From 35bd9a8fd3bee98dd2f9a4802b7ab644d4f17aa1 Mon Sep 17 00:00:00 2001 From: Michael Brown Date: Tue, 1 Sep 2026 12:55:43 +0100 Subject: [PATCH] [test] Add Project Wycheproof AES-GCM tests Signed-off-by: Michael Brown --- src/tests/wycheproof/import.py | 134 + src/tests/wycheproof/wycheproof_aes_gcm.c | 7039 +++++++++++++++++++++ src/tests/wycheproof_test.c | 4 + src/tests/wycheproof_test.h | 3 + 4 files changed, 7180 insertions(+) create mode 100644 src/tests/wycheproof/wycheproof_aes_gcm.c diff --git a/src/tests/wycheproof/import.py b/src/tests/wycheproof/import.py index 42a656ea3..ee4144daa 100755 --- a/src/tests/wycheproof/import.py +++ b/src/tests/wycheproof/import.py @@ -729,6 +729,139 @@ class HkdfSha512TestFile(HkdfTestFile): LABEL: ClassVar = "HKDF-SHA512" SRCFILE: ClassVar = "hkdf_sha512_test.json" +############################################################################## +# +# AEAD cipher tests +# + +class AeadCipherTestFlag(Enum): + COUNTER_WRAP = "CounterWrap" + KTV = "Ktv" + LONG_IV = "LongIv" + MODIFIED_TAG = "ModifiedTag" + PSEUDORANDOM = "Pseudorandom" + SMALL_IV = "SmallIv" + SPECIAL_CASE = "SpecialCase" + ZERO_LENGTH_IV = "ZeroLengthIv" + +@attrclass +class AeadCipherTestCase(TestCase): + """An AEAD cipher test case""" + flags = set_field(AeadCipherTestFlag) + key = scalar_field(HexBytes, metadata={"stable": True}) + iv = scalar_field(HexBytes, metadata={"stable": True}) + aad = scalar_field(HexBytes, metadata={"stable": True}) + msg = scalar_field(HexBytes, metadata={"stable": True}) + ct = scalar_field(HexBytes) + tag = scalar_field(HexBytes) + + @key.validator + def validate_key(self, attr, value): + """Validate key size""" + self.validate_fixed(attr, value, (self.test_group.keySize // 8)) + + @iv.validator + def validate_iv(self, attr, value): + """Validate IV size""" + self.validate_fixed(attr, value, (self.test_group.ivSize // 8)) + + @tag.validator + def validate_tag(self, attr, value): + """Validate tag size""" + self.validate_fixed(attr, value, (self.test_group.tagSize // 8)) + + @property + def skip(self): + """Reason for skipping test (if any)""" + if AeadCipherTestFlag.MODIFIED_TAG in self.flags: + # Our cipher abstraction covers only generating the tag, + # not comparing the tag to check for a match + return "modified tag" + + @property + def key_failure(self): + """Check if test case is expected to fail due to invalid key""" + return False + + @property + def iv_failure(self): + """Check if test case is expected to fail due to invalid IV""" + return False + + def definition(self): + """Generate source code for test definition""" + code = super().definition() + if not self.skip: + algorithm = "&%s_algorithm" % self.test_file.ALGORITHM + code += ( + "CIPHER_TEST ( %s, %s,\n" % (self.test_name, algorithm) + + self.key.source("\tKEY") + ",\n" + + self.iv.source("\tIV") + ",\n" + + self.aad.source("\tADDITIONAL") + ",\n" + + self.msg.source("\tPLAINTEXT") + ",\n" + + self.ct.source("\tCIPHERTEXT") + ",\n" + + self.tag.source("\tAUTH") + " );\n" + ) + return code + + def invocation(self): + """Generate source code for test invocation""" + code = super().invocation() + if self.key_failure: + code += "\tcipher_key_fail_ok ( &%s );\n" % self.test_name + elif self.iv_failure: + code += "\tcipher_iv_fail_ok ( &%s );\n" % self.test_name + elif self.failure: + raise ValueError("%d: unknown cipher failure reason" % self.tcId) + else: + code += "\tcipher_ok ( &%s );\n" % self.test_name + return code + +@attrclass +class AeadCipherTestGroup(TestGroup): + """An AEAD cipher test group""" + ivSize = scalar_field(int) + keySize = scalar_field(int) + tagSize = scalar_field(int) + tests = list_field(AeadCipherTestCase) + +@attrclass +class AeadCipherTestFile(TestFile): + """An AEAD cipher test file""" + SCHEMA: ClassVar = "aead_test_schema_v1.json" + testGroups = list_field(AeadCipherTestGroup) + +############################################################################## +# +# GCM cipher tests +# + +@attrclass +class GcmCipherTestCase(AeadCipherTestCase): + """A GCM cipher test case""" + + @property + def iv_failure(self): + """Check if test case is expected to fail due to invalid IV""" + return AeadCipherTestFlag.ZERO_LENGTH_IV in self.flags + +@attrclass +class GcmCipherTestGroup(AeadCipherTestGroup): + """A GCM cipher test group""" + tests = list_field(GcmCipherTestCase) + +@attrclass +class GcmCipherTestFile(AeadCipherTestFile): + """A GCM cipher test file""" + testGroups = list_field(GcmCipherTestGroup) + +@attrclass +class AesGcmCipherTestFile(GcmCipherTestFile): + """An AES-GCM cipher test file""" + ALGORITHM: ClassVar = "aes_gcm" + LABEL: ClassVar = "AES-GCM" + SRCFILE: ClassVar = "aes_gcm_test.json" + ############################################################################## # # Main program @@ -756,6 +889,7 @@ def main(): # Read JSON inputs classes = ( + AesGcmCipherTestFile, HkdfSha1TestFile, HkdfSha256TestFile, HkdfSha384TestFile, diff --git a/src/tests/wycheproof/wycheproof_aes_gcm.c b/src/tests/wycheproof/wycheproof_aes_gcm.c new file mode 100644 index 000000000..c99344a05 --- /dev/null +++ b/src/tests/wycheproof/wycheproof_aes_gcm.c @@ -0,0 +1,7039 @@ +/* This file is automatically generated by import.py. + * + * DO NOT EDIT THIS FILE. Any changes will be lost. + * + */ + +#include "../wycheproof_test.h" + +/* AES-GCM test case 1 */ +CIPHER_TEST ( wycheproof_aes_gcm_157a9714, &aes_gcm_algorithm, + KEY ( 0x5b, 0x96, 0x04, 0xfe, 0x14, 0xea, 0xdb, 0xa9, 0x31, 0xb0, + 0xcc, 0xf3, 0x48, 0x43, 0xda, 0xb9 ), + IV ( 0x02, 0x83, 0x18, 0xab, 0xc1, 0x82, 0x40, 0x29, 0x13, 0x81, + 0x41, 0xa2 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x1d, 0x0c, 0x23, 0x12, 0x87, 0xc1, 0x18, 0x27, + 0x84, 0x55, 0x4c, 0xa3, 0xa2, 0x19, 0x08 ), + CIPHERTEXT ( 0x26, 0x07, 0x3c, 0xc1, 0xd8, 0x51, 0xbe, 0xff, 0x17, + 0x63, 0x84, 0xdc, 0x98, 0x96, 0xd5, 0xff ), + AUTH ( 0x0a, 0x3e, 0xa7, 0xa5, 0x48, 0x7c, 0xb5, 0xf7, 0xd7, 0x0f, + 0xb6, 0xc5, 0x8d, 0x03, 0x85, 0x54 ) ); + +/* AES-GCM test case 2 */ +CIPHER_TEST ( wycheproof_aes_gcm_9790df61, &aes_gcm_algorithm, + KEY ( 0x5b, 0x96, 0x04, 0xfe, 0x14, 0xea, 0xdb, 0xa9, 0x31, 0xb0, + 0xcc, 0xf3, 0x48, 0x43, 0xda, 0xb9 ), + IV ( 0x92, 0x1d, 0x25, 0x07, 0xfa, 0x80, 0x07, 0xb7, 0xbd, 0x06, + 0x7d, 0x34 ), + ADDITIONAL ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, + 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + PLAINTEXT ( 0x00, 0x1d, 0x0c, 0x23, 0x12, 0x87, 0xc1, 0x18, 0x27, + 0x84, 0x55, 0x4c, 0xa3, 0xa2, 0x19, 0x08 ), + CIPHERTEXT ( 0x49, 0xd8, 0xb9, 0x78, 0x3e, 0x91, 0x19, 0x13, 0xd8, + 0x70, 0x94, 0xd1, 0xf6, 0x3c, 0xc7, 0x65 ), + AUTH ( 0x1e, 0x34, 0x8b, 0xa0, 0x7c, 0xca, 0x2c, 0xf0, 0x4c, 0x61, + 0x8c, 0xb4, 0xd4, 0x3a, 0x5b, 0x92 ) ); + +/* AES-GCM test case 3 */ +CIPHER_TEST ( wycheproof_aes_gcm_115b44f1, &aes_gcm_algorithm, + KEY ( 0xaa, 0x02, 0x3d, 0x04, 0x78, 0xdc, 0xb2, 0xb2, 0x31, 0x24, + 0x98, 0x29, 0x3d, 0x9a, 0x91, 0x29 ), + IV ( 0x04, 0x32, 0xbc, 0x49, 0xac, 0x34, 0x41, 0x20, 0x81, 0x28, + 0x81, 0x27 ), + ADDITIONAL ( 0xaa, 0xc3, 0x92, 0x31, 0x12, 0x98, 0x72, 0xa2 ), + PLAINTEXT ( 0x20, 0x35, 0xaf, 0x31, 0x3d, 0x13, 0x46, 0xab, 0x00, + 0x15, 0x4f, 0xea, 0x78, 0x32, 0x21, 0x05 ), + CIPHERTEXT ( 0xee, 0xa9, 0x45, 0xf3, 0xd0, 0xf9, 0x8c, 0xc0, 0xfb, + 0xab, 0x47, 0x2a, 0x0c, 0xf2, 0x4e, 0x87 ), + AUTH ( 0x4b, 0xb9, 0xb4, 0x81, 0x25, 0x19, 0xda, 0xdf, 0x9e, 0x12, + 0x32, 0x01, 0x6d, 0x06, 0x81, 0x33 ) ); + +/* AES-GCM test case 4 */ +CIPHER_TEST ( wycheproof_aes_gcm_b7fccaa3, &aes_gcm_algorithm, + KEY ( 0xbe, 0xdc, 0xfb, 0x5a, 0x01, 0x1e, 0xbc, 0x84, 0x60, 0x0f, + 0xcb, 0x29, 0x6c, 0x15, 0xaf, 0x0d ), + IV ( 0x43, 0x8a, 0x54, 0x7a, 0x94, 0xea, 0x88, 0xdc, 0xe4, 0x6c, + 0x6c, 0x85 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x96, 0x02, 0x47, 0xba, 0x5c, 0xde, 0x02, 0xe4, 0x1a, 0x31, + 0x3c, 0x4c, 0x01, 0x36, 0xed, 0xc3 ) ); + +/* AES-GCM test case 5 */ +CIPHER_TEST ( wycheproof_aes_gcm_91d6ea82, &aes_gcm_algorithm, + KEY ( 0x38, 0x4e, 0xa4, 0x16, 0xac, 0x3c, 0x2f, 0x51, 0xa7, 0x6e, + 0x7d, 0x82, 0x26, 0x34, 0x6d, 0x4e ), + IV ( 0xb3, 0x0c, 0x08, 0x47, 0x27, 0xad, 0x1c, 0x59, 0x2a, 0xc2, + 0x1d, 0x12 ), + ADDITIONAL(), + PLAINTEXT ( 0x35 ), + CIPHERTEXT ( 0x54 ), + AUTH ( 0x7c, 0x1e, 0x4a, 0xe8, 0x8b, 0xb2, 0x7e, 0x56, 0x38, 0x34, + 0x3c, 0xb9, 0xfd, 0x3f, 0x63, 0x37 ) ); + +/* AES-GCM test case 6 */ +CIPHER_TEST ( wycheproof_aes_gcm_e6ac9d52, &aes_gcm_algorithm, + KEY ( 0xca, 0xe3, 0x1c, 0xd9, 0xf5, 0x55, 0x26, 0xeb, 0x03, 0x82, + 0x41, 0xfc, 0x44, 0xca, 0xc1, 0xe5 ), + IV ( 0xb5, 0xe0, 0x06, 0xde, 0xd5, 0x53, 0x11, 0x0e, 0x6d, 0xc5, + 0x65, 0x29 ), + ADDITIONAL(), + PLAINTEXT ( 0xd1, 0x09, 0x89, 0xf2, 0xc5, 0x2e, 0x94, 0xad ), + CIPHERTEXT ( 0xa0, 0x36, 0xea, 0xd0, 0x31, 0x93, 0x90, 0x3f ), + AUTH ( 0x3b, 0x62, 0x69, 0x40, 0xe0, 0xe9, 0xf0, 0xcb, 0xea, 0x8e, + 0x18, 0xc4, 0x37, 0xfd, 0x60, 0x11 ) ); + +/* AES-GCM test case 7 */ +CIPHER_TEST ( wycheproof_aes_gcm_e313ce55, &aes_gcm_algorithm, + KEY ( 0xdd, 0x61, 0x97, 0xcd, 0x63, 0xc9, 0x63, 0x91, 0x9c, 0xf0, + 0xc2, 0x73, 0xef, 0x6b, 0x28, 0xbf ), + IV ( 0xec, 0xb0, 0xc4, 0x2f, 0x70, 0x00, 0xef, 0x0e, 0x6f, 0x95, + 0xf2, 0x4d ), + ADDITIONAL(), + PLAINTEXT ( 0x4d, 0xcc, 0x14, 0x85, 0x36, 0x58, 0x66, 0xe2, 0x5a, + 0xc3, 0xf2, 0xca, 0x6a, 0xba, 0x97 ), + CIPHERTEXT ( 0x8a, 0x99, 0x92, 0x38, 0x8e, 0x73, 0x5f, 0x80, 0xee, + 0x18, 0xf4, 0xa6, 0x3c, 0x10, 0xad ), + AUTH ( 0x14, 0x86, 0xa9, 0x1c, 0xcc, 0xf9, 0x2c, 0x9a, 0x5b, 0x00, + 0xf7, 0xb0, 0xe0, 0x34, 0x89, 0x1c ) ); + +/* AES-GCM test case 8 */ +CIPHER_TEST ( wycheproof_aes_gcm_74a144dd, &aes_gcm_algorithm, + KEY ( 0xff, 0xdf, 0x42, 0x28, 0x36, 0x1e, 0xa1, 0xf8, 0x16, 0x58, + 0x52, 0x13, 0x6b, 0x34, 0x80, 0xf7 ), + IV ( 0x0e, 0x16, 0x66, 0xf2, 0xdc, 0x65, 0x2f, 0x77, 0x08, 0xfb, + 0x8f, 0x0d ), + ADDITIONAL(), + PLAINTEXT ( 0x25, 0xb1, 0x2e, 0x28, 0xac, 0x0e, 0xf6, 0xea, 0xd0, + 0x22, 0x6a, 0x3b, 0x22, 0x88, 0xc8, 0x00 ), + CIPHERTEXT ( 0xf7, 0xbd, 0x37, 0x9d, 0x13, 0x04, 0x77, 0x17, 0x6b, + 0x8b, 0xb3, 0xcb, 0x23, 0xdb, 0xbb, 0xaa ), + AUTH ( 0x1e, 0xe6, 0x51, 0x3c, 0xe3, 0x0c, 0x78, 0x73, 0xf5, 0x9d, + 0xd4, 0x35, 0x0a, 0x58, 0x8f, 0x42 ) ); + +/* AES-GCM test case 9 */ +CIPHER_TEST ( wycheproof_aes_gcm_a14ec21f, &aes_gcm_algorithm, + KEY ( 0xc1, 0x5e, 0xd2, 0x27, 0xdd, 0x2e, 0x23, 0x7e, 0xcd, 0x08, + 0x7e, 0xaa, 0xaa, 0xd1, 0x9e, 0xa4 ), + IV ( 0x96, 0x5f, 0xf6, 0x64, 0x31, 0x16, 0xac, 0x14, 0x43, 0xa2, + 0xde, 0xc7 ), + ADDITIONAL(), + PLAINTEXT ( 0xfe, 0xe6, 0x2f, 0xde, 0x97, 0x3f, 0xe0, 0x25, 0xad, + 0x6b, 0x32, 0x2d, 0xcd, 0xf3, 0xc6, 0x3f, 0xc7 ), + CIPHERTEXT ( 0x0d, 0xe5, 0x1f, 0xe4, 0xf7, 0xf2, 0xd1, 0xf0, 0xf9, + 0x17, 0x56, 0x9f, 0x5c, 0x6d, 0x1b, 0x00, 0x9c ), + AUTH ( 0x6c, 0xd8, 0x52, 0x14, 0x22, 0xc0, 0x17, 0x7e, 0x83, 0xef, + 0x1b, 0x7a, 0x84, 0x5d, 0x97, 0xdb ) ); + +/* AES-GCM test case 10 */ +CIPHER_TEST ( wycheproof_aes_gcm_70b4e6f3, &aes_gcm_algorithm, + KEY ( 0xa8, 0xee, 0x11, 0xb2, 0x6d, 0x7c, 0xeb, 0x7f, 0x17, 0xea, + 0xa1, 0xe4, 0xb8, 0x3a, 0x2c, 0xf6 ), + IV ( 0xfb, 0xbc, 0x04, 0xfd, 0x6e, 0x02, 0x5b, 0x71, 0x93, 0xeb, + 0x57, 0xf6 ), + ADDITIONAL(), + PLAINTEXT ( 0xc0, 0x8f, 0x08, 0x5e, 0x6a, 0x9e, 0x0e, 0xf3, 0x63, + 0x62, 0x80, 0xc1, 0x1e, 0xcf, 0xad, 0xf0, 0xc1, 0xe7, + 0x29, 0x19, 0xff, 0xc1, 0x7e, 0xaf ), + CIPHERTEXT ( 0x7c, 0xd9, 0xf4, 0xe4, 0xf3, 0x65, 0x70, 0x4f, 0xff, + 0x3b, 0x99, 0x00, 0xaa, 0x93, 0xba, 0x54, 0xb6, 0x72, + 0xba, 0xc5, 0x54, 0x27, 0x56, 0x50 ), + AUTH ( 0xf4, 0xeb, 0x19, 0x32, 0x41, 0x22, 0x6d, 0xb0, 0x17, 0xb3, + 0x2e, 0xc3, 0x8c, 0xa4, 0x72, 0x17 ) ); + +/* AES-GCM test case 11 */ +CIPHER_TEST ( wycheproof_aes_gcm_7f9ca8b2, &aes_gcm_algorithm, + KEY ( 0x28, 0xff, 0x3d, 0xef, 0x08, 0x17, 0x93, 0x11, 0xe2, 0x73, + 0x4c, 0x6d, 0x1c, 0x4e, 0x28, 0x71 ), + IV ( 0x32, 0xbc, 0xb9, 0xb5, 0x69, 0xe3, 0xb8, 0x52, 0xd3, 0x7c, + 0x76, 0x6a ), + ADDITIONAL ( 0xc3 ), + PLAINTEXT ( 0xdf, 0xc6, 0x1a, 0x20, 0xdf, 0x85, 0x05, 0xb5, 0x3e, + 0x3c, 0xd5, 0x9f, 0x25, 0x77, 0x0d, 0x50, 0x18, 0xad, + 0xd3, 0xd6 ), + CIPHERTEXT ( 0xf5, 0x8d, 0x45, 0x32, 0x12, 0xc2, 0xc8, 0xa4, 0x36, + 0xe9, 0x28, 0x36, 0x72, 0xf5, 0x79, 0xf1, 0x19, 0x12, + 0x29, 0x78 ), + AUTH ( 0x59, 0x01, 0x13, 0x1d, 0x07, 0x60, 0xc8, 0x71, 0x59, 0x01, + 0xd8, 0x81, 0xfd, 0xfd, 0x3b, 0xc0 ) ); + +/* AES-GCM test case 12 */ +CIPHER_TEST ( wycheproof_aes_gcm_2f81ba3b, &aes_gcm_algorithm, + KEY ( 0xe6, 0x3a, 0x43, 0x21, 0x6c, 0x08, 0x86, 0x72, 0x10, 0xe2, + 0x48, 0x85, 0x9e, 0xb5, 0xe9, 0x9c ), + IV ( 0x9c, 0x3a, 0x42, 0x63, 0xd9, 0x83, 0x45, 0x66, 0x58, 0xaa, + 0xd4, 0xb1 ), + ADDITIONAL ( 0x83, 0x4a, 0xfd, 0xc5, 0xc7, 0x37, 0x18, 0x6b ), + PLAINTEXT ( 0xb1, 0x4d, 0xa5, 0x6b, 0x04, 0x62, 0xdc, 0x05, 0xb8, + 0x71, 0xfc, 0x81, 0x52, 0x73, 0xff, 0x48, 0x10, 0xf9, + 0x2f, 0x4b ), + CIPHERTEXT ( 0xbf, 0x86, 0x46, 0x16, 0xc2, 0x34, 0x75, 0x09, 0xca, + 0x9b, 0x10, 0x44, 0x63, 0x79, 0xb9, 0xbd, 0xbb, 0x3b, + 0x8f, 0x64 ), + AUTH ( 0xa9, 0x7d, 0x25, 0xb4, 0x90, 0x39, 0x0b, 0x53, 0xc5, 0xdb, + 0x91, 0xf6, 0xee, 0x2a, 0x15, 0xb8 ) ); + +/* AES-GCM test case 13 */ +CIPHER_TEST ( wycheproof_aes_gcm_3324275e, &aes_gcm_algorithm, + KEY ( 0x38, 0x44, 0x98, 0x90, 0x23, 0x4e, 0xb8, 0xaf, 0xab, 0x0b, + 0xbf, 0x82, 0xe2, 0x38, 0x54, 0x54 ), + IV ( 0x33, 0xe9, 0x06, 0x58, 0x41, 0x6e, 0x7c, 0x1a, 0x7c, 0x00, + 0x5f, 0x11 ), + ADDITIONAL ( 0x40, 0x20, 0x85, 0x5c, 0x66, 0xac, 0x45, 0x95, 0x05, + 0x83, 0x95, 0xf3, 0x67, 0x20, 0x1c, 0x4c ), + PLAINTEXT ( 0xf7, 0x62, 0x77, 0x6b, 0xf8, 0x31, 0x63, 0xb3, 0x23, + 0xca, 0x63, 0xa6, 0xb3, 0xad, 0xea, 0xc1, 0xe1, 0x35, + 0x72, 0x62 ), + CIPHERTEXT ( 0xa6, 0xf2, 0xef, 0x3c, 0x7e, 0xf7, 0x4a, 0x12, 0x6d, + 0xd2, 0xd5, 0xf6, 0x67, 0x39, 0x64, 0xe2, 0x7d, 0x5b, + 0x34, 0xb6 ), + AUTH ( 0xb8, 0xbb, 0xdc, 0x4f, 0x50, 0x14, 0xbc, 0x75, 0x2c, 0x8b, + 0x4e, 0x9b, 0x87, 0xf6, 0x50, 0xa3 ) ); + +/* AES-GCM test case 14 */ +CIPHER_TEST ( wycheproof_aes_gcm_d0b2b893, &aes_gcm_algorithm, + KEY ( 0x6a, 0x68, 0x67, 0x1d, 0xfe, 0x32, 0x3d, 0x41, 0x98, 0x94, + 0x38, 0x1f, 0x85, 0xeb, 0x63, 0xfd ), + IV ( 0x9f, 0x0d, 0x85, 0xb6, 0x05, 0x71, 0x1f, 0x34, 0xcd, 0x2a, + 0x35, 0xba ), + ADDITIONAL ( 0x76, 0xeb, 0x5f, 0x14, 0x72, 0x50, 0xfa, 0x3c, 0x12, + 0xbf, 0xf0, 0xa6, 0xe3, 0x93, 0x4a, 0x0b, 0x16, 0x86, + 0x0c, 0xf1, 0x16, 0x46, 0x77, 0x3b ), + PLAINTEXT ( 0x0f, 0xc6, 0x78, 0x99, 0xc3, 0xf1, 0xbb, 0xe1, 0x96, + 0xd9, 0x0f, 0x1e, 0xca, 0x37, 0x97, 0x38, 0x92, 0x30, + 0xaa, 0x37 ), + CIPHERTEXT ( 0xbd, 0x64, 0x80, 0x2c, 0xfe, 0xba, 0xeb, 0x48, 0x7d, + 0x3a, 0x8f, 0x76, 0xce, 0x94, 0x3a, 0x37, 0xb3, 0x47, + 0x2d, 0xd5 ), + AUTH ( 0xfc, 0xe9, 0xa5, 0xb5, 0x30, 0xc7, 0xd7, 0xaf, 0x71, 0x8b, + 0xe1, 0xec, 0x0a, 0xe9, 0xed, 0x4d ) ); + +/* AES-GCM test case 15 */ +CIPHER_TEST ( wycheproof_aes_gcm_d06a8069, &aes_gcm_algorithm, + KEY ( 0xbb, 0x57, 0x1c, 0x16, 0x01, 0x32, 0xb0, 0xc8, 0xd5, 0xd1, + 0x90, 0xd0, 0xbc, 0x35, 0x6d, 0xdc ), + IV ( 0x25, 0x96, 0xc4, 0x40, 0xcf, 0x02, 0x32, 0x95, 0x0e, 0xc6, + 0x6b, 0xc4 ), + ADDITIONAL(), + PLAINTEXT ( 0x05, 0x3b, 0xe1, 0xb6, 0x19, 0x0a, 0x71, 0x7f, 0xc7, + 0x4c, 0x87, 0x9e, 0x6f, 0xd6, 0x2d, 0xc4, 0x46, 0x28, + 0x49, 0x55, 0x07, 0xe5, 0x0d, 0x66, 0x22, 0x71, 0xde, + 0xe7, 0x95, 0xa4, 0xad, 0x26, 0xe0, 0xc4, 0xf8, 0x6c, + 0xb6, 0xb2, 0x0a, 0xc6, 0xbd, 0x9d, 0x68, 0x2d, 0x2d, + 0x8a, 0x05, 0xc9, 0xda, 0xd8, 0x75, 0xa6, 0x91, 0x1b, + 0x49, 0xea, 0x0a, 0xf4, 0xf1, 0x7c, 0x97, 0xa5, 0xf2 ), + CIPHERTEXT ( 0xb1, 0xcf, 0xad, 0x14, 0x2a, 0x46, 0x2f, 0x36, 0x56, + 0xe0, 0x92, 0x16, 0x27, 0xfd, 0x41, 0xd4, 0xf1, 0xfa, + 0x8e, 0x2f, 0x8b, 0xd9, 0x4b, 0xb5, 0x1f, 0xdc, 0xf0, + 0x6f, 0x60, 0x62, 0x96, 0xf7, 0xd2, 0x88, 0x53, 0x37, + 0xbe, 0xd7, 0xa4, 0xca, 0x6d, 0xdb, 0x4a, 0x9f, 0xc7, + 0xfd, 0xb2, 0x47, 0x6b, 0x5f, 0x7f, 0xa5, 0x22, 0x0e, + 0x1d, 0x67, 0x52, 0xa5, 0xe7, 0xc3, 0x1c, 0x91, 0x6c ), + AUTH ( 0xa2, 0x31, 0xb6, 0x17, 0x35, 0x2f, 0xfd, 0xb6, 0x3d, 0x32, + 0xd6, 0x9d, 0x99, 0xe7, 0xd6, 0x29 ) ); + +/* AES-GCM test case 16 */ +CIPHER_TEST ( wycheproof_aes_gcm_f9082b41, &aes_gcm_algorithm, + KEY ( 0xe1, 0x22, 0x60, 0xfc, 0xd3, 0x55, 0xa5, 0x1a, 0x0d, 0x01, + 0xbb, 0x1f, 0x6f, 0xa5, 0x38, 0xc2 ), + IV ( 0x5d, 0xfc, 0x37, 0x36, 0x6f, 0x56, 0x88, 0x27, 0x51, 0x47, + 0xd3, 0xf9 ), + ADDITIONAL(), + PLAINTEXT ( 0xd9, 0x02, 0xde, 0xea, 0xb1, 0x75, 0xc0, 0x08, 0x32, + 0x9a, 0x33, 0xbf, 0xac, 0xcd, 0x5c, 0x0e, 0xb3, 0xa6, + 0xa1, 0x52, 0xa1, 0x51, 0x0e, 0x7d, 0xb0, 0x4f, 0xa0, + 0xaf, 0xf7, 0xce, 0x42, 0x88, 0x53, 0x0d, 0xb6, 0xa8, + 0x0f, 0xa7, 0xfe, 0xa5, 0x82, 0xaa, 0x7d, 0x46, 0xd7, + 0xd5, 0x6e, 0x70, 0x8d, 0x2b, 0xb0, 0xc5, 0xed, 0xd3, + 0xd2, 0x66, 0x48, 0xd3, 0x36, 0xc3, 0x62, 0x0e, 0xa5, + 0x5e ), + CIPHERTEXT ( 0xd3, 0x3b, 0xf6, 0x72, 0x2f, 0xc2, 0x93, 0x84, 0xfa, + 0xd7, 0x5f, 0x99, 0x02, 0x48, 0xb9, 0x52, 0x8e, 0x09, + 0x59, 0xaa, 0x67, 0xec, 0x66, 0x86, 0x9d, 0xc3, 0x99, + 0x6c, 0x67, 0xa2, 0xd5, 0x59, 0xe7, 0xd7, 0x7c, 0xe5, + 0x95, 0x5f, 0x8c, 0xad, 0x2a, 0x4d, 0xf5, 0xfd, 0xc3, + 0xac, 0xcc, 0xaf, 0xa7, 0xbc, 0x0d, 0xef, 0x53, 0xd8, + 0x48, 0x11, 0x12, 0x56, 0x90, 0x3e, 0x5a, 0xdd, 0x04, + 0x20 ), + AUTH ( 0x8b, 0xc8, 0x33, 0xde, 0x51, 0x08, 0x63, 0xb4, 0xb4, 0x32, + 0xc3, 0xcb, 0xf4, 0x5a, 0xa7, 0xcc ) ); + +/* AES-GCM test case 17 */ +CIPHER_TEST ( wycheproof_aes_gcm_8224427d, &aes_gcm_algorithm, + KEY ( 0x97, 0xec, 0x85, 0xa6, 0x9a, 0x05, 0x13, 0x1c, 0xd4, 0xff, + 0x64, 0x39, 0x72, 0xf6, 0xd8, 0xf9 ), + IV ( 0x91, 0x89, 0xe0, 0xee, 0xdc, 0xc4, 0x13, 0xa0, 0xba, 0x1e, + 0x63, 0xd2 ), + ADDITIONAL(), + PLAINTEXT ( 0x10, 0xac, 0xef, 0xa6, 0xf3, 0x95, 0x9f, 0xae, 0xcb, + 0x5c, 0xfd, 0xae, 0xe8, 0xaa, 0xf0, 0x9d, 0x43, 0x81, + 0xb2, 0xb1, 0x47, 0xe0, 0xb1, 0x34, 0x50, 0xc2, 0x6e, + 0xe0, 0x7f, 0x29, 0xed, 0xaa, 0x9a, 0x1f, 0x1a, 0xf4, + 0xe2, 0xd1, 0x11, 0xde, 0xa7, 0xff, 0x68, 0x1a, 0x19, + 0xfc, 0x3a, 0x4f, 0xd6, 0x6d, 0xf6, 0xa1, 0x79, 0x85, + 0xb0, 0x65, 0x43, 0xa3, 0xb6, 0xc0, 0xe4, 0xe5, 0x1a, + 0x54, 0xb7 ), + CIPHERTEXT ( 0xee, 0xfd, 0xf8, 0x99, 0x97, 0x24, 0x4e, 0x06, 0x5f, + 0xf1, 0x9a, 0xc2, 0x37, 0x4d, 0xc9, 0x2e, 0xe7, 0x68, + 0x99, 0xdd, 0xcb, 0xe7, 0xc8, 0x34, 0xdc, 0xc6, 0x57, + 0x24, 0x2f, 0xc0, 0xf6, 0xdd, 0x38, 0x27, 0x23, 0x73, + 0xba, 0x9b, 0x54, 0x93, 0x16, 0xa3, 0x6f, 0x15, 0x22, + 0xe1, 0xca, 0xb2, 0x46, 0x15, 0x78, 0x75, 0x89, 0x8c, + 0x96, 0x6e, 0xec, 0x56, 0x3d, 0x57, 0xec, 0xa5, 0xc7, + 0xd3, 0x2d ), + AUTH ( 0x23, 0xaa, 0xa2, 0xc6, 0xb6, 0x80, 0xfc, 0xaa, 0xeb, 0x2c, + 0x7a, 0x55, 0x72, 0x6d, 0x4b, 0xc0 ) ); + +/* AES-GCM test case 18 */ +CIPHER_TEST ( wycheproof_aes_gcm_110d48ee, &aes_gcm_algorithm, + KEY ( 0x65, 0xd3, 0x8f, 0x0b, 0x26, 0x8f, 0x18, 0x0d, 0x6b, 0xa5, + 0x48, 0xd5, 0x09, 0x11, 0x1d, 0xde ), + IV ( 0xe1, 0x4d, 0xfc, 0x27, 0x39, 0x4a, 0xc8, 0x46, 0xc2, 0x37, + 0x3e, 0xa7 ), + ADDITIONAL(), + PLAINTEXT ( 0x1f, 0xa7, 0x6d, 0x79, 0x95, 0xdc, 0x99, 0x6a, 0x5f, + 0x5d, 0xab, 0xaa, 0x4b, 0xe4, 0x01, 0xbe, 0x14, 0xf4, + 0xd4, 0x70, 0x6a, 0x21, 0x3a, 0x4d, 0xd7, 0x25, 0xdf, + 0x38, 0x6e, 0xc1, 0x47, 0xa6, 0xbe, 0x07, 0x49, 0x47, + 0xc7, 0x33, 0x09, 0x4f, 0x47, 0xa7, 0x22, 0x25, 0x52, + 0x37, 0x67, 0x40, 0xaa, 0x83, 0x48, 0xa0, 0xae, 0x1c, + 0x7f, 0x2d, 0x97, 0x2a, 0x0a, 0xd6, 0x64, 0xf8, 0xb8, + 0xec, 0x81, 0xdf, 0xc9, 0xaf, 0x07, 0x8b, 0x61, 0xda, + 0xea, 0x5d, 0xde, 0x87, 0x4f, 0xd7, 0x37, 0x75, 0xb4, + 0xcd, 0x65, 0xac, 0xf0, 0x69, 0xad, 0xa0, 0xb2, 0xb9, + 0xbf, 0xbb, 0x4a, 0x98, 0x17, 0xba, 0x41, 0xd4, 0xdc, + 0xaf, 0xf7, 0x65, 0x3d, 0xf5, 0xc8, 0xcd, 0x9c, 0xe7, + 0xf5, 0x9e, 0xec, 0x92, 0xae, 0x9e, 0x61, 0x31, 0x4e, + 0x03, 0xef, 0x48, 0x83, 0x98, 0x10, 0xea, 0x82, 0x55, + 0x20 ), + CIPHERTEXT ( 0x40, 0xdc, 0x9b, 0x13, 0x9e, 0x88, 0x8f, 0x18, 0x11, + 0x39, 0x11, 0x34, 0xb1, 0x5e, 0x91, 0x48, 0x26, 0x41, + 0x4a, 0x99, 0xdb, 0x51, 0x2a, 0x06, 0x32, 0xdc, 0x4c, + 0x56, 0xd7, 0x0f, 0x7b, 0x79, 0x91, 0xe9, 0x94, 0x5a, + 0x20, 0x25, 0x89, 0x0e, 0x95, 0x16, 0x99, 0xcf, 0x6b, + 0x2c, 0xce, 0xe0, 0x93, 0xc9, 0xa6, 0xa7, 0x52, 0xb9, + 0x8f, 0xf6, 0x96, 0x24, 0x01, 0x26, 0x75, 0x9f, 0x48, + 0x02, 0x99, 0xc1, 0xdd, 0x82, 0xaa, 0x2c, 0x4f, 0x46, + 0x2a, 0x4a, 0x8a, 0xd1, 0xad, 0x0c, 0x7a, 0x75, 0x5f, + 0x07, 0x90, 0x8c, 0x9c, 0x0d, 0x33, 0x6d, 0x57, 0xdb, + 0xde, 0xbc, 0x94, 0x0b, 0xba, 0xe2, 0x8b, 0xa0, 0x33, + 0x6d, 0xcc, 0xaf, 0x6b, 0xfd, 0xc9, 0x36, 0x23, 0x68, + 0x6f, 0x94, 0x87, 0xef, 0x08, 0x84, 0xd1, 0x00, 0xb6, + 0xb9, 0x89, 0x49, 0xaf, 0xbd, 0x42, 0x17, 0xdc, 0x46, + 0x40 ), + AUTH ( 0x42, 0x18, 0xd6, 0xac, 0x98, 0xc0, 0x44, 0x4b, 0xc6, 0x4e, + 0xcb, 0xe1, 0xd7, 0x63, 0x13, 0x6a ) ); + +/* AES-GCM test case 19 */ +CIPHER_TEST ( wycheproof_aes_gcm_417222f0, &aes_gcm_algorithm, + KEY ( 0x3c, 0x55, 0xf8, 0x8e, 0x9f, 0xaa, 0x0d, 0x68, 0xab, 0x50, + 0xd0, 0x2b, 0x47, 0x16, 0x12, 0x76 ), + IV ( 0xd7, 0x67, 0xc4, 0x8d, 0x20, 0x37, 0xb4, 0xbd, 0x2c, 0x23, + 0x1b, 0xbd ), + ADDITIONAL(), + PLAINTEXT ( 0x5d, 0x6a, 0xdd, 0x48, 0xe7, 0xa5, 0x70, 0x4e, 0x54, + 0xf9, 0xc2, 0x82, 0x9a, 0x9b, 0x42, 0x83, 0xdc, 0xe0, + 0xd3, 0xa6, 0x5b, 0x13, 0x3e, 0xba, 0x37, 0x93, 0xc4, + 0xfb, 0xfa, 0x1d, 0x8e, 0x3a, 0x25, 0x39, 0xd0, 0xd4, + 0xf3, 0xde, 0x38, 0x15, 0x98, 0xce, 0x5b, 0x23, 0x60, + 0x17, 0x3f, 0xbd, 0x14, 0x94, 0x76, 0xc3, 0x16, 0x92, + 0xc5, 0xd6, 0xe8, 0x72, 0xfc, 0xe4, 0x02, 0x19, 0x37, + 0x89, 0x49, 0xc2, 0xe7, 0x0b, 0x5f, 0x1b, 0x9f, 0x0a, + 0x1d, 0x5f, 0x38, 0x35, 0x2a, 0xd8, 0x14, 0xb2, 0xa0, + 0x35, 0xbb, 0x3f, 0x3f, 0x26, 0x42, 0x5d, 0x83, 0x1a, + 0x2f, 0x7a, 0x5e, 0x65, 0xc5, 0xdf, 0xcd, 0x91, 0xa3, + 0x15, 0xc2, 0xb2, 0x4f, 0x53, 0xa6, 0x62, 0x60, 0x5e, + 0xa4, 0x08, 0x57, 0xdd, 0x98, 0x0e, 0x9b, 0xe5, 0xcd, + 0xad, 0x00, 0x0c, 0x56, 0x9f, 0x2d, 0x20, 0x4d, 0x4b, + 0xd3, 0xb0 ), + CIPHERTEXT ( 0x17, 0xd7, 0x2d, 0x90, 0xbd, 0x23, 0xe0, 0x76, 0xd8, + 0x36, 0x4a, 0x87, 0xec, 0xb9, 0xac, 0x58, 0xac, 0xc5, + 0xde, 0x46, 0x29, 0xbf, 0xd5, 0x90, 0x40, 0x9b, 0x8b, + 0xf1, 0xfc, 0xd3, 0xa2, 0xf6, 0x02, 0x73, 0x1b, 0x46, + 0x14, 0xce, 0xc1, 0x5e, 0x77, 0x3e, 0xa6, 0x5a, 0x65, + 0xe7, 0x21, 0x09, 0x94, 0x25, 0x6b, 0xf5, 0x45, 0x0a, + 0x25, 0xac, 0xb5, 0x27, 0x26, 0x9c, 0x06, 0x5f, 0x2e, + 0x2f, 0x22, 0x79, 0xd1, 0xfe, 0x8b, 0x3e, 0xda, 0x98, + 0xdc, 0xf8, 0x7b, 0x34, 0x8f, 0x15, 0x28, 0x37, 0x7b, + 0xbd, 0xd2, 0x58, 0x35, 0x5d, 0x46, 0xe0, 0x35, 0x33, + 0x04, 0x83, 0xd8, 0x09, 0x7e, 0x80, 0xc7, 0xde, 0x9b, + 0xbb, 0x60, 0x6d, 0xdf, 0x72, 0x3f, 0x29, 0x09, 0x21, + 0x7f, 0xfd, 0xd1, 0x8e, 0x8b, 0xdb, 0xd7, 0xb0, 0x80, + 0x62, 0xf1, 0xdc, 0xba, 0x96, 0x0e, 0x5c, 0x0d, 0x29, + 0x0f, 0x5f ), + AUTH ( 0x09, 0x0b, 0x8c, 0x2e, 0xc9, 0x8e, 0x41, 0x16, 0x18, 0x6d, + 0x0e, 0x5f, 0xbe, 0xfe, 0xb9, 0xc2 ) ); + +/* AES-GCM test case 20 */ +CIPHER_TEST ( wycheproof_aes_gcm_f01459e0, &aes_gcm_algorithm, + KEY ( 0x62, 0xb3, 0x88, 0x18, 0x32, 0xd4, 0x28, 0xb6, 0xf9, 0x00, + 0xca, 0xcf, 0xa0, 0xfc, 0x5c, 0xd8 ), + IV ( 0xf4, 0xcb, 0x98, 0xcc, 0x99, 0xe7, 0xbc, 0x42, 0x4a, 0x98, + 0x38, 0x4e ), + ADDITIONAL(), + PLAINTEXT ( 0x0b, 0x91, 0xdd, 0x36, 0xa6, 0xfa, 0x96, 0x7a, 0x25, + 0x7b, 0x26, 0x7d, 0x12, 0xcb, 0xc2, 0x0b, 0x56, 0xed, + 0x61, 0x5b, 0x20, 0x5d, 0x04, 0x4a, 0x04, 0xb4, 0xae, + 0x8a, 0xaa, 0x36, 0x5b, 0xd2, 0x9a, 0x3b, 0x8f, 0x47, + 0xa0, 0x82, 0x8e, 0xf6, 0x33, 0x24, 0xd1, 0xff, 0x92, + 0x4c, 0x68, 0x09, 0x0a, 0xba, 0xaa, 0xd7, 0x8d, 0xf6, + 0x02, 0xed, 0xee, 0x06, 0x21, 0xb8, 0x23, 0xf9, 0x4c, + 0x35, 0xad, 0xa7, 0xb6, 0x2d, 0x81, 0xf2, 0x1d, 0xd9, + 0x94, 0x5d, 0x1a, 0xbb, 0x4e, 0xf8, 0x82, 0xcf, 0xab, + 0x12, 0xc2, 0xe4, 0xce, 0xc7, 0x05, 0xdf, 0x3d, 0x66, + 0x91, 0x83, 0xfe, 0x68, 0x17, 0x53, 0x50, 0x3a, 0x99, + 0xa8, 0x71, 0x63, 0x79, 0x53, 0x53, 0x7e, 0xf4, 0x79, + 0xb1, 0xf6, 0x2d, 0xe7, 0x81, 0x9d, 0xbb, 0x5c, 0x95, + 0x0d, 0xe7, 0x72, 0x20, 0x90, 0x94, 0x2d, 0x38, 0x12, + 0x9a, 0xef, 0xa7 ), + CIPHERTEXT ( 0x00, 0x57, 0x46, 0x15, 0x88, 0x3e, 0x22, 0x26, 0x57, + 0xbd, 0xf3, 0x4e, 0x93, 0x27, 0x88, 0x8f, 0x5d, 0x53, + 0x2d, 0x08, 0x65, 0x81, 0x83, 0x4c, 0x62, 0xad, 0xf5, + 0x4c, 0x7f, 0xee, 0x46, 0x92, 0x7c, 0xa2, 0x7c, 0xba, + 0x19, 0x3d, 0x86, 0xc6, 0x14, 0x0b, 0x36, 0x10, 0xa2, + 0xcd, 0x16, 0xba, 0x29, 0x58, 0x14, 0xb5, 0xb7, 0xd6, + 0xa1, 0xc8, 0xd3, 0xf0, 0x39, 0xe0, 0xe8, 0xf8, 0xd7, + 0x94, 0x2b, 0x06, 0x16, 0xa9, 0xb9, 0xf0, 0x01, 0x28, + 0x84, 0x31, 0x1b, 0x0c, 0x37, 0x0f, 0x9d, 0xd6, 0xb9, + 0xa3, 0xd8, 0xb6, 0xff, 0x36, 0x17, 0x76, 0x83, 0xc0, + 0xdd, 0x85, 0x88, 0x50, 0xdd, 0x29, 0x99, 0x3b, 0x3e, + 0xec, 0x89, 0xa2, 0xab, 0x80, 0x68, 0x03, 