Home | History | Annotate | Download | only in wycheproof_testvectors
      1 # Imported from Wycheproof's aes_gcm_test.json.
      2 # This file is generated by convert_wycheproof.go. Do not edit by hand.
      3 #
      4 # Algorithm: AES-GCM
      5 # Generator version: 0.4.12
      6 
      7 [ivSize = 96]
      8 [keySize = 128]
      9 [tagSize = 128]
     10 
     11 # tcId = 1
     12 aad = 
     13 ct = 26073cc1d851beff176384dc9896d5ff
     14 iv = 028318abc1824029138141a2
     15 key = 5b9604fe14eadba931b0ccf34843dab9
     16 msg = 001d0c231287c1182784554ca3a21908
     17 result = valid
     18 tag = 0a3ea7a5487cb5f7d70fb6c58d038554
     19 
     20 # tcId = 2
     21 aad = 00112233445566778899aabbccddeeff
     22 ct = 49d8b9783e911913d87094d1f63cc765
     23 iv = 921d2507fa8007b7bd067d34
     24 key = 5b9604fe14eadba931b0ccf34843dab9
     25 msg = 001d0c231287c1182784554ca3a21908
     26 result = valid
     27 tag = 1e348ba07cca2cf04c618cb4d43a5b92
     28 
     29 # tcId = 3
     30 aad = aac39231129872a2
     31 ct = eea945f3d0f98cc0fbab472a0cf24e87
     32 iv = 0432bc49ac34412081288127
     33 key = aa023d0478dcb2b2312498293d9a9129
     34 msg = 2035af313d1346ab00154fea78322105
     35 result = valid
     36 tag = 4bb9b4812519dadf9e1232016d068133
     37 
     38 # tcId = 4
     39 aad = 
     40 ct = 54
     41 iv = b30c084727ad1c592ac21d12
     42 key = 384ea416ac3c2f51a76e7d8226346d4e
     43 msg = 35
     44 result = valid
     45 tag = 7c1e4ae88bb27e5638343cb9fd3f6337
     46 
     47 # tcId = 5
     48 aad = 
     49 ct = a036ead03193903f
     50 iv = b5e006ded553110e6dc56529
     51 key = cae31cd9f55526eb038241fc44cac1e5
     52 msg = d10989f2c52e94ad
     53 result = valid
     54 tag = 3b626940e0e9f0cbea8e18c437fd6011
     55 
     56 # tcId = 6
     57 aad = 
     58 ct = 8a9992388e735f80ee18f4a63c10ad
     59 iv = ecb0c42f7000ef0e6f95f24d
     60 key = dd6197cd63c963919cf0c273ef6b28bf
     61 msg = 4dcc1485365866e25ac3f2ca6aba97
     62 result = valid
     63 tag = 1486a91cccf92c9a5b00f7b0e034891c
     64 
     65 # tcId = 7
     66 aad = 
     67 ct = f7bd379d130477176b8bb3cb23dbbbaa
     68 iv = 0e1666f2dc652f7708fb8f0d
     69 key = ffdf4228361ea1f8165852136b3480f7
     70 msg = 25b12e28ac0ef6ead0226a3b2288c800
     71 result = valid
     72 tag = 1ee6513ce30c7873f59dd4350a588f42
     73 
     74 # tcId = 8
     75 aad = 
     76 ct = 0de51fe4f7f2d1f0f917569f5c6d1b009c
     77 iv = 965ff6643116ac1443a2dec7
     78 key = c15ed227dd2e237ecd087eaaaad19ea4
     79 msg = fee62fde973fe025ad6b322dcdf3c63fc7
     80 result = valid
     81 tag = 6cd8521422c0177e83ef1b7a845d97db
     82 
     83 # tcId = 9
     84 aad = 
     85 ct = 7cd9f4e4f365704fff3b9900aa93ba54b672bac554275650
     86 iv = fbbc04fd6e025b7193eb57f6
     87 key = a8ee11b26d7ceb7f17eaa1e4b83a2cf6
     88 msg = c08f085e6a9e0ef3636280c11ecfadf0c1e72919ffc17eaf
     89 result = valid
     90 tag = f4eb193241226db017b32ec38ca47217
     91 
     92 # tcId = 10
     93 aad = c3
     94 ct = f58d453212c2c8a436e9283672f579f119122978
     95 iv = 32bcb9b569e3b852d37c766a
     96 key = 28ff3def08179311e2734c6d1c4e2871
     97 msg = dfc61a20df8505b53e3cd59f25770d5018add3d6
     98 result = valid
     99 tag = 5901131d0760c8715901d881fdfd3bc0
    100 
    101 # tcId = 11
    102 aad = 834afdc5c737186b
    103 ct = bf864616c2347509ca9b10446379b9bdbb3b8f64
    104 iv = 9c3a4263d983456658aad4b1
    105 key = e63a43216c08867210e248859eb5e99c
    106 msg = b14da56b0462dc05b871fc815273ff4810f92f4b
    107 result = valid
    108 tag = a97d25b490390b53c5db91f6ee2a15b8
    109 
    110 # tcId = 12
    111 aad = 4020855c66ac4595058395f367201c4c
    112 ct = a6f2ef3c7ef74a126dd2d5f6673964e27d5b34b6
    113 iv = 33e90658416e7c1a7c005f11
    114 key = 38449890234eb8afab0bbf82e2385454
    115 msg = f762776bf83163b323ca63a6b3adeac1e1357262
    116 result = valid
    117 tag = b8bbdc4f5014bc752c8b4e9b87f650a3
    118 
    119 # tcId = 13
    120 aad = 76eb5f147250fa3c12bff0a6e3934a0b16860cf11646773b
    121 ct = bd64802cfebaeb487d3a8f76ce943a37b3472dd5
    122 iv = 9f0d85b605711f34cd2a35ba
    123 key = 6a68671dfe323d419894381f85eb63fd
    124 msg = 0fc67899c3f1bbe196d90f1eca3797389230aa37
    125 result = valid
    126 tag = fce9a5b530c7d7af718be1ec0ae9ed4d
    127 
    128 # tcId = 14
    129 # special case
    130 aad = 
    131 ct = f62d84d649e56bc8cfedc5d74a51e2f7
    132 iv = 000000000000000000000000
    133 key = 00112233445566778899aabbccddeeff
    134 msg = ebd4a3e10cf6d41c50aeae007563b072
    135 result = valid
    136 tag = ffffffffffffffffffffffffffffffff
    137 
    138 # tcId = 15
    139 # special case
    140 aad = 
    141 ct = 431f31e6840931fd95f94bf88296ff69
    142 iv = ffffffffffffffffffffffff
    143 key = 00112233445566778899aabbccddeeff
    144 msg = d593c4d8224f1b100c35e4f6c4006543
    145 result = valid
    146 tag = 00000000000000000000000000000000
    147 
    148 # tcId = 16
    149 # Flipped bit 0 in tag
    150 aad = 
    151 ct = eb156d081ed6b6b55f4612f021d87b39
    152 iv = 505152535455565758595a5b
    153 key = 000102030405060708090a0b0c0d0e0f
    154 msg = 202122232425262728292a2b2c2d2e2f
    155 result = invalid
    156 tag = d9847dbc326a06e988c77ad3863e6083
    157 
    158 # tcId = 17
    159 # Flipped bit 1 in tag
    160 aad = 
    161 ct = eb156d081ed6b6b55f4612f021d87b39
    162 iv = 505152535455565758595a5b
    163 key = 000102030405060708090a0b0c0d0e0f
    164 msg = 202122232425262728292a2b2c2d2e2f
    165 result = invalid
    166 tag = da847dbc326a06e988c77ad3863e6083
    167 
    168 # tcId = 18
    169 # Flipped bit 7 in tag
    170 aad = 
    171 ct = eb156d081ed6b6b55f4612f021d87b39
    172 iv = 505152535455565758595a5b
    173 key = 000102030405060708090a0b0c0d0e0f
    174 msg = 202122232425262728292a2b2c2d2e2f
    175 result = invalid
    176 tag = 58847dbc326a06e988c77ad3863e6083
    177 
    178 # tcId = 19
    179 # Flipped bit 8 in tag
    180 aad = 
    181 ct = eb156d081ed6b6b55f4612f021d87b39
    182 iv = 505152535455565758595a5b
    183 key = 000102030405060708090a0b0c0d0e0f
    184 msg = 202122232425262728292a2b2c2d2e2f
    185 result = invalid
    186 tag = d8857dbc326a06e988c77ad3863e6083
    187 
    188 # tcId = 20
    189 # Flipped bit 31 in tag
    190 aad = 
    191 ct = eb156d081ed6b6b55f4612f021d87b39
    192 iv = 505152535455565758595a5b
    193 key = 000102030405060708090a0b0c0d0e0f
    194 msg = 202122232425262728292a2b2c2d2e2f
    195 result = invalid
    196 tag = d8847d3c326a06e988c77ad3863e6083
    197 
    198 # tcId = 21
    199 # Flipped bit 32 in tag
    200 aad = 
    201 ct = eb156d081ed6b6b55f4612f021d87b39
    202 iv = 505152535455565758595a5b
    203 key = 000102030405060708090a0b0c0d0e0f
    204 msg = 202122232425262728292a2b2c2d2e2f
    205 result = invalid
    206 tag = d8847dbc336a06e988c77ad3863e6083
    207 
    208 # tcId = 22
    209 # Flipped bit 33 in tag
    210 aad = 
    211 ct = eb156d081ed6b6b55f4612f021d87b39
    212 iv = 505152535455565758595a5b
    213 key = 000102030405060708090a0b0c0d0e0f
    214 msg = 202122232425262728292a2b2c2d2e2f
    215 result = invalid
    216 tag = d8847dbc306a06e988c77ad3863e6083
    217 
    218 # tcId = 23
    219 # Flipped bit 63 in tag
    220 aad = 
    221 ct = eb156d081ed6b6b55f4612f021d87b39
    222 iv = 505152535455565758595a5b
    223 key = 000102030405060708090a0b0c0d0e0f
    224 msg = 202122232425262728292a2b2c2d2e2f
    225 result = invalid
    226 tag = d8847dbc326a066988c77ad3863e6083
    227 
    228 # tcId = 24
    229 # Flipped bit 64 in tag
    230 aad = 
    231 ct = eb156d081ed6b6b55f4612f021d87b39
    232 iv = 505152535455565758595a5b
    233 key = 000102030405060708090a0b0c0d0e0f
    234 msg = 202122232425262728292a2b2c2d2e2f
    235 result = invalid
    236 tag = d8847dbc326a06e989c77ad3863e6083
    237 
    238 # tcId = 25
    239 # Flipped bit 71 in tag
    240 aad = 
    241 ct = eb156d081ed6b6b55f4612f021d87b39
    242 iv = 505152535455565758595a5b
    243 key = 000102030405060708090a0b0c0d0e0f
    244 msg = 202122232425262728292a2b2c2d2e2f
    245 result = invalid
    246 tag = d8847dbc326a06e908c77ad3863e6083
    247 
    248 # tcId = 26
    249 # Flipped bit 77 in tag
    250 aad = 
    251 ct = eb156d081ed6b6b55f4612f021d87b39
    252 iv = 505152535455565758595a5b
    253 key = 000102030405060708090a0b0c0d0e0f
    254 msg = 202122232425262728292a2b2c2d2e2f
    255 result = invalid
    256 tag = d8847dbc326a06e988e77ad3863e6083
    257 
    258 # tcId = 27
    259 # Flipped bit 80 in tag
    260 aad = 
    261 ct = eb156d081ed6b6b55f4612f021d87b39
    262 iv = 505152535455565758595a5b
    263 key = 000102030405060708090a0b0c0d0e0f
    264 msg = 202122232425262728292a2b2c2d2e2f
    265 result = invalid
    266 tag = d8847dbc326a06e988c77bd3863e6083
    267 
    268 # tcId = 28
    269 # Flipped bit 96 in tag
    270 aad = 
    271 ct = eb156d081ed6b6b55f4612f021d87b39
    272 iv = 505152535455565758595a5b
    273 key = 000102030405060708090a0b0c0d0e0f
    274 msg = 202122232425262728292a2b2c2d2e2f
    275 result = invalid
    276 tag = d8847dbc326a06e988c77ad3873e6083
    277 
    278 # tcId = 29
    279 # Flipped bit 97 in tag
    280 aad = 
    281 ct = eb156d081ed6b6b55f4612f021d87b39
    282 iv = 505152535455565758595a5b
    283 key = 000102030405060708090a0b0c0d0e0f
    284 msg = 202122232425262728292a2b2c2d2e2f
    285 result = invalid
    286 tag = d8847dbc326a06e988c77ad3843e6083
    287 
    288 # tcId = 30
    289 # Flipped bit 103 in tag
    290 aad = 
    291 ct = eb156d081ed6b6b55f4612f021d87b39
    292 iv = 505152535455565758595a5b
    293 key = 000102030405060708090a0b0c0d0e0f
    294 msg = 202122232425262728292a2b2c2d2e2f
    295 result = invalid
    296 tag = d8847dbc326a06e988c77ad3063e6083
    297 
    298 # tcId = 31
    299 # Flipped bit 120 in tag
    300 aad = 
    301 ct = eb156d081ed6b6b55f4612f021d87b39
