iPXE
wycheproof_aes_gcm.c
Go to the documentation of this file.
1/* This file is automatically generated by import.py.
2 *
3 * DO NOT EDIT THIS FILE. Any changes will be lost.
4 *
5 */
6
7#include "../wycheproof_test.h"
8
9/* AES-GCM test case 1 */
10CIPHER_TEST ( wycheproof_aes_gcm_157a9714, &aes_gcm_algorithm,
11 KEY ( 0x5b, 0x96, 0x04, 0xfe, 0x14, 0xea, 0xdb, 0xa9, 0x31, 0xb0,
12 0xcc, 0xf3, 0x48, 0x43, 0xda, 0xb9 ),
13 IV ( 0x02, 0x83, 0x18, 0xab, 0xc1, 0x82, 0x40, 0x29, 0x13, 0x81,
14 0x41, 0xa2 ),
15 ADDITIONAL(),
16 PLAINTEXT ( 0x00, 0x1d, 0x0c, 0x23, 0x12, 0x87, 0xc1, 0x18, 0x27,
17 0x84, 0x55, 0x4c, 0xa3, 0xa2, 0x19, 0x08 ),
18 CIPHERTEXT ( 0x26, 0x07, 0x3c, 0xc1, 0xd8, 0x51, 0xbe, 0xff, 0x17,
19 0x63, 0x84, 0xdc, 0x98, 0x96, 0xd5, 0xff ),
20 AUTH ( 0x0a, 0x3e, 0xa7, 0xa5, 0x48, 0x7c, 0xb5, 0xf7, 0xd7, 0x0f,
21 0xb6, 0xc5, 0x8d, 0x03, 0x85, 0x54 ) );
22
23/* AES-GCM test case 2 */
24CIPHER_TEST ( wycheproof_aes_gcm_9790df61, &aes_gcm_algorithm,
25 KEY ( 0x5b, 0x96, 0x04, 0xfe, 0x14, 0xea, 0xdb, 0xa9, 0x31, 0xb0,
26 0xcc, 0xf3, 0x48, 0x43, 0xda, 0xb9 ),
27 IV ( 0x92, 0x1d, 0x25, 0x07, 0xfa, 0x80, 0x07, 0xb7, 0xbd, 0x06,
28 0x7d, 0x34 ),
29 ADDITIONAL ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88,
30 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
31 PLAINTEXT ( 0x00, 0x1d, 0x0c, 0x23, 0x12, 0x87, 0xc1, 0x18, 0x27,
32 0x84, 0x55, 0x4c, 0xa3, 0xa2, 0x19, 0x08 ),
33 CIPHERTEXT ( 0x49, 0xd8, 0xb9, 0x78, 0x3e, 0x91, 0x19, 0x13, 0xd8,
34 0x70, 0x94, 0xd1, 0xf6, 0x3c, 0xc7, 0x65 ),
35 AUTH ( 0x1e, 0x34, 0x8b, 0xa0, 0x7c, 0xca, 0x2c, 0xf0, 0x4c, 0x61,
36 0x8c, 0xb4, 0xd4, 0x3a, 0x5b, 0x92 ) );
37
38/* AES-GCM test case 3 */
39CIPHER_TEST ( wycheproof_aes_gcm_115b44f1, &aes_gcm_algorithm,
40 KEY ( 0xaa, 0x02, 0x3d, 0x04, 0x78, 0xdc, 0xb2, 0xb2, 0x31, 0x24,
41 0x98, 0x29, 0x3d, 0x9a, 0x91, 0x29 ),
42 IV ( 0x04, 0x32, 0xbc, 0x49, 0xac, 0x34, 0x41, 0x20, 0x81, 0x28,
43 0x81, 0x27 ),
44 ADDITIONAL ( 0xaa, 0xc3, 0x92, 0x31, 0x12, 0x98, 0x72, 0xa2 ),
45 PLAINTEXT ( 0x20, 0x35, 0xaf, 0x31, 0x3d, 0x13, 0x46, 0xab, 0x00,
46 0x15, 0x4f, 0xea, 0x78, 0x32, 0x21, 0x05 ),
47 CIPHERTEXT ( 0xee, 0xa9, 0x45, 0xf3, 0xd0, 0xf9, 0x8c, 0xc0, 0xfb,
48 0xab, 0x47, 0x2a, 0x0c, 0xf2, 0x4e, 0x87 ),
49 AUTH ( 0x4b, 0xb9, 0xb4, 0x81, 0x25, 0x19, 0xda, 0xdf, 0x9e, 0x12,
50 0x32, 0x01, 0x6d, 0x06, 0x81, 0x33 ) );
51
52/* AES-GCM test case 4 */
53CIPHER_TEST ( wycheproof_aes_gcm_b7fccaa3, &aes_gcm_algorithm,
54 KEY ( 0xbe, 0xdc, 0xfb, 0x5a, 0x01, 0x1e, 0xbc, 0x84, 0x60, 0x0f,
55 0xcb, 0x29, 0x6c, 0x15, 0xaf, 0x0d ),
56 IV ( 0x43, 0x8a, 0x54, 0x7a, 0x94, 0xea, 0x88, 0xdc, 0xe4, 0x6c,
57 0x6c, 0x85 ),
58 ADDITIONAL(),
59 PLAINTEXT(),
60 CIPHERTEXT(),
61 AUTH ( 0x96, 0x02, 0x47, 0xba, 0x5c, 0xde, 0x02, 0xe4, 0x1a, 0x31,
62 0x3c, 0x4c, 0x01, 0x36, 0xed, 0xc3 ) );
63
64/* AES-GCM test case 5 */
65CIPHER_TEST ( wycheproof_aes_gcm_91d6ea82, &aes_gcm_algorithm,
66 KEY ( 0x38, 0x4e, 0xa4, 0x16, 0xac, 0x3c, 0x2f, 0x51, 0xa7, 0x6e,
67 0x7d, 0x82, 0x26, 0x34, 0x6d, 0x4e ),
68 IV ( 0xb3, 0x0c, 0x08, 0x47, 0x27, 0xad, 0x1c, 0x59, 0x2a, 0xc2,
69 0x1d, 0x12 ),
70 ADDITIONAL(),
71 PLAINTEXT ( 0x35 ),
72 CIPHERTEXT ( 0x54 ),
73 AUTH ( 0x7c, 0x1e, 0x4a, 0xe8, 0x8b, 0xb2, 0x7e, 0x56, 0x38, 0x34,
74 0x3c, 0xb9, 0xfd, 0x3f, 0x63, 0x37 ) );
75
76/* AES-GCM test case 6 */
77CIPHER_TEST ( wycheproof_aes_gcm_e6ac9d52, &aes_gcm_algorithm,
78 KEY ( 0xca, 0xe3, 0x1c, 0xd9, 0xf5, 0x55, 0x26, 0xeb, 0x03, 0x82,
79 0x41, 0xfc, 0x44, 0xca, 0xc1, 0xe5 ),
80 IV ( 0xb5, 0xe0, 0x06, 0xde, 0xd5, 0x53, 0x11, 0x0e, 0x6d, 0xc5,
81 0x65, 0x29 ),
82 ADDITIONAL(),
83 PLAINTEXT ( 0xd1, 0x09, 0x89, 0xf2, 0xc5, 0x2e, 0x94, 0xad ),
84 CIPHERTEXT ( 0xa0, 0x36, 0xea, 0xd0, 0x31, 0x93, 0x90, 0x3f ),
85 AUTH ( 0x3b, 0x62, 0x69, 0x40, 0xe0, 0xe9, 0xf0, 0xcb, 0xea, 0x8e,
86 0x18, 0xc4, 0x37, 0xfd, 0x60, 0x11 ) );
87
88/* AES-GCM test case 7 */
89CIPHER_TEST ( wycheproof_aes_gcm_e313ce55, &aes_gcm_algorithm,
90 KEY ( 0xdd, 0x61, 0x97, 0xcd, 0x63, 0xc9, 0x63, 0x91, 0x9c, 0xf0,
91 0xc2, 0x73, 0xef, 0x6b, 0x28, 0xbf ),
92 IV ( 0xec, 0xb0, 0xc4, 0x2f, 0x70, 0x00, 0xef, 0x0e, 0x6f, 0x95,
93 0xf2, 0x4d ),
94 ADDITIONAL(),
95 PLAINTEXT ( 0x4d, 0xcc, 0x14, 0x85, 0x36, 0x58, 0x66, 0xe2, 0x5a,
96 0xc3, 0xf2, 0xca, 0x6a, 0xba, 0x97 ),
97 CIPHERTEXT ( 0x8a, 0x99, 0x92, 0x38, 0x8e, 0x73, 0x5f, 0x80, 0xee,
98 0x18, 0xf4, 0xa6, 0x3c, 0x10, 0xad ),
99 AUTH ( 0x14, 0x86, 0xa9, 0x1c, 0xcc, 0xf9, 0x2c, 0x9a, 0x5b, 0x00,
100 0xf7, 0xb0, 0xe0, 0x34, 0x89, 0x1c ) );
101
102/* AES-GCM test case 8 */
103CIPHER_TEST ( wycheproof_aes_gcm_74a144dd, &aes_gcm_algorithm,
104 KEY ( 0xff, 0xdf, 0x42, 0x28, 0x36, 0x1e, 0xa1, 0xf8, 0x16, 0x58,
105 0x52, 0x13, 0x6b, 0x34, 0x80, 0xf7 ),
106 IV ( 0x0e, 0x16, 0x66, 0xf2, 0xdc, 0x65, 0x2f, 0x77, 0x08, 0xfb,
107 0x8f, 0x0d ),
108 ADDITIONAL(),
109 PLAINTEXT ( 0x25, 0xb1, 0x2e, 0x28, 0xac, 0x0e, 0xf6, 0xea, 0xd0,
110 0x22, 0x6a, 0x3b, 0x22, 0x88, 0xc8, 0x00 ),
111 CIPHERTEXT ( 0xf7, 0xbd, 0x37, 0x9d, 0x13, 0x04, 0x77, 0x17, 0x6b,
112 0x8b, 0xb3, 0xcb, 0x23, 0xdb, 0xbb, 0xaa ),
113 AUTH ( 0x1e, 0xe6, 0x51, 0x3c, 0xe3, 0x0c, 0x78, 0x73, 0xf5, 0x9d,
114 0xd4, 0x35, 0x0a, 0x58, 0x8f, 0x42 ) );
115
116/* AES-GCM test case 9 */
117CIPHER_TEST ( wycheproof_aes_gcm_a14ec21f, &aes_gcm_algorithm,
118 KEY ( 0xc1, 0x5e, 0xd2, 0x27, 0xdd, 0x2e, 0x23, 0x7e, 0xcd, 0x08,
119 0x7e, 0xaa, 0xaa, 0xd1, 0x9e, 0xa4 ),
120 IV ( 0x96, 0x5f, 0xf6, 0x64, 0x31, 0x16, 0xac, 0x14, 0x43, 0xa2,
121 0xde, 0xc7 ),
122 ADDITIONAL(),
123 PLAINTEXT ( 0xfe, 0xe6, 0x2f, 0xde, 0x97, 0x3f, 0xe0, 0x25, 0xad,
124 0x6b, 0x32, 0x2d, 0xcd, 0xf3, 0xc6, 0x3f, 0xc7 ),
125 CIPHERTEXT ( 0x0d, 0xe5, 0x1f, 0xe4, 0xf7, 0xf2, 0xd1, 0xf0, 0xf9,
126 0x17, 0x56, 0x9f, 0x5c, 0x6d, 0x1b, 0x00, 0x9c ),
127 AUTH ( 0x6c, 0xd8, 0x52, 0x14, 0x22, 0xc0, 0x17, 0x7e, 0x83, 0xef,
128 0x1b, 0x7a, 0x84, 0x5d, 0x97, 0xdb ) );
129
130/* AES-GCM test case 10 */
131CIPHER_TEST ( wycheproof_aes_gcm_70b4e6f3, &aes_gcm_algorithm,
132 KEY ( 0xa8, 0xee, 0x11, 0xb2, 0x6d, 0x7c, 0xeb, 0x7f, 0x17, 0xea,
133 0xa1, 0xe4, 0xb8, 0x3a, 0x2c, 0xf6 ),
134 IV ( 0xfb, 0xbc, 0x04, 0xfd, 0x6e, 0x02, 0x5b, 0x71, 0x93, 0xeb,
135 0x57, 0xf6 ),
136 ADDITIONAL(),
137 PLAINTEXT ( 0xc0, 0x8f, 0x08, 0x5e, 0x6a, 0x9e, 0x0e, 0xf3, 0x63,
138 0x62, 0x80, 0xc1, 0x1e, 0xcf, 0xad, 0xf0, 0xc1, 0xe7,
139 0x29, 0x19, 0xff, 0xc1, 0x7e, 0xaf ),
140 CIPHERTEXT ( 0x7c, 0xd9, 0xf4, 0xe4, 0xf3, 0x65, 0x70, 0x4f, 0xff,
141 0x3b, 0x99, 0x00, 0xaa, 0x93, 0xba, 0x54, 0xb6, 0x72,
142 0xba, 0xc5, 0x54, 0x27, 0x56, 0x50 ),
143 AUTH ( 0xf4, 0xeb, 0x19, 0x32, 0x41, 0x22, 0x6d, 0xb0, 0x17, 0xb3,
144 0x2e, 0xc3, 0x8c, 0xa4, 0x72, 0x17 ) );
145
146/* AES-GCM test case 11 */
147CIPHER_TEST ( wycheproof_aes_gcm_7f9ca8b2, &aes_gcm_algorithm,
148 KEY ( 0x28, 0xff, 0x3d, 0xef, 0x08, 0x17, 0x93, 0x11, 0xe2, 0x73,
149 0x4c, 0x6d, 0x1c, 0x4e, 0x28, 0x71 ),
150 IV ( 0x32, 0xbc, 0xb9, 0xb5, 0x69, 0xe3, 0xb8, 0x52, 0xd3, 0x7c,
151 0x76, 0x6a ),
152 ADDITIONAL ( 0xc3 ),
153 PLAINTEXT ( 0xdf, 0xc6, 0x1a, 0x20, 0xdf, 0x85, 0x05, 0xb5, 0x3e,
154 0x3c, 0xd5, 0x9f, 0x25, 0x77, 0x0d, 0x50, 0x18, 0xad,
155 0xd3, 0xd6 ),
156 CIPHERTEXT ( 0xf5, 0x8d, 0x45, 0x32, 0x12, 0xc2, 0xc8, 0xa4, 0x36,
157 0xe9, 0x28, 0x36, 0x72, 0xf5, 0x79, 0xf1, 0x19, 0x12,
158 0x29, 0x78 ),
159 AUTH ( 0x59, 0x01, 0x13, 0x1d, 0x07, 0x60, 0xc8, 0x71, 0x59, 0x01,
160 0xd8, 0x81, 0xfd, 0xfd, 0x3b, 0xc0 ) );
161
162/* AES-GCM test case 12 */
163CIPHER_TEST ( wycheproof_aes_gcm_2f81ba3b, &aes_gcm_algorithm,
164 KEY ( 0xe6, 0x3a, 0x43, 0x21, 0x6c, 0x08, 0x86, 0x72, 0x10, 0xe2,
165 0x48, 0x85, 0x9e, 0xb5, 0xe9, 0x9c ),
166 IV ( 0x9c, 0x3a, 0x42, 0x63, 0xd9, 0x83, 0x45, 0x66, 0x58, 0xaa,
167 0xd4, 0xb1 ),
168 ADDITIONAL ( 0x83, 0x4a, 0xfd, 0xc5, 0xc7, 0x37, 0x18, 0x6b ),
169 PLAINTEXT ( 0xb1, 0x4d, 0xa5, 0x6b, 0x04, 0x62, 0xdc, 0x05, 0xb8,
170 0x71, 0xfc, 0x81, 0x52, 0x73, 0xff, 0x48, 0x10, 0xf9,
171 0x2f, 0x4b ),
172 CIPHERTEXT ( 0xbf, 0x86, 0x46, 0x16, 0xc2, 0x34, 0x75, 0x09, 0xca,
173 0x9b, 0x10, 0x44, 0x63, 0x79, 0xb9, 0xbd, 0xbb, 0x3b,
174 0x8f, 0x64 ),
175 AUTH ( 0xa9, 0x7d, 0x25, 0xb4, 0x90, 0x39, 0x0b, 0x53, 0xc5, 0xdb,
176 0x91, 0xf6, 0xee, 0x2a, 0x15, 0xb8 ) );
177
178/* AES-GCM test case 13 */
179CIPHER_TEST ( wycheproof_aes_gcm_3324275e, &aes_gcm_algorithm,
180 KEY ( 0x38, 0x44, 0x98, 0x90, 0x23, 0x4e, 0xb8, 0xaf, 0xab, 0x0b,
181 0xbf, 0x82, 0xe2, 0x38, 0x54, 0x54 ),
182 IV ( 0x33, 0xe9, 0x06, 0x58, 0x41, 0x6e, 0x7c, 0x1a, 0x7c, 0x00,
183 0x5f, 0x11 ),
184 ADDITIONAL ( 0x40, 0x20, 0x85, 0x5c, 0x66, 0xac, 0x45, 0x95, 0x05,
185 0x83, 0x95, 0xf3, 0x67, 0x20, 0x1c, 0x4c ),
186 PLAINTEXT ( 0xf7, 0x62, 0x77, 0x6b, 0xf8, 0x31, 0x63, 0xb3, 0x23,
187 0xca, 0x63, 0xa6, 0xb3, 0xad, 0xea, 0xc1, 0xe1, 0x35,
188 0x72, 0x62 ),
189 CIPHERTEXT ( 0xa6, 0xf2, 0xef, 0x3c, 0x7e, 0xf7, 0x4a, 0x12, 0x6d,
190 0xd2, 0xd5, 0xf6, 0x67, 0x39, 0x64, 0xe2, 0x7d, 0x5b,
191 0x34, 0xb6 ),
192 AUTH ( 0xb8, 0xbb, 0xdc, 0x4f, 0x50, 0x14, 0xbc, 0x75, 0x2c, 0x8b,
193 0x4e, 0x9b, 0x87, 0xf6, 0x50, 0xa3 ) );
194
195/* AES-GCM test case 14 */
196CIPHER_TEST ( wycheproof_aes_gcm_d0b2b893, &aes_gcm_algorithm,
197 KEY ( 0x6a, 0x68, 0x67, 0x1d, 0xfe, 0x32, 0x3d, 0x41, 0x98, 0x94,
198 0x38, 0x1f, 0x85, 0xeb, 0x63, 0xfd ),
199 IV ( 0x9f, 0x0d, 0x85, 0xb6, 0x05, 0x71, 0x1f, 0x34, 0xcd, 0x2a,
200 0x35, 0xba ),
201 ADDITIONAL ( 0x76, 0xeb, 0x5f, 0x14, 0x72, 0x50, 0xfa, 0x3c, 0x12,
202 0xbf, 0xf0, 0xa6, 0xe3, 0x93, 0x4a, 0x0b, 0x16, 0x86,
203 0x0c, 0xf1, 0x16, 0x46, 0x77, 0x3b ),
204 PLAINTEXT ( 0x0f, 0xc6, 0x78, 0x99, 0xc3, 0xf1, 0xbb, 0xe1, 0x96,
205 0xd9, 0x0f, 0x1e, 0xca, 0x37, 0x97, 0x38, 0x92, 0x30,
206 0xaa, 0x37 ),
207 CIPHERTEXT ( 0xbd, 0x64, 0x80, 0x2c, 0xfe, 0xba, 0xeb, 0x48, 0x7d,
208 0x3a, 0x8f, 0x76, 0xce, 0x94, 0x3a, 0x37, 0xb3, 0x47,
209 0x2d, 0xd5 ),
210 AUTH ( 0xfc, 0xe9, 0xa5, 0xb5, 0x30, 0xc7, 0xd7, 0xaf, 0x71, 0x8b,
211 0xe1, 0xec, 0x0a, 0xe9, 0xed, 0x4d ) );
212
213/* AES-GCM test case 15 */
214CIPHER_TEST ( wycheproof_aes_gcm_d06a8069, &aes_gcm_algorithm,
215 KEY ( 0xbb, 0x57, 0x1c, 0x16, 0x01, 0x32, 0xb0, 0xc8, 0xd5, 0xd1,
216 0x90, 0xd0, 0xbc, 0x35, 0x6d, 0xdc ),
217 IV ( 0x25, 0x96, 0xc4, 0x40, 0xcf, 0x02, 0x32, 0x95, 0x0e, 0xc6,
218 0x6b, 0xc4 ),
219 ADDITIONAL(),
220 PLAINTEXT ( 0x05, 0x3b, 0xe1, 0xb6, 0x19, 0x0a, 0x71, 0x7f, 0xc7,
221 0x4c, 0x87, 0x9e, 0x6f, 0xd6, 0x2d, 0xc4, 0x46, 0x28,
222 0x49, 0x55, 0x07, 0xe5, 0x0d, 0x66, 0x22, 0x71, 0xde,
223 0xe7, 0x95, 0xa4, 0xad, 0x26, 0xe0, 0xc4, 0xf8, 0x6c,
224 0xb6, 0xb2, 0x0a, 0xc6, 0xbd, 0x9d, 0x68, 0x2d, 0x2d,
225 0x8a, 0x05, 0xc9, 0xda, 0xd8, 0x75, 0xa6, 0x91, 0x1b,
226 0x49, 0xea, 0x0a, 0xf4, 0xf1, 0x7c, 0x97, 0xa5, 0xf2 ),
227 CIPHERTEXT ( 0xb1, 0xcf, 0xad, 0x14, 0x2a, 0x46, 0x2f, 0x36, 0x56,
228 0xe0, 0x92, 0x16, 0x27, 0xfd, 0x41, 0xd4, 0xf1, 0xfa,
229 0x8e, 0x2f, 0x8b, 0xd9, 0x4b, 0xb5, 0x1f, 0xdc, 0xf0,
230 0x6f, 0x60, 0x62, 0x96, 0xf7, 0xd2, 0x88, 0x53, 0x37,
231 0xbe, 0xd7, 0xa4, 0xca, 0x6d, 0xdb, 0x4a, 0x9f, 0xc7,
232 0xfd, 0xb2, 0x47, 0x6b, 0x5f, 0x7f, 0xa5, 0x22, 0x0e,
233 0x1d, 0x67, 0x52, 0xa5, 0xe7, 0xc3, 0x1c, 0x91, 0x6c ),
234 AUTH ( 0xa2, 0x31, 0xb6, 0x17, 0x35, 0x2f, 0xfd, 0xb6, 0x3d, 0x32,
235 0xd6, 0x9d, 0x99, 0xe7, 0xd6, 0x29 ) );
236
237/* AES-GCM test case 16 */
238CIPHER_TEST ( wycheproof_aes_gcm_f9082b41, &aes_gcm_algorithm,
239 KEY ( 0xe1, 0x22, 0x60, 0xfc, 0xd3, 0x55, 0xa5, 0x1a, 0x0d, 0x01,
240 0xbb, 0x1f, 0x6f, 0xa5, 0x38, 0xc2 ),
241 IV ( 0x5d, 0xfc, 0x37, 0x36, 0x6f, 0x56, 0x88, 0x27, 0x51, 0x47,
242 0xd3, 0xf9 ),
243 ADDITIONAL(),
244 PLAINTEXT ( 0xd9, 0x02, 0xde, 0xea, 0xb1, 0x75, 0xc0, 0x08, 0x32,
245 0x9a, 0x33, 0xbf, 0xac, 0xcd, 0x5c, 0x0e, 0xb3, 0xa6,
246 0xa1, 0x52, 0xa1, 0x51, 0x0e, 0x7d, 0xb0, 0x4f, 0xa0,
247 0xaf, 0xf7, 0xce, 0x42, 0x88, 0x53, 0x0d, 0xb6, 0xa8,
248 0x0f, 0xa7, 0xfe, 0xa5, 0x82, 0xaa, 0x7d, 0x46, 0xd7,
249 0xd5, 0x6e, 0x70, 0x8d, 0x2b, 0xb0, 0xc5, 0xed, 0xd3,
250 0xd2, 0x66, 0x48, 0xd3, 0x36, 0xc3, 0x62, 0x0e, 0xa5,
251 0x5e ),
252 CIPHERTEXT ( 0xd3, 0x3b, 0xf6, 0x72, 0x2f, 0xc2, 0x93, 0x84, 0xfa,
253 0xd7, 0x5f, 0x99, 0x02, 0x48, 0xb9, 0x52, 0x8e, 0x09,
254 0x59, 0xaa, 0x67, 0xec, 0x66, 0x86, 0x9d, 0xc3, 0x99,
255 0x6c, 0x67, 0xa2, 0xd5, 0x59, 0xe7, 0xd7, 0x7c, 0xe5,
256 0x95, 0x5f, 0x8c, 0xad, 0x2a, 0x4d, 0xf5, 0xfd, 0xc3,
257 0xac, 0xcc, 0xaf, 0xa7, 0xbc, 0x0d, 0xef, 0x53, 0xd8,
258 0x48, 0x11, 0x12, 0x56, 0x90, 0x3e, 0x5a, 0xdd, 0x04,
259 0x20 ),
260 AUTH ( 0x8b, 0xc8, 0x33, 0xde, 0x51, 0x08, 0x63, 0xb4, 0xb4, 0x32,
261 0xc3, 0xcb, 0xf4, 0x5a, 0xa7, 0xcc ) );
262
263/* AES-GCM test case 17 */
264CIPHER_TEST ( wycheproof_aes_gcm_8224427d, &aes_gcm_algorithm,
265 KEY ( 0x97, 0xec, 0x85, 0xa6, 0x9a, 0x05, 0x13, 0x1c, 0xd4, 0xff,
266 0x64, 0x39, 0x72, 0xf6, 0xd8, 0xf9 ),
267 IV ( 0x91, 0x89, 0xe0, 0xee, 0xdc, 0xc4, 0x13, 0xa0, 0xba, 0x1e,
268 0x63, 0xd2 ),
269 ADDITIONAL(),
270 PLAINTEXT ( 0x10, 0xac, 0xef, 0xa6, 0xf3, 0x95, 0x9f, 0xae, 0xcb,
271 0x5c, 0xfd, 0xae, 0xe8, 0xaa, 0xf0, 0x9d, 0x43, 0x81,
272 0xb2, 0xb1, 0x47, 0xe0, 0xb1, 0x34, 0x50, 0xc2, 0x6e,
273 0xe0, 0x7f, 0x29, 0xed, 0xaa, 0x9a, 0x1f, 0x1a, 0xf4,
274 0xe2, 0xd1, 0x11, 0xde, 0xa7, 0xff, 0x68, 0x1a, 0x19,
275 0xfc, 0x3a, 0x4f, 0xd6, 0x6d, 0xf6, 0xa1, 0x79, 0x85,
276 0xb0, 0x65, 0x43, 0xa3, 0xb6, 0xc0, 0xe4, 0xe5, 0x1a,
277 0x54, 0xb7 ),
278 CIPHERTEXT ( 0xee, 0xfd, 0xf8, 0x99, 0x97, 0x24, 0x4e, 0x06, 0x5f,
279 0xf1, 0x9a, 0xc2, 0x37, 0x4d, 0xc9, 0x2e, 0xe7, 0x68,
280 0x99, 0xdd, 0xcb, 0xe7, 0xc8, 0x34, 0xdc, 0xc6, 0x57,
281 0x24, 0x2f, 0xc0, 0xf6, 0xdd, 0x38, 0x27, 0x23, 0x73,
282 0xba, 0x9b, 0x54, 0x93, 0x16, 0xa3, 0x6f, 0x15, 0x22,
283 0xe1, 0xca, 0xb2, 0x46, 0x15, 0x78, 0x75, 0x89, 0x8c,
284 0x96, 0x6e, 0xec, 0x56, 0x3d, 0x57, 0xec, 0xa5, 0xc7,
285 0xd3, 0x2d ),
286 AUTH ( 0x23, 0xaa, 0xa2, 0xc6, 0xb6, 0x80, 0xfc, 0xaa, 0xeb, 0x2c,
287 0x7a, 0x55, 0x72, 0x6d, 0x4b, 0xc0 ) );
288
289/* AES-GCM test case 18 */
290CIPHER_TEST ( wycheproof_aes_gcm_110d48ee, &aes_gcm_algorithm,
291 KEY ( 0x65, 0xd3, 0x8f, 0x0b, 0x26, 0x8f, 0x18, 0x0d, 0x6b, 0xa5,
292 0x48, 0xd5, 0x09, 0x11, 0x1d, 0xde ),
293 IV ( 0xe1, 0x4d, 0xfc, 0x27, 0x39, 0x4a, 0xc8, 0x46, 0xc2, 0x37,
294 0x3e, 0xa7 ),
295 ADDITIONAL(),
296 PLAINTEXT ( 0x1f, 0xa7, 0x6d, 0x79, 0x95, 0xdc, 0x99, 0x6a, 0x5f,
297 0x5d, 0xab, 0xaa, 0x4b, 0xe4, 0x01, 0xbe, 0x14, 0xf4,
298 0xd4, 0x70, 0x6a, 0x21, 0x3a, 0x4d, 0xd7, 0x25, 0xdf,
299 0x38, 0x6e, 0xc1, 0x47, 0xa6, 0xbe, 0x07, 0x49, 0x47,
300 0xc7, 0x33, 0x09, 0x4f, 0x47, 0xa7, 0x22, 0x25, 0x52,
301 0x37, 0x67, 0x40, 0xaa, 0x83, 0x48, 0xa0, 0xae, 0x1c,
302 0x7f, 0x2d, 0x97, 0x2a, 0x0a, 0xd6, 0x64, 0xf8, 0xb8,
303 0xec, 0x81, 0xdf, 0xc9, 0xaf, 0x07, 0x8b, 0x61, 0xda,
304 0xea, 0x5d, 0xde, 0x87, 0x4f, 0xd7, 0x37, 0x75, 0xb4,
305 0xcd, 0x65, 0xac, 0xf0, 0x69, 0xad, 0xa0, 0xb2, 0xb9,
306 0xbf, 0xbb, 0x4a, 0x98, 0x17, 0xba, 0x41, 0xd4, 0xdc,
307 0xaf, 0xf7, 0x65, 0x3d, 0xf5, 0xc8, 0xcd, 0x9c, 0xe7,
308 0xf5, 0x9e, 0xec, 0x92, 0xae, 0x9e, 0x61, 0x31, 0x4e,
309 0x03, 0xef, 0x48, 0x83, 0x98, 0x10, 0xea, 0x82, 0x55,
310 0x20 ),
311 CIPHERTEXT ( 0x40, 0xdc, 0x9b, 0x13, 0x9e, 0x88, 0x8f, 0x18, 0x11,
312 0x39, 0x11, 0x34, 0xb1, 0x5e, 0x91, 0x48, 0x26, 0x41,
313 0x4a, 0x99, 0xdb, 0x51, 0x2a, 0x06, 0x32, 0xdc, 0x4c,
314 0x56, 0xd7, 0x0f, 0x7b, 0x79, 0x91, 0xe9, 0x94, 0x5a,
315 0x20, 0x25, 0x89, 0x0e, 0x95, 0x16, 0x99, 0xcf, 0x6b,
316 0x2c, 0xce, 0xe0, 0x93, 0xc9, 0xa6, 0xa7, 0x52, 0xb9,
317 0x8f, 0xf6, 0x96, 0x24, 0x01, 0x26, 0x75, 0x9f, 0x48,
318 0x02, 0x99, 0xc1, 0xdd, 0x82, 0xaa, 0x2c, 0x4f, 0x46,
319 0x2a, 0x4a, 0x8a, 0xd1, 0xad, 0x0c, 0x7a, 0x75, 0x5f,
320 0x07, 0x90, 0x8c, 0x9c, 0x0d, 0x33, 0x6d, 0x57, 0xdb,
321 0xde, 0xbc, 0x94, 0x0b, 0xba, 0xe2, 0x8b, 0xa0, 0x33,
322 0x6d, 0xcc, 0xaf, 0x6b, 0xfd, 0xc9, 0x36, 0x23, 0x68,
323 0x6f, 0x94, 0x87, 0xef, 0x08, 0x84, 0xd1, 0x00, 0xb6,
324 0xb9, 0x89, 0x49, 0xaf, 0xbd, 0x42, 0x17, 0xdc, 0x46,
325 0x40 ),
326 AUTH ( 0x42, 0x18, 0xd6, 0xac, 0x98, 0xc0, 0x44, 0x4b, 0xc6, 0x4e,
327 0xcb, 0xe1, 0xd7, 0x63, 0x13, 0x6a ) );
328
329/* AES-GCM test case 19 */
330CIPHER_TEST ( wycheproof_aes_gcm_417222f0, &aes_gcm_algorithm,
331 KEY ( 0x3c, 0x55, 0xf8, 0x8e, 0x9f, 0xaa, 0x0d, 0x68, 0xab, 0x50,
332 0xd0, 0x2b, 0x47, 0x16, 0x12, 0x76 ),
333 IV ( 0xd7, 0x67, 0xc4, 0x8d, 0x20, 0x37, 0xb4, 0xbd, 0x2c, 0x23,
334 0x1b, 0xbd ),
335 ADDITIONAL(),
336 PLAINTEXT ( 0x5d, 0x6a, 0xdd, 0x48, 0xe7, 0xa5, 0x70, 0x4e, 0x54,
337 0xf9, 0xc2, 0x82, 0x9a, 0x9b, 0x42, 0x83, 0xdc, 0xe0,
338 0xd3, 0xa6, 0x5b, 0x13, 0x3e, 0xba, 0x37, 0x93, 0xc4,
339 0xfb, 0xfa, 0x1d, 0x8e, 0x3a, 0x25, 0x39, 0xd0, 0xd4,
340 0xf3, 0xde, 0x38, 0x15, 0x98, 0xce, 0x5b, 0x23, 0x60,
341 0x17, 0x3f, 0xbd, 0x14, 0x94, 0x76, 0xc3, 0x16, 0x92,
342 0xc5, 0xd6, 0xe8, 0x72, 0xfc, 0xe4, 0x02, 0x19, 0x37,
343 0x89, 0x49, 0xc2, 0xe7, 0x0b, 0x5f, 0x1b, 0x9f, 0x0a,
344 0x1d, 0x5f, 0x38, 0x35, 0x2a, 0xd8, 0x14, 0xb2, 0xa0,
345 0x35, 0xbb, 0x3f, 0x3f, 0x26, 0x42, 0x5d, 0x83, 0x1a,
346 0x2f, 0x7a, 0x5e, 0x65, 0xc5, 0xdf, 0xcd, 0x91, 0xa3,
347 0x15, 0xc2, 0xb2, 0x4f, 0x53, 0xa6, 0x62, 0x60, 0x5e,
348 0xa4, 0x08, 0x57, 0xdd, 0x98, 0x0e, 0x9b, 0xe5, 0xcd,
349 0xad, 0x00, 0x0c, 0x56, 0x9f, 0x2d, 0x20, 0x4d, 0x4b,
350 0xd3, 0xb0 ),
351 CIPHERTEXT ( 0x17, 0xd7, 0x2d, 0x90, 0xbd, 0x23, 0xe0, 0x76, 0xd8,
352 0x36, 0x4a, 0x87, 0xec, 0xb9, 0xac, 0x58, 0xac, 0xc5,
353 0xde, 0x46, 0x29, 0xbf, 0xd5, 0x90, 0x40, 0x9b, 0x8b,
354 0xf1, 0xfc, 0xd3, 0xa2, 0xf6, 0x02, 0x73, 0x1b, 0x46,
355 0x14, 0xce, 0xc1, 0x5e, 0x77, 0x3e, 0xa6, 0x5a, 0x65,
356 0xe7, 0x21, 0x09, 0x94, 0x25, 0x6b, 0xf5, 0x45, 0x0a,
357 0x25, 0xac, 0xb5, 0x27, 0x26, 0x9c, 0x06, 0x5f, 0x2e,
358 0x2f, 0x22, 0x79, 0xd1, 0xfe, 0x8b, 0x3e, 0xda, 0x98,
359 0xdc, 0xf8, 0x7b, 0x34, 0x8f, 0x15, 0x28, 0x37, 0x7b,
360 0xbd, 0xd2, 0x58, 0x35, 0x5d, 0x46, 0xe0, 0x35, 0x33,
361 0x04, 0x83, 0xd8, 0x09, 0x7e, 0x80, 0xc7, 0xde, 0x9b,
362 0xbb, 0x60, 0x6d, 0xdf, 0x72, 0x3f, 0x29, 0x09, 0x21,
363 0x7f, 0xfd, 0xd1, 0x8e, 0x8b, 0xdb, 0xd7, 0xb0, 0x80,
364 0x62, 0xf1, 0xdc, 0xba, 0x96, 0x0e, 0x5c, 0x0d, 0x29,
365 0x0f, 0x5f ),
366 AUTH ( 0x09, 0x0b, 0x8c, 0x2e, 0xc9, 0x8e, 0x41, 0x16, 0x18, 0x6d,
367 0x0e, 0x5f, 0xbe, 0xfe, 0xb9, 0xc2 ) );
368
369/* AES-GCM test case 20 */
370CIPHER_TEST ( wycheproof_aes_gcm_f01459e0, &aes_gcm_algorithm,
371 KEY ( 0x62, 0xb3, 0x88, 0x18, 0x32, 0xd4, 0x28, 0xb6, 0xf9, 0x00,
372 0xca, 0xcf, 0xa0, 0xfc, 0x5c, 0xd8 ),
373 IV ( 0xf4, 0xcb, 0x98, 0xcc, 0x99, 0xe7, 0xbc, 0x42, 0x4a, 0x98,
374 0x38, 0x4e ),
375 ADDITIONAL(),
376 PLAINTEXT ( 0x0b, 0x91, 0xdd, 0x36, 0xa6, 0xfa, 0x96, 0x7a, 0x25,
377 0x7b, 0x26, 0x7d, 0x12, 0xcb, 0xc2, 0x0b, 0x56, 0xed,
378 0x61, 0x5b, 0x20, 0x5d, 0x04, 0x4a, 0x04, 0xb4, 0xae,
379 0x8a, 0xaa, 0x36, 0x5b, 0xd2, 0x9a, 0x3b, 0x8f, 0x47,
380 0xa0, 0x82, 0x8e, 0xf6, 0x33, 0x24, 0xd1, 0xff, 0x92,
381 0x4c, 0x68, 0x09, 0x0a, 0xba, 0xaa, 0xd7, 0x8d, 0xf6,
382 0x02, 0xed, 0xee, 0x06, 0x21, 0xb8, 0x23, 0xf9, 0x4c,
383 0x35, 0xad, 0xa7, 0xb6, 0x2d, 0x81, 0xf2, 0x1d, 0xd9,
384 0x94, 0x5d, 0x1a, 0xbb, 0x4e, 0xf8, 0x82, 0xcf, 0xab,
385 0x12, 0xc2, 0xe4, 0xce, 0xc7, 0x05, 0xdf, 0x3d, 0x66,
386 0x91, 0x83, 0xfe, 0x68, 0x17, 0x53, 0x50, 0x3a, 0x99,
387 0xa8, 0x71, 0x63, 0x79, 0x53, 0x53, 0x7e, 0xf4, 0x79,
388 0xb1, 0xf6, 0x2d, 0xe7, 0x81, 0x9d, 0xbb, 0x5c, 0x95,
389 0x0d, 0xe7, 0x72, 0x20, 0x90, 0x94, 0x2d, 0x38, 0x12,
390 0x9a, 0xef, 0xa7 ),
391 CIPHERTEXT ( 0x00, 0x57, 0x46, 0x15, 0x88, 0x3e, 0x22, 0x26, 0x57,
392 0xbd, 0xf3, 0x4e, 0x93, 0x27, 0x88, 0x8f, 0x5d, 0x53,
393 0x2d, 0x08, 0x65, 0x81, 0x83, 0x4c, 0x62, 0xad, 0xf5,
394 0x4c, 0x7f, 0xee, 0x46, 0x92, 0x7c, 0xa2, 0x7c, 0xba,
395 0x19, 0x3d, 0x86, 0xc6, 0x14, 0x0b, 0x36, 0x10, 0xa2,
396 0xcd, 0x16, 0xba, 0x29, 0x58, 0x14, 0xb5, 0xb7, 0xd6,
397 0xa1, 0xc8, 0xd3, 0xf0, 0x39, 0xe0, 0xe8, 0xf8, 0xd7,
398 0x94, 0x2b, 0x06, 0x16, 0xa9, 0xb9, 0xf0, 0x01, 0x28,
399 0x84, 0x31, 0x1b, 0x0c, 0x37, 0x0f, 0x9d, 0xd6, 0xb9,
400 0xa3, 0xd8, 0xb6, 0xff, 0x36, 0x17, 0x76, 0x83, 0xc0,
401 0xdd, 0x85, 0x88, 0x50, 0xdd, 0x29, 0x99, 0x3b, 0x3e,
402 0xec, 0x89, 0xa2, 0xab, 0x80, 0x68, 0x03, 0x8e, 0x2c,
403 0x86, 0xa2, 0xe7, 0x1b, 0x5c, 0xac, 0xdb, 0x38, 0xad,
404 0x69, 0xac, 0x05, 0x80, 0xe2, 0x9a, 0x6f, 0x78, 0x13,
405 0xc1, 0x72, 0x58 ),
406 AUTH ( 0x88, 0xb9, 0x9f, 0x76, 0x83, 0x64, 0xff, 0x9e, 0x95, 0xa9,
407 0x4c, 0xcb, 0xbc, 0x1b, 0x16, 0x6e ) );
408
409/* AES-GCM test case 21 */
410CIPHER_TEST ( wycheproof_aes_gcm_bc589a7e, &aes_gcm_algorithm,
411 KEY ( 0x8a, 0xea, 0xa2, 0x59, 0x1a, 0x45, 0x2e, 0x62, 0x6b, 0x9a,
412 0x64, 0x68, 0xb6, 0x23, 0xbd, 0xfc ),
413 IV ( 0xb9, 0x0f, 0x44, 0x6f, 0x68, 0xae, 0xa5, 0x88, 0xd8, 0x43,
414 0xd0, 0x1a ),
415 ADDITIONAL(),
416 PLAINTEXT ( 0xf0, 0x72, 0x1c, 0x3b, 0x68, 0xd9, 0x05, 0x09, 0x2c,
417 0xad, 0xa6, 0xd5, 0x68, 0xdf, 0x3a, 0x2d, 0xa3, 0x95,
418 0x73, 0xc7, 0xbb, 0x0e, 0x9a, 0x4e, 0xd1, 0x59, 0xa2,
419 0x63, 0x42, 0x37, 0xf9, 0xe7, 0x88, 0x48, 0x8c, 0x06,
420 0xfe, 0x8a, 0x7e, 0x1e, 0x01, 0xd1, 0xa1, 0xc9, 0x85,
421 0x54, 0x3e, 0xcf, 0x90, 0xf3, 0xd3, 0x2e, 0x57, 0xd3,
422 0x3c, 0x3d, 0xf6, 0xc1, 0x65, 0xb7, 0xed, 0xc6, 0xfb,
423 0xcf, 0x8b, 0xf2, 0xd0, 0x43, 0xd1, 0xb7, 0xc0, 0x06,
424 0x03, 0x09, 0xa2, 0x95, 0x65, 0xa0, 0x04, 0xea, 0x32,
425 0x14, 0xd4, 0xe4, 0xf7, 0xde, 0xde, 0xac, 0x2d, 0x74,
426 0x57, 0x6c, 0x01, 0x9b, 0x5f, 0xa0, 0x00, 0xd0, 0x25,
427 0x91, 0x7a, 0xf6, 0xf8, 0x63, 0x10, 0x94, 0x21, 0x02,
428 0xa3, 0x4d, 0x92, 0x78, 0x19, 0x72, 0xd4, 0xf1, 0xf5,
429 0x7b, 0xbd, 0xd6, 0xf9, 0xb0, 0x8c, 0xc9, 0x79, 0xa3,
430 0x58, 0xaa, 0xcf, 0x6c, 0xb6, 0x23, 0x34, 0xbf, 0xc9,
431 0x16, 0xc2, 0x49, 0xf1, 0x8b, 0xce, 0xe6, 0x44, 0xa8,
432 0x90, 0x7e, 0xf5, 0x76, 0xb4, 0x14, 0x37, 0x09, 0x8b,
433 0xdf, 0x00, 0x69, 0x76, 0x7f, 0xb5, 0xed, 0x1c, 0x0f,
434 0x13, 0x85, 0xe5, 0x89, 0x5e, 0x4a, 0x5d, 0x70, 0xf5,
435 0x94, 0x1a, 0x93, 0x01, 0x43, 0x33, 0x43, 0x6a, 0x7a,
436 0xf4, 0x65, 0xec, 0x10, 0x38, 0xfd, 0xfa, 0x00, 0x64,
437 0x10, 0xa0, 0x87, 0x12, 0x25, 0xd6, 0x48, 0x48, 0xe6,
438 0xc5, 0x9a, 0xc2, 0x3f, 0x17, 0x6d, 0xf6, 0x63, 0xee,
439 0x21, 0x71, 0xc9, 0xea, 0xec, 0x04, 0x77, 0xf9, 0xeb,
440 0xd2, 0x80, 0x88, 0x0d, 0x9f, 0x29, 0x67, 0xa2, 0xe7,
441 0x91, 0xcc, 0x99, 0x8f, 0x6b, 0x23, 0x51, 0x8c, 0xa9,
442 0x7b, 0xbc, 0x64, 0x05, 0xd6, 0xce, 0xd3, 0x37, 0x3e,
443 0xbf, 0x3d, 0x20, 0x8c, 0x2a, 0x90, 0x92, 0x74, 0x46,
444 0x0a, 0x61, 0x4a ),
445 CIPHERTEXT ( 0x7b, 0xb3, 0x63, 0x13, 0x56, 0x9f, 0xf8, 0xb5, 0xc5,
446 0x8e, 0x41, 0xb1, 0x7a, 0x78, 0xfa, 0x5d, 0x78, 0x00,
447 0x73, 0xbe, 0xe2, 0x0b, 0x55, 0xf0, 0x04, 0x53, 0x22,
448 0x88, 0xe7, 0xf0, 0xa9, 0x47, 0x50, 0x76, 0x36, 0x4d,
449 0x89, 0x22, 0xd3, 0x89, 0xec, 0xd1, 0x89, 0xf5, 0x97,
450 0xa8, 0xa6, 0x77, 0xcb, 0x24, 0x84, 0x51, 0x3e, 0xd7,
451 0xaf, 0xe2, 0xd0, 0x69, 0x17, 0x17, 0xcd, 0x0a, 0xc0,
452 0xe2, 0x7b, 0xf7, 0xe2, 0x25, 0x7d, 0xd7, 0xe4, 0xff,
453 0xc0, 0xbb, 0xf5, 0x9e, 0x92, 0xd2, 0x58, 0xe1, 0x11,
454 0x6f, 0xac, 0x9b, 0xfc, 0x84, 0xa2, 0xdf, 0x72, 0x8b,
455 0xdd, 0x7a, 0xb2, 0x21, 0x75, 0x4d, 0xd3, 0x41, 0xf7,
456 0x22, 0x9e, 0x03, 0x0d, 0xce, 0x06, 0x47, 0x4d, 0x00,
457 0xf9, 0x9a, 0x5e, 0x45, 0x79, 0x43, 0xbd, 0x9e, 0x8f,
458 0x34, 0x5b, 0xcb, 0xb5, 0x40, 0x76, 0x90, 0xd0, 0x72,
459 0xdf, 0xb0, 0x11, 0x3b, 0x64, 0xbc, 0x0e, 0x65, 0x8e,
460 0xeb, 0x72, 0x26, 0x40, 0x9a, 0x58, 0x98, 0xdd, 0x27,
461 0xd9, 0x95, 0xa0, 0xbe, 0x02, 0x1f, 0x35, 0x10, 0x91,
462 0xf9, 0xb9, 0x07, 0xae, 0x3a, 0x96, 0x25, 0xf2, 0x40,
463 0xde, 0xe2, 0xbf, 0x4b, 0xb1, 0x5e, 0xb4, 0xf3, 0x0f,
464 0x4a, 0xbf, 0x1f, 0xf2, 0x5c, 0xa5, 0x53, 0x6d, 0xef,
465 0x96, 0x9d, 0x25, 0x88, 0x18, 0x8f, 0xec, 0xac, 0xfc,
466 0x7d, 0xc7, 0x5f, 0x5c, 0x67, 0x6c, 0xa7, 0x85, 0x1f,
467 0x9e, 0x80, 0x5f, 0x49, 0x83, 0x72, 0xc6, 0xb9, 0x8f,
468 0x5c, 0x7d, 0x12, 0x40, 0x37, 0x23, 0x61, 0x9f, 0x80,
469 0xce, 0x5b, 0xad, 0xfe, 0x58, 0x44, 0x64, 0x3d, 0x56,
470 0x31, 0xd4, 0x99, 0x8e, 0xe0, 0x42, 0x6a, 0x2b, 0x29,
471 0x15, 0x9c, 0xae, 0x25, 0x90, 0xdc, 0x81, 0x64, 0x6c,
472 0x78, 0xbe, 0x5c, 0x9e, 0x8f, 0xfe, 0x05, 0x6a, 0xa0,
473 0xd3, 0x55, 0x2e ),
474 AUTH ( 0xfc, 0x62, 0x29, 0x5c, 0x70, 0xd1, 0x40, 0xdb, 0xc3, 0x54,
475 0xfd, 0xbc, 0x80, 0x03, 0xeb, 0x41 ) );
476
477/* AES-GCM test case 22 */
478CIPHER_TEST ( wycheproof_aes_gcm_d63ed865, &aes_gcm_algorithm,
479 KEY ( 0xe8, 0x8d, 0x95, 0xea, 0xbe, 0x88, 0xfc, 0xf1, 0x58, 0xfa,
480 0xe8, 0x58, 0xaf, 0x95, 0x12, 0x21 ),
481 IV ( 0xa6, 0x58, 0x34, 0xa9, 0xd2, 0x31, 0xb3, 0x47, 0x09, 0x38,
482 0x3e, 0x9a ),
483 ADDITIONAL(),
484 PLAINTEXT ( 0x2d, 0xec, 0xac, 0xcc, 0x8b, 0x42, 0x4f, 0xa4, 0x96,
485 0x38, 0x90, 0xec, 0xe1, 0x5b, 0x3f, 0xc2, 0x81, 0xb6,
486 0x21, 0x57, 0x80, 0xff, 0x6b, 0xae, 0xe5, 0x7e, 0xdc,
487 0xd2, 0x5a, 0xfe, 0x26, 0x0f, 0xf8, 0x0e, 0xd4, 0xf2,
488 0x5c, 0xc0, 0x4d, 0x28, 0x02, 0xa1, 0xe9, 0x0a, 0x2e,
489 0x6e, 0x96, 0xd1, 0xee, 0x73, 0xa4, 0xa5, 0x3d, 0xcf,
490 0x60, 0x02, 0x5d, 0x48, 0x40, 0x54, 0xd1, 0x46, 0xf2,
491 0x75, 0xab, 0x34, 0xc3, 0x3b, 0x10, 0x20, 0x01, 0xa0,
492 0x7d, 0x80, 0x4c, 0xc9, 0x4a, 0x40, 0xfd, 0x78, 0xc1,
493 0x67, 0x80, 0xd1, 0xb6, 0x48, 0x48, 0x7f, 0xac, 0x03,
494 0x53, 0x86, 0xe5, 0xd2, 0x5c, 0x2b, 0x9e, 0xdb, 0xf7,
495 0xa5, 0x2d, 0x10, 0x2d, 0x19, 0x43, 0x95, 0x8c, 0x00,
496 0x9e, 0xb6, 0xd8, 0x8e, 0x00, 0xa3, 0x22, 0x7c, 0x4c,
497 0x78, 0x8e, 0x44, 0x50, 0x03, 0xfa, 0xbb, 0x4d, 0xbe,
498 0xfc, 0xcd, 0x3f, 0xe1, 0x71, 0x6d, 0x91, 0x64, 0x46,
499 0xfe, 0xe2, 0x11, 0x16, 0x15, 0xd5, 0x60, 0xec, 0xc5,
500 0x9d, 0x7b, 0xd2, 0x88, 0x26, 0x8a, 0xb3, 0x21, 0xe7,
501 0x00, 0x25, 0x45, 0x88, 0x71, 0x83, 0xfe, 0x02, 0x3f,
502 0xde, 0xc2, 0xa6, 0xd3, 0xb7, 0x3b, 0x94, 0xd1, 0x54,
503 0x8c, 0xee, 0x19, 0x63, 0x8d, 0x31, 0xd2, 0xc5, 0xa3,
504 0x2b, 0x15, 0xd2, 0xaa, 0xe3, 0xf4, 0x29, 0x50, 0xa7,
505 0x87, 0x11, 0x5e, 0x20, 0x0b, 0x00, 0x02, 0x2d, 0x49,
506 0x29, 0x10, 0x5d, 0xa0, 0xb4, 0xd1, 0x0c, 0xcb, 0x0b,
507 0x38, 0x86, 0xb3, 0x16, 0x9b, 0x32, 0xac, 0x5d, 0xf7,
508 0xa6, 0x37, 0xc2, 0x33, 0x62, 0xe2, 0xd4, 0xed, 0x9c,
509 0x13, 0x7f, 0x35, 0xbb, 0xd5, 0x78, 0xc2, 0xcd, 0xa0,
510 0x37, 0x7e, 0x0f, 0x1e, 0x64, 0xf7, 0xd3, 0x1e, 0x9e,
511 0xf4, 0xd7, 0x60, 0x3e, 0xa1, 0x36, 0x35, 0x23, 0x75,
512 0x83, 0x85, 0xc7, 0x61 ),
513 CIPHERTEXT ( 0x9b, 0x38, 0x33, 0xc3, 0x56, 0xf8, 0x3d, 0x19, 0xf5,
514 0x9a, 0xc4, 0x77, 0x0c, 0x95, 0x86, 0xaa, 0xd4, 0x57,
515 0x81, 0x0f, 0x9d, 0xc5, 0x51, 0x12, 0xcc, 0x6b, 0x87,
516 0xe9, 0x4d, 0x8d, 0xc7, 0x11, 0x84, 0xb2, 0x27, 0xa1,
517 0x45, 0x00, 0xc0, 0xa8, 0x61, 0x9d, 0x54, 0x44, 0x35,
518 0xdb, 0x4c, 0x00, 0x14, 0x67, 0xef, 0x2a, 0xcb, 0xa9,
519 0x50, 0x07, 0x29, 0x9d, 0x71, 0x7f, 0xad, 0xc0, 0xc0,
520 0x71, 0x7c, 0x4c, 0x8e, 0x74, 0x8d, 0x03, 0xff, 0xe2,
521 0xcf, 0x2f, 0xd0, 0x6f, 0x00, 0x09, 0xb0, 0xe6, 0x59,
522 0x0f, 0x95, 0x6c, 0x21, 0x2a, 0x2c, 0x92, 0x6d, 0x56,
523 0x79, 0xbd, 0xbb, 0x79, 0xd8, 0x76, 0x36, 0xae, 0x9f,
524 0xae, 0xfa, 0x5c, 0x83, 0x30, 0xc5, 0x70, 0xe8, 0x4b,
525 0x94, 0x62, 0x6f, 0x87, 0xd6, 0xa5, 0x3b, 0x12, 0x15,
526 0x74, 0xf7, 0x4c, 0x9e, 0x32, 0x11, 0xd9, 0x45, 0x18,
527 0x11, 0xe9, 0x94, 0x0d, 0xb5, 0xe7, 0x4d, 0x12, 0x83,
528 0x64, 0x32, 0x8f, 0xb8, 0xf4, 0x0f, 0x85, 0x0a, 0x25,
529 0xc3, 0xe7, 0xba, 0x4f, 0xde, 0xb0, 0xef, 0x6a, 0x63,
530 0x90, 0x60, 0xa1, 0x1d, 0x1c, 0x32, 0xae, 0x05, 0x31,
531 0xd2, 0x51, 0x8f, 0x90, 0x59, 0x52, 0xc9, 0x81, 0x42,
532 0x36, 0xb0, 0x0b, 0x93, 0x93, 0xfd, 0x31, 0xf8, 0xc0,
533 0x52, 0x2f, 0x8e, 0x30, 0x72, 0xb8, 0x64, 0xa3, 0xa5,
534 0xce, 0xbe, 0x1c, 0xeb, 0x15, 0x58, 0x5c, 0x90, 0x42,
535 0xf3, 0xf5, 0xb9, 0x53, 0x90, 0xc6, 0x2d, 0x8c, 0x1b,
536 0x51, 0x35, 0x50, 0xde, 0xfd, 0x21, 0xb4, 0x81, 0xfc,
537 0xfb, 0xd9, 0xfd, 0xd6, 0xc2, 0x62, 0xff, 0x6e, 0xd4,
538 0xe0, 0xa6, 0x05, 0x1b, 0xe3, 0x09, 0x78, 0x8a, 0x76,
539 0x3e, 0x56, 0x71, 0x07, 0xf0, 0x39, 0xe9, 0x88, 0x75,
540 0x7f, 0x96, 0xad, 0x95, 0x43, 0x67, 0x92, 0xa3, 0xbd,
541 0x26, 0xf3, 0x85, 0x90 ),
542 AUTH ( 0x4f, 0x4c, 0x26, 0x5e, 0xdd, 0x31, 0x58, 0xc6, 0x41, 0xce,
543 0x95, 0x55, 0xb5, 0x86, 0x50, 0xdb ) );
544
545/* AES-GCM test case 23 */
546CIPHER_TEST ( wycheproof_aes_gcm_d08a751a, &aes_gcm_algorithm,
547 KEY ( 0xa2, 0x94, 0xe7, 0x0f, 0xa2, 0xac, 0x10, 0xa1, 0xfb, 0x00,
548 0xc5, 0x88, 0xb8, 0x88, 0xb6, 0x73 ),
549 IV ( 0xdf, 0xe2, 0x0d, 0x1c, 0x43, 0x50, 0xe6, 0x23, 0x5d, 0x98,
550 0x7a, 0xf1 ),
551 ADDITIONAL(),
552 PLAINTEXT ( 0x6e, 0xd1, 0xd7, 0xd6, 0x18, 0xd1, 0x58, 0x74, 0x1f,
553 0x52, 0x07, 0x80, 0x06, 0xf2, 0x84, 0x94, 0xba, 0x72,
554 0xa2, 0x45, 0x4f, 0x27, 0x16, 0x0a, 0xe8, 0x72, 0x27,
555 0x93, 0xfc, 0xeb, 0xc5, 0x38, 0xeb, 0xc2, 0xf6, 0x7c,
556 0x3a, 0xce, 0x3e, 0x0f, 0xe7, 0xc4, 0x7b, 0x9e, 0x74,
557 0xe0, 0x81, 0x18, 0x2b, 0x47, 0xc9, 0x30, 0x14, 0x4e,
558 0x3f, 0xc8, 0x0d, 0x0a, 0xd5, 0x06, 0x11, 0xc3, 0xaf,
559 0xcf, 0xe2, 0xdb, 0xc5, 0x27, 0x9e, 0xdb, 0xbb, 0xa0,
560 0x87, 0xc0, 0xe3, 0x90, 0x35, 0x5f, 0x3d, 0xaf, 0xfc,
561 0xd2, 0x5a, 0xd4, 0xde, 0xa0, 0x07, 0xc2, 0x84, 0xad,
562 0x92, 0xe7, 0xfc, 0xbe, 0xcb, 0x43, 0x8f, 0xb6, 0x06,
563 0x23, 0xff, 0x89, 0xa5, 0x99, 0xdc, 0xa2, 0xaa, 0xc1,
564 0x41, 0xb2, 0x66, 0x51, 0x38, 0x6c, 0xa5, 0x5b, 0x73,
565 0x9b, 0x94, 0x90, 0x1e, 0xf6, 0xdb, 0x60, 0x9c, 0x34,
566 0x4d, 0x8a, 0xcf, 0x45, 0x44, 0x56, 0x8e, 0x31, 0xbb,
567 0x09, 0x36, 0x11, 0x12, 0x75, 0x4b, 0x1c, 0x0c, 0x6a,
568 0x3c, 0x87, 0x5b, 0xd9, 0x45, 0x3b, 0x0e, 0xe0, 0x08,
569 0x14, 0x12, 0x15, 0x13, 0x98, 0xa2, 0x94, 0xec, 0xad,
570 0x75, 0xad, 0xd5, 0x21, 0x61, 0x1d, 0xb5, 0x28, 0x8b,
571 0x60, 0xac, 0x3c, 0x01, 0x28, 0xf6, 0xe9, 0x43, 0x66,
572 0xb6, 0x9e, 0x65, 0x9e, 0x6a, 0xa6, 0x6f, 0x05, 0x8a,
573 0x3a, 0x35, 0x71, 0x06, 0x4e, 0xdb, 0xb0, 0xf0, 0x5c,
574 0x11, 0xe5, 0xdd, 0xe9, 0x38, 0xfb, 0x46, 0xc3, 0x93,
575 0x5d, 0xd5, 0x19, 0x3a, 0x4e, 0x56, 0x64, 0x68, 0x8f,
576 0x0a, 0xe6, 0x7c, 0x29, 0xb7, 0xcc, 0x49, 0xa7, 0x96,
577 0x31, 0x40, 0xf8, 0x2e, 0x31, 0x1a, 0x20, 0xc9, 0x8c,
578 0xd3, 0x4f, 0xbc, 0xab, 0x7b, 0x4b, 0x51, 0x5a, 0xe8,
579 0x65, 0x57, 0xe6, 0x20, 0x99, 0xe3, 0xfc, 0x37, 0xb9,
580 0x59, 0x5c, 0x85, 0xa7, 0x5c ),
581 CIPHERTEXT ( 0x5b, 0xc6, 0xdb, 0xaf, 0xc4, 0x01, 0x10, 0x1c, 0x7a,
582 0x08, 0xc8, 0x1d, 0x6c, 0x27, 0x91, 0xaa, 0x14, 0x7c,
583 0xe0, 0x93, 0xaa, 0xd1, 0x72, 0xbe, 0x18, 0x37, 0x9c,
584 0x74, 0x73, 0x84, 0xa5, 0x4a, 0x41, 0xa7, 0x47, 0xba,
585 0x95, 0x5c, 0xad, 0xe8, 0xfd, 0xfb, 0x89, 0x67, 0xaa,
586 0x80, 0x8b, 0x43, 0xfe, 0xe3, 0xd7, 0x57, 0xcc, 0x80,
587 0xf1, 0x11, 0x63, 0xb8, 0x00, 0xe5, 0xe5, 0x9d, 0xf9,
588 0x32, 0x75, 0x7f, 0x76, 0xc4, 0x0b, 0x3d, 0x9c, 0xba,
589 0x44, 0x9a, 0xaf, 0x11, 0xe4, 0xf8, 0x0e, 0x00, 0x3b,
590 0x1f, 0x38, 0x4e, 0xaf, 0xa4, 0xf7, 0x6e, 0x81, 0xb1,
591 0x3c, 0x09, 0xec, 0x1a, 0xd8, 0x8e, 0x76, 0x50, 0xc7,
592 0x50, 0xd4, 0x42, 0xfe, 0x46, 0xd2, 0x25, 0xa3, 0x73,
593 0xe8, 0xa1, 0xb5, 0x64, 0xb4, 0x91, 0x5a, 0x5c, 0x6c,
594 0x51, 0x3c, 0xfd, 0xfa, 0x22, 0xd9, 0x29, 0xd5, 0x74,
595 0x1c, 0xa5, 0xeb, 0xef, 0xae, 0xdc, 0xba, 0x63, 0x6c,
596 0x7c, 0x3b, 0xbe, 0xf1, 0x88, 0x63, 0xfd, 0xc1, 0x26,
597 0xb4, 0xb4, 0x51, 0x61, 0x10, 0x49, 0xc3, 0x5d, 0x81,
598 0x4f, 0xc2, 0xeb, 0x7e, 0x4b, 0x8f, 0x1a, 0x89, 0x95,
599 0xec, 0xb4, 0xa3, 0xc8, 0x66, 0x52, 0xa0, 0x68, 0xc0,
600 0xb2, 0xa3, 0xe1, 0xc5, 0x94, 0x1d, 0x59, 0xc2, 0x10,
601 0xb4, 0x58, 0xd5, 0xd5, 0xd3, 0xb0, 0x64, 0x20, 0xec,
602 0x20, 0x53, 0x46, 0x5c, 0xcc, 0xec, 0xa7, 0xc2, 0x0f,
603 0x67, 0x40, 0x49, 0x85, 0x46, 0x03, 0x79, 0xe2, 0xee,
604 0x80, 0x6a, 0x46, 0xe8, 0x40, 0x9d, 0xfa, 0xb2, 0xe0,
605 0xdd, 0x67, 0xea, 0x3c, 0xf4, 0x6d, 0x5a, 0xd4, 0xeb,
606 0x78, 0x75, 0x68, 0x27, 0x35, 0x8c, 0x3e, 0xf1, 0xfd,
607 0xbd, 0x07, 0xc3, 0x38, 0x34, 0xf3, 0xd9, 0xec, 0xa3,
608 0xff, 0x13, 0xb7, 0x44, 0xa0, 0x10, 0x59, 0xa6, 0xc1,
609 0x7a, 0x31, 0x5a, 0x8f, 0xd4 ),
610 AUTH ( 0xc7, 0x58, 0x7e, 0x7d, 0xa4, 0x1b, 0xed, 0x68, 0x2c, 0x37,
611 0x37, 0x7e, 0xa4, 0x32, 0x40, 0x29 ) );
612
613/* AES-GCM test case 24 */
614CIPHER_TEST ( wycheproof_aes_gcm_471d4ead, &aes_gcm_algorithm,
615 KEY ( 0x4a, 0x30, 0xea, 0xc0, 0x7b, 0x78, 0x8b, 0x73, 0x54, 0xa9,
616 0x0e, 0x64, 0x48, 0xf5, 0x66, 0x76 ),
617 IV ( 0xc3, 0x59, 0xd5, 0x67, 0x61, 0x6b, 0x63, 0x84, 0xac, 0x20,
618 0xa4, 0x3f ),
619 ADDITIONAL(),
620 PLAINTEXT ( 0x9a, 0x17, 0xb9, 0xd1, 0xdb, 0xe6, 0x66, 0xf7, 0x43,
621 0x1c, 0xbd, 0xd3, 0xb3, 0x17, 0x39, 0x48, 0xc7, 0xac,
622 0x13, 0xf2, 0x68, 0xe1, 0x28, 0x07, 0x25, 0x6d, 0x2e,
623 0x58, 0x31, 0xae, 0x67, 0xa1, 0x41, 0x16, 0x14, 0x49,
624 0x10, 0xb3, 0x83, 0x68, 0x93, 0x45, 0x71, 0xda, 0xff,
625 0x9d, 0x40, 0x04, 0xba, 0x95, 0x9b, 0x3c, 0xae, 0x26,
626 0x69, 0xe6, 0xee, 0xd4, 0x9e, 0x75, 0x0c, 0xa2, 0x28,
627 0x41, 0x5c, 0x6f, 0x7d, 0x1c, 0x1f, 0x2d, 0x3d, 0xbb,
628 0x02, 0xf4, 0xdf, 0xa4, 0x94, 0x83, 0xa7, 0xf8, 0x0f,
629 0xbc, 0xc1, 0xcb, 0x01, 0xd2, 0x2c, 0x67, 0x81, 0x7c,
630 0xc7, 0xa2, 0xbd, 0x27, 0x14, 0xeb, 0x62, 0xcd, 0xf8,
631 0xfb, 0x88, 0x4a, 0x66, 0xed, 0x24, 0x51, 0x67, 0xcd,
632 0xb2, 0x2e, 0x0d, 0xbc, 0x7b, 0x15, 0x3e, 0x64, 0x87,
633 0x14, 0xdf, 0xe8, 0x34, 0x14, 0x69, 0x6c, 0xff, 0xa8,
634 0x92, 0xda, 0xf5, 0xaf, 0x88, 0x20, 0xd5, 0x62, 0xbd,
635 0xf5, 0x5f, 0x76, 0xbe, 0x55, 0x84, 0xa3, 0x4b, 0x7e,
636 0x34, 0x9d, 0x10, 0xd7, 0x6c, 0x6e, 0x68, 0x30, 0x58,
637 0x35, 0xb5, 0x51, 0xa4, 0x1e, 0xbf, 0x48, 0xe0, 0x68,
638 0x32, 0x0d, 0x87, 0x53, 0x34, 0xa6, 0xa2, 0xd3, 0x10,
639 0x8b, 0x1e, 0x93, 0xf7, 0xaa, 0x8d, 0xa4, 0x85, 0xd7,
640 0xa5, 0x47, 0x0d, 0x80, 0x5e, 0x0d, 0xd3, 0x8c, 0x09,
641 0xfe, 0xaa, 0x0f, 0x49, 0x4d, 0x05, 0x72, 0xde, 0x31,
642 0x4a, 0x28, 0x74, 0x39, 0xf4, 0x8a, 0xee, 0x5a, 0x2f,
643 0xa8, 0xe9, 0x85, 0x0c, 0x61, 0x27, 0xee, 0x88, 0xd5,
644 0x0c, 0x5e, 0x8a, 0x2a, 0xc3, 0xea, 0xa7, 0xb2, 0xfd,
645 0xd1, 0x58, 0x98, 0x13, 0xfb, 0x3a, 0xff, 0xa6, 0x58,
646 0x98, 0x31, 0xdf, 0x13, 0x2b, 0xd5, 0x76, 0xfb, 0xed,
647 0x21, 0x71, 0x7e, 0x2b, 0x67, 0x66, 0xe5, 0x93, 0xed,
648 0x74, 0xda, 0xb3, 0x5d, 0xa1, 0x25, 0xc4, 0x33, 0x76,
649 0x3e, 0xa9, 0x02, 0x34, 0xdc, 0x6f, 0x01, 0xd3, 0x7b,
650 0xe1, 0x4c, 0x78, 0xb8, 0x86, 0x1b, 0xe1, 0xfb, 0x4c,
651 0x82, 0x96, 0xb3, 0xfa, 0xee, 0x65, 0xb6, 0xef, 0x8a,
652 0x9d, 0xaa, 0x68, 0x84, 0xe9, 0x36, 0x35, 0x93, 0x46,
653 0xf2, 0xda, 0x9f, 0x69, 0x81, 0xf9, 0xd6, 0x4f, 0x67,
654 0x67, 0x67, 0x64, 0x1a, 0xda, 0x62, 0x8a, 0xa8, 0xc7,
655 0x12, 0x93, 0x26, 0xbd, 0x4e, 0xe5, 0x7e, 0x51, 0x5a,
656 0x2f, 0x78, 0xba, 0x18, 0xc5, 0x95, 0xb9, 0xbc, 0x1d,
657 0x0f, 0x49, 0x06, 0x87, 0x34, 0xa6, 0x7e, 0x63, 0x55,
658 0x54, 0xee, 0xe6, 0x88, 0x81, 0x60, 0x61, 0xe9, 0x04,
659 0xa4, 0xe0, 0x51, 0x25, 0xd0, 0xe7, 0x79, 0x73, 0x05,
660 0x45, 0x1a, 0x7c, 0x3a, 0x1a, 0x3c, 0x50, 0x7d, 0xae,
661 0xdb, 0x99, 0x0c, 0x12, 0xca, 0x29, 0x0a, 0x0f, 0x55,
662 0x4a, 0xa8, 0xe8, 0x34, 0x65, 0x3a, 0xa2, 0x1a, 0x04,
663 0x69, 0xd3, 0xb0, 0xc0, 0x8e, 0xe5, 0x12, 0xb3, 0x23,
664 0xcb, 0x19, 0x37, 0x79, 0xc9, 0xfe, 0x2f, 0x2b, 0x3f,
665 0x03, 0x79, 0x4c, 0xd4, 0x2f, 0x02, 0x20, 0x03, 0x1d,
666 0x0c, 0x8e, 0xeb, 0x9c, 0x73, 0xa3, 0x28, 0x3a, 0x59,
667 0x9b, 0xc7, 0x8d, 0xa3, 0xb5, 0xb4, 0x1b, 0x24, 0x3e,
668 0xdf, 0x08, 0x2b, 0x23, 0x80, 0x1a, 0x15, 0xd9, 0x95,
669 0x6f, 0xca, 0x60, 0xf3, 0x5a, 0xcf, 0xb6, 0x5c, 0x4d,
670 0x06, 0xd2, 0x8a, 0xff, 0x81, 0xa1, 0xca, 0x98, 0xc6,
671 0xfa, 0xf8, 0x64, 0x5b, 0xe9, 0x20, 0xbd, 0x87, 0xc0,
672 0x3c, 0x05, 0x4a, 0x04, 0x69, 0xb2, 0x92, 0xae, 0x34,
673 0xd0, 0x58, 0x60, 0xe8, 0xd9, 0xb0, 0x61, 0x30, 0x03,
674 0x70, 0x46, 0x3d, 0xcd, 0x5f, 0xcd, 0x6f, 0xb1, 0xd6,
675 0xb1, 0xac, 0xc9, 0xb4, 0xeb, 0x25, 0xca, 0xbd, 0x9d,
676 0xe4, 0xe6, 0x1d, 0x44, 0x92, 0x2f, 0xcc ),
677 CIPHERTEXT ( 0x3e, 0x13, 0x58, 0x8d, 0x5a, 0x01, 0x4d, 0xcc, 0x1c,
678 0xbf, 0x46, 0xbd, 0x6c, 0x3f, 0x06, 0xdf, 0xbe, 0xf1,
679 0x46, 0x46, 0x49, 0xe7, 0x9a, 0x9b, 0xcb, 0xd9, 0x94,
680 0x84, 0x68, 0x6d, 0x72, 0x65, 0x38, 0x27, 0x88, 0x2d,
681 0xba, 0x80, 0x3a, 0x56, 0x83, 0xf8, 0x2a, 0x9b, 0xdf,
682 0xec, 0x6b, 0x44, 0xb2, 0x9b, 0x7c, 0x13, 0xf3, 0xf2,
683 0xb5, 0xdb, 0xc6, 0x75, 0x78, 0x05, 0x40, 0xf6, 0xa8,
684 0xa0, 0x8e, 0x45, 0xf5, 0x9f, 0xa8, 0x80, 0x21, 0x09,
685 0x5f, 0x8b, 0x3d, 0xb5, 0xf1, 0x0b, 0xc2, 0x17, 0x21,
686 0xa5, 0x6d, 0x65, 0xa5, 0x89, 0x21, 0x6c, 0xbc, 0x5b,
687 0x19, 0x15, 0xcb, 0xe7, 0xe2, 0xf8, 0x61, 0x2a, 0x9d,
688 0x24, 0xb3, 0x0e, 0xcd, 0xe2, 0xa2, 0x96, 0xa9, 0x6f,
689 0x48, 0xad, 0x11, 0x60, 0x72, 0x05, 0x37, 0x31, 0x22,
690 0x08, 0xe9, 0xb6, 0x82, 0x4e, 0x64, 0x13, 0xf2, 0x08,
691 0x4f, 0x22, 0x9d, 0xc6, 0xe9, 0x53, 0xc4, 0xb8, 0xa0,
692 0x54, 0xe3, 0xc3, 0x68, 0xef, 0x1f, 0x70, 0xdd, 0x9c,
693 0xf2, 0x76, 0xca, 0xa4, 0xcc, 0x25, 0x1e, 0x47, 0x5f,
694 0x50, 0x7a, 0x2b, 0xd0, 0x72, 0xb7, 0xf4, 0xa1, 0x31,
695 0x13, 0x02, 0xf6, 0x17, 0xe2, 0xcc, 0x59, 0x4e, 0xb6,
696 0xa0, 0xc4, 0x9a, 0xc1, 0x73, 0xdb, 0x07, 0x83, 0x19,
697 0x45, 0xf5, 0x12, 0x9a, 0x38, 0xe4, 0x51, 0x35, 0xbe,
698 0xb9, 0x7b, 0x39, 0x39, 0x3f, 0x73, 0xd0, 0x97, 0x7e,
699 0x32, 0x48, 0x20, 0x53, 0x3f, 0x3d, 0xd7, 0x52, 0x05,
700 0x19, 0x96, 0x54, 0x3a, 0x06, 0x20, 0xeb, 0xba, 0x50,
701 0x28, 0x89, 0x23, 0xf1, 0xd0, 0x18, 0x1b, 0xad, 0xb2,
702 0x20, 0x4c, 0x74, 0x69, 0xe8, 0xb4, 0xb5, 0xd1, 0x4a,
703 0x98, 0x4c, 0x3f, 0x0f, 0x3d, 0x34, 0xbb, 0x38, 0x34,
704 0x16, 0x14, 0x9e, 0x0a, 0x0c, 0xa1, 0x4f, 0x4f, 0x6d,
705 0xfe, 0x58, 0x90, 0x2a, 0x48, 0xec, 0xd3, 0xbd, 0xbc,
706 0x02, 0xa8, 0xc8, 0x4b, 0xb3, 0x03, 0xe8, 0x34, 0x91,
707 0x82, 0x4b, 0x2c, 0xa9, 0x76, 0x99, 0x1b, 0x22, 0x9d,
708 0x71, 0x5a, 0xf2, 0xbf, 0x4b, 0xa3, 0x38, 0x5d, 0x7d,
709 0x93, 0xe3, 0xad, 0xa5, 0x2f, 0x12, 0x31, 0x7b, 0x73,
710 0xe2, 0x93, 0x96, 0x28, 0xd7, 0x58, 0x98, 0x10, 0xd6,
711 0xa2, 0x78, 0xd4, 0xc2, 0x4e, 0x90, 0x7b, 0x4f, 0xfc,
712 0xe0, 0xd1, 0x77, 0xb0, 0x40, 0xe9, 0xdc, 0xe9, 0x7b,
713 0x63, 0xc9, 0xb8, 0xc1, 0x74, 0x3a, 0xd6, 0xfe, 0xbd,
714 0x0c, 0x9a, 0x27, 0x3f, 0x64, 0x8b, 0x91, 0xba, 0x5b,
715 0x57, 0x19, 0x15, 0x97, 0x85, 0xdb, 0x77, 0x0c, 0x66,
716 0x42, 0x90, 0xe9, 0x3d, 0x69, 0xba, 0x14, 0x75, 0x7d,
717 0x8b, 0xba, 0x68, 0xf0, 0xf9, 0x3a, 0x13, 0x60, 0x31,
718 0xa9, 0x7c, 0x72, 0xf2, 0xbe, 0x6b, 0xf9, 0xe1, 0x52,
719 0x37, 0xe9, 0x98, 0x39, 0x59, 0x30, 0xb4, 0xd1, 0xf8,
720 0x7b, 0x57, 0xa5, 0xfa, 0x65, 0x49, 0x4d, 0xc8, 0xfe,
721 0xb7, 0x61, 0xbd, 0xaf, 0xfe, 0xd4, 0xb3, 0xbf, 0x00,
722 0x73, 0xe9, 0x24, 0x4a, 0xbb, 0x4a, 0x3a, 0x7e, 0x15,
723 0xe2, 0xd5, 0x2a, 0x3b, 0xb8, 0x44, 0x67, 0x66, 0xf0,
724 0xe7, 0x56, 0x37, 0x02, 0xa9, 0x43, 0xdd, 0x16, 0xd5,
725 0xdb, 0x9d, 0xbe, 0xcb, 0x00, 0x44, 0xe4, 0x62, 0xbe,
726 0xd1, 0x7e, 0xab, 0x81, 0xb3, 0x12, 0xaa, 0x4f, 0x32,
727 0x41, 0x5d, 0xb8, 0xf0, 0x9b, 0xc0, 0xcc, 0x2d, 0xb7,
728 0x40, 0x6f, 0x4f, 0x67, 0x86, 0x2a, 0xf9, 0x86, 0xb9,
729 0x65, 0x23, 0x79, 0x13, 0xd1, 0x19, 0xca, 0x85, 0xb8,
730 0xd6, 0x4b, 0x4e, 0x61, 0x00, 0x34, 0x89, 0x1f, 0x78,
731 0x43, 0x3f, 0x37, 0x0f, 0xbe, 0x6c, 0x99, 0x96, 0xa6,
732 0x9d, 0x0d, 0xe3, 0x08, 0xed, 0x68, 0x5f, 0x43, 0x39,
733 0xf9, 0xb6, 0x7f, 0xa5, 0xec, 0x10, 0x0e ),
734 AUTH ( 0x58, 0x74, 0x3a, 0x6d, 0x49, 0x27, 0x2d, 0xf2, 0x01, 0xd8,
735 0x1d, 0xcc, 0xcd, 0xaf, 0x76, 0xfa ) );
736
737/* AES-GCM test case 25 */
738CIPHER_TEST ( wycheproof_aes_gcm_7ff74d83, &aes_gcm_algorithm,
739 KEY ( 0xfc, 0x8e, 0x6d, 0x2c, 0x7f, 0x42, 0xca, 0xb5, 0x93, 0x75,
740 0x32, 0x72, 0x85, 0xcc, 0x33, 0x98 ),
741 IV ( 0x49, 0xe1, 0xe0, 0x0c, 0x48, 0xea, 0xf1, 0xb5, 0xb9, 0xd2,
742 0xcb, 0x45 ),
743 ADDITIONAL(),
744 PLAINTEXT ( 0x21, 0x21, 0xb0, 0x69, 0x90, 0xdc, 0xde, 0x28, 0x85,
745 0x73, 0x90, 0x32, 0x62, 0x2f, 0xd7, 0x02, 0x94, 0x17,
746 0x40, 0x74, 0xbf, 0xfd, 0xf4, 0x0b, 0x01, 0xf3, 0x55,
747 0x4d, 0x5d, 0x87, 0x24, 0x2d, 0xa6, 0x16, 0x73, 0xfe,
748 0x9b, 0x16, 0x87, 0x77, 0x1f, 0xf1, 0xcc, 0x33, 0x0d,
749 0x7b, 0x8a, 0x51, 0x38, 0xf6, 0x59, 0x8d, 0x81, 0x60,
750 0xec, 0x90, 0xa4, 0x81, 0x6a, 0x6d, 0xba, 0xb3, 0x10,
751 0xf2, 0xc9, 0x9a, 0xb1, 0x9c, 0x49, 0xd8, 0xa5, 0xd0,
752 0x4e, 0xed, 0x4b, 0x93, 0xcd, 0x76, 0x15, 0x97, 0x66,
753 0x54, 0x8e, 0x13, 0x65, 0x17, 0xec, 0xfb, 0x6a, 0xa7,
754 0xad, 0x51, 0xe5, 0xff, 0x6d, 0x08, 0x3c, 0x0e, 0x53,
755 0x53, 0x36, 0x92, 0x38, 0x8e, 0x65, 0x1e, 0xa9, 0xcb,
756 0xa9, 0x46, 0x93, 0x11, 0x8e, 0x46, 0x99, 0x92, 0x64,
757 0x76, 0xfe, 0xa7, 0x85, 0xd2, 0xca, 0xc0, 0x21, 0x3a,
758 0xa6, 0x8a, 0xe0, 0xa3, 0x66, 0x92, 0x35, 0x32, 0xd3,
759 0x33, 0xef, 0x13, 0x3b, 0x49, 0x0a, 0x46, 0x67, 0x60,
760 0x6f, 0x72, 0x94, 0xdb, 0x8c, 0x6a, 0x45, 0x30, 0x40,
761 0x74, 0x09, 0xb5, 0x1e, 0x80, 0x34, 0x93, 0xd4, 0x66,
762 0x38, 0xfb, 0xa1, 0x51, 0xb2, 0x03, 0x1f, 0x82, 0x08,
763 0xd5, 0x95, 0xb4, 0xe4, 0xae, 0x55, 0xdb, 0x66, 0xcd,
764 0x7c, 0x32, 0x87, 0x53, 0xcf, 0xa0, 0xf6, 0x44, 0x43,
765 0x8b, 0x0b, 0xff, 0x4f, 0x87, 0xd9, 0xb7, 0xc5, 0x64,
766 0x8e, 0x5d, 0x2e, 0x80, 0x57, 0xe0, 0xb2, 0x0d, 0x55,
767 0x0c, 0xf1, 0xd0, 0xaa, 0x13, 0x90, 0x06, 0x47, 0xc3,
768 0x32, 0x90, 0x9b, 0x50, 0xf8, 0xec, 0xb1, 0xee, 0x14,
769 0x83, 0x42, 0xaa, 0xc7, 0x05, 0xb2, 0x82, 0x15, 0x90,
770 0x00, 0x30, 0xbf, 0xd9, 0x0c, 0xa1, 0x44, 0x6e, 0x3a,
771 0x03, 0xce, 0xb2, 0xab, 0x71, 0xa9, 0xce, 0xb3, 0xd8,
772 0xf0, 0xb4, 0x62, 0x6f, 0xeb, 0xf1, 0xdc, 0xff, 0x3c,
773 0x1f, 0x5a, 0xe0, 0xfe, 0xf4, 0xc0, 0xf7, 0x46, 0x23,
774 0xba, 0x47, 0xeb, 0x5f, 0xdc, 0x42, 0xd4, 0x2a, 0x20,
775 0x39, 0xf4, 0x5e, 0x59, 0x87, 0x62, 0x4d, 0x97, 0xd0,
776 0xfc, 0xfb, 0x95, 0xf7, 0x4c, 0x47, 0x8d, 0x61, 0x3b,
777 0x90, 0x67, 0xf0, 0x3c, 0xb8, 0x6d, 0x60, 0x55, 0xd5,
778 0x12, 0x4e, 0x6f, 0xf3, 0x17, 0x4d, 0x13, 0x6d, 0x60,
779 0xfd, 0x7a, 0x54, 0xe7, 0xc8, 0xfd, 0xff, 0xf2, 0x0f,
780 0xb5, 0x80, 0x7c, 0x4e, 0x35, 0x6c, 0xbf, 0xc7, 0x0d,
781 0xf4, 0xbf, 0x83, 0x99, 0x78, 0x55, 0x60, 0x85, 0x58,
782 0xdf, 0xf6, 0x4b, 0x3e, 0xa8, 0x85, 0x44, 0x81, 0xcb,
783 0x24, 0x93, 0x30, 0x00, 0x48, 0x9f, 0x4b, 0x8e, 0x94,
784 0x15, 0xb2, 0x22, 0x37, 0xe9, 0x16, 0x65, 0x38, 0x74,
785 0x54, 0x9d, 0x76, 0x87, 0xae, 0x71, 0xb0, 0x63, 0xac,
786 0xe3, 0xef, 0x7e, 0x41, 0xc7, 0x05, 0xd1, 0x97, 0xc3,
787 0x15, 0x7d, 0xac, 0xd3, 0x26, 0x3d, 0x61, 0x13, 0x2a,
788 0x4f, 0x07, 0xb9, 0x1c, 0xb0, 0xcd, 0x79, 0xbc, 0x7c,
789 0xfd, 0x85, 0xf6, 0xf8, 0xc1, 0xf5, 0x07, 0xc3, 0x3b,
790 0xb9, 0x10, 0xe2, 0xe8, 0x79, 0xe0, 0xe4, 0xd8, 0xfe,
791 0xdf, 0x80, 0x41, 0x34, 0xd1, 0x4d, 0x59, 0x98, 0xb3,
792 0x83, 0x76, 0xd9, 0xac, 0x08, 0x31, 0xd1, 0x57, 0x75,
793 0x10, 0xef, 0x37, 0x04, 0xe3, 0xf6, 0x8a, 0xcf, 0xcb,
794 0x43, 0x3a, 0xa2, 0xa7, 0x51, 0xf9, 0x4f, 0xa8, 0xb6,
795 0xb3, 0x12, 0xaf, 0xbe, 0xea, 0x7f, 0x3d, 0x1f, 0x38,
796 0x78, 0x4d, 0x79, 0xdb, 0x41, 0x4c, 0x77, 0x99, 0xe0,
797 0x11, 0xca, 0x4d, 0x35, 0x77, 0x9e, 0xd1, 0x7a, 0xed,
798 0x7d, 0x96, 0xdf, 0x5e, 0x1a, 0x60, 0xac, 0xe7, 0x46,
799 0x92, 0x68, 0x6e, 0xde, 0x77, 0x8d, 0xfb, 0x4b, 0xee,
800 0xb4, 0x25, 0x85, 0xc8, 0xcc, 0xdf, 0x03, 0xcf ),
801 CIPHERTEXT ( 0x51, 0xeb, 0x44, 0x8f, 0x83, 0x98, 0x02, 0xe6, 0xd7,
802 0x3c, 0x5b, 0x62, 0x8e, 0xff, 0x69, 0xb1, 0xa4, 0x49,
803 0xc5, 0xb1, 0xe7, 0x09, 0xf2, 0xfd, 0x86, 0x9c, 0x8e,
804 0xba, 0xc9, 0x72, 0x5e, 0xcc, 0x3c, 0x9f, 0x42, 0x6f,
805 0x87, 0x58, 0x53, 0xca, 0xda, 0x11, 0x8f, 0x84, 0x6d,
806 0xe1, 0xa5, 0x2f, 0x3b, 0x36, 0xe2, 0x44, 0x66, 0x80,
807 0xcd, 0xb4, 0x42, 0x41, 0xc4, 0x75, 0xb0, 0x41, 0x45,
808 0x90, 0xf1, 0xee, 0x4b, 0xb9, 0x78, 0xdb, 0x5e, 0x88,
809 0xc6, 0x96, 0xd1, 0x3c, 0xad, 0xb3, 0x1e, 0xba, 0xa8,
810 0x97, 0xc2, 0x4e, 0x82, 0x04, 0xdd, 0xaa, 0x0e, 0x9c,
811 0x6d, 0x78, 0x65, 0xca, 0xb9, 0x93, 0x4d, 0x6f, 0x81,
812 0x12, 0x88, 0xda, 0x28, 0x5e, 0xb3, 0xa5, 0x42, 0x35,
813 0xe2, 0x32, 0xa6, 0xdb, 0xb2, 0xa7, 0xba, 0x36, 0xea,
814 0x72, 0x81, 0x82, 0x18, 0xa1, 0xed, 0x4c, 0x96, 0xe8,
815 0x59, 0xd0, 0xea, 0xd7, 0xcc, 0x7e, 0x3d, 0x89, 0x93,
816 0xc1, 0x00, 0x5f, 0xa5, 0x5b, 0x53, 0xd7, 0x52, 0xb4,
817 0xca, 0x21, 0x94, 0x73, 0x6d, 0x76, 0xb9, 0x25, 0x31,
818 0x97, 0x28, 0x1e, 0x0c, 0x63, 0x33, 0x04, 0x85, 0x72,
819 0x04, 0x6b, 0x20, 0xcc, 0xe3, 0x29, 0x40, 0xee, 0xfa,
820 0xcd, 0xc6, 0x25, 0xad, 0xc8, 0x41, 0x9c, 0x6a, 0x22,
821 0x2c, 0x61, 0xc9, 0xa8, 0xf2, 0x48, 0x46, 0x3c, 0x37,
822 0xa3, 0xc4, 0xe6, 0x88, 0xa9, 0xd7, 0x4e, 0x90, 0x06,
823 0xfd, 0x79, 0x10, 0x76, 0x9e, 0x3b, 0x21, 0xc7, 0xdc,
824 0x0d, 0x7e, 0xd5, 0x8f, 0x0e, 0xee, 0xa5, 0x8e, 0x32,
825 0x57, 0xc4, 0x0e, 0x17, 0xea, 0x42, 0x88, 0x41, 0x57,
826 0xe3, 0xaf, 0xc9, 0x91, 0x37, 0x57, 0x50, 0x6b, 0xd9,
827 0x05, 0x27, 0xdd, 0x28, 0x5b, 0xda, 0x33, 0xab, 0x5a,
828 0x44, 0x7f, 0x90, 0xe6, 0xf8, 0xc9, 0xec, 0xff, 0x22,
829 0x89, 0xfd, 0xac, 0x6c, 0xd2, 0x80, 0x74, 0xc3, 0xe1,
830 0x0b, 0xb3, 0x74, 0x33, 0x7f, 0x6c, 0x58, 0x7d, 0xac,
831 0xb8, 0xcb, 0xf7, 0xbf, 0xab, 0x27, 0x2f, 0xcd, 0x46,
832 0x2c, 0x2a, 0x06, 0xb4, 0x65, 0xa7, 0x91, 0xea, 0xb9,
833 0x11, 0xca, 0xb9, 0x6a, 0xe6, 0xcc, 0xdf, 0x38, 0x2a,
834 0xeb, 0x2e, 0x9d, 0x5a, 0xb0, 0x7e, 0x3d, 0xc1, 0x33,
835 0xd7, 0xf5, 0xb7, 0x40, 0x2b, 0xb1, 0xb6, 0xcc, 0xf8,
836 0xce, 0x48, 0x15, 0x39, 0x21, 0x30, 0x07, 0x3f, 0x6c,
837 0x03, 0xd3, 0x91, 0x9d, 0x86, 0x40, 0xcd, 0x7b, 0xa9,
838 0xb7, 0xfb, 0xbf, 0xcb, 0x07, 0x40, 0x50, 0x93, 0xac,
839 0x40, 0x8c, 0x4a, 0xcd, 0x50, 0xd5, 0x2d, 0x7c, 0xae,
840 0x06, 0xb9, 0xf3, 0x64, 0x8b, 0x53, 0x90, 0x44, 0xe4,
841 0x9e, 0xb0, 0xd5, 0x26, 0xc6, 0x32, 0x3b, 0x59, 0x32,
842 0xd3, 0xcd, 0xf1, 0x18, 0xcc, 0xb5, 0x56, 0x49, 0x8f,
843 0x24, 0x39, 0x0d, 0x6d, 0x21, 0x03, 0x58, 0x8c, 0x6c,
844 0xc4, 0xd1, 0x18, 0xf5, 0x2e, 0x4d, 0x66, 0xb1, 0xbd,
845 0xe8, 0x3a, 0x8b, 0x7c, 0x86, 0x3e, 0x6a, 0x37, 0x3c,
846 0x4c, 0xd6, 0x5d, 0x1d, 0x1a, 0x98, 0x53, 0x58, 0x10,
847 0xfb, 0xef, 0xa8, 0xca, 0x38, 0xa2, 0x08, 0x30, 0xe1,
848 0x9e, 0xf8, 0xfd, 0xf8, 0xfb, 0xa1, 0xd3, 0x33, 0x65,
849 0x50, 0x54, 0xe6, 0xc8, 0xa3, 0xfd, 0xc8, 0x40, 0x3b,
850 0x13, 0xb2, 0x7d, 0xe0, 0x7f, 0x9d, 0xbe, 0xef, 0x39,
851 0x0e, 0xe0, 0x6c, 0x05, 0x89, 0x57, 0xc1, 0xf6, 0xe6,
852 0xda, 0xe7, 0x75, 0x50, 0x90, 0xef, 0x1d, 0x0a, 0xfe,
853 0xe3, 0x47, 0x67, 0x1f, 0xe6, 0x9e, 0x5a, 0x28, 0x08,
854 0x69, 0x04, 0x0f, 0x4f, 0x35, 0xa6, 0xf6, 0x87, 0xc3,
855 0x7e, 0xe9, 0xe6, 0xb6, 0x76, 0xa6, 0xd5, 0x8a, 0xc1,
856 0x98, 0xdc, 0x86, 0xa8, 0x31, 0xae, 0x20, 0xfa, 0x2e,
857 0x64, 0xf4, 0x16, 0x55, 0x2d, 0xfb, 0xdc, 0x4a ),
858 AUTH ( 0x1f, 0xba, 0x8f, 0xda, 0xd5, 0x45, 0xd2, 0x44, 0x3d, 0x6e,
859 0x79, 0x59, 0x29, 0x74, 0xf3, 0x55 ) );
860
861/* AES-GCM test case 26 */
862CIPHER_TEST ( wycheproof_aes_gcm_93db813a, &aes_gcm_algorithm,
863 KEY ( 0xf0, 0x1a, 0x3c, 0x35, 0x59, 0xc5, 0x8e, 0x80, 0xbc, 0x83,
864 0x25, 0x44, 0xe0, 0x69, 0xef, 0x29 ),
865 IV ( 0xcd, 0x5b, 0xc2, 0xae, 0xd4, 0x8c, 0x3b, 0xe8, 0x36, 0xd7,
866 0xd7, 0x86 ),
867 ADDITIONAL(),
868 PLAINTEXT ( 0x0d, 0xe5, 0xaa, 0xc3, 0xf1, 0x51, 0xb5, 0x26, 0x75,
869 0x1d, 0xe8, 0xf3, 0x60, 0x10, 0xe4, 0x39, 0x44, 0x98,
870 0xeb, 0xa3, 0xc8, 0xbc, 0x79, 0x0f, 0xd4, 0xba, 0x96,
871 0xeb, 0x2d, 0xa3, 0x3e, 0x40, 0xdd, 0xca, 0x3c, 0xb3,