0x8e, 0x2c, + 0x86, 0xa2, 0xe7, 0x1b, 0x5c, 0xac, 0xdb, 0x38, 0xad, + 0x69, 0xac, 0x05, 0x80, 0xe2, 0x9a, 0x6f, 0x78, 0x13, + 0xc1, 0x72, 0x58 ), + AUTH ( 0x88, 0xb9, 0x9f, 0x76, 0x83, 0x64, 0xff, 0x9e, 0x95, 0xa9, + 0x4c, 0xcb, 0xbc, 0x1b, 0x16, 0x6e ) ); + +/* AES-GCM test case 21 */ +CIPHER_TEST ( wycheproof_aes_gcm_bc589a7e, &aes_gcm_algorithm, + KEY ( 0x8a, 0xea, 0xa2, 0x59, 0x1a, 0x45, 0x2e, 0x62, 0x6b, 0x9a, + 0x64, 0x68, 0xb6, 0x23, 0xbd, 0xfc ), + IV ( 0xb9, 0x0f, 0x44, 0x6f, 0x68, 0xae, 0xa5, 0x88, 0xd8, 0x43, + 0xd0, 0x1a ), + ADDITIONAL(), + PLAINTEXT ( 0xf0, 0x72, 0x1c, 0x3b, 0x68, 0xd9, 0x05, 0x09, 0x2c, + 0xad, 0xa6, 0xd5, 0x68, 0xdf, 0x3a, 0x2d, 0xa3, 0x95, + 0x73, 0xc7, 0xbb, 0x0e, 0x9a, 0x4e, 0xd1, 0x59, 0xa2, + 0x63, 0x42, 0x37, 0xf9, 0xe7, 0x88, 0x48, 0x8c, 0x06, + 0xfe, 0x8a, 0x7e, 0x1e, 0x01, 0xd1, 0xa1, 0xc9, 0x85, + 0x54, 0x3e, 0xcf, 0x90, 0xf3, 0xd3, 0x2e, 0x57, 0xd3, + 0x3c, 0x3d, 0xf6, 0xc1, 0x65, 0xb7, 0xed, 0xc6, 0xfb, + 0xcf, 0x8b, 0xf2, 0xd0, 0x43, 0xd1, 0xb7, 0xc0, 0x06, + 0x03, 0x09, 0xa2, 0x95, 0x65, 0xa0, 0x04, 0xea, 0x32, + 0x14, 0xd4, 0xe4, 0xf7, 0xde, 0xde, 0xac, 0x2d, 0x74, + 0x57, 0x6c, 0x01, 0x9b, 0x5f, 0xa0, 0x00, 0xd0, 0x25, + 0x91, 0x7a, 0xf6, 0xf8, 0x63, 0x10, 0x94, 0x21, 0x02, + 0xa3, 0x4d, 0x92, 0x78, 0x19, 0x72, 0xd4, 0xf1, 0xf5, + 0x7b, 0xbd, 0xd6, 0xf9, 0xb0, 0x8c, 0xc9, 0x79, 0xa3, + 0x58, 0xaa, 0xcf, 0x6c, 0xb6, 0x23, 0x34, 0xbf, 0xc9, + 0x16, 0xc2, 0x49, 0xf1, 0x8b, 0xce, 0xe6, 0x44, 0xa8, + 0x90, 0x7e, 0xf5, 0x76, 0xb4, 0x14, 0x37, 0x09, 0x8b, + 0xdf, 0x00, 0x69, 0x76, 0x7f, 0xb5, 0xed, 0x1c, 0x0f, + 0x13, 0x85, 0xe5, 0x89, 0x5e, 0x4a, 0x5d, 0x70, 0xf5, + 0x94, 0x1a, 0x93, 0x01, 0x43, 0x33, 0x43, 0x6a, 0x7a, + 0xf4, 0x65, 0xec, 0x10, 0x38, 0xfd, 0xfa, 0x00, 0x64, + 0x10, 0xa0, 0x87, 0x12, 0x25, 0xd6, 0x48, 0x48, 0xe6, + 0xc5, 0x9a, 0xc2, 0x3f, 0x17, 0x6d, 0xf6, 0x63, 0xee, + 0x21, 0x71, 0xc9, 0xea, 0xec, 0x04, 0x77, 0xf9, 0xeb, + 0xd2, 0x80, 0x88, 0x0d, 0x9f, 0x29, 0x67, 0xa2, 0xe7, + 0x91, 0xcc, 0x99, 0x8f, 0x6b, 0x23, 0x51, 0x8c, 0xa9, + 0x7b, 0xbc, 0x64, 0x05, 0xd6, 0xce, 0xd3, 0x37, 0x3e, + 0xbf, 0x3d, 0x20, 0x8c, 0x2a, 0x90, 0x92, 0x74, 0x46, + 0x0a, 0x61, 0x4a ), + CIPHERTEXT ( 0x7b, 0xb3, 0x63, 0x13, 0x56, 0x9f, 0xf8, 0xb5, 0xc5, + 0x8e, 0x41, 0xb1, 0x7a, 0x78, 0xfa, 0x5d, 0x78, 0x00, + 0x73, 0xbe, 0xe2, 0x0b, 0x55, 0xf0, 0x04, 0x53, 0x22, + 0x88, 0xe7, 0xf0, 0xa9, 0x47, 0x50, 0x76, 0x36, 0x4d, + 0x89, 0x22, 0xd3, 0x89, 0xec, 0xd1, 0x89, 0xf5, 0x97, + 0xa8, 0xa6, 0x77, 0xcb, 0x24, 0x84, 0x51, 0x3e, 0xd7, + 0xaf, 0xe2, 0xd0, 0x69, 0x17, 0x17, 0xcd, 0x0a, 0xc0, + 0xe2, 0x7b, 0xf7, 0xe2, 0x25, 0x7d, 0xd7, 0xe4, 0xff, + 0xc0, 0xbb, 0xf5, 0x9e, 0x92, 0xd2, 0x58, 0xe1, 0x11, + 0x6f, 0xac, 0x9b, 0xfc, 0x84, 0xa2, 0xdf, 0x72, 0x8b, + 0xdd, 0x7a, 0xb2, 0x21, 0x75, 0x4d, 0xd3, 0x41, 0xf7, + 0x22, 0x9e, 0x03, 0x0d, 0xce, 0x06, 0x47, 0x4d, 0x00, + 0xf9, 0x9a, 0x5e, 0x45, 0x79, 0x43, 0xbd, 0x9e, 0x8f, + 0x34, 0x5b, 0xcb, 0xb5, 0x40, 0x76, 0x90, 0xd0, 0x72, + 0xdf, 0xb0, 0x11, 0x3b, 0x64, 0xbc, 0x0e, 0x65, 0x8e, + 0xeb, 0x72, 0x26, 0x40, 0x9a, 0x58, 0x98, 0xdd, 0x27, + 0xd9, 0x95, 0xa0, 0xbe, 0x02, 0x1f, 0x35, 0x10, 0x91, + 0xf9, 0xb9, 0x07, 0xae, 0x3a, 0x96, 0x25, 0xf2, 0x40, + 0xde, 0xe2, 0xbf, 0x4b, 0xb1, 0x5e, 0xb4, 0xf3, 0x0f, + 0x4a, 0xbf, 0x1f, 0xf2, 0x5c, 0xa5, 0x53, 0x6d, 0xef, + 0x96, 0x9d, 0x25, 0x88, 0x18, 0x8f, 0xec, 0xac, 0xfc, + 0x7d, 0xc7, 0x5f, 0x5c, 0x67, 0x6c, 0xa7, 0x85, 0x1f, + 0x9e, 0x80, 0x5f, 0x49, 0x83, 0x72, 0xc6, 0xb9, 0x8f, + 0x5c, 0x7d, 0x12, 0x40, 0x37, 0x23, 0x61, 0x9f, 0x80, + 0xce, 0x5b, 0xad, 0xfe, 0x58, 0x44, 0x64, 0x3d, 0x56, + 0x31, 0xd4, 0x99, 0x8e, 0xe0, 0x42, 0x6a, 0x2b, 0x29, + 0x15, 0x9c, 0xae, 0x25, 0x90, 0xdc, 0x81, 0x64, 0x6c, + 0x78, 0xbe, 0x5c, 0x9e, 0x8f, 0xfe, 0x05, 0x6a, 0xa0, + 0xd3, 0x55, 0x2e ), + AUTH ( 0xfc, 0x62, 0x29, 0x5c, 0x70, 0xd1, 0x40, 0xdb, 0xc3, 0x54, + 0xfd, 0xbc, 0x80, 0x03, 0xeb, 0x41 ) ); + +/* AES-GCM test case 22 */ +CIPHER_TEST ( wycheproof_aes_gcm_d63ed865, &aes_gcm_algorithm, + KEY ( 0xe8, 0x8d, 0x95, 0xea, 0xbe, 0x88, 0xfc, 0xf1, 0x58, 0xfa, + 0xe8, 0x58, 0xaf, 0x95, 0x12, 0x21 ), + IV ( 0xa6, 0x58, 0x34, 0xa9, 0xd2, 0x31, 0xb3, 0x47, 0x09, 0x38, + 0x3e, 0x9a ), + ADDITIONAL(), + PLAINTEXT ( 0x2d, 0xec, 0xac, 0xcc, 0x8b, 0x42, 0x4f, 0xa4, 0x96, + 0x38, 0x90, 0xec, 0xe1, 0x5b, 0x3f, 0xc2, 0x81, 0xb6, + 0x21, 0x57, 0x80, 0xff, 0x6b, 0xae, 0xe5, 0x7e, 0xdc, + 0xd2, 0x5a, 0xfe, 0x26, 0x0f, 0xf8, 0x0e, 0xd4, 0xf2, + 0x5c, 0xc0, 0x4d, 0x28, 0x02, 0xa1, 0xe9, 0x0a, 0x2e, + 0x6e, 0x96, 0xd1, 0xee, 0x73, 0xa4, 0xa5, 0x3d, 0xcf, + 0x60, 0x02, 0x5d, 0x48, 0x40, 0x54, 0xd1, 0x46, 0xf2, + 0x75, 0xab, 0x34, 0xc3, 0x3b, 0x10, 0x20, 0x01, 0xa0, + 0x7d, 0x80, 0x4c, 0xc9, 0x4a, 0x40, 0xfd, 0x78, 0xc1, + 0x67, 0x80, 0xd1, 0xb6, 0x48, 0x48, 0x7f, 0xac, 0x03, + 0x53, 0x86, 0xe5, 0xd2, 0x5c, 0x2b, 0x9e, 0xdb, 0xf7, + 0xa5, 0x2d, 0x10, 0x2d, 0x19, 0x43, 0x95, 0x8c, 0x00, + 0x9e, 0xb6, 0xd8, 0x8e, 0x00, 0xa3, 0x22, 0x7c, 0x4c, + 0x78, 0x8e, 0x44, 0x50, 0x03, 0xfa, 0xbb, 0x4d, 0xbe, + 0xfc, 0xcd, 0x3f, 0xe1, 0x71, 0x6d, 0x91, 0x64, 0x46, + 0xfe, 0xe2, 0x11, 0x16, 0x15, 0xd5, 0x60, 0xec, 0xc5, + 0x9d, 0x7b, 0xd2, 0x88, 0x26, 0x8a, 0xb3, 0x21, 0xe7, + 0x00, 0x25, 0x45, 0x88, 0x71, 0x83, 0xfe, 0x02, 0x3f, + 0xde, 0xc2, 0xa6, 0xd3, 0xb7, 0x3b, 0x94, 0xd1, 0x54, + 0x8c, 0xee, 0x19, 0x63, 0x8d, 0x31, 0xd2, 0xc5, 0xa3, + 0x2b, 0x15, 0xd2, 0xaa, 0xe3, 0xf4, 0x29, 0x50, 0xa7, + 0x87, 0x11, 0x5e, 0x20, 0x0b, 0x00, 0x02, 0x2d, 0x49, + 0x29, 0x10, 0x5d, 0xa0, 0xb4, 0xd1, 0x0c, 0xcb, 0x0b, + 0x38, 0x86, 0xb3, 0x16, 0x9b, 0x32, 0xac, 0x5d, 0xf7, + 0xa6, 0x37, 0xc2, 0x33, 0x62, 0xe2, 0xd4, 0xed, 0x9c, + 0x13, 0x7f, 0x35, 0xbb, 0xd5, 0x78, 0xc2, 0xcd, 0xa0, + 0x37, 0x7e, 0x0f, 0x1e, 0x64, 0xf7, 0xd3, 0x1e, 0x9e, + 0xf4, 0xd7, 0x60, 0x3e, 0xa1, 0x36, 0x35, 0x23, 0x75, + 0x83, 0x85, 0xc7, 0x61 ), + CIPHERTEXT ( 0x9b, 0x38, 0x33, 0xc3, 0x56, 0xf8, 0x3d, 0x19, 0xf5, + 0x9a, 0xc4, 0x77, 0x0c, 0x95, 0x86, 0xaa, 0xd4, 0x57, + 0x81, 0x0f, 0x9d, 0xc5, 0x51, 0x12, 0xcc, 0x6b, 0x87, + 0xe9, 0x4d, 0x8d, 0xc7, 0x11, 0x84, 0xb2, 0x27, 0xa1, + 0x45, 0x00, 0xc0, 0xa8, 0x61, 0x9d, 0x54, 0x44, 0x35, + 0xdb, 0x4c, 0x00, 0x14, 0x67, 0xef, 0x2a, 0xcb, 0xa9, + 0x50, 0x07, 0x29, 0x9d, 0x71, 0x7f, 0xad, 0xc0, 0xc0, + 0x71, 0x7c, 0x4c, 0x8e, 0x74, 0x8d, 0x03, 0xff, 0xe2, + 0xcf, 0x2f, 0xd0, 0x6f, 0x00, 0x09, 0xb0, 0xe6, 0x59, + 0x0f, 0x95, 0x6c, 0x21, 0x2a, 0x2c, 0x92, 0x6d, 0x56, + 0x79, 0xbd, 0xbb, 0x79, 0xd8, 0x76, 0x36, 0xae, 0x9f, + 0xae, 0xfa, 0x5c, 0x83, 0x30, 0xc5, 0x70, 0xe8, 0x4b, + 0x94, 0x62, 0x6f, 0x87, 0xd6, 0xa5, 0x3b, 0x12, 0x15, + 0x74, 0xf7, 0x4c, 0x9e, 0x32, 0x11, 0xd9, 0x45, 0x18, + 0x11, 0xe9, 0x94, 0x0d, 0xb5, 0xe7, 0x4d, 0x12, 0x83, + 0x64, 0x32, 0x8f, 0xb8, 0xf4, 0x0f, 0x85, 0x0a, 0x25, + 0xc3, 0xe7, 0xba, 0x4f, 0xde, 0xb0, 0xef, 0x6a, 0x63, + 0x90, 0x60, 0xa1, 0x1d, 0x1c, 0x32, 0xae, 0x05, 0x31, + 0xd2, 0x51, 0x8f, 0x90, 0x59, 0x52, 0xc9, 0x81, 0x42, + 0x36, 0xb0, 0x0b, 0x93, 0x93, 0xfd, 0x31, 0xf8, 0xc0, + 0x52, 0x2f, 0x8e, 0x30, 0x72, 0xb8, 0x64, 0xa3, 0xa5, + 0xce, 0xbe, 0x1c, 0xeb, 0x15, 0x58, 0x5c, 0x90, 0x42, + 0xf3, 0xf5, 0xb9, 0x53, 0x90, 0xc6, 0x2d, 0x8c, 0x1b, + 0x51, 0x35, 0x50, 0xde, 0xfd, 0x21, 0xb4, 0x81, 0xfc, + 0xfb, 0xd9, 0xfd, 0xd6, 0xc2, 0x62, 0xff, 0x6e, 0xd4, + 0xe0, 0xa6, 0x05, 0x1b, 0xe3, 0x09, 0x78, 0x8a, 0x76, + 0x3e, 0x56, 0x71, 0x07, 0xf0, 0x39, 0xe9, 0x88, 0x75, + 0x7f, 0x96, 0xad, 0x95, 0x43, 0x67, 0x92, 0xa3, 0xbd, + 0x26, 0xf3, 0x85, 0x90 ), + AUTH ( 0x4f, 0x4c, 0x26, 0x5e, 0xdd, 0x31, 0x58, 0xc6, 0x41, 0xce, + 0x95, 0x55, 0xb5, 0x86, 0x50, 0xdb ) ); + +/* AES-GCM test case 23 */ +CIPHER_TEST ( wycheproof_aes_gcm_d08a751a, &aes_gcm_algorithm, + KEY ( 0xa2, 0x94, 0xe7, 0x0f, 0xa2, 0xac, 0x10, 0xa1, 0xfb, 0x00, + 0xc5, 0x88, 0xb8, 0x88, 0xb6, 0x73 ), + IV ( 0xdf, 0xe2, 0x0d, 0x1c, 0x43, 0x50, 0xe6, 0x23, 0x5d, 0x98, + 0x7a, 0xf1 ), + ADDITIONAL(), + PLAINTEXT ( 0x6e, 0xd1, 0xd7, 0xd6, 0x18, 0xd1, 0x58, 0x74, 0x1f, + 0x52, 0x07, 0x80, 0x06, 0xf2, 0x84, 0x94, 0xba, 0x72, + 0xa2, 0x45, 0x4f, 0x27, 0x16, 0x0a, 0xe8, 0x72, 0x27, + 0x93, 0xfc, 0xeb, 0xc5, 0x38, 0xeb, 0xc2, 0xf6, 0x7c, + 0x3a, 0xce, 0x3e, 0x0f, 0xe7, 0xc4, 0x7b, 0x9e, 0x74, + 0xe0, 0x81, 0x18, 0x2b, 0x47, 0xc9, 0x30, 0x14, 0x4e, + 0x3f, 0xc8, 0x0d, 0x0a, 0xd5, 0x06, 0x11, 0xc3, 0xaf, + 0xcf, 0xe2, 0xdb, 0xc5, 0x27, 0x9e, 0xdb, 0xbb, 0xa0, + 0x87, 0xc0, 0xe3, 0x90, 0x35, 0x5f, 0x3d, 0xaf, 0xfc, + 0xd2, 0x5a, 0xd4, 0xde, 0xa0, 0x07, 0xc2, 0x84, 0xad, + 0x92, 0xe7, 0xfc, 0xbe, 0xcb, 0x43, 0x8f, 0xb6, 0x06, + 0x23, 0xff, 0x89, 0xa5, 0x99, 0xdc, 0xa2, 0xaa, 0xc1, + 0x41, 0xb2, 0x66, 0x51, 0x38, 0x6c, 0xa5, 0x5b, 0x73, + 0x9b, 0x94, 0x90, 0x1e, 0xf6, 0xdb, 0x60, 0x9c, 0x34, + 0x4d, 0x8a, 0xcf, 0x45, 0x44, 0x56, 0x8e, 0x31, 0xbb, + 0x09, 0x36, 0x11, 0x12, 0x75, 0x4b, 0x1c, 0x0c, 0x6a, + 0x3c, 0x87, 0x5b, 0xd9, 0x45, 0x3b, 0x0e, 0xe0, 0x08, + 0x14, 0x12, 0x15, 0x13, 0x98, 0xa2, 0x94, 0xec, 0xad, + 0x75, 0xad, 0xd5, 0x21, 0x61, 0x1d, 0xb5, 0x28, 0x8b, + 0x60, 0xac, 0x3c, 0x01, 0x28, 0xf6, 0xe9, 0x43, 0x66, + 0xb6, 0x9e, 0x65, 0x9e, 0x6a, 0xa6, 0x6f, 0x05, 0x8a, + 0x3a, 0x35, 0x71, 0x06, 0x4e, 0xdb, 0xb0, 0xf0, 0x5c, + 0x11, 0xe5, 0xdd, 0xe9, 0x38, 0xfb, 0x46, 0xc3, 0x93, + 0x5d, 0xd5, 0x19, 0x3a, 0x4e, 0x56, 0x64, 0x68, 0x8f, + 0x0a, 0xe6, 0x7c, 0x29, 0xb7, 0xcc, 0x49, 0xa7, 0x96, + 0x31, 0x40, 0xf8, 0x2e, 0x31, 0x1a, 0x20, 0xc9, 0x8c, + 0xd3, 0x4f, 0xbc, 0xab, 0x7b, 0x4b, 0x51, 0x5a, 0xe8, + 0x65, 0x57, 0xe6, 0x20, 0x99, 0xe3, 0xfc, 0x37, 0xb9, + 0x59, 0x5c, 0x85, 0xa7, 0x5c ), + CIPHERTEXT ( 0x5b, 0xc6, 0xdb, 0xaf, 0xc4, 0x01, 0x10, 0x1c, 0x7a, + 0x08, 0xc8, 0x1d, 0x6c, 0x27, 0x91, 0xaa, 0x14, 0x7c, + 0xe0, 0x93, 0xaa, 0xd1, 0x72, 0xbe, 0x18, 0x37, 0x9c, + 0x74, 0x73, 0x84, 0xa5, 0x4a, 0x41, 0xa7, 0x47, 0xba, + 0x95, 0x5c, 0xad, 0xe8, 0xfd, 0xfb, 0x89, 0x67, 0xaa, + 0x80, 0x8b, 0x43, 0xfe, 0xe3, 0xd7, 0x57, 0xcc, 0x80, + 0xf1, 0x11, 0x63, 0xb8, 0x00, 0xe5, 0xe5, 0x9d, 0xf9, + 0x32, 0x75, 0x7f, 0x76, 0xc4, 0x0b, 0x3d, 0x9c, 0xba, + 0x44, 0x9a, 0xaf, 0x11, 0xe4, 0xf8, 0x0e, 0x00, 0x3b, + 0x1f, 0x38, 0x4e, 0xaf, 0xa4, 0xf7, 0x6e, 0x81, 0xb1, + 0x3c, 0x09, 0xec, 0x1a, 0xd8, 0x8e, 0x76, 0x50, 0xc7, + 0x50, 0xd4, 0x42, 0xfe, 0x46, 0xd2, 0x25, 0xa3, 0x73, + 0xe8, 0xa1, 0xb5, 0x64, 0xb4, 0x91, 0x5a, 0x5c, 0x6c, + 0x51, 0x3c, 0xfd, 0xfa, 0x22, 0xd9, 0x29, 0xd5, 0x74, + 0x1c, 0xa5, 0xeb, 0xef, 0xae, 0xdc, 0xba, 0x63, 0x6c, + 0x7c, 0x3b, 0xbe, 0xf1, 0x88, 0x63, 0xfd, 0xc1, 0x26, + 0xb4, 0xb4, 0x51, 0x61, 0x10, 0x49, 0xc3, 0x5d, 0x81, + 0x4f, 0xc2, 0xeb, 0x7e, 0x4b, 0x8f, 0x1a, 0x89, 0x95, + 0xec, 0xb4, 0xa3, 0xc8, 0x66, 0x52, 0xa0, 0x68, 0xc0, + 0xb2, 0xa3, 0xe1, 0xc5, 0x94, 0x1d, 0x59, 0xc2, 0x10, + 0xb4, 0x58, 0xd5, 0xd5, 0xd3, 0xb0, 0x64, 0x20, 0xec, + 0x20, 0x53, 0x46, 0x5c, 0xcc, 0xec, 0xa7, 0xc2, 0x0f, + 0x67, 0x40, 0x49, 0x85, 0x46, 0x03, 0x79, 0xe2, 0xee, + 0x80, 0x6a, 0x46, 0xe8, 0x40, 0x9d, 0xfa, 0xb2, 0xe0, + 0xdd, 0x67, 0xea, 0x3c, 0xf4, 0x6d, 0x5a, 0xd4, 0xeb, + 0x78, 0x75, 0x68, 0x27, 0x35, 0x8c, 0x3e, 0xf1, 0xfd, + 0xbd, 0x07, 0xc3, 0x38, 0x34, 0xf3, 0xd9, 0xec, 0xa3, + 0xff, 0x13, 0xb7, 0x44, 0xa0, 0x10, 0x59, 0xa6, 0xc1, + 0x7a, 0x31, 0x5a, 0x8f, 0xd4 ), + AUTH ( 0xc7, 0x58, 0x7e, 0x7d, 0xa4, 0x1b, 0xed, 0x68, 0x2c, 0x37, + 0x37, 0x7e, 0xa4, 0x32, 0x40, 0x29 ) ); + +/* AES-GCM test case 24 */ +CIPHER_TEST ( wycheproof_aes_gcm_471d4ead, &aes_gcm_algorithm, + KEY ( 0x4a, 0x30, 0xea, 0xc0, 0x7b, 0x78, 0x8b, 0x73, 0x54, 0xa9, + 0x0e, 0x64, 0x48, 0xf5, 0x66, 0x76 ), + IV ( 0xc3, 0x59, 0xd5, 0x67, 0x61, 0x6b, 0x63, 0x84, 0xac, 0x20, + 0xa4, 0x3f ), + ADDITIONAL(), + PLAINTEXT ( 0x9a, 0x17, 0xb9, 0xd1, 0xdb, 0xe6, 0x66, 0xf7, 0x43, + 0x1c, 0xbd, 0xd3, 0xb3, 0x17, 0x39, 0x48, 0xc7, 0xac, + 0x13, 0xf2, 0x68, 0xe1, 0x28, 0x07, 0x25, 0x6d, 0x2e, + 0x58, 0x31, 0xae, 0x67, 0xa1, 0x41, 0x16, 0x14, 0x49, + 0x10, 0xb3, 0x83, 0x68, 0x93, 0x45, 0x71, 0xda, 0xff, + 0x9d, 0x40, 0x04, 0xba, 0x95, 0x9b, 0x3c, 0xae, 0x26, + 0x69, 0xe6, 0xee, 0xd4, 0x9e, 0x75, 0x0c, 0xa2, 0x28, + 0x41, 0x5c, 0x6f, 0x7d, 0x1c, 0x1f, 0x2d, 0x3d, 0xbb, + 0x02, 0xf4, 0xdf, 0xa4, 0x94, 0x83, 0xa7, 0xf8, 0x0f, + 0xbc, 0xc1, 0xcb, 0x01, 0xd2, 0x2c, 0x67, 0x81, 0x7c, + 0xc7, 0xa2, 0xbd, 0x27, 0x14, 0xeb, 0x62, 0xcd, 0xf8, + 0xfb, 0x88, 0x4a, 0x66, 0xed, 0x24, 0x51, 0x67, 0xcd, + 0xb2, 0x2e, 0x0d, 0xbc, 0x7b, 0x15, 0x3e, 0x64, 0x87, + 0x14, 0xdf, 0xe8, 0x34, 0x14, 0x69, 0x6c, 0xff, 0xa8, + 0x92, 0xda, 0xf5, 0xaf, 0x88, 0x20, 0xd5, 0x62, 0xbd, + 0xf5, 0x5f, 0x76, 0xbe, 0x55, 0x84, 0xa3, 0x4b, 0x7e, + 0x34, 0x9d, 0x10, 0xd7, 0x6c, 0x6e, 0x68, 0x30, 0x58, + 0x35, 0xb5, 0x51, 0xa4, 0x1e, 0xbf, 0x48, 0xe0, 0x68, + 0x32, 0x0d, 0x87, 0x53, 0x34, 0xa6, 0xa2, 0xd3, 0x10, + 0x8b, 0x1e, 0x93, 0xf7, 0xaa, 0x8d, 0xa4, 0x85, 0xd7, + 0xa5, 0x47, 0x0d, 0x80, 0x5e, 0x0d, 0xd3, 0x8c, 0x09, + 0xfe, 0xaa, 0x0f, 0x49, 0x4d, 0x05, 0x72, 0xde, 0x31, + 0x4a, 0x28, 0x74, 0x39, 0xf4, 0x8a, 0xee, 0x5a, 0x2f, + 0xa8, 0xe9, 0x85, 0x0c, 0x61, 0x27, 0xee, 0x88, 0xd5, + 0x0c, 0x5e, 0x8a, 0x2a, 0xc3, 0xea, 0xa7, 0xb2, 0xfd, + 0xd1, 0x58, 0x98, 0x13, 0xfb, 0x3a, 0xff, 0xa6, 0x58, + 0x98, 0x31, 0xdf, 0x13, 0x2b, 0xd5, 0x76, 0xfb, 0xed, + 0x21, 0x71, 0x7e, 0x2b, 0x67, 0x66, 0xe5, 0x93, 0xed, + 0x74, 0xda, 0xb3, 0x5d, 0xa1, 0x25, 0xc4, 0x33, 0x76, + 0x3e, 0xa9, 0x02, 0x34, 0xdc, 0x6f, 0x01, 0xd3, 0x7b, + 0xe1, 0x4c, 0x78, 0xb8, 0x86, 0x1b, 0xe1, 0xfb, 0x4c, + 0x82, 0x96, 0xb3, 0xfa, 0xee, 0x65, 0xb6, 0xef, 0x8a, + 0x9d, 0xaa, 0x68, 0x84, 0xe9, 0x36, 0x35, 0x93, 0x46, + 0xf2, 0xda, 0x9f, 0x69, 0x81, 0xf9, 0xd6, 0x4f, 0x67, + 0x67, 0x67, 0x64, 0x1a, 0xda, 0x62, 0x8a, 0xa8, 0xc7, + 0x12, 0x93, 0x26, 0xbd, 0x4e, 0xe5, 0x7e, 0x51, 0x5a, + 0x2f, 0x78, 0xba, 0x18, 0xc5, 0x95, 0xb9, 0xbc, 0x1d, + 0x0f, 0x49, 0x06, 0x87, 0x34, 0xa6, 0x7e, 0x63, 0x55, + 0x54, 0xee, 0xe6, 0x88, 0x81, 0x60, 0x61, 0xe9, 0x04, + 0xa4, 0xe0, 0x51, 0x25, 0xd0, 0xe7, 0x79, 0x73, 0x05, + 0x45, 0x1a, 0x7c, 0x3a, 0x1a, 0x3c, 0x50, 0x7d, 0xae, + 0xdb, 0x99, 0x0c, 0x12, 0xca, 0x29, 0x0a, 0x0f, 0x55, + 0x4a, 0xa8, 0xe8, 0x34, 0x65, 0x3a, 0xa2, 0x1a, 0x04, + 0x69, 0xd3, 0xb0, 0xc0, 0x8e, 0xe5, 0x12, 0xb3, 0x23, + 0xcb, 0x19, 0x37, 0x79, 0xc9, 0xfe, 0x2f, 0x2b, 0x3f, + 0x03, 0x79, 0x4c, 0xd4, 0x2f, 0x02, 0x20, 0x03, 0x1d, + 0x0c, 0x8e, 0xeb, 0x9c, 0x73, 0xa3, 0x28, 0x3a, 0x59, + 0x9b, 0xc7, 0x8d, 0xa3, 0xb5, 0xb4, 0x1b, 0x24, 0x3e, + 0xdf, 0x08, 0x2b, 0x23, 0x80, 0x1a, 0x15, 0xd9, 0x95, + 0x6f, 0xca, 0x60, 0xf3, 0x5a, 0xcf, 0xb6, 0x5c, 0x4d, + 0x06, 0xd2, 0x8a, 0xff, 0x81, 0xa1, 0xca, 0x98, 0xc6, + 0xfa, 0xf8, 0x64, 0x5b, 0xe9, 0x20, 0xbd, 0x87, 0xc0, + 0x3c, 0x05, 0x4a, 0x04, 0x69, 0xb2, 0x92, 0xae, 0x34, + 0xd0, 0x58, 0x60, 0xe8, 0xd9, 0xb0, 0x61, 0x30, 0x03, + 0x70, 0x46, 0x3d, 0xcd, 0x5f, 0xcd, 0x6f, 0xb1, 0xd6, + 0xb1, 0xac, 0xc9, 0xb4, 0xeb, 0x25, 0xca, 0xbd, 0x9d, + 0xe4, 0xe6, 0x1d, 0x44, 0x92, 0x2f, 0xcc ), + CIPHERTEXT ( 0x3e, 0x13, 0x58, 0x8d, 0x5a, 0x01, 0x4d, 0xcc, 0x1c, + 0xbf, 0x46, 0xbd, 0x6c, 0x3f, 0x06, 0xdf, 0xbe, 0xf1, + 0x46, 0x46, 0x49, 0xe7, 0x9a, 0x9b, 0xcb, 0xd9, 0x94, + 0x84, 0x68, 0x6d, 0x72, 0x65, 0x38, 0x27, 0x88, 0x2d, + 0xba, 0x80, 0x3a, 0x56, 0x83, 0xf8, 0x2a, 0x9b, 0xdf, + 0xec, 0x6b, 0x44, 0xb2, 0x9b, 0x7c, 0x13, 0xf3, 0xf2, + 0xb5, 0xdb, 0xc6, 0x75, 0x78, 0x05, 0x40, 0xf6, 0xa8, + 0xa0, 0x8e, 0x45, 0xf5, 0x9f, 0xa8, 0x80, 0x21, 0x09, + 0x5f, 0x8b, 0x3d, 0xb5, 0xf1, 0x0b, 0xc2, 0x17, 0x21, + 0xa5, 0x6d, 0x65, 0xa5, 0x89, 0x21, 0x6c, 0xbc, 0x5b, + 0x19, 0x15, 0xcb, 0xe7, 0xe2, 0xf8, 0x61, 0x2a, 0x9d, + 0x24, 0xb3, 0x0e, 0xcd, 0xe2, 0xa2, 0x96, 0xa9, 0x6f, + 0x48, 0xad, 0x11, 0x60, 0x72, 0x05, 0x37, 0x31, 0x22, + 0x08, 0xe9, 0xb6, 0x82, 0x4e, 0x64, 0x13, 0xf2, 0x08, + 0x4f, 0x22, 0x9d, 0xc6, 0xe9, 0x53, 0xc4, 0xb8, 0xa0, + 0x54, 0xe3, 0xc3, 0x68, 0xef, 0x1f, 0x70, 0xdd, 0x9c, + 0xf2, 0x76, 0xca, 0xa4, 0xcc, 0x25, 0x1e, 0x47, 0x5f, + 0x50, 0x7a, 0x2b, 0xd0, 0x72, 0xb7, 0xf4, 0xa1, 0x31, + 0x13, 0x02, 0xf6, 0x17, 0xe2, 0xcc, 0x59, 0x4e, 0xb6, + 0xa0, 0xc4, 0x9a, 0xc1, 0x73, 0xdb, 0x07, 0x83, 0x19, + 0x45, 0xf5, 0x12, 0x9a, 0x38, 0xe4, 0x51, 0x35, 0xbe, + 0xb9, 0x7b, 0x39, 0x39, 0x3f, 0x73, 0xd0, 0x97, 0x7e, + 0x32, 0x48, 0x20, 0x53, 0x3f, 0x3d, 0xd7, 0x52, 0x05, + 0x19, 0x96, 0x54, 0x3a, 0x06, 0x20, 0xeb, 0xba, 0x50, + 0x28, 0x89, 0x23, 0xf1, 0xd0, 0x18, 0x1b, 0xad, 0xb2, + 0x20, 0x4c, 0x74, 0x69, 0xe8, 0xb4, 0xb5, 0xd1, 0x4a, + 0x98, 0x4c, 0x3f, 0x0f, 0x3d, 0x34, 0xbb, 0x38, 0x34, + 0x16, 0x14, 0x9e, 0x0a, 0x0c, 0xa1, 0x4f, 0x4f, 0x6d, + 0xfe, 0x58, 0x90, 0x2a, 0x48, 0xec, 0xd3, 0xbd, 0xbc, + 0x02, 0xa8, 0xc8, 0x4b, 0xb3, 0x03, 0xe8, 0x34, 0x91, + 0x82, 0x4b, 0x2c, 0xa9, 0x76, 0x99, 0x1b, 0x22, 0x9d, + 0x71, 0x5a, 0xf2, 0xbf, 0x4b, 0xa3, 0x38, 0x5d, 0x7d, + 0x93, 0xe3, 0xad, 0xa5, 0x2f, 0x12, 0x31, 0x7b, 0x73, + 0xe2, 0x93, 0x96, 0x28, 0xd7, 0x58, 0x98, 0x10, 0xd6, + 0xa2, 0x78, 0xd4, 0xc2, 0x4e, 0x90, 0x7b, 0x4f, 0xfc, + 0xe0, 0xd1, 0x77, 0xb0, 0x40, 0xe9, 0xdc, 0xe9, 0x7b, + 0x63, 0xc9, 0xb8, 0xc1, 0x74, 0x3a, 0xd6, 0xfe, 0xbd, + 0x0c, 0x9a, 0x27, 0x3f, 0x64, 0x8b, 0x91, 0xba, 0x5b, + 0x57, 0x19, 0x15, 0x97, 0x85, 0xdb, 0x77, 0x0c, 0x66, + 0x42, 0x90, 0xe9, 0x3d, 0x69, 0xba, 0x14, 0x75, 0x7d, + 0x8b, 0xba, 0x68, 0xf0, 0xf9, 0x3a, 0x13, 0x60, 0x31, + 0xa9, 0x7c, 0x72, 0xf2, 0xbe, 0x6b, 0xf9, 0xe1, 0x52, + 0x37, 0xe9, 0x98, 0x39, 0x59, 0x30, 0xb4, 0xd1, 0xf8, + 0x7b, 0x57, 0xa5, 0xfa, 0x65, 0x49, 0x4d, 0xc8, 0xfe, + 0xb7, 0x61, 0xbd, 0xaf, 0xfe, 0xd4, 0xb3, 0xbf, 0x00, + 0x73, 0xe9, 0x24, 0x4a, 0xbb, 0x4a, 0x3a, 0x7e, 0x15, + 0xe2, 0xd5, 0x2a, 0x3b, 0xb8, 0x44, 0x67, 0x66, 0xf0, + 0xe7, 0x56, 0x37, 0x02, 0xa9, 0x43, 0xdd, 0x16, 0xd5, + 0xdb, 0x9d, 0xbe, 0xcb, 0x00, 0x44, 0xe4, 0x62, 0xbe, + 0xd1, 0x7e, 0xab, 0x81, 0xb3, 0x12, 0xaa, 0x4f, 0x32, + 0x41, 0x5d, 0xb8, 0xf0, 0x9b, 0xc0, 0xcc, 0x2d, 0xb7, + 0x40, 0x6f, 0x4f, 0x67, 0x86, 0x2a, 0xf9, 0x86, 0xb9, + 0x65, 0x23, 0x79, 0x13, 0xd1, 0x19, 0xca, 0x85, 0xb8, + 0xd6, 0x4b, 0x4e, 0x61, 0x00, 0x34, 0x89, 0x1f, 0x78, + 0x43, 0x3f, 0x37, 0x0f, 0xbe, 0x6c, 0x99, 0x96, 0xa6, + 0x9d, 0x0d, 0xe3, 0x08, 0xed, 0x68, 0x5f, 0x43, 0x39, + 0xf9, 0xb6, 0x7f, 0xa5, 0xec, 0x10, 0x0e ), + AUTH ( 0x58, 0x74, 0x3a, 0x6d, 0x49, 0x27, 0x2d, 0xf2, 0x01, 0xd8, + 0x1d, 0xcc, 0xcd, 0xaf, 0x76, 0xfa ) ); + +/* AES-GCM test case 25 */ +CIPHER_TEST ( wycheproof_aes_gcm_7ff74d83, &aes_gcm_algorithm, + KEY ( 0xfc, 0x8e, 0x6d, 0x2c, 0x7f, 0x42, 0xca, 0xb5, 0x93, 0x75, + 0x32, 0x72, 0x85, 0xcc, 0x33, 0x98 ), + IV ( 0x49, 0xe1, 0xe0, 0x0c, 0x48, 0xea, 0xf1, 0xb5, 0xb9, 0xd2, + 0xcb, 0x45 ), + ADDITIONAL(), + PLAINTEXT ( 0x21, 0x21, 0xb0, 0x69, 0x90, 0xdc, 0xde, 0x28, 0x85, + 0x73, 0x90, 0x32, 0x62, 0x2f, 0xd7, 0x02, 0x94, 0x17, + 0x40, 0x74, 0xbf, 0xfd, 0xf4, 0x0b, 0x01, 0xf3, 0x55, + 0x4d, 0x5d, 0x87, 0x24, 0x2d, 0xa6, 0x16, 0x73, 0xfe, + 0x9b, 0x16, 0x87, 0x77, 0x1f, 0xf1, 0xcc, 0x33, 0x0d, + 0x7b, 0x8a, 0x51, 0x38, 0xf6, 0x59, 0x8d, 0x81, 0x60, + 0xec, 0x90, 0xa4, 0x81, 0x6a, 0x6d, 0xba, 0xb3, 0x10, + 0xf2, 0xc9, 0x9a, 0xb1, 0x9c, 0x49, 0xd8, 0xa5, 0xd0, + 0x4e, 0xed, 0x4b, 0x93, 0xcd, 0x76, 0x15, 0x97, 0x66, + 0x54, 0x8e, 0x13, 0x65, 0x17, 0xec, 0xfb, 0x6a, 0xa7, + 0xad, 0x51, 0xe5, 0xff, 0x6d, 0x08, 0x3c, 0x0e, 0x53, + 0x53, 0x36, 0x92, 0x38, 0x8e, 0x65, 0x1e, 0xa9, 0xcb, + 0xa9, 0x46, 0x93, 0x11, 0x8e, 0x46, 0x99, 0x92, 0x64, + 0x76, 0xfe, 0xa7, 0x85, 0xd2, 0xca, 0xc0, 0x21, 0x3a, + 0xa6, 0x8a, 0xe0, 0xa3, 0x66, 0x92, 0x35, 0x32, 0xd3, + 0x33, 0xef, 0x13, 0x3b, 0x49, 0x0a, 0x46, 0x67, 0x60, + 0x6f, 0x72, 0x94, 0xdb, 0x8c, 0x6a, 0x45, 0x30, 0x40, + 0x74, 0x09, 0xb5, 0x1e, 0x80, 0x34, 0x93, 0xd4, 0x66, + 0x38, 0xfb, 0xa1, 0x51, 0xb2, 0x03, 0x1f, 0x82, 0x08, + 0xd5, 0x95, 0xb4, 0xe4, 0xae, 0x55, 0xdb, 0x66, 0xcd, + 0x7c, 0x32, 0x87, 0x53, 0xcf, 0xa0, 0xf6, 0x44, 0x43, + 0x8b, 0x0b, 0xff, 0x4f, 0x87, 0xd9, 0xb7, 0xc5, 0x64, + 0x8e, 0x5d, 0x2e, 0x80, 0x57, 0xe0, 0xb2, 0x0d, 0x55, + 0x0c, 0xf1, 0xd0, 0xaa, 0x13, 0x90, 0x06, 0x47, 0xc3, + 0x32, 0x90, 0x9b, 0x50, 0xf8, 0xec, 0xb1, 0xee, 0x14, + 0x83, 0x42, 0xaa, 0xc7, 0x05, 0xb2, 0x82, 0x15, 0x90, + 0x00, 0x30, 0xbf, 0xd9, 0x0c, 0xa1, 0x44, 0x6e, 0x3a, + 0x03, 0xce, 0xb2, 0xab, 0x71, 0xa9, 0xce, 0xb3, 0xd8, + 0xf0, 0xb4, 0x62, 0x6f, 0xeb, 0xf1, 0xdc, 0xff, 0x3c, + 0x1f, 0x5a, 0xe0, 0xfe, 0xf4, 0xc0, 0xf7, 0x46, 0x23, + 0xba, 0x47, 0xeb, 0x5f, 0xdc, 0x42, 0xd4, 0x2a, 0x20, + 0x39, 0xf4, 0x5e, 0x59, 0x87, 0x62, 0x4d, 0x97, 0xd0, + 0xfc, 0xfb, 0x95, 0xf7, 0x4c, 0x47, 0x8d, 0x61, 0x3b, + 0x90, 0x67, 0xf0, 0x3c, 0xb8, 0x6d, 0x60, 0x55, 0xd5, + 0x12, 0x4e, 0x6f, 0xf3, 0x17, 0x4d, 0x13, 0x6d, 0x60, + 0xfd, 0x7a, 0x54, 0xe7, 0xc8, 0xfd, 0xff, 0xf2, 0x0f, + 0xb5, 0x80, 0x7c, 0x4e, 0x35, 0x6c, 0xbf, 0xc7, 0x0d, + 0xf4, 0xbf, 0x83, 0x99, 0x78, 0x55, 0x60, 0x85, 0x58, + 0xdf, 0xf6, 0x4b, 0x3e, 0xa8, 0x85, 0x44, 0x81, 0xcb, + 0x24, 0x93, 0x30, 0x00, 0x48, 0x9f, 0x4b, 0x8e, 0x94, + 0x15, 0xb2, 0x22, 0x37, 0xe9, 0x16, 0x65, 0x38, 0x74, + 0x54, 0x9d, 0x76, 0x87, 0xae, 0x71, 0xb0, 0x63, 0xac, + 0xe3, 0xef, 0x7e, 0x41, 0xc7, 0x05, 0xd1, 0x97, 0xc3, + 0x15, 0x7d, 0xac, 0xd3, 0x26, 0x3d, 0x61, 0x13, 0x2a, + 0x4f, 0x07, 0xb9, 0x1c, 0xb0, 0xcd, 0x79, 0xbc, 0x7c, + 0xfd, 0x85, 0xf6, 0xf8, 0xc1, 0xf5, 0x07, 0xc3, 0x3b, + 0xb9, 0x10, 0xe2, 0xe8, 0x79, 0xe0, 0xe4, 0xd8, 0xfe, + 0xdf, 0x80, 0x41, 0x34, 0xd1, 0x4d, 0x59, 0x98, 0xb3, + 0x83, 0x76, 0xd9, 0xac, 0x08, 0x31, 0xd1, 0x57, 0x75, + 0x10, 0xef, 0x37, 0x04, 0xe3, 0xf6, 0x8a, 0xcf, 0xcb, + 0x43, 0x3a, 0xa2, 0xa7, 0x51, 0xf9, 0x4f, 0xa8, 0xb6, + 0xb3, 0x12, 0xaf, 0xbe, 0xea, 0x7f, 0x3d, 0x1f, 0x38, + 0x78, 0x4d, 0x79, 0xdb, 0x41, 0x4c, 0x77, 0x99, 0xe0, + 0x11, 0xca, 0x4d, 0x35, 0x77, 0x9e, 0xd1, 0x7a, 0xed, + 0x7d, 0x96, 0xdf, 0x5e, 0x1a, 0x60, 0xac, 0xe7, 0x46, + 0x92, 0x68, 0x6e, 0xde, 0x77, 0x8d, 0xfb, 0x4b, 0xee, + 0xb4, 0x25, 0x85, 0xc8, 0xcc, 0xdf, 0x03, 0xcf ), + CIPHERTEXT ( 0x51, 0xeb, 0x44, 0x8f, 0x83, 0x98, 0x02, 0xe6, 0xd7, + 0x3c, 0x5b, 0x62, 0x8e, 0xff, 0x69, 0xb1, 0xa4, 0x49, + 0xc5, 0xb1, 0xe7, 0x09, 0xf2, 0xfd, 0x86, 0x9c, 0x8e, + 0xba, 0xc9, 0x72, 0x5e, 0xcc, 0x3c, 0x9f, 0x42, 0x6f, + 0x87, 0x58, 0x53, 0xca, 0xda, 0x11, 0x8f, 0x84, 0x6d, + 0xe1, 0xa5, 0x2f, 0x3b, 0x36, 0xe2, 0x44, 0x66, 0x80, + 0xcd, 0xb4, 0x42, 0x41, 0xc4, 0x75, 0xb0, 0x41, 0x45, + 0x90, 0xf1, 0xee, 0x4b, 0xb9, 0x78, 0xdb, 0x5e, 0x88, + 0xc6, 0x96, 0xd1, 0x3c, 0xad, 0xb3, 0x1e, 0xba, 0xa8, + 0x97, 0xc2, 0x4e, 0x82, 0x04, 0xdd, 0xaa, 0x0e, 0x9c, + 0x6d, 0x78, 0x65, 0xca, 0xb9, 0x93, 0x4d, 0x6f, 0x81, + 0x12, 0x88, 0xda, 0x28, 0x5e, 0xb3, 0xa5, 0x42, 0x35, + 0xe2, 0x32, 0xa6, 0xdb, 0xb2, 0xa7, 0xba, 0x36, 0xea, + 0x72, 0x81, 0x82, 0x18, 0xa1, 0xed, 0x4c, 0x96, 0xe8, + 0x59, 0xd0, 0xea, 0xd7, 0xcc, 0x7e, 0x3d, 0x89, 0x93, + 0xc1, 0x00, 0x5f, 0xa5, 0x5b, 0x53, 0xd7, 0x52, 0xb4, + 0xca, 0x21, 0x94, 0x73, 0x6d, 0x76, 0xb9, 0x25, 0x31, + 0x97, 0x28, 0x1e, 0x0c, 0x63, 0x33, 0x04, 0x85, 0x72, + 0x04, 0x6b, 0x20, 0xcc, 0xe3, 0x29, 0x40, 0xee, 0xfa, + 0xcd, 0xc6, 0x25, 0xad, 0xc8, 0x41, 0x9c, 0x6a, 0x22, + 0x2c, 0x61, 0xc9, 0xa8, 0xf2, 0x48, 0x46, 0x3c, 0x37, + 0xa3, 0xc4, 0xe6, 0x88, 0xa9, 0xd7, 0x4e, 0x90, 0x06, + 0xfd, 0x79, 0x10, 0x76, 0x9e, 0x3b, 0x21, 0xc7, 0xdc, + 0x0d, 0x7e, 0xd5, 0x8f, 0x0e, 0xee, 0xa5, 0x8e, 0x32, + 0x57, 0xc4, 0x0e, 0x17, 0xea, 0x42, 0x88, 0x41, 0x57, + 0xe3, 0xaf, 0xc9, 0x91, 0x37, 0x57, 0x50, 0x6b, 0xd9, + 0x05, 0x27, 0xdd, 0x28, 0x5b, 0xda, 0x33, 0xab, 0x5a, + 0x44, 0x7f, 0x90, 0xe6, 0xf8, 0xc9, 0xec, 0xff, 0x22, + 0x89, 0xfd, 0xac, 0x6c, 0xd2, 0x80, 0x74, 0xc3, 0xe1, + 0x0b, 0xb3, 0x74, 0x33, 0x7f, 0x6c, 0x58, 0x7d, 0xac, + 0xb8, 0xcb, 0xf7, 0xbf, 0xab, 0x27, 0x2f, 0xcd, 0x46, + 0x2c, 0x2a, 0x06, 0xb4, 0x65, 0xa7, 0x91, 0xea, 0xb9, + 0x11, 0xca, 0xb9, 0x6a, 0xe6, 0xcc, 0xdf, 0x38, 0x2a, + 0xeb, 0x2e, 0x9d, 0x5a, 0xb0, 0x7e, 0x3d, 0xc1, 0x33, + 0xd7, 0xf5, 0xb7, 0x40, 0x2b, 0xb1, 0xb6, 0xcc, 0xf8, + 0xce, 0x48, 0x15, 0x39, 0x21, 0x30, 0x07, 0x3f, 0x6c, + 0x03, 0xd3, 0x91, 0x9d, 0x86, 0x40, 0xcd, 0x7b, 0xa9, + 0xb7, 0xfb, 0xbf, 0xcb, 0x07, 0x40, 0x50, 0x93, 0xac, + 0x40, 0x8c, 0x4a, 0xcd, 0x50, 0xd5, 0x2d, 0x7c, 0xae, + 0x06, 0xb9, 0xf3, 0x64, 0x8b, 0x53, 0x90, 0x44, 0xe4, + 0x9e, 0xb0, 0xd5, 0x26, 0xc6, 0x32, 0x3b, 0x59, 0x32, + 0xd3, 0xcd, 0xf1, 0x18, 0xcc, 0xb5, 0x56, 0x49, 0x8f, + 0x24, 0x39, 0x0d, 0x6d, 0x21, 0x03, 0x58, 0x8c, 0x6c, + 0xc4, 0xd1, 0x18, 0xf5, 0x2e, 0x4d, 0x66, 0xb1, 0xbd, + 0xe8, 0x3a, 0x8b, 0x7c, 0x86, 0x3e, 0x6a, 0x37, 0x3c, + 0x4c, 0xd6, 0x5d, 0x1d, 0x1a, 0x98, 0x53, 0x58, 0x10, + 0xfb, 0xef, 0xa8, 0xca, 0x38, 0xa2, 0x08, 0x30, 0xe1, + 0x9e, 0xf8, 0xfd, 0xf8, 0xfb, 0xa1, 0xd3, 0x33, 0x65, + 0x50, 0x54, 0xe6, 0xc8, 