    302 iv = 505152535455565758595a5b
    303 key = 000102030405060708090a0b0c0d0e0f
    304 msg = 202122232425262728292a2b2c2d2e2f
    305 result = invalid
    306 tag = d8847dbc326a06e988c77ad3863e6082
    307 
    308 # tcId = 32
    309 # Flipped bit 121 in tag
    310 aad = 
    311 ct = eb156d081ed6b6b55f4612f021d87b39
    312 iv = 505152535455565758595a5b
    313 key = 000102030405060708090a0b0c0d0e0f
    314 msg = 202122232425262728292a2b2c2d2e2f
    315 result = invalid
    316 tag = d8847dbc326a06e988c77ad3863e6081
    317 
    318 # tcId = 33
    319 # Flipped bit 126 in tag
    320 aad = 
    321 ct = eb156d081ed6b6b55f4612f021d87b39
    322 iv = 505152535455565758595a5b
    323 key = 000102030405060708090a0b0c0d0e0f
    324 msg = 202122232425262728292a2b2c2d2e2f
    325 result = invalid
    326 tag = d8847dbc326a06e988c77ad3863e60c3
    327 
    328 # tcId = 34
    329 # Flipped bit 127 in tag
    330 aad = 
    331 ct = eb156d081ed6b6b55f4612f021d87b39
    332 iv = 505152535455565758595a5b
    333 key = 000102030405060708090a0b0c0d0e0f
    334 msg = 202122232425262728292a2b2c2d2e2f
    335 result = invalid
    336 tag = d8847dbc326a06e988c77ad3863e6003
    337 
    338 # tcId = 35
    339 # Flipped bits 0 and 64 in tag
    340 aad = 
    341 ct = eb156d081ed6b6b55f4612f021d87b39
    342 iv = 505152535455565758595a5b
    343 key = 000102030405060708090a0b0c0d0e0f
    344 msg = 202122232425262728292a2b2c2d2e2f
    345 result = invalid
    346 tag = d9847dbc326a06e989c77ad3863e6083
    347 
    348 # tcId = 36
    349 # Flipped bits 31 and 63 in tag
    350 aad = 
    351 ct = eb156d081ed6b6b55f4612f021d87b39
    352 iv = 505152535455565758595a5b
    353 key = 000102030405060708090a0b0c0d0e0f
    354 msg = 202122232425262728292a2b2c2d2e2f
    355 result = invalid
    356 tag = d8847d3c326a066988c77ad3863e6083
    357 
    358 # tcId = 37
    359 # Flipped bits 63 and 127 in tag
    360 aad = 
    361 ct = eb156d081ed6b6b55f4612f021d87b39
    362 iv = 505152535455565758595a5b
    363 key = 000102030405060708090a0b0c0d0e0f
    364 msg = 202122232425262728292a2b2c2d2e2f
    365 result = invalid
    366 tag = d8847dbc326a066988c77ad3863e6003
    367 
    368 # tcId = 38
    369 # all bits of tag flipped
    370 aad = 
    371 ct = eb156d081ed6b6b55f4612f021d87b39
    372 iv = 505152535455565758595a5b
    373 key = 000102030405060708090a0b0c0d0e0f
    374 msg = 202122232425262728292a2b2c2d2e2f
    375 result = invalid
    376 tag = 277b8243cd95f9167738852c79c19f7c
    377 
    378 # tcId = 39
    379 # Tag changed to all zero
    380 aad = 
    381 ct = eb156d081ed6b6b55f4612f021d87b39
    382 iv = 505152535455565758595a5b
    383 key = 000102030405060708090a0b0c0d0e0f
    384 msg = 202122232425262728292a2b2c2d2e2f
    385 result = invalid
    386 tag = 00000000000000000000000000000000
    387 
    388 # tcId = 40
    389 # tag changed to all 1
    390 aad = 
    391 ct = eb156d081ed6b6b55f4612f021d87b39
    392 iv = 505152535455565758595a5b
    393 key = 000102030405060708090a0b0c0d0e0f
    394 msg = 202122232425262728292a2b2c2d2e2f
    395 result = invalid
    396 tag = ffffffffffffffffffffffffffffffff
    397 
    398 # tcId = 41
    399 # msbs changed in tag
    400 aad = 
    401 ct = eb156d081ed6b6b55f4612f021d87b39
    402 iv = 505152535455565758595a5b
    403 key = 000102030405060708090a0b0c0d0e0f
    404 msg = 202122232425262728292a2b2c2d2e2f
    405 result = invalid
    406 tag = 5804fd3cb2ea86690847fa5306bee003
    407 
    408 # tcId = 42
    409 # lsbs changed in tag
    410 aad = 
    411 ct = eb156d081ed6b6b55f4612f021d87b39
    412 iv = 505152535455565758595a5b
    413 key = 000102030405060708090a0b0c0d0e0f
    414 msg = 202122232425262728292a2b2c2d2e2f
    415 result = invalid
    416 tag = d9857cbd336b07e889c67bd2873f6182
    417 
    418 [ivSize = 64]
    419 [keySize = 128]
    420 [tagSize = 128]
    421 
    422 # tcId = 43
    423 aad = aac39231129872a2
    424 ct = 64c36bb3b732034e3a7d04efc5197785
    425 iv = 0432bc49ac344120
    426 key = aa023d0478dcb2b2312498293d9a9129
    427 msg = 2035af313d1346ab00154fea78322105
    428 result = valid
    429 tag = b7d0dd70b00d65b97cfd080ff4b819d1
    430 
    431 # tcId = 44
    432 # unusual IV size
    433 aad = 
    434 ct = 9a078a04d14938918e004358
    435 iv = 68cbeafe8f9e8a66
    436 key = 25dd4d6cad5a4604957847c8c6d3fc4e
    437 msg = 5c347835b3fa61c2ce253e5a
    438 result = valid
    439 tag = 5452843e32c13c3e35ed8230fe3446c0
    440 
    441 [ivSize = 128]
    442 [keySize = 128]
    443 [tagSize = 128]
    444 
    445 # tcId = 45
    446 aad = 1a0293d8f90219058902139013908190bc490890d3ff12a3
    447 ct = 64069c2d58690561f27ee199e6b479b6369eec688672bde9
    448 iv = 3254202d854734812398127a3d134421
    449 key = 2034a82547276c83dd3212a813572bce
    450 msg = 02efd2e5782312827ed5d230189a2a342b277ce048462193
    451 result = valid
    452 tag = 9b7abadd6e69c1d9ec925786534f5075
    453 
    454 # tcId = 46
    455 aad = 
    456 ct = fd
    457 iv = 9477849d6ccdfca112d92e53fae4a7ca
    458 key = 209e6dbf2ad26a105445fc0207cd9e9a
    459 msg = 01
    460 result = valid
    461 tag = 032df7bba5d8ea1a14f16f70bd0e14ec
    462 
    463 # tcId = 47
    464 aad = 
    465 ct = 2f333087bdca58219f9bfc273e45cc
    466 iv = 5171524568e81d97e8c4de4ba56c10a0
    467 key = a549442e35154032d07c8666006aa6a2
    468 msg = 1182e93596cac5608946400bc73f3a
    469 result = valid
    470 tag = e06d1ef473132957ad37eaef29733ca0
    471 
    472 # tcId = 48
    473 aad = 
    474 ct = a780bd01c80885156c88a973264c8ee5
    475 iv = 1275115499ae722268515bf0c164b49c
    476 key = cfb4c26f126f6a0acb8e4e220f6c56cd
    477 msg = 09dfd7f080275257cf97e76f966b1ad9
    478 result = valid
    479 tag = 2adeffa682c8d8a81fada7d9fcdd2ee2
    480 
    481 # tcId = 49
    482 aad = 
    483 ct = 7e47e10fe3c6fbfa381770eaf5d48d1482e71e0c44dff1e30ca6f95d92052084
    484 iv = 95c1dd8c0f1705ece68937901f7add7b
    485 key = 0b11ef3a08c02970f74281c860691c75
    486 msg = f693d4edd825dbb0618d91113128880dbebb23e25d00ed1f077d870be9cc7536
    487 result = valid
    488 tag = d01444fa5d9c499629d174ff3927a1ac
    489 
    490 # tcId = 50
    491 # J0:000102030405060708090a0b0c0d0e0f
    492 aad = 
    493 ct = 00078d109d92143fcd5df56721b884fac64ac7762cc09eea2a3c68e92a17bdb575f87bda18be564e
    494 iv = f95fde4a751913202aeeee32a0b55753
    495 key = 00112233445566778899aabbccddeeff
    496 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    497 result = valid
    498 tag = 152a65045fe674f97627427af5be22da
    499 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    500 # constructed to test for correct wrapping of the counter.
    501 
    502 # tcId = 51
    503 # J0:00000000000000000000000000000000
    504 aad = 
    505 ct = 84d4c9c08b4f482861e3a9c6c35bc4d91df927374513bfd49f436bd73f325285daef4ff7e13d46a6
    506 iv = 7b95b8c356810a84711d68150a1b7750
    507 key = 00112233445566778899aabbccddeeff
    508 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    509 result = valid
    510 tag = 213a3cb93855d18e69337eee66aeec07
    511 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    512 # constructed to test for correct wrapping of the counter.
    513 
    514 # tcId = 52
    515 # J0:ffffffffffffffffffffffffffffffff
    516 aad = 
    517 ct = 948ca37a8e6649e88aeffb1c598f3607007702417ea0e0bc3c60ad5a949886de968cf53ea6462aed
    518 iv = 1a552e67cdc4dc1a33b824874ebf0bed
    519 key = 00112233445566778899aabbccddeeff
    520 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    521 result = valid
    522 tag = 99b381bfa2af9751c39d1b6e86d1be6a
    523 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    524 # constructed to test for correct wrapping of the counter.
    525 
    526 # tcId = 53
    527 # J0:fffffffffffffffffffffffffffffffe
    528 aad = 
    529 ct = 64b19314c31af45accdf7e3c4db79f0d948ca37a8e6649e88aeffb1c598f3607007702417ea0e0bc
    530 iv = dd9d0b4a0c3d681524bffca31d907661
    531 key = 00112233445566778899aabbccddeeff
    532 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    533 result = valid
    534 tag = 5281efc7f13ac8e14ccf5dca7bfbfdd1
    535 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    536 # constructed to test for correct wrapping of the counter.
    537 
    538 # tcId = 54
    539 # J0:fffffffffffffffffffffffffffffffd
    540 aad = 
    541 ct = 2bb69c3e5d1f91815c6b87a0d5bbea7164b19314c31af45accdf7e3c4db79f0d948ca37a8e6649e8
    542 iv = 57c5643c4e37b4041db794cfe8e1f0f4
    543 key = 00112233445566778899aabbccddeeff
    544 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    545 result = valid
    546 tag = a3ea2c09ee4f8c8a12f45cddf9aeff81
    547 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    548 # constructed to test for correct wrapping of the counter.
    549 
    550 # tcId = 55
    551 # J0:000102030405060708090a0bffffffff
    552 aad = 
    553 ct = 127af9b39ecdfc57bb11a2847c7c2d3d8f938f40f877e0c4af37d0fe9af033052bd537c4ae978f60
    554 iv = 99821c2dd5daecded07300f577f7aff1
    555 key = 00112233445566778899aabbccddeeff
    556 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    557 result = valid
    558 tag = 07eb2fe4a958f8434d40684899507c7c
    559 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    560 # constructed to test for correct wrapping of the counter.
    561 
    562 # tcId = 56
    563 # J0:000102030405060708090a0bfffffffe
    564 aad = 
    565 ct = 0cf6ae47156b14dce03c8a07a2e172b1127af9b39ecdfc57bb11a2847c7c2d3d8f938f40f877e0c4
    566 iv = 5e4a3900142358d1c774d8d124d8d27d
    567 key = 00112233445566778899aabbccddeeff
    568 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    569 result = valid
    570 tag = f145c2dcaf339eede427be934357eac0
    571 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    572 # constructed to test for correct wrapping of the counter.
