_md5_context mc;
279 	br_sha1_context sc;
280 	br_md5sha1_context cc;
281 	size_t u;
282 
283 	printf("Test MD5+SHA-1: ");
284 	fflush(stdout);
285 
286 	seed[0] = 0;
287 	br_hmac_drbg_init(&rc, &br_sha256_vtable, seed, sizeof seed);
288 	for (u = 0; u < sizeof buf; u ++) {
289 		size_t v;
290 
291 		br_hmac_drbg_generate(&rc, buf, u);
292 		br_md5_init(&mc);
293 		br_md5_update(&mc, buf, u);
294 		br_md5_out(&mc, outM);
295 		br_sha1_init(&sc);
296 		br_sha1_update(&sc, buf, u);
297 		br_sha1_out(&sc, outS);
298 		br_md5sha1_init(&cc);
299 		br_md5sha1_update(&cc, buf, u);
300 		br_md5sha1_out(&cc, out);
301 		check_equals("MD5+SHA-1 [1]", out, outM, 16);
302 		check_equals("MD5+SHA-1 [2]", out + 16, outS, 20);
303 		br_md5sha1_init(&cc);
304 		for (v = 0; v < u; v ++) {
305 			br_md5sha1_update(&cc, buf + v, 1);
306 		}
307 		br_md5sha1_out(&cc, out);
308 		check_equals("MD5+SHA-1 [3]", out, outM, 16);
309 		check_equals("MD5+SHA-1 [4]", out + 16, outS, 20);
310 	}
311 
312 	printf("done.\n");
313 	fflush(stdout);
314 }
315 
316 /*
317  * Compute a hash function, on some data, by ID. Returned value is
318  * hash output length.
319  */
320 static size_t
321 do_hash(int id, const void *data, size_t len, void *out)
322 {
323 	br_md5_context cmd5;
324 	br_sha1_context csha1;
325 	br_sha224_context csha224;
326 	br_sha256_context csha256;
327 	br_sha384_context csha384;
328 	br_sha512_context csha512;
329 
330 	switch (id) {
331 	case br_md5_ID:
332 		br_md5_init(&cmd5);
333 		br_md5_update(&cmd5, data, len);
334 		br_md5_out(&cmd5, out);
335 		return 16;
336 	case br_sha1_ID:
337 		br_sha1_init(&csha1);
338 		br_sha1_update(&csha1, data, len);
339 		br_sha1_out(&csha1, out);
340 		return 20;
341 	case br_sha224_ID:
342 		br_sha224_init(&csha224);
343 		br_sha224_update(&csha224, data, len);
344 		br_sha224_out(&csha224, out);
345 		return 28;
346 	case br_sha256_ID:
347 		br_sha256_init(&csha256);
348 		br_sha256_update(&csha256, data, len);
349 		br_sha256_out(&csha256, out);
350 		return 32;
351 	case br_sha384_ID:
352 		br_sha384_init(&csha384);
353 		br_sha384_update(&csha384, data, len);
354 		br_sha384_out(&csha384, out);
355 		return 48;
356 	case br_sha512_ID:
357 		br_sha512_init(&csha512);
358 		br_sha512_update(&csha512, data, len);
359 		br_sha512_out(&csha512, out);
360 		return 64;
361 	default:
362 		fprintf(stderr, "Uknown hash function: %d\n", id);
363 		exit(EXIT_FAILURE);
364 		return 0;
365 	}
366 }
367 
368 /*
369  * Tests for a multihash. Returned value should be 258 multiplied by the
370  * number of hash functions implemented by the context.
371  */
372 static int
373 test_multihash_inner(br_multihash_context *mc)
374 {
375 	/*
376 	 * Try hashing messages for all lengths from 0 to 257 bytes
377 	 * (inclusive). Each attempt is done twice, with data input
378 	 * either in one go, or byte by byte. In the byte by byte
379 	 * test, intermediate result are obtained and checked.
380 	 */
381 	size_t len;
382 	unsigned char buf[258];
383 	int i;
384 	int tcount;
385 
386 	tcount = 0;
387 	for (len = 0; len < sizeof buf; len ++) {
388 		br_sha1_context sc;
389 		unsigned char tmp[20];
390 
391 		br_sha1_init(&sc);
392 		br_sha1_update(&sc, buf, len);
393 		br_sha1_out(&sc, tmp);
394 		buf[len] = tmp[0];
395 	}
396 	for (len = 0; len <= 257; len ++) {
397 		size_t u;
398 
399 		br_multihash_init(mc);
400 		br_multihash_update(mc, buf, len);
401 		for (i = 1; i <= 6; i ++) {
402 			unsigned char tmp[64], tmp2[64];
403 			size_t olen, olen2;
404 
405 			olen = br_multihash_out(mc, i, tmp);
406 			if (olen == 0) {
407 				continue;
408 			}
409 			olen2 = do_hash(i, buf, len, tmp2);
410 			if (olen != olen2) {
411 				fprintf(stderr,
412 					"Bad hash output length: %u / %u\n",
413 					(unsigned)olen, (unsigned)olen2);
414 				exit(EXIT_FAILURE);
415 			}
416 			check_equals("Hash output", tmp, tmp2, olen);
417 			tcount ++;
418 		}
419 
420 		br_multihash_init(mc);
421 		for (u = 0; u < len; u ++) {
422 			br_multihash_update(mc, buf + u, 1);
423 			for (i = 1; i <= 6; i ++) {
424 				unsigned char tmp[64], tmp2[64];
425 				size_t olen, olen2;
426 
427 				olen = br_multihash_out(mc, i, tmp);
428 				if (olen == 0) {
429 					continue;
430 				}
431 				olen2 = do_hash(i, buf, u + 1, tmp2);
432 				if (olen != olen2) {
433 					fprintf(stderr, "Bad hash output"
434 						" length: %u / %u\n",
435 						(unsigned)olen,
436 						(unsigned)olen2);
437 					exit(EXIT_FAILURE);
438 				}
439 				check_equals("Hash output", tmp, tmp2, olen);
440 			}
441 		}
442 	}
443 	return tcount;
444 }
445 
446 static void
447 test_multihash(void)
448 {
449 	br_multihash_context mc;
450 
451 	printf("Test MultiHash: ");
452 	fflush(stdout);
453 
454 	br_multihash_zero(&mc);
455 	br_multihash_setimpl(&mc, br_md5_ID, &br_md5_vtable);
456 	if (test_multihash_inner(&mc) != 258) {
457 		fprintf(stderr, "Failed test count\n");
458 	}
459 	printf(".");
460 	fflush(stdout);
461 
462 	br_multihash_zero(&mc);
463 	br_multihash_setimpl(&mc, br_sha1_ID, &br_sha1_vtable);
464 	if (test_multihash_inner(&mc) != 258) {
465 		fprintf(stderr, "Failed test count\n");
466 	}
467 	printf(".");
468 	fflush(stdout);
469 
470 	br_multihash_zero(&mc);
471 	br_multihash_setimpl(&mc, br_sha224_ID, &br_sha224_vtable);
472 	if (test_multihash_inner(&mc) != 258) {
473 		fprintf(stderr, "Failed test count\n");
474 	}
475 	printf(".");
476 	fflush(stdout);
477 
478 	br_multihash_zero(&mc);
479 	br_multihash_setimpl(&mc, br_sha256_ID, &br_sha256_vtable);
480 	if (test_multihash_inner(&mc) != 258) {
481 		fprintf(stderr, "Failed test count\n");
482 	}
483 	printf(".");
484 	fflush(stdout);
485 
486 	br_multihash_zero(&mc);
487 	br_multihash_setimpl(&mc, br_sha384_ID, &br_sha384_vtable);
488 	if (test_multihash_inner(&mc) != 258) {
489 		fprintf(stderr, "Failed test count\n");
490 	}
491 	printf(".");
492 	fflush(stdout);
493 
494 	br_multihash_zero(&mc);
495 	br_multihash_setimpl(&mc, br_sha512_ID, &br_sha512_vtable);
496 	if (test_multihash_inner(&mc) != 258) {
497 		fprintf(stderr, "Failed test count\n");
498 	}
499 	printf(".");
500 	fflush(stdout);
501 
502 	br_multihash_zero(&mc);
503 	br_multihash_setimpl(&mc, br_md5_ID, &br_md5_vtable);
504 	br_multihash_setimpl(&mc, br_sha1_ID, &br_sha1_vtable);
505 	br_multihash_setimpl(&mc, br_sha224_ID, &br_sha224_vtable);
506 	br_multihash_setimpl(&mc, br_sha256_ID, &br_sha256_vtable);
507 	br_multihash_setimpl(&mc, br_sha384_ID, &br_sha384_vtable);
508 	br_multihash_setimpl(&mc, br_sha512_ID, &br_sha512_vtable);
509 	if (test_multihash_inner(&mc) != 258 * 6) {
510 		fprintf(stderr, "Failed test count\n");
511 	}
512 	printf(".");
513 	fflush(stdout);
514 
515 	printf("done.\n");
516 	fflush(stdout);
517 }
518 
519 static void
520 do_KAT_HMAC_bin_bin(const br_hash_class *digest_class,
521 	const void *key, size_t key_len,
522 	const void *data, size_t data_len, const char *href)
523 {
524 	br_hmac_key_context kc;
525 	br_hmac_context ctx;
526 	unsigned char tmp[64], ref[64];
527 	size_t u, len;
528 
529 	len = hextobin(ref, href);
530 	br_hmac_key_init(&kc, digest_class, key, key_len);
531 	br_hmac_init(&ctx, &kc, 0);
532 	br_hmac_update(&ctx, data, data_len);
533 	br_hmac_out(&ctx, tmp);
534 	check_equals("KAT HMAC 1", tmp, ref, len);
535 
536 	br_hmac_init(&ctx, &kc, 0);
537 	for (u = 0; u < data_len; u ++) {
538 		br_hmac_update(&ctx, (const unsigned char *)data + u, 1);
539 	}
540 	br_hmac_out(&ctx, tmp);
541 	check_equals("KAT HMAC 2", tmp, ref, len);
542 
543 	for (u = 0; u < data_len; u ++) {
544 		br_hmac_init(&ctx, &kc, 0);
545 		br_hmac_update(&ctx, data, u);
546 		br_hmac_out(&ctx, tmp);
547 		br_hmac_update(&ctx,
548 			(const unsigned char *)data + u, data_len - u);
549 		br_hmac_out(&ctx, tmp);
550 		check_equals("KAT HMAC 3", tmp, ref, len);
551 	}
552 }
553 
554 static void
555 do_KAT_HMAC_str_str(const br_hash_class *digest_class, const char *key,
556 	const char *data, const char *href)
557 {
558 	do_KAT_HMAC_bin_bin(digest_class, key, strlen(key),
559 		data, strlen(data), href);
560 }
561 
562 static void
563 do_KAT_HMAC_hex_hex(const br_hash_class *digest_class, const char *skey,
564 	const char *sdata, const char *href)
565 {
566 	unsigned char key[1024];
567 	unsigned char data[1024];
568 
569 	do_KAT_HMAC_bin_bin(digest_class, key, hextobin(key, skey),
570 		data, hextobin(data, sdata), href);
571 }
572 
573 static void
574 do_KAT_HMAC_hex_str(const br_hash_class *digest_class,
575 	const char *skey, const char *data, const char *href)
576 {
577 	unsigned char key[1024];
578 
579 	do_KAT_HMAC_bin_bin(digest_class, key, hextobin(key, skey),
580 		data, strlen(data), href);
581 }
582 
583 static void
584 test_HMAC_CT(const br_hash_class *digest_class,
585 	const void *key, size_t key_len, const void *data)
586 {
587 	br_hmac_key_context kc;
588 	br_hmac_context hc1, hc2;
589 	unsigned char buf1[64], buf2[64];
590 	size_t u, v;
591 
592 	br_hmac_key_init(&kc, digest_class, key, key_len);
593 
594 	for (u = 0; u < 2; u ++) {
595 		for (v = 0; v < 130; v ++) {
596 			size_t min_len, max_len;
597 			size_t w;
598 
599 			min_len = v;
600 			max_len = v + 256;
601 			for (w = min_len; w <= max_len; w ++) {
602 				char tmp[30];
603 				size_t hlen1, hlen2;
604 
605 				br_hmac_init(&hc1, &kc, 0);
606 				br_hmac_update(&hc1, data, u + w);
607 				hlen1 = br_hmac_out(&hc1, buf1);
608 				br_hmac_init(&hc2, &kc, 0);
609 				br_hmac_update(&hc2, data, u);
610 				hlen2 = br_hmac_outCT(&hc2,
611 					(const unsigned char *)data + u, w,
612 					min_len, max_len, buf2);
613 				if (hlen1 != hlen2) {
614 					fprintf(stderr, "HMAC length mismatch:"
615 						" %u / %u\n", (unsigned)hlen1,
616 						(unsigned)hlen2);
617 					exit(EXIT_FAILURE);
618 				}
619 				sprintf(tmp, "HMAC CT %u,%u,%u",
620 					(unsigned)u, (unsigned)v, (unsigned)w);
621 				check_equals(tmp, buf1, buf2, hlen1);
622 			}
623 		}
624 		printf(".");
625 		fflush(stdout);
626 	}
627 	printf(" ");
628 	fflush(stdout);
629 }
630 
631 static void
632 test_HMAC(void)
633 {
634 	unsigned char data[1000];
635 	unsigned x;
636 	size_t u;
637 	const char key[] = "test HMAC key";
638 
639 	printf("Test HMAC: ");
640 	fflush(stdout);
641 	do_KAT_HMAC_hex_str(&br_md5_vtable,
642 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
643 		"Hi There",
644 		"9294727a3638bb1c13f48ef8158bfc9d");
645 	do_KAT_HMAC_str_str(&br_md5_vtable,
646 		"Jefe",
647 		"what do ya want for nothing?",
648 		"750c783e6ab0b503eaa86e310a5db738");
649 	do_KAT_HMAC_hex_hex(&br_md5_vtable,
650 		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
651 		"DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD",
652 		"56be34521d144c88dbb8c733f0e8b3f6");
653 	do_KAT_HMAC_hex_hex(&br_md5_vtable,
654 		"0102030405060708090a0b0c0d0e0f10111213141516171819",
655 		"CDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCD",
656 		"697eaf0aca3a3aea3a75164746ffaa79");
657 	do_KAT_HMAC_hex_str(&br_md5_vtable,
658 		"0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
659 		"Test With Truncation",
660 		"56461ef2342edc00f9bab995690efd4c");
661 	do_KAT_HMAC_hex_str(&br_md5_vtable,
662 		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
663 		"Test Using Larger Than Block-Size Key - Hash Key First",
664 		"6b1ab7fe4bd7bf8f0b62e6ce61b9d0cd");
665 	do_KAT_HMAC_hex_str(&br_md5_vtable,
666 		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
667 		"Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data",
668 		"6f630fad67cda0ee1fb1f562db3aa53e");
669 
670 	do_KAT_HMAC_hex_str(&br_sha1_vtable,
671 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
672 		"Hi There",
673 		"b617318655057264e28bc0b6fb378c8ef146be00");
674 	do_KAT_HMAC_str_str(&br_sha1_vtable,
675 		"Jefe",
676 		"what do ya want for nothing?",
677 		"effcdf6ae5eb2fa2d27416d5f184df9c259a7c79");
678 	do_KAT_HMAC_hex_hex(&br_sha1_vtable,
679 		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
680 		"DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD",
681 		"125d7342b9ac11cd91a39af48aa17b4f63f175d3");
682 	do_KAT_HMAC_hex_hex(&br_sha1_vtable,
683 		"0102030405060708090a0b0c0d0e0f10111213141516171819",
684 		"CDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCD",
685 		"4c9007f4026250c6bc8414f9bf50c86c2d7235da");
686 	do_KAT_HMAC_hex_str(&br_sha1_vtable,
687 		"0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
688 		"Test With Truncation",
689 		"4c1a03424b55e07fe7f27be1d58bb9324a9a5a04");
690 	do_KAT_HMAC_hex_str(&br_sha1_vtable,
691 		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
692 		"Test Using Larger Than Block-Size Key - Hash Key First",
693 		"aa4ae5e15272d00e95705637ce8a3b55ed402112");
694 	do_KAT_HMAC_hex_str(&br_sha1_vtable,
695 		"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
696 		"Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data",
697 		"e8e99d0f45237d786d6bbaa7965c7808bbff1a91");
698 
699 	/* From RFC 4231 */
700 
701 	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
702 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
703 		"4869205468657265",
704 		"896fb1128abbdf196832107cd49df33f"
705 		"47b4b1169912ba4f53684b22");
706 
707 	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
708 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
709 		"4869205468657265",
710 		"b0344c61d8db38535ca8afceaf0bf12b"
711 		"881dc200c9833da726e9376c2e32cff7");
712 
713 	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
714 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
715 		"4869205468657265",
716 		"afd03944d84895626b0825f4ab46907f"
717 		"15f9dadbe4101ec682aa034c7cebc59c"
718 		"faea9ea9076ede7f4af152e8b2fa9cb6");
719 
720 	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
721 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
722 		"4869205468657265",
723 		"87aa7cdea5ef619d4ff0b4241a1d6cb0"
724 		"2379f4e2ce4ec2787ad0b30545e17cde"
725 		"daa833b7d6b8a702038b274eaea3f4e4"
726 		"be9d914eeb61f1702e696c203a126854");
727 
728 	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
729 		"4a656665",
730 		"7768617420646f2079612077616e7420"
731 		"666f72206e6f7468696e673f",
732 		"a30e01098bc6dbbf45690f3a7e9e6d0f"
733 		"8bbea2a39e6148008fd05e44");
734 
735 	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
736 		"4a656665",
737 		"7768617420646f2079612077616e7420"
738 		"666f72206e6f7468696e673f",
739 		"5bdcc146bf60754e6a042426089575c7"
740 		"5a003f089d2739839dec58b964ec3843");
741 
742 	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
743 		"4a656665",
744 		"7768617420646f2079612077616e7420"
745 		"666f72206e6f7468696e673f",
746 		"af45d2e376484031617f78d2b58a6b1b"
747 		"9c7ef464f5a01b47e42ec3736322445e"
748 		"8e2240ca5e69e2c78b3239ecfab21649");
749 
750 	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
751 		"4a656665",
752 		"7768617420646f2079612077616e7420"
753 		"666f72206e6f7468696e673f",
754 		"164b7a7bfcf819e2e395fbe73b56e0a3"
755 		"87bd64222e831fd610270cd7ea250554"
756 		"9758bf75c05a994a6d034f65f8f0e6fd"
757 		"caeab1a34d4a6b4b636e070a38bce737");
758 
759 	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
760 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
761 		"aaaaaaaa",
762 		"dddddddddddddddddddddddddddddddd"
763 		"dddddddddddddddddddddddddddddddd"
764 		"dddddddddddddddddddddddddddddddd"
765 		"dddd",
766 		"7fb3cb3588c6c1f6ffa9694d7d6ad264"
767 		"9365b0c1f65d69d1ec8333ea");
768 
769 	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
770 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
771 		"aaaaaaaa",
772 		"dddddddddddddddddddddddddddddddd"
773 		"dddddddddddddddddddddddddddddddd"
774 		"dddddddddddddddddddddddddddddddd"
775 		"dddd",
776 		"773ea91e36800e46854db8ebd09181a7"
777 		"2959098b3ef8c122d9635514ced565fe");
778 
779 	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
780 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
781 		"aaaaaaaa",
782 		"dddddddddddddddddddddddddddddddd"
783 		"dddddddddddddddddddddddddddddddd"
784 		"dddddddddddddddddddddddddddddddd"
785 		"dddd",
786 		"88062608d3e6ad8a0aa2ace014c8a86f"
787 		"0aa635d947ac9febe83ef4e55966144b"
788 		"2a5ab39dc13814b94e3ab6e101a34f27");
789 
790 	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
791 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
792 		"aaaaaaaa",
793 		"dddddddddddddddddddddddddddddddd"
794 		"dddddddddddddddddddddddddddddddd"
795 		"dddddddddddddddddddddddddddddddd"
796 		"dddd",
797 		"fa73b0089d56a284efb0f0756c890be9"
798 		"b1b5dbdd8ee81a3655f83e33b2279d39"
799 		"bf3e848279a722c806b485a47e67c807"
800 		"b946a337bee8942674278859e13292fb");
801 
802 	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
803 		"0102030405060708090a0b0c0d0e0f10"
804 		"111213141516171819",
805 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
806 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
807 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
808 		"cdcd",
809 		"6c11506874013cac6a2abc1bb382627c"
810 		"ec6a90d86efc012de7afec5a");
811 
812 	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
813 		"0102030405060708090a0b0c0d0e0f10"
814 		"111213141516171819",
815 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
816 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
817 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
818 		"cdcd",
819 		"82558a389a443c0ea4cc819899f2083a"
820 		"85f0faa3e578f8077a2e3ff46729665b");
821 
822 	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
823 		"0102030405060708090a0b0c0d0e0f10"
824 		"111213141516171819",
825 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
826 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
827 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
828 		"cdcd",
829 		"3e8a69b7783c25851933ab6290af6ca7"
830 		"7a9981480850009cc5577c6e1f573b4e"
831 		"6801dd23c4a7d679ccf8a386c674cffb");
832 
833 	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
834 		"0102030405060708090a0b0c0d0e0f10"
835 		"111213141516171819",
836 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
837 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
838 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd"
839 		"cdcd",
840 		"b0ba465637458c6990e5a8c5f61d4af7"
841 		"e576d97ff94b872de76f8050361ee3db"
842 		"a91ca5c11aa25eb4d679275cc5788063"
843 		"a5f19741120c4f2de2adebeb10a298dd");
844 
845 	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
846 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
847 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
848 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
849 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
850 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
851 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
852 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
853 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
854 		"aaaaaa",
855 		"54657374205573696e67204c61726765"
856 		"72205468616e20426c6f636b2d53697a"
857 		"65204b6579202d2048617368204b6579"
858 		"204669727374",
859 		"95e9a0db962095adaebe9b2d6f0dbce2"
860 		"d499f112f2d2b7273fa6870e");
861 
862 	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
863 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
864 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
865 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
866 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
867 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
868 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
869 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
870 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
871 		"aaaaaa",
872 		"54657374205573696e67204c61726765"
873 		"72205468616e20426c6f636b2d53697a"
874 		"65204b6579202d2048617368204b6579"
875 		"204669727374",
876 		"60e431591ee0b67f0d8a26aacbf5b77f"
877 		"8e0bc6213728c5140546040f0ee37f54");
878 
879 	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
880 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
881 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
882 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
883 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
884 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
885 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
886 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
887 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
888 		"aaaaaa",
889 		"54657374205573696e67204c61726765"
890 		"72205468616e20426c6f636b2d53697a"
891 		"65204b6579202d2048617368204b6579"
892 		"204669727374",
893 		"4ece084485813e9088d2c63a041bc5b4"
894 		"4f9ef1012a2b588f3cd11f05033ac4c6"
895 		"0c2ef6ab4030fe8296248df163f44952");
896 
897 	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
898 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
899 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
900 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
901 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
902 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
903 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
904 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
905 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
906 		"aaaaaa",
907 		"54657374205573696e67204c61726765"
908 		"72205468616e20426c6f636b2d53697a"
909 		"65204b6579202d2048617368204b6579"
910 		"204669727374",
911 		"80b24263c7c1a3ebb71493c1dd7be8b4"
912 		"9b46d1f41b4aeec1121b013783f8f352"
913 		"6b56d037e05f2598bd0fd2215d6a1e52"
914 		"95e64f73f63f0aec8b915a985d786598");
915 
916 	do_KAT_HMAC_hex_hex(&br_sha224_vtable,
917 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
918 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
919 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
920 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
921 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
922 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
923 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
924 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
925 		"aaaaaa",
926 		"54686973206973206120746573742075"
927 		"73696e672061206c6172676572207468"
928 		"616e20626c6f636b2d73697a65206b65"
929 		"7920616e642061206c61726765722074"
930 		"68616e20626c6f636b2d73697a652064"
931 		"6174612e20546865206b6579206e6565"
932 		"647320746f2062652068617368656420"
933 		"6265666f7265206265696e6720757365"
934 		"642062792074686520484d414320616c"
935 		"676f726974686d2e",
936 		"3a854166ac5d9f023f54d517d0b39dbd"
937 		"946770db9c2b95c9f6f565d1");
938 
939 	do_KAT_HMAC_hex_hex(&br_sha256_vtable,
940 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
941 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
942 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
943 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
944 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
945 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
946 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
947 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
948 		"aaaaaa",
949 		"54686973206973206120746573742075"
950 		"73696e672061206c6172676572207468"
951 		"616e20626c6f636b2d73697a65206b65"
952 		"7920616e642061206c61726765722074"
953 		"68616e20626c6f636b2d73697a652064"
954 		"6174612e20546865206b6579206e6565"
955 		"647320746f2062652068617368656420"
956 		"6265666f7265206265696e6720757365"
957 		"642062792074686520484d414320616c"
958 		"676f726974686d2e",
959 		"9b09ffa71b942fcb27635fbcd5b0e944"
960 		"bfdc63644f0713938a7f51535c3a35e2");
961 
962 	do_KAT_HMAC_hex_hex(&br_sha384_vtable,
963 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
964 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
965 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
966 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
967 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
968 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
969 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
970 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
971 		"aaaaaa",
972 		"54686973206973206120746573742075"
973 		"73696e672061206c6172676572207468"
974 		"616e20626c6f636b2d73697a65206b65"
975 		"7920616e642061206c61726765722074"
976 		"68616e20626c6f636b2d73697a652064"
977 		"6174612e20546865206b6579206e6565"
978 		"647320746f2062652068617368656420"
979 		"6265666f7265206265696e6720757365"
980 		"642062792074686520484d414320616c"
981 		"676f726974686d2e",
982 		"6617178e941f020d351e2f254e8fd32c"
983 		"602420feb0b8fb9adccebb82461e99c5"
984 		"a678cc31e799176d3860e6110c46523e");
985 
986 	do_KAT_HMAC_hex_hex(&br_sha512_vtable,
987 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
988 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
989 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
990 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
991 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
992 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
993 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
994 		"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
995 		"aaaaaa",
996 		"54686973206973206120746573742075"
997 		"73696e672061206c6172676572207468"
998 		"616e20626c6f636b2d73697a65206b65"
999 		"7920616e642061206c61726765722074"
1000 		"68616e20626c6f636b2d73697a652064"
1001 		"6174612e20546865206b6579206e6565"
1002 		"647320746f2062652068617368656420"
1003 		"6265666f7265206265696e6720757365"
1004 		"642062792074686520484d414320616c"
1005 		"676f726974686d2e",
1006 		"e37b6a775dc87dbaa4dfa9f96e5e3ffd"
1007 		"debd71f8867289865df5a32d20cdc944"
1008 		"b6022cac3c4982b10d5eeb55c3e4de15"
1009 		"134676fb6de0446065c97440fa8c6a58");
1010 
1011 	for (x = 1, u = 0; u < sizeof data; u ++) {
1012 		data[u] = x;
1013 		x = (x * 45) % 257;
1014 	}
1015 	printf("(MD5) ");
1016 	test_HMAC_CT(&br_md5_vtable, key, sizeof key, data);
1017 	printf("(SHA-1) ");
1018 	test_HMAC_CT(&br_sha1_vtable, key, sizeof key, data);
1019 	printf("(SHA-224) ");
1020 	test_HMAC_CT(&br_sha224_vtable, key, sizeof key, data);
1021 	printf("(SHA-256) ");
1022 	test_HMAC_CT(&br_sha256_vtable, key, sizeof key, data);
1023 	printf("(SHA-384) ");
1024 	test_HMAC_CT(&br_sha384_vtable, key, sizeof key, data);
1025 	printf("(SHA-512) ");
1026 	test_HMAC_CT(&br_sha512_vtable, key, sizeof key, data);
1027 
1028 	printf("done.\n");
1029 	fflush(stdout);
1030 }
1031 
1032 static void
1033 test_HKDF_inner(const br_hash_class *dig, const char *ikmhex,
1034 	const char *salthex, const char *infohex, const char *okmhex)
1035 {
1036 	unsigned char ikm[100], saltbuf[100], info[100], okm[100], tmp[107];
1037 	const unsigned char *salt;
1038 	size_t ikm_len, salt_len, info_len, okm_len;
1039 	br_hkdf_context hc;
1040 	size_t u;
1041 
1042 	ikm_len = hextobin(ikm, ikmhex);
1043 	if (salthex == NULL) {
1044 		salt = BR_HKDF_NO_SALT;
1045 		salt_len = 0;
1046 	} else {
1047 		salt = saltbuf;
1048 		salt_len = hextobin(saltbuf, salthex);
1049 	}
1050 	info_len = hextobin(info, infohex);
1051 	okm_len = hextobin(okm, okmhex);
1052 
1053 	br_hkdf_init(&hc, dig, salt, salt_len);
1054 	br_hkdf_inject(&hc, ikm, ikm_len);
1055 	br_hkdf_flip(&hc);
1056 	br_hkdf_produce(&hc, info, info_len, tmp, okm_len);
1057 	check_equals("KAT HKDF 1", tmp, okm, okm_len);
1058 
1059 	br_hkdf_init(&hc, dig, salt, salt_len);
1060 	for (u = 0; u < ikm_len; u ++) {
1061 		br_hkdf_inject(&hc, &ikm[u], 1);
1062 	}
1063 	br_hkdf_flip(&hc);
1064 	for (u = 0; u < okm_len; u ++) {
1065 		br_hkdf_produce(&hc, info, info_len, &tmp[u], 1);
1066 	}
1067 	check_equals("KAT HKDF 2", tmp, okm, okm_len);
1068 
1069 	br_hkdf_init(&hc, dig, salt, salt_len);
1070 	br_hkdf_inject(&hc, ikm, ikm_len);
1071 	br_hkdf_flip(&hc);
1072 	for (u = 0; u < okm_len; u += 7) {
1073 		br_hkdf_produce(&hc, info, info_len, &tmp[u], 7);
1074 	}
1075 	check_equals("KAT HKDF 3", tmp, okm, okm_len);
1076 
1077 	printf(".");
1078 	fflush(stdout);
1079 }
1080 
1081 static void
1082 test_HKDF(void)
1083 {
1084 	printf("Test HKDF: ");
1085 	fflush(stdout);
1086 
1087 	test_HKDF_inner(&br_sha256_vtable,
1088 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
1089 		"000102030405060708090a0b0c",
1090 		"f0f1f2f3f4f5f6f7f8f9",
1091 		"3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865");
1092 
1093 	test_HKDF_inner(&br_sha256_vtable,
1094 		"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f",
1095 		"606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
1096 		"b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
1097 		"b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87");
1098 
1099 	test_HKDF_inner(&br_sha256_vtable,
1100 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
1101 		"",
1102 		"",
1103 		"8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8");
1104 
1105 	test_HKDF_inner(&br_sha1_vtable,
1106 		"0b0b0b0b0b0b0b0b0b0b0b",
1107 		"000102030405060708090a0b0c",
1108 		"f0f1f2f3f4f5f6f7f8f9",
1109 		"085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896");
1110 
1111 	test_HKDF_inner(&br_sha1_vtable,
1112 		"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f",
1113 		"606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf",
1114 		"b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
1115 		"0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4");
1116 
1117 	test_HKDF_inner(&br_sha1_vtable,
1118 		"0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
1119 		"",
1120 		"",
1121 		"0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918");
1122 
1123 	test_HKDF_inner(&br_sha1_vtable,
1124 		"0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c",
1125 		NULL,
1126 		"",
1127 		"2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48");
1128 
1129 	printf(" done.\n");
1130 	fflush(stdout);
1131 }
1132 
1133 /*
1134  * Known-answer test vectors for SHAKE128, from the NIST validation test
1135  * suite. Each vector is a pair (input,output).
1136  */
1137 static const char *const KAT_SHAKE128[] = {
1138 
1139 	"e4e932fc9907620ebebffd32b10fda7890a5bc20e5f41d5589882a18c2960e7aafd8730ee697469e5b0abb1d84de92ddba169802e31570374ef9939fde2b960e6b34ac7a65d36bacba4cd33bfa028cbbba486f32367548cb3a36dacf422924d0e0a7e3285ee158a2a42e4b765da3507b56e54998263b2c7b14e7078e35b74127d5d7220018e995e6e1572db5f3e8678357922f1cfd90a5afa6b420c600fd737b136c70e9dd14",
1140 	"459ce4fa824ee1910a678abc77c1f769",
1141 
1142 	"18636f702f216b1b9302e59d82192f4e002f82d526c3f04cbd4f9b9f0bcd2535ed7a67d326da66bdf7fc821ef0fff1a905d56c81e4472856863908d104301133ad111e39552cd542ef78d9b35f20419b893f4a93aee848e9f86ae3fd53d27fea7fb1fc69631fa0f3a5ff51267785086ab4f682d42baf394b3b6992e9a0bb58a38ce0692df9bbaf183e18523ee1352c5fad817e0c04a3e1c476be7f5e92f482a6fb29cd4bbf09ea",
1143 	"b7b9db481898f888e5ee4ed629859844",
1144 
1145 	"5d9ff9fe63c328ddbe0c865ac6ba605c52a14ee8e4870ba320ce849283532f2551959e74cf1a54c8b30ed75dd92e076637e4ad5213b3574e73d6640bd6245bc121378174dccdaa769e6e4f2dc650e1166c775d0a982021c0b160fe9438098e86b6cdc786f2a6d1ef68751551f7e99773daa28598d9961002c0b47ab511c8707df69f9b32796b723bf7685251d2c0d08567ad4e8540ddcc1b8a1a01f6c92aaaadcaf42301d9e53463",
1146 	"f50af2684408915871948779a14c147c",
1147 
1148 	"38c0be76e7b60f262f1499e328e0519f864bbb9d134d00345d8942d0ab762c3936c0cd1896eca6b77b3c01089dd285e9f61708a62e5ea4bf57c50decda5c215fb18ac149d7ace09ffdfed91e7fbf068d96908e42cf1e7ee7bc001c7ee9e378a311e44311923de4681f24c92eb5f0fb13d07ef679ded3b733f402168dc050568dbf97fb79afe8db994874783e27ad8d040ba8e75343c6762c6793a42247eee5a6216b908817f5edbbdf",
1149 	"e4786ad8f2ea9c8e420a6f50b5feec9a",
1150 
1151 	"ec586d52ad2ced1f96bd9458a5a1f64bc1b4cce1fa52517513c9ebe63d0d0eeb26ae5da73208137e08baa22651599a01bc65cbaa467baeceb8cd013d71d0b2406534fe2e6619da3aa380928f6effb09f42ba1fb7048e90d7898f1dc259b52c51b2d2970cd0c70afb6cf8acba83fd01cc589b0f31bcf2bf3b8df7879d7d2546c514706f6cf97b6a6b6d0a37d018ba553108f0e240f70f03a0ccee86f76589c64594f6cf74679bc330ad9f",
1152 	"191a3710c72d11da7a2410bc73ba9d9f",
1153 
1154 	"c201dfe59e03574476e3c220c971c1685ea96ea137daed2ac10845c54d8e6e53c307acdf956f1bdef3868ab53e758c7cbeb4cd02972ba311f998e5f3983000345c8947aa59b78bb301b6ecbe9808ee0de99ed0b938fc19f677997398bd84bcd6f34d5b4ed123d04a093a8f42c1700fa2472f1ecc00957761a2d296bda3d2cbc0f21d8ed4e4fb122b71db1d49a0f516c3402f6046d93de6dae20df7683462557abfbf88437c8678dfa2613b",
1155 	"464121895e5c9d85190bcee0437453dd",
1156 
1157 	"bd34acd613e0e0da6bebc45ba73fefa0bd8aa8ebba34040a07944f29eb63adea527101b8cd960e58d9ecddc0643b5e2d8db55170ace4678892e0a57612c50a4dc0647189f839b9a1229e22e0353dfa707acb7ab893f4ebe8bb910cd14f21b8fb8e77c4f19db027e0cd685d60212e0d920b34e96b774bd54f0a0f4ce2ac5f001b4411c19ac2e3a03b63b454eb30f4ddbac959673260d370e708c32d5030682ad56a99322972ba6eda6be9d027",
1158 	"8e167ceae101ea0b3b98175f66e46b0e",
1159 
1160 	"166b4fec6967c2a25f80c0075379978124833b84894c3cb3a538f649dcee08b8e41707901f6273a128cce964ac1e9b977bb7fe28de8bc2542c6c07109889cea84d34ada6bde8c8f5358afc46b5ef5db3009fe3a2efd860ed0ad6b540595246c27849abf7eafea9e5af42607519f3c51ddbc353bc633afec56aff69a0c953584d8ede684b4faefeb8be7d7db97e32bc1c35abb73ce3ba8425726d89f98e93ed93b67b4c6993ffafb789c1bbda8d",
1161 	"eb2fa0e8e04e698ca511d6abf7de84fb",
1162 
1163 	"62c625d31a400c5ff092d6fd638f1ea911ad912f2aabffea2377b1d2af4efeb6eb2519c5d8482d530f41acdab0fbe43f9c27d357e4df3caa8189fa7745ff95f811ed13e6497a1040852a1149890216d078ee6eb34461cfa6693ba631dbefacf83ce5ba3f531ddeadba16ae50d6eedce20cca0b4b3278e16644535e0859676c3fd5d6b7d7df7bbe2316cc2bfa7f055fffc2835225976d9a737b9ac905a7affc544288b1b7d6dad92901162f4c6d90",
1164 	"bb0acc4423c1d8cfc788e748ade8d5fd",
1165 
1166 	"8af63bbe701b84ff9b0c9d2fd830e28b7d557af3fcf4874bb7b69f2116388090d70bff64a600427eeea22f7bee0324900fbce9b8752fe312d40f8a8485231da5d94694daadb3d6bf3e7f2cc83f67f52829cc9cf1d3fcc87d42b3d20ec2e27cb135aee068acbca68734ac7a5ff3e3bd1a738e7be63de39e56aaaa6104f6fd077c964ccc55cba41ca1783003883100e52f94096fdfdc6dcd63b3fd1db148fc24cda22640eb34f19ed4b113ad8a2144d3",
1167 	"4a824cae0f236eab147bd6ebf66eafc2",
1168 
1169 	"a8c0f0e4afcda47e02afaaa2357c589e6b94168a6f6f142b019938186efa5b1b645bb4da032694b7376d54f4462e8c1ba5d6869d1003f3b9d98edc9f81c9dbd685058adb7a583c0b5c9debc224bb72c5982bfcdd67b4bdc57579e0467436c0a1b4c75a2d3cea034119455654f6ab7163ed9b61949d09da187d612b556fca724599a80c1970645023156f7df2e584f0bf4c2e9b08d98bb27a984fa7149c0b598adbb089e73f4f8d77f92248e419d0599f",
1170 	"4800f8f5e598a26ee05a0ea141f849d0",
1171 
1172 	"a035c12af3fb705602540bd0f4a00395e1625edf2d44af4a145b463585aba46b34ee3203eb9132842000f54dcd234e347c28486ea18414af2d3445916049403adfa3ed3906fdb3b27f2aa4bb149df405c12fb0bf0e1dacb79c50bec3fde2295fc8dd5c97ed46dd28475a80e27017dc50d9feff9b1a1861ac86371791037e49221923e6e44874962d9f18f1898a98ee5dec1e9eca6d7c1ad4166fbac41b2587caf7fef3e7be90c80aafed5f7a0928127321",
1173 	"2d124d81a4a45ad9c0b91cca23cc2991",
1174 
1175 	"d41739834414a0792470d53dee0f3f6c5a197314d3a14d75278440048294eab69df6eb7a33c9f807b5082bd93eb29d76c92837f6a2d6c5c21a154c9c7f509ee04b662b099c501a76e404996fe2997163d1abdd73df019c35e06d45b144f4dbb0462fa13767f12f4e1b2bc605c20ce1b9d96c0c94726af953e154d14cb9c8c8aff719f40c7cf45f15c1445ba6c65215024b316d60435905a686929874c6148e64c4eccd90c3a1d1553d18ff57d6b536c58ec3",
1176 	"551fc7eceeee151523be716538258e2e",
1177 
1178 	"5bbb333460ffac345e4d2bc2dba303ef75b85c57233590fabd22d547bf9e1d7a4ad43a286b2a4618a0bb42559808fd813bea376ceacc07e608167ad1b9ec7d7ae919fd2991464cf63570c7dfb299b61836bd73a29007cf1faa45b1e5539a00514272c35d58bb877526530187afbcf55a6f1757209c50af4eab96c2ab160e6ea75dc8d6ef4bf2bf3e7a4b3a7619db84efede22a0f960e701b14f0f44c89b18f2640017c05ef51bcf93942b8d3775d2980b80435",
1179 	"2c98dce5b1ec5f1f23554a755fac7700",
1180 
1181 	"8040a7296d7553886e5b25c7cf1f64a6a0a143185a83abf5c5813bef18008ec762e9bcc12ab7235552cf67274210b73942ac525f26364af431fc88cc34961169f6bf8872d864f360b9fbc27b18160d0578381db509e72e678402731157555bf9026b1325c1a34c136b863eab9a58ec720cedaa0049bfddb4863d03a6ca65f3dd4f9465c32b9db4d52f19e39f10ffdfe8c475032a2fe5e145ff524073d5ed617fa5e387325f7ab50fcf5cba40c2326bcf6a753019",
1182 	"c0bb8427ef0ca4e457d2887878d91310",
1183 
1184 	"cbaceb762e6c2f5f96052d4a681b899b84de459d198b3624bd35b471bdc59655b1405e9a5448b09e93e60941e486ad01d943e164f5655b97be28f75413c0ab08c099bd3650e33316234e8c83c012ad146b331e88fb037667e6e814e69e5f100b20417113c946a1116cc71ed7a3c87119623564d0d26c70dd5cfc75ef03acaea6f8c0e3f96877e0d599d8270635aee25be6d21b0522a82f4149ec8037edaf6b21709c7aafd580daaad00a0fd91fcfe6211d90abef95",
1185 	"626bd9eb0982b6db884d38e8c234854e",
1186 
1187 	"1bbee570394bc18d0f8713c7149cabb84e0567dd184510e922d97f5fb96b045f494808c02014f06074bd45b8a8ad12b4cb448ec16285fb27670fce99914f100ad6f504c32fa40ab39beec306667f76f9ab98b3ec18c036b8f1b60d4457a9fe53cbab23a0ee64d72d8a03d6d8d67a9f2ff6eb1d85c25d8746c8b4858794e094e12f54ab80e5ba1f774be5c456810755ffb52415b5e8c6b776f5f37b8bcf5c9b5d0ad7e58a9d0fa938e67ad5aaee8c5f11ef2be3a41362",
1188 	"a489ab3eb43f65ffbd4d4c34169ee762",
1189 
1190 	"aeacffca0e87bfdb2e6e74bfb67c9c90a8b6fb918b9be164cafcab7d570d8cd693bd8ee47243d3cbdaf921ce4d6e9e09c8b6d762eb0507bd597d976f6243e1f5e0d839e75ea72e2780da0d5e9f72a7a9b397548f762c3837c6a7c5d74b2081705ba70ab91adb5758e6b94058f2b141d830ff7b007538fb3ad8233f9e5bcbf6adcdd20843ee08d6c7d53cc3a58f53f3fe0997539e2f51d92e56990daad76dc816fd013b6d225634db140e9d2bbe7f45830406e44fee9d59",
1191 	"4eaa27b085d08fc6a7473e672ea2ca1b",
1192 
1193 	"a22314d2173ca4d53897924c4b395f0ae52c7fff4880525cee9055f866879af35f22759903b779898676a216feefd4ed75d484f83c00b58383b9279e2732cbc2cb5479b72abee5b4ab0bd0c937537b7a47f461ad419225c6045cca10c191225f0e4389f3355cd3a0d2de822c9d6f3cf984147de3fd3d8a6c9a02a617ddac87114f770b16cc96289321782108d94a00b153bd40651809cabe6c32237a2389e321b67769e89676cdd6c060162592ecadebdd7512fa3bfece04",
1194 	"eea88229becc3608df892998b80cf57b",
1195 
1196 	"f99bba3e3b14c8de38c8edecd9c983aa641320a251130f45596a00d2cfeefe7933f1a2c105c78627d782fd07a60001c06a286d14ec706dcdd8a232a613e1ea684ee7ef54dc903ec1c09c2c060bb0549a659fd47ae9e8b9cb3680b7c1c2d11ebf720209c06879d8f51d9ee1afafe263807c01bb9def83db879a89f7eb85c681c6c6cc58cc52893d0b131186cc3b9e16bad7d48c46a74abb492d475beb04c9fdc573cc454242c8534bcc7c822356ea558f9fa3ae3bb844415916",
1197 	"5109746cb7a61482e6e28de02db1a4a5",
1198 
1199 	"564da8460dc0c3d20b1fda3628349a399ba52446b5d3626fd0039ab282bc437b166f186b3c5e6c58ffb6bd95f8fe8b73c1b56a07ad37572eb6e148cfb7750760dcc03fac567ad7d3536d80922dda8ac4e118fc29c47ee3677183ea4e06242b6090864591c3ddaf4bef8c4cb52f8e3f35e4140034616faf21e831a9b8d68f5a841a0a52a2eb4f9ac9bb5b488766e251cdb0f29faeeed463640333ad948e7f3ad362948c68379740539f219d8f3ba069952efa0021d273a738aad0",
1200 	"f43552da8b2623a130196e70a770230d",
1201 
1202 	"8a54e8bf30eeb2e098955f2eef10af3c0a32391656fdff82120e4785bb35a629c8635e7e98c9eadfa93ed6760ae1d40313000dd85339b528cadfe28258a09e9976643a462477e6d022eb7f6a6338a8fdbf261c28e8ed43869f9a032f28b4d881fb202720bc42cf3b6d650211e35d53b4766a0f0dfd60d121fa05519211bb7d69bf5fcb124870cda8f17406747097fcb0a1968e907adb888341ea75b6fcfbb4d92ae8ce27b04a07a016df3399f330cb77a67040b847a68f33de0f16",
1203 	"c51c6e34cef091a05dfcf30d45b21536",
1204 
1205 	"2a64753a74d768b82c5638a0b24ef0da181bc7d6e2c4ffdb0ae50d9c48ecfa0d90880974db5f9ac32a004e25c8186cd7d0e88439f0f652256c03e47f663eff0d5cb7c089f2167ff5f28df82f910badc5f4b3860af28cbb6a1c7af3fafa6dae5398d8e0a14165def78be77ee6948f7a4d8a64167271ed0352203082368de1cd874bd3b2e351b28170fdf42871590d9d179ce27c99f481f287820fd95ba60124517e907e78a9662e09519e3ef868ebdcca311700a603b04fae4afe4090",
1206 	"2d2ee67938422ae12f8cfa8b2e744577",
1207 
1208 	"a7d645b70f27f01617e76abc2ae514164f18d6fd4f3464e71a7fc05a67e101a79b3b52d4ecfa3ddac6ec2a116d5222e8e536d9d90fffec9c1442679b06db8aa7c53dcde92006211b3dd779f83b6289f015c4cd21ca16ce83bb3ea162540bb012ee82bddef4722341454f5f59da3cd098a96abbbdc9a19202d61c7697979afa50deb22a9bb067ccb4a6fce51c930a7f4767cfaa9454c9c1832f83ee2318b0f0c95d761c079c0ca2dc28871229aef11f64199ca290b2b5e26d8c1c12ec1f",
1209 	"ec989e0290fc737952de37dd1ebc01c6",
1210 
1211 	"3436fe321f2a41478164b8b408a7a8f54ff2a79cb2020bf36118a2e3b3fca414bd42e55624cc4f402f909016209b10f0c55626194a098bb6519d0fa844a68ab3eaa116df39797b1e6c51eb30557df0c4f3d1a2e0471f1d8264fb3288c6c15dcde4daf795083aad2b5f2d31c84c542fb702ea83b7524ca9a1c1b9754ade5604abd375f23f3916cdad31aecaa7b028b7121a2a316713991759925f3fb8366c6795defa6ea77416c4ed095c1f9527026f1d621815b8310d4ff3fc76f798760b",
1212 	"bb5e48212442ad7ae83697092024c22b",
1213 
1214 	"01bdb4f89f84b728a9d6b3a03f60709900571c1a2a0f912702cad73677ceeae202babde3d0197e3e23381cb9f6350792e05937703aa76f9a84b5c36705bb58f6b2ea6b1e51ff94a8de174cbc2ec5ae9ad2627a8b3ea45f162b727a7639f71a4cd9f6c6926a5d81d0a21c4c923037ed199f1aef517e2eea03bea9044c5baab84e3f85d625635bcb1c37ef232144b44c770f2b9dab416b96c906016acfb3fbba62ab40a4c08323fcf66437d953b164541cea3a8c81d186eed0cb23b3e98813a9",
1215 	"8bb7ffa4572616f3bc7c33bd70bbcd59",
1216 
1217 	"9ae51ed483306c9a5a6db027f03cd4472cf3a71df5f1e11852306123d01ab81c259eeb88128275858efb8cff207ba5278dca3a21b358cbfdb5d223e958f3dca5ad9d2537f128c3dfb1fa564d3157de120f7b7d5524e67fc7abf897d9a5bd6b2c7c0a5348e6c95e920c919778ec7a86effb2ff91f0f44045c7dca46597e216e98d80efe25ba0d4f84e7e9d5e81689a5a6990d34e83e1a62a67371b7d2adc7ecd30ad1ad35359e9d9f8a299b057a2f441e313eb819770fa18cd41572adf856edc4",
1218 	"e7f66f49f70d506a9b5508cc50f65cf2",
1219 
1220 	"899c81ea1162514ea7a2d3487d0efcc4648a3067f891131918d59cc19a266b4f3c955c00ddd95cddedf27b86220c432d6ca548e52cf2011da17fd667a2177a7f93e37b8892d51898f1485277e9e046a48cb8b999fcbcf550db53d40602421a3f76cd070a971e2d869beb80a53b54ac30ac0aab0cd1b696bbaf99bb25216ff199cd9a280f567c44b0d4252c98812e1ddab4e445c414aa8d650598b64d6768a7948093051e36b7051c823c7ed6213743a98d8eaf4b2b5e8157c699ea053cf4e53877",
1221 	"52173b139c76a744b7a4d2221d4178c4",
1222 
1223 	"e50422869373abac1c26e738fb3ccb577b65975a7998ba096b04ef3aa148ada2cbe6beeabcf52d056d1766c245ab999d97445fdb6d59a0d6843eb4959752c89fe07b8411ddcfebef509482b8896bb43de7c875b29da52606b278b8704c62154b2da9bb237e68aa10cb85814250e4e4de73da200991e51241fd9a45f446de5a4bb959ad4727283510e9d2ac8a207ef0284163aa05d27f2d316e8ca1480f30604a8d74a0a661775398af644bb584a1a2c55c4959d0e7dd3f7c0c3614962fbeefeeafe0",
1224 	"f4c517a82c850c3c4c96d23a8f3106b8",
1225 
1226 	"066febbe205ea342cde69fd4c72889442e14a5977d886252bdbc2ff5f8dd8fc5f1f870ce121ab929a6b6227b484648be9b3501443cfdecf8f58d4de834ed1800bb244c18985a8232583ac6fc789aa59d1c5e87ad03994085bbf6e1ba1157d4e4ccbb28a49b6529e54b3b34613d6cc9671855e2dcbba6838176c093737962eaf88c85ab780184d4cae78013b28103dca7f7e3b8d94a6ae0728db30a1c535783c4644a7e9eb4ffac6a95d30cf52ba805e220d0b2aa9a2e7de26a97efbd877ec6d1bad148",
1227 	"bac7162dc8328911fa639f26ba952ab0",
1228 
1229 	"ccf92b17b9cf0d8577c1f3db9c19d3c86f16bab4058611f6aa97204783ebd07671eab55e375c4b16e03780675bb5738369aa7cf3b9156cd250f516392f5e0efa30cbb09132b66457756621f947093029e10233938c846513086023252d1bac9dd3442598f004e0b200f7dd79aa3a9122a0c6e77bc7fc8521988050f3c64b32c620fc1b5bba6f458e4791bdcfca731fd66e9da093b1a45264c8ffa48b3f1628dfe19c9ac1d71f1d5214ddc7e4f0da60ae122f67c394a55645628228d5e3a3174fdccbaab4",
1230 	"19a9eadf9c7c000fe340603f27bd830b",
1231 
1232 	"a37dcfab50a317e6a7cc51524b5d611a53652b59fc7df0229af3dac4d527d54c1134a14b2ed325d9727d07d9c3d0797f1a34561034be6de98b551dc384132235eaedae7a9b97bb7581a2a0f2c4e8e32f3e294f9b30f646dd33ce58187188146e14f01dc3ffb581c3bc834726b66c4732a98c3f8256ed22077ba8b34c024d53fe798517abc2f61eca0c6722fc02254c9141a54d4e106aaa6d4b2957e6a12c88ed00f4c4bc4c223b92579859fc0edb9b53f0bba286c53786198c9b6c6eb5eb5b4490844b7d06",
1233 	"b9e1455d06233d14b8d3020441351a76",
1234 
1235 	"0248b909e1f31ee855a03b6c81366757aa3732d2eca0b06a2b1015584c2d8205a4431fcdb02f6a03077ccf368ecb78b3eb78664b3c7ac157088b6cf9758adda4bc1d2cdedb9a69448a2833cf6f21865795bbd5551be859ed297aa82c288b898e331c07c3c8fcc4b2c4ec90bf8e003a499248a677f1b020357625f079cdf92fcbef89d904e11d23569e0f0e8c52303c93c867023a269bc036d8d36d69ca9c7664daacc92a8dc42c3600dbd4c02278333d216011252271def835ce4783883c0760dbcc00bc33bb",
1236 	"ea4606777e21f27d4ae860b3c25283b7",
1237 
1238 	"ce283768aa91488c75c71ee80a4df9495377b6a9ae3351a5962aa8317f08818a0117cf6c391331866d3abc2beea2fa4a43cf32a08385ea2c03dbabe3319104a6c0a3d171061ebed5a23306a8618a81fb63d9dd4c79b42bfdd2a79e05d78290e653f4c6dfd75bf5625ddb85c82bad9444faba3e1558691c004bb50afe37822e320131361d7572e015e559c0f313b53e0d529dde64e74bc41eb52e77361a3ae5721483a795a80a87d684d63f92e347843eb1a8439fef032b3d5a396b154751bd8ed211a3ae37cbf0",
1239 	"dca4d5f9f9b7f8011f4c2f547ce42847",
1240 
1241 	"19265f48c1ea240990847dc15d8198785d55ea6243ef7012ac903beabbdc2bd60032fb3a9f397d28aebb27d7deb7cf505eb1b36bfc4dbcfa8e1c044490b695b50e0974d3c5f0de748508d12ed9bfce10eaadde8fa128d3c30c12d0d403f60baf0b53d2fd7a38cc55dc1182b096c11d1ec9f171b879a73bd6ef1aa7825bc5162cbeba1d9f0739d1337c8142445ce645e4c32477cdcdf37e99fedb9236e24a3d94f0e45ea0b41a74762efe19d27555cdc89feef5b6e533237603fe98d8deae084f69799deac9043e86",
1242 	"688e532e15bde53b0b652291edfb7681",
1243 
1244 	"1080391fa810c50c7437ec058459d3a8cd23c33071c187474151151c809871b6eaf4cf88f592f84557e1eef5c847d3490912072b25b1919af724c0b5ecb111150bd95460328a0b1ba29613c0bd6486110fe6dfab8cca5fde18f5b0bc4d2dc970781511d2e45fc7385c3da18eeb18b3a9e68593d82c75bbbcadab2e5a29745f6f3a924e039579f4418dbee186d9cc24b896d96bd990186bdcbd3082b70aee9bb95a36531ecc405ae13d011bd10fe69fe728c8aed73d1d38e5506bf4fa770347f7e0eb6749121cc0be75",
1245 	"cbf8ee5d477630dac9457a9a0659497d",
1246 
1247 	"0a13ad2c7a239b4ba73ea6592ae84ea9",
1248 	"5feaf99c15f48851943ff9baa6e5055d8377f0dd347aa4dbece51ad3a6d9ce0c01aee9fe2260b80a4673a909b532adcdd1e421c32d6460535b5fe392a58d2634979a5a104d6c470aa3306c400b061db91c463b2848297bca2bc26d1864ba49d7ff949ebca50fbf79a5e63716dc82b600bd52ca7437ed774d169f6bf02e46487956fba2230f34cd2a0485484d",
1249 
1250 	NULL
1251 };
1252 
1253 /*
1254  * Known-answer test vectors for SHAKE256, from the NIST validation test
1255  * suite. Each vector is a pair (input,output).