0xa3, 0xfd, 0xc8, 0x40, 0x3b, + 0x13, 0xb2, 0x7d, 0xe0, 0x7f, 0x9d, 0xbe, 0xef, 0x39, + 0x0e, 0xe0, 0x6c, 0x05, 0x89, 0x57, 0xc1, 0xf6, 0xe6, + 0xda, 0xe7, 0x75, 0x50, 0x90, 0xef, 0x1d, 0x0a, 0xfe, + 0xe3, 0x47, 0x67, 0x1f, 0xe6, 0x9e, 0x5a, 0x28, 0x08, + 0x69, 0x04, 0x0f, 0x4f, 0x35, 0xa6, 0xf6, 0x87, 0xc3, + 0x7e, 0xe9, 0xe6, 0xb6, 0x76, 0xa6, 0xd5, 0x8a, 0xc1, + 0x98, 0xdc, 0x86, 0xa8, 0x31, 0xae, 0x20, 0xfa, 0x2e, + 0x64, 0xf4, 0x16, 0x55, 0x2d, 0xfb, 0xdc, 0x4a ), + AUTH ( 0x1f, 0xba, 0x8f, 0xda, 0xd5, 0x45, 0xd2, 0x44, 0x3d, 0x6e, + 0x79, 0x59, 0x29, 0x74, 0xf3, 0x55 ) ); + +/* AES-GCM test case 26 */ +CIPHER_TEST ( wycheproof_aes_gcm_93db813a, &aes_gcm_algorithm, + KEY ( 0xf0, 0x1a, 0x3c, 0x35, 0x59, 0xc5, 0x8e, 0x80, 0xbc, 0x83, + 0x25, 0x44, 0xe0, 0x69, 0xef, 0x29 ), + IV ( 0xcd, 0x5b, 0xc2, 0xae, 0xd4, 0x8c, 0x3b, 0xe8, 0x36, 0xd7, + 0xd7, 0x86 ), + ADDITIONAL(), + PLAINTEXT ( 0x0d, 0xe5, 0xaa, 0xc3, 0xf1, 0x51, 0xb5, 0x26, 0x75, + 0x1d, 0xe8, 0xf3, 0x60, 0x10, 0xe4, 0x39, 0x44, 0x98, + 0xeb, 0xa3, 0xc8, 0xbc, 0x79, 0x0f, 0xd4, 0xba, 0x96, + 0xeb, 0x2d, 0xa3, 0x3e, 0x40, 0xdd, 0xca, 0x3c, 0xb3, + 0x6f, 0xec, 0x10, 0x2e, 0xf3, 0x7a, 0x6a, 0x51, 0x32, + 0xcd, 0x38, 0x9b, 0xbc, 0xab, 0xbd, 0x15, 0xe1, 0xc9, + 0xd2, 0x70, 0x0a, 0xf3, 0x5f, 0x19, 0xa0, 0x1b, 0xa3, + 0xb2, 0x68, 0x43, 0xab, 0x50, 0x83, 0x3f, 0x25, 0x2b, + 0xef, 0xbb, 0xb5, 0x52, 0x91, 0x73, 0xd5, 0x1c, 0xa3, + 0x64, 0xd7, 0xd0, 0x94, 0x68, 0xb3, 0xb6, 0x8f, 0x74, + 0x0a, 0x60, 0x14, 0xb5, 0xb8, 0x24, 0x20, 0x6a, 0x6a, + 0x71, 0x18, 0xbf, 0x14, 0x4a, 0x22, 0x3f, 0x87, 0xd7, + 0x66, 0x24, 0xc1, 0x38, 0xbd, 0x24, 0xa5, 0xfa, 0x99, + 0x6f, 0x36, 0xe3, 0x16, 0x08, 0x7f, 0x3b, 0x59, 0xc1, + 0xc7, 0x1c, 0xd7, 0x4a, 0x91, 0x84, 0xa5, 0x18, 0xc8, + 0xd9, 0xaa, 0x8c, 0x72, 0x43, 0x10, 0x2d, 0xd3, 0x9a, + 0x93, 0x59, 0x9e, 0x7b, 0xbe, 0x7d, 0xcd, 0x35, 0x4d, + 0x07, 0x80, 0x25, 0x37, 0x67, 0xe9, 0x60, 0x2f, 0x2f, + 0x0c, 0xbb, 0xab, 0x7e, 0xae, 0x8d, 0x8c, 0x12, 0xcb, + 0xad, 0x16, 0x3f, 0x8f, 0xc2, 0x0d, 0x32, 0x55, 0x9f, + 0x79, 0x8d, 0x2b, 0x72, 0x85, 0xdb, 0xa6, 0xf6, 0x6d, + 0xc2, 0x8d, 0x9b, 0x3f, 0x0a, 0x30, 0x1a, 0xa8, 0x9f, + 0x5c, 0xd1, 0xb5, 0xa1, 0x73, 0x4f, 0xe7, 0x2c, 0x68, + 0xf9, 0x8c, 0x86, 0x1d, 0x26, 0xe7, 0xdd, 0xda, 0xa0, + 0x8a, 0x22, 0x79, 0x99, 0xf7, 0xc9, 0x8d, 0x73, 0x15, + 0xe7, 0xc2, 0xe3, 0xc3, 0xf1, 0x98, 0xcd, 0xd4, 0xcf, + 0xd6, 0x2f, 0x62, 0x38, 0x99, 0x98, 0xc7, 0xb7, 0x60, + 0x10, 0x6d, 0x0a, 0x43, 0x7f, 0x50, 0x50, 0xf7, 0x4f, + 0x9c, 0xe6, 0x39, 0x48, 0xf5, 0x49, 0x4b, 0xed, 0x71, + 0xc8, 0x8b, 0xe4, 0x43, 0x65, 0x4e, 0xf9, 0xeb, 0x0c, + 0x86, 0x7e, 0xed, 0xe2, 0x25, 0xc1, 0xbd, 0xa1, 0x81, + 0xba, 0xab, 0xd8, 0x15, 0x53, 0x60, 0xcc, 0xae, 0x65, + 0xe5, 0x4d, 0x39, 0x9a, 0x3f, 0x7d, 0x67, 0x0d, 0x11, + 0xb5, 0x3d, 0x7b, 0xbe, 0xcd, 0xa1, 0x5d, 0x53, 0xe1, + 0x29, 0xef, 0x2b, 0xe2, 0x91, 0x54, 0xe3, 0xc2, 0x14, + 0x11, 0xe6, 0x20, 0x79, 0x77, 0xe2, 0x62, 0x00, 0x07, + 0xcf, 0x4b, 0x98, 0x7d, 0xd2, 0xc3, 0x04, 0xef, 0xe5, + 0x5b, 0xc2, 0xef, 0x56, 0x40, 0x74, 0xcd, 0x6e, 0x17, + 0x6a, 0x97, 0x18, 0x4b, 0xff, 0x4c, 0xad, 0x0c, 0xd0, + 0xcb, 0x85, 0x19, 0x5c, 0x4e, 0x83, 0x98, 0xf2, 0x7c, + 0xa0, 0xd4, 0xd8, 0xc4, 0x85, 0x13, 0x59, 0xee, 0xbd, + 0xb6, 0x06, 0xa2, 0x13, 0x22, 0x39, 0x03, 0x51, 0x3f, + 0x0d, 0xb8, 0xc0, 0xfc, 0xc1, 0xf3, 0xa8, 0x34, 0x73, + 0x8f, 0x6c, 0x9d, 0xd6, 0xad, 0xb4, 0x3b, 0xdc, 0xbd, + 0x92, 0x1e, 0x7c, 0x3c, 0xd3, 0xb2, 0x52, 0xe3, 0x19, + 0xf9, 0xe7, 0x11, 0xed, 0xf5, 0x5e, 0x8d, 0x7f, 0x1a, + 0x32, 0x07, 0x05, 0xa3, 0xba, 0x77, 0xbf, 0xa3, 0x34, + 0x63, 0xa9, 0x22, 0xa9, 0xf3, 0x6b, 0x48, 0x35, 0x90, + 0xc4, 0x93, 0x9f, 0xd9, 0x77, 0xac, 0xe5, 0x1c, 0x50, + 0x6d, 0x2e, 0x26, 0x9b, 0x48, 0x8a, 0x71, 0x69, 0xb6, + 0x96, 0xd8, 0x28, 0x45, 0x8e, 0xcb, 0x09, 0x2a, 0xe3, + 0xa9, 0xad, 0xf6, 0x3a, 0x3a, 0x12, 0x80, 0x9d, 0xa5, + 0x1f, 0xc7, 0x34, 0x0f, 0xc5, 0x7d, 0xb5, 0x0f, 0xa1, + 0x90, 0x3f, 0x1c, 0x7d, 0xe9, 0xce, 0x60, 0x6f, 0x1d, + 0xe3, 0xf9, 0x55, 0x38, 0x82, 0x3c, 0x04, 0xe3, 0xbf, + 0xb6, 0x54, 0x93, 0x85, 0x64, 0x37, 0x10, 0xa2, 0x91, + 0x9f, 0x2f, 0xbd, 0x54, 0x88, 0x7b, 0xdf, 0xb2, 0x39 ), + CIPHERTEXT ( 0xc9, 0x13, 0x9d, 0x5d, 0x6a, 0x14, 0x93, 0x6d, 0xd5, + 0xf2, 0x86, 0xd3, 0x3d, 0xee, 0x4f, 0x20, 0xf5, 0x9a, + 0x82, 0x11, 0x52, 0xaa, 0x71, 0x72, 0x74, 0xc1, 0xaf, + 0x90, 0x98, 0x3a, 0x5f, 0x83, 0xb9, 0x01, 0x62, 0x48, + 0xe7, 0x15, 0xa5, 0xd0, 0x99, 0x8d, 0x32, 0x99, 0x55, + 0xf4, 0x1a, 0x03, 0x96, 0x66, 0x0d, 0x9f, 0x22, 0xdf, + 0x5f, 0x61, 0x30, 0x98, 0xbf, 0xd3, 0xaa, 0x30, 0xdf, + 0x19, 0x22, 0xf0, 0x8d, 0xc1, 0x2c, 0x8f, 0xdc, 0xa6, + 0xd2, 0x63, 0x8a, 0x51, 0xbf, 0xe5, 0x94, 0xb2, 0x45, + 0x23, 0xb9, 0x31, 0x81, 0x71, 0x2d, 0x52, 0x05, 0xf9, + 0xc2, 0xe5, 0xd4, 0x87, 0x41, 0xe0, 0x00, 0xac, 0x21, + 0x28, 0x61, 0x9f, 0x6c, 0x97, 0x45, 0x44, 0x8d, 0xa2, + 0x94, 0xac, 0x28, 0x14, 0x28, 0xd6, 0xc6, 0x07, 0xf4, + 0xee, 0xda, 0xee, 0xa0, 0xdb, 0x12, 0xba, 0x16, 0x27, + 0xe5, 0x6a, 0xe1, 0x52, 0xef, 0x2b, 0x23, 0x10, 0xcc, + 0xe8, 0x29, 0xcc, 0x27, 0x62, 0x17, 0xe3, 0x1d, 0xac, + 0x22, 0xec, 0x85, 0x82, 0xd7, 0xa7, 0x2b, 0x5d, 0x64, + 0xd5, 0x58, 0x3c, 0x75, 0xf4, 0x2f, 0xc3, 0x55, 0x51, + 0x60, 0x7e, 0xc5, 0x7d, 0x9d, 0x40, 0x67, 0x2d, 0x16, + 0x41, 0xb6, 0x44, 0x91, 0xfe, 0x23, 0xff, 0x3e, 0xae, + 0xb3, 0x3e, 0x25, 0x64, 0x31, 0x9c, 0x58, 0xd6, 0x9b, + 0x19, 0xc6, 0x5d, 0x1c, 0x56, 0x16, 0x5e, 0xa2, 0x54, + 0x36, 0x31, 0xb9, 0x5b, 0xd8, 0x62, 0x9a, 0x91, 0x87, + 0x6c, 0x28, 0x4d, 0x02, 0x45, 0xbe, 0x6a, 0x4f, 0x34, + 0xad, 0x86, 0x28, 0xf7, 0xa4, 0xa4, 0xdb, 0xd3, 0xdc, + 0x13, 0xc9, 0x7a, 0x1b, 0x3a, 0x91, 0x08, 0xca, 0x67, + 0x21, 0xf3, 0x8a, 0x4b, 0x5b, 0x00, 0xea, 0x09, 0xab, + 0xc2, 0xa9, 0x0c, 0x39, 0xae, 0xd7, 0x75, 0xf3, 0xa7, + 0x84, 0xf0, 0xaa, 0x1a, 0x0a, 0x18, 0xb9, 0x9a, 0xeb, + 0xaf, 0x60, 0xfc, 0xc3, 0x38, 0x5c, 0x2c, 0x9a, 0x03, + 0xaa, 0x50, 0xe0, 0x29, 0xab, 0x81, 0xe5, 0xb9, 0xe3, + 0x7a, 0x0e, 0x1c, 0xf7, 0x0d, 0x9c, 0x1a, 0xdc, 0xa5, + 0x6e, 0x98, 0x28, 0x9b, 0x91, 0xd8, 0xc2, 0x50, 0x85, + 0x8e, 0x30, 0xe2, 0xc2, 0x1a, 0xfe, 0x39, 0xb9, 0x06, + 0x35, 0xfb, 0xe1, 0x55, 0x40, 0xb7, 0x18, 0xc0, 0x30, + 0x69, 0x6d, 0x1a, 0x4f, 0xfb, 0xef, 0xa8, 0xd8, 0xec, + 0x1a, 0xcb, 0x56, 0x33, 0xc8, 0xf1, 0x9e, 0xb5, 0xcf, + 0x91, 0x86, 0xe9, 0xec, 0x05, 0x94, 0xfd, 0xf1, 0x31, + 0x2e, 0x62, 0xd4, 0x88, 0xfa, 0xd9, 0xa8, 0x94, 0xe1, + 0x9a, 0x8e, 0x99, 0xde, 0x57, 0x8c, 0xc2, 0x95, 0xd5, + 0x81, 0x64, 0x5c, 0x4f, 0xa2, 0x9a, 0x8f, 0x12, 0xd4, + 0x48, 0x59, 0xeb, 0xb3, 0xe2, 0xbf, 0xf3, 0x51, 0xde, + 0x91, 0x71, 0x89, 0x98, 0x72, 0x66, 0xbd, 0x47, 0xac, + 0x72, 0x23, 0xa8, 0xd8, 0x57, 0xf7, 0x73, 0x0c, 0xef, + 0x8a, 0x31, 0x2a, 0x51, 0x64, 0xd7, 0xb0, 0x0e, 0x0e, + 0xed, 0xa4, 0xe2, 0x19, 0x52, 0x06, 0x2d, 0x8a, 0xce, + 0xfe, 0x44, 0xe0, 0xb8, 0x9a, 0x37, 0xd0, 0xf5, 0xc3, + 0x1c, 0x43, 0x45, 0xbc, 0x36, 0x0c, 0x93, 0x62, 0x69, + 0xf9, 0x3a, 0xa4, 0xe0, 0x0d, 0x05, 0x27, 0x86, 0x81, + 0xb3, 0x97, 0x17, 0xb9, 0xf3, 0x44, 0x5c, 0xdf, 0x7f, + 0x98, 0xed, 0xad, 0x18, 0x5d, 0x15, 0xfd, 0xd0, 0x27, + 0x39, 0x94, 0x85, 0x42, 0x86, 0x70, 0xb4, 0x30, 0xb0, + 0x27, 0x02, 0xf3, 0x73, 0xe9, 0xf8, 0x6e, 0x4a, 0x6b, + 0x33, 0xeb, 0xe7, 0x30, 0x95, 0x42, 0x74, 0x03, 0x79, + 0x50, 0x22, 0x52, 0x78, 0x18, 0xb0, 0xd3, 0x31, 0x6a, + 0xef, 0x9a, 0x27, 0x6e, 0xe8, 0x06, 0x26, 0x84, 0xb5, + 0xc1, 0x6c, 0x68, 0x3a, 0x74, 0x8b, 0xdb, 0x0d, 0xac ), + AUTH ( 0xd0, 0x70, 0x38, 0x1d, 0xb3, 0xe8, 0xd4, 0x85, 0xe9, 0x41, + 0x6c, 0x92, 0x06, 0x41, 0x80, 0xf1 ) ); + +/* AES-GCM test case 27 */ +CIPHER_TEST ( wycheproof_aes_gcm_2ec43c3e, &aes_gcm_algorithm, + KEY ( 0x5a, 0x47, 0x5f, 0x99, 0x76, 0xed, 0x11, 0x7a, 0xb3, 0x7a, + 0x4f, 0xff, 0xab, 0x05, 0x92, 0xeb ), + IV ( 0x6b, 0xce, 0x45, 0xbe, 0xa6, 0xad, 0x59, 0xbd, 0x2a, 0x08, + 0xf7, 0xb3 ), + ADDITIONAL ( 0xe8, 0xbb, 0x51, 0xb6, 0x94, 0xb6, 0xb0, 0x76, 0x3e, + 0x09, 0x7b, 0xad, 0x11, 0x52, 0xf5, 0xc7, 0x62, 0xa8, + 0x78, 0xa3, 0xe7, 0xf7, 0xa9, 0xd7, 0x8e, 0x80, 0x98, + 0x38, 0xde, 0x78, 0x56, 0x79, 0x00, 0x28, 0x1b, 0x7e, + 0x4f, 0x0f, 0x18, 0x54, 0x93, 0xfd, 0x85, 0xe2, 0x8d, + 0xb7, 0x9b, 0x59, 0x55, 0x41, 0xab, 0xa7, 0xe1, 0x58, + 0xb3, 0x93, 0x64, 0x90, 0xb6, 0x32, 0x35, 0x5d, 0x74 ), + PLAINTEXT ( 0xdc, 0x6a, 0xb0, 0xe2, 0x61, 0x41, 0x2c, 0xc7, 0x09, + 0x42, 0x22, 0x89, 0xea, 0x20, 0x20, 0x21, 0xd9, 0x29, + 0x80, 0x60 ), + CIPHERTEXT ( 0x35, 0xd3, 0xab, 0x05, 0x34, 0x10, 0x28, 0x84, 0xed, + 0x0d, 0xb4, 0x69, 0x4a, 0x22, 0x1d, 0xf1, 0xbf, 0x94, + 0xdc, 0xdb ), + AUTH ( 0xd7, 0x8d, 0x2c, 0x19, 0x7d, 0xeb, 0x70, 0xed, 0x52, 0x93, + 0x3f, 0x4f, 0xa0, 0xb0, 0x98, 0x56 ) ); + +/* AES-GCM test case 28 */ +CIPHER_TEST ( wycheproof_aes_gcm_b9939500, &aes_gcm_algorithm, + KEY ( 0xc4, 0xb0, 0x34, 0x35, 0xb9, 0x1f, 0xc5, 0x2e, 0x09, 0xef, + 0xf2, 0x7e, 0x4d, 0xc3, 0xfb, 0x42 ), + IV ( 0x50, 0x46, 0xe7, 0xe0, 0x8f, 0x07, 0x47, 0xe1, 0xef, 0xcc, + 0xb0, 0x9e ), + ADDITIONAL ( 0x75, 0xfc, 0x90, 0x78, 0xb4, 0x88, 0xe9, 0x50, 0x3d, + 0xcb, 0x56, 0x8c, 0x88, 0x2c, 0x9e, 0xec, 0x24, 0xd8, + 0x0b, 0x04, 0xf0, 0x95, 0x8c, 0x82, 0xaa, 0xc8, 0x48, + 0x4f, 0x02, 0x5c, 0x90, 0x43, 0x41, 0x48, 0xdb, 0x8e, + 0x9b, 0xfe, 0x29, 0xc7, 0xe0, 0x71, 0xb7, 0x97, 0x45, + 0x7c, 0xb1, 0x69, 0x5a, 0x5e, 0x5a, 0x63, 0x17, 0xb8, + 0x36, 0x90, 0xba, 0x05, 0x38, 0xfb, 0x11, 0xe3, 0x25, + 0xca ), + PLAINTEXT ( 0x8e, 0x88, 0x7b, 0x22, 0x4e, 0x8b, 0x89, 0xc8, 0x2e, + 0x9a, 0x64, 0x1c, 0xf5, 0x79, 0xe6, 0x87, 0x9e, 0x11, + 0x11, 0xc7 ), + CIPHERTEXT ( 0xb6, 0x78, 0x68, 0x12, 0x57, 0x4a, 0x25, 0x4e, 0xb4, + 0x3b, 0x1c, 0xb1, 0xd1, 0x75, 0x35, 0x64, 0xc6, 0xb5, + 0x20, 0xe9 ), + AUTH ( 0xad, 0x8c, 0x09, 0x61, 0x0d, 0x50, 0x8f, 0x3d, 0x0f, 0x03, + 0xcc, 0x52, 0x3c, 0x0d, 0x5f, 0xcc ) ); + +/* AES-GCM test case 29 */ +CIPHER_TEST ( wycheproof_aes_gcm_398af67e, &aes_gcm_algorithm, + KEY ( 0xf6, 0x4d, 0x1b, 0xc4, 0x7b, 0x08, 0x1a, 0xfb, 0x21, 0x18, + 0x1b, 0xdc, 0x16, 0xff, 0xbc, 0xca ), + IV ( 0x2c, 0x03, 0x29, 0x37, 0x04, 0xf7, 0x96, 0x12, 0x18, 0x16, + 0x09, 0xd3 ), + ADDITIONAL ( 0xa8, 0x83, 0xd2, 0x3e, 0x25, 0xa6, 0x2b, 0x49, 0x2f, + 0x12, 0x71, 0xd3, 0xd7, 0x9b, 0x86, 0x89, 0xdd, 0xe7, + 0x25, 0x0a, 0x05, 0x75, 0xb8, 0x17, 0x5a, 0x6b, 0x69, + 0xd4, 0x8d, 0x1b, 0x4b, 0xc2, 0xdf, 0x1b, 0x4d, 0xc4, + 0xa2, 0xb1, 0xeb, 0x50, 0x6b, 0xc0, 0xe8, 0xc1, 0x1e, + 0x7d, 0xc2, 0xf3, 0xd0, 0x8b, 0x47, 0x52, 0x14, 0x55, + 0x1d, 0xf7, 0xc5, 0x3e, 0x58, 0x1e, 0xc5, 0x5c, 0x0d, + 0x0a, 0x2d ), + PLAINTEXT ( 0x85, 0xb2, 0x49, 0x04, 0xbf, 0x12, 0xce, 0xd3, 0x3d, + 0x78, 0xdf, 0x74, 0x37, 0xb3, 0x6f, 0xff, 0x83, 0xd1, + 0xe8, 0x17 ), + CIPHERTEXT ( 0xb0, 0x09, 0x75, 0x86, 0x3c, 0x67, 0x3f, 0x0f, 0x19, + 0x32, 0x62, 0x94, 0xeb, 0xc4, 0xc7, 0x7f, 0x72, 0x87, + 0xc2, 0x79 ), + AUTH ( 0xae, 0x57, 0x62, 0x2c, 0x1d, 0x17, 0x5e, 0xbb, 0xca, 0x77, + 0xbd, 0x4e, 0xe8, 0x12, 0xed, 0x89 ) ); + +/* AES-GCM test case 30 */ +CIPHER_TEST ( wycheproof_aes_gcm_831a61d8, &aes_gcm_algorithm, + KEY ( 0x7e, 0x0e, 0x0c, 0xf8, 0xc9, 0xac, 0x58, 0x86, 0x7e, 0xf3, + 0xe3, 0x31, 0x5d, 0x0a, 0x43, 0x38 ), + IV ( 0xa0, 0x34, 0x61, 0xbd, 0x9f, 0xfe, 0xdb, 0x16, 0xa6, 0x5c, + 0x03, 0x89 ), + ADDITIONAL ( 0xc7, 0x0f, 0x00, 0x9b, 0xe6, 0x5a, 0xde, 0x84, 0x65, + 0xcc, 0x05, 0xb5, 0x22, 0x79, 0x63, 0xc1, 0x2c, 0x60, + 0xb6, 0x82, 0x47, 0xae, 0x2e, 0x43, 0x1b, 0x24, 0x45, + 0xbb, 0x6a, 0xa6, 0x9c, 0x0a, 0x78, 0x20, 0x17, 0x78, + 0x61, 0xe5, 0xf6, 0xe3, 0x58, 0x52, 0x69, 0xfd, 0x15, + 0xef, 0xaf, 0x38, 0xc3, 0x71, 0x3e, 0x6a, 0xf0, 0xe9, + 0x33, 0x62, 0xd2, 0xd9, 0xa6, 0xe3, 0x29, 0x67, 0x12, + 0xf5, 0x81, 0x56, 0x3a, 0xe3, 0x98, 0x02, 0x98, 0xf8, + 0xbb, 0x72, 0x76, 0x85, 0x9a, 0xfe, 0xcc, 0x70, 0x52, + 0xfe, 0xf6, 0x3b, 0x06, 0x0b, 0xc8, 0xf2, 0x19, 0xff, + 0xe2, 0x00, 0xe1, 0x4d, 0xbd, 0xe1, 0xf0, 0xa3, 0x62, + 0x33, 0xb5, 0x99, 0x4a, 0x0b, 0x68, 0xc4, 0x69, 0x0b, + 0x43, 0x7d, 0x49, 0x5d, 0xdf, 0xf9, 0x91, 0x99, 0x3e, + 0x75, 0x03, 0x9b, 0xcb, 0xa4, 0xc1, 0x9d, 0x7a, 0x6f, + 0x01 ), + PLAINTEXT ( 0xde, 0x44, 0x51, 0x31, 0x6a, 0xd8, 0x20, 0x47, 0x1a, + 0x43, 0x90, 0x69, 0x65, 0xaf, 0x9f, 0xa2, 0x21, 0xc0, + 0x36, 0x0f ), + CIPHERTEXT ( 0x8b, 0x9d, 0xcb, 0xd9, 0xc9, 0x57, 0x35, 0x09, 0xd9, + 0x78, 0xdb, 0x0d, 0x91, 0x0e, 0x26, 0x96, 0x12, 0xc9, + 0x07, 0xbf ), + AUTH ( 0x61, 0xae, 0x3a, 0xfd, 0xb0, 0x6a, 0x01, 0xd8, 0xee, 0x6f, + 0x7e, 0x73, 0x9e, 0xc3, 0x0a, 0x4e ) ); + +/* AES-GCM test case 31 */ +CIPHER_TEST ( wycheproof_aes_gcm_63336678, &aes_gcm_algorithm, + KEY ( 0x7e, 0x37, 0xd5, 0x6e, 0x6b, 0x1d, 0x01, 0x72, 0xd4, 0x0d, + 0x64, 0xd6, 0x11, 0x1d, 0xd4, 0x24 ), + IV ( 0x51, 0x7c, 0x55, 0xc2, 0xec, 0x9b, 0xfe, 0xa9, 0x0a, 0xdd, + 0xc2, 0xbd ), + ADDITIONAL ( 0x8e, 0xd8, 0xa9, 0xbe, 0x4c, 0x3d, 0x32, 0xa5, 0x09, + 0x84, 0x34, 0xee, 0x5c, 0x0c, 0x4f, 0xc2, 0x0f, 0x78, + 0xef, 0x5e, 0x25, 0xed, 0x8b, 0x72, 0xa8, 0x40, 0xa4, + 0x63, 0xe3, 0x6b, 0x67, 0xb8, 0x81, 0xe0, 0x48, 0xb5, + 0xe4, 0x9f, 0x51, 0x5b, 0x25, 0x41, 0xad, 0x5c, 0xe4, + 0xeb, 0xb3, 0xa9, 0x17, 0xc1, 0x6b, 0xcd, 0xc0, 0xdc, + 0x3c, 0xb5, 0x2b, 0xb4, 0xed, 0x5a, 0x1d, 0xff, 0xcf, + 0x1e, 0x18, 0x66, 0x54, 0x4e, 0x8d, 0xb1, 0x03, 0xb2, + 0xad, 0x99, 0xc6, 0xfa, 0x6e, 0x7d, 0xe1, 0xd8, 0xb4, + 0x5b, 0xff, 0x57, 0xec, 0x87, 0x2f, 0x1c, 0xfc, 0x78, + 0xb0, 0xe4, 0x87, 0x0f, 0x6f, 0x20, 0x0f, 0xf1, 0x29, + 0x1c, 0xae, 0x03, 0x3d, 0xef, 0xc3, 0x32, 0x7b, 0xa8, + 0x27, 0x92, 0xba, 0x43, 0x8e, 0x35, 0xc4, 0xbf, 0xbb, + 0x68, 0x4f, 0xec, 0x5c, 0xe5, 0xe3, 0xae, 0x16, 0x7d, + 0x01, 0xd7 ), + PLAINTEXT ( 0x6a, 0x7d, 0xea, 0x03, 0xc1, 0xbb, 0xa7, 0x0b, 0xe8, + 0xc7, 0x3d, 0xa4, 0x7d, 0x5e, 0xe0, 0x6d, 0x72, 0xa2, + 0x74, 0x30 ), + CIPHERTEXT ( 0xcf, 0xb6, 0x31, 0x79, 0x07, 0x67, 0xd0, 0x64, 0x5d, + 0x8e, 0xc6, 0xf2, 0x3b, 0xf7, 0xfa, 0x8b, 0x19, 0xce, + 0x79, 0xee ), + AUTH ( 0xc5, 0x76, 0x7d, 0xda, 0xa7, 0x47, 0x15, 0x84, 0x46, 0x23, + 0x17, 0x66, 0xbd, 0x20, 0x49, 0x0c ) ); + +/* AES-GCM test case 32 */ +CIPHER_TEST ( wycheproof_aes_gcm_a88873d1, &aes_gcm_algorithm, + KEY ( 0xd9, 0x21, 0x89, 0x31, 0xdc, 0x59, 0x2a, 0xef, 0x3b, 0xff, + 0xb9, 0x24, 0xc9, 0xe0, 0xb0, 0x2c ), + IV ( 0x17, 0xd8, 0x24, 0xf4, 0xf2, 0xf1, 0x91, 0xe9, 0xc9, 0xdc, + 0x0a, 0x52 ), + ADDITIONAL ( 0x76, 0xdc, 0xb9, 0x94, 0x85, 0x75, 0xb5, 0x03, 0xfe, + 0xa7, 0x5c, 0xb3, 0xd4, 0x94, 0x9b, 0xb9, 0x6a, 0xe3, + 0xd2, 0xc1, 0x78, 0x0f, 0x18, 0x5e, 0x0f, 0xb3, 0xcd, + 0x5b, 0x83, 0xeb, 0x70, 0x90, 0xbe, 0x7a, 0x96, 0x6f, + 0x61, 0x46, 0xa4, 0xdb, 0x7e, 0xf8, 0x2f, 0x8a, 0xdb, + 0x9b, 0x10, 0x15, 0x8b, 0x69, 0xd4, 0xbb, 0x19, 0xdf, + 0xfe, 0x4c, 0x63, 0x9f, 0xe2, 0x78, 0xd0, 0x33, 0x4e, + 0x68, 0xaa, 0xf1, 0xb6, 0x84, 0x51, 0xa8, 0xe6, 0x77, + 0x8d, 0xdb, 0xb2, 0x9a, 0xac, 0x4b, 0x25, 0xbc, 0xb2, + 0xea, 0x05, 0x96, 0x01, 0xee, 0x2e, 0xba, 0x43, 0x91, + 0x34, 0xae, 0xcd, 0x0c, 0xea, 0xcd, 0x98, 0xe3, 0x88, + 0xc4, 0x01, 0x14, 0xc1, 0x19, 0x69, 0xdf, 0xd4, 0xa1, + 0x6b, 0xee, 0xaf, 0x3d, 0x1c, 0x74, 0x10, 0xe9, 0x9e, + 0x67, 0x48, 0x94, 0x44, 0x58, 0x21, 0xe8, 0xfc, 0xda, + 0x7b, 0x7b, 0xa7 ), + PLAINTEXT ( 0x29, 0xf2, 0x9b, 0xfc, 0x5b, 0x09, 0xff, 0x15, 0x8d, + 0x74, 0xfb, 0xf7, 0x53, 0x2c, 0x06, 0xaa, 0x3a, 0xfa, + 0x93, 0x6c ), + CIPHERTEXT ( 0xd0, 0xd2, 0x2c, 0xc0, 0x89, 0x32, 0x61, 0xb1, 0x05, + 0xc0, 0x21, 0xf5, 0x34, 0x73, 0x75, 0x99, 0xca, 0xc3, + 0xb1, 0x0d ), + AUTH ( 0xf5, 0x5f, 0x4a, 0xc6, 0xd8, 0x36, 0xfc, 0x28, 0x80, 0x36, + 0xa6, 0x3f, 0x53, 0xb0, 0xdd, 0xd4 ) ); + +/* AES-GCM test case 33 */ +CIPHER_TEST ( wycheproof_aes_gcm_febb3d17, &aes_gcm_algorithm, + KEY ( 0xbf, 0x20, 0x56, 0xba, 0xaf, 0x45, 0xc5, 0xa0, 0x0a, 0x73, + 0x3b, 0x49, 0xf1, 0x0b, 0x7d, 0xd0 ), + IV ( 0xfe, 0xf1, 0xb2, 0x43, 0xb4, 0x4b, 0xa9, 0x2b, 0x47, 0xc6, + 0x62, 0x6b ), + ADDITIONAL ( 0x1b, 0xb3, 0xa1, 0x79, 0x07, 0x27, 0x9e, 0xbf, 0xf6, + 0x35, 0x93, 0xde, 0x97, 0xa6, 0x4e, 0x5c, 0xea, 0xf9, + 0xe1, 0xd4, 0x07, 0xe5, 0xa5, 0xee, 0xc1, 0xce, 0x0f, + 0x62, 0x58, 0x6f, 0x0d, 0xfd, 0xdb, 0x7a, 0x3a, 0x83, + 0xfd, 0x16, 0x4e, 0x80, 0x0b, 0xcb, 0xc6, 0xfb, 0x08, + 0x9d, 0x6a, 0x24, 0x7d, 0xfa, 0x44, 0x46, 0x33, 0xf4, + 0x66, 0x3a, 0xe1, 0xe0, 0xbd, 0xf3, 0x7b, 0x50, 0xa7, + 0xa0, 0x1f, 0x50, 0x6e, 0x22, 0x20, 0xbb, 0xdd, 0x4b, + 0x08, 0xc5, 0x9f, 0xe6, 0x0e, 0x45, 0x5b, 0xda, 0xed, + 0xa7, 0xe5, 0xa0, 0xcd, 0xb2, 0xe6, 0xdf, 0xca, 0x66, + 0x38, 0x1a, 0x72, 0x96, 0x2f, 0xa8, 0xa6, 0xf9, 0x84, + 0x7a, 0x87, 0x13, 0x5c, 0xcf, 0x02, 0xa4, 0x0d, 0xa5, + 0xb3, 0xb8, 0xe9, 0x1e, 0x6e, 0x1f, 0x31, 0x54, 0x2f, + 0x85, 0xf9, 0x0b, 0xce, 0x1d, 0xe0, 0x51, 0x88, 0xfe, + 0x57, 0x35, 0x53, 0x29, 0x03, 0x1c, 0x66, 0xb3, 0xfd, + 0xe1, 0x8b, 0xbd, 0xcb, 0xd2, 0xcb, 0xec, 0x42, 0xea, + 0x1d, 0x0f, 0xc8, 0x03, 0xab, 0xed, 0x2f, 0x15, 0xc4, + 0x1d, 0x2f, 0x12, 0x26, 0x74, 0xea, 0x91, 0xb7, 0x28, + 0x0e, 0x81, 0x8a, 0xcb, 0x75, 0x49, 0xfe, 0x63, 0x13, + 0x5d, 0x21, 0x09, 0xb4, 0x01, 0x4e, 0xc6, 0x00, 0x27, + 0x45, 0x30, 0x1b, 0xd0, 0xac, 0x59, 0xca, 0x8e, 0x4f, + 0x8d, 0x2f, 0xb6, 0x99, 0x34, 0x7b, 0x74, 0xe1, 0x78, + 0x18, 0xe3, 0xa5, 0x7f, 0xa6, 0x9c, 0x75, 0x93, 0x12, + 0xdc, 0xfd, 0xe1, 0x55, 0xb2, 0xa5, 0x58, 0xa2, 0x38, + 0x5c, 0x8a, 0xda, 0xb8, 0xa6, 0xd5, 0x7f, 0x0f, 0x49, + 0x7e, 0xaf, 0x08, 0x33, 0xe3, 0xd9, 0x30, 0xe8, 0x3f, + 0xed, 0x88, 0xc9, 0x1e, 0x18, 0xa7, 0x4c, 0x4f, 0x5f, + 0xf4, 0x59, 0x25, 0xa2, 0xbb, 0xdd, 0xa2, 0x2f, 0x9a, + 0x4f, 0x11, 0x96 ), + PLAINTEXT ( 0x7e, 0x8c, 0x2d, 0x8a, 0x65, 0xf5, 0x39, 0x21, 0x0c, + 0x04, 0x74, 0x22, 0xae, 0x57, 0x54, 0x91, 0x95, 0xa0, + 0x83, 0x93 ), + CIPHERTEXT ( 0x1f, 0xcc, 0x05, 0xbf, 0x49, 0x60, 0xfd, 0x02, 0x47, + 0x5c, 0x07, 0x2f, 0x9e, 0xee, 0x81, 0x50, 0x99, 0x4e, + 0xdc, 0xb9 ), + AUTH ( 0xf3, 0xe0, 0x92, 0xf2, 0x41, 0x5f, 0x7f, 0x0c, 0xe8, 0x8f, + 0x37, 0xa2, 0x49, 0x5d, 0xce, 0x48 ) ); + +/* AES-GCM test case 34 */ +CIPHER_TEST ( wycheproof_aes_gcm_6e67f3d3, &aes_gcm_algorithm, + KEY ( 0x6f, 0x83, 0x07, 0xbb, 0x3d, 0x83, 0xd6, 0x78, 0x66, 0xc2, + 0xfa, 0x5b, 0x26, 0xf9, 0xca, 0xde ), + IV ( 0xdf, 0xe9, 0x3e, 0xd8, 0x79, 0xe4, 0xb3, 0x91, 0xeb, 0xbb, + 0xfd, 0x37 ), + ADDITIONAL ( 0x1d, 0x72, 0x72, 0x0d, 0xbb, 0xc4, 0x03, 0x33, 0xe8, + 0x19, 0xa4, 0xde, 0xf8, 0x1f, 0x7b, 0xae, 0x13, 0x7d, + 0x8e, 0x52, 0xdc, 0x01, 0x0e, 0xd9, 0x01, 0xa3, 0x90, + 0xbf, 0x8c, 0x0a, 0xb6, 0xb4, 0x35, 0xb0, 0x8e, 0xf0, + 0x18, 0x48, 0x88, 0xbc, 0x83, 0xb1, 0x4b, 0x98, 0xb5, + 0x9f, 0x6c, 0x56, 0xaf, 0xd4, 0x61, 0x31, 0xc5, 0x62, + 0x7b, 0x9e, 0x2a, 0x44, 0xf0, 0xa1, 0x2a, 0x9a, 0x53, + 0x56, 0xd9, 0x09, 0x0c, 0x8b, 0x19, 0xc9, 0x4f, 0x3f, + 0x86, 0x51, 0xd4, 0x9c, 0x74, 0x27, 0x6b, 0xd9, 0xae, + 0x10, 0x71, 0xca, 0xd5, 0xf5, 0x04, 0x0f, 0xbe, 0x1e, + 0x99, 0x12, 0x4e, 0xf4, 0x4f, 0x3f, 0x81, 0x3b, 0x13, + 0xdf, 0xf9, 0x58, 0xe7, 0x33, 0x1b, 0x94, 0x91, 0x93, + 0xbd, 0xf5, 0x58, 0xfd, 0x14, 0x03, 0x2c, 0x54, 0xf0, + 0xe0, 0xae, 0x7a, 0xc4, 0xd2, 0xe6, 0xa9, 0x9d, 0x82, + 0xa5, 0xda, 0x41, 0x13, 0x5f, 0x05, 0x43, 0xad, 0x37, + 0x7d, 0x21, 0x71, 0x52, 0x49, 0x7c, 0xf8, 0x64, 0x35, + 0xd2, 0x4e, 0xe0, 0xc7, 0x59, 0x97, 0xe3, 0x86, 0x31, + 0x33, 0xd3, 0x22, 0x01, 0x7a, 0xec, 0x98, 0x05, 0x0b, + 0x2f, 0xbc, 0x1d, 0xd8, 0x54, 0x22, 0x93, 0xae, 0x70, + 0x68, 0x89, 0xe7, 0x54, 0xda, 0xf6, 0xff, 0x8c, 0x91, + 0xfb, 0x65, 0x33, 0xc5, 0xdb, 0x73, 0x75, 0xdd, 0x3e, + 0x36, 0x5e, 0x6a, 0x18, 0xc5, 0x46, 0xfa, 0x94, 0x63, + 0xdf, 0xdb, 0x21, 0xd5, 0x1c, 0x9c, 0xf2, 0x3c, 0x92, + 0x84, 0xa6, 0x3c, 0xbf, 0xad, 0x19, 0x7f, 0x37, 0x66, + 0x01, 0x10, 0x1c, 0xb2, 0xf8, 0xa6, 0x7b, 0x6e, 0x86, + 0x65, 0x69, 0x21, 0x80, 0x43, 0xcd, 0x17, 0x45, 0xd2, + 0x5e, 0xcd, 0xdf, 0x60, 0x9c, 0xe2, 0xf9, 0xa8, 0xf7, + 0x6f, 0xb8, 0x83, 0x78, 0x0a, 0x39, 0x3e, 0xa1, 0x8b, + 0x76, 0x24, 0x37, 0x6b ), + PLAINTEXT ( 0x81, 0xeb, 0xf6, 0x97, 0x54, 0x85, 0x7b, 0xe5, 0xad, + 0x7d, 0xdf, 0x00, 0x62, 0xf8, 0x66, 0x42, 0x10, 0x89, + 0xd1, 0x36 ), + CIPHERTEXT ( 0x4d, 0x8f, 0xf7, 0x2d, 0x85, 0x9b, 0xae, 0x11, 0x14, + 0x20, 0x1c, 0x41, 0x9c, 0x09, 0x84, 0x76, 0xe7, 0x4e, + 0xec, 0xe9 ), + AUTH ( 0x3b, 0x2e, 0x9e, 0x1b, 0x37, 0x8d, 0x70, 0x7b, 0xd2, 0xa9, + 0x61, 0xbd, 0x78, 0x11, 0xf0, 0xc7 ) ); + +/* AES-GCM test case 35 */ +CIPHER_TEST ( wycheproof_aes_gcm_7e3aa6d7, &aes_gcm_algorithm, + KEY ( 0x30, 0x76, 0x74, 0x14, 0x08, 0xf7, 0x34, 0xce, 0x25, 0xd4, + 0x8f, 0x98, 0x2e, 0x8b, 0x84, 0x4b ), + IV ( 0xa2, 0x71, 0x2e, 0xac, 0x5e, 0x06, 0xd3, 0xcc, 0x28, 0x64, + 0xaa, 0x8b ), + ADDITIONAL ( 0x18, 0x52, 0x6e, 0x4e, 0xfd, 0x99, 0x5a, 0x0b, 0xf6, + 0x40, 0x5d, 0x9f, 0x90, 0x67, 0x25, 0xc2, 0x90, 0x27, + 0x89, 0x58, 0xd4, 0x95, 0x54, 0x97, 0x4d, 0x8f, 0xe0, + 0x25, 0xe7, 0x86, 0x0d, 0xaa, 0x22, 0x5c, 0x12, 0x85, + 0xb0, 0x57, 0x39, 0x16, 0xa4, 0xb6, 0x74, 0x1f, 0x7c, + 0xc2, 0xe2, 0x9c, 0xe4, 0xe5, 0x25, 0xe1, 0x2f, 0x43, + 0x6c, 0xb7, 0xce, 0x0a, 0xd4, 0x7d, 0xf3, 0xd0, 0xf5, + 0xbd, 0x80, 0xfb, 0x27, 0xe4, 0x76, 0x35, 0xa4, 0x98, + 0x5f, 0xda, 0xed, 0xf0, 0xe8, 0x21, 0xf1, 0xc8, 0x95, + 0x99, 0x85, 0xca, 0xc4, 0x9c, 0x97, 0xa4, 0xa0, 0x24, + 0x38, 0xd9, 0x2b, 0x4a, 0xfd, 0x4c, 0x85, 0x5d, 0xcc, + 0x7e, 0xf4, 0x1e, 0xcf, 0xc3, 0x68, 0x66, 0x33, 0x4f, + 0xcc, 0x05, 0xb2, 0xbb, 0x93, 0xef, 0x13, 0xf0, 0x0c, + 0x5e, 0xa9, 0xb9, 0x21, 0xe8, 0xa5, 0x19, 0xd7, 0x7f, + 0x64, 0x8e, 0x0e, 0xfe, 0x9b, 0x5a, 0x62, 0x30, 0x5a, + 0x2e, 0xcf, 0x7d, 0x49, 0x99, 0x66, 0x3a, 0x6d, 0xdf, + 0xca, 0x51, 0x7f, 0x1f, 0x36, 0xf0, 0x89, 0x9b, 0x0b, + 0xde, 0xf9, 0xf4, 0x33, 0xc4, 0xbb, 0x26, 0x63, 0xc0, + 0xcc, 0x1b, 0xb6, 0x16, 0xe7, 0xd1, 0x94, 0x9e, 0x52, + 0x2b, 0xec, 0x85, 0x48, 0x5d, 0x37, 0x1d, 0x11, 0x34, + 0xc9, 0x0e, 0xed, 0xe7, 0x5e, 0x86, 0x5d, 0xc7, 0xbe, + 0x40, 0x5b, 0x54, 0xc3, 0x3f, 0x0a, 0xcb, 0xac, 0xe6, + 0xcf, 0x78, 0x0c, 0x78, 0x03, 0x5b, 0x80, 0x35, 0xb6, + 0xea, 0x3f, 0x56, 0x2a, 0x8d, 0x30, 0xa1, 0x56, 0xc1, + 0x99, 0xfd, 0xaf, 0xd2, 0x5b, 0xe0, 0x6e, 0xe8, 0x95, + 0x58, 0x11, 0x95, 0xef, 0x12, 0x5c, 0xb4, 0xe6, 0x29, + 0xe4, 0xf1, 0x8e, 0x0b, 0xee, 0x97, 0x9d, 0x31, 0x51, + 0x38, 0x96, 0xdb, 0x84, 0x66, 0xe4, 0x48, 0xe6, 0xb4, + 0x60, 0x0a, 0x31, 0x67, 0x57 ), + PLAINTEXT ( 0x41, 0x4e, 0xc6, 0xb1, 0x49, 0xe5, 0x47, 0x35, 0x30, + 0x2d, 0xad, 0xa8, 0x88, 0xb9, 0x8b, 0x7f, 0xdb, 0x4c, + 0x12, 0x7c ), + CIPHERTEXT ( 0xe4, 0xd3, 0xf4, 0x89, 0x8c, 0xb3, 0xd9, 0x73, 0x26, + 0x41, 0xd1, 0xf8, 0xd9, 0xd8, 0x89, 0xb2, 0xc9, 0x8a, + 0xf9, 0x30 ), + AUTH ( 0x76, 0xd4, 0xfb, 0xb6, 0x9d, 0x52, 0x9b, 0x64, 0x17, 0x5b, + 0x32, 0x8b, 0xe0, 0x0b, 0x10, 0x68 ) ); + +/* AES-GCM test case 36 */ +CIPHER_TEST ( wycheproof_aes_gcm_507e4bb7, &aes_gcm_algorithm, + KEY ( 0x01, 0x84, 0x2c, 0x51, 0xb9, 0x94, 0x3d, 0xa4, 0xec, 0x4e, + 0xff, 0xc0, 0x57, 0xf8, 0xc3, 0xe3 ), + IV ( 0x0d, 0x5b, 0xf8, 0xad, 0xe3, 0x8e, 0xd3, 0x84, 0x86, 0x18, + 0x39, 0xb8 ), + ADDITIONAL ( 0xe2, 0xb0, 0xc0, 0x47, 0xee, 0x9a, 0x7e, 0xbd, 0xe0, + 0xbc, 0x5c, 0x2a, 0x77, 0x3f, 0x02, 0x70, 0x3f, 0x25, + 0x26, 0x22, 0x6d, 0x7f, 0xd7, 0x21, 0xa6, 0xbd, 0xae, + 0x1d, 0x97, 0x01, 0xda, 0x98, 0x6d, 0xb6, 0xc9, 0xbf, + 0x22, 0x4f, 0x03, 0x29, 0x47, 0xbb, 0xcc, 0x40, 0xb2, + 0x69, 0xe4, 0x0c, 0x7a, 0x4f, 0xc1, 0xa3, 0xd6, 0x67, + 0xcf, 0x63, 0x79, 0x84, 0x3e, 0xcc, 0x3b, 0x9d, 0x06, + 0x64, 0xdc, 0xde, 0x0d, 0xfe, 0x8d, 0x80, 0x3a, 0xa8, + 0xe1, 0x4a, 0x59, 0xcf, 0xea, 0x1c, 0xc5, 0x8b, 0xd9, + 0x3e, 0x8a, 0x54, 0xd5, 0x93, 0x62, 0x29, 0xa2, 0x1c, + 0x49, 0x7b, 0xd7, 0x5c, 0x45, 0x34, 0xe1, 0x94, 0x80, + 0xb2, 0xa5, 0x0a, 0xe8, 0xde, 0x0b, 0x90, 0x6f, 0x75, + 0xc1, 0xdc, 0xf7, 0x37, 0xb5, 0x17, 0x9d, 0xaf, 0x75, + 0x1c, 0x3d, 0x6f, 0x51, 0xa1, 0x11, 0x1c, 0x48, 0x65, + 0x13, 0x93, 0x93, 0xee, 0x95, 0x96, 0x33, 0x93, 0xa8, + 0xf9, 0x80, 0x05, 0x54, 0x67, 0x59, 0x56, 0x5b, 0xaf, + 0x95, 0xbe, 0x23, 0x34, 0xe5, 0x7f, 0x7c, 0x23, 0x27, + 0x2c, 0x9e, 0xca, 0x77, 0x8d, 0x99, 0x56, 0xee, 0x16, + 0xb1, 0x87, 0xfe, 0x30, 0x9d, 0x9e, 0x1e, 0x69, 0x9c, + 0x1a, 0x8a, 0xcd, 0xf3, 0x70, 0xfb, 0xca, 0xb3, 0x7b, + 0x1e, 0x10, 0x79, 0x34, 0xbb, 0x15, 0x69, 0x87, 0xa2, + 0x82, 0xbd, 0xef, 0x9f, 0x9a, 0x92, 0x75, 0x84, 0x74, + 0xd8, 0x08, 0xa3, 0xe3, 0xb1, 0x91, 0xa6, 0x47, 0x6f, + 0x3e, 0x6e, 0xd4, 0x9d, 0xc0, 0x84, 0x51, 0xe3, 0x40, + 0x4e, 0x65, 0x91, 0x8f, 0xdb, 0xa3, 0x3b, 0xa8, 0xea, + 0x3b, 0xa0, 0x9b, 0x56, 0x69, 0xb4, 0xbe, 0x9a, 0x64, + 0xb9, 0x3b, 0xae, 0x5d, 0xe6, 0x62, 0xb8, 0xf3, 0x5d, + 0x4a, 0xbb, 0xb6, 0x81, 0x18, 0xde, 0x9d, 0x02, 0x5e, + 0xbe, 0xb5, 0x99, 0xa9, 0xcd, 0x2b, 0x0e, 0x35, 0xfd, + 0x82, 0xaa, 0x0d, 0xf2, 0xd4, 0x3b, 0x60, 0xa6, 0x15, + 0x12, 0xd5, 0xaf, 0x93, 0x44, 0x89, 0x30, 0x25, 0x72, + 0xf9, 0x28, 0xb7, 0x90, 0xe6, 0xaa, 0xdf, 0xf6, 0xb7, + 0x30, 0x4b, 0x1a, 0x40, 0x80, 0xcc, 0x4f, 0xaf, 0x8c, + 0x69, 0x8d, 