    573 
    574 # tcId = 57
    575 # J0:000102030405060708090a0bfffffffd
    576 aad = 
    577 ct = f0c6ffc18bd46df5569185a9afd169eb0cf6ae47156b14dce03c8a07a2e172b1127af9b39ecdfc57
    578 iv = d4125676562984c0fe7cb0bdd1a954e8
    579 key = 00112233445566778899aabbccddeeff
    580 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    581 result = valid
    582 tag = facd0bfe8701b7b4a2ba96d98af52bd9
    583 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    584 # constructed to test for correct wrapping of the counter.
    585 
    586 # tcId = 58
    587 # J0:000102030405060708090a0b7fffffff
    588 aad = 
    589 ct = d6928e094c06e0a7c4db42184cf7529e95de88b767edebe9b343000be3dab47ea08b744293eed698
    590 iv = b97ec62a5e5900ccf9e4be332e336091
    591 key = 00112233445566778899aabbccddeeff
    592 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    593 result = valid
    594 tag = a03e729dcfd7a03155655fece8affd7e
    595 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    596 # constructed to test for correct wrapping of the counter.
    597 
    598 # tcId = 59
    599 # J0:000102030405060708090a0b7ffffffe
    600 aad = 
    601 ct = d82ce58771bf6487116bf8e96421877ed6928e094c06e0a7c4db42184cf7529e95de88b767edebe9
    602 iv = 7eb6e3079fa0b4c3eee366177d1c1d1d
    603 key = 00112233445566778899aabbccddeeff
    604 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    605 result = valid
    606 tag = 1e43926828bc9a1614c7b1639096c195
    607 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    608 # constructed to test for correct wrapping of the counter.
    609 
    610 # tcId = 60
    611 # J0:000102030405060708090a0bffff7fff
    612 aad = 
    613 ct = a197a37a5d79697078536bc27fe46cd8d475526d9044aa94f088a054f8e380c64f79414795c61480
    614 iv = 0314fcd10fdd675d3c612962c931f635
    615 key = 00112233445566778899aabbccddeeff
    616 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    617 result = valid
    618 tag = f08baddf0b5285c91fc06a67fe4708ca
    619 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    620 # constructed to test for correct wrapping of the counter.
    621 
    622 # tcId = 61
    623 # J0:000102030405060708090a0bffff7ffe
    624 aad = 
    625 ct = 149fde9abbd3a43c2548575e0db9fb84a197a37a5d79697078536bc27fe46cd8d475526d9044aa94
    626 iv = c4dcd9fcce24d3522b66f1469a1e8bb9
    627 key = 00112233445566778899aabbccddeeff
    628 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
    629 result = valid
    630 tag = 62a4b6875c288345d6a454399eac1afa
    631 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
    632 # constructed to test for correct wrapping of the counter.
    633 
    634 # tcId = 62
    635 # special case
    636 aad = 
    637 ct = 45a3f89d02918bfd0c8161658ccc9795
    638 iv = 00000000000000000000000000000000
    639 key = 00112233445566778899aabbccddeeff
    640 msg = bec6fa05c1718b9b84c47345bbed7dcb
    641 result = valid
    642 tag = 00000000000000000000000000000000
    643 
    644 # tcId = 63
    645 # special case
    646 aad = 
    647 ct = 1cd5a06214235ceb044d4bad7b047312
    648 iv = ffffffffffffffffffffffffffffffff
    649 key = 00112233445566778899aabbccddeeff
    650 msg = 4d82639c39d3f3490ee903dd0be7afcf
    651 result = valid
    652 tag = ffffffffffffffffffffffffffffffff
    653 
    654 [ivSize = 96]
    655 [keySize = 256]
    656 [tagSize = 128]
    657 
    658 # tcId = 64
    659 aad = 00000000ffffffff
    660 ct = e27abdd2d2a53d2f136b
    661 iv = 00112233445566778899aabb
    662 key = 92ace3e348cd821092cd921aa3546374299ab46209691bc28b8752d17f123c20
    663 msg = 00010203040506070809
    664 result = valid
    665 tag = 9a4a2579529301bcfb71c78d4060f52c
    666 
    667 # tcId = 65
    668 aad = aabbccddeeff
    669 ct = 
    670 iv = 00112233445566778899aabb
    671 key = 29d3a44f8723dc640239100c365423a312934ac80239212ac3df3421a2098123
    672 msg = 
    673 result = valid
    674 tag = 2a7d77fa526b8250cb296078926b5020
    675 
    676 # tcId = 66
    677 aad = 
    678 ct = 06
    679 iv = 99e23ec48985bccdeeab60f1
    680 key = cc56b680552eb75008f5484b4cb803fa5063ebd6eab91f6ab6aef4916a766273
    681 msg = 2a
    682 result = valid
    683 tag = 633c1e9703ef744ffffb40edf9d14355
    684 
    685 # tcId = 67
    686 aad = 
    687 ct = cf332a12fdee800b
    688 iv = 4f07afedfdc3b6c2361823d3
    689 key = 51e4bf2bad92b7aff1a4bc05550ba81df4b96fabf41c12c7b00e60e48db7e152
    690 msg = be3308f72a2c6aed
    691 result = valid
    692 tag = 602e8d7c4799d62c140c9bb834876b09
    693 
    694 # tcId = 68
    695 aad = 
    696 ct = 43fc101bff4b32bfadd3daf57a590e
    697 iv = 68ab7fdbf61901dad461d23c
    698 key = 67119627bd988eda906219e08c0d0d779a07d208ce8a4fe0709af755eeec6dcb
    699 msg = 51f8c1f731ea14acdb210a6d973e07
    700 result = valid
    701 tag = ec04aacb7148a8b8be44cb7eaf4efa69
    702 
    703 # tcId = 69
    704 aad = 
    705 ct = f58c16690122d75356907fd96b570fca
    706 iv = 2fcb1b38a99e71b84740ad9b
    707 key = 59d4eafb4de0cfc7d3db99a8f54b15d7b39f0acc8da69763b019c1699f87674a
    708 msg = 549b365af913f3b081131ccb6b825588
    709 result = valid
    710 tag = 28752c20153092818faba2a334640d6e
    711 
    712 # tcId = 70
    713 aad = 
    714 ct = 73a6b6f45f6ccc5131e07f2caa1f2e2f56
    715 iv = 45aaa3e5d16d2d42dc03445d
    716 key = 3b2458d8176e1621c0cc24c0c0e24c1e80d72f7ee9149a4b166176629616d011
    717 msg = 3ff1514b1c503915918f0c0c31094a6e1f
    718 result = valid
    719 tag = 2d7379ec1db5952d4e95d30c340b1b1d
    720 
    721 # tcId = 71
    722 aad = 
    723 ct = 0843fff52d934fc7a071ea62c0bd351ce85678cde3ea2c9e
    724 iv = e6b1adf2fd58a8762c65f31b
    725 key = 0212a8de5007ed87b33f1a7090b6114f9e08cefd9607f2c276bdcfdbc5ce9cd7
    726 msg = 10f1ecf9c60584665d9ae5efe279e7f7377eea6916d2b111
    727 result = valid
    728 tag = 7355fde599006715053813ce696237a8
    729 
    730 # tcId = 72
    731 aad = c0
    732 ct = eb5500e3825952866d911253f8de860c00831c81
    733 iv = 98bc2c7438d5cd7665d76f6e
    734 key = b279f57e19c8f53f2f963f5f2519fdb7c1779be2ca2b3ae8e1128b7d6c627fc4
    735 msg = fcc515b294408c8645c9183e3f4ecee5127846d1
    736 result = valid
    737 tag = ecb660e1fb0541ec41e8d68a64141b3a
    738 
    739 # tcId = 73
    740 aad = 956846a209e087ed
    741 ct = feca44952447015b5df1f456df8ca4bb4eee2ce2
    742 iv = 376187894605a8d45e30de51
    743 key = cdccfe3f46d782ef47df4e72f0c02d9c7f774def970d23486f11a57f54247f17
    744 msg = e28e0e9f9d22463ac0e42639b530f42102fded75
    745 result = valid
    746 tag = 082e91924deeb77880e1b1c84f9b8d30
    747 
    748 # tcId = 74
    749 aad = ab2ac7c44c60bdf8228c7884adb20184
    750 ct = 43dda832e942e286da314daa99bef5071d9d2c78
    751 iv = 5a86a50a0e8a179c734b996d
    752 key = f32364b1d339d82e4f132d8f4a0ec1ff7e746517fa07ef1a7f422f4e25a48194
    753 msg = 43891bccb522b1e72a6b53cf31c074e9d6c2df8e
    754 result = valid
    755 tag = c3922583476ced575404ddb85dd8cd44
    756 
    757 # tcId = 75
    758 aad = 972ab4e06390caae8f99dd6e2187be6c7ff2c08a24be16ef
    759 ct = a929ee7e67c7a2f91bbcec6389a3caf43ab49305
    760 iv = bc2a7757d0ce2d8b1f14ccd9
    761 key = ff0089ee870a4a39f645b0a5da774f7a5911e9696fc9cad646452c2aa8595a12
    762 msg = 748b28031621d95ee61812b4b4f47d04c6fc2ff3
    763 result = valid
    764 tag = ebec6774b955e789591c822dab739e12
    765 
    766 # tcId = 76
    767 # special case
    768 aad = 
    769 ct = 23293e9b07ca7d1b0cae7cc489a973b3
    770 iv = 000000000000000000000000
    771 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
    772 msg = 561008fa07a68f5c61285cd013464eaf
    773 result = valid
    774 tag = ffffffffffffffffffffffffffffffff
    775 
    776 # tcId = 77
    777 # special case
    778 aad = 
    779 ct = 7cb6fc7c6abc009efe9551a99f36a421
    780 iv = ffffffffffffffffffffffff
    781 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
    782 msg = c6152244cea1978d3e0bc274cf8c0b3b
    783 result = valid
    784 tag = 00000000000000000000000000000000
    785 
    786 # tcId = 78
    787 # Flipped bit 0 in tag
    788 aad = 
    789 ct = b2061457c0759fc1749f174ee1ccadfa
    790 iv = 505152535455565758595a5b
    791 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    792 msg = 202122232425262728292a2b2c2d2e2f
    793 result = invalid
    794 tag = 9de8fef6d8ab1bf1bf887232eab590dd
    795 
    796 # tcId = 79
    797 # Flipped bit 1 in tag
    798 aad = 
    799 ct = b2061457c0759fc1749f174ee1ccadfa
    800 iv = 505152535455565758595a5b
    801 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    802 msg = 202122232425262728292a2b2c2d2e2f
    803 result = invalid
    804 tag = 9ee8fef6d8ab1bf1bf887232eab590dd
    805 
    806 # tcId = 80
    807 # Flipped bit 7 in tag
    808 aad = 
    809 ct = b2061457c0759fc1749f174ee1ccadfa
    810 iv = 505152535455565758595a5b
    811 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    812 msg = 202122232425262728292a2b2c2d2e2f
    813 result = invalid
    814 tag = 1ce8fef6d8ab1bf1bf887232eab590dd
    815 
    816 # tcId = 81
    817 # Flipped bit 8 in tag
    818 aad = 
    819 ct = b2061457c0759fc1749f174ee1ccadfa
    820 iv = 505152535455565758595a5b
    821 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    822 msg = 202122232425262728292a2b2c2d2e2f
    823 result = invalid
    824 tag = 9ce9fef6d8ab1bf1bf887232eab590dd
    825 
    826 # tcId = 82
    827 # Flipped bit 31 in tag
    828 aad = 
    829 ct = b2061457c0759fc1749f174ee1ccadfa
    830 iv = 505152535455565758595a5b
    831 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    832 msg = 202122232425262728292a2b2c2d2e2f
    833 result = invalid
    834 tag = 9ce8fe76d8ab1bf1bf887232eab590dd
    835 
    836 # tcId = 83
    837 # Flipped bit 32 in tag
    838 aad = 
    839 ct = b2061457c0759fc1749f174ee1ccadfa
    840 iv = 505152535455565758595a5b
    841 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    842 msg = 202122232425262728292a2b2c2d2e2f
    843 result = invalid
    844 tag = 9ce8fef6d9ab1bf1bf887232eab590dd
    845 
    846 # tcId = 84
    847 # Flipped bit 33 in tag
    848 aad = 
    849 ct = b2061457c0759fc1749f174ee1ccadfa
    850 iv = 505152535455565758595a5b
    851 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    852 msg = 202122232425262728292a2b2c2d2e2f
    853 result = invalid
    854 tag = 9ce8fef6daab1bf1bf887232eab590dd
    855 
    856 # tcId = 85
    857 # Flipped bit 63 in tag
    858 aad = 
    859 ct = b2061457c0759fc1749f174ee1ccadfa
    860 iv = 505152535455565758595a5b
    861 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    862 msg = 202122232425262728292a2b2c2d2e2f
    863 result = invalid
    864 tag = 9ce8fef6d8ab1b71bf887232eab590dd
    865 
    866 # tcId = 86
    867 # Flipped bit 64 in tag
    868 aad = 
    869 ct = b2061457c0759fc1749f174ee1ccadfa
    870 iv = 505152535455565758595a5b
    871 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    872 msg = 202122232425262728292a2b2c2d2e2f
    873 result = invalid
    874 tag = 9ce8fef6d8ab1bf1be887232eab590dd
    875 
    876 # tcId = 87
    877 # Flipped bit 71 in tag