872 0x6f, 0xec, 0x10, 0x2e, 0xf3, 0x7a, 0x6a, 0x51, 0x32,
873 0xcd, 0x38, 0x9b, 0xbc, 0xab, 0xbd, 0x15, 0xe1, 0xc9,
874 0xd2, 0x70, 0x0a, 0xf3, 0x5f, 0x19, 0xa0, 0x1b, 0xa3,
875 0xb2, 0x68, 0x43, 0xab, 0x50, 0x83, 0x3f, 0x25, 0x2b,
876 0xef, 0xbb, 0xb5, 0x52, 0x91, 0x73, 0xd5, 0x1c, 0xa3,
877 0x64, 0xd7, 0xd0, 0x94, 0x68, 0xb3, 0xb6, 0x8f, 0x74,
878 0x0a, 0x60, 0x14, 0xb5, 0xb8, 0x24, 0x20, 0x6a, 0x6a,
879 0x71, 0x18, 0xbf, 0x14, 0x4a, 0x22, 0x3f, 0x87, 0xd7,
880 0x66, 0x24, 0xc1, 0x38, 0xbd, 0x24, 0xa5, 0xfa, 0x99,
881 0x6f, 0x36, 0xe3, 0x16, 0x08, 0x7f, 0x3b, 0x59, 0xc1,
882 0xc7, 0x1c, 0xd7, 0x4a, 0x91, 0x84, 0xa5, 0x18, 0xc8,
883 0xd9, 0xaa, 0x8c, 0x72, 0x43, 0x10, 0x2d, 0xd3, 0x9a,
884 0x93, 0x59, 0x9e, 0x7b, 0xbe, 0x7d, 0xcd, 0x35, 0x4d,
885 0x07, 0x80, 0x25, 0x37, 0x67, 0xe9, 0x60, 0x2f, 0x2f,
886 0x0c, 0xbb, 0xab, 0x7e, 0xae, 0x8d, 0x8c, 0x12, 0xcb,
887 0xad, 0x16, 0x3f, 0x8f, 0xc2, 0x0d, 0x32, 0x55, 0x9f,
888 0x79, 0x8d, 0x2b, 0x72, 0x85, 0xdb, 0xa6, 0xf6, 0x6d,
889 0xc2, 0x8d, 0x9b, 0x3f, 0x0a, 0x30, 0x1a, 0xa8, 0x9f,
890 0x5c, 0xd1, 0xb5, 0xa1, 0x73, 0x4f, 0xe7, 0x2c, 0x68,
891 0xf9, 0x8c, 0x86, 0x1d, 0x26, 0xe7, 0xdd, 0xda, 0xa0,
892 0x8a, 0x22, 0x79, 0x99, 0xf7, 0xc9, 0x8d, 0x73, 0x15,
893 0xe7, 0xc2, 0xe3, 0xc3, 0xf1, 0x98, 0xcd, 0xd4, 0xcf,
894 0xd6, 0x2f, 0x62, 0x38, 0x99, 0x98, 0xc7, 0xb7, 0x60,
895 0x10, 0x6d, 0x0a, 0x43, 0x7f, 0x50, 0x50, 0xf7, 0x4f,
896 0x9c, 0xe6, 0x39, 0x48, 0xf5, 0x49, 0x4b, 0xed, 0x71,
897 0xc8, 0x8b, 0xe4, 0x43, 0x65, 0x4e, 0xf9, 0xeb, 0x0c,
898 0x86, 0x7e, 0xed, 0xe2, 0x25, 0xc1, 0xbd, 0xa1, 0x81,
899 0xba, 0xab, 0xd8, 0x15, 0x53, 0x60, 0xcc, 0xae, 0x65,
900 0xe5, 0x4d, 0x39, 0x9a, 0x3f, 0x7d, 0x67, 0x0d, 0x11,
901 0xb5, 0x3d, 0x7b, 0xbe, 0xcd, 0xa1, 0x5d, 0x53, 0xe1,
902 0x29, 0xef, 0x2b, 0xe2, 0x91, 0x54, 0xe3, 0xc2, 0x14,
903 0x11, 0xe6, 0x20, 0x79, 0x77, 0xe2, 0x62, 0x00, 0x07,
904 0xcf, 0x4b, 0x98, 0x7d, 0xd2, 0xc3, 0x04, 0xef, 0xe5,
905 0x5b, 0xc2, 0xef, 0x56, 0x40, 0x74, 0xcd, 0x6e, 0x17,
906 0x6a, 0x97, 0x18, 0x4b, 0xff, 0x4c, 0xad, 0x0c, 0xd0,
907 0xcb, 0x85, 0x19, 0x5c, 0x4e, 0x83, 0x98, 0xf2, 0x7c,
908 0xa0, 0xd4, 0xd8, 0xc4, 0x85, 0x13, 0x59, 0xee, 0xbd,
909 0xb6, 0x06, 0xa2, 0x13, 0x22, 0x39, 0x03, 0x51, 0x3f,
910 0x0d, 0xb8, 0xc0, 0xfc, 0xc1, 0xf3, 0xa8, 0x34, 0x73,
911 0x8f, 0x6c, 0x9d, 0xd6, 0xad, 0xb4, 0x3b, 0xdc, 0xbd,
912 0x92, 0x1e, 0x7c, 0x3c, 0xd3, 0xb2, 0x52, 0xe3, 0x19,
913 0xf9, 0xe7, 0x11, 0xed, 0xf5, 0x5e, 0x8d, 0x7f, 0x1a,
914 0x32, 0x07, 0x05, 0xa3, 0xba, 0x77, 0xbf, 0xa3, 0x34,
915 0x63, 0xa9, 0x22, 0xa9, 0xf3, 0x6b, 0x48, 0x35, 0x90,
916 0xc4, 0x93, 0x9f, 0xd9, 0x77, 0xac, 0xe5, 0x1c, 0x50,
917 0x6d, 0x2e, 0x26, 0x9b, 0x48, 0x8a, 0x71, 0x69, 0xb6,
918 0x96, 0xd8, 0x28, 0x45, 0x8e, 0xcb, 0x09, 0x2a, 0xe3,
919 0xa9, 0xad, 0xf6, 0x3a, 0x3a, 0x12, 0x80, 0x9d, 0xa5,
920 0x1f, 0xc7, 0x34, 0x0f, 0xc5, 0x7d, 0xb5, 0x0f, 0xa1,
921 0x90, 0x3f, 0x1c, 0x7d, 0xe9, 0xce, 0x60, 0x6f, 0x1d,
922 0xe3, 0xf9, 0x55, 0x38, 0x82, 0x3c, 0x04, 0xe3, 0xbf,
923 0xb6, 0x54, 0x93, 0x85, 0x64, 0x37, 0x10, 0xa2, 0x91,
924 0x9f, 0x2f, 0xbd, 0x54, 0x88, 0x7b, 0xdf, 0xb2, 0x39 ),
925 CIPHERTEXT ( 0xc9, 0x13, 0x9d, 0x5d, 0x6a, 0x14, 0x93, 0x6d, 0xd5,
926 0xf2, 0x86, 0xd3, 0x3d, 0xee, 0x4f, 0x20, 0xf5, 0x9a,
927 0x82, 0x11, 0x52, 0xaa, 0x71, 0x72, 0x74, 0xc1, 0xaf,
928 0x90, 0x98, 0x3a, 0x5f, 0x83, 0xb9, 0x01, 0x62, 0x48,
929 0xe7, 0x15, 0xa5, 0xd0, 0x99, 0x8d, 0x32, 0x99, 0x55,
930 0xf4, 0x1a, 0x03, 0x96, 0x66, 0x0d, 0x9f, 0x22, 0xdf,
931 0x5f, 0x61, 0x30, 0x98, 0xbf, 0xd3, 0xaa, 0x30, 0xdf,
932 0x19, 0x22, 0xf0, 0x8d, 0xc1, 0x2c, 0x8f, 0xdc, 0xa6,
933 0xd2, 0x63, 0x8a, 0x51, 0xbf, 0xe5, 0x94, 0xb2, 0x45,
934 0x23, 0xb9, 0x31, 0x81, 0x71, 0x2d, 0x52, 0x05, 0xf9,
935 0xc2, 0xe5, 0xd4, 0x87, 0x41, 0xe0, 0x00, 0xac, 0x21,
936 0x28, 0x61, 0x9f, 0x6c, 0x97, 0x45, 0x44, 0x8d, 0xa2,
937 0x94, 0xac, 0x28, 0x14, 0x28, 0xd6, 0xc6, 0x07, 0xf4,
938 0xee, 0xda, 0xee, 0xa0, 0xdb, 0x12, 0xba, 0x16, 0x27,
939 0xe5, 0x6a, 0xe1, 0x52, 0xef, 0x2b, 0x23, 0x10, 0xcc,
940 0xe8, 0x29, 0xcc, 0x27, 0x62, 0x17, 0xe3, 0x1d, 0xac,
941 0x22, 0xec, 0x85, 0x82, 0xd7, 0xa7, 0x2b, 0x5d, 0x64,
942 0xd5, 0x58, 0x3c, 0x75, 0xf4, 0x2f, 0xc3, 0x55, 0x51,
943 0x60, 0x7e, 0xc5, 0x7d, 0x9d, 0x40, 0x67, 0x2d, 0x16,
944 0x41, 0xb6, 0x44, 0x91, 0xfe, 0x23, 0xff, 0x3e, 0xae,
945 0xb3, 0x3e, 0x25, 0x64, 0x31, 0x9c, 0x58, 0xd6, 0x9b,
946 0x19, 0xc6, 0x5d, 0x1c, 0x56, 0x16, 0x5e, 0xa2, 0x54,
947 0x36, 0x31, 0xb9, 0x5b, 0xd8, 0x62, 0x9a, 0x91, 0x87,
948 0x6c, 0x28, 0x4d, 0x02, 0x45, 0xbe, 0x6a, 0x4f, 0x34,
949 0xad, 0x86, 0x28, 0xf7, 0xa4, 0xa4, 0xdb, 0xd3, 0xdc,
950 0x13, 0xc9, 0x7a, 0x1b, 0x3a, 0x91, 0x08, 0xca, 0x67,
951 0x21, 0xf3, 0x8a, 0x4b, 0x5b, 0x00, 0xea, 0x09, 0xab,
952 0xc2, 0xa9, 0x0c, 0x39, 0xae, 0xd7, 0x75, 0xf3, 0xa7,
953 0x84, 0xf0, 0xaa, 0x1a, 0x0a, 0x18, 0xb9, 0x9a, 0xeb,
954 0xaf, 0x60, 0xfc, 0xc3, 0x38, 0x5c, 0x2c, 0x9a, 0x03,
955 0xaa, 0x50, 0xe0, 0x29, 0xab, 0x81, 0xe5, 0xb9, 0xe3,
956 0x7a, 0x0e, 0x1c, 0xf7, 0x0d, 0x9c, 0x1a, 0xdc, 0xa5,
957 0x6e, 0x98, 0x28, 0x9b, 0x91, 0xd8, 0xc2, 0x50, 0x85,
958 0x8e, 0x30, 0xe2, 0xc2, 0x1a, 0xfe, 0x39, 0xb9, 0x06,
959 0x35, 0xfb, 0xe1, 0x55, 0x40, 0xb7, 0x18, 0xc0, 0x30,
960 0x69, 0x6d, 0x1a, 0x4f, 0xfb, 0xef, 0xa8, 0xd8, 0xec,
961 0x1a, 0xcb, 0x56, 0x33, 0xc8, 0xf1, 0x9e, 0xb5, 0xcf,
962 0x91, 0x86, 0xe9, 0xec, 0x05, 0x94, 0xfd, 0xf1, 0x31,
963 0x2e, 0x62, 0xd4, 0x88, 0xfa, 0xd9, 0xa8, 0x94, 0xe1,
964 0x9a, 0x8e, 0x99, 0xde, 0x57, 0x8c, 0xc2, 0x95, 0xd5,
965 0x81, 0x64, 0x5c, 0x4f, 0xa2, 0x9a, 0x8f, 0x12, 0xd4,
966 0x48, 0x59, 0xeb, 0xb3, 0xe2, 0xbf, 0xf3, 0x51, 0xde,
967 0x91, 0x71, 0x89, 0x98, 0x72, 0x66, 0xbd, 0x47, 0xac,
968 0x72, 0x23, 0xa8, 0xd8, 0x57, 0xf7, 0x73, 0x0c, 0xef,
969 0x8a, 0x31, 0x2a, 0x51, 0x64, 0xd7, 0xb0, 0x0e, 0x0e,
970 0xed, 0xa4, 0xe2, 0x19, 0x52, 0x06, 0x2d, 0x8a, 0xce,
971 0xfe, 0x44, 0xe0, 0xb8, 0x9a, 0x37, 0xd0, 0xf5, 0xc3,
972 0x1c, 0x43, 0x45, 0xbc, 0x36, 0x0c, 0x93, 0x62, 0x69,
973 0xf9, 0x3a, 0xa4, 0xe0, 0x0d, 0x05, 0x27, 0x86, 0x81,
974 0xb3, 0x97, 0x17, 0xb9, 0xf3, 0x44, 0x5c, 0xdf, 0x7f,
975 0x98, 0xed, 0xad, 0x18, 0x5d, 0x15, 0xfd, 0xd0, 0x27,
976 0x39, 0x94, 0x85, 0x42, 0x86, 0x70, 0xb4, 0x30, 0xb0,
977 0x27, 0x02, 0xf3, 0x73, 0xe9, 0xf8, 0x6e, 0x4a, 0x6b,
978 0x33, 0xeb, 0xe7, 0x30, 0x95, 0x42, 0x74, 0x03, 0x79,
979 0x50, 0x22, 0x52, 0x78, 0x18, 0xb0, 0xd3, 0x31, 0x6a,
980 0xef, 0x9a, 0x27, 0x6e, 0xe8, 0x06, 0x26, 0x84, 0xb5,
981 0xc1, 0x6c, 0x68, 0x3a, 0x74, 0x8b, 0xdb, 0x0d, 0xac ),
982 AUTH ( 0xd0, 0x70, 0x38, 0x1d, 0xb3, 0xe8, 0xd4, 0x85, 0xe9, 0x41,
983 0x6c, 0x92, 0x06, 0x41, 0x80, 0xf1 ) );
984
985/* AES-GCM test case 27 */
986CIPHER_TEST ( wycheproof_aes_gcm_2ec43c3e, &aes_gcm_algorithm,
987 KEY ( 0x5a, 0x47, 0x5f, 0x99, 0x76, 0xed, 0x11, 0x7a, 0xb3, 0x7a,
988 0x4f, 0xff, 0xab, 0x05, 0x92, 0xeb ),
989 IV ( 0x6b, 0xce, 0x45, 0xbe, 0xa6, 0xad, 0x59, 0xbd, 0x2a, 0x08,
990 0xf7, 0xb3 ),
991 ADDITIONAL ( 0xe8, 0xbb, 0x51, 0xb6, 0x94, 0xb6, 0xb0, 0x76, 0x3e,
992 0x09, 0x7b, 0xad, 0x11, 0x52, 0xf5, 0xc7, 0x62, 0xa8,
993 0x78, 0xa3, 0xe7, 0xf7, 0xa9, 0xd7, 0x8e, 0x80, 0x98,
994 0x38, 0xde, 0x78, 0x56, 0x79, 0x00, 0x28, 0x1b, 0x7e,
995 0x4f, 0x0f, 0x18, 0x54, 0x93, 0xfd, 0x85, 0xe2, 0x8d,
996 0xb7, 0x9b, 0x59, 0x55, 0x41, 0xab, 0xa7, 0xe1, 0x58,
997 0xb3, 0x93, 0x64, 0x90, 0xb6, 0x32, 0x35, 0x5d, 0x74 ),
998 PLAINTEXT ( 0xdc, 0x6a, 0xb0, 0xe2, 0x61, 0x41, 0x2c, 0xc7, 0x09,
999 0x42, 0x22, 0x89, 0xea, 0x20, 0x20, 0x21, 0xd9, 0x29,
1000 0x80, 0x60 ),
1001 CIPHERTEXT ( 0x35, 0xd3, 0xab, 0x05, 0x34, 0x10, 0x28, 0x84, 0xed,
1002 0x0d, 0xb4, 0x69, 0x4a, 0x22, 0x1d, 0xf1, 0xbf, 0x94,
1003 0xdc, 0xdb ),
1004 AUTH ( 0xd7, 0x8d, 0x2c, 0x19, 0x7d, 0xeb, 0x70, 0xed, 0x52, 0x93,
1005 0x3f, 0x4f, 0xa0, 0xb0, 0x98, 0x56 ) );
1006
1007/* AES-GCM test case 28 */
1008CIPHER_TEST ( wycheproof_aes_gcm_b9939500, &aes_gcm_algorithm,
1009 KEY ( 0xc4, 0xb0, 0x34, 0x35, 0xb9, 0x1f, 0xc5, 0x2e, 0x09, 0xef,
1010 0xf2, 0x7e, 0x4d, 0xc3, 0xfb, 0x42 ),
1011 IV ( 0x50, 0x46, 0xe7, 0xe0, 0x8f, 0x07, 0x47, 0xe1, 0xef, 0xcc,
1012 0xb0, 0x9e ),
1013 ADDITIONAL ( 0x75, 0xfc, 0x90, 0x78, 0xb4, 0x88, 0xe9, 0x50, 0x3d,
1014 0xcb, 0x56, 0x8c, 0x88, 0x2c, 0x9e, 0xec, 0x24, 0xd8,
1015 0x0b, 0x04, 0xf0, 0x95, 0x8c, 0x82, 0xaa, 0xc8, 0x48,
1016 0x4f, 0x02, 0x5c, 0x90, 0x43, 0x41, 0x48, 0xdb, 0x8e,
1017 0x9b, 0xfe, 0x29, 0xc7, 0xe0, 0x71, 0xb7, 0x97, 0x45,
1018 0x7c, 0xb1, 0x69, 0x5a, 0x5e, 0x5a, 0x63, 0x17, 0xb8,
1019 0x36, 0x90, 0xba, 0x05, 0x38, 0xfb, 0x11, 0xe3, 0x25,
1020 0xca ),
1021 PLAINTEXT ( 0x8e, 0x88, 0x7b, 0x22, 0x4e, 0x8b, 0x89, 0xc8, 0x2e,
1022 0x9a, 0x64, 0x1c, 0xf5, 0x79, 0xe6, 0x87, 0x9e, 0x11,
1023 0x11, 0xc7 ),
1024 CIPHERTEXT ( 0xb6, 0x78, 0x68, 0x12, 0x57, 0x4a, 0x25, 0x4e, 0xb4,
1025 0x3b, 0x1c, 0xb1, 0xd1, 0x75, 0x35, 0x64, 0xc6, 0xb5,
1026 0x20, 0xe9 ),
1027 AUTH ( 0xad, 0x8c, 0x09, 0x61, 0x0d, 0x50, 0x8f, 0x3d, 0x0f, 0x03,
1028 0xcc, 0x52, 0x3c, 0x0d, 0x5f, 0xcc ) );
1029
1030/* AES-GCM test case 29 */
1031CIPHER_TEST ( wycheproof_aes_gcm_398af67e, &aes_gcm_algorithm,
1032 KEY ( 0xf6, 0x4d, 0x1b, 0xc4, 0x7b, 0x08, 0x1a, 0xfb, 0x21, 0x18,
1033 0x1b, 0xdc, 0x16, 0xff, 0xbc, 0xca ),
1034 IV ( 0x2c, 0x03, 0x29, 0x37, 0x04, 0xf7, 0x96, 0x12, 0x18, 0x16,
1035 0x09, 0xd3 ),
1036 ADDITIONAL ( 0xa8, 0x83, 0xd2, 0x3e, 0x25, 0xa6, 0x2b, 0x49, 0x2f,
1037 0x12, 0x71, 0xd3, 0xd7, 0x9b, 0x86, 0x89, 0xdd, 0xe7,
1038 0x25, 0x0a, 0x05, 0x75, 0xb8, 0x17, 0x5a, 0x6b, 0x69,
1039 0xd4, 0x8d, 0x1b, 0x4b, 0xc2, 0xdf, 0x1b, 0x4d, 0xc4,
1040 0xa2, 0xb1, 0xeb, 0x50, 0x6b, 0xc0, 0xe8, 0xc1, 0x1e,
1041 0x7d, 0xc2, 0xf3, 0xd0, 0x8b, 0x47, 0x52, 0x14, 0x55,
1042 0x1d, 0xf7, 0xc5, 0x3e, 0x58, 0x1e, 0xc5, 0x5c, 0x0d,
1043 0x0a, 0x2d ),
1044 PLAINTEXT ( 0x85, 0xb2, 0x49, 0x04, 0xbf, 0x12, 0xce, 0xd3, 0x3d,
1045 0x78, 0xdf, 0x74, 0x37, 0xb3, 0x6f, 0xff, 0x83, 0xd1,
1046 0xe8, 0x17 ),
1047 CIPHERTEXT ( 0xb0, 0x09, 0x75, 0x86, 0x3c, 0x67, 0x3f, 0x0f, 0x19,
1048 0x32, 0x62, 0x94, 0xeb, 0xc4, 0xc7, 0x7f, 0x72, 0x87,
1049 0xc2, 0x79 ),
1050 AUTH ( 0xae, 0x57, 0x62, 0x2c, 0x1d, 0x17, 0x5e, 0xbb, 0xca, 0x77,
1051 0xbd, 0x4e, 0xe8, 0x12, 0xed, 0x89 ) );
1052
1053/* AES-GCM test case 30 */
1054CIPHER_TEST ( wycheproof_aes_gcm_831a61d8, &aes_gcm_algorithm,
1055 KEY ( 0x7e, 0x0e, 0x0c, 0xf8, 0xc9, 0xac, 0x58, 0x86, 0x7e, 0xf3,
1056 0xe3, 0x31, 0x5d, 0x0a, 0x43, 0x38 ),
1057 IV ( 0xa0, 0x34, 0x61, 0xbd, 0x9f, 0xfe, 0xdb, 0x16, 0xa6, 0x5c,
1058 0x03, 0x89 ),
1059 ADDITIONAL ( 0xc7, 0x0f, 0x00, 0x9b, 0xe6, 0x5a, 0xde, 0x84, 0x65,
1060 0xcc, 0x05, 0xb5, 0x22, 0x79, 0x63, 0xc1, 0x2c, 0x60,
1061 0xb6, 0x82, 0x47, 0xae, 0x2e, 0x43, 0x1b, 0x24, 0x45,
1062 0xbb, 0x6a, 0xa6, 0x9c, 0x0a, 0x78, 0x20, 0x17, 0x78,
1063 0x61, 0xe5, 0xf6, 0xe3, 0x58, 0x52, 0x69, 0xfd, 0x15,
1064 0xef, 0xaf, 0x38, 0xc3, 0x71, 0x3e, 0x6a, 0xf0, 0xe9,
1065 0x33, 0x62, 0xd2, 0xd9, 0xa6, 0xe3, 0x29, 0x67, 0x12,
1066 0xf5, 0x81, 0x56, 0x3a, 0xe3, 0x98, 0x02, 0x98, 0xf8,
1067 0xbb, 0x72, 0x76, 0x85, 0x9a, 0xfe, 0xcc, 0x70, 0x52,
1068 0xfe, 0xf6, 0x3b, 0x06, 0x0b, 0xc8, 0xf2, 0x19, 0xff,
1069 0xe2, 0x00, 0xe1, 0x4d, 0xbd, 0xe1, 0xf0, 0xa3, 0x62,
1070 0x33, 0xb5, 0x99, 0x4a, 0x0b, 0x68, 0xc4, 0x69, 0x0b,
1071 0x43, 0x7d, 0x49, 0x5d, 0xdf, 0xf9, 0x91, 0x99, 0x3e,
1072 0x75, 0x03, 0x9b, 0xcb, 0xa4, 0xc1, 0x9d, 0x7a, 0x6f,
1073 0x01 ),
1074 PLAINTEXT ( 0xde, 0x44, 0x51, 0x31, 0x6a, 0xd8, 0x20, 0x47, 0x1a,
1075 0x43, 0x90, 0x69, 0x65, 0xaf, 0x9f, 0xa2, 0x21, 0xc0,
1076 0x36, 0x0f ),
1077 CIPHERTEXT ( 0x8b, 0x9d, 0xcb, 0xd9, 0xc9, 0x57, 0x35, 0x09, 0xd9,
1078 0x78, 0xdb, 0x0d, 0x91, 0x0e, 0x26, 0x96, 0x12, 0xc9,
1079 0x07, 0xbf ),
1080 AUTH ( 0x61, 0xae, 0x3a, 0xfd, 0xb0, 0x6a, 0x01, 0xd8, 0xee, 0x6f,
1081 0x7e, 0x73, 0x9e, 0xc3, 0x0a, 0x4e ) );
1082
1083/* AES-GCM test case 31 */
1084CIPHER_TEST ( wycheproof_aes_gcm_63336678, &aes_gcm_algorithm,
1085 KEY ( 0x7e, 0x37, 0xd5, 0x6e, 0x6b, 0x1d, 0x01, 0x72, 0xd4, 0x0d,
1086 0x64, 0xd6, 0x11, 0x1d, 0xd4, 0x24 ),
1087 IV ( 0x51, 0x7c, 0x55, 0xc2, 0xec, 0x9b, 0xfe, 0xa9, 0x0a, 0xdd,
1088 0xc2, 0xbd ),
1089 ADDITIONAL ( 0x8e, 0xd8, 0xa9, 0xbe, 0x4c, 0x3d, 0x32, 0xa5, 0x09,
1090 0x84, 0x34, 0xee, 0x5c, 0x0c, 0x4f, 0xc2, 0x0f, 0x78,
1091 0xef, 0x5e, 0x25, 0xed, 0x8b, 0x72, 0xa8, 0x40, 0xa4,
1092 0x63, 0xe3, 0x6b, 0x67, 0xb8, 0x81, 0xe0, 0x48, 0xb5,
1093 0xe4, 0x9f, 0x51, 0x5b, 0x25, 0x41, 0xad, 0x5c, 0xe4,
1094 0xeb, 0xb3, 0xa9, 0x17, 0xc1, 0x6b, 0xcd, 0xc0, 0xdc,
1095 0x3c, 0xb5, 0x2b, 0xb4, 0xed, 0x5a, 0x1d, 0xff, 0xcf,
1096 0x1e, 0x18, 0x66, 0x54, 0x4e, 0x8d, 0xb1, 0x03, 0xb2,
1097 0xad, 0x99, 0xc6, 0xfa, 0x6e, 0x7d, 0xe1, 0xd8, 0xb4,
1098 0x5b, 0xff, 0x57, 0xec, 0x87, 0x2f, 0x1c, 0xfc, 0x78,
1099 0xb0, 0xe4, 0x87, 0x0f, 0x6f, 0x20, 0x0f, 0xf1, 0x29,
1100 0x1c, 0xae, 0x03, 0x3d, 0xef, 0xc3, 0x32, 0x7b, 0xa8,
1101 0x27, 0x92, 0xba, 0x43, 0x8e, 0x35, 0xc4, 0xbf, 0xbb,
1102 0x68, 0x4f, 0xec, 0x5c, 0xe5, 0xe3, 0xae, 0x16, 0x7d,
1103 0x01, 0xd7 ),
1104 PLAINTEXT ( 0x6a, 0x7d, 0xea, 0x03, 0xc1, 0xbb, 0xa7, 0x0b, 0xe8,
1105 0xc7, 0x3d, 0xa4, 0x7d, 0x5e, 0xe0, 0x6d, 0x72, 0xa2,
1106 0x74, 0x30 ),
1107 CIPHERTEXT ( 0xcf, 0xb6, 0x31, 0x79, 0x07, 0x67, 0xd0, 0x64, 0x5d,
1108 0x8e, 0xc6, 0xf2, 0x3b, 0xf7, 0xfa, 0x8b, 0x19, 0xce,
1109 0x79, 0xee ),
1110 AUTH ( 0xc5, 0x76, 0x7d, 0xda, 0xa7, 0x47, 0x15, 0x84, 0x46, 0x23,
1111 0x17, 0x66, 0xbd, 0x20, 0x49, 0x0c ) );
1112
1113/* AES-GCM test case 32 */
1114CIPHER_TEST ( wycheproof_aes_gcm_a88873d1, &aes_gcm_algorithm,
1115 KEY ( 0xd9, 0x21, 0x89, 0x31, 0xdc, 0x59, 0x2a, 0xef, 0x3b, 0xff,
1116 0xb9, 0x24, 0xc9, 0xe0, 0xb0, 0x2c ),
1117 IV ( 0x17, 0xd8, 0x24, 0xf4, 0xf2, 0xf1, 0x91, 0xe9, 0xc9, 0xdc,
1118 0x0a, 0x52 ),
1119 ADDITIONAL ( 0x76, 0xdc, 0xb9, 0x94, 0x85, 0x75, 0xb5, 0x03, 0xfe,
1120 0xa7, 0x5c, 0xb3, 0xd4, 0x94, 0x9b, 0xb9, 0x6a, 0xe3,
1121 0xd2, 0xc1, 0x78, 0x0f, 0x18, 0x5e, 0x0f, 0xb3, 0xcd,
1122 0x5b, 0x83, 0xeb, 0x70, 0x90, 0xbe, 0x7a, 0x96, 0x6f,
1123 0x61, 0x46, 0xa4, 0xdb, 0x7e, 0xf8, 0x2f, 0x8a, 0xdb,
1124 0x9b, 0x10, 0x15, 0x8b, 0x69, 0xd4, 0xbb, 0x19, 0xdf,
1125 0xfe, 0x4c, 0x63, 0x9f, 0xe2, 0x78, 0xd0, 0x33, 0x4e,
1126 0x68, 0xaa, 0xf1, 0xb6, 0x84, 0x51, 0xa8, 0xe6, 0x77,
1127 0x8d, 0xdb, 0xb2, 0x9a, 0xac, 0x4b, 0x25, 0xbc, 0xb2,
1128 0xea, 0x05, 0x96, 0x01, 0xee, 0x2e, 0xba, 0x43, 0x91,
1129 0x34, 0xae, 0xcd, 0x0c, 0xea, 0xcd, 0x98, 0xe3, 0x88,
1130 0xc4, 0x01, 0x14, 0xc1, 0x19, 0x69, 0xdf, 0xd4, 0xa1,
1131 0x6b, 0xee, 0xaf, 0x3d, 0x1c, 0x74, 0x10, 0xe9, 0x9e,
1132 0x67, 0x48, 0x94, 0x44, 0x58, 0x21, 0xe8, 0xfc, 0xda,
1133 0x7b, 0x7b, 0xa7 ),
1134 PLAINTEXT ( 0x29, 0xf2, 0x9b, 0xfc, 0x5b, 0x09, 0xff, 0x15, 0x8d,
1135 0x74, 0xfb, 0xf7, 0x53, 0x2c, 0x06, 0xaa, 0x3a, 0xfa,
1136 0x93, 0x6c ),
1137 CIPHERTEXT ( 0xd0, 0xd2, 0x2c, 0xc0, 0x89, 0x32, 0x61, 0xb1, 0x05,
1138 0xc0, 0x21, 0xf5, 0x34, 0x73, 0x75, 0x99, 0xca, 0xc3,
1139 0xb1, 0x0d ),
1140 AUTH ( 0xf5, 0x5f, 0x4a, 0xc6, 0xd8, 0x36, 0xfc, 0x28, 0x80, 0x36,
1141 0xa6, 0x3f, 0x53, 0xb0, 0xdd, 0xd4 ) );
1142
1143/* AES-GCM test case 33 */
1144CIPHER_TEST ( wycheproof_aes_gcm_febb3d17, &aes_gcm_algorithm,
1145 KEY ( 0xbf, 0x20, 0x56, 0xba, 0xaf, 0x45, 0xc5, 0xa0, 0x0a, 0x73,
1146 0x3b, 0x49, 0xf1, 0x0b, 0x7d, 0xd0 ),
1147 IV ( 0xfe, 0xf1, 0xb2, 0x43, 0xb4, 0x4b, 0xa9, 0x2b, 0x47, 0xc6,
1148 0x62, 0x6b ),
1149 ADDITIONAL ( 0x1b, 0xb3, 0xa1, 0x79, 0x07, 0x27, 0x9e, 0xbf, 0xf6,
1150 0x35, 0x93, 0xde, 0x97, 0xa6, 0x4e, 0x5c, 0xea, 0xf9,
1151 0xe1, 0xd4, 0x07, 0xe5, 0xa5, 0xee, 0xc1, 0xce, 0x0f,
1152 0x62, 0x58, 0x6f, 0x0d, 0xfd, 0xdb, 0x7a, 0x3a, 0x83,
1153 0xfd, 0x16, 0x4e, 0x80, 0x0b, 0xcb, 0xc6, 0xfb, 0x08,
1154 0x9d, 0x6a, 0x24, 0x7d, 0xfa, 0x44, 0x46, 0x33, 0xf4,
1155 0x66, 0x3a, 0xe1, 0xe0, 0xbd, 0xf3, 0x7b, 0x50, 0xa7,
1156 0xa0, 0x1f, 0x50, 0x6e, 0x22, 0x20, 0xbb, 0xdd, 0x4b,
1157 0x08, 0xc5, 0x9f, 0xe6, 0x0e, 0x45, 0x5b, 0xda, 0xed,
1158 0xa7, 0xe5, 0xa0, 0xcd, 0xb2, 0xe6, 0xdf, 0xca, 0x66,
1159 0x38, 0x1a, 0x72, 0x96, 0x2f, 0xa8, 0xa6, 0xf9, 0x84,
1160 0x7a, 0x87, 0x13, 0x5c, 0xcf, 0x02, 0xa4, 0x0d, 0xa5,
1161 0xb3, 0xb8, 0xe9, 0x1e, 0x6e, 0x1f, 0x31, 0x54, 0x2f,
1162 0x85, 0xf9, 0x0b, 0xce, 0x1d, 0xe0, 0x51, 0x88, 0xfe,
1163 0x57, 0x35, 0x53, 0x29, 0x03, 0x1c, 0x66, 0xb3, 0xfd,
1164 0xe1, 0x8b, 0xbd, 0xcb, 0xd2, 0xcb, 0xec, 0x42, 0xea,
1165 0x1d, 0x0f, 0xc8, 0x03, 0xab, 0xed, 0x2f, 0x15, 0xc4,
1166 0x1d, 0x2f, 0x12, 0x26, 0x74, 0xea, 0x91, 0xb7, 0x28,
1167 0x0e, 0x81, 0x8a, 0xcb, 0x75, 0x49, 0xfe, 0x63, 0x13,
1168 0x5d, 0x21, 0x09, 0xb4, 0x01, 0x4e, 0xc6, 0x00, 0x27,
1169 0x45, 0x30, 0x1b, 0xd0, 0xac, 0x59, 0xca, 0x8e, 0x4f,
1170 0x8d, 0x2f, 0xb6, 0x99, 0x34, 0x7b, 0x74, 0xe1, 0x78,
1171 0x18, 0xe3, 0xa5, 0x7f, 0xa6, 0x9c, 0x75, 0x93, 0x12,
1172 0xdc, 0xfd, 0xe1, 0x55, 0xb2, 0xa5, 0x58, 0xa2, 0x38,
1173 0x5c, 0x8a, 0xda, 0xb8, 0xa6, 0xd5, 0x7f, 0x0f, 0x49,
1174 0x7e, 0xaf, 0x08, 0x33, 0xe3, 0xd9, 0x30, 0xe8, 0x3f,
1175 0xed, 0x88, 0xc9, 0x1e, 0x18, 0xa7, 0x4c, 0x4f, 0x5f,
1176 0xf4, 0x59, 0x25, 0xa2, 0xbb, 0xdd, 0xa2, 0x2f, 0x9a,
1177 0x4f, 0x11, 0x96 ),
1178 PLAINTEXT ( 0x7e, 0x8c, 0x2d, 0x8a, 0x65, 0xf5, 0x39, 0x21, 0x0c,
1179 0x04, 0x74, 0x22, 0xae, 0x57, 0x54, 0x91, 0x95, 0xa0,
1180 0x83, 0x93 ),
1181 CIPHERTEXT ( 0x1f, 0xcc, 0x05, 0xbf, 0x49, 0x60, 0xfd, 0x02, 0x47,
1182 0x5c, 0x07, 0x2f, 0x9e, 0xee, 0x81, 0x50, 0x99, 0x4e,
1183 0xdc, 0xb9 ),
1184 AUTH ( 0xf3, 0xe0, 0x92, 0xf2, 0x41, 0x5f, 0x7f, 0x0c, 0xe8, 0x8f,
1185 0x37, 0xa2, 0x49, 0x5d, 0xce, 0x48 ) );
1186
1187/* AES-GCM test case 34 */
1188CIPHER_TEST ( wycheproof_aes_gcm_6e67f3d3, &aes_gcm_algorithm,
1189 KEY ( 0x6f, 0x83, 0x07, 0xbb, 0x3d, 0x83, 0xd6, 0x78, 0x66, 0xc2,
1190 0xfa, 0x5b, 0x26, 0xf9, 0xca, 0xde ),
1191 IV ( 0xdf, 0xe9, 0x3e, 0xd8, 0x79, 0xe4, 0xb3, 0x91, 0xeb, 0xbb,
1192 0xfd, 0x37 ),
1193 ADDITIONAL ( 0x1d, 0x72, 0x72, 0x0d, 0xbb, 0xc4, 0x03, 0x33, 0xe8,
1194 0x19, 0xa4, 0xde, 0xf8, 0x1f, 0x7b, 0xae, 0x13, 0x7d,
1195 0x8e, 0x52, 0xdc, 0x01, 0x0e, 0xd9, 0x01, 0xa3, 0x90,
1196 0xbf, 0x8c, 0x0a, 0xb6, 0xb4, 0x35, 0xb0, 0x8e, 0xf0,
1197 0x18, 0x48, 0x88, 0xbc, 0x83, 0xb1, 0x4b, 0x98, 0xb5,
1198 0x9f, 0x6c, 0x56, 0xaf, 0xd4, 0x61, 0x31, 0xc5, 0x62,
1199 0x7b, 0x9e, 0x2a, 0x44, 0xf0, 0xa1, 0x2a, 0x9a, 0x53,
1200 0x56, 0xd9, 0x09, 0x0c, 0x8b, 0x19, 0xc9, 0x4f, 0x3f,
1201 0x86, 0x51, 0xd4, 0x9c, 0x74, 0x27, 0x6b, 0xd9, 0xae,
1202 0x10, 0x71, 0xca, 0xd5, 0xf5, 0x04, 0x0f, 0xbe, 0x1e,
1203 0x99, 0x12, 0x4e, 0xf4, 0x4f, 0x3f, 0x81, 0x3b, 0x13,
1204 0xdf, 0xf9, 0x58, 0xe7, 0x33, 0x1b, 0x94, 0x91, 0x93,
1205 0xbd, 0xf5, 0x58, 0xfd, 0x14, 0x03, 0x2c, 0x54, 0xf0,
1206 0xe0, 0xae, 0x7a, 0xc4, 0xd2, 0xe6, 0xa9, 0x9d, 0x82,
1207 0xa5, 0xda, 0x41, 0x13, 0x5f, 0x05, 0x43, 0xad, 0x37,
1208 0x7d, 0x21, 0x71, 0x52, 0x49, 0x7c, 0xf8, 0x64, 0x35,
1209 0xd2, 0x4e, 0xe0, 0xc7, 0x59, 0x97, 0xe3, 0x86, 0x31,
1210 0x33, 0xd3, 0x22, 0x01, 0x7a, 0xec, 0x98, 0x05, 0x0b,
1211 0x2f, 0xbc, 0x1d, 0xd8, 0x54, 0x22, 0x93, 0xae, 0x70,
1212 0x68, 0x89, 0xe7, 0x54, 0xda, 0xf6, 0xff, 0x8c, 0x91,
1213 0xfb, 0x65, 0x33, 0xc5, 0xdb, 0x73, 0x75, 0xdd, 0x3e,
1214 0x36, 0x5e, 0x6a, 0x18, 0xc5, 0x46, 0xfa, 0x94, 0x63,
1215 0xdf, 0xdb, 0x21, 0xd5, 0x1c, 0x9c, 0xf2, 0x3c, 0x92,
1216 0x84, 0xa6, 0x3c, 0xbf, 0xad, 0x19, 0x7f, 0x37, 0x66,
1217 0x01, 0x10, 0x1c, 0xb2, 0xf8, 0xa6, 0x7b, 0x6e, 0x86,
1218 0x65, 0x69, 0x21, 0x80, 0x43, 0xcd, 0x17, 0x45, 0xd2,
1219 0x5e, 0xcd, 0xdf, 0x60, 0x9c, 0xe2, 0xf9, 0xa8, 0xf7,
1220 0x6f, 0xb8, 0x83, 0x78, 0x0a, 0x39, 0x3e, 0xa1, 0x8b,
1221 0x76, 0x24, 0x37, 0x6b ),
1222 PLAINTEXT ( 0x81, 0xeb, 0xf6, 0x97, 0x54, 0x85, 0x7b, 0xe5, 0xad,
1223 0x7d, 0xdf, 0x00, 0x62, 0xf8, 0x66, 0x42, 0x10, 0x89,
1224 0xd1, 0x36 ),
1225 CIPHERTEXT ( 0x4d, 0x8f, 0xf7, 0x2d, 0x85, 0x9b, 0xae, 0x11, 0x14,
1226 0x20, 0x1c, 0x41, 0x9c, 0x09, 0x84, 0x76, 0xe7, 0x4e,
1227 0xec, 0xe9 ),
1228 AUTH ( 0x3b, 0x2e, 0x9e, 0x1b, 0x37, 0x8d, 0x70, 0x7b, 0xd2, 0xa9,
1229 0x61, 0xbd, 0x78, 0x11, 0xf0, 0xc7 ) );
1230
1231/* AES-GCM test case 35 */
1232CIPHER_TEST ( wycheproof_aes_gcm_7e3aa6d7, &aes_gcm_algorithm,
1233 KEY ( 0x30, 0x76, 0x74, 0x14, 0x08, 0xf7, 0x34, 0xce, 0x25, 0xd4,
1234 0x8f, 0x98, 0x2e, 0x8b, 0x84, 0x4b ),
1235 IV ( 0xa2, 0x71, 0x2e, 0xac, 0x5e, 0x06, 0xd3, 0xcc, 0x28, 0x64,
1236 0xaa, 0x8b ),
1237 ADDITIONAL ( 0x18, 0x52, 0x6e, 0x4e, 0xfd, 0x99, 0x5a, 0x0b, 0xf6,
1238 0x40, 0x5d, 0x9f, 0x90, 0x67, 0x25, 0xc2, 0x90, 0x27,
1239 0x89, 0x58, 0xd4, 0x95, 0x54, 0x97, 0x4d, 0x8f, 0xe0,
1240 0x25, 0xe7, 0x86, 0x0d, 0xaa, 0x22, 0x5c, 0x12, 0x85,
1241 0xb0, 0x57, 0x39, 0x16, 0xa4, 0xb6, 0x74, 0x1f, 0x7c,
1242 0xc2, 0xe2, 0x9c, 0xe4, 0xe5, 0x25, 0xe1, 0x2f, 0x43,
1243 0x6c, 0xb7, 0xce, 0x0a, 0xd4, 0x7d, 0xf3, 0xd0, 0xf5,
1244 0xbd, 0x80, 0xfb, 0x27, 0xe4, 0x76, 0x35, 0xa4, 0x98,
1245 0x5f, 0xda, 0xed, 0xf0, 0xe8, 0x21, 0xf1, 0xc8, 0x95,
1246 0x99, 0x85, 0xca, 0xc4, 0x9c, 0x97, 0xa4, 0xa0, 0x24,
1247 0x38, 0xd9, 0x2b, 0x4a, 0xfd, 0x4c, 0x85, 0x5d, 0xcc,
1248 0x7e, 0xf4, 0x1e, 0xcf, 0xc3, 0x68, 0x66, 0x33, 0x4f,
1249 0xcc, 0x05, 0xb2, 0xbb, 0x93, 0xef, 0x13, 0xf0, 0x0c,
1250 0x5e, 0xa9, 0xb9, 0x21, 0xe8, 0xa5, 0x19, 0xd7, 0x7f,
1251 0x64, 0x8e, 0x0e, 0xfe, 0x9b, 0x5a, 0x62, 0x30, 0x5a,
1252 0x2e, 0xcf, 0x7d, 0x49, 0x99, 0x66, 0x3a, 0x6d, 0xdf,
1253 0xca, 0x51, 0x7f, 0x1f, 0x36, 0xf0, 0x89, 0x9b, 0x0b,
1254 0xde, 0xf9, 0xf4, 0x33, 0xc4, 0xbb, 0x26, 0x63, 0xc0,
1255 0xcc, 0x1b, 0xb6, 0x16, 0xe7, 0xd1, 0x94, 0x9e, 0x52,
1256 0x2b, 0xec, 0x85, 0x48, 0x5d, 0x37, 0x1d, 0x11, 0x34,
1257 0xc9, 0x0e, 0xed, 0xe7, 0x5e, 0x86, 0x5d, 0xc7, 0xbe,
1258 0x40, 0x5b, 0x54, 0xc3, 0x3f, 0x0a, 0xcb, 0xac, 0xe6,
1259 0xcf, 0x78, 0x0c, 0x78, 0x03, 0x5b, 0x80, 0x35, 0xb6,
1260 0xea, 0x3f, 0x56, 0x2a, 0x8d, 0x30, 0xa1, 0x56, 0xc1,
1261 0x99, 0xfd, 0xaf, 0xd2, 0x5b, 0xe0, 0x6e, 0xe8, 0x95,
1262 0x58, 0x11, 0x95, 0xef, 0x12, 0x5c, 0xb4, 0xe6, 0x29,
1263 0xe4, 0xf1, 0x8e, 0x0b, 0xee, 0x97, 0x9d, 0x31, 0x51,
1264 0x38, 0x96, 0xdb, 0x84, 0x66, 0xe4, 0x48, 0xe6, 0xb4,
1265 0x60, 0x0a, 0x31, 0x67, 0x57 ),
1266 PLAINTEXT ( 0x41, 0x4e, 0xc6, 0xb1, 0x49, 0xe5, 0x47, 0x35, 0x30,
1267 0x2d, 0xad, 0xa8, 0x88, 0xb9, 0x8b, 0x7f, 0xdb, 0x4c,
1268 0x12, 0x7c ),
1269 CIPHERTEXT ( 0xe4, 0xd3, 0xf4, 0x89, 0x8c, 0xb3, 0xd9, 0x73, 0x26,
1270 0x41, 0xd1, 0xf8, 0xd9, 0xd8, 0x89, 0xb2, 0xc9, 0x8a,
1271 0xf9, 0x30 ),
1272 AUTH ( 0x76, 0xd4, 0xfb, 0xb6, 0x9d, 0x52, 0x9b, 0x64, 0x17, 0x5b,
1273 0x32, 0x8b, 0xe0, 0x0b, 0x10, 0x68 ) );
1274
1275/* AES-GCM test case 36 */
1276CIPHER_TEST ( wycheproof_aes_gcm_507e4bb7, &aes_gcm_algorithm,
1277 KEY ( 0x01, 0x84, 0x2c, 0x51, 0xb9, 0x94, 0x3d, 0xa4, 0xec, 0x4e,
1278 0xff, 0xc0, 0x57, 0xf8, 0xc3, 0xe3 ),
1279 IV ( 0x0d, 0x5b, 0xf8, 0xad, 0xe3, 0x8e, 0xd3, 0x84, 0x86, 0x18,
1280 0x39, 0xb8 ),
1281 ADDITIONAL ( 0xe2, 0xb0, 0xc0, 0x47, 0xee, 0x9a, 0x7e, 0xbd, 0xe0,
1282 0xbc, 0x5c, 0x2a, 0x77, 0x3f, 0x02, 0x70, 0x3f, 0x25,
1283 0x26, 0x22, 0x6d, 0x7f, 0xd7, 0x21, 0xa6, 0xbd, 0xae,
1284 0x1d, 0x97, 0x01, 0xda, 0x98, 0x6d, 0xb6, 0xc9, 0xbf,
1285 0x22, 0x4f, 0x03, 0x29, 0x47, 0xbb, 0xcc, 0x40, 0xb2,
1286 0x69, 0xe4, 0x0c, 0x7a, 0x4f, 0xc1, 0xa3, 0xd6, 0x67,
1287 0xcf, 0x63, 0x79, 0x84, 0x3e, 0xcc, 0x3b, 0x9d, 0x06,
1288 0x64, 0xdc, 0xde, 0x0d, 0xfe, 0x8d, 0x80, 0x3a, 0xa8,
1289 0xe1, 0x4a, 0x59, 0xcf, 0xea, 0x1c, 0xc5, 0x8b, 0xd9,
1290 0x3e, 0x8a, 0x54, 0xd5, 0x93, 0x62, 0x29, 0xa2, 0x1c,
1291 0x49, 0x7b, 0xd7, 0x5c, 0x45, 0x34, 0xe1, 0x94, 0x80,
1292 0xb2, 0xa5, 0x0a, 0xe8, 0xde, 0x0b, 0x90, 0x6f, 0x75,
1293 0xc1, 0xdc, 0xf7, 0x37, 0xb5, 0x17, 0x9d, 0xaf, 0x75,
1294 0x1c, 0x3d, 0x6f, 0x51, 0xa1, 0x11, 0x1c, 0x48, 0x65,
1295 0x13, 0x93, 0x93, 0xee, 0x95, 0x96, 0x33, 0x93, 0xa8,
1296 0xf9, 0x80, 0x05, 0x54, 0x67, 0x59, 0x56, 0x5b, 0xaf,
1297 0x95, 0xbe, 0x23, 0x34, 0xe5, 0x7f, 0x7c, 0x23, 0x27,
1298 0x2c, 0x9e, 0xca, 0x77, 0x8d, 0x99, 0x56, 0xee, 0x16,
1299 0xb1, 0x87, 0xfe, 0x30, 0x9d, 0x9e, 0x1e, 0x69, 0x9c,
1300 0x1a, 0x8a, 0xcd, 0xf3, 0x70, 0xfb, 0xca, 0xb3, 0x7b,
1301 0x1e, 0x10, 0x79, 0x34, 0xbb, 0x15, 0x69, 0x87, 0xa2,
1302 0x82, 0xbd, 0xef, 0x9f, 0x9a, 0x92, 0x75, 0x84, 0x74,
1303 0xd8, 0x08, 0xa3, 0xe3, 0xb1, 0x91, 0xa6, 0x47, 0x6f,
1304 0x3e, 0x6e, 0xd4, 0x9d, 0xc0, 0x84, 0x51, 0xe3, 0x40,
1305 0x4e, 0x65, 0x91, 0x8f, 0xdb, 0xa3, 0x3b, 0xa8, 0xea,
1306 0x3b, 0xa0, 0x9b, 0x56, 0x69, 0xb4, 0xbe, 0x9a, 0x64,
1307 0xb9, 0x3b, 0xae, 0x5d, 0xe6, 0x62, 0xb8, 0xf3, 0x5d,
1308 0x4a, 0xbb, 0xb6, 0x81, 0x18, 0xde, 0x9d, 0x02, 0x5e,
1309 0xbe, 0xb5, 0x99, 0xa9, 0xcd, 0x2b, 0x0e, 0x35, 0xfd,
1310 0x82, 0xaa, 0x0d, 0xf2, 0xd4, 0x3b, 0x60, 0xa6, 0x15,
1311 0x12, 0xd5, 0xaf, 0x93, 0x44, 0x89, 0x30, 0x25, 0x72,
1312 0xf9, 0x28, 0xb7, 0x90, 0xe6, 0xaa, 0xdf, 0xf6, 0xb7,
1313 0x30, 0x4b, 0x1a, 0x40, 0x80, 0xcc, 0x4f, 0xaf, 0x8c,
1314 0x69, 0x8d, 0xaa, 0x30, 0x45, 0xc9, 0x45, 0xd8, 0x28,
1315 0xd9, 0x15, 0xda, 0x6d, 0xda, 0x06, 0x62, 0x54, 0x5f,
1316 0x7d, 0x85, 0x29, 0x7a, 0x36, 0x43, 0x8e, 0xa7, 0x31,
1317 0x5a, 0x48, 0xd9, 0xa0, 0x97, 0x14, 0x07, 0x76, 0xf3,
1318 0xc4, 0x3d, 0x28, 0xf5, 0x22, 0xf8, 0xaf, 0xa0, 0x30,
1319 0x00, 0xc5, 0xa0, 0x19, 0x2b, 0x5f, 0xb7, 0x76, 0xb3,
1320 0xbd, 0x06, 0xd3, 0xd9, 0xc5, 0x2c, 0x87, 0x3f, 0xcc,
1321 0xb0, 0xec, 0xd1, 0xa8, 0xe1, 0x41, 0x87, 0xae, 0x26,
1322 0x21, 0xd2, 0xe2, 0x84, 0x8a, 0xe3, 0x0a, 0xf7, 0xed,
1323 0x07, 0x58, 0xfd, 0xbb, 0xc4, 0x97, 0xaa, 0x69, 0xd5,
1324 0x84, 0x41, 0xf4, 0xd4, 0xb8, 0xea, 0x13, 0xaa, 0xac,
1325 0x97, 0xc4, 0xbf, 0xfc, 0x4d, 0x07, 0xdb, 0xc6, 0x2a,
1326 0xe2, 0x7f, 0x00, 0xa8, 0xdb, 0x0c, 0x5d, 0x1b, 0xb2,
1327 0x40, 0x42, 0x48, 0x13, 0x69, 0xf6, 0xcc, 0xd4, 0xdf,
1328 0x85, 0xd9, 0xc5, 0x8a, 0x90, 0x06, 0x98, 0x97, 0xe1,
1329 0x7a, 0xe0, 0x33, 0x42, 0x48, 0xe1, 0x33, 0x06, 0xa9,
1330 0x36, 0x69, 0x7d, 0x2b, 0x5d, 0xad, 0xde, 0x5a, 0xc6,
1331 0xc1, 0x0b, 0x55, 0x4b, 0x6b, 0xbd, 0x27, 0x75, 0x21,
1332 0x01, 0xb5, 0xdf, 0x1f, 0x1c, 0xbb, 0x8c, 0x0e, 0xc1,
1333 0x97, 0x7c, 0x45, 0x81, 0xab, 0x8d, 0xcd, 0x26, 0xa3,
1334 0x1d, 0xff, 0x01, 0x43, 0x37, 0x85, 0x20, 0x6b, 0x65,
1335 0x95, 0xe3, 0xb8, 0x24, 0xb5, 0x83, 0x42, 0x95, 0x40,
1336 0x7f, 0x50, 0x27, 0x15, 0x9e, 0xee, 0x46, 0x18, 0x9f,
1337 0x39, 0x05, 0x37, 0xdd, 0xce, 0x6d, 0xb5 ),
1338 PLAINTEXT ( 0xdf, 0xc4, 0x0c, 0xf3, 0x87, 0x38, 0x67, 0x51, 0x20,
1339 0xf0, 0x3b, 0x12, 0x50, 0x55, 0x89, 0xb2, 0xf0, 0x2b,
1340 0xba, 0x68 ),
1341 CIPHERTEXT ( 0xe4, 0x03, 0x53, 0x56, 0xa3, 0x4b, 0xb0, 0x1e, 0xa6,
1342 0x5c, 0x7e, 0x6d, 0x97, 0x2c, 0xb4, 0xce, 0xc0, 0x25,
1343 0x2a, 0x79 ),
1344 AUTH ( 0x10, 0x54, 0xef, 0x6b, 0xc0, 0xa5, 0x15, 0x64, 0x45, 0xcf,
1345 0x76, 0x0a, 0x2a, 0x65, 0xd8, 0x47 ) );
1346
1347/* AES-GCM test case 37 */
1348CIPHER_TEST ( wycheproof_aes_gcm_a74ffd89, &aes_gcm_algorithm,
1349 KEY ( 0x67, 0xbd, 0x1f, 0xe8, 0x3e, 0x45, 0x00, 0xdd, 0xae, 0xa7,
1350 0x21, 0x03, 0x5d, 0x4c, 0xf7, 0xe4 ),
1351 IV ( 0x54, 0x49, 0xb2, 0x93, 0xc8, 0x49, 0xbe, 0x99, 0x41, 0xb1,
1352 0xfb, 0x3e ),
1353 ADDITIONAL ( 0x18, 0xb8, 0xe9, 0xb1, 0x41, 0x28, 0x8c, 0xa8, 0x91,
1354 0x60, 0x6a, 0x88, 0x98, 0x70, 0x57, 0xfa, 0x07, 0x8e,
1355 0xfc, 0x47, 0xc0, 0xe2, 0x70, 0xb3, 0x69, 0x85, 0xc9,
1356 0x24, 0x50, 0x6e, 0x4f, 0x8e, 0x4a, 0x3d, 0x15, 0x41,
1357 0xd0, 0x53, 0x5f, 0x51, 0x5a, 0x37, 0x0a, 0x34, 0x00,
1358 0xe2, 0x40, 0x8f, 0xc9, 0x2d, 0x21, 0x7f, 0x9f, 0x37,
1359 0xfb, 0x0b, 0x97, 0x2a, 0x3a, 0x76, 0x02, 0xca, 0xc9,
1360 0x8f, 0x8f, 0x02, 0x31, 0xa4, 0xd7, 0x6c, 0xf5, 0x84,
1361 0xd9, 0x23, 0x9e, 0xe8, 0x16, 0x76, 0x5c, 0xec, 0xd2,
1362 0x8f, 0x32, 0x5b, 0x90, 0x7e, 0x0b, 0x02, 0xb2, 0x60,
1363 0x60, 0x9c, 0x70, 0x22, 0x6a, 0x16, 0xec, 0xd9, 0xbd,
1364 0x67, 0xa6, 0x4e, 0xa1, 0x2c, 0x4b, 0x24, 0x9c, 0x05,
1365 0xa9, 0x01, 0x12, 0x94, 0x02, 0x00, 0xdf, 0x3e, 0x70,
1366 0x51, 0x9a, 0x4b, 0x9e, 0xc1, 0x36, 0xb6, 0xf5, 0x35,
1367 0xd4, 0xb8, 0xb2, 0xae, 0x16, 0xc5, 0xa5, 0x4c, 0xb8,
1368 0xc5, 0x7d, 0x87, 0x45, 0x16, 0x97, 0xe5, 0x10, 0x1e,
1369 0x1d, 0x09, 0xa9, 0x4d, 0x21, 0x17, 0xb3, 0x0c, 0xe9,
1370 0x0c, 0x36, 0x85, 0x11, 0x7e, 0x21, 0x94, 0xa3, 0x79,
1371 0xe7, 0xa5, 0x75, 0x4d, 0xa2, 0x01, 0x79, 0x58, 0x2f,
1372 0x97, 0x76, 0x7e, 0x63, 0x3d, 0x14, 0x11, 0x85, 0xfe,
1373 0x37, 0x84, 0xa4, 0x4d, 0x94, 0x21, 0x0b, 0x21, 0x47,
1374 0x68, 0xaa, 0x51, 0x11, 0x7e, 0xd5, 0xc8, 0x80, 0x61,
1375 0x36, 0x23, 0xe4, 0xaa, 0xbb, 0xb6, 0x47, 0x72, 0x17,
1376 0x64, 0xa5, 0x13, 0x42, 0x5b, 0x8d, 0x90, 0xd4, 0x18,
1377 0x96, 0x51, 0xf1, 0x52, 0x9e, 0x68, 0x84, 0x66, 0xd8,
1378 0xab, 0xed, 0x49, 0xe2, 0xa5, 0xf0, 0xf4, 0x49, 0x3b,
1379 0x87, 0x8d, 0x41, 0x69, 0x84, 0x85, 0x47, 0xf5, 0x91,
1380 0x27, 0x76, 0x31, 0xf1, 0xfe, 0xd6, 0xc9, 0x7d, 0x16,
1381 0x7f, 0x8b, 0xaa, 0x68, 0x92, 0x0a, 0x2b, 0x02, 0x20,
1382 0xd2, 0xad, 0x5a, 0xe6, 0x5c, 0xd0, 0x9d, 0xcb, 0xbf,
1383 0xab, 0x42, 0xbc, 0x66, 0x68, 0x67, 0x37, 0x8e, 0x40,
1384 0xfd, 0x3c, 0xed, 0x97, 0x19, 0xa7, 0x66, 0x59, 0xba,
1385 0x22, 0x21, 0x3a, 0x5a, 0x23, 0xe3, 0x0a, 0xee, 0xef,
1386 0x99, 0x51, 0x64, 0x88, 0x32, 0x99, 0xe7, 0xdd, 0x6f,
1387 0xff, 0x16, 0x17, 0xb4, 0x28, 0x7c, 0x31, 0x97, 0xcb,
1388 0x3b, 0x1a, 0xbd, 0x54, 0xb2, 0xf0, 0xca, 0x57, 0x3b,
1389 0x1a, 0x46, 0x77, 0xa0, 0x54, 0xf1, 0x23, 0x2c, 0xd1,
1390 0x98, 0x03, 0x63, 0x3f, 0xe5, 0x7b, 0x04, 0x1c, 0x76,
1391 0x8d, 0xf7, 0xc3, 0x50, 0x63, 0x13, 0xe7, 0xea, 0xa3,
1392 0x65, 0x62, 0x48, 0x33, 0xbe, 0xcd, 0x76, 0x8f, 0xcc,
1393 0x4a, 0x31, 0xad, 0xe9, 0x32, 0xe7, 0x1a, 0xde, 0x8c,
1394 0xcb, 0xf4, 0x00, 0xb3, 0xaa, 0x2d, 0x32, 0x89, 0x1a,
1395 0x4a, 0x17, 0x3f, 0xb7, 0x49, 0x8c, 0x95, 0x64, 0xc8,
1396 0x9b, 0x70, 0x54, 0x8f, 0xd4, 0x95, 0xac, 0x2e, 0xa8,
1397 0x5c, 0x4b, 0xed, 0xb4, 0xc9, 0x13, 0x6d, 0x1a, 0x0a,
1398 0x6c, 0x16, 0x18, 0xc4, 0xf1, 0xaa, 0x8e, 0x61, 0x9f,
1399 0xef, 0x76, 0x5e, 0x1c, 0x74, 0x10, 0xf8, 0x6c, 0xd8,
1400 0xae, 0x7d, 0x0b, 0x7e, 0xd2, 0x89, 0x47, 0x43, 0x3c,
1401 0xd0, 0xff, 0x64, 0xf5, 0xf9, 0x02, 0x98, 0x16, 0xd6,
1402 0x10, 0x80, 0x23, 0x7f, 0x09, 0x9a, 0xad, 0x2f, 0x85,
1403 0x20, 0xf2, 0x5d, 0x76, 0x85, 0xcc, 0x18, 0x93, 0xb3,
1404 0xe8, 0xda, 0x3a, 0xaf, 0xdb, 0x38, 0x84, 0x6b, 0x67,
1405 0x58, 0xee, 0x02, 0xb5, 0xc5, 0xac, 0x89, 0x9b, 0x2c,
1406 0x07, 0x38, 0x45, 0x3b, 0xe2, 0xa8, 0x3b, 0x87, 0x9f,
1407 0x97, 0xcb, 0xad, 0x8e, 0x21, 0x47, 0x86, 0xfb, 0x2a,
1408 0x83, 0x6c, 0x74, 0xe0, 0x6e, 0xf1, 0x90, 0x02, 0x2f,
1409 0x4b, 0x55, 0x57, 0x69, 0x4c, 0x25, 0x4b, 0xc7 ),
1410 PLAINTEXT ( 0xc2, 0x59, 0x15, 0x19, 0x09, 0xcc, 0x04, 0x80, 0xab,
1411 0xba, 0xe3, 0xf7, 0xfb, 0x6b, 0xea, 0xc9, 0x22, 0x58,
1412 0xd3, 0x7d ),
1413 CIPHERTEXT ( 0x2c, 0xcc, 0x82, 0x4b, 0x0c, 0x0b, 0x59, 0x3f, 0xae,
1414 0xef, 0xf2, 0x42, 0x4f, 0x3a, 0x64, 0xb1, 0xdc, 0xd0,
1415 0x8c, 0x07 ),
1416 AUTH ( 0xe5, 0x2d, 0x78, 0x83, 0x66, 0x66, 0x33, 0x3b, 0x2f, 0xe5,
1417 0x9d, 0xdc, 0x5d, 0x6f, 0x26, 0x4d ) );
1418
1419/* AES-GCM test case 38 */
1420CIPHER_TEST ( wycheproof_aes_gcm_876dc2f0, &aes_gcm_algorithm,
1421 KEY ( 0xe7, 0xe0, 0x82, 0x7a, 0x58, 0x2b, 0x94, 0x68, 0x28, 0xcb,
1422 0x6d, 0xf0, 0xd1, 0xc4, 0x61, 0x7e ),
1423 IV ( 0x3a, 0x40, 0x31, 0x92, 0x06, 0x4a, 0x51, 0xdf, 0x71, 0xa3,
1424 0x55, 0x4f ),
1425 ADDITIONAL ( 0x05, 0x3d, 0x34, 0x68, 0xb4, 0xd0, 0xa5, 0xa6, 0xa1,
1426 0x2d, 0xff, 0x01, 0x7c, 0x40, 0x21, 0x8c, 0x2f, 0x99,
1427 0x01, 0x58, 0xc5, 0x0a, 0x95, 0x50, 0x31, 0x30, 0xbb,
1428 0x92, 0xa5, 0xd7, 0x61, 0x59, 0x73, 0xec, 0x88, 0x27,
1429 0x04, 0x3b, 0x29, 0x22, 0x2e, 0x15, 0x71, 0x3f, 0xb9,
1430 0xa5, 0x8d, 0xb9, 0x0a, 0x39, 0x7d, 0x31, 0xb1, 0x6e,
1431 0x21, 0xb3, 0xbe, 0xfd, 0x3d, 0x66, 0xd8, 0x99, 0x03,
1432 0x12, 0xb3, 0xf7, 0xad, 0xa3, 0xf3, 0x9a, 0xbb, 0xe9,
1433 0x2e, 0x17, 0xa1, 0xa6, 0x6d, 0x6a, 0x29, 0x05, 0x34,
1434 0xb3, 0x11, 0x02, 0x87, 0x91, 0x5b, 0x08, 0xf4, 0x74,
1435 0x31, 0xa1, 0xbf, 0xb9, 0xc8, 0x23, 0xe5, 0x4a, 0x16,
1436 0xb2, 0x87, 0xa5, 0x7d, 0x4c, 0x34, 0x63, 0xc8, 0x38,
1437 0xc4, 0x62, 0xdc, 0x78, 0x98, 0xa3, 0xd7, 0xf5, 0xf6,
1438 0x53, 0xa9, 0x45, 0x74, 0x4d, 0xbb, 0x12, 0x6b, 0xd2,
1439 0x18, 0x02, 0xe4, 0x68, 0x4a, 0xd7, 0xdc, 0x90, 0x39,
1440 0x1b, 0x8b, 0x80, 0x00, 0x34, 0x3d, 0xb3, 0x37, 0x14,
1441 0x5b, 0xf1, 0x7f, 0xe3, 0x1f, 0xdc, 0x43, 0x41, 0x63,
1442 0xee, 0x6a, 0xe4, 0x4a, 0xda, 0x02, 0xde, 0x61, 0x92,
1443 0xbd, 0xa5, 0x70, 0x18, 0xdd, 0xe5, 0xba, 0x1f, 0x59,
1444 0x72, 0x1b, 0x45, 0x83, 0x96, 0x8e, 0xfe, 0x86, 0x13,
1445 0x81, 0x6c, 0x35, 0x02, 0xac, 0x1b, 0x1e, 0xf1, 0x62,
1446 0xd0, 0x08, 0x5f, 0x8d, 0xf3, 0x7b, 0x34, 0x36, 0xd1,
1447 0x4c, 0xc5, 0x46, 0x84, 0xe8, 0x98, 0xfc, 0xb6, 0x95,
1448 0xf1, 0x5a, 0x59, 0xd7, 0xdf, 0x60, 0xea, 0xa0, 0x28,
1449 0x38, 0x8d, 0x7f, 0xdc, 0xa2, 0xbb, 0xd9, 0x0e, 0x07,
1450 0xa1, 0xa0, 0x22, 0x81, 0xdc, 0x85, 0xe0, 0x0d, 0x83,
1451 0x75, 0x0b, 0xef, 0x47, 0xfe, 0x02, 0x56, 0xb2, 0x3c,
1452 0xcd, 0x83, 0xc8, 0x64, 0xe8, 0x61, 0x9b, 0x7b, 0x7e,
1453 0x75, 0xc9, 0xb2, 0x48, 0x14, 0xe6, 0x53, 0x3c, 0x4f,
1454 0x78, 0x55, 0xe4, 0xfa, 0x21, 0xde, 0x07, 0x47, 0xc6,
1455 0x47, 0x95, 0xaa, 0xc0, 0x15, 0xab, 0x53, 0x2d, 0x03,
1456 0x3e, 0x20, 0x58, 0x98, 0xa7, 0x51, 0x1d, 0xa3, 0x2f,
1457 0x89, 0x8d, 0xae, 0xd3, 0x83, 0xa4, 0x83, 0x14, 0xdb,
1458 0x35, 0xf7, 0x5e, 0x7b, 0xf1, 0x2c, 0x7a, 0x99, 0xe5,
1459 0x0e, 0xb8, 0xdc, 0x93, 0xf8, 0x70, 0x06, 0x24, 0x43,
1460 0x82, 0x11, 0xcd, 0xa8, 0x64, 0x23, 0xcf, 0xde, 0x8d,
1461 0x18, 0x3a, 0xe5, 0xd6, 0xad, 0x70, 0x13, 0x37, 0x53,
1462 0xe4, 0x0f, 0x73, 0x65, 0x2d, 0xfd, 0x03, 0x07, 0x4f,
1463 0xee, 0x03, 0x4c, 0xe6, 0xd1, 0x6c, 0xcf, 0xc0, 0xb3,
1464 0x34, 0x1a, 0x9e, 0xc1, 0x8e, 0x63, 0x08, 0x72, 0xf6,
1465 0x25, 0xe0, 0x41, 0x29, 0x17, 0x33, 0x13, 0xee, 0x22,
1466 0xb1, 0xcb, 0xcb, 0xd9, 0x0e, 0xe7, 0x4c, 0x50, 0x19,
1467 0x17, 0x3e, 0xed, 0x3a, 0xb2, 0xa4, 0x7f, 0x16, 0xc8,
1468 0x67, 0x2e, 0x44, 0x9e, 0x06, 0xe3, 0xbe, 0xc4, 0xd0,
1469 0x59, 0x71, 0xfe, 0x8e, 0xba, 0x75, 0x2d, 0x5d, 0x96,
1470 0x2e, 0x6e, 0x7d, 0x27, 0x40, 0x84, 0x64, 0x44, 0x1b,
1471 0x3d, 0xb1, 0x88, 0x04, 0xfc, 0x1e, 0x5c, 0x42, 0x8e,
1472 0x97, 0x06, 0x88, 0xd8, 0xc5, 0x5f, 0x29, 0x80, 0xf3,
1473 0x0a, 0x6b, 0x86, 0x03, 0x4a, 0xd2, 0xf7, 0x9a, 0x76,
1474 0xef, 0x44, 0xc8, 0xd8, 0x16, 0x34, 0x5a, 0x62, 0x70,
1475 0xc1, 0x5c, 0x79, 0xde, 0xeb, 0xf3, 0xdc, 0xbc, 0x1a,
1476 0x1a, 0x96, 0x8d, 0x31, 0x8b, 0x6c, 0xcc, 0xc0, 0x9a,
1477 0xb7, 0x55, 0xcb, 0xe0, 0xf6, 0xff, 0x4c, 0x23, 0x71,
1478 0x09, 0x35, 0xa4, 0xea, 0x5b, 0xca, 0xb5, 0x1c, 0x30,
1479 0x74, 0x54, 0xfb, 0xa5, 0x6c, 0xef, 0x13, 0x08, 0xb7,
1480 0xcf, 0x07, 0x38, 0x62, 0x69, 0x64, 0xae, 0x7d, 0x2b,
1481 0x65, 0xad, 0x54, 0xd5, 0x28, 0x72, 0x69, 0x9b, 0x96 ),
1482 PLAINTEXT ( 0x65, 0xe0, 0x00, 0x7f, 0x93, 0x22, 0x55, 0x99, 0xdf,
1483 0xc5, 0x91, 0x07, 0x72, 0x0c, 0x50, 0x3c, 0x01, 0x58,
1484 0xf3, 0xf4 ),
1485 CIPHERTEXT ( 0x33, 0x6c, 0x3b, 0x00, 0x80, 0xeb, 0x95, 0x48, 0x0e,
1486 0x67, 0x13, 0x66, 0xbe, 0x55, 0x08, 0xb1, 0xfe, 0x6a,
1487 0xb1, 0x4e ),
1488 AUTH ( 0x63, 0x27, 0x8e, 0x17, 0x81, 0xfa, 0xd9, 0x31, 0x31, 0xec,
1489 0xfd, 0x61, 0x92, 0x75, 0x89, 0x0c ) );
1490
1491/* AES-GCM test case 39 */
1492CIPHER_TEST ( wycheproof_aes_gcm_0e57609d, &aes_gcm_algorithm,
1493 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1494 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1495 IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1496 0x00, 0x00 ),
1497 ADDITIONAL(),
1498 PLAINTEXT ( 0xeb, 0xd4, 0xa3, 0xe1, 0x0c, 0xf6, 0xd4, 0x1c, 0x50,
1499 0xae, 0xae, 0x00, 0x75, 0x63, 0xb0, 0x72 ),
1500 CIPHERTEXT ( 0xf6, 0x2d, 0x84, 0xd6, 0x49, 0xe5, 0x6b, 0xc8, 0xcf,
1501 0xed, 0xc5, 0xd7, 0x4a, 0x51, 0xe2, 0xf7 ),
1502 AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
1503 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
1504
1505/* AES-GCM test case 40 */
1506CIPHER_TEST ( wycheproof_aes_gcm_5b8dd48a, &aes_gcm_algorithm,
1507 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1508 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1509 IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
1510 0xff, 0xff ),
1511 ADDITIONAL(),
1512 PLAINTEXT ( 0xd5, 0x93, 0xc4, 0xd8, 0x22, 0x4f, 0x1b, 0x10, 0x0c,
1513 0x35, 0xe4, 0xf6, 0xc4, 0x00, 0x65, 0x43 ),
1514 CIPHERTEXT ( 0x43, 0x1f, 0x31, 0xe6, 0x84, 0x09, 0x31, 0xfd, 0x95,
1515 0xf9, 0x4b, 0xf8, 0x82, 0x96, 0xff, 0x69 ),
1516 AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1517 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
1518
1519/* AES-GCM test case 41 (skipped: modified tag) */
1520
1521/* AES-GCM test case 42 (skipped: modified tag) */
1522
1523/* AES-GCM test case 43 (skipped: modified tag) */
1524
1525/* AES-GCM test case 44 (skipped: modified tag) */
1526
1527/* AES-GCM test case 45 (skipped: modified tag) */
1528
1529/* AES-GCM test case 46 (skipped: modified tag) */
1530
1531/* AES-GCM test case 47 (skipped: modified tag) */
1532
1533/* AES-GCM test case 48 (skipped: modified tag) */
1534
1535/* AES-GCM test case 49 (skipped: modified tag) */
1536
1537/* AES-GCM test case 50 (skipped: modified tag) */
1538
1539/* AES-GCM test case 51 (skipped: modified tag) */
1540
1541/* AES-GCM test case 52 (skipped: modified tag) */
1542
1543/* AES-GCM test case 53 (skipped: modified tag) */
1544
1545/* AES-GCM test case 54 (skipped: modified tag) */
1546
1547/* AES-GCM test case 55 (skipped: modified tag) */
1548
1549/* AES-GCM test case 56 (skipped: modified tag) */
1550
1551/* AES-GCM test case 57 (skipped: modified tag) */
1552
1553/* AES-GCM test case 58 (skipped: modified tag) */
1554
1555/* AES-GCM test case 59 (skipped: modified tag) */
1556
1557/* AES-GCM test case 60 (skipped: modified tag) */
1558
1559/* AES-GCM test case 61 (skipped: modified tag) */
1560
1561/* AES-GCM test case 62 (skipped: modified tag) */
1562
1563/* AES-GCM test case 63 (skipped: modified tag) */
1564
1565/* AES-GCM test case 64 (skipped: modified tag) */
1566
1567/* AES-GCM test case 65 (skipped: modified tag) */
1568
1569/* AES-GCM test case 66 (skipped: modified tag) */
1570
1571/* AES-GCM test case 67 (skipped: modified tag) */
1572
1573/* AES-GCM test case 68 */
1574CIPHER_TEST ( wycheproof_aes_gcm_15eae47a, &aes_gcm_algorithm,
1575 KEY ( 0xaa, 0x02, 0x3d, 0x04, 0x78, 0xdc, 0xb2, 0xb2, 0x31, 0x24,
1576 0x98, 0x29, 0x3d, 0x9a, 0x91, 0x29 ),
1577 IV ( 0x04, 0x32, 0xbc, 0x49, 0xac, 0x34, 0x41, 0x20 ),
1578 ADDITIONAL ( 0xaa, 0xc3, 0x92, 0x31, 0x12, 0x98, 0x72, 0xa2 ),
1579 PLAINTEXT ( 0x20, 0x35, 0xaf, 0x31, 0x3d, 0x13, 0x46, 0xab, 0x00,
1580 0x15, 0x4f, 0xea, 0x78, 0x32, 0x21, 0x05 ),
1581 CIPHERTEXT ( 0x64, 0xc3, 0x6b, 0xb3, 0xb7, 0x32, 0x03, 0x4e, 0x3a,
1582 0x7d, 0x04, 0xef, 0xc5, 0x19, 0x77, 0x85 ),
1583 AUTH ( 0xb7, 0xd0, 0xdd, 0x70, 0xb0, 0x0d, 0x65, 0xb9, 0x7c, 0xfd,
1584 0x08, 0x0f, 0xf4, 0xb8, 0x19, 0xd1 ) );
1585
1586/* AES-GCM test case 69 */
1587CIPHER_TEST ( wycheproof_aes_gcm_5bf301b1, &aes_gcm_algorithm,
1588 KEY ( 0xf3, 0x43, 0x47, 0x25, 0xc8, 0x2a, 0x7f, 0x8b, 0xb0, 0x7d,
1589 0xf1, 0xf8, 0x12, 0x2f, 0xb6, 0xc9 ),
1590 IV ( 0x28, 0xe9, 0xb7, 0x85, 0x17, 0x24, 0xba, 0xe3 ),
1591 ADDITIONAL(),
1592 PLAINTEXT(),
1593 CIPHERTEXT(),
1594 AUTH ( 0x44, 0xac, 0xa0, 0x0f, 0x42, 0xe4, 0x19, 0x9b, 0x82, 0x9a,
1595 0x55, 0xe6, 0x9b, 0x07, 0x3d, 0x9e ) );
1596
1597/* AES-GCM test case 70 */
1598CIPHER_TEST ( wycheproof_aes_gcm_6d9ec3c9, &aes_gcm_algorithm,
1599 KEY ( 0xde, 0xb6, 0x22, 0x33, 0x55, 0x9b, 0x57, 0x47, 0x66, 0x02,
1600 0xb5, 0xad, 0xac, 0x57, 0xc7, 0x7f ),
1601 IV ( 0xd0, 0x84, 0x54, 0x7d, 0xe5, 0x5b, 0xbc, 0x15 ),
1602 ADDITIONAL(),
1603 PLAINTEXT ( 0xd8, 0x98, 0x6d, 0xf0, 0x24, 0x1e, 0xd3, 0x29, 0x75,
1604 0x82, 0xc0, 0xc2, 0x39, 0xc7, 0x24, 0xcb ),
1605 CIPHERTEXT ( 0x03, 0xe1, 0xa1, 0x68, 0xa7, 0xe3, 0x77, 0xa9, 0x13,
1606 0x87, 0x9b, 0x29, 0x6a, 0x1b, 0x5f, 0x9c ),
1607 AUTH ( 0x32, 0x90, 0xaa, 0x95, 0xaf, 0x50, 0x5a, 0x74, 0x2f, 0x51,
1608 0x7f, 0xab, 0xcc, 0x9b, 0x20, 0x94 ) );
1609
1610/* AES-GCM test case 71 */
1611CIPHER_TEST ( wycheproof_aes_gcm_5e73e414, &aes_gcm_algorithm,
1612 KEY ( 0x20, 0x34, 0xa8, 0x25, 0x47, 0x27, 0x6c, 0x83, 0xdd, 0x32,
1613 0x12, 0xa8, 0x13, 0x57, 0x2b, 0xce ),
1614 IV ( 0x32, 0x54, 0x20, 0x2d, 0x85, 0x47, 0x34, 0x81, 0x23, 0x98,
1615 0x12, 0x7a, 0x3d, 0x13, 0x44, 0x21 ),
1616 ADDITIONAL ( 0x1a, 0x02, 0x93, 0xd8, 0xf9, 0x02, 0x19, 0x05, 0x89,
1617 0x02, 0x13, 0x90, 0x13, 0x90, 0x81, 0x90, 0xbc, 0x49,
1618 0x08, 0x90, 0xd3, 0xff, 0x12, 0xa3 ),
1619 PLAINTEXT ( 0x02, 0xef, 0xd2, 0xe5, 0x78, 0x23, 0x12, 0x82, 0x7e,
1620 0xd5, 0xd2, 0x30, 0x18, 0x9a, 0x2a, 0x34, 0x2b, 0x27,
1621 0x7c, 0xe0, 0x48, 0x46, 0x21, 0x93 ),
1622 CIPHERTEXT ( 0x64, 0x06, 0x9c, 0x2d, 0x58, 0x69, 0x05, 0x61, 0xf2,
1623 0x7e, 0xe1, 0x99, 0xe6, 0xb4, 0x79, 0xb6, 0x36, 0x9e,
1624 0xec, 0x68, 0x86, 0x72, 0xbd, 0xe9 ),
1625 AUTH ( 0x9b, 0x7a, 0xba, 0xdd, 0x6e, 0x69, 0xc1, 0xd9, 0xec, 0x92,
1626 0x57, 0x86, 0x53, 0x4f, 0x50, 0x75 ) );
1627
1628/* AES-GCM test case 72 */
1629CIPHER_TEST ( wycheproof_aes_gcm_d5198faa, &aes_gcm_algorithm,
1630 KEY ( 0xb6, 0x7b, 0x1a, 0x6e, 0xfd, 0xd4, 0x0d, 0x37, 0x08, 0x0f,
1631 0xbe, 0x8f, 0x80, 0x47, 0xae, 0xb9 ),
1632 IV ( 0xfa, 0x29, 0x4b, 0x12, 0x99, 0x72, 0xf7, 0xfc, 0x5b, 0xbd,
1633 0x5b, 0x96, 0xbb, 0xa8, 0x37, 0xc9 ),
1634 ADDITIONAL(),
1635 PLAINTEXT(),
1636 CIPHERTEXT(),
1637 AUTH ( 0xa2, 0xcf, 0x26, 0x48, 0x15, 0x17, 0xec, 0x25, 0x08, 0x5c,
1638 0x5b, 0x17, 0xd0, 0x78, 0x61, 0x83 ) );
1639
1640/* AES-GCM test case 73 */
1641CIPHER_TEST ( wycheproof_aes_gcm_ab750cbd, &aes_gcm_algorithm,
1642 KEY ( 0x20, 0x9e, 0x6d, 0xbf, 0x2a, 0xd2, 0x6a, 0x10, 0x54, 0x45,
1643 0xfc, 0x02, 0x07, 0xcd, 0x9e, 0x9a ),
1644 IV ( 0x94, 0x77, 0x84, 0x9d, 0x6c, 0xcd, 0xfc, 0xa1, 0x12, 0xd9,
1645 0x2e, 0x53, 0xfa, 0xe4, 0xa7, 0xca ),
1646 ADDITIONAL(),
1647 PLAINTEXT ( 0x01 ),
1648 CIPHERTEXT ( 0xfd ),
1649 AUTH ( 0x03, 0x2d, 0xf7, 0xbb, 0xa5, 0xd8, 0xea, 0x1a, 0x14, 0xf1,
1650 0x6f, 0x70, 0xbd, 0x0e, 0x14, 0xec ) );
1651
1652/* AES-GCM test case 74 */
1653CIPHER_TEST ( wycheproof_aes_gcm_ea79dc25, &aes_gcm_algorithm,
1654 KEY ( 0xa5, 0x49, 0x44, 0x2e, 0x35, 0x15, 0x40, 0x32, 0xd0, 0x7c,
1655 0x86, 0x66, 0x00, 0x6a, 0xa6, 0xa2 ),
1656 IV ( 0x51, 0x71, 0x52, 0x45, 0x68, 0xe8, 0x1d, 0x97, 0xe8, 0xc4,
1657 0xde, 0x4b, 0xa5, 0x6c, 0x10, 0xa0 ),
1658 ADDITIONAL(),
1659 PLAINTEXT ( 0x11, 0x82, 0xe9, 0x35, 0x96, 0xca, 0xc5, 0x60, 0x89,
1660 0x46, 0x40, 0x0b, 0xc7, 0x3f, 0x3a ),
1661 CIPHERTEXT ( 0x2f, 0x33, 0x30, 0x87, 0xbd, 0xca, 0x58, 0x21, 0x9f,
1662 0x9b, 0xfc, 0x27, 0x3e, 0x45, 0xcc ),
1663 AUTH ( 0xe0, 0x6d, 0x1e, 0xf4, 0x73, 0x13, 0x29, 0x57, 0xad, 0x37,
1664 0xea, 0xef, 0x29, 0x73, 0x3c, 0xa0 ) );
1665
1666/* AES-GCM test case 75 */
1667CIPHER_TEST ( wycheproof_aes_gcm_3397c9ae, &aes_gcm_algorithm,
1668 KEY ( 0xcf, 0xb4, 0xc2, 0x6f, 0x12, 0x6f, 0x6a, 0x0a, 0xcb, 0x8e,
1669 0x4e, 0x22, 0x0f, 0x6c, 0x56, 0xcd ),
1670 IV ( 0x12, 0x75, 0x11, 0x54, 0x99, 0xae, 0x72, 0x22, 0x68, 0x51,
1671 0x5b, 0xf0, 0xc1, 0x64, 0xb4, 0x9c ),
1672 ADDITIONAL(),
1673 PLAINTEXT ( 0x09, 0xdf, 0xd7, 0xf0, 0x80, 0x27, 0x52, 0x57, 0xcf,
1674 0x97, 0xe7, 0x6f, 0x96, 0x6b, 0x1a, 0xd9 ),
1675 CIPHERTEXT ( 0xa7, 0x80, 0xbd, 0x01, 0xc8, 0x08, 0x85, 0x15, 0x6c,
1676 0x88, 0xa9, 0x73, 0x26, 0x4c, 0x8e, 0xe5 ),
1677 AUTH ( 0x2a, 0xde, 0xff, 0xa6, 0x82, 0xc8, 0xd8, 0xa8, 0x1f, 0xad,
1678 0xa7, 0xd9, 0xfc, 0xdd, 0x2e, 0xe2 ) );
1679
1680/* AES-GCM test case 76 */
1681CIPHER_TEST ( wycheproof_aes_gcm_347e1695, &aes_gcm_algorithm,
1682 KEY ( 0x0b, 0x11, 0xef, 0x3a, 0x08, 0xc0, 0x29, 0x70, 0xf7, 0x42,
1683 0x81, 0xc8, 0x60, 0x69, 0x1c, 0x75 ),
1684 IV ( 0x95, 0xc1, 0xdd, 0x8c, 0x0f, 0x17, 0x05, 0xec, 0xe6, 0x89,
1685 0x37, 0x90, 0x1f, 0x7a, 0xdd, 0x7b ),
1686 ADDITIONAL(),
1687 PLAINTEXT ( 0xf6, 0x93, 0xd4, 0xed, 0xd8, 0x25, 0xdb, 0xb0, 0x61,
1688 0x8d, 0x91, 0x11, 0x31, 0x28, 0x88, 0x0d, 0xbe, 0xbb,
1689 0x23, 0xe2, 0x5d, 0x00, 0xed, 0x1f, 0x07, 0x7d, 0x87,
1690 0x0b, 0xe9, 0xcc, 0x75, 0x36 ),
1691 CIPHERTEXT ( 0x7e, 0x47, 0xe1, 0x0f, 0xe3, 0xc6, 0xfb, 0xfa, 0x38,
1692 0x17, 0x70, 0xea, 0xf5, 0xd4, 0x8d, 0x14, 0x82, 0xe7,
1693 0x1e, 0x0c, 0x44, 0xdf, 0xf1, 0xe3, 0x0c, 0xa6, 0xf9,
1694 0x5d, 0x92, 0x05, 0x20, 0x84 ),
1695 AUTH ( 0xd0, 0x14, 0x44, 0xfa, 0x5d, 0x9c, 0x49, 0x96, 0x29, 0xd1,
1696 0x74, 0xff, 0x39, 0x27, 0xa1, 0xac ) );
1697
1698/* AES-GCM test case 77 */
1699CIPHER_TEST ( wycheproof_aes_gcm_63a3e6ca, &aes_gcm_algorithm,
1700 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1701 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1702 IV ( 0xf9, 0x5f, 0xde, 0x4a, 0x75, 0x19, 0x13, 0x20, 0x2a, 0xee,
1703 0xee, 0x32, 0xa0, 0xb5, 0x57, 0x53 ),
1704 ADDITIONAL(),
1705 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1706 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1707 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1708 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1709 0x00, 0x00, 0x00, 0x00 ),
1710 CIPHERTEXT ( 0x00, 0x07, 0x8d, 0x10, 0x9d, 0x92, 0x14, 0x3f, 0xcd,
1711 0x5d, 0xf5, 0x67, 0x21, 0xb8, 0x84, 0xfa, 0xc6, 0x4a,
1712 0xc7, 0x76, 0x2c, 0xc0, 0x9e, 0xea, 0x2a, 0x3c, 0x68,
1713 0xe9, 0x2a, 0x17, 0xbd, 0xb5, 0x75, 0xf8, 0x7b, 0xda,
1714 0x18, 0xbe, 0x56, 0x4e ),
1715 AUTH ( 0x15, 0x2a, 0x65, 0x04, 0x5f, 0xe6, 0x74, 0xf9, 0x76, 0x27,
1716 0x42, 0x7a, 0xf5, 0xbe, 0x22, 0xda ) );
1717
1718/* AES-GCM test case 78 */
1719CIPHER_TEST ( wycheproof_aes_gcm_dc6c9702, &aes_gcm_algorithm,
1720 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1721 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1722 IV ( 0x7b, 0x95, 0xb8, 0xc3, 0x56, 0x81, 0x0a, 0x84, 0x71, 0x1d,
1723 0x68, 0x15, 0x0a, 0x1b, 0x77, 0x50 ),
1724 ADDITIONAL(),
1725 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1726 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1727 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1728 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1729 0x00, 0x00, 0x00, 0x00 ),
1730 CIPHERTEXT ( 0x84, 0xd4, 0xc9, 0xc0, 0x8b, 0x4f, 0x48, 0x28, 0x61,
1731 0xe3, 0xa9, 0xc6, 0xc3, 0x5b, 0xc4, 0xd9, 0x1d, 0xf9,
1732 0x27, 0x37, 0x45, 0x13, 0xbf, 0xd4, 0x9f, 0x43, 0x6b,
1733 0xd7, 0x3f, 0x32, 0x52, 0x85, 0xda, 0xef, 0x4f, 0xf7,
1734 0xe1, 0x3d, 0x46, 0xa6 ),
1735 AUTH ( 0x21, 0x3a, 0x3c, 0xb9, 0x38, 0x55, 0xd1, 0x8e, 0x69, 0x33,
1736 0x7e, 0xee, 0x66, 0xae, 0xec, 0x07 ) );
1737
1738/* AES-GCM test case 79 */
1739CIPHER_TEST ( wycheproof_aes_gcm_942cc802, &aes_gcm_algorithm,
1740 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1741 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1742 IV ( 0x1a, 0x55, 0x2e, 0x67, 0xcd, 0xc4, 0xdc, 0x1a, 0x33, 0xb8,
1743 0x24, 0x87, 0x4e, 0xbf, 0x0b, 0xed ),
1744 ADDITIONAL(),
1745 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1746 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1747 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1748 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1749 0x00, 0x00, 0x00, 0x00 ),