0xaa, 0x30, 0x45, 0xc9, 0x45, 0xd8, 0x28, + 0xd9, 0x15, 0xda, 0x6d, 0xda, 0x06, 0x62, 0x54, 0x5f, + 0x7d, 0x85, 0x29, 0x7a, 0x36, 0x43, 0x8e, 0xa7, 0x31, + 0x5a, 0x48, 0xd9, 0xa0, 0x97, 0x14, 0x07, 0x76, 0xf3, + 0xc4, 0x3d, 0x28, 0xf5, 0x22, 0xf8, 0xaf, 0xa0, 0x30, + 0x00, 0xc5, 0xa0, 0x19, 0x2b, 0x5f, 0xb7, 0x76, 0xb3, + 0xbd, 0x06, 0xd3, 0xd9, 0xc5, 0x2c, 0x87, 0x3f, 0xcc, + 0xb0, 0xec, 0xd1, 0xa8, 0xe1, 0x41, 0x87, 0xae, 0x26, + 0x21, 0xd2, 0xe2, 0x84, 0x8a, 0xe3, 0x0a, 0xf7, 0xed, + 0x07, 0x58, 0xfd, 0xbb, 0xc4, 0x97, 0xaa, 0x69, 0xd5, + 0x84, 0x41, 0xf4, 0xd4, 0xb8, 0xea, 0x13, 0xaa, 0xac, + 0x97, 0xc4, 0xbf, 0xfc, 0x4d, 0x07, 0xdb, 0xc6, 0x2a, + 0xe2, 0x7f, 0x00, 0xa8, 0xdb, 0x0c, 0x5d, 0x1b, 0xb2, + 0x40, 0x42, 0x48, 0x13, 0x69, 0xf6, 0xcc, 0xd4, 0xdf, + 0x85, 0xd9, 0xc5, 0x8a, 0x90, 0x06, 0x98, 0x97, 0xe1, + 0x7a, 0xe0, 0x33, 0x42, 0x48, 0xe1, 0x33, 0x06, 0xa9, + 0x36, 0x69, 0x7d, 0x2b, 0x5d, 0xad, 0xde, 0x5a, 0xc6, + 0xc1, 0x0b, 0x55, 0x4b, 0x6b, 0xbd, 0x27, 0x75, 0x21, + 0x01, 0xb5, 0xdf, 0x1f, 0x1c, 0xbb, 0x8c, 0x0e, 0xc1, + 0x97, 0x7c, 0x45, 0x81, 0xab, 0x8d, 0xcd, 0x26, 0xa3, + 0x1d, 0xff, 0x01, 0x43, 0x37, 0x85, 0x20, 0x6b, 0x65, + 0x95, 0xe3, 0xb8, 0x24, 0xb5, 0x83, 0x42, 0x95, 0x40, + 0x7f, 0x50, 0x27, 0x15, 0x9e, 0xee, 0x46, 0x18, 0x9f, + 0x39, 0x05, 0x37, 0xdd, 0xce, 0x6d, 0xb5 ), + PLAINTEXT ( 0xdf, 0xc4, 0x0c, 0xf3, 0x87, 0x38, 0x67, 0x51, 0x20, + 0xf0, 0x3b, 0x12, 0x50, 0x55, 0x89, 0xb2, 0xf0, 0x2b, + 0xba, 0x68 ), + CIPHERTEXT ( 0xe4, 0x03, 0x53, 0x56, 0xa3, 0x4b, 0xb0, 0x1e, 0xa6, + 0x5c, 0x7e, 0x6d, 0x97, 0x2c, 0xb4, 0xce, 0xc0, 0x25, + 0x2a, 0x79 ), + AUTH ( 0x10, 0x54, 0xef, 0x6b, 0xc0, 0xa5, 0x15, 0x64, 0x45, 0xcf, + 0x76, 0x0a, 0x2a, 0x65, 0xd8, 0x47 ) ); + +/* AES-GCM test case 37 */ +CIPHER_TEST ( wycheproof_aes_gcm_a74ffd89, &aes_gcm_algorithm, + KEY ( 0x67, 0xbd, 0x1f, 0xe8, 0x3e, 0x45, 0x00, 0xdd, 0xae, 0xa7, + 0x21, 0x03, 0x5d, 0x4c, 0xf7, 0xe4 ), + IV ( 0x54, 0x49, 0xb2, 0x93, 0xc8, 0x49, 0xbe, 0x99, 0x41, 0xb1, + 0xfb, 0x3e ), + ADDITIONAL ( 0x18, 0xb8, 0xe9, 0xb1, 0x41, 0x28, 0x8c, 0xa8, 0x91, + 0x60, 0x6a, 0x88, 0x98, 0x70, 0x57, 0xfa, 0x07, 0x8e, + 0xfc, 0x47, 0xc0, 0xe2, 0x70, 0xb3, 0x69, 0x85, 0xc9, + 0x24, 0x50, 0x6e, 0x4f, 0x8e, 0x4a, 0x3d, 0x15, 0x41, + 0xd0, 0x53, 0x5f, 0x51, 0x5a, 0x37, 0x0a, 0x34, 0x00, + 0xe2, 0x40, 0x8f, 0xc9, 0x2d, 0x21, 0x7f, 0x9f, 0x37, + 0xfb, 0x0b, 0x97, 0x2a, 0x3a, 0x76, 0x02, 0xca, 0xc9, + 0x8f, 0x8f, 0x02, 0x31, 0xa4, 0xd7, 0x6c, 0xf5, 0x84, + 0xd9, 0x23, 0x9e, 0xe8, 0x16, 0x76, 0x5c, 0xec, 0xd2, + 0x8f, 0x32, 0x5b, 0x90, 0x7e, 0x0b, 0x02, 0xb2, 0x60, + 0x60, 0x9c, 0x70, 0x22, 0x6a, 0x16, 0xec, 0xd9, 0xbd, + 0x67, 0xa6, 0x4e, 0xa1, 0x2c, 0x4b, 0x24, 0x9c, 0x05, + 0xa9, 0x01, 0x12, 0x94, 0x02, 0x00, 0xdf, 0x3e, 0x70, + 0x51, 0x9a, 0x4b, 0x9e, 0xc1, 0x36, 0xb6, 0xf5, 0x35, + 0xd4, 0xb8, 0xb2, 0xae, 0x16, 0xc5, 0xa5, 0x4c, 0xb8, + 0xc5, 0x7d, 0x87, 0x45, 0x16, 0x97, 0xe5, 0x10, 0x1e, + 0x1d, 0x09, 0xa9, 0x4d, 0x21, 0x17, 0xb3, 0x0c, 0xe9, + 0x0c, 0x36, 0x85, 0x11, 0x7e, 0x21, 0x94, 0xa3, 0x79, + 0xe7, 0xa5, 0x75, 0x4d, 0xa2, 0x01, 0x79, 0x58, 0x2f, + 0x97, 0x76, 0x7e, 0x63, 0x3d, 0x14, 0x11, 0x85, 0xfe, + 0x37, 0x84, 0xa4, 0x4d, 0x94, 0x21, 0x0b, 0x21, 0x47, + 0x68, 0xaa, 0x51, 0x11, 0x7e, 0xd5, 0xc8, 0x80, 0x61, + 0x36, 0x23, 0xe4, 0xaa, 0xbb, 0xb6, 0x47, 0x72, 0x17, + 0x64, 0xa5, 0x13, 0x42, 0x5b, 0x8d, 0x90, 0xd4, 0x18, + 0x96, 0x51, 0xf1, 0x52, 0x9e, 0x68, 0x84, 0x66, 0xd8, + 0xab, 0xed, 0x49, 0xe2, 0xa5, 0xf0, 0xf4, 0x49, 0x3b, + 0x87, 0x8d, 0x41, 0x69, 0x84, 0x85, 0x47, 0xf5, 0x91, + 0x27, 0x76, 0x31, 0xf1, 0xfe, 0xd6, 0xc9, 0x7d, 0x16, + 0x7f, 0x8b, 0xaa, 0x68, 0x92, 0x0a, 0x2b, 0x02, 0x20, + 0xd2, 0xad, 0x5a, 0xe6, 0x5c, 0xd0, 0x9d, 0xcb, 0xbf, + 0xab, 0x42, 0xbc, 0x66, 0x68, 0x67, 0x37, 0x8e, 0x40, + 0xfd, 0x3c, 0xed, 0x97, 0x19, 0xa7, 0x66, 0x59, 0xba, + 0x22, 0x21, 0x3a, 0x5a, 0x23, 0xe3, 0x0a, 0xee, 0xef, + 0x99, 0x51, 0x64, 0x88, 0x32, 0x99, 0xe7, 0xdd, 0x6f, + 0xff, 0x16, 0x17, 0xb4, 0x28, 0x7c, 0x31, 0x97, 0xcb, + 0x3b, 0x1a, 0xbd, 0x54, 0xb2, 0xf0, 0xca, 0x57, 0x3b, + 0x1a, 0x46, 0x77, 0xa0, 0x54, 0xf1, 0x23, 0x2c, 0xd1, + 0x98, 0x03, 0x63, 0x3f, 0xe5, 0x7b, 0x04, 0x1c, 0x76, + 0x8d, 0xf7, 0xc3, 0x50, 0x63, 0x13, 0xe7, 0xea, 0xa3, + 0x65, 0x62, 0x48, 0x33, 0xbe, 0xcd, 0x76, 0x8f, 0xcc, + 0x4a, 0x31, 0xad, 0xe9, 0x32, 0xe7, 0x1a, 0xde, 0x8c, + 0xcb, 0xf4, 0x00, 0xb3, 0xaa, 0x2d, 0x32, 0x89, 0x1a, + 0x4a, 0x17, 0x3f, 0xb7, 0x49, 0x8c, 0x95, 0x64, 0xc8, + 0x9b, 0x70, 0x54, 0x8f, 0xd4, 0x95, 0xac, 0x2e, 0xa8, + 0x5c, 0x4b, 0xed, 0xb4, 0xc9, 0x13, 0x6d, 0x1a, 0x0a, + 0x6c, 0x16, 0x18, 0xc4, 0xf1, 0xaa, 0x8e, 0x61, 0x9f, + 0xef, 0x76, 0x5e, 0x1c, 0x74, 0x10, 0xf8, 0x6c, 0xd8, + 0xae, 0x7d, 0x0b, 0x7e, 0xd2, 0x89, 0x47, 0x43, 0x3c, + 0xd0, 0xff, 0x64, 0xf5, 0xf9, 0x02, 0x98, 0x16, 0xd6, + 0x10, 0x80, 0x23, 0x7f, 0x09, 0x9a, 0xad, 0x2f, 0x85, + 0x20, 0xf2, 0x5d, 0x76, 0x85, 0xcc, 0x18, 0x93, 0xb3, + 0xe8, 0xda, 0x3a, 0xaf, 0xdb, 0x38, 0x84, 0x6b, 0x67, + 0x58, 0xee, 0x02, 0xb5, 0xc5, 0xac, 0x89, 0x9b, 0x2c, + 0x07, 0x38, 0x45, 0x3b, 0xe2, 0xa8, 0x3b, 0x87, 0x9f, + 0x97, 0xcb, 0xad, 0x8e, 0x21, 0x47, 0x86, 0xfb, 0x2a, + 0x83, 0x6c, 0x74, 0xe0, 0x6e, 0xf1, 0x90, 0x02, 0x2f, + 0x4b, 0x55, 0x57, 0x69, 0x4c, 0x25, 0x4b, 0xc7 ), + PLAINTEXT ( 0xc2, 0x59, 0x15, 0x19, 0x09, 0xcc, 0x04, 0x80, 0xab, + 0xba, 0xe3, 0xf7, 0xfb, 0x6b, 0xea, 0xc9, 0x22, 0x58, + 0xd3, 0x7d ), + CIPHERTEXT ( 0x2c, 0xcc, 0x82, 0x4b, 0x0c, 0x0b, 0x59, 0x3f, 0xae, + 0xef, 0xf2, 0x42, 0x4f, 0x3a, 0x64, 0xb1, 0xdc, 0xd0, + 0x8c, 0x07 ), + AUTH ( 0xe5, 0x2d, 0x78, 0x83, 0x66, 0x66, 0x33, 0x3b, 0x2f, 0xe5, + 0x9d, 0xdc, 0x5d, 0x6f, 0x26, 0x4d ) ); + +/* AES-GCM test case 38 */ +CIPHER_TEST ( wycheproof_aes_gcm_876dc2f0, &aes_gcm_algorithm, + KEY ( 0xe7, 0xe0, 0x82, 0x7a, 0x58, 0x2b, 0x94, 0x68, 0x28, 0xcb, + 0x6d, 0xf0, 0xd1, 0xc4, 0x61, 0x7e ), + IV ( 0x3a, 0x40, 0x31, 0x92, 0x06, 0x4a, 0x51, 0xdf, 0x71, 0xa3, + 0x55, 0x4f ), + ADDITIONAL ( 0x05, 0x3d, 0x34, 0x68, 0xb4, 0xd0, 0xa5, 0xa6, 0xa1, + 0x2d, 0xff, 0x01, 0x7c, 0x40, 0x21, 0x8c, 0x2f, 0x99, + 0x01, 0x58, 0xc5, 0x0a, 0x95, 0x50, 0x31, 0x30, 0xbb, + 0x92, 0xa5, 0xd7, 0x61, 0x59, 0x73, 0xec, 0x88, 0x27, + 0x04, 0x3b, 0x29, 0x22, 0x2e, 0x15, 0x71, 0x3f, 0xb9, + 0xa5, 0x8d, 0xb9, 0x0a, 0x39, 0x7d, 0x31, 0xb1, 0x6e, + 0x21, 0xb3, 0xbe, 0xfd, 0x3d, 0x66, 0xd8, 0x99, 0x03, + 0x12, 0xb3, 0xf7, 0xad, 0xa3, 0xf3, 0x9a, 0xbb, 0xe9, + 0x2e, 0x17, 0xa1, 0xa6, 0x6d, 0x6a, 0x29, 0x05, 0x34, + 0xb3, 0x11, 0x02, 0x87, 0x91, 0x5b, 0x08, 0xf4, 0x74, + 0x31, 0xa1, 0xbf, 0xb9, 0xc8, 0x23, 0xe5, 0x4a, 0x16, + 0xb2, 0x87, 0xa5, 0x7d, 0x4c, 0x34, 0x63, 0xc8, 0x38, + 0xc4, 0x62, 0xdc, 0x78, 0x98, 0xa3, 0xd7, 0xf5, 0xf6, + 0x53, 0xa9, 0x45, 0x74, 0x4d, 0xbb, 0x12, 0x6b, 0xd2, + 0x18, 0x02, 0xe4, 0x68, 0x4a, 0xd7, 0xdc, 0x90, 0x39, + 0x1b, 0x8b, 0x80, 0x00, 0x34, 0x3d, 0xb3, 0x37, 0x14, + 0x5b, 0xf1, 0x7f, 0xe3, 0x1f, 0xdc, 0x43, 0x41, 0x63, + 0xee, 0x6a, 0xe4, 0x4a, 0xda, 0x02, 0xde, 0x61, 0x92, + 0xbd, 0xa5, 0x70, 0x18, 0xdd, 0xe5, 0xba, 0x1f, 0x59, + 0x72, 0x1b, 0x45, 0x83, 0x96, 0x8e, 0xfe, 0x86, 0x13, + 0x81, 0x6c, 0x35, 0x02, 0xac, 0x1b, 0x1e, 0xf1, 0x62, + 0xd0, 0x08, 0x5f, 0x8d, 0xf3, 0x7b, 0x34, 0x36, 0xd1, + 0x4c, 0xc5, 0x46, 0x84, 0xe8, 0x98, 0xfc, 0xb6, 0x95, + 0xf1, 0x5a, 0x59, 0xd7, 0xdf, 0x60, 0xea, 0xa0, 0x28, + 0x38, 0x8d, 0x7f, 0xdc, 0xa2, 0xbb, 0xd9, 0x0e, 0x07, + 0xa1, 0xa0, 0x22, 0x81, 0xdc, 0x85, 0xe0, 0x0d, 0x83, + 0x75, 0x0b, 0xef, 0x47, 0xfe, 0x02, 0x56, 0xb2, 0x3c, + 0xcd, 0x83, 0xc8, 0x64, 0xe8, 0x61, 0x9b, 0x7b, 0x7e, + 0x75, 0xc9, 0xb2, 0x48, 0x14, 0xe6, 0x53, 0x3c, 0x4f, + 0x78, 0x55, 0xe4, 0xfa, 0x21, 0xde, 0x07, 0x47, 0xc6, + 0x47, 0x95, 0xaa, 0xc0, 0x15, 0xab, 0x53, 0x2d, 0x03, + 0x3e, 0x20, 0x58, 0x98, 0xa7, 0x51, 0x1d, 0xa3, 0x2f, + 0x89, 0x8d, 0xae, 0xd3, 0x83, 0xa4, 0x83, 0x14, 0xdb, + 0x35, 0xf7, 0x5e, 0x7b, 0xf1, 0x2c, 0x7a, 0x99, 0xe5, + 0x0e, 0xb8, 0xdc, 0x93, 0xf8, 0x70, 0x06, 0x24, 0x43, + 0x82, 0x11, 0xcd, 0xa8, 0x64, 0x23, 0xcf, 0xde, 0x8d, + 0x18, 0x3a, 0xe5, 0xd6, 0xad, 0x70, 0x13, 0x37, 0x53, + 0xe4, 0x0f, 0x73, 0x65, 0x2d, 0xfd, 0x03, 0x07, 0x4f, + 0xee, 0x03, 0x4c, 0xe6, 0xd1, 0x6c, 0xcf, 0xc0, 0xb3, + 0x34, 0x1a, 0x9e, 0xc1, 0x8e, 0x63, 0x08, 0x72, 0xf6, + 0x25, 0xe0, 0x41, 0x29, 0x17, 0x33, 0x13, 0xee, 0x22, + 0xb1, 0xcb, 0xcb, 0xd9, 0x0e, 0xe7, 0x4c, 0x50, 0x19, + 0x17, 0x3e, 0xed, 0x3a, 0xb2, 0xa4, 0x7f, 0x16, 0xc8, + 0x67, 0x2e, 0x44, 0x9e, 0x06, 0xe3, 0xbe, 0xc4, 0xd0, + 0x59, 0x71, 0xfe, 0x8e, 0xba, 0x75, 0x2d, 0x5d, 0x96, + 0x2e, 0x6e, 0x7d, 0x27, 0x40, 0x84, 0x64, 0x44, 0x1b, + 0x3d, 0xb1, 0x88, 0x04, 0xfc, 0x1e, 0x5c, 0x42, 0x8e, + 0x97, 0x06, 0x88, 0xd8, 0xc5, 0x5f, 0x29, 0x80, 0xf3, + 0x0a, 0x6b, 0x86, 0x03, 0x4a, 0xd2, 0xf7, 0x9a, 0x76, + 0xef, 0x44, 0xc8, 0xd8, 0x16, 0x34, 0x5a, 0x62, 0x70, + 0xc1, 0x5c, 0x79, 0xde, 0xeb, 0xf3, 0xdc, 0xbc, 0x1a, + 0x1a, 0x96, 0x8d, 0x31, 0x8b, 0x6c, 0xcc, 0xc0, 0x9a, + 0xb7, 0x55, 0xcb, 0xe0, 0xf6, 0xff, 0x4c, 0x23, 0x71, + 0x09, 0x35, 0xa4, 0xea, 0x5b, 0xca, 0xb5, 0x1c, 0x30, + 0x74, 0x54, 0xfb, 0xa5, 0x6c, 0xef, 0x13, 0x08, 0xb7, + 0xcf, 0x07, 0x38, 0x62, 0x69, 0x64, 0xae, 0x7d, 0x2b, + 0x65, 0xad, 0x54, 0xd5, 0x28, 0x72, 0x69, 0x9b, 0x96 ), + PLAINTEXT ( 0x65, 0xe0, 0x00, 0x7f, 0x93, 0x22, 0x55, 0x99, 0xdf, + 0xc5, 0x91, 0x07, 0x72, 0x0c, 0x50, 0x3c, 0x01, 0x58, + 0xf3, 0xf4 ), + CIPHERTEXT ( 0x33, 0x6c, 0x3b, 0x00, 0x80, 0xeb, 0x95, 0x48, 0x0e, + 0x67, 0x13, 0x66, 0xbe, 0x55, 0x08, 0xb1, 0xfe, 0x6a, + 0xb1, 0x4e ), + AUTH ( 0x63, 0x27, 0x8e, 0x17, 0x81, 0xfa, 0xd9, 0x31, 0x31, 0xec, + 0xfd, 0x61, 0x92, 0x75, 0x89, 0x0c ) ); + +/* AES-GCM test case 39 */ +CIPHER_TEST ( wycheproof_aes_gcm_0e57609d, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00 ), + ADDITIONAL(), + PLAINTEXT ( 0xeb, 0xd4, 0xa3, 0xe1, 0x0c, 0xf6, 0xd4, 0x1c, 0x50, + 0xae, 0xae, 0x00, 0x75, 0x63, 0xb0, 0x72 ), + CIPHERTEXT ( 0xf6, 0x2d, 0x84, 0xd6, 0x49, 0xe5, 0x6b, 0xc8, 0xcf, + 0xed, 0xc5, 0xd7, 0x4a, 0x51, 0xe2, 0xf7 ), + AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) ); + +/* AES-GCM test case 40 */ +CIPHER_TEST ( wycheproof_aes_gcm_5b8dd48a, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff ), + ADDITIONAL(), + PLAINTEXT ( 0xd5, 0x93, 0xc4, 0xd8, 0x22, 0x4f, 0x1b, 0x10, 0x0c, + 0x35, 0xe4, 0xf6, 0xc4, 0x00, 0x65, 0x43 ), + CIPHERTEXT ( 0x43, 0x1f, 0x31, 0xe6, 0x84, 0x09, 0x31, 0xfd, 0x95, + 0xf9, 0x4b, 0xf8, 0x82, 0x96, 0xff, 0x69 ), + AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) ); + +/* AES-GCM test case 41 (skipped: modified tag) */ + +/* AES-GCM test case 42 (skipped: modified tag) */ + +/* AES-GCM test case 43 (skipped: modified tag) */ + +/* AES-GCM test case 44 (skipped: modified tag) */ + +/* AES-GCM test case 45 (skipped: modified tag) */ + +/* AES-GCM test case 46 (skipped: modified tag) */ + +/* AES-GCM test case 47 (skipped: modified tag) */ + +/* AES-GCM test case 48 (skipped: modified tag) */ + +/* AES-GCM test case 49 (skipped: modified tag) */ + +/* AES-GCM test case 50 (skipped: modified tag) */ + +/* AES-GCM test case 51 (skipped: modified tag) */ + +/* AES-GCM test case 52 (skipped: modified tag) */ + +/* AES-GCM test case 53 (skipped: modified tag) */ + +/* AES-GCM test case 54 (skipped: modified tag) */ + +/* AES-GCM test case 55 (skipped: modified tag) */ + +/* AES-GCM test case 56 (skipped: modified tag) */ + +/* AES-GCM test case 57 (skipped: modified tag) */ + +/* AES-GCM test case 58 (skipped: modified tag) */ + +/* AES-GCM test case 59 (skipped: modified tag) */ + +/* AES-GCM test case 60 (skipped: modified tag) */ + +/* AES-GCM test case 61 (skipped: modified tag) */ + +/* AES-GCM test case 62 (skipped: modified tag) */ + +/* AES-GCM test case 63 (skipped: modified tag) */ + +/* AES-GCM test case 64 (skipped: modified tag) */ + +/* AES-GCM test case 65 (skipped: modified tag) */ + +/* AES-GCM test case 66 (skipped: modified tag) */ + +/* AES-GCM test case 67 (skipped: modified tag) */ + +/* AES-GCM test case 68 */ +CIPHER_TEST ( wycheproof_aes_gcm_15eae47a, &aes_gcm_algorithm, + KEY ( 0xaa, 0x02, 0x3d, 0x04, 0x78, 0xdc, 0xb2, 0xb2, 0x31, 0x24, + 0x98, 0x29, 0x3d, 0x9a, 0x91, 0x29 ), + IV ( 0x04, 0x32, 0xbc, 0x49, 0xac, 0x34, 0x41, 0x20 ), + ADDITIONAL ( 0xaa, 0xc3, 0x92, 0x31, 0x12, 0x98, 0x72, 0xa2 ), + PLAINTEXT ( 0x20, 0x35, 0xaf, 0x31, 0x3d, 0x13, 0x46, 0xab, 0x00, + 0x15, 0x4f, 0xea, 0x78, 0x32, 0x21, 0x05 ), + CIPHERTEXT ( 0x64, 0xc3, 0x6b, 0xb3, 0xb7, 0x32, 0x03, 0x4e, 0x3a, + 0x7d, 0x04, 0xef, 0xc5, 0x19, 0x77, 0x85 ), + AUTH ( 0xb7, 0xd0, 0xdd, 0x70, 0xb0, 0x0d, 0x65, 0xb9, 0x7c, 0xfd, + 0x08, 0x0f, 0xf4, 0xb8, 0x19, 0xd1 ) ); + +/* AES-GCM test case 69 */ +CIPHER_TEST ( wycheproof_aes_gcm_5bf301b1, &aes_gcm_algorithm, + KEY ( 0xf3, 0x43, 0x47, 0x25, 0xc8, 0x2a, 0x7f, 0x8b, 0xb0, 0x7d, + 0xf1, 0xf8, 0x12, 0x2f, 0xb6, 0xc9 ), + IV ( 0x28, 0xe9, 0xb7, 0x85, 0x17, 0x24, 0xba, 0xe3 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x44, 0xac, 0xa0, 0x0f, 0x42, 0xe4, 0x19, 0x9b, 0x82, 0x9a, + 0x55, 0xe6, 0x9b, 0x07, 0x3d, 0x9e ) ); + +/* AES-GCM test case 70 */ +CIPHER_TEST ( wycheproof_aes_gcm_6d9ec3c9, &aes_gcm_algorithm, + KEY ( 0xde, 0xb6, 0x22, 0x33, 0x55, 0x9b, 0x57, 0x47, 0x66, 0x02, + 0xb5, 0xad, 0xac, 0x57, 0xc7, 0x7f ), + IV ( 0xd0, 0x84, 0x54, 0x7d, 0xe5, 0x5b, 0xbc, 0x15 ), + ADDITIONAL(), + PLAINTEXT ( 0xd8, 0x98, 0x6d, 0xf0, 0x24, 0x1e, 0xd3, 0x29, 0x75, + 0x82, 0xc0, 0xc2, 0x39, 0xc7, 0x24, 0xcb ), + CIPHERTEXT ( 0x03, 0xe1, 0xa1, 0x68, 0xa7, 0xe3, 0x77, 0xa9, 0x13, + 0x87, 0x9b, 0x29, 0x6a, 0x1b, 0x5f, 0x9c ), + AUTH ( 0x32, 0x90, 0xaa, 0x95, 0xaf, 0x50, 0x5a, 0x74, 0x2f, 0x51, + 0x7f, 0xab, 0xcc, 0x9b, 0x20, 0x94 ) ); + +/* AES-GCM test case 71 */ +CIPHER_TEST ( wycheproof_aes_gcm_5e73e414, &aes_gcm_algorithm, + KEY ( 0x20, 0x34, 0xa8, 0x25, 0x47, 0x27, 0x6c, 0x83, 0xdd, 0x32, + 0x12, 0xa8, 0x13, 0x57, 0x2b, 0xce ), + IV ( 0x32, 0x54, 0x20, 0x2d, 0x85, 0x47, 0x34, 0x81, 0x23, 0x98, + 0x12, 0x7a, 0x3d, 0x13, 0x44, 0x21 ), + ADDITIONAL ( 0x1a, 0x02, 0x93, 0xd8, 0xf9, 0x02, 0x19, 0x05, 0x89, + 0x02, 0x13, 0x90, 0x13, 0x90, 0x81, 0x90, 0xbc, 0x49, + 0x08, 0x90, 0xd3, 0xff, 0x12, 0xa3 ), + PLAINTEXT ( 0x02, 0xef, 0xd2, 0xe5, 0x78, 0x23, 0x12, 0x82, 0x7e, + 0xd5, 0xd2, 0x30, 0x18, 0x9a, 0x2a, 0x34, 0x2b, 0x27, + 0x7c, 0xe0, 0x48, 0x46, 0x21, 0x93 ), + CIPHERTEXT ( 0x64, 0x06, 0x9c, 0x2d, 0x58, 0x69, 0x05, 0x61, 0xf2, + 0x7e, 0xe1, 0x99, 0xe6, 0xb4, 0x79, 0xb6, 0x36, 0x9e, + 0xec, 0x68, 0x86, 0x72, 0xbd, 0xe9 ), + AUTH ( 0x9b, 0x7a, 0xba, 0xdd, 0x6e, 0x69, 0xc1, 0xd9, 0xec, 0x92, + 0x57, 0x86, 0x53, 0x4f, 0x50, 0x75 ) ); + +/* AES-GCM test case 72 */ +CIPHER_TEST ( wycheproof_aes_gcm_d5198faa, &aes_gcm_algorithm, + KEY ( 0xb6, 0x7b, 0x1a, 0x6e, 0xfd, 0xd4, 0x0d, 0x37, 0x08, 0x0f, + 0xbe, 0x8f, 0x80, 0x47, 0xae, 0xb9 ), + IV ( 0xfa, 0x29, 0x4b, 0x12, 0x99, 0x72, 0xf7, 0xfc, 0x5b, 0xbd, + 0x5b, 0x96, 0xbb, 0xa8, 0x37, 0xc9 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xa2, 0xcf, 0x26, 0x48, 0x15, 0x17, 0xec, 0x25, 0x08, 0x5c, + 0x5b, 0x17, 0xd0, 0x78, 0x61, 0x83 ) ); + +/* AES-GCM test case 73 */ +CIPHER_TEST ( wycheproof_aes_gcm_ab750cbd, &aes_gcm_algorithm, + KEY ( 0x20, 0x9e, 0x6d, 0xbf, 0x2a, 0xd2, 0x6a, 0x10, 0x54, 0x45, + 0xfc, 0x02, 0x07, 0xcd, 0x9e, 0x9a ), + IV ( 0x94, 0x77, 0x84, 0x9d, 0x6c, 0xcd, 0xfc, 0xa1, 0x12, 0xd9, + 0x2e, 0x53, 0xfa, 0xe4, 0xa7, 0xca ), + ADDITIONAL(), + PLAINTEXT ( 0x01 ), + CIPHERTEXT ( 0xfd ), + AUTH ( 0x03, 0x2d, 0xf7, 0xbb, 0xa5, 0xd8, 0xea, 0x1a, 0x14, 0xf1, + 0x6f, 0x70, 0xbd, 0x0e, 0x14, 0xec ) ); + +/* AES-GCM test case 74 */ +CIPHER_TEST ( wycheproof_aes_gcm_ea79dc25, &aes_gcm_algorithm, + KEY ( 0xa5, 0x49, 0x44, 0x2e, 0x35, 0x15, 0x40, 0x32, 0xd0, 0x7c, + 0x86, 0x66, 0x00, 0x6a, 0xa6, 0xa2 ), + IV ( 0x51, 0x71, 0x52, 0x45, 0x68, 0xe8, 0x1d, 0x97, 0xe8, 0xc4, + 0xde, 0x4b, 0xa5, 0x6c, 0x10, 0xa0 ), + ADDITIONAL(), + PLAINTEXT ( 0x11, 0x82, 0xe9, 0x35, 0x96, 0xca, 0xc5, 0x60, 0x89, + 0x46, 0x40, 0x0b, 0xc7, 0x3f, 0x3a ), + CIPHERTEXT ( 0x2f, 0x33, 0x30, 0x87, 0xbd, 0xca, 0x58, 0x21, 0x9f, + 0x9b, 0xfc, 0x27, 0x3e, 0x45, 0xcc ), + AUTH ( 0xe0, 0x6d, 0x1e, 0xf4, 0x73, 0x13, 0x29, 0x57, 0xad, 0x37, + 0xea, 0xef, 0x29, 0x73, 0x3c, 0xa0 ) ); + +/* AES-GCM test case 75 */ +CIPHER_TEST ( wycheproof_aes_gcm_3397c9ae, &aes_gcm_algorithm, + KEY ( 0xcf, 0xb4, 0xc2, 0x6f, 0x12, 0x6f, 0x6a, 0x0a, 0xcb, 0x8e, + 0x4e, 0x22, 0x0f, 0x6c, 0x56, 0xcd ), + IV ( 0x12, 0x75, 0x11, 0x54, 0x99, 0xae, 0x72, 0x22, 0x68, 0x51, + 0x5b, 0xf0, 0xc1, 0x64, 0xb4, 0x9c ), + ADDITIONAL(), + PLAINTEXT ( 0x09, 0xdf, 0xd7, 0xf0, 0x80, 0x27, 0x52, 0x57, 0xcf, + 0x97, 0xe7, 0x6f, 0x96, 0x6b, 0x1a, 0xd9 ), + CIPHERTEXT ( 0xa7, 0x80, 0xbd, 0x01, 0xc8, 0x08, 0x85, 0x15, 0x6c, + 0x88, 0xa9, 0x73, 0x26, 0x4c, 0x8e, 0xe5 ), + AUTH ( 0x2a, 0xde, 0xff, 0xa6, 0x82, 0xc8, 0xd8, 0xa8, 0x1f, 0xad, + 0xa7, 0xd9, 0xfc, 0xdd, 0x2e, 0xe2 ) ); + +/* AES-GCM test case 76 */ +CIPHER_TEST ( wycheproof_aes_gcm_347e1695, &aes_gcm_algorithm, + KEY ( 0x0b, 0x11, 0xef, 0x3a, 0x08, 0xc0, 0x29, 0x70, 0xf7, 0x42, + 0x81, 0xc8, 0x60, 0x69, 0x1c, 0x75 ), + IV ( 0x95, 0xc1, 0xdd, 0x8c, 0x0f, 0x17, 0x05, 0xec, 0xe6, 0x89, + 0x37, 0x90, 0x1f, 0x7a, 0xdd, 0x7b ), + ADDITIONAL(), + PLAINTEXT ( 0xf6, 0x93, 0xd4, 0xed, 0xd8, 0x25, 0xdb, 0xb0, 0x61, + 0x8d, 0x91, 0x11, 0x31, 0x28, 0x88, 0x0d, 0xbe, 0xbb, + 0x23, 0xe2, 0x5d, 0x00, 0xed, 0x1f, 0x07, 0x7d, 0x87, + 0x0b, 0xe9, 0xcc, 0x75, 0x36 ), + CIPHERTEXT ( 0x7e, 0x47, 0xe1, 0x0f, 0xe3, 0xc6, 0xfb, 0xfa, 0x38, + 0x17, 0x70, 0xea, 0xf5, 0xd4, 0x8d, 0x14, 0x82, 0xe7, + 0x1e, 0x0c, 0x44, 0xdf, 0xf1, 0xe3, 0x0c, 0xa6, 0xf9, + 0x5d, 0x92, 0x05, 0x20, 0x84 ), + AUTH ( 0xd0, 0x14, 0x44, 0xfa, 0x5d, 0x9c, 0x49, 0x96, 0x29, 0xd1, + 0x74, 0xff, 0x39, 0x27, 0xa1, 0xac ) ); + +/* AES-GCM test case 77 */ +CIPHER_TEST ( wycheproof_aes_gcm_63a3e6ca, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0xf9, 0x5f, 0xde, 0x4a, 0x75, 0x19, 0x13, 0x20, 0x2a, 0xee, + 0xee, 0x32, 0xa0, 0xb5, 0x57, 0x53 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x00, 0x07, 0x8d, 0x10, 0x9d, 0x92, 0x14, 0x3f, 0xcd, + 0x5d, 0xf5, 0x67, 0x21, 0xb8, 0x84, 0xfa, 0xc6, 0x4a, + 0xc7, 0x76, 0x2c, 0xc0, 0x9e, 0xea, 0x2a, 0x3c, 0x68, + 0xe9, 0x2a, 0x17, 0xbd, 0xb5, 0x75, 0xf8, 0x7b, 0xda, + 0x18, 0xbe, 0x56, 0x4e ), + AUTH ( 0x15, 0x2a, 0x65, 0x04, 0x5f, 0xe6, 0x74, 0xf9, 0x76, 0x27, + 0x42, 0x7a, 0xf5, 0xbe, 0x22, 0xda ) ); + +/* AES-GCM test case 78 */ +CIPHER_TEST ( wycheproof_aes_gcm_dc6c9702, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x7b, 0x95, 0xb8, 0xc3, 0x56, 0x81, 0x0a, 0x84, 0x71, 0x1d, + 0x68, 0x15, 0x0a, 0x1b, 0x77, 0x50 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x84, 0xd4, 0xc9, 0xc0, 0x8b, 0x4f, 0x48, 0x28, 0x61, + 0xe3, 0xa9, 0xc6, 0xc3, 0x5b, 0xc4, 0xd9, 0x1d, 0xf9, + 0x27, 0x37, 0x45, 0x13, 0xbf, 0xd4, 0x9f, 0x43, 0x6b, + 0xd7, 0x3f, 0x32, 0x52, 0x85, 0xda, 0xef, 0x4f, 0xf7, + 0xe1, 0x3d, 0x46, 0xa6 ), + AUTH ( 0x21, 0x3a, 0x3c, 0xb9, 0x38, 0x55, 0xd1, 0x8e, 0x69, 0x33, + 0x7e, 0xee, 0x66, 0xae, 0xec, 0x07 ) ); + +/* AES-GCM test case 79 */ +CIPHER_TEST ( wycheproof_aes_gcm_942cc802, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x1a, 0x55, 0x2e, 0x67, 0xcd, 0xc4, 0xdc, 0x1a, 0x33, 0xb8, + 0x24, 0x87, 0x4e, 0xbf, 0x0b, 0xed ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x94, 0x8c, 0xa3, 0x7a, 0x8e, 0x66, 0x49, 0xe8, 0x8a, + 0xef, 0xfb, 0x1c, 0x59, 0x8f, 0x36, 0x07, 0x00, 0x77, + 0x02, 0x41, 0x7e, 0xa0, 0xe0, 0xbc, 0x3c, 0x60, 0xad, + 0x5a, 0x94, 0x98, 0x86, 0xde, 0x96, 0x8c, 0xf5, 0x3e, + 0xa6, 0x46, 0x2a, 0xed ), + AUTH ( 0x99, 0xb3, 0x81, 0xbf, 0xa2, 0xaf, 0x97, 0x51, 0xc3, 0x9d, + 0x1b, 0x6e, 0x86, 0xd1, 0xbe, 0x6a ) ); + +/* AES-GCM test case 80 */ +CIPHER_TEST ( wycheproof_aes_gcm_77d7dce1, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0xdd, 0x9d, 0x0b, 0x4a, 0x0c, 0x3d, 0x68, 0x15, 0x24, 0xbf, + 0xfc, 0xa3, 0x1d, 0x90, 0x76, 0x61 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x64, 0xb1, 0x93, 0x14, 0xc3, 0x1a, 0xf4, 0x5a, 0xcc, + 0xdf, 0x7e, 0x3c, 0x4d, 0xb7, 0x9f, 0x0d, 0x94, 0x8c, + 0xa3, 0x7a, 0x8e, 0x66, 0x49, 0xe8, 0x8a, 0xef, 0xfb, + 0x1c, 0x59, 0x8f, 0x36, 0x07, 0x00, 0x77, 0x02, 0x41, + 0x7e, 0xa0, 0xe0, 0xbc ), + AUTH ( 0x52, 0x81, 0xef, 0xc7, 0xf1, 0x3a, 0xc8, 0xe1, 0x4c, 0xcf, + 0x5d, 0xca, 0x7b, 0xfb, 0xfd, 0xd1 ) ); + +/* AES-GCM test case 81 */ +CIPHER_TEST ( wycheproof_aes_gcm_471412a0, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x57, 0xc5, 0x64, 0x3c, 0x4e, 0x37, 0xb4, 0x04, 0x1d, 0xb7, + 0x94, 0xcf, 0xe8, 0xe1, 0xf0, 0xf4 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x2b, 0xb6, 0x9c, 0x3e, 0x5d, 0x1f, 0x91, 0x81, 0x5c, + 0x6b, 0x87, 0xa0, 0xd5, 0xbb, 0xea, 0x71, 0x64, 0xb1, + 0x93, 0x14, 0xc3, 0x1a, 0xf4, 0x5a, 0xcc, 0xdf, 0x7e, + 0x3c, 0x4d, 0xb7, 0x9f, 0x0d, 0x94, 0x8c, 0xa3, 0x7a, + 0x8e, 0x66, 0x49, 0xe8 ), + AUTH ( 0xa3, 0xea, 0x2c, 0x09, 0xee, 0x4f, 0x8c, 0x8a, 0x12, 0xf4, + 0x5c, 0xdd, 0xf9, 0xae, 0xff, 0x81 ) ); + +/* AES-GCM test case 82 */ +CIPHER_TEST ( wycheproof_aes_gcm_a9c89f85, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x99, 0x82, 0x1c, 0x2d, 0xd5, 0xda, 0xec, 0xde, 0xd0, 0x73, + 0x00, 0xf5, 0x77, 0xf7, 0xaf, 0xf1 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x12, 0x7a, 0xf9, 0xb3, 0x9e, 0xcd, 0xfc, 0x57, 0xbb, + 0x11, 0xa2, 0x84, 0x7c, 0x7c, 0x2d, 0x3d, 0x8f, 0x93, + 0x8f, 0x40, 0xf8, 0x77, 0xe0, 0xc4, 0xaf, 0x37, 0xd0, + 0xfe, 0x9a, 0xf0, 0x33, 0x05, 0x2b, 0xd5, 0x37, 0xc4, + 0xae, 0x97, 0x8f, 0x60 ), + AUTH ( 0x07, 0xeb, 0x2f, 0xe4, 0xa9, 0x58, 0xf8, 0x43, 0x4d, 0x40, + 0x68, 0x48, 0x99, 0x50, 0x7c, 0x7c ) ); + +/* AES-GCM test case 83 */ +CIPHER_TEST ( wycheproof_aes_gcm_db3f21b0, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x5e, 0x4a, 0x39, 0x00, 0x14, 0x23, 0x58, 0xd1, 0xc7, 0x74, + 0xd8, 0xd1, 0x24, 0xd8, 0xd2, 0x7d ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x0c, 0xf6, 0xae, 0x47, 0x15, 0x6b, 0x14, 0xdc, 0xe0, + 0x3c, 0x8a, 0x07, 0xa2, 0xe1, 0x72, 0xb1, 0x12, 0x7a, + 0xf9, 0xb3, 0x9e, 0xcd, 0xfc, 0x57, 0xbb, 0x11, 0xa2, + 0x84, 0x7c, 0x7c, 0x2d, 0x3d, 0x8f, 0x93, 0x8f, 0x40, + 0xf8, 0x77, 0xe0, 0xc4 ), + AUTH ( 0xf1, 0x45, 0xc2, 0xdc, 0xaf, 0x33, 0x9e, 0xed, 0xe4, 0x27, + 0xbe, 0x93, 0x43, 0x57, 0xea, 0xc0 ) ); + +/* AES-GCM test case 84 */ +CIPHER_TEST ( wycheproof_aes_gcm_0755dc1c, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0xd4, 0x12, 0x56, 0x76, 0x56, 0x29, 0x84, 0xc0, 0xfe, 0x7c, + 0xb0, 0xbd, 0xd1, 0xa9, 0x54, 0xe8 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xf0, 0xc6, 0xff, 0xc1, 0x8b, 0xd4, 0x6d, 0xf5, 0x56, + 0x91, 0x85, 0xa9, 0xaf, 0xd1, 0x69, 0xeb, 0x0c, 0xf6, + 0xae, 0x47, 0x15, 0x6b, 0x14, 0xdc, 0xe0, 0x3c, 0x8a, + 0x07, 0xa2, 0xe1, 0x72, 0xb1, 0x12, 0x7a, 0xf9, 0xb3, + 0x9e, 0xcd, 0xfc, 0x57 ), + AUTH ( 0xfa, 0xcd, 0x0b, 0xfe, 0x87, 0x01, 0xb7, 0xb4, 0xa2, 0xba, + 0x96, 0xd9, 0x8a, 0xf5, 0x2b, 0xd9 ) ); + +/* AES-GCM test case 85 */ +CIPHER_TEST ( wycheproof_aes_gcm_1a31814f, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0xb9, 0x7e, 0xc6, 0x2a, 0x5e, 0x59, 0x00, 0xcc, 0xf9, 0xe4, + 0xbe, 0x33, 0x2e, 0x33, 0x60, 0x91 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xd6, 0x92, 0x8e, 0x09, 0x4c, 0x06, 0xe0, 0xa7, 0xc4, + 0xdb, 0x42, 0x18, 0x4c, 0xf7, 0x52, 0x9e, 0x95, 0xde, + 0x88, 0xb7, 0x67, 0xed, 0xeb, 0xe9, 0xb3, 0x43, 0x00, + 0x0b, 0xe3, 0xda, 0xb4, 0x7e, 0xa0, 0x8b, 0x74, 0x42, + 0x93, 0xee, 0xd6, 0x98 ), + AUTH ( 0xa0, 0x3e, 0x72, 0x9d, 0xcf, 0xd7, 0xa0, 0x31, 0x55, 0x65, + 0x5f, 0xec, 0xe8, 0xaf, 0xfd, 0x7e ) ); + +/* AES-GCM test case 86 */ +CIPHER_TEST ( wycheproof_aes_gcm_8e51b36a, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x7e, 0xb6, 0xe3, 0x07, 0x9f, 0xa0, 0xb4, 0xc3, 0xee, 0xe3, + 0x66, 0x17, 0x7d, 0x1c, 0x1d, 0x1d ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xd8, 0x2c, 0xe5, 0x87, 0x71, 0xbf, 0x64, 0x87, 0x11, + 0x6b, 0xf8, 0xe9, 0x64, 0x21, 0x87, 0x7e, 0xd6, 0x92, + 0x8e, 0x09, 0x4c, 0x06, 0xe0, 0xa7, 0xc4, 0xdb, 0x42, + 0x18, 0x4c, 0xf7, 0x52, 0x9e, 0x95, 0xde, 0x88, 0xb7, + 0x67, 0xed, 0xeb, 0xe9 ), + AUTH ( 0x1e, 0x43, 0x92, 0x68, 0x28, 0xbc, 0x9a, 0x16, 0x14, 0xc7, + 0xb1, 0x63, 0x90, 0x96, 0xc1, 0x95 ) ); + +/* AES-GCM test case 87 */ +CIPHER_TEST ( wycheproof_aes_gcm_8737599d, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x03, 0x14, 0xfc, 0xd1, 0x0f, 0xdd, 0x67, 0x5d, 0x3c, 0x61, + 0x29, 0x62, 0xc9, 0x31, 0xf6, 0x35 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xa1, 0x97, 