    878 aad = 
    879 ct = b2061457c0759fc1749f174ee1ccadfa
    880 iv = 505152535455565758595a5b
    881 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    882 msg = 202122232425262728292a2b2c2d2e2f
    883 result = invalid
    884 tag = 9ce8fef6d8ab1bf13f887232eab590dd
    885 
    886 # tcId = 88
    887 # Flipped bit 77 in tag
    888 aad = 
    889 ct = b2061457c0759fc1749f174ee1ccadfa
    890 iv = 505152535455565758595a5b
    891 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    892 msg = 202122232425262728292a2b2c2d2e2f
    893 result = invalid
    894 tag = 9ce8fef6d8ab1bf1bfa87232eab590dd
    895 
    896 # tcId = 89
    897 # Flipped bit 80 in tag
    898 aad = 
    899 ct = b2061457c0759fc1749f174ee1ccadfa
    900 iv = 505152535455565758595a5b
    901 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    902 msg = 202122232425262728292a2b2c2d2e2f
    903 result = invalid
    904 tag = 9ce8fef6d8ab1bf1bf887332eab590dd
    905 
    906 # tcId = 90
    907 # Flipped bit 96 in tag
    908 aad = 
    909 ct = b2061457c0759fc1749f174ee1ccadfa
    910 iv = 505152535455565758595a5b
    911 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    912 msg = 202122232425262728292a2b2c2d2e2f
    913 result = invalid
    914 tag = 9ce8fef6d8ab1bf1bf887232ebb590dd
    915 
    916 # tcId = 91
    917 # Flipped bit 97 in tag
    918 aad = 
    919 ct = b2061457c0759fc1749f174ee1ccadfa
    920 iv = 505152535455565758595a5b
    921 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    922 msg = 202122232425262728292a2b2c2d2e2f
    923 result = invalid
    924 tag = 9ce8fef6d8ab1bf1bf887232e8b590dd
    925 
    926 # tcId = 92
    927 # Flipped bit 103 in tag
    928 aad = 
    929 ct = b2061457c0759fc1749f174ee1ccadfa
    930 iv = 505152535455565758595a5b
    931 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    932 msg = 202122232425262728292a2b2c2d2e2f
    933 result = invalid
    934 tag = 9ce8fef6d8ab1bf1bf8872326ab590dd
    935 
    936 # tcId = 93
    937 # Flipped bit 120 in tag
    938 aad = 
    939 ct = b2061457c0759fc1749f174ee1ccadfa
    940 iv = 505152535455565758595a5b
    941 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    942 msg = 202122232425262728292a2b2c2d2e2f
    943 result = invalid
    944 tag = 9ce8fef6d8ab1bf1bf887232eab590dc
    945 
    946 # tcId = 94
    947 # Flipped bit 121 in tag
    948 aad = 
    949 ct = b2061457c0759fc1749f174ee1ccadfa
    950 iv = 505152535455565758595a5b
    951 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    952 msg = 202122232425262728292a2b2c2d2e2f
    953 result = invalid
    954 tag = 9ce8fef6d8ab1bf1bf887232eab590df
    955 
    956 # tcId = 95
    957 # Flipped bit 126 in tag
    958 aad = 
    959 ct = b2061457c0759fc1749f174ee1ccadfa
    960 iv = 505152535455565758595a5b
    961 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    962 msg = 202122232425262728292a2b2c2d2e2f
    963 result = invalid
    964 tag = 9ce8fef6d8ab1bf1bf887232eab5909d
    965 
    966 # tcId = 96
    967 # Flipped bit 127 in tag
    968 aad = 
    969 ct = b2061457c0759fc1749f174ee1ccadfa
    970 iv = 505152535455565758595a5b
    971 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    972 msg = 202122232425262728292a2b2c2d2e2f
    973 result = invalid
    974 tag = 9ce8fef6d8ab1bf1bf887232eab5905d
    975 
    976 # tcId = 97
    977 # Flipped bits 0 and 64 in tag
    978 aad = 
    979 ct = b2061457c0759fc1749f174ee1ccadfa
    980 iv = 505152535455565758595a5b
    981 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    982 msg = 202122232425262728292a2b2c2d2e2f
    983 result = invalid
    984 tag = 9de8fef6d8ab1bf1be887232eab590dd
    985 
    986 # tcId = 98
    987 # Flipped bits 31 and 63 in tag
    988 aad = 
    989 ct = b2061457c0759fc1749f174ee1ccadfa
    990 iv = 505152535455565758595a5b
    991 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
    992 msg = 202122232425262728292a2b2c2d2e2f
    993 result = invalid
    994 tag = 9ce8fe76d8ab1b71bf887232eab590dd
    995 
    996 # tcId = 99
    997 # Flipped bits 63 and 127 in tag
    998 aad = 
    999 ct = b2061457c0759fc1749f174ee1ccadfa
   1000 iv = 505152535455565758595a5b
   1001 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
   1002 msg = 202122232425262728292a2b2c2d2e2f
   1003 result = invalid
   1004 tag = 9ce8fef6d8ab1b71bf887232eab5905d
   1005 
   1006 # tcId = 100
   1007 # all bits of tag flipped
   1008 aad = 
   1009 ct = b2061457c0759fc1749f174ee1ccadfa
   1010 iv = 505152535455565758595a5b
   1011 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
   1012 msg = 202122232425262728292a2b2c2d2e2f
   1013 result = invalid
   1014 tag = 631701092754e40e40778dcd154a6f22
   1015 
   1016 # tcId = 101
   1017 # Tag changed to all zero
   1018 aad = 
   1019 ct = b2061457c0759fc1749f174ee1ccadfa
   1020 iv = 505152535455565758595a5b
   1021 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
   1022 msg = 202122232425262728292a2b2c2d2e2f
   1023 result = invalid
   1024 tag = 00000000000000000000000000000000
   1025 
   1026 # tcId = 102
   1027 # tag changed to all 1
   1028 aad = 
   1029 ct = b2061457c0759fc1749f174ee1ccadfa
   1030 iv = 505152535455565758595a5b
   1031 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
   1032 msg = 202122232425262728292a2b2c2d2e2f
   1033 result = invalid
   1034 tag = ffffffffffffffffffffffffffffffff
   1035 
   1036 # tcId = 103
   1037 # msbs changed in tag
   1038 aad = 
   1039 ct = b2061457c0759fc1749f174ee1ccadfa
   1040 iv = 505152535455565758595a5b
   1041 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
   1042 msg = 202122232425262728292a2b2c2d2e2f
   1043 result = invalid
   1044 tag = 1c687e76582b9b713f08f2b26a35105d
   1045 
   1046 # tcId = 104
   1047 # lsbs changed in tag
   1048 aad = 
   1049 ct = b2061457c0759fc1749f174ee1ccadfa
   1050 iv = 505152535455565758595a5b
   1051 key = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
   1052 msg = 202122232425262728292a2b2c2d2e2f
   1053 result = invalid
   1054 tag = 9de9fff7d9aa1af0be897333ebb491dc
   1055 
   1056 [ivSize = 128]
   1057 [keySize = 192]
   1058 [tagSize = 128]
   1059 
   1060 # tcId = 105
   1061 # J0:000102030405060708090a0b0c0d0e0f
   1062 aad = 
   1063 ct = f83cee467336e1a09b75f24e9b4385c99c13e6af722256a66129ece961fe803b167bad206f5017fb
   1064 iv = 029e0e777db092b12535d043012f09ba
   1065 key = 00112233445566778899aabbccddeeff1021324354657687
   1066 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1067 result = valid
   1068 tag = 09338a42f0acc14f97c064f52f5f1688
   1069 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1070 # constructed to test for correct wrapping of the counter.
   1071 
   1072 # tcId = 106
   1073 # J0:00000000000000000000000000000000
   1074 aad = 
   1075 ct = 0b32b648a2c28e9edd7cee08eeeb900034cae7215e5ab1e201bd2eed1032c5a97866ba582a3458a4
   1076 iv = f1be3b06b7feac07e7eab629f556047b
   1077 key = 00112233445566778899aabbccddeeff1021324354657687
   1078 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1079 result = valid
   1080 tag = 90be3606de58bd778fa5beff4a4102bd
   1081 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1082 # constructed to test for correct wrapping of the counter.
   1083 
   1084 # tcId = 107
   1085 # J0:ffffffffffffffffffffffffffffffff
   1086 aad = 
   1087 ct = 575e2ecec2b3c72d4e80830d0d859ad9e42c29c4a68d8d9d8d23434de2cd07733be49d62ac1ae085
   1088 iv = de9eb63b1daed321a11b7547cc9e223c
   1089 key = 00112233445566778899aabbccddeeff1021324354657687
   1090 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1091 result = valid
   1092 tag = 6e4d6396125a10df5443bd0cbc8566d1
   1093 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1094 # constructed to test for correct wrapping of the counter.
   1095 
   1096 # tcId = 108
   1097 # J0:fffffffffffffffffffffffffffffffe
   1098 aad = 
   1099 ct = 2a818888d1f09f32aa7beedd2869b446575e2ecec2b3c72d4e80830d0d859ad9e42c29c4a68d8d9d
   1100 iv = 40bb0abebc483ff6d5671241ff5d66c6
   1101 key = 00112233445566778899aabbccddeeff1021324354657687
   1102 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1103 result = valid
   1104 tag = dc481f172545268eff63ab0490403dc3
   1105 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1106 # constructed to test for correct wrapping of the counter.
   1107 
   1108 # tcId = 109
   1109 # J0:fffffffffffffffffffffffffffffffd
   1110 aad = 
   1111 ct = 96d36b795f8e7edf6a8e0dbcd20d6c072a818888d1f09f32aa7beedd2869b446575e2ecec2b3c72d
   1112 iv = 20d5cf305e630a8f49e3bb4bab18abc9
   1113 key = 00112233445566778899aabbccddeeff1021324354657687
   1114 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1115 result = valid
   1116 tag = 8a3a22bf2592958b930292aa47f590e8
   1117 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1118 # constructed to test for correct wrapping of the counter.
   1119 
   1120 # tcId = 110
   1121 # J0:000102030405060708090a0bffffffff
   1122 aad = 
   1123 ct = cfce3d920f0e01f0bb49a751955b236d1b887baefd25c47f41303c46d5c7bf9ca4c2c45a8f1e6656
   1124 iv = 255358a71a0e5731f6dd6ce28e158ae6
   1125 key = 00112233445566778899aabbccddeeff1021324354657687
   1126 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1127 result = valid
   1128 tag = 2db9dc1b7fd315df1c95432432fcf474
   1129 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1130 # constructed to test for correct wrapping of the counter.
   1131 
   1132 # tcId = 111
   1133 # J0:000102030405060708090a0bfffffffe
   1134 aad = 
   1135 ct = 69a24169792e9a07f6e6f4736fa972dccfce3d920f0e01f0bb49a751955b236d1b887baefd25c47f
   1136 iv = bb76e422bbe8bbe682a10be4bdd6ce1c
   1137 key = 00112233445566778899aabbccddeeff1021324354657687
   1138 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1139 result = valid
   1140 tag = 82ad967f7ac19084354f69a751443fb2
   1141 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1142 # constructed to test for correct wrapping of the counter.
   1143 
   1144 # tcId = 112
   1145 # J0:000102030405060708090a0bfffffffd
   1146 aad = 
   1147 ct = 4e4417a83beac1eb7e24456a05f6ba5569a24169792e9a07f6e6f4736fa972dccfce3d920f0e01f0
   1148 iv = db1821ac59c38e9f1e25a2eee9930313
   1149 key = 00112233445566778899aabbccddeeff1021324354657687
   1150 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1151 result = valid
   1152 tag = 472d5dd582dc05ef5fc496b612023cb2
   1153 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1154 # constructed to test for correct wrapping of the counter.
   1155 
   1156 # tcId = 113
   1157 # J0:000102030405060708090a0b7fffffff
   1158 aad = 
   1159 ct = 6f8e174efca3097299f784efd4caff0bf168c3e5165b9ad3d20062009848044eef8f31f7d2fead05
   1160 iv = f7a02ecca03064b2ef3cce9feab79f07
   1161 key = 00112233445566778899aabbccddeeff1021324354657687
   1162 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1163 result = valid
   1164 tag = caff723826df150934aee3201ba175e7
   1165 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1166 # constructed to test for correct wrapping of the counter.