1750 CIPHERTEXT ( 0x94, 0x8c, 0xa3, 0x7a, 0x8e, 0x66, 0x49, 0xe8, 0x8a,
1751 0xef, 0xfb, 0x1c, 0x59, 0x8f, 0x36, 0x07, 0x00, 0x77,
1752 0x02, 0x41, 0x7e, 0xa0, 0xe0, 0xbc, 0x3c, 0x60, 0xad,
1753 0x5a, 0x94, 0x98, 0x86, 0xde, 0x96, 0x8c, 0xf5, 0x3e,
1754 0xa6, 0x46, 0x2a, 0xed ),
1755 AUTH ( 0x99, 0xb3, 0x81, 0xbf, 0xa2, 0xaf, 0x97, 0x51, 0xc3, 0x9d,
1756 0x1b, 0x6e, 0x86, 0xd1, 0xbe, 0x6a ) );
1757
1758/* AES-GCM test case 80 */
1759CIPHER_TEST ( wycheproof_aes_gcm_77d7dce1, &aes_gcm_algorithm,
1760 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1761 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1762 IV ( 0xdd, 0x9d, 0x0b, 0x4a, 0x0c, 0x3d, 0x68, 0x15, 0x24, 0xbf,
1763 0xfc, 0xa3, 0x1d, 0x90, 0x76, 0x61 ),
1764 ADDITIONAL(),
1765 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1766 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1767 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1768 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1769 0x00, 0x00, 0x00, 0x00 ),
1770 CIPHERTEXT ( 0x64, 0xb1, 0x93, 0x14, 0xc3, 0x1a, 0xf4, 0x5a, 0xcc,
1771 0xdf, 0x7e, 0x3c, 0x4d, 0xb7, 0x9f, 0x0d, 0x94, 0x8c,
1772 0xa3, 0x7a, 0x8e, 0x66, 0x49, 0xe8, 0x8a, 0xef, 0xfb,
1773 0x1c, 0x59, 0x8f, 0x36, 0x07, 0x00, 0x77, 0x02, 0x41,
1774 0x7e, 0xa0, 0xe0, 0xbc ),
1775 AUTH ( 0x52, 0x81, 0xef, 0xc7, 0xf1, 0x3a, 0xc8, 0xe1, 0x4c, 0xcf,
1776 0x5d, 0xca, 0x7b, 0xfb, 0xfd, 0xd1 ) );
1777
1778/* AES-GCM test case 81 */
1779CIPHER_TEST ( wycheproof_aes_gcm_471412a0, &aes_gcm_algorithm,
1780 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1781 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1782 IV ( 0x57, 0xc5, 0x64, 0x3c, 0x4e, 0x37, 0xb4, 0x04, 0x1d, 0xb7,
1783 0x94, 0xcf, 0xe8, 0xe1, 0xf0, 0xf4 ),
1784 ADDITIONAL(),
1785 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1786 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1787 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1788 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1789 0x00, 0x00, 0x00, 0x00 ),
1790 CIPHERTEXT ( 0x2b, 0xb6, 0x9c, 0x3e, 0x5d, 0x1f, 0x91, 0x81, 0x5c,
1791 0x6b, 0x87, 0xa0, 0xd5, 0xbb, 0xea, 0x71, 0x64, 0xb1,
1792 0x93, 0x14, 0xc3, 0x1a, 0xf4, 0x5a, 0xcc, 0xdf, 0x7e,
1793 0x3c, 0x4d, 0xb7, 0x9f, 0x0d, 0x94, 0x8c, 0xa3, 0x7a,
1794 0x8e, 0x66, 0x49, 0xe8 ),
1795 AUTH ( 0xa3, 0xea, 0x2c, 0x09, 0xee, 0x4f, 0x8c, 0x8a, 0x12, 0xf4,
1796 0x5c, 0xdd, 0xf9, 0xae, 0xff, 0x81 ) );
1797
1798/* AES-GCM test case 82 */
1799CIPHER_TEST ( wycheproof_aes_gcm_a9c89f85, &aes_gcm_algorithm,
1800 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1801 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1802 IV ( 0x99, 0x82, 0x1c, 0x2d, 0xd5, 0xda, 0xec, 0xde, 0xd0, 0x73,
1803 0x00, 0xf5, 0x77, 0xf7, 0xaf, 0xf1 ),
1804 ADDITIONAL(),
1805 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1806 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1807 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1808 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1809 0x00, 0x00, 0x00, 0x00 ),
1810 CIPHERTEXT ( 0x12, 0x7a, 0xf9, 0xb3, 0x9e, 0xcd, 0xfc, 0x57, 0xbb,
1811 0x11, 0xa2, 0x84, 0x7c, 0x7c, 0x2d, 0x3d, 0x8f, 0x93,
1812 0x8f, 0x40, 0xf8, 0x77, 0xe0, 0xc4, 0xaf, 0x37, 0xd0,
1813 0xfe, 0x9a, 0xf0, 0x33, 0x05, 0x2b, 0xd5, 0x37, 0xc4,
1814 0xae, 0x97, 0x8f, 0x60 ),
1815 AUTH ( 0x07, 0xeb, 0x2f, 0xe4, 0xa9, 0x58, 0xf8, 0x43, 0x4d, 0x40,
1816 0x68, 0x48, 0x99, 0x50, 0x7c, 0x7c ) );
1817
1818/* AES-GCM test case 83 */
1819CIPHER_TEST ( wycheproof_aes_gcm_db3f21b0, &aes_gcm_algorithm,
1820 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1821 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1822 IV ( 0x5e, 0x4a, 0x39, 0x00, 0x14, 0x23, 0x58, 0xd1, 0xc7, 0x74,
1823 0xd8, 0xd1, 0x24, 0xd8, 0xd2, 0x7d ),
1824 ADDITIONAL(),
1825 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1826 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1827 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1828 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1829 0x00, 0x00, 0x00, 0x00 ),
1830 CIPHERTEXT ( 0x0c, 0xf6, 0xae, 0x47, 0x15, 0x6b, 0x14, 0xdc, 0xe0,
1831 0x3c, 0x8a, 0x07, 0xa2, 0xe1, 0x72, 0xb1, 0x12, 0x7a,
1832 0xf9, 0xb3, 0x9e, 0xcd, 0xfc, 0x57, 0xbb, 0x11, 0xa2,
1833 0x84, 0x7c, 0x7c, 0x2d, 0x3d, 0x8f, 0x93, 0x8f, 0x40,
1834 0xf8, 0x77, 0xe0, 0xc4 ),
1835 AUTH ( 0xf1, 0x45, 0xc2, 0xdc, 0xaf, 0x33, 0x9e, 0xed, 0xe4, 0x27,
1836 0xbe, 0x93, 0x43, 0x57, 0xea, 0xc0 ) );
1837
1838/* AES-GCM test case 84 */
1839CIPHER_TEST ( wycheproof_aes_gcm_0755dc1c, &aes_gcm_algorithm,
1840 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1841 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1842 IV ( 0xd4, 0x12, 0x56, 0x76, 0x56, 0x29, 0x84, 0xc0, 0xfe, 0x7c,
1843 0xb0, 0xbd, 0xd1, 0xa9, 0x54, 0xe8 ),
1844 ADDITIONAL(),
1845 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1846 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1847 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1848 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1849 0x00, 0x00, 0x00, 0x00 ),
1850 CIPHERTEXT ( 0xf0, 0xc6, 0xff, 0xc1, 0x8b, 0xd4, 0x6d, 0xf5, 0x56,
1851 0x91, 0x85, 0xa9, 0xaf, 0xd1, 0x69, 0xeb, 0x0c, 0xf6,
1852 0xae, 0x47, 0x15, 0x6b, 0x14, 0xdc, 0xe0, 0x3c, 0x8a,
1853 0x07, 0xa2, 0xe1, 0x72, 0xb1, 0x12, 0x7a, 0xf9, 0xb3,
1854 0x9e, 0xcd, 0xfc, 0x57 ),
1855 AUTH ( 0xfa, 0xcd, 0x0b, 0xfe, 0x87, 0x01, 0xb7, 0xb4, 0xa2, 0xba,
1856 0x96, 0xd9, 0x8a, 0xf5, 0x2b, 0xd9 ) );
1857
1858/* AES-GCM test case 85 */
1859CIPHER_TEST ( wycheproof_aes_gcm_1a31814f, &aes_gcm_algorithm,
1860 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1861 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1862 IV ( 0xb9, 0x7e, 0xc6, 0x2a, 0x5e, 0x59, 0x00, 0xcc, 0xf9, 0xe4,
1863 0xbe, 0x33, 0x2e, 0x33, 0x60, 0x91 ),
1864 ADDITIONAL(),
1865 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1866 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1867 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1868 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1869 0x00, 0x00, 0x00, 0x00 ),
1870 CIPHERTEXT ( 0xd6, 0x92, 0x8e, 0x09, 0x4c, 0x06, 0xe0, 0xa7, 0xc4,
1871 0xdb, 0x42, 0x18, 0x4c, 0xf7, 0x52, 0x9e, 0x95, 0xde,
1872 0x88, 0xb7, 0x67, 0xed, 0xeb, 0xe9, 0xb3, 0x43, 0x00,
1873 0x0b, 0xe3, 0xda, 0xb4, 0x7e, 0xa0, 0x8b, 0x74, 0x42,
1874 0x93, 0xee, 0xd6, 0x98 ),
1875 AUTH ( 0xa0, 0x3e, 0x72, 0x9d, 0xcf, 0xd7, 0xa0, 0x31, 0x55, 0x65,
1876 0x5f, 0xec, 0xe8, 0xaf, 0xfd, 0x7e ) );
1877
1878/* AES-GCM test case 86 */
1879CIPHER_TEST ( wycheproof_aes_gcm_8e51b36a, &aes_gcm_algorithm,
1880 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1881 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1882 IV ( 0x7e, 0xb6, 0xe3, 0x07, 0x9f, 0xa0, 0xb4, 0xc3, 0xee, 0xe3,
1883 0x66, 0x17, 0x7d, 0x1c, 0x1d, 0x1d ),
1884 ADDITIONAL(),
1885 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1886 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1887 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1888 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1889 0x00, 0x00, 0x00, 0x00 ),
1890 CIPHERTEXT ( 0xd8, 0x2c, 0xe5, 0x87, 0x71, 0xbf, 0x64, 0x87, 0x11,
1891 0x6b, 0xf8, 0xe9, 0x64, 0x21, 0x87, 0x7e, 0xd6, 0x92,
1892 0x8e, 0x09, 0x4c, 0x06, 0xe0, 0xa7, 0xc4, 0xdb, 0x42,
1893 0x18, 0x4c, 0xf7, 0x52, 0x9e, 0x95, 0xde, 0x88, 0xb7,
1894 0x67, 0xed, 0xeb, 0xe9 ),
1895 AUTH ( 0x1e, 0x43, 0x92, 0x68, 0x28, 0xbc, 0x9a, 0x16, 0x14, 0xc7,
1896 0xb1, 0x63, 0x90, 0x96, 0xc1, 0x95 ) );
1897
1898/* AES-GCM test case 87 */
1899CIPHER_TEST ( wycheproof_aes_gcm_8737599d, &aes_gcm_algorithm,
1900 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1901 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1902 IV ( 0x03, 0x14, 0xfc, 0xd1, 0x0f, 0xdd, 0x67, 0x5d, 0x3c, 0x61,
1903 0x29, 0x62, 0xc9, 0x31, 0xf6, 0x35 ),
1904 ADDITIONAL(),
1905 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1906 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1907 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1908 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1909 0x00, 0x00, 0x00, 0x00 ),
1910 CIPHERTEXT ( 0xa1, 0x97, 0xa3, 0x7a, 0x5d, 0x79, 0x69, 0x70, 0x78,
1911 0x53, 0x6b, 0xc2, 0x7f, 0xe4, 0x6c, 0xd8, 0xd4, 0x75,
1912 0x52, 0x6d, 0x90, 0x44, 0xaa, 0x94, 0xf0, 0x88, 0xa0,
1913 0x54, 0xf8, 0xe3, 0x80, 0xc6, 0x4f, 0x79, 0x41, 0x47,
1914 0x95, 0xc6, 0x14, 0x80 ),
1915 AUTH ( 0xf0, 0x8b, 0xad, 0xdf, 0x0b, 0x52, 0x85, 0xc9, 0x1f, 0xc0,
1916 0x6a, 0x67, 0xfe, 0x47, 0x08, 0xca ) );
1917
1918/* AES-GCM test case 88 */
1919CIPHER_TEST ( wycheproof_aes_gcm_0d33db46, &aes_gcm_algorithm,
1920 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1921 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1922 IV ( 0xc4, 0xdc, 0xd9, 0xfc, 0xce, 0x24, 0xd3, 0x52, 0x2b, 0x66,
1923 0xf1, 0x46, 0x9a, 0x1e, 0x8b, 0xb9 ),
1924 ADDITIONAL(),
1925 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1926 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1927 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1928 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1929 0x00, 0x00, 0x00, 0x00 ),
1930 CIPHERTEXT ( 0x14, 0x9f, 0xde, 0x9a, 0xbb, 0xd3, 0xa4, 0x3c, 0x25,
1931 0x48, 0x57, 0x5e, 0x0d, 0xb9, 0xfb, 0x84, 0xa1, 0x97,
1932 0xa3, 0x7a, 0x5d, 0x79, 0x69, 0x70, 0x78, 0x53, 0x6b,
1933 0xc2, 0x7f, 0xe4, 0x6c, 0xd8, 0xd4, 0x75, 0x52, 0x6d,
1934 0x90, 0x44, 0xaa, 0x94 ),
1935 AUTH ( 0x62, 0xa4, 0xb6, 0x87, 0x5c, 0x28, 0x83, 0x45, 0xd6, 0xa4,
1936 0x54, 0x39, 0x9e, 0xac, 0x1a, 0xfa ) );
1937
1938/* AES-GCM test case 89 */
1939CIPHER_TEST ( wycheproof_aes_gcm_2bdc78c7, &aes_gcm_algorithm,
1940 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1941 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1942 IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1943 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),
1944 ADDITIONAL(),
1945 PLAINTEXT ( 0xbe, 0xc6, 0xfa, 0x05, 0xc1, 0x71, 0x8b, 0x9b, 0x84,
1946 0xc4, 0x73, 0x45, 0xbb, 0xed, 0x7d, 0xcb ),
1947 CIPHERTEXT ( 0x45, 0xa3, 0xf8, 0x9d, 0x02, 0x91, 0x8b, 0xfd, 0x0c,
1948 0x81, 0x61, 0x65, 0x8c, 0xcc, 0x97, 0x95 ),
1949 AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1950 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
1951
1952/* AES-GCM test case 90 */
1953CIPHER_TEST ( wycheproof_aes_gcm_d5bfae8c, &aes_gcm_algorithm,
1954 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1955 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1956 IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
1957 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ),
1958 ADDITIONAL(),
1959 PLAINTEXT ( 0x4d, 0x82, 0x63, 0x9c, 0x39, 0xd3, 0xf3, 0x49, 0x0e,
1960 0xe9, 0x03, 0xdd, 0x0b, 0xe7, 0xaf, 0xcf ),
1961 CIPHERTEXT ( 0x1c, 0xd5, 0xa0, 0x62, 0x14, 0x23, 0x5c, 0xeb, 0x04,
1962 0x4d, 0x4b, 0xad, 0x7b, 0x04, 0x73, 0x12 ),
1963 AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
1964 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
1965
1966/* AES-GCM test case 91 */
1967CIPHER_TEST ( wycheproof_aes_gcm_4ba4c501, &aes_gcm_algorithm,
1968 KEY ( 0x92, 0xac, 0xe3, 0xe3, 0x48, 0xcd, 0x82, 0x10, 0x92, 0xcd,
1969 0x92, 0x1a, 0xa3, 0x54, 0x63, 0x74, 0x29, 0x9a, 0xb4, 0x62,
1970 0x09, 0x69, 0x1b, 0xc2, 0x8b, 0x87, 0x52, 0xd1, 0x7f, 0x12,
1971 0x3c, 0x20 ),
1972 IV ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1973 0xaa, 0xbb ),
1974 ADDITIONAL ( 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff ),
1975 PLAINTEXT ( 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
1976 0x09 ),
1977 CIPHERTEXT ( 0xe2, 0x7a, 0xbd, 0xd2, 0xd2, 0xa5, 0x3d, 0x2f, 0x13,
1978 0x6b ),
1979 AUTH ( 0x9a, 0x4a, 0x25, 0x79, 0x52, 0x93, 0x01, 0xbc, 0xfb, 0x71,
1980 0xc7, 0x8d, 0x40, 0x60, 0xf5, 0x2c ) );
1981
1982/* AES-GCM test case 92 */
1983CIPHER_TEST ( wycheproof_aes_gcm_13666319, &aes_gcm_algorithm,
1984 KEY ( 0x29, 0xd3, 0xa4, 0x4f, 0x87, 0x23, 0xdc, 0x64, 0x02, 0x39,
1985 0x10, 0x0c, 0x36, 0x54, 0x23, 0xa3, 0x12, 0x93, 0x4a, 0xc8,
1986 0x02, 0x39, 0x21, 0x2a, 0xc3, 0xdf, 0x34, 0x21, 0xa2, 0x09,
1987 0x81, 0x23 ),
1988 IV ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
1989 0xaa, 0xbb ),
1990 ADDITIONAL ( 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
1991 PLAINTEXT(),
1992 CIPHERTEXT(),
1993 AUTH ( 0x2a, 0x7d, 0x77, 0xfa, 0x52, 0x6b, 0x82, 0x50, 0xcb, 0x29,
1994 0x60, 0x78, 0x92, 0x6b, 0x50, 0x20 ) );
1995
1996/* AES-GCM test case 93 */
1997CIPHER_TEST ( wycheproof_aes_gcm_ba5c6dd8, &aes_gcm_algorithm,
1998 KEY ( 0x80, 0xba, 0x31, 0x92, 0xc8, 0x03, 0xce, 0x96, 0x5e, 0xa3,
1999 0x71, 0xd5, 0xff, 0x07, 0x3c, 0xf0, 0xf4, 0x3b, 0x6a, 0x2a,
2000 0xb5, 0x76, 0xb2, 0x08, 0x42, 0x6e, 0x11, 0x40, 0x9c, 0x09,
2001 0xb9, 0xb0 ),
2002 IV ( 0x4d, 0xa5, 0xbf, 0x8d, 0xfd, 0x58, 0x52, 0xc1, 0xea, 0x12,
2003 0x37, 0x9d ),
2004 ADDITIONAL(),
2005 PLAINTEXT(),
2006 CIPHERTEXT(),
2007 AUTH ( 0x47, 0x71, 0xa7, 0xc4, 0x04, 0xa4, 0x72, 0x96, 0x6c, 0xea,
2008 0x8f, 0x73, 0xc8, 0xbf, 0xe1, 0x7a ) );
2009
2010/* AES-GCM test case 94 */
2011CIPHER_TEST ( wycheproof_aes_gcm_c95dab82, &aes_gcm_algorithm,
2012 KEY ( 0xcc, 0x56, 0xb6, 0x80, 0x55, 0x2e, 0xb7, 0x50, 0x08, 0xf5,
2013 0x48, 0x4b, 0x4c, 0xb8, 0x03, 0xfa, 0x50, 0x63, 0xeb, 0xd6,
2014 0xea, 0xb9, 0x1f, 0x6a, 0xb6, 0xae, 0xf4, 0x91, 0x6a, 0x76,
2015 0x62, 0x73 ),
2016 IV ( 0x99, 0xe2, 0x3e, 0xc4, 0x89, 0x85, 0xbc, 0xcd, 0xee, 0xab,
2017 0x60, 0xf1 ),
2018 ADDITIONAL(),
2019 PLAINTEXT ( 0x2a ),
2020 CIPHERTEXT ( 0x06 ),
2021 AUTH ( 0x63, 0x3c, 0x1e, 0x97, 0x03, 0xef, 0x74, 0x4f, 0xff, 0xfb,
2022 0x40, 0xed, 0xf9, 0xd1, 0x43, 0x55 ) );
2023
2024/* AES-GCM test case 95 */
2025CIPHER_TEST ( wycheproof_aes_gcm_ae22db55, &aes_gcm_algorithm,
2026 KEY ( 0x51, 0xe4, 0xbf, 0x2b, 0xad, 0x92, 0xb7, 0xaf, 0xf1, 0xa4,
2027 0xbc, 0x05, 0x55, 0x0b, 0xa8, 0x1d, 0xf4, 0xb9, 0x6f, 0xab,
2028 0xf4, 0x1c, 0x12, 0xc7, 0xb0, 0x0e, 0x60, 0xe4, 0x8d, 0xb7,
2029 0xe1, 0x52 ),
2030 IV ( 0x4f, 0x07, 0xaf, 0xed, 0xfd, 0xc3, 0xb6, 0xc2, 0x36, 0x18,
2031 0x23, 0xd3 ),
2032 ADDITIONAL(),
2033 PLAINTEXT ( 0xbe, 0x33, 0x08, 0xf7, 0x2a, 0x2c, 0x6a, 0xed ),
2034 CIPHERTEXT ( 0xcf, 0x33, 0x2a, 0x12, 0xfd, 0xee, 0x80, 0x0b ),
2035 AUTH ( 0x60, 0x2e, 0x8d, 0x7c, 0x47, 0x99, 0xd6, 0x2c, 0x14, 0x0c,
2036 0x9b, 0xb8, 0x34, 0x87, 0x6b, 0x09 ) );
2037
2038/* AES-GCM test case 96 */
2039CIPHER_TEST ( wycheproof_aes_gcm_d6dc5d07, &aes_gcm_algorithm,
2040 KEY ( 0x67, 0x11, 0x96, 0x27, 0xbd, 0x98, 0x8e, 0xda, 0x90, 0x62,
2041 0x19, 0xe0, 0x8c, 0x0d, 0x0d, 0x77, 0x9a, 0x07, 0xd2, 0x08,
2042 0xce, 0x8a, 0x4f, 0xe0, 0x70, 0x9a, 0xf7, 0x55, 0xee, 0xec,
2043 0x6d, 0xcb ),
2044 IV ( 0x68, 0xab, 0x7f, 0xdb, 0xf6, 0x19, 0x01, 0xda, 0xd4, 0x61,
2045 0xd2, 0x3c ),
2046 ADDITIONAL(),
2047 PLAINTEXT ( 0x51, 0xf8, 0xc1, 0xf7, 0x31, 0xea, 0x14, 0xac, 0xdb,
2048 0x21, 0x0a, 0x6d, 0x97, 0x3e, 0x07 ),
2049 CIPHERTEXT ( 0x43, 0xfc, 0x10, 0x1b, 0xff, 0x4b, 0x32, 0xbf, 0xad,
2050 0xd3, 0xda, 0xf5, 0x7a, 0x59, 0x0e ),
2051 AUTH ( 0xec, 0x04, 0xaa, 0xcb, 0x71, 0x48, 0xa8, 0xb8, 0xbe, 0x44,
2052 0xcb, 0x7e, 0xaf, 0x4e, 0xfa, 0x69 ) );
2053
2054/* AES-GCM test case 97 */
2055CIPHER_TEST ( wycheproof_aes_gcm_c761752c, &aes_gcm_algorithm,
2056 KEY ( 0x59, 0xd4, 0xea, 0xfb, 0x4d, 0xe0, 0xcf, 0xc7, 0xd3, 0xdb,
2057 0x99, 0xa8, 0xf5, 0x4b, 0x15, 0xd7, 0xb3, 0x9f, 0x0a, 0xcc,
2058 0x8d, 0xa6, 0x97, 0x63, 0xb0, 0x19, 0xc1, 0x69, 0x9f, 0x87,
2059 0x67, 0x4a ),
2060 IV ( 0x2f, 0xcb, 0x1b, 0x38, 0xa9, 0x9e, 0x71, 0xb8, 0x47, 0x40,
2061 0xad, 0x9b ),
2062 ADDITIONAL(),
2063 PLAINTEXT ( 0x54, 0x9b, 0x36, 0x5a, 0xf9, 0x13, 0xf3, 0xb0, 0x81,
2064 0x13, 0x1c, 0xcb, 0x6b, 0x82, 0x55, 0x88 ),
2065 CIPHERTEXT ( 0xf5, 0x8c, 0x16, 0x69, 0x01, 0x22, 0xd7, 0x53, 0x56,
2066 0x90, 0x7f, 0xd9, 0x6b, 0x57, 0x0f, 0xca ),
2067 AUTH ( 0x28, 0x75, 0x2c, 0x20, 0x15, 0x30, 0x92, 0x81, 0x8f, 0xab,
2068 0xa2, 0xa3, 0x34, 0x64, 0x0d, 0x6e ) );
2069
2070/* AES-GCM test case 98 */
2071CIPHER_TEST ( wycheproof_aes_gcm_c63f1aed, &aes_gcm_algorithm,
2072 KEY ( 0x3b, 0x24, 0x58, 0xd8, 0x17, 0x6e, 0x16, 0x21, 0xc0, 0xcc,
2073 0x24, 0xc0, 0xc0, 0xe2, 0x4c, 0x1e, 0x80, 0xd7, 0x2f, 0x7e,
2074 0xe9, 0x14, 0x9a, 0x4b, 0x16, 0x61, 0x76, 0x62, 0x96, 0x16,
2075 0xd0, 0x11 ),
2076 IV ( 0x45, 0xaa, 0xa3, 0xe5, 0xd1, 0x6d, 0x2d, 0x42, 0xdc, 0x03,
2077 0x44, 0x5d ),
2078 ADDITIONAL(),
2079 PLAINTEXT ( 0x3f, 0xf1, 0x51, 0x4b, 0x1c, 0x50, 0x39, 0x15, 0x91,
2080 0x8f, 0x0c, 0x0c, 0x31, 0x09, 0x4a, 0x6e, 0x1f ),
2081 CIPHERTEXT ( 0x73, 0xa6, 0xb6, 0xf4, 0x5f, 0x6c, 0xcc, 0x51, 0x31,
2082 0xe0, 0x7f, 0x2c, 0xaa, 0x1f, 0x2e, 0x2f, 0x56 ),
2083 AUTH ( 0x2d, 0x73, 0x79, 0xec, 0x1d, 0xb5, 0x95, 0x2d, 0x4e, 0x95,
2084 0xd3, 0x0c, 0x34, 0x0b, 0x1b, 0x1d ) );
2085
2086/* AES-GCM test case 99 */
2087CIPHER_TEST ( wycheproof_aes_gcm_dd4fb2f4, &aes_gcm_algorithm,
2088 KEY ( 0x02, 0x12, 0xa8, 0xde, 0x50, 0x07, 0xed, 0x87, 0xb3, 0x3f,
2089 0x1a, 0x70, 0x90, 0xb6, 0x11, 0x4f, 0x9e, 0x08, 0xce, 0xfd,
2090 0x96, 0x07, 0xf2, 0xc2, 0x76, 0xbd, 0xcf, 0xdb, 0xc5, 0xce,
2091 0x9c, 0xd7 ),
2092 IV ( 0xe6, 0xb1, 0xad, 0xf2, 0xfd, 0x58, 0xa8, 0x76, 0x2c, 0x65,
2093 0xf3, 0x1b ),
2094 ADDITIONAL(),
2095 PLAINTEXT ( 0x10, 0xf1, 0xec, 0xf9, 0xc6, 0x05, 0x84, 0x66, 0x5d,
2096 0x9a, 0xe5, 0xef, 0xe2, 0x79, 0xe7, 0xf7, 0x37, 0x7e,
2097 0xea, 0x69, 0x16, 0xd2, 0xb1, 0x11 ),
2098 CIPHERTEXT ( 0x08, 0x43, 0xff, 0xf5, 0x2d, 0x93, 0x4f, 0xc7, 0xa0,
2099 0x71, 0xea, 0x62, 0xc0, 0xbd, 0x35, 0x1c, 0xe8, 0x56,
2100 0x78, 0xcd, 0xe3, 0xea, 0x2c, 0x9e ),
2101 AUTH ( 0x73, 0x55, 0xfd, 0xe5, 0x99, 0x00, 0x67, 0x15, 0x05, 0x38,
2102 0x13, 0xce, 0x69, 0x62, 0x37, 0xa8 ) );
2103
2104/* AES-GCM test case 100 */
2105CIPHER_TEST ( wycheproof_aes_gcm_922348b7, &aes_gcm_algorithm,
2106 KEY ( 0xb2, 0x79, 0xf5, 0x7e, 0x19, 0xc8, 0xf5, 0x3f, 0x2f, 0x96,
2107 0x3f, 0x5f, 0x25, 0x19, 0xfd, 0xb7, 0xc1, 0x77, 0x9b, 0xe2,
2108 0xca, 0x2b, 0x3a, 0xe8, 0xe1, 0x12, 0x8b, 0x7d, 0x6c, 0x62,
2109 0x7f, 0xc4 ),
2110 IV ( 0x98, 0xbc, 0x2c, 0x74, 0x38, 0xd5, 0xcd, 0x76, 0x65, 0xd7,
2111 0x6f, 0x6e ),
2112 ADDITIONAL ( 0xc0 ),
2113 PLAINTEXT ( 0xfc, 0xc5, 0x15, 0xb2, 0x94, 0x40, 0x8c, 0x86, 0x45,
2114 0xc9, 0x18, 0x3e, 0x3f, 0x4e, 0xce, 0xe5, 0x12, 0x78,
2115 0x46, 0xd1 ),
2116 CIPHERTEXT ( 0xeb, 0x55, 0x00, 0xe3, 0x82, 0x59, 0x52, 0x86, 0x6d,
2117 0x91, 0x12, 0x53, 0xf8, 0xde, 0x86, 0x0c, 0x00, 0x83,
2118 0x1c, 0x81 ),
2119 AUTH ( 0xec, 0xb6, 0x60, 0xe1, 0xfb, 0x05, 0x41, 0xec, 0x41, 0xe8,
2120 0xd6, 0x8a, 0x64, 0x14, 0x1b, 0x3a ) );
2121
2122/* AES-GCM test case 101 */
2123CIPHER_TEST ( wycheproof_aes_gcm_90face03, &aes_gcm_algorithm,
2124 KEY ( 0xcd, 0xcc, 0xfe, 0x3f, 0x46, 0xd7, 0x82, 0xef, 0x47, 0xdf,
2125 0x4e, 0x72, 0xf0, 0xc0, 0x2d, 0x9c, 0x7f, 0x77, 0x4d, 0xef,
2126 0x97, 0x0d, 0x23, 0x48, 0x6f, 0x11, 0xa5, 0x7f, 0x54, 0x24,
2127 0x7f, 0x17 ),
2128 IV ( 0x37, 0x61, 0x87, 0x89, 0x46, 0x05, 0xa8, 0xd4, 0x5e, 0x30,
2129 0xde, 0x51 ),
2130 ADDITIONAL ( 0x95, 0x68, 0x46, 0xa2, 0x09, 0xe0, 0x87, 0xed ),
2131 PLAINTEXT ( 0xe2, 0x8e, 0x0e, 0x9f, 0x9d, 0x22, 0x46, 0x3a, 0xc0,
2132 0xe4, 0x26, 0x39, 0xb5, 0x30, 0xf4, 0x21, 0x02, 0xfd,
2133 0xed, 0x75 ),
2134 CIPHERTEXT ( 0xfe, 0xca, 0x44, 0x95, 0x24, 0x47, 0x01, 0x5b, 0x5d,
2135 0xf1, 0xf4, 0x56, 0xdf, 0x8c, 0xa4, 0xbb, 0x4e, 0xee,
2136 0x2c, 0xe2 ),
2137 AUTH ( 0x08, 0x2e, 0x91, 0x92, 0x4d, 0xee, 0xb7, 0x78, 0x80, 0xe1,
2138 0xb1, 0xc8, 0x4f, 0x9b, 0x8d, 0x30 ) );
2139
2140/* AES-GCM test case 102 */
2141CIPHER_TEST ( wycheproof_aes_gcm_d999cc8e, &aes_gcm_algorithm,
2142 KEY ( 0xf3, 0x23, 0x64, 0xb1, 0xd3, 0x39, 0xd8, 0x2e, 0x4f, 0x13,
2143 0x2d, 0x8f, 0x4a, 0x0e, 0xc1, 0xff, 0x7e, 0x74, 0x65, 0x17,
2144 0xfa, 0x07, 0xef, 0x1a, 0x7f, 0x42, 0x2f, 0x4e, 0x25, 0xa4,
2145 0x81, 0x94 ),
2146 IV ( 0x5a, 0x86, 0xa5, 0x0a, 0x0e, 0x8a, 0x17, 0x9c, 0x73, 0x4b,
2147 0x99, 0x6d ),
2148 ADDITIONAL ( 0xab, 0x2a, 0xc7, 0xc4, 0x4c, 0x60, 0xbd, 0xf8, 0x22,
2149 0x8c, 0x78, 0x84, 0xad, 0xb2, 0x01, 0x84 ),
2150 PLAINTEXT ( 0x43, 0x89, 0x1b, 0xcc, 0xb5, 0x22, 0xb1, 0xe7, 0x2a,
2151 0x6b, 0x53, 0xcf, 0x31, 0xc0, 0x74, 0xe9, 0xd6, 0xc2,
2152 0xdf, 0x8e ),
2153 CIPHERTEXT ( 0x43, 0xdd, 0xa8, 0x32, 0xe9, 0x42, 0xe2, 0x86, 0xda,
2154 0x31, 0x4d, 0xaa, 0x99, 0xbe, 0xf5, 0x07, 0x1d, 0x9d,
2155 0x2c, 0x78 ),
2156 AUTH ( 0xc3, 0x92, 0x25, 0x83, 0x47, 0x6c, 0xed, 0x57, 0x54, 0x04,
2157 0xdd, 0xb8, 0x5d, 0xd8, 0xcd, 0x44 ) );
2158
2159/* AES-GCM test case 103 */
2160CIPHER_TEST ( wycheproof_aes_gcm_4af502aa, &aes_gcm_algorithm,
2161 KEY ( 0xff, 0x00, 0x89, 0xee, 0x87, 0x0a, 0x4a, 0x39, 0xf6, 0x45,
2162 0xb0, 0xa5, 0xda, 0x77, 0x4f, 0x7a, 0x59, 0x11, 0xe9, 0x69,
2163 0x6f, 0xc9, 0xca, 0xd6, 0x46, 0x45, 0x2c, 0x2a, 0xa8, 0x59,
2164 0x5a, 0x12 ),
2165 IV ( 0xbc, 0x2a, 0x77, 0x57, 0xd0, 0xce, 0x2d, 0x8b, 0x1f, 0x14,
2166 0xcc, 0xd9 ),
2167 ADDITIONAL ( 0x97, 0x2a, 0xb4, 0xe0, 0x63, 0x90, 0xca, 0xae, 0x8f,
2168 0x99, 0xdd, 0x6e, 0x21, 0x87, 0xbe, 0x6c, 0x7f, 0xf2,
2169 0xc0, 0x8a, 0x24, 0xbe, 0x16, 0xef ),
2170 PLAINTEXT ( 0x74, 0x8b, 0x28, 0x03, 0x16, 0x21, 0xd9, 0x5e, 0xe6,
2171 0x18, 0x12, 0xb4, 0xb4, 0xf4, 0x7d, 0x04, 0xc6, 0xfc,
2172 0x2f, 0xf3 ),
2173 CIPHERTEXT ( 0xa9, 0x29, 0xee, 0x7e, 0x67, 0xc7, 0xa2, 0xf9, 0x1b,
2174 0xbc, 0xec, 0x63, 0x89, 0xa3, 0xca, 0xf4, 0x3a, 0xb4,
2175 0x93, 0x05 ),
2176 AUTH ( 0xeb, 0xec, 0x67, 0x74, 0xb9, 0x55, 0xe7, 0x89, 0x59, 0x1c,
2177 0x82, 0x2d, 0xab, 0x73, 0x9e, 0x12 ) );
2178
2179/* AES-GCM test case 104 */
2180CIPHER_TEST ( wycheproof_aes_gcm_4ebc55c7, &aes_gcm_algorithm,
2181 KEY ( 0x6e, 0xfc, 0xa9, 0x81, 0x26, 0x91, 0x8a, 0xb5, 0x64, 0xd8,
2182 0x8c, 0x6b, 0xec, 0x02, 0xe8, 0x99, 0x8b, 0x2b, 0xe5, 0x0e,
2183 0x3f, 0x90, 0x6f, 0xf9, 0xad, 0xfd, 0xd1, 0x85, 0xf3, 0x73,
2184 0xe7, 0x56 ),
2185 IV ( 0x4a, 0xbd, 0x6c, 0xfc, 0x83, 0xbd, 0x06, 0xb1, 0x1e, 0xfa,
2186 0xa2, 0xa7 ),
2187 ADDITIONAL(),
2188 PLAINTEXT ( 0xbb, 0xec, 0x79, 0xc0, 0x86, 0xd4, 0x1e, 0x60, 0x2d,
2189 0x09, 0x0f, 0x7e, 0x40, 0x49, 0x4d, 0x6b, 0xf3, 0xfa,
2190 0xa1, 0xdc, 0x6d, 0xf0, 0xab, 0x8a, 0x88, 0xea, 0x5d,
2191 0x35, 0xd4, 0x26, 0xb2, 0x48, 0xc2, 0xad, 0x88, 0x03,
2192 0x51, 0xe2, 0x23, 0xf6, 0x17, 0x0d, 0x37, 0xcc, 0x96,
2193 0x55, 0xe1, 0x04, 0x59, 0xe5, 0x9c, 0xbd, 0x6d, 0x1c,
2194 0x09, 0x2e, 0xd3, 0x1d, 0x72, 0xcc, 0xc7, 0xaf, 0x20 ),
2195 CIPHERTEXT ( 0x97, 0xb4, 0xc7, 0x3a, 0x4d, 0x8b, 0x5b, 0x21, 0xbc,
2196 0x4b, 0x50, 0xdb, 0xb7, 0x0d, 0xfa, 0x77, 0xb1, 0xa7,
2197 0xbf, 0x0b, 0xbe, 0x7c, 0xf1, 0x6e, 0xcf, 0x5b, 0xb6,
2198 0x0b, 0xa8, 0x07, 0x0a, 0xcc, 0x57, 0x40, 0x78, 0x04,
2199 0x35, 0xed, 0x14, 0x5a, 0x62, 0xa6, 0x13, 0xdd, 0x98,
2200 0x81, 0xb7, 0x21, 0x16, 0x8f, 0xbb, 0x3f, 0x5a, 0xf3,
2201 0x85, 0xee, 0x5d, 0x4f, 0x85, 0x6c, 0xf9, 0x3c, 0xba ),
2202 AUTH ( 0x27, 0xac, 0x8c, 0x40, 0x10, 0xd8, 0xe8, 0x1b, 0x70, 0x51,
2203 0xce, 0xb0, 0x6b, 0x30, 0xfe, 0x2d ) );
2204
2205/* AES-GCM test case 105 */
2206CIPHER_TEST ( wycheproof_aes_gcm_888186c8, &aes_gcm_algorithm,
2207 KEY ( 0x5b, 0x1d, 0x10, 0x35, 0xc0, 0xb1, 0x7e, 0xe0, 0xb0, 0x44,
2208 0x47, 0x67, 0xf8, 0x0a, 0x25, 0xb8, 0xc1, 0xb7, 0x41, 0xf4,
2209 0xb5, 0x0a, 0x4d, 0x30, 0x52, 0x22, 0x6b, 0xaa, 0x1c, 0x6f,
2210 0xb7, 0x01 ),
2211 IV ( 0xd6, 0x10, 0x40, 0xa3, 0x13, 0xed, 0x49, 0x28, 0x23, 0xcc,
2212 0x06, 0x5b ),
2213 ADDITIONAL(),
2214 PLAINTEXT ( 0xd0, 0x96, 0x80, 0x31, 0x81, 0xbe, 0xef, 0x9e, 0x00,
2215 0x8f, 0xf8, 0x5d, 0x5d, 0xdc, 0x38, 0xdd, 0xac, 0xf0,
2216 0xf0, 0x9e, 0xe5, 0xf7, 0xe0, 0x7f, 0x1e, 0x40, 0x79,
2217 0xcb, 0x64, 0xd0, 0xdc, 0x8f, 0x5e, 0x67, 0x11, 0xcd,
2218 0x49, 0x21, 0xa7, 0x88, 0x7d, 0xe7, 0x6e, 0x26, 0x78,
2219 0xfd, 0xc6, 0x76, 0x18, 0xf1, 0x18, 0x55, 0x86, 0xbf,
2220 0xea, 0x9d, 0x4c, 0x68, 0x5d, 0x50, 0xe4, 0xbb, 0x9a,
2221 0x82 ),
2222 CIPHERTEXT ( 0xc7, 0xd1, 0x91, 0xb6, 0x01, 0xf8, 0x6c, 0x28, 0xb6,
2223 0xa1, 0xbd, 0xef, 0x6a, 0x57, 0xb4, 0xf6, 0xee, 0x3a,
2224 0xe4, 0x17, 0xbc, 0x12, 0x5c, 0x38, 0x1c, 0xdf, 0x1c,
2225 0x4d, 0xac, 0x18, 0x4e, 0xd1, 0xd8, 0x4f, 0x11, 0x96,
2226 0x20, 0x6d, 0x62, 0xca, 0xd1, 0x12, 0xb0, 0x38, 0x84,
2227 0x57, 0x20, 0xe0, 0x2c, 0x06, 0x11, 0x79, 0xa8, 0x83,
2228 0x6f, 0x02, 0xb9, 0x3f, 0xa7, 0x00, 0x83, 0x79, 0xa6,
2229 0xbf ),
2230 AUTH ( 0xf1, 0x56, 0x12, 0xf6, 0xc4, 0x0f, 0x2e, 0x0d, 0xb6, 0xdc,
2231 0x76, 0xfc, 0x48, 0x22, 0xfc, 0xfe ) );
2232
2233/* AES-GCM test case 106 */
2234CIPHER_TEST ( wycheproof_aes_gcm_4a6005f6, &aes_gcm_algorithm,
2235 KEY ( 0x81, 0xb6, 0xb2, 0x7e, 0x5e, 0xd9, 0x0a, 0xb9, 0x9f, 0xe6,
2236 0x75, 0x6d, 0x4c, 0xb4, 0x1e, 0x3f, 0x07, 0x26, 0x96, 0x87,
2237 0xf5, 0xaf, 0xab, 0xdb, 0x42, 0x6e, 0x29, 0x09, 0x6b, 0x5e,
2238 0x44, 0x66 ),
2239 IV ( 0x13, 0xe7, 0x27, 0x48, 0x60, 0x31, 0xcc, 0xa2, 0x1f, 0x73,
2240 0x33, 0x75 ),
2241 ADDITIONAL(),
2242 PLAINTEXT ( 0x9a, 0x95, 0xa2, 0x3c, 0xfb, 0x1e, 0x35, 0xd8, 0x9a,
2243 0x75, 0x97, 0x57, 0x0d, 0xf0, 0xfb, 0x0e, 0xfc, 0xbb,
2244 0x74, 0x29, 0xf5, 0x3b, 0xeb, 0xcb, 0xbf, 0xa4, 0x9f,
2245 0xa2, 0x47, 0xb2, 0x51, 0xa8, 0x50, 0x8a, 0xd4, 0x97,
2246 0x06, 0x68, 0x55, 0xd0, 0x86, 0x88, 0x57, 0x61, 0x88,
2247 0xe4, 0xff, 0xb1, 0x2d, 0x1d, 0x08, 0x4d, 0xca, 0xbe,
2248 0xc3, 0xd5, 0x78, 0x06, 0xda, 0xf2, 0x15, 0xdc, 0xc9,
2249 0x7e, 0xdd ),
2250 CIPHERTEXT ( 0x7e, 0xde, 0x73, 0x68, 0xbc, 0xa3, 0xc9, 0x3d, 0x9f,
2251 0x1d, 0x7f, 0x77, 0x50, 0xd6, 0xe4, 0x4b, 0x1c, 0xb9,
2252 0x2c, 0x30, 0xe3, 0xc9, 0x83, 0x4b, 0x0b, 0x69, 0xef,
2253 0xd2, 0x47, 0x09, 0x11, 0x64, 0x4a, 0xe6, 0xf6, 0xd7,
2254 0x57, 0x15, 0xe1, 0x3a, 0xea, 0x87, 0x81, 0xf8, 0xda,
2255 0x61, 0x1a, 0x13, 0xac, 0x63, 0x64, 0xc4, 0x06, 0xc1,
2256 0xa7, 0x15, 0xb7, 0xe9, 0x7a, 0xcb, 0x22, 0xb6, 0xe6,
2257 0x15, 0x6e ),
2258 AUTH ( 0x74, 0xe2, 0x0a, 0x93, 0x80, 0x2f, 0x43, 0x40, 0x7c, 0x89,
2259 0x89, 0xa3, 0x7f, 0x01, 0x38, 0x02 ) );
2260
2261/* AES-GCM test case 107 */
2262CIPHER_TEST ( wycheproof_aes_gcm_2d04655c, &aes_gcm_algorithm,
2263 KEY ( 0xea, 0x1d, 0x43, 0x6f, 0x63, 0x59, 0xca, 0xec, 0x01, 0x07,
2264 0x89, 0xfa, 0x94, 0xfe, 0x08, 0xb1, 0x67, 0xc3, 0xe4, 0x97,
2265 0xd8, 0x91, 0x72, 0x82, 0xf4, 0x7a, 0xd2, 0xa8, 0xf9, 0x5f,
2266 0xd0, 0xf1 ),
2267 IV ( 0x73, 0xfe, 0x02, 0x22, 0x02, 0x76, 0x7a, 0xf8, 0x34, 0xe3,
2268 0x21, 0x26 ),
2269 ADDITIONAL(),
2270 PLAINTEXT ( 0xad, 0xf9, 0xb6, 0xdf, 0x5c, 0x5c, 0xc9, 0x47, 0x3e,
2271 0x0b, 0xb5, 0x79, 0xf9, 0xa6, 0xaa, 0xd3, 0x96, 0xf9,
2272 0x3d, 0x28, 0xbf, 0x83, 0xe9, 0x81, 0x36, 0xf9, 0x78,
2273 0xcf, 0xb9, 0xd5, 0x01, 0xd0, 0x9e, 0xf7, 0x78, 0xc1,
2274 0x22, 0xb4, 0x3c, 0x87, 0x6c, 0x22, 0xe4, 0x0d, 0x74,
2275 0xa4, 0x8d, 0x90, 0x89, 0x78, 0x46, 0x5a, 0x06, 0xbe,
2276 0x9e, 0x80, 0x89, 0x17, 0x10, 0xc8, 0xc2, 0x69, 0x0a,
2277 0x76, 0x2b, 0xc9, 0xeb, 0x8b, 0xcb, 0x2a, 0xa2, 0x70,
2278 0x7d, 0xb1, 0x49, 0xab, 0xaf, 0xb9, 0xc1, 0x7c, 0x1f,
2279 0x0b, 0x68, 0xc7, 0xad, 0xce, 0xa9, 0x8a, 0xeb, 0xf4,
2280 0xc6, 0xa3, 0x9e, 0x5a, 0x8f, 0x69, 0x31, 0x33, 0xea,
2281 0xaa, 0x5b, 0xb0, 0xb3, 0x70, 0x87, 0x20, 0xd7, 0xb8,
2282 0x64, 0x24, 0x10, 0x1b, 0xad, 0x56, 0xaa, 0x19, 0x0c,
2283 0x67, 0xd2, 0x5f, 0xe3, 0x5a, 0x4a, 0x34, 0xe1, 0xf4,
2284 0xfd ),
2285 CIPHERTEXT ( 0x2e, 0x6b, 0x19, 0x52, 0x0d, 0x9c, 0x91, 0xe4, 0x1f,
2286 0x52, 0x3b, 0xfd, 0x80, 0xcb, 0x3d, 0x57, 0x7d, 0xf7,
2287 0x62, 0x87, 0x9b, 0x04, 0xa5, 0x86, 0xb8, 0x65, 0x28,
2288 0x0b, 0xac, 0x65, 0x11, 0x02, 0xfa, 0x60, 0x16, 0x4b,
2289 0x85, 0x86, 0xf9, 0x1c, 0x02, 0xb2, 0x15, 0x1c, 0xc2,
2290 0xfd, 0x29, 0xf4, 0xc6, 0xe9, 0x28, 0x39, 0xcd, 0xd8,
2291 0x73, 0xbe, 0x12, 0xc1, 0x44, 0x31, 0x41, 0xf8, 0xbc,
2292 0xb8, 0x75, 0x49, 0x65, 0xae, 0xc7, 0xc0, 0x82, 0x9f,
2293 0xb3, 0x91, 0xe5, 0x65, 0x63, 0xba, 0x76, 0xe8, 0x96,
2294 0xec, 0x81, 0x93, 0x2b, 0x5e, 0xfb, 0xad, 0x23, 0xbb,
2295 0x96, 0x5e, 0xbb, 0xf8, 0xd8, 0xfd, 0xa9, 0x8f, 0x9c,
2296 0xbd, 0x48, 0xf3, 0x7b, 0x2c, 0x46, 0xdb, 0x60, 0x9e,
2297 0x40, 0x76, 0x82, 0x66, 0xc2, 0xb3, 0x6a, 0x78, 0x10,
2298 0xd2, 0xb7, 0x91, 0x33, 0xf3, 0x77, 0xd0, 0x37, 0x7b,
2299 0x41 ),
2300 AUTH ( 0xf9, 0xa0, 0xeb, 0xa5, 0x13, 0x90, 0x4c, 0x4a, 0x71, 0x68,
2301 0xd7, 0x62, 0x00, 0x0f, 0x34, 0xbe ) );
2302
2303/* AES-GCM test case 108 */
2304CIPHER_TEST ( wycheproof_aes_gcm_56b6987d, &aes_gcm_algorithm,
2305 KEY ( 0xd7, 0xad, 0xdd, 0x38, 0x89, 0xfa, 0xdf, 0x8c, 0x89, 0x3e,
2306 0xee, 0x14, 0xba, 0x2b, 0x7e, 0xa5, 0xbf, 0x56, 0xb4, 0x49,
2307 0x90, 0x48, 0x69, 0x61, 0x5b, 0xd0, 0x5d, 0x5f, 0x11, 0x4c,
2308 0xf3, 0x77 ),
2309 IV ( 0x8a, 0x3a, 0xd2, 0x6b, 0x28, 0xcd, 0x13, 0xba, 0x65, 0x04,
2310 0xe2, 0x60 ),
2311 ADDITIONAL(),
2312 PLAINTEXT ( 0xc8, 0x77, 0xa7, 0x6b, 0xf5, 0x95, 0x56, 0x07, 0x72,
2313 0x16, 0x7c, 0x6e, 0x3b, 0xcc, 0x70, 0x53, 0x05, 0xdb,
2314 0x9c, 0x6f, 0xcb, 0xeb, 0x90, 0xf4, 0xfe, 0xa8, 0x51,
2315 0x16, 0x03, 0x8b, 0xc5, 0x3c, 0x3f, 0xa5, 0xb4, 0xb4,
2316 0xea, 0x0d, 0xe5, 0xcc, 0x53, 0x4f, 0xbe, 0x1c, 0xf9,
2317 0xae, 0x44, 0x82, 0x4c, 0x6c, 0x2c, 0x0a, 0x5c, 0x88,
2318 0x5b, 0xd8, 0xc3, 0xcd, 0xc9, 0x06, 0xf1, 0x26, 0x75,
2319 0x73, 0x7e, 0x43, 0x4b, 0x98, 0x3e, 0x1e, 0x23, 0x1a,
2320 0x52, 0xa2, 0x75, 0xdb, 0x5f, 0xb1, 0xa0, 0xca, 0xc6,
2321 0xa0, 0x7b, 0x3b, 0x7d, 0xcb, 0x19, 0x48, 0x2a, 0x5d,
2322 0x3b, 0x06, 0xa9, 0x31, 0x7a, 0x54, 0x82, 0x6c, 0xea,
2323 0x6b, 0x36, 0xfc, 0xe4, 0x52, 0xfa, 0x9b, 0x54, 0x75,
2324 0xe2, 0xaa, 0xf2, 0x54, 0x99, 0x49, 0x9d, 0x8a, 0x89,
2325 0x32, 0xa1, 0x9e, 0xb9, 0x87, 0xc9, 0x03, 0xbd, 0x85,
2326 0x02, 0xfe ),
2327 CIPHERTEXT ( 0x53, 0xcc, 0x8c, 0x92, 0x0a, 0x85, 0xd1, 0xac, 0xcb,
2328 0x88, 0x63, 0x6d, 0x08, 0xbb, 0xe4, 0x86, 0x9b, 0xfd,
2329 0xd9, 0x6f, 0x43, 0x7b, 0x2e, 0xc9, 0x44, 0x51, 0x21,
2330 0x73, 0xa9, 0xc0, 0xfe, 0x7a, 0x47, 0xf8, 0x43, 0x41,
2331 0x33, 0x98, 0x9b, 0xa7, 0x7d, 0xda, 0x56, 0x1b, 0x7e,
2332 0x37, 0x01, 0xb9, 0xa8, 0x3c, 0x3b, 0xa7, 0x66, 0x0c,
2333 0x66, 0x6b, 0xa5, 0x9f, 0xef, 0x96, 0x59, 0x8e, 0xb6,
2334 0x21, 0x54, 0x4c, 0x63, 0x80, 0x6d, 0x50, 0x9a, 0xc4,
2335 0x76, 0x97, 0x41, 0x2f, 0x95, 0x64, 0xeb, 0x0a, 0x2e,
2336 0x1f, 0x72, 0xf6, 0x59, 0x9f, 0x56, 0x66, 0xaf, 0x34,
2337 0xcf, 0xfc, 0xa0, 0x65, 0x73, 0xff, 0xb4, 0xf4, 0x7b,
2338 0x02, 0xf5, 0x9f, 0x21, 0xc6, 0x43, 0x63, 0xda, 0xec,
2339 0xb9, 0x77, 0xb4, 0x41, 0x5f, 0x19, 0xfd, 0xda, 0x3c,
2340 0x9a, 0xae, 0x50, 0x66, 0xa5, 0x7b, 0x66, 0x9f, 0xfa,
2341 0xa2, 0x57 ),
2342 AUTH ( 0x5e, 0x63, 0x37, 0x4b, 0x51, 0x9e, 0x6c, 0x36, 0x08, 0x32,
2343 0x19, 0x43, 0xd7, 0x90, 0xcf, 0x9a ) );
2344
2345/* AES-GCM test case 109 */
2346CIPHER_TEST ( wycheproof_aes_gcm_644b8aad, &aes_gcm_algorithm,
2347 KEY ( 0x7f, 0x7c, 0x58, 0x04, 0xa6, 0x80, 0xf6, 0x19, 0x24, 0x96,
2348 0x67, 0x25, 0xdb, 0xa2, 0xa8, 0x0d, 0x85, 0x26, 0x7c, 0x2e,
2349 0x03, 0xc7, 0xc2, 0x34, 0xb0, 0x45, 0xb2, 0x4e, 0xc8, 0xe2,
2350 0x35, 0x28 ),
2351 IV ( 0x2d, 0x9b, 0xf8, 0xb6, 0x36, 0xf3, 0x37, 0xd2, 0x65, 0xb0,
2352 0x90, 0x4c ),
2353 ADDITIONAL(),
2354 PLAINTEXT ( 0xe2, 0xf8, 0x5f, 0xb1, 0x76, 0x84, 0x0c, 0x38, 0x34,
2355 0x5d, 0xa0, 0xf0, 0xf8, 0xdb, 0x6c, 0xdb, 0xc4, 0x5a,
2356 0x12, 0x31, 0x65, 0xf2, 0x44, 0xff, 0x53, 0x89, 0xfe,
2357 0x65, 0xbf, 0x34, 0x1f, 0xa1, 0x31, 0x13, 0x07, 0x51,
2358 0xb5, 0xc7, 0x39, 0xa9, 0x93, 0x1d, 0x5a, 0x57, 0xb1,
2359 0x41, 0xdc, 0x7b, 0x5b, 0x0c, 0x5a, 0x2c, 0xa0, 0x73,
2360 0x31, 0xc2, 0xdc, 0x04, 0xb2, 0x65, 0x7b, 0x02, 0x89,
2361 0x87, 0x8d, 0xea, 0x0e, 0xf7, 0xd5, 0x60, 0x14, 0x65,
2362 0xb7, 0x8a, 0x65, 0x79, 0x5f, 0x0f, 0x31, 0x81, 0x30,
2363 0x4e, 0x58, 0xa2, 0x61, 0xfe, 0xb1, 0xd3, 0x94, 0xf3,
2364 0xc3, 0x3c, 0xab, 0xae, 0x18, 0x99, 0x41, 0x75, 0x5d,
2365 0x76, 0x54, 0xbb, 0x7b, 0xef, 0x08, 0xc3, 0x1b, 0xd2,
2366 0xc5, 0xce, 0x12, 0x03, 0xee, 0xbc, 0x01, 0x5a, 0xe0,
2367 0x40, 0xda, 0x2a, 0x85, 0x1c, 0x2b, 0xa3, 0xc6, 0x2e,
2368 0x69, 0x93, 0x56 ),
2369 CIPHERTEXT ( 0xd7, 0x38, 0x0d, 0x10, 0xb2, 0x2c, 0x3a, 0xe5, 0x84,
2370 0x53, 0x1e, 0x9e, 0x4e, 0xe7, 0x3d, 0x38, 0x7f, 0x69,
2371 0xdb, 0xbb, 0x3d, 0x3d, 0x9f, 0xdb, 0x49, 0x71, 0xed,
2372 0x27, 0x50, 0xb3, 0x19, 0x13, 0xf7, 0x9e, 0x4c, 0x00,
2373 0xcf, 0x1b, 0x76, 0x93, 0x3b, 0xbb, 0x75, 0xd3, 0x9d,
2374 0x8a, 0x64, 0x29, 0xa2, 0x52, 0x8e, 0x9b, 0xd6, 0x0e,
2375 0x65, 0xfa, 0x6f, 0xff, 0xf9, 0xe0, 0x1a, 0x87, 0x58,
2376 0xe7, 0xb5, 0x84, 0x09, 0xfa, 0x3f, 0x37, 0x0c, 0xc3,
2377 0x2a, 0x63, 0xaa, 0x60, 0xa5, 0x4c, 0x36, 0xd7, 0x33,
2378 0xe8, 0xf6, 0xdf, 0xcc, 0xd5, 0xc3, 0x12, 0x0d, 0x05,
2379 0xc6, 0xe3, 0x31, 0x40, 0xc0, 0x05, 0x62, 0x86, 0x55,
2380 0x32, 0xb2, 0xc6, 0x89, 0xde, 0x98, 0x76, 0x9d, 0x33,
2381 0x86, 0xe7, 0xa3, 0xae, 0x67, 0x9e, 0x40, 0x4e, 0x06,
2382 0x25, 0x36, 0xca, 0x04, 0x62, 0x61, 0x21, 0x1a, 0x42,
2383 0x6f, 0xb5, 0x86 ),
2384 AUTH ( 0x75, 0x3f, 0x6c, 0x57, 0xc0, 0xcc, 0x2a, 0x07, 0x5e, 0x68,
2385 0xd0, 0x82, 0xf6, 0xe8, 0x35, 0x90 ) );
2386
2387/* AES-GCM test case 110 */
2388CIPHER_TEST ( wycheproof_aes_gcm_97bb5e35, &aes_gcm_algorithm,
2389 KEY ( 0x01, 0xe7, 0x5a, 0xe8, 0x03, 0xd3, 0x04, 0x5e, 0x6b, 0x28,
2390 0xb7, 0xf6, 0x79, 0x37, 0xee, 0xe2, 0xd8, 0xd9, 0x8f, 0x77,
2391 0xb4, 0x89, 0x2d, 0x48, 0xab, 0x1f, 0x15, 0xf5, 0x7f, 0xa8,
2392 0x8b, 0xbe ),
2393 IV ( 0x69, 0x02, 0xe8, 0xf0, 0xef, 0x1e, 0x9e, 0xc6, 0x0a, 0x3e,
2394 0x46, 0xf0 ),
2395 ADDITIONAL(),
2396 PLAINTEXT ( 0x32, 0xdd, 0xe3, 0xb9, 0xbc, 0x67, 0x1f, 0xad, 0x12,
2397 0x65, 0xb2, 0x6c, 0xad, 0x3d, 0x8d, 0xd0, 0xf0, 0x99,
2398 0x13, 0x4f, 0x67, 0x55, 0xf9, 0x86, 0x13, 0x02, 0x4e,
2399 0x1b, 0xd1, 0x0d, 0xa9, 0xa6, 0x2b, 0xad, 0x01, 0xa9,
2400 0x97, 0xf9, 0x73, 0x10, 0x1e, 0x85, 0x5e, 0xe1, 0xc7,
2401 0xe6, 0x0e, 0x6b, 0x6a, 0xa1, 0xdf, 0x9d, 0x80, 0xfa,
2402 0x56, 0x7d, 0x0c, 0xcc, 0xa0, 0xf9, 0x56, 0x68, 0x0b,
2403 0xe7, 0x6e, 0xd3, 0x7c, 0x71, 0xfd, 0xed, 0xef, 0x56,
2404 0x0e, 0x25, 0x23, 0xe8, 0xc5, 0xfd, 0xb9, 0x51, 0x62,
2405 0x50, 0x01, 0x73, 0x04, 0xf8, 0xff, 0x41, 0x6b, 0x9b,
2406 0x8e, 0x5d, 0x17, 0xc1, 0xf0, 0x62, 0xde, 0xd4, 0x61,
2407 0x6e, 0xa9, 0xd4, 0x62, 0xed, 0x6c, 0xa0, 0xdf, 0xdd,
2408 0xb9, 0xf5, 0x29, 0x5b, 0x7a, 0x12, 0x7c, 0x08, 0x25,
2409 0xff, 0xab, 0x56, 0xea, 0x49, 0x83, 0xc0, 0x1e, 0xec,
2410 0x86, 0x7f, 0x93, 0xe2, 0x4a, 0x18, 0xbe, 0x48, 0xce,
2411 0xb5, 0x40, 0x98, 0x6c, 0x53, 0x01, 0x04, 0xfd, 0x46,
2412 0x63, 0x18, 0xeb, 0x81, 0x2e, 0xb4, 0x2f, 0xd0, 0x43,
2413 0x55, 0x61, 0x5f, 0x92, 0x50, 0x3e, 0x53, 0x79, 0x97,
2414 0x42, 0xcd, 0xc7, 0x18, 0x30, 0xea, 0xa4, 0x4a, 0xee,
2415 0xc9, 0x14, 0xb6, 0xff, 0x1c, 0xbb, 0x4f, 0x6f, 0x81,
2416 0xab, 0x59, 0x50, 0x78, 0x33, 0x1d, 0x64, 0x5c, 0x8d,
2417 0x08, 0x3b, 0x46, 0x97, 0x31, 0x17, 0x4a, 0x70, 0x6b,
2418 0x16, 0x66, 0xe5, 0xe4, 0x50, 0xcb, 0x62, 0x67, 0x10,
2419 0x67, 0x03, 0x2a, 0x56, 0x6f, 0x59, 0x7b, 0x98, 0x66,
2420 0xb7, 0x15, 0x14, 0xa4, 0x09, 0xe3, 0x8f, 0xca, 0xbe,
2421 0x84, 0x49, 0x64, 0x58, 0x1b, 0x3a, 0xb5, 0x15, 0x26,
2422 0x96, 0xb7, 0x6e, 0x49, 0xac, 0xe6, 0x65, 0x81, 0xd2,
2423 0x1f, 0x51, 0x2e, 0x28, 0xe0, 0x77, 0xc4, 0x49, 0x48,
2424 0xa6, 0x52, 0x60 ),
2425 CIPHERTEXT ( 0x63, 0x23, 0xdd, 0xbf, 0x9e, 0xb0, 0x46, 0x37, 0x14,
2426 0xd5, 0x85, 0x7d, 0x18, 0x41, 0xa9, 0xf6, 0x55, 0x29,
2427 0x51, 0x6c, 0x2f, 0x41, 0x29, 0x56, 0xbc, 0x83, 0x5f,
2428 0x4f, 0x25, 0x2d, 0x22, 0xa2, 0xce, 0x74, 0x3f, 0x21,
2429 0x76, 0x7f, 0xcb, 0x28, 0x85, 0x98, 0x82, 0xb5, 0x70,
2430 0xca, 0x05, 0x39, 0x70, 0xb7, 0x2e, 0x86, 0xf4, 0x51,
2431 0xff, 0x0c, 0x77, 0xe8, 0x7f, 0x3a, 0x03, 0xc0, 0x53,
2432 0x6b, 0x38, 0x59, 0x39, 0x4f, 0xce, 0x32, 0x44, 0x42,
2433 0xac, 0x19, 0x78, 0x74, 0xf8, 0x1a, 0x2c, 0xe6, 0x49,
2434 0xb9, 0x9f, 0xeb, 0x44, 0x2e, 0x23, 0x12, 0x3f, 0x7a,
2435 0xb3, 0x61, 0xd2, 0xce, 0x67, 0x68, 0xa1, 0xba, 0xdb,
2436 0x30, 0xc5, 0x09, 0xe7, 0x9b, 0xee, 0x92, 0x77, 0xd3,
2437 0x78, 0xfa, 0xda, 0xa6, 0x4e, 0x77, 0xe2, 0x6f, 0x72,
2438 0x6d, 0xf8, 0x61, 0x10, 0x52, 0x65, 0x30, 0xcd, 0x43,
2439 0x94, 0x29, 0xb0, 0x17, 0xae, 0x2b, 0xce, 0xc8, 0xcc,
2440 0x24, 0xf9, 0x94, 0xf5, 0x88, 0x5a, 0x8a, 0x76, 0xfa,
2441 0xb6, 0x33, 0x9c, 0x70, 0x54, 0xdf, 0x76, 0xaa, 0x6f,
2442 0x45, 0x01, 0x93, 0xa6, 0x35, 0xd2, 0x1d, 0x22, 0xf7,
2443 0x1f, 0x1a, 0xe6, 0x85, 0x60, 0x36, 0xe6, 0xca, 0xae,
2444 0xed, 0x88, 0x40, 0xbb, 0xfb, 0xc8, 0x23, 0x6c, 0x25,
2445 0xa3, 0x1e, 0x77, 0x5c, 0xba, 0x5f, 0x6e, 0x18, 0x9f,
2446 0xcb, 0xc3, 0xe9, 0x69, 0x70, 0xca, 0x53, 0x78, 0xfd,
2447 0x5c, 0x29, 0xa7, 0x12, 0xf5, 0xdc, 0x17, 0x64, 0x1a,
2448 0xd8, 0x8a, 0xb5, 0x66, 0xd8, 0xc7, 0x8f, 0xff, 0x1b,
2449 0xb5, 0x7f, 0x9b, 0x2f, 0x7c, 0x9d, 0xb8, 0x38, 0xb4,
2450 0x30, 0x7c, 0x63, 0xe0, 0x4a, 0x73, 0xd3, 0xef, 0x81,
2451 0x21, 0xf4, 0x89, 0x32, 0xec, 0x31, 0x8d, 0xff, 0xae,
2452 0xad, 0x58, 0xa8, 0x3a, 0x7f, 0x79, 0xbc, 0x44, 0xa1,
2453 0x58, 0x79, 0x90 ),
2454 AUTH ( 0x0c, 0x92, 0xbb, 0x52, 0x91, 0xe9, 0x81, 0xbf, 0x56, 0x22,
2455 0x93, 0x87, 0x7f, 0x4d, 0xdb, 0x5f ) );
2456
2457/* AES-GCM test case 111 */
2458CIPHER_TEST ( wycheproof_aes_gcm_123ab900, &aes_gcm_algorithm,
2459 KEY ( 0xdc, 0x4d, 0xbf, 0x81, 0x1f, 0x95, 0x09, 0xe3, 0x3a, 0x45,
2460 0xa8, 0xa0, 0x74, 0x3e, 0x93, 0x91, 0xde, 0x33, 0x3f, 0x69,
2461 0xc5, 0x6e, 0xe4, 0xf0, 0xfe, 0x90, 0xce, 0x21, 0xc2, 0x38,
2462 0xee, 0x59 ),
2463 IV ( 0x18, 0x59, 0xd3, 0xba, 0x47, 0x10, 0xcd, 0xd3, 0x00, 0xba,
2464 0xa0, 0x29 ),
2465 ADDITIONAL(),
2466 PLAINTEXT ( 0xdf, 0x91, 0xc4, 0x85, 0x91, 0xf4, 0xca, 0xe8, 0xc4,
2467 0xd6, 0x59, 0xd0, 0x24, 0xdf, 0xd0, 0xa3, 0x53, 0x59,
2468 0x81, 0x48, 0x77, 0x64, 0xbf, 0x19, 0xb0, 0x12, 0x71,
2469 0x3e, 0x6a, 0xc6, 0xd5, 0x78, 0xaa, 0x0b, 0x3a, 0x51,
2470 0xd7, 0xac, 0x97, 0xcd, 0x50, 0x3f, 0xdc, 0x86, 0x82,
2471 0xca, 0xbd, 0xb6, 0xa5, 0x25, 0x6e, 0x98, 0x90, 0x45,
2472 0x83, 0x56, 0xf3, 0x9b, 0x97, 0x49, 0xf6, 0xab, 0x15,
2473 0x81, 0x12, 0xfb, 0xe4, 0xf9, 0x1a, 0xcd, 0x33, 0x34,
2474 0x77, 0x99, 0x8b, 0x9f, 0x0d, 0x7c, 0xc0, 0xbe, 0x2d,
2475 0x40, 0xac, 0xfa, 0x51, 0x03, 0xad, 0xc1, 0xb0, 0xd0,
2476 0xa5, 0xcc, 0x94, 0x73, 0x3d, 0x70, 0x3e, 0x0d, 0x8c,
2477 0x26, 0xe0, 0x9e, 0x9d, 0x07, 0x9f, 0xa6, 0xa6, 0x5c,
2478 0xf3, 0x52, 0x40, 0xa1, 0x62, 0x80, 0x82, 0x6a, 0xb7,
2479 0xc0, 0xd8, 0xac, 0x58, 0x82, 0xc8, 0x9e, 0x58, 0x44,
2480 0x42, 0x33, 0xc2, 0xf6, 0x0a, 0xaa, 0xe0, 0xcb, 0xd1,
2481 0xa7, 0xed, 0x85, 0x00, 0x65, 0x24, 0x2a, 0x93, 0x78,
2482 0xc3, 0x40, 0x23, 0x2f, 0xd8, 0x6f, 0x1f, 0xd5, 0x2a,
2483 0x92, 0xc9, 0x60, 0xa9, 0xa8, 0x6f, 0x52, 0x9f, 0x43,
2484 0x1a, 0xcf, 0x3a, 0xa9, 0x41, 0x33, 0x78, 0x58, 0x03,
2485 0xf4, 0xac, 0x1a, 0x22, 0x37, 0x83, 0x32, 0xda, 0xa2,
2486 0x2d, 0xea, 0x3d, 0x34, 0xd2, 0xfd, 0xb7, 0xc3, 0x08,
2487 0xfa, 0x44, 0xab, 0x93, 0xb3, 0xfb, 0x02, 0xf4, 0x28,
2488 0xbe, 0x22, 0xfa, 0xd6, 0xc0, 0xb1, 0x0c, 0x13, 0x8a,
2489 0xf9, 0x7b, 0x92, 0xa1, 0x99, 0x29, 0x6d, 0xd9, 0x47,
2490 0xc9, 0x3f, 0xbc, 0x40, 0x67, 0x4c, 0x34, 0xc5, 0x62,
2491 0x3d, 0x26, 0xd9, 0xc9, 0x0d, 0xc6, 0xb3, 0x35, 0x70,
2492 0x18, 0xb9, 0xf9, 0x25, 0x0f, 0xb4, 0xdd, 0x5c, 0x11,
2493 0x51, 0x81, 0x91, 0xa2, 0x36, 0x74, 0x5a, 0x2b, 0xd4,
2494 0x2f, 0x86, 0x37, 0x66 ),
2495 CIPHERTEXT ( 0x9c, 0x51, 0x1d, 0x08, 0xf2, 0x44, 0xcb, 0x69, 0x71,
2496 0xa3, 0x9b, 0x70, 0x63, 0x9c, 0x4a, 0x53, 0xae, 0x48,
2497 0x25, 0x4f, 0xcb, 0x3d, 0x2e, 0xea, 0x47, 0x96, 0xec,
2498 0xc9, 0x96, 0xf1, 0xfe, 0x26, 0xa8, 0xe3, 0x09, 0x32,
2499 0x25, 0x8a, 0x48, 0xfe, 0x42, 0x37, 0xe5, 0xbf, 0xb0,
2500 0xe1, 0x32, 0x0d, 0xc5, 0x91, 0x25, 0x6d, 0xc8, 0x3c,
2501 0xd5, 0x6d, 0xbf, 0x5d, 0x9b, 0x37, 0x7b, 0x78, 0x05,
2502 0xb7, 0xfa, 0xc0, 0x49, 0x7b, 0x2f, 0x99, 0xe3, 0x31,
2503 0x0e, 0x9e, 0x2c, 0xc8, 0x00, 0x91, 0x41, 0xa8, 0x2f,
2504 0x26, 0xf8, 0xa0, 0x22, 0x99, 0xd6, 0x41, 0x38, 0xbb,
2505 0x1f, 0xe8, 0xa1, 0x24, 0x3d, 0xf3, 0xe9, 0xfb, 0x37,
2506 0xb5, 0x2b, 0xd3, 0xc2, 0xcc, 0x19, 0xf5, 0x43, 0xb3,
2507 0xf4, 0x92, 0x8e, 0x5a, 0x73, 0x73, 0x0a, 0x7a, 0x6e,
2508 0x6d, 0x75, 0x91, 0x9d, 0x11, 0x7d, 0x3d, 0xfe, 0x10,
2509 0xe8, 0x63, 0xa9, 0x84, 0x6b, 0x2c, 0xa2, 0x60, 0xde,
2510 0x5d, 0xdd, 0xba, 0x7c, 0xea, 0xc3, 0x70, 0x19, 0xe6,
2511 0x15, 0xb8, 0x9a, 0x2a, 0xb9, 0x4d, 0xf8, 0xd1, 0xa7,
2512 0x90, 0x74, 0x99, 0x98, 0xcb, 0x85, 0x31, 0xfe, 0xf1,
2513 0xef, 0x5f, 0x8a, 0x28, 0xa8, 0xad, 0x60, 0xe8, 0x13,
2514 0xf7, 0xe7, 0x84, 0x12, 0xca, 0x4d, 0x95, 0xb9, 0x60,
2515 0x4a, 0x24, 0xa1, 0x6e, 0x4a, 0x3c, 0xa8, 0xee, 0x33,
2516 0xbf, 0xbb, 0x78, 0x09, 0x04, 0x80, 0x14, 0x94, 0x3e,
2517 0x5f, 0xd7, 0x96, 0x6a, 0x7d, 0xb2, 0x14, 0xe0, 0x52,
2518 0xd1, 0xcc, 0x54, 0x6a, 0x6d, 0xa7, 0x2e, 0xc8, 0x9d,
2519 0x1c, 0x33, 0x98, 0xae, 0xfd, 0xcb, 0x88, 0x1d, 0xfc,
2520 0x3d, 0x80, 0x0b, 0x73, 0x23, 0xab, 0xcd, 0x75, 0x83,
2521 0xe9, 0xc8, 0xa3, 0x1f, 0x03, 0xb6, 0x99, 0x5d, 0x4a,
2522 0xea, 0xc1, 0x7c, 0x5a, 0x56, 0xd8, 0xaf, 0x49, 0x2a,
2523 0x2b, 0x10, 0x8f, 0xe3 ),
2524 AUTH ( 0x17, 0x09, 0x0c, 0xe5, 0x0e, 0x35, 0x24, 0x4a, 0x59, 0xba,
2525 0xfc, 0x80, 0xeb, 0xa5, 0xda, 0xe5 ) );
2526
2527/* AES-GCM test case 112 */
2528CIPHER_TEST ( wycheproof_aes_gcm_ea998729, &aes_gcm_algorithm,
2529 KEY ( 0x31, 0x7b, 0xa3, 0x31, 0x30, 0x7f, 0x3a, 0x3d, 0x3d, 0x82,
2530 0xee, 0x1f, 0xda, 0xb7, 0x0f, 0x62, 0xa1, 0x55, 0xaf, 0x14,
2531 0xda, 0xf6, 0x31, 0x30, 0x7a, 0x61, 0xb1, 0x87, 0xd4, 0x13,
2532 0xe5, 0x33 ),
2533 IV ( 0xa6, 0x68, 0x7c, 0xf5, 0x08, 0x35, 0x6b, 0x17, 0x46, 0x25,
2534 0xde, 0xaa ),
2535 ADDITIONAL(),
2536 PLAINTEXT ( 0x32, 0xc1, 0xd0, 0x91, 0x07, 0xc5, 0x99, 0xd3, 0xcc,
2537 0xe4, 0xe7, 0x82, 0x17, 0x9c, 0x96, 0x6c, 0x6e, 0xf9,
2538 0x63, 0x68, 0x9d, 0x45, 0x35, 0x1d, 0xbe, 0x0f, 0x6f,
2539 0x88, 0x1d, 0xb2, 0x73, 0xe5, 0x4d, 0xb7, 0x6f, 0xc4,
2540 0x8f, 0xdc, 0x5d, 0x30, 0xf0, 0x89, 0xda, 0x83, 0x83,
2541 0x01, 0xa5, 0xf9, 0x24, 0xbb, 0xa3, 0xc0, 0x44, 0xe1,
2542 0x9b, 0x3e, 0xd5, 0xaa, 0x6b, 0xe8, 0x71, 0x18, 0x55,
2543 0x40, 0x04, 0xca, 0x30, 0xe0, 0x32, 0x43, 0x37, 0xd9,
2544 0x87, 0x83, 0x94, 0x12, 0xbf, 0x8f, 0x8b, 0xbd, 0xd5,
2545 0x37, 0x20, 0x5d, 0x4b, 0x0e, 0x21, 0x20, 0xe9, 0x65,
2546 0x37, 0x32, 0x35, 0xd6, 0xcb, 0xd2, 0xfb, 0x37, 0x76,
2547 0xba, 0x0a, 0x38, 0x4e, 0xc1, 0xd9, 0xb7, 0xc6, 0x31,
2548 0xa0, 0x37, 0x9f, 0xf9, 0x97, 0xc3, 0xf9, 0x74, 0xa6,
2549 0xf7, 0xbb, 0xf4, 0xfd, 0x23, 0x01, 0x62, 0x11, 0xf5,
2550 0xfc, 0x10, 0xac, 0xad, 0xb5, 0xe4, 0x00, 0xd2, 0xff,
2551 0x0f, 0xdf, 0xd1, 0x93, 0xf5, 0xc6, 0xfc, 0x6d, 0x4f,
2552 0x72, 0x71, 0xdf, 0xd1, 0x34, 0x9e, 0xd8, 0x0f, 0xbe,
2553 0xda, 0xeb, 0xb1, 0x55, 0xb9, 0xb0, 0x2f, 0xb3, 0x07,
2554 0x44, 0x95, 0xd5, 0x5f, 0x9a, 0x24, 0x55, 0xf5, 0x9b,
2555 0xf6, 0xf1, 0x13, 0x19, 0x1a, 0x02, 0x9c, 0x6b, 0x0b,
2556 0xa7, 0x5d, 0x97, 0xcd, 0xc0, 0xc8, 0x4f, 0x13, 0x18,
2557 0x36, 0x33, 0x7f, 0x29, 0xf9, 0xd9, 0x6c, 0xa4, 0x48,
2558 0xee, 0xc0, 0xcc, 0x46, 0xd1, 0xca, 0x8b, 0x37, 0x35,
2559 0x66, 0x19, 0x79, 0xd8, 0x33, 0x02, 0xfe, 0xc0, 0x8f,
2560 0xff, 0xcf, 0x5e, 0x58, 0xf1, 0x2b, 0x1e, 0x70, 0x50,
2561 0x65, 0x7b, 0x1b, 0x97, 0xc6, 0x4a, 0x4e, 0x07, 0xe3,
2562 0x17, 0xf5, 0x54, 0xf8, 0x31, 0x0b, 0x6c, 0xcb, 0x49,
2563 0xf3, 0x6d, 0x48, 0xc5, 0x78, 0x16, 0xd2, 0x49, 0x52,
2564 0xaa, 0xda, 0x71, 0x1d, 0x4f ),
2565 CIPHERTEXT ( 0xd7, 0xee, 0xbc, 0x95, 0x87, 0xaa, 0x21, 0x13, 0x6f,
2566 0xa3, 0x8b, 0x41, 0xcf, 0x0e, 0x2d, 0xb0, 0x3a, 0x7e,
2567 0xa2, 0xba, 0x9e, 0xad, 0xdf, 0x83, 0xd3, 0x3f, 0x78,
2568 0x10, 0x93, 0x61, 0x7b, 0xf5, 0x0f, 0x49, 0xb2, 0xbf,
2569 0xe2, 0xf7, 0x17, 0x3b, 0x11, 0x39, 0x12, 0xe2, 0xe1,
2570 0x77, 0x5f, 0x40, 0xed, 0xfe, 0xd8, 0xb3, 0xb0, 0x09,
2571 0x9b, 0x9e, 0x1c, 0x22, 0x0d, 0xd1, 0x03, 0xbe, 0x61,
2572 0x66, 0x21, 0x0b, 0x01, 0x02, 0x9f, 0xeb, 0x24, 0xed,
2573 0x9e, 0x20, 0x61, 0x4e, 0xdd, 0xc3, 0xce, 0xbe, 0x41,
2574 0xb0, 0x07, 0x9a, 0x9a, 0x8c, 0x11, 0x7b, 0x59, 0x6c,
2575 0x90, 0x28, 0x8e, 0xff, 0xd3, 0x79, 0x6f, 0xbd, 0x0c,
2576 0x7e, 0x8e, 0xab, 0x00, 0x60, 0x9a, 0x64, 0xbe, 0x3a,
2577 0xd9, 0x59, 0x7c, 0xdb, 0xf3, 0xa8, 0x18, 0xc2, 0x60,
2578 0xcd, 0x93, 0x8b, 0xdf, 0x23, 0x2e, 0x40, 0x59, 0xae,
2579 0x35, 0xa2, 0x57, 0x1a, 0x83, 0x88, 0x87, 0xfc, 0x19,
2580 0x69, 0x12, 0x17, 0x94, 0x86, 0xe0, 0x46, 0xa6, 0x22,
2581 0x27, 0xa4, 0xca, 0xdd, 0xce, 0x38, 0xcb, 0xbc, 0x37,
2582 0x58, 0x7b, 0xb9, 0x43, 0x9e, 0xc6, 0x37, 0x60, 0x2b,
2583 0x68, 0x18, 0xc5, 0xcb, 0xe3, 0xc7, 0x1a, 0x7c, 0x41,
2584 0x43, 0x96, 0x05, 0x33, 0xdc, 0x74, 0x17, 0x4b, 0xd3,
2585 0x15, 0xc8, 0xdb, 0x22, 0x7b, 0x69, 0xb5, 0x5b, 0xb7,
2586 0xfc, 0x30, 0xba, 0x1d, 0x52, 0x13, 0xa7, 0x52, 0xec,
2587 0x33, 0x92, 0x50, 0x43, 0xce, 0xfb, 0xc1, 0xa6, 0x29,
2588 0x43, 0xee, 0x5f, 0x34, 0xd5, 0xda, 0x01, 0x79, 0x9e,
2589 0x69, 0x09, 0x4d, 0x73, 0x2a, 0xef, 0x52, 0xf8, 0xe0,
2590 0x36, 0x98, 0x0d, 0x00, 0x70, 0xe2, 0x2e, 0x17, 0x3c,
2591 0x67, 0xc4, 0xbb, 0xcc, 0xa6, 0x1c, 0xc1, 0xee, 0xdb,
2592 0xd6, 0x01, 0x65, 0x16, 0xc5, 0x92, 0x14, 0x48, 0x19,
2593 0xdf, 0x13, 0x20, 0x4d, 0xee ),
2594 AUTH ( 0xbf, 0x05, 0x40, 0xd3, 0x4b, 0x20, 0xf7, 0x61, 0x10, 0x1b,
2595 0xc6, 0x08, 0xb0, 0x24, 0x58, 0xf2 ) );
2596
2597/* AES-GCM test case 113 */
2598CIPHER_TEST ( wycheproof_aes_gcm_cdad6d3a, &aes_gcm_algorithm,
2599 KEY ( 0x4f, 0x62, 0xe5, 0x6f, 0x7b, 0x15, 0x03, 0x5f, 0x42, 0x78,
2600 0x49, 0x71, 0x4b, 0xeb, 0x97, 0xe6, 0xac, 0xf8, 0x83, 0x71,
2601 0xe1, 0xf6, 0x9b, 0x38, 0x81, 0x29, 0xbb, 0x44, 0x72, 0x73,
2602 0xd6, 0xb8 ),
2603 IV ( 0x13, 0x7d, 0x5c, 0x98, 0xa9, 0x2f, 0x6d, 0xce, 0xe4, 0xf2,
2604 0x9d, 0x7c ),
2605 ADDITIONAL(),
2606 PLAINTEXT ( 0xa1, 0x47, 0xb7, 0x16, 0xb8, 0x6a, 0xc8, 0xda, 0xc7,
2607 0x44, 0x7d, 0x5b, 0xa6, 0x0e, 0xe8, 0xa4, 0x19, 0x1d,
2608 0x2c, 0x64, 0xa3, 0xaa, 0x04, 0x27, 0x6a, 0xee, 0x7b,
2609 0xf7, 0xdc, 0x82, 0x49, 0x62, 0xc0, 0x9a, 0xce, 0x20,
2610 0xa7, 0xe6, 0x14, 0xcc, 0x9e, 0x17, 0x7b, 0x5b, 0x11,
2611 0x81, 0x9b, 0x8f, 0x17, 0x00, 0x8a, 0x94, 0x08, 0xe8,
2612 0xcd, 0x8b, 0xb3, 0x4b, 0x40, 0x1b, 0xe3, 0x53, 0x68,
2613 0xf4, 0x92, 0xc1, 0x76, 0x29, 0xb6, 0x46, 0x72, 0x99,
2614 0xbf, 0xd2, 0xec, 0x4d, 0x9a, 0x7f, 0x17, 0xde, 0xa6,
2615 0xf9, 0xca, 0x08, 0x4e, 0x87, 0x1f, 0xb7, 0xfc, 0x78,
2616 0xc2, 0xbf, 0x29, 0x9b, 0x81, 0x05, 0x22, 0x06, 0x27,
2617 0x26, 0xc5, 0xca, 0xe1, 0x4b, 0x83, 0x97, 0x22, 0xec,
2618 0xff, 0x49, 0x9a, 0x2b, 0x3f, 0x08, 0x2b, 0x6d, 0x1b,
2619 0xfe, 0xdb, 0x75, 0x2f, 0x84, 0xa4, 0xe7, 0x74, 0x59,
2620 0xc9, 0x26, 0x8d, 0x63, 0x19, 0x93, 0x15, 0x36, 0x3e,
2621 0x9a, 0xaa, 0x39, 0xbe, 0xa7, 0xfb, 0xbc, 0xc6, 0x0a,
2622 0x5e, 0xed, 0xc8, 0xa1, 0xa9, 0x82, 0xad, 0x6f, 0xa6,
2623 0x7c, 0x29, 0x5b, 0x93, 0x2e, 0xb3, 0x99, 0x90, 0x47,
2624 0xe0, 0xa9, 0x9b, 0x38, 0x23, 0x03, 0x2b, 0x6b, 0x3b,
2625 0x7c, 0x4c, 0x55, 0x39, 0x70, 0xaf, 0xca, 0x50, 0xcb,
2626 0x4e, 0x5c, 0xe8, 0x59, 0xc2, 0x5c, 0x59, 0x8e, 0xb6,
2627 0x82, 0x00, 0x5f, 0x17, 0xae, 0xc5, 0x52, 0x6e, 0x26,
2628 0x49, 0x32, 0x08, 0x48, 0x36, 0x79, 0xa2, 0x3c, 0xce,
2629 0xf6, 0xf7, 0x40, 0x3a, 0x3f, 0x30, 0x55, 0xaf, 0xfd,
2630 0x53, 0x1a, 0x1c, 0xb7, 0xd1, 0x83, 0x89, 0x2d, 0xd5,
2631 0x77, 0xd5, 0x26, 0xe8, 0xda, 0x8a, 0xa8, 0xb8, 0xb9,