0xa3, 0x7a, 0x5d, 0x79, 0x69, 0x70, 0x78, + 0x53, 0x6b, 0xc2, 0x7f, 0xe4, 0x6c, 0xd8, 0xd4, 0x75, + 0x52, 0x6d, 0x90, 0x44, 0xaa, 0x94, 0xf0, 0x88, 0xa0, + 0x54, 0xf8, 0xe3, 0x80, 0xc6, 0x4f, 0x79, 0x41, 0x47, + 0x95, 0xc6, 0x14, 0x80 ), + AUTH ( 0xf0, 0x8b, 0xad, 0xdf, 0x0b, 0x52, 0x85, 0xc9, 0x1f, 0xc0, + 0x6a, 0x67, 0xfe, 0x47, 0x08, 0xca ) ); + +/* AES-GCM test case 88 */ +CIPHER_TEST ( wycheproof_aes_gcm_0d33db46, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0xc4, 0xdc, 0xd9, 0xfc, 0xce, 0x24, 0xd3, 0x52, 0x2b, 0x66, + 0xf1, 0x46, 0x9a, 0x1e, 0x8b, 0xb9 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x14, 0x9f, 0xde, 0x9a, 0xbb, 0xd3, 0xa4, 0x3c, 0x25, + 0x48, 0x57, 0x5e, 0x0d, 0xb9, 0xfb, 0x84, 0xa1, 0x97, + 0xa3, 0x7a, 0x5d, 0x79, 0x69, 0x70, 0x78, 0x53, 0x6b, + 0xc2, 0x7f, 0xe4, 0x6c, 0xd8, 0xd4, 0x75, 0x52, 0x6d, + 0x90, 0x44, 0xaa, 0x94 ), + AUTH ( 0x62, 0xa4, 0xb6, 0x87, 0x5c, 0x28, 0x83, 0x45, 0xd6, 0xa4, + 0x54, 0x39, 0x9e, 0xac, 0x1a, 0xfa ) ); + +/* AES-GCM test case 89 */ +CIPHER_TEST ( wycheproof_aes_gcm_2bdc78c7, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ), + ADDITIONAL(), + PLAINTEXT ( 0xbe, 0xc6, 0xfa, 0x05, 0xc1, 0x71, 0x8b, 0x9b, 0x84, + 0xc4, 0x73, 0x45, 0xbb, 0xed, 0x7d, 0xcb ), + CIPHERTEXT ( 0x45, 0xa3, 0xf8, 0x9d, 0x02, 0x91, 0x8b, 0xfd, 0x0c, + 0x81, 0x61, 0x65, 0x8c, 0xcc, 0x97, 0x95 ), + AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) ); + +/* AES-GCM test case 90 */ +CIPHER_TEST ( wycheproof_aes_gcm_d5bfae8c, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ), + ADDITIONAL(), + PLAINTEXT ( 0x4d, 0x82, 0x63, 0x9c, 0x39, 0xd3, 0xf3, 0x49, 0x0e, + 0xe9, 0x03, 0xdd, 0x0b, 0xe7, 0xaf, 0xcf ), + CIPHERTEXT ( 0x1c, 0xd5, 0xa0, 0x62, 0x14, 0x23, 0x5c, 0xeb, 0x04, + 0x4d, 0x4b, 0xad, 0x7b, 0x04, 0x73, 0x12 ), + AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) ); + +/* AES-GCM test case 91 */ +CIPHER_TEST ( wycheproof_aes_gcm_4ba4c501, &aes_gcm_algorithm, + KEY ( 0x92, 0xac, 0xe3, 0xe3, 0x48, 0xcd, 0x82, 0x10, 0x92, 0xcd, + 0x92, 0x1a, 0xa3, 0x54, 0x63, 0x74, 0x29, 0x9a, 0xb4, 0x62, + 0x09, 0x69, 0x1b, 0xc2, 0x8b, 0x87, 0x52, 0xd1, 0x7f, 0x12, + 0x3c, 0x20 ), + IV ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb ), + ADDITIONAL ( 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff ), + PLAINTEXT ( 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, + 0x09 ), + CIPHERTEXT ( 0xe2, 0x7a, 0xbd, 0xd2, 0xd2, 0xa5, 0x3d, 0x2f, 0x13, + 0x6b ), + AUTH ( 0x9a, 0x4a, 0x25, 0x79, 0x52, 0x93, 0x01, 0xbc, 0xfb, 0x71, + 0xc7, 0x8d, 0x40, 0x60, 0xf5, 0x2c ) ); + +/* AES-GCM test case 92 */ +CIPHER_TEST ( wycheproof_aes_gcm_13666319, &aes_gcm_algorithm, + KEY ( 0x29, 0xd3, 0xa4, 0x4f, 0x87, 0x23, 0xdc, 0x64, 0x02, 0x39, + 0x10, 0x0c, 0x36, 0x54, 0x23, 0xa3, 0x12, 0x93, 0x4a, 0xc8, + 0x02, 0x39, 0x21, 0x2a, 0xc3, 0xdf, 0x34, 0x21, 0xa2, 0x09, + 0x81, 0x23 ), + IV ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb ), + ADDITIONAL ( 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff ), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x2a, 0x7d, 0x77, 0xfa, 0x52, 0x6b, 0x82, 0x50, 0xcb, 0x29, + 0x60, 0x78, 0x92, 0x6b, 0x50, 0x20 ) ); + +/* AES-GCM test case 93 */ +CIPHER_TEST ( wycheproof_aes_gcm_ba5c6dd8, &aes_gcm_algorithm, + KEY ( 0x80, 0xba, 0x31, 0x92, 0xc8, 0x03, 0xce, 0x96, 0x5e, 0xa3, + 0x71, 0xd5, 0xff, 0x07, 0x3c, 0xf0, 0xf4, 0x3b, 0x6a, 0x2a, + 0xb5, 0x76, 0xb2, 0x08, 0x42, 0x6e, 0x11, 0x40, 0x9c, 0x09, + 0xb9, 0xb0 ), + IV ( 0x4d, 0xa5, 0xbf, 0x8d, 0xfd, 0x58, 0x52, 0xc1, 0xea, 0x12, + 0x37, 0x9d ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x47, 0x71, 0xa7, 0xc4, 0x04, 0xa4, 0x72, 0x96, 0x6c, 0xea, + 0x8f, 0x73, 0xc8, 0xbf, 0xe1, 0x7a ) ); + +/* AES-GCM test case 94 */ +CIPHER_TEST ( wycheproof_aes_gcm_c95dab82, &aes_gcm_algorithm, + KEY ( 0xcc, 0x56, 0xb6, 0x80, 0x55, 0x2e, 0xb7, 0x50, 0x08, 0xf5, + 0x48, 0x4b, 0x4c, 0xb8, 0x03, 0xfa, 0x50, 0x63, 0xeb, 0xd6, + 0xea, 0xb9, 0x1f, 0x6a, 0xb6, 0xae, 0xf4, 0x91, 0x6a, 0x76, + 0x62, 0x73 ), + IV ( 0x99, 0xe2, 0x3e, 0xc4, 0x89, 0x85, 0xbc, 0xcd, 0xee, 0xab, + 0x60, 0xf1 ), + ADDITIONAL(), + PLAINTEXT ( 0x2a ), + CIPHERTEXT ( 0x06 ), + AUTH ( 0x63, 0x3c, 0x1e, 0x97, 0x03, 0xef, 0x74, 0x4f, 0xff, 0xfb, + 0x40, 0xed, 0xf9, 0xd1, 0x43, 0x55 ) ); + +/* AES-GCM test case 95 */ +CIPHER_TEST ( wycheproof_aes_gcm_ae22db55, &aes_gcm_algorithm, + KEY ( 0x51, 0xe4, 0xbf, 0x2b, 0xad, 0x92, 0xb7, 0xaf, 0xf1, 0xa4, + 0xbc, 0x05, 0x55, 0x0b, 0xa8, 0x1d, 0xf4, 0xb9, 0x6f, 0xab, + 0xf4, 0x1c, 0x12, 0xc7, 0xb0, 0x0e, 0x60, 0xe4, 0x8d, 0xb7, + 0xe1, 0x52 ), + IV ( 0x4f, 0x07, 0xaf, 0xed, 0xfd, 0xc3, 0xb6, 0xc2, 0x36, 0x18, + 0x23, 0xd3 ), + ADDITIONAL(), + PLAINTEXT ( 0xbe, 0x33, 0x08, 0xf7, 0x2a, 0x2c, 0x6a, 0xed ), + CIPHERTEXT ( 0xcf, 0x33, 0x2a, 0x12, 0xfd, 0xee, 0x80, 0x0b ), + AUTH ( 0x60, 0x2e, 0x8d, 0x7c, 0x47, 0x99, 0xd6, 0x2c, 0x14, 0x0c, + 0x9b, 0xb8, 0x34, 0x87, 0x6b, 0x09 ) ); + +/* AES-GCM test case 96 */ +CIPHER_TEST ( wycheproof_aes_gcm_d6dc5d07, &aes_gcm_algorithm, + KEY ( 0x67, 0x11, 0x96, 0x27, 0xbd, 0x98, 0x8e, 0xda, 0x90, 0x62, + 0x19, 0xe0, 0x8c, 0x0d, 0x0d, 0x77, 0x9a, 0x07, 0xd2, 0x08, + 0xce, 0x8a, 0x4f, 0xe0, 0x70, 0x9a, 0xf7, 0x55, 0xee, 0xec, + 0x6d, 0xcb ), + IV ( 0x68, 0xab, 0x7f, 0xdb, 0xf6, 0x19, 0x01, 0xda, 0xd4, 0x61, + 0xd2, 0x3c ), + ADDITIONAL(), + PLAINTEXT ( 0x51, 0xf8, 0xc1, 0xf7, 0x31, 0xea, 0x14, 0xac, 0xdb, + 0x21, 0x0a, 0x6d, 0x97, 0x3e, 0x07 ), + CIPHERTEXT ( 0x43, 0xfc, 0x10, 0x1b, 0xff, 0x4b, 0x32, 0xbf, 0xad, + 0xd3, 0xda, 0xf5, 0x7a, 0x59, 0x0e ), + AUTH ( 0xec, 0x04, 0xaa, 0xcb, 0x71, 0x48, 0xa8, 0xb8, 0xbe, 0x44, + 0xcb, 0x7e, 0xaf, 0x4e, 0xfa, 0x69 ) ); + +/* AES-GCM test case 97 */ +CIPHER_TEST ( wycheproof_aes_gcm_c761752c, &aes_gcm_algorithm, + KEY ( 0x59, 0xd4, 0xea, 0xfb, 0x4d, 0xe0, 0xcf, 0xc7, 0xd3, 0xdb, + 0x99, 0xa8, 0xf5, 0x4b, 0x15, 0xd7, 0xb3, 0x9f, 0x0a, 0xcc, + 0x8d, 0xa6, 0x97, 0x63, 0xb0, 0x19, 0xc1, 0x69, 0x9f, 0x87, + 0x67, 0x4a ), + IV ( 0x2f, 0xcb, 0x1b, 0x38, 0xa9, 0x9e, 0x71, 0xb8, 0x47, 0x40, + 0xad, 0x9b ), + ADDITIONAL(), + PLAINTEXT ( 0x54, 0x9b, 0x36, 0x5a, 0xf9, 0x13, 0xf3, 0xb0, 0x81, + 0x13, 0x1c, 0xcb, 0x6b, 0x82, 0x55, 0x88 ), + CIPHERTEXT ( 0xf5, 0x8c, 0x16, 0x69, 0x01, 0x22, 0xd7, 0x53, 0x56, + 0x90, 0x7f, 0xd9, 0x6b, 0x57, 0x0f, 0xca ), + AUTH ( 0x28, 0x75, 0x2c, 0x20, 0x15, 0x30, 0x92, 0x81, 0x8f, 0xab, + 0xa2, 0xa3, 0x34, 0x64, 0x0d, 0x6e ) ); + +/* AES-GCM test case 98 */ +CIPHER_TEST ( wycheproof_aes_gcm_c63f1aed, &aes_gcm_algorithm, + KEY ( 0x3b, 0x24, 0x58, 0xd8, 0x17, 0x6e, 0x16, 0x21, 0xc0, 0xcc, + 0x24, 0xc0, 0xc0, 0xe2, 0x4c, 0x1e, 0x80, 0xd7, 0x2f, 0x7e, + 0xe9, 0x14, 0x9a, 0x4b, 0x16, 0x61, 0x76, 0x62, 0x96, 0x16, + 0xd0, 0x11 ), + IV ( 0x45, 0xaa, 0xa3, 0xe5, 0xd1, 0x6d, 0x2d, 0x42, 0xdc, 0x03, + 0x44, 0x5d ), + ADDITIONAL(), + PLAINTEXT ( 0x3f, 0xf1, 0x51, 0x4b, 0x1c, 0x50, 0x39, 0x15, 0x91, + 0x8f, 0x0c, 0x0c, 0x31, 0x09, 0x4a, 0x6e, 0x1f ), + CIPHERTEXT ( 0x73, 0xa6, 0xb6, 0xf4, 0x5f, 0x6c, 0xcc, 0x51, 0x31, + 0xe0, 0x7f, 0x2c, 0xaa, 0x1f, 0x2e, 0x2f, 0x56 ), + AUTH ( 0x2d, 0x73, 0x79, 0xec, 0x1d, 0xb5, 0x95, 0x2d, 0x4e, 0x95, + 0xd3, 0x0c, 0x34, 0x0b, 0x1b, 0x1d ) ); + +/* AES-GCM test case 99 */ +CIPHER_TEST ( wycheproof_aes_gcm_dd4fb2f4, &aes_gcm_algorithm, + KEY ( 0x02, 0x12, 0xa8, 0xde, 0x50, 0x07, 0xed, 0x87, 0xb3, 0x3f, + 0x1a, 0x70, 0x90, 0xb6, 0x11, 0x4f, 0x9e, 0x08, 0xce, 0xfd, + 0x96, 0x07, 0xf2, 0xc2, 0x76, 0xbd, 0xcf, 0xdb, 0xc5, 0xce, + 0x9c, 0xd7 ), + IV ( 0xe6, 0xb1, 0xad, 0xf2, 0xfd, 0x58, 0xa8, 0x76, 0x2c, 0x65, + 0xf3, 0x1b ), + ADDITIONAL(), + PLAINTEXT ( 0x10, 0xf1, 0xec, 0xf9, 0xc6, 0x05, 0x84, 0x66, 0x5d, + 0x9a, 0xe5, 0xef, 0xe2, 0x79, 0xe7, 0xf7, 0x37, 0x7e, + 0xea, 0x69, 0x16, 0xd2, 0xb1, 0x11 ), + CIPHERTEXT ( 0x08, 0x43, 0xff, 0xf5, 0x2d, 0x93, 0x4f, 0xc7, 0xa0, + 0x71, 0xea, 0x62, 0xc0, 0xbd, 0x35, 0x1c, 0xe8, 0x56, + 0x78, 0xcd, 0xe3, 0xea, 0x2c, 0x9e ), + AUTH ( 0x73, 0x55, 0xfd, 0xe5, 0x99, 0x00, 0x67, 0x15, 0x05, 0x38, + 0x13, 0xce, 0x69, 0x62, 0x37, 0xa8 ) ); + +/* AES-GCM test case 100 */ +CIPHER_TEST ( wycheproof_aes_gcm_922348b7, &aes_gcm_algorithm, + KEY ( 0xb2, 0x79, 0xf5, 0x7e, 0x19, 0xc8, 0xf5, 0x3f, 0x2f, 0x96, + 0x3f, 0x5f, 0x25, 0x19, 0xfd, 0xb7, 0xc1, 0x77, 0x9b, 0xe2, + 0xca, 0x2b, 0x3a, 0xe8, 0xe1, 0x12, 0x8b, 0x7d, 0x6c, 0x62, + 0x7f, 0xc4 ), + IV ( 0x98, 0xbc, 0x2c, 0x74, 0x38, 0xd5, 0xcd, 0x76, 0x65, 0xd7, + 0x6f, 0x6e ), + ADDITIONAL ( 0xc0 ), + PLAINTEXT ( 0xfc, 0xc5, 0x15, 0xb2, 0x94, 0x40, 0x8c, 0x86, 0x45, + 0xc9, 0x18, 0x3e, 0x3f, 0x4e, 0xce, 0xe5, 0x12, 0x78, + 0x46, 0xd1 ), + CIPHERTEXT ( 0xeb, 0x55, 0x00, 0xe3, 0x82, 0x59, 0x52, 0x86, 0x6d, + 0x91, 0x12, 0x53, 0xf8, 0xde, 0x86, 0x0c, 0x00, 0x83, + 0x1c, 0x81 ), + AUTH ( 0xec, 0xb6, 0x60, 0xe1, 0xfb, 0x05, 0x41, 0xec, 0x41, 0xe8, + 0xd6, 0x8a, 0x64, 0x14, 0x1b, 0x3a ) ); + +/* AES-GCM test case 101 */ +CIPHER_TEST ( wycheproof_aes_gcm_90face03, &aes_gcm_algorithm, + KEY ( 0xcd, 0xcc, 0xfe, 0x3f, 0x46, 0xd7, 0x82, 0xef, 0x47, 0xdf, + 0x4e, 0x72, 0xf0, 0xc0, 0x2d, 0x9c, 0x7f, 0x77, 0x4d, 0xef, + 0x97, 0x0d, 0x23, 0x48, 0x6f, 0x11, 0xa5, 0x7f, 0x54, 0x24, + 0x7f, 0x17 ), + IV ( 0x37, 0x61, 0x87, 0x89, 0x46, 0x05, 0xa8, 0xd4, 0x5e, 0x30, + 0xde, 0x51 ), + ADDITIONAL ( 0x95, 0x68, 0x46, 0xa2, 0x09, 0xe0, 0x87, 0xed ), + PLAINTEXT ( 0xe2, 0x8e, 0x0e, 0x9f, 0x9d, 0x22, 0x46, 0x3a, 0xc0, + 0xe4, 0x26, 0x39, 0xb5, 0x30, 0xf4, 0x21, 0x02, 0xfd, + 0xed, 0x75 ), + CIPHERTEXT ( 0xfe, 0xca, 0x44, 0x95, 0x24, 0x47, 0x01, 0x5b, 0x5d, + 0xf1, 0xf4, 0x56, 0xdf, 0x8c, 0xa4, 0xbb, 0x4e, 0xee, + 0x2c, 0xe2 ), + AUTH ( 0x08, 0x2e, 0x91, 0x92, 0x4d, 0xee, 0xb7, 0x78, 0x80, 0xe1, + 0xb1, 0xc8, 0x4f, 0x9b, 0x8d, 0x30 ) ); + +/* AES-GCM test case 102 */ +CIPHER_TEST ( wycheproof_aes_gcm_d999cc8e, &aes_gcm_algorithm, + KEY ( 0xf3, 0x23, 0x64, 0xb1, 0xd3, 0x39, 0xd8, 0x2e, 0x4f, 0x13, + 0x2d, 0x8f, 0x4a, 0x0e, 0xc1, 0xff, 0x7e, 0x74, 0x65, 0x17, + 0xfa, 0x07, 0xef, 0x1a, 0x7f, 0x42, 0x2f, 0x4e, 0x25, 0xa4, + 0x81, 0x94 ), + IV ( 0x5a, 0x86, 0xa5, 0x0a, 0x0e, 0x8a, 0x17, 0x9c, 0x73, 0x4b, + 0x99, 0x6d ), + ADDITIONAL ( 0xab, 0x2a, 0xc7, 0xc4, 0x4c, 0x60, 0xbd, 0xf8, 0x22, + 0x8c, 0x78, 0x84, 0xad, 0xb2, 0x01, 0x84 ), + PLAINTEXT ( 0x43, 0x89, 0x1b, 0xcc, 0xb5, 0x22, 0xb1, 0xe7, 0x2a, + 0x6b, 0x53, 0xcf, 0x31, 0xc0, 0x74, 0xe9, 0xd6, 0xc2, + 0xdf, 0x8e ), + CIPHERTEXT ( 0x43, 0xdd, 0xa8, 0x32, 0xe9, 0x42, 0xe2, 0x86, 0xda, + 0x31, 0x4d, 0xaa, 0x99, 0xbe, 0xf5, 0x07, 0x1d, 0x9d, + 0x2c, 0x78 ), + AUTH ( 0xc3, 0x92, 0x25, 0x83, 0x47, 0x6c, 0xed, 0x57, 0x54, 0x04, + 0xdd, 0xb8, 0x5d, 0xd8, 0xcd, 0x44 ) ); + +/* AES-GCM test case 103 */ +CIPHER_TEST ( wycheproof_aes_gcm_4af502aa, &aes_gcm_algorithm, + KEY ( 0xff, 0x00, 0x89, 0xee, 0x87, 0x0a, 0x4a, 0x39, 0xf6, 0x45, + 0xb0, 0xa5, 0xda, 0x77, 0x4f, 0x7a, 0x59, 0x11, 0xe9, 0x69, + 0x6f, 0xc9, 0xca, 0xd6, 0x46, 0x45, 0x2c, 0x2a, 0xa8, 0x59, + 0x5a, 0x12 ), + IV ( 0xbc, 0x2a, 0x77, 0x57, 0xd0, 0xce, 0x2d, 0x8b, 0x1f, 0x14, + 0xcc, 0xd9 ), + ADDITIONAL ( 0x97, 0x2a, 0xb4, 0xe0, 0x63, 0x90, 0xca, 0xae, 0x8f, + 0x99, 0xdd, 0x6e, 0x21, 0x87, 0xbe, 0x6c, 0x7f, 0xf2, + 0xc0, 0x8a, 0x24, 0xbe, 0x16, 0xef ), + PLAINTEXT ( 0x74, 0x8b, 0x28, 0x03, 0x16, 0x21, 0xd9, 0x5e, 0xe6, + 0x18, 0x12, 0xb4, 0xb4, 0xf4, 0x7d, 0x04, 0xc6, 0xfc, + 0x2f, 0xf3 ), + CIPHERTEXT ( 0xa9, 0x29, 0xee, 0x7e, 0x67, 0xc7, 0xa2, 0xf9, 0x1b, + 0xbc, 0xec, 0x63, 0x89, 0xa3, 0xca, 0xf4, 0x3a, 0xb4, + 0x93, 0x05 ), + AUTH ( 0xeb, 0xec, 0x67, 0x74, 0xb9, 0x55, 0xe7, 0x89, 0x59, 0x1c, + 0x82, 0x2d, 0xab, 0x73, 0x9e, 0x12 ) ); + +/* AES-GCM test case 104 */ +CIPHER_TEST ( wycheproof_aes_gcm_4ebc55c7, &aes_gcm_algorithm, + KEY ( 0x6e, 0xfc, 0xa9, 0x81, 0x26, 0x91, 0x8a, 0xb5, 0x64, 0xd8, + 0x8c, 0x6b, 0xec, 0x02, 0xe8, 0x99, 0x8b, 0x2b, 0xe5, 0x0e, + 0x3f, 0x90, 0x6f, 0xf9, 0xad, 0xfd, 0xd1, 0x85, 0xf3, 0x73, + 0xe7, 0x56 ), + IV ( 0x4a, 0xbd, 0x6c, 0xfc, 0x83, 0xbd, 0x06, 0xb1, 0x1e, 0xfa, + 0xa2, 0xa7 ), + ADDITIONAL(), + PLAINTEXT ( 0xbb, 0xec, 0x79, 0xc0, 0x86, 0xd4, 0x1e, 0x60, 0x2d, + 0x09, 0x0f, 0x7e, 0x40, 0x49, 0x4d, 0x6b, 0xf3, 0xfa, + 0xa1, 0xdc, 0x6d, 0xf0, 0xab, 0x8a, 0x88, 0xea, 0x5d, + 0x35, 0xd4, 0x26, 0xb2, 0x48, 0xc2, 0xad, 0x88, 0x03, + 0x51, 0xe2, 0x23, 0xf6, 0x17, 0x0d, 0x37, 0xcc, 0x96, + 0x55, 0xe1, 0x04, 0x59, 0xe5, 0x9c, 0xbd, 0x6d, 0x1c, + 0x09, 0x2e, 0xd3, 0x1d, 0x72, 0xcc, 0xc7, 0xaf, 0x20 ), + CIPHERTEXT ( 0x97, 0xb4, 0xc7, 0x3a, 0x4d, 0x8b, 0x5b, 0x21, 0xbc, + 0x4b, 0x50, 0xdb, 0xb7, 0x0d, 0xfa, 0x77, 0xb1, 0xa7, + 0xbf, 0x0b, 0xbe, 0x7c, 0xf1, 0x6e, 0xcf, 0x5b, 0xb6, + 0x0b, 0xa8, 0x07, 0x0a, 0xcc, 0x57, 0x40, 0x78, 0x04, + 0x35, 0xed, 0x14, 0x5a, 0x62, 0xa6, 0x13, 0xdd, 0x98, + 0x81, 0xb7, 0x21, 0x16, 0x8f, 0xbb, 0x3f, 0x5a, 0xf3, + 0x85, 0xee, 0x5d, 0x4f, 0x85, 0x6c, 0xf9, 0x3c, 0xba ), + AUTH ( 0x27, 0xac, 0x8c, 0x40, 0x10, 0xd8, 0xe8, 0x1b, 0x70, 0x51, + 0xce, 0xb0, 0x6b, 0x30, 0xfe, 0x2d ) ); + +/* AES-GCM test case 105 */ +CIPHER_TEST ( wycheproof_aes_gcm_888186c8, &aes_gcm_algorithm, + KEY ( 0x5b, 0x1d, 0x10, 0x35, 0xc0, 0xb1, 0x7e, 0xe0, 0xb0, 0x44, + 0x47, 0x67, 0xf8, 0x0a, 0x25, 0xb8, 0xc1, 0xb7, 0x41, 0xf4, + 0xb5, 0x0a, 0x4d, 0x30, 0x52, 0x22, 0x6b, 0xaa, 0x1c, 0x6f, + 0xb7, 0x01 ), + IV ( 0xd6, 0x10, 0x40, 0xa3, 0x13, 0xed, 0x49, 0x28, 0x23, 0xcc, + 0x06, 0x5b ), + ADDITIONAL(), + PLAINTEXT ( 0xd0, 0x96, 0x80, 0x31, 0x81, 0xbe, 0xef, 0x9e, 0x00, + 0x8f, 0xf8, 0x5d, 0x5d, 0xdc, 0x38, 0xdd, 0xac, 0xf0, + 0xf0, 0x9e, 0xe5, 0xf7, 0xe0, 0x7f, 0x1e, 0x40, 0x79, + 0xcb, 0x64, 0xd0, 0xdc, 0x8f, 0x5e, 0x67, 0x11, 0xcd, + 0x49, 0x21, 0xa7, 0x88, 0x7d, 0xe7, 0x6e, 0x26, 0x78, + 0xfd, 0xc6, 0x76, 0x18, 0xf1, 0x18, 0x55, 0x86, 0xbf, + 0xea, 0x9d, 0x4c, 0x68, 0x5d, 0x50, 0xe4, 0xbb, 0x9a, + 0x82 ), + CIPHERTEXT ( 0xc7, 0xd1, 0x91, 0xb6, 0x01, 0xf8, 0x6c, 0x28, 0xb6, + 0xa1, 0xbd, 0xef, 0x6a, 0x57, 0xb4, 0xf6, 0xee, 0x3a, + 0xe4, 0x17, 0xbc, 0x12, 0x5c, 0x38, 0x1c, 0xdf, 0x1c, + 0x4d, 0xac, 0x18, 0x4e, 0xd1, 0xd8, 0x4f, 0x11, 0x96, + 0x20, 0x6d, 0x62, 0xca, 0xd1, 0x12, 0xb0, 0x38, 0x84, + 0x57, 0x20, 0xe0, 0x2c, 0x06, 0x11, 0x79, 0xa8, 0x83, + 0x6f, 0x02, 0xb9, 0x3f, 0xa7, 0x00, 0x83, 0x79, 0xa6, + 0xbf ), + AUTH ( 0xf1, 0x56, 0x12, 0xf6, 0xc4, 0x0f, 0x2e, 0x0d, 0xb6, 0xdc, + 0x76, 0xfc, 0x48, 0x22, 0xfc, 0xfe ) ); + +/* AES-GCM test case 106 */ +CIPHER_TEST ( wycheproof_aes_gcm_4a6005f6, &aes_gcm_algorithm, + KEY ( 0x81, 0xb6, 0xb2, 0x7e, 0x5e, 0xd9, 0x0a, 0xb9, 0x9f, 0xe6, + 0x75, 0x6d, 0x4c, 0xb4, 0x1e, 0x3f, 0x07, 0x26, 0x96, 0x87, + 0xf5, 0xaf, 0xab, 0xdb, 0x42, 0x6e, 0x29, 0x09, 0x6b, 0x5e, + 0x44, 0x66 ), + IV ( 0x13, 0xe7, 0x27, 0x48, 0x60, 0x31, 0xcc, 0xa2, 0x1f, 0x73, + 0x33, 0x75 ), + ADDITIONAL(), + PLAINTEXT ( 0x9a, 0x95, 0xa2, 0x3c, 0xfb, 0x1e, 0x35, 0xd8, 0x9a, + 0x75, 0x97, 0x57, 0x0d, 0xf0, 0xfb, 0x0e, 0xfc, 0xbb, + 0x74, 0x29, 0xf5, 0x3b, 0xeb, 0xcb, 0xbf, 0xa4, 0x9f, + 0xa2, 0x47, 0xb2, 0x51, 0xa8, 0x50, 0x8a, 0xd4, 0x97, + 0x06, 0x68, 0x55, 0xd0, 0x86, 0x88, 0x57, 0x61, 0x88, + 0xe4, 0xff, 0xb1, 0x2d, 0x1d, 0x08, 0x4d, 0xca, 0xbe, + 0xc3, 0xd5, 0x78, 0x06, 0xda, 0xf2, 0x15, 0xdc, 0xc9, + 0x7e, 0xdd ), + CIPHERTEXT ( 0x7e, 0xde, 0x73, 0x68, 0xbc, 0xa3, 0xc9, 0x3d, 0x9f, + 0x1d, 0x7f, 0x77, 0x50, 0xd6, 0xe4, 0x4b, 0x1c, 0xb9, + 0x2c, 0x30, 0xe3, 0xc9, 0x83, 0x4b, 0x0b, 0x69, 0xef, + 0xd2, 0x47, 0x09, 0x11, 0x64, 0x4a, 0xe6, 0xf6, 0xd7, + 0x57, 0x15, 0xe1, 0x3a, 0xea, 0x87, 0x81, 0xf8, 0xda, + 0x61, 0x1a, 0x13, 0xac, 0x63, 0x64, 0xc4, 0x06, 0xc1, + 0xa7, 0x15, 0xb7, 0xe9, 0x7a, 0xcb, 0x22, 0xb6, 0xe6, + 0x15, 0x6e ), + AUTH ( 0x74, 0xe2, 0x0a, 0x93, 0x80, 0x2f, 0x43, 0x40, 0x7c, 0x89, + 0x89, 0xa3, 0x7f, 0x01, 0x38, 0x02 ) ); + +/* AES-GCM test case 107 */ +CIPHER_TEST ( wycheproof_aes_gcm_2d04655c, &aes_gcm_algorithm, + KEY ( 0xea, 0x1d, 0x43, 0x6f, 0x63, 0x59, 0xca, 0xec, 0x01, 0x07, + 0x89, 0xfa, 0x94, 0xfe, 0x08, 0xb1, 0x67, 0xc3, 0xe4, 0x97, + 0xd8, 0x91, 0x72, 0x82, 0xf4, 0x7a, 0xd2, 0xa8, 0xf9, 0x5f, + 0xd0, 0xf1 ), + IV ( 0x73, 0xfe, 0x02, 0x22, 0x02, 0x76, 0x7a, 0xf8, 0x34, 0xe3, + 0x21, 0x26 ), + ADDITIONAL(), + PLAINTEXT ( 0xad, 0xf9, 0xb6, 0xdf, 0x5c, 0x5c, 0xc9, 0x47, 0x3e, + 0x0b, 0xb5, 0x79, 0xf9, 0xa6, 0xaa, 0xd3, 0x96, 0xf9, + 0x3d, 0x28, 0xbf, 0x83, 0xe9, 0x81, 0x36, 0xf9, 0x78, + 0xcf, 0xb9, 0xd5, 0x01, 0xd0, 0x9e, 0xf7, 0x78, 0xc1, + 0x22, 0xb4, 0x3c, 0x87, 0x6c, 0x22, 0xe4, 0x0d, 0x74, + 0xa4, 0x8d, 0x90, 0x89, 0x78, 0x46, 0x5a, 0x06, 0xbe, + 0x9e, 0x80, 0x89, 0x17, 0x10, 0xc8, 0xc2, 0x69, 0x0a, + 0x76, 0x2b, 0xc9, 0xeb, 0x8b, 0xcb, 0x2a, 0xa2, 0x70, + 0x7d, 0xb1, 0x49, 0xab, 0xaf, 0xb9, 0xc1, 0x7c, 0x1f, + 0x0b, 0x68, 0xc7, 0xad, 0xce, 0xa9, 0x8a, 0xeb, 0xf4, + 0xc6, 0xa3, 0x9e, 0x5a, 0x8f, 0x69, 0x31, 0x33, 0xea, + 0xaa, 0x5b, 0xb0, 0xb3, 0x70, 0x87, 0x20, 0xd7, 0xb8, + 0x64, 0x24, 0x10, 0x1b, 0xad, 0x56, 0xaa, 0x19, 0x0c, + 0x67, 0xd2, 0x5f, 0xe3, 0x5a, 0x4a, 0x34, 0xe1, 0xf4, + 0xfd ), + CIPHERTEXT ( 0x2e, 0x6b, 0x19, 0x52, 0x0d, 0x9c, 0x91, 0xe4, 0x1f, + 0x52, 0x3b, 0xfd, 0x80, 0xcb, 0x3d, 0x57, 0x7d, 0xf7, + 0x62, 0x87, 0x9b, 0x04, 0xa5, 0x86, 0xb8, 0x65, 0x28, + 0x0b, 0xac, 0x65, 0x11, 0x02, 0xfa, 0x60, 0x16, 0x4b, + 0x85, 0x86, 0xf9, 0x1c, 0x02, 0xb2, 0x15, 0x1c, 0xc2, + 0xfd, 0x29, 0xf4, 0xc6, 0xe9, 0x28, 0x39, 0xcd, 0xd8, + 0x73, 0xbe, 0x12, 0xc1, 0x44, 0x31, 0x41, 0xf8, 0xbc, + 0xb8, 0x75, 0x49, 0x65, 0xae, 0xc7, 0xc0, 0x82, 0x9f, + 0xb3, 0x91, 0xe5, 0x65, 0x63, 0xba, 0x76, 0xe8, 0x96, + 0xec, 0x81, 0x93, 0x2b, 0x5e, 0xfb, 0xad, 0x23, 0xbb, + 0x96, 0x5e, 0xbb, 0xf8, 0xd8, 0xfd, 0xa9, 0x8f, 0x9c, + 0xbd, 0x48, 0xf3, 0x7b, 0x2c, 0x46, 0xdb, 0x60, 0x9e, + 0x40, 0x76, 0x82, 0x66, 0xc2, 0xb3, 0x6a, 0x78, 0x10, + 0xd2, 0xb7, 0x91, 0x33, 0xf3, 0x77, 0xd0, 0x37, 0x7b, + 0x41 ), + AUTH ( 0xf9, 0xa0, 0xeb, 0xa5, 0x13, 0x90, 0x4c, 0x4a, 0x71, 0x68, + 0xd7, 0x62, 0x00, 0x0f, 0x34, 0xbe ) ); + +/* AES-GCM test case 108 */ +CIPHER_TEST ( wycheproof_aes_gcm_56b6987d, &aes_gcm_algorithm, + KEY ( 0xd7, 0xad, 0xdd, 0x38, 0x89, 0xfa, 0xdf, 0x8c, 0x89, 0x3e, + 0xee, 0x14, 0xba, 0x2b, 0x7e, 0xa5, 0xbf, 0x56, 0xb4, 0x49, + 0x90, 0x48, 0x69, 0x61, 0x5b, 0xd0, 0x5d, 0x5f, 0x11, 0x4c, + 0xf3, 0x77 ), + IV ( 0x8a, 0x3a, 0xd2, 0x6b, 0x28, 0xcd, 0x13, 0xba, 0x65, 0x04, + 0xe2, 0x60 ), + ADDITIONAL(), + PLAINTEXT ( 0xc8, 0x77, 0xa7, 0x6b, 0xf5, 0x95, 0x56, 0x07, 0x72, + 0x16, 0x7c, 0x6e, 0x3b, 0xcc, 0x70, 0x53, 0x05, 0xdb, + 0x9c, 0x6f, 0xcb, 0xeb, 0x90, 0xf4, 0xfe, 0xa8, 0x51, + 0x16, 0x03, 0x8b, 0xc5, 0x3c, 0x3f, 0xa5, 0xb4, 0xb4, + 0xea, 0x0d, 0xe5, 0xcc, 0x53, 0x4f, 0xbe, 0x1c, 0xf9, + 0xae, 0x44, 0x82, 0x4c, 0x6c, 0x2c, 0x0a, 0x5c, 0x88, + 0x5b, 0xd8, 0xc3, 0xcd, 0xc9, 0x06, 0xf1, 0x26, 0x75, + 0x73, 0x7e, 0x43, 0x4b, 0x98, 0x3e, 0x1e, 0x23, 0x1a, + 0x52, 0xa2, 0x75, 0xdb, 0x5f, 0xb1, 0xa0, 0xca, 0xc6, + 0xa0, 0x7b, 0x3b, 0x7d, 0xcb, 0x19, 0x48, 0x2a, 0x5d, + 0x3b, 0x06, 0xa9, 0x31, 0x7a, 0x54, 0x82, 0x6c, 0xea, + 0x6b, 0x36, 0xfc, 0xe4, 0x52, 0xfa, 0x9b, 0x54, 0x75, + 0xe2, 0xaa, 0xf2, 0x54, 0x99, 0x49, 0x9d, 0x8a, 0x89, + 0x32, 0xa1, 0x9e, 0xb9, 0x87, 0xc9, 0x03, 0xbd, 0x85, + 0x02, 0xfe ), + CIPHERTEXT ( 0x53, 0xcc, 0x8c, 0x92, 0x0a, 0x85, 0xd1, 0xac, 0xcb, + 0x88, 0x63, 0x6d, 0x08, 0xbb, 0xe4, 0x86, 0x9b, 0xfd, + 0xd9, 0x6f, 0x43, 0x7b, 0x2e, 0xc9, 0x44, 0x51, 0x21, + 0x73, 0xa9, 0xc0, 0xfe, 0x7a, 0x47, 0xf8, 0x43, 0x41, + 0x33, 0x98, 0x9b, 0xa7, 0x7d, 0xda, 0x56, 0x1b, 0x7e, + 0x37, 0x01, 0xb9, 0xa8, 0x3c, 0x3b, 0xa7, 0x66, 0x0c, + 0x66, 0x6b, 0xa5, 0x9f, 0xef, 0x96, 0x59, 0x8e, 0xb6, + 0x21, 0x54, 0x4c, 0x63, 0x80, 0x6d, 0x50, 0x9a, 0xc4, + 0x76, 0x97, 0x41, 0x2f, 0x95, 0x64, 0xeb, 0x0a, 0x2e, + 0x1f, 0x72, 0xf6, 0x59, 0x9f, 0x56, 0x66, 0xaf, 0x34, + 0xcf, 0xfc, 0xa0, 0x65, 0x73, 0xff, 0xb4, 0xf4, 0x7b, + 0x02, 0xf5, 0x9f, 0x21, 0xc6, 0x43, 0x63, 0xda, 0xec, + 0xb9, 0x77, 0xb4, 0x41, 0x5f, 0x19, 0xfd, 0xda, 0x3c, + 0x9a, 0xae, 0x50, 0x66, 0xa5, 0x7b, 0x66, 0x9f, 0xfa, + 0xa2, 0x57 ), + AUTH ( 0x5e, 0x63, 0x37, 0x4b, 0x51, 0x9e, 0x6c, 0x36, 0x08, 0x32, + 0x19, 0x43, 0xd7, 0x90, 0xcf, 0x9a ) ); + +/* AES-GCM test case 109 */ +CIPHER_TEST ( wycheproof_aes_gcm_644b8aad, &aes_gcm_algorithm, + KEY ( 0x7f, 0x7c, 0x58, 0x04, 0xa6, 0x80, 0xf6, 0x19, 0x24, 0x96, + 0x67, 0x25, 0xdb, 0xa2, 0xa8, 0x0d, 0x85, 0x26, 0x7c, 0x2e, + 0x03, 0xc7, 0xc2, 0x34, 0xb0, 0x45, 0xb2, 0x4e, 0xc8, 0xe2, + 0x35, 0x28 ), + IV ( 0x2d, 0x9b, 0xf8, 0xb6, 0x36, 0xf3, 0x37, 0xd2, 0x65, 0xb0, + 0x90, 0x4c ), + ADDITIONAL(), + PLAINTEXT ( 0xe2, 0xf8, 0x5f, 0xb1, 0x76, 0x84, 0x0c, 0x38, 0x34, + 0x5d, 0xa0, 0xf0, 0xf8, 0xdb, 0x6c, 0xdb, 0xc4, 0x5a, + 0x12, 0x31, 0x65, 0xf2, 0x44, 0xff, 0x53, 0x89, 0xfe, + 0x65, 0xbf, 0x34, 0x1f, 0xa1, 0x31, 0x13, 0x07, 0x51, + 0xb5, 0xc7, 0x39, 0xa9, 0x93, 0x1d, 0x5a, 0x57, 0xb1, + 0x41, 0xdc, 0x7b, 0x5b, 0x0c, 0x5a, 0x2c, 0xa0, 0x73, + 0x31, 0xc2, 0xdc, 0x04, 0xb2, 0x65, 0x7b, 0x02, 0x89, + 0x87, 0x8d, 0xea, 0x0e, 0xf7, 0xd5, 0x60, 0x14, 0x65, + 0xb7, 0x8a, 0x65, 0x79, 0x5f, 0x0f, 0x31, 0x81, 0x30, + 0x4e, 0x58, 0xa2, 0x61, 0xfe, 0xb1, 0xd3, 0x94, 0xf3, + 0xc3, 0x3c, 0xab, 0xae, 0x18, 0x99, 0x41, 0x75, 0x5d, + 0x76, 0x54, 0xbb, 0x7b, 0xef, 0x08, 0xc3, 0x1b, 0xd2, + 0xc5, 0xce, 0x12, 0x03, 0xee, 0xbc, 0x01, 0x5a, 0xe0, + 0x40, 0xda, 0x2a, 0x85, 0x1c, 0x2b, 0xa3, 0xc6, 0x2e, + 0x69, 0x93, 0x56 ), + CIPHERTEXT ( 0xd7, 0x38, 0x0d, 0x10, 0xb2, 0x2c, 0x3a, 0xe5, 0x84, + 0x53, 0x1e, 0x9e, 0x4e, 0xe7, 0x3d, 0x38, 0x7f, 0x69, + 0xdb, 0xbb, 0x3d, 0x3d, 0x9f, 0xdb, 0x49, 0x71, 0xed, + 0x27, 0x50, 0xb3, 0x19, 0x13, 0xf7, 0x9e, 0x4c, 0x00, + 0xcf, 0x1b, 0x76, 0x93, 0x3b, 0xbb, 0x75, 0xd3, 0x9d, + 0x8a, 0x64, 0x29, 0xa2, 0x52, 0x8e, 0x9b, 0xd6, 0x0e, + 0x65, 0xfa, 0x6f, 0xff, 0xf9, 0xe0, 0x1a, 0x87, 0x58, + 0xe7, 0xb5, 0x84, 0x09, 0xfa, 0x3f, 0x37, 0x0c, 0xc3, + 0x2a, 0x63, 0xaa, 0x60, 0xa5, 0x4c, 0x36, 0xd7, 0x33, + 0xe8, 0xf6, 0xdf, 0xcc, 0xd5, 0xc3, 0x12, 0x0d, 0x05, + 0xc6, 0xe3, 0x31, 0x40, 0xc0, 0x05, 0x62, 0x86, 0x55, + 0x32, 0xb2, 0xc6, 0x89, 0xde, 0x98, 0x76, 0x9d, 0x33, + 0x86, 0xe7, 0xa3, 0xae, 0x67, 0x9e, 0x40, 0x4e, 0x06, + 0x25, 0x36, 0xca, 0x04, 0x62, 0x61, 0x21, 0x1a, 0x42, + 0x6f, 0xb5, 0x86 ), + AUTH ( 0x75, 0x3f, 0x6c, 0x57, 0xc0, 0xcc, 0x2a, 0x07, 0x5e, 0x68, + 0xd0, 0x82, 0xf6, 0xe8, 0x35, 0x90 ) ); + +/* AES-GCM test case 110 */ +CIPHER_TEST ( wycheproof_aes_gcm_97bb5e35, &aes_gcm_algorithm, + KEY ( 0x01, 0xe7, 0x5a, 0xe8, 0x03, 0xd3, 0x04, 0x5e, 0x6b, 0x28, + 0xb7, 0xf6, 0x79, 0x37, 0xee, 0xe2, 0xd8, 0xd9, 0x8f, 0x77, + 0xb4, 0x89, 0x2d, 0x48, 0xab, 0x1f, 0x15, 0xf5, 0x7f, 0xa8, + 0x8b, 0xbe ), + IV ( 0x69, 0x02, 0xe8, 0xf0, 0xef, 0x1e, 0x9e, 0xc6, 0x0a, 0x3e, + 0x46, 0xf0 ), + ADDITIONAL(), + PLAINTEXT ( 0x32, 0xdd, 0xe3, 0xb9, 0xbc, 0x67, 0x1f, 0xad, 0x12, + 0x65, 0xb2, 0x6c, 0xad, 0x3d, 0x8d, 0xd0, 0xf0, 0x99, + 0x13, 0x4f, 0x67, 0x55, 0xf9, 0x86, 0x13, 0x02, 0x4e, + 0x1b, 0xd1, 0x0d, 0xa9, 0xa6, 0x2b, 0xad, 0x01, 0xa9, + 0x97, 0xf9, 0x73, 0x10, 0x1e, 0x85, 0x5e, 0xe1, 0xc7, + 0xe6, 0x0e, 0x6b, 0x6a, 0xa1, 0xdf, 0x9d, 0x80, 0xfa, + 0x56, 0x7d, 0x0c, 0xcc, 0xa0, 0xf9, 0x56, 0x68, 0x0b, + 0xe7, 0x6e, 0xd3, 0x7c, 0x71, 0xfd, 0xed, 0xef, 0x56, + 0x0e, 0x25, 0x23, 0xe8, 0xc5, 0xfd, 0xb9, 0x51, 0x62, + 0x50, 0x01, 0x73, 0x04, 0xf8, 0xff, 0x41, 0x6b, 0x9b, + 0x8e, 0x5d, 0x17, 0xc1, 0xf0, 0x62, 0xde, 0xd4, 0x61, + 0x6e, 0xa9, 0xd4, 0x62, 0xed, 0x6c, 0xa0, 0xdf, 0xdd, + 0xb9, 0xf5, 0x29, 0x5b, 0x7a, 0x12, 0x7c, 0x08, 0x25, + 0xff, 0xab, 0x56, 0xea, 0x49, 0x83, 0xc0, 0x1e, 0xec, + 0x86, 0x7f, 0x93, 0xe2, 0x4a, 0x18, 0xbe, 0x48, 0xce, + 0xb5, 0x40, 0x98, 0x6c, 0x53, 0x01, 0x04, 0xfd, 0x46, + 0x63, 0x18, 0xeb, 0x81, 0x2e, 0xb4, 0x2f, 0xd0, 0x43, + 0x55, 0x61, 0x5f, 0x92, 0x50, 0x3e, 0x53, 0x79, 0x97, + 0x42, 0xcd, 0xc7, 0x18, 0x30, 0xea, 0xa4, 0x4a, 0xee, + 0xc9, 0x14, 0xb6, 0xff, 0x1c, 0xbb, 0x4f, 0x6f, 0x81, + 0xab, 0x59, 0x50, 0x78, 0x33, 0x1d, 0x64, 0x5c, 0x8d, + 0x08, 0x3b, 0x46, 0x97, 0x31, 0x17, 0x4a, 0x70, 0x6b, + 0x16, 0x66, 0xe5, 0xe4, 0x50, 0xcb, 0x62, 0x67, 0x10, + 0x67, 0x03, 0x2a, 0x56, 0x6f, 0x59, 0x7b, 0x98, 0x66, + 0xb7, 0x15, 0x14, 0xa4, 0x09, 0xe3, 0x8f, 0xca, 0xbe, + 0x84, 0x49, 0x64, 0x58, 0x1b, 0x3a, 0xb5, 0x15, 0x26, + 0x96, 0xb7, 0x6e, 0x49, 0xac, 0xe6, 0x65, 0x81, 0xd2, + 0x1f, 0x51, 0x2e, 0x28, 0xe0, 0x77, 0xc4, 0x49, 0x48, + 0xa6, 0x52, 0x60 ), + CIPHERTEXT ( 0x63, 0x23, 0xdd, 0xbf, 0x9e, 0xb0, 0x46, 0x37, 0x14, + 0xd5, 0x85, 0x7d, 0x18, 0x41, 0xa9, 0xf6, 0x55, 0x29, + 0x51, 0x6c, 0x2f, 0x41, 0x29, 0x56, 0xbc, 0x83, 0x5f, + 0x4f, 0x25, 0x2d, 0x22, 0xa2, 0xce, 0x74, 0x3f, 0x21, + 0x76, 0x7f, 0xcb, 0x28, 0x85, 0x98, 0x82, 0xb5, 0x70, + 0xca, 