   1167 
   1168 # tcId = 114
   1169 # J0:000102030405060708090a0b7ffffffe
   1170 aad = 
   1171 ct = af193090ce3d43a388a1d294a09616906f8e174efca3097299f784efd4caff0bf168c3e5165b9ad3
   1172 iv = 6985924901d688659b40a999d974dbfd
   1173 key = 00112233445566778899aabbccddeeff1021324354657687
   1174 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1175 result = valid
   1176 tag = 3b08958be1286c2b4acba02b3674adb2
   1177 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1178 # constructed to test for correct wrapping of the counter.
   1179 
   1180 # tcId = 115
   1181 # J0:000102030405060708090a0bffff7fff
   1182 aad = 
   1183 ct = 5deccf838b2cf5f869c90d2a611160b1e578ab8121b93735cba4a1930647b8c4c84bf776333ee45a
   1184 iv = 3f1188546c65ed0fc55e75032c68ee44
   1185 key = 00112233445566778899aabbccddeeff1021324354657687
   1186 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1187 result = valid
   1188 tag = c14d52208f0f51b816a48971eaf8ff7e
   1189 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1190 # constructed to test for correct wrapping of the counter.
   1191 
   1192 # tcId = 116
   1193 # J0:000102030405060708090a0bffff7ffe
   1194 aad = 
   1195 ct = d2cae1684aa407a13a2e2da5357e29f55deccf838b2cf5f869c90d2a611160b1e578ab8121b93735
   1196 iv = a13434d1cd8301d8b12212051fabaabe
   1197 key = 00112233445566778899aabbccddeeff1021324354657687
   1198 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1199 result = valid
   1200 tag = ea2d018099cd7925c507cef0ceddb0ae
   1201 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1202 # constructed to test for correct wrapping of the counter.
   1203 
   1204 # tcId = 117
   1205 # special case
   1206 aad = 
   1207 ct = 541b835dc828d541073f7d7d7504ebf5
   1208 iv = 00000000000000000000000000000000
   1209 key = 00112233445566778899aabbccddeeff1021324354657687
   1210 msg = 5c7d3f81d4b5055ed6f8db53614587a4
   1211 result = valid
   1212 tag = 00000000000000000000000000000000
   1213 
   1214 # tcId = 118
   1215 # special case
   1216 aad = 
   1217 ct = a3f36154331c196624564bc395e49c3b
   1218 iv = ffffffffffffffffffffffffffffffff
   1219 key = 00112233445566778899aabbccddeeff1021324354657687
   1220 msg = 6a347ad1190e72ede611044e7475f0eb
   1221 result = valid
   1222 tag = ffffffffffffffffffffffffffffffff
   1223 
   1224 # tcId = 119
   1225 aad = 
   1226 ct = dc
   1227 iv = 1e8259e0a43e571068f701cd2064fc0c
   1228 key = cee9abbc26b63e169f0ced621fe21d95904e75b881d93e6b
   1229 msg = 46
   1230 result = valid
   1231 tag = af1f5535b125b34fc466902ea40cb3a2
   1232 
   1233 # tcId = 120
   1234 aad = 
   1235 ct = 2aab5c87dcb4a4dae4e975ddb65aab
   1236 iv = c84442d6975f0359737de0fa828f958e
   1237 key = 189f0bd390ba40632586a45c39735c2b87113329c800f394
   1238 msg = b4bcd7b8eeca3050dd17682c6a914e
   1239 result = valid
   1240 tag = 6b03b7557c7131e2352e495d54e61aef
   1241 
   1242 # tcId = 121
   1243 aad = 
   1244 ct = d127fd2e67c0887d90eb92b91f357d97
   1245 iv = 13cd526ec77b58f62d48d03f8b88f2b8
   1246 key = b0724f15df5b792c2f49bc51df0ac5aad69be0030981613c
   1247 msg = 8da3ab9c3d195b04df452ad23953da4d
   1248 result = valid
   1249 tag = eb05bda937faeed27f8833295d4ba559
   1250 
   1251 # tcId = 122
   1252 aad = 
   1253 ct = 344c2cea17b06cb3da272e22a22a3a71ee0eaa1959a7facfff464660ddccedd1
   1254 iv = 1d3d62eccd8ac5e896f2654a7f606fc9
   1255 key = 998750ba784841e40a7c5b03985732b6397e5459a3843954
   1256 msg = 2f60ca3494a958dc3e6ebeb5d0b4e6dda0d0c4331ab9c957f6422a5100878ebf
   1257 result = valid
   1258 tag = bab7fbf499ff06aad5f757b1c1a4fcc0
   1259 
   1260 [ivSize = 96]
   1261 [keySize = 192]
   1262 [tagSize = 128]
   1263 
   1264 # tcId = 123
   1265 # special case
   1266 aad = 
   1267 ct = 3f875c9bd7d8511448459468e398c3b2
   1268 iv = 000000000000000000000000
   1269 key = 00112233445566778899aabbccddeeff1021324354657687
   1270 msg = 0b4dbbba8982e0f649f8ba85f3aa061b
   1271 result = valid
   1272 tag = ffffffffffffffffffffffffffffffff
   1273 
   1274 # tcId = 124
   1275 # special case
   1276 aad = 
   1277 ct = 210dabea4364c6d5b3429e7743322936
   1278 iv = ffffffffffffffffffffffff
   1279 key = 00112233445566778899aabbccddeeff1021324354657687
   1280 msg = 1ae93688ef7e2650a9342ad4718b2780
   1281 result = valid
   1282 tag = 00000000000000000000000000000000
   1283 
   1284 # tcId = 125
   1285 aad = 
   1286 ct = fe
   1287 iv = 34047bc39b9c608384dff5b8
   1288 key = 21218af790428f8024d3e7e1428c9fcf578c216636d60e73
   1289 msg = e3
   1290 result = valid
   1291 tag = 2e982e24b81cd120d35a70fe6935e665
   1292 
   1293 # tcId = 126
   1294 aad = 
   1295 ct = 99f2ff1c8a44e5f2
   1296 iv = 4ebc13cf4636cc7c45e560a7
   1297 key = 3a8bf543c480925632118245bcbf5d01522b987a31a33da3
   1298 msg = 53fc72e71b59eeb3
   1299 result = valid
   1300 tag = 6870f104ddc514477b400336fb01860e
   1301 
   1302 # tcId = 127
   1303 aad = 
   1304 ct = afe8ef41591bfcc00db3c880ceb186
   1305 iv = 6e7ff7f0797685cfc44b05ff
   1306 key = 92f4d2672fceec43963ccffb17e6ea7578b11418b06a3b82
   1307 msg = c3ec16adb184affa8ae9738bffb916
   1308 result = valid
   1309 tag = 29fff7f285768645c9c8bf7a471c9393
   1310 
   1311 # tcId = 128
   1312 aad = 
   1313 ct = 90339dca02ef717f1603994aee6cf6d2
   1314 iv = be0326d23bdc2c64648d13f4
   1315 key = bcb6bc5ee6743df1396a34639327b25809ec9c81dd6a0c0e
   1316 msg = 80474a3a3b809560eee2ce7a7a33ea07
   1317 result = valid
   1318 tag = e3d33e01ce64f271783147de226228bc
   1319 
   1320 # tcId = 129
   1321 aad = 
   1322 ct = b98ed6321679941a3e521834296686ad98
   1323 iv = b6be6cd0681235d826aa28ea
   1324 key = 5e1d28213e092536525bbae09e214af4c891e202b2b4fa4f
   1325 msg = 53d59433a7db7f41b31ccb6d4a2d789965
   1326 result = valid
   1327 tag = 9f50c03e055e519712c582ec9db3235b
   1328 
   1329 # tcId = 130
   1330 aad = 
   1331 ct = addd303651119e52f6170dfc7a915064253d57532987b9ab
   1332 iv = b022067048505b20946216ef
   1333 key = 7f672d85e151aa490bc0eec8f66b5e5bee74af11642be3ff
   1334 msg = ef6412c72b03c643fa02565a0ae2378a9311c11a84065f80
   1335 result = valid
   1336 tag = fa0484f8baa95f5b7a31c56d1b34c58b
   1337 
   1338 # tcId = 131
   1339 aad = cb
   1340 ct = 0d2c3a3c0cc4b40e70ed45e188e356a0e1533b31
   1341 iv = 817fe51c31f2879141a34335
   1342 key = 969fed5068541d65418c2c1de8fe1f845e036030496e1272
   1343 msg = 3d8233191a2823bf767e99167b1d4af4f4848458
   1344 result = valid
   1345 tag = 92909a80e90540e1878ab59ef300072b
   1346 
   1347 # tcId = 132
   1348 aad = 2ed8487153e21b12
   1349 ct = c7c1cbb85ce2a0a3f32cb9ef01ad45ec1118b66d
   1350 iv = 62b9cf1e923bc1138d05d205
   1351 key = fa5b9b41f93f8b682c04ba816c3fecc24eec095b04dd7497
   1352 msg = 18159841813a69fc0f8f4229e1678da7c9016711
   1353 result = valid
   1354 tag = 253317f98bdab87531ece20475cd9ebb
   1355 
   1356 # tcId = 133
   1357 aad = 74318d8876528243f1944b73eb77e96e
   1358 ct = ecf5e403f19c007c8da7a456caf0a6d75762829b
   1359 iv = 3f1a1e02e90a4ba7a1db9df2
   1360 key = fbfb395662787e2d25a2e7510f818e825936a35114e237c9
   1361 msg = 2952a3d64107d5cbb9602239d05a5c5c222cf72b
   1362 result = valid
   1363 tag = e0877a100f9dd9d6795f0e74c56a9fab
   1364 
   1365 # tcId = 134
   1366 aad = 5ca354a4cb8e4fc9798aa209ad4f739dc7c232fdd1f22584
   1367 ct = 94d844d98b9467daa7e8dde7f4290037354d7fb2
   1368 iv = 0802ae86c75a73bf79561521
   1369 key = 5d8e9c2222316c9ed5ff94513cc957436ae447a6e1a73a29
   1370 msg = 42b4439e1d2116f834b91c516a26299df279956b
   1371 result = valid
   1372 tag = 62196638590cef429d6b1d1a59839c02
   1373 
   1374 # tcId = 135
   1375 # Flipped bit 0 in tag
   1376 aad = 
   1377 ct = 458256842dfd297f30bd2f8f15c92db0
   1378 iv = 505152535455565758595a5b
   1379 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1380 msg = 202122232425262728292a2b2c2d2e2f
   1381 result = invalid
   1382 tag = b5e44c5b2fe90e4c78f358da0d99cb64
   1383 
   1384 # tcId = 136
   1385 # Flipped bit 1 in tag
   1386 aad = 
   1387 ct = 458256842dfd297f30bd2f8f15c92db0
   1388 iv = 505152535455565758595a5b
   1389 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1390 msg = 202122232425262728292a2b2c2d2e2f
   1391 result = invalid
   1392 tag = b6e44c5b2fe90e4c78f358da0d99cb64
   1393 
   1394 # tcId = 137
   1395 # Flipped bit 7 in tag
   1396 aad = 
   1397 ct = 458256842dfd297f30bd2f8f15c92db0
   1398 iv = 505152535455565758595a5b
   1399 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1400 msg = 202122232425262728292a2b2c2d2e2f
   1401 result = invalid
   1402 tag = 34e44c5b2fe90e4c78f358da0d99cb64
   1403 
   1404 # tcId = 138
   1405 # Flipped bit 8 in tag
   1406 aad = 
   1407 ct = 458256842dfd297f30bd2f8f15c92db0
   1408 iv = 505152535455565758595a5b
   1409 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1410 msg = 202122232425262728292a2b2c2d2e2f
   1411 result = invalid
   1412 tag = b4e54c5b2fe90e4c78f358da0d99cb64
   1413 
   1414 # tcId = 139
   1415 # Flipped bit 31 in tag
   1416 aad = 
   1417 ct = 458256842dfd297f30bd2f8f15c92db0
   1418 iv = 505152535455565758595a5b
   1419 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1420 msg = 202122232425262728292a2b2c2d2e2f
   1421 result = invalid
   1422 tag = b4e44cdb2fe90e4c78f358da0d99cb64
   1423 
   1424 # tcId = 140
   1425 # Flipped bit 32 in tag
   1426 aad = 
   1427 ct = 458256842dfd297f30bd2f8f15c92db0
   1428 iv = 505152535455565758595a5b
   1429 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1430 msg = 202122232425262728292a2b2c2d2e2f
   1431 result = invalid
   1432 tag = b4e44c5b2ee90e4c78f358da0d99cb64
   1433 
   1434 # tcId = 141
   1435 # Flipped bit 33 in tag
   1436 aad = 
   1437 ct = 458256842dfd297f30bd2f8f15c92db0
   1438 iv = 505152535455565758595a5b
   1439 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1440 msg = 202122232425262728292a2b2c2d2e2f
   1441 result = invalid
   1442 tag = b4e44c5b2de90e4c78f358da0d99cb64
   1443 
   1444 # tcId = 142
   1445 # Flipped bit 63 in tag
   1446 aad = 
   1447 ct = 458256842dfd297f30bd2f8f15c92db0
   1448 iv = 505152535455565758595a5b
   1449 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1450 msg = 202122232425262728292a2b2c2d2e2f
   1451 result = invalid
   1452 tag = b4e44c5b2fe90ecc78f358da0d99cb64
   1453 
   1454 # tcId = 143
   1455 # Flipped bit 64 in tag
   1456 aad = 
   1457 ct = 458256842dfd297f30bd2f8f15c92db0
   1458 iv = 505152535455565758595a5b
   1459 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1460 msg = 202122232425262728292a2b2c2d2e2f
   1461 result = invalid
   1462 tag = b4e44c5b2fe90e4c79f358da0d99cb64