2632 0x80, 0xa3, 0x6e, 0x17, 0x6b, 0x8d, 0x92, 0x93, 0xe7,
2633 0x85, 0xac, 0x01, 0xbd, 0xd4, 0xda, 0xc8, 0xcf, 0x8d,
2634 0xbd, 0xd8, 0x29, 0x26, 0xf1, 0xe3, 0x14, 0x08, 0x28,
2635 0x4f, 0xb3, 0xaa, 0x01, 0xf4, 0x41, 0x4a, 0xc7, 0xaa,
2636 0x78, 0x32, 0xd2, 0xec, 0x02, 0xdd, 0x2d, 0xb9, 0xb6,
2637 0xb4, 0xb6, 0x1d, 0x8c, 0x1c, 0xbb, 0x31, 0xda, 0xc7,
2638 0xb6, 0xaf, 0xa8, 0xd0, 0x8b, 0x68, 0x77, 0xe4, 0x39,
2639 0x60, 0x0c, 0x4a, 0x6f, 0xc0, 0x75, 0x11, 0x87, 0x7d,
2640 0xf2, 0xe9, 0xce, 0x3a, 0x95, 0x38, 0xa7, 0x26, 0x00,
2641 0x2a, 0x46, 0xc0, 0x83, 0xd9, 0x81, 0x24, 0xb1, 0x85,
2642 0x73, 0x0f, 0x3b, 0x2a, 0xea, 0x2a, 0x01, 0xcb, 0x62,
2643 0x6b, 0xe8, 0x09, 0xf8, 0x7b, 0x2a, 0xc1, 0x00, 0x51,
2644 0x1c, 0x5b, 0x8f, 0xa0, 0xe9, 0xd4, 0x0c, 0x9c, 0x99,
2645 0x9e, 0xa0, 0xaa, 0x87, 0xaa, 0xd0, 0x8c, 0xfb, 0x62,
2646 0xc1, 0xba, 0x86, 0x91, 0x78, 0xbe, 0x98, 0x61, 0x56,
2647 0xf7, 0x62, 0x2d, 0x8c, 0x48, 0xad, 0x80, 0xa5, 0x52,
2648 0xe9, 0xd0, 0x8c, 0x36, 0x67, 0x1a, 0xe2, 0x32, 0xef,
2649 0xef, 0xc8, 0x61, 0x9c, 0x56, 0x2e, 0x71, 0x5f, 0x04,
2650 0xae, 0x52, 0xdb, 0x2a, 0xd8, 0xe4, 0xa0, 0x9e, 0x8c,
2651 0x67, 0x1b, 0x12, 0x28, 0x95, 0x58, 0x11, 0x7f, 0x95,
2652 0x62, 0xd5, 0x1b, 0xeb, 0x59, 0xe2, 0x9b, 0x10, 0xdd,
2653 0x9e, 0xb2, 0x32, 0xe8, 0xfc, 0xdb, 0x1c, 0xfd, 0xd1,
2654 0x48, 0x99, 0xac, 0xd6, 0x93, 0xde, 0x14, 0xa7, 0xc0,
2655 0x76, 0xa4, 0x65, 0x63, 0x86, 0xe2, 0x3b, 0x06, 0x41,
2656 0x5b, 0x2c, 0x7a, 0x93, 0xb1, 0x66, 0xca, 0xd1, 0x04,
2657 0x8b, 0xc6, 0x05, 0xa4, 0x9a, 0x79, 0xdf, 0x3c, 0x03,
2658 0xa3, 0x38, 0x0d, 0xe6, 0x8a, 0x4f, 0x01, 0x3e, 0x05,
2659 0xe5, 0x28, 0x37, 0x45, 0xd4, 0x07, 0x8e, 0xbe, 0x30,
2660 0x8d, 0xc8, 0x88, 0x1c, 0xed, 0x62, 0xed, 0x57, 0x1a,
2661 0x93, 0xc6, 0x9e, 0x8a, 0xae, 0x6e, 0x51, 0xf5, 0xe6,
2662 0x1e, 0x4f, 0xf7, 0x56, 0x99, 0xaa, 0x32 ),
2663 CIPHERTEXT ( 0xb1, 0x94, 0xe6, 0xc8, 0xf8, 0x3e, 0x09, 0x51, 0x5d,
2664 0x4e, 0xa9, 0x5c, 0x00, 0x57, 0x8f, 0xda, 0xee, 0x8f,
2665 0x9d, 0x35, 0xad, 0x09, 0xa5, 0x60, 0xba, 0x81, 0xa5,
2666 0x1a, 0xcc, 0xc4, 0x94, 0x16, 0x59, 0x85, 0x16, 0xc7,
2667 0x47, 0xe1, 0x6d, 0xbc, 0x5c, 0x44, 0xbf, 0xd5, 0xc7,
2668 0x90, 0xba, 0x59, 0xb4, 0x7a, 0x6f, 0x57, 0x3a, 0x43,
2669 0xb2, 0x6c, 0xdb, 0xb2, 0x40, 0x23, 0x0b, 0x1d, 0xca,
2670 0x00, 0x44, 0x77, 0x70, 0xc4, 0xcf, 0x64, 0x7d, 0xf2,
2671 0xa7, 0x9e, 0xca, 0x3f, 0x4a, 0x8b, 0x2d, 0xe0, 0x8f,
2672 0x9f, 0xbc, 0x44, 0x89, 0xc3, 0x0f, 0x6b, 0xcf, 0xcd,
2673 0x09, 0x6f, 0x1a, 0xa4, 0x17, 0x7f, 0xa2, 0x81, 0x24,
2674 0x8e, 0x8e, 0x19, 0xe2, 0xea, 0x7d, 0x1f, 0x04, 0x9b,
2675 0x70, 0x53, 0x94, 0x7a, 0x3a, 0x67, 0xe9, 0x46, 0xeb,
2676 0xbe, 0xd6, 0x74, 0x66, 0xe0, 0x09, 0xb6, 0x3d, 0xeb,
2677 0xce, 0xba, 0x54, 0xcc, 0x88, 0x1e, 0x55, 0xe2, 0xd6,
2678 0x8f, 0x3f, 0x58, 0x43, 0x80, 0xd6, 0xfb, 0x7b, 0x0e,
2679 0x9a, 0x3f, 0xdb, 0xd7, 0x09, 0xad, 0xac, 0x3a, 0x47,
2680 0xd6, 0xf9, 0xa5, 0xfc, 0xaf, 0x03, 0x21, 0x8e, 0x18,
2681 0xcc, 0xa5, 0xa7, 0xa0, 0xe3, 0x40, 0xa7, 0x74, 0xcd,
2682 0x5c, 0x39, 0xd7, 0x03, 0x1b, 0x63, 0xb5, 0xb5, 0xb8,
2683 0x96, 0xe1, 0xe7, 0x05, 0xb4, 0xde, 0xd0, 0x99, 0xc3,
2684 0xc1, 0x11, 0x50, 0x73, 0x8b, 0x21, 0x07, 0xf6, 0x1f,
2685 0x14, 0x23, 0xfb, 0x72, 0xed, 0x0a, 0x16, 0x07, 0x0c,
2686 0xd6, 0xf8, 0xa1, 0x8a, 0xe9, 0x0b, 0x16, 0x7b, 0x70,
2687 0x7c, 0x23, 0xdd, 0xc8, 0x5a, 0x1b, 0x6f, 0xf5, 0xa3,
2688 0xec, 0x5e, 0x65, 0x4b, 0x14, 0x46, 0xc6, 0xea, 0xe7,
2689 0x87, 0xc3, 0x1a, 0x94, 0xbc, 0x9a, 0xb5, 0x37, 0x6d,
2690 0xfe, 0xa3, 0x1b, 0xf8, 0xdf, 0xbd, 0xab, 0xce, 0x45,
2691 0xc7, 0x50, 0x11, 0x19, 0x46, 0xe6, 0x4c, 0x22, 0xd2,
2692 0x3c, 0x46, 0xd7, 0xef, 0x64, 0x4c, 0xa0, 0x2c, 0x69,
2693 0x20, 0x5d, 0x59, 0xb1, 0x81, 0x5a, 0x6a, 0x6e, 0x8b,
2694 0x14, 0xfe, 0x7e, 0x2d, 0x8a, 0xd1, 0x7f, 0xc7, 0x5e,
2695 0x65, 0x67, 0x06, 0xb6, 0x7f, 0x25, 0x75, 0x23, 0xd5,
2696 0x17, 0xd9, 0xf8, 0xb8, 0x31, 0x50, 0xa8, 0x83, 0x59,
2697 0xe5, 0x6d, 0x64, 0x32, 0x85, 0x9f, 0x8f, 0x90, 0xea,
2698 0xba, 0x70, 0xcf, 0x90, 0xf8, 0x69, 0x95, 0xaf, 0xc8,
2699 0x5c, 0x33, 0x99, 0x25, 0x91, 0x53, 0x6b, 0xa3, 0x53,
2700 0xae, 0x14, 0xa6, 0x93, 0x2d, 0xc9, 0x6a, 0xd7, 0x26,
2701 0x87, 0xac, 0x34, 0xc2, 0xd4, 0xd5, 0xc9, 0x2e, 0x51,
2702 0xda, 0x24, 0x6f, 0x55, 0x77, 0x85, 0xdf, 0x19, 0x44,
2703 0xd2, 0xc3, 0xc8, 0x35, 0x36, 0x73, 0x9b, 0x7d, 0x84,
2704 0x75, 0xba, 0x39, 0xc6, 0x39, 0xdf, 0x4c, 0xe6, 0x98,
2705 0x59, 0xc6, 0xff, 0xb9, 0xe9, 0x94, 0x54, 0x56, 0x99,
2706 0xa3, 0xa1, 0x9d, 0x53, 0x97, 0x9b, 0xfa, 0x34, 0xfd,
2707 0xec, 0x85, 0x6a, 0x9f, 0x12, 0xac, 0x70, 0xbd, 0xea,
2708 0xcf, 0x17, 0x27, 0x21, 0x49, 0x6d, 0x76, 0xd8, 0x07,
2709 0x3a, 0x76, 0xe8, 0x16, 0x0d, 0x99, 0xf4, 0xb7, 0x46,
2710 0x6e, 0x05, 0xa8, 0xf0, 0x06, 0xcb, 0x44, 0x8d, 0x2a,
2711 0xf7, 0xee, 0x30, 0x8c, 0xa1, 0x94, 0x40, 0xaa, 0xca,
2712 0x08, 0xf3, 0x44, 0x22, 0xda, 0x83, 0x0e, 0x47, 0x62,
2713 0x69, 0xc8, 0x29, 0xa2, 0xb5, 0xb6, 0x4a, 0xce, 0xa4,
2714 0xf1, 0x14, 0x3d, 0x18, 0x57, 0xcc, 0x26, 0x99, 0xea,
2715 0x3b, 0xf2, 0xe0, 0x76, 0xb1, 0x6e, 0x50, 0xa9, 0x07,
2716 0x1c, 0xf1, 0x53, 0x52, 0x18, 0x9e, 0xdf, 0x27, 0x89,
2717 0x84, 0x10, 0x2e, 0xbc, 0xc7, 0x51, 0xd4, 0x65, 0x10,
2718 0xb8, 0x16, 0xaf, 0xaf, 0xdb, 0x3f, 0xea, 0x37, 0xa7,
2719 0xd4, 0x96, 0x62, 0xff, 0x09, 0x03, 0x92 ),
2720 AUTH ( 0x79, 0xe6, 0x4c, 0x4c, 0x0e, 0x8b, 0xb3, 0xa2, 0x14, 0x95,
2721 0x55, 0x84, 0xd2, 0xbc, 0x8b, 0x16 ) );
2722
2723/* AES-GCM test case 114 */
2724CIPHER_TEST ( wycheproof_aes_gcm_e77da61d, &aes_gcm_algorithm,
2725 KEY ( 0x6a, 0xad, 0xa8, 0x28, 0xb2, 0x27, 0x3f, 0xfb, 0x81, 0xdc,
2726 0x79, 0x4a, 0x86, 0x29, 0xe3, 0x05, 0xcb, 0x64, 0x6f, 0x9d,
2727 0x26, 0x60, 0x02, 0xbd, 0x31, 0x34, 0x27, 0xd3, 0x84, 0x83,
2728 0x87, 0x67 ),
2729 IV ( 0x00, 0xde, 0xa4, 0x50, 0x5c, 0xd5, 0x39, 0x6f, 0x6b, 0xa4,
2730 0x08, 0xa5 ),
2731 ADDITIONAL(),
2732 PLAINTEXT ( 0x1d, 0x99, 0xee, 0x02, 0x2f, 0x95, 0x76, 0xed, 0x69,
2733 0xaf, 0x8a, 0x7f, 0x39, 0x45, 0x36, 0x2a, 0xb0, 0xc4,
2734 0x69, 0x1a, 0x4d, 0x33, 0x3a, 0x3f, 0x5f, 0x85, 0xcf,
2735 0x8d, 0x7d, 0xb7, 0xfb, 0x8a, 0x06, 0x9b, 0x48, 0x99,
2736 0x8c, 0xf2, 0x86, 0xff, 0xa4, 0x61, 0x5e, 0x87, 0x39,
2737 0x8c, 0x3c, 0x3c, 0x12, 0x95, 0xd5, 0xbe, 0xe2, 0x72,
2738 0xbd, 0xeb, 0x51, 0x66, 0x47, 0x0a, 0x89, 0x23, 0xf7,
2739 0xb7, 0x9d, 0xc9, 0x2b, 0x2a, 0x97, 0xde, 0x34, 0xba,
2740 0x87, 0xdb, 0x29, 0x07, 0xac, 0x84, 0xfb, 0x23, 0xd3,
2741 0x8f, 0x2e, 0x1a, 0xf8, 0x35, 0xf7, 0x37, 0x48, 0x8f,
2742 0xc0, 0x4f, 0xac, 0x70, 0x43, 0x2d, 0x3a, 0x0b, 0x02,
2743 0xa4, 0x72, 0xf8, 0x51, 0x02, 0x58, 0x03, 0xaa, 0xc6,
2744 0x92, 0x27, 0x32, 0x73, 0xe2, 0x7b, 0xe1, 0xdd, 0x96,
2745 0x79, 0xa4, 0xd6, 0x26, 0x99, 0x7c, 0x36, 0x3b, 0xa7,
2746 0x06, 0xa7, 0xdb, 0x1f, 0x4c, 0xdc, 0x07, 0xfe, 0x3c,
2747 0x67, 0xfb, 0xec, 0x0a, 0xa8, 0x61, 0x90, 0x38, 0xe0,
2748 0x56, 0x07, 0xd9, 0x5a, 0x5d, 0xdc, 0x4b, 0x40, 0x3c,
2749 0xd6, 0xda, 0xbc, 0x41, 0x79, 0x0a, 0xdb, 0x6c, 0xd7,
2750 0x6e, 0xae, 0xac, 0x34, 0x91, 0xc3, 0xcd, 0x6a, 0x87,
2751 0x87, 0xe0, 0xf2, 0x9c, 0x04, 0x2b, 0x4e, 0x2a, 0xfe,
2752 0x98, 0x76, 0x74, 0xb9, 0x49, 0x5e, 0xf5, 0x57, 0x68,
2753 0xc6, 0x96, 0xbc, 0x6c, 0x3d, 0xf1, 0xc1, 0xe9, 0xa7,
2754 0xc0, 0x45, 0x6f, 0x47, 0x8a, 0x1a, 0x1c, 0xc4, 0xc3,
2755 0xa9, 0xb0, 0xf2, 0xcd, 0x3b, 0x42, 0xdb, 0x8d, 0x0b,
2756 0x6a, 0xa3, 0x6d, 0xfe, 0xc3, 0xd2, 0xc0, 0x8d, 0x13,
2757 0x98, 0xee, 0xb7, 0x5d, 0xb6, 0x1a, 0xe9, 0x02, 0xd2,
2758 0xda, 0x5a, 0x1e, 0xfa, 0xc7, 0x90, 0x4b, 0x8a, 0xe3,
2759 0x2a, 0xf1, 0xff, 0x94, 0x2c, 0x99, 0x76, 0x95, 0x04,
2760 0xbb, 0x5c, 0x56, 0xf5, 0x81, 0x9e, 0x4f, 0x89, 0x9e,
2761 0x8b, 0xba, 0xcf, 0xd4, 0x68, 0x2d, 0x82, 0xf4, 0x1e,
2762 0x17, 0x9a, 0x9d, 0xdf, 0x9a, 0x08, 0x20, 0xcc, 0x43,
2763 0x16, 0xf2, 0x52, 0xd1, 0xd3, 0x55, 0x97, 0xae, 0xda,
2764 0x43, 0xab, 0x87, 0x08, 0x87, 0xe6, 0x7a, 0xab, 0xe7,
2765 0x9f, 0x04, 0x6b, 0x03, 0xa9, 0xa8, 0x35, 0x88, 0x99,
2766 0x40, 0x58, 0xa0, 0x7b, 0xae, 0xdb, 0xbb, 0xf9, 0xc0,
2767 0x1d, 0x83, 0x37, 0x32, 0xef, 0xac, 0x89, 0xae, 0x81,
2768 0x73, 0xf9, 0x02, 0xe8, 0x31, 0xd5, 0x79, 0xd3, 0x1e,
2769 0x4a, 0x40, 0x9c, 0xef, 0x5e, 0x49, 0x4a, 0x27, 0xbb,
2770 0x63, 0x67, 0xe8, 0x4f, 0xc5, 0x76, 0x42, 0x04, 0x8e,
2771 0x44, 0xd6, 0x87, 0xce, 0x73, 0xdd, 0x9e, 0x71, 0x38,
2772 0x41, 0x82, 0xb2, 0x62, 0xd6, 0x3a, 0x71, 0x56, 0x98,
2773 0x13, 0x2f, 0x21, 0x8f, 0xc2, 0xc3, 0x61, 0x1e, 0xd0,
2774 0xdb, 0xf8, 0x14, 0x79, 0x98, 0x66, 0xc8, 0xc4, 0x3b,
2775 0x4a, 0xa7, 0xc1, 0x3b, 0x5a, 0x53, 0xf9, 0xa3, 0x37,
2776 0x62, 0x7d, 0x76, 0xbb, 0x96, 0x0f, 0x60, 0xfa, 0x89,
2777 0x1f, 0x00, 0x76, 0xa5, 0x38, 0xc3, 0x96, 0x50, 0x0c,
2778 0xef, 0xd2, 0xdd, 0x1e, 0x4e, 0x02, 0x4f, 0x9d, 0x83,
2779 0x27, 0x5f, 0x9b, 0x2c, 0x0c, 0xe6, 0xdf, 0x41, 0xbb,
2780 0x64, 0x88, 0x39, 0x8f, 0xc6, 0x57, 0xdb, 0xa0, 0xef,
2781 0xda, 0xe0, 0x01, 0x9d, 0xd3, 0x1b, 0x03, 0x22, 0x7e,
2782 0xdc, 0x52, 0x29, 0xaf, 0xf6, 0x0c, 0xd0, 0x83, 0xc0,
2783 0xf0, 0xb6, 0x66, 0x75, 0xba, 0xaf, 0x91, 0xc3, 0x20,
2784 0x68, 0x19, 0xa0, 0xc9, 0x85, 0xbc, 0x32, 0x83, 0x60,
2785 0x0e, 0x9e, 0x6d, 0x62, 0xc6, 0xfa, 0xb2, 0xc6, 0xae,
2786 0xfd, 0x69, 0x82, 0x9c, 0x75, 0x06, 0x3c, 0x54, 0xad,
2787 0x11, 0x26, 0x9a, 0xc5, 0xec, 0x56, 0x3e, 0xcd, 0x87,
2788 0x0c, 0x2a, 0xf4, 0xcd, 0xe6, 0xce, 0xc4, 0x3e ),
2789 CIPHERTEXT ( 0x75, 0x75, 0x0a, 0x14, 0x38, 0x87, 0xad, 0x76, 0x3c,
2790 0x13, 0x0a, 0x63, 0x7e, 0x5d, 0x75, 0xfc, 0x7b, 0x53,
2791 0x99, 0x9e, 0x8a, 0x08, 0x5a, 0x74, 0xa5, 0xc7, 0xe4,
2792 0xe2, 0x65, 0x8d, 0x03, 0x58, 0x6f, 0x36, 0xdd, 0x67,
2793 0xbd, 0xd0, 0x62, 0x29, 0x92, 0xfc, 0x44, 0x08, 0x22,
2794 0xe6, 0x35, 0x34, 0x39, 0x1a, 0x43, 0x5c, 0x93, 0x4f,
2795 0xa7, 0xfa, 0x19, 0xf5, 0x19, 0x66, 0x95, 0x51, 0x3a,
2796 0xc8, 0x12, 0xe7, 0x78, 0x92, 0x8a, 0x67, 0x7a, 0xf3,
2797 0x7a, 0x8b, 0xc3, 0x6a, 0x19, 0xb7, 0xe3, 0xab, 0x05,
2798 0xe1, 0x85, 0x42, 0x9a, 0xa5, 0xe5, 0xe1, 0x7c, 0xac,
2799 0xdd, 0x89, 0x71, 0xe3, 0xc5, 0x51, 0xdb, 0x83, 0xc5,
2800 0x85, 0x32, 0x42, 0x77, 0x84, 0x3c, 0x17, 0x83, 0x77,
2801 0x13, 0x79, 0x28, 0x0d, 0x13, 0x93, 0xee, 0xb2, 0x6e,
2802 0x9e, 0x7f, 0xf7, 0x00, 0x6d, 0x43, 0x7b, 0x7c, 0xb0,
2803 0xfe, 0x37, 0x3b, 0x2d, 0xc3, 0x23, 0x8d, 0x87, 0xba,
2804 0xdf, 0x9e, 0xdd, 0x76, 0x7a, 0xd7, 0xb4, 0x72, 0x6a,
2805 0x77, 0x7b, 0x99, 0xcd, 0x1d, 0x11, 0xf1, 0xbc, 0x16,
2806 0x09, 0x8b, 0x12, 0x30, 0xa1, 0x94, 0xbd, 0x94, 0x35,
2807 0xca, 0xa0, 0x73, 0x02, 0x76, 0xeb, 0xc0, 0xc4, 0x4a,
2808 0x92, 0x3e, 0x3a, 0x14, 0x75, 0x1e, 0x12, 0x5a, 0xa7,
2809 0x10, 0x0c, 0xbd, 0x68, 0x22, 0x02, 0xf9, 0xa7, 0x1b,
2810 0xf0, 0x8e, 0x28, 0xae, 0x36, 0xf5, 0x5c, 0x6f, 0xce,
2811 0x99, 0x8a, 0x4c, 0x47, 0x4d, 0xd5, 0xa5, 0xd5, 0x5d,
2812 0x25, 0xae, 0xf3, 0x32, 0xc3, 0xb4, 0x64, 0x0e, 0x20,
2813 0xb2, 0x22, 0xb7, 0x30, 0x5d, 0xfc, 0x21, 0xf6, 0x0e,
2814 0x9f, 0x5d, 0xd9, 0x7c, 0x19, 0x87, 0x12, 0x0b, 0xa0,
2815 0xb7, 0xb7, 0xe8, 0x5c, 0xe8, 0x10, 0xf3, 0x78, 0xd4,
2816 0x01, 0x98, 0x7b, 0x82, 0x46, 0x79, 0xff, 0xe4, 0x5c,
2817 0xca, 0xde, 0x89, 0xe5, 0xed, 0x45, 0x17, 0x6b, 0xab,
2818 0x9d, 0x4a, 0x14, 0xc5, 0xa7, 0x53, 0xd3, 0x2e, 0x11,
2819 0x3a, 0x2a, 0xba, 0x5d, 0xfe, 0x65, 0xac, 0x75, 0x91,
2820 0x8a, 0xfe, 0xd6, 0xcb, 0x21, 0x22, 0xcf, 0x24, 0x97,
2821 0x1f, 0xab, 0x93, 0x2b, 0x64, 0xe1, 0x04, 0xa8, 0xa0,
2822 0x1c, 0x75, 0x5b, 0x4f, 0xb8, 0x6a, 0xfd, 0x49, 0xd0,
2823 0xce, 0x1a, 0x19, 0x09, 0x19, 0x25, 0x51, 0xf5, 0x79,
2824 0xc3, 0x58, 0x7d, 0x1a, 0x61, 0xba, 0x5b, 0x04, 0x15,
2825 0xcf, 0x90, 0xd5, 0x72, 0x32, 0x0a, 0xf3, 0xb0, 0xc5,
2826 0xd5, 0xd6, 0x72, 0xd4, 0x20, 0x72, 0x28, 0xe7, 0x53,
2827 0x22, 0xff, 0xfb, 0x62, 0x12, 0x00, 0xfc, 0xb5, 0x3d,
2828 0x97, 0x0f, 0x6a, 0x74, 0xe0, 0x6b, 0xd9, 0x0d, 0x8f,
2829 0x9a, 0x1c, 0xf2, 0x3c, 0x87, 0xc0, 0x7d, 0xeb, 0x14,
2830 0x45, 0x6d, 0xc2, 0x1d, 0x84, 0xb8, 0xf6, 0xca, 0x45,
2831 0xb8, 0xc3, 0xaf, 0x6d, 0x6d, 0x5c, 0x11, 0x04, 0x88,
2832 0xc9, 0x19, 0x61, 0x7c, 0x11, 0x6c, 0x25, 0xba, 0xef,
2833 0x4a, 0x7a, 0x0d, 0x47, 0xa4, 0xb2, 0x47, 0xc9, 0x44,
2834 0x40, 0x17, 0x6d, 0xd5, 0x4a, 0x01, 0x4d, 0x63, 0x9a,
2835 0x61, 0x39, 0xd8, 0x34, 0x98, 0xa5, 0x85, 0xb5, 0x68,
2836 0x7c, 0xea, 0x85, 0x9d, 0xbb, 0x32, 0xb8, 0x52, 0x69,
2837 0x0c, 0x4d, 0xcd, 0x23, 0xae, 0x40, 0x58, 0x49, 0x8e,
2838 0xe7, 0x51, 0xae, 0xc8, 0xaf, 0xf3, 0xb0, 0xf1, 0xf0,
2839 0xef, 0xd4, 0xbb, 0x50, 0x63, 0x6d, 0x11, 0x82, 0xe1,
2840 0x11, 0xa6, 0xa9, 0x8f, 0x95, 0xf2, 0xd5, 0x5f, 0x8f,
2841 0x4e, 0x75, 0xc1, 0xae, 0x8a, 0x55, 0xe8, 0x51, 0xc5,
2842 0x09, 0x5b, 0xcd, 0x9d, 0x1a, 0xd8, 0x6f, 0xc7, 0x9b,
2843 0x0b, 0xf9, 0xad, 0x2f, 0x58, 0x29, 0x3a, 0x62, 0x4c,
2844 0x25, 0x04, 0xb3, 0x04, 0x69, 0xf7, 0xed, 0x1c, 0x64,
2845 0x55, 0x49, 0xd3, 0x71, 0x77, 0xdf, 0xcd, 0x95 ),
2846 AUTH ( 0x8f, 0xba, 0x48, 0xda, 0xb1, 0x8a, 0x4b, 0xea, 0xdd, 0xff,
2847 0x24, 0x25, 0x2e, 0x62, 0x08, 0x3a ) );
2848
2849/* AES-GCM test case 115 */
2850CIPHER_TEST ( wycheproof_aes_gcm_599f93e3, &aes_gcm_algorithm,
2851 KEY ( 0xaf, 0xd5, 0x79, 0xaa, 0x1a, 0xcc, 0xc6, 0x82, 0xac, 0xa5,
2852 0x4e, 0x14, 0x2a, 0xa6, 0x9d, 0xf0, 0x98, 0x02, 0xf0, 0x20,
2853 0xb2, 0x4a, 0x42, 0xc4, 0x1d, 0xb5, 0x8f, 0x69, 0x97, 0xed,
2854 0xc6, 0x78 ),
2855 IV ( 0x9f, 0x79, 0xd1, 0xda, 0x95, 0x74, 0x91, 0x06, 0x9d, 0x77,
2856 0x44, 0x96 ),
2857 ADDITIONAL(),
2858 PLAINTEXT ( 0xba, 0xfc, 0x6e, 0x86, 0x5c, 0x48, 0xbd, 0x34, 0xb7,
2859 0xf9, 0x32, 0x9e, 0x35, 0xcf, 0xb2, 0x86, 0xcd, 0x4d,
2860 0xc3, 0x1f, 0x83, 0x16, 0x17, 0x12, 0x18, 0xbf, 0x04,
2861 0x71, 0xdf, 0xfd, 0x35, 0xa3, 0x30, 0xa1, 0x81, 0x69,
2862 0x7c, 0xa5, 0x17, 0x86, 0x88, 0xdd, 0x87, 0xef, 0xe5,
2863 0x27, 0x92, 0x4f, 0x90, 0xd1, 0xc7, 0x8b, 0xa4, 0x0d,
2864 0xe7, 0x09, 0x52, 0xff, 0x44, 0xc2, 0x6e, 0xfe, 0x21,
2865 0x59, 0xe5, 0x93, 0x58, 0xf3, 0x93, 0x15, 0x73, 0xdf,
2866 0x93, 0x73, 0xa7, 0x3b, 0x91, 0xba, 0x95, 0x92, 0xe1,
2867 0x21, 0x40, 0xcc, 0x00, 0x9f, 0xee, 0xdd, 0x25, 0x95,
2868 0xe5, 0xb6, 0xf0, 0x66, 0xb5, 0xef, 0x6d, 0xe9, 0x9d,
2869 0x4c, 0x31, 0x55, 0x2c, 0xec, 0xb0, 0x61, 0x4f, 0x1d,
2870 0xce, 0x99, 0x0e, 0x46, 0xe7, 0x69, 0x43, 0x82, 0xf3,
2871 0xcf, 0x3c, 0xcf, 0xcd, 0x1e, 0xa6, 0x2e, 0x56, 0x3e,
2872 0x5f, 0x0d, 0xc3, 0x6c, 0xb5, 0xa8, 0x4e, 0x0c, 0x0b,
2873 0x3f, 0x1f, 0x8f, 0x3f, 0xa9, 0x10, 0x0f, 0x48, 0x71,
2874 0x95, 0xff, 0x2e, 0x31, 0x69, 0xad, 0x08, 0x13, 0x6a,
2875 0xa8, 0xad, 0x56, 0x65, 0x48, 0xc9, 0x83, 0x6a, 0xa0,
2876 0x0d, 0xba, 0xc7, 0x47, 0x16, 0xc2, 0x6e, 0x83, 0x8c,
2877 0x14, 0x86, 0xa0, 0x08, 0x4d, 0x3d, 0xfd, 0x69, 0x25,
2878 0x85, 0xe2, 0xe5, 0xae, 0x7c, 0x75, 0xca, 0xf0, 0xe7,
2879 0xaf, 0x60, 0x21, 0x9f, 0x96, 0x11, 0x6a, 0xe9, 0x63,
2880 0xb4, 0xa5, 0x89, 0x9c, 0xb3, 0x0a, 0x12, 0x0d, 0xaa,
2881 0xca, 0x78, 0x33, 0x77, 0x66, 0x92, 0xc2, 0x5a, 0xd7,
2882 0xc1, 0x85, 0xe6, 0xa2, 0xd7, 0x0c, 0xe0, 0x3f, 0xf1,
2883 0x56, 0xcd, 0x25, 0xd7, 0x61, 0x53, 0x53, 0x9d, 0x68,
2884 0x55, 0x77, 0x3e, 0x21, 0x14, 0x2f, 0x9b, 0xa0, 0x31,
2885 0x35, 0x62, 0x87, 0x5f, 0x10, 0x5a, 0x2b, 0x77, 0x0a,
2886 0x15, 0xb5, 0x33, 0xfb, 0xf5, 0x11, 0x0d, 0xaf, 0xb6,
2887 0x93, 0x29, 0x98, 0x2a, 0xb4, 0x4e, 0xd1, 0xb9, 0xf3,
2888 0x21, 0xd7, 0xb7, 0x9a, 0xe1, 0x5a, 0x19, 0xd9, 0xf3,
2889 0xbd, 0x4c, 0x50, 0x4c, 0x24, 0xb2, 0x3b, 0x81, 0x2d,
2890 0x51, 0x4c, 0x19, 0xae, 0x2a, 0x34, 0x7c, 0xc1, 0x8c,
2891 0x12, 0xce, 0x91, 0x5a, 0x0b, 0xad, 0x7c, 0xc8, 0x9a,
2892 0x87, 0x20, 0xd4, 0xba, 0x5e, 0xe0, 0x96, 0x4f, 0xe0,
2893 0x5e, 0x4c, 0xc5, 0x9a, 0x13, 0xf9, 0x2c, 0x67, 0x0b,
2894 0x86, 0x55, 0x07, 0x1e, 0x21, 0x6f, 0x19, 0xad, 0x05,
2895 0xf4, 0xbb, 0xcc, 0xa6, 0xdc, 0x7f, 0xee, 0xb1, 0x88,
2896 0xd6, 0x26, 0x9c, 0x58, 0x06, 0x5c, 0x98, 0xfc, 0xbb,
2897 0xac, 0x18, 0x3a, 0x9a, 0xbb, 0x38, 0x11, 0xd8, 0x0c,
2898 0xb4, 0x76, 0x54, 0x4b, 0xd7, 0x4b, 0x26, 0x99, 0x1f,
2899 0x3d, 0xf9, 0x87, 0xf0, 0xed, 0x0e, 0xa6, 0x23, 0x86,
2900 0x59, 0xac, 0x09, 0xa2, 0x25, 0x0f, 0xec, 0xc0, 0x72,
2901 0x3f, 0xfc, 0x51, 0x64, 0x7b, 0x74, 0xbd, 0xf4, 0x54,
2902 0xf2, 0x6e, 0x11, 0x11, 0x2c, 0x8b, 0xbd, 0x79, 0x7f,
2903 0x09, 0xa3, 0xbe, 0x82, 0x51, 0xc6, 0xb5, 0xb3, 0x19,
2904 0xed, 0x95, 0x37, 0x27, 0x8c, 0xc1, 0xab, 0xed, 0xb3,
2905 0x2a, 0xa1, 0x08, 0x40, 0x98, 0x4b, 0x96, 0xe8, 0x63,
2906 0x6b, 0x28, 0x93, 0x35, 0x84, 0x6a, 0xe4, 0xfb, 0xd4,
2907 0xa0, 0x0f, 0x66, 0x00, 0xd9, 0x8e, 0xbe, 0x25, 0x88,
2908 0x5c, 0x68, 0xd7, 0x04, 0x3c, 0xe0, 0xdc, 0x52, 0x29,
2909 0xd7, 0xe9, 0xbd, 0x51, 0xbe, 0xa9, 0xb8, 0xfe, 0x05,
2910 0x52, 0xf4, 0x06, 0x88, 0x42, 0x9c, 0x48, 0x26, 0x29,
2911 0xce, 0xd6, 0x23, 0xf6, 0x07, 0x48, 0x58, 0x14, 0x7e,
2912 0x73, 0xda, 0x3f, 0xf4, 0xad, 0x2a, 0xe4, 0x5c, 0x1a,
2913 0x1c, 0x8a, 0x6c, 0x5b, 0x3b, 0x2c, 0x3d, 0x56, 0x8a,
2914 0x75, 0x66, 0x08, 0x17, 0x9f, 0x63, 0xb5, 0x80, 0xfd ),
2915 CIPHERTEXT ( 0xcd, 0x48, 0xa6, 0x95, 0x28, 0x68, 0xf7, 0xf7, 0xc8,
2916 0x94, 0x16, 0x52, 0xf6, 0x41, 0x8b, 0x37, 0x4d, 0xb9,
2917 0xaf, 0xd4, 0xbe, 0x17, 0x9a, 0x94, 0x8d, 0x33, 0x6b,
2918 0xa0, 0xd8, 0x04, 0x38, 0xaf, 0x89, 0x5a, 0x21, 0xf2,
2919 0x68, 0x36, 0x4f, 0xb1, 0xc5, 0xc6, 0x47, 0x2f, 0x67,
2920 0xbd, 0x4c, 0xb7, 0xe4, 0x64, 0x06, 0x8f, 0xe4, 0x43,
2921 0x77, 0xfb, 0x7c, 0xf4, 0x98, 0x5b, 0x84, 0x28, 0xa0,
2922 0x68, 0xf5, 0xa1, 0x80, 0x94, 0x98, 0x22, 0x8f, 0xa8,
2923 0xd8, 0x05, 0x36, 0x50, 0x68, 0x7a, 0xfb, 0x9e, 0xbf,
2924 0x3b, 0x19, 0xb4, 0x3c, 0x38, 0xe5, 0x68, 0x45, 0xe9,
2925 0x35, 0x01, 0x98, 0xae, 0x05, 0x11, 0xef, 0xba, 0x7e,
2926 0xa8, 0xbf, 0x81, 0x59, 0xa0, 0x8f, 0x72, 0xe4, 0x22,
2927 0x7e, 0xc5, 0x0d, 0xa5, 0xb2, 0x9d, 0xbb, 0x18, 0xfb,
2928 0xf1, 0x3c, 0xd2, 0x2e, 0x13, 0x97, 0x8e, 0xfb, 0x04,
2929 0xb0, 0x2b, 0xa1, 0xa4, 0xb2, 0xb1, 0xae, 0x17, 0x1b,
2930 0x61, 0x29, 0x29, 0xd6, 0x77, 0x2d, 0x95, 0x8a, 0xf3,
2931 0x8d, 0x3d, 0xfb, 0x2c, 0x11, 0x68, 0x4a, 0x90, 0x7d,
2932 0x90, 0xb7, 0x86, 0xb4, 0x6a, 0xe4, 0x94, 0xed, 0x1c,
2933 0x9d, 0xa4, 0x86, 0xcc, 0x7b, 0x54, 0xbd, 0x9c, 0xf2,
2934 0xd3, 0x4b, 0xe3, 0x4d, 0xd1, 0x30, 0x13, 0xbd, 0x72,
2935 0xe0, 0x6f, 0xda, 0xd1, 0x7e, 0xf1, 0x43, 0xd5, 0xb8,
2936 0x57, 0x80, 0x4d, 0xe4, 0xa5, 0x64, 0x09, 0xa3, 0x5a,
2937 0x41, 0x28, 0xfd, 0x75, 0x24, 0x40, 0xfe, 0xc0, 0x2b,
2938 0x93, 0x04, 0xce, 0xcc, 0xe1, 0xbc, 0x67, 0x60, 0xd6,
2939 0xfb, 0x03, 0x97, 0xbd, 0x16, 0x09, 0xff, 0x30, 0x3c,
2940 0x9a, 0x0e, 0xa3, 0xbc, 0x5c, 0xc1, 0x14, 0x82, 0xf0,
2941 0x83, 0xb6, 0x47, 0x1f, 0x2e, 0x01, 0xd3, 0xd9, 0x9e,
2942 0xe2, 0x3c, 0x35, 0xc3, 0x7a, 0x62, 0x13, 0x5d, 0x9c,
2943 0xec, 0x9c, 0x69, 0xe0, 0x53, 0x52, 0x84, 0x48, 0xd8,
2944 0x13, 0xaf, 0xda, 0x07, 0xfb, 0xd4, 0x06, 0xec, 0x74,
2945 0xe0, 0xdf, 0x2d, 0x18, 0x22, 0xbb, 0xf6, 0x25, 0x39,
2946 0x2a, 0x2d, 0x91, 0xcc, 0x39, 0xd8, 0x5c, 0x6d, 0xe8,
2947 0xba, 0x43, 0xe5, 0xb7, 0xcf, 0x0e, 0xc2, 0xe4, 0xa0,
2948 0xe1, 0x88, 0x37, 0xf0, 0x4b, 0x28, 0x4d, 0x6c, 0xe6,
2949 0x27, 0x7b, 0xb9, 0x1d, 0xa9, 0xc0, 0xc3, 0x38, 0x5b,
2950 0xf0, 0x57, 0x01, 0x81, 0xde, 0xee, 0xd3, 0xce, 0x23,
2951 0x4e, 0x86, 0x8b, 0x2c, 0x40, 0x7a, 0x2a, 0x7d, 0x8d,
2952 0x51, 0x6b, 0x83, 0xcd, 0x86, 0xb8, 0x44, 0xc2, 0x3a,
2953 0xaf, 0x3b, 0xec, 0xe9, 0x4a, 0x1f, 0x84, 0x30, 0x07,
2954 0xcc, 0xd8, 0xbc, 0x28, 0x59, 0xe0, 0xd6, 0x4b, 0xa1,
2955 0x61, 0x4c, 0x27, 0x21, 0xbb, 0xb6, 0x6a, 0x3a, 0x40,
2956 0xe3, 0xf5, 0x55, 0xa2, 0xb3, 0x7e, 0x07, 0xfb, 0x15,
2957 0xb1, 0x16, 0xf6, 0x91, 0x56, 0xa4, 0x26, 0x0f, 0x1e,
2958 0xb1, 0x9d, 0x81, 0x40, 0xbc, 0x2a, 0xd3, 0xf9, 0xfd,
2959 0x66, 0x6a, 0xe3, 0x58, 0x14, 0xe2, 0xfd, 0x1c, 0xfe,
2960 0x17, 0x89, 0x51, 0xf5, 0xe1, 0x0c, 0xb8, 0x54, 0x95,
2961 0xe4, 0x65, 0x77, 0x3b, 0x42, 0x48, 0xbe, 0xf9, 0xe7,
2962 0x78, 0x1e, 0x4a, 0x3f, 0xb6, 0xca, 0xf2, 0xf4, 0x41,
2963 0x80, 0xde, 0x42, 0xf4, 0xbf, 0xf3, 0x77, 0x2f, 0x3e,
2964 0x87, 0xd8, 0x12, 0x9d, 0xb7, 0x70, 0xc5, 0xe8, 0xa9,
2965 0x53, 0xe5, 0xa3, 0x42, 0xc8, 0x85, 0xea, 0x1c, 0xd4,
2966 0x5a, 0x97, 0x87, 0x92, 0x12, 0x8c, 0xe4, 0x20, 0xe6,
2967 0x32, 0x45, 0xff, 0x0a, 0x1b, 0xb0, 0x73, 0x0a, 0x7a,
2968 0x50, 0x67, 0x71, 0xe2, 0xa9, 0x38, 0x74, 0xe3, 0xf1,
2969 0xee, 0x9b, 0xa9, 0xfc, 0x0a, 0xf9, 0x6a, 0x0d, 0x34,
2970 0xd2, 0x22, 0xd2, 0x9a, 0xeb, 0xd7, 0x91, 0x41, 0x6f,
2971 0x39, 0x90, 0x52, 0xad, 0xb2, 0x95, 0xc3, 0xc4, 0x3c ),
2972 AUTH ( 0x32, 0xb2, 0x76, 0xfd, 0x0c, 0x1d, 0xa7, 0xa8, 0x23, 0xa5,
2973 0xaf, 0x07, 0x4a, 0xec, 0xac, 0xb5 ) );
2974
2975/* AES-GCM test case 116 */
2976CIPHER_TEST ( wycheproof_aes_gcm_12c1aa5e, &aes_gcm_algorithm,
2977 KEY ( 0x0f, 0x11, 0x2e, 0x59, 0xcd, 0xcc, 0xd8, 0x51, 0xc3, 0xb8,
2978 0xe7, 0x6c, 0x9f, 0x05, 0xa3, 0xb7, 0xc2, 0xe4, 0xfe, 0xca,
2979 0x58, 0x46, 0xaf, 0xeb, 0x35, 0x1c, 0x1c, 0xbc, 0xac, 0xe8,
2980 0x2f, 0x04 ),
2981 IV ( 0x71, 0x47, 0x97, 0x33, 0x39, 0xd8, 0x67, 0x89, 0xa2, 0xc9,
2982 0xa9, 0x58 ),
2983 ADDITIONAL ( 0x37, 0x12, 0x8b, 0xe4, 0x5f, 0x0a, 0x7f, 0x32, 0x95,
2984 0x46, 0xe1, 0x49, 0x2c, 0x3c, 0x9c, 0x2d, 0x25, 0x34,
2985 0xd5, 0xb1, 0xf5, 0x14, 0x7e, 0x49, 0xab, 0x91, 0x22,
2986 0x1e, 0x7c, 0x3e, 0xde, 0xa2, 0x1b, 0xbe, 0x47, 0xbf,
2987 0xe3, 0x61, 0x94, 0x37, 0xce, 0x3c, 0x61, 0xe6, 0xe9,
2988 0x46, 0xc5, 0x04, 0xf3, 0x48, 0x29, 0x69, 0x18, 0x21,
2989 0x9e, 0x51, 0xbf, 0x2c, 0x55, 0x98, 0x58, 0x9c, 0xff ),
2990 PLAINTEXT ( 0x10, 0x2e, 0x58, 0x04, 0xdd, 0xa1, 0xfb, 0x5d, 0x65,
2991 0x60, 0x77, 0xed, 0xb1, 0x5c, 0xad, 0xb5, 0xd0, 0xbd,
2992 0xee, 0x8c ),
2993 CIPHERTEXT ( 0x61, 0x8a, 0xc6, 0x26, 0xae, 0x0e, 0x8d, 0x06, 0xc2,
2994 0xfd, 0x2f, 0xb6, 0x6b, 0xe2, 0x53, 0xdc, 0x26, 0xed,
2995 0x6e, 0x38 ),
2996 AUTH ( 0xd8, 0xd9, 0x3f, 0xf9, 0x75, 0xcb, 0x98, 0x8f, 0x09, 0x17,
2997 0x4d, 0xcd, 0x43, 0x9c, 0xb6, 0xa4 ) );
2998
2999/* AES-GCM test case 117 */
3000CIPHER_TEST ( wycheproof_aes_gcm_b2c6c3cd, &aes_gcm_algorithm,
3001 KEY ( 0x2c, 0xe6, 0xb4, 0xc1, 0x5f, 0x85, 0xfb, 0x2d, 0xa5, 0xcc,
3002 0x6c, 0x26, 0x94, 0x91, 0xee, 0xf2, 0x81, 0x98, 0x03, 0x09,
3003 0x18, 0x12, 0x49, 0xeb, 0xf2, 0x83, 0x2b, 0xd6, 0xd0, 0x73,
3004 0x2d, 0x0b ),
3005 IV ( 0xc0, 0x64, 0xfa, 0xe9, 0x17, 0x3b, 0x17, 0x3f, 0xd6, 0xf1,
3006 0x1f, 0x34 ),
3007 ADDITIONAL ( 0x49, 0x8d, 0x30, 0x75, 0xb0, 0x9f, 0xed, 0x99, 0x82,
3008 0x80, 0x58, 0x3d, 0x61, 0xbb, 0x36, 0xb6, 0xce, 0x41,
3009 0xf1, 0x30, 0x06, 0x3b, 0x80, 0x82, 0x4d, 0x15, 0x86,
3010 0xe1, 0x43, 0xd3, 0x49, 0xb1, 0x26, 0xb1, 0x6a, 0xa1,
3011 0x0f, 0xe5, 0x73, 0x43, 0xed, 0x22, 0x3d, 0x63, 0x64,
3012 0xee, 0x60, 0x22, 0x57, 0xfe, 0x31, 0x3a, 0x7f, 0xc9,
3013 0xbf, 0x90, 0x88, 0xf0, 0x27, 0x79, 0x5b, 0x8d, 0xc1,
3014 0xd3 ),
3015 PLAINTEXT ( 0xf8, 0xa2, 0x7a, 0x4b, 0xaf, 0x00, 0xdc, 0x05, 0x55,
3016 0xd2, 0x22, 0xf2, 0xfa, 0x4f, 0xb4, 0x2d, 0xc6, 0x66,
3017 0xea, 0x3c ),
3018 CIPHERTEXT ( 0xae, 0xd5, 0x8d, 0x8a, 0x25, 0x2f, 0x74, 0x0d, 0xba,
3019 0x4b, 0xf6, 0xd3, 0x67, 0x73, 0xbd, 0x5b, 0x41, 0x23,
3020 0x4b, 0xba ),
3021 AUTH ( 0x01, 0xf9, 0x3d, 0x74, 0x56, 0xaa, 0x18, 0x4e, 0xbb, 0x49,
3022 0xbe, 0xa4, 0x72, 0xb6, 0xd6, 0x5d ) );
3023
3024/* AES-GCM test case 118 */
3025CIPHER_TEST ( wycheproof_aes_gcm_293c46f8, &aes_gcm_algorithm,
3026 KEY ( 0x52, 0x35, 0x0d, 0xa5, 0xa5, 0x72, 0x91, 0x1e, 0xe0, 0xe0,
3027 0xfc, 0xed, 0xb1, 0x15, 0xaf, 0x6f, 0x45, 0x70, 0xfb, 0xf9,
3028 0xc7, 0x4a, 0x11, 0xbc, 0x18, 0x44, 0x44, 0xd6, 0xa6, 0x21,
3029 0xd6, 0x0f ),
3030 IV ( 0xd6, 0x8a, 0xd0, 0x45, 0xc1, 0xb9, 0xc2, 0x92, 0x3c, 0xf5,
3031 0x40, 0x4c ),
3032 ADDITIONAL ( 0x03, 0xa9, 0x4b, 0x38, 0x41, 0x29, 0x2d, 0x9b, 0xbf,
3033 0x72, 0xf4, 0x13, 0xc0, 0x91, 0x67, 0xc5, 0x4e, 0xe1,
3034 0x05, 0x37, 0xc0, 0x49, 0xaf, 0xe2, 0xbb, 0xce, 0xc4,
3035 0x3b, 0x18, 0xf3, 0x89, 0x0b, 0x2f, 0xcd, 0xd3, 0xbb,
3036 0x31, 0xe6, 0xd7, 0x09, 0x27, 0x4e, 0x19, 0x9c, 0x0c,
3037 0x46, 0x48, 0xeb, 0x3d, 0x8b, 0x38, 0xe0, 0xc1, 0xbf,
3038 0x7f, 0x30, 0x94, 0x43, 0xbe, 0xf6, 0x93, 0x7c, 0xde,
3039 0x41, 0x23 ),
3040 PLAINTEXT ( 0x4e, 0x6e, 0x6d, 0xad, 0x2c, 0x16, 0xcf, 0xc6, 0xe7,
3041 0xca, 0xc0, 0x36, 0x36, 0xa4, 0xa6, 0xd8, 0x8b, 0xd6,
3042 0xa1, 0x3e ),
3043 CIPHERTEXT ( 0xc7, 0x76, 0x44, 0x11, 0xbe, 0x13, 0xcf, 0xea, 0xae,
3044 0xce, 0x76, 0x1b, 0xd3, 0xbb, 0x13, 0x55, 0x2f, 0x08,
3045 0x80, 0x48 ),
3046 AUTH ( 0xbc, 0xc2, 0x54, 0x4e, 0x79, 0xf3, 0x4e, 0xa1, 0x07, 0x6a,
3047 0x12, 0xb7, 0x64, 0x41, 0xd6, 0xfa ) );
3048
3049/* AES-GCM test case 119 */
3050CIPHER_TEST ( wycheproof_aes_gcm_1af86832, &aes_gcm_algorithm,
3051 KEY ( 0xd0, 0x58, 0x30, 0x4c, 0x0b, 0xa0, 0x39, 0xb2, 0xe2, 0xd0,
3052 0x86, 0x61, 0xfd, 0x8f, 0x6d, 0xb8, 0x87, 0x79, 0xbd, 0x5c,
3053 0xe5, 0x80, 0xeb, 0x76, 0x6c, 0x1d, 0x6a, 0xb3, 0x4b, 0x94,
3054 0xee, 0x94 ),
3055 IV ( 0x3c, 0x55, 0x33, 0x97, 0xfa, 0xfd, 0xa0, 0xeb, 0x06, 0xa5,
3056 0x9f, 0x23 ),
3057 ADDITIONAL ( 0xcf, 0xb1, 0xfe, 0x1c, 0x47, 0xe2, 0x45, 0x01, 0x09,
3058 0xea, 0xed, 0x4e, 0x1a, 0xac, 0x94, 0x31, 0xaa, 0x5d,
3059 0xb1, 0xe3, 0xb7, 0xee, 0xac, 0xad, 0x3e, 0xbc, 0x9e,
3060 0x8e, 0x1f, 0x3e, 0x0a, 0x82, 0x3f, 0x75, 0x7f, 0x61,
3061 0x97, 0x61, 0xe6, 0x1a, 0xd0, 0x5a, 0xf8, 0xce, 0xf8,
3062 0x31, 0x04, 0x89, 0x09, 0x40, 0xcd, 0x59, 0x21, 0x37,
3063 0xeb, 0x7b, 0xa5, 0x87, 0x9b, 0x95, 0x75, 0x9c, 0x8b,
3064 0xe1, 0x52, 0x5f, 0x9a, 0x01, 0xfc, 0x01, 0x58, 0x2d,
3065 0x93, 0xa2, 0xa8, 0x41, 0x33, 0x6a, 0x10, 0x4d, 0x16,
3066 0x99, 0x68, 0xc2, 0x74, 0xb5, 0xa8, 0xc3, 0x08, 0x83,
3067 0xb4, 0xbd, 0x62, 0x17, 0x25, 0xf6, 0x90, 0x79, 0xbb,
3068 0x94, 0xa1, 0x74, 0xa3, 0xc9, 0x4d, 0xb6, 0x2f, 0x2a,
3069 0xe7, 0x46, 0xd0, 0x32, 0x00, 0xf0, 0x1c, 0x19, 0xaa,
3070 0xa8, 0xa3, 0xb8, 0x9e, 0x78, 0xb9, 0x9a, 0x62, 0xf7,
3071 0x6f ),
3072 PLAINTEXT ( 0x0a, 0x06, 0x4c, 0xd5, 0xe4, 0x98, 0x45, 0xc4, 0xef,
3073 0xb6, 0x0f, 0xb3, 0x43, 0xdc, 0x03, 0xfa, 0xff, 0xa3,
3074 0x6c, 0x49 ),
3075 CIPHERTEXT ( 0xa7, 0xd8, 0x4f, 0xf7, 0x1d, 0xc7, 0x13, 0x16, 0x13,
3076 0x59, 0xb7, 0x57, 0xaf, 0x42, 0xc7, 0x4d, 0xdd, 0xbf,
3077 0x53, 0xce ),
3078 AUTH ( 0x73, 0x6e, 0x48, 0xa2, 0xb7, 0x79, 0x2a, 0xcc, 0x59, 0x9b,
3079 0xaa, 0x65, 0x16, 0x29, 0xa2, 0x03 ) );
3080
3081/* AES-GCM test case 120 */
3082CIPHER_TEST ( wycheproof_aes_gcm_d03f18fe, &aes_gcm_algorithm,
3083 KEY ( 0x44, 0xc8, 0xd0, 0xcd, 0xb8, 0xf7, 0xe7, 0x36, 0xcf, 0xd9,
3084 0x97, 0xc8, 0x72, 0xa5, 0xd9, 0xc5, 0xef, 0x30, 0xaf, 0xbe,
3085 0x44, 0xb6, 0x56, 0x66, 0x06, 0xb9, 0x0a, 0xa5, 0xe3, 0xe8,
3086 0xb7, 0x97 ),
3087 IV ( 0x6f, 0x39, 0xaf, 0xba, 0x02, 0x1e, 0x4c, 0x36, 0xeb, 0x92,
3088 0x96, 0x2e ),
3089 ADDITIONAL ( 0x98, 0xd1, 0xca, 0x17, 0x88, 0xcb, 0xeb, 0x30, 0x0e,
3090 0xa5, 0xc6, 0xb1, 0xee, 0xc9, 0x5e, 0xb2, 0x34, 0x71,
3091 0x77, 0x20, 0x14, 0x00, 0x91, 0x3d, 0x45, 0x22, 0x56,
3092 0x22, 0xb6, 0x27, 0x3e, 0xec, 0x8a, 0x74, 0xc3, 0xf1,
3093 0x2c, 0x8d, 0x52, 0x48, 0xda, 0xbe, 0xe5, 0x86, 0x22,
3094 0x97, 0x86, 0xff, 0x19, 0x2c, 0x4d, 0xf0, 0xc7, 0x95,
3095 0x47, 0xf7, 0xad, 0x6a, 0x92, 0xd7, 0x8d, 0x9f, 0x89,
3096 0x52, 0x75, 0x86, 0x35, 0x78, 0x3a, 0xdd, 0x2a, 0x59,
3097 0x77, 0xd3, 0x86, 0xe0, 0xae, 0xf7, 0x64, 0x82, 0x21,
3098 0x1d, 0x2c, 0x3a, 0xe9, 0x8d, 0xe4, 0xba, 0xad, 0xb3,
3099 0xf8, 0xb3, 0x5b, 0x51, 0x04, 0x64, 0x75, 0x5d, 0xc7,
3100 0x5c, 0xeb, 0x2b, 0xf2, 0x5b, 0x23, 0x33, 0x17, 0x52,
3101 0x3f, 0x39, 0x9a, 0x6c, 0x50, 0x7d, 0xb2, 0x14, 0xf0,
3102 0x85, 0xfa, 0x28, 0x18, 0xf0, 0xd3, 0x70, 0x2b, 0x10,
3103 0x95, 0x2b ),
3104 PLAINTEXT ( 0x2e, 0x6f, 0x40, 0xf9, 0xd3, 0x72, 0x58, 0x36, 0xac,
3105 0x0c, 0x85, 0x81, 0x77, 0x93, 0x8f, 0xd6, 0x7b, 0xe1,
3106 0x94, 0x32 ),
3107 CIPHERTEXT ( 0xb4, 0x24, 0x28, 0xf8, 0x09, 0x4e, 0xf7, 0xe6, 0x5c,
3108 0x9e, 0x8c, 0x45, 0xef, 0x3e, 0x95, 0xc2, 0x8c, 0xe0,
3109 0x7d, 0x72 ),
3110 AUTH ( 0x32, 0xb2, 0x5d, 0xfb, 0xb8, 0x96, 0xd0, 0xf9, 0xd7, 0x9c,
3111 0x82, 0x3b, 0xdd, 0x8e, 0x5d, 0x06 ) );
3112
3113/* AES-GCM test case 121 */
3114CIPHER_TEST ( wycheproof_aes_gcm_63a399bd, &aes_gcm_algorithm,
3115 KEY ( 0xe2, 0x7e, 0x71, 0x8e, 0x4b, 0x66, 0xc9, 0x1e, 0x22, 0x1f,
3116 0x2a, 0x3d, 0xf9, 0xda, 0x00, 0x13, 0xf7, 0xe1, 0x43, 0x40,
3117 0x00, 0x6e, 0xca, 0x50, 0xdc, 0x30, 0xc4, 0xcc, 0x2d, 0xde,
3118 0xb6, 0x79 ),
3119 IV ( 0xb4, 0x6f, 0xed, 0x18, 0x5e, 0x8b, 0x33, 0x21, 0x5d, 0xd4,
3120 0x74, 0xdd ),
3121 ADDITIONAL ( 0x2d, 0x2b, 0x62, 0x47, 0xf9, 0xc3, 0x42, 0xf8, 0xd0,
3122 0x43, 0x2c, 0xe0, 0x71, 0x57, 0x49, 0xd0, 0xba, 0xc0,
3123 0xe2, 0xe3, 0xf2, 0x8b, 0x78, 0x5b, 0xe8, 0xdc, 0x84,
3124 0xb3, 0xa0, 0xe5, 0x7a, 0x16, 0x1a, 0xfd, 0xe3, 0x42,
3125 0x27, 0x27, 0x75, 0x12, 0x20, 0x4f, 0xfa, 0x4b, 0xce,
3126 0xb6, 0xe0, 0xa4, 0xd0, 0x21, 0x03, 0x1b, 0x76, 0x55,
3127 0x40, 0xf7, 0xf6, 0x13, 0x04, 0x5f, 0x74, 0xe7, 0xe6,
3128 0xe4, 0x97, 0x7c, 0x04, 0xb7, 0x8b, 0x5d, 0x3f, 0x8d,
3129 0x4e, 0x42, 0x0a, 0x97, 0x48, 0xc1, 0x2d, 0x1f, 0x9a,
3130 0xa5, 0xe0, 0x3a, 0x27, 0x74, 0x9b, 0xe2, 0x78, 0x5d,
3131 0xd5, 0x55, 0xa8, 0xcf, 0x01, 0x82, 0xc0, 0x82, 0x6f,
3132 0x2d, 0x60, 0xee, 0xd3, 0xc4, 0x05, 0x9a, 0xdf, 0x88,
3133 0x72, 0xf3, 0xc4, 0xd8, 0x1a, 0x96, 0x35, 0x92, 0x47,
3134 0x29, 0x65, 0xcc, 0x0c, 0x66, 0x10, 0x21, 0x67, 0xe4,
3135 0xcb, 0x1c, 0xa2 ),
3136 PLAINTEXT ( 0xe3, 0x9a, 0xea, 0xf1, 0xd2, 0x14, 0xf7, 0x89, 0x15,
3137 0x60, 0x1f, 0xee, 0x9a, 0x35, 0x27, 0xd7, 0x77, 0x67,
3138 0x46, 0x51 ),
3139 CIPHERTEXT ( 0x75, 0x02, 0x32, 0x11, 0x5a, 0x5e, 0xde, 0xa7, 0xb2,
3140 0x49, 0xa2, 0x2c, 0x0c, 0xda, 0xe1, 0x7f, 0x72, 0x5d,
3141 0x6f, 0x99 ),
3142 AUTH ( 0x4a, 0x72, 0xd8, 0xc3, 0x0f, 0xc7, 0xe0, 0xf1, 0x80, 0x6d,
3143 0x9a, 0x81, 0x7a, 0xda, 0xe1, 0x4a ) );
3144
3145/* AES-GCM test case 122 */
3146CIPHER_TEST ( wycheproof_aes_gcm_03a1cf9e, &aes_gcm_algorithm,
3147 KEY ( 0xfc, 0x1b, 0xfd, 0x0b, 0x58, 0x51, 0x5c, 0x4e, 0x79, 0x06,
3148 0xe2, 0x05, 0x25, 0x96, 0xbb, 0x92, 0xde, 0x8c, 0x87, 0x98,
3149 0x06, 0xaf, 0x47, 0xa4, 0xc7, 0x26, 0xff, 0x08, 0xc9, 0xba,
3150 0x47, 0xcc ),
3151 IV ( 0xf3, 0xda, 0x3b, 0xe5, 0x74, 0x33, 0x7b, 0x8f, 0x8c, 0x05,
3152 0x28, 0x66 ),
3153 ADDITIONAL ( 0xd2, 0x6f, 0x7f, 0xf8, 0x87, 0x72, 0x52, 0x28, 0xf3,
3154 0x10, 0x99, 0x24, 0xed, 0x9e, 0xae, 0xaa, 0x8c, 0x10,
3155 0x3c, 0xfc, 0xaa, 0xc1, 0xd6, 0xe3, 0x87, 0x4d, 0x11,
3156 0xaf, 0xd8, 0x42, 0x4f, 0xd0, 0x30, 0xfe, 0xa8, 0x05,
3157 0x47, 0x21, 0x2f, 0xe7, 0xc8, 0xac, 0x9f, 0x4e, 0xcb,
3158 0xe3, 0x04, 0xb6, 0x2e, 0x5b, 0xb2, 0x06, 0xac, 0x3a,
3159 0x83, 0x18, 0xa8, 0x19, 0xb9, 0x70, 0x1f, 0x49, 0x4a,
3160 0xef, 0xd2, 0x2e, 0x84, 0xd2, 0x27, 0x92, 0x21, 0x02,
3161 0xf5, 0x13, 0x0f, 0x06, 0x85, 0xe8, 0x8e, 0x25, 0x11,
3162 0x5c, 0x3a, 0xb9, 0xe8, 0xbb, 0x29, 0x0c, 0x0d, 0xf0,
3163 0x71, 0x5c, 0x4a, 0xdb, 0x00, 0xa2, 0xec, 0xc9, 0xba,
3164 0xb5, 0xbb, 0xcc, 0x49, 0xce, 0xc6, 0x03, 0x05, 0xa5,
3165 0xb0, 0x4f, 0x64, 0x6b, 0x1d, 0x0f, 0x95, 0x16, 0x73,
3166 0xcf, 0x1e, 0xb4, 0x74, 0x2c, 0x1a, 0x52, 0xbe, 0xb2,
3167 0xcd, 0x2f, 0x43, 0xa2, 0xe4, 0x13, 0xe4, 0xa9, 0xf5,
3168 0x67, 0x91, 0x23, 0xb4, 0xd5, 0x9f, 0x2a, 0xe1, 0x4c,
3169 0x27, 0xee, 0x84, 0xe9, 0x70, 0xca, 0xfc, 0xbb, 0x5a,
3170 0x07, 0x36, 0xad, 0x26, 0x36, 0x83, 0x3c, 0xb6, 0x44,
3171 0xc9, 0xf2, 0xfb, 0x61, 0xa4, 0xa0, 0x9f, 0xad, 0x51,
3172 0x1f, 0x4c, 0x17, 0x81, 0xc5, 0x68, 0x5f, 0x94, 0x81,
3173 0x4d, 0x24, 0x2c, 0x5e, 0x3e, 0xb4, 0xab, 0xe1, 0x65,
3174 0x73, 0x2a, 0xb0, 0x25, 0x8a, 0x24, 0x61, 0xc5, 0x6d,
3175 0x45, 0x2e, 0xf1, 0xcf, 0x48, 0xb4, 0xff, 0x0f, 0x33,
3176 0x1b, 0x91, 0xc2, 0xc7, 0x1c, 0xe1, 0xc0, 0x38, 0x77,
3177 0x55, 0x28, 0x37, 0xa1, 0x2d, 0xfe, 0x75, 0xf7, 0x8b,
3178 0xf1, 0xcd, 0x61, 0x5b, 0x3b, 0x2b, 0x86, 0x4f, 0xd9,
3179 0x50, 0x3a, 0x5f, 0x5b, 0xea, 0x65, 0x28, 0x70, 0xbc,
3180 0xe4, 0xca, 0xd5, 0xc7, 0x26, 0xf1, 0xc5, 0x12, 0xda,
3181 0xe7, 0xf5, 0xf8 ),
3182 PLAINTEXT ( 0x9a, 0xdf, 0xce, 0xd8, 0xe2, 0x3f, 0x78, 0x97, 0xb6,
3183 0x6e, 0xfc, 0xc3, 0x46, 0x8d, 0x63, 0xb8, 0x7d, 0xa7,
3184 0x9a, 0x24 ),
3185 CIPHERTEXT ( 0x18, 0x75, 0xd3, 0xd7, 0x69, 0x30, 0xb5, 0x83, 0x61,
3186 0x10, 0x3d, 0x64, 0x22, 0x05, 0x91, 0xfe, 0xaa, 0xd5,
3187 0xc9, 0xa2 ),
3188 AUTH ( 0x22, 0x30, 0x99, 0xbb, 0x16, 0xc3, 0x0c, 0xba, 0x13, 0x4e,
3189 0x63, 0x9e, 0xd9, 0x56, 0x15, 0xb7 ) );
3190
3191/* AES-GCM test case 123 */
3192CIPHER_TEST ( wycheproof_aes_gcm_41df38af, &aes_gcm_algorithm,
3193 KEY ( 0x7e, 0xc2, 0x0e, 0x38, 0xaa, 0x1b, 0x1f, 0x01, 0x8d, 0x79,
3194 0x90, 0x3f, 0xc1, 0xcf, 0x6e, 0x26, 0x0c, 0xec, 0x37, 0x33,
3195 0xa1, 0x9a, 0xd9, 0xe3, 0x0f, 0x60, 0xb5, 0x4e, 0x2e, 0xa6,
3196 0xeb, 0xcc ),
3197 IV ( 0x5c, 0xcd, 0x9c, 0xdc, 0xf9, 0x7a, 0xc6, 0x13, 0x64, 0x68,
3198 0x7b, 0xbb ),
3199 ADDITIONAL ( 0xd9, 0xd2, 0xee, 0x14, 0x5b, 0x5c, 0x31, 0xa1, 0x7d,
3200 0xce, 0x93, 0x25, 0x38, 0xc7, 0xe4, 0x5d, 0xa1, 0xc8,
3201 0x2a, 0xbb, 0x80, 0xb0, 0x55, 0x32, 0x51, 0xe4, 0x42,
3202 0xdb, 0xc5, 0xaf, 0x9c, 0x12, 0x6d, 0x3a, 0x76, 0xa2,
3203 0x47, 0x67, 0xc3, 0x9b, 0x22, 0x9b, 0xec, 0x89, 0x76,
3204 0xa0, 0xdf, 0x89, 0xfa, 0x70, 0xea, 0x9a, 0xd8, 0x72,
3205 0xaa, 0x36, 0xd6, 0xb8, 0xb0, 0x9a, 0xaa, 0x54, 0x69,
3206 0x8e, 0x7f, 0x29, 0xc2, 0xc2, 0xd1, 0x2e, 0xfb, 0x0b,
3207 0x30, 0x1c, 0xfb, 0x97, 0x07, 0x64, 0x73, 0xdf, 0xa7,
3208 0xec, 0x03, 0x03, 0x50, 0xe2, 0x68, 0x39, 0xfb, 0xb7,
3209 0xe1, 0x61, 0x2d, 0xad, 0x93, 0xff, 0x08, 0xe1, 0x11,
3210 0x91, 0x68, 0xc5, 0xfc, 0xa5, 0x68, 0x16, 0xc6, 0x2b,
3211 0x04, 0x2f, 0x06, 0xd8, 0x9e, 0x5a, 0x95, 0xda, 0x6a,
3212 0x61, 0x5e, 0x13, 0xba, 0x4c, 0xad, 0x9f, 0x94, 0x25,
3213 0x34, 0xc5, 0x39, 0x52, 0x0d, 0x00, 0x50, 0x9d, 0x0d,
3214 0x4a, 0xc6, 0xd8, 0x0c, 0x59, 0xe7, 0x69, 0xd7, 0xe1,
3215 0xaa, 0x7e, 0x12, 0x98, 0x7e, 0xe0, 0x5f, 0xb6, 0xa1,
3216 0x9b, 0x38, 0x3c, 0x33, 0x48, 0xdf, 0x6c, 0xbd, 0xcf,
3217 0xf6, 0x04, 0xef, 0x21, 0x83, 0x38, 0x91, 0x0a, 0x8e,
3218 0x27, 0x5d, 0x9a, 0x62, 0xb8, 0x02, 0xcb, 0x07, 0xec,
3219 0x92, 0x49, 0xc9, 0x63, 0x5e, 0x24, 0x37, 0xf8, 0x33,
3220 0x9d, 0xff, 0x3e, 0x21, 0xf7, 0x9e, 0x9e, 0xb2, 0xac,
3221 0xc2, 0xbb, 0xba, 0xdd, 0x52, 0x0a, 0x84, 0xc5, 0x8f,
3222 0x0d, 0xda, 0xaf, 0x8c, 0x32, 0x49, 0x6d, 0x17, 0x3b,
3223 0x6b, 0x8c, 0x0c, 0x27, 0x43, 0x52, 0xd4, 0x0d, 0x47,
3224 0xbf, 0xbd, 0x93, 0x06, 0x9a, 0xbd, 0xcc, 0x3d, 0x21,
3225 0xc2, 0xcd, 0x33, 0x0a, 0x8c, 0x16, 0x84, 0x7f, 0x0e,
3226 0x52, 0x99, 0xbe, 0xb6, 0xa2, 0xd3, 0x3b, 0xe7, 0x46,
3227 0xde, 0x5c, 0x71, 0xf2 ),
3228 PLAINTEXT ( 0xba, 0xb2, 0x8e, 0x09, 0x87, 0x50, 0x9b, 0x1d, 0x6f,
3229 0x9c, 0xf3, 0xaa, 0x90, 0x03, 0x07, 0x95, 0xf1, 0x25,
3230 0xee, 0x44 ),
3231 CIPHERTEXT ( 0xce, 0x4c, 0x58, 0xd3, 0xc7, 0x35, 0x4d, 0x2d, 0x27,
3232 0xe3, 0xbb, 0x41, 0xa6, 0x2e, 0x59, 0x41, 0xfb, 0x1e,
3233 0x39, 0xf3 ),
3234 AUTH ( 0xe1, 0x77, 0x39, 0x1d, 0x5e, 0x2c, 0xef, 0xa2, 0xf7, 0xd3,
3235 0x5e, 0x33, 0xa7, 0x65, 0x66, 0xaa ) );
3236
3237/* AES-GCM test case 124 */
3238CIPHER_TEST ( wycheproof_aes_gcm_1a8fedd4, &aes_gcm_algorithm,
3239 KEY ( 0xe4, 0x00, 0x03, 0xd6, 0xe0, 0x8a, 0xb8, 0x0b, 0x4b, 0xfc,
3240 0x84, 0x00, 0xef, 0x11, 0x29, 0x45, 0xa9, 0x01, 0xec, 0x64,
3241 0xa1, 0xb6, 0x53, 0x6c, 0xa9, 0x26, 0x65, 0x09, 0x0d, 0x60,
3242 0x8b, 0xc4 ),
3243 IV ( 0x9f, 0x09, 0x5d, 0xaf, 0xe6, 0xf6, 0xe0, 0xfb, 0xaf, 0xbb,
3244 0xe0, 0x2e ),
3245 ADDITIONAL ( 0x42, 0x2d, 0x5e, 0xfc, 0xff, 0xe3, 0x64, 0x90, 0x59,
3246 0x84, 0x53, 0x3f, 0x0a, 0x57, 0x9d, 0x80, 0xb1, 0x8b,
3247 0xda, 0x7b, 0x29, 0xe6, 0xe4, 0x64, 0x98, 0xef, 0xfb,
3248 0xa5, 0x3c, 0x35, 0x01, 0x12, 0xc0, 0xbb, 0xb8, 0xdc,
3249 0x4c, 0xe0, 0x3b, 0xb0, 0xc6, 0x9e, 0x1d, 0x0b, 0xaa,
3250 0x19, 0xf0, 0x63, 0x71, 0x08, 0xaa, 0x4a, 0x16, 0xb0,
3251 0x9a, 0x28, 0x1f, 0x23, 0x28, 0x39, 0xd8, 0x7b, 0x6d,
3252 0x0e, 0x42, 0xbe, 0x1b, 0xaa, 0x7c, 0x67, 0xf1, 0xbe,
3253 0x97, 0x0e, 0xa1, 0x69, 0xd3, 0x96, 0x0b, 0x9f, 0xe0,
3254 0xa6, 0x1f, 0x11, 0xcd, 0x2e, 0xb7, 0x39, 0x8c, 0x19,
3255 0xe6, 0x41, 0xfe, 0xb4, 0x3f, 0x77, 0x8e, 0x25, 0x7a,
3256 0x39, 0x70, 0x63, 0xdb, 0x5b, 0x3a, 0x67, 0x07, 0xe9,
3257 0xdb, 0x62, 0x38, 0x70, 0x54, 0xf9, 0xf9, 0xd4, 0x4f,
3258 0x14, 0x35, 0x83, 0xe6, 0x3e, 0xda, 0xd4, 0x5a, 0x00,
3259 0x25, 0x1e, 0x51, 0x73, 0xd7, 0x50, 0x5f, 0x22, 0xa8,
3260 0xbc, 0xe2, 0x32, 0xe5, 0x6c, 0x2c, 0x27, 0x6a, 0x58,
3261 0x03, 0x3a, 0xe3, 0x0d, 0x5d, 0xbf, 0x4e, 0x35, 0xa8,
3262 0x62, 0xe4, 0x2a, 0xf5, 0x73, 0xbe, 0x38, 0xc6, 0x40,
3263 0x6d, 0x9b, 0x4c, 0x7a, 0xcb, 0xf2, 0x75, 0xfe, 0x36,
3264 0xc0, 0xec, 0xf2, 0xc4, 0x64, 0x28, 0x98, 0xa3, 0x0e,
3265 0x61, 0x46, 0xfa, 0xc9, 0x92, 0xa1, 0x64, 0x05, 0xf9,
3266 0x83, 0x12, 0x12, 0x6b, 0x7a, 0x37, 0x22, 0xf5, 0xdf,
3267 0xb7, 0xdd, 0x4e, 0x49, 0x11, 0xc1, 0x42, 0x6b, 0x2e,
3268 0x01, 0xd0, 0x4e, 0x9b, 0xe6, 0xdb, 0x37, 0x71, 0x10,
3269 0x0f, 0x7d, 0x7d, 0x42, 0x82, 0xe4, 0xea, 0x58, 0x5f,
3270 0x36, 0x46, 0x24, 0x1e, 0x80, 0x7c, 0xa6, 0x4f, 0x06,
3271 0xa7, 0xfa, 0x9b, 0x70, 0x03, 0xd7, 0x10, 0xb8, 0x01,
3272 0xd6, 0x6f, 0x51, 0x7d, 0x2d, 0x5e, 0xbd, 0x74, 0x08,
3273 0x72, 0xde, 0xba, 0x13, 0xd0 ),
3274 PLAINTEXT ( 0x38, 0xc3, 0xf4, 0x4b, 0xc5, 0x76, 0x5d, 0xe1, 0xf3,
3275 0xd1, 0xc3, 0x68, 0x4c, 0xd0, 0x9c, 0xdd, 0xef, 0xaf,
3276 0x29, 0x8d ),
3277 CIPHERTEXT ( 0xd4, 0xa7, 0x9f, 0x72, 0x94, 0x87, 0x93, 0x59, 0x50,
3278 0xec, 0x03, 0x2e, 0x69, 0x0a, 0xb8, 0xfe, 0x25, 0xc4,
3279 0x15, 0x8e ),
3280 AUTH ( 0x87, 0x6d, 0x2f, 0x33, 0x4f, 0x47, 0x96, 0x8b, 0x10, 0xc1,
3281 0x03, 0x85, 0x9d, 0x43, 0x6d, 0xb8 ) );
3282
3283/* AES-GCM test case 125 */
3284CIPHER_TEST ( wycheproof_aes_gcm_c5c5e61c, &aes_gcm_algorithm,
3285 KEY ( 0x82, 0x0b, 0xb5, 0xeb, 0x37, 0x07, 0xe7, 0x13, 0xd5, 0xfc,
3286 0xfe, 0x3c, 0x98, 0xbb, 0x1b, 0xa7, 0x33, 0x54, 0x0d, 0xdf,
3287 0x44, 0xb1, 0x72, 0x74, 0x6b, 0xb9, 0x50, 0x95, 0x72, 0x54,
3288 0xad, 0xb5 ),
3289 IV ( 0xf2, 0xb9, 0x47, 0xea, 0xe4, 0x31, 0x12, 0x54, 0x41, 0x7c,
3290 0x59, 0x28 ),
3291 ADDITIONAL ( 0xf7, 0x6c, 0x06, 0xfe, 0x9d, 0xfa, 0x7f, 0xff, 0xdd,
3292 0xae, 0x7d, 0x54, 0x59, 0x77, 0xf1, 0x94, 0x4b, 0xdb,
3293 0x8e, 0x48, 0xbb, 0x87, 0x40, 0xff, 0x1a, 0x9a, 0x90,
3294 0xc2, 0x60, 0xe1, 0x26, 0x4f, 0xdb, 0xfa, 0x32, 0x8e,
3295 0xd8, 0xf1, 0x83, 0xe6, 0x72, 0x89, 0x2a, 0x6d, 0x34,
3296 0x64, 0xc1, 0x76, 0xad, 0xab, 0x5d, 0xa8, 0xab, 0x3a,
3297 0xf7, 0xc0, 0x8b, 0x71, 0xad, 0x13, 0x5d, 0x7b, 0x42,
3298 0xc3, 0xeb, 0xd8, 0x93, 0x93, 0x8f, 0x82, 0xcb, 0x9d,
3299 0x20, 0x0b, 0xb5, 0x0c, 0x26, 0xe8, 0x23, 0xaf, 0x95,
3300 0x11, 0x49, 0x40, 0x7b, 0xcc, 0x05, 0xf1, 0x7f, 0xbe,
3301 0x8e, 0xc2, 0x75, 0xdb, 0x96, 0xa9, 0xc7, 0xaa, 0x23,
3302 0x0f, 0x13, 0x47, 0xbc, 0xf1, 0x02, 0x02, 0xd5, 0xcb,
3303 0x7f, 0xb1, 0x60, 0x76, 0xf6, 0xa7, 0x8c, 0xd6, 0x20,
3304 0xfd, 0xd6, 0x7a, 0x9b, 0xe5, 0x8f, 0x69, 0x92, 0xe6,
3305 0x19, 0xa8, 0x31, 0x4c, 0xb4, 0x04, 0x46, 0xb6, 0x54,
3306 0xd1, 0xc0, 0x1c, 0x9c, 0xc6, 0xa9, 0x2e, 0x44, 0xa7,
3307 0x7b, 0x01, 0x5f, 0x2c, 0xef, 0xb9, 0xe5, 0x28, 0x40,
3308 0x82, 0x95, 0x1b, 0xd9, 0x8e, 0xe7, 0xe8, 0x34, 0xad,
3309 0xf3, 0x93, 0x06, 0xbd, 0xd4, 0x28, 0x82, 0x96, 0xc2,
3310 0x76, 0xe6, 0x3b, 0x0d, 0xba, 0x7b, 0x72, 0x69, 0xc6,
3311 0x3e, 0x0e, 0x77, 0xf3, 0xdf, 0x0d, 0xeb, 0xe8, 0xfe,
3312 0x36, 0x45, 0x4e, 0xd7, 0xab, 0x33, 0x2d, 0xb7, 0x7d,
3313 0x2d, 0x9d, 0x7e, 0x18, 0x32, 0xf3, 0x6e, 0x13, 0xac,
3314 0x6c, 0x88, 0xe3, 0x83, 0xdc, 0x85, 0x33, 0xbc, 0x62,
3315 0x4a, 0x27, 0xae, 0x37, 0x87, 0x58, 0x74, 0x2a, 0x63,
3316 0xe3, 0x9d, 0x54, 0xfe, 0xc8, 0x27, 0xb1, 0x9c, 0x63,
3317 0xc6, 0x92, 0xcd, 0xbc, 0x6a, 0x49, 0x8c, 0xe8, 0x0c,
3318 0x5c, 0x11, 0x2d, 0x46, 0x1c, 0xbe, 0xd6, 0xc9, 0x3a,
3319 0x45, 0x85, 0x73, 0xc7, 0x65, 0xc7, 0x59, 0x77, 0x6e,
3320 0x7b, 0x8e, 0x34, 0x30, 0xca, 0x38, 0x99, 0x91, 0x99,
3321 0x6f, 0x89, 0x5e, 0xe1, 0x6f, 0xe5, 0x38, 0xf2, 0xde,
3322 0x3a, 0x90, 0x2f, 0x84, 0x23, 0x13, 0x8f, 0x05, 0xe8,
3323 0x7e, 0x01, 0xc1, 0xad, 0xf2, 0x23, 0x2c, 0xe9, 0xef,
3324 0xf1, 0x00, 0xb3, 0x94, 0x52, 0x56, 0x5c, 0x10, 0x12,
3325 0x5b, 0x3a, 0x85, 0x21, 0x83, 0xf8, 0x02, 0x6b, 0x1c,
3326 0xb8, 0x28, 0x1e, 0x9e, 0x2e, 0x6a, 0x0f, 0xbd, 0xde,
3327 0x64, 0xd0, 0xf4, 0xc2, 0x98, 0x4a, 0x72, 0xf1, 0xae,
3328 0x2b, 0xfb, 0xb4, 0x09, 0xc9, 0xde, 0x9a, 0xd2, 0x24,
3329 0x48, 0x60, 0x99, 0x6e, 0x10, 0x53, 0xcc, 0x8c, 0xdd,
3330 0x70, 0x51, 0x1b, 0xb2, 0x65, 0xf2, 0x05, 0x61, 0xa0,
3331 0x33, 0x7d, 0xe4, 0x89, 0x1f, 0xbf, 0x29, 0x3f, 0x70,
3332 0x5f, 0xe0, 0x40, 0xf1, 0x87, 0xba, 0x43, 0xbf, 0x13,
3333 0xfb, 0x5e, 0x02, 0x03, 0x1f, 0x8e, 0xdc, 0xe5, 0xdb,
3334 0x10, 0xef, 0x5d, 0x41, 0x1a, 0x44, 0x8c, 0xe0, 0x90,
3335 0x3d, 0xde, 0x94, 0x3d, 0x2e, 0x19, 0x9f, 0x0e, 0x4a,
3336 0xf2, 0xad, 0x3a, 0xb2, 0xa5, 0x34, 0xf0, 0xd6, 0x41,
3337 0x8a, 0xcb, 0xc5, 0xea, 0x93, 0x40, 0x35, 0x6e, 0x11,
3338 0x03, 0x6b, 0xf6, 0xde, 0xc3, 0x06, 0x41, 0x91, 0x77,
3339 0x63, 0x0d, 0x36, 0xb4, 0x1a, 0x0e, 0x64, 0x63, 0x88,
3340 0xf6, 0x01, 0x02, 0x27, 0xa3, 0x23, 0xf9, 0x57, 0x0f,
3341 0x43, 0xf2, 0xf1, 0x4a, 0x8b, 0x9f, 0xa3, 0x46, 0xad,
3342 0x04, 0x59, 0xc0, 0xc2, 0x8c, 0xe6, 0xca, 0x2e, 0xed,
3343 0x98, 0x98, 0x3b, 0xd0, 0x8d, 0xb8, 0x2b, 0xfd, 0x09,
3344 0x45, 0xbd, 0x4c, 0x94, 0xbd, 0x82, 0xa4, 0x04, 0x68,
3345 0x76, 0xd7, 0xa3, 0x84, 0x4a, 0x4f, 0xb9, 0x36, 0x52,
3346 0x84, 0xb1, 0x51, 0x1b, 0x6f, 0xb3, 0x6a, 0x27, 0x03,
3347 0xab, 0xc9, 0xb0, 0x3a, 0x62, 0x44, 0xbf ),
3348 PLAINTEXT ( 0x81, 0xc3, 0x7b, 0x34, 0xc4, 0x36, 0x9e, 0xcc, 0x1a,
3349 0x9c, 0xdd, 0x6f, 0x15, 0x57, 0x13, 0x3e, 0x59, 0x24,
3350 0x91, 0x65 ),
3351 CIPHERTEXT ( 0x8d, 0x52, 0x9d, 0x8a, 0x4f, 0x0d, 0x7e, 0xc4, 0xe4,
3352 0x1d, 0x8d, 0x36, 0x16, 0x63, 0xdf, 0x53, 0xc4, 0x79,
3353 0xac, 0x34 ),
3354 AUTH ( 0xd5, 0x09, 0xe3, 0xe1, 0xec, 0xcf, 0xe3, 0x8f, 0x7c, 0x63,
3355 0xf9, 0xa5, 0x5f, 0x42, 0x94, 0x6a ) );
3356
3357/* AES-GCM test case 126 */
3358CIPHER_TEST ( wycheproof_aes_gcm_ceefcefc, &aes_gcm_algorithm,
3359 KEY ( 0x65, 0xe1, 0x8f, 0x70, 0xf1, 0x68, 0xab, 0xaf, 0x38, 0x81,
3360 0x04, 0xc9, 0xb3, 0x7a, 0x96, 0x86, 0xae, 0xbc, 0x77, 0x43,
3361 0xf0, 0xe6, 0x6b, 0x84, 0xb7, 0xc7, 0xcc, 0x0e, 0x36, 0x00,
3362 0xf6, 0x55 ),
3363 IV ( 0x8d, 0x56, 0x44, 0x20, 0xfc, 0xb9, 0xa9, 0x8e, 0x7e, 0x07,
3364 0x47, 0x5c ),
3365 ADDITIONAL ( 0x01, 0x6d, 0xde, 0x72, 0x45, 0x36, 0xee, 0xe2, 0x71,
3366 0x87, 0x90, 0x72, 0x63, 0xe4, 0xa6, 0x2f, 0x3b, 0x63,
3367 0x7e, 0xaa, 0x8a, 0xb6, 0xf8, 0x6d, 0x03, 0x43, 0xf6,
3368 0x6f, 0x7f, 0x73, 0xc6, 0xf8, 0xc3, 0x41, 0x6c, 0xf2,
3369 0x53, 0x53, 0x24, 0x54, 0xc0, 0x45, 0x55, 0x7e, 0xd7,
3370 0xa3, 0x71, 0xc2, 0xd6, 0xb8, 0xe1, 0x9e, 0x01, 0x01,
3371 0xe1, 0x10, 0x9c, 0xd7, 0x22, 0x7d, 0xc5, 0x39, 0x05,
3372 0x45, 0xff, 0x24, 0x48, 0x40, 0x31, 0x95, 0x77, 0x49,
3373 0x51, 0x43, 0x79, 0xa7, 0x7a, 0x33, 0xdf, 0x0f, 0xd1,
3374 0x29, 0xf8, 0x0e, 0x98, 0x69, 0x74, 0x7b, 0x65, 0x89,
3375 0xfd, 0x29, 0xa6, 0x93, 0x5a, 0xa3, 0x7b, 0x00, 0xe2,
3376 0xab, 0xbb, 0xae, 0x2b, 0x67, 0x90, 0x47, 0x26, 0xe9,
3377 0xfe, 0x22, 0x14, 0x30, 0x80, 0xaf, 0x18, 0x82, 0x1f,
3378 0xf1, 0x0c, 0x52, 0x17, 0xe8, 0x45, 0xcd, 0x6e, 0x0e,
3379 0xf2, 0x51, 0x3c, 0x1d, 0x82, 0xc1, 0x4f, 0x9d, 0x39,
3380 0x33, 0xf3, 0xfd, 0x5c, 0x63, 0x64, 0x07, 0x5a, 0xeb,
3381 0xef, 0x6c, 0x0f, 0x5c, 0x97, 0xfa, 0x34, 0x3a, 0xa1,
3382 0x92, 0xba, 0x8c, 0x52, 0x6b, 0x7a, 0xd4, 0xc7, 0x1c,
3383 0x4c, 0x19, 0xad, 0x2d, 0x5a, 0xe0, 0x5b, 0x07, 0x17,
3384 0x6a, 0x5e, 0x66, 0xd4, 0x86, 0x88, 0x9a, 0x2e, 0x8f,
3385 0x9e, 0xf8, 0x0b, 0x9c, 0x06, 0x80, 0xcf, 0x88, 0x7f,
3386 0x60, 0x13, 0x7f, 0x62, 0x66, 0xec, 0x33, 0x5a, 0x5f,
3387 0x1d, 0x74, 0xdc, 0x41, 0xde, 0xc1, 0x65, 0x3a, 0x96,
3388 0xd6, 0x1b, 0x75, 0xf4, 0xb5, 0x69, 0xb9, 0x32, 0x8f,
3389 0x6b, 0x2f, 0xb4, 0x03, 0x91, 0x70, 0x4f, 0x66, 0xe0,
3390 0x58, 0xe9, 0x2d, 0xfc, 0x15, 0xd7, 0x75, 0x99, 0x01,
3391 0x8d, 0x74, 0x90, 0x7a, 0x9b, 0xb8, 0x87, 0x0c, 0x5c,
3392 0x44, 0x6e, 0x81, 0xfa, 0x7a, 0x76, 0x4a, 0x54, 0x9f,
3393 0x6a, 0x41, 0x73, 0x26, 0xb5, 0x2f, 0xbb, 0xe4, 0xf5,
3394 0x88, 0x5e, 0x64, 0x55, 0xbe, 0x28, 0x90, 0xc3, 0xa8,
3395 0xb9, 0x7a, 0x9f, 0xd0, 0xc9, 0x2c, 0x08, 0x5e, 0xdf,
3396 0xaf, 0x6a, 0x4f, 0x28, 0xdf, 0xec, 0x02, 0x43, 0xaa,
3397 0x79, 0xa7, 0x1d, 0x12, 0x32, 0x82, 0xd4, 0xe9, 0xa0,
3398 0xb3, 0x49, 0x7a, 0xd5, 0x69, 0xdb, 0x86, 0x9e, 0x56,
3399 0x63, 0x8e, 0x27, 0x1f, 0x12, 0x05, 0xa5, 0x2f, 0xc3,
3400 0x8c, 0xb7, 0x47, 0x67, 0xe4, 0xbb, 0x2f, 0x37, 0xbd,
3401 0x43, 0x70, 0x83, 0xe9, 0x94, 0x39, 0x5e, 0x98, 0x45,
3402 0x4c, 0x04, 0x09, 0x2d, 0x29, 0x2c, 0x68, 0x1a, 0xde,
3403 0x9e, 0x39, 0x85, 0x89, 0xdf, 0x6c, 0xbf, 0x9b, 0x31,
3404 0x96, 0xd1, 0x2c, 0x81, 0x53, 0x74, 0x06, 0x47, 0xaf,
3405 0x01, 0x8c, 0xab, 0x5f, 0x9b, 0xf3, 0xe3, 0xdb, 0x7d,
3406 0xee, 0xa2, 0x21, 0xc7, 0x3f, 0x37, 0x7b, 0x96, 0xd3,
3407 0x68, 0xff, 0x8d, 0x9f, 0xfe, 0xcb, 0x8f, 0x44, 0xd5,
3408 0x0b, 0x59, 0xfa, 0xfc, 0x90, 0xf6, 0x55, 0xec, 0x92,
3409 0x71, 0xc9, 0xc1, 0xd0, 0x32, 0xcf, 0xb0, 0xf2, 0x37,
3410 0x20, 0xd0, 0x19, 0x81, 0xc2, 0x62, 0x96, 0x53, 0x6e,
3411 0x66, 0xcd, 0xb8, 0xc3, 0x90, 0xad, 0x1b, 0xca, 0x90,
3412 0xe6, 0xb2, 0x71, 0x11, 0x70, 0x66, 0x5a, 0xd5, 0x2a,
3413 0xaa, 0x18, 0x8f, 0x87, 0xca, 0x96, 0x88, 0x8d, 0x3d,
3414 0x93, 0x2e, 0x6c, 0x3b, 0xf3, 0x28, 0x91, 0xcd, 0x74,
3415 0x63, 0x08, 0xb0, 0xd6, 0x34, 0x5e, 0xd8, 0xcf, 0x7c,
3416 0x1a, 0xd8, 0x84, 0x42, 0x32, 0x6a, 0x38, 0x92, 0xe6,
3417 0x0a, 0xfd, 0x5c, 0x86, 0xa2, 0xd0, 0x62, 0xa4, 0x61,
3418 0xd8, 0x89, 0x64, 0x46, 0x15, 0x4e, 0x91, 0x48, 0xaa,
3419 0xd5, 0xb1, 0x22, 0x43, 0x7e, 0x26, 0xa5, 0x2b, 0xa1,
3420 0xb6, 0x20, 0xd0, 0x85, 0xaf, 0x62, 0x8a, 0xf5, 0xad,
3421 0xa9, 0xff, 0xf6, 0x64, 0xd4, 0xa9, 0xa2, 0x30 ),
3422 PLAINTEXT ( 0x12, 0xd3, 0xcc, 0x44, 0x73, 0x97, 0x02, 0x96, 0xd2,
3423 0x91, 0x88, 0x18, 0xfd, 0xcf, 0x1a, 0x57, 0x0d, 0x2d,
3424 0x48, 0x21 ),
3425 CIPHERTEXT ( 0x28, 0x44, 0xb6, 0x8b, 0x93, 0x56, 0x04, 0x99, 0x34,
3426 0xb0, 0x31, 0xb0, 0xd6, 0xde, 0x55, 0xb5, 0x0f, 0xab,
3427 0x0f, 0x46 ),
3428 AUTH ( 0x38, 0x7b, 0xc3, 0xa4, 0x65, 0x30, 0xbd, 0xf2, 0x4b, 0x1c,
3429 0xfa, 0x67, 0x89, 0x93, 0x69, 0xea ) );
3430
3431/* AES-GCM test case 127 */
3432CIPHER_TEST ( wycheproof_aes_gcm_21500b95, &aes_gcm_algorithm,
3433 KEY ( 0xb1, 0x5a, 0xb8, 0x16, 0xba, 0x50, 0x5e, 0xc4, 0x2b, 0x52,
3434 0x80, 0x66, 0xd9, 0x11, 0x9b, 0x4b, 0x2e, 0xe3, 0x81, 0x59,
3435 0xce, 0x54, 0xa2, 0x6b, 0xc5, 0xd6, 0x61, 0x12, 0x7e, 0x05,
3436 0x22, 0x2c ),
3437 IV ( 0x75, 0xe3, 0xc6, 0x08, 0xa3, 0x93, 0x67, 0xdc, 0x4a, 0xa7,
3438 0x48, 0xd0 ),
3439 ADDITIONAL ( 0x00, 0x59, 0x31, 0xa2, 0xd5, 0xc5, 0xbc, 0xed, 0xc7,
3440 0x16, 0xc3, 0xf2, 0x46, 0xe2, 0x1b, 0x3a, 0x46, 0xd2,
3441 0xa6, 0xb1, 0xce, 0x73, 0x64, 0x46, 0x53, 0xe0, 0xcf,
3442 0x27, 0x7e, 0xfa, 0x49, 0x2f, 0x12, 0xfb, 0x2b, 0x83,
3443 0xf7, 0x0b, 0xae, 0x87, 0x37, 0xd5, 0x3c, 0xd7, 0x62,
3444 0x54, 0xda, 0xbc, 0xa8, 0x42, 0x2d, 0x4f, 0xf9, 0x39,
3445 0x6c, 0x26, 0x5d, 0x57, 0xe4, 0xfd, 0x3d, 0x0c, 0xd1,
3446 0xc3, 0x81, 0x98, 0xe2, 0x29, 0x63, 0x7c, 0x7f, 0xbf,
3447 0xff, 0x46, 0x8f, 0xcd, 0xb0, 0x4c, 0xa1, 0x21, 0x01,
3448 0x86, 0x5c, 0x08, 0xbb, 0xf5, 0x56, 0x89, 0xe1, 0x29,
3449 0x9c, 0x5e, 0x7a, 0x43, 0x02, 0x96, 0xc4, 0x7a, 0x87,
3450 0x4d, 0x99, 0x56, 0x55, 0x7b, 0x2c, 0xb3, 0x2f, 0xd3,
3451 0xf8, 0x07, 0x3f, 0x85, 0xfe, 0xfb, 0x6d, 0x20, 0x05,
3452 0xc5, 0xd3, 0x32, 0x9e, 0x40, 0xdc, 0xb9, 0x57, 0xf5,