1256  */
1257 static const char *const KAT_SHAKE256[] = {
1258 	"389fe2a4eecdab928818c1aa6f14fabd41b8ff1a246247b05b1b4672171ce1008f922683529f3ad8dca192f268b66679068063b7ed25a1b5129ad4a1fa22c673cc1105d1aad6d82f4138783a9fe07d77451897277ed27e6fefec2cb56eb2494d18a5e7559d7b6fdddf66db4cbc9926fe270901327e70c8241798b4761dd652d49ad434d8d4",
1259 	"50717d9da0d528c3da799a3307ec74fc086a7d45acfb157774ac28e01ecc74f7",
1260 
1261 	"719effd45ed3a8394bf6c49b43f35879176a598601bd6f598867f966a38f512d21dc51b1488c162cbdc00301a41a09f2078a26937c652cfe02b8c4c92ddbb23583495ba825ae845eb2425c5b6856bda48c2cafae0c0c2e1764942d94be50da2b5d8b24a23b647a37f124d691d8cefbf76ef8fbc0fbdafb0a74a53aaf9f165075784ab485d4d4",
1262 	"6881babbb48e9eea72eeb3524db56e4efc323f3350b6be3cdb1f9c6826e359da",
1263 
1264 	"362f1eb00b37a9613b1ae82b90452579d42f8b1f9ede95f86badc6cdf04c9b79af08be4bc94d7cac136979026b92a2d44d2b642ea1431b47d75fce61367919f171486a007cc271d19de0d1c4c6a11c7a2251fe3aee0bb8938a7dd043d0eb0758a4768c95cc9f6f1703075839487879b47c29c10b2c3e5326ac8f363c65aa4ef76f1b8bd363eb60",
1265 	"c6ce60c1852ea780ed845aac4ca6a30e09f5c0064c9675865178717cfeb1dc97",
1266 
1267 	"d8f12b97f81d47aebbfb7314ff04172cf2be71c3778e238bcccdeecb691fbd542b00e5b7b1a0abb507f107f781fea700ea7e375fdea9e029754a0ea62216774bda3c59e8783d022360fe9625621c0d93e27f7bc03632942150716f019d048a752ccc0f93139c55df0f4aaa066a0550cf22e8c54e47d0475ba56b9842a392ffbc6bd98f1e4b64abd1",
1268 	"e2e1c432dd07c2ee89a78f31211c92eeb5306c4fa4db93c4e5cd43080d6079e4",
1269 
1270 	"a10d05d7e51e75dc150f640ec4722837220b86df2a3580ca1c826ec22ea250977e8663634cc4f212663e6f22e3ffc2a81465e194b885a1356fcbcc0072e1738d80d285e21c70a1f4f5f3296ba6e298a69f3715ff63be4850f5be6cb68cdba5948e3b94dbbce82989aa75b97073e55139aac849a894a71c2294a2776ce6588fb59007b8d796f434da6e",
1271 	"02f17bf86dc7b7f9c3fb96e4b3a10ca574cd0f8dedda50f3dda8008ce9e8fec9",
1272 
1273 	"152009657b680243c03af091d05cce6d1e0c3220a1f178ae1c521daba386694f5bab51cd819b9be1ae1c43a859571eb59d8cbd613c039462e5465ba0b28db544f57a10113406ccf772bc9fe5b02538e0b483225209c1eca447ab870e955befae6bf30dd89d92ddae9580ccf0dfac6415ec592a9a0f14c79acce9679f52d65fb8468012cbc225152d9ed2",
1274 	"b341f4114eee547eddeb2e7363b11d1e31d5e1eb5c18ea702b9d96b404938bad",
1275 
1276 	"eaf4249b5347c2395104a96d39fbf5322c9af2f8ec6a8c45efdc06a2b246efb5502952ab53b52ed9ca8f25a29cd1789b1b5333eddc29a5fbc76c13456a3eae8c9208c1381d062ff60a061da5d26cec73fb7a6a43eace4953f92cd01bc97ed078da19da095842afd938f1f83f84d53703f397fec2bd635f94ada5a3eb78103ebf4de503e8ad7295cb7dd91e",
1277 	"d14c7422c0832687786f1722f69c81fbe25b5889886bf85c7c7271bf7575517b",
1278 
1279 	"a03e55ee76150a6498634099ae418184228320bc838dbfe8276913761516ec9021226f4b597ba622a0823ca499618169c79eb44af2f182d1cc53caefd458a3ed7bbea0a5854653f2b3c20f659f70f23ae786238a8d0e59c29ef49d53125e50abf43b6f65c31f16bc174e43468717dddfcb63f5e21e8d4ba0e674140a97cffab1d5c165f1d9aef968154c60ad",
1280 	"fa889888d3b984c1577fe7c38ca86f0df859291502fe0b2f6e82c778babff377",
1281 
1282 	"2fb4178a0af42b155a739e2910b004e0781c1bca697ca479bf8e71430aefc043883cc7a151779013d2ad07a47cd652b5bdfd604130a1c565115ac51ff3c0ae56b5886c1ab2f0572e385e4fc33c430b874b46aedec49f9b6f45c08be3633bdde99ee02d7e9325276b74cc9d0fb6bfd85e093f2c2a8d3dcfa24308ec18c229f2072b8b32545ee0a9d46e3f1a0f53",
1283 	"254a115343d0ebd865e5d3ff6c61c3f9b65fe96ea92865a5681b1f1f0d1b00e9",
1284 
1285 	"dd344dd531f415a590a9c1838f242af8605bc0c29c1a71283ff5cd8af581683c94c48095e9e9e042b73804e0fd467ecb78699930696f3b6a9890108b99a0e4384e8a51bbadf99b53c358d8cef9fd545a97a13399861458f35a2e86309009c546136d086f058c0c7fbdf083750cb17250c5ebd8247c6f906c8db978a26123d30dec58ecdb7a0afd6face84efcbdca",
1286 	"2d56bef53fde76ef9849f97be2ed22d3c3d10f23b049eca2a8aba0d1fec33119",
1287 
1288 	"353111e447fee6f0bd05d562f30626ab9fb06384a620c49034a5eb3c0bc6d1eb1b86015053e6041ab8ac1cd7b4633512b0a318bfe592e2da6eabb44aa2bead0ba238158c2ea5db56bd7342efccf9d7fe76b8a6af45e0ad594816915f65749054f1d1b7627e4355ecf4e3af72e4d0f5b51877751c6f110f57e86ce942fcef640c31d94e98ecc959238683cb28a3f178",
1289 	"11b27034db724b46882a3086815a835947d19322885e08595be271c511ef783d",
1290 
1291 	"c4e5a5afa1c7d2edd5a21db8b4891ed53c926131f82c69d323b3f410114281fecbc9102bfa5f298e06d91fbd7e9b9661bbae43e7c013f3796557cf2db568de7c94a7cbf5a53ee9326ab4740cadbf1a0b1f59b92040156b977eb4c047a1f34a0c66a85f776a0d1ac34a5ca30b099cb0bbb2ba4c453edbd815b7f14fc69e8cce968bf453171374c428eef8342459db6359",
1292 	"f1ebe75725c26b82ffb59c5a577edaa2f24e49c9070cb9ca007e65938f33dae4",
1293 
1294 	"3b79da982ac5f2a0646374472826361c9d2d2e481414db678e67e0967e5cf3cdd0c1f570293362207191ecd78fb063347350d8135a4f02614d1de12feb70a0046939c078d7d673fea589460265290334d217d6231274ae0d3891e6f50da725f710c983d9bb16ede20833caef34f9dec3c36a6f9fc4eaa71256ac3a136b6a494dcc5985ba5e5c9773a377c0c78387bc8a4d",
1295 	"1fc7c4802141e2db7a9199c747d885a72d8f068262863843c9f4cbb19db38994",
1296 
1297 	"cf9552db2edd8947fd7fbbb2f7189a578343e742891ae6fb85fa0f64da8706e468f0cdc5607539db5726a2679aeddf3ac2ce711e886eff71dad203132e6ac283164e814414c7f686b011fd02c95f8c262920e9725c811a22c1339e0de16e5acd0036d620f2dda98e30c9324c2b778961e0c0b507ad5b205463a448199c9bb60b4f303420a1be3b3cfed5ab0d693cbe331036",
1298 	"b51adb0c2375c9d302ba61859040fa4bfa0091275eec1053fc13950aae706c25",
1299 
1300 	"4ebc9225da5f168c07ef62f621d742cd7c71bbd063269f5e51d65ef164791fe90e070f8b0e96f9499ec21843ee52290fd219c3b5b719ebfedcefe4efbf6b4490d57e4df27d59796f37d35734110b96fd634f5f20bc3de9cd1c28479464be84270ae7f16211f0be8839e8c8d0734ab22097dd371859d9be527a4b2fe83bba0637170ba6e3b1a2ef1c0cca121ffa57a4ffd78af2",
1301 	"54a3fd90ae00dfc77644ca16b4964c3b32a4641c5305704ee25d9f8fdbfb5c7f",
1302 
1303 	"a83f74dcbb48d679db402433020e33dacfa2c37f1e39b2d9dcdc70e81a2ab3d75f586c274376f90a39f49c0dad642cfa4f810afdae7157050847646d60cc6adcd27f7c6a24dab9049dd7c6111ab37c555ef2dd16aaa34d7e8de5ff41feaaad80a8bb8cec85fd7f2eaef28a8772828ab3a5fc24143a58fc0c15bf27ab1a4de28a8a1584f68f65b151154cd1b6dc5ac0dccba7c73d",
1304 	"5d084841c35b1cd9c43082746960ff5bb2d3de78f9bfdd80dc9ca4f5eae2a66d",
1305 
1306 	"734f872c431ab145706b7517e496a3be98bca885fca0105a99b54980f47caa84b60cb3720bf29748483cf7abd0d1f1d9380459dfa968460c86e5d1a54f0b19dac6a78bf9509460e29dd466bb8bdf04e5483b782eb74d6448166f897add43d295e946942ad9a814fab95b4aaede6ae4c8108c8edaeff971f58f7cf96566c9dc9b6812586b70d5bc78e2f829ec8e179a6cd81d224b16",
1307 	"14ec5a3c2ad919aa0f0492f206710347e742e7a58d6fdfd4b2c93dc2183b7b6f",
1308 
1309 	"10112498600da6e925d54d3e8cb0cdc90d0488b243d404b9fb879d1c8beb77bb6579b77aebdbf3e785abe61df17e69e8db219f29ae226f7ca9923719350abef876ec6b3920ebb5c28ccedb2a0b70d5d67a0c8a6116b74341922e60a867d24aa96cf1a89ca647d6c361c5922e7f91f9db114db322249c6a50dde28093c94c01166e11d66c26f73c322d1875f0f8e6bd41c86d803480d8",
1310 	"c9a88a3f221a857cc994a858f7cb4567979ada7834a265278e55de04c1fe496a",
1311 
1312 	"6969a27ad5d0aae6479b2b044bb4b043642375ff503ccb538e17be2f1e41f6aa88b1db991ffefd6087cfb20875920192b671be8b7381f7e1b33d8ff5213429f110fe475cbc74b3ecd2211f9b33f308fcf536e0d0abc36bd5e7756adefddd7728093730ec339c97313179b9e40e3f8e2a2a5c21f5836bf0d632a7961239a6a7f77b44dc700cdd70d8abbfc90c8dde5bc45dcaca2380df4e",
1313 	"bcdec7a8776380df27a4613cb50b7221995d3f752fa55691798ac2dfa0b15599",
1314 
1315 	"163cf8e89b260a81a3d6e4787587a304b35eab8b84faebcef14c626290a9e15f601d135cf503bc9ad5d23e7f213a6146787053f618c6ee90467e3a8df1e03387928acc375608339f7fa45788077fa82f87e11d3c58ce7cf3f8dad6aeaf3e508b722a2a62075df9fa6af4377c707ffe27aa5a11468c3b1c5fce073dae13eac2d1c9a635c5502b96115e69e741a262ee96a78336fcfc34573c",
1316 	"181d10fa5a58ca57077be52eda53910135087312ca7711084e4a5213c81cb4a2",
1317 
1318 	"3a023141ab4db8b08c5cb6792ad97abdf0116d512ea8f4141a8b987f1527657d2fd98f7deca55cc6492a3d0bfad53e40f656a1ac3550c63eb8554f24cb11819a87c5ec009af84e304b69b50eb847e46162a4f8e1ec284b902002994e332461a84ab08ef23cad57959aff64a9ed9632c73ee5b818dc964bb2597cbf25d6c9cf508081be7a5b2e3f9e3fd69305202af11a92002a7b8b038d4c6b",
1319 	"b75b698857675f8aff2b482ac437925af3ea86198484cbc87b60e6dacb13e7e8",
1320 
1321 	"2fd7ed70c6946b11c819775fd45bc0924c02e131ab6d4a3618f67e6d3b77801d4f0d87ea781bf9fa57929757dc70f5945c872eb4e480d547cc1f2fd68fc99f81da4361e7e2bc7b46fb0ef1e3674139ad6b50ee1da830c960a90fccb8b9dac020f701e22fac7eda3edb14eccd1ad47223a1e68a35a1860cc9d74dbfdb60b2cc40cfd072897d6afc2a202cf0dc9f338a3f25d068c4758987ca7d61",
1322 	"85c9275ec610ffbcd7f785c0ad24b7700b32ee352e6720f1ea2305bdb7f45277",
1323 
1324 	"cecb838187223873bab25205a54dadb1ab5a633958cbef3aa04f930467c8f7a947ff12548d964ddc843fe699f72c9377f1c76948c7a2fb5f58b1c65a94b7cd3f3bfe80cbe74be2064d11eb1bc0e52b67f732b1d00f2e2b58d30c4ff13c7479943430958d9f283f199c9029320860bdaa450404773955c74e99c9f47367e642cfb9fd1843bd14ac3cfa246887d885916763a62ae54c011668304e7e",
1325 	"3a5dd05e009e7f985a2668885dd0ea30c5502a1b5c575db6a4c1149c2e6229c1",
1326 
1327 	"283dfdb2e1dc081e3c2b377ba5bc6491cc4af08c40fbfa5e3fe2d45fcdc8b736032cb5fdaa88f0a008d60a86fa53dc7443836bae2475175f2d48163a52ee216241306d87f3f2dd5281b976043a6a135af2555ab39c71ee741ce9e6ac56d87ff48b510d9ae5a338fe50db643b8c8a710a80c8a5e4d278e667b4ce2dfb010f37b588987e7ca822676a1d44bd7419395e4e96e43489eb1167ff9efed170",
1328 	"5643c4252210fd45a2a67cd0a97d37e80d1b4a3c2fc86b0c3a3b4d3c1723b9ec",
1329 
1330 	"f32d2e50e8d5df7ce59a9d60255a19f48bffe790e3b1e0ba6b4bc53d920b257bff8d8003d5faac66367d784706f690b2f1f3a0afafdcbc16866d00a41169734f418d31d7a1c3ca9ede99e5b986f1294710fa5d011d5fcd13fdbef02b755b49cfbf168bf3d39a00cbe5d82bde2fb4ad5cf0fd65b1b5a3db5ad724dff745486da2830ed480f3e61795542094dd88a5e3989ae501e5ff10ae921c89133309",
1331 	"1ead94e30440b647d4cb4d7b3ed6b87ac07e8d72b3e5f28352bf14a78232ff1d",
1332 
1333 	"8bbc18eab6bcd9a3d6b90ec56d3be949e02a8866d69c7808e1ec787e600c7f72a41c001f513b6cbe079df94142dda2447f956e41a12df60392f0215d2d65331b5cdc06397d4796530b4bc45d7a975394627537b4e09e0f6c3a53f00fc1a9648cfc25b2a00288604a28ecf780dc100620d1f169295d9acb2b1f3c6afce4811aadcb1e8dbca8a8d18ba7a81a1132f1c2d014318e07dec7332889d4198c5e95",
1334 	"429f15c653f92734bfe4d1749e84da8c28861b70c5158bf59809ece810221774",
1335 
1336 	"a3d0eecfeff88df1cdd1e86df7bd2ec3ba60bcedfc9c42ef7dc021b05dfc1808df19201a6c6694e4dbf69514ef08ad1d21c7b28ba034ee9397607cefaedef5e9d3784db53a21f703a22b50d5dbba3a8e8579074c1a8b9a782fc5c89cf61a047408563c476110fe77acd9df58c2ba1d3e6dde83da718b8dc6cd57cd5e3e988dd2051cb679ea1af16881690b44acf09e54615eeedaad1b11a4f97e53de8d40d8",
1337 	"afccfd3b18f6d292d2e125884b721b3e3099c4dac8aef05ab0fba26799043d02",
1338 
1339 	"2ecb657808b29574b020545fb7f94071406047ef4de20c003cf08cbd91930187f55b079d7f99fded33cdae2bc8623021af990d4650c4a19197b4c38faf74a8b40d3803efb1907180a8e1150ed6167ff4f293d3ddd26a2790e9d22c0d0ed511d87e48a4952500bbd51943d230687df5941334e1dc5a3e66a43a320f5c351c059c517531b76352a1938ddb2db806ff5aa619667e6c71a7257693bcb4a7acb34ca8",
1340 	"c994acd17e08e8efd3ba83915245781e3727bac445672c44e6335e4f7deaf90b",
1341 
1342 	"e649888592d192c5fb59f10560f5f5a7b0ac21739c35dd80f1fe6b5825731c572f7cc4549c476b84e049459aea7fe533fbfaad72b79a89e77d1addb6f44cbbf5e6a65a5552fec305bc92ced3c84b4d95074387c71184e875d413f65c2b2d874cb3d031d0da7d0311383d72f823e296937d8f97bad17a62f29ef1a091f39be8233c01330d5c4c9170fc501b5022ca29f605e6c59220055f2585bcc29e742046432c",
1343 	"88a9aa4b4ffac981d1ef0e8b233cb309695f89211cd4e94d50760909e3cb919c",
1344 
1345 	"816b0bffd99b0f7821e6093ef152723a9cb45f7a082ef8d6bdf72cd33b5aa3c79102f43e2b74199decdd20057d0e227ae4c57945582e2e9653a9b16eeacecdbc5aaedac7e35c35cbd9adede7f83bbf36f8b0453d61416a85a17821885b3757d203fa2560a85c4b4c10dddaac0ae230b700fd2929cc6f94e9ccebe4e9399d284eb46b3ed2227b4366baf54d1b5c0a5d4225358fd240c0940bff8b62592a092a7b978b",
1346 	"c593f3d663c48426ce892f22584d49a3335cce3456194b7b5ee4814fab477fcb",
1347 
1348 	"a10918880cf31a8551af80bcb0d1a6ed71ca42c71e533967ef0fb71c866b7e6ddcca7e5d7cdfa6edef59fbe377c6e7ca00b1d33a530ef8598dd971a2cff995e5386a858f109b012c4615802a1d5e7fe0221d19cf617ed827d8d8cb8d2c8ed81b9b3354a832f1d14a402b371a0a611737c0543b0eb06b82d8ba56eb6304f1ef16ef6b143049a7bf50c4e2493aa69756d8c39f627fa89d9d741a99f9afbfeb81de1a5bec",
1349 	"d557aed03eb7c4c4c8091efdee992c9ad7f8d2e79e9296b40a08acae37868d48",
1350 
1351 	"de7ba70e45c879ad6c90ada6fda071c2b692840f7893eeca9b69ef8285b4357b7b735151b6cb6cddba04365ce3d520ce41e1cb9da681c07ffcc4619ddcb420f55ddbeefd2a06f689d8498cee7643606865a3f8b96aeb5d1301751438f4b34fe02dba655bc80280776d6795a4dd749a56cae1f3abec5a2d4e5183ee9bf5382c0492199eb3b946707022673bc641f0346119a3a4bb555698f895f6d90e06cc1e2835ff814d",
1352 	"06cfdd9cd7ce04abcdbf3121a9ba379505dbbb52f148c9d28ad9b50facf573ab",
1353 
1354 	"6e9a5752ff8ae7c385b088e651ef2543daae1624562052f787c9e0f5d83e8f01a82ce7d3e69b5f55de74d14d52412a3dcd356687346cbcd59e7315b8650bc3907e2a70ab054354b11cc7ac3ff6ec67d22fad22e75f125660eeb1d02a2a75621d969ed92385092e9de8b20102657742c9a91f328afe9a8a60208af9914c03d4719b8f0a838e7656e2ea3cb8dfc66a25ece2927eb93a8dbf9cdb077936f63e82543306ea1347",
1355 	"cb1e8082bb94629f162f20d815bcf3b212007bc049951a29ddb18a1f556bf3d1",
1356 
1357 	"b05007119789d382fa750d2087dde79b37a5459c24522b649ac976b07059cbdf99fcce56f6da94246e0f5ae241ae77dd99068f7863240acb5c99c4906f7d06403eb3b679ff6fcaa389f602d3aea5d7efcc35af149f3d523459f8a104f5498615c8fc2740594f5f4872b16ebb77c9ef19f7ba0b3881a6ede7b97175d2aac731a65e608975ac82395b52c805624423a7a3431e0daeb066c12ca389a9c338fef03a296644dea211",
1358 	"9021fefc1a020cd0c579e3dd67a66dacfabedde9cd36ddfc7d5c5c7c47be2721",
1359 
1360 	"a19909e14ddf9b3c470df6bb604604ad767c38c83b2b747937472b791173c3a10a733dffcae417295f2a71d183ab709a1d3be02a0bd61d811f95338967db44eeb2cf2a2f4f105ef618a418a5b031b831086f653328ddf43c2cb30b698c188638a196199a65cb374a7b61335c6f40a6193e01100a19a6c2536689fb4308935128e0ae5268937d6ccd8e4a0a21484000fbc7da29d8669b4e6dd5004a3c61b36c6676011dc0628ec3",
1361 	"7dcbf4dd9c27fd8340f51c553898502cec53d3bc83198352fc58465625c076a2",
1362 
1363 	"b0dffe4a5f64f612359397e4e070a8fa01296c1d8cee25177104d76a7c154e4279cb62a99d9d7afa21e84f983041f3df030a115b4b437638cfa3d0fa56e7b66fc76be9e18ff7da8f43db6c5f863efacd2eb39c27a20da6fc867572d29bb96017e0e71a5afe1b1dbbe29575a0ac0ec7aac84c95e85af5be4ae0a14458133252230d687e7cb1b04b65483df2c5685a62601aff85053ba2c509234fcff585fb967c96169bb0725f6d75",
1364 	"8e7023d18902a9184a0191f1c7a2b79030e833800baeeb33e2d0673500245dfa",
1365 
1366 	"dda3625c78f733c7df0b5f4987cd30d7207afa40ca07f3b686c0458aea2f62371a3f98a2f3a1e5a0896f0cb9d40fe82ca65b0132e0fe5d87e621992750483855e3763ae2bf98f0acd9201065acf105962c7b88e3fc277490e0f5d6447563440d209271a544a4fef4b86892d578392c1d9a23b8da8448e1d85d82276ac14a3166b9d96472ea8cb47e0c8dba929eb007cad89bb99fe22a4c674312b21f9cc4a56996943cd1191abc54bf",
1367 	"ad83957a387225aad811b0737f582dbe7eb616187a8ba8e09b00db5d0bee4a7b",
1368 
1369 	"5cd623be5b6bf6d1bcb414c826d0f4ce60793791b6d82dae9f9e9b699e50bba266e2850541882d80b2c9edfa59d504421818ff45740f37853e5b9bc67214af0a5f5fd5c00843cc39cbb8765b4001de99643c7923f738ac5922868f865dd3f1cb90759c597843d9e34daa3754a2fd89bd8c0d2e9106fa95149448ff11273587cb414a603759315f6881c6b94b46700d94d8b2a5f86bfdf99ddcc974cf98e47bf4ba09acc273b463afaf35",
1370 	"f754a71e3439760aec2d763751e160d05d3de0809dd4fd6aeef588da8b86a517",
1371 
1372 	"42c0a452e83840ae858c094c044961d5f2195ddb34a21cd1f5ab575be3803ac99b9872dd617688d515cd6da562e756853947c9ab7e8ef85a019b4f1baff6494b0a6f87d5d602234115fe42ee3667e89b8a98112cf72cfdabf01fcb8ea4314938768b0bc2aea5bafa6e67aface78fc021cc525ae60746d1ceac7ff33a2bf8e398c935252a5127f5090650dd69dd28861ee9becf6017a21ccb1b03f0a9aa15bf74eab5fd9727507b75c701f3",
1373 	"d5980482d666dde4f2c3a99b45e523fd6410be999a96ba8c5df397c950605e70",
1374 
1375 	"fece673103322483b85340e991e478c2c15e2d795a98adb5b697b4cf17a733898aaa4ffd11b1add300c9edb7a818740a33286fd8cf82140b0f7f2bde8d5bce94d58b6d697e5015c99a8df1c051d611b2c8c96a4c48a11eba9c08fe1aba2d4d31a617c75d9439e2cb4d4654ead346d52048ea26bb0c1c522a26db346de54639cac6f668c299919f43e09c1f1f78914abd7b32ac0f641c39c3749fd5be55cd1ac6fed1557ed683d1981c395946",
1376 	"17f4b2f60cb364da5e8a62db58e07eb1c44b888c433adc1e62461879cd271463",
1377 
1378 	"a542b2bdf8e04ec2a004cccd2f89e7bfd17ace1ad285c91360ac20e9913e3976a806000494c28b61b9d7ff36f342ad94d8d281d03e949d91fe8f4127f7b2ee1e550bcb13133a47c7be2400727cece45a4e1f95a3922e1269cc22950ca58bb7cb34b9da957d2fc81b3755982ad36dd238b9c8d33dd53a72c452cbe341a5afdca5ce79f730da8b5886add18f06feafbf57a33700430fa003c919f3f56dff08a5d3aab1e88c33353d30a700adad07",
1379 	"50cf700b5b6c802e20da4c1f9b75bd0a6632678212bd0e2418201f3a10389994",
1380 
1381 	"8fa67f49db80f22bc267a70e5636dfbc8a21c83d9691fe4b9c3051068b3fc9e94430e7fdfb712e4ce086e299ff5a104e65d7ceb685b4c46cda8eeb14cd3b9548d85baed5ec2f412810af3d034cd67a75c541f70829f8663c4d8cea3415621fb0954e5b3b756333a69a0a41b402522517f087ca9b4a06eba23f4fd5d02c5c6e07c132769660b50dadc5c07515ec751a1d2fd2cfd8b0855b85f602344fdbd28a37a52e874e73ccd627dbf9628cd1e8",
1382 	"3379265620eb781d6b59e331cc525e60e8c063e19f96cfabb2fda9aa83cdeba5",
1383 
1384 	"23ae9cd31da25c0187c0247be19e089872742d772f73d0efde5889c97b40d12ddbbec35b8f2b1f9c0b3d947708db3f2726306f4dd6ffabe37736f671bfc551835db0825adc6314e2cb479fe41b92497dc8638dcfbc0e3bf6f0b4c03dd418a892f1ad6138ccf442bc0e04cb2ae36a2f80a0340f63a849891190fc719781e0de44dedde95d2783b1121e9fa3b1280cf81af5cc7e7363579c1da03390e68fc5fc806e67a132b5bb6acd413eace2b120ac",
1385 	"a17a00ac106c0af50c4f449d3cdcc2cdbb9848d2d85a36ff434099162e25606c",
1386 
1387 	"3bfa57a5f9f60203059defd501977628908ee42116e4674dc0a52a32c5bac02aeb60c6714cd9c47c5a61558c21648884ccee85f76b637486f3709a698641c54bf5f5eb5b844f0ea0edae628ca73fb2d567710080e8a96c3fe83857fc738ac7b6639f0d8c28bfa617c56a60fd1b8fbdc36afe9ce3151e161fa5e3a71411fb8e123d48762bc093558aea7f950706bb72f8dc7ca3497a2b3ccf345ad3d9eafde10889d76c61d432e3a165d34ad0ee2d9619",
1388 	"1a2cfebf3483c33a5eba84121737d892cf8bd6c3ba324fd4ae4c2db42872e54f",
1389 
1390 	"e9b9525afd5634cf8d16df4ae7e12e8ae206c6ed6e7d4dd96f6fd75accf7a10cc22b023c7f569e4aec88dd51ca519c0a00c922ee33d3559b98a32d79067e6a9d50c182eed125de864841455be751991ea635c163ddbde6031223e2be0fd9f5253885bab81c4b5a4b4a4a00ae66698d8c7c538c9493c068d786f7dc710f90ac6c257f93e1884e7c609aaaf5927021e01d292a6bc87e6643e09b2505da2d2cf639bdb6f3b33cb8ab8fdf690b512d02fa9956",
1391 	"3ff47b4bf4f908aace95b0468a54b7e6644fe07df69ae327c0ff2e45325b97b9",
1392 
1393 	"13ec10c6b27a6ce6fdd5e2314e8626a28a69f313ec62f29b044cde1aff32e61228c252b9affe6a4ca93593a55932bc10aeb3f85b0c1d6c2c506d6c970e72e1f01c3aeede55cad3b1971111f60e1fcf48b5937c691952b691617f6a058ba73decf83b2b5e2b446ebfce52a24bf5b526f1a7f0c5659b6b96713f68208cfe38c2adc3af5361b9d5051c56de8fcc975d8bb48db41c7818cfd574f312d652f08f38dc857dac0e88e55e70379f20a37b7dc4396ec6",
1394 	"9703a69f279ef15b843b355f86b3f7098a46eafcad625920d93e0e3fb136fc5f",
1395 
1396 	"3d8263a177af8c5beabc76a4388e0816ab1bf1f5856e985791f15688feebe4ac6d480fa64999b339575be66d8e7c7435281b8c4ef990b86a00ac128e3c41b6b9c0e573c60af4c69391d408639d7de6815b38122731a6389d4f0534a587af82175ee3f5c963c8acb1bfaf434e0e9946436df9eb46d4bb0038a7842295873c300f6ecaff76fb1e4fdb0a75fef588d87cc486e67f738bd4f8832fb24526e5f0a8e91920f8967bfd96599aada321b4437049cc8836",
1397 	"e82d636a61c7657029699374a2da3dfabfae366e7708c7e4ba2dacd8b786a36f",
1398 
1399 	"01f793fa05548645f644a64ee1b5ff7fd38eaa233f874cd59f3ddf385e86b5e9f601b9b256f2f901864d61988d11c98593d7335543ab4d85731a3e39078c9e3012d5c6f83f064b5e7089c529a46dd5081efe66c8c49932cac5be88b57e674d689f98423389388446fb1f5969ee7029eebd29cbe489f8038edc5148148cbdca77e375b3cafc2fada07038a5c133c3cf21b881eb125c71c6b801fa03bdf9371b472792a3276094ce5417fb32973a0dcf87572d4db8",
1400 	"98bf0fd777137c94300ab5b1bff7b3f487a03a788e6bb96c715ba6f10ba1922b",
1401 
1402 	"71a986d2f662bf36dcbadbba0657f4e2797b569610e2d82271ee6d813f01f6db922a5a4ca405d9e7cddc9dfbb1129294b8c27845bea337250c2f721887045e50288ad513acd6a6be8dce300a308e2f8e600bd585fbf61dd2ebe45c4158ab18101c0f1eae789ecfc205d8bb6fed9371d65a9e94dd2fa5322ff75452851abfcc2357025ea56e24fbfb1d4266b34ee900768fc3dfd6c2761f4716c97d6a36092192c0abbc81f832d372be535b5dbd578576e6c2dbf61d",
1403 	"27255d504a38296857b8d382dc8ad4f1ca03ef3a8d1983e54bc01ef97b04e581",
1404 
1405 	"69ee06f5f53f74c76674751f8fa80efb42f43e71132ae0fc5ec6d2148c21570191e8baf0b9cd3547a57c103690d10d8ed84804d7b9b5cb9d5b35580a0f642abad5d0e5ca23ae3c32e1cc1355b8c7e5d78c7e64af47c6607dd960ea1d7d28b97c3d8ecdaab84a5131234cc6a68ef25e7d687ea62146c76845e02fd0745cd4cdf0d00bbab9020a3eec72e4714e9abb4029743012573d1fac9c798a513937d22ebd962df61f8854ca0ad67c5b7864885282b77df076b436",
1406 	"600b41954a9398ee66ea0e603c8c80d936fbc8be98c74f44ae13b0aa4b50b8d5",
1407 
1408 	"2a74e9800ce49aac07af3df2e451f245d4ffa5304c318574135eb7f39a064bcc8bf66fc8a4c8e2f5c6a9ac90495f0d28938ab301e9292fb78461aa23e87ad482712b1ed42f172983f4977e45aaba7f43ea8a9e7bcb91cc63f89c34cf06bf2a1404995e6e53d9569fb8011bd9af6b32de0289cd669b7043c19698bebd9bdd33ca6bca985cb81751913a70eb14ff790c41030eaa8a00cf7c1987dcaeb650ddd9eccf46326707d902a1a36c56be43ecf7b414a29caea3b55f",
1409 	"4e549f206099a8b3183fa3b86af220b1b6554ac3d8d52c54d093e68f60597256",
1410 
1411 	"5b2e2f2fd3ecc733a6198d34e5d143c176b60c3cc3dac6deafdf99fbce5cd088d583e8da4f01e7b09226f074f24613be345f691a46fb610b2d5855503ec761659152744db3a1a78f9b1fce7fdf584dbe28a52e04e40c701d3a62a13243b2af4a77e3fb106594afd7a84b52db16cf99ca3ad2808305d39a1dc043a52b45e7623e6f7da4accfa2a690a0f3a112fd739ee9522d891e111a8812a6448bc2ac2c234a616997a8579335c36d5fe6acfe0b052358fd715d70a7e104",
1412 	"24a3de94be98126ce95cfd3140754230b6880c71cfe4ec215c3f451bdc8bb690",
1413 
1414 	"013944b7958b6b3686b14bdb042f2f5b42768edc20fdd6a90894692b15f6e5157b9da9de23da95749524102f1bb150032343d6fbe64537e247162243fea59f95f53e95aff2a38f82775fbf06e7574475e9a2a8b8119aad1ebe3349543e8cef9239c410124c0fe2c6f409604aae4a92185c3a0efbeb26bfc63394e5451ed45d740dd823ef774615aad3caf9e2b9b1c25344b40facba11f5406fe1fefee6a571a33a22d42ebc6fb094de4c94b650b55c9068b7b3b3c783d7f53a",
1415 	"009661924d01ad811d4c598580eb954362b8554c5e9cd13686acbe41ac8c3940",
1416 
1417 	"72c2880163482bbe822cf72ff0e02be7081d271b366fd94c0cf37926925f76a9de44b086e590e7cc915773c314d336187ba9d03b866d1106b769b49fa99a4a9fa3fc74746d085504627a4792c757cde65b2fcaa82f9ff00eb81b7ab723ea1ed6e8723d92a2b65ead1e1dda64b275d897d0377c2ada0d5cab38913435a958da94d62f74a92da4e810ecc994017c344074014a50892fbe3e265f5448e2e2eb662295ba7f81b5dadc76f504dd31ce9debc517efad8cd5ba7fc754eb",
1418 	"77cf32d62a3d0622cd90f7c858ce1ae3bda60f9edc9cf50f7ecc9d7253d8d18d",
1419 
1420 	"c6dad2ff2cba3ed8873955178068b5704cbccf1e8c62eed472d275f726a7670a68ae2d6a763d943b30c616a27aab5a34e254feaf838093e828d8e905b5ca8decc39491fc8b9f8bfa050fe04e5198436f5593789ca8515ecdaeaf2ce905eafb3920b5851d32892cfd4e3d3e83ccd67707eea0c74bc47e56694c7ec609deb0b8d7c739913535a37e2c5377b5a9b40efee6f5a472269eae83a54a6d3dcf08c4ccb000473dac5a9489705be6cf28d1e7e1f2b2c60293008aee6aefa61b",
1421 	"8708b77ac39005607b179857c037f64860540e80ed7c7a4240e09ae62c88f87e",
1422 
1423 	"02553a2117e654ac28d948a6f67a83daf2089a95ff6631ff78131baa755cc36c4ad0ca6a51f5f176ea393a9bbf2b4af54deb12c6a0dfaec75da88dbc0655d34b7ad6fb0ebbb3c1e7f4fe3f94bb865683934d4fe7b53cc20b1016b7e68eab0cf1994e1735de888ba8500ea0b970f16e2acc159a1ec6e435739743e15194c53603af1f640640dd19600653a53368d55c92012b3b935c3fcfa6fc195325a00d192cc5332baa6b1831b81cb3952a2b9be6643a777a70feb5584d477f5489",
1424 	"376b551c1e8f908d7e1979efa436ab69013d2e85c34430dc826179b4f94480ae",
1425 
1426 	"9945c4f0e067b943986b6841b8fd21109e91d2f2549c711a11039abf03d37a6e4b34eba44a98e09c1b38046660c19e39424ab80ab38a805df648ee5c6212a72663322269c1de093325afe205d955ee2acf885146e5417432672ba807d5540c79e729b067cfa1faafbeb84947a91fd98a4d32e7cf712a15406b940feae5026f10e100dec5fb497cbaee3b83545a892701c530c0cddfac2a300a6b6c2a19829992589ff4accd3e57f9be20d65374f99f393e6a2467b82e7da94c9807f2fa",
1427 	"a4ab2e8f96b69097d84596b628e7bb76f460c001043ce5fa6e379fd29d1eabba",
1428 
1429 	"a4d7897eaf5c49979b361c39a67f47e26c2f75e5ffe0645539d4de245138eb8cadaa45aef7fa0c7a732dbbce90c85be2bd4bf6e37dfb4fdebee4d0e0671fc45c3051c6ccb674799bcfda7a431a6e93b3db3e32f30636190a9a2e5620302876e0d4d2f6201353fac4554341df6efb591c6f100f5dc21a2aa176ba592bd7db69e14237bbf2371df6bbb072f9ecb1f714e621c97768d82eea6bf98ebf4a82c005262188ff894a5dd549866f88b00ee82bd99872515d71fac230ccb472c55a60",
1430 	"9510ff5231813a865918badd0011f05915364165492ef17b85929a63e4951589",
1431 
1432 	"22813ee9edc5c2a90d8b3f07b48d9534e60f08312dc296d68fe78719bdb7478d8d037129aa182c4b8ae5bafca1604e76d5251ee43160ba68ddee9c624ebf00f0ba7ff6b1cf75b5cfa4ab323cf04ff13b7a591b23d06ed25f3c04c1baf4c8f7da913cf509c2a5053c4224ce4d0723268cbdf2277672b285c493731ea81799d353fa8497baed70c59a4c99b7b950a39470863a69667ff67c9ec981ddb41ffb3d63dd9d034bb79d9df1a95214083199e4efbd770a7a5f005ef5c877236674b6dd",
1433 	"44f8a8b05fc643566f1f53a93a122f7902d2cab68bb02267c0479339371a7304",
1434 
1435 	"eebfa2629596f61a926c4cd472ecb03eb2ecaf7f7650b12f7d2b8aa755284b7ccb295e46a62dd2a69577f38765ed1ea377bed34972470c5e3538cda310f2fd353334745a66f7557afb969e6c0132fdf4bb55e68951d5e25bc4fc2a9427e574de0d290d263ebc28a0ae11760caf85f63765fa0fc47ac2dc2c14c0c70404c9597f415050339443f2209430a2eed5acb1765df5768457d6a1db0ccbcc7a0e66531eb6f16608d1555c00973b4a9add70d5b88b8e44504fd9da709367627fad840bc5",
1436 	"9949d3ac3c05b4a08b85fa371811fd3f0b50c71950fef50acbb59c450ab1c587",
1437 
1438 	"ddf38f51b732aea3fdf1fe4c756d17961262163d737f407fad17e9724a19959a92425cbb099193ec38fca8edb0614eba4dbfda60b8a6ed102fec547289a22c3b74464a02023ada50647545f6f57959a37a85a4b5a70b2050e66416ad55c33cb50d6820cfaa16caf608c69d0e4a9d7f78211c3ae44b97216659e8f6cdb6640b30e50ea8c90a0bad06ac5678deb9b50962caec6494a930377b11debd77b46de2d382a2a8992902c9aad88d9e0d49a93f88fe5dec6dcbbfacb794b0335558c609c66e",
1439 	"954473b4965a57c4cbb20e199b8730487eb621f5fd694a1eb1667940da0d6728",
1440 
1441 	"184e1b9ccec71f837dca25838db073d51cacc26246fda091a468135d12e67faab69ac9d93e05bd9a687dad01c8db5bddc6751a45e64c2f734c867dd67f1e62626ddadc2baf7df0320f3e4c7e477a2b6f0ca679504b87372bb3a522e173fd8f7945f69ab9ab967ff378f6482293f3a936f82728abff188060e1ae48a778ebd09846d64cacb9b83487ad8bea1433b09ed791e06f7f8a65d2bbdf8a384f1550eb677962392b624bd593b6e77a7daf17d1fddfb995f472d8f5e4b41f3a02d394a98de583",
1442 	"0a7506e1b6cc43acdb4f2ec456e069e6e4b7608deb70dbe7ccb88578658be9da",
1443 
1444 	"c436d19f05550b6979bdc69bfd27ea4cd80c1a60f00a8b093e89178c7f9e8d492c304cf6ad59102bca0e0b23620338c15fc9ecd1e939ae91da16486f72ee1e154d41bfa391e6ba3b6ca9b3c3be39b5e61242ca5cd3d6c96cbd1170af91fdb2160db3522e1bc3b1a349d6e50479920ac5d9bedd8a16a787a3cdc2b6d24392f25555cc2f20b2ba9e6b47ddc96cfbd6df669d874ce21a758d3cf4704362ef7786d90ed67b01bd91299950058885accddbcf44e340ed4807864218653ee7ff7215aa1e1761",
1445 	"206be726fc681367387ff0a15303533058070f9655438ad8142cf39a0523b2ce",
1446 
1447 	"daf7c7526cdb85127df59220fbcb67dc5069ef58dc069a18a2e4ad164178dc0927cb1ae70120b0a975d78c4e1491dc228a95dc401873ec5645e7e6a8d0ffae58e8800be49f87b5f09d6caf4611ebd61bee86bb945325ae884a001b88b6be1a1c87de41503057bc6f5b7ba00fdb217d4de203335a746506371bf8f4bcddfd45df6bad65339bd9efaf18ce0ab1587bf842cfd6ec9c637b1cea1f96184e2b045a28fcb51e96c85574373d2b9335724170821ec58f6108af1929bea430458a1a7f80a2be1580",
1448 	"742389244ad26d7a16d1f2b01e9c83e987a283bbf3aa2907a556746fe8c98c38",
1449 
1450 	"597dadb776945e01c564f17eed4b5c1bbb34eebb13bce37d2d93363efe24b660f3785cc9e557dc2e4ab17a91a83d1f085060acc148508e43897993f66a20fbe65d46d3c4d9cf7e2e97e3952f0195f10ae8c20533753c719f6228d53d69a5e3c5fdafb9b039426d8716c2e961e09af9a8eb24a21b82c9b6192069a51ce3fc96843d7ab696edf9d0c42d151f2e2d95606ac14c2a80563c82392b02ab9abe6e3bab8471747ddc3cd06a46a6de9fd0ce4dd8d202466bdbe00088ebbb8ebfe341fbc2395a986df0",
1451 	"892985bdf2379f8ae138aac016894ee23408955d627cfa699fa5fa1439340a91",
1452 
1453 	"0efc14917a94f5320eb734c2b9e45f659d06c9f5c454deff0e76b30f6ee9e22e56a494a870fcdf138fc5538ce5bacf44761f993ccca4ae4ced8d576a8a10fd2979fe3e8066a641cdc5f746190ae4819e1d0d2886089bcbf6f36be44b5370afa45e523ba0c25bc169969436f1912b1c7b7a189d5edf00da050a5a813b31d09da5ede8b390ede30aeeece64a9ae05749e4758a2149b99d868219a056c18cf972370e07cdd95006c264ae33ab9e6130afdff6a9dbd1fe38747408868c65ccb4d45fa9f9b102528c",
1454 	"73088e0551c89477bcb675245c5c6347b4230390285832c7d723bf668c8061fb",
1455 
1456 	"9ac34ec974d28b18b7bcf6982eac60ebc670b0674e2acd697b49bfeb2fb81159fa5579a1e2a5bb8a5fc6ca46aaa5304a3771b15d804f2bef054fc1ad919e3852befea1c0bb74394f4d408d651412e247107bd32e64a23c9e593857f3a5ae253deea5104d8aa6ce108913881cf55d3c89587860027f8cc81b7eeec9e5f44e9fc190320c71d4a3427519250394d4ed07b9174f9e005b7696117c575fad05e76d86ae8cde5423d25d25076046f4392a0a7e56e8d6517fc66f265c5d617060e258354f9dce1dfe9de6",
1457 	"17cba68f47a0615b3513d28a44feda6ad36b6e6eb1ead7232f4e2a4e1a64bf50",
1458 
1459 	"d00df64c4bb9e2fd16fb6f9ca746d6cf162015ec7326e41a5d51e9b3d0792fed3f17d5bae34f03ec522e229d53304dcef105024ece941edeba410892846b2c7a1039ab82aa9750979a7bc70bf96d093bc3461b6f2d38f801380eccc286b562996cfce06d4a98b245176bc4ae4006f45eb36cc71636185acdfe429c0a7d5fbb927be7dc43685a0f40f185824ed102f57eeafe6d0d943e2d883564e233126f1eac648207ccafe651ce4f5169b35369f3e48f84771aedb2577b04fd0506ecef72305055cacfc4435e38",
1460 	"67302648e0082254d8d342b4eb8070ef9a44e0fc55c3d9a3f20613e4824aff21",
1461 
1462 	"fff5deb2bc7f43bd2db44ceff874e9c3b7c1a2f54cc6889f74186ca2a03d5047006b1b26e0919147379c81887df3403ebe43571fed8279607a2eb81a26d6f8f217dca3f927799ed182017c127069f2eb6f068b0d85979dc4d4867c676f6bedf36cd2def33b3e54a3366ea45478dee612f391a785bd0ede15aba921512103199228d434dbc1e899047a6861183e5b04fb716c11503dee2399261d10a0e5a76317736b0d7b6480573e76791b246ae734ee12203336ac3f539a6e6cb01c625eb3c9741dd199ca0d759753",
1463 	"bf64c9ab7042245fb2d8054edd699086dbe27a1ce904174d28bc0831ed9acf97",
1464 
1465 	"8d8001e2c096f1b88e7c9224a086efd4797fbf74a8033a2d422a2b6b8f6747e4",
1466 	"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",
1467 
1468 	NULL
1469 };
1470 
1471 static void
1472 test_SHAKE_KAT(int security_level, const char *const *kat)
1473 {
1474 	size_t u;
1475 
1476 	for (u = 0; kat[u] != NULL; u += 2) {
1477 		unsigned char msg[250], out[250], ref[250];
1478 		size_t msg_len, out_len, v;
1479 		br_shake_context sc;
1480 
1481 		msg_len = hextobin(msg, kat[u]);
1482 		out_len = hextobin(ref, kat[u + 1]);
1483 		br_shake_init(&sc, security_level);
1484 		br_shake_inject(&sc, msg, msg_len);
1485 		br_shake_flip(&sc);
1486 		br_shake_produce(&sc, out, out_len);
1487 		check_equals("KAT 1", out, ref, out_len);
1488 
1489 		br_shake_init(&sc, security_level);
1490 		for (v = 0; v < msg_len; v ++) {
1491 			br_shake_inject(&sc, msg + v, 1);
1492 		}
1493 		br_shake_flip(&sc);
1494 		br_shake_produce(&sc, out, out_len);
1495 		check_equals("KAT 2", out, ref, out_len);
1496 
1497 		br_shake_init(&sc, security_level);
1498 		br_shake_inject(&sc, msg, msg_len);
1499 		br_shake_flip(&sc);
1500 		for (v = 0; v < out_len; v ++) {
1501 			unsigned char x;
1502 
1503 			br_shake_produce(&sc, &x, 1);
1504 			if (x != ref[v]) {
1505 				fprintf(stderr, "KAT 3 (byte %u)\n",
1506 					(unsigned)v);
1507 				exit(EXIT_FAILURE);
1508 			}
1509 		}
1510 
1511 		printf(".");
1512 		fflush(stdout);
1513 	}
1514 }
1515 
1516 static void
1517 test_SHAKE_MonteCarlo(int security_level,
1518 	size_t minoutlen, size_t maxoutlen, const char *smsg, const char *sref)
1519 {
1520 	unsigned char out[250], ref[250];
1521 	size_t len, rlen, outlen, range;
1522 	int i, j;
1523 
1524 	hextobin(out, smsg);
1525 	outlen = maxoutlen;
1526 	range = maxoutlen - minoutlen + 1;
1527 	for (j = 0; j < 100; j ++) {
1528 		for (i = 1; i < 1001; i ++) {
1529 			br_shake_context sc;
1530 
1531 			len = outlen;
1532 			br_shake_init(&sc, security_level);
1533 			br_shake_inject(&sc, out, 16);
1534 			br_shake_flip(&sc);
1535 			br_shake_produce(&sc, out, len);
1536 			if (len < 16) {
1537 				memset(out + len, 0, 16 - len);
1538 			}
1539 			outlen = minoutlen
1540 				+ (br_dec16be(out + len - 2) % range);
1541 		}
1542 		printf(".");
1543 		fflush(stdout);
1544 	}
1545 	rlen = hextobin(ref, sref);
1546 	if (rlen != len) {
1547 		fprintf(stderr, "MC: bad length (%u vs %u)\n",
1548 			(unsigned)len, (unsigned)rlen);
1549 		exit(EXIT_FAILURE);
1550 	}
1551 	check_equals("KAT MC", out, ref, len);
1552 }
1553 
1554 static void
1555 test_SHAKE(void)
1556 {
1557 	printf("Test SHAKE: ");
1558 	fflush(stdout);
1559 
1560 	test_SHAKE_KAT(128, KAT_SHAKE128);
1561 
1562 	printf(" ");
1563 	fflush(stdout);
1564 
1565 	test_SHAKE_MonteCarlo(128, 16, 140,
1566 		"c8b310cb97efa3855434998fa81c7674",
1567 		"4aa371f0099b04a909f9b1680e8b52a21c6510ea2640137d501ffa114bf84717b1f725d64bae4ae5d87a");
1568 
1569 	printf(" ");
1570 	fflush(stdout);
1571 
1572 	test_SHAKE_KAT(256, KAT_SHAKE256);
1573 
1574 	printf(" ");
1575 	fflush(stdout);
1576 
1577 	test_SHAKE_MonteCarlo(256, 2, 250,
1578 		"48a0321b3653e4e86446d00f6a036efd",
1579 		"d4c8c26ded38cca426d8d1c8f8aedb5c543541333839deca8713cfd8684480fe923f57c3a5c89cb61427c220c7");
1580 
1581 	printf(" done.\n");
1582 	fflush(stdout);
1583 }
1584 
1585 static void
1586 test_HMAC_DRBG(void)
1587 {
1588 	br_hmac_drbg_context ctx;
1589 	unsigned char seed[42], tmp[30];
1590 	unsigned char ref1[30], ref2[30], ref3[30];
1591 	size_t seed_len;
1592 
1593 	printf("Test HMAC_DRBG: ");
1594 	fflush(stdout);
1595 
1596 	seed_len = hextobin(seed,
1597 		"009A4D6792295A7F730FC3F2B49CBC0F62E862272F"
1598 		"01795EDF0D54DB760F156D0DAC04C0322B3A204224");
1599 	hextobin(ref1,
1600 		"9305A46DE7FF8EB107194DEBD3FD48AA"
1601 		"20D5E7656CBE0EA69D2A8D4E7C67");
1602 	hextobin(ref2,
1603 		"C70C78608A3B5BE9289BE90EF6E81A9E"
1604 		"2C1516D5751D2F75F50033E45F73");
1605 	hextobin(ref3,
1606 		"475E80E992140567FCC3A50DAB90FE84"
1607 		"BCD7BB03638E9C4656A06F37F650");
1608 	br_hmac_drbg_init(&ctx, &br_sha256_vtable, seed, seed_len);
1609 	br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1610 	check_equals("KAT HMAC_DRBG 1", tmp, ref1, sizeof tmp);
1611 	br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1612 	check_equals("KAT HMAC_DRBG 2", tmp, ref2, sizeof tmp);
1613 	br_hmac_drbg_generate(&ctx, tmp, sizeof tmp);
1614 	check_equals("KAT HMAC_DRBG 3", tmp, ref3, sizeof tmp);
1615 
1616 	memset(&ctx, 0, sizeof ctx);
1617 	br_hmac_drbg_vtable.init(&ctx.vtable,
1618 		&br_sha256_vtable, seed, seed_len);
1619 	ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1620 	check_equals("KAT HMAC_DRBG 4", tmp, ref1, sizeof tmp);
1621 	ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1622 	check_equals("KAT HMAC_DRBG 5", tmp, ref2, sizeof tmp);
1623 	ctx.vtable->generate(&ctx.vtable, tmp, sizeof tmp);
1624 	check_equals("KAT HMAC_DRBG 6", tmp, ref3, sizeof tmp);
1625 
1626 	printf("done.\n");
1627 	fflush(stdout);
1628 }
1629 
1630 static void
1631 test_AESCTR_DRBG(void)
1632 {
1633 	br_aesctr_drbg_context ctx;
1634 	const br_block_ctr_class *ictr;
1635 	unsigned char tmp1[64], tmp2[64];
1636 
1637 	printf("Test AESCTR_DRBG: ");
1638 	fflush(stdout);
1639 
1640 	ictr = br_aes_x86ni_ctr_get_vtable();
1641 	if (ictr == NULL) {
1642 		ictr = br_aes_pwr8_ctr_get_vtable();
1643 		if (ictr == NULL) {
1644 #if BR_64
1645 			ictr = &br_aes_ct64_ctr_vtable;
1646 #else
1647 			ictr = &br_aes_ct_ctr_vtable;
1648 #endif
1649 		}
1650 	}
1651 	br_aesctr_drbg_init(&ctx, ictr, NULL, 0);
1652 	ctx.vtable->generate(&ctx.vtable, tmp1, sizeof tmp1);
1653 	ctx.vtable->update(&ctx.vtable, "new seed", 8);
1654 	ctx.vtable->generate(&ctx.vtable, tmp2, sizeof tmp2);
1655 
1656 	if (memcmp(tmp1, tmp2, sizeof tmp1) == 0) {
1657 		fprintf(stderr, "AESCTR_DRBG failure\n");
1658 		exit(EXIT_FAILURE);
1659 	}
1660 
1661 	printf("done.\n");
1662 	fflush(stdout);
1663 }
1664 
1665 static void
1666 do_KAT_PRF(br_tls_prf_impl prf,
1667 	const char *ssecret, const char *label, const char *sseed,
1668 	const char *sref)
1669 {
1670 	unsigned char secret[100], seed[100], ref[500], out[500];
1671 	size_t secret_len, seed_len, ref_len;
1672 	br_tls_prf_seed_chunk chunks[2];
1673 
1674 	secret_len = hextobin(secret, ssecret);
1675 	seed_len = hextobin(seed, sseed);
1676 	ref_len = hextobin(ref, sref);
1677 
1678 	chunks[0].data = seed;
1679 	chunks[0].len = seed_len;
1680 	prf(out, ref_len, secret, secret_len, label, 1, chunks);
1681 	check_equals("TLS PRF KAT 1", out, ref, ref_len);
1682 
1683 	chunks[0].data = seed;
1684 	chunks[0].len = seed_len;
1685 	chunks[1].data = NULL;
1686 	chunks[1].len = 0;
1687 	prf(out, ref_len, secret, secret_len, label, 2, chunks);
1688 	check_equals("TLS PRF KAT 2", out, ref, ref_len);
1689 
1690 	chunks[0].data = NULL;
1691 	chunks[0].len = 0;
1692 	chunks[1].data = seed;
1693 	chunks[1].len = seed_len;
1694 	prf(out, ref_len, secret, secret_len, label, 2, chunks);
1695 	check_equals("TLS PRF KAT 3", out, ref, ref_len);
1696 
1697 	chunks[0].data = seed;
1698 	chunks[0].len = seed_len >> 1;
1699 	chunks[1].data = seed + chunks[0].len;
1700 	chunks[1].len = seed_len - chunks[0].len;
1701 	prf(out, ref_len, secret, secret_len, label, 2, chunks);
1702 	check_equals("TLS PRF KAT 4", out, ref, ref_len);
1703 }
1704 
1705 static void
1706 test_PRF(void)
1707 {
1708 	printf("Test TLS PRF: ");
1709 	fflush(stdout);
1710 
1711 	/*
1712 	 * Test vector taken from an email that was on:
1713 	 * http://www.imc.org/ietf-tls/mail-archive/msg01589.html
1714 	 * but no longer exists there; a version archived in 2008
1715 	 * can be found on http://www.archive.org/
1716 	 */
1717 	do_KAT_PRF(&br_tls10_prf,
1718 		"abababababababababababababababababababababababababababababababababababababababababababababababab",
1719 		"PRF Testvector",
1720 		"cdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcdcd",
1721 		"d3d4d1e349b5d515044666d51de32bab258cb521b6b053463e354832fd976754443bcf9a296519bc289abcbc1187e4ebd31e602353776c408aafb74cbc85eff69255f9788faa184cbb957a9819d84a5d7eb006eb459d3ae8de9810454b8b2d8f1afbc655a8c9a013");
1722 
1723 	/*
1724 	 * Test vectors are taken from:
1725 	 * https://www.ietf.org/mail-archive/web/tls/current/msg03416.html
1726 	 */
1727 	do_KAT_PRF(&br_tls12_sha256_prf,
1728 		"9bbe436ba940f017b17652849a71db35",
1729 		"test label",
1730 		"a0ba9f936cda311827a6f796ffd5198c",
1731 		"e3f229ba727be17b8d122620557cd453c2aab21d07c3d495329b52d4e61edb5a6b301791e90d35c9c9a46b4e14baf9af0fa022f7077def17abfd3797c0564bab4fbc91666e9def9b97fce34f796789baa48082d122ee42c5a72e5a5110fff70187347b66");
1732 	do_KAT_PRF(&br_tls12_sha384_prf,
1733 		"b80b733d6ceefcdc71566ea48e5567df",
1734 		"test label",
1735 		"cd665cf6a8447dd6ff8b27555edb7465",
1736 		"7b0c18e9ced410ed1804f2cfa34a336a1c14dffb4900bb5fd7942107e81c83cde9ca0faa60be9fe34f82b1233c9146a0e534cb400fed2700884f9dc236f80edd8bfa961144c9e8d792eca722a7b32fc3d416d473ebc2c5fd4abfdad05d9184259b5bf8cd4d90fa0d31e2dec479e4f1a26066f2eea9a69236a3e52655c9e9aee691c8f3a26854308d5eaa3be85e0990703d73e56f");
1737 
1738 	printf("done.\n");
1739 	fflush(stdout);
1740 }
1741 
1742 /*
1743  * AES known-answer tests. Order: key, plaintext, ciphertext.
1744  */
1745 static const char *const KAT_AES[] = {
1746 	/*
1747 	 * From FIPS-197.
1748 	 */
1749 	"000102030405060708090a0b0c0d0e0f",
1750 	"00112233445566778899aabbccddeeff",
1751 	"69c4e0d86a7b0430d8cdb78070b4c55a",
1752 
1753 	"000102030405060708090a0b0c0d0e0f1011121314151617",
1754 	"00112233445566778899aabbccddeeff",
1755 	"dda97ca4864cdfe06eaf70a0ec0d7191",
1756 
1757 	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
1758 	"00112233445566778899aabbccddeeff",
1759 	"8ea2b7ca516745bfeafc49904b496089",
1760 
1761 	/*
1762 	 * From NIST validation suite (ECBVarTxt128.rsp).
1763 	 */
1764 	"00000000000000000000000000000000",
1765 	"80000000000000000000000000000000",
1766 	"3ad78e726c1ec02b7ebfe92b23d9ec34",
1767 
1768 	"00000000000000000000000000000000",
1769 	"c0000000000000000000000000000000",
1770 	"aae5939c8efdf2f04e60b9fe7117b2c2",
1771 
1772 	"00000000000000000000000000000000",
1773 	"e0000000000000000000000000000000",
1774 	"f031d4d74f5dcbf39daaf8ca3af6e527",
1775 
1776 	"00000000000000000000000000000000",
1777 	"f0000000000000000000000000000000",
1778 	"96d9fd5cc4f07441727df0f33e401a36",
1779 
1780 	"00000000000000000000000000000000",
1781 	"f8000000000000000000000000000000",
1782 	"30ccdb044646d7e1f3ccea3dca08b8c0",
1783 
1784 	"00000000000000000000000000000000",
1785 	"fc000000000000000000000000000000",
1786 	"16ae4ce5042a67ee8e177b7c587ecc82",
1787 
1788 	"00000000000000000000000000000000",
1789 	"fe000000000000000000000000000000",
1790 	"b6da0bb11a23855d9c5cb1b4c6412e0a",
1791 
1792 	"00000000000000000000000000000000",
1793 	"ff000000000000000000000000000000",
1794 	"db4f1aa530967d6732ce4715eb0ee24b",
1795 
1796 	"00000000000000000000000000000000",
1797 	"ff800000000000000000000000000000",
1798 	"a81738252621dd180a34f3455b4baa2f",
1799 
1800 	"00000000000000000000000000000000",
1801 	"ffc00000000000000000000000000000",
1802 	"77e2b508db7fd89234caf7939ee5621a",
1803 
1804 	"00000000000000000000000000000000",
1805 	"ffe00000000000000000000000000000",
1806 	"b8499c251f8442ee13f0933b688fcd19",
1807 
1808 	"00000000000000000000000000000000",
1809 	"fff00000000000000000000000000000",
1810 	"965135f8a81f25c9d630b17502f68e53",
1811 
1812 	"00000000000000000000000000000000",
1813 	"fff80000000000000000000000000000",
1814 	"8b87145a01ad1c6cede995ea3670454f",
1815 
1816 	"00000000000000000000000000000000",
1817 	"fffc0000000000000000000000000000",
1818 	"8eae3b10a0c8ca6d1d3b0fa61e56b0b2",
1819 
1820 	"00000000000000000000000000000000",
1821 	"fffe0000000000000000000000000000",
1822 	"64b4d629810fda6bafdf08f3b0d8d2c5",
1823 
1824 	"00000000000000000000000000000000",
1825 	"ffff0000000000000000000000000000",
1826 	"d7e5dbd3324595f8fdc7d7c571da6c2a",
1827 
1828 	"00000000000000000000000000000000",
1829 	"ffff8000000000000000000000000000",
1830 	"f3f72375264e167fca9de2c1527d9606",
1831 
1832 	"00000000000000000000000000000000",
1833 	"ffffc000000000000000000000000000",
1834 	"8ee79dd4f401ff9b7ea945d86666c13b",
1835 
1836 	"00000000000000000000000000000000",
1837 	"ffffe000000000000000000000000000",
1838 	"dd35cea2799940b40db3f819cb94c08b",
1839 
1840 	"00000000000000000000000000000000",
1841 	"fffff000000000000000000000000000",
1842 	"6941cb6b3e08c2b7afa581ebdd607b87",
1843 
1844 	"00000000000000000000000000000000",
1845 	"fffff800000000000000000000000000",
1846 	"2c20f439f6bb097b29b8bd6d99aad799",
1847 
1848 	"00000000000000000000000000000000",
1849 	"fffffc00000000000000000000000000",
1850 	"625d01f058e565f77ae86378bd2c49b3",
1851 
1852 	"00000000000000000000000000000000",
1853 	"fffffe00000000000000000000000000",
1854 	"c0b5fd98190ef45fbb4301438d095950",
1855 
1856 	"00000000000000000000000000000000",
1857 	"ffffff00000000000000000000000000",
1858 	"13001ff5d99806efd25da34f56be854b",
1859 
1860 	"00000000000000000000000000000000",
1861 	"ffffff80000000000000000000000000",
1862 	"3b594c60f5c8277a5113677f94208d82",
1863 
1864 	"00000000000000000000000000000000",
1865 	"ffffffc0000000000000000000000000",
1866 	"e9c0fc1818e4aa46bd2e39d638f89e05",
1867 
1868 	"00000000000000000000000000000000",
1869 	"ffffffe0000000000000000000000000",
1870 	"f8023ee9c3fdc45a019b4e985c7e1a54",
1871 
1872 	"00000000000000000000000000000000",
1873 	"fffffff0000000000000000000000000",
1874 	"35f40182ab4662f3023baec1ee796b57",
1875 
1876 	"00000000000000000000000000000000",
1877 	"fffffff8000000000000000000000000",
1878 	"3aebbad7303649b4194a6945c6cc3694",
1879 
1880 	"00000000000000000000000000000000",
1881 	"fffffffc000000000000000000000000",
1882 	"a2124bea53ec2834279bed7f7eb0f938",
1883 
1884 	"00000000000000000000000000000000",
1885 	"fffffffe000000000000000000000000",
1886 	"b9fb4399fa4facc7309e14ec98360b0a",
1887 
1888 	"00000000000000000000000000000000",
1889 	"ffffffff000000000000000000000000",
1890 	"c26277437420c5d634f715aea81a9132",
1891 
1892 	"00000000000000000000000000000000",
1893 	"ffffffff800000000000000000000000",
1894 	"171a0e1b2dd424f0e089af2c4c10f32f",
1895 
1896 	"00000000000000000000000000000000",
1897 	"ffffffffc00000000000000000000000",
1898 	"7cadbe402d1b208fe735edce00aee7ce",
1899 
1900 	"00000000000000000000000000000000",
1901 	"ffffffffe00000000000000000000000",
1902 	"43b02ff929a1485af6f5c6d6558baa0f",
1903 
1904 	"00000000000000000000000000000000",
1905 	"fffffffff00000000000000000000000",
1906 	"092faacc9bf43508bf8fa8613ca75dea",
1907 
1908 	"00000000000000000000000000000000",
1909 	"fffffffff80000000000000000000000",
1910 	"cb2bf8280f3f9742c7ed513fe802629c",
1911 
1912 	"00000000000000000000000000000000",
1913 	"fffffffffc0000000000000000000000",
1914 	"215a41ee442fa992a6e323986ded3f68",
1915 
1916 	"00000000000000000000000000000000",
1917 	"fffffffffe0000000000000000000000",
1918 	"f21e99cf4f0f77cea836e11a2fe75fb1",
1919 
1920 	"00000000000000000000000000000000",
1921 	"ffffffffff0000000000000000000000",
1922 	"95e3a0ca9079e646331df8b4e70d2cd6",
1923 
1924 	"00000000000000000000000000000000",
1925 	"ffffffffff8000000000000000000000",
1926 	"4afe7f120ce7613f74fc12a01a828073",
1927 
1928 	"00000000000000000000000000000000",
1929 	"ffffffffffc000000000000000000000",
1930 	"827f000e75e2c8b9d479beed913fe678",
1931 
1932 	"00000000000000000000000000000000",
1933 	"ffffffffffe000000000000000000000",
1934 	"35830c8e7aaefe2d30310ef381cbf691",
1935 
1936 	"00000000000000000000000000000000",
1937 	"fffffffffff000000000000000000000",
1938 	"191aa0f2c8570144f38657ea4085ebe5",
1939 
1940 	"00000000000000000000000000000000",
1941 	"fffffffffff800000000000000000000",
1942 	"85062c2c909f15d9269b6c18ce99c4f0",
1943 
1944 	"00000000000000000000000000000000",
1945 	"fffffffffffc00000000000000000000",
1946 	"678034dc9e41b5a560ed239eeab1bc78",
1947 
1948 	"00000000000000000000000000000000",
1949 	"fffffffffffe00000000000000000000",
1950 	"c2f93a4ce5ab6d5d56f1b93cf19911c1",
1951 
1952 	"00000000000000000000000000000000",
1953 	"ffffffffffff00000000000000000000",
1954 	"1c3112bcb0c1dcc749d799743691bf82",
1955 
1956 	"00000000000000000000000000000000",
1957 	"ffffffffffff80000000000000000000",
1958 	"00c55bd75c7f9c881989d3ec1911c0d4",
1959 
1960 	"00000000000000000000000000000000",
1961 	"ffffffffffffc0000000000000000000",
1962 	"ea2e6b5ef182b7dff3629abd6a12045f",
1963 
1964 	"00000000000000000000000000000000",
1965 	"ffffffffffffe0000000000000000000",
1966 	"22322327e01780b17397f24087f8cc6f",
1967 
1968 	"00000000000000000000000000000000",
1969 	"fffffffffffff0000000000000000000",
1970 	"c9cacb5cd11692c373b2411768149ee7",
1971 
1972 	"00000000000000000000000000000000",
1973 	"fffffffffffff8000000000000000000",
1974 	"a18e3dbbca577860dab6b80da3139256",
1975 
1976 	"00000000000000000000000000000000",
1977 	"fffffffffffffc000000000000000000",
1978 	"79b61c37bf328ecca8d743265a3d425c",
1979 
1980 	"00000000000000000000000000000000",
1981 	"fffffffffffffe000000000000000000",
1982 	"d2d99c6bcc1f06fda8e27e8ae3f1ccc7",
1983 
1984 	"00000000000000000000000000000000",
1985 	"ffffffffffffff000000000000000000",
1986 	"1bfd4b91c701fd6b61b7f997829d663b",
1987 
1988 	"00000000000000000000000000000000",
1989 	"ffffffffffffff800000000000000000",
1990 	"11005d52f25f16bdc9545a876a63490a",
1991 
1992 	"00000000000000000000000000000000",
1993 	"ffffffffffffffc00000000000000000",
1994 	"3a4d354f02bb5a5e47d39666867f246a",
1995 
1996 	"00000000000000000000000000000000",
1997 	"ffffffffffffffe00000000000000000",
1998 	"d451b8d6e1e1a0ebb155fbbf6e7b7dc3",
1999 
2000 	"00000000000000000000000000000000",
2001 	"fffffffffffffff00000000000000000",
2002 	"6898d4f42fa7ba6a10ac05e87b9f2080",
2003 
2004 	"00000000000000000000000000000000",
2005 	"fffffffffffffff80000000000000000",
2006 	"b611295e739ca7d9b50f8e4c0e754a3f",
2007 
2008 	"00000000000000000000000000000000",
2009 	"fffffffffffffffc0000000000000000",
2010 	"7d33fc7d8abe3ca1936759f8f5deaf20",
2011 
2012 	"00000000000000000000000000000000",
2013 	"fffffffffffffffe0000000000000000",
2014 	"3b5e0f566dc96c298f0c12637539b25c",
2015 
2016 	"00000000000000000000000000000000",
2017 	"ffffffffffffffff0000000000000000",
2018 	"f807c3e7985fe0f5a50e2cdb25c5109e",
2019 
2020 	"00000000000000000000000000000000",
2021 	"ffffffffffffffff8000000000000000",
2022 	"41f992a856fb278b389a62f5d274d7e9",
2023 
2024 	"00000000000000000000000000000000",
2025 	"ffffffffffffffffc000000000000000",
2026 	"10d3ed7a6fe15ab4d91acbc7d0767ab1",
2027 
2028 	"00000000000000000000000000000000",
2029 	"ffffffffffffffffe000000000000000",
2030 	"21feecd45b2e675973ac33bf0c5424fc",
2031 
2032 	"00000000000000000000000000000000",
2033 	"fffffffffffffffff000000000000000",
2034 	"1480cb3955ba62d09eea668f7c708817",
2035 
2036 	"00000000000000000000000000000000",
2037 	"fffffffffffffffff800000000000000",
2038 	"66404033d6b72b609354d5496e7eb511",
2039 
2040 	"00000000000000000000000000000000",
2041 	"fffffffffffffffffc00000000000000",
2042 	"1c317a220a7d700da2b1e075b00266e1",
2043 
2044 	"00000000000000000000000000000000",
2045 	"fffffffffffffffffe00000000000000",
2046 	"ab3b89542233f1271bf8fd0c0f403545",
2047 
2048 	"00000000000000000000000000000000",
2049 	"ffffffffffffffffff00000000000000",
2050 	"d93eae966fac46dca927d6b114fa3f9e",
2051 
2052 	"00000000000000000000000000000000",
2053 	"ffffffffffffffffff80000000000000",
2054 	"1bdec521316503d9d5ee65df3ea94ddf",
2055 
2056 	"00000000000000000000000000000000",
2057 	"ffffffffffffffffffc0000000000000",
2058 	"eef456431dea8b4acf83bdae3717f75f",
2059 
2060 	"00000000000000000000000000000000",
2061 	"ffffffffffffffffffe0000000000000",
2062 	"06f2519a2fafaa596bfef5cfa15c21b9",
2063 
2064 	"00000000000000000000000000000000",
2065 	"fffffffffffffffffff0000000000000",
2066 	"251a7eac7e2fe809e4aa8d0d7012531a",
2067 
2068 	"00000000000000000000000000000000",
2069 	"fffffffffffffffffff8000000000000",
2070 	"3bffc16e4c49b268a20f8d96a60b4058",
2071 
2072 	"00000000000000000000000000000000",
2073 	"fffffffffffffffffffc000000000000",
2074 	"e886f9281999c5bb3b3e8862e2f7c988",
2075 
2076 	"00000000000000000000000000000000",
2077 	"fffffffffffffffffffe000000000000",
2078 	"563bf90d61beef39f48dd625fcef1361",
2079 
2080 	"00000000000000000000000000000000",
2081 	"ffffffffffffffffffff000000000000",
2082 	"4d37c850644563c69fd0acd9a049325b",
2083 
2084 	"00000000000000000000000000000000",
2085 	"ffffffffffffffffffff800000000000",
2086 	"b87c921b91829ef3b13ca541ee1130a6",
2087 
2088 	"00000000000000000000000000000000",
2089 	"ffffffffffffffffffffc00000000000",
2090 	"2e65eb6b6ea383e109accce8326b0393",
2091 
2092 	"00000000000000000000000000000000",
2093 	"ffffffffffffffffffffe00000000000",
2094 	"9ca547f7439edc3e255c0f4d49aa8990",
2095 
2096 	"00000000000000000000000000000000",
2097 	"fffffffffffffffffffff00000000000",
2098 	"a5e652614c9300f37816b1f9fd0c87f9",
2099 
2100 	"00000000000000000000000000000000",
2101 	"fffffffffffffffffffff80000000000",
2102 	"14954f0b4697776f44494fe458d814ed",
2103 
2104 	"00000000000000000000000000000000",
2105 	"fffffffffffffffffffffc0000000000",
2106 	"7c8d9ab6c2761723fe42f8bb506cbcf7",
2107 
2108 	"00000000000000000000000000000000",
2109 	"fffffffffffffffffffffe0000000000",
2110 	"db7e1932679fdd99742aab04aa0d5a80",
2111 
2112 	"00000000000000000000000000000000",
2113 	"ffffffffffffffffffffff0000000000",
2114 	"4c6a1c83e568cd10f27c2d73ded19c28",
2115 
2116 	"00000000000000000000000000000000",
2117 	"ffffffffffffffffffffff8000000000",
2118 	"90ecbe6177e674c98de412413f7ac915",
2119 
2120 	"00000000000000000000000000000000",
2121 	"ffffffffffffffffffffffc000000000",
2122 	"90684a2ac55fe1ec2b8ebd5622520b73",
2123 
2124 	"00000000000000000000000000000000",
2125 	"ffffffffffffffffffffffe000000000",
2126 	"7472f9a7988607ca79707795991035e6",
2127 
2128 	"00000000000000000000000000000000",
2129 	"fffffffffffffffffffffff000000000",
2130 	"56aff089878bf3352f8df172a3ae47d8",
2131 
2132 	"00000000000000000000000000000000",
2133 	"fffffffffffffffffffffff800000000",
2134 	"65c0526cbe40161b8019a2a3171abd23",
2135 
2136 	"00000000000000000000000000000000",
2137 	"fffffffffffffffffffffffc00000000",
2138 	"377be0be33b4e3e310b4aabda173f84f",
2139 
2140 	"00000000000000000000000000000000",
2141 	"fffffffffffffffffffffffe00000000",
2142 	"9402e9aa6f69de6504da8d20c4fcaa2f",
2143 
2144 	"00000000000000000000000000000000",
2145 	"ffffffffffffffffffffffff00000000",
2146 	"123c1f4af313ad8c2ce648b2e71fb6e1",
2147 
2148 	"00000000000000000000000000000000",
2149 	"ffffffffffffffffffffffff80000000",
2150 	"1ffc626d30203dcdb0019fb80f726cf4",
2151 
2152 	"00000000000000000000000000000000",
2153 	"ffffffffffffffffffffffffc0000000",
2154 	"76da1fbe3a50728c50fd2e621b5ad885",
2155 
2156 	"00000000000000000000000000000000",
2157 	"ffffffffffffffffffffffffe0000000",
2158 	"082eb8be35f442fb52668e16a591d1d6",
2159 
2160 	"00000000000000000000000000000000",
2161 	"fffffffffffffffffffffffff0000000",
2162 	"e656f9ecf5fe27ec3e4a73d00c282fb3",
2163 
2164 	"00000000000000000000000000000000",
2165 	"fffffffffffffffffffffffff8000000",
2166 	"2ca8209d63274cd9a29bb74bcd77683a",
2167 
2168 	"00000000000000000000000000000000",
2169 	"fffffffffffffffffffffffffc000000",
2170 	"79bf5dce14bb7dd73a8e3611de7ce026",
2171 
2172 	"00000000000000000000000000000000",
2173 	"fffffffffffffffffffffffffe000000",
2174 	"3c849939a5d29399f344c4a0eca8a576",
2175 
2176 	"00000000000000000000000000000000",
2177 	"ffffffffffffffffffffffffff000000",
2178 	"ed3c0a94d59bece98835da7aa4f07ca2",
2179 
2180 	"00000000000000000000000000000000",
2181 	"ffffffffffffffffffffffffff800000",
2182 	"63919ed4ce10196438b6ad09d99cd795",
2183 
2184 	"00000000000000000000000000000000",
2185 	"ffffffffffffffffffffffffffc00000",
2186 	"7678f3a833f19fea95f3c6029e2bc610",
2187 
2188 	"00000000000000000000000000000000",
2189 	"ffffffffffffffffffffffffffe00000",
2190 	"3aa426831067d36b92be7c5f81c13c56",
2191 
2192 	"00000000000000000000000000000000",
2193 	"fffffffffffffffffffffffffff00000",
2194 	"9272e2d2cdd11050998c845077a30ea0",
2195 
2196 	"00000000000000000000000000000000",
2197 	"fffffffffffffffffffffffffff80000",
2198 	"088c4b53f5ec0ff814c19adae7f6246c",
2199 
2200 	"00000000000000000000000000000000",
2201 	"fffffffffffffffffffffffffffc0000",
2202 	"4010a5e401fdf0a0354ddbcc0d012b17",
2203 
2204 	"00000000000000000000000000000000",
2205 	"fffffffffffffffffffffffffffe0000",
2206 	"a87a385736c0a6189bd6589bd8445a93",
2207 
2208 	"00000000000000000000000000000000",
2209 	"ffffffffffffffffffffffffffff0000",
2210 	"545f2b83d9616dccf60fa9830e9cd287",
2211 
2212 	"00000000000000000000000000000000",
2213 	"ffffffffffffffffffffffffffff8000",
2214 	"4b706f7f92406352394037a6d4f4688d",
2215 
2216 	"00000000000000000000000000000000",
2217 	"ffffffffffffffffffffffffffffc000",
2218 	"b7972b3941c44b90afa7b264bfba7387",
2219 
2220 	"00000000000000000000000000000000",
2221 	"ffffffffffffffffffffffffffffe000",
2222 	"6f45732cf10881546f0fd23896d2bb60",
2223 
2224 	"00000000000000000000000000000000",
2225 	"fffffffffffffffffffffffffffff000",
2226 	"2e3579ca15af27f64b3c955a5bfc30ba",
2227 
2228 	"00000000000000000000000000000000",
2229 	"fffffffffffffffffffffffffffff800",
2230 	"34a2c5a91ae2aec99b7d1b5fa6780447",
2231 
2232 	"00000000000000000000000000000000",
2233 	"fffffffffffffffffffffffffffffc00",
2234 	"a4d6616bd04f87335b0e53351227a9ee",
2235 
2236 	"00000000000000000000000000000000",
2237 	"fffffffffffffffffffffffffffffe00",
2238 	"7f692b03945867d16179a8cefc83ea3f",
2239 
2240 	"00000000000000000000000000000000",
2241 	"ffffffffffffffffffffffffffffff00",
2242 	"3bd141ee84a0e6414a26e7a4f281f8a2",
2243 
2244 	"00000000000000000000000000000000",
2245 	"ffffffffffffffffffffffffffffff80",
2246 	"d1788f572d98b2b16ec5d5f3922b99bc",
2247 
2248 	"00000000000000000000000000000000",
2249 	"ffffffffffffffffffffffffffffffc0",
2250 	"0833ff6f61d98a57b288e8c3586b85a6",
2251 
2252 	"00000000000000000000000000000000",
2253 	"ffffffffffffffffffffffffffffffe0",
2254 	"8568261797de176bf0b43becc6285afb",
2255 
2256 	"00000000000000000000000000000000",
2257 	"fffffffffffffffffffffffffffffff0",
2258 	"f9b0fda0c4a898f5b9e6f661c4ce4d07",
2259 
2260 	"00000000000000000000000000000000",
2261 	"fffffffffffffffffffffffffffffff8",
2262 	"8ade895913685c67c5269f8aae42983e",
2263 
2264 	"00000000000000000000000000000000",
2265 	"fffffffffffffffffffffffffffffffc",
2266 	"39bde67d5c8ed8a8b1c37eb8fa9f5ac0",
2267 
2268 	"00000000000000000000000000000000",
2269 	"fffffffffffffffffffffffffffffffe",
2270 	"5c005e72c1418c44f569f2ea33ba54f3",
2271 
2272 	"00000000000000000000000000000000",
2273 	"ffffffffffffffffffffffffffffffff",
2274 	"3f5b8cc9ea855a0afa7347d23e8d664e",
2275 
2276 	/*
2277 	 * From NIST validation suite (ECBVarTxt192.rsp).
2278 	 */
2279 	"000000000000000000000000000000000000000000000000",
2280 	"80000000000000000000000000000000",
2281 	"6cd02513e8d4dc986b4afe087a60bd0c",
2282 
2283 	"000000000000000000000000000000000000000000000000",
2284 	"c0000000000000000000000000000000",
2285 	"2ce1f8b7e30627c1c4519eada44bc436",
2286 
2287 	"000000000000000000000000000000000000000000000000",
2288 	"e0000000000000000000000000000000",
2289 	"9946b5f87af446f5796c1fee63a2da24",
2290 
2291 	"000000000000000000000000000000000000000000000000",
2292 	"f0000000000000000000000000000000",
2293 	"2a560364ce529efc21788779568d5555",
2294 
2295 	"000000000000000000000000000000000000000000000000",
2296 	"f8000000000000000000000000000000",
2297 	"35c1471837af446153bce55d5ba72a0a",
2298 
2299 	"000000000000000000000000000000000000000000000000",
2300 	"fc000000000000000000000000000000",
2301 	"ce60bc52386234f158f84341e534cd9e",
2302 
2303 	"000000000000000000000000000000000000000000000000",
2304 	"fe000000000000000000000000000000",
2305 	"8c7c27ff32bcf8dc2dc57c90c2903961",
2306 
2307 	"000000000000000000000000000000000000000000000000",
2308 	"ff000000000000000000000000000000",
2309 	"32bb6a7ec84499e166f936003d55a5bb",
2310 
2311 	"000000000000000000000000000000000000000000000000",
2312 	"ff800000000000000000000000000000",
2313 	"a5c772e5c62631ef660ee1d5877f6d1b",
2314 
2315 	"000000000000000000000000000000000000000000000000",
2316 	"ffc00000000000000000000000000000",
2317 	"030d7e5b64f380a7e4ea5387b5cd7f49",
2318 
2319 	"000000000000000000000000000000000000000000000000",
2320 	"ffe00000000000000000000000000000",
2321 	"0dc9a2610037009b698f11bb7e86c83e",
2322 
2323 	"000000000000000000000000000000000000000000000000",
2324 	"fff00000000000000000000000000000",
2325 	"0046612c766d1840c226364f1fa7ed72",
2326 
2327 	"000000000000000000000000000000000000000000000000",
2328 	"fff80000000000000000000000000000",
2329 	"4880c7e08f27befe78590743c05e698b",
2330 
2331 	"000000000000000000000000000000000000000000000000",
2332 	"fffc0000000000000000000000000000",
2333 	"2520ce829a26577f0f4822c4ecc87401",
2334 
2335 	"000000000000000000000000000000000000000000000000",
2336 	"fffe0000000000000000000000000000",
2337 	"8765e8acc169758319cb46dc7bcf3dca",
2338 
2339 	"000000000000000000000000000000000000000000000000",
2340 	"ffff0000000000000000000000000000",
2341 	"e98f4ba4f073df4baa116d011dc24a28",
2342 
2343 	"000000000000000000000000000000000000000000000000",
2344 	"ffff8000000000000000000000000000",
2345 	"f378f68c5dbf59e211b3a659a7317d94",
2346 
2347 	"000000000000000000000000000000000000000000000000",
2348 	"ffffc000000000000000000000000000",
2349 	"283d3b069d8eb9fb432d74b96ca762b4",
2350 
2351 	"000000000000000000000000000000000000000000000000",
2352 	"ffffe000000000000000000000000000",
2353 	"a7e1842e8a87861c221a500883245c51",
2354 
2355 	"000000000000000000000000000000000000000000000000",
2356 	"fffff000000000000000000000000000",
2357 	"77aa270471881be070fb52c7067ce732",
2358 
2359 	"000000000000000000000000000000000000000000000000",
2360 	"fffff800000000000000000000000000",
2361 	"01b0f476d484f43f1aeb6efa9361a8ac",
2362 
2363 	"000000000000000000000000000000000000000000000000",
2364 	"fffffc00000000000000000000000000",
2365 	"1c3a94f1c052c55c2d8359aff2163b4f",
2366 
2367 	"000000000000000000000000000000000000000000000000",
2368 	"fffffe00000000000000000000000000",
2369 	"e8a067b604d5373d8b0f2e05a03b341b",
2370 
2371 	"000000000000000000000000000000000000000000000000",
2372 	"ffffff00000000000000000000000000",
2373 	"a7876ec87f5a09bfea42c77da30fd50e",
2374 
2375 	"000000000000000000000000000000000000000000000000",
2376 	"ffffff80000000000000000000000000",
2377 	"0cf3e9d3a42be5b854ca65b13f35f48d",
2378 
2379 	"000000000000000000000000000000000000000000000000",
2380 	"ffffffc0000000000000000000000000",
2381 	"6c62f6bbcab7c3e821c9290f08892dda",
2382 
2383 	"000000000000000000000000000000000000000000000000",
2384 	"ffffffe0000000000000000000000000",
2385 	"7f5e05bd2068738196fee79ace7e3aec",
2386 
2387 	"000000000000000000000000000000000000000000000000",
2388 	"fffffff0000000000000000000000000",
2389 	"440e0d733255cda92fb46e842fe58054",
2390 
2391 	"000000000000000000000000000000000000000000000000",
2392 	"fffffff8000000000000000000000000",
2393 	"aa5d5b1c4ea1b7a22e5583ac2e9ed8a7",
2394 
2395 	"000000000000000000000000000000000000000000000000",
2396 	"fffffffc000000000000000000000000",
2397 	"77e537e89e8491e8662aae3bc809421d",
2398 
2399 	"000000000000000000000000000000000000000000000000",
2400 	"fffffffe000000000000000000000000",
2401 	"997dd3e9f1598bfa73f75973f7e93b76",
2402 
2403 	"000000000000000000000000000000000000000000000000",
2404 	"ffffffff000000000000000000000000",
2405 	"1b38d4f7452afefcb7fc721244e4b72e",
2406 
2407 	"000000000000000000000000000000000000000000000000",
2408 	"ffffffff800000000000000000000000",
2409 	"0be2b18252e774dda30cdda02c6906e3",
2410 
2411 	"000000000000000000000000000000000000000000000000",
2412 	"ffffffffc00000000000000000000000",
2413 	"d2695e59c20361d82652d7d58b6f11b2",
2414 
2415 	"000000000000000000000000000000000000000000000000",
2416 	"ffffffffe00000000000000000000000",
2417 	"902d88d13eae52089abd6143cfe394e9",
2418 
2419 	"000000000000000000000000000000000000000000000000",
2420 	"fffffffff00000000000000000000000",
2421 	"d49bceb3b823fedd602c305345734bd2",
2422 
2423 	"000000000000000000000000000000000000000000000000",
2424 	"fffffffff80000000000000000000000",
2425 	"707b1dbb0ffa40ef7d95def421233fae",
2426 
2427 	"000000000000000000000000000000000000000000000000",
2428 	"fffffffffc0000000000000000000000",
2429 	"7ca0c1d93356d9eb8aa952084d75f913",
2430 
2431 	"000000000000000000000000000000000000000000000000",
2432 	"fffffffffe0000000000000000000000",
2433 	"f2cbf9cb186e270dd7bdb0c28febc57d",
2434 
2435 	"000000000000000000000000000000000000000000000000",
2436 	"ffffffffff0000000000000000000000",
2437 	"c94337c37c4e790ab45780bd9c3674a0",
2438 
2439 	"000000000000000000000000000000000000000000000000",
2440 	"ffffffffff8000000000000000000000",
2441 	"8e3558c135252fb9c9f367ed609467a1",
2442 
2443 	"000000000000000000000000000000000000000000000000",
2444 	"ffffffffffc000000000000000000000",
2445 	"1b72eeaee4899b443914e5b3a57fba92",
2446 
2447 	"000000000000000000000000000000000000000000000000",
2448 	"ffffffffffe000000000000000000000",
2449 	"011865f91bc56868d051e52c9efd59b7",
2450 
2451 	"000000000000000000000000000000000000000000000000",
2452 	"fffffffffff000000000000000000000",
2453 	"e4771318ad7a63dd680f6e583b7747ea",
2454 
2455 	"000000000000000000000000000000000000000000000000",
2456 	"fffffffffff800000000000000000000",
2457 	"61e3d194088dc8d97e9e6db37457eac5",
2458 
2459 	"000000000000000000000000000000000000000000000000",
2460 	"fffffffffffc00000000000000000000",
2461 	"36ff1ec9ccfbc349e5d356d063693ad6",
2462 
2463 	"000000000000000000000000000000000000000000000000",
2464 	"fffffffffffe00000000000000000000",
2465 	"3cc9e9a9be8cc3f6fb2ea24088e9bb19",
2466 
2467 	"000000000000000000000000000000000000000000000000",
2468 	"ffffffffffff00000000000000000000",
2469 	"1ee5ab003dc8722e74905d9a8fe3d350",
2470 
2471 	"000000000000000000000000000000000000000000000000",
2472 	"ffffffffffff80000000000000000000",
2473 	"245339319584b0a412412869d6c2eada",
2474 
2475 	"000000000000000000000000000000000000000000000000",
2476 	"ffffffffffffc0000000000000000000",
2477 	"7bd496918115d14ed5380852716c8814",
2478 
2479 	"000000000000000000000000000000000000000000000000",
2480 	"ffffffffffffe0000000000000000000",
2481 	"273ab2f2b4a366a57d582a339313c8b1",
2482 
2483 	"000000000000000000000000000000000000000000000000",
2484 	"fffffffffffff0000000000000000000",
2485 	"113365a9ffbe3b0ca61e98507554168b",
2486 
2487 	"000000000000000000000000000000000000000000000000",
2488 	"fffffffffffff8000000000000000000",
2489 	"afa99c997ac478a0dea4119c9e45f8b1",
2490 
2491 	"000000000000000000000000000000000000000000000000",
2492 	"fffffffffffffc000000000000000000",
2493 	"9216309a7842430b83ffb98638011512",
2494 
2495 	"000000000000000000000000000000000000000000000000",
2496 	"fffffffffffffe000000000000000000",
2497 	"62abc792288258492a7cb45145f4b759",
2498 
2499 	"000000000000000000000000000000000000000000000000",
2500 	"ffffffffffffff000000000000000000",
2501 	"534923c169d504d7519c15d30e756c50",
2502 
2503 	"000000000000000000000000000000000000000000000000",
2504 	"ffffffffffffff800000000000000000",
2505 	"fa75e05bcdc7e00c273fa33f6ee441d2",
2506 
2507 	"000000000000000000000000000000000000000000000000",
2508 	"ffffffffffffffc00000000000000000",
2509 	"7d350fa6057080f1086a56b17ec240db",
2510 
2511 	"000000000000000000000000000000000000000000000000",
2512 	"ffffffffffffffe00000000000000000",
2513 	"f34e4a6324ea4a5c39a661c8fe5ada8f",
2514 
2515 	"000000000000000000000000000000000000000000000000",
2516 	"fffffffffffffff00000000000000000",
2517 	"0882a16f44088d42447a29ac090ec17e",
2518 
2519 	"000000000000000000000000000000000000000000000000",
2520 	"fffffffffffffff80000000000000000",
2521 	"3a3c15bfc11a9537c130687004e136ee",
2522 
2523 	"000000000000000000000000000000000000000000000000",
2524 	"fffffffffffffffc0000000000000000",
2525 	"22c0a7678dc6d8cf5c8a6d5a9960767c",
2526 
2527 	"000000000000000000000000000000000000000000000000",
2528 	"fffffffffffffffe0000000000000000",
2529 	"b46b09809d68b9a456432a79bdc2e38c",
2530 
2531 	"000000000000000000000000000000000000000000000000",
2532 	"ffffffffffffffff0000000000000000",
2533 	"93baaffb35fbe739c17c6ac22eecf18f",
2534 
2535 	"000000000000000000000000000000000000000000000000",
2536 	"ffffffffffffffff8000000000000000",
2537 	"c8aa80a7850675bc007c46df06b49868",
2538 
2539 	"000000000000000000000000000000000000000000000000",
2540 	"ffffffffffffffffc000000000000000",
2541 	"12c6f3877af421a918a84b775858021d",
2542 
2543 	"000000000000000000000000000000000000000000000000",
2544 	"ffffffffffffffffe000000000000000",
2545 	"33f123282c5d633924f7d5ba3f3cab11",
2546 
2547 	"000000000000000000000000000000000000000000000000",
2548 	"fffffffffffffffff000000000000000",
2549 	"a8f161002733e93ca4527d22c1a0c5bb",
2550 
2551 	"000000000000000000000000000000000000000000000000",
2552 	"fffffffffffffffff800000000000000",
2553 	"b72f70ebf3e3fda23f508eec76b42c02",
2554 
2555 	"000000000000000000000000000000000000000000000000",
2556 	"fffffffffffffffffc00000000000000",
2557 	"6a9d965e6274143f25afdcfc88ffd77c",
2558 
2559 	"000000000000000000000000000000000000000000000000",
2560 	"fffffffffffffffffe00000000000000",
2561 	"a0c74fd0b9361764ce91c5200b095357",
2562 
2563 	"000000000000000000000000000000000000000000000000",
2564 	"ffffffffffffffffff00000000000000",
2565 	"091d1fdc2bd2c346cd5046a8c6209146",
2566 
2567 	"000000000000000000000000000000000000000000000000",
2568 	"ffffffffffffffffff80000000000000",
2569 	"e2a37580116cfb71856254496ab0aca8",
2570 
2571 	"000000000000000000000000000000000000000000000000",
2572 	"ffffffffffffffffffc0000000000000",
2573 	"e0b3a00785917c7efc9adba322813571",
2574 
2575 	"000000000000000000000000000000000000000000000000",
2576 	"ffffffffffffffffffe0000000000000",
2577 	"733d41f4727b5ef0df4af4cf3cffa0cb",
2578 
2579 	"000000000000000000000000000000000000000000000000",
2580 	"fffffffffffffffffff0000000000000",
2581 	"a99ebb030260826f981ad3e64490aa4f",
2582 
2583 	"000000000000000000000000000000000000000000000000",
2584 	"fffffffffffffffffff8000000000000",
2585 	"73f34c7d3eae5e80082c1647524308ee",
2586 
2587 	"000000000000000000000000000000000000000000000000",
2588 	"fffffffffffffffffffc000000000000",
2589 	"40ebd5ad082345b7a2097ccd3464da02",
2590 
2591 	"000000000000000000000000000000000000000000000000",
2592 	"fffffffffffffffffffe000000000000",
2593 	"7cc4ae9a424b2cec90c97153c2457ec5",
2594 
2595 	"000000000000000000000000000000000000000000000000",
2596 	"ffffffffffffffffffff000000000000",
2597 	"54d632d03aba0bd0f91877ebdd4d09cb",
2598 
2599 	"000000000000000000000000000000000000000000000000",
2600 	"ffffffffffffffffffff800000000000",
2601 	"d3427be7e4d27cd54f5fe37b03cf0897",
2602 
2603 	"000000000000000000000000000000000000000000000000",
2604 	"ffffffffffffffffffffc00000000000",
2605 	"b2099795e88cc158fd75ea133d7e7fbe",
2606 
2607 	"000000000000000000000000000000000000000000000000",
2608 	"ffffffffffffffffffffe00000000000",
2609 	"a6cae46fb6fadfe7a2c302a34242817b",
2610 
2611 	"000000000000000000000000000000000000000000000000",
2612 	"fffffffffffffffffffff00000000000",
2613 	"026a7024d6a902e0b3ffccbaa910cc3f",
2614 
2615 	"000000000000000000000000000000000000000000000000",
2616 	"fffffffffffffffffffff80000000000",
2617 	"156f07767a85a4312321f63968338a01",
2618 
2619 	"000000000000000000000000000000000000000000000000",
2620 	"fffffffffffffffffffffc0000000000",
2621 	"15eec9ebf42b9ca76897d2cd6c5a12e2",
2622 
2623 	"000000000000000000000000000000000000000000000000",
2624 	"fffffffffffffffffffffe0000000000",
2625 	"db0d3a6fdcc13f915e2b302ceeb70fd8",
2626 
2627 	"000000000000000000000000000000000000000000000000",
2628 	"ffffffffffffffffffffff0000000000",
2629 	"71dbf37e87a2e34d15b20e8f10e48924",
2630 
2631 	"000000000000000000000000000000000000000000000000",
2632 	"ffffffffffffffffffffff8000000000",
2633 	"c745c451e96ff3c045e4367c833e3b54",
2634 
2635 	"000000000000000000000000000000000000000000000000",
2636 	"ffffffffffffffffffffffc000000000",
2637 	"340da09c2dd11c3b679d08ccd27dd595",
2638 
2639 	"000000000000000000000000000000000000000000000000",
2640 	"ffffffffffffffffffffffe000000000",
2641 	"8279f7c0c2a03ee660c6d392db025d18",
2642 
2643 	"000000000000000000000000000000000000000000000000",
2644 	"fffffffffffffffffffffff000000000",
2645 	"a4b2c7d8eba531ff47c5041a55fbd1ec",
2646 
2647 	"000000000000000000000000000000000000000000000000",
2648 	"fffffffffffffffffffffff800000000",
2649 	"74569a2ca5a7bd5131ce8dc7cbfbf72f",
2650 
2651 	"000000000000000000000000000000000000000000000000",
2652 	"fffffffffffffffffffffffc00000000",
2653 	"3713da0c0219b63454035613b5a403dd",
2654 
2655 	"000000000000000000000000000000000000000000000000",
2656 	"fffffffffffffffffffffffe00000000",
2657 	"8827551ddcc9df23fa72a3de4e9f0b07",
2658 
2659 	"000000000000000000000000000000000000000000000000",
2660 	"ffffffffffffffffffffffff00000000",
2661 	"2e3febfd625bfcd0a2c06eb460da1732",
2662 
2663 	"000000000000000000000000000000000000000000000000",
2664 	"ffffffffffffffffffffffff80000000",
2665 	"ee82e6ba488156f76496311da6941deb",
2666 
2667 	"000000000000000000000000000000000000000000000000",
2668 	"ffffffffffffffffffffffffc0000000",
2669 	"4770446f01d1f391256e85a1b30d89d3",
2670 
2671 	"000000000000000000000000000000000000000000000000",
2672 	"ffffffffffffffffffffffffe0000000",
2673 	"af04b68f104f21ef2afb4767cf74143c",
2674 
2675 	"000000000000000000000000000000000000000000000000",
2676 	"fffffffffffffffffffffffff0000000",
2677 	"cf3579a9ba38c8e43653173e14f3a4c6",
2678 
2679 	"000000000000000000000000000000000000000000000000",
2680 	"fffffffffffffffffffffffff8000000",
2681 	"b3bba904f4953e09b54800af2f62e7d4",
2682 
2683 	"000000000000000000000000000000000000000000000000",
2684 	"fffffffffffffffffffffffffc000000",
2685 	"fc4249656e14b29eb9c44829b4c59a46",
2686 
2687 	"000000000000000000000000000000000000000000000000",
2688 	"fffffffffffffffffffffffffe000000",
2689 	"9b31568febe81cfc2e65af1c86d1a308",
2690 
2691 	"000000000000000000000000000000000000000000000000",
2692 	"ffffffffffffffffffffffffff000000",
2693 	"9ca09c25f273a766db98a480ce8dfedc",
2694 
2695 	"000000000000000000000000000000000000000000000000",
2696 	"ffffffffffffffffffffffffff800000",
2697 	"b909925786f34c3c92d971883c9fbedf",
2698 
2699 	"000000000000000000000000000000000000000000000000",
2700 	"ffffffffffffffffffffffffffc00000",
2701 	"82647f1332fe570a9d4d92b2ee771d3b",
2702 
2703 	"000000000000000000000000000000000000000000000000",
2704 	"ffffffffffffffffffffffffffe00000",
2705 	"3604a7e80832b3a99954bca6f5b9f501",
2706 
2707 	"000000000000000000000000000000000000000000000000",
2708 	"fffffffffffffffffffffffffff00000",
2709 	"884607b128c5de3ab39a529a1ef51bef",
2710 
2711 	"000000000000000000000000000000000000000000000000",
2712 	"fffffffffffffffffffffffffff80000",
2713 	"670cfa093d1dbdb2317041404102435e",
2714 
2715 	"000000000000000000000000000000000000000000000000",
2716 	"fffffffffffffffffffffffffffc0000",
2717 	"7a867195f3ce8769cbd336502fbb5130",
2718 
2719 	"000000000000000000000000000000000000000000000000",
2720 	"fffffffffffffffffffffffffffe0000",
2721 	"52efcf64c72b2f7ca5b3c836b1078c15",
2722 
2723 	"000000000000000000000000000000000000000000000000",
2724 	"ffffffffffffffffffffffffffff0000",
2725 	"4019250f6eefb2ac5ccbcae044e75c7e",
2726 
2727 	"000000000000000000000000000000000000000000000000",
2728 	"ffffffffffffffffffffffffffff8000",
2729 	"022c4f6f5a017d292785627667ddef24",
2730 
2731 	"000000000000000000000000000000000000000000000000",
2732 	"ffffffffffffffffffffffffffffc000",
2733 	"e9c21078a2eb7e03250f71000fa9e3ed",
2734 
2735 	"000000000000000000000000000000000000000000000000",
2736 	"ffffffffffffffffffffffffffffe000",
2737 	"a13eaeeb9cd391da4e2b09490b3e7fad",
2738 
2739 	"000000000000000000000000000000000000000000000000",
2740 	"fffffffffffffffffffffffffffff000",
2741 	"c958a171dca1d4ed53e1af1d380803a9",
2742 
2743 	"000000000000000000000000000000000000000000000000",
2744 	"fffffffffffffffffffffffffffff800",
2745 	"21442e07a110667f2583eaeeee44dc8c",
2746 
2747 	"000000000000000000000000000000000000000000000000",
2748 	"fffffffffffffffffffffffffffffc00",
2749 	"59bbb353cf1dd867a6e33737af655e99",
2750 
2751 	"000000000000000000000000000000000000000000000000",
2752 	"fffffffffffffffffffffffffffffe00",
2753 	"43cd3b25375d0ce41087ff9fe2829639",
2754 
2755 	"000000000000000000000000000000000000000000000000",
2756 	"ffffffffffffffffffffffffffffff00",
2757 	"6b98b17e80d1118e3516bd768b285a84",
2758 
2759 	"000000000000000000000000000000000000000000000000",
2760 	"ffffffffffffffffffffffffffffff80",
2761 	"ae47ed3676ca0c08deea02d95b81db58",
2762 
2763 	"000000000000000000000000000000000000000000000000",
2764 	"ffffffffffffffffffffffffffffffc0",
2765 	"34ec40dc20413795ed53628ea748720b",
2766 
2767 	"000000000000000000000000000000000000000000000000",
2768 	"ffffffffffffffffffffffffffffffe0",
2769 	"4dc68163f8e9835473253542c8a65d46",
2770 
2771 	"000000000000000000000000000000000000000000000000",
2772 	"fffffffffffffffffffffffffffffff0",
2773 	"2aabb999f43693175af65c6c612c46fb",
2774 
2775 	"000000000000000000000000000000000000000000000000",
2776 	"fffffffffffffffffffffffffffffff8",
2777 	"e01f94499dac3547515c5b1d756f0f58",
2778 
2779 	"000000000000000000000000000000000000000000000000",
2780 	"fffffffffffffffffffffffffffffffc",
2781 	"9d12435a46480ce00ea349f71799df9a",
2782 
2783 	"000000000000000000000000000000000000000000000000",
2784 	"fffffffffffffffffffffffffffffffe",
2785 	"cef41d16d266bdfe46938ad7884cc0cf",
2786 
2787 	"000000000000000000000000000000000000000000000000",
2788 	"ffffffffffffffffffffffffffffffff",
2789 	"b13db4da1f718bc6904797c82bcf2d32",
2790 
2791 	/*
2792 	 * From NIST validation suite (ECBVarTxt256.rsp).
