blob: 1aebe5ad82282de0ba02907e2b47bfeda64823dd [file]
/* This file is automatically generated by import.py.
*
* DO NOT EDIT THIS FILE. Any changes will be lost.
*
*/
#include "../wycheproof_test.h"
/* AES-GCM test case 1 */
CIPHER_TEST ( wycheproof_aes_gcm_157a9714, &aes_gcm_algorithm,
KEY ( 0x5b, 0x96, 0x04, 0xfe, 0x14, 0xea, 0xdb, 0xa9, 0x31, 0xb0,
0xcc, 0xf3, 0x48, 0x43, 0xda, 0xb9 ),
IV ( 0x02, 0x83, 0x18, 0xab, 0xc1, 0x82, 0x40, 0x29, 0x13, 0x81,
0x41, 0xa2 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x1d, 0x0c, 0x23, 0x12, 0x87, 0xc1, 0x18, 0x27,
0x84, 0x55, 0x4c, 0xa3, 0xa2, 0x19, 0x08 ),
CIPHERTEXT ( 0x26, 0x07, 0x3c, 0xc1, 0xd8, 0x51, 0xbe, 0xff, 0x17,
0x63, 0x84, 0xdc, 0x98, 0x96, 0xd5, 0xff ),
AUTH ( 0x0a, 0x3e, 0xa7, 0xa5, 0x48, 0x7c, 0xb5, 0xf7, 0xd7, 0x0f,
0xb6, 0xc5, 0x8d, 0x03, 0x85, 0x54 ) );
/* AES-GCM test case 2 */
CIPHER_TEST ( wycheproof_aes_gcm_9790df61, &aes_gcm_algorithm,
KEY ( 0x5b, 0x96, 0x04, 0xfe, 0x14, 0xea, 0xdb, 0xa9, 0x31, 0xb0,
0xcc, 0xf3, 0x48, 0x43, 0xda, 0xb9 ),
IV ( 0x92, 0x1d, 0x25, 0x07, 0xfa, 0x80, 0x07, 0xb7, 0xbd, 0x06,
0x7d, 0x34 ),
ADDITIONAL ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88,
0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
PLAINTEXT ( 0x00, 0x1d, 0x0c, 0x23, 0x12, 0x87, 0xc1, 0x18, 0x27,
0x84, 0x55, 0x4c, 0xa3, 0xa2, 0x19, 0x08 ),
CIPHERTEXT ( 0x49, 0xd8, 0xb9, 0x78, 0x3e, 0x91, 0x19, 0x13, 0xd8,
0x70, 0x94, 0xd1, 0xf6, 0x3c, 0xc7, 0x65 ),
AUTH ( 0x1e, 0x34, 0x8b, 0xa0, 0x7c, 0xca, 0x2c, 0xf0, 0x4c, 0x61,
0x8c, 0xb4, 0xd4, 0x3a, 0x5b, 0x92 ) );
/* AES-GCM test case 3 */
CIPHER_TEST ( wycheproof_aes_gcm_115b44f1, &aes_gcm_algorithm,
KEY ( 0xaa, 0x02, 0x3d, 0x04, 0x78, 0xdc, 0xb2, 0xb2, 0x31, 0x24,
0x98, 0x29, 0x3d, 0x9a, 0x91, 0x29 ),
IV ( 0x04, 0x32, 0xbc, 0x49, 0xac, 0x34, 0x41, 0x20, 0x81, 0x28,
0x81, 0x27 ),
ADDITIONAL ( 0xaa, 0xc3, 0x92, 0x31, 0x12, 0x98, 0x72, 0xa2 ),
PLAINTEXT ( 0x20, 0x35, 0xaf, 0x31, 0x3d, 0x13, 0x46, 0xab, 0x00,
0x15, 0x4f, 0xea, 0x78, 0x32, 0x21, 0x05 ),
CIPHERTEXT ( 0xee, 0xa9, 0x45, 0xf3, 0xd0, 0xf9, 0x8c, 0xc0, 0xfb,
0xab, 0x47, 0x2a, 0x0c, 0xf2, 0x4e, 0x87 ),
AUTH ( 0x4b, 0xb9, 0xb4, 0x81, 0x25, 0x19, 0xda, 0xdf, 0x9e, 0x12,
0x32, 0x01, 0x6d, 0x06, 0x81, 0x33 ) );
/* AES-GCM test case 4 */
CIPHER_TEST ( wycheproof_aes_gcm_b7fccaa3, &aes_gcm_algorithm,
KEY ( 0xbe, 0xdc, 0xfb, 0x5a, 0x01, 0x1e, 0xbc, 0x84, 0x60, 0x0f,
0xcb, 0x29, 0x6c, 0x15, 0xaf, 0x0d ),
IV ( 0x43, 0x8a, 0x54, 0x7a, 0x94, 0xea, 0x88, 0xdc, 0xe4, 0x6c,
0x6c, 0x85 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x96, 0x02, 0x47, 0xba, 0x5c, 0xde, 0x02, 0xe4, 0x1a, 0x31,
0x3c, 0x4c, 0x01, 0x36, 0xed, 0xc3 ) );
/* AES-GCM test case 5 */
CIPHER_TEST ( wycheproof_aes_gcm_91d6ea82, &aes_gcm_algorithm,
KEY ( 0x38, 0x4e, 0xa4, 0x16, 0xac, 0x3c, 0x2f, 0x51, 0xa7, 0x6e,
0x7d, 0x82, 0x26, 0x34, 0x6d, 0x4e ),
IV ( 0xb3, 0x0c, 0x08, 0x47, 0x27, 0xad, 0x1c, 0x59, 0x2a, 0xc2,
0x1d, 0x12 ),
ADDITIONAL(),
PLAINTEXT ( 0x35 ),
CIPHERTEXT ( 0x54 ),
AUTH ( 0x7c, 0x1e, 0x4a, 0xe8, 0x8b, 0xb2, 0x7e, 0x56, 0x38, 0x34,
0x3c, 0xb9, 0xfd, 0x3f, 0x63, 0x37 ) );
/* AES-GCM test case 6 */
CIPHER_TEST ( wycheproof_aes_gcm_e6ac9d52, &aes_gcm_algorithm,
KEY ( 0xca, 0xe3, 0x1c, 0xd9, 0xf5, 0x55, 0x26, 0xeb, 0x03, 0x82,
0x41, 0xfc, 0x44, 0xca, 0xc1, 0xe5 ),
IV ( 0xb5, 0xe0, 0x06, 0xde, 0xd5, 0x53, 0x11, 0x0e, 0x6d, 0xc5,
0x65, 0x29 ),
ADDITIONAL(),
PLAINTEXT ( 0xd1, 0x09, 0x89, 0xf2, 0xc5, 0x2e, 0x94, 0xad ),
CIPHERTEXT ( 0xa0, 0x36, 0xea, 0xd0, 0x31, 0x93, 0x90, 0x3f ),
AUTH ( 0x3b, 0x62, 0x69, 0x40, 0xe0, 0xe9, 0xf0, 0xcb, 0xea, 0x8e,
0x18, 0xc4, 0x37, 0xfd, 0x60, 0x11 ) );
/* AES-GCM test case 7 */
CIPHER_TEST ( wycheproof_aes_gcm_e313ce55, &aes_gcm_algorithm,
KEY ( 0xdd, 0x61, 0x97, 0xcd, 0x63, 0xc9, 0x63, 0x91, 0x9c, 0xf0,
0xc2, 0x73, 0xef, 0x6b, 0x28, 0xbf ),
IV ( 0xec, 0xb0, 0xc4, 0x2f, 0x70, 0x00, 0xef, 0x0e, 0x6f, 0x95,
0xf2, 0x4d ),
ADDITIONAL(),
PLAINTEXT ( 0x4d, 0xcc, 0x14, 0x85, 0x36, 0x58, 0x66, 0xe2, 0x5a,
0xc3, 0xf2, 0xca, 0x6a, 0xba, 0x97 ),
CIPHERTEXT ( 0x8a, 0x99, 0x92, 0x38, 0x8e, 0x73, 0x5f, 0x80, 0xee,
0x18, 0xf4, 0xa6, 0x3c, 0x10, 0xad ),
AUTH ( 0x14, 0x86, 0xa9, 0x1c, 0xcc, 0xf9, 0x2c, 0x9a, 0x5b, 0x00,
0xf7, 0xb0, 0xe0, 0x34, 0x89, 0x1c ) );
/* AES-GCM test case 8 */
CIPHER_TEST ( wycheproof_aes_gcm_74a144dd, &aes_gcm_algorithm,
KEY ( 0xff, 0xdf, 0x42, 0x28, 0x36, 0x1e, 0xa1, 0xf8, 0x16, 0x58,
0x52, 0x13, 0x6b, 0x34, 0x80, 0xf7 ),
IV ( 0x0e, 0x16, 0x66, 0xf2, 0xdc, 0x65, 0x2f, 0x77, 0x08, 0xfb,
0x8f, 0x0d ),
ADDITIONAL(),
PLAINTEXT ( 0x25, 0xb1, 0x2e, 0x28, 0xac, 0x0e, 0xf6, 0xea, 0xd0,
0x22, 0x6a, 0x3b, 0x22, 0x88, 0xc8, 0x00 ),
CIPHERTEXT ( 0xf7, 0xbd, 0x37, 0x9d, 0x13, 0x04, 0x77, 0x17, 0x6b,
0x8b, 0xb3, 0xcb, 0x23, 0xdb, 0xbb, 0xaa ),
AUTH ( 0x1e, 0xe6, 0x51, 0x3c, 0xe3, 0x0c, 0x78, 0x73, 0xf5, 0x9d,
0xd4, 0x35, 0x0a, 0x58, 0x8f, 0x42 ) );
/* AES-GCM test case 9 */
CIPHER_TEST ( wycheproof_aes_gcm_a14ec21f, &aes_gcm_algorithm,
KEY ( 0xc1, 0x5e, 0xd2, 0x27, 0xdd, 0x2e, 0x23, 0x7e, 0xcd, 0x08,
0x7e, 0xaa, 0xaa, 0xd1, 0x9e, 0xa4 ),
IV ( 0x96, 0x5f, 0xf6, 0x64, 0x31, 0x16, 0xac, 0x14, 0x43, 0xa2,
0xde, 0xc7 ),
ADDITIONAL(),
PLAINTEXT ( 0xfe, 0xe6, 0x2f, 0xde, 0x97, 0x3f, 0xe0, 0x25, 0xad,
0x6b, 0x32, 0x2d, 0xcd, 0xf3, 0xc6, 0x3f, 0xc7 ),
CIPHERTEXT ( 0x0d, 0xe5, 0x1f, 0xe4, 0xf7, 0xf2, 0xd1, 0xf0, 0xf9,
0x17, 0x56, 0x9f, 0x5c, 0x6d, 0x1b, 0x00, 0x9c ),
AUTH ( 0x6c, 0xd8, 0x52, 0x14, 0x22, 0xc0, 0x17, 0x7e, 0x83, 0xef,
0x1b, 0x7a, 0x84, 0x5d, 0x97, 0xdb ) );
/* AES-GCM test case 10 */
CIPHER_TEST ( wycheproof_aes_gcm_70b4e6f3, &aes_gcm_algorithm,
KEY ( 0xa8, 0xee, 0x11, 0xb2, 0x6d, 0x7c, 0xeb, 0x7f, 0x17, 0xea,
0xa1, 0xe4, 0xb8, 0x3a, 0x2c, 0xf6 ),
IV ( 0xfb, 0xbc, 0x04, 0xfd, 0x6e, 0x02, 0x5b, 0x71, 0x93, 0xeb,
0x57, 0xf6 ),
ADDITIONAL(),
PLAINTEXT ( 0xc0, 0x8f, 0x08, 0x5e, 0x6a, 0x9e, 0x0e, 0xf3, 0x63,
0x62, 0x80, 0xc1, 0x1e, 0xcf, 0xad, 0xf0, 0xc1, 0xe7,
0x29, 0x19, 0xff, 0xc1, 0x7e, 0xaf ),
CIPHERTEXT ( 0x7c, 0xd9, 0xf4, 0xe4, 0xf3, 0x65, 0x70, 0x4f, 0xff,
0x3b, 0x99, 0x00, 0xaa, 0x93, 0xba, 0x54, 0xb6, 0x72,
0xba, 0xc5, 0x54, 0x27, 0x56, 0x50 ),
AUTH ( 0xf4, 0xeb, 0x19, 0x32, 0x41, 0x22, 0x6d, 0xb0, 0x17, 0xb3,
0x2e, 0xc3, 0x8c, 0xa4, 0x72, 0x17 ) );
/* AES-GCM test case 11 */
CIPHER_TEST ( wycheproof_aes_gcm_7f9ca8b2, &aes_gcm_algorithm,
KEY ( 0x28, 0xff, 0x3d, 0xef, 0x08, 0x17, 0x93, 0x11, 0xe2, 0x73,
0x4c, 0x6d, 0x1c, 0x4e, 0x28, 0x71 ),
IV ( 0x32, 0xbc, 0xb9, 0xb5, 0x69, 0xe3, 0xb8, 0x52, 0xd3, 0x7c,
0x76, 0x6a ),
ADDITIONAL ( 0xc3 ),
PLAINTEXT ( 0xdf, 0xc6, 0x1a, 0x20, 0xdf, 0x85, 0x05, 0xb5, 0x3e,
0x3c, 0xd5, 0x9f, 0x25, 0x77, 0x0d, 0x50, 0x18, 0xad,
0xd3, 0xd6 ),
CIPHERTEXT ( 0xf5, 0x8d, 0x45, 0x32, 0x12, 0xc2, 0xc8, 0xa4, 0x36,
0xe9, 0x28, 0x36, 0x72, 0xf5, 0x79, 0xf1, 0x19, 0x12,
0x29, 0x78 ),
AUTH ( 0x59, 0x01, 0x13, 0x1d, 0x07, 0x60, 0xc8, 0x71, 0x59, 0x01,
0xd8, 0x81, 0xfd, 0xfd, 0x3b, 0xc0 ) );
/* AES-GCM test case 12 */
CIPHER_TEST ( wycheproof_aes_gcm_2f81ba3b, &aes_gcm_algorithm,
KEY ( 0xe6, 0x3a, 0x43, 0x21, 0x6c, 0x08, 0x86, 0x72, 0x10, 0xe2,
0x48, 0x85, 0x9e, 0xb5, 0xe9, 0x9c ),
IV ( 0x9c, 0x3a, 0x42, 0x63, 0xd9, 0x83, 0x45, 0x66, 0x58, 0xaa,
0xd4, 0xb1 ),
ADDITIONAL ( 0x83, 0x4a, 0xfd, 0xc5, 0xc7, 0x37, 0x18, 0x6b ),
PLAINTEXT ( 0xb1, 0x4d, 0xa5, 0x6b, 0x04, 0x62, 0xdc, 0x05, 0xb8,
0x71, 0xfc, 0x81, 0x52, 0x73, 0xff, 0x48, 0x10, 0xf9,
0x2f, 0x4b ),
CIPHERTEXT ( 0xbf, 0x86, 0x46, 0x16, 0xc2, 0x34, 0x75, 0x09, 0xca,
0x9b, 0x10, 0x44, 0x63, 0x79, 0xb9, 0xbd, 0xbb, 0x3b,
0x8f, 0x64 ),
AUTH ( 0xa9, 0x7d, 0x25, 0xb4, 0x90, 0x39, 0x0b, 0x53, 0xc5, 0xdb,
0x91, 0xf6, 0xee, 0x2a, 0x15, 0xb8 ) );
/* AES-GCM test case 13 */
CIPHER_TEST ( wycheproof_aes_gcm_3324275e, &aes_gcm_algorithm,
KEY ( 0x38, 0x44, 0x98, 0x90, 0x23, 0x4e, 0xb8, 0xaf, 0xab, 0x0b,
0xbf, 0x82, 0xe2, 0x38, 0x54, 0x54 ),
IV ( 0x33, 0xe9, 0x06, 0x58, 0x41, 0x6e, 0x7c, 0x1a, 0x7c, 0x00,
0x5f, 0x11 ),
ADDITIONAL ( 0x40, 0x20, 0x85, 0x5c, 0x66, 0xac, 0x45, 0x95, 0x05,
0x83, 0x95, 0xf3, 0x67, 0x20, 0x1c, 0x4c ),
PLAINTEXT ( 0xf7, 0x62, 0x77, 0x6b, 0xf8, 0x31, 0x63, 0xb3, 0x23,
0xca, 0x63, 0xa6, 0xb3, 0xad, 0xea, 0xc1, 0xe1, 0x35,
0x72, 0x62 ),
CIPHERTEXT ( 0xa6, 0xf2, 0xef, 0x3c, 0x7e, 0xf7, 0x4a, 0x12, 0x6d,
0xd2, 0xd5, 0xf6, 0x67, 0x39, 0x64, 0xe2, 0x7d, 0x5b,
0x34, 0xb6 ),
AUTH ( 0xb8, 0xbb, 0xdc, 0x4f, 0x50, 0x14, 0xbc, 0x75, 0x2c, 0x8b,
0x4e, 0x9b, 0x87, 0xf6, 0x50, 0xa3 ) );
/* AES-GCM test case 14 */
CIPHER_TEST ( wycheproof_aes_gcm_d0b2b893, &aes_gcm_algorithm,
KEY ( 0x6a, 0x68, 0x67, 0x1d, 0xfe, 0x32, 0x3d, 0x41, 0x98, 0x94,
0x38, 0x1f, 0x85, 0xeb, 0x63, 0xfd ),
IV ( 0x9f, 0x0d, 0x85, 0xb6, 0x05, 0x71, 0x1f, 0x34, 0xcd, 0x2a,
0x35, 0xba ),
ADDITIONAL ( 0x76, 0xeb, 0x5f, 0x14, 0x72, 0x50, 0xfa, 0x3c, 0x12,
0xbf, 0xf0, 0xa6, 0xe3, 0x93, 0x4a, 0x0b, 0x16, 0x86,
0x0c, 0xf1, 0x16, 0x46, 0x77, 0x3b ),
PLAINTEXT ( 0x0f, 0xc6, 0x78, 0x99, 0xc3, 0xf1, 0xbb, 0xe1, 0x96,
0xd9, 0x0f, 0x1e, 0xca, 0x37, 0x97, 0x38, 0x92, 0x30,
0xaa, 0x37 ),
CIPHERTEXT ( 0xbd, 0x64, 0x80, 0x2c, 0xfe, 0xba, 0xeb, 0x48, 0x7d,
0x3a, 0x8f, 0x76, 0xce, 0x94, 0x3a, 0x37, 0xb3, 0x47,
0x2d, 0xd5 ),
AUTH ( 0xfc, 0xe9, 0xa5, 0xb5, 0x30, 0xc7, 0xd7, 0xaf, 0x71, 0x8b,
0xe1, 0xec, 0x0a, 0xe9, 0xed, 0x4d ) );
/* AES-GCM test case 15 */
CIPHER_TEST ( wycheproof_aes_gcm_d06a8069, &aes_gcm_algorithm,
KEY ( 0xbb, 0x57, 0x1c, 0x16, 0x01, 0x32, 0xb0, 0xc8, 0xd5, 0xd1,
0x90, 0xd0, 0xbc, 0x35, 0x6d, 0xdc ),
IV ( 0x25, 0x96, 0xc4, 0x40, 0xcf, 0x02, 0x32, 0x95, 0x0e, 0xc6,
0x6b, 0xc4 ),
ADDITIONAL(),
PLAINTEXT ( 0x05, 0x3b, 0xe1, 0xb6, 0x19, 0x0a, 0x71, 0x7f, 0xc7,
0x4c, 0x87, 0x9e, 0x6f, 0xd6, 0x2d, 0xc4, 0x46, 0x28,
0x49, 0x55, 0x07, 0xe5, 0x0d, 0x66, 0x22, 0x71, 0xde,
0xe7, 0x95, 0xa4, 0xad, 0x26, 0xe0, 0xc4, 0xf8, 0x6c,
0xb6, 0xb2, 0x0a, 0xc6, 0xbd, 0x9d, 0x68, 0x2d, 0x2d,
0x8a, 0x05, 0xc9, 0xda, 0xd8, 0x75, 0xa6, 0x91, 0x1b,
0x49, 0xea, 0x0a, 0xf4, 0xf1, 0x7c, 0x97, 0xa5, 0xf2 ),
CIPHERTEXT ( 0xb1, 0xcf, 0xad, 0x14, 0x2a, 0x46, 0x2f, 0x36, 0x56,
0xe0, 0x92, 0x16, 0x27, 0xfd, 0x41, 0xd4, 0xf1, 0xfa,
0x8e, 0x2f, 0x8b, 0xd9, 0x4b, 0xb5, 0x1f, 0xdc, 0xf0,
0x6f, 0x60, 0x62, 0x96, 0xf7, 0xd2, 0x88, 0x53, 0x37,
0xbe, 0xd7, 0xa4, 0xca, 0x6d, 0xdb, 0x4a, 0x9f, 0xc7,
0xfd, 0xb2, 0x47, 0x6b, 0x5f, 0x7f, 0xa5, 0x22, 0x0e,
0x1d, 0x67, 0x52, 0xa5, 0xe7, 0xc3, 0x1c, 0x91, 0x6c ),
AUTH ( 0xa2, 0x31, 0xb6, 0x17, 0x35, 0x2f, 0xfd, 0xb6, 0x3d, 0x32,
0xd6, 0x9d, 0x99, 0xe7, 0xd6, 0x29 ) );
/* AES-GCM test case 16 */
CIPHER_TEST ( wycheproof_aes_gcm_f9082b41, &aes_gcm_algorithm,
KEY ( 0xe1, 0x22, 0x60, 0xfc, 0xd3, 0x55, 0xa5, 0x1a, 0x0d, 0x01,
0xbb, 0x1f, 0x6f, 0xa5, 0x38, 0xc2 ),
IV ( 0x5d, 0xfc, 0x37, 0x36, 0x6f, 0x56, 0x88, 0x27, 0x51, 0x47,
0xd3, 0xf9 ),
ADDITIONAL(),
PLAINTEXT ( 0xd9, 0x02, 0xde, 0xea, 0xb1, 0x75, 0xc0, 0x08, 0x32,
0x9a, 0x33, 0xbf, 0xac, 0xcd, 0x5c, 0x0e, 0xb3, 0xa6,
0xa1, 0x52, 0xa1, 0x51, 0x0e, 0x7d, 0xb0, 0x4f, 0xa0,
0xaf, 0xf7, 0xce, 0x42, 0x88, 0x53, 0x0d, 0xb6, 0xa8,
0x0f, 0xa7, 0xfe, 0xa5, 0x82, 0xaa, 0x7d, 0x46, 0xd7,
0xd5, 0x6e, 0x70, 0x8d, 0x2b, 0xb0, 0xc5, 0xed, 0xd3,
0xd2, 0x66, 0x48, 0xd3, 0x36, 0xc3, 0x62, 0x0e, 0xa5,
0x5e ),
CIPHERTEXT ( 0xd3, 0x3b, 0xf6, 0x72, 0x2f, 0xc2, 0x93, 0x84, 0xfa,
0xd7, 0x5f, 0x99, 0x02, 0x48, 0xb9, 0x52, 0x8e, 0x09,
0x59, 0xaa, 0x67, 0xec, 0x66, 0x86, 0x9d, 0xc3, 0x99,
0x6c, 0x67, 0xa2, 0xd5, 0x59, 0xe7, 0xd7, 0x7c, 0xe5,
0x95, 0x5f, 0x8c, 0xad, 0x2a, 0x4d, 0xf5, 0xfd, 0xc3,
0xac, 0xcc, 0xaf, 0xa7, 0xbc, 0x0d, 0xef, 0x53, 0xd8,
0x48, 0x11, 0x12, 0x56, 0x90, 0x3e, 0x5a, 0xdd, 0x04,
0x20 ),
AUTH ( 0x8b, 0xc8, 0x33, 0xde, 0x51, 0x08, 0x63, 0xb4, 0xb4, 0x32,
0xc3, 0xcb, 0xf4, 0x5a, 0xa7, 0xcc ) );
/* AES-GCM test case 17 */
CIPHER_TEST ( wycheproof_aes_gcm_8224427d, &aes_gcm_algorithm,
KEY ( 0x97, 0xec, 0x85, 0xa6, 0x9a, 0x05, 0x13, 0x1c, 0xd4, 0xff,
0x64, 0x39, 0x72, 0xf6, 0xd8, 0xf9 ),
IV ( 0x91, 0x89, 0xe0, 0xee, 0xdc, 0xc4, 0x13, 0xa0, 0xba, 0x1e,
0x63, 0xd2 ),
ADDITIONAL(),
PLAINTEXT ( 0x10, 0xac, 0xef, 0xa6, 0xf3, 0x95, 0x9f, 0xae, 0xcb,
0x5c, 0xfd, 0xae, 0xe8, 0xaa, 0xf0, 0x9d, 0x43, 0x81,
0xb2, 0xb1, 0x47, 0xe0, 0xb1, 0x34, 0x50, 0xc2, 0x6e,
0xe0, 0x7f, 0x29, 0xed, 0xaa, 0x9a, 0x1f, 0x1a, 0xf4,
0xe2, 0xd1, 0x11, 0xde, 0xa7, 0xff, 0x68, 0x1a, 0x19,
0xfc, 0x3a, 0x4f, 0xd6, 0x6d, 0xf6, 0xa1, 0x79, 0x85,
0xb0, 0x65, 0x43, 0xa3, 0xb6, 0xc0, 0xe4, 0xe5, 0x1a,
0x54, 0xb7 ),
CIPHERTEXT ( 0xee, 0xfd, 0xf8, 0x99, 0x97, 0x24, 0x4e, 0x06, 0x5f,
0xf1, 0x9a, 0xc2, 0x37, 0x4d, 0xc9, 0x2e, 0xe7, 0x68,
0x99, 0xdd, 0xcb, 0xe7, 0xc8, 0x34, 0xdc, 0xc6, 0x57,
0x24, 0x2f, 0xc0, 0xf6, 0xdd, 0x38, 0x27, 0x23, 0x73,
0xba, 0x9b, 0x54, 0x93, 0x16, 0xa3, 0x6f, 0x15, 0x22,
0xe1, 0xca, 0xb2, 0x46, 0x15, 0x78, 0x75, 0x89, 0x8c,
0x96, 0x6e, 0xec, 0x56, 0x3d, 0x57, 0xec, 0xa5, 0xc7,
0xd3, 0x2d ),
AUTH ( 0x23, 0xaa, 0xa2, 0xc6, 0xb6, 0x80, 0xfc, 0xaa, 0xeb, 0x2c,
0x7a, 0x55, 0x72, 0x6d, 0x4b, 0xc0 ) );
/* AES-GCM test case 18 */
CIPHER_TEST ( wycheproof_aes_gcm_110d48ee, &aes_gcm_algorithm,
KEY ( 0x65, 0xd3, 0x8f, 0x0b, 0x26, 0x8f, 0x18, 0x0d, 0x6b, 0xa5,
0x48, 0xd5, 0x09, 0x11, 0x1d, 0xde ),
IV ( 0xe1, 0x4d, 0xfc, 0x27, 0x39, 0x4a, 0xc8, 0x46, 0xc2, 0x37,
0x3e, 0xa7 ),
ADDITIONAL(),
PLAINTEXT ( 0x1f, 0xa7, 0x6d, 0x79, 0x95, 0xdc, 0x99, 0x6a, 0x5f,
0x5d, 0xab, 0xaa, 0x4b, 0xe4, 0x01, 0xbe, 0x14, 0xf4,
0xd4, 0x70, 0x6a, 0x21, 0x3a, 0x4d, 0xd7, 0x25, 0xdf,
0x38, 0x6e, 0xc1, 0x47, 0xa6, 0xbe, 0x07, 0x49, 0x47,
0xc7, 0x33, 0x09, 0x4f, 0x47, 0xa7, 0x22, 0x25, 0x52,
0x37, 0x67, 0x40, 0xaa, 0x83, 0x48, 0xa0, 0xae, 0x1c,
0x7f, 0x2d, 0x97, 0x2a, 0x0a, 0xd6, 0x64, 0xf8, 0xb8,
0xec, 0x81, 0xdf, 0xc9, 0xaf, 0x07, 0x8b, 0x61, 0xda,
0xea, 0x5d, 0xde, 0x87, 0x4f, 0xd7, 0x37, 0x75, 0xb4,
0xcd, 0x65, 0xac, 0xf0, 0x69, 0xad, 0xa0, 0xb2, 0xb9,
0xbf, 0xbb, 0x4a, 0x98, 0x17, 0xba, 0x41, 0xd4, 0xdc,
0xaf, 0xf7, 0x65, 0x3d, 0xf5, 0xc8, 0xcd, 0x9c, 0xe7,
0xf5, 0x9e, 0xec, 0x92, 0xae, 0x9e, 0x61, 0x31, 0x4e,
0x03, 0xef, 0x48, 0x83, 0x98, 0x10, 0xea, 0x82, 0x55,
0x20 ),
CIPHERTEXT ( 0x40, 0xdc, 0x9b, 0x13, 0x9e, 0x88, 0x8f, 0x18, 0x11,
0x39, 0x11, 0x34, 0xb1, 0x5e, 0x91, 0x48, 0x26, 0x41,
0x4a, 0x99, 0xdb, 0x51, 0x2a, 0x06, 0x32, 0xdc, 0x4c,
0x56, 0xd7, 0x0f, 0x7b, 0x79, 0x91, 0xe9, 0x94, 0x5a,
0x20, 0x25, 0x89, 0x0e, 0x95, 0x16, 0x99, 0xcf, 0x6b,
0x2c, 0xce, 0xe0, 0x93, 0xc9, 0xa6, 0xa7, 0x52, 0xb9,
0x8f, 0xf6, 0x96, 0x24, 0x01, 0x26, 0x75, 0x9f, 0x48,
0x02, 0x99, 0xc1, 0xdd, 0x82, 0xaa, 0x2c, 0x4f, 0x46,
0x2a, 0x4a, 0x8a, 0xd1, 0xad, 0x0c, 0x7a, 0x75, 0x5f,
0x07, 0x90, 0x8c, 0x9c, 0x0d, 0x33, 0x6d, 0x57, 0xdb,
0xde, 0xbc, 0x94, 0x0b, 0xba, 0xe2, 0x8b, 0xa0, 0x33,
0x6d, 0xcc, 0xaf, 0x6b, 0xfd, 0xc9, 0x36, 0x23, 0x68,
0x6f, 0x94, 0x87, 0xef, 0x08, 0x84, 0xd1, 0x00, 0xb6,
0xb9, 0x89, 0x49, 0xaf, 0xbd, 0x42, 0x17, 0xdc, 0x46,
0x40 ),
AUTH ( 0x42, 0x18, 0xd6, 0xac, 0x98, 0xc0, 0x44, 0x4b, 0xc6, 0x4e,
0xcb, 0xe1, 0xd7, 0x63, 0x13, 0x6a ) );
/* AES-GCM test case 19 */
CIPHER_TEST ( wycheproof_aes_gcm_417222f0, &aes_gcm_algorithm,
KEY ( 0x3c, 0x55, 0xf8, 0x8e, 0x9f, 0xaa, 0x0d, 0x68, 0xab, 0x50,
0xd0, 0x2b, 0x47, 0x16, 0x12, 0x76 ),
IV ( 0xd7, 0x67, 0xc4, 0x8d, 0x20, 0x37, 0xb4, 0xbd, 0x2c, 0x23,
0x1b, 0xbd ),
ADDITIONAL(),
PLAINTEXT ( 0x5d, 0x6a, 0xdd, 0x48, 0xe7, 0xa5, 0x70, 0x4e, 0x54,
0xf9, 0xc2, 0x82, 0x9a, 0x9b, 0x42, 0x83, 0xdc, 0xe0,
0xd3, 0xa6, 0x5b, 0x13, 0x3e, 0xba, 0x37, 0x93, 0xc4,
0xfb, 0xfa, 0x1d, 0x8e, 0x3a, 0x25, 0x39, 0xd0, 0xd4,
0xf3, 0xde, 0x38, 0x15, 0x98, 0xce, 0x5b, 0x23, 0x60,
0x17, 0x3f, 0xbd, 0x14, 0x94, 0x76, 0xc3, 0x16, 0x92,
0xc5, 0xd6, 0xe8, 0x72, 0xfc, 0xe4, 0x02, 0x19, 0x37,
0x89, 0x49, 0xc2, 0xe7, 0x0b, 0x5f, 0x1b, 0x9f, 0x0a,
0x1d, 0x5f, 0x38, 0x35, 0x2a, 0xd8, 0x14, 0xb2, 0xa0,
0x35, 0xbb, 0x3f, 0x3f, 0x26, 0x42, 0x5d, 0x83, 0x1a,
0x2f, 0x7a, 0x5e, 0x65, 0xc5, 0xdf, 0xcd, 0x91, 0xa3,
0x15, 0xc2, 0xb2, 0x4f, 0x53, 0xa6, 0x62, 0x60, 0x5e,
0xa4, 0x08, 0x57, 0xdd, 0x98, 0x0e, 0x9b, 0xe5, 0xcd,
0xad, 0x00, 0x0c, 0x56, 0x9f, 0x2d, 0x20, 0x4d, 0x4b,
0xd3, 0xb0 ),
CIPHERTEXT ( 0x17, 0xd7, 0x2d, 0x90, 0xbd, 0x23, 0xe0, 0x76, 0xd8,
0x36, 0x4a, 0x87, 0xec, 0xb9, 0xac, 0x58, 0xac, 0xc5,
0xde, 0x46, 0x29, 0xbf, 0xd5, 0x90, 0x40, 0x9b, 0x8b,
0xf1, 0xfc, 0xd3, 0xa2, 0xf6, 0x02, 0x73, 0x1b, 0x46,
0x14, 0xce, 0xc1, 0x5e, 0x77, 0x3e, 0xa6, 0x5a, 0x65,
0xe7, 0x21, 0x09, 0x94, 0x25, 0x6b, 0xf5, 0x45, 0x0a,
0x25, 0xac, 0xb5, 0x27, 0x26, 0x9c, 0x06, 0x5f, 0x2e,
0x2f, 0x22, 0x79, 0xd1, 0xfe, 0x8b, 0x3e, 0xda, 0x98,
0xdc, 0xf8, 0x7b, 0x34, 0x8f, 0x15, 0x28, 0x37, 0x7b,
0xbd, 0xd2, 0x58, 0x35, 0x5d, 0x46, 0xe0, 0x35, 0x33,
0x04, 0x83, 0xd8, 0x09, 0x7e, 0x80, 0xc7, 0xde, 0x9b,
0xbb, 0x60, 0x6d, 0xdf, 0x72, 0x3f, 0x29, 0x09, 0x21,
0x7f, 0xfd, 0xd1, 0x8e, 0x8b, 0xdb, 0xd7, 0xb0, 0x80,
0x62, 0xf1, 0xdc, 0xba, 0x96, 0x0e, 0x5c, 0x0d, 0x29,
0x0f, 0x5f ),
AUTH ( 0x09, 0x0b, 0x8c, 0x2e, 0xc9, 0x8e, 0x41, 0x16, 0x18, 0x6d,
0x0e, 0x5f, 0xbe, 0xfe, 0xb9, 0xc2 ) );
/* AES-GCM test case 20 */
CIPHER_TEST ( wycheproof_aes_gcm_f01459e0, &aes_gcm_algorithm,
KEY ( 0x62, 0xb3, 0x88, 0x18, 0x32, 0xd4, 0x28, 0xb6, 0xf9, 0x00,
0xca, 0xcf, 0xa0, 0xfc, 0x5c, 0xd8 ),
IV ( 0xf4, 0xcb, 0x98, 0xcc, 0x99, 0xe7, 0xbc, 0x42, 0x4a, 0x98,
0x38, 0x4e ),
ADDITIONAL(),
PLAINTEXT ( 0x0b, 0x91, 0xdd, 0x36, 0xa6, 0xfa, 0x96, 0x7a, 0x25,
0x7b, 0x26, 0x7d, 0x12, 0xcb, 0xc2, 0x0b, 0x56, 0xed,
0x61, 0x5b, 0x20, 0x5d, 0x04, 0x4a, 0x04, 0xb4, 0xae,
0x8a, 0xaa, 0x36, 0x5b, 0xd2, 0x9a, 0x3b, 0x8f, 0x47,
0xa0, 0x82, 0x8e, 0xf6, 0x33, 0x24, 0xd1, 0xff, 0x92,
0x4c, 0x68, 0x09, 0x0a, 0xba, 0xaa, 0xd7, 0x8d, 0xf6,
0x02, 0xed, 0xee, 0x06, 0x21, 0xb8, 0x23, 0xf9, 0x4c,
0x35, 0xad, 0xa7, 0xb6, 0x2d, 0x81, 0xf2, 0x1d, 0xd9,
0x94, 0x5d, 0x1a, 0xbb, 0x4e, 0xf8, 0x82, 0xcf, 0xab,
0x12, 0xc2, 0xe4, 0xce, 0xc7, 0x05, 0xdf, 0x3d, 0x66,
0x91, 0x83, 0xfe, 0x68, 0x17, 0x53, 0x50, 0x3a, 0x99,
0xa8, 0x71, 0x63, 0x79, 0x53, 0x53, 0x7e, 0xf4, 0x79,
0xb1, 0xf6, 0x2d, 0xe7, 0x81, 0x9d, 0xbb, 0x5c, 0x95,
0x0d, 0xe7, 0x72, 0x20, 0x90, 0x94, 0x2d, 0x38, 0x12,
0x9a, 0xef, 0xa7 ),
CIPHERTEXT ( 0x00, 0x57, 0x46, 0x15, 0x88, 0x3e, 0x22, 0x26, 0x57,
0xbd, 0xf3, 0x4e, 0x93, 0x27, 0x88, 0x8f, 0x5d, 0x53,
0x2d, 0x08, 0x65, 0x81, 0x83, 0x4c, 0x62, 0xad, 0xf5,
0x4c, 0x7f, 0xee, 0x46, 0x92, 0x7c, 0xa2, 0x7c, 0xba,
0x19, 0x3d, 0x86, 0xc6, 0x14, 0x0b, 0x36, 0x10, 0xa2,
0xcd, 0x16, 0xba, 0x29, 0x58, 0x14, 0xb5, 0xb7, 0xd6,
0xa1, 0xc8, 0xd3, 0xf0, 0x39, 0xe0, 0xe8, 0xf8, 0xd7,
0x94, 0x2b, 0x06, 0x16, 0xa9, 0xb9, 0xf0, 0x01, 0x28,
0x84, 0x31, 0x1b, 0x0c, 0x37, 0x0f, 0x9d, 0xd6, 0xb9,
0xa3, 0xd8, 0xb6, 0xff, 0x36, 0x17, 0x76, 0x83, 0xc0,
0xdd, 0x85, 0x88, 0x50, 0xdd, 0x29, 0x99, 0x3b, 0x3e,
0xec, 0x89, 0xa2, 0xab, 0x80, 0x68, 0x03, 0x8e, 0x2c,
0x86, 0xa2, 0xe7, 0x1b, 0x5c, 0xac, 0xdb, 0x38, 0xad,
0x69, 0xac, 0x05, 0x80, 0xe2, 0x9a, 0x6f, 0x78, 0x13,
0xc1, 0x72, 0x58 ),
AUTH ( 0x88, 0xb9, 0x9f, 0x76, 0x83, 0x64, 0xff, 0x9e, 0x95, 0xa9,
0x4c, 0xcb, 0xbc, 0x1b, 0x16, 0x6e ) );
/* AES-GCM test case 21 */
CIPHER_TEST ( wycheproof_aes_gcm_bc589a7e, &aes_gcm_algorithm,
KEY ( 0x8a, 0xea, 0xa2, 0x59, 0x1a, 0x45, 0x2e, 0x62, 0x6b, 0x9a,
0x64, 0x68, 0xb6, 0x23, 0xbd, 0xfc ),
IV ( 0xb9, 0x0f, 0x44, 0x6f, 0x68, 0xae, 0xa5, 0x88, 0xd8, 0x43,
0xd0, 0x1a ),
ADDITIONAL(),
PLAINTEXT ( 0xf0, 0x72, 0x1c, 0x3b, 0x68, 0xd9, 0x05, 0x09, 0x2c,
0xad, 0xa6, 0xd5, 0x68, 0xdf, 0x3a, 0x2d, 0xa3, 0x95,
0x73, 0xc7, 0xbb, 0x0e, 0x9a, 0x4e, 0xd1, 0x59, 0xa2,
0x63, 0x42, 0x37, 0xf9, 0xe7, 0x88, 0x48, 0x8c, 0x06,
0xfe, 0x8a, 0x7e, 0x1e, 0x01, 0xd1, 0xa1, 0xc9, 0x85,
0x54, 0x3e, 0xcf, 0x90, 0xf3, 0xd3, 0x2e, 0x57, 0xd3,
0x3c, 0x3d, 0xf6, 0xc1, 0x65, 0xb7, 0xed, 0xc6, 0xfb,
0xcf, 0x8b, 0xf2, 0xd0, 0x43, 0xd1, 0xb7, 0xc0, 0x06,
0x03, 0x09, 0xa2, 0x95, 0x65, 0xa0, 0x04, 0xea, 0x32,
0x14, 0xd4, 0xe4, 0xf7, 0xde, 0xde, 0xac, 0x2d, 0x74,
0x57, 0x6c, 0x01, 0x9b, 0x5f, 0xa0, 0x00, 0xd0, 0x25,
0x91, 0x7a, 0xf6, 0xf8, 0x63, 0x10, 0x94, 0x21, 0x02,
0xa3, 0x4d, 0x92, 0x78, 0x19, 0x72, 0xd4, 0xf1, 0xf5,
0x7b, 0xbd, 0xd6, 0xf9, 0xb0, 0x8c, 0xc9, 0x79, 0xa3,
0x58, 0xaa, 0xcf, 0x6c, 0xb6, 0x23, 0x34, 0xbf, 0xc9,
0x16, 0xc2, 0x49, 0xf1, 0x8b, 0xce, 0xe6, 0x44, 0xa8,
0x90, 0x7e, 0xf5, 0x76, 0xb4, 0x14, 0x37, 0x09, 0x8b,
0xdf, 0x00, 0x69, 0x76, 0x7f, 0xb5, 0xed, 0x1c, 0x0f,
0x13, 0x85, 0xe5, 0x89, 0x5e, 0x4a, 0x5d, 0x70, 0xf5,
0x94, 0x1a, 0x93, 0x01, 0x43, 0x33, 0x43, 0x6a, 0x7a,
0xf4, 0x65, 0xec, 0x10, 0x38, 0xfd, 0xfa, 0x00, 0x64,
0x10, 0xa0, 0x87, 0x12, 0x25, 0xd6, 0x48, 0x48, 0xe6,
0xc5, 0x9a, 0xc2, 0x3f, 0x17, 0x6d, 0xf6, 0x63, 0xee,
0x21, 0x71, 0xc9, 0xea, 0xec, 0x04, 0x77, 0xf9, 0xeb,
0xd2, 0x80, 0x88, 0x0d, 0x9f, 0x29, 0x67, 0xa2, 0xe7,
0x91, 0xcc, 0x99, 0x8f, 0x6b, 0x23, 0x51, 0x8c, 0xa9,
0x7b, 0xbc, 0x64, 0x05, 0xd6, 0xce, 0xd3, 0x37, 0x3e,
0xbf, 0x3d, 0x20, 0x8c, 0x2a, 0x90, 0x92, 0x74, 0x46,
0x0a, 0x61, 0x4a ),
CIPHERTEXT ( 0x7b, 0xb3, 0x63, 0x13, 0x56, 0x9f, 0xf8, 0xb5, 0xc5,
0x8e, 0x41, 0xb1, 0x7a, 0x78, 0xfa, 0x5d, 0x78, 0x00,
0x73, 0xbe, 0xe2, 0x0b, 0x55, 0xf0, 0x04, 0x53, 0x22,
0x88, 0xe7, 0xf0, 0xa9, 0x47, 0x50, 0x76, 0x36, 0x4d,
0x89, 0x22, 0xd3, 0x89, 0xec, 0xd1, 0x89, 0xf5, 0x97,
0xa8, 0xa6, 0x77, 0xcb, 0x24, 0x84, 0x51, 0x3e, 0xd7,
0xaf, 0xe2, 0xd0, 0x69, 0x17, 0x17, 0xcd, 0x0a, 0xc0,
0xe2, 0x7b, 0xf7, 0xe2, 0x25, 0x7d, 0xd7, 0xe4, 0xff,
0xc0, 0xbb, 0xf5, 0x9e, 0x92, 0xd2, 0x58, 0xe1, 0x11,
0x6f, 0xac, 0x9b, 0xfc, 0x84, 0xa2, 0xdf, 0x72, 0x8b,
0xdd, 0x7a, 0xb2, 0x21, 0x75, 0x4d, 0xd3, 0x41, 0xf7,
0x22, 0x9e, 0x03, 0x0d, 0xce, 0x06, 0x47, 0x4d, 0x00,
0xf9, 0x9a, 0x5e, 0x45, 0x79, 0x43, 0xbd, 0x9e, 0x8f,
0x34, 0x5b, 0xcb, 0xb5, 0x40, 0x76, 0x90, 0xd0, 0x72,
0xdf, 0xb0, 0x11, 0x3b, 0x64, 0xbc, 0x0e, 0x65, 0x8e,
0xeb, 0x72, 0x26, 0x40, 0x9a, 0x58, 0x98, 0xdd, 0x27,
0xd9, 0x95, 0xa0, 0xbe, 0x02, 0x1f, 0x35, 0x10, 0x91,
0xf9, 0xb9, 0x07, 0xae, 0x3a, 0x96, 0x25, 0xf2, 0x40,
0xde, 0xe2, 0xbf, 0x4b, 0xb1, 0x5e, 0xb4, 0xf3, 0x0f,
0x4a, 0xbf, 0x1f, 0xf2, 0x5c, 0xa5, 0x53, 0x6d, 0xef,
0x96, 0x9d, 0x25, 0x88, 0x18, 0x8f, 0xec, 0xac, 0xfc,
0x7d, 0xc7, 0x5f, 0x5c, 0x67, 0x6c, 0xa7, 0x85, 0x1f,
0x9e, 0x80, 0x5f, 0x49, 0x83, 0x72, 0xc6, 0xb9, 0x8f,
0x5c, 0x7d, 0x12, 0x40, 0x37, 0x23, 0x61, 0x9f, 0x80,
0xce, 0x5b, 0xad, 0xfe, 0x58, 0x44, 0x64, 0x3d, 0x56,
0x31, 0xd4, 0x99, 0x8e, 0xe0, 0x42, 0x6a, 0x2b, 0x29,
0x15, 0x9c, 0xae, 0x25, 0x90, 0xdc, 0x81, 0x64, 0x6c,
0x78, 0xbe, 0x5c, 0x9e, 0x8f, 0xfe, 0x05, 0x6a, 0xa0,
0xd3, 0x55, 0x2e ),
AUTH ( 0xfc, 0x62, 0x29, 0x5c, 0x70, 0xd1, 0x40, 0xdb, 0xc3, 0x54,
0xfd, 0xbc, 0x80, 0x03, 0xeb, 0x41 ) );
/* AES-GCM test case 22 */
CIPHER_TEST ( wycheproof_aes_gcm_d63ed865, &aes_gcm_algorithm,
KEY ( 0xe8, 0x8d, 0x95, 0xea, 0xbe, 0x88, 0xfc, 0xf1, 0x58, 0xfa,
0xe8, 0x58, 0xaf, 0x95, 0x12, 0x21 ),
IV ( 0xa6, 0x58, 0x34, 0xa9, 0xd2, 0x31, 0xb3, 0x47, 0x09, 0x38,
0x3e, 0x9a ),
ADDITIONAL(),
PLAINTEXT ( 0x2d, 0xec, 0xac, 0xcc, 0x8b, 0x42, 0x4f, 0xa4, 0x96,
0x38, 0x90, 0xec, 0xe1, 0x5b, 0x3f, 0xc2, 0x81, 0xb6,
0x21, 0x57, 0x80, 0xff, 0x6b, 0xae, 0xe5, 0x7e, 0xdc,
0xd2, 0x5a, 0xfe, 0x26, 0x0f, 0xf8, 0x0e, 0xd4, 0xf2,
0x5c, 0xc0, 0x4d, 0x28, 0x02, 0xa1, 0xe9, 0x0a, 0x2e,
0x6e, 0x96, 0xd1, 0xee, 0x73, 0xa4, 0xa5, 0x3d, 0xcf,
0x60, 0x02, 0x5d, 0x48, 0x40, 0x54, 0xd1, 0x46, 0xf2,
0x75, 0xab, 0x34, 0xc3, 0x3b, 0x10, 0x20, 0x01, 0xa0,
0x7d, 0x80, 0x4c, 0xc9, 0x4a, 0x40, 0xfd, 0x78, 0xc1,
0x67, 0x80, 0xd1, 0xb6, 0x48, 0x48, 0x7f, 0xac, 0x03,
0x53, 0x86, 0xe5, 0xd2, 0x5c, 0x2b, 0x9e, 0xdb, 0xf7,
0xa5, 0x2d, 0x10, 0x2d, 0x19, 0x43, 0x95, 0x8c, 0x00,
0x9e, 0xb6, 0xd8, 0x8e, 0x00, 0xa3, 0x22, 0x7c, 0x4c,
0x78, 0x8e, 0x44, 0x50, 0x03, 0xfa, 0xbb, 0x4d, 0xbe,
0xfc, 0xcd, 0x3f, 0xe1, 0x71, 0x6d, 0x91, 0x64, 0x46,
0xfe, 0xe2, 0x11, 0x16, 0x15, 0xd5, 0x60, 0xec, 0xc5,
0x9d, 0x7b, 0xd2, 0x88, 0x26, 0x8a, 0xb3, 0x21, 0xe7,
0x00, 0x25, 0x45, 0x88, 0x71, 0x83, 0xfe, 0x02, 0x3f,
0xde, 0xc2, 0xa6, 0xd3, 0xb7, 0x3b, 0x94, 0xd1, 0x54,
0x8c, 0xee, 0x19, 0x63, 0x8d, 0x31, 0xd2, 0xc5, 0xa3,
0x2b, 0x15, 0xd2, 0xaa, 0xe3, 0xf4, 0x29, 0x50, 0xa7,
0x87, 0x11, 0x5e, 0x20, 0x0b, 0x00, 0x02, 0x2d, 0x49,
0x29, 0x10, 0x5d, 0xa0, 0xb4, 0xd1, 0x0c, 0xcb, 0x0b,
0x38, 0x86, 0xb3, 0x16, 0x9b, 0x32, 0xac, 0x5d, 0xf7,
0xa6, 0x37, 0xc2, 0x33, 0x62, 0xe2, 0xd4, 0xed, 0x9c,
0x13, 0x7f, 0x35, 0xbb, 0xd5, 0x78, 0xc2, 0xcd, 0xa0,
0x37, 0x7e, 0x0f, 0x1e, 0x64, 0xf7, 0xd3, 0x1e, 0x9e,
0xf4, 0xd7, 0x60, 0x3e, 0xa1, 0x36, 0x35, 0x23, 0x75,
0x83, 0x85, 0xc7, 0x61 ),
CIPHERTEXT ( 0x9b, 0x38, 0x33, 0xc3, 0x56, 0xf8, 0x3d, 0x19, 0xf5,
0x9a, 0xc4, 0x77, 0x0c, 0x95, 0x86, 0xaa, 0xd4, 0x57,
0x81, 0x0f, 0x9d, 0xc5, 0x51, 0x12, 0xcc, 0x6b, 0x87,
0xe9, 0x4d, 0x8d, 0xc7, 0x11, 0x84, 0xb2, 0x27, 0xa1,
0x45, 0x00, 0xc0, 0xa8, 0x61, 0x9d, 0x54, 0x44, 0x35,
0xdb, 0x4c, 0x00, 0x14, 0x67, 0xef, 0x2a, 0xcb, 0xa9,
0x50, 0x07, 0x29, 0x9d, 0x71, 0x7f, 0xad, 0xc0, 0xc0,
0x71, 0x7c, 0x4c, 0x8e, 0x74, 0x8d, 0x03, 0xff, 0xe2,
0xcf, 0x2f, 0xd0, 0x6f, 0x00, 0x09, 0xb0, 0xe6, 0x59,
0x0f, 0x95, 0x6c, 0x21, 0x2a, 0x2c, 0x92, 0x6d, 0x56,
0x79, 0xbd, 0xbb, 0x79, 0xd8, 0x76, 0x36, 0xae, 0x9f,
0xae, 0xfa, 0x5c, 0x83, 0x30, 0xc5, 0x70, 0xe8, 0x4b,
0x94, 0x62, 0x6f, 0x87, 0xd6, 0xa5, 0x3b, 0x12, 0x15,
0x74, 0xf7, 0x4c, 0x9e, 0x32, 0x11, 0xd9, 0x45, 0x18,
0x11, 0xe9, 0x94, 0x0d, 0xb5, 0xe7, 0x4d, 0x12, 0x83,
0x64, 0x32, 0x8f, 0xb8, 0xf4, 0x0f, 0x85, 0x0a, 0x25,
0xc3, 0xe7, 0xba, 0x4f, 0xde, 0xb0, 0xef, 0x6a, 0x63,
0x90, 0x60, 0xa1, 0x1d, 0x1c, 0x32, 0xae, 0x05, 0x31,
0xd2, 0x51, 0x8f, 0x90, 0x59, 0x52, 0xc9, 0x81, 0x42,
0x36, 0xb0, 0x0b, 0x93, 0x93, 0xfd, 0x31, 0xf8, 0xc0,
0x52, 0x2f, 0x8e, 0x30, 0x72, 0xb8, 0x64, 0xa3, 0xa5,
0xce, 0xbe, 0x1c, 0xeb, 0x15, 0x58, 0x5c, 0x90, 0x42,
0xf3, 0xf5, 0xb9, 0x53, 0x90, 0xc6, 0x2d, 0x8c, 0x1b,
0x51, 0x35, 0x50, 0xde, 0xfd, 0x21, 0xb4, 0x81, 0xfc,
0xfb, 0xd9, 0xfd, 0xd6, 0xc2, 0x62, 0xff, 0x6e, 0xd4,
0xe0, 0xa6, 0x05, 0x1b, 0xe3, 0x09, 0x78, 0x8a, 0x76,
0x3e, 0x56, 0x71, 0x07, 0xf0, 0x39, 0xe9, 0x88, 0x75,
0x7f, 0x96, 0xad, 0x95, 0x43, 0x67, 0x92, 0xa3, 0xbd,
0x26, 0xf3, 0x85, 0x90 ),
AUTH ( 0x4f, 0x4c, 0x26, 0x5e, 0xdd, 0x31, 0x58, 0xc6, 0x41, 0xce,
0x95, 0x55, 0xb5, 0x86, 0x50, 0xdb ) );
/* AES-GCM test case 23 */
CIPHER_TEST ( wycheproof_aes_gcm_d08a751a, &aes_gcm_algorithm,
KEY ( 0xa2, 0x94, 0xe7, 0x0f, 0xa2, 0xac, 0x10, 0xa1, 0xfb, 0x00,
0xc5, 0x88, 0xb8, 0x88, 0xb6, 0x73 ),
IV ( 0xdf, 0xe2, 0x0d, 0x1c, 0x43, 0x50, 0xe6, 0x23, 0x5d, 0x98,
0x7a, 0xf1 ),
ADDITIONAL(),
PLAINTEXT ( 0x6e, 0xd1, 0xd7, 0xd6, 0x18, 0xd1, 0x58, 0x74, 0x1f,
0x52, 0x07, 0x80, 0x06, 0xf2, 0x84, 0x94, 0xba, 0x72,
0xa2, 0x45, 0x4f, 0x27, 0x16, 0x0a, 0xe8, 0x72, 0x27,
0x93, 0xfc, 0xeb, 0xc5, 0x38, 0xeb, 0xc2, 0xf6, 0x7c,
0x3a, 0xce, 0x3e, 0x0f, 0xe7, 0xc4, 0x7b, 0x9e, 0x74,
0xe0, 0x81, 0x18, 0x2b, 0x47, 0xc9, 0x30, 0x14, 0x4e,
0x3f, 0xc8, 0x0d, 0x0a, 0xd5, 0x06, 0x11, 0xc3, 0xaf,
0xcf, 0xe2, 0xdb, 0xc5, 0x27, 0x9e, 0xdb, 0xbb, 0xa0,
0x87, 0xc0, 0xe3, 0x90, 0x35, 0x5f, 0x3d, 0xaf, 0xfc,
0xd2, 0x5a, 0xd4, 0xde, 0xa0, 0x07, 0xc2, 0x84, 0xad,
0x92, 0xe7, 0xfc, 0xbe, 0xcb, 0x43, 0x8f, 0xb6, 0x06,
0x23, 0xff, 0x89, 0xa5, 0x99, 0xdc, 0xa2, 0xaa, 0xc1,
0x41, 0xb2, 0x66, 0x51, 0x38, 0x6c, 0xa5, 0x5b, 0x73,
0x9b, 0x94, 0x90, 0x1e, 0xf6, 0xdb, 0x60, 0x9c, 0x34,
0x4d, 0x8a, 0xcf, 0x45, 0x44, 0x56, 0x8e, 0x31, 0xbb,
0x09, 0x36, 0x11, 0x12, 0x75, 0x4b, 0x1c, 0x0c, 0x6a,
0x3c, 0x87, 0x5b, 0xd9, 0x45, 0x3b, 0x0e, 0xe0, 0x08,
0x14, 0x12, 0x15, 0x13, 0x98, 0xa2, 0x94, 0xec, 0xad,
0x75, 0xad, 0xd5, 0x21, 0x61, 0x1d, 0xb5, 0x28, 0x8b,
0x60, 0xac, 0x3c, 0x01, 0x28, 0xf6, 0xe9, 0x43, 0x66,
0xb6, 0x9e, 0x65, 0x9e, 0x6a, 0xa6, 0x6f, 0x05, 0x8a,
0x3a, 0x35, 0x71, 0x06, 0x4e, 0xdb, 0xb0, 0xf0, 0x5c,
0x11, 0xe5, 0xdd, 0xe9, 0x38, 0xfb, 0x46, 0xc3, 0x93,
0x5d, 0xd5, 0x19, 0x3a, 0x4e, 0x56, 0x64, 0x68, 0x8f,
0x0a, 0xe6, 0x7c, 0x29, 0xb7, 0xcc, 0x49, 0xa7, 0x96,
0x31, 0x40, 0xf8, 0x2e, 0x31, 0x1a, 0x20, 0xc9, 0x8c,
0xd3, 0x4f, 0xbc, 0xab, 0x7b, 0x4b, 0x51, 0x5a, 0xe8,
0x65, 0x57, 0xe6, 0x20, 0x99, 0xe3, 0xfc, 0x37, 0xb9,
0x59, 0x5c, 0x85, 0xa7, 0x5c ),
CIPHERTEXT ( 0x5b, 0xc6, 0xdb, 0xaf, 0xc4, 0x01, 0x10, 0x1c, 0x7a,
0x08, 0xc8, 0x1d, 0x6c, 0x27, 0x91, 0xaa, 0x14, 0x7c,
0xe0, 0x93, 0xaa, 0xd1, 0x72, 0xbe, 0x18, 0x37, 0x9c,
0x74, 0x73, 0x84, 0xa5, 0x4a, 0x41, 0xa7, 0x47, 0xba,
0x95, 0x5c, 0xad, 0xe8, 0xfd, 0xfb, 0x89, 0x67, 0xaa,
0x80, 0x8b, 0x43, 0xfe, 0xe3, 0xd7, 0x57, 0xcc, 0x80,
0xf1, 0x11, 0x63, 0xb8, 0x00, 0xe5, 0xe5, 0x9d, 0xf9,
0x32, 0x75, 0x7f, 0x76, 0xc4, 0x0b, 0x3d, 0x9c, 0xba,
0x44, 0x9a, 0xaf, 0x11, 0xe4, 0xf8, 0x0e, 0x00, 0x3b,
0x1f, 0x38, 0x4e, 0xaf, 0xa4, 0xf7, 0x6e, 0x81, 0xb1,
0x3c, 0x09, 0xec, 0x1a, 0xd8, 0x8e, 0x76, 0x50, 0xc7,
0x50, 0xd4, 0x42, 0xfe, 0x46, 0xd2, 0x25, 0xa3, 0x73,
0xe8, 0xa1, 0xb5, 0x64, 0xb4, 0x91, 0x5a, 0x5c, 0x6c,
0x51, 0x3c, 0xfd, 0xfa, 0x22, 0xd9, 0x29, 0xd5, 0x74,
0x1c, 0xa5, 0xeb, 0xef, 0xae, 0xdc, 0xba, 0x63, 0x6c,
0x7c, 0x3b, 0xbe, 0xf1, 0x88, 0x63, 0xfd, 0xc1, 0x26,
0xb4, 0xb4, 0x51, 0x61, 0x10, 0x49, 0xc3, 0x5d, 0x81,
0x4f, 0xc2, 0xeb, 0x7e, 0x4b, 0x8f, 0x1a, 0x89, 0x95,
0xec, 0xb4, 0xa3, 0xc8, 0x66, 0x52, 0xa0, 0x68, 0xc0,
0xb2, 0xa3, 0xe1, 0xc5, 0x94, 0x1d, 0x59, 0xc2, 0x10,
0xb4, 0x58, 0xd5, 0xd5, 0xd3, 0xb0, 0x64, 0x20, 0xec,
0x20, 0x53, 0x46, 0x5c, 0xcc, 0xec, 0xa7, 0xc2, 0x0f,
0x67, 0x40, 0x49, 0x85, 0x46, 0x03, 0x79, 0xe2, 0xee,
0x80, 0x6a, 0x46, 0xe8, 0x40, 0x9d, 0xfa, 0xb2, 0xe0,
0xdd, 0x67, 0xea, 0x3c, 0xf4, 0x6d, 0x5a, 0xd4, 0xeb,
0x78, 0x75, 0x68, 0x27, 0x35, 0x8c, 0x3e, 0xf1, 0xfd,
0xbd, 0x07, 0xc3, 0x38, 0x34, 0xf3, 0xd9, 0xec, 0xa3,
0xff, 0x13, 0xb7, 0x44, 0xa0, 0x10, 0x59, 0xa6, 0xc1,
0x7a, 0x31, 0x5a, 0x8f, 0xd4 ),
AUTH ( 0xc7, 0x58, 0x7e, 0x7d, 0xa4, 0x1b, 0xed, 0x68, 0x2c, 0x37,
0x37, 0x7e, 0xa4, 0x32, 0x40, 0x29 ) );
/* AES-GCM test case 24 */
CIPHER_TEST ( wycheproof_aes_gcm_471d4ead, &aes_gcm_algorithm,
KEY ( 0x4a, 0x30, 0xea, 0xc0, 0x7b, 0x78, 0x8b, 0x73, 0x54, 0xa9,
0x0e, 0x64, 0x48, 0xf5, 0x66, 0x76 ),
IV ( 0xc3, 0x59, 0xd5, 0x67, 0x61, 0x6b, 0x63, 0x84, 0xac, 0x20,
0xa4, 0x3f ),
ADDITIONAL(),
PLAINTEXT ( 0x9a, 0x17, 0xb9, 0xd1, 0xdb, 0xe6, 0x66, 0xf7, 0x43,
0x1c, 0xbd, 0xd3, 0xb3, 0x17, 0x39, 0x48, 0xc7, 0xac,
0x13, 0xf2, 0x68, 0xe1, 0x28, 0x07, 0x25, 0x6d, 0x2e,
0x58, 0x31, 0xae, 0x67, 0xa1, 0x41, 0x16, 0x14, 0x49,
0x10, 0xb3, 0x83, 0x68, 0x93, 0x45, 0x71, 0xda, 0xff,
0x9d, 0x40, 0x04, 0xba, 0x95, 0x9b, 0x3c, 0xae, 0x26,
0x69, 0xe6, 0xee, 0xd4, 0x9e, 0x75, 0x0c, 0xa2, 0x28,
0x41, 0x5c, 0x6f, 0x7d, 0x1c, 0x1f, 0x2d, 0x3d, 0xbb,
0x02, 0xf4, 0xdf, 0xa4, 0x94, 0x83, 0xa7, 0xf8, 0x0f,
0xbc, 0xc1, 0xcb, 0x01, 0xd2, 0x2c, 0x67, 0x81, 0x7c,
0xc7, 0xa2, 0xbd, 0x27, 0x14, 0xeb, 0x62, 0xcd, 0xf8,
0xfb, 0x88, 0x4a, 0x66, 0xed, 0x24, 0x51, 0x67, 0xcd,
0xb2, 0x2e, 0x0d, 0xbc, 0x7b, 0x15, 0x3e, 0x64, 0x87,
0x14, 0xdf, 0xe8, 0x34, 0x14, 0x69, 0x6c, 0xff, 0xa8,
0x92, 0xda, 0xf5, 0xaf, 0x88, 0x20, 0xd5, 0x62, 0xbd,
0xf5, 0x5f, 0x76, 0xbe, 0x55, 0x84, 0xa3, 0x4b, 0x7e,
0x34, 0x9d, 0x10, 0xd7, 0x6c, 0x6e, 0x68, 0x30, 0x58,
0x35, 0xb5, 0x51, 0xa4, 0x1e, 0xbf, 0x48, 0xe0, 0x68,
0x32, 0x0d, 0x87, 0x53, 0x34, 0xa6, 0xa2, 0xd3, 0x10,
0x8b, 0x1e, 0x93, 0xf7, 0xaa, 0x8d, 0xa4, 0x85, 0xd7,
0xa5, 0x47, 0x0d, 0x80, 0x5e, 0x0d, 0xd3, 0x8c, 0x09,
0xfe, 0xaa, 0x0f, 0x49, 0x4d, 0x05, 0x72, 0xde, 0x31,
0x4a, 0x28, 0x74, 0x39, 0xf4, 0x8a, 0xee, 0x5a, 0x2f,
0xa8, 0xe9, 0x85, 0x0c, 0x61, 0x27, 0xee, 0x88, 0xd5,
0x0c, 0x5e, 0x8a, 0x2a, 0xc3, 0xea, 0xa7, 0xb2, 0xfd,
0xd1, 0x58, 0x98, 0x13, 0xfb, 0x3a, 0xff, 0xa6, 0x58,
0x98, 0x31, 0xdf, 0x13, 0x2b, 0xd5, 0x76, 0xfb, 0xed,
0x21, 0x71, 0x7e, 0x2b, 0x67, 0x66, 0xe5, 0x93, 0xed,
0x74, 0xda, 0xb3, 0x5d, 0xa1, 0x25, 0xc4, 0x33, 0x76,
0x3e, 0xa9, 0x02, 0x34, 0xdc, 0x6f, 0x01, 0xd3, 0x7b,
0xe1, 0x4c, 0x78, 0xb8, 0x86, 0x1b, 0xe1, 0xfb, 0x4c,
0x82, 0x96, 0xb3, 0xfa, 0xee, 0x65, 0xb6, 0xef, 0x8a,
0x9d, 0xaa, 0x68, 0x84, 0xe9, 0x36, 0x35, 0x93, 0x46,
0xf2, 0xda, 0x9f, 0x69, 0x81, 0xf9, 0xd6, 0x4f, 0x67,
0x67, 0x67, 0x64, 0x1a, 0xda, 0x62, 0x8a, 0xa8, 0xc7,
0x12, 0x93, 0x26, 0xbd, 0x4e, 0xe5, 0x7e, 0x51, 0x5a,
0x2f, 0x78, 0xba, 0x18, 0xc5, 0x95, 0xb9, 0xbc, 0x1d,
0x0f, 0x49, 0x06, 0x87, 0x34, 0xa6, 0x7e, 0x63, 0x55,
0x54, 0xee, 0xe6, 0x88, 0x81, 0x60, 0x61, 0xe9, 0x04,
0xa4, 0xe0, 0x51, 0x25, 0xd0, 0xe7, 0x79, 0x73, 0x05,
0x45, 0x1a, 0x7c, 0x3a, 0x1a, 0x3c, 0x50, 0x7d, 0xae,
0xdb, 0x99, 0x0c, 0x12, 0xca, 0x29, 0x0a, 0x0f, 0x55,
0x4a, 0xa8, 0xe8, 0x34, 0x65, 0x3a, 0xa2, 0x1a, 0x04,
0x69, 0xd3, 0xb0, 0xc0, 0x8e, 0xe5, 0x12, 0xb3, 0x23,
0xcb, 0x19, 0x37, 0x79, 0xc9, 0xfe, 0x2f, 0x2b, 0x3f,
0x03, 0x79, 0x4c, 0xd4, 0x2f, 0x02, 0x20, 0x03, 0x1d,
0x0c, 0x8e, 0xeb, 0x9c, 0x73, 0xa3, 0x28, 0x3a, 0x59,
0x9b, 0xc7, 0x8d, 0xa3, 0xb5, 0xb4, 0x1b, 0x24, 0x3e,
0xdf, 0x08, 0x2b, 0x23, 0x80, 0x1a, 0x15, 0xd9, 0x95,
0x6f, 0xca, 0x60, 0xf3, 0x5a, 0xcf, 0xb6, 0x5c, 0x4d,
0x06, 0xd2, 0x8a, 0xff, 0x81, 0xa1, 0xca, 0x98, 0xc6,
0xfa, 0xf8, 0x64, 0x5b, 0xe9, 0x20, 0xbd, 0x87, 0xc0,
0x3c, 0x05, 0x4a, 0x04, 0x69, 0xb2, 0x92, 0xae, 0x34,
0xd0, 0x58, 0x60, 0xe8, 0xd9, 0xb0, 0x61, 0x30, 0x03,
0x70, 0x46, 0x3d, 0xcd, 0x5f, 0xcd, 0x6f, 0xb1, 0xd6,
0xb1, 0xac, 0xc9, 0xb4, 0xeb, 0x25, 0xca, 0xbd, 0x9d,
0xe4, 0xe6, 0x1d, 0x44, 0x92, 0x2f, 0xcc ),
CIPHERTEXT ( 0x3e, 0x13, 0x58, 0x8d, 0x5a, 0x01, 0x4d, 0xcc, 0x1c,
0xbf, 0x46, 0xbd, 0x6c, 0x3f, 0x06, 0xdf, 0xbe, 0xf1,
0x46, 0x46, 0x49, 0xe7, 0x9a, 0x9b, 0xcb, 0xd9, 0x94,
0x84, 0x68, 0x6d, 0x72, 0x65, 0x38, 0x27, 0x88, 0x2d,
0xba, 0x80, 0x3a, 0x56, 0x83, 0xf8, 0x2a, 0x9b, 0xdf,
0xec, 0x6b, 0x44, 0xb2, 0x9b, 0x7c, 0x13, 0xf3, 0xf2,
0xb5, 0xdb, 0xc6, 0x75, 0x78, 0x05, 0x40, 0xf6, 0xa8,
0xa0, 0x8e, 0x45, 0xf5, 0x9f, 0xa8, 0x80, 0x21, 0x09,
0x5f, 0x8b, 0x3d, 0xb5, 0xf1, 0x0b, 0xc2, 0x17, 0x21,
0xa5, 0x6d, 0x65, 0xa5, 0x89, 0x21, 0x6c, 0xbc, 0x5b,
0x19, 0x15, 0xcb, 0xe7, 0xe2, 0xf8, 0x61, 0x2a, 0x9d,
0x24, 0xb3, 0x0e, 0xcd, 0xe2, 0xa2, 0x96, 0xa9, 0x6f,
0x48, 0xad, 0x11, 0x60, 0x72, 0x05, 0x37, 0x31, 0x22,
0x08, 0xe9, 0xb6, 0x82, 0x4e, 0x64, 0x13, 0xf2, 0x08,
0x4f, 0x22, 0x9d, 0xc6, 0xe9, 0x53, 0xc4, 0xb8, 0xa0,
0x54, 0xe3, 0xc3, 0x68, 0xef, 0x1f, 0x70, 0xdd, 0x9c,
0xf2, 0x76, 0xca, 0xa4, 0xcc, 0x25, 0x1e, 0x47, 0x5f,
0x50, 0x7a, 0x2b, 0xd0, 0x72, 0xb7, 0xf4, 0xa1, 0x31,
0x13, 0x02, 0xf6, 0x17, 0xe2, 0xcc, 0x59, 0x4e, 0xb6,
0xa0, 0xc4, 0x9a, 0xc1, 0x73, 0xdb, 0x07, 0x83, 0x19,
0x45, 0xf5, 0x12, 0x9a, 0x38, 0xe4, 0x51, 0x35, 0xbe,
0xb9, 0x7b, 0x39, 0x39, 0x3f, 0x73, 0xd0, 0x97, 0x7e,
0x32, 0x48, 0x20, 0x53, 0x3f, 0x3d, 0xd7, 0x52, 0x05,
0x19, 0x96, 0x54, 0x3a, 0x06, 0x20, 0xeb, 0xba, 0x50,
0x28, 0x89, 0x23, 0xf1, 0xd0, 0x18, 0x1b, 0xad, 0xb2,
0x20, 0x4c, 0x74, 0x69, 0xe8, 0xb4, 0xb5, 0xd1, 0x4a,
0x98, 0x4c, 0x3f, 0x0f, 0x3d, 0x34, 0xbb, 0x38, 0x34,
0x16, 0x14, 0x9e, 0x0a, 0x0c, 0xa1, 0x4f, 0x4f, 0x6d,
0xfe, 0x58, 0x90, 0x2a, 0x48, 0xec, 0xd3, 0xbd, 0xbc,
0x02, 0xa8, 0xc8, 0x4b, 0xb3, 0x03, 0xe8, 0x34, 0x91,
0x82, 0x4b, 0x2c, 0xa9, 0x76, 0x99, 0x1b, 0x22, 0x9d,
0x71, 0x5a, 0xf2, 0xbf, 0x4b, 0xa3, 0x38, 0x5d, 0x7d,
0x93, 0xe3, 0xad, 0xa5, 0x2f, 0x12, 0x31, 0x7b, 0x73,
0xe2, 0x93, 0x96, 0x28, 0xd7, 0x58, 0x98, 0x10, 0xd6,
0xa2, 0x78, 0xd4, 0xc2, 0x4e, 0x90, 0x7b, 0x4f, 0xfc,
0xe0, 0xd1, 0x77, 0xb0, 0x40, 0xe9, 0xdc, 0xe9, 0x7b,
0x63, 0xc9, 0xb8, 0xc1, 0x74, 0x3a, 0xd6, 0xfe, 0xbd,
0x0c, 0x9a, 0x27, 0x3f, 0x64, 0x8b, 0x91, 0xba, 0x5b,
0x57, 0x19, 0x15, 0x97, 0x85, 0xdb, 0x77, 0x0c, 0x66,
0x42, 0x90, 0xe9, 0x3d, 0x69, 0xba, 0x14, 0x75, 0x7d,
0x8b, 0xba, 0x68, 0xf0, 0xf9, 0x3a, 0x13, 0x60, 0x31,
0xa9, 0x7c, 0x72, 0xf2, 0xbe, 0x6b, 0xf9, 0xe1, 0x52,
0x37, 0xe9, 0x98, 0x39, 0x59, 0x30, 0xb4, 0xd1, 0xf8,
0x7b, 0x57, 0xa5, 0xfa, 0x65, 0x49, 0x4d, 0xc8, 0xfe,
0xb7, 0x61, 0xbd, 0xaf, 0xfe, 0xd4, 0xb3, 0xbf, 0x00,
0x73, 0xe9, 0x24, 0x4a, 0xbb, 0x4a, 0x3a, 0x7e, 0x15,
0xe2, 0xd5, 0x2a, 0x3b, 0xb8, 0x44, 0x67, 0x66, 0xf0,
0xe7, 0x56, 0x37, 0x02, 0xa9, 0x43, 0xdd, 0x16, 0xd5,
0xdb, 0x9d, 0xbe, 0xcb, 0x00, 0x44, 0xe4, 0x62, 0xbe,
0xd1, 0x7e, 0xab, 0x81, 0xb3, 0x12, 0xaa, 0x4f, 0x32,
0x41, 0x5d, 0xb8, 0xf0, 0x9b, 0xc0, 0xcc, 0x2d, 0xb7,
0x40, 0x6f, 0x4f, 0x67, 0x86, 0x2a, 0xf9, 0x86, 0xb9,
0x65, 0x23, 0x79, 0x13, 0xd1, 0x19, 0xca, 0x85, 0xb8,
0xd6, 0x4b, 0x4e, 0x61, 0x00, 0x34, 0x89, 0x1f, 0x78,
0x43, 0x3f, 0x37, 0x0f, 0xbe, 0x6c, 0x99, 0x96, 0xa6,
0x9d, 0x0d, 0xe3, 0x08, 0xed, 0x68, 0x5f, 0x43, 0x39,
0xf9, 0xb6, 0x7f, 0xa5, 0xec, 0x10, 0x0e ),
AUTH ( 0x58, 0x74, 0x3a, 0x6d, 0x49, 0x27, 0x2d, 0xf2, 0x01, 0xd8,
0x1d, 0xcc, 0xcd, 0xaf, 0x76, 0xfa ) );
/* AES-GCM test case 25 */
CIPHER_TEST ( wycheproof_aes_gcm_7ff74d83, &aes_gcm_algorithm,
KEY ( 0xfc, 0x8e, 0x6d, 0x2c, 0x7f, 0x42, 0xca, 0xb5, 0x93, 0x75,
0x32, 0x72, 0x85, 0xcc, 0x33, 0x98 ),
IV ( 0x49, 0xe1, 0xe0, 0x0c, 0x48, 0xea, 0xf1, 0xb5, 0xb9, 0xd2,
0xcb, 0x45 ),
ADDITIONAL(),
PLAINTEXT ( 0x21, 0x21, 0xb0, 0x69, 0x90, 0xdc, 0xde, 0x28, 0x85,
0x73, 0x90, 0x32, 0x62, 0x2f, 0xd7, 0x02, 0x94, 0x17,
0x40, 0x74, 0xbf, 0xfd, 0xf4, 0x0b, 0x01, 0xf3, 0x55,
0x4d, 0x5d, 0x87, 0x24, 0x2d, 0xa6, 0x16, 0x73, 0xfe,
0x9b, 0x16, 0x87, 0x77, 0x1f, 0xf1, 0xcc, 0x33, 0x0d,
0x7b, 0x8a, 0x51, 0x38, 0xf6, 0x59, 0x8d, 0x81, 0x60,
0xec, 0x90, 0xa4, 0x81, 0x6a, 0x6d, 0xba, 0xb3, 0x10,
0xf2, 0xc9, 0x9a, 0xb1, 0x9c, 0x49, 0xd8, 0xa5, 0xd0,
0x4e, 0xed, 0x4b, 0x93, 0xcd, 0x76, 0x15, 0x97, 0x66,
0x54, 0x8e, 0x13, 0x65, 0x17, 0xec, 0xfb, 0x6a, 0xa7,
0xad, 0x51, 0xe5, 0xff, 0x6d, 0x08, 0x3c, 0x0e, 0x53,
0x53, 0x36, 0x92, 0x38, 0x8e, 0x65, 0x1e, 0xa9, 0xcb,
0xa9, 0x46, 0x93, 0x11, 0x8e, 0x46, 0x99, 0x92, 0x64,
0x76, 0xfe, 0xa7, 0x85, 0xd2, 0xca, 0xc0, 0x21, 0x3a,
0xa6, 0x8a, 0xe0, 0xa3, 0x66, 0x92, 0x35, 0x32, 0xd3,
0x33, 0xef, 0x13, 0x3b, 0x49, 0x0a, 0x46, 0x67, 0x60,
0x6f, 0x72, 0x94, 0xdb, 0x8c, 0x6a, 0x45, 0x30, 0x40,
0x74, 0x09, 0xb5, 0x1e, 0x80, 0x34, 0x93, 0xd4, 0x66,
0x38, 0xfb, 0xa1, 0x51, 0xb2, 0x03, 0x1f, 0x82, 0x08,
0xd5, 0x95, 0xb4, 0xe4, 0xae, 0x55, 0xdb, 0x66, 0xcd,
0x7c, 0x32, 0x87, 0x53, 0xcf, 0xa0, 0xf6, 0x44, 0x43,
0x8b, 0x0b, 0xff, 0x4f, 0x87, 0xd9, 0xb7, 0xc5, 0x64,
0x8e, 0x5d, 0x2e, 0x80, 0x57, 0xe0, 0xb2, 0x0d, 0x55,
0x0c, 0xf1, 0xd0, 0xaa, 0x13, 0x90, 0x06, 0x47, 0xc3,
0x32, 0x90, 0x9b, 0x50, 0xf8, 0xec, 0xb1, 0xee, 0x14,
0x83, 0x42, 0xaa, 0xc7, 0x05, 0xb2, 0x82, 0x15, 0x90,
0x00, 0x30, 0xbf, 0xd9, 0x0c, 0xa1, 0x44, 0x6e, 0x3a,
0x03, 0xce, 0xb2, 0xab, 0x71, 0xa9, 0xce, 0xb3, 0xd8,
0xf0, 0xb4, 0x62, 0x6f, 0xeb, 0xf1, 0xdc, 0xff, 0x3c,
0x1f, 0x5a, 0xe0, 0xfe, 0xf4, 0xc0, 0xf7, 0x46, 0x23,
0xba, 0x47, 0xeb, 0x5f, 0xdc, 0x42, 0xd4, 0x2a, 0x20,
0x39, 0xf4, 0x5e, 0x59, 0x87, 0x62, 0x4d, 0x97, 0xd0,
0xfc, 0xfb, 0x95, 0xf7, 0x4c, 0x47, 0x8d, 0x61, 0x3b,
0x90, 0x67, 0xf0, 0x3c, 0xb8, 0x6d, 0x60, 0x55, 0xd5,
0x12, 0x4e, 0x6f, 0xf3, 0x17, 0x4d, 0x13, 0x6d, 0x60,
0xfd, 0x7a, 0x54, 0xe7, 0xc8, 0xfd, 0xff, 0xf2, 0x0f,
0xb5, 0x80, 0x7c, 0x4e, 0x35, 0x6c, 0xbf, 0xc7, 0x0d,
0xf4, 0xbf, 0x83, 0x99, 0x78, 0x55, 0x60, 0x85, 0x58,
0xdf, 0xf6, 0x4b, 0x3e, 0xa8, 0x85, 0x44, 0x81, 0xcb,
0x24, 0x93, 0x30, 0x00, 0x48, 0x9f, 0x4b, 0x8e, 0x94,
0x15, 0xb2, 0x22, 0x37, 0xe9, 0x16, 0x65, 0x38, 0x74,
0x54, 0x9d, 0x76, 0x87, 0xae, 0x71, 0xb0, 0x63, 0xac,
0xe3, 0xef, 0x7e, 0x41, 0xc7, 0x05, 0xd1, 0x97, 0xc3,
0x15, 0x7d, 0xac, 0xd3, 0x26, 0x3d, 0x61, 0x13, 0x2a,
0x4f, 0x07, 0xb9, 0x1c, 0xb0, 0xcd, 0x79, 0xbc, 0x7c,
0xfd, 0x85, 0xf6, 0xf8, 0xc1, 0xf5, 0x07, 0xc3, 0x3b,
0xb9, 0x10, 0xe2, 0xe8, 0x79, 0xe0, 0xe4, 0xd8, 0xfe,
0xdf, 0x80, 0x41, 0x34, 0xd1, 0x4d, 0x59, 0x98, 0xb3,
0x83, 0x76, 0xd9, 0xac, 0x08, 0x31, 0xd1, 0x57, 0x75,
0x10, 0xef, 0x37, 0x04, 0xe3, 0xf6, 0x8a, 0xcf, 0xcb,
0x43, 0x3a, 0xa2, 0xa7, 0x51, 0xf9, 0x4f, 0xa8, 0xb6,
0xb3, 0x12, 0xaf, 0xbe, 0xea, 0x7f, 0x3d, 0x1f, 0x38,
0x78, 0x4d, 0x79, 0xdb, 0x41, 0x4c, 0x77, 0x99, 0xe0,
0x11, 0xca, 0x4d, 0x35, 0x77, 0x9e, 0xd1, 0x7a, 0xed,
0x7d, 0x96, 0xdf, 0x5e, 0x1a, 0x60, 0xac, 0xe7, 0x46,
0x92, 0x68, 0x6e, 0xde, 0x77, 0x8d, 0xfb, 0x4b, 0xee,
0xb4, 0x25, 0x85, 0xc8, 0xcc, 0xdf, 0x03, 0xcf ),
CIPHERTEXT ( 0x51, 0xeb, 0x44, 0x8f, 0x83, 0x98, 0x02, 0xe6, 0xd7,
0x3c, 0x5b, 0x62, 0x8e, 0xff, 0x69, 0xb1, 0xa4, 0x49,
0xc5, 0xb1, 0xe7, 0x09, 0xf2, 0xfd, 0x86, 0x9c, 0x8e,
0xba, 0xc9, 0x72, 0x5e, 0xcc, 0x3c, 0x9f, 0x42, 0x6f,
0x87, 0x58, 0x53, 0xca, 0xda, 0x11, 0x8f, 0x84, 0x6d,
0xe1, 0xa5, 0x2f, 0x3b, 0x36, 0xe2, 0x44, 0x66, 0x80,
0xcd, 0xb4, 0x42, 0x41, 0xc4, 0x75, 0xb0, 0x41, 0x45,
0x90, 0xf1, 0xee, 0x4b, 0xb9, 0x78, 0xdb, 0x5e, 0x88,
0xc6, 0x96, 0xd1, 0x3c, 0xad, 0xb3, 0x1e, 0xba, 0xa8,
0x97, 0xc2, 0x4e, 0x82, 0x04, 0xdd, 0xaa, 0x0e, 0x9c,
0x6d, 0x78, 0x65, 0xca, 0xb9, 0x93, 0x4d, 0x6f, 0x81,
0x12, 0x88, 0xda, 0x28, 0x5e, 0xb3, 0xa5, 0x42, 0x35,
0xe2, 0x32, 0xa6, 0xdb, 0xb2, 0xa7, 0xba, 0x36, 0xea,
0x72, 0x81, 0x82, 0x18, 0xa1, 0xed, 0x4c, 0x96, 0xe8,
0x59, 0xd0, 0xea, 0xd7, 0xcc, 0x7e, 0x3d, 0x89, 0x93,
0xc1, 0x00, 0x5f, 0xa5, 0x5b, 0x53, 0xd7, 0x52, 0xb4,