3453 0xb0, 0x1d, 0x7f, 0x15, 0x82, 0xea, 0x35, 0x9b, 0x94,
3454 0x7d, 0x56, 0x69, 0xda, 0x80, 0x03, 0xc0, 0x09, 0xf8,
3455 0xec, 0xbf, 0xbf, 0x09, 0x4f, 0xb8, 0x15, 0x5c, 0xf8,
3456 0x92, 0x51, 0xee, 0x4a, 0x91, 0xa4, 0x3a, 0x96, 0xe3,
3457 0xf6, 0xd3, 0x02, 0xe1, 0x57, 0x53, 0xdd, 0x48, 0xdd,
3458 0x5e, 0x3b, 0x87, 0xe0, 0x93, 0x02, 0x10, 0x59, 0xec,
3459 0x32, 0x3d, 0x38, 0xd3, 0xee, 0x72, 0x29, 0x05, 0x21,
3460 0xee, 0xfd, 0x54, 0xcf, 0x70, 0x8a, 0xa9, 0xe8, 0x18,
3461 0x69, 0xb7, 0x56, 0xc3, 0xfc, 0x3c, 0x9a, 0x60, 0xe1,
3462 0x22, 0x26, 0xac, 0x64, 0x3b, 0xf7, 0xa9, 0x19, 0x51,
3463 0xe5, 0x50, 0x91, 0x59, 0xb1, 0xe2, 0x98, 0xbb, 0xfe,
3464 0x88, 0xfd, 0x8e, 0xe6, 0x59, 0xca, 0xc9, 0x8c, 0x90,
3465 0x4f, 0x68, 0xc9, 0x28, 0x40, 0x38, 0x94, 0xfc, 0x89,
3466 0xdf, 0x10, 0x0d, 0x6f, 0x30, 0xfd, 0x1c, 0xe2, 0x06,
3467 0x66, 0x81, 0x59, 0x29, 0xb6, 0xee, 0xe3, 0x9e, 0xce,
3468 0x51, 0x0e, 0xb5, 0x35, 0x67, 0xe3, 0x5c, 0xbe, 0x49,
3469 0xdc, 0xec, 0x0f, 0x1b, 0x80, 0xfe, 0xe8, 0x61, 0xed,
3470 0x0a, 0xf1, 0xcc, 0x75, 0x9d, 0x47, 0x7f, 0x30, 0x6a,
3471 0x5e, 0x12, 0x73, 0xe6, 0x4c, 0x7e, 0x33, 0x55, 0x4d,
3472 0x11, 0xd7, 0x96, 0x32, 0x00, 0x6b, 0x42, 0x0e, 0x7c,
3473 0x71, 0xd3, 0x6f, 0xec, 0xe1, 0x8d, 0x75, 0xa8, 0xb5,
3474 0x77, 0x31, 0x71, 0xed, 0x07, 0x1c, 0x26, 0x66, 0x4f,
3475 0xc0, 0x11, 0x32, 0x77, 0xe3, 0x35, 0x6a, 0xb3, 0x0d,
3476 0xb0, 0x5a, 0xc6, 0x2e, 0xa5, 0xb9, 0x75, 0xe3, 0x64,
3477 0x13, 0x57, 0x2d, 0xd3, 0x9e, 0x5c, 0x22, 0xd5, 0xc4,
3478 0x2b, 0xc8, 0x2a, 0xb0, 0xab, 0x85, 0xb5, 0x4f, 0xbf,
3479 0xaa, 0x52, 0x7d, 0x13, 0x44, 0xdc, 0x3d, 0xfb, 0x18,
3480 0xb9, 0x41, 0xb0, 0x5b, 0xcc, 0x5b, 0x47, 0xd2, 0x5e,
3481 0x18, 0xef, 0x93, 0x6f, 0x39, 0x18, 0xed, 0x87, 0xcb,
3482 0xf5, 0xdf, 0xa6, 0x79, 0x89, 0xa0, 0x38, 0xe2, 0xf7,
3483 0x47, 0x34, 0x5c, 0x4b, 0x8d, 0x27, 0xb1, 0x01, 0xc9,
3484 0x44, 0xf0, 0xf1, 0xd6, 0xfe, 0x21, 0xcd, 0x1a, 0x65,
3485 0x3c, 0x17, 0x53, 0x0f, 0x9a, 0x89, 0x3d, 0x7f, 0xd4,
3486 0x8a, 0xfa, 0xfc, 0xf1, 0x2b, 0xf0, 0x05, 0xfe, 0x04,
3487 0x4a, 0x00, 0x0e, 0x8d, 0xea, 0xf0, 0x9b, 0xed, 0x39,
3488 0xba, 0x62, 0x78, 0x4b, 0xd5, 0xb8, 0x8a, 0xce, 0x56,
3489 0x48, 0x06, 0xa9, 0xb5, 0xe0, 0xbf, 0x40, 0xf9, 0xf6,
3490 0x55, 0xfd, 0xd5, 0xbd, 0xc4, 0xbf, 0x56, 0x8c, 0x5a,
3491 0xbb, 0x4b, 0x84, 0xec, 0x61, 0xa8, 0x5f, 0x00, 0x38,
3492 0xb4, 0xf4, 0xcc, 0x3e, 0x75, 0xc3, 0xb3, 0xf9, 0x9e,
3493 0x62, 0xb9, 0x92, 0x92, 0xd5, 0x10, 0xf6, 0x90, 0xc0,
3494 0x7c, 0x18, 0xaf, 0x41, 0xb7, 0x65, 0xfe, 0x5a, 0x1e,
3495 0xe9, 0x48, 0x4c, 0xf0, 0x4c, 0x69, 0xf3, 0xf4, 0x9c ),
3496 PLAINTEXT ( 0x8b, 0x2a, 0x6a, 0x96, 0x04, 0xb2, 0x5d, 0x16, 0x70,
3497 0xb7, 0xd8, 0x69, 0xc6, 0x49, 0xa0, 0x53, 0x99, 0xb8,
3498 0xad, 0xa5 ),
3499 CIPHERTEXT ( 0x37, 0x1f, 0xa7, 0x0a, 0xf8, 0xa1, 0x98, 0xcb, 0x43,
3500 0xdd, 0xd5, 0x45, 0xe7, 0x4b, 0x80, 0x62, 0x46, 0xf7,
3501 0xe9, 0x32 ),
3502 AUTH ( 0x01, 0x4a, 0x01, 0x79, 0xb8, 0x16, 0x91, 0xd0, 0x90, 0x11,
3503 0xdc, 0xea, 0x57, 0x39, 0x55, 0x1d ) );
3504
3505/* AES-GCM test case 128 */
3506CIPHER_TEST ( wycheproof_aes_gcm_e2c3a1a4, &aes_gcm_algorithm,
3507 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3508 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3509 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
3510 0xfe, 0x0f ),
3511 IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3512 0x00, 0x00 ),
3513 ADDITIONAL(),
3514 PLAINTEXT ( 0x56, 0x10, 0x08, 0xfa, 0x07, 0xa6, 0x8f, 0x5c, 0x61,
3515 0x28, 0x5c, 0xd0, 0x13, 0x46, 0x4e, 0xaf ),
3516 CIPHERTEXT ( 0x23, 0x29, 0x3e, 0x9b, 0x07, 0xca, 0x7d, 0x1b, 0x0c,
3517 0xae, 0x7c, 0xc4, 0x89, 0xa9, 0x73, 0xb3 ),
3518 AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
3519 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
3520
3521/* AES-GCM test case 129 */
3522CIPHER_TEST ( wycheproof_aes_gcm_77767307, &aes_gcm_algorithm,
3523 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3524 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3525 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
3526 0xfe, 0x0f ),
3527 IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
3528 0xff, 0xff ),
3529 ADDITIONAL(),
3530 PLAINTEXT ( 0xc6, 0x15, 0x22, 0x44, 0xce, 0xa1, 0x97, 0x8d, 0x3e,
3531 0x0b, 0xc2, 0x74, 0xcf, 0x8c, 0x0b, 0x3b ),
3532 CIPHERTEXT ( 0x7c, 0xb6, 0xfc, 0x7c, 0x6a, 0xbc, 0x00, 0x9e, 0xfe,
3533 0x95, 0x51, 0xa9, 0x9f, 0x36, 0xa4, 0x21 ),
3534 AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3535 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
3536
3537/* AES-GCM test case 130 (skipped: modified tag) */
3538
3539/* AES-GCM test case 131 (skipped: modified tag) */
3540
3541/* AES-GCM test case 132 (skipped: modified tag) */
3542
3543/* AES-GCM test case 133 (skipped: modified tag) */
3544
3545/* AES-GCM test case 134 (skipped: modified tag) */
3546
3547/* AES-GCM test case 135 (skipped: modified tag) */
3548
3549/* AES-GCM test case 136 (skipped: modified tag) */
3550
3551/* AES-GCM test case 137 (skipped: modified tag) */
3552
3553/* AES-GCM test case 138 (skipped: modified tag) */
3554
3555/* AES-GCM test case 139 (skipped: modified tag) */
3556
3557/* AES-GCM test case 140 (skipped: modified tag) */
3558
3559/* AES-GCM test case 141 (skipped: modified tag) */
3560
3561/* AES-GCM test case 142 (skipped: modified tag) */
3562
3563/* AES-GCM test case 143 (skipped: modified tag) */
3564
3565/* AES-GCM test case 144 (skipped: modified tag) */
3566
3567/* AES-GCM test case 145 (skipped: modified tag) */
3568
3569/* AES-GCM test case 146 (skipped: modified tag) */
3570
3571/* AES-GCM test case 147 (skipped: modified tag) */
3572
3573/* AES-GCM test case 148 (skipped: modified tag) */
3574
3575/* AES-GCM test case 149 (skipped: modified tag) */
3576
3577/* AES-GCM test case 150 (skipped: modified tag) */
3578
3579/* AES-GCM test case 151 (skipped: modified tag) */
3580
3581/* AES-GCM test case 152 (skipped: modified tag) */
3582
3583/* AES-GCM test case 153 (skipped: modified tag) */
3584
3585/* AES-GCM test case 154 (skipped: modified tag) */
3586
3587/* AES-GCM test case 155 (skipped: modified tag) */
3588
3589/* AES-GCM test case 156 (skipped: modified tag) */
3590
3591/* AES-GCM test case 157 */
3592CIPHER_TEST ( wycheproof_aes_gcm_f5cabfe8, &aes_gcm_algorithm,
3593 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3594 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3595 0x54, 0x65, 0x76, 0x87 ),
3596 IV ( 0x02, 0x9e, 0x0e, 0x77, 0x7d, 0xb0, 0x92, 0xb1, 0x25, 0x35,
3597 0xd0, 0x43, 0x01, 0x2f, 0x09, 0xba ),
3598 ADDITIONAL(),
3599 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3600 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3601 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3602 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3603 0x00, 0x00, 0x00, 0x00 ),
3604 CIPHERTEXT ( 0xf8, 0x3c, 0xee, 0x46, 0x73, 0x36, 0xe1, 0xa0, 0x9b,
3605 0x75, 0xf2, 0x4e, 0x9b, 0x43, 0x85, 0xc9, 0x9c, 0x13,
3606 0xe6, 0xaf, 0x72, 0x22, 0x56, 0xa6, 0x61, 0x29, 0xec,
3607 0xe9, 0x61, 0xfe, 0x80, 0x3b, 0x16, 0x7b, 0xad, 0x20,
3608 0x6f, 0x50, 0x17, 0xfb ),
3609 AUTH ( 0x09, 0x33, 0x8a, 0x42, 0xf0, 0xac, 0xc1, 0x4f, 0x97, 0xc0,
3610 0x64, 0xf5, 0x2f, 0x5f, 0x16, 0x88 ) );
3611
3612/* AES-GCM test case 158 */
3613CIPHER_TEST ( wycheproof_aes_gcm_14ea057a, &aes_gcm_algorithm,
3614 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3615 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3616 0x54, 0x65, 0x76, 0x87 ),
3617 IV ( 0xf1, 0xbe, 0x3b, 0x06, 0xb7, 0xfe, 0xac, 0x07, 0xe7, 0xea,
3618 0xb6, 0x29, 0xf5, 0x56, 0x04, 0x7b ),
3619 ADDITIONAL(),
3620 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3621 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3622 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3623 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3624 0x00, 0x00, 0x00, 0x00 ),
3625 CIPHERTEXT ( 0x0b, 0x32, 0xb6, 0x48, 0xa2, 0xc2, 0x8e, 0x9e, 0xdd,
3626 0x7c, 0xee, 0x08, 0xee, 0xeb, 0x90, 0x00, 0x34, 0xca,
3627 0xe7, 0x21, 0x5e, 0x5a, 0xb1, 0xe2, 0x01, 0xbd, 0x2e,
3628 0xed, 0x10, 0x32, 0xc5, 0xa9, 0x78, 0x66, 0xba, 0x58,
3629 0x2a, 0x34, 0x58, 0xa4 ),
3630 AUTH ( 0x90, 0xbe, 0x36, 0x06, 0xde, 0x58, 0xbd, 0x77, 0x8f, 0xa5,
3631 0xbe, 0xff, 0x4a, 0x41, 0x02, 0xbd ) );
3632
3633/* AES-GCM test case 159 */
3634CIPHER_TEST ( wycheproof_aes_gcm_b2454cd9, &aes_gcm_algorithm,
3635 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3636 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3637 0x54, 0x65, 0x76, 0x87 ),
3638 IV ( 0xde, 0x9e, 0xb6, 0x3b, 0x1d, 0xae, 0xd3, 0x21, 0xa1, 0x1b,
3639 0x75, 0x47, 0xcc, 0x9e, 0x22, 0x3c ),
3640 ADDITIONAL(),
3641 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3642 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3643 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3644 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3645 0x00, 0x00, 0x00, 0x00 ),
3646 CIPHERTEXT ( 0x57, 0x5e, 0x2e, 0xce, 0xc2, 0xb3, 0xc7, 0x2d, 0x4e,
3647 0x80, 0x83, 0x0d, 0x0d, 0x85, 0x9a, 0xd9, 0xe4, 0x2c,
3648 0x29, 0xc4, 0xa6, 0x8d, 0x8d, 0x9d, 0x8d, 0x23, 0x43,
3649 0x4d, 0xe2, 0xcd, 0x07, 0x73, 0x3b, 0xe4, 0x9d, 0x62,
3650 0xac, 0x1a, 0xe0, 0x85 ),
3651 AUTH ( 0x6e, 0x4d, 0x63, 0x96, 0x12, 0x5a, 0x10, 0xdf, 0x54, 0x43,
3652 0xbd, 0x0c, 0xbc, 0x85, 0x66, 0xd1 ) );
3653
3654/* AES-GCM test case 160 */
3655CIPHER_TEST ( wycheproof_aes_gcm_a605fd40, &aes_gcm_algorithm,
3656 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3657 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3658 0x54, 0x65, 0x76, 0x87 ),
3659 IV ( 0x40, 0xbb, 0x0a, 0xbe, 0xbc, 0x48, 0x3f, 0xf6, 0xd5, 0x67,
3660 0x12, 0x41, 0xff, 0x5d, 0x66, 0xc6 ),
3661 ADDITIONAL(),
3662 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3663 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3664 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3665 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3666 0x00, 0x00, 0x00, 0x00 ),
3667 CIPHERTEXT ( 0x2a, 0x81, 0x88, 0x88, 0xd1, 0xf0, 0x9f, 0x32, 0xaa,
3668 0x7b, 0xee, 0xdd, 0x28, 0x69, 0xb4, 0x46, 0x57, 0x5e,
3669 0x2e, 0xce, 0xc2, 0xb3, 0xc7, 0x2d, 0x4e, 0x80, 0x83,
3670 0x0d, 0x0d, 0x85, 0x9a, 0xd9, 0xe4, 0x2c, 0x29, 0xc4,
3671 0xa6, 0x8d, 0x8d, 0x9d ),
3672 AUTH ( 0xdc, 0x48, 0x1f, 0x17, 0x25, 0x45, 0x26, 0x8e, 0xff, 0x63,
3673 0xab, 0x04, 0x90, 0x40, 0x3d, 0xc3 ) );
3674
3675/* AES-GCM test case 161 */
3676CIPHER_TEST ( wycheproof_aes_gcm_5fc2c3a4, &aes_gcm_algorithm,
3677 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3678 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3679 0x54, 0x65, 0x76, 0x87 ),
3680 IV ( 0x20, 0xd5, 0xcf, 0x30, 0x5e, 0x63, 0x0a, 0x8f, 0x49, 0xe3,
3681 0xbb, 0x4b, 0xab, 0x18, 0xab, 0xc9 ),
3682 ADDITIONAL(),
3683 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3684 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3685 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3686 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3687 0x00, 0x00, 0x00, 0x00 ),
3688 CIPHERTEXT ( 0x96, 0xd3, 0x6b, 0x79, 0x5f, 0x8e, 0x7e, 0xdf, 0x6a,
3689 0x8e, 0x0d, 0xbc, 0xd2, 0x0d, 0x6c, 0x07, 0x2a, 0x81,
3690 0x88, 0x88, 0xd1, 0xf0, 0x9f, 0x32, 0xaa, 0x7b, 0xee,
3691 0xdd, 0x28, 0x69, 0xb4, 0x46, 0x57, 0x5e, 0x2e, 0xce,
3692 0xc2, 0xb3, 0xc7, 0x2d ),
3693 AUTH ( 0x8a, 0x3a, 0x22, 0xbf, 0x25, 0x92, 0x95, 0x8b, 0x93, 0x02,
3694 0x92, 0xaa, 0x47, 0xf5, 0x90, 0xe8 ) );
3695
3696/* AES-GCM test case 162 */
3697CIPHER_TEST ( wycheproof_aes_gcm_c73596ff, &aes_gcm_algorithm,
3698 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3699 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3700 0x54, 0x65, 0x76, 0x87 ),
3701 IV ( 0x25, 0x53, 0x58, 0xa7, 0x1a, 0x0e, 0x57, 0x31, 0xf6, 0xdd,
3702 0x6c, 0xe2, 0x8e, 0x15, 0x8a, 0xe6 ),
3703 ADDITIONAL(),
3704 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3705 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3706 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3707 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3708 0x00, 0x00, 0x00, 0x00 ),
3709 CIPHERTEXT ( 0xcf, 0xce, 0x3d, 0x92, 0x0f, 0x0e, 0x01, 0xf0, 0xbb,
3710 0x49, 0xa7, 0x51, 0x95, 0x5b, 0x23, 0x6d, 0x1b, 0x88,
3711 0x7b, 0xae, 0xfd, 0x25, 0xc4, 0x7f, 0x41, 0x30, 0x3c,
3712 0x46, 0xd5, 0xc7, 0xbf, 0x9c, 0xa4, 0xc2, 0xc4, 0x5a,
3713 0x8f, 0x1e, 0x66, 0x56 ),
3714 AUTH ( 0x2d, 0xb9, 0xdc, 0x1b, 0x7f, 0xd3, 0x15, 0xdf, 0x1c, 0x95,
3715 0x43, 0x24, 0x32, 0xfc, 0xf4, 0x74 ) );
3716
3717/* AES-GCM test case 163 */
3718CIPHER_TEST ( wycheproof_aes_gcm_8b84b201, &aes_gcm_algorithm,
3719 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3720 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3721 0x54, 0x65, 0x76, 0x87 ),
3722 IV ( 0xbb, 0x76, 0xe4, 0x22, 0xbb, 0xe8, 0xbb, 0xe6, 0x82, 0xa1,
3723 0x0b, 0xe4, 0xbd, 0xd6, 0xce, 0x1c ),
3724 ADDITIONAL(),
3725 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3726 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3727 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3728 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3729 0x00, 0x00, 0x00, 0x00 ),
3730 CIPHERTEXT ( 0x69, 0xa2, 0x41, 0x69, 0x79, 0x2e, 0x9a, 0x07, 0xf6,
3731 0xe6, 0xf4, 0x73, 0x6f, 0xa9, 0x72, 0xdc, 0xcf, 0xce,
3732 0x3d, 0x92, 0x0f, 0x0e, 0x01, 0xf0, 0xbb, 0x49, 0xa7,
3733 0x51, 0x95, 0x5b, 0x23, 0x6d, 0x1b, 0x88, 0x7b, 0xae,
3734 0xfd, 0x25, 0xc4, 0x7f ),
3735 AUTH ( 0x82, 0xad, 0x96, 0x7f, 0x7a, 0xc1, 0x90, 0x84, 0x35, 0x4f,
3736 0x69, 0xa7, 0x51, 0x44, 0x3f, 0xb2 ) );
3737
3738/* AES-GCM test case 164 */
3739CIPHER_TEST ( wycheproof_aes_gcm_077de8ed, &aes_gcm_algorithm,
3740 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3741 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3742 0x54, 0x65, 0x76, 0x87 ),
3743 IV ( 0xdb, 0x18, 0x21, 0xac, 0x59, 0xc3, 0x8e, 0x9f, 0x1e, 0x25,
3744 0xa2, 0xee, 0xe9, 0x93, 0x03, 0x13 ),
3745 ADDITIONAL(),
3746 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3747 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3748 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3749 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3750 0x00, 0x00, 0x00, 0x00 ),
3751 CIPHERTEXT ( 0x4e, 0x44, 0x17, 0xa8, 0x3b, 0xea, 0xc1, 0xeb, 0x7e,
3752 0x24, 0x45, 0x6a, 0x05, 0xf6, 0xba, 0x55, 0x69, 0xa2,
3753 0x41, 0x69, 0x79, 0x2e, 0x9a, 0x07, 0xf6, 0xe6, 0xf4,
3754 0x73, 0x6f, 0xa9, 0x72, 0xdc, 0xcf, 0xce, 0x3d, 0x92,
3755 0x0f, 0x0e, 0x01, 0xf0 ),
3756 AUTH ( 0x47, 0x2d, 0x5d, 0xd5, 0x82, 0xdc, 0x05, 0xef, 0x5f, 0xc4,
3757 0x96, 0xb6, 0x12, 0x02, 0x3c, 0xb2 ) );
3758
3759/* AES-GCM test case 165 */
3760CIPHER_TEST ( wycheproof_aes_gcm_8895d57d, &aes_gcm_algorithm,
3761 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3762 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3763 0x54, 0x65, 0x76, 0x87 ),
3764 IV ( 0xf7, 0xa0, 0x2e, 0xcc, 0xa0, 0x30, 0x64, 0xb2, 0xef, 0x3c,
3765 0xce, 0x9f, 0xea, 0xb7, 0x9f, 0x07 ),
3766 ADDITIONAL(),
3767 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3768 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3769 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3770 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3771 0x00, 0x00, 0x00, 0x00 ),
3772 CIPHERTEXT ( 0x6f, 0x8e, 0x17, 0x4e, 0xfc, 0xa3, 0x09, 0x72, 0x99,
3773 0xf7, 0x84, 0xef, 0xd4, 0xca, 0xff, 0x0b, 0xf1, 0x68,
3774 0xc3, 0xe5, 0x16, 0x5b, 0x9a, 0xd3, 0xd2, 0x00, 0x62,
3775 0x00, 0x98, 0x48, 0x04, 0x4e, 0xef, 0x8f, 0x31, 0xf7,
3776 0xd2, 0xfe, 0xad, 0x05 ),
3777 AUTH ( 0xca, 0xff, 0x72, 0x38, 0x26, 0xdf, 0x15, 0x09, 0x34, 0xae,
3778 0xe3, 0x20, 0x1b, 0xa1, 0x75, 0xe7 ) );
3779
3780/* AES-GCM test case 166 */
3781CIPHER_TEST ( wycheproof_aes_gcm_bca38eea, &aes_gcm_algorithm,
3782 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3783 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3784 0x54, 0x65, 0x76, 0x87 ),
3785 IV ( 0x69, 0x85, 0x92, 0x49, 0x01, 0xd6, 0x88, 0x65, 0x9b, 0x40,
3786 0xa9, 0x99, 0xd9, 0x74, 0xdb, 0xfd ),
3787 ADDITIONAL(),
3788 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3789 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3790 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3791 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3792 0x00, 0x00, 0x00, 0x00 ),
3793 CIPHERTEXT ( 0xaf, 0x19, 0x30, 0x90, 0xce, 0x3d, 0x43, 0xa3, 0x88,
3794 0xa1, 0xd2, 0x94, 0xa0, 0x96, 0x16, 0x90, 0x6f, 0x8e,
3795 0x17, 0x4e, 0xfc, 0xa3, 0x09, 0x72, 0x99, 0xf7, 0x84,
3796 0xef, 0xd4, 0xca, 0xff, 0x0b, 0xf1, 0x68, 0xc3, 0xe5,
3797 0x16, 0x5b, 0x9a, 0xd3 ),
3798 AUTH ( 0x3b, 0x08, 0x95, 0x8b, 0xe1, 0x28, 0x6c, 0x2b, 0x4a, 0xcb,
3799 0xa0, 0x2b, 0x36, 0x74, 0xad, 0xb2 ) );
3800
3801/* AES-GCM test case 167 */
3802CIPHER_TEST ( wycheproof_aes_gcm_e281bdf1, &aes_gcm_algorithm,
3803 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3804 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3805 0x54, 0x65, 0x76, 0x87 ),
3806 IV ( 0x3f, 0x11, 0x88, 0x54, 0x6c, 0x65, 0xed, 0x0f, 0xc5, 0x5e,
3807 0x75, 0x03, 0x2c, 0x68, 0xee, 0x44 ),
3808 ADDITIONAL(),
3809 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3810 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3811 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3812 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3813 0x00, 0x00, 0x00, 0x00 ),
3814 CIPHERTEXT ( 0x5d, 0xec, 0xcf, 0x83, 0x8b, 0x2c, 0xf5, 0xf8, 0x69,
3815 0xc9, 0x0d, 0x2a, 0x61, 0x11, 0x60, 0xb1, 0xe5, 0x78,
3816 0xab, 0x81, 0x21, 0xb9, 0x37, 0x35, 0xcb, 0xa4, 0xa1,
3817 0x93, 0x06, 0x47, 0xb8, 0xc4, 0xc8, 0x4b, 0xf7, 0x76,
3818 0x33, 0x3e, 0xe4, 0x5a ),
3819 AUTH ( 0xc1, 0x4d, 0x52, 0x20, 0x8f, 0x0f, 0x51, 0xb8, 0x16, 0xa4,
3820 0x89, 0x71, 0xea, 0xf8, 0xff, 0x7e ) );
3821
3822/* AES-GCM test case 168 */
3823CIPHER_TEST ( wycheproof_aes_gcm_09e34ed6, &aes_gcm_algorithm,
3824 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3825 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3826 0x54, 0x65, 0x76, 0x87 ),
3827 IV ( 0xa1, 0x34, 0x34, 0xd1, 0xcd, 0x83, 0x01, 0xd8, 0xb1, 0x22,
3828 0x12, 0x05, 0x1f, 0xab, 0xaa, 0xbe ),
3829 ADDITIONAL(),
3830 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3831 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3832 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3833 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3834 0x00, 0x00, 0x00, 0x00 ),
3835 CIPHERTEXT ( 0xd2, 0xca, 0xe1, 0x68, 0x4a, 0xa4, 0x07, 0xa1, 0x3a,
3836 0x2e, 0x2d, 0xa5, 0x35, 0x7e, 0x29, 0xf5, 0x5d, 0xec,
3837 0xcf, 0x83, 0x8b, 0x2c, 0xf5, 0xf8, 0x69, 0xc9, 0x0d,
3838 0x2a, 0x61, 0x11, 0x60, 0xb1, 0xe5, 0x78, 0xab, 0x81,
3839 0x21, 0xb9, 0x37, 0x35 ),
3840 AUTH ( 0xea, 0x2d, 0x01, 0x80, 0x99, 0xcd, 0x79, 0x25, 0xc5, 0x07,
3841 0xce, 0xf0, 0xce, 0xdd, 0xb0, 0xae ) );
3842
3843/* AES-GCM test case 169 */
3844CIPHER_TEST ( wycheproof_aes_gcm_a20bd785, &aes_gcm_algorithm,
3845 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3846 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3847 0x54, 0x65, 0x76, 0x87 ),
3848 IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3849 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),
3850 ADDITIONAL(),
3851 PLAINTEXT ( 0x5c, 0x7d, 0x3f, 0x81, 0xd4, 0xb5, 0x05, 0x5e, 0xd6,
3852 0xf8, 0xdb, 0x53, 0x61, 0x45, 0x87, 0xa4 ),
3853 CIPHERTEXT ( 0x54, 0x1b, 0x83, 0x5d, 0xc8, 0x28, 0xd5, 0x41, 0x07,
3854 0x3f, 0x7d, 0x7d, 0x75, 0x04, 0xeb, 0xf5 ),
3855 AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3856 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
3857
3858/* AES-GCM test case 170 */
3859CIPHER_TEST ( wycheproof_aes_gcm_4d3c95a4, &aes_gcm_algorithm,
3860 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3861 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3862 0x54, 0x65, 0x76, 0x87 ),
3863 IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
3864 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ),
3865 ADDITIONAL(),
3866 PLAINTEXT ( 0x6a, 0x34, 0x7a, 0xd1, 0x19, 0x0e, 0x72, 0xed, 0xe6,
3867 0x11, 0x04, 0x4e, 0x74, 0x75, 0xf0, 0xeb ),
3868 CIPHERTEXT ( 0xa3, 0xf3, 0x61, 0x54, 0x33, 0x1c, 0x19, 0x66, 0x24,
3869 0x56, 0x4b, 0xc3, 0x95, 0xe4, 0x9c, 0x3b ),
3870 AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
3871 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
3872
3873/* AES-GCM test case 171 */
3874CIPHER_TEST ( wycheproof_aes_gcm_fdf02744, &aes_gcm_algorithm,
3875 KEY ( 0xfa, 0xe2, 0xa1, 0x41, 0x97, 0xc7, 0xd1, 0x14, 0x00, 0x61,
3876 0xfe, 0x7c, 0x3d, 0x11, 0xd9, 0xf7, 0x7c, 0x79, 0x56, 0x2e,
3877 0x35, 0x93, 0xa9, 0x9b ),
3878 IV ( 0xbc, 0x28, 0x43, 0x39, 0x53, 0x77, 0x2d, 0x57, 0xbb, 0xd9,
3879 0x33, 0x10, 0x0c, 0xd4, 0x7a, 0x56 ),
3880 ADDITIONAL(),
3881 PLAINTEXT(),
3882 CIPHERTEXT(),
3883 AUTH ( 0x1b, 0xb9, 0x43, 0x31, 0xf2, 0x6c, 0xad, 0x24, 0x03, 0x6c,
3884 0xfe, 0xff, 0x34, 0xb8, 0x9a, 0xaf ) );
3885
3886/* AES-GCM test case 172 */
3887CIPHER_TEST ( wycheproof_aes_gcm_19fae6ad, &aes_gcm_algorithm,
3888 KEY ( 0xce, 0xe9, 0xab, 0xbc, 0x26, 0xb6, 0x3e, 0x16, 0x9f, 0x0c,
3889 0xed, 0x62, 0x1f, 0xe2, 0x1d, 0x95, 0x90, 0x4e, 0x75, 0xb8,
3890 0x81, 0xd9, 0x3e, 0x6b ),
3891 IV ( 0x1e, 0x82, 0x59, 0xe0, 0xa4, 0x3e, 0x57, 0x10, 0x68, 0xf7,
3892 0x01, 0xcd, 0x20, 0x64, 0xfc, 0x0c ),
3893 ADDITIONAL(),
3894 PLAINTEXT ( 0x46 ),
3895 CIPHERTEXT ( 0xdc ),
3896 AUTH ( 0xaf, 0x1f, 0x55, 0x35, 0xb1, 0x25, 0xb3, 0x4f, 0xc4, 0x66,
3897 0x90, 0x2e, 0xa4, 0x0c, 0xb3, 0xa2 ) );
3898
3899/* AES-GCM test case 173 */
3900CIPHER_TEST ( wycheproof_aes_gcm_de129db1, &aes_gcm_algorithm,
3901 KEY ( 0x18, 0x9f, 0x0b, 0xd3, 0x90, 0xba, 0x40, 0x63, 0x25, 0x86,
3902 0xa4, 0x5c, 0x39, 0x73, 0x5c, 0x2b, 0x87, 0x11, 0x33, 0x29,
3903 0xc8, 0x00, 0xf3, 0x94 ),
3904 IV ( 0xc8, 0x44, 0x42, 0xd6, 0x97, 0x5f, 0x03, 0x59, 0x73, 0x7d,
3905 0xe0, 0xfa, 0x82, 0x8f, 0x95, 0x8e ),
3906 ADDITIONAL(),
3907 PLAINTEXT ( 0xb4, 0xbc, 0xd7, 0xb8, 0xee, 0xca, 0x30, 0x50, 0xdd,
3908 0x17, 0x68, 0x2c, 0x6a, 0x91, 0x4e ),
3909 CIPHERTEXT ( 0x2a, 0xab, 0x5c, 0x87, 0xdc, 0xb4, 0xa4, 0xda, 0xe4,
3910 0xe9, 0x75, 0xdd, 0xb6, 0x5a, 0xab ),
3911 AUTH ( 0x6b, 0x03, 0xb7, 0x55, 0x7c, 0x71, 0x31, 0xe2, 0x35, 0x2e,
3912 0x49, 0x5d, 0x54, 0xe6, 0x1a, 0xef ) );
3913
3914/* AES-GCM test case 174 */
3915CIPHER_TEST ( wycheproof_aes_gcm_1d084de2, &aes_gcm_algorithm,
3916 KEY ( 0xb0, 0x72, 0x4f, 0x15, 0xdf, 0x5b, 0x79, 0x2c, 0x2f, 0x49,
3917 0xbc, 0x51, 0xdf, 0x0a, 0xc5, 0xaa, 0xd6, 0x9b, 0xe0, 0x03,
3918 0x09, 0x81, 0x61, 0x3c ),
3919 IV ( 0x13, 0xcd, 0x52, 0x6e, 0xc7, 0x7b, 0x58, 0xf6, 0x2d, 0x48,
3920 0xd0, 0x3f, 0x8b, 0x88, 0xf2, 0xb8 ),
3921 ADDITIONAL(),
3922 PLAINTEXT ( 0x8d, 0xa3, 0xab, 0x9c, 0x3d, 0x19, 0x5b, 0x04, 0xdf,
3923 0x45, 0x2a, 0xd2, 0x39, 0x53, 0xda, 0x4d ),
3924 CIPHERTEXT ( 0xd1, 0x27, 0xfd, 0x2e, 0x67, 0xc0, 0x88, 0x7d, 0x90,
3925 0xeb, 0x92, 0xb9, 0x1f, 0x35, 0x7d, 0x97 ),
3926 AUTH ( 0xeb, 0x05, 0xbd, 0xa9, 0x37, 0xfa, 0xee, 0xd2, 0x7f, 0x88,
3927 0x33, 0x29, 0x5d, 0x4b, 0xa5, 0x59 ) );
3928
3929/* AES-GCM test case 175 */
3930CIPHER_TEST ( wycheproof_aes_gcm_a5bb8fa1, &aes_gcm_algorithm,
3931 KEY ( 0x99, 0x87, 0x50, 0xba, 0x78, 0x48, 0x41, 0xe4, 0x0a, 0x7c,
3932 0x5b, 0x03, 0x98, 0x57, 0x32, 0xb6, 0x39, 0x7e, 0x54, 0x59,
3933 0xa3, 0x84, 0x39, 0x54 ),
3934 IV ( 0x1d, 0x3d, 0x62, 0xec, 0xcd, 0x8a, 0xc5, 0xe8, 0x96, 0xf2,
3935 0x65, 0x4a, 0x7f, 0x60, 0x6f, 0xc9 ),
3936 ADDITIONAL(),
3937 PLAINTEXT ( 0x2f, 0x60, 0xca, 0x34, 0x94, 0xa9, 0x58, 0xdc, 0x3e,
3938 0x6e, 0xbe, 0xb5, 0xd0, 0xb4, 0xe6, 0xdd, 0xa0, 0xd0,
3939 0xc4, 0x33, 0x1a, 0xb9, 0xc9, 0x57, 0xf6, 0x42, 0x2a,
3940 0x51, 0x00, 0x87, 0x8e, 0xbf ),
3941 CIPHERTEXT ( 0x34, 0x4c, 0x2c, 0xea, 0x17, 0xb0, 0x6c, 0xb3, 0xda,
3942 0x27, 0x2e, 0x22, 0xa2, 0x2a, 0x3a, 0x71, 0xee, 0x0e,
3943 0xaa, 0x19, 0x59, 0xa7, 0xfa, 0xcf, 0xff, 0x46, 0x46,
3944 0x60, 0xdd, 0xcc, 0xed, 0xd1 ),
3945 AUTH ( 0xba, 0xb7, 0xfb, 0xf4, 0x99, 0xff, 0x06, 0xaa, 0xd5, 0xf7,
3946 0x57, 0xb1, 0xc1, 0xa4, 0xfc, 0xc0 ) );
3947
3948/* AES-GCM test case 176 */
3949CIPHER_TEST ( wycheproof_aes_gcm_94e6bc4f, &aes_gcm_algorithm,
3950 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3951 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3952 0x54, 0x65, 0x76, 0x87 ),
3953 IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3954 0x00, 0x00 ),
3955 ADDITIONAL(),
3956 PLAINTEXT ( 0x0b, 0x4d, 0xbb, 0xba, 0x89, 0x82, 0xe0, 0xf6, 0x49,
3957 0xf8, 0xba, 0x85, 0xf3, 0xaa, 0x06, 0x1b ),
3958 CIPHERTEXT ( 0x3f, 0x87, 0x5c, 0x9b, 0xd7, 0xd8, 0x51, 0x14, 0x48,
3959 0x45, 0x94, 0x68, 0xe3, 0x98, 0xc3, 0xb2 ),
3960 AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
3961 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
3962
3963/* AES-GCM test case 177 */
3964CIPHER_TEST ( wycheproof_aes_gcm_10226199, &aes_gcm_algorithm,
3965 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
3966 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
3967 0x54, 0x65, 0x76, 0x87 ),
3968 IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
3969 0xff, 0xff ),
3970 ADDITIONAL(),
3971 PLAINTEXT ( 0x1a, 0xe9, 0x36, 0x88, 0xef, 0x7e, 0x26, 0x50, 0xa9,
3972 0x34, 0x2a, 0xd4, 0x71, 0x8b, 0x27, 0x80 ),
3973 CIPHERTEXT ( 0x21, 0x0d, 0xab, 0xea, 0x43, 0x64, 0xc6, 0xd5, 0xb3,
3974 0x42, 0x9e, 0x77, 0x43, 0x32, 0x29, 0x36 ),
3975 AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
3976 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
3977
3978/* AES-GCM test case 178 */
3979CIPHER_TEST ( wycheproof_aes_gcm_0b1e8b5b, &aes_gcm_algorithm,
3980 KEY ( 0x50, 0x19, 0xeb, 0x9f, 0xef, 0x82, 0xe5, 0x75, 0x0b, 0x63,
3981 0x17, 0x58, 0xf0, 0x21, 0x3e, 0x3e, 0x5f, 0xcc, 0xa1, 0x27,
3982 0x48, 0xb4, 0x0e, 0xb4 ),
3983 IV ( 0xff, 0x0d, 0xdb, 0x0a, 0x0d, 0x7b, 0x36, 0xd2, 0x19, 0xda,
3984 0x12, 0xb5 ),
3985 ADDITIONAL(),
3986 PLAINTEXT(),
3987 CIPHERTEXT(),
3988 AUTH ( 0x79, 0x71, 0x28, 0x4e, 0x6c, 0x9e, 0x6a, 0xac, 0x34, 0x6f,
3989 0xe2, 0xb7, 0xa0, 0xa0, 0x64, 0xc2 ) );
3990
3991/* AES-GCM test case 179 */
3992CIPHER_TEST ( wycheproof_aes_gcm_96e5612f, &aes_gcm_algorithm,
3993 KEY ( 0x21, 0x21, 0x8a, 0xf7, 0x90, 0x42, 0x8f, 0x80, 0x24, 0xd3,
3994 0xe7, 0xe1, 0x42, 0x8c, 0x9f, 0xcf, 0x57, 0x8c, 0x21, 0x66,
3995 0x36, 0xd6, 0x0e, 0x73 ),
3996 IV ( 0x34, 0x04, 0x7b, 0xc3, 0x9b, 0x9c, 0x60, 0x83, 0x84, 0xdf,
3997 0xf5, 0xb8 ),
3998 ADDITIONAL(),
3999 PLAINTEXT ( 0xe3 ),
4000 CIPHERTEXT ( 0xfe ),
4001 AUTH ( 0x2e, 0x98, 0x2e, 0x24, 0xb8, 0x1c, 0xd1, 0x20, 0xd3, 0x5a,
4002 0x70, 0xfe, 0x69, 0x35, 0xe6, 0x65 ) );
4003
4004/* AES-GCM test case 180 */
4005CIPHER_TEST ( wycheproof_aes_gcm_2e57ea6b, &aes_gcm_algorithm,
4006 KEY ( 0x3a, 0x8b, 0xf5, 0x43, 0xc4, 0x80, 0x92, 0x56, 0x32, 0x11,
4007 0x82, 0x45, 0xbc, 0xbf, 0x5d, 0x01, 0x52, 0x2b, 0x98, 0x7a,
4008 0x31, 0xa3, 0x3d, 0xa3 ),
4009 IV ( 0x4e, 0xbc, 0x13, 0xcf, 0x46, 0x36, 0xcc, 0x7c, 0x45, 0xe5,
4010 0x60, 0xa7 ),
4011 ADDITIONAL(),
4012 PLAINTEXT ( 0x53, 0xfc, 0x72, 0xe7, 0x1b, 0x59, 0xee, 0xb3 ),
4013 CIPHERTEXT ( 0x99, 0xf2, 0xff, 0x1c, 0x8a, 0x44, 0xe5, 0xf2 ),
4014 AUTH ( 0x68, 0x70, 0xf1, 0x04, 0xdd, 0xc5, 0x14, 0x47, 0x7b, 0x40,
4015 0x03, 0x36, 0xfb, 0x01, 0x86, 0x0e ) );
4016
4017/* AES-GCM test case 181 */
4018CIPHER_TEST ( wycheproof_aes_gcm_08c164fc, &aes_gcm_algorithm,
4019 KEY ( 0x92, 0xf4, 0xd2, 0x67, 0x2f, 0xce, 0xec, 0x43, 0x96, 0x3c,
4020 0xcf, 0xfb, 0x17, 0xe6, 0xea, 0x75, 0x78, 0xb1, 0x14, 0x18,
4021 0xb0, 0x6a, 0x3b, 0x82 ),
4022 IV ( 0x6e, 0x7f, 0xf7, 0xf0, 0x79, 0x76, 0x85, 0xcf, 0xc4, 0x4b,
4023 0x05, 0xff ),
4024 ADDITIONAL(),
4025 PLAINTEXT ( 0xc3, 0xec, 0x16, 0xad, 0xb1, 0x84, 0xaf, 0xfa, 0x8a,
4026 0xe9, 0x73, 0x8b, 0xff, 0xb9, 0x16 ),
4027 CIPHERTEXT ( 0xaf, 0xe8, 0xef, 0x41, 0x59, 0x1b, 0xfc, 0xc0, 0x0d,
4028 0xb3, 0xc8, 0x80, 0xce, 0xb1, 0x86 ),
4029 AUTH ( 0x29, 0xff, 0xf7, 0xf2, 0x85, 0x76, 0x86, 0x45, 0xc9, 0xc8,
4030 0xbf, 0x7a, 0x47, 0x1c, 0x93, 0x93 ) );
4031
4032/* AES-GCM test case 182 */
4033CIPHER_TEST ( wycheproof_aes_gcm_19c96e4e, &aes_gcm_algorithm,
4034 KEY ( 0xbc, 0xb6, 0xbc, 0x5e, 0xe6, 0x74, 0x3d, 0xf1, 0x39, 0x6a,
4035 0x34, 0x63, 0x93, 0x27, 0xb2, 0x58, 0x09, 0xec, 0x9c, 0x81,
4036 0xdd, 0x6a, 0x0c, 0x0e ),
4037 IV ( 0xbe, 0x03, 0x26, 0xd2, 0x3b, 0xdc, 0x2c, 0x64, 0x64, 0x8d,
4038 0x13, 0xf4 ),
4039 ADDITIONAL(),
4040 PLAINTEXT ( 0x80, 0x47, 0x4a, 0x3a, 0x3b, 0x80, 0x95, 0x60, 0xee,
4041 0xe2, 0xce, 0x7a, 0x7a, 0x33, 0xea, 0x07 ),
4042 CIPHERTEXT ( 0x90, 0x33, 0x9d, 0xca, 0x02, 0xef, 0x71, 0x7f, 0x16,
4043 0x03, 0x99, 0x4a, 0xee, 0x6c, 0xf6, 0xd2 ),
4044 AUTH ( 0xe3, 0xd3, 0x3e, 0x01, 0xce, 0x64, 0xf2, 0x71, 0x78, 0x31,
4045 0x47, 0xde, 0x22, 0x62, 0x28, 0xbc ) );
4046
4047/* AES-GCM test case 183 */
4048CIPHER_TEST ( wycheproof_aes_gcm_63801d8f, &aes_gcm_algorithm,
4049 KEY ( 0x5e, 0x1d, 0x28, 0x21, 0x3e, 0x09, 0x25, 0x36, 0x52, 0x5b,
4050 0xba, 0xe0, 0x9e, 0x21, 0x4a, 0xf4, 0xc8, 0x91, 0xe2, 0x02,
4051 0xb2, 0xb4, 0xfa, 0x4f ),
4052 IV ( 0xb6, 0xbe, 0x6c, 0xd0, 0x68, 0x12, 0x35, 0xd8, 0x26, 0xaa,
4053 0x28, 0xea ),
4054 ADDITIONAL(),
4055 PLAINTEXT ( 0x53, 0xd5, 0x94, 0x33, 0xa7, 0xdb, 0x7f, 0x41, 0xb3,
4056 0x1c, 0xcb, 0x6d, 0x4a, 0x2d, 0x78, 0x99, 0x65 ),
4057 CIPHERTEXT ( 0xb9, 0x8e, 0xd6, 0x32, 0x16, 0x79, 0x94, 0x1a, 0x3e,
4058 0x52, 0x18, 0x34, 0x29, 0x66, 0x86, 0xad, 0x98 ),
4059 AUTH ( 0x9f, 0x50, 0xc0, 0x3e, 0x05, 0x5e, 0x51, 0x97, 0x12, 0xc5,
4060 0x82, 0xec, 0x9d, 0xb3, 0x23, 0x5b ) );
4061
4062/* AES-GCM test case 184 */
4063CIPHER_TEST ( wycheproof_aes_gcm_3d467b77, &aes_gcm_algorithm,
4064 KEY ( 0x7f, 0x67, 0x2d, 0x85, 0xe1, 0x51, 0xaa, 0x49, 0x0b, 0xc0,
4065 0xee, 0xc8, 0xf6, 0x6b, 0x5e, 0x5b, 0xee, 0x74, 0xaf, 0x11,
4066 0x64, 0x2b, 0xe3, 0xff ),
4067 IV ( 0xb0, 0x22, 0x06, 0x70, 0x48, 0x50, 0x5b, 0x20, 0x94, 0x62,
4068 0x16, 0xef ),
4069 ADDITIONAL(),
4070 PLAINTEXT ( 0xef, 0x64, 0x12, 0xc7, 0x2b, 0x03, 0xc6, 0x43, 0xfa,
4071 0x02, 0x56, 0x5a, 0x0a, 0xe2, 0x37, 0x8a, 0x93, 0x11,
4072 0xc1, 0x1a, 0x84, 0x06, 0x5f, 0x80 ),
4073 CIPHERTEXT ( 0xad, 0xdd, 0x30, 0x36, 0x51, 0x11, 0x9e, 0x52, 0xf6,
4074 0x17, 0x0d, 0xfc, 0x7a, 0x91, 0x50, 0x64, 0x25, 0x3d,
4075 0x57, 0x53, 0x29, 0x87, 0xb9, 0xab ),
4076 AUTH ( 0xfa, 0x04, 0x84, 0xf8, 0xba, 0xa9, 0x5f, 0x5b, 0x7a, 0x31,
4077 0xc5, 0x6d, 0x1b, 0x34, 0xc5, 0x8b ) );
4078
4079/* AES-GCM test case 185 */
4080CIPHER_TEST ( wycheproof_aes_gcm_566b5fcd, &aes_gcm_algorithm,
4081 KEY ( 0x96, 0x9f, 0xed, 0x50, 0x68, 0x54, 0x1d, 0x65, 0x41, 0x8c,
4082 0x2c, 0x1d, 0xe8, 0xfe, 0x1f, 0x84, 0x5e, 0x03, 0x60, 0x30,
4083 0x49, 0x6e, 0x12, 0x72 ),
4084 IV ( 0x81, 0x7f, 0xe5, 0x1c, 0x31, 0xf2, 0x87, 0x91, 0x41, 0xa3,
4085 0x43, 0x35 ),
4086 ADDITIONAL ( 0xcb ),
4087 PLAINTEXT ( 0x3d, 0x82, 0x33, 0x19, 0x1a, 0x28, 0x23, 0xbf, 0x76,
4088 0x7e, 0x99, 0x16, 0x7b, 0x1d, 0x4a, 0xf4, 0xf4, 0x84,
4089 0x84, 0x58 ),
4090 CIPHERTEXT ( 0x0d, 0x2c, 0x3a, 0x3c, 0x0c, 0xc4, 0xb4, 0x0e, 0x70,
4091 0xed, 0x45, 0xe1, 0x88, 0xe3, 0x56, 0xa0, 0xe1, 0x53,
4092 0x3b, 0x31 ),
4093 AUTH ( 0x92, 0x90, 0x9a, 0x80, 0xe9, 0x05, 0x40, 0xe1, 0x87, 0x8a,
4094 0xb5, 0x9e, 0xf3, 0x00, 0x07, 0x2b ) );
4095
4096/* AES-GCM test case 186 */
4097CIPHER_TEST ( wycheproof_aes_gcm_39054267, &aes_gcm_algorithm,
4098 KEY ( 0xfa, 0x5b, 0x9b, 0x41, 0xf9, 0x3f, 0x8b, 0x68, 0x2c, 0x04,
4099 0xba, 0x81, 0x6c, 0x3f, 0xec, 0xc2, 0x4e, 0xec, 0x09, 0x5b,
4100 0x04, 0xdd, 0x74, 0x97 ),
4101 IV ( 0x62, 0xb9, 0xcf, 0x1e, 0x92, 0x3b, 0xc1, 0x13, 0x8d, 0x05,
4102 0xd2, 0x05 ),
4103 ADDITIONAL ( 0x2e, 0xd8, 0x48, 0x71, 0x53, 0xe2, 0x1b, 0x12 ),
4104 PLAINTEXT ( 0x18, 0x15, 0x98, 0x41, 0x81, 0x3a, 0x69, 0xfc, 0x0f,
4105 0x8f, 0x42, 0x29, 0xe1, 0x67, 0x8d, 0xa7, 0xc9, 0x01,
4106 0x67, 0x11 ),
4107 CIPHERTEXT ( 0xc7, 0xc1, 0xcb, 0xb8, 0x5c, 0xe2, 0xa0, 0xa3, 0xf3,
4108 0x2c, 0xb9, 0xef, 0x01, 0xad, 0x45, 0xec, 0x11, 0x18,
4109 0xb6, 0x6d ),
4110 AUTH ( 0x25, 0x33, 0x17, 0xf9, 0x8b, 0xda, 0xb8, 0x75, 0x31, 0xec,
4111 0xe2, 0x04, 0x75, 0xcd, 0x9e, 0xbb ) );
4112
4113/* AES-GCM test case 187 */
4114CIPHER_TEST ( wycheproof_aes_gcm_99c80b8d, &aes_gcm_algorithm,
4115 KEY ( 0xfb, 0xfb, 0x39, 0x56, 0x62, 0x78, 0x7e, 0x2d, 0x25, 0xa2,
4116 0xe7, 0x51, 0x0f, 0x81, 0x8e, 0x82, 0x59, 0x36, 0xa3, 0x51,
4117 0x14, 0xe2, 0x37, 0xc9 ),
4118 IV ( 0x3f, 0x1a, 0x1e, 0x02, 0xe9, 0x0a, 0x4b, 0xa7, 0xa1, 0xdb,
4119 0x9d, 0xf2 ),
4120 ADDITIONAL ( 0x74, 0x31, 0x8d, 0x88, 0x76, 0x52, 0x82, 0x43, 0xf1,
4121 0x94, 0x4b, 0x73, 0xeb, 0x77, 0xe9, 0x6e ),
4122 PLAINTEXT ( 0x29, 0x52, 0xa3, 0xd6, 0x41, 0x07, 0xd5, 0xcb, 0xb9,
4123 0x60, 0x22, 0x39, 0xd0, 0x5a, 0x5c, 0x5c, 0x22, 0x2c,
4124 0xf7, 0x2b ),
4125 CIPHERTEXT ( 0xec, 0xf5, 0xe4, 0x03, 0xf1, 0x9c, 0x00, 0x7c, 0x8d,
4126 0xa7, 0xa4, 0x56, 0xca, 0xf0, 0xa6, 0xd7, 0x57, 0x62,
4127 0x82, 0x9b ),
4128 AUTH ( 0xe0, 0x87, 0x7a, 0x10, 0x0f, 0x9d, 0xd9, 0xd6, 0x79, 0x5f,
4129 0x0e, 0x74, 0xc5, 0x6a, 0x9f, 0xab ) );
4130
4131/* AES-GCM test case 188 */
4132CIPHER_TEST ( wycheproof_aes_gcm_c40c4226, &aes_gcm_algorithm,
4133 KEY ( 0x5d, 0x8e, 0x9c, 0x22, 0x22, 0x31, 0x6c, 0x9e, 0xd5, 0xff,
4134 0x94, 0x51, 0x3c, 0xc9, 0x57, 0x43, 0x6a, 0xe4, 0x47, 0xa6,
4135 0xe1, 0xa7, 0x3a, 0x29 ),
4136 IV ( 0x08, 0x02, 0xae, 0x86, 0xc7, 0x5a, 0x73, 0xbf, 0x79, 0x56,
4137 0x15, 0x21 ),
4138 ADDITIONAL ( 0x5c, 0xa3, 0x54, 0xa4, 0xcb, 0x8e, 0x4f, 0xc9, 0x79,
4139 0x8a, 0xa2, 0x09, 0xad, 0x4f, 0x73, 0x9d, 0xc7, 0xc2,
4140 0x32, 0xfd, 0xd1, 0xf2, 0x25, 0x84 ),
4141 PLAINTEXT ( 0x42, 0xb4, 0x43, 0x9e, 0x1d, 0x21, 0x16, 0xf8, 0x34,
4142 0xb9, 0x1c, 0x51, 0x6a, 0x26, 0x29, 0x9d, 0xf2, 0x79,
4143 0x95, 0x6b ),
4144 CIPHERTEXT ( 0x94, 0xd8, 0x44, 0xd9, 0x8b, 0x94, 0x67, 0xda, 0xa7,
4145 0xe8, 0xdd, 0xe7, 0xf4, 0x29, 0x00, 0x37, 0x35, 0x4d,
4146 0x7f, 0xb2 ),
4147 AUTH ( 0x62, 0x19, 0x66, 0x38, 0x59, 0x0c, 0xef, 0x42, 0x9d, 0x6b,
4148 0x1d, 0x1a, 0x59, 0x83, 0x9c, 0x02 ) );
4149
4150/* AES-GCM test case 189 */
4151CIPHER_TEST ( wycheproof_aes_gcm_b6419c85, &aes_gcm_algorithm,
4152 KEY ( 0x11, 0xb1, 0x8e, 0xa3, 0x9c, 0x38, 0x49, 0x15, 0x93, 0xfd,
4153 0xd5, 0xe6, 0xe4, 0xab, 0x8b, 0x4a, 0x01, 0x29, 0xa5, 0x3f,
4154 0x49, 0xed, 0x6c, 0xa9 ),
4155 IV ( 0x09, 0x52, 0xa7, 0x0d, 0x99, 0x31, 0x88, 0xc1, 0xdd, 0x88,
4156 0x91, 0xa5 ),
4157 ADDITIONAL(),
4158 PLAINTEXT ( 0x71, 0x53, 0x21, 0x78, 0x13, 0xc3, 0x90, 0xb8, 0xd4,
4159 0x58, 0xbe, 0x71, 0xfa, 0xd1, 0xaf, 0xb8, 0x79, 0x71,
4160 0xff, 0xbc, 0xa3, 0xa9, 0x41, 0x1e, 0x3e, 0x7a, 0xbe,
4161 0x8b, 0x87, 0x74, 0xf9, 0x87, 0x16, 0x7a, 0xcf, 0xeb,
4162 0x52, 0x96, 0xe1, 0x9b, 0x40, 0x8b, 0x58, 0x1a, 0xd6,
4163 0xca, 0xb0, 0x8c, 0x8d, 0xc8, 0x1d, 0x40, 0xcd, 0xbe,
4164 0x1c, 0x65, 0x92, 0xfb, 0x57, 0x3b, 0xd7, 0xa3, 0xc6 ),
4165 CIPHERTEXT ( 0xe4, 0x63, 0x87, 0xd0, 0x32, 0x4f, 0x3e, 0x8f, 0xfd,
4166 0x28, 0x7b, 0x35, 0xe4, 0xb2, 0x1f, 0x7e, 0x71, 0xf6,
4167 0x2b, 0xa7, 0x5f, 0x13, 0xc0, 0x32, 0x57, 0x6a, 0xe8,
4168 0x34, 0x4f, 0x9d, 0x52, 0x0a, 0x6d, 0x61, 0xef, 0x9f,
4169 0x99, 0xb9, 0xa0, 0xdd, 0x87, 0x5d, 0x26, 0x92, 0x20,
4170 0x3a, 0xb6, 0x68, 0xf7, 0x96, 0x2f, 0x2a, 0xc9, 0x29,
4171 0x4f, 0x91, 0x10, 0x6a, 0x38, 0x84, 0x47, 0x70, 0x98 ),
4172 AUTH ( 0x36, 0xdc, 0xe4, 0x05, 0xee, 0x69, 0xe4, 0x15, 0x27, 0xfb,
4173 0x78, 0x08, 0x23, 0x0a, 0x11, 0x23 ) );
4174
4175/* AES-GCM test case 190 */
4176CIPHER_TEST ( wycheproof_aes_gcm_1c119a15, &aes_gcm_algorithm,
4177 KEY ( 0xcc, 0xbd, 0x0f, 0x50, 0x98, 0x25, 0xa5, 0xf3, 0x58, 0xa1,
4178 0x4a, 0xac, 0x04, 0x4a, 0xe2, 0x82, 0x6b, 0xb2, 0xc9, 0xea,
4179 0xaa, 0xaa, 0x07, 0x7f ),
4180 IV ( 0x91, 0x89, 0xa7, 0x1a, 0xc3, 0x59, 0xb7, 0x3c, 0x8c, 0x08,
4181 0xdf, 0x22 ),
4182 ADDITIONAL(),
4183 PLAINTEXT ( 0xa1, 0xed, 0x10, 0x07, 0xb5, 0x2e, 0x36, 0xec, 0x0f,
4184 0x70, 0x10, 0x9c, 0x68, 0xda, 0x72, 0xee, 0x7b, 0x67,
4185 0x5c, 0x85, 0x5e, 0x3e, 0x49, 0x56, 0xd2, 0xdc, 0xf9,
4186 0xd1, 0x2f, 0x67, 0x5d, 0x69, 0x33, 0xf6, 0x77, 0xdd,
4187 0xcc, 0x58, 0xfa, 0xce, 0x85, 0x76, 0x99, 0xd2, 0xe3,
4188 0xd9, 0x0a, 0xdc, 0xb8, 0xc6, 0xc5, 0x7c, 0x9d, 0x88,
4189 0xb5, 0xdf, 0xcf, 0x35, 0x6d, 0xe4, 0xc0, 0xb6, 0x3f,
4190 0x0e ),
4191 CIPHERTEXT ( 0xe9, 0x91, 0x5b, 0xc5, 0xae, 0xa6, 0x3c, 0x8b, 0xc0,
4192 0x14, 0xf2, 0xae, 0x6a, 0x49, 0x86, 0xb0, 0x31, 0x15,
4193 0xff, 0x1f, 0x34, 0xad, 0x6c, 0x0a, 0xcd, 0x74, 0xff,
4194 0xca, 0x07, 0xc4, 0x53, 0xec, 0x3f, 0x3c, 0xe6, 0x90,
4195 0x2d, 0x5f, 0xf3, 0x38, 0xc5, 0x88, 0xa3, 0x4a, 0x1c,
4196 0x3b, 0x30, 0xef, 0x75, 0x3e, 0xc7, 0x00, 0x15, 0x72,
4197 0xcb, 0xfe, 0xaf, 0xe6, 0x90, 0xfd, 0x00, 0xf5, 0x9b,
4198 0x02 ),
4199 AUTH ( 0xfb, 0xf1, 0x9b, 0x6b, 0x90, 0xe2, 0xd9, 0xdf, 0x7e, 0xad,
4200 0x0c, 0x3b, 0xc6, 0xe3, 0x75, 0xa2 ) );
4201
4202/* AES-GCM test case 191 */
4203CIPHER_TEST ( wycheproof_aes_gcm_e36c2be6, &aes_gcm_algorithm,
4204 KEY ( 0xc0, 0xa5, 0x2b, 0x33, 0xc0, 0x09, 0x5e, 0xcf, 0xe1, 0xf3,
4205 0x8e, 0x34, 0x94, 0xe1, 0x94, 0x73, 0x9e, 0xd9, 0x74, 0xb8,
4206 0xc7, 0xc0, 0x8a, 0x2b ),
4207 IV ( 0x1d, 0xeb, 0xe7, 0x39, 0x4e, 0xf2, 0xa2, 0xa5, 0x99, 0x88,
4208 0x34, 0x4f ),
4209 ADDITIONAL(),
4210 PLAINTEXT ( 0x7d, 0x98, 0x98, 0x48, 0xd8, 0x22, 0xa5, 0xc6, 0xa0,
4211 0xfe, 0x3e, 0x31, 0x6e, 0xdc, 0x0a, 0xdf, 0xae, 0x9d,
4212 0xd6, 0x31, 0xda, 0x2e, 0x5d, 0x15, 0x0b, 0xb6, 0xae,
4213 0xfa, 0x04, 0x15, 0x05, 0xac, 0xce, 0xcd, 0x2b, 0xa3,
4214 0xa2, 0x73, 0x79, 0x98, 0x9c, 0x47, 0x1b, 0xc7, 0x21,
4215 0x3a, 0x84, 0xff, 0xe5, 0x12, 0x88, 0x50, 0xe2, 0x71,
4216 0xd5, 0x18, 0x79, 0x8d, 0x19, 0x9e, 0x7b, 0x8b, 0x65,
4217 0x7c, 0x39 ),
4218 CIPHERTEXT ( 0x7f, 0x16, 0xdf, 0x48, 0xf0, 0x9a, 0x34, 0x90, 0x53,
4219 0x44, 0x0f, 0xac, 0x4b, 0x83, 0x53, 0x55, 0xc2, 0x4c,
4220 0x95, 0x31, 0x7b, 0x82, 0xbb, 0x8f, 0x91, 0xbb, 0xc1,
4221 0x91, 0x82, 0x63, 0x30, 0x0c, 0x0a, 0x4a, 0x20, 0xa3,
4222 0xfa, 0x03, 0xc0, 0x08, 0x07, 0xb8, 0x28, 0x39, 0xff,
4223 0xaf, 0x89, 0x8c, 0xe2, 0x37, 0xfe, 0xe3, 0xd0, 0x4f,
4224 0x76, 0xf2, 0x9c, 0xdd, 0xaf, 0x44, 0x86, 0x8f, 0x69,
4225 0x11, 0x03 ),
4226 AUTH ( 0x6b, 0xf3, 0x42, 0x30, 0x8d, 0xba, 0x90, 0x79, 0x25, 0x45,
4227 0xdc, 0xb6, 0x7e, 0xa7, 0x85, 0xc5 ) );
4228
4229/* AES-GCM test case 192 */
4230CIPHER_TEST ( wycheproof_aes_gcm_93996ee5, &aes_gcm_algorithm,
4231 KEY ( 0x24, 0x77, 0x72, 0x88, 0x32, 0x6e, 0x1a, 0x21, 0x90, 0xa3,
4232 0x18, 0xc7, 0x71, 0x88, 0xa7, 0x91, 0x2d, 0x0b, 0xa8, 0xd4,
4233 0x14, 0x23, 0xa2, 0x9c ),
4234 IV ( 0xf2, 0xf4, 0x19, 0x82, 0xfe, 0x0f, 0x01, 0x7a, 0xe4, 0xea,
4235 0x1b, 0x06 ),
4236 ADDITIONAL(),
4237 PLAINTEXT ( 0x60, 0xb8, 0xbe, 0xab, 0xd7, 0xe4, 0xa3, 0x6f, 0xd3,
4238 0x66, 0x6e, 0x13, 0xa4, 0xcf, 0xad, 0x40, 0x5a, 0xd7,
4239 0xb0, 0xb1, 0x7a, 0x61, 0x45, 0x77, 0xef, 0x9e, 0x9d,
4240 0xc1, 0x59, 0xb2, 0x04, 0x0c, 0xfb, 0x61, 0xcb, 0xe9,
4241 0xa2, 0xa8, 0x56, 0x05, 0x3c, 0xd4, 0x6a, 0x88, 0x9b,
4242 0x8a, 0x8f, 0xde, 0x21, 0xdb, 0x88, 0x22, 0xd6, 0xb3,
4243 0x46, 0xf6, 0x65, 0xe0, 0x3a, 0xc6, 0x9c, 0xe8, 0x6a,
4244 0x15, 0x18, 0x5b, 0xbd, 0xe8, 0xcc, 0x9a, 0xbf, 0x0e,
4245 0xf9, 0x34, 0xfd, 0x22, 0x52, 0x37, 0x31, 0xfa, 0x2c,
4246 0x3c, 0x19, 0xc2, 0xcb, 0x45, 0x79, 0xe5, 0x75, 0x03,
4247 0xb0, 0x32, 0x2d, 0xbd, 0x29, 0xee, 0x30, 0xc6, 0x30,
4248 0x45, 0x49, 0x8e, 0x40, 0x25, 0x18, 0x51, 0x1f, 0x58,
4249 0x52, 0x56, 0x26, 0xb2, 0x58, 0x70, 0x3f, 0x9d, 0x01,
4250 0xdc, 0x93, 0x51, 0xbc, 0x62, 0xea, 0x53, 0xc2, 0xa9,
4251 0xbf ),
4252 CIPHERTEXT ( 0x18, 0xca, 0xb2, 0x5b, 0x5d, 0x7c, 0x4c, 0xdf, 0x63,
4253 0x22, 0x16, 0x12, 0x3f, 0x74, 0x39, 0x33, 0x24, 0xbd,
4254 0x13, 0xdc, 0xf0, 0x70, 0x3c, 0xac, 0x6f, 0xaa, 0xdc,
4255 0xfc, 0x7e, 0xd0, 0xa7, 0xc0, 0xe4, 0xad, 0x96, 0x2d,
4256 0x9a, 0xfa, 0x1c, 0x63, 0x57, 0xfc, 0x20, 0x34, 0x5b,
4257 0x9f, 0x43, 0xdf, 0xcb, 0xc6, 0x2b, 0x72, 0xa7, 0xb4,
4258 0x62, 0xb8, 0xe7, 0x13, 0xb1, 0xc7, 0x59, 0x95, 0x7b,
4259 0xe6, 0xc6, 0x24, 0xf3, 0xe2, 0x4f, 0xf6, 0x2b, 0x27,
4260 0xa9, 0x40, 0x09, 0x17, 0x3e, 0x72, 0x1a, 0x3a, 0x99,
4261 0x39, 0xbe, 0xbe, 0x78, 0x85, 0x5c, 0x84, 0x2b, 0xcd,
4262 0xcd, 0x51, 0xbc, 0x19, 0x6d, 0x66, 0xaa, 0xd7, 0x9d,
4263 0xa4, 0xf0, 0x9b, 0x38, 0x13, 0x7b, 0x1a, 0x6f, 0x2a,
4264 0x39, 0x45, 0x6c, 0x1b, 0x61, 0x89, 0xcf, 0x89, 0x57,
4265 0xb2, 0x6b, 0x0c, 0x21, 0x35, 0x8d, 0xe6, 0x90, 0x15,
4266 0xed ),
4267 AUTH ( 0xbf, 0xe7, 0xea, 0x91, 0xf4, 0x62, 0x2d, 0x12, 0xde, 0x15,
4268 0x45, 0x35, 0x71, 0xd4, 0x40, 0xc4 ) );
4269
4270/* AES-GCM test case 193 */
4271CIPHER_TEST ( wycheproof_aes_gcm_6aada21e, &aes_gcm_algorithm,
4272 KEY ( 0xd0, 0x45, 0xc6, 0xeb, 0x17, 0x3f, 0x44, 0x08, 0x43, 0xfa,
4273 0xec, 0x3e, 0x93, 0x74, 0x60, 0x2a, 0x94, 0xee, 0x3f, 0x71,
4274 0x76, 0x31, 0x22, 0x08 ),
4275 IV ( 0x98, 0xe9, 0x15, 0x3d, 0xac, 0xa2, 0x52, 0x2e, 0x31, 0x62,
4276 0xcb, 0x15 ),
4277 ADDITIONAL(),
4278 PLAINTEXT ( 0x3f, 0x0b, 0x30, 0xdc, 0x96, 0x3a, 0x82, 0xd1, 0x82,
4279 0xc0, 0x35, 0xb5, 0xa8, 0x23, 0x06, 0x0f, 0x07, 0xc4,
4280 0x12, 0x37, 0x92, 0xe6, 0xce, 0xe6, 0xbf, 0x91, 0xfe,
4281 0xa3, 0xc5, 0x2f, 0xa6, 0x6b, 0xb6, 0xa9, 0x3e, 0xa6,
4282 0xcc, 0xe9, 0xf4, 0x81, 0x3e, 0xb9, 0x5b, 0xf1, 0x8f,
4283 0x81, 0x6c, 0x00, 0xad, 0x4f, 0xb5, 0x69, 0x32, 0x82,
4284 0x7a, 0x39, 0xef, 0xb2, 0xfe, 0x56, 0x80, 0x4e, 0x60,
4285 0x4a, 0x60, 0x67, 0x74, 0xee, 0x92, 0xad, 0x46, 0xcd,
4286 0x8c, 0x17, 0x2a, 0x0d, 0x2b, 0xde, 0xa2, 0xfc, 0x99,
4287 0xf6, 0x7c, 0xd8, 0x2c, 0x60, 0x24, 0xc3, 0x15, 0xcf,
4288 0xee, 0x6d, 0xbb, 0x8d, 0x27, 0xf7, 0x45, 0xc9, 0xd0,
4289 0xce, 0x9b, 0xf5, 0xd0, 0x97, 0x24, 0xf4, 0xbe, 0xd0,
4290 0x03, 0xcf, 0x39, 0x47, 0x83, 0x48, 0xb3, 0x30, 0x4b,
4291 0xaa, 0x4e, 0xcc, 0x99, 0x74, 0xfc, 0x4f, 0x3f, 0xf9,
4292 0x3f, 0x95 ),
4293 CIPHERTEXT ( 0x96, 0x63, 0xe6, 0xf9, 0x8b, 0x27, 0x68, 0x44, 0x8e,
4294 0x6d, 0xd0, 0xdd, 0x78, 0x0e, 0x14, 0x56, 0x68, 0xaf,
4295 0x5b, 0x00, 0x22, 0x57, 0xe3, 0x53, 0x21, 0x38, 0x68,
4296 0xc9, 0xcd, 0x9f, 0xd3, 0xa1, 0xe9, 0x42, 0x75, 0x30,
4297 0x32, 0x75, 0x41, 0x77, 0x5a, 0x09, 0x31, 0x23, 0x07,
4298 0x6d, 0x34, 0x98, 0x5d, 0xb3, 0xaa, 0x24, 0x8c, 0xd5,
4299 0x5e, 0x53, 0x26, 0x09, 0xd1, 0xa3, 0x92, 0x74, 0xc4,
4300 0x92, 0x16, 0xea, 0x20, 0xfb, 0xab, 0x71, 0x9b, 0x9c,
4301 0x7e, 0x31, 0x0b, 0x27, 0x87, 0x7b, 0x9a, 0x33, 0xd1,
4302 0xb6, 0x9a, 0xb7, 0x47, 0xaf, 0xac, 0x94, 0x4d, 0x1e,
4303 0x97, 0xea, 0x78, 0x93, 0x67, 0x82, 0x1c, 0x33, 0x1f,
4304 0x00, 0xb5, 0xd6, 0x18, 0x40, 0x2b, 0xfc, 0x57, 0x88,
4305 0x4d, 0x18, 0xed, 0xbd, 0x60, 0xc4, 0xdf, 0xe2, 0x18,
4306 0xc0, 0x80, 0x80, 0xb8, 0xe3, 0x47, 0x9f, 0xf8, 0x4b,
4307 0xdf, 0xb5 ),
4308 AUTH ( 0xfc, 0x2f, 0xf6, 0x2a, 0x41, 0xbd, 0xb7, 0x9a, 0xfc, 0x36,
4309 0x98, 0x42, 0xe4, 0xec, 0xca, 0xbf ) );
4310
4311/* AES-GCM test case 194 */
4312CIPHER_TEST ( wycheproof_aes_gcm_f50057ef, &aes_gcm_algorithm,
4313 KEY ( 0x34, 0x93, 0xfc, 0x87, 0x61, 0xe9, 0xdc, 0x24, 0x75, 0x85,
4314 0x04, 0x6f, 0x2b, 0x78, 0xaa, 0x7f, 0x13, 0x8f, 0xf9, 0xa9,
4315 0xd4, 0x7d, 0x9b, 0x39 ),
4316 IV ( 0x87, 0xea, 0xfe, 0x6c, 0xae, 0xad, 0x7f, 0x91, 0x6c, 0x11,
4317 0xab, 0x76 ),
4318 ADDITIONAL(),
4319 PLAINTEXT ( 0x53, 0x38, 0xeb, 0xcc, 0xc9, 0x68, 0x96, 0x00, 0x17,
4320 0x15, 0xfd, 0x3a, 0x2b, 0x88, 0x71, 0x0f, 0x6a, 0xfd,
4321 0x6e, 0xf4, 0x79, 0xd7, 0x33, 0x2a, 0x6c, 0xb5, 0x4a,
4322 0x3a, 0x46, 0xb3, 0x56, 0x82, 0xc9, 0x1f, 0x54, 0xed,
4323 0x7f, 0x4b, 0xd5, 0x01, 0xc5, 0x0d, 0x51, 0xc3, 0xcb,
4324 0x6a, 0x74, 0xd2, 0x1e, 0x26, 0x9b, 0x83, 0x2d, 0x98,
4325 0x5a, 0x30, 0xf6, 0x3b, 0x79, 0xe8, 0x2f, 0xdf, 0xcc,
4326 0x21, 0xce, 0xa5, 0xc0, 0x87, 0xe6, 0x48, 0xde, 0x74,
4327 0x0c, 0x4c, 0x1a, 0x32, 0x7e, 0xed, 0x5c, 0x51, 0xac,
4328 0xf7, 0xc6, 0x7a, 0x57, 0x68, 0xd9, 0x85, 0xbc, 0x93,
4329 0xee, 0xd9, 0x79, 0xbc, 0xc2, 0xbb, 0xa6, 0xea, 0xcd,
4330 0x08, 0x53, 0x89, 0x08, 0x53, 0x29, 0xdb, 0x18, 0x24,
4331 0x13, 0xb6, 0x54, 0x79, 0x5f, 0xd7, 0xb3, 0x98, 0x77,
4332 0x5e, 0xe3, 0x62, 0x8f, 0x38, 0x69, 0x51, 0xbc, 0x39,
4333 0xf9, 0x40, 0x5e ),
4334 CIPHERTEXT ( 0x74, 0x5d, 0xc7, 0x93, 0x6a, 0xc2, 0xdd, 0x20, 0xb5,
4335 0xf9, 0xca, 0x87, 0xc6, 0xe7, 0xd9, 0xd5, 0xb7, 0xc5,
4336 0x7a, 0x88, 0x02, 0xd3, 0x6f, 0x15, 0x3b, 0xd8, 0x1d,
4337 0x96, 0xc8, 0x8f, 0x1b, 0xbb, 0x81, 0xd8, 0x07, 0x44,
4338 0x4e, 0x21, 0x1b, 0x8e, 0x7e, 0x06, 0x9a, 0x68, 0x1f,
4339 0xd8, 0xdd, 0x6c, 0x25, 0x67, 0xdc, 0xc3, 0x2a, 0x6b,
4340 0x84, 0x09, 0x02, 0xc7, 0x69, 0xfb, 0x21, 0xee, 0x07,
4341 0xdd, 0xb4, 0x1a, 0x7f, 0x67, 0xe2, 0xfa, 0x5c, 0x4e,
4342 0xcb, 0xe6, 0x61, 0x9c, 0x47, 0xf0, 0x19, 0xff, 0xc3,
4343 0x2d, 0x50, 0x33, 0xd4, 0x76, 0x9b, 0x5a, 0x73, 0xfe,
4344 0x52, 0x98, 0x8e, 0xdb, 0xeb, 0xd9, 0xe9, 0x65, 0xa8,
4345 0xb8, 0x25, 0xf6, 0xbc, 0x50, 0x01, 0x43, 0xb4, 0x56,
4346 0xb4, 0x08, 0x95, 0x88, 0xa5, 0xdf, 0x6e, 0x9d, 0x56,
4347 0xe6, 0x18, 0x8d, 0xa2, 0x6a, 0x94, 0x2b, 0x53, 0x83,
4348 0x30, 0x47, 0x09 ),
4349 AUTH ( 0xa7, 0xc8, 0x0b, 0x93, 0xa0, 0xfb, 0xbc, 0xf4, 0x8d, 0x78,
4350 0x4d, 0xe3, 0x03, 0xd1, 0x11, 0x6c ) );
4351
4352/* AES-GCM test case 195 */
4353CIPHER_TEST ( wycheproof_aes_gcm_7095e3af, &aes_gcm_algorithm,
4354 KEY ( 0x0b, 0x68, 0xb6, 0x6d, 0x51, 0x82, 0xfa, 0x6c, 0x3b, 0x08,
4355 0xed, 0xd5, 0x0a, 0x0a, 0x74, 0x83, 0xf0, 0x25, 0x93, 0x5a,
4356 0x0d, 0x64, 0xab, 0xcf ),
4357 IV ( 0x6f, 0xa4, 0x90, 0x2b, 0xee, 0xbd, 0x20, 0xe0, 0xe3, 0x31,
4358 0x38, 0xa2 ),
4359 ADDITIONAL(),
4360 PLAINTEXT ( 0xe4, 0x2a, 0xd7, 0xf8, 0x9a, 0x18, 0x7d, 0x99, 0x59,
4361 0x68, 0x14, 0x75, 0x51, 0x5f, 0xa1, 0x17, 0x09, 0x15,
4362 0x56, 0x09, 0x7c, 0x0d, 0x86, 0x6d, 0xea, 0x5c, 0x87,
4363 0xab, 0x45, 0xd9, 0x4b, 0x89, 0x77, 0x79, 0x38, 0xeb,
4364 0x38, 0x1f, 0x6f, 0x24, 0xbd, 0x22, 0x26, 0x84, 0xbe,
4365 0x49, 0xd0, 0xf7, 0x82, 0x23, 0xaa, 0x48, 0x19, 0x3c,
4366 0xe9, 0xe9, 0xa8, 0x3d, 0x00, 0x7c, 0x26, 0xfe, 0x4a,
4367 0xd4, 0xd0, 0x36, 0x04, 0x0b, 0x81, 0x02, 0x1e, 0xe4,
4368 0x40, 0x81, 0x85, 0xed, 0x5f, 0x4f, 0xd8, 0x71, 0xde,
4369 0xf6, 0xf5, 0x50, 0x1b, 0xfb, 0x4d, 0x5a, 0xd5, 0xb9,
4370 0x1c, 0xc4, 0xc3, 0x37, 0x53, 0xe8, 0xa8, 0xa0, 0xb4,
4371 0x19, 0xff, 0x77, 0x50, 0x17, 0x8b, 0xb3, 0x05, 0x66,
4372 0x2a, 0x59, 0x13, 0xbf, 0x5a, 0xc9, 0x74, 0x24, 0x11,
4373 0x4c, 0x2a, 0x59, 0x6b, 0xe6, 0x4f, 0xa8, 0x4e, 0x6a,
4374 0xce, 0x89, 0xf0, 0xa5, 0xa3, 0x4e, 0x30, 0x59, 0x50,
4375 0xb4, 0xfa, 0x50, 0x4c, 0x5d, 0x0c, 0xac, 0x49, 0x9c,
4376 0xe6, 0xc1, 0x42, 0x62, 0x4a, 0x61, 0x8c, 0x2d, 0xb9,
4377 0xef, 0x33, 0x87, 0x8e, 0x8c, 0x01, 0x4a, 0x58, 0xf9,
4378 0x74, 0x35, 0x6c, 0xd6, 0x77, 0x37, 0x49, 0x94, 0x2b,
4379 0x4c, 0x67, 0x47, 0xaa, 0x2e, 0x19, 0xf6, 0x8d, 0x08,
4380 0x6c, 0x1d, 0x33, 0x05, 0xda, 0x85, 0xf9, 0xf6, 0x52,
4381 0x8b, 0x72, 0x5c, 0xfb, 0x42, 0x8b, 0x58, 0x3c, 0x72,
4382 0x7e, 0x4c, 0x40, 0x18, 0xc8, 0xc1, 0x97, 0xd8, 0xfc,
4383 0x35, 0x60, 0x79, 0xd6, 0xf4, 0xeb, 0x89, 0x08, 0x89,
4384 0x25, 0xfa, 0xbb, 0x0b, 0x02, 0x10, 0x0a, 0x64, 0x7b,