2793 	 */
2794 	"0000000000000000000000000000000000000000000000000000000000000000",
2795 	"80000000000000000000000000000000",
2796 	"ddc6bf790c15760d8d9aeb6f9a75fd4e",
2797 
2798 	"0000000000000000000000000000000000000000000000000000000000000000",
2799 	"c0000000000000000000000000000000",
2800 	"0a6bdc6d4c1e6280301fd8e97ddbe601",
2801 
2802 	"0000000000000000000000000000000000000000000000000000000000000000",
2803 	"e0000000000000000000000000000000",
2804 	"9b80eefb7ebe2d2b16247aa0efc72f5d",
2805 
2806 	"0000000000000000000000000000000000000000000000000000000000000000",
2807 	"f0000000000000000000000000000000",
2808 	"7f2c5ece07a98d8bee13c51177395ff7",
2809 
2810 	"0000000000000000000000000000000000000000000000000000000000000000",
2811 	"f8000000000000000000000000000000",
2812 	"7818d800dcf6f4be1e0e94f403d1e4c2",
2813 
2814 	"0000000000000000000000000000000000000000000000000000000000000000",
2815 	"fc000000000000000000000000000000",
2816 	"e74cd1c92f0919c35a0324123d6177d3",
2817 
2818 	"0000000000000000000000000000000000000000000000000000000000000000",
2819 	"fe000000000000000000000000000000",
2820 	"8092a4dcf2da7e77e93bdd371dfed82e",
2821 
2822 	"0000000000000000000000000000000000000000000000000000000000000000",
2823 	"ff000000000000000000000000000000",
2824 	"49af6b372135acef10132e548f217b17",
2825 
2826 	"0000000000000000000000000000000000000000000000000000000000000000",
2827 	"ff800000000000000000000000000000",
2828 	"8bcd40f94ebb63b9f7909676e667f1e7",
2829 
2830 	"0000000000000000000000000000000000000000000000000000000000000000",
2831 	"ffc00000000000000000000000000000",
2832 	"fe1cffb83f45dcfb38b29be438dbd3ab",
2833 
2834 	"0000000000000000000000000000000000000000000000000000000000000000",
2835 	"ffe00000000000000000000000000000",
2836 	"0dc58a8d886623705aec15cb1e70dc0e",
2837 
2838 	"0000000000000000000000000000000000000000000000000000000000000000",
2839 	"fff00000000000000000000000000000",
2840 	"c218faa16056bd0774c3e8d79c35a5e4",
2841 
2842 	"0000000000000000000000000000000000000000000000000000000000000000",
2843 	"fff80000000000000000000000000000",
2844 	"047bba83f7aa841731504e012208fc9e",
2845 
2846 	"0000000000000000000000000000000000000000000000000000000000000000",
2847 	"fffc0000000000000000000000000000",
2848 	"dc8f0e4915fd81ba70a331310882f6da",
2849 
2850 	"0000000000000000000000000000000000000000000000000000000000000000",
2851 	"fffe0000000000000000000000000000",
2852 	"1569859ea6b7206c30bf4fd0cbfac33c",
2853 
2854 	"0000000000000000000000000000000000000000000000000000000000000000",
2855 	"ffff0000000000000000000000000000",
2856 	"300ade92f88f48fa2df730ec16ef44cd",
2857 
2858 	"0000000000000000000000000000000000000000000000000000000000000000",
2859 	"ffff8000000000000000000000000000",
2860 	"1fe6cc3c05965dc08eb0590c95ac71d0",
2861 
2862 	"0000000000000000000000000000000000000000000000000000000000000000",
2863 	"ffffc000000000000000000000000000",
2864 	"59e858eaaa97fec38111275b6cf5abc0",
2865 
2866 	"0000000000000000000000000000000000000000000000000000000000000000",
2867 	"ffffe000000000000000000000000000",
2868 	"2239455e7afe3b0616100288cc5a723b",
2869 
2870 	"0000000000000000000000000000000000000000000000000000000000000000",
2871 	"fffff000000000000000000000000000",
2872 	"3ee500c5c8d63479717163e55c5c4522",
2873 
2874 	"0000000000000000000000000000000000000000000000000000000000000000",
2875 	"fffff800000000000000000000000000",
2876 	"d5e38bf15f16d90e3e214041d774daa8",
2877 
2878 	"0000000000000000000000000000000000000000000000000000000000000000",
2879 	"fffffc00000000000000000000000000",
2880 	"b1f4066e6f4f187dfe5f2ad1b17819d0",
2881 
2882 	"0000000000000000000000000000000000000000000000000000000000000000",
2883 	"fffffe00000000000000000000000000",
2884 	"6ef4cc4de49b11065d7af2909854794a",
2885 
2886 	"0000000000000000000000000000000000000000000000000000000000000000",
2887 	"ffffff00000000000000000000000000",
2888 	"ac86bc606b6640c309e782f232bf367f",
2889 
2890 	"0000000000000000000000000000000000000000000000000000000000000000",
2891 	"ffffff80000000000000000000000000",
2892 	"36aff0ef7bf3280772cf4cac80a0d2b2",
2893 
2894 	"0000000000000000000000000000000000000000000000000000000000000000",
2895 	"ffffffc0000000000000000000000000",
2896 	"1f8eedea0f62a1406d58cfc3ecea72cf",
2897 
2898 	"0000000000000000000000000000000000000000000000000000000000000000",
2899 	"ffffffe0000000000000000000000000",
2900 	"abf4154a3375a1d3e6b1d454438f95a6",
2901 
2902 	"0000000000000000000000000000000000000000000000000000000000000000",
2903 	"fffffff0000000000000000000000000",
2904 	"96f96e9d607f6615fc192061ee648b07",
2905 
2906 	"0000000000000000000000000000000000000000000000000000000000000000",
2907 	"fffffff8000000000000000000000000",
2908 	"cf37cdaaa0d2d536c71857634c792064",
2909 
2910 	"0000000000000000000000000000000000000000000000000000000000000000",
2911 	"fffffffc000000000000000000000000",
2912 	"fbd6640c80245c2b805373f130703127",
2913 
2914 	"0000000000000000000000000000000000000000000000000000000000000000",
2915 	"fffffffe000000000000000000000000",
2916 	"8d6a8afe55a6e481badae0d146f436db",
2917 
2918 	"0000000000000000000000000000000000000000000000000000000000000000",
2919 	"ffffffff000000000000000000000000",
2920 	"6a4981f2915e3e68af6c22385dd06756",
2921 
2922 	"0000000000000000000000000000000000000000000000000000000000000000",
2923 	"ffffffff800000000000000000000000",
2924 	"42a1136e5f8d8d21d3101998642d573b",
2925 
2926 	"0000000000000000000000000000000000000000000000000000000000000000",
2927 	"ffffffffc00000000000000000000000",
2928 	"9b471596dc69ae1586cee6158b0b0181",
2929 
2930 	"0000000000000000000000000000000000000000000000000000000000000000",
2931 	"ffffffffe00000000000000000000000",
2932 	"753665c4af1eff33aa8b628bf8741cfd",
2933 
2934 	"0000000000000000000000000000000000000000000000000000000000000000",
2935 	"fffffffff00000000000000000000000",
2936 	"9a682acf40be01f5b2a4193c9a82404d",
2937 
2938 	"0000000000000000000000000000000000000000000000000000000000000000",
2939 	"fffffffff80000000000000000000000",
2940 	"54fafe26e4287f17d1935f87eb9ade01",
2941 
2942 	"0000000000000000000000000000000000000000000000000000000000000000",
2943 	"fffffffffc0000000000000000000000",
2944 	"49d541b2e74cfe73e6a8e8225f7bd449",
2945 
2946 	"0000000000000000000000000000000000000000000000000000000000000000",
2947 	"fffffffffe0000000000000000000000",
2948 	"11a45530f624ff6f76a1b3826626ff7b",
2949 
2950 	"0000000000000000000000000000000000000000000000000000000000000000",
2951 	"ffffffffff0000000000000000000000",
2952 	"f96b0c4a8bc6c86130289f60b43b8fba",
2953 
2954 	"0000000000000000000000000000000000000000000000000000000000000000",
2955 	"ffffffffff8000000000000000000000",
2956 	"48c7d0e80834ebdc35b6735f76b46c8b",
2957 
2958 	"0000000000000000000000000000000000000000000000000000000000000000",
2959 	"ffffffffffc000000000000000000000",
2960 	"2463531ab54d66955e73edc4cb8eaa45",
2961 
2962 	"0000000000000000000000000000000000000000000000000000000000000000",
2963 	"ffffffffffe000000000000000000000",
2964 	"ac9bd8e2530469134b9d5b065d4f565b",
2965 
2966 	"0000000000000000000000000000000000000000000000000000000000000000",
2967 	"fffffffffff000000000000000000000",
2968 	"3f5f9106d0e52f973d4890e6f37e8a00",
2969 
2970 	"0000000000000000000000000000000000000000000000000000000000000000",
2971 	"fffffffffff800000000000000000000",
2972 	"20ebc86f1304d272e2e207e59db639f0",
2973 
2974 	"0000000000000000000000000000000000000000000000000000000000000000",
2975 	"fffffffffffc00000000000000000000",
2976 	"e67ae6426bf9526c972cff072b52252c",
2977 
2978 	"0000000000000000000000000000000000000000000000000000000000000000",
2979 	"fffffffffffe00000000000000000000",
2980 	"1a518dddaf9efa0d002cc58d107edfc8",
2981 
2982 	"0000000000000000000000000000000000000000000000000000000000000000",
2983 	"ffffffffffff00000000000000000000",
2984 	"ead731af4d3a2fe3b34bed047942a49f",
2985 
2986 	"0000000000000000000000000000000000000000000000000000000000000000",
2987 	"ffffffffffff80000000000000000000",
2988 	"b1d4efe40242f83e93b6c8d7efb5eae9",
2989 
2990 	"0000000000000000000000000000000000000000000000000000000000000000",
2991 	"ffffffffffffc0000000000000000000",
2992 	"cd2b1fec11fd906c5c7630099443610a",
2993 
2994 	"0000000000000000000000000000000000000000000000000000000000000000",
2995 	"ffffffffffffe0000000000000000000",
2996 	"a1853fe47fe29289d153161d06387d21",
2997 
2998 	"0000000000000000000000000000000000000000000000000000000000000000",
2999 	"fffffffffffff0000000000000000000",
3000 	"4632154179a555c17ea604d0889fab14",
3001 
3002 	"0000000000000000000000000000000000000000000000000000000000000000",
3003 	"fffffffffffff8000000000000000000",
3004 	"dd27cac6401a022e8f38f9f93e774417",
3005 
3006 	"0000000000000000000000000000000000000000000000000000000000000000",
3007 	"fffffffffffffc000000000000000000",
3008 	"c090313eb98674f35f3123385fb95d4d",
3009 
3010 	"0000000000000000000000000000000000000000000000000000000000000000",
3011 	"fffffffffffffe000000000000000000",
3012 	"cc3526262b92f02edce548f716b9f45c",
3013 
3014 	"0000000000000000000000000000000000000000000000000000000000000000",
3015 	"ffffffffffffff000000000000000000",
3016 	"c0838d1a2b16a7c7f0dfcc433c399c33",
3017 
3018 	"0000000000000000000000000000000000000000000000000000000000000000",
3019 	"ffffffffffffff800000000000000000",
3020 	"0d9ac756eb297695eed4d382eb126d26",
3021 
3022 	"0000000000000000000000000000000000000000000000000000000000000000",
3023 	"ffffffffffffffc00000000000000000",
3024 	"56ede9dda3f6f141bff1757fa689c3e1",
3025 
3026 	"0000000000000000000000000000000000000000000000000000000000000000",
3027 	"ffffffffffffffe00000000000000000",
3028 	"768f520efe0f23e61d3ec8ad9ce91774",
3029 
3030 	"0000000000000000000000000000000000000000000000000000000000000000",
3031 	"fffffffffffffff00000000000000000",
3032 	"b1144ddfa75755213390e7c596660490",
3033 
3034 	"0000000000000000000000000000000000000000000000000000000000000000",
3035 	"fffffffffffffff80000000000000000",
3036 	"1d7c0c4040b355b9d107a99325e3b050",
3037 
3038 	"0000000000000000000000000000000000000000000000000000000000000000",
3039 	"fffffffffffffffc0000000000000000",
3040 	"d8e2bb1ae8ee3dcf5bf7d6c38da82a1a",
3041 
3042 	"0000000000000000000000000000000000000000000000000000000000000000",
3043 	"fffffffffffffffe0000000000000000",
3044 	"faf82d178af25a9886a47e7f789b98d7",
3045 
3046 	"0000000000000000000000000000000000000000000000000000000000000000",
3047 	"ffffffffffffffff0000000000000000",
3048 	"9b58dbfd77fe5aca9cfc190cd1b82d19",
3049 
3050 	"0000000000000000000000000000000000000000000000000000000000000000",
3051 	"ffffffffffffffff8000000000000000",
3052 	"77f392089042e478ac16c0c86a0b5db5",
3053 
3054 	"0000000000000000000000000000000000000000000000000000000000000000",
3055 	"ffffffffffffffffc000000000000000",
3056 	"19f08e3420ee69b477ca1420281c4782",
3057 
3058 	"0000000000000000000000000000000000000000000000000000000000000000",
3059 	"ffffffffffffffffe000000000000000",
3060 	"a1b19beee4e117139f74b3c53fdcb875",
3061 
3062 	"0000000000000000000000000000000000000000000000000000000000000000",
3063 	"fffffffffffffffff000000000000000",
3064 	"a37a5869b218a9f3a0868d19aea0ad6a",
3065 
3066 	"0000000000000000000000000000000000000000000000000000000000000000",
3067 	"fffffffffffffffff800000000000000",
3068 	"bc3594e865bcd0261b13202731f33580",
3069 
3070 	"0000000000000000000000000000000000000000000000000000000000000000",
3071 	"fffffffffffffffffc00000000000000",
3072 	"811441ce1d309eee7185e8c752c07557",
3073 
3074 	"0000000000000000000000000000000000000000000000000000000000000000",
3075 	"fffffffffffffffffe00000000000000",
3076 	"959971ce4134190563518e700b9874d1",
3077 
3078 	"0000000000000000000000000000000000000000000000000000000000000000",
3079 	"ffffffffffffffffff00000000000000",
3080 	"76b5614a042707c98e2132e2e805fe63",
3081 
3082 	"0000000000000000000000000000000000000000000000000000000000000000",
3083 	"ffffffffffffffffff80000000000000",
3084 	"7d9fa6a57530d0f036fec31c230b0cc6",
3085 
3086 	"0000000000000000000000000000000000000000000000000000000000000000",
3087 	"ffffffffffffffffffc0000000000000",
3088 	"964153a83bf6989a4ba80daa91c3e081",
3089 
3090 	"0000000000000000000000000000000000000000000000000000000000000000",
3091 	"ffffffffffffffffffe0000000000000",
3092 	"a013014d4ce8054cf2591d06f6f2f176",
3093 
3094 	"0000000000000000000000000000000000000000000000000000000000000000",
3095 	"fffffffffffffffffff0000000000000",
3096 	"d1c5f6399bf382502e385eee1474a869",
3097 
3098 	"0000000000000000000000000000000000000000000000000000000000000000",
3099 	"fffffffffffffffffff8000000000000",
3100 	"0007e20b8298ec354f0f5fe7470f36bd",
3101 
3102 	"0000000000000000000000000000000000000000000000000000000000000000",
3103 	"fffffffffffffffffffc000000000000",
3104 	"b95ba05b332da61ef63a2b31fcad9879",
3105 
3106 	"0000000000000000000000000000000000000000000000000000000000000000",
3107 	"fffffffffffffffffffe000000000000",
3108 	"4620a49bd967491561669ab25dce45f4",
3109 
3110 	"0000000000000000000000000000000000000000000000000000000000000000",
3111 	"ffffffffffffffffffff000000000000",
3112 	"12e71214ae8e04f0bb63d7425c6f14d5",
3113 
3114 	"0000000000000000000000000000000000000000000000000000000000000000",
3115 	"ffffffffffffffffffff800000000000",
3116 	"4cc42fc1407b008fe350907c092e80ac",
3117 
3118 	"0000000000000000000000000000000000000000000000000000000000000000",
3119 	"ffffffffffffffffffffc00000000000",
3120 	"08b244ce7cbc8ee97fbba808cb146fda",
3121 
3122 	"0000000000000000000000000000000000000000000000000000000000000000",
3123 	"ffffffffffffffffffffe00000000000",
3124 	"39b333e8694f21546ad1edd9d87ed95b",
3125 
3126 	"0000000000000000000000000000000000000000000000000000000000000000",
3127 	"fffffffffffffffffffff00000000000",
3128 	"3b271f8ab2e6e4a20ba8090f43ba78f3",
3129 
3130 	"0000000000000000000000000000000000000000000000000000000000000000",
3131 	"fffffffffffffffffffff80000000000",
3132 	"9ad983f3bf651cd0393f0a73cccdea50",
3133 
3134 	"0000000000000000000000000000000000000000000000000000000000000000",
3135 	"fffffffffffffffffffffc0000000000",
3136 	"8f476cbff75c1f725ce18e4bbcd19b32",
3137 
3138 	"0000000000000000000000000000000000000000000000000000000000000000",
3139 	"fffffffffffffffffffffe0000000000",
3140 	"905b6267f1d6ab5320835a133f096f2a",
3141 
3142 	"0000000000000000000000000000000000000000000000000000000000000000",
3143 	"ffffffffffffffffffffff0000000000",
3144 	"145b60d6d0193c23f4221848a892d61a",
3145 
3146 	"0000000000000000000000000000000000000000000000000000000000000000",
3147 	"ffffffffffffffffffffff8000000000",
3148 	"55cfb3fb6d75cad0445bbc8dafa25b0f",
3149 
3150 	"0000000000000000000000000000000000000000000000000000000000000000",
3151 	"ffffffffffffffffffffffc000000000",
3152 	"7b8e7098e357ef71237d46d8b075b0f5",
3153 
3154 	"0000000000000000000000000000000000000000000000000000000000000000",
3155 	"ffffffffffffffffffffffe000000000",
3156 	"2bf27229901eb40f2df9d8398d1505ae",
3157 
3158 	"0000000000000000000000000000000000000000000000000000000000000000",
3159 	"fffffffffffffffffffffff000000000",
3160 	"83a63402a77f9ad5c1e931a931ecd706",
3161 
3162 	"0000000000000000000000000000000000000000000000000000000000000000",
3163 	"fffffffffffffffffffffff800000000",
3164 	"6f8ba6521152d31f2bada1843e26b973",
3165 
3166 	"0000000000000000000000000000000000000000000000000000000000000000",
3167 	"fffffffffffffffffffffffc00000000",
3168 	"e5c3b8e30fd2d8e6239b17b44bd23bbd",
3169 
3170 	"0000000000000000000000000000000000000000000000000000000000000000",
3171 	"fffffffffffffffffffffffe00000000",
3172 	"1ac1f7102c59933e8b2ddc3f14e94baa",
3173 
3174 	"0000000000000000000000000000000000000000000000000000000000000000",
3175 	"ffffffffffffffffffffffff00000000",
3176 	"21d9ba49f276b45f11af8fc71a088e3d",
3177 
3178 	"0000000000000000000000000000000000000000000000000000000000000000",
3179 	"ffffffffffffffffffffffff80000000",
3180 	"649f1cddc3792b4638635a392bc9bade",
3181 
3182 	"0000000000000000000000000000000000000000000000000000000000000000",
3183 	"ffffffffffffffffffffffffc0000000",
3184 	"e2775e4b59c1bc2e31a2078c11b5a08c",
3185 
3186 	"0000000000000000000000000000000000000000000000000000000000000000",
3187 	"ffffffffffffffffffffffffe0000000",
3188 	"2be1fae5048a25582a679ca10905eb80",
3189 
3190 	"0000000000000000000000000000000000000000000000000000000000000000",
3191 	"fffffffffffffffffffffffff0000000",
3192 	"da86f292c6f41ea34fb2068df75ecc29",
3193 
3194 	"0000000000000000000000000000000000000000000000000000000000000000",
3195 	"fffffffffffffffffffffffff8000000",
3196 	"220df19f85d69b1b562fa69a3c5beca5",
3197 
3198 	"0000000000000000000000000000000000000000000000000000000000000000",
3199 	"fffffffffffffffffffffffffc000000",
3200 	"1f11d5d0355e0b556ccdb6c7f5083b4d",
3201 
3202 	"0000000000000000000000000000000000000000000000000000000000000000",
3203 	"fffffffffffffffffffffffffe000000",
3204 	"62526b78be79cb384633c91f83b4151b",
3205 
3206 	"0000000000000000000000000000000000000000000000000000000000000000",
3207 	"ffffffffffffffffffffffffff000000",
3208 	"90ddbcb950843592dd47bbef00fdc876",
3209 
3210 	"0000000000000000000000000000000000000000000000000000000000000000",
3211 	"ffffffffffffffffffffffffff800000",
3212 	"2fd0e41c5b8402277354a7391d2618e2",
3213 
3214 	"0000000000000000000000000000000000000000000000000000000000000000",
3215 	"ffffffffffffffffffffffffffc00000",
3216 	"3cdf13e72dee4c581bafec70b85f9660",
3217 
3218 	"0000000000000000000000000000000000000000000000000000000000000000",
3219 	"ffffffffffffffffffffffffffe00000",
3220 	"afa2ffc137577092e2b654fa199d2c43",
3221 
3222 	"0000000000000000000000000000000000000000000000000000000000000000",
3223 	"fffffffffffffffffffffffffff00000",
3224 	"8d683ee63e60d208e343ce48dbc44cac",
3225 
3226 	"0000000000000000000000000000000000000000000000000000000000000000",
3227 	"fffffffffffffffffffffffffff80000",
3228 	"705a4ef8ba2133729c20185c3d3a4763",
3229 
3230 	"0000000000000000000000000000000000000000000000000000000000000000",
3231 	"fffffffffffffffffffffffffffc0000",
3232 	"0861a861c3db4e94194211b77ed761b9",
3233 
3234 	"0000000000000000000000000000000000000000000000000000000000000000",
3235 	"fffffffffffffffffffffffffffe0000",
3236 	"4b00c27e8b26da7eab9d3a88dec8b031",
3237 
3238 	"0000000000000000000000000000000000000000000000000000000000000000",
3239 	"ffffffffffffffffffffffffffff0000",
3240 	"5f397bf03084820cc8810d52e5b666e9",
3241 
3242 	"0000000000000000000000000000000000000000000000000000000000000000",
3243 	"ffffffffffffffffffffffffffff8000",
3244 	"63fafabb72c07bfbd3ddc9b1203104b8",
3245 
3246 	"0000000000000000000000000000000000000000000000000000000000000000",
3247 	"ffffffffffffffffffffffffffffc000",
3248 	"683e2140585b18452dd4ffbb93c95df9",
3249 
3250 	"0000000000000000000000000000000000000000000000000000000000000000",
3251 	"ffffffffffffffffffffffffffffe000",
3252 	"286894e48e537f8763b56707d7d155c8",
3253 
3254 	"0000000000000000000000000000000000000000000000000000000000000000",
3255 	"fffffffffffffffffffffffffffff000",
3256 	"a423deabc173dcf7e2c4c53e77d37cd1",
3257 
3258 	"0000000000000000000000000000000000000000000000000000000000000000",
3259 	"fffffffffffffffffffffffffffff800",
3260 	"eb8168313e1cfdfdb5e986d5429cf172",
3261 
3262 	"0000000000000000000000000000000000000000000000000000000000000000",
3263 	"fffffffffffffffffffffffffffffc00",
3264 	"27127daafc9accd2fb334ec3eba52323",
3265 
3266 	"0000000000000000000000000000000000000000000000000000000000000000",
3267 	"fffffffffffffffffffffffffffffe00",
3268 	"ee0715b96f72e3f7a22a5064fc592f4c",
3269 
3270 	"0000000000000000000000000000000000000000000000000000000000000000",
3271 	"ffffffffffffffffffffffffffffff00",
3272 	"29ee526770f2a11dcfa989d1ce88830f",
3273 
3274 	"0000000000000000000000000000000000000000000000000000000000000000",
3275 	"ffffffffffffffffffffffffffffff80",
3276 	"0493370e054b09871130fe49af730a5a",
3277 
3278 	"0000000000000000000000000000000000000000000000000000000000000000",
3279 	"ffffffffffffffffffffffffffffffc0",
3280 	"9b7b940f6c509f9e44a4ee140448ee46",
3281 
3282 	"0000000000000000000000000000000000000000000000000000000000000000",
3283 	"ffffffffffffffffffffffffffffffe0",
3284 	"2915be4a1ecfdcbe3e023811a12bb6c7",
3285 
3286 	"0000000000000000000000000000000000000000000000000000000000000000",
3287 	"fffffffffffffffffffffffffffffff0",
3288 	"7240e524bc51d8c4d440b1be55d1062c",
3289 
3290 	"0000000000000000000000000000000000000000000000000000000000000000",
3291 	"fffffffffffffffffffffffffffffff8",
3292 	"da63039d38cb4612b2dc36ba26684b93",
3293 
3294 	"0000000000000000000000000000000000000000000000000000000000000000",
3295 	"fffffffffffffffffffffffffffffffc",
3296 	"0f59cb5a4b522e2ac56c1a64f558ad9a",
3297 
3298 	"0000000000000000000000000000000000000000000000000000000000000000",
3299 	"fffffffffffffffffffffffffffffffe",
3300 	"7bfe9d876c6d63c1d035da8fe21c409d",
3301 
3302 	"0000000000000000000000000000000000000000000000000000000000000000",
3303 	"ffffffffffffffffffffffffffffffff",
3304 	"acdace8078a32b1a182bfa4987ca1347",
3305 
3306 	/*
3307 	 * Table end marker.
3308 	 */
3309 	NULL
3310 };
3311 
3312 /*
3313  * AES known-answer tests for CBC. Order: key, IV, plaintext, ciphertext.
3314  */
3315 static const char *const KAT_AES_CBC[] = {
3316 	/*
3317 	 * From NIST validation suite "Multiblock Message Test"
3318 	 * (cbcmmt128.rsp).
3319 	 */
3320 	"1f8e4973953f3fb0bd6b16662e9a3c17",
3321 	"2fe2b333ceda8f98f4a99b40d2cd34a8",
3322 	"45cf12964fc824ab76616ae2f4bf0822",
3323 	"0f61c4d44c5147c03c195ad7e2cc12b2",
3324 
3325 	"0700d603a1c514e46b6191ba430a3a0c",
3326 	"aad1583cd91365e3bb2f0c3430d065bb",
3327 	"068b25c7bfb1f8bdd4cfc908f69dffc5ddc726a197f0e5f720f730393279be91",
3328 	"c4dc61d9725967a3020104a9738f23868527ce839aab1752fd8bdb95a82c4d00",
3329 
3330 	"3348aa51e9a45c2dbe33ccc47f96e8de",
3331 	"19153c673160df2b1d38c28060e59b96",
3332 	"9b7cee827a26575afdbb7c7a329f887238052e3601a7917456ba61251c214763d5e1847a6ad5d54127a399ab07ee3599",
3333 	"d5aed6c9622ec451a15db12819952b6752501cf05cdbf8cda34a457726ded97818e1f127a28d72db5652749f0c6afee5",
3334 
3335 	"b7f3c9576e12dd0db63e8f8fac2b9a39",
3336 	"c80f095d8bb1a060699f7c19974a1aa0",
3337 	"9ac19954ce1319b354d3220460f71c1e373f1cd336240881160cfde46ebfed2e791e8d5a1a136ebd1dc469dec00c4187722b841cdabcb22c1be8a14657da200e",
3338 	"19b9609772c63f338608bf6eb52ca10be65097f89c1e0905c42401fd47791ae2c5440b2d473116ca78bd9ff2fb6015cfd316524eae7dcb95ae738ebeae84a467",
3339 
3340 	"b6f9afbfe5a1562bba1368fc72ac9d9c",
3341 	"3f9d5ebe250ee7ce384b0d00ee849322",
3342 	"db397ec22718dbffb9c9d13de0efcd4611bf792be4fce0dc5f25d4f577ed8cdbd4eb9208d593dda3d4653954ab64f05676caa3ce9bfa795b08b67ceebc923fdc89a8c431188e9e482d8553982cf304d1",
3343 	"10ea27b19e16b93af169c4a88e06e35c99d8b420980b058e34b4b8f132b13766f72728202b089f428fecdb41c79f8aa0d0ef68f5786481cca29e2126f69bc14160f1ae2187878ba5c49cf3961e1b7ee9",
3344 
3345 	"bbe7b7ba07124ff1ae7c3416fe8b465e",
3346 	"7f65b5ee3630bed6b84202d97fb97a1e",
3347 	"2aad0c2c4306568bad7447460fd3dac054346d26feddbc9abd9110914011b4794be2a9a00a519a51a5b5124014f4ed2735480db21b434e99a911bb0b60fe0253763725b628d5739a5117b7ee3aefafc5b4c1bf446467e7bf5f78f31ff7caf187",
3348 	"3b8611bfc4973c5cd8e982b073b33184cd26110159172e44988eb5ff5661a1e16fad67258fcbfee55469267a12dc374893b4e3533d36f5634c3095583596f135aa8cd1138dc898bc5651ee35a92ebf89ab6aeb5366653bc60a70e0074fc11efe",
3349 
3350 	"89a553730433f7e6d67d16d373bd5360",
3351 	"f724558db3433a523f4e51a5bea70497",
3352 	"807bc4ea684eedcfdcca30180680b0f1ae2814f35f36d053c5aea6595a386c1442770f4d7297d8b91825ee7237241da8925dd594ccf676aecd46ca2068e8d37a3a0ec8a7d5185a201e663b5ff36ae197110188a23503763b8218826d23ced74b31e9f6e2d7fbfa6cb43420c7807a8625",
3353 	"406af1429a478c3d07e555c5287a60500d37fc39b68e5bbb9bafd6ddb223828561d6171a308d5b1a4551e8a5e7d572918d25c968d3871848d2f16635caa9847f38590b1df58ab5efb985f2c66cfaf86f61b3f9c0afad6c963c49cee9b8bc81a2ddb06c967f325515a4849eec37ce721a",
3354 
3355 	"c491ca31f91708458e29a925ec558d78",
3356 	"9ef934946e5cd0ae97bd58532cb49381",
3357 	"cb6a787e0dec56f9a165957f81af336ca6b40785d9e94093c6190e5152649f882e874d79ac5e167bd2a74ce5ae088d2ee854f6539e0a94796b1e1bd4c9fcdbc79acbef4d01eeb89776d18af71ae2a4fc47dd66df6c4dbe1d1850e466549a47b636bcc7c2b3a62495b56bb67b6d455f1eebd9bfefecbca6c7f335cfce9b45cb9d",
3358 	"7b2931f5855f717145e00f152a9f4794359b1ffcb3e55f594e33098b51c23a6c74a06c1d94fded7fd2ae42c7db7acaef5844cb33aeddc6852585ed0020a6699d2cb53809cefd169148ce42292afab063443978306c582c18b9ce0da3d084ce4d3c482cfd8fcf1a85084e89fb88b40a084d5e972466d07666126fb761f84078f2",
3359 
3360 	"f6e87d71b0104d6eb06a68dc6a71f498",
3361 	"1c245f26195b76ebebc2edcac412a2f8",
3362 	"f82bef3c73a6f7f80db285726d691db6bf55eec25a859d3ba0e0445f26b9bb3b16a3161ed1866e4dd8f2e5f8ecb4e46d74a7a78c20cdfc7bcc9e479ba7a0caba9438238ad0c01651d5d98de37f03ddce6e6b4bd4ab03cf9e8ed818aedfa1cf963b932067b97d776dce1087196e7e913f7448e38244509f0caf36bd8217e15336d35c149fd4e41707893fdb84014f8729",
3363 	"b09512f3eff9ed0d85890983a73dadbb7c3678d52581be64a8a8fc586f490f2521297a478a0598040ebd0f5509fafb0969f9d9e600eaef33b1b93eed99687b167f89a5065aac439ce46f3b8d22d30865e64e45ef8cd30b6984353a844a11c8cd60dba0e8866b3ee30d24b3fa8a643b328353e06010fa8273c8fd54ef0a2b6930e5520aae5cd5902f9b86a33592ca4365",
3364 
3365 	"2c14413751c31e2730570ba3361c786b",
3366 	"1dbbeb2f19abb448af849796244a19d7",
3367 	"40d930f9a05334d9816fe204999c3f82a03f6a0457a8c475c94553d1d116693adc618049f0a769a2eed6a6cb14c0143ec5cccdbc8dec4ce560cfd206225709326d4de7948e54d603d01b12d7fed752fb23f1aa4494fbb00130e9ded4e77e37c079042d828040c325b1a5efd15fc842e44014ca4374bf38f3c3fc3ee327733b0c8aee1abcd055772f18dc04603f7b2c1ea69ff662361f2be0a171bbdcea1e5d3f",
3368 	"6be8a12800455a320538853e0cba31bd2d80ea0c85164a4c5c261ae485417d93effe2ebc0d0a0b51d6ea18633d210cf63c0c4ddbc27607f2e81ed9113191ef86d56f3b99be6c415a4150299fb846ce7160b40b63baf1179d19275a2e83698376d28b92548c68e06e6d994e2c1501ed297014e702cdefee2f656447706009614d801de1caaf73f8b7fa56cf1ba94b631933bbe577624380850f117435a0355b2b",
3369 
3370 	/*
3371 	 * From NIST validation suite "Multiblock Message Test"
3372 	 * (cbcmmt192.rsp).
3373 	 */
3374 	"ba75f4d1d9d7cf7f551445d56cc1a8ab2a078e15e049dc2c",
3375 	"531ce78176401666aa30db94ec4a30eb",
3376 	"c51fc276774dad94bcdc1d2891ec8668",
3377 	"70dd95a14ee975e239df36ff4aee1d5d",
3378 
3379 	"eab3b19c581aa873e1981c83ab8d83bbf8025111fb2e6b21",
3380 	"f3d6667e8d4d791e60f7505ba383eb05",
3381 	"9d4e4cccd1682321856df069e3f1c6fa391a083a9fb02d59db74c14081b3acc4",
3382 	"51d44779f90d40a80048276c035cb49ca2a47bcb9b9cf7270b9144793787d53f",
3383 
3384 	"16c93bb398f1fc0cf6d68fc7a5673cdf431fa147852b4a2d",
3385 	"eaaeca2e07ddedf562f94df63f0a650f",
3386 	"c5ce958613bf741718c17444484ebaf1050ddcacb59b9590178cbe69d7ad7919608cb03af13bbe04f3506b718a301ea0",
3387 	"ed6a50e0c6921d52d6647f75d67b4fd56ace1fedb8b5a6a997b4d131640547d22c5d884a75e6752b5846b5b33a5181f4",
3388 
3389 	"067bb17b4df785697eaccf961f98e212cb75e6797ce935cb",
3390 	"8b59c9209c529ca8391c9fc0ce033c38",
3391 	"db3785a889b4bd387754da222f0e4c2d2bfe0d79e05bc910fba941beea30f1239eacf0068f4619ec01c368e986fca6b7c58e490579d29611bd10087986eff54f",
3392 	"d5f5589760bf9c762228fde236de1fa2dd2dad448db3fa9be0c4196efd46a35c84dd1ac77d9db58c95918cb317a6430a08d2fb6a8e8b0f1c9b72c7a344dc349f",
3393 
3394 	"0fd39de83e0be77a79c8a4a612e3dd9c8aae2ce35e7a2bf8",
3395 	"7e1d629b84f93b079be51f9a5f5cb23c",
3396 	"38fbda37e28fa86d9d83a4345e419dea95d28c7818ff25925db6ac3aedaf0a86154e20a4dfcc5b1b4192895393e5eb5846c88bdbd41ecf7af3104f410eaee470f5d9017ed460475f626953035a13db1f",
3397 	"edadae2f9a45ff3473e02d904c94d94a30a4d92da4deb6bcb4b0774472694571842039f21c496ef93fd658842c735f8a81fcd0aa578442ab893b18f606aed1bab11f81452dd45e9b56adf2eccf4ea095",
3398 
3399 	"e3fecc75f0075a09b383dfd389a3d33cc9b854b3b254c0f4",
3400 	"36eab883afef936cc38f63284619cd19",
3401 	"931b2f5f3a5820d53a6beaaa6431083a3488f4eb03b0f5b57ef838e1579623103bd6e6800377538b2e51ef708f3c4956432e8a8ee6a34e190642b26ad8bdae6c2af9a6c7996f3b6004d2671e41f1c9f40ee03d1c4a52b0a0654a331f15f34dce",
3402 	"75395974bd32b3665654a6c8e396b88ae34b123575872a7ab687d8e76b46df911a8a590cd01d2f5c330be3a6626e9dd3aa5e10ed14e8ff829811b6fed50f3f533ca4385a1cbca78f5c4744e50f2f8359165c2485d1324e76c3eae76a0ccac629",
3403 
3404 	"f9c27565eb07947c8cb51b79248430f7b1066c3d2fdc3d13",
3405 	"2bd67cc89ab7948d644a49672843cbd9",
3406 	"6abcc270173cf114d44847e911a050db57ba7a2e2c161c6f37ccb6aaa4677bddcaf50cad0b5f8758fcf7c0ebc650ceb5cd52cafb8f8dd3edcece55d9f1f08b9fa8f54365cf56e28b9596a7e1dd1d3418e4444a7724add4cf79d527b183ec88de4be4eeff29c80a97e54f85351cb189ee",
3407 	"ca282924a61187feb40520979106e5cc861957f23828dcb7285e0eaac8a0ca2a6b60503d63d6039f4693dba32fa1f73ae2e709ca94911f28a5edd1f30eaddd54680c43acc9c74cd90d8bb648b4e544275f47e514daa20697f66c738eb30337f017fca1a26da4d1a0cc0a0e98e2463070",
3408 
3409 	"fb09cf9e00dbf883689d079c920077c0073c31890b55bab5",
3410 	"e3c89bd097c3abddf64f4881db6dbfe2",
3411 	"c1a37683fb289467dd1b2c89efba16bbd2ee24cf18d19d44596ded2682c79a2f711c7a32bf6a24badd32a4ee637c73b7a41da6258635650f91fb9ffa45bdfc3cb122136241b3deced8996aa51ea8d3e81c9d70e006a44bc0571ed48623a0d622a93fa9da290baaedf5d9e876c94620945ff8ecc83f27379ed55cf490c5790f27",
3412 	"8158e21420f25b59d6ae943fa1cbf21f02e979f419dab0126a721b7eef55bee9ad97f5ccff7d239057bbc19a8c378142f7672f1d5e7e17d7bebcb0070e8355cace6660171a53b61816ae824a6ef69ce470b6ffd3b5bb4b438874d91d27854d3b6f25860d3868958de3307d62b1339bdddb8a318c0ce0f33c17caf0e9f6040820",
3413 
3414 	"bca6fa3c67fd294e958f66fe8bd64f45f428f5bc8e9733a7",
3415 	"92a47f2833f1450d1da41717bdc6e83c",
3416 	"5becbc31d8bead6d36ae014a5863d14a431e6b55d29ea6baaa417271716db3a33b2e506b452086dfe690834ac2de30bc41254ec5401ec47d064237c7792fdcd7914d8af20eb114756642d519021a8c75a92f6bc53d326ae9a5b7e1b10a9756574692934d9939fc399e0c203f7edf8e7e6482eadd31a0400770e897b48c6bca2b404593045080e93377358c42a0f4dede",
3417 	"926db248cc1ba20f0c57631a7c8aef094f791937b905949e3460240e8bfa6fa483115a1b310b6e4369caebc5262888377b1ddaa5800ea496a2bdff0f9a1031e7129c9a20e35621e7f0b8baca0d87030f2ae7ca8593c8599677a06fd4b26009ead08fecac24caa9cf2cad3b470c8227415a7b1e0f2eab3fad96d70a209c8bb26c627677e2531b9435ca6e3c444d195b5f",
3418 
3419 	"162ad50ee64a0702aa551f571dedc16b2c1b6a1e4d4b5eee",
3420 	"24408038161a2ccae07b029bb66355c1",
3421 	"be8abf00901363987a82cc77d0ec91697ba3857f9e4f84bd79406c138d02698f003276d0449120bef4578d78fecabe8e070e11710b3f0a2744bd52434ec70015884c181ebdfd51c604a71c52e4c0e110bc408cd462b248a80b8a8ac06bb952ac1d7faed144807f1a731b7febcaf7835762defe92eccfc7a9944e1c702cffe6bc86733ed321423121085ac02df8962bcbc1937092eebf0e90a8b20e3dd8c244ae",
3422 	"c82cf2c476dea8cb6a6e607a40d2f0391be82ea9ec84a537a6820f9afb997b76397d005424faa6a74dc4e8c7aa4a8900690f894b6d1dca80675393d2243adac762f159301e357e98b724762310cd5a7bafe1c2a030dba46fd93a9fdb89cc132ca9c17dc72031ec6822ee5a9d99dbca66c784c01b0885cbb62e29d97801927ec415a5d215158d325f9ee689437ad1b7684ad33c0d92739451ac87f39ff8c31b84",
3423 
3424 	/*
3425 	 * From NIST validation suite "Multiblock Message Test"
3426 	 * (cbcmmt256.rsp).
3427 	 */
3428 	"6ed76d2d97c69fd1339589523931f2a6cff554b15f738f21ec72dd97a7330907",
3429 	"851e8764776e6796aab722dbb644ace8",
3430 	"6282b8c05c5c1530b97d4816ca434762",
3431 	"6acc04142e100a65f51b97adf5172c41",
3432 
3433 	"dce26c6b4cfb286510da4eecd2cffe6cdf430f33db9b5f77b460679bd49d13ae",
3434 	"fdeaa134c8d7379d457175fd1a57d3fc",
3435 	"50e9eee1ac528009e8cbcd356975881f957254b13f91d7c6662d10312052eb00",
3436 	"2fa0df722a9fd3b64cb18fb2b3db55ff2267422757289413f8f657507412a64c",
3437 
3438 	"fe8901fecd3ccd2ec5fdc7c7a0b50519c245b42d611a5ef9e90268d59f3edf33",
3439 	"bd416cb3b9892228d8f1df575692e4d0",
3440 	"8d3aa196ec3d7c9b5bb122e7fe77fb1295a6da75abe5d3a510194d3a8a4157d5c89d40619716619859da3ec9b247ced9",
3441 	"608e82c7ab04007adb22e389a44797fed7de090c8c03ca8a2c5acd9e84df37fbc58ce8edb293e98f02b640d6d1d72464",
3442 
3443 	"0493ff637108af6a5b8e90ac1fdf035a3d4bafd1afb573be7ade9e8682e663e5",
3444 	"c0cd2bebccbb6c49920bd5482ac756e8",
3445 	"8b37f9148df4bb25956be6310c73c8dc58ea9714ff49b643107b34c9bff096a94fedd6823526abc27a8e0b16616eee254ab4567dd68e8ccd4c38ac563b13639c",
3446 	"05d5c77729421b08b737e41119fa4438d1f570cc772a4d6c3df7ffeda0384ef84288ce37fc4c4c7d1125a499b051364c389fd639bdda647daa3bdadab2eb5594",
3447 
3448 	"9adc8fbd506e032af7fa20cf5343719de6d1288c158c63d6878aaf64ce26ca85",
3449 	"11958dc6ab81e1c7f01631e9944e620f",
3450 	"c7917f84f747cd8c4b4fedc2219bdbc5f4d07588389d8248854cf2c2f89667a2d7bcf53e73d32684535f42318e24cd45793950b3825e5d5c5c8fcd3e5dda4ce9246d18337ef3052d8b21c5561c8b660e",
3451 	"9c99e68236bb2e929db1089c7750f1b356d39ab9d0c40c3e2f05108ae9d0c30b04832ccdbdc08ebfa426b7f5efde986ed05784ce368193bb3699bc691065ac62e258b9aa4cc557e2b45b49ce05511e65",
3452 
3453 	"73b8faf00b3302ac99855cf6f9e9e48518690a5906a4869d4dcf48d282faae2a",
3454 	"b3cb97a80a539912b8c21f450d3b9395",
3455 	"3adea6e06e42c4f041021491f2775ef6378cb08824165edc4f6448e232175b60d0345b9f9c78df6596ec9d22b7b9e76e8f3c76b32d5d67273f1d83fe7a6fc3dd3c49139170fa5701b3beac61b490f0a9e13f844640c4500f9ad3087adfb0ae10",
3456 	"ac3d6dbafe2e0f740632fd9e820bf6044cd5b1551cbb9cc03c0b25c39ccb7f33b83aacfca40a3265f2bbff879153448acacb88fcfb3bb7b10fe463a68c0109f028382e3e557b1adf02ed648ab6bb895df0205d26ebbfa9a5fd8cebd8e4bee3dc",
3457 
3458 	"9ddf3745896504ff360a51a3eb49c01b79fccebc71c3abcb94a949408b05b2c9",
3459 	"e79026639d4aa230b5ccffb0b29d79bc",
3460 	"cf52e5c3954c51b94c9e38acb8c9a7c76aebdaa9943eae0a1ce155a2efdb4d46985d935511471452d9ee64d2461cb2991d59fc0060697f9a671672163230f367fed1422316e52d29eceacb8768f56d9b80f6d278093c9a8acd3cfd7edd8ebd5c293859f64d2f8486ae1bd593c65bc014",
3461 	"34df561bd2cfebbcb7af3b4b8d21ca5258312e7e2e4e538e35ad2490b6112f0d7f148f6aa8d522a7f3c61d785bd667db0e1dc4606c318ea4f26af4fe7d11d4dcff0456511b4aed1a0d91ba4a1fd6cd9029187bc5881a5a07fe02049d39368e83139b12825bae2c7be81e6f12c61bb5c5",
3462 
3463 	"458b67bf212d20f3a57fce392065582dcefbf381aa22949f8338ab9052260e1d",
3464 	"4c12effc5963d40459602675153e9649",
3465 	"256fd73ce35ae3ea9c25dd2a9454493e96d8633fe633b56176dce8785ce5dbbb84dbf2c8a2eeb1e96b51899605e4f13bbc11b93bf6f39b3469be14858b5b720d4a522d36feed7a329c9b1e852c9280c47db8039c17c4921571a07d1864128330e09c308ddea1694e95c84500f1a61e614197e86a30ecc28df64ccb3ccf5437aa",
3466 	"90b7b9630a2378f53f501ab7beff039155008071bc8438e789932cfd3eb1299195465e6633849463fdb44375278e2fdb1310821e6492cf80ff15cb772509fb426f3aeee27bd4938882fd2ae6b5bd9d91fa4a43b17bb439ebbe59c042310163a82a5fe5388796eee35a181a1271f00be29b852d8fa759bad01ff4678f010594cd",
3467 
3468 	"d2412db0845d84e5732b8bbd642957473b81fb99ca8bff70e7920d16c1dbec89",
3469 	"51c619fcf0b23f0c7925f400a6cacb6d",
3470 	"026006c4a71a180c9929824d9d095b8faaa86fc4fa25ecac61d85ff6de92dfa8702688c02a282c1b8af4449707f22d75e91991015db22374c95f8f195d5bb0afeb03040ff8965e0e1339dba5653e174f8aa5a1b39fe3ac839ce307a4e44b4f8f1b0063f738ec18acdbff2ebfe07383e734558723e741f0a1836dafdf9de82210a9248bc113b3c1bc8b4e252ca01bd803",
3471 	"0254b23463bcabec5a395eb74c8fb0eb137a07bc6f5e9f61ec0b057de305714f8fa294221c91a159c315939b81e300ee902192ec5f15254428d8772f79324ec43298ca21c00b370273ee5e5ed90e43efa1e05a5d171209fe34f9f29237dba2a6726650fd3b1321747d1208863c6c3c6b3e2d879ab5f25782f08ba8f2abbe63e0bedb4a227e81afb36bb6645508356d34",
3472 
3473 	"48be597e632c16772324c8d3fa1d9c5a9ecd010f14ec5d110d3bfec376c5532b",
3474 	"d6d581b8cf04ebd3b6eaa1b53f047ee1",
3475 	"0c63d413d3864570e70bb6618bf8a4b9585586688c32bba0a5ecc1362fada74ada32c52acfd1aa7444ba567b4e7daaecf7cc1cb29182af164ae5232b002868695635599807a9a7f07a1f137e97b1e1c9dabc89b6a5e4afa9db5855edaa575056a8f4f8242216242bb0c256310d9d329826ac353d715fa39f80cec144d6424558f9f70b98c920096e0f2c855d594885a00625880e9dfb734163cecef72cf030b8",
3476 	"fc5873e50de8faf4c6b84ba707b0854e9db9ab2e9f7d707fbba338c6843a18fc6facebaf663d26296fb329b4d26f18494c79e09e779647f9bafa87489630d79f4301610c2300c19dbf3148b7cac8c4f4944102754f332e92b6f7c5e75bc6179eb877a078d4719009021744c14f13fd2a55a2b9c44d18000685a845a4f632c7c56a77306efa66a24d05d088dcd7c13fe24fc447275965db9e4d37fbc9304448cd",
3477 
3478 	/*
3479 	 * End-of-table marker.
3480 	 */
3481 	NULL
3482 };
3483 
3484 /*
3485  * AES known-answer tests for CTR. Order: key, IV, plaintext, ciphertext.
3486  */
3487 static const char *const KAT_AES_CTR[] = {
3488 	/*
3489 	 * From RFC 3686.
3490 	 */
3491 	"ae6852f8121067cc4bf7a5765577f39e",
3492 	"000000300000000000000000",
3493 	"53696e676c6520626c6f636b206d7367",
3494 	"e4095d4fb7a7b3792d6175a3261311b8",
3495 
3496 	"7e24067817fae0d743d6ce1f32539163",
3497 	"006cb6dbc0543b59da48d90b",
3498 	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
3499 	"5104a106168a72d9790d41ee8edad388eb2e1efc46da57c8fce630df9141be28",
3500 
3501 	"7691be035e5020a8ac6e618529f9a0dc",
3502 	"00e0017b27777f3f4a1786f0",
3503 	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
3504 	"c1cf48a89f2ffdd9cf4652e9efdb72d74540a42bde6d7836d59a5ceaaef3105325b2072f",
3505 
3506 	"16af5b145fc9f579c175f93e3bfb0eed863d06ccfdb78515",
3507 	"0000004836733c147d6d93cb",
3508 	"53696e676c6520626c6f636b206d7367",
3509 	"4b55384fe259c9c84e7935a003cbe928",
3510 
3511 	"7c5cb2401b3dc33c19e7340819e0f69c678c3db8e6f6a91a",
3512 	"0096b03b020c6eadc2cb500d",
3513 	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
3514 	"453243fc609b23327edfaafa7131cd9f8490701c5ad4a79cfc1fe0ff42f4fb00",
3515 
3516 	"02bf391ee8ecb159b959617b0965279bf59b60a786d3e0fe",
3517 	"0007bdfd5cbd60278dcc0912",
3518 	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
3519 	"96893fc55e5c722f540b7dd1ddf7e758d288bc95c69165884536c811662f2188abee0935",
3520 
3521 	"776beff2851db06f4c8a0542c8696f6c6a81af1eec96b4d37fc1d689e6c1c104",
3522 	"00000060db5672c97aa8f0b2",
3523 	"53696e676c6520626c6f636b206d7367",
3524 	"145ad01dbf824ec7560863dc71e3e0c0",
3525 
3526 	"f6d66d6bd52d59bb0796365879eff886c66dd51a5b6a99744b50590c87a23884",
3527 	"00faac24c1585ef15a43d875",
3528 	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
3529 	"f05e231b3894612c49ee000b804eb2a9b8306b508f839d6a5530831d9344af1c",
3530 
3531 	"ff7a617ce69148e4f1726e2f43581de2aa62d9f805532edff1eed687fb54153d",
3532 	"001cc5b751a51d70a1c11148",
3533 	"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223",
3534 	"eb6c52821d0bbbf7ce7594462aca4faab407df866569fd07f48cc0b583d6071f1ec0e6b8",
3535 
3536 	/*
3537 	 * End-of-table marker.
3538 	 */
3539 	NULL
3540 };
3541 
3542 static void
3543 monte_carlo_AES_encrypt(const br_block_cbcenc_class *ve,
3544 	char *skey, char *splain, char *scipher)
3545 {
3546 	unsigned char key[32];
3547 	unsigned char buf[16];
3548 	unsigned char pbuf[16];
3549 	unsigned char cipher[16];
3550 	size_t key_len;
3551 	int i, j, k;
3552 	br_aes_gen_cbcenc_keys v_ec;
3553 	const br_block_cbcenc_class **ec;
3554 
3555 	ec = &v_ec.vtable;
3556 	key_len = hextobin(key, skey);
3557 	hextobin(buf, splain);
3558 	hextobin(cipher, scipher);
3559 	for (i = 0; i < 100; i ++) {
3560 		ve->init(ec, key, key_len);
3561 		for (j = 0; j < 1000; j ++) {
3562 			unsigned char iv[16];
3563 
3564 			memcpy(pbuf, buf, sizeof buf);
3565 			memset(iv, 0, sizeof iv);
3566 			ve->run(ec, iv, buf, sizeof buf);
3567 		}
3568 		switch (key_len) {
3569 		case 16:
3570 			for (k = 0; k < 16; k ++) {
3571 				key[k] ^= buf[k];
3572 			}
3573 			break;
3574 		case 24:
3575 			for (k = 0; k < 8; k ++) {
3576 				key[k] ^= pbuf[8 + k];
3577 			}
3578 			for (k = 0; k < 16; k ++) {
3579 				key[8 + k] ^= buf[k];
3580 			}
3581 			break;
3582 		default:
3583 			for (k = 0; k < 16; k ++) {
3584 				key[k] ^= pbuf[k];
3585 				key[16 + k] ^= buf[k];
3586 			}
3587 			break;
3588 		}
3589 		printf(".");
3590 		fflush(stdout);
3591 	}
3592 	printf(" ");
3593 	fflush(stdout);
3594 	check_equals("MC AES encrypt", buf, cipher, sizeof buf);
3595 }
3596 
3597 static void
3598 monte_carlo_AES_decrypt(const br_block_cbcdec_class *vd,
3599 	char *skey, char *scipher, char *splain)
3600 {
3601 	unsigned char key[32];
3602 	unsigned char buf[16];
3603 	unsigned char pbuf[16];
3604 	unsigned char plain[16];
3605 	size_t key_len;
3606 	int i, j, k;
3607 	br_aes_gen_cbcdec_keys v_dc;
3608 	const br_block_cbcdec_class **dc;
3609 
3610 	dc = &v_dc.vtable;
3611 	key_len = hextobin(key, skey);
3612 	hextobin(buf, scipher);
3613 	hextobin(plain, splain);
3614 	for (i = 0; i < 100; i ++) {
3615 		vd->init(dc, key, key_len);
3616 		for (j = 0; j < 1000; j ++) {
3617 			unsigned char iv[16];
3618 
3619 			memcpy(pbuf, buf, sizeof buf);
3620 			memset(iv, 0, sizeof iv);
3621 			vd->run(dc, iv, buf, sizeof buf);
3622 		}
3623 		switch (key_len) {
3624 		case 16:
3625 			for (k = 0; k < 16; k ++) {
3626 				key[k] ^= buf[k];
3627 			}
3628 			break;
3629 		case 24:
3630 			for (k = 0; k < 8; k ++) {
3631 				key[k] ^= pbuf[8 + k];
3632 			}
3633 			for (k = 0; k < 16; k ++) {
3634 				key[8 + k] ^= buf[k];
3635 			}
3636 			break;
3637 		default:
3638 			for (k = 0; k < 16; k ++) {
3639 				key[k] ^= pbuf[k];
3640 				key[16 + k] ^= buf[k];
3641 			}
3642 			break;
3643 		}
3644 		printf(".");
3645 		fflush(stdout);
3646 	}
3647 	printf(" ");
3648 	fflush(stdout);
3649 	check_equals("MC AES decrypt", buf, plain, sizeof buf);
3650 }
3651 
3652 static void
3653 test_AES_generic(char *name,
3654 	const br_block_cbcenc_class *ve,
3655 	const br_block_cbcdec_class *vd,
3656 	const br_block_ctr_class *vc,
3657 	int with_MC, int with_CBC)
3658 {
3659 	size_t u;
3660 
3661 	printf("Test %s: ", name);
3662 	fflush(stdout);
3663 
3664 	if (ve->block_size != 16 || vd->block_size != 16
3665 		|| ve->log_block_size != 4 || vd->log_block_size != 4)
3666 	{
3667 		fprintf(stderr, "%s failed: wrong block size\n", name);
3668 		exit(EXIT_FAILURE);
3669 	}
3670 
3671 	for (u = 0; KAT_AES[u]; u += 3) {
3672 		unsigned char key[32];
3673 		unsigned char plain[16];
3674 		unsigned char cipher[16];
3675 		unsigned char buf[16];
3676 		unsigned char iv[16];
3677 		size_t key_len;
3678 		br_aes_gen_cbcenc_keys v_ec;
3679 		br_aes_gen_cbcdec_keys v_dc;
3680 		const br_block_cbcenc_class **ec;
3681 		const br_block_cbcdec_class **dc;
3682 
3683 		ec = &v_ec.vtable;
3684 		dc = &v_dc.vtable;
3685 		key_len = hextobin(key, KAT_AES[u]);
3686 		hextobin(plain, KAT_AES[u + 1]);
3687 		hextobin(cipher, KAT_AES[u + 2]);
3688 		ve->init(ec, key, key_len);
3689 		memcpy(buf, plain, sizeof plain);
3690 		memset(iv, 0, sizeof iv);
3691 		ve->run(ec, iv, buf, sizeof buf);
3692 		check_equals("KAT AES encrypt", buf, cipher, sizeof cipher);
3693 		vd->init(dc, key, key_len);
3694 		memset(iv, 0, sizeof iv);
3695 		vd->run(dc, iv, buf, sizeof buf);
3696 		check_equals("KAT AES decrypt", buf, plain, sizeof plain);
3697 	}
3698 
3699 	if (with_CBC) {
3700 		for (u = 0; KAT_AES_CBC[u]; u += 4) {
3701 			unsigned char key[32];
3702 			unsigned char ivref[16];
3703 			unsigned char plain[200];
3704 			unsigned char cipher[200];
3705 			unsigned char buf[200];
3706 			unsigned char iv[16];
3707 			size_t key_len, data_len, v;
3708 			br_aes_gen_cbcenc_keys v_ec;
3709 			br_aes_gen_cbcdec_keys v_dc;
3710 			const br_block_cbcenc_class **ec;
3711 			const br_block_cbcdec_class **dc;
3712 
3713 			ec = &v_ec.vtable;
3714 			dc = &v_dc.vtable;
3715 			key_len = hextobin(key, KAT_AES_CBC[u]);
3716 			hextobin(ivref, KAT_AES_CBC[u + 1]);
3717 			data_len = hextobin(plain, KAT_AES_CBC[u + 2]);
3718 			hextobin(cipher, KAT_AES_CBC[u + 3]);
3719 			ve->init(ec, key, key_len);
3720 
3721 			memcpy(buf, plain, data_len);
3722 			memcpy(iv, ivref, 16);
3723 			ve->run(ec, iv, buf, data_len);
3724 			check_equals("KAT CBC AES encrypt",
3725 				buf, cipher, data_len);
3726 			vd->init(dc, key, key_len);
3727 			memcpy(iv, ivref, 16);
3728 			vd->run(dc, iv, buf, data_len);
3729 			check_equals("KAT CBC AES decrypt",
3730 				buf, plain, data_len);
3731 
3732 			memcpy(buf, plain, data_len);
3733 			memcpy(iv, ivref, 16);
3734 			for (v = 0; v < data_len; v += 16) {
3735 				ve->run(ec, iv, buf + v, 16);
3736 			}
3737 			check_equals("KAT CBC AES encrypt (2)",
3738 				buf, cipher, data_len);
3739 			memcpy(iv, ivref, 16);
3740 			for (v = 0; v < data_len; v += 16) {
3741 				vd->run(dc, iv, buf + v, 16);
3742 			}
3743 			check_equals("KAT CBC AES decrypt (2)",
3744 				buf, plain, data_len);
3745 		}
3746 
3747 		/*
3748 		 * We want to check proper IV management for CBC:
3749 		 * encryption and decryption must properly copy the _last_
3750 		 * encrypted block as new IV, for all sizes.
3751 		 */
3752 		for (u = 1; u <= 35; u ++) {
3753 			br_hmac_drbg_context rng;
3754 			unsigned char x;
3755 			size_t key_len, data_len;
3756 			size_t v;
3757 
3758 			br_hmac_drbg_init(&rng, &br_sha256_vtable,
3759 				"seed for AES/CBC", 16);
3760 			x = u;
3761 			br_hmac_drbg_update(&rng, &x, 1);
3762 			data_len = u << 4;
3763 			for (key_len = 16; key_len <= 32; key_len += 16) {
3764 				unsigned char key[32];
3765 				unsigned char iv[16], iv1[16], iv2[16];
3766 				unsigned char plain[35 * 16];
3767 				unsigned char tmp1[sizeof plain];
3768 				unsigned char tmp2[sizeof plain];
3769 				br_aes_gen_cbcenc_keys v_ec;
3770 				br_aes_gen_cbcdec_keys v_dc;
3771 				const br_block_cbcenc_class **ec;
3772 				const br_block_cbcdec_class **dc;
3773 
3774 				br_hmac_drbg_generate(&rng, key, key_len);
3775 				br_hmac_drbg_generate(&rng, iv, sizeof iv);
3776 				br_hmac_drbg_generate(&rng, plain, data_len);
3777 
3778 				ec = &v_ec.vtable;
3779 				ve->init(ec, key, key_len);
3780 				memcpy(iv1, iv, sizeof iv);
3781 				memcpy(tmp1, plain, data_len);
3782 				ve->run(ec, iv1, tmp1, data_len);
3783 				check_equals("IV CBC AES (1)",
3784 					tmp1 + data_len - 16, iv1, 16);
3785 				memcpy(iv2, iv, sizeof iv);
3786 				memcpy(tmp2, plain, data_len);
3787 				for (v = 0; v < data_len; v += 16) {
3788 					ve->run(ec, iv2, tmp2 + v, 16);
3789 				}
3790 				check_equals("IV CBC AES (2)",
3791 					tmp2 + data_len - 16, iv2, 16);
3792 				check_equals("IV CBC AES (3)",
3793 					tmp1, tmp2, data_len);
3794 
3795 				dc = &v_dc.vtable;
3796 				vd->init(dc, key, key_len);
3797 				memcpy(iv1, iv, sizeof iv);
3798 				vd->run(dc, iv1, tmp1, data_len);
3799 				check_equals("IV CBC AES (4)", iv1, iv2, 16);
3800 				check_equals("IV CBC AES (5)",
3801 					tmp1, plain, data_len);
3802 				memcpy(iv2, iv, sizeof iv);
3803 				for (v = 0; v < data_len; v += 16) {
3804 					vd->run(dc, iv2, tmp2 + v, 16);
3805 				}
3806 				check_equals("IV CBC AES (6)", iv1, iv2, 16);
3807 				check_equals("IV CBC AES (7)",
3808 					tmp2, plain, data_len);
3809 			}
3810 		}
3811 	}
3812 
3813 	if (vc != NULL) {
3814 		if (vc->block_size != 16 || vc->log_block_size != 4) {
3815 			fprintf(stderr, "%s failed: wrong block size\n", name);
3816 			exit(EXIT_FAILURE);
3817 		}
3818 		for (u = 0; KAT_AES_CTR[u]; u += 4) {
3819 			unsigned char key[32];
3820 			unsigned char iv[12];
3821 			unsigned char plain[200];
3822 			unsigned char cipher[200];
3823 			unsigned char buf[200];
3824 			size_t key_len, data_len, v;
3825 			uint32_t c;
3826 			br_aes_gen_ctr_keys v_xc;
3827 			const br_block_ctr_class **xc;
3828 
3829 			xc = &v_xc.vtable;
3830 			key_len = hextobin(key, KAT_AES_CTR[u]);
3831 			hextobin(iv, KAT_AES_CTR[u + 1]);
3832 			data_len = hextobin(plain, KAT_AES_CTR[u + 2]);
3833 			hextobin(cipher, KAT_AES_CTR[u + 3]);
3834 			vc->init(xc, key, key_len);
3835 			memcpy(buf, plain, data_len);
3836 			vc->run(xc, iv, 1, buf, data_len);
3837 			check_equals("KAT CTR AES (1)", buf, cipher, data_len);
3838 			vc->run(xc, iv, 1, buf, data_len);
3839 			check_equals("KAT CTR AES (2)", buf, plain, data_len);
3840 
3841 			memcpy(buf, plain, data_len);
3842 			c = 1;
3843 			for (v = 0; v < data_len; v += 32) {
3844 				size_t clen;
3845 
3846 				clen = data_len - v;
3847 				if (clen > 32) {
3848 					clen = 32;
3849 				}
3850 				c = vc->run(xc, iv, c, buf + v, clen);
3851 			}
3852 			check_equals("KAT CTR AES (3)", buf, cipher, data_len);
3853 
3854 			memcpy(buf, plain, data_len);
3855 			c = 1;
3856 			for (v = 0; v < data_len; v += 16) {
3857 				size_t clen;
3858 
3859 				clen = data_len - v;
3860 				if (clen > 16) {
3861 					clen = 16;
3862 				}
3863 				c = vc->run(xc, iv, c, buf + v, clen);
3864 			}
3865 			check_equals("KAT CTR AES (4)", buf, cipher, data_len);
3866 		}
3867 	}
3868 
3869 	if (with_MC) {
3870 		monte_carlo_AES_encrypt(
3871 			ve,
3872 			"139a35422f1d61de3c91787fe0507afd",
3873 			"b9145a768b7dc489a096b546f43b231f",
3874 			"fb2649694783b551eacd9d5db6126d47");
3875 		monte_carlo_AES_decrypt(
3876 			vd,
3877 			"0c60e7bf20ada9baa9e1ddf0d1540726",
3878 			"b08a29b11a500ea3aca42c36675b9785",
3879 			"d1d2bfdc58ffcad2341b095bce55221e");
3880 
3881 		monte_carlo_AES_encrypt(
3882 			ve,
3883 			"b9a63e09e1dfc42e93a90d9bad739e5967aef672eedd5da9",
3884 			"85a1f7a58167b389cddc8a9ff175ee26",
3885 			"5d1196da8f184975e240949a25104554");
3886 		monte_carlo_AES_decrypt(
3887 			vd,
3888 			"4b97585701c03fbebdfa8555024f589f1482c58a00fdd9fd",
3889 			"d0bd0e02ded155e4516be83f42d347a4",
3890 			"b63ef1b79507a62eba3dafcec54a6328");
3891 
3892 		monte_carlo_AES_encrypt(
3893 			ve,
3894 			"f9e8389f5b80712e3886cc1fa2d28a3b8c9cd88a2d4a54c6aa86ce0fef944be0",
3895 			"b379777f9050e2a818f2940cbbd9aba4",
3896 			"c5d2cb3d5b7ff0e23e308967ee074825");
3897 		monte_carlo_AES_decrypt(
3898 			vd,
3899 			"2b09ba39b834062b9e93f48373b8dd018dedf1e5ba1b8af831ebbacbc92a2643",
3900 			"89649bd0115f30bd878567610223a59d",
3901 			"e3d3868f578caf34e36445bf14cefc68");
3902 	}
3903 
3904 	printf("done.\n");
3905 	fflush(stdout);
3906 }
3907 
3908 static void
3909 test_AES_big(void)
3910 {
3911 	test_AES_generic("AES_big",
3912 		&br_aes_big_cbcenc_vtable,
3913 		&br_aes_big_cbcdec_vtable,
3914 		&br_aes_big_ctr_vtable,
3915 		1, 1);
3916 }
3917 
3918 static void
3919 test_AES_small(void)
3920 {
3921 	test_AES_generic("AES_small",
3922 		&br_aes_small_cbcenc_vtable,
3923 		&br_aes_small_cbcdec_vtable,
3924 		&br_aes_small_ctr_vtable,
3925 		1, 1);
3926 }
3927 
3928 static void
3929 test_AES_ct(void)
3930 {
3931 	test_AES_generic("AES_ct",
3932 		&br_aes_ct_cbcenc_vtable,
3933 		&br_aes_ct_cbcdec_vtable,
3934 		&br_aes_ct_ctr_vtable,
3935 		1, 1);
3936 }
3937 
3938 static void
3939 test_AES_ct64(void)
3940 {
3941 	test_AES_generic("AES_ct64",
3942 		&br_aes_ct64_cbcenc_vtable,
3943 		&br_aes_ct64_cbcdec_vtable,
3944 		&br_aes_ct64_ctr_vtable,
3945 		1, 1);
3946 }
3947 
3948 static void
3949 test_AES_x86ni(void)
3950 {
3951 	const br_block_cbcenc_class *x_cbcenc;
3952 	const br_block_cbcdec_class *x_cbcdec;
3953 	const br_block_ctr_class *x_ctr;
3954 	int hcbcenc, hcbcdec, hctr;
3955 
3956 	x_cbcenc = br_aes_x86ni_cbcenc_get_vtable();
3957 	x_cbcdec = br_aes_x86ni_cbcdec_get_vtable();
3958 	x_ctr = br_aes_x86ni_ctr_get_vtable();
3959 	hcbcenc = (x_cbcenc != NULL);
3960 	hcbcdec = (x_cbcdec != NULL);
3961 	hctr = (x_ctr != NULL);
3962 	if (hcbcenc != hctr || hcbcdec != hctr) {
3963 		fprintf(stderr, "AES_x86ni availability mismatch (%d/%d/%d)\n",
3964 			hcbcenc, hcbcdec, hctr);
3965 		exit(EXIT_FAILURE);
3966 	}
3967 	if (hctr) {
3968 		test_AES_generic("AES_x86ni",
3969 			x_cbcenc, x_cbcdec, x_ctr, 1, 1);
3970 	} else {
3971 		printf("Test AES_x86ni: UNAVAILABLE\n");
3972 	}
3973 }
3974 
3975 static void
3976 test_AES_pwr8(void)
3977 {
3978 	const br_block_cbcenc_class *x_cbcenc;
3979 	const br_block_cbcdec_class *x_cbcdec;
3980 	const br_block_ctr_class *x_ctr;
3981 	int hcbcenc, hcbcdec, hctr;
3982 
3983 	x_cbcenc = br_aes_pwr8_cbcenc_get_vtable();
3984 	x_cbcdec = br_aes_pwr8_cbcdec_get_vtable();
3985 	x_ctr = br_aes_pwr8_ctr_get_vtable();
3986 	hcbcenc = (x_cbcenc != NULL);
3987 	hcbcdec = (x_cbcdec != NULL);
3988 	hctr = (x_ctr != NULL);
3989 	if (hcbcenc != hctr || hcbcdec != hctr) {
3990 		fprintf(stderr, "AES_pwr8 availability mismatch (%d/%d/%d)\n",
3991 			hcbcenc, hcbcdec, hctr);
3992 		exit(EXIT_FAILURE);
3993 	}
3994 	if (hctr) {
3995 		test_AES_generic("AES_pwr8",
3996 			x_cbcenc, x_cbcdec, x_ctr, 1, 1);
3997 	} else {
3998 		printf("Test AES_pwr8: UNAVAILABLE\n");
3999 	}
4000 }
4001 
4002 /*
4003  * Custom CTR + CBC-MAC AES implementation. Can also do CTR-only, and
4004  * CBC-MAC-only. The 'aes_big' implementation (CTR) is used. This is
4005  * meant for comparisons.
4006  *
4007  * If 'ctr' is NULL then no encryption/decryption is done; otherwise,
4008  * CTR encryption/decryption is performed (full-block counter) and the
4009  * 'ctr' array is updated with the new counter value.
4010  *
4011  * If 'cbcmac' is NULL then no CBC-MAC is done; otherwise, CBC-MAC is
4012  * applied on the encrypted data, with 'cbcmac' as IV and destination
4013  * buffer for the output. If 'ctr' is not NULL and 'encrypt' is non-zero,
4014  * then CBC-MAC is computed over the result of CTR processing; otherwise,
4015  * CBC-MAC is computed over the input data itself.
4016  */
4017 static void
4018 do_aes_ctrcbc(const void *key, size_t key_len, int encrypt,
4019 	void *ctr, void *cbcmac, unsigned char *data, size_t len)
4020 {
4021 	br_aes_big_ctr_keys bc;
4022 	int i;
4023 
4024 	br_aes_big_ctr_init(&bc, key, key_len);
4025 	for (i = 0; i < 2; i ++) {
4026 		/*
4027 		 * CBC-MAC is computed on the encrypted data, so in
4028 		 * first pass if decrypting, second pass if encrypting.
4029 		 */
4030 		if (cbcmac != NULL
4031 			&& ((encrypt && i == 1) || (!encrypt && i == 0)))
4032 		{
4033 			unsigned char zz[16];
4034 			size_t u;
4035 
4036 			memcpy(zz, cbcmac, sizeof zz);
4037 			for (u = 0; u < len; u += 16) {
4038 				unsigned char tmp[16];
4039 				size_t v;
4040 
4041 				for (v = 0; v < 16; v ++) {
4042 					tmp[v] = zz[v] ^ data[u + v];
4043 				}
4044 				memset(zz, 0, sizeof zz);
4045 				br_aes_big_ctr_run(&bc,
4046 					tmp, br_dec32be(tmp + 12), zz, 16);
4047 			}
4048 			memcpy(cbcmac, zz, sizeof zz);
4049 		}
4050 
4051 		/*
4052 		 * CTR encryption/decryption is done only in the first pass.
4053 		 * We process data block per block, because the CTR-only
4054 		 * class uses a 32-bit counter, while the CTR+CBC-MAC
4055 		 * class uses a 128-bit counter.