0xca, 0x21, 0x94, 0x73, 0x6d, 0x76, 0xb9, 0x25, 0x31,
0x97, 0x28, 0x1e, 0x0c, 0x63, 0x33, 0x04, 0x85, 0x72,
0x04, 0x6b, 0x20, 0xcc, 0xe3, 0x29, 0x40, 0xee, 0xfa,
0xcd, 0xc6, 0x25, 0xad, 0xc8, 0x41, 0x9c, 0x6a, 0x22,
0x2c, 0x61, 0xc9, 0xa8, 0xf2, 0x48, 0x46, 0x3c, 0x37,
0xa3, 0xc4, 0xe6, 0x88, 0xa9, 0xd7, 0x4e, 0x90, 0x06,
0xfd, 0x79, 0x10, 0x76, 0x9e, 0x3b, 0x21, 0xc7, 0xdc,
0x0d, 0x7e, 0xd5, 0x8f, 0x0e, 0xee, 0xa5, 0x8e, 0x32,
0x57, 0xc4, 0x0e, 0x17, 0xea, 0x42, 0x88, 0x41, 0x57,
0xe3, 0xaf, 0xc9, 0x91, 0x37, 0x57, 0x50, 0x6b, 0xd9,
0x05, 0x27, 0xdd, 0x28, 0x5b, 0xda, 0x33, 0xab, 0x5a,
0x44, 0x7f, 0x90, 0xe6, 0xf8, 0xc9, 0xec, 0xff, 0x22,
0x89, 0xfd, 0xac, 0x6c, 0xd2, 0x80, 0x74, 0xc3, 0xe1,
0x0b, 0xb3, 0x74, 0x33, 0x7f, 0x6c, 0x58, 0x7d, 0xac,
0xb8, 0xcb, 0xf7, 0xbf, 0xab, 0x27, 0x2f, 0xcd, 0x46,
0x2c, 0x2a, 0x06, 0xb4, 0x65, 0xa7, 0x91, 0xea, 0xb9,
0x11, 0xca, 0xb9, 0x6a, 0xe6, 0xcc, 0xdf, 0x38, 0x2a,
0xeb, 0x2e, 0x9d, 0x5a, 0xb0, 0x7e, 0x3d, 0xc1, 0x33,
0xd7, 0xf5, 0xb7, 0x40, 0x2b, 0xb1, 0xb6, 0xcc, 0xf8,
0xce, 0x48, 0x15, 0x39, 0x21, 0x30, 0x07, 0x3f, 0x6c,
0x03, 0xd3, 0x91, 0x9d, 0x86, 0x40, 0xcd, 0x7b, 0xa9,
0xb7, 0xfb, 0xbf, 0xcb, 0x07, 0x40, 0x50, 0x93, 0xac,
0x40, 0x8c, 0x4a, 0xcd, 0x50, 0xd5, 0x2d, 0x7c, 0xae,
0x06, 0xb9, 0xf3, 0x64, 0x8b, 0x53, 0x90, 0x44, 0xe4,
0x9e, 0xb0, 0xd5, 0x26, 0xc6, 0x32, 0x3b, 0x59, 0x32,
0xd3, 0xcd, 0xf1, 0x18, 0xcc, 0xb5, 0x56, 0x49, 0x8f,
0x24, 0x39, 0x0d, 0x6d, 0x21, 0x03, 0x58, 0x8c, 0x6c,
0xc4, 0xd1, 0x18, 0xf5, 0x2e, 0x4d, 0x66, 0xb1, 0xbd,
0xe8, 0x3a, 0x8b, 0x7c, 0x86, 0x3e, 0x6a, 0x37, 0x3c,
0x4c, 0xd6, 0x5d, 0x1d, 0x1a, 0x98, 0x53, 0x58, 0x10,
0xfb, 0xef, 0xa8, 0xca, 0x38, 0xa2, 0x08, 0x30, 0xe1,
0x9e, 0xf8, 0xfd, 0xf8, 0xfb, 0xa1, 0xd3, 0x33, 0x65,
0x50, 0x54, 0xe6, 0xc8, 0xa3, 0xfd, 0xc8, 0x40, 0x3b,
0x13, 0xb2, 0x7d, 0xe0, 0x7f, 0x9d, 0xbe, 0xef, 0x39,
0x0e, 0xe0, 0x6c, 0x05, 0x89, 0x57, 0xc1, 0xf6, 0xe6,
0xda, 0xe7, 0x75, 0x50, 0x90, 0xef, 0x1d, 0x0a, 0xfe,
0xe3, 0x47, 0x67, 0x1f, 0xe6, 0x9e, 0x5a, 0x28, 0x08,
0x69, 0x04, 0x0f, 0x4f, 0x35, 0xa6, 0xf6, 0x87, 0xc3,
0x7e, 0xe9, 0xe6, 0xb6, 0x76, 0xa6, 0xd5, 0x8a, 0xc1,
0x98, 0xdc, 0x86, 0xa8, 0x31, 0xae, 0x20, 0xfa, 0x2e,
0x64, 0xf4, 0x16, 0x55, 0x2d, 0xfb, 0xdc, 0x4a ),
AUTH ( 0x1f, 0xba, 0x8f, 0xda, 0xd5, 0x45, 0xd2, 0x44, 0x3d, 0x6e,
0x79, 0x59, 0x29, 0x74, 0xf3, 0x55 ) );
/* AES-GCM test case 26 */
CIPHER_TEST ( wycheproof_aes_gcm_93db813a, &aes_gcm_algorithm,
KEY ( 0xf0, 0x1a, 0x3c, 0x35, 0x59, 0xc5, 0x8e, 0x80, 0xbc, 0x83,
0x25, 0x44, 0xe0, 0x69, 0xef, 0x29 ),
IV ( 0xcd, 0x5b, 0xc2, 0xae, 0xd4, 0x8c, 0x3b, 0xe8, 0x36, 0xd7,
0xd7, 0x86 ),
ADDITIONAL(),
PLAINTEXT ( 0x0d, 0xe5, 0xaa, 0xc3, 0xf1, 0x51, 0xb5, 0x26, 0x75,
0x1d, 0xe8, 0xf3, 0x60, 0x10, 0xe4, 0x39, 0x44, 0x98,
0xeb, 0xa3, 0xc8, 0xbc, 0x79, 0x0f, 0xd4, 0xba, 0x96,
0xeb, 0x2d, 0xa3, 0x3e, 0x40, 0xdd, 0xca, 0x3c, 0xb3,
0x6f, 0xec, 0x10, 0x2e, 0xf3, 0x7a, 0x6a, 0x51, 0x32,
0xcd, 0x38, 0x9b, 0xbc, 0xab, 0xbd, 0x15, 0xe1, 0xc9,
0xd2, 0x70, 0x0a, 0xf3, 0x5f, 0x19, 0xa0, 0x1b, 0xa3,
0xb2, 0x68, 0x43, 0xab, 0x50, 0x83, 0x3f, 0x25, 0x2b,
0xef, 0xbb, 0xb5, 0x52, 0x91, 0x73, 0xd5, 0x1c, 0xa3,
0x64, 0xd7, 0xd0, 0x94, 0x68, 0xb3, 0xb6, 0x8f, 0x74,
0x0a, 0x60, 0x14, 0xb5, 0xb8, 0x24, 0x20, 0x6a, 0x6a,
0x71, 0x18, 0xbf, 0x14, 0x4a, 0x22, 0x3f, 0x87, 0xd7,
0x66, 0x24, 0xc1, 0x38, 0xbd, 0x24, 0xa5, 0xfa, 0x99,
0x6f, 0x36, 0xe3, 0x16, 0x08, 0x7f, 0x3b, 0x59, 0xc1,
0xc7, 0x1c, 0xd7, 0x4a, 0x91, 0x84, 0xa5, 0x18, 0xc8,
0xd9, 0xaa, 0x8c, 0x72, 0x43, 0x10, 0x2d, 0xd3, 0x9a,
0x93, 0x59, 0x9e, 0x7b, 0xbe, 0x7d, 0xcd, 0x35, 0x4d,
0x07, 0x80, 0x25, 0x37, 0x67, 0xe9, 0x60, 0x2f, 0x2f,
0x0c, 0xbb, 0xab, 0x7e, 0xae, 0x8d, 0x8c, 0x12, 0xcb,
0xad, 0x16, 0x3f, 0x8f, 0xc2, 0x0d, 0x32, 0x55, 0x9f,
0x79, 0x8d, 0x2b, 0x72, 0x85, 0xdb, 0xa6, 0xf6, 0x6d,
0xc2, 0x8d, 0x9b, 0x3f, 0x0a, 0x30, 0x1a, 0xa8, 0x9f,
0x5c, 0xd1, 0xb5, 0xa1, 0x73, 0x4f, 0xe7, 0x2c, 0x68,
0xf9, 0x8c, 0x86, 0x1d, 0x26, 0xe7, 0xdd, 0xda, 0xa0,
0x8a, 0x22, 0x79, 0x99, 0xf7, 0xc9, 0x8d, 0x73, 0x15,
0xe7, 0xc2, 0xe3, 0xc3, 0xf1, 0x98, 0xcd, 0xd4, 0xcf,
0xd6, 0x2f, 0x62, 0x38, 0x99, 0x98, 0xc7, 0xb7, 0x60,
0x10, 0x6d, 0x0a, 0x43, 0x7f, 0x50, 0x50, 0xf7, 0x4f,
0x9c, 0xe6, 0x39, 0x48, 0xf5, 0x49, 0x4b, 0xed, 0x71,
0xc8, 0x8b, 0xe4, 0x43, 0x65, 0x4e, 0xf9, 0xeb, 0x0c,
0x86, 0x7e, 0xed, 0xe2, 0x25, 0xc1, 0xbd, 0xa1, 0x81,
0xba, 0xab, 0xd8, 0x15, 0x53, 0x60, 0xcc, 0xae, 0x65,
0xe5, 0x4d, 0x39, 0x9a, 0x3f, 0x7d, 0x67, 0x0d, 0x11,
0xb5, 0x3d, 0x7b, 0xbe, 0xcd, 0xa1, 0x5d, 0x53, 0xe1,
0x29, 0xef, 0x2b, 0xe2, 0x91, 0x54, 0xe3, 0xc2, 0x14,
0x11, 0xe6, 0x20, 0x79, 0x77, 0xe2, 0x62, 0x00, 0x07,
0xcf, 0x4b, 0x98, 0x7d, 0xd2, 0xc3, 0x04, 0xef, 0xe5,
0x5b, 0xc2, 0xef, 0x56, 0x40, 0x74, 0xcd, 0x6e, 0x17,
0x6a, 0x97, 0x18, 0x4b, 0xff, 0x4c, 0xad, 0x0c, 0xd0,
0xcb, 0x85, 0x19, 0x5c, 0x4e, 0x83, 0x98, 0xf2, 0x7c,
0xa0, 0xd4, 0xd8, 0xc4, 0x85, 0x13, 0x59, 0xee, 0xbd,
0xb6, 0x06, 0xa2, 0x13, 0x22, 0x39, 0x03, 0x51, 0x3f,
0x0d, 0xb8, 0xc0, 0xfc, 0xc1, 0xf3, 0xa8, 0x34, 0x73,
0x8f, 0x6c, 0x9d, 0xd6, 0xad, 0xb4, 0x3b, 0xdc, 0xbd,
0x92, 0x1e, 0x7c, 0x3c, 0xd3, 0xb2, 0x52, 0xe3, 0x19,
0xf9, 0xe7, 0x11, 0xed, 0xf5, 0x5e, 0x8d, 0x7f, 0x1a,
0x32, 0x07, 0x05, 0xa3, 0xba, 0x77, 0xbf, 0xa3, 0x34,
0x63, 0xa9, 0x22, 0xa9, 0xf3, 0x6b, 0x48, 0x35, 0x90,
0xc4, 0x93, 0x9f, 0xd9, 0x77, 0xac, 0xe5, 0x1c, 0x50,
0x6d, 0x2e, 0x26, 0x9b, 0x48, 0x8a, 0x71, 0x69, 0xb6,
0x96, 0xd8, 0x28, 0x45, 0x8e, 0xcb, 0x09, 0x2a, 0xe3,
0xa9, 0xad, 0xf6, 0x3a, 0x3a, 0x12, 0x80, 0x9d, 0xa5,
0x1f, 0xc7, 0x34, 0x0f, 0xc5, 0x7d, 0xb5, 0x0f, 0xa1,
0x90, 0x3f, 0x1c, 0x7d, 0xe9, 0xce, 0x60, 0x6f, 0x1d,
0xe3, 0xf9, 0x55, 0x38, 0x82, 0x3c, 0x04, 0xe3, 0xbf,
0xb6, 0x54, 0x93, 0x85, 0x64, 0x37, 0x10, 0xa2, 0x91,
0x9f, 0x2f, 0xbd, 0x54, 0x88, 0x7b, 0xdf, 0xb2, 0x39 ),
CIPHERTEXT ( 0xc9, 0x13, 0x9d, 0x5d, 0x6a, 0x14, 0x93, 0x6d, 0xd5,
0xf2, 0x86, 0xd3, 0x3d, 0xee, 0x4f, 0x20, 0xf5, 0x9a,
0x82, 0x11, 0x52, 0xaa, 0x71, 0x72, 0x74, 0xc1, 0xaf,
0x90, 0x98, 0x3a, 0x5f, 0x83, 0xb9, 0x01, 0x62, 0x48,
0xe7, 0x15, 0xa5, 0xd0, 0x99, 0x8d, 0x32, 0x99, 0x55,
0xf4, 0x1a, 0x03, 0x96, 0x66, 0x0d, 0x9f, 0x22, 0xdf,
0x5f, 0x61, 0x30, 0x98, 0xbf, 0xd3, 0xaa, 0x30, 0xdf,
0x19, 0x22, 0xf0, 0x8d, 0xc1, 0x2c, 0x8f, 0xdc, 0xa6,
0xd2, 0x63, 0x8a, 0x51, 0xbf, 0xe5, 0x94, 0xb2, 0x45,
0x23, 0xb9, 0x31, 0x81, 0x71, 0x2d, 0x52, 0x05, 0xf9,
0xc2, 0xe5, 0xd4, 0x87, 0x41, 0xe0, 0x00, 0xac, 0x21,
0x28, 0x61, 0x9f, 0x6c, 0x97, 0x45, 0x44, 0x8d, 0xa2,
0x94, 0xac, 0x28, 0x14, 0x28, 0xd6, 0xc6, 0x07, 0xf4,
0xee, 0xda, 0xee, 0xa0, 0xdb, 0x12, 0xba, 0x16, 0x27,
0xe5, 0x6a, 0xe1, 0x52, 0xef, 0x2b, 0x23, 0x10, 0xcc,
0xe8, 0x29, 0xcc, 0x27, 0x62, 0x17, 0xe3, 0x1d, 0xac,
0x22, 0xec, 0x85, 0x82, 0xd7, 0xa7, 0x2b, 0x5d, 0x64,
0xd5, 0x58, 0x3c, 0x75, 0xf4, 0x2f, 0xc3, 0x55, 0x51,
0x60, 0x7e, 0xc5, 0x7d, 0x9d, 0x40, 0x67, 0x2d, 0x16,
0x41, 0xb6, 0x44, 0x91, 0xfe, 0x23, 0xff, 0x3e, 0xae,
0xb3, 0x3e, 0x25, 0x64, 0x31, 0x9c, 0x58, 0xd6, 0x9b,
0x19, 0xc6, 0x5d, 0x1c, 0x56, 0x16, 0x5e, 0xa2, 0x54,
0x36, 0x31, 0xb9, 0x5b, 0xd8, 0x62, 0x9a, 0x91, 0x87,
0x6c, 0x28, 0x4d, 0x02, 0x45, 0xbe, 0x6a, 0x4f, 0x34,
0xad, 0x86, 0x28, 0xf7, 0xa4, 0xa4, 0xdb, 0xd3, 0xdc,
0x13, 0xc9, 0x7a, 0x1b, 0x3a, 0x91, 0x08, 0xca, 0x67,
0x21, 0xf3, 0x8a, 0x4b, 0x5b, 0x00, 0xea, 0x09, 0xab,
0xc2, 0xa9, 0x0c, 0x39, 0xae, 0xd7, 0x75, 0xf3, 0xa7,
0x84, 0xf0, 0xaa, 0x1a, 0x0a, 0x18, 0xb9, 0x9a, 0xeb,
0xaf, 0x60, 0xfc, 0xc3, 0x38, 0x5c, 0x2c, 0x9a, 0x03,
0xaa, 0x50, 0xe0, 0x29, 0xab, 0x81, 0xe5, 0xb9, 0xe3,
0x7a, 0x0e, 0x1c, 0xf7, 0x0d, 0x9c, 0x1a, 0xdc, 0xa5,
0x6e, 0x98, 0x28, 0x9b, 0x91, 0xd8, 0xc2, 0x50, 0x85,
0x8e, 0x30, 0xe2, 0xc2, 0x1a, 0xfe, 0x39, 0xb9, 0x06,
0x35, 0xfb, 0xe1, 0x55, 0x40, 0xb7, 0x18, 0xc0, 0x30,
0x69, 0x6d, 0x1a, 0x4f, 0xfb, 0xef, 0xa8, 0xd8, 0xec,
0x1a, 0xcb, 0x56, 0x33, 0xc8, 0xf1, 0x9e, 0xb5, 0xcf,
0x91, 0x86, 0xe9, 0xec, 0x05, 0x94, 0xfd, 0xf1, 0x31,
0x2e, 0x62, 0xd4, 0x88, 0xfa, 0xd9, 0xa8, 0x94, 0xe1,
0x9a, 0x8e, 0x99, 0xde, 0x57, 0x8c, 0xc2, 0x95, 0xd5,
0x81, 0x64, 0x5c, 0x4f, 0xa2, 0x9a, 0x8f, 0x12, 0xd4,
0x48, 0x59, 0xeb, 0xb3, 0xe2, 0xbf, 0xf3, 0x51, 0xde,
0x91, 0x71, 0x89, 0x98, 0x72, 0x66, 0xbd, 0x47, 0xac,
0x72, 0x23, 0xa8, 0xd8, 0x57, 0xf7, 0x73, 0x0c, 0xef,
0x8a, 0x31, 0x2a, 0x51, 0x64, 0xd7, 0xb0, 0x0e, 0x0e,
0xed, 0xa4, 0xe2, 0x19, 0x52, 0x06, 0x2d, 0x8a, 0xce,
0xfe, 0x44, 0xe0, 0xb8, 0x9a, 0x37, 0xd0, 0xf5, 0xc3,
0x1c, 0x43, 0x45, 0xbc, 0x36, 0x0c, 0x93, 0x62, 0x69,
0xf9, 0x3a, 0xa4, 0xe0, 0x0d, 0x05, 0x27, 0x86, 0x81,
0xb3, 0x97, 0x17, 0xb9, 0xf3, 0x44, 0x5c, 0xdf, 0x7f,
0x98, 0xed, 0xad, 0x18, 0x5d, 0x15, 0xfd, 0xd0, 0x27,
0x39, 0x94, 0x85, 0x42, 0x86, 0x70, 0xb4, 0x30, 0xb0,
0x27, 0x02, 0xf3, 0x73, 0xe9, 0xf8, 0x6e, 0x4a, 0x6b,
0x33, 0xeb, 0xe7, 0x30, 0x95, 0x42, 0x74, 0x03, 0x79,
0x50, 0x22, 0x52, 0x78, 0x18, 0xb0, 0xd3, 0x31, 0x6a,
0xef, 0x9a, 0x27, 0x6e, 0xe8, 0x06, 0x26, 0x84, 0xb5,
0xc1, 0x6c, 0x68, 0x3a, 0x74, 0x8b, 0xdb, 0x0d, 0xac ),
AUTH ( 0xd0, 0x70, 0x38, 0x1d, 0xb3, 0xe8, 0xd4, 0x85, 0xe9, 0x41,
0x6c, 0x92, 0x06, 0x41, 0x80, 0xf1 ) );
/* AES-GCM test case 27 */
CIPHER_TEST ( wycheproof_aes_gcm_2ec43c3e, &aes_gcm_algorithm,
KEY ( 0x5a, 0x47, 0x5f, 0x99, 0x76, 0xed, 0x11, 0x7a, 0xb3, 0x7a,
0x4f, 0xff, 0xab, 0x05, 0x92, 0xeb ),
IV ( 0x6b, 0xce, 0x45, 0xbe, 0xa6, 0xad, 0x59, 0xbd, 0x2a, 0x08,
0xf7, 0xb3 ),
ADDITIONAL ( 0xe8, 0xbb, 0x51, 0xb6, 0x94, 0xb6, 0xb0, 0x76, 0x3e,
0x09, 0x7b, 0xad, 0x11, 0x52, 0xf5, 0xc7, 0x62, 0xa8,
0x78, 0xa3, 0xe7, 0xf7, 0xa9, 0xd7, 0x8e, 0x80, 0x98,
0x38, 0xde, 0x78, 0x56, 0x79, 0x00, 0x28, 0x1b, 0x7e,
0x4f, 0x0f, 0x18, 0x54, 0x93, 0xfd, 0x85, 0xe2, 0x8d,
0xb7, 0x9b, 0x59, 0x55, 0x41, 0xab, 0xa7, 0xe1, 0x58,
0xb3, 0x93, 0x64, 0x90, 0xb6, 0x32, 0x35, 0x5d, 0x74 ),
PLAINTEXT ( 0xdc, 0x6a, 0xb0, 0xe2, 0x61, 0x41, 0x2c, 0xc7, 0x09,
0x42, 0x22, 0x89, 0xea, 0x20, 0x20, 0x21, 0xd9, 0x29,
0x80, 0x60 ),
CIPHERTEXT ( 0x35, 0xd3, 0xab, 0x05, 0x34, 0x10, 0x28, 0x84, 0xed,
0x0d, 0xb4, 0x69, 0x4a, 0x22, 0x1d, 0xf1, 0xbf, 0x94,
0xdc, 0xdb ),
AUTH ( 0xd7, 0x8d, 0x2c, 0x19, 0x7d, 0xeb, 0x70, 0xed, 0x52, 0x93,
0x3f, 0x4f, 0xa0, 0xb0, 0x98, 0x56 ) );
/* AES-GCM test case 28 */
CIPHER_TEST ( wycheproof_aes_gcm_b9939500, &aes_gcm_algorithm,
KEY ( 0xc4, 0xb0, 0x34, 0x35, 0xb9, 0x1f, 0xc5, 0x2e, 0x09, 0xef,
0xf2, 0x7e, 0x4d, 0xc3, 0xfb, 0x42 ),
IV ( 0x50, 0x46, 0xe7, 0xe0, 0x8f, 0x07, 0x47, 0xe1, 0xef, 0xcc,
0xb0, 0x9e ),
ADDITIONAL ( 0x75, 0xfc, 0x90, 0x78, 0xb4, 0x88, 0xe9, 0x50, 0x3d,
0xcb, 0x56, 0x8c, 0x88, 0x2c, 0x9e, 0xec, 0x24, 0xd8,
0x0b, 0x04, 0xf0, 0x95, 0x8c, 0x82, 0xaa, 0xc8, 0x48,
0x4f, 0x02, 0x5c, 0x90, 0x43, 0x41, 0x48, 0xdb, 0x8e,
0x9b, 0xfe, 0x29, 0xc7, 0xe0, 0x71, 0xb7, 0x97, 0x45,
0x7c, 0xb1, 0x69, 0x5a, 0x5e, 0x5a, 0x63, 0x17, 0xb8,
0x36, 0x90, 0xba, 0x05, 0x38, 0xfb, 0x11, 0xe3, 0x25,
0xca ),
PLAINTEXT ( 0x8e, 0x88, 0x7b, 0x22, 0x4e, 0x8b, 0x89, 0xc8, 0x2e,
0x9a, 0x64, 0x1c, 0xf5, 0x79, 0xe6, 0x87, 0x9e, 0x11,
0x11, 0xc7 ),
CIPHERTEXT ( 0xb6, 0x78, 0x68, 0x12, 0x57, 0x4a, 0x25, 0x4e, 0xb4,
0x3b, 0x1c, 0xb1, 0xd1, 0x75, 0x35, 0x64, 0xc6, 0xb5,
0x20, 0xe9 ),
AUTH ( 0xad, 0x8c, 0x09, 0x61, 0x0d, 0x50, 0x8f, 0x3d, 0x0f, 0x03,
0xcc, 0x52, 0x3c, 0x0d, 0x5f, 0xcc ) );
/* AES-GCM test case 29 */
CIPHER_TEST ( wycheproof_aes_gcm_398af67e, &aes_gcm_algorithm,
KEY ( 0xf6, 0x4d, 0x1b, 0xc4, 0x7b, 0x08, 0x1a, 0xfb, 0x21, 0x18,
0x1b, 0xdc, 0x16, 0xff, 0xbc, 0xca ),
IV ( 0x2c, 0x03, 0x29, 0x37, 0x04, 0xf7, 0x96, 0x12, 0x18, 0x16,
0x09, 0xd3 ),
ADDITIONAL ( 0xa8, 0x83, 0xd2, 0x3e, 0x25, 0xa6, 0x2b, 0x49, 0x2f,
0x12, 0x71, 0xd3, 0xd7, 0x9b, 0x86, 0x89, 0xdd, 0xe7,
0x25, 0x0a, 0x05, 0x75, 0xb8, 0x17, 0x5a, 0x6b, 0x69,
0xd4, 0x8d, 0x1b, 0x4b, 0xc2, 0xdf, 0x1b, 0x4d, 0xc4,
0xa2, 0xb1, 0xeb, 0x50, 0x6b, 0xc0, 0xe8, 0xc1, 0x1e,
0x7d, 0xc2, 0xf3, 0xd0, 0x8b, 0x47, 0x52, 0x14, 0x55,
0x1d, 0xf7, 0xc5, 0x3e, 0x58, 0x1e, 0xc5, 0x5c, 0x0d,
0x0a, 0x2d ),
PLAINTEXT ( 0x85, 0xb2, 0x49, 0x04, 0xbf, 0x12, 0xce, 0xd3, 0x3d,
0x78, 0xdf, 0x74, 0x37, 0xb3, 0x6f, 0xff, 0x83, 0xd1,
0xe8, 0x17 ),
CIPHERTEXT ( 0xb0, 0x09, 0x75, 0x86, 0x3c, 0x67, 0x3f, 0x0f, 0x19,
0x32, 0x62, 0x94, 0xeb, 0xc4, 0xc7, 0x7f, 0x72, 0x87,
0xc2, 0x79 ),
AUTH ( 0xae, 0x57, 0x62, 0x2c, 0x1d, 0x17, 0x5e, 0xbb, 0xca, 0x77,
0xbd, 0x4e, 0xe8, 0x12, 0xed, 0x89 ) );
/* AES-GCM test case 30 */
CIPHER_TEST ( wycheproof_aes_gcm_831a61d8, &aes_gcm_algorithm,
KEY ( 0x7e, 0x0e, 0x0c, 0xf8, 0xc9, 0xac, 0x58, 0x86, 0x7e, 0xf3,
0xe3, 0x31, 0x5d, 0x0a, 0x43, 0x38 ),
IV ( 0xa0, 0x34, 0x61, 0xbd, 0x9f, 0xfe, 0xdb, 0x16, 0xa6, 0x5c,
0x03, 0x89 ),
ADDITIONAL ( 0xc7, 0x0f, 0x00, 0x9b, 0xe6, 0x5a, 0xde, 0x84, 0x65,
0xcc, 0x05, 0xb5, 0x22, 0x79, 0x63, 0xc1, 0x2c, 0x60,
0xb6, 0x82, 0x47, 0xae, 0x2e, 0x43, 0x1b, 0x24, 0x45,
0xbb, 0x6a, 0xa6, 0x9c, 0x0a, 0x78, 0x20, 0x17, 0x78,
0x61, 0xe5, 0xf6, 0xe3, 0x58, 0x52, 0x69, 0xfd, 0x15,
0xef, 0xaf, 0x38, 0xc3, 0x71, 0x3e, 0x6a, 0xf0, 0xe9,
0x33, 0x62, 0xd2, 0xd9, 0xa6, 0xe3, 0x29, 0x67, 0x12,
0xf5, 0x81, 0x56, 0x3a, 0xe3, 0x98, 0x02, 0x98, 0xf8,
0xbb, 0x72, 0x76, 0x85, 0x9a, 0xfe, 0xcc, 0x70, 0x52,
0xfe, 0xf6, 0x3b, 0x06, 0x0b, 0xc8, 0xf2, 0x19, 0xff,
0xe2, 0x00, 0xe1, 0x4d, 0xbd, 0xe1, 0xf0, 0xa3, 0x62,
0x33, 0xb5, 0x99, 0x4a, 0x0b, 0x68, 0xc4, 0x69, 0x0b,
0x43, 0x7d, 0x49, 0x5d, 0xdf, 0xf9, 0x91, 0x99, 0x3e,
0x75, 0x03, 0x9b, 0xcb, 0xa4, 0xc1, 0x9d, 0x7a, 0x6f,
0x01 ),
PLAINTEXT ( 0xde, 0x44, 0x51, 0x31, 0x6a, 0xd8, 0x20, 0x47, 0x1a,
0x43, 0x90, 0x69, 0x65, 0xaf, 0x9f, 0xa2, 0x21, 0xc0,
0x36, 0x0f ),
CIPHERTEXT ( 0x8b, 0x9d, 0xcb, 0xd9, 0xc9, 0x57, 0x35, 0x09, 0xd9,
0x78, 0xdb, 0x0d, 0x91, 0x0e, 0x26, 0x96, 0x12, 0xc9,
0x07, 0xbf ),
AUTH ( 0x61, 0xae, 0x3a, 0xfd, 0xb0, 0x6a, 0x01, 0xd8, 0xee, 0x6f,
0x7e, 0x73, 0x9e, 0xc3, 0x0a, 0x4e ) );
/* AES-GCM test case 31 */
CIPHER_TEST ( wycheproof_aes_gcm_63336678, &aes_gcm_algorithm,
KEY ( 0x7e, 0x37, 0xd5, 0x6e, 0x6b, 0x1d, 0x01, 0x72, 0xd4, 0x0d,
0x64, 0xd6, 0x11, 0x1d, 0xd4, 0x24 ),
IV ( 0x51, 0x7c, 0x55, 0xc2, 0xec, 0x9b, 0xfe, 0xa9, 0x0a, 0xdd,
0xc2, 0xbd ),
ADDITIONAL ( 0x8e, 0xd8, 0xa9, 0xbe, 0x4c, 0x3d, 0x32, 0xa5, 0x09,
0x84, 0x34, 0xee, 0x5c, 0x0c, 0x4f, 0xc2, 0x0f, 0x78,
0xef, 0x5e, 0x25, 0xed, 0x8b, 0x72, 0xa8, 0x40, 0xa4,
0x63, 0xe3, 0x6b, 0x67, 0xb8, 0x81, 0xe0, 0x48, 0xb5,
0xe4, 0x9f, 0x51, 0x5b, 0x25, 0x41, 0xad, 0x5c, 0xe4,
0xeb, 0xb3, 0xa9, 0x17, 0xc1, 0x6b, 0xcd, 0xc0, 0xdc,
0x3c, 0xb5, 0x2b, 0xb4, 0xed, 0x5a, 0x1d, 0xff, 0xcf,
0x1e, 0x18, 0x66, 0x54, 0x4e, 0x8d, 0xb1, 0x03, 0xb2,
0xad, 0x99, 0xc6, 0xfa, 0x6e, 0x7d, 0xe1, 0xd8, 0xb4,
0x5b, 0xff, 0x57, 0xec, 0x87, 0x2f, 0x1c, 0xfc, 0x78,
0xb0, 0xe4, 0x87, 0x0f, 0x6f, 0x20, 0x0f, 0xf1, 0x29,
0x1c, 0xae, 0x03, 0x3d, 0xef, 0xc3, 0x32, 0x7b, 0xa8,
0x27, 0x92, 0xba, 0x43, 0x8e, 0x35, 0xc4, 0xbf, 0xbb,
0x68, 0x4f, 0xec, 0x5c, 0xe5, 0xe3, 0xae, 0x16, 0x7d,
0x01, 0xd7 ),
PLAINTEXT ( 0x6a, 0x7d, 0xea, 0x03, 0xc1, 0xbb, 0xa7, 0x0b, 0xe8,
0xc7, 0x3d, 0xa4, 0x7d, 0x5e, 0xe0, 0x6d, 0x72, 0xa2,
0x74, 0x30 ),
CIPHERTEXT ( 0xcf, 0xb6, 0x31, 0x79, 0x07, 0x67, 0xd0, 0x64, 0x5d,
0x8e, 0xc6, 0xf2, 0x3b, 0xf7, 0xfa, 0x8b, 0x19, 0xce,
0x79, 0xee ),
AUTH ( 0xc5, 0x76, 0x7d, 0xda, 0xa7, 0x47, 0x15, 0x84, 0x46, 0x23,
0x17, 0x66, 0xbd, 0x20, 0x49, 0x0c ) );
/* AES-GCM test case 32 */
CIPHER_TEST ( wycheproof_aes_gcm_a88873d1, &aes_gcm_algorithm,
KEY ( 0xd9, 0x21, 0x89, 0x31, 0xdc, 0x59, 0x2a, 0xef, 0x3b, 0xff,
0xb9, 0x24, 0xc9, 0xe0, 0xb0, 0x2c ),
IV ( 0x17, 0xd8, 0x24, 0xf4, 0xf2, 0xf1, 0x91, 0xe9, 0xc9, 0xdc,
0x0a, 0x52 ),
ADDITIONAL ( 0x76, 0xdc, 0xb9, 0x94, 0x85, 0x75, 0xb5, 0x03, 0xfe,
0xa7, 0x5c, 0xb3, 0xd4, 0x94, 0x9b, 0xb9, 0x6a, 0xe3,
0xd2, 0xc1, 0x78, 0x0f, 0x18, 0x5e, 0x0f, 0xb3, 0xcd,
0x5b, 0x83, 0xeb, 0x70, 0x90, 0xbe, 0x7a, 0x96, 0x6f,
0x61, 0x46, 0xa4, 0xdb, 0x7e, 0xf8, 0x2f, 0x8a, 0xdb,
0x9b, 0x10, 0x15, 0x8b, 0x69, 0xd4, 0xbb, 0x19, 0xdf,
0xfe, 0x4c, 0x63, 0x9f, 0xe2, 0x78, 0xd0, 0x33, 0x4e,
0x68, 0xaa, 0xf1, 0xb6, 0x84, 0x51, 0xa8, 0xe6, 0x77,
0x8d, 0xdb, 0xb2, 0x9a, 0xac, 0x4b, 0x25, 0xbc, 0xb2,
0xea, 0x05, 0x96, 0x01, 0xee, 0x2e, 0xba, 0x43, 0x91,
0x34, 0xae, 0xcd, 0x0c, 0xea, 0xcd, 0x98, 0xe3, 0x88,
0xc4, 0x01, 0x14, 0xc1, 0x19, 0x69, 0xdf, 0xd4, 0xa1,
0x6b, 0xee, 0xaf, 0x3d, 0x1c, 0x74, 0x10, 0xe9, 0x9e,
0x67, 0x48, 0x94, 0x44, 0x58, 0x21, 0xe8, 0xfc, 0xda,
0x7b, 0x7b, 0xa7 ),
PLAINTEXT ( 0x29, 0xf2, 0x9b, 0xfc, 0x5b, 0x09, 0xff, 0x15, 0x8d,
0x74, 0xfb, 0xf7, 0x53, 0x2c, 0x06, 0xaa, 0x3a, 0xfa,
0x93, 0x6c ),
CIPHERTEXT ( 0xd0, 0xd2, 0x2c, 0xc0, 0x89, 0x32, 0x61, 0xb1, 0x05,
0xc0, 0x21, 0xf5, 0x34, 0x73, 0x75, 0x99, 0xca, 0xc3,
0xb1, 0x0d ),
AUTH ( 0xf5, 0x5f, 0x4a, 0xc6, 0xd8, 0x36, 0xfc, 0x28, 0x80, 0x36,
0xa6, 0x3f, 0x53, 0xb0, 0xdd, 0xd4 ) );
/* AES-GCM test case 33 */
CIPHER_TEST ( wycheproof_aes_gcm_febb3d17, &aes_gcm_algorithm,
KEY ( 0xbf, 0x20, 0x56, 0xba, 0xaf, 0x45, 0xc5, 0xa0, 0x0a, 0x73,
0x3b, 0x49, 0xf1, 0x0b, 0x7d, 0xd0 ),
IV ( 0xfe, 0xf1, 0xb2, 0x43, 0xb4, 0x4b, 0xa9, 0x2b, 0x47, 0xc6,
0x62, 0x6b ),
ADDITIONAL ( 0x1b, 0xb3, 0xa1, 0x79, 0x07, 0x27, 0x9e, 0xbf, 0xf6,
0x35, 0x93, 0xde, 0x97, 0xa6, 0x4e, 0x5c, 0xea, 0xf9,
0xe1, 0xd4, 0x07, 0xe5, 0xa5, 0xee, 0xc1, 0xce, 0x0f,
0x62, 0x58, 0x6f, 0x0d, 0xfd, 0xdb, 0x7a, 0x3a, 0x83,
0xfd, 0x16, 0x4e, 0x80, 0x0b, 0xcb, 0xc6, 0xfb, 0x08,
0x9d, 0x6a, 0x24, 0x7d, 0xfa, 0x44, 0x46, 0x33, 0xf4,
0x66, 0x3a, 0xe1, 0xe0, 0xbd, 0xf3, 0x7b, 0x50, 0xa7,
0xa0, 0x1f, 0x50, 0x6e, 0x22, 0x20, 0xbb, 0xdd, 0x4b,
0x08, 0xc5, 0x9f, 0xe6, 0x0e, 0x45, 0x5b, 0xda, 0xed,
0xa7, 0xe5, 0xa0, 0xcd, 0xb2, 0xe6, 0xdf, 0xca, 0x66,
0x38, 0x1a, 0x72, 0x96, 0x2f, 0xa8, 0xa6, 0xf9, 0x84,
0x7a, 0x87, 0x13, 0x5c, 0xcf, 0x02, 0xa4, 0x0d, 0xa5,
0xb3, 0xb8, 0xe9, 0x1e, 0x6e, 0x1f, 0x31, 0x54, 0x2f,
0x85, 0xf9, 0x0b, 0xce, 0x1d, 0xe0, 0x51, 0x88, 0xfe,
0x57, 0x35, 0x53, 0x29, 0x03, 0x1c, 0x66, 0xb3, 0xfd,
0xe1, 0x8b, 0xbd, 0xcb, 0xd2, 0xcb, 0xec, 0x42, 0xea,
0x1d, 0x0f, 0xc8, 0x03, 0xab, 0xed, 0x2f, 0x15, 0xc4,
0x1d, 0x2f, 0x12, 0x26, 0x74, 0xea, 0x91, 0xb7, 0x28,
0x0e, 0x81, 0x8a, 0xcb, 0x75, 0x49, 0xfe, 0x63, 0x13,
0x5d, 0x21, 0x09, 0xb4, 0x01, 0x4e, 0xc6, 0x00, 0x27,
0x45, 0x30, 0x1b, 0xd0, 0xac, 0x59, 0xca, 0x8e, 0x4f,
0x8d, 0x2f, 0xb6, 0x99, 0x34, 0x7b, 0x74, 0xe1, 0x78,
0x18, 0xe3, 0xa5, 0x7f, 0xa6, 0x9c, 0x75, 0x93, 0x12,
0xdc, 0xfd, 0xe1, 0x55, 0xb2, 0xa5, 0x58, 0xa2, 0x38,
0x5c, 0x8a, 0xda, 0xb8, 0xa6, 0xd5, 0x7f, 0x0f, 0x49,
0x7e, 0xaf, 0x08, 0x33, 0xe3, 0xd9, 0x30, 0xe8, 0x3f,
0xed, 0x88, 0xc9, 0x1e, 0x18, 0xa7, 0x4c, 0x4f, 0x5f,
0xf4, 0x59, 0x25, 0xa2, 0xbb, 0xdd, 0xa2, 0x2f, 0x9a,
0x4f, 0x11, 0x96 ),
PLAINTEXT ( 0x7e, 0x8c, 0x2d, 0x8a, 0x65, 0xf5, 0x39, 0x21, 0x0c,
0x04, 0x74, 0x22, 0xae, 0x57, 0x54, 0x91, 0x95, 0xa0,
0x83, 0x93 ),
CIPHERTEXT ( 0x1f, 0xcc, 0x05, 0xbf, 0x49, 0x60, 0xfd, 0x02, 0x47,
0x5c, 0x07, 0x2f, 0x9e, 0xee, 0x81, 0x50, 0x99, 0x4e,
0xdc, 0xb9 ),
AUTH ( 0xf3, 0xe0, 0x92, 0xf2, 0x41, 0x5f, 0x7f, 0x0c, 0xe8, 0x8f,
0x37, 0xa2, 0x49, 0x5d, 0xce, 0x48 ) );
/* AES-GCM test case 34 */
CIPHER_TEST ( wycheproof_aes_gcm_6e67f3d3, &aes_gcm_algorithm,
KEY ( 0x6f, 0x83, 0x07, 0xbb, 0x3d, 0x83, 0xd6, 0x78, 0x66, 0xc2,
0xfa, 0x5b, 0x26, 0xf9, 0xca, 0xde ),
IV ( 0xdf, 0xe9, 0x3e, 0xd8, 0x79, 0xe4, 0xb3, 0x91, 0xeb, 0xbb,
0xfd, 0x37 ),
ADDITIONAL ( 0x1d, 0x72, 0x72, 0x0d, 0xbb, 0xc4, 0x03, 0x33, 0xe8,
0x19, 0xa4, 0xde, 0xf8, 0x1f, 0x7b, 0xae, 0x13, 0x7d,
0x8e, 0x52, 0xdc, 0x01, 0x0e, 0xd9, 0x01, 0xa3, 0x90,
0xbf, 0x8c, 0x0a, 0xb6, 0xb4, 0x35, 0xb0, 0x8e, 0xf0,
0x18, 0x48, 0x88, 0xbc, 0x83, 0xb1, 0x4b, 0x98, 0xb5,
0x9f, 0x6c, 0x56, 0xaf, 0xd4, 0x61, 0x31, 0xc5, 0x62,
0x7b, 0x9e, 0x2a, 0x44, 0xf0, 0xa1, 0x2a, 0x9a, 0x53,
0x56, 0xd9, 0x09, 0x0c, 0x8b, 0x19, 0xc9, 0x4f, 0x3f,
0x86, 0x51, 0xd4, 0x9c, 0x74, 0x27, 0x6b, 0xd9, 0xae,
0x10, 0x71, 0xca, 0xd5, 0xf5, 0x04, 0x0f, 0xbe, 0x1e,
0x99, 0x12, 0x4e, 0xf4, 0x4f, 0x3f, 0x81, 0x3b, 0x13,
0xdf, 0xf9, 0x58, 0xe7, 0x33, 0x1b, 0x94, 0x91, 0x93,
0xbd, 0xf5, 0x58, 0xfd, 0x14, 0x03, 0x2c, 0x54, 0xf0,
0xe0, 0xae, 0x7a, 0xc4, 0xd2, 0xe6, 0xa9, 0x9d, 0x82,
0xa5, 0xda, 0x41, 0x13, 0x5f, 0x05, 0x43, 0xad, 0x37,
0x7d, 0x21, 0x71, 0x52, 0x49, 0x7c, 0xf8, 0x64, 0x35,
0xd2, 0x4e, 0xe0, 0xc7, 0x59, 0x97, 0xe3, 0x86, 0x31,
0x33, 0xd3, 0x22, 0x01, 0x7a, 0xec, 0x98, 0x05, 0x0b,
0x2f, 0xbc, 0x1d, 0xd8, 0x54, 0x22, 0x93, 0xae, 0x70,
0x68, 0x89, 0xe7, 0x54, 0xda, 0xf6, 0xff, 0x8c, 0x91,
0xfb, 0x65, 0x33, 0xc5, 0xdb, 0x73, 0x75, 0xdd, 0x3e,
0x36, 0x5e, 0x6a, 0x18, 0xc5, 0x46, 0xfa, 0x94, 0x63,
0xdf, 0xdb, 0x21, 0xd5, 0x1c, 0x9c, 0xf2, 0x3c, 0x92,
0x84, 0xa6, 0x3c, 0xbf, 0xad, 0x19, 0x7f, 0x37, 0x66,
0x01, 0x10, 0x1c, 0xb2, 0xf8, 0xa6, 0x7b, 0x6e, 0x86,
0x65, 0x69, 0x21, 0x80, 0x43, 0xcd, 0x17, 0x45, 0xd2,
0x5e, 0xcd, 0xdf, 0x60, 0x9c, 0xe2, 0xf9, 0xa8, 0xf7,
0x6f, 0xb8, 0x83, 0x78, 0x0a, 0x39, 0x3e, 0xa1, 0x8b,
0x76, 0x24, 0x37, 0x6b ),
PLAINTEXT ( 0x81, 0xeb, 0xf6, 0x97, 0x54, 0x85, 0x7b, 0xe5, 0xad,
0x7d, 0xdf, 0x00, 0x62, 0xf8, 0x66, 0x42, 0x10, 0x89,
0xd1, 0x36 ),
CIPHERTEXT ( 0x4d, 0x8f, 0xf7, 0x2d, 0x85, 0x9b, 0xae, 0x11, 0x14,
0x20, 0x1c, 0x41, 0x9c, 0x09, 0x84, 0x76, 0xe7, 0x4e,
0xec, 0xe9 ),
AUTH ( 0x3b, 0x2e, 0x9e, 0x1b, 0x37, 0x8d, 0x70, 0x7b, 0xd2, 0xa9,
0x61, 0xbd, 0x78, 0x11, 0xf0, 0xc7 ) );
/* AES-GCM test case 35 */
CIPHER_TEST ( wycheproof_aes_gcm_7e3aa6d7, &aes_gcm_algorithm,
KEY ( 0x30, 0x76, 0x74, 0x14, 0x08, 0xf7, 0x34, 0xce, 0x25, 0xd4,
0x8f, 0x98, 0x2e, 0x8b, 0x84, 0x4b ),
IV ( 0xa2, 0x71, 0x2e, 0xac, 0x5e, 0x06, 0xd3, 0xcc, 0x28, 0x64,
0xaa, 0x8b ),
ADDITIONAL ( 0x18, 0x52, 0x6e, 0x4e, 0xfd, 0x99, 0x5a, 0x0b, 0xf6,
0x40, 0x5d, 0x9f, 0x90, 0x67, 0x25, 0xc2, 0x90, 0x27,
0x89, 0x58, 0xd4, 0x95, 0x54, 0x97, 0x4d, 0x8f, 0xe0,
0x25, 0xe7, 0x86, 0x0d, 0xaa, 0x22, 0x5c, 0x12, 0x85,
0xb0, 0x57, 0x39, 0x16, 0xa4, 0xb6, 0x74, 0x1f, 0x7c,
0xc2, 0xe2, 0x9c, 0xe4, 0xe5, 0x25, 0xe1, 0x2f, 0x43,
0x6c, 0xb7, 0xce, 0x0a, 0xd4, 0x7d, 0xf3, 0xd0, 0xf5,
0xbd, 0x80, 0xfb, 0x27, 0xe4, 0x76, 0x35, 0xa4, 0x98,
0x5f, 0xda, 0xed, 0xf0, 0xe8, 0x21, 0xf1, 0xc8, 0x95,
0x99, 0x85, 0xca, 0xc4, 0x9c, 0x97, 0xa4, 0xa0, 0x24,
0x38, 0xd9, 0x2b, 0x4a, 0xfd, 0x4c, 0x85, 0x5d, 0xcc,
0x7e, 0xf4, 0x1e, 0xcf, 0xc3, 0x68, 0x66, 0x33, 0x4f,
0xcc, 0x05, 0xb2, 0xbb, 0x93, 0xef, 0x13, 0xf0, 0x0c,
0x5e, 0xa9, 0xb9, 0x21, 0xe8, 0xa5, 0x19, 0xd7, 0x7f,
0x64, 0x8e, 0x0e, 0xfe, 0x9b, 0x5a, 0x62, 0x30, 0x5a,
0x2e, 0xcf, 0x7d, 0x49, 0x99, 0x66, 0x3a, 0x6d, 0xdf,
0xca, 0x51, 0x7f, 0x1f, 0x36, 0xf0, 0x89, 0x9b, 0x0b,
0xde, 0xf9, 0xf4, 0x33, 0xc4, 0xbb, 0x26, 0x63, 0xc0,
0xcc, 0x1b, 0xb6, 0x16, 0xe7, 0xd1, 0x94, 0x9e, 0x52,
0x2b, 0xec, 0x85, 0x48, 0x5d, 0x37, 0x1d, 0x11, 0x34,
0xc9, 0x0e, 0xed, 0xe7, 0x5e, 0x86, 0x5d, 0xc7, 0xbe,
0x40, 0x5b, 0x54, 0xc3, 0x3f, 0x0a, 0xcb, 0xac, 0xe6,
0xcf, 0x78, 0x0c, 0x78, 0x03, 0x5b, 0x80, 0x35, 0xb6,
0xea, 0x3f, 0x56, 0x2a, 0x8d, 0x30, 0xa1, 0x56, 0xc1,
0x99, 0xfd, 0xaf, 0xd2, 0x5b, 0xe0, 0x6e, 0xe8, 0x95,
0x58, 0x11, 0x95, 0xef, 0x12, 0x5c, 0xb4, 0xe6, 0x29,
0xe4, 0xf1, 0x8e, 0x0b, 0xee, 0x97, 0x9d, 0x31, 0x51,
0x38, 0x96, 0xdb, 0x84, 0x66, 0xe4, 0x48, 0xe6, 0xb4,
0x60, 0x0a, 0x31, 0x67, 0x57 ),
PLAINTEXT ( 0x41, 0x4e, 0xc6, 0xb1, 0x49, 0xe5, 0x47, 0x35, 0x30,
0x2d, 0xad, 0xa8, 0x88, 0xb9, 0x8b, 0x7f, 0xdb, 0x4c,
0x12, 0x7c ),
CIPHERTEXT ( 0xe4, 0xd3, 0xf4, 0x89, 0x8c, 0xb3, 0xd9, 0x73, 0x26,
0x41, 0xd1, 0xf8, 0xd9, 0xd8, 0x89, 0xb2, 0xc9, 0x8a,
0xf9, 0x30 ),
AUTH ( 0x76, 0xd4, 0xfb, 0xb6, 0x9d, 0x52, 0x9b, 0x64, 0x17, 0x5b,
0x32, 0x8b, 0xe0, 0x0b, 0x10, 0x68 ) );
/* AES-GCM test case 36 */
CIPHER_TEST ( wycheproof_aes_gcm_507e4bb7, &aes_gcm_algorithm,
KEY ( 0x01, 0x84, 0x2c, 0x51, 0xb9, 0x94, 0x3d, 0xa4, 0xec, 0x4e,
0xff, 0xc0, 0x57, 0xf8, 0xc3, 0xe3 ),
IV ( 0x0d, 0x5b, 0xf8, 0xad, 0xe3, 0x8e, 0xd3, 0x84, 0x86, 0x18,
0x39, 0xb8 ),
ADDITIONAL ( 0xe2, 0xb0, 0xc0, 0x47, 0xee, 0x9a, 0x7e, 0xbd, 0xe0,
0xbc, 0x5c, 0x2a, 0x77, 0x3f, 0x02, 0x70, 0x3f, 0x25,
0x26, 0x22, 0x6d, 0x7f, 0xd7, 0x21, 0xa6, 0xbd, 0xae,
0x1d, 0x97, 0x01, 0xda, 0x98, 0x6d, 0xb6, 0xc9, 0xbf,
0x22, 0x4f, 0x03, 0x29, 0x47, 0xbb, 0xcc, 0x40, 0xb2,
0x69, 0xe4, 0x0c, 0x7a, 0x4f, 0xc1, 0xa3, 0xd6, 0x67,
0xcf, 0x63, 0x79, 0x84, 0x3e, 0xcc, 0x3b, 0x9d, 0x06,
0x64, 0xdc, 0xde, 0x0d, 0xfe, 0x8d, 0x80, 0x3a, 0xa8,
0xe1, 0x4a, 0x59, 0xcf, 0xea, 0x1c, 0xc5, 0x8b, 0xd9,
0x3e, 0x8a, 0x54, 0xd5, 0x93, 0x62, 0x29, 0xa2, 0x1c,
0x49, 0x7b, 0xd7, 0x5c, 0x45, 0x34, 0xe1, 0x94, 0x80,
0xb2, 0xa5, 0x0a, 0xe8, 0xde, 0x0b, 0x90, 0x6f, 0x75,
0xc1, 0xdc, 0xf7, 0x37, 0xb5, 0x17, 0x9d, 0xaf, 0x75,
0x1c, 0x3d, 0x6f, 0x51, 0xa1, 0x11, 0x1c, 0x48, 0x65,
0x13, 0x93, 0x93, 0xee, 0x95, 0x96, 0x33, 0x93, 0xa8,
0xf9, 0x80, 0x05, 0x54, 0x67, 0x59, 0x56, 0x5b, 0xaf,
0x95, 0xbe, 0x23, 0x34, 0xe5, 0x7f, 0x7c, 0x23, 0x27,
0x2c, 0x9e, 0xca, 0x77, 0x8d, 0x99, 0x56, 0xee, 0x16,
0xb1, 0x87, 0xfe, 0x30, 0x9d, 0x9e, 0x1e, 0x69, 0x9c,
0x1a, 0x8a, 0xcd, 0xf3, 0x70, 0xfb, 0xca, 0xb3, 0x7b,
0x1e, 0x10, 0x79, 0x34, 0xbb, 0x15, 0x69, 0x87, 0xa2,
0x82, 0xbd, 0xef, 0x9f, 0x9a, 0x92, 0x75, 0x84, 0x74,
0xd8, 0x08, 0xa3, 0xe3, 0xb1, 0x91, 0xa6, 0x47, 0x6f,
0x3e, 0x6e, 0xd4, 0x9d, 0xc0, 0x84, 0x51, 0xe3, 0x40,
0x4e, 0x65, 0x91, 0x8f, 0xdb, 0xa3, 0x3b, 0xa8, 0xea,
0x3b, 0xa0, 0x9b, 0x56, 0x69, 0xb4, 0xbe, 0x9a, 0x64,
0xb9, 0x3b, 0xae, 0x5d, 0xe6, 0x62, 0xb8, 0xf3, 0x5d,
0x4a, 0xbb, 0xb6, 0x81, 0x18, 0xde, 0x9d, 0x02, 0x5e,
0xbe, 0xb5, 0x99, 0xa9, 0xcd, 0x2b, 0x0e, 0x35, 0xfd,
0x82, 0xaa, 0x0d, 0xf2, 0xd4, 0x3b, 0x60, 0xa6, 0x15,
0x12, 0xd5, 0xaf, 0x93, 0x44, 0x89, 0x30, 0x25, 0x72,
0xf9, 0x28, 0xb7, 0x90, 0xe6, 0xaa, 0xdf, 0xf6, 0xb7,
0x30, 0x4b, 0x1a, 0x40, 0x80, 0xcc, 0x4f, 0xaf, 0x8c,
0x69, 0x8d, 0xaa, 0x30, 0x45, 0xc9, 0x45, 0xd8, 0x28,
0xd9, 0x15, 0xda, 0x6d, 0xda, 0x06, 0x62, 0x54, 0x5f,
0x7d, 0x85, 0x29, 0x7a, 0x36, 0x43, 0x8e, 0xa7, 0x31,
0x5a, 0x48, 0xd9, 0xa0, 0x97, 0x14, 0x07, 0x76, 0xf3,
0xc4, 0x3d, 0x28, 0xf5, 0x22, 0xf8, 0xaf, 0xa0, 0x30,
0x00, 0xc5, 0xa0, 0x19, 0x2b, 0x5f, 0xb7, 0x76, 0xb3,
0xbd, 0x06, 0xd3, 0xd9, 0xc5, 0x2c, 0x87, 0x3f, 0xcc,
0xb0, 0xec, 0xd1, 0xa8, 0xe1, 0x41, 0x87, 0xae, 0x26,
0x21, 0xd2, 0xe2, 0x84, 0x8a, 0xe3, 0x0a, 0xf7, 0xed,
0x07, 0x58, 0xfd, 0xbb, 0xc4, 0x97, 0xaa, 0x69, 0xd5,
0x84, 0x41, 0xf4, 0xd4, 0xb8, 0xea, 0x13, 0xaa, 0xac,
0x97, 0xc4, 0xbf, 0xfc, 0x4d, 0x07, 0xdb, 0xc6, 0x2a,
0xe2, 0x7f, 0x00, 0xa8, 0xdb, 0x0c, 0x5d, 0x1b, 0xb2,
0x40, 0x42, 0x48, 0x13, 0x69, 0xf6, 0xcc, 0xd4, 0xdf,
0x85, 0xd9, 0xc5, 0x8a, 0x90, 0x06, 0x98, 0x97, 0xe1,
0x7a, 0xe0, 0x33, 0x42, 0x48, 0xe1, 0x33, 0x06, 0xa9,
0x36, 0x69, 0x7d, 0x2b, 0x5d, 0xad, 0xde, 0x5a, 0xc6,
0xc1, 0x0b, 0x55, 0x4b, 0x6b, 0xbd, 0x27, 0x75, 0x21,
0x01, 0xb5, 0xdf, 0x1f, 0x1c, 0xbb, 0x8c, 0x0e, 0xc1,
0x97, 0x7c, 0x45, 0x81, 0xab, 0x8d, 0xcd, 0x26, 0xa3,
0x1d, 0xff, 0x01, 0x43, 0x37, 0x85, 0x20, 0x6b, 0x65,
0x95, 0xe3, 0xb8, 0x24, 0xb5, 0x83, 0x42, 0x95, 0x40,
0x7f, 0x50, 0x27, 0x15, 0x9e, 0xee, 0x46, 0x18, 0x9f,
0x39, 0x05, 0x37, 0xdd, 0xce, 0x6d, 0xb5 ),
PLAINTEXT ( 0xdf, 0xc4, 0x0c, 0xf3, 0x87, 0x38, 0x67, 0x51, 0x20,
0xf0, 0x3b, 0x12, 0x50, 0x55, 0x89, 0xb2, 0xf0, 0x2b,
0xba, 0x68 ),
CIPHERTEXT ( 0xe4, 0x03, 0x53, 0x56, 0xa3, 0x4b, 0xb0, 0x1e, 0xa6,
0x5c, 0x7e, 0x6d, 0x97, 0x2c, 0xb4, 0xce, 0xc0, 0x25,
0x2a, 0x79 ),
AUTH ( 0x10, 0x54, 0xef, 0x6b, 0xc0, 0xa5, 0x15, 0x64, 0x45, 0xcf,
0x76, 0x0a, 0x2a, 0x65, 0xd8, 0x47 ) );
/* AES-GCM test case 37 */
CIPHER_TEST ( wycheproof_aes_gcm_a74ffd89, &aes_gcm_algorithm,
KEY ( 0x67, 0xbd, 0x1f, 0xe8, 0x3e, 0x45, 0x00, 0xdd, 0xae, 0xa7,
0x21, 0x03, 0x5d, 0x4c, 0xf7, 0xe4 ),
IV ( 0x54, 0x49, 0xb2, 0x93, 0xc8, 0x49, 0xbe, 0x99, 0x41, 0xb1,
0xfb, 0x3e ),
ADDITIONAL ( 0x18, 0xb8, 0xe9, 0xb1, 0x41, 0x28, 0x8c, 0xa8, 0x91,
0x60, 0x6a, 0x88, 0x98, 0x70, 0x57, 0xfa, 0x07, 0x8e,
0xfc, 0x47, 0xc0, 0xe2, 0x70, 0xb3, 0x69, 0x85, 0xc9,
0x24, 0x50, 0x6e, 0x4f, 0x8e, 0x4a, 0x3d, 0x15, 0x41,
0xd0, 0x53, 0x5f, 0x51, 0x5a, 0x37, 0x0a, 0x34, 0x00,
0xe2, 0x40, 0x8f, 0xc9, 0x2d, 0x21, 0x7f, 0x9f, 0x37,
0xfb, 0x0b, 0x97, 0x2a, 0x3a, 0x76, 0x02, 0xca, 0xc9,
0x8f, 0x8f, 0x02, 0x31, 0xa4, 0xd7, 0x6c, 0xf5, 0x84,
0xd9, 0x23, 0x9e, 0xe8, 0x16, 0x76, 0x5c, 0xec, 0xd2,
0x8f, 0x32, 0x5b, 0x90, 0x7e, 0x0b, 0x02, 0xb2, 0x60,
0x60, 0x9c, 0x70, 0x22, 0x6a, 0x16, 0xec, 0xd9, 0xbd,
0x67, 0xa6, 0x4e, 0xa1, 0x2c, 0x4b, 0x24, 0x9c, 0x05,
0xa9, 0x01, 0x12, 0x94, 0x02, 0x00, 0xdf, 0x3e, 0x70,
0x51, 0x9a, 0x4b, 0x9e, 0xc1, 0x36, 0xb6, 0xf5, 0x35,
0xd4, 0xb8, 0xb2, 0xae, 0x16, 0xc5, 0xa5, 0x4c, 0xb8,
0xc5, 0x7d, 0x87, 0x45, 0x16, 0x97, 0xe5, 0x10, 0x1e,
0x1d, 0x09, 0xa9, 0x4d, 0x21, 0x17, 0xb3, 0x0c, 0xe9,
0x0c, 0x36, 0x85, 0x11, 0x7e, 0x21, 0x94, 0xa3, 0x79,
0xe7, 0xa5, 0x75, 0x4d, 0xa2, 0x01, 0x79, 0x58, 0x2f,
0x97, 0x76, 0x7e, 0x63, 0x3d, 0x14, 0x11, 0x85, 0xfe,
0x37, 0x84, 0xa4, 0x4d, 0x94, 0x21, 0x0b, 0x21, 0x47,
0x68, 0xaa, 0x51, 0x11, 0x7e, 0xd5, 0xc8, 0x80, 0x61,
0x36, 0x23, 0xe4, 0xaa, 0xbb, 0xb6, 0x47, 0x72, 0x17,
0x64, 0xa5, 0x13, 0x42, 0x5b, 0x8d, 0x90, 0xd4, 0x18,
0x96, 0x51, 0xf1, 0x52, 0x9e, 0x68, 0x84, 0x66, 0xd8,
0xab, 0xed, 0x49, 0xe2, 0xa5, 0xf0, 0xf4, 0x49, 0x3b,
0x87, 0x8d, 0x41, 0x69, 0x84, 0x85, 0x47, 0xf5, 0x91,
0x27, 0x76, 0x31, 0xf1, 0xfe, 0xd6, 0xc9, 0x7d, 0x16,
0x7f, 0x8b, 0xaa, 0x68, 0x92, 0x0a, 0x2b, 0x02, 0x20,
0xd2, 0xad, 0x5a, 0xe6, 0x5c, 0xd0, 0x9d, 0xcb, 0xbf,
0xab, 0x42, 0xbc, 0x66, 0x68, 0x67, 0x37, 0x8e, 0x40,
0xfd, 0x3c, 0xed, 0x97, 0x19, 0xa7, 0x66, 0x59, 0xba,
0x22, 0x21, 0x3a, 0x5a, 0x23, 0xe3, 0x0a, 0xee, 0xef,
0x99, 0x51, 0x64, 0x88, 0x32, 0x99, 0xe7, 0xdd, 0x6f,
0xff, 0x16, 0x17, 0xb4, 0x28, 0x7c, 0x31, 0x97, 0xcb,
0x3b, 0x1a, 0xbd, 0x54, 0xb2, 0xf0, 0xca, 0x57, 0x3b,
0x1a, 0x46, 0x77, 0xa0, 0x54, 0xf1, 0x23, 0x2c, 0xd1,
0x98, 0x03, 0x63, 0x3f, 0xe5, 0x7b, 0x04, 0x1c, 0x76,
0x8d, 0xf7, 0xc3, 0x50, 0x63, 0x13, 0xe7, 0xea, 0xa3,
0x65, 0x62, 0x48, 0x33, 0xbe, 0xcd, 0x76, 0x8f, 0xcc,
0x4a, 0x31, 0xad, 0xe9, 0x32, 0xe7, 0x1a, 0xde, 0x8c,
0xcb, 0xf4, 0x00, 0xb3, 0xaa, 0x2d, 0x32, 0x89, 0x1a,
0x4a, 0x17, 0x3f, 0xb7, 0x49, 0x8c, 0x95, 0x64, 0xc8,
0x9b, 0x70, 0x54, 0x8f, 0xd4, 0x95, 0xac, 0x2e, 0xa8,
0x5c, 0x4b, 0xed, 0xb4, 0xc9, 0x13, 0x6d, 0x1a, 0x0a,
0x6c, 0x16, 0x18, 0xc4, 0xf1, 0xaa, 0x8e, 0x61, 0x9f,
0xef, 0x76, 0x5e, 0x1c, 0x74, 0x10, 0xf8, 0x6c, 0xd8,
0xae, 0x7d, 0x0b, 0x7e, 0xd2, 0x89, 0x47, 0x43, 0x3c,
0xd0, 0xff, 0x64, 0xf5, 0xf9, 0x02, 0x98, 0x16, 0xd6,
0x10, 0x80, 0x23, 0x7f, 0x09, 0x9a, 0xad, 0x2f, 0x85,
0x20, 0xf2, 0x5d, 0x76, 0x85, 0xcc, 0x18, 0x93, 0xb3,
0xe8, 0xda, 0x3a, 0xaf, 0xdb, 0x38, 0x84, 0x6b, 0x67,
0x58, 0xee, 0x02, 0xb5, 0xc5, 0xac, 0x89, 0x9b, 0x2c,
0x07, 0x38, 0x45, 0x3b, 0xe2, 0xa8, 0x3b, 0x87, 0x9f,
0x97, 0xcb, 0xad, 0x8e, 0x21, 0x47, 0x86, 0xfb, 0x2a,
0x83, 0x6c, 0x74, 0xe0, 0x6e, 0xf1, 0x90, 0x02, 0x2f,
0x4b, 0x55, 0x57, 0x69, 0x4c, 0x25, 0x4b, 0xc7 ),
PLAINTEXT ( 0xc2, 0x59, 0x15, 0x19, 0x09, 0xcc, 0x04, 0x80, 0xab,
0xba, 0xe3, 0xf7, 0xfb, 0x6b, 0xea, 0xc9, 0x22, 0x58,
0xd3, 0x7d ),
CIPHERTEXT ( 0x2c, 0xcc, 0x82, 0x4b, 0x0c, 0x0b, 0x59, 0x3f, 0xae,
0xef, 0xf2, 0x42, 0x4f, 0x3a, 0x64, 0xb1, 0xdc, 0xd0,
0x8c, 0x07 ),
AUTH ( 0xe5, 0x2d, 0x78, 0x83, 0x66, 0x66, 0x33, 0x3b, 0x2f, 0xe5,
0x9d, 0xdc, 0x5d, 0x6f, 0x26, 0x4d ) );
/* AES-GCM test case 38 */
CIPHER_TEST ( wycheproof_aes_gcm_876dc2f0, &aes_gcm_algorithm,
KEY ( 0xe7, 0xe0, 0x82, 0x7a, 0x58, 0x2b, 0x94, 0x68, 0x28, 0xcb,
0x6d, 0xf0, 0xd1, 0xc4, 0x61, 0x7e ),
IV ( 0x3a, 0x40, 0x31, 0x92, 0x06, 0x4a, 0x51, 0xdf, 0x71, 0xa3,
0x55, 0x4f ),
ADDITIONAL ( 0x05, 0x3d, 0x34, 0x68, 0xb4, 0xd0, 0xa5, 0xa6, 0xa1,
0x2d, 0xff, 0x01, 0x7c, 0x40, 0x21, 0x8c, 0x2f, 0x99,
0x01, 0x58, 0xc5, 0x0a, 0x95, 0x50, 0x31, 0x30, 0xbb,
0x92, 0xa5, 0xd7, 0x61, 0x59, 0x73, 0xec, 0x88, 0x27,
0x04, 0x3b, 0x29, 0x22, 0x2e, 0x15, 0x71, 0x3f, 0xb9,
0xa5, 0x8d, 0xb9, 0x0a, 0x39, 0x7d, 0x31, 0xb1, 0x6e,
0x21, 0xb3, 0xbe, 0xfd, 0x3d, 0x66, 0xd8, 0x99, 0x03,
0x12, 0xb3, 0xf7, 0xad, 0xa3, 0xf3, 0x9a, 0xbb, 0xe9,
0x2e, 0x17, 0xa1, 0xa6, 0x6d, 0x6a, 0x29, 0x05, 0x34,
0xb3, 0x11, 0x02, 0x87, 0x91, 0x5b, 0x08, 0xf4, 0x74,
0x31, 0xa1, 0xbf, 0xb9, 0xc8, 0x23, 0xe5, 0x4a, 0x16,
0xb2, 0x87, 0xa5, 0x7d, 0x4c, 0x34, 0x63, 0xc8, 0x38,
0xc4, 0x62, 0xdc, 0x78, 0x98, 0xa3, 0xd7, 0xf5, 0xf6,
0x53, 0xa9, 0x45, 0x74, 0x4d, 0xbb, 0x12, 0x6b, 0xd2,
0x18, 0x02, 0xe4, 0x68, 0x4a, 0xd7, 0xdc, 0x90, 0x39,
0x1b, 0x8b, 0x80, 0x00, 0x34, 0x3d, 0xb3, 0x37, 0x14,
0x5b, 0xf1, 0x7f, 0xe3, 0x1f, 0xdc, 0x43, 0x41, 0x63,
0xee, 0x6a, 0xe4, 0x4a, 0xda, 0x02, 0xde, 0x61, 0x92,
0xbd, 0xa5, 0x70, 0x18, 0xdd, 0xe5, 0xba, 0x1f, 0x59,
0x72, 0x1b, 0x45, 0x83, 0x96, 0x8e, 0xfe, 0x86, 0x13,
0x81, 0x6c, 0x35, 0x02, 0xac, 0x1b, 0x1e, 0xf1, 0x62,
0xd0, 0x08, 0x5f, 0x8d, 0xf3, 0x7b, 0x34, 0x36, 0xd1,
0x4c, 0xc5, 0x46, 0x84, 0xe8, 0x98, 0xfc, 0xb6, 0x95,
0xf1, 0x5a, 0x59, 0xd7, 0xdf, 0x60, 0xea, 0xa0, 0x28,
0x38, 0x8d, 0x7f, 0xdc, 0xa2, 0xbb, 0xd9, 0x0e, 0x07,
0xa1, 0xa0, 0x22, 0x81, 0xdc, 0x85, 0xe0, 0x0d, 0x83,
0x75, 0x0b, 0xef, 0x47, 0xfe, 0x02, 0x56, 0xb2, 0x3c,
0xcd, 0x83, 0xc8, 0x64, 0xe8, 0x61, 0x9b, 0x7b, 0x7e,
0x75, 0xc9, 0xb2, 0x48, 0x14, 0xe6, 0x53, 0x3c, 0x4f,
0x78, 0x55, 0xe4, 0xfa, 0x21, 0xde, 0x07, 0x47, 0xc6,
0x47, 0x95, 0xaa, 0xc0, 0x15, 0xab, 0x53, 0x2d, 0x03,
0x3e, 0x20, 0x58, 0x98, 0xa7, 0x51, 0x1d, 0xa3, 0x2f,
0x89, 0x8d, 0xae, 0xd3, 0x83, 0xa4, 0x83, 0x14, 0xdb,
0x35, 0xf7, 0x5e, 0x7b, 0xf1, 0x2c, 0x7a, 0x99, 0xe5,
0x0e, 0xb8, 0xdc, 0x93, 0xf8, 0x70, 0x06, 0x24, 0x43,
0x82, 0x11, 0xcd, 0xa8, 0x64, 0x23, 0xcf, 0xde, 0x8d,
0x18, 0x3a, 0xe5, 0xd6, 0xad, 0x70, 0x13, 0x37, 0x53,
0xe4, 0x0f, 0x73, 0x65, 0x2d, 0xfd, 0x03, 0x07, 0x4f,
0xee, 0x03, 0x4c, 0xe6, 0xd1, 0x6c, 0xcf, 0xc0, 0xb3,
0x34, 0x1a, 0x9e, 0xc1, 0x8e, 0x63, 0x08, 0x72, 0xf6,
0x25, 0xe0, 0x41, 0x29, 0x17, 0x33, 0x13, 0xee, 0x22,
0xb1, 0xcb, 0xcb, 0xd9, 0x0e, 0xe7, 0x4c, 0x50, 0x19,
0x17, 0x3e, 0xed, 0x3a, 0xb2, 0xa4, 0x7f, 0x16, 0xc8,
0x67, 0x2e, 0x44, 0x9e, 0x06, 0xe3, 0xbe, 0xc4, 0xd0,
0x59, 0x71, 0xfe, 0x8e, 0xba, 0x75, 0x2d, 0x5d, 0x96,
0x2e, 0x6e, 0x7d, 0x27, 0x40, 0x84, 0x64, 0x44, 0x1b,
0x3d, 0xb1, 0x88, 0x04, 0xfc, 0x1e, 0x5c, 0x42, 0x8e,
0x97, 0x06, 0x88, 0xd8, 0xc5, 0x5f, 0x29, 0x80, 0xf3,
0x0a, 0x6b, 0x86, 0x03, 0x4a, 0xd2, 0xf7, 0x9a, 0x76,
0xef, 0x44, 0xc8, 0xd8, 0x16, 0x34, 0x5a, 0x62, 0x70,
0xc1, 0x5c, 0x79, 0xde, 0xeb, 0xf3, 0xdc, 0xbc, 0x1a,
0x1a, 0x96, 0x8d, 0x31, 0x8b, 0x6c, 0xcc, 0xc0, 0x9a,
0xb7, 0x55, 0xcb, 0xe0, 0xf6, 0xff, 0x4c, 0x23, 0x71,
0x09, 0x35, 0xa4, 0xea, 0x5b, 0xca, 0xb5, 0x1c, 0x30,
0x74, 0x54, 0xfb, 0xa5, 0x6c, 0xef, 0x13, 0x08, 0xb7,
0xcf, 0x07, 0x38, 0x62, 0x69, 0x64, 0xae, 0x7d, 0x2b,
0x65, 0xad, 0x54, 0xd5, 0x28, 0x72, 0x69, 0x9b, 0x96 ),
PLAINTEXT ( 0x65, 0xe0, 0x00, 0x7f, 0x93, 0x22, 0x55, 0x99, 0xdf,
0xc5, 0x91, 0x07, 0x72, 0x0c, 0x50, 0x3c, 0x01, 0x58,
0xf3, 0xf4 ),
CIPHERTEXT ( 0x33, 0x6c, 0x3b, 0x00, 0x80, 0xeb, 0x95, 0x48, 0x0e,
0x67, 0x13, 0x66, 0xbe, 0x55, 0x08, 0xb1, 0xfe, 0x6a,
0xb1, 0x4e ),
AUTH ( 0x63, 0x27, 0x8e, 0x17, 0x81, 0xfa, 0xd9, 0x31, 0x31, 0xec,
0xfd, 0x61, 0x92, 0x75, 0x89, 0x0c ) );
/* AES-GCM test case 39 */
CIPHER_TEST ( wycheproof_aes_gcm_0e57609d, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00 ),
ADDITIONAL(),
PLAINTEXT ( 0xeb, 0xd4, 0xa3, 0xe1, 0x0c, 0xf6, 0xd4, 0x1c, 0x50,
0xae, 0xae, 0x00, 0x75, 0x63, 0xb0, 0x72 ),
CIPHERTEXT ( 0xf6, 0x2d, 0x84, 0xd6, 0x49, 0xe5, 0x6b, 0xc8, 0xcf,
0xed, 0xc5, 0xd7, 0x4a, 0x51, 0xe2, 0xf7 ),
AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
/* AES-GCM test case 40 */
CIPHER_TEST ( wycheproof_aes_gcm_5b8dd48a, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff ),
ADDITIONAL(),
PLAINTEXT ( 0xd5, 0x93, 0xc4, 0xd8, 0x22, 0x4f, 0x1b, 0x10, 0x0c,
0x35, 0xe4, 0xf6, 0xc4, 0x00, 0x65, 0x43 ),
CIPHERTEXT ( 0x43, 0x1f, 0x31, 0xe6, 0x84, 0x09, 0x31, 0xfd, 0x95,
0xf9, 0x4b, 0xf8, 0x82, 0x96, 0xff, 0x69 ),
AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
/* AES-GCM test case 41 (skipped: modified tag) */
/* AES-GCM test case 42 (skipped: modified tag) */
/* AES-GCM test case 43 (skipped: modified tag) */
/* AES-GCM test case 44 (skipped: modified tag) */
/* AES-GCM test case 45 (skipped: modified tag) */
/* AES-GCM test case 46 (skipped: modified tag) */
/* AES-GCM test case 47 (skipped: modified tag) */
/* AES-GCM test case 48 (skipped: modified tag) */
/* AES-GCM test case 49 (skipped: modified tag) */
/* AES-GCM test case 50 (skipped: modified tag) */
/* AES-GCM test case 51 (skipped: modified tag) */
/* AES-GCM test case 52 (skipped: modified tag) */
/* AES-GCM test case 53 (skipped: modified tag) */
/* AES-GCM test case 54 (skipped: modified tag) */
/* AES-GCM test case 55 (skipped: modified tag) */
/* AES-GCM test case 56 (skipped: modified tag) */
/* AES-GCM test case 57 (skipped: modified tag) */
/* AES-GCM test case 58 (skipped: modified tag) */
/* AES-GCM test case 59 (skipped: modified tag) */
/* AES-GCM test case 60 (skipped: modified tag) */
/* AES-GCM test case 61 (skipped: modified tag) */
/* AES-GCM test case 62 (skipped: modified tag) */
/* AES-GCM test case 63 (skipped: modified tag) */
/* AES-GCM test case 64 (skipped: modified tag) */
/* AES-GCM test case 65 (skipped: modified tag) */
/* AES-GCM test case 66 (skipped: modified tag) */
/* AES-GCM test case 67 (skipped: modified tag) */
/* AES-GCM test case 68 */
CIPHER_TEST ( wycheproof_aes_gcm_15eae47a, &aes_gcm_algorithm,
KEY ( 0xaa, 0x02, 0x3d, 0x04, 0x78, 0xdc, 0xb2, 0xb2, 0x31, 0x24,
0x98, 0x29, 0x3d, 0x9a, 0x91, 0x29 ),
IV ( 0x04, 0x32, 0xbc, 0x49, 0xac, 0x34, 0x41, 0x20 ),
ADDITIONAL ( 0xaa, 0xc3, 0x92, 0x31, 0x12, 0x98, 0x72, 0xa2 ),
PLAINTEXT ( 0x20, 0x35, 0xaf, 0x31, 0x3d, 0x13, 0x46, 0xab, 0x00,
0x15, 0x4f, 0xea, 0x78, 0x32, 0x21, 0x05 ),
CIPHERTEXT ( 0x64, 0xc3, 0x6b, 0xb3, 0xb7, 0x32, 0x03, 0x4e, 0x3a,
0x7d, 0x04, 0xef, 0xc5, 0x19, 0x77, 0x85 ),
AUTH ( 0xb7, 0xd0, 0xdd, 0x70, 0xb0, 0x0d, 0x65, 0xb9, 0x7c, 0xfd,
0x08, 0x0f, 0xf4, 0xb8, 0x19, 0xd1 ) );
/* AES-GCM test case 69 */
CIPHER_TEST ( wycheproof_aes_gcm_5bf301b1, &aes_gcm_algorithm,
KEY ( 0xf3, 0x43, 0x47, 0x25, 0xc8, 0x2a, 0x7f, 0x8b, 0xb0, 0x7d,
0xf1, 0xf8, 0x12, 0x2f, 0xb6, 0xc9 ),
IV ( 0x28, 0xe9, 0xb7, 0x85, 0x17, 0x24, 0xba, 0xe3 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x44, 0xac, 0xa0, 0x0f, 0x42, 0xe4, 0x19, 0x9b, 0x82, 0x9a,
0x55, 0xe6, 0x9b, 0x07, 0x3d, 0x9e ) );
/* AES-GCM test case 70 */
CIPHER_TEST ( wycheproof_aes_gcm_6d9ec3c9, &aes_gcm_algorithm,
KEY ( 0xde, 0xb6, 0x22, 0x33, 0x55, 0x9b, 0x57, 0x47, 0x66, 0x02,
0xb5, 0xad, 0xac, 0x57, 0xc7, 0x7f ),
IV ( 0xd0, 0x84, 0x54, 0x7d, 0xe5, 0x5b, 0xbc, 0x15 ),
ADDITIONAL(),
PLAINTEXT ( 0xd8, 0x98, 0x6d, 0xf0, 0x24, 0x1e, 0xd3, 0x29, 0x75,
0x82, 0xc0, 0xc2, 0x39, 0xc7, 0x24, 0xcb ),
CIPHERTEXT ( 0x03, 0xe1, 0xa1, 0x68, 0xa7, 0xe3, 0x77, 0xa9, 0x13,
0x87, 0x9b, 0x29, 0x6a, 0x1b, 0x5f, 0x9c ),
AUTH ( 0x32, 0x90, 0xaa, 0x95, 0xaf, 0x50, 0x5a, 0x74, 0x2f, 0x51,
0x7f, 0xab, 0xcc, 0x9b, 0x20, 0x94 ) );
/* AES-GCM test case 71 */
CIPHER_TEST ( wycheproof_aes_gcm_5e73e414, &aes_gcm_algorithm,
KEY ( 0x20, 0x34, 0xa8, 0x25, 0x47, 0x27, 0x6c, 0x83, 0xdd, 0x32,
0x12, 0xa8, 0x13, 0x57, 0x2b, 0xce ),
IV ( 0x32, 0x54, 0x20, 0x2d, 0x85, 0x47, 0x34, 0x81, 0x23, 0x98,
0x12, 0x7a, 0x3d, 0x13, 0x44, 0x21 ),
ADDITIONAL ( 0x1a, 0x02, 0x93, 0xd8, 0xf9, 0x02, 0x19, 0x05, 0x89,
0x02, 0x13, 0x90, 0x13, 0x90, 0x81, 0x90, 0xbc, 0x49,
0x08, 0x90, 0xd3, 0xff, 0x12, 0xa3 ),
PLAINTEXT ( 0x02, 0xef, 0xd2, 0xe5, 0x78, 0x23, 0x12, 0x82, 0x7e,
0xd5, 0xd2, 0x30, 0x18, 0x9a, 0x2a, 0x34, 0x2b, 0x27,
0x7c, 0xe0, 0x48, 0x46, 0x21, 0x93 ),
CIPHERTEXT ( 0x64, 0x06, 0x9c, 0x2d, 0x58, 0x69, 0x05, 0x61, 0xf2,
0x7e, 0xe1, 0x99, 0xe6, 0xb4, 0x79, 0xb6, 0x36, 0x9e,
0xec, 0x68, 0x86, 0x72, 0xbd, 0xe9 ),
AUTH ( 0x9b, 0x7a, 0xba, 0xdd, 0x6e, 0x69, 0xc1, 0xd9, 0xec, 0x92,
0x57, 0x86, 0x53, 0x4f, 0x50, 0x75 ) );
/* AES-GCM test case 72 */
CIPHER_TEST ( wycheproof_aes_gcm_d5198faa, &aes_gcm_algorithm,
KEY ( 0xb6, 0x7b, 0x1a, 0x6e, 0xfd, 0xd4, 0x0d, 0x37, 0x08, 0x0f,
0xbe, 0x8f, 0x80, 0x47, 0xae, 0xb9 ),
IV ( 0xfa, 0x29, 0x4b, 0x12, 0x99, 0x72, 0xf7, 0xfc, 0x5b, 0xbd,
0x5b, 0x96, 0xbb, 0xa8, 0x37, 0xc9 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xa2, 0xcf, 0x26, 0x48, 0x15, 0x17, 0xec, 0x25, 0x08, 0x5c,
0x5b, 0x17, 0xd0, 0x78, 0x61, 0x83 ) );
/* AES-GCM test case 73 */
CIPHER_TEST ( wycheproof_aes_gcm_ab750cbd, &aes_gcm_algorithm,
KEY ( 0x20, 0x9e, 0x6d, 0xbf, 0x2a, 0xd2, 0x6a, 0x10, 0x54, 0x45,
0xfc, 0x02, 0x07, 0xcd, 0x9e, 0x9a ),
IV ( 0x94, 0x77, 0x84, 0x9d, 0x6c, 0xcd, 0xfc, 0xa1, 0x12, 0xd9,
0x2e, 0x53, 0xfa, 0xe4, 0xa7, 0xca ),
ADDITIONAL(),
PLAINTEXT ( 0x01 ),
CIPHERTEXT ( 0xfd ),
AUTH ( 0x03, 0x2d, 0xf7, 0xbb, 0xa5, 0xd8, 0xea, 0x1a, 0x14, 0xf1,
0x6f, 0x70, 0xbd, 0x0e, 0x14, 0xec ) );
/* AES-GCM test case 74 */