0x05, 0x39, 0x70, 0xb7, 0x2e, 0x86, 0xf4, 0x51, + 0xff, 0x0c, 0x77, 0xe8, 0x7f, 0x3a, 0x03, 0xc0, 0x53, + 0x6b, 0x38, 0x59, 0x39, 0x4f, 0xce, 0x32, 0x44, 0x42, + 0xac, 0x19, 0x78, 0x74, 0xf8, 0x1a, 0x2c, 0xe6, 0x49, + 0xb9, 0x9f, 0xeb, 0x44, 0x2e, 0x23, 0x12, 0x3f, 0x7a, + 0xb3, 0x61, 0xd2, 0xce, 0x67, 0x68, 0xa1, 0xba, 0xdb, + 0x30, 0xc5, 0x09, 0xe7, 0x9b, 0xee, 0x92, 0x77, 0xd3, + 0x78, 0xfa, 0xda, 0xa6, 0x4e, 0x77, 0xe2, 0x6f, 0x72, + 0x6d, 0xf8, 0x61, 0x10, 0x52, 0x65, 0x30, 0xcd, 0x43, + 0x94, 0x29, 0xb0, 0x17, 0xae, 0x2b, 0xce, 0xc8, 0xcc, + 0x24, 0xf9, 0x94, 0xf5, 0x88, 0x5a, 0x8a, 0x76, 0xfa, + 0xb6, 0x33, 0x9c, 0x70, 0x54, 0xdf, 0x76, 0xaa, 0x6f, + 0x45, 0x01, 0x93, 0xa6, 0x35, 0xd2, 0x1d, 0x22, 0xf7, + 0x1f, 0x1a, 0xe6, 0x85, 0x60, 0x36, 0xe6, 0xca, 0xae, + 0xed, 0x88, 0x40, 0xbb, 0xfb, 0xc8, 0x23, 0x6c, 0x25, + 0xa3, 0x1e, 0x77, 0x5c, 0xba, 0x5f, 0x6e, 0x18, 0x9f, + 0xcb, 0xc3, 0xe9, 0x69, 0x70, 0xca, 0x53, 0x78, 0xfd, + 0x5c, 0x29, 0xa7, 0x12, 0xf5, 0xdc, 0x17, 0x64, 0x1a, + 0xd8, 0x8a, 0xb5, 0x66, 0xd8, 0xc7, 0x8f, 0xff, 0x1b, + 0xb5, 0x7f, 0x9b, 0x2f, 0x7c, 0x9d, 0xb8, 0x38, 0xb4, + 0x30, 0x7c, 0x63, 0xe0, 0x4a, 0x73, 0xd3, 0xef, 0x81, + 0x21, 0xf4, 0x89, 0x32, 0xec, 0x31, 0x8d, 0xff, 0xae, + 0xad, 0x58, 0xa8, 0x3a, 0x7f, 0x79, 0xbc, 0x44, 0xa1, + 0x58, 0x79, 0x90 ), + AUTH ( 0x0c, 0x92, 0xbb, 0x52, 0x91, 0xe9, 0x81, 0xbf, 0x56, 0x22, + 0x93, 0x87, 0x7f, 0x4d, 0xdb, 0x5f ) ); + +/* AES-GCM test case 111 */ +CIPHER_TEST ( wycheproof_aes_gcm_123ab900, &aes_gcm_algorithm, + KEY ( 0xdc, 0x4d, 0xbf, 0x81, 0x1f, 0x95, 0x09, 0xe3, 0x3a, 0x45, + 0xa8, 0xa0, 0x74, 0x3e, 0x93, 0x91, 0xde, 0x33, 0x3f, 0x69, + 0xc5, 0x6e, 0xe4, 0xf0, 0xfe, 0x90, 0xce, 0x21, 0xc2, 0x38, + 0xee, 0x59 ), + IV ( 0x18, 0x59, 0xd3, 0xba, 0x47, 0x10, 0xcd, 0xd3, 0x00, 0xba, + 0xa0, 0x29 ), + ADDITIONAL(), + PLAINTEXT ( 0xdf, 0x91, 0xc4, 0x85, 0x91, 0xf4, 0xca, 0xe8, 0xc4, + 0xd6, 0x59, 0xd0, 0x24, 0xdf, 0xd0, 0xa3, 0x53, 0x59, + 0x81, 0x48, 0x77, 0x64, 0xbf, 0x19, 0xb0, 0x12, 0x71, + 0x3e, 0x6a, 0xc6, 0xd5, 0x78, 0xaa, 0x0b, 0x3a, 0x51, + 0xd7, 0xac, 0x97, 0xcd, 0x50, 0x3f, 0xdc, 0x86, 0x82, + 0xca, 0xbd, 0xb6, 0xa5, 0x25, 0x6e, 0x98, 0x90, 0x45, + 0x83, 0x56, 0xf3, 0x9b, 0x97, 0x49, 0xf6, 0xab, 0x15, + 0x81, 0x12, 0xfb, 0xe4, 0xf9, 0x1a, 0xcd, 0x33, 0x34, + 0x77, 0x99, 0x8b, 0x9f, 0x0d, 0x7c, 0xc0, 0xbe, 0x2d, + 0x40, 0xac, 0xfa, 0x51, 0x03, 0xad, 0xc1, 0xb0, 0xd0, + 0xa5, 0xcc, 0x94, 0x73, 0x3d, 0x70, 0x3e, 0x0d, 0x8c, + 0x26, 0xe0, 0x9e, 0x9d, 0x07, 0x9f, 0xa6, 0xa6, 0x5c, + 0xf3, 0x52, 0x40, 0xa1, 0x62, 0x80, 0x82, 0x6a, 0xb7, + 0xc0, 0xd8, 0xac, 0x58, 0x82, 0xc8, 0x9e, 0x58, 0x44, + 0x42, 0x33, 0xc2, 0xf6, 0x0a, 0xaa, 0xe0, 0xcb, 0xd1, + 0xa7, 0xed, 0x85, 0x00, 0x65, 0x24, 0x2a, 0x93, 0x78, + 0xc3, 0x40, 0x23, 0x2f, 0xd8, 0x6f, 0x1f, 0xd5, 0x2a, + 0x92, 0xc9, 0x60, 0xa9, 0xa8, 0x6f, 0x52, 0x9f, 0x43, + 0x1a, 0xcf, 0x3a, 0xa9, 0x41, 0x33, 0x78, 0x58, 0x03, + 0xf4, 0xac, 0x1a, 0x22, 0x37, 0x83, 0x32, 0xda, 0xa2, + 0x2d, 0xea, 0x3d, 0x34, 0xd2, 0xfd, 0xb7, 0xc3, 0x08, + 0xfa, 0x44, 0xab, 0x93, 0xb3, 0xfb, 0x02, 0xf4, 0x28, + 0xbe, 0x22, 0xfa, 0xd6, 0xc0, 0xb1, 0x0c, 0x13, 0x8a, + 0xf9, 0x7b, 0x92, 0xa1, 0x99, 0x29, 0x6d, 0xd9, 0x47, + 0xc9, 0x3f, 0xbc, 0x40, 0x67, 0x4c, 0x34, 0xc5, 0x62, + 0x3d, 0x26, 0xd9, 0xc9, 0x0d, 0xc6, 0xb3, 0x35, 0x70, + 0x18, 0xb9, 0xf9, 0x25, 0x0f, 0xb4, 0xdd, 0x5c, 0x11, + 0x51, 0x81, 0x91, 0xa2, 0x36, 0x74, 0x5a, 0x2b, 0xd4, + 0x2f, 0x86, 0x37, 0x66 ), + CIPHERTEXT ( 0x9c, 0x51, 0x1d, 0x08, 0xf2, 0x44, 0xcb, 0x69, 0x71, + 0xa3, 0x9b, 0x70, 0x63, 0x9c, 0x4a, 0x53, 0xae, 0x48, + 0x25, 0x4f, 0xcb, 0x3d, 0x2e, 0xea, 0x47, 0x96, 0xec, + 0xc9, 0x96, 0xf1, 0xfe, 0x26, 0xa8, 0xe3, 0x09, 0x32, + 0x25, 0x8a, 0x48, 0xfe, 0x42, 0x37, 0xe5, 0xbf, 0xb0, + 0xe1, 0x32, 0x0d, 0xc5, 0x91, 0x25, 0x6d, 0xc8, 0x3c, + 0xd5, 0x6d, 0xbf, 0x5d, 0x9b, 0x37, 0x7b, 0x78, 0x05, + 0xb7, 0xfa, 0xc0, 0x49, 0x7b, 0x2f, 0x99, 0xe3, 0x31, + 0x0e, 0x9e, 0x2c, 0xc8, 0x00, 0x91, 0x41, 0xa8, 0x2f, + 0x26, 0xf8, 0xa0, 0x22, 0x99, 0xd6, 0x41, 0x38, 0xbb, + 0x1f, 0xe8, 0xa1, 0x24, 0x3d, 0xf3, 0xe9, 0xfb, 0x37, + 0xb5, 0x2b, 0xd3, 0xc2, 0xcc, 0x19, 0xf5, 0x43, 0xb3, + 0xf4, 0x92, 0x8e, 0x5a, 0x73, 0x73, 0x0a, 0x7a, 0x6e, + 0x6d, 0x75, 0x91, 0x9d, 0x11, 0x7d, 0x3d, 0xfe, 0x10, + 0xe8, 0x63, 0xa9, 0x84, 0x6b, 0x2c, 0xa2, 0x60, 0xde, + 0x5d, 0xdd, 0xba, 0x7c, 0xea, 0xc3, 0x70, 0x19, 0xe6, + 0x15, 0xb8, 0x9a, 0x2a, 0xb9, 0x4d, 0xf8, 0xd1, 0xa7, + 0x90, 0x74, 0x99, 0x98, 0xcb, 0x85, 0x31, 0xfe, 0xf1, + 0xef, 0x5f, 0x8a, 0x28, 0xa8, 0xad, 0x60, 0xe8, 0x13, + 0xf7, 0xe7, 0x84, 0x12, 0xca, 0x4d, 0x95, 0xb9, 0x60, + 0x4a, 0x24, 0xa1, 0x6e, 0x4a, 0x3c, 0xa8, 0xee, 0x33, + 0xbf, 0xbb, 0x78, 0x09, 0x04, 0x80, 0x14, 0x94, 0x3e, + 0x5f, 0xd7, 0x96, 0x6a, 0x7d, 0xb2, 0x14, 0xe0, 0x52, + 0xd1, 0xcc, 0x54, 0x6a, 0x6d, 0xa7, 0x2e, 0xc8, 0x9d, + 0x1c, 0x33, 0x98, 0xae, 0xfd, 0xcb, 0x88, 0x1d, 0xfc, + 0x3d, 0x80, 0x0b, 0x73, 0x23, 0xab, 0xcd, 0x75, 0x83, + 0xe9, 0xc8, 0xa3, 0x1f, 0x03, 0xb6, 0x99, 0x5d, 0x4a, + 0xea, 0xc1, 0x7c, 0x5a, 0x56, 0xd8, 0xaf, 0x49, 0x2a, + 0x2b, 0x10, 0x8f, 0xe3 ), + AUTH ( 0x17, 0x09, 0x0c, 0xe5, 0x0e, 0x35, 0x24, 0x4a, 0x59, 0xba, + 0xfc, 0x80, 0xeb, 0xa5, 0xda, 0xe5 ) ); + +/* AES-GCM test case 112 */ +CIPHER_TEST ( wycheproof_aes_gcm_ea998729, &aes_gcm_algorithm, + KEY ( 0x31, 0x7b, 0xa3, 0x31, 0x30, 0x7f, 0x3a, 0x3d, 0x3d, 0x82, + 0xee, 0x1f, 0xda, 0xb7, 0x0f, 0x62, 0xa1, 0x55, 0xaf, 0x14, + 0xda, 0xf6, 0x31, 0x30, 0x7a, 0x61, 0xb1, 0x87, 0xd4, 0x13, + 0xe5, 0x33 ), + IV ( 0xa6, 0x68, 0x7c, 0xf5, 0x08, 0x35, 0x6b, 0x17, 0x46, 0x25, + 0xde, 0xaa ), + ADDITIONAL(), + PLAINTEXT ( 0x32, 0xc1, 0xd0, 0x91, 0x07, 0xc5, 0x99, 0xd3, 0xcc, + 0xe4, 0xe7, 0x82, 0x17, 0x9c, 0x96, 0x6c, 0x6e, 0xf9, + 0x63, 0x68, 0x9d, 0x45, 0x35, 0x1d, 0xbe, 0x0f, 0x6f, + 0x88, 0x1d, 0xb2, 0x73, 0xe5, 0x4d, 0xb7, 0x6f, 0xc4, + 0x8f, 0xdc, 0x5d, 0x30, 0xf0, 0x89, 0xda, 0x83, 0x83, + 0x01, 0xa5, 0xf9, 0x24, 0xbb, 0xa3, 0xc0, 0x44, 0xe1, + 0x9b, 0x3e, 0xd5, 0xaa, 0x6b, 0xe8, 0x71, 0x18, 0x55, + 0x40, 0x04, 0xca, 0x30, 0xe0, 0x32, 0x43, 0x37, 0xd9, + 0x87, 0x83, 0x94, 0x12, 0xbf, 0x8f, 0x8b, 0xbd, 0xd5, + 0x37, 0x20, 0x5d, 0x4b, 0x0e, 0x21, 0x20, 0xe9, 0x65, + 0x37, 0x32, 0x35, 0xd6, 0xcb, 0xd2, 0xfb, 0x37, 0x76, + 0xba, 0x0a, 0x38, 0x4e, 0xc1, 0xd9, 0xb7, 0xc6, 0x31, + 0xa0, 0x37, 0x9f, 0xf9, 0x97, 0xc3, 0xf9, 0x74, 0xa6, + 0xf7, 0xbb, 0xf4, 0xfd, 0x23, 0x01, 0x62, 0x11, 0xf5, + 0xfc, 0x10, 0xac, 0xad, 0xb5, 0xe4, 0x00, 0xd2, 0xff, + 0x0f, 0xdf, 0xd1, 0x93, 0xf5, 0xc6, 0xfc, 0x6d, 0x4f, + 0x72, 0x71, 0xdf, 0xd1, 0x34, 0x9e, 0xd8, 0x0f, 0xbe, + 0xda, 0xeb, 0xb1, 0x55, 0xb9, 0xb0, 0x2f, 0xb3, 0x07, + 0x44, 0x95, 0xd5, 0x5f, 0x9a, 0x24, 0x55, 0xf5, 0x9b, + 0xf6, 0xf1, 0x13, 0x19, 0x1a, 0x02, 0x9c, 0x6b, 0x0b, + 0xa7, 0x5d, 0x97, 0xcd, 0xc0, 0xc8, 0x4f, 0x13, 0x18, + 0x36, 0x33, 0x7f, 0x29, 0xf9, 0xd9, 0x6c, 0xa4, 0x48, + 0xee, 0xc0, 0xcc, 0x46, 0xd1, 0xca, 0x8b, 0x37, 0x35, + 0x66, 0x19, 0x79, 0xd8, 0x33, 0x02, 0xfe, 0xc0, 0x8f, + 0xff, 0xcf, 0x5e, 0x58, 0xf1, 0x2b, 0x1e, 0x70, 0x50, + 0x65, 0x7b, 0x1b, 0x97, 0xc6, 0x4a, 0x4e, 0x07, 0xe3, + 0x17, 0xf5, 0x54, 0xf8, 0x31, 0x0b, 0x6c, 0xcb, 0x49, + 0xf3, 0x6d, 0x48, 0xc5, 0x78, 0x16, 0xd2, 0x49, 0x52, + 0xaa, 0xda, 0x71, 0x1d, 0x4f ), + CIPHERTEXT ( 0xd7, 0xee, 0xbc, 0x95, 0x87, 0xaa, 0x21, 0x13, 0x6f, + 0xa3, 0x8b, 0x41, 0xcf, 0x0e, 0x2d, 0xb0, 0x3a, 0x7e, + 0xa2, 0xba, 0x9e, 0xad, 0xdf, 0x83, 0xd3, 0x3f, 0x78, + 0x10, 0x93, 0x61, 0x7b, 0xf5, 0x0f, 0x49, 0xb2, 0xbf, + 0xe2, 0xf7, 0x17, 0x3b, 0x11, 0x39, 0x12, 0xe2, 0xe1, + 0x77, 0x5f, 0x40, 0xed, 0xfe, 0xd8, 0xb3, 0xb0, 0x09, + 0x9b, 0x9e, 0x1c, 0x22, 0x0d, 0xd1, 0x03, 0xbe, 0x61, + 0x66, 0x21, 0x0b, 0x01, 0x02, 0x9f, 0xeb, 0x24, 0xed, + 0x9e, 0x20, 0x61, 0x4e, 0xdd, 0xc3, 0xce, 0xbe, 0x41, + 0xb0, 0x07, 0x9a, 0x9a, 0x8c, 0x11, 0x7b, 0x59, 0x6c, + 0x90, 0x28, 0x8e, 0xff, 0xd3, 0x79, 0x6f, 0xbd, 0x0c, + 0x7e, 0x8e, 0xab, 0x00, 0x60, 0x9a, 0x64, 0xbe, 0x3a, + 0xd9, 0x59, 0x7c, 0xdb, 0xf3, 0xa8, 0x18, 0xc2, 0x60, + 0xcd, 0x93, 0x8b, 0xdf, 0x23, 0x2e, 0x40, 0x59, 0xae, + 0x35, 0xa2, 0x57, 0x1a, 0x83, 0x88, 0x87, 0xfc, 0x19, + 0x69, 0x12, 0x17, 0x94, 0x86, 0xe0, 0x46, 0xa6, 0x22, + 0x27, 0xa4, 0xca, 0xdd, 0xce, 0x38, 0xcb, 0xbc, 0x37, + 0x58, 0x7b, 0xb9, 0x43, 0x9e, 0xc6, 0x37, 0x60, 0x2b, + 0x68, 0x18, 0xc5, 0xcb, 0xe3, 0xc7, 0x1a, 0x7c, 0x41, + 0x43, 0x96, 0x05, 0x33, 0xdc, 0x74, 0x17, 0x4b, 0xd3, + 0x15, 0xc8, 0xdb, 0x22, 0x7b, 0x69, 0xb5, 0x5b, 0xb7, + 0xfc, 0x30, 0xba, 0x1d, 0x52, 0x13, 0xa7, 0x52, 0xec, + 0x33, 0x92, 0x50, 0x43, 0xce, 0xfb, 0xc1, 0xa6, 0x29, + 0x43, 0xee, 0x5f, 0x34, 0xd5, 0xda, 0x01, 0x79, 0x9e, + 0x69, 0x09, 0x4d, 0x73, 0x2a, 0xef, 0x52, 0xf8, 0xe0, + 0x36, 0x98, 0x0d, 0x00, 0x70, 0xe2, 0x2e, 0x17, 0x3c, + 0x67, 0xc4, 0xbb, 0xcc, 0xa6, 0x1c, 0xc1, 0xee, 0xdb, + 0xd6, 0x01, 0x65, 0x16, 0xc5, 0x92, 0x14, 0x48, 0x19, + 0xdf, 0x13, 0x20, 0x4d, 0xee ), + AUTH ( 0xbf, 0x05, 0x40, 0xd3, 0x4b, 0x20, 0xf7, 0x61, 0x10, 0x1b, + 0xc6, 0x08, 0xb0, 0x24, 0x58, 0xf2 ) ); + +/* AES-GCM test case 113 */ +CIPHER_TEST ( wycheproof_aes_gcm_cdad6d3a, &aes_gcm_algorithm, + KEY ( 0x4f, 0x62, 0xe5, 0x6f, 0x7b, 0x15, 0x03, 0x5f, 0x42, 0x78, + 0x49, 0x71, 0x4b, 0xeb, 0x97, 0xe6, 0xac, 0xf8, 0x83, 0x71, + 0xe1, 0xf6, 0x9b, 0x38, 0x81, 0x29, 0xbb, 0x44, 0x72, 0x73, + 0xd6, 0xb8 ), + IV ( 0x13, 0x7d, 0x5c, 0x98, 0xa9, 0x2f, 0x6d, 0xce, 0xe4, 0xf2, + 0x9d, 0x7c ), + ADDITIONAL(), + PLAINTEXT ( 0xa1, 0x47, 0xb7, 0x16, 0xb8, 0x6a, 0xc8, 0xda, 0xc7, + 0x44, 0x7d, 0x5b, 0xa6, 0x0e, 0xe8, 0xa4, 0x19, 0x1d, + 0x2c, 0x64, 0xa3, 0xaa, 0x04, 0x27, 0x6a, 0xee, 0x7b, + 0xf7, 0xdc, 0x82, 0x49, 0x62, 0xc0, 0x9a, 0xce, 0x20, + 0xa7, 0xe6, 0x14, 0xcc, 0x9e, 0x17, 0x7b, 0x5b, 0x11, + 0x81, 0x9b, 0x8f, 0x17, 0x00, 0x8a, 0x94, 0x08, 0xe8, + 0xcd, 0x8b, 0xb3, 0x4b, 0x40, 0x1b, 0xe3, 0x53, 0x68, + 0xf4, 0x92, 0xc1, 0x76, 0x29, 0xb6, 0x46, 0x72, 0x99, + 0xbf, 0xd2, 0xec, 0x4d, 0x9a, 0x7f, 0x17, 0xde, 0xa6, + 0xf9, 0xca, 0x08, 0x4e, 0x87, 0x1f, 0xb7, 0xfc, 0x78, + 0xc2, 0xbf, 0x29, 0x9b, 0x81, 0x05, 0x22, 0x06, 0x27, + 0x26, 0xc5, 0xca, 0xe1, 0x4b, 0x83, 0x97, 0x22, 0xec, + 0xff, 0x49, 0x9a, 0x2b, 0x3f, 0x08, 0x2b, 0x6d, 0x1b, + 0xfe, 0xdb, 0x75, 0x2f, 0x84, 0xa4, 0xe7, 0x74, 0x59, + 0xc9, 0x26, 0x8d, 0x63, 0x19, 0x93, 0x15, 0x36, 0x3e, + 0x9a, 0xaa, 0x39, 0xbe, 0xa7, 0xfb, 0xbc, 0xc6, 0x0a, + 0x5e, 0xed, 0xc8, 0xa1, 0xa9, 0x82, 0xad, 0x6f, 0xa6, + 0x7c, 0x29, 0x5b, 0x93, 0x2e, 0xb3, 0x99, 0x90, 0x47, + 0xe0, 0xa9, 0x9b, 0x38, 0x23, 0x03, 0x2b, 0x6b, 0x3b, + 0x7c, 0x4c, 0x55, 0x39, 0x70, 0xaf, 0xca, 0x50, 0xcb, + 0x4e, 0x5c, 0xe8, 0x59, 0xc2, 0x5c, 0x59, 0x8e, 0xb6, + 0x82, 0x00, 0x5f, 0x17, 0xae, 0xc5, 0x52, 0x6e, 0x26, + 0x49, 0x32, 0x08, 0x48, 0x36, 0x79, 0xa2, 0x3c, 0xce, + 0xf6, 0xf7, 0x40, 0x3a, 0x3f, 0x30, 0x55, 0xaf, 0xfd, + 0x53, 0x1a, 0x1c, 0xb7, 0xd1, 0x83, 0x89, 0x2d, 0xd5, + 0x77, 0xd5, 0x26, 0xe8, 0xda, 0x8a, 0xa8, 0xb8, 0xb9, + 0x80, 0xa3, 0x6e, 0x17, 0x6b, 0x8d, 0x92, 0x93, 0xe7, + 0x85, 0xac, 0x01, 0xbd, 0xd4, 0xda, 0xc8, 0xcf, 0x8d, + 0xbd, 0xd8, 0x29, 0x26, 0xf1, 0xe3, 0x14, 0x08, 0x28, + 0x4f, 0xb3, 0xaa, 0x01, 0xf4, 0x41, 0x4a, 0xc7, 0xaa, + 0x78, 0x32, 0xd2, 0xec, 0x02, 0xdd, 0x2d, 0xb9, 0xb6, + 0xb4, 0xb6, 0x1d, 0x8c, 0x1c, 0xbb, 0x31, 0xda, 0xc7, + 0xb6, 0xaf, 0xa8, 0xd0, 0x8b, 0x68, 0x77, 0xe4, 0x39, + 0x60, 0x0c, 0x4a, 0x6f, 0xc0, 0x75, 0x11, 0x87, 0x7d, + 0xf2, 0xe9, 0xce, 0x3a, 0x95, 0x38, 0xa7, 0x26, 0x00, + 0x2a, 0x46, 0xc0, 0x83, 0xd9, 0x81, 0x24, 0xb1, 0x85, + 0x73, 0x0f, 0x3b, 0x2a, 0xea, 0x2a, 0x01, 0xcb, 0x62, + 0x6b, 0xe8, 0x09, 0xf8, 0x7b, 0x2a, 0xc1, 0x00, 0x51, + 0x1c, 0x5b, 0x8f, 0xa0, 0xe9, 0xd4, 0x0c, 0x9c, 0x99, + 0x9e, 0xa0, 0xaa, 0x87, 0xaa, 0xd0, 0x8c, 0xfb, 0x62, + 0xc1, 0xba, 0x86, 0x91, 0x78, 0xbe, 0x98, 0x61, 0x56, + 0xf7, 0x62, 0x2d, 0x8c, 0x48, 0xad, 0x80, 0xa5, 0x52, + 0xe9, 0xd0, 0x8c, 0x36, 0x67, 0x1a, 0xe2, 0x32, 0xef, + 0xef, 0xc8, 0x61, 0x9c, 0x56, 0x2e, 0x71, 0x5f, 0x04, + 0xae, 0x52, 0xdb, 0x2a, 0xd8, 0xe4, 0xa0, 0x9e, 0x8c, + 0x67, 0x1b, 0x12, 0x28, 0x95, 0x58, 0x11, 0x7f, 0x95, + 0x62, 0xd5, 0x1b, 0xeb, 0x59, 0xe2, 0x9b, 0x10, 0xdd, + 0x9e, 0xb2, 0x32, 0xe8, 0xfc, 0xdb, 0x1c, 0xfd, 0xd1, + 0x48, 0x99, 0xac, 0xd6, 0x93, 0xde, 0x14, 0xa7, 0xc0, + 0x76, 0xa4, 0x65, 0x63, 0x86, 0xe2, 0x3b, 0x06, 0x41, + 0x5b, 0x2c, 0x7a, 0x93, 0xb1, 0x66, 0xca, 0xd1, 0x04, + 0x8b, 0xc6, 0x05, 0xa4, 0x9a, 0x79, 0xdf, 0x3c, 0x03, + 0xa3, 0x38, 0x0d, 0xe6, 0x8a, 0x4f, 0x01, 0x3e, 0x05, + 0xe5, 0x28, 0x37, 0x45, 0xd4, 0x07, 0x8e, 0xbe, 0x30, + 0x8d, 0xc8, 0x88, 0x1c, 0xed, 0x62, 0xed, 0x57, 0x1a, + 0x93, 0xc6, 0x9e, 0x8a, 0xae, 0x6e, 0x51, 0xf5, 0xe6, + 0x1e, 0x4f, 0xf7, 0x56, 0x99, 0xaa, 0x32 ), + CIPHERTEXT ( 0xb1, 0x94, 0xe6, 0xc8, 0xf8, 0x3e, 0x09, 0x51, 0x5d, + 0x4e, 0xa9, 0x5c, 0x00, 0x57, 0x8f, 0xda, 0xee, 0x8f, + 0x9d, 0x35, 0xad, 0x09, 0xa5, 0x60, 0xba, 0x81, 0xa5, + 0x1a, 0xcc, 0xc4, 0x94, 0x16, 0x59, 0x85, 0x16, 0xc7, + 0x47, 0xe1, 0x6d, 0xbc, 0x5c, 0x44, 0xbf, 0xd5, 0xc7, + 0x90, 0xba, 0x59, 0xb4, 0x7a, 0x6f, 0x57, 0x3a, 0x43, + 0xb2, 0x6c, 0xdb, 0xb2, 0x40, 0x23, 0x0b, 0x1d, 0xca, + 0x00, 0x44, 0x77, 0x70, 0xc4, 0xcf, 0x64, 0x7d, 0xf2, + 0xa7, 0x9e, 0xca, 0x3f, 0x4a, 0x8b, 0x2d, 0xe0, 0x8f, + 0x9f, 0xbc, 0x44, 0x89, 0xc3, 0x0f, 0x6b, 0xcf, 0xcd, + 0x09, 0x6f, 0x1a, 0xa4, 0x17, 0x7f, 0xa2, 0x81, 0x24, + 0x8e, 0x8e, 0x19, 0xe2, 0xea, 0x7d, 0x1f, 0x04, 0x9b, + 0x70, 0x53, 0x94, 0x7a, 0x3a, 0x67, 0xe9, 0x46, 0xeb, + 0xbe, 0xd6, 0x74, 0x66, 0xe0, 0x09, 0xb6, 0x3d, 0xeb, + 0xce, 0xba, 0x54, 0xcc, 0x88, 0x1e, 0x55, 0xe2, 0xd6, + 0x8f, 0x3f, 0x58, 0x43, 0x80, 0xd6, 0xfb, 0x7b, 0x0e, + 0x9a, 0x3f, 0xdb, 0xd7, 0x09, 0xad, 0xac, 0x3a, 0x47, + 0xd6, 0xf9, 0xa5, 0xfc, 0xaf, 0x03, 0x21, 0x8e, 0x18, + 0xcc, 0xa5, 0xa7, 0xa0, 0xe3, 0x40, 0xa7, 0x74, 0xcd, + 0x5c, 0x39, 0xd7, 0x03, 0x1b, 0x63, 0xb5, 0xb5, 0xb8, + 0x96, 0xe1, 0xe7, 0x05, 0xb4, 0xde, 0xd0, 0x99, 0xc3, + 0xc1, 0x11, 0x50, 0x73, 0x8b, 0x21, 0x07, 0xf6, 0x1f, + 0x14, 0x23, 0xfb, 0x72, 0xed, 0x0a, 0x16, 0x07, 0x0c, + 0xd6, 0xf8, 0xa1, 0x8a, 0xe9, 0x0b, 0x16, 0x7b, 0x70, + 0x7c, 0x23, 0xdd, 0xc8, 0x5a, 0x1b, 0x6f, 0xf5, 0xa3, + 0xec, 0x5e, 0x65, 0x4b, 0x14, 0x46, 0xc6, 0xea, 0xe7, + 0x87, 0xc3, 0x1a, 0x94, 0xbc, 0x9a, 0xb5, 0x37, 0x6d, + 0xfe, 0xa3, 0x1b, 0xf8, 0xdf, 0xbd, 0xab, 0xce, 0x45, + 0xc7, 0x50, 0x11, 0x19, 0x46, 0xe6, 0x4c, 0x22, 0xd2, + 0x3c, 0x46, 0xd7, 0xef, 0x64, 0x4c, 0xa0, 0x2c, 0x69, + 0x20, 0x5d, 0x59, 0xb1, 0x81, 0x5a, 0x6a, 0x6e, 0x8b, + 0x14, 0xfe, 0x7e, 0x2d, 0x8a, 0xd1, 0x7f, 0xc7, 0x5e, + 0x65, 0x67, 0x06, 0xb6, 0x7f, 0x25, 0x75, 0x23, 0xd5, + 0x17, 0xd9, 0xf8, 0xb8, 0x31, 0x50, 0xa8, 0x83, 0x59, + 0xe5, 0x6d, 0x64, 0x32, 0x85, 0x9f, 0x8f, 0x90, 0xea, + 0xba, 0x70, 0xcf, 0x90, 0xf8, 0x69, 0x95, 0xaf, 0xc8, + 0x5c, 0x33, 0x99, 0x25, 0x91, 0x53, 0x6b, 0xa3, 0x53, + 0xae, 0x14, 0xa6, 0x93, 0x2d, 0xc9, 0x6a, 0xd7, 0x26, + 0x87, 0xac, 0x34, 0xc2, 0xd4, 0xd5, 0xc9, 0x2e, 0x51, + 0xda, 0x24, 0x6f, 0x55, 0x77, 0x85, 0xdf, 0x19, 0x44, + 0xd2, 0xc3, 0xc8, 0x35, 0x36, 0x73, 0x9b, 0x7d, 0x84, + 0x75, 0xba, 0x39, 0xc6, 0x39, 0xdf, 0x4c, 0xe6, 0x98, + 0x59, 0xc6, 0xff, 0xb9, 0xe9, 0x94, 0x54, 0x56, 0x99, + 0xa3, 0xa1, 0x9d, 0x53, 0x97, 0x9b, 0xfa, 0x34, 0xfd, + 0xec, 0x85, 0x6a, 0x9f, 0x12, 0xac, 0x70, 0xbd, 0xea, + 0xcf, 0x17, 0x27, 0x21, 0x49, 0x6d, 0x76, 0xd8, 0x07, + 0x3a, 0x76, 0xe8, 0x16, 0x0d, 0x99, 0xf4, 0xb7, 0x46, + 0x6e, 0x05, 0xa8, 0xf0, 0x06, 0xcb, 0x44, 0x8d, 0x2a, + 0xf7, 0xee, 0x30, 0x8c, 0xa1, 0x94, 0x40, 0xaa, 0xca, + 0x08, 0xf3, 0x44, 0x22, 0xda, 0x83, 0x0e, 0x47, 0x62, + 0x69, 0xc8, 0x29, 0xa2, 0xb5, 0xb6, 0x4a, 0xce, 0xa4, + 0xf1, 0x14, 0x3d, 0x18, 0x57, 0xcc, 0x26, 0x99, 0xea, + 0x3b, 0xf2, 0xe0, 0x76, 0xb1, 0x6e, 0x50, 0xa9, 0x07, + 0x1c, 0xf1, 0x53, 0x52, 0x18, 0x9e, 0xdf, 0x27, 0x89, + 0x84, 0x10, 0x2e, 0xbc, 0xc7, 0x51, 0xd4, 0x65, 0x10, + 0xb8, 0x16, 0xaf, 0xaf, 0xdb, 0x3f, 0xea, 0x37, 0xa7, + 0xd4, 0x96, 0x62, 0xff, 0x09, 0x03, 0x92 ), + AUTH ( 0x79, 0xe6, 0x4c, 0x4c, 0x0e, 0x8b, 0xb3, 0xa2, 0x14, 0x95, + 0x55, 0x84, 0xd2, 0xbc, 0x8b, 0x16 ) ); + +/* AES-GCM test case 114 */ +CIPHER_TEST ( wycheproof_aes_gcm_e77da61d, &aes_gcm_algorithm, + KEY ( 0x6a, 0xad, 0xa8, 0x28, 0xb2, 0x27, 0x3f, 0xfb, 0x81, 0xdc, + 0x79, 0x4a, 0x86, 0x29, 0xe3, 0x05, 0xcb, 0x64, 0x6f, 0x9d, + 0x26, 0x60, 0x02, 0xbd, 0x31, 0x34, 0x27, 0xd3, 0x84, 0x83, + 0x87, 0x67 ), + IV ( 0x00, 0xde, 0xa4, 0x50, 0x5c, 0xd5, 0x39, 0x6f, 0x6b, 0xa4, + 0x08, 0xa5 ), + ADDITIONAL(), + PLAINTEXT ( 0x1d, 0x99, 0xee, 0x02, 0x2f, 0x95, 0x76, 0xed, 0x69, + 0xaf, 0x8a, 0x7f, 0x39, 0x45, 0x36, 0x2a, 0xb0, 0xc4, + 0x69, 0x1a, 0x4d, 0x33, 0x3a, 0x3f, 0x5f, 0x85, 0xcf, + 0x8d, 0x7d, 0xb7, 0xfb, 0x8a, 0x06, 0x9b, 0x48, 0x99, + 0x8c, 0xf2, 0x86, 0xff, 0xa4, 0x61, 0x5e, 0x87, 0x39, + 0x8c, 0x3c, 0x3c, 0x12, 0x95, 0xd5, 0xbe, 0xe2, 0x72, + 0xbd, 0xeb, 0x51, 0x66, 0x47, 0x0a, 0x89, 0x23, 0xf7, + 0xb7, 0x9d, 0xc9, 0x2b, 0x2a, 0x97, 0xde, 0x34, 0xba, + 0x87, 0xdb, 0x29, 0x07, 0xac, 0x84, 0xfb, 0x23, 0xd3, + 0x8f, 0x2e, 0x1a, 0xf8, 0x35, 0xf7, 0x37, 0x48, 0x8f, + 0xc0, 0x4f, 0xac, 0x70, 0x43, 0x2d, 0x3a, 0x0b, 0x02, + 0xa4, 0x72, 0xf8, 0x51, 0x02, 0x58, 0x03, 0xaa, 0xc6, + 0x92, 0x27, 0x32, 0x73, 0xe2, 0x7b, 0xe1, 0xdd, 0x96, + 0x79, 0xa4, 0xd6, 0x26, 0x99, 0x7c, 0x36, 0x3b, 0xa7, + 0x06, 0xa7, 0xdb, 0x1f, 0x4c, 0xdc, 0x07, 0xfe, 0x3c, + 0x67, 0xfb, 0xec, 0x0a, 0xa8, 0x61, 0x90, 0x38, 0xe0, + 0x56, 0x07, 0xd9, 0x5a, 0x5d, 0xdc, 0x4b, 0x40, 0x3c, + 0xd6, 0xda, 0xbc, 0x41, 0x79, 0x0a, 0xdb, 0x6c, 0xd7, + 0x6e, 0xae, 0xac, 0x34, 0x91, 0xc3, 0xcd, 0x6a, 0x87, + 0x87, 0xe0, 0xf2, 0x9c, 0x04, 0x2b, 0x4e, 0x2a, 0xfe, + 0x98, 0x76, 0x74, 0xb9, 0x49, 0x5e, 0xf5, 0x57, 0x68, + 0xc6, 0x96, 0xbc, 0x6c, 0x3d, 0xf1, 0xc1, 0xe9, 0xa7, + 0xc0, 0x45, 0x6f, 0x47, 0x8a, 0x1a, 0x1c, 0xc4, 0xc3, + 0xa9, 0xb0, 0xf2, 0xcd, 0x3b, 0x42, 0xdb, 0x8d, 0x0b, + 0x6a, 0xa3, 0x6d, 0xfe, 0xc3, 0xd2, 0xc0, 0x8d, 0x13, + 0x98, 0xee, 0xb7, 0x5d, 0xb6, 0x1a, 0xe9, 0x02, 0xd2, + 0xda, 0x5a, 0x1e, 0xfa, 0xc7, 0x90, 0x4b, 0x8a, 0xe3, + 0x2a, 0xf1, 0xff, 0x94, 0x2c, 0x99, 0x76, 0x95, 0x04, + 0xbb, 0x5c, 0x56, 0xf5, 0x81, 0x9e, 0x4f, 0x89, 0x9e, + 0x8b, 0xba, 0xcf, 0xd4, 0x68, 0x2d, 0x82, 0xf4, 0x1e, + 0x17, 0x9a, 0x9d, 0xdf, 0x9a, 0x08, 0x20, 0xcc, 0x43, + 0x16, 0xf2, 0x52, 0xd1, 0xd3, 0x55, 0x97, 0xae, 0xda, + 0x43, 0xab, 0x87, 0x08, 0x87, 0xe6, 0x7a, 0xab, 0xe7, + 0x9f, 0x04, 0x6b, 0x03, 0xa9, 0xa8, 0x35, 0x88, 0x99, + 0x40, 0x58, 0xa0, 0x7b, 0xae, 0xdb, 0xbb, 0xf9, 0xc0, + 0x1d, 0x83, 0x37, 0x32, 0xef, 0xac, 0x89, 0xae, 0x81, + 0x73, 0xf9, 0x02, 0xe8, 0x31, 0xd5, 0x79, 0xd3, 0x1e, + 0x4a, 0x40, 0x9c, 0xef, 0x5e, 0x49, 0x4a, 0x27, 0xbb, + 0x63, 0x67, 0xe8, 0x4f, 0xc5, 0x76, 0x42, 0x04, 0x8e, + 0x44, 0xd6, 0x87, 0xce, 0x73, 0xdd, 0x9e, 0x71, 0x38, + 0x41, 0x82, 0xb2, 0x62, 0xd6, 0x3a, 0x71, 0x56, 0x98, + 0x13, 0x2f, 0x21, 0x8f, 0xc2, 0xc3, 0x61, 0x1e, 0xd0, + 0xdb, 0xf8, 0x14, 0x79, 0x98, 0x66, 0xc8, 0xc4, 0x3b, + 0x4a, 0xa7, 0xc1, 0x3b, 0x5a, 0x53, 0xf9, 0xa3, 0x37, + 0x62, 0x7d, 0x76, 0xbb, 0x96, 0x0f, 0x60, 0xfa, 0x89, + 0x1f, 0x00, 0x76, 0xa5, 0x38, 0xc3, 0x96, 0x50, 0x0c, + 0xef, 0xd2, 0xdd, 0x1e, 0x4e, 0x02, 0x4f, 0x9d, 0x83, + 0x27, 0x5f, 0x9b, 0x2c, 0x0c, 0xe6, 0xdf, 0x41, 0xbb, + 0x64, 0x88, 0x39, 0x8f, 0xc6, 0x57, 0xdb, 0xa0, 0xef, + 0xda, 0xe0, 0x01, 0x9d, 0xd3, 0x1b, 0x03, 0x22, 0x7e, + 0xdc, 0x52, 0x29, 0xaf, 0xf6, 0x0c, 0xd0, 0x83, 0xc0, + 0xf0, 0xb6, 0x66, 0x75, 0xba, 0xaf, 0x91, 0xc3, 0x20, + 0x68, 0x19, 0xa0, 0xc9, 0x85, 0xbc, 0x32, 0x83, 0x60, + 0x0e, 0x9e, 0x6d, 0x62, 0xc6, 0xfa, 0xb2, 0xc6, 0xae, + 0xfd, 0x69, 0x82, 0x9c, 0x75, 0x06, 0x3c, 0x54, 0xad, + 0x11, 0x26, 0x9a, 0xc5, 0xec, 0x56, 0x3e, 0xcd, 0x87, + 0x0c, 0x2a, 0xf4, 0xcd, 0xe6, 0xce, 0xc4, 0x3e ), + CIPHERTEXT ( 0x75, 0x75, 0x0a, 0x14, 0x38, 0x87, 0xad, 0x76, 0x3c, + 0x13, 0x0a, 0x63, 0x7e, 0x5d, 0x75, 0xfc, 0x7b, 0x53, + 0x99, 0x9e, 0x8a, 0x08, 0x5a, 0x74, 0xa5, 0xc7, 0xe4, + 0xe2, 0x65, 0x8d, 0x03, 0x58, 0x6f, 0x36, 0xdd, 0x67, + 0xbd, 0xd0, 0x62, 0x29, 0x92, 0xfc, 0x44, 0x08, 0x22, + 0xe6, 0x35, 0x34, 0x39, 0x1a, 0x43, 0x5c, 0x93, 0x4f, + 0xa7, 0xfa, 0x19, 0xf5, 0x19, 0x66, 0x95, 0x51, 0x3a, + 0xc8, 0x12, 0xe7, 0x78, 0x92, 0x8a, 0x67, 0x7a, 0xf3, + 0x7a, 0x8b, 0xc3, 0x6a, 0x19, 0xb7, 0xe3, 0xab, 0x05, + 0xe1, 0x85, 0x42, 0x9a, 0xa5, 0xe5, 0xe1, 0x7c, 0xac, + 0xdd, 0x89, 0x71, 0xe3, 0xc5, 0x51, 0xdb, 0x83, 0xc5, + 0x85, 0x32, 0x42, 0x77, 0x84, 0x3c, 0x17, 0x83, 0x77, + 0x13, 0x79, 0x28, 0x0d, 0x13, 0x93, 0xee, 0xb2, 0x6e, + 0x9e, 0x7f, 0xf7, 0x00, 0x6d, 0x43, 0x7b, 0x7c, 0xb0, + 0xfe, 0x37, 0x3b, 0x2d, 0xc3, 0x23, 0x8d, 0x87, 0xba, + 0xdf, 0x9e, 0xdd, 0x76, 0x7a, 0xd7, 0xb4, 0x72, 0x6a, + 0x77, 0x7b, 0x99, 0xcd, 0x1d, 0x11, 0xf1, 0xbc, 0x16, + 0x09, 0x8b, 0x12, 0x30, 0xa1, 0x94, 0xbd, 0x94, 0x35, + 0xca, 0xa0, 0x73, 0x02, 0x76, 0xeb, 0xc0, 0xc4, 0x4a, + 0x92, 0x3e, 0x3a, 0x14, 0x75, 0x1e, 0x12, 0x5a, 0xa7, + 0x10, 0x0c, 0xbd, 0x68, 0x22, 0x02, 0xf9, 0xa7, 0x1b, + 0xf0, 0x8e, 0x28, 0xae, 0x36, 0xf5, 0x5c, 0x6f, 0xce, + 0x99, 0x8a, 0x4c, 0x47, 0x4d, 0xd5, 0xa5, 0xd5, 0x5d, + 0x25, 0xae, 0xf3, 0x32, 0xc3, 0xb4, 0x64, 0x0e, 0x20, + 0xb2, 0x22, 0xb7, 0x30, 0x5d, 0xfc, 0x21, 0xf6, 0x0e, + 0x9f, 0x5d, 0xd9, 0x7c, 0x19, 0x87, 0x12, 0x0b, 0xa0, + 0xb7, 0xb7, 0xe8, 0x5c, 0xe8, 0x10, 0xf3, 0x78, 0xd4, + 0x01, 0x98, 0x7b, 0x82, 0x46, 0x79, 0xff, 0xe4, 0x5c, + 0xca, 0xde, 0x89, 0xe5, 0xed, 0x45, 0x17, 0x6b, 0xab, + 0x9d, 0x4a, 0x14, 0xc5, 0xa7, 0x53, 0xd3, 0x2e, 0x11, + 0x3a, 0x2a, 0xba, 0x5d, 0xfe, 0x65, 0xac, 0x75, 0x91, + 0x8a, 0xfe, 0xd6, 0xcb, 0x21, 0x22, 0xcf, 0x24, 0x97, + 0x1f, 0xab, 0x93, 0x2b, 0x64, 0xe1, 0x04, 0xa8, 0xa0, + 0x1c, 0x75, 0x5b, 0x4f, 0xb8, 0x6a, 0xfd, 0x49, 0xd0, + 0xce, 0x1a, 0x19, 0x09, 0x19, 0x25, 0x51, 0xf5, 0x79, + 0xc3, 0x58, 0x7d, 0x1a, 0x61, 0xba, 0x5b, 0x04, 0x15, + 0xcf, 0x90, 0xd5, 0x72, 0x32, 0x0a, 0xf3, 0xb0, 0xc5, + 0xd5, 0xd6, 0x72, 0xd4, 0x20, 0x72, 0x28, 0xe7, 0x53, + 0x22, 0xff, 0xfb, 0x62, 0x12, 0x00, 0xfc, 0xb5, 0x3d, + 0x97, 0x0f, 0x6a, 0x74, 0xe0, 0x6b, 0xd9, 0x0d, 0x8f, + 0x9a, 0x1c, 0xf2, 0x3c, 0x87, 0xc0, 0x7d, 0xeb, 0x14, + 0x45, 0x6d, 0xc2, 0x1d, 0x84, 0xb8, 0xf6, 0xca, 0x45, + 0xb8, 0xc3, 0xaf, 0x6d, 0x6d, 0x5c, 0x11, 0x04, 0x88, + 0xc9, 0x19, 0x61, 0x7c, 0x11, 0x6c, 0x25, 0xba, 0xef, + 0x4a, 0x7a, 0x0d, 0x47, 0xa4, 0xb2, 0x47, 0xc9, 0x44, + 0x40, 0x17, 0x6d, 0xd5, 0x4a, 0x01, 0x4d, 0x63, 0x9a, + 0x61, 0x39, 0xd8, 0x34, 0x98, 0xa5, 0x85, 0xb5, 0x68, + 0x7c, 0xea, 0x85, 0x9d, 0xbb, 0x32, 0xb8, 0x52, 0x69, + 0x0c, 0x4d, 0xcd, 0x23, 0xae, 0x40, 0x58, 0x49, 0x8e, + 0xe7, 0x51, 0xae, 0xc8, 0xaf, 0xf3, 0xb0, 0xf1, 0xf0, + 0xef, 0xd4, 0xbb, 0x50, 0x63, 0x6d, 0x11, 0x82, 0xe1, + 0x11, 0xa6, 0xa9, 0x8f, 0x95, 0xf2, 0xd5, 0x5f, 0x8f, + 0x4e, 0x75, 0xc1, 0xae, 0x8a, 0x55, 0xe8, 0x51, 0xc5, + 0x09, 0x5b, 0xcd, 0x9d, 0x1a, 0xd8, 0x6f, 0xc7, 0x9b, + 0x0b, 0xf9, 0xad, 0x2f, 0x58, 0x29, 0x3a, 0x62, 0x4c, + 0x25, 0x04, 0xb3, 0x04, 0x69, 0xf7, 0xed, 0x1c, 0x64, + 0x55, 0x49, 0xd3, 0x71, 0x77, 0xdf, 0xcd, 0x95 ), + AUTH ( 0x8f, 0xba, 0x48, 0xda, 0xb1, 0x8a, 0x4b, 0xea, 0xdd, 0xff, + 0x24, 0x25, 0x2e, 0x62, 0x08, 0x3a ) ); + +/* AES-GCM test case 115 */ +CIPHER_TEST ( wycheproof_aes_gcm_599f93e3, &aes_gcm_algorithm, + KEY ( 0xaf, 0xd5, 0x79, 0xaa, 0x1a, 0xcc, 0xc6, 0x82, 0xac, 0xa5, + 0x4e, 0x14, 0x2a, 0xa6, 0x9d, 0xf0, 0x98, 0x02, 0xf0, 0x20, + 0xb2, 0x4a, 0x42, 0xc4, 0x1d, 0xb5, 0x8f, 0x69, 0x97, 0xed, + 0xc6, 0x78 ), + IV ( 0x9f, 0x79, 0xd1, 0xda, 0x95, 0x74, 0x91, 0x06, 0x9d, 0x77, + 0x44, 0x96 ), + ADDITIONAL(), + PLAINTEXT ( 0xba, 0xfc, 0x6e, 0x86, 0x5c, 0x48, 0xbd, 0x34, 0xb7, + 0xf9, 0x32, 0x9e, 0x35, 0xcf, 0xb2, 0x86, 0xcd, 0x4d, + 0xc3, 0x1f, 0x83, 0x16, 0x17, 0x12, 0x18, 0xbf, 0x04, + 0x71, 0xdf, 0xfd, 0x35, 0xa3, 0x30, 0xa1, 0x81, 0x69, + 0x7c, 0xa5, 0x17, 0x86, 0x88, 0xdd, 0x87, 0xef, 0xe5, + 0x27, 0x92, 0x4f, 0x90, 0xd1, 0xc7, 0x8b, 0xa4, 0x0d, + 0xe7, 0x09, 0x52, 0xff, 0x44, 0xc2, 0x6e, 0xfe, 0x21, + 0x59, 0xe5, 0x93, 0x58, 0xf3, 0x93, 0x15, 0x73, 0xdf, + 0x93, 0x73, 0xa7, 0x3b, 0x91, 0xba, 0x95, 0x92, 0xe1, + 0x21, 0x40, 0xcc, 0x00, 0x9f, 0xee, 0xdd, 0x25, 0x95, + 0xe5, 0xb6, 0xf0, 0x66, 0xb5, 0xef, 0x6d, 0xe9, 0x9d, + 0x4c, 0x31, 0x55, 0x2c, 0xec, 0xb0, 0x61, 0x4f, 0x1d, + 0xce, 0x99, 0x0e, 0x46, 0xe7, 0x69, 0x43, 0x82, 0xf3, + 0xcf, 0x3c, 0xcf, 0xcd, 0x1e, 0xa6, 0x2e, 0x56, 0x3e, + 0x5f, 0x0d, 0xc3, 0x6c, 0xb5, 0xa8, 0x4e, 0x0c, 0x0b, + 0x3f, 0x1f, 0x8f, 0x3f, 0xa9, 0x10, 0x0f, 0x48, 0x71, + 0x95, 0xff, 0x2e, 0x31, 0x69, 0xad, 0x08, 0x13, 0x6a, + 0xa8, 0xad, 0x56, 0x65, 0x48, 0xc9, 0x83, 0x6a, 0xa0, + 0x0d, 0xba, 0xc7, 0x47, 0x16, 0xc2, 0x6e, 0x83, 