4056 		 */
4057 		if (ctr != NULL && i == 0) {
4058 			unsigned char zz[16];
4059 			size_t u;
4060 
4061 			memcpy(zz, ctr, sizeof zz);
4062 			for (u = 0; u < len; u += 16) {
4063 				int i;
4064 
4065 				br_aes_big_ctr_run(&bc,
4066 					zz, br_dec32be(zz + 12), data + u, 16);
4067 				for (i = 15; i >= 0; i --) {
4068 					zz[i] = (zz[i] + 1) & 0xFF;
4069 					if (zz[i] != 0) {
4070 						break;
4071 					}
4072 				}
4073 			}
4074 			memcpy(ctr, zz, sizeof zz);
4075 		}
4076 	}
4077 }
4078 
4079 static void
4080 test_AES_CTRCBC_inner(const char *name, const br_block_ctrcbc_class *vt)
4081 {
4082 	br_hmac_drbg_context rng;
4083 	size_t key_len;
4084 
4085 	printf("Test AES CTR/CBC-MAC %s: ", name);
4086 	fflush(stdout);
4087 
4088 	br_hmac_drbg_init(&rng, &br_sha256_vtable, name, strlen(name));
4089 	for (key_len = 16; key_len <= 32; key_len += 8) {
4090 		br_aes_gen_ctrcbc_keys bc;
4091 		unsigned char key[32];
4092 		size_t data_len;
4093 
4094 		br_hmac_drbg_generate(&rng, key, key_len);
4095 		vt->init(&bc.vtable, key, key_len);
4096 		for (data_len = 0; data_len <= 512; data_len += 16) {
4097 			unsigned char plain[512];
4098 			unsigned char data1[sizeof plain];
4099 			unsigned char data2[sizeof plain];
4100 			unsigned char ctr[16], cbcmac[16];
4101 			unsigned char ctr1[16], cbcmac1[16];
4102 			unsigned char ctr2[16], cbcmac2[16];
4103 			int i;
4104 
4105 			br_hmac_drbg_generate(&rng, plain, data_len);
4106 
4107 			for (i = 0; i <= 16; i ++) {
4108 				if (i == 0) {
4109 					br_hmac_drbg_generate(&rng, ctr, 16);
4110 				} else {
4111 					memset(ctr, 0, i - 1);
4112 					memset(ctr + i - 1, 0xFF, 17 - i);
4113 				}
4114 				br_hmac_drbg_generate(&rng, cbcmac, 16);
4115 
4116 				memcpy(data1, plain, data_len);
4117 				memcpy(ctr1, ctr, 16);
4118 				vt->ctr(&bc.vtable, ctr1, data1, data_len);
4119 				memcpy(data2, plain, data_len);
4120 				memcpy(ctr2, ctr, 16);
4121 				do_aes_ctrcbc(key, key_len, 1,
4122 					ctr2, NULL, data2, data_len);
4123 				check_equals("CTR-only data",
4124 					data1, data2, data_len);
4125 				check_equals("CTR-only counter",
4126 					ctr1, ctr2, 16);
4127 
4128 				memcpy(data1, plain, data_len);
4129 				memcpy(cbcmac1, cbcmac, 16);
4130 				vt->mac(&bc.vtable, cbcmac1, data1, data_len);
4131 				memcpy(data2, plain, data_len);
4132 				memcpy(cbcmac2, cbcmac, 16);
4133 				do_aes_ctrcbc(key, key_len, 1,
4134 					NULL, cbcmac2, data2, data_len);
4135 				check_equals("CBC-MAC-only",
4136 					cbcmac1, cbcmac2, 16);
4137 
4138 				memcpy(data1, plain, data_len);
4139 				memcpy(ctr1, ctr, 16);
4140 				memcpy(cbcmac1, cbcmac, 16);
4141 				vt->encrypt(&bc.vtable,
4142 					ctr1, cbcmac1, data1, data_len);
4143 				memcpy(data2, plain, data_len);
4144 				memcpy(ctr2, ctr, 16);
4145 				memcpy(cbcmac2, cbcmac, 16);
4146 				do_aes_ctrcbc(key, key_len, 1,
4147 					ctr2, cbcmac2, data2, data_len);
4148 				check_equals("encrypt: combined data",
4149 					data1, data2, data_len);
4150 				check_equals("encrypt: combined counter",
4151 					ctr1, ctr2, 16);
4152 				check_equals("encrypt: combined CBC-MAC",
4153 					cbcmac1, cbcmac2, 16);
4154 
4155 				memcpy(ctr1, ctr, 16);
4156 				memcpy(cbcmac1, cbcmac, 16);
4157 				vt->decrypt(&bc.vtable,
4158 					ctr1, cbcmac1, data1, data_len);
4159 				memcpy(ctr2, ctr, 16);
4160 				memcpy(cbcmac2, cbcmac, 16);
4161 				do_aes_ctrcbc(key, key_len, 0,
4162 					ctr2, cbcmac2, data2, data_len);
4163 				check_equals("decrypt: combined data",
4164 					data1, data2, data_len);
4165 				check_equals("decrypt: combined counter",
4166 					ctr1, ctr2, 16);
4167 				check_equals("decrypt: combined CBC-MAC",
4168 					cbcmac1, cbcmac2, 16);
4169 			}
4170 
4171 			printf(".");
4172 			fflush(stdout);
4173 		}
4174 
4175 		printf(" ");
4176 		fflush(stdout);
4177 	}
4178 
4179 	printf("done.\n");
4180 	fflush(stdout);
4181 }
4182 
4183 static void
4184 test_AES_CTRCBC_big(void)
4185 {
4186 	test_AES_CTRCBC_inner("big", &br_aes_big_ctrcbc_vtable);
4187 }
4188 
4189 static void
4190 test_AES_CTRCBC_small(void)
4191 {
4192 	test_AES_CTRCBC_inner("small", &br_aes_small_ctrcbc_vtable);
4193 }
4194 
4195 static void
4196 test_AES_CTRCBC_ct(void)
4197 {
4198 	test_AES_CTRCBC_inner("ct", &br_aes_ct_ctrcbc_vtable);
4199 }
4200 
4201 static void
4202 test_AES_CTRCBC_ct64(void)
4203 {
4204 	test_AES_CTRCBC_inner("ct64", &br_aes_ct64_ctrcbc_vtable);
4205 }
4206 
4207 static void
4208 test_AES_CTRCBC_x86ni(void)
4209 {
4210 	const br_block_ctrcbc_class *vt;
4211 
4212 	vt = br_aes_x86ni_ctrcbc_get_vtable();
4213 	if (vt != NULL) {
4214 		test_AES_CTRCBC_inner("x86ni", vt);
4215 	} else {
4216 		printf("Test AES CTR/CBC-MAC x86ni: UNAVAILABLE\n");
4217 	}
4218 }
4219 
4220 static void
4221 test_AES_CTRCBC_pwr8(void)
4222 {
4223 	const br_block_ctrcbc_class *vt;
4224 
4225 	vt = br_aes_pwr8_ctrcbc_get_vtable();
4226 	if (vt != NULL) {
4227 		test_AES_CTRCBC_inner("pwr8", vt);
4228 	} else {
4229 		printf("Test AES CTR/CBC-MAC pwr8: UNAVAILABLE\n");
4230 	}
4231 }
4232 
4233 /*
4234  * DES known-answer tests. Order: plaintext, key, ciphertext.
4235  * (mostly from NIST SP 800-20).
4236  */
4237 static const char *const KAT_DES[] = {
4238 	"10316E028C8F3B4A", "0000000000000000", "82DCBAFBDEAB6602",
4239 	"8000000000000000", "0000000000000000", "95A8D72813DAA94D",
4240 	"4000000000000000", "0000000000000000", "0EEC1487DD8C26D5",
4241 	"2000000000000000", "0000000000000000", "7AD16FFB79C45926",
4242 	"1000000000000000", "0000000000000000", "D3746294CA6A6CF3",
4243 	"0800000000000000", "0000000000000000", "809F5F873C1FD761",
4244 	"0400000000000000", "0000000000000000", "C02FAFFEC989D1FC",
4245 	"0200000000000000", "0000000000000000", "4615AA1D33E72F10",
4246 	"0100000000000000", "0000000000000000", "8CA64DE9C1B123A7",
4247 	"0080000000000000", "0000000000000000", "2055123350C00858",
4248 	"0040000000000000", "0000000000000000", "DF3B99D6577397C8",
4249 	"0020000000000000", "0000000000000000", "31FE17369B5288C9",
4250 	"0010000000000000", "0000000000000000", "DFDD3CC64DAE1642",
4251 	"0008000000000000", "0000000000000000", "178C83CE2B399D94",
4252 	"0004000000000000", "0000000000000000", "50F636324A9B7F80",
4253 	"0002000000000000", "0000000000000000", "A8468EE3BC18F06D",
4254 	"0001000000000000", "0000000000000000", "8CA64DE9C1B123A7",
4255 	"0000800000000000", "0000000000000000", "A2DC9E92FD3CDE92",
4256 	"0000400000000000", "0000000000000000", "CAC09F797D031287",
4257 	"0000200000000000", "0000000000000000", "90BA680B22AEB525",
4258 	"0000100000000000", "0000000000000000", "CE7A24F350E280B6",
4259 	"0000080000000000", "0000000000000000", "882BFF0AA01A0B87",
4260 	"0000040000000000", "0000000000000000", "25610288924511C2",
4261 	"0000020000000000", "0000000000000000", "C71516C29C75D170",
4262 	"0000010000000000", "0000000000000000", "8CA64DE9C1B123A7",
4263 	"0000008000000000", "0000000000000000", "5199C29A52C9F059",
4264 	"0000004000000000", "0000000000000000", "C22F0A294A71F29F",
4265 	"0000002000000000", "0000000000000000", "EE371483714C02EA",
4266 	"0000001000000000", "0000000000000000", "A81FBD448F9E522F",
4267 	"0000000800000000", "0000000000000000", "4F644C92E192DFED",
4268 	"0000000400000000", "0000000000000000", "1AFA9A66A6DF92AE",
4269 	"0000000200000000", "0000000000000000", "B3C1CC715CB879D8",
4270 	"0000000100000000", "0000000000000000", "8CA64DE9C1B123A7",
4271 	"0000000080000000", "0000000000000000", "19D032E64AB0BD8B",
4272 	"0000000040000000", "0000000000000000", "3CFAA7A7DC8720DC",
4273 	"0000000020000000", "0000000000000000", "B7265F7F447AC6F3",
4274 	"0000000010000000", "0000000000000000", "9DB73B3C0D163F54",
4275 	"0000000008000000", "0000000000000000", "8181B65BABF4A975",
4276 	"0000000004000000", "0000000000000000", "93C9B64042EAA240",
4277 	"0000000002000000", "0000000000000000", "5570530829705592",
4278 	"0000000001000000", "0000000000000000", "8CA64DE9C1B123A7",
4279 	"0000000000800000", "0000000000000000", "8638809E878787A0",
4280 	"0000000000400000", "0000000000000000", "41B9A79AF79AC208",
4281 	"0000000000200000", "0000000000000000", "7A9BE42F2009A892",
4282 	"0000000000100000", "0000000000000000", "29038D56BA6D2745",
4283 	"0000000000080000", "0000000000000000", "5495C6ABF1E5DF51",
4284 	"0000000000040000", "0000000000000000", "AE13DBD561488933",
4285 	"0000000000020000", "0000000000000000", "024D1FFA8904E389",
4286 	"0000000000010000", "0000000000000000", "8CA64DE9C1B123A7",
4287 	"0000000000008000", "0000000000000000", "D1399712F99BF02E",
4288 	"0000000000004000", "0000000000000000", "14C1D7C1CFFEC79E",
4289 	"0000000000002000", "0000000000000000", "1DE5279DAE3BED6F",
4290 	"0000000000001000", "0000000000000000", "E941A33F85501303",
4291 	"0000000000000800", "0000000000000000", "DA99DBBC9A03F379",
4292 	"0000000000000400", "0000000000000000", "B7FC92F91D8E92E9",
4293 	"0000000000000200", "0000000000000000", "AE8E5CAA3CA04E85",
4294 	"0000000000000100", "0000000000000000", "8CA64DE9C1B123A7",
4295 	"0000000000000080", "0000000000000000", "9CC62DF43B6EED74",
4296 	"0000000000000040", "0000000000000000", "D863DBB5C59A91A0",
4297 	"0000000000000020", "0000000000000000", "A1AB2190545B91D7",
4298 	"0000000000000010", "0000000000000000", "0875041E64C570F7",
4299 	"0000000000000008", "0000000000000000", "5A594528BEBEF1CC",
4300 	"0000000000000004", "0000000000000000", "FCDB3291DE21F0C0",
4301 	"0000000000000002", "0000000000000000", "869EFD7F9F265A09",
4302 	"0000000000000001", "0000000000000000", "8CA64DE9C1B123A7",
4303 	"0000000000000000", "8000000000000000", "95F8A5E5DD31D900",
4304 	"0000000000000000", "4000000000000000", "DD7F121CA5015619",
4305 	"0000000000000000", "2000000000000000", "2E8653104F3834EA",
4306 	"0000000000000000", "1000000000000000", "4BD388FF6CD81D4F",
4307 	"0000000000000000", "0800000000000000", "20B9E767B2FB1456",
4308 	"0000000000000000", "0400000000000000", "55579380D77138EF",
4309 	"0000000000000000", "0200000000000000", "6CC5DEFAAF04512F",
4310 	"0000000000000000", "0100000000000000", "0D9F279BA5D87260",
4311 	"0000000000000000", "0080000000000000", "D9031B0271BD5A0A",
4312 	"0000000000000000", "0040000000000000", "424250B37C3DD951",
4313 	"0000000000000000", "0020000000000000", "B8061B7ECD9A21E5",
4314 	"0000000000000000", "0010000000000000", "F15D0F286B65BD28",
4315 	"0000000000000000", "0008000000000000", "ADD0CC8D6E5DEBA1",
4316 	"0000000000000000", "0004000000000000", "E6D5F82752AD63D1",
4317 	"0000000000000000", "0002000000000000", "ECBFE3BD3F591A5E",
4318 	"0000000000000000", "0001000000000000", "F356834379D165CD",
4319 	"0000000000000000", "0000800000000000", "2B9F982F20037FA9",
4320 	"0000000000000000", "0000400000000000", "889DE068A16F0BE6",
4321 	"0000000000000000", "0000200000000000", "E19E275D846A1298",
4322 	"0000000000000000", "0000100000000000", "329A8ED523D71AEC",
4323 	"0000000000000000", "0000080000000000", "E7FCE22557D23C97",
4324 	"0000000000000000", "0000040000000000", "12A9F5817FF2D65D",
4325 	"0000000000000000", "0000020000000000", "A484C3AD38DC9C19",
4326 	"0000000000000000", "0000010000000000", "FBE00A8A1EF8AD72",
4327 	"0000000000000000", "0000008000000000", "750D079407521363",
4328 	"0000000000000000", "0000004000000000", "64FEED9C724C2FAF",
4329 	"0000000000000000", "0000002000000000", "F02B263B328E2B60",
4330 	"0000000000000000", "0000001000000000", "9D64555A9A10B852",
4331 	"0000000000000000", "0000000800000000", "D106FF0BED5255D7",
4332 	"0000000000000000", "0000000400000000", "E1652C6B138C64A5",
4333 	"0000000000000000", "0000000200000000", "E428581186EC8F46",
4334 	"0000000000000000", "0000000100000000", "AEB5F5EDE22D1A36",
4335 	"0000000000000000", "0000000080000000", "E943D7568AEC0C5C",
4336 	"0000000000000000", "0000000040000000", "DF98C8276F54B04B",
4337 	"0000000000000000", "0000000020000000", "B160E4680F6C696F",
4338 	"0000000000000000", "0000000010000000", "FA0752B07D9C4AB8",
4339 	"0000000000000000", "0000000008000000", "CA3A2B036DBC8502",
4340 	"0000000000000000", "0000000004000000", "5E0905517BB59BCF",
4341 	"0000000000000000", "0000000002000000", "814EEB3B91D90726",
4342 	"0000000000000000", "0000000001000000", "4D49DB1532919C9F",
4343 	"0000000000000000", "0000000000800000", "25EB5FC3F8CF0621",
4344 	"0000000000000000", "0000000000400000", "AB6A20C0620D1C6F",
4345 	"0000000000000000", "0000000000200000", "79E90DBC98F92CCA",
4346 	"0000000000000000", "0000000000100000", "866ECEDD8072BB0E",
4347 	"0000000000000000", "0000000000080000", "8B54536F2F3E64A8",
4348 	"0000000000000000", "0000000000040000", "EA51D3975595B86B",
4349 	"0000000000000000", "0000000000020000", "CAFFC6AC4542DE31",
4350 	"0000000000000000", "0000000000010000", "8DD45A2DDF90796C",
4351 	"0000000000000000", "0000000000008000", "1029D55E880EC2D0",
4352 	"0000000000000000", "0000000000004000", "5D86CB23639DBEA9",
4353 	"0000000000000000", "0000000000002000", "1D1CA853AE7C0C5F",
4354 	"0000000000000000", "0000000000001000", "CE332329248F3228",
4355 	"0000000000000000", "0000000000000800", "8405D1ABE24FB942",
4356 	"0000000000000000", "0000000000000400", "E643D78090CA4207",
4357 	"0000000000000000", "0000000000000200", "48221B9937748A23",
4358 	"0000000000000000", "0000000000000100", "DD7C0BBD61FAFD54",
4359 	"0000000000000000", "0000000000000080", "2FBC291A570DB5C4",
4360 	"0000000000000000", "0000000000000040", "E07C30D7E4E26E12",
4361 	"0000000000000000", "0000000000000020", "0953E2258E8E90A1",
4362 	"0000000000000000", "0000000000000010", "5B711BC4CEEBF2EE",
4363 	"0000000000000000", "0000000000000008", "CC083F1E6D9E85F6",
4364 	"0000000000000000", "0000000000000004", "D2FD8867D50D2DFE",
4365 	"0000000000000000", "0000000000000002", "06E7EA22CE92708F",
4366 	"0000000000000000", "0000000000000001", "166B40B44ABA4BD6",
4367 	"0000000000000000", "0000000000000000", "8CA64DE9C1B123A7",
4368 	"0101010101010101", "0101010101010101", "994D4DC157B96C52",
4369 	"0202020202020202", "0202020202020202", "E127C2B61D98E6E2",
4370 	"0303030303030303", "0303030303030303", "984C91D78A269CE3",
4371 	"0404040404040404", "0404040404040404", "1F4570BB77550683",
4372 	"0505050505050505", "0505050505050505", "3990ABF98D672B16",
4373 	"0606060606060606", "0606060606060606", "3F5150BBA081D585",
4374 	"0707070707070707", "0707070707070707", "C65242248C9CF6F2",
4375 	"0808080808080808", "0808080808080808", "10772D40FAD24257",
4376 	"0909090909090909", "0909090909090909", "F0139440647A6E7B",
4377 	"0A0A0A0A0A0A0A0A", "0A0A0A0A0A0A0A0A", "0A288603044D740C",
4378 	"0B0B0B0B0B0B0B0B", "0B0B0B0B0B0B0B0B", "6359916942F7438F",
4379 	"0C0C0C0C0C0C0C0C", "0C0C0C0C0C0C0C0C", "934316AE443CF08B",
4380 	"0D0D0D0D0D0D0D0D", "0D0D0D0D0D0D0D0D", "E3F56D7F1130A2B7",
4381 	"0E0E0E0E0E0E0E0E", "0E0E0E0E0E0E0E0E", "A2E4705087C6B6B4",
4382 	"0F0F0F0F0F0F0F0F", "0F0F0F0F0F0F0F0F", "D5D76E09A447E8C3",
4383 	"1010101010101010", "1010101010101010", "DD7515F2BFC17F85",
4384 	"1111111111111111", "1111111111111111", "F40379AB9E0EC533",
4385 	"1212121212121212", "1212121212121212", "96CD27784D1563E5",
4386 	"1313131313131313", "1313131313131313", "2911CF5E94D33FE1",
4387 	"1414141414141414", "1414141414141414", "377B7F7CA3E5BBB3",
4388 	"1515151515151515", "1515151515151515", "701AA63832905A92",
4389 	"1616161616161616", "1616161616161616", "2006E716C4252D6D",
4390 	"1717171717171717", "1717171717171717", "452C1197422469F8",
4391 	"1818181818181818", "1818181818181818", "C33FD1EB49CB64DA",
4392 	"1919191919191919", "1919191919191919", "7572278F364EB50D",
4393 	"1A1A1A1A1A1A1A1A", "1A1A1A1A1A1A1A1A", "69E51488403EF4C3",
4394 	"1B1B1B1B1B1B1B1B", "1B1B1B1B1B1B1B1B", "FF847E0ADF192825",
4395 	"1C1C1C1C1C1C1C1C", "1C1C1C1C1C1C1C1C", "521B7FB3B41BB791",
4396 	"1D1D1D1D1D1D1D1D", "1D1D1D1D1D1D1D1D", "26059A6A0F3F6B35",
4397 	"1E1E1E1E1E1E1E1E", "1E1E1E1E1E1E1E1E", "F24A8D2231C77538",
4398 	"1F1F1F1F1F1F1F1F", "1F1F1F1F1F1F1F1F", "4FD96EC0D3304EF6",
4399 	"2020202020202020", "2020202020202020", "18A9D580A900B699",
4400 	"2121212121212121", "2121212121212121", "88586E1D755B9B5A",
4401 	"2222222222222222", "2222222222222222", "0F8ADFFB11DC2784",
4402 	"2323232323232323", "2323232323232323", "2F30446C8312404A",
4403 	"2424242424242424", "2424242424242424", "0BA03D9E6C196511",
4404 	"2525252525252525", "2525252525252525", "3E55E997611E4B7D",
4405 	"2626262626262626", "2626262626262626", "B2522FB5F158F0DF",
4406 	"2727272727272727", "2727272727272727", "2109425935406AB8",
4407 	"2828282828282828", "2828282828282828", "11A16028F310FF16",
4408 	"2929292929292929", "2929292929292929", "73F0C45F379FE67F",
4409 	"2A2A2A2A2A2A2A2A", "2A2A2A2A2A2A2A2A", "DCAD4338F7523816",
4410 	"2B2B2B2B2B2B2B2B", "2B2B2B2B2B2B2B2B", "B81634C1CEAB298C",
4411 	"2C2C2C2C2C2C2C2C", "2C2C2C2C2C2C2C2C", "DD2CCB29B6C4C349",
4412 	"2D2D2D2D2D2D2D2D", "2D2D2D2D2D2D2D2D", "7D07A77A2ABD50A7",
4413 	"2E2E2E2E2E2E2E2E", "2E2E2E2E2E2E2E2E", "30C1B0C1FD91D371",
4414 	"2F2F2F2F2F2F2F2F", "2F2F2F2F2F2F2F2F", "C4427B31AC61973B",
4415 	"3030303030303030", "3030303030303030", "F47BB46273B15EB5",
4416 	"3131313131313131", "3131313131313131", "655EA628CF62585F",
4417 	"3232323232323232", "3232323232323232", "AC978C247863388F",
4418 	"3333333333333333", "3333333333333333", "0432ED386F2DE328",
4419 	"3434343434343434", "3434343434343434", "D254014CB986B3C2",
4420 	"3535353535353535", "3535353535353535", "B256E34BEDB49801",
4421 	"3636363636363636", "3636363636363636", "37F8759EB77E7BFC",
4422 	"3737373737373737", "3737373737373737", "5013CA4F62C9CEA0",
4423 	"3838383838383838", "3838383838383838", "8940F7B3EACA5939",
4424 	"3939393939393939", "3939393939393939", "E22B19A55086774B",
4425 	"3A3A3A3A3A3A3A3A", "3A3A3A3A3A3A3A3A", "B04A2AAC925ABB0B",
4426 	"3B3B3B3B3B3B3B3B", "3B3B3B3B3B3B3B3B", "8D250D58361597FC",
4427 	"3C3C3C3C3C3C3C3C", "3C3C3C3C3C3C3C3C", "51F0114FB6A6CD37",
4428 	"3D3D3D3D3D3D3D3D", "3D3D3D3D3D3D3D3D", "9D0BB4DB830ECB73",
4429 	"3E3E3E3E3E3E3E3E", "3E3E3E3E3E3E3E3E", "E96089D6368F3E1A",
4430 	"3F3F3F3F3F3F3F3F", "3F3F3F3F3F3F3F3F", "5C4CA877A4E1E92D",
4431 	"4040404040404040", "4040404040404040", "6D55DDBC8DEA95FF",
4432 	"4141414141414141", "4141414141414141", "19DF84AC95551003",
4433 	"4242424242424242", "4242424242424242", "724E7332696D08A7",
4434 	"4343434343434343", "4343434343434343", "B91810B8CDC58FE2",
4435 	"4444444444444444", "4444444444444444", "06E23526EDCCD0C4",
4436 	"4545454545454545", "4545454545454545", "EF52491D5468D441",
4437 	"4646464646464646", "4646464646464646", "48019C59E39B90C5",
4438 	"4747474747474747", "4747474747474747", "0544083FB902D8C0",
4439 	"4848484848484848", "4848484848484848", "63B15CADA668CE12",
4440 	"4949494949494949", "4949494949494949", "EACC0C1264171071",
4441 	"4A4A4A4A4A4A4A4A", "4A4A4A4A4A4A4A4A", "9D2B8C0AC605F274",
4442 	"4B4B4B4B4B4B4B4B", "4B4B4B4B4B4B4B4B", "C90F2F4C98A8FB2A",
4443 	"4C4C4C4C4C4C4C4C", "4C4C4C4C4C4C4C4C", "03481B4828FD1D04",
4444 	"4D4D4D4D4D4D4D4D", "4D4D4D4D4D4D4D4D", "C78FC45A1DCEA2E2",
4445 	"4E4E4E4E4E4E4E4E", "4E4E4E4E4E4E4E4E", "DB96D88C3460D801",
4446 	"4F4F4F4F4F4F4F4F", "4F4F4F4F4F4F4F4F", "6C69E720F5105518",
4447 	"5050505050505050", "5050505050505050", "0D262E418BC893F3",
4448 	"5151515151515151", "5151515151515151", "6AD84FD7848A0A5C",
4449 	"5252525252525252", "5252525252525252", "C365CB35B34B6114",
4450 	"5353535353535353", "5353535353535353", "1155392E877F42A9",
4451 	"5454545454545454", "5454545454545454", "531BE5F9405DA715",
4452 	"5555555555555555", "5555555555555555", "3BCDD41E6165A5E8",
4453 	"5656565656565656", "5656565656565656", "2B1FF5610A19270C",
4454 	"5757575757575757", "5757575757575757", "D90772CF3F047CFD",
4455 	"5858585858585858", "5858585858585858", "1BEA27FFB72457B7",
4456 	"5959595959595959", "5959595959595959", "85C3E0C429F34C27",
4457 	"5A5A5A5A5A5A5A5A", "5A5A5A5A5A5A5A5A", "F9038021E37C7618",
4458 	"5B5B5B5B5B5B5B5B", "5B5B5B5B5B5B5B5B", "35BC6FF838DBA32F",
4459 	"5C5C5C5C5C5C5C5C", "5C5C5C5C5C5C5C5C", "4927ACC8CE45ECE7",
4460 	"5D5D5D5D5D5D5D5D", "5D5D5D5D5D5D5D5D", "E812EE6E3572985C",
4461 	"5E5E5E5E5E5E5E5E", "5E5E5E5E5E5E5E5E", "9BB93A89627BF65F",
4462 	"5F5F5F5F5F5F5F5F", "5F5F5F5F5F5F5F5F", "EF12476884CB74CA",
4463 	"6060606060606060", "6060606060606060", "1BF17E00C09E7CBF",
4464 	"6161616161616161", "6161616161616161", "29932350C098DB5D",
4465 	"6262626262626262", "6262626262626262", "B476E6499842AC54",
4466 	"6363636363636363", "6363636363636363", "5C662C29C1E96056",
4467 	"6464646464646464", "6464646464646464", "3AF1703D76442789",
4468 	"6565656565656565", "6565656565656565", "86405D9B425A8C8C",
4469 	"6666666666666666", "6666666666666666", "EBBF4810619C2C55",
4470 	"6767676767676767", "6767676767676767", "F8D1CD7367B21B5D",
4471 	"6868686868686868", "6868686868686868", "9EE703142BF8D7E2",
4472 	"6969696969696969", "6969696969696969", "5FDFFFC3AAAB0CB3",
4473 	"6A6A6A6A6A6A6A6A", "6A6A6A6A6A6A6A6A", "26C940AB13574231",
4474 	"6B6B6B6B6B6B6B6B", "6B6B6B6B6B6B6B6B", "1E2DC77E36A84693",
4475 	"6C6C6C6C6C6C6C6C", "6C6C6C6C6C6C6C6C", "0F4FF4D9BC7E2244",
4476 	"6D6D6D6D6D6D6D6D", "6D6D6D6D6D6D6D6D", "A4C9A0D04D3280CD",
4477 	"6E6E6E6E6E6E6E6E", "6E6E6E6E6E6E6E6E", "9FAF2C96FE84919D",
4478 	"6F6F6F6F6F6F6F6F", "6F6F6F6F6F6F6F6F", "115DBC965E6096C8",
4479 	"7070707070707070", "7070707070707070", "AF531E9520994017",
4480 	"7171717171717171", "7171717171717171", "B971ADE70E5C89EE",
4481 	"7272727272727272", "7272727272727272", "415D81C86AF9C376",
4482 	"7373737373737373", "7373737373737373", "8DFB864FDB3C6811",
4483 	"7474747474747474", "7474747474747474", "10B1C170E3398F91",
4484 	"7575757575757575", "7575757575757575", "CFEF7A1C0218DB1E",
4485 	"7676767676767676", "7676767676767676", "DBAC30A2A40B1B9C",
4486 	"7777777777777777", "7777777777777777", "89D3BF37052162E9",
4487 	"7878787878787878", "7878787878787878", "80D9230BDAEB67DC",
4488 	"7979797979797979", "7979797979797979", "3440911019AD68D7",
4489 	"7A7A7A7A7A7A7A7A", "7A7A7A7A7A7A7A7A", "9626FE57596E199E",
4490 	"7B7B7B7B7B7B7B7B", "7B7B7B7B7B7B7B7B", "DEA0B796624BB5BA",
4491 	"7C7C7C7C7C7C7C7C", "7C7C7C7C7C7C7C7C", "E9E40542BDDB3E9D",
4492 	"7D7D7D7D7D7D7D7D", "7D7D7D7D7D7D7D7D", "8AD99914B354B911",
4493 	"7E7E7E7E7E7E7E7E", "7E7E7E7E7E7E7E7E", "6F85B98DD12CB13B",
4494 	"7F7F7F7F7F7F7F7F", "7F7F7F7F7F7F7F7F", "10130DA3C3A23924",
4495 	"8080808080808080", "8080808080808080", "EFECF25C3C5DC6DB",
4496 	"8181818181818181", "8181818181818181", "907A46722ED34EC4",
4497 	"8282828282828282", "8282828282828282", "752666EB4CAB46EE",
4498 	"8383838383838383", "8383838383838383", "161BFABD4224C162",
4499 	"8484848484848484", "8484848484848484", "215F48699DB44A45",
4500 	"8585858585858585", "8585858585858585", "69D901A8A691E661",
4501 	"8686868686868686", "8686868686868686", "CBBF6EEFE6529728",
4502 	"8787878787878787", "8787878787878787", "7F26DCF425149823",
4503 	"8888888888888888", "8888888888888888", "762C40C8FADE9D16",
4504 	"8989898989898989", "8989898989898989", "2453CF5D5BF4E463",
4505 	"8A8A8A8A8A8A8A8A", "8A8A8A8A8A8A8A8A", "301085E3FDE724E1",
4506 	"8B8B8B8B8B8B8B8B", "8B8B8B8B8B8B8B8B", "EF4E3E8F1CC6706E",
4507 	"8C8C8C8C8C8C8C8C", "8C8C8C8C8C8C8C8C", "720479B024C397EE",
4508 	"8D8D8D8D8D8D8D8D", "8D8D8D8D8D8D8D8D", "BEA27E3795063C89",
4509 	"8E8E8E8E8E8E8E8E", "8E8E8E8E8E8E8E8E", "468E5218F1A37611",
4510 	"8F8F8F8F8F8F8F8F", "8F8F8F8F8F8F8F8F", "50ACE16ADF66BFE8",
4511 	"9090909090909090", "9090909090909090", "EEA24369A19F6937",
4512 	"9191919191919191", "9191919191919191", "6050D369017B6E62",
4513 	"9292929292929292", "9292929292929292", "5B365F2FB2CD7F32",
4514 	"9393939393939393", "9393939393939393", "F0B00B264381DDBB",
4515 	"9494949494949494", "9494949494949494", "E1D23881C957B96C",
4516 	"9595959595959595", "9595959595959595", "D936BF54ECA8BDCE",
4517 	"9696969696969696", "9696969696969696", "A020003C5554F34C",
4518 	"9797979797979797", "9797979797979797", "6118FCEBD407281D",
4519 	"9898989898989898", "9898989898989898", "072E328C984DE4A2",
4520 	"9999999999999999", "9999999999999999", "1440B7EF9E63D3AA",
4521 	"9A9A9A9A9A9A9A9A", "9A9A9A9A9A9A9A9A", "79BFA264BDA57373",
4522 	"9B9B9B9B9B9B9B9B", "9B9B9B9B9B9B9B9B", "C50E8FC289BBD876",
4523 	"9C9C9C9C9C9C9C9C", "9C9C9C9C9C9C9C9C", "A399D3D63E169FA9",
4524 	"9D9D9D9D9D9D9D9D", "9D9D9D9D9D9D9D9D", "4B8919B667BD53AB",
4525 	"9E9E9E9E9E9E9E9E", "9E9E9E9E9E9E9E9E", "D66CDCAF3F6724A2",
4526 	"9F9F9F9F9F9F9F9F", "9F9F9F9F9F9F9F9F", "E40E81FF3F618340",
4527 	"A0A0A0A0A0A0A0A0", "A0A0A0A0A0A0A0A0", "10EDB8977B348B35",
4528 	"A1A1A1A1A1A1A1A1", "A1A1A1A1A1A1A1A1", "6446C5769D8409A0",
4529 	"A2A2A2A2A2A2A2A2", "A2A2A2A2A2A2A2A2", "17ED1191CA8D67A3",
4530 	"A3A3A3A3A3A3A3A3", "A3A3A3A3A3A3A3A3", "B6D8533731BA1318",
4531 	"A4A4A4A4A4A4A4A4", "A4A4A4A4A4A4A4A4", "CA439007C7245CD0",
4532 	"A5A5A5A5A5A5A5A5", "A5A5A5A5A5A5A5A5", "06FC7FDE1C8389E7",
4533 	"A6A6A6A6A6A6A6A6", "A6A6A6A6A6A6A6A6", "7A3C1F3BD60CB3D8",
4534 	"A7A7A7A7A7A7A7A7", "A7A7A7A7A7A7A7A7", "E415D80048DBA848",
4535 	"A8A8A8A8A8A8A8A8", "A8A8A8A8A8A8A8A8", "26F88D30C0FB8302",
4536 	"A9A9A9A9A9A9A9A9", "A9A9A9A9A9A9A9A9", "D4E00A9EF5E6D8F3",
4537 	"AAAAAAAAAAAAAAAA", "AAAAAAAAAAAAAAAA", "C4322BE19E9A5A17",
4538 	"ABABABABABABABAB", "ABABABABABABABAB", "ACE41A06BFA258EA",
4539 	"ACACACACACACACAC", "ACACACACACACACAC", "EEAAC6D17880BD56",
4540 	"ADADADADADADADAD", "ADADADADADADADAD", "3C9A34CA4CB49EEB",
4541 	"AEAEAEAEAEAEAEAE", "AEAEAEAEAEAEAEAE", "9527B0287B75F5A3",
4542 	"AFAFAFAFAFAFAFAF", "AFAFAFAFAFAFAFAF", "F2D9D1BE74376C0C",
4543 	"B0B0B0B0B0B0B0B0", "B0B0B0B0B0B0B0B0", "939618DF0AEFAAE7",
4544 	"B1B1B1B1B1B1B1B1", "B1B1B1B1B1B1B1B1", "24692773CB9F27FE",
4545 	"B2B2B2B2B2B2B2B2", "B2B2B2B2B2B2B2B2", "38703BA5E2315D1D",
4546 	"B3B3B3B3B3B3B3B3", "B3B3B3B3B3B3B3B3", "FCB7E4B7D702E2FB",
4547 	"B4B4B4B4B4B4B4B4", "B4B4B4B4B4B4B4B4", "36F0D0B3675704D5",
4548 	"B5B5B5B5B5B5B5B5", "B5B5B5B5B5B5B5B5", "62D473F539FA0D8B",
4549 	"B6B6B6B6B6B6B6B6", "B6B6B6B6B6B6B6B6", "1533F3ED9BE8EF8E",
4550 	"B7B7B7B7B7B7B7B7", "B7B7B7B7B7B7B7B7", "9C4EA352599731ED",
4551 	"B8B8B8B8B8B8B8B8", "B8B8B8B8B8B8B8B8", "FABBF7C046FD273F",
4552 	"B9B9B9B9B9B9B9B9", "B9B9B9B9B9B9B9B9", "B7FE63A61C646F3A",
4553 	"BABABABABABABABA", "BABABABABABABABA", "10ADB6E2AB972BBE",
4554 	"BBBBBBBBBBBBBBBB", "BBBBBBBBBBBBBBBB", "F91DCAD912332F3B",
4555 	"BCBCBCBCBCBCBCBC", "BCBCBCBCBCBCBCBC", "46E7EF47323A701D",
4556 	"BDBDBDBDBDBDBDBD", "BDBDBDBDBDBDBDBD", "8DB18CCD9692F758",
4557 	"BEBEBEBEBEBEBEBE", "BEBEBEBEBEBEBEBE", "E6207B536AAAEFFC",
4558 	"BFBFBFBFBFBFBFBF", "BFBFBFBFBFBFBFBF", "92AA224372156A00",
4559 	"C0C0C0C0C0C0C0C0", "C0C0C0C0C0C0C0C0", "A3B357885B1E16D2",
4560 	"C1C1C1C1C1C1C1C1", "C1C1C1C1C1C1C1C1", "169F7629C970C1E5",
4561 	"C2C2C2C2C2C2C2C2", "C2C2C2C2C2C2C2C2", "62F44B247CF1348C",
4562 	"C3C3C3C3C3C3C3C3", "C3C3C3C3C3C3C3C3", "AE0FEEB0495932C8",
4563 	"C4C4C4C4C4C4C4C4", "C4C4C4C4C4C4C4C4", "72DAF2A7C9EA6803",
4564 	"C5C5C5C5C5C5C5C5", "C5C5C5C5C5C5C5C5", "4FB5D5536DA544F4",
4565 	"C6C6C6C6C6C6C6C6", "C6C6C6C6C6C6C6C6", "1DD4E65AAF7988B4",
4566 	"C7C7C7C7C7C7C7C7", "C7C7C7C7C7C7C7C7", "76BF084C1535A6C6",
4567 	"C8C8C8C8C8C8C8C8", "C8C8C8C8C8C8C8C8", "AFEC35B09D36315F",
4568 	"C9C9C9C9C9C9C9C9", "C9C9C9C9C9C9C9C9", "C8078A6148818403",
4569 	"CACACACACACACACA", "CACACACACACACACA", "4DA91CB4124B67FE",
4570 	"CBCBCBCBCBCBCBCB", "CBCBCBCBCBCBCBCB", "2DABFEB346794C3D",
4571 	"CCCCCCCCCCCCCCCC", "CCCCCCCCCCCCCCCC", "FBCD12C790D21CD7",
4572 	"CDCDCDCDCDCDCDCD", "CDCDCDCDCDCDCDCD", "536873DB879CC770",
4573 	"CECECECECECECECE", "CECECECECECECECE", "9AA159D7309DA7A0",
4574 	"CFCFCFCFCFCFCFCF", "CFCFCFCFCFCFCFCF", "0B844B9D8C4EA14A",
4575 	"D0D0D0D0D0D0D0D0", "D0D0D0D0D0D0D0D0", "3BBD84CE539E68C4",
4576 	"D1D1D1D1D1D1D1D1", "D1D1D1D1D1D1D1D1", "CF3E4F3E026E2C8E",
4577 	"D2D2D2D2D2D2D2D2", "D2D2D2D2D2D2D2D2", "82F85885D542AF58",
4578 	"D3D3D3D3D3D3D3D3", "D3D3D3D3D3D3D3D3", "22D334D6493B3CB6",
4579 	"D4D4D4D4D4D4D4D4", "D4D4D4D4D4D4D4D4", "47E9CB3E3154D673",
4580 	"D5D5D5D5D5D5D5D5", "D5D5D5D5D5D5D5D5", "2352BCC708ADC7E9",
4581 	"D6D6D6D6D6D6D6D6", "D6D6D6D6D6D6D6D6", "8C0F3BA0C8601980",
4582 	"D7D7D7D7D7D7D7D7", "D7D7D7D7D7D7D7D7", "EE5E9FD70CEF00E9",
4583 	"D8D8D8D8D8D8D8D8", "D8D8D8D8D8D8D8D8", "DEF6BDA6CABF9547",
4584 	"D9D9D9D9D9D9D9D9", "D9D9D9D9D9D9D9D9", "4DADD04A0EA70F20",
4585 	"DADADADADADADADA", "DADADADADADADADA", "C1AA16689EE1B482",
4586 	"DBDBDBDBDBDBDBDB", "DBDBDBDBDBDBDBDB", "F45FC26193E69AEE",
4587 	"DCDCDCDCDCDCDCDC", "DCDCDCDCDCDCDCDC", "D0CFBB937CEDBFB5",
4588 	"DDDDDDDDDDDDDDDD", "DDDDDDDDDDDDDDDD", "F0752004EE23D87B",
4589 	"DEDEDEDEDEDEDEDE", "DEDEDEDEDEDEDEDE", "77A791E28AA464A5",
4590 	"DFDFDFDFDFDFDFDF", "DFDFDFDFDFDFDFDF", "E7562A7F56FF4966",
4591 	"E0E0E0E0E0E0E0E0", "E0E0E0E0E0E0E0E0", "B026913F2CCFB109",
4592 	"E1E1E1E1E1E1E1E1", "E1E1E1E1E1E1E1E1", "0DB572DDCE388AC7",
4593 	"E2E2E2E2E2E2E2E2", "E2E2E2E2E2E2E2E2", "D9FA6595F0C094CA",
4594 	"E3E3E3E3E3E3E3E3", "E3E3E3E3E3E3E3E3", "ADE4804C4BE4486E",
4595 	"E4E4E4E4E4E4E4E4", "E4E4E4E4E4E4E4E4", "007B81F520E6D7DA",
4596 	"E5E5E5E5E5E5E5E5", "E5E5E5E5E5E5E5E5", "961AEB77BFC10B3C",
4597 	"E6E6E6E6E6E6E6E6", "E6E6E6E6E6E6E6E6", "8A8DD870C9B14AF2",
4598 	"E7E7E7E7E7E7E7E7", "E7E7E7E7E7E7E7E7", "3CC02E14B6349B25",
4599 	"E8E8E8E8E8E8E8E8", "E8E8E8E8E8E8E8E8", "BAD3EE68BDDB9607",
4600 	"E9E9E9E9E9E9E9E9", "E9E9E9E9E9E9E9E9", "DFF918E93BDAD292",
4601 	"EAEAEAEAEAEAEAEA", "EAEAEAEAEAEAEAEA", "8FE559C7CD6FA56D",
4602 	"EBEBEBEBEBEBEBEB", "EBEBEBEBEBEBEBEB", "C88480835C1A444C",
4603 	"ECECECECECECECEC", "ECECECECECECECEC", "D6EE30A16B2CC01E",
4604 	"EDEDEDEDEDEDEDED", "EDEDEDEDEDEDEDED", "6932D887B2EA9C1A",
4605 	"EEEEEEEEEEEEEEEE", "EEEEEEEEEEEEEEEE", "0BFC865461F13ACC",
4606 	"EFEFEFEFEFEFEFEF", "EFEFEFEFEFEFEFEF", "228AEA0D403E807A",
4607 	"F0F0F0F0F0F0F0F0", "F0F0F0F0F0F0F0F0", "2A2891F65BB8173C",
4608 	"F1F1F1F1F1F1F1F1", "F1F1F1F1F1F1F1F1", "5D1B8FAF7839494B",
4609 	"F2F2F2F2F2F2F2F2", "F2F2F2F2F2F2F2F2", "1C0A9280EECF5D48",
4610 	"F3F3F3F3F3F3F3F3", "F3F3F3F3F3F3F3F3", "6CBCE951BBC30F74",
4611 	"F4F4F4F4F4F4F4F4", "F4F4F4F4F4F4F4F4", "9CA66E96BD08BC70",
4612 	"F5F5F5F5F5F5F5F5", "F5F5F5F5F5F5F5F5", "F5D779FCFBB28BF3",
4613 	"F6F6F6F6F6F6F6F6", "F6F6F6F6F6F6F6F6", "0FEC6BBF9B859184",
4614 	"F7F7F7F7F7F7F7F7", "F7F7F7F7F7F7F7F7", "EF88D2BF052DBDA8",
4615 	"F8F8F8F8F8F8F8F8", "F8F8F8F8F8F8F8F8", "39ADBDDB7363090D",
4616 	"F9F9F9F9F9F9F9F9", "F9F9F9F9F9F9F9F9", "C0AEAF445F7E2A7A",
4617 	"FAFAFAFAFAFAFAFA", "FAFAFAFAFAFAFAFA", "C66F54067298D4E9",
4618 	"FBFBFBFBFBFBFBFB", "FBFBFBFBFBFBFBFB", "E0BA8F4488AAF97C",
4619 	"FCFCFCFCFCFCFCFC", "FCFCFCFCFCFCFCFC", "67B36E2875D9631C",
4620 	"FDFDFDFDFDFDFDFD", "FDFDFDFDFDFDFDFD", "1ED83D49E267191D",
4621 	"FEFEFEFEFEFEFEFE", "FEFEFEFEFEFEFEFE", "66B2B23EA84693AD",
4622 	"FFFFFFFFFFFFFFFF", "FFFFFFFFFFFFFFFF", "7359B2163E4EDC58",
4623 	"0001020304050607", "0011223344556677", "3EF0A891CF8ED990",
4624 	"2BD6459F82C5B300", "EA024714AD5C4D84", "126EFE8ED312190A",
4625 
4626 	NULL
4627 };
4628 
4629 /*
4630  * Known-answer tests for DES/3DES in CBC mode. Order: key, IV,
4631  * plaintext, ciphertext.
4632  */
4633 static const char *const KAT_DES_CBC[] = {
4634 	/*
4635 	 * From NIST validation suite (tdesmmt.zip).
4636 	 */
4637 	"34a41a8c293176c1b30732ecfe38ae8a34a41a8c293176c1",
4638 	"f55b4855228bd0b4",
4639 	"7dd880d2a9ab411c",
4640 	"c91892948b6cadb4",
4641 
4642 	"70a88fa1dfb9942fa77f40157ffef2ad70a88fa1dfb9942f",
4643 	"ece08ce2fdc6ce80",
4644 	"bc225304d5a3a5c9918fc5006cbc40cc",
4645 	"27f67dc87af7ddb4b68f63fa7c2d454a",
4646 
4647 	"e091790be55be0bc0780153861a84adce091790be55be0bc",
4648 	"fd7d430f86fbbffe",
4649 	"03c7fffd7f36499c703dedc9df4de4a92dd4382e576d6ae9",
4650 	"053aeba85dd3a23bfbe8440a432f9578f312be60fb9f0035",
4651 
4652 	"857feacd16157c58e5347a70e56e578a857feacd16157c58",
4653 	"002dcb6d46ef0969",
4654 	"1f13701c7f0d7385307507a18e89843ebd295bd5e239ef109347a6898c6d3fd5",
4655 	"a0e4edde34f05bd8397ce279e49853e9387ba04be562f5fa19c3289c3f5a3391",
4656 
4657 	"a173545b265875ba852331fbb95b49a8a173545b265875ba",
4658 	"ab385756391d364c",
4659 	"d08894c565608d9ae51dda63b85b3b33b1703bb5e4f1abcbb8794e743da5d6f3bf630f2e9b6d5b54",
4660 	"370b47acf89ac6bdbb13c9a7336787dc41e1ad8beead32281d0609fb54968404bdf2894892590658",
4661 
4662 	"26376bcb2f23df1083cd684fe00ed3c726376bcb2f23df10",
4663 	"33acfb0f3d240ea6",
4664 	"903a1911da1e6877f23c1985a9b61786ef438e0ce1240885035ad60fc916b18e5d71a1fb9c5d1eff61db75c0076f6efb",
4665 	"7a4f7510f6ec0b93e2495d21a8355684d303a770ebda2e0e51ff33d72b20cb73e58e2e3de2ef6b2e12c504c0f181ba63",
4666 
4667 	"3e1f98135d027cec752f67765408a7913e1f98135d027cec",
4668 	"11f5f2304b28f68b",
4669 	"7c022f5af24f7925d323d4d0e20a2ce49272c5e764b22c806f4b6ddc406d864fe5bd1c3f45556d3eb30c8676c2f8b54a5a32423a0bd95a07",
4670 	"2bb4b131fa4ae0b4f0378a2cdb68556af6eee837613016d7ea936f3931f25f8b3ae351d5e9d00be665676e2400408b5db9892d95421e7f1a",
4671 
4672 	"13b9d549cd136ec7bf9e9810ef2cdcbf13b9d549cd136ec7",
4673 	"a82c1b1057badcc8",
4674 	"1fff1563bc1645b55cb23ea34a0049dfc06607150614b621dedcb07f20433402a2d869c95ac4a070c7a3da838c928a385f899c5d21ecb58f4e5cbdad98d39b8c",
4675 	"75f804d4a2c542a31703e23df26cc38861a0729090e6eae5672c1db8c0b09fba9b125bbca7d6c7d330b3859e6725c6d26de21c4e3af7f5ea94df3cde2349ce37",
4676 
4677 	"20320dfdad579bb57c6e4acd769dbadf20320dfdad579bb5",
4678 	"879201b5857ccdea",
4679 	"0431283cc8bb4dc7750a9d5c68578486932091632a12d0a79f2c54e3d122130881fff727050f317a40fcd1a8d13793458b99fc98254ba6a233e3d95b55cf5a3faff78809999ea4bf",
4680 	"85d17840eb2af5fc727027336bfd71a2b31bd14a1d9eb64f8a08bfc4f56eaa9ca7654a5ae698287869cc27324813730de4f1384e0b8cfbc472ff5470e3c5e4bd8ceb23dc2d91988c",
4681 
4682 	"23abb073a2df34cb3d1fdce6b092582c23abb073a2df34cb",
4683 	"7d7fbf19e8562d32",
4684 	"31e718fd95e6d7ca4f94763191add2674ab07c909d88c486916c16d60a048a0cf8cdb631cebec791362cd0c202eb61e166b65c1f65d0047c8aec57d3d84b9e17032442dce148e1191b06a12c284cc41e",
4685 	"c9a3f75ab6a7cd08a7fd53ca540aafe731d257ee1c379fadcc4cc1a06e7c12bddbeb7562c436d1da849ed072629e82a97b56d9becc25ff4f16f21c5f2a01911604f0b5c49df96cb641faee662ca8aa68",
4686 
4687 	"b5cb1504802326c73df186e3e352a20de643b0d63ee30e37",
4688 	"43f791134c5647ba",
4689 	"dcc153cef81d6f24",
4690 	"92538bd8af18d3ba",
4691 
4692 	"a49d7564199e97cb529d2c9d97bf2f98d35edf57ba1f7358",
4693 	"c2e999cb6249023c",
4694 	"c689aee38a301bb316da75db36f110b5",
4695 	"e9afaba5ec75ea1bbe65506655bb4ecb",
4696 
4697 	"1a5d4c0825072a15a8ad9dfdaeda8c048adffb85bc4fced0",
4698 	"7fcfa736f7548b6f",
4699 	"983c3edacd939406010e1bc6ff9e12320ac5008117fa8f84",
4700 	"d84fa24f38cf451ca2c9adc960120bd8ff9871584fe31cee",
4701 
4702 	"d98aadc76d4a3716158c32866efbb9ce834af2297379a49d",
4703 	"3c5220327c502b44",
4704 	"6174079dda53ca723ebf00a66837f8d5ce648c08acaa5ee45ffe62210ef79d3e",
4705 	"f5bd4d600bed77bec78409e3530ebda1d815506ed53103015b87e371ae000958",
4706 
4707 	"ef6d3e54266d978ffb0b8ce6689d803e2cd34cc802fd0252",
4708 	"38bae5bce06d0ad9",
4709 	"c4f228b537223cd01c0debb5d9d4e12ba71656618d119b2f8f0af29d23efa3a9e43c4c458a1b79a0",
4710 	"9e3289fb18379f55aa4e45a7e0e6df160b33b75f8627ad0954f8fdcb78cee55a4664caeda1000fe5",
4711 
4712 	"625bc19b19df83abfb2f5bec9d4f2062017525a75bc26e70",
4713 	"bd0cff364ff69a91",
4714 	"8152d2ab876c3c8201403a5a406d3feaf27319dbea6ad01e24f4d18203704b86de70da6bbb6d638e5aba3ff576b79b28",
4715 	"706fe7a973fac40e25b2b4499ce527078944c70e976d017b6af86a3a7a6b52943a72ba18a58000d2b61fdc3bfef2bc4a",
4716 
4717 	"b6383176046e6880a1023bf45768b5bf5119022fe054bfe5",
4718 	"ec13ca541c43401e",
4719 	"cd5a886e9af011346c4dba36a424f96a78a1ddf28aaa4188bf65451f4efaffc7179a6dd237c0ae35d9b672314e5cb032612597f7e462c6f3",
4720 	"b030f976f46277ee211c4a324d5c87555d1084513a1223d3b84416b52bbc28f4b77f3a9d8d0d91dc37d3dbe8af8be98f74674b02f9a38527",
4721 
4722 	"3d8cf273d343b9aedccddacb91ad86206737adc86b4a49a7",
4723 	"bb3a9a0c71c62ef0",
4724 	"1fde3991c32ce220b5b6666a9234f2fd7bd24b921829fd9cdc6eb4218be9eac9faa9c2351777349128086b6d58776bc86ff2f76ee1b3b2850a318462b8983fa1",
4725 	"422ce705a46bb52ad928dab6c863166d617c6fc24003633120d91918314bbf464cea7345c3c35f2042f2d6929735d74d7728f22fea618a0b9cf5b1281acb13fb",
4726 
4727 	"fbceb5cb646b925be0b92f7f6b493d5e5b16e9159732732a",
4728 	"2e17b3c7025ae86b",
4729 	"4c309bc8e1e464fdd2a2b8978645d668d455f7526bd8d7b6716a722f6a900b815c4a73cc30e788065c1dfca7bf5958a6cc5440a5ebe7f8691c20278cde95db764ff8ce8994ece89c",
4730 	"c02129bdf4bbbd75e71605a00b12c80db6b4e05308e916615011f09147ed915dd1bc67f27f9e027e4e13df36b55464a31c11b4d1fe3d855d89df492e1a7201b995c1ba16a8dbabee",
4731 
4732 	"9b162a0df8ad9b61c88676e3d586434570b902f12a2046e0",
4733 	"ebd6fefe029ad54b",
4734 	"f4c1c918e77355c8156f0fd778da52bff121ae5f2f44eaf4d2754946d0e10d1f18ce3a0176e69c18b7d20b6e0d0bee5eb5edfe4bd60e4d92adcd86bce72e76f94ee5cbcaa8b01cfddcea2ade575e66ac",
4735 	"1ff3c8709f403a8eff291aedf50c010df5c5ff64a8b205f1fce68564798897a390db16ee0d053856b75898009731da290fcc119dad987277aacef694872e880c4bb41471063fae05c89f25e4bd0cad6a",
4736 
4737 	NULL
4738 };
4739 
4740 static void
4741 xor_buf(unsigned char *dst, const unsigned char *src, size_t len)
4742 {
4743 	while (len -- > 0) {
4744 		*dst ++ ^= *src ++;
4745 	}
4746 }
4747 
4748 static void
4749 monte_carlo_DES_encrypt(const br_block_cbcenc_class *ve)
4750 {
4751 	unsigned char k1[8], k2[8], k3[8];
4752 	unsigned char buf[8];
4753 	unsigned char cipher[8];
4754 	int i, j;
4755 	br_des_gen_cbcenc_keys v_ec;
4756 	void *ec;
4757 
4758 	ec = &v_ec;
4759 	hextobin(k1, "9ec2372c86379df4");
4760 	hextobin(k2, "ad7ac4464f73805d");
4761 	hextobin(k3, "20c4f87564527c91");
4762 	hextobin(buf, "b624d6bd41783ab1");
4763 	hextobin(cipher, "eafd97b190b167fe");
4764 	for (i = 0; i < 400; i ++) {
4765 		unsigned char key[24];
4766 
4767 		memcpy(key, k1, 8);
4768 		memcpy(key + 8, k2, 8);
4769 		memcpy(key + 16, k3, 8);
4770 		ve->init(ec, key, sizeof key);
4771 		for (j = 0; j < 10000; j ++) {
4772 			unsigned char iv[8];
4773 
4774 			memset(iv, 0, sizeof iv);
4775 			ve->run(ec, iv, buf, sizeof buf);
4776 			switch (j) {
4777 			case 9997: xor_buf(k3, buf, 8); break;
4778 			case 9998: xor_buf(k2, buf, 8); break;
4779 			case 9999: xor_buf(k1, buf, 8); break;
4780 			}
4781 		}
4782 		printf(".");
4783 		fflush(stdout);
4784 	}
4785 	printf(" ");
4786 	fflush(stdout);
4787 	check_equals("MC DES encrypt", buf, cipher, sizeof buf);
4788 }
4789 
4790 static void
4791 monte_carlo_DES_decrypt(const br_block_cbcdec_class *vd)
4792 {
4793 	unsigned char k1[8], k2[8], k3[8];
4794 	unsigned char buf[8];
4795 	unsigned char plain[8];
4796 	int i, j;
4797 	br_des_gen_cbcdec_keys v_dc;
4798 	void *dc;
4799 
4800 	dc = &v_dc;
4801 	hextobin(k1, "79b63486e0ce37e0");
4802 	hextobin(k2, "08e65231abae3710");
4803 	hextobin(k3, "1f5eb69e925ef185");
4804 	hextobin(buf, "2783aa729432fe96");
4805 	hextobin(plain, "44937ca532cdbf98");
4806 	for (i = 0; i < 400; i ++) {
4807 		unsigned char key[24];
4808 
4809 		memcpy(key, k1, 8);
4810 		memcpy(key + 8, k2, 8);
4811 		memcpy(key + 16, k3, 8);
4812 		vd->init(dc, key, sizeof key);
4813 		for (j = 0; j < 10000; j ++) {
4814 			unsigned char iv[8];
4815 
4816 			memset(iv, 0, sizeof iv);
4817 			vd->run(dc, iv, buf, sizeof buf);
4818 			switch (j) {
4819 			case 9997: xor_buf(k3, buf, 8); break;
4820 			case 9998: xor_buf(k2, buf, 8); break;
4821 			case 9999: xor_buf(k1, buf, 8); break;
4822 			}
4823 		}
4824 		printf(".");
4825 		fflush(stdout);
4826 	}
4827 	printf(" ");
4828 	fflush(stdout);
4829 	check_equals("MC DES decrypt", buf, plain, sizeof buf);
4830 }
4831 
4832 static void
4833 test_DES_generic(char *name,
4834 	const br_block_cbcenc_class *ve,
4835 	const br_block_cbcdec_class *vd,
4836 	int with_MC, int with_CBC)
4837 {
4838 	size_t u;
4839 
4840 	printf("Test %s: ", name);
4841 	fflush(stdout);
4842 
4843 	if (ve->block_size != 8 || vd->block_size != 8) {
4844 		fprintf(stderr, "%s failed: wrong block size\n", name);
4845 		exit(EXIT_FAILURE);
4846 	}
4847 
4848 	for (u = 0; KAT_DES[u]; u += 3) {
4849 		unsigned char key[24];
4850 		unsigned char plain[8];
4851 		unsigned char cipher[8];
4852 		unsigned char buf[8];
4853 		unsigned char iv[8];
4854 		size_t key_len;
4855 		br_des_gen_cbcenc_keys v_ec;
4856 		br_des_gen_cbcdec_keys v_dc;
4857 		const br_block_cbcenc_class **ec;
4858 		const br_block_cbcdec_class **dc;
4859 
4860 		ec = &v_ec.vtable;
4861 		dc = &v_dc.vtable;
4862 		key_len = hextobin(key, KAT_DES[u]);
4863 		hextobin(plain, KAT_DES[u + 1]);
4864 		hextobin(cipher, KAT_DES[u + 2]);
4865 		ve->init(ec, key, key_len);
4866 		memcpy(buf, plain, sizeof plain);
4867 		memset(iv, 0, sizeof iv);
4868 		ve->run(ec, iv, buf, sizeof buf);
4869 		check_equals("KAT DES encrypt", buf, cipher, sizeof cipher);
4870 		vd->init(dc, key, key_len);
4871 		memset(iv, 0, sizeof iv);
4872 		vd->run(dc, iv, buf, sizeof buf);
4873 		check_equals("KAT DES decrypt", buf, plain, sizeof plain);
4874 
4875 		if (key_len == 8) {
4876 			memcpy(key + 8, key, 8);
4877 			memcpy(key + 16, key, 8);
4878 			ve->init(ec, key, 24);
4879 			memcpy(buf, plain, sizeof plain);
4880 			memset(iv, 0, sizeof iv);
4881 			ve->run(ec, iv, buf, sizeof buf);
4882 			check_equals("KAT DES->3 encrypt",
4883 				buf, cipher, sizeof cipher);
4884 			vd->init(dc, key, 24);
4885 			memset(iv, 0, sizeof iv);
4886 			vd->run(dc, iv, buf, sizeof buf);
4887 			check_equals("KAT DES->3 decrypt",
4888 				buf, plain, sizeof plain);
4889 		}
4890 	}
4891 
4892 	if (with_CBC) {
4893 		for (u = 0; KAT_DES_CBC[u]; u += 4) {
4894 			unsigned char key[24];
4895 			unsigned char ivref[8];
4896 			unsigned char plain[200];
4897 			unsigned char cipher[200];
4898 			unsigned char buf[200];
4899 			unsigned char iv[8];
4900 			size_t key_len, data_len, v;
4901 			br_des_gen_cbcenc_keys v_ec;
4902 			br_des_gen_cbcdec_keys v_dc;
4903 			const br_block_cbcenc_class **ec;
4904 			const br_block_cbcdec_class **dc;
4905 
4906 			ec = &v_ec.vtable;
4907 			dc = &v_dc.vtable;
4908 			key_len = hextobin(key, KAT_DES_CBC[u]);
4909 			hextobin(ivref, KAT_DES_CBC[u + 1]);
4910 			data_len = hextobin(plain, KAT_DES_CBC[u + 2]);
4911 			hextobin(cipher, KAT_DES_CBC[u + 3]);
4912 			ve->init(ec, key, key_len);
4913 
4914 			memcpy(buf, plain, data_len);
4915 			memcpy(iv, ivref, 8);
4916 			ve->run(ec, iv, buf, data_len);
4917 			check_equals("KAT CBC DES encrypt",
4918 				buf, cipher, data_len);
4919 			vd->init(dc, key, key_len);
4920 			memcpy(iv, ivref, 8);
4921 			vd->run(dc, iv, buf, data_len);
4922 			check_equals("KAT CBC DES decrypt",
4923 				buf, plain, data_len);
4924 
4925 			memcpy(buf, plain, data_len);
4926 			memcpy(iv, ivref, 8);
4927 			for (v = 0; v < data_len; v += 8) {
4928 				ve->run(ec, iv, buf + v, 8);
4929 			}
4930 			check_equals("KAT CBC DES encrypt (2)",
4931 				buf, cipher, data_len);
4932 			memcpy(iv, ivref, 8);
4933 			for (v = 0; v < data_len; v += 8) {
4934 				vd->run(dc, iv, buf + v, 8);
4935 			}
4936 			check_equals("KAT CBC DES decrypt (2)",
4937 				buf, plain, data_len);
4938 		}
4939 	}
4940 
4941 	if (with_MC) {
4942 		monte_carlo_DES_encrypt(ve);
4943 		monte_carlo_DES_decrypt(vd);
4944 	}
4945 
4946 	printf("done.\n");
4947 	fflush(stdout);
4948 }
4949 
4950 static void
4951 test_DES_tab(void)
4952 {
4953 	test_DES_generic("DES_tab",
4954 		&br_des_tab_cbcenc_vtable,
4955 		&br_des_tab_cbcdec_vtable,
4956 		1, 1);
4957 }
4958 
4959 static void
4960 test_DES_ct(void)
4961 {
4962 	test_DES_generic("DES_ct",
4963 		&br_des_ct_cbcenc_vtable,
4964 		&br_des_ct_cbcdec_vtable,
4965 		1, 1);
4966 }
4967 
4968 static const struct {
4969 	const char *skey;
4970 	const char *snonce;
4971 	uint32_t counter;
4972 	const char *splain;
4973 	const char *scipher;
4974 } KAT_CHACHA20[] = {
4975 	{
4976 		"0000000000000000000000000000000000000000000000000000000000000000",
4977 		"000000000000000000000000",
4978 		0,
4979 		"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
4980 		"76b8e0ada0f13d90405d6ae55386bd28bdd219b8a08ded1aa836efcc8b770dc7da41597c5157488d7724e03fb8d84a376a43b8f41518a11cc387b669b2ee6586"
4981 	},
4982 	{
4983 		"0000000000000000000000000000000000000000000000000000000000000001",
4984 		"000000000000000000000002",
4985 		1,
4986 		"416e79207375626d697373696f6e20746f20746865204945544620696e74656e6465642062792074686520436f6e7472696275746f7220666f72207075626c69636174696f6e20617320616c6c206f722070617274206f6620616e204945544620496e7465726e65742d4472616674206f722052464320616e6420616e792073746174656d656e74206d6164652077697468696e2074686520636f6e74657874206f6620616e204945544620616374697669747920697320636f6e7369646572656420616e20224945544620436f6e747269627574696f6e222e20537563682073746174656d656e747320696e636c756465206f72616c2073746174656d656e747320696e20494554462073657373696f6e732c2061732077656c6c206173207772697474656e20616e6420656c656374726f6e696320636f6d6d756e69636174696f6e73206d61646520617420616e792074696d65206f7220706c6163652c207768696368206172652061646472657373656420746f",
4987 		"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"
4988 	},
4989 	{
4990 		"1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0",
4991 		"000000000000000000000002",
4992 		42,
4993 		"2754776173206272696c6c69672c20616e642074686520736c6974687920746f7665730a446964206779726520616e642067696d626c6520696e2074686520776162653a0a416c6c206d696d737920776572652074686520626f726f676f7665732c0a416e6420746865206d6f6d65207261746873206f757467726162652e",
4994 		"62e6347f95ed87a45ffae7426f27a1df5fb69110044c0d73118effa95b01e5cf166d3df2d721caf9b21e5fb14c616871fd84c54f9d65b283196c7fe4f60553ebf39c6402c42234e32a356b3e764312a61a5532055716ead6962568f87d3f3f7704c6a8d1bcd1bf4d50d6154b6da731b187b58dfd728afa36757a797ac188d1"
4995 	},
4996 	{ 0, 0, 0, 0, 0 }
4997 };
4998 
4999 static void
5000 test_ChaCha20_generic(const char *name, br_chacha20_run cr)
5001 {
5002 	size_t u;
5003 
5004 	printf("Test %s: ", name);
5005 	fflush(stdout);
5006 	if (cr == 0) {
5007 		printf("UNAVAILABLE\n");
5008 		return;
5009 	}
5010 
5011 	for (u = 0; KAT_CHACHA20[u].skey; u ++) {
5012 		unsigned char key[32], nonce[12], plain[400], cipher[400];
5013 		uint32_t cc;
5014 		size_t v, len;
5015 
5016 		hextobin(key, KAT_CHACHA20[u].skey);
5017 		hextobin(nonce, KAT_CHACHA20[u].snonce);
5018 		cc = KAT_CHACHA20[u].counter;
5019 		len = hextobin(plain, KAT_CHACHA20[u].splain);
5020 		hextobin(cipher, KAT_CHACHA20[u].scipher);
5021 
5022 		for (v = 0; v < len; v ++) {
5023 			unsigned char tmp[400];
5024 			size_t w;
5025 			uint32_t cc2;
5026 
5027 			memset(tmp, 0, sizeof tmp);
5028 			memcpy(tmp, plain, v);
5029 			if (cr(key, nonce, cc, tmp, v)
5030 				!= cc + (uint32_t)((v + 63) >> 6))
5031 			{
5032 				fprintf(stderr, "ChaCha20: wrong counter\n");
5033 				exit(EXIT_FAILURE);
5034 			}
5035 			if (memcmp(tmp, cipher, v) != 0) {
5036 				fprintf(stderr, "ChaCha20 KAT fail (1)\n");
5037 				exit(EXIT_FAILURE);
5038 			}
5039 			for (w = v; w < sizeof tmp; w ++) {
5040 				if (tmp[w] != 0) {
5041 					fprintf(stderr, "ChaCha20: overrun\n");
5042 					exit(EXIT_FAILURE);
5043 				}
5044 			}
5045 			for (w = 0, cc2 = cc; w < v; w += 64, cc2 ++) {
5046 				size_t x;
5047 
5048 				x = v - w;
5049 				if (x > 64) {
5050 					x = 64;
5051 				}
5052 				if (cr(key, nonce, cc2, tmp + w, x)
5053 					!= (cc2 + 1))
5054 				{
5055 					fprintf(stderr, "ChaCha20:"
5056 						" wrong counter (2)\n");
5057 					exit(EXIT_FAILURE);
5058 				}
5059 			}
5060 			if (memcmp(tmp, plain, v) != 0) {
5061 				fprintf(stderr, "ChaCha20 KAT fail (2)\n");
5062 				exit(EXIT_FAILURE);
5063 			}
5064 		}
5065 
5066 		printf(".");
5067 		fflush(stdout);
5068 	}
5069 
5070 	printf(" done.\n");
5071 	fflush(stdout);
5072 }
5073 
5074 static void
5075 test_ChaCha20_ct(void)
5076 {
5077 	test_ChaCha20_generic("ChaCha20_ct", &br_chacha20_ct_run);
5078 }
5079 
5080 static void
5081 test_ChaCha20_sse2(void)
5082 {
5083 	test_ChaCha20_generic("ChaCha20_sse2", br_chacha20_sse2_get());
5084 }
5085 
5086 static const struct {
5087 	const char *splain;
5088 	const char *saad;
5089 	const char *skey;
5090 	const char *snonce;
5091 	const char *scipher;
5092 	const char *stag;
5093 } KAT_POLY1305[] = {
5094 	{
5095 		"4c616469657320616e642047656e746c656d656e206f662074686520636c617373206f66202739393a204966204920636f756c64206f6666657220796f75206f6e6c79206f6e652074697020666f7220746865206675747572652c2073756e73637265656e20776f756c642062652069742e",
5096 		"50515253c0c1c2c3c4c5c6c7",
5097 		"808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f",
5098 		"070000004041424344454647",
5099 		"d31a8d34648e60db7b86afbc53ef7ec2a4aded51296e08fea9e2b5a736ee62d63dbea45e8ca9671282fafb69da92728b1a71de0a9e060b2905d6a5b67ecd3b3692ddbd7f2d778b8c9803aee328091b58fab324e4fad675945585808b4831d7bc3ff4def08e4b7a9de576d26586cec64b6116",
5100 		"1ae10b594f09e26a7e902ecbd0600691"
5101 	},
5102 	{ 0, 0, 0, 0, 0, 0 }
5103 };
5104 
5105 static void
5106 test_Poly1305_inner(const char *name, br_poly1305_run ipoly,
5107 	br_poly1305_run iref)
5108 {
5109 	size_t u;
5110 	br_hmac_drbg_context rng;
5111 
5112 	printf("Test %s: ", name);
5113 	fflush(stdout);
5114 
5115 	for (u = 0; KAT_POLY1305[u].skey; u ++) {
5116 		unsigned char key[32], nonce[12], plain[400], cipher[400];
5117 		unsigned char aad[400], tag[16], data[400], tmp[16];
5118 		size_t len, aad_len;
5119 
5120 		len = hextobin(plain, KAT_POLY1305[u].splain);
5121 		aad_len = hextobin(aad, KAT_POLY1305[u].saad);
5122 		hextobin(key, KAT_POLY1305[u].skey);
5123 		hextobin(nonce, KAT_POLY1305[u].snonce);
5124 		hextobin(cipher, KAT_POLY1305[u].scipher);
5125 		hextobin(tag, KAT_POLY1305[u].stag);
5126 
5127 		memcpy(data, plain, len);
5128 		ipoly(key, nonce, data, len,
5129 			aad, aad_len, tmp, br_chacha20_ct_run, 1);
5130 		check_equals("ChaCha20+Poly1305 KAT (1)", data, cipher, len);
5131 		check_equals("ChaCha20+Poly1305 KAT (2)", tmp, tag, 16);
5132 		ipoly(key, nonce, data, len,
5133 			aad, aad_len, tmp, br_chacha20_ct_run, 0);
5134 		check_equals("ChaCha20+Poly1305 KAT (3)", data, plain, len);
5135 		check_equals("ChaCha20+Poly1305 KAT (4)", tmp, tag, 16);
5136 
5137 		printf(".");
5138 		fflush(stdout);
5139 	}
5140 
5141 	printf(" ");
5142 	fflush(stdout);
5143 
5144 	/*
5145 	 * We compare the "ipoly" and "iref" implementations together on
5146 	 * a bunch of pseudo-random messages.
5147 	 */
5148 	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for Poly1305", 17);
5149 	for (u = 0; u < 100; u ++) {
5150 		unsigned char plain[100], aad[100], tmp[100];
5151 		unsigned char key[32], iv[12], tag1[16], tag2[16];
5152 
5153 		br_hmac_drbg_generate(&rng, key, sizeof key);
5154 		br_hmac_drbg_generate(&rng, iv, sizeof iv);
5155 		br_hmac_drbg_generate(&rng, plain, u);
5156 		br_hmac_drbg_generate(&rng, aad, u);
5157 		memcpy(tmp, plain, u);
5158 		memset(tmp + u, 0xFF, (sizeof tmp) - u);
5159 		ipoly(key, iv, tmp, u, aad, u, tag1,
5160 			&br_chacha20_ct_run, 1);
5161 		memset(tmp + u, 0x00, (sizeof tmp) - u);
5162 		iref(key, iv, tmp, u, aad, u, tag2,
5163 			&br_chacha20_ct_run, 0);
5164 		if (memcmp(tmp, plain, u) != 0) {
5165 			fprintf(stderr, "cross enc/dec failed\n");
5166 			exit(EXIT_FAILURE);
5167 		}
5168 		if (memcmp(tag1, tag2, sizeof tag1) != 0) {
5169 			fprintf(stderr, "cross MAC failed\n");
5170 			exit(EXIT_FAILURE);
5171 		}
5172 		printf(".");
5173 		fflush(stdout);
5174 	}
5175 
5176 	printf(" done.\n");
5177 	fflush(stdout);
5178 }
5179 
5180 static void
5181 test_Poly1305_ctmul(void)
5182 {
5183 	test_Poly1305_inner("Poly1305_ctmul", &br_poly1305_ctmul_run,
5184 		&br_poly1305_i15_run);
5185 }
5186 
5187 static void
5188 test_Poly1305_ctmul32(void)
5189 {
5190 	test_Poly1305_inner("Poly1305_ctmul32", &br_poly1305_ctmul32_run,
5191 		&br_poly1305_i15_run);
5192 }
5193 
5194 static void
5195 test_Poly1305_i15(void)
5196 {
5197 	test_Poly1305_inner("Poly1305_i15", &br_poly1305_i15_run,
5198 		&br_poly1305_ctmul_run);
5199 }
5200 
5201 static void
5202 test_Poly1305_ctmulq(void)
5203 {
5204 	br_poly1305_run bp;
5205 
5206 	bp = br_poly1305_ctmulq_get();
5207 	if (bp == 0) {
5208 		printf("Test Poly1305_ctmulq: UNAVAILABLE\n");
5209 	} else {
5210 		test_Poly1305_inner("Poly1305_ctmulq", bp,
5211 			&br_poly1305_ctmul_run);
5212 	}
5213 }
5214 
5215 /*
5216  * A 1024-bit RSA key, generated with OpenSSL.