   1463 
   1464 # tcId = 144
   1465 # Flipped bit 71 in tag
   1466 aad = 
   1467 ct = 458256842dfd297f30bd2f8f15c92db0
   1468 iv = 505152535455565758595a5b
   1469 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1470 msg = 202122232425262728292a2b2c2d2e2f
   1471 result = invalid
   1472 tag = b4e44c5b2fe90e4cf8f358da0d99cb64
   1473 
   1474 # tcId = 145
   1475 # Flipped bit 77 in tag
   1476 aad = 
   1477 ct = 458256842dfd297f30bd2f8f15c92db0
   1478 iv = 505152535455565758595a5b
   1479 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1480 msg = 202122232425262728292a2b2c2d2e2f
   1481 result = invalid
   1482 tag = b4e44c5b2fe90e4c78d358da0d99cb64
   1483 
   1484 # tcId = 146
   1485 # Flipped bit 80 in tag
   1486 aad = 
   1487 ct = 458256842dfd297f30bd2f8f15c92db0
   1488 iv = 505152535455565758595a5b
   1489 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1490 msg = 202122232425262728292a2b2c2d2e2f
   1491 result = invalid
   1492 tag = b4e44c5b2fe90e4c78f359da0d99cb64
   1493 
   1494 # tcId = 147
   1495 # Flipped bit 96 in tag
   1496 aad = 
   1497 ct = 458256842dfd297f30bd2f8f15c92db0
   1498 iv = 505152535455565758595a5b
   1499 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1500 msg = 202122232425262728292a2b2c2d2e2f
   1501 result = invalid
   1502 tag = b4e44c5b2fe90e4c78f358da0c99cb64
   1503 
   1504 # tcId = 148
   1505 # Flipped bit 97 in tag
   1506 aad = 
   1507 ct = 458256842dfd297f30bd2f8f15c92db0
   1508 iv = 505152535455565758595a5b
   1509 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1510 msg = 202122232425262728292a2b2c2d2e2f
   1511 result = invalid
   1512 tag = b4e44c5b2fe90e4c78f358da0f99cb64
   1513 
   1514 # tcId = 149
   1515 # Flipped bit 103 in tag
   1516 aad = 
   1517 ct = 458256842dfd297f30bd2f8f15c92db0
   1518 iv = 505152535455565758595a5b
   1519 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1520 msg = 202122232425262728292a2b2c2d2e2f
   1521 result = invalid
   1522 tag = b4e44c5b2fe90e4c78f358da8d99cb64
   1523 
   1524 # tcId = 150
   1525 # Flipped bit 120 in tag
   1526 aad = 
   1527 ct = 458256842dfd297f30bd2f8f15c92db0
   1528 iv = 505152535455565758595a5b
   1529 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1530 msg = 202122232425262728292a2b2c2d2e2f
   1531 result = invalid
   1532 tag = b4e44c5b2fe90e4c78f358da0d99cb65
   1533 
   1534 # tcId = 151
   1535 # Flipped bit 121 in tag
   1536 aad = 
   1537 ct = 458256842dfd297f30bd2f8f15c92db0
   1538 iv = 505152535455565758595a5b
   1539 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1540 msg = 202122232425262728292a2b2c2d2e2f
   1541 result = invalid
   1542 tag = b4e44c5b2fe90e4c78f358da0d99cb66
   1543 
   1544 # tcId = 152
   1545 # Flipped bit 126 in tag
   1546 aad = 
   1547 ct = 458256842dfd297f30bd2f8f15c92db0
   1548 iv = 505152535455565758595a5b
   1549 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1550 msg = 202122232425262728292a2b2c2d2e2f
   1551 result = invalid
   1552 tag = b4e44c5b2fe90e4c78f358da0d99cb24
   1553 
   1554 # tcId = 153
   1555 # Flipped bit 127 in tag
   1556 aad = 
   1557 ct = 458256842dfd297f30bd2f8f15c92db0
   1558 iv = 505152535455565758595a5b
   1559 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1560 msg = 202122232425262728292a2b2c2d2e2f
   1561 result = invalid
   1562 tag = b4e44c5b2fe90e4c78f358da0d99cbe4
   1563 
   1564 # tcId = 154
   1565 # Flipped bits 0 and 64 in tag
   1566 aad = 
   1567 ct = 458256842dfd297f30bd2f8f15c92db0
   1568 iv = 505152535455565758595a5b
   1569 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1570 msg = 202122232425262728292a2b2c2d2e2f
   1571 result = invalid
   1572 tag = b5e44c5b2fe90e4c79f358da0d99cb64
   1573 
   1574 # tcId = 155
   1575 # Flipped bits 31 and 63 in tag
   1576 aad = 
   1577 ct = 458256842dfd297f30bd2f8f15c92db0
   1578 iv = 505152535455565758595a5b
   1579 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1580 msg = 202122232425262728292a2b2c2d2e2f
   1581 result = invalid
   1582 tag = b4e44cdb2fe90ecc78f358da0d99cb64
   1583 
   1584 # tcId = 156
   1585 # Flipped bits 63 and 127 in tag
   1586 aad = 
   1587 ct = 458256842dfd297f30bd2f8f15c92db0
   1588 iv = 505152535455565758595a5b
   1589 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1590 msg = 202122232425262728292a2b2c2d2e2f
   1591 result = invalid
   1592 tag = b4e44c5b2fe90ecc78f358da0d99cbe4
   1593 
   1594 # tcId = 157
   1595 # all bits of tag flipped
   1596 aad = 
   1597 ct = 458256842dfd297f30bd2f8f15c92db0
   1598 iv = 505152535455565758595a5b
   1599 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1600 msg = 202122232425262728292a2b2c2d2e2f
   1601 result = invalid
   1602 tag = 4b1bb3a4d016f1b3870ca725f266349b
   1603 
   1604 # tcId = 158
   1605 # Tag changed to all zero
   1606 aad = 
   1607 ct = 458256842dfd297f30bd2f8f15c92db0
   1608 iv = 505152535455565758595a5b
   1609 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1610 msg = 202122232425262728292a2b2c2d2e2f
   1611 result = invalid
   1612 tag = 00000000000000000000000000000000
   1613 
   1614 # tcId = 159
   1615 # tag changed to all 1
   1616 aad = 
   1617 ct = 458256842dfd297f30bd2f8f15c92db0
   1618 iv = 505152535455565758595a5b
   1619 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1620 msg = 202122232425262728292a2b2c2d2e2f
   1621 result = invalid
   1622 tag = ffffffffffffffffffffffffffffffff
   1623 
   1624 # tcId = 160
   1625 # msbs changed in tag
   1626 aad = 
   1627 ct = 458256842dfd297f30bd2f8f15c92db0
   1628 iv = 505152535455565758595a5b
   1629 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1630 msg = 202122232425262728292a2b2c2d2e2f
   1631 result = invalid
   1632 tag = 3464ccdbaf698eccf873d85a8d194be4
   1633 
   1634 # tcId = 161
   1635 # lsbs changed in tag
   1636 aad = 
   1637 ct = 458256842dfd297f30bd2f8f15c92db0
   1638 iv = 505152535455565758595a5b
   1639 key = 000102030405060708090a0b0c0d0e0f1011121314151617
   1640 msg = 202122232425262728292a2b2c2d2e2f
   1641 result = invalid
   1642 tag = b5e54d5a2ee80f4d79f259db0c98ca65
   1643 
   1644 [ivSize = 128]
   1645 [keySize = 256]
   1646 [tagSize = 128]
   1647 
   1648 # tcId = 162
   1649 # J0:000102030405060708090a0b0c0d0e0f
   1650 aad = 
   1651 ct = 28e1c5232f4ee8161dbe4c036309e0b3254e9212bef0a93431ce5e5604c8f6a73c18a3183018b770
   1652 iv = 5c2ea9b695fcf6e264b96074d6bfa572
   1653 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1654 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1655 result = valid
   1656 tag = d5808a1bd11a01129bf3c6919aff2339
   1657 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1658 # constructed to test for correct wrapping of the counter.
   1659 
   1660 # tcId = 163
   1661 # J0:00000000000000000000000000000000
   1662 aad = 
   1663 ct = cceebeb4fe4cd90c514e52d2327a2ecd75393661006cf2476d8620149aef3d1cdce491fff3e7a7a3
   1664 iv = 57b3a81f2c36b6b06577ca0fbab8fa8e
   1665 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1666 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1667 result = valid
   1668 tag = 8132e865b69d64ef37db261f80cbbe24
   1669 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1670 # constructed to test for correct wrapping of the counter.
   1671 
   1672 # tcId = 164
   1673 # J0:ffffffffffffffffffffffffffffffff
   1674 aad = 
   1675 ct = 4f4350565d91d9aa8c5f4048550492ad6d6fdabf66da5d1e2af7bfe1a8aadaa0baa3de38a41d9713
   1676 iv = ce20a7e870696a5e68533c465bad2ba1
   1677 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1678 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1679 result = valid
   1680 tag = 155da6441ec071ef2d8e6cffbacc1c7c
   1681 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1682 # constructed to test for correct wrapping of the counter.
   1683 
   1684 # tcId = 165
   1685 # J0:fffffffffffffffffffffffffffffffe
   1686 aad = 
   1687 ct = 8316a53167b6de1a7575700693ffef274f4350565d91d9aa8c5f4048550492ad6d6fdabf66da5d1e
   1688 iv = 918e3c19dbdfee2db18156c5b93f3d75
   1689 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1690 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1691 result = valid
   1692 tag = 6c574aa6a2490cc3b2f2f8f0ffbc56c4
   1693 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1694 # constructed to test for correct wrapping of the counter.
   1695 
   1696 # tcId = 166
   1697 # J0:fffffffffffffffffffffffffffffffd
   1698 aad = 
   1699 ct = 5175927513e751eb309f45bc2ef225f28316a53167b6de1a7575700693ffef274f4350565d91d9aa
   1700 iv = 717d900b270462b9dbf7e9419e890609
   1701 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1702 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1703 result = valid
   1704 tag = 8082a761e1d755344bf29622144e7d39
   1705 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1706 # constructed to test for correct wrapping of the counter.
   1707 
   1708 # tcId = 167
   1709 # J0:000102030405060708090a0bffffffff
   1710 aad = 
   1711 ct = 36b3fbecd09178d04527fb37544f5579d20d60a41266f685c48098e1a52804ca387d90709d3268dd
   1712 iv = ecd52120af240e9b4bf3b9d1eeb49434
   1713 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1714 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1715 result = valid
   1716 tag = 033e0ef2953ebfd8425737c7d393f89a
   1717 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1718 # constructed to test for correct wrapping of the counter.
   1719 
   1720 # tcId = 168
   1721 # J0:000102030405060708090a0bfffffffe
   1722 aad = 
   1723 ct = 16929b773051f12b0adac95f65e21a7f36b3fbecd09178d04527fb37544f5579d20d60a41266f685
   1724 iv = b37bbad104928ae89221d3520c2682e0
   1725 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1726 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1727 result = valid
   1728 tag = ca448bb7e52e897eca234ef343d057d0
   1729 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1730 # constructed to test for correct wrapping of the counter.
   1731 
   1732 # tcId = 169
   1733 # J0:000102030405060708090a0bfffffffd
   1734 aad = 
   1735 ct = 6d3faefaf691d58163846f8d4b9ffd5916929b773051f12b0adac95f65e21a7f36b3fbecd09178d0
   1736 iv = 538816c3f849067cf8576cd62b90b99c
   1737 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1738 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1739 result = valid
   1740 tag = 84f49740e6757f63dd0df7cb7656d0ef
   1741 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1742 # constructed to test for correct wrapping of the counter.