0x8c, + 0x14, 0x86, 0xa0, 0x08, 0x4d, 0x3d, 0xfd, 0x69, 0x25, + 0x85, 0xe2, 0xe5, 0xae, 0x7c, 0x75, 0xca, 0xf0, 0xe7, + 0xaf, 0x60, 0x21, 0x9f, 0x96, 0x11, 0x6a, 0xe9, 0x63, + 0xb4, 0xa5, 0x89, 0x9c, 0xb3, 0x0a, 0x12, 0x0d, 0xaa, + 0xca, 0x78, 0x33, 0x77, 0x66, 0x92, 0xc2, 0x5a, 0xd7, + 0xc1, 0x85, 0xe6, 0xa2, 0xd7, 0x0c, 0xe0, 0x3f, 0xf1, + 0x56, 0xcd, 0x25, 0xd7, 0x61, 0x53, 0x53, 0x9d, 0x68, + 0x55, 0x77, 0x3e, 0x21, 0x14, 0x2f, 0x9b, 0xa0, 0x31, + 0x35, 0x62, 0x87, 0x5f, 0x10, 0x5a, 0x2b, 0x77, 0x0a, + 0x15, 0xb5, 0x33, 0xfb, 0xf5, 0x11, 0x0d, 0xaf, 0xb6, + 0x93, 0x29, 0x98, 0x2a, 0xb4, 0x4e, 0xd1, 0xb9, 0xf3, + 0x21, 0xd7, 0xb7, 0x9a, 0xe1, 0x5a, 0x19, 0xd9, 0xf3, + 0xbd, 0x4c, 0x50, 0x4c, 0x24, 0xb2, 0x3b, 0x81, 0x2d, + 0x51, 0x4c, 0x19, 0xae, 0x2a, 0x34, 0x7c, 0xc1, 0x8c, + 0x12, 0xce, 0x91, 0x5a, 0x0b, 0xad, 0x7c, 0xc8, 0x9a, + 0x87, 0x20, 0xd4, 0xba, 0x5e, 0xe0, 0x96, 0x4f, 0xe0, + 0x5e, 0x4c, 0xc5, 0x9a, 0x13, 0xf9, 0x2c, 0x67, 0x0b, + 0x86, 0x55, 0x07, 0x1e, 0x21, 0x6f, 0x19, 0xad, 0x05, + 0xf4, 0xbb, 0xcc, 0xa6, 0xdc, 0x7f, 0xee, 0xb1, 0x88, + 0xd6, 0x26, 0x9c, 0x58, 0x06, 0x5c, 0x98, 0xfc, 0xbb, + 0xac, 0x18, 0x3a, 0x9a, 0xbb, 0x38, 0x11, 0xd8, 0x0c, + 0xb4, 0x76, 0x54, 0x4b, 0xd7, 0x4b, 0x26, 0x99, 0x1f, + 0x3d, 0xf9, 0x87, 0xf0, 0xed, 0x0e, 0xa6, 0x23, 0x86, + 0x59, 0xac, 0x09, 0xa2, 0x25, 0x0f, 0xec, 0xc0, 0x72, + 0x3f, 0xfc, 0x51, 0x64, 0x7b, 0x74, 0xbd, 0xf4, 0x54, + 0xf2, 0x6e, 0x11, 0x11, 0x2c, 0x8b, 0xbd, 0x79, 0x7f, + 0x09, 0xa3, 0xbe, 0x82, 0x51, 0xc6, 0xb5, 0xb3, 0x19, + 0xed, 0x95, 0x37, 0x27, 0x8c, 0xc1, 0xab, 0xed, 0xb3, + 0x2a, 0xa1, 0x08, 0x40, 0x98, 0x4b, 0x96, 0xe8, 0x63, + 0x6b, 0x28, 0x93, 0x35, 0x84, 0x6a, 0xe4, 0xfb, 0xd4, + 0xa0, 0x0f, 0x66, 0x00, 0xd9, 0x8e, 0xbe, 0x25, 0x88, + 0x5c, 0x68, 0xd7, 0x04, 0x3c, 0xe0, 0xdc, 0x52, 0x29, + 0xd7, 0xe9, 0xbd, 0x51, 0xbe, 0xa9, 0xb8, 0xfe, 0x05, + 0x52, 0xf4, 0x06, 0x88, 0x42, 0x9c, 0x48, 0x26, 0x29, + 0xce, 0xd6, 0x23, 0xf6, 0x07, 0x48, 0x58, 0x14, 0x7e, + 0x73, 0xda, 0x3f, 0xf4, 0xad, 0x2a, 0xe4, 0x5c, 0x1a, + 0x1c, 0x8a, 0x6c, 0x5b, 0x3b, 0x2c, 0x3d, 0x56, 0x8a, + 0x75, 0x66, 0x08, 0x17, 0x9f, 0x63, 0xb5, 0x80, 0xfd ), + CIPHERTEXT ( 0xcd, 0x48, 0xa6, 0x95, 0x28, 0x68, 0xf7, 0xf7, 0xc8, + 0x94, 0x16, 0x52, 0xf6, 0x41, 0x8b, 0x37, 0x4d, 0xb9, + 0xaf, 0xd4, 0xbe, 0x17, 0x9a, 0x94, 0x8d, 0x33, 0x6b, + 0xa0, 0xd8, 0x04, 0x38, 0xaf, 0x89, 0x5a, 0x21, 0xf2, + 0x68, 0x36, 0x4f, 0xb1, 0xc5, 0xc6, 0x47, 0x2f, 0x67, + 0xbd, 0x4c, 0xb7, 0xe4, 0x64, 0x06, 0x8f, 0xe4, 0x43, + 0x77, 0xfb, 0x7c, 0xf4, 0x98, 0x5b, 0x84, 0x28, 0xa0, + 0x68, 0xf5, 0xa1, 0x80, 0x94, 0x98, 0x22, 0x8f, 0xa8, + 0xd8, 0x05, 0x36, 0x50, 0x68, 0x7a, 0xfb, 0x9e, 0xbf, + 0x3b, 0x19, 0xb4, 0x3c, 0x38, 0xe5, 0x68, 0x45, 0xe9, + 0x35, 0x01, 0x98, 0xae, 0x05, 0x11, 0xef, 0xba, 0x7e, + 0xa8, 0xbf, 0x81, 0x59, 0xa0, 0x8f, 0x72, 0xe4, 0x22, + 0x7e, 0xc5, 0x0d, 0xa5, 0xb2, 0x9d, 0xbb, 0x18, 0xfb, + 0xf1, 0x3c, 0xd2, 0x2e, 0x13, 0x97, 0x8e, 0xfb, 0x04, + 0xb0, 0x2b, 0xa1, 0xa4, 0xb2, 0xb1, 0xae, 0x17, 0x1b, + 0x61, 0x29, 0x29, 0xd6, 0x77, 0x2d, 0x95, 0x8a, 0xf3, + 0x8d, 0x3d, 0xfb, 0x2c, 0x11, 0x68, 0x4a, 0x90, 0x7d, + 0x90, 0xb7, 0x86, 0xb4, 0x6a, 0xe4, 0x94, 0xed, 0x1c, + 0x9d, 0xa4, 0x86, 0xcc, 0x7b, 0x54, 0xbd, 0x9c, 0xf2, + 0xd3, 0x4b, 0xe3, 0x4d, 0xd1, 0x30, 0x13, 0xbd, 0x72, + 0xe0, 0x6f, 0xda, 0xd1, 0x7e, 0xf1, 0x43, 0xd5, 0xb8, + 0x57, 0x80, 0x4d, 0xe4, 0xa5, 0x64, 0x09, 0xa3, 0x5a, + 0x41, 0x28, 0xfd, 0x75, 0x24, 0x40, 0xfe, 0xc0, 0x2b, + 0x93, 0x04, 0xce, 0xcc, 0xe1, 0xbc, 0x67, 0x60, 0xd6, + 0xfb, 0x03, 0x97, 0xbd, 0x16, 0x09, 0xff, 0x30, 0x3c, + 0x9a, 0x0e, 0xa3, 0xbc, 0x5c, 0xc1, 0x14, 0x82, 0xf0, + 0x83, 0xb6, 0x47, 0x1f, 0x2e, 0x01, 0xd3, 0xd9, 0x9e, + 0xe2, 0x3c, 0x35, 0xc3, 0x7a, 0x62, 0x13, 0x5d, 0x9c, + 0xec, 0x9c, 0x69, 0xe0, 0x53, 0x52, 0x84, 0x48, 0xd8, + 0x13, 0xaf, 0xda, 0x07, 0xfb, 0xd4, 0x06, 0xec, 0x74, + 0xe0, 0xdf, 0x2d, 0x18, 0x22, 0xbb, 0xf6, 0x25, 0x39, + 0x2a, 0x2d, 0x91, 0xcc, 0x39, 0xd8, 0x5c, 0x6d, 0xe8, + 0xba, 0x43, 0xe5, 0xb7, 0xcf, 0x0e, 0xc2, 0xe4, 0xa0, + 0xe1, 0x88, 0x37, 0xf0, 0x4b, 0x28, 0x4d, 0x6c, 0xe6, + 0x27, 0x7b, 0xb9, 0x1d, 0xa9, 0xc0, 0xc3, 0x38, 0x5b, + 0xf0, 0x57, 0x01, 0x81, 0xde, 0xee, 0xd3, 0xce, 0x23, + 0x4e, 0x86, 0x8b, 0x2c, 0x40, 0x7a, 0x2a, 0x7d, 0x8d, + 0x51, 0x6b, 0x83, 0xcd, 0x86, 0xb8, 0x44, 0xc2, 0x3a, + 0xaf, 0x3b, 0xec, 0xe9, 0x4a, 0x1f, 0x84, 0x30, 0x07, + 0xcc, 0xd8, 0xbc, 0x28, 0x59, 0xe0, 0xd6, 0x4b, 0xa1, + 0x61, 0x4c, 0x27, 0x21, 0xbb, 0xb6, 0x6a, 0x3a, 0x40, + 0xe3, 0xf5, 0x55, 0xa2, 0xb3, 0x7e, 0x07, 0xfb, 0x15, + 0xb1, 0x16, 0xf6, 0x91, 0x56, 0xa4, 0x26, 0x0f, 0x1e, + 0xb1, 0x9d, 0x81, 0x40, 0xbc, 0x2a, 0xd3, 0xf9, 0xfd, + 0x66, 0x6a, 0xe3, 0x58, 0x14, 0xe2, 0xfd, 0x1c, 0xfe, + 0x17, 0x89, 0x51, 0xf5, 0xe1, 0x0c, 0xb8, 0x54, 0x95, + 0xe4, 0x65, 0x77, 0x3b, 0x42, 0x48, 0xbe, 0xf9, 0xe7, + 0x78, 0x1e, 0x4a, 0x3f, 0xb6, 0xca, 0xf2, 0xf4, 0x41, + 0x80, 0xde, 0x42, 0xf4, 0xbf, 0xf3, 0x77, 0x2f, 0x3e, + 0x87, 0xd8, 0x12, 0x9d, 0xb7, 0x70, 0xc5, 0xe8, 0xa9, + 0x53, 0xe5, 0xa3, 0x42, 0xc8, 0x85, 0xea, 0x1c, 0xd4, + 0x5a, 0x97, 0x87, 0x92, 0x12, 0x8c, 0xe4, 0x20, 0xe6, + 0x32, 0x45, 0xff, 0x0a, 0x1b, 0xb0, 0x73, 0x0a, 0x7a, + 0x50, 0x67, 0x71, 0xe2, 0xa9, 0x38, 0x74, 0xe3, 0xf1, + 0xee, 0x9b, 0xa9, 0xfc, 0x0a, 0xf9, 0x6a, 0x0d, 0x34, + 0xd2, 0x22, 0xd2, 0x9a, 0xeb, 0xd7, 0x91, 0x41, 0x6f, + 0x39, 0x90, 0x52, 0xad, 0xb2, 0x95, 0xc3, 0xc4, 0x3c ), + AUTH ( 0x32, 0xb2, 0x76, 0xfd, 0x0c, 0x1d, 0xa7, 0xa8, 0x23, 0xa5, + 0xaf, 0x07, 0x4a, 0xec, 0xac, 0xb5 ) ); + +/* AES-GCM test case 116 */ +CIPHER_TEST ( wycheproof_aes_gcm_12c1aa5e, &aes_gcm_algorithm, + KEY ( 0x0f, 0x11, 0x2e, 0x59, 0xcd, 0xcc, 0xd8, 0x51, 0xc3, 0xb8, + 0xe7, 0x6c, 0x9f, 0x05, 0xa3, 0xb7, 0xc2, 0xe4, 0xfe, 0xca, + 0x58, 0x46, 0xaf, 0xeb, 0x35, 0x1c, 0x1c, 0xbc, 0xac, 0xe8, + 0x2f, 0x04 ), + IV ( 0x71, 0x47, 0x97, 0x33, 0x39, 0xd8, 0x67, 0x89, 0xa2, 0xc9, + 0xa9, 0x58 ), + ADDITIONAL ( 0x37, 0x12, 0x8b, 0xe4, 0x5f, 0x0a, 0x7f, 0x32, 0x95, + 0x46, 0xe1, 0x49, 0x2c, 0x3c, 0x9c, 0x2d, 0x25, 0x34, + 0xd5, 0xb1, 0xf5, 0x14, 0x7e, 0x49, 0xab, 0x91, 0x22, + 0x1e, 0x7c, 0x3e, 0xde, 0xa2, 0x1b, 0xbe, 0x47, 0xbf, + 0xe3, 0x61, 0x94, 0x37, 0xce, 0x3c, 0x61, 0xe6, 0xe9, + 0x46, 0xc5, 0x04, 0xf3, 0x48, 0x29, 0x69, 0x18, 0x21, + 0x9e, 0x51, 0xbf, 0x2c, 0x55, 0x98, 0x58, 0x9c, 0xff ), + PLAINTEXT ( 0x10, 0x2e, 0x58, 0x04, 0xdd, 0xa1, 0xfb, 0x5d, 0x65, + 0x60, 0x77, 0xed, 0xb1, 0x5c, 0xad, 0xb5, 0xd0, 0xbd, + 0xee, 0x8c ), + CIPHERTEXT ( 0x61, 0x8a, 0xc6, 0x26, 0xae, 0x0e, 0x8d, 0x06, 0xc2, + 0xfd, 0x2f, 0xb6, 0x6b, 0xe2, 0x53, 0xdc, 0x26, 0xed, + 0x6e, 0x38 ), + AUTH ( 0xd8, 0xd9, 0x3f, 0xf9, 0x75, 0xcb, 0x98, 0x8f, 0x09, 0x17, + 0x4d, 0xcd, 0x43, 0x9c, 0xb6, 0xa4 ) ); + +/* AES-GCM test case 117 */ +CIPHER_TEST ( wycheproof_aes_gcm_b2c6c3cd, &aes_gcm_algorithm, + KEY ( 0x2c, 0xe6, 0xb4, 0xc1, 0x5f, 0x85, 0xfb, 0x2d, 0xa5, 0xcc, + 0x6c, 0x26, 0x94, 0x91, 0xee, 0xf2, 0x81, 0x98, 0x03, 0x09, + 0x18, 0x12, 0x49, 0xeb, 0xf2, 0x83, 0x2b, 0xd6, 0xd0, 0x73, + 0x2d, 0x0b ), + IV ( 0xc0, 0x64, 0xfa, 0xe9, 0x17, 0x3b, 0x17, 0x3f, 0xd6, 0xf1, + 0x1f, 0x34 ), + ADDITIONAL ( 0x49, 0x8d, 0x30, 0x75, 0xb0, 0x9f, 0xed, 0x99, 0x82, + 0x80, 0x58, 0x3d, 0x61, 0xbb, 0x36, 0xb6, 0xce, 0x41, + 0xf1, 0x30, 0x06, 0x3b, 0x80, 0x82, 0x4d, 0x15, 0x86, + 0xe1, 0x43, 0xd3, 0x49, 0xb1, 0x26, 0xb1, 0x6a, 0xa1, + 0x0f, 0xe5, 0x73, 0x43, 0xed, 0x22, 0x3d, 0x63, 0x64, + 0xee, 0x60, 0x22, 0x57, 0xfe, 0x31, 0x3a, 0x7f, 0xc9, + 0xbf, 0x90, 0x88, 0xf0, 0x27, 0x79, 0x5b, 0x8d, 0xc1, + 0xd3 ), + PLAINTEXT ( 0xf8, 0xa2, 0x7a, 0x4b, 0xaf, 0x00, 0xdc, 0x05, 0x55, + 0xd2, 0x22, 0xf2, 0xfa, 0x4f, 0xb4, 0x2d, 0xc6, 0x66, + 0xea, 0x3c ), + CIPHERTEXT ( 0xae, 0xd5, 0x8d, 0x8a, 0x25, 0x2f, 0x74, 0x0d, 0xba, + 0x4b, 0xf6, 0xd3, 0x67, 0x73, 0xbd, 0x5b, 0x41, 0x23, + 0x4b, 0xba ), + AUTH ( 0x01, 0xf9, 0x3d, 0x74, 0x56, 0xaa, 0x18, 0x4e, 0xbb, 0x49, + 0xbe, 0xa4, 0x72, 0xb6, 0xd6, 0x5d ) ); + +/* AES-GCM test case 118 */ +CIPHER_TEST ( wycheproof_aes_gcm_293c46f8, &aes_gcm_algorithm, + KEY ( 0x52, 0x35, 0x0d, 0xa5, 0xa5, 0x72, 0x91, 0x1e, 0xe0, 0xe0, + 0xfc, 0xed, 0xb1, 0x15, 0xaf, 0x6f, 0x45, 0x70, 0xfb, 0xf9, + 0xc7, 0x4a, 0x11, 0xbc, 0x18, 0x44, 0x44, 0xd6, 0xa6, 0x21, + 0xd6, 0x0f ), + IV ( 0xd6, 0x8a, 0xd0, 0x45, 0xc1, 0xb9, 0xc2, 0x92, 0x3c, 0xf5, + 0x40, 0x4c ), + ADDITIONAL ( 0x03, 0xa9, 0x4b, 0x38, 0x41, 0x29, 0x2d, 0x9b, 0xbf, + 0x72, 0xf4, 0x13, 0xc0, 0x91, 0x67, 0xc5, 0x4e, 0xe1, + 0x05, 0x37, 0xc0, 0x49, 0xaf, 0xe2, 0xbb, 0xce, 0xc4, + 0x3b, 0x18, 0xf3, 0x89, 0x0b, 0x2f, 0xcd, 0xd3, 0xbb, + 0x31, 0xe6, 0xd7, 0x09, 0x27, 0x4e, 0x19, 0x9c, 0x0c, + 0x46, 0x48, 0xeb, 0x3d, 0x8b, 0x38, 0xe0, 0xc1, 0xbf, + 0x7f, 0x30, 0x94, 0x43, 0xbe, 0xf6, 0x93, 0x7c, 0xde, + 0x41, 0x23 ), + PLAINTEXT ( 0x4e, 0x6e, 0x6d, 0xad, 0x2c, 0x16, 0xcf, 0xc6, 0xe7, + 0xca, 0xc0, 0x36, 0x36, 0xa4, 0xa6, 0xd8, 0x8b, 0xd6, + 0xa1, 0x3e ), + CIPHERTEXT ( 0xc7, 0x76, 0x44, 0x11, 0xbe, 0x13, 0xcf, 0xea, 0xae, + 0xce, 0x76, 0x1b, 0xd3, 0xbb, 0x13, 0x55, 0x2f, 0x08, + 0x80, 0x48 ), + AUTH ( 0xbc, 0xc2, 0x54, 0x4e, 0x79, 0xf3, 0x4e, 0xa1, 0x07, 0x6a, + 0x12, 0xb7, 0x64, 0x41, 0xd6, 0xfa ) ); + +/* AES-GCM test case 119 */ +CIPHER_TEST ( wycheproof_aes_gcm_1af86832, &aes_gcm_algorithm, + KEY ( 0xd0, 0x58, 0x30, 0x4c, 0x0b, 0xa0, 0x39, 0xb2, 0xe2, 0xd0, + 0x86, 0x61, 0xfd, 0x8f, 0x6d, 0xb8, 0x87, 0x79, 0xbd, 0x5c, + 0xe5, 0x80, 0xeb, 0x76, 0x6c, 0x1d, 0x6a, 0xb3, 0x4b, 0x94, + 0xee, 0x94 ), + IV ( 0x3c, 0x55, 0x33, 0x97, 0xfa, 0xfd, 0xa0, 0xeb, 0x06, 0xa5, + 0x9f, 0x23 ), + ADDITIONAL ( 0xcf, 0xb1, 0xfe, 0x1c, 0x47, 0xe2, 0x45, 0x01, 0x09, + 0xea, 0xed, 0x4e, 0x1a, 0xac, 0x94, 0x31, 0xaa, 0x5d, + 0xb1, 0xe3, 0xb7, 0xee, 0xac, 0xad, 0x3e, 0xbc, 0x9e, + 0x8e, 0x1f, 0x3e, 0x0a, 0x82, 0x3f, 0x75, 0x7f, 0x61, + 0x97, 0x61, 0xe6, 0x1a, 0xd0, 0x5a, 0xf8, 0xce, 0xf8, + 0x31, 0x04, 0x89, 0x09, 0x40, 0xcd, 0x59, 0x21, 0x37, + 0xeb, 0x7b, 0xa5, 0x87, 0x9b, 0x95, 0x75, 0x9c, 0x8b, + 0xe1, 0x52, 0x5f, 0x9a, 0x01, 0xfc, 0x01, 0x58, 0x2d, + 0x93, 0xa2, 0xa8, 0x41, 0x33, 0x6a, 0x10, 0x4d, 0x16, + 0x99, 0x68, 0xc2, 0x74, 0xb5, 0xa8, 0xc3, 0x08, 0x83, + 0xb4, 0xbd, 0x62, 0x17, 0x25, 0xf6, 0x90, 0x79, 0xbb, + 0x94, 0xa1, 0x74, 0xa3, 0xc9, 0x4d, 0xb6, 0x2f, 0x2a, + 0xe7, 0x46, 0xd0, 0x32, 0x00, 0xf0, 0x1c, 0x19, 0xaa, + 0xa8, 0xa3, 0xb8, 0x9e, 0x78, 0xb9, 0x9a, 0x62, 0xf7, + 0x6f ), + PLAINTEXT ( 0x0a, 0x06, 0x4c, 0xd5, 0xe4, 0x98, 0x45, 0xc4, 0xef, + 0xb6, 0x0f, 0xb3, 0x43, 0xdc, 0x03, 0xfa, 0xff, 0xa3, + 0x6c, 0x49 ), + CIPHERTEXT ( 0xa7, 0xd8, 0x4f, 0xf7, 0x1d, 0xc7, 0x13, 0x16, 0x13, + 0x59, 0xb7, 0x57, 0xaf, 0x42, 0xc7, 0x4d, 0xdd, 0xbf, + 0x53, 0xce ), + AUTH ( 0x73, 0x6e, 0x48, 0xa2, 0xb7, 0x79, 0x2a, 0xcc, 0x59, 0x9b, + 0xaa, 0x65, 0x16, 0x29, 0xa2, 0x03 ) ); + +/* AES-GCM test case 120 */ +CIPHER_TEST ( wycheproof_aes_gcm_d03f18fe, &aes_gcm_algorithm, + KEY ( 0x44, 0xc8, 0xd0, 0xcd, 0xb8, 0xf7, 0xe7, 0x36, 0xcf, 0xd9, + 0x97, 0xc8, 0x72, 0xa5, 0xd9, 0xc5, 0xef, 0x30, 0xaf, 0xbe, + 0x44, 0xb6, 0x56, 0x66, 0x06, 0xb9, 0x0a, 0xa5, 0xe3, 0xe8, + 0xb7, 0x97 ), + IV ( 0x6f, 0x39, 0xaf, 0xba, 0x02, 0x1e, 0x4c, 0x36, 0xeb, 0x92, + 0x96, 0x2e ), + ADDITIONAL ( 0x98, 0xd1, 0xca, 0x17, 0x88, 0xcb, 0xeb, 0x30, 0x0e, + 0xa5, 0xc6, 0xb1, 0xee, 0xc9, 0x5e, 0xb2, 0x34, 0x71, + 0x77, 0x20, 0x14, 0x00, 0x91, 0x3d, 0x45, 0x22, 0x56, + 0x22, 0xb6, 0x27, 0x3e, 0xec, 0x8a, 0x74, 0xc3, 0xf1, + 0x2c, 0x8d, 0x52, 0x48, 0xda, 0xbe, 0xe5, 0x86, 0x22, + 0x97, 0x86, 0xff, 0x19, 0x2c, 0x4d, 0xf0, 0xc7, 0x95, + 0x47, 0xf7, 0xad, 0x6a, 0x92, 0xd7, 0x8d, 0x9f, 0x89, + 0x52, 0x75, 0x86, 0x35, 0x78, 0x3a, 0xdd, 0x2a, 0x59, + 0x77, 0xd3, 0x86, 0xe0, 0xae, 0xf7, 0x64, 0x82, 0x21, + 0x1d, 0x2c, 0x3a, 0xe9, 0x8d, 0xe4, 0xba, 0xad, 0xb3, + 0xf8, 0xb3, 0x5b, 0x51, 0x04, 0x64, 0x75, 0x5d, 0xc7, + 0x5c, 0xeb, 0x2b, 0xf2, 0x5b, 0x23, 0x33, 0x17, 0x52, + 0x3f, 0x39, 0x9a, 0x6c, 0x50, 0x7d, 0xb2, 0x14, 0xf0, + 0x85, 0xfa, 0x28, 0x18, 0xf0, 0xd3, 0x70, 0x2b, 0x10, + 0x95, 0x2b ), + PLAINTEXT ( 0x2e, 0x6f, 0x40, 0xf9, 0xd3, 0x72, 0x58, 0x36, 0xac, + 0x0c, 0x85, 0x81, 0x77, 0x93, 0x8f, 0xd6, 0x7b, 0xe1, + 0x94, 0x32 ), + CIPHERTEXT ( 0xb4, 0x24, 0x28, 0xf8, 0x09, 0x4e, 0xf7, 0xe6, 0x5c, + 0x9e, 0x8c, 0x45, 0xef, 0x3e, 0x95, 0xc2, 0x8c, 0xe0, + 0x7d, 0x72 ), + AUTH ( 0x32, 0xb2, 0x5d, 0xfb, 0xb8, 0x96, 0xd0, 0xf9, 0xd7, 0x9c, + 0x82, 0x3b, 0xdd, 0x8e, 0x5d, 0x06 ) ); + +/* AES-GCM test case 121 */ +CIPHER_TEST ( wycheproof_aes_gcm_63a399bd, &aes_gcm_algorithm, + KEY ( 0xe2, 0x7e, 0x71, 0x8e, 0x4b, 0x66, 0xc9, 0x1e, 0x22, 0x1f, + 0x2a, 0x3d, 0xf9, 0xda, 0x00, 0x13, 0xf7, 0xe1, 0x43, 0x40, + 0x00, 0x6e, 0xca, 0x50, 0xdc, 0x30, 0xc4, 0xcc, 0x2d, 0xde, + 0xb6, 0x79 ), + IV ( 0xb4, 0x6f, 0xed, 0x18, 0x5e, 0x8b, 0x33, 0x21, 0x5d, 0xd4, + 0x74, 0xdd ), + ADDITIONAL ( 0x2d, 0x2b, 0x62, 0x47, 0xf9, 0xc3, 0x42, 0xf8, 0xd0, + 0x43, 0x2c, 0xe0, 0x71, 0x57, 0x49, 0xd0, 0xba, 0xc0, + 0xe2, 0xe3, 0xf2, 0x8b, 0x78, 0x5b, 0xe8, 0xdc, 0x84, + 0xb3, 0xa0, 0xe5, 0x7a, 0x16, 0x1a, 0xfd, 0xe3, 0x42, + 0x27, 0x27, 0x75, 0x12, 0x20, 0x4f, 0xfa, 0x4b, 0xce, + 0xb6, 0xe0, 0xa4, 0xd0, 0x21, 0x03, 0x1b, 0x76, 0x55, + 0x40, 0xf7, 0xf6, 0x13, 0x04, 0x5f, 0x74, 0xe7, 0xe6, + 0xe4, 0x97, 0x7c, 0x04, 0xb7, 0x8b, 0x5d, 0x3f, 0x8d, + 0x4e, 0x42, 0x0a, 0x97, 0x48, 0xc1, 0x2d, 0x1f, 0x9a, + 0xa5, 0xe0, 0x3a, 0x27, 0x74, 0x9b, 0xe2, 0x78, 0x5d, + 0xd5, 0x55, 0xa8, 0xcf, 0x01, 0x82, 0xc0, 0x82, 0x6f, + 0x2d, 0x60, 0xee, 0xd3, 0xc4, 0x05, 0x9a, 0xdf, 0x88, + 0x72, 0xf3, 0xc4, 0xd8, 0x1a, 0x96, 0x35, 0x92, 0x47, + 0x29, 0x65, 0xcc, 0x0c, 0x66, 0x10, 0x21, 0x67, 0xe4, + 0xcb, 0x1c, 0xa2 ), + PLAINTEXT ( 0xe3, 0x9a, 0xea, 0xf1, 0xd2, 0x14, 0xf7, 0x89, 0x15, + 0x60, 0x1f, 0xee, 0x9a, 0x35, 0x27, 0xd7, 0x77, 0x67, + 0x46, 0x51 ), + CIPHERTEXT ( 0x75, 0x02, 0x32, 0x11, 0x5a, 0x5e, 0xde, 0xa7, 0xb2, + 0x49, 0xa2, 0x2c, 0x0c, 0xda, 0xe1, 0x7f, 0x72, 0x5d, + 0x6f, 0x99 ), + AUTH ( 0x4a, 0x72, 0xd8, 0xc3, 0x0f, 0xc7, 0xe0, 0xf1, 0x80, 0x6d, + 0x9a, 0x81, 0x7a, 0xda, 0xe1, 0x4a ) ); + +/* AES-GCM test case 122 */ +CIPHER_TEST ( wycheproof_aes_gcm_03a1cf9e, &aes_gcm_algorithm, + KEY ( 0xfc, 0x1b, 0xfd, 0x0b, 0x58, 0x51, 0x5c, 0x4e, 0x79, 0x06, + 0xe2, 0x05, 0x25, 0x96, 0xbb, 0x92, 0xde, 0x8c, 0x87, 0x98, + 0x06, 0xaf, 0x47, 0xa4, 0xc7, 0x26, 0xff, 0x08, 0xc9, 0xba, + 0x47, 0xcc ), + IV ( 0xf3, 0xda, 0x3b, 0xe5, 0x74, 0x33, 0x7b, 0x8f, 0x8c, 0x05, + 0x28, 0x66 ), + ADDITIONAL ( 0xd2, 0x6f, 0x7f, 0xf8, 0x87, 0x72, 0x52, 0x28, 0xf3, + 0x10, 0x99, 0x24, 0xed, 0x9e, 0xae, 0xaa, 0x8c, 0x10, + 0x3c, 0xfc, 0xaa, 0xc1, 0xd6, 0xe3, 0x87, 0x4d, 0x11, + 0xaf, 0xd8, 0x42, 0x4f, 0xd0, 0x30, 0xfe, 0xa8, 0x05, + 0x47, 0x21, 0x2f, 0xe7, 0xc8, 0xac, 0x9f, 0x4e, 0xcb, + 0xe3, 0x04, 0xb6, 0x2e, 0x5b, 0xb2, 0x06, 0xac, 0x3a, + 0x83, 0x18, 0xa8, 0x19, 0xb9, 0x70, 0x1f, 0x49, 0x4a, + 0xef, 0xd2, 0x2e, 0x84, 0xd2, 0x27, 0x92, 0x21, 0x02, + 0xf5, 0x13, 0x0f, 0x06, 0x85, 0xe8, 0x8e, 0x25, 0x11, + 0x5c, 0x3a, 0xb9, 0xe8, 0xbb, 0x29, 0x0c, 0x0d, 0xf0, + 0x71, 0x5c, 0x4a, 0xdb, 0x00, 0xa2, 0xec, 0xc9, 0xba, + 0xb5, 0xbb, 0xcc, 0x49, 0xce, 0xc6, 0x03, 0x05, 0xa5, + 0xb0, 0x4f, 0x64, 0x6b, 0x1d, 0x0f, 0x95, 0x16, 0x73, + 0xcf, 0x1e, 0xb4, 0x74, 0x2c, 0x1a, 0x52, 0xbe, 0xb2, + 0xcd, 0x2f, 0x43, 0xa2, 0xe4, 0x13, 0xe4, 0xa9, 0xf5, + 0x67, 0x91, 0x23, 0xb4, 0xd5, 0x9f, 0x2a, 0xe1, 0x4c, + 0x27, 0xee, 0x84, 0xe9, 0x70, 0xca, 0xfc, 0xbb, 0x5a, + 0x07, 0x36, 0xad, 0x26, 0x36, 0x83, 0x3c, 0xb6, 0x44, + 0xc9, 0xf2, 0xfb, 0x61, 0xa4, 0xa0, 0x9f, 0xad, 0x51, + 0x1f, 0x4c, 0x17, 0x81, 0xc5, 0x68, 0x5f, 0x94, 0x81, + 0x4d, 0x24, 0x2c, 0x5e, 0x3e, 0xb4, 0xab, 0xe1, 0x65, + 0x73, 0x2a, 0xb0, 0x25, 0x8a, 0x24, 0x61, 0xc5, 0x6d, + 0x45, 0x2e, 0xf1, 0xcf, 0x48, 0xb4, 0xff, 0x0f, 0x33, + 0x1b, 0x91, 0xc2, 0xc7, 0x1c, 0xe1, 0xc0, 0x38, 0x77, + 0x55, 0x28, 0x37, 0xa1, 0x2d, 0xfe, 0x75, 0xf7, 0x8b, + 0xf1, 0xcd, 0x61, 0x5b, 0x3b, 0x2b, 0x86, 0x4f, 0xd9, + 0x50, 0x3a, 0x5f, 0x5b, 0xea, 0x65, 0x28, 0x70, 0xbc, + 0xe4, 0xca, 0xd5, 0xc7, 0x26, 0xf1, 0xc5, 0x12, 0xda, + 0xe7, 0xf5, 0xf8 ), + PLAINTEXT ( 0x9a, 0xdf, 0xce, 0xd8, 0xe2, 0x3f, 0x78, 0x97, 0xb6, + 0x6e, 0xfc, 0xc3, 0x46, 0x8d, 0x63, 0xb8, 0x7d, 0xa7, + 0x9a, 0x24 ), + CIPHERTEXT ( 0x18, 0x75, 0xd3, 0xd7, 0x69, 0x30, 0xb5, 0x83, 0x61, + 0x10, 0x3d, 0x64, 0x22, 0x05, 0x91, 0xfe, 0xaa, 0xd5, + 0xc9, 0xa2 ), + AUTH ( 0x22, 0x30, 0x99, 0xbb, 0x16, 0xc3, 0x0c, 0xba, 0x13, 0x4e, + 0x63, 0x9e, 0xd9, 0x56, 0x15, 0xb7 ) ); + +/* AES-GCM test case 123 */ +CIPHER_TEST ( wycheproof_aes_gcm_41df38af, &aes_gcm_algorithm, + KEY ( 0x7e, 0xc2, 0x0e, 0x38, 0xaa, 0x1b, 0x1f, 0x01, 0x8d, 0x79, + 0x90, 0x3f, 0xc1, 0xcf, 0x6e, 0x26, 0x0c, 0xec, 0x37, 0x33, + 0xa1, 0x9a, 0xd9, 0xe3, 0x0f, 0x60, 0xb5, 0x4e, 0x2e, 0xa6, + 0xeb, 0xcc ), + IV ( 0x5c, 0xcd, 0x9c, 0xdc, 0xf9, 0x7a, 0xc6, 0x13, 0x64, 0x68, + 0x7b, 0xbb ), + ADDITIONAL ( 0xd9, 0xd2, 0xee, 0x14, 0x5b, 0x5c, 0x31, 0xa1, 0x7d, + 0xce, 0x93, 0x25, 0x38, 0xc7, 0xe4, 0x5d, 0xa1, 0xc8, + 0x2a, 0xbb, 0x80, 0xb0, 0x55, 0x32, 0x51, 0xe4, 0x42, + 0xdb, 0xc5, 0xaf, 0x9c, 0x12, 0x6d, 0x3a, 0x76, 0xa2, + 0x47, 0x67, 0xc3, 0x9b, 0x22, 0x9b, 0xec, 0x89, 0x76, + 0xa0, 0xdf, 0x89, 0xfa, 0x70, 0xea, 0x9a, 0xd8, 0x72, + 0xaa, 0x36, 0xd6, 0xb8, 0xb0, 0x9a, 0xaa, 0x54, 0x69, + 0x8e, 0x7f, 0x29, 0xc2, 0xc2, 0xd1, 0x2e, 0xfb, 0x0b, + 0x30, 0x1c, 0xfb, 0x97, 0x07, 0x64, 0x73, 0xdf, 0xa7, + 0xec, 0x03, 0x03, 0x50, 0xe2, 0x68, 0x39, 0xfb, 0xb7, + 0xe1, 0x61, 0x2d, 0xad, 0x93, 0xff, 0x08, 0xe1, 0x11, + 0x91, 0x68, 0xc5, 0xfc, 0xa5, 0x68, 0x16, 0xc6, 0x2b, + 0x04, 0x2f, 0x06, 0xd8, 0x9e, 0x5a, 0x95, 0xda, 0x6a, + 0x61, 0x5e, 0x13, 0xba, 0x4c, 0xad, 0x9f, 0x94, 0x25, + 0x34, 0xc5, 0x39, 0x52, 0x0d, 0x00, 0x50, 0x9d, 0x0d, + 0x4a, 0xc6, 0xd8, 0x0c, 0x59, 0xe7, 0x69, 0xd7, 0xe1, + 0xaa, 0x7e, 0x12, 0x98, 0x7e, 0xe0, 0x5f, 0xb6, 0xa1, + 0x9b, 0x38, 0x3c, 0x33, 0x48, 0xdf, 0x6c, 0xbd, 0xcf, + 0xf6, 0x04, 0xef, 0x21, 0x83, 0x38, 0x91, 0x0a, 0x8e, + 0x27, 0x5d, 0x9a, 0x62, 0xb8, 0x02, 0xcb, 0x07, 0xec, + 0x92, 0x49, 0xc9, 0x63, 0x5e, 0x24, 0x37, 0xf8, 0x33, + 0x9d, 0xff, 0x3e, 0x21, 0xf7, 0x9e, 0x9e, 0xb2, 0xac, + 0xc2, 0xbb, 0xba, 0xdd, 0x52, 0x0a, 0x84, 0xc5, 0x8f, + 0x0d, 0xda, 0xaf, 0x8c, 0x32, 0x49, 0x6d, 0x17, 0x3b, + 0x6b, 0x8c, 0x0c, 0x27, 0x43, 0x52, 0xd4, 0x0d, 0x47, + 0xbf, 0xbd, 0x93, 0x06, 0x9a, 0xbd, 0xcc, 0x3d, 0x21, + 0xc2, 0xcd, 0x33, 0x0a, 0x8c, 0x16, 0x84, 0x7f, 0x0e, + 0x52, 0x99, 0xbe, 0xb6, 0xa2, 0xd3, 0x3b, 0xe7, 0x46, + 0xde, 0x5c, 0x71, 0xf2 ), + PLAINTEXT ( 0xba, 0xb2, 0x8e, 0x09, 0x87, 0x50, 0x9b, 0x1d, 0x6f, + 0x9c, 0xf3, 0xaa, 0x90, 0x03, 0x07, 0x95, 0xf1, 0x25, + 0xee, 0x44 ), + CIPHERTEXT ( 0xce, 0x4c, 0x58, 0xd3, 0xc7, 0x35, 0x4d, 0x2d, 0x27, + 0xe3, 0xbb, 0x41, 0xa6, 0x2e, 0x59, 0x41, 0xfb, 0x1e, + 0x39, 0xf3 ), + AUTH ( 0xe1, 0x77, 0x39, 0x1d, 0x5e, 0x2c, 0xef, 0xa2, 0xf7, 0xd3, + 0x5e, 0x33, 0xa7, 0x65, 0x66, 0xaa ) ); + +/* AES-GCM test case 124 */ +CIPHER_TEST ( wycheproof_aes_gcm_1a8fedd4, &aes_gcm_algorithm, + KEY ( 0xe4, 0x00, 0x03, 0xd6, 0xe0, 0x8a, 0xb8, 0x0b, 0x4b, 0xfc, + 0x84, 0x00, 0xef, 0x11, 0x29, 0x45, 0xa9, 0x01, 0xec, 0x64, + 0xa1, 0xb6, 0x53, 0x6c, 0xa9, 0x26, 0x65, 0x09, 0x0d, 0x60, + 0x8b, 0xc4 ), + IV ( 0x9f, 0x09, 0x5d, 0xaf, 0xe6, 0xf6, 0xe0, 0xfb, 0xaf, 0xbb, + 0xe0, 0x2e ), + ADDITIONAL ( 0x42, 0x2d, 0x5e, 0xfc, 0xff, 0xe3, 0x64, 0x90, 0x59, + 0x84, 0x53, 0x3f, 0x0a, 0x57, 0x9d, 0x80, 0xb1, 0x8b, + 0xda, 0x7b, 0x29, 0xe6, 0xe4, 0x64, 0x98, 0xef, 0xfb, + 0xa5, 0x3c, 0x35, 0x01, 0x12, 0xc0, 0xbb, 0xb8, 0xdc, + 0x4c, 0xe0, 0x3b, 0xb0, 0xc6, 0x9e, 0x1d, 0x0b, 0xaa, + 0x19, 0xf0, 0x63, 0x71, 0x08, 0xaa, 0x4a, 0x16, 0xb0, + 0x9a, 0x28, 0x1f, 0x23, 0x28, 0x39, 0xd8, 0x7b, 0x6d, + 0x0e, 0x42, 0xbe, 0x1b, 0xaa, 0x7c, 0x67, 0xf1, 0xbe, + 0x97, 0x0e, 0xa1, 0x69, 0xd3, 0x96, 0x0b, 0x9f, 0xe0, + 0xa6, 0x1f, 0x11, 0xcd, 0x2e, 0xb7, 0x39, 0x8c, 0x19, + 0xe6, 0x41, 0xfe, 0xb4, 0x3f, 0x77, 0x8e, 0x25, 0x7a, + 0x39, 0x70, 0x63, 0xdb, 0x5b, 0x3a, 0x67, 0x07, 0xe9, + 0xdb, 0x62, 0x38, 0x70, 0x54, 0xf9, 0xf9, 0xd4, 0x4f, + 0x14, 0x35, 0x83, 0xe6, 0x3e, 0xda, 0xd4, 0x5a, 0x00, + 0x25, 0x1e, 0x51, 0x73, 0xd7, 0x50, 0x5f, 0x22, 0xa8, + 0xbc, 0xe2, 0x32, 0xe5, 0x6c, 0x2c, 0x27, 0x6a, 0x58, + 0x03, 0x3a, 0xe3, 0x0d, 0x5d, 0xbf, 0x4e, 0x35, 0xa8, + 0x62, 0xe4, 0x2a, 0xf5, 0x73, 0xbe, 0x38, 0xc6, 0x40, + 0x6d, 0x9b, 0x4c, 0x7a, 0xcb, 0xf2, 0x75, 0xfe, 0x36, + 0xc0, 0xec, 0xf2, 0xc4, 0x64, 0x28, 0x98, 0xa3, 0x0e, + 0x61, 0x46, 0xfa, 0xc9, 0x92, 0xa1, 0x64, 0x05, 0xf9, + 0x83, 0x12, 0x12, 0x6b, 0x7a, 0x37, 0x22, 0xf5, 0xdf, + 0xb7, 0xdd, 0x4e, 0x49, 0x11, 0xc1, 0x42, 0x6b, 0x2e, + 0x01, 0xd0, 0x4e, 0x9b, 0xe6, 0xdb, 0x37, 0x71, 0x10, + 0x0f, 0x7d, 0x7d, 0x42, 0x82, 0xe4, 0xea, 0x58, 0x5f, + 0x36, 0x46, 0x24, 0x1e, 0x80, 0x7c, 0xa6, 0x4f, 0x06, + 0xa7, 0xfa, 0x9b, 0x70, 0x03, 0xd7, 0x10, 0xb8, 0x01, + 0xd6, 0x6f, 0x51, 0x7d, 0x2d, 0x5e, 0xbd, 0x74, 0x08, + 0x72, 0xde, 0xba, 0x13, 0xd0 ), + PLAINTEXT ( 0x38, 0xc3, 0xf4, 0x4b, 0xc5, 0x76, 0x5d, 0xe1, 0xf3, + 0xd1, 0xc3, 0x68, 0x4c, 0xd0, 0x9c, 0xdd, 0xef, 0xaf, + 0x29, 0x8d ), + CIPHERTEXT ( 0xd4, 0xa7, 0x9f, 0x72, 0x94, 0x87, 0x93, 0x59, 0x50, + 0xec, 0x03, 0x2e, 0x69, 0x0a, 0xb8, 0xfe, 0x25, 0xc4, + 0x15, 0x8e ), + AUTH ( 0x87, 0x6d, 0x2f, 0x33, 0x4f, 0x47, 0x96, 0x8b, 0x10, 0xc1, + 0x03, 0x85, 0x9d, 0x43, 0x6d, 0xb8 ) ); + +/* AES-GCM test case 125 */ +CIPHER_TEST ( wycheproof_aes_gcm_c5c5e61c, &aes_gcm_algorithm, + KEY ( 0x82, 0x0b, 0xb5, 0xeb, 0x37, 0x07, 0xe7, 0x13, 0xd5, 0xfc, + 0xfe, 0x3c, 0x98, 0xbb, 0x1b, 0xa7, 0x33, 0x54, 0x0d, 0xdf, + 0x44, 0xb1, 0x72, 0x74, 0x6b, 0xb9, 0x50, 0x95, 0x72, 0x54, + 0xad, 0xb5 ), + IV ( 0xf2, 0xb9, 0x47, 0xea, 0xe4, 0x31, 0x12, 0x54, 0x41, 0x7c, + 0x59, 0x28 ), + ADDITIONAL ( 0xf7, 0x6c, 0x06, 0xfe, 0x9d, 0xfa, 0x7f, 0xff, 0xdd, + 0xae, 0x7d, 0x54, 0x59, 0x77, 0xf1, 0x94, 0x4b, 0xdb, + 0x8e, 0x48, 0xbb, 0x87, 0x40, 0xff, 0x1a, 0x9a, 0x90, + 0xc2, 0x60, 0xe1, 0x26, 0x4f, 0xdb, 0xfa, 0x32, 0x8e, + 0xd8, 0xf1, 0x83, 0xe6, 0x72, 0x89, 0x2a, 0x6d, 0x34, + 0x64, 0xc1, 0x76, 0xad, 0xab, 0x5d, 0xa8, 0xab, 0x3a, + 0xf7, 0xc0, 0x8b, 0x71, 0xad, 0x13, 0x5d, 0x7b, 0x42, + 0xc3, 0xeb, 0xd8, 0x93, 0x93, 0x8f, 0x82, 0xcb, 0x9d, + 0x20, 0x0b, 0xb5, 0x0c, 0x26, 0xe8, 0x23, 0xaf, 0x95, + 0x11, 0x49, 0x40, 0x7b, 0xcc, 0x05, 0xf1, 0x7f, 0xbe, + 0x8e, 0xc2, 0x75, 0xdb, 0x96, 0xa9, 0xc7, 0xaa, 0x23, + 0x0f, 0x13, 0x47, 0xbc, 0xf1, 0x02, 0x02, 0xd5, 0xcb, + 0x7f, 0xb1, 0x60, 0x76, 0xf6, 0xa7, 0x8c, 0xd6, 0x20, + 0xfd, 0xd6, 0x7a, 0x9b, 0xe5, 0x8f, 0x69, 0x92, 0xe6, + 0x19, 0xa8, 0x31, 0x4c, 0xb4, 0x04, 0x46, 0xb6, 0x54, + 0xd1, 0xc0, 0x1c, 0x9c, 0xc6, 0xa9, 0x2e, 0x44, 0xa7, + 0x7b, 0x01, 0x5f, 0x2c, 0xef, 0xb9, 0xe5, 0x28, 0x40, + 0x82, 0x95, 0x1b, 0xd9, 0x8e, 0xe7, 0xe8, 0x34, 0xad, + 0xf3, 0x93, 0x06, 0xbd, 0xd4, 0x28, 0x82, 0x96, 0xc2, + 0x76, 0xe6, 0x3b, 0x0d, 0xba, 0x7b, 0x72, 0x69, 0xc6, + 0x3e, 0x0e, 0x77, 0xf3, 0xdf, 0x0d, 0xeb, 0xe8, 0xfe, + 0x36, 0x45, 0x4e, 0xd7, 0xab, 0x33, 0x2d, 0xb7, 0x7d, + 0x2d, 0x9d, 0x7e, 0x18, 0x32, 0xf3, 0x6e, 0x13, 0xac, + 0x6c, 0x88, 0xe3, 0x83, 0xdc, 0x85, 0x33, 0xbc, 0x62, + 0x4a, 0x27, 0xae, 0x37, 0x87, 0x58, 0x74, 0x2a, 0x63, + 0xe3, 0x9d, 0x54, 0xfe, 0xc8, 0x27, 0xb1, 0x9c, 0x63, + 0xc6, 0x92, 0xcd, 0xbc, 0x6a, 0x49, 0x8c, 0xe8, 0x0c, + 0x5c, 0x11, 0x2d, 0x46, 0x1c, 0xbe, 0xd6, 0xc9, 0x3a, + 0x45, 0x85, 0x73, 0xc7, 0x65, 0xc7, 0x59, 0x77, 0x6e, + 0x7b, 0x8e, 0x34, 0x30, 0xca, 0x38, 0x99, 0x91, 0x99, + 0x6f, 0x89, 0x5e, 0xe1, 0x6f, 0xe5, 0x38, 0xf2, 0xde, + 0x3a, 0x90, 0x2f, 0x84, 0x23, 0x13, 0x8f, 0x05, 0xe8, + 0x7e, 0x01, 0xc1, 0xad, 0xf2, 0x23, 0x2c, 0xe9, 0xef, + 0xf1, 0x00, 0xb3, 0x94, 0x52, 0x56, 0x5c, 0x10, 0x12, + 0x5b, 0x3a, 0x85, 0x21, 0x83, 0xf8, 0x02, 0x6b, 0x1c, + 0xb8, 0x28, 0x1e, 0x9e, 0x2e, 0x6a, 0x0f, 0xbd, 0xde, + 0x64, 0xd0, 0xf4, 0xc2, 0x98, 0x4a, 0x72, 0xf1, 0xae, + 0x2b, 0xfb, 0xb4, 0x09, 0xc9, 0xde, 0x9a, 0xd2, 0x24, + 0x48, 0x60, 0x99, 0x6e, 0x10, 0x53, 0xcc, 0x8c, 0xdd, + 0x70, 0x51, 0x1b, 0xb2, 0x65, 0xf2, 0x05, 0x61, 0xa0, + 0x33, 0x7d, 0xe4, 0x89, 0x1f, 0xbf, 0x29, 0x3f, 0x70, + 0x5f, 0xe0, 0x40, 0xf1, 0x87, 0xba, 0x43, 0xbf, 0x13, + 0xfb, 0x5e, 0x02, 0x03, 0x1f, 0x8e, 0xdc, 0xe5, 0xdb, + 0x10, 0xef, 0x5d, 0x41, 0x1a, 0x44, 0x8c, 0xe0, 0x90, + 0x3d, 0xde, 0x94, 0x3d, 0x2e, 0x19, 0x9f, 0x0e, 0x4a, + 0xf2, 0xad, 0x3a, 0xb2, 0xa5, 0x34, 0xf0, 0xd6, 0x41, + 0x8a, 0xcb, 0xc5, 0xea, 0x93, 0x40, 0x35, 0x6e, 0x11, + 0x03, 0x6b, 0xf6, 0xde, 0xc3, 0x06, 0x41, 0x91, 0x77, + 0x63, 0x0d, 0x36, 0xb4, 0x1a, 0x0e, 0x64, 0x63, 0x88, + 0xf6, 0x01, 0x02, 0x27, 0xa3, 0x23, 0xf9, 0x57, 0x0f, + 0x43, 0xf2, 