4385 0xce, 0x9a, 0x95, 0x6f, 0xc4, 0x47, 0xf5, 0x41, 0xf4,
4386 0xa8, 0x2f, 0xf1, 0xd8, 0x56, 0x38, 0x3c, 0xeb, 0x34,
4387 0x63, 0x48, 0x9d, 0xef, 0x07, 0xff, 0x01, 0x49, 0x49,
4388 0xd5, 0x9a, 0xda ),
4389 CIPHERTEXT ( 0x0e, 0x11, 0xaf, 0xe5, 0xba, 0xa1, 0xdc, 0xc2, 0x6f,
4390 0xb4, 0xce, 0x1a, 0x14, 0x53, 0x01, 0x29, 0xa1, 0x08,
4391 0xed, 0xc6, 0x7b, 0x51, 0x1f, 0x97, 0x99, 0x74, 0xd3,
4392 0x1d, 0x07, 0x97, 0x4d, 0xc6, 0xba, 0x4a, 0x1e, 0x7b,
4393 0x9c, 0xdc, 0xc0, 0x66, 0xe7, 0x7e, 0x70, 0xa5, 0x14,
4394 0x7f, 0xfd, 0xc6, 0x5b, 0x29, 0xbc, 0x52, 0x59, 0x22,
4395 0x6e, 0xdc, 0x9a, 0x27, 0x9f, 0x7a, 0x43, 0x75, 0xdd,
4396 0xd3, 0x9e, 0x0d, 0x3f, 0xdb, 0xcb, 0x08, 0x4b, 0xd4,
4397 0xdc, 0x26, 0xa4, 0x89, 0xd3, 0xaf, 0xc4, 0xbe, 0x4f,
4398 0xb2, 0x0d, 0xaa, 0x00, 0xb7, 0x2f, 0xbd, 0x66, 0x2d,
4399 0xab, 0xe4, 0x55, 0xcd, 0x47, 0x85, 0x9b, 0xd3, 0xd3,
4400 0x82, 0x84, 0xbc, 0xcd, 0x8e, 0x7f, 0x8d, 0x32, 0x09,
4401 0x48, 0x05, 0x4f, 0x17, 0x7f, 0x75, 0xa9, 0x4e, 0x0b,
4402 0x13, 0x93, 0x5e, 0x59, 0x58, 0xc1, 0x59, 0x02, 0x9d,
4403 0x77, 0x6c, 0x4d, 0x58, 0x60, 0x88, 0xb7, 0x62, 0x56,
4404 0x3e, 0x82, 0x34, 0x3f, 0xa8, 0xa6, 0xbe, 0xda, 0x38,
4405 0x07, 0x1b, 0xf1, 0xcd, 0xaf, 0xce, 0x3f, 0x50, 0x3d,
4406 0x8f, 0xc1, 0xa9, 0x24, 0x78, 0xb7, 0xf6, 0x30, 0x34,
4407 0x1b, 0x0b, 0xb1, 0x2d, 0x4e, 0x5b, 0x59, 0xd6, 0x0e,
4408 0xac, 0x69, 0xc9, 0x52, 0x14, 0xde, 0xcb, 0xd4, 0x9a,
4409 0xa6, 0x84, 0x71, 0x66, 0x49, 0x75, 0x2d, 0xe3, 0x54,
4410 0x66, 0xab, 0xfa, 0x39, 0x36, 0x14, 0x86, 0xa3, 0x57,
4411 0x2f, 0x61, 0xe3, 0x41, 0x8d, 0x74, 0xe6, 0xd1, 0x19,
4412 0x2f, 0x07, 0x43, 0x8c, 0xe5, 0x41, 0xae, 0x96, 0xf7,
4413 0x3d, 0xaf, 0x0e, 0xfb, 0x8c, 0x4a, 0x5a, 0x7b, 0xb4,
4414 0x4a, 0x6d, 0x0b, 0xfc, 0x70, 0x7e, 0xb0, 0xff, 0x9b,
4415 0x62, 0xc1, 0x57, 0xf7, 0x49, 0xf3, 0xa3, 0xa6, 0xa5,
4416 0x8f, 0x4c, 0xf2, 0x71, 0x46, 0xb5, 0xd8, 0x7f, 0x50,
4417 0x1d, 0x7f, 0x72 ),
4418 AUTH ( 0xee, 0x53, 0x09, 0x2e, 0x3b, 0x28, 0xd6, 0x14, 0x88, 0xd9,
4419 0xcb, 0x59, 0xa7, 0x18, 0xa4, 0xfa ) );
4420
4421/* AES-GCM test case 196 */
4422CIPHER_TEST ( wycheproof_aes_gcm_ff5845cf, &aes_gcm_algorithm,
4423 KEY ( 0xa5, 0xe1, 0x66, 0x74, 0x00, 0xc4, 0x97, 0xa9, 0x27, 0xed,
4424 0xdb, 0xf3, 0x75, 0x66, 0xd2, 0x95, 0xa0, 0x9e, 0x1f, 0x06,
4425 0x1b, 0x24, 0xaf, 0x46 ),
4426 IV ( 0xc8, 0xca, 0xc0, 0xa0, 0x2a, 0x3b, 0x32, 0x76, 0xc3, 0x57,
4427 0xc2, 0xb3 ),
4428 ADDITIONAL(),
4429 PLAINTEXT ( 0x07, 0x13, 0x39, 0x89, 0xd3, 0xc4, 0x2b, 0x89, 0x75,
4430 0x5d, 0x10, 0xfb, 0x60, 0xec, 0x4c, 0x1b, 0x22, 0x52,
4431 0x1a, 0x11, 0xa3, 0x04, 0xf0, 0x0c, 0xfd, 0x7c, 0xc5,
4432 0x9a, 0xb5, 0x47, 0x79, 0x17, 0x80, 0x08, 0xd0, 0x5e,
4433 0xf2, 0x96, 0x0e, 0x1d, 0x2b, 0x70, 0x11, 0xfa, 0x7a,
4434 0x8f, 0xb6, 0xbb, 0x27, 0xb0, 0xbc, 0x54, 0xfb, 0x50,
4435 0x90, 0x84, 0xed, 0x7a, 0x5a, 0x69, 0x7b, 0x4d, 0x72,
4436 0xfe, 0x24, 0xfd, 0xa3, 0xda, 0x0a, 0x5a, 0xc5, 0x19,
4437 0x8b, 0xc1, 0xdb, 0x4b, 0x91, 0xea, 0xc9, 0xc1, 0x85,
4438 0xad, 0xe8, 0x10, 0x03, 0x83, 0x46, 0xa2, 0x33, 0x5a,
4439 0xa1, 0xcc, 0xb0, 0xeb, 0x81, 0xd3, 0x5a, 0x07, 0xba,
4440 0x0b, 0x89, 0xb4, 0x87, 0x0c, 0xdc, 0xcd, 0x36, 0x7b,
4441 0xc3, 0xd7, 0xed, 0x1e, 0xe3, 0xf2, 0x42, 0x30, 0x8b,
4442 0x29, 0xde, 0xbd, 0x9f, 0x12, 0xe4, 0xe6, 0xdc, 0xa7,
4443 0x4a, 0x3f, 0x42, 0xf8, 0x48, 0x99, 0x03, 0x5f, 0x89,
4444 0x9e, 0x4d, 0x0f, 0x9c, 0xcd, 0x1c, 0x30, 0xc8, 0xb3,
4445 0x2d, 0x21, 0x77, 0x9d, 0x55, 0x5f, 0x0a, 0x03, 0xbd,
4446 0x5d, 0x5c, 0x5e, 0x44, 0x47, 0xa9, 0x20, 0x98, 0xa1,
4447 0x0c, 0x72, 0x11, 0x6b, 0x97, 0x72, 0x2c, 0x70, 0x19,
4448 0xda, 0x23, 0xf6, 0x32, 0x0f, 0x47, 0xed, 0xb9, 0xc9,
4449 0x5c, 0x1b, 0xa6, 0xb3, 0x7a, 0xcc, 0x02, 0xd6, 0x3a,
4450 0xcc, 0x50, 0xdd, 0xd0, 0xd2, 0x69, 0x69, 0x25, 0x60,
4451 0x03, 0x01, 0x1d, 0x7f, 0x4c, 0xdc, 0x2a, 0xb5, 0xc2,
4452 0x4e, 0x25, 0x6d, 0xa6, 0x48, 0xed, 0x1b, 0x0e, 0xb5,
4453 0x6c, 0x95, 0xc5, 0x7a, 0x7f, 0xcc, 0xdd, 0x23, 0x45,
4454 0xf3, 0x59, 0xc0, 0xbc, 0xe6, 0xa2, 0xf0, 0xf4, 0x9d,
4455 0x71, 0x84, 0xa0, 0x02, 0x3d, 0xd0, 0x5f, 0x2e, 0xec,
4456 0xbc, 0xc7, 0x0f, 0xd0, 0xfd, 0xba, 0xe0, 0x6f, 0x42,
4457 0x55, 0x90, 0xdb, 0x38 ),
4458 CIPHERTEXT ( 0x84, 0x1c, 0xa3, 0x04, 0x34, 0x55, 0xe4, 0x80, 0x15,
4459 0x3a, 0xf6, 0x2a, 0x17, 0xce, 0x90, 0x4f, 0x08, 0x43,
4460 0x90, 0x61, 0x20, 0x22, 0x93, 0x84, 0xc9, 0xbb, 0x20,
4461 0x13, 0xb4, 0x41, 0x69, 0x5d, 0xf2, 0x49, 0x87, 0xd3,
4462 0x7d, 0xa6, 0xb2, 0x03, 0x07, 0xfc, 0xea, 0xd5, 0x84,
4463 0x19, 0xb1, 0x1e, 0x24, 0xf7, 0xb5, 0xf2, 0x3a, 0x13,
4464 0xfd, 0xac, 0x75, 0x55, 0x18, 0x9b, 0x64, 0x5a, 0xe9,
4465 0x73, 0xf2, 0x72, 0x50, 0x10, 0xf7, 0x79, 0x63, 0x9d,
4466 0x87, 0x0e, 0xbf, 0x38, 0x2b, 0x0d, 0xf7, 0xaa, 0x97,
4467 0xe2, 0x02, 0xd9, 0xaa, 0x32, 0x69, 0xf4, 0xf5, 0x77,
4468 0xb1, 0xe1, 0xdd, 0x00, 0x1c, 0xd1, 0xac, 0x6d, 0xbd,
4469 0xd3, 0x96, 0x8b, 0x2f, 0x2f, 0x58, 0x6f, 0x94, 0x8d,
4470 0x64, 0x29, 0x76, 0xba, 0xf7, 0x48, 0x12, 0x1f, 0x97,
4471 0x20, 0xc6, 0xa8, 0xac, 0x86, 0xab, 0x21, 0xec, 0xc1,
4472 0xde, 0xad, 0x08, 0xf0, 0xdb, 0xd0, 0xf1, 0x96, 0x5c,
4473 0xc6, 0xbb, 0xc4, 0xf2, 0x15, 0xa5, 0x3a, 0x63, 0x0d,
4474 0x28, 0x48, 0xd7, 0x0c, 0x03, 0x9f, 0x98, 0x69, 0xea,
4475 0xc9, 0x11, 0xbc, 0x04, 0x9f, 0x8a, 0x47, 0x0f, 0x76,
4476 0x66, 0x1b, 0xcf, 0xd0, 0x5c, 0x07, 0xe0, 0x63, 0x17,
4477 0xa1, 0x16, 0x3b, 0x20, 0x8b, 0x86, 0x26, 0xeb, 0x56,
4478 0x16, 0xfa, 0x5d, 0x0e, 0xf6, 0xb8, 0x77, 0xe4, 0x29,
4479 0x0e, 0xc0, 0xb0, 0xe3, 0xea, 0xa5, 0x01, 0x22, 0x21,
4480 0x9a, 0x0c, 0x60, 0xb2, 0xfd, 0x17, 0x62, 0x9e, 0x91,
4481 0x96, 0x20, 0x09, 0x16, 0x1b, 0x66, 0x87, 0xa0, 0xe6,
4482 0x81, 0x0e, 0x0a, 0x40, 0xc9, 0xf7, 0xf6, 0x17, 0xd0,
4483 0x4c, 0x0d, 0x71, 0xe0, 0x37, 0x71, 0xef, 0x8d, 0xa5,
4484 0xbc, 0x95, 0x0c, 0x7c, 0x7d, 0xfc, 0x61, 0xcb, 0xac,
4485 0xf1, 0x1b, 0x3c, 0x14, 0x33, 0x10, 0x95, 0x6c, 0x77,
4486 0x36, 0xc9, 0x66, 0x76 ),
4487 AUTH ( 0x46, 0xe9, 0x21, 0xd8, 0xfb, 0x4f, 0xa0, 0x31, 0x83, 0xad,
4488 0x42, 0x7b, 0x30, 0x2c, 0x16, 0x5d ) );
4489
4490/* AES-GCM test case 197 */
4491CIPHER_TEST ( wycheproof_aes_gcm_2b7f8f4f, &aes_gcm_algorithm,
4492 KEY ( 0xe6, 0x02, 0x18, 0x8a, 0xbf, 0x6a, 0x91, 0xf3, 0xe2, 0x58,
4493 0x83, 0x8c, 0xea, 0x6b, 0xef, 0xef, 0xfc, 0xf6, 0x25, 0x7a,
4494 0x50, 0x9c, 0x3e, 0x95 ),
4495 IV ( 0x9e, 0x35, 0xd3, 0xef, 0x18, 0x97, 0xc5, 0xfe, 0x3f, 0x64,
4496 0x72, 0x04 ),
4497 ADDITIONAL(),
4498 PLAINTEXT ( 0x3b, 0x9a, 0x6e, 0xdc, 0x44, 0x84, 0x8c, 0x07, 0x23,
4499 0x41, 0xfd, 0x4a, 0xf5, 0x1e, 0xc1, 0x16, 0xac, 0x32,
4500 0x8f, 0x69, 0xcc, 0x5a, 0x33, 0x54, 0xe4, 0x92, 0x99,
4501 0xfb, 0x2e, 0x5d, 0x22, 0xfa, 0x00, 0x84, 0xe3, 0x0b,
4502 0x36, 0xec, 0xaf, 0x54, 0x30, 0x93, 0x97, 0xb2, 0xb4,
4503 0x98, 0xd6, 0x86, 0x08, 0x7f, 0x34, 0x57, 0x69, 0x8c,
4504 0x36, 0x39, 0xe7, 0x3c, 0xa1, 0x8c, 0x78, 0xc3, 0xe0,
4505 0x21, 0xd6, 0x73, 0x98, 0x6c, 0xfc, 0x2c, 0xeb, 0x4d,
4506 0x07, 0xe6, 0x69, 0x71, 0xe9, 0x76, 0xf5, 0x8f, 0x03,
4507 0x36, 0xf8, 0x2c, 0x7f, 0xc0, 0xd5, 0x2d, 0x66, 0x61,
4508 0x0f, 0x26, 0xca, 0x3b, 0xfe, 0x53, 0xc0, 0xb0, 0x1c,
4509 0xf7, 0xc2, 0x07, 0x30, 0x6d, 0xb9, 0x04, 0xc1, 0xad,
4510 0x30, 0x0a, 0xb9, 0x5c, 0x56, 0xfd, 0xe8, 0x20, 0xa8,
4511 0xed, 0xd2, 0x56, 0xf2, 0xb9, 0x90, 0x6b, 0x31, 0x2b,
4512 0xf7, 0xaf, 0x5e, 0xf4, 0xa8, 0x06, 0xf6, 0x18, 0xdd,
4513 0xfc, 0xb6, 0x71, 0x79, 0xb0, 0x3f, 0xff, 0x80, 0xa2,
4514 0x45, 0xc3, 0x8d, 0x8f, 0x4c, 0xff, 0x28, 0x75, 0xb7,
4515 0x1a, 0x0b, 0xf6, 0x91, 0x29, 0xca, 0xf9, 0x71, 0x21,
4516 0x46, 0x2e, 0x05, 0x01, 0xec, 0x65, 0x74, 0xed, 0xe9,
4517 0x47, 0x06, 0xf4, 0xa0, 0x4d, 0x2f, 0xb3, 0x01, 0xd4,
4518 0x15, 0xc2, 0x2e, 0xa1, 0x21, 0x57, 0xd2, 0xe9, 0x19,
4519 0xbc, 0x7a, 0x01, 0x69, 0xa5, 0xad, 0x5c, 0x7b, 0xb5,
4520 0x76, 0x1a, 0x85, 0x31, 0xab, 0xbe, 0x77, 0xd6, 0x6a,
4521 0x48, 0x71, 0xb3, 0xf2, 0x7a, 0x71, 0x70, 0xf0, 0x99,
4522 0x04, 0x4b, 0x9f, 0xdc, 0x50, 0xa8, 0xcb, 0x3b, 0x89,
4523 0x42, 0x52, 0xa5, 0x01, 0xcc, 0x89, 0x6a, 0xc4, 0x79,
4524 0x3b, 0xdb, 0x47, 0x8b, 0xb1, 0xcb, 0x99, 0xc0, 0x23,
4525 0x41, 0xd7, 0x23, 0x8d, 0xd8, 0xd5, 0x93, 0xcf, 0xda,
4526 0x02, 0xf7, 0xd5, 0x20, 0xd7 ),
4527 CIPHERTEXT ( 0x16, 0x71, 0x83, 0x66, 0x16, 0x75, 0x67, 0x76, 0x25,
4528 0xbe, 0xd2, 0xd5, 0xf5, 0x5f, 0x72, 0x8d, 0xab, 0x80,
4529 0xd7, 0xf0, 0x6f, 0x62, 0x9d, 0x99, 0xe5, 0x8b, 0x45,
4530 0x06, 0x9f, 0xe9, 0xd7, 0x42, 0x8e, 0x89, 0x61, 0x56,
4531 0x1b, 0x11, 0x24, 0x5c, 0x70, 0x9a, 0xc9, 0xeb, 0xb5,
4532 0xc5, 0x9a, 0xc2, 0xa8, 0x9d, 0x83, 0x75, 0xd8, 0xa0,
4533 0x1d, 0x84, 0x9c, 0x77, 0x33, 0xa1, 0xb4, 0x82, 0x52,
4534 0x99, 0x27, 0xe3, 0xf1, 0xa1, 0xa5, 0x3f, 0x63, 0xa4,
4535 0xbe, 0x08, 0xa1, 0x1c, 0x94, 0x1c, 0x63, 0x4c, 0xd4,
4536 0x03, 0x73, 0xc4, 0x2f, 0xfb, 0x24, 0x49, 0xc6, 0x41,
4537 0xbc, 0x9e, 0x39, 0xea, 0xfb, 0xcf, 0x9c, 0x0f, 0xba,
4538 0x67, 0x7e, 0x36, 0x49, 0x6f, 0x73, 0xfc, 0x70, 0xaa,
4539 0x09, 0x72, 0x22, 0x49, 0x01, 0xab, 0x04, 0xb0, 0xa1,
4540 0x96, 0xab, 0x74, 0x52, 0x62, 0x02, 0x1b, 0x23, 0x13,
4541 0xa8, 0x46, 0x41, 0x87, 0xfe, 0xce, 0xc4, 0x3a, 0xdb,
4542 0x40, 0x62, 0x58, 0xbd, 0xdc, 0xd8, 0xc9, 0xd0, 0x4d,
4543 0xc2, 0xae, 0x29, 0xe6, 0x5d, 0x54, 0xa8, 0x9d, 0xd0,
4544 0xf1, 0x75, 0x2d, 0x6d, 0x95, 0x0d, 0xbf, 0x7d, 0xa4,
4545 0xde, 0xa0, 0xa7, 0xb9, 0x46, 0x55, 0x79, 0x50, 0x3f,
4546 0xc8, 0xec, 0x44, 0x51, 0xf4, 0xb3, 0x98, 0x78, 0xac,
4547 0x47, 0x54, 0xa1, 0xaa, 0xf7, 0xb0, 0xb7, 0x3f, 0xee,
4548 0x11, 0x21, 0x3c, 0xb8, 0xe6, 0x01, 0xfc, 0x60, 0x39,
4549 0x39, 0x3f, 0x72, 0xe0, 0xe0, 0x79, 0xee, 0x97, 0xec,
4550 0xc6, 0x10, 0x24, 0x17, 0x57, 0xda, 0x2d, 0xb2, 0xf5,
4551 0x1d, 0x5e, 0xd1, 0x21, 0x48, 0x15, 0x40, 0xef, 0xf4,
4552 0x72, 0x87, 0x74, 0x4d, 0xac, 0x43, 0x37, 0x5c, 0x4f,
4553 0x48, 0xa4, 0x6a, 0xf7, 0x01, 0x90, 0x45, 0x3a, 0x17,
4554 0xc3, 0xc7, 0x8d, 0x73, 0x5b, 0xa1, 0xd1, 0xfc, 0x76,
4555 0xa3, 0x30, 0xe6, 0xcb, 0xed ),
4556 AUTH ( 0xc7, 0x20, 0x35, 0x31, 0x4f, 0x43, 0xd2, 0x56, 0xf8, 0xd8,
4557 0x45, 0xeb, 0x69, 0x6b, 0xd9, 0x43 ) );
4558
4559/* AES-GCM test case 198 */
4560CIPHER_TEST ( wycheproof_aes_gcm_d993a57b, &aes_gcm_algorithm,
4561 KEY ( 0x62, 0xd3, 0x47, 0x58, 0x7e, 0xf0, 0xd5, 0x8d, 0x6c, 0xc3,
4562 0xba, 0x2a, 0xe7, 0xaf, 0x65, 0x57, 0x04, 0xac, 0x4d, 0xab,
4563 0xc1, 0xcf, 0xb2, 0x9c ),
4564 IV ( 0x34, 0xe6, 0xe2, 0x96, 0xf7, 0x62, 0x59, 0x99, 0xbc, 0x9f,
4565 0x02, 0xe3 ),
4566 ADDITIONAL(),
4567 PLAINTEXT ( 0x82, 0x3a, 0x00, 0x50, 0x97, 0xd7, 0x81, 0x1a, 0x4a,
4568 0x81, 0x63, 0x68, 0x35, 0x71, 0x66, 0x70, 0xd7, 0xe2,
4569 0x39, 0xfe, 0x02, 0x59, 0x78, 0xd9, 0x45, 0x34, 0x61,
4570 0xd8, 0xb0, 0x89, 0x55, 0xfc, 0x9f, 0x92, 0xf2, 0x97,
4571 0xf0, 0x47, 0x41, 0x77, 0xe9, 0xf7, 0x30, 0xcd, 0xe7,
4572 0x14, 0x46, 0x7f, 0xd3, 0x76, 0xb3, 0x70, 0xed, 0x96,
4573 0x72, 0x54, 0x97, 0x08, 0x3f, 0x0f, 0xb7, 0xde, 0x9d,
4574 0xe1, 0x03, 0x7f, 0x50, 0x94, 0xbb, 0x9c, 0xce, 0x8a,
4575 0x7e, 0xf3, 0x13, 0x7c, 0xfe, 0x31, 0x82, 0x4a, 0xc1,
4576 0xf6, 0x41, 0xaf, 0x92, 0xe2, 0x80, 0x6c, 0x92, 0xe3,
4577 0xc5, 0x8e, 0x66, 0x2c, 0x89, 0xcc, 0x25, 0x9b, 0x3d,
4578 0xa6, 0x6b, 0xb2, 0x78, 0xa7, 0xdc, 0x08, 0xde, 0x92,
4579 0x40, 0xee, 0xef, 0x71, 0x51, 0xf8, 0x8e, 0xc4, 0x65,
4580 0xf2, 0x58, 0xec, 0xc0, 0x1b, 0x7a, 0x2c, 0xdb, 0x3e,
4581 0x18, 0x8e, 0xeb, 0x68, 0x98, 0x13, 0xc9, 0xfb, 0x41,
4582 0x99, 0xb8, 0xad, 0x62, 0xcc, 0x26, 0xaf, 0x1f, 0x52,
4583 0xf1, 0xf3, 0xaa, 0x02, 0xef, 0x3b, 0x60, 0x5d, 0xee,
4584 0xb0, 0xf2, 0x0a, 0x8f, 0x00, 0xa9, 0xf9, 0xca, 0x3d,
4585 0x15, 0x3e, 0x51, 0xd8, 0x1c, 0xca, 0xfa, 0x07, 0x67,
4586 0x9b, 0x43, 0x84, 0x50, 0xd0, 0xd4, 0x6e, 0x45, 0x7d,
4587 0x53, 0x23, 0xd3, 0xad, 0x38, 0x53, 0x00, 0x93, 0x0e,
4588 0x22, 0x25, 0x17, 0xb8, 0x62, 0xdd, 0xf8, 0xb1, 0x25,
4589 0x3d, 0xf0, 0xe2, 0x0f, 0x51, 0xea, 0xe6, 0x76, 0xcf,
4590 0x83, 0x69, 0x2b, 0x6a, 0xe6, 0xd4, 0xcf, 0xe3, 0x5b,
4591 0xcf, 0x43, 0xd2, 0xce, 0xc2, 0xed, 0xfb, 0x72, 0xbf,
4592 0x92, 0x19, 0xe8, 0xb0, 0x5a, 0xa6, 0x1f, 0x90, 0x0c,
4593 0x80, 0x4e, 0xba, 0x59, 0xc1, 0x00, 0x7f, 0x2d, 0xda,
4594 0xda, 0xb3, 0xe1, 0xda, 0xb4, 0x48, 0x5e, 0x5c, 0x77,
4595 0xf7, 0xa9, 0x88, 0x09, 0x5c, 0x5a, 0x44, 0x7c, 0x7c,
4596 0xd7, 0xec, 0xef, 0xa2, 0x65, 0x27, 0xdf, 0xcf, 0x8b,
4597 0x46, 0x15, 0x46, 0x3f, 0x12, 0xe3, 0xca, 0x69, 0x10,
4598 0xa8, 0xa4, 0x1b, 0x07, 0xac, 0x4f, 0x58, 0xe5, 0x21,
4599 0x94, 0x59, 0x95, 0x41, 0x31, 0xc8, 0x5f, 0x8a, 0xa7,
4600 0x0b, 0x94, 0x30, 0x38, 0xe1, 0xd6, 0xe9, 0x90, 0x9b,
4601 0xb6, 0x47, 0x70, 0x7b, 0xf2, 0x6a, 0x5c, 0xec, 0xed,
4602 0x87, 0x29, 0x8e, 0x4f, 0x4e, 0x61, 0x6c, 0x0c, 0xc1,
4603 0xed, 0xeb, 0x8e, 0x0c, 0x5a, 0x6d, 0x21, 0x49, 0x18,
4604 0xcd, 0x24, 0x5e, 0x5d, 0x7d, 0x38, 0xd8, 0xc8, 0xec,
4605 0x14, 0x1d, 0xdb, 0xba, 0x35, 0x4c, 0xd2, 0xd9, 0xb7,
4606 0xdd, 0x21, 0x13, 0x2d, 0x9e, 0x4a, 0xf5, 0x8f, 0x4b,
4607 0x6b, 0x69, 0xee, 0xab, 0x9a, 0xc0, 0xeb, 0xd6, 0x16,
4608 0xf5, 0x64, 0xbb, 0x4d, 0x5a, 0x38, 0x23, 0x2d, 0x03,
4609 0xe7, 0xfe, 0x62, 0xed, 0x70, 0x0c, 0x77, 0x61, 0xba,
4610 0x25, 0xa7, 0x84, 0xc4, 0xb0, 0xc4, 0x80, 0x4e, 0xb5,
4611 0x00, 0x17, 0x5e, 0xeb, 0x8a, 0x58, 0x43, 0xe6, 0x71,
4612 0x04, 0xe3, 0xd1, 0xe3, 0x74, 0x0a, 0xcd, 0x02, 0x25,
4613 0x27, 0xcf, 0xf1, 0xc9, 0x82, 0x87, 0x4f, 0xe9, 0x56,
4614 0x87, 0x28, 0x18, 0xa7, 0x3b, 0x8c, 0xa4, 0x78, 0x2b,
4615 0xdb, 0xb2, 0xd1, 0x7a, 0x56, 0x4d, 0xe7, 0x07, 0x0b,
4616 0x51, 0xe0, 0xa8, 0x9e, 0xc1, 0x83, 0x4d, 0xfc, 0x74,
4617 0xf2, 0x3d, 0xff, 0xdf, 0xc4, 0x78, 0xb9, 0x2b, 0x25,
4618 0xb2, 0x6b, 0xc8, 0xf8, 0xa5, 0x52, 0x67, 0x03, 0x1d,
4619 0x98, 0x27, 0x8b, 0x69, 0x1d, 0x4d, 0x3e, 0x6f, 0x70,
4620 0x66, 0x70, 0xd3, 0xa2, 0x97, 0x74, 0xcf, 0x45, 0x17,
4621 0xad, 0x83, 0x2b, 0x63, 0x9f, 0x94, 0x4e, 0x10, 0x16,
4622 0x94, 0xaf, 0x69, 0x01, 0xd0, 0x21, 0xa9, 0xa7, 0xc6,
4623 0x3c, 0xbc, 0xc5, 0x43, 0x85, 0x44, 0x60 ),
4624 CIPHERTEXT ( 0xed, 0x35, 0xbb, 0xdc, 0x40, 0xa2, 0xfd, 0x24, 0x92,
4625 0xb1, 0x10, 0x6d, 0x11, 0x8d, 0x0c, 0x26, 0x5b, 0xec,
4626 0x23, 0xba, 0x55, 0xc5, 0x64, 0x85, 0x37, 0xfd, 0x88,
4627 0xa5, 0xd2, 0xc2, 0x54, 0xe5, 0x76, 0x46, 0x02, 0xa6,
4628 0xe4, 0x0c, 0xd4, 0xba, 0x5c, 0x0c, 0xaa, 0x4a, 0x11,
4629 0x41, 0x4a, 0xc1, 0xbe, 0x35, 0x2c, 0x4a, 0x73, 0x38,
4630 0x50, 0x5d, 0x85, 0x4f, 0x34, 0xb8, 0x9f, 0xc7, 0x23,
4631 0xd6, 0xa3, 0xd7, 0x03, 0x69, 0xcd, 0x1b, 0xf2, 0xd1,
4632 0x90, 0x06, 0x5e, 0x3d, 0x15, 0xa4, 0xa9, 0x3f, 0xc8,
4633 0x42, 0xe1, 0xeb, 0x03, 0xd5, 0x80, 0xbf, 0x50, 0x02,
4634 0x70, 0xe8, 0x8d, 0x3f, 0x62, 0x4c, 0xf2, 0x4a, 0xdb,
4635 0xb1, 0x18, 0xed, 0x7f, 0xfa, 0xe7, 0x32, 0x93, 0xc8,
4636 0xd3, 0x5f, 0xe3, 0x60, 0xee, 0x26, 0x3c, 0xcb, 0x41,
4637 0xda, 0xdc, 0x5b, 0x75, 0xc8, 0x02, 0x4c, 0xef, 0x1a,
4638 0x3b, 0x79, 0xaf, 0x12, 0xdb, 0x46, 0x41, 0xf2, 0x5e,
4639 0x9d, 0x9a, 0x25, 0xdc, 0x39, 0x06, 0x4f, 0x2f, 0x9c,
4640 0x5c, 0x96, 0xc5, 0x4a, 0x9d, 0x29, 0xc8, 0xc9, 0xca,
4641 0xf7, 0x32, 0x1e, 0x27, 0xde, 0x79, 0xc9, 0x8c, 0x77,
4642 0xf0, 0x26, 0xf2, 0x45, 0x1a, 0x18, 0xac, 0xa3, 0x84,
4643 0x7e, 0x2e, 0x92, 0xf2, 0x14, 0x40, 0xb3, 0x74, 0x45,
4644 0x69, 0x56, 0x10, 0x02, 0x07, 0x62, 0xc6, 0x56, 0xec,
4645 0x2d, 0x20, 0x67, 0xa8, 0x54, 0xc2, 0x9a, 0x69, 0xb9,
4646 0xd0, 0x5a, 0x02, 0x28, 0xb3, 0x89, 0xeb, 0xf0, 0x09,
4647 0xa7, 0xd2, 0x88, 0xba, 0x21, 0x72, 0x4f, 0x77, 0x33,
4648 0xc8, 0x17, 0xa9, 0x95, 0x75, 0x33, 0x59, 0x33, 0x5c,
4649 0x92, 0x8d, 0x44, 0x26, 0xdc, 0x2c, 0x6d, 0x22, 0xa6,
4650 0x10, 0x34, 0x89, 0x2f, 0xed, 0x04, 0xa1, 0x71, 0xbd,
4651 0x29, 0x5e, 0x31, 0xf1, 0xf3, 0x3f, 0x5c, 0x95, 0x5f,
4652 0xcc, 0x2a, 0x6e, 0xd4, 0x60, 0x51, 0xf6, 0x9f, 0x11,
4653 0x60, 0x29, 0x8b, 0x0d, 0xe6, 0xbb, 0xfd, 0xb5, 0x0e,
4654 0x10, 0xe4, 0x7d, 0x4c, 0x7d, 0x66, 0x4c, 0x3d, 0xd6,
4655 0x42, 0xf6, 0x15, 0xf3, 0x2f, 0xf3, 0x24, 0x65, 0x93,
4656 0xd2, 0x9b, 0x99, 0x39, 0x5b, 0x28, 0x0a, 0xac, 0x02,
4657 0xd5, 0x38, 0x97, 0xba, 0xa0, 0xf9, 0x5b, 0x91, 0x9f,
4658 0xaf, 0x94, 0xdc, 0xf4, 0x3f, 0x38, 0xe0, 0x37, 0xac,
4659 0xad, 0xf5, 0x6a, 0x1f, 0x7f, 0x1a, 0x20, 0xde, 0x91,
4660 0x48, 0xed, 0x15, 0x27, 0xb6, 0x8c, 0x93, 0x91, 0x9d,
4661 0xde, 0xb6, 0x3d, 0x38, 0x69, 0x08, 0xed, 0x15, 0x97,
4662 0x97, 0xa3, 0x11, 0xbf, 0x19, 0xa7, 0x20, 0x48, 0xbb,
4663 0x2f, 0xf3, 0xf4, 0xb2, 0x7d, 0x46, 0x34, 0x1a, 0xa4,
4664 0xaa, 0x62, 0x2c, 0xb0, 0xcf, 0x3a, 0xdf, 0xbd, 0xcc,
4665 0x42, 0xab, 0x21, 0x1b, 0xde, 0xc5, 0x8a, 0x72, 0xfe,
4666 0x36, 0xf9, 0x97, 0xc4, 0x9b, 0x14, 0x79, 0x96, 0x26,
4667 0x5b, 0xb2, 0xee, 0x55, 0x55, 0xf2, 0xce, 0xca, 0x4e,
4668 0x01, 0x6a, 0xf6, 0xc0, 0x69, 0xb0, 0x3f, 0x22, 0xad,
4669 0x2c, 0xab, 0x55, 0x5a, 0xf4, 0xe2, 0xdd, 0x14, 0x09,
4670 0x56, 0x67, 0x45, 0xe1, 0xe8, 0x9a, 0x6d, 0xfd, 0xb6,
4671 0xf8, 0xa0, 0xe7, 0x59, 0xc0, 0x9d, 0x57, 0x76, 0x8f,
4672 0x8b, 0x47, 0x40, 0x6a, 0x3b, 0x9b, 0x32, 0x46, 0xc9,
4673 0x0f, 0xa1, 0x2e, 0x60, 0x76, 0xb0, 0x1a, 0xd0, 0x2e,
4674 0x77, 0x52, 0xbf, 0x10, 0x42, 0x4a, 0x10, 0x3b, 0x3e,
4675 0x56, 0x63, 0x3a, 0xdf, 0x55, 0xb9, 0x7f, 0x0a, 0x18,
4676 0x82, 0x3e, 0xf4, 0xac, 0x26, 0xc9, 0x2f, 0x7c, 0xbd,
4677 0xbf, 0xb5, 0x44, 0x79, 0x12, 0x7f, 0xa9, 0x8c, 0x8c,
4678 0x5b, 0x73, 0x25, 0xdf, 0x4a, 0x7c, 0x2b, 0xcc, 0xdf,
4679 0xe0, 0x7d, 0x92, 0x00, 0xcd, 0x95, 0x3c, 0x01, 0xd4,
4680 0x12, 0x90, 0xc0, 0xb1, 0x57, 0xa6, 0xc2 ),
4681 AUTH ( 0x8e, 0x88, 0x35, 0x70, 0x21, 0x9f, 0xc3, 0x8c, 0xfa, 0xa0,
4682 0x9f, 0xe2, 0x70, 0xa3, 0x56, 0x04 ) );
4683
4684/* AES-GCM test case 199 */
4685CIPHER_TEST ( wycheproof_aes_gcm_009e52d4, &aes_gcm_algorithm,
4686 KEY ( 0xf2, 0x08, 0xe9, 0x0e, 0x0a, 0x08, 0xf2, 0x22, 0xc8, 0xac,
4687 0x3d, 0x4a, 0x0c, 0x8a, 0x81, 0x85, 0xf3, 0xf4, 0x77, 0xf1,
4688 0xa4, 0x3f, 0xfc, 0xe6 ),
4689 IV ( 0x60, 0x3d, 0xdb, 0xeb, 0x61, 0x2b, 0x71, 0xb1, 0xd0, 0x8e,
4690 0xbf, 0x40 ),
4691 ADDITIONAL(),
4692 PLAINTEXT ( 0xbb, 0xae, 0x93, 0x80, 0x2b, 0xe4, 0x40, 0x78, 0x15,
4693 0xf6, 0x7e, 0x49, 0x62, 0xb9, 0xc3, 0x94, 0xb2, 0xfc,
4694 0x7c, 0x94, 0xe6, 0xc1, 0x0a, 0x42, 0x46, 0x5f, 0x45,
4695 0x36, 0x72, 0x10, 0x0b, 0xe0, 0xd3, 0x58, 0xff, 0x7b,
4696 0x0b, 0x28, 0x5c, 0xbf, 0xce, 0x15, 0xf3, 0xa9, 0x56,
4697 0xa8, 0xc2, 0x0f, 0x33, 0xa9, 0xd8, 0x7b, 0x12, 0x02,
4698 0xb2, 0x49, 0xcf, 0x3f, 0x21, 0x97, 0xfd, 0x5d, 0x7f,
4699 0x8b, 0xce, 0xe8, 0x0d, 0x41, 0x60, 0xd0, 0xa7, 0xc1,
4700 0xe8, 0xce, 0x74, 0x34, 0x36, 0x5a, 0x9e, 0x5a, 0xa4,
4701 0x13, 0xb1, 0x92, 0x3d, 0x96, 0x07, 0x3e, 0xac, 0x3f,
4702 0x68, 0xf8, 0xb5, 0xa2, 0xbb, 0xf2, 0x3a, 0x9a, 0xe1,
4703 0x3f, 0x7f, 0x13, 0xd6, 0x25, 0xc4, 0x0b, 0x42, 0xab,
4704 0x06, 0x77, 0x1c, 0x1e, 0xc0, 0x09, 0x60, 0xc2, 0x46,
4705 0x53, 0x36, 0xb8, 0x55, 0xcb, 0x55, 0x4d, 0x3d, 0xb6,
4706 0x45, 0xf0, 0xb7, 0xba, 0x2f, 0x4c, 0x64, 0xe0, 0xf6,
4707 0x52, 0xbd, 0x79, 0x02, 0x84, 0x3c, 0xc4, 0x3f, 0x8a,
4708 0xa8, 0x68, 0x1c, 0x83, 0x8d, 0xd3, 0x15, 0x73, 0x67,
4709 0x9c, 0x34, 0x33, 0x24, 0x6a, 0x02, 0x4c, 0x66, 0x94,
4710 0xb2, 0xed, 0xbe, 0x35, 0xd1, 0x2a, 0xd0, 0x21, 0x9d,
4711 0x55, 0x69, 0x62, 0xe6, 0x8a, 0x00, 0xb0, 0x58, 0x6a,
4712 0x36, 0xf1, 0xef, 0xe7, 0x21, 0x05, 0x5b, 0x3a, 0xc8,
4713 0x10, 0x71, 0xa6, 0xcb, 0x62, 0x58, 0x4a, 0x97, 0x93,
4714 0x16, 0xaa, 0xdf, 0x22, 0x0c, 0x19, 0xd3, 0x30, 0x9b,
4715 0x6b, 0x22, 0x41, 0x5c, 0x28, 0xf6, 0xd9, 0xff, 0xeb,
4716 0x20, 0xc8, 0x3a, 0x85, 0xd5, 0xda, 0x48, 0x01, 0x7b,
4717 0x73, 0xcf, 0x92, 0x67, 0xd6, 0x5b, 0x32, 0xd4, 0xcb,
4718 0xf6, 0xe1, 0x2a, 0x83, 0xbe, 0x27, 0xa2, 0xc9, 0x84,
4719 0x8b, 0x71, 0x5c, 0x8a, 0xb7, 0xb8, 0x70, 0xa5, 0x23,
4720 0xf5, 0xd9, 0x60, 0x27, 0x3f, 0x70, 0x35, 0x57, 0xcb,
4721 0xf9, 0x8f, 0x4b, 0x05, 0xb9, 0xd9, 0xf7, 0x8b, 0xf4,
4722 0xdc, 0x44, 0x75, 0xe0, 0x72, 0x22, 0xe5, 0xfb, 0xf5,
4723 0x2e, 0xb4, 0x7c, 0x78, 0x5a, 0x84, 0xb9, 0xec, 0x48,
4724 0xa0, 0x4b, 0xdc, 0x35, 0x18, 0x86, 0x4c, 0xd9, 0xd5,
4725 0x78, 0xe9, 0x4a, 0x63, 0xbb, 0xc5, 0x95, 0x45, 0x4d,
4726 0xb1, 0x03, 0x0d, 0xf7, 0xe9, 0x9c, 0x29, 0x3f, 0x0d,
4727 0x4b, 0x33, 0xa6, 0x08, 0x2c, 0x90, 0xba, 0xd9, 0x53,
4728 0xaf, 0xae, 0x04, 0xdb, 0x99, 0xa2, 0x0a, 0xba, 0xb2,
4729 0x9c, 0xa8, 0x53, 0x85, 0x8e, 0x46, 0x08, 0xde, 0x8d,
4730 0xf4, 0x83, 0x58, 0x52, 0x1e, 0xeb, 0x5b, 0x98, 0x3c,
4731 0xa4, 0xaa, 0x0d, 0xfe, 0x3f, 0x04, 0xbb, 0xa8, 0x99,
4732 0x3d, 0xe8, 0x4c, 0x80, 0x7a, 0xd5, 0x6e, 0x5d, 0x79,
4733 0xb6, 0x51, 0xd5, 0xc2, 0xc9, 0xcc, 0xa4, 0x4f, 0xe4,
4734 0x79, 0x7d, 0xe1, 0x6d, 0x71, 0x3b, 0xa4, 0x5e, 0x78,
4735 0x97, 0xc0, 0x31, 0xb4, 0xf9, 0xae, 0x85, 0xa2, 0x19,
4736 0xc0, 0xec, 0x49, 0xab, 0x89, 0xab, 0x19, 0x5e, 0xff,
4737 0xd3, 0xfb, 0x9f, 0x49, 0x97, 0xa3, 0xe1, 0xa6, 0xd0,
4738 0x66, 0xcf, 0x44, 0x37, 0xc4, 0xda, 0x39, 0xf9, 0x93,
4739 0x9e, 0xee, 0x4b, 0x6d, 0x52, 0xc1, 0x77, 0x6e, 0xbc,
4740 0x34, 0xce, 0x5f, 0x45, 0xf2, 0xf8, 0x70, 0x3d, 0xe2,
4741 0x40, 0x4e, 0x1f, 0x97, 0x89, 0x3a, 0x07, 0xc8, 0x99,
4742 0x78, 0x39, 0xc3, 0x5e, 0xed, 0xc5, 0x2e, 0x1c, 0x5a,
4743 0x64, 0x12, 0xd3, 0xb6, 0xa9, 0x35, 0x6f, 0xf0, 0x70,
4744 0x28, 0x45, 0x59, 0x4b, 0x58, 0x10, 0x04, 0xce, 0x83,
4745 0x7e, 0xbf, 0x54, 0x17, 0x07, 0xdc, 0xc1, 0x18, 0x07,
4746 0x86, 0x8d, 0x60, 0x40, 0x8c, 0x70, 0xc7, 0xab, 0xe9,
4747 0x96, 0xdd, 0x60, 0x2b, 0xc8, 0x13, 0x95, 0x20, 0x2d,
4748 0x06, 0x0d, 0x4f, 0x07, 0x6a, 0x43, 0x2f, 0xad ),
4749 CIPHERTEXT ( 0xef, 0xe8, 0x49, 0xef, 0x16, 0x0f, 0x3e, 0x4c, 0x23,
4750 0x61, 0xda, 0xdf, 0xf9, 0xe1, 0x16, 0x53, 0x45, 0x03,
4751 0x06, 0x5f, 0x80, 0x7a, 0xcf, 0xb1, 0x41, 0xec, 0xb9,
4752 0xe2, 0xc3, 0xf6, 0xbe, 0xce, 0xaa, 0x9c, 0x3c, 0xca,
4753 0x56, 0x8b, 0x64, 0x6e, 0x85, 0xf7, 0x26, 0x0d, 0xbd,
4754 0x20, 0x49, 0x5f, 0xc3, 0xe9, 0xfa, 0x53, 0x5c, 0xdb,
4755 0xeb, 0xb2, 0x4d, 0x38, 0xb2, 0x4b, 0xbf, 0x8a, 0xc6,
4756 0x6f, 0x35, 0x88, 0x71, 0x32, 0xe4, 0xc7, 0xfb, 0x6a,
4757 0x7a, 0x49, 0x4f, 0x92, 0x17, 0x3f, 0x33, 0x70, 0x18,
4758 0xcf, 0x47, 0xc3, 0xfe, 0xa5, 0x64, 0xca, 0x69, 0xf5,
4759 0x9f, 0xb4, 0x0b, 0xe9, 0x67, 0xac, 0xa0, 0xd9, 0x5b,
4760 0x99, 0xc9, 0xae, 0xee, 0x4a, 0xde, 0xca, 0x6e, 0xcb,
4761 0xe3, 0x27, 0x69, 0x3d, 0x63, 0x5d, 0xfb, 0x8f, 0xac,
4762 0xf3, 0x3c, 0xde, 0xb2, 0x6d, 0x8b, 0xae, 0x38, 0x3a,
4763 0x0e, 0x09, 0xab, 0x76, 0x1e, 0xfe, 0x6b, 0xdf, 0xbe,
4764 0x40, 0x57, 0x9d, 0xf2, 0xaa, 0x7f, 0x52, 0x4b, 0x99,
4765 0xbb, 0x2d, 0x89, 0x02, 0xb4, 0x5c, 0x4e, 0x2b, 0x4a,
4766 0x5f, 0x67, 0x3e, 0xa3, 0x2d, 0x88, 0x3d, 0x08, 0xf9,
4767 0x10, 0x0f, 0x62, 0xe7, 0x01, 0x8d, 0xca, 0x2a, 0x8d,
4768 0xa8, 0x14, 0x22, 0x24, 0xe6, 0x2f, 0xfb, 0x2e, 0x9e,
4769 0x2d, 0xad, 0xc4, 0x70, 0x12, 0x92, 0x8d, 0x67, 0xbe,
4770 0x5f, 0xd2, 0xbc, 0x0a, 0xaa, 0xa6, 0x56, 0xff, 0x53,
4771 0xe2, 0xc2, 0x0b, 0x2f, 0x7a, 0xcb, 0xcc, 0xdb, 0x77,
4772 0x71, 0x63, 0x26, 0xa3, 0x3a, 0xd2, 0x1c, 0x3d, 0xcf,
4773 0x19, 0x94, 0xcb, 0x2f, 0xf1, 0x03, 0xfa, 0x10, 0x4d,
4774 0x43, 0x6b, 0x85, 0x15, 0xb6, 0x34, 0x1f, 0xa3, 0x2c,
4775 0x92, 0xe2, 0x42, 0x25, 0xb4, 0xc2, 0xea, 0xaf, 0x63,
4776 0x50, 0x38, 0x47, 0x16, 0xec, 0xd3, 0x95, 0x9f, 0x51,
4777 0x29, 0x67, 0x26, 0x8f, 0xd0, 0xa8, 0x14, 0x11, 0xd0,
4778 0x1e, 0xb4, 0xd1, 0x13, 0xea, 0x97, 0x1f, 0x79, 0x53,
4779 0x6b, 0x9d, 0xa1, 0x2e, 0x05, 0x43, 0xd2, 0xe5, 0xcb,
4780 0x2d, 0x94, 0x43, 0x61, 0x46, 0x5e, 0x25, 0x5a, 0xed,
4781 0xda, 0xa7, 0x53, 0xb6, 0x26, 0x43, 0xde, 0x5f, 0x08,
4782 0xba, 0x89, 0x36, 0x38, 0x4d, 0x6a, 0x62, 0x92, 0xbf,
4783 0xa5, 0xcb, 0x01, 0x4a, 0x55, 0xe8, 0x73, 0x21, 0xf1,
4784 0xf7, 0xe2, 0xa1, 0xba, 0x26, 0xb3, 0x92, 0x98, 0x65,
4785 0x70, 0xd8, 0xbb, 0x95, 0xcd, 0x37, 0x3c, 0x17, 0xd9,
4786 0xb2, 0x40, 0x9d, 0x4a, 0x65, 0x9b, 0x42, 0x88, 0x17,
4787 0x95, 0x75, 0x05, 0xe2, 0x90, 0x39, 0x72, 0xe9, 0x9b,
4788 0xef, 0x50, 0x45, 0x07, 0xbd, 0xae, 0x03, 0x5a, 0xf6,
4789 0x29, 0x32, 0x69, 0x3e, 0xc5, 0xe6, 0x98, 0xc4, 0x8c,
4790 0xeb, 0xa5, 0x0e, 0x35, 0xf7, 0x00, 0xfa, 0xbd, 0xdb,
4791 0xf9, 0x9b, 0xfe, 0xe0, 0x83, 0x5a, 0x2a, 0xb2, 0x6d,
4792 0x19, 0x10, 0xd9, 0x6e, 0xe5, 0xe0, 0xde, 0x57, 0x85,
4793 0x88, 0xa3, 0xee, 0xb0, 0xb8, 0x3f, 0xf8, 0x9a, 0xd0,
4794 0x19, 0x59, 0x2d, 0x20, 0x72, 0xb5, 0xa9, 0x79, 0x03,
4795 0x49, 0xc4, 0x2f, 0x17, 0x53, 0x2b, 0xba, 0x7c, 0x42,
4796 0x64, 0xb4, 0x4d, 0xe0, 0x11, 0x7e, 0xcf, 0x90, 0x29,
4797 0x87, 0x80, 0x54, 0x3c, 0xe6, 0x16, 0x01, 0x8f, 0xe3,
4798 0xb2, 0x86, 0x15, 0xcb, 0x97, 0x13, 0x06, 0x3e, 0xa9,
4799 0x63, 0x1f, 0x7f, 0x64, 0x05, 0xd2, 0x53, 0x6c, 0x04,
4800 0x33, 0x45, 0x7f, 0x42, 0xee, 0xec, 0x5b, 0x72, 0x99,
4801 0xdb, 0x8c, 0x51, 0xd3, 0x08, 0xec, 0x32, 0x18, 0x4c,
4802 0xf2, 0x1b, 0x8e, 0x8a, 0xeb, 0xde, 0x72, 0x48, 0xbb,
4803 0x67, 0x21, 0x28, 0xf6, 0x4e, 0x35, 0xe1, 0x02, 0x1e,
4804 0xaf, 0xfb, 0x7b, 0x78, 0xc4, 0x81, 0xbf, 0x3f, 0xf9,
4805 0xf8, 0x90, 0xaa, 0x65, 0xb4, 0x61, 0x5f, 0x25 ),
4806 AUTH ( 0xa2, 0xab, 0x3c, 0x03, 0x12, 0x9d, 0xc8, 0xd5, 0x07, 0xb0,
4807 0x06, 0x23, 0x2a, 0x33, 0x77, 0x16 ) );
4808
4809/* AES-GCM test case 200 */
4810CIPHER_TEST ( wycheproof_aes_gcm_2eef8b22, &aes_gcm_algorithm,
4811 KEY ( 0x70, 0x1a, 0xea, 0x28, 0x30, 0x75, 0x2a, 0x8c, 0xb9, 0x82,
4812 0x1a, 0xf7, 0xb4, 0x38, 0x95, 0xd3, 0x9c, 0x24, 0x31, 0xec,
4813 0x87, 0x7a, 0xce, 0x03 ),
4814 IV ( 0xa2, 0x1c, 0x68, 0x0b, 0x6e, 0x9e, 0x40, 0xc5, 0xb0, 0x68,
4815 0x6f, 0x09 ),
4816 ADDITIONAL(),
4817 PLAINTEXT ( 0xa3, 0xb7, 0xe4, 0x3f, 0x27, 0x02, 0x7c, 0x7c, 0xe0,
4818 0xfd, 0x94, 0x4f, 0xe7, 0x06, 0xd8, 0x9f, 0x91, 0x7b,
4819 0x44, 0x24, 0x11, 0xcd, 0xaf, 0xdc, 0xd7, 0x4b, 0x7f,
4820 0x42, 0x8b, 0x79, 0x62, 0xb9, 0xe3, 0x1b, 0x80, 0xc9,
4821 0x57, 0xe3, 0xf0, 0xdc, 0x17, 0xe6, 0x63, 0x96, 0x24,
4822 0xc0, 0xd0, 0xa0, 0x69, 0xcc, 0x68, 0x4b, 0x50, 0xe7,
4823 0x00, 0xfb, 0xc1, 0x26, 0xf1, 0x79, 0x51, 0xee, 0x31,
4824 0xa3, 0x88, 0xb8, 0x96, 0x6b, 0xfd, 0x79, 0x2d, 0x2c,
4825 0xbe, 0x67, 0xa0, 0xed, 0x27, 0x52, 0x06, 0x28, 0x13,
4826 0xeb, 0x7e, 0x61, 0x38, 0xf8, 0xd3, 0x33, 0xa1, 0xb6,
4827 0x72, 0x1c, 0x3d, 0x3f, 0xab, 0xe9, 0x60, 0x60, 0x57,
4828 0x5e, 0x98, 0x76, 0xce, 0xc0, 0x95, 0x31, 0x70, 0x90,
4829 0x72, 0x4e, 0x13, 0x34, 0xfa, 0x29, 0x1b, 0x90, 0xcb,
4830 0x92, 0x62, 0x37, 0xe3, 0x31, 0xf7, 0x19, 0x29, 0x07,
4831 0x40, 0xc7, 0xe7, 0xe4, 0x43, 0x29, 0x76, 0xc5, 0x22,
4832 0x03, 0xd6, 0x17, 0xb3, 0x07, 0x79, 0x88, 0x10, 0xc9,
4833 0x9d, 0xf5, 0x5f, 0x0a, 0x3f, 0xd1, 0xfe, 0xd1, 0xb9,
4834 0x29, 0xfa, 0x1f, 0xcb, 0x00, 0x74, 0x65, 0x94, 0x2d,
4835 0x9a, 0xe3, 0xc1, 0xd9, 0x64, 0x30, 0x91, 0x6e, 0xd1,
4836 0x5f, 0x92, 0x62, 0x3c, 0x18, 0x14, 0x61, 0xd6, 0x07,
4837 0xa2, 0x97, 0x7b, 0x49, 0x4a, 0xf8, 0x8d, 0x62, 0xf4,
4838 0xe3, 0xd8, 0x48, 0x5d, 0x46, 0x00, 0xc3, 0xe1, 0xa0,
4839 0x9a, 0xae, 0x4a, 0xb7, 0x43, 0xa7, 0x4e, 0x87, 0x64,
4840 0x7d, 0xb9, 0x2a, 0xb8, 0x47, 0x7f, 0x2a, 0x8d, 0x76,
4841 0x19, 0x35, 0x74, 0xc8, 0x55, 0x50, 0x36, 0x33, 0x0e,
4842 0xac, 0xa6, 0x9a, 0x12, 0xb1, 0x5d, 0x66, 0x59, 0x1d,
4843 0x98, 0xb8, 0xfc, 0x08, 0xba, 0x06, 0x03, 0x5a, 0x54,
4844 0x90, 0x51, 0x48, 0x4a, 0xf9, 0xb3, 0xba, 0xf9, 0xcc,
4845 0x36, 0x6a, 0x1d, 0xea, 0x63, 0x88, 0x52, 0x02, 0xa6,
4846 0xdd, 0xe3, 0xaa, 0xfc, 0xb3, 0xc7, 0x35, 0x0f, 0x7b,
4847 0x2f, 0xa4, 0xbe, 0xaa, 0xb7, 0xd5, 0xec, 0x79, 0x83,
4848 0x62, 0x7e, 0xe7, 0x06, 0x77, 0x31, 0x0f, 0xaa, 0xa0,
4849 0xcf, 0x5e, 0xd3, 0xaf, 0xe7, 0x1c, 0x8c, 0xb2, 0xc3,
4850 0xee, 0xa9, 0xc6, 0x41, 0x69, 0x46, 0xf2, 0x8d, 0xfb,
4851 0x8c, 0xb6, 0xe6, 0x18, 0x24, 0x3b, 0xef, 0x42, 0x58,
4852 0xa0, 0x42, 0xb3, 0x6d, 0xdd, 0x6a, 0xfe, 0x75, 0x5e,
4853 0x98, 0x2b, 0xc4, 0x9d, 0x30, 0x17, 0xee, 0xe0, 0x40,
4854 0xc2, 0xcd, 0x25, 0x5e, 0x82, 0x0a, 0xcd, 0x27, 0x8e,
4855 0xe8, 0x66, 0xdb, 0x3f, 0xa2, 0xa8, 0x36, 0xbb, 0xca,
4856 0x91, 0x07, 0xe5, 0x5a, 0xe5, 0x59, 0x53, 0xe2, 0xdb,
4857 0x0a, 0x62, 0xd9, 0xfc, 0x24, 0x5e, 0xc5, 0x89, 0x41,
4858 0x1d, 0x1c, 0x70, 0xb8, 0x4d, 0x97, 0x4a, 0xf8, 0x79,
4859 0x8b, 0xd4, 0xb1, 0x5d, 0x4c, 0x95, 0x33, 0x9a, 0x96,
4860 0x76, 0x5f, 0x7b, 0x12, 0x83, 0xa6, 0xc6, 0x7e, 0xbc,
4861 0x04, 0x07, 0x5e, 0xce, 0x47, 0x8d, 0x40, 0x40, 0x82,
4862 0x59, 0xa2, 0x5f, 0x82, 0x91, 0xef, 0x9e, 0x2f, 0x2e,
4863 0x50, 0x17, 0xde, 0x23, 0x77, 0x57, 0x8c, 0x42, 0x06,
4864 0x72, 0x28, 0xfe, 0x70, 0x56, 0x2e, 0xe0, 0x0a, 0xcd,
4865 0x61, 0x85, 0x5e, 0xfe, 0xca, 0x0c, 0x37, 0xf1, 0xaa,
4866 0x44, 0x9c, 0x05, 0x68, 0xcc, 0x36, 0xb8, 0xeb, 0x2c,
4867 0x13, 0x8d, 0x97, 0x8d, 0x8b, 0x8e, 0x28, 0x81, 0xac,
4868 0xec, 0x5a, 0xf7, 0xfe, 0x04, 0xe5, 0x95, 0xbf, 0x61,
4869 0x5f, 0xed, 0xe7, 0x4f, 0x49, 0x48, 0x26, 0x6a, 0x94,
4870 0x04, 0xee, 0x6f, 0x1a, 0x12, 0x41, 0xcd, 0x08, 0xc1,
4871 0x1e, 0xf4, 0xd0, 0x37, 0x95, 0x1d, 0xd9, 0x78, 0x07,
4872 0x52, 0x54, 0x45, 0x18, 0x47, 0x4f, 0xbc, 0x2d, 0x4e,
4873 0x33, 0x55, 0xa7, 0x2a, 0x7c, 0x80, 0xc7, 0x03, 0xf9 ),
4874 CIPHERTEXT ( 0x9d, 0x5d, 0x5a, 0x51, 0x3e, 0x89, 0xc0, 0xcd, 0x14,
4875 0x06, 0x35, 0x99, 0x3c, 0x13, 0xec, 0x73, 0x43, 0x5f,
4876 0x35, 0x74, 0xaa, 0x10, 0xc9, 0xb8, 0x07, 0x14, 0xc3,
4877 0x49, 0x97, 0xf2, 0xef, 0xaf, 0xa5, 0x53, 0x9e, 0x7e,
4878 0xf4, 0x5b, 0x36, 0x60, 0x2b, 0x16, 0x47, 0x19, 0xed,
4879 0xa8, 0xd7, 0x99, 0xa4, 0x0a, 0x07, 0x75, 0xed, 0xf7,
4880 0x43, 0xe5, 0x46, 0xe9, 0x15, 0x14, 0x26, 0x22, 0xdb,
4881 0xbe, 0xba, 0x21, 0x0d, 0x72, 0xaf, 0x78, 0x2b, 0xb2,
4882 0x6b, 0x11, 0xdf, 0x3b, 0x9f, 0x5a, 0xa7, 0xbd, 0x1a,
4883 0x16, 0xcf, 0xb3, 0x7d, 0x16, 0xaa, 0x9b, 0xf1, 0x16,
4884 0x0d, 0xc7, 0xfc, 0x69, 0x01, 0xcc, 0x85, 0x1d, 0x84,
4885 0x43, 0xbd, 0xa7, 0x43, 0xa8, 0x4d, 0x5c, 0xef, 0x58,
4886 0xc8, 0x16, 0x4b, 0x3b, 0xb9, 0xc7, 0x5f, 0xe2, 0xab,
4887 0xaf, 0x24, 0x78, 0x14, 0xe2, 0xbe, 0x0a, 0xce, 0x46,
4888 0x9a, 0xee, 0xb4, 0x67, 0xf2, 0x19, 0x6c, 0xec, 0xa2,
4889 0x9c, 0x4b, 0xfd, 0x87, 0x4e, 0x9a, 0x58, 0x72, 0x5c,
4890 0x7c, 0x5d, 0x03, 0xca, 0x45, 0xbd, 0xe6, 0x7f, 0xcb,
4891 0x65, 0xfa, 0x9b, 0x01, 0xa9, 0xd8, 0x6c, 0x8e, 0xf6,
4892 0xc8, 0x4a, 0x5e, 0x01, 0x4c, 0x99, 0xfd, 0xfc, 0xab,
4893 0x06, 0x60, 0xbc, 0x2c, 0xea, 0x6d, 0xe7, 0x9b, 0x9b,
4894 0xd1, 0x35, 0xd7, 0x4f, 0x24, 0x47, 0x3d, 0x28, 0x3c,
4895 0x2b, 0x8c, 0x92, 0xec, 0x24, 0x16, 0xa6, 0x09, 0x10,
4896 0x9f, 0x21, 0xde, 0x69, 0x92, 0xe3, 0xc9, 0xe5, 0xc7,
4897 0xff, 0x67, 0xd9, 0x77, 0x89, 0xe2, 0x40, 0x12, 0x55,
4898 0x75, 0xb0, 0x7b, 0x08, 0x7b, 0x3b, 0x98, 0x5b, 0x71,
4899 0xad, 0x1f, 0xa8, 0x1a, 0x8a, 0xf6, 0xa2, 0xdf, 0x6e,
4900 0xae, 0x7c, 0xbc, 0x4c, 0x91, 0x1e, 0x3e, 0x02, 0xe1,
4901 0xff, 0x31, 0x40, 0xc0, 0x1c, 0x38, 0xa2, 0xd7, 0xce,
4902 0x18, 0x46, 0x45, 0x92, 0x15, 0x0b, 0x3a, 0x3c, 0x00,
4903 0xa9, 0x6a, 0xe0, 0x2f, 0x08, 0x9c, 0x12, 0xa8, 0xe2,
4904 0x9e, 0x40, 0x0e, 0xb5, 0x5c, 0xf7, 0x39, 0xf7, 0x8e,
4905 0x1e, 0x9c, 0x45, 0x13, 0xdf, 0x38, 0x21, 0xaf, 0x2d,
4906 0xf5, 0x1a, 0xf4, 0x76, 0x17, 0x4d, 0x81, 0x80, 0x04,
4907 0x5a, 0xc2, 0xce, 0xb3, 0xe3, 0x57, 0x9d, 0x94, 0x79,
4908 0x83, 0xd3, 0xff, 0x5b, 0xf4, 0x14, 0xce, 0x83, 0xba,
4909 0x3b, 0xf5, 0x53, 0x49, 0x53, 0x5b, 0xc1, 0xff, 0xfb,
4910 0xec, 0x73, 0xf0, 0x1a, 0xcb, 0x4a, 0xaf, 0xfd, 0x67,
4911 0x9f, 0xc1, 0x01, 0x38, 0x5c, 0xdd, 0x56, 0x49, 0xa7,
4912 0x8e, 0x95, 0x3a, 0x14, 0xdd, 0xd3, 0x85, 0xc5, 0xea,
4913 0x3e, 0xc0, 0xd0, 0x60, 0xb9, 0x8f, 0x7d, 0xde, 0xfe,
4914 0x2b, 0x66, 0x69, 0x98, 0x00, 0x20, 0xbb, 0xa0, 0x5e,
4915 0x62, 0x38, 0xbc, 0xc6, 0x50, 0x89, 0x6d, 0x03, 0x50,
4916 0xad, 0xef, 0xdd, 0x00, 0xf7, 0x41, 0xfb, 0x06, 0x04,
4917 0x35, 0x10, 0x73, 0x0d, 0xa4, 0x7a, 0x54, 0x55, 0xc2,
4918 0x78, 0x16, 0x80, 0x67, 0xef, 0x4e, 0x85, 0x79, 0xf6,
4919 0x3f, 0x7b, 0x2f, 0xb7, 0xe4, 0xc2, 0xa0, 0xfe, 0x84,
4920 0xe6, 0xc0, 0x3e, 0xa2, 0xe4, 0xa7, 0xb1, 0x38, 0xe7,
4921 0x59, 0x8f, 0x8c, 0xe8, 0xce, 0xd8, 0x31, 0xb1, 0xf5,
4922 0xe5, 0xa8, 0x8e, 0x0d, 0x66, 0x5f, 0x3b, 0x7b, 0x61,
4923 0x70, 0x5c, 0xc5, 0x0b, 0x19, 0x08, 0x0f, 0x82, 0xbc,
4924 0x65, 0x2f, 0xe8, 0x0f, 0x2e, 0x8f, 0x7f, 0xee, 0x8d,
4925 0x2e, 0xee, 0x55, 0x78, 0x8b, 0x86, 0xc1, 0xe5, 0x6d,
4926 0x50, 0x18, 0x02, 0x3e, 0xbf, 0x7a, 0x23, 0x70, 0x8e,
4927 0xdd, 0x97, 0x4c, 0xfe, 0x69, 0x63, 0xf3, 0xeb, 0x9b,
4928 0x92, 0xaf, 0x9b, 0x1e, 0x29, 0x12, 0x37, 0x78, 0x10,
4929 0x46, 0x1e, 0xd6, 0xc9, 0x41, 0xe7, 0x98, 0x73, 0xba,
4930 0xbf, 0x7b, 0xfa, 0x65, 0xb1, 0x3c, 0x4f, 0x32, 0x6d ),
4931 AUTH ( 0x1a, 0x72, 0xa5, 0xeb, 0x33, 0xbd, 0xc8, 0x48, 0xcd, 0x5f,
4932 0x9f, 0x93, 0x79, 0x33, 0x49, 0x55 ) );
4933
4934/* AES-GCM test case 201 */
4935CIPHER_TEST ( wycheproof_aes_gcm_a2b24e57, &aes_gcm_algorithm,
4936 KEY ( 0x85, 0x6b, 0x07, 0xff, 0x0a, 0xfa, 0x13, 0x81, 0x9e, 0xef,
4937 0x43, 0xf5, 0xdd, 0x4a, 0x81, 0xf7, 0xbe, 0xd2, 0xa9, 0xc7,
4938 0x08, 0x9c, 0xbf, 0x06 ),
4939 IV ( 0x90, 0x10, 0x07, 0xf7, 0x57, 0xeb, 0x3b, 0xf0, 0xbf, 0xd1,
4940 0xe0, 0x3e ),
4941 ADDITIONAL ( 0x03, 0xa4, 0x7b, 0x93, 0x00, 0x53, 0xa4, 0xab, 0xb4,
4942 0x0c, 0x66, 0x1e, 0xab, 0xfc, 0xf1, 0x9e, 0xc2, 0x69,
4943 0xf4, 0x91, 0x3a, 0x5a, 0x18, 0x51, 0x3e, 0xb6, 0x72,
4944 0x43, 0xb1, 0x84, 0xb2, 0xe9, 0x46, 0xfa, 0xe1, 0x83,
4945 0x8b, 0x35, 0xc6, 0xf0, 0x86, 0xf8, 0x22, 0x7e, 0x4d,
4946 0x35, 0x36, 0x20, 0x68, 0x40, 0x08, 0x82, 0x7b, 0x97,
4947 0x20, 0xf4, 0x50, 0xc3, 0x97, 0x7e, 0xbe, 0x86, 0x22 ),
4948 PLAINTEXT ( 0xb0, 0x30, 0x92, 0xf7, 0xad, 0x0d, 0x36, 0xd7, 0xe0,
4949 0x07, 0x84, 0x65, 0x2e, 0x4c, 0xe1, 0x2e, 0xaa, 0xe6,
4950 0x50, 0x06 ),
4951 CIPHERTEXT ( 0x99, 0x8a, 0x38, 0x79, 0xdf, 0x76, 0x67, 0xff, 0x94,
4952 0x65, 0xbc, 0x21, 0xd5, 0x88, 0xf6, 0x6b, 0xf8, 0xc1,
4953 0xc1, 0x2e ),
4954 AUTH ( 0x97, 0x8b, 0x9e, 0x5b, 0xb4, 0x9f, 0x18, 0xf9, 0xf4, 0x6c,
4955 0xaf, 0x59, 0x36, 0xa6, 0x7e, 0x85 ) );
4956
4957/* AES-GCM test case 202 */
4958CIPHER_TEST ( wycheproof_aes_gcm_4cccfc2f, &aes_gcm_algorithm,
4959 KEY ( 0x55, 0xa4, 0xca, 0x52, 0x64, 0x43, 0x35, 0x7a, 0xc7, 0xc8,
4960 0x96, 0xd9, 0xa6, 0x7c, 0xf7, 0xd4, 0x67, 0xf6, 0x92, 0x1d,
4961 0x69, 0x00, 0x2d, 0x3a ),
4962 IV ( 0xdb, 0xa2, 0x33, 0xcc, 0xbc, 0x79, 0x92, 0xe6, 0x4e, 0x82,
4963 0xcf, 0xa3 ),
4964 ADDITIONAL ( 0xdf, 0x73, 0x7c, 0xd7, 0x7d, 0x31, 0xeb, 0x90, 0x97,
4965 0xa1, 0x7c, 0x31, 0xb4, 0xc9, 0x28, 0x89, 0xef, 0x1f,
4966 0x32, 0xb7, 0x46, 0x4e, 0x26, 0x20, 0xe9, 0x00, 0x71,
4967 0x92, 0xea, 0x67, 0x5b, 0x9a, 0xd6, 0x91, 0x05, 0x27,
4968 0xff, 0xec, 0xee, 0x24, 0x52, 0xbe, 0x02, 0x48, 0xfa,
4969 0xb7, 0x56, 0x08, 0xc7, 0xfd, 0xca, 0x08, 0xe8, 0x65,
4970 0x80, 0x32, 0x2a, 0xac, 0x1d, 0x6a, 0x11, 0xb9, 0x6e,
4971 0xcf ),
4972 PLAINTEXT ( 0x4e, 0x56, 0xd1, 0xea, 0x53, 0x8c, 0xf4, 0x9c, 0xad,
4973 0x49, 0x95, 0x9e, 0x88, 0x4e, 0xb5, 0x40, 0xc8, 0x46,
4974 0x55, 0x6c ),
4975 CIPHERTEXT ( 0x3f, 0x57, 0xec, 0x1b, 0x41, 0x4f, 0x74, 0x81, 0x8f,
4976 0xea, 0xd9, 0xf3, 0x5a, 0xa1, 0x67, 0x94, 0x02, 0xc3,
4977 0xe7, 0x50 ),
4978 AUTH ( 0x97, 0xb8, 0x9b, 0x29, 0x14, 0x19, 0xe3, 0x2c, 0xf6, 0x54,
4979 0xea, 0x63, 0x0a, 0x3a, 0xd0, 0x14 ) );
4980
4981/* AES-GCM test case 203 */
4982CIPHER_TEST ( wycheproof_aes_gcm_0b49b77a, &aes_gcm_algorithm,
4983 KEY ( 0xef, 0x97, 0xa3, 0x9d, 0x45, 0xa5, 0x05, 0x4d, 0xf3, 0x44,
4984 0xd8, 0x18, 0xeb, 0x15, 0x63, 0x77, 0xd4, 0xfa, 0x51, 0x24,
4985 0x27, 0x4f, 0x2f, 0x2f ),
4986 IV ( 0xd0, 0x27, 0x8d, 0x7b, 0xa5, 0x1e, 0x31, 0xeb, 0xf8, 0xf7,
4987 0x0f, 0xca ),
4988 ADDITIONAL ( 0x66, 0xf6, 0x12, 0xf2, 0xb9, 0x9e, 0x74, 0xdb, 0x94,
4989 0x9c, 0x1c, 0xaf, 0x3c, 0xfb, 0xe1, 0xdd, 0xe9, 0x64,
4990 0x6d, 0xa8, 0x49, 0x78, 0x61, 0xc3, 0x7f, 0x46, 0xdc,
4991 0x43, 0xbf, 0xff, 0x08, 0xdf, 0x3a, 0xec, 0x09, 0xb2,
4992 0x29, 0xa5, 0xc8, 0xb9, 0xd8, 0xb8, 0x90, 0x1f, 0x22,
4993 0xdf, 0xa3, 0xaa, 0x1f, 0x95, 0x5d, 0xba, 0x7a, 0xa2,
4994 0xe8, 0x83, 0xbd, 0x0a, 0x2a, 0xc5, 0x10, 0xb5, 0x01,
4995 0xa0, 0x38 ),
4996 PLAINTEXT ( 0xb4, 0x91, 0xa4, 0x7f, 0x10, 0x82, 0x58, 0x16, 0x42,
4997 0xf8, 0x05, 0x3f, 0x66, 0x01, 0x77, 0x40, 0xe8, 0x98,
4998 0x02, 0x8f ),
4999 CIPHERTEXT ( 0x13, 0x9b, 0xd0, 0x8a, 0x98, 0xf9, 0x2d, 0x51, 0x0c,
5000 0x9b, 0x42, 0x97, 0xc4, 0x92, 0x68, 0xb2, 0x22, 0x48,
5001 0x13, 0x0f ),
5002 AUTH ( 0x71, 0x21, 0x17, 0xf4, 0x0a, 0xa4, 0x6d, 0xb9, 0x96, 0x77,
5003 0xa1, 0xb7, 0x8a, 0xa5, 0xb8, 0x1b ) );
5004
5005/* AES-GCM test case 204 */
5006CIPHER_TEST ( wycheproof_aes_gcm_86a429e2, &aes_gcm_algorithm,
5007 KEY ( 0xe4, 0x30, 0xff, 0xe6, 0x2c, 0xf0, 0x02, 0x8c, 0xa5, 0x0b,
5008 0xac, 0xd8, 0xac, 0x02, 0x0d, 0x54, 0x20, 0xaf, 0xf3, 0x45,
5009 0xb7, 0x1a, 0x98, 0xd8 ),
5010 IV ( 0x2b, 0x5d, 0xd5, 0xd7, 0xb0, 0xe2, 0x6f, 0xb5, 0x1f, 0xa1,
5011 0xe0, 0xff ),
5012 ADDITIONAL ( 0x62, 0x5d, 0x9a, 0x34, 0x42, 0x76, 0xac, 0x8b, 0x4f,
5013 0x62, 0xf4, 0x9b, 0xf2, 0x74, 0xa1, 0x9f, 0x80, 0x86,
5014 0x97, 0x67, 0x41, 0xc7, 0x9e, 0x04, 0xef, 0x14, 0x99,
5015 0xc7, 0xf4, 0xf4, 0xb8, 0x20, 0x3d, 0xed, 0xc6, 0xb0,
5016 0x2e, 0x3d, 0x49, 0xd6, 0xc5, 0xbc, 0x67, 0xa9, 0x73,
5017 0xfb, 0x12, 0x57, 0x93, 0xab, 0x89, 0x99, 0xf5, 0x65,
5018 0xa4, 0x14, 0x14, 0xa6, 0xde, 0x06, 0xf9, 0xad, 0xf1,
5019 0x16, 0x5f, 0x6a, 0xde, 0x26, 0x0f, 0x44, 0x7e, 0x02,
5020 0x8a, 0x48, 0xad, 0x65, 0x04, 0x4d, 0x01, 0x31, 0x53,
5021 0xae, 0x96, 0xe7, 0x06, 0x37, 0x32, 0xd1, 0xba, 0x3a,
5022 0x37, 0x83, 0xfc, 0x09, 0x05, 0xe9, 0xa2, 0x8f, 0xa2,
5023 0x3a, 0x5c, 0x49, 0xab, 0x2c, 0xba, 0x01, 0x6d, 0x20,
5024 0xc6, 0xdf, 0x70, 0x4b, 0xad, 0xa6, 0x2a, 0x24, 0x3d,
5025 0x76, 0xdb, 0xaf, 0x17, 0xa9, 0x84, 0x57, 0x79, 0x38,
5026 0x93 ),
5027 PLAINTEXT ( 0x56, 0xa1, 0xc5, 0x58, 0x0e, 0xc7, 0x85, 0xda, 0x04,
5028 0x6f, 0xa1, 0x6b, 0xd0, 0x39, 0xa4, 0x73, 0x7e, 0xb8,
5029 0x8c, 0x7b ),
5030 CIPHERTEXT ( 0x21, 0xab, 0x90, 0xdd, 0xa8, 0x19, 0x0e, 0xe8, 0x14,
5031 0x20, 0x6f, 0xbf, 0x89, 0xe4, 0x9e, 0x83, 0x34, 0xd8,
5032 0x18, 0x78 ),
5033 AUTH ( 0x5e, 0xe3, 0xbd, 0x42, 0xfb, 0xcc, 0x55, 0xf7, 0xc5, 0xcd,
5034 0x46, 0x2c, 0x6f, 0xa9, 0x91, 0xc6 ) );
5035
5036/* AES-GCM test case 205 */
5037CIPHER_TEST ( wycheproof_aes_gcm_8ed4ba4c, &aes_gcm_algorithm,
5038 KEY ( 0xf3, 0x81, 0xd0, 0xff, 0xd3, 0x37, 0x3a, 0x1a, 0xa0, 0x2e,
5039 0xdd, 0x1d, 0x7f, 0xa7, 0x48, 0xe9, 0x19, 0x08, 0xfe, 0x53,
5040 0x4b, 0xef, 0x73, 0xd2 ),
5041 IV ( 0x10, 0xaa, 0xec, 0x0d, 0xe4, 0xad, 0x75, 0x37, 0x6b, 0xe9,
5042 0xfd, 0x41 ),
5043 ADDITIONAL ( 0x77, 0x39, 0xaa, 0xd7, 0x39, 0x9d, 0x9c, 0x0f, 0x0a,
5044 0x3c, 0x95, 0xb4, 0x03, 0x88, 0x8f, 0x00, 0x72, 0xd9,
5045 0x4a, 0xcb, 0x76, 0xff, 0x57, 0x6e, 0x05, 0xf4, 0xa0,
5046 0x63, 0x12, 0x0b, 0x84, 0xe7, 0x22, 0xb4, 0xd5, 0xcd,
5047 0x43, 0xa5, 0x8e, 0x4a, 0xba, 0xb4, 0x44, 0xcb, 0x8c,
5048 0xed, 0x11, 0x2f, 0x3d, 0xbd, 0x89, 0x93, 0xb8, 0x31,
5049 0xc3, 0x9b, 0x4e, 0xdb, 0x76, 0xe9, 0x2e, 0xb3, 0x3e,
5050 0xe2, 0x4c, 0x59, 0x22, 0xb5, 0x65, 0x52, 0x68, 0x5f,
5051 0x3b, 0x0f, 0x4c, 0xf2, 0x2e, 0x0e, 0x11, 0x62, 0x8f,
5052 0x6a, 0x3d, 0x33, 0xef, 0xf9, 0xde, 0xf7, 0xec, 0x52,
5053 0x71, 0x12, 0xdf, 0xaf, 0xcf, 0x12, 0x28, 0x14, 0xe3,
5054 0xd1, 0xaa, 0xf6, 0x6c, 0x3f, 0x97, 0x05, 0x26, 0x51,
5055 0x10, 0x88, 0xbf, 0xfe, 0xf8, 0x10, 0x1d, 0x1c, 0xef,
5056 0x83, 0x32, 0x68, 0xff, 0x80, 0x38, 0x7d, 0xf3, 0x05,
5057 0x57, 0xf7 ),
5058 PLAINTEXT ( 0x65, 0x3a, 0x3f, 0x03, 0x3c, 0x27, 0x75, 0xe0, 0x8f,
5059 0xef, 0x73, 0xcf, 0x80, 0xf5, 0xe2, 0x69, 0x9f, 0xb3,
5060 0x60, 0xcb ),
5061 CIPHERTEXT ( 0x55, 0x65, 0xc6, 0xd0, 0x9c, 0x4c, 0x92, 0x4d, 0x61,
5062 0xc0, 0xef, 0x80, 0x8f, 0xb0, 0xea, 0x14, 0x4f, 0xfb,
5063 0x47, 0x38 ),
5064 AUTH ( 0x12, 0xb7, 0x2e, 0xc1, 0xd9, 0xc3, 0x2f, 0xb2, 0x2c, 0x13,
5065 0xc4, 0x0b, 0x33, 0x79, 0x6f, 0xa9 ) );
5066
5067/* AES-GCM test case 206 */
5068CIPHER_TEST ( wycheproof_aes_gcm_0e8ed23e, &aes_gcm_algorithm,
5069 KEY ( 0xf8, 0xce, 0x76, 0x9a, 0x34, 0xf4, 0x8d, 0x24, 0xa2, 0x07,
5070 0x68, 0x60, 0xe7, 0xd1, 0x8a, 0xb5, 0xf4, 0xf2, 0xa5, 0x28,
5071 0xe2, 0x28, 0x0d, 0xa2 ),
5072 IV ( 0x8d, 0x7f, 0x86, 0x76, 0x11, 0x52, 0x66, 0xf5, 0xd1, 0xa0,
5073 0xe9, 0x1f ),
5074 ADDITIONAL ( 0x7b, 0x6d, 0xcc, 0xc1, 0x50, 0x56, 0x3e, 0x84, 0x54,
5075 0x34, 0xc2, 0xbc, 0xa2, 0x9f, 0x3f, 0x9d, 0x78, 0x41,
5076 0x62, 0x8f, 0x00, 0xc9, 0x47, 0x4e, 0x06, 0x20, 0x01,
5077 0x7f, 0x7f, 0xa8, 0xe2, 0x50, 0x03, 0x62, 0xfd, 0x7c,
5078 0xf3, 0xcd, 0x16, 0x23, 0x95, 0xb1, 0x4a, 0x52, 0x0d,
5079 0xe4, 0x84, 0xc3, 0x05, 0xfe, 0x2f, 0x6b, 0xe6, 0x30,
5080 0x91, 0x74, 0xed, 0xc3, 0xe1, 0x4f, 0xd5, 0xae, 0xcc,
5081 0xfb, 0xa6, 0xdc, 0xae, 0x18, 0x34, 0x28, 0x61, 0x3e,
5082 0xd9, 0xd6, 0xdf, 0x3f, 0x01, 0xd5, 0xdb, 0x53, 0x82,
5083 0x45, 0xc8, 0xae, 0x8f, 0xf5, 0x0f, 0x30, 0xba, 0x3d,
5084 0x42, 0x85, 0x10, 0xca, 0xd3, 0x28, 0x9b, 0x46, 0x28,
5085 0x05, 0xea, 0x10, 0x29, 0x13, 0x3c, 0x64, 0xaf, 0x45,
5086 0x7e, 0x46, 0xff, 0x51, 0x2b, 0x19, 0x58, 0x0d, 0x5d,
5087 0xfd, 0x0d, 0x5a, 0x01, 0xe4, 0x2d, 0x0f, 0xa6, 0x28,
5088 0xc2, 0xf7, 0x29 ),
5089 PLAINTEXT ( 0x50, 0x75, 0x96, 0xe9, 0x23, 0x6f, 0x4d, 0x9e, 0xbc,
5090 0xde, 0xb0, 0xed, 0x75, 0xdc, 0xc7, 0xff, 0x7e, 0x52,
5091 0xb1, 0x55 ),
5092 CIPHERTEXT ( 0x9e, 0xd3, 0xee, 0x25, 0x62, 0xd3, 0x6b, 0x18, 0x85,
5093 0x3a, 0x08, 0x60, 0xce, 0xc4, 0x9c, 0x23, 0x89, 0xd9,
5094 0x08, 0x11 ),
5095 AUTH ( 0x65, 0xd5, 0x9c, 0xf5, 0x32, 0x84, 0x70, 0x93, 0xe4, 0xc4,
5096 0x81, 0x0d, 0x1b, 0x55, 0x25, 0x40 ) );
5097
5098/* AES-GCM test case 207 */
5099CIPHER_TEST ( wycheproof_aes_gcm_b1a4bc0b, &aes_gcm_algorithm,
5100 KEY ( 0x4b, 0x72, 0x6f, 0x49, 0x03, 0x6f, 0x5e, 0xf8, 0x72, 0x00,
5101 0x0a, 0x34, 0xca, 0x09, 0xa8, 0x52, 0x8a, 0x1e, 0xea, 0x7e,
5102 0x05, 0x63, 0xa5, 0x5e ),
5103 IV ( 0xae, 0x05, 0x12, 0x4d, 0x76, 0xb0, 0x56, 0xfc, 0xce, 0x5c,
5104 0x8b, 0x37 ),
5105 ADDITIONAL ( 0x95, 0xdf, 0x74, 0x13, 0x2d, 0xef, 0x5a, 0xe8, 0xad,
5106 0xb6, 0xb3, 0xb6, 0xcc, 0x91, 0x8a, 0x9f, 0x7c, 0x90,
5107 0x72, 0xf2, 0xdf, 0x63, 0x9d, 0x26, 0x9a, 0xbc, 0x3c,
5108 0x55, 0x1c, 0xbd, 0x6a, 0xb2, 0x45, 0xf5, 0x7a, 0x8e,
5109 0x97, 0x09, 0x5a, 0x58, 0x0d, 0x47, 0x3a, 0xad, 0xbf,
5110 0xf5, 0x0f, 0x1d, 0x87, 0x1e, 0x76, 0x6f, 0xec, 0x32,
5111 0x91, 0x00, 0xb4, 0x5f, 0xa3, 0x57, 0x1b, 0x49, 0x04,
5112 0xb4, 0xf5, 0xe4, 0xe0, 0xd1, 0xbd, 0x25, 0x91, 0x0f,
5113 0x45, 0x7d, 0xd1, 0xf0, 0x1b, 0xbf, 0x82, 0xff, 0x59,
5114 0xa2, 0x13, 0x8a, 0xf1, 0x67, 0x56, 0xd6, 0x4f, 0xa9,
5115 0xd8, 0x20, 0x89, 0xcc, 0xd6, 0xba, 0xa1, 0x8c, 0x16,
5116 0xd0, 0x38, 0x1d, 0xdd, 0xbc, 0x46, 0x9c, 0xcc, 0x54,
5117 0x40, 0x5e, 0x85, 0x3f, 0xce, 0xcf, 0x3b, 0x22, 0x85,
5118 0x24, 0x7d, 0xee, 0x88, 0x66, 0x39, 0xed, 0xaa, 0xfb,
5119 0xaa, 0xd5, 0x8e, 0xdb, 0x8e, 0x12, 0x87, 0xc1, 0x7d,
5120 0xa2, 0xf4, 0x49, 0x68, 0x19, 0x88, 0xf1, 0xe5, 0x75,
5121 0xc8, 0xc6, 0xe9, 0x9e, 0x2a, 0x2a, 0xee, 0xfb, 0xf7,
5122 0xe6, 0xe1, 0xfc, 0xac, 0x86, 0xad, 0xf9, 0xb1, 0xc1,
5123 0x34, 0x9b, 0xe7, 0xfe, 0x29, 0xf0, 0xf7, 0x1d, 0x7c,
5124 0xbe, 0x87, 0x40, 0xe0, 0x9d, 0x29, 0x6a, 0x47, 0x18,
5125 0xb4, 0x12, 0x50, 0xb6, 0xfb, 0xfc, 0x68, 0xcc, 0x52,
5126 0x06, 0x1c, 0x05, 0x30, 0xfd, 0x79, 0xe1, 0x5c, 0x5b,
5127 0x0e, 0xf0, 0x13, 0xa9, 0x77, 0x78, 0x1f, 0x7a, 0x63,
5128 0xed, 0x51, 0x38, 0x92, 0xb8, 0xd1, 0x05, 0xb1, 0x06,
5129 0x4e, 0xea, 0xcf, 0x15, 0x24, 0xde, 0x4c, 0x50, 0xab,
5130 0x85, 0xc2, 0x23, 0xd4, 0x7d, 0xe3, 0x5e, 0xaf, 0xb9,
5131 0xe9, 0x31, 0xcf, 0x42, 0x6d, 0xc4, 0x55, 0x86, 0x6e,
5132 0xa8, 0x8f, 0x49, 0xd5, 0x10, 0x03, 0xb8, 0x2b, 0xf5,
5133 0xef, 0xc7, 0xe6 ),
5134 PLAINTEXT ( 0xe1, 0xdd, 0x0b, 0x94, 0xdb, 0x0a, 0x9f, 0x7f, 0xd6,
5135 0xb2, 0xc4, 0xa6, 0xd6, 0x52, 0xe0, 0xe2, 0x66, 0x48,
5136 0x96, 0xdc ),
5137 CIPHERTEXT ( 0xb5, 0x7c, 0x95, 0x8e, 0x54, 0x84, 0x42, 0x11, 0x43,
5138 0x87, 0xf4, 0xcf, 0xec, 0x8f, 0xe0, 0xdc, 0xce, 0x93,
5139 0x4c, 0x9b ),
5140 AUTH ( 0x0a, 0xcf, 0x89, 0x55, 0xd6, 0x54, 0xb8, 0x48, 0x74, 0x20,
5141 0x1a, 0x21, 0x54, 0x2d, 0x1b, 0x2a ) );
5142
5143/* AES-GCM test case 208 */
5144CIPHER_TEST ( wycheproof_aes_gcm_b025b360, &aes_gcm_algorithm,
5145 KEY ( 0xf8, 0xac, 0x92, 0xd2, 0x06, 0xdf, 0x1d, 0xa3, 0xad, 0xa5,
5146 0xe9, 0x06, 0x80, 0x62, 0x52, 0xa7, 0x82, 0x62, 0xe5, 0x1e,
5147 0x00, 0xa7, 0xce, 0x0b ),
5148 IV ( 0x2c, 0x93, 0x3d, 0x75, 0x90, 0xff, 0x40, 0x58, 0xe2, 0x2f,
5149 0x7e, 0x5b ),
5150 ADDITIONAL ( 0xff, 0x27, 0x71, 0xb5, 0xc8, 0x17, 0xa5, 0xe1, 0x32,
5151 0x6c, 0xb9, 0x07, 0xd5, 0x38, 0x4d, 0xb2, 0x86, 0x1a,
5152 0x32, 0x95, 0x10, 0x9e, 0x67, 0x8b, 0x55, 0x3b, 0xa1,
5153 0x4a, 0x5a, 0x99, 0x00, 0x5f, 0xe0, 0xd6, 0xdc, 0x6d,
5154 0x73, 0x17, 0x8b, 0x75, 0xd3, 0x48, 0xb6, 0xd9, 0xc1,
5155 0xa8, 0xb6, 0x98, 0x3e, 0x20, 0xcf, 0x2b, 0x23, 0x16,
5156 0x1c, 0xc8, 0x8b, 0x02, 0x75, 0x2c, 0xba, 0x16, 0x6f,
5157 0x36, 0xeb, 0xb4, 0x33, 0xd7, 0xb4, 0x29, 0xff, 0x5f,
5158 0x59, 0x07, 0x58, 0xd3, 0xba, 0x56, 0x96, 0xf7, 0x26,
5159 0x8c, 0xaa, 0x55, 0xb0, 0xe5, 0xfb, 0xff, 0xf4, 0x98,
5160 0xaa, 0x77, 0xec, 0x79, 0x11, 0x5c, 0x67, 0x9b, 0x7d,
5161 0xf6, 0xb1, 0x18, 0xcf, 0x4c, 0x51, 0xa3, 0x18, 0x5f,
5162 0x9d, 0x61, 0x77, 0xde, 0x14, 0x5b, 0xe8, 0x85, 0xca,
5163 0x5e, 0x1b, 0x35, 0x5a, 0x4a, 0x21, 0xb6, 0xb0, 0xb7,
5164 0x92, 0x8c, 0x6e, 0x70, 0xd6, 0xcf, 0xee, 0x65, 0xa3,
5165 0xd1, 0x77, 0x58, 0xe0, 0x80, 0x12, 0xf0, 0x88, 0xb2,
5166 0x8e, 0x38, 0x1e, 0x8a, 0xbc, 0x6e, 0x15, 0x47, 0x1d,
5167 0x58, 0x00, 0x36, 0xbb, 0x3e, 0x78, 0xae, 0x1f, 0x97,
5168 0x6c, 0xaa, 0x66, 0x0e, 0xad, 0x30, 0x0c, 0x4d, 0x0f,
5169 0x50, 0xd0, 0x4f, 0xa0, 0x70, 0x88, 0x64, 0x33, 0x61,
5170 0xac, 0x8c, 0x63, 0x4d, 0x4c, 0x37, 0x58, 0x27, 0xbe,
5171 0x90, 0x0d, 0x62, 0xf8, 0x60, 0xf9, 0x08, 0x9c, 0x5d,
5172 0xbc, 0x5a, 0xd0, 0x2f, 0x9c, 0xab, 0x9d, 0xd4, 0x9a,
5173 0x32, 0x4c, 0x96, 0x0b, 0x25, 0x9a, 0xb8, 0x39, 0xde,
5174 0x45, 0x89, 0x6c, 0x60, 0x49, 0xeb, 0x71, 0xf4, 0xa0,
5175 0x56, 0xd9, 0x37, 0xa9, 0x0a, 0xfa, 0xc1, 0xf5, 0x2e,
5176 0x7c, 0x73, 0xc2, 0x4c, 0xa3, 0x41, 0x30, 0x6c, 0x32,
5177 0xa0, 0x16, 0xcb, 0xe4, 0x0c, 0x74, 0x78, 0xde, 0x24,
5178 0xec, 0x8c, 0x7f, 0x6f ),
5179 PLAINTEXT ( 0x44, 0xac, 0x8c, 0x52, 0x54, 0x84, 0x52, 0x89, 0x58,
5180 0xec, 0xfe, 0xe0, 0x9e, 0xd4, 0x4e, 0xc0, 0xdf, 0x82,
5181 0x8a, 0x61 ),
5182 CIPHERTEXT ( 0x97, 0x14, 0x45, 0x25, 0x63, 0x32, 0xbf, 0x87, 0x26,
5183 0x85, 0x38, 0xe1, 0x0b, 0xb4, 0x70, 0xf1, 0x1d, 0xf9,
5184 0x12, 0xe5 ),
5185 AUTH ( 0x41, 0xa6, 0xaf, 0x58, 0xf6, 0x7c, 0x6c, 0xc4, 0xfc, 0x6f,
5186 0x55, 0x18, 0x9f, 0x68, 0xcd, 0xac ) );
5187
5188/* AES-GCM test case 209 */
5189CIPHER_TEST ( wycheproof_aes_gcm_f5019269, &aes_gcm_algorithm,
5190 KEY ( 0x8f, 0x27, 0xb1, 0xc3, 0xb3, 0xd7, 0x02, 0x3c, 0x76, 0xee,
5191 0x66, 0xc7, 0x68, 0xa3, 0xe9, 0x2d, 0x49, 0x71, 0xe2, 0x5f,
5192 0x72, 0x9d, 0x87, 0x88 ),
5193 IV ( 0x12, 0x44, 0x40, 0x40, 0xca, 0xed, 0xe6, 0x72, 0x85, 0xe4,
5194 0x90, 0xd7 ),
5195 ADDITIONAL ( 0x58, 0xfd, 0x02, 0xac, 0x23, 0xec, 0x7f, 0xa5, 0xb9,
5196 0x46, 0x0f, 0x60, 0xbf, 0xc8, 0x5b, 0x4b, 0xeb, 0xba,
5197 0x70, 0x03, 0x9a, 0x8f, 0x83, 0x26, 0x1d, 0x6c, 0xc4,
5198 0xf5, 0x60, 0x10, 0x7c, 0x10, 0xbc, 0x69, 0x54, 0x8a,
5199 0x5d, 0x61, 0x52, 0x88, 0x2f, 0xb4, 0x65, 0xfd, 0x59,
5200 0xfb, 0x81, 0x64, 0xd7, 0xc9, 0x45, 0x23, 0xc3, 0xdd,
5201 0x42, 0x06, 0xd3, 0x30, 0x64, 0xf5, 0x19, 0x1b, 0xd3,
5202 0x1f, 0x0c, 0x48, 0xfe, 0x03, 0xd7, 0x46, 0x0e, 0x99,
5203 0x5c, 0x93, 0x17, 0x5b, 0x57, 0xcb, 0x03, 0xf5, 0x87,
5204 0x11, 0xad, 0xc9, 0x46, 0x32, 0x03, 0x1c, 0x43, 0x05,