   1743 
   1744 # tcId = 170
   1745 # J0:000102030405060708090a0b7fffffff
   1746 aad = 
   1747 ct = d60196c2d14fcf30c0991d2721ddc52d385f407a16691dade82c9023c855fd8e2e8fbb562102f018
   1748 iv = d10e631943cd3bdababab2bbd13951c0
   1749 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1750 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1751 result = valid
   1752 tag = 877e15d9889e69a99fcc6d727465c391
   1753 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1754 # constructed to test for correct wrapping of the counter.
   1755 
   1756 # tcId = 171
   1757 # J0:000102030405060708090a0b7ffffffe
   1758 aad = 
   1759 ct = 948fbceca12a6e4fabb79b6d965e336fd60196c2d14fcf30c0991d2721ddc52d385f407a16691dad
   1760 iv = 8ea0f8e8e87bbfa96368d83833ab4714
   1761 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1762 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1763 result = valid
   1764 tag = cd5757626945976ba9f0264bd6bee894
   1765 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1766 # constructed to test for correct wrapping of the counter.
   1767 
   1768 # tcId = 172
   1769 # J0:000102030405060708090a0bffff7fff
   1770 aad = 
   1771 ct = a1a0120660ff52e6b1700b12c54d2d33b94b00cd7882d8857d84e6e183a1dea6ee85a7da84fbc35d
   1772 iv = 7b2df4fbed1de2727eb24898e5deabb9
   1773 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1774 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1775 result = valid
   1776 tag = b015d72da62c81cb4d267253b20db9e5
   1777 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1778 # constructed to test for correct wrapping of the counter.
   1779 
   1780 # tcId = 173
   1781 # J0:000102030405060708090a0bffff7ffe
   1782 aad = 
   1783 ct = 5e3434b45edbf0d1f6e02d1144dbf867a1a0120660ff52e6b1700b12c54d2d33b94b00cd7882d885
   1784 iv = 24836f0a46ab6601a760221b074cbd6d
   1785 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1786 msg = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
   1787 result = valid
   1788 tag = ee74ccb30d649ebf6916d05a7dbe5696
   1789 # The counter for AES-GCM is reduced modulo 2**32. This test vector was
   1790 # constructed to test for correct wrapping of the counter.
   1791 
   1792 # tcId = 174
   1793 # special case
   1794 aad = 
   1795 ct = 265c42e2b96ea1de9c24f7182e337390
   1796 iv = 00000000000000000000000000000000
   1797 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1798 msg = 8d74f1c97243d362577ff376c393d2dc
   1799 result = valid
   1800 tag = 00000000000000000000000000000000
   1801 
   1802 # tcId = 175
   1803 # special case
   1804 aad = 
   1805 ct = 988f47668ea650cbaa6714711abe268d
   1806 iv = ffffffffffffffffffffffffffffffff
   1807 key = 00112233445566778899aabbccddeeff102132435465768798a9bacbdcedfe0f
   1808 msg = 884df0e76f3ce227bf9595d103825a46
   1809 result = valid
   1810 tag = ffffffffffffffffffffffffffffffff
   1811 
   1812 # tcId = 176
   1813 aad = 
   1814 ct = 3f
   1815 iv = 0ad570d8863918fe89124e09d125a271
   1816 key = b7797eb0c1a6089ad5452d81fdb14828c040ddc4589c32b565aad8cb4de3e4a0
   1817 msg = ed
   1818 result = valid
   1819 tag = fd8f593b83314e33c5a72efbeb7095e8
   1820 
   1821 # tcId = 177
   1822 aad = 
   1823 ct = 041341078f0439e50b43c991635117
   1824 iv = 2a55caa137c5b0b66cf3809eb8f730c4
   1825 key = 4c010d9561c7234c308c01cea3040c925a9f324dc958ff904ae39b37e60e1e03
   1826 msg = 2a093c9ed72b8ff4994201e9f9e010
   1827 result = valid
   1828 tag = 5b8a2f2da20ef657c903da88ef5f57bb
   1829 
   1830 # tcId = 178
   1831 aad = 
   1832 ct = 469478d448f7e97d755541aa09ad95b0
   1833 iv = 7ee376910f08f497aa6c3aa7113697fd
   1834 key = e7f7a48df99edd92b81f508618aa96526b279debd9ddb292d385ddbae80b2259
   1835 msg = 5e51dbbb861b5ec60751c0996e00527f
   1836 result = valid
   1837 tag = 254ada5cf662d90c5e11b2bd9c4db4c4
   1838 
   1839 # tcId = 179
   1840 aad = 
   1841 ct = cb960201fa5ad41d41d1c2c8037c71d52b72e76b16b589d71b976627c9734c9d
   1842 iv = 5d1bde6fa0994b33efd8f23f531248a7
   1843 key = 4f84782bfbb64a973c3de3dcfa3430367fd68bc0b4c3b31e5d7c8141ba3e6a67
   1844 msg = 78cb6650a1908a842101ea85804fed00cc56fbdafafba0ef4d1ca607dcae57b6
   1845 result = valid
   1846 tag = 8dfce16467c3a6ebb3e7242c9a551962
   1847 
   1848 [ivSize = 120]
   1849 [keySize = 128]
   1850 [tagSize = 128]
   1851 
   1852 # tcId = 180
   1853 # unusual IV size
   1854 aad = 
   1855 ct = 2bc3ef8e7402b4631f48e9be
   1856 iv = b0a73119a97d623806b49d45ddf4c7
   1857 key = 34c74e28182948e03af02a01f46eb4f7
   1858 msg = fe82ba66cf2e265741f2c86c
   1859 result = valid
   1860 tag = 4b6f6f5be291a90b9e93a8a82ddbc8d8
   1861 
   1862 [ivSize = 160]
   1863 [keySize = 128]
   1864 [tagSize = 128]
   1865 
   1866 # tcId = 181
   1867 # unusual IV size
   1868 aad = 
   1869 ct = 4fe13ef29f118f85a63188f8
   1870 iv = e22b6b144ab26b5781316e7a42a76202ac4b2278
   1871 key = 55cb7cac77efe18a1ea3b30c65f3f346
   1872 msg = 2f3d11ea32bf5bc72cbe2b8d
   1873 result = valid
   1874 tag = 05975b175316df8045889f43e0c857e0
   1875 
   1876 [ivSize = 64]
   1877 [keySize = 192]
   1878 [tagSize = 128]
   1879 
   1880 # tcId = 182
   1881 # unusual IV size
   1882 aad = 
   1883 ct = a2966fb189f8d9d391503857
   1884 iv = 60d6bfca67f5d810
   1885 key = f6a4bf8c4e15034699ce5801cbbac7509cd3f94cf28d8307
   1886 msg = de8eaa41e5e6a590c3cfbf61
   1887 result = valid
   1888 tag = e370e7dd328655929bd4691f396a1033
   1889 
   1890 [ivSize = 120]
   1891 [keySize = 192]
   1892 [tagSize = 128]
   1893 
   1894 # tcId = 183
   1895 # unusual IV size
   1896 aad = 
   1897 ct = 9af1a022c61c4315aa0e923e
   1898 iv = edf93e16294f15eded83808f09320e
   1899 key = 66f75acbd8d3acf7af47d13e8384c2809d6b91503a7f294b
   1900 msg = a900c86b6b7e0e5563f8f826
   1901 result = valid
   1902 tag = 20529bff3c59222ec33353af337b1d40
   1903 
   1904 [ivSize = 160]
   1905 [keySize = 192]
   1906 [tagSize = 128]
   1907 
   1908 # tcId = 184
   1909 # unusual IV size
   1910 aad = 
   1911 ct = 073a5291b11df379f31b4f16
   1912 iv = 130c14c839e35b7d56b3350b194b0da342e6b65d
   1913 key = ef2e299dd4ecd7e3b9cc62780922cc2c89f78840564d1276
   1914 msg = 03f59579b14437199583270e
   1915 result = valid
   1916 tag = 17205999491bd4c1d6c7ec3e56779c32
   1917 
   1918 [ivSize = 64]
   1919 [keySize = 256]
   1920 [tagSize = 128]
   1921 
   1922 # tcId = 185
   1923 # unusual IV size
   1924 aad = 
   1925 ct = 99313a220d1fcb6658876283
   1926 iv = c0c568a400b7194f
   1927 key = df64c84ae52d9ca820a47421bed6e96f7165369fc4c1b65f8f6307b17ce1006c
   1928 msg = f5fafdded54a86a4edab44bd
   1929 result = valid
   1930 tag = 00955d7d27f66868cfec734bf59c5e6d
   1931 
   1932 [ivSize = 120]
   1933 [keySize = 256]
   1934 [tagSize = 128]
   1935 
   1936 # tcId = 186
   1937 # unusual IV size
   1938 aad = 
   1939 ct = fc213602aa423b87d7c2a874
   1940 iv = 17ca250fb733877556263223eadde1
   1941 key = e98b0669a645eb14cd06df6968fc5f10edc9f54feed264e3d410cdc61b72ef51
   1942 msg = f384b3ed7b274641f5db60cf
   1943 result = valid
   1944 tag = 36b15bab6923b17218fe1c24048e2391
   1945 
   1946 [ivSize = 160]
   1947 [keySize = 256]
   1948 [tagSize = 128]
   1949 
   1950 # tcId = 187
   1951 # unusual IV size
   1952 aad = 
   1953 ct = c1d76233e8c5042e92bf8d32
   1954 iv = 0f9d6ed7eef362dfa4a7dfa5c0f74c5b27bd4ebf
   1955 key = 849b3e6b8cdd85bdcfb8eb701aa5522ae2340fbe5214e389622cef76979225c4
   1956 msg = 8c5564e53051c0de273199b4
   1957 result = valid
   1958 tag = 7cf036d235d3b2dd349a8c804b65144a
   1959 
   1960 [ivSize = 0]
   1961 [keySize = 128]
   1962 [tagSize = 128]
   1963 
   1964 # tcId = 188
   1965 # 0 size IV is not valid
   1966 aad = 
   1967 ct = 
   1968 iv = 
   1969 key = 8f3f52e3c75c58f5cb261f518f4ad30a
   1970 msg = 
   1971 result = invalid
   1972 tag = cf71978ffcc778f3c85ac9c31b6fe191
   1973 # AES-GCM does not allow an IV of length 0. Encrypting with such an IV leaks the
   1974 # authentication key. Hence using an IV of length 0 is insecure even if the key
   1975 # itself is only used for a single encryption.
   1976 
   1977 # tcId = 189
   1978 # 0 size IV is not valid
   1979 aad = 
   1980 ct = 00a29f0a5e2e7490279d1faf8b881c7b
   1981 iv = 
   1982 key = 2a4bf90e56b70fdd8649d775c089de3b
   1983 msg = 324ced6cd15ecc5b3741541e22c18ad9
   1984 result = invalid
   1985 tag = a2c7e8d7a19b884f742dfec3e76c75ee
   1986 # AES-GCM does not allow an IV of length 0. Encrypting with such an IV leaks the
   1987 # authentication key. Hence using an IV of length 0 is insecure even if the key
   1988 # itself is only used for a single encryption.
   1989 
   1990 [ivSize = 0]
   1991 [keySize = 192]
   1992 [tagSize = 128]
   1993 
   1994 # tcId = 190
   1995 # 0 size IV is not valid
   1996 aad = 
   1997 ct = 
   1998 iv = 
   1999 key = 0b18d21337035c7baa08211b702fa780ac7c09be8f9ed11f
   2000 msg = 
   2001 result = invalid
   2002 tag = ca69a2eb3a096ea36b1015d5dffff532
   2003 # AES-GCM does not allow an IV of length 0. Encrypting with such an IV leaks the
   2004 # authentication key. Hence using an IV of length 0 is insecure even if the key
   2005 # itself is only used for a single encryption.
   2006 
   2007 # tcId = 191
   2008 # 0 size IV is not valid
   2009 aad = 
   2010 ct = 509b0658d09f7a5bb9db43b70c8387f7
   2011 iv = 
   2012 key = ba76d594a6df915bb7ab7e6d1a8d024b2796336c1b8328a9
   2013 msg = d62f302742d61d823ea991b93430d589
   2014 result = invalid
   2015 tag = 2c9488d53a0b2b5308c2757dfac7219f
   2016 # AES-GCM does not allow an IV of length 0. Encrypting with such an IV leaks the
   2017 # authentication key. Hence using an IV of length 0 is insecure even if the key
   2018 # itself is only used for a single encryption.