5217  */
5218 static const unsigned char RSA_N[] = {
5219 	0xBF, 0xB4, 0xA6, 0x2E, 0x87, 0x3F, 0x9C, 0x8D,
5220 	0xA0, 0xC4, 0x2E, 0x7B, 0x59, 0x36, 0x0F, 0xB0,
5221 	0xFF, 0xE1, 0x25, 0x49, 0xE5, 0xE6, 0x36, 0xB0,
5222 	0x48, 0xC2, 0x08, 0x6B, 0x77, 0xA7, 0xC0, 0x51,
5223 	0x66, 0x35, 0x06, 0xA9, 0x59, 0xDF, 0x17, 0x7F,
5224 	0x15, 0xF6, 0xB4, 0xE5, 0x44, 0xEE, 0x72, 0x3C,
5225 	0x53, 0x11, 0x52, 0xC9, 0xC9, 0x61, 0x4F, 0x92,
5226 	0x33, 0x64, 0x70, 0x43, 0x07, 0xF1, 0x3F, 0x7F,
5227 	0x15, 0xAC, 0xF0, 0xC1, 0x54, 0x7D, 0x55, 0xC0,
5228 	0x29, 0xDC, 0x9E, 0xCC, 0xE4, 0x1D, 0x11, 0x72,
5229 	0x45, 0xF4, 0xD2, 0x70, 0xFC, 0x34, 0xB2, 0x1F,
5230 	0xF3, 0xAD, 0x6A, 0xF0, 0xE5, 0x56, 0x11, 0xF8,
5231 	0x0C, 0x3A, 0x8B, 0x04, 0x46, 0x7C, 0x77, 0xD9,
5232 	0x41, 0x1F, 0x40, 0xBE, 0x93, 0x80, 0x9D, 0x23,
5233 	0x75, 0x80, 0x12, 0x26, 0x5A, 0x72, 0x1C, 0xDD,
5234 	0x47, 0xB3, 0x2A, 0x33, 0xD8, 0x19, 0x61, 0xE3
5235 };
5236 static const unsigned char RSA_E[] = {
5237 	0x01, 0x00, 0x01
5238 };
5239 /* unused
5240 static const unsigned char RSA_D[] = {
5241 	0xAE, 0x56, 0x0B, 0x56, 0x7E, 0xDA, 0x83, 0x75,
5242 	0x6C, 0xC1, 0x5C, 0x00, 0x02, 0x96, 0x1E, 0x58,
5243 	0xF9, 0xA9, 0xF7, 0x2E, 0x27, 0xEB, 0x5E, 0xCA,
5244 	0x9B, 0xB0, 0x10, 0xD6, 0x22, 0x7F, 0xA4, 0x6E,
5245 	0xA2, 0x03, 0x10, 0xE6, 0xCB, 0x7B, 0x0D, 0x34,
5246 	0x1E, 0x76, 0x37, 0xF5, 0xD3, 0xE5, 0x00, 0x70,
5247 	0x09, 0x9E, 0xD4, 0x69, 0xFB, 0x40, 0x0A, 0x8B,
5248 	0xCB, 0x3E, 0xC8, 0xB4, 0xBC, 0xB1, 0x50, 0xEA,
5249 	0x9D, 0xD9, 0x89, 0x8A, 0x98, 0x40, 0x79, 0xD1,
5250 	0x07, 0x66, 0xA7, 0x90, 0x63, 0x82, 0xB1, 0xE0,
5251 	0x24, 0xD0, 0x89, 0x6A, 0xEC, 0xC5, 0xF3, 0x21,
5252 	0x7D, 0xB8, 0xA5, 0x45, 0x3A, 0x3B, 0x34, 0x42,
5253 	0xC2, 0x82, 0x3C, 0x8D, 0xFA, 0x5D, 0xA0, 0xA8,
5254 	0x24, 0xC8, 0x40, 0x22, 0x19, 0xCB, 0xB5, 0x85,
5255 	0x67, 0x69, 0x60, 0xE4, 0xD0, 0x7E, 0xA3, 0x3B,
5256 	0xF7, 0x70, 0x50, 0xC9, 0x5C, 0x97, 0x29, 0x49
5257 };
5258 */
5259 static const unsigned char RSA_P[] = {
5260 	0xF2, 0xE7, 0x6F, 0x66, 0x2E, 0xC4, 0x03, 0xD4,
5261 	0x89, 0x24, 0xCC, 0xE1, 0xCD, 0x3F, 0x01, 0x82,
5262 	0xC1, 0xFB, 0xAF, 0x44, 0xFA, 0xCC, 0x0E, 0xAA,
5263 	0x9D, 0x74, 0xA9, 0x65, 0xEF, 0xED, 0x4C, 0x87,
5264 	0xF0, 0xB3, 0xC6, 0xEA, 0x61, 0x85, 0xDE, 0x4E,
5265 	0x66, 0xB2, 0x5A, 0x9F, 0x7A, 0x41, 0xC5, 0x66,
5266 	0x57, 0xDF, 0x88, 0xF0, 0xB5, 0xF2, 0xC7, 0x7E,
5267 	0xE6, 0x55, 0x21, 0x96, 0x83, 0xD8, 0xAB, 0x57
5268 };
5269 static const unsigned char RSA_Q[] = {
5270 	0xCA, 0x0A, 0x92, 0xBF, 0x58, 0xB0, 0x2E, 0xF6,
5271 	0x66, 0x50, 0xB1, 0x48, 0x29, 0x42, 0x86, 0x6C,
5272 	0x98, 0x06, 0x7E, 0xB8, 0xB5, 0x4F, 0xFB, 0xC4,
5273 	0xF3, 0xC3, 0x36, 0x91, 0x07, 0xB6, 0xDB, 0xE9,
5274 	0x56, 0x3C, 0x51, 0x7D, 0xB5, 0xEC, 0x0A, 0xA9,
5275 	0x7C, 0x66, 0xF9, 0xD8, 0x25, 0xDE, 0xD2, 0x94,
5276 	0x5A, 0x58, 0xF1, 0x93, 0xE4, 0xF0, 0x5F, 0x27,
5277 	0xBD, 0x83, 0xC7, 0xCA, 0x48, 0x6A, 0xB2, 0x55
5278 };
5279 static const unsigned char RSA_DP[] = {
5280 	0xAF, 0x97, 0xBE, 0x60, 0x0F, 0xCE, 0x83, 0x36,
5281 	0x51, 0x2D, 0xD9, 0x2E, 0x22, 0x41, 0x39, 0xC6,
5282 	0x5C, 0x94, 0xA4, 0xCF, 0x28, 0xBD, 0xFA, 0x9C,
5283 	0x3B, 0xD6, 0xE9, 0xDE, 0x56, 0xE3, 0x24, 0x3F,
5284 	0xE1, 0x31, 0x14, 0xCA, 0xBA, 0x55, 0x1B, 0xAF,
5285 	0x71, 0x6D, 0xDD, 0x35, 0x0C, 0x1C, 0x1F, 0xA7,
5286 	0x2C, 0x3E, 0xDB, 0xAF, 0xA6, 0xD8, 0x2A, 0x7F,
5287 	0x01, 0xE2, 0xE8, 0xB4, 0xF5, 0xFA, 0xDB, 0x61
5288 };
5289 static const unsigned char RSA_DQ[] = {
5290 	0x29, 0xC0, 0x4B, 0x98, 0xFD, 0x13, 0xD3, 0x70,
5291 	0x99, 0xAE, 0x1D, 0x24, 0x83, 0x5A, 0x3A, 0xFB,
5292 	0x1F, 0xE3, 0x5F, 0xB6, 0x7D, 0xC9, 0x5C, 0x86,
5293 	0xD3, 0xB4, 0xC8, 0x86, 0xE9, 0xE8, 0x30, 0xC3,
5294 	0xA4, 0x4D, 0x6C, 0xAD, 0xA4, 0xB5, 0x75, 0x72,
5295 	0x96, 0xC1, 0x94, 0xE9, 0xC4, 0xD1, 0xAA, 0x04,
5296 	0x7C, 0x33, 0x1B, 0x20, 0xEB, 0xD3, 0x7C, 0x66,
5297 	0x72, 0xF4, 0x53, 0x8A, 0x0A, 0xB2, 0xF9, 0xCD
5298 };
5299 static const unsigned char RSA_IQ[] = {
5300 	0xE8, 0xEB, 0x04, 0x79, 0xA5, 0xC1, 0x79, 0xDE,
5301 	0xD5, 0x49, 0xA1, 0x0B, 0x48, 0xB9, 0x0E, 0x55,
5302 	0x74, 0x2C, 0x54, 0xEE, 0xA8, 0xB0, 0x01, 0xC2,
5303 	0xD2, 0x3C, 0x3E, 0x47, 0x3A, 0x7C, 0xC8, 0x3D,
5304 	0x2E, 0x33, 0x54, 0x4D, 0x40, 0x29, 0x41, 0x74,
5305 	0xBA, 0xE1, 0x93, 0x09, 0xEC, 0xE0, 0x1B, 0x4D,
5306 	0x1F, 0x2A, 0xCA, 0x4A, 0x0B, 0x5F, 0xE6, 0xBE,
5307 	0x59, 0x0A, 0xC4, 0xC9, 0xD9, 0x82, 0xAC, 0xE1
5308 };
5309 
5310 static const br_rsa_public_key RSA_PK = {
5311 	(void *)RSA_N, sizeof RSA_N,
5312 	(void *)RSA_E, sizeof RSA_E
5313 };
5314 
5315 static const br_rsa_private_key RSA_SK = {
5316 	1024,
5317 	(void *)RSA_P, sizeof RSA_P,
5318 	(void *)RSA_Q, sizeof RSA_Q,
5319 	(void *)RSA_DP, sizeof RSA_DP,
5320 	(void *)RSA_DQ, sizeof RSA_DQ,
5321 	(void *)RSA_IQ, sizeof RSA_IQ
5322 };
5323 
5324 /*
5325  * A 2048-bit RSA key, generated with OpenSSL.
5326  */
5327 static const unsigned char RSA2048_N[] = {
5328 	0xEA, 0xB1, 0xB0, 0x87, 0x60, 0xE2, 0x69, 0xF5,
5329 	0xC9, 0x3F, 0xCB, 0x4F, 0x9E, 0x7D, 0xD0, 0x56,
5330 	0x54, 0x8F, 0xF5, 0x59, 0x97, 0x04, 0x3F, 0x30,
5331 	0xE1, 0xFB, 0x7B, 0xF5, 0xA0, 0xEB, 0xA7, 0x7B,
5332 	0x29, 0x96, 0x7B, 0x32, 0x48, 0x48, 0xA4, 0x99,
5333 	0x90, 0x92, 0x48, 0xFB, 0xDC, 0xEC, 0x8A, 0x3B,
5334 	0xE0, 0x57, 0x6E, 0xED, 0x1C, 0x5B, 0x78, 0xCF,
5335 	0x07, 0x41, 0x96, 0x4C, 0x2F, 0xA2, 0xD1, 0xC8,
5336 	0xA0, 0x5F, 0xFC, 0x2A, 0x5B, 0x3F, 0xBC, 0xD7,
5337 	0xE6, 0x91, 0xF1, 0x44, 0xD6, 0xD8, 0x41, 0x66,
5338 	0x3E, 0x80, 0xEE, 0x98, 0x73, 0xD5, 0x32, 0x60,
5339 	0x7F, 0xDF, 0xBF, 0xB2, 0x0B, 0xA5, 0xCA, 0x11,
5340 	0x88, 0x1A, 0x0E, 0xA1, 0x61, 0x4C, 0x5A, 0x70,
5341 	0xCE, 0x12, 0xC0, 0x61, 0xF5, 0x50, 0x0E, 0xF6,
5342 	0xC1, 0xC2, 0x88, 0x8B, 0xE5, 0xCE, 0xAE, 0x90,
5343 	0x65, 0x23, 0xA7, 0xAD, 0xCB, 0x04, 0x17, 0x00,
5344 	0xA2, 0xDB, 0xB0, 0x21, 0x49, 0xDD, 0x3C, 0x2E,
5345 	0x8C, 0x47, 0x27, 0xF2, 0x84, 0x51, 0x63, 0xEB,
5346 	0xF8, 0xAF, 0x63, 0xA7, 0x89, 0xE1, 0xF0, 0x2F,
5347 	0xF9, 0x9C, 0x0A, 0x8A, 0xBC, 0x57, 0x05, 0xB0,
5348 	0xEF, 0xA0, 0xDA, 0x67, 0x70, 0xAF, 0x3F, 0xA4,
5349 	0x92, 0xFC, 0x4A, 0xAC, 0xEF, 0x89, 0x41, 0x58,
5350 	0x57, 0x63, 0x0F, 0x6A, 0x89, 0x68, 0x45, 0x4C,
5351 	0x20, 0xF9, 0x7F, 0x50, 0x9D, 0x8C, 0x52, 0xC4,
5352 	0xC1, 0x33, 0xCD, 0x42, 0x35, 0x12, 0xEC, 0x82,
5353 	0xF9, 0xC1, 0xB7, 0x60, 0x7B, 0x52, 0x61, 0xD0,
5354 	0xAE, 0xFD, 0x4B, 0x68, 0xB1, 0x55, 0x0E, 0xAB,
5355 	0x99, 0x24, 0x52, 0x60, 0x8E, 0xDB, 0x90, 0x34,
5356 	0x61, 0xE3, 0x95, 0x7C, 0x34, 0x64, 0x06, 0xCB,
5357 	0x44, 0x17, 0x70, 0x78, 0xC1, 0x1B, 0x87, 0x8F,
5358 	0xCF, 0xB0, 0x7D, 0x93, 0x59, 0x84, 0x49, 0xF5,
5359 	0x55, 0xBB, 0x48, 0xCA, 0xD3, 0x76, 0x1E, 0x7F
5360 };
5361 static const unsigned char RSA2048_E[] = {
5362 	0x01, 0x00, 0x01
5363 };
5364 static const unsigned char RSA2048_P[] = {
5365 	0xF9, 0xA7, 0xB5, 0xC4, 0xE8, 0x52, 0xEC, 0xB1,
5366 	0x33, 0x6A, 0x68, 0x32, 0x63, 0x2D, 0xBA, 0xE5,
5367 	0x61, 0x14, 0x69, 0x82, 0xC8, 0x31, 0x14, 0xD5,
5368 	0xC2, 0x6C, 0x1A, 0xBE, 0xA0, 0x68, 0xA6, 0xC5,
5369 	0xEA, 0x40, 0x59, 0xFB, 0x0A, 0x30, 0x3D, 0xD5,
5370 	0xDD, 0x94, 0xAE, 0x0C, 0x9F, 0xEE, 0x19, 0x0C,
5371 	0xA8, 0xF2, 0x85, 0x27, 0x60, 0xAA, 0xD5, 0x7C,
5372 	0x59, 0x91, 0x1F, 0xAF, 0x5E, 0x00, 0xC8, 0x2D,
5373 	0xCA, 0xB4, 0x70, 0xA1, 0xF8, 0x8C, 0x0A, 0xB3,
5374 	0x08, 0x95, 0x03, 0x9E, 0xA4, 0x6B, 0x9D, 0x55,
5375 	0x47, 0xE0, 0xEC, 0xB3, 0x21, 0x7C, 0xE4, 0x16,
5376 	0x91, 0xE3, 0xD7, 0x1B, 0x3D, 0x81, 0xF1, 0xED,
5377 	0x16, 0xF9, 0x05, 0x0E, 0xA6, 0x9F, 0x37, 0x73,
5378 	0x18, 0x1B, 0x9C, 0x9D, 0x33, 0xAD, 0x25, 0xEF,
5379 	0x3A, 0xC0, 0x4B, 0x34, 0x24, 0xF5, 0xFD, 0x59,
5380 	0xF5, 0x65, 0xE6, 0x92, 0x2A, 0x04, 0x06, 0x3D
5381 };
5382 static const unsigned char RSA2048_Q[] = {
5383 	0xF0, 0xA8, 0xA4, 0x20, 0xDD, 0xF3, 0x99, 0xE6,
5384 	0x1C, 0xB1, 0x21, 0xE8, 0x66, 0x68, 0x48, 0x00,
5385 	0x04, 0xE3, 0x21, 0xA3, 0xE8, 0xC5, 0xFD, 0x85,
5386 	0x6D, 0x2C, 0x98, 0xE3, 0x36, 0x39, 0x3E, 0x80,
5387 	0xB7, 0x36, 0xA5, 0xA9, 0xBB, 0xEB, 0x1E, 0xB8,
5388 	0xEB, 0x44, 0x65, 0xE8, 0x81, 0x7D, 0xE0, 0x87,
5389 	0xC1, 0x08, 0x94, 0xDD, 0x92, 0x40, 0xF4, 0x8B,
5390 	0x3C, 0xB5, 0xC1, 0xAD, 0x9D, 0x4C, 0x14, 0xCD,
5391 	0xD9, 0x2D, 0xB6, 0xE4, 0x99, 0xB3, 0x71, 0x63,
5392 	0x64, 0xE1, 0x31, 0x7E, 0x34, 0x95, 0x96, 0x52,
5393 	0x85, 0x27, 0xBE, 0x40, 0x10, 0x0A, 0x9E, 0x01,
5394 	0x1C, 0xBB, 0xB2, 0x5B, 0x40, 0x85, 0x65, 0x6E,
5395 	0xA0, 0x88, 0x73, 0xF6, 0x22, 0xCC, 0x23, 0x26,
5396 	0x62, 0xAD, 0x92, 0x57, 0x57, 0xF4, 0xD4, 0xDF,
5397 	0xD9, 0x7C, 0xDE, 0xAD, 0xD2, 0x1F, 0x32, 0x29,
5398 	0xBA, 0xE7, 0xE2, 0x32, 0xA1, 0xA0, 0xBF, 0x6B
5399 };
5400 static const unsigned char RSA2048_DP[] = {
5401 	0xB2, 0xF9, 0xD7, 0x66, 0xC5, 0x83, 0x05, 0x6A,
5402 	0x77, 0xC8, 0xB5, 0xD0, 0x41, 0xA7, 0xBC, 0x0F,
5403 	0xCB, 0x4B, 0xFD, 0xE4, 0x23, 0x2E, 0x84, 0x98,
5404 	0x46, 0x1C, 0x88, 0x03, 0xD7, 0x2D, 0x8F, 0x39,
5405 	0xDD, 0x98, 0xAA, 0xA9, 0x3D, 0x01, 0x9E, 0xA2,
5406 	0xDE, 0x8A, 0x43, 0x48, 0x8B, 0xB2, 0xFE, 0xC4,
5407 	0x43, 0xAE, 0x31, 0x65, 0x2C, 0x78, 0xEC, 0x39,
5408 	0x8C, 0x60, 0x6C, 0xCD, 0xA4, 0xDF, 0x7C, 0xA2,
5409 	0xCF, 0x6A, 0x12, 0x41, 0x1B, 0xD5, 0x11, 0xAA,
5410 	0x8D, 0xE1, 0x7E, 0x49, 0xD1, 0xE7, 0xD0, 0x50,
5411 	0x1E, 0x0A, 0x92, 0xC6, 0x4C, 0xA0, 0xA3, 0x47,
5412 	0xC6, 0xE9, 0x07, 0x01, 0xE1, 0x53, 0x72, 0x23,
5413 	0x9D, 0x4F, 0x82, 0x9F, 0xA1, 0x36, 0x0D, 0x63,
5414 	0x76, 0x89, 0xFC, 0xF9, 0xF9, 0xDD, 0x0C, 0x8F,
5415 	0xF7, 0x97, 0x79, 0x92, 0x75, 0x58, 0xE0, 0x7B,
5416 	0x08, 0x61, 0x38, 0x2D, 0xDA, 0xEF, 0x2D, 0xA5
5417 };
5418 static const unsigned char RSA2048_DQ[] = {
5419 	0x8B, 0x69, 0x56, 0x33, 0x08, 0x00, 0x8F, 0x3D,
5420 	0xC3, 0x8F, 0x45, 0x52, 0x48, 0xC8, 0xCE, 0x34,
5421 	0xDC, 0x9F, 0xEB, 0x23, 0xF5, 0xBB, 0x84, 0x62,
5422 	0xDF, 0xDC, 0xBE, 0xF0, 0x98, 0xBF, 0xCE, 0x9A,
5423 	0x68, 0x08, 0x4B, 0x2D, 0xA9, 0x83, 0xC9, 0xF7,
5424 	0x5B, 0xAA, 0xF2, 0xD2, 0x1E, 0xF9, 0x99, 0xB1,
5425 	0x6A, 0xBC, 0x9A, 0xE8, 0x44, 0x4A, 0x46, 0x9F,
5426 	0xC6, 0x5A, 0x90, 0x49, 0x0F, 0xDF, 0x3C, 0x0A,
5427 	0x07, 0x6E, 0xB9, 0x0D, 0x72, 0x90, 0x85, 0xF6,
5428 	0x0B, 0x41, 0x7D, 0x17, 0x5C, 0x44, 0xEF, 0xA0,
5429 	0xFC, 0x2C, 0x0A, 0xC5, 0x37, 0xC5, 0xBE, 0xC4,
5430 	0x6C, 0x2D, 0xBB, 0x63, 0xAB, 0x5B, 0xDB, 0x67,
5431 	0x9B, 0xAD, 0x90, 0x67, 0x9C, 0xBE, 0xDE, 0xF9,
5432 	0xE4, 0x9E, 0x22, 0x31, 0x60, 0xED, 0x9E, 0xC7,
5433 	0xD2, 0x48, 0xC9, 0x02, 0xAE, 0xBF, 0x8D, 0xA2,
5434 	0xA8, 0xF8, 0x9D, 0x8B, 0xB1, 0x1F, 0xDA, 0xE3
5435 };
5436 static const unsigned char RSA2048_IQ[] = {
5437 	0xB5, 0x48, 0xD4, 0x48, 0x5A, 0x33, 0xCD, 0x13,
5438 	0xFE, 0xC6, 0xF7, 0x01, 0x0A, 0x3E, 0x40, 0xA3,
5439 	0x45, 0x94, 0x6F, 0x85, 0xE4, 0x68, 0x66, 0xEC,
5440 	0x69, 0x6A, 0x3E, 0xE0, 0x62, 0x3F, 0x0C, 0xEF,
5441 	0x21, 0xCC, 0xDA, 0xAD, 0x75, 0x98, 0x12, 0xCA,
5442 	0x9E, 0x31, 0xDD, 0x95, 0x0D, 0xBD, 0x55, 0xEB,
5443 	0x92, 0xF7, 0x9E, 0xBD, 0xFC, 0x28, 0x35, 0x96,
5444 	0x31, 0xDC, 0x53, 0x80, 0xA3, 0x57, 0x89, 0x3C,
5445 	0x4A, 0xEC, 0x40, 0x75, 0x13, 0xAC, 0x4F, 0x36,
5446 	0x3A, 0x86, 0x9A, 0xA6, 0x58, 0xC9, 0xED, 0xCB,
5447 	0xD6, 0xBB, 0xB2, 0xD9, 0xAA, 0x04, 0xC4, 0xE8,
5448 	0x47, 0x3E, 0xBD, 0x14, 0x9B, 0x8F, 0x61, 0x70,
5449 	0x69, 0x66, 0x23, 0x62, 0x18, 0xE3, 0x52, 0x98,
5450 	0xE3, 0x22, 0xE9, 0x6F, 0xDA, 0x28, 0x68, 0x08,
5451 	0xB8, 0xB9, 0x8B, 0x97, 0x8B, 0x77, 0x3F, 0xCA,
5452 	0x9D, 0x9D, 0xBE, 0xD5, 0x2D, 0x3E, 0xC2, 0x11
5453 };
5454 
5455 static const br_rsa_public_key RSA2048_PK = {
5456 	(void *)RSA2048_N, sizeof RSA2048_N,
5457 	(void *)RSA2048_E, sizeof RSA2048_E
5458 };
5459 
5460 static const br_rsa_private_key RSA2048_SK = {
5461 	2048,
5462 	(void *)RSA2048_P, sizeof RSA2048_P,
5463 	(void *)RSA2048_Q, sizeof RSA2048_Q,
5464 	(void *)RSA2048_DP, sizeof RSA2048_DP,
5465 	(void *)RSA2048_DQ, sizeof RSA2048_DQ,
5466 	(void *)RSA2048_IQ, sizeof RSA2048_IQ
5467 };
5468 
5469 /*
5470  * A 4096-bit RSA key, generated with OpenSSL.
5471  */
5472 static const unsigned char RSA4096_N[] = {
5473 	0xAA, 0x17, 0x71, 0xBC, 0x92, 0x3E, 0xB5, 0xBD,
5474 	0x3E, 0x64, 0xCF, 0x03, 0x9B, 0x24, 0x65, 0x33,
5475 	0x5F, 0xB4, 0x47, 0x89, 0xE5, 0x63, 0xE4, 0xA0,
5476 	0x5A, 0x51, 0x95, 0x07, 0x73, 0xEE, 0x00, 0xF6,
5477 	0x3E, 0x31, 0x0E, 0xDA, 0x15, 0xC3, 0xAA, 0x21,
5478 	0x6A, 0xCD, 0xFF, 0x46, 0x6B, 0xDF, 0x0A, 0x7F,
5479 	0x8A, 0xC2, 0x25, 0x19, 0x47, 0x44, 0xD8, 0x52,
5480 	0xC1, 0x56, 0x25, 0x6A, 0xE0, 0xD2, 0x61, 0x11,
5481 	0x2C, 0xF7, 0x73, 0x9F, 0x5F, 0x74, 0xAA, 0xDD,
5482 	0xDE, 0xAF, 0x81, 0xF6, 0x0C, 0x1A, 0x3A, 0xF9,
5483 	0xC5, 0x47, 0x82, 0x75, 0x1D, 0x41, 0xF0, 0xB2,
5484 	0xFD, 0xBA, 0xE2, 0xA4, 0xA1, 0xB8, 0x32, 0x48,
5485 	0x06, 0x0D, 0x29, 0x2F, 0x44, 0x14, 0xF5, 0xAC,
5486 	0x54, 0x83, 0xC4, 0xB6, 0x85, 0x85, 0x9B, 0x1C,
5487 	0x05, 0x61, 0x28, 0x62, 0x24, 0xA8, 0xF0, 0xE6,
5488 	0x80, 0xA7, 0x91, 0xE8, 0xC7, 0x8E, 0x52, 0x17,
5489 	0xBE, 0xAF, 0xC6, 0x0A, 0xA3, 0xFB, 0xD1, 0x04,
5490 	0x15, 0x3B, 0x14, 0x35, 0xA5, 0x41, 0xF5, 0x30,
5491 	0xFE, 0xEF, 0x53, 0xA7, 0x89, 0x91, 0x78, 0x30,
5492 	0xBE, 0x3A, 0xB1, 0x4B, 0x2E, 0x4A, 0x0E, 0x25,
5493 	0x1D, 0xCF, 0x51, 0x54, 0x52, 0xF1, 0x88, 0x85,
5494 	0x36, 0x23, 0xDE, 0xBA, 0x66, 0x25, 0x60, 0x8D,
5495 	0x45, 0xD7, 0xD8, 0x10, 0x41, 0x64, 0xC7, 0x4B,
5496 	0xCE, 0x72, 0x13, 0xD7, 0x20, 0xF8, 0x2A, 0x74,
5497 	0xA5, 0x05, 0xF4, 0x5A, 0x90, 0xF4, 0x9C, 0xE7,
5498 	0xC9, 0xCF, 0x1E, 0xD5, 0x9C, 0xAC, 0xE5, 0x00,
5499 	0x83, 0x73, 0x9F, 0xE7, 0xC6, 0x93, 0xC0, 0x06,
5500 	0xA7, 0xB8, 0xF8, 0x46, 0x90, 0xC8, 0x78, 0x27,
5501 	0x2E, 0xCC, 0xC0, 0x2A, 0x20, 0xC5, 0xFC, 0x63,
5502 	0x22, 0xA1, 0xD6, 0x16, 0xAD, 0x9C, 0xD6, 0xFC,
5503 	0x7A, 0x6E, 0x9C, 0x98, 0x51, 0xEE, 0x6B, 0x6D,
5504 	0x8F, 0xEF, 0xCE, 0x7C, 0x5D, 0x16, 0xB0, 0xCE,
5505 	0x9C, 0xEE, 0x92, 0xCF, 0xB7, 0xEB, 0x41, 0x36,
5506 	0x3A, 0x6C, 0xF2, 0x0D, 0x26, 0x11, 0x2F, 0x6C,
5507 	0x27, 0x62, 0xA2, 0xCC, 0x63, 0x53, 0xBD, 0xFC,
5508 	0x9F, 0xBE, 0x9B, 0xBD, 0xE5, 0xA7, 0xDA, 0xD4,
5509 	0xF8, 0xED, 0x5E, 0x59, 0x2D, 0xAC, 0xCD, 0x13,
5510 	0xEB, 0xE5, 0x9E, 0x39, 0x82, 0x8B, 0xFD, 0xA8,
5511 	0xFB, 0xCB, 0x86, 0x27, 0xC7, 0x4B, 0x4C, 0xD0,
5512 	0xBA, 0x12, 0xD0, 0x76, 0x1A, 0xDB, 0x30, 0xC5,
5513 	0xB3, 0x2C, 0x4C, 0xC5, 0x32, 0x03, 0x05, 0x67,
5514 	0x8D, 0xD0, 0x14, 0x37, 0x59, 0x2B, 0xE3, 0x1C,
5515 	0x25, 0x3E, 0xA5, 0xE4, 0xF1, 0x0D, 0x34, 0xBB,
5516 	0xD5, 0xF6, 0x76, 0x45, 0x5B, 0x0F, 0x1E, 0x07,
5517 	0x0A, 0xBA, 0x9D, 0x71, 0x87, 0xDE, 0x45, 0x50,
5518 	0xE5, 0x0F, 0x32, 0xBB, 0x5C, 0x32, 0x2D, 0x40,
5519 	0xCD, 0x19, 0x95, 0x4E, 0xC5, 0x54, 0x3A, 0x9A,
5520 	0x46, 0x9B, 0x85, 0xFE, 0x53, 0xB7, 0xD8, 0x65,
5521 	0x6D, 0x68, 0x0C, 0xBB, 0xE3, 0x3D, 0x8E, 0x64,
5522 	0xBE, 0x27, 0x15, 0xAB, 0x12, 0x20, 0xD9, 0x84,
5523 	0xF5, 0x02, 0xE4, 0xBB, 0xDD, 0xAB, 0x59, 0x51,
5524 	0xF4, 0xE1, 0x79, 0xBE, 0xB8, 0xA3, 0x8E, 0xD1,
5525 	0x1C, 0xB0, 0xFA, 0x48, 0x76, 0xC2, 0x9D, 0x7A,
5526 	0x01, 0xA5, 0xAF, 0x8C, 0xBA, 0xAA, 0x4C, 0x06,
5527 	0x2B, 0x0A, 0x62, 0xF0, 0x79, 0x5B, 0x42, 0xFC,
5528 	0xF8, 0xBF, 0xD4, 0xDD, 0x62, 0x32, 0xE3, 0xCE,
5529 	0xF1, 0x2C, 0xE6, 0xED, 0xA8, 0x8A, 0x41, 0xA3,
5530 	0xC1, 0x1E, 0x07, 0xB6, 0x43, 0x10, 0x80, 0xB7,
5531 	0xF3, 0xD0, 0x53, 0x2A, 0x9A, 0x98, 0xA7, 0x4F,
5532 	0x9E, 0xA3, 0x3E, 0x1B, 0xDA, 0x93, 0x15, 0xF2,
5533 	0xF4, 0x20, 0xA5, 0xA8, 0x4F, 0x8A, 0xBA, 0xED,
5534 	0xB1, 0x17, 0x6C, 0x0F, 0xD9, 0x8F, 0x38, 0x11,
5535 	0xF3, 0xD9, 0x5E, 0x88, 0xA1, 0xA1, 0x82, 0x8B,
5536 	0x30, 0xD7, 0xC6, 0xCE, 0x4E, 0x30, 0x55, 0x57
5537 };
5538 static const unsigned char RSA4096_E[] = {
5539 	0x01, 0x00, 0x01
5540 };
5541 static const unsigned char RSA4096_P[] = {
5542 	0xD3, 0x7A, 0x22, 0xD8, 0x9B, 0xBF, 0x42, 0xB4,
5543 	0x53, 0x04, 0x10, 0x6A, 0x84, 0xFD, 0x7C, 0x1D,
5544 	0xF6, 0xF4, 0x10, 0x65, 0xAA, 0xE5, 0xE1, 0x4E,
5545 	0xB4, 0x37, 0xF7, 0xAC, 0xF7, 0xD3, 0xB2, 0x3B,
5546 	0xFE, 0xE7, 0x63, 0x42, 0xE9, 0xF0, 0x3C, 0xE0,
5547 	0x42, 0xB4, 0xBB, 0x09, 0xD0, 0xB2, 0x7C, 0x70,
5548 	0xA4, 0x11, 0x97, 0x90, 0x01, 0xD0, 0x0E, 0x7B,
5549 	0xAF, 0x7D, 0x30, 0x4E, 0x6B, 0x3A, 0xCC, 0x50,
5550 	0x4E, 0xAF, 0x2F, 0xC3, 0xC2, 0x4F, 0x7E, 0xC5,
5551 	0xB3, 0x76, 0x33, 0xFB, 0xA7, 0xB1, 0x96, 0xA5,
5552 	0x46, 0x41, 0xC6, 0xDA, 0x5A, 0xFD, 0x17, 0x0A,
5553 	0x6A, 0x86, 0x54, 0x83, 0xE1, 0x57, 0xE7, 0xAF,
5554 	0x8C, 0x42, 0xE5, 0x39, 0xF2, 0xC7, 0xFC, 0x4A,
5555 	0x3D, 0x3C, 0x94, 0x89, 0xC2, 0xC6, 0x2D, 0x0A,
5556 	0x5F, 0xD0, 0x21, 0x23, 0x5C, 0xC9, 0xC8, 0x44,
5557 	0x8A, 0x96, 0x72, 0x4D, 0x96, 0xC6, 0x17, 0x0C,
5558 	0x36, 0x43, 0x7F, 0xD8, 0xA0, 0x7A, 0x31, 0x7E,
5559 	0xCE, 0x13, 0xE3, 0x13, 0x2E, 0xE0, 0x91, 0xC2,
5560 	0x61, 0x13, 0x16, 0x8D, 0x99, 0xCB, 0xA9, 0x2C,
5561 	0x4D, 0x9D, 0xDD, 0x1D, 0x03, 0xE7, 0xA7, 0x50,
5562 	0xF4, 0x16, 0x43, 0xB1, 0x7F, 0x99, 0x61, 0x3F,
5563 	0xA5, 0x59, 0x91, 0x16, 0xC3, 0x06, 0x63, 0x59,
5564 	0xE9, 0xDA, 0xB5, 0x06, 0x2E, 0x0C, 0xD9, 0xAB,
5565 	0x93, 0x89, 0x12, 0x82, 0xFB, 0x90, 0xD9, 0x30,
5566 	0x60, 0xF7, 0x35, 0x2D, 0x18, 0x78, 0xEB, 0x2B,
5567 	0xA1, 0x06, 0x67, 0x37, 0xDE, 0x72, 0x20, 0xD2,
5568 	0x80, 0xE5, 0x2C, 0xD7, 0x5E, 0xC7, 0x67, 0x2D,
5569 	0x40, 0xE7, 0x7A, 0xCF, 0x4A, 0x69, 0x9D, 0xA7,
5570 	0x90, 0x9F, 0x3B, 0xDF, 0x07, 0x97, 0x64, 0x69,
5571 	0x06, 0x4F, 0xBA, 0xF4, 0xE5, 0xBD, 0x71, 0x60,
5572 	0x36, 0xB7, 0xA3, 0xDE, 0x76, 0xC5, 0x38, 0xD7,
5573 	0x1D, 0x9A, 0xFC, 0x36, 0x3D, 0x3B, 0xDC, 0xCF
5574 };
5575 static const unsigned char RSA4096_Q[] = {
5576 	0xCD, 0xE6, 0xC6, 0xA6, 0x42, 0x4C, 0x45, 0x65,
5577 	0x8B, 0x85, 0x76, 0xFC, 0x21, 0xB6, 0x57, 0x79,
5578 	0x3C, 0xE4, 0xE3, 0x85, 0x55, 0x2F, 0x59, 0xD3,
5579 	0x3F, 0x74, 0xAF, 0x9F, 0x11, 0x04, 0x10, 0x8B,
5580 	0xF9, 0x5F, 0x4D, 0x25, 0xEE, 0x20, 0xF9, 0x69,
5581 	0x3B, 0x02, 0xB6, 0x43, 0x0D, 0x0C, 0xED, 0x30,
5582 	0x31, 0x57, 0xE7, 0x9A, 0x57, 0x24, 0x6B, 0x4A,
5583 	0x5E, 0xA2, 0xBF, 0xD4, 0x47, 0x7D, 0xFA, 0x78,
5584 	0x51, 0x86, 0x80, 0x68, 0x85, 0x7C, 0x7B, 0x08,
5585 	0x4A, 0x35, 0x24, 0x4F, 0x8B, 0x24, 0x49, 0xF8,
5586 	0x16, 0x06, 0x9C, 0x57, 0x4E, 0x94, 0x4C, 0xBD,
5587 	0x6E, 0x53, 0x52, 0xC9, 0xC1, 0x64, 0x43, 0x22,
5588 	0x1E, 0xDD, 0xEB, 0xAC, 0x90, 0x58, 0xCA, 0xBA,
5589 	0x9C, 0xAC, 0xCF, 0xDD, 0x08, 0x6D, 0xB7, 0x31,
5590 	0xDB, 0x0D, 0x83, 0xE6, 0x50, 0xA6, 0x69, 0xB1,
5591 	0x1C, 0x68, 0x92, 0xB4, 0xB5, 0x76, 0xDE, 0xBD,
5592 	0x4F, 0xA5, 0x30, 0xED, 0x23, 0xFF, 0xE5, 0x80,
5593 	0x21, 0xAB, 0xED, 0xE6, 0xDC, 0x32, 0x3D, 0xF7,
5594 	0x45, 0xB8, 0x19, 0x3D, 0x8E, 0x15, 0x7C, 0xE5,
5595 	0x0D, 0xC8, 0x9B, 0x7D, 0x1F, 0x7C, 0x14, 0x14,
5596 	0x41, 0x09, 0xA7, 0xEB, 0xFB, 0xD9, 0x5F, 0x9A,
5597 	0x94, 0xB6, 0xD5, 0xA0, 0x2C, 0xAF, 0xB5, 0xEF,
5598 	0x5C, 0x5A, 0x8E, 0x34, 0xA1, 0x8F, 0xEB, 0x38,
5599 	0x0F, 0x31, 0x6E, 0x45, 0x21, 0x7A, 0xAA, 0xAF,
5600 	0x6C, 0xB1, 0x8E, 0xB2, 0xB9, 0xD4, 0x1E, 0xEF,
5601 	0x66, 0xD8, 0x4E, 0x3D, 0xF2, 0x0C, 0xF1, 0xBA,
5602 	0xFB, 0xA9, 0x27, 0xD2, 0x45, 0x54, 0x83, 0x4B,
5603 	0x10, 0xC4, 0x9A, 0x32, 0x9C, 0xC7, 0x9A, 0xCF,
5604 	0x4E, 0xBF, 0x07, 0xFC, 0x27, 0xB7, 0x96, 0x1D,
5605 	0xDE, 0x9D, 0xE4, 0x84, 0x68, 0x00, 0x9A, 0x9F,
5606 	0x3D, 0xE6, 0xC7, 0x26, 0x11, 0x48, 0x79, 0xFA,
5607 	0x09, 0x76, 0xC8, 0x25, 0x3A, 0xE4, 0x70, 0xF9
5608 };
5609 static const unsigned char RSA4096_DP[] = {
5610 	0x5C, 0xE3, 0x3E, 0xBF, 0x09, 0xD9, 0xFE, 0x80,
5611 	0x9A, 0x1E, 0x24, 0xDF, 0xC4, 0xBE, 0x5A, 0x70,
5612 	0x06, 0xF2, 0xB8, 0xE9, 0x0F, 0x21, 0x9D, 0xCF,
5613 	0x26, 0x15, 0x97, 0x32, 0x60, 0x40, 0x99, 0xFF,
5614 	0x04, 0x3D, 0xBA, 0x39, 0xBF, 0xEB, 0x87, 0xB1,
5615 	0xB1, 0x5B, 0x14, 0xF4, 0x80, 0xB8, 0x85, 0x34,
5616 	0x2C, 0xBC, 0x95, 0x67, 0xE9, 0x83, 0xEB, 0x78,
5617 	0xA4, 0x62, 0x46, 0x7F, 0x8B, 0x55, 0xEE, 0x3C,
5618 	0x2F, 0xF3, 0x7E, 0xF5, 0x6B, 0x39, 0xE3, 0xA3,
5619 	0x0E, 0xEA, 0x92, 0x76, 0xAC, 0xF7, 0xB2, 0x05,
5620 	0xB2, 0x50, 0x5D, 0xF9, 0xB7, 0x11, 0x87, 0xB7,
5621 	0x49, 0x86, 0xEB, 0x44, 0x6A, 0x0C, 0x64, 0x75,
5622 	0x95, 0x14, 0x24, 0xFF, 0x49, 0x06, 0x52, 0x68,
5623 	0x81, 0x71, 0x44, 0x85, 0x26, 0x0A, 0x49, 0xEA,
5624 	0x4E, 0x9F, 0x6A, 0x8E, 0xCF, 0xC8, 0xC9, 0xB0,
5625 	0x61, 0x77, 0x27, 0x89, 0xB0, 0xFA, 0x1D, 0x51,
5626 	0x7D, 0xDC, 0x34, 0x21, 0x80, 0x8B, 0x6B, 0x86,
5627 	0x19, 0x1A, 0x5F, 0x19, 0x23, 0xF3, 0xFB, 0xD1,
5628 	0xF7, 0x35, 0x9D, 0x28, 0x61, 0x2F, 0x35, 0x85,
5629 	0x82, 0x2A, 0x1E, 0xDF, 0x09, 0xC2, 0x0C, 0x99,
5630 	0xE0, 0x3C, 0x8F, 0x4B, 0x3D, 0x92, 0xAF, 0x46,
5631 	0x77, 0x68, 0x59, 0xF4, 0x37, 0x81, 0x6C, 0xCE,
5632 	0x27, 0x8B, 0xAB, 0x0B, 0xA5, 0xDA, 0x7B, 0x19,
5633 	0x83, 0xDA, 0x27, 0x49, 0x65, 0x1A, 0x00, 0x6B,
5634 	0xE1, 0x8B, 0x73, 0xCD, 0xF4, 0xFB, 0xD7, 0xBF,
5635 	0xF8, 0x20, 0x89, 0xE1, 0xDE, 0x51, 0x1E, 0xDD,
5636 	0x97, 0x44, 0x12, 0x68, 0x1E, 0xF7, 0x52, 0xF8,
5637 	0x6B, 0x93, 0xC1, 0x3B, 0x9F, 0xA1, 0xB8, 0x5F,
5638 	0xCB, 0x84, 0x45, 0x95, 0xF7, 0x0D, 0xA6, 0x4B,
5639 	0x03, 0x3C, 0xAE, 0x0F, 0xB7, 0x81, 0x78, 0x75,
5640 	0x1C, 0x53, 0x99, 0x24, 0xB3, 0xE2, 0x78, 0xCE,
5641 	0xF3, 0xF0, 0x09, 0x6C, 0x01, 0x85, 0x73, 0xBD
5642 };
5643 static const unsigned char RSA4096_DQ[] = {
5644 	0xCD, 0x88, 0xAC, 0x8B, 0x92, 0x6A, 0xA8, 0x6B,
5645 	0x71, 0x16, 0xCD, 0x6B, 0x6A, 0x0B, 0xA6, 0xCD,
5646 	0xF3, 0x27, 0x58, 0xA6, 0xE4, 0x1D, 0xDC, 0x40,
5647 	0xAF, 0x7B, 0x3F, 0x44, 0x3D, 0xAC, 0x1D, 0x08,
5648 	0x5C, 0xE9, 0xF1, 0x0D, 0x07, 0xE4, 0x0A, 0x94,
5649 	0x2C, 0xBF, 0xCC, 0x48, 0xAA, 0x62, 0x58, 0xF2,
5650 	0x5E, 0x8F, 0x2D, 0x36, 0x37, 0xFE, 0xB6, 0xCB,
5651 	0x0A, 0x24, 0xD3, 0xF0, 0x87, 0x5D, 0x0E, 0x05,
5652 	0xC4, 0xFB, 0xCA, 0x7A, 0x8B, 0xA5, 0x72, 0xFB,
5653 	0x17, 0x78, 0x6C, 0xC2, 0xAA, 0x56, 0x93, 0x2F,
5654 	0xFE, 0x6C, 0xA2, 0xEB, 0xD4, 0x18, 0xDD, 0x71,
5655 	0xCB, 0x0B, 0x89, 0xFC, 0xB3, 0xFB, 0xED, 0xB7,
5656 	0xC5, 0xB0, 0x29, 0x6D, 0x9C, 0xB9, 0xC5, 0xC4,
5657 	0xFA, 0x58, 0xD7, 0x36, 0x01, 0x0F, 0xE4, 0x6A,
5658 	0xF4, 0x0B, 0x4D, 0xBB, 0x3E, 0x8E, 0x9F, 0xBA,
5659 	0x98, 0x6D, 0x1A, 0xE5, 0x20, 0xAF, 0x84, 0x30,
5660 	0xDD, 0xAC, 0x3C, 0x66, 0xBC, 0x24, 0xD9, 0x67,
5661 	0x4A, 0x35, 0x61, 0xC9, 0xAD, 0xCC, 0xC9, 0x66,
5662 	0x68, 0x46, 0x19, 0x8C, 0x04, 0xA5, 0x16, 0x83,
5663 	0x5F, 0x7A, 0xFD, 0x1B, 0xAD, 0xAE, 0x22, 0x2D,
5664 	0x05, 0xAF, 0x29, 0xDC, 0xBB, 0x0E, 0x86, 0x0C,
5665 	0xBC, 0x9E, 0xB6, 0x28, 0xA9, 0xF2, 0xCC, 0x5E,
5666 	0x1F, 0x86, 0x95, 0xA5, 0x9C, 0x11, 0x19, 0xF0,
5667 	0x5F, 0xDA, 0x2C, 0x04, 0xFE, 0x22, 0x80, 0xF7,
5668 	0x94, 0x3C, 0xBA, 0x01, 0x56, 0xD6, 0x93, 0xFA,
5669 	0xCE, 0x62, 0xE5, 0xD7, 0x98, 0x23, 0xAB, 0xB9,
5670 	0xC7, 0x35, 0x57, 0xF6, 0xE2, 0x16, 0x36, 0xE9,
5671 	0x5B, 0xD7, 0xA5, 0x45, 0x18, 0x93, 0x77, 0xC9,
5672 	0xB1, 0x05, 0xA8, 0x66, 0xE1, 0x0E, 0xB5, 0xDF,
5673 	0x23, 0x35, 0xE1, 0xC2, 0xFA, 0x3E, 0x80, 0x1A,
5674 	0xAD, 0xA4, 0x0C, 0xEF, 0xC7, 0x18, 0xDE, 0x09,
5675 	0xE6, 0x20, 0x98, 0x31, 0xF1, 0xD3, 0xCF, 0xA1
5676 };
5677 static const unsigned char RSA4096_IQ[] = {
5678 	0x76, 0xD7, 0x75, 0xDF, 0xA3, 0x0C, 0x9D, 0x64,
5679 	0x6E, 0x00, 0x82, 0x2E, 0x5C, 0x5E, 0x43, 0xC4,
5680 	0xD2, 0x28, 0xB0, 0xB1, 0xA8, 0xD8, 0x26, 0x91,
5681 	0xA0, 0xF5, 0xC8, 0x69, 0xFF, 0x24, 0x33, 0xAB,
5682 	0x67, 0xC7, 0xA3, 0xAE, 0xBB, 0x17, 0x27, 0x5B,
5683 	0x5A, 0xCD, 0x67, 0xA3, 0x70, 0x91, 0x9E, 0xD5,
5684 	0xF1, 0x97, 0x00, 0x0A, 0x30, 0x64, 0x3D, 0x9B,
5685 	0xBF, 0xB5, 0x8C, 0xAC, 0xC7, 0x20, 0x0A, 0xD2,
5686 	0x76, 0x36, 0x36, 0x5D, 0xE4, 0xAC, 0x5D, 0xBC,
5687 	0x44, 0x32, 0xB0, 0x76, 0x33, 0x40, 0xDD, 0x29,
5688 	0x22, 0xE0, 0xFF, 0x55, 0x4C, 0xCE, 0x3F, 0x43,
5689 	0x34, 0x95, 0x94, 0x7C, 0x22, 0x0D, 0xAB, 0x20,
5690 	0x38, 0x70, 0xC3, 0x4A, 0x19, 0xCF, 0x81, 0xCE,
5691 	0x79, 0x28, 0x6C, 0xC2, 0xA3, 0xB3, 0x48, 0x20,
5692 	0x2D, 0x3E, 0x74, 0x45, 0x2C, 0xAA, 0x9F, 0xA5,
5693 	0xC2, 0xE3, 0x2D, 0x41, 0x95, 0xBD, 0x78, 0xAB,
5694 	0x6A, 0xA8, 0x7A, 0x45, 0x52, 0xE2, 0x66, 0xE7,
5695 	0x6C, 0x38, 0x03, 0xA5, 0xDA, 0xAD, 0x94, 0x3C,
5696 	0x6A, 0xA1, 0xA2, 0xD5, 0xCD, 0xDE, 0x05, 0xCC,
5697 	0x6E, 0x3D, 0x8A, 0xF6, 0x9A, 0xA5, 0x0F, 0xA9,
5698 	0x18, 0xC4, 0xF9, 0x9C, 0x2F, 0xB3, 0xF1, 0x30,
5699 	0x38, 0x60, 0x69, 0x09, 0x67, 0x2C, 0xE9, 0x42,
5700 	0x68, 0x3C, 0x70, 0x32, 0x1A, 0x44, 0x32, 0x02,
5701 	0x82, 0x9F, 0x60, 0xE8, 0xA4, 0x42, 0x74, 0xA2,
5702 	0xA2, 0x5A, 0x99, 0xDC, 0xC8, 0xCA, 0x15, 0x4D,
5703 	0xFF, 0xF1, 0x8A, 0x23, 0xD8, 0xD3, 0xB1, 0x9A,
5704 	0xB4, 0x0B, 0xBB, 0xE8, 0x38, 0x74, 0x0C, 0x52,
5705 	0xC7, 0x8B, 0x63, 0x4C, 0xEA, 0x7D, 0x5F, 0x58,
5706 	0x34, 0x53, 0x3E, 0x23, 0x10, 0xBB, 0x60, 0x6B,
5707 	0x52, 0x9D, 0x89, 0x9F, 0xF0, 0x5F, 0xCE, 0xB3,
5708 	0x9C, 0x0E, 0x75, 0x0F, 0x87, 0xF6, 0x66, 0xA5,
5709 	0x4C, 0x94, 0x84, 0xFE, 0x94, 0xB9, 0x04, 0xB7
5710 };
5711 
5712 static const br_rsa_public_key RSA4096_PK = {
5713 	(void *)RSA4096_N, sizeof RSA4096_N,
5714 	(void *)RSA4096_E, sizeof RSA4096_E
5715 };
5716 
5717 static const br_rsa_private_key RSA4096_SK = {
5718 	4096,
5719 	(void *)RSA4096_P, sizeof RSA4096_P,
5720 	(void *)RSA4096_Q, sizeof RSA4096_Q,
5721 	(void *)RSA4096_DP, sizeof RSA4096_DP,
5722 	(void *)RSA4096_DQ, sizeof RSA4096_DQ,
5723 	(void *)RSA4096_IQ, sizeof RSA4096_IQ
5724 };
5725 
5726 static void
5727 test_RSA_core(const char *name, br_rsa_public fpub, br_rsa_private fpriv)
5728 {
5729 	unsigned char t1[512], t2[512], t3[512];
5730 	size_t len;
5731 
5732 	printf("Test %s: ", name);
5733 	fflush(stdout);
5734 
5735 	/*
5736 	 * A KAT test (computed with OpenSSL).
5737 	 */
5738 	len = hextobin(t1, "45A3DC6A106BCD3BD0E48FB579643AA3FF801E5903E80AA9B43A695A8E7F454E93FA208B69995FF7A6D5617C2FEB8E546375A664977A48931842AAE796B5A0D64393DCA35F3490FC157F5BD83B9D58C2F7926E6AE648A2BD96CAB8FCCD3D35BB11424AD47D973FF6D69CA774841AEC45DFAE99CCF79893E7047FDE6CB00AA76D");
5739 	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003021300906052B0E03021A05000414A94A8FE5CCB19BA61C4C0873D391E987982FBBD3");
5740 	memcpy(t3, t1, len);
5741 	if (!fpub(t3, len, &RSA_PK)) {
5742 		fprintf(stderr, "RSA public operation failed (1)\n");
5743 		exit(EXIT_FAILURE);
5744 	}
5745 	check_equals("KAT RSA pub", t2, t3, len);
5746 	if (!fpriv(t3, &RSA_SK)) {
5747 		fprintf(stderr, "RSA private operation failed (1)\n");
5748 		exit(EXIT_FAILURE);
5749 	}
5750 	check_equals("KAT RSA priv (1)", t1, t3, len);
5751 
5752 	/*
5753 	 * Another KAT test, with a (fake) hash value slightly different
5754 	 * (last byte is 0xD9 instead of 0xD3).
5755 	 */
5756 	len = hextobin(t1, "32C2DB8B2C73BBCA9960CB3F11FEDEE7B699359EF2EEC3A632E56B7FF3DE2F371E5179BAB03F17E0BB20D2891ACAB679F95DA9B43A01DAAD192FADD25D8ACCF1498EC80F5BBCAC88EA59D60E3BC9D3CE27743981DE42385FFFFF04DD2D716E1A46C04A28ECAF6CD200DAB81083A830D61538D69BB39A183107BD50302AA6BC28");
5757 	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003021300906052B0E03021A05000414A94A8FE5CCB19BA61C4C0873D391E987982FBBD9");
5758 	memcpy(t3, t1, len);
5759 	if (!fpub(t3, len, &RSA_PK)) {
5760 		fprintf(stderr, "RSA public operation failed (2)\n");
5761 		exit(EXIT_FAILURE);
5762 	}
5763 	check_equals("KAT RSA pub", t2, t3, len);
5764 	if (!fpriv(t3, &RSA_SK)) {
5765 		fprintf(stderr, "RSA private operation failed (2)\n");
5766 		exit(EXIT_FAILURE);
5767 	}
5768 	check_equals("KAT RSA priv (2)", t1, t3, len);
5769 
5770 	/*
5771 	 * Third KAT vector is invalid, because the encrypted value is
5772 	 * out of range: instead of x, value is x+n (where n is the
5773 	 * modulus). Mathematically, this still works, but implementations
5774 	 * are supposed to reject such cases.
5775 	 */
5776 	len = hextobin(t1, "F27781B9B3B358583A24F9BA6B34EE98B67A5AE8D8D4FA567BA773EB6B85EF88848680640A1E2F5FD117876E5FB928B64C6EFC7E03632A3F4C941E15657C0C705F3BB8D0B03A0249143674DB1FE6E5406D690BF2DA76EA7FF3AC6FCE12C7801252FAD52D332BE4AB41F9F8CF1728CDF98AB8E8C20E0C350E4F707A6402C01E0B");
5777 	hextobin(t2, "BFB6A62E873F9C8DA0C42E7B59360FB0FFE12549E5E636B048C2086B77A7C051663506A959DF177F15F6B4E544EE723C531152C9C9614F923364704307F13F7F15ACF0C1547D55C029DC9ECCE41D117245F4D270FC34B21FF3AD6AEFE58633281540902F547F79F3461F44D33CCB2D094231ADCC76BE25511B4513BB70491DBC");
5778 	memcpy(t3, t1, len);
5779 	if (fpub(t3, len, &RSA_PK)) {
5780 		size_t u;
5781 		fprintf(stderr, "RSA public operation should have failed"
5782 			" (value out of range)\n");
5783 		fprintf(stderr, "x = ");
5784 		for (u = 0; u < len; u ++) {
5785 			fprintf(stderr, "%02X", t3[u]);
5786 		}
5787 		fprintf(stderr, "\n");
5788 		exit(EXIT_FAILURE);
5789 	}
5790 	memcpy(t3, t2, len);
5791 	if (fpriv(t3, &RSA_SK)) {
5792 		size_t u;
5793 		fprintf(stderr, "RSA private operation should have failed"
5794 			" (value out of range)\n");
5795 		fprintf(stderr, "x = ");
5796 		for (u = 0; u < len; u ++) {
5797 			fprintf(stderr, "%02X", t3[u]);
5798 		}
5799 		fprintf(stderr, "\n");
5800 		exit(EXIT_FAILURE);
5801 	}
5802 
5803 	/*
5804 	 * RSA-2048 test vector.
5805 	 */
5806 	len = hextobin(t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
5807 	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003031300D060960864801650304020105000420A5A0A792A09438811584A68E240C6C89F1FB1C53C0C86E270B942635F4F6B24A");
5808 	memcpy(t3, t1, len);
5809 	if (!fpub(t3, len, &RSA2048_PK)) {
5810 		fprintf(stderr, "RSA public operation failed (2048)\n");
5811 		exit(EXIT_FAILURE);
5812 	}
5813 	check_equals("KAT RSA pub", t2, t3, len);
5814 	if (!fpriv(t3, &RSA2048_SK)) {
5815 		fprintf(stderr, "RSA private operation failed (2048)\n");
5816 		exit(EXIT_FAILURE);
5817 	}
5818 	check_equals("KAT RSA priv (2048)", t1, t3, len);
5819 
5820 	/*
5821 	 * RSA-4096 test vector.
5822 	 */
5823 	len = hextobin(t1, "7D35B6B4D85252D08A2658C0B04126CC617B0E56B2A782A5FA2722AD05BD49538111682C12DA2C5FA1B9C30FB1AB8DA2C6A49EB4226A4D32290CF091FBB22EC499C7B18192C230B29F957DAF551F1EAD1917BA9E03D757100BD1F96B829708A6188A3927436113BB21E175D436BBB7A90E20162203FFB8F675313DFB21EFDA3EA0C7CC9B605AE7FB47E2DD2A9C4D5F124D7DE1B690AF9ADFEDC6055E0F9D2C9A891FB2501F3055D6DA7E94D51672BA1E86AEB782E4B020F70E0DF5399262909FC5B4770B987F2826EF2099A15F3CD5A0D6FE82E0C85FBA2C53C77305F534A7B0C7EA0D5244E37F1C1318EEF7079995F0642E4AB80EB0ED60DB4955FB652ED372DAC787581054A827C37A25C7B4DE7AE7EF3D099D47D6682ADF02BCC4DE04DDF2920F7124CF5B4955705E4BDB97A0BF341B584797878B4D3795134A9469FB391E4E4988F0AA451027CBC2ED6121FC23B26BF593E3C51DEDD53B62E23050D5B41CA34204679916A87AF1B17873A0867924D0C303942ADA478B769487FCEF861D4B20DCEE6942CCB84184833CDB258167258631C796BC1977D001354E2EE168ABE3B45FC969EA7F22B8E133C57A10FBB25ED19694E89C399CF7723B3C0DF0CC9F57A8ED0959EFC392FB31B8ADAEA969E2DEE8282CB245E5677368F00CCE4BA52C07C16BE7F9889D57191D5B2FE552D72B3415C64C09EE622457766EC809344A1EFE");
5824 	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003031300D0609608648016503040201050004205B60DD5AD5B3C62E0DA25FD0D8CB26325E1CE32CC9ED234B288235BCCF6ED2C8");
5825 	memcpy(t3, t1, len);
5826 	if (!fpub(t3, len, &RSA4096_PK)) {
5827 		fprintf(stderr, "RSA public operation failed (4096)\n");
5828 		exit(EXIT_FAILURE);
5829 	}
5830 	check_equals("KAT RSA pub", t2, t3, len);
5831 	if (!fpriv(t3, &RSA4096_SK)) {
5832 		fprintf(stderr, "RSA private operation failed (4096)\n");
5833 		exit(EXIT_FAILURE);
5834 	}
5835 	check_equals("KAT RSA priv (4096)", t1, t3, len);
5836 
5837 	printf("done.\n");
5838 	fflush(stdout);
5839 }
5840 
5841 static const unsigned char SHA1_OID[] = {
5842 	0x05, 0x2B, 0x0E, 0x03, 0x02, 0x1A
5843 };
5844 
5845 static void
5846 test_RSA_sign(const char *name, br_rsa_private fpriv,
5847 	br_rsa_pkcs1_sign fsign, br_rsa_pkcs1_vrfy fvrfy)
5848 {
5849 	unsigned char t1[128], t2[128];
5850 	unsigned char hv[20], tmp[20];
5851 	unsigned char rsa_n[128], rsa_e[3], rsa_p[64], rsa_q[64];
5852 	unsigned char rsa_dp[64], rsa_dq[64], rsa_iq[64];
5853 	br_rsa_public_key rsa_pk;
5854 	br_rsa_private_key rsa_sk;
5855 	unsigned char hv2[64], tmp2[64], sig[128];
5856 	br_sha1_context hc;
5857 	size_t u;
5858 
5859 	printf("Test %s: ", name);
5860 	fflush(stdout);
5861 
5862 	/*
5863 	 * Verify the KAT test (computed with OpenSSL).
5864 	 */
5865 	hextobin(t1, "45A3DC6A106BCD3BD0E48FB579643AA3FF801E5903E80AA9B43A695A8E7F454E93FA208B69995FF7A6D5617C2FEB8E546375A664977A48931842AAE796B5A0D64393DCA35F3490FC157F5BD83B9D58C2F7926E6AE648A2BD96CAB8FCCD3D35BB11424AD47D973FF6D69CA774841AEC45DFAE99CCF79893E7047FDE6CB00AA76D");
5866 	br_sha1_init(&hc);
5867 	br_sha1_update(&hc, "test", 4);
5868 	br_sha1_out(&hc, hv);
5869 	if (!fvrfy(t1, sizeof t1, SHA1_OID, sizeof tmp, &RSA_PK, tmp)) {
5870 		fprintf(stderr, "Signature verification failed\n");
5871 		exit(EXIT_FAILURE);
5872 	}
5873 	check_equals("Extracted hash value", hv, tmp, sizeof tmp);
5874 
5875 	/*
5876 	 * Regenerate the signature. This should yield the same value as
5877 	 * the KAT test, since PKCS#1 v1.5 signatures are deterministic
5878 	 * (except the usual detail about hash function parameter
5879 	 * encoding, but OpenSSL uses the same convention as BearSSL).
5880 	 */
5881 	if (!fsign(SHA1_OID, hv, 20, &RSA_SK, t2)) {
5882 		fprintf(stderr, "Signature generation failed\n");
5883 		exit(EXIT_FAILURE);
5884 	}
5885 	check_equals("Regenerated signature", t1, t2, sizeof t1);
5886 
5887 	/*
5888 	 * Use the raw private core to generate fake signatures, where
5889 	 * one byte of the padded hash value is altered. They should all be
5890 	 * rejected.
5891 	 */
5892 	hextobin(t2, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF003021300906052B0E03021A05000414A94A8FE5CCB19BA61C4C0873D391E987982FBBD3");
5893 	for (u = 0; u < (sizeof t2) - 20; u ++) {
5894 		memcpy(t1, t2, sizeof t2);
5895 		t1[u] ^= 0x01;
5896 		if (!fpriv(t1, &RSA_SK)) {
5897 			fprintf(stderr, "RSA private key operation failed\n");
5898 			exit(EXIT_FAILURE);
5899 		}
5900 		if (fvrfy(t1, sizeof t1, SHA1_OID, sizeof tmp, &RSA_PK, tmp)) {
5901 			fprintf(stderr,
5902 				"Signature verification should have failed\n");
5903 			exit(EXIT_FAILURE);
5904 		}
5905 		printf(".");
5906 		fflush(stdout);
5907 	}
5908 
5909 	/*
5910 	 * Another KAT test, which historically showed a bug.
5911 	 */
5912 	rsa_pk.n = rsa_n;
5913 	rsa_pk.nlen = hextobin(rsa_n, "E65DAEF196D22C300B3DAE1CE5157EDF821BB6038E419D8D363A8B2DA84A1321042330E6F87A8BD8FE6BA1D2A17031955ED2315CC5FD2397197E238A5E0D2D0AFD25717E814EC4D2BBA887327A3C5B3A450FD8D547BDFCBB0F73B997CA13DD5E7572C4D5BAA764A349BAB2F868ACF4574AE2C7AEC94B77D2EE00A21B6CB175BB");
5914 	rsa_pk.e = rsa_e;
5915 	rsa_pk.elen = hextobin(rsa_e, "010001");
5916 
5917 	rsa_sk.n_bitlen = 1024;
5918 	rsa_sk.p = rsa_p;
5919 	rsa_sk.plen = hextobin(rsa_p, "FF58513DBA4F3F42DFDFD3E6AFB6BD62DE27E06BA3C9D9F9B542CB21228C2AAE67936514161C8FDC1A248A50195CAF22ADC50DA89BFED1B9EEFBB37304241357");
5920 	rsa_sk.q = rsa_q;
5921 	rsa_sk.qlen = hextobin(rsa_q, "E6F4F66818B7442297DDEB45E9B3D438E5B57BB5EF86EFF2462AD6B9C10F383517CDD2E7E36EAD4BEBCC57CFE8AA985F7E7B38B96D30FFBE9ED9FE21B1CFB63D");
5922 	rsa_sk.dp = rsa_dp;
5923 	rsa_sk.dplen = hextobin(rsa_dp, "6F89517B682D83919F9EF2BDBA955526A1A9C382E139A3A84AC01160B8E9871F458901C7035D988D6931FAE4C01F57350BB89E9DBEFE50F829E6F25CD43B39E3");
5924 	rsa_sk.dq = rsa_dq;
5925 	rsa_sk.dqlen = hextobin(rsa_dq, "409E08D2D7176F58BE64B88EB6F4394C31F8B4C412600E821A5FA1F416AFCB6A0F5EE6C33A3E9CFDC0DB4B3640427A9F3D23FC9AE491F0FBC435F98433DB8981");
5926 	rsa_sk.iq = rsa_iq;
5927 	rsa_sk.iqlen = hextobin(rsa_iq, "CF333D6AD66D02B4D11C8C23CA669D14D71803ADC3943BE03B1E48F52F385BCFDDFD0F85AD02A984E504FC6612549D4E7867B7D09DD13196BFC3FAA4B57393A9");
5928 	hextobin(sig, "CFB84D161E6DB130736FC6212EBE575571AF341CEF5757C19952A5364C90E3C47549E520E26253DAE70F645F31FA8B5DA9AE282741D3CA4B1CC365B7BD75D6D61D4CFD9AD9EDD17D23E0BA7D9775138DBABC7FF2A57587FE1EA1B51E8F3C68326E26FF89D8CF92BDD4C787D04857DFC3266E6B33B92AA08809929C72642F35C2");
5929 
5930 	hextobin(hv2, "F66C62B38E1CC69C378C0E16574AE5C6443FDFA3E85C6205C00B3231CAA3074EC1481BDC22AB575E6CF3CCD9EDA6B39F83923FC0E6475C799D257545F77233B4");
5931 	if (!fsign(BR_HASH_OID_SHA512, hv2, 64, &rsa_sk, t2)) {
5932 		fprintf(stderr, "Signature generation failed (2)\n");
5933 		exit(EXIT_FAILURE);
5934 	}
5935 	check_equals("Regenerated signature (2)", t2, sig, sizeof t2);
5936 	if (!fvrfy(t2, sizeof t2, BR_HASH_OID_SHA512,
5937 		sizeof tmp2, &rsa_pk, tmp2))
5938 	{
5939 		fprintf(stderr, "Signature verification failed (2)\n");
5940 		exit(EXIT_FAILURE);
5941 	}
5942 	check_equals("Extracted hash value (2)", hv2, tmp2, sizeof tmp2);
5943 
5944 	printf(" done.\n");
5945 	fflush(stdout);
5946 }
5947 
5948 /*
5949  * Fake RNG that returns exactly the provided bytes.
5950  */
5951 typedef struct {
5952 	const br_prng_class *vtable;
5953 	unsigned char buf[128];
5954 	size_t ptr, len;
5955 } rng_fake_ctx;
5956 
5957 static void rng_fake_init(rng_fake_ctx *cc,
5958 	const void *params, const void *seed, size_t len);
5959 static void rng_fake_generate(rng_fake_ctx *cc, void *dst, size_t len);
5960 static void rng_fake_update(rng_fake_ctx *cc, const void *src, size_t len);
5961 
5962 static const br_prng_class rng_fake_vtable = {
5963 	sizeof(rng_fake_ctx),
5964 	(void (*)(const br_prng_class **,
5965 		const void *, const void *, size_t))&rng_fake_init,
5966 	(void (*)(const br_prng_class **,
5967 		void *, size_t))&rng_fake_generate,
5968 	(void (*)(const br_prng_class **,
5969 		const void *, size_t))&rng_fake_update
5970 };
5971 
5972 static void
5973 rng_fake_init(rng_fake_ctx *cc, const void *params,
5974 	const void *seed, size_t len)
5975 {
5976 	(void)params;
5977 	if (len > sizeof cc->buf) {
5978 		fprintf(stderr, "seed is too large (%lu bytes)\n",
5979 			(unsigned long)len);
5980 		exit(EXIT_FAILURE);
5981 	}
5982 	cc->vtable = &rng_fake_vtable;
5983 	memcpy(cc->buf, seed, len);
5984 	cc->ptr = 0;
5985 	cc->len = len;
5986 }
5987 
5988 static void
5989 rng_fake_generate(rng_fake_ctx *cc, void *dst, size_t len)
5990 {
5991 	if (len > (cc->len - cc->ptr)) {
5992 		fprintf(stderr, "asking for more data than expected\n");
5993 		exit(EXIT_FAILURE);
5994 	}
5995 	memcpy(dst, cc->buf + cc->ptr, len);
5996 	cc->ptr += len;
5997 }
5998 
5999 static void
6000 rng_fake_update(rng_fake_ctx *cc, const void *src, size_t len)
6001 {
6002 	(void)cc;
6003 	(void)src;
6004 	(void)len;
6005 	fprintf(stderr, "unexpected update\n");
6006 	exit(EXIT_FAILURE);
6007 }
6008 
6009 /*
6010  * Test vectors from pkcs-1v2-1d2-vec.zip (originally from ftp.rsa.com).
6011  * There are ten RSA keys, and for each RSA key, there are 6 messages,
6012  * each with an explicit salt.
6013  *
6014  * Field order:
6015  *    modulus (n)
6016  *    public exponent (e)
6017  *    first factor (p)
6018  *    second factor (q)
6019  *    first private exponent (dp)
6020  *    second private exponent (dq)
6021  *    CRT coefficient (iq)
6022  *    message 1
6023  *    salt 1 (20-byte random value)
6024  *    signature 1
6025  *    message 2
6026  *    salt 2 (20-byte random value)
6027  *    signature 2
6028  *    ...
6029  *    message 6
6030  *    salt 6 (20-byte random value)
6031  *    signature 6
6032  *
6033  * This pattern is repeated for all keys. The array stops on a NULL.