5205 0x27, 0x23, 0x67, 0xb4, 0x28, 0x9c, 0x72, 0x5d, 0x9c,
5206 0xb7, 0xae, 0x9b, 0xa9, 0x96, 0xb3, 0xa0, 0x79, 0x17,
5207 0x45, 0x08, 0xc1, 0xea, 0xe8, 0x16, 0x2a, 0x0b, 0xac,
5208 0x44, 0x6c, 0x1e, 0x53, 0xfe, 0x0c, 0x40, 0x2b, 0x69,
5209 0x12, 0xdf, 0xd6, 0x70, 0x2a, 0xdd, 0xcc, 0xad, 0xa3,
5210 0x0a, 0x5c, 0x01, 0x0f, 0xc2, 0x2c, 0x2c, 0x75, 0xe4,
5211 0x32, 0x26, 0x37, 0x8e, 0xc7, 0xf4, 0xb3, 0xb7, 0x1c,
5212 0xcc, 0x71, 0xf3, 0x2a, 0xb1, 0xad, 0xc8, 0x77, 0xcc,
5213 0x7b, 0x0a, 0x18, 0x0c, 0x75, 0xd3, 0x85, 0xc0, 0xf7,
5214 0x1a, 0x0b, 0x29, 0x1a, 0x1c, 0xcc, 0xf4, 0xbe, 0x47,
5215 0xe2, 0x72, 0x24, 0x9d, 0x61, 0xff, 0xbf, 0x05, 0x9c,
5216 0x4f, 0x7b, 0xe7, 0x4e, 0xba, 0x07, 0xd5, 0xe1, 0xbe,
5217 0x3a, 0x74, 0x38, 0x45, 0x8a, 0x61, 0x1f, 0xe5, 0x8c,
5218 0xee, 0x4f, 0x94, 0x6e, 0x25, 0xde, 0xe0, 0x3e, 0x64,
5219 0x85, 0x23, 0x55, 0x66, 0xf2, 0x0e, 0xd5, 0x55, 0xbe,
5220 0x32, 0xcd, 0x57, 0xa9, 0x4e, 0x52, 0x2d, 0x21, 0x68,
5221 0xea, 0xe2, 0x3c, 0x45, 0x87, 0x37, 0x1a, 0x2d, 0x14,
5222 0x5f, 0x41, 0x8c, 0x59, 0xe7, 0xbb, 0xc4, 0x64, 0xa3,
5223 0xbd, 0x88, 0xb8, 0x91, 0x9b ),
5224 PLAINTEXT ( 0x0d, 0xf6, 0xe7, 0x50, 0x09, 0x2b, 0x9a, 0xc5, 0x76,
5225 0xdd, 0xe6, 0x60, 0x06, 0xa4, 0xca, 0xb2, 0x11, 0x6e,
5226 0xee, 0x21 ),
5227 CIPHERTEXT ( 0xc6, 0x87, 0x7b, 0x03, 0x55, 0x2e, 0x97, 0xd9, 0xa1,
5228 0xe6, 0x55, 0x7f, 0x90, 0xdc, 0x7a, 0xdd, 0xe1, 0x5a,
5229 0x2f, 0x43 ),
5230 AUTH ( 0x25, 0x36, 0x27, 0x2b, 0xee, 0x74, 0x46, 0x82, 0x00, 0x41,
5231 0x85, 0x4e, 0x10, 0xb4, 0x9a, 0x03 ) );
5232
5233/* AES-GCM test case 210 */
5234CIPHER_TEST ( wycheproof_aes_gcm_31562fe1, &aes_gcm_algorithm,
5235 KEY ( 0x97, 0x55, 0xeb, 0x90, 0x9e, 0x1c, 0x30, 0xc2, 0xc1, 0x1d,
5236 0x3f, 0x10, 0x61, 0x07, 0xe7, 0xb5, 0x73, 0xc2, 0x5b, 0x9f,
5237 0xdb, 0x8b, 0xc1, 0x9a ),
5238 IV ( 0xa8, 0x2a, 0x5f, 0x56, 0x14, 0x31, 0xc6, 0x89, 0xe7, 0xc4,
5239 0xdc, 0x0b ),
5240 ADDITIONAL ( 0xe1, 0x2f, 0x56, 0x81, 0x34, 0x51, 0x3a, 0x0e, 0xa7,
5241 0x58, 0x37, 0x57, 0x13, 0x21, 0xe6, 0x35, 0x5f, 0x70,
5242 0x78, 0x97, 0x01, 0x84, 0x40, 0x0b, 0x12, 0x97, 0xdb,
5243 0x21, 0xb0, 0xcd, 0x34, 0xc6, 0x67, 0x78, 0x52, 0xa3,
5244 0x07, 0x9a, 0x31, 0xf2, 0xae, 0x83, 0x78, 0x12, 0x70,
5245 0xb3, 0x6a, 0x97, 0xa2, 0x8d, 0xa3, 0x91, 0x60, 0x5f,
5246 0x02, 0xb4, 0x07, 0x54, 0x50, 0x18, 0x71, 0x67, 0x56,
5247 0x16, 0xa9, 0xa9, 0x04, 0x7f, 0x7e, 0x38, 0x65, 0x29,
5248 0x51, 0x20, 0xd5, 0xd3, 0xd3, 0x29, 0xeb, 0xcc, 0x7a,
5249 0x4e, 0x24, 0xef, 0x8d, 0xb3, 0xef, 0xe6, 0x15, 0xc2,
5250 0xa9, 0x10, 0x2d, 0xfa, 0x7a, 0x49, 0xc3, 0x70, 0xf3,
5251 0x33, 0xc6, 0x2a, 0xc1, 0x96, 0xfb, 0x49, 0x49, 0xc6,
5252 0x44, 0x09, 0x49, 0x27, 0x12, 0xe3, 0xb4, 0x23, 0xfa,
5253 0xf6, 0x21, 0x44, 0x3e, 0x6d, 0x07, 0xe7, 0x67, 0x38,
5254 0x49, 0x7e, 0x30, 0x1d, 0x41, 0xc2, 0x6a, 0x41, 0x4e,
5255 0x8d, 0x08, 0xff, 0x11, 0x8d, 0x65, 0xb6, 0xa2, 0xd6,
5256 0x76, 0x8d, 0x18, 0x88, 0x3c, 0x52, 0x46, 0x6b, 0x5a,
5257 0xf5, 0x8c, 0xf8, 0x33, 0x59, 0x04, 0xa2, 0xeb, 0xb1,
5258 0xc0, 0x26, 0x73, 0xc8, 0x0c, 0x28, 0x5d, 0x67, 0x71,
5259 0x06, 0x7b, 0x0d, 0xb6, 0xe6, 0xe9, 0x31, 0x56, 0x40,
5260 0x5b, 0xb2, 0xf5, 0xb6, 0x1b, 0x5b, 0xe8, 0x0d, 0xf0,
5261 0xdb, 0x6a, 0xe5, 0xfa, 0x8a, 0x9f, 0xc6, 0x9d, 0xb8,
5262 0x0b, 0xe2, 0x15, 0xa0, 0xae, 0x17, 0xb8, 0x08, 0xf6,
5263 0xa0, 0x0c, 0x52, 0x55, 0x5b, 0x4b, 0x31, 0x88, 0xe7,
5264 0x1e, 0xa3, 0x8f, 0xf0, 0x85, 0x83, 0xb6, 0xca, 0xbd,
5265 0x0b, 0x3f, 0x86, 0xb4, 0x4f, 0x2a, 0x49, 0x4c, 0xf5,
5266 0x4b, 0xb4, 0x13, 0x20, 0xbd, 0xcd, 0x8b, 0xeb, 0xd1,
5267 0xe8, 0xb5, 0x66, 0x43, 0x5e, 0x9f, 0x6b, 0x29, 0x49,
5268 0xe2, 0x15, 0x2c, 0x5f, 0x72, 0x1d, 0x04, 0x90, 0xdb,
5269 0x80, 0xf5, 0x64, 0x16, 0x4d, 0xbc, 0x6f, 0x39, 0x49,
5270 0x33, 0xda, 0xdd, 0x7b, 0x98, 0xef, 0x28, 0xb0, 0x4f,
5271 0x54, 0x06, 0x4f, 0x9a, 0xb8, 0x4e, 0xa7, 0xf6, 0xfd,
5272 0x92, 0xf3, 0xbb, 0x07, 0x1e, 0xee, 0x8b, 0x3b, 0x92,
5273 0x4e, 0xa9, 0xf1, 0x82, 0xe7, 0x07, 0xa0, 0x6f, 0x80,
5274 0xc6, 0x12, 0x94, 0x85, 0xc6, 0x48, 0xa7, 0xae, 0xc6,
5275 0xe0, 0x0c, 0xdb, 0xb1, 0xae, 0x41, 0xfd, 0x91, 0x27,
5276 0x3f, 0xb8, 0x37, 0x0e, 0xa5, 0xac, 0x9b, 0x19, 0xa7,
5277 0xfe, 0x00, 0x0b, 0x4f, 0x45, 0xa5, 0x86, 0xdd, 0x04,
5278 0xe7, 0x93, 0x56, 0x52, 0x26, 0x93, 0x13, 0x00, 0xea,
5279 0xf9, 0x00, 0xb9, 0x9d, 0x50, 0xb7, 0xa6, 0x8e, 0x7f,
5280 0xc5, 0x17, 0xb5, 0x81, 0x41, 0x2b, 0x2b, 0x19, 0x3c,
5281 0xc5, 0xd8, 0xb0, 0x2c, 0xab, 0x61, 0x02, 0x7c, 0xee,
5282 0xe8, 0x70, 0x17, 0x18, 0xea, 0xe5, 0x84, 0x7b, 0x67,
5283 0x4d, 0x68, 0xd3, 0x71, 0x77, 0x5e, 0xbd, 0x40, 0x13,
5284 0x5a, 0x24, 0x96, 0x21, 0x65, 0xf2, 0xf7, 0xdb, 0xfd,
5285 0x70, 0x69, 0xad, 0x1d, 0x8c, 0x88, 0xf2, 0xd2, 0xe1,
5286 0x3b, 0xf0, 0x49, 0xe8, 0x47, 0xf6, 0xe5, 0x19, 0x80,
5287 0x37, 0xa9, 0x0d, 0x19, 0x6d, 0x49, 0xee, 0x04, 0xb0,
5288 0x8e, 0x21, 0x0a, 0xb9, 0x96, 0x7b, 0x37, 0x6c, 0xf8,
5289 0x75, 0xb6, 0xcc, 0x66, 0xd7, 0x7e, 0x70, 0xa8, 0x2a,
5290 0x0f, 0x7f, 0x06, 0xe2, 0x0c, 0xb2, 0xd4, 0x69, 0xb5,
5291 0x9f, 0x2b, 0x59, 0xe5, 0xed, 0x0f, 0x27, 0x90, 0x79,
5292 0x55, 0xd4, 0xe4, 0x82, 0x6b, 0x5b, 0x6b, 0xa9, 0x8d,
5293 0x7c, 0xb3, 0x0f, 0x18, 0x04, 0xc6, 0xc4, 0x35, 0x01,
5294 0x01, 0xdc, 0x79, 0x06, 0x84, 0x81, 0x17, 0x74, 0xaf,
5295 0xc1, 0xbd, 0xc6, 0xa8, 0x4b, 0xae, 0x3b, 0xd3, 0xe2,
5296 0xdf, 0xe0, 0x81, 0x80, 0xf0, 0xa5, 0x09 ),
5297 PLAINTEXT ( 0xf8, 0x00, 0x7e, 0x07, 0x49, 0x51, 0xf1, 0x1f, 0x55,
5298 0xe1, 0x07, 0x36, 0xb5, 0xdd, 0x17, 0xab, 0xff, 0x63,
5299 0xe8, 0x7a ),
5300 CIPHERTEXT ( 0xa8, 0x6d, 0xf5, 0x40, 0x84, 0x63, 0xe8, 0xba, 0xa3,
5301 0x19, 0x8e, 0xb8, 0xb9, 0x31, 0xa2, 0x29, 0x8c, 0xeb,
5302 0xb0, 0x97 ),
5303 AUTH ( 0x67, 0x3d, 0xa0, 0x4c, 0x8e, 0xe1, 0xbb, 0xf2, 0xf7, 0xbe,
5304 0x33, 0xc7, 0xbe, 0x2d, 0x09, 0xa5 ) );
5305
5306/* AES-GCM test case 211 */
5307CIPHER_TEST ( wycheproof_aes_gcm_49e334ce, &aes_gcm_algorithm,
5308 KEY ( 0xd4, 0x09, 0x00, 0x19, 0xa0, 0x7d, 0xe8, 0xff, 0x31, 0xe9,
5309 0x8f, 0xd1, 0x89, 0x8f, 0xfb, 0xd8, 0xc1, 0x00, 0x1f, 0x58,
5310 0x26, 0x9a, 0x64, 0x33 ),
5311 IV ( 0x65, 0xae, 0xaa, 0x5e, 0xd2, 0xc6, 0x3a, 0xfd, 0x95, 0xff,
5312 0x52, 0x2a ),
5313 ADDITIONAL ( 0x37, 0xdf, 0x31, 0x1e, 0xda, 0xb4, 0x30, 0x3e, 0x9b,
5314 0x10, 0xdc, 0x83, 0xa9, 0x0e, 0x85, 0x62, 0xc5, 0x5a,
5315 0xeb, 0x9a, 0xb9, 0x85, 0x64, 0x43, 0x74, 0x68, 0xc6,
5316 0xb4, 0x1d, 0x3e, 0x08, 0x89, 0x80, 0x79, 0xc9, 0xd8,
5317 0x18, 0xe1, 0xca, 0x0f, 0x02, 0x49, 0xec, 0x36, 0xc1,
5318 0x83, 0xd2, 0x66, 0x78, 0x82, 0x8f, 0x05, 0x36, 0xcb,
5319 0x06, 0xa8, 0x74, 0x87, 0x09, 0x33, 0x08, 0x77, 0x15,
5320 0x5c, 0xa9, 0xa7, 0xf8, 0x76, 0x29, 0x86, 0x8c, 0x12,
5321 0x6b, 0x3d, 0xfb, 0xa2, 0x62, 0xe0, 0xe5, 0xec, 0x2e,
5322 0x49, 0x3e, 0xa5, 0x1e, 0x45, 0x66, 0xa9, 0x4d, 0x82,
5323 0x5c, 0x47, 0x79, 0x26, 0x34, 0xc8, 0xd9, 0x94, 0x46,
5324 0x66, 0x00, 0x1e, 0x12, 0xad, 0x23, 0x99, 0xa4, 0xdd,
5325 0xed, 0x6e, 0x2c, 0x67, 0x83, 0x0f, 0xd5, 0x27, 0x95,
5326 0x6c, 0x02, 0xf2, 0xeb, 0x1b, 0xc5, 0x59, 0x91, 0xcc,
5327 0x8b, 0xe6, 0x09, 0xb3, 0x49, 0x0c, 0x0c, 0x2a, 0x40,
5328 0x63, 0xf0, 0xf2, 0xbd, 0x2a, 0x32, 0x03, 0x32, 0x8e,
5329 0xa6, 0x81, 0x65, 0x79, 0xae, 0xd7, 0x60, 0x90, 0x80,
5330 0x9e, 0x51, 0x17, 0x5f, 0x27, 0x52, 0x86, 0xf5, 0x6e,
5331 0x77, 0xd0, 0x45, 0x5f, 0x9e, 0xc4, 0x5c, 0x0e, 0xd2,
5332 0xf0, 0xf4, 0x54, 0x37, 0x43, 0x82, 0xa3, 0xb2, 0xd0,
5333 0x43, 0x86, 0x2d, 0x3e, 0xe0, 0x69, 0xd5, 0x96, 0x6c,
5334 0xbe, 0x01, 0x79, 0x27, 0xa8, 0xa8, 0xaa, 0xf5, 0x87,
5335 0x3d, 0xe0, 0x38, 0xd9, 0x40, 0x37, 0x5b, 0x3a, 0x29,
5336 0x71, 0xd4, 0x53, 0xe6, 0x46, 0xdb, 0xbb, 0x61, 0x42,
5337 0x46, 0x32, 0x5f, 0x1f, 0x88, 0x63, 0x9c, 0x1e, 0x86,
5338 0x8e, 0x43, 0xb7, 0x86, 0x8f, 0x37, 0xcd, 0x57, 0x7f,
5339 0x8c, 0xe3, 0x5f, 0xf0, 0x5b, 0xc0, 0x15, 0x99, 0x92,
5340 0xc3, 0x4b, 0x93, 0x3e, 0xb9, 0xc5, 0x0b, 0xf9, 0xd5,
5341 0x25, 0x7d, 0x91, 0xb6, 0x44, 0xf0, 0xb2, 0x65, 0x8c,
5342 0x63, 0x01, 0x0a, 0xfc, 0x9f, 0xc4, 0x9f, 0x60, 0xa5,
5343 0x0b, 0x6f, 0x7a, 0xe9, 0x94, 0xd4, 0x37, 0x73, 0x13,
5344 0xb9, 0xe7, 0x86, 0x57, 0xcc, 0xcd, 0xf4, 0xcd, 0xfa,
5345 0x5d, 0x96, 0xeb, 0x5e, 0x93, 0x56, 0x13, 0xa2, 0x7d,
5346 0x10, 0x9b, 0x5c, 0x20, 0x43, 0x4c, 0xa1, 0x08, 0xf0,
5347 0x5d, 0xf5, 0xf7, 0x98, 0xd8, 0xbb, 0x42, 0x1c, 0x3e,
5348 0x9d, 0xc2, 0xf5, 0x46, 0xd1, 0xb4, 0x50, 0x50, 0xa2,
5349 0x6f, 0x88, 0x9a, 0xe0, 0x23, 0x5d, 0x2c, 0x39, 0xb1,
5350 0xea, 0x4b, 0x2f, 0x3b, 0x52, 0x67, 0x27, 0x27, 0xc9,
5351 0xe5, 0xda, 0x6d, 0xb7, 0x31, 0xc3, 0x53, 0x9c, 0x80,
5352 0xd1, 0x05, 0x38, 0xe6, 0x96, 0x43, 0xc7, 0x9c, 0x68,
5353 0x10, 0x14, 0xf8, 0x4f, 0xb3, 0xa8, 0x35, 0x6d, 0xba,
5354 0xfb, 0xeb, 0x6e, 0x8e, 0x70, 0x1c, 0x44, 0x5d, 0x52,
5355 0x4b, 0x63, 0xb1, 0xb8, 0xff, 0xf4, 0x9c, 0x4f, 0xbc,
5356 0xf6, 0x72, 0xa0, 0x79, 0x77, 0xb9, 0x66, 0x1f, 0x47,
5357 0x2e, 0xfc, 0x50, 0x8d, 0x43, 0x0c, 0xef, 0xe8, 0xe7,
5358 0x44, 0xf3, 0x24, 0xc2, 0x28, 0x46, 0x06, 0x0c, 0x63,
5359 0x7a, 0xda, 0x1e, 0x83, 0xa1, 0x77, 0xad, 0x25, 0x20,
5360 0xb8, 0xac, 0x21, 0x4b, 0x84, 0x4c, 0x50, 0x64, 0x93,
5361 0x43, 0x4f, 0x8f, 0x16, 0x66, 0xa0, 0xbb, 0x6a, 0x3f,
5362 0x57, 0xec, 0x6c, 0x4e, 0xfd, 0x3f, 0x13, 0x8f, 0xb7,
5363 0x67, 0xd7, 0xef, 0x6c, 0xac, 0x7c, 0x9d, 0x31, 0xdb,
5364 0x5c, 0x95, 0x4b, 0x7a, 0x7f, 0xd2, 0xa8, 0x73, 0x08,
5365 0xf9, 0x97, 0xed, 0xa1, 0xd8, 0xae, 0x8c, 0xc0, 0xc7,
5366 0x21, 0x1e, 0xc1, 0x3f, 0xc6, 0xfd, 0xa8, 0x45, 0xea,
5367 0xdc, 0xd2, 0x5c, 0x7f, 0x7a, 0x9c, 0x69, 0xcc, 0x38,
5368 0xd9, 0x14, 0x39, 0xfe, 0x7e, 0xf1, 0x53, 0x83, 0x5f,
5369 0xd9, 0x72, 0xe2, 0x18, 0x59, 0x4c, 0x2a, 0x06 ),
5370 PLAINTEXT ( 0xab, 0xe8, 0x60, 0x98, 0xf7, 0x98, 0x94, 0x6a, 0xdd,
5371 0x9b, 0x1b, 0x07, 0x8f, 0x16, 0x35, 0x8e, 0xa0, 0xdd,
5372 0x0c, 0xd1 ),
5373 CIPHERTEXT ( 0x9d, 0x0a, 0x4e, 0x2f, 0xcd, 0x6f, 0xf3, 0x0c, 0xb3,
5374 0xcc, 0xaa, 0xa2, 0x9f, 0x31, 0x13, 0x92, 0xe1, 0xb4,
5375 0x3f, 0xe4 ),
5376 AUTH ( 0xf3, 0x5d, 0xac, 0x66, 0x5c, 0x8b, 0xac, 0x31, 0xf6, 0xab,
5377 0x05, 0x87, 0x61, 0x5e, 0xc1, 0xbc ) );
5378
5379/* AES-GCM test case 212 */
5380CIPHER_TEST ( wycheproof_aes_gcm_6677d2a7, &aes_gcm_algorithm,
5381 KEY ( 0x2c, 0xa0, 0x90, 0xf0, 0xf4, 0xec, 0x5a, 0xfd, 0xf4, 0xa3,
5382 0xcf, 0xb2, 0x53, 0xfe, 0x2e, 0x87, 0x77, 0x1d, 0xdd, 0x5b,
5383 0x03, 0x75, 0xf5, 0x67 ),
5384 IV ( 0x4c, 0x48, 0xb1, 0x51, 0x43, 0xa3, 0xf4, 0x03, 0x05, 0xc7,
5385 0x0c, 0xd6 ),
5386 ADDITIONAL ( 0x89, 0x4f, 0xb5, 0x98, 0xd6, 0x7e, 0x5d, 0x2d, 0x43,
5387 0x4f, 0xd2, 0x16, 0xd3, 0x8e, 0x69, 0x63, 0x1e, 0x69,
5388 0xc2, 0x3e, 0x48, 0x8f, 0xfb, 0xde, 0x6e, 0x4f, 0xf8,
5389 0x4b, 0x10, 0xf5, 0x15, 0x63, 0xda, 0x1c, 0x8c, 0xa0,
5390 0x53, 0x08, 0xfd, 0xa7, 0x43, 0xaf, 0x0c, 0x55, 0xc3,
5391 0x71, 0x44, 0x79, 0xd0, 0xb3, 0x37, 0xb6, 0x15, 0x7c,
5392 0x06, 0x5b, 0xf7, 0x4e, 0x95, 0x27, 0x98, 0x5a, 0x76,
5393 0x56, 0x18, 0x43, 0xf3, 0x47, 0xf1, 0x52, 0x68, 0xf2,
5394 0xc9, 0xb7, 0x78, 0xb2, 0x73, 0xa6, 0x49, 0x6c, 0x0b,
5395 0x13, 0xdd, 0x6b, 0xed, 0xd7, 0x87, 0x6b, 0x33, 0x6a,
5396 0xba, 0xc4, 0xe8, 0x71, 0x58, 0x4c, 0x54, 0xc8, 0xab,
5397 0x1e, 0xe7, 0x31, 0xbe, 0x17, 0xed, 0x00, 0x44, 0xc8,
5398 0x2f, 0xef, 0x47, 0x34, 0x11, 0x31, 0xf3, 0xce, 0x09,
5399 0x91, 0x8d, 0xc2, 0x92, 0x0a, 0x8b, 0x64, 0x26, 0xef,
5400 0x40, 0xa3, 0xa5, 0x39, 0x23, 0x0a, 0x28, 0xe2, 0x63,
5401 0x6d, 0x27, 0xe4, 0x2a, 0x26, 0x36, 0xd0, 0x16, 0xbb,
5402 0x58, 0xef, 0x89, 0x87, 0xfb, 0x52, 0xf0, 0x66, 0xe7,
5403 0x5e, 0x31, 0x93, 0xa8, 0xf9, 0x8f, 0x58, 0xf6, 0xeb,
5404 0x61, 0x78, 0xbf, 0x93, 0x0c, 0xca, 0x0f, 0xfc, 0x57,
5405 0x28, 0xd6, 0x7a, 0x9e, 0x02, 0x35, 0x10, 0x51, 0xb4,
5406 0x7a, 0xbc, 0xcc, 0x8e, 0x8a, 0xfa, 0xef, 0xf2, 0x13,
5407 0x4c, 0x79, 0xa0, 0x8d, 0x3c, 0x4f, 0x59, 0x6d, 0xe2,
5408 0x27, 0xf8, 0x7f, 0x48, 0xf5, 0x3f, 0x60, 0x71, 0x50,
5409 0x54, 0xbb, 0x59, 0xe9, 0x64, 0x0b, 0x3f, 0x22, 0x48,
5410 0x17, 0xff, 0x24, 0x53, 0xcd, 0x68, 0x57, 0x40, 0xbb,
5411 0xd6, 0x5f, 0x7d, 0xe9, 0xd7, 0x1d, 0x04, 0x1a, 0x90,
5412 0xa5, 0x14, 0x61, 0x22, 0xe1, 0xc1, 0x3b, 0xba, 0xf3,
5413 0x64, 0xa7, 0xbc, 0x30, 0xe1, 0x82, 0x7c, 0xb9, 0x62,
5414 0xaa, 0x40, 0x9f, 0xef, 0xcc, 0x2d, 0x51, 0x2c, 0xef,
5415 0x53, 0xb3, 0xf0, 0x05, 0x95, 0x50, 0xc5, 0x46, 0x42,
5416 0x19, 0xb6, 0x36, 0x08, 0x27, 0x68, 0xf6, 0x12, 0x96,
5417 0xcd, 0x1e, 0xef, 0x8c, 0xce, 0x71, 0xc1, 0x7c, 0x84,
5418 0xfd, 0x47, 0x17, 0xe2, 0x31, 0xbb, 0x5b, 0xe2, 0x72,
5419 0x83, 0x9b, 0xd7, 0x38, 0x5c, 0x8e, 0xf8, 0x68, 0x01,
5420 0x00, 0x21, 0x2e, 0xca, 0xb4, 0x43, 0x0a, 0x8b, 0xb6,
5421 0xfa, 0x65, 0x99, 0xc4, 0x7a, 0xce, 0x67, 0x34, 0x09,
5422 0x90, 0x1b, 0x0f, 0x09, 0x8b, 0x61, 0x72, 0x09, 0x20,
5423 0x41, 0x9f, 0x03, 0x3c, 0x5e, 0xfc, 0x7c, 0xf6, 0x33,
5424 0x04, 0x70, 0x21, 0xc8, 0x32, 0x96, 0x97, 0xa3, 0x88,
5425 0x7b, 0xa7, 0xd0, 0xe4, 0xce, 0x8e, 0x57, 0x3c, 0x9c,
5426 0x05, 0x5d, 0xaf, 0x28, 0x57, 0x82, 0xeb, 0x06, 0x57,
5427 0xeb, 0xf4, 0x66, 0x6f, 0x4f, 0xe0, 0x78, 0xf2, 0xfb,
5428 0x93, 0x32, 0x3b, 0x71, 0x51, 0xd9, 0x5a, 0xf1, 0xff,
5429 0xb5, 0xbd, 0xde, 0xc2, 0xfb, 0x1e, 0x96, 0xb4, 0xc7,
5430 0x0a, 0x0b, 0x81, 0x62, 0x22, 0x49, 0x05, 0xdd, 0x2c,
5431 0x0a, 0xcb, 0x9b, 0x1c, 0x1c, 0x33, 0x2b, 0xdd, 0x35,
5432 0x6d, 0x05, 0xb5, 0xfa, 0xb9, 0x81, 0x3c, 0x16, 0xf8,
5433 0x93, 0xdc, 0xce, 0x2a, 0x95, 0xb0, 0xb3, 0x4d, 0x4d,
5434 0x9a, 0x59, 0x97, 0x03, 0x7a, 0x90, 0xde, 0xd2, 0x2d,
5435 0xe5, 0xe4, 0xd0, 0xe3, 0xe4, 0x10, 0x56, 0x9d, 0x3b,
5436 0x01, 0x0d, 0x31, 0xba, 0x78, 0x84, 0x3c, 0x6b, 0x62,
5437 0x26, 0xf3, 0x64, 0xec, 0xc9, 0x69, 0x56, 0x23, 0xce,
5438 0x1c, 0x1c, 0x21, 0xbf, 0x57, 0x34, 0xe0, 0x8c, 0x30,
5439 0x97, 0xd0, 0xf3, 0x2a, 0x06, 0x24, 0xd3, 0x2b, 0x9e,
5440 0xb4, 0x9f, 0x7a, 0xe6, 0x1b, 0x68, 0xc5, 0x0f, 0x59,
5441 0x20, 0xdb, 0x67, 0x5a, 0x5a, 0x8a, 0x73, 0xcd, 0x28,
5442 0x83, 0x64, 0xec, 0x97, 0x05, 0xdb, 0x79, 0x98, 0x93 ),
5443 PLAINTEXT ( 0x00, 0xf6, 0x84, 0x0e, 0x9b, 0x66, 0xef, 0x3b, 0x6b,
5444 0xe0, 0x1f, 0x74, 0xdf, 0xea, 0x1c, 0xa4, 0x08, 0x03,
5445 0x8e, 0xf5 ),
5446 CIPHERTEXT ( 0xda, 0xf4, 0xf2, 0xee, 0xd7, 0x2c, 0x51, 0x94, 0x1e,
5447 0x80, 0x38, 0xe9, 0x2c, 0x5d, 0x92, 0x72, 0xc2, 0xb2,
5448 0xd9, 0x7b ),
5449 AUTH ( 0x5c, 0x3f, 0xd7, 0xda, 0x0d, 0xfb, 0xf6, 0x7c, 0x11, 0xac,
5450 0xb8, 0x66, 0xca, 0xf9, 0x2a, 0x99 ) );
5451
5452/* AES-GCM test case 213 (skipped: modified tag) */
5453
5454/* AES-GCM test case 214 (skipped: modified tag) */
5455
5456/* AES-GCM test case 215 (skipped: modified tag) */
5457
5458/* AES-GCM test case 216 (skipped: modified tag) */
5459
5460/* AES-GCM test case 217 (skipped: modified tag) */
5461
5462/* AES-GCM test case 218 (skipped: modified tag) */
5463
5464/* AES-GCM test case 219 (skipped: modified tag) */
5465
5466/* AES-GCM test case 220 (skipped: modified tag) */
5467
5468/* AES-GCM test case 221 (skipped: modified tag) */
5469
5470/* AES-GCM test case 222 (skipped: modified tag) */
5471
5472/* AES-GCM test case 223 (skipped: modified tag) */
5473
5474/* AES-GCM test case 224 (skipped: modified tag) */
5475
5476/* AES-GCM test case 225 (skipped: modified tag) */
5477
5478/* AES-GCM test case 226 (skipped: modified tag) */
5479
5480/* AES-GCM test case 227 (skipped: modified tag) */
5481
5482/* AES-GCM test case 228 (skipped: modified tag) */
5483
5484/* AES-GCM test case 229 (skipped: modified tag) */
5485
5486/* AES-GCM test case 230 (skipped: modified tag) */
5487
5488/* AES-GCM test case 231 (skipped: modified tag) */
5489
5490/* AES-GCM test case 232 (skipped: modified tag) */
5491
5492/* AES-GCM test case 233 (skipped: modified tag) */
5493
5494/* AES-GCM test case 234 (skipped: modified tag) */
5495
5496/* AES-GCM test case 235 (skipped: modified tag) */
5497
5498/* AES-GCM test case 236 (skipped: modified tag) */
5499
5500/* AES-GCM test case 237 (skipped: modified tag) */
5501
5502/* AES-GCM test case 238 (skipped: modified tag) */
5503
5504/* AES-GCM test case 239 (skipped: modified tag) */
5505
5506/* AES-GCM test case 240 */
5507CIPHER_TEST ( wycheproof_aes_gcm_5d6316ec, &aes_gcm_algorithm,
5508 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5509 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5510 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5511 0xfe, 0x0f ),
5512 IV ( 0x5c, 0x2e, 0xa9, 0xb6, 0x95, 0xfc, 0xf6, 0xe2, 0x64, 0xb9,
5513 0x60, 0x74, 0xd6, 0xbf, 0xa5, 0x72 ),
5514 ADDITIONAL(),
5515 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5516 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5517 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5518 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5519 0x00, 0x00, 0x00, 0x00 ),
5520 CIPHERTEXT ( 0x28, 0xe1, 0xc5, 0x23, 0x2f, 0x4e, 0xe8, 0x16, 0x1d,
5521 0xbe, 0x4c, 0x03, 0x63, 0x09, 0xe0, 0xb3, 0x25, 0x4e,
5522 0x92, 0x12, 0xbe, 0xf0, 0xa9, 0x34, 0x31, 0xce, 0x5e,
5523 0x56, 0x04, 0xc8, 0xf6, 0xa7, 0x3c, 0x18, 0xa3, 0x18,
5524 0x30, 0x18, 0xb7, 0x70 ),
5525 AUTH ( 0xd5, 0x80, 0x8a, 0x1b, 0xd1, 0x1a, 0x01, 0x12, 0x9b, 0xf3,
5526 0xc6, 0x91, 0x9a, 0xff, 0x23, 0x39 ) );
5527
5528/* AES-GCM test case 241 */
5529CIPHER_TEST ( wycheproof_aes_gcm_6c7b5516, &aes_gcm_algorithm,
5530 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5531 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5532 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5533 0xfe, 0x0f ),
5534 IV ( 0x57, 0xb3, 0xa8, 0x1f, 0x2c, 0x36, 0xb6, 0xb0, 0x65, 0x77,
5535 0xca, 0x0f, 0xba, 0xb8, 0xfa, 0x8e ),
5536 ADDITIONAL(),
5537 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5538 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5539 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5540 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5541 0x00, 0x00, 0x00, 0x00 ),
5542 CIPHERTEXT ( 0xcc, 0xee, 0xbe, 0xb4, 0xfe, 0x4c, 0xd9, 0x0c, 0x51,
5543 0x4e, 0x52, 0xd2, 0x32, 0x7a, 0x2e, 0xcd, 0x75, 0x39,
5544 0x36, 0x61, 0x00, 0x6c, 0xf2, 0x47, 0x6d, 0x86, 0x20,
5545 0x14, 0x9a, 0xef, 0x3d, 0x1c, 0xdc, 0xe4, 0x91, 0xff,
5546 0xf3, 0xe7, 0xa7, 0xa3 ),
5547 AUTH ( 0x81, 0x32, 0xe8, 0x65, 0xb6, 0x9d, 0x64, 0xef, 0x37, 0xdb,
5548 0x26, 0x1f, 0x80, 0xcb, 0xbe, 0x24 ) );
5549
5550/* AES-GCM test case 242 */
5551CIPHER_TEST ( wycheproof_aes_gcm_3d134168, &aes_gcm_algorithm,
5552 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5553 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5554 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5555 0xfe, 0x0f ),
5556 IV ( 0xce, 0x20, 0xa7, 0xe8, 0x70, 0x69, 0x6a, 0x5e, 0x68, 0x53,
5557 0x3c, 0x46, 0x5b, 0xad, 0x2b, 0xa1 ),
5558 ADDITIONAL(),
5559 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5560 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5561 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5562 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5563 0x00, 0x00, 0x00, 0x00 ),
5564 CIPHERTEXT ( 0x4f, 0x43, 0x50, 0x56, 0x5d, 0x91, 0xd9, 0xaa, 0x8c,
5565 0x5f, 0x40, 0x48, 0x55, 0x04, 0x92, 0xad, 0x6d, 0x6f,
5566 0xda, 0xbf, 0x66, 0xda, 0x5d, 0x1e, 0x2a, 0xf7, 0xbf,
5567 0xe1, 0xa8, 0xaa, 0xda, 0xa0, 0xba, 0xa3, 0xde, 0x38,
5568 0xa4, 0x1d, 0x97, 0x13 ),
5569 AUTH ( 0x15, 0x5d, 0xa6, 0x44, 0x1e, 0xc0, 0x71, 0xef, 0x2d, 0x8e,
5570 0x6c, 0xff, 0xba, 0xcc, 0x1c, 0x7c ) );
5571
5572/* AES-GCM test case 243 */
5573CIPHER_TEST ( wycheproof_aes_gcm_637cdd7c, &aes_gcm_algorithm,
5574 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5575 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5576 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5577 0xfe, 0x0f ),
5578 IV ( 0x91, 0x8e, 0x3c, 0x19, 0xdb, 0xdf, 0xee, 0x2d, 0xb1, 0x81,
5579 0x56, 0xc5, 0xb9, 0x3f, 0x3d, 0x75 ),
5580 ADDITIONAL(),
5581 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5582 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5583 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5584 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5585 0x00, 0x00, 0x00, 0x00 ),
5586 CIPHERTEXT ( 0x83, 0x16, 0xa5, 0x31, 0x67, 0xb6, 0xde, 0x1a, 0x75,
5587 0x75, 0x70, 0x06, 0x93, 0xff, 0xef, 0x27, 0x4f, 0x43,
5588 0x50, 0x56, 0x5d, 0x91, 0xd9, 0xaa, 0x8c, 0x5f, 0x40,
5589 0x48, 0x55, 0x04, 0x92, 0xad, 0x6d, 0x6f, 0xda, 0xbf,
5590 0x66, 0xda, 0x5d, 0x1e ),
5591 AUTH ( 0x6c, 0x57, 0x4a, 0xa6, 0xa2, 0x49, 0x0c, 0xc3, 0xb2, 0xf2,
5592 0xf8, 0xf0, 0xff, 0xbc, 0x56, 0xc4 ) );
5593
5594/* AES-GCM test case 244 */
5595CIPHER_TEST ( wycheproof_aes_gcm_a524a3e1, &aes_gcm_algorithm,
5596 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5597 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5598 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5599 0xfe, 0x0f ),
5600 IV ( 0x71, 0x7d, 0x90, 0x0b, 0x27, 0x04, 0x62, 0xb9, 0xdb, 0xf7,
5601 0xe9, 0x41, 0x9e, 0x89, 0x06, 0x09 ),
5602 ADDITIONAL(),
5603 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5604 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5605 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5606 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5607 0x00, 0x00, 0x00, 0x00 ),
5608 CIPHERTEXT ( 0x51, 0x75, 0x92, 0x75, 0x13, 0xe7, 0x51, 0xeb, 0x30,
5609 0x9f, 0x45, 0xbc, 0x2e, 0xf2, 0x25, 0xf2, 0x83, 0x16,
5610 0xa5, 0x31, 0x67, 0xb6, 0xde, 0x1a, 0x75, 0x75, 0x70,
5611 0x06, 0x93, 0xff, 0xef, 0x27, 0x4f, 0x43, 0x50, 0x56,
5612 0x5d, 0x91, 0xd9, 0xaa ),
5613 AUTH ( 0x80, 0x82, 0xa7, 0x61, 0xe1, 0xd7, 0x55, 0x34, 0x4b, 0xf2,
5614 0x96, 0x22, 0x14, 0x4e, 0x7d, 0x39 ) );
5615
5616/* AES-GCM test case 245 */
5617CIPHER_TEST ( wycheproof_aes_gcm_b5f09448, &aes_gcm_algorithm,
5618 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5619 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5620 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5621 0xfe, 0x0f ),
5622 IV ( 0xec, 0xd5, 0x21, 0x20, 0xaf, 0x24, 0x0e, 0x9b, 0x4b, 0xf3,
5623 0xb9, 0xd1, 0xee, 0xb4, 0x94, 0x34 ),
5624 ADDITIONAL(),
5625 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5626 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5627 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5628 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5629 0x00, 0x00, 0x00, 0x00 ),
5630 CIPHERTEXT ( 0x36, 0xb3, 0xfb, 0xec, 0xd0, 0x91, 0x78, 0xd0, 0x45,
5631 0x27, 0xfb, 0x37, 0x54, 0x4f, 0x55, 0x79, 0xd2, 0x0d,
5632 0x60, 0xa4, 0x12, 0x66, 0xf6, 0x85, 0xc4, 0x80, 0x98,
5633 0xe1, 0xa5, 0x28, 0x04, 0xca, 0x38, 0x7d, 0x90, 0x70,
5634 0x9d, 0x32, 0x68, 0xdd ),
5635 AUTH ( 0x03, 0x3e, 0x0e, 0xf2, 0x95, 0x3e, 0xbf, 0xd8, 0x42, 0x57,
5636 0x37, 0xc7, 0xd3, 0x93, 0xf8, 0x9a ) );
5637
5638/* AES-GCM test case 246 */
5639CIPHER_TEST ( wycheproof_aes_gcm_c90d1019, &aes_gcm_algorithm,
5640 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5641 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5642 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5643 0xfe, 0x0f ),
5644 IV ( 0xb3, 0x7b, 0xba, 0xd1, 0x04, 0x92, 0x8a, 0xe8, 0x92, 0x21,
5645 0xd3, 0x52, 0x0c, 0x26, 0x82, 0xe0 ),
5646 ADDITIONAL(),
5647 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5648 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5649 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5650 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5651 0x00, 0x00, 0x00, 0x00 ),
5652 CIPHERTEXT ( 0x16, 0x92, 0x9b, 0x77, 0x30, 0x51, 0xf1, 0x2b, 0x0a,
5653 0xda, 0xc9, 0x5f, 0x65, 0xe2, 0x1a, 0x7f, 0x36, 0xb3,
5654 0xfb, 0xec, 0xd0, 0x91, 0x78, 0xd0, 0x45, 0x27, 0xfb,
5655 0x37, 0x54, 0x4f, 0x55, 0x79, 0xd2, 0x0d, 0x60, 0xa4,
5656 0x12, 0x66, 0xf6, 0x85 ),
5657 AUTH ( 0xca, 0x44, 0x8b, 0xb7, 0xe5, 0x2e, 0x89, 0x7e, 0xca, 0x23,
5658 0x4e, 0xf3, 0x43, 0xd0, 0x57, 0xd0 ) );
5659
5660/* AES-GCM test case 247 */
5661CIPHER_TEST ( wycheproof_aes_gcm_cc16f896, &aes_gcm_algorithm,
5662 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5663 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5664 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5665 0xfe, 0x0f ),
5666 IV ( 0x53, 0x88, 0x16, 0xc3, 0xf8, 0x49, 0x06, 0x7c, 0xf8, 0x57,
5667 0x6c, 0xd6, 0x2b, 0x90, 0xb9, 0x9c ),
5668 ADDITIONAL(),
5669 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5670 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5671 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5672 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5673 0x00, 0x00, 0x00, 0x00 ),
5674 CIPHERTEXT ( 0x6d, 0x3f, 0xae, 0xfa, 0xf6, 0x91, 0xd5, 0x81, 0x63,
5675 0x84, 0x6f, 0x8d, 0x4b, 0x9f, 0xfd, 0x59, 0x16, 0x92,
5676 0x9b, 0x77, 0x30, 0x51, 0xf1, 0x2b, 0x0a, 0xda, 0xc9,
5677 0x5f, 0x65, 0xe2, 0x1a, 0x7f, 0x36, 0xb3, 0xfb, 0xec,
5678 0xd0, 0x91, 0x78, 0xd0 ),
5679 AUTH ( 0x84, 0xf4, 0x97, 0x40, 0xe6, 0x75, 0x7f, 0x63, 0xdd, 0x0d,
5680 0xf7, 0xcb, 0x76, 0x56, 0xd0, 0xef ) );
5681
5682/* AES-GCM test case 248 */
5683CIPHER_TEST ( wycheproof_aes_gcm_c9b9c25b, &aes_gcm_algorithm,
5684 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5685 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5686 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5687 0xfe, 0x0f ),
5688 IV ( 0xd1, 0x0e, 0x63, 0x19, 0x43, 0xcd, 0x3b, 0xda, 0xba, 0xba,
5689 0xb2, 0xbb, 0xd1, 0x39, 0x51, 0xc0 ),
5690 ADDITIONAL(),
5691 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5692 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5693 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5694 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5695 0x00, 0x00, 0x00, 0x00 ),
5696 CIPHERTEXT ( 0xd6, 0x01, 0x96, 0xc2, 0xd1, 0x4f, 0xcf, 0x30, 0xc0,
5697 0x99, 0x1d, 0x27, 0x21, 0xdd, 0xc5, 0x2d, 0x38, 0x5f,
5698 0x40, 0x7a, 0x16, 0x69, 0x1d, 0xad, 0xe8, 0x2c, 0x90,
5699 0x23, 0xc8, 0x55, 0xfd, 0x8e, 0x2e, 0x8f, 0xbb, 0x56,
5700 0x21, 0x02, 0xf0, 0x18 ),
5701 AUTH ( 0x87, 0x7e, 0x15, 0xd9, 0x88, 0x9e, 0x69, 0xa9, 0x9f, 0xcc,
5702 0x6d, 0x72, 0x74, 0x65, 0xc3, 0x91 ) );
5703
5704/* AES-GCM test case 249 */
5705CIPHER_TEST ( wycheproof_aes_gcm_9bcfa234, &aes_gcm_algorithm,
5706 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5707 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5708 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5709 0xfe, 0x0f ),
5710 IV ( 0x8e, 0xa0, 0xf8, 0xe8, 0xe8, 0x7b, 0xbf, 0xa9, 0x63, 0x68,
5711 0xd8, 0x38, 0x33, 0xab, 0x47, 0x14 ),
5712 ADDITIONAL(),
5713 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5714 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5715 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5716 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5717 0x00, 0x00, 0x00, 0x00 ),
5718 CIPHERTEXT ( 0x94, 0x8f, 0xbc, 0xec, 0xa1, 0x2a, 0x6e, 0x4f, 0xab,
5719 0xb7, 0x9b, 0x6d, 0x96, 0x5e, 0x33, 0x6f, 0xd6, 0x01,
5720 0x96, 0xc2, 0xd1, 0x4f, 0xcf, 0x30, 0xc0, 0x99, 0x1d,
5721 0x27, 0x21, 0xdd, 0xc5, 0x2d, 0x38, 0x5f, 0x40, 0x7a,
5722 0x16, 0x69, 0x1d, 0xad ),
5723 AUTH ( 0xcd, 0x57, 0x57, 0x62, 0x69, 0x45, 0x97, 0x6b, 0xa9, 0xf0,
5724 0x26, 0x4b, 0xd6, 0xbe, 0xe8, 0x94 ) );
5725
5726/* AES-GCM test case 250 */
5727CIPHER_TEST ( wycheproof_aes_gcm_02e3c344, &aes_gcm_algorithm,
5728 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5729 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5730 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5731 0xfe, 0x0f ),
5732 IV ( 0x7b, 0x2d, 0xf4, 0xfb, 0xed, 0x1d, 0xe2, 0x72, 0x7e, 0xb2,
5733 0x48, 0x98, 0xe5, 0xde, 0xab, 0xb9 ),
5734 ADDITIONAL(),
5735 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5736 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5737 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5738 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5739 0x00, 0x00, 0x00, 0x00 ),
5740 CIPHERTEXT ( 0xa1, 0xa0, 0x12, 0x06, 0x60, 0xff, 0x52, 0xe6, 0xb1,
5741 0x70, 0x0b, 0x12, 0xc5, 0x4d, 0x2d, 0x33, 0xb9, 0x4b,
5742 0x00, 0xcd, 0x78, 0x82, 0xd8, 0x85, 0x7d, 0x84, 0xe6,
5743 0xe1, 0x83, 0xa1, 0xde, 0xa6, 0xee, 0x85, 0xa7, 0xda,
5744 0x84, 0xfb, 0xc3, 0x5d ),
5745 AUTH ( 0xb0, 0x15, 0xd7, 0x2d, 0xa6, 0x2c, 0x81, 0xcb, 0x4d, 0x26,
5746 0x72, 0x53, 0xb2, 0x0d, 0xb9, 0xe5 ) );
5747
5748/* AES-GCM test case 251 */
5749CIPHER_TEST ( wycheproof_aes_gcm_0a6597f4, &aes_gcm_algorithm,
5750 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5751 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5752 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5753 0xfe, 0x0f ),
5754 IV ( 0x24, 0x83, 0x6f, 0x0a, 0x46, 0xab, 0x66, 0x01, 0xa7, 0x60,
5755 0x22, 0x1b, 0x07, 0x4c, 0xbd, 0x6d ),
5756 ADDITIONAL(),
5757 PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5758 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5759 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5760 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5761 0x00, 0x00, 0x00, 0x00 ),
5762 CIPHERTEXT ( 0x5e, 0x34, 0x34, 0xb4, 0x5e, 0xdb, 0xf0, 0xd1, 0xf6,
5763 0xe0, 0x2d, 0x11, 0x44, 0xdb, 0xf8, 0x67, 0xa1, 0xa0,
5764 0x12, 0x06, 0x60, 0xff, 0x52, 0xe6, 0xb1, 0x70, 0x0b,
5765 0x12, 0xc5, 0x4d, 0x2d, 0x33, 0xb9, 0x4b, 0x00, 0xcd,
5766 0x78, 0x82, 0xd8, 0x85 ),
5767 AUTH ( 0xee, 0x74, 0xcc, 0xb3, 0x0d, 0x64, 0x9e, 0xbf, 0x69, 0x16,
5768 0xd0, 0x5a, 0x7d, 0xbe, 0x56, 0x96 ) );
5769
5770/* AES-GCM test case 252 */
5771CIPHER_TEST ( wycheproof_aes_gcm_4723a634, &aes_gcm_algorithm,
5772 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5773 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5774 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5775 0xfe, 0x0f ),
5776 IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5777 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),
5778 ADDITIONAL(),
5779 PLAINTEXT ( 0x8d, 0x74, 0xf1, 0xc9, 0x72, 0x43, 0xd3, 0x62, 0x57,
5780 0x7f, 0xf3, 0x76, 0xc3, 0x93, 0xd2, 0xdc ),
5781 CIPHERTEXT ( 0x26, 0x5c, 0x42, 0xe2, 0xb9, 0x6e, 0xa1, 0xde, 0x9c,
5782 0x24, 0xf7, 0x18, 0x2e, 0x33, 0x73, 0x90 ),
5783 AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
5784 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
5785
5786/* AES-GCM test case 253 */
5787CIPHER_TEST ( wycheproof_aes_gcm_b7cd0c19, &aes_gcm_algorithm,
5788 KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
5789 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
5790 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
5791 0xfe, 0x0f ),
5792 IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
5793 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ),
5794 ADDITIONAL(),
5795 PLAINTEXT ( 0x88, 0x4d, 0xf0, 0xe7, 0x6f, 0x3c, 0xe2, 0x27, 0xbf,
5796 0x95, 0x95, 0xd1, 0x03, 0x82, 0x5a, 0x46 ),
5797 CIPHERTEXT ( 0x98, 0x8f, 0x47, 0x66, 0x8e, 0xa6, 0x50, 0xcb, 0xaa,
5798 0x67, 0x14, 0x71, 0x1a, 0xbe, 0x26, 0x8d ),
5799 AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
5800 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
5801
5802/* AES-GCM test case 254 */
5803CIPHER_TEST ( wycheproof_aes_gcm_bcf63dc2, &aes_gcm_algorithm,
5804 KEY ( 0xb4, 0xcd, 0x11, 0xdb, 0x0b, 0x3e, 0x0b, 0x9b, 0x34, 0xea,
5805 0xfd, 0x9f, 0xe0, 0x27, 0x74, 0x69, 0x76, 0x37, 0x91, 0x55,
5806 0xe7, 0x61, 0x16, 0xaf, 0xde, 0x1b, 0x96, 0xd2, 0x12, 0x98,
5807 0xe3, 0x4f ),
5808 IV ( 0x00, 0xc4, 0x9f, 0x4e, 0xbb, 0x07, 0x39, 0x3f, 0x07, 0xeb,
5809 0xc3, 0x82, 0x5f, 0x7b, 0x08, 0x30 ),
5810 ADDITIONAL(),
5811 PLAINTEXT(),
5812 CIPHERTEXT(),
5813 AUTH ( 0x30, 0x6f, 0xe8, 0xc9, 0x64, 0x5c, 0xc8, 0x49, 0x82, 0x3e,
5814 0x33, 0x3a, 0x68, 0x5b, 0x90, 0xb2 ) );
5815
5816/* AES-GCM test case 255 */
5817CIPHER_TEST ( wycheproof_aes_gcm_294b997d, &aes_gcm_algorithm,
5818 KEY ( 0xb7, 0x79, 0x7e, 0xb0, 0xc1, 0xa6, 0x08, 0x9a, 0xd5, 0x45,
5819 0x2d, 0x81, 0xfd, 0xb1, 0x48, 0x28, 0xc0, 0x40, 0xdd, 0xc4,
5820 0x58, 0x9c, 0x32, 0xb5, 0x65, 0xaa, 0xd8, 0xcb, 0x4d, 0xe3,
5821 0xe4, 0xa0 ),
5822 IV ( 0x0a, 0xd5, 0x70, 0xd8, 0x86, 0x39, 0x18, 0xfe, 0x89, 0x12,
5823 0x4e, 0x09, 0xd1, 0x25, 0xa2, 0x71 ),
5824 ADDITIONAL(),
5825 PLAINTEXT ( 0xed ),
5826 CIPHERTEXT ( 0x3f ),
5827 AUTH ( 0xfd, 0x8f, 0x59, 0x3b, 0x83, 0x31, 0x4e, 0x33, 0xc5, 0xa7,
5828 0x2e, 0xfb, 0xeb, 0x70, 0x95, 0xe8 ) );
5829
5830/* AES-GCM test case 256 */
5831CIPHER_TEST ( wycheproof_aes_gcm_c973e6d5, &aes_gcm_algorithm,
5832 KEY ( 0x4c, 0x01, 0x0d, 0x95, 0x61, 0xc7, 0x23, 0x4c, 0x30, 0x8c,
5833 0x01, 0xce, 0xa3, 0x04, 0x0c, 0x92, 0x5a, 0x9f, 0x32, 0x4d,
5834 0xc9, 0x58, 0xff, 0x90, 0x4a, 0xe3, 0x9b, 0x37, 0xe6, 0x0e,
5835 0x1e, 0x03 ),
5836 IV ( 0x2a, 0x55, 0xca, 0xa1, 0x37, 0xc5, 0xb0, 0xb6, 0x6c, 0xf3,
5837 0x80, 0x9e, 0xb8, 0xf7, 0x30, 0xc4 ),
5838 ADDITIONAL(),
5839 PLAINTEXT ( 0x2a, 0x09, 0x3c, 0x9e, 0xd7, 0x2b, 0x8f, 0xf4, 0x99,
5840 0x42, 0x01, 0xe9, 0xf9, 0xe0, 0x10 ),
5841 CIPHERTEXT ( 0x04, 0x13, 0x41, 0x07, 0x8f, 0x04, 0x39, 0xe5, 0x0b,
5842 0x43, 0xc9, 0x91, 0x63, 0x51, 0x17 ),
5843 AUTH ( 0x5b, 0x8a, 0x2f, 0x2d, 0xa2, 0x0e, 0xf6, 0x57, 0xc9, 0x03,
5844 0xda, 0x88, 0xef, 0x5f, 0x57, 0xbb ) );
5845
5846/* AES-GCM test case 257 */
5847CIPHER_TEST ( wycheproof_aes_gcm_9d586636, &aes_gcm_algorithm,
5848 KEY ( 0xe7, 0xf7, 0xa4, 0x8d, 0xf9, 0x9e, 0xdd, 0x92, 0xb8, 0x1f,
5849 0x50, 0x86, 0x18, 0xaa, 0x96, 0x52, 0x6b, 0x27, 0x9d, 0xeb,
5850 0xd9, 0xdd, 0xb2, 0x92, 0xd3, 0x85, 0xdd, 0xba, 0xe8, 0x0b,
5851 0x22, 0x59 ),
5852 IV ( 0x7e, 0xe3, 0x76, 0x91, 0x0f, 0x08, 0xf4, 0x97, 0xaa, 0x6c,
5853 0x3a, 0xa7, 0x11, 0x36, 0x97, 0xfd ),
5854 ADDITIONAL(),
5855 PLAINTEXT ( 0x5e, 0x51, 0xdb, 0xbb, 0x86, 0x1b, 0x5e, 0xc6, 0x07,
5856 0x51, 0xc0, 0x99, 0x6e, 0x00, 0x52, 0x7f ),
5857 CIPHERTEXT ( 0x46, 0x94, 0x78, 0xd4, 0x48, 0xf7, 0xe9, 0x7d, 0x75,
5858 0x55, 0x41, 0xaa, 0x09, 0xad, 0x95, 0xb0 ),
5859 AUTH ( 0x25, 0x4a, 0xda, 0x5c, 0xf6, 0x62, 0xd9, 0x0c, 0x5e, 0x11,
5860 0xb2, 0xbd, 0x9c, 0x4d, 0xb4, 0xc4 ) );
5861
5862/* AES-GCM test case 258 */
5863CIPHER_TEST ( wycheproof_aes_gcm_07918c73, &aes_gcm_algorithm,
5864 KEY ( 0x4f, 0x84, 0x78, 0x2b, 0xfb, 0xb6, 0x4a, 0x97, 0x3c, 0x3d,
5865 0xe3, 0xdc, 0xfa, 0x34, 0x30, 0x36, 0x7f, 0xd6, 0x8b, 0xc0,
5866 0xb4, 0xc3, 0xb3, 0x1e, 0x5d, 0x7c, 0x81, 0x41, 0xba, 0x3e,
5867 0x6a, 0x67 ),
5868 IV ( 0x5d, 0x1b, 0xde, 0x6f, 0xa0, 0x99, 0x4b, 0x33, 0xef, 0xd8,
5869 0xf2, 0x3f, 0x53, 0x12, 0x48, 0xa7 ),
5870 ADDITIONAL(),
5871 PLAINTEXT ( 0x78, 0xcb, 0x66, 0x50, 0xa1, 0x90, 0x8a, 0x84, 0x21,
5872 0x01, 0xea, 0x85, 0x80, 0x4f, 0xed, 0x00, 0xcc, 0x56,
5873 0xfb, 0xda, 0xfa, 0xfb, 0xa0, 0xef, 0x4d, 0x1c, 0xa6,
5874 0x07, 0xdc, 0xae, 0x57, 0xb6 ),
5875 CIPHERTEXT ( 0xcb, 0x96, 0x02, 0x01, 0xfa, 0x5a, 0xd4, 0x1d, 0x41,
5876 0xd1, 0xc2, 0xc8, 0x03, 0x7c, 0x71, 0xd5, 0x2b, 0x72,
5877 0xe7, 0x6b, 0x16, 0xb5, 0x89, 0xd7, 0x1b, 0x97, 0x66,
5878 0x27, 0xc9, 0x73, 0x4c, 0x9d ),
5879 AUTH ( 0x8d, 0xfc, 0xe1, 0x64, 0x67, 0xc3, 0xa6, 0xeb, 0xb3, 0xe7,
5880 0x24, 0x2c, 0x9a, 0x55, 0x19, 0x62 ) );
5881
5882/* AES-GCM test case 259 */
5883CIPHER_TEST ( wycheproof_aes_gcm_807f66c0, &aes_gcm_algorithm,
5884 KEY ( 0x34, 0xc7, 0x4e, 0x28, 0x18, 0x29, 0x48, 0xe0, 0x3a, 0xf0,
5885 0x2a, 0x01, 0xf4, 0x6e, 0xb4, 0xf7 ),
5886 IV ( 0xb0, 0xa7, 0x31, 0x19, 0xa9, 0x7d, 0x62, 0x38, 0x06, 0xb4,
5887 0x9d, 0x45, 0xdd, 0xf4, 0xc7 ),
5888 ADDITIONAL(),
5889 PLAINTEXT ( 0xfe, 0x82, 0xba, 0x66, 0xcf, 0x2e, 0x26, 0x57, 0x41,
5890 0xf2, 0xc8, 0x6c ),
5891 CIPHERTEXT ( 0x2b, 0xc3, 0xef, 0x8e, 0x74, 0x02, 0xb4, 0x63, 0x1f,
5892 0x48, 0xe9, 0xbe ),
5893 AUTH ( 0x4b, 0x6f, 0x6f, 0x5b, 0xe2, 0x91, 0xa9, 0x0b, 0x9e, 0x93,
5894 0xa8, 0xa8, 0x2d, 0xdb, 0xc8, 0xd8 ) );
5895
5896/* AES-GCM test case 260 */
5897CIPHER_TEST ( wycheproof_aes_gcm_1a607e05, &aes_gcm_algorithm,
5898 KEY ( 0x55, 0xcb, 0x7c, 0xac, 0x77, 0xef, 0xe1, 0x8a, 0x1e, 0xa3,
5899 0xb3, 0x0c, 0x65, 0xf3, 0xf3, 0x46 ),
5900 IV ( 0xe2, 0x2b, 0x6b, 0x14, 0x4a, 0xb2, 0x6b, 0x57, 0x81, 0x31,
5901 0x6e, 0x7a, 0x42, 0xa7, 0x62, 0x02, 0xac, 0x4b, 0x22, 0x78 ),
5902 ADDITIONAL(),
5903 PLAINTEXT ( 0x2f, 0x3d, 0x11, 0xea, 0x32, 0xbf, 0x5b, 0xc7, 0x2c,
5904 0xbe, 0x2b, 0x8d ),
5905 CIPHERTEXT ( 0x4f, 0xe1, 0x3e, 0xf2, 0x9f, 0x11, 0x8f, 0x85, 0xa6,
5906 0x31, 0x88, 0xf8 ),
5907 AUTH ( 0x05, 0x97, 0x5b, 0x17, 0x53, 0x16, 0xdf, 0x80, 0x45, 0x88,
5908 0x9f, 0x43, 0xe0, 0xc8, 0x57, 0xe0 ) );
5909
5910/* AES-GCM test case 261 */
5911CIPHER_TEST ( wycheproof_aes_gcm_848e090c, &aes_gcm_algorithm,
5912 KEY ( 0x66, 0xf7, 0x5a, 0xcb, 0xd8, 0xd3, 0xac, 0xf7, 0xaf, 0x47,
5913 0xd1, 0x3e, 0x83, 0x84, 0xc2, 0x80, 0x9d, 0x6b, 0x91, 0x50,
5914 0x3a, 0x7f, 0x29, 0x4b ),
5915 IV ( 0xed, 0xf9, 0x3e, 0x16, 0x29, 0x4f, 0x15, 0xed, 0xed, 0x83,
5916 0x80, 0x8f, 0x09, 0x32, 0x0e ),
5917 ADDITIONAL(),
5918 PLAINTEXT ( 0xa9, 0x00, 0xc8, 0x6b, 0x6b, 0x7e, 0x0e, 0x55, 0x63,
5919 0xf8, 0xf8, 0x26 ),
5920 CIPHERTEXT ( 0x9a, 0xf1, 0xa0, 0x22, 0xc6, 0x1c, 0x43, 0x15, 0xaa,
5921 0x0e, 0x92, 0x3e ),
5922 AUTH ( 0x20, 0x52, 0x9b, 0xff, 0x3c, 0x59, 0x22, 0x2e, 0xc3, 0x33,
5923 0x53, 0xaf, 0x33, 0x7b, 0x1d, 0x40 ) );
5924
5925/* AES-GCM test case 262 */
5926CIPHER_TEST ( wycheproof_aes_gcm_b238bfb2, &aes_gcm_algorithm,
5927 KEY ( 0xef, 0x2e, 0x29, 0x9d, 0xd4, 0xec, 0xd7, 0xe3, 0xb9, 0xcc,
5928 0x62, 0x78, 0x09, 0x22, 0xcc, 0x2c, 0x89, 0xf7, 0x88, 0x40,
5929 0x56, 0x4d, 0x12, 0x76 ),
5930 IV ( 0x13, 0x0c, 0x14, 0xc8, 0x39, 0xe3, 0x5b, 0x7d, 0x56, 0xb3,
5931 0x35, 0x0b, 0x19, 0x4b, 0x0d, 0xa3, 0x42, 0xe6, 0xb6, 0x5d ),
5932 ADDITIONAL(),
5933 PLAINTEXT ( 0x03, 0xf5, 0x95, 0x79, 0xb1, 0x44, 0x37, 0x19, 0x95,
5934 0x83, 0x27, 0x0e ),
5935 CIPHERTEXT ( 0x07, 0x3a, 0x52, 0x91, 0xb1, 0x1d, 0xf3, 0x79, 0xf3,
5936 0x1b, 0x4f, 0x16 ),
5937 AUTH ( 0x17, 0x20, 0x59, 0x99, 0x49, 0x1b, 0xd4, 0xc1, 0xd6, 0xc7,
5938 0xec, 0x3e, 0x56, 0x77, 0x9c, 0x32 ) );
5939
5940/* AES-GCM test case 263 */
5941CIPHER_TEST ( wycheproof_aes_gcm_50ca31ab, &aes_gcm_algorithm,
5942 KEY ( 0xe9, 0x8b, 0x06, 0x69, 0xa6, 0x45, 0xeb, 0x14, 0xcd, 0x06,
5943 0xdf, 0x69, 0x68, 0xfc, 0x5f, 0x10, 0xed, 0xc9, 0xf5, 0x4f,
5944 0xee, 0xd2, 0x64, 0xe3, 0xd4, 0x10, 0xcd, 0xc6, 0x1b, 0x72,
5945 0xef, 0x51 ),
5946 IV ( 0x17, 0xca, 0x25, 0x0f, 0xb7, 0x33, 0x87, 0x75, 0x56, 0x26,
5947 0x32, 0x23, 0xea, 0xdd, 0xe1 ),
5948 ADDITIONAL(),
5949 PLAINTEXT ( 0xf3, 0x84, 0xb3, 0xed, 0x7b, 0x27, 0x46, 0x41, 0xf5,
5950 0xdb, 0x60, 0xcf ),
5951 CIPHERTEXT ( 0xfc, 0x21, 0x36, 0x02, 0xaa, 0x42, 0x3b, 0x87, 0xd7,
5952 0xc2, 0xa8, 0x74 ),
5953 AUTH ( 0x36, 0xb1, 0x5b, 0xab, 0x69, 0x23, 0xb1, 0x72, 0x18, 0xfe,
5954 0x1c, 0x24, 0x04, 0x8e, 0x23, 0x91 ) );
5955
5956/* AES-GCM test case 264 */
5957CIPHER_TEST ( wycheproof_aes_gcm_7a0a5da7, &aes_gcm_algorithm,
5958 KEY ( 0x84, 0x9b, 0x3e, 0x6b, 0x8c, 0xdd, 0x85, 0xbd, 0xcf, 0xb8,
5959 0xeb, 0x70, 0x1a, 0xa5, 0x52, 0x2a, 0xe2, 0x34, 0x0f, 0xbe,
5960 0x52, 0x14, 0xe3, 0x89, 0x62, 0x2c, 0xef, 0x76, 0x97, 0x92,
5961 0x25, 0xc4 ),
5962 IV ( 0x0f, 0x9d, 0x6e, 0xd7, 0xee, 0xf3, 0x62, 0xdf, 0xa4, 0xa7,
5963 0xdf, 0xa5, 0xc0, 0xf7, 0x4c, 0x5b, 0x27, 0xbd, 0x4e, 0xbf ),
5964 ADDITIONAL(),
5965 PLAINTEXT ( 0x8c, 0x55, 0x64, 0xe5, 0x30, 0x51, 0xc0, 0xde, 0x27,
5966 0x31, 0x99, 0xb4 ),
5967 CIPHERTEXT ( 0xc1, 0xd7, 0x62, 0x33, 0xe8, 0xc5, 0x04, 0x2e, 0x92,
5968 0xbf, 0x8d, 0x32 ),
5969 AUTH ( 0x7c, 0xf0, 0x36, 0xd2, 0x35, 0xd3, 0xb2, 0xdd, 0x34, 0x9a,
5970 0x8c, 0x80, 0x4b, 0x65, 0x14, 0x4a ) );
5971
5972/* AES-GCM test case 265 */
5973CIPHER_TEST ( wycheproof_aes_gcm_1b7eb29c, &aes_gcm_algorithm,
5974 KEY ( 0x59, 0x27, 0xba, 0xe7, 0x48, 0xbb, 0x69, 0xd8, 0x1b, 0x5a,
5975 0x72, 0x4e, 0x0a, 0x16, 0x56, 0x52 ),
5976 IV ( 0x36, 0x5e, 0x0b, 0x96, 0x93, 0x2b, 0x13, 0x30, 0x6f, 0x92,
5977 0xe9, 0xbb, 0x23, 0x84, 0x71, 0x65, 0xbc, 0xbf, 0x5d, 0x35,
5978 0xe4, 0x5a, 0x83, 0xd7, 0x5c, 0x86, 0xec, 0xca, 0x70, 0x13,
5979 0x1f, 0x4c ),
5980 ADDITIONAL(),
5981 PLAINTEXT ( 0x31, 0x6b, 0xf9, 0x9b, 0xfa, 0xfc, 0x76, 0xf1, 0xbf,
5982 0xc0, 0xb0, 0x3c ),
5983 CIPHERTEXT ( 0x53, 0x48, 0xaf, 0x57, 0xfa, 0xfe, 0x24, 0x85, 0xb4,
5984 0x3f, 0x2b, 0xc4 ),
5985 AUTH ( 0x01, 0x9a, 0x96, 0xc5, 0x37, 0x3c, 0x03, 0x16, 0x26, 0xb6,
5986 0xc0, 0x30, 0x0d, 0x4c, 0xf7, 0x8b ) );
5987
5988/* AES-GCM test case 266 */
5989CIPHER_TEST ( wycheproof_aes_gcm_22ddd4ff, &aes_gcm_algorithm,
5990 KEY ( 0xdb, 0xd3, 0x67, 0x6f, 0x29, 0x34, 0x09, 0x27, 0x3f, 0x27,
5991 0xb3, 0x75, 0xe0, 0x37, 0x93, 0xa3 ),
5992 IV ( 0x96, 0x7f, 0xa7, 0xc9, 0x90, 0xeb, 0x2b, 0xec, 0xbd, 0x45,
5993 0x08, 0x35, 0xe2, 0x8e, 0xa3, 0xa9, 0x00, 0x0c, 0x72, 0x16,
5994 0x28, 0x5c, 0xfa, 0x76, 0x96, 0xe8, 0xc3, 0xda, 0xc3, 0xce,
5995 0x95, 0x2a, 0x1f, 0xe6, 0x38, 0xd7, 0xc8, 0xc7, 0x3e, 0x1d,
5996 0x70, 0x8d, 0xce, 0x01, 0xb5, 0xa2, 0x0f, 0xcc, 0x9a, 0xa0,
5997 0x11, 0x94, 0x9d, 0x2a, 0x83, 0x5f, 0x77, 0x74, 0x23, 0xc1,
5998 0x72, 0xfa, 0x3a, 0xa0 ),
5999 ADDITIONAL(),
6000 PLAINTEXT ( 0x62, 0x5e, 0xfe, 0xdb, 0x8b, 0x7f, 0x1a, 0xa6, 0x22,
6001 0x38, 0xa8, 0xf2 ),
6002 CIPHERTEXT ( 0xf5, 0x59, 0xb7, 0x0f, 0xe1, 0x14, 0x9c, 0xb3, 0x44,
6003 0x06, 0xa2, 0xc7 ),
6004 AUTH ( 0x94, 0x18, 0x0d, 0xdb, 0x7b, 0xb1, 0x99, 0x5a, 0xbe, 0x02,
6005 0x19, 0xea, 0xb5, 0xce, 0x23, 0x2f ) );
6006
6007/* AES-GCM test case 267 */
6008CIPHER_TEST ( wycheproof_aes_gcm_047fcc3d, &aes_gcm_algorithm,
6009 KEY ( 0x7e, 0x5a, 0x39, 0xdc, 0xda, 0x7e, 0x06, 0x69, 0x88, 0xf1,
6010 0x9a, 0xdf, 0x4d, 0xe4, 0xd5, 0x01 ),
6011 IV ( 0x49, 0x43, 0x56, 0xc3, 0x45, 0x9d, 0x60, 0xe3, 0xa8, 0x34,
6012 0x33, 0xc9, 0xbc, 0xf2, 0xc0, 0x45, 0x4a, 0x76, 0x3e, 0x49,
6013 0x6e, 0x4e, 0xc9, 0x9b, 0xfb, 0xe4, 0xbb, 0xb8, 0x3a, 0x4f,
6014 0xda, 0x76, 0xb5, 0x42, 0x21, 0x38, 0x99, 0xdc, 0xf5, 0x52,
6015 0x1c, 0xd9, 0xbb, 0xbe, 0x5d, 0x11, 0x54, 0x5b, 0xda, 0x44,
6016 0xa3, 0xf4, 0xa6, 0x81, 0xce, 0x28, 0x43, 0xac, 0xea, 0x73,
6017 0x0d, 0x83, 0xd3, 0x93, 0x0e, 0xa3, 0x09, 0x91, 0xee, 0x1a,
6018 0x68, 0xeb, 0xf6, 0xd1, 0xa5, 0xa4, 0x0f, 0x9b, 0x02, 0xa1,
6019 0xaa, 0xb0, 0x91, 0x29, 0x8d, 0xf8, 0xdd, 0x68, 0x9d, 0xc7,
6020 0x61, 0x3b, 0xcb, 0xff, 0x94, 0xd3, 0x5f, 0x2c, 0xa4, 0x33,
6021 0x77, 0xd8, 0x16, 0x18, 0x56, 0x2b, 0xcf, 0x65, 0x73, 0x41,
6022 0x1e, 0xc9, 0xbc, 0x97, 0xc5, 0xa6, 0x27, 0x6b, 0x55, 0x40,
6023 0x54, 0xc0, 0xfa, 0x78, 0x70, 0x73, 0xd0, 0x67 ),
6024 ADDITIONAL(),
6025 PLAINTEXT ( 0xb0, 0x47, 0x29, 0xb4, 0xad, 0xba, 0xac, 0x63, 0xc2,
6026 0xaa, 0xf8, 0xd8 ),
6027 CIPHERTEXT ( 0x52, 0x91, 0xdd, 0x4d, 0xa9, 0x1c, 0xcc, 0x2e, 0x77,
6028 0x30, 0x6d, 0x83 ),
6029 AUTH ( 0xa7, 0xf7, 0xb2, 0x1a, 0x3b, 0x7e, 0xce, 0x50, 0x9e, 0x92,
6030 0x26, 0x47, 0xfd, 0x90, 0x5f, 0x06 ) );
6031
6032/* AES-GCM test case 268 */
6033CIPHER_TEST ( wycheproof_aes_gcm_b09553f4, &aes_gcm_algorithm,
6034 KEY ( 0xea, 0xc3, 0xf2, 0x8c, 0xd9, 0x37, 0xff, 0x29, 0xeb, 0x61,
6035 0x58, 0xa3, 0x72, 0x1b, 0x51, 0x45 ),
6036 IV ( 0x6f, 0xd2, 0x60, 0xbb, 0xa8, 0x73, 0x39, 0x53, 0x9c, 0x37,
6037 0xdc, 0x68, 0xfd, 0xc3, 0x65, 0x6f, 0x63, 0xc8, 0x30, 0x28,
6038 0xcb, 0x8a, 0xdc, 0xb5, 0x31, 0x08, 0x5e, 0x98, 0xbd, 0x57,
6039 0x0c, 0x6b, 0x73, 0x5d, 0x0c, 0xc4, 0xb4, 0xb9, 0x24, 0x69,
6040 0x60, 0x00, 0xa2, 0xd8, 0x93, 0x62, 0x1a, 0xe6, 0x4d, 0xcc,
6041 0xe9, 0x92, 0xb5, 0x62, 0xb8, 0x9a, 0x52, 0x85, 0x64, 0x3a,
6042 0x08, 0xfe, 0xbc, 0xcb, 0xc5, 0x22, 0x43, 0xcb, 0xfc, 0x8d,
6043 0x45, 0x21, 0x2e, 0x04, 0x7b, 0x00, 0xc8, 0x7c, 0x6b, 0x6b,
6044 0xf1, 0x75, 0xf8, 0xbb, 0x67, 0x8e, 0xc5, 0x5c, 0x10, 0x91,
6045 0x31, 0x5c, 0xbe, 0xcb, 0x8b, 0x85, 0x70, 0x0f, 0x4a, 0x46,
6046 0x53, 0x62, 0x3f, 0xb7, 0x8e, 0x63, 0xcf, 0xff, 0x7d, 0x62,
6047 0x35, 0xe4, 0x8e, 0x98, 0x32, 0xc9, 0xf0, 0x71, 0x6d, 0x10,
6048 0x99, 0x2f, 0xc5, 0xb0, 0xad, 0x4e, 0x69, 0x72, 0xbb, 0xee,
6049 0xb1, 0xad, 0x67, 0x0c, 0xd7, 0xec, 0x8f, 0xac, 0x82, 0xe0,
6050 0x7e, 0xa5, 0xa6, 0x4f, 0x97, 0x61, 0xa3, 0x97, 0x14, 0xaa,
6051 0xa7, 0x3a, 0xff, 0xd2, 0xcb, 0x19, 0x0a, 0x7a, 0xc2, 0xdf,
6052 0x5e, 0x5d, 0xce, 0xa6, 0x81, 0x2a, 0xe2, 0xc8, 0x72, 0xc7,
6053 0xac, 0x70, 0x45, 0x3c, 0x5e, 0x7e, 0xc4, 0xd0, 0xb5, 0xb1,
6054 0x8c, 0x6f, 0xf3, 0xbf, 0xb9, 0xae, 0x15, 0xfe, 0xa4, 0x4c,
6055 0xf3, 0x92, 0x61, 0x5b, 0x80, 0x03, 0x4e, 0xda, 0xe5, 0x96,
6056 0xb8, 0x82, 0x1f, 0x97, 0xfc, 0xa5, 0x8d, 0x16, 0x7f, 0xb4,
6057 0x4a, 0x09, 0x3b, 0x0c, 0x00, 0x9a, 0x0b, 0xd5, 0x63, 0x13,
6058 0x55, 0xb0, 0xcb, 0x25, 0xd9, 0x3b, 0xa9, 0xb7, 0x9b, 0x00,
6059 0x63, 0x01, 0xd9, 0x9d, 0xb6, 0x57, 0xe8, 0x01, 0x93, 0x3f,
6060 0xc2, 0x76, 0x4a, 0x0c, 0xe6, 0x50, 0xea, 0xf5, 0xa1, 0x29,
6061 0x9e, 0xfe, 0x60, 0xcb, 0x53, 0xb6, 0x34 ),
6062 ADDITIONAL(),
6063 PLAINTEXT ( 0x09, 0x89, 0x12, 0xa3, 0x02, 0x77, 0x33, 0x77, 0xb9,
6064 0xc2, 0x6a, 0xc3 ),
6065 CIPHERTEXT ( 0xe3, 0xbe, 0x94, 0x71, 0x53, 0xa2, 0x6a, 0x3a, 0x54,
6066 0xe3, 0x01, 0x5c ),
6067 AUTH ( 0xfd, 0x04, 0x2b, 0xdd, 0xe2, 0x2f, 0x67, 0xc4, 0xfd, 0x29,
6068 0x8d, 0x5d, 0xc0, 0x86, 0x76, 0x06 ) );
6069
6070/* AES-GCM test case 269 */
6071CIPHER_TEST ( wycheproof_aes_gcm_1dd3caab, &aes_gcm_algorithm,
6072 KEY ( 0x8f, 0x9e, 0xbc, 0x67, 0xa9, 0xa6, 0x43, 0x0c, 0x2b, 0x0c,
6073 0xee, 0xaf, 0x98, 0x3e, 0x13, 0x56, 0x96, 0x4b, 0xb9, 0x28,
6074 0x63, 0x5b, 0x9c, 0xa4 ),
6075 IV ( 0x36, 0xe4, 0xb3, 0x81, 0x57, 0x4d, 0x17, 0x1c, 0x77, 0x69,
6076 0xa7, 0x88, 0xcb, 0xc1, 0x47, 0x22, 0x4f, 0xab, 0xd8, 0xb7,
6077 0x73, 0xf1, 0x6b, 0x8a, 0xe8, 0x4d, 0x8f, 0x26, 0x03, 0xaa,
6078 0xa4, 0x40 ),
6079 ADDITIONAL(),
6080 PLAINTEXT ( 0xa3, 0xa9, 0x6e, 0xe9, 0x4f, 0x94, 0xca, 0xa8, 0x1e,
6081 0xbc, 0xd6, 0x6d ),
6082 CIPHERTEXT ( 0x8c, 0x2a, 0x98, 0x23, 0xa3, 0xb3, 0xd4, 0x13, 0xbe,
6083 0x69, 0x63, 0x87 ),
6084 AUTH ( 0xfa, 0xaf, 0x01, 0xce, 0xb4, 0x0a, 0x7e, 0x14, 0x5e, 0x8f,
6085 0xe6, 0x5a, 0xa9, 0xaf, 0x58, 0xc0 ) );
6086
6087/* AES-GCM test case 270 */
6088CIPHER_TEST ( wycheproof_aes_gcm_9ff40949, &aes_gcm_algorithm,
6089 KEY ( 0xf4, 0xbb, 0xdf, 0xd0, 0x6f, 0x7f, 0xb1, 0x43, 0x48, 0x80,
6090 0xe4, 0x16, 0x6d, 0x38, 0xd5, 0x6e, 0x02, 0xa3, 0xf0, 0xdf,
6091 0x0d, 0x53, 0x01, 0xce ),
6092 IV ( 0x90, 0x74, 0x3b, 0xd5, 0xd7, 0x94, 0xd5, 0x2a, 0xc8, 0x48,
6093 0xb7, 0xe2, 0x38, 0x45, 0x45, 0xa2, 0x58, 0x46, 0xac, 0xf1,
6094 0x43, 0xbe, 0x84, 0xc0, 0xea, 0xd0, 0x43, 0x2f, 0xcf, 0x31,
6095 0x72, 0x63, 0x1c, 0xf5, 0x8d, 0x0c, 0xa7, 0x85, 0x71, 0xc0,
6096 0x30, 0x53, 0xc1, 0xe1, 0xb8, 0x5e, 0xd7, 0x9c, 0xb5, 0x30,
6097 0x3d, 0x0e, 0x3a, 0x98, 0xff, 0x4f, 0x56, 0xc4, 0xf0, 0xa5,
6098 0xeb, 0x4f, 0x0e, 0xac ),
6099 ADDITIONAL(),
6100 PLAINTEXT ( 0x39, 0xd2, 0xab, 0xe6, 0x69, 0x7f, 0x17, 0xec, 0x27,
6101 0xf2, 0xa3, 0x9c ),
6102 CIPHERTEXT ( 0xa6, 0x60, 0xea, 0x5b, 0xf0, 0x7a, 0x78, 0xfe, 0xa0,
6103 0x12, 0x01, 0x73 ),
6104 AUTH ( 0x74, 0x04, 0xfc, 0x7b, 0x73, 0x54, 0x69, 0x44, 0x28, 0x23,
6105 0x6f, 0x20, 0x3c, 0x13, 0x02, 0x44 ) );
6106
6107/* AES-GCM test case 271 */
6108CIPHER_TEST ( wycheproof_aes_gcm_4bae909f, &aes_gcm_algorithm,
6109 KEY ( 0x17, 0x61, 0xc7, 0x77, 0x98, 0xef, 0x9c, 0xdf, 0xa4, 0x05,
6110 0x53, 0xf3, 0x46, 0x14, 0xfe, 0x74, 0x02, 0x21, 0x20, 0x87,
6111 0xf0, 0x50, 0x94, 0x11 ),
6112 IV ( 0xfb, 0xb3, 0xea, 0xb3, 0x79, 0xc9, 0xb8, 0x68, 0x9d, 0xc3,