CIPHER_TEST ( wycheproof_aes_gcm_ea79dc25, &aes_gcm_algorithm,
KEY ( 0xa5, 0x49, 0x44, 0x2e, 0x35, 0x15, 0x40, 0x32, 0xd0, 0x7c,
0x86, 0x66, 0x00, 0x6a, 0xa6, 0xa2 ),
IV ( 0x51, 0x71, 0x52, 0x45, 0x68, 0xe8, 0x1d, 0x97, 0xe8, 0xc4,
0xde, 0x4b, 0xa5, 0x6c, 0x10, 0xa0 ),
ADDITIONAL(),
PLAINTEXT ( 0x11, 0x82, 0xe9, 0x35, 0x96, 0xca, 0xc5, 0x60, 0x89,
0x46, 0x40, 0x0b, 0xc7, 0x3f, 0x3a ),
CIPHERTEXT ( 0x2f, 0x33, 0x30, 0x87, 0xbd, 0xca, 0x58, 0x21, 0x9f,
0x9b, 0xfc, 0x27, 0x3e, 0x45, 0xcc ),
AUTH ( 0xe0, 0x6d, 0x1e, 0xf4, 0x73, 0x13, 0x29, 0x57, 0xad, 0x37,
0xea, 0xef, 0x29, 0x73, 0x3c, 0xa0 ) );
/* AES-GCM test case 75 */
CIPHER_TEST ( wycheproof_aes_gcm_3397c9ae, &aes_gcm_algorithm,
KEY ( 0xcf, 0xb4, 0xc2, 0x6f, 0x12, 0x6f, 0x6a, 0x0a, 0xcb, 0x8e,
0x4e, 0x22, 0x0f, 0x6c, 0x56, 0xcd ),
IV ( 0x12, 0x75, 0x11, 0x54, 0x99, 0xae, 0x72, 0x22, 0x68, 0x51,
0x5b, 0xf0, 0xc1, 0x64, 0xb4, 0x9c ),
ADDITIONAL(),
PLAINTEXT ( 0x09, 0xdf, 0xd7, 0xf0, 0x80, 0x27, 0x52, 0x57, 0xcf,
0x97, 0xe7, 0x6f, 0x96, 0x6b, 0x1a, 0xd9 ),
CIPHERTEXT ( 0xa7, 0x80, 0xbd, 0x01, 0xc8, 0x08, 0x85, 0x15, 0x6c,
0x88, 0xa9, 0x73, 0x26, 0x4c, 0x8e, 0xe5 ),
AUTH ( 0x2a, 0xde, 0xff, 0xa6, 0x82, 0xc8, 0xd8, 0xa8, 0x1f, 0xad,
0xa7, 0xd9, 0xfc, 0xdd, 0x2e, 0xe2 ) );
/* AES-GCM test case 76 */
CIPHER_TEST ( wycheproof_aes_gcm_347e1695, &aes_gcm_algorithm,
KEY ( 0x0b, 0x11, 0xef, 0x3a, 0x08, 0xc0, 0x29, 0x70, 0xf7, 0x42,
0x81, 0xc8, 0x60, 0x69, 0x1c, 0x75 ),
IV ( 0x95, 0xc1, 0xdd, 0x8c, 0x0f, 0x17, 0x05, 0xec, 0xe6, 0x89,
0x37, 0x90, 0x1f, 0x7a, 0xdd, 0x7b ),
ADDITIONAL(),
PLAINTEXT ( 0xf6, 0x93, 0xd4, 0xed, 0xd8, 0x25, 0xdb, 0xb0, 0x61,
0x8d, 0x91, 0x11, 0x31, 0x28, 0x88, 0x0d, 0xbe, 0xbb,
0x23, 0xe2, 0x5d, 0x00, 0xed, 0x1f, 0x07, 0x7d, 0x87,
0x0b, 0xe9, 0xcc, 0x75, 0x36 ),
CIPHERTEXT ( 0x7e, 0x47, 0xe1, 0x0f, 0xe3, 0xc6, 0xfb, 0xfa, 0x38,
0x17, 0x70, 0xea, 0xf5, 0xd4, 0x8d, 0x14, 0x82, 0xe7,
0x1e, 0x0c, 0x44, 0xdf, 0xf1, 0xe3, 0x0c, 0xa6, 0xf9,
0x5d, 0x92, 0x05, 0x20, 0x84 ),
AUTH ( 0xd0, 0x14, 0x44, 0xfa, 0x5d, 0x9c, 0x49, 0x96, 0x29, 0xd1,
0x74, 0xff, 0x39, 0x27, 0xa1, 0xac ) );
/* AES-GCM test case 77 */
CIPHER_TEST ( wycheproof_aes_gcm_63a3e6ca, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0xf9, 0x5f, 0xde, 0x4a, 0x75, 0x19, 0x13, 0x20, 0x2a, 0xee,
0xee, 0x32, 0xa0, 0xb5, 0x57, 0x53 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x00, 0x07, 0x8d, 0x10, 0x9d, 0x92, 0x14, 0x3f, 0xcd,
0x5d, 0xf5, 0x67, 0x21, 0xb8, 0x84, 0xfa, 0xc6, 0x4a,
0xc7, 0x76, 0x2c, 0xc0, 0x9e, 0xea, 0x2a, 0x3c, 0x68,
0xe9, 0x2a, 0x17, 0xbd, 0xb5, 0x75, 0xf8, 0x7b, 0xda,
0x18, 0xbe, 0x56, 0x4e ),
AUTH ( 0x15, 0x2a, 0x65, 0x04, 0x5f, 0xe6, 0x74, 0xf9, 0x76, 0x27,
0x42, 0x7a, 0xf5, 0xbe, 0x22, 0xda ) );
/* AES-GCM test case 78 */
CIPHER_TEST ( wycheproof_aes_gcm_dc6c9702, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x7b, 0x95, 0xb8, 0xc3, 0x56, 0x81, 0x0a, 0x84, 0x71, 0x1d,
0x68, 0x15, 0x0a, 0x1b, 0x77, 0x50 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x84, 0xd4, 0xc9, 0xc0, 0x8b, 0x4f, 0x48, 0x28, 0x61,
0xe3, 0xa9, 0xc6, 0xc3, 0x5b, 0xc4, 0xd9, 0x1d, 0xf9,
0x27, 0x37, 0x45, 0x13, 0xbf, 0xd4, 0x9f, 0x43, 0x6b,
0xd7, 0x3f, 0x32, 0x52, 0x85, 0xda, 0xef, 0x4f, 0xf7,
0xe1, 0x3d, 0x46, 0xa6 ),
AUTH ( 0x21, 0x3a, 0x3c, 0xb9, 0x38, 0x55, 0xd1, 0x8e, 0x69, 0x33,
0x7e, 0xee, 0x66, 0xae, 0xec, 0x07 ) );
/* AES-GCM test case 79 */
CIPHER_TEST ( wycheproof_aes_gcm_942cc802, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x1a, 0x55, 0x2e, 0x67, 0xcd, 0xc4, 0xdc, 0x1a, 0x33, 0xb8,
0x24, 0x87, 0x4e, 0xbf, 0x0b, 0xed ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x94, 0x8c, 0xa3, 0x7a, 0x8e, 0x66, 0x49, 0xe8, 0x8a,
0xef, 0xfb, 0x1c, 0x59, 0x8f, 0x36, 0x07, 0x00, 0x77,
0x02, 0x41, 0x7e, 0xa0, 0xe0, 0xbc, 0x3c, 0x60, 0xad,
0x5a, 0x94, 0x98, 0x86, 0xde, 0x96, 0x8c, 0xf5, 0x3e,
0xa6, 0x46, 0x2a, 0xed ),
AUTH ( 0x99, 0xb3, 0x81, 0xbf, 0xa2, 0xaf, 0x97, 0x51, 0xc3, 0x9d,
0x1b, 0x6e, 0x86, 0xd1, 0xbe, 0x6a ) );
/* AES-GCM test case 80 */
CIPHER_TEST ( wycheproof_aes_gcm_77d7dce1, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0xdd, 0x9d, 0x0b, 0x4a, 0x0c, 0x3d, 0x68, 0x15, 0x24, 0xbf,
0xfc, 0xa3, 0x1d, 0x90, 0x76, 0x61 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x64, 0xb1, 0x93, 0x14, 0xc3, 0x1a, 0xf4, 0x5a, 0xcc,
0xdf, 0x7e, 0x3c, 0x4d, 0xb7, 0x9f, 0x0d, 0x94, 0x8c,
0xa3, 0x7a, 0x8e, 0x66, 0x49, 0xe8, 0x8a, 0xef, 0xfb,
0x1c, 0x59, 0x8f, 0x36, 0x07, 0x00, 0x77, 0x02, 0x41,
0x7e, 0xa0, 0xe0, 0xbc ),
AUTH ( 0x52, 0x81, 0xef, 0xc7, 0xf1, 0x3a, 0xc8, 0xe1, 0x4c, 0xcf,
0x5d, 0xca, 0x7b, 0xfb, 0xfd, 0xd1 ) );
/* AES-GCM test case 81 */
CIPHER_TEST ( wycheproof_aes_gcm_471412a0, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x57, 0xc5, 0x64, 0x3c, 0x4e, 0x37, 0xb4, 0x04, 0x1d, 0xb7,
0x94, 0xcf, 0xe8, 0xe1, 0xf0, 0xf4 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x2b, 0xb6, 0x9c, 0x3e, 0x5d, 0x1f, 0x91, 0x81, 0x5c,
0x6b, 0x87, 0xa0, 0xd5, 0xbb, 0xea, 0x71, 0x64, 0xb1,
0x93, 0x14, 0xc3, 0x1a, 0xf4, 0x5a, 0xcc, 0xdf, 0x7e,
0x3c, 0x4d, 0xb7, 0x9f, 0x0d, 0x94, 0x8c, 0xa3, 0x7a,
0x8e, 0x66, 0x49, 0xe8 ),
AUTH ( 0xa3, 0xea, 0x2c, 0x09, 0xee, 0x4f, 0x8c, 0x8a, 0x12, 0xf4,
0x5c, 0xdd, 0xf9, 0xae, 0xff, 0x81 ) );
/* AES-GCM test case 82 */
CIPHER_TEST ( wycheproof_aes_gcm_a9c89f85, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x99, 0x82, 0x1c, 0x2d, 0xd5, 0xda, 0xec, 0xde, 0xd0, 0x73,
0x00, 0xf5, 0x77, 0xf7, 0xaf, 0xf1 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x12, 0x7a, 0xf9, 0xb3, 0x9e, 0xcd, 0xfc, 0x57, 0xbb,
0x11, 0xa2, 0x84, 0x7c, 0x7c, 0x2d, 0x3d, 0x8f, 0x93,
0x8f, 0x40, 0xf8, 0x77, 0xe0, 0xc4, 0xaf, 0x37, 0xd0,
0xfe, 0x9a, 0xf0, 0x33, 0x05, 0x2b, 0xd5, 0x37, 0xc4,
0xae, 0x97, 0x8f, 0x60 ),
AUTH ( 0x07, 0xeb, 0x2f, 0xe4, 0xa9, 0x58, 0xf8, 0x43, 0x4d, 0x40,
0x68, 0x48, 0x99, 0x50, 0x7c, 0x7c ) );
/* AES-GCM test case 83 */
CIPHER_TEST ( wycheproof_aes_gcm_db3f21b0, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x5e, 0x4a, 0x39, 0x00, 0x14, 0x23, 0x58, 0xd1, 0xc7, 0x74,
0xd8, 0xd1, 0x24, 0xd8, 0xd2, 0x7d ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x0c, 0xf6, 0xae, 0x47, 0x15, 0x6b, 0x14, 0xdc, 0xe0,
0x3c, 0x8a, 0x07, 0xa2, 0xe1, 0x72, 0xb1, 0x12, 0x7a,
0xf9, 0xb3, 0x9e, 0xcd, 0xfc, 0x57, 0xbb, 0x11, 0xa2,
0x84, 0x7c, 0x7c, 0x2d, 0x3d, 0x8f, 0x93, 0x8f, 0x40,
0xf8, 0x77, 0xe0, 0xc4 ),
AUTH ( 0xf1, 0x45, 0xc2, 0xdc, 0xaf, 0x33, 0x9e, 0xed, 0xe4, 0x27,
0xbe, 0x93, 0x43, 0x57, 0xea, 0xc0 ) );
/* AES-GCM test case 84 */
CIPHER_TEST ( wycheproof_aes_gcm_0755dc1c, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0xd4, 0x12, 0x56, 0x76, 0x56, 0x29, 0x84, 0xc0, 0xfe, 0x7c,
0xb0, 0xbd, 0xd1, 0xa9, 0x54, 0xe8 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xf0, 0xc6, 0xff, 0xc1, 0x8b, 0xd4, 0x6d, 0xf5, 0x56,
0x91, 0x85, 0xa9, 0xaf, 0xd1, 0x69, 0xeb, 0x0c, 0xf6,
0xae, 0x47, 0x15, 0x6b, 0x14, 0xdc, 0xe0, 0x3c, 0x8a,
0x07, 0xa2, 0xe1, 0x72, 0xb1, 0x12, 0x7a, 0xf9, 0xb3,
0x9e, 0xcd, 0xfc, 0x57 ),
AUTH ( 0xfa, 0xcd, 0x0b, 0xfe, 0x87, 0x01, 0xb7, 0xb4, 0xa2, 0xba,
0x96, 0xd9, 0x8a, 0xf5, 0x2b, 0xd9 ) );
/* AES-GCM test case 85 */
CIPHER_TEST ( wycheproof_aes_gcm_1a31814f, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0xb9, 0x7e, 0xc6, 0x2a, 0x5e, 0x59, 0x00, 0xcc, 0xf9, 0xe4,
0xbe, 0x33, 0x2e, 0x33, 0x60, 0x91 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xd6, 0x92, 0x8e, 0x09, 0x4c, 0x06, 0xe0, 0xa7, 0xc4,
0xdb, 0x42, 0x18, 0x4c, 0xf7, 0x52, 0x9e, 0x95, 0xde,
0x88, 0xb7, 0x67, 0xed, 0xeb, 0xe9, 0xb3, 0x43, 0x00,
0x0b, 0xe3, 0xda, 0xb4, 0x7e, 0xa0, 0x8b, 0x74, 0x42,
0x93, 0xee, 0xd6, 0x98 ),
AUTH ( 0xa0, 0x3e, 0x72, 0x9d, 0xcf, 0xd7, 0xa0, 0x31, 0x55, 0x65,
0x5f, 0xec, 0xe8, 0xaf, 0xfd, 0x7e ) );
/* AES-GCM test case 86 */
CIPHER_TEST ( wycheproof_aes_gcm_8e51b36a, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x7e, 0xb6, 0xe3, 0x07, 0x9f, 0xa0, 0xb4, 0xc3, 0xee, 0xe3,
0x66, 0x17, 0x7d, 0x1c, 0x1d, 0x1d ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xd8, 0x2c, 0xe5, 0x87, 0x71, 0xbf, 0x64, 0x87, 0x11,
0x6b, 0xf8, 0xe9, 0x64, 0x21, 0x87, 0x7e, 0xd6, 0x92,
0x8e, 0x09, 0x4c, 0x06, 0xe0, 0xa7, 0xc4, 0xdb, 0x42,
0x18, 0x4c, 0xf7, 0x52, 0x9e, 0x95, 0xde, 0x88, 0xb7,
0x67, 0xed, 0xeb, 0xe9 ),
AUTH ( 0x1e, 0x43, 0x92, 0x68, 0x28, 0xbc, 0x9a, 0x16, 0x14, 0xc7,
0xb1, 0x63, 0x90, 0x96, 0xc1, 0x95 ) );
/* AES-GCM test case 87 */
CIPHER_TEST ( wycheproof_aes_gcm_8737599d, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x03, 0x14, 0xfc, 0xd1, 0x0f, 0xdd, 0x67, 0x5d, 0x3c, 0x61,
0x29, 0x62, 0xc9, 0x31, 0xf6, 0x35 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xa1, 0x97, 0xa3, 0x7a, 0x5d, 0x79, 0x69, 0x70, 0x78,
0x53, 0x6b, 0xc2, 0x7f, 0xe4, 0x6c, 0xd8, 0xd4, 0x75,
0x52, 0x6d, 0x90, 0x44, 0xaa, 0x94, 0xf0, 0x88, 0xa0,
0x54, 0xf8, 0xe3, 0x80, 0xc6, 0x4f, 0x79, 0x41, 0x47,
0x95, 0xc6, 0x14, 0x80 ),
AUTH ( 0xf0, 0x8b, 0xad, 0xdf, 0x0b, 0x52, 0x85, 0xc9, 0x1f, 0xc0,
0x6a, 0x67, 0xfe, 0x47, 0x08, 0xca ) );
/* AES-GCM test case 88 */
CIPHER_TEST ( wycheproof_aes_gcm_0d33db46, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0xc4, 0xdc, 0xd9, 0xfc, 0xce, 0x24, 0xd3, 0x52, 0x2b, 0x66,
0xf1, 0x46, 0x9a, 0x1e, 0x8b, 0xb9 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x14, 0x9f, 0xde, 0x9a, 0xbb, 0xd3, 0xa4, 0x3c, 0x25,
0x48, 0x57, 0x5e, 0x0d, 0xb9, 0xfb, 0x84, 0xa1, 0x97,
0xa3, 0x7a, 0x5d, 0x79, 0x69, 0x70, 0x78, 0x53, 0x6b,
0xc2, 0x7f, 0xe4, 0x6c, 0xd8, 0xd4, 0x75, 0x52, 0x6d,
0x90, 0x44, 0xaa, 0x94 ),
AUTH ( 0x62, 0xa4, 0xb6, 0x87, 0x5c, 0x28, 0x83, 0x45, 0xd6, 0xa4,
0x54, 0x39, 0x9e, 0xac, 0x1a, 0xfa ) );
/* AES-GCM test case 89 */
CIPHER_TEST ( wycheproof_aes_gcm_2bdc78c7, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),
ADDITIONAL(),
PLAINTEXT ( 0xbe, 0xc6, 0xfa, 0x05, 0xc1, 0x71, 0x8b, 0x9b, 0x84,
0xc4, 0x73, 0x45, 0xbb, 0xed, 0x7d, 0xcb ),
CIPHERTEXT ( 0x45, 0xa3, 0xf8, 0x9d, 0x02, 0x91, 0x8b, 0xfd, 0x0c,
0x81, 0x61, 0x65, 0x8c, 0xcc, 0x97, 0x95 ),
AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
/* AES-GCM test case 90 */
CIPHER_TEST ( wycheproof_aes_gcm_d5bfae8c, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ),
ADDITIONAL(),
PLAINTEXT ( 0x4d, 0x82, 0x63, 0x9c, 0x39, 0xd3, 0xf3, 0x49, 0x0e,
0xe9, 0x03, 0xdd, 0x0b, 0xe7, 0xaf, 0xcf ),
CIPHERTEXT ( 0x1c, 0xd5, 0xa0, 0x62, 0x14, 0x23, 0x5c, 0xeb, 0x04,
0x4d, 0x4b, 0xad, 0x7b, 0x04, 0x73, 0x12 ),
AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
/* AES-GCM test case 91 */
CIPHER_TEST ( wycheproof_aes_gcm_4ba4c501, &aes_gcm_algorithm,
KEY ( 0x92, 0xac, 0xe3, 0xe3, 0x48, 0xcd, 0x82, 0x10, 0x92, 0xcd,
0x92, 0x1a, 0xa3, 0x54, 0x63, 0x74, 0x29, 0x9a, 0xb4, 0x62,
0x09, 0x69, 0x1b, 0xc2, 0x8b, 0x87, 0x52, 0xd1, 0x7f, 0x12,
0x3c, 0x20 ),
IV ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb ),
ADDITIONAL ( 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff ),
PLAINTEXT ( 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
0x09 ),
CIPHERTEXT ( 0xe2, 0x7a, 0xbd, 0xd2, 0xd2, 0xa5, 0x3d, 0x2f, 0x13,
0x6b ),
AUTH ( 0x9a, 0x4a, 0x25, 0x79, 0x52, 0x93, 0x01, 0xbc, 0xfb, 0x71,
0xc7, 0x8d, 0x40, 0x60, 0xf5, 0x2c ) );
/* AES-GCM test case 92 */
CIPHER_TEST ( wycheproof_aes_gcm_13666319, &aes_gcm_algorithm,
KEY ( 0x29, 0xd3, 0xa4, 0x4f, 0x87, 0x23, 0xdc, 0x64, 0x02, 0x39,
0x10, 0x0c, 0x36, 0x54, 0x23, 0xa3, 0x12, 0x93, 0x4a, 0xc8,
0x02, 0x39, 0x21, 0x2a, 0xc3, 0xdf, 0x34, 0x21, 0xa2, 0x09,
0x81, 0x23 ),
IV ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb ),
ADDITIONAL ( 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x2a, 0x7d, 0x77, 0xfa, 0x52, 0x6b, 0x82, 0x50, 0xcb, 0x29,
0x60, 0x78, 0x92, 0x6b, 0x50, 0x20 ) );
/* AES-GCM test case 93 */
CIPHER_TEST ( wycheproof_aes_gcm_ba5c6dd8, &aes_gcm_algorithm,
KEY ( 0x80, 0xba, 0x31, 0x92, 0xc8, 0x03, 0xce, 0x96, 0x5e, 0xa3,
0x71, 0xd5, 0xff, 0x07, 0x3c, 0xf0, 0xf4, 0x3b, 0x6a, 0x2a,
0xb5, 0x76, 0xb2, 0x08, 0x42, 0x6e, 0x11, 0x40, 0x9c, 0x09,
0xb9, 0xb0 ),
IV ( 0x4d, 0xa5, 0xbf, 0x8d, 0xfd, 0x58, 0x52, 0xc1, 0xea, 0x12,
0x37, 0x9d ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x47, 0x71, 0xa7, 0xc4, 0x04, 0xa4, 0x72, 0x96, 0x6c, 0xea,
0x8f, 0x73, 0xc8, 0xbf, 0xe1, 0x7a ) );
/* AES-GCM test case 94 */
CIPHER_TEST ( wycheproof_aes_gcm_c95dab82, &aes_gcm_algorithm,
KEY ( 0xcc, 0x56, 0xb6, 0x80, 0x55, 0x2e, 0xb7, 0x50, 0x08, 0xf5,
0x48, 0x4b, 0x4c, 0xb8, 0x03, 0xfa, 0x50, 0x63, 0xeb, 0xd6,
0xea, 0xb9, 0x1f, 0x6a, 0xb6, 0xae, 0xf4, 0x91, 0x6a, 0x76,
0x62, 0x73 ),
IV ( 0x99, 0xe2, 0x3e, 0xc4, 0x89, 0x85, 0xbc, 0xcd, 0xee, 0xab,
0x60, 0xf1 ),
ADDITIONAL(),
PLAINTEXT ( 0x2a ),
CIPHERTEXT ( 0x06 ),
AUTH ( 0x63, 0x3c, 0x1e, 0x97, 0x03, 0xef, 0x74, 0x4f, 0xff, 0xfb,
0x40, 0xed, 0xf9, 0xd1, 0x43, 0x55 ) );
/* AES-GCM test case 95 */
CIPHER_TEST ( wycheproof_aes_gcm_ae22db55, &aes_gcm_algorithm,
KEY ( 0x51, 0xe4, 0xbf, 0x2b, 0xad, 0x92, 0xb7, 0xaf, 0xf1, 0xa4,
0xbc, 0x05, 0x55, 0x0b, 0xa8, 0x1d, 0xf4, 0xb9, 0x6f, 0xab,
0xf4, 0x1c, 0x12, 0xc7, 0xb0, 0x0e, 0x60, 0xe4, 0x8d, 0xb7,
0xe1, 0x52 ),
IV ( 0x4f, 0x07, 0xaf, 0xed, 0xfd, 0xc3, 0xb6, 0xc2, 0x36, 0x18,
0x23, 0xd3 ),
ADDITIONAL(),
PLAINTEXT ( 0xbe, 0x33, 0x08, 0xf7, 0x2a, 0x2c, 0x6a, 0xed ),
CIPHERTEXT ( 0xcf, 0x33, 0x2a, 0x12, 0xfd, 0xee, 0x80, 0x0b ),
AUTH ( 0x60, 0x2e, 0x8d, 0x7c, 0x47, 0x99, 0xd6, 0x2c, 0x14, 0x0c,
0x9b, 0xb8, 0x34, 0x87, 0x6b, 0x09 ) );
/* AES-GCM test case 96 */
CIPHER_TEST ( wycheproof_aes_gcm_d6dc5d07, &aes_gcm_algorithm,
KEY ( 0x67, 0x11, 0x96, 0x27, 0xbd, 0x98, 0x8e, 0xda, 0x90, 0x62,
0x19, 0xe0, 0x8c, 0x0d, 0x0d, 0x77, 0x9a, 0x07, 0xd2, 0x08,
0xce, 0x8a, 0x4f, 0xe0, 0x70, 0x9a, 0xf7, 0x55, 0xee, 0xec,
0x6d, 0xcb ),
IV ( 0x68, 0xab, 0x7f, 0xdb, 0xf6, 0x19, 0x01, 0xda, 0xd4, 0x61,
0xd2, 0x3c ),
ADDITIONAL(),
PLAINTEXT ( 0x51, 0xf8, 0xc1, 0xf7, 0x31, 0xea, 0x14, 0xac, 0xdb,
0x21, 0x0a, 0x6d, 0x97, 0x3e, 0x07 ),
CIPHERTEXT ( 0x43, 0xfc, 0x10, 0x1b, 0xff, 0x4b, 0x32, 0xbf, 0xad,
0xd3, 0xda, 0xf5, 0x7a, 0x59, 0x0e ),
AUTH ( 0xec, 0x04, 0xaa, 0xcb, 0x71, 0x48, 0xa8, 0xb8, 0xbe, 0x44,
0xcb, 0x7e, 0xaf, 0x4e, 0xfa, 0x69 ) );
/* AES-GCM test case 97 */
CIPHER_TEST ( wycheproof_aes_gcm_c761752c, &aes_gcm_algorithm,
KEY ( 0x59, 0xd4, 0xea, 0xfb, 0x4d, 0xe0, 0xcf, 0xc7, 0xd3, 0xdb,
0x99, 0xa8, 0xf5, 0x4b, 0x15, 0xd7, 0xb3, 0x9f, 0x0a, 0xcc,
0x8d, 0xa6, 0x97, 0x63, 0xb0, 0x19, 0xc1, 0x69, 0x9f, 0x87,
0x67, 0x4a ),
IV ( 0x2f, 0xcb, 0x1b, 0x38, 0xa9, 0x9e, 0x71, 0xb8, 0x47, 0x40,
0xad, 0x9b ),
ADDITIONAL(),
PLAINTEXT ( 0x54, 0x9b, 0x36, 0x5a, 0xf9, 0x13, 0xf3, 0xb0, 0x81,
0x13, 0x1c, 0xcb, 0x6b, 0x82, 0x55, 0x88 ),
CIPHERTEXT ( 0xf5, 0x8c, 0x16, 0x69, 0x01, 0x22, 0xd7, 0x53, 0x56,
0x90, 0x7f, 0xd9, 0x6b, 0x57, 0x0f, 0xca ),
AUTH ( 0x28, 0x75, 0x2c, 0x20, 0x15, 0x30, 0x92, 0x81, 0x8f, 0xab,
0xa2, 0xa3, 0x34, 0x64, 0x0d, 0x6e ) );
/* AES-GCM test case 98 */
CIPHER_TEST ( wycheproof_aes_gcm_c63f1aed, &aes_gcm_algorithm,
KEY ( 0x3b, 0x24, 0x58, 0xd8, 0x17, 0x6e, 0x16, 0x21, 0xc0, 0xcc,
0x24, 0xc0, 0xc0, 0xe2, 0x4c, 0x1e, 0x80, 0xd7, 0x2f, 0x7e,
0xe9, 0x14, 0x9a, 0x4b, 0x16, 0x61, 0x76, 0x62, 0x96, 0x16,
0xd0, 0x11 ),
IV ( 0x45, 0xaa, 0xa3, 0xe5, 0xd1, 0x6d, 0x2d, 0x42, 0xdc, 0x03,
0x44, 0x5d ),
ADDITIONAL(),
PLAINTEXT ( 0x3f, 0xf1, 0x51, 0x4b, 0x1c, 0x50, 0x39, 0x15, 0x91,
0x8f, 0x0c, 0x0c, 0x31, 0x09, 0x4a, 0x6e, 0x1f ),
CIPHERTEXT ( 0x73, 0xa6, 0xb6, 0xf4, 0x5f, 0x6c, 0xcc, 0x51, 0x31,
0xe0, 0x7f, 0x2c, 0xaa, 0x1f, 0x2e, 0x2f, 0x56 ),
AUTH ( 0x2d, 0x73, 0x79, 0xec, 0x1d, 0xb5, 0x95, 0x2d, 0x4e, 0x95,
0xd3, 0x0c, 0x34, 0x0b, 0x1b, 0x1d ) );
/* AES-GCM test case 99 */
CIPHER_TEST ( wycheproof_aes_gcm_dd4fb2f4, &aes_gcm_algorithm,
KEY ( 0x02, 0x12, 0xa8, 0xde, 0x50, 0x07, 0xed, 0x87, 0xb3, 0x3f,
0x1a, 0x70, 0x90, 0xb6, 0x11, 0x4f, 0x9e, 0x08, 0xce, 0xfd,
0x96, 0x07, 0xf2, 0xc2, 0x76, 0xbd, 0xcf, 0xdb, 0xc5, 0xce,
0x9c, 0xd7 ),
IV ( 0xe6, 0xb1, 0xad, 0xf2, 0xfd, 0x58, 0xa8, 0x76, 0x2c, 0x65,
0xf3, 0x1b ),
ADDITIONAL(),
PLAINTEXT ( 0x10, 0xf1, 0xec, 0xf9, 0xc6, 0x05, 0x84, 0x66, 0x5d,
0x9a, 0xe5, 0xef, 0xe2, 0x79, 0xe7, 0xf7, 0x37, 0x7e,
0xea, 0x69, 0x16, 0xd2, 0xb1, 0x11 ),
CIPHERTEXT ( 0x08, 0x43, 0xff, 0xf5, 0x2d, 0x93, 0x4f, 0xc7, 0xa0,
0x71, 0xea, 0x62, 0xc0, 0xbd, 0x35, 0x1c, 0xe8, 0x56,
0x78, 0xcd, 0xe3, 0xea, 0x2c, 0x9e ),
AUTH ( 0x73, 0x55, 0xfd, 0xe5, 0x99, 0x00, 0x67, 0x15, 0x05, 0x38,
0x13, 0xce, 0x69, 0x62, 0x37, 0xa8 ) );
/* AES-GCM test case 100 */
CIPHER_TEST ( wycheproof_aes_gcm_922348b7, &aes_gcm_algorithm,
KEY ( 0xb2, 0x79, 0xf5, 0x7e, 0x19, 0xc8, 0xf5, 0x3f, 0x2f, 0x96,
0x3f, 0x5f, 0x25, 0x19, 0xfd, 0xb7, 0xc1, 0x77, 0x9b, 0xe2,
0xca, 0x2b, 0x3a, 0xe8, 0xe1, 0x12, 0x8b, 0x7d, 0x6c, 0x62,
0x7f, 0xc4 ),
IV ( 0x98, 0xbc, 0x2c, 0x74, 0x38, 0xd5, 0xcd, 0x76, 0x65, 0xd7,
0x6f, 0x6e ),
ADDITIONAL ( 0xc0 ),
PLAINTEXT ( 0xfc, 0xc5, 0x15, 0xb2, 0x94, 0x40, 0x8c, 0x86, 0x45,
0xc9, 0x18, 0x3e, 0x3f, 0x4e, 0xce, 0xe5, 0x12, 0x78,
0x46, 0xd1 ),
CIPHERTEXT ( 0xeb, 0x55, 0x00, 0xe3, 0x82, 0x59, 0x52, 0x86, 0x6d,
0x91, 0x12, 0x53, 0xf8, 0xde, 0x86, 0x0c, 0x00, 0x83,
0x1c, 0x81 ),
AUTH ( 0xec, 0xb6, 0x60, 0xe1, 0xfb, 0x05, 0x41, 0xec, 0x41, 0xe8,
0xd6, 0x8a, 0x64, 0x14, 0x1b, 0x3a ) );
/* AES-GCM test case 101 */
CIPHER_TEST ( wycheproof_aes_gcm_90face03, &aes_gcm_algorithm,
KEY ( 0xcd, 0xcc, 0xfe, 0x3f, 0x46, 0xd7, 0x82, 0xef, 0x47, 0xdf,
0x4e, 0x72, 0xf0, 0xc0, 0x2d, 0x9c, 0x7f, 0x77, 0x4d, 0xef,
0x97, 0x0d, 0x23, 0x48, 0x6f, 0x11, 0xa5, 0x7f, 0x54, 0x24,
0x7f, 0x17 ),
IV ( 0x37, 0x61, 0x87, 0x89, 0x46, 0x05, 0xa8, 0xd4, 0x5e, 0x30,
0xde, 0x51 ),
ADDITIONAL ( 0x95, 0x68, 0x46, 0xa2, 0x09, 0xe0, 0x87, 0xed ),
PLAINTEXT ( 0xe2, 0x8e, 0x0e, 0x9f, 0x9d, 0x22, 0x46, 0x3a, 0xc0,
0xe4, 0x26, 0x39, 0xb5, 0x30, 0xf4, 0x21, 0x02, 0xfd,
0xed, 0x75 ),
CIPHERTEXT ( 0xfe, 0xca, 0x44, 0x95, 0x24, 0x47, 0x01, 0x5b, 0x5d,
0xf1, 0xf4, 0x56, 0xdf, 0x8c, 0xa4, 0xbb, 0x4e, 0xee,
0x2c, 0xe2 ),
AUTH ( 0x08, 0x2e, 0x91, 0x92, 0x4d, 0xee, 0xb7, 0x78, 0x80, 0xe1,
0xb1, 0xc8, 0x4f, 0x9b, 0x8d, 0x30 ) );
/* AES-GCM test case 102 */
CIPHER_TEST ( wycheproof_aes_gcm_d999cc8e, &aes_gcm_algorithm,
KEY ( 0xf3, 0x23, 0x64, 0xb1, 0xd3, 0x39, 0xd8, 0x2e, 0x4f, 0x13,
0x2d, 0x8f, 0x4a, 0x0e, 0xc1, 0xff, 0x7e, 0x74, 0x65, 0x17,
0xfa, 0x07, 0xef, 0x1a, 0x7f, 0x42, 0x2f, 0x4e, 0x25, 0xa4,
0x81, 0x94 ),
IV ( 0x5a, 0x86, 0xa5, 0x0a, 0x0e, 0x8a, 0x17, 0x9c, 0x73, 0x4b,
0x99, 0x6d ),
ADDITIONAL ( 0xab, 0x2a, 0xc7, 0xc4, 0x4c, 0x60, 0xbd, 0xf8, 0x22,
0x8c, 0x78, 0x84, 0xad, 0xb2, 0x01, 0x84 ),
PLAINTEXT ( 0x43, 0x89, 0x1b, 0xcc, 0xb5, 0x22, 0xb1, 0xe7, 0x2a,
0x6b, 0x53, 0xcf, 0x31, 0xc0, 0x74, 0xe9, 0xd6, 0xc2,
0xdf, 0x8e ),
CIPHERTEXT ( 0x43, 0xdd, 0xa8, 0x32, 0xe9, 0x42, 0xe2, 0x86, 0xda,
0x31, 0x4d, 0xaa, 0x99, 0xbe, 0xf5, 0x07, 0x1d, 0x9d,
0x2c, 0x78 ),
AUTH ( 0xc3, 0x92, 0x25, 0x83, 0x47, 0x6c, 0xed, 0x57, 0x54, 0x04,
0xdd, 0xb8, 0x5d, 0xd8, 0xcd, 0x44 ) );
/* AES-GCM test case 103 */
CIPHER_TEST ( wycheproof_aes_gcm_4af502aa, &aes_gcm_algorithm,
KEY ( 0xff, 0x00, 0x89, 0xee, 0x87, 0x0a, 0x4a, 0x39, 0xf6, 0x45,
0xb0, 0xa5, 0xda, 0x77, 0x4f, 0x7a, 0x59, 0x11, 0xe9, 0x69,
0x6f, 0xc9, 0xca, 0xd6, 0x46, 0x45, 0x2c, 0x2a, 0xa8, 0x59,
0x5a, 0x12 ),
IV ( 0xbc, 0x2a, 0x77, 0x57, 0xd0, 0xce, 0x2d, 0x8b, 0x1f, 0x14,
0xcc, 0xd9 ),
ADDITIONAL ( 0x97, 0x2a, 0xb4, 0xe0, 0x63, 0x90, 0xca, 0xae, 0x8f,
0x99, 0xdd, 0x6e, 0x21, 0x87, 0xbe, 0x6c, 0x7f, 0xf2,
0xc0, 0x8a, 0x24, 0xbe, 0x16, 0xef ),
PLAINTEXT ( 0x74, 0x8b, 0x28, 0x03, 0x16, 0x21, 0xd9, 0x5e, 0xe6,
0x18, 0x12, 0xb4, 0xb4, 0xf4, 0x7d, 0x04, 0xc6, 0xfc,
0x2f, 0xf3 ),
CIPHERTEXT ( 0xa9, 0x29, 0xee, 0x7e, 0x67, 0xc7, 0xa2, 0xf9, 0x1b,
0xbc, 0xec, 0x63, 0x89, 0xa3, 0xca, 0xf4, 0x3a, 0xb4,
0x93, 0x05 ),
AUTH ( 0xeb, 0xec, 0x67, 0x74, 0xb9, 0x55, 0xe7, 0x89, 0x59, 0x1c,
0x82, 0x2d, 0xab, 0x73, 0x9e, 0x12 ) );
/* AES-GCM test case 104 */
CIPHER_TEST ( wycheproof_aes_gcm_4ebc55c7, &aes_gcm_algorithm,
KEY ( 0x6e, 0xfc, 0xa9, 0x81, 0x26, 0x91, 0x8a, 0xb5, 0x64, 0xd8,
0x8c, 0x6b, 0xec, 0x02, 0xe8, 0x99, 0x8b, 0x2b, 0xe5, 0x0e,
0x3f, 0x90, 0x6f, 0xf9, 0xad, 0xfd, 0xd1, 0x85, 0xf3, 0x73,
0xe7, 0x56 ),
IV ( 0x4a, 0xbd, 0x6c, 0xfc, 0x83, 0xbd, 0x06, 0xb1, 0x1e, 0xfa,
0xa2, 0xa7 ),
ADDITIONAL(),
PLAINTEXT ( 0xbb, 0xec, 0x79, 0xc0, 0x86, 0xd4, 0x1e, 0x60, 0x2d,
0x09, 0x0f, 0x7e, 0x40, 0x49, 0x4d, 0x6b, 0xf3, 0xfa,
0xa1, 0xdc, 0x6d, 0xf0, 0xab, 0x8a, 0x88, 0xea, 0x5d,
0x35, 0xd4, 0x26, 0xb2, 0x48, 0xc2, 0xad, 0x88, 0x03,
0x51, 0xe2, 0x23, 0xf6, 0x17, 0x0d, 0x37, 0xcc, 0x96,
0x55, 0xe1, 0x04, 0x59, 0xe5, 0x9c, 0xbd, 0x6d, 0x1c,
0x09, 0x2e, 0xd3, 0x1d, 0x72, 0xcc, 0xc7, 0xaf, 0x20 ),
CIPHERTEXT ( 0x97, 0xb4, 0xc7, 0x3a, 0x4d, 0x8b, 0x5b, 0x21, 0xbc,
0x4b, 0x50, 0xdb, 0xb7, 0x0d, 0xfa, 0x77, 0xb1, 0xa7,
0xbf, 0x0b, 0xbe, 0x7c, 0xf1, 0x6e, 0xcf, 0x5b, 0xb6,
0x0b, 0xa8, 0x07, 0x0a, 0xcc, 0x57, 0x40, 0x78, 0x04,
0x35, 0xed, 0x14, 0x5a, 0x62, 0xa6, 0x13, 0xdd, 0x98,
0x81, 0xb7, 0x21, 0x16, 0x8f, 0xbb, 0x3f, 0x5a, 0xf3,
0x85, 0xee, 0x5d, 0x4f, 0x85, 0x6c, 0xf9, 0x3c, 0xba ),
AUTH ( 0x27, 0xac, 0x8c, 0x40, 0x10, 0xd8, 0xe8, 0x1b, 0x70, 0x51,
0xce, 0xb0, 0x6b, 0x30, 0xfe, 0x2d ) );
/* AES-GCM test case 105 */
CIPHER_TEST ( wycheproof_aes_gcm_888186c8, &aes_gcm_algorithm,
KEY ( 0x5b, 0x1d, 0x10, 0x35, 0xc0, 0xb1, 0x7e, 0xe0, 0xb0, 0x44,
0x47, 0x67, 0xf8, 0x0a, 0x25, 0xb8, 0xc1, 0xb7, 0x41, 0xf4,
0xb5, 0x0a, 0x4d, 0x30, 0x52, 0x22, 0x6b, 0xaa, 0x1c, 0x6f,
0xb7, 0x01 ),
IV ( 0xd6, 0x10, 0x40, 0xa3, 0x13, 0xed, 0x49, 0x28, 0x23, 0xcc,
0x06, 0x5b ),
ADDITIONAL(),
PLAINTEXT ( 0xd0, 0x96, 0x80, 0x31, 0x81, 0xbe, 0xef, 0x9e, 0x00,
0x8f, 0xf8, 0x5d, 0x5d, 0xdc, 0x38, 0xdd, 0xac, 0xf0,
0xf0, 0x9e, 0xe5, 0xf7, 0xe0, 0x7f, 0x1e, 0x40, 0x79,
0xcb, 0x64, 0xd0, 0xdc, 0x8f, 0x5e, 0x67, 0x11, 0xcd,
0x49, 0x21, 0xa7, 0x88, 0x7d, 0xe7, 0x6e, 0x26, 0x78,
0xfd, 0xc6, 0x76, 0x18, 0xf1, 0x18, 0x55, 0x86, 0xbf,
0xea, 0x9d, 0x4c, 0x68, 0x5d, 0x50, 0xe4, 0xbb, 0x9a,
0x82 ),
CIPHERTEXT ( 0xc7, 0xd1, 0x91, 0xb6, 0x01, 0xf8, 0x6c, 0x28, 0xb6,
0xa1, 0xbd, 0xef, 0x6a, 0x57, 0xb4, 0xf6, 0xee, 0x3a,
0xe4, 0x17, 0xbc, 0x12, 0x5c, 0x38, 0x1c, 0xdf, 0x1c,
0x4d, 0xac, 0x18, 0x4e, 0xd1, 0xd8, 0x4f, 0x11, 0x96,
0x20, 0x6d, 0x62, 0xca, 0xd1, 0x12, 0xb0, 0x38, 0x84,
0x57, 0x20, 0xe0, 0x2c, 0x06, 0x11, 0x79, 0xa8, 0x83,
0x6f, 0x02, 0xb9, 0x3f, 0xa7, 0x00, 0x83, 0x79, 0xa6,
0xbf ),
AUTH ( 0xf1, 0x56, 0x12, 0xf6, 0xc4, 0x0f, 0x2e, 0x0d, 0xb6, 0xdc,
0x76, 0xfc, 0x48, 0x22, 0xfc, 0xfe ) );
/* AES-GCM test case 106 */
CIPHER_TEST ( wycheproof_aes_gcm_4a6005f6, &aes_gcm_algorithm,
KEY ( 0x81, 0xb6, 0xb2, 0x7e, 0x5e, 0xd9, 0x0a, 0xb9, 0x9f, 0xe6,
0x75, 0x6d, 0x4c, 0xb4, 0x1e, 0x3f, 0x07, 0x26, 0x96, 0x87,
0xf5, 0xaf, 0xab, 0xdb, 0x42, 0x6e, 0x29, 0x09, 0x6b, 0x5e,
0x44, 0x66 ),
IV ( 0x13, 0xe7, 0x27, 0x48, 0x60, 0x31, 0xcc, 0xa2, 0x1f, 0x73,
0x33, 0x75 ),
ADDITIONAL(),
PLAINTEXT ( 0x9a, 0x95, 0xa2, 0x3c, 0xfb, 0x1e, 0x35, 0xd8, 0x9a,
0x75, 0x97, 0x57, 0x0d, 0xf0, 0xfb, 0x0e, 0xfc, 0xbb,
0x74, 0x29, 0xf5, 0x3b, 0xeb, 0xcb, 0xbf, 0xa4, 0x9f,
0xa2, 0x47, 0xb2, 0x51, 0xa8, 0x50, 0x8a, 0xd4, 0x97,
0x06, 0x68, 0x55, 0xd0, 0x86, 0x88, 0x57, 0x61, 0x88,
0xe4, 0xff, 0xb1, 0x2d, 0x1d, 0x08, 0x4d, 0xca, 0xbe,
0xc3, 0xd5, 0x78, 0x06, 0xda, 0xf2, 0x15, 0xdc, 0xc9,
0x7e, 0xdd ),
CIPHERTEXT ( 0x7e, 0xde, 0x73, 0x68, 0xbc, 0xa3, 0xc9, 0x3d, 0x9f,
0x1d, 0x7f, 0x77, 0x50, 0xd6, 0xe4, 0x4b, 0x1c, 0xb9,
0x2c, 0x30, 0xe3, 0xc9, 0x83, 0x4b, 0x0b, 0x69, 0xef,
0xd2, 0x47, 0x09, 0x11, 0x64, 0x4a, 0xe6, 0xf6, 0xd7,
0x57, 0x15, 0xe1, 0x3a, 0xea, 0x87, 0x81, 0xf8, 0xda,
0x61, 0x1a, 0x13, 0xac, 0x63, 0x64, 0xc4, 0x06, 0xc1,
0xa7, 0x15, 0xb7, 0xe9, 0x7a, 0xcb, 0x22, 0xb6, 0xe6,
0x15, 0x6e ),
AUTH ( 0x74, 0xe2, 0x0a, 0x93, 0x80, 0x2f, 0x43, 0x40, 0x7c, 0x89,
0x89, 0xa3, 0x7f, 0x01, 0x38, 0x02 ) );
/* AES-GCM test case 107 */
CIPHER_TEST ( wycheproof_aes_gcm_2d04655c, &aes_gcm_algorithm,
KEY ( 0xea, 0x1d, 0x43, 0x6f, 0x63, 0x59, 0xca, 0xec, 0x01, 0x07,
0x89, 0xfa, 0x94, 0xfe, 0x08, 0xb1, 0x67, 0xc3, 0xe4, 0x97,
0xd8, 0x91, 0x72, 0x82, 0xf4, 0x7a, 0xd2, 0xa8, 0xf9, 0x5f,
0xd0, 0xf1 ),
IV ( 0x73, 0xfe, 0x02, 0x22, 0x02, 0x76, 0x7a, 0xf8, 0x34, 0xe3,
0x21, 0x26 ),
ADDITIONAL(),
PLAINTEXT ( 0xad, 0xf9, 0xb6, 0xdf, 0x5c, 0x5c, 0xc9, 0x47, 0x3e,
0x0b, 0xb5, 0x79, 0xf9, 0xa6, 0xaa, 0xd3, 0x96, 0xf9,
0x3d, 0x28, 0xbf, 0x83, 0xe9, 0x81, 0x36, 0xf9, 0x78,
0xcf, 0xb9, 0xd5, 0x01, 0xd0, 0x9e, 0xf7, 0x78, 0xc1,
0x22, 0xb4, 0x3c, 0x87, 0x6c, 0x22, 0xe4, 0x0d, 0x74,
0xa4, 0x8d, 0x90, 0x89, 0x78, 0x46, 0x5a, 0x06, 0xbe,
0x9e, 0x80, 0x89, 0x17, 0x10, 0xc8, 0xc2, 0x69, 0x0a,
0x76, 0x2b, 0xc9, 0xeb, 0x8b, 0xcb, 0x2a, 0xa2, 0x70,
0x7d, 0xb1, 0x49, 0xab, 0xaf, 0xb9, 0xc1, 0x7c, 0x1f,
0x0b, 0x68, 0xc7, 0xad, 0xce, 0xa9, 0x8a, 0xeb, 0xf4,
0xc6, 0xa3, 0x9e, 0x5a, 0x8f, 0x69, 0x31, 0x33, 0xea,
0xaa, 0x5b, 0xb0, 0xb3, 0x70, 0x87, 0x20, 0xd7, 0xb8,
0x64, 0x24, 0x10, 0x1b, 0xad, 0x56, 0xaa, 0x19, 0x0c,
0x67, 0xd2, 0x5f, 0xe3, 0x5a, 0x4a, 0x34, 0xe1, 0xf4,
0xfd ),
CIPHERTEXT ( 0x2e, 0x6b, 0x19, 0x52, 0x0d, 0x9c, 0x91, 0xe4, 0x1f,
0x52, 0x3b, 0xfd, 0x80, 0xcb, 0x3d, 0x57, 0x7d, 0xf7,
0x62, 0x87, 0x9b, 0x04, 0xa5, 0x86, 0xb8, 0x65, 0x28,
0x0b, 0xac, 0x65, 0x11, 0x02, 0xfa, 0x60, 0x16, 0x4b,
0x85, 0x86, 0xf9, 0x1c, 0x02, 0xb2, 0x15, 0x1c, 0xc2,
0xfd, 0x29, 0xf4, 0xc6, 0xe9, 0x28, 0x39, 0xcd, 0xd8,
0x73, 0xbe, 0x12, 0xc1, 0x44, 0x31, 0x41, 0xf8, 0xbc,
0xb8, 0x75, 0x49, 0x65, 0xae, 0xc7, 0xc0, 0x82, 0x9f,
0xb3, 0x91, 0xe5, 0x65, 0x63, 0xba, 0x76, 0xe8, 0x96,
0xec, 0x81, 0x93, 0x2b, 0x5e, 0xfb, 0xad, 0x23, 0xbb,
0x96, 0x5e, 0xbb, 0xf8, 0xd8, 0xfd, 0xa9, 0x8f, 0x9c,
0xbd, 0x48, 0xf3, 0x7b, 0x2c, 0x46, 0xdb, 0x60, 0x9e,
0x40, 0x76, 0x82, 0x66, 0xc2, 0xb3, 0x6a, 0x78, 0x10,
0xd2, 0xb7, 0x91, 0x33, 0xf3, 0x77, 0xd0, 0x37, 0x7b,
0x41 ),
AUTH ( 0xf9, 0xa0, 0xeb, 0xa5, 0x13, 0x90, 0x4c, 0x4a, 0x71, 0x68,
0xd7, 0x62, 0x00, 0x0f, 0x34, 0xbe ) );
/* AES-GCM test case 108 */
CIPHER_TEST ( wycheproof_aes_gcm_56b6987d, &aes_gcm_algorithm,
KEY ( 0xd7, 0xad, 0xdd, 0x38, 0x89, 0xfa, 0xdf, 0x8c, 0x89, 0x3e,
0xee, 0x14, 0xba, 0x2b, 0x7e, 0xa5, 0xbf, 0x56, 0xb4, 0x49,
0x90, 0x48, 0x69, 0x61, 0x5b, 0xd0, 0x5d, 0x5f, 0x11, 0x4c,
0xf3, 0x77 ),
IV ( 0x8a, 0x3a, 0xd2, 0x6b, 0x28, 0xcd, 0x13, 0xba, 0x65, 0x04,
0xe2, 0x60 ),
ADDITIONAL(),
PLAINTEXT ( 0xc8, 0x77, 0xa7, 0x6b, 0xf5, 0x95, 0x56, 0x07, 0x72,
0x16, 0x7c, 0x6e, 0x3b, 0xcc, 0x70, 0x53, 0x05, 0xdb,
0x9c, 0x6f, 0xcb, 0xeb, 0x90, 0xf4, 0xfe, 0xa8, 0x51,
0x16, 0x03, 0x8b, 0xc5, 0x3c, 0x3f, 0xa5, 0xb4, 0xb4,
0xea, 0x0d, 0xe5, 0xcc, 0x53, 0x4f, 0xbe, 0x1c, 0xf9,
0xae, 0x44, 0x82, 0x4c, 0x6c, 0x2c, 0x0a, 0x5c, 0x88,
0x5b, 0xd8, 0xc3, 0xcd, 0xc9, 0x06, 0xf1, 0x26, 0x75,
0x73, 0x7e, 0x43, 0x4b, 0x98, 0x3e, 0x1e, 0x23, 0x1a,
0x52, 0xa2, 0x75, 0xdb, 0x5f, 0xb1, 0xa0, 0xca, 0xc6,
0xa0, 0x7b, 0x3b, 0x7d, 0xcb, 0x19, 0x48, 0x2a, 0x5d,
0x3b, 0x06, 0xa9, 0x31, 0x7a, 0x54, 0x82, 0x6c, 0xea,
0x6b, 0x36, 0xfc, 0xe4, 0x52, 0xfa, 0x9b, 0x54, 0x75,
0xe2, 0xaa, 0xf2, 0x54, 0x99, 0x49, 0x9d, 0x8a, 0x89,
0x32, 0xa1, 0x9e, 0xb9, 0x87, 0xc9, 0x03, 0xbd, 0x85,
0x02, 0xfe ),
CIPHERTEXT ( 0x53, 0xcc, 0x8c, 0x92, 0x0a, 0x85, 0xd1, 0xac, 0xcb,
0x88, 0x63, 0x6d, 0x08, 0xbb, 0xe4, 0x86, 0x9b, 0xfd,
0xd9, 0x6f, 0x43, 0x7b, 0x2e, 0xc9, 0x44, 0x51, 0x21,
0x73, 0xa9, 0xc0, 0xfe, 0x7a, 0x47, 0xf8, 0x43, 0x41,
0x33, 0x98, 0x9b, 0xa7, 0x7d, 0xda, 0x56, 0x1b, 0x7e,
0x37, 0x01, 0xb9, 0xa8, 0x3c, 0x3b, 0xa7, 0x66, 0x0c,
0x66, 0x6b, 0xa5, 0x9f, 0xef, 0x96, 0x59, 0x8e, 0xb6,
0x21, 0x54, 0x4c, 0x63, 0x80, 0x6d, 0x50, 0x9a, 0xc4,
0x76, 0x97, 0x41, 0x2f, 0x95, 0x64, 0xeb, 0x0a, 0x2e,
0x1f, 0x72, 0xf6, 0x59, 0x9f, 0x56, 0x66, 0xaf, 0x34,
0xcf, 0xfc, 0xa0, 0x65, 0x73, 0xff, 0xb4, 0xf4, 0x7b,
0x02, 0xf5, 0x9f, 0x21, 0xc6, 0x43, 0x63, 0xda, 0xec,
0xb9, 0x77, 0xb4, 0x41, 0x5f, 0x19, 0xfd, 0xda, 0x3c,
0x9a, 0xae, 0x50, 0x66, 0xa5, 0x7b, 0x66, 0x9f, 0xfa,
0xa2, 0x57 ),
AUTH ( 0x5e, 0x63, 0x37, 0x4b, 0x51, 0x9e, 0x6c, 0x36, 0x08, 0x32,
0x19, 0x43, 0xd7, 0x90, 0xcf, 0x9a ) );
/* AES-GCM test case 109 */
CIPHER_TEST ( wycheproof_aes_gcm_644b8aad, &aes_gcm_algorithm,
KEY ( 0x7f, 0x7c, 0x58, 0x04, 0xa6, 0x80, 0xf6, 0x19, 0x24, 0x96,
0x67, 0x25, 0xdb, 0xa2, 0xa8, 0x0d, 0x85, 0x26, 0x7c, 0x2e,
0x03, 0xc7, 0xc2, 0x34, 0xb0, 0x45, 0xb2, 0x4e, 0xc8, 0xe2,
0x35, 0x28 ),
IV ( 0x2d, 0x9b, 0xf8, 0xb6, 0x36, 0xf3, 0x37, 0xd2, 0x65, 0xb0,
0x90, 0x4c ),
ADDITIONAL(),
PLAINTEXT ( 0xe2, 0xf8, 0x5f, 0xb1, 0x76, 0x84, 0x0c, 0x38, 0x34,
0x5d, 0xa0, 0xf0, 0xf8, 0xdb, 0x6c, 0xdb, 0xc4, 0x5a,
0x12, 0x31, 0x65, 0xf2, 0x44, 0xff, 0x53, 0x89, 0xfe,
0x65, 0xbf, 0x34, 0x1f, 0xa1, 0x31, 0x13, 0x07, 0x51,
0xb5, 0xc7, 0x39, 0xa9, 0x93, 0x1d, 0x5a, 0x57, 0xb1,
0x41, 0xdc, 0x7b, 0x5b, 0x0c, 0x5a, 0x2c, 0xa0, 0x73,
0x31, 0xc2, 0xdc, 0x04, 0xb2, 0x65, 0x7b, 0x02, 0x89,
0x87, 0x8d, 0xea, 0x0e, 0xf7, 0xd5, 0x60, 0x14, 0x65,
0xb7, 0x8a, 0x65, 0x79, 0x5f, 0x0f, 0x31, 0x81, 0x30,
0x4e, 0x58, 0xa2, 0x61, 0xfe, 0xb1, 0xd3, 0x94, 0xf3,
0xc3, 0x3c, 0xab, 0xae, 0x18, 0x99, 0x41, 0x75, 0x5d,
0x76, 0x54, 0xbb, 0x7b, 0xef, 0x08, 0xc3, 0x1b, 0xd2,
0xc5, 0xce, 0x12, 0x03, 0xee, 0xbc, 0x01, 0x5a, 0xe0,
0x40, 0xda, 0x2a, 0x85, 0x1c, 0x2b, 0xa3, 0xc6, 0x2e,
0x69, 0x93, 0x56 ),
CIPHERTEXT ( 0xd7, 0x38, 0x0d, 0x10, 0xb2, 0x2c, 0x3a, 0xe5, 0x84,
0x53, 0x1e, 0x9e, 0x4e, 0xe7, 0x3d, 0x38, 0x7f, 0x69,
0xdb, 0xbb, 0x3d, 0x3d, 0x9f, 0xdb, 0x49, 0x71, 0xed,
0x27, 0x50, 0xb3, 0x19, 0x13, 0xf7, 0x9e, 0x4c, 0x00,
0xcf, 0x1b, 0x76, 0x93, 0x3b, 0xbb, 0x75, 0xd3, 0x9d,
0x8a, 0x64, 0x29, 0xa2, 0x52, 0x8e, 0x9b, 0xd6, 0x0e,
0x65, 0xfa, 0x6f, 0xff, 0xf9, 0xe0, 0x1a, 0x87, 0x58,
0xe7, 0xb5, 0x84, 0x09, 0xfa, 0x3f, 0x37, 0x0c, 0xc3,
0x2a, 0x63, 0xaa, 0x60, 0xa5, 0x4c, 0x36, 0xd7, 0x33,
0xe8, 0xf6, 0xdf, 0xcc, 0xd5, 0xc3, 0x12, 0x0d, 0x05,
0xc6, 0xe3, 0x31, 0x40, 0xc0, 0x05, 0x62, 0x86, 0x55,
0x32, 0xb2, 0xc6, 0x89, 0xde, 0x98, 0x76, 0x9d, 0x33,
0x86, 0xe7, 0xa3, 0xae, 0x67, 0x9e, 0x40, 0x4e, 0x06,
0x25, 0x36, 0xca, 0x04, 0x62, 0x61, 0x21, 0x1a, 0x42,
0x6f, 0xb5, 0x86 ),
AUTH ( 0x75, 0x3f, 0x6c, 0x57, 0xc0, 0xcc, 0x2a, 0x07, 0x5e, 0x68,
0xd0, 0x82, 0xf6, 0xe8, 0x35, 0x90 ) );
/* AES-GCM test case 110 */
CIPHER_TEST ( wycheproof_aes_gcm_97bb5e35, &aes_gcm_algorithm,
KEY ( 0x01, 0xe7, 0x5a, 0xe8, 0x03, 0xd3, 0x04, 0x5e, 0x6b, 0x28,
0xb7, 0xf6, 0x79, 0x37, 0xee, 0xe2, 0xd8, 0xd9, 0x8f, 0x77,
0xb4, 0x89, 0x2d, 0x48, 0xab, 0x1f, 0x15, 0xf5, 0x7f, 0xa8,
0x8b, 0xbe ),
IV ( 0x69, 0x02, 0xe8, 0xf0, 0xef, 0x1e, 0x9e, 0xc6, 0x0a, 0x3e,
0x46, 0xf0 ),
ADDITIONAL(),
PLAINTEXT ( 0x32, 0xdd, 0xe3, 0xb9, 0xbc, 0x67, 0x1f, 0xad, 0x12,
0x65, 0xb2, 0x6c, 0xad, 0x3d, 0x8d, 0xd0, 0xf0, 0x99,
0x13, 0x4f, 0x67, 0x55, 0xf9, 0x86, 0x13, 0x02, 0x4e,
0x1b, 0xd1, 0x0d, 0xa9, 0xa6, 0x2b, 0xad, 0x01, 0xa9,
0x97, 0xf9, 0x73, 0x10, 0x1e, 0x85, 0x5e, 0xe1, 0xc7,
0xe6, 0x0e, 0x6b, 0x6a, 0xa1, 0xdf, 0x9d, 0x80, 0xfa,
0x56, 0x7d, 0x0c, 0xcc, 0xa0, 0xf9, 0x56, 0x68, 0x0b,
0xe7, 0x6e, 0xd3, 0x7c, 0x71, 0xfd, 0xed, 0xef, 0x56,
0x0e, 0x25, 0x23, 0xe8, 0xc5, 0xfd, 0xb9, 0x51, 0x62,
0x50, 0x01, 0x73, 0x04, 0xf8, 0xff, 0x41, 0x6b, 0x9b,
0x8e, 0x5d, 0x17, 0xc1, 0xf0, 0x62, 0xde, 0xd4, 0x61,
0x6e, 0xa9, 0xd4, 0x62, 0xed, 0x6c, 0xa0, 0xdf, 0xdd,
0xb9, 0xf5, 0x29, 0x5b, 0x7a, 0x12, 0x7c, 0x08, 0x25,
0xff, 0xab, 0x56, 0xea, 0x49, 0x83, 0xc0, 0x1e, 0xec,
0x86, 0x7f, 0x93, 0xe2, 0x4a, 0x18, 0xbe, 0x48, 0xce,
0xb5, 0x40, 0x98, 0x6c, 0x53, 0x01, 0x04, 0xfd, 0x46,
0x63, 0x18, 0xeb, 0x81, 0x2e, 0xb4, 0x2f, 0xd0, 0x43,
0x55, 0x61, 0x5f, 0x92, 0x50, 0x3e, 0x53, 0x79, 0x97,
0x42, 0xcd, 0xc7, 0x18, 0x30, 0xea, 0xa4, 0x4a, 0xee,
0xc9, 0x14, 0xb6, 0xff, 0x1c, 0xbb, 0x4f, 0x6f, 0x81,
0xab, 0x59, 0x50, 0x78, 0x33, 0x1d, 0x64, 0x5c, 0x8d,
0x08, 0x3b, 0x46, 0x97, 0x31, 0x17, 0x4a, 0x70, 0x6b,
0x16, 0x66, 0xe5, 0xe4, 0x50, 0xcb, 0x62, 0x67, 0x10,
0x67, 0x03, 0x2a, 0x56, 0x6f, 0x59, 0x7b, 0x98, 0x66,
0xb7, 0x15, 0x14, 0xa4, 0x09, 0xe3, 0x8f, 0xca, 0xbe,
0x84, 0x49, 0x64, 0x58, 0x1b, 0x3a, 0xb5, 0x15, 0x26,
0x96, 0xb7, 0x6e, 0x49, 0xac, 0xe6, 0x65, 0x81, 0xd2,
0x1f, 0x51, 0x2e, 0x28, 0xe0, 0x77, 0xc4, 0x49, 0x48,
0xa6, 0x52, 0x60 ),
CIPHERTEXT ( 0x63, 0x23, 0xdd, 0xbf, 0x9e, 0xb0, 0x46, 0x37, 0x14,
0xd5, 0x85, 0x7d, 0x18, 0x41, 0xa9, 0xf6, 0x55, 0x29,
0x51, 0x6c, 0x2f, 0x41, 0x29, 0x56, 0xbc, 0x83, 0x5f,
0x4f, 0x25, 0x2d, 0x22, 0xa2, 0xce, 0x74, 0x3f, 0x21,
0x76, 0x7f, 0xcb, 0x28, 0x85, 0x98, 0x82, 0xb5, 0x70,
0xca, 0x05, 0x39, 0x70, 0xb7, 0x2e, 0x86, 0xf4, 0x51,
0xff, 0x0c, 0x77, 0xe8, 0x7f, 0x3a, 0x03, 0xc0, 0x53,
0x6b, 0x38, 0x59, 0x39, 0x4f, 0xce, 0x32, 0x44, 0x42,
0xac, 0x19, 0x78, 0x74, 0xf8, 0x1a, 0x2c, 0xe6, 0x49,
0xb9, 0x9f, 0xeb, 0x44, 0x2e, 0x23, 0x12, 0x3f, 0x7a,
0xb3, 0x61, 0xd2, 0xce, 0x67, 0x68, 0xa1, 0xba, 0xdb,
0x30, 0xc5, 0x09, 0xe7, 0x9b, 0xee, 0x92, 0x77, 0xd3,
0x78, 0xfa, 0xda, 0xa6, 0x4e, 0x77, 0xe2, 0x6f, 0x72,
0x6d, 0xf8, 0x61, 0x10, 0x52, 0x65, 0x30, 0xcd, 0x43,
0x94, 0x29, 0xb0, 0x17, 0xae, 0x2b, 0xce, 0xc8, 0xcc,
0x24, 0xf9, 0x94, 0xf5, 0x88, 0x5a, 0x8a, 0x76, 0xfa,
0xb6, 0x33, 0x9c, 0x70, 0x54, 0xdf, 0x76, 0xaa, 0x6f,
0x45, 0x01, 0x93, 0xa6, 0x35, 0xd2, 0x1d, 0x22, 0xf7,
0x1f, 0x1a, 0xe6, 0x85, 0x60, 0x36, 0xe6, 0xca, 0xae,
0xed, 0x88, 0x40, 0xbb, 0xfb, 0xc8, 0x23, 0x6c, 0x25,
0xa3, 0x1e, 0x77, 0x5c, 0xba, 0x5f, 0x6e, 0x18, 0x9f,
0xcb, 0xc3, 0xe9, 0x69, 0x70, 0xca, 0x53, 0x78, 0xfd,
0x5c, 0x29, 0xa7, 0x12, 0xf5, 0xdc, 0x17, 0x64, 0x1a,
0xd8, 0x8a, 0xb5, 0x66, 0xd8, 0xc7, 0x8f, 0xff, 0x1b,
0xb5, 0x7f, 0x9b, 0x2f, 0x7c, 0x9d, 0xb8, 0x38, 0xb4,
0x30, 0x7c, 0x63, 0xe0, 0x4a, 0x73, 0xd3, 0xef, 0x81,
0x21, 0xf4, 0x89, 0x32, 0xec, 0x31, 0x8d, 0xff, 0xae,
0xad, 0x58, 0xa8, 0x3a, 0x7f, 0x79, 0xbc, 0x44, 0xa1,
0x58, 0x79, 0x90 ),
AUTH ( 0x0c, 0x92, 0xbb, 0x52, 0x91, 0xe9, 0x81, 0xbf, 0x56, 0x22,
0x93, 0x87, 0x7f, 0x4d, 0xdb, 0x5f ) );
/* AES-GCM test case 111 */
CIPHER_TEST ( wycheproof_aes_gcm_123ab900, &aes_gcm_algorithm,
KEY ( 0xdc, 0x4d, 0xbf, 0x81, 0x1f, 0x95, 0x09, 0xe3, 0x3a, 0x45,
0xa8, 0xa0, 0x74, 0x3e, 0x93, 0x91, 0xde, 0x33, 0x3f, 0x69,
0xc5, 0x6e, 0xe4, 0xf0, 0xfe, 0x90, 0xce, 0x21, 0xc2, 0x38,
0xee, 0x59 ),
IV ( 0x18, 0x59, 0xd3, 0xba, 0x47, 0x10, 0xcd, 0xd3, 0x00, 0xba,
0xa0, 0x29 ),
ADDITIONAL(),
PLAINTEXT ( 0xdf, 0x91, 0xc4, 0x85, 0x91, 0xf4, 0xca, 0xe8, 0xc4,
0xd6, 0x59, 0xd0, 0x24, 0xdf, 0xd0, 0xa3, 0x53, 0x59,
0x81, 0x48, 0x77, 0x64, 0xbf, 0x19, 0xb0, 0x12, 0x71,
0x3e, 0x6a, 0xc6, 0xd5, 0x78, 0xaa, 0x0b, 0x3a, 0x51,
0xd7, 0xac, 0x97, 0xcd, 0x50, 0x3f, 0xdc, 0x86, 0x82,
0xca, 0xbd, 0xb6, 0xa5, 0x25, 0x6e, 0x98, 0x90, 0x45,
0x83, 0x56, 0xf3, 0x9b, 0x97, 0x49, 0xf6, 0xab, 0x15,
0x81, 0x12, 0xfb, 0xe4, 0xf9, 0x1a, 0xcd, 0x33, 0x34,
0x77, 0x99, 0x8b, 0x9f, 0x0d, 0x7c, 0xc0, 0xbe, 0x2d,
0x40, 0xac, 0xfa, 0x51, 0x03, 0xad, 0xc1, 0xb0, 0xd0,
0xa5, 0xcc, 0x94, 0x73, 0x3d, 0x70, 0x3e, 0x0d, 0x8c,
0x26, 0xe0, 0x9e, 0x9d, 0x07, 0x9f, 0xa6, 0xa6, 0x5c,
0xf3, 0x52, 0x40, 0xa1, 0x62, 0x80, 0x82, 0x6a, 0xb7,
0xc0, 0xd8, 0xac, 0x58, 0x82, 0xc8, 0x9e, 0x58, 0x44,
0x42, 0x33, 0xc2, 0xf6, 0x0a, 0xaa, 0xe0, 0xcb, 0xd1,
0xa7, 0xed, 0x85, 0x00, 0x65, 0x24, 0x2a, 0x93, 0x78,
0xc3, 0x40, 0x23, 0x2f, 0xd8, 0x6f, 0x1f, 0xd5, 0x2a,
0x92, 0xc9, 0x60, 0xa9, 0xa8, 0x6f, 0x52, 0x9f, 0x43,
0x1a, 0xcf, 0x3a, 0xa9, 0x41, 0x33, 0x78, 0x58, 0x03,
0xf4, 0xac, 0x1a, 0x22, 0x37, 0x83, 0x32, 0xda, 0xa2,
0x2d, 0xea, 0x3d, 0x34, 0xd2, 0xfd, 0xb7, 0xc3, 0x08,
0xfa, 0x44, 0xab, 0x93, 0xb3, 0xfb, 0x02, 0xf4, 0x28,
0xbe, 0x22, 0xfa, 0xd6, 0xc0, 0xb1, 0x0c, 0x13, 0x8a,
0xf9, 0x7b, 0x92, 0xa1, 0x99, 0x29, 0x6d, 0xd9, 0x47,
0xc9, 0x3f, 0xbc, 0x40, 0x67, 0x4c, 0x34, 0xc5, 0x62,
0x3d, 0x26, 0xd9, 0xc9, 0x0d, 0xc6, 0xb3, 0x35, 0x70,
0x18, 0xb9, 0xf9, 0x25, 0x0f, 0xb4, 0xdd, 0x5c, 0x11,
0x51, 0x81, 0x91, 0xa2, 0x36, 0x74, 0x5a, 0x2b, 0xd4,
0x2f, 0x86, 0x37, 0x66 ),
CIPHERTEXT ( 0x9c, 0x51, 0x1d, 0x08, 0xf2, 0x44, 0xcb, 0x69, 0x71,
0xa3, 0x9b, 0x70, 0x63, 0x9c, 0x4a, 0x53, 0xae, 0x48,
0x25, 0x4f, 0xcb, 0x3d, 0x2e, 0xea, 0x47, 0x96, 0xec,
0xc9, 0x96, 0xf1, 0xfe, 0x26, 0xa8, 0xe3, 0x09, 0x32,
0x25, 0x8a, 0x48, 0xfe, 0x42, 0x37, 0xe5, 0xbf, 0xb0,
0xe1, 0x32, 0x0d, 0xc5, 0x91, 0x25, 0x6d, 0xc8, 0x3c,
0xd5, 0x6d, 0xbf, 0x5d, 0x9b, 0x37, 0x7b, 0x78, 0x05,
0xb7, 0xfa, 0xc0, 0x49, 0x7b, 0x2f, 0x99, 0xe3, 0x31,
0x0e, 0x9e, 0x2c, 0xc8, 0x00, 0x91, 0x41, 0xa8, 0x2f,
0x26, 0xf8, 0xa0, 0x22, 0x99, 0xd6, 0x41, 0x38, 0xbb,
0x1f, 0xe8, 0xa1, 0x24, 0x3d, 0xf3, 0xe9, 0xfb, 0x37,
0xb5, 0x2b, 0xd3, 0xc2, 0xcc, 0x19, 0xf5, 0x43, 0xb3,
0xf4, 0x92, 0x8e, 0x5a, 0x73, 0x73, 0x0a, 0x7a, 0x6e,
0x6d, 0x75, 0x91, 0x9d, 0x11, 0x7d, 0x3d, 0xfe, 0x10,
0xe8, 0x63, 0xa9, 0x84, 0x6b, 0x2c, 0xa2, 0x60, 0xde,
0x5d, 0xdd, 0xba, 0x7c, 0xea, 0xc3, 0x70, 0x19, 0xe6,
0x15, 0xb8, 0x9a, 0x2a, 0xb9, 0x4d, 0xf8, 0xd1, 0xa7,
0x90, 0x74, 0x99, 0x98, 0xcb, 0x85, 0x31, 0xfe, 0xf1,
0xef, 0x5f, 0x8a, 0x28, 0xa8, 0xad, 0x60, 0xe8, 0x13,
0xf7, 0xe7, 0x84, 0x12, 0xca, 0x4d, 0x95, 0xb9, 0x60,
0x4a, 0x24, 0xa1, 0x6e, 0x4a, 0x3c, 0xa8, 0xee, 0x33,
0xbf, 0xbb, 0x78, 0x09, 0x04, 0x80, 0x14, 0x94, 0x3e,
0x5f, 0xd7, 0x96, 0x6a, 0x7d, 0xb2, 0x14, 0xe0, 0x52,
0xd1, 0xcc, 0x54, 0x6a, 0x6d, 0xa7, 0x2e, 0xc8, 0x9d,
0x1c, 0x33, 0x98, 0xae, 0xfd, 0xcb, 0x88, 0x1d, 0xfc,
0x3d, 0x80, 0x0b, 0x73, 0x23, 0xab, 0xcd, 0x75, 0x83,
0xe9, 0xc8, 0xa3, 0x1f, 0x03, 0xb6, 0x99, 0x5d, 0x4a,
0xea, 0xc1, 0x7c, 0x5a, 0x56, 0xd8, 0xaf, 0x49, 0x2a,
0x2b, 0x10, 0x8f, 0xe3 ),
AUTH ( 0x17, 0x09, 0x0c, 0xe5, 0x0e, 0x35, 0x24, 0x4a, 0x59, 0xba,
0xfc, 0x80, 0xeb, 0xa5, 0xda, 0xe5 ) );
/* AES-GCM test case 112 */
CIPHER_TEST ( wycheproof_aes_gcm_ea998729, &aes_gcm_algorithm,
KEY ( 0x31, 0x7b, 0xa3, 0x31, 0x30, 0x7f, 0x3a, 0x3d, 0x3d, 0x82,
0xee, 0x1f, 0xda, 0xb7, 0x0f, 0x62, 0xa1, 0x55, 0xaf, 0x14,
0xda, 0xf6, 0x31, 0x30, 0x7a, 0x61, 0xb1, 0x87, 0xd4, 0x13,
0xe5, 0x33 ),
IV ( 0xa6, 0x68, 0x7c, 0xf5, 0x08, 0x35, 0x6b, 0x17, 0x46, 0x25,
0xde, 0xaa ),
ADDITIONAL(),
PLAINTEXT ( 0x32, 0xc1, 0xd0, 0x91, 0x07, 0xc5, 0x99, 0xd3, 0xcc,
0xe4, 0xe7, 0x82, 0x17, 0x9c, 0x96, 0x6c, 0x6e, 0xf9,
0x63, 0x68, 0x9d, 0x45, 0x35, 0x1d, 0xbe, 0x0f, 0x6f,
0x88, 0x1d, 0xb2, 0x73, 0xe5, 0x4d, 0xb7, 0x6f, 0xc4,
0x8f, 0xdc, 0x5d, 0x30, 0xf0, 0x89, 0xda, 0x83, 0x83,
0x01, 0xa5, 0xf9, 0x24, 0xbb, 0xa3, 0xc0, 0x44, 0xe1,
0x9b, 0x3e, 0xd5, 0xaa, 0x6b, 0xe8, 0x71, 0x18, 0x55,
0x40, 0x04, 0xca, 0x30, 0xe0, 0x32, 0x43, 0x37, 0xd9,
0x87, 0x83, 0x94, 0x12, 0xbf, 0x8f, 0x8b, 0xbd, 0xd5,
0x37, 0x20, 0x5d, 0x4b, 0x0e, 0x21, 0x20, 0xe9, 0x65,
0x37, 0x32, 0x35, 0xd6, 0xcb, 0xd2, 0xfb, 0x37, 0x76,
0xba, 0x0a, 0x38, 0x4e, 0xc1, 0xd9, 0xb7, 0xc6, 0x31,
0xa0, 0x37, 0x9f, 0xf9, 0x97, 0xc3, 0xf9, 0x74, 0xa6,
0xf7, 0xbb, 0xf4, 0xfd, 0x23, 0x01, 0x62, 0x11, 0xf5,
0xfc, 0x10, 0xac, 0xad, 0xb5, 0xe4, 0x00, 0xd2, 0xff,
0x0f, 0xdf, 0xd1, 0x93, 0xf5, 0xc6, 0xfc, 0x6d, 0x4f,
0x72, 0x71, 0xdf, 0xd1, 0x34, 0x9e, 0xd8, 0x0f, 0xbe,
0xda, 0xeb, 0xb1, 0x55, 0xb9, 0xb0, 0x2f, 0xb3, 0x07,
0x44, 0x95, 0xd5, 0x5f, 0x9a, 0x24, 0x55, 0xf5, 0x9b,
0xf6, 0xf1, 0x13, 0x19, 0x1a, 0x02, 0x9c, 0x6b, 0x0b,
0xa7, 0x5d, 0x97, 0xcd, 0xc0, 0xc8, 0x4f, 0x13, 0x18,
0x36, 0x33, 0x7f, 0x29, 0xf9, 0xd9, 0x6c, 0xa4, 0x48,
0xee, 0xc0, 0xcc, 0x46, 0xd1, 0xca, 0x8b, 0x37, 0x35,
0x66, 0x19, 0x79, 0xd8, 0x33, 0x02, 0xfe, 0xc0, 0x8f,
0xff, 0xcf, 0x5e, 0x58, 0xf1, 0x2b, 0x1e, 0x70, 0x50,
0x65, 0x7b, 0x1b, 0x97, 0xc6, 0x4a, 0x4e, 0x07, 0xe3,
0x17, 0xf5, 0x54, 0xf8, 0x31, 0x0b, 0x6c, 0xcb, 0x49,
0xf3, 0x6d, 0x48, 0xc5, 0x78, 0x16, 0xd2, 0x49, 0x52,
0xaa, 0xda, 0x71, 0x1d, 0x4f ),
CIPHERTEXT ( 0xd7, 0xee, 0xbc, 0x95, 0x87, 0xaa, 0x21, 0x13, 0x6f,
0xa3, 0x8b, 0x41, 0xcf, 0x0e, 0x2d, 0xb0, 0x3a, 0x7e,
0xa2, 0xba, 0x9e, 0xad, 0xdf, 0x83, 0xd3, 0x3f, 0x78,
0x10, 0x93, 0x61, 0x7b, 0xf5, 0x0f, 0x49, 0xb2, 0xbf,
0xe2, 0xf7, 0x17, 0x3b, 0x11, 0x39, 0x12, 0xe2, 0xe1,
0x77, 0x5f, 0x40, 0xed, 0xfe, 0xd8, 0xb3, 0xb0, 0x09,
0x9b, 0x9e, 0x1c, 0x22, 0x0d, 0xd1, 0x03, 0xbe, 0x61,
0x66, 0x21, 0x0b, 0x01, 0x02, 0x9f, 0xeb, 0x24, 0xed,
0x9e, 0x20, 0x61, 0x4e, 0xdd, 0xc3, 0xce, 0xbe, 0x41,
0xb0, 0x07, 0x9a, 0x9a, 0x8c, 0x11, 0x7b, 0x59, 0x6c,
0x90, 0x28, 0x8e, 0xff, 0xd3, 0x79, 0x6f, 0xbd, 0x0c,
0x7e, 0x8e, 0xab, 0x00, 0x60, 0x9a, 0x64, 0xbe, 0x3a,
0xd9, 0x59, 0x7c, 0xdb, 0xf3, 0xa8, 0x18, 0xc2, 0x60,
0xcd, 0x93, 0x8b, 0xdf, 0x23, 0x2e, 0x40, 0x59, 0xae,
0x35, 0xa2, 0x57, 0x1a, 0x83, 0x88, 0x87, 0xfc, 0x19,
0x69, 0x12, 0x17, 0x94, 0x86, 0xe0, 0x46, 0xa6, 0x22,
0x27, 0xa4, 0xca, 0xdd, 0xce, 0x38, 0xcb, 0xbc, 0x37,
0x58, 0x7b, 0xb9, 0x43, 0x9e, 0xc6, 0x37, 0x60, 0x2b,
0x68, 0x18, 0xc5, 0xcb, 0xe3, 0xc7, 0x1a, 0x7c, 0x41,
0x43, 0x96, 0x05, 0x33, 0xdc, 0x74, 0x17, 0x4b, 0xd3,
0x15, 0xc8, 0xdb, 0x22, 0x7b, 0x69, 0xb5, 0x5b, 0xb7,
0xfc, 0x30, 0xba, 0x1d, 0x52, 0x13, 0xa7, 0x52, 0xec,
0x33, 0x92, 0x50, 0x43, 0xce, 0xfb, 0xc1, 0xa6, 0x29,