6034  */
6035 static const char *KAT_RSA_PSS[] = {
6036 
6037 	/* 1024-bit key */
6038 	"a56e4a0e701017589a5187dc7ea841d156f2ec0e36ad52a44dfeb1e61f7ad991d8c51056ffedb162b4c0f283a12a88a394dff526ab7291cbb307ceabfce0b1dfd5cd9508096d5b2b8b6df5d671ef6377c0921cb23c270a70e2598e6ff89d19f105acc2d3f0cb35f29280e1386b6f64c4ef22e1e1f20d0ce8cffb2249bd9a2137",
6039 	"010001",
6040 	"33a5042a90b27d4f5451ca9bbbd0b44771a101af884340aef9885f2a4bbe92e894a724ac3c568c8f97853ad07c0266c8c6a3ca0929f1e8f11231884429fc4d9ae55fee896a10ce707c3ed7e734e44727a39574501a532683109c2abacaba283c31b4bd2f53c3ee37e352cee34f9e503bd80c0622ad79c6dcee883547c6a3b325",
6041 	"e7e8942720a877517273a356053ea2a1bc0c94aa72d55c6e86296b2dfc967948c0a72cbccca7eacb35706e09a1df55a1535bd9b3cc34160b3b6dcd3eda8e6443",
6042 	"b69dca1cf7d4d7ec81e75b90fcca874abcde123fd2700180aa90479b6e48de8d67ed24f9f19d85ba275874f542cd20dc723e6963364a1f9425452b269a6799fd",
6043 	"28fa13938655be1f8a159cbaca5a72ea190c30089e19cd274a556f36c4f6e19f554b34c077790427bbdd8dd3ede2448328f385d81b30e8e43b2fffa027861979",
6044 	"1a8b38f398fa712049898d7fb79ee0a77668791299cdfa09efc0e507acb21ed74301ef5bfd48be455eaeb6e1678255827580a8e4e8e14151d1510a82a3f2e729",
6045 	"27156aba4126d24a81f3a528cbfb27f56886f840a9f6e86e17a44b94fe9319584b8e22fdde1e5a2e3bd8aa5ba8d8584194eb2190acf832b847f13a3d24a79f4d",
6046 
6047 	"cdc87da223d786df3b45e0bbbc721326d1ee2af806cc315475cc6f0d9c66e1b62371d45ce2392e1ac92844c310102f156a0d8d52c1f4c40ba3aa65095786cb769757a6563ba958fed0bcc984e8b517a3d5f515b23b8a41e74aa867693f90dfb061a6e86dfaaee64472c00e5f20945729cbebe77f06ce78e08f4098fba41f9d6193c0317e8b60d4b6084acb42d29e3808a3bc372d85e331170fcbf7cc72d0b71c296648b3a4d10f416295d0807aa625cab2744fd9ea8fd223c42537029828bd16be02546f130fd2e33b936d2676e08aed1b73318b750a0167d0",
6048 	"dee959c7e06411361420ff80185ed57f3e6776af",
6049 	"9074308fb598e9701b2294388e52f971faac2b60a5145af185df5287b5ed2887e57ce7fd44dc8634e407c8e0e4360bc226f3ec227f9d9e54638e8d31f5051215df6ebb9c2f9579aa77598a38f914b5b9c1bd83c4e2f9f382a0d0aa3542ffee65984a601bc69eb28deb27dca12c82c2d4c3f66cd500f1ff2b994d8a4e30cbb33c",
6050 
6051 	"851384cdfe819c22ed6c4ccb30daeb5cf059bc8e1166b7e3530c4c233e2b5f8f71a1cca582d43ecc72b1bca16dfc7013226b9e",
6052 	"ef2869fa40c346cb183dab3d7bffc98fd56df42d",
6053 	"3ef7f46e831bf92b32274142a585ffcefbdca7b32ae90d10fb0f0c729984f04ef29a9df0780775ce43739b97838390db0a5505e63de927028d9d29b219ca2c4517832558a55d694a6d25b9dab66003c4cccd907802193be5170d26147d37b93590241be51c25055f47ef62752cfbe21418fafe98c22c4d4d47724fdb5669e843",
6054 
6055 	"a4b159941761c40c6a82f2b80d1b94f5aa2654fd17e12d588864679b54cd04ef8bd03012be8dc37f4b83af7963faff0dfa225477437c48017ff2be8191cf3955fc07356eab3f322f7f620e21d254e5db4324279fe067e0910e2e81ca2cab31c745e67a54058eb50d993cdb9ed0b4d029c06d21a94ca661c3ce27fae1d6cb20f4564d66ce4767583d0e5f060215b59017be85ea848939127bd8c9c4d47b51056c031cf336f17c9980f3b8f5b9b6878e8b797aa43b882684333e17893fe9caa6aa299f7ed1a18ee2c54864b7b2b99b72618fb02574d139ef50f019c9eef416971338e7d470",
6056 	"710b9c4747d800d4de87f12afdce6df18107cc77",
6057 	"666026fba71bd3e7cf13157cc2c51a8e4aa684af9778f91849f34335d141c00154c4197621f9624a675b5abc22ee7d5baaffaae1c9baca2cc373b3f33e78e6143c395a91aa7faca664eb733afd14d8827259d99a7550faca501ef2b04e33c23aa51f4b9e8282efdb728cc0ab09405a91607c6369961bc8270d2d4f39fce612b1",
6058 
6059 	"bc656747fa9eafb3f0",
6060 	"056f00985de14d8ef5cea9e82f8c27bef720335e",
6061 	"4609793b23e9d09362dc21bb47da0b4f3a7622649a47d464019b9aeafe53359c178c91cd58ba6bcb78be0346a7bc637f4b873d4bab38ee661f199634c547a1ad8442e03da015b136e543f7ab07c0c13e4225b8de8cce25d4f6eb8400f81f7e1833b7ee6e334d370964ca79fdb872b4d75223b5eeb08101591fb532d155a6de87",
6062 
6063 	"b45581547e5427770c768e8b82b75564e0ea4e9c32594d6bff706544de0a8776c7a80b4576550eee1b2acabc7e8b7d3ef7bb5b03e462c11047eadd00629ae575480ac1470fe046f13a2bf5af17921dc4b0aa8b02bee6334911651d7f8525d10f32b51d33be520d3ddf5a709955a3dfe78283b9e0ab54046d150c177f037fdccc5be4ea5f68b5e5a38c9d7edcccc4975f455a6909b4",
6064 	"80e70ff86a08de3ec60972b39b4fbfdcea67ae8e",
6065 	"1d2aad221ca4d31ddf13509239019398e3d14b32dc34dc5af4aeaea3c095af73479cf0a45e5629635a53a018377615b16cb9b13b3e09d671eb71e387b8545c5960da5a64776e768e82b2c93583bf104c3fdb23512b7b4e89f633dd0063a530db4524b01c3f384c09310e315a79dcd3d684022a7f31c865a664e316978b759fad",
6066 
6067 	"10aae9a0ab0b595d0841207b700d48d75faedde3b775cd6b4cc88ae06e4694ec74ba18f8520d4f5ea69cbbe7cc2beba43efdc10215ac4eb32dc302a1f53dc6c4352267e7936cfebf7c8d67035784a3909fa859c7b7b59b8e39c5c2349f1886b705a30267d402f7486ab4f58cad5d69adb17ab8cd0ce1caf5025af4ae24b1fb8794c6070cc09a51e2f9911311e3877d0044c71c57a993395008806b723ac38373d395481818528c1e7053739282053529510e935cd0fa77b8fa53cc2d474bd4fb3cc5c672d6ffdc90a00f9848712c4bcfe46c60573659b11e6457e861f0f604b6138d144f8ce4e2da73",
6068 	"a8ab69dd801f0074c2a1fc60649836c616d99681",
6069 	"2a34f6125e1f6b0bf971e84fbd41c632be8f2c2ace7de8b6926e31ff93e9af987fbc06e51e9be14f5198f91f3f953bd67da60a9df59764c3dc0fe08e1cbef0b75f868d10ad3fba749fef59fb6dac46a0d6e504369331586f58e4628f39aa278982543bc0eeb537dc61958019b394fb273f215858a0a01ac4d650b955c67f4c58",
6070 
6071 	/* 1025-bit key */
6072 	"01d40c1bcf97a68ae7cdbd8a7bf3e34fa19dcca4ef75a47454375f94514d88fed006fb829f8419ff87d6315da68a1ff3a0938e9abb3464011c303ad99199cf0c7c7a8b477dce829e8844f625b115e5e9c4a59cf8f8113b6834336a2fd2689b472cbb5e5cabe674350c59b6c17e176874fb42f8fc3d176a017edc61fd326c4b33c9",
6073 	"010001",
6074 	"027d147e4673057377fd1ea201565772176a7dc38358d376045685a2e787c23c15576bc16b9f444402d6bfc5d98a3e88ea13ef67c353eca0c0ddba9255bd7b8bb50a644afdfd1dd51695b252d22e7318d1b6687a1c10ff75545f3db0fe602d5f2b7f294e3601eab7b9d1cecd767f64692e3e536ca2846cb0c2dd486a39fa75b1",
6075 	"016601e926a0f8c9e26ecab769ea65a5e7c52cc9e080ef519457c644da6891c5a104d3ea7955929a22e7c68a7af9fcad777c3ccc2b9e3d3650bce404399b7e59d1",
6076 	"014eafa1d4d0184da7e31f877d1281ddda625664869e8379e67ad3b75eae74a580e9827abd6eb7a002cb5411f5266797768fb8e95ae40e3e8a01f35ff89e56c079",
6077 	"e247cce504939b8f0a36090de200938755e2444b29539a7da7a902f6056835c0db7b52559497cfe2c61a8086d0213c472c78851800b171f6401de2e9c2756f31",
6078 	"b12fba757855e586e46f64c38a70c68b3f548d93d787b399999d4c8f0bbd2581c21e19ed0018a6d5d3df86424b3abcad40199d31495b61309f27c1bf55d487c1",
6079 	"564b1e1fa003bda91e89090425aac05b91da9ee25061e7628d5f51304a84992fdc33762bd378a59f030a334d532bd0dae8f298ea9ed844636ad5fb8cbdc03cad",
6080 
6081 	"daba032066263faedb659848115278a52c44faa3a76f37515ed336321072c40a9d9b53bc05014078adf520875146aae70ff060226dcb7b1f1fc27e9360",
6082 	"57bf160bcb02bb1dc7280cf0458530b7d2832ff7",
6083 	"014c5ba5338328ccc6e7a90bf1c0ab3fd606ff4796d3c12e4b639ed9136a5fec6c16d8884bdd99cfdc521456b0742b736868cf90de099adb8d5ffd1deff39ba4007ab746cefdb22d7df0e225f54627dc65466131721b90af445363a8358b9f607642f78fab0ab0f43b7168d64bae70d8827848d8ef1e421c5754ddf42c2589b5b3",
6084 
6085 	"e4f8601a8a6da1be34447c0959c058570c3668cfd51dd5f9ccd6ad4411fe8213486d78a6c49f93efc2ca2288cebc2b9b60bd04b1e220d86e3d4848d709d032d1e8c6a070c6af9a499fcf95354b14ba6127c739de1bb0fd16431e46938aec0cf8ad9eb72e832a7035de9b7807bdc0ed8b68eb0f5ac2216be40ce920c0db0eddd3860ed788efaccaca502d8f2bd6d1a7c1f41ff46f1681c8f1f818e9c4f6d91a0c7803ccc63d76a6544d843e084e363b8acc55aa531733edb5dee5b5196e9f03e8b731b3776428d9e457fe3fbcb3db7274442d785890e9cb0854b6444dace791d7273de1889719338a77fe",
6086 	"7f6dd359e604e60870e898e47b19bf2e5a7b2a90",
6087 	"010991656cca182b7f29d2dbc007e7ae0fec158eb6759cb9c45c5ff87c7635dd46d150882f4de1e9ae65e7f7d9018f6836954a47c0a81a8a6b6f83f2944d6081b1aa7c759b254b2c34b691da67cc0226e20b2f18b42212761dcd4b908a62b371b5918c5742af4b537e296917674fb914194761621cc19a41f6fb953fbcbb649dea",
6088 
6089 	"52a1d96c8ac39e41e455809801b927a5b445c10d902a0dcd3850d22a66d2bb0703e67d5867114595aabf5a7aeb5a8f87034bbb30e13cfd4817a9be76230023606d0286a3faf8a4d22b728ec518079f9e64526e3a0cc7941aa338c437997c680ccac67c66bfa1",
6090 	"fca862068bce2246724b708a0519da17e648688c",
6091 	"007f0030018f53cdc71f23d03659fde54d4241f758a750b42f185f87578520c30742afd84359b6e6e8d3ed959dc6fe486bedc8e2cf001f63a7abe16256a1b84df0d249fc05d3194ce5f0912742dbbf80dd174f6c51f6bad7f16cf3364eba095a06267dc3793803ac7526aebe0a475d38b8c2247ab51c4898df7047dc6adf52c6c4",
6092 
6093 	"a7182c83ac18be6570a106aa9d5c4e3dbbd4afaeb0c60c4a23e1969d79ff",
6094 	"8070ef2de945c02387684ba0d33096732235d440",
6095 	"009cd2f4edbe23e12346ae8c76dd9ad3230a62076141f16c152ba18513a48ef6f010e0e37fd3df10a1ec629a0cb5a3b5d2893007298c30936a95903b6ba85555d9ec3673a06108fd62a2fda56d1ce2e85c4db6b24a81ca3b496c36d4fd06eb7c9166d8e94877c42bea622b3bfe9251fdc21d8d5371badad78a488214796335b40b",
6096 
6097 	"86a83d4a72ee932a4f5630af6579a386b78fe88999e0abd2d49034a4bfc854dd94f1094e2e8cd7a179d19588e4aefc1b1bd25e95e3dd461f",
6098 	"17639a4e88d722c4fca24d079a8b29c32433b0c9",
6099 	"00ec430824931ebd3baa43034dae98ba646b8c36013d1671c3cf1cf8260c374b19f8e1cc8d965012405e7e9bf7378612dfcc85fce12cda11f950bd0ba8876740436c1d2595a64a1b32efcfb74a21c873b3cc33aaf4e3dc3953de67f0674c0453b4fd9f604406d441b816098cb106fe3472bc251f815f59db2e4378a3addc181ecf",
6100 
6101 	"049f9154d871ac4a7c7ab45325ba7545a1ed08f70525b2667cf1",
6102 	"37810def1055ed922b063df798de5d0aabf886ee",
6103 	"00475b1648f814a8dc0abdc37b5527f543b666bb6e39d30e5b49d3b876dccc58eac14e32a2d55c2616014456ad2f246fc8e3d560da3ddf379a1c0bd200f10221df078c219a151bc8d4ec9d2fc2564467811014ef15d8ea01c2ebbff8c2c8efab38096e55fcbe3285c7aa558851254faffa92c1c72b78758663ef4582843139d7a6",
6104 
6105 	/* 1026-bit key */
6106 	"02f246ef451ed3eebb9a310200cc25859c048e4be798302991112eb68ce6db674e280da21feded1ae74880ca522b18db249385012827c515f0e466a1ffa691d98170574e9d0eadb087586ca48933da3cc953d95bd0ed50de10ddcb6736107d6c831c7f663e833ca4c097e700ce0fb945f88fb85fe8e5a773172565b914a471a443",
6107 	"010001",
6108 	"651451733b56de5ac0a689a4aeb6e6894a69014e076c88dd7a667eab3232bbccd2fc44ba2fa9c31db46f21edd1fdb23c5c128a5da5bab91e7f952b67759c7cff705415ac9fa0907c7ca6178f668fb948d869da4cc3b7356f4008dfd5449d32ee02d9a477eb69fc29266e5d9070512375a50fbbcc27e238ad98425f6ebbf88991",
6109 	"01bd36e18ece4b0fdb2e9c9d548bd1a7d6e2c21c6fdc35074a1d05b1c6c8b3d558ea2639c9a9a421680169317252558bd148ad215aac550e2dcf12a82d0ebfe853",
6110 	"01b1b656ad86d8e19d5dc86292b3a192fdf6e0dd37877bad14822fa00190cab265f90d3f02057b6f54d6ecb14491e5adeacebc48bf0ebd2a2ad26d402e54f61651",
6111 	"1f2779fd2e3e5e6bae05539518fba0cd0ead1aa4513a7cba18f1cf10e3f68195693d278a0f0ee72f89f9bc760d80e2f9d0261d516501c6ae39f14a476ce2ccf5",
6112 	"011a0d36794b04a854aab4b2462d439a5046c91d940b2bc6f75b62956fef35a2a6e63c5309817f307bbff9d59e7e331bd363f6d66849b18346adea169f0ae9aec1",
6113 	"0b30f0ecf558752fb3a6ce4ba2b8c675f659eba6c376585a1b39712d038ae3d2b46fcb418ae15d0905da6440e1513a30b9b7d6668fbc5e88e5ab7a175e73ba35",
6114 
6115 	"594b37333bbb2c84524a87c1a01f75fcec0e3256f108e38dca36d70d0057",
6116 	"f31ad6c8cf89df78ed77feacbcc2f8b0a8e4cfaa",
6117 	"0088b135fb1794b6b96c4a3e678197f8cac52b64b2fe907d6f27de761124964a99a01a882740ecfaed6c01a47464bb05182313c01338a8cd097214cd68ca103bd57d3bc9e816213e61d784f182467abf8a01cf253e99a156eaa8e3e1f90e3c6e4e3aa2d83ed0345b89fafc9c26077c14b6ac51454fa26e446e3a2f153b2b16797f",
6118 
6119 	"8b769528884a0d1ffd090cf102993e796dadcfbddd38e44ff6324ca451",
6120 	"fcf9f0e1f199a3d1d0da681c5b8606fc642939f7",
6121 	"02a5f0a858a0864a4f65017a7d69454f3f973a2999839b7bbc48bf78641169179556f595fa41f6ff18e286c2783079bc0910ee9cc34f49ba681124f923dfa88f426141a368a5f5a930c628c2c3c200e18a7644721a0cbec6dd3f6279bde3e8f2be5e2d4ee56f97e7ceaf33054be7042bd91a63bb09f897bd41e81197dee99b11af",
6122 
6123 	"1abdba489c5ada2f995ed16f19d5a94d9e6ec34a8d84f84557d26e5ef9b02b22887e3f9a4b690ad1149209c20c61431f0c017c36c2657b35d7b07d3f5ad8708507a9c1b831df835a56f831071814ea5d3d8d8f6ade40cba38b42db7a2d3d7a29c8f0a79a7838cf58a9757fa2fe4c40df9baa193bfc6f92b123ad57b07ace3e6ac068c9f106afd9eeb03b4f37c25dbfbcfb3071f6f9771766d072f3bb070af6605532973ae25051",
6124 	"986e7c43dbb671bd41b9a7f4b6afc80e805f2423",
6125 	"0244bcd1c8c16955736c803be401272e18cb990811b14f72db964124d5fa760649cbb57afb8755dbb62bf51f466cf23a0a1607576e983d778fceffa92df7548aea8ea4ecad2c29dd9f95bc07fe91ecf8bee255bfe8762fd7690aa9bfa4fa0849ef728c2c42c4532364522df2ab7f9f8a03b63f7a499175828668f5ef5a29e3802c",
6126 
6127 	"8fb431f5ee792b6c2ac7db53cc428655aeb32d03f4e889c5c25de683c461b53acf89f9f8d3aabdf6b9f0c2a1de12e15b49edb3919a652fe9491c25a7fce1f722c2543608b69dc375ec",
6128 	"f8312d9c8eea13ec0a4c7b98120c87509087c478",
6129 	"0196f12a005b98129c8df13c4cb16f8aa887d3c40d96df3a88e7532ef39cd992f273abc370bc1be6f097cfebbf0118fd9ef4b927155f3df22b904d90702d1f7ba7a52bed8b8942f412cd7bd676c9d18e170391dcd345c06a730964b3f30bcce0bb20ba106f9ab0eeb39cf8a6607f75c0347f0af79f16afa081d2c92d1ee6f836b8",
6130 
6131 	"fef4161dfaaf9c5295051dfc1ff3810c8c9ec2e866f7075422c8ec4216a9c4ff49427d483cae10c8534a41b2fd15fee06960ec6fb3f7a7e94a2f8a2e3e43dc4a40576c3097ac953b1de86f0b4ed36d644f23ae14425529622464ca0cbf0b1741347238157fab59e4de5524096d62baec63ac64",
6132 	"50327efec6292f98019fc67a2a6638563e9b6e2d",
6133 	"021eca3ab4892264ec22411a752d92221076d4e01c0e6f0dde9afd26ba5acf6d739ef987545d16683e5674c9e70f1de649d7e61d48d0caeb4fb4d8b24fba84a6e3108fee7d0705973266ac524b4ad280f7ae17dc59d96d3351586b5a3bdb895d1e1f7820ac6135d8753480998382ba32b7349559608c38745290a85ef4e9f9bd83",
6134 
6135 	"efd237bb098a443aeeb2bf6c3f8c81b8c01b7fcb3feb",
6136 	"b0de3fc25b65f5af96b1d5cc3b27d0c6053087b3",
6137 	"012fafec862f56e9e92f60ab0c77824f4299a0ca734ed26e0644d5d222c7f0bde03964f8e70a5cb65ed44e44d56ae0edf1ff86ca032cc5dd4404dbb76ab854586c44eed8336d08d457ce6c03693b45c0f1efef93624b95b8ec169c616d20e5538ebc0b6737a6f82b4bc0570924fc6b35759a3348426279f8b3d7744e2d222426ce",
6138 
6139 	/* 1027-bit key */
6140 	"054adb7886447efe6f57e0368f06cf52b0a3370760d161cef126b91be7f89c421b62a6ec1da3c311d75ed50e0ab5fff3fd338acc3aa8a4e77ee26369acb81ba900fa83f5300cf9bb6c53ad1dc8a178b815db4235a9a9da0c06de4e615ea1277ce559e9c108de58c14a81aa77f5a6f8d1335494498848c8b95940740be7bf7c3705",
6141 	"010001",
6142 	"fa041f8cd9697ceed38ec8caa275523b4dd72b09a301d3541d72f5d31c05cbce2d6983b36183af10690bd46c46131e35789431a556771dd0049b57461bf060c1f68472e8a67c25f357e5b6b4738fa541a730346b4a07649a2dfa806a69c975b6aba64678acc7f5913e89c622f2d8abb1e3e32554e39df94ba60c002e387d9011",
6143 	"029232336d2838945dba9dd7723f4e624a05f7375b927a87abe6a893a1658fd49f47f6c7b0fa596c65fa68a23f0ab432962d18d4343bd6fd671a5ea8d148413995",
6144 	"020ef5efe7c5394aed2272f7e81a74f4c02d145894cb1b3cab23a9a0710a2afc7e3329acbb743d01f680c4d02afb4c8fde7e20930811bb2b995788b5e872c20bb1",
6145 	"026e7e28010ecf2412d9523ad704647fb4fe9b66b1a681581b0e15553a89b1542828898f27243ebab45ff5e1acb9d4df1b051fbc62824dbc6f6c93261a78b9a759",
6146 	"012ddcc86ef655998c39ddae11718669e5e46cf1495b07e13b1014cd69b3af68304ad2a6b64321e78bf3bbca9bb494e91d451717e2d97564c6549465d0205cf421",
6147 	"010600c4c21847459fe576703e2ebecae8a5094ee63f536bf4ac68d3c13e5e4f12ac5cc10ab6a2d05a199214d1824747d551909636b774c22cac0b837599abcc75",
6148 
6149 	"9fb03b827c8217d9",
6150 	"ed7c98c95f30974fbe4fbddcf0f28d6021c0e91d",
6151 	"0323d5b7bf20ba4539289ae452ae4297080feff4518423ff4811a817837e7d82f1836cdfab54514ff0887bddeebf40bf99b047abc3ecfa6a37a3ef00f4a0c4a88aae0904b745c846c4107e8797723e8ac810d9e3d95dfa30ff4966f4d75d13768d20857f2b1406f264cfe75e27d7652f4b5ed3575f28a702f8c4ed9cf9b2d44948",
6152 
6153 	"0ca2ad77797ece86de5bf768750ddb5ed6a3116ad99bbd17edf7f782f0db1cd05b0f677468c5ea420dc116b10e80d110de2b0461ea14a38be68620392e7e893cb4ea9393fb886c20ff790642305bf302003892e54df9f667509dc53920df583f50a3dd61abb6fab75d600377e383e6aca6710eeea27156e06752c94ce25ae99fcbf8592dbe2d7e27453cb44de07100ebb1a2a19811a478adbeab270f94e8fe369d90b3ca612f9f",
6154 	"22d71d54363a4217aa55113f059b3384e3e57e44",
6155 	"049d0185845a264d28feb1e69edaec090609e8e46d93abb38371ce51f4aa65a599bdaaa81d24fba66a08a116cb644f3f1e653d95c89db8bbd5daac2709c8984000178410a7c6aa8667ddc38c741f710ec8665aa9052be929d4e3b16782c1662114c5414bb0353455c392fc28f3db59054b5f365c49e1d156f876ee10cb4fd70598",
6156 
6157 	"288062afc08fcdb7c5f8650b29837300461dd5676c17a20a3c8fb5148949e3f73d66b3ae82c7240e27c5b3ec4328ee7d6ddf6a6a0c9b5b15bcda196a9d0c76b119d534d85abd123962d583b76ce9d180bce1ca",
6158 	"4af870fbc6516012ca916c70ba862ac7e8243617",
6159 	"03fbc410a2ced59500fb99f9e2af2781ada74e13145624602782e2994813eefca0519ecd253b855fb626a90d771eae028b0c47a199cbd9f8e3269734af4163599090713a3fa910fa0960652721432b971036a7181a2bc0cab43b0b598bc6217461d7db305ff7e954c5b5bb231c39e791af6bcfa76b147b081321f72641482a2aad",
6160 
6161 	"6f4f9ab9501199cef55c6cf408fe7b36c557c49d420a4763d2463c8ad44b3cfc5be2742c0e7d9b0f6608f08c7f47b693ee",
6162 	"40d2e180fae1eac439c190b56c2c0e14ddf9a226",
6163 	"0486644bc66bf75d28335a6179b10851f43f09bded9fac1af33252bb9953ba4298cd6466b27539a70adaa3f89b3db3c74ab635d122f4ee7ce557a61e59b82ffb786630e5f9db53c77d9a0c12fab5958d4c2ce7daa807cd89ba2cc7fcd02ff470ca67b229fcce814c852c73cc93bea35be68459ce478e9d4655d121c8472f371d4f",
6164 
6165 	"e17d20385d501955823c3f666254c1d3dd36ad5168b8f18d286fdcf67a7dad94097085fab7ed86fe2142a28771717997ef1a7a08884efc39356d76077aaf82459a7fad45848875f2819b098937fe923bcc9dc442d72d754d812025090c9bc03db3080c138dd63b355d0b4b85d6688ac19f4de15084a0ba4e373b93ef4a555096691915dc23c00e954cdeb20a47cd55d16c3d8681d46ed7f2ed5ea42795be17baed25f0f4d113b3636addd585f16a8b5aec0c8fa9c5f03cbf3b9b73",
6166 	"2497dc2b4615dfae5a663d49ffd56bf7efc11304",
6167 	"022a80045353904cb30cbb542d7d4990421a6eec16a8029a8422adfd22d6aff8c4cc0294af110a0c067ec86a7d364134459bb1ae8ff836d5a8a2579840996b320b19f13a13fad378d931a65625dae2739f0c53670b35d9d3cbac08e733e4ec2b83af4b9196d63e7c4ff1ddeae2a122791a125bfea8deb0de8ccf1f4ffaf6e6fb0a",
6168 
6169 	"afbc19d479249018fdf4e09f618726440495de11ddeee38872d775fcea74a23896b5343c9c38d46af0dba224d047580cc60a65e9391cf9b59b36a860598d4e8216722f993b91cfae87bc255af89a6a199bca4a391eadbc3a24903c0bd667368f6be78e3feabfb4ffd463122763740ffbbefeab9a25564bc5d1c24c93e422f75073e2ad72bf45b10df00b52a147128e73fee33fa3f0577d77f80fbc2df1bed313290c12777f50",
6170 	"a334db6faebf11081a04f87c2d621cdec7930b9b",
6171 	"00938dcb6d583046065f69c78da7a1f1757066a7fa75125a9d2929f0b79a60b627b082f11f5b196f28eb9daa6f21c05e5140f6aef1737d2023075c05ecf04a028c686a2ab3e7d5a0664f295ce12995e890908b6ad21f0839eb65b70393a7b5afd9871de0caa0cedec5b819626756209d13ab1e7bb9546a26ff37e9a51af9fd562e",
6172 
6173 	/* 1028-bit key */
6174 	"0d10f661f29940f5ed39aa260966deb47843679d2b6fb25b3de370f3ac7c19916391fd25fb527ebfa6a4b4df45a1759d996c4bb4ebd18828c44fc52d0191871740525f47a4b0cc8da325ed8aa676b0d0f626e0a77f07692170acac8082f42faa7dc7cd123e730e31a87985204cabcbe6670d43a2dd2b2ddef5e05392fc213bc507",
6175 	"010001",
6176 	"03ce08b104fff396a979bd3e4e46925b6319ddb63acbcfd819f17d16b8077b3a87101ff34b77fe48b8b205a96e9151ba8ecea64d0cce7b23c3e6a6b83058bc49dae816ae736db5a4708e2ad435232b567f9096ce59ff28061e79ab1c02d717e6b23cea6db8eb5192fa7c1eab227dba74621c45601896eef13792c8440beb15aac1",
6177 	"03f2f331f4142d4f24b43aa10279a89652d4e7537221a1a7b2a25deb551e5de9ac497411c227a94e45f91c2d1c13cc046cf4ce14e32d058734210d44a87ee1b73f",
6178 	"034f090d73b55803030cf0361a5d8081bfb79f851523feac0a2124d08d4013ff08487771a870d0479dc0686c62f7718dfecf024b17c9267678059171339cc00839",
6179 	"02aa663adbf51ab887a018cb426e78bc2fe182dcb2f7bcb50441d17fdf0f06798b5071c6e2f5feb4d54ad8182311c1ef62d4c49f18d1f51f54b2d2cffba4da1be5",
6180 	"02bbe706078b5c0b391512d411db1b199b5a5664b84042ead37fe994ae72b9532dfbfb3e9e6981a0fbb806513141b7c2163fe56c395e4bfaee57e3833f9b918df9",
6181 	"0242b6cd00d30a767aee9a898ead453c8eaea63d500b7d1e00713edae51ce36b23b664df26e63e266ec8f76e6e63ed1ba41eb033b120f7ea5212ae21a98fbc16",
6182 
6183 	"30c7d557458b436decfdc14d06cb7b96b06718c48d7de57482a868ae7f065870a6216506d11b779323dfdf046cf5775129134b4d5689e4d9c0ce1e12d7d4b06cb5fc5820decfa41baf59bf257b32f025b7679b445b9499c92555145885992f1b76f84891ee4d3be0f5150fd5901e3a4c8ed43fd36b61d022e65ad5008dbf33293c22bfbfd07321f0f1d5fa9fdf0014c2fcb0358aad0e354b0d29",
6184 	"081b233b43567750bd6e78f396a88b9f6a445151",
6185 	"0ba373f76e0921b70a8fbfe622f0bf77b28a3db98e361051c3d7cb92ad0452915a4de9c01722f6823eeb6adf7e0ca8290f5de3e549890ac2a3c5950ab217ba58590894952de96f8df111b2575215da6c161590c745be612476ee578ed384ab33e3ece97481a252f5c79a98b5532ae00cdd62f2ecc0cd1baefe80d80b962193ec1d",
6186 
6187 	"e7b32e1556ea1b2795046ac69739d22ac8966bf11c116f614b166740e96b90653e5750945fcf772186c03790a07fda323e1a61916b06ee2157db3dff80d67d5e39a53ae268c8f09ed99a732005b0bc6a04af4e08d57a00e7201b3060efaadb73113bfc087fd837093aa25235b8c149f56215f031c24ad5bde7f29960df7d524070f7449c6f785084be1a0f733047f336f9154738674547db02a9f44dfc6e60301081e1ce99847f3b5b601ff06b4d5776a9740b9aa0d34058fd3b906e4f7859dfb07d7173e5e6f6350adac21f27b2307469",
6188 	"bd0ce19549d0700120cbe51077dbbbb00a8d8b09",
6189 	"08180de825e4b8b014a32da8ba761555921204f2f90d5f24b712908ff84f3e220ad17997c0dd6e706630ba3e84add4d5e7ab004e58074b549709565d43ad9e97b5a7a1a29e85b9f90f4aafcdf58321de8c5974ef9abf2d526f33c0f2f82e95d158ea6b81f1736db8d1af3d6ac6a83b32d18bae0ff1b2fe27de4c76ed8c7980a34e",
6190 
6191 	"8d8396e36507fe1ef6a19017548e0c716674c2fec233adb2f775665ec41f2bd0ba396b061a9daa7e866f7c23fd3531954300a342f924535ea1498c48f6c879932865fc02000c528723b7ad0335745b51209a0afed932af8f0887c219004d2abd894ea92559ee3198af3a734fe9b9638c263a728ad95a5ae8ce3eb15839f3aa7852bb390706e7760e43a71291a2e3f827237deda851874c517665f545f27238df86557f375d09ccd8bd15d8ccf61f5d78ca5c7f5cde782e6bf5d0057056d4bad98b3d2f9575e824ab7a33ff57b0ac100ab0d6ead7aa0b50f6e4d3e5ec0b966b",
6192 	"815779a91b3a8bd049bf2aeb920142772222c9ca",
6193 	"05e0fdbdf6f756ef733185ccfa8ced2eb6d029d9d56e35561b5db8e70257ee6fd019d2f0bbf669fe9b9821e78df6d41e31608d58280f318ee34f559941c8df13287574bac000b7e58dc4f414ba49fb127f9d0f8936638c76e85356c994f79750f7fa3cf4fd482df75e3fb9978cd061f7abb17572e6e63e0bde12cbdcf18c68b979",
6194 
6195 	"328c659e0a6437433cceb73c14",
6196 	"9aec4a7480d5bbc42920d7ca235db674989c9aac",
6197 	"0bc989853bc2ea86873271ce183a923ab65e8a53100e6df5d87a24c4194eb797813ee2a187c097dd872d591da60c568605dd7e742d5af4e33b11678ccb63903204a3d080b0902c89aba8868f009c0f1c0cb85810bbdd29121abb8471ff2d39e49fd92d56c655c8e037ad18fafbdc92c95863f7f61ea9efa28fea401369d19daea1",
6198 
6199 	"f37b962379a47d415a376eec8973150bcb34edd5ab654041b61430560c2144582ba133c867d852d6b8e23321901302ecb45b09ec88b1527178fa043263f3067d9ffe973032a99f4cb08ad2c7e0a2456cdd57a7df56fe6053527a5aeb67d7e552063c1ca97b1beffa7b39e997caf27878ea0f62cbebc8c21df4c889a202851e949088490c249b6e9acf1d8063f5be2343989bf95c4da01a2be78b4ab6b378015bc37957f76948b5e58e440c28453d40d7cfd57e7d690600474ab5e75973b1ea0c5f1e45d14190afe2f4eb6d3bdf71f1d2f8bb156a1c295d04aaeb9d689dce79ed62bc443e",
6200 	"e20c1e9878512c39970f58375e1549a68b64f31d",
6201 	"0aefa943b698b9609edf898ad22744ac28dc239497cea369cbbd84f65c95c0ad776b594740164b59a739c6ff7c2f07c7c077a86d95238fe51e1fcf33574a4ae0684b42a3f6bf677d91820ca89874467b2c23add77969c80717430d0efc1d3695892ce855cb7f7011630f4df26def8ddf36fc23905f57fa6243a485c770d5681fcd",
6202 
6203 	"c6103c330c1ef718c141e47b8fa859be4d5b96259e7d142070ecd485839dba5a8369c17c1114035e532d195c74f44a0476a2d3e8a4da210016caced0e367cb867710a4b5aa2df2b8e5daf5fdc647807d4d5ebb6c56b9763ccdae4dea3308eb0ac2a89501cb209d2639fa5bf87ce790747d3cb2d295e84564f2f637824f0c13028129b0aa4a422d162282",
6204 	"23291e4a3307e8bbb776623ab34e4a5f4cc8a8db",
6205 	"02802dccfa8dfaf5279bf0b4a29ba1b157611faeaaf419b8919d15941900c1339e7e92e6fae562c53e6cc8e84104b110bce03ad18525e3c49a0eadad5d3f28f244a8ed89edbafbb686277cfa8ae909714d6b28f4bf8e293aa04c41efe7c0a81266d5c061e2575be032aa464674ff71626219bd74cc45f0e7ed4e3ff96eee758e8f",
6206 
6207 	/* 1029-bit key */
6208 	"164ca31cff609f3a0e7101b039f2e4fe6dd37519ab98598d179e174996598071f47d3a04559158d7be373cf1aa53f0aa6ef09039e5678c2a4c63900514c8c4f8aaed5de12a5f10b09c311af8c0ffb5b7a297f2efc63b8d6b0510931f0b98e48bf5fc6ec4e7b8db1ffaeb08c38e02adb8f03a48229c99e969431f61cb8c4dc698d1",
6209 	"010001",
6210 	"03b664ee3b7566723fc6eaf28abb430a3980f1126c81de8ad709eab39ac9dcd0b1550b3729d87068e952009df544534c1f50829a78f4591eb8fd57140426a6bb0405b6a6f51a57d9267b7bbc653391a699a2a90dac8ae226bcc60fa8cd934c73c7b03b1f6b818158631838a8612e6e6ea92be24f8324faf5b1fd8587225267ba6f",
6211 	"04f0548c9626ab1ebf1244934741d99a06220efa2a5856aa0e75730b2ec96adc86be894fa2803b53a5e85d276acbd29ab823f80a7391bb54a5051672fb04eeb543",
6212 	"0483e0ae47915587743ff345362b555d3962d98bb6f15f848b4c92b1771ca8ed107d8d3ee65ec44517dd0faa481a387e902f7a2e747c269e7ea44480bc538b8e5b",
6213 	"03a8e8aea9920c1aa3b2f0d846e4b850d81ca306a51c83544f949f64f90dcf3f8e2661f07e561220a180388fbe273e70e2e5dca83a0e1348dd6490c731d6ece1ab",
6214 	"0135bdcdb60bf2197c436ed34b32cd8b4fc77778832ba76703551fb242b301699593af77fd8fc394a8526ad23cc41a03806bd897fe4b0ea646558aaddcc99e8a25",
6215 	"0304c03d9c736503a984abbd9ba22301407c4a2ab1dd85766481b60d45401152e692be14f4121d9aa3fd6e0b4d1d3a973538a31d42ee6e1e5ef620231a2bbaf35f",
6216 
6217 	"0a20b774addc2fa51245ed7cb9da609e50cac6636a52543f97458eed7340f8d53ffc64918f949078ee03ef60d42b5fec246050bd5505cd8cb597bad3c4e713b0ef30644e76adabb0de01a1561efb255158c74fc801e6e919e581b46f0f0ddd08e4f34c7810b5ed8318f91d7c8c",
6218 	"5b4ea2ef629cc22f3b538e016904b47b1e40bfd5",
6219 	"04c0cfacec04e5badbece159a5a1103f69b3f32ba593cb4cc4b1b7ab455916a96a27cd2678ea0f46ba37f7fc9c86325f29733b389f1d97f43e7201c0f348fc45fe42892335362eee018b5b161f2f9393031225c713012a576bc88e23052489868d9010cbf033ecc568e8bc152bdc59d560e41291915d28565208e22aeec9ef85d1",
6220 
6221 	"2aaff6631f621ce615760a9ebce94bb333077ad86488c861d4b76d29c1f48746c611ae1e03ced4445d7cfa1fe5f62e1b3f08452bde3b6ef81973bafbb57f97bceef873985395b8260589aa88cb7db50ab469262e551bdcd9a56f275a0ac4fe484700c35f3dbf2b469ede864741b86fa59172a360ba95a02e139be50ddfb7cf0b42faeabbfbbaa86a4497699c4f2dfd5b08406af7e14144427c253ec0efa20eaf9a8be8cd49ce1f1bc4e93e619cf2aa8ed4fb39bc8590d0f7b96488f7317ac9abf7bee4e3a0e715",
6222 	"83146a9e782722c28b014f98b4267bda2ac9504f",
6223 	"0a2314250cf52b6e4e908de5b35646bcaa24361da8160fb0f9257590ab3ace42b0dc3e77ad2db7c203a20bd952fbb56b1567046ecfaa933d7b1000c3de9ff05b7d989ba46fd43bc4c2d0a3986b7ffa13471d37eb5b47d64707bd290cfd6a9f393ad08ec1e3bd71bb5792615035cdaf2d8929aed3be098379377e777ce79aaa4773",
6224 
6225 	"0f6195d04a6e6fc7e2c9600dbf840c39ea8d4d624fd53507016b0e26858a5e0aecd7ada543ae5c0ab3a62599cba0a54e6bf446e262f989978f9ddf5e9a41",
6226 	"a87b8aed07d7b8e2daf14ddca4ac68c4d0aabff8",
6227 	"086df6b500098c120f24ff8423f727d9c61a5c9007d3b6a31ce7cf8f3cbec1a26bb20e2bd4a046793299e03e37a21b40194fb045f90b18bf20a47992ccd799cf9c059c299c0526854954aade8a6ad9d97ec91a1145383f42468b231f4d72f23706d9853c3fa43ce8ace8bfe7484987a1ec6a16c8daf81f7c8bf42774707a9df456",
6228 
6229 	"337d25fe9810ebca0de4d4658d3ceb8e0fe4c066aba3bcc48b105d3bf7e0257d44fecea6596f4d0c59a08402833678f70620f9138dfeb7ded905e4a6d5f05c473d55936652e2a5df43c0cfda7bacaf3087f4524b06cf42157d01539739f7fddec9d58125df31a32eab06c19b71f1d5bf",
6230 	"a37932f8a7494a942d6f767438e724d6d0c0ef18",
6231 	"0b5b11ad549863ffa9c51a14a1106c2a72cc8b646e5c7262509786105a984776534ca9b54c1cc64bf2d5a44fd7e8a69db699d5ea52087a4748fd2abc1afed1e5d6f7c89025530bdaa2213d7e030fa55df6f34bcf1ce46d2edf4e3ae4f3b01891a068c9e3a44bbc43133edad6ecb9f35400c4252a5762d65744b99cb9f4c559329f",
6232 
6233 	"84ec502b072e8287789d8f9235829ea3b187afd4d4c785611bda5f9eb3cb96717efa7007227f1c08cbcb972e667235e0fb7d431a6570326d2ecce35adb373dc753b3be5f829b89175493193fab16badb41371b3aac0ae670076f24bef420c135add7cee8d35fbc944d79fafb9e307a13b0f556cb654a06f973ed22672330197ef5a748bf826a5db2383a25364b686b9372bb2339aeb1ac9e9889327d016f1670776db06201adbdcaf8a5e3b74e108b73",
6234 	"7b790c1d62f7b84e94df6af28917cf571018110e",
6235 	"02d71fa9b53e4654fefb7f08385cf6b0ae3a817942ebf66c35ac67f0b069952a3ce9c7e1f1b02e480a9500836de5d64cdb7ecde04542f7a79988787e24c2ba05f5fd482c023ed5c30e04839dc44bed2a3a3a4fee01113c891a47d32eb8025c28cb050b5cdb576c70fe76ef523405c08417faf350b037a43c379339fcb18d3a356b",
6236 
6237 	"9906d89f97a9fdedd3ccd824db687326f30f00aa25a7fca2afcb3b0f86cd41e73f0e8ff7d2d83f59e28ed31a5a0d551523374de22e4c7e8ff568b386ee3dc41163f10bf67bb006261c9082f9af90bf1d9049a6b9fae71c7f84fbe6e55f02789de774f230f115026a4b4e96c55b04a95da3aacbb2cece8f81764a1f1c99515411087cf7d34aeded0932c183",
6238 	"fbbe059025b69b89fb14ae2289e7aaafe60c0fcd",
6239 	"0a40a16e2fe2b38d1df90546167cf9469c9e3c3681a3442b4b2c2f581deb385ce99fc6188bb02a841d56e76d301891e24560550fcc2a26b55f4ccb26d837d350a154bcaca8392d98fa67959e9727b78cad03269f56968fc56b68bd679926d83cc9cb215550645ccda31c760ff35888943d2d8a1d351e81e5d07b86182e751081ef",
6240 
6241 	/* 1030-bit key */
6242 	"37c9da4a66c8c408b8da27d0c9d79f8ccb1eafc1d2fe48746d940b7c4ef5dee18ad12647cefaa0c4b3188b221c515386759b93f02024b25ab9242f8357d8f3fd49640ee5e643eaf6c64deefa7089727c8ff03993333915c6ef21bf5975b6e50d118b51008ec33e9f01a0a545a10a836a43ddbca9d8b5c5d3548022d7064ea29ab3",
6243 	"010001",
6244 	"3bed999052d957bc06d651eef6e3a98094b1621bd38b5449bd6c4aea3de7e084679a4484ded25be0f0826cf3377825414b14d4d61db14de626fbb80e5f4faec956f9a0a2d24f99576380f084eb62e46a57d554278b535626193ce02060575eb66c5798d36f6c5d40fb00d809b42a73102c1c74ee95bd71420fffef6318b52c29",
6245 	"07eefb424b0e3a40e4208ee5afb280b22317308114dde0b4b64f730184ec68da6ce2867a9f48ed7726d5e2614ed04a5410736c8c714ee702474298c6292af07535",
6246 	"070830dbf947eac0228de26314b59b66994cc60e8360e75d3876298f8f8a7d141da064e5ca026a973e28f254738cee669c721b034cb5f8e244dadd7cd1e159d547",
6247 	"0524d20c3d95cff75af2313483227d8702717aa576de155f960515501adb1d70e1c04de91b75b161dbf0398356127ededa7bbc19a32dc1621cc9f53c265d0ce331",
6248 	"05f984a1f23c938d6a0e89724bcf3dd93f9946926037fe7c6b13a29e5284855f89089591d440975627bf5c9e3a8b5ca79c772ad273e40d321af4a6c97dfded78d3",
6249 	"ddd918adada29dcab981ff9acba4257023c09a3801ccce098ce268f855d0df570cd6e7b9b14bd9a5a9254cbc315be6f8ba1e2546ddd569c5ea19eed8353bde5e",
6250 
6251 	"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",
6252 	"b7867a59958cb54328f8775e6546ec06d27eaa50",
6253 	"187f390723c8902591f0154bae6d4ecbffe067f0e8b795476ea4f4d51ccc810520bb3ca9bca7d0b1f2ea8a17d873fa27570acd642e3808561cb9e975ccfd80b23dc5771cdb3306a5f23159dacbd3aa2db93d46d766e09ed15d900ad897a8d274dc26b47e994a27e97e2268a766533ae4b5e42a2fcaf755c1c4794b294c60555823",
6254 
6255 	"8d80d2d08dbd19c154df3f14673a14bd03735231f24e86bf153d0e69e74cbff7b1836e664de83f680124370fc0f96c9b65c07a366b644c4ab3",
6256 	"0c09582266df086310821ba7e18df64dfee6de09",
6257 	"10fd89768a60a67788abb5856a787c8561f3edcf9a83e898f7dc87ab8cce79429b43e56906941a886194f137e591fe7c339555361fbbe1f24feb2d4bcdb80601f3096bc9132deea60ae13082f44f9ad41cd628936a4d51176e42fc59cb76db815ce5ab4db99a104aafea68f5d330329ebf258d4ede16064bd1d00393d5e1570eb8",
6258 
6259 	"808405cdfc1a58b9bb0397c720722a81fffb76278f335917ef9c473814b3e016ba2973cd2765f8f3f82d6cc38aa7f8551827fe8d1e3884b7e61c94683b8f82f1843bdae2257eeec9812ad4c2cf283c34e0b0ae0fe3cb990cf88f2ef9",
6260 	"28039dcfe106d3b8296611258c4a56651c9e92dd",
6261 	"2b31fde99859b977aa09586d8e274662b25a2a640640b457f594051cb1e7f7a911865455242926cf88fe80dfa3a75ba9689844a11e634a82b075afbd69c12a0df9d25f84ad4945df3dc8fe90c3cefdf26e95f0534304b5bdba20d3e5640a2ebfb898aac35ae40f26fce5563c2f9f24f3042af76f3c7072d687bbfb959a88460af1",
6262 
6263 	"f337b9bad937de22a1a052dff11134a8ce26976202981939b91e0715ae5e609649da1adfcef3f4cca59b238360e7d1e496c7bf4b204b5acff9bbd6166a1d87a36ef2247373751039f8a800b8399807b3a85f44893497c0d05fb7017b82228152de6f25e6116dcc7503c786c875c28f3aa607e94ab0f19863ab1b5073770b0cd5f533acde30c6fb953cf3da680264e30fc11bff9a19bffab4779b6223c3fb3fe0f71abade4eb7c09c41e24c22d23fa148e6a173feb63984d1bc6ee3a02d915b752ceaf92a3015eceb38ca586c6801b37c34cefb2cff25ea23c08662dcab26a7a93a285d05d3044c",
6264 	"a77821ebbbef24628e4e12e1d0ea96de398f7b0f",
6265 	"32c7ca38ff26949a15000c4ba04b2b13b35a3810e568184d7ecabaa166b7ffabddf2b6cf4ba07124923790f2e5b1a5be040aea36fe132ec130e1f10567982d17ac3e89b8d26c3094034e762d2e031264f01170beecb3d1439e05846f25458367a7d9c02060444672671e64e877864559ca19b2074d588a281b5804d23772fbbe19",
6266 
6267 	"45013cebafd960b255476a8e2598b9aa32efbe6dc1f34f4a498d8cf5a2b4548d08c55d5f95f7bcc9619163056f2d58b52fa032",
6268 	"9d5ad8eb452134b65dc3a98b6a73b5f741609cd6",
6269 	"07eb651d75f1b52bc263b2e198336e99fbebc4f332049a922a10815607ee2d989db3a4495b7dccd38f58a211fb7e193171a3d891132437ebca44f318b280509e52b5fa98fcce8205d9697c8ee4b7ff59d4c59c79038a1970bd2a0d451ecdc5ef11d9979c9d35f8c70a6163717607890d586a7c6dc01c79f86a8f28e85235f8c2f1",
6270 
6271 	"2358097086c899323e75d9c90d0c09f12d9d54edfbdf70a9c2eb5a04d8f36b9b2bdf2aabe0a5bda1968937f9d6ebd3b6b257efb3136d4131f9acb59b85e2602c2a3fcdc835494a1f4e5ec18b226c80232b36a75a45fdf09a7ea9e98efbde1450d1194bf12e15a4c5f9eb5c0bce5269e0c3b28cfab655d81a61a20b4be2f54459bb25a0db94c52218be109a7426de83014424789aaa90e5056e632a698115e282c1a56410f26c2072f193481a9dcd880572005e64f4082ecf",
6272 	"3f2efc595880a7d47fcf3cba04983ea54c4b73fb",
6273 	"18da3cdcfe79bfb77fd9c32f377ad399146f0a8e810620233271a6e3ed3248903f5cdc92dc79b55d3e11615aa056a795853792a3998c349ca5c457e8ca7d29d796aa24f83491709befcfb1510ea513c92829a3f00b104f655634f320752e130ec0ccf6754ff893db302932bb025eb60e87822598fc619e0e981737a9a4c4152d33",
6274 
6275 	/* 1031-bit key */
6276 	"495370a1fb18543c16d3631e3163255df62be6eee890d5f25509e4f778a8ea6fbbbcdf85dff64e0d972003ab3681fbba6dd41fd541829b2e582de9f2a4a4e0a2d0900bef4753db3cee0ee06c7dfae8b1d53b5953218f9cceea695b08668edeaadced9463b1d790d5ebf27e9115b46cad4d9a2b8efab0561b0810344739ada0733f",
6277 	"010001",
6278 	"6c66ffe98980c38fcdeab5159898836165f4b4b817c4f6a8d486ee4ea9130fe9b9092bd136d184f95f504a607eac565846d2fdd6597a8967c7396ef95a6eeebb4578a643966dca4d8ee3de842de63279c618159c1ab54a89437b6a6120e4930afb52a4ba6ced8a4947ac64b30a3497cbe701c2d6266d517219ad0ec6d347dbe9",
6279 	"08dad7f11363faa623d5d6d5e8a319328d82190d7127d2846c439b0ab72619b0a43a95320e4ec34fc3a9cea876422305bd76c5ba7be9e2f410c8060645a1d29edb",
6280 	"0847e732376fc7900f898ea82eb2b0fc418565fdae62f7d9ec4ce2217b97990dd272db157f99f63c0dcbb9fbacdbd4c4dadb6df67756358ca4174825b48f49706d",
6281 	"05c2a83c124b3621a2aa57ea2c3efe035eff4560f33ddebb7adab81fce69a0c8c2edc16520dda83d59a23be867963ac65f2cc710bbcfb96ee103deb771d105fd85",
6282 	"04cae8aa0d9faa165c87b682ec140b8ed3b50b24594b7a3b2c220b3669bb819f984f55310a1ae7823651d4a02e99447972595139363434e5e30a7e7d241551e1b9",
6283 	"07d3e47bf686600b11ac283ce88dbb3f6051e8efd04680e44c171ef531b80b2b7c39fc766320e2cf15d8d99820e96ff30dc69691839c4b40d7b06e45307dc91f3f",
6284 
6285 	"81332f4be62948415ea1d899792eeacf6c6e1db1da8be13b5cea41db2fed467092e1ff398914c714259775f595f8547f735692a575e6923af78f22c6997ddb90fb6f72d7bb0dd5744a31decd3dc3685849836ed34aec596304ad11843c4f88489f209735f5fb7fdaf7cec8addc5818168f880acbf490d51005b7a8e84e43e54287977571dd99eea4b161eb2df1f5108f12a4142a83322edb05a75487a3435c9a78ce53ed93bc550857d7a9fb",
6286 	"1d65491d79c864b373009be6f6f2467bac4c78fa",
6287 	"0262ac254bfa77f3c1aca22c5179f8f040422b3c5bafd40a8f21cf0fa5a667ccd5993d42dbafb409c520e25fce2b1ee1e716577f1efa17f3da28052f40f0419b23106d7845aaf01125b698e7a4dfe92d3967bb00c4d0d35ba3552ab9a8b3eef07c7fecdbc5424ac4db1e20cb37d0b2744769940ea907e17fbbca673b20522380c5",
6288 
6289 	"e2f96eaf0e05e7ba326ecca0ba7fd2f7c02356f3cede9d0faabf4fcc8e60a973e5595fd9ea08",
6290 	"435c098aa9909eb2377f1248b091b68987ff1838",
6291 	"2707b9ad5115c58c94e932e8ec0a280f56339e44a1b58d4ddcff2f312e5f34dcfe39e89c6a94dcee86dbbdae5b79ba4e0819a9e7bfd9d982e7ee6c86ee68396e8b3a14c9c8f34b178eb741f9d3f121109bf5c8172fada2e768f9ea1433032c004a8aa07eb990000a48dc94c8bac8aabe2b09b1aa46c0a2aa0e12f63fbba775ba7e",
6292 
6293 	"e35c6ed98f64a6d5a648fcab8adb16331db32e5d15c74a40edf94c3dc4a4de792d190889f20f1e24ed12054a6b28798fcb42d1c548769b734c96373142092aed277603f4738df4dc1446586d0ec64da4fb60536db2ae17fc7e3c04bbfbbbd907bf117c08636fa16f95f51a6216934d3e34f85030f17bbbc5ba69144058aff081e0b19cf03c17195c5e888ba58f6fe0a02e5c3bda9719a7",
6294 	"c6ebbe76df0c4aea32c474175b2f136862d04529",
6295 	"2ad20509d78cf26d1b6c406146086e4b0c91a91c2bd164c87b966b8faa42aa0ca446022323ba4b1a1b89706d7f4c3be57d7b69702d168ab5955ee290356b8c4a29ed467d547ec23cbadf286ccb5863c6679da467fc9324a151c7ec55aac6db4084f82726825cfe1aa421bc64049fb42f23148f9c25b2dc300437c38d428aa75f96",
6296 
6297 	"dbc5f750a7a14be2b93e838d18d14a8695e52e8add9c0ac733b8f56d2747e529a0cca532dd49b902aefed514447f9e81d16195c2853868cb9b30f7d0d495c69d01b5c5d50b27045db3866c2324a44a110b1717746de457d1c8c45c3cd2a92970c3d59632055d4c98a41d6e99e2a3ddd5f7f9979ab3cd18f37505d25141de2a1bff17b3a7dce9419ecc385cf11d72840f19953fd0509251f6cafde2893d0e75c781ba7a5012ca401a4fa99e04b3c3249f926d5afe82cc87dab22c3c1b105de48e34ace9c9124e59597ac7ebf8",
6298 	"021fdcc6ebb5e19b1cb16e9c67f27681657fe20a",
6299 	"1e24e6e58628e5175044a9eb6d837d48af1260b0520e87327de7897ee4d5b9f0df0be3e09ed4dea8c1454ff3423bb08e1793245a9df8bf6ab3968c8eddc3b5328571c77f091cc578576912dfebd164b9de5454fe0be1c1f6385b328360ce67ec7a05f6e30eb45c17c48ac70041d2cab67f0a2ae7aafdcc8d245ea3442a6300ccc7",
6300 
6301 	"04dc251be72e88e5723485b6383a637e2fefe07660c519a560b8bc18bdedb86eae2364ea53ba9dca6eb3d2e7d6b806af42b3e87f291b4a8881d5bf572cc9a85e19c86acb28f098f9da0383c566d3c0f58cfd8f395dcf602e5cd40e8c7183f714996e2297ef",
6302 	"c558d7167cbb4508ada042971e71b1377eea4269",
6303 	"33341ba3576a130a50e2a5cf8679224388d5693f5accc235ac95add68e5eb1eec31666d0ca7a1cda6f70a1aa762c05752a51950cdb8af3c5379f18cfe6b5bc55a4648226a15e912ef19ad77adeea911d67cfefd69ba43fa4119135ff642117ba985a7e0100325e9519f1ca6a9216bda055b5785015291125e90dcd07a2ca9673ee",
6304 
6305 	"0ea37df9a6fea4a8b610373c24cf390c20fa6e2135c400c8a34f5c183a7e8ea4c9ae090ed31759f42dc77719cca400ecdcc517acfc7ac6902675b2ef30c509665f3321482fc69a9fb570d15e01c845d0d8e50d2a24cbf1cf0e714975a5db7b18d9e9e9cb91b5cb16869060ed18b7b56245503f0caf90352b8de81cb5a1d9c6336092f0cd",
6306 	"76fd4e64fdc98eb927a0403e35a084e76ba9f92a",
6307 	"1ed1d848fb1edb44129bd9b354795af97a069a7a00d0151048593e0c72c3517ff9ff2a41d0cb5a0ac860d736a199704f7cb6a53986a88bbd8abcc0076a2ce847880031525d449da2ac78356374c536e343faa7cba42a5aaa6506087791c06a8e989335aed19bfab2d5e67e27fb0c2875af896c21b6e8e7309d04e4f6727e69463e",
6308 
6309 	/* 1536-bit key */
6310 	"e6bd692ac96645790403fdd0f5beb8b9bf92ed10007fc365046419dd06c05c5b5b2f48ecf989e4ce269109979cbb40b4a0ad24d22483d1ee315ad4ccb1534268352691c524f6dd8e6c29d224cf246973aec86c5bf6b1401a850d1b9ad1bb8cbcec47b06f0f8c7f45d3fc8f319299c5433ddbc2b3053b47ded2ecd4a4caefd614833dc8bb622f317ed076b8057fe8de3f84480ad5e83e4a61904a4f248fb397027357e1d30e463139815c6fd4fd5ac5b8172a45230ecb6318a04f1455d84e5a8b",
6311 	"010001",
6312 	"6a7fd84fb85fad073b34406db74f8d61a6abc12196a961dd79565e9da6e5187bce2d980250f7359575359270d91590bb0e427c71460b55d51410b191bcf309fea131a92c8e702738fa719f1e0041f52e40e91f229f4d96a1e6f172e15596b4510a6daec26105f2bebc53316b87bdf21311666070e8dfee69d52c71a976caae79c72b68d28580dc686d9f5129d225f82b3d615513a882b3db91416b48ce08888213e37eeb9af800d81cab328ce420689903c00c7b5fd31b75503a6d419684d629",
6313 	"f8eb97e98df12664eefdb761596a69ddcd0e76daece6ed4bf5a1b50ac086f7928a4d2f8726a77e515b74da41988f220b1cc87aa1fc810ce99a82f2d1ce821edced794c6941f42c7a1a0b8c4d28c75ec60b652279f6154a762aed165d47dee367",
6314 	"ed4d71d0a6e24b93c2e5f6b4bbe05f5fb0afa042d204fe3378d365c2f288b6a8dad7efe45d153eef40cacc7b81ff934002d108994b94a5e4728cd9c963375ae49965bda55cbf0efed8d6553b4027f2d86208a6e6b489c176128092d629e49d3d",
6315 	"2bb68bddfb0c4f56c8558bffaf892d8043037841e7fa81cfa61a38c5e39b901c8ee71122a5da2227bd6cdeeb481452c12ad3d61d5e4f776a0ab556591befe3e59e5a7fddb8345e1f2f35b9f4cee57c32414c086aec993e9353e480d9eec6289f",
6316 	"4ff897709fad079746494578e70fd8546130eeab5627c49b080f05ee4ad9f3e4b7cba9d6a5dff113a41c3409336833f190816d8a6bc42e9bec56b7567d0f3c9c696db619b245d901dd856db7c8092e77e9a1cccd56ee4dba42c5fdb61aec2669",
6317 	"77b9d1137b50404a982729316efafc7dfe66d34e5a182600d5f30a0a8512051c560d081d4d0a1835ec3d25a60f4e4d6aa948b2bf3dbb5b124cbbc3489255a3a948372f6978496745f943e1db4f18382ceaa505dfc65757bb3f857a58dce52156",
6318 
6319 	"a88e265855e9d7ca36c68795f0b31b591cd6587c71d060a0b3f7f3eaef43795922028bc2b6ad467cfc2d7f659c5385aa70ba3672cdde4cfe4970cc7904601b278872bf51321c4a972f3c95570f3445d4f57980e0f20df54846e6a52c668f1288c03f95006ea32f562d40d52af9feb32f0fa06db65b588a237b34e592d55cf979f903a642ef64d2ed542aa8c77dc1dd762f45a59303ed75e541ca271e2b60ca709e44fa0661131e8d5d4163fd8d398566ce26de8730e72f9cca737641c244159420637028df0a18079d6208ea8b4711a2c750f5",
6320 	"c0a425313df8d7564bd2434d311523d5257eed80",
6321 	"586107226c3ce013a7c8f04d1a6a2959bb4b8e205ba43a27b50f124111bc35ef589b039f5932187cb696d7d9a32c0c38300a5cdda4834b62d2eb240af33f79d13dfbf095bf599e0d9686948c1964747b67e89c9aba5cd85016236f566cc5802cb13ead51bc7ca6bef3b94dcbdbb1d570469771df0e00b1a8a06777472d2316279edae86474668d4e1efff95f1de61c6020da32ae92bbf16520fef3cf4d88f61121f24bbd9fe91b59caf1235b2a93ff81fc403addf4ebdea84934a9cdaf8e1a9e",
6322 
6323 	"c8c9c6af04acda414d227ef23e0820c3732c500dc87275e95b0d095413993c2658bc1d988581ba879c2d201f14cb88ced153a01969a7bf0a7be79c84c1486bc12b3fa6c59871b6827c8ce253ca5fefa8a8c690bf326e8e37cdb96d90a82ebab69f86350e1822e8bd536a2e",
6324 	"b307c43b4850a8dac2f15f32e37839ef8c5c0e91",
6325 	"80b6d643255209f0a456763897ac9ed259d459b49c2887e5882ecb4434cfd66dd7e1699375381e51cd7f554f2c271704b399d42b4be2540a0eca61951f55267f7c2878c122842dadb28b01bd5f8c025f7e228418a673c03d6bc0c736d0a29546bd67f786d9d692ccea778d71d98c2063b7a71092187a4d35af108111d83e83eae46c46aa34277e06044589903788f1d5e7cee25fb485e92949118814d6f2c3ee361489016f327fb5bc517eb50470bffa1afa5f4ce9aa0ce5b8ee19bf5501b958",
6326 
6327 	"0afad42ccd4fc60654a55002d228f52a4a5fe03b8bbb08ca82daca558b44dbe1266e50c0e745a36d9d2904e3408abcd1fd569994063f4a75cc72f2fee2a0cd893a43af1c5b8b487df0a71610024e4f6ddf9f28ad0813c1aab91bcb3c9064d5ff742deffea657094139369e5ea6f4a96319a5cc8224145b545062758fefd1fe3409ae169259c6cdfd6b5f2958e314faecbe69d2cace58ee55179ab9b3e6d1ecc14a557c5febe988595264fc5da1c571462eca798a18a1a4940cdab4a3e92009ccd42e1e947b1314e32238a2dece7d23a89b5b30c751fd0a4a430d2c548594",
6328 	"9a2b007e80978bbb192c354eb7da9aedfc74dbf5",
6329 	"484408f3898cd5f53483f80819efbf2708c34d27a8b2a6fae8b322f9240237f981817aca1846f1084daa6d7c0795f6e5bf1af59c38e1858437ce1f7ec419b98c8736adf6dd9a00b1806d2bd3ad0a73775e05f52dfef3a59ab4b08143f0df05cd1ad9d04bececa6daa4a2129803e200cbc77787caf4c1d0663a6c5987b605952019782caf2ec1426d68fb94ed1d4be816a7ed081b77e6ab330b3ffc073820fecde3727fcbe295ee61a050a343658637c3fd659cfb63736de32d9f90d3c2f63eca",
6330 
6331 	"1dfd43b46c93db82629bdae2bd0a12b882ea04c3b465f5cf93023f01059626dbbe99f26bb1be949dddd16dc7f3debb19a194627f0b224434df7d8700e9e98b06e360c12fdbe3d19f51c9684eb9089ecbb0a2f0450399d3f59eac7294085d044f5393c6ce737423d8b86c415370d389e30b9f0a3c02d25d0082e8ad6f3f1ef24a45c3cf82b383367063a4d4613e4264f01b2dac2e5aa42043f8fb5f69fa871d14fb273e767a531c40f02f343bc2fb45a0c7e0f6be2561923a77211d66a6e2dbb43c366350beae22da3ac2c1f5077096fcb5c4bf255f7574351ae0b1e1f03632817c0856d4a8ba97afbdc8b85855402bc56926fcec209f9ea8",
6332 	"70f382bddf4d5d2dd88b3bc7b7308be632b84045",
6333 	"84ebeb481be59845b46468bafb471c0112e02b235d84b5d911cbd1926ee5074ae0424495cb20e82308b8ebb65f419a03fb40e72b78981d88aad143053685172c97b29c8b7bf0ae73b5b2263c403da0ed2f80ff7450af7828eb8b86f0028bd2a8b176a4d228cccea18394f238b09ff758cc00bc04301152355742f282b54e663a919e709d8da24ade5500a7b9aa50226e0ca52923e6c2d860ec50ff480fa57477e82b0565f4379f79c772d5c2da80af9fbf325ece6fc20b00961614bee89a183e",
6334 
6335 	"1bdc6e7c98fb8cf54e9b097b66a831e9cfe52d9d4888448ee4b0978093ba1d7d73ae78b3a62ba4ad95cd289ccb9e005226bb3d178bccaa821fb044a4e21ee97696c14d0678c94c2dae93b0ad73922218553daa7e44ebe57725a7a45cc72b9b2138a6b17c8db411ce8279ee1241aff0a8bec6f77f87edb0c69cb27236e3435a800b192e4f11e519e3fe30fc30eaccca4fbb41769029bf708e817a9e683805be67fa100984683b74838e3bcffa79366eed1d481c76729118838f31ba8a048a93c1be4424598e8df6328b7a77880a3f9c7e2e8dfca8eb5a26fb86bdc556d42bbe01d9fa6ed80646491c9341",
6336 	"d689257a86effa68212c5e0c619eca295fb91b67",
6337 	"82102df8cb91e7179919a04d26d335d64fbc2f872c44833943241de8454810274cdf3db5f42d423db152af7135f701420e39b494a67cbfd19f9119da233a23da5c6439b5ba0d2bc373eee3507001378d4a4073856b7fe2aba0b5ee93b27f4afec7d4d120921c83f606765b02c19e4d6a1a3b95fa4c422951be4f52131077ef17179729cddfbdb56950dbaceefe78cb16640a099ea56d24389eef10f8fecb31ba3ea3b227c0a86698bb89e3e9363905bf22777b2a3aa521b65b4cef76d83bde4c",
6338 
6339 	"88c7a9f1360401d90e53b101b61c5325c3c75db1b411fbeb8e830b75e96b56670ad245404e16793544ee354bc613a90cc9848715a73db5893e7f6d279815c0c1de83ef8e2956e3a56ed26a888d7a9cdcd042f4b16b7fa51ef1a0573662d16a302d0ec5b285d2e03ad96529c87b3d374db372d95b2443d061b6b1a350ba87807ed083afd1eb05c3f52f4eba5ed2227714fdb50b9d9d9dd6814f62f6272fcd5cdbce7a9ef797",
6340 	"c25f13bf67d081671a0481a1f1820d613bba2276",
6341 	"a7fdb0d259165ca2c88d00bbf1028a867d337699d061193b17a9648e14ccbbaadeacaacdec815e7571294ebb8a117af205fa078b47b0712c199e3ad05135c504c24b81705115740802487992ffd511d4afc6b854491eb3f0dd523139542ff15c3101ee85543517c6a3c79417c67e2dd9aa741e9a29b06dcb593c2336b3670ae3afbac7c3e76e215473e866e338ca244de00b62624d6b9426822ceae9f8cc460895f41250073fd45c5a1e7b425c204a423a699159f6903e710b37a7bb2bc8049f",
6342 
6343 	/* 2048-bit key */
6344 	"a5dd867ac4cb02f90b9457d48c14a770ef991c56c39c0ec65fd11afa8937cea57b9be7ac73b45c0017615b82d622e318753b6027c0fd157be12f8090fee2a7adcd0eef759f88ba4997c7a42d58c9aa12cb99ae001fe521c13bb5431445a8d5ae4f5e4c7e948ac227d3604071f20e577e905fbeb15dfaf06d1de5ae6253d63a6a2120b31a5da5dabc9550600e20f27d3739e2627925fea3cc509f21dff04e6eea4549c540d6809ff9307eede91fff58733d8385a237d6d3705a33e391900992070df7adf1357cf7e3700ce3667de83f17b8df1778db381dce09cb4ad058a511001a738198ee27cf55a13b754539906582ec8b174bd58d5d1f3d767c613721ae05",
6345 	"010001",
6346 	"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",
6347 	"cfd50283feeeb97f6f08d73cbc7b3836f82bbcd499479f5e6f76fdfcb8b38c4f71dc9e88bd6a6f76371afd65d2af1862b32afb34a95f71b8b132043ffebe3a952baf7592448148c03f9c69b1d68e4ce5cf32c86baf46fed301ca1ab403069b32f456b91f71898ab081cd8c4252ef5271915c9794b8f295851da7510f99cb73eb",
6348 	"cc4e90d2a1b3a065d3b2d1f5a8fce31b544475664eab561d2971b99fb7bef844e8ec1f360b8c2ac8359692971ea6a38f723fcc211f5dbcb177a0fdac5164a1d4ff7fbb4e829986353cb983659a148cdd420c7d31ba3822ea90a32be46c030e8c17e1fa0ad37859e06b0aa6fa3b216d9cbe6c0e22339769c0a615913e5da719cf",
6349 	"1c2d1fc32f6bc4004fd85dfde0fbbf9a4c38f9c7c4e41dea1aa88234a201cd92f3b7da526583a98ad85bb360fb983b711e23449d561d1778d7a515486bcbf47b46c9e9e1a3a1f77000efbeb09a8afe47e5b857cda99cb16d7fff9b712e3bd60ca96d9c7973d616d46934a9c050281c004399ceff1db7dda78766a8a9b9cb0873",
6350 	"cb3b3c04caa58c60be7d9b2debb3e39643f4f57397be08236a1e9eafaa706536e71c3acfe01cc651f23c9e05858fee13bb6a8afc47df4edc9a4ba30bcecb73d0157852327ee789015c2e8dee7b9f05a0f31ac94eb6173164740c5c95147cd5f3b5ae2cb4a83787f01d8ab31f27c2d0eea2dd8a11ab906aba207c43c6ee125331",
6351 	"12f6b2cf1374a736fad05616050f96ab4b61d1177c7f9d525a29f3d180e77667e99d99abf0525d0758660f3752655b0f25b8df8431d9a8ff77c16c12a0a5122a9f0bf7cfd5a266a35c159f991208b90316ff444f3e0b6bd0e93b8a7a2448e957e3dda6cfcf2266b106013ac46808d3b3887b3b00344baac9530b4ce708fc32b6",
6352 
6353 	"883177e5126b9be2d9a9680327d5370c6f26861f5820c43da67a3ad609",
6354 	"04e215ee6ff934b9da70d7730c8734abfcecde89",
6355 	"82c2b160093b8aa3c0f7522b19f87354066c77847abf2a9fce542d0e84e920c5afb49ffdfdace16560ee94a1369601148ebad7a0e151cf16331791a5727d05f21e74e7eb811440206935d744765a15e79f015cb66c532c87a6a05961c8bfad741a9a6657022894393e7223739796c02a77455d0f555b0ec01ddf259b6207fd0fd57614cef1a5573baaff4ec00069951659b85f24300a25160ca8522dc6e6727e57d019d7e63629b8fe5e89e25cc15beb3a647577559299280b9b28f79b0409000be25bbd96408ba3b43cc486184dd1c8e62553fa1af4040f60663de7f5e49c04388e257f1ce89c95dab48a315d9b66b1b7628233876ff2385230d070d07e1666",
6356 
6357 	"dd670a01465868adc93f26131957a50c52fb777cdbaa30892c9e12361164ec13979d43048118e4445db87bee58dd987b3425d02071d8dbae80708b039dbb64dbd1de5657d9fed0c118a54143742e0ff3c87f74e45857647af3f79eb0a14c9d75ea9a1a04b7cf478a897a708fd988f48e801edb0b7039df8c23bb3c56f4e821ac",
6358 	"8b2bdd4b40faf545c778ddf9bc1a49cb57f9b71b",
6359 	"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",
6360 
6361 	"48b2b6a57a63c84cea859d65c668284b08d96bdcaabe252db0e4a96cb1bac6019341db6fbefb8d106b0e90eda6bcc6c6262f37e7ea9c7e5d226bd7df85ec5e71efff2f54c5db577ff729ff91b842491de2741d0c631607df586b905b23b91af13da12304bf83eca8a73e871ff9db",
6362 	"4e96fc1b398f92b44671010c0dc3efd6e20c2d73",
6363 	"6e3e4d7b6b15d2fb46013b8900aa5bbb3939cf2c095717987042026ee62c74c54cffd5d7d57efbbf950a0f5c574fa09d3fc1c9f513b05b4ff50dd8df7edfa20102854c35e592180119a70ce5b085182aa02d9ea2aa90d1df03f2daae885ba2f5d05afdac97476f06b93b5bc94a1a80aa9116c4d615f333b098892b25fface266f5db5a5a3bcc10a824ed55aad35b727834fb8c07da28fcf416a5d9b2224f1f8b442b36f91e456fdea2d7cfe3367268de0307a4c74e924159ed33393d5e0655531c77327b89821bdedf880161c78cd4196b5419f7acc3f13e5ebf161b6e7c6724716ca33b85c2e25640192ac2859651d50bde7eb976e51cec828b98b6563b86bb",
6364 
6365 	"0b8777c7f839baf0a64bbbdbc5ce79755c57a205b845c174e2d2e90546a089c4e6ec8adffa23a7ea97bae6b65d782b82db5d2b5a56d22a29a05e7c4433e2b82a621abba90add05ce393fc48a840542451a",
6366 	"c7cd698d84b65128d8835e3a8b1eb0e01cb541ec",
6367 	"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",
6368 
6369 	"f1036e008e71e964dadc9219ed30e17f06b4b68a955c16b312b1eddf028b74976bed6b3f6a63d4e77859243c9cccdc98016523abb02483b35591c33aad81213bb7c7bb1a470aabc10d44256c4d4559d916",
6370 	"efa8bff96212b2f4a3f371a10d574152655f5dfb",
6371 	"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",
6372 
6373 	"25f10895a87716c137450bb9519dfaa1f207faa942ea88abf71e9c17980085b555aebab76264ae2a3ab93c2d12981191ddac6fb5949eb36aee3c5da940f00752c916d94608fa7d97ba6a2915b688f20323d4e9d96801d89a72ab5892dc2117c07434fcf972e058cf8c41ca4b4ff554f7d5068ad3155fced0f3125bc04f9193378a8f5c4c3b8cb4dd6d1cc69d30ecca6eaa51e36a05730e9e342e855baf099defb8afd7",
6374 	"ad8b1523703646224b660b550885917ca2d1df28",
6375 	"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",
6376 
6377 	NULL
6378 };
6379 
6380 static void
6381 test_RSA_PSS(const char *name,
6382 	br_rsa_pss_sign sign, br_rsa_pss_vrfy vrfy)
6383 {
6384 	size_t u;
6385 
6386 	printf("Test %s: ", name);
6387 	fflush(stdout);
6388 
6389 	u = 0;
6390 	while (KAT_RSA_PSS[u] != NULL) {
6391 		unsigned char n[512];
6392 		unsigned char e[8];
6393 		unsigned char d[512];
6394 		unsigned char p[256];
6395 		unsigned char q[256];
6396 		unsigned char dp[256];
6397 		unsigned char dq[256];
6398 		unsigned char iq[256];
6399 		br_rsa_public_key pk;
6400 		br_rsa_private_key sk;
6401 		size_t v;
6402 
6403 		pk.n = n;
6404 		pk.nlen = hextobin(n, KAT_RSA_PSS[u ++]);
6405 		pk.e = e;
6406 		pk.elen = hextobin(e, KAT_RSA_PSS[u ++]);
6407 
6408 		/*
6409 		 * 'd' is in the test vectors, but we don't use it.
6410 		 */
6411 		hextobin(d, KAT_RSA_PSS[u ++]);
6412 
6413 		for (v = 0; n[v] == 0; v ++);
6414 		sk.n_bitlen = BIT_LENGTH(n[v]) + ((pk.nlen - 1 - v) << 3);
6415 		sk.p = p;
6416 		sk.plen = hextobin(p, KAT_RSA_PSS[u ++]);
6417 		sk.q = q;
6418 		sk.qlen = hextobin(q, KAT_RSA_PSS[u ++]);
6419 		sk.dp = dp;
6420 		sk.dplen = hextobin(dp, KAT_RSA_PSS[u ++]);
6421 		sk.dq = dq;
6422 		sk.dqlen = hextobin(dq, KAT_RSA_PSS[u ++]);
6423 		sk.iq = iq;
6424 		sk.iqlen = hextobin(iq, KAT_RSA_PSS[u ++]);
6425 
6426 		for (v = 0; v < 6; v ++) {
6427 			unsigned char plain[512], salt[128], sig[512];
6428 			size_t plain_len, salt_len, sig_len;
6429 			rng_fake_ctx rng;
6430 			unsigned char hash[20], tmp[513];
6431 			br_sha1_context sc;
6432 
6433 			plain_len = hextobin(plain, KAT_RSA_PSS[u ++]);
6434 			salt_len = hextobin(salt, KAT_RSA_PSS[u ++]);
6435 			sig_len = hextobin(sig, KAT_RSA_PSS[u ++]);
6436 
6437 			br_sha1_init(&sc);
6438 			br_sha1_update(&sc, plain, plain_len);
6439 			br_sha1_out(&sc, hash);
6440 			rng_fake_init(&rng, NULL, salt, salt_len);
6441 
6442 			memset(tmp, 0, sizeof tmp);
6443 			if (sign(&rng.vtable,
6444 				&br_sha1_vtable, &br_sha1_vtable,
6445 				hash, salt_len, &sk, tmp) != 1)
6446 			{
6447 				fprintf(stderr, "signature failed\n");
6448 			}
6449 			if (rng.ptr != rng.len) {
6450 				fprintf(stderr, "salt not fully consumed\n");
6451 				exit(EXIT_FAILURE);
6452 			}
6453 			check_equals("KAT RSA/PSS sign", tmp, sig, sig_len);
6454 
6455 			if (vrfy(sig, sig_len,
6456 				&br_sha1_vtable, &br_sha1_vtable,
6457 				hash, salt_len, &pk) != 1)
6458 			{
6459 				fprintf(stderr, "verification failed\n");
6460 				exit(EXIT_FAILURE);
6461 			}
6462 
6463 			sig[sig_len >> 1] ^= 0x01;
6464 			if (vrfy(sig, sig_len,
6465 				&br_sha1_vtable, &br_sha1_vtable,
6466 				hash, salt_len, &pk) != 0)
6467 			{
6468 				fprintf(stderr,
6469 					"verification should have failed\n");
6470 				exit(EXIT_FAILURE);
6471 			}
6472 
6473 			printf(".");
6474 			fflush(stdout);
6475 		}
6476 	}
6477 
6478 	printf(" done.\n");
6479 	fflush(stdout);
6480 }
6481 
6482 /*
6483  * Test vectors from pkcs-1v2-1d2-vec.zip (originally from ftp.rsa.com).
6484  * There are ten RSA keys, and for each RSA key, there are 6 messages,
6485  * each with an explicit seed.
6486  *
6487  * Field order:
6488  *    modulus (n)
6489  *    public exponent (e)
6490  *    first factor (p)
6491  *    second factor (q)
6492  *    first private exponent (dp)
6493  *    second private exponent (dq)
6494  *    CRT coefficient (iq)
6495  *    cleartext 1
6496  *    seed 1 (20-byte random value)
6497  *    ciphertext 1
6498  *    cleartext 2
6499  *    seed 2 (20-byte random value)
6500  *    ciphertext 2
6501  *    ...
6502  *    cleartext 6
6503  *    seed 6 (20-byte random value)
6504  *    ciphertext 6
6505  *
6506  * This pattern is repeated for all keys. The array stops on a NULL.