6113 0x0b, 0x07, 0x13, 0x69, 0x0e, 0x55, 0xd5, 0x1c, 0x95, 0x6c,
6114 0xa3, 0x6f, 0xbc, 0xc7, 0x3e, 0xee, 0xee, 0x16, 0xa4, 0x6d,
6115 0x7c, 0x41, 0xa7, 0xa9, 0x62, 0x6e, 0x68, 0xe2, 0x5d, 0x68,
6116 0x5c, 0x00, 0x8c, 0x19, 0xd3, 0xb2, 0xb1, 0x79, 0x2b, 0xdc,
6117 0x99, 0xc3, 0x54, 0x41, 0xa6, 0xfc, 0xac, 0x35, 0xe0, 0xd6,
6118 0x44, 0x6d, 0xd9, 0x14, 0xf5, 0x43, 0xab, 0xd9, 0xec, 0xd6,
6119 0xb0, 0xcb, 0x52, 0x01, 0xc2, 0x43, 0x02, 0x6c, 0x4f, 0x13,
6120 0x64, 0x1d, 0x67, 0xc8, 0xd8, 0xcd, 0x51, 0x14, 0xb6, 0xe1,
6121 0x1e, 0xbb, 0xc6, 0xb1, 0xde, 0xe2, 0xa1, 0x8d, 0xb2, 0x15,
6122 0x0a, 0x5a, 0x57, 0x5d, 0xcd, 0x21, 0x64, 0x8e, 0x03, 0x37,
6123 0xda, 0xdb, 0xcc, 0xd3, 0xde, 0xff, 0xd6, 0xd9, 0x79, 0xe0,
6124 0x3e, 0x6b, 0x9d, 0xdf, 0xee, 0x0a, 0xbd, 0xc2 ),
6125 ADDITIONAL(),
6126 PLAINTEXT ( 0x35, 0xca, 0x4e, 0xb4, 0x63, 0xa2, 0x00, 0x01, 0x38,
6127 0x21, 0x0b, 0x4d ),
6128 CIPHERTEXT ( 0xf4, 0x00, 0x13, 0x2f, 0xf3, 0x8c, 0x04, 0xed, 0x74,
6129 0x7d, 0xde, 0x34 ),
6130 AUTH ( 0xca, 0x15, 0x34, 0xe7, 0xdd, 0x03, 0x36, 0xbb, 0xb3, 0x2a,
6131 0x79, 0x83, 0x0c, 0x71, 0xa4, 0x47 ) );
6132
6133/* AES-GCM test case 272 */
6134CIPHER_TEST ( wycheproof_aes_gcm_dbc87bdd, &aes_gcm_algorithm,
6135 KEY ( 0xf7, 0x95, 0xec, 0xe7, 0xde, 0x18, 0x81, 0xfb, 0xc6, 0x84,
6136 0x3e, 0xb7, 0x40, 0xf8, 0x12, 0xe4, 0x1e, 0x3f, 0xc4, 0x9f,
6137 0xf6, 0xc7, 0xb9, 0x40 ),
6138 IV ( 0x35, 0x69, 0xfc, 0xa7, 0xc9, 0xd0, 0x6e, 0x2a, 0x03, 0xfe,
6139 0xd1, 0xaa, 0xc2, 0x48, 0x4f, 0xd4, 0x41, 0x6c, 0xa0, 0x7d,
6140 0x55, 0xec, 0xbb, 0x33, 0x3e, 0xc6, 0x74, 0xf0, 0xea, 0x5c,
6141 0x6e, 0x75, 0xa1, 0x0d, 0xfb, 0x9c, 0x73, 0x8b, 0x69, 0xda,
6142 0xb2, 0xed, 0xa1, 0x0a, 0xda, 0x72, 0x1a, 0x61, 0xc7, 0xf0,
6143 0x2b, 0x7e, 0x7f, 0x79, 0xe8, 0xa9, 0xe2, 0xdc, 0x36, 0xb3,
6144 0xfd, 0xf6, 0x09, 0xe4, 0x36, 0x05, 0x4c, 0x82, 0xa7, 0x74,
6145 0xec, 0x61, 0x7d, 0xce, 0xec, 0x84, 0xa5, 0x77, 0x03, 0x7f,
6146 0xf1, 0xa3, 0xf1, 0x20, 0xd9, 0x81, 0x8d, 0x04, 0x20, 0x63,
6147 0xac, 0xb3, 0x6c, 0x95, 0x84, 0xe8, 0x1e, 0xc9, 0x4f, 0x11,
6148 0xf1, 0xee, 0x24, 0x0f, 0x2e, 0x45, 0xe9, 0x44, 0x69, 0x4a,
6149 0x9c, 0x8e, 0x53, 0x5a, 0xcb, 0xb0, 0x1d, 0x93, 0x95, 0x84,
6150 0x11, 0xcf, 0xf6, 0x8e, 0x3d, 0x32, 0xf8, 0x93, 0x17, 0x46,
6151 0xa4, 0xa0, 0xce, 0xce, 0x65, 0xe9, 0x3c, 0x51, 0xc7, 0x0b,
6152 0x31, 0x11, 0x03, 0x4b, 0x68, 0x67, 0xb4, 0x07, 0xe0, 0x14,
6153 0x7f, 0x97, 0xc5, 0x76, 0xd3, 0xed, 0x8c, 0xec, 0x7e, 0x8e,
6154 0xc2, 0x6e, 0x95, 0x64, 0x3e, 0x46, 0xe9, 0x7e, 0xa3, 0x59,
6155 0x5c, 0x9c, 0x31, 0x72, 0xb4, 0x85, 0x6f, 0x2d, 0x2b, 0x6d,
6156 0xc8, 0x56, 0x46, 0x66, 0xdd, 0xac, 0x92, 0xc7, 0x94, 0xff,
6157 0xb2, 0xd4, 0xdc, 0x7f, 0x46, 0x17, 0x61, 0xf0, 0xe3, 0x26,
6158 0x65, 0x0f, 0x48, 0xd3, 0x27, 0x60, 0x4e, 0x09, 0x5b, 0xd8,
6159 0x75, 0x40, 0x72, 0x11, 0x6c, 0x96, 0x36, 0x0d, 0x09, 0xf0,
6160 0x10, 0xac, 0x2f, 0x39, 0xeb, 0x96, 0xb2, 0x27, 0xf3, 0xd7,
6161 0x38, 0xde, 0xb7, 0x56, 0xc8, 0x69, 0x94, 0x60, 0xd8, 0x8c,
6162 0xf7, 0x16, 0x17, 0x0a, 0xe1, 0x52, 0x67, 0xb1, 0x4f, 0x4a,
6163 0x89, 0x16, 0x47, 0x20, 0xf1, 0xc6, 0x02 ),
6164 ADDITIONAL(),
6165 PLAINTEXT ( 0x22, 0xdb, 0xd8, 0x03, 0x7a, 0xa0, 0x5b, 0x14, 0xcf,
6166 0x81, 0xdd, 0x23 ),
6167 CIPHERTEXT ( 0x13, 0xa9, 0x5a, 0x06, 0xc1, 0xbe, 0xd4, 0x84, 0x5a,
6168 0xf9, 0xc7, 0x01 ),
6169 AUTH ( 0x03, 0x37, 0x98, 0x36, 0xb0, 0xc8, 0x2f, 0x64, 0xa1, 0xbc,
6170 0xcd, 0xcd, 0x76, 0x3a, 0xcb, 0xbc ) );
6171
6172/* AES-GCM test case 273 */
6173CIPHER_TEST ( wycheproof_aes_gcm_0834aa42, &aes_gcm_algorithm,
6174 KEY ( 0xee, 0x41, 0x71, 0x91, 0x7d, 0x23, 0x37, 0x49, 0x68, 0x12,
6175 0xa2, 0x78, 0x4d, 0x6a, 0x71, 0x30, 0x0e, 0x6b, 0x8c, 0x1a,
6176 0xc3, 0xb1, 0xef, 0x58, 0xce, 0xe7, 0x7c, 0x22, 0x9a, 0xea,
6177 0xf2, 0xc5 ),
6178 IV ( 0xe8, 0x26, 0xa7, 0x93, 0x61, 0xf9, 0xd5, 0x82, 0xb6, 0x44,
6179 0x50, 0xe3, 0xed, 0xc8, 0x25, 0x89, 0x48, 0x78, 0x53, 0xd5,
6180 0xb2, 0x2f, 0xea, 0xa0, 0xc8, 0x89, 0x87, 0x5b, 0xd0, 0xd8,
6181 0x7c, 0xd4 ),
6182 ADDITIONAL(),
6183 PLAINTEXT ( 0x94, 0xd2, 0xf8, 0x69, 0x7f, 0xac, 0xaa, 0xa1, 0x91,
6184 0xba, 0x61, 0x7a ),
6185 CIPHERTEXT ( 0xa2, 0x95, 0xc2, 0xcb, 0x27, 0xce, 0x23, 0xd2, 0x68,
6186 0x74, 0xad, 0xe1 ),
6187 AUTH ( 0x04, 0x65, 0x0a, 0x78, 0xbb, 0xb6, 0x1d, 0xb3, 0x37, 0xc9,
6188 0xc3, 0x2a, 0xa3, 0xe7, 0xb6, 0xfa ) );
6189
6190/* AES-GCM test case 274 */
6191CIPHER_TEST ( wycheproof_aes_gcm_0694ddb9, &aes_gcm_algorithm,
6192 KEY ( 0x13, 0x2c, 0x59, 0xb4, 0xbc, 0xb8, 0xaf, 0xb3, 0x16, 0x37,
6193 0x73, 0x4a, 0x81, 0x10, 0x5b, 0xb2, 0xc9, 0x87, 0x8f, 0x32,
6194 0x0a, 0xce, 0x90, 0x76, 0xd5, 0xfd, 0x7c, 0x5d, 0x21, 0x6c,
6195 0x8d, 0x12 ),
6196 IV ( 0xec, 0x51, 0xee, 0x18, 0xcf, 0xb4, 0x68, 0x97, 0xd3, 0x66,
6197 0x6c, 0x7d, 0xf3, 0x5c, 0x29, 0xca, 0x5d, 0x89, 0x82, 0x41,
6198 0xc4, 0xa3, 0x4f, 0x89, 0x3e, 0xb1, 0xdb, 0x5d, 0x5c, 0x6b,
6199 0x76, 0xe2, 0x46, 0x17, 0x45, 0x9d, 0x11, 0x53, 0x86, 0x81,
6200 0x54, 0x43, 0x7a, 0x0e, 0x95, 0xaa, 0x3c, 0x26, 0xe9, 0x56,
6201 0xb4, 0x94, 0xa5, 0x2d, 0xd5, 0xac, 0x3b, 0x93, 0x31, 0x11,
6202 0x6c, 0x7c, 0x77, 0x5f ),
6203 ADDITIONAL(),
6204 PLAINTEXT ( 0x12, 0xc7, 0xbe, 0x00, 0xfa, 0xcd, 0xa4, 0x95, 0x96,
6205 0xe1, 0x91, 0x34 ),
6206 CIPHERTEXT ( 0x9c, 0xdc, 0xfc, 0x3a, 0xaa, 0x8d, 0x46, 0x6f, 0x25,
6207 0x58, 0x8e, 0x4b ),
6208 AUTH ( 0x7e, 0x80, 0xf5, 0x1e, 0x71, 0x80, 0xf1, 0xcd, 0x3b, 0xa8,
6209 0x43, 0x49, 0x88, 0x8f, 0xcd, 0x5c ) );
6210
6211/* AES-GCM test case 275 */
6212CIPHER_TEST ( wycheproof_aes_gcm_c68a0e20, &aes_gcm_algorithm,
6213 KEY ( 0x7b, 0x0b, 0x12, 0x49, 0x19, 0x01, 0xd6, 0x2d, 0x09, 0x7f,
6214 0xa2, 0x6d, 0xc7, 0x1e, 0x15, 0xcf, 0xac, 0xaf, 0xa3, 0x22,
6215 0x67, 0x19, 0xe4, 0x71, 0x26, 0xd9, 0x9c, 0x79, 0xd9, 0x8e,
6216 0xc2, 0x22 ),
6217 IV ( 0x7d, 0x08, 0xb2, 0x26, 0xb4, 0xa5, 0xd0, 0x3f, 0x6f, 0x8c,
6218 0xb3, 0xa3, 0xcb, 0x8d, 0x1c, 0xe3, 0x1b, 0x05, 0x9d, 0xc5,
6219 0x11, 0x23, 0x85, 0x27, 0x5e, 0x38, 0xa1, 0x5c, 0x97, 0xe0,
6220 0xf2, 0x40, 0x22, 0xb2, 0x49, 0xa5, 0xf7, 0x01, 0x9e, 0xa5,
6221 0x77, 0x19, 0x8c, 0xb2, 0x6a, 0xc6, 0x4e, 0x82, 0xb2, 0xb0,
6222 0x46, 0x81, 0x53, 0x7c, 0x41, 0x98, 0x77, 0x5a, 0x52, 0x3b,
6223 0x0e, 0x64, 0x94, 0xb8, 0x4f, 0xeb, 0xae, 0xf3, 0x39, 0x9b,
6224 0x35, 0xc2, 0x7b, 0x09, 0x69, 0xfa, 0x43, 0x57, 0x2b, 0xf5,
6225 0x82, 0x7a, 0x76, 0x3a, 0xac, 0x1a, 0xf6, 0x95, 0x26, 0xf3,
6226 0x7e, 0x38, 0xac, 0xb5, 0xd3, 0x54, 0xf2, 0xb6, 0x84, 0x87,
6227 0xf2, 0x75, 0xf4, 0x36, 0x1e, 0xd3, 0x90, 0x73, 0xf7, 0xdd,
6228 0x66, 0x53, 0xac, 0x17, 0xc0, 0x79, 0x41, 0x18, 0xa0, 0xcf,
6229 0x14, 0x32, 0x93, 0xac, 0x0b, 0xe6, 0x62, 0x29 ),
6230 ADDITIONAL(),
6231 PLAINTEXT ( 0xc8, 0x03, 0x12, 0x59, 0x07, 0x00, 0xc3, 0xbb, 0xfa,
6232 0xcd, 0x1a, 0x40 ),
6233 CIPHERTEXT ( 0x3f, 0x3c, 0x15, 0x1e, 0x98, 0x4d, 0x05, 0x94, 0x62,
6234 0xf9, 0xe5, 0xa0 ),
6235 AUTH ( 0xe5, 0x59, 0xf5, 0xf7, 0x55, 0xaa, 0x29, 0x21, 0x71, 0xcc,
6236 0x35, 0xfb, 0xf9, 0x11, 0xa6, 0x4f ) );
6237
6238/* AES-GCM test case 276 */
6239CIPHER_TEST ( wycheproof_aes_gcm_a0b4e03a, &aes_gcm_algorithm,
6240 KEY ( 0x3b, 0xc3, 0xbf, 0x39, 0xd0, 0xd5, 0xff, 0xd9, 0x4c, 0xca,
6241 0x2b, 0x45, 0xc6, 0x78, 0xa2, 0xd0, 0x49, 0x15, 0x1e, 0xd2,
6242 0xba, 0xbc, 0x71, 0x3b, 0xe5, 0x3c, 0xb6, 0x6f, 0x54, 0xa1,
6243 0x63, 0x37 ),
6244 IV ( 0x92, 0xc2, 0xce, 0xe7, 0xe9, 0x13, 0x8b, 0x18, 0x6d, 0xa5,
6245 0x1f, 0x14, 0x6f, 0xb2, 0x1f, 0xd5, 0xb4, 0x91, 0xf1, 0xa1,
6246 0x9e, 0xef, 0x61, 0xd4, 0xed, 0x14, 0xce, 0x6b, 0x21, 0xb0,
6247 0x4f, 0xdb, 0x6f, 0xf8, 0xeb, 0xb6, 0x0f, 0xdd, 0xc5, 0x59,
6248 0x26, 0xe7, 0xbd, 0xa2, 0xa8, 0xf3, 0x5c, 0x61, 0x0b, 0xb7,
6249 0x95, 0x23, 0x24, 0x12, 0x73, 0x9d, 0x6c, 0x2d, 0x74, 0x45,
6250 0x8e, 0xf5, 0xa1, 0xa1, 0xcd, 0xe9, 0xbf, 0x17, 0xe4, 0x7e,
6251 0x3b, 0x00, 0xdb, 0x0b, 0x05, 0x04, 0xd5, 0x6d, 0xc8, 0xb8,
6252 0xd3, 0xde, 0x23, 0xf7, 0xc3, 0xa5, 0xd5, 0x2e, 0x8d, 0x0a,
6253 0xab, 0x1e, 0x64, 0x40, 0x5a, 0xaa, 0x85, 0x2e, 0xc2, 0xdd,
6254 0x66, 0x7e, 0xd9, 0xc1, 0xfd, 0x8d, 0xc1, 0xfd, 0xbb, 0xc8,
6255 0x71, 0x2c, 0x7a, 0x38, 0xf3, 0x0f, 0xae, 0xab, 0x59, 0x4f,
6256 0x33, 0x89, 0x7b, 0x41, 0xb1, 0x72, 0x0f, 0x3c, 0x2f, 0x95,
6257 0x4e, 0xd9, 0x1c, 0xa4, 0x50, 0xd8, 0x2c, 0x3d, 0xcd, 0x35,
6258 0x85, 0x8c, 0x60, 0x8a, 0xd4, 0x2f, 0x36, 0x83, 0x2e, 0x56,
6259 0xb0, 0x48, 0x21, 0xa1, 0x32, 0xf7, 0x2e, 0x0d, 0xa7, 0xb6,
6260 0x2c, 0xbd, 0x39, 0x25, 0x25, 0x0f, 0x64, 0xfb, 0xb3, 0xf5,
6261 0xc4, 0x78, 0x34, 0x95, 0x89, 0x30, 0x97, 0xad, 0xc0, 0x9a,
6262 0x32, 0xd7, 0x76, 0xe0, 0x4b, 0xf7, 0x25, 0x58, 0xd3, 0x78,
6263 0x30, 0xb3, 0x72, 0x34, 0x1f, 0x65, 0x36, 0xd8, 0xee, 0x9d,
6264 0xf4, 0xa8, 0x2e, 0x40, 0x74, 0xe7, 0x77, 0x4a, 0xb6, 0x91,
6265 0x7a, 0x04, 0xfa, 0x8c, 0x49, 0x9e, 0xb4, 0xb4, 0x6a, 0x92,
6266 0xde, 0xf3, 0x65, 0xda, 0x8b, 0x5e, 0xb1, 0xe0, 0xb4, 0x38,
6267 0x77, 0x95, 0x07, 0xd1, 0xf5, 0x27, 0x2a, 0x6e, 0x86, 0x29,
6268 0xa3, 0xf9, 0xc7, 0xbd, 0x48, 0x62, 0xc5, 0x69, 0x1e, 0xe8,
6269 0xb5, 0x6b, 0xfe, 0x29, 0x2d, 0xeb, 0x4e ),
6270 ADDITIONAL(),
6271 PLAINTEXT ( 0x81, 0x25, 0xee, 0x76, 0x37, 0xd7, 0xd0, 0xe0, 0x3b,
6272 0xba, 0xcf, 0x35 ),
6273 CIPHERTEXT ( 0x54, 0x96, 0xae, 0x94, 0xc3, 0x32, 0x2e, 0xbf, 0x95,
6274 0x9e, 0xa9, 0xa9 ),
6275 AUTH ( 0x70, 0x71, 0x7c, 0xc0, 0x0f, 0xd1, 0xff, 0xa5, 0x9b, 0xb0,
6276 0x43, 0x29, 0x22, 0x6a, 0x0c, 0x0a ) );
6277
6278/* AES-GCM test case 277 */
6279CIPHER_TEST ( wycheproof_aes_gcm_42f63793, &aes_gcm_algorithm,
6280 KEY ( 0x59, 0xa2, 0x84, 0xf5, 0x0a, 0xed, 0xd8, 0xd3, 0xe2, 0xa9,
6281 0x16, 0x37, 0xd3, 0x81, 0x55, 0x79 ),
6282 IV ( 0x80 ),
6283 ADDITIONAL(),
6284 PLAINTEXT(),
6285 CIPHERTEXT(),
6286 AUTH ( 0xaf, 0x49, 0x8f, 0x70, 0x1d, 0x24, 0x70, 0x69, 0x5f, 0x6e,
6287 0x7c, 0x83, 0x27, 0xa2, 0x39, 0x8b ) );
6288
6289/* AES-GCM test case 278 */
6290CIPHER_TEST ( wycheproof_aes_gcm_a9355b80, &aes_gcm_algorithm,
6291 KEY ( 0xfe, 0xc5, 0x8a, 0xa8, 0xcf, 0x06, 0xbf, 0xe0, 0x5d, 0xe8,
6292 0x29, 0xf2, 0x7e, 0xc7, 0x76, 0x93 ),
6293 IV ( 0x9d ),
6294 ADDITIONAL(),
6295 PLAINTEXT ( 0xf2, 0xd9, 0x9a, 0x9f, 0x89, 0x33, 0x78, 0xe0, 0x75,
6296 0x7d, 0x27, 0xc2, 0xe3, 0xa3, 0x10, 0x1b ),
6297 CIPHERTEXT ( 0x0a, 0x24, 0x61, 0x2a, 0x9d, 0x1c, 0xbe, 0x96, 0x7d,
6298 0xbf, 0xe8, 0x04, 0xbf, 0x84, 0x40, 0xe5 ),
6299 AUTH ( 0x96, 0xe6, 0xfd, 0x2c, 0xdc, 0x70, 0x7e, 0x3e, 0xe0, 0xa1,
6300 0xc9, 0x0d, 0x34, 0xc9, 0xc3, 0x6c ) );
6301
6302/* AES-GCM test case 279 */
6303CIPHER_TEST ( wycheproof_aes_gcm_380d7036, &aes_gcm_algorithm,
6304 KEY ( 0x88, 0xa9, 0x72, 0xcc, 0xe9, 0xea, 0xf5, 0xa7, 0x81, 0x3c,
6305 0xe8, 0x14, 0x9d, 0x0c, 0x1d, 0x0e ),
6306 IV ( 0x0f, 0x2f ),
6307 ADDITIONAL(),
6308 PLAINTEXT(),
6309 CIPHERTEXT(),
6310 AUTH ( 0x4c, 0xcf, 0x1e, 0xfb, 0x4d, 0xa0, 0x5b, 0x4a, 0xe4, 0x45,
6311 0x2a, 0xea, 0x42, 0xf5, 0x42, 0x4b ) );
6312
6313/* AES-GCM test case 280 */
6314CIPHER_TEST ( wycheproof_aes_gcm_26a77e52, &aes_gcm_algorithm,
6315 KEY ( 0xb4, 0x39, 0x67, 0xee, 0x93, 0x3e, 0x46, 0x32, 0xbd, 0x65,
6316 0x62, 0xba, 0x12, 0x01, 0xbf, 0x83 ),
6317 IV ( 0x87, 0x60 ),
6318 ADDITIONAL(),
6319 PLAINTEXT ( 0x5a, 0x6a, 0xd6, 0xdb, 0x70, 0x59, 0x1d, 0x1e, 0x52,
6320 0x0b, 0x01, 0x22, 0xf0, 0x50, 0x21, 0xa0 ),
6321 CIPHERTEXT ( 0xba, 0x3e, 0x7f, 0x8b, 0x29, 0x99, 0x99, 0x5c, 0x7f,
6322 0xc4, 0x00, 0x6c, 0xa4, 0xf4, 0x75, 0xff ),
6323 AUTH ( 0x98, 0xf4, 0x7a, 0x52, 0x79, 0xce, 0xbb, 0xca, 0xc2, 0x14,
6324 0x51, 0x57, 0x10, 0xf6, 0xcd, 0x8a ) );
6325
6326/* AES-GCM test case 281 */
6327CIPHER_TEST ( wycheproof_aes_gcm_7016eb5c, &aes_gcm_algorithm,
6328 KEY ( 0x4e, 0x9a, 0x97, 0xd3, 0xed, 0x54, 0xc7, 0xb5, 0x46, 0x10,
6329 0x79, 0x3a, 0xb0, 0x50, 0x52, 0xe1 ),
6330 IV ( 0xcc, 0x85, 0x19, 0x57 ),
6331 ADDITIONAL(),
6332 PLAINTEXT(),
6333 CIPHERTEXT(),
6334 AUTH ( 0xe5, 0x74, 0xb3, 0x55, 0xbd, 0xa2, 0x98, 0x0e, 0x04, 0x7e,
6335 0x58, 0x4f, 0xeb, 0x16, 0x76, 0xca ) );
6336
6337/* AES-GCM test case 282 */
6338CIPHER_TEST ( wycheproof_aes_gcm_20abbc80, &aes_gcm_algorithm,
6339 KEY ( 0xd8, 0x3c, 0x1d, 0x7a, 0x97, 0xc4, 0x3f, 0x18, 0x24, 0x09,
6340 0xa4, 0xaa, 0x56, 0x09, 0xc1, 0xb1 ),
6341 IV ( 0x7b, 0x5f, 0xae, 0xb2 ),
6342 ADDITIONAL(),
6343 PLAINTEXT ( 0xc8, 0xf0, 0x7b, 0xa1, 0xd6, 0x55, 0x54, 0xa9, 0xbd,
6344 0x40, 0x39, 0x0c, 0x30, 0xc5, 0x52, 0x9c ),
6345 CIPHERTEXT ( 0x1b, 0x84, 0xba, 0xea, 0x9d, 0xf1, 0xe6, 0x5b, 0xee,
6346 0x7b, 0x49, 0xe4, 0xa8, 0xcd, 0xa1, 0xec ),
6347 AUTH ( 0x5c, 0x0b, 0xb7, 0x9d, 0x82, 0x40, 0x04, 0x1e, 0xdc, 0xe0,
6348 0xf9, 0x4b, 0xd4, 0xbb, 0x38, 0x4f ) );
6349
6350/* AES-GCM test case 283 */
6351CIPHER_TEST ( wycheproof_aes_gcm_1d93e9e2, &aes_gcm_algorithm,
6352 KEY ( 0xc6, 0xa7, 0x05, 0x67, 0x7a, 0xff, 0xb4, 0x9e, 0x27, 0x6d,
6353 0x95, 0x11, 0xca, 0xa4, 0x61, 0x45 ),
6354 IV ( 0x4a, 0xd8, 0x0c, 0x28, 0x54, 0xfb ),
6355 ADDITIONAL(),
6356 PLAINTEXT(),
6357 CIPHERTEXT(),
6358 AUTH ( 0x1e, 0x2e, 0xd7, 0x2a, 0xf5, 0x90, 0xca, 0xfb, 0x86, 0x47,
6359 0xd1, 0x85, 0x86, 0x5f, 0x54, 0x63 ) );
6360
6361/* AES-GCM test case 284 */
6362CIPHER_TEST ( wycheproof_aes_gcm_559a53ba, &aes_gcm_algorithm,
6363 KEY ( 0xeb, 0xa7, 0x69, 0x9b, 0x56, 0xcc, 0x0a, 0xa2, 0xf6, 0x6a,
6364 0x2a, 0x5b, 0xe9, 0x94, 0x44, 0x13 ),
6365 IV ( 0xd1, 0xda, 0xfc, 0x8d, 0xe3, 0xe3 ),
6366 ADDITIONAL(),
6367 PLAINTEXT ( 0xd0, 0x21, 0xe5, 0x3d, 0x90, 0x98, 0xa2, 0xdf, 0x3d,
6368 0x6b, 0x90, 0x3c, 0xda, 0xd0, 0xcd, 0x9c ),
6369 CIPHERTEXT ( 0x18, 0x29, 0x1a, 0xa8, 0xdc, 0x7b, 0x07, 0x44, 0x8a,
6370 0xa8, 0xf7, 0x1b, 0xb8, 0xe3, 0x80, 0xbf ),
6371 AUTH ( 0x9c, 0x0e, 0x22, 0xe5, 0xc4, 0x1b, 0x10, 0x39, 0xff, 0x56,
6372 0x61, 0xff, 0xae, 0xfa, 0x8e, 0x0f ) );
6373
6374/* AES-GCM test case 285 */
6375CIPHER_TEST ( wycheproof_aes_gcm_2fba3231, &aes_gcm_algorithm,
6376 KEY ( 0x1e, 0x6c, 0x62, 0x14, 0xa6, 0xa5, 0xdd, 0x5b, 0x62, 0x8c,
6377 0x71, 0xde, 0x07, 0x78, 0x81, 0x37 ),
6378 IV ( 0x40, 0xbc, 0xc3, 0x15, 0xde, 0xc8, 0x8b, 0xf3, 0x26, 0xcc ),
6379 ADDITIONAL(),
6380 PLAINTEXT(),
6381 CIPHERTEXT(),
6382 AUTH ( 0x6f, 0x53, 0x9a, 0x12, 0x5a, 0x2f, 0x4f, 0xd2, 0x14, 0x59,
6383 0x7e, 0x2f, 0x98, 0x1e, 0xfe, 0x6e ) );
6384
6385/* AES-GCM test case 286 */
6386CIPHER_TEST ( wycheproof_aes_gcm_51785cc5, &aes_gcm_algorithm,
6387 KEY ( 0xfc, 0x93, 0x58, 0x2f, 0xa1, 0xf8, 0xb5, 0x8c, 0xc9, 0xe8,
6388 0x0d, 0xd5, 0x83, 0xe9, 0xbf, 0x8b ),
6389 IV ( 0x5d, 0x4b, 0xf5, 0x87, 0x98, 0xfa, 0xc3, 0x51, 0xa3, 0x99 ),
6390 ADDITIONAL(),
6391 PLAINTEXT ( 0x86, 0x6d, 0x5e, 0x1b, 0x0a, 0xa2, 0x90, 0x04, 0xe5,
6392 0x1e, 0xa8, 0x7d, 0xe8, 0x6e, 0x3c, 0x05 ),
6393 CIPHERTEXT ( 0x91, 0xc2, 0x05, 0x98, 0xdc, 0xbd, 0x90, 0x99, 0x8c,
6394 0x9a, 0x7d, 0x6b, 0x1e, 0x57, 0x32, 0x1f ),
6395 AUTH ( 0xb0, 0x71, 0x20, 0x3f, 0x3d, 0xa1, 0x7c, 0x19, 0xad, 0x87,
6396 0xa4, 0x0d, 0xb0, 0x8b, 0x65, 0xf5 ) );
6397
6398/* AES-GCM test case 287 */
6399CIPHER_TEST ( wycheproof_aes_gcm_34d832ff, &aes_gcm_algorithm,
6400 KEY ( 0xc7, 0x0c, 0xe3, 0x8e, 0x84, 0xe5, 0xf5, 0x3e, 0xd4, 0x1c,
6401 0x3f, 0x0d, 0x2c, 0xa4, 0x93, 0x41, 0x2a, 0xd3, 0x2c, 0xb0,
6402 0x4c, 0x6e, 0x2e, 0xfa ),
6403 IV ( 0xcb ),
6404 ADDITIONAL(),
6405 PLAINTEXT(),
6406 CIPHERTEXT(),
6407 AUTH ( 0x08, 0xd9, 0x6e, 0xdb, 0x5e, 0x22, 0x87, 0x4c, 0xd1, 0x0c,
6408 0xb2, 0x25, 0x6c, 0xa0, 0x4b, 0xc6 ) );
6409
6410/* AES-GCM test case 288 */
6411CIPHER_TEST ( wycheproof_aes_gcm_335f78f4, &aes_gcm_algorithm,
6412 KEY ( 0x74, 0xc8, 0x16, 0xb8, 0x3d, 0xfd, 0x28, 0x72, 0x10, 0xa3,
6413 0xe2, 0xc6, 0xda, 0x8d, 0x30, 0x53, 0xbb, 0xfb, 0xd9, 0xb1,
6414 0x56, 0xd3, 0xfd, 0xd8 ),
6415 IV ( 0x0f ),
6416 ADDITIONAL(),
6417 PLAINTEXT ( 0xf2, 0xb7, 0xb2, 0xc9, 0xb3, 0x12, 0xcf, 0x2a, 0xf7,
6418 0x8f, 0x00, 0x3d, 0xf1, 0x5c, 0x8e, 0x19 ),
6419 CIPHERTEXT ( 0x6c, 0x5e, 0x79, 0x6b, 0xa9, 0xa3, 0xdd, 0xc6, 0x4f,
6420 0x40, 0x1e, 0x68, 0xd1, 0x35, 0x10, 0x1d ),
6421 AUTH ( 0x96, 0xa1, 0x32, 0xed, 0x43, 0x92, 0x4e, 0x98, 0xfe, 0xb8,
6422 0x88, 0xff, 0x68, 0x2b, 0xda, 0xef ) );
6423
6424/* AES-GCM test case 289 */
6425CIPHER_TEST ( wycheproof_aes_gcm_39d2f365, &aes_gcm_algorithm,
6426 KEY ( 0xcb, 0xf4, 0x5b, 0xa4, 0x88, 0x93, 0x2a, 0xea, 0x1a, 0x10,
6427 0xe5, 0x86, 0x2f, 0x92, 0xe4, 0xa7, 0xe2, 0x77, 0xbd, 0xa9,
6428 0xf3, 0x4a, 0xf6, 0xd0 ),
6429 IV ( 0x75, 0xe5 ),
6430 ADDITIONAL(),
6431 PLAINTEXT(),
6432 CIPHERTEXT(),
6433 AUTH ( 0x1f, 0x0d, 0x23, 0x07, 0x0f, 0xcd, 0x74, 0x8e, 0x25, 0xbf,
6434 0x64, 0x54, 0xf5, 0xc9, 0x13, 0x6e ) );
6435
6436/* AES-GCM test case 290 */
6437CIPHER_TEST ( wycheproof_aes_gcm_eaa17e87, &aes_gcm_algorithm,
6438 KEY ( 0xe1, 0xc0, 0x44, 0x6f, 0x11, 0xae, 0x6a, 0xa4, 0xfa, 0x25,
6439 0x4f, 0x9a, 0x84, 0x6f, 0xc6, 0xe1, 0x3e, 0x45, 0xe5, 0x37,
6440 0xe4, 0x7f, 0x20, 0x42 ),
6441 IV ( 0x89, 0x89 ),
6442 ADDITIONAL(),
6443 PLAINTEXT ( 0x3a, 0x2f, 0x5a, 0xd0, 0xeb, 0x21, 0x6e, 0x54, 0x6e,
6444 0x0b, 0xca, 0xa3, 0x77, 0xb6, 0xcb, 0xc7 ),
6445 CIPHERTEXT ( 0x55, 0x0b, 0x48, 0xa4, 0x3e, 0x82, 0x1f, 0xd7, 0x6f,
6446 0x49, 0xf0, 0xf1, 0xa8, 0x97, 0xae, 0xad ),
6447 AUTH ( 0xf6, 0xe0, 0xa9, 0x79, 0x48, 0x1f, 0x99, 0x57, 0xdd, 0xad,
6448 0x0f, 0x21, 0xa7, 0x77, 0xa7, 0x3a ) );
6449
6450/* AES-GCM test case 291 */
6451CIPHER_TEST ( wycheproof_aes_gcm_e95b49a5, &aes_gcm_algorithm,
6452 KEY ( 0x56, 0x75, 0x63, 0xbf, 0x4c, 0xf1, 0x54, 0x90, 0x22, 0x75,
6453 0xa5, 0x3b, 0xc5, 0x7c, 0xd6, 0xdd, 0x7b, 0x37, 0x0d, 0x27,
6454 0x01, 0x1b, 0xda, 0xc8 ),
6455 IV ( 0x68, 0xd7, 0xfc, 0x38 ),
6456 ADDITIONAL(),
6457 PLAINTEXT(),
6458 CIPHERTEXT(),
6459 AUTH ( 0x14, 0x75, 0x56, 0x3e, 0x32, 0x12, 0xf3, 0xb5, 0xe4, 0x00,
6460 0x62, 0x56, 0x9a, 0xfd, 0x71, 0xe3 ) );
6461
6462/* AES-GCM test case 292 */
6463CIPHER_TEST ( wycheproof_aes_gcm_28dd9b0e, &aes_gcm_algorithm,
6464 KEY ( 0x83, 0x4d, 0x0b, 0xb6, 0x01, 0x17, 0x08, 0x65, 0xa7, 0x81,
6465 0x39, 0x42, 0x8a, 0x15, 0x03, 0x69, 0x5a, 0x6a, 0x29, 0x1e,
6466 0xbd, 0x74, 0x7c, 0xd1 ),
6467 IV ( 0xbb, 0x9d, 0x2a, 0xa3 ),
6468 ADDITIONAL(),
6469 PLAINTEXT ( 0x6f, 0x79, 0xe1, 0x8b, 0x4a, 0xcd, 0x5a, 0x03, 0xd3,
6470 0xa5, 0xf7, 0xe1, 0xa8, 0xd0, 0xf1, 0x83 ),
6471 CIPHERTEXT ( 0x30, 0x91, 0x33, 0xe7, 0x61, 0x59, 0xfe, 0x8a, 0x41,
6472 0xb2, 0x08, 0x43, 0x48, 0x65, 0x11, 0xab ),
6473 AUTH ( 0x03, 0xab, 0x26, 0x99, 0x3b, 0x70, 0x19, 0x10, 0xa2, 0xe8,
6474 0xec, 0xcc, 0xd2, 0xba, 0x9e, 0x52 ) );
6475
6476/* AES-GCM test case 293 */
6477CIPHER_TEST ( wycheproof_aes_gcm_6ae5995a, &aes_gcm_algorithm,
6478 KEY ( 0x99, 0xfb, 0x18, 0xf5, 0xba, 0x43, 0x0b, 0xb9, 0xea, 0x94,
6479 0x29, 0x68, 0xec, 0xb7, 0x99, 0xb4, 0x34, 0x06, 0xe1, 0xaf,
6480 0x4b, 0x64, 0x25, 0xa1 ),
6481 IV ( 0xa9, 0x84, 0xbd, 0xcd, 0xca, 0xe2 ),
6482 ADDITIONAL(),
6483 PLAINTEXT(),
6484 CIPHERTEXT(),
6485 AUTH ( 0xd7, 0xb9, 0xa6, 0xb5, 0x8a, 0x97, 0x98, 0x29, 0x16, 0xe8,
6486 0x32, 0x19, 0xfb, 0xf7, 0x1b, 0x1e ) );
6487
6488/* AES-GCM test case 294 */
6489CIPHER_TEST ( wycheproof_aes_gcm_df8aacfc, &aes_gcm_algorithm,
6490 KEY ( 0xb7, 0x7b, 0x24, 0x2a, 0xa0, 0xd5, 0x1c, 0x92, 0xfd, 0xa0,
6491 0x13, 0xe0, 0xcb, 0x0e, 0xf2, 0x43, 0x73, 0x99, 0xac, 0xe5,
6492 0xd3, 0xf5, 0x07, 0xe4 ),
6493 IV ( 0x52, 0xaa, 0x01, 0xe0, 0xd0, 0xd6 ),
6494 ADDITIONAL(),
6495 PLAINTEXT ( 0x4b, 0xa5, 0x41, 0xa9, 0x91, 0x47, 0x29, 0x21, 0x61,
6496 0x53, 0x80, 0x13, 0x40, 0xab, 0x17, 0x79 ),
6497 CIPHERTEXT ( 0xe0, 0x82, 0x61, 0xe4, 0x6e, 0xaf, 0x90, 0xd9, 0x78,
6498 0xea, 0x8f, 0x78, 0x89, 0xbc, 0xcd, 0x4f ),
6499 AUTH ( 0xc0, 0x52, 0xa5, 0x5d, 0xf3, 0x92, 0x6a, 0x50, 0x99, 0x0a,
6500 0x53, 0x2e, 0xfe, 0x3d, 0x80, 0xec ) );
6501
6502/* AES-GCM test case 295 */
6503CIPHER_TEST ( wycheproof_aes_gcm_f248c8cf, &aes_gcm_algorithm,
6504 KEY ( 0xd7, 0x45, 0x99, 0xb3, 0xd2, 0xdb, 0x81, 0x65, 0x3d, 0xe4,
6505 0x3b, 0x52, 0xfc, 0x99, 0x4c, 0x50, 0xd0, 0xbe, 0x75, 0x9f,
6506 0xab, 0x87, 0xc3, 0x3a ),
6507 IV ( 0xd1, 0xc6, 0x1c, 0xf8, 0x53, 0x25, 0x31, 0xb5 ),
6508 ADDITIONAL(),
6509 PLAINTEXT(),
6510 CIPHERTEXT(),
6511 AUTH ( 0xf9, 0x4f, 0x20, 0x49, 0xa6, 0x56, 0x0c, 0x47, 0x0b, 0x3a,
6512 0x7c, 0xa7, 0xbb, 0xc3, 0x1a, 0x3d ) );
6513
6514/* AES-GCM test case 296 */
6515CIPHER_TEST ( wycheproof_aes_gcm_bd6eb7fd, &aes_gcm_algorithm,
6516 KEY ( 0x0b, 0x17, 0x71, 0x98, 0xc8, 0xb4, 0x19, 0xbf, 0x74, 0xac,
6517 0xc3, 0xbc, 0x65, 0xb5, 0xfb, 0x3d, 0x09, 0xa9, 0x15, 0xff,
6518 0x71, 0xad, 0xd7, 0x54 ),
6519 IV ( 0x8f, 0x07, 0x5c, 0xbc, 0xda, 0x98, 0x31, 0xc3 ),
6520 ADDITIONAL(),
6521 PLAINTEXT ( 0xc4, 0xb1, 0xe0, 0x5c, 0xa3, 0xd5, 0x91, 0xf9, 0x54,
6522 0x3e, 0x64, 0xde, 0x3f, 0xc6, 0x82, 0xac ),
6523 CIPHERTEXT ( 0x3c, 0x6e, 0xc0, 0xab, 0x1b, 0x82, 0x7b, 0xf2, 0x38,
6524 0xa5, 0x38, 0x4f, 0xb7, 0xe2, 0x12, 0xce ),
6525 AUTH ( 0x7d, 0xb7, 0x40, 0x22, 0x24, 0xfd, 0x58, 0x3e, 0x31, 0x2b,
6526 0xc0, 0xe6, 0x1c, 0xf1, 0x13, 0x66 ) );
6527
6528/* AES-GCM test case 297 */
6529CIPHER_TEST ( wycheproof_aes_gcm_141e913b, &aes_gcm_algorithm,
6530 KEY ( 0x17, 0x2f, 0x22, 0xf2, 0xe5, 0x93, 0x64, 0xdc, 0x41, 0x8c,
6531 0xd7, 0x51, 0xdf, 0xa8, 0x44, 0x4a, 0xe1, 0x86, 0x44, 0xc0,
6532 0xf9, 0xa2, 0xbe, 0x84 ),
6533 IV ( 0xbf, 0x90, 0x26, 0xd3, 0xdd, 0xaa, 0x37, 0xe7, 0xf1, 0x80 ),
6534 ADDITIONAL(),
6535 PLAINTEXT(),
6536 CIPHERTEXT(),
6537 AUTH ( 0xa8, 0xdc, 0x52, 0xc7, 0x79, 0x61, 0x1a, 0x70, 0x28, 0xb1,
6538 0x88, 0x61, 0x5c, 0x9a, 0x34, 0xeb ) );
6539
6540/* AES-GCM test case 298 */
6541CIPHER_TEST ( wycheproof_aes_gcm_d2887a50, &aes_gcm_algorithm,
6542 KEY ( 0x4c, 0x41, 0x10, 0x4d, 0x3f, 0x40, 0x26, 0x5f, 0x9e, 0x35,
6543 0xc3, 0x20, 0xa0, 0x1e, 0x78, 0x76, 0xc3, 0x14, 0x00, 0xa0,
6544 0xbd, 0x4d, 0x70, 0x92 ),
6545 IV ( 0x85, 0xfd, 0xc8, 0x1a, 0xfd, 0x9f, 0x48, 0x28, 0x17, 0x7e ),
6546 ADDITIONAL(),
6547 PLAINTEXT ( 0xba, 0x7c, 0xd0, 0x7d, 0xfd, 0x8b, 0x5c, 0xf6, 0xff,
6548 0xd3, 0xdd, 0xb7, 0x63, 0x56, 0x12, 0xc6 ),
6549 CIPHERTEXT ( 0x2d, 0x8d, 0xc3, 0x7e, 0xce, 0x9c, 0xda, 0x05, 0xdd,
6550 0x09, 0x77, 0x11, 0x2d, 0xd8, 0x64, 0xc5 ),
6551 AUTH ( 0xab, 0xee, 0x97, 0xe6, 0xf2, 0x6d, 0x5c, 0x97, 0xe3, 0x6f,
6552 0xca, 0xd7, 0x60, 0xb2, 0xe6, 0xc6 ) );
6553
6554/* AES-GCM test case 299 */
6555CIPHER_TEST ( wycheproof_aes_gcm_6a453e9b, &aes_gcm_algorithm,
6556 KEY ( 0x8f, 0x9a, 0x38, 0xc1, 0x01, 0x49, 0x66, 0xe4, 0xd9, 0xae,
6557 0x73, 0x61, 0x39, 0xc5, 0xe7, 0x9b, 0x99, 0x34, 0x58, 0x74,
6558 0xf4, 0x2d, 0x4c, 0x7d, 0x2c, 0x81, 0xaa, 0x67, 0x97, 0xc4,
6559 0x17, 0xc0 ),
6560 IV ( 0xa9 ),
6561 ADDITIONAL(),
6562 PLAINTEXT(),
6563 CIPHERTEXT(),
6564 AUTH ( 0x2a, 0x26, 0x8b, 0xf3, 0xa7, 0x5f, 0xd7, 0xb0, 0x0b, 0xa2,
6565 0x30, 0xb9, 0x04, 0xbb, 0xb0, 0x14 ) );
6566
6567/* AES-GCM test case 300 */
6568CIPHER_TEST ( wycheproof_aes_gcm_54b2487f, &aes_gcm_algorithm,
6569 KEY ( 0x14, 0x4c, 0xd8, 0x27, 0x92, 0x29, 0xe8, 0xbb, 0x2d, 0xe9,
6570 0x9d, 0x24, 0xe6, 0x15, 0x30, 0x66, 0x63, 0x91, 0x3f, 0xe9,
6571 0x17, 0x7f, 0xcd, 0x27, 0x0f, 0xaf, 0xec, 0x49, 0x3d, 0x43,
6572 0xbc, 0xa1 ),
6573 IV ( 0xb3 ),
6574 ADDITIONAL(),
6575 PLAINTEXT ( 0x97, 0x62, 0x29, 0xf5, 0x53, 0x8f, 0x96, 0x36, 0x47,
6576 0x6d, 0x69, 0xf0, 0xc3, 0x28, 0xe2, 0x9d ),
6577 CIPHERTEXT ( 0x7b, 0xea, 0x30, 0xec, 0xc2, 0xf7, 0x3f, 0x8e, 0x12,
6578 0x12, 0x63, 0xb3, 0x79, 0x66, 0x95, 0x4c ),
6579 AUTH ( 0x8b, 0xba, 0xd4, 0xad, 0xc5, 0x4b, 0x37, 0xa2, 0xb2, 0xf0,
6580 0xf6, 0xe8, 0x61, 0x75, 0x48, 0xc9 ) );
6581
6582/* AES-GCM test case 301 */
6583CIPHER_TEST ( wycheproof_aes_gcm_2f6cfdb9, &aes_gcm_algorithm,
6584 KEY ( 0x7d, 0x31, 0x86, 0x1f, 0x9d, 0x35, 0x36, 0xe1, 0x40, 0x16,
6585 0xa3, 0x21, 0x6b, 0x10, 0x42, 0xe0, 0xd2, 0xf7, 0xd4, 0x61,
6586 0x43, 0x14, 0x26, 0x8b, 0x6f, 0x83, 0x4e, 0xc7, 0xf3, 0x8b,
6587 0xbb, 0x65 ),
6588 IV ( 0xc3, 0x32 ),
6589 ADDITIONAL(),
6590 PLAINTEXT(),
6591 CIPHERTEXT(),
6592 AUTH ( 0x1d, 0x97, 0x8a, 0x69, 0x31, 0x20, 0xc1, 0x1f, 0x6d, 0x51,
6593 0xa3, 0xed, 0x88, 0xcd, 0x4a, 0xce ) );
6594
6595/* AES-GCM test case 302 */
6596CIPHER_TEST ( wycheproof_aes_gcm_353db382, &aes_gcm_algorithm,
6597 KEY ( 0x22, 0xb3, 0x5f, 0xe9, 0x62, 0x3e, 0xe1, 0x1f, 0x8b, 0x60,
6598 0xb6, 0xd2, 0x2d, 0xb3, 0x76, 0x5b, 0x66, 0x6e, 0xd9, 0x72,
6599 0xfa, 0x7c, 0xcd, 0x92, 0xb4, 0x5f, 0x22, 0xde, 0xee, 0x02,
6600 0xca, 0xb1 ),
6601 IV ( 0xda, 0x6c ),
6602 ADDITIONAL(),
6603 PLAINTEXT ( 0x53, 0x41, 0xc7, 0x8e, 0x4c, 0xe5, 0xbf, 0x8f, 0xbc,
6604 0x3e, 0x07, 0x7d, 0x19, 0x90, 0xdd, 0x5d ),
6605 CIPHERTEXT ( 0x9c, 0x39, 0xf5, 0xb1, 0x10, 0x36, 0x1e, 0x9a, 0x77,
6606 0x0c, 0xc5, 0xe8, 0xb0, 0xf4, 0x44, 0xbb ),
6607 AUTH ( 0xb6, 0x3f, 0xf4, 0x3c, 0x12, 0x07, 0x3e, 0xc5, 0x57, 0x2b,
6608 0x1b, 0xe7, 0x0f, 0x17, 0xe2, 0x31 ) );
6609
6610/* AES-GCM test case 303 */
6611CIPHER_TEST ( wycheproof_aes_gcm_c0580c34, &aes_gcm_algorithm,
6612 KEY ( 0xc2, 0x24, 0xe0, 0xbb, 0xa3, 0xd7, 0xa9, 0x91, 0x65, 0xf7,
6613 0x99, 0x6b, 0x67, 0xa0, 0xfc, 0xe3, 0xe1, 0x2f, 0x2c, 0x01,
6614 0x17, 0x9b, 0x19, 0x7b, 0x69, 0xb7, 0xe6, 0x28, 0xbc, 0xa9,
6615 0x20, 0x96 ),
6616 IV ( 0x6b, 0x30, 0x14, 0x5e ),
6617 ADDITIONAL(),
6618 PLAINTEXT(),
6619 CIPHERTEXT(),
6620 AUTH ( 0xae, 0x6f, 0x7c, 0x9a, 0x29, 0xf0, 0xd8, 0x20, 0x4c, 0xa5,
6621 0x0b, 0x14, 0xa1, 0xe0, 0xdc, 0xf2 ) );
6622
6623/* AES-GCM test case 304 */
6624CIPHER_TEST ( wycheproof_aes_gcm_6134968b, &aes_gcm_algorithm,
6625 KEY ( 0x09, 0x3e, 0xb1, 0x23, 0x43, 0x53, 0x7e, 0xe8, 0xe9, 0x1c,
6626 0x1f, 0x71, 0x5b, 0x86, 0x26, 0x03, 0xf8, 0xda, 0xf9, 0xd4,
6627 0xe1, 0xd7, 0xd6, 0x72, 0x12, 0xa9, 0xd6, 0x8e, 0x5a, 0xac,
6628 0x93, 0x58 ),
6629 IV ( 0x51, 0x10, 0x60, 0x4c ),
6630 ADDITIONAL(),
6631 PLAINTEXT ( 0x33, 0xef, 0xb5, 0x8c, 0x91, 0xe8, 0xc7, 0x02, 0x71,
6632 0x87, 0x0e, 0xc0, 0x0f, 0xe2, 0xe2, 0x02 ),
6633 CIPHERTEXT ( 0xf7, 0x3f, 0x72, 0xf9, 0x76, 0xa2, 0x96, 0xba, 0x3c,
6634 0xa9, 0x4b, 0xc6, 0xeb, 0x08, 0xcd, 0x46 ),
6635 AUTH ( 0xb8, 0x24, 0xc3, 0x3c, 0x13, 0xf2, 0x89, 0x42, 0x96, 0x59,
6636 0xaa, 0x01, 0x7c, 0x63, 0x2f, 0x71 ) );
6637
6638/* AES-GCM test case 305 */
6639CIPHER_TEST ( wycheproof_aes_gcm_4fa6ed1d, &aes_gcm_algorithm,
6640 KEY ( 0x98, 0xe6, 0xf8, 0xab, 0x67, 0x3e, 0x80, 0x4e, 0x86, 0x5e,
6641 0x32, 0x40, 0x3a, 0x65, 0x51, 0xbf, 0x80, 0x7a, 0x95, 0x93,
6642 0x43, 0xc6, 0x0d, 0x34, 0x55, 0x93, 0x60, 0xbc, 0x29, 0x5e,
6643 0xcb, 0x5b ),
6644 IV ( 0xd4, 0xd8, 0x57, 0x51, 0x08, 0x88 ),
6645 ADDITIONAL(),
6646 PLAINTEXT(),
6647 CIPHERTEXT(),
6648 AUTH ( 0x3d, 0xb1, 0x67, 0x25, 0xfa, 0xfc, 0x82, 0x8d, 0x41, 0x4a,
6649 0xb6, 0x1c, 0x16, 0xa6, 0xc3, 0x8f ) );
6650
6651/* AES-GCM test case 306 */
6652CIPHER_TEST ( wycheproof_aes_gcm_0cd1dd62, &aes_gcm_algorithm,
6653 KEY ( 0x0b, 0xd0, 0xe8, 0xe7, 0x78, 0x11, 0x66, 0xe1, 0xd8, 0x76,
6654 0xde, 0xc8, 0xfa, 0xd3, 0x4b, 0xa9, 0x5b, 0x03, 0x2a, 0x27,
6655 0xca, 0xc0, 0x55, 0x15, 0x95, 0x11, 0x60, 0x91, 0x00, 0x59,
6656 0x47, 0xb7 ),
6657 IV ( 0x1b, 0xdc, 0xd4, 0x4b, 0x66, 0x3e ),
6658 ADDITIONAL(),
6659 PLAINTEXT ( 0x91, 0x22, 0x22, 0x63, 0xb1, 0x2c, 0xf5, 0x61, 0x6a,
6660 0x04, 0x9c, 0xbe, 0x29, 0xab, 0x9b, 0x5b ),
6661 CIPHERTEXT ( 0xed, 0x46, 0x3f, 0x4f, 0x43, 0x33, 0x6a, 0xf3, 0xf4,
6662 0xd7, 0xe0, 0x87, 0x70, 0x20, 0x11, 0x45 ),
6663 AUTH ( 0xc8, 0xfc, 0x39, 0x90, 0x6a, 0xca, 0x0c, 0x64, 0xe1, 0x4a,
6664 0x43, 0xff, 0x75, 0x0a, 0xbd, 0x8a ) );
6665
6666/* AES-GCM test case 307 */
6667CIPHER_TEST ( wycheproof_aes_gcm_97734f40, &aes_gcm_algorithm,
6668 KEY ( 0x61, 0xba, 0x69, 0x48, 0x97, 0x92, 0x5d, 0x1b, 0x41, 0x74,
6669 0xd4, 0x04, 0x01, 0x46, 0x9c, 0x3e, 0xf2, 0x67, 0xcd, 0xb9,
6670 0xf8, 0x29, 0xed, 0xb1, 0xa1, 0x06, 0x18, 0xc1, 0x6d, 0x66,
6671 0x60, 0x59 ),
6672 IV ( 0x0d, 0x10, 0xc5, 0xc8, 0x4b, 0x88, 0xd6, 0x88 ),
6673 ADDITIONAL(),
6674 PLAINTEXT(),
6675 CIPHERTEXT(),
6676 AUTH ( 0x13, 0x11, 0xf9, 0xf8, 0x30, 0xd7, 0x29, 0xc1, 0x89, 0xb7,
6677 0x4e, 0xc4, 0xf9, 0x08, 0x0f, 0xa1 ) );
6678
6679/* AES-GCM test case 308 */
6680CIPHER_TEST ( wycheproof_aes_gcm_2054c1b6, &aes_gcm_algorithm,
6681 KEY ( 0x11, 0x58, 0x84, 0xf6, 0x93, 0xb1, 0x55, 0x56, 0x3e, 0x9b,
6682 0xfb, 0x3b, 0x07, 0xca, 0xcb, 0x2f, 0x7f, 0x7c, 0xaa, 0x9b,
6683 0xfe, 0x51, 0xf8, 0x9e, 0x23, 0xfe, 0xb5, 0xa9, 0x46, 0x8b,
6684 0xfd, 0xd0 ),
6685 IV ( 0x04, 0x10, 0x21, 0x99, 0xef, 0x21, 0xe1, 0xdf ),
6686 ADDITIONAL(),
6687 PLAINTEXT ( 0x82, 0xe3, 0xe6, 0x04, 0xd2, 0xbe, 0x8f, 0xca, 0xb7,
6688 0x4f, 0x63, 0x8d, 0x1e, 0x70, 0xf2, 0x4c ),
6689 CIPHERTEXT ( 0x7e, 0x0d, 0xd6, 0xc7, 0x2a, 0xec, 0x49, 0xf8, 0x9c,
6690 0xc6, 0xa8, 0x00, 0x60, 0xc0, 0xb1, 0x70 ),
6691 AUTH ( 0xaf, 0x68, 0xa3, 0x7c, 0xfe, 0xfe, 0xcc, 0x4a, 0xb9, 0x9b,
6692 0xa5, 0x0a, 0x53, 0x53, 0xed, 0xca ) );
6693
6694/* AES-GCM test case 309 */
6695CIPHER_TEST ( wycheproof_aes_gcm_084d2089, &aes_gcm_algorithm,
6696 KEY ( 0x44, 0xab, 0x20, 0x4d, 0x15, 0x0a, 0xdb, 0x17, 0xf8, 0x3d,
6697 0x1e, 0x52, 0x05, 0xb6, 0xe1, 0x41, 0x96, 0x73, 0xfa, 0xde,
6698 0xe6, 0x10, 0xfb, 0x9a, 0x38, 0x18, 0x5a, 0x96, 0x74, 0x10,
6699 0x21, 0xeb ),
6700 IV ( 0xff, 0x39, 0x14, 0x98, 0x2b, 0xe3, 0x0b, 0x3b, 0x21, 0x12 ),
6701 ADDITIONAL(),
6702 PLAINTEXT(),
6703 CIPHERTEXT(),
6704 AUTH ( 0xf1, 0x87, 0xb2, 0x81, 0xc9, 0xfb, 0xb2, 0x4c, 0xca, 0x24,
6705 0x12, 0x27, 0xd0, 0xb5, 0xd1, 0x64 ) );
6706
6707/* AES-GCM test case 310 */
6708CIPHER_TEST ( wycheproof_aes_gcm_48d6b2ad, &aes_gcm_algorithm,
6709 KEY ( 0xd3, 0xb4, 0x4b, 0x8d, 0xfc, 0x35, 0x30, 0x40, 0x4a, 0x63,
6710 0xb3, 0xca, 0x04, 0xcc, 0x71, 0xcf, 0xc7, 0x1a, 0x55, 0x38,
6711 0x44, 0x8b, 0x26, 0x25, 0xc9, 0x81, 0x85, 0x6c, 0xb7, 0xda,
6712 0xed, 0x0f ),
6713 IV ( 0x7c, 0x3c, 0x42, 0xfa, 0x17, 0x34, 0x7e, 0x1d, 0xf7, 0x97 ),
6714 ADDITIONAL(),
6715 PLAINTEXT ( 0x1d, 0x17, 0x75, 0x57, 0x96, 0x56, 0xf7, 0xf6, 0xc6,
6716 0x89, 0x14, 0x01, 0xd7, 0x33, 0xe2, 0xab ),
6717 CIPHERTEXT ( 0x68, 0x4a, 0x6f, 0x58, 0x76, 0x2e, 0x59, 0x17, 0x33,
6718 0xe9, 0xe7, 0xfe, 0x7f, 0x57, 0x22, 0xa2 ),
6719 AUTH ( 0x1c, 0xe1, 0x63, 0x44, 0x4d, 0xc3, 0x75, 0x4c, 0x39, 0xd5,
6720 0x56, 0xcc, 0x39, 0x94, 0xb7, 0xda ) );
6721
6722/* AES-GCM test case 311 */
6723CIPHER_TEST ( wycheproof_aes_gcm_55e10870, &aes_gcm_algorithm,
6724 KEY ( 0x8f, 0x3f, 0x52, 0xe3, 0xc7, 0x5c, 0x58, 0xf5, 0xcb, 0x26,
6725 0x1f, 0x51, 0x8f, 0x4a, 0xd3, 0x0a ),
6726 IV(),
6727 ADDITIONAL(),
6728 PLAINTEXT(),
6729 CIPHERTEXT(),
6730 AUTH ( 0xcf, 0x71, 0x97, 0x8f, 0xfc, 0xc7, 0x78, 0xf3, 0xc8, 0x5a,
6731 0xc9, 0xc3, 0x1b, 0x6f, 0xe1, 0x91 ) );
6732
6733/* AES-GCM test case 312 */
6734CIPHER_TEST ( wycheproof_aes_gcm_ce163a5a, &aes_gcm_algorithm,
6735 KEY ( 0x2a, 0x4b, 0xf9, 0x0e, 0x56, 0xb7, 0x0f, 0xdd, 0x86, 0x49,
6736 0xd7, 0x75, 0xc0, 0x89, 0xde, 0x3b ),
6737 IV(),
6738 ADDITIONAL(),
6739 PLAINTEXT ( 0x32, 0x4c, 0xed, 0x6c, 0xd1, 0x5e, 0xcc, 0x5b, 0x37,
6740 0x41, 0x54, 0x1e, 0x22, 0xc1, 0x8a, 0xd9 ),
6741 CIPHERTEXT ( 0x00, 0xa2, 0x9f, 0x0a, 0x5e, 0x2e, 0x74, 0x90, 0x27,
6742 0x9d, 0x1f, 0xaf, 0x8b, 0x88, 0x1c, 0x7b ),
6743 AUTH ( 0xa2, 0xc7, 0xe8, 0xd7, 0xa1, 0x9b, 0x88, 0x4f, 0x74, 0x2d,
6744 0xfe, 0xc3, 0xe7, 0x6c, 0x75, 0xee ) );
6745
6746/* AES-GCM test case 313 */
6747CIPHER_TEST ( wycheproof_aes_gcm_acdd1126, &aes_gcm_algorithm,
6748 KEY ( 0x0b, 0x18, 0xd2, 0x13, 0x37, 0x03, 0x5c, 0x7b, 0xaa, 0x08,
6749 0x21, 0x1b, 0x70, 0x2f, 0xa7, 0x80, 0xac, 0x7c, 0x09, 0xbe,
6750 0x8f, 0x9e, 0xd1, 0x1f ),
6751 IV(),
6752 ADDITIONAL(),
6753 PLAINTEXT(),
6754 CIPHERTEXT(),
6755 AUTH ( 0xca, 0x69, 0xa2, 0xeb, 0x3a, 0x09, 0x6e, 0xa3, 0x6b, 0x10,
6756 0x15, 0xd5, 0xdf, 0xff, 0xf5, 0x32 ) );
6757
6758/* AES-GCM test case 314 */
6759CIPHER_TEST ( wycheproof_aes_gcm_34de0776, &aes_gcm_algorithm,
6760 KEY ( 0xba, 0x76, 0xd5, 0x94, 0xa6, 0xdf, 0x91, 0x5b, 0xb7, 0xab,
6761 0x7e, 0x6d, 0x1a, 0x8d, 0x02, 0x4b, 0x27, 0x96, 0x33, 0x6c,
6762 0x1b, 0x83, 0x28, 0xa9 ),
6763 IV(),
6764 ADDITIONAL(),
6765 PLAINTEXT ( 0xd6, 0x2f, 0x30, 0x27, 0x42, 0xd6, 0x1d, 0x82, 0x3e,
6766 0xa9, 0x91, 0xb9, 0x34, 0x30, 0xd5, 0x89 ),
6767 CIPHERTEXT ( 0x50, 0x9b, 0x06, 0x58, 0xd0, 0x9f, 0x7a, 0x5b, 0xb9,
6768 0xdb, 0x43, 0xb7, 0x0c, 0x83, 0x87, 0xf7 ),
6769 AUTH ( 0x2c, 0x94, 0x88, 0xd5, 0x3a, 0x0b, 0x2b, 0x53, 0x08, 0xc2,
6770 0x75, 0x7d, 0xfa, 0xc7, 0x21, 0x9f ) );
6771
6772/* AES-GCM test case 315 */
6773CIPHER_TEST ( wycheproof_aes_gcm_59e33b44, &aes_gcm_algorithm,
6774 KEY ( 0x3f, 0x8c, 0xa4, 0x7b, 0x9a, 0x94, 0x05, 0x82, 0x64, 0x4e,
6775 0x8e, 0xcf, 0x9c, 0x2d, 0x44, 0xe8, 0x13, 0x83, 0x77, 0xa8,
6776 0x37, 0x9c, 0x5c, 0x11, 0xaa, 0xfe, 0x7f, 0xec, 0x19, 0x85,
6777 0x6c, 0xf1 ),
6778 IV(),
6779 ADDITIONAL(),
6780 PLAINTEXT(),
6781 CIPHERTEXT(),
6782 AUTH ( 0x17, 0x26, 0xaa, 0x69, 0x5f, 0xba, 0xa2, 0x1a, 0x1d, 0xb8,
6783 0x84, 0x55, 0xc6, 0x70, 0xa4, 0xb0 ) );
6784
6785/* AES-GCM test case 316 */
6786CIPHER_TEST ( wycheproof_aes_gcm_5356a2cb, &aes_gcm_algorithm,
6787 KEY ( 0x76, 0x60, 0xd1, 0x09, 0x66, 0xc6, 0x50, 0x39, 0x03, 0xa5,
6788 0x52, 0xdd, 0xe2, 0xa8, 0x09, 0xed, 0xe9, 0xda, 0x49, 0x0e,
6789 0x5e, 0x5c, 0xc3, 0xe3, 0x49, 0xda, 0x99, 0x96, 0x71, 0x80,
6790 0x98, 0x83 ),
6791 IV(),
6792 ADDITIONAL(),
6793 PLAINTEXT ( 0xc3, 0x14, 0x23, 0x53, 0x41, 0xde, 0xbf, 0xaf, 0xa1,
6794 0x52, 0x6b, 0xb6, 0x10, 0x44, 0xa7, 0xf1 ),
6795 CIPHERTEXT ( 0x77, 0x72, 0xea, 0x35, 0x89, 0x01, 0xf5, 0x71, 0xd3,
6796 0xd3, 0x5c, 0x19, 0x49, 0x76, 0x39, 0xd9 ),
6797 AUTH ( 0x8f, 0xe0, 0x52, 0x0a, 0xd7, 0x44, 0xa1, 0x1f, 0x0c, 0xcf,
6798 0xd2, 0x28, 0x45, 0x43, 0x63, 0xfa ) );
6799
6800/** Perform Wycheproof AES-GCM self-tests */
6801static void wycheproof_aes_gcm_exec ( void ) {
6802
6803 /* Perform tests in tcId order */
6804 cipher_ok ( &wycheproof_aes_gcm_157a9714 );
6805 cipher_ok ( &wycheproof_aes_gcm_9790df61 );
6806 cipher_ok ( &wycheproof_aes_gcm_115b44f1 );
6807 cipher_ok ( &wycheproof_aes_gcm_b7fccaa3 );
6808 cipher_ok ( &wycheproof_aes_gcm_91d6ea82 );
6809 cipher_ok ( &wycheproof_aes_gcm_e6ac9d52 );
6810 cipher_ok ( &wycheproof_aes_gcm_e313ce55 );
6811 cipher_ok ( &wycheproof_aes_gcm_74a144dd );
6812 cipher_ok ( &wycheproof_aes_gcm_a14ec21f );
6813 cipher_ok ( &wycheproof_aes_gcm_70b4e6f3 );
6814 cipher_ok ( &wycheproof_aes_gcm_7f9ca8b2 );
6815 cipher_ok ( &wycheproof_aes_gcm_2f81ba3b );
6816 cipher_ok ( &wycheproof_aes_gcm_3324275e );
6817 cipher_ok ( &wycheproof_aes_gcm_d0b2b893 );
6818 cipher_ok ( &wycheproof_aes_gcm_d06a8069 );
6819 cipher_ok ( &wycheproof_aes_gcm_f9082b41 );
6820 cipher_ok ( &wycheproof_aes_gcm_8224427d );
6821 cipher_ok ( &wycheproof_aes_gcm_110d48ee );
6822 cipher_ok ( &wycheproof_aes_gcm_417222f0 );
6823 cipher_ok ( &wycheproof_aes_gcm_f01459e0 );
6824 cipher_ok ( &wycheproof_aes_gcm_bc589a7e );
6825 cipher_ok ( &wycheproof_aes_gcm_d63ed865 );
6826 cipher_ok ( &wycheproof_aes_gcm_d08a751a );
6827 cipher_ok ( &wycheproof_aes_gcm_471d4ead );
6828 cipher_ok ( &wycheproof_aes_gcm_7ff74d83 );
6829 cipher_ok ( &wycheproof_aes_gcm_93db813a );
6830 cipher_ok ( &wycheproof_aes_gcm_2ec43c3e );
6831 cipher_ok ( &wycheproof_aes_gcm_b9939500 );
6832 cipher_ok ( &wycheproof_aes_gcm_398af67e );
6833 cipher_ok ( &wycheproof_aes_gcm_831a61d8 );
6834 cipher_ok ( &wycheproof_aes_gcm_63336678 );
6835 cipher_ok ( &wycheproof_aes_gcm_a88873d1 );
6836 cipher_ok ( &wycheproof_aes_gcm_febb3d17 );
6837 cipher_ok ( &wycheproof_aes_gcm_6e67f3d3 );
6838 cipher_ok ( &wycheproof_aes_gcm_7e3aa6d7 );
6839 cipher_ok ( &wycheproof_aes_gcm_507e4bb7 );
6840 cipher_ok ( &wycheproof_aes_gcm_a74ffd89 );
6841 cipher_ok ( &wycheproof_aes_gcm_876dc2f0 );
6842 cipher_ok ( &wycheproof_aes_gcm_0e57609d );
6843 cipher_ok ( &wycheproof_aes_gcm_5b8dd48a );
6844 cipher_ok ( &wycheproof_aes_gcm_15eae47a );
6845 cipher_ok ( &wycheproof_aes_gcm_5bf301b1 );
6846 cipher_ok ( &wycheproof_aes_gcm_6d9ec3c9 );
6847 cipher_ok ( &wycheproof_aes_gcm_5e73e414 );
6848 cipher_ok ( &wycheproof_aes_gcm_d5198faa );
6849 cipher_ok ( &wycheproof_aes_gcm_ab750cbd );
6850 cipher_ok ( &wycheproof_aes_gcm_ea79dc25 );
6851 cipher_ok ( &wycheproof_aes_gcm_3397c9ae );
6852 cipher_ok ( &wycheproof_aes_gcm_347e1695 );
6853 cipher_ok ( &wycheproof_aes_gcm_63a3e6ca );
6854 cipher_ok ( &wycheproof_aes_gcm_dc6c9702 );
6855 cipher_ok ( &wycheproof_aes_gcm_942cc802 );
6856 cipher_ok ( &wycheproof_aes_gcm_77d7dce1 );
6857 cipher_ok ( &wycheproof_aes_gcm_471412a0 );
6858 cipher_ok ( &wycheproof_aes_gcm_a9c89f85 );
6859 cipher_ok ( &wycheproof_aes_gcm_db3f21b0 );
6860 cipher_ok ( &wycheproof_aes_gcm_0755dc1c );
6861 cipher_ok ( &wycheproof_aes_gcm_1a31814f );
6862 cipher_ok ( &wycheproof_aes_gcm_8e51b36a );
6863 cipher_ok ( &wycheproof_aes_gcm_8737599d );
6864 cipher_ok ( &wycheproof_aes_gcm_0d33db46 );
6865 cipher_ok ( &wycheproof_aes_gcm_2bdc78c7 );
6866 cipher_ok ( &wycheproof_aes_gcm_d5bfae8c );
6867 cipher_ok ( &wycheproof_aes_gcm_4ba4c501 );
6868 cipher_ok ( &wycheproof_aes_gcm_13666319 );
6869 cipher_ok ( &wycheproof_aes_gcm_ba5c6dd8 );
6870 cipher_ok ( &wycheproof_aes_gcm_c95dab82 );
6871 cipher_ok ( &wycheproof_aes_gcm_ae22db55 );
6872 cipher_ok ( &wycheproof_aes_gcm_d6dc5d07 );
6873 cipher_ok ( &wycheproof_aes_gcm_c761752c );
6874 cipher_ok ( &wycheproof_aes_gcm_c63f1aed );
6875 cipher_ok ( &wycheproof_aes_gcm_dd4fb2f4 );
6876 cipher_ok ( &wycheproof_aes_gcm_922348b7 );
6877 cipher_ok ( &wycheproof_aes_gcm_90face03 );
6878 cipher_ok ( &wycheproof_aes_gcm_d999cc8e );
6879 cipher_ok ( &wycheproof_aes_gcm_4af502aa );
6880 cipher_ok ( &wycheproof_aes_gcm_4ebc55c7 );
6881 cipher_ok ( &wycheproof_aes_gcm_888186c8 );
6882 cipher_ok ( &wycheproof_aes_gcm_4a6005f6 );
6883 cipher_ok ( &wycheproof_aes_gcm_2d04655c );
6884 cipher_ok ( &wycheproof_aes_gcm_56b6987d );
6885 cipher_ok ( &wycheproof_aes_gcm_644b8aad );
6886 cipher_ok ( &wycheproof_aes_gcm_97bb5e35 );
6887 cipher_ok ( &wycheproof_aes_gcm_123ab900 );
6888 cipher_ok ( &wycheproof_aes_gcm_ea998729 );
6889 cipher_ok ( &wycheproof_aes_gcm_cdad6d3a );
6890 cipher_ok ( &wycheproof_aes_gcm_e77da61d );
6891 cipher_ok ( &wycheproof_aes_gcm_599f93e3 );
6892 cipher_ok ( &wycheproof_aes_gcm_12c1aa5e );
6893 cipher_ok ( &wycheproof_aes_gcm_b2c6c3cd );
6894 cipher_ok ( &wycheproof_aes_gcm_293c46f8 );
6895 cipher_ok ( &wycheproof_aes_gcm_1af86832 );
6896 cipher_ok ( &wycheproof_aes_gcm_d03f18fe );
6897 cipher_ok ( &wycheproof_aes_gcm_63a399bd );
6898 cipher_ok ( &wycheproof_aes_gcm_03a1cf9e );
6899 cipher_ok ( &wycheproof_aes_gcm_41df38af );
6900 cipher_ok ( &wycheproof_aes_gcm_1a8fedd4 );
6901 cipher_ok ( &wycheproof_aes_gcm_c5c5e61c );
6902 cipher_ok ( &wycheproof_aes_gcm_ceefcefc );
6903 cipher_ok ( &wycheproof_aes_gcm_21500b95 );
6904 cipher_ok ( &wycheproof_aes_gcm_e2c3a1a4 );
6905 cipher_ok ( &wycheproof_aes_gcm_77767307 );
6906 cipher_ok ( &wycheproof_aes_gcm_f5cabfe8 );
6907 cipher_ok ( &wycheproof_aes_gcm_14ea057a );
6908 cipher_ok ( &wycheproof_aes_gcm_b2454cd9 );
6909 cipher_ok ( &wycheproof_aes_gcm_a605fd40 );
6910 cipher_ok ( &wycheproof_aes_gcm_5fc2c3a4 );
6911 cipher_ok ( &wycheproof_aes_gcm_c73596ff );
6912 cipher_ok ( &wycheproof_aes_gcm_8b84b201 );
6913 cipher_ok ( &wycheproof_aes_gcm_077de8ed );
6914 cipher_ok ( &wycheproof_aes_gcm_8895d57d );
6915 cipher_ok ( &wycheproof_aes_gcm_bca38eea );
6916 cipher_ok ( &wycheproof_aes_gcm_e281bdf1 );
6917 cipher_ok ( &wycheproof_aes_gcm_09e34ed6 );
6918 cipher_ok ( &wycheproof_aes_gcm_a20bd785 );
6919 cipher_ok ( &wycheproof_aes_gcm_4d3c95a4 );
6920 cipher_ok ( &wycheproof_aes_gcm_fdf02744 );
6921 cipher_ok ( &wycheproof_aes_gcm_19fae6ad );
6922 cipher_ok ( &wycheproof_aes_gcm_de129db1 );
6923 cipher_ok ( &wycheproof_aes_gcm_1d084de2 );
6924 cipher_ok ( &wycheproof_aes_gcm_a5bb8fa1 );
6925 cipher_ok ( &wycheproof_aes_gcm_94e6bc4f );
6926 cipher_ok ( &wycheproof_aes_gcm_10226199 );
6927 cipher_ok ( &wycheproof_aes_gcm_0b1e8b5b );
6928 cipher_ok ( &wycheproof_aes_gcm_96e5612f );
6929 cipher_ok ( &wycheproof_aes_gcm_2e57ea6b );
6930 cipher_ok ( &wycheproof_aes_gcm_08c164fc );
6931 cipher_ok ( &wycheproof_aes_gcm_19c96e4e );
6932 cipher_ok ( &wycheproof_aes_gcm_63801d8f );
6933 cipher_ok ( &wycheproof_aes_gcm_3d467b77 );
6934 cipher_ok ( &wycheproof_aes_gcm_566b5fcd );
6935 cipher_ok ( &wycheproof_aes_gcm_39054267 );
6936 cipher_ok ( &wycheproof_aes_gcm_99c80b8d );
6937 cipher_ok ( &wycheproof_aes_gcm_c40c4226 );
6938 cipher_ok ( &wycheproof_aes_gcm_b6419c85 );
6939 cipher_ok ( &wycheproof_aes_gcm_1c119a15 );
6940 cipher_ok ( &wycheproof_aes_gcm_e36c2be6 );
6941 cipher_ok ( &wycheproof_aes_gcm_93996ee5 );
6942 cipher_ok ( &wycheproof_aes_gcm_6aada21e );
6943 cipher_ok ( &wycheproof_aes_gcm_f50057ef );
6944 cipher_ok ( &wycheproof_aes_gcm_7095e3af );
6945 cipher_ok ( &wycheproof_aes_gcm_ff5845cf );
6946 cipher_ok ( &wycheproof_aes_gcm_2b7f8f4f );
6947 cipher_ok ( &wycheproof_aes_gcm_d993a57b );
6948 cipher_ok ( &wycheproof_aes_gcm_009e52d4 );
6949 cipher_ok ( &wycheproof_aes_gcm_2eef8b22 );
6950 cipher_ok ( &wycheproof_aes_gcm_a2b24e57 );
6951 cipher_ok ( &wycheproof_aes_gcm_4cccfc2f );
6952 cipher_ok ( &wycheproof_aes_gcm_0b49b77a );
6953 cipher_ok ( &wycheproof_aes_gcm_86a429e2 );
6954 cipher_ok ( &wycheproof_aes_gcm_8ed4ba4c );
6955 cipher_ok ( &wycheproof_aes_gcm_0e8ed23e );
6956 cipher_ok ( &wycheproof_aes_gcm_b1a4bc0b );
6957 cipher_ok ( &wycheproof_aes_gcm_b025b360 );
6958 cipher_ok ( &wycheproof_aes_gcm_f5019269 );
6959 cipher_ok ( &wycheproof_aes_gcm_31562fe1 );
6960 cipher_ok ( &wycheproof_aes_gcm_49e334ce );
6961 cipher_ok ( &wycheproof_aes_gcm_6677d2a7 );
6962 cipher_ok ( &wycheproof_aes_gcm_5d6316ec );
6963 cipher_ok ( &wycheproof_aes_gcm_6c7b5516 );
6964 cipher_ok ( &wycheproof_aes_gcm_3d134168 );
6965 cipher_ok ( &wycheproof_aes_gcm_637cdd7c );
6966 cipher_ok ( &wycheproof_aes_gcm_a524a3e1 );
6967 cipher_ok ( &wycheproof_aes_gcm_b5f09448 );
6968 cipher_ok ( &wycheproof_aes_gcm_c90d1019 );
6969 cipher_ok ( &wycheproof_aes_gcm_cc16f896 );
6970 cipher_ok ( &wycheproof_aes_gcm_c9b9c25b );
6971 cipher_ok ( &wycheproof_aes_gcm_9bcfa234 );
6972 cipher_ok ( &wycheproof_aes_gcm_02e3c344 );
6973 cipher_ok ( &wycheproof_aes_gcm_0a6597f4 );
6974 cipher_ok ( &wycheproof_aes_gcm_4723a634 );
6975 cipher_ok ( &wycheproof_aes_gcm_b7cd0c19 );
6976 cipher_ok ( &wycheproof_aes_gcm_bcf63dc2 );
6977 cipher_ok ( &wycheproof_aes_gcm_294b997d );
6978 cipher_ok ( &wycheproof_aes_gcm_c973e6d5 );
6979 cipher_ok ( &wycheproof_aes_gcm_9d586636 );
6980 cipher_ok ( &wycheproof_aes_gcm_07918c73 );
6981 cipher_ok ( &wycheproof_aes_gcm_807f66c0 );
6982 cipher_ok ( &wycheproof_aes_gcm_1a607e05 );
6983 cipher_ok ( &wycheproof_aes_gcm_848e090c );
6984 cipher_ok ( &wycheproof_aes_gcm_b238bfb2 );
6985 cipher_ok ( &wycheproof_aes_gcm_50ca31ab );
6986 cipher_ok ( &wycheproof_aes_gcm_7a0a5da7 );
6987 cipher_ok ( &wycheproof_aes_gcm_1b7eb29c );
6988 cipher_ok ( &wycheproof_aes_gcm_22ddd4ff );
6989 cipher_ok ( &wycheproof_aes_gcm_047fcc3d );
6990 cipher_ok ( &wycheproof_aes_gcm_b09553f4 );
6991 cipher_ok ( &wycheproof_aes_gcm_1dd3caab );
6992 cipher_ok ( &wycheproof_aes_gcm_9ff40949 );
6993 cipher_ok ( &wycheproof_aes_gcm_4bae909f );
6994 cipher_ok ( &wycheproof_aes_gcm_dbc87bdd );
6995 cipher_ok ( &wycheproof_aes_gcm_0834aa42 );
6996 cipher_ok ( &wycheproof_aes_gcm_0694ddb9 );
6997 cipher_ok ( &wycheproof_aes_gcm_c68a0e20 );
6998 cipher_ok ( &wycheproof_aes_gcm_a0b4e03a );
6999 cipher_ok ( &wycheproof_aes_gcm_42f63793 );
7000 cipher_ok ( &wycheproof_aes_gcm_a9355b80 );
7001 cipher_ok ( &wycheproof_aes_gcm_380d7036 );
7002 cipher_ok ( &wycheproof_aes_gcm_26a77e52 );
7003 cipher_ok ( &wycheproof_aes_gcm_7016eb5c );
7004 cipher_ok ( &wycheproof_aes_gcm_20abbc80 );
7005 cipher_ok ( &wycheproof_aes_gcm_1d93e9e2 );
7006 cipher_ok ( &wycheproof_aes_gcm_559a53ba );
7007 cipher_ok ( &wycheproof_aes_gcm_2fba3231 );
7008 cipher_ok ( &wycheproof_aes_gcm_51785cc5 );
7009 cipher_ok ( &wycheproof_aes_gcm_34d832ff );
7010 cipher_ok ( &wycheproof_aes_gcm_335f78f4 );
7011 cipher_ok ( &wycheproof_aes_gcm_39d2f365 );
7012 cipher_ok ( &wycheproof_aes_gcm_eaa17e87 );
7013 cipher_ok ( &wycheproof_aes_gcm_e95b49a5 );
7014 cipher_ok ( &wycheproof_aes_gcm_28dd9b0e );
7015 cipher_ok ( &wycheproof_aes_gcm_6ae5995a );
7016 cipher_ok ( &wycheproof_aes_gcm_df8aacfc );
7017 cipher_ok ( &wycheproof_aes_gcm_f248c8cf );
7018 cipher_ok ( &wycheproof_aes_gcm_bd6eb7fd );
7019 cipher_ok ( &wycheproof_aes_gcm_141e913b );
7020 cipher_ok ( &wycheproof_aes_gcm_d2887a50 );
7021 cipher_ok ( &wycheproof_aes_gcm_6a453e9b );
7022 cipher_ok ( &wycheproof_aes_gcm_54b2487f );
7023 cipher_ok ( &wycheproof_aes_gcm_2f6cfdb9 );
7024 cipher_ok ( &wycheproof_aes_gcm_353db382 );
7025 cipher_ok ( &wycheproof_aes_gcm_c0580c34 );
7026 cipher_ok ( &wycheproof_aes_gcm_6134968b );
7027 cipher_ok ( &wycheproof_aes_gcm_4fa6ed1d );
7028 cipher_ok ( &wycheproof_aes_gcm_0cd1dd62 );
7029 cipher_ok ( &wycheproof_aes_gcm_97734f40 );
7030 cipher_ok ( &wycheproof_aes_gcm_2054c1b6 );
7031 cipher_ok ( &wycheproof_aes_gcm_084d2089 );
7032 cipher_ok ( &wycheproof_aes_gcm_48d6b2ad );
7033 cipher_iv_fail_ok ( &wycheproof_aes_gcm_55e10870 );
7034 cipher_iv_fail_ok ( &wycheproof_aes_gcm_ce163a5a );
7035 cipher_iv_fail_ok ( &wycheproof_aes_gcm_acdd1126 );
7036 cipher_iv_fail_ok ( &wycheproof_aes_gcm_34de0776 );
7037 cipher_iv_fail_ok ( &wycheproof_aes_gcm_59e33b44 );
7038 cipher_iv_fail_ok ( &wycheproof_aes_gcm_5356a2cb );
7039}
7040
7041/** Wycheproof AES-GCM self-tests */
7042struct self_test wycheproof_aes_gcm __self_test = {
7043 .name = "wycheproof_aes_gcm",
7044 .exec = wycheproof_aes_gcm_exec,
7045};
7046REQUIRING_SYMBOL ( wycheproof_aes_gcm );
aes_gcm_algorithm
struct cipher_algorithm aes_gcm_algorithm
cipher_ok
#define cipher_ok(test)
Report a cipher encryption and decryption test result.
Definition cipher_test.h:135
IV
#define IV(...)
Define inline initialisation vector.
Definition cipher_test.h:48
AUTH
#define AUTH(...)
Define inline authentication tag.
Definition cipher_test.h:60
KEY
#define KEY(...)
Define inline key.
Definition cipher_test.h:45
CIPHER_TEST
#define CIPHER_TEST(name, CIPHER, KEY, IV, ADDITIONAL, PLAINTEXT, CIPHERTEXT, AUTH)
Define a cipher test.
Definition cipher_test.h:75
ADDITIONAL
#define ADDITIONAL(...)
Define inline additional data.
Definition cipher_test.h:51
cipher_iv_fail_ok
#define cipher_iv_fail_ok(test)
Report a cipher IV failure test result.
Definition cipher_test.h:151
CIPHERTEXT
#define CIPHERTEXT(...)
Define inline ciphertext data.
Definition cipher_test.h:57
PLAINTEXT
#define PLAINTEXT(...)
Define inline plaintext data.
Definition cipher_test.h:54
REQUIRING_SYMBOL
#define REQUIRING_SYMBOL(symbol)
Specify the file's requiring symbol.
Definition compiler.h:140
self_test
A self-test set.
Definition test.h:15
__self_test
#define __self_test
Declare a self-test.
Definition test.h:32
wycheproof_aes_gcm_exec
static void wycheproof_aes_gcm_exec(void)
Perform Wycheproof AES-GCM self-tests.
Definition wycheproof_aes_gcm.c:6801
wycheproof_test.h
Cryptographic test vectors imported from Project Wycheproof.
Generated by doxygen 1.16.1