0x43, 0xee, 0x5f, 0x34, 0xd5, 0xda, 0x01, 0x79, 0x9e,
0x69, 0x09, 0x4d, 0x73, 0x2a, 0xef, 0x52, 0xf8, 0xe0,
0x36, 0x98, 0x0d, 0x00, 0x70, 0xe2, 0x2e, 0x17, 0x3c,
0x67, 0xc4, 0xbb, 0xcc, 0xa6, 0x1c, 0xc1, 0xee, 0xdb,
0xd6, 0x01, 0x65, 0x16, 0xc5, 0x92, 0x14, 0x48, 0x19,
0xdf, 0x13, 0x20, 0x4d, 0xee ),
AUTH ( 0xbf, 0x05, 0x40, 0xd3, 0x4b, 0x20, 0xf7, 0x61, 0x10, 0x1b,
0xc6, 0x08, 0xb0, 0x24, 0x58, 0xf2 ) );
/* AES-GCM test case 113 */
CIPHER_TEST ( wycheproof_aes_gcm_cdad6d3a, &aes_gcm_algorithm,
KEY ( 0x4f, 0x62, 0xe5, 0x6f, 0x7b, 0x15, 0x03, 0x5f, 0x42, 0x78,
0x49, 0x71, 0x4b, 0xeb, 0x97, 0xe6, 0xac, 0xf8, 0x83, 0x71,
0xe1, 0xf6, 0x9b, 0x38, 0x81, 0x29, 0xbb, 0x44, 0x72, 0x73,
0xd6, 0xb8 ),
IV ( 0x13, 0x7d, 0x5c, 0x98, 0xa9, 0x2f, 0x6d, 0xce, 0xe4, 0xf2,
0x9d, 0x7c ),
ADDITIONAL(),
PLAINTEXT ( 0xa1, 0x47, 0xb7, 0x16, 0xb8, 0x6a, 0xc8, 0xda, 0xc7,
0x44, 0x7d, 0x5b, 0xa6, 0x0e, 0xe8, 0xa4, 0x19, 0x1d,
0x2c, 0x64, 0xa3, 0xaa, 0x04, 0x27, 0x6a, 0xee, 0x7b,
0xf7, 0xdc, 0x82, 0x49, 0x62, 0xc0, 0x9a, 0xce, 0x20,
0xa7, 0xe6, 0x14, 0xcc, 0x9e, 0x17, 0x7b, 0x5b, 0x11,
0x81, 0x9b, 0x8f, 0x17, 0x00, 0x8a, 0x94, 0x08, 0xe8,
0xcd, 0x8b, 0xb3, 0x4b, 0x40, 0x1b, 0xe3, 0x53, 0x68,
0xf4, 0x92, 0xc1, 0x76, 0x29, 0xb6, 0x46, 0x72, 0x99,
0xbf, 0xd2, 0xec, 0x4d, 0x9a, 0x7f, 0x17, 0xde, 0xa6,
0xf9, 0xca, 0x08, 0x4e, 0x87, 0x1f, 0xb7, 0xfc, 0x78,
0xc2, 0xbf, 0x29, 0x9b, 0x81, 0x05, 0x22, 0x06, 0x27,
0x26, 0xc5, 0xca, 0xe1, 0x4b, 0x83, 0x97, 0x22, 0xec,
0xff, 0x49, 0x9a, 0x2b, 0x3f, 0x08, 0x2b, 0x6d, 0x1b,
0xfe, 0xdb, 0x75, 0x2f, 0x84, 0xa4, 0xe7, 0x74, 0x59,
0xc9, 0x26, 0x8d, 0x63, 0x19, 0x93, 0x15, 0x36, 0x3e,
0x9a, 0xaa, 0x39, 0xbe, 0xa7, 0xfb, 0xbc, 0xc6, 0x0a,
0x5e, 0xed, 0xc8, 0xa1, 0xa9, 0x82, 0xad, 0x6f, 0xa6,
0x7c, 0x29, 0x5b, 0x93, 0x2e, 0xb3, 0x99, 0x90, 0x47,
0xe0, 0xa9, 0x9b, 0x38, 0x23, 0x03, 0x2b, 0x6b, 0x3b,
0x7c, 0x4c, 0x55, 0x39, 0x70, 0xaf, 0xca, 0x50, 0xcb,
0x4e, 0x5c, 0xe8, 0x59, 0xc2, 0x5c, 0x59, 0x8e, 0xb6,
0x82, 0x00, 0x5f, 0x17, 0xae, 0xc5, 0x52, 0x6e, 0x26,
0x49, 0x32, 0x08, 0x48, 0x36, 0x79, 0xa2, 0x3c, 0xce,
0xf6, 0xf7, 0x40, 0x3a, 0x3f, 0x30, 0x55, 0xaf, 0xfd,
0x53, 0x1a, 0x1c, 0xb7, 0xd1, 0x83, 0x89, 0x2d, 0xd5,
0x77, 0xd5, 0x26, 0xe8, 0xda, 0x8a, 0xa8, 0xb8, 0xb9,
0x80, 0xa3, 0x6e, 0x17, 0x6b, 0x8d, 0x92, 0x93, 0xe7,
0x85, 0xac, 0x01, 0xbd, 0xd4, 0xda, 0xc8, 0xcf, 0x8d,
0xbd, 0xd8, 0x29, 0x26, 0xf1, 0xe3, 0x14, 0x08, 0x28,
0x4f, 0xb3, 0xaa, 0x01, 0xf4, 0x41, 0x4a, 0xc7, 0xaa,
0x78, 0x32, 0xd2, 0xec, 0x02, 0xdd, 0x2d, 0xb9, 0xb6,
0xb4, 0xb6, 0x1d, 0x8c, 0x1c, 0xbb, 0x31, 0xda, 0xc7,
0xb6, 0xaf, 0xa8, 0xd0, 0x8b, 0x68, 0x77, 0xe4, 0x39,
0x60, 0x0c, 0x4a, 0x6f, 0xc0, 0x75, 0x11, 0x87, 0x7d,
0xf2, 0xe9, 0xce, 0x3a, 0x95, 0x38, 0xa7, 0x26, 0x00,
0x2a, 0x46, 0xc0, 0x83, 0xd9, 0x81, 0x24, 0xb1, 0x85,
0x73, 0x0f, 0x3b, 0x2a, 0xea, 0x2a, 0x01, 0xcb, 0x62,
0x6b, 0xe8, 0x09, 0xf8, 0x7b, 0x2a, 0xc1, 0x00, 0x51,
0x1c, 0x5b, 0x8f, 0xa0, 0xe9, 0xd4, 0x0c, 0x9c, 0x99,
0x9e, 0xa0, 0xaa, 0x87, 0xaa, 0xd0, 0x8c, 0xfb, 0x62,
0xc1, 0xba, 0x86, 0x91, 0x78, 0xbe, 0x98, 0x61, 0x56,
0xf7, 0x62, 0x2d, 0x8c, 0x48, 0xad, 0x80, 0xa5, 0x52,
0xe9, 0xd0, 0x8c, 0x36, 0x67, 0x1a, 0xe2, 0x32, 0xef,
0xef, 0xc8, 0x61, 0x9c, 0x56, 0x2e, 0x71, 0x5f, 0x04,
0xae, 0x52, 0xdb, 0x2a, 0xd8, 0xe4, 0xa0, 0x9e, 0x8c,
0x67, 0x1b, 0x12, 0x28, 0x95, 0x58, 0x11, 0x7f, 0x95,
0x62, 0xd5, 0x1b, 0xeb, 0x59, 0xe2, 0x9b, 0x10, 0xdd,
0x9e, 0xb2, 0x32, 0xe8, 0xfc, 0xdb, 0x1c, 0xfd, 0xd1,
0x48, 0x99, 0xac, 0xd6, 0x93, 0xde, 0x14, 0xa7, 0xc0,
0x76, 0xa4, 0x65, 0x63, 0x86, 0xe2, 0x3b, 0x06, 0x41,
0x5b, 0x2c, 0x7a, 0x93, 0xb1, 0x66, 0xca, 0xd1, 0x04,
0x8b, 0xc6, 0x05, 0xa4, 0x9a, 0x79, 0xdf, 0x3c, 0x03,
0xa3, 0x38, 0x0d, 0xe6, 0x8a, 0x4f, 0x01, 0x3e, 0x05,
0xe5, 0x28, 0x37, 0x45, 0xd4, 0x07, 0x8e, 0xbe, 0x30,
0x8d, 0xc8, 0x88, 0x1c, 0xed, 0x62, 0xed, 0x57, 0x1a,
0x93, 0xc6, 0x9e, 0x8a, 0xae, 0x6e, 0x51, 0xf5, 0xe6,
0x1e, 0x4f, 0xf7, 0x56, 0x99, 0xaa, 0x32 ),
CIPHERTEXT ( 0xb1, 0x94, 0xe6, 0xc8, 0xf8, 0x3e, 0x09, 0x51, 0x5d,
0x4e, 0xa9, 0x5c, 0x00, 0x57, 0x8f, 0xda, 0xee, 0x8f,
0x9d, 0x35, 0xad, 0x09, 0xa5, 0x60, 0xba, 0x81, 0xa5,
0x1a, 0xcc, 0xc4, 0x94, 0x16, 0x59, 0x85, 0x16, 0xc7,
0x47, 0xe1, 0x6d, 0xbc, 0x5c, 0x44, 0xbf, 0xd5, 0xc7,
0x90, 0xba, 0x59, 0xb4, 0x7a, 0x6f, 0x57, 0x3a, 0x43,
0xb2, 0x6c, 0xdb, 0xb2, 0x40, 0x23, 0x0b, 0x1d, 0xca,
0x00, 0x44, 0x77, 0x70, 0xc4, 0xcf, 0x64, 0x7d, 0xf2,
0xa7, 0x9e, 0xca, 0x3f, 0x4a, 0x8b, 0x2d, 0xe0, 0x8f,
0x9f, 0xbc, 0x44, 0x89, 0xc3, 0x0f, 0x6b, 0xcf, 0xcd,
0x09, 0x6f, 0x1a, 0xa4, 0x17, 0x7f, 0xa2, 0x81, 0x24,
0x8e, 0x8e, 0x19, 0xe2, 0xea, 0x7d, 0x1f, 0x04, 0x9b,
0x70, 0x53, 0x94, 0x7a, 0x3a, 0x67, 0xe9, 0x46, 0xeb,
0xbe, 0xd6, 0x74, 0x66, 0xe0, 0x09, 0xb6, 0x3d, 0xeb,
0xce, 0xba, 0x54, 0xcc, 0x88, 0x1e, 0x55, 0xe2, 0xd6,
0x8f, 0x3f, 0x58, 0x43, 0x80, 0xd6, 0xfb, 0x7b, 0x0e,
0x9a, 0x3f, 0xdb, 0xd7, 0x09, 0xad, 0xac, 0x3a, 0x47,
0xd6, 0xf9, 0xa5, 0xfc, 0xaf, 0x03, 0x21, 0x8e, 0x18,
0xcc, 0xa5, 0xa7, 0xa0, 0xe3, 0x40, 0xa7, 0x74, 0xcd,
0x5c, 0x39, 0xd7, 0x03, 0x1b, 0x63, 0xb5, 0xb5, 0xb8,
0x96, 0xe1, 0xe7, 0x05, 0xb4, 0xde, 0xd0, 0x99, 0xc3,
0xc1, 0x11, 0x50, 0x73, 0x8b, 0x21, 0x07, 0xf6, 0x1f,
0x14, 0x23, 0xfb, 0x72, 0xed, 0x0a, 0x16, 0x07, 0x0c,
0xd6, 0xf8, 0xa1, 0x8a, 0xe9, 0x0b, 0x16, 0x7b, 0x70,
0x7c, 0x23, 0xdd, 0xc8, 0x5a, 0x1b, 0x6f, 0xf5, 0xa3,
0xec, 0x5e, 0x65, 0x4b, 0x14, 0x46, 0xc6, 0xea, 0xe7,
0x87, 0xc3, 0x1a, 0x94, 0xbc, 0x9a, 0xb5, 0x37, 0x6d,
0xfe, 0xa3, 0x1b, 0xf8, 0xdf, 0xbd, 0xab, 0xce, 0x45,
0xc7, 0x50, 0x11, 0x19, 0x46, 0xe6, 0x4c, 0x22, 0xd2,
0x3c, 0x46, 0xd7, 0xef, 0x64, 0x4c, 0xa0, 0x2c, 0x69,
0x20, 0x5d, 0x59, 0xb1, 0x81, 0x5a, 0x6a, 0x6e, 0x8b,
0x14, 0xfe, 0x7e, 0x2d, 0x8a, 0xd1, 0x7f, 0xc7, 0x5e,
0x65, 0x67, 0x06, 0xb6, 0x7f, 0x25, 0x75, 0x23, 0xd5,
0x17, 0xd9, 0xf8, 0xb8, 0x31, 0x50, 0xa8, 0x83, 0x59,
0xe5, 0x6d, 0x64, 0x32, 0x85, 0x9f, 0x8f, 0x90, 0xea,
0xba, 0x70, 0xcf, 0x90, 0xf8, 0x69, 0x95, 0xaf, 0xc8,
0x5c, 0x33, 0x99, 0x25, 0x91, 0x53, 0x6b, 0xa3, 0x53,
0xae, 0x14, 0xa6, 0x93, 0x2d, 0xc9, 0x6a, 0xd7, 0x26,
0x87, 0xac, 0x34, 0xc2, 0xd4, 0xd5, 0xc9, 0x2e, 0x51,
0xda, 0x24, 0x6f, 0x55, 0x77, 0x85, 0xdf, 0x19, 0x44,
0xd2, 0xc3, 0xc8, 0x35, 0x36, 0x73, 0x9b, 0x7d, 0x84,
0x75, 0xba, 0x39, 0xc6, 0x39, 0xdf, 0x4c, 0xe6, 0x98,
0x59, 0xc6, 0xff, 0xb9, 0xe9, 0x94, 0x54, 0x56, 0x99,
0xa3, 0xa1, 0x9d, 0x53, 0x97, 0x9b, 0xfa, 0x34, 0xfd,
0xec, 0x85, 0x6a, 0x9f, 0x12, 0xac, 0x70, 0xbd, 0xea,
0xcf, 0x17, 0x27, 0x21, 0x49, 0x6d, 0x76, 0xd8, 0x07,
0x3a, 0x76, 0xe8, 0x16, 0x0d, 0x99, 0xf4, 0xb7, 0x46,
0x6e, 0x05, 0xa8, 0xf0, 0x06, 0xcb, 0x44, 0x8d, 0x2a,
0xf7, 0xee, 0x30, 0x8c, 0xa1, 0x94, 0x40, 0xaa, 0xca,
0x08, 0xf3, 0x44, 0x22, 0xda, 0x83, 0x0e, 0x47, 0x62,
0x69, 0xc8, 0x29, 0xa2, 0xb5, 0xb6, 0x4a, 0xce, 0xa4,
0xf1, 0x14, 0x3d, 0x18, 0x57, 0xcc, 0x26, 0x99, 0xea,
0x3b, 0xf2, 0xe0, 0x76, 0xb1, 0x6e, 0x50, 0xa9, 0x07,
0x1c, 0xf1, 0x53, 0x52, 0x18, 0x9e, 0xdf, 0x27, 0x89,
0x84, 0x10, 0x2e, 0xbc, 0xc7, 0x51, 0xd4, 0x65, 0x10,
0xb8, 0x16, 0xaf, 0xaf, 0xdb, 0x3f, 0xea, 0x37, 0xa7,
0xd4, 0x96, 0x62, 0xff, 0x09, 0x03, 0x92 ),
AUTH ( 0x79, 0xe6, 0x4c, 0x4c, 0x0e, 0x8b, 0xb3, 0xa2, 0x14, 0x95,
0x55, 0x84, 0xd2, 0xbc, 0x8b, 0x16 ) );
/* AES-GCM test case 114 */
CIPHER_TEST ( wycheproof_aes_gcm_e77da61d, &aes_gcm_algorithm,
KEY ( 0x6a, 0xad, 0xa8, 0x28, 0xb2, 0x27, 0x3f, 0xfb, 0x81, 0xdc,
0x79, 0x4a, 0x86, 0x29, 0xe3, 0x05, 0xcb, 0x64, 0x6f, 0x9d,
0x26, 0x60, 0x02, 0xbd, 0x31, 0x34, 0x27, 0xd3, 0x84, 0x83,
0x87, 0x67 ),
IV ( 0x00, 0xde, 0xa4, 0x50, 0x5c, 0xd5, 0x39, 0x6f, 0x6b, 0xa4,
0x08, 0xa5 ),
ADDITIONAL(),
PLAINTEXT ( 0x1d, 0x99, 0xee, 0x02, 0x2f, 0x95, 0x76, 0xed, 0x69,
0xaf, 0x8a, 0x7f, 0x39, 0x45, 0x36, 0x2a, 0xb0, 0xc4,
0x69, 0x1a, 0x4d, 0x33, 0x3a, 0x3f, 0x5f, 0x85, 0xcf,
0x8d, 0x7d, 0xb7, 0xfb, 0x8a, 0x06, 0x9b, 0x48, 0x99,
0x8c, 0xf2, 0x86, 0xff, 0xa4, 0x61, 0x5e, 0x87, 0x39,
0x8c, 0x3c, 0x3c, 0x12, 0x95, 0xd5, 0xbe, 0xe2, 0x72,
0xbd, 0xeb, 0x51, 0x66, 0x47, 0x0a, 0x89, 0x23, 0xf7,
0xb7, 0x9d, 0xc9, 0x2b, 0x2a, 0x97, 0xde, 0x34, 0xba,
0x87, 0xdb, 0x29, 0x07, 0xac, 0x84, 0xfb, 0x23, 0xd3,
0x8f, 0x2e, 0x1a, 0xf8, 0x35, 0xf7, 0x37, 0x48, 0x8f,
0xc0, 0x4f, 0xac, 0x70, 0x43, 0x2d, 0x3a, 0x0b, 0x02,
0xa4, 0x72, 0xf8, 0x51, 0x02, 0x58, 0x03, 0xaa, 0xc6,
0x92, 0x27, 0x32, 0x73, 0xe2, 0x7b, 0xe1, 0xdd, 0x96,
0x79, 0xa4, 0xd6, 0x26, 0x99, 0x7c, 0x36, 0x3b, 0xa7,
0x06, 0xa7, 0xdb, 0x1f, 0x4c, 0xdc, 0x07, 0xfe, 0x3c,
0x67, 0xfb, 0xec, 0x0a, 0xa8, 0x61, 0x90, 0x38, 0xe0,
0x56, 0x07, 0xd9, 0x5a, 0x5d, 0xdc, 0x4b, 0x40, 0x3c,
0xd6, 0xda, 0xbc, 0x41, 0x79, 0x0a, 0xdb, 0x6c, 0xd7,
0x6e, 0xae, 0xac, 0x34, 0x91, 0xc3, 0xcd, 0x6a, 0x87,
0x87, 0xe0, 0xf2, 0x9c, 0x04, 0x2b, 0x4e, 0x2a, 0xfe,
0x98, 0x76, 0x74, 0xb9, 0x49, 0x5e, 0xf5, 0x57, 0x68,
0xc6, 0x96, 0xbc, 0x6c, 0x3d, 0xf1, 0xc1, 0xe9, 0xa7,
0xc0, 0x45, 0x6f, 0x47, 0x8a, 0x1a, 0x1c, 0xc4, 0xc3,
0xa9, 0xb0, 0xf2, 0xcd, 0x3b, 0x42, 0xdb, 0x8d, 0x0b,
0x6a, 0xa3, 0x6d, 0xfe, 0xc3, 0xd2, 0xc0, 0x8d, 0x13,
0x98, 0xee, 0xb7, 0x5d, 0xb6, 0x1a, 0xe9, 0x02, 0xd2,
0xda, 0x5a, 0x1e, 0xfa, 0xc7, 0x90, 0x4b, 0x8a, 0xe3,
0x2a, 0xf1, 0xff, 0x94, 0x2c, 0x99, 0x76, 0x95, 0x04,
0xbb, 0x5c, 0x56, 0xf5, 0x81, 0x9e, 0x4f, 0x89, 0x9e,
0x8b, 0xba, 0xcf, 0xd4, 0x68, 0x2d, 0x82, 0xf4, 0x1e,
0x17, 0x9a, 0x9d, 0xdf, 0x9a, 0x08, 0x20, 0xcc, 0x43,
0x16, 0xf2, 0x52, 0xd1, 0xd3, 0x55, 0x97, 0xae, 0xda,
0x43, 0xab, 0x87, 0x08, 0x87, 0xe6, 0x7a, 0xab, 0xe7,
0x9f, 0x04, 0x6b, 0x03, 0xa9, 0xa8, 0x35, 0x88, 0x99,
0x40, 0x58, 0xa0, 0x7b, 0xae, 0xdb, 0xbb, 0xf9, 0xc0,
0x1d, 0x83, 0x37, 0x32, 0xef, 0xac, 0x89, 0xae, 0x81,
0x73, 0xf9, 0x02, 0xe8, 0x31, 0xd5, 0x79, 0xd3, 0x1e,
0x4a, 0x40, 0x9c, 0xef, 0x5e, 0x49, 0x4a, 0x27, 0xbb,
0x63, 0x67, 0xe8, 0x4f, 0xc5, 0x76, 0x42, 0x04, 0x8e,
0x44, 0xd6, 0x87, 0xce, 0x73, 0xdd, 0x9e, 0x71, 0x38,
0x41, 0x82, 0xb2, 0x62, 0xd6, 0x3a, 0x71, 0x56, 0x98,
0x13, 0x2f, 0x21, 0x8f, 0xc2, 0xc3, 0x61, 0x1e, 0xd0,
0xdb, 0xf8, 0x14, 0x79, 0x98, 0x66, 0xc8, 0xc4, 0x3b,
0x4a, 0xa7, 0xc1, 0x3b, 0x5a, 0x53, 0xf9, 0xa3, 0x37,
0x62, 0x7d, 0x76, 0xbb, 0x96, 0x0f, 0x60, 0xfa, 0x89,
0x1f, 0x00, 0x76, 0xa5, 0x38, 0xc3, 0x96, 0x50, 0x0c,
0xef, 0xd2, 0xdd, 0x1e, 0x4e, 0x02, 0x4f, 0x9d, 0x83,
0x27, 0x5f, 0x9b, 0x2c, 0x0c, 0xe6, 0xdf, 0x41, 0xbb,
0x64, 0x88, 0x39, 0x8f, 0xc6, 0x57, 0xdb, 0xa0, 0xef,
0xda, 0xe0, 0x01, 0x9d, 0xd3, 0x1b, 0x03, 0x22, 0x7e,
0xdc, 0x52, 0x29, 0xaf, 0xf6, 0x0c, 0xd0, 0x83, 0xc0,
0xf0, 0xb6, 0x66, 0x75, 0xba, 0xaf, 0x91, 0xc3, 0x20,
0x68, 0x19, 0xa0, 0xc9, 0x85, 0xbc, 0x32, 0x83, 0x60,
0x0e, 0x9e, 0x6d, 0x62, 0xc6, 0xfa, 0xb2, 0xc6, 0xae,
0xfd, 0x69, 0x82, 0x9c, 0x75, 0x06, 0x3c, 0x54, 0xad,
0x11, 0x26, 0x9a, 0xc5, 0xec, 0x56, 0x3e, 0xcd, 0x87,
0x0c, 0x2a, 0xf4, 0xcd, 0xe6, 0xce, 0xc4, 0x3e ),
CIPHERTEXT ( 0x75, 0x75, 0x0a, 0x14, 0x38, 0x87, 0xad, 0x76, 0x3c,
0x13, 0x0a, 0x63, 0x7e, 0x5d, 0x75, 0xfc, 0x7b, 0x53,
0x99, 0x9e, 0x8a, 0x08, 0x5a, 0x74, 0xa5, 0xc7, 0xe4,
0xe2, 0x65, 0x8d, 0x03, 0x58, 0x6f, 0x36, 0xdd, 0x67,
0xbd, 0xd0, 0x62, 0x29, 0x92, 0xfc, 0x44, 0x08, 0x22,
0xe6, 0x35, 0x34, 0x39, 0x1a, 0x43, 0x5c, 0x93, 0x4f,
0xa7, 0xfa, 0x19, 0xf5, 0x19, 0x66, 0x95, 0x51, 0x3a,
0xc8, 0x12, 0xe7, 0x78, 0x92, 0x8a, 0x67, 0x7a, 0xf3,
0x7a, 0x8b, 0xc3, 0x6a, 0x19, 0xb7, 0xe3, 0xab, 0x05,
0xe1, 0x85, 0x42, 0x9a, 0xa5, 0xe5, 0xe1, 0x7c, 0xac,
0xdd, 0x89, 0x71, 0xe3, 0xc5, 0x51, 0xdb, 0x83, 0xc5,
0x85, 0x32, 0x42, 0x77, 0x84, 0x3c, 0x17, 0x83, 0x77,
0x13, 0x79, 0x28, 0x0d, 0x13, 0x93, 0xee, 0xb2, 0x6e,
0x9e, 0x7f, 0xf7, 0x00, 0x6d, 0x43, 0x7b, 0x7c, 0xb0,
0xfe, 0x37, 0x3b, 0x2d, 0xc3, 0x23, 0x8d, 0x87, 0xba,
0xdf, 0x9e, 0xdd, 0x76, 0x7a, 0xd7, 0xb4, 0x72, 0x6a,
0x77, 0x7b, 0x99, 0xcd, 0x1d, 0x11, 0xf1, 0xbc, 0x16,
0x09, 0x8b, 0x12, 0x30, 0xa1, 0x94, 0xbd, 0x94, 0x35,
0xca, 0xa0, 0x73, 0x02, 0x76, 0xeb, 0xc0, 0xc4, 0x4a,
0x92, 0x3e, 0x3a, 0x14, 0x75, 0x1e, 0x12, 0x5a, 0xa7,
0x10, 0x0c, 0xbd, 0x68, 0x22, 0x02, 0xf9, 0xa7, 0x1b,
0xf0, 0x8e, 0x28, 0xae, 0x36, 0xf5, 0x5c, 0x6f, 0xce,
0x99, 0x8a, 0x4c, 0x47, 0x4d, 0xd5, 0xa5, 0xd5, 0x5d,
0x25, 0xae, 0xf3, 0x32, 0xc3, 0xb4, 0x64, 0x0e, 0x20,
0xb2, 0x22, 0xb7, 0x30, 0x5d, 0xfc, 0x21, 0xf6, 0x0e,
0x9f, 0x5d, 0xd9, 0x7c, 0x19, 0x87, 0x12, 0x0b, 0xa0,
0xb7, 0xb7, 0xe8, 0x5c, 0xe8, 0x10, 0xf3, 0x78, 0xd4,
0x01, 0x98, 0x7b, 0x82, 0x46, 0x79, 0xff, 0xe4, 0x5c,
0xca, 0xde, 0x89, 0xe5, 0xed, 0x45, 0x17, 0x6b, 0xab,
0x9d, 0x4a, 0x14, 0xc5, 0xa7, 0x53, 0xd3, 0x2e, 0x11,
0x3a, 0x2a, 0xba, 0x5d, 0xfe, 0x65, 0xac, 0x75, 0x91,
0x8a, 0xfe, 0xd6, 0xcb, 0x21, 0x22, 0xcf, 0x24, 0x97,
0x1f, 0xab, 0x93, 0x2b, 0x64, 0xe1, 0x04, 0xa8, 0xa0,
0x1c, 0x75, 0x5b, 0x4f, 0xb8, 0x6a, 0xfd, 0x49, 0xd0,
0xce, 0x1a, 0x19, 0x09, 0x19, 0x25, 0x51, 0xf5, 0x79,
0xc3, 0x58, 0x7d, 0x1a, 0x61, 0xba, 0x5b, 0x04, 0x15,
0xcf, 0x90, 0xd5, 0x72, 0x32, 0x0a, 0xf3, 0xb0, 0xc5,
0xd5, 0xd6, 0x72, 0xd4, 0x20, 0x72, 0x28, 0xe7, 0x53,
0x22, 0xff, 0xfb, 0x62, 0x12, 0x00, 0xfc, 0xb5, 0x3d,
0x97, 0x0f, 0x6a, 0x74, 0xe0, 0x6b, 0xd9, 0x0d, 0x8f,
0x9a, 0x1c, 0xf2, 0x3c, 0x87, 0xc0, 0x7d, 0xeb, 0x14,
0x45, 0x6d, 0xc2, 0x1d, 0x84, 0xb8, 0xf6, 0xca, 0x45,
0xb8, 0xc3, 0xaf, 0x6d, 0x6d, 0x5c, 0x11, 0x04, 0x88,
0xc9, 0x19, 0x61, 0x7c, 0x11, 0x6c, 0x25, 0xba, 0xef,
0x4a, 0x7a, 0x0d, 0x47, 0xa4, 0xb2, 0x47, 0xc9, 0x44,
0x40, 0x17, 0x6d, 0xd5, 0x4a, 0x01, 0x4d, 0x63, 0x9a,
0x61, 0x39, 0xd8, 0x34, 0x98, 0xa5, 0x85, 0xb5, 0x68,
0x7c, 0xea, 0x85, 0x9d, 0xbb, 0x32, 0xb8, 0x52, 0x69,
0x0c, 0x4d, 0xcd, 0x23, 0xae, 0x40, 0x58, 0x49, 0x8e,
0xe7, 0x51, 0xae, 0xc8, 0xaf, 0xf3, 0xb0, 0xf1, 0xf0,
0xef, 0xd4, 0xbb, 0x50, 0x63, 0x6d, 0x11, 0x82, 0xe1,
0x11, 0xa6, 0xa9, 0x8f, 0x95, 0xf2, 0xd5, 0x5f, 0x8f,
0x4e, 0x75, 0xc1, 0xae, 0x8a, 0x55, 0xe8, 0x51, 0xc5,
0x09, 0x5b, 0xcd, 0x9d, 0x1a, 0xd8, 0x6f, 0xc7, 0x9b,
0x0b, 0xf9, 0xad, 0x2f, 0x58, 0x29, 0x3a, 0x62, 0x4c,
0x25, 0x04, 0xb3, 0x04, 0x69, 0xf7, 0xed, 0x1c, 0x64,
0x55, 0x49, 0xd3, 0x71, 0x77, 0xdf, 0xcd, 0x95 ),
AUTH ( 0x8f, 0xba, 0x48, 0xda, 0xb1, 0x8a, 0x4b, 0xea, 0xdd, 0xff,
0x24, 0x25, 0x2e, 0x62, 0x08, 0x3a ) );
/* AES-GCM test case 115 */
CIPHER_TEST ( wycheproof_aes_gcm_599f93e3, &aes_gcm_algorithm,
KEY ( 0xaf, 0xd5, 0x79, 0xaa, 0x1a, 0xcc, 0xc6, 0x82, 0xac, 0xa5,
0x4e, 0x14, 0x2a, 0xa6, 0x9d, 0xf0, 0x98, 0x02, 0xf0, 0x20,
0xb2, 0x4a, 0x42, 0xc4, 0x1d, 0xb5, 0x8f, 0x69, 0x97, 0xed,
0xc6, 0x78 ),
IV ( 0x9f, 0x79, 0xd1, 0xda, 0x95, 0x74, 0x91, 0x06, 0x9d, 0x77,
0x44, 0x96 ),
ADDITIONAL(),
PLAINTEXT ( 0xba, 0xfc, 0x6e, 0x86, 0x5c, 0x48, 0xbd, 0x34, 0xb7,
0xf9, 0x32, 0x9e, 0x35, 0xcf, 0xb2, 0x86, 0xcd, 0x4d,
0xc3, 0x1f, 0x83, 0x16, 0x17, 0x12, 0x18, 0xbf, 0x04,
0x71, 0xdf, 0xfd, 0x35, 0xa3, 0x30, 0xa1, 0x81, 0x69,
0x7c, 0xa5, 0x17, 0x86, 0x88, 0xdd, 0x87, 0xef, 0xe5,
0x27, 0x92, 0x4f, 0x90, 0xd1, 0xc7, 0x8b, 0xa4, 0x0d,
0xe7, 0x09, 0x52, 0xff, 0x44, 0xc2, 0x6e, 0xfe, 0x21,
0x59, 0xe5, 0x93, 0x58, 0xf3, 0x93, 0x15, 0x73, 0xdf,
0x93, 0x73, 0xa7, 0x3b, 0x91, 0xba, 0x95, 0x92, 0xe1,
0x21, 0x40, 0xcc, 0x00, 0x9f, 0xee, 0xdd, 0x25, 0x95,
0xe5, 0xb6, 0xf0, 0x66, 0xb5, 0xef, 0x6d, 0xe9, 0x9d,
0x4c, 0x31, 0x55, 0x2c, 0xec, 0xb0, 0x61, 0x4f, 0x1d,
0xce, 0x99, 0x0e, 0x46, 0xe7, 0x69, 0x43, 0x82, 0xf3,
0xcf, 0x3c, 0xcf, 0xcd, 0x1e, 0xa6, 0x2e, 0x56, 0x3e,
0x5f, 0x0d, 0xc3, 0x6c, 0xb5, 0xa8, 0x4e, 0x0c, 0x0b,
0x3f, 0x1f, 0x8f, 0x3f, 0xa9, 0x10, 0x0f, 0x48, 0x71,
0x95, 0xff, 0x2e, 0x31, 0x69, 0xad, 0x08, 0x13, 0x6a,
0xa8, 0xad, 0x56, 0x65, 0x48, 0xc9, 0x83, 0x6a, 0xa0,
0x0d, 0xba, 0xc7, 0x47, 0x16, 0xc2, 0x6e, 0x83, 0x8c,
0x14, 0x86, 0xa0, 0x08, 0x4d, 0x3d, 0xfd, 0x69, 0x25,
0x85, 0xe2, 0xe5, 0xae, 0x7c, 0x75, 0xca, 0xf0, 0xe7,
0xaf, 0x60, 0x21, 0x9f, 0x96, 0x11, 0x6a, 0xe9, 0x63,
0xb4, 0xa5, 0x89, 0x9c, 0xb3, 0x0a, 0x12, 0x0d, 0xaa,
0xca, 0x78, 0x33, 0x77, 0x66, 0x92, 0xc2, 0x5a, 0xd7,
0xc1, 0x85, 0xe6, 0xa2, 0xd7, 0x0c, 0xe0, 0x3f, 0xf1,
0x56, 0xcd, 0x25, 0xd7, 0x61, 0x53, 0x53, 0x9d, 0x68,
0x55, 0x77, 0x3e, 0x21, 0x14, 0x2f, 0x9b, 0xa0, 0x31,
0x35, 0x62, 0x87, 0x5f, 0x10, 0x5a, 0x2b, 0x77, 0x0a,
0x15, 0xb5, 0x33, 0xfb, 0xf5, 0x11, 0x0d, 0xaf, 0xb6,
0x93, 0x29, 0x98, 0x2a, 0xb4, 0x4e, 0xd1, 0xb9, 0xf3,
0x21, 0xd7, 0xb7, 0x9a, 0xe1, 0x5a, 0x19, 0xd9, 0xf3,
0xbd, 0x4c, 0x50, 0x4c, 0x24, 0xb2, 0x3b, 0x81, 0x2d,
0x51, 0x4c, 0x19, 0xae, 0x2a, 0x34, 0x7c, 0xc1, 0x8c,
0x12, 0xce, 0x91, 0x5a, 0x0b, 0xad, 0x7c, 0xc8, 0x9a,
0x87, 0x20, 0xd4, 0xba, 0x5e, 0xe0, 0x96, 0x4f, 0xe0,
0x5e, 0x4c, 0xc5, 0x9a, 0x13, 0xf9, 0x2c, 0x67, 0x0b,
0x86, 0x55, 0x07, 0x1e, 0x21, 0x6f, 0x19, 0xad, 0x05,
0xf4, 0xbb, 0xcc, 0xa6, 0xdc, 0x7f, 0xee, 0xb1, 0x88,
0xd6, 0x26, 0x9c, 0x58, 0x06, 0x5c, 0x98, 0xfc, 0xbb,
0xac, 0x18, 0x3a, 0x9a, 0xbb, 0x38, 0x11, 0xd8, 0x0c,
0xb4, 0x76, 0x54, 0x4b, 0xd7, 0x4b, 0x26, 0x99, 0x1f,
0x3d, 0xf9, 0x87, 0xf0, 0xed, 0x0e, 0xa6, 0x23, 0x86,
0x59, 0xac, 0x09, 0xa2, 0x25, 0x0f, 0xec, 0xc0, 0x72,
0x3f, 0xfc, 0x51, 0x64, 0x7b, 0x74, 0xbd, 0xf4, 0x54,
0xf2, 0x6e, 0x11, 0x11, 0x2c, 0x8b, 0xbd, 0x79, 0x7f,
0x09, 0xa3, 0xbe, 0x82, 0x51, 0xc6, 0xb5, 0xb3, 0x19,
0xed, 0x95, 0x37, 0x27, 0x8c, 0xc1, 0xab, 0xed, 0xb3,
0x2a, 0xa1, 0x08, 0x40, 0x98, 0x4b, 0x96, 0xe8, 0x63,
0x6b, 0x28, 0x93, 0x35, 0x84, 0x6a, 0xe4, 0xfb, 0xd4,
0xa0, 0x0f, 0x66, 0x00, 0xd9, 0x8e, 0xbe, 0x25, 0x88,
0x5c, 0x68, 0xd7, 0x04, 0x3c, 0xe0, 0xdc, 0x52, 0x29,
0xd7, 0xe9, 0xbd, 0x51, 0xbe, 0xa9, 0xb8, 0xfe, 0x05,
0x52, 0xf4, 0x06, 0x88, 0x42, 0x9c, 0x48, 0x26, 0x29,
0xce, 0xd6, 0x23, 0xf6, 0x07, 0x48, 0x58, 0x14, 0x7e,
0x73, 0xda, 0x3f, 0xf4, 0xad, 0x2a, 0xe4, 0x5c, 0x1a,
0x1c, 0x8a, 0x6c, 0x5b, 0x3b, 0x2c, 0x3d, 0x56, 0x8a,
0x75, 0x66, 0x08, 0x17, 0x9f, 0x63, 0xb5, 0x80, 0xfd ),
CIPHERTEXT ( 0xcd, 0x48, 0xa6, 0x95, 0x28, 0x68, 0xf7, 0xf7, 0xc8,
0x94, 0x16, 0x52, 0xf6, 0x41, 0x8b, 0x37, 0x4d, 0xb9,
0xaf, 0xd4, 0xbe, 0x17, 0x9a, 0x94, 0x8d, 0x33, 0x6b,
0xa0, 0xd8, 0x04, 0x38, 0xaf, 0x89, 0x5a, 0x21, 0xf2,
0x68, 0x36, 0x4f, 0xb1, 0xc5, 0xc6, 0x47, 0x2f, 0x67,
0xbd, 0x4c, 0xb7, 0xe4, 0x64, 0x06, 0x8f, 0xe4, 0x43,
0x77, 0xfb, 0x7c, 0xf4, 0x98, 0x5b, 0x84, 0x28, 0xa0,
0x68, 0xf5, 0xa1, 0x80, 0x94, 0x98, 0x22, 0x8f, 0xa8,
0xd8, 0x05, 0x36, 0x50, 0x68, 0x7a, 0xfb, 0x9e, 0xbf,
0x3b, 0x19, 0xb4, 0x3c, 0x38, 0xe5, 0x68, 0x45, 0xe9,
0x35, 0x01, 0x98, 0xae, 0x05, 0x11, 0xef, 0xba, 0x7e,
0xa8, 0xbf, 0x81, 0x59, 0xa0, 0x8f, 0x72, 0xe4, 0x22,
0x7e, 0xc5, 0x0d, 0xa5, 0xb2, 0x9d, 0xbb, 0x18, 0xfb,
0xf1, 0x3c, 0xd2, 0x2e, 0x13, 0x97, 0x8e, 0xfb, 0x04,
0xb0, 0x2b, 0xa1, 0xa4, 0xb2, 0xb1, 0xae, 0x17, 0x1b,
0x61, 0x29, 0x29, 0xd6, 0x77, 0x2d, 0x95, 0x8a, 0xf3,
0x8d, 0x3d, 0xfb, 0x2c, 0x11, 0x68, 0x4a, 0x90, 0x7d,
0x90, 0xb7, 0x86, 0xb4, 0x6a, 0xe4, 0x94, 0xed, 0x1c,
0x9d, 0xa4, 0x86, 0xcc, 0x7b, 0x54, 0xbd, 0x9c, 0xf2,
0xd3, 0x4b, 0xe3, 0x4d, 0xd1, 0x30, 0x13, 0xbd, 0x72,
0xe0, 0x6f, 0xda, 0xd1, 0x7e, 0xf1, 0x43, 0xd5, 0xb8,
0x57, 0x80, 0x4d, 0xe4, 0xa5, 0x64, 0x09, 0xa3, 0x5a,
0x41, 0x28, 0xfd, 0x75, 0x24, 0x40, 0xfe, 0xc0, 0x2b,
0x93, 0x04, 0xce, 0xcc, 0xe1, 0xbc, 0x67, 0x60, 0xd6,
0xfb, 0x03, 0x97, 0xbd, 0x16, 0x09, 0xff, 0x30, 0x3c,
0x9a, 0x0e, 0xa3, 0xbc, 0x5c, 0xc1, 0x14, 0x82, 0xf0,
0x83, 0xb6, 0x47, 0x1f, 0x2e, 0x01, 0xd3, 0xd9, 0x9e,
0xe2, 0x3c, 0x35, 0xc3, 0x7a, 0x62, 0x13, 0x5d, 0x9c,
0xec, 0x9c, 0x69, 0xe0, 0x53, 0x52, 0x84, 0x48, 0xd8,
0x13, 0xaf, 0xda, 0x07, 0xfb, 0xd4, 0x06, 0xec, 0x74,
0xe0, 0xdf, 0x2d, 0x18, 0x22, 0xbb, 0xf6, 0x25, 0x39,
0x2a, 0x2d, 0x91, 0xcc, 0x39, 0xd8, 0x5c, 0x6d, 0xe8,
0xba, 0x43, 0xe5, 0xb7, 0xcf, 0x0e, 0xc2, 0xe4, 0xa0,
0xe1, 0x88, 0x37, 0xf0, 0x4b, 0x28, 0x4d, 0x6c, 0xe6,
0x27, 0x7b, 0xb9, 0x1d, 0xa9, 0xc0, 0xc3, 0x38, 0x5b,
0xf0, 0x57, 0x01, 0x81, 0xde, 0xee, 0xd3, 0xce, 0x23,
0x4e, 0x86, 0x8b, 0x2c, 0x40, 0x7a, 0x2a, 0x7d, 0x8d,
0x51, 0x6b, 0x83, 0xcd, 0x86, 0xb8, 0x44, 0xc2, 0x3a,
0xaf, 0x3b, 0xec, 0xe9, 0x4a, 0x1f, 0x84, 0x30, 0x07,
0xcc, 0xd8, 0xbc, 0x28, 0x59, 0xe0, 0xd6, 0x4b, 0xa1,
0x61, 0x4c, 0x27, 0x21, 0xbb, 0xb6, 0x6a, 0x3a, 0x40,
0xe3, 0xf5, 0x55, 0xa2, 0xb3, 0x7e, 0x07, 0xfb, 0x15,
0xb1, 0x16, 0xf6, 0x91, 0x56, 0xa4, 0x26, 0x0f, 0x1e,
0xb1, 0x9d, 0x81, 0x40, 0xbc, 0x2a, 0xd3, 0xf9, 0xfd,
0x66, 0x6a, 0xe3, 0x58, 0x14, 0xe2, 0xfd, 0x1c, 0xfe,
0x17, 0x89, 0x51, 0xf5, 0xe1, 0x0c, 0xb8, 0x54, 0x95,
0xe4, 0x65, 0x77, 0x3b, 0x42, 0x48, 0xbe, 0xf9, 0xe7,
0x78, 0x1e, 0x4a, 0x3f, 0xb6, 0xca, 0xf2, 0xf4, 0x41,
0x80, 0xde, 0x42, 0xf4, 0xbf, 0xf3, 0x77, 0x2f, 0x3e,
0x87, 0xd8, 0x12, 0x9d, 0xb7, 0x70, 0xc5, 0xe8, 0xa9,
0x53, 0xe5, 0xa3, 0x42, 0xc8, 0x85, 0xea, 0x1c, 0xd4,
0x5a, 0x97, 0x87, 0x92, 0x12, 0x8c, 0xe4, 0x20, 0xe6,
0x32, 0x45, 0xff, 0x0a, 0x1b, 0xb0, 0x73, 0x0a, 0x7a,
0x50, 0x67, 0x71, 0xe2, 0xa9, 0x38, 0x74, 0xe3, 0xf1,
0xee, 0x9b, 0xa9, 0xfc, 0x0a, 0xf9, 0x6a, 0x0d, 0x34,
0xd2, 0x22, 0xd2, 0x9a, 0xeb, 0xd7, 0x91, 0x41, 0x6f,
0x39, 0x90, 0x52, 0xad, 0xb2, 0x95, 0xc3, 0xc4, 0x3c ),
AUTH ( 0x32, 0xb2, 0x76, 0xfd, 0x0c, 0x1d, 0xa7, 0xa8, 0x23, 0xa5,
0xaf, 0x07, 0x4a, 0xec, 0xac, 0xb5 ) );
/* AES-GCM test case 116 */
CIPHER_TEST ( wycheproof_aes_gcm_12c1aa5e, &aes_gcm_algorithm,
KEY ( 0x0f, 0x11, 0x2e, 0x59, 0xcd, 0xcc, 0xd8, 0x51, 0xc3, 0xb8,
0xe7, 0x6c, 0x9f, 0x05, 0xa3, 0xb7, 0xc2, 0xe4, 0xfe, 0xca,
0x58, 0x46, 0xaf, 0xeb, 0x35, 0x1c, 0x1c, 0xbc, 0xac, 0xe8,
0x2f, 0x04 ),
IV ( 0x71, 0x47, 0x97, 0x33, 0x39, 0xd8, 0x67, 0x89, 0xa2, 0xc9,
0xa9, 0x58 ),
ADDITIONAL ( 0x37, 0x12, 0x8b, 0xe4, 0x5f, 0x0a, 0x7f, 0x32, 0x95,
0x46, 0xe1, 0x49, 0x2c, 0x3c, 0x9c, 0x2d, 0x25, 0x34,
0xd5, 0xb1, 0xf5, 0x14, 0x7e, 0x49, 0xab, 0x91, 0x22,
0x1e, 0x7c, 0x3e, 0xde, 0xa2, 0x1b, 0xbe, 0x47, 0xbf,
0xe3, 0x61, 0x94, 0x37, 0xce, 0x3c, 0x61, 0xe6, 0xe9,
0x46, 0xc5, 0x04, 0xf3, 0x48, 0x29, 0x69, 0x18, 0x21,
0x9e, 0x51, 0xbf, 0x2c, 0x55, 0x98, 0x58, 0x9c, 0xff ),
PLAINTEXT ( 0x10, 0x2e, 0x58, 0x04, 0xdd, 0xa1, 0xfb, 0x5d, 0x65,
0x60, 0x77, 0xed, 0xb1, 0x5c, 0xad, 0xb5, 0xd0, 0xbd,
0xee, 0x8c ),
CIPHERTEXT ( 0x61, 0x8a, 0xc6, 0x26, 0xae, 0x0e, 0x8d, 0x06, 0xc2,
0xfd, 0x2f, 0xb6, 0x6b, 0xe2, 0x53, 0xdc, 0x26, 0xed,
0x6e, 0x38 ),
AUTH ( 0xd8, 0xd9, 0x3f, 0xf9, 0x75, 0xcb, 0x98, 0x8f, 0x09, 0x17,
0x4d, 0xcd, 0x43, 0x9c, 0xb6, 0xa4 ) );
/* AES-GCM test case 117 */
CIPHER_TEST ( wycheproof_aes_gcm_b2c6c3cd, &aes_gcm_algorithm,
KEY ( 0x2c, 0xe6, 0xb4, 0xc1, 0x5f, 0x85, 0xfb, 0x2d, 0xa5, 0xcc,
0x6c, 0x26, 0x94, 0x91, 0xee, 0xf2, 0x81, 0x98, 0x03, 0x09,
0x18, 0x12, 0x49, 0xeb, 0xf2, 0x83, 0x2b, 0xd6, 0xd0, 0x73,
0x2d, 0x0b ),
IV ( 0xc0, 0x64, 0xfa, 0xe9, 0x17, 0x3b, 0x17, 0x3f, 0xd6, 0xf1,
0x1f, 0x34 ),
ADDITIONAL ( 0x49, 0x8d, 0x30, 0x75, 0xb0, 0x9f, 0xed, 0x99, 0x82,
0x80, 0x58, 0x3d, 0x61, 0xbb, 0x36, 0xb6, 0xce, 0x41,
0xf1, 0x30, 0x06, 0x3b, 0x80, 0x82, 0x4d, 0x15, 0x86,
0xe1, 0x43, 0xd3, 0x49, 0xb1, 0x26, 0xb1, 0x6a, 0xa1,
0x0f, 0xe5, 0x73, 0x43, 0xed, 0x22, 0x3d, 0x63, 0x64,
0xee, 0x60, 0x22, 0x57, 0xfe, 0x31, 0x3a, 0x7f, 0xc9,
0xbf, 0x90, 0x88, 0xf0, 0x27, 0x79, 0x5b, 0x8d, 0xc1,
0xd3 ),
PLAINTEXT ( 0xf8, 0xa2, 0x7a, 0x4b, 0xaf, 0x00, 0xdc, 0x05, 0x55,
0xd2, 0x22, 0xf2, 0xfa, 0x4f, 0xb4, 0x2d, 0xc6, 0x66,
0xea, 0x3c ),
CIPHERTEXT ( 0xae, 0xd5, 0x8d, 0x8a, 0x25, 0x2f, 0x74, 0x0d, 0xba,
0x4b, 0xf6, 0xd3, 0x67, 0x73, 0xbd, 0x5b, 0x41, 0x23,
0x4b, 0xba ),
AUTH ( 0x01, 0xf9, 0x3d, 0x74, 0x56, 0xaa, 0x18, 0x4e, 0xbb, 0x49,
0xbe, 0xa4, 0x72, 0xb6, 0xd6, 0x5d ) );
/* AES-GCM test case 118 */
CIPHER_TEST ( wycheproof_aes_gcm_293c46f8, &aes_gcm_algorithm,
KEY ( 0x52, 0x35, 0x0d, 0xa5, 0xa5, 0x72, 0x91, 0x1e, 0xe0, 0xe0,
0xfc, 0xed, 0xb1, 0x15, 0xaf, 0x6f, 0x45, 0x70, 0xfb, 0xf9,
0xc7, 0x4a, 0x11, 0xbc, 0x18, 0x44, 0x44, 0xd6, 0xa6, 0x21,
0xd6, 0x0f ),
IV ( 0xd6, 0x8a, 0xd0, 0x45, 0xc1, 0xb9, 0xc2, 0x92, 0x3c, 0xf5,
0x40, 0x4c ),
ADDITIONAL ( 0x03, 0xa9, 0x4b, 0x38, 0x41, 0x29, 0x2d, 0x9b, 0xbf,
0x72, 0xf4, 0x13, 0xc0, 0x91, 0x67, 0xc5, 0x4e, 0xe1,
0x05, 0x37, 0xc0, 0x49, 0xaf, 0xe2, 0xbb, 0xce, 0xc4,
0x3b, 0x18, 0xf3, 0x89, 0x0b, 0x2f, 0xcd, 0xd3, 0xbb,
0x31, 0xe6, 0xd7, 0x09, 0x27, 0x4e, 0x19, 0x9c, 0x0c,
0x46, 0x48, 0xeb, 0x3d, 0x8b, 0x38, 0xe0, 0xc1, 0xbf,
0x7f, 0x30, 0x94, 0x43, 0xbe, 0xf6, 0x93, 0x7c, 0xde,
0x41, 0x23 ),
PLAINTEXT ( 0x4e, 0x6e, 0x6d, 0xad, 0x2c, 0x16, 0xcf, 0xc6, 0xe7,
0xca, 0xc0, 0x36, 0x36, 0xa4, 0xa6, 0xd8, 0x8b, 0xd6,
0xa1, 0x3e ),
CIPHERTEXT ( 0xc7, 0x76, 0x44, 0x11, 0xbe, 0x13, 0xcf, 0xea, 0xae,
0xce, 0x76, 0x1b, 0xd3, 0xbb, 0x13, 0x55, 0x2f, 0x08,
0x80, 0x48 ),
AUTH ( 0xbc, 0xc2, 0x54, 0x4e, 0x79, 0xf3, 0x4e, 0xa1, 0x07, 0x6a,
0x12, 0xb7, 0x64, 0x41, 0xd6, 0xfa ) );
/* AES-GCM test case 119 */
CIPHER_TEST ( wycheproof_aes_gcm_1af86832, &aes_gcm_algorithm,
KEY ( 0xd0, 0x58, 0x30, 0x4c, 0x0b, 0xa0, 0x39, 0xb2, 0xe2, 0xd0,
0x86, 0x61, 0xfd, 0x8f, 0x6d, 0xb8, 0x87, 0x79, 0xbd, 0x5c,
0xe5, 0x80, 0xeb, 0x76, 0x6c, 0x1d, 0x6a, 0xb3, 0x4b, 0x94,
0xee, 0x94 ),
IV ( 0x3c, 0x55, 0x33, 0x97, 0xfa, 0xfd, 0xa0, 0xeb, 0x06, 0xa5,
0x9f, 0x23 ),
ADDITIONAL ( 0xcf, 0xb1, 0xfe, 0x1c, 0x47, 0xe2, 0x45, 0x01, 0x09,
0xea, 0xed, 0x4e, 0x1a, 0xac, 0x94, 0x31, 0xaa, 0x5d,
0xb1, 0xe3, 0xb7, 0xee, 0xac, 0xad, 0x3e, 0xbc, 0x9e,
0x8e, 0x1f, 0x3e, 0x0a, 0x82, 0x3f, 0x75, 0x7f, 0x61,
0x97, 0x61, 0xe6, 0x1a, 0xd0, 0x5a, 0xf8, 0xce, 0xf8,
0x31, 0x04, 0x89, 0x09, 0x40, 0xcd, 0x59, 0x21, 0x37,
0xeb, 0x7b, 0xa5, 0x87, 0x9b, 0x95, 0x75, 0x9c, 0x8b,
0xe1, 0x52, 0x5f, 0x9a, 0x01, 0xfc, 0x01, 0x58, 0x2d,
0x93, 0xa2, 0xa8, 0x41, 0x33, 0x6a, 0x10, 0x4d, 0x16,
0x99, 0x68, 0xc2, 0x74, 0xb5, 0xa8, 0xc3, 0x08, 0x83,
0xb4, 0xbd, 0x62, 0x17, 0x25, 0xf6, 0x90, 0x79, 0xbb,
0x94, 0xa1, 0x74, 0xa3, 0xc9, 0x4d, 0xb6, 0x2f, 0x2a,
0xe7, 0x46, 0xd0, 0x32, 0x00, 0xf0, 0x1c, 0x19, 0xaa,
0xa8, 0xa3, 0xb8, 0x9e, 0x78, 0xb9, 0x9a, 0x62, 0xf7,
0x6f ),
PLAINTEXT ( 0x0a, 0x06, 0x4c, 0xd5, 0xe4, 0x98, 0x45, 0xc4, 0xef,
0xb6, 0x0f, 0xb3, 0x43, 0xdc, 0x03, 0xfa, 0xff, 0xa3,
0x6c, 0x49 ),
CIPHERTEXT ( 0xa7, 0xd8, 0x4f, 0xf7, 0x1d, 0xc7, 0x13, 0x16, 0x13,
0x59, 0xb7, 0x57, 0xaf, 0x42, 0xc7, 0x4d, 0xdd, 0xbf,
0x53, 0xce ),
AUTH ( 0x73, 0x6e, 0x48, 0xa2, 0xb7, 0x79, 0x2a, 0xcc, 0x59, 0x9b,
0xaa, 0x65, 0x16, 0x29, 0xa2, 0x03 ) );
/* AES-GCM test case 120 */
CIPHER_TEST ( wycheproof_aes_gcm_d03f18fe, &aes_gcm_algorithm,
KEY ( 0x44, 0xc8, 0xd0, 0xcd, 0xb8, 0xf7, 0xe7, 0x36, 0xcf, 0xd9,
0x97, 0xc8, 0x72, 0xa5, 0xd9, 0xc5, 0xef, 0x30, 0xaf, 0xbe,
0x44, 0xb6, 0x56, 0x66, 0x06, 0xb9, 0x0a, 0xa5, 0xe3, 0xe8,
0xb7, 0x97 ),
IV ( 0x6f, 0x39, 0xaf, 0xba, 0x02, 0x1e, 0x4c, 0x36, 0xeb, 0x92,
0x96, 0x2e ),
ADDITIONAL ( 0x98, 0xd1, 0xca, 0x17, 0x88, 0xcb, 0xeb, 0x30, 0x0e,
0xa5, 0xc6, 0xb1, 0xee, 0xc9, 0x5e, 0xb2, 0x34, 0x71,
0x77, 0x20, 0x14, 0x00, 0x91, 0x3d, 0x45, 0x22, 0x56,
0x22, 0xb6, 0x27, 0x3e, 0xec, 0x8a, 0x74, 0xc3, 0xf1,
0x2c, 0x8d, 0x52, 0x48, 0xda, 0xbe, 0xe5, 0x86, 0x22,
0x97, 0x86, 0xff, 0x19, 0x2c, 0x4d, 0xf0, 0xc7, 0x95,
0x47, 0xf7, 0xad, 0x6a, 0x92, 0xd7, 0x8d, 0x9f, 0x89,
0x52, 0x75, 0x86, 0x35, 0x78, 0x3a, 0xdd, 0x2a, 0x59,
0x77, 0xd3, 0x86, 0xe0, 0xae, 0xf7, 0x64, 0x82, 0x21,
0x1d, 0x2c, 0x3a, 0xe9, 0x8d, 0xe4, 0xba, 0xad, 0xb3,
0xf8, 0xb3, 0x5b, 0x51, 0x04, 0x64, 0x75, 0x5d, 0xc7,
0x5c, 0xeb, 0x2b, 0xf2, 0x5b, 0x23, 0x33, 0x17, 0x52,
0x3f, 0x39, 0x9a, 0x6c, 0x50, 0x7d, 0xb2, 0x14, 0xf0,
0x85, 0xfa, 0x28, 0x18, 0xf0, 0xd3, 0x70, 0x2b, 0x10,
0x95, 0x2b ),
PLAINTEXT ( 0x2e, 0x6f, 0x40, 0xf9, 0xd3, 0x72, 0x58, 0x36, 0xac,
0x0c, 0x85, 0x81, 0x77, 0x93, 0x8f, 0xd6, 0x7b, 0xe1,
0x94, 0x32 ),
CIPHERTEXT ( 0xb4, 0x24, 0x28, 0xf8, 0x09, 0x4e, 0xf7, 0xe6, 0x5c,
0x9e, 0x8c, 0x45, 0xef, 0x3e, 0x95, 0xc2, 0x8c, 0xe0,
0x7d, 0x72 ),
AUTH ( 0x32, 0xb2, 0x5d, 0xfb, 0xb8, 0x96, 0xd0, 0xf9, 0xd7, 0x9c,
0x82, 0x3b, 0xdd, 0x8e, 0x5d, 0x06 ) );
/* AES-GCM test case 121 */
CIPHER_TEST ( wycheproof_aes_gcm_63a399bd, &aes_gcm_algorithm,
KEY ( 0xe2, 0x7e, 0x71, 0x8e, 0x4b, 0x66, 0xc9, 0x1e, 0x22, 0x1f,
0x2a, 0x3d, 0xf9, 0xda, 0x00, 0x13, 0xf7, 0xe1, 0x43, 0x40,
0x00, 0x6e, 0xca, 0x50, 0xdc, 0x30, 0xc4, 0xcc, 0x2d, 0xde,
0xb6, 0x79 ),
IV ( 0xb4, 0x6f, 0xed, 0x18, 0x5e, 0x8b, 0x33, 0x21, 0x5d, 0xd4,
0x74, 0xdd ),
ADDITIONAL ( 0x2d, 0x2b, 0x62, 0x47, 0xf9, 0xc3, 0x42, 0xf8, 0xd0,
0x43, 0x2c, 0xe0, 0x71, 0x57, 0x49, 0xd0, 0xba, 0xc0,
0xe2, 0xe3, 0xf2, 0x8b, 0x78, 0x5b, 0xe8, 0xdc, 0x84,
0xb3, 0xa0, 0xe5, 0x7a, 0x16, 0x1a, 0xfd, 0xe3, 0x42,
0x27, 0x27, 0x75, 0x12, 0x20, 0x4f, 0xfa, 0x4b, 0xce,
0xb6, 0xe0, 0xa4, 0xd0, 0x21, 0x03, 0x1b, 0x76, 0x55,
0x40, 0xf7, 0xf6, 0x13, 0x04, 0x5f, 0x74, 0xe7, 0xe6,
0xe4, 0x97, 0x7c, 0x04, 0xb7, 0x8b, 0x5d, 0x3f, 0x8d,
0x4e, 0x42, 0x0a, 0x97, 0x48, 0xc1, 0x2d, 0x1f, 0x9a,
0xa5, 0xe0, 0x3a, 0x27, 0x74, 0x9b, 0xe2, 0x78, 0x5d,
0xd5, 0x55, 0xa8, 0xcf, 0x01, 0x82, 0xc0, 0x82, 0x6f,
0x2d, 0x60, 0xee, 0xd3, 0xc4, 0x05, 0x9a, 0xdf, 0x88,
0x72, 0xf3, 0xc4, 0xd8, 0x1a, 0x96, 0x35, 0x92, 0x47,
0x29, 0x65, 0xcc, 0x0c, 0x66, 0x10, 0x21, 0x67, 0xe4,
0xcb, 0x1c, 0xa2 ),
PLAINTEXT ( 0xe3, 0x9a, 0xea, 0xf1, 0xd2, 0x14, 0xf7, 0x89, 0x15,
0x60, 0x1f, 0xee, 0x9a, 0x35, 0x27, 0xd7, 0x77, 0x67,
0x46, 0x51 ),
CIPHERTEXT ( 0x75, 0x02, 0x32, 0x11, 0x5a, 0x5e, 0xde, 0xa7, 0xb2,
0x49, 0xa2, 0x2c, 0x0c, 0xda, 0xe1, 0x7f, 0x72, 0x5d,
0x6f, 0x99 ),
AUTH ( 0x4a, 0x72, 0xd8, 0xc3, 0x0f, 0xc7, 0xe0, 0xf1, 0x80, 0x6d,
0x9a, 0x81, 0x7a, 0xda, 0xe1, 0x4a ) );
/* AES-GCM test case 122 */
CIPHER_TEST ( wycheproof_aes_gcm_03a1cf9e, &aes_gcm_algorithm,
KEY ( 0xfc, 0x1b, 0xfd, 0x0b, 0x58, 0x51, 0x5c, 0x4e, 0x79, 0x06,
0xe2, 0x05, 0x25, 0x96, 0xbb, 0x92, 0xde, 0x8c, 0x87, 0x98,
0x06, 0xaf, 0x47, 0xa4, 0xc7, 0x26, 0xff, 0x08, 0xc9, 0xba,
0x47, 0xcc ),
IV ( 0xf3, 0xda, 0x3b, 0xe5, 0x74, 0x33, 0x7b, 0x8f, 0x8c, 0x05,
0x28, 0x66 ),
ADDITIONAL ( 0xd2, 0x6f, 0x7f, 0xf8, 0x87, 0x72, 0x52, 0x28, 0xf3,
0x10, 0x99, 0x24, 0xed, 0x9e, 0xae, 0xaa, 0x8c, 0x10,
0x3c, 0xfc, 0xaa, 0xc1, 0xd6, 0xe3, 0x87, 0x4d, 0x11,
0xaf, 0xd8, 0x42, 0x4f, 0xd0, 0x30, 0xfe, 0xa8, 0x05,
0x47, 0x21, 0x2f, 0xe7, 0xc8, 0xac, 0x9f, 0x4e, 0xcb,
0xe3, 0x04, 0xb6, 0x2e, 0x5b, 0xb2, 0x06, 0xac, 0x3a,
0x83, 0x18, 0xa8, 0x19, 0xb9, 0x70, 0x1f, 0x49, 0x4a,
0xef, 0xd2, 0x2e, 0x84, 0xd2, 0x27, 0x92, 0x21, 0x02,
0xf5, 0x13, 0x0f, 0x06, 0x85, 0xe8, 0x8e, 0x25, 0x11,
0x5c, 0x3a, 0xb9, 0xe8, 0xbb, 0x29, 0x0c, 0x0d, 0xf0,
0x71, 0x5c, 0x4a, 0xdb, 0x00, 0xa2, 0xec, 0xc9, 0xba,
0xb5, 0xbb, 0xcc, 0x49, 0xce, 0xc6, 0x03, 0x05, 0xa5,
0xb0, 0x4f, 0x64, 0x6b, 0x1d, 0x0f, 0x95, 0x16, 0x73,
0xcf, 0x1e, 0xb4, 0x74, 0x2c, 0x1a, 0x52, 0xbe, 0xb2,
0xcd, 0x2f, 0x43, 0xa2, 0xe4, 0x13, 0xe4, 0xa9, 0xf5,
0x67, 0x91, 0x23, 0xb4, 0xd5, 0x9f, 0x2a, 0xe1, 0x4c,
0x27, 0xee, 0x84, 0xe9, 0x70, 0xca, 0xfc, 0xbb, 0x5a,
0x07, 0x36, 0xad, 0x26, 0x36, 0x83, 0x3c, 0xb6, 0x44,
0xc9, 0xf2, 0xfb, 0x61, 0xa4, 0xa0, 0x9f, 0xad, 0x51,
0x1f, 0x4c, 0x17, 0x81, 0xc5, 0x68, 0x5f, 0x94, 0x81,
0x4d, 0x24, 0x2c, 0x5e, 0x3e, 0xb4, 0xab, 0xe1, 0x65,
0x73, 0x2a, 0xb0, 0x25, 0x8a, 0x24, 0x61, 0xc5, 0x6d,
0x45, 0x2e, 0xf1, 0xcf, 0x48, 0xb4, 0xff, 0x0f, 0x33,
0x1b, 0x91, 0xc2, 0xc7, 0x1c, 0xe1, 0xc0, 0x38, 0x77,
0x55, 0x28, 0x37, 0xa1, 0x2d, 0xfe, 0x75, 0xf7, 0x8b,
0xf1, 0xcd, 0x61, 0x5b, 0x3b, 0x2b, 0x86, 0x4f, 0xd9,
0x50, 0x3a, 0x5f, 0x5b, 0xea, 0x65, 0x28, 0x70, 0xbc,
0xe4, 0xca, 0xd5, 0xc7, 0x26, 0xf1, 0xc5, 0x12, 0xda,
0xe7, 0xf5, 0xf8 ),
PLAINTEXT ( 0x9a, 0xdf, 0xce, 0xd8, 0xe2, 0x3f, 0x78, 0x97, 0xb6,
0x6e, 0xfc, 0xc3, 0x46, 0x8d, 0x63, 0xb8, 0x7d, 0xa7,
0x9a, 0x24 ),
CIPHERTEXT ( 0x18, 0x75, 0xd3, 0xd7, 0x69, 0x30, 0xb5, 0x83, 0x61,
0x10, 0x3d, 0x64, 0x22, 0x05, 0x91, 0xfe, 0xaa, 0xd5,
0xc9, 0xa2 ),
AUTH ( 0x22, 0x30, 0x99, 0xbb, 0x16, 0xc3, 0x0c, 0xba, 0x13, 0x4e,
0x63, 0x9e, 0xd9, 0x56, 0x15, 0xb7 ) );
/* AES-GCM test case 123 */
CIPHER_TEST ( wycheproof_aes_gcm_41df38af, &aes_gcm_algorithm,
KEY ( 0x7e, 0xc2, 0x0e, 0x38, 0xaa, 0x1b, 0x1f, 0x01, 0x8d, 0x79,
0x90, 0x3f, 0xc1, 0xcf, 0x6e, 0x26, 0x0c, 0xec, 0x37, 0x33,
0xa1, 0x9a, 0xd9, 0xe3, 0x0f, 0x60, 0xb5, 0x4e, 0x2e, 0xa6,
0xeb, 0xcc ),
IV ( 0x5c, 0xcd, 0x9c, 0xdc, 0xf9, 0x7a, 0xc6, 0x13, 0x64, 0x68,
0x7b, 0xbb ),
ADDITIONAL ( 0xd9, 0xd2, 0xee, 0x14, 0x5b, 0x5c, 0x31, 0xa1, 0x7d,
0xce, 0x93, 0x25, 0x38, 0xc7, 0xe4, 0x5d, 0xa1, 0xc8,
0x2a, 0xbb, 0x80, 0xb0, 0x55, 0x32, 0x51, 0xe4, 0x42,
0xdb, 0xc5, 0xaf, 0x9c, 0x12, 0x6d, 0x3a, 0x76, 0xa2,
0x47, 0x67, 0xc3, 0x9b, 0x22, 0x9b, 0xec, 0x89, 0x76,
0xa0, 0xdf, 0x89, 0xfa, 0x70, 0xea, 0x9a, 0xd8, 0x72,
0xaa, 0x36, 0xd6, 0xb8, 0xb0, 0x9a, 0xaa, 0x54, 0x69,
0x8e, 0x7f, 0x29, 0xc2, 0xc2, 0xd1, 0x2e, 0xfb, 0x0b,
0x30, 0x1c, 0xfb, 0x97, 0x07, 0x64, 0x73, 0xdf, 0xa7,
0xec, 0x03, 0x03, 0x50, 0xe2, 0x68, 0x39, 0xfb, 0xb7,
0xe1, 0x61, 0x2d, 0xad, 0x93, 0xff, 0x08, 0xe1, 0x11,
0x91, 0x68, 0xc5, 0xfc, 0xa5, 0x68, 0x16, 0xc6, 0x2b,
0x04, 0x2f, 0x06, 0xd8, 0x9e, 0x5a, 0x95, 0xda, 0x6a,
0x61, 0x5e, 0x13, 0xba, 0x4c, 0xad, 0x9f, 0x94, 0x25,
0x34, 0xc5, 0x39, 0x52, 0x0d, 0x00, 0x50, 0x9d, 0x0d,
0x4a, 0xc6, 0xd8, 0x0c, 0x59, 0xe7, 0x69, 0xd7, 0xe1,
0xaa, 0x7e, 0x12, 0x98, 0x7e, 0xe0, 0x5f, 0xb6, 0xa1,
0x9b, 0x38, 0x3c, 0x33, 0x48, 0xdf, 0x6c, 0xbd, 0xcf,
0xf6, 0x04, 0xef, 0x21, 0x83, 0x38, 0x91, 0x0a, 0x8e,
0x27, 0x5d, 0x9a, 0x62, 0xb8, 0x02, 0xcb, 0x07, 0xec,
0x92, 0x49, 0xc9, 0x63, 0x5e, 0x24, 0x37, 0xf8, 0x33,
0x9d, 0xff, 0x3e, 0x21, 0xf7, 0x9e, 0x9e, 0xb2, 0xac,
0xc2, 0xbb, 0xba, 0xdd, 0x52, 0x0a, 0x84, 0xc5, 0x8f,
0x0d, 0xda, 0xaf, 0x8c, 0x32, 0x49, 0x6d, 0x17, 0x3b,
0x6b, 0x8c, 0x0c, 0x27, 0x43, 0x52, 0xd4, 0x0d, 0x47,
0xbf, 0xbd, 0x93, 0x06, 0x9a, 0xbd, 0xcc, 0x3d, 0x21,
0xc2, 0xcd, 0x33, 0x0a, 0x8c, 0x16, 0x84, 0x7f, 0x0e,
0x52, 0x99, 0xbe, 0xb6, 0xa2, 0xd3, 0x3b, 0xe7, 0x46,
0xde, 0x5c, 0x71, 0xf2 ),
PLAINTEXT ( 0xba, 0xb2, 0x8e, 0x09, 0x87, 0x50, 0x9b, 0x1d, 0x6f,
0x9c, 0xf3, 0xaa, 0x90, 0x03, 0x07, 0x95, 0xf1, 0x25,
0xee, 0x44 ),
CIPHERTEXT ( 0xce, 0x4c, 0x58, 0xd3, 0xc7, 0x35, 0x4d, 0x2d, 0x27,
0xe3, 0xbb, 0x41, 0xa6, 0x2e, 0x59, 0x41, 0xfb, 0x1e,
0x39, 0xf3 ),
AUTH ( 0xe1, 0x77, 0x39, 0x1d, 0x5e, 0x2c, 0xef, 0xa2, 0xf7, 0xd3,
0x5e, 0x33, 0xa7, 0x65, 0x66, 0xaa ) );
/* AES-GCM test case 124 */
CIPHER_TEST ( wycheproof_aes_gcm_1a8fedd4, &aes_gcm_algorithm,
KEY ( 0xe4, 0x00, 0x03, 0xd6, 0xe0, 0x8a, 0xb8, 0x0b, 0x4b, 0xfc,
0x84, 0x00, 0xef, 0x11, 0x29, 0x45, 0xa9, 0x01, 0xec, 0x64,
0xa1, 0xb6, 0x53, 0x6c, 0xa9, 0x26, 0x65, 0x09, 0x0d, 0x60,
0x8b, 0xc4 ),
IV ( 0x9f, 0x09, 0x5d, 0xaf, 0xe6, 0xf6, 0xe0, 0xfb, 0xaf, 0xbb,
0xe0, 0x2e ),
ADDITIONAL ( 0x42, 0x2d, 0x5e, 0xfc, 0xff, 0xe3, 0x64, 0x90, 0x59,
0x84, 0x53, 0x3f, 0x0a, 0x57, 0x9d, 0x80, 0xb1, 0x8b,
0xda, 0x7b, 0x29, 0xe6, 0xe4, 0x64, 0x98, 0xef, 0xfb,
0xa5, 0x3c, 0x35, 0x01, 0x12, 0xc0, 0xbb, 0xb8, 0xdc,
0x4c, 0xe0, 0x3b, 0xb0, 0xc6, 0x9e, 0x1d, 0x0b, 0xaa,
0x19, 0xf0, 0x63, 0x71, 0x08, 0xaa, 0x4a, 0x16, 0xb0,
0x9a, 0x28, 0x1f, 0x23, 0x28, 0x39, 0xd8, 0x7b, 0x6d,
0x0e, 0x42, 0xbe, 0x1b, 0xaa, 0x7c, 0x67, 0xf1, 0xbe,
0x97, 0x0e, 0xa1, 0x69, 0xd3, 0x96, 0x0b, 0x9f, 0xe0,
0xa6, 0x1f, 0x11, 0xcd, 0x2e, 0xb7, 0x39, 0x8c, 0x19,
0xe6, 0x41, 0xfe, 0xb4, 0x3f, 0x77, 0x8e, 0x25, 0x7a,
0x39, 0x70, 0x63, 0xdb, 0x5b, 0x3a, 0x67, 0x07, 0xe9,
0xdb, 0x62, 0x38, 0x70, 0x54, 0xf9, 0xf9, 0xd4, 0x4f,
0x14, 0x35, 0x83, 0xe6, 0x3e, 0xda, 0xd4, 0x5a, 0x00,
0x25, 0x1e, 0x51, 0x73, 0xd7, 0x50, 0x5f, 0x22, 0xa8,
0xbc, 0xe2, 0x32, 0xe5, 0x6c, 0x2c, 0x27, 0x6a, 0x58,
0x03, 0x3a, 0xe3, 0x0d, 0x5d, 0xbf, 0x4e, 0x35, 0xa8,
0x62, 0xe4, 0x2a, 0xf5, 0x73, 0xbe, 0x38, 0xc6, 0x40,
0x6d, 0x9b, 0x4c, 0x7a, 0xcb, 0xf2, 0x75, 0xfe, 0x36,
0xc0, 0xec, 0xf2, 0xc4, 0x64, 0x28, 0x98, 0xa3, 0x0e,
0x61, 0x46, 0xfa, 0xc9, 0x92, 0xa1, 0x64, 0x05, 0xf9,
0x83, 0x12, 0x12, 0x6b, 0x7a, 0x37, 0x22, 0xf5, 0xdf,
0xb7, 0xdd, 0x4e, 0x49, 0x11, 0xc1, 0x42, 0x6b, 0x2e,
0x01, 0xd0, 0x4e, 0x9b, 0xe6, 0xdb, 0x37, 0x71, 0x10,
0x0f, 0x7d, 0x7d, 0x42, 0x82, 0xe4, 0xea, 0x58, 0x5f,
0x36, 0x46, 0x24, 0x1e, 0x80, 0x7c, 0xa6, 0x4f, 0x06,
0xa7, 0xfa, 0x9b, 0x70, 0x03, 0xd7, 0x10, 0xb8, 0x01,
0xd6, 0x6f, 0x51, 0x7d, 0x2d, 0x5e, 0xbd, 0x74, 0x08,
0x72, 0xde, 0xba, 0x13, 0xd0 ),
PLAINTEXT ( 0x38, 0xc3, 0xf4, 0x4b, 0xc5, 0x76, 0x5d, 0xe1, 0xf3,
0xd1, 0xc3, 0x68, 0x4c, 0xd0, 0x9c, 0xdd, 0xef, 0xaf,
0x29, 0x8d ),
CIPHERTEXT ( 0xd4, 0xa7, 0x9f, 0x72, 0x94, 0x87, 0x93, 0x59, 0x50,
0xec, 0x03, 0x2e, 0x69, 0x0a, 0xb8, 0xfe, 0x25, 0xc4,
0x15, 0x8e ),
AUTH ( 0x87, 0x6d, 0x2f, 0x33, 0x4f, 0x47, 0x96, 0x8b, 0x10, 0xc1,
0x03, 0x85, 0x9d, 0x43, 0x6d, 0xb8 ) );
/* AES-GCM test case 125 */
CIPHER_TEST ( wycheproof_aes_gcm_c5c5e61c, &aes_gcm_algorithm,
KEY ( 0x82, 0x0b, 0xb5, 0xeb, 0x37, 0x07, 0xe7, 0x13, 0xd5, 0xfc,
0xfe, 0x3c, 0x98, 0xbb, 0x1b, 0xa7, 0x33, 0x54, 0x0d, 0xdf,
0x44, 0xb1, 0x72, 0x74, 0x6b, 0xb9, 0x50, 0x95, 0x72, 0x54,
0xad, 0xb5 ),
IV ( 0xf2, 0xb9, 0x47, 0xea, 0xe4, 0x31, 0x12, 0x54, 0x41, 0x7c,
0x59, 0x28 ),
ADDITIONAL ( 0xf7, 0x6c, 0x06, 0xfe, 0x9d, 0xfa, 0x7f, 0xff, 0xdd,
0xae, 0x7d, 0x54, 0x59, 0x77, 0xf1, 0x94, 0x4b, 0xdb,
0x8e, 0x48, 0xbb, 0x87, 0x40, 0xff, 0x1a, 0x9a, 0x90,
0xc2, 0x60, 0xe1, 0x26, 0x4f, 0xdb, 0xfa, 0x32, 0x8e,
0xd8, 0xf1, 0x83, 0xe6, 0x72, 0x89, 0x2a, 0x6d, 0x34,
0x64, 0xc1, 0x76, 0xad, 0xab, 0x5d, 0xa8, 0xab, 0x3a,
0xf7, 0xc0, 0x8b, 0x71, 0xad, 0x13, 0x5d, 0x7b, 0x42,
0xc3, 0xeb, 0xd8, 0x93, 0x93, 0x8f, 0x82, 0xcb, 0x9d,
0x20, 0x0b, 0xb5, 0x0c, 0x26, 0xe8, 0x23, 0xaf, 0x95,
0x11, 0x49, 0x40, 0x7b, 0xcc, 0x05, 0xf1, 0x7f, 0xbe,
0x8e, 0xc2, 0x75, 0xdb, 0x96, 0xa9, 0xc7, 0xaa, 0x23,
0x0f, 0x13, 0x47, 0xbc, 0xf1, 0x02, 0x02, 0xd5, 0xcb,
0x7f, 0xb1, 0x60, 0x76, 0xf6, 0xa7, 0x8c, 0xd6, 0x20,
0xfd, 0xd6, 0x7a, 0x9b, 0xe5, 0x8f, 0x69, 0x92, 0xe6,
0x19, 0xa8, 0x31, 0x4c, 0xb4, 0x04, 0x46, 0xb6, 0x54,
0xd1, 0xc0, 0x1c, 0x9c, 0xc6, 0xa9, 0x2e, 0x44, 0xa7,
0x7b, 0x01, 0x5f, 0x2c, 0xef, 0xb9, 0xe5, 0x28, 0x40,
0x82, 0x95, 0x1b, 0xd9, 0x8e, 0xe7, 0xe8, 0x34, 0xad,
0xf3, 0x93, 0x06, 0xbd, 0xd4, 0x28, 0x82, 0x96, 0xc2,
0x76, 0xe6, 0x3b, 0x0d, 0xba, 0x7b, 0x72, 0x69, 0xc6,
0x3e, 0x0e, 0x77, 0xf3, 0xdf, 0x0d, 0xeb, 0xe8, 0xfe,
0x36, 0x45, 0x4e, 0xd7, 0xab, 0x33, 0x2d, 0xb7, 0x7d,
0x2d, 0x9d, 0x7e, 0x18, 0x32, 0xf3, 0x6e, 0x13, 0xac,
0x6c, 0x88, 0xe3, 0x83, 0xdc, 0x85, 0x33, 0xbc, 0x62,
0x4a, 0x27, 0xae, 0x37, 0x87, 0x58, 0x74, 0x2a, 0x63,
0xe3, 0x9d, 0x54, 0xfe, 0xc8, 0x27, 0xb1, 0x9c, 0x63,
0xc6, 0x92, 0xcd, 0xbc, 0x6a, 0x49, 0x8c, 0xe8, 0x0c,
0x5c, 0x11, 0x2d, 0x46, 0x1c, 0xbe, 0xd6, 0xc9, 0x3a,
0x45, 0x85, 0x73, 0xc7, 0x65, 0xc7, 0x59, 0x77, 0x6e,
0x7b, 0x8e, 0x34, 0x30, 0xca, 0x38, 0x99, 0x91, 0x99,
0x6f, 0x89, 0x5e, 0xe1, 0x6f, 0xe5, 0x38, 0xf2, 0xde,
0x3a, 0x90, 0x2f, 0x84, 0x23, 0x13, 0x8f, 0x05, 0xe8,
0x7e, 0x01, 0xc1, 0xad, 0xf2, 0x23, 0x2c, 0xe9, 0xef,
0xf1, 0x00, 0xb3, 0x94, 0x52, 0x56, 0x5c, 0x10, 0x12,
0x5b, 0x3a, 0x85, 0x21, 0x83, 0xf8, 0x02, 0x6b, 0x1c,
0xb8, 0x28, 0x1e, 0x9e, 0x2e, 0x6a, 0x0f, 0xbd, 0xde,
0x64, 0xd0, 0xf4, 0xc2, 0x98, 0x4a, 0x72, 0xf1, 0xae,
0x2b, 0xfb, 0xb4, 0x09, 0xc9, 0xde, 0x9a, 0xd2, 0x24,
0x48, 0x60, 0x99, 0x6e, 0x10, 0x53, 0xcc, 0x8c, 0xdd,
0x70, 0x51, 0x1b, 0xb2, 0x65, 0xf2, 0x05, 0x61, 0xa0,
0x33, 0x7d, 0xe4, 0x89, 0x1f, 0xbf, 0x29, 0x3f, 0x70,
0x5f, 0xe0, 0x40, 0xf1, 0x87, 0xba, 0x43, 0xbf, 0x13,
0xfb, 0x5e, 0x02, 0x03, 0x1f, 0x8e, 0xdc, 0xe5, 0xdb,
0x10, 0xef, 0x5d, 0x41, 0x1a, 0x44, 0x8c, 0xe0, 0x90,
0x3d, 0xde, 0x94, 0x3d, 0x2e, 0x19, 0x9f, 0x0e, 0x4a,
0xf2, 0xad, 0x3a, 0xb2, 0xa5, 0x34, 0xf0, 0xd6, 0x41,
0x8a, 0xcb, 0xc5, 0xea, 0x93, 0x40, 0x35, 0x6e, 0x11,
0x03, 0x6b, 0xf6, 0xde, 0xc3, 0x06, 0x41, 0x91, 0x77,
0x63, 0x0d, 0x36, 0xb4, 0x1a, 0x0e, 0x64, 0x63, 0x88,
0xf6, 0x01, 0x02, 0x27, 0xa3, 0x23, 0xf9, 0x57, 0x0f,
0x43, 0xf2, 0xf1, 0x4a, 0x8b, 0x9f, 0xa3, 0x46, 0xad,
0x04, 0x59, 0xc0, 0xc2, 0x8c, 0xe6, 0xca, 0x2e, 0xed,
0x98, 0x98, 0x3b, 0xd0, 0x8d, 0xb8, 0x2b, 0xfd, 0x09,
0x45, 0xbd, 0x4c, 0x94, 0xbd, 0x82, 0xa4, 0x04, 0x68,
0x76, 0xd7, 0xa3, 0x84, 0x4a, 0x4f, 0xb9, 0x36, 0x52,
0x84, 0xb1, 0x51, 0x1b, 0x6f, 0xb3, 0x6a, 0x27, 0x03,
0xab, 0xc9, 0xb0, 0x3a, 0x62, 0x44, 0xbf ),
PLAINTEXT ( 0x81, 0xc3, 0x7b, 0x34, 0xc4, 0x36, 0x9e, 0xcc, 0x1a,
0x9c, 0xdd, 0x6f, 0x15, 0x57, 0x13, 0x3e, 0x59, 0x24,
0x91, 0x65 ),
CIPHERTEXT ( 0x8d, 0x52, 0x9d, 0x8a, 0x4f, 0x0d, 0x7e, 0xc4, 0xe4,
0x1d, 0x8d, 0x36, 0x16, 0x63, 0xdf, 0x53, 0xc4, 0x79,
0xac, 0x34 ),
AUTH ( 0xd5, 0x09, 0xe3, 0xe1, 0xec, 0xcf, 0xe3, 0x8f, 0x7c, 0x63,
0xf9, 0xa5, 0x5f, 0x42, 0x94, 0x6a ) );
/* AES-GCM test case 126 */
CIPHER_TEST ( wycheproof_aes_gcm_ceefcefc, &aes_gcm_algorithm,
KEY ( 0x65, 0xe1, 0x8f, 0x70, 0xf1, 0x68, 0xab, 0xaf, 0x38, 0x81,
0x04, 0xc9, 0xb3, 0x7a, 0x96, 0x86, 0xae, 0xbc, 0x77, 0x43,
0xf0, 0xe6, 0x6b, 0x84, 0xb7, 0xc7, 0xcc, 0x0e, 0x36, 0x00,
0xf6, 0x55 ),
IV ( 0x8d, 0x56, 0x44, 0x20, 0xfc, 0xb9, 0xa9, 0x8e, 0x7e, 0x07,
0x47, 0x5c ),
ADDITIONAL ( 0x01, 0x6d, 0xde, 0x72, 0x45, 0x36, 0xee, 0xe2, 0x71,
0x87, 0x90, 0x72, 0x63, 0xe4, 0xa6, 0x2f, 0x3b, 0x63,
0x7e, 0xaa, 0x8a, 0xb6, 0xf8, 0x6d, 0x03, 0x43, 0xf6,
0x6f, 0x7f, 0x73, 0xc6, 0xf8, 0xc3, 0x41, 0x6c, 0xf2,
0x53, 0x53, 0x24, 0x54, 0xc0, 0x45, 0x55, 0x7e, 0xd7,