6507  */
6508 static const char *KAT_RSA_OAEP[] = {
6509 	/* 1024-bit key, from oeap-int.txt */
6510 	"BBF82F090682CE9C2338AC2B9DA871F7368D07EED41043A440D6B6F07454F51FB8DFBAAF035C02AB61EA48CEEB6FCD4876ED520D60E1EC4619719D8A5B8B807FAFB8E0A3DFC737723EE6B4B7D93A2584EE6A649D060953748834B2454598394EE0AAB12D7B61A51F527A9A41F6C1687FE2537298CA2A8F5946F8E5FD091DBDCB",
6511 	"11",
6512 	"EECFAE81B1B9B3C908810B10A1B5600199EB9F44AEF4FDA493B81A9E3D84F632124EF0236E5D1E3B7E28FAE7AA040A2D5B252176459D1F397541BA2A58FB6599",
6513 	"C97FB1F027F453F6341233EAAAD1D9353F6C42D08866B1D05A0F2035028B9D869840B41666B42E92EA0DA3B43204B5CFCE3352524D0416A5A441E700AF461503",
6514 	"54494CA63EBA0337E4E24023FCD69A5AEB07DDDC0183A4D0AC9B54B051F2B13ED9490975EAB77414FF59C1F7692E9A2E202B38FC910A474174ADC93C1F67C981",
6515 	"471E0290FF0AF0750351B7F878864CA961ADBD3A8A7E991C5C0556A94C3146A7F9803F8F6F8AE342E931FD8AE47A220D1B99A495849807FE39F9245A9836DA3D",
6516 	"B06C4FDABB6301198D265BDBAE9423B380F271F73453885093077FCD39E2119FC98632154F5883B167A967BF402B4E9E2E0F9656E698EA3666EDFB25798039F7",
6517 
6518 	/* oaep-int.txt contains only one message, so we repeat it six
6519 	   times to respect our array format. */
6520 	"D436E99569FD32A7C8A05BBC90D32C49",
6521 	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6522 	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6523 
6524 	"D436E99569FD32A7C8A05BBC90D32C49",
6525 	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6526 	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6527 
6528 	"D436E99569FD32A7C8A05BBC90D32C49",
6529 	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6530 	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6531 
6532 	"D436E99569FD32A7C8A05BBC90D32C49",
6533 	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6534 	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6535 
6536 	"D436E99569FD32A7C8A05BBC90D32C49",
6537 	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6538 	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6539 
6540 	"D436E99569FD32A7C8A05BBC90D32C49",
6541 	"AAFD12F659CAE63489B479E5076DDEC2F06CB58F",
6542 	"1253E04DC0A5397BB44A7AB87E9BF2A039A33D1E996FC82A94CCD30074C95DF763722017069E5268DA5D1C0B4F872CF653C11DF82314A67968DFEAE28DEF04BB6D84B1C31D654A1970E5783BD6EB96A024C2CA2F4A90FE9F2EF5C9C140E5BB48DA9536AD8700C84FC9130ADEA74E558D51A74DDF85D8B50DE96838D6063E0955",
6543 
6544 	/* 1024-bit key */
6545 	"A8B3B284AF8EB50B387034A860F146C4919F318763CD6C5598C8AE4811A1E0ABC4C7E0B082D693A5E7FCED675CF4668512772C0CBC64A742C6C630F533C8CC72F62AE833C40BF25842E984BB78BDBF97C0107D55BDB662F5C4E0FAB9845CB5148EF7392DD3AAFF93AE1E6B667BB3D4247616D4F5BA10D4CFD226DE88D39F16FB",
6546 	"010001",
6547 	"D32737E7267FFE1341B2D5C0D150A81B586FB3132BED2F8D5262864A9CB9F30AF38BE448598D413A172EFB802C21ACF1C11C520C2F26A471DCAD212EAC7CA39D",
6548 	"CC8853D1D54DA630FAC004F471F281C7B8982D8224A490EDBEB33D3E3D5CC93C4765703D1DD791642F1F116A0DD852BE2419B2AF72BFE9A030E860B0288B5D77",
6549 	"0E12BF1718E9CEF5599BA1C3882FE8046A90874EEFCE8F2CCC20E4F2741FB0A33A3848AEC9C9305FBECBD2D76819967D4671ACC6431E4037968DB37878E695C1",
6550 	"95297B0F95A2FA67D00707D609DFD4FC05C89DAFC2EF6D6EA55BEC771EA333734D9251E79082ECDA866EFEF13C459E1A631386B7E354C899F5F112CA85D71583",
6551 	"4F456C502493BDC0ED2AB756A3A6ED4D67352A697D4216E93212B127A63D5411CE6FA98D5DBEFD73263E3728142743818166ED7DD63687DD2A8CA1D2F4FBD8E1",
6552 
6553 	"6628194E12073DB03BA94CDA9EF9532397D50DBA79B987004AFEFE34",
6554 	"18B776EA21069D69776A33E96BAD48E1DDA0A5EF",
6555 	"354FE67B4A126D5D35FE36C777791A3F7BA13DEF484E2D3908AFF722FAD468FB21696DE95D0BE911C2D3174F8AFCC201035F7B6D8E69402DE5451618C21A535FA9D7BFC5B8DD9FC243F8CF927DB31322D6E881EAA91A996170E657A05A266426D98C88003F8477C1227094A0D9FA1E8C4024309CE1ECCCB5210035D47AC72E8A",
6556 
6557 	"750C4047F547E8E41411856523298AC9BAE245EFAF1397FBE56F9DD5",
6558 	"0CC742CE4A9B7F32F951BCB251EFD925FE4FE35F",
6559 	"640DB1ACC58E0568FE5407E5F9B701DFF8C3C91E716C536FC7FCEC6CB5B71C1165988D4A279E1577D730FC7A29932E3F00C81515236D8D8E31017A7A09DF4352D904CDEB79AA583ADCC31EA698A4C05283DABA9089BE5491F67C1A4EE48DC74BBBE6643AEF846679B4CB395A352D5ED115912DF696FFE0702932946D71492B44",
6560 
6561 	"D94AE0832E6445CE42331CB06D531A82B1DB4BAAD30F746DC916DF24D4E3C2451FFF59A6423EB0E1D02D4FE646CF699DFD818C6E97B051",
6562 	"2514DF4695755A67B288EAF4905C36EEC66FD2FD",
6563 	"423736ED035F6026AF276C35C0B3741B365E5F76CA091B4E8C29E2F0BEFEE603595AA8322D602D2E625E95EB81B2F1C9724E822ECA76DB8618CF09C5343503A4360835B5903BC637E3879FB05E0EF32685D5AEC5067CD7CC96FE4B2670B6EAC3066B1FCF5686B68589AAFB7D629B02D8F8625CA3833624D4800FB081B1CF94EB",
6564 
6565 	"52E650D98E7F2A048B4F86852153B97E01DD316F346A19F67A85",
6566 	"C4435A3E1A18A68B6820436290A37CEFB85DB3FB",
6567 	"45EAD4CA551E662C9800F1ACA8283B0525E6ABAE30BE4B4ABA762FA40FD3D38E22ABEFC69794F6EBBBC05DDBB11216247D2F412FD0FBA87C6E3ACD888813646FD0E48E785204F9C3F73D6D8239562722DDDD8771FEC48B83A31EE6F592C4CFD4BC88174F3B13A112AAE3B9F7B80E0FC6F7255BA880DC7D8021E22AD6A85F0755",
6568 
6569 	"8DA89FD9E5F974A29FEFFB462B49180F6CF9E802",
6570 	"B318C42DF3BE0F83FEA823F5A7B47ED5E425A3B5",
6571 	"36F6E34D94A8D34DAACBA33A2139D00AD85A9345A86051E73071620056B920E219005855A213A0F23897CDCD731B45257C777FE908202BEFDD0B58386B1244EA0CF539A05D5D10329DA44E13030FD760DCD644CFEF2094D1910D3F433E1C7C6DD18BC1F2DF7F643D662FB9DD37EAD9059190F4FA66CA39E869C4EB449CBDC439",
6572 
6573 	"26521050844271",
6574 	"E4EC0982C2336F3A677F6A356174EB0CE887ABC2",
6575 	"42CEE2617B1ECEA4DB3F4829386FBD61DAFBF038E180D837C96366DF24C097B4AB0FAC6BDF590D821C9F10642E681AD05B8D78B378C0F46CE2FAD63F74E0AD3DF06B075D7EB5F5636F8D403B9059CA761B5C62BB52AA45002EA70BAACE08DED243B9D8CBD62A68ADE265832B56564E43A6FA42ED199A099769742DF1539E8255",
6576 
6577 	/* 1025-bit key */
6578 	"01947C7FCE90425F47279E70851F25D5E62316FE8A1DF19371E3E628E260543E4901EF6081F68C0B8141190D2AE8DABA7D1250EC6DB636E944EC3722877C7C1D0A67F14B1694C5F0379451A43E49A32DDE83670B73DA91A1C99BC23B436A60055C610F0BAF99C1A079565B95A3F1526632D1D4DA60F20EDA25E653C4F002766F45",
6579 	"010001",
6580 	"0159DBDE04A33EF06FB608B80B190F4D3E22BCC13AC8E4A081033ABFA416EDB0B338AA08B57309EA5A5240E7DC6E54378C69414C31D97DDB1F406DB3769CC41A43",
6581 	"012B652F30403B38B40995FD6FF41A1ACC8ADA70373236B7202D39B2EE30CFB46DB09511F6F307CC61CC21606C18A75B8A62F822DF031BA0DF0DAFD5506F568BD7",
6582 	"436EF508DE736519C2DA4C580D98C82CB7452A3FB5EFADC3B9C7789A1BC6584F795ADDBBD32439C74686552ECB6C2C307A4D3AF7F539EEC157248C7B31F1A255",
6583 	"012B15A89F3DFB2B39073E73F02BDD0C1A7B379DD435F05CDDE2EFF9E462948B7CEC62EE9050D5E0816E0785A856B49108DCB75F3683874D1CA6329A19013066FF",
6584 	"0270DB17D5914B018D76118B24389A7350EC836B0063A21721236FD8EDB6D89B51E7EEB87B611B7132CB7EA7356C23151C1E7751507C786D9EE1794170A8C8E8",
6585 
6586 	"8FF00CAA605C702830634D9A6C3D42C652B58CF1D92FEC570BEEE7",
6587 	"8C407B5EC2899E5099C53E8CE793BF94E71B1782",
6588 	"0181AF8922B9FCB4D79D92EBE19815992FC0C1439D8BCD491398A0F4AD3A329A5BD9385560DB532683C8B7DA04E4B12AED6AACDF471C34C9CDA891ADDCC2DF3456653AA6382E9AE59B54455257EB099D562BBE10453F2B6D13C59C02E10F1F8ABB5DA0D0570932DACF2D0901DB729D0FEFCC054E70968EA540C81B04BCAEFE720E",
6589 
6590 	"2D",
6591 	"B600CF3C2E506D7F16778C910D3A8B003EEE61D5",
6592 	"018759FF1DF63B2792410562314416A8AEAF2AC634B46F940AB82D64DBF165EEE33011DA749D4BAB6E2FCD18129C9E49277D8453112B429A222A8471B070993998E758861C4D3F6D749D91C4290D332C7A4AB3F7EA35FF3A07D497C955FF0FFC95006B62C6D296810D9BFAB024196C7934012C2DF978EF299ABA239940CBA10245",
6593 
6594 	"74FC88C51BC90F77AF9D5E9A4A70133D4B4E0B34DA3C37C7EF8E",
6595 	"A73768AEEAA91F9D8C1ED6F9D2B63467F07CCAE3",
6596 	"018802BAB04C60325E81C4962311F2BE7C2ADCE93041A00719C88F957575F2C79F1B7BC8CED115C706B311C08A2D986CA3B6A9336B147C29C6F229409DDEC651BD1FDD5A0B7F610C9937FDB4A3A762364B8B3206B4EA485FD098D08F63D4AA8BB2697D027B750C32D7F74EAF5180D2E9B66B17CB2FA55523BC280DA10D14BE2053",
6597 
6598 	"A7EB2A5036931D27D4E891326D99692FFADDA9BF7EFD3E34E622C4ADC085F721DFE885072C78A203B151739BE540FA8C153A10F00A",
6599 	"9A7B3B0E708BD96F8190ECAB4FB9B2B3805A8156",
6600 	"00A4578CBC176318A638FBA7D01DF15746AF44D4F6CD96D7E7C495CBF425B09C649D32BF886DA48FBAF989A2117187CAFB1FB580317690E3CCD446920B7AF82B31DB5804D87D01514ACBFA9156E782F867F6BED9449E0E9A2C09BCECC6AA087636965E34B3EC766F2FE2E43018A2FDDEB140616A0E9D82E5331024EE0652FC7641",
6601 
6602 	"2EF2B066F854C33F3BDCBB5994A435E73D6C6C",
6603 	"EB3CEBBC4ADC16BB48E88C8AEC0E34AF7F427FD3",
6604 	"00EBC5F5FDA77CFDAD3C83641A9025E77D72D8A6FB33A810F5950F8D74C73E8D931E8634D86AB1246256AE07B6005B71B7F2FB98351218331CE69B8FFBDC9DA08BBC9C704F876DEB9DF9FC2EC065CAD87F9090B07ACC17AA7F997B27ACA48806E897F771D95141FE4526D8A5301B678627EFAB707FD40FBEBD6E792A25613E7AEC",
6605 
6606 	"8A7FB344C8B6CB2CF2EF1F643F9A3218F6E19BBA89C0",
6607 	"4C45CF4D57C98E3D6D2095ADC51C489EB50DFF84",
6608 	"010839EC20C27B9052E55BEFB9B77E6FC26E9075D7A54378C646ABDF51E445BD5715DE81789F56F1803D9170764A9E93CB78798694023EE7393CE04BC5D8F8C5A52C171D43837E3ACA62F609EB0AA5FFB0960EF04198DD754F57F7FBE6ABF765CF118B4CA443B23B5AAB266F952326AC4581100644325F8B721ACD5D04FF14EF3A",
6609 
6610 	/* 2048-bit key */
6611 	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
6612 	"010001",
6613 	"ECF5AECD1E5515FFFACBD75A2816C6EBF49018CDFB4638E185D66A7396B6F8090F8018C7FD95CC34B857DC17F0CC6516BB1346AB4D582CADAD7B4103352387B70338D084047C9D9539B6496204B3DD6EA442499207BEC01F964287FF6336C3984658336846F56E46861881C10233D2176BF15A5E96DDC780BC868AA77D3CE769",
6614 	"BC46C464FC6AC4CA783B0EB08A3C841B772F7E9B2F28BABD588AE885E1A0C61E4858A0FB25AC299990F35BE85164C259BA1175CDD7192707135184992B6C29B746DD0D2CABE142835F7D148CC161524B4A09946D48B828473F1CE76B6CB6886C345C03E05F41D51B5C3A90A3F24073C7D74A4FE25D9CF21C75960F3FC3863183",
6615 	"C73564571D00FB15D08A3DE9957A50915D7126E9442DACF42BC82E862E5673FF6A008ED4D2E374617DF89F17A160B43B7FDA9CB6B6B74218609815F7D45CA263C159AA32D272D127FAF4BC8CA2D77378E8AEB19B0AD7DA3CB3DE0AE7314980F62B6D4B0A875D1DF03C1BAE39CCD833EF6CD7E2D9528BF084D1F969E794E9F6C1",
6616 	"2658B37F6DF9C1030BE1DB68117FA9D87E39EA2B693B7E6D3A2F70947413EEC6142E18FB8DFCB6AC545D7C86A0AD48F8457170F0EFB26BC48126C53EFD1D16920198DC2A1107DC282DB6A80CD3062360BA3FA13F70E4312FF1A6CD6B8FC4CD9C5C3DB17C6D6A57212F73AE29F619327BAD59B153858585BA4E28B60A62A45E49",
6617 	"6F38526B3925085534EF3E415A836EDE8B86158A2C7CBFECCB0BD834304FEC683BA8D4F479C433D43416E63269623CEA100776D85AFF401D3FFF610EE65411CE3B1363D63A9709EEDE42647CEA561493D54570A879C18682CD97710B96205EC31117D73B5F36223FADD6E8BA90DD7C0EE61D44E163251E20C7F66EB305117CB8",
6618 
6619 	"8BBA6BF82A6C0F86D5F1756E97956870B08953B06B4EB205BC1694EE",
6620 	"47E1AB7119FEE56C95EE5EAAD86F40D0AA63BD33",
6621 	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
6622 
6623 	"E6AD181F053B58A904F2457510373E57",
6624 	"6D17F5B4C1FFAC351D195BF7B09D09F09A4079CF",
6625 	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
6626 
6627 	"510A2CF60E866FA2340553C94EA39FBC256311E83E94454B4124",
6628 	"385387514DECCC7C740DD8CDF9DAEE49A1CBFD54",
6629 	"9886C3E6764A8B9A84E84148EBD8C3B1AA8050381A78F668714C16D9CFD2A6EDC56979C535D9DEE3B44B85C18BE8928992371711472216D95DDA98D2EE8347C9B14DFFDFF84AA48D25AC06F7D7E65398AC967B1CE90925F67DCE049B7F812DB0742997A74D44FE81DBE0E7A3FEAF2E5C40AF888D550DDBBE3BC20657A29543F8FC2913B9BD1A61B2AB2256EC409BBD7DC0D17717EA25C43F42ED27DF8738BF4AFC6766FF7AFF0859555EE283920F4C8A63C4A7340CBAFDDC339ECDB4B0515002F96C932B5B79167AF699C0AD3FCCFDF0F44E85A70262BF2E18FE34B850589975E867FF969D48EABF212271546CDC05A69ECB526E52870C836F307BD798780EDE",
6630 
6631 	"BCDD190DA3B7D300DF9A06E22CAAE2A75F10C91FF667B7C16BDE8B53064A2649A94045C9",
6632 	"5CACA6A0F764161A9684F85D92B6E0EF37CA8B65",
6633 	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
6634 
6635 	"A7DD6C7DC24B46F9DD5F1E91ADA4C3B3DF947E877232A9",
6636 	"95BCA9E3859894B3DD869FA7ECD5BBC6401BF3E4",
6637 	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
6638 
6639 	"EAF1A73A1B0C4609537DE69CD9228BBCFB9A8CA8C6C3EFAF056FE4A7F4634ED00B7C39EC6922D7B8EA2C04EBAC",
6640 	"9F47DDF42E97EEA856A9BDBC714EB3AC22F6EB32",
6641 	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
6642 
6643 	NULL
6644 };
6645 
6646 static void
6647 test_RSA_OAEP(const char *name,
6648 	br_rsa_oaep_encrypt menc, br_rsa_oaep_decrypt mdec)
6649 {
6650 	size_t u;
6651 
6652 	printf("Test %s: ", name);
6653 	fflush(stdout);
6654 
6655 	u = 0;
6656 	while (KAT_RSA_OAEP[u] != NULL) {
6657 		unsigned char n[512];
6658 		unsigned char e[8];
6659 		unsigned char p[256];
6660 		unsigned char q[256];
6661 		unsigned char dp[256];
6662 		unsigned char dq[256];
6663 		unsigned char iq[256];
6664 		br_rsa_public_key pk;
6665 		br_rsa_private_key sk;
6666 		size_t v;
6667 
6668 		pk.n = n;
6669 		pk.nlen = hextobin(n, KAT_RSA_OAEP[u ++]);
6670 		pk.e = e;
6671 		pk.elen = hextobin(e, KAT_RSA_OAEP[u ++]);
6672 
6673 		for (v = 0; n[v] == 0; v ++);
6674 		sk.n_bitlen = BIT_LENGTH(n[v]) + ((pk.nlen - 1 - v) << 3);
6675 		sk.p = p;
6676 		sk.plen = hextobin(p, KAT_RSA_OAEP[u ++]);
6677 		sk.q = q;
6678 		sk.qlen = hextobin(q, KAT_RSA_OAEP[u ++]);
6679 		sk.dp = dp;
6680 		sk.dplen = hextobin(dp, KAT_RSA_OAEP[u ++]);
6681 		sk.dq = dq;
6682 		sk.dqlen = hextobin(dq, KAT_RSA_OAEP[u ++]);
6683 		sk.iq = iq;
6684 		sk.iqlen = hextobin(iq, KAT_RSA_OAEP[u ++]);
6685 
6686 		for (v = 0; v < 6; v ++) {
6687 			unsigned char plain[512], seed[128], cipher[512];
6688 			size_t plain_len, seed_len, cipher_len;
6689 			rng_fake_ctx rng;
6690 			unsigned char tmp[513];
6691 			size_t len;
6692 
6693 			plain_len = hextobin(plain, KAT_RSA_OAEP[u ++]);
6694 			seed_len = hextobin(seed, KAT_RSA_OAEP[u ++]);
6695 			cipher_len = hextobin(cipher, KAT_RSA_OAEP[u ++]);
6696 			rng_fake_init(&rng, NULL, seed, seed_len);
6697 
6698 			len = menc(&rng.vtable, &br_sha1_vtable, NULL, 0, &pk,
6699 				tmp, sizeof tmp, plain, plain_len);
6700 			if (len != cipher_len) {
6701 				fprintf(stderr,
6702 					"wrong encrypted length: %lu vs %lu\n",
6703 					(unsigned long)len,
6704 					(unsigned long)cipher_len);
6705 			}
6706 			if (rng.ptr != rng.len) {
6707 				fprintf(stderr, "seed not fully consumed\n");
6708 				exit(EXIT_FAILURE);
6709 			}
6710 			check_equals("KAT RSA/OAEP encrypt", tmp, cipher, len);
6711 
6712 			if (mdec(&br_sha1_vtable, NULL, 0,
6713 				&sk, tmp, &len) != 1)
6714 			{
6715 				fprintf(stderr, "decryption failed\n");
6716 				exit(EXIT_FAILURE);
6717 			}
6718 			if (len != plain_len) {
6719 				fprintf(stderr,
6720 					"wrong decrypted length: %lu vs %lu\n",
6721 					(unsigned long)len,
6722 					(unsigned long)plain_len);
6723 			}
6724 			check_equals("KAT RSA/OAEP decrypt", tmp, plain, len);
6725 
6726 			/*
6727 			 * Try with a different label; it should fail.
6728 			 */
6729 			memcpy(tmp, cipher, cipher_len);
6730 			len = cipher_len;
6731 			if (mdec(&br_sha1_vtable, "T", 1,
6732 				&sk, tmp, &len) != 0)
6733 			{
6734 				fprintf(stderr, "decryption should have failed"
6735 					" (wrong label)\n");
6736 				exit(EXIT_FAILURE);
6737 			}
6738 
6739 			/*
6740 			 * Try with a the wrong length; it should fail.
6741 			 */
6742 			tmp[0] = 0x00;
6743 			memcpy(tmp + 1, cipher, cipher_len);
6744 			len = cipher_len + 1;
6745 			if (mdec(&br_sha1_vtable, "T", 1,
6746 				&sk, tmp, &len) != 0)
6747 			{
6748 				fprintf(stderr, "decryption should have failed"
6749 					" (wrong length)\n");
6750 				exit(EXIT_FAILURE);
6751 			}
6752 
6753 			printf(".");
6754 			fflush(stdout);
6755 		}
6756 	}
6757 
6758 	printf(" done.\n");
6759 	fflush(stdout);
6760 }
6761 
6762 static void
6763 test_RSA_keygen(const char *name, br_rsa_keygen kg, br_rsa_compute_modulus cm,
6764 	br_rsa_compute_pubexp ce, br_rsa_compute_privexp cd,
6765 	br_rsa_public pub, br_rsa_pkcs1_sign sign, br_rsa_pkcs1_vrfy vrfy)
6766 {
6767 	br_hmac_drbg_context rng;
6768 	int i;
6769 
6770 	printf("Test %s: ", name);
6771 	fflush(stdout);
6772 
6773 	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for RSA keygen", 19);
6774 
6775 	for (i = 0; i <= 42; i ++) {
6776 		unsigned size;
6777 		uint32_t pubexp, z;
6778 		br_rsa_private_key sk;
6779 		br_rsa_public_key pk, pk2;
6780 		unsigned char kbuf_priv[BR_RSA_KBUF_PRIV_SIZE(2048)];
6781 		unsigned char kbuf_pub[BR_RSA_KBUF_PUB_SIZE(2048)];
6782 		unsigned char n2[256], d[256], msg1[256], msg2[256];
6783 		uint32_t mod[256];
6784 		uint32_t cc;
6785 		size_t u, v;
6786 		unsigned char sig[257], hv[32], hv2[32];
6787 		unsigned mask1, mask2;
6788 		int j;
6789 
6790 		if (i <= 35) {
6791 			size = 1024 + i;
6792 			pubexp = 17;
6793 		} else if (i <= 40) {
6794 			size = 2048;
6795 			pubexp = (i << 1) - 69;
6796 		} else {
6797 			size = 2048;
6798 			pubexp = 0xFFFFFFFF;
6799 		}
6800 
6801 		if (!kg(&rng.vtable,
6802 			&sk, kbuf_priv, &pk, kbuf_pub, size, pubexp))
6803 		{
6804 			fprintf(stderr, "RSA key pair generation failure\n");
6805 			exit(EXIT_FAILURE);
6806 		}
6807 
6808 		z = pubexp;
6809 		for (u = pk.elen; u > 0; u --) {
6810 			if (pk.e[u - 1] != (z & 0xFF)) {
6811 				fprintf(stderr, "wrong public exponent\n");
6812 				exit(EXIT_FAILURE);
6813 			}
6814 			z >>= 8;
6815 		}
6816 		if (z != 0) {
6817 			fprintf(stderr, "truncated public exponent\n");
6818 			exit(EXIT_FAILURE);
6819 		}
6820 
6821 		memset(mod, 0, sizeof mod);
6822 		for (u = 0; u < sk.plen; u ++) {
6823 			for (v = 0; v < sk.qlen; v ++) {
6824 				mod[u + v] += (uint32_t)sk.p[sk.plen - 1 - u]
6825 					* (uint32_t)sk.q[sk.qlen - 1 - v];
6826 			}
6827 		}
6828 		cc = 0;
6829 		for (u = 0; u < sk.plen + sk.qlen; u ++) {
6830 			mod[u] += cc;
6831 			cc = mod[u] >> 8;
6832 			mod[u] &= 0xFF;
6833 		}
6834 		for (u = 0; u < pk.nlen; u ++) {
6835 			if (mod[pk.nlen - 1 - u] != pk.n[u]) {
6836 				fprintf(stderr, "wrong modulus\n");
6837 				exit(EXIT_FAILURE);
6838 			}
6839 		}
6840 		if (sk.n_bitlen != size) {
6841 			fprintf(stderr, "wrong key size\n");
6842 			exit(EXIT_FAILURE);
6843 		}
6844 		if (pk.nlen != (size + 7) >> 3) {
6845 			fprintf(stderr, "wrong modulus size (bytes)\n");
6846 			exit(EXIT_FAILURE);
6847 		}
6848 		mask1 = 0x01 << ((size + 7) & 7);
6849 		mask2 = 0xFF & -mask1;
6850 		if ((pk.n[0] & mask2) != mask1) {
6851 			fprintf(stderr, "wrong modulus size (bits)\n");
6852 			exit(EXIT_FAILURE);
6853 		}
6854 
6855 		if (cm(NULL, &sk) != pk.nlen) {
6856 			fprintf(stderr, "wrong recomputed modulus length\n");
6857 			exit(EXIT_FAILURE);
6858 		}
6859 		if (cm(n2, &sk) != pk.nlen || memcmp(pk.n, n2, pk.nlen) != 0) {
6860 			fprintf(stderr, "wrong recomputed modulus value\n");
6861 			exit(EXIT_FAILURE);
6862 		}
6863 
6864 		z = ce(&sk);
6865 		if (z != pubexp) {
6866 			fprintf(stderr,
6867 				"wrong recomputed pubexp: %lu (exp: %lu)\n",
6868 				(unsigned long)z, (unsigned long)pubexp);
6869 			exit(EXIT_FAILURE);
6870 		}
6871 
6872 		if (cd(NULL, &sk, pubexp) != pk.nlen) {
6873 			fprintf(stderr,
6874 				"wrong recomputed privexp length (1)\n");
6875 			exit(EXIT_FAILURE);
6876 		}
6877 		if (cd(d, &sk, pubexp) != pk.nlen) {
6878 			fprintf(stderr,
6879 				"wrong recomputed privexp length (2)\n");
6880 			exit(EXIT_FAILURE);
6881 		}
6882 		/*
6883 		 * To check that the private exponent is correct, we make
6884 		 * it into a _public_ key, and use the public-key operation
6885 		 * to perform the modular exponentiation.
6886 		 */
6887 		pk2 = pk;
6888 		pk2.e = d;
6889 		pk2.elen = pk.nlen;
6890 		rng.vtable->generate(&rng.vtable, msg1, pk.nlen);
6891 		msg1[0] = 0x00;
6892 		memcpy(msg2, msg1, pk.nlen);
6893 		if (!pub(msg2, pk.nlen, &pk2) || !pub(msg2, pk.nlen, &pk)) {
6894 			fprintf(stderr, "public-key operation error\n");
6895 			exit(EXIT_FAILURE);
6896 		}
6897 		if (memcmp(msg1, msg2, pk.nlen) != 0) {
6898 			fprintf(stderr, "wrong recomputed privexp\n");
6899 			exit(EXIT_FAILURE);
6900 		}
6901 
6902 		/*
6903 		 * We test the RSA operation over a some random messages.
6904 		 */
6905 		for (j = 0; j < 20; j ++) {
6906 			rng.vtable->generate(&rng.vtable, hv, sizeof hv);
6907 			memset(sig, 0, sizeof sig);
6908 			sig[pk.nlen] = 0x00;
6909 			if (!sign(BR_HASH_OID_SHA256,
6910 				hv, sizeof hv, &sk, sig))
6911 			{
6912 				fprintf(stderr,
6913 					"signature error (%d)\n", j);
6914 				exit(EXIT_FAILURE);
6915 			}
6916 			if (sig[pk.nlen] != 0x00) {
6917 				fprintf(stderr,
6918 					"signature length error (%d)\n", j);
6919 				exit(EXIT_FAILURE);
6920 			}
6921 			if (!vrfy(sig, pk.nlen, BR_HASH_OID_SHA256, sizeof hv,
6922 				&pk, hv2))
6923 			{
6924 				fprintf(stderr,
6925 					"signature verif error (%d)\n", j);
6926 				exit(EXIT_FAILURE);
6927 			}
6928 			if (memcmp(hv, hv2, sizeof hv) != 0) {
6929 				fprintf(stderr,
6930 					"signature extract error (%d)\n", j);
6931 				exit(EXIT_FAILURE);
6932 			}
6933 		}
6934 
6935 		printf(".");
6936 		fflush(stdout);
6937 	}
6938 
6939 	printf(" done.\n");
6940 	fflush(stdout);
6941 }
6942 
6943 static void
6944 test_RSA_i15(void)
6945 {
6946 	test_RSA_core("RSA i15 core", &br_rsa_i15_public, &br_rsa_i15_private);
6947 	test_RSA_sign("RSA i15 sign", &br_rsa_i15_private,
6948 		&br_rsa_i15_pkcs1_sign, &br_rsa_i15_pkcs1_vrfy);
6949 	test_RSA_OAEP("RSA i15 OAEP",
6950 		&br_rsa_i15_oaep_encrypt, &br_rsa_i15_oaep_decrypt);
6951 	test_RSA_PSS("RSA i15 PSS",
6952 		&br_rsa_i15_pss_sign, &br_rsa_i15_pss_vrfy);
6953 	test_RSA_keygen("RSA i15 keygen", &br_rsa_i15_keygen,
6954 		&br_rsa_i15_compute_modulus, &br_rsa_i15_compute_pubexp,
6955 		&br_rsa_i15_compute_privexp, &br_rsa_i15_public,
6956 		&br_rsa_i15_pkcs1_sign, &br_rsa_i15_pkcs1_vrfy);
6957 }
6958 
6959 static void
6960 test_RSA_i31(void)
6961 {
6962 	test_RSA_core("RSA i31 core", &br_rsa_i31_public, &br_rsa_i31_private);
6963 	test_RSA_sign("RSA i31 sign", &br_rsa_i31_private,
6964 		&br_rsa_i31_pkcs1_sign, &br_rsa_i31_pkcs1_vrfy);
6965 	test_RSA_OAEP("RSA i31 OAEP",
6966 		&br_rsa_i31_oaep_encrypt, &br_rsa_i31_oaep_decrypt);
6967 	test_RSA_PSS("RSA i31 PSS",
6968 		&br_rsa_i31_pss_sign, &br_rsa_i31_pss_vrfy);
6969 	test_RSA_keygen("RSA i31 keygen", &br_rsa_i31_keygen,
6970 		&br_rsa_i31_compute_modulus, &br_rsa_i31_compute_pubexp,
6971 		&br_rsa_i31_compute_privexp, &br_rsa_i31_public,
6972 		&br_rsa_i31_pkcs1_sign, &br_rsa_i31_pkcs1_vrfy);
6973 }
6974 
6975 static void
6976 test_RSA_i32(void)
6977 {
6978 	test_RSA_core("RSA i32 core", &br_rsa_i32_public, &br_rsa_i32_private);
6979 	test_RSA_sign("RSA i32 sign", &br_rsa_i32_private,
6980 		&br_rsa_i32_pkcs1_sign, &br_rsa_i32_pkcs1_vrfy);
6981 	test_RSA_OAEP("RSA i32 OAEP",
6982 		&br_rsa_i32_oaep_encrypt, &br_rsa_i32_oaep_decrypt);
6983 	test_RSA_PSS("RSA i32 PSS",
6984 		&br_rsa_i32_pss_sign, &br_rsa_i32_pss_vrfy);
6985 }
6986 
6987 static void
6988 test_RSA_i62(void)
6989 {
6990 	br_rsa_public pub;
6991 	br_rsa_private priv;
6992 	br_rsa_pkcs1_sign sign;
6993 	br_rsa_pkcs1_vrfy vrfy;
6994 	br_rsa_pss_sign pss_sign;
6995 	br_rsa_pss_vrfy pss_vrfy;
6996 	br_rsa_oaep_encrypt menc;
6997 	br_rsa_oaep_decrypt mdec;
6998 	br_rsa_keygen kgen;
6999 
7000 	pub = br_rsa_i62_public_get();
7001 	priv = br_rsa_i62_private_get();
7002 	sign = br_rsa_i62_pkcs1_sign_get();
7003 	vrfy = br_rsa_i62_pkcs1_vrfy_get();
7004 	pss_sign = br_rsa_i62_pss_sign_get();
7005 	pss_vrfy = br_rsa_i62_pss_vrfy_get();
7006 	menc = br_rsa_i62_oaep_encrypt_get();
7007 	mdec = br_rsa_i62_oaep_decrypt_get();
7008 	kgen = br_rsa_i62_keygen_get();
7009 	if (pub) {
7010 		if (!priv || !sign || !vrfy || !pss_sign || !pss_vrfy
7011 			|| !menc || !mdec || !kgen)
7012 		{
7013 			fprintf(stderr, "Inconsistent i62 availability\n");
7014 			exit(EXIT_FAILURE);
7015 		}
7016 		test_RSA_core("RSA i62 core", pub, priv);
7017 		test_RSA_sign("RSA i62 sign", priv, sign, vrfy);
7018 		test_RSA_OAEP("RSA i62 OAEP", menc, mdec);
7019 		test_RSA_PSS("RSA i62 PSS", pss_sign, pss_vrfy);
7020 		test_RSA_keygen("RSA i62 keygen", kgen,
7021 			&br_rsa_i31_compute_modulus, &br_rsa_i31_compute_pubexp,
7022 			&br_rsa_i31_compute_privexp, pub,
7023 			sign, vrfy);
7024 	} else {
7025 		if (priv || sign || vrfy || pss_sign || pss_vrfy
7026 			|| menc || mdec || kgen)
7027 		{
7028 			fprintf(stderr, "Inconsistent i62 availability\n");
7029 			exit(EXIT_FAILURE);
7030 		}
7031 		printf("Test RSA i62: UNAVAILABLE\n");
7032 	}
7033 }
7034 
7035 #if 0
7036 static void
7037 test_RSA_signatures(void)
7038 {
7039 	uint32_t n[40], e[2], p[20], q[20], dp[20], dq[20], iq[20], x[40];
7040 	unsigned char hv[20], sig[128];
7041 	unsigned char ref[128], tmp[128];
7042 	br_sha1_context hc;
7043 
7044 	printf("Test RSA signatures: ");
7045 	fflush(stdout);
7046 
7047 	/*
7048 	 * Decode RSA key elements.
7049 	 */
7050 	br_int_decode(n, sizeof n / sizeof n[0], RSA_N, sizeof RSA_N);
7051 	br_int_decode(e, sizeof e / sizeof e[0], RSA_E, sizeof RSA_E);
7052 	br_int_decode(p, sizeof p / sizeof p[0], RSA_P, sizeof RSA_P);
7053 	br_int_decode(q, sizeof q / sizeof q[0], RSA_Q, sizeof RSA_Q);
7054 	br_int_decode(dp, sizeof dp / sizeof dp[0], RSA_DP, sizeof RSA_DP);
7055 	br_int_decode(dq, sizeof dq / sizeof dq[0], RSA_DQ, sizeof RSA_DQ);
7056 	br_int_decode(iq, sizeof iq / sizeof iq[0], RSA_IQ, sizeof RSA_IQ);
7057 
7058 	/*
7059 	 * Decode reference signature (computed with OpenSSL).
7060 	 */
7061 	hextobin(ref, "45A3DC6A106BCD3BD0E48FB579643AA3FF801E5903E80AA9B43A695A8E7F454E93FA208B69995FF7A6D5617C2FEB8E546375A664977A48931842AAE796B5A0D64393DCA35F3490FC157F5BD83B9D58C2F7926E6AE648A2BD96CAB8FCCD3D35BB11424AD47D973FF6D69CA774841AEC45DFAE99CCF79893E7047FDE6CB00AA76D");
7062 
7063 	/*
7064 	 * Recompute signature. Since PKCS#1 v1.5 signatures are
7065 	 * deterministic, we should get the same as the reference signature.
7066 	 */
7067 	br_sha1_init(&hc);
7068 	br_sha1_update(&hc, "test", 4);
7069 	br_sha1_out(&hc, hv);
7070 	if (!br_rsa_sign(sig, sizeof sig, p, q, dp, dq, iq, br_sha1_ID, hv)) {
7071 		fprintf(stderr, "RSA-1024/SHA-1 sig generate failed\n");
7072 		exit(EXIT_FAILURE);
7073 	}
7074 	check_equals("KAT RSA-sign 1", sig, ref, sizeof sig);
7075 
7076 	/*
7077 	 * Verify signature.
7078 	 */
7079 	if (!br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7080 		fprintf(stderr, "RSA-1024/SHA-1 sig verify failed\n");
7081 		exit(EXIT_FAILURE);
7082 	}
7083 	hv[5] ^= 0x01;
7084 	if (br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7085 		fprintf(stderr, "RSA-1024/SHA-1 sig verify should have failed\n");
7086 		exit(EXIT_FAILURE);
7087 	}
7088 	hv[5] ^= 0x01;
7089 
7090 	/*
7091 	 * Generate a signature with the alternate encoding (no NULL) and
7092 	 * verify it.
7093 	 */
7094 	hextobin(tmp, "0001FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00301F300706052B0E03021A0414A94A8FE5CCB19BA61C4C0873D391E987982FBBD3");
7095 	br_int_decode(x, sizeof x / sizeof x[0], tmp, sizeof tmp);
7096 	x[0] = n[0];
7097 	br_rsa_private_core(x, p, q, dp, dq, iq);
7098 	br_int_encode(sig, sizeof sig, x);
7099 	if (!br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7100 		fprintf(stderr, "RSA-1024/SHA-1 sig verify (alt) failed\n");
7101 		exit(EXIT_FAILURE);
7102 	}
7103 	hv[5] ^= 0x01;
7104 	if (br_rsa_verify(sig, sizeof sig, n, e, br_sha1_ID, hv)) {
7105 		fprintf(stderr, "RSA-1024/SHA-1 sig verify (alt) should have failed\n");
7106 		exit(EXIT_FAILURE);
7107 	}
7108 	hv[5] ^= 0x01;
7109 
7110 	printf("done.\n");
7111 	fflush(stdout);
7112 }
7113 #endif
7114 
7115 /*
7116  * From: http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf
7117  */
7118 static const char *const KAT_GHASH[] = {
7119 
7120 	"66e94bd4ef8a2c3b884cfa59ca342b2e",
7121 	"",
7122 	"",
7123 	"00000000000000000000000000000000",
7124 
7125 	"66e94bd4ef8a2c3b884cfa59ca342b2e",
7126 	"",
7127 	"0388dace60b6a392f328c2b971b2fe78",
7128 	"f38cbb1ad69223dcc3457ae5b6b0f885",
7129 
7130 	"b83b533708bf535d0aa6e52980d53b78",
7131 	"",
7132 	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091473f5985",
7133 	"7f1b32b81b820d02614f8895ac1d4eac",
7134 
7135 	"b83b533708bf535d0aa6e52980d53b78",
7136 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7137 	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091",
7138 	"698e57f70e6ecc7fd9463b7260a9ae5f",
7139 
7140 	"b83b533708bf535d0aa6e52980d53b78",
7141 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7142 	"61353b4c2806934a777ff51fa22a4755699b2a714fcdc6f83766e5f97b6c742373806900e49f24b22b097544d4896b424989b5e1ebac0f07c23f4598",
7143 	"df586bb4c249b92cb6922877e444d37b",
7144 
7145 	"b83b533708bf535d0aa6e52980d53b78",
7146 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7147 	"8ce24998625615b603a033aca13fb894be9112a5c3a211a8ba262a3cca7e2ca701e4a9a4fba43c90ccdcb281d48c7c6fd62875d2aca417034c34aee5",
7148 	"1c5afe9760d3932f3c9a878aac3dc3de",
7149 
7150 	"aae06992acbf52a3e8f4a96ec9300bd7",
7151 	"",
7152 	"98e7247c07f0fe411c267e4384b0f600",
7153 	"e2c63f0ac44ad0e02efa05ab6743d4ce",
7154 
7155 	"466923ec9ae682214f2c082badb39249",
7156 	"",
7157 	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade256",
7158 	"51110d40f6c8fff0eb1ae33445a889f0",
7159 
7160 	"466923ec9ae682214f2c082badb39249",
7161 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7162 	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710",
7163 	"ed2ce3062e4a8ec06db8b4c490e8a268",
7164 
7165 	"466923ec9ae682214f2c082badb39249",
7166 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7167 	"0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f7",
7168 	"1e6a133806607858ee80eaf237064089",
7169 
7170 	"466923ec9ae682214f2c082badb39249",
7171 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7172 	"d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373b",
7173 	"82567fb0b4cc371801eadec005968e94",
7174 
7175 	"dc95c078a2408989ad48a21492842087",
7176 	"",
7177 	"cea7403d4d606b6e074ec5d3baf39d18",
7178 	"83de425c5edc5d498f382c441041ca92",
7179 
7180 	"acbef20579b4b8ebce889bac8732dad7",
7181 	"",
7182 	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015ad",
7183 	"4db870d37cb75fcb46097c36230d1612",
7184 
7185 	"acbef20579b4b8ebce889bac8732dad7",
7186 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7187 	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662",
7188 	"8bd0c4d8aacd391e67cca447e8c38f65",
7189 
7190 	"acbef20579b4b8ebce889bac8732dad7",
7191 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7192 	"c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f",
7193 	"75a34288b8c68f811c52b2e9a2f97f63",
7194 
7195 	"acbef20579b4b8ebce889bac8732dad7",
7196 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7197 	"5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3f",
7198 	"d5ffcf6fc5ac4d69722187421a7f170b",
7199 
7200 	NULL,
7201 };
7202 
7203 static void
7204 test_GHASH(const char *name, br_ghash gh)
7205 {
7206 	size_t u;
7207 
7208 	printf("Test %s: ", name);
7209 	fflush(stdout);
7210 
7211 	for (u = 0; KAT_GHASH[u]; u += 4) {
7212 		unsigned char h[16];
7213 		unsigned char a[100];
7214 		size_t a_len;
7215 		unsigned char c[100];
7216 		size_t c_len;
7217 		unsigned char p[16];
7218 		unsigned char y[16];
7219 		unsigned char ref[16];
7220 
7221 		hextobin(h, KAT_GHASH[u]);
7222 		a_len = hextobin(a, KAT_GHASH[u + 1]);
7223 		c_len = hextobin(c, KAT_GHASH[u + 2]);
7224 		hextobin(ref, KAT_GHASH[u + 3]);
7225 		memset(y, 0, sizeof y);
7226 		gh(y, h, a, a_len);
7227 		gh(y, h, c, c_len);
7228 		memset(p, 0, sizeof p);
7229 		br_enc32be(p + 4, (uint32_t)a_len << 3);
7230 		br_enc32be(p + 12, (uint32_t)c_len << 3);
7231 		gh(y, h, p, sizeof p);
7232 		check_equals("KAT GHASH", y, ref, sizeof ref);
7233 	}
7234 
7235 	for (u = 0; u <= 1024; u ++) {
7236 		unsigned char key[32], iv[12];
7237 		unsigned char buf[1024 + 32];
7238 		unsigned char y0[16], y1[16];
7239 		char tmp[100];
7240 
7241 		memset(key, 0, sizeof key);
7242 		memset(iv, 0, sizeof iv);
7243 		br_enc32be(key, u);
7244 		memset(buf, 0, sizeof buf);
7245 		br_chacha20_ct_run(key, iv, 1, buf, sizeof buf);
7246 
7247 		memcpy(y0, buf, 16);
7248 		br_ghash_ctmul32(y0, buf + 16, buf + 32, u);
7249 		memcpy(y1, buf, 16);
7250 		gh(y1, buf + 16, buf + 32, u);
7251 		sprintf(tmp, "XREF %s (len = %u)", name, (unsigned)u);
7252 		check_equals(tmp, y0, y1, 16);
7253 
7254 		if ((u & 31) == 0) {
7255 			printf(".");
7256 			fflush(stdout);
7257 		}
7258 	}
7259 
7260 	printf("done.\n");
7261 	fflush(stdout);
7262 }
7263 
7264 static void
7265 test_GHASH_ctmul(void)
7266 {
7267 	test_GHASH("GHASH_ctmul", br_ghash_ctmul);
7268 }
7269 
7270 static void
7271 test_GHASH_ctmul32(void)
7272 {
7273 	test_GHASH("GHASH_ctmul32", br_ghash_ctmul32);
7274 }
7275 
7276 static void
7277 test_GHASH_ctmul64(void)
7278 {
7279 	test_GHASH("GHASH_ctmul64", br_ghash_ctmul64);
7280 }
7281 
7282 static void
7283 test_GHASH_pclmul(void)
7284 {
7285 	br_ghash gh;
7286 
7287 	gh = br_ghash_pclmul_get();
7288 	if (gh == 0) {
7289 		printf("Test GHASH_pclmul: UNAVAILABLE\n");
7290 	} else {
7291 		test_GHASH("GHASH_pclmul", gh);
7292 	}
7293 }
7294 
7295 static void
7296 test_GHASH_pwr8(void)
7297 {
7298 	br_ghash gh;
7299 
7300 	gh = br_ghash_pwr8_get();
7301 	if (gh == 0) {
7302 		printf("Test GHASH_pwr8: UNAVAILABLE\n");
7303 	} else {
7304 		test_GHASH("GHASH_pwr8", gh);
7305 	}
7306 }
7307 
7308 /*
7309  * From: http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf
7310  *
7311  * Order: key, plaintext, AAD, IV, ciphertext, tag
7312  */
7313 static const char *const KAT_GCM[] = {
7314 	"00000000000000000000000000000000",
7315 	"",
7316 	"",
7317 	"000000000000000000000000",
7318 	"",
7319 	"58e2fccefa7e3061367f1d57a4e7455a",
7320 
7321 	"00000000000000000000000000000000",
7322 	"00000000000000000000000000000000",
7323 	"",
7324 	"000000000000000000000000",
7325 	"0388dace60b6a392f328c2b971b2fe78",
7326 	"ab6e47d42cec13bdf53a67b21257bddf",
7327 
7328 	"feffe9928665731c6d6a8f9467308308",
7329 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255",
7330 	"",
7331 	"cafebabefacedbaddecaf888",
7332 	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091473f5985",
7333 	"4d5c2af327cd64a62cf35abd2ba6fab4",
7334 
7335 	"feffe9928665731c6d6a8f9467308308",
7336 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7337 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7338 	"cafebabefacedbaddecaf888",
7339 	"42831ec2217774244b7221b784d0d49ce3aa212f2c02a4e035c17e2329aca12e21d514b25466931c7d8f6a5aac84aa051ba30b396a0aac973d58e091",
7340 	"5bc94fbc3221a5db94fae95ae7121a47",
7341 
7342 	"feffe9928665731c6d6a8f9467308308",
7343 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7344 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7345 	"cafebabefacedbad",
7346 	"61353b4c2806934a777ff51fa22a4755699b2a714fcdc6f83766e5f97b6c742373806900e49f24b22b097544d4896b424989b5e1ebac0f07c23f4598",
7347 	"3612d2e79e3b0785561be14aaca2fccb",
7348 
7349 	"feffe9928665731c6d6a8f9467308308",
7350 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7351 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7352 	"9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b",
7353 	"8ce24998625615b603a033aca13fb894be9112a5c3a211a8ba262a3cca7e2ca701e4a9a4fba43c90ccdcb281d48c7c6fd62875d2aca417034c34aee5",
7354 	"619cc5aefffe0bfa462af43c1699d050",
7355 
7356 	"000000000000000000000000000000000000000000000000",
7357 	"",
7358 	"",
7359 	"000000000000000000000000",
7360 	"",
7361 	"cd33b28ac773f74ba00ed1f312572435",
7362 
7363 	"000000000000000000000000000000000000000000000000",
7364 	"00000000000000000000000000000000",
7365 	"",
7366 	"000000000000000000000000",
7367 	"98e7247c07f0fe411c267e4384b0f600",
7368 	"2ff58d80033927ab8ef4d4587514f0fb",
7369 
7370 	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7371 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255",
7372 	"",
7373 	"cafebabefacedbaddecaf888",
7374 	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade256",
7375 	"9924a7c8587336bfb118024db8674a14",
7376 
7377 	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7378 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7379 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7380 	"cafebabefacedbaddecaf888",
7381 	"3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710",
7382 	"2519498e80f1478f37ba55bd6d27618c",
7383 
7384 	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7385 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7386 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7387 	"cafebabefacedbad",
7388 	"0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f7",
7389 	"65dcc57fcf623a24094fcca40d3533f8",
7390 
7391 	"feffe9928665731c6d6a8f9467308308feffe9928665731c",
7392 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7393 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7394 	"9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b",
7395 	"d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373b",
7396 	"dcf566ff291c25bbb8568fc3d376a6d9",
7397 
7398 	"0000000000000000000000000000000000000000000000000000000000000000",
7399 	"",
7400 	"",
7401 	"000000000000000000000000",
7402 	"",
7403 	"530f8afbc74536b9a963b4f1c4cb738b",
7404 
7405 	"0000000000000000000000000000000000000000000000000000000000000000",
7406 	"00000000000000000000000000000000",
7407 	"",
7408 	"000000000000000000000000",
7409 	"cea7403d4d606b6e074ec5d3baf39d18",
7410 	"d0d1c8a799996bf0265b98b5d48ab919",
7411 
7412 	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7413 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255",
7414 	"",
7415 	"cafebabefacedbaddecaf888",
7416 	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015ad",
7417 	"b094dac5d93471bdec1a502270e3cc6c",
7418 
7419 	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7420 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7421 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7422 	"cafebabefacedbaddecaf888",
7423 	"522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662",
7424 	"76fc6ece0f4e1768cddf8853bb2d551b",
7425 
7426 	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7427 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7428 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7429 	"cafebabefacedbad",
7430 	"c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f",
7431 	"3a337dbf46a792c45e454913fe2ea8f2",
7432 
7433 	"feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308",
7434 	"d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39",
7435 	"feedfacedeadbeeffeedfacedeadbeefabaddad2",
7436 	"9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b",
7437 	"5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3f",
7438 	"a44a8266ee1c8eb0c8b5d4cf5ae9f19a",
7439 
7440 	NULL
7441 };
7442 
7443 static void
7444 test_GCM(void)
7445 {
7446 	size_t u;
7447 
7448 	printf("Test GCM: ");
7449 	fflush(stdout);
7450 
7451 	for (u = 0; KAT_GCM[u]; u += 6) {
7452 		unsigned char key[32];
7453 		unsigned char plain[100];
7454 		unsigned char aad[100];
7455 		unsigned char iv[100];
7456 		unsigned char cipher[100];
7457 		unsigned char tag[100];
7458 		size_t key_len, plain_len, aad_len, iv_len;
7459 		br_aes_ct_ctr_keys bc;
7460 		br_gcm_context gc;
7461 		unsigned char tmp[100], out[16];
7462 		size_t v, tag_len;
7463 
7464 		key_len = hextobin(key, KAT_GCM[u]);
7465 		plain_len = hextobin(plain, KAT_GCM[u + 1]);
7466 		aad_len = hextobin(aad, KAT_GCM[u + 2]);
7467 		iv_len = hextobin(iv, KAT_GCM[u + 3]);
7468 		hextobin(cipher, KAT_GCM[u + 4]);
7469 		hextobin(tag, KAT_GCM[u + 5]);
7470 
7471 		br_aes_ct_ctr_init(&bc, key, key_len);
7472 		br_gcm_init(&gc, &bc.vtable, br_ghash_ctmul32);
7473 
7474 		memset(tmp, 0x54, sizeof tmp);
7475 
7476 		/*
7477 		 * Basic operation.
7478 		 */
7479 		memcpy(tmp, plain, plain_len);
7480 		br_gcm_reset(&gc, iv, iv_len);
7481 		br_gcm_aad_inject(&gc, aad, aad_len);
7482 		br_gcm_flip(&gc);
7483 		br_gcm_run(&gc, 1, tmp, plain_len);
7484 		br_gcm_get_tag(&gc, out);
7485 		check_equals("KAT GCM 1", tmp, cipher, plain_len);
7486 		check_equals("KAT GCM 2", out, tag, 16);
7487 
7488 		br_gcm_reset(&gc, iv, iv_len);
7489 		br_gcm_aad_inject(&gc, aad, aad_len);
7490 		br_gcm_flip(&gc);
7491 		br_gcm_run(&gc, 0, tmp, plain_len);
7492 		check_equals("KAT GCM 3", tmp, plain, plain_len);
7493 		if (!br_gcm_check_tag(&gc, tag)) {
7494 			fprintf(stderr, "Tag not verified (1)\n");
7495 			exit(EXIT_FAILURE);
7496 		}
7497 
7498 		for (v = plain_len; v < sizeof tmp; v ++) {
7499 			if (tmp[v] != 0x54) {
7500 				fprintf(stderr, "overflow on data\n");
7501 				exit(EXIT_FAILURE);
7502 			}
7503 		}
7504 
7505 		/*
7506 		 * Byte-by-byte injection.
7507 		 */
7508 		br_gcm_reset(&gc, iv, iv_len);
7509 		for (v = 0; v < aad_len; v ++) {
7510 			br_gcm_aad_inject(&gc, aad + v, 1);
7511 		}
7512 		br_gcm_flip(&gc);
7513 		for (v = 0; v < plain_len; v ++) {
7514 			br_gcm_run(&gc, 1, tmp + v, 1);
7515 		}
7516 		check_equals("KAT GCM 4", tmp, cipher, plain_len);
7517 		if (!br_gcm_check_tag(&gc, tag)) {
7518 			fprintf(stderr, "Tag not verified (2)\n");
7519 			exit(EXIT_FAILURE);
7520 		}
7521 
7522 		br_gcm_reset(&gc, iv, iv_len);
7523 		for (v = 0; v < aad_len; v ++) {
7524 			br_gcm_aad_inject(&gc, aad + v, 1);
7525 		}
7526 		br_gcm_flip(&gc);
7527 		for (v = 0; v < plain_len; v ++) {
7528 			br_gcm_run(&gc, 0, tmp + v, 1);
7529 		}
7530 		br_gcm_get_tag(&gc, out);
7531 		check_equals("KAT GCM 5", tmp, plain, plain_len);
7532 		check_equals("KAT GCM 6", out, tag, 16);
7533 
7534 		/*
7535 		 * Check that alterations are detected.
7536 		 */
7537 		for (v = 0; v < aad_len; v ++) {
7538 			memcpy(tmp, cipher, plain_len);
7539 			br_gcm_reset(&gc, iv, iv_len);
7540 			aad[v] ^= 0x04;
7541 			br_gcm_aad_inject(&gc, aad, aad_len);
7542 			aad[v] ^= 0x04;
7543 			br_gcm_flip(&gc);
7544 			br_gcm_run(&gc, 0, tmp, plain_len);
7545 			check_equals("KAT GCM 7", tmp, plain, plain_len);
7546 			if (br_gcm_check_tag(&gc, tag)) {
7547 				fprintf(stderr, "Tag should have changed\n");
7548 				exit(EXIT_FAILURE);
7549 			}
7550 		}
7551 
7552 		/*
7553 		 * Tag truncation.
7554 		 */
7555 		for (tag_len = 1; tag_len <= 16; tag_len ++) {
7556 			memset(out, 0x54, sizeof out);
7557 			memcpy(tmp, plain, plain_len);
7558 			br_gcm_reset(&gc, iv, iv_len);
7559 			br_gcm_aad_inject(&gc, aad, aad_len);
7560 			br_gcm_flip(&gc);
7561 			br_gcm_run(&gc, 1, tmp, plain_len);
7562 			br_gcm_get_tag_trunc(&gc, out, tag_len);
7563 			check_equals("KAT GCM 8", out, tag, tag_len);
7564 			for (v = tag_len; v < sizeof out; v ++) {
7565 				if (out[v] != 0x54) {
7566 					fprintf(stderr, "overflow on tag\n");
7567 					exit(EXIT_FAILURE);
7568 				}
7569 			}
7570 
7571 			memcpy(tmp, plain, plain_len);
7572 			br_gcm_reset(&gc, iv, iv_len);
7573 			br_gcm_aad_inject(&gc, aad, aad_len);
7574 			br_gcm_flip(&gc);
7575 			br_gcm_run(&gc, 1, tmp, plain_len);
7576 			if (!br_gcm_check_tag_trunc(&gc, out, tag_len)) {
7577 				fprintf(stderr, "Tag not verified (3)\n");
7578 				exit(EXIT_FAILURE);
7579 			}
7580 		}
7581 
7582 		printf(".");
7583 		fflush(stdout);
7584 	}
7585 
7586 	printf(" done.\n");
7587 	fflush(stdout);
7588 }
7589 
7590 /*
7591  * From "The EAX Mode of Operation (A Two-Pass Authenticated Encryption
7592  * Scheme Optimized for Simplicity and Efficiency)" (Bellare, Rogaway,
7593  * Wagner), presented at FSE 2004. Full article is available at:
7594  *   http://web.cs.ucdavis.edu/~rogaway/papers/eax.html
7595  *
7596  * EAX specification concatenates the authentication tag at the end of
7597  * the ciphertext; in our API and the vectors below, the tag is separate.
7598  *
7599  * Order is: plaintext, key, nonce, header, ciphertext, tag.
7600  */
7601 static const char *const KAT_EAX[] = {
7602 	"",
7603 	"233952dee4d5ed5f9b9c6d6ff80ff478",
7604 	"62ec67f9c3a4a407fcb2a8c49031a8b3",
7605 	"6bfb914fd07eae6b",
7606 	"",
7607 	"e037830e8389f27b025a2d6527e79d01",
7608 
7609 	"f7fb",
7610 	"91945d3f4dcbee0bf45ef52255f095a4",
7611 	"becaf043b0a23d843194ba972c66debd",
7612 	"fa3bfd4806eb53fa",
7613 	"19dd",
7614 	"5c4c9331049d0bdab0277408f67967e5",
7615 
7616 	"1a47cb4933",
7617 	"01f74ad64077f2e704c0f60ada3dd523",
7618 	"70c3db4f0d26368400a10ed05d2bff5e",
7619 	"234a3463c1264ac6",
7620 	"d851d5bae0",
7621 	"3a59f238a23e39199dc9266626c40f80",
7622 
7623 	"481c9e39b1",
7624 	"d07cf6cbb7f313bdde66b727afd3c5e8",
7625 	"8408dfff3c1a2b1292dc199e46b7d617",
7626 	"33cce2eabff5a79d",
7627 	"632a9d131a",
7628 	"d4c168a4225d8e1ff755939974a7bede",
7629 
7630 	"40d0c07da5e4",
7631 	"35b6d0580005bbc12b0587124557d2c2",
7632 	"fdb6b06676eedc5c61d74276e1f8e816",
7633 	"aeb96eaebe2970e9",
7634 	"071dfe16c675",
7635 	"cb0677e536f73afe6a14b74ee49844dd",
7636 
7637 	"4de3b35c3fc039245bd1fb7d",
7638 	"bd8e6e11475e60b268784c38c62feb22",
7639 	"6eac5c93072d8e8513f750935e46da1b",
7640 	"d4482d1ca78dce0f",
7641 	"835bb4f15d743e350e728414",
7642 	"abb8644fd6ccb86947c5e10590210a4f",
7643 
7644 	"8b0a79306c9ce7ed99dae4f87f8dd61636",
7645 	"7c77d6e813bed5ac98baa417477a2e7d",
7646 	"1a8c98dcd73d38393b2bf1569deefc19",
7647 	"65d2017990d62528",
7648 	"02083e3979da014812f59f11d52630da30",
7649 	"137327d10649b0aa6e1c181db617d7f2",
7650 
7651 	"1bda122bce8a8dbaf1877d962b8592dd2d56",
7652 	"5fff20cafab119ca2fc73549e20f5b0d",
7653 	"dde59b97d722156d4d9aff2bc7559826",
7654 	"54b9f04e6a09189a",
7655 	"2ec47b2c4954a489afc7ba4897edcdae8cc3",
7656 	"3b60450599bd02c96382902aef7f832a",
7657 
7658 	"6cf36720872b8513f6eab1a8a44438d5ef11",
7659 	"a4a4782bcffd3ec5e7ef6d8c34a56123",
7660 	"b781fcf2f75fa5a8de97a9ca48e522ec",
7661 	"899a175897561d7e",
7662 	"0de18fd0fdd91e7af19f1d8ee8733938b1e8",
7663 	"e7f6d2231618102fdb7fe55ff1991700",
7664 
7665 	"ca40d7446e545ffaed3bd12a740a659ffbbb3ceab7",
7666 	"8395fcf1e95bebd697bd010bc766aac3",
7667 	"22e7add93cfc6393c57ec0b3c17d6b44",
7668 	"126735fcc320d25a",
7669 	"cb8920f87a6c75cff39627b56e3ed197c552d295a7",
7670 	"cfc46afc253b4652b1af3795b124ab6e",
7671 
7672 	NULL
7673 };
7674 
7675 static void
7676 test_EAX_inner(const char *name, const br_block_ctrcbc_class *vt)
7677 {
7678 	size_t u;
7679 
7680 	printf("Test EAX %s: ", name);
7681 	fflush(stdout);
7682 
7683 	for (u = 0; KAT_EAX[u]; u += 6) {
7684 		unsigned char plain[100];
7685 		unsigned char key[32];
7686 		unsigned char nonce[100];
7687 		unsigned char aad[100];
7688 		unsigned char cipher[100];
7689 		unsigned char tag[100];
7690 		size_t plain_len, key_len, nonce_len, aad_len;
7691 		br_aes_gen_ctrcbc_keys bc;
7692 		br_eax_context ec;
7693 		br_eax_state st;
7694 		unsigned char tmp[100], out[16];
7695 		size_t v, tag_len;
7696 
7697 		plain_len = hextobin(plain, KAT_EAX[u]);
7698 		key_len = hextobin(key, KAT_EAX[u + 1]);
7699 		nonce_len = hextobin(nonce, KAT_EAX[u + 2]);
7700 		aad_len = hextobin(aad, KAT_EAX[u + 3]);
7701 		hextobin(cipher, KAT_EAX[u + 4]);
7702 		hextobin(tag, KAT_EAX[u + 5]);
7703 
7704 		vt->init(&bc.vtable, key, key_len);
7705 		br_eax_init(&ec, &bc.vtable);
7706 
7707 		memset(tmp, 0x54, sizeof tmp);
7708 
7709 		/*
7710 		 * Basic operation.
7711 		 */
7712 		memcpy(tmp, plain, plain_len);
7713 		br_eax_reset(&ec, nonce, nonce_len);
7714 		br_eax_aad_inject(&ec, aad, aad_len);
7715 		br_eax_flip(&ec);
7716 		br_eax_run(&ec, 1, tmp, plain_len);
7717 		br_eax_get_tag(&ec, out);
7718 		check_equals("KAT EAX 1", tmp, cipher, plain_len);
7719 		check_equals("KAT EAX 2", out, tag, 16);
7720 
7721 		br_eax_reset(&ec, nonce, nonce_len);
7722 		br_eax_aad_inject(&ec, aad, aad_len);
7723 		br_eax_flip(&ec);
7724 		br_eax_run(&ec, 0, tmp, plain_len);
7725 		check_equals("KAT EAX 3", tmp, plain, plain_len);
7726 		if (!br_eax_check_tag(&ec, tag)) {
7727 			fprintf(stderr, "Tag not verified (1)\n");
7728 			exit(EXIT_FAILURE);
7729 		}
7730 
7731 		for (v = plain_len; v < sizeof tmp; v ++) {
7732 			if (tmp[v] != 0x54) {
7733 				fprintf(stderr, "overflow on data\n");
7734 				exit(EXIT_FAILURE);
7735 			}
7736 		}
7737 
7738 		/*
7739 		 * Byte-by-byte injection.
7740 		 */
7741 		br_eax_reset(&ec, nonce, nonce_len);
7742 		for (v = 0; v < aad_len; v ++) {
7743 			br_eax_aad_inject(&ec, aad + v, 1);
7744 		}
7745 		br_eax_flip(&ec);
7746 		for (v = 0; v < plain_len; v ++) {
7747 			br_eax_run(&ec, 1, tmp + v, 1);
7748 		}
7749 		check_equals("KAT EAX 4", tmp, cipher, plain_len);
7750 		if (!br_eax_check_tag(&ec, tag)) {
7751 			fprintf(stderr, "Tag not verified (2)\n");
7752 			exit(EXIT_FAILURE);
7753 		}
7754 
7755 		br_eax_reset(&ec, nonce, nonce_len);
7756 		for (v = 0; v < aad_len; v ++) {
7757 			br_eax_aad_inject(&ec, aad + v, 1);
7758 		}
7759 		br_eax_flip(&ec);
7760 		for (v = 0; v < plain_len; v ++) {
7761 			br_eax_run(&ec, 0, tmp + v, 1);
7762 		}
7763 		br_eax_get_tag(&ec, out);
7764 		check_equals("KAT EAX 5", tmp, plain, plain_len);
7765 		check_equals("KAT EAX 6", out, tag, 16);
7766 
7767 		/*
7768 		 * Check that alterations are detected.
7769 		 */
7770 		for (v = 0; v < aad_len; v ++) {
7771 			memcpy(tmp, cipher, plain_len);
7772 			br_eax_reset(&ec, nonce, nonce_len);
7773 			aad[v] ^= 0x04;
7774 			br_eax_aad_inject(&ec, aad, aad_len);
7775 			aad[v] ^= 0x04;
7776 			br_eax_flip(&ec);
7777 			br_eax_run(&ec, 0, tmp, plain_len);
7778 			check_equals("KAT EAX 7", tmp, plain, plain_len);
7779 			if (br_eax_check_tag(&ec, tag)) {
7780 				fprintf(stderr, "Tag should have changed\n");
7781 				exit(EXIT_FAILURE);
7782 			}
7783 		}
7784 
7785 		/*
7786 		 * Tag truncation.
7787 		 */
7788 		for (tag_len = 1; tag_len <= 16; tag_len ++) {
7789 			memset(out, 0x54, sizeof out);
7790 			memcpy(tmp, plain, plain_len);
7791 			br_eax_reset(&ec, nonce, nonce_len);
7792 			br_eax_aad_inject(&ec, aad, aad_len);
7793 			br_eax_flip(&ec);
7794 			br_eax_run(&ec, 1, tmp, plain_len);
7795 			br_eax_get_tag_trunc(&ec, out, tag_len);
7796 			check_equals("KAT EAX 8", out, tag, tag_len);
7797 			for (v = tag_len; v < sizeof out; v ++) {
7798 				if (out[v] != 0x54) {
7799 					fprintf(stderr, "overflow on tag\n");
7800 					exit(EXIT_FAILURE);
7801 				}
7802 			}
7803 
7804 			memcpy(tmp, plain, plain_len);
7805 			br_eax_reset(&ec, nonce, nonce_len);
7806 			br_eax_aad_inject(&ec, aad, aad_len);
7807 			br_eax_flip(&ec);
7808 			br_eax_run(&ec, 1, tmp, plain_len);
7809 			if (!br_eax_check_tag_trunc(&ec, out, tag_len)) {
7810 				fprintf(stderr, "Tag not verified (3)\n");
7811 				exit(EXIT_FAILURE);
7812 			}
7813 		}
7814 
7815 		printf(".");
7816 		fflush(stdout);
7817 
7818 		/*
7819 		 * For capture tests, we need the message to be non-empty.
7820 		 */
7821 		if (plain_len == 0) {
7822 			continue;
7823 		}
7824 
7825 		/*
7826 		 * Captured state, pre-AAD. This requires the AAD and the
7827 		 * message to be non-empty.
7828 		 */
7829 		br_eax_capture(&ec, &st);
7830 
7831 		if (aad_len > 0) {
7832 			br_eax_reset_pre_aad(&ec, &st, nonce, nonce_len);
7833 			br_eax_aad_inject(&ec, aad, aad_len);
7834 			br_eax_flip(&ec);
7835 			memcpy(tmp, plain, plain_len);
7836 			br_eax_run(&ec, 1, tmp, plain_len);
7837 			br_eax_get_tag(&ec, out);
7838 			check_equals("KAT EAX 9", tmp, cipher, plain_len);
7839 			check_equals("KAT EAX 10", out, tag, 16);
7840 
7841 			br_eax_reset_pre_aad(&ec, &st, nonce, nonce_len);
7842 			br_eax_aad_inject(&ec, aad, aad_len);
7843 			br_eax_flip(&ec);
7844 			br_eax_run(&ec, 0, tmp, plain_len);
7845 			br_eax_get_tag(&ec, out);
7846 			check_equals("KAT EAX 11", tmp, plain, plain_len);
7847 			check_equals("KAT EAX 12", out, tag, 16);
7848 		}
7849 
7850 		/*
7851 		 * Captured state, post-AAD. This requires the message to
7852 		 * be non-empty.
7853 		 */
7854 		br_eax_reset(&ec, nonce, nonce_len);
7855 		br_eax_aad_inject(&ec, aad, aad_len);
7856 		br_eax_flip(&ec);
7857 		br_eax_get_aad_mac(&ec, &st);
7858 
7859 		br_eax_reset_post_aad(&ec, &st, nonce, nonce_len);
7860 		memcpy(tmp, plain, plain_len);
7861 		br_eax_run(&ec, 1, tmp, plain_len);
7862 		br_eax_get_tag(&ec, out);
7863 		check_equals("KAT EAX 13", tmp, cipher, plain_len);
7864 		check_equals("KAT EAX 14", out, tag, 16);
7865 
7866 		br_eax_reset_post_aad(&ec, &st, nonce, nonce_len);
7867 		br_eax_run(&ec, 0, tmp, plain_len);
7868 		br_eax_get_tag(&ec, out);
7869 		check_equals("KAT EAX 15", tmp, plain, plain_len);
7870 		check_equals("KAT EAX 16", out, tag, 16);
7871 
7872 		printf(".");
7873 		fflush(stdout);
7874 	}
7875 
7876 	printf(" done.\n");
7877 	fflush(stdout);
7878 }
7879 
7880 static void
7881 test_EAX(void)
7882 {
7883 	const br_block_ctrcbc_class *x_ctrcbc;
7884 
7885 	test_EAX_inner("aes_big", &br_aes_big_ctrcbc_vtable);
7886 	test_EAX_inner("aes_small", &br_aes_small_ctrcbc_vtable);
7887 	test_EAX_inner("aes_ct", &br_aes_ct_ctrcbc_vtable);
7888 	test_EAX_inner("aes_ct64", &br_aes_ct64_ctrcbc_vtable);
7889 
7890 	x_ctrcbc = br_aes_x86ni_ctrcbc_get_vtable();
7891 	if (x_ctrcbc != NULL) {
7892 		test_EAX_inner("aes_x86ni", x_ctrcbc);
7893 	} else {
7894 		printf("Test EAX aes_x86ni: UNAVAILABLE\n");
7895 	}
7896 
7897 	x_ctrcbc = br_aes_pwr8_ctrcbc_get_vtable();
7898 	if (x_ctrcbc != NULL) {
7899 		test_EAX_inner("aes_pwr8", x_ctrcbc);
7900 	} else {
7901 		printf("Test EAX aes_pwr8: UNAVAILABLE\n");
7902 	}
7903 }
7904 
7905 /*
7906  * From NIST SP 800-38C, appendix C.
7907  *
7908  * CCM specification concatenates the authentication tag at the end of
7909  * the ciphertext; in our API and the vectors below, the tag is separate.
7910  *
7911  * Order is: key, nonce, aad, plaintext, ciphertext, tag.
7912  */
7913 static const char *const KAT_CCM[] = {
7914 	"404142434445464748494a4b4c4d4e4f",
7915 	"10111213141516",
7916 	"0001020304050607",
7917 	"20212223",
7918 	"7162015b",
7919 	"4dac255d",
7920 
7921 	"404142434445464748494a4b4c4d4e4f",
7922 	"1011121314151617",
7923 	"000102030405060708090a0b0c0d0e0f",
7924 	"202122232425262728292a2b2c2d2e2f",
7925 	"d2a1f0e051ea5f62081a7792073d593d",
7926 	"1fc64fbfaccd",
7927 
7928 	"404142434445464748494a4b4c4d4e4f",
7929 	"101112131415161718191a1b",
7930 	"000102030405060708090a0b0c0d0e0f10111213",
7931 	"202122232425262728292a2b2c2d2e2f3031323334353637",
7932 	"e3b201a9f5b71a7a9b1ceaeccd97e70b6176aad9a4428aa5",
7933 	"484392fbc1b09951",
7934 
7935 	"404142434445464748494a4b4c4d4e4f",
7936 	"101112131415161718191a1b1c",
7937 	NULL,
7938 	"202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f",
7939 	"69915dad1e84c6376a68c2967e4dab615ae0fd1faec44cc484828529463ccf72",
7940 	"b4ac6bec93e8598e7f0dadbcea5b",
7941 
7942 	NULL
7943 };
7944 
7945 static void
7946 test_CCM_inner(const char *name, const br_block_ctrcbc_class *vt)
7947 {
7948 	size_t u;
7949 
7950 	printf("Test CCM %s: ", name);
7951 	fflush(stdout);
7952 
7953 	for (u = 0; KAT_CCM[u]; u += 6) {
7954 		unsigned char plain[100];
7955 		unsigned char key[32];
7956 		unsigned char nonce[100];
7957 		unsigned char aad_buf[100], *aad;
7958 		unsigned char cipher[100];
7959 		unsigned char tag[100];
7960 		size_t plain_len, key_len, nonce_len, aad_len, tag_len;
7961 		br_aes_gen_ctrcbc_keys bc;
7962 		br_ccm_context ec;
7963 		unsigned char tmp[100], out[16];
7964 		size_t v;
7965 
7966 		key_len = hextobin(key, KAT_CCM[u]);
7967 		nonce_len = hextobin(nonce, KAT_CCM[u + 1]);
7968 		if (KAT_CCM[u + 2] == NULL) {
7969 			aad_len = 65536;
7970 			aad = malloc(aad_len);
7971 			if (aad == NULL) {
7972 				fprintf(stderr, "OOM error\n");
7973 				exit(EXIT_FAILURE);
7974 			}
7975 			for (v = 0; v < 65536; v ++) {
7976 				aad[v] = (unsigned char)v;
7977 			}
7978 		} else {
7979 			aad = aad_buf;
7980 			aad_len = hextobin(aad, KAT_CCM[u + 2]);
7981 		}
7982 		plain_len = hextobin(plain, KAT_CCM[u + 3]);
7983 		hextobin(cipher, KAT_CCM[u + 4]);
7984 		tag_len = hextobin(tag, KAT_CCM[u + 5]);
7985 
7986 		vt->init(&bc.vtable, key, key_len);
7987 		br_ccm_init(&ec, &bc.vtable);
7988 
7989 		memset(tmp, 0x54, sizeof tmp);
7990 
7991 		/*
7992 		 * Basic operation.
7993 		 */
7994 		memcpy(tmp, plain, plain_len);
7995 		if (!br_ccm_reset(&ec, nonce, nonce_len,
7996 			aad_len, plain_len, tag_len))
7997 		{
7998 			fprintf(stderr, "CCM reset failed\n");
7999 			exit(EXIT_FAILURE);
8000 		}
8001 		br_ccm_aad_inject(&ec, aad, aad_len);
8002 		br_ccm_flip(&ec);
8003 		br_ccm_run(&ec, 1, tmp, plain_len);
8004 		if (br_ccm_get_tag(&ec, out) != tag_len) {
8005 			fprintf(stderr, "CCM returned wrong tag length\n");
8006 			exit(EXIT_FAILURE);
8007 		}
8008 		check_equals("KAT CCM 1", tmp, cipher, plain_len);
8009 		check_equals("KAT CCM 2", out, tag, tag_len);
8010 
8011 		br_ccm_reset(&ec, nonce, nonce_len,
8012 			aad_len, plain_len, tag_len);
8013 		br_ccm_aad_inject(&ec, aad, aad_len);
8014 		br_ccm_flip(&ec);
8015 		br_ccm_run(&ec, 0, tmp, plain_len);
8016 		check_equals("KAT CCM 3", tmp, plain, plain_len);
8017 		if (!br_ccm_check_tag(&ec, tag)) {
8018 			fprintf(stderr, "Tag not verified (1)\n");
8019 			exit(EXIT_FAILURE);
8020 		}
8021 
8022 		for (v = plain_len; v < sizeof tmp; v ++) {
8023 			if (tmp[v] != 0x54) {
8024 				fprintf(stderr, "overflow on data\n");
8025 				exit(EXIT_FAILURE);
8026 			}
8027 		}
8028 
8029 		/*
8030 		 * Byte-by-byte injection.
8031 		 */
8032 		br_ccm_reset(&ec, nonce, nonce_len,
8033 			aad_len, plain_len, tag_len);
8034 		for (v = 0; v < aad_len; v ++) {
8035 			br_ccm_aad_inject(&ec, aad + v, 1);
8036 		}
8037 		br_ccm_flip(&ec);
8038 		for (v = 0; v < plain_len; v ++) {
8039 			br_ccm_run(&ec, 1, tmp + v, 1);
8040 		}
8041 		check_equals("KAT CCM 4", tmp, cipher, plain_len);
8042 		if (!br_ccm_check_tag(&ec, tag)) {
8043 			fprintf(stderr, "Tag not verified (2)\n");
8044 			exit(EXIT_FAILURE);
8045 		}
8046 
8047 		br_ccm_reset(&ec, nonce, nonce_len,
8048 			aad_len, plain_len, tag_len);
8049 		for (v = 0; v < aad_len; v ++) {
8050 			br_ccm_aad_inject(&ec, aad + v, 1);
8051 		}
8052 		br_ccm_flip(&ec);
8053 		for (v = 0; v < plain_len; v ++) {
8054 			br_ccm_run(&ec, 0, tmp + v, 1);
8055 		}
8056 		br_ccm_get_tag(&ec, out);
8057 		check_equals("KAT CCM 5", tmp, plain, plain_len);
8058 		check_equals("KAT CCM 6", out, tag, tag_len);
8059 
8060 		/*
8061 		 * Check that alterations are detected.
8062 		 */
8063 		for (v = 0; v < aad_len; v ++) {
8064 			memcpy(tmp, cipher, plain_len);
8065 			br_ccm_reset(&ec, nonce, nonce_len,
8066 				aad_len, plain_len, tag_len);
8067 			aad[v] ^= 0x04;
8068 			br_ccm_aad_inject(&ec, aad, aad_len);
8069 			aad[v] ^= 0x04;
8070 			br_ccm_flip(&ec);
8071 			br_ccm_run(&ec, 0, tmp, plain_len);
8072 			check_equals("KAT CCM 7", tmp, plain, plain_len);
8073 			if (br_ccm_check_tag(&ec, tag)) {
8074 				fprintf(stderr, "Tag should have changed\n");
8075 				exit(EXIT_FAILURE);
8076 			}
8077 
8078 			/*
8079 			 * When the AAD is really big, we don't want to do
8080 			 * the complete quadratic operation.
8081 			 */
8082 			if (v >= 32) {
8083 				break;
8084 			}
8085 		}
8086 
8087 		if (aad != aad_buf) {
8088 			free(aad);
8089 		}
8090 
8091 		printf(".");
8092 		fflush(stdout);
8093 	}
8094 
8095 	printf(" done.\n");
8096 	fflush(stdout);
8097 }
8098 
8099 static void
8100 test_CCM(void)
8101 {
8102 	const br_block_ctrcbc_class *x_ctrcbc;
8103 
8104 	test_CCM_inner("aes_big", &br_aes_big_ctrcbc_vtable);
8105 	test_CCM_inner("aes_small", &br_aes_small_ctrcbc_vtable);
8106 	test_CCM_inner("aes_ct", &br_aes_ct_ctrcbc_vtable);
8107 	test_CCM_inner("aes_ct64", &br_aes_ct64_ctrcbc_vtable);
8108 
8109 	x_ctrcbc = br_aes_x86ni_ctrcbc_get_vtable();
8110 	if (x_ctrcbc != NULL) {
8111 		test_CCM_inner("aes_x86ni", x_ctrcbc);
8112 	} else {
8113 		printf("Test CCM aes_x86ni: UNAVAILABLE\n");
8114 	}
8115 
8116 	x_ctrcbc = br_aes_pwr8_ctrcbc_get_vtable();
8117 	if (x_ctrcbc != NULL) {
8118 		test_CCM_inner("aes_pwr8", x_ctrcbc);
8119 	} else {
8120 		printf("Test CCM aes_pwr8: UNAVAILABLE\n");
8121 	}
8122 }
8123 
8124 static void
8125 test_EC_inner(const char *sk, const char *sU,
8126 	const br_ec_impl *impl, int curve)
8127 {
8128 	unsigned char bk[70];
8129 	unsigned char eG[150], eU[150];
8130 	uint32_t n[22], n0i;
8131 	size_t klen, ulen, nlen;
8132 	const br_ec_curve_def *cd;
8133 	br_hmac_drbg_context rng;
8134 	int i;
8135 
8136 	klen = hextobin(bk, sk);
8137 	ulen = hextobin(eU, sU);
8138 	switch (curve) {
8139 	case BR_EC_secp256r1:
8140 		cd = &br_secp256r1;
8141 		break;
8142 	case BR_EC_secp384r1:
8143 		cd = &br_secp384r1;
8144 		break;
8145 	case BR_EC_secp521r1:
8146 		cd = &br_secp521r1;
8147 		break;
8148 	default:
8149 		fprintf(stderr, "Unknown curve: %d\n", curve);
8150 		exit(EXIT_FAILURE);
8151 		break;
8152 	}
8153 	if (ulen != cd->generator_len) {
8154 		fprintf(stderr, "KAT vector wrong (%lu / %lu)\n",
8155 			(unsigned long)ulen,
8156 			(unsigned long)cd->generator_len);
8157 	}
8158 	memcpy(eG, cd->generator, ulen);
8159 	if (impl->mul(eG, ulen, bk, klen, curve) != 1) {
8160 		fprintf(stderr, "KAT multiplication failed\n");
8161 		exit(EXIT_FAILURE);
8162 	}
8163 	if (memcmp(eG, eU, ulen) != 0) {
8164 		fprintf(stderr, "KAT mul: mismatch\n");
8165 		exit(EXIT_FAILURE);
8166 	}
8167 
8168 	/*
8169 	 * Test the two-point-mul function. We want to test the basic
8170 	 * functionality, and the following special cases:
8171 	 *   x = y
8172 	 *   x + y = curve order
8173 	 */
8174 	nlen = cd->order_len;
8175 	br_i31_decode(n, cd->order, nlen);
8176 	n0i = br_i31_ninv31(n[1]);
8177 	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for EC", 11);
8178 	for (i = 0; i < 10; i ++) {
8179 		unsigned char ba[80], bb[80], bx[80], by[80], bz[80];
8180 		uint32_t a[22], b[22], x[22], y[22], z[22], t1[22], t2[22];
8181 		uint32_t r;
8182 		unsigned char eA[160], eB[160], eC[160], eD[160];
8183 
8184 		/*
8185 		 * Generate random a and b, and compute A = a*G and B = b*G.
8186 		 */
8187 		br_hmac_drbg_generate(&rng, ba, sizeof ba);
8188 		br_i31_decode_reduce(a, ba, sizeof ba, n);
8189 		br_i31_encode(ba, nlen, a);
8190 		br_hmac_drbg_generate(&rng, bb, sizeof bb);
8191 		br_i31_decode_reduce(b, bb, sizeof bb, n);
8192 		br_i31_encode(bb, nlen, b);
8193 		memcpy(eA, cd->generator, ulen);
8194 		impl->mul(eA, ulen, ba, nlen, cd->curve);
8195 		memcpy(eB, cd->generator, ulen);
8196 		impl->mul(eB, ulen, bb, nlen, cd->curve);
8197 
8198 		/*
8199 		 * Generate random x and y (modulo n).