   2019 
   2020 [ivSize = 0]
   2021 [keySize = 256]
   2022 [tagSize = 128]
   2023 
   2024 # tcId = 192
   2025 # 0 size IV is not valid
   2026 aad = 
   2027 ct = 
   2028 iv = 
   2029 key = 3f8ca47b9a940582644e8ecf9c2d44e8138377a8379c5c11aafe7fec19856cf1
   2030 msg = 
   2031 result = invalid
   2032 tag = 1726aa695fbaa21a1db88455c670a4b0
   2033 # AES-GCM does not allow an IV of length 0. Encrypting with such an IV leaks the
   2034 # authentication key. Hence using an IV of length 0 is insecure even if the key
   2035 # itself is only used for a single encryption.
   2036 
   2037 # tcId = 193
   2038 # 0 size IV is not valid
   2039 aad = 
   2040 ct = 7772ea358901f571d3d35c19497639d9
   2041 iv = 
   2042 key = 7660d10966c6503903a552dde2a809ede9da490e5e5cc3e349da999671809883
   2043 msg = c314235341debfafa1526bb61044a7f1
   2044 result = invalid
   2045 tag = 8fe0520ad744a11f0ccfd228454363fa
   2046 # AES-GCM does not allow an IV of length 0. Encrypting with such an IV leaks the
   2047 # authentication key. Hence using an IV of length 0 is insecure even if the key
   2048 # itself is only used for a single encryption.
   2049 
   2050 [ivSize = 8]
   2051 [keySize = 128]
   2052 [tagSize = 128]
   2053 
   2054 # tcId = 194
   2055 # small IV sizes
   2056 aad = 
   2057 ct = 
   2058 iv = 80
   2059 key = 59a284f50aedd8d3e2a91637d3815579
   2060 msg = 
   2061 result = acceptable
   2062 tag = af498f701d2470695f6e7c8327a2398b
   2063 
   2064 # tcId = 195
   2065 # small IV sizes
   2066 aad = 
   2067 ct = 0a24612a9d1cbe967dbfe804bf8440e5
   2068 iv = 9d
   2069 key = fec58aa8cf06bfe05de829f27ec77693
   2070 msg = f2d99a9f893378e0757d27c2e3a3101b
   2071 result = acceptable
   2072 tag = 96e6fd2cdc707e3ee0a1c90d34c9c36c
   2073 
   2074 [ivSize = 16]
   2075 [keySize = 128]
   2076 [tagSize = 128]
   2077 
   2078 # tcId = 196
   2079 # small IV sizes
   2080 aad = 
   2081 ct = 
   2082 iv = 0f2f
   2083 key = 88a972cce9eaf5a7813ce8149d0c1d0e
   2084 msg = 
   2085 result = acceptable
   2086 tag = 4ccf1efb4da05b4ae4452aea42f5424b
   2087 
   2088 # tcId = 197
   2089 # small IV sizes
   2090 aad = 
   2091 ct = ba3e7f8b2999995c7fc4006ca4f475ff
   2092 iv = 8760
   2093 key = b43967ee933e4632bd6562ba1201bf83
   2094 msg = 5a6ad6db70591d1e520b0122f05021a0
   2095 result = acceptable
   2096 tag = 98f47a5279cebbcac214515710f6cd8a
   2097 
   2098 [ivSize = 32]
   2099 [keySize = 128]
   2100 [tagSize = 128]
   2101 
   2102 # tcId = 198
   2103 # small IV sizes
   2104 aad = 
   2105 ct = 
   2106 iv = cc851957
   2107 key = 4e9a97d3ed54c7b54610793ab05052e1
   2108 msg = 
   2109 result = acceptable
   2110 tag = e574b355bda2980e047e584feb1676ca
   2111 
   2112 # tcId = 199
   2113 # small IV sizes
   2114 aad = 
   2115 ct = 1b84baea9df1e65bee7b49e4a8cda1ec
   2116 iv = 7b5faeb2
   2117 key = d83c1d7a97c43f182409a4aa5609c1b1
   2118 msg = c8f07ba1d65554a9bd40390c30c5529c
   2119 result = acceptable
   2120 tag = 5c0bb79d8240041edce0f94bd4bb384f
   2121 
   2122 [ivSize = 48]
   2123 [keySize = 128]
   2124 [tagSize = 128]
   2125 
   2126 # tcId = 200
   2127 # small IV sizes
   2128 aad = 
   2129 ct = 
   2130 iv = 4ad80c2854fb
   2131 key = c6a705677affb49e276d9511caa46145
   2132 msg = 
   2133 result = acceptable
   2134 tag = 1e2ed72af590cafb8647d185865f5463
   2135 
   2136 # tcId = 201
   2137 # small IV sizes
   2138 aad = 
   2139 ct = 18291aa8dc7b07448aa8f71bb8e380bf
   2140 iv = d1dafc8de3e3
   2141 key = eba7699b56cc0aa2f66a2a5be9944413
   2142 msg = d021e53d9098a2df3d6b903cdad0cd9c
   2143 result = acceptable
   2144 tag = 9c0e22e5c41b1039ff5661ffaefa8e0f
   2145 
   2146 [ivSize = 8]
   2147 [keySize = 192]
   2148 [tagSize = 128]
   2149 
   2150 # tcId = 202
   2151 # small IV sizes
   2152 aad = 
   2153 ct = 
   2154 iv = cb
   2155 key = c70ce38e84e5f53ed41c3f0d2ca493412ad32cb04c6e2efa
   2156 msg = 
   2157 result = acceptable
   2158 tag = 08d96edb5e22874cd10cb2256ca04bc6
   2159 
   2160 # tcId = 203
   2161 # small IV sizes
   2162 aad = 
   2163 ct = 6c5e796ba9a3ddc64f401e68d135101d
   2164 iv = 0f
   2165 key = 74c816b83dfd287210a3e2c6da8d3053bbfbd9b156d3fdd8
   2166 msg = f2b7b2c9b312cf2af78f003df15c8e19
   2167 result = acceptable
   2168 tag = 96a132ed43924e98feb888ff682bdaef
   2169 
   2170 [ivSize = 16]
   2171 [keySize = 192]
   2172 [tagSize = 128]
   2173 
   2174 # tcId = 204
   2175 # small IV sizes
   2176 aad = 
   2177 ct = 
   2178 iv = 75e5
   2179 key = cbf45ba488932aea1a10e5862f92e4a7e277bda9f34af6d0
   2180 msg = 
   2181 result = acceptable
   2182 tag = 1f0d23070fcd748e25bf6454f5c9136e
   2183 
   2184 # tcId = 205
   2185 # small IV sizes
   2186 aad = 
   2187 ct = 550b48a43e821fd76f49f0f1a897aead
   2188 iv = 8989
   2189 key = e1c0446f11ae6aa4fa254f9a846fc6e13e45e537e47f2042
   2190 msg = 3a2f5ad0eb216e546e0bcaa377b6cbc7
   2191 result = acceptable
   2192 tag = f6e0a979481f9957ddad0f21a777a73a
   2193 
   2194 [ivSize = 32]
   2195 [keySize = 192]
   2196 [tagSize = 128]
   2197 
   2198 # tcId = 206
   2199 # small IV sizes
   2200 aad = 
   2201 ct = 
   2202 iv = 68d7fc38
   2203 key = 567563bf4cf154902275a53bc57cd6dd7b370d27011bdac8
   2204 msg = 
   2205 result = acceptable
   2206 tag = 1475563e3212f3b5e40062569afd71e3
   2207 
   2208 # tcId = 207
   2209 # small IV sizes
   2210 aad = 
   2211 ct = 309133e76159fe8a41b20843486511ab
   2212 iv = bb9d2aa3
   2213 key = 834d0bb601170865a78139428a1503695a6a291ebd747cd1
   2214 msg = 6f79e18b4acd5a03d3a5f7e1a8d0f183
   2215 result = acceptable
   2216 tag = 03ab26993b701910a2e8ecccd2ba9e52
   2217 
   2218 [ivSize = 48]
   2219 [keySize = 192]
   2220 [tagSize = 128]
   2221 
   2222 # tcId = 208
   2223 # small IV sizes
   2224 aad = 
   2225 ct = 
   2226 iv = a984bdcdcae2
   2227 key = 99fb18f5ba430bb9ea942968ecb799b43406e1af4b6425a1
   2228 msg = 
   2229 result = acceptable
   2230 tag = d7b9a6b58a97982916e83219fbf71b1e
   2231 
   2232 # tcId = 209
   2233 # small IV sizes
   2234 aad = 
   2235 ct = e08261e46eaf90d978ea8f7889bccd4f
   2236 iv = 52aa01e0d0d6
   2237 key = b77b242aa0d51c92fda013e0cb0ef2437399ace5d3f507e4
   2238 msg = 4ba541a9914729216153801340ab1779
   2239 result = acceptable
   2240 tag = c052a55df3926a50990a532efe3d80ec
   2241 
   2242 [ivSize = 8]
   2243 [keySize = 256]
   2244 [tagSize = 128]
   2245 
   2246 # tcId = 210
   2247 # small IV sizes
   2248 aad = 
   2249 ct = 
   2250 iv = a9
   2251 key = 8f9a38c1014966e4d9ae736139c5e79b99345874f42d4c7d2c81aa6797c417c0
   2252 msg = 
   2253 result = acceptable
   2254 tag = 2a268bf3a75fd7b00ba230b904bbb014
   2255 
   2256 # tcId = 211
   2257 # small IV sizes
   2258 aad = 
   2259 ct = 7bea30ecc2f73f8e121263b37966954c
   2260 iv = b3
   2261 key = 144cd8279229e8bb2de99d24e615306663913fe9177fcd270fafec493d43bca1
   2262 msg = 976229f5538f9636476d69f0c328e29d
   2263 result = acceptable
   2264 tag = 8bbad4adc54b37a2b2f0f6e8617548c9
   2265 
   2266 [ivSize = 16]
   2267 [keySize = 256]
   2268 [tagSize = 128]
   2269 
   2270 # tcId = 212
   2271 # small IV sizes
   2272 aad = 
   2273 ct = 
   2274 iv = c332
   2275 key = 7d31861f9d3536e14016a3216b1042e0d2f7d4614314268b6f834ec7f38bbb65
   2276 msg = 
   2277 result = acceptable
   2278 tag = 1d978a693120c11f6d51a3ed88cd4ace
   2279 
   2280 # tcId = 213
   2281 # small IV sizes
   2282 aad = 
   2283 ct = 9c39f5b110361e9a770cc5e8b0f444bb
   2284 iv = da6c
   2285 key = 22b35fe9623ee11f8b60b6d22db3765b666ed972fa7ccd92b45f22deee02cab1
   2286 msg = 5341c78e4ce5bf8fbc3e077d1990dd5d
   2287 result = acceptable
   2288 tag = b63ff43c12073ec5572b1be70f17e231
   2289 
   2290 [ivSize = 32]
   2291 [keySize = 256]
   2292 [tagSize = 128]
   2293 
   2294 # tcId = 214
   2295 # small IV sizes
   2296 aad = 
   2297 ct = 
   2298 iv = 6b30145e
   2299 key = c224e0bba3d7a99165f7996b67a0fce3e12f2c01179b197b69b7e628bca92096
   2300 msg = 
   2301 result = acceptable
   2302 tag = ae6f7c9a29f0d8204ca50b14a1e0dcf2
   2303 
   2304 # tcId = 215
   2305 # small IV sizes
   2306 aad = 
   2307 ct = f73f72f976a296ba3ca94bc6eb08cd46
   2308 iv = 5110604c
   2309 key = 093eb12343537ee8e91c1f715b862603f8daf9d4e1d7d67212a9d68e5aac9358
   2310 msg = 33efb58c91e8c70271870ec00fe2e202
   2311 result = acceptable
   2312 tag = b824c33c13f289429659aa017c632f71
   2313 
   2314 [ivSize = 48]
   2315 [keySize = 256]
   2316 [tagSize = 128]
   2317 
   2318 # tcId = 216
   2319 # small IV sizes
   2320 aad = 
   2321 ct = 
   2322 iv = d4d857510888
   2323 key = 98e6f8ab673e804e865e32403a6551bf807a959343c60d34559360bc295ecb5b
   2324 msg = 
   2325 result = acceptable
   2326 tag = 3db16725fafc828d414ab61c16a6c38f
   2327 
   2328 # tcId = 217
   2329 # small IV sizes
   2330 aad = 
   2331 ct = ed463f4f43336af3f4d7e08770201145
   2332 iv = 1bdcd44b663e
   2333 key = 0bd0e8e7781166e1d876dec8fad34ba95b032a27cac0551595116091005947b7
   2334 msg = 91222263b12cf5616a049cbe29ab9b5b
   2335 result = acceptable
   2336 tag = c8fc39906aca0c64e14a43ff750abd8a
   2337 
   2338