0xa3, 0x71, 0xc2, 0xd6, 0xb8, 0xe1, 0x9e, 0x01, 0x01,
0xe1, 0x10, 0x9c, 0xd7, 0x22, 0x7d, 0xc5, 0x39, 0x05,
0x45, 0xff, 0x24, 0x48, 0x40, 0x31, 0x95, 0x77, 0x49,
0x51, 0x43, 0x79, 0xa7, 0x7a, 0x33, 0xdf, 0x0f, 0xd1,
0x29, 0xf8, 0x0e, 0x98, 0x69, 0x74, 0x7b, 0x65, 0x89,
0xfd, 0x29, 0xa6, 0x93, 0x5a, 0xa3, 0x7b, 0x00, 0xe2,
0xab, 0xbb, 0xae, 0x2b, 0x67, 0x90, 0x47, 0x26, 0xe9,
0xfe, 0x22, 0x14, 0x30, 0x80, 0xaf, 0x18, 0x82, 0x1f,
0xf1, 0x0c, 0x52, 0x17, 0xe8, 0x45, 0xcd, 0x6e, 0x0e,
0xf2, 0x51, 0x3c, 0x1d, 0x82, 0xc1, 0x4f, 0x9d, 0x39,
0x33, 0xf3, 0xfd, 0x5c, 0x63, 0x64, 0x07, 0x5a, 0xeb,
0xef, 0x6c, 0x0f, 0x5c, 0x97, 0xfa, 0x34, 0x3a, 0xa1,
0x92, 0xba, 0x8c, 0x52, 0x6b, 0x7a, 0xd4, 0xc7, 0x1c,
0x4c, 0x19, 0xad, 0x2d, 0x5a, 0xe0, 0x5b, 0x07, 0x17,
0x6a, 0x5e, 0x66, 0xd4, 0x86, 0x88, 0x9a, 0x2e, 0x8f,
0x9e, 0xf8, 0x0b, 0x9c, 0x06, 0x80, 0xcf, 0x88, 0x7f,
0x60, 0x13, 0x7f, 0x62, 0x66, 0xec, 0x33, 0x5a, 0x5f,
0x1d, 0x74, 0xdc, 0x41, 0xde, 0xc1, 0x65, 0x3a, 0x96,
0xd6, 0x1b, 0x75, 0xf4, 0xb5, 0x69, 0xb9, 0x32, 0x8f,
0x6b, 0x2f, 0xb4, 0x03, 0x91, 0x70, 0x4f, 0x66, 0xe0,
0x58, 0xe9, 0x2d, 0xfc, 0x15, 0xd7, 0x75, 0x99, 0x01,
0x8d, 0x74, 0x90, 0x7a, 0x9b, 0xb8, 0x87, 0x0c, 0x5c,
0x44, 0x6e, 0x81, 0xfa, 0x7a, 0x76, 0x4a, 0x54, 0x9f,
0x6a, 0x41, 0x73, 0x26, 0xb5, 0x2f, 0xbb, 0xe4, 0xf5,
0x88, 0x5e, 0x64, 0x55, 0xbe, 0x28, 0x90, 0xc3, 0xa8,
0xb9, 0x7a, 0x9f, 0xd0, 0xc9, 0x2c, 0x08, 0x5e, 0xdf,
0xaf, 0x6a, 0x4f, 0x28, 0xdf, 0xec, 0x02, 0x43, 0xaa,
0x79, 0xa7, 0x1d, 0x12, 0x32, 0x82, 0xd4, 0xe9, 0xa0,
0xb3, 0x49, 0x7a, 0xd5, 0x69, 0xdb, 0x86, 0x9e, 0x56,
0x63, 0x8e, 0x27, 0x1f, 0x12, 0x05, 0xa5, 0x2f, 0xc3,
0x8c, 0xb7, 0x47, 0x67, 0xe4, 0xbb, 0x2f, 0x37, 0xbd,
0x43, 0x70, 0x83, 0xe9, 0x94, 0x39, 0x5e, 0x98, 0x45,
0x4c, 0x04, 0x09, 0x2d, 0x29, 0x2c, 0x68, 0x1a, 0xde,
0x9e, 0x39, 0x85, 0x89, 0xdf, 0x6c, 0xbf, 0x9b, 0x31,
0x96, 0xd1, 0x2c, 0x81, 0x53, 0x74, 0x06, 0x47, 0xaf,
0x01, 0x8c, 0xab, 0x5f, 0x9b, 0xf3, 0xe3, 0xdb, 0x7d,
0xee, 0xa2, 0x21, 0xc7, 0x3f, 0x37, 0x7b, 0x96, 0xd3,
0x68, 0xff, 0x8d, 0x9f, 0xfe, 0xcb, 0x8f, 0x44, 0xd5,
0x0b, 0x59, 0xfa, 0xfc, 0x90, 0xf6, 0x55, 0xec, 0x92,
0x71, 0xc9, 0xc1, 0xd0, 0x32, 0xcf, 0xb0, 0xf2, 0x37,
0x20, 0xd0, 0x19, 0x81, 0xc2, 0x62, 0x96, 0x53, 0x6e,
0x66, 0xcd, 0xb8, 0xc3, 0x90, 0xad, 0x1b, 0xca, 0x90,
0xe6, 0xb2, 0x71, 0x11, 0x70, 0x66, 0x5a, 0xd5, 0x2a,
0xaa, 0x18, 0x8f, 0x87, 0xca, 0x96, 0x88, 0x8d, 0x3d,
0x93, 0x2e, 0x6c, 0x3b, 0xf3, 0x28, 0x91, 0xcd, 0x74,
0x63, 0x08, 0xb0, 0xd6, 0x34, 0x5e, 0xd8, 0xcf, 0x7c,
0x1a, 0xd8, 0x84, 0x42, 0x32, 0x6a, 0x38, 0x92, 0xe6,
0x0a, 0xfd, 0x5c, 0x86, 0xa2, 0xd0, 0x62, 0xa4, 0x61,
0xd8, 0x89, 0x64, 0x46, 0x15, 0x4e, 0x91, 0x48, 0xaa,
0xd5, 0xb1, 0x22, 0x43, 0x7e, 0x26, 0xa5, 0x2b, 0xa1,
0xb6, 0x20, 0xd0, 0x85, 0xaf, 0x62, 0x8a, 0xf5, 0xad,
0xa9, 0xff, 0xf6, 0x64, 0xd4, 0xa9, 0xa2, 0x30 ),
PLAINTEXT ( 0x12, 0xd3, 0xcc, 0x44, 0x73, 0x97, 0x02, 0x96, 0xd2,
0x91, 0x88, 0x18, 0xfd, 0xcf, 0x1a, 0x57, 0x0d, 0x2d,
0x48, 0x21 ),
CIPHERTEXT ( 0x28, 0x44, 0xb6, 0x8b, 0x93, 0x56, 0x04, 0x99, 0x34,
0xb0, 0x31, 0xb0, 0xd6, 0xde, 0x55, 0xb5, 0x0f, 0xab,
0x0f, 0x46 ),
AUTH ( 0x38, 0x7b, 0xc3, 0xa4, 0x65, 0x30, 0xbd, 0xf2, 0x4b, 0x1c,
0xfa, 0x67, 0x89, 0x93, 0x69, 0xea ) );
/* AES-GCM test case 127 */
CIPHER_TEST ( wycheproof_aes_gcm_21500b95, &aes_gcm_algorithm,
KEY ( 0xb1, 0x5a, 0xb8, 0x16, 0xba, 0x50, 0x5e, 0xc4, 0x2b, 0x52,
0x80, 0x66, 0xd9, 0x11, 0x9b, 0x4b, 0x2e, 0xe3, 0x81, 0x59,
0xce, 0x54, 0xa2, 0x6b, 0xc5, 0xd6, 0x61, 0x12, 0x7e, 0x05,
0x22, 0x2c ),
IV ( 0x75, 0xe3, 0xc6, 0x08, 0xa3, 0x93, 0x67, 0xdc, 0x4a, 0xa7,
0x48, 0xd0 ),
ADDITIONAL ( 0x00, 0x59, 0x31, 0xa2, 0xd5, 0xc5, 0xbc, 0xed, 0xc7,
0x16, 0xc3, 0xf2, 0x46, 0xe2, 0x1b, 0x3a, 0x46, 0xd2,
0xa6, 0xb1, 0xce, 0x73, 0x64, 0x46, 0x53, 0xe0, 0xcf,
0x27, 0x7e, 0xfa, 0x49, 0x2f, 0x12, 0xfb, 0x2b, 0x83,
0xf7, 0x0b, 0xae, 0x87, 0x37, 0xd5, 0x3c, 0xd7, 0x62,
0x54, 0xda, 0xbc, 0xa8, 0x42, 0x2d, 0x4f, 0xf9, 0x39,
0x6c, 0x26, 0x5d, 0x57, 0xe4, 0xfd, 0x3d, 0x0c, 0xd1,
0xc3, 0x81, 0x98, 0xe2, 0x29, 0x63, 0x7c, 0x7f, 0xbf,
0xff, 0x46, 0x8f, 0xcd, 0xb0, 0x4c, 0xa1, 0x21, 0x01,
0x86, 0x5c, 0x08, 0xbb, 0xf5, 0x56, 0x89, 0xe1, 0x29,
0x9c, 0x5e, 0x7a, 0x43, 0x02, 0x96, 0xc4, 0x7a, 0x87,
0x4d, 0x99, 0x56, 0x55, 0x7b, 0x2c, 0xb3, 0x2f, 0xd3,
0xf8, 0x07, 0x3f, 0x85, 0xfe, 0xfb, 0x6d, 0x20, 0x05,
0xc5, 0xd3, 0x32, 0x9e, 0x40, 0xdc, 0xb9, 0x57, 0xf5,
0xb0, 0x1d, 0x7f, 0x15, 0x82, 0xea, 0x35, 0x9b, 0x94,
0x7d, 0x56, 0x69, 0xda, 0x80, 0x03, 0xc0, 0x09, 0xf8,
0xec, 0xbf, 0xbf, 0x09, 0x4f, 0xb8, 0x15, 0x5c, 0xf8,
0x92, 0x51, 0xee, 0x4a, 0x91, 0xa4, 0x3a, 0x96, 0xe3,
0xf6, 0xd3, 0x02, 0xe1, 0x57, 0x53, 0xdd, 0x48, 0xdd,
0x5e, 0x3b, 0x87, 0xe0, 0x93, 0x02, 0x10, 0x59, 0xec,
0x32, 0x3d, 0x38, 0xd3, 0xee, 0x72, 0x29, 0x05, 0x21,
0xee, 0xfd, 0x54, 0xcf, 0x70, 0x8a, 0xa9, 0xe8, 0x18,
0x69, 0xb7, 0x56, 0xc3, 0xfc, 0x3c, 0x9a, 0x60, 0xe1,
0x22, 0x26, 0xac, 0x64, 0x3b, 0xf7, 0xa9, 0x19, 0x51,
0xe5, 0x50, 0x91, 0x59, 0xb1, 0xe2, 0x98, 0xbb, 0xfe,
0x88, 0xfd, 0x8e, 0xe6, 0x59, 0xca, 0xc9, 0x8c, 0x90,
0x4f, 0x68, 0xc9, 0x28, 0x40, 0x38, 0x94, 0xfc, 0x89,
0xdf, 0x10, 0x0d, 0x6f, 0x30, 0xfd, 0x1c, 0xe2, 0x06,
0x66, 0x81, 0x59, 0x29, 0xb6, 0xee, 0xe3, 0x9e, 0xce,
0x51, 0x0e, 0xb5, 0x35, 0x67, 0xe3, 0x5c, 0xbe, 0x49,
0xdc, 0xec, 0x0f, 0x1b, 0x80, 0xfe, 0xe8, 0x61, 0xed,
0x0a, 0xf1, 0xcc, 0x75, 0x9d, 0x47, 0x7f, 0x30, 0x6a,
0x5e, 0x12, 0x73, 0xe6, 0x4c, 0x7e, 0x33, 0x55, 0x4d,
0x11, 0xd7, 0x96, 0x32, 0x00, 0x6b, 0x42, 0x0e, 0x7c,
0x71, 0xd3, 0x6f, 0xec, 0xe1, 0x8d, 0x75, 0xa8, 0xb5,
0x77, 0x31, 0x71, 0xed, 0x07, 0x1c, 0x26, 0x66, 0x4f,
0xc0, 0x11, 0x32, 0x77, 0xe3, 0x35, 0x6a, 0xb3, 0x0d,
0xb0, 0x5a, 0xc6, 0x2e, 0xa5, 0xb9, 0x75, 0xe3, 0x64,
0x13, 0x57, 0x2d, 0xd3, 0x9e, 0x5c, 0x22, 0xd5, 0xc4,
0x2b, 0xc8, 0x2a, 0xb0, 0xab, 0x85, 0xb5, 0x4f, 0xbf,
0xaa, 0x52, 0x7d, 0x13, 0x44, 0xdc, 0x3d, 0xfb, 0x18,
0xb9, 0x41, 0xb0, 0x5b, 0xcc, 0x5b, 0x47, 0xd2, 0x5e,
0x18, 0xef, 0x93, 0x6f, 0x39, 0x18, 0xed, 0x87, 0xcb,
0xf5, 0xdf, 0xa6, 0x79, 0x89, 0xa0, 0x38, 0xe2, 0xf7,
0x47, 0x34, 0x5c, 0x4b, 0x8d, 0x27, 0xb1, 0x01, 0xc9,
0x44, 0xf0, 0xf1, 0xd6, 0xfe, 0x21, 0xcd, 0x1a, 0x65,
0x3c, 0x17, 0x53, 0x0f, 0x9a, 0x89, 0x3d, 0x7f, 0xd4,
0x8a, 0xfa, 0xfc, 0xf1, 0x2b, 0xf0, 0x05, 0xfe, 0x04,
0x4a, 0x00, 0x0e, 0x8d, 0xea, 0xf0, 0x9b, 0xed, 0x39,
0xba, 0x62, 0x78, 0x4b, 0xd5, 0xb8, 0x8a, 0xce, 0x56,
0x48, 0x06, 0xa9, 0xb5, 0xe0, 0xbf, 0x40, 0xf9, 0xf6,
0x55, 0xfd, 0xd5, 0xbd, 0xc4, 0xbf, 0x56, 0x8c, 0x5a,
0xbb, 0x4b, 0x84, 0xec, 0x61, 0xa8, 0x5f, 0x00, 0x38,
0xb4, 0xf4, 0xcc, 0x3e, 0x75, 0xc3, 0xb3, 0xf9, 0x9e,
0x62, 0xb9, 0x92, 0x92, 0xd5, 0x10, 0xf6, 0x90, 0xc0,
0x7c, 0x18, 0xaf, 0x41, 0xb7, 0x65, 0xfe, 0x5a, 0x1e,
0xe9, 0x48, 0x4c, 0xf0, 0x4c, 0x69, 0xf3, 0xf4, 0x9c ),
PLAINTEXT ( 0x8b, 0x2a, 0x6a, 0x96, 0x04, 0xb2, 0x5d, 0x16, 0x70,
0xb7, 0xd8, 0x69, 0xc6, 0x49, 0xa0, 0x53, 0x99, 0xb8,
0xad, 0xa5 ),
CIPHERTEXT ( 0x37, 0x1f, 0xa7, 0x0a, 0xf8, 0xa1, 0x98, 0xcb, 0x43,
0xdd, 0xd5, 0x45, 0xe7, 0x4b, 0x80, 0x62, 0x46, 0xf7,
0xe9, 0x32 ),
AUTH ( 0x01, 0x4a, 0x01, 0x79, 0xb8, 0x16, 0x91, 0xd0, 0x90, 0x11,
0xdc, 0xea, 0x57, 0x39, 0x55, 0x1d ) );
/* AES-GCM test case 128 */
CIPHER_TEST ( wycheproof_aes_gcm_e2c3a1a4, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00 ),
ADDITIONAL(),
PLAINTEXT ( 0x56, 0x10, 0x08, 0xfa, 0x07, 0xa6, 0x8f, 0x5c, 0x61,
0x28, 0x5c, 0xd0, 0x13, 0x46, 0x4e, 0xaf ),
CIPHERTEXT ( 0x23, 0x29, 0x3e, 0x9b, 0x07, 0xca, 0x7d, 0x1b, 0x0c,
0xae, 0x7c, 0xc4, 0x89, 0xa9, 0x73, 0xb3 ),
AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
/* AES-GCM test case 129 */
CIPHER_TEST ( wycheproof_aes_gcm_77767307, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff ),
ADDITIONAL(),
PLAINTEXT ( 0xc6, 0x15, 0x22, 0x44, 0xce, 0xa1, 0x97, 0x8d, 0x3e,
0x0b, 0xc2, 0x74, 0xcf, 0x8c, 0x0b, 0x3b ),
CIPHERTEXT ( 0x7c, 0xb6, 0xfc, 0x7c, 0x6a, 0xbc, 0x00, 0x9e, 0xfe,
0x95, 0x51, 0xa9, 0x9f, 0x36, 0xa4, 0x21 ),
AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
/* AES-GCM test case 130 (skipped: modified tag) */
/* AES-GCM test case 131 (skipped: modified tag) */
/* AES-GCM test case 132 (skipped: modified tag) */
/* AES-GCM test case 133 (skipped: modified tag) */
/* AES-GCM test case 134 (skipped: modified tag) */
/* AES-GCM test case 135 (skipped: modified tag) */
/* AES-GCM test case 136 (skipped: modified tag) */
/* AES-GCM test case 137 (skipped: modified tag) */
/* AES-GCM test case 138 (skipped: modified tag) */
/* AES-GCM test case 139 (skipped: modified tag) */
/* AES-GCM test case 140 (skipped: modified tag) */
/* AES-GCM test case 141 (skipped: modified tag) */
/* AES-GCM test case 142 (skipped: modified tag) */
/* AES-GCM test case 143 (skipped: modified tag) */
/* AES-GCM test case 144 (skipped: modified tag) */
/* AES-GCM test case 145 (skipped: modified tag) */
/* AES-GCM test case 146 (skipped: modified tag) */
/* AES-GCM test case 147 (skipped: modified tag) */
/* AES-GCM test case 148 (skipped: modified tag) */
/* AES-GCM test case 149 (skipped: modified tag) */
/* AES-GCM test case 150 (skipped: modified tag) */
/* AES-GCM test case 151 (skipped: modified tag) */
/* AES-GCM test case 152 (skipped: modified tag) */
/* AES-GCM test case 153 (skipped: modified tag) */
/* AES-GCM test case 154 (skipped: modified tag) */
/* AES-GCM test case 155 (skipped: modified tag) */
/* AES-GCM test case 156 (skipped: modified tag) */
/* AES-GCM test case 157 */
CIPHER_TEST ( wycheproof_aes_gcm_f5cabfe8, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x02, 0x9e, 0x0e, 0x77, 0x7d, 0xb0, 0x92, 0xb1, 0x25, 0x35,
0xd0, 0x43, 0x01, 0x2f, 0x09, 0xba ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xf8, 0x3c, 0xee, 0x46, 0x73, 0x36, 0xe1, 0xa0, 0x9b,
0x75, 0xf2, 0x4e, 0x9b, 0x43, 0x85, 0xc9, 0x9c, 0x13,
0xe6, 0xaf, 0x72, 0x22, 0x56, 0xa6, 0x61, 0x29, 0xec,
0xe9, 0x61, 0xfe, 0x80, 0x3b, 0x16, 0x7b, 0xad, 0x20,
0x6f, 0x50, 0x17, 0xfb ),
AUTH ( 0x09, 0x33, 0x8a, 0x42, 0xf0, 0xac, 0xc1, 0x4f, 0x97, 0xc0,
0x64, 0xf5, 0x2f, 0x5f, 0x16, 0x88 ) );
/* AES-GCM test case 158 */
CIPHER_TEST ( wycheproof_aes_gcm_14ea057a, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xf1, 0xbe, 0x3b, 0x06, 0xb7, 0xfe, 0xac, 0x07, 0xe7, 0xea,
0xb6, 0x29, 0xf5, 0x56, 0x04, 0x7b ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x0b, 0x32, 0xb6, 0x48, 0xa2, 0xc2, 0x8e, 0x9e, 0xdd,
0x7c, 0xee, 0x08, 0xee, 0xeb, 0x90, 0x00, 0x34, 0xca,
0xe7, 0x21, 0x5e, 0x5a, 0xb1, 0xe2, 0x01, 0xbd, 0x2e,
0xed, 0x10, 0x32, 0xc5, 0xa9, 0x78, 0x66, 0xba, 0x58,
0x2a, 0x34, 0x58, 0xa4 ),
AUTH ( 0x90, 0xbe, 0x36, 0x06, 0xde, 0x58, 0xbd, 0x77, 0x8f, 0xa5,
0xbe, 0xff, 0x4a, 0x41, 0x02, 0xbd ) );
/* AES-GCM test case 159 */
CIPHER_TEST ( wycheproof_aes_gcm_b2454cd9, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xde, 0x9e, 0xb6, 0x3b, 0x1d, 0xae, 0xd3, 0x21, 0xa1, 0x1b,
0x75, 0x47, 0xcc, 0x9e, 0x22, 0x3c ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x57, 0x5e, 0x2e, 0xce, 0xc2, 0xb3, 0xc7, 0x2d, 0x4e,
0x80, 0x83, 0x0d, 0x0d, 0x85, 0x9a, 0xd9, 0xe4, 0x2c,
0x29, 0xc4, 0xa6, 0x8d, 0x8d, 0x9d, 0x8d, 0x23, 0x43,
0x4d, 0xe2, 0xcd, 0x07, 0x73, 0x3b, 0xe4, 0x9d, 0x62,
0xac, 0x1a, 0xe0, 0x85 ),
AUTH ( 0x6e, 0x4d, 0x63, 0x96, 0x12, 0x5a, 0x10, 0xdf, 0x54, 0x43,
0xbd, 0x0c, 0xbc, 0x85, 0x66, 0xd1 ) );
/* AES-GCM test case 160 */
CIPHER_TEST ( wycheproof_aes_gcm_a605fd40, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x40, 0xbb, 0x0a, 0xbe, 0xbc, 0x48, 0x3f, 0xf6, 0xd5, 0x67,
0x12, 0x41, 0xff, 0x5d, 0x66, 0xc6 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x2a, 0x81, 0x88, 0x88, 0xd1, 0xf0, 0x9f, 0x32, 0xaa,
0x7b, 0xee, 0xdd, 0x28, 0x69, 0xb4, 0x46, 0x57, 0x5e,
0x2e, 0xce, 0xc2, 0xb3, 0xc7, 0x2d, 0x4e, 0x80, 0x83,
0x0d, 0x0d, 0x85, 0x9a, 0xd9, 0xe4, 0x2c, 0x29, 0xc4,
0xa6, 0x8d, 0x8d, 0x9d ),
AUTH ( 0xdc, 0x48, 0x1f, 0x17, 0x25, 0x45, 0x26, 0x8e, 0xff, 0x63,
0xab, 0x04, 0x90, 0x40, 0x3d, 0xc3 ) );
/* AES-GCM test case 161 */
CIPHER_TEST ( wycheproof_aes_gcm_5fc2c3a4, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x20, 0xd5, 0xcf, 0x30, 0x5e, 0x63, 0x0a, 0x8f, 0x49, 0xe3,
0xbb, 0x4b, 0xab, 0x18, 0xab, 0xc9 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x96, 0xd3, 0x6b, 0x79, 0x5f, 0x8e, 0x7e, 0xdf, 0x6a,
0x8e, 0x0d, 0xbc, 0xd2, 0x0d, 0x6c, 0x07, 0x2a, 0x81,
0x88, 0x88, 0xd1, 0xf0, 0x9f, 0x32, 0xaa, 0x7b, 0xee,
0xdd, 0x28, 0x69, 0xb4, 0x46, 0x57, 0x5e, 0x2e, 0xce,
0xc2, 0xb3, 0xc7, 0x2d ),
AUTH ( 0x8a, 0x3a, 0x22, 0xbf, 0x25, 0x92, 0x95, 0x8b, 0x93, 0x02,
0x92, 0xaa, 0x47, 0xf5, 0x90, 0xe8 ) );
/* AES-GCM test case 162 */
CIPHER_TEST ( wycheproof_aes_gcm_c73596ff, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x25, 0x53, 0x58, 0xa7, 0x1a, 0x0e, 0x57, 0x31, 0xf6, 0xdd,
0x6c, 0xe2, 0x8e, 0x15, 0x8a, 0xe6 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xcf, 0xce, 0x3d, 0x92, 0x0f, 0x0e, 0x01, 0xf0, 0xbb,
0x49, 0xa7, 0x51, 0x95, 0x5b, 0x23, 0x6d, 0x1b, 0x88,
0x7b, 0xae, 0xfd, 0x25, 0xc4, 0x7f, 0x41, 0x30, 0x3c,
0x46, 0xd5, 0xc7, 0xbf, 0x9c, 0xa4, 0xc2, 0xc4, 0x5a,
0x8f, 0x1e, 0x66, 0x56 ),
AUTH ( 0x2d, 0xb9, 0xdc, 0x1b, 0x7f, 0xd3, 0x15, 0xdf, 0x1c, 0x95,
0x43, 0x24, 0x32, 0xfc, 0xf4, 0x74 ) );
/* AES-GCM test case 163 */
CIPHER_TEST ( wycheproof_aes_gcm_8b84b201, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xbb, 0x76, 0xe4, 0x22, 0xbb, 0xe8, 0xbb, 0xe6, 0x82, 0xa1,
0x0b, 0xe4, 0xbd, 0xd6, 0xce, 0x1c ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x69, 0xa2, 0x41, 0x69, 0x79, 0x2e, 0x9a, 0x07, 0xf6,
0xe6, 0xf4, 0x73, 0x6f, 0xa9, 0x72, 0xdc, 0xcf, 0xce,
0x3d, 0x92, 0x0f, 0x0e, 0x01, 0xf0, 0xbb, 0x49, 0xa7,
0x51, 0x95, 0x5b, 0x23, 0x6d, 0x1b, 0x88, 0x7b, 0xae,
0xfd, 0x25, 0xc4, 0x7f ),
AUTH ( 0x82, 0xad, 0x96, 0x7f, 0x7a, 0xc1, 0x90, 0x84, 0x35, 0x4f,
0x69, 0xa7, 0x51, 0x44, 0x3f, 0xb2 ) );
/* AES-GCM test case 164 */
CIPHER_TEST ( wycheproof_aes_gcm_077de8ed, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xdb, 0x18, 0x21, 0xac, 0x59, 0xc3, 0x8e, 0x9f, 0x1e, 0x25,
0xa2, 0xee, 0xe9, 0x93, 0x03, 0x13 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x4e, 0x44, 0x17, 0xa8, 0x3b, 0xea, 0xc1, 0xeb, 0x7e,
0x24, 0x45, 0x6a, 0x05, 0xf6, 0xba, 0x55, 0x69, 0xa2,
0x41, 0x69, 0x79, 0x2e, 0x9a, 0x07, 0xf6, 0xe6, 0xf4,
0x73, 0x6f, 0xa9, 0x72, 0xdc, 0xcf, 0xce, 0x3d, 0x92,
0x0f, 0x0e, 0x01, 0xf0 ),
AUTH ( 0x47, 0x2d, 0x5d, 0xd5, 0x82, 0xdc, 0x05, 0xef, 0x5f, 0xc4,
0x96, 0xb6, 0x12, 0x02, 0x3c, 0xb2 ) );
/* AES-GCM test case 165 */
CIPHER_TEST ( wycheproof_aes_gcm_8895d57d, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xf7, 0xa0, 0x2e, 0xcc, 0xa0, 0x30, 0x64, 0xb2, 0xef, 0x3c,
0xce, 0x9f, 0xea, 0xb7, 0x9f, 0x07 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x6f, 0x8e, 0x17, 0x4e, 0xfc, 0xa3, 0x09, 0x72, 0x99,
0xf7, 0x84, 0xef, 0xd4, 0xca, 0xff, 0x0b, 0xf1, 0x68,
0xc3, 0xe5, 0x16, 0x5b, 0x9a, 0xd3, 0xd2, 0x00, 0x62,
0x00, 0x98, 0x48, 0x04, 0x4e, 0xef, 0x8f, 0x31, 0xf7,
0xd2, 0xfe, 0xad, 0x05 ),
AUTH ( 0xca, 0xff, 0x72, 0x38, 0x26, 0xdf, 0x15, 0x09, 0x34, 0xae,
0xe3, 0x20, 0x1b, 0xa1, 0x75, 0xe7 ) );
/* AES-GCM test case 166 */
CIPHER_TEST ( wycheproof_aes_gcm_bca38eea, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x69, 0x85, 0x92, 0x49, 0x01, 0xd6, 0x88, 0x65, 0x9b, 0x40,
0xa9, 0x99, 0xd9, 0x74, 0xdb, 0xfd ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xaf, 0x19, 0x30, 0x90, 0xce, 0x3d, 0x43, 0xa3, 0x88,
0xa1, 0xd2, 0x94, 0xa0, 0x96, 0x16, 0x90, 0x6f, 0x8e,
0x17, 0x4e, 0xfc, 0xa3, 0x09, 0x72, 0x99, 0xf7, 0x84,
0xef, 0xd4, 0xca, 0xff, 0x0b, 0xf1, 0x68, 0xc3, 0xe5,
0x16, 0x5b, 0x9a, 0xd3 ),
AUTH ( 0x3b, 0x08, 0x95, 0x8b, 0xe1, 0x28, 0x6c, 0x2b, 0x4a, 0xcb,
0xa0, 0x2b, 0x36, 0x74, 0xad, 0xb2 ) );
/* AES-GCM test case 167 */
CIPHER_TEST ( wycheproof_aes_gcm_e281bdf1, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x3f, 0x11, 0x88, 0x54, 0x6c, 0x65, 0xed, 0x0f, 0xc5, 0x5e,
0x75, 0x03, 0x2c, 0x68, 0xee, 0x44 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x5d, 0xec, 0xcf, 0x83, 0x8b, 0x2c, 0xf5, 0xf8, 0x69,
0xc9, 0x0d, 0x2a, 0x61, 0x11, 0x60, 0xb1, 0xe5, 0x78,
0xab, 0x81, 0x21, 0xb9, 0x37, 0x35, 0xcb, 0xa4, 0xa1,
0x93, 0x06, 0x47, 0xb8, 0xc4, 0xc8, 0x4b, 0xf7, 0x76,
0x33, 0x3e, 0xe4, 0x5a ),
AUTH ( 0xc1, 0x4d, 0x52, 0x20, 0x8f, 0x0f, 0x51, 0xb8, 0x16, 0xa4,
0x89, 0x71, 0xea, 0xf8, 0xff, 0x7e ) );
/* AES-GCM test case 168 */
CIPHER_TEST ( wycheproof_aes_gcm_09e34ed6, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xa1, 0x34, 0x34, 0xd1, 0xcd, 0x83, 0x01, 0xd8, 0xb1, 0x22,
0x12, 0x05, 0x1f, 0xab, 0xaa, 0xbe ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xd2, 0xca, 0xe1, 0x68, 0x4a, 0xa4, 0x07, 0xa1, 0x3a,
0x2e, 0x2d, 0xa5, 0x35, 0x7e, 0x29, 0xf5, 0x5d, 0xec,
0xcf, 0x83, 0x8b, 0x2c, 0xf5, 0xf8, 0x69, 0xc9, 0x0d,
0x2a, 0x61, 0x11, 0x60, 0xb1, 0xe5, 0x78, 0xab, 0x81,
0x21, 0xb9, 0x37, 0x35 ),
AUTH ( 0xea, 0x2d, 0x01, 0x80, 0x99, 0xcd, 0x79, 0x25, 0xc5, 0x07,
0xce, 0xf0, 0xce, 0xdd, 0xb0, 0xae ) );
/* AES-GCM test case 169 */
CIPHER_TEST ( wycheproof_aes_gcm_a20bd785, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),
ADDITIONAL(),
PLAINTEXT ( 0x5c, 0x7d, 0x3f, 0x81, 0xd4, 0xb5, 0x05, 0x5e, 0xd6,
0xf8, 0xdb, 0x53, 0x61, 0x45, 0x87, 0xa4 ),
CIPHERTEXT ( 0x54, 0x1b, 0x83, 0x5d, 0xc8, 0x28, 0xd5, 0x41, 0x07,
0x3f, 0x7d, 0x7d, 0x75, 0x04, 0xeb, 0xf5 ),
AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
/* AES-GCM test case 170 */
CIPHER_TEST ( wycheproof_aes_gcm_4d3c95a4, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ),
ADDITIONAL(),
PLAINTEXT ( 0x6a, 0x34, 0x7a, 0xd1, 0x19, 0x0e, 0x72, 0xed, 0xe6,
0x11, 0x04, 0x4e, 0x74, 0x75, 0xf0, 0xeb ),
CIPHERTEXT ( 0xa3, 0xf3, 0x61, 0x54, 0x33, 0x1c, 0x19, 0x66, 0x24,
0x56, 0x4b, 0xc3, 0x95, 0xe4, 0x9c, 0x3b ),
AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
/* AES-GCM test case 171 */
CIPHER_TEST ( wycheproof_aes_gcm_fdf02744, &aes_gcm_algorithm,
KEY ( 0xfa, 0xe2, 0xa1, 0x41, 0x97, 0xc7, 0xd1, 0x14, 0x00, 0x61,
0xfe, 0x7c, 0x3d, 0x11, 0xd9, 0xf7, 0x7c, 0x79, 0x56, 0x2e,
0x35, 0x93, 0xa9, 0x9b ),
IV ( 0xbc, 0x28, 0x43, 0x39, 0x53, 0x77, 0x2d, 0x57, 0xbb, 0xd9,
0x33, 0x10, 0x0c, 0xd4, 0x7a, 0x56 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x1b, 0xb9, 0x43, 0x31, 0xf2, 0x6c, 0xad, 0x24, 0x03, 0x6c,
0xfe, 0xff, 0x34, 0xb8, 0x9a, 0xaf ) );
/* AES-GCM test case 172 */
CIPHER_TEST ( wycheproof_aes_gcm_19fae6ad, &aes_gcm_algorithm,
KEY ( 0xce, 0xe9, 0xab, 0xbc, 0x26, 0xb6, 0x3e, 0x16, 0x9f, 0x0c,
0xed, 0x62, 0x1f, 0xe2, 0x1d, 0x95, 0x90, 0x4e, 0x75, 0xb8,
0x81, 0xd9, 0x3e, 0x6b ),
IV ( 0x1e, 0x82, 0x59, 0xe0, 0xa4, 0x3e, 0x57, 0x10, 0x68, 0xf7,
0x01, 0xcd, 0x20, 0x64, 0xfc, 0x0c ),
ADDITIONAL(),
PLAINTEXT ( 0x46 ),
CIPHERTEXT ( 0xdc ),
AUTH ( 0xaf, 0x1f, 0x55, 0x35, 0xb1, 0x25, 0xb3, 0x4f, 0xc4, 0x66,
0x90, 0x2e, 0xa4, 0x0c, 0xb3, 0xa2 ) );
/* AES-GCM test case 173 */
CIPHER_TEST ( wycheproof_aes_gcm_de129db1, &aes_gcm_algorithm,
KEY ( 0x18, 0x9f, 0x0b, 0xd3, 0x90, 0xba, 0x40, 0x63, 0x25, 0x86,
0xa4, 0x5c, 0x39, 0x73, 0x5c, 0x2b, 0x87, 0x11, 0x33, 0x29,
0xc8, 0x00, 0xf3, 0x94 ),
IV ( 0xc8, 0x44, 0x42, 0xd6, 0x97, 0x5f, 0x03, 0x59, 0x73, 0x7d,
0xe0, 0xfa, 0x82, 0x8f, 0x95, 0x8e ),
ADDITIONAL(),
PLAINTEXT ( 0xb4, 0xbc, 0xd7, 0xb8, 0xee, 0xca, 0x30, 0x50, 0xdd,
0x17, 0x68, 0x2c, 0x6a, 0x91, 0x4e ),
CIPHERTEXT ( 0x2a, 0xab, 0x5c, 0x87, 0xdc, 0xb4, 0xa4, 0xda, 0xe4,
0xe9, 0x75, 0xdd, 0xb6, 0x5a, 0xab ),
AUTH ( 0x6b, 0x03, 0xb7, 0x55, 0x7c, 0x71, 0x31, 0xe2, 0x35, 0x2e,
0x49, 0x5d, 0x54, 0xe6, 0x1a, 0xef ) );
/* AES-GCM test case 174 */
CIPHER_TEST ( wycheproof_aes_gcm_1d084de2, &aes_gcm_algorithm,
KEY ( 0xb0, 0x72, 0x4f, 0x15, 0xdf, 0x5b, 0x79, 0x2c, 0x2f, 0x49,
0xbc, 0x51, 0xdf, 0x0a, 0xc5, 0xaa, 0xd6, 0x9b, 0xe0, 0x03,
0x09, 0x81, 0x61, 0x3c ),
IV ( 0x13, 0xcd, 0x52, 0x6e, 0xc7, 0x7b, 0x58, 0xf6, 0x2d, 0x48,
0xd0, 0x3f, 0x8b, 0x88, 0xf2, 0xb8 ),
ADDITIONAL(),
PLAINTEXT ( 0x8d, 0xa3, 0xab, 0x9c, 0x3d, 0x19, 0x5b, 0x04, 0xdf,
0x45, 0x2a, 0xd2, 0x39, 0x53, 0xda, 0x4d ),
CIPHERTEXT ( 0xd1, 0x27, 0xfd, 0x2e, 0x67, 0xc0, 0x88, 0x7d, 0x90,
0xeb, 0x92, 0xb9, 0x1f, 0x35, 0x7d, 0x97 ),
AUTH ( 0xeb, 0x05, 0xbd, 0xa9, 0x37, 0xfa, 0xee, 0xd2, 0x7f, 0x88,
0x33, 0x29, 0x5d, 0x4b, 0xa5, 0x59 ) );
/* AES-GCM test case 175 */
CIPHER_TEST ( wycheproof_aes_gcm_a5bb8fa1, &aes_gcm_algorithm,
KEY ( 0x99, 0x87, 0x50, 0xba, 0x78, 0x48, 0x41, 0xe4, 0x0a, 0x7c,
0x5b, 0x03, 0x98, 0x57, 0x32, 0xb6, 0x39, 0x7e, 0x54, 0x59,
0xa3, 0x84, 0x39, 0x54 ),
IV ( 0x1d, 0x3d, 0x62, 0xec, 0xcd, 0x8a, 0xc5, 0xe8, 0x96, 0xf2,
0x65, 0x4a, 0x7f, 0x60, 0x6f, 0xc9 ),
ADDITIONAL(),
PLAINTEXT ( 0x2f, 0x60, 0xca, 0x34, 0x94, 0xa9, 0x58, 0xdc, 0x3e,
0x6e, 0xbe, 0xb5, 0xd0, 0xb4, 0xe6, 0xdd, 0xa0, 0xd0,
0xc4, 0x33, 0x1a, 0xb9, 0xc9, 0x57, 0xf6, 0x42, 0x2a,
0x51, 0x00, 0x87, 0x8e, 0xbf ),
CIPHERTEXT ( 0x34, 0x4c, 0x2c, 0xea, 0x17, 0xb0, 0x6c, 0xb3, 0xda,
0x27, 0x2e, 0x22, 0xa2, 0x2a, 0x3a, 0x71, 0xee, 0x0e,
0xaa, 0x19, 0x59, 0xa7, 0xfa, 0xcf, 0xff, 0x46, 0x46,
0x60, 0xdd, 0xcc, 0xed, 0xd1 ),
AUTH ( 0xba, 0xb7, 0xfb, 0xf4, 0x99, 0xff, 0x06, 0xaa, 0xd5, 0xf7,
0x57, 0xb1, 0xc1, 0xa4, 0xfc, 0xc0 ) );
/* AES-GCM test case 176 */
CIPHER_TEST ( wycheproof_aes_gcm_94e6bc4f, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00 ),
ADDITIONAL(),
PLAINTEXT ( 0x0b, 0x4d, 0xbb, 0xba, 0x89, 0x82, 0xe0, 0xf6, 0x49,
0xf8, 0xba, 0x85, 0xf3, 0xaa, 0x06, 0x1b ),
CIPHERTEXT ( 0x3f, 0x87, 0x5c, 0x9b, 0xd7, 0xd8, 0x51, 0x14, 0x48,
0x45, 0x94, 0x68, 0xe3, 0x98, 0xc3, 0xb2 ),
AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
/* AES-GCM test case 177 */
CIPHER_TEST ( wycheproof_aes_gcm_10226199, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87 ),
IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff ),
ADDITIONAL(),
PLAINTEXT ( 0x1a, 0xe9, 0x36, 0x88, 0xef, 0x7e, 0x26, 0x50, 0xa9,
0x34, 0x2a, 0xd4, 0x71, 0x8b, 0x27, 0x80 ),
CIPHERTEXT ( 0x21, 0x0d, 0xab, 0xea, 0x43, 0x64, 0xc6, 0xd5, 0xb3,
0x42, 0x9e, 0x77, 0x43, 0x32, 0x29, 0x36 ),
AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
/* AES-GCM test case 178 */
CIPHER_TEST ( wycheproof_aes_gcm_0b1e8b5b, &aes_gcm_algorithm,
KEY ( 0x50, 0x19, 0xeb, 0x9f, 0xef, 0x82, 0xe5, 0x75, 0x0b, 0x63,
0x17, 0x58, 0xf0, 0x21, 0x3e, 0x3e, 0x5f, 0xcc, 0xa1, 0x27,
0x48, 0xb4, 0x0e, 0xb4 ),
IV ( 0xff, 0x0d, 0xdb, 0x0a, 0x0d, 0x7b, 0x36, 0xd2, 0x19, 0xda,
0x12, 0xb5 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x79, 0x71, 0x28, 0x4e, 0x6c, 0x9e, 0x6a, 0xac, 0x34, 0x6f,
0xe2, 0xb7, 0xa0, 0xa0, 0x64, 0xc2 ) );
/* AES-GCM test case 179 */
CIPHER_TEST ( wycheproof_aes_gcm_96e5612f, &aes_gcm_algorithm,
KEY ( 0x21, 0x21, 0x8a, 0xf7, 0x90, 0x42, 0x8f, 0x80, 0x24, 0xd3,
0xe7, 0xe1, 0x42, 0x8c, 0x9f, 0xcf, 0x57, 0x8c, 0x21, 0x66,
0x36, 0xd6, 0x0e, 0x73 ),
IV ( 0x34, 0x04, 0x7b, 0xc3, 0x9b, 0x9c, 0x60, 0x83, 0x84, 0xdf,
0xf5, 0xb8 ),
ADDITIONAL(),
PLAINTEXT ( 0xe3 ),
CIPHERTEXT ( 0xfe ),
AUTH ( 0x2e, 0x98, 0x2e, 0x24, 0xb8, 0x1c, 0xd1, 0x20, 0xd3, 0x5a,
0x70, 0xfe, 0x69, 0x35, 0xe6, 0x65 ) );
/* AES-GCM test case 180 */
CIPHER_TEST ( wycheproof_aes_gcm_2e57ea6b, &aes_gcm_algorithm,
KEY ( 0x3a, 0x8b, 0xf5, 0x43, 0xc4, 0x80, 0x92, 0x56, 0x32, 0x11,
0x82, 0x45, 0xbc, 0xbf, 0x5d, 0x01, 0x52, 0x2b, 0x98, 0x7a,
0x31, 0xa3, 0x3d, 0xa3 ),
IV ( 0x4e, 0xbc, 0x13, 0xcf, 0x46, 0x36, 0xcc, 0x7c, 0x45, 0xe5,
0x60, 0xa7 ),
ADDITIONAL(),
PLAINTEXT ( 0x53, 0xfc, 0x72, 0xe7, 0x1b, 0x59, 0xee, 0xb3 ),
CIPHERTEXT ( 0x99, 0xf2, 0xff, 0x1c, 0x8a, 0x44, 0xe5, 0xf2 ),
AUTH ( 0x68, 0x70, 0xf1, 0x04, 0xdd, 0xc5, 0x14, 0x47, 0x7b, 0x40,
0x03, 0x36, 0xfb, 0x01, 0x86, 0x0e ) );
/* AES-GCM test case 181 */
CIPHER_TEST ( wycheproof_aes_gcm_08c164fc, &aes_gcm_algorithm,
KEY ( 0x92, 0xf4, 0xd2, 0x67, 0x2f, 0xce, 0xec, 0x43, 0x96, 0x3c,
0xcf, 0xfb, 0x17, 0xe6, 0xea, 0x75, 0x78, 0xb1, 0x14, 0x18,
0xb0, 0x6a, 0x3b, 0x82 ),
IV ( 0x6e, 0x7f, 0xf7, 0xf0, 0x79, 0x76, 0x85, 0xcf, 0xc4, 0x4b,
0x05, 0xff ),
ADDITIONAL(),
PLAINTEXT ( 0xc3, 0xec, 0x16, 0xad, 0xb1, 0x84, 0xaf, 0xfa, 0x8a,
0xe9, 0x73, 0x8b, 0xff, 0xb9, 0x16 ),
CIPHERTEXT ( 0xaf, 0xe8, 0xef, 0x41, 0x59, 0x1b, 0xfc, 0xc0, 0x0d,
0xb3, 0xc8, 0x80, 0xce, 0xb1, 0x86 ),
AUTH ( 0x29, 0xff, 0xf7, 0xf2, 0x85, 0x76, 0x86, 0x45, 0xc9, 0xc8,
0xbf, 0x7a, 0x47, 0x1c, 0x93, 0x93 ) );
/* AES-GCM test case 182 */
CIPHER_TEST ( wycheproof_aes_gcm_19c96e4e, &aes_gcm_algorithm,
KEY ( 0xbc, 0xb6, 0xbc, 0x5e, 0xe6, 0x74, 0x3d, 0xf1, 0x39, 0x6a,
0x34, 0x63, 0x93, 0x27, 0xb2, 0x58, 0x09, 0xec, 0x9c, 0x81,
0xdd, 0x6a, 0x0c, 0x0e ),
IV ( 0xbe, 0x03, 0x26, 0xd2, 0x3b, 0xdc, 0x2c, 0x64, 0x64, 0x8d,
0x13, 0xf4 ),
ADDITIONAL(),
PLAINTEXT ( 0x80, 0x47, 0x4a, 0x3a, 0x3b, 0x80, 0x95, 0x60, 0xee,
0xe2, 0xce, 0x7a, 0x7a, 0x33, 0xea, 0x07 ),
CIPHERTEXT ( 0x90, 0x33, 0x9d, 0xca, 0x02, 0xef, 0x71, 0x7f, 0x16,
0x03, 0x99, 0x4a, 0xee, 0x6c, 0xf6, 0xd2 ),
AUTH ( 0xe3, 0xd3, 0x3e, 0x01, 0xce, 0x64, 0xf2, 0x71, 0x78, 0x31,
0x47, 0xde, 0x22, 0x62, 0x28, 0xbc ) );
/* AES-GCM test case 183 */
CIPHER_TEST ( wycheproof_aes_gcm_63801d8f, &aes_gcm_algorithm,
KEY ( 0x5e, 0x1d, 0x28, 0x21, 0x3e, 0x09, 0x25, 0x36, 0x52, 0x5b,
0xba, 0xe0, 0x9e, 0x21, 0x4a, 0xf4, 0xc8, 0x91, 0xe2, 0x02,
0xb2, 0xb4, 0xfa, 0x4f ),
IV ( 0xb6, 0xbe, 0x6c, 0xd0, 0x68, 0x12, 0x35, 0xd8, 0x26, 0xaa,
0x28, 0xea ),
ADDITIONAL(),
PLAINTEXT ( 0x53, 0xd5, 0x94, 0x33, 0xa7, 0xdb, 0x7f, 0x41, 0xb3,
0x1c, 0xcb, 0x6d, 0x4a, 0x2d, 0x78, 0x99, 0x65 ),
CIPHERTEXT ( 0xb9, 0x8e, 0xd6, 0x32, 0x16, 0x79, 0x94, 0x1a, 0x3e,
0x52, 0x18, 0x34, 0x29, 0x66, 0x86, 0xad, 0x98 ),
AUTH ( 0x9f, 0x50, 0xc0, 0x3e, 0x05, 0x5e, 0x51, 0x97, 0x12, 0xc5,
0x82, 0xec, 0x9d, 0xb3, 0x23, 0x5b ) );
/* AES-GCM test case 184 */
CIPHER_TEST ( wycheproof_aes_gcm_3d467b77, &aes_gcm_algorithm,
KEY ( 0x7f, 0x67, 0x2d, 0x85, 0xe1, 0x51, 0xaa, 0x49, 0x0b, 0xc0,
0xee, 0xc8, 0xf6, 0x6b, 0x5e, 0x5b, 0xee, 0x74, 0xaf, 0x11,
0x64, 0x2b, 0xe3, 0xff ),
IV ( 0xb0, 0x22, 0x06, 0x70, 0x48, 0x50, 0x5b, 0x20, 0x94, 0x62,
0x16, 0xef ),
ADDITIONAL(),
PLAINTEXT ( 0xef, 0x64, 0x12, 0xc7, 0x2b, 0x03, 0xc6, 0x43, 0xfa,
0x02, 0x56, 0x5a, 0x0a, 0xe2, 0x37, 0x8a, 0x93, 0x11,
0xc1, 0x1a, 0x84, 0x06, 0x5f, 0x80 ),
CIPHERTEXT ( 0xad, 0xdd, 0x30, 0x36, 0x51, 0x11, 0x9e, 0x52, 0xf6,
0x17, 0x0d, 0xfc, 0x7a, 0x91, 0x50, 0x64, 0x25, 0x3d,
0x57, 0x53, 0x29, 0x87, 0xb9, 0xab ),
AUTH ( 0xfa, 0x04, 0x84, 0xf8, 0xba, 0xa9, 0x5f, 0x5b, 0x7a, 0x31,
0xc5, 0x6d, 0x1b, 0x34, 0xc5, 0x8b ) );
/* AES-GCM test case 185 */
CIPHER_TEST ( wycheproof_aes_gcm_566b5fcd, &aes_gcm_algorithm,
KEY ( 0x96, 0x9f, 0xed, 0x50, 0x68, 0x54, 0x1d, 0x65, 0x41, 0x8c,
0x2c, 0x1d, 0xe8, 0xfe, 0x1f, 0x84, 0x5e, 0x03, 0x60, 0x30,
0x49, 0x6e, 0x12, 0x72 ),
IV ( 0x81, 0x7f, 0xe5, 0x1c, 0x31, 0xf2, 0x87, 0x91, 0x41, 0xa3,
0x43, 0x35 ),
ADDITIONAL ( 0xcb ),
PLAINTEXT ( 0x3d, 0x82, 0x33, 0x19, 0x1a, 0x28, 0x23, 0xbf, 0x76,
0x7e, 0x99, 0x16, 0x7b, 0x1d, 0x4a, 0xf4, 0xf4, 0x84,
0x84, 0x58 ),
CIPHERTEXT ( 0x0d, 0x2c, 0x3a, 0x3c, 0x0c, 0xc4, 0xb4, 0x0e, 0x70,
0xed, 0x45, 0xe1, 0x88, 0xe3, 0x56, 0xa0, 0xe1, 0x53,
0x3b, 0x31 ),
AUTH ( 0x92, 0x90, 0x9a, 0x80, 0xe9, 0x05, 0x40, 0xe1, 0x87, 0x8a,
0xb5, 0x9e, 0xf3, 0x00, 0x07, 0x2b ) );
/* AES-GCM test case 186 */
CIPHER_TEST ( wycheproof_aes_gcm_39054267, &aes_gcm_algorithm,
KEY ( 0xfa, 0x5b, 0x9b, 0x41, 0xf9, 0x3f, 0x8b, 0x68, 0x2c, 0x04,
0xba, 0x81, 0x6c, 0x3f, 0xec, 0xc2, 0x4e, 0xec, 0x09, 0x5b,
0x04, 0xdd, 0x74, 0x97 ),
IV ( 0x62, 0xb9, 0xcf, 0x1e, 0x92, 0x3b, 0xc1, 0x13, 0x8d, 0x05,
0xd2, 0x05 ),
ADDITIONAL ( 0x2e, 0xd8, 0x48, 0x71, 0x53, 0xe2, 0x1b, 0x12 ),
PLAINTEXT ( 0x18, 0x15, 0x98, 0x41, 0x81, 0x3a, 0x69, 0xfc, 0x0f,
0x8f, 0x42, 0x29, 0xe1, 0x67, 0x8d, 0xa7, 0xc9, 0x01,
0x67, 0x11 ),
CIPHERTEXT ( 0xc7, 0xc1, 0xcb, 0xb8, 0x5c, 0xe2, 0xa0, 0xa3, 0xf3,
0x2c, 0xb9, 0xef, 0x01, 0xad, 0x45, 0xec, 0x11, 0x18,
0xb6, 0x6d ),
AUTH ( 0x25, 0x33, 0x17, 0xf9, 0x8b, 0xda, 0xb8, 0x75, 0x31, 0xec,
0xe2, 0x04, 0x75, 0xcd, 0x9e, 0xbb ) );
/* AES-GCM test case 187 */
CIPHER_TEST ( wycheproof_aes_gcm_99c80b8d, &aes_gcm_algorithm,
KEY ( 0xfb, 0xfb, 0x39, 0x56, 0x62, 0x78, 0x7e, 0x2d, 0x25, 0xa2,
0xe7, 0x51, 0x0f, 0x81, 0x8e, 0x82, 0x59, 0x36, 0xa3, 0x51,
0x14, 0xe2, 0x37, 0xc9 ),
IV ( 0x3f, 0x1a, 0x1e, 0x02, 0xe9, 0x0a, 0x4b, 0xa7, 0xa1, 0xdb,
0x9d, 0xf2 ),
ADDITIONAL ( 0x74, 0x31, 0x8d, 0x88, 0x76, 0x52, 0x82, 0x43, 0xf1,
0x94, 0x4b, 0x73, 0xeb, 0x77, 0xe9, 0x6e ),
PLAINTEXT ( 0x29, 0x52, 0xa3, 0xd6, 0x41, 0x07, 0xd5, 0xcb, 0xb9,
0x60, 0x22, 0x39, 0xd0, 0x5a, 0x5c, 0x5c, 0x22, 0x2c,
0xf7, 0x2b ),
CIPHERTEXT ( 0xec, 0xf5, 0xe4, 0x03, 0xf1, 0x9c, 0x00, 0x7c, 0x8d,
0xa7, 0xa4, 0x56, 0xca, 0xf0, 0xa6, 0xd7, 0x57, 0x62,
0x82, 0x9b ),
AUTH ( 0xe0, 0x87, 0x7a, 0x10, 0x0f, 0x9d, 0xd9, 0xd6, 0x79, 0x5f,
0x0e, 0x74, 0xc5, 0x6a, 0x9f, 0xab ) );
/* AES-GCM test case 188 */
CIPHER_TEST ( wycheproof_aes_gcm_c40c4226, &aes_gcm_algorithm,
KEY ( 0x5d, 0x8e, 0x9c, 0x22, 0x22, 0x31, 0x6c, 0x9e, 0xd5, 0xff,
0x94, 0x51, 0x3c, 0xc9, 0x57, 0x43, 0x6a, 0xe4, 0x47, 0xa6,
0xe1, 0xa7, 0x3a, 0x29 ),
IV ( 0x08, 0x02, 0xae, 0x86, 0xc7, 0x5a, 0x73, 0xbf, 0x79, 0x56,
0x15, 0x21 ),
ADDITIONAL ( 0x5c, 0xa3, 0x54, 0xa4, 0xcb, 0x8e, 0x4f, 0xc9, 0x79,
0x8a, 0xa2, 0x09, 0xad, 0x4f, 0x73, 0x9d, 0xc7, 0xc2,
0x32, 0xfd, 0xd1, 0xf2, 0x25, 0x84 ),
PLAINTEXT ( 0x42, 0xb4, 0x43, 0x9e, 0x1d, 0x21, 0x16, 0xf8, 0x34,
0xb9, 0x1c, 0x51, 0x6a, 0x26, 0x29, 0x9d, 0xf2, 0x79,
0x95, 0x6b ),
CIPHERTEXT ( 0x94, 0xd8, 0x44, 0xd9, 0x8b, 0x94, 0x67, 0xda, 0xa7,
0xe8, 0xdd, 0xe7, 0xf4, 0x29, 0x00, 0x37, 0x35, 0x4d,
0x7f, 0xb2 ),
AUTH ( 0x62, 0x19, 0x66, 0x38, 0x59, 0x0c, 0xef, 0x42, 0x9d, 0x6b,
0x1d, 0x1a, 0x59, 0x83, 0x9c, 0x02 ) );
/* AES-GCM test case 189 */
CIPHER_TEST ( wycheproof_aes_gcm_b6419c85, &aes_gcm_algorithm,
KEY ( 0x11, 0xb1, 0x8e, 0xa3, 0x9c, 0x38, 0x49, 0x15, 0x93, 0xfd,
0xd5, 0xe6, 0xe4, 0xab, 0x8b, 0x4a, 0x01, 0x29, 0xa5, 0x3f,
0x49, 0xed, 0x6c, 0xa9 ),
IV ( 0x09, 0x52, 0xa7, 0x0d, 0x99, 0x31, 0x88, 0xc1, 0xdd, 0x88,
0x91, 0xa5 ),
ADDITIONAL(),
PLAINTEXT ( 0x71, 0x53, 0x21, 0x78, 0x13, 0xc3, 0x90, 0xb8, 0xd4,
0x58, 0xbe, 0x71, 0xfa, 0xd1, 0xaf, 0xb8, 0x79, 0x71,
0xff, 0xbc, 0xa3, 0xa9, 0x41, 0x1e, 0x3e, 0x7a, 0xbe,
0x8b, 0x87, 0x74, 0xf9, 0x87, 0x16, 0x7a, 0xcf, 0xeb,
0x52, 0x96, 0xe1, 0x9b, 0x40, 0x8b, 0x58, 0x1a, 0xd6,
0xca, 0xb0, 0x8c, 0x8d, 0xc8, 0x1d, 0x40, 0xcd, 0xbe,
0x1c, 0x65, 0x92, 0xfb, 0x57, 0x3b, 0xd7, 0xa3, 0xc6 ),
CIPHERTEXT ( 0xe4, 0x63, 0x87, 0xd0, 0x32, 0x4f, 0x3e, 0x8f, 0xfd,
0x28, 0x7b, 0x35, 0xe4, 0xb2, 0x1f, 0x7e, 0x71, 0xf6,
0x2b, 0xa7, 0x5f, 0x13, 0xc0, 0x32, 0x57, 0x6a, 0xe8,
0x34, 0x4f, 0x9d, 0x52, 0x0a, 0x6d, 0x61, 0xef, 0x9f,
0x99, 0xb9, 0xa0, 0xdd, 0x87, 0x5d, 0x26, 0x92, 0x20,
0x3a, 0xb6, 0x68, 0xf7, 0x96, 0x2f, 0x2a, 0xc9, 0x29,
0x4f, 0x91, 0x10, 0x6a, 0x38, 0x84, 0x47, 0x70, 0x98 ),
AUTH ( 0x36, 0xdc, 0xe4, 0x05, 0xee, 0x69, 0xe4, 0x15, 0x27, 0xfb,
0x78, 0x08, 0x23, 0x0a, 0x11, 0x23 ) );
/* AES-GCM test case 190 */
CIPHER_TEST ( wycheproof_aes_gcm_1c119a15, &aes_gcm_algorithm,
KEY ( 0xcc, 0xbd, 0x0f, 0x50, 0x98, 0x25, 0xa5, 0xf3, 0x58, 0xa1,
0x4a, 0xac, 0x04, 0x4a, 0xe2, 0x82, 0x6b, 0xb2, 0xc9, 0xea,
0xaa, 0xaa, 0x07, 0x7f ),
IV ( 0x91, 0x89, 0xa7, 0x1a, 0xc3, 0x59, 0xb7, 0x3c, 0x8c, 0x08,
0xdf, 0x22 ),
ADDITIONAL(),
PLAINTEXT ( 0xa1, 0xed, 0x10, 0x07, 0xb5, 0x2e, 0x36, 0xec, 0x0f,
0x70, 0x10, 0x9c, 0x68, 0xda, 0x72, 0xee, 0x7b, 0x67,
0x5c, 0x85, 0x5e, 0x3e, 0x49, 0x56, 0xd2, 0xdc, 0xf9,
0xd1, 0x2f, 0x67, 0x5d, 0x69, 0x33, 0xf6, 0x77, 0xdd,
0xcc, 0x58, 0xfa, 0xce, 0x85, 0x76, 0x99, 0xd2, 0xe3,
0xd9, 0x0a, 0xdc, 0xb8, 0xc6, 0xc5, 0x7c, 0x9d, 0x88,
0xb5, 0xdf, 0xcf, 0x35, 0x6d, 0xe4, 0xc0, 0xb6, 0x3f,
0x0e ),
CIPHERTEXT ( 0xe9, 0x91, 0x5b, 0xc5, 0xae, 0xa6, 0x3c, 0x8b, 0xc0,
0x14, 0xf2, 0xae, 0x6a, 0x49, 0x86, 0xb0, 0x31, 0x15,
0xff, 0x1f, 0x34, 0xad, 0x6c, 0x0a, 0xcd, 0x74, 0xff,
0xca, 0x07, 0xc4, 0x53, 0xec, 0x3f, 0x3c, 0xe6, 0x90,
0x2d, 0x5f, 0xf3, 0x38, 0xc5, 0x88, 0xa3, 0x4a, 0x1c,
0x3b, 0x30, 0xef, 0x75, 0x3e, 0xc7, 0x00, 0x15, 0x72,
0xcb, 0xfe, 0xaf, 0xe6, 0x90, 0xfd, 0x00, 0xf5, 0x9b,
0x02 ),
AUTH ( 0xfb, 0xf1, 0x9b, 0x6b, 0x90, 0xe2, 0xd9, 0xdf, 0x7e, 0xad,
0x0c, 0x3b, 0xc6, 0xe3, 0x75, 0xa2 ) );
/* AES-GCM test case 191 */
CIPHER_TEST ( wycheproof_aes_gcm_e36c2be6, &aes_gcm_algorithm,
KEY ( 0xc0, 0xa5, 0x2b, 0x33, 0xc0, 0x09, 0x5e, 0xcf, 0xe1, 0xf3,
0x8e, 0x34, 0x94, 0xe1, 0x94, 0x73, 0x9e, 0xd9, 0x74, 0xb8,
0xc7, 0xc0, 0x8a, 0x2b ),
IV ( 0x1d, 0xeb, 0xe7, 0x39, 0x4e, 0xf2, 0xa2, 0xa5, 0x99, 0x88,
0x34, 0x4f ),
ADDITIONAL(),
PLAINTEXT ( 0x7d, 0x98, 0x98, 0x48, 0xd8, 0x22, 0xa5, 0xc6, 0xa0,
0xfe, 0x3e, 0x31, 0x6e, 0xdc, 0x0a, 0xdf, 0xae, 0x9d,
0xd6, 0x31, 0xda, 0x2e, 0x5d, 0x15, 0x0b, 0xb6, 0xae,
0xfa, 0x04, 0x15, 0x05, 0xac, 0xce, 0xcd, 0x2b, 0xa3,
0xa2, 0x73, 0x79, 0x98, 0x9c, 0x47, 0x1b, 0xc7, 0x21,
0x3a, 0x84, 0xff, 0xe5, 0x12, 0x88, 0x50, 0xe2, 0x71,
0xd5, 0x18, 0x79, 0x8d, 0x19, 0x9e, 0x7b, 0x8b, 0x65,
0x7c, 0x39 ),
CIPHERTEXT ( 0x7f, 0x16, 0xdf, 0x48, 0xf0, 0x9a, 0x34, 0x90, 0x53,
0x44, 0x0f, 0xac, 0x4b, 0x83, 0x53, 0x55, 0xc2, 0x4c,
0x95, 0x31, 0x7b, 0x82, 0xbb, 0x8f, 0x91, 0xbb, 0xc1,
0x91, 0x82, 0x63, 0x30, 0x0c, 0x0a, 0x4a, 0x20, 0xa3,
0xfa, 0x03, 0xc0, 0x08, 0x07, 0xb8, 0x28, 0x39, 0xff,
0xaf, 0x89, 0x8c, 0xe2, 0x37, 0xfe, 0xe3, 0xd0, 0x4f,
0x76, 0xf2, 0x9c, 0xdd, 0xaf, 0x44, 0x86, 0x8f, 0x69,
0x11, 0x03 ),
AUTH ( 0x6b, 0xf3, 0x42, 0x30, 0x8d, 0xba, 0x90, 0x79, 0x25, 0x45,
0xdc, 0xb6, 0x7e, 0xa7, 0x85, 0xc5 ) );
/* AES-GCM test case 192 */
CIPHER_TEST ( wycheproof_aes_gcm_93996ee5, &aes_gcm_algorithm,
KEY ( 0x24, 0x77, 0x72, 0x88, 0x32, 0x6e, 0x1a, 0x21, 0x90, 0xa3,
0x18, 0xc7, 0x71, 0x88, 0xa7, 0x91, 0x2d, 0x0b, 0xa8, 0xd4,
0x14, 0x23, 0xa2, 0x9c ),
IV ( 0xf2, 0xf4, 0x19, 0x82, 0xfe, 0x0f, 0x01, 0x7a, 0xe4, 0xea,
0x1b, 0x06 ),
ADDITIONAL(),
PLAINTEXT ( 0x60, 0xb8, 0xbe, 0xab, 0xd7, 0xe4, 0xa3, 0x6f, 0xd3,
0x66, 0x6e, 0x13, 0xa4, 0xcf, 0xad, 0x40, 0x5a, 0xd7,
0xb0, 0xb1, 0x7a, 0x61, 0x45, 0x77, 0xef, 0x9e, 0x9d,
0xc1, 0x59, 0xb2, 0x04, 0x0c, 0xfb, 0x61, 0xcb, 0xe9,
0xa2, 0xa8, 0x56, 0x05, 0x3c, 0xd4, 0x6a, 0x88, 0x9b,
0x8a, 0x8f, 0xde, 0x21, 0xdb, 0x88, 0x22, 0xd6, 0xb3,
0x46, 0xf6, 0x65, 0xe0, 0x3a, 0xc6, 0x9c, 0xe8, 0x6a,
0x15, 0x18, 0x5b, 0xbd, 0xe8, 0xcc, 0x9a, 0xbf, 0x0e,
0xf9, 0x34, 0xfd, 0x22, 0x52, 0x37, 0x31, 0xfa, 0x2c,
0x3c, 0x19, 0xc2, 0xcb, 0x45, 0x79, 0xe5, 0x75, 0x03,
0xb0, 0x32, 0x2d, 0xbd, 0x29, 0xee, 0x30, 0xc6, 0x30,
0x45, 0x49, 0x8e, 0x40, 0x25, 0x18, 0x51, 0x1f, 0x58,
0x52, 0x56, 0x26, 0xb2, 0x58, 0x70, 0x3f, 0x9d, 0x01,
0xdc, 0x93, 0x51, 0xbc, 0x62, 0xea, 0x53, 0xc2, 0xa9,
0xbf ),
CIPHERTEXT ( 0x18, 0xca, 0xb2, 0x5b, 0x5d, 0x7c, 0x4c, 0xdf, 0x63,
0x22, 0x16, 0x12, 0x3f, 0x74, 0x39, 0x33, 0x24, 0xbd,
0x13, 0xdc, 0xf0, 0x70, 0x3c, 0xac, 0x6f, 0xaa, 0xdc,
0xfc, 0x7e, 0xd0, 0xa7, 0xc0, 0xe4, 0xad, 0x96, 0x2d,
0x9a, 0xfa, 0x1c, 0x63, 0x57, 0xfc, 0x20, 0x34, 0x5b,
0x9f, 0x43, 0xdf, 0xcb, 0xc6, 0x2b, 0x72, 0xa7, 0xb4,
0x62, 0xb8, 0xe7, 0x13, 0xb1, 0xc7, 0x59, 0x95, 0x7b,
0xe6, 0xc6, 0x24, 0xf3, 0xe2, 0x4f, 0xf6, 0x2b, 0x27,
0xa9, 0x40, 0x09, 0x17, 0x3e, 0x72, 0x1a, 0x3a, 0x99,
0x39, 0xbe, 0xbe, 0x78, 0x85, 0x5c, 0x84, 0x2b, 0xcd,
0xcd, 0x51, 0xbc, 0x19, 0x6d, 0x66, 0xaa, 0xd7, 0x9d,
0xa4, 0xf0, 0x9b, 0x38, 0x13, 0x7b, 0x1a, 0x6f, 0x2a,
0x39, 0x45, 0x6c, 0x1b, 0x61, 0x89, 0xcf, 0x89, 0x57,
0xb2, 0x6b, 0x0c, 0x21, 0x35, 0x8d, 0xe6, 0x90, 0x15,
0xed ),
AUTH ( 0xbf, 0xe7, 0xea, 0x91, 0xf4, 0x62, 0x2d, 0x12, 0xde, 0x15,
0x45, 0x35, 0x71, 0xd4, 0x40, 0xc4 ) );
/* AES-GCM test case 193 */
CIPHER_TEST ( wycheproof_aes_gcm_6aada21e, &aes_gcm_algorithm,
KEY ( 0xd0, 0x45, 0xc6, 0xeb, 0x17, 0x3f, 0x44, 0x08, 0x43, 0xfa,
0xec, 0x3e, 0x93, 0x74, 0x60, 0x2a, 0x94, 0xee, 0x3f, 0x71,
0x76, 0x31, 0x22, 0x08 ),
IV ( 0x98, 0xe9, 0x15, 0x3d, 0xac, 0xa2, 0x52, 0x2e, 0x31, 0x62,
0xcb, 0x15 ),
ADDITIONAL(),
PLAINTEXT ( 0x3f, 0x0b, 0x30, 0xdc, 0x96, 0x3a, 0x82, 0xd1, 0x82,
0xc0, 0x35, 0xb5, 0xa8, 0x23, 0x06, 0x0f, 0x07, 0xc4,
0x12, 0x37, 0x92, 0xe6, 0xce, 0xe6, 0xbf, 0x91, 0xfe,
0xa3, 0xc5, 0x2f, 0xa6, 0x6b, 0xb6, 0xa9, 0x3e, 0xa6,
0xcc, 0xe9, 0xf4, 0x81, 0x3e, 0xb9, 0x5b, 0xf1, 0x8f,
0x81, 0x6c, 0x00, 0xad, 0x4f, 0xb5, 0x69, 0x32, 0x82,
0x7a, 0x39, 0xef, 0xb2, 0xfe, 0x56, 0x80, 0x4e, 0x60,
0x4a, 0x60, 0x67, 0x74, 0xee, 0x92, 0xad, 0x46, 0xcd,
0x8c, 0x17, 0x2a, 0x0d, 0x2b, 0xde, 0xa2, 0xfc, 0x99,
0xf6, 0x7c, 0xd8, 0x2c, 0x60, 0x24, 0xc3, 0x15, 0xcf,
0xee, 0x6d, 0xbb, 0x8d, 0x27, 0xf7, 0x45, 0xc9, 0xd0,
0xce, 0x9b, 0xf5, 0xd0, 0x97, 0x24, 0xf4, 0xbe, 0xd0,
0x03, 0xcf, 0x39, 0x47, 0x83, 0x48, 0xb3, 0x30, 0x4b,
0xaa, 0x4e, 0xcc, 0x99, 0x74, 0xfc, 0x4f, 0x3f, 0xf9,
0x3f, 0x95 ),
CIPHERTEXT ( 0x96, 0x63, 0xe6, 0xf9, 0x8b, 0x27, 0x68, 0x44, 0x8e,
0x6d, 0xd0, 0xdd, 0x78, 0x0e, 0x14, 0x56, 0x68, 0xaf,
0x5b, 0x00, 0x22, 0x57, 0xe3, 0x53, 0x21, 0x38, 0x68,
0xc9, 0xcd, 0x9f, 0xd3, 0xa1, 0xe9, 0x42, 0x75, 0x30,
0x32, 0x75, 0x41, 0x77, 0x5a, 0x09, 0x31, 0x23, 0x07,
0x6d, 0x34, 0x98, 0x5d, 0xb3, 0xaa, 0x24, 0x8c, 0xd5,
0x5e, 0x53, 0x26, 0x09, 0xd1, 0xa3, 0x92, 0x74, 0xc4,
0x92, 0x16, 0xea, 0x20, 0xfb, 0xab, 0x71, 0x9b, 0x9c,
0x7e, 0x31, 0x0b, 0x27, 0x87, 0x7b, 0x9a, 0x33, 0xd1,
0xb6, 0x9a, 0xb7, 0x47, 0xaf, 0xac, 0x94, 0x4d, 0x1e,
0x97, 0xea, 0x78, 0x93, 0x67, 0x82, 0x1c, 0x33, 0x1f,
0x00, 0xb5, 0xd6, 0x18, 0x40, 0x2b, 0xfc, 0x57, 0x88,
0x4d, 0x18, 0xed, 0xbd, 0x60, 0xc4, 0xdf, 0xe2, 0x18,
0xc0, 0x80, 0x80, 0xb8, 0xe3, 0x47, 0x9f, 0xf8, 0x4b,
0xdf, 0xb5 ),
AUTH ( 0xfc, 0x2f, 0xf6, 0x2a, 0x41, 0xbd, 0xb7, 0x9a, 0xfc, 0x36,
0x98, 0x42, 0xe4, 0xec, 0xca, 0xbf ) );
/* AES-GCM test case 194 */
CIPHER_TEST ( wycheproof_aes_gcm_f50057ef, &aes_gcm_algorithm,
KEY ( 0x34, 0x93, 0xfc, 0x87, 0x61, 0xe9, 0xdc, 0x24, 0x75, 0x85,
0x04, 0x6f, 0x2b, 0x78, 0xaa, 0x7f, 0x13, 0x8f, 0xf9, 0xa9,
0xd4, 0x7d, 0x9b, 0x39 ),
IV ( 0x87, 0xea, 0xfe, 0x6c, 0xae, 0xad, 0x7f, 0x91, 0x6c, 0x11,
0xab, 0x76 ),
ADDITIONAL(),
PLAINTEXT ( 0x53, 0x38, 0xeb, 0xcc, 0xc9, 0x68, 0x96, 0x00, 0x17,
0x15, 0xfd, 0x3a, 0x2b, 0x88, 0x71, 0x0f, 0x6a, 0xfd,
0x6e, 0xf4, 0x79, 0xd7, 0x33, 0x2a, 0x6c, 0xb5, 0x4a,
0x3a, 0x46, 0xb3, 0x56, 0x82, 0xc9, 0x1f, 0x54, 0xed,
0x7f, 0x4b, 0xd5, 0x01, 0xc5, 0x0d, 0x51, 0xc3, 0xcb,
0x6a, 0x74, 0xd2, 0x1e, 0x26, 0x9b, 0x83, 0x2d, 0x98,
0x5a, 0x30, 0xf6, 0x3b, 0x79, 0xe8, 0x2f, 0xdf, 0xcc,
0x21, 0xce, 0xa5, 0xc0, 0x87, 0xe6, 0x48, 0xde, 0x74,
0x0c, 0x4c, 0x1a, 0x32, 0x7e, 0xed, 0x5c, 0x51, 0xac,
0xf7, 0xc6, 0x7a, 0x57, 0x68, 0xd9, 0x85, 0xbc, 0x93,
0xee, 0xd9, 0x79, 0xbc, 0xc2, 0xbb, 0xa6, 0xea, 0xcd,
0x08, 0x53, 0x89, 0x08, 0x53, 0x29, 0xdb, 0x18, 0x24,
0x13, 0xb6, 0x54, 0x79, 0x5f, 0xd7, 0xb3, 0x98, 0x77,
0x5e, 0xe3, 0x62, 0x8f, 0x38, 0x69, 0x51, 0xbc, 0x39,
0xf9, 0x40, 0x5e ),
CIPHERTEXT ( 0x74, 0x5d, 0xc7, 0x93, 0x6a, 0xc2, 0xdd, 0x20, 0xb5,
0xf9, 0xca, 0x87, 0xc6, 0xe7, 0xd9, 0xd5, 0xb7, 0xc5,
0x7a, 0x88, 0x02, 0xd3, 0x6f, 0x15, 0x3b, 0xd8, 0x1d,
0x96, 0xc8, 0x8f, 0x1b, 0xbb, 0x81, 0xd8, 0x07, 0x44,
0x4e, 0x21, 0x1b, 0x8e, 0x7e, 0x06, 0x9a, 0x68, 0x1f,
0xd8, 0xdd, 0x6c, 0x25, 0x67, 0xdc, 0xc3, 0x2a, 0x6b,
0x84, 0x09, 0x02, 0xc7, 0x69, 0xfb, 0x21, 0xee, 0x07,
0xdd, 0xb4, 0x1a, 0x7f, 0x67, 0xe2, 0xfa, 0x5c, 0x4e,
0xcb, 0xe6, 0x61, 0x9c, 0x47, 0xf0, 0x19, 0xff, 0xc3,
0x2d, 0x50, 0x33, 0xd4, 0x76, 0x9b, 0x5a, 0x73, 0xfe,
0x52, 0x98, 0x8e, 0xdb, 0xeb, 0xd9, 0xe9, 0x65, 0xa8,
0xb8, 0x25, 0xf6, 0xbc, 0x50, 0x01, 0x43, 0xb4, 0x56,
0xb4, 0x08, 0x95, 0x88, 0xa5, 0xdf, 0x6e, 0x9d, 0x56,
0xe6, 0x18, 0x8d, 0xa2, 0x6a, 0x94, 0x2b, 0x53, 0x83,
0x30, 0x47, 0x09 ),
AUTH ( 0xa7, 0xc8, 0x0b, 0x93, 0xa0, 0xfb, 0xbc, 0xf4, 0x8d, 0x78,
0x4d, 0xe3, 0x03, 0xd1, 0x11, 0x6c ) );
/* AES-GCM test case 195 */
CIPHER_TEST ( wycheproof_aes_gcm_7095e3af, &aes_gcm_algorithm,
KEY ( 0x0b, 0x68, 0xb6, 0x6d, 0x51, 0x82, 0xfa, 0x6c, 0x3b, 0x08,
0xed, 0xd5, 0x0a, 0x0a, 0x74, 0x83, 0xf0, 0x25, 0x93, 0x5a,
0x0d, 0x64, 0xab, 0xcf ),
IV ( 0x6f, 0xa4, 0x90, 0x2b, 0xee, 0xbd, 0x20, 0xe0, 0xe3, 0x31,
0x38, 0xa2 ),
ADDITIONAL(),
PLAINTEXT ( 0xe4, 0x2a, 0xd7, 0xf8, 0x9a, 0x18, 0x7d, 0x99, 0x59,
0x68, 0x14, 0x75, 0x51, 0x5f, 0xa1, 0x17, 0x09, 0x15,
0x56, 0x09, 0x7c, 0x0d, 0x86, 0x6d, 0xea, 0x5c, 0x87,
0xab, 0x45, 0xd9, 0x4b, 0x89, 0x77, 0x79, 0x38, 0xeb,
0x38, 0x1f, 0x6f, 0x24, 0xbd, 0x22, 0x26, 0x84, 0xbe,
0x49, 0xd0, 0xf7, 0x82, 0x23, 0xaa, 0x48, 0x19, 0x3c,
0xe9, 0xe9, 0xa8, 0x3d, 0x00, 0x7c, 0x26, 0xfe, 0x4a,
0xd4, 0xd0, 0x36, 0x04, 0x0b, 0x81, 0x02, 0x1e, 0xe4,
0x40, 0x81, 0x85, 0xed, 0x5f, 0x4f, 0xd8, 0x71, 0xde,
0xf6, 0xf5, 0x50, 0x1b, 0xfb, 0x4d, 0x5a, 0xd5, 0xb9,
0x1c, 0xc4, 0xc3, 0x37, 0x53, 0xe8, 0xa8, 0xa0, 0xb4,
0x19, 0xff, 0x77, 0x50, 0x17, 0x8b, 0xb3, 0x05, 0x66,