8200 		 */
8201 		br_hmac_drbg_generate(&rng, bx, sizeof bx);
8202 		br_i31_decode_reduce(x, bx, sizeof bx, n);
8203 		br_i31_encode(bx, nlen, x);
8204 		br_hmac_drbg_generate(&rng, by, sizeof by);
8205 		br_i31_decode_reduce(y, by, sizeof by, n);
8206 		br_i31_encode(by, nlen, y);
8207 
8208 		/*
8209 		 * Compute z = a*x + b*y (mod n).
8210 		 */
8211 		memcpy(t1, x, sizeof x);
8212 		br_i31_to_monty(t1, n);
8213 		br_i31_montymul(z, a, t1, n, n0i);
8214 		memcpy(t1, y, sizeof y);
8215 		br_i31_to_monty(t1, n);
8216 		br_i31_montymul(t2, b, t1, n, n0i);
8217 		r = br_i31_add(z, t2, 1);
8218 		r |= br_i31_sub(z, n, 0) ^ 1;
8219 		br_i31_sub(z, n, r);
8220 		br_i31_encode(bz, nlen, z);
8221 
8222 		/*
8223 		 * Compute C = x*A + y*B with muladd(), and also
8224 		 * D = z*G with mul(). The two points must match.
8225 		 */
8226 		memcpy(eC, eA, ulen);
8227 		if (impl->muladd(eC, eB, ulen,
8228 			bx, nlen, by, nlen, cd->curve) != 1)
8229 		{
8230 			fprintf(stderr, "muladd() failed (1)\n");
8231 			exit(EXIT_FAILURE);
8232 		}
8233 		memcpy(eD, cd->generator, ulen);
8234 		if (impl->mul(eD, ulen, bz, nlen, cd->curve) != 1) {
8235 			fprintf(stderr, "mul() failed (1)\n");
8236 			exit(EXIT_FAILURE);
8237 		}
8238 		if (memcmp(eC, eD, nlen) != 0) {
8239 			fprintf(stderr, "mul() / muladd() mismatch\n");
8240 			exit(EXIT_FAILURE);
8241 		}
8242 
8243 		/*
8244 		 * Also recomputed D = z*G with mulgen(). This must
8245 		 * again match.
8246 		 */
8247 		memset(eD, 0, ulen);
8248 		if (impl->mulgen(eD, bz, nlen, cd->curve) != ulen) {
8249 			fprintf(stderr, "mulgen() failed: wrong length\n");
8250 			exit(EXIT_FAILURE);
8251 		}
8252 		if (memcmp(eC, eD, nlen) != 0) {
8253 			fprintf(stderr, "mulgen() / muladd() mismatch\n");
8254 			exit(EXIT_FAILURE);
8255 		}
8256 
8257 		/*
8258 		 * Check with x*A = y*B. We do so by setting b = x and y = a.
8259 		 */
8260 		memcpy(b, x, sizeof x);
8261 		br_i31_encode(bb, nlen, b);
8262 		memcpy(eB, cd->generator, ulen);
8263 		impl->mul(eB, ulen, bb, nlen, cd->curve);
8264 		memcpy(y, a, sizeof a);
8265 		br_i31_encode(by, nlen, y);
8266 
8267 		memcpy(t1, x, sizeof x);
8268 		br_i31_to_monty(t1, n);
8269 		br_i31_montymul(z, a, t1, n, n0i);
8270 		memcpy(t1, y, sizeof y);
8271 		br_i31_to_monty(t1, n);
8272 		br_i31_montymul(t2, b, t1, n, n0i);
8273 		r = br_i31_add(z, t2, 1);
8274 		r |= br_i31_sub(z, n, 0) ^ 1;
8275 		br_i31_sub(z, n, r);
8276 		br_i31_encode(bz, nlen, z);
8277 
8278 		memcpy(eC, eA, ulen);
8279 		if (impl->muladd(eC, eB, ulen,
8280 			bx, nlen, by, nlen, cd->curve) != 1)
8281 		{
8282 			fprintf(stderr, "muladd() failed (2)\n");
8283 			exit(EXIT_FAILURE);
8284 		}
8285 		memcpy(eD, cd->generator, ulen);
8286 		if (impl->mul(eD, ulen, bz, nlen, cd->curve) != 1) {
8287 			fprintf(stderr, "mul() failed (2)\n");
8288 			exit(EXIT_FAILURE);
8289 		}
8290 		if (memcmp(eC, eD, nlen) != 0) {
8291 			fprintf(stderr,
8292 				"mul() / muladd() mismatch (x*A=y*B)\n");
8293 			exit(EXIT_FAILURE);
8294 		}
8295 
8296 		/*
8297 		 * Check with x*A + y*B = 0. At that point, b = x, so we
8298 		 * just need to set y = -a (mod n).
8299 		 */
8300 		memcpy(y, n, sizeof n);
8301 		br_i31_sub(y, a, 1);
8302 		br_i31_encode(by, nlen, y);
8303 		memcpy(eC, eA, ulen);
8304 		if (impl->muladd(eC, eB, ulen,
8305 			bx, nlen, by, nlen, cd->curve) != 0)
8306 		{
8307 			fprintf(stderr, "muladd() should have failed\n");
8308 			exit(EXIT_FAILURE);
8309 		}
8310 	}
8311 
8312 	printf(".");
8313 	fflush(stdout);
8314 }
8315 
8316 static void
8317 test_EC_P256_carry_inner(const br_ec_impl *impl, const char *sP, const char *sQ)
8318 {
8319 	unsigned char P[65], Q[65], k[1];
8320 	size_t plen, qlen;
8321 
8322 	plen = hextobin(P, sP);
8323 	qlen = hextobin(Q, sQ);
8324 	if (plen != sizeof P || qlen != sizeof P) {
8325 		fprintf(stderr, "KAT is incorrect\n");
8326 		exit(EXIT_FAILURE);
8327 	}
8328 	k[0] = 0x10;
8329 	if (impl->mul(P, plen, k, 1, BR_EC_secp256r1) != 1) {
8330 		fprintf(stderr, "P-256 multiplication failed\n");
8331 		exit(EXIT_FAILURE);
8332 	}
8333 	check_equals("P256_carry", P, Q, plen);
8334 	printf(".");
8335 	fflush(stdout);
8336 }
8337 
8338 static void
8339 test_EC_P256_carry(const br_ec_impl *impl)
8340 {
8341 	test_EC_P256_carry_inner(impl,
8342 		"0435BAA24B2B6E1B3C88E22A383BD88CC4B9A3166E7BCF94FF6591663AE066B33B821EBA1B4FC8EA609A87EB9A9C9A1CCD5C9F42FA1365306F64D7CAA718B8C978",
8343 		"0447752A76CA890328D34E675C4971EC629132D1FC4863EDB61219B72C4E58DC5E9D51E7B293488CFD913C3CF20E438BB65C2BA66A7D09EABB45B55E804260C5EB");
8344 	test_EC_P256_carry_inner(impl,
8345 		"04DCAE9D9CE211223602024A6933BD42F77B6BF4EAB9C8915F058C149419FADD2CC9FC0707B270A1B5362BA4D249AFC8AC3DA1EFCA8270176EEACA525B49EE19E6",
8346 		"048DAC7B0BE9B3206FCE8B24B6B4AEB122F2A67D13E536B390B6585CA193427E63F222388B5F51D744D6F5D47536D89EEEC89552BCB269E7828019C4410DFE980A");
8347 }
8348 
8349 static void
8350 test_EC_KAT(const char *name, const br_ec_impl *impl, uint32_t curve_mask)
8351 {
8352 	printf("Test %s: ", name);
8353 	fflush(stdout);
8354 
8355 	if (curve_mask & ((uint32_t)1 << BR_EC_secp256r1)) {
8356 		test_EC_inner(
8357 			"C9AFA9D845BA75166B5C215767B1D6934E50C3DB36E89B127B8A622B120F6721",
8358 			"0460FED4BA255A9D31C961EB74C6356D68C049B8923B61FA6CE669622E60F29FB67903FE1008B8BC99A41AE9E95628BC64F2F1B20C2D7E9F5177A3C294D4462299",
8359 			impl, BR_EC_secp256r1);
8360 		test_EC_P256_carry(impl);
8361 	}
8362 	if (curve_mask & ((uint32_t)1 << BR_EC_secp384r1)) {
8363 		test_EC_inner(
8364 			"6B9D3DAD2E1B8C1C05B19875B6659F4DE23C3B667BF297BA9AA47740787137D896D5724E4C70A825F872C9EA60D2EDF5",
8365 			"04EC3A4E415B4E19A4568618029F427FA5DA9A8BC4AE92E02E06AAE5286B300C64DEF8F0EA9055866064A254515480BC138015D9B72D7D57244EA8EF9AC0C621896708A59367F9DFB9F54CA84B3F1C9DB1288B231C3AE0D4FE7344FD2533264720",
8366 			impl, BR_EC_secp384r1);
8367 	}
8368 	if (curve_mask & ((uint32_t)1 << BR_EC_secp521r1)) {
8369 		test_EC_inner(
8370 			"00FAD06DAA62BA3B25D2FB40133DA757205DE67F5BB0018FEE8C86E1B68C7E75CAA896EB32F1F47C70855836A6D16FCC1466F6D8FBEC67DB89EC0C08B0E996B83538",
8371 			"0401894550D0785932E00EAA23B694F213F8C3121F86DC97A04E5A7167DB4E5BCD371123D46E45DB6B5D5370A7F20FB633155D38FFA16D2BD761DCAC474B9A2F5023A400493101C962CD4D2FDDF782285E64584139C2F91B47F87FF82354D6630F746A28A0DB25741B5B34A828008B22ACC23F924FAAFBD4D33F81EA66956DFEAA2BFDFCF5",
8372 			impl, BR_EC_secp521r1);
8373 	}
8374 
8375 	printf(" done.\n");
8376 	fflush(stdout);
8377 }
8378 
8379 static void
8380 test_EC_keygen(const char *name, const br_ec_impl *impl, uint32_t curves)
8381 {
8382 	int curve;
8383 	br_hmac_drbg_context rng;
8384 
8385 	printf("Test %s keygen: ", name);
8386 	fflush(stdout);
8387 
8388 	br_hmac_drbg_init(&rng, &br_sha256_vtable, "seed for EC keygen", 18);
8389 	br_hmac_drbg_update(&rng, name, strlen(name));
8390 
8391 	for (curve = -1; curve <= 35; curve ++) {
8392 		br_ec_private_key sk;
8393 		br_ec_public_key pk;
8394 		unsigned char kbuf_priv[BR_EC_KBUF_PRIV_MAX_SIZE];
8395 		unsigned char kbuf_pub[BR_EC_KBUF_PUB_MAX_SIZE];
8396 
8397 		if (curve < 0 || curve >= 32 || ((curves >> curve) & 1) == 0) {
8398 			if (br_ec_keygen(&rng.vtable, impl,
8399 				&sk, kbuf_priv, curve) != 0)
8400 			{
8401 				fprintf(stderr, "br_ec_keygen() did not"
8402 					" reject unsupported curve %d\n",
8403 					curve);
8404 				exit(EXIT_FAILURE);
8405 			}
8406 			sk.curve = curve;
8407 			if (br_ec_compute_pub(impl, NULL, NULL, &sk) != 0) {
8408 				fprintf(stderr, "br_ec_keygen() did not"
8409 					" reject unsupported curve %d\n",
8410 					curve);
8411 				exit(EXIT_FAILURE);
8412 			}
8413 		} else {
8414 			size_t len, u;
8415 			unsigned char tmp_priv[sizeof kbuf_priv];
8416 			unsigned char tmp_pub[sizeof kbuf_pub];
8417 			unsigned z;
8418 
8419 			len = br_ec_keygen(&rng.vtable, impl,
8420 				NULL, NULL, curve);
8421 			if (len == 0) {
8422 				fprintf(stderr, "br_ec_keygen() rejects"
8423 					" supported curve %d\n", curve);
8424 				exit(EXIT_FAILURE);
8425 			}
8426 			if (len > sizeof kbuf_priv) {
8427 				fprintf(stderr, "oversized kbuf_priv\n");
8428 				exit(EXIT_FAILURE);
8429 			}
8430 			memset(kbuf_priv, 0, sizeof kbuf_priv);
8431 			if (br_ec_keygen(&rng.vtable, impl,
8432 				NULL, kbuf_priv, curve) != len)
8433 			{
8434 				fprintf(stderr, "kbuf_priv length mismatch\n");
8435 				exit(EXIT_FAILURE);
8436 			}
8437 			z = 0;
8438 			for (u = 0; u < len; u ++) {
8439 				z |= kbuf_priv[u];
8440 			}
8441 			if (z == 0) {
8442 				fprintf(stderr, "kbuf_priv not initialized\n");
8443 				exit(EXIT_FAILURE);
8444 			}
8445 			for (u = len; u < sizeof kbuf_priv; u ++) {
8446 				if (kbuf_priv[u] != 0) {
8447 					fprintf(stderr, "kbuf_priv overflow\n");
8448 					exit(EXIT_FAILURE);
8449 				}
8450 			}
8451 			if (br_ec_keygen(&rng.vtable, impl,
8452 				NULL, tmp_priv, curve) != len)
8453 			{
8454 				fprintf(stderr, "tmp_priv length mismatch\n");
8455 				exit(EXIT_FAILURE);
8456 			}
8457 			if (memcmp(kbuf_priv, tmp_priv, len) == 0) {
8458 				fprintf(stderr, "keygen stutter\n");
8459 				exit(EXIT_FAILURE);
8460 			}
8461 			memset(&sk, 0, sizeof sk);
8462 			if (br_ec_keygen(&rng.vtable, impl,
8463 				&sk, kbuf_priv, curve) != len)
8464 			{
8465 				fprintf(stderr,
8466 					"kbuf_priv length mismatch (2)\n");
8467 				exit(EXIT_FAILURE);
8468 			}
8469 			if (sk.curve != curve || sk.x != kbuf_priv
8470 				|| sk.xlen != len)
8471 			{
8472 				fprintf(stderr, "sk not initialized\n");
8473 				exit(EXIT_FAILURE);
8474 			}
8475 
8476 			len = br_ec_compute_pub(impl, NULL, NULL, &sk);
8477 			if (len > sizeof kbuf_pub) {
8478 				fprintf(stderr, "oversized kbuf_pub\n");
8479 				exit(EXIT_FAILURE);
8480 			}
8481 			memset(kbuf_pub, 0, sizeof kbuf_pub);
8482 			if (br_ec_compute_pub(impl, NULL,
8483 				kbuf_pub, &sk) != len)
8484 			{
8485 				fprintf(stderr, "kbuf_pub length mismatch\n");
8486 				exit(EXIT_FAILURE);
8487 			}
8488 			for (u = len; u < sizeof kbuf_pub; u ++) {
8489 				if (kbuf_pub[u] != 0) {
8490 					fprintf(stderr, "kbuf_pub overflow\n");
8491 					exit(EXIT_FAILURE);
8492 				}
8493 			}
8494 			memset(&pk, 0, sizeof pk);
8495 			if (br_ec_compute_pub(impl, &pk,
8496 				tmp_pub, &sk) != len)
8497 			{
8498 				fprintf(stderr, "tmp_pub length mismatch\n");
8499 				exit(EXIT_FAILURE);
8500 			}
8501 			if (memcmp(kbuf_pub, tmp_pub, len) != 0) {
8502 				fprintf(stderr, "pubkey mismatch\n");
8503 				exit(EXIT_FAILURE);
8504 			}
8505 			if (pk.curve != curve || pk.q != tmp_pub
8506 				|| pk.qlen != len)
8507 			{
8508 				fprintf(stderr, "pk not initialized\n");
8509 				exit(EXIT_FAILURE);
8510 			}
8511 
8512 			if (impl->mulgen(kbuf_pub,
8513 				sk.x, sk.xlen, curve) != len
8514 				|| memcmp(pk.q, kbuf_pub, len) != 0)
8515 			{
8516 				fprintf(stderr, "wrong pubkey\n");
8517 				exit(EXIT_FAILURE);
8518 			}
8519 		}
8520 		printf(".");
8521 		fflush(stdout);
8522 	}
8523 
8524 	printf(" done.\n");
8525 	fflush(stdout);
8526 }
8527 
8528 static void
8529 test_EC_prime_i15(void)
8530 {
8531 	test_EC_KAT("EC_prime_i15", &br_ec_prime_i15,
8532 		(uint32_t)1 << BR_EC_secp256r1
8533 		| (uint32_t)1 << BR_EC_secp384r1
8534 		| (uint32_t)1 << BR_EC_secp521r1);
8535 	test_EC_keygen("EC_prime_i15", &br_ec_prime_i15,
8536 		(uint32_t)1 << BR_EC_secp256r1
8537 		| (uint32_t)1 << BR_EC_secp384r1
8538 		| (uint32_t)1 << BR_EC_secp521r1);
8539 }
8540 
8541 static void
8542 test_EC_prime_i31(void)
8543 {
8544 	test_EC_KAT("EC_prime_i31", &br_ec_prime_i31,
8545 		(uint32_t)1 << BR_EC_secp256r1
8546 		| (uint32_t)1 << BR_EC_secp384r1
8547 		| (uint32_t)1 << BR_EC_secp521r1);
8548 	test_EC_keygen("EC_prime_i31", &br_ec_prime_i31,
8549 		(uint32_t)1 << BR_EC_secp256r1
8550 		| (uint32_t)1 << BR_EC_secp384r1
8551 		| (uint32_t)1 << BR_EC_secp521r1);
8552 }
8553 
8554 static void
8555 test_EC_p256_m15(void)
8556 {
8557 	test_EC_KAT("EC_p256_m15", &br_ec_p256_m15,
8558 		(uint32_t)1 << BR_EC_secp256r1);
8559 	test_EC_keygen("EC_p256_m15", &br_ec_p256_m15,
8560 		(uint32_t)1 << BR_EC_secp256r1);
8561 }
8562 
8563 static void
8564 test_EC_p256_m31(void)
8565 {
8566 	test_EC_KAT("EC_p256_m31", &br_ec_p256_m31,
8567 		(uint32_t)1 << BR_EC_secp256r1);
8568 	test_EC_keygen("EC_p256_m31", &br_ec_p256_m31,
8569 		(uint32_t)1 << BR_EC_secp256r1);
8570 }
8571 
8572 static void
8573 test_EC_p256_m62(void)
8574 {
8575 	const br_ec_impl *ec;
8576 
8577 	ec = br_ec_p256_m62_get();
8578 	if (ec != NULL) {
8579 		test_EC_KAT("EC_p256_m62", ec,
8580 			(uint32_t)1 << BR_EC_secp256r1);
8581 		test_EC_keygen("EC_p256_m62", ec,
8582 			(uint32_t)1 << BR_EC_secp256r1);
8583 	} else {
8584 		printf("Test EC_p256_m62: UNAVAILABLE\n");
8585 		printf("Test EC_p256_m62 keygen: UNAVAILABLE\n");
8586 	}
8587 }
8588 
8589 static void
8590 test_EC_p256_m64(void)
8591 {
8592 	const br_ec_impl *ec;
8593 
8594 	ec = br_ec_p256_m64_get();
8595 	if (ec != NULL) {
8596 		test_EC_KAT("EC_p256_m64", ec,
8597 			(uint32_t)1 << BR_EC_secp256r1);
8598 		test_EC_keygen("EC_p256_m64", ec,
8599 			(uint32_t)1 << BR_EC_secp256r1);
8600 	} else {
8601 		printf("Test EC_p256_m64: UNAVAILABLE\n");
8602 		printf("Test EC_p256_m64 keygen: UNAVAILABLE\n");
8603 	}
8604 }
8605 
8606 const struct {
8607 	const char *scalar_le;
8608 	const char *u_in;
8609 	const char *u_out;
8610 } C25519_KAT[] = {
8611 	{ "A546E36BF0527C9D3B16154B82465EDD62144C0AC1FC5A18506A2244BA449AC4",
8612 	  "E6DB6867583030DB3594C1A424B15F7C726624EC26B3353B10A903A6D0AB1C4C",
8613 	  "C3DA55379DE9C6908E94EA4DF28D084F32ECCF03491C71F754B4075577A28552" },
8614 	{ "4B66E9D4D1B4673C5AD22691957D6AF5C11B6421E0EA01D42CA4169E7918BA0D",
8615 	  "E5210F12786811D3F4B7959D0538AE2C31DBE7106FC03C3EFC4CD549C715A493",
8616 	  "95CBDE9476E8907D7AADE45CB4B873F88B595A68799FA152E6F8F7647AAC7957" },
8617 	{ 0, 0, 0 }
8618 };
8619 
8620 static void
8621 revbytes(unsigned char *buf, size_t len)
8622 {
8623 	size_t u;
8624 
8625 	for (u = 0; u < (len >> 1); u ++) {
8626 		unsigned t;
8627 
8628 		t = buf[u];
8629 		buf[u] = buf[len - 1 - u];
8630 		buf[len - 1 - u] = t;
8631 	}
8632 }
8633 
8634 static void
8635 test_EC_c25519(const char *name, const br_ec_impl *iec)
8636 {
8637 	unsigned char bu[32], bk[32], br[32];
8638 	size_t v;
8639 	int i;
8640 
8641 	printf("Test %s: ", name);
8642 	fflush(stdout);
8643 	for (v = 0; C25519_KAT[v].scalar_le; v ++) {
8644 		hextobin(bk, C25519_KAT[v].scalar_le);
8645 		revbytes(bk, sizeof bk);
8646 		hextobin(bu, C25519_KAT[v].u_in);
8647 		hextobin(br, C25519_KAT[v].u_out);
8648 		if (!iec->mul(bu, sizeof bu, bk, sizeof bk, BR_EC_curve25519)) {
8649 			fprintf(stderr, "Curve25519 multiplication failed\n");
8650 			exit(EXIT_FAILURE);
8651 		}
8652 		if (memcmp(bu, br, sizeof bu) != 0) {
8653 			fprintf(stderr, "Curve25519 failed KAT\n");
8654 			exit(EXIT_FAILURE);
8655 		}
8656 		printf(".");
8657 		fflush(stdout);
8658 	}
8659 	printf(" ");
8660 	fflush(stdout);
8661 
8662 	memset(bu, 0, sizeof bu);
8663 	bu[0] = 0x09;
8664 	memcpy(bk, bu, sizeof bu);
8665 	for (i = 1; i <= 1000; i ++) {
8666 		revbytes(bk, sizeof bk);
8667 		if (!iec->mul(bu, sizeof bu, bk, sizeof bk, BR_EC_curve25519)) {
8668 			fprintf(stderr, "Curve25519 multiplication failed"
8669 				" (iter=%d)\n", i);
8670 			exit(EXIT_FAILURE);
8671 		}
8672 		revbytes(bk, sizeof bk);
8673 		for (v = 0; v < sizeof bu; v ++) {
8674 			unsigned t;
8675 
8676 			t = bu[v];
8677 			bu[v] = bk[v];
8678 			bk[v] = t;
8679 		}
8680 		if (i == 1 || i == 1000) {
8681 			const char *sref;
8682 
8683 			sref = (i == 1)
8684 				? "422C8E7A6227D7BCA1350B3E2BB7279F7897B87BB6854B783C60E80311AE3079"
8685 				: "684CF59BA83309552800EF566F2F4D3C1C3887C49360E3875F2EB94D99532C51";
8686 			hextobin(br, sref);
8687 			if (memcmp(bk, br, sizeof bk) != 0) {
8688 				fprintf(stderr,
8689 					"Curve25519 failed KAT (iter=%d)\n", i);
8690 				exit(EXIT_FAILURE);
8691 			}
8692 		}
8693 		if (i % 100 == 0) {
8694 			printf(".");
8695 			fflush(stdout);
8696 		}
8697 	}
8698 
8699 	printf(" done.\n");
8700 	fflush(stdout);
8701 }
8702 
8703 static void
8704 test_EC_c25519_i15(void)
8705 {
8706 	test_EC_c25519("EC_c25519_i15", &br_ec_c25519_i15);
8707 	test_EC_keygen("EC_c25519_i15", &br_ec_c25519_i15,
8708 		(uint32_t)1 << BR_EC_curve25519);
8709 }
8710 
8711 static void
8712 test_EC_c25519_i31(void)
8713 {
8714 	test_EC_c25519("EC_c25519_i31", &br_ec_c25519_i31);
8715 	test_EC_keygen("EC_c25519_i31", &br_ec_c25519_i31,
8716 		(uint32_t)1 << BR_EC_curve25519);
8717 }
8718 
8719 static void
8720 test_EC_c25519_m15(void)
8721 {
8722 	test_EC_c25519("EC_c25519_m15", &br_ec_c25519_m15);
8723 	test_EC_keygen("EC_c25519_m15", &br_ec_c25519_m15,
8724 		(uint32_t)1 << BR_EC_curve25519);
8725 }
8726 
8727 static void
8728 test_EC_c25519_m31(void)
8729 {
8730 	test_EC_c25519("EC_c25519_m31", &br_ec_c25519_m31);
8731 	test_EC_keygen("EC_c25519_m31", &br_ec_c25519_m31,
8732 		(uint32_t)1 << BR_EC_curve25519);
8733 }
8734 
8735 static void
8736 test_EC_c25519_m62(void)
8737 {
8738 	const br_ec_impl *ec;
8739 
8740 	ec = br_ec_c25519_m62_get();
8741 	if (ec != NULL) {
8742 		test_EC_c25519("EC_c25519_m62", ec);
8743 		test_EC_keygen("EC_c25519_m62", ec,
8744 			(uint32_t)1 << BR_EC_curve25519);
8745 	} else {
8746 		printf("Test EC_c25519_m62: UNAVAILABLE\n");
8747 		printf("Test EC_c25519_m62 keygen: UNAVAILABLE\n");
8748 	}
8749 }
8750 
8751 static void
8752 test_EC_c25519_m64(void)
8753 {
8754 	const br_ec_impl *ec;
8755 
8756 	ec = br_ec_c25519_m64_get();
8757 	if (ec != NULL) {
8758 		test_EC_c25519("EC_c25519_m64", ec);
8759 		test_EC_keygen("EC_c25519_m64", ec,
8760 			(uint32_t)1 << BR_EC_curve25519);
8761 	} else {
8762 		printf("Test EC_c25519_m64: UNAVAILABLE\n");
8763 		printf("Test EC_c25519_m64 keygen: UNAVAILABLE\n");
8764 	}
8765 }
8766 
8767 static const unsigned char EC_P256_PUB_POINT[] = {
8768 	0x04, 0x60, 0xFE, 0xD4, 0xBA, 0x25, 0x5A, 0x9D,
8769 	0x31, 0xC9, 0x61, 0xEB, 0x74, 0xC6, 0x35, 0x6D,
8770 	0x68, 0xC0, 0x49, 0xB8, 0x92, 0x3B, 0x61, 0xFA,
8771 	0x6C, 0xE6, 0x69, 0x62, 0x2E, 0x60, 0xF2, 0x9F,
8772 	0xB6, 0x79, 0x03, 0xFE, 0x10, 0x08, 0xB8, 0xBC,
8773 	0x99, 0xA4, 0x1A, 0xE9, 0xE9, 0x56, 0x28, 0xBC,
8774 	0x64, 0xF2, 0xF1, 0xB2, 0x0C, 0x2D, 0x7E, 0x9F,
8775 	0x51, 0x77, 0xA3, 0xC2, 0x94, 0xD4, 0x46, 0x22,
8776 	0x99
8777 };
8778 
8779 static const unsigned char EC_P256_PRIV_X[] = {
8780 	0xC9, 0xAF, 0xA9, 0xD8, 0x45, 0xBA, 0x75, 0x16,
8781 	0x6B, 0x5C, 0x21, 0x57, 0x67, 0xB1, 0xD6, 0x93,
8782 	0x4E, 0x50, 0xC3, 0xDB, 0x36, 0xE8, 0x9B, 0x12,
8783 	0x7B, 0x8A, 0x62, 0x2B, 0x12, 0x0F, 0x67, 0x21
8784 };
8785 
8786 static const br_ec_public_key EC_P256_PUB = {
8787 	BR_EC_secp256r1,
8788 	(unsigned char *)EC_P256_PUB_POINT, sizeof EC_P256_PUB_POINT
8789 };
8790 
8791 static const br_ec_private_key EC_P256_PRIV = {
8792 	BR_EC_secp256r1,
8793 	(unsigned char *)EC_P256_PRIV_X, sizeof EC_P256_PRIV_X
8794 };
8795 
8796 static const unsigned char EC_P384_PUB_POINT[] = {
8797 	0x04, 0xEC, 0x3A, 0x4E, 0x41, 0x5B, 0x4E, 0x19,
8798 	0xA4, 0x56, 0x86, 0x18, 0x02, 0x9F, 0x42, 0x7F,
8799 	0xA5, 0xDA, 0x9A, 0x8B, 0xC4, 0xAE, 0x92, 0xE0,
8800 	0x2E, 0x06, 0xAA, 0xE5, 0x28, 0x6B, 0x30, 0x0C,
8801 	0x64, 0xDE, 0xF8, 0xF0, 0xEA, 0x90, 0x55, 0x86,
8802 	0x60, 0x64, 0xA2, 0x54, 0x51, 0x54, 0x80, 0xBC,
8803 	0x13, 0x80, 0x15, 0xD9, 0xB7, 0x2D, 0x7D, 0x57,
8804 	0x24, 0x4E, 0xA8, 0xEF, 0x9A, 0xC0, 0xC6, 0x21,
8805 	0x89, 0x67, 0x08, 0xA5, 0x93, 0x67, 0xF9, 0xDF,
8806 	0xB9, 0xF5, 0x4C, 0xA8, 0x4B, 0x3F, 0x1C, 0x9D,
8807 	0xB1, 0x28, 0x8B, 0x23, 0x1C, 0x3A, 0xE0, 0xD4,
8808 	0xFE, 0x73, 0x44, 0xFD, 0x25, 0x33, 0x26, 0x47,
8809 	0x20
8810 };
8811 
8812 static const unsigned char EC_P384_PRIV_X[] = {
8813 	0x6B, 0x9D, 0x3D, 0xAD, 0x2E, 0x1B, 0x8C, 0x1C,
8814 	0x05, 0xB1, 0x98, 0x75, 0xB6, 0x65, 0x9F, 0x4D,
8815 	0xE2, 0x3C, 0x3B, 0x66, 0x7B, 0xF2, 0x97, 0xBA,
8816 	0x9A, 0xA4, 0x77, 0x40, 0x78, 0x71, 0x37, 0xD8,
8817 	0x96, 0xD5, 0x72, 0x4E, 0x4C, 0x70, 0xA8, 0x25,
8818 	0xF8, 0x72, 0xC9, 0xEA, 0x60, 0xD2, 0xED, 0xF5
8819 };
8820 
8821 static const br_ec_public_key EC_P384_PUB = {
8822 	BR_EC_secp384r1,
8823 	(unsigned char *)EC_P384_PUB_POINT, sizeof EC_P384_PUB_POINT
8824 };
8825 
8826 static const br_ec_private_key EC_P384_PRIV = {
8827 	BR_EC_secp384r1,
8828 	(unsigned char *)EC_P384_PRIV_X, sizeof EC_P384_PRIV_X
8829 };
8830 
8831 static const unsigned char EC_P521_PUB_POINT[] = {
8832 	0x04, 0x01, 0x89, 0x45, 0x50, 0xD0, 0x78, 0x59,
8833 	0x32, 0xE0, 0x0E, 0xAA, 0x23, 0xB6, 0x94, 0xF2,
8834 	0x13, 0xF8, 0xC3, 0x12, 0x1F, 0x86, 0xDC, 0x97,
8835 	0xA0, 0x4E, 0x5A, 0x71, 0x67, 0xDB, 0x4E, 0x5B,
8836 	0xCD, 0x37, 0x11, 0x23, 0xD4, 0x6E, 0x45, 0xDB,
8837 	0x6B, 0x5D, 0x53, 0x70, 0xA7, 0xF2, 0x0F, 0xB6,
8838 	0x33, 0x15, 0x5D, 0x38, 0xFF, 0xA1, 0x6D, 0x2B,
8839 	0xD7, 0x61, 0xDC, 0xAC, 0x47, 0x4B, 0x9A, 0x2F,
8840 	0x50, 0x23, 0xA4, 0x00, 0x49, 0x31, 0x01, 0xC9,
8841 	0x62, 0xCD, 0x4D, 0x2F, 0xDD, 0xF7, 0x82, 0x28,
8842 	0x5E, 0x64, 0x58, 0x41, 0x39, 0xC2, 0xF9, 0x1B,
8843 	0x47, 0xF8, 0x7F, 0xF8, 0x23, 0x54, 0xD6, 0x63,
8844 	0x0F, 0x74, 0x6A, 0x28, 0xA0, 0xDB, 0x25, 0x74,
8845 	0x1B, 0x5B, 0x34, 0xA8, 0x28, 0x00, 0x8B, 0x22,
8846 	0xAC, 0xC2, 0x3F, 0x92, 0x4F, 0xAA, 0xFB, 0xD4,
8847 	0xD3, 0x3F, 0x81, 0xEA, 0x66, 0x95, 0x6D, 0xFE,
8848 	0xAA, 0x2B, 0xFD, 0xFC, 0xF5
8849 };
8850 
8851 static const unsigned char EC_P521_PRIV_X[] = {
8852 	0x00, 0xFA, 0xD0, 0x6D, 0xAA, 0x62, 0xBA, 0x3B,
8853 	0x25, 0xD2, 0xFB, 0x40, 0x13, 0x3D, 0xA7, 0x57,
8854 	0x20, 0x5D, 0xE6, 0x7F, 0x5B, 0xB0, 0x01, 0x8F,
8855 	0xEE, 0x8C, 0x86, 0xE1, 0xB6, 0x8C, 0x7E, 0x75,
8856 	0xCA, 0xA8, 0x96, 0xEB, 0x32, 0xF1, 0xF4, 0x7C,
8857 	0x70, 0x85, 0x58, 0x36, 0xA6, 0xD1, 0x6F, 0xCC,
8858 	0x14, 0x66, 0xF6, 0xD8, 0xFB, 0xEC, 0x67, 0xDB,
8859 	0x89, 0xEC, 0x0C, 0x08, 0xB0, 0xE9, 0x96, 0xB8,
8860 	0x35, 0x38
8861 };
8862 
8863 static const br_ec_public_key EC_P521_PUB = {
8864 	BR_EC_secp521r1,
8865 	(unsigned char *)EC_P521_PUB_POINT, sizeof EC_P521_PUB_POINT
8866 };
8867 
8868 static const br_ec_private_key EC_P521_PRIV = {
8869 	BR_EC_secp521r1,
8870 	(unsigned char *)EC_P521_PRIV_X, sizeof EC_P521_PRIV_X
8871 };
8872 
8873 typedef struct {
8874 	const br_ec_public_key *pub;
8875 	const br_ec_private_key *priv;
8876 	const br_hash_class *hf;
8877 	const char *msg;
8878 	const char *sk;
8879 	const char *sraw;
8880 	const char *sasn1;
8881 } ecdsa_kat_vector;
8882 
8883 const ecdsa_kat_vector ECDSA_KAT[] = {
8884 
8885 	/* Test vectors for P-256, from RFC 6979. */
8886 	{
8887 		&EC_P256_PUB,
8888 		&EC_P256_PRIV,
8889 		&br_sha1_vtable, "sample",
8890 		"882905F1227FD620FBF2ABF21244F0BA83D0DC3A9103DBBEE43A1FB858109DB4",
8891 		"61340C88C3AAEBEB4F6D667F672CA9759A6CCAA9FA8811313039EE4A35471D326D7F147DAC089441BB2E2FE8F7A3FA264B9C475098FDCF6E00D7C996E1B8B7EB",
8892 		"3044022061340C88C3AAEBEB4F6D667F672CA9759A6CCAA9FA8811313039EE4A35471D3202206D7F147DAC089441BB2E2FE8F7A3FA264B9C475098FDCF6E00D7C996E1B8B7EB"
8893 	},
8894 	{
8895 		&EC_P256_PUB,
8896 		&EC_P256_PRIV,
8897 		&br_sha224_vtable, "sample",
8898 		"103F90EE9DC52E5E7FB5132B7033C63066D194321491862059967C715985D473",
8899 		"53B2FFF5D1752B2C689DF257C04C40A587FABABB3F6FC2702F1343AF7CA9AA3FB9AFB64FDC03DC1A131C7D2386D11E349F070AA432A4ACC918BEA988BF75C74C",
8900 		"3045022053B2FFF5D1752B2C689DF257C04C40A587FABABB3F6FC2702F1343AF7CA9AA3F022100B9AFB64FDC03DC1A131C7D2386D11E349F070AA432A4ACC918BEA988BF75C74C"
8901 	},
8902 	{
8903 		&EC_P256_PUB,
8904 		&EC_P256_PRIV,
8905 		&br_sha256_vtable, "sample",
8906 		"A6E3C57DD01ABE90086538398355DD4C3B17AA873382B0F24D6129493D8AAD60",
8907 		"EFD48B2AACB6A8FD1140DD9CD45E81D69D2C877B56AAF991C34D0EA84EAF3716F7CB1C942D657C41D436C7A1B6E29F65F3E900DBB9AFF4064DC4AB2F843ACDA8",
8908 		"3046022100EFD48B2AACB6A8FD1140DD9CD45E81D69D2C877B56AAF991C34D0EA84EAF3716022100F7CB1C942D657C41D436C7A1B6E29F65F3E900DBB9AFF4064DC4AB2F843ACDA8"
8909 	},
8910 	{
8911 		&EC_P256_PUB,
8912 		&EC_P256_PRIV,
8913 		&br_sha384_vtable, "sample",
8914 		"09F634B188CEFD98E7EC88B1AA9852D734D0BC272F7D2A47DECC6EBEB375AAD4",
8915 		"0EAFEA039B20E9B42309FB1D89E213057CBF973DC0CFC8F129EDDDC800EF77194861F0491E6998B9455193E34E7B0D284DDD7149A74B95B9261F13ABDE940954",
8916 		"304402200EAFEA039B20E9B42309FB1D89E213057CBF973DC0CFC8F129EDDDC800EF771902204861F0491E6998B9455193E34E7B0D284DDD7149A74B95B9261F13ABDE940954"
8917 	},
8918 	{
8919 		&EC_P256_PUB,
8920 		&EC_P256_PRIV,
8921 		&br_sha512_vtable, "sample",
8922 		"5FA81C63109BADB88C1F367B47DA606DA28CAD69AA22C4FE6AD7DF73A7173AA5",
8923 		"8496A60B5E9B47C825488827E0495B0E3FA109EC4568FD3F8D1097678EB97F002362AB1ADBE2B8ADF9CB9EDAB740EA6049C028114F2460F96554F61FAE3302FE",
8924 		"30450221008496A60B5E9B47C825488827E0495B0E3FA109EC4568FD3F8D1097678EB97F0002202362AB1ADBE2B8ADF9CB9EDAB740EA6049C028114F2460F96554F61FAE3302FE"
8925 	},
8926 	{
8927 		&EC_P256_PUB,
8928 		&EC_P256_PRIV,
8929 		&br_sha1_vtable, "test",
8930 		"8C9520267C55D6B980DF741E56B4ADEE114D84FBFA2E62137954164028632A2E",
8931 		"0CBCC86FD6ABD1D99E703E1EC50069EE5C0B4BA4B9AC60E409E8EC5910D81A8901B9D7B73DFAA60D5651EC4591A0136F87653E0FD780C3B1BC872FFDEAE479B1",
8932 		"304402200CBCC86FD6ABD1D99E703E1EC50069EE5C0B4BA4B9AC60E409E8EC5910D81A89022001B9D7B73DFAA60D5651EC4591A0136F87653E0FD780C3B1BC872FFDEAE479B1"
8933 	},
8934 	{
8935 		&EC_P256_PUB,
8936 		&EC_P256_PRIV,
8937 		&br_sha224_vtable, "test",
8938 		"669F4426F2688B8BE0DB3A6BD1989BDAEFFF84B649EEB84F3DD26080F667FAA7",
8939 		"C37EDB6F0AE79D47C3C27E962FA269BB4F441770357E114EE511F662EC34A692C820053A05791E521FCAAD6042D40AEA1D6B1A540138558F47D0719800E18F2D",
8940 		"3046022100C37EDB6F0AE79D47C3C27E962FA269BB4F441770357E114EE511F662EC34A692022100C820053A05791E521FCAAD6042D40AEA1D6B1A540138558F47D0719800E18F2D"
8941 	},
8942 	{
8943 		&EC_P256_PUB,
8944 		&EC_P256_PRIV,
8945 		&br_sha256_vtable, "test",
8946 		"D16B6AE827F17175E040871A1C7EC3500192C4C92677336EC2537ACAEE0008E0",
8947 		"F1ABB023518351CD71D881567B1EA663ED3EFCF6C5132B354F28D3B0B7D38367019F4113742A2B14BD25926B49C649155F267E60D3814B4C0CC84250E46F0083",
8948 		"3045022100F1ABB023518351CD71D881567B1EA663ED3EFCF6C5132B354F28D3B0B7D383670220019F4113742A2B14BD25926B49C649155F267E60D3814B4C0CC84250E46F0083"
8949 	},
8950 	{
8951 		&EC_P256_PUB,
8952 		&EC_P256_PRIV,
8953 		&br_sha384_vtable, "test",
8954 		"16AEFFA357260B04B1DD199693960740066C1A8F3E8EDD79070AA914D361B3B8",
8955 		"83910E8B48BB0C74244EBDF7F07A1C5413D61472BD941EF3920E623FBCCEBEB68DDBEC54CF8CD5874883841D712142A56A8D0F218F5003CB0296B6B509619F2C",
8956 		"304602210083910E8B48BB0C74244EBDF7F07A1C5413D61472BD941EF3920E623FBCCEBEB60221008DDBEC54CF8CD5874883841D712142A56A8D0F218F5003CB0296B6B509619F2C"
8957 	},
8958 	{
8959 		&EC_P256_PUB,
8960 		&EC_P256_PRIV,
8961 		&br_sha512_vtable, "test",
8962 		"6915D11632ACA3C40D5D51C08DAF9C555933819548784480E93499000D9F0B7F",
8963 		"461D93F31B6540894788FD206C07CFA0CC35F46FA3C91816FFF1040AD1581A0439AF9F15DE0DB8D97E72719C74820D304CE5226E32DEDAE67519E840D1194E55",
8964 		"30440220461D93F31B6540894788FD206C07CFA0CC35F46FA3C91816FFF1040AD1581A04022039AF9F15DE0DB8D97E72719C74820D304CE5226E32DEDAE67519E840D1194E55"
8965 	},
8966 
8967 	/* Test vectors for P-384, from RFC 6979. */
8968 	{
8969 		&EC_P384_PUB,
8970 		&EC_P384_PRIV,
8971 		&br_sha1_vtable, "sample",
8972 		"4471EF7518BB2C7C20F62EAE1C387AD0C5E8E470995DB4ACF694466E6AB096630F29E5938D25106C3C340045A2DB01A7",
8973 		"EC748D839243D6FBEF4FC5C4859A7DFFD7F3ABDDF72014540C16D73309834FA37B9BA002899F6FDA3A4A9386790D4EB2A3BCFA947BEEF4732BF247AC17F71676CB31A847B9FF0CBC9C9ED4C1A5B3FACF26F49CA031D4857570CCB5CA4424A443",
8974 		"3066023100EC748D839243D6FBEF4FC5C4859A7DFFD7F3ABDDF72014540C16D73309834FA37B9BA002899F6FDA3A4A9386790D4EB2023100A3BCFA947BEEF4732BF247AC17F71676CB31A847B9FF0CBC9C9ED4C1A5B3FACF26F49CA031D4857570CCB5CA4424A443"
8975 	},
8976 
8977 	{
8978 		&EC_P384_PUB,
8979 		&EC_P384_PRIV,
8980 		&br_sha224_vtable, "sample",
8981 		"A4E4D2F0E729EB786B31FC20AD5D849E304450E0AE8E3E341134A5C1AFA03CAB8083EE4E3C45B06A5899EA56C51B5879",
8982 		"42356E76B55A6D9B4631C865445DBE54E056D3B3431766D0509244793C3F9366450F76EE3DE43F5A125333A6BE0601229DA0C81787064021E78DF658F2FBB0B042BF304665DB721F077A4298B095E4834C082C03D83028EFBF93A3C23940CA8D",
8983 		"3065023042356E76B55A6D9B4631C865445DBE54E056D3B3431766D0509244793C3F9366450F76EE3DE43F5A125333A6BE0601220231009DA0C81787064021E78DF658F2FBB0B042BF304665DB721F077A4298B095E4834C082C03D83028EFBF93A3C23940CA8D"
8984 	},
8985 	{
8986 		&EC_P384_PUB,
8987 		&EC_P384_PRIV,
8988 		&br_sha256_vtable, "sample",
8989 		"180AE9F9AEC5438A44BC159A1FCB277C7BE54FA20E7CF404B490650A8ACC414E375572342863C899F9F2EDF9747A9B60",
8990 		"21B13D1E013C7FA1392D03C5F99AF8B30C570C6F98D4EA8E354B63A21D3DAA33BDE1E888E63355D92FA2B3C36D8FB2CDF3AA443FB107745BF4BD77CB3891674632068A10CA67E3D45DB2266FA7D1FEEBEFDC63ECCD1AC42EC0CB8668A4FA0AB0",
8991 		"3065023021B13D1E013C7FA1392D03C5F99AF8B30C570C6F98D4EA8E354B63A21D3DAA33BDE1E888E63355D92FA2B3C36D8FB2CD023100F3AA443FB107745BF4BD77CB3891674632068A10CA67E3D45DB2266FA7D1FEEBEFDC63ECCD1AC42EC0CB8668A4FA0AB0"
8992 	},
8993 	{
8994 		&EC_P384_PUB,
8995 		&EC_P384_PRIV,
8996 		&br_sha384_vtable, "sample",
8997 		"94ED910D1A099DAD3254E9242AE85ABDE4BA15168EAF0CA87A555FD56D10FBCA2907E3E83BA95368623B8C4686915CF9",
8998 		"94EDBB92A5ECB8AAD4736E56C691916B3F88140666CE9FA73D64C4EA95AD133C81A648152E44ACF96E36DD1E80FABE4699EF4AEB15F178CEA1FE40DB2603138F130E740A19624526203B6351D0A3A94FA329C145786E679E7B82C71A38628AC8",
8999 		"306602310094EDBB92A5ECB8AAD4736E56C691916B3F88140666CE9FA73D64C4EA95AD133C81A648152E44ACF96E36DD1E80FABE4602310099EF4AEB15F178CEA1FE40DB2603138F130E740A19624526203B6351D0A3A94FA329C145786E679E7B82C71A38628AC8"
9000 	},
9001 	{
9002 		&EC_P384_PUB,
9003 		&EC_P384_PRIV,
9004 		&br_sha512_vtable, "sample",
9005 		"92FC3C7183A883E24216D1141F1A8976C5B0DD797DFA597E3D7B32198BD35331A4E966532593A52980D0E3AAA5E10EC3",
9006 		"ED0959D5880AB2D869AE7F6C2915C6D60F96507F9CB3E047C0046861DA4A799CFE30F35CC900056D7C99CD7882433709512C8CCEEE3890A84058CE1E22DBC2198F42323CE8ACA9135329F03C068E5112DC7CC3EF3446DEFCEB01A45C2667FDD5",
9007 		"3065023100ED0959D5880AB2D869AE7F6C2915C6D60F96507F9CB3E047C0046861DA4A799CFE30F35CC900056D7C99CD78824337090230512C8CCEEE3890A84058CE1E22DBC2198F42323CE8ACA9135329F03C068E5112DC7CC3EF3446DEFCEB01A45C2667FDD5"
9008 	},
9009 	{
9010 		&EC_P384_PUB,
9011 		&EC_P384_PRIV,
9012 		&br_sha1_vtable, "test",
9013 		"66CC2C8F4D303FC962E5FF6A27BD79F84EC812DDAE58CF5243B64A4AD8094D47EC3727F3A3C186C15054492E30698497",
9014 		"4BC35D3A50EF4E30576F58CD96CE6BF638025EE624004A1F7789A8B8E43D0678ACD9D29876DAF46638645F7F404B11C7D5A6326C494ED3FF614703878961C0FDE7B2C278F9A65FD8C4B7186201A2991695BA1C84541327E966FA7B50F7382282",
9015 		"306502304BC35D3A50EF4E30576F58CD96CE6BF638025EE624004A1F7789A8B8E43D0678ACD9D29876DAF46638645F7F404B11C7023100D5A6326C494ED3FF614703878961C0FDE7B2C278F9A65FD8C4B7186201A2991695BA1C84541327E966FA7B50F7382282"
9016 	},
9017 	{
9018 		&EC_P384_PUB,
9019 		&EC_P384_PRIV,
9020 		&br_sha224_vtable, "test",
9021 		"18FA39DB95AA5F561F30FA3591DC59C0FA3653A80DAFFA0B48D1A4C6DFCBFF6E3D33BE4DC5EB8886A8ECD093F2935726",
9022 		"E8C9D0B6EA72A0E7837FEA1D14A1A9557F29FAA45D3E7EE888FC5BF954B5E62464A9A817C47FF78B8C11066B24080E7207041D4A7A0379AC7232FF72E6F77B6DDB8F09B16CCE0EC3286B2BD43FA8C6141C53EA5ABEF0D8231077A04540A96B66",
9023 		"3065023100E8C9D0B6EA72A0E7837FEA1D14A1A9557F29FAA45D3E7EE888FC5BF954B5E62464A9A817C47FF78B8C11066B24080E72023007041D4A7A0379AC7232FF72E6F77B6DDB8F09B16CCE0EC3286B2BD43FA8C6141C53EA5ABEF0D8231077A04540A96B66"
9024 	},
9025 	{
9026 		&EC_P384_PUB,
9027 		&EC_P384_PRIV,
9028 		&br_sha256_vtable, "test",
9029 		"0CFAC37587532347DC3389FDC98286BBA8C73807285B184C83E62E26C401C0FAA48DD070BA79921A3457ABFF2D630AD7",
9030 		"6D6DEFAC9AB64DABAFE36C6BF510352A4CC27001263638E5B16D9BB51D451559F918EEDAF2293BE5B475CC8F0188636B2D46F3BECBCC523D5F1A1256BF0C9B024D879BA9E838144C8BA6BAEB4B53B47D51AB373F9845C0514EEFB14024787265",
9031 		"306402306D6DEFAC9AB64DABAFE36C6BF510352A4CC27001263638E5B16D9BB51D451559F918EEDAF2293BE5B475CC8F0188636B02302D46F3BECBCC523D5F1A1256BF0C9B024D879BA9E838144C8BA6BAEB4B53B47D51AB373F9845C0514EEFB14024787265"
9032 	},
9033 	{
9034 		&EC_P384_PUB,
9035 		&EC_P384_PRIV,
9036 		&br_sha384_vtable, "test",
9037 		"015EE46A5BF88773ED9123A5AB0807962D193719503C527B031B4C2D225092ADA71F4A459BC0DA98ADB95837DB8312EA",
9038 		"8203B63D3C853E8D77227FB377BCF7B7B772E97892A80F36AB775D509D7A5FEB0542A7F0812998DA8F1DD3CA3CF023DBDDD0760448D42D8A43AF45AF836FCE4DE8BE06B485E9B61B827C2F13173923E06A739F040649A667BF3B828246BAA5A5",
9039 		"30660231008203B63D3C853E8D77227FB377BCF7B7B772E97892A80F36AB775D509D7A5FEB0542A7F0812998DA8F1DD3CA3CF023DB023100DDD0760448D42D8A43AF45AF836FCE4DE8BE06B485E9B61B827C2F13173923E06A739F040649A667BF3B828246BAA5A5"
9040 	},
9041 	{
9042 		&EC_P384_PUB,
9043 		&EC_P384_PRIV,
9044 		&br_sha512_vtable, "test",
9045 		"3780C4F67CB15518B6ACAE34C9F83568D2E12E47DEAB6C50A4E4EE5319D1E8CE0E2CC8A136036DC4B9C00E6888F66B6C",
9046 		"A0D5D090C9980FAF3C2CE57B7AE951D31977DD11C775D314AF55F76C676447D06FB6495CD21B4B6E340FC236584FB277976984E59B4C77B0E8E4460DCA3D9F20E07B9BB1F63BEEFAF576F6B2E8B224634A2092CD3792E0159AD9CEE37659C736",
9047 		"3066023100A0D5D090C9980FAF3C2CE57B7AE951D31977DD11C775D314AF55F76C676447D06FB6495CD21B4B6E340FC236584FB277023100976984E59B4C77B0E8E4460DCA3D9F20E07B9BB1F63BEEFAF576F6B2E8B224634A2092CD3792E0159AD9CEE37659C736"
9048 	},
9049 
9050 	/* Test vectors for P-521, from RFC 6979. */
9051 	{
9052 		&EC_P521_PUB,
9053 		&EC_P521_PRIV,
9054 		&br_sha1_vtable, "sample",
9055 		"0089C071B419E1C2820962321787258469511958E80582E95D8378E0C2CCDB3CB42BEDE42F50E3FA3C71F5A76724281D31D9C89F0F91FC1BE4918DB1C03A5838D0F9",
9056 		"00343B6EC45728975EA5CBA6659BBB6062A5FF89EEA58BE3C80B619F322C87910FE092F7D45BB0F8EEE01ED3F20BABEC079D202AE677B243AB40B5431D497C55D75D00E7B0E675A9B24413D448B8CC119D2BF7B2D2DF032741C096634D6D65D0DBE3D5694625FB9E8104D3B842C1B0E2D0B98BEA19341E8676AEF66AE4EBA3D5475D5D16",
9057 		"3081870241343B6EC45728975EA5CBA6659BBB6062A5FF89EEA58BE3C80B619F322C87910FE092F7D45BB0F8EEE01ED3F20BABEC079D202AE677B243AB40B5431D497C55D75D024200E7B0E675A9B24413D448B8CC119D2BF7B2D2DF032741C096634D6D65D0DBE3D5694625FB9E8104D3B842C1B0E2D0B98BEA19341E8676AEF66AE4EBA3D5475D5D16"
9058 	},
9059 	{
9060 		&EC_P521_PUB,
9061 		&EC_P521_PRIV,
9062 		&br_sha224_vtable, "sample",
9063 		"0121415EC2CD7726330A61F7F3FA5DE14BE9436019C4DB8CB4041F3B54CF31BE0493EE3F427FB906393D895A19C9523F3A1D54BB8702BD4AA9C99DAB2597B92113F3",
9064 		"01776331CFCDF927D666E032E00CF776187BC9FDD8E69D0DABB4109FFE1B5E2A30715F4CC923A4A5E94D2503E9ACFED92857B7F31D7152E0F8C00C15FF3D87E2ED2E0050CB5265417FE2320BBB5A122B8E1A32BD699089851128E360E620A30C7E17BA41A666AF126CE100E5799B153B60528D5300D08489CA9178FB610A2006C254B41F",
9065 		"308187024201776331CFCDF927D666E032E00CF776187BC9FDD8E69D0DABB4109FFE1B5E2A30715F4CC923A4A5E94D2503E9ACFED92857B7F31D7152E0F8C00C15FF3D87E2ED2E024150CB5265417FE2320BBB5A122B8E1A32BD699089851128E360E620A30C7E17BA41A666AF126CE100E5799B153B60528D5300D08489CA9178FB610A2006C254B41F"
9066 	},
9067 	{
9068 		&EC_P521_PUB,
9069 		&EC_P521_PRIV,
9070 		&br_sha256_vtable, "sample",
9071 		"00EDF38AFCAAECAB4383358B34D67C9F2216C8382AAEA44A3DAD5FDC9C32575761793FEF24EB0FC276DFC4F6E3EC476752F043CF01415387470BCBD8678ED2C7E1A0",
9072 		"01511BB4D675114FE266FC4372B87682BAECC01D3CC62CF2303C92B3526012659D16876E25C7C1E57648F23B73564D67F61C6F14D527D54972810421E7D87589E1A7004A171143A83163D6DF460AAF61522695F207A58B95C0644D87E52AA1A347916E4F7A72930B1BC06DBE22CE3F58264AFD23704CBB63B29B931F7DE6C9D949A7ECFC",
9073 		"308187024201511BB4D675114FE266FC4372B87682BAECC01D3CC62CF2303C92B3526012659D16876E25C7C1E57648F23B73564D67F61C6F14D527D54972810421E7D87589E1A702414A171143A83163D6DF460AAF61522695F207A58B95C0644D87E52AA1A347916E4F7A72930B1BC06DBE22CE3F58264AFD23704CBB63B29B931F7DE6C9D949A7ECFC"
9074 	},
9075 	{
9076 		&EC_P521_PUB,
9077 		&EC_P521_PRIV,
9078 		&br_sha384_vtable, "sample",
9079 		"01546A108BC23A15D6F21872F7DED661FA8431DDBD922D0DCDB77CC878C8553FFAD064C95A920A750AC9137E527390D2D92F153E66196966EA554D9ADFCB109C4211",
9080 		"01EA842A0E17D2DE4F92C15315C63DDF72685C18195C2BB95E572B9C5136CA4B4B576AD712A52BE9730627D16054BA40CC0B8D3FF035B12AE75168397F5D50C6745101F21A3CEE066E1961025FB048BD5FE2B7924D0CD797BABE0A83B66F1E35EEAF5FDE143FA85DC394A7DEE766523393784484BDF3E00114A1C857CDE1AA203DB65D61",
9081 		"308188024201EA842A0E17D2DE4F92C15315C63DDF72685C18195C2BB95E572B9C5136CA4B4B576AD712A52BE9730627D16054BA40CC0B8D3FF035B12AE75168397F5D50C67451024201F21A3CEE066E1961025FB048BD5FE2B7924D0CD797BABE0A83B66F1E35EEAF5FDE143FA85DC394A7DEE766523393784484BDF3E00114A1C857CDE1AA203DB65D61"
9082 	},
9083 	{
9084 		&EC_P521_PUB,
9085 		&EC_P521_PRIV,
9086 		&br_sha512_vtable, "sample",
9087 		"01DAE2EA071F8110DC26882D4D5EAE0621A3256FC8847FB9022E2B7D28E6F10198B1574FDD03A9053C08A1854A168AA5A57470EC97DD5CE090124EF52A2F7ECBFFD3",
9088 		"00C328FAFCBD79DD77850370C46325D987CB525569FB63C5D3BC53950E6D4C5F174E25A1EE9017B5D450606ADD152B534931D7D4E8455CC91F9B15BF05EC36E377FA00617CCE7CF5064806C467F678D3B4080D6F1CC50AF26CA209417308281B68AF282623EAA63E5B5C0723D8B8C37FF0777B1A20F8CCB1DCCC43997F1EE0E44DA4A67A",
9089 		"308187024200C328FAFCBD79DD77850370C46325D987CB525569FB63C5D3BC53950E6D4C5F174E25A1EE9017B5D450606ADD152B534931D7D4E8455CC91F9B15BF05EC36E377FA0241617CCE7CF5064806C467F678D3B4080D6F1CC50AF26CA209417308281B68AF282623EAA63E5B5C0723D8B8C37FF0777B1A20F8CCB1DCCC43997F1EE0E44DA4A67A"
9090 	},
9091 	{
9092 		&EC_P521_PUB,
9093 		&EC_P521_PRIV,
9094 		&br_sha1_vtable, "test",
9095 		"00BB9F2BF4FE1038CCF4DABD7139A56F6FD8BB1386561BD3C6A4FC818B20DF5DDBA80795A947107A1AB9D12DAA615B1ADE4F7A9DC05E8E6311150F47F5C57CE8B222",
9096 		"013BAD9F29ABE20DE37EBEB823C252CA0F63361284015A3BF430A46AAA80B87B0693F0694BD88AFE4E661FC33B094CD3B7963BED5A727ED8BD6A3A202ABE009D036701E9BB81FF7944CA409AD138DBBEE228E1AFCC0C890FC78EC8604639CB0DBDC90F717A99EAD9D272855D00162EE9527567DD6A92CBD629805C0445282BBC916797FF",
9097 		"3081880242013BAD9F29ABE20DE37EBEB823C252CA0F63361284015A3BF430A46AAA80B87B0693F0694BD88AFE4E661FC33B094CD3B7963BED5A727ED8BD6A3A202ABE009D0367024201E9BB81FF7944CA409AD138DBBEE228E1AFCC0C890FC78EC8604639CB0DBDC90F717A99EAD9D272855D00162EE9527567DD6A92CBD629805C0445282BBC916797FF"
9098 	},
9099 	{
9100 		&EC_P521_PUB,
9101 		&EC_P521_PRIV,
9102 		&br_sha224_vtable, "test",
9103 		"0040D09FCF3C8A5F62CF4FB223CBBB2B9937F6B0577C27020A99602C25A01136987E452988781484EDBBCF1C47E554E7FC901BC3085E5206D9F619CFF07E73D6F706",
9104 		"01C7ED902E123E6815546065A2C4AF977B22AA8EADDB68B2C1110E7EA44D42086BFE4A34B67DDC0E17E96536E358219B23A706C6A6E16BA77B65E1C595D43CAE17FB0177336676304FCB343CE028B38E7B4FBA76C1C1B277DA18CAD2A8478B2A9A9F5BEC0F3BA04F35DB3E4263569EC6AADE8C92746E4C82F8299AE1B8F1739F8FD519A4",
9105 		"308188024201C7ED902E123E6815546065A2C4AF977B22AA8EADDB68B2C1110E7EA44D42086BFE4A34B67DDC0E17E96536E358219B23A706C6A6E16BA77B65E1C595D43CAE17FB02420177336676304FCB343CE028B38E7B4FBA76C1C1B277DA18CAD2A8478B2A9A9F5BEC0F3BA04F35DB3E4263569EC6AADE8C92746E4C82F8299AE1B8F1739F8FD519A4"
9106 	},
9107 	{
9108 		&EC_P521_PUB,
9109 		&EC_P521_PRIV,
9110 		&br_sha256_vtable, "test",
9111 		"001DE74955EFAABC4C4F17F8E84D881D1310B5392D7700275F82F145C61E843841AF09035BF7A6210F5A431A6A9E81C9323354A9E69135D44EBD2FCAA7731B909258",
9112 		"000E871C4A14F993C6C7369501900C4BC1E9C7B0B4BA44E04868B30B41D8071042EB28C4C250411D0CE08CD197E4188EA4876F279F90B3D8D74A3C76E6F1E4656AA800CD52DBAA33B063C3A6CD8058A1FB0A46A4754B034FCC644766CA14DA8CA5CA9FDE00E88C1AD60CCBA759025299079D7A427EC3CC5B619BFBC828E7769BCD694E86",
9113 		"30818702410E871C4A14F993C6C7369501900C4BC1E9C7B0B4BA44E04868B30B41D8071042EB28C4C250411D0CE08CD197E4188EA4876F279F90B3D8D74A3C76E6F1E4656AA8024200CD52DBAA33B063C3A6CD8058A1FB0A46A4754B034FCC644766CA14DA8CA5CA9FDE00E88C1AD60CCBA759025299079D7A427EC3CC5B619BFBC828E7769BCD694E86"
9114 	},
9115 	{
9116 		&EC_P521_PUB,
9117 		&EC_P521_PRIV,
9118 		&br_sha384_vtable, "test",
9119 		"01F1FC4A349A7DA9A9E116BFDD055DC08E78252FF8E23AC276AC88B1770AE0B5DCEB1ED14A4916B769A523CE1E90BA22846AF11DF8B300C38818F713DADD85DE0C88",
9120 		"014BEE21A18B6D8B3C93FAB08D43E739707953244FDBE924FA926D76669E7AC8C89DF62ED8975C2D8397A65A49DCC09F6B0AC62272741924D479354D74FF6075578C0133330865C067A0EAF72362A65E2D7BC4E461E8C8995C3B6226A21BD1AA78F0ED94FE536A0DCA35534F0CD1510C41525D163FE9D74D134881E35141ED5E8E95B979",
9121 		"3081880242014BEE21A18B6D8B3C93FAB08D43E739707953244FDBE924FA926D76669E7AC8C89DF62ED8975C2D8397A65A49DCC09F6B0AC62272741924D479354D74FF6075578C02420133330865C067A0EAF72362A65E2D7BC4E461E8C8995C3B6226A21BD1AA78F0ED94FE536A0DCA35534F0CD1510C41525D163FE9D74D134881E35141ED5E8E95B979"
9122 	},
9123 	{
9124 		&EC_P521_PUB,
9125 		&EC_P521_PRIV,
9126 		&br_sha512_vtable, "test",
9127 		"016200813020EC986863BEDFC1B121F605C1215645018AEA1A7B215A564DE9EB1B38A67AA1128B80CE391C4FB71187654AAA3431027BFC7F395766CA988C964DC56D",
9128 		"013E99020ABF5CEE7525D16B69B229652AB6BDF2AFFCAEF38773B4B7D08725F10CDB93482FDCC54EDCEE91ECA4166B2A7C6265EF0CE2BD7051B7CEF945BABD47EE6D01FBD0013C674AA79CB39849527916CE301C66EA7CE8B80682786AD60F98F7E78A19CA69EFF5C57400E3B3A0AD66CE0978214D13BAF4E9AC60752F7B155E2DE4DCE3",
9129 		"3081880242013E99020ABF5CEE7525D16B69B229652AB6BDF2AFFCAEF38773B4B7D08725F10CDB93482FDCC54EDCEE91ECA4166B2A7C6265EF0CE2BD7051B7CEF945BABD47EE6D024201FBD0013C674AA79CB39849527916CE301C66EA7CE8B80682786AD60F98F7E78A19CA69EFF5C57400E3B3A0AD66CE0978214D13BAF4E9AC60752F7B155E2DE4DCE3"
9130 	},
9131 
9132 	/* Terminator for list of test vectors. */
9133 	{
9134 		0, 0, 0, 0, 0, 0, 0
9135 	}
9136 };
9137 
9138 static void
9139 test_ECDSA_KAT(const br_ec_impl *iec,
9140 	br_ecdsa_sign sign, br_ecdsa_vrfy vrfy, int asn1)
9141 {
9142 	size_t u;
9143 
9144 	for (u = 0;; u ++) {
9145 		const ecdsa_kat_vector *kv;
9146 		unsigned char hash[64];
9147 		size_t hash_len;
9148 		unsigned char sig[150], sig2[150];
9149 		size_t sig_len, sig2_len;
9150 		br_hash_compat_context hc;
9151 
9152 		kv = &ECDSA_KAT[u];
9153 		if (kv->pub == 0) {
9154 			break;
9155 		}
9156 		kv->hf->init(&hc.vtable);
9157 		kv->hf->update(&hc.vtable, kv->msg, strlen(kv->msg));
9158 		kv->hf->out(&hc.vtable, hash);
9159 		hash_len = (kv->hf->desc >> BR_HASHDESC_OUT_OFF)
9160 			& BR_HASHDESC_OUT_MASK;
9161 		if (asn1) {
9162 			sig_len = hextobin(sig, kv->sasn1);
9163 		} else {
9164 			sig_len = hextobin(sig, kv->sraw);
9165 		}
9166 
9167 		if (vrfy(iec, hash, hash_len,
9168 			kv->pub, sig, sig_len) != 1)
9169 		{
9170 			fprintf(stderr, "ECDSA KAT verify failed (1)\n");
9171 			exit(EXIT_FAILURE);
9172 		}
9173 		hash[0] ^= 0x80;
9174 		if (vrfy(iec, hash, hash_len,
9175 			kv->pub, sig, sig_len) != 0)
9176 		{
9177 			fprintf(stderr, "ECDSA KAT verify shoud have failed\n");
9178 			exit(EXIT_FAILURE);
9179 		}
9180 		hash[0] ^= 0x80;
9181 		if (vrfy(iec, hash, hash_len,
9182 			kv->pub, sig, sig_len) != 1)
9183 		{
9184 			fprintf(stderr, "ECDSA KAT verify failed (2)\n");
9185 			exit(EXIT_FAILURE);
9186 		}
9187 
9188 		sig2_len = sign(iec, kv->hf, hash, kv->priv, sig2);
9189 		if (sig2_len == 0) {
9190 			fprintf(stderr, "ECDSA KAT sign failed\n");
9191 			exit(EXIT_FAILURE);
9192 		}
9193 		if (sig2_len != sig_len || memcmp(sig, sig2, sig_len) != 0) {
9194 			fprintf(stderr, "ECDSA KAT wrong signature value\n");
9195 			exit(EXIT_FAILURE);
9196 		}
9197 
9198 		printf(".");
9199 		fflush(stdout);
9200 	}
9201 }
9202 
9203 static void
9204 test_ECDSA_i31(void)
9205 {
9206 	printf("Test ECDSA/i31: ");
9207 	fflush(stdout);
9208 	printf("[raw]");
9209 	fflush(stdout);
9210 	test_ECDSA_KAT(&br_ec_prime_i31,
9211 		&br_ecdsa_i31_sign_raw, &br_ecdsa_i31_vrfy_raw, 0);
9212 	printf(" [asn1]");
9213 	fflush(stdout);
9214 	test_ECDSA_KAT(&br_ec_prime_i31,
9215 		&br_ecdsa_i31_sign_asn1, &br_ecdsa_i31_vrfy_asn1, 1);
9216 	printf(" done.\n");
9217 	fflush(stdout);
9218 }
9219 
9220 static void
9221 test_ECDSA_i15(void)
9222 {
9223 	printf("Test ECDSA/i15: ");
9224 	fflush(stdout);
9225 	printf("[raw]");
9226 	fflush(stdout);
9227 	test_ECDSA_KAT(&br_ec_prime_i15,
9228 		&br_ecdsa_i15_sign_raw, &br_ecdsa_i15_vrfy_raw, 0);
9229 	printf(" [asn1]");
9230 	fflush(stdout);
9231 	test_ECDSA_KAT(&br_ec_prime_i31,
9232 		&br_ecdsa_i15_sign_asn1, &br_ecdsa_i15_vrfy_asn1, 1);
9233 	printf(" done.\n");
9234 	fflush(stdout);
9235 }
9236 
9237 static void
9238 test_modpow_i31(void)
9239 {
9240 	br_hmac_drbg_context hc;
9241 	int k;
9242 
9243 	printf("Test ModPow/i31: ");
9244 
9245 	br_hmac_drbg_init(&hc, &br_sha256_vtable, "seed modpow", 11);
9246 	for (k = 10; k <= 500; k ++) {
9247 		size_t blen;
9248 		unsigned char bm[128], bx[128], bx1[128], bx2[128];
9249 		unsigned char be[128];
9250 		unsigned mask;
9251 		uint32_t x1[35], m1[35];
9252 		uint16_t x2[70], m2[70];
9253 		uint32_t tmp1[1000];
9254 		uint16_t tmp2[2000];
9255 
9256 		blen = (k + 7) >> 3;
9257 		br_hmac_drbg_generate(&hc, bm, blen);
9258 		br_hmac_drbg_generate(&hc, bx, blen);
9259 		br_hmac_drbg_generate(&hc, be, blen);
9260 		bm[blen - 1] |= 0x01;
9261 		mask = 0xFF >> ((int)(blen << 3) - k);
9262 		bm[0] &= mask;
9263 		bm[0] |= (mask - (mask >> 1));
9264 		bx[0] &= (mask >> 1);
9265 
9266 		br_i31_decode(m1, bm, blen);
9267 		br_i31_decode_mod(x1, bx, blen, m1);
9268 		br_i31_modpow_opt(x1, be, blen, m1, br_i31_ninv31(m1[1]),
9269 			tmp1, (sizeof tmp1) / (sizeof tmp1[0]));
9270 		br_i31_encode(bx1, blen, x1);
9271 
9272 		br_i15_decode(m2, bm, blen);
9273 		br_i15_decode_mod(x2, bx, blen, m2);
9274 		br_i15_modpow_opt(x2, be, blen, m2, br_i15_ninv15(m2[1]),
9275 			tmp2, (sizeof tmp2) / (sizeof tmp2[0]));
9276 		br_i15_encode(bx2, blen, x2);
9277 
9278 		check_equals("ModPow i31/i15", bx1, bx2, blen);
9279 
9280 		printf(".");
9281 		fflush(stdout);
9282 	}
9283 
9284 	printf(" done.\n");
9285 	fflush(stdout);
9286 }
9287 
9288 static void
9289 test_modpow_i62(void)
9290 {
9291 	br_hmac_drbg_context hc;
9292 	int k;
9293 
9294 	printf("Test ModPow/i62: ");
9295 
9296 	br_hmac_drbg_init(&hc, &br_sha256_vtable, "seed modpow", 11);
9297 	for (k = 10; k <= 500; k ++) {
9298 		size_t blen;
9299 		unsigned char bm[128], bx[128], bx1[128], bx2[128];
9300 		unsigned char be[128];
9301 		unsigned mask;
9302 		uint32_t x1[35], m1[35];
9303 		uint16_t x2[70], m2[70];
9304 		uint64_t tmp1[500];
9305 		uint16_t tmp2[2000];
9306 
9307 		blen = (k + 7) >> 3;
9308 		br_hmac_drbg_generate(&hc, bm, blen);
9309 		br_hmac_drbg_generate(&hc, bx, blen);
9310 		br_hmac_drbg_generate(&hc, be, blen);
9311 		bm[blen - 1] |= 0x01;
9312 		mask = 0xFF >> ((int)(blen << 3) - k);
9313 		bm[0] &= mask;
9314 		bm[0] |= (mask - (mask >> 1));
9315 		bx[0] &= (mask >> 1);
9316 
9317 		br_i31_decode(m1, bm, blen);
9318 		br_i31_decode_mod(x1, bx, blen, m1);
9319 		br_i62_modpow_opt(x1, be, blen, m1, br_i31_ninv31(m1[1]),
9320 			tmp1, (sizeof tmp1) / (sizeof tmp1[0]));
9321 		br_i31_encode(bx1, blen, x1);
9322 
9323 		br_i15_decode(m2, bm, blen);
9324 		br_i15_decode_mod(x2, bx, blen, m2);
9325 		br_i15_modpow_opt(x2, be, blen, m2, br_i15_ninv15(m2[1]),
9326 			tmp2, (sizeof tmp2) / (sizeof tmp2[0]));
9327 		br_i15_encode(bx2, blen, x2);
9328 
9329 		check_equals("ModPow i62/i15", bx1, bx2, blen);
9330 
9331 		printf(".");
9332 		fflush(stdout);
9333 	}
9334 
9335 	printf(" done.\n");
9336 	fflush(stdout);
9337 }
9338 
9339 static int
9340 eq_name(const char *s1, const char *s2)
9341 {
9342 	for (;;) {
9343 		int c1, c2;
9344 
9345 		for (;;) {
9346 			c1 = *s1 ++;
9347 			if (c1 >= 'A' && c1 <= 'Z') {
9348 				c1 += 'a' - 'A';
9349 			} else {
9350 				switch (c1) {
9351 				case '-': case '_': case '.': case ' ':
9352 					continue;
9353 				}
9354 			}
9355 			break;
9356 		}
9357 		for (;;) {
9358 			c2 = *s2 ++;
9359 			if (c2 >= 'A' && c2 <= 'Z') {
9360 				c2 += 'a' - 'A';
9361 			} else {
9362 				switch (c2) {
9363 				case '-': case '_': case '.': case ' ':
9364 					continue;
9365 				}
9366 			}
9367 			break;
9368 		}
9369 		if (c1 != c2) {
9370 			return 0;
9371 		}
9372 		if (c1 == 0) {
9373 			return 1;
9374 		}
9375 	}
9376 }
9377 
9378 #define STU(x)   { &test_ ## x, #x }
9379 
9380 static const struct {
9381 	void (*fn)(void);
9382 	const char *name;
9383 } tfns[] = {
9384 	STU(MD5),
9385 	STU(SHA1),
9386 	STU(SHA224),
9387 	STU(SHA256),
9388 	STU(SHA384),
9389 	STU(SHA512),
9390 	STU(MD5_SHA1),
9391 	STU(multihash),
9392 	STU(HMAC),
9393 	STU(HKDF),
9394 	STU(SHAKE),
9395 	STU(HMAC_DRBG),
9396 	STU(AESCTR_DRBG),
9397 	STU(PRF),
9398 	STU(AES_big),
9399 	STU(AES_small),
9400 	STU(AES_ct),
9401 	STU(AES_ct64),
9402 	STU(AES_pwr8),
9403 	STU(AES_x86ni),
9404 	STU(AES_CTRCBC_big),
9405 	STU(AES_CTRCBC_small),
9406 	STU(AES_CTRCBC_ct),
9407 	STU(AES_CTRCBC_ct64),
9408 	STU(AES_CTRCBC_x86ni),
9409 	STU(AES_CTRCBC_pwr8),
9410 	STU(DES_tab),
9411 	STU(DES_ct),
9412 	STU(ChaCha20_ct),
9413 	STU(ChaCha20_sse2),
9414 	STU(Poly1305_ctmul),
9415 	STU(Poly1305_ctmul32),
9416 	STU(Poly1305_ctmulq),
9417 	STU(Poly1305_i15),
9418 	STU(RSA_i15),
9419 	STU(RSA_i31),
9420 	STU(RSA_i32),
9421 	STU(RSA_i62),
9422 	STU(GHASH_ctmul),
9423 	STU(GHASH_ctmul32),
9424 	STU(GHASH_ctmul64),
9425 	STU(GHASH_pclmul),
9426 	STU(GHASH_pwr8),
9427 	STU(CCM),
9428 	STU(EAX),
9429 	STU(GCM),
9430 	STU(EC_prime_i15),
9431 	STU(EC_prime_i31),
9432 	STU(EC_p256_m15),
9433 	STU(EC_p256_m31),
9434 	STU(EC_p256_m62),
9435 	STU(EC_p256_m64),
9436 	STU(EC_c25519_i15),
9437 	STU(EC_c25519_i31),
9438 	STU(EC_c25519_m15),
9439 	STU(EC_c25519_m31),
9440 	STU(EC_c25519_m62),
9441 	STU(EC_c25519_m64),
9442 	STU(ECDSA_i15),
9443 	STU(ECDSA_i31),
9444 	STU(modpow_i31),
9445 	STU(modpow_i62),
9446 	{ 0, 0 }
9447 };
9448 
9449 int
9450 main(int argc, char *argv[])
9451 {
9452 	size_t u;
9453 
9454 	if (argc <= 1) {
9455 		printf("usage: testcrypto all | name...\n");
9456 		printf("individual test names:\n");
9457 		for (u = 0; tfns[u].name; u ++) {
9458 			printf("   %s\n", tfns[u].name);
9459 		}
9460 	} else {
9461 		for (u = 0; tfns[u].name; u ++) {
9462 			int i;
9463 
9464 			for (i = 1; i < argc; i ++) {
9465 				if (eq_name(argv[i], tfns[u].name)
9466 					|| eq_name(argv[i], "all"))
9467 				{
9468 					tfns[u].fn();
9469 					break;
9470 				}
9471 			}
9472 		}
9473 	}
9474 	return 0;
9475 }
9476