0x2a, 0x59, 0x13, 0xbf, 0x5a, 0xc9, 0x74, 0x24, 0x11,
0x4c, 0x2a, 0x59, 0x6b, 0xe6, 0x4f, 0xa8, 0x4e, 0x6a,
0xce, 0x89, 0xf0, 0xa5, 0xa3, 0x4e, 0x30, 0x59, 0x50,
0xb4, 0xfa, 0x50, 0x4c, 0x5d, 0x0c, 0xac, 0x49, 0x9c,
0xe6, 0xc1, 0x42, 0x62, 0x4a, 0x61, 0x8c, 0x2d, 0xb9,
0xef, 0x33, 0x87, 0x8e, 0x8c, 0x01, 0x4a, 0x58, 0xf9,
0x74, 0x35, 0x6c, 0xd6, 0x77, 0x37, 0x49, 0x94, 0x2b,
0x4c, 0x67, 0x47, 0xaa, 0x2e, 0x19, 0xf6, 0x8d, 0x08,
0x6c, 0x1d, 0x33, 0x05, 0xda, 0x85, 0xf9, 0xf6, 0x52,
0x8b, 0x72, 0x5c, 0xfb, 0x42, 0x8b, 0x58, 0x3c, 0x72,
0x7e, 0x4c, 0x40, 0x18, 0xc8, 0xc1, 0x97, 0xd8, 0xfc,
0x35, 0x60, 0x79, 0xd6, 0xf4, 0xeb, 0x89, 0x08, 0x89,
0x25, 0xfa, 0xbb, 0x0b, 0x02, 0x10, 0x0a, 0x64, 0x7b,
0xce, 0x9a, 0x95, 0x6f, 0xc4, 0x47, 0xf5, 0x41, 0xf4,
0xa8, 0x2f, 0xf1, 0xd8, 0x56, 0x38, 0x3c, 0xeb, 0x34,
0x63, 0x48, 0x9d, 0xef, 0x07, 0xff, 0x01, 0x49, 0x49,
0xd5, 0x9a, 0xda ),
CIPHERTEXT ( 0x0e, 0x11, 0xaf, 0xe5, 0xba, 0xa1, 0xdc, 0xc2, 0x6f,
0xb4, 0xce, 0x1a, 0x14, 0x53, 0x01, 0x29, 0xa1, 0x08,
0xed, 0xc6, 0x7b, 0x51, 0x1f, 0x97, 0x99, 0x74, 0xd3,
0x1d, 0x07, 0x97, 0x4d, 0xc6, 0xba, 0x4a, 0x1e, 0x7b,
0x9c, 0xdc, 0xc0, 0x66, 0xe7, 0x7e, 0x70, 0xa5, 0x14,
0x7f, 0xfd, 0xc6, 0x5b, 0x29, 0xbc, 0x52, 0x59, 0x22,
0x6e, 0xdc, 0x9a, 0x27, 0x9f, 0x7a, 0x43, 0x75, 0xdd,
0xd3, 0x9e, 0x0d, 0x3f, 0xdb, 0xcb, 0x08, 0x4b, 0xd4,
0xdc, 0x26, 0xa4, 0x89, 0xd3, 0xaf, 0xc4, 0xbe, 0x4f,
0xb2, 0x0d, 0xaa, 0x00, 0xb7, 0x2f, 0xbd, 0x66, 0x2d,
0xab, 0xe4, 0x55, 0xcd, 0x47, 0x85, 0x9b, 0xd3, 0xd3,
0x82, 0x84, 0xbc, 0xcd, 0x8e, 0x7f, 0x8d, 0x32, 0x09,
0x48, 0x05, 0x4f, 0x17, 0x7f, 0x75, 0xa9, 0x4e, 0x0b,
0x13, 0x93, 0x5e, 0x59, 0x58, 0xc1, 0x59, 0x02, 0x9d,
0x77, 0x6c, 0x4d, 0x58, 0x60, 0x88, 0xb7, 0x62, 0x56,
0x3e, 0x82, 0x34, 0x3f, 0xa8, 0xa6, 0xbe, 0xda, 0x38,
0x07, 0x1b, 0xf1, 0xcd, 0xaf, 0xce, 0x3f, 0x50, 0x3d,
0x8f, 0xc1, 0xa9, 0x24, 0x78, 0xb7, 0xf6, 0x30, 0x34,
0x1b, 0x0b, 0xb1, 0x2d, 0x4e, 0x5b, 0x59, 0xd6, 0x0e,
0xac, 0x69, 0xc9, 0x52, 0x14, 0xde, 0xcb, 0xd4, 0x9a,
0xa6, 0x84, 0x71, 0x66, 0x49, 0x75, 0x2d, 0xe3, 0x54,
0x66, 0xab, 0xfa, 0x39, 0x36, 0x14, 0x86, 0xa3, 0x57,
0x2f, 0x61, 0xe3, 0x41, 0x8d, 0x74, 0xe6, 0xd1, 0x19,
0x2f, 0x07, 0x43, 0x8c, 0xe5, 0x41, 0xae, 0x96, 0xf7,
0x3d, 0xaf, 0x0e, 0xfb, 0x8c, 0x4a, 0x5a, 0x7b, 0xb4,
0x4a, 0x6d, 0x0b, 0xfc, 0x70, 0x7e, 0xb0, 0xff, 0x9b,
0x62, 0xc1, 0x57, 0xf7, 0x49, 0xf3, 0xa3, 0xa6, 0xa5,
0x8f, 0x4c, 0xf2, 0x71, 0x46, 0xb5, 0xd8, 0x7f, 0x50,
0x1d, 0x7f, 0x72 ),
AUTH ( 0xee, 0x53, 0x09, 0x2e, 0x3b, 0x28, 0xd6, 0x14, 0x88, 0xd9,
0xcb, 0x59, 0xa7, 0x18, 0xa4, 0xfa ) );
/* AES-GCM test case 196 */
CIPHER_TEST ( wycheproof_aes_gcm_ff5845cf, &aes_gcm_algorithm,
KEY ( 0xa5, 0xe1, 0x66, 0x74, 0x00, 0xc4, 0x97, 0xa9, 0x27, 0xed,
0xdb, 0xf3, 0x75, 0x66, 0xd2, 0x95, 0xa0, 0x9e, 0x1f, 0x06,
0x1b, 0x24, 0xaf, 0x46 ),
IV ( 0xc8, 0xca, 0xc0, 0xa0, 0x2a, 0x3b, 0x32, 0x76, 0xc3, 0x57,
0xc2, 0xb3 ),
ADDITIONAL(),
PLAINTEXT ( 0x07, 0x13, 0x39, 0x89, 0xd3, 0xc4, 0x2b, 0x89, 0x75,
0x5d, 0x10, 0xfb, 0x60, 0xec, 0x4c, 0x1b, 0x22, 0x52,
0x1a, 0x11, 0xa3, 0x04, 0xf0, 0x0c, 0xfd, 0x7c, 0xc5,
0x9a, 0xb5, 0x47, 0x79, 0x17, 0x80, 0x08, 0xd0, 0x5e,
0xf2, 0x96, 0x0e, 0x1d, 0x2b, 0x70, 0x11, 0xfa, 0x7a,
0x8f, 0xb6, 0xbb, 0x27, 0xb0, 0xbc, 0x54, 0xfb, 0x50,
0x90, 0x84, 0xed, 0x7a, 0x5a, 0x69, 0x7b, 0x4d, 0x72,
0xfe, 0x24, 0xfd, 0xa3, 0xda, 0x0a, 0x5a, 0xc5, 0x19,
0x8b, 0xc1, 0xdb, 0x4b, 0x91, 0xea, 0xc9, 0xc1, 0x85,
0xad, 0xe8, 0x10, 0x03, 0x83, 0x46, 0xa2, 0x33, 0x5a,
0xa1, 0xcc, 0xb0, 0xeb, 0x81, 0xd3, 0x5a, 0x07, 0xba,
0x0b, 0x89, 0xb4, 0x87, 0x0c, 0xdc, 0xcd, 0x36, 0x7b,
0xc3, 0xd7, 0xed, 0x1e, 0xe3, 0xf2, 0x42, 0x30, 0x8b,
0x29, 0xde, 0xbd, 0x9f, 0x12, 0xe4, 0xe6, 0xdc, 0xa7,
0x4a, 0x3f, 0x42, 0xf8, 0x48, 0x99, 0x03, 0x5f, 0x89,
0x9e, 0x4d, 0x0f, 0x9c, 0xcd, 0x1c, 0x30, 0xc8, 0xb3,
0x2d, 0x21, 0x77, 0x9d, 0x55, 0x5f, 0x0a, 0x03, 0xbd,
0x5d, 0x5c, 0x5e, 0x44, 0x47, 0xa9, 0x20, 0x98, 0xa1,
0x0c, 0x72, 0x11, 0x6b, 0x97, 0x72, 0x2c, 0x70, 0x19,
0xda, 0x23, 0xf6, 0x32, 0x0f, 0x47, 0xed, 0xb9, 0xc9,
0x5c, 0x1b, 0xa6, 0xb3, 0x7a, 0xcc, 0x02, 0xd6, 0x3a,
0xcc, 0x50, 0xdd, 0xd0, 0xd2, 0x69, 0x69, 0x25, 0x60,
0x03, 0x01, 0x1d, 0x7f, 0x4c, 0xdc, 0x2a, 0xb5, 0xc2,
0x4e, 0x25, 0x6d, 0xa6, 0x48, 0xed, 0x1b, 0x0e, 0xb5,
0x6c, 0x95, 0xc5, 0x7a, 0x7f, 0xcc, 0xdd, 0x23, 0x45,
0xf3, 0x59, 0xc0, 0xbc, 0xe6, 0xa2, 0xf0, 0xf4, 0x9d,
0x71, 0x84, 0xa0, 0x02, 0x3d, 0xd0, 0x5f, 0x2e, 0xec,
0xbc, 0xc7, 0x0f, 0xd0, 0xfd, 0xba, 0xe0, 0x6f, 0x42,
0x55, 0x90, 0xdb, 0x38 ),
CIPHERTEXT ( 0x84, 0x1c, 0xa3, 0x04, 0x34, 0x55, 0xe4, 0x80, 0x15,
0x3a, 0xf6, 0x2a, 0x17, 0xce, 0x90, 0x4f, 0x08, 0x43,
0x90, 0x61, 0x20, 0x22, 0x93, 0x84, 0xc9, 0xbb, 0x20,
0x13, 0xb4, 0x41, 0x69, 0x5d, 0xf2, 0x49, 0x87, 0xd3,
0x7d, 0xa6, 0xb2, 0x03, 0x07, 0xfc, 0xea, 0xd5, 0x84,
0x19, 0xb1, 0x1e, 0x24, 0xf7, 0xb5, 0xf2, 0x3a, 0x13,
0xfd, 0xac, 0x75, 0x55, 0x18, 0x9b, 0x64, 0x5a, 0xe9,
0x73, 0xf2, 0x72, 0x50, 0x10, 0xf7, 0x79, 0x63, 0x9d,
0x87, 0x0e, 0xbf, 0x38, 0x2b, 0x0d, 0xf7, 0xaa, 0x97,
0xe2, 0x02, 0xd9, 0xaa, 0x32, 0x69, 0xf4, 0xf5, 0x77,
0xb1, 0xe1, 0xdd, 0x00, 0x1c, 0xd1, 0xac, 0x6d, 0xbd,
0xd3, 0x96, 0x8b, 0x2f, 0x2f, 0x58, 0x6f, 0x94, 0x8d,
0x64, 0x29, 0x76, 0xba, 0xf7, 0x48, 0x12, 0x1f, 0x97,
0x20, 0xc6, 0xa8, 0xac, 0x86, 0xab, 0x21, 0xec, 0xc1,
0xde, 0xad, 0x08, 0xf0, 0xdb, 0xd0, 0xf1, 0x96, 0x5c,
0xc6, 0xbb, 0xc4, 0xf2, 0x15, 0xa5, 0x3a, 0x63, 0x0d,
0x28, 0x48, 0xd7, 0x0c, 0x03, 0x9f, 0x98, 0x69, 0xea,
0xc9, 0x11, 0xbc, 0x04, 0x9f, 0x8a, 0x47, 0x0f, 0x76,
0x66, 0x1b, 0xcf, 0xd0, 0x5c, 0x07, 0xe0, 0x63, 0x17,
0xa1, 0x16, 0x3b, 0x20, 0x8b, 0x86, 0x26, 0xeb, 0x56,
0x16, 0xfa, 0x5d, 0x0e, 0xf6, 0xb8, 0x77, 0xe4, 0x29,
0x0e, 0xc0, 0xb0, 0xe3, 0xea, 0xa5, 0x01, 0x22, 0x21,
0x9a, 0x0c, 0x60, 0xb2, 0xfd, 0x17, 0x62, 0x9e, 0x91,
0x96, 0x20, 0x09, 0x16, 0x1b, 0x66, 0x87, 0xa0, 0xe6,
0x81, 0x0e, 0x0a, 0x40, 0xc9, 0xf7, 0xf6, 0x17, 0xd0,
0x4c, 0x0d, 0x71, 0xe0, 0x37, 0x71, 0xef, 0x8d, 0xa5,
0xbc, 0x95, 0x0c, 0x7c, 0x7d, 0xfc, 0x61, 0xcb, 0xac,
0xf1, 0x1b, 0x3c, 0x14, 0x33, 0x10, 0x95, 0x6c, 0x77,
0x36, 0xc9, 0x66, 0x76 ),
AUTH ( 0x46, 0xe9, 0x21, 0xd8, 0xfb, 0x4f, 0xa0, 0x31, 0x83, 0xad,
0x42, 0x7b, 0x30, 0x2c, 0x16, 0x5d ) );
/* AES-GCM test case 197 */
CIPHER_TEST ( wycheproof_aes_gcm_2b7f8f4f, &aes_gcm_algorithm,
KEY ( 0xe6, 0x02, 0x18, 0x8a, 0xbf, 0x6a, 0x91, 0xf3, 0xe2, 0x58,
0x83, 0x8c, 0xea, 0x6b, 0xef, 0xef, 0xfc, 0xf6, 0x25, 0x7a,
0x50, 0x9c, 0x3e, 0x95 ),
IV ( 0x9e, 0x35, 0xd3, 0xef, 0x18, 0x97, 0xc5, 0xfe, 0x3f, 0x64,
0x72, 0x04 ),
ADDITIONAL(),
PLAINTEXT ( 0x3b, 0x9a, 0x6e, 0xdc, 0x44, 0x84, 0x8c, 0x07, 0x23,
0x41, 0xfd, 0x4a, 0xf5, 0x1e, 0xc1, 0x16, 0xac, 0x32,
0x8f, 0x69, 0xcc, 0x5a, 0x33, 0x54, 0xe4, 0x92, 0x99,
0xfb, 0x2e, 0x5d, 0x22, 0xfa, 0x00, 0x84, 0xe3, 0x0b,
0x36, 0xec, 0xaf, 0x54, 0x30, 0x93, 0x97, 0xb2, 0xb4,
0x98, 0xd6, 0x86, 0x08, 0x7f, 0x34, 0x57, 0x69, 0x8c,
0x36, 0x39, 0xe7, 0x3c, 0xa1, 0x8c, 0x78, 0xc3, 0xe0,
0x21, 0xd6, 0x73, 0x98, 0x6c, 0xfc, 0x2c, 0xeb, 0x4d,
0x07, 0xe6, 0x69, 0x71, 0xe9, 0x76, 0xf5, 0x8f, 0x03,
0x36, 0xf8, 0x2c, 0x7f, 0xc0, 0xd5, 0x2d, 0x66, 0x61,
0x0f, 0x26, 0xca, 0x3b, 0xfe, 0x53, 0xc0, 0xb0, 0x1c,
0xf7, 0xc2, 0x07, 0x30, 0x6d, 0xb9, 0x04, 0xc1, 0xad,
0x30, 0x0a, 0xb9, 0x5c, 0x56, 0xfd, 0xe8, 0x20, 0xa8,
0xed, 0xd2, 0x56, 0xf2, 0xb9, 0x90, 0x6b, 0x31, 0x2b,
0xf7, 0xaf, 0x5e, 0xf4, 0xa8, 0x06, 0xf6, 0x18, 0xdd,
0xfc, 0xb6, 0x71, 0x79, 0xb0, 0x3f, 0xff, 0x80, 0xa2,
0x45, 0xc3, 0x8d, 0x8f, 0x4c, 0xff, 0x28, 0x75, 0xb7,
0x1a, 0x0b, 0xf6, 0x91, 0x29, 0xca, 0xf9, 0x71, 0x21,
0x46, 0x2e, 0x05, 0x01, 0xec, 0x65, 0x74, 0xed, 0xe9,
0x47, 0x06, 0xf4, 0xa0, 0x4d, 0x2f, 0xb3, 0x01, 0xd4,
0x15, 0xc2, 0x2e, 0xa1, 0x21, 0x57, 0xd2, 0xe9, 0x19,
0xbc, 0x7a, 0x01, 0x69, 0xa5, 0xad, 0x5c, 0x7b, 0xb5,
0x76, 0x1a, 0x85, 0x31, 0xab, 0xbe, 0x77, 0xd6, 0x6a,
0x48, 0x71, 0xb3, 0xf2, 0x7a, 0x71, 0x70, 0xf0, 0x99,
0x04, 0x4b, 0x9f, 0xdc, 0x50, 0xa8, 0xcb, 0x3b, 0x89,
0x42, 0x52, 0xa5, 0x01, 0xcc, 0x89, 0x6a, 0xc4, 0x79,
0x3b, 0xdb, 0x47, 0x8b, 0xb1, 0xcb, 0x99, 0xc0, 0x23,
0x41, 0xd7, 0x23, 0x8d, 0xd8, 0xd5, 0x93, 0xcf, 0xda,
0x02, 0xf7, 0xd5, 0x20, 0xd7 ),
CIPHERTEXT ( 0x16, 0x71, 0x83, 0x66, 0x16, 0x75, 0x67, 0x76, 0x25,
0xbe, 0xd2, 0xd5, 0xf5, 0x5f, 0x72, 0x8d, 0xab, 0x80,
0xd7, 0xf0, 0x6f, 0x62, 0x9d, 0x99, 0xe5, 0x8b, 0x45,
0x06, 0x9f, 0xe9, 0xd7, 0x42, 0x8e, 0x89, 0x61, 0x56,
0x1b, 0x11, 0x24, 0x5c, 0x70, 0x9a, 0xc9, 0xeb, 0xb5,
0xc5, 0x9a, 0xc2, 0xa8, 0x9d, 0x83, 0x75, 0xd8, 0xa0,
0x1d, 0x84, 0x9c, 0x77, 0x33, 0xa1, 0xb4, 0x82, 0x52,
0x99, 0x27, 0xe3, 0xf1, 0xa1, 0xa5, 0x3f, 0x63, 0xa4,
0xbe, 0x08, 0xa1, 0x1c, 0x94, 0x1c, 0x63, 0x4c, 0xd4,
0x03, 0x73, 0xc4, 0x2f, 0xfb, 0x24, 0x49, 0xc6, 0x41,
0xbc, 0x9e, 0x39, 0xea, 0xfb, 0xcf, 0x9c, 0x0f, 0xba,
0x67, 0x7e, 0x36, 0x49, 0x6f, 0x73, 0xfc, 0x70, 0xaa,
0x09, 0x72, 0x22, 0x49, 0x01, 0xab, 0x04, 0xb0, 0xa1,
0x96, 0xab, 0x74, 0x52, 0x62, 0x02, 0x1b, 0x23, 0x13,
0xa8, 0x46, 0x41, 0x87, 0xfe, 0xce, 0xc4, 0x3a, 0xdb,
0x40, 0x62, 0x58, 0xbd, 0xdc, 0xd8, 0xc9, 0xd0, 0x4d,
0xc2, 0xae, 0x29, 0xe6, 0x5d, 0x54, 0xa8, 0x9d, 0xd0,
0xf1, 0x75, 0x2d, 0x6d, 0x95, 0x0d, 0xbf, 0x7d, 0xa4,
0xde, 0xa0, 0xa7, 0xb9, 0x46, 0x55, 0x79, 0x50, 0x3f,
0xc8, 0xec, 0x44, 0x51, 0xf4, 0xb3, 0x98, 0x78, 0xac,
0x47, 0x54, 0xa1, 0xaa, 0xf7, 0xb0, 0xb7, 0x3f, 0xee,
0x11, 0x21, 0x3c, 0xb8, 0xe6, 0x01, 0xfc, 0x60, 0x39,
0x39, 0x3f, 0x72, 0xe0, 0xe0, 0x79, 0xee, 0x97, 0xec,
0xc6, 0x10, 0x24, 0x17, 0x57, 0xda, 0x2d, 0xb2, 0xf5,
0x1d, 0x5e, 0xd1, 0x21, 0x48, 0x15, 0x40, 0xef, 0xf4,
0x72, 0x87, 0x74, 0x4d, 0xac, 0x43, 0x37, 0x5c, 0x4f,
0x48, 0xa4, 0x6a, 0xf7, 0x01, 0x90, 0x45, 0x3a, 0x17,
0xc3, 0xc7, 0x8d, 0x73, 0x5b, 0xa1, 0xd1, 0xfc, 0x76,
0xa3, 0x30, 0xe6, 0xcb, 0xed ),
AUTH ( 0xc7, 0x20, 0x35, 0x31, 0x4f, 0x43, 0xd2, 0x56, 0xf8, 0xd8,
0x45, 0xeb, 0x69, 0x6b, 0xd9, 0x43 ) );
/* AES-GCM test case 198 */
CIPHER_TEST ( wycheproof_aes_gcm_d993a57b, &aes_gcm_algorithm,
KEY ( 0x62, 0xd3, 0x47, 0x58, 0x7e, 0xf0, 0xd5, 0x8d, 0x6c, 0xc3,
0xba, 0x2a, 0xe7, 0xaf, 0x65, 0x57, 0x04, 0xac, 0x4d, 0xab,
0xc1, 0xcf, 0xb2, 0x9c ),
IV ( 0x34, 0xe6, 0xe2, 0x96, 0xf7, 0x62, 0x59, 0x99, 0xbc, 0x9f,
0x02, 0xe3 ),
ADDITIONAL(),
PLAINTEXT ( 0x82, 0x3a, 0x00, 0x50, 0x97, 0xd7, 0x81, 0x1a, 0x4a,
0x81, 0x63, 0x68, 0x35, 0x71, 0x66, 0x70, 0xd7, 0xe2,
0x39, 0xfe, 0x02, 0x59, 0x78, 0xd9, 0x45, 0x34, 0x61,
0xd8, 0xb0, 0x89, 0x55, 0xfc, 0x9f, 0x92, 0xf2, 0x97,
0xf0, 0x47, 0x41, 0x77, 0xe9, 0xf7, 0x30, 0xcd, 0xe7,
0x14, 0x46, 0x7f, 0xd3, 0x76, 0xb3, 0x70, 0xed, 0x96,
0x72, 0x54, 0x97, 0x08, 0x3f, 0x0f, 0xb7, 0xde, 0x9d,
0xe1, 0x03, 0x7f, 0x50, 0x94, 0xbb, 0x9c, 0xce, 0x8a,
0x7e, 0xf3, 0x13, 0x7c, 0xfe, 0x31, 0x82, 0x4a, 0xc1,
0xf6, 0x41, 0xaf, 0x92, 0xe2, 0x80, 0x6c, 0x92, 0xe3,
0xc5, 0x8e, 0x66, 0x2c, 0x89, 0xcc, 0x25, 0x9b, 0x3d,
0xa6, 0x6b, 0xb2, 0x78, 0xa7, 0xdc, 0x08, 0xde, 0x92,
0x40, 0xee, 0xef, 0x71, 0x51, 0xf8, 0x8e, 0xc4, 0x65,
0xf2, 0x58, 0xec, 0xc0, 0x1b, 0x7a, 0x2c, 0xdb, 0x3e,
0x18, 0x8e, 0xeb, 0x68, 0x98, 0x13, 0xc9, 0xfb, 0x41,
0x99, 0xb8, 0xad, 0x62, 0xcc, 0x26, 0xaf, 0x1f, 0x52,
0xf1, 0xf3, 0xaa, 0x02, 0xef, 0x3b, 0x60, 0x5d, 0xee,
0xb0, 0xf2, 0x0a, 0x8f, 0x00, 0xa9, 0xf9, 0xca, 0x3d,
0x15, 0x3e, 0x51, 0xd8, 0x1c, 0xca, 0xfa, 0x07, 0x67,
0x9b, 0x43, 0x84, 0x50, 0xd0, 0xd4, 0x6e, 0x45, 0x7d,
0x53, 0x23, 0xd3, 0xad, 0x38, 0x53, 0x00, 0x93, 0x0e,
0x22, 0x25, 0x17, 0xb8, 0x62, 0xdd, 0xf8, 0xb1, 0x25,
0x3d, 0xf0, 0xe2, 0x0f, 0x51, 0xea, 0xe6, 0x76, 0xcf,
0x83, 0x69, 0x2b, 0x6a, 0xe6, 0xd4, 0xcf, 0xe3, 0x5b,
0xcf, 0x43, 0xd2, 0xce, 0xc2, 0xed, 0xfb, 0x72, 0xbf,
0x92, 0x19, 0xe8, 0xb0, 0x5a, 0xa6, 0x1f, 0x90, 0x0c,
0x80, 0x4e, 0xba, 0x59, 0xc1, 0x00, 0x7f, 0x2d, 0xda,
0xda, 0xb3, 0xe1, 0xda, 0xb4, 0x48, 0x5e, 0x5c, 0x77,
0xf7, 0xa9, 0x88, 0x09, 0x5c, 0x5a, 0x44, 0x7c, 0x7c,
0xd7, 0xec, 0xef, 0xa2, 0x65, 0x27, 0xdf, 0xcf, 0x8b,
0x46, 0x15, 0x46, 0x3f, 0x12, 0xe3, 0xca, 0x69, 0x10,
0xa8, 0xa4, 0x1b, 0x07, 0xac, 0x4f, 0x58, 0xe5, 0x21,
0x94, 0x59, 0x95, 0x41, 0x31, 0xc8, 0x5f, 0x8a, 0xa7,
0x0b, 0x94, 0x30, 0x38, 0xe1, 0xd6, 0xe9, 0x90, 0x9b,
0xb6, 0x47, 0x70, 0x7b, 0xf2, 0x6a, 0x5c, 0xec, 0xed,
0x87, 0x29, 0x8e, 0x4f, 0x4e, 0x61, 0x6c, 0x0c, 0xc1,
0xed, 0xeb, 0x8e, 0x0c, 0x5a, 0x6d, 0x21, 0x49, 0x18,
0xcd, 0x24, 0x5e, 0x5d, 0x7d, 0x38, 0xd8, 0xc8, 0xec,
0x14, 0x1d, 0xdb, 0xba, 0x35, 0x4c, 0xd2, 0xd9, 0xb7,
0xdd, 0x21, 0x13, 0x2d, 0x9e, 0x4a, 0xf5, 0x8f, 0x4b,
0x6b, 0x69, 0xee, 0xab, 0x9a, 0xc0, 0xeb, 0xd6, 0x16,
0xf5, 0x64, 0xbb, 0x4d, 0x5a, 0x38, 0x23, 0x2d, 0x03,
0xe7, 0xfe, 0x62, 0xed, 0x70, 0x0c, 0x77, 0x61, 0xba,
0x25, 0xa7, 0x84, 0xc4, 0xb0, 0xc4, 0x80, 0x4e, 0xb5,
0x00, 0x17, 0x5e, 0xeb, 0x8a, 0x58, 0x43, 0xe6, 0x71,
0x04, 0xe3, 0xd1, 0xe3, 0x74, 0x0a, 0xcd, 0x02, 0x25,
0x27, 0xcf, 0xf1, 0xc9, 0x82, 0x87, 0x4f, 0xe9, 0x56,
0x87, 0x28, 0x18, 0xa7, 0x3b, 0x8c, 0xa4, 0x78, 0x2b,
0xdb, 0xb2, 0xd1, 0x7a, 0x56, 0x4d, 0xe7, 0x07, 0x0b,
0x51, 0xe0, 0xa8, 0x9e, 0xc1, 0x83, 0x4d, 0xfc, 0x74,
0xf2, 0x3d, 0xff, 0xdf, 0xc4, 0x78, 0xb9, 0x2b, 0x25,
0xb2, 0x6b, 0xc8, 0xf8, 0xa5, 0x52, 0x67, 0x03, 0x1d,
0x98, 0x27, 0x8b, 0x69, 0x1d, 0x4d, 0x3e, 0x6f, 0x70,
0x66, 0x70, 0xd3, 0xa2, 0x97, 0x74, 0xcf, 0x45, 0x17,
0xad, 0x83, 0x2b, 0x63, 0x9f, 0x94, 0x4e, 0x10, 0x16,
0x94, 0xaf, 0x69, 0x01, 0xd0, 0x21, 0xa9, 0xa7, 0xc6,
0x3c, 0xbc, 0xc5, 0x43, 0x85, 0x44, 0x60 ),
CIPHERTEXT ( 0xed, 0x35, 0xbb, 0xdc, 0x40, 0xa2, 0xfd, 0x24, 0x92,
0xb1, 0x10, 0x6d, 0x11, 0x8d, 0x0c, 0x26, 0x5b, 0xec,
0x23, 0xba, 0x55, 0xc5, 0x64, 0x85, 0x37, 0xfd, 0x88,
0xa5, 0xd2, 0xc2, 0x54, 0xe5, 0x76, 0x46, 0x02, 0xa6,
0xe4, 0x0c, 0xd4, 0xba, 0x5c, 0x0c, 0xaa, 0x4a, 0x11,
0x41, 0x4a, 0xc1, 0xbe, 0x35, 0x2c, 0x4a, 0x73, 0x38,
0x50, 0x5d, 0x85, 0x4f, 0x34, 0xb8, 0x9f, 0xc7, 0x23,
0xd6, 0xa3, 0xd7, 0x03, 0x69, 0xcd, 0x1b, 0xf2, 0xd1,
0x90, 0x06, 0x5e, 0x3d, 0x15, 0xa4, 0xa9, 0x3f, 0xc8,
0x42, 0xe1, 0xeb, 0x03, 0xd5, 0x80, 0xbf, 0x50, 0x02,
0x70, 0xe8, 0x8d, 0x3f, 0x62, 0x4c, 0xf2, 0x4a, 0xdb,
0xb1, 0x18, 0xed, 0x7f, 0xfa, 0xe7, 0x32, 0x93, 0xc8,
0xd3, 0x5f, 0xe3, 0x60, 0xee, 0x26, 0x3c, 0xcb, 0x41,
0xda, 0xdc, 0x5b, 0x75, 0xc8, 0x02, 0x4c, 0xef, 0x1a,
0x3b, 0x79, 0xaf, 0x12, 0xdb, 0x46, 0x41, 0xf2, 0x5e,
0x9d, 0x9a, 0x25, 0xdc, 0x39, 0x06, 0x4f, 0x2f, 0x9c,
0x5c, 0x96, 0xc5, 0x4a, 0x9d, 0x29, 0xc8, 0xc9, 0xca,
0xf7, 0x32, 0x1e, 0x27, 0xde, 0x79, 0xc9, 0x8c, 0x77,
0xf0, 0x26, 0xf2, 0x45, 0x1a, 0x18, 0xac, 0xa3, 0x84,
0x7e, 0x2e, 0x92, 0xf2, 0x14, 0x40, 0xb3, 0x74, 0x45,
0x69, 0x56, 0x10, 0x02, 0x07, 0x62, 0xc6, 0x56, 0xec,
0x2d, 0x20, 0x67, 0xa8, 0x54, 0xc2, 0x9a, 0x69, 0xb9,
0xd0, 0x5a, 0x02, 0x28, 0xb3, 0x89, 0xeb, 0xf0, 0x09,
0xa7, 0xd2, 0x88, 0xba, 0x21, 0x72, 0x4f, 0x77, 0x33,
0xc8, 0x17, 0xa9, 0x95, 0x75, 0x33, 0x59, 0x33, 0x5c,
0x92, 0x8d, 0x44, 0x26, 0xdc, 0x2c, 0x6d, 0x22, 0xa6,
0x10, 0x34, 0x89, 0x2f, 0xed, 0x04, 0xa1, 0x71, 0xbd,
0x29, 0x5e, 0x31, 0xf1, 0xf3, 0x3f, 0x5c, 0x95, 0x5f,
0xcc, 0x2a, 0x6e, 0xd4, 0x60, 0x51, 0xf6, 0x9f, 0x11,
0x60, 0x29, 0x8b, 0x0d, 0xe6, 0xbb, 0xfd, 0xb5, 0x0e,
0x10, 0xe4, 0x7d, 0x4c, 0x7d, 0x66, 0x4c, 0x3d, 0xd6,
0x42, 0xf6, 0x15, 0xf3, 0x2f, 0xf3, 0x24, 0x65, 0x93,
0xd2, 0x9b, 0x99, 0x39, 0x5b, 0x28, 0x0a, 0xac, 0x02,
0xd5, 0x38, 0x97, 0xba, 0xa0, 0xf9, 0x5b, 0x91, 0x9f,
0xaf, 0x94, 0xdc, 0xf4, 0x3f, 0x38, 0xe0, 0x37, 0xac,
0xad, 0xf5, 0x6a, 0x1f, 0x7f, 0x1a, 0x20, 0xde, 0x91,
0x48, 0xed, 0x15, 0x27, 0xb6, 0x8c, 0x93, 0x91, 0x9d,
0xde, 0xb6, 0x3d, 0x38, 0x69, 0x08, 0xed, 0x15, 0x97,
0x97, 0xa3, 0x11, 0xbf, 0x19, 0xa7, 0x20, 0x48, 0xbb,
0x2f, 0xf3, 0xf4, 0xb2, 0x7d, 0x46, 0x34, 0x1a, 0xa4,
0xaa, 0x62, 0x2c, 0xb0, 0xcf, 0x3a, 0xdf, 0xbd, 0xcc,
0x42, 0xab, 0x21, 0x1b, 0xde, 0xc5, 0x8a, 0x72, 0xfe,
0x36, 0xf9, 0x97, 0xc4, 0x9b, 0x14, 0x79, 0x96, 0x26,
0x5b, 0xb2, 0xee, 0x55, 0x55, 0xf2, 0xce, 0xca, 0x4e,
0x01, 0x6a, 0xf6, 0xc0, 0x69, 0xb0, 0x3f, 0x22, 0xad,
0x2c, 0xab, 0x55, 0x5a, 0xf4, 0xe2, 0xdd, 0x14, 0x09,
0x56, 0x67, 0x45, 0xe1, 0xe8, 0x9a, 0x6d, 0xfd, 0xb6,
0xf8, 0xa0, 0xe7, 0x59, 0xc0, 0x9d, 0x57, 0x76, 0x8f,
0x8b, 0x47, 0x40, 0x6a, 0x3b, 0x9b, 0x32, 0x46, 0xc9,
0x0f, 0xa1, 0x2e, 0x60, 0x76, 0xb0, 0x1a, 0xd0, 0x2e,
0x77, 0x52, 0xbf, 0x10, 0x42, 0x4a, 0x10, 0x3b, 0x3e,
0x56, 0x63, 0x3a, 0xdf, 0x55, 0xb9, 0x7f, 0x0a, 0x18,
0x82, 0x3e, 0xf4, 0xac, 0x26, 0xc9, 0x2f, 0x7c, 0xbd,
0xbf, 0xb5, 0x44, 0x79, 0x12, 0x7f, 0xa9, 0x8c, 0x8c,
0x5b, 0x73, 0x25, 0xdf, 0x4a, 0x7c, 0x2b, 0xcc, 0xdf,
0xe0, 0x7d, 0x92, 0x00, 0xcd, 0x95, 0x3c, 0x01, 0xd4,
0x12, 0x90, 0xc0, 0xb1, 0x57, 0xa6, 0xc2 ),
AUTH ( 0x8e, 0x88, 0x35, 0x70, 0x21, 0x9f, 0xc3, 0x8c, 0xfa, 0xa0,
0x9f, 0xe2, 0x70, 0xa3, 0x56, 0x04 ) );
/* AES-GCM test case 199 */
CIPHER_TEST ( wycheproof_aes_gcm_009e52d4, &aes_gcm_algorithm,
KEY ( 0xf2, 0x08, 0xe9, 0x0e, 0x0a, 0x08, 0xf2, 0x22, 0xc8, 0xac,
0x3d, 0x4a, 0x0c, 0x8a, 0x81, 0x85, 0xf3, 0xf4, 0x77, 0xf1,
0xa4, 0x3f, 0xfc, 0xe6 ),
IV ( 0x60, 0x3d, 0xdb, 0xeb, 0x61, 0x2b, 0x71, 0xb1, 0xd0, 0x8e,
0xbf, 0x40 ),
ADDITIONAL(),
PLAINTEXT ( 0xbb, 0xae, 0x93, 0x80, 0x2b, 0xe4, 0x40, 0x78, 0x15,
0xf6, 0x7e, 0x49, 0x62, 0xb9, 0xc3, 0x94, 0xb2, 0xfc,
0x7c, 0x94, 0xe6, 0xc1, 0x0a, 0x42, 0x46, 0x5f, 0x45,
0x36, 0x72, 0x10, 0x0b, 0xe0, 0xd3, 0x58, 0xff, 0x7b,
0x0b, 0x28, 0x5c, 0xbf, 0xce, 0x15, 0xf3, 0xa9, 0x56,
0xa8, 0xc2, 0x0f, 0x33, 0xa9, 0xd8, 0x7b, 0x12, 0x02,
0xb2, 0x49, 0xcf, 0x3f, 0x21, 0x97, 0xfd, 0x5d, 0x7f,
0x8b, 0xce, 0xe8, 0x0d, 0x41, 0x60, 0xd0, 0xa7, 0xc1,
0xe8, 0xce, 0x74, 0x34, 0x36, 0x5a, 0x9e, 0x5a, 0xa4,
0x13, 0xb1, 0x92, 0x3d, 0x96, 0x07, 0x3e, 0xac, 0x3f,
0x68, 0xf8, 0xb5, 0xa2, 0xbb, 0xf2, 0x3a, 0x9a, 0xe1,
0x3f, 0x7f, 0x13, 0xd6, 0x25, 0xc4, 0x0b, 0x42, 0xab,
0x06, 0x77, 0x1c, 0x1e, 0xc0, 0x09, 0x60, 0xc2, 0x46,
0x53, 0x36, 0xb8, 0x55, 0xcb, 0x55, 0x4d, 0x3d, 0xb6,
0x45, 0xf0, 0xb7, 0xba, 0x2f, 0x4c, 0x64, 0xe0, 0xf6,
0x52, 0xbd, 0x79, 0x02, 0x84, 0x3c, 0xc4, 0x3f, 0x8a,
0xa8, 0x68, 0x1c, 0x83, 0x8d, 0xd3, 0x15, 0x73, 0x67,
0x9c, 0x34, 0x33, 0x24, 0x6a, 0x02, 0x4c, 0x66, 0x94,
0xb2, 0xed, 0xbe, 0x35, 0xd1, 0x2a, 0xd0, 0x21, 0x9d,
0x55, 0x69, 0x62, 0xe6, 0x8a, 0x00, 0xb0, 0x58, 0x6a,
0x36, 0xf1, 0xef, 0xe7, 0x21, 0x05, 0x5b, 0x3a, 0xc8,
0x10, 0x71, 0xa6, 0xcb, 0x62, 0x58, 0x4a, 0x97, 0x93,
0x16, 0xaa, 0xdf, 0x22, 0x0c, 0x19, 0xd3, 0x30, 0x9b,
0x6b, 0x22, 0x41, 0x5c, 0x28, 0xf6, 0xd9, 0xff, 0xeb,
0x20, 0xc8, 0x3a, 0x85, 0xd5, 0xda, 0x48, 0x01, 0x7b,
0x73, 0xcf, 0x92, 0x67, 0xd6, 0x5b, 0x32, 0xd4, 0xcb,
0xf6, 0xe1, 0x2a, 0x83, 0xbe, 0x27, 0xa2, 0xc9, 0x84,
0x8b, 0x71, 0x5c, 0x8a, 0xb7, 0xb8, 0x70, 0xa5, 0x23,
0xf5, 0xd9, 0x60, 0x27, 0x3f, 0x70, 0x35, 0x57, 0xcb,
0xf9, 0x8f, 0x4b, 0x05, 0xb9, 0xd9, 0xf7, 0x8b, 0xf4,
0xdc, 0x44, 0x75, 0xe0, 0x72, 0x22, 0xe5, 0xfb, 0xf5,
0x2e, 0xb4, 0x7c, 0x78, 0x5a, 0x84, 0xb9, 0xec, 0x48,
0xa0, 0x4b, 0xdc, 0x35, 0x18, 0x86, 0x4c, 0xd9, 0xd5,
0x78, 0xe9, 0x4a, 0x63, 0xbb, 0xc5, 0x95, 0x45, 0x4d,
0xb1, 0x03, 0x0d, 0xf7, 0xe9, 0x9c, 0x29, 0x3f, 0x0d,
0x4b, 0x33, 0xa6, 0x08, 0x2c, 0x90, 0xba, 0xd9, 0x53,
0xaf, 0xae, 0x04, 0xdb, 0x99, 0xa2, 0x0a, 0xba, 0xb2,
0x9c, 0xa8, 0x53, 0x85, 0x8e, 0x46, 0x08, 0xde, 0x8d,
0xf4, 0x83, 0x58, 0x52, 0x1e, 0xeb, 0x5b, 0x98, 0x3c,
0xa4, 0xaa, 0x0d, 0xfe, 0x3f, 0x04, 0xbb, 0xa8, 0x99,
0x3d, 0xe8, 0x4c, 0x80, 0x7a, 0xd5, 0x6e, 0x5d, 0x79,
0xb6, 0x51, 0xd5, 0xc2, 0xc9, 0xcc, 0xa4, 0x4f, 0xe4,
0x79, 0x7d, 0xe1, 0x6d, 0x71, 0x3b, 0xa4, 0x5e, 0x78,
0x97, 0xc0, 0x31, 0xb4, 0xf9, 0xae, 0x85, 0xa2, 0x19,
0xc0, 0xec, 0x49, 0xab, 0x89, 0xab, 0x19, 0x5e, 0xff,
0xd3, 0xfb, 0x9f, 0x49, 0x97, 0xa3, 0xe1, 0xa6, 0xd0,
0x66, 0xcf, 0x44, 0x37, 0xc4, 0xda, 0x39, 0xf9, 0x93,
0x9e, 0xee, 0x4b, 0x6d, 0x52, 0xc1, 0x77, 0x6e, 0xbc,
0x34, 0xce, 0x5f, 0x45, 0xf2, 0xf8, 0x70, 0x3d, 0xe2,
0x40, 0x4e, 0x1f, 0x97, 0x89, 0x3a, 0x07, 0xc8, 0x99,
0x78, 0x39, 0xc3, 0x5e, 0xed, 0xc5, 0x2e, 0x1c, 0x5a,
0x64, 0x12, 0xd3, 0xb6, 0xa9, 0x35, 0x6f, 0xf0, 0x70,
0x28, 0x45, 0x59, 0x4b, 0x58, 0x10, 0x04, 0xce, 0x83,
0x7e, 0xbf, 0x54, 0x17, 0x07, 0xdc, 0xc1, 0x18, 0x07,
0x86, 0x8d, 0x60, 0x40, 0x8c, 0x70, 0xc7, 0xab, 0xe9,
0x96, 0xdd, 0x60, 0x2b, 0xc8, 0x13, 0x95, 0x20, 0x2d,
0x06, 0x0d, 0x4f, 0x07, 0x6a, 0x43, 0x2f, 0xad ),
CIPHERTEXT ( 0xef, 0xe8, 0x49, 0xef, 0x16, 0x0f, 0x3e, 0x4c, 0x23,
0x61, 0xda, 0xdf, 0xf9, 0xe1, 0x16, 0x53, 0x45, 0x03,
0x06, 0x5f, 0x80, 0x7a, 0xcf, 0xb1, 0x41, 0xec, 0xb9,
0xe2, 0xc3, 0xf6, 0xbe, 0xce, 0xaa, 0x9c, 0x3c, 0xca,
0x56, 0x8b, 0x64, 0x6e, 0x85, 0xf7, 0x26, 0x0d, 0xbd,
0x20, 0x49, 0x5f, 0xc3, 0xe9, 0xfa, 0x53, 0x5c, 0xdb,
0xeb, 0xb2, 0x4d, 0x38, 0xb2, 0x4b, 0xbf, 0x8a, 0xc6,
0x6f, 0x35, 0x88, 0x71, 0x32, 0xe4, 0xc7, 0xfb, 0x6a,
0x7a, 0x49, 0x4f, 0x92, 0x17, 0x3f, 0x33, 0x70, 0x18,
0xcf, 0x47, 0xc3, 0xfe, 0xa5, 0x64, 0xca, 0x69, 0xf5,
0x9f, 0xb4, 0x0b, 0xe9, 0x67, 0xac, 0xa0, 0xd9, 0x5b,
0x99, 0xc9, 0xae, 0xee, 0x4a, 0xde, 0xca, 0x6e, 0xcb,
0xe3, 0x27, 0x69, 0x3d, 0x63, 0x5d, 0xfb, 0x8f, 0xac,
0xf3, 0x3c, 0xde, 0xb2, 0x6d, 0x8b, 0xae, 0x38, 0x3a,
0x0e, 0x09, 0xab, 0x76, 0x1e, 0xfe, 0x6b, 0xdf, 0xbe,
0x40, 0x57, 0x9d, 0xf2, 0xaa, 0x7f, 0x52, 0x4b, 0x99,
0xbb, 0x2d, 0x89, 0x02, 0xb4, 0x5c, 0x4e, 0x2b, 0x4a,
0x5f, 0x67, 0x3e, 0xa3, 0x2d, 0x88, 0x3d, 0x08, 0xf9,
0x10, 0x0f, 0x62, 0xe7, 0x01, 0x8d, 0xca, 0x2a, 0x8d,
0xa8, 0x14, 0x22, 0x24, 0xe6, 0x2f, 0xfb, 0x2e, 0x9e,
0x2d, 0xad, 0xc4, 0x70, 0x12, 0x92, 0x8d, 0x67, 0xbe,
0x5f, 0xd2, 0xbc, 0x0a, 0xaa, 0xa6, 0x56, 0xff, 0x53,
0xe2, 0xc2, 0x0b, 0x2f, 0x7a, 0xcb, 0xcc, 0xdb, 0x77,
0x71, 0x63, 0x26, 0xa3, 0x3a, 0xd2, 0x1c, 0x3d, 0xcf,
0x19, 0x94, 0xcb, 0x2f, 0xf1, 0x03, 0xfa, 0x10, 0x4d,
0x43, 0x6b, 0x85, 0x15, 0xb6, 0x34, 0x1f, 0xa3, 0x2c,
0x92, 0xe2, 0x42, 0x25, 0xb4, 0xc2, 0xea, 0xaf, 0x63,
0x50, 0x38, 0x47, 0x16, 0xec, 0xd3, 0x95, 0x9f, 0x51,
0x29, 0x67, 0x26, 0x8f, 0xd0, 0xa8, 0x14, 0x11, 0xd0,
0x1e, 0xb4, 0xd1, 0x13, 0xea, 0x97, 0x1f, 0x79, 0x53,
0x6b, 0x9d, 0xa1, 0x2e, 0x05, 0x43, 0xd2, 0xe5, 0xcb,
0x2d, 0x94, 0x43, 0x61, 0x46, 0x5e, 0x25, 0x5a, 0xed,
0xda, 0xa7, 0x53, 0xb6, 0x26, 0x43, 0xde, 0x5f, 0x08,
0xba, 0x89, 0x36, 0x38, 0x4d, 0x6a, 0x62, 0x92, 0xbf,
0xa5, 0xcb, 0x01, 0x4a, 0x55, 0xe8, 0x73, 0x21, 0xf1,
0xf7, 0xe2, 0xa1, 0xba, 0x26, 0xb3, 0x92, 0x98, 0x65,
0x70, 0xd8, 0xbb, 0x95, 0xcd, 0x37, 0x3c, 0x17, 0xd9,
0xb2, 0x40, 0x9d, 0x4a, 0x65, 0x9b, 0x42, 0x88, 0x17,
0x95, 0x75, 0x05, 0xe2, 0x90, 0x39, 0x72, 0xe9, 0x9b,
0xef, 0x50, 0x45, 0x07, 0xbd, 0xae, 0x03, 0x5a, 0xf6,
0x29, 0x32, 0x69, 0x3e, 0xc5, 0xe6, 0x98, 0xc4, 0x8c,
0xeb, 0xa5, 0x0e, 0x35, 0xf7, 0x00, 0xfa, 0xbd, 0xdb,
0xf9, 0x9b, 0xfe, 0xe0, 0x83, 0x5a, 0x2a, 0xb2, 0x6d,
0x19, 0x10, 0xd9, 0x6e, 0xe5, 0xe0, 0xde, 0x57, 0x85,
0x88, 0xa3, 0xee, 0xb0, 0xb8, 0x3f, 0xf8, 0x9a, 0xd0,
0x19, 0x59, 0x2d, 0x20, 0x72, 0xb5, 0xa9, 0x79, 0x03,
0x49, 0xc4, 0x2f, 0x17, 0x53, 0x2b, 0xba, 0x7c, 0x42,
0x64, 0xb4, 0x4d, 0xe0, 0x11, 0x7e, 0xcf, 0x90, 0x29,
0x87, 0x80, 0x54, 0x3c, 0xe6, 0x16, 0x01, 0x8f, 0xe3,
0xb2, 0x86, 0x15, 0xcb, 0x97, 0x13, 0x06, 0x3e, 0xa9,
0x63, 0x1f, 0x7f, 0x64, 0x05, 0xd2, 0x53, 0x6c, 0x04,
0x33, 0x45, 0x7f, 0x42, 0xee, 0xec, 0x5b, 0x72, 0x99,
0xdb, 0x8c, 0x51, 0xd3, 0x08, 0xec, 0x32, 0x18, 0x4c,
0xf2, 0x1b, 0x8e, 0x8a, 0xeb, 0xde, 0x72, 0x48, 0xbb,
0x67, 0x21, 0x28, 0xf6, 0x4e, 0x35, 0xe1, 0x02, 0x1e,
0xaf, 0xfb, 0x7b, 0x78, 0xc4, 0x81, 0xbf, 0x3f, 0xf9,
0xf8, 0x90, 0xaa, 0x65, 0xb4, 0x61, 0x5f, 0x25 ),
AUTH ( 0xa2, 0xab, 0x3c, 0x03, 0x12, 0x9d, 0xc8, 0xd5, 0x07, 0xb0,
0x06, 0x23, 0x2a, 0x33, 0x77, 0x16 ) );
/* AES-GCM test case 200 */
CIPHER_TEST ( wycheproof_aes_gcm_2eef8b22, &aes_gcm_algorithm,
KEY ( 0x70, 0x1a, 0xea, 0x28, 0x30, 0x75, 0x2a, 0x8c, 0xb9, 0x82,
0x1a, 0xf7, 0xb4, 0x38, 0x95, 0xd3, 0x9c, 0x24, 0x31, 0xec,
0x87, 0x7a, 0xce, 0x03 ),
IV ( 0xa2, 0x1c, 0x68, 0x0b, 0x6e, 0x9e, 0x40, 0xc5, 0xb0, 0x68,
0x6f, 0x09 ),
ADDITIONAL(),
PLAINTEXT ( 0xa3, 0xb7, 0xe4, 0x3f, 0x27, 0x02, 0x7c, 0x7c, 0xe0,
0xfd, 0x94, 0x4f, 0xe7, 0x06, 0xd8, 0x9f, 0x91, 0x7b,
0x44, 0x24, 0x11, 0xcd, 0xaf, 0xdc, 0xd7, 0x4b, 0x7f,
0x42, 0x8b, 0x79, 0x62, 0xb9, 0xe3, 0x1b, 0x80, 0xc9,
0x57, 0xe3, 0xf0, 0xdc, 0x17, 0xe6, 0x63, 0x96, 0x24,
0xc0, 0xd0, 0xa0, 0x69, 0xcc, 0x68, 0x4b, 0x50, 0xe7,
0x00, 0xfb, 0xc1, 0x26, 0xf1, 0x79, 0x51, 0xee, 0x31,
0xa3, 0x88, 0xb8, 0x96, 0x6b, 0xfd, 0x79, 0x2d, 0x2c,
0xbe, 0x67, 0xa0, 0xed, 0x27, 0x52, 0x06, 0x28, 0x13,
0xeb, 0x7e, 0x61, 0x38, 0xf8, 0xd3, 0x33, 0xa1, 0xb6,
0x72, 0x1c, 0x3d, 0x3f, 0xab, 0xe9, 0x60, 0x60, 0x57,
0x5e, 0x98, 0x76, 0xce, 0xc0, 0x95, 0x31, 0x70, 0x90,
0x72, 0x4e, 0x13, 0x34, 0xfa, 0x29, 0x1b, 0x90, 0xcb,
0x92, 0x62, 0x37, 0xe3, 0x31, 0xf7, 0x19, 0x29, 0x07,
0x40, 0xc7, 0xe7, 0xe4, 0x43, 0x29, 0x76, 0xc5, 0x22,
0x03, 0xd6, 0x17, 0xb3, 0x07, 0x79, 0x88, 0x10, 0xc9,
0x9d, 0xf5, 0x5f, 0x0a, 0x3f, 0xd1, 0xfe, 0xd1, 0xb9,
0x29, 0xfa, 0x1f, 0xcb, 0x00, 0x74, 0x65, 0x94, 0x2d,
0x9a, 0xe3, 0xc1, 0xd9, 0x64, 0x30, 0x91, 0x6e, 0xd1,
0x5f, 0x92, 0x62, 0x3c, 0x18, 0x14, 0x61, 0xd6, 0x07,
0xa2, 0x97, 0x7b, 0x49, 0x4a, 0xf8, 0x8d, 0x62, 0xf4,
0xe3, 0xd8, 0x48, 0x5d, 0x46, 0x00, 0xc3, 0xe1, 0xa0,
0x9a, 0xae, 0x4a, 0xb7, 0x43, 0xa7, 0x4e, 0x87, 0x64,
0x7d, 0xb9, 0x2a, 0xb8, 0x47, 0x7f, 0x2a, 0x8d, 0x76,
0x19, 0x35, 0x74, 0xc8, 0x55, 0x50, 0x36, 0x33, 0x0e,
0xac, 0xa6, 0x9a, 0x12, 0xb1, 0x5d, 0x66, 0x59, 0x1d,
0x98, 0xb8, 0xfc, 0x08, 0xba, 0x06, 0x03, 0x5a, 0x54,
0x90, 0x51, 0x48, 0x4a, 0xf9, 0xb3, 0xba, 0xf9, 0xcc,
0x36, 0x6a, 0x1d, 0xea, 0x63, 0x88, 0x52, 0x02, 0xa6,
0xdd, 0xe3, 0xaa, 0xfc, 0xb3, 0xc7, 0x35, 0x0f, 0x7b,
0x2f, 0xa4, 0xbe, 0xaa, 0xb7, 0xd5, 0xec, 0x79, 0x83,
0x62, 0x7e, 0xe7, 0x06, 0x77, 0x31, 0x0f, 0xaa, 0xa0,
0xcf, 0x5e, 0xd3, 0xaf, 0xe7, 0x1c, 0x8c, 0xb2, 0xc3,
0xee, 0xa9, 0xc6, 0x41, 0x69, 0x46, 0xf2, 0x8d, 0xfb,
0x8c, 0xb6, 0xe6, 0x18, 0x24, 0x3b, 0xef, 0x42, 0x58,
0xa0, 0x42, 0xb3, 0x6d, 0xdd, 0x6a, 0xfe, 0x75, 0x5e,
0x98, 0x2b, 0xc4, 0x9d, 0x30, 0x17, 0xee, 0xe0, 0x40,
0xc2, 0xcd, 0x25, 0x5e, 0x82, 0x0a, 0xcd, 0x27, 0x8e,
0xe8, 0x66, 0xdb, 0x3f, 0xa2, 0xa8, 0x36, 0xbb, 0xca,
0x91, 0x07, 0xe5, 0x5a, 0xe5, 0x59, 0x53, 0xe2, 0xdb,
0x0a, 0x62, 0xd9, 0xfc, 0x24, 0x5e, 0xc5, 0x89, 0x41,
0x1d, 0x1c, 0x70, 0xb8, 0x4d, 0x97, 0x4a, 0xf8, 0x79,
0x8b, 0xd4, 0xb1, 0x5d, 0x4c, 0x95, 0x33, 0x9a, 0x96,
0x76, 0x5f, 0x7b, 0x12, 0x83, 0xa6, 0xc6, 0x7e, 0xbc,
0x04, 0x07, 0x5e, 0xce, 0x47, 0x8d, 0x40, 0x40, 0x82,
0x59, 0xa2, 0x5f, 0x82, 0x91, 0xef, 0x9e, 0x2f, 0x2e,
0x50, 0x17, 0xde, 0x23, 0x77, 0x57, 0x8c, 0x42, 0x06,
0x72, 0x28, 0xfe, 0x70, 0x56, 0x2e, 0xe0, 0x0a, 0xcd,
0x61, 0x85, 0x5e, 0xfe, 0xca, 0x0c, 0x37, 0xf1, 0xaa,
0x44, 0x9c, 0x05, 0x68, 0xcc, 0x36, 0xb8, 0xeb, 0x2c,
0x13, 0x8d, 0x97, 0x8d, 0x8b, 0x8e, 0x28, 0x81, 0xac,
0xec, 0x5a, 0xf7, 0xfe, 0x04, 0xe5, 0x95, 0xbf, 0x61,
0x5f, 0xed, 0xe7, 0x4f, 0x49, 0x48, 0x26, 0x6a, 0x94,
0x04, 0xee, 0x6f, 0x1a, 0x12, 0x41, 0xcd, 0x08, 0xc1,
0x1e, 0xf4, 0xd0, 0x37, 0x95, 0x1d, 0xd9, 0x78, 0x07,
0x52, 0x54, 0x45, 0x18, 0x47, 0x4f, 0xbc, 0x2d, 0x4e,
0x33, 0x55, 0xa7, 0x2a, 0x7c, 0x80, 0xc7, 0x03, 0xf9 ),
CIPHERTEXT ( 0x9d, 0x5d, 0x5a, 0x51, 0x3e, 0x89, 0xc0, 0xcd, 0x14,
0x06, 0x35, 0x99, 0x3c, 0x13, 0xec, 0x73, 0x43, 0x5f,
0x35, 0x74, 0xaa, 0x10, 0xc9, 0xb8, 0x07, 0x14, 0xc3,
0x49, 0x97, 0xf2, 0xef, 0xaf, 0xa5, 0x53, 0x9e, 0x7e,
0xf4, 0x5b, 0x36, 0x60, 0x2b, 0x16, 0x47, 0x19, 0xed,
0xa8, 0xd7, 0x99, 0xa4, 0x0a, 0x07, 0x75, 0xed, 0xf7,
0x43, 0xe5, 0x46, 0xe9, 0x15, 0x14, 0x26, 0x22, 0xdb,
0xbe, 0xba, 0x21, 0x0d, 0x72, 0xaf, 0x78, 0x2b, 0xb2,
0x6b, 0x11, 0xdf, 0x3b, 0x9f, 0x5a, 0xa7, 0xbd, 0x1a,
0x16, 0xcf, 0xb3, 0x7d, 0x16, 0xaa, 0x9b, 0xf1, 0x16,
0x0d, 0xc7, 0xfc, 0x69, 0x01, 0xcc, 0x85, 0x1d, 0x84,
0x43, 0xbd, 0xa7, 0x43, 0xa8, 0x4d, 0x5c, 0xef, 0x58,
0xc8, 0x16, 0x4b, 0x3b, 0xb9, 0xc7, 0x5f, 0xe2, 0xab,
0xaf, 0x24, 0x78, 0x14, 0xe2, 0xbe, 0x0a, 0xce, 0x46,
0x9a, 0xee, 0xb4, 0x67, 0xf2, 0x19, 0x6c, 0xec, 0xa2,
0x9c, 0x4b, 0xfd, 0x87, 0x4e, 0x9a, 0x58, 0x72, 0x5c,
0x7c, 0x5d, 0x03, 0xca, 0x45, 0xbd, 0xe6, 0x7f, 0xcb,
0x65, 0xfa, 0x9b, 0x01, 0xa9, 0xd8, 0x6c, 0x8e, 0xf6,
0xc8, 0x4a, 0x5e, 0x01, 0x4c, 0x99, 0xfd, 0xfc, 0xab,
0x06, 0x60, 0xbc, 0x2c, 0xea, 0x6d, 0xe7, 0x9b, 0x9b,
0xd1, 0x35, 0xd7, 0x4f, 0x24, 0x47, 0x3d, 0x28, 0x3c,
0x2b, 0x8c, 0x92, 0xec, 0x24, 0x16, 0xa6, 0x09, 0x10,
0x9f, 0x21, 0xde, 0x69, 0x92, 0xe3, 0xc9, 0xe5, 0xc7,
0xff, 0x67, 0xd9, 0x77, 0x89, 0xe2, 0x40, 0x12, 0x55,
0x75, 0xb0, 0x7b, 0x08, 0x7b, 0x3b, 0x98, 0x5b, 0x71,
0xad, 0x1f, 0xa8, 0x1a, 0x8a, 0xf6, 0xa2, 0xdf, 0x6e,
0xae, 0x7c, 0xbc, 0x4c, 0x91, 0x1e, 0x3e, 0x02, 0xe1,
0xff, 0x31, 0x40, 0xc0, 0x1c, 0x38, 0xa2, 0xd7, 0xce,
0x18, 0x46, 0x45, 0x92, 0x15, 0x0b, 0x3a, 0x3c, 0x00,
0xa9, 0x6a, 0xe0, 0x2f, 0x08, 0x9c, 0x12, 0xa8, 0xe2,
0x9e, 0x40, 0x0e, 0xb5, 0x5c, 0xf7, 0x39, 0xf7, 0x8e,
0x1e, 0x9c, 0x45, 0x13, 0xdf, 0x38, 0x21, 0xaf, 0x2d,
0xf5, 0x1a, 0xf4, 0x76, 0x17, 0x4d, 0x81, 0x80, 0x04,
0x5a, 0xc2, 0xce, 0xb3, 0xe3, 0x57, 0x9d, 0x94, 0x79,
0x83, 0xd3, 0xff, 0x5b, 0xf4, 0x14, 0xce, 0x83, 0xba,
0x3b, 0xf5, 0x53, 0x49, 0x53, 0x5b, 0xc1, 0xff, 0xfb,
0xec, 0x73, 0xf0, 0x1a, 0xcb, 0x4a, 0xaf, 0xfd, 0x67,
0x9f, 0xc1, 0x01, 0x38, 0x5c, 0xdd, 0x56, 0x49, 0xa7,
0x8e, 0x95, 0x3a, 0x14, 0xdd, 0xd3, 0x85, 0xc5, 0xea,
0x3e, 0xc0, 0xd0, 0x60, 0xb9, 0x8f, 0x7d, 0xde, 0xfe,
0x2b, 0x66, 0x69, 0x98, 0x00, 0x20, 0xbb, 0xa0, 0x5e,
0x62, 0x38, 0xbc, 0xc6, 0x50, 0x89, 0x6d, 0x03, 0x50,
0xad, 0xef, 0xdd, 0x00, 0xf7, 0x41, 0xfb, 0x06, 0x04,
0x35, 0x10, 0x73, 0x0d, 0xa4, 0x7a, 0x54, 0x55, 0xc2,
0x78, 0x16, 0x80, 0x67, 0xef, 0x4e, 0x85, 0x79, 0xf6,
0x3f, 0x7b, 0x2f, 0xb7, 0xe4, 0xc2, 0xa0, 0xfe, 0x84,
0xe6, 0xc0, 0x3e, 0xa2, 0xe4, 0xa7, 0xb1, 0x38, 0xe7,
0x59, 0x8f, 0x8c, 0xe8, 0xce, 0xd8, 0x31, 0xb1, 0xf5,
0xe5, 0xa8, 0x8e, 0x0d, 0x66, 0x5f, 0x3b, 0x7b, 0x61,
0x70, 0x5c, 0xc5, 0x0b, 0x19, 0x08, 0x0f, 0x82, 0xbc,
0x65, 0x2f, 0xe8, 0x0f, 0x2e, 0x8f, 0x7f, 0xee, 0x8d,
0x2e, 0xee, 0x55, 0x78, 0x8b, 0x86, 0xc1, 0xe5, 0x6d,
0x50, 0x18, 0x02, 0x3e, 0xbf, 0x7a, 0x23, 0x70, 0x8e,
0xdd, 0x97, 0x4c, 0xfe, 0x69, 0x63, 0xf3, 0xeb, 0x9b,
0x92, 0xaf, 0x9b, 0x1e, 0x29, 0x12, 0x37, 0x78, 0x10,
0x46, 0x1e, 0xd6, 0xc9, 0x41, 0xe7, 0x98, 0x73, 0xba,
0xbf, 0x7b, 0xfa, 0x65, 0xb1, 0x3c, 0x4f, 0x32, 0x6d ),
AUTH ( 0x1a, 0x72, 0xa5, 0xeb, 0x33, 0xbd, 0xc8, 0x48, 0xcd, 0x5f,
0x9f, 0x93, 0x79, 0x33, 0x49, 0x55 ) );
/* AES-GCM test case 201 */
CIPHER_TEST ( wycheproof_aes_gcm_a2b24e57, &aes_gcm_algorithm,
KEY ( 0x85, 0x6b, 0x07, 0xff, 0x0a, 0xfa, 0x13, 0x81, 0x9e, 0xef,
0x43, 0xf5, 0xdd, 0x4a, 0x81, 0xf7, 0xbe, 0xd2, 0xa9, 0xc7,
0x08, 0x9c, 0xbf, 0x06 ),
IV ( 0x90, 0x10, 0x07, 0xf7, 0x57, 0xeb, 0x3b, 0xf0, 0xbf, 0xd1,
0xe0, 0x3e ),
ADDITIONAL ( 0x03, 0xa4, 0x7b, 0x93, 0x00, 0x53, 0xa4, 0xab, 0xb4,
0x0c, 0x66, 0x1e, 0xab, 0xfc, 0xf1, 0x9e, 0xc2, 0x69,
0xf4, 0x91, 0x3a, 0x5a, 0x18, 0x51, 0x3e, 0xb6, 0x72,
0x43, 0xb1, 0x84, 0xb2, 0xe9, 0x46, 0xfa, 0xe1, 0x83,
0x8b, 0x35, 0xc6, 0xf0, 0x86, 0xf8, 0x22, 0x7e, 0x4d,
0x35, 0x36, 0x20, 0x68, 0x40, 0x08, 0x82, 0x7b, 0x97,
0x20, 0xf4, 0x50, 0xc3, 0x97, 0x7e, 0xbe, 0x86, 0x22 ),
PLAINTEXT ( 0xb0, 0x30, 0x92, 0xf7, 0xad, 0x0d, 0x36, 0xd7, 0xe0,
0x07, 0x84, 0x65, 0x2e, 0x4c, 0xe1, 0x2e, 0xaa, 0xe6,
0x50, 0x06 ),
CIPHERTEXT ( 0x99, 0x8a, 0x38, 0x79, 0xdf, 0x76, 0x67, 0xff, 0x94,
0x65, 0xbc, 0x21, 0xd5, 0x88, 0xf6, 0x6b, 0xf8, 0xc1,
0xc1, 0x2e ),
AUTH ( 0x97, 0x8b, 0x9e, 0x5b, 0xb4, 0x9f, 0x18, 0xf9, 0xf4, 0x6c,
0xaf, 0x59, 0x36, 0xa6, 0x7e, 0x85 ) );
/* AES-GCM test case 202 */
CIPHER_TEST ( wycheproof_aes_gcm_4cccfc2f, &aes_gcm_algorithm,
KEY ( 0x55, 0xa4, 0xca, 0x52, 0x64, 0x43, 0x35, 0x7a, 0xc7, 0xc8,
0x96, 0xd9, 0xa6, 0x7c, 0xf7, 0xd4, 0x67, 0xf6, 0x92, 0x1d,
0x69, 0x00, 0x2d, 0x3a ),
IV ( 0xdb, 0xa2, 0x33, 0xcc, 0xbc, 0x79, 0x92, 0xe6, 0x4e, 0x82,
0xcf, 0xa3 ),
ADDITIONAL ( 0xdf, 0x73, 0x7c, 0xd7, 0x7d, 0x31, 0xeb, 0x90, 0x97,
0xa1, 0x7c, 0x31, 0xb4, 0xc9, 0x28, 0x89, 0xef, 0x1f,
0x32, 0xb7, 0x46, 0x4e, 0x26, 0x20, 0xe9, 0x00, 0x71,
0x92, 0xea, 0x67, 0x5b, 0x9a, 0xd6, 0x91, 0x05, 0x27,
0xff, 0xec, 0xee, 0x24, 0x52, 0xbe, 0x02, 0x48, 0xfa,
0xb7, 0x56, 0x08, 0xc7, 0xfd, 0xca, 0x08, 0xe8, 0x65,
0x80, 0x32, 0x2a, 0xac, 0x1d, 0x6a, 0x11, 0xb9, 0x6e,
0xcf ),
PLAINTEXT ( 0x4e, 0x56, 0xd1, 0xea, 0x53, 0x8c, 0xf4, 0x9c, 0xad,
0x49, 0x95, 0x9e, 0x88, 0x4e, 0xb5, 0x40, 0xc8, 0x46,
0x55, 0x6c ),
CIPHERTEXT ( 0x3f, 0x57, 0xec, 0x1b, 0x41, 0x4f, 0x74, 0x81, 0x8f,
0xea, 0xd9, 0xf3, 0x5a, 0xa1, 0x67, 0x94, 0x02, 0xc3,
0xe7, 0x50 ),
AUTH ( 0x97, 0xb8, 0x9b, 0x29, 0x14, 0x19, 0xe3, 0x2c, 0xf6, 0x54,
0xea, 0x63, 0x0a, 0x3a, 0xd0, 0x14 ) );
/* AES-GCM test case 203 */
CIPHER_TEST ( wycheproof_aes_gcm_0b49b77a, &aes_gcm_algorithm,
KEY ( 0xef, 0x97, 0xa3, 0x9d, 0x45, 0xa5, 0x05, 0x4d, 0xf3, 0x44,
0xd8, 0x18, 0xeb, 0x15, 0x63, 0x77, 0xd4, 0xfa, 0x51, 0x24,
0x27, 0x4f, 0x2f, 0x2f ),
IV ( 0xd0, 0x27, 0x8d, 0x7b, 0xa5, 0x1e, 0x31, 0xeb, 0xf8, 0xf7,
0x0f, 0xca ),
ADDITIONAL ( 0x66, 0xf6, 0x12, 0xf2, 0xb9, 0x9e, 0x74, 0xdb, 0x94,
0x9c, 0x1c, 0xaf, 0x3c, 0xfb, 0xe1, 0xdd, 0xe9, 0x64,
0x6d, 0xa8, 0x49, 0x78, 0x61, 0xc3, 0x7f, 0x46, 0xdc,
0x43, 0xbf, 0xff, 0x08, 0xdf, 0x3a, 0xec, 0x09, 0xb2,
0x29, 0xa5, 0xc8, 0xb9, 0xd8, 0xb8, 0x90, 0x1f, 0x22,
0xdf, 0xa3, 0xaa, 0x1f, 0x95, 0x5d, 0xba, 0x7a, 0xa2,
0xe8, 0x83, 0xbd, 0x0a, 0x2a, 0xc5, 0x10, 0xb5, 0x01,
0xa0, 0x38 ),
PLAINTEXT ( 0xb4, 0x91, 0xa4, 0x7f, 0x10, 0x82, 0x58, 0x16, 0x42,
0xf8, 0x05, 0x3f, 0x66, 0x01, 0x77, 0x40, 0xe8, 0x98,
0x02, 0x8f ),
CIPHERTEXT ( 0x13, 0x9b, 0xd0, 0x8a, 0x98, 0xf9, 0x2d, 0x51, 0x0c,
0x9b, 0x42, 0x97, 0xc4, 0x92, 0x68, 0xb2, 0x22, 0x48,
0x13, 0x0f ),
AUTH ( 0x71, 0x21, 0x17, 0xf4, 0x0a, 0xa4, 0x6d, 0xb9, 0x96, 0x77,
0xa1, 0xb7, 0x8a, 0xa5, 0xb8, 0x1b ) );
/* AES-GCM test case 204 */
CIPHER_TEST ( wycheproof_aes_gcm_86a429e2, &aes_gcm_algorithm,
KEY ( 0xe4, 0x30, 0xff, 0xe6, 0x2c, 0xf0, 0x02, 0x8c, 0xa5, 0x0b,
0xac, 0xd8, 0xac, 0x02, 0x0d, 0x54, 0x20, 0xaf, 0xf3, 0x45,
0xb7, 0x1a, 0x98, 0xd8 ),
IV ( 0x2b, 0x5d, 0xd5, 0xd7, 0xb0, 0xe2, 0x6f, 0xb5, 0x1f, 0xa1,
0xe0, 0xff ),
ADDITIONAL ( 0x62, 0x5d, 0x9a, 0x34, 0x42, 0x76, 0xac, 0x8b, 0x4f,
0x62, 0xf4, 0x9b, 0xf2, 0x74, 0xa1, 0x9f, 0x80, 0x86,
0x97, 0x67, 0x41, 0xc7, 0x9e, 0x04, 0xef, 0x14, 0x99,
0xc7, 0xf4, 0xf4, 0xb8, 0x20, 0x3d, 0xed, 0xc6, 0xb0,
0x2e, 0x3d, 0x49, 0xd6, 0xc5, 0xbc, 0x67, 0xa9, 0x73,
0xfb, 0x12, 0x57, 0x93, 0xab, 0x89, 0x99, 0xf5, 0x65,
0xa4, 0x14, 0x14, 0xa6, 0xde, 0x06, 0xf9, 0xad, 0xf1,
0x16, 0x5f, 0x6a, 0xde, 0x26, 0x0f, 0x44, 0x7e, 0x02,
0x8a, 0x48, 0xad, 0x65, 0x04, 0x4d, 0x01, 0x31, 0x53,
0xae, 0x96, 0xe7, 0x06, 0x37, 0x32, 0xd1, 0xba, 0x3a,
0x37, 0x83, 0xfc, 0x09, 0x05, 0xe9, 0xa2, 0x8f, 0xa2,
0x3a, 0x5c, 0x49, 0xab, 0x2c, 0xba, 0x01, 0x6d, 0x20,
0xc6, 0xdf, 0x70, 0x4b, 0xad, 0xa6, 0x2a, 0x24, 0x3d,
0x76, 0xdb, 0xaf, 0x17, 0xa9, 0x84, 0x57, 0x79, 0x38,
0x93 ),
PLAINTEXT ( 0x56, 0xa1, 0xc5, 0x58, 0x0e, 0xc7, 0x85, 0xda, 0x04,
0x6f, 0xa1, 0x6b, 0xd0, 0x39, 0xa4, 0x73, 0x7e, 0xb8,
0x8c, 0x7b ),
CIPHERTEXT ( 0x21, 0xab, 0x90, 0xdd, 0xa8, 0x19, 0x0e, 0xe8, 0x14,
0x20, 0x6f, 0xbf, 0x89, 0xe4, 0x9e, 0x83, 0x34, 0xd8,
0x18, 0x78 ),
AUTH ( 0x5e, 0xe3, 0xbd, 0x42, 0xfb, 0xcc, 0x55, 0xf7, 0xc5, 0xcd,
0x46, 0x2c, 0x6f, 0xa9, 0x91, 0xc6 ) );
/* AES-GCM test case 205 */
CIPHER_TEST ( wycheproof_aes_gcm_8ed4ba4c, &aes_gcm_algorithm,
KEY ( 0xf3, 0x81, 0xd0, 0xff, 0xd3, 0x37, 0x3a, 0x1a, 0xa0, 0x2e,
0xdd, 0x1d, 0x7f, 0xa7, 0x48, 0xe9, 0x19, 0x08, 0xfe, 0x53,
0x4b, 0xef, 0x73, 0xd2 ),
IV ( 0x10, 0xaa, 0xec, 0x0d, 0xe4, 0xad, 0x75, 0x37, 0x6b, 0xe9,
0xfd, 0x41 ),
ADDITIONAL ( 0x77, 0x39, 0xaa, 0xd7, 0x39, 0x9d, 0x9c, 0x0f, 0x0a,
0x3c, 0x95, 0xb4, 0x03, 0x88, 0x8f, 0x00, 0x72, 0xd9,
0x4a, 0xcb, 0x76, 0xff, 0x57, 0x6e, 0x05, 0xf4, 0xa0,
0x63, 0x12, 0x0b, 0x84, 0xe7, 0x22, 0xb4, 0xd5, 0xcd,
0x43, 0xa5, 0x8e, 0x4a, 0xba, 0xb4, 0x44, 0xcb, 0x8c,
0xed, 0x11, 0x2f, 0x3d, 0xbd, 0x89, 0x93, 0xb8, 0x31,
0xc3, 0x9b, 0x4e, 0xdb, 0x76, 0xe9, 0x2e, 0xb3, 0x3e,
0xe2, 0x4c, 0x59, 0x22, 0xb5, 0x65, 0x52, 0x68, 0x5f,
0x3b, 0x0f, 0x4c, 0xf2, 0x2e, 0x0e, 0x11, 0x62, 0x8f,
0x6a, 0x3d, 0x33, 0xef, 0xf9, 0xde, 0xf7, 0xec, 0x52,
0x71, 0x12, 0xdf, 0xaf, 0xcf, 0x12, 0x28, 0x14, 0xe3,
0xd1, 0xaa, 0xf6, 0x6c, 0x3f, 0x97, 0x05, 0x26, 0x51,
0x10, 0x88, 0xbf, 0xfe, 0xf8, 0x10, 0x1d, 0x1c, 0xef,
0x83, 0x32, 0x68, 0xff, 0x80, 0x38, 0x7d, 0xf3, 0x05,
0x57, 0xf7 ),
PLAINTEXT ( 0x65, 0x3a, 0x3f, 0x03, 0x3c, 0x27, 0x75, 0xe0, 0x8f,
0xef, 0x73, 0xcf, 0x80, 0xf5, 0xe2, 0x69, 0x9f, 0xb3,
0x60, 0xcb ),
CIPHERTEXT ( 0x55, 0x65, 0xc6, 0xd0, 0x9c, 0x4c, 0x92, 0x4d, 0x61,
0xc0, 0xef, 0x80, 0x8f, 0xb0, 0xea, 0x14, 0x4f, 0xfb,
0x47, 0x38 ),
AUTH ( 0x12, 0xb7, 0x2e, 0xc1, 0xd9, 0xc3, 0x2f, 0xb2, 0x2c, 0x13,
0xc4, 0x0b, 0x33, 0x79, 0x6f, 0xa9 ) );
/* AES-GCM test case 206 */
CIPHER_TEST ( wycheproof_aes_gcm_0e8ed23e, &aes_gcm_algorithm,
KEY ( 0xf8, 0xce, 0x76, 0x9a, 0x34, 0xf4, 0x8d, 0x24, 0xa2, 0x07,
0x68, 0x60, 0xe7, 0xd1, 0x8a, 0xb5, 0xf4, 0xf2, 0xa5, 0x28,
0xe2, 0x28, 0x0d, 0xa2 ),
IV ( 0x8d, 0x7f, 0x86, 0x76, 0x11, 0x52, 0x66, 0xf5, 0xd1, 0xa0,
0xe9, 0x1f ),
ADDITIONAL ( 0x7b, 0x6d, 0xcc, 0xc1, 0x50, 0x56, 0x3e, 0x84, 0x54,
0x34, 0xc2, 0xbc, 0xa2, 0x9f, 0x3f, 0x9d, 0x78, 0x41,
0x62, 0x8f, 0x00, 0xc9, 0x47, 0x4e, 0x06, 0x20, 0x01,
0x7f, 0x7f, 0xa8, 0xe2, 0x50, 0x03, 0x62, 0xfd, 0x7c,
0xf3, 0xcd, 0x16, 0x23, 0x95, 0xb1, 0x4a, 0x52, 0x0d,
0xe4, 0x84, 0xc3, 0x05, 0xfe, 0x2f, 0x6b, 0xe6, 0x30,
0x91, 0x74, 0xed, 0xc3, 0xe1, 0x4f, 0xd5, 0xae, 0xcc,
0xfb, 0xa6, 0xdc, 0xae, 0x18, 0x34, 0x28, 0x61, 0x3e,
0xd9, 0xd6, 0xdf, 0x3f, 0x01, 0xd5, 0xdb, 0x53, 0x82,
0x45, 0xc8, 0xae, 0x8f, 0xf5, 0x0f, 0x30, 0xba, 0x3d,
0x42, 0x85, 0x10, 0xca, 0xd3, 0x28, 0x9b, 0x46, 0x28,
0x05, 0xea, 0x10, 0x29, 0x13, 0x3c, 0x64, 0xaf, 0x45,
0x7e, 0x46, 0xff, 0x51, 0x2b, 0x19, 0x58, 0x0d, 0x5d,
0xfd, 0x0d, 0x5a, 0x01, 0xe4, 0x2d, 0x0f, 0xa6, 0x28,
0xc2, 0xf7, 0x29 ),
PLAINTEXT ( 0x50, 0x75, 0x96, 0xe9, 0x23, 0x6f, 0x4d, 0x9e, 0xbc,
0xde, 0xb0, 0xed, 0x75, 0xdc, 0xc7, 0xff, 0x7e, 0x52,
0xb1, 0x55 ),
CIPHERTEXT ( 0x9e, 0xd3, 0xee, 0x25, 0x62, 0xd3, 0x6b, 0x18, 0x85,
0x3a, 0x08, 0x60, 0xce, 0xc4, 0x9c, 0x23, 0x89, 0xd9,
0x08, 0x11 ),
AUTH ( 0x65, 0xd5, 0x9c, 0xf5, 0x32, 0x84, 0x70, 0x93, 0xe4, 0xc4,
0x81, 0x0d, 0x1b, 0x55, 0x25, 0x40 ) );
/* AES-GCM test case 207 */
CIPHER_TEST ( wycheproof_aes_gcm_b1a4bc0b, &aes_gcm_algorithm,
KEY ( 0x4b, 0x72, 0x6f, 0x49, 0x03, 0x6f, 0x5e, 0xf8, 0x72, 0x00,
0x0a, 0x34, 0xca, 0x09, 0xa8, 0x52, 0x8a, 0x1e, 0xea, 0x7e,
0x05, 0x63, 0xa5, 0x5e ),
IV ( 0xae, 0x05, 0x12, 0x4d, 0x76, 0xb0, 0x56, 0xfc, 0xce, 0x5c,
0x8b, 0x37 ),
ADDITIONAL ( 0x95, 0xdf, 0x74, 0x13, 0x2d, 0xef, 0x5a, 0xe8, 0xad,
0xb6, 0xb3, 0xb6, 0xcc, 0x91, 0x8a, 0x9f, 0x7c, 0x90,
0x72, 0xf2, 0xdf, 0x63, 0x9d, 0x26, 0x9a, 0xbc, 0x3c,
0x55, 0x1c, 0xbd, 0x6a, 0xb2, 0x45, 0xf5, 0x7a, 0x8e,
0x97, 0x09, 0x5a, 0x58, 0x0d, 0x47, 0x3a, 0xad, 0xbf,
0xf5, 0x0f, 0x1d, 0x87, 0x1e, 0x76, 0x6f, 0xec, 0x32,
0x91, 0x00, 0xb4, 0x5f, 0xa3, 0x57, 0x1b, 0x49, 0x04,
0xb4, 0xf5, 0xe4, 0xe0, 0xd1, 0xbd, 0x25, 0x91, 0x0f,
0x45, 0x7d, 0xd1, 0xf0, 0x1b, 0xbf, 0x82, 0xff, 0x59,
0xa2, 0x13, 0x8a, 0xf1, 0x67, 0x56, 0xd6, 0x4f, 0xa9,
0xd8, 0x20, 0x89, 0xcc, 0xd6, 0xba, 0xa1, 0x8c, 0x16,
0xd0, 0x38, 0x1d, 0xdd, 0xbc, 0x46, 0x9c, 0xcc, 0x54,
0x40, 0x5e, 0x85, 0x3f, 0xce, 0xcf, 0x3b, 0x22, 0x85,
0x24, 0x7d, 0xee, 0x88, 0x66, 0x39, 0xed, 0xaa, 0xfb,
0xaa, 0xd5, 0x8e, 0xdb, 0x8e, 0x12, 0x87, 0xc1, 0x7d,
0xa2, 0xf4, 0x49, 0x68, 0x19, 0x88, 0xf1, 0xe5, 0x75,
0xc8, 0xc6, 0xe9, 0x9e, 0x2a, 0x2a, 0xee, 0xfb, 0xf7,
0xe6, 0xe1, 0xfc, 0xac, 0x86, 0xad, 0xf9, 0xb1, 0xc1,
0x34, 0x9b, 0xe7, 0xfe, 0x29, 0xf0, 0xf7, 0x1d, 0x7c,
0xbe, 0x87, 0x40, 0xe0, 0x9d, 0x29, 0x6a, 0x47, 0x18,
0xb4, 0x12, 0x50, 0xb6, 0xfb, 0xfc, 0x68, 0xcc, 0x52,
0x06, 0x1c, 0x05, 0x30, 0xfd, 0x79, 0xe1, 0x5c, 0x5b,
0x0e, 0xf0, 0x13, 0xa9, 0x77, 0x78, 0x1f, 0x7a, 0x63,
0xed, 0x51, 0x38, 0x92, 0xb8, 0xd1, 0x05, 0xb1, 0x06,
0x4e, 0xea, 0xcf, 0x15, 0x24, 0xde, 0x4c, 0x50, 0xab,
0x85, 0xc2, 0x23, 0xd4, 0x7d, 0xe3, 0x5e, 0xaf, 0xb9,
0xe9, 0x31, 0xcf, 0x42, 0x6d, 0xc4, 0x55, 0x86, 0x6e,
0xa8, 0x8f, 0x49, 0xd5, 0x10, 0x03, 0xb8, 0x2b, 0xf5,
0xef, 0xc7, 0xe6 ),
PLAINTEXT ( 0xe1, 0xdd, 0x0b, 0x94, 0xdb, 0x0a, 0x9f, 0x7f, 0xd6,
0xb2, 0xc4, 0xa6, 0xd6, 0x52, 0xe0, 0xe2, 0x66, 0x48,
0x96, 0xdc ),
CIPHERTEXT ( 0xb5, 0x7c, 0x95, 0x8e, 0x54, 0x84, 0x42, 0x11, 0x43,
0x87, 0xf4, 0xcf, 0xec, 0x8f, 0xe0, 0xdc, 0xce, 0x93,
0x4c, 0x9b ),
AUTH ( 0x0a, 0xcf, 0x89, 0x55, 0xd6, 0x54, 0xb8, 0x48, 0x74, 0x20,
0x1a, 0x21, 0x54, 0x2d, 0x1b, 0x2a ) );
/* AES-GCM test case 208 */
CIPHER_TEST ( wycheproof_aes_gcm_b025b360, &aes_gcm_algorithm,
KEY ( 0xf8, 0xac, 0x92, 0xd2, 0x06, 0xdf, 0x1d, 0xa3, 0xad, 0xa5,
0xe9, 0x06, 0x80, 0x62, 0x52, 0xa7, 0x82, 0x62, 0xe5, 0x1e,
0x00, 0xa7, 0xce, 0x0b ),
IV ( 0x2c, 0x93, 0x3d, 0x75, 0x90, 0xff, 0x40, 0x58, 0xe2, 0x2f,
0x7e, 0x5b ),
ADDITIONAL ( 0xff, 0x27, 0x71, 0xb5, 0xc8, 0x17, 0xa5, 0xe1, 0x32,
0x6c, 0xb9, 0x07, 0xd5, 0x38, 0x4d, 0xb2, 0x86, 0x1a,
0x32, 0x95, 0x10, 0x9e, 0x67, 0x8b, 0x55, 0x3b, 0xa1,
0x4a, 0x5a, 0x99, 0x00, 0x5f, 0xe0, 0xd6, 0xdc, 0x6d,
0x73, 0x17, 0x8b, 0x75, 0xd3, 0x48, 0xb6, 0xd9, 0xc1,
0xa8, 0xb6, 0x98, 0x3e, 0x20, 0xcf, 0x2b, 0x23, 0x16,
0x1c, 0xc8, 0x8b, 0x02, 0x75, 0x2c, 0xba, 0x16, 0x6f,
0x36, 0xeb, 0xb4, 0x33, 0xd7, 0xb4, 0x29, 0xff, 0x5f,
0x59, 0x07, 0x58, 0xd3, 0xba, 0x56, 0x96, 0xf7, 0x26,
0x8c, 0xaa, 0x55, 0xb0, 0xe5, 0xfb, 0xff, 0xf4, 0x98,
0xaa, 0x77, 0xec, 0x79, 0x11, 0x5c, 0x67, 0x9b, 0x7d,
0xf6, 0xb1, 0x18, 0xcf, 0x4c, 0x51, 0xa3, 0x18, 0x5f,
0x9d, 0x61, 0x77, 0xde, 0x14, 0x5b, 0xe8, 0x85, 0xca,
0x5e, 0x1b, 0x35, 0x5a, 0x4a, 0x21, 0xb6, 0xb0, 0xb7,
0x92, 0x8c, 0x6e, 0x70, 0xd6, 0xcf, 0xee, 0x65, 0xa3,
0xd1, 0x77, 0x58, 0xe0, 0x80, 0x12, 0xf0, 0x88, 0xb2,
0x8e, 0x38, 0x1e, 0x8a, 0xbc, 0x6e, 0x15, 0x47, 0x1d,
0x58, 0x00, 0x36, 0xbb, 0x3e, 0x78, 0xae, 0x1f, 0x97,
0x6c, 0xaa, 0x66, 0x0e, 0xad, 0x30, 0x0c, 0x4d, 0x0f,
0x50, 0xd0, 0x4f, 0xa0, 0x70, 0x88, 0x64, 0x33, 0x61,
0xac, 0x8c, 0x63, 0x4d, 0x4c, 0x37, 0x58, 0x27, 0xbe,
0x90, 0x0d, 0x62, 0xf8, 0x60, 0xf9, 0x08, 0x9c, 0x5d,
0xbc, 0x5a, 0xd0, 0x2f, 0x9c, 0xab, 0x9d, 0xd4, 0x9a,
0x32, 0x4c, 0x96, 0x0b, 0x25, 0x9a, 0xb8, 0x39, 0xde,
0x45, 0x89, 0x6c, 0x60, 0x49, 0xeb, 0x71, 0xf4, 0xa0,
0x56, 0xd9, 0x37, 0xa9, 0x0a, 0xfa, 0xc1, 0xf5, 0x2e,
0x7c, 0x73, 0xc2, 0x4c, 0xa3, 0x41, 0x30, 0x6c, 0x32,
0xa0, 0x16, 0xcb, 0xe4, 0x0c, 0x74, 0x78, 0xde, 0x24,
0xec, 0x8c, 0x7f, 0x6f ),
PLAINTEXT ( 0x44, 0xac, 0x8c, 0x52, 0x54, 0x84, 0x52, 0x89, 0x58,
0xec, 0xfe, 0xe0, 0x9e, 0xd4, 0x4e, 0xc0, 0xdf, 0x82,
0x8a, 0x61 ),
CIPHERTEXT ( 0x97, 0x14, 0x45, 0x25, 0x63, 0x32, 0xbf, 0x87, 0x26,
0x85, 0x38, 0xe1, 0x0b, 0xb4, 0x70, 0xf1, 0x1d, 0xf9,
0x12, 0xe5 ),
AUTH ( 0x41, 0xa6, 0xaf, 0x58, 0xf6, 0x7c, 0x6c, 0xc4, 0xfc, 0x6f,
0x55, 0x18, 0x9f, 0x68, 0xcd, 0xac ) );
/* AES-GCM test case 209 */
CIPHER_TEST ( wycheproof_aes_gcm_f5019269, &aes_gcm_algorithm,
KEY ( 0x8f, 0x27, 0xb1, 0xc3, 0xb3, 0xd7, 0x02, 0x3c, 0x76, 0xee,
0x66, 0xc7, 0x68, 0xa3, 0xe9, 0x2d, 0x49, 0x71, 0xe2, 0x5f,
0x72, 0x9d, 0x87, 0x88 ),
IV ( 0x12, 0x44, 0x40, 0x40, 0xca, 0xed, 0xe6, 0x72, 0x85, 0xe4,
0x90, 0xd7 ),
ADDITIONAL ( 0x58, 0xfd, 0x02, 0xac, 0x23, 0xec, 0x7f, 0xa5, 0xb9,
0x46, 0x0f, 0x60, 0xbf, 0xc8, 0x5b, 0x4b, 0xeb, 0xba,
0x70, 0x03, 0x9a, 0x8f, 0x83, 0x26, 0x1d, 0x6c, 0xc4,
0xf5, 0x60, 0x10, 0x7c, 0x10, 0xbc, 0x69, 0x54, 0x8a,
0x5d, 0x61, 0x52, 0x88, 0x2f, 0xb4, 0x65, 0xfd, 0x59,
0xfb, 0x81, 0x64, 0xd7, 0xc9, 0x45, 0x23, 0xc3, 0xdd,
0x42, 0x06, 0xd3, 0x30, 0x64, 0xf5, 0x19, 0x1b, 0xd3,
0x1f, 0x0c, 0x48, 0xfe, 0x03, 0xd7, 0x46, 0x0e, 0x99,
0x5c, 0x93, 0x17, 0x5b, 0x57, 0xcb, 0x03, 0xf5, 0x87,
0x11, 0xad, 0xc9, 0x46, 0x32, 0x03, 0x1c, 0x43, 0x05,
0x27, 0x23, 0x67, 0xb4, 0x28, 0x9c, 0x72, 0x5d, 0x9c,
0xb7, 0xae, 0x9b, 0xa9, 0x96, 0xb3, 0xa0, 0x79, 0x17,
0x45, 0x08, 0xc1, 0xea, 0xe8, 0x16, 0x2a, 0x0b, 0xac,
0x44, 0x6c, 0x1e, 0x53, 0xfe, 0x0c, 0x40, 0x2b, 0x69,
0x12, 0xdf, 0xd6, 0x70, 0x2a, 0xdd, 0xcc, 0xad, 0xa3,
0x0a, 0x5c, 0x01, 0x0f, 0xc2, 0x2c, 0x2c, 0x75, 0xe4,
0x32, 0x26, 0x37, 0x8e, 0xc7, 0xf4, 0xb3, 0xb7, 0x1c,
0xcc, 0x71, 0xf3, 0x2a, 0xb1, 0xad, 0xc8, 0x77, 0xcc,
0x7b, 0x0a, 0x18, 0x0c, 0x75, 0xd3, 0x85, 0xc0, 0xf7,
0x1a, 0x0b, 0x29, 0x1a, 0x1c, 0xcc, 0xf4, 0xbe, 0x47,
0xe2, 0x72, 0x24, 0x9d, 0x61, 0xff, 0xbf, 0x05, 0x9c,
0x4f, 0x7b, 0xe7, 0x4e, 0xba, 0x07, 0xd5, 0xe1, 0xbe,
0x3a, 0x74, 0x38, 0x45, 0x8a, 0x61, 0x1f, 0xe5, 0x8c,
0xee, 0x4f, 0x94, 0x6e, 0x25, 0xde, 0xe0, 0x3e, 0x64,
0x85, 0x23, 0x55, 0x66, 0xf2, 0x0e, 0xd5, 0x55, 0xbe,
0x32, 0xcd, 0x57, 0xa9, 0x4e, 0x52, 0x2d, 0x21, 0x68,
0xea, 0xe2, 0x3c, 0x45, 0x87, 0x37, 0x1a, 0x2d, 0x14,
0x5f, 0x41, 0x8c, 0x59, 0xe7, 0xbb, 0xc4, 0x64, 0xa3,
0xbd, 0x88, 0xb8, 0x91, 0x9b ),
PLAINTEXT ( 0x0d, 0xf6, 0xe7, 0x50, 0x09, 0x2b, 0x9a, 0xc5, 0x76,
0xdd, 0xe6, 0x60, 0x06, 0xa4, 0xca, 0xb2, 0x11, 0x6e,
0xee, 0x21 ),
CIPHERTEXT ( 0xc6, 0x87, 0x7b, 0x03, 0x55, 0x2e, 0x97, 0xd9, 0xa1,
0xe6, 0x55, 0x7f, 0x90, 0xdc, 0x7a, 0xdd, 0xe1, 0x5a,
0x2f, 0x43 ),
AUTH ( 0x25, 0x36, 0x27, 0x2b, 0xee, 0x74, 0x46, 0x82, 0x00, 0x41,
0x85, 0x4e, 0x10, 0xb4, 0x9a, 0x03 ) );
/* AES-GCM test case 210 */
CIPHER_TEST ( wycheproof_aes_gcm_31562fe1, &aes_gcm_algorithm,
KEY ( 0x97, 0x55, 0xeb, 0x90, 0x9e, 0x1c, 0x30, 0xc2, 0xc1, 0x1d,
0x3f, 0x10, 0x61, 0x07, 0xe7, 0xb5, 0x73, 0xc2, 0x5b, 0x9f,
0xdb, 0x8b, 0xc1, 0x9a ),
IV ( 0xa8, 0x2a, 0x5f, 0x56, 0x14, 0x31, 0xc6, 0x89, 0xe7, 0xc4,
0xdc, 0x0b ),
ADDITIONAL ( 0xe1, 0x2f, 0x56, 0x81, 0x34, 0x51, 0x3a, 0x0e, 0xa7,
0x58, 0x37, 0x57, 0x13, 0x21, 0xe6, 0x35, 0x5f, 0x70,
0x78, 0x97, 0x01, 0x84, 0x40, 0x0b, 0x12, 0x97, 0xdb,
0x21, 0xb0, 0xcd, 0x34, 0xc6, 0x67, 0x78, 0x52, 0xa3,
0x07, 0x9a, 0x31, 0xf2, 0xae, 0x83, 0x78, 0x12, 0x70,
0xb3, 0x6a, 0x97, 0xa2, 0x8d, 0xa3, 0x91, 0x60, 0x5f,
0x02, 0xb4, 0x07, 0x54, 0x50, 0x18, 0x71, 0x67, 0x56,
0x16, 0xa9, 0xa9, 0x04, 0x7f, 0x7e, 0x38, 0x65, 0x29,
0x51, 0x20, 0xd5, 0xd3, 0xd3, 0x29, 0xeb, 0xcc, 0x7a,
0x4e, 0x24, 0xef, 0x8d, 0xb3, 0xef, 0xe6, 0x15, 0xc2,
0xa9, 0x10, 0x2d, 0xfa, 0x7a, 0x49, 0xc3, 0x70, 0xf3,
0x33, 0xc6, 0x2a, 0xc1, 0x96, 0xfb, 0x49, 0x49, 0xc6,
0x44, 0x09, 0x49, 0x27, 0x12, 0xe3, 0xb4, 0x23, 0xfa,
0xf6, 0x21, 0x44, 0x3e, 0x6d, 0x07, 0xe7, 0x67, 0x38,
0x49, 0x7e, 0x30, 0x1d, 0x41, 0xc2, 0x6a, 0x41, 0x4e,
0x8d, 0x08, 0xff, 0x11, 0x8d, 0x65, 0xb6, 0xa2, 0xd6,
0x76, 0x8d, 0x18, 0x88, 0x3c, 0x52, 0x46, 0x6b, 0x5a,
0xf5, 0x8c, 0xf8, 0x33, 0x59, 0x04, 0xa2, 0xeb, 0xb1,
0xc0, 0x26, 0x73, 0xc8, 0x0c, 0x28, 0x5d, 0x67, 0x71,
0x06, 0x7b, 0x0d, 0xb6, 0xe6, 0xe9, 0x31, 0x56, 0x40,
0x5b, 0xb2, 0xf5, 0xb6, 0x1b, 0x5b, 0xe8, 0x0d, 0xf0,
0xdb, 0x6a, 0xe5, 0xfa, 0x8a, 0x9f, 0xc6, 0x9d, 0xb8,
0x0b, 0xe2, 0x15, 0xa0, 0xae, 0x17, 0xb8, 0x08, 0xf6,
0xa0, 0x0c, 0x52, 0x55, 0x5b, 0x4b, 0x31, 0x88, 0xe7,
0x1e, 0xa3, 0x8f, 0xf0, 0x85, 0x83, 0xb6, 0xca, 0xbd,
0x0b, 0x3f, 0x86, 0xb4, 0x4f, 0x2a, 0x49, 0x4c, 0xf5,
0x4b, 0xb4, 0x13, 0x20, 0xbd, 0xcd, 0x8b, 0xeb, 0xd1,
0xe8, 0xb5, 0x66, 0x43, 0x5e, 0x9f, 0x6b, 0x29, 0x49,
0xe2, 0x15, 0x2c, 0x5f, 0x72, 0x1d, 0x04, 0x90, 0xdb,
0x80, 0xf5, 0x64, 0x16, 0x4d, 0xbc, 0x6f, 0x39, 0x49,
0x33, 0xda, 0xdd, 0x7b, 0x98, 0xef, 0x28, 0xb0, 0x4f,
0x54, 0x06, 0x4f, 0x9a, 0xb8, 0x4e, 0xa7, 0xf6, 0xfd,
0x92, 0xf3, 0xbb, 0x07, 0x1e, 0xee, 0x8b, 0x3b, 0x92,
0x4e, 0xa9, 0xf1, 0x82, 0xe7, 0x07, 0xa0, 0x6f, 0x80,
0xc6, 0x12, 0x94, 0x85, 0xc6, 0x48, 0xa7, 0xae, 0xc6,
0xe0, 0x0c, 0xdb, 0xb1, 0xae, 0x41, 0xfd, 0x91, 0x27,
0x3f, 0xb8, 0x37, 0x0e, 0xa5, 0xac, 0x9b, 0x19, 0xa7,
0xfe, 0x00, 0x0b, 0x4f, 0x45, 0xa5, 0x86, 0xdd, 0x04,
0xe7, 0x93, 0x56, 0x52, 0x26, 0x93, 0x13, 0x00, 0xea,
0xf9, 0x00, 0xb9, 0x9d, 0x50, 0xb7, 0xa6, 0x8e, 0x7f,
0xc5, 0x17, 0xb5, 0x81, 0x41, 0x2b, 0x2b, 0x19, 0x3c,
0xc5, 0xd8, 0xb0, 0x2c, 0xab, 0x61, 0x02, 0x7c, 0xee,
0xe8, 0x70, 0x17, 0x18, 0xea, 0xe5, 0x84, 0x7b, 0x67,
0x4d, 0x68, 0xd3, 0x71, 0x77, 0x5e, 0xbd, 0x40, 0x13,
0x5a, 0x24, 0x96, 0x21, 0x65, 0xf2, 0xf7, 0xdb, 0xfd,
0x70, 0x69, 0xad, 0x1d, 0x8c, 0x88, 0xf2, 0xd2, 0xe1,
0x3b, 0xf0, 0x49, 0xe8, 0x47, 0xf6, 0xe5, 0x19, 0x80,
0x37, 0xa9, 0x0d, 0x19, 0x6d, 0x49, 0xee, 0x04, 0xb0,
0x8e, 0x21, 0x0a, 0xb9, 0x96, 0x7b, 0x37, 0x6c, 0xf8,
0x75, 0xb6, 0xcc, 0x66, 0xd7, 0x7e, 0x70, 0xa8, 0x2a,
0x0f, 0x7f, 0x06, 0xe2, 0x0c, 0xb2, 0xd4, 0x69, 0xb5,
0x9f, 0x2b, 0x59, 0xe5, 0xed, 0x0f, 0x27, 0x90, 0x79,
0x55, 0xd4, 0xe4, 0x82, 0x6b, 0x5b, 0x6b, 0xa9, 0x8d,
0x7c, 0xb3, 0x0f, 0x18, 0x04, 0xc6, 0xc4, 0x35, 0x01,
0x01, 0xdc, 0x79, 0x06, 0x84, 0x81, 0x17, 0x74, 0xaf,
0xc1, 0xbd, 0xc6, 0xa8, 0x4b, 0xae, 0x3b, 0xd3, 0xe2,
0xdf, 0xe0, 0x81, 0x80, 0xf0, 0xa5, 0x09 ),
PLAINTEXT ( 0xf8, 0x00, 0x7e, 0x07, 0x49, 0x51, 0xf1, 0x1f, 0x55,
0xe1, 0x07, 0x36, 0xb5, 0xdd, 0x17, 0xab, 0xff, 0x63,
0xe8, 0x7a ),
CIPHERTEXT ( 0xa8, 0x6d, 0xf5, 0x40, 0x84, 0x63, 0xe8, 0xba, 0xa3,
0x19, 0x8e, 0xb8, 0xb9, 0x31, 0xa2, 0x29, 0x8c, 0xeb,
0xb0, 0x97 ),
AUTH ( 0x67, 0x3d, 0xa0, 0x4c, 0x8e, 0xe1, 0xbb, 0xf2, 0xf7, 0xbe,
0x33, 0xc7, 0xbe, 0x2d, 0x09, 0xa5 ) );
/* AES-GCM test case 211 */
CIPHER_TEST ( wycheproof_aes_gcm_49e334ce, &aes_gcm_algorithm,
KEY ( 0xd4, 0x09, 0x00, 0x19, 0xa0, 0x7d, 0xe8, 0xff, 0x31, 0xe9,
0x8f, 0xd1, 0x89, 0x8f, 0xfb, 0xd8, 0xc1, 0x00, 0x1f, 0x58,
0x26, 0x9a, 0x64, 0x33 ),
IV ( 0x65, 0xae, 0xaa, 0x5e, 0xd2, 0xc6, 0x3a, 0xfd, 0x95, 0xff,
0x52, 0x2a ),
ADDITIONAL ( 0x37, 0xdf, 0x31, 0x1e, 0xda, 0xb4, 0x30, 0x3e, 0x9b,
0x10, 0xdc, 0x83, 0xa9, 0x0e, 0x85, 0x62, 0xc5, 0x5a,
0xeb, 0x9a, 0xb9, 0x85, 0x64, 0x43, 0x74, 0x68, 0xc6,
0xb4, 0x1d, 0x3e, 0x08, 0x89, 0x80, 0x79, 0xc9, 0xd8,
0x18, 0xe1, 0xca, 0x0f, 0x02, 0x49, 0xec, 0x36, 0xc1,
0x83, 0xd2, 0x66, 0x78, 0x82, 0x8f, 0x05, 0x36, 0xcb,
0x06, 0xa8, 0x74, 0x87, 0x09, 0x33, 0x08, 0x77, 0x15,
0x5c, 0xa9, 0xa7, 0xf8, 0x76, 0x29, 0x86, 0x8c, 0x12,
0x6b, 0x3d, 0xfb, 0xa2, 0x62, 0xe0, 0xe5, 0xec, 0x2e,
0x49, 0x3e, 0xa5, 0x1e, 0x45, 0x66, 0xa9, 0x4d, 0x82,
0x5c, 0x47, 0x79, 0x26, 0x34, 0xc8, 0xd9, 0x94, 0x46,
0x66, 0x00, 0x1e, 0x12, 0xad, 0x23, 0x99, 0xa4, 0xdd,
0xed, 0x6e, 0x2c, 0x67, 0x83, 0x0f, 0xd5, 0x27, 0x95,
0x6c, 0x02, 0xf2, 0xeb, 0x1b, 0xc5, 0x59, 0x91, 0xcc,
0x8b, 0xe6, 0x09, 0xb3, 0x49, 0x0c, 0x0c, 0x2a, 0x40,
0x63, 0xf0, 0xf2, 0xbd, 0x2a, 0x32, 0x03, 0x32, 0x8e,
0xa6, 0x81, 0x65, 0x79, 0xae, 0xd7, 0x60, 0x90, 0x80,
0x9e, 0x51, 0x17, 0x5f, 0x27, 0x52, 0x86, 0xf5, 0x6e,
0x77, 0xd0, 0x45, 0x5f, 0x9e, 0xc4, 0x5c, 0x0e, 0xd2,
0xf0, 0xf4, 0x54, 0x37, 0x43, 0x82, 0xa3, 0xb2, 0xd0,
0x43, 0x86, 0x2d, 0x3e, 0xe0, 0x69, 0xd5, 0x96, 0x6c,
0xbe, 0x01, 0x79, 0x27, 0xa8, 0xa8, 0xaa, 0xf5, 0x87,
0x3d, 0xe0, 0x38, 0xd9, 0x40, 0x37, 0x5b, 0x3a, 0x29,
0x71, 0xd4, 0x53, 0xe6, 0x46, 0xdb, 0xbb, 0x61, 0x42,
0x46, 0x32, 0x5f, 0x1f, 0x88, 0x63, 0x9c, 0x1e, 0x86,
0x8e, 0x43, 0xb7, 0x86, 0x8f, 0x37, 0xcd, 0x57, 0x7f,
0x8c, 0xe3, 0x5f, 0xf0, 0x5b, 0xc0, 0x15, 0x99, 0x92,
0xc3, 0x4b, 0x93, 0x3e, 0xb9, 0xc5, 0x0b, 0xf9, 0xd5,
0x25, 0x7d, 0x91, 0xb6, 0x44, 0xf0, 0xb2, 0x65, 0x8c,
0x63, 0x01, 0x0a, 0xfc, 0x9f, 0xc4, 0x9f, 0x60, 0xa5,
0x0b, 0x6f, 0x7a, 0xe9, 0x94, 0xd4, 0x37, 0x73, 0x13,
0xb9, 0xe7, 0x86, 0x57, 0xcc, 0xcd, 0xf4, 0xcd, 0xfa,
0x5d, 0x96, 0xeb, 0x5e, 0x93, 0x56, 0x13, 0xa2, 0x7d,
0x10, 0x9b, 0x5c, 0x20, 0x43, 0x4c, 0xa1, 0x08, 0xf0,
0x5d, 0xf5, 0xf7, 0x98, 0xd8, 0xbb, 0x42, 0x1c, 0x3e,
0x9d, 0xc2, 0xf5, 0x46, 0xd1, 0xb4, 0x50, 0x50, 0xa2,
0x6f, 0x88, 0x9a, 0xe0, 0x23, 0x5d, 0x2c, 0x39, 0xb1,
0xea, 0x4b, 0x2f, 0x3b, 0x52, 0x67, 0x27, 0x27, 0xc9,
0xe5, 0xda, 0x6d, 0xb7, 0x31, 0xc3, 0x53, 0x9c, 0x80,
0xd1, 0x05, 0x38, 0xe6, 0x96, 0x43, 0xc7, 0x9c, 0x68,
0x10, 0x14, 0xf8, 0x4f, 0xb3, 0xa8, 0x35, 0x6d, 0xba,
0xfb, 0xeb, 0x6e, 0x8e, 0x70, 0x1c, 0x44, 0x5d, 0x52,
0x4b, 0x63, 0xb1, 0xb8, 0xff, 0xf4, 0x9c, 0x4f, 0xbc,
0xf6, 0x72, 0xa0, 0x79, 0x77, 0xb9, 0x66, 0x1f, 0x47,
0x2e, 0xfc, 0x50, 0x8d, 0x43, 0x0c, 0xef, 0xe8, 0xe7,
0x44, 0xf3, 0x24, 0xc2, 0x28, 0x46, 0x06, 0x0c, 0x63,
0x7a, 0xda, 0x1e, 0x83, 0xa1, 0x77, 0xad, 0x25, 0x20,
0xb8, 0xac, 0x21, 0x4b, 0x84, 0x4c, 0x50, 0x64, 0x93,
0x43, 0x4f, 0x8f, 0x16, 0x66, 0xa0, 0xbb, 0x6a, 0x3f,
0x57, 0xec, 0x6c, 0x4e, 0xfd, 0x3f, 0x13, 0x8f, 0xb7,
0x67, 0xd7, 0xef, 0x6c, 0xac, 0x7c, 0x9d, 0x31, 0xdb,
0x5c, 0x95, 0x4b, 0x7a, 0x7f, 0xd2, 0xa8, 0x73, 0x08,
0xf9, 0x97, 0xed, 0xa1, 0xd8, 0xae, 0x8c, 0xc0, 0xc7,
0x21, 0x1e, 0xc1, 0x3f, 0xc6, 0xfd, 0xa8, 0x45, 0xea,
0xdc, 0xd2, 0x5c, 0x7f, 0x7a, 0x9c, 0x69, 0xcc, 0x38,
0xd9, 0x14, 0x39, 0xfe, 0x7e, 0xf1, 0x53, 0x83, 0x5f,
0xd9, 0x72, 0xe2, 0x18, 0x59, 0x4c, 0x2a, 0x06 ),
PLAINTEXT ( 0xab, 0xe8, 0x60, 0x98, 0xf7, 0x98, 0x94, 0x6a, 0xdd,
0x9b, 0x1b, 0x07, 0x8f, 0x16, 0x35, 0x8e, 0xa0, 0xdd,
0x0c, 0xd1 ),
CIPHERTEXT ( 0x9d, 0x0a, 0x4e, 0x2f, 0xcd, 0x6f, 0xf3, 0x0c, 0xb3,
0xcc, 0xaa, 0xa2, 0x9f, 0x31, 0x13, 0x92, 0xe1, 0xb4,
0x3f, 0xe4 ),
AUTH ( 0xf3, 0x5d, 0xac, 0x66, 0x5c, 0x8b, 0xac, 0x31, 0xf6, 0xab,
0x05, 0x87, 0x61, 0x5e, 0xc1, 0xbc ) );
/* AES-GCM test case 212 */
CIPHER_TEST ( wycheproof_aes_gcm_6677d2a7, &aes_gcm_algorithm,
KEY ( 0x2c, 0xa0, 0x90, 0xf0, 0xf4, 0xec, 0x5a, 0xfd, 0xf4, 0xa3,
0xcf, 0xb2, 0x53, 0xfe, 0x2e, 0x87, 0x77, 0x1d, 0xdd, 0x5b,
0x03, 0x75, 0xf5, 0x67 ),
IV ( 0x4c, 0x48, 0xb1, 0x51, 0x43, 0xa3, 0xf4, 0x03, 0x05, 0xc7,
0x0c, 0xd6 ),
ADDITIONAL ( 0x89, 0x4f, 0xb5, 0x98, 0xd6, 0x7e, 0x5d, 0x2d, 0x43,
0x4f, 0xd2, 0x16, 0xd3, 0x8e, 0x69, 0x63, 0x1e, 0x69,
0xc2, 0x3e, 0x48, 0x8f, 0xfb, 0xde, 0x6e, 0x4f, 0xf8,
0x4b, 0x10, 0xf5, 0x15, 0x63, 0xda, 0x1c, 0x8c, 0xa0,
0x53, 0x08, 0xfd, 0xa7, 0x43, 0xaf, 0x0c, 0x55, 0xc3,
0x71, 0x44, 0x79, 0xd0, 0xb3, 0x37, 0xb6, 0x15, 0x7c,
0x06, 0x5b, 0xf7, 0x4e, 0x95, 0x27, 0x98, 0x5a, 0x76,
0x56, 0x18, 0x43, 0xf3, 0x47, 0xf1, 0x52, 0x68, 0xf2,
0xc9, 0xb7, 0x78, 0xb2, 0x73, 0xa6, 0x49, 0x6c, 0x0b,
0x13, 0xdd, 0x6b, 0xed, 0xd7, 0x87, 0x6b, 0x33, 0x6a,
0xba, 0xc4, 0xe8, 0x71, 0x58, 0x4c, 0x54, 0xc8, 0xab,
0x1e, 0xe7, 0x31, 0xbe, 0x17, 0xed, 0x00, 0x44, 0xc8,
0x2f, 0xef, 0x47, 0x34, 0x11, 0x31, 0xf3, 0xce, 0x09,
0x91, 0x8d, 0xc2, 0x92, 0x0a, 0x8b, 0x64, 0x26, 0xef,
0x40, 0xa3, 0xa5, 0x39, 0x23, 0x0a, 0x28, 0xe2, 0x63,
0x6d, 0x27, 0xe4, 0x2a, 0x26, 0x36, 0xd0, 0x16, 0xbb,
0x58, 0xef, 0x89, 0x87, 0xfb, 0x52, 0xf0, 0x66, 0xe7,
0x5e, 0x31, 0x93, 0xa8, 0xf9, 0x8f, 0x58, 0xf6, 0xeb,
0x61, 0x78, 0xbf, 0x93, 0x0c, 0xca, 0x0f, 0xfc, 0x57,
0x28, 0xd6, 0x7a, 0x9e, 0x02, 0x35, 0x10, 0x51, 0xb4,
0x7a, 0xbc, 0xcc, 0x8e, 0x8a, 0xfa, 0xef, 0xf2, 0x13,
0x4c, 0x79, 0xa0, 0x8d, 0x3c, 0x4f, 0x59, 0x6d, 0xe2,
0x27, 0xf8, 0x7f, 0x48, 0xf5, 0x3f, 0x60, 0x71, 0x50,
0x54, 0xbb, 0x59, 0xe9, 0x64, 0x0b, 0x3f, 0x22, 0x48,
0x17, 0xff, 0x24, 0x53, 0xcd, 0x68, 0x57, 0x40, 0xbb,
0xd6, 0x5f, 0x7d, 0xe9, 0xd7, 0x1d, 0x04, 0x1a, 0x90,
0xa5, 0x14, 0x61, 0x22, 0xe1, 0xc1, 0x3b, 0xba, 0xf3,
0x64, 0xa7, 0xbc, 0x30, 0xe1, 0x82, 0x7c, 0xb9, 0x62,
0xaa, 0x40, 0x9f, 0xef, 0xcc, 0x2d, 0x51, 0x2c, 0xef,
0x53, 0xb3, 0xf0, 0x05, 0x95, 0x50, 0xc5, 0x46, 0x42,
0x19, 0xb6, 0x36, 0x08, 0x27, 0x68, 0xf6, 0x12, 0x96,
0xcd, 0x1e, 0xef, 0x8c, 0xce, 0x71, 0xc1, 0x7c, 0x84,
0xfd, 0x47, 0x17, 0xe2, 0x31, 0xbb, 0x5b, 0xe2, 0x72,
0x83, 0x9b, 0xd7, 0x38, 0x5c, 0x8e, 0xf8, 0x68, 0x01,
0x00, 0x21, 0x2e, 0xca, 0xb4, 0x43, 0x0a, 0x8b, 0xb6,
0xfa, 0x65, 0x99, 0xc4, 0x7a, 0xce, 0x67, 0x34, 0x09,
0x90, 0x1b, 0x0f, 0x09, 0x8b, 0x61, 0x72, 0x09, 0x20,
0x41, 0x9f, 0x03, 0x3c, 0x5e, 0xfc, 0x7c, 0xf6, 0x33,
0x04, 0x70, 0x21, 0xc8, 0x32, 0x96, 0x97, 0xa3, 0x88,
0x7b, 0xa7, 0xd0, 0xe4, 0xce, 0x8e, 0x57, 0x3c, 0x9c,
0x05, 0x5d, 0xaf, 0x28, 0x57, 0x82, 0xeb, 0x06, 0x57,
0xeb, 0xf4, 0x66, 0x6f, 0x4f, 0xe0, 0x78, 0xf2, 0xfb,
0x93, 0x32, 0x3b, 0x71, 0x51, 0xd9, 0x5a, 0xf1, 0xff,
0xb5, 0xbd, 0xde, 0xc2, 0xfb, 0x1e, 0x96, 0xb4, 0xc7,
0x0a, 0x0b, 0x81, 0x62, 0x22, 0x49, 0x05, 0xdd, 0x2c,
0x0a, 0xcb, 0x9b, 0x1c, 0x1c, 0x33, 0x2b, 0xdd, 0x35,
0x6d, 0x05, 0xb5, 0xfa, 0xb9, 0x81, 0x3c, 0x16, 0xf8,
0x93, 0xdc, 0xce, 0x2a, 0x95, 0xb0, 0xb3, 0x4d, 0x4d,
0x9a, 0x59, 0x97, 0x03, 0x7a, 0x90, 0xde, 0xd2, 0x2d,
0xe5, 0xe4, 0xd0, 0xe3, 0xe4, 0x10, 0x56, 0x9d, 0x3b,
0x01, 0x0d, 0x31, 0xba, 0x78, 0x84, 0x3c, 0x6b, 0x62,
0x26, 0xf3, 0x64, 0xec, 0xc9, 0x69, 0x56, 0x23, 0xce,
0x1c, 0x1c, 0x21, 0xbf, 0x57, 0x34, 0xe0, 0x8c, 0x30,
0x97, 0xd0, 0xf3, 0x2a, 0x06, 0x24, 0xd3, 0x2b, 0x9e,
0xb4, 0x9f, 0x7a, 0xe6, 0x1b, 0x68, 0xc5, 0x0f, 0x59,
0x20, 0xdb, 0x67, 0x5a, 0x5a, 0x8a, 0x73, 0xcd, 0x28,
0x83, 0x64, 0xec, 0x97, 0x05, 0xdb, 0x79, 0x98, 0x93 ),
PLAINTEXT ( 0x00, 0xf6, 0x84, 0x0e, 0x9b, 0x66, 0xef, 0x3b, 0x6b,
0xe0, 0x1f, 0x74, 0xdf, 0xea, 0x1c, 0xa4, 0x08, 0x03,
0x8e, 0xf5 ),
CIPHERTEXT ( 0xda, 0xf4, 0xf2, 0xee, 0xd7, 0x2c, 0x51, 0x94, 0x1e,
0x80, 0x38, 0xe9, 0x2c, 0x5d, 0x92, 0x72, 0xc2, 0xb2,
0xd9, 0x7b ),
AUTH ( 0x5c, 0x3f, 0xd7, 0xda, 0x0d, 0xfb, 0xf6, 0x7c, 0x11, 0xac,
0xb8, 0x66, 0xca, 0xf9, 0x2a, 0x99 ) );
/* AES-GCM test case 213 (skipped: modified tag) */
/* AES-GCM test case 214 (skipped: modified tag) */
/* AES-GCM test case 215 (skipped: modified tag) */
/* AES-GCM test case 216 (skipped: modified tag) */
/* AES-GCM test case 217 (skipped: modified tag) */
/* AES-GCM test case 218 (skipped: modified tag) */
/* AES-GCM test case 219 (skipped: modified tag) */
/* AES-GCM test case 220 (skipped: modified tag) */
/* AES-GCM test case 221 (skipped: modified tag) */
/* AES-GCM test case 222 (skipped: modified tag) */
/* AES-GCM test case 223 (skipped: modified tag) */
/* AES-GCM test case 224 (skipped: modified tag) */
/* AES-GCM test case 225 (skipped: modified tag) */
/* AES-GCM test case 226 (skipped: modified tag) */
/* AES-GCM test case 227 (skipped: modified tag) */
/* AES-GCM test case 228 (skipped: modified tag) */
/* AES-GCM test case 229 (skipped: modified tag) */
/* AES-GCM test case 230 (skipped: modified tag) */
/* AES-GCM test case 231 (skipped: modified tag) */
/* AES-GCM test case 232 (skipped: modified tag) */
/* AES-GCM test case 233 (skipped: modified tag) */
/* AES-GCM test case 234 (skipped: modified tag) */
/* AES-GCM test case 235 (skipped: modified tag) */
/* AES-GCM test case 236 (skipped: modified tag) */
/* AES-GCM test case 237 (skipped: modified tag) */
/* AES-GCM test case 238 (skipped: modified tag) */
/* AES-GCM test case 239 (skipped: modified tag) */
/* AES-GCM test case 240 */
CIPHER_TEST ( wycheproof_aes_gcm_5d6316ec, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x5c, 0x2e, 0xa9, 0xb6, 0x95, 0xfc, 0xf6, 0xe2, 0x64, 0xb9,
0x60, 0x74, 0xd6, 0xbf, 0xa5, 0x72 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x28, 0xe1, 0xc5, 0x23, 0x2f, 0x4e, 0xe8, 0x16, 0x1d,
0xbe, 0x4c, 0x03, 0x63, 0x09, 0xe0, 0xb3, 0x25, 0x4e,
0x92, 0x12, 0xbe, 0xf0, 0xa9, 0x34, 0x31, 0xce, 0x5e,
0x56, 0x04, 0xc8, 0xf6, 0xa7, 0x3c, 0x18, 0xa3, 0x18,
0x30, 0x18, 0xb7, 0x70 ),
AUTH ( 0xd5, 0x80, 0x8a, 0x1b, 0xd1, 0x1a, 0x01, 0x12, 0x9b, 0xf3,
0xc6, 0x91, 0x9a, 0xff, 0x23, 0x39 ) );
/* AES-GCM test case 241 */
CIPHER_TEST ( wycheproof_aes_gcm_6c7b5516, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x57, 0xb3, 0xa8, 0x1f, 0x2c, 0x36, 0xb6, 0xb0, 0x65, 0x77,
0xca, 0x0f, 0xba, 0xb8, 0xfa, 0x8e ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xcc, 0xee, 0xbe, 0xb4, 0xfe, 0x4c, 0xd9, 0x0c, 0x51,
0x4e, 0x52, 0xd2, 0x32, 0x7a, 0x2e, 0xcd, 0x75, 0x39,
0x36, 0x61, 0x00, 0x6c, 0xf2, 0x47, 0x6d, 0x86, 0x20,
0x14, 0x9a, 0xef, 0x3d, 0x1c, 0xdc, 0xe4, 0x91, 0xff,
0xf3, 0xe7, 0xa7, 0xa3 ),
AUTH ( 0x81, 0x32, 0xe8, 0x65, 0xb6, 0x9d, 0x64, 0xef, 0x37, 0xdb,
0x26, 0x1f, 0x80, 0xcb, 0xbe, 0x24 ) );
/* AES-GCM test case 242 */
CIPHER_TEST ( wycheproof_aes_gcm_3d134168, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0xce, 0x20, 0xa7, 0xe8, 0x70, 0x69, 0x6a, 0x5e, 0x68, 0x53,
0x3c, 0x46, 0x5b, 0xad, 0x2b, 0xa1 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x4f, 0x43, 0x50, 0x56, 0x5d, 0x91, 0xd9, 0xaa, 0x8c,
0x5f, 0x40, 0x48, 0x55, 0x04, 0x92, 0xad, 0x6d, 0x6f,
0xda, 0xbf, 0x66, 0xda, 0x5d, 0x1e, 0x2a, 0xf7, 0xbf,
0xe1, 0xa8, 0xaa, 0xda, 0xa0, 0xba, 0xa3, 0xde, 0x38,
0xa4, 0x1d, 0x97, 0x13 ),
AUTH ( 0x15, 0x5d, 0xa6, 0x44, 0x1e, 0xc0, 0x71, 0xef, 0x2d, 0x8e,
0x6c, 0xff, 0xba, 0xcc, 0x1c, 0x7c ) );
/* AES-GCM test case 243 */
CIPHER_TEST ( wycheproof_aes_gcm_637cdd7c, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x91, 0x8e, 0x3c, 0x19, 0xdb, 0xdf, 0xee, 0x2d, 0xb1, 0x81,
0x56, 0xc5, 0xb9, 0x3f, 0x3d, 0x75 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x83, 0x16, 0xa5, 0x31, 0x67, 0xb6, 0xde, 0x1a, 0x75,
0x75, 0x70, 0x06, 0x93, 0xff, 0xef, 0x27, 0x4f, 0x43,
0x50, 0x56, 0x5d, 0x91, 0xd9, 0xaa, 0x8c, 0x5f, 0x40,
0x48, 0x55, 0x04, 0x92, 0xad, 0x6d, 0x6f, 0xda, 0xbf,
0x66, 0xda, 0x5d, 0x1e ),
AUTH ( 0x6c, 0x57, 0x4a, 0xa6, 0xa2, 0x49, 0x0c, 0xc3, 0xb2, 0xf2,
0xf8, 0xf0, 0xff, 0xbc, 0x56, 0xc4 ) );
/* AES-GCM test case 244 */
CIPHER_TEST ( wycheproof_aes_gcm_a524a3e1, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x71, 0x7d, 0x90, 0x0b, 0x27, 0x04, 0x62, 0xb9, 0xdb, 0xf7,
0xe9, 0x41, 0x9e, 0x89, 0x06, 0x09 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x51, 0x75, 0x92, 0x75, 0x13, 0xe7, 0x51, 0xeb, 0x30,
0x9f, 0x45, 0xbc, 0x2e, 0xf2, 0x25, 0xf2, 0x83, 0x16,
0xa5, 0x31, 0x67, 0xb6, 0xde, 0x1a, 0x75, 0x75, 0x70,
0x06, 0x93, 0xff, 0xef, 0x27, 0x4f, 0x43, 0x50, 0x56,
0x5d, 0x91, 0xd9, 0xaa ),
AUTH ( 0x80, 0x82, 0xa7, 0x61, 0xe1, 0xd7, 0x55, 0x34, 0x4b, 0xf2,
0x96, 0x22, 0x14, 0x4e, 0x7d, 0x39 ) );
/* AES-GCM test case 245 */
CIPHER_TEST ( wycheproof_aes_gcm_b5f09448, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0xec, 0xd5, 0x21, 0x20, 0xaf, 0x24, 0x0e, 0x9b, 0x4b, 0xf3,
0xb9, 0xd1, 0xee, 0xb4, 0x94, 0x34 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x36, 0xb3, 0xfb, 0xec, 0xd0, 0x91, 0x78, 0xd0, 0x45,
0x27, 0xfb, 0x37, 0x54, 0x4f, 0x55, 0x79, 0xd2, 0x0d,
0x60, 0xa4, 0x12, 0x66, 0xf6, 0x85, 0xc4, 0x80, 0x98,
0xe1, 0xa5, 0x28, 0x04, 0xca, 0x38, 0x7d, 0x90, 0x70,
0x9d, 0x32, 0x68, 0xdd ),
AUTH ( 0x03, 0x3e, 0x0e, 0xf2, 0x95, 0x3e, 0xbf, 0xd8, 0x42, 0x57,
0x37, 0xc7, 0xd3, 0x93, 0xf8, 0x9a ) );
/* AES-GCM test case 246 */
CIPHER_TEST ( wycheproof_aes_gcm_c90d1019, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0xb3, 0x7b, 0xba, 0xd1, 0x04, 0x92, 0x8a, 0xe8, 0x92, 0x21,
0xd3, 0x52, 0x0c, 0x26, 0x82, 0xe0 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x16, 0x92, 0x9b, 0x77, 0x30, 0x51, 0xf1, 0x2b, 0x0a,
0xda, 0xc9, 0x5f, 0x65, 0xe2, 0x1a, 0x7f, 0x36, 0xb3,
0xfb, 0xec, 0xd0, 0x91, 0x78, 0xd0, 0x45, 0x27, 0xfb,
0x37, 0x54, 0x4f, 0x55, 0x79, 0xd2, 0x0d, 0x60, 0xa4,
0x12, 0x66, 0xf6, 0x85 ),
AUTH ( 0xca, 0x44, 0x8b, 0xb7, 0xe5, 0x2e, 0x89, 0x7e, 0xca, 0x23,
0x4e, 0xf3, 0x43, 0xd0, 0x57, 0xd0 ) );
/* AES-GCM test case 247 */
CIPHER_TEST ( wycheproof_aes_gcm_cc16f896, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x53, 0x88, 0x16, 0xc3, 0xf8, 0x49, 0x06, 0x7c, 0xf8, 0x57,
0x6c, 0xd6, 0x2b, 0x90, 0xb9, 0x9c ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x6d, 0x3f, 0xae, 0xfa, 0xf6, 0x91, 0xd5, 0x81, 0x63,
0x84, 0x6f, 0x8d, 0x4b, 0x9f, 0xfd, 0x59, 0x16, 0x92,
0x9b, 0x77, 0x30, 0x51, 0xf1, 0x2b, 0x0a, 0xda, 0xc9,
0x5f, 0x65, 0xe2, 0x1a, 0x7f, 0x36, 0xb3, 0xfb, 0xec,
0xd0, 0x91, 0x78, 0xd0 ),
AUTH ( 0x84, 0xf4, 0x97, 0x40, 0xe6, 0x75, 0x7f, 0x63, 0xdd, 0x0d,
0xf7, 0xcb, 0x76, 0x56, 0xd0, 0xef ) );
/* AES-GCM test case 248 */
CIPHER_TEST ( wycheproof_aes_gcm_c9b9c25b, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0xd1, 0x0e, 0x63, 0x19, 0x43, 0xcd, 0x3b, 0xda, 0xba, 0xba,
0xb2, 0xbb, 0xd1, 0x39, 0x51, 0xc0 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xd6, 0x01, 0x96, 0xc2, 0xd1, 0x4f, 0xcf, 0x30, 0xc0,
0x99, 0x1d, 0x27, 0x21, 0xdd, 0xc5, 0x2d, 0x38, 0x5f,
0x40, 0x7a, 0x16, 0x69, 0x1d, 0xad, 0xe8, 0x2c, 0x90,
0x23, 0xc8, 0x55, 0xfd, 0x8e, 0x2e, 0x8f, 0xbb, 0x56,
0x21, 0x02, 0xf0, 0x18 ),
AUTH ( 0x87, 0x7e, 0x15, 0xd9, 0x88, 0x9e, 0x69, 0xa9, 0x9f, 0xcc,
0x6d, 0x72, 0x74, 0x65, 0xc3, 0x91 ) );
/* AES-GCM test case 249 */
CIPHER_TEST ( wycheproof_aes_gcm_9bcfa234, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x8e, 0xa0, 0xf8, 0xe8, 0xe8, 0x7b, 0xbf, 0xa9, 0x63, 0x68,
0xd8, 0x38, 0x33, 0xab, 0x47, 0x14 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x94, 0x8f, 0xbc, 0xec, 0xa1, 0x2a, 0x6e, 0x4f, 0xab,
0xb7, 0x9b, 0x6d, 0x96, 0x5e, 0x33, 0x6f, 0xd6, 0x01,
0x96, 0xc2, 0xd1, 0x4f, 0xcf, 0x30, 0xc0, 0x99, 0x1d,
0x27, 0x21, 0xdd, 0xc5, 0x2d, 0x38, 0x5f, 0x40, 0x7a,
0x16, 0x69, 0x1d, 0xad ),
AUTH ( 0xcd, 0x57, 0x57, 0x62, 0x69, 0x45, 0x97, 0x6b, 0xa9, 0xf0,
0x26, 0x4b, 0xd6, 0xbe, 0xe8, 0x94 ) );
/* AES-GCM test case 250 */
CIPHER_TEST ( wycheproof_aes_gcm_02e3c344, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x7b, 0x2d, 0xf4, 0xfb, 0xed, 0x1d, 0xe2, 0x72, 0x7e, 0xb2,
0x48, 0x98, 0xe5, 0xde, 0xab, 0xb9 ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0xa1, 0xa0, 0x12, 0x06, 0x60, 0xff, 0x52, 0xe6, 0xb1,
0x70, 0x0b, 0x12, 0xc5, 0x4d, 0x2d, 0x33, 0xb9, 0x4b,
0x00, 0xcd, 0x78, 0x82, 0xd8, 0x85, 0x7d, 0x84, 0xe6,
0xe1, 0x83, 0xa1, 0xde, 0xa6, 0xee, 0x85, 0xa7, 0xda,
0x84, 0xfb, 0xc3, 0x5d ),
AUTH ( 0xb0, 0x15, 0xd7, 0x2d, 0xa6, 0x2c, 0x81, 0xcb, 0x4d, 0x26,
0x72, 0x53, 0xb2, 0x0d, 0xb9, 0xe5 ) );
/* AES-GCM test case 251 */
CIPHER_TEST ( wycheproof_aes_gcm_0a6597f4, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x24, 0x83, 0x6f, 0x0a, 0x46, 0xab, 0x66, 0x01, 0xa7, 0x60,
0x22, 0x1b, 0x07, 0x4c, 0xbd, 0x6d ),
ADDITIONAL(),
PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00 ),
CIPHERTEXT ( 0x5e, 0x34, 0x34, 0xb4, 0x5e, 0xdb, 0xf0, 0xd1, 0xf6,
0xe0, 0x2d, 0x11, 0x44, 0xdb, 0xf8, 0x67, 0xa1, 0xa0,
0x12, 0x06, 0x60, 0xff, 0x52, 0xe6, 0xb1, 0x70, 0x0b,
0x12, 0xc5, 0x4d, 0x2d, 0x33, 0xb9, 0x4b, 0x00, 0xcd,
0x78, 0x82, 0xd8, 0x85 ),
AUTH ( 0xee, 0x74, 0xcc, 0xb3, 0x0d, 0x64, 0x9e, 0xbf, 0x69, 0x16,
0xd0, 0x5a, 0x7d, 0xbe, 0x56, 0x96 ) );
/* AES-GCM test case 252 */
CIPHER_TEST ( wycheproof_aes_gcm_4723a634, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),
ADDITIONAL(),
PLAINTEXT ( 0x8d, 0x74, 0xf1, 0xc9, 0x72, 0x43, 0xd3, 0x62, 0x57,
0x7f, 0xf3, 0x76, 0xc3, 0x93, 0xd2, 0xdc ),
CIPHERTEXT ( 0x26, 0x5c, 0x42, 0xe2, 0xb9, 0x6e, 0xa1, 0xde, 0x9c,
0x24, 0xf7, 0x18, 0x2e, 0x33, 0x73, 0x90 ),
AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) );
/* AES-GCM test case 253 */
CIPHER_TEST ( wycheproof_aes_gcm_b7cd0c19, &aes_gcm_algorithm,
KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99,
0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43,
0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed,
0xfe, 0x0f ),
IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ),
ADDITIONAL(),
PLAINTEXT ( 0x88, 0x4d, 0xf0, 0xe7, 0x6f, 0x3c, 0xe2, 0x27, 0xbf,
0x95, 0x95, 0xd1, 0x03, 0x82, 0x5a, 0x46 ),
CIPHERTEXT ( 0x98, 0x8f, 0x47, 0x66, 0x8e, 0xa6, 0x50, 0xcb, 0xaa,
0x67, 0x14, 0x71, 0x1a, 0xbe, 0x26, 0x8d ),
AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) );
/* AES-GCM test case 254 */
CIPHER_TEST ( wycheproof_aes_gcm_bcf63dc2, &aes_gcm_algorithm,
KEY ( 0xb4, 0xcd, 0x11, 0xdb, 0x0b, 0x3e, 0x0b, 0x9b, 0x34, 0xea,
0xfd, 0x9f, 0xe0, 0x27, 0x74, 0x69, 0x76, 0x37, 0x91, 0x55,
0xe7, 0x61, 0x16, 0xaf, 0xde, 0x1b, 0x96, 0xd2, 0x12, 0x98,
0xe3, 0x4f ),
IV ( 0x00, 0xc4, 0x9f, 0x4e, 0xbb, 0x07, 0x39, 0x3f, 0x07, 0xeb,
0xc3, 0x82, 0x5f, 0x7b, 0x08, 0x30 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x30, 0x6f, 0xe8, 0xc9, 0x64, 0x5c, 0xc8, 0x49, 0x82, 0x3e,
0x33, 0x3a, 0x68, 0x5b, 0x90, 0xb2 ) );
/* AES-GCM test case 255 */
CIPHER_TEST ( wycheproof_aes_gcm_294b997d, &aes_gcm_algorithm,
KEY ( 0xb7, 0x79, 0x7e, 0xb0, 0xc1, 0xa6, 0x08, 0x9a, 0xd5, 0x45,
0x2d, 0x81, 0xfd, 0xb1, 0x48, 0x28, 0xc0, 0x40, 0xdd, 0xc4,
0x58, 0x9c, 0x32, 0xb5, 0x65, 0xaa, 0xd8, 0xcb, 0x4d, 0xe3,
0xe4, 0xa0 ),
IV ( 0x0a, 0xd5, 0x70, 0xd8, 0x86, 0x39, 0x18, 0xfe, 0x89, 0x12,
0x4e, 0x09, 0xd1, 0x25, 0xa2, 0x71 ),
ADDITIONAL(),
PLAINTEXT ( 0xed ),
CIPHERTEXT ( 0x3f ),
AUTH ( 0xfd, 0x8f, 0x59, 0x3b, 0x83, 0x31, 0x4e, 0x33, 0xc5, 0xa7,
0x2e, 0xfb, 0xeb, 0x70, 0x95, 0xe8 ) );
/* AES-GCM test case 256 */
CIPHER_TEST ( wycheproof_aes_gcm_c973e6d5, &aes_gcm_algorithm,
KEY ( 0x4c, 0x01, 0x0d, 0x95, 0x61, 0xc7, 0x23, 0x4c, 0x30, 0x8c,
0x01, 0xce, 0xa3, 0x04, 0x0c, 0x92, 0x5a, 0x9f, 0x32, 0x4d,
0xc9, 0x58, 0xff, 0x90, 0x4a, 0xe3, 0x9b, 0x37, 0xe6, 0x0e,
0x1e, 0x03 ),
IV ( 0x2a, 0x55, 0xca, 0xa1, 0x37, 0xc5, 0xb0, 0xb6, 0x6c, 0xf3,
0x80, 0x9e, 0xb8, 0xf7, 0x30, 0xc4 ),
ADDITIONAL(),
PLAINTEXT ( 0x2a, 0x09, 0x3c, 0x9e, 0xd7, 0x2b, 0x8f, 0xf4, 0x99,
0x42, 0x01, 0xe9, 0xf9, 0xe0, 0x10 ),
CIPHERTEXT ( 0x04, 0x13, 0x41, 0x07, 0x8f, 0x04, 0x39, 0xe5, 0x0b,
0x43, 0xc9, 0x91, 0x63, 0x51, 0x17 ),
AUTH ( 0x5b, 0x8a, 0x2f, 0x2d, 0xa2, 0x0e, 0xf6, 0x57, 0xc9, 0x03,
0xda, 0x88, 0xef, 0x5f, 0x57, 0xbb ) );
/* AES-GCM test case 257 */
CIPHER_TEST ( wycheproof_aes_gcm_9d586636, &aes_gcm_algorithm,
KEY ( 0xe7, 0xf7, 0xa4, 0x8d, 0xf9, 0x9e, 0xdd, 0x92, 0xb8, 0x1f,
0x50, 0x86, 0x18, 0xaa, 0x96, 0x52, 0x6b, 0x27, 0x9d, 0xeb,
0xd9, 0xdd, 0xb2, 0x92, 0xd3, 0x85, 0xdd, 0xba, 0xe8, 0x0b,
0x22, 0x59 ),
IV ( 0x7e, 0xe3, 0x76, 0x91, 0x0f, 0x08, 0xf4, 0x97, 0xaa, 0x6c,
0x3a, 0xa7, 0x11, 0x36, 0x97, 0xfd ),
ADDITIONAL(),
PLAINTEXT ( 0x5e, 0x51, 0xdb, 0xbb, 0x86, 0x1b, 0x5e, 0xc6, 0x07,
0x51, 0xc0, 0x99, 0x6e, 0x00, 0x52, 0x7f ),
CIPHERTEXT ( 0x46, 0x94, 0x78, 0xd4, 0x48, 0xf7, 0xe9, 0x7d, 0x75,
0x55, 0x41, 0xaa, 0x09, 0xad, 0x95, 0xb0 ),
AUTH ( 0x25, 0x4a, 0xda, 0x5c, 0xf6, 0x62, 0xd9, 0x0c, 0x5e, 0x11,
0xb2, 0xbd, 0x9c, 0x4d, 0xb4, 0xc4 ) );
/* AES-GCM test case 258 */
CIPHER_TEST ( wycheproof_aes_gcm_07918c73, &aes_gcm_algorithm,
KEY ( 0x4f, 0x84, 0x78, 0x2b, 0xfb, 0xb6, 0x4a, 0x97, 0x3c, 0x3d,
0xe3, 0xdc, 0xfa, 0x34, 0x30, 0x36, 0x7f, 0xd6, 0x8b, 0xc0,
0xb4, 0xc3, 0xb3, 0x1e, 0x5d, 0x7c, 0x81, 0x41, 0xba, 0x3e,
0x6a, 0x67 ),
IV ( 0x5d, 0x1b, 0xde, 0x6f, 0xa0, 0x99, 0x4b, 0x33, 0xef, 0xd8,
0xf2, 0x3f, 0x53, 0x12, 0x48, 0xa7 ),
ADDITIONAL(),
PLAINTEXT ( 0x78, 0xcb, 0x66, 0x50, 0xa1, 0x90, 0x8a, 0x84, 0x21,
0x01, 0xea, 0x85, 0x80, 0x4f, 0xed, 0x00, 0xcc, 0x56,
0xfb, 0xda, 0xfa, 0xfb, 0xa0, 0xef, 0x4d, 0x1c, 0xa6,
0x07, 0xdc, 0xae, 0x57, 0xb6 ),
CIPHERTEXT ( 0xcb, 0x96, 0x02, 0x01, 0xfa, 0x5a, 0xd4, 0x1d, 0x41,
0xd1, 0xc2, 0xc8, 0x03, 0x7c, 0x71, 0xd5, 0x2b, 0x72,
0xe7, 0x6b, 0x16, 0xb5, 0x89, 0xd7, 0x1b, 0x97, 0x66,
0x27, 0xc9, 0x73, 0x4c, 0x9d ),
AUTH ( 0x8d, 0xfc, 0xe1, 0x64, 0x67, 0xc3, 0xa6, 0xeb, 0xb3, 0xe7,
0x24, 0x2c, 0x9a, 0x55, 0x19, 0x62 ) );
/* AES-GCM test case 259 */
CIPHER_TEST ( wycheproof_aes_gcm_807f66c0, &aes_gcm_algorithm,
KEY ( 0x34, 0xc7, 0x4e, 0x28, 0x18, 0x29, 0x48, 0xe0, 0x3a, 0xf0,
0x2a, 0x01, 0xf4, 0x6e, 0xb4, 0xf7 ),
IV ( 0xb0, 0xa7, 0x31, 0x19, 0xa9, 0x7d, 0x62, 0x38, 0x06, 0xb4,
0x9d, 0x45, 0xdd, 0xf4, 0xc7 ),
ADDITIONAL(),
PLAINTEXT ( 0xfe, 0x82, 0xba, 0x66, 0xcf, 0x2e, 0x26, 0x57, 0x41,
0xf2, 0xc8, 0x6c ),
CIPHERTEXT ( 0x2b, 0xc3, 0xef, 0x8e, 0x74, 0x02, 0xb4, 0x63, 0x1f,
0x48, 0xe9, 0xbe ),
AUTH ( 0x4b, 0x6f, 0x6f, 0x5b, 0xe2, 0x91, 0xa9, 0x0b, 0x9e, 0x93,
0xa8, 0xa8, 0x2d, 0xdb, 0xc8, 0xd8 ) );
/* AES-GCM test case 260 */
CIPHER_TEST ( wycheproof_aes_gcm_1a607e05, &aes_gcm_algorithm,
KEY ( 0x55, 0xcb, 0x7c, 0xac, 0x77, 0xef, 0xe1, 0x8a, 0x1e, 0xa3,
0xb3, 0x0c, 0x65, 0xf3, 0xf3, 0x46 ),
IV ( 0xe2, 0x2b, 0x6b, 0x14, 0x4a, 0xb2, 0x6b, 0x57, 0x81, 0x31,
0x6e, 0x7a, 0x42, 0xa7, 0x62, 0x02, 0xac, 0x4b, 0x22, 0x78 ),
ADDITIONAL(),
PLAINTEXT ( 0x2f, 0x3d, 0x11, 0xea, 0x32, 0xbf, 0x5b, 0xc7, 0x2c,
0xbe, 0x2b, 0x8d ),
CIPHERTEXT ( 0x4f, 0xe1, 0x3e, 0xf2, 0x9f, 0x11, 0x8f, 0x85, 0xa6,
0x31, 0x88, 0xf8 ),
AUTH ( 0x05, 0x97, 0x5b, 0x17, 0x53, 0x16, 0xdf, 0x80, 0x45, 0x88,
0x9f, 0x43, 0xe0, 0xc8, 0x57, 0xe0 ) );
/* AES-GCM test case 261 */
CIPHER_TEST ( wycheproof_aes_gcm_848e090c, &aes_gcm_algorithm,
KEY ( 0x66, 0xf7, 0x5a, 0xcb, 0xd8, 0xd3, 0xac, 0xf7, 0xaf, 0x47,
0xd1, 0x3e, 0x83, 0x84, 0xc2, 0x80, 0x9d, 0x6b, 0x91, 0x50,
0x3a, 0x7f, 0x29, 0x4b ),
IV ( 0xed, 0xf9, 0x3e, 0x16, 0x29, 0x4f, 0x15, 0xed, 0xed, 0x83,
0x80, 0x8f, 0x09, 0x32, 0x0e ),
ADDITIONAL(),
PLAINTEXT ( 0xa9, 0x00, 0xc8, 0x6b, 0x6b, 0x7e, 0x0e, 0x55, 0x63,
0xf8, 0xf8, 0x26 ),
CIPHERTEXT ( 0x9a, 0xf1, 0xa0, 0x22, 0xc6, 0x1c, 0x43, 0x15, 0xaa,
0x0e, 0x92, 0x3e ),
AUTH ( 0x20, 0x52, 0x9b, 0xff, 0x3c, 0x59, 0x22, 0x2e, 0xc3, 0x33,
0x53, 0xaf, 0x33, 0x7b, 0x1d, 0x40 ) );
/* AES-GCM test case 262 */
CIPHER_TEST ( wycheproof_aes_gcm_b238bfb2, &aes_gcm_algorithm,
KEY ( 0xef, 0x2e, 0x29, 0x9d, 0xd4, 0xec, 0xd7, 0xe3, 0xb9, 0xcc,
0x62, 0x78, 0x09, 0x22, 0xcc, 0x2c, 0x89, 0xf7, 0x88, 0x40,
0x56, 0x4d, 0x12, 0x76 ),
IV ( 0x13, 0x0c, 0x14, 0xc8, 0x39, 0xe3, 0x5b, 0x7d, 0x56, 0xb3,
0x35, 0x0b, 0x19, 0x4b, 0x0d, 0xa3, 0x42, 0xe6, 0xb6, 0x5d ),
ADDITIONAL(),
PLAINTEXT ( 0x03, 0xf5, 0x95, 0x79, 0xb1, 0x44, 0x37, 0x19, 0x95,
0x83, 0x27, 0x0e ),
CIPHERTEXT ( 0x07, 0x3a, 0x52, 0x91, 0xb1, 0x1d, 0xf3, 0x79, 0xf3,
0x1b, 0x4f, 0x16 ),
AUTH ( 0x17, 0x20, 0x59, 0x99, 0x49, 0x1b, 0xd4, 0xc1, 0xd6, 0xc7,
0xec, 0x3e, 0x56, 0x77, 0x9c, 0x32 ) );
/* AES-GCM test case 263 */
CIPHER_TEST ( wycheproof_aes_gcm_50ca31ab, &aes_gcm_algorithm,
KEY ( 0xe9, 0x8b, 0x06, 0x69, 0xa6, 0x45, 0xeb, 0x14, 0xcd, 0x06,
0xdf, 0x69, 0x68, 0xfc, 0x5f, 0x10, 0xed, 0xc9, 0xf5, 0x4f,
0xee, 0xd2, 0x64, 0xe3, 0xd4, 0x10, 0xcd, 0xc6, 0x1b, 0x72,
0xef, 0x51 ),
IV ( 0x17, 0xca, 0x25, 0x0f, 0xb7, 0x33, 0x87, 0x75, 0x56, 0x26,
0x32, 0x23, 0xea, 0xdd, 0xe1 ),
ADDITIONAL(),
PLAINTEXT ( 0xf3, 0x84, 0xb3, 0xed, 0x7b, 0x27, 0x46, 0x41, 0xf5,
0xdb, 0x60, 0xcf ),
CIPHERTEXT ( 0xfc, 0x21, 0x36, 0x02, 0xaa, 0x42, 0x3b, 0x87, 0xd7,
0xc2, 0xa8, 0x74 ),
AUTH ( 0x36, 0xb1, 0x5b, 0xab, 0x69, 0x23, 0xb1, 0x72, 0x18, 0xfe,
0x1c, 0x24, 0x04, 0x8e, 0x23, 0x91 ) );
/* AES-GCM test case 264 */
CIPHER_TEST ( wycheproof_aes_gcm_7a0a5da7, &aes_gcm_algorithm,
KEY ( 0x84, 0x9b, 0x3e, 0x6b, 0x8c, 0xdd, 0x85, 0xbd, 0xcf, 0xb8,
0xeb, 0x70, 0x1a, 0xa5, 0x52, 0x2a, 0xe2, 0x34, 0x0f, 0xbe,
0x52, 0x14, 0xe3, 0x89, 0x62, 0x2c, 0xef, 0x76, 0x97, 0x92,
0x25, 0xc4 ),
IV ( 0x0f, 0x9d, 0x6e, 0xd7, 0xee, 0xf3, 0x62, 0xdf, 0xa4, 0xa7,
0xdf, 0xa5, 0xc0, 0xf7, 0x4c, 0x5b, 0x27, 0xbd, 0x4e, 0xbf ),
ADDITIONAL(),
PLAINTEXT ( 0x8c, 0x55, 0x64, 0xe5, 0x30, 0x51, 0xc0, 0xde, 0x27,
0x31, 0x99, 0xb4 ),
CIPHERTEXT ( 0xc1, 0xd7, 0x62, 0x33, 0xe8, 0xc5, 0x04, 0x2e, 0x92,
0xbf, 0x8d, 0x32 ),
AUTH ( 0x7c, 0xf0, 0x36, 0xd2, 0x35, 0xd3, 0xb2, 0xdd, 0x34, 0x9a,
0x8c, 0x80, 0x4b, 0x65, 0x14, 0x4a ) );
/* AES-GCM test case 265 */
CIPHER_TEST ( wycheproof_aes_gcm_1b7eb29c, &aes_gcm_algorithm,
KEY ( 0x59, 0x27, 0xba, 0xe7, 0x48, 0xbb, 0x69, 0xd8, 0x1b, 0x5a,
0x72, 0x4e, 0x0a, 0x16, 0x56, 0x52 ),
IV ( 0x36, 0x5e, 0x0b, 0x96, 0x93, 0x2b, 0x13, 0x30, 0x6f, 0x92,
0xe9, 0xbb, 0x23, 0x84, 0x71, 0x65, 0xbc, 0xbf, 0x5d, 0x35,
0xe4, 0x5a, 0x83, 0xd7, 0x5c, 0x86, 0xec, 0xca, 0x70, 0x13,
0x1f, 0x4c ),
ADDITIONAL(),
PLAINTEXT ( 0x31, 0x6b, 0xf9, 0x9b, 0xfa, 0xfc, 0x76, 0xf1, 0xbf,
0xc0, 0xb0, 0x3c ),
CIPHERTEXT ( 0x53, 0x48, 0xaf, 0x57, 0xfa, 0xfe, 0x24, 0x85, 0xb4,
0x3f, 0x2b, 0xc4 ),
AUTH ( 0x01, 0x9a, 0x96, 0xc5, 0x37, 0x3c, 0x03, 0x16, 0x26, 0xb6,
0xc0, 0x30, 0x0d, 0x4c, 0xf7, 0x8b ) );
/* AES-GCM test case 266 */
CIPHER_TEST ( wycheproof_aes_gcm_22ddd4ff, &aes_gcm_algorithm,
KEY ( 0xdb, 0xd3, 0x67, 0x6f, 0x29, 0x34, 0x09, 0x27, 0x3f, 0x27,
0xb3, 0x75, 0xe0, 0x37, 0x93, 0xa3 ),
IV ( 0x96, 0x7f, 0xa7, 0xc9, 0x90, 0xeb, 0x2b, 0xec, 0xbd, 0x45,
0x08, 0x35, 0xe2, 0x8e, 0xa3, 0xa9, 0x00, 0x0c, 0x72, 0x16,
0x28, 0x5c, 0xfa, 0x76, 0x96, 0xe8, 0xc3, 0xda, 0xc3, 0xce,
0x95, 0x2a, 0x1f, 0xe6, 0x38, 0xd7, 0xc8, 0xc7, 0x3e, 0x1d,
0x70, 0x8d, 0xce, 0x01, 0xb5, 0xa2, 0x0f, 0xcc, 0x9a, 0xa0,
0x11, 0x94, 0x9d, 0x2a, 0x83, 0x5f, 0x77, 0x74, 0x23, 0xc1,
0x72, 0xfa, 0x3a, 0xa0 ),
ADDITIONAL(),
PLAINTEXT ( 0x62, 0x5e, 0xfe, 0xdb, 0x8b, 0x7f, 0x1a, 0xa6, 0x22,
0x38, 0xa8, 0xf2 ),
CIPHERTEXT ( 0xf5, 0x59, 0xb7, 0x0f, 0xe1, 0x14, 0x9c, 0xb3, 0x44,
0x06, 0xa2, 0xc7 ),
AUTH ( 0x94, 0x18, 0x0d, 0xdb, 0x7b, 0xb1, 0x99, 0x5a, 0xbe, 0x02,
0x19, 0xea, 0xb5, 0xce, 0x23, 0x2f ) );
/* AES-GCM test case 267 */
CIPHER_TEST ( wycheproof_aes_gcm_047fcc3d, &aes_gcm_algorithm,
KEY ( 0x7e, 0x5a, 0x39, 0xdc, 0xda, 0x7e, 0x06, 0x69, 0x88, 0xf1,
0x9a, 0xdf, 0x4d, 0xe4, 0xd5, 0x01 ),
IV ( 0x49, 0x43, 0x56, 0xc3, 0x45, 0x9d, 0x60, 0xe3, 0xa8, 0x34,
0x33, 0xc9, 0xbc, 0xf2, 0xc0, 0x45, 0x4a, 0x76, 0x3e, 0x49,
0x6e, 0x4e, 0xc9, 0x9b, 0xfb, 0xe4, 0xbb, 0xb8, 0x3a, 0x4f,
0xda, 0x76, 0xb5, 0x42, 0x21, 0x38, 0x99, 0xdc, 0xf5, 0x52,
0x1c, 0xd9, 0xbb, 0xbe, 0x5d, 0x11, 0x54, 0x5b, 0xda, 0x44,
0xa3, 0xf4, 0xa6, 0x81, 0xce, 0x28, 0x43, 0xac, 0xea, 0x73,
0x0d, 0x83, 0xd3, 0x93, 0x0e, 0xa3, 0x09, 0x91, 0xee, 0x1a,
0x68, 0xeb, 0xf6, 0xd1, 0xa5, 0xa4, 0x0f, 0x9b, 0x02, 0xa1,
0xaa, 0xb0, 0x91, 0x29, 0x8d, 0xf8, 0xdd, 0x68, 0x9d, 0xc7,
0x61, 0x3b, 0xcb, 0xff, 0x94, 0xd3, 0x5f, 0x2c, 0xa4, 0x33,
0x77, 0xd8, 0x16, 0x18, 0x56, 0x2b, 0xcf, 0x65, 0x73, 0x41,
0x1e, 0xc9, 0xbc, 0x97, 0xc5, 0xa6, 0x27, 0x6b, 0x55, 0x40,
0x54, 0xc0, 0xfa, 0x78, 0x70, 0x73, 0xd0, 0x67 ),
ADDITIONAL(),
PLAINTEXT ( 0xb0, 0x47, 0x29, 0xb4, 0xad, 0xba, 0xac, 0x63, 0xc2,
0xaa, 0xf8, 0xd8 ),
CIPHERTEXT ( 0x52, 0x91, 0xdd, 0x4d, 0xa9, 0x1c, 0xcc, 0x2e, 0x77,
0x30, 0x6d, 0x83 ),
AUTH ( 0xa7, 0xf7, 0xb2, 0x1a, 0x3b, 0x7e, 0xce, 0x50, 0x9e, 0x92,
0x26, 0x47, 0xfd, 0x90, 0x5f, 0x06 ) );
/* AES-GCM test case 268 */
CIPHER_TEST ( wycheproof_aes_gcm_b09553f4, &aes_gcm_algorithm,
KEY ( 0xea, 0xc3, 0xf2, 0x8c, 0xd9, 0x37, 0xff, 0x29, 0xeb, 0x61,
0x58, 0xa3, 0x72, 0x1b, 0x51, 0x45 ),
IV ( 0x6f, 0xd2, 0x60, 0xbb, 0xa8, 0x73, 0x39, 0x53, 0x9c, 0x37,
0xdc, 0x68, 0xfd, 0xc3, 0x65, 0x6f, 0x63, 0xc8, 0x30, 0x28,
0xcb, 0x8a, 0xdc, 0xb5, 0x31, 0x08, 0x5e, 0x98, 0xbd, 0x57,
0x0c, 0x6b, 0x73, 0x5d, 0x0c, 0xc4, 0xb4, 0xb9, 0x24, 0x69,
0x60, 0x00, 0xa2, 0xd8, 0x93, 0x62, 0x1a, 0xe6, 0x4d, 0xcc,
0xe9, 0x92, 0xb5, 0x62, 0xb8, 0x9a, 0x52, 0x85, 0x64, 0x3a,
0x08, 0xfe, 0xbc, 0xcb, 0xc5, 0x22, 0x43, 0xcb, 0xfc, 0x8d,
0x45, 0x21, 0x2e, 0x04, 0x7b, 0x00, 0xc8, 0x7c, 0x6b, 0x6b,
0xf1, 0x75, 0xf8, 0xbb, 0x67, 0x8e, 0xc5, 0x5c, 0x10, 0x91,
0x31, 0x5c, 0xbe, 0xcb, 0x8b, 0x85, 0x70, 0x0f, 0x4a, 0x46,
0x53, 0x62, 0x3f, 0xb7, 0x8e, 0x63, 0xcf, 0xff, 0x7d, 0x62,
0x35, 0xe4, 0x8e, 0x98, 0x32, 0xc9, 0xf0, 0x71, 0x6d, 0x10,
0x99, 0x2f, 0xc5, 0xb0, 0xad, 0x4e, 0x69, 0x72, 0xbb, 0xee,
0xb1, 0xad, 0x67, 0x0c, 0xd7, 0xec, 0x8f, 0xac, 0x82, 0xe0,
0x7e, 0xa5, 0xa6, 0x4f, 0x97, 0x61, 0xa3, 0x97, 0x14, 0xaa,
0xa7, 0x3a, 0xff, 0xd2, 0xcb, 0x19, 0x0a, 0x7a, 0xc2, 0xdf,
0x5e, 0x5d, 0xce, 0xa6, 0x81, 0x2a, 0xe2, 0xc8, 0x72, 0xc7,
0xac, 0x70, 0x45, 0x3c, 0x5e, 0x7e, 0xc4, 0xd0, 0xb5, 0xb1,
0x8c, 0x6f, 0xf3, 0xbf, 0xb9, 0xae, 0x15, 0xfe, 0xa4, 0x4c,
0xf3, 0x92, 0x61, 0x5b, 0x80, 0x03, 0x4e, 0xda, 0xe5, 0x96,
0xb8, 0x82, 0x1f, 0x97, 0xfc, 0xa5, 0x8d, 0x16, 0x7f, 0xb4,
0x4a, 0x09, 0x3b, 0x0c, 0x00, 0x9a, 0x0b, 0xd5, 0x63, 0x13,
0x55, 0xb0, 0xcb, 0x25, 0xd9, 0x3b, 0xa9, 0xb7, 0x9b, 0x00,
0x63, 0x01, 0xd9, 0x9d, 0xb6, 0x57, 0xe8, 0x01, 0x93, 0x3f,
0xc2, 0x76, 0x4a, 0x0c, 0xe6, 0x50, 0xea, 0xf5, 0xa1, 0x29,
0x9e, 0xfe, 0x60, 0xcb, 0x53, 0xb6, 0x34 ),
ADDITIONAL(),
PLAINTEXT ( 0x09, 0x89, 0x12, 0xa3, 0x02, 0x77, 0x33, 0x77, 0xb9,
0xc2, 0x6a, 0xc3 ),
CIPHERTEXT ( 0xe3, 0xbe, 0x94, 0x71, 0x53, 0xa2, 0x6a, 0x3a, 0x54,
0xe3, 0x01, 0x5c ),
AUTH ( 0xfd, 0x04, 0x2b, 0xdd, 0xe2, 0x2f, 0x67, 0xc4, 0xfd, 0x29,
0x8d, 0x5d, 0xc0, 0x86, 0x76, 0x06 ) );
/* AES-GCM test case 269 */
CIPHER_TEST ( wycheproof_aes_gcm_1dd3caab, &aes_gcm_algorithm,
KEY ( 0x8f, 0x9e, 0xbc, 0x67, 0xa9, 0xa6, 0x43, 0x0c, 0x2b, 0x0c,
0xee, 0xaf, 0x98, 0x3e, 0x13, 0x56, 0x96, 0x4b, 0xb9, 0x28,
0x63, 0x5b, 0x9c, 0xa4 ),
IV ( 0x36, 0xe4, 0xb3, 0x81, 0x57, 0x4d, 0x17, 0x1c, 0x77, 0x69,
0xa7, 0x88, 0xcb, 0xc1, 0x47, 0x22, 0x4f, 0xab, 0xd8, 0xb7,
0x73, 0xf1, 0x6b, 0x8a, 0xe8, 0x4d, 0x8f, 0x26, 0x03, 0xaa,
0xa4, 0x40 ),
ADDITIONAL(),
PLAINTEXT ( 0xa3, 0xa9, 0x6e, 0xe9, 0x4f, 0x94, 0xca, 0xa8, 0x1e,
0xbc, 0xd6, 0x6d ),
CIPHERTEXT ( 0x8c, 0x2a, 0x98, 0x23, 0xa3, 0xb3, 0xd4, 0x13, 0xbe,
0x69, 0x63, 0x87 ),
AUTH ( 0xfa, 0xaf, 0x01, 0xce, 0xb4, 0x0a, 0x7e, 0x14, 0x5e, 0x8f,
0xe6, 0x5a, 0xa9, 0xaf, 0x58, 0xc0 ) );
/* AES-GCM test case 270 */
CIPHER_TEST ( wycheproof_aes_gcm_9ff40949, &aes_gcm_algorithm,
KEY ( 0xf4, 0xbb, 0xdf, 0xd0, 0x6f, 0x7f, 0xb1, 0x43, 0x48, 0x80,
0xe4, 0x16, 0x6d, 0x38, 0xd5, 0x6e, 0x02, 0xa3, 0xf0, 0xdf,
0x0d, 0x53, 0x01, 0xce ),
IV ( 0x90, 0x74, 0x3b, 0xd5, 0xd7, 0x94, 0xd5, 0x2a, 0xc8, 0x48,
0xb7, 0xe2, 0x38, 0x45, 0x45, 0xa2, 0x58, 0x46, 0xac, 0xf1,
0x43, 0xbe, 0x84, 0xc0, 0xea, 0xd0, 0x43, 0x2f, 0xcf, 0x31,
0x72, 0x63, 0x1c, 0xf5, 0x8d, 0x0c, 0xa7, 0x85, 0x71, 0xc0,
0x30, 0x53, 0xc1, 0xe1, 0xb8, 0x5e, 0xd7, 0x9c, 0xb5, 0x30,
0x3d, 0x0e, 0x3a, 0x98, 0xff, 0x4f, 0x56, 0xc4, 0xf0, 0xa5,
0xeb, 0x4f, 0x0e, 0xac ),
ADDITIONAL(),
PLAINTEXT ( 0x39, 0xd2, 0xab, 0xe6, 0x69, 0x7f, 0x17, 0xec, 0x27,
0xf2, 0xa3, 0x9c ),
CIPHERTEXT ( 0xa6, 0x60, 0xea, 0x5b, 0xf0, 0x7a, 0x78, 0xfe, 0xa0,
0x12, 0x01, 0x73 ),
AUTH ( 0x74, 0x04, 0xfc, 0x7b, 0x73, 0x54, 0x69, 0x44, 0x28, 0x23,
0x6f, 0x20, 0x3c, 0x13, 0x02, 0x44 ) );
/* AES-GCM test case 271 */
CIPHER_TEST ( wycheproof_aes_gcm_4bae909f, &aes_gcm_algorithm,
KEY ( 0x17, 0x61, 0xc7, 0x77, 0x98, 0xef, 0x9c, 0xdf, 0xa4, 0x05,
0x53, 0xf3, 0x46, 0x14, 0xfe, 0x74, 0x02, 0x21, 0x20, 0x87,
0xf0, 0x50, 0x94, 0x11 ),
IV ( 0xfb, 0xb3, 0xea, 0xb3, 0x79, 0xc9, 0xb8, 0x68, 0x9d, 0xc3,
0x0b, 0x07, 0x13, 0x69, 0x0e, 0x55, 0xd5, 0x1c, 0x95, 0x6c,
0xa3, 0x6f, 0xbc, 0xc7, 0x3e, 0xee, 0xee, 0x16, 0xa4, 0x6d,
0x7c, 0x41, 0xa7, 0xa9, 0x62, 0x6e, 0x68, 0xe2, 0x5d, 0x68,
0x5c, 0x00, 0x8c, 0x19, 0xd3, 0xb2, 0xb1, 0x79, 0x2b, 0xdc,
0x99, 0xc3, 0x54, 0x41, 0xa6, 0xfc, 0xac, 0x35, 0xe0, 0xd6,
0x44, 0x6d, 0xd9, 0x14, 0xf5, 0x43, 0xab, 0xd9, 0xec, 0xd6,
0xb0, 0xcb, 0x52, 0x01, 0xc2, 0x43, 0x02, 0x6c, 0x4f, 0x13,
0x64, 0x1d, 0x67, 0xc8, 0xd8, 0xcd, 0x51, 0x14, 0xb6, 0xe1,
0x1e, 0xbb, 0xc6, 0xb1, 0xde, 0xe2, 0xa1, 0x8d, 0xb2, 0x15,
0x0a, 0x5a, 0x57, 0x5d, 0xcd, 0x21, 0x64, 0x8e, 0x03, 0x37,
0xda, 0xdb, 0xcc, 0xd3, 0xde, 0xff, 0xd6, 0xd9, 0x79, 0xe0,
0x3e, 0x6b, 0x9d, 0xdf, 0xee, 0x0a, 0xbd, 0xc2 ),
ADDITIONAL(),
PLAINTEXT ( 0x35, 0xca, 0x4e, 0xb4, 0x63, 0xa2, 0x00, 0x01, 0x38,
0x21, 0x0b, 0x4d ),
CIPHERTEXT ( 0xf4, 0x00, 0x13, 0x2f, 0xf3, 0x8c, 0x04, 0xed, 0x74,
0x7d, 0xde, 0x34 ),
AUTH ( 0xca, 0x15, 0x34, 0xe7, 0xdd, 0x03, 0x36, 0xbb, 0xb3, 0x2a,
0x79, 0x83, 0x0c, 0x71, 0xa4, 0x47 ) );
/* AES-GCM test case 272 */
CIPHER_TEST ( wycheproof_aes_gcm_dbc87bdd, &aes_gcm_algorithm,
KEY ( 0xf7, 0x95, 0xec, 0xe7, 0xde, 0x18, 0x81, 0xfb, 0xc6, 0x84,
0x3e, 0xb7, 0x40, 0xf8, 0x12, 0xe4, 0x1e, 0x3f, 0xc4, 0x9f,
0xf6, 0xc7, 0xb9, 0x40 ),
IV ( 0x35, 0x69, 0xfc, 0xa7, 0xc9, 0xd0, 0x6e, 0x2a, 0x03, 0xfe,
0xd1, 0xaa, 0xc2, 0x48, 0x4f, 0xd4, 0x41, 0x6c, 0xa0, 0x7d,
0x55, 0xec, 0xbb, 0x33, 0x3e, 0xc6, 0x74, 0xf0, 0xea, 0x5c,
0x6e, 0x75, 0xa1, 0x0d, 0xfb, 0x9c, 0x73, 0x8b, 0x69, 0xda,
0xb2, 0xed, 0xa1, 0x0a, 0xda, 0x72, 0x1a, 0x61, 0xc7, 0xf0,
0x2b, 0x7e, 0x7f, 0x79, 0xe8, 0xa9, 0xe2, 0xdc, 0x36, 0xb3,
0xfd, 0xf6, 0x09, 0xe4, 0x36, 0x05, 0x4c, 0x82, 0xa7, 0x74,
0xec, 0x61, 0x7d, 0xce, 0xec, 0x84, 0xa5, 0x77, 0x03, 0x7f,
0xf1, 0xa3, 0xf1, 0x20, 0xd9, 0x81, 0x8d, 0x04, 0x20, 0x63,
0xac, 0xb3, 0x6c, 0x95, 0x84, 0xe8, 0x1e, 0xc9, 0x4f, 0x11,
0xf1, 0xee, 0x24, 0x0f, 0x2e, 0x45, 0xe9, 0x44, 0x69, 0x4a,
0x9c, 0x8e, 0x53, 0x5a, 0xcb, 0xb0, 0x1d, 0x93, 0x95, 0x84,
0x11, 0xcf, 0xf6, 0x8e, 0x3d, 0x32, 0xf8, 0x93, 0x17, 0x46,
0xa4, 0xa0, 0xce, 0xce, 0x65, 0xe9, 0x3c, 0x51, 0xc7, 0x0b,
0x31, 0x11, 0x03, 0x4b, 0x68, 0x67, 0xb4, 0x07, 0xe0, 0x14,
0x7f, 0x97, 0xc5, 0x76, 0xd3, 0xed, 0x8c, 0xec, 0x7e, 0x8e,
0xc2, 0x6e, 0x95, 0x64, 0x3e, 0x46, 0xe9, 0x7e, 0xa3, 0x59,
0x5c, 0x9c, 0x31, 0x72, 0xb4, 0x85, 0x6f, 0x2d, 0x2b, 0x6d,
0xc8, 0x56, 0x46, 0x66, 0xdd, 0xac, 0x92, 0xc7, 0x94, 0xff,
0xb2, 0xd4, 0xdc, 0x7f, 0x46, 0x17, 0x61, 0xf0, 0xe3, 0x26,
0x65, 0x0f, 0x48, 0xd3, 0x27, 0x60, 0x4e, 0x09, 0x5b, 0xd8,
0x75, 0x40, 0x72, 0x11, 0x6c, 0x96, 0x36, 0x0d, 0x09, 0xf0,
0x10, 0xac, 0x2f, 0x39, 0xeb, 0x96, 0xb2, 0x27, 0xf3, 0xd7,
0x38, 0xde, 0xb7, 0x56, 0xc8, 0x69, 0x94, 0x60, 0xd8, 0x8c,
0xf7, 0x16, 0x17, 0x0a, 0xe1, 0x52, 0x67, 0xb1, 0x4f, 0x4a,
0x89, 0x16, 0x47, 0x20, 0xf1, 0xc6, 0x02 ),
ADDITIONAL(),
PLAINTEXT ( 0x22, 0xdb, 0xd8, 0x03, 0x7a, 0xa0, 0x5b, 0x14, 0xcf,
0x81, 0xdd, 0x23 ),
CIPHERTEXT ( 0x13, 0xa9, 0x5a, 0x06, 0xc1, 0xbe, 0xd4, 0x84, 0x5a,
0xf9, 0xc7, 0x01 ),
AUTH ( 0x03, 0x37, 0x98, 0x36, 0xb0, 0xc8, 0x2f, 0x64, 0xa1, 0xbc,
0xcd, 0xcd, 0x76, 0x3a, 0xcb, 0xbc ) );
/* AES-GCM test case 273 */
CIPHER_TEST ( wycheproof_aes_gcm_0834aa42, &aes_gcm_algorithm,
KEY ( 0xee, 0x41, 0x71, 0x91, 0x7d, 0x23, 0x37, 0x49, 0x68, 0x12,
0xa2, 0x78, 0x4d, 0x6a, 0x71, 0x30, 0x0e, 0x6b, 0x8c, 0x1a,
0xc3, 0xb1, 0xef, 0x58, 0xce, 0xe7, 0x7c, 0x22, 0x9a, 0xea,
0xf2, 0xc5 ),
IV ( 0xe8, 0x26, 0xa7, 0x93, 0x61, 0xf9, 0xd5, 0x82, 0xb6, 0x44,
0x50, 0xe3, 0xed, 0xc8, 0x25, 0x89, 0x48, 0x78, 0x53, 0xd5,
0xb2, 0x2f, 0xea, 0xa0, 0xc8, 0x89, 0x87, 0x5b, 0xd0, 0xd8,
0x7c, 0xd4 ),
ADDITIONAL(),
PLAINTEXT ( 0x94, 0xd2, 0xf8, 0x69, 0x7f, 0xac, 0xaa, 0xa1, 0x91,
0xba, 0x61, 0x7a ),
CIPHERTEXT ( 0xa2, 0x95, 0xc2, 0xcb, 0x27, 0xce, 0x23, 0xd2, 0x68,
0x74, 0xad, 0xe1 ),
AUTH ( 0x04, 0x65, 0x0a, 0x78, 0xbb, 0xb6, 0x1d, 0xb3, 0x37, 0xc9,
0xc3, 0x2a, 0xa3, 0xe7, 0xb6, 0xfa ) );
/* AES-GCM test case 274 */
CIPHER_TEST ( wycheproof_aes_gcm_0694ddb9, &aes_gcm_algorithm,
KEY ( 0x13, 0x2c, 0x59, 0xb4, 0xbc, 0xb8, 0xaf, 0xb3, 0x16, 0x37,
0x73, 0x4a, 0x81, 0x10, 0x5b, 0xb2, 0xc9, 0x87, 0x8f, 0x32,
0x0a, 0xce, 0x90, 0x76, 0xd5, 0xfd, 0x7c, 0x5d, 0x21, 0x6c,
0x8d, 0x12 ),
IV ( 0xec, 0x51, 0xee, 0x18, 0xcf, 0xb4, 0x68, 0x97, 0xd3, 0x66,
0x6c, 0x7d, 0xf3, 0x5c, 0x29, 0xca, 0x5d, 0x89, 0x82, 0x41,
0xc4, 0xa3, 0x4f, 0x89, 0x3e, 0xb1, 0xdb, 0x5d, 0x5c, 0x6b,
0x76, 0xe2, 0x46, 0x17, 0x45, 0x9d, 0x11, 0x53, 0x86, 0x81,
0x54, 0x43, 0x7a, 0x0e, 0x95, 0xaa, 0x3c, 0x26, 0xe9, 0x56,
0xb4, 0x94, 0xa5, 0x2d, 0xd5, 0xac, 0x3b, 0x93, 0x31, 0x11,
0x6c, 0x7c, 0x77, 0x5f ),
ADDITIONAL(),
PLAINTEXT ( 0x12, 0xc7, 0xbe, 0x00, 0xfa, 0xcd, 0xa4, 0x95, 0x96,
0xe1, 0x91, 0x34 ),
CIPHERTEXT ( 0x9c, 0xdc, 0xfc, 0x3a, 0xaa, 0x8d, 0x46, 0x6f, 0x25,
0x58, 0x8e, 0x4b ),
AUTH ( 0x7e, 0x80, 0xf5, 0x1e, 0x71, 0x80, 0xf1, 0xcd, 0x3b, 0xa8,
0x43, 0x49, 0x88, 0x8f, 0xcd, 0x5c ) );
/* AES-GCM test case 275 */
CIPHER_TEST ( wycheproof_aes_gcm_c68a0e20, &aes_gcm_algorithm,
KEY ( 0x7b, 0x0b, 0x12, 0x49, 0x19, 0x01, 0xd6, 0x2d, 0x09, 0x7f,
0xa2, 0x6d, 0xc7, 0x1e, 0x15, 0xcf, 0xac, 0xaf, 0xa3, 0x22,
0x67, 0x19, 0xe4, 0x71, 0x26, 0xd9, 0x9c, 0x79, 0xd9, 0x8e,
0xc2, 0x22 ),
IV ( 0x7d, 0x08, 0xb2, 0x26, 0xb4, 0xa5, 0xd0, 0x3f, 0x6f, 0x8c,
0xb3, 0xa3, 0xcb, 0x8d, 0x1c, 0xe3, 0x1b, 0x05, 0x9d, 0xc5,
0x11, 0x23, 0x85, 0x27, 0x5e, 0x38, 0xa1, 0x5c, 0x97, 0xe0,
0xf2, 0x40, 0x22, 0xb2, 0x49, 0xa5, 0xf7, 0x01, 0x9e, 0xa5,
0x77, 0x19, 0x8c, 0xb2, 0x6a, 0xc6, 0x4e, 0x82, 0xb2, 0xb0,
0x46, 0x81, 0x53, 0x7c, 0x41, 0x98, 0x77, 0x5a, 0x52, 0x3b,
0x0e, 0x64, 0x94, 0xb8, 0x4f, 0xeb, 0xae, 0xf3, 0x39, 0x9b,
0x35, 0xc2, 0x7b, 0x09, 0x69, 0xfa, 0x43, 0x57, 0x2b, 0xf5,
0x82, 0x7a, 0x76, 0x3a, 0xac, 0x1a, 0xf6, 0x95, 0x26, 0xf3,
0x7e, 0x38, 0xac, 0xb5, 0xd3, 0x54, 0xf2, 0xb6, 0x84, 0x87,
0xf2, 0x75, 0xf4, 0x36, 0x1e, 0xd3, 0x90, 0x73, 0xf7, 0xdd,
0x66, 0x53, 0xac, 0x17, 0xc0, 0x79, 0x41, 0x18, 0xa0, 0xcf,
0x14, 0x32, 0x93, 0xac, 0x0b, 0xe6, 0x62, 0x29 ),
ADDITIONAL(),
PLAINTEXT ( 0xc8, 0x03, 0x12, 0x59, 0x07, 0x00, 0xc3, 0xbb, 0xfa,
0xcd, 0x1a, 0x40 ),
CIPHERTEXT ( 0x3f, 0x3c, 0x15, 0x1e, 0x98, 0x4d, 0x05, 0x94, 0x62,
0xf9, 0xe5, 0xa0 ),
AUTH ( 0xe5, 0x59, 0xf5, 0xf7, 0x55, 0xaa, 0x29, 0x21, 0x71, 0xcc,
0x35, 0xfb, 0xf9, 0x11, 0xa6, 0x4f ) );
/* AES-GCM test case 276 */
CIPHER_TEST ( wycheproof_aes_gcm_a0b4e03a, &aes_gcm_algorithm,
KEY ( 0x3b, 0xc3, 0xbf, 0x39, 0xd0, 0xd5, 0xff, 0xd9, 0x4c, 0xca,
0x2b, 0x45, 0xc6, 0x78, 0xa2, 0xd0, 0x49, 0x15, 0x1e, 0xd2,
0xba, 0xbc, 0x71, 0x3b, 0xe5, 0x3c, 0xb6, 0x6f, 0x54, 0xa1,
0x63, 0x37 ),
IV ( 0x92, 0xc2, 0xce, 0xe7, 0xe9, 0x13, 0x8b, 0x18, 0x6d, 0xa5,
0x1f, 0x14, 0x6f, 0xb2, 0x1f, 0xd5, 0xb4, 0x91, 0xf1, 0xa1,
0x9e, 0xef, 0x61, 0xd4, 0xed, 0x14, 0xce, 0x6b, 0x21, 0xb0,
0x4f, 0xdb, 0x6f, 0xf8, 0xeb, 0xb6, 0x0f, 0xdd, 0xc5, 0x59,
0x26, 0xe7, 0xbd, 0xa2, 0xa8, 0xf3, 0x5c, 0x61, 0x0b, 0xb7,
0x95, 0x23, 0x24, 0x12, 0x73, 0x9d, 0x6c, 0x2d, 0x74, 0x45,
0x8e, 0xf5, 0xa1, 0xa1, 0xcd, 0xe9, 0xbf, 0x17, 0xe4, 0x7e,
0x3b, 0x00, 0xdb, 0x0b, 0x05, 0x04, 0xd5, 0x6d, 0xc8, 0xb8,
0xd3, 0xde, 0x23, 0xf7, 0xc3, 0xa5, 0xd5, 0x2e, 0x8d, 0x0a,
0xab, 0x1e, 0x64, 0x40, 0x5a, 0xaa, 0x85, 0x2e, 0xc2, 0xdd,
0x66, 0x7e, 0xd9, 0xc1, 0xfd, 0x8d, 0xc1, 0xfd, 0xbb, 0xc8,
0x71, 0x2c, 0x7a, 0x38, 0xf3, 0x0f, 0xae, 0xab, 0x59, 0x4f,
0x33, 0x89, 0x7b, 0x41, 0xb1, 0x72, 0x0f, 0x3c, 0x2f, 0x95,
0x4e, 0xd9, 0x1c, 0xa4, 0x50, 0xd8, 0x2c, 0x3d, 0xcd, 0x35,
0x85, 0x8c, 0x60, 0x8a, 0xd4, 0x2f, 0x36, 0x83, 0x2e, 0x56,
0xb0, 0x48, 0x21, 0xa1, 0x32, 0xf7, 0x2e, 0x0d, 0xa7, 0xb6,
0x2c, 0xbd, 0x39, 0x25, 0x25, 0x0f, 0x64, 0xfb, 0xb3, 0xf5,
0xc4, 0x78, 0x34, 0x95, 0x89, 0x30, 0x97, 0xad, 0xc0, 0x9a,
0x32, 0xd7, 0x76, 0xe0, 0x4b, 0xf7, 0x25, 0x58, 0xd3, 0x78,
0x30, 0xb3, 0x72, 0x34, 0x1f, 0x65, 0x36, 0xd8, 0xee, 0x9d,
0xf4, 0xa8, 0x2e, 0x40, 0x74, 0xe7, 0x77, 0x4a, 0xb6, 0x91,
0x7a, 0x04, 0xfa, 0x8c, 0x49, 0x9e, 0xb4, 0xb4, 0x6a, 0x92,
0xde, 0xf3, 0x65, 0xda, 0x8b, 0x5e, 0xb1, 0xe0, 0xb4, 0x38,
0x77, 0x95, 0x07, 0xd1, 0xf5, 0x27, 0x2a, 0x6e, 0x86, 0x29,
0xa3, 0xf9, 0xc7, 0xbd, 0x48, 0x62, 0xc5, 0x69, 0x1e, 0xe8,
0xb5, 0x6b, 0xfe, 0x29, 0x2d, 0xeb, 0x4e ),
ADDITIONAL(),
PLAINTEXT ( 0x81, 0x25, 0xee, 0x76, 0x37, 0xd7, 0xd0, 0xe0, 0x3b,
0xba, 0xcf, 0x35 ),
CIPHERTEXT ( 0x54, 0x96, 0xae, 0x94, 0xc3, 0x32, 0x2e, 0xbf, 0x95,
0x9e, 0xa9, 0xa9 ),
AUTH ( 0x70, 0x71, 0x7c, 0xc0, 0x0f, 0xd1, 0xff, 0xa5, 0x9b, 0xb0,
0x43, 0x29, 0x22, 0x6a, 0x0c, 0x0a ) );
/* AES-GCM test case 277 */
CIPHER_TEST ( wycheproof_aes_gcm_42f63793, &aes_gcm_algorithm,
KEY ( 0x59, 0xa2, 0x84, 0xf5, 0x0a, 0xed, 0xd8, 0xd3, 0xe2, 0xa9,
0x16, 0x37, 0xd3, 0x81, 0x55, 0x79 ),
IV ( 0x80 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xaf, 0x49, 0x8f, 0x70, 0x1d, 0x24, 0x70, 0x69, 0x5f, 0x6e,
0x7c, 0x83, 0x27, 0xa2, 0x39, 0x8b ) );
/* AES-GCM test case 278 */
CIPHER_TEST ( wycheproof_aes_gcm_a9355b80, &aes_gcm_algorithm,
KEY ( 0xfe, 0xc5, 0x8a, 0xa8, 0xcf, 0x06, 0xbf, 0xe0, 0x5d, 0xe8,
0x29, 0xf2, 0x7e, 0xc7, 0x76, 0x93 ),
IV ( 0x9d ),
ADDITIONAL(),
PLAINTEXT ( 0xf2, 0xd9, 0x9a, 0x9f, 0x89, 0x33, 0x78, 0xe0, 0x75,
0x7d, 0x27, 0xc2, 0xe3, 0xa3, 0x10, 0x1b ),
CIPHERTEXT ( 0x0a, 0x24, 0x61, 0x2a, 0x9d, 0x1c, 0xbe, 0x96, 0x7d,
0xbf, 0xe8, 0x04, 0xbf, 0x84, 0x40, 0xe5 ),
AUTH ( 0x96, 0xe6, 0xfd, 0x2c, 0xdc, 0x70, 0x7e, 0x3e, 0xe0, 0xa1,
0xc9, 0x0d, 0x34, 0xc9, 0xc3, 0x6c ) );
/* AES-GCM test case 279 */
CIPHER_TEST ( wycheproof_aes_gcm_380d7036, &aes_gcm_algorithm,
KEY ( 0x88, 0xa9, 0x72, 0xcc, 0xe9, 0xea, 0xf5, 0xa7, 0x81, 0x3c,
0xe8, 0x14, 0x9d, 0x0c, 0x1d, 0x0e ),
IV ( 0x0f, 0x2f ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x4c, 0xcf, 0x1e, 0xfb, 0x4d, 0xa0, 0x5b, 0x4a, 0xe4, 0x45,
0x2a, 0xea, 0x42, 0xf5, 0x42, 0x4b ) );
/* AES-GCM test case 280 */
CIPHER_TEST ( wycheproof_aes_gcm_26a77e52, &aes_gcm_algorithm,
KEY ( 0xb4, 0x39, 0x67, 0xee, 0x93, 0x3e, 0x46, 0x32, 0xbd, 0x65,
0x62, 0xba, 0x12, 0x01, 0xbf, 0x83 ),
IV ( 0x87, 0x60 ),
ADDITIONAL(),
PLAINTEXT ( 0x5a, 0x6a, 0xd6, 0xdb, 0x70, 0x59, 0x1d, 0x1e, 0x52,
0x0b, 0x01, 0x22, 0xf0, 0x50, 0x21, 0xa0 ),
CIPHERTEXT ( 0xba, 0x3e, 0x7f, 0x8b, 0x29, 0x99, 0x99, 0x5c, 0x7f,
0xc4, 0x00, 0x6c, 0xa4, 0xf4, 0x75, 0xff ),
AUTH ( 0x98, 0xf4, 0x7a, 0x52, 0x79, 0xce, 0xbb, 0xca, 0xc2, 0x14,
0x51, 0x57, 0x10, 0xf6, 0xcd, 0x8a ) );
/* AES-GCM test case 281 */
CIPHER_TEST ( wycheproof_aes_gcm_7016eb5c, &aes_gcm_algorithm,
KEY ( 0x4e, 0x9a, 0x97, 0xd3, 0xed, 0x54, 0xc7, 0xb5, 0x46, 0x10,
0x79, 0x3a, 0xb0, 0x50, 0x52, 0xe1 ),
IV ( 0xcc, 0x85, 0x19, 0x57 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xe5, 0x74, 0xb3, 0x55, 0xbd, 0xa2, 0x98, 0x0e, 0x04, 0x7e,
0x58, 0x4f, 0xeb, 0x16, 0x76, 0xca ) );
/* AES-GCM test case 282 */
CIPHER_TEST ( wycheproof_aes_gcm_20abbc80, &aes_gcm_algorithm,
KEY ( 0xd8, 0x3c, 0x1d, 0x7a, 0x97, 0xc4, 0x3f, 0x18, 0x24, 0x09,
0xa4, 0xaa, 0x56, 0x09, 0xc1, 0xb1 ),
IV ( 0x7b, 0x5f, 0xae, 0xb2 ),
ADDITIONAL(),
PLAINTEXT ( 0xc8, 0xf0, 0x7b, 0xa1, 0xd6, 0x55, 0x54, 0xa9, 0xbd,
0x40, 0x39, 0x0c, 0x30, 0xc5, 0x52, 0x9c ),
CIPHERTEXT ( 0x1b, 0x84, 0xba, 0xea, 0x9d, 0xf1, 0xe6, 0x5b, 0xee,
0x7b, 0x49, 0xe4, 0xa8, 0xcd, 0xa1, 0xec ),
AUTH ( 0x5c, 0x0b, 0xb7, 0x9d, 0x82, 0x40, 0x04, 0x1e, 0xdc, 0xe0,
0xf9, 0x4b, 0xd4, 0xbb, 0x38, 0x4f ) );
/* AES-GCM test case 283 */
CIPHER_TEST ( wycheproof_aes_gcm_1d93e9e2, &aes_gcm_algorithm,
KEY ( 0xc6, 0xa7, 0x05, 0x67, 0x7a, 0xff, 0xb4, 0x9e, 0x27, 0x6d,
0x95, 0x11, 0xca, 0xa4, 0x61, 0x45 ),
IV ( 0x4a, 0xd8, 0x0c, 0x28, 0x54, 0xfb ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x1e, 0x2e, 0xd7, 0x2a, 0xf5, 0x90, 0xca, 0xfb, 0x86, 0x47,
0xd1, 0x85, 0x86, 0x5f, 0x54, 0x63 ) );
/* AES-GCM test case 284 */
CIPHER_TEST ( wycheproof_aes_gcm_559a53ba, &aes_gcm_algorithm,
KEY ( 0xeb, 0xa7, 0x69, 0x9b, 0x56, 0xcc, 0x0a, 0xa2, 0xf6, 0x6a,
0x2a, 0x5b, 0xe9, 0x94, 0x44, 0x13 ),
IV ( 0xd1, 0xda, 0xfc, 0x8d, 0xe3, 0xe3 ),
ADDITIONAL(),
PLAINTEXT ( 0xd0, 0x21, 0xe5, 0x3d, 0x90, 0x98, 0xa2, 0xdf, 0x3d,
0x6b, 0x90, 0x3c, 0xda, 0xd0, 0xcd, 0x9c ),
CIPHERTEXT ( 0x18, 0x29, 0x1a, 0xa8, 0xdc, 0x7b, 0x07, 0x44, 0x8a,
0xa8, 0xf7, 0x1b, 0xb8, 0xe3, 0x80, 0xbf ),
AUTH ( 0x9c, 0x0e, 0x22, 0xe5, 0xc4, 0x1b, 0x10, 0x39, 0xff, 0x56,
0x61, 0xff, 0xae, 0xfa, 0x8e, 0x0f ) );
/* AES-GCM test case 285 */
CIPHER_TEST ( wycheproof_aes_gcm_2fba3231, &aes_gcm_algorithm,
KEY ( 0x1e, 0x6c, 0x62, 0x14, 0xa6, 0xa5, 0xdd, 0x5b, 0x62, 0x8c,
0x71, 0xde, 0x07, 0x78, 0x81, 0x37 ),
IV ( 0x40, 0xbc, 0xc3, 0x15, 0xde, 0xc8, 0x8b, 0xf3, 0x26, 0xcc ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x6f, 0x53, 0x9a, 0x12, 0x5a, 0x2f, 0x4f, 0xd2, 0x14, 0x59,
0x7e, 0x2f, 0x98, 0x1e, 0xfe, 0x6e ) );
/* AES-GCM test case 286 */
CIPHER_TEST ( wycheproof_aes_gcm_51785cc5, &aes_gcm_algorithm,
KEY ( 0xfc, 0x93, 0x58, 0x2f, 0xa1, 0xf8, 0xb5, 0x8c, 0xc9, 0xe8,
0x0d, 0xd5, 0x83, 0xe9, 0xbf, 0x8b ),
IV ( 0x5d, 0x4b, 0xf5, 0x87, 0x98, 0xfa, 0xc3, 0x51, 0xa3, 0x99 ),
ADDITIONAL(),
PLAINTEXT ( 0x86, 0x6d, 0x5e, 0x1b, 0x0a, 0xa2, 0x90, 0x04, 0xe5,
0x1e, 0xa8, 0x7d, 0xe8, 0x6e, 0x3c, 0x05 ),
CIPHERTEXT ( 0x91, 0xc2, 0x05, 0x98, 0xdc, 0xbd, 0x90, 0x99, 0x8c,
0x9a, 0x7d, 0x6b, 0x1e, 0x57, 0x32, 0x1f ),
AUTH ( 0xb0, 0x71, 0x20, 0x3f, 0x3d, 0xa1, 0x7c, 0x19, 0xad, 0x87,
0xa4, 0x0d, 0xb0, 0x8b, 0x65, 0xf5 ) );
/* AES-GCM test case 287 */
CIPHER_TEST ( wycheproof_aes_gcm_34d832ff, &aes_gcm_algorithm,
KEY ( 0xc7, 0x0c, 0xe3, 0x8e, 0x84, 0xe5, 0xf5, 0x3e, 0xd4, 0x1c,
0x3f, 0x0d, 0x2c, 0xa4, 0x93, 0x41, 0x2a, 0xd3, 0x2c, 0xb0,
0x4c, 0x6e, 0x2e, 0xfa ),
IV ( 0xcb ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x08, 0xd9, 0x6e, 0xdb, 0x5e, 0x22, 0x87, 0x4c, 0xd1, 0x0c,
0xb2, 0x25, 0x6c, 0xa0, 0x4b, 0xc6 ) );
/* AES-GCM test case 288 */
CIPHER_TEST ( wycheproof_aes_gcm_335f78f4, &aes_gcm_algorithm,
KEY ( 0x74, 0xc8, 0x16, 0xb8, 0x3d, 0xfd, 0x28, 0x72, 0x10, 0xa3,
0xe2, 0xc6, 0xda, 0x8d, 0x30, 0x53, 0xbb, 0xfb, 0xd9, 0xb1,
0x56, 0xd3, 0xfd, 0xd8 ),
IV ( 0x0f ),
ADDITIONAL(),
PLAINTEXT ( 0xf2, 0xb7, 0xb2, 0xc9, 0xb3, 0x12, 0xcf, 0x2a, 0xf7,
0x8f, 0x00, 0x3d, 0xf1, 0x5c, 0x8e, 0x19 ),
CIPHERTEXT ( 0x6c, 0x5e, 0x79, 0x6b, 0xa9, 0xa3, 0xdd, 0xc6, 0x4f,
0x40, 0x1e, 0x68, 0xd1, 0x35, 0x10, 0x1d ),
AUTH ( 0x96, 0xa1, 0x32, 0xed, 0x43, 0x92, 0x4e, 0x98, 0xfe, 0xb8,
0x88, 0xff, 0x68, 0x2b, 0xda, 0xef ) );
/* AES-GCM test case 289 */
CIPHER_TEST ( wycheproof_aes_gcm_39d2f365, &aes_gcm_algorithm,
KEY ( 0xcb, 0xf4, 0x5b, 0xa4, 0x88, 0x93, 0x2a, 0xea, 0x1a, 0x10,
0xe5, 0x86, 0x2f, 0x92, 0xe4, 0xa7, 0xe2, 0x77, 0xbd, 0xa9,
0xf3, 0x4a, 0xf6, 0xd0 ),
IV ( 0x75, 0xe5 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x1f, 0x0d, 0x23, 0x07, 0x0f, 0xcd, 0x74, 0x8e, 0x25, 0xbf,
0x64, 0x54, 0xf5, 0xc9, 0x13, 0x6e ) );
/* AES-GCM test case 290 */
CIPHER_TEST ( wycheproof_aes_gcm_eaa17e87, &aes_gcm_algorithm,
KEY ( 0xe1, 0xc0, 0x44, 0x6f, 0x11, 0xae, 0x6a, 0xa4, 0xfa, 0x25,
0x4f, 0x9a, 0x84, 0x6f, 0xc6, 0xe1, 0x3e, 0x45, 0xe5, 0x37,
0xe4, 0x7f, 0x20, 0x42 ),
IV ( 0x89, 0x89 ),
ADDITIONAL(),
PLAINTEXT ( 0x3a, 0x2f, 0x5a, 0xd0, 0xeb, 0x21, 0x6e, 0x54, 0x6e,
0x0b, 0xca, 0xa3, 0x77, 0xb6, 0xcb, 0xc7 ),
CIPHERTEXT ( 0x55, 0x0b, 0x48, 0xa4, 0x3e, 0x82, 0x1f, 0xd7, 0x6f,
0x49, 0xf0, 0xf1, 0xa8, 0x97, 0xae, 0xad ),
AUTH ( 0xf6, 0xe0, 0xa9, 0x79, 0x48, 0x1f, 0x99, 0x57, 0xdd, 0xad,
0x0f, 0x21, 0xa7, 0x77, 0xa7, 0x3a ) );
/* AES-GCM test case 291 */
CIPHER_TEST ( wycheproof_aes_gcm_e95b49a5, &aes_gcm_algorithm,
KEY ( 0x56, 0x75, 0x63, 0xbf, 0x4c, 0xf1, 0x54, 0x90, 0x22, 0x75,
0xa5, 0x3b, 0xc5, 0x7c, 0xd6, 0xdd, 0x7b, 0x37, 0x0d, 0x27,
0x01, 0x1b, 0xda, 0xc8 ),
IV ( 0x68, 0xd7, 0xfc, 0x38 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x14, 0x75, 0x56, 0x3e, 0x32, 0x12, 0xf3, 0xb5, 0xe4, 0x00,
0x62, 0x56, 0x9a, 0xfd, 0x71, 0xe3 ) );
/* AES-GCM test case 292 */
CIPHER_TEST ( wycheproof_aes_gcm_28dd9b0e, &aes_gcm_algorithm,
KEY ( 0x83, 0x4d, 0x0b, 0xb6, 0x01, 0x17, 0x08, 0x65, 0xa7, 0x81,
0x39, 0x42, 0x8a, 0x15, 0x03, 0x69, 0x5a, 0x6a, 0x29, 0x1e,
0xbd, 0x74, 0x7c, 0xd1 ),
IV ( 0xbb, 0x9d, 0x2a, 0xa3 ),
ADDITIONAL(),
PLAINTEXT ( 0x6f, 0x79, 0xe1, 0x8b, 0x4a, 0xcd, 0x5a, 0x03, 0xd3,
0xa5, 0xf7, 0xe1, 0xa8, 0xd0, 0xf1, 0x83 ),
CIPHERTEXT ( 0x30, 0x91, 0x33, 0xe7, 0x61, 0x59, 0xfe, 0x8a, 0x41,
0xb2, 0x08, 0x43, 0x48, 0x65, 0x11, 0xab ),
AUTH ( 0x03, 0xab, 0x26, 0x99, 0x3b, 0x70, 0x19, 0x10, 0xa2, 0xe8,
0xec, 0xcc, 0xd2, 0xba, 0x9e, 0x52 ) );
/* AES-GCM test case 293 */
CIPHER_TEST ( wycheproof_aes_gcm_6ae5995a, &aes_gcm_algorithm,
KEY ( 0x99, 0xfb, 0x18, 0xf5, 0xba, 0x43, 0x0b, 0xb9, 0xea, 0x94,
0x29, 0x68, 0xec, 0xb7, 0x99, 0xb4, 0x34, 0x06, 0xe1, 0xaf,
0x4b, 0x64, 0x25, 0xa1 ),
IV ( 0xa9, 0x84, 0xbd, 0xcd, 0xca, 0xe2 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xd7, 0xb9, 0xa6, 0xb5, 0x8a, 0x97, 0x98, 0x29, 0x16, 0xe8,
0x32, 0x19, 0xfb, 0xf7, 0x1b, 0x1e ) );
/* AES-GCM test case 294 */
CIPHER_TEST ( wycheproof_aes_gcm_df8aacfc, &aes_gcm_algorithm,
KEY ( 0xb7, 0x7b, 0x24, 0x2a, 0xa0, 0xd5, 0x1c, 0x92, 0xfd, 0xa0,
0x13, 0xe0, 0xcb, 0x0e, 0xf2, 0x43, 0x73, 0x99, 0xac, 0xe5,
0xd3, 0xf5, 0x07, 0xe4 ),
IV ( 0x52, 0xaa, 0x01, 0xe0, 0xd0, 0xd6 ),
ADDITIONAL(),
PLAINTEXT ( 0x4b, 0xa5, 0x41, 0xa9, 0x91, 0x47, 0x29, 0x21, 0x61,
0x53, 0x80, 0x13, 0x40, 0xab, 0x17, 0x79 ),
CIPHERTEXT ( 0xe0, 0x82, 0x61, 0xe4, 0x6e, 0xaf, 0x90, 0xd9, 0x78,
0xea, 0x8f, 0x78, 0x89, 0xbc, 0xcd, 0x4f ),
AUTH ( 0xc0, 0x52, 0xa5, 0x5d, 0xf3, 0x92, 0x6a, 0x50, 0x99, 0x0a,
0x53, 0x2e, 0xfe, 0x3d, 0x80, 0xec ) );
/* AES-GCM test case 295 */
CIPHER_TEST ( wycheproof_aes_gcm_f248c8cf, &aes_gcm_algorithm,
KEY ( 0xd7, 0x45, 0x99, 0xb3, 0xd2, 0xdb, 0x81, 0x65, 0x3d, 0xe4,
0x3b, 0x52, 0xfc, 0x99, 0x4c, 0x50, 0xd0, 0xbe, 0x75, 0x9f,
0xab, 0x87, 0xc3, 0x3a ),
IV ( 0xd1, 0xc6, 0x1c, 0xf8, 0x53, 0x25, 0x31, 0xb5 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xf9, 0x4f, 0x20, 0x49, 0xa6, 0x56, 0x0c, 0x47, 0x0b, 0x3a,
0x7c, 0xa7, 0xbb, 0xc3, 0x1a, 0x3d ) );
/* AES-GCM test case 296 */
CIPHER_TEST ( wycheproof_aes_gcm_bd6eb7fd, &aes_gcm_algorithm,
KEY ( 0x0b, 0x17, 0x71, 0x98, 0xc8, 0xb4, 0x19, 0xbf, 0x74, 0xac,
0xc3, 0xbc, 0x65, 0xb5, 0xfb, 0x3d, 0x09, 0xa9, 0x15, 0xff,
0x71, 0xad, 0xd7, 0x54 ),
IV ( 0x8f, 0x07, 0x5c, 0xbc, 0xda, 0x98, 0x31, 0xc3 ),
ADDITIONAL(),
PLAINTEXT ( 0xc4, 0xb1, 0xe0, 0x5c, 0xa3, 0xd5, 0x91, 0xf9, 0x54,
0x3e, 0x64, 0xde, 0x3f, 0xc6, 0x82, 0xac ),
CIPHERTEXT ( 0x3c, 0x6e, 0xc0, 0xab, 0x1b, 0x82, 0x7b, 0xf2, 0x38,
0xa5, 0x38, 0x4f, 0xb7, 0xe2, 0x12, 0xce ),
AUTH ( 0x7d, 0xb7, 0x40, 0x22, 0x24, 0xfd, 0x58, 0x3e, 0x31, 0x2b,
0xc0, 0xe6, 0x1c, 0xf1, 0x13, 0x66 ) );
/* AES-GCM test case 297 */
CIPHER_TEST ( wycheproof_aes_gcm_141e913b, &aes_gcm_algorithm,
KEY ( 0x17, 0x2f, 0x22, 0xf2, 0xe5, 0x93, 0x64, 0xdc, 0x41, 0x8c,
0xd7, 0x51, 0xdf, 0xa8, 0x44, 0x4a, 0xe1, 0x86, 0x44, 0xc0,
0xf9, 0xa2, 0xbe, 0x84 ),
IV ( 0xbf, 0x90, 0x26, 0xd3, 0xdd, 0xaa, 0x37, 0xe7, 0xf1, 0x80 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xa8, 0xdc, 0x52, 0xc7, 0x79, 0x61, 0x1a, 0x70, 0x28, 0xb1,
0x88, 0x61, 0x5c, 0x9a, 0x34, 0xeb ) );
/* AES-GCM test case 298 */
CIPHER_TEST ( wycheproof_aes_gcm_d2887a50, &aes_gcm_algorithm,
KEY ( 0x4c, 0x41, 0x10, 0x4d, 0x3f, 0x40, 0x26, 0x5f, 0x9e, 0x35,
0xc3, 0x20, 0xa0, 0x1e, 0x78, 0x76, 0xc3, 0x14, 0x00, 0xa0,
0xbd, 0x4d, 0x70, 0x92 ),
IV ( 0x85, 0xfd, 0xc8, 0x1a, 0xfd, 0x9f, 0x48, 0x28, 0x17, 0x7e ),
ADDITIONAL(),
PLAINTEXT ( 0xba, 0x7c, 0xd0, 0x7d, 0xfd, 0x8b, 0x5c, 0xf6, 0xff,
0xd3, 0xdd, 0xb7, 0x63, 0x56, 0x12, 0xc6 ),
CIPHERTEXT ( 0x2d, 0x8d, 0xc3, 0x7e, 0xce, 0x9c, 0xda, 0x05, 0xdd,
0x09, 0x77, 0x11, 0x2d, 0xd8, 0x64, 0xc5 ),
AUTH ( 0xab, 0xee, 0x97, 0xe6, 0xf2, 0x6d, 0x5c, 0x97, 0xe3, 0x6f,
0xca, 0xd7, 0x60, 0xb2, 0xe6, 0xc6 ) );
/* AES-GCM test case 299 */
CIPHER_TEST ( wycheproof_aes_gcm_6a453e9b, &aes_gcm_algorithm,
KEY ( 0x8f, 0x9a, 0x38, 0xc1, 0x01, 0x49, 0x66, 0xe4, 0xd9, 0xae,
0x73, 0x61, 0x39, 0xc5, 0xe7, 0x9b, 0x99, 0x34, 0x58, 0x74,
0xf4, 0x2d, 0x4c, 0x7d, 0x2c, 0x81, 0xaa, 0x67, 0x97, 0xc4,
0x17, 0xc0 ),
IV ( 0xa9 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x2a, 0x26, 0x8b, 0xf3, 0xa7, 0x5f, 0xd7, 0xb0, 0x0b, 0xa2,
0x30, 0xb9, 0x04, 0xbb, 0xb0, 0x14 ) );
/* AES-GCM test case 300 */
CIPHER_TEST ( wycheproof_aes_gcm_54b2487f, &aes_gcm_algorithm,
KEY ( 0x14, 0x4c, 0xd8, 0x27, 0x92, 0x29, 0xe8, 0xbb, 0x2d, 0xe9,
0x9d, 0x24, 0xe6, 0x15, 0x30, 0x66, 0x63, 0x91, 0x3f, 0xe9,
0x17, 0x7f, 0xcd, 0x27, 0x0f, 0xaf, 0xec, 0x49, 0x3d, 0x43,
0xbc, 0xa1 ),
IV ( 0xb3 ),
ADDITIONAL(),
PLAINTEXT ( 0x97, 0x62, 0x29, 0xf5, 0x53, 0x8f, 0x96, 0x36, 0x47,
0x6d, 0x69, 0xf0, 0xc3, 0x28, 0xe2, 0x9d ),
CIPHERTEXT ( 0x7b, 0xea, 0x30, 0xec, 0xc2, 0xf7, 0x3f, 0x8e, 0x12,
0x12, 0x63, 0xb3, 0x79, 0x66, 0x95, 0x4c ),
AUTH ( 0x8b, 0xba, 0xd4, 0xad, 0xc5, 0x4b, 0x37, 0xa2, 0xb2, 0xf0,
0xf6, 0xe8, 0x61, 0x75, 0x48, 0xc9 ) );
/* AES-GCM test case 301 */
CIPHER_TEST ( wycheproof_aes_gcm_2f6cfdb9, &aes_gcm_algorithm,
KEY ( 0x7d, 0x31, 0x86, 0x1f, 0x9d, 0x35, 0x36, 0xe1, 0x40, 0x16,
0xa3, 0x21, 0x6b, 0x10, 0x42, 0xe0, 0xd2, 0xf7, 0xd4, 0x61,
0x43, 0x14, 0x26, 0x8b, 0x6f, 0x83, 0x4e, 0xc7, 0xf3, 0x8b,
0xbb, 0x65 ),
IV ( 0xc3, 0x32 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x1d, 0x97, 0x8a, 0x69, 0x31, 0x20, 0xc1, 0x1f, 0x6d, 0x51,
0xa3, 0xed, 0x88, 0xcd, 0x4a, 0xce ) );
/* AES-GCM test case 302 */
CIPHER_TEST ( wycheproof_aes_gcm_353db382, &aes_gcm_algorithm,
KEY ( 0x22, 0xb3, 0x5f, 0xe9, 0x62, 0x3e, 0xe1, 0x1f, 0x8b, 0x60,
0xb6, 0xd2, 0x2d, 0xb3, 0x76, 0x5b, 0x66, 0x6e, 0xd9, 0x72,
0xfa, 0x7c, 0xcd, 0x92, 0xb4, 0x5f, 0x22, 0xde, 0xee, 0x02,
0xca, 0xb1 ),
IV ( 0xda, 0x6c ),
ADDITIONAL(),
PLAINTEXT ( 0x53, 0x41, 0xc7, 0x8e, 0x4c, 0xe5, 0xbf, 0x8f, 0xbc,
0x3e, 0x07, 0x7d, 0x19, 0x90, 0xdd, 0x5d ),
CIPHERTEXT ( 0x9c, 0x39, 0xf5, 0xb1, 0x10, 0x36, 0x1e, 0x9a, 0x77,
0x0c, 0xc5, 0xe8, 0xb0, 0xf4, 0x44, 0xbb ),
AUTH ( 0xb6, 0x3f, 0xf4, 0x3c, 0x12, 0x07, 0x3e, 0xc5, 0x57, 0x2b,
0x1b, 0xe7, 0x0f, 0x17, 0xe2, 0x31 ) );
/* AES-GCM test case 303 */
CIPHER_TEST ( wycheproof_aes_gcm_c0580c34, &aes_gcm_algorithm,
KEY ( 0xc2, 0x24, 0xe0, 0xbb, 0xa3, 0xd7, 0xa9, 0x91, 0x65, 0xf7,
0x99, 0x6b, 0x67, 0xa0, 0xfc, 0xe3, 0xe1, 0x2f, 0x2c, 0x01,
0x17, 0x9b, 0x19, 0x7b, 0x69, 0xb7, 0xe6, 0x28, 0xbc, 0xa9,
0x20, 0x96 ),
IV ( 0x6b, 0x30, 0x14, 0x5e ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xae, 0x6f, 0x7c, 0x9a, 0x29, 0xf0, 0xd8, 0x20, 0x4c, 0xa5,
0x0b, 0x14, 0xa1, 0xe0, 0xdc, 0xf2 ) );
/* AES-GCM test case 304 */
CIPHER_TEST ( wycheproof_aes_gcm_6134968b, &aes_gcm_algorithm,
KEY ( 0x09, 0x3e, 0xb1, 0x23, 0x43, 0x53, 0x7e, 0xe8, 0xe9, 0x1c,
0x1f, 0x71, 0x5b, 0x86, 0x26, 0x03, 0xf8, 0xda, 0xf9, 0xd4,
0xe1, 0xd7, 0xd6, 0x72, 0x12, 0xa9, 0xd6, 0x8e, 0x5a, 0xac,
0x93, 0x58 ),
IV ( 0x51, 0x10, 0x60, 0x4c ),
ADDITIONAL(),
PLAINTEXT ( 0x33, 0xef, 0xb5, 0x8c, 0x91, 0xe8, 0xc7, 0x02, 0x71,
0x87, 0x0e, 0xc0, 0x0f, 0xe2, 0xe2, 0x02 ),
CIPHERTEXT ( 0xf7, 0x3f, 0x72, 0xf9, 0x76, 0xa2, 0x96, 0xba, 0x3c,
0xa9, 0x4b, 0xc6, 0xeb, 0x08, 0xcd, 0x46 ),
AUTH ( 0xb8, 0x24, 0xc3, 0x3c, 0x13, 0xf2, 0x89, 0x42, 0x96, 0x59,
0xaa, 0x01, 0x7c, 0x63, 0x2f, 0x71 ) );
/* AES-GCM test case 305 */
CIPHER_TEST ( wycheproof_aes_gcm_4fa6ed1d, &aes_gcm_algorithm,
KEY ( 0x98, 0xe6, 0xf8, 0xab, 0x67, 0x3e, 0x80, 0x4e, 0x86, 0x5e,
0x32, 0x40, 0x3a, 0x65, 0x51, 0xbf, 0x80, 0x7a, 0x95, 0x93,
0x43, 0xc6, 0x0d, 0x34, 0x55, 0x93, 0x60, 0xbc, 0x29, 0x5e,
0xcb, 0x5b ),
IV ( 0xd4, 0xd8, 0x57, 0x51, 0x08, 0x88 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x3d, 0xb1, 0x67, 0x25, 0xfa, 0xfc, 0x82, 0x8d, 0x41, 0x4a,
0xb6, 0x1c, 0x16, 0xa6, 0xc3, 0x8f ) );
/* AES-GCM test case 306 */
CIPHER_TEST ( wycheproof_aes_gcm_0cd1dd62, &aes_gcm_algorithm,
KEY ( 0x0b, 0xd0, 0xe8, 0xe7, 0x78, 0x11, 0x66, 0xe1, 0xd8, 0x76,
0xde, 0xc8, 0xfa, 0xd3, 0x4b, 0xa9, 0x5b, 0x03, 0x2a, 0x27,
0xca, 0xc0, 0x55, 0x15, 0x95, 0x11, 0x60, 0x91, 0x00, 0x59,
0x47, 0xb7 ),
IV ( 0x1b, 0xdc, 0xd4, 0x4b, 0x66, 0x3e ),
ADDITIONAL(),
PLAINTEXT ( 0x91, 0x22, 0x22, 0x63, 0xb1, 0x2c, 0xf5, 0x61, 0x6a,
0x04, 0x9c, 0xbe, 0x29, 0xab, 0x9b, 0x5b ),
CIPHERTEXT ( 0xed, 0x46, 0x3f, 0x4f, 0x43, 0x33, 0x6a, 0xf3, 0xf4,
0xd7, 0xe0, 0x87, 0x70, 0x20, 0x11, 0x45 ),
AUTH ( 0xc8, 0xfc, 0x39, 0x90, 0x6a, 0xca, 0x0c, 0x64, 0xe1, 0x4a,
0x43, 0xff, 0x75, 0x0a, 0xbd, 0x8a ) );
/* AES-GCM test case 307 */
CIPHER_TEST ( wycheproof_aes_gcm_97734f40, &aes_gcm_algorithm,
KEY ( 0x61, 0xba, 0x69, 0x48, 0x97, 0x92, 0x5d, 0x1b, 0x41, 0x74,
0xd4, 0x04, 0x01, 0x46, 0x9c, 0x3e, 0xf2, 0x67, 0xcd, 0xb9,
0xf8, 0x29, 0xed, 0xb1, 0xa1, 0x06, 0x18, 0xc1, 0x6d, 0x66,
0x60, 0x59 ),
IV ( 0x0d, 0x10, 0xc5, 0xc8, 0x4b, 0x88, 0xd6, 0x88 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x13, 0x11, 0xf9, 0xf8, 0x30, 0xd7, 0x29, 0xc1, 0x89, 0xb7,
0x4e, 0xc4, 0xf9, 0x08, 0x0f, 0xa1 ) );
/* AES-GCM test case 308 */
CIPHER_TEST ( wycheproof_aes_gcm_2054c1b6, &aes_gcm_algorithm,
KEY ( 0x11, 0x58, 0x84, 0xf6, 0x93, 0xb1, 0x55, 0x56, 0x3e, 0x9b,
0xfb, 0x3b, 0x07, 0xca, 0xcb, 0x2f, 0x7f, 0x7c, 0xaa, 0x9b,
0xfe, 0x51, 0xf8, 0x9e, 0x23, 0xfe, 0xb5, 0xa9, 0x46, 0x8b,
0xfd, 0xd0 ),
IV ( 0x04, 0x10, 0x21, 0x99, 0xef, 0x21, 0xe1, 0xdf ),
ADDITIONAL(),
PLAINTEXT ( 0x82, 0xe3, 0xe6, 0x04, 0xd2, 0xbe, 0x8f, 0xca, 0xb7,
0x4f, 0x63, 0x8d, 0x1e, 0x70, 0xf2, 0x4c ),
CIPHERTEXT ( 0x7e, 0x0d, 0xd6, 0xc7, 0x2a, 0xec, 0x49, 0xf8, 0x9c,
0xc6, 0xa8, 0x00, 0x60, 0xc0, 0xb1, 0x70 ),
AUTH ( 0xaf, 0x68, 0xa3, 0x7c, 0xfe, 0xfe, 0xcc, 0x4a, 0xb9, 0x9b,
0xa5, 0x0a, 0x53, 0x53, 0xed, 0xca ) );
/* AES-GCM test case 309 */
CIPHER_TEST ( wycheproof_aes_gcm_084d2089, &aes_gcm_algorithm,
KEY ( 0x44, 0xab, 0x20, 0x4d, 0x15, 0x0a, 0xdb, 0x17, 0xf8, 0x3d,
0x1e, 0x52, 0x05, 0xb6, 0xe1, 0x41, 0x96, 0x73, 0xfa, 0xde,
0xe6, 0x10, 0xfb, 0x9a, 0x38, 0x18, 0x5a, 0x96, 0x74, 0x10,
0x21, 0xeb ),
IV ( 0xff, 0x39, 0x14, 0x98, 0x2b, 0xe3, 0x0b, 0x3b, 0x21, 0x12 ),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xf1, 0x87, 0xb2, 0x81, 0xc9, 0xfb, 0xb2, 0x4c, 0xca, 0x24,
0x12, 0x27, 0xd0, 0xb5, 0xd1, 0x64 ) );
/* AES-GCM test case 310 */
CIPHER_TEST ( wycheproof_aes_gcm_48d6b2ad, &aes_gcm_algorithm,
KEY ( 0xd3, 0xb4, 0x4b, 0x8d, 0xfc, 0x35, 0x30, 0x40, 0x4a, 0x63,
0xb3, 0xca, 0x04, 0xcc, 0x71, 0xcf, 0xc7, 0x1a, 0x55, 0x38,
0x44, 0x8b, 0x26, 0x25, 0xc9, 0x81, 0x85, 0x6c, 0xb7, 0xda,
0xed, 0x0f ),
IV ( 0x7c, 0x3c, 0x42, 0xfa, 0x17, 0x34, 0x7e, 0x1d, 0xf7, 0x97 ),
ADDITIONAL(),
PLAINTEXT ( 0x1d, 0x17, 0x75, 0x57, 0x96, 0x56, 0xf7, 0xf6, 0xc6,
0x89, 0x14, 0x01, 0xd7, 0x33, 0xe2, 0xab ),
CIPHERTEXT ( 0x68, 0x4a, 0x6f, 0x58, 0x76, 0x2e, 0x59, 0x17, 0x33,
0xe9, 0xe7, 0xfe, 0x7f, 0x57, 0x22, 0xa2 ),
AUTH ( 0x1c, 0xe1, 0x63, 0x44, 0x4d, 0xc3, 0x75, 0x4c, 0x39, 0xd5,
0x56, 0xcc, 0x39, 0x94, 0xb7, 0xda ) );
/* AES-GCM test case 311 */
CIPHER_TEST ( wycheproof_aes_gcm_55e10870, &aes_gcm_algorithm,
KEY ( 0x8f, 0x3f, 0x52, 0xe3, 0xc7, 0x5c, 0x58, 0xf5, 0xcb, 0x26,
0x1f, 0x51, 0x8f, 0x4a, 0xd3, 0x0a ),
IV(),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xcf, 0x71, 0x97, 0x8f, 0xfc, 0xc7, 0x78, 0xf3, 0xc8, 0x5a,
0xc9, 0xc3, 0x1b, 0x6f, 0xe1, 0x91 ) );
/* AES-GCM test case 312 */
CIPHER_TEST ( wycheproof_aes_gcm_ce163a5a, &aes_gcm_algorithm,
KEY ( 0x2a, 0x4b, 0xf9, 0x0e, 0x56, 0xb7, 0x0f, 0xdd, 0x86, 0x49,
0xd7, 0x75, 0xc0, 0x89, 0xde, 0x3b ),
IV(),
ADDITIONAL(),
PLAINTEXT ( 0x32, 0x4c, 0xed, 0x6c, 0xd1, 0x5e, 0xcc, 0x5b, 0x37,
0x41, 0x54, 0x1e, 0x22, 0xc1, 0x8a, 0xd9 ),
CIPHERTEXT ( 0x00, 0xa2, 0x9f, 0x0a, 0x5e, 0x2e, 0x74, 0x90, 0x27,
0x9d, 0x1f, 0xaf, 0x8b, 0x88, 0x1c, 0x7b ),
AUTH ( 0xa2, 0xc7, 0xe8, 0xd7, 0xa1, 0x9b, 0x88, 0x4f, 0x74, 0x2d,
0xfe, 0xc3, 0xe7, 0x6c, 0x75, 0xee ) );
/* AES-GCM test case 313 */
CIPHER_TEST ( wycheproof_aes_gcm_acdd1126, &aes_gcm_algorithm,
KEY ( 0x0b, 0x18, 0xd2, 0x13, 0x37, 0x03, 0x5c, 0x7b, 0xaa, 0x08,
0x21, 0x1b, 0x70, 0x2f, 0xa7, 0x80, 0xac, 0x7c, 0x09, 0xbe,
0x8f, 0x9e, 0xd1, 0x1f ),
IV(),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0xca, 0x69, 0xa2, 0xeb, 0x3a, 0x09, 0x6e, 0xa3, 0x6b, 0x10,
0x15, 0xd5, 0xdf, 0xff, 0xf5, 0x32 ) );
/* AES-GCM test case 314 */
CIPHER_TEST ( wycheproof_aes_gcm_34de0776, &aes_gcm_algorithm,
KEY ( 0xba, 0x76, 0xd5, 0x94, 0xa6, 0xdf, 0x91, 0x5b, 0xb7, 0xab,
0x7e, 0x6d, 0x1a, 0x8d, 0x02, 0x4b, 0x27, 0x96, 0x33, 0x6c,
0x1b, 0x83, 0x28, 0xa9 ),
IV(),
ADDITIONAL(),
PLAINTEXT ( 0xd6, 0x2f, 0x30, 0x27, 0x42, 0xd6, 0x1d, 0x82, 0x3e,
0xa9, 0x91, 0xb9, 0x34, 0x30, 0xd5, 0x89 ),
CIPHERTEXT ( 0x50, 0x9b, 0x06, 0x58, 0xd0, 0x9f, 0x7a, 0x5b, 0xb9,
0xdb, 0x43, 0xb7, 0x0c, 0x83, 0x87, 0xf7 ),
AUTH ( 0x2c, 0x94, 0x88, 0xd5, 0x3a, 0x0b, 0x2b, 0x53, 0x08, 0xc2,
0x75, 0x7d, 0xfa, 0xc7, 0x21, 0x9f ) );
/* AES-GCM test case 315 */
CIPHER_TEST ( wycheproof_aes_gcm_59e33b44, &aes_gcm_algorithm,
KEY ( 0x3f, 0x8c, 0xa4, 0x7b, 0x9a, 0x94, 0x05, 0x82, 0x64, 0x4e,
0x8e, 0xcf, 0x9c, 0x2d, 0x44, 0xe8, 0x13, 0x83, 0x77, 0xa8,
0x37, 0x9c, 0x5c, 0x11, 0xaa, 0xfe, 0x7f, 0xec, 0x19, 0x85,
0x6c, 0xf1 ),
IV(),
ADDITIONAL(),
PLAINTEXT(),
CIPHERTEXT(),
AUTH ( 0x17, 0x26, 0xaa, 0x69, 0x5f, 0xba, 0xa2, 0x1a, 0x1d, 0xb8,
0x84, 0x55, 0xc6, 0x70, 0xa4, 0xb0 ) );
/* AES-GCM test case 316 */
CIPHER_TEST ( wycheproof_aes_gcm_5356a2cb, &aes_gcm_algorithm,
KEY ( 0x76, 0x60, 0xd1, 0x09, 0x66, 0xc6, 0x50, 0x39, 0x03, 0xa5,
0x52, 0xdd, 0xe2, 0xa8, 0x09, 0xed, 0xe9, 0xda, 0x49, 0x0e,
0x5e, 0x5c, 0xc3, 0xe3, 0x49, 0xda, 0x99, 0x96, 0x71, 0x80,
0x98, 0x83 ),
IV(),
ADDITIONAL(),
PLAINTEXT ( 0xc3, 0x14, 0x23, 0x53, 0x41, 0xde, 0xbf, 0xaf, 0xa1,
0x52, 0x6b, 0xb6, 0x10, 0x44, 0xa7, 0xf1 ),
CIPHERTEXT ( 0x77, 0x72, 0xea, 0x35, 0x89, 0x01, 0xf5, 0x71, 0xd3,
0xd3, 0x5c, 0x19, 0x49, 0x76, 0x39, 0xd9 ),
AUTH ( 0x8f, 0xe0, 0x52, 0x0a, 0xd7, 0x44, 0xa1, 0x1f, 0x0c, 0xcf,
0xd2, 0x28, 0x45, 0x43, 0x63, 0xfa ) );
/** Perform Wycheproof AES-GCM self-tests */
static void wycheproof_aes_gcm_exec ( void ) {
/* Perform tests in tcId order */
cipher_ok ( &wycheproof_aes_gcm_157a9714 );
cipher_ok ( &wycheproof_aes_gcm_9790df61 );
cipher_ok ( &wycheproof_aes_gcm_115b44f1 );
cipher_ok ( &wycheproof_aes_gcm_b7fccaa3 );
cipher_ok ( &wycheproof_aes_gcm_91d6ea82 );
cipher_ok ( &wycheproof_aes_gcm_e6ac9d52 );
cipher_ok ( &wycheproof_aes_gcm_e313ce55 );
cipher_ok ( &wycheproof_aes_gcm_74a144dd );
cipher_ok ( &wycheproof_aes_gcm_a14ec21f );
cipher_ok ( &wycheproof_aes_gcm_70b4e6f3 );
cipher_ok ( &wycheproof_aes_gcm_7f9ca8b2 );
cipher_ok ( &wycheproof_aes_gcm_2f81ba3b );
cipher_ok ( &wycheproof_aes_gcm_3324275e );
cipher_ok ( &wycheproof_aes_gcm_d0b2b893 );
cipher_ok ( &wycheproof_aes_gcm_d06a8069 );
cipher_ok ( &wycheproof_aes_gcm_f9082b41 );
cipher_ok ( &wycheproof_aes_gcm_8224427d );
cipher_ok ( &wycheproof_aes_gcm_110d48ee );
cipher_ok ( &wycheproof_aes_gcm_417222f0 );
cipher_ok ( &wycheproof_aes_gcm_f01459e0 );
cipher_ok ( &wycheproof_aes_gcm_bc589a7e );
cipher_ok ( &wycheproof_aes_gcm_d63ed865 );
cipher_ok ( &wycheproof_aes_gcm_d08a751a );
cipher_ok ( &wycheproof_aes_gcm_471d4ead );
cipher_ok ( &wycheproof_aes_gcm_7ff74d83 );
cipher_ok ( &wycheproof_aes_gcm_93db813a );
cipher_ok ( &wycheproof_aes_gcm_2ec43c3e );
cipher_ok ( &wycheproof_aes_gcm_b9939500 );
cipher_ok ( &wycheproof_aes_gcm_398af67e );
cipher_ok ( &wycheproof_aes_gcm_831a61d8 );
cipher_ok ( &wycheproof_aes_gcm_63336678 );
cipher_ok ( &wycheproof_aes_gcm_a88873d1 );
cipher_ok ( &wycheproof_aes_gcm_febb3d17 );
cipher_ok ( &wycheproof_aes_gcm_6e67f3d3 );
cipher_ok ( &wycheproof_aes_gcm_7e3aa6d7 );
cipher_ok ( &wycheproof_aes_gcm_507e4bb7 );
cipher_ok ( &wycheproof_aes_gcm_a74ffd89 );
cipher_ok ( &wycheproof_aes_gcm_876dc2f0 );
cipher_ok ( &wycheproof_aes_gcm_0e57609d );
cipher_ok ( &wycheproof_aes_gcm_5b8dd48a );
cipher_ok ( &wycheproof_aes_gcm_15eae47a );
cipher_ok ( &wycheproof_aes_gcm_5bf301b1 );
cipher_ok ( &wycheproof_aes_gcm_6d9ec3c9 );
cipher_ok ( &wycheproof_aes_gcm_5e73e414 );
cipher_ok ( &wycheproof_aes_gcm_d5198faa );
cipher_ok ( &wycheproof_aes_gcm_ab750cbd );
cipher_ok ( &wycheproof_aes_gcm_ea79dc25 );
cipher_ok ( &wycheproof_aes_gcm_3397c9ae );
cipher_ok ( &wycheproof_aes_gcm_347e1695 );
cipher_ok ( &wycheproof_aes_gcm_63a3e6ca );
cipher_ok ( &wycheproof_aes_gcm_dc6c9702 );
cipher_ok ( &wycheproof_aes_gcm_942cc802 );
cipher_ok ( &wycheproof_aes_gcm_77d7dce1 );
cipher_ok ( &wycheproof_aes_gcm_471412a0 );
cipher_ok ( &wycheproof_aes_gcm_a9c89f85 );
cipher_ok ( &wycheproof_aes_gcm_db3f21b0 );
cipher_ok ( &wycheproof_aes_gcm_0755dc1c );
cipher_ok ( &wycheproof_aes_gcm_1a31814f );
cipher_ok ( &wycheproof_aes_gcm_8e51b36a );
cipher_ok ( &wycheproof_aes_gcm_8737599d );
cipher_ok ( &wycheproof_aes_gcm_0d33db46 );
cipher_ok ( &wycheproof_aes_gcm_2bdc78c7 );
cipher_ok ( &wycheproof_aes_gcm_d5bfae8c );
cipher_ok ( &wycheproof_aes_gcm_4ba4c501 );
cipher_ok ( &wycheproof_aes_gcm_13666319 );
cipher_ok ( &wycheproof_aes_gcm_ba5c6dd8 );
cipher_ok ( &wycheproof_aes_gcm_c95dab82 );
cipher_ok ( &wycheproof_aes_gcm_ae22db55 );
cipher_ok ( &wycheproof_aes_gcm_d6dc5d07 );
cipher_ok ( &wycheproof_aes_gcm_c761752c );
cipher_ok ( &wycheproof_aes_gcm_c63f1aed );
cipher_ok ( &wycheproof_aes_gcm_dd4fb2f4 );
cipher_ok ( &wycheproof_aes_gcm_922348b7 );
cipher_ok ( &wycheproof_aes_gcm_90face03 );
cipher_ok ( &wycheproof_aes_gcm_d999cc8e );
cipher_ok ( &wycheproof_aes_gcm_4af502aa );
cipher_ok ( &wycheproof_aes_gcm_4ebc55c7 );
cipher_ok ( &wycheproof_aes_gcm_888186c8 );
cipher_ok ( &wycheproof_aes_gcm_4a6005f6 );
cipher_ok ( &wycheproof_aes_gcm_2d04655c );
cipher_ok ( &wycheproof_aes_gcm_56b6987d );
cipher_ok ( &wycheproof_aes_gcm_644b8aad );
cipher_ok ( &wycheproof_aes_gcm_97bb5e35 );
cipher_ok ( &wycheproof_aes_gcm_123ab900 );
cipher_ok ( &wycheproof_aes_gcm_ea998729 );
cipher_ok ( &wycheproof_aes_gcm_cdad6d3a );
cipher_ok ( &wycheproof_aes_gcm_e77da61d );
cipher_ok ( &wycheproof_aes_gcm_599f93e3 );
cipher_ok ( &wycheproof_aes_gcm_12c1aa5e );
cipher_ok ( &wycheproof_aes_gcm_b2c6c3cd );
cipher_ok ( &wycheproof_aes_gcm_293c46f8 );
cipher_ok ( &wycheproof_aes_gcm_1af86832 );
cipher_ok ( &wycheproof_aes_gcm_d03f18fe );
cipher_ok ( &wycheproof_aes_gcm_63a399bd );
cipher_ok ( &wycheproof_aes_gcm_03a1cf9e );
cipher_ok ( &wycheproof_aes_gcm_41df38af );
cipher_ok ( &wycheproof_aes_gcm_1a8fedd4 );
cipher_ok ( &wycheproof_aes_gcm_c5c5e61c );
cipher_ok ( &wycheproof_aes_gcm_ceefcefc );
cipher_ok ( &wycheproof_aes_gcm_21500b95 );
cipher_ok ( &wycheproof_aes_gcm_e2c3a1a4 );
cipher_ok ( &wycheproof_aes_gcm_77767307 );
cipher_ok ( &wycheproof_aes_gcm_f5cabfe8 );
cipher_ok ( &wycheproof_aes_gcm_14ea057a );
cipher_ok ( &wycheproof_aes_gcm_b2454cd9 );
cipher_ok ( &wycheproof_aes_gcm_a605fd40 );
cipher_ok ( &wycheproof_aes_gcm_5fc2c3a4 );
cipher_ok ( &wycheproof_aes_gcm_c73596ff );
cipher_ok ( &wycheproof_aes_gcm_8b84b201 );
cipher_ok ( &wycheproof_aes_gcm_077de8ed );
cipher_ok ( &wycheproof_aes_gcm_8895d57d );
cipher_ok ( &wycheproof_aes_gcm_bca38eea );
cipher_ok ( &wycheproof_aes_gcm_e281bdf1 );
cipher_ok ( &wycheproof_aes_gcm_09e34ed6 );
cipher_ok ( &wycheproof_aes_gcm_a20bd785 );
cipher_ok ( &wycheproof_aes_gcm_4d3c95a4 );
cipher_ok ( &wycheproof_aes_gcm_fdf02744 );
cipher_ok ( &wycheproof_aes_gcm_19fae6ad );
cipher_ok ( &wycheproof_aes_gcm_de129db1 );
cipher_ok ( &wycheproof_aes_gcm_1d084de2 );
cipher_ok ( &wycheproof_aes_gcm_a5bb8fa1 );
cipher_ok ( &wycheproof_aes_gcm_94e6bc4f );
cipher_ok ( &wycheproof_aes_gcm_10226199 );
cipher_ok ( &wycheproof_aes_gcm_0b1e8b5b );
cipher_ok ( &wycheproof_aes_gcm_96e5612f );
cipher_ok ( &wycheproof_aes_gcm_2e57ea6b );
cipher_ok ( &wycheproof_aes_gcm_08c164fc );
cipher_ok ( &wycheproof_aes_gcm_19c96e4e );
cipher_ok ( &wycheproof_aes_gcm_63801d8f );
cipher_ok ( &wycheproof_aes_gcm_3d467b77 );
cipher_ok ( &wycheproof_aes_gcm_566b5fcd );
cipher_ok ( &wycheproof_aes_gcm_39054267 );
cipher_ok ( &wycheproof_aes_gcm_99c80b8d );
cipher_ok ( &wycheproof_aes_gcm_c40c4226 );
cipher_ok ( &wycheproof_aes_gcm_b6419c85 );
cipher_ok ( &wycheproof_aes_gcm_1c119a15 );
cipher_ok ( &wycheproof_aes_gcm_e36c2be6 );
cipher_ok ( &wycheproof_aes_gcm_93996ee5 );
cipher_ok ( &wycheproof_aes_gcm_6aada21e );
cipher_ok ( &wycheproof_aes_gcm_f50057ef );
cipher_ok ( &wycheproof_aes_gcm_7095e3af );
cipher_ok ( &wycheproof_aes_gcm_ff5845cf );
cipher_ok ( &wycheproof_aes_gcm_2b7f8f4f );
cipher_ok ( &wycheproof_aes_gcm_d993a57b );
cipher_ok ( &wycheproof_aes_gcm_009e52d4 );
cipher_ok ( &wycheproof_aes_gcm_2eef8b22 );
cipher_ok ( &wycheproof_aes_gcm_a2b24e57 );
cipher_ok ( &wycheproof_aes_gcm_4cccfc2f );
cipher_ok ( &wycheproof_aes_gcm_0b49b77a );
cipher_ok ( &wycheproof_aes_gcm_86a429e2 );
cipher_ok ( &wycheproof_aes_gcm_8ed4ba4c );
cipher_ok ( &wycheproof_aes_gcm_0e8ed23e );
cipher_ok ( &wycheproof_aes_gcm_b1a4bc0b );
cipher_ok ( &wycheproof_aes_gcm_b025b360 );
cipher_ok ( &wycheproof_aes_gcm_f5019269 );
cipher_ok ( &wycheproof_aes_gcm_31562fe1 );
cipher_ok ( &wycheproof_aes_gcm_49e334ce );
cipher_ok ( &wycheproof_aes_gcm_6677d2a7 );
cipher_ok ( &wycheproof_aes_gcm_5d6316ec );
cipher_ok ( &wycheproof_aes_gcm_6c7b5516 );
cipher_ok ( &wycheproof_aes_gcm_3d134168 );
cipher_ok ( &wycheproof_aes_gcm_637cdd7c );
cipher_ok ( &wycheproof_aes_gcm_a524a3e1 );
cipher_ok ( &wycheproof_aes_gcm_b5f09448 );
cipher_ok ( &wycheproof_aes_gcm_c90d1019 );
cipher_ok ( &wycheproof_aes_gcm_cc16f896 );
cipher_ok ( &wycheproof_aes_gcm_c9b9c25b );
cipher_ok ( &wycheproof_aes_gcm_9bcfa234 );
cipher_ok ( &wycheproof_aes_gcm_02e3c344 );
cipher_ok ( &wycheproof_aes_gcm_0a6597f4 );
cipher_ok ( &wycheproof_aes_gcm_4723a634 );
cipher_ok ( &wycheproof_aes_gcm_b7cd0c19 );
cipher_ok ( &wycheproof_aes_gcm_bcf63dc2 );
cipher_ok ( &wycheproof_aes_gcm_294b997d );
cipher_ok ( &wycheproof_aes_gcm_c973e6d5 );
cipher_ok ( &wycheproof_aes_gcm_9d586636 );
cipher_ok ( &wycheproof_aes_gcm_07918c73 );
cipher_ok ( &wycheproof_aes_gcm_807f66c0 );
cipher_ok ( &wycheproof_aes_gcm_1a607e05 );
cipher_ok ( &wycheproof_aes_gcm_848e090c );
cipher_ok ( &wycheproof_aes_gcm_b238bfb2 );
cipher_ok ( &wycheproof_aes_gcm_50ca31ab );
cipher_ok ( &wycheproof_aes_gcm_7a0a5da7 );
cipher_ok ( &wycheproof_aes_gcm_1b7eb29c );
cipher_ok ( &wycheproof_aes_gcm_22ddd4ff );
cipher_ok ( &wycheproof_aes_gcm_047fcc3d );
cipher_ok ( &wycheproof_aes_gcm_b09553f4 );
cipher_ok ( &wycheproof_aes_gcm_1dd3caab );
cipher_ok ( &wycheproof_aes_gcm_9ff40949 );
cipher_ok ( &wycheproof_aes_gcm_4bae909f );
cipher_ok ( &wycheproof_aes_gcm_dbc87bdd );
cipher_ok ( &wycheproof_aes_gcm_0834aa42 );
cipher_ok ( &wycheproof_aes_gcm_0694ddb9 );
cipher_ok ( &wycheproof_aes_gcm_c68a0e20 );
cipher_ok ( &wycheproof_aes_gcm_a0b4e03a );
cipher_ok ( &wycheproof_aes_gcm_42f63793 );
cipher_ok ( &wycheproof_aes_gcm_a9355b80 );
cipher_ok ( &wycheproof_aes_gcm_380d7036 );
cipher_ok ( &wycheproof_aes_gcm_26a77e52 );
cipher_ok ( &wycheproof_aes_gcm_7016eb5c );
cipher_ok ( &wycheproof_aes_gcm_20abbc80 );
cipher_ok ( &wycheproof_aes_gcm_1d93e9e2 );
cipher_ok ( &wycheproof_aes_gcm_559a53ba );
cipher_ok ( &wycheproof_aes_gcm_2fba3231 );
cipher_ok ( &wycheproof_aes_gcm_51785cc5 );
cipher_ok ( &wycheproof_aes_gcm_34d832ff );
cipher_ok ( &wycheproof_aes_gcm_335f78f4 );
cipher_ok ( &wycheproof_aes_gcm_39d2f365 );
cipher_ok ( &wycheproof_aes_gcm_eaa17e87 );
cipher_ok ( &wycheproof_aes_gcm_e95b49a5 );
cipher_ok ( &wycheproof_aes_gcm_28dd9b0e );
cipher_ok ( &wycheproof_aes_gcm_6ae5995a );
cipher_ok ( &wycheproof_aes_gcm_df8aacfc );
cipher_ok ( &wycheproof_aes_gcm_f248c8cf );
cipher_ok ( &wycheproof_aes_gcm_bd6eb7fd );
cipher_ok ( &wycheproof_aes_gcm_141e913b );
cipher_ok ( &wycheproof_aes_gcm_d2887a50 );
cipher_ok ( &wycheproof_aes_gcm_6a453e9b );
cipher_ok ( &wycheproof_aes_gcm_54b2487f );
cipher_ok ( &wycheproof_aes_gcm_2f6cfdb9 );
cipher_ok ( &wycheproof_aes_gcm_353db382 );
cipher_ok ( &wycheproof_aes_gcm_c0580c34 );
cipher_ok ( &wycheproof_aes_gcm_6134968b );
cipher_ok ( &wycheproof_aes_gcm_4fa6ed1d );
cipher_ok ( &wycheproof_aes_gcm_0cd1dd62 );
cipher_ok ( &wycheproof_aes_gcm_97734f40 );
cipher_ok ( &wycheproof_aes_gcm_2054c1b6 );
cipher_ok ( &wycheproof_aes_gcm_084d2089 );
cipher_ok ( &wycheproof_aes_gcm_48d6b2ad );
cipher_iv_fail_ok ( &wycheproof_aes_gcm_55e10870 );
cipher_iv_fail_ok ( &wycheproof_aes_gcm_ce163a5a );
cipher_iv_fail_ok ( &wycheproof_aes_gcm_acdd1126 );
cipher_iv_fail_ok ( &wycheproof_aes_gcm_34de0776 );
cipher_iv_fail_ok ( &wycheproof_aes_gcm_59e33b44 );
cipher_iv_fail_ok ( &wycheproof_aes_gcm_5356a2cb );
}
/** Wycheproof AES-GCM self-tests */
struct self_test wycheproof_aes_gcm __self_test = {
.name = "wycheproof_aes_gcm",
.exec = wycheproof_aes_gcm_exec,
};
REQUIRING_SYMBOL ( wycheproof_aes_gcm );