0xf1, 0x4a, 0x8b, 0x9f, 0xa3, 0x46, 0xad, + 0x04, 0x59, 0xc0, 0xc2, 0x8c, 0xe6, 0xca, 0x2e, 0xed, + 0x98, 0x98, 0x3b, 0xd0, 0x8d, 0xb8, 0x2b, 0xfd, 0x09, + 0x45, 0xbd, 0x4c, 0x94, 0xbd, 0x82, 0xa4, 0x04, 0x68, + 0x76, 0xd7, 0xa3, 0x84, 0x4a, 0x4f, 0xb9, 0x36, 0x52, + 0x84, 0xb1, 0x51, 0x1b, 0x6f, 0xb3, 0x6a, 0x27, 0x03, + 0xab, 0xc9, 0xb0, 0x3a, 0x62, 0x44, 0xbf ), + PLAINTEXT ( 0x81, 0xc3, 0x7b, 0x34, 0xc4, 0x36, 0x9e, 0xcc, 0x1a, + 0x9c, 0xdd, 0x6f, 0x15, 0x57, 0x13, 0x3e, 0x59, 0x24, + 0x91, 0x65 ), + CIPHERTEXT ( 0x8d, 0x52, 0x9d, 0x8a, 0x4f, 0x0d, 0x7e, 0xc4, 0xe4, + 0x1d, 0x8d, 0x36, 0x16, 0x63, 0xdf, 0x53, 0xc4, 0x79, + 0xac, 0x34 ), + AUTH ( 0xd5, 0x09, 0xe3, 0xe1, 0xec, 0xcf, 0xe3, 0x8f, 0x7c, 0x63, + 0xf9, 0xa5, 0x5f, 0x42, 0x94, 0x6a ) ); + +/* AES-GCM test case 126 */ +CIPHER_TEST ( wycheproof_aes_gcm_ceefcefc, &aes_gcm_algorithm, + KEY ( 0x65, 0xe1, 0x8f, 0x70, 0xf1, 0x68, 0xab, 0xaf, 0x38, 0x81, + 0x04, 0xc9, 0xb3, 0x7a, 0x96, 0x86, 0xae, 0xbc, 0x77, 0x43, + 0xf0, 0xe6, 0x6b, 0x84, 0xb7, 0xc7, 0xcc, 0x0e, 0x36, 0x00, + 0xf6, 0x55 ), + IV ( 0x8d, 0x56, 0x44, 0x20, 0xfc, 0xb9, 0xa9, 0x8e, 0x7e, 0x07, + 0x47, 0x5c ), + ADDITIONAL ( 0x01, 0x6d, 0xde, 0x72, 0x45, 0x36, 0xee, 0xe2, 0x71, + 0x87, 0x90, 0x72, 0x63, 0xe4, 0xa6, 0x2f, 0x3b, 0x63, + 0x7e, 0xaa, 0x8a, 0xb6, 0xf8, 0x6d, 0x03, 0x43, 0xf6, + 0x6f, 0x7f, 0x73, 0xc6, 0xf8, 0xc3, 0x41, 0x6c, 0xf2, + 0x53, 0x53, 0x24, 0x54, 0xc0, 0x45, 0x55, 0x7e, 0xd7, + 0xa3, 0x71, 0xc2, 0xd6, 0xb8, 0xe1, 0x9e, 0x01, 0x01, + 0xe1, 0x10, 0x9c, 0xd7, 0x22, 0x7d, 0xc5, 0x39, 0x05, + 0x45, 0xff, 0x24, 0x48, 0x40, 0x31, 0x95, 0x77, 0x49, + 0x51, 0x43, 0x79, 0xa7, 0x7a, 0x33, 0xdf, 0x0f, 0xd1, + 0x29, 0xf8, 0x0e, 0x98, 0x69, 0x74, 0x7b, 0x65, 0x89, + 0xfd, 0x29, 0xa6, 0x93, 0x5a, 0xa3, 0x7b, 0x00, 0xe2, + 0xab, 0xbb, 0xae, 0x2b, 0x67, 0x90, 0x47, 0x26, 0xe9, + 0xfe, 0x22, 0x14, 0x30, 0x80, 0xaf, 0x18, 0x82, 0x1f, + 0xf1, 0x0c, 0x52, 0x17, 0xe8, 0x45, 0xcd, 0x6e, 0x0e, + 0xf2, 0x51, 0x3c, 0x1d, 0x82, 0xc1, 0x4f, 0x9d, 0x39, + 0x33, 0xf3, 0xfd, 0x5c, 0x63, 0x64, 0x07, 0x5a, 0xeb, + 0xef, 0x6c, 0x0f, 0x5c, 0x97, 0xfa, 0x34, 0x3a, 0xa1, + 0x92, 0xba, 0x8c, 0x52, 0x6b, 0x7a, 0xd4, 0xc7, 0x1c, + 0x4c, 0x19, 0xad, 0x2d, 0x5a, 0xe0, 0x5b, 0x07, 0x17, + 0x6a, 0x5e, 0x66, 0xd4, 0x86, 0x88, 0x9a, 0x2e, 0x8f, + 0x9e, 0xf8, 0x0b, 0x9c, 0x06, 0x80, 0xcf, 0x88, 0x7f, + 0x60, 0x13, 0x7f, 0x62, 0x66, 0xec, 0x33, 0x5a, 0x5f, + 0x1d, 0x74, 0xdc, 0x41, 0xde, 0xc1, 0x65, 0x3a, 0x96, + 0xd6, 0x1b, 0x75, 0xf4, 0xb5, 0x69, 0xb9, 0x32, 0x8f, + 0x6b, 0x2f, 0xb4, 0x03, 0x91, 0x70, 0x4f, 0x66, 0xe0, + 0x58, 0xe9, 0x2d, 0xfc, 0x15, 0xd7, 0x75, 0x99, 0x01, + 0x8d, 0x74, 0x90, 0x7a, 0x9b, 0xb8, 0x87, 0x0c, 0x5c, + 0x44, 0x6e, 0x81, 0xfa, 0x7a, 0x76, 0x4a, 0x54, 0x9f, + 0x6a, 0x41, 0x73, 0x26, 0xb5, 0x2f, 0xbb, 0xe4, 0xf5, + 0x88, 0x5e, 0x64, 0x55, 0xbe, 0x28, 0x90, 0xc3, 0xa8, + 0xb9, 0x7a, 0x9f, 0xd0, 0xc9, 0x2c, 0x08, 0x5e, 0xdf, + 0xaf, 0x6a, 0x4f, 0x28, 0xdf, 0xec, 0x02, 0x43, 0xaa, + 0x79, 0xa7, 0x1d, 0x12, 0x32, 0x82, 0xd4, 0xe9, 0xa0, + 0xb3, 0x49, 0x7a, 0xd5, 0x69, 0xdb, 0x86, 0x9e, 0x56, + 0x63, 0x8e, 0x27, 0x1f, 0x12, 0x05, 0xa5, 0x2f, 0xc3, + 0x8c, 0xb7, 0x47, 0x67, 0xe4, 0xbb, 0x2f, 0x37, 0xbd, + 0x43, 0x70, 0x83, 0xe9, 0x94, 0x39, 0x5e, 0x98, 0x45, + 0x4c, 0x04, 0x09, 0x2d, 0x29, 0x2c, 0x68, 0x1a, 0xde, + 0x9e, 0x39, 0x85, 0x89, 0xdf, 0x6c, 0xbf, 0x9b, 0x31, + 0x96, 0xd1, 0x2c, 0x81, 0x53, 0x74, 0x06, 0x47, 0xaf, + 0x01, 0x8c, 0xab, 0x5f, 0x9b, 0xf3, 0xe3, 0xdb, 0x7d, + 0xee, 0xa2, 0x21, 0xc7, 0x3f, 0x37, 0x7b, 0x96, 0xd3, + 0x68, 0xff, 0x8d, 0x9f, 0xfe, 0xcb, 0x8f, 0x44, 0xd5, + 0x0b, 0x59, 0xfa, 0xfc, 0x90, 0xf6, 0x55, 0xec, 0x92, + 0x71, 0xc9, 0xc1, 0xd0, 0x32, 0xcf, 0xb0, 0xf2, 0x37, + 0x20, 0xd0, 0x19, 0x81, 0xc2, 0x62, 0x96, 0x53, 0x6e, + 0x66, 0xcd, 0xb8, 0xc3, 0x90, 0xad, 0x1b, 0xca, 0x90, + 0xe6, 0xb2, 0x71, 0x11, 0x70, 0x66, 0x5a, 0xd5, 0x2a, + 0xaa, 0x18, 0x8f, 0x87, 0xca, 0x96, 0x88, 0x8d, 0x3d, + 0x93, 0x2e, 0x6c, 0x3b, 0xf3, 0x28, 0x91, 0xcd, 0x74, + 0x63, 0x08, 0xb0, 0xd6, 0x34, 0x5e, 0xd8, 0xcf, 0x7c, + 0x1a, 0xd8, 0x84, 0x42, 0x32, 0x6a, 0x38, 0x92, 0xe6, + 0x0a, 0xfd, 0x5c, 0x86, 0xa2, 0xd0, 0x62, 0xa4, 0x61, + 0xd8, 0x89, 0x64, 0x46, 0x15, 0x4e, 0x91, 0x48, 0xaa, + 0xd5, 0xb1, 0x22, 0x43, 0x7e, 0x26, 0xa5, 0x2b, 0xa1, + 0xb6, 0x20, 0xd0, 0x85, 0xaf, 0x62, 0x8a, 0xf5, 0xad, + 0xa9, 0xff, 0xf6, 0x64, 0xd4, 0xa9, 0xa2, 0x30 ), + PLAINTEXT ( 0x12, 0xd3, 0xcc, 0x44, 0x73, 0x97, 0x02, 0x96, 0xd2, + 0x91, 0x88, 0x18, 0xfd, 0xcf, 0x1a, 0x57, 0x0d, 0x2d, + 0x48, 0x21 ), + CIPHERTEXT ( 0x28, 0x44, 0xb6, 0x8b, 0x93, 0x56, 0x04, 0x99, 0x34, + 0xb0, 0x31, 0xb0, 0xd6, 0xde, 0x55, 0xb5, 0x0f, 0xab, + 0x0f, 0x46 ), + AUTH ( 0x38, 0x7b, 0xc3, 0xa4, 0x65, 0x30, 0xbd, 0xf2, 0x4b, 0x1c, + 0xfa, 0x67, 0x89, 0x93, 0x69, 0xea ) ); + +/* AES-GCM test case 127 */ +CIPHER_TEST ( wycheproof_aes_gcm_21500b95, &aes_gcm_algorithm, + KEY ( 0xb1, 0x5a, 0xb8, 0x16, 0xba, 0x50, 0x5e, 0xc4, 0x2b, 0x52, + 0x80, 0x66, 0xd9, 0x11, 0x9b, 0x4b, 0x2e, 0xe3, 0x81, 0x59, + 0xce, 0x54, 0xa2, 0x6b, 0xc5, 0xd6, 0x61, 0x12, 0x7e, 0x05, + 0x22, 0x2c ), + IV ( 0x75, 0xe3, 0xc6, 0x08, 0xa3, 0x93, 0x67, 0xdc, 0x4a, 0xa7, + 0x48, 0xd0 ), + ADDITIONAL ( 0x00, 0x59, 0x31, 0xa2, 0xd5, 0xc5, 0xbc, 0xed, 0xc7, + 0x16, 0xc3, 0xf2, 0x46, 0xe2, 0x1b, 0x3a, 0x46, 0xd2, + 0xa6, 0xb1, 0xce, 0x73, 0x64, 0x46, 0x53, 0xe0, 0xcf, + 0x27, 0x7e, 0xfa, 0x49, 0x2f, 0x12, 0xfb, 0x2b, 0x83, + 0xf7, 0x0b, 0xae, 0x87, 0x37, 0xd5, 0x3c, 0xd7, 0x62, + 0x54, 0xda, 0xbc, 0xa8, 0x42, 0x2d, 0x4f, 0xf9, 0x39, + 0x6c, 0x26, 0x5d, 0x57, 0xe4, 0xfd, 0x3d, 0x0c, 0xd1, + 0xc3, 0x81, 0x98, 0xe2, 0x29, 0x63, 0x7c, 0x7f, 0xbf, + 0xff, 0x46, 0x8f, 0xcd, 0xb0, 0x4c, 0xa1, 0x21, 0x01, + 0x86, 0x5c, 0x08, 0xbb, 0xf5, 0x56, 0x89, 0xe1, 0x29, + 0x9c, 0x5e, 0x7a, 0x43, 0x02, 0x96, 0xc4, 0x7a, 0x87, + 0x4d, 0x99, 0x56, 0x55, 0x7b, 0x2c, 0xb3, 0x2f, 0xd3, + 0xf8, 0x07, 0x3f, 0x85, 0xfe, 0xfb, 0x6d, 0x20, 0x05, + 0xc5, 0xd3, 0x32, 0x9e, 0x40, 0xdc, 0xb9, 0x57, 0xf5, + 0xb0, 0x1d, 0x7f, 0x15, 0x82, 0xea, 0x35, 0x9b, 0x94, + 0x7d, 0x56, 0x69, 0xda, 0x80, 0x03, 0xc0, 0x09, 0xf8, + 0xec, 0xbf, 0xbf, 0x09, 0x4f, 0xb8, 0x15, 0x5c, 0xf8, + 0x92, 0x51, 0xee, 0x4a, 0x91, 0xa4, 0x3a, 0x96, 0xe3, + 0xf6, 0xd3, 0x02, 0xe1, 0x57, 0x53, 0xdd, 0x48, 0xdd, + 0x5e, 0x3b, 0x87, 0xe0, 0x93, 0x02, 0x10, 0x59, 0xec, + 0x32, 0x3d, 0x38, 0xd3, 0xee, 0x72, 0x29, 0x05, 0x21, + 0xee, 0xfd, 0x54, 0xcf, 0x70, 0x8a, 0xa9, 0xe8, 0x18, + 0x69, 0xb7, 0x56, 0xc3, 0xfc, 0x3c, 0x9a, 0x60, 0xe1, + 0x22, 0x26, 0xac, 0x64, 0x3b, 0xf7, 0xa9, 0x19, 0x51, + 0xe5, 0x50, 0x91, 0x59, 0xb1, 0xe2, 0x98, 0xbb, 0xfe, + 0x88, 0xfd, 0x8e, 0xe6, 0x59, 0xca, 0xc9, 0x8c, 0x90, + 0x4f, 0x68, 0xc9, 0x28, 0x40, 0x38, 0x94, 0xfc, 0x89, + 0xdf, 0x10, 0x0d, 0x6f, 0x30, 0xfd, 0x1c, 0xe2, 0x06, + 0x66, 0x81, 0x59, 0x29, 0xb6, 0xee, 0xe3, 0x9e, 0xce, + 0x51, 0x0e, 0xb5, 0x35, 0x67, 0xe3, 0x5c, 0xbe, 0x49, + 0xdc, 0xec, 0x0f, 0x1b, 0x80, 0xfe, 0xe8, 0x61, 0xed, + 0x0a, 0xf1, 0xcc, 0x75, 0x9d, 0x47, 0x7f, 0x30, 0x6a, + 0x5e, 0x12, 0x73, 0xe6, 0x4c, 0x7e, 0x33, 0x55, 0x4d, + 0x11, 0xd7, 0x96, 0x32, 0x00, 0x6b, 0x42, 0x0e, 0x7c, + 0x71, 0xd3, 0x6f, 0xec, 0xe1, 0x8d, 0x75, 0xa8, 0xb5, + 0x77, 0x31, 0x71, 0xed, 0x07, 0x1c, 0x26, 0x66, 0x4f, + 0xc0, 0x11, 0x32, 0x77, 0xe3, 0x35, 0x6a, 0xb3, 0x0d, + 0xb0, 0x5a, 0xc6, 0x2e, 0xa5, 0xb9, 0x75, 0xe3, 0x64, + 0x13, 0x57, 0x2d, 0xd3, 0x9e, 0x5c, 0x22, 0xd5, 0xc4, + 0x2b, 0xc8, 0x2a, 0xb0, 0xab, 0x85, 0xb5, 0x4f, 0xbf, + 0xaa, 0x52, 0x7d, 0x13, 0x44, 0xdc, 0x3d, 0xfb, 0x18, + 0xb9, 0x41, 0xb0, 0x5b, 0xcc, 0x5b, 0x47, 0xd2, 0x5e, + 0x18, 0xef, 0x93, 0x6f, 0x39, 0x18, 0xed, 0x87, 0xcb, + 0xf5, 0xdf, 0xa6, 0x79, 0x89, 0xa0, 0x38, 0xe2, 0xf7, + 0x47, 0x34, 0x5c, 0x4b, 0x8d, 0x27, 0xb1, 0x01, 0xc9, + 0x44, 0xf0, 0xf1, 0xd6, 0xfe, 0x21, 0xcd, 0x1a, 0x65, + 0x3c, 0x17, 0x53, 0x0f, 0x9a, 0x89, 0x3d, 0x7f, 0xd4, + 0x8a, 0xfa, 0xfc, 0xf1, 0x2b, 0xf0, 0x05, 0xfe, 0x04, + 0x4a, 0x00, 0x0e, 0x8d, 0xea, 0xf0, 0x9b, 0xed, 0x39, + 0xba, 0x62, 0x78, 0x4b, 0xd5, 0xb8, 0x8a, 0xce, 0x56, + 0x48, 0x06, 0xa9, 0xb5, 0xe0, 0xbf, 0x40, 0xf9, 0xf6, + 0x55, 0xfd, 0xd5, 0xbd, 0xc4, 0xbf, 0x56, 0x8c, 0x5a, + 0xbb, 0x4b, 0x84, 0xec, 0x61, 0xa8, 0x5f, 0x00, 0x38, + 0xb4, 0xf4, 0xcc, 0x3e, 0x75, 0xc3, 0xb3, 0xf9, 0x9e, + 0x62, 0xb9, 0x92, 0x92, 0xd5, 0x10, 0xf6, 0x90, 0xc0, + 0x7c, 0x18, 0xaf, 0x41, 0xb7, 0x65, 0xfe, 0x5a, 0x1e, + 0xe9, 0x48, 0x4c, 0xf0, 0x4c, 0x69, 0xf3, 0xf4, 0x9c ), + PLAINTEXT ( 0x8b, 0x2a, 0x6a, 0x96, 0x04, 0xb2, 0x5d, 0x16, 0x70, + 0xb7, 0xd8, 0x69, 0xc6, 0x49, 0xa0, 0x53, 0x99, 0xb8, + 0xad, 0xa5 ), + CIPHERTEXT ( 0x37, 0x1f, 0xa7, 0x0a, 0xf8, 0xa1, 0x98, 0xcb, 0x43, + 0xdd, 0xd5, 0x45, 0xe7, 0x4b, 0x80, 0x62, 0x46, 0xf7, + 0xe9, 0x32 ), + AUTH ( 0x01, 0x4a, 0x01, 0x79, 0xb8, 0x16, 0x91, 0xd0, 0x90, 0x11, + 0xdc, 0xea, 0x57, 0x39, 0x55, 0x1d ) ); + +/* AES-GCM test case 128 */ +CIPHER_TEST ( wycheproof_aes_gcm_e2c3a1a4, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00 ), + ADDITIONAL(), + PLAINTEXT ( 0x56, 0x10, 0x08, 0xfa, 0x07, 0xa6, 0x8f, 0x5c, 0x61, + 0x28, 0x5c, 0xd0, 0x13, 0x46, 0x4e, 0xaf ), + CIPHERTEXT ( 0x23, 0x29, 0x3e, 0x9b, 0x07, 0xca, 0x7d, 0x1b, 0x0c, + 0xae, 0x7c, 0xc4, 0x89, 0xa9, 0x73, 0xb3 ), + AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) ); + +/* AES-GCM test case 129 */ +CIPHER_TEST ( wycheproof_aes_gcm_77767307, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff ), + ADDITIONAL(), + PLAINTEXT ( 0xc6, 0x15, 0x22, 0x44, 0xce, 0xa1, 0x97, 0x8d, 0x3e, + 0x0b, 0xc2, 0x74, 0xcf, 0x8c, 0x0b, 0x3b ), + CIPHERTEXT ( 0x7c, 0xb6, 0xfc, 0x7c, 0x6a, 0xbc, 0x00, 0x9e, 0xfe, + 0x95, 0x51, 0xa9, 0x9f, 0x36, 0xa4, 0x21 ), + AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) ); + +/* AES-GCM test case 130 (skipped: modified tag) */ + +/* AES-GCM test case 131 (skipped: modified tag) */ + +/* AES-GCM test case 132 (skipped: modified tag) */ + +/* AES-GCM test case 133 (skipped: modified tag) */ + +/* AES-GCM test case 134 (skipped: modified tag) */ + +/* AES-GCM test case 135 (skipped: modified tag) */ + +/* AES-GCM test case 136 (skipped: modified tag) */ + +/* AES-GCM test case 137 (skipped: modified tag) */ + +/* AES-GCM test case 138 (skipped: modified tag) */ + +/* AES-GCM test case 139 (skipped: modified tag) */ + +/* AES-GCM test case 140 (skipped: modified tag) */ + +/* AES-GCM test case 141 (skipped: modified tag) */ + +/* AES-GCM test case 142 (skipped: modified tag) */ + +/* AES-GCM test case 143 (skipped: modified tag) */ + +/* AES-GCM test case 144 (skipped: modified tag) */ + +/* AES-GCM test case 145 (skipped: modified tag) */ + +/* AES-GCM test case 146 (skipped: modified tag) */ + +/* AES-GCM test case 147 (skipped: modified tag) */ + +/* AES-GCM test case 148 (skipped: modified tag) */ + +/* AES-GCM test case 149 (skipped: modified tag) */ + +/* AES-GCM test case 150 (skipped: modified tag) */ + +/* AES-GCM test case 151 (skipped: modified tag) */ + +/* AES-GCM test case 152 (skipped: modified tag) */ + +/* AES-GCM test case 153 (skipped: modified tag) */ + +/* AES-GCM test case 154 (skipped: modified tag) */ + +/* AES-GCM test case 155 (skipped: modified tag) */ + +/* AES-GCM test case 156 (skipped: modified tag) */ + +/* AES-GCM test case 157 */ +CIPHER_TEST ( wycheproof_aes_gcm_f5cabfe8, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x02, 0x9e, 0x0e, 0x77, 0x7d, 0xb0, 0x92, 0xb1, 0x25, 0x35, + 0xd0, 0x43, 0x01, 0x2f, 0x09, 0xba ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xf8, 0x3c, 0xee, 0x46, 0x73, 0x36, 0xe1, 0xa0, 0x9b, + 0x75, 0xf2, 0x4e, 0x9b, 0x43, 0x85, 0xc9, 0x9c, 0x13, + 0xe6, 0xaf, 0x72, 0x22, 0x56, 0xa6, 0x61, 0x29, 0xec, + 0xe9, 0x61, 0xfe, 0x80, 0x3b, 0x16, 0x7b, 0xad, 0x20, + 0x6f, 0x50, 0x17, 0xfb ), + AUTH ( 0x09, 0x33, 0x8a, 0x42, 0xf0, 0xac, 0xc1, 0x4f, 0x97, 0xc0, + 0x64, 0xf5, 0x2f, 0x5f, 0x16, 0x88 ) ); + +/* AES-GCM test case 158 */ +CIPHER_TEST ( wycheproof_aes_gcm_14ea057a, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xf1, 0xbe, 0x3b, 0x06, 0xb7, 0xfe, 0xac, 0x07, 0xe7, 0xea, + 0xb6, 0x29, 0xf5, 0x56, 0x04, 0x7b ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x0b, 0x32, 0xb6, 0x48, 0xa2, 0xc2, 0x8e, 0x9e, 0xdd, + 0x7c, 0xee, 0x08, 0xee, 0xeb, 0x90, 0x00, 0x34, 0xca, + 0xe7, 0x21, 0x5e, 0x5a, 0xb1, 0xe2, 0x01, 0xbd, 0x2e, + 0xed, 0x10, 0x32, 0xc5, 0xa9, 0x78, 0x66, 0xba, 0x58, + 0x2a, 0x34, 0x58, 0xa4 ), + AUTH ( 0x90, 0xbe, 0x36, 0x06, 0xde, 0x58, 0xbd, 0x77, 0x8f, 0xa5, + 0xbe, 0xff, 0x4a, 0x41, 0x02, 0xbd ) ); + +/* AES-GCM test case 159 */ +CIPHER_TEST ( wycheproof_aes_gcm_b2454cd9, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xde, 0x9e, 0xb6, 0x3b, 0x1d, 0xae, 0xd3, 0x21, 0xa1, 0x1b, + 0x75, 0x47, 0xcc, 0x9e, 0x22, 0x3c ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x57, 0x5e, 0x2e, 0xce, 0xc2, 0xb3, 0xc7, 0x2d, 0x4e, + 0x80, 0x83, 0x0d, 0x0d, 0x85, 0x9a, 0xd9, 0xe4, 0x2c, + 0x29, 0xc4, 0xa6, 0x8d, 0x8d, 0x9d, 0x8d, 0x23, 0x43, + 0x4d, 0xe2, 0xcd, 0x07, 0x73, 0x3b, 0xe4, 0x9d, 0x62, + 0xac, 0x1a, 0xe0, 0x85 ), + AUTH ( 0x6e, 0x4d, 0x63, 0x96, 0x12, 0x5a, 0x10, 0xdf, 0x54, 0x43, + 0xbd, 0x0c, 0xbc, 0x85, 0x66, 0xd1 ) ); + +/* AES-GCM test case 160 */ +CIPHER_TEST ( wycheproof_aes_gcm_a605fd40, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x40, 0xbb, 0x0a, 0xbe, 0xbc, 0x48, 0x3f, 0xf6, 0xd5, 0x67, + 0x12, 0x41, 0xff, 0x5d, 0x66, 0xc6 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x2a, 0x81, 0x88, 0x88, 0xd1, 0xf0, 0x9f, 0x32, 0xaa, + 0x7b, 0xee, 0xdd, 0x28, 0x69, 0xb4, 0x46, 0x57, 0x5e, + 0x2e, 0xce, 0xc2, 0xb3, 0xc7, 0x2d, 0x4e, 0x80, 0x83, + 0x0d, 0x0d, 0x85, 0x9a, 0xd9, 0xe4, 0x2c, 0x29, 0xc4, + 0xa6, 0x8d, 0x8d, 0x9d ), + AUTH ( 0xdc, 0x48, 0x1f, 0x17, 0x25, 0x45, 0x26, 0x8e, 0xff, 0x63, + 0xab, 0x04, 0x90, 0x40, 0x3d, 0xc3 ) ); + +/* AES-GCM test case 161 */ +CIPHER_TEST ( wycheproof_aes_gcm_5fc2c3a4, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x20, 0xd5, 0xcf, 0x30, 0x5e, 0x63, 0x0a, 0x8f, 0x49, 0xe3, + 0xbb, 0x4b, 0xab, 0x18, 0xab, 0xc9 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x96, 0xd3, 0x6b, 0x79, 0x5f, 0x8e, 0x7e, 0xdf, 0x6a, + 0x8e, 0x0d, 0xbc, 0xd2, 0x0d, 0x6c, 0x07, 0x2a, 0x81, + 0x88, 0x88, 0xd1, 0xf0, 0x9f, 0x32, 0xaa, 0x7b, 0xee, + 0xdd, 0x28, 0x69, 0xb4, 0x46, 0x57, 0x5e, 0x2e, 0xce, + 0xc2, 0xb3, 0xc7, 0x2d ), + AUTH ( 0x8a, 0x3a, 0x22, 0xbf, 0x25, 0x92, 0x95, 0x8b, 0x93, 0x02, + 0x92, 0xaa, 0x47, 0xf5, 0x90, 0xe8 ) ); + +/* AES-GCM test case 162 */ +CIPHER_TEST ( wycheproof_aes_gcm_c73596ff, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x25, 0x53, 0x58, 0xa7, 0x1a, 0x0e, 0x57, 0x31, 0xf6, 0xdd, + 0x6c, 0xe2, 0x8e, 0x15, 0x8a, 0xe6 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xcf, 0xce, 0x3d, 0x92, 0x0f, 0x0e, 0x01, 0xf0, 0xbb, + 0x49, 0xa7, 0x51, 0x95, 0x5b, 0x23, 0x6d, 0x1b, 0x88, + 0x7b, 0xae, 0xfd, 0x25, 0xc4, 0x7f, 0x41, 0x30, 0x3c, + 0x46, 0xd5, 0xc7, 0xbf, 0x9c, 0xa4, 0xc2, 0xc4, 0x5a, + 0x8f, 0x1e, 0x66, 0x56 ), + AUTH ( 0x2d, 0xb9, 0xdc, 0x1b, 0x7f, 0xd3, 0x15, 0xdf, 0x1c, 0x95, + 0x43, 0x24, 0x32, 0xfc, 0xf4, 0x74 ) ); + +/* AES-GCM test case 163 */ +CIPHER_TEST ( wycheproof_aes_gcm_8b84b201, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xbb, 0x76, 0xe4, 0x22, 0xbb, 0xe8, 0xbb, 0xe6, 0x82, 0xa1, + 0x0b, 0xe4, 0xbd, 0xd6, 0xce, 0x1c ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x69, 0xa2, 0x41, 0x69, 0x79, 0x2e, 0x9a, 0x07, 0xf6, + 0xe6, 0xf4, 0x73, 0x6f, 0xa9, 0x72, 0xdc, 0xcf, 0xce, + 0x3d, 0x92, 0x0f, 0x0e, 0x01, 0xf0, 0xbb, 0x49, 0xa7, + 0x51, 0x95, 0x5b, 0x23, 0x6d, 0x1b, 0x88, 0x7b, 0xae, + 0xfd, 0x25, 0xc4, 0x7f ), + AUTH ( 0x82, 0xad, 0x96, 0x7f, 0x7a, 0xc1, 0x90, 0x84, 0x35, 0x4f, + 0x69, 0xa7, 0x51, 0x44, 0x3f, 0xb2 ) ); + +/* AES-GCM test case 164 */ +CIPHER_TEST ( wycheproof_aes_gcm_077de8ed, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xdb, 0x18, 0x21, 0xac, 0x59, 0xc3, 0x8e, 0x9f, 0x1e, 0x25, + 0xa2, 0xee, 0xe9, 0x93, 0x03, 0x13 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x4e, 0x44, 0x17, 0xa8, 0x3b, 0xea, 0xc1, 0xeb, 0x7e, + 0x24, 0x45, 0x6a, 0x05, 0xf6, 0xba, 0x55, 0x69, 0xa2, + 0x41, 0x69, 0x79, 0x2e, 0x9a, 0x07, 0xf6, 0xe6, 0xf4, + 0x73, 0x6f, 0xa9, 0x72, 0xdc, 0xcf, 0xce, 0x3d, 0x92, + 0x0f, 0x0e, 0x01, 0xf0 ), + AUTH ( 0x47, 0x2d, 0x5d, 0xd5, 0x82, 0xdc, 0x05, 0xef, 0x5f, 0xc4, + 0x96, 0xb6, 0x12, 0x02, 0x3c, 0xb2 ) ); + +/* AES-GCM test case 165 */ +CIPHER_TEST ( wycheproof_aes_gcm_8895d57d, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xf7, 0xa0, 0x2e, 0xcc, 0xa0, 0x30, 0x64, 0xb2, 0xef, 0x3c, + 0xce, 0x9f, 0xea, 0xb7, 0x9f, 0x07 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x6f, 0x8e, 0x17, 0x4e, 0xfc, 0xa3, 0x09, 0x72, 0x99, + 0xf7, 0x84, 0xef, 0xd4, 0xca, 0xff, 0x0b, 0xf1, 0x68, + 0xc3, 0xe5, 0x16, 0x5b, 0x9a, 0xd3, 0xd2, 0x00, 0x62, + 0x00, 0x98, 0x48, 0x04, 0x4e, 0xef, 0x8f, 0x31, 0xf7, + 0xd2, 0xfe, 0xad, 0x05 ), + AUTH ( 0xca, 0xff, 0x72, 0x38, 0x26, 0xdf, 0x15, 0x09, 0x34, 0xae, + 0xe3, 0x20, 0x1b, 0xa1, 0x75, 0xe7 ) ); + +/* AES-GCM test case 166 */ +CIPHER_TEST ( wycheproof_aes_gcm_bca38eea, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x69, 0x85, 0x92, 0x49, 0x01, 0xd6, 0x88, 0x65, 0x9b, 0x40, + 0xa9, 0x99, 0xd9, 0x74, 0xdb, 0xfd ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xaf, 0x19, 0x30, 0x90, 0xce, 0x3d, 0x43, 0xa3, 0x88, + 0xa1, 0xd2, 0x94, 0xa0, 0x96, 0x16, 0x90, 0x6f, 0x8e, + 0x17, 0x4e, 0xfc, 0xa3, 0x09, 0x72, 0x99, 0xf7, 0x84, + 0xef, 0xd4, 0xca, 0xff, 0x0b, 0xf1, 0x68, 0xc3, 0xe5, + 0x16, 0x5b, 0x9a, 0xd3 ), + AUTH ( 0x3b, 0x08, 0x95, 0x8b, 0xe1, 0x28, 0x6c, 0x2b, 0x4a, 0xcb, + 0xa0, 0x2b, 0x36, 0x74, 0xad, 0xb2 ) ); + +/* AES-GCM test case 167 */ +CIPHER_TEST ( wycheproof_aes_gcm_e281bdf1, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x3f, 0x11, 0x88, 0x54, 0x6c, 0x65, 0xed, 0x0f, 0xc5, 0x5e, + 0x75, 0x03, 0x2c, 0x68, 0xee, 0x44 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x5d, 0xec, 0xcf, 0x83, 0x8b, 0x2c, 0xf5, 0xf8, 0x69, + 0xc9, 0x0d, 0x2a, 0x61, 0x11, 0x60, 0xb1, 0xe5, 0x78, + 0xab, 0x81, 0x21, 0xb9, 0x37, 0x35, 0xcb, 0xa4, 0xa1, + 0x93, 0x06, 0x47, 0xb8, 0xc4, 0xc8, 0x4b, 0xf7, 0x76, + 0x33, 0x3e, 0xe4, 0x5a ), + AUTH ( 0xc1, 0x4d, 0x52, 0x20, 0x8f, 0x0f, 0x51, 0xb8, 0x16, 0xa4, + 0x89, 0x71, 0xea, 0xf8, 0xff, 0x7e ) ); + +/* AES-GCM test case 168 */ +CIPHER_TEST ( wycheproof_aes_gcm_09e34ed6, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xa1, 0x34, 0x34, 0xd1, 0xcd, 0x83, 0x01, 0xd8, 0xb1, 0x22, + 0x12, 0x05, 0x1f, 0xab, 0xaa, 0xbe ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xd2, 0xca, 0xe1, 0x68, 0x4a, 0xa4, 0x07, 0xa1, 0x3a, + 0x2e, 0x2d, 0xa5, 0x35, 0x7e, 0x29, 0xf5, 0x5d, 0xec, + 0xcf, 0x83, 0x8b, 0x2c, 0xf5, 0xf8, 0x69, 0xc9, 0x0d, + 0x2a, 0x61, 0x11, 0x60, 0xb1, 0xe5, 0x78, 0xab, 0x81, + 0x21, 0xb9, 0x37, 0x35 ), + AUTH ( 0xea, 0x2d, 0x01, 0x80, 0x99, 0xcd, 0x79, 0x25, 0xc5, 0x07, + 0xce, 0xf0, 0xce, 0xdd, 0xb0, 0xae ) ); + +/* AES-GCM test case 169 */ +CIPHER_TEST ( wycheproof_aes_gcm_a20bd785, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ), + ADDITIONAL(), + PLAINTEXT ( 0x5c, 0x7d, 0x3f, 0x81, 0xd4, 0xb5, 0x05, 0x5e, 0xd6, + 0xf8, 0xdb, 0x53, 0x61, 0x45, 0x87, 0xa4 ), + CIPHERTEXT ( 0x54, 0x1b, 0x83, 0x5d, 0xc8, 0x28, 0xd5, 0x41, 0x07, + 0x3f, 0x7d, 0x7d, 0x75, 0x04, 0xeb, 0xf5 ), + AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) ); + +/* AES-GCM test case 170 */ +CIPHER_TEST ( wycheproof_aes_gcm_4d3c95a4, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ), + ADDITIONAL(), + PLAINTEXT ( 0x6a, 0x34, 0x7a, 0xd1, 0x19, 0x0e, 0x72, 0xed, 0xe6, + 0x11, 0x04, 0x4e, 0x74, 0x75, 0xf0, 0xeb ), + CIPHERTEXT ( 0xa3, 0xf3, 0x61, 0x54, 0x33, 0x1c, 0x19, 0x66, 0x24, + 0x56, 0x4b, 0xc3, 0x95, 0xe4, 0x9c, 0x3b ), + AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) ); + +/* AES-GCM test case 171 */ +CIPHER_TEST ( wycheproof_aes_gcm_fdf02744, &aes_gcm_algorithm, + KEY ( 0xfa, 0xe2, 0xa1, 0x41, 0x97, 0xc7, 0xd1, 0x14, 0x00, 0x61, + 0xfe, 0x7c, 0x3d, 0x11, 0xd9, 0xf7, 0x7c, 0x79, 0x56, 0x2e, + 0x35, 0x93, 0xa9, 0x9b ), + IV ( 0xbc, 0x28, 0x43, 0x39, 0x53, 0x77, 0x2d, 0x57, 0xbb, 0xd9, + 0x33, 0x10, 0x0c, 0xd4, 0x7a, 0x56 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x1b, 0xb9, 0x43, 0x31, 0xf2, 0x6c, 0xad, 0x24, 0x03, 0x6c, + 0xfe, 0xff, 0x34, 0xb8, 0x9a, 0xaf ) ); + +/* AES-GCM test case 172 */ +CIPHER_TEST ( wycheproof_aes_gcm_19fae6ad, &aes_gcm_algorithm, + KEY ( 0xce, 0xe9, 0xab, 0xbc, 0x26, 0xb6, 0x3e, 0x16, 0x9f, 0x0c, + 0xed, 0x62, 0x1f, 0xe2, 0x1d, 0x95, 0x90, 0x4e, 0x75, 0xb8, + 0x81, 0xd9, 0x3e, 0x6b ), + IV ( 0x1e, 0x82, 0x59, 0xe0, 0xa4, 0x3e, 0x57, 0x10, 0x68, 0xf7, + 0x01, 0xcd, 0x20, 0x64, 0xfc, 0x0c ), + ADDITIONAL(), + PLAINTEXT ( 0x46 ), + CIPHERTEXT ( 0xdc ), + AUTH ( 0xaf, 0x1f, 0x55, 0x35, 0xb1, 0x25, 0xb3, 0x4f, 0xc4, 0x66, + 0x90, 0x2e, 0xa4, 0x0c, 0xb3, 0xa2 ) ); + +/* AES-GCM test case 173 */ +CIPHER_TEST ( wycheproof_aes_gcm_de129db1, &aes_gcm_algorithm, + KEY ( 0x18, 0x9f, 0x0b, 0xd3, 0x90, 0xba, 0x40, 0x63, 0x25, 0x86, + 0xa4, 0x5c, 0x39, 0x73, 0x5c, 0x2b, 0x87, 0x11, 0x33, 0x29, + 0xc8, 0x00, 0xf3, 0x94 ), + IV ( 0xc8, 0x44, 0x42, 0xd6, 0x97, 0x5f, 0x03, 0x59, 0x73, 0x7d, + 0xe0, 0xfa, 0x82, 0x8f, 0x95, 0x8e ), + ADDITIONAL(), + PLAINTEXT ( 0xb4, 0xbc, 0xd7, 0xb8, 0xee, 0xca, 0x30, 0x50, 0xdd, + 0x17, 0x68, 0x2c, 0x6a, 0x91, 0x4e ), + CIPHERTEXT ( 0x2a, 0xab, 0x5c, 0x87, 0xdc, 0xb4, 0xa4, 0xda, 0xe4, + 0xe9, 0x75, 0xdd, 0xb6, 0x5a, 0xab ), + AUTH ( 0x6b, 0x03, 0xb7, 0x55, 0x7c, 0x71, 0x31, 0xe2, 0x35, 0x2e, + 0x49, 0x5d, 0x54, 0xe6, 0x1a, 0xef ) ); + +/* AES-GCM test case 174 */ +CIPHER_TEST ( wycheproof_aes_gcm_1d084de2, &aes_gcm_algorithm, + KEY ( 0xb0, 0x72, 0x4f, 0x15, 0xdf, 0x5b, 0x79, 0x2c, 0x2f, 0x49, + 0xbc, 0x51, 0xdf, 0x0a, 0xc5, 0xaa, 0xd6, 0x9b, 0xe0, 0x03, + 0x09, 0x81, 0x61, 0x3c ), + IV ( 0x13, 0xcd, 0x52, 0x6e, 0xc7, 0x7b, 0x58, 0xf6, 0x2d, 0x48, + 0xd0, 0x3f, 0x8b, 0x88, 0xf2, 0xb8 ), + ADDITIONAL(), + PLAINTEXT ( 0x8d, 0xa3, 0xab, 0x9c, 0x3d, 0x19, 0x5b, 0x04, 0xdf, + 0x45, 0x2a, 0xd2, 0x39, 0x53, 0xda, 0x4d ), + CIPHERTEXT ( 0xd1, 0x27, 0xfd, 0x2e, 0x67, 0xc0, 0x88, 0x7d, 0x90, + 0xeb, 0x92, 0xb9, 0x1f, 0x35, 0x7d, 0x97 ), + AUTH ( 0xeb, 0x05, 0xbd, 0xa9, 0x37, 0xfa, 0xee, 0xd2, 0x7f, 0x88, + 0x33, 0x29, 0x5d, 0x4b, 0xa5, 0x59 ) ); + +/* AES-GCM test case 175 */ +CIPHER_TEST ( wycheproof_aes_gcm_a5bb8fa1, &aes_gcm_algorithm, + KEY ( 0x99, 0x87, 0x50, 0xba, 0x78, 0x48, 0x41, 0xe4, 0x0a, 0x7c, + 0x5b, 0x03, 0x98, 0x57, 0x32, 0xb6, 0x39, 0x7e, 0x54, 0x59, + 0xa3, 0x84, 0x39, 0x54 ), + IV ( 0x1d, 0x3d, 0x62, 0xec, 0xcd, 0x8a, 0xc5, 0xe8, 0x96, 0xf2, + 0x65, 0x4a, 0x7f, 0x60, 0x6f, 0xc9 ), + ADDITIONAL(), + PLAINTEXT ( 0x2f, 0x60, 0xca, 0x34, 0x94, 0xa9, 0x58, 0xdc, 0x3e, + 0x6e, 0xbe, 0xb5, 0xd0, 0xb4, 0xe6, 0xdd, 0xa0, 0xd0, + 0xc4, 0x33, 0x1a, 0xb9, 0xc9, 0x57, 0xf6, 0x42, 0x2a, + 0x51, 0x00, 0x87, 0x8e, 0xbf ), + CIPHERTEXT ( 0x34, 0x4c, 0x2c, 0xea, 0x17, 0xb0, 0x6c, 0xb3, 0xda, + 0x27, 0x2e, 0x22, 0xa2, 0x2a, 0x3a, 0x71, 0xee, 0x0e, + 0xaa, 0x19, 0x59, 0xa7, 0xfa, 0xcf, 0xff, 0x46, 0x46, + 0x60, 0xdd, 0xcc, 0xed, 0xd1 ), + AUTH ( 0xba, 0xb7, 0xfb, 0xf4, 0x99, 0xff, 0x06, 0xaa, 0xd5, 0xf7, + 0x57, 0xb1, 0xc1, 0xa4, 0xfc, 0xc0 ) ); + +/* AES-GCM test case 176 */ +CIPHER_TEST ( wycheproof_aes_gcm_94e6bc4f, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00 ), + ADDITIONAL(), + PLAINTEXT ( 0x0b, 0x4d, 0xbb, 0xba, 0x89, 0x82, 0xe0, 0xf6, 0x49, + 0xf8, 0xba, 0x85, 0xf3, 0xaa, 0x06, 0x1b ), + CIPHERTEXT ( 0x3f, 0x87, 0x5c, 0x9b, 0xd7, 0xd8, 0x51, 0x14, 0x48, + 0x45, 0x94, 0x68, 0xe3, 0x98, 0xc3, 0xb2 ), + AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) ); + +/* AES-GCM test case 177 */ +CIPHER_TEST ( wycheproof_aes_gcm_10226199, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87 ), + IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff ), + ADDITIONAL(), + PLAINTEXT ( 0x1a, 0xe9, 0x36, 0x88, 0xef, 0x7e, 0x26, 0x50, 0xa9, + 0x34, 0x2a, 0xd4, 0x71, 0x8b, 0x27, 0x80 ), + CIPHERTEXT ( 0x21, 0x0d, 0xab, 0xea, 0x43, 0x64, 0xc6, 0xd5, 0xb3, + 0x42, 0x9e, 0x77, 0x43, 0x32, 0x29, 0x36 ), + AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) ); + +/* AES-GCM test case 178 */ +CIPHER_TEST ( wycheproof_aes_gcm_0b1e8b5b, &aes_gcm_algorithm, + KEY ( 0x50, 0x19, 0xeb, 0x9f, 0xef, 0x82, 0xe5, 0x75, 0x0b, 0x63, + 0x17, 0x58, 0xf0, 0x21, 0x3e, 0x3e, 0x5f, 0xcc, 0xa1, 0x27, + 0x48, 0xb4, 0x0e, 0xb4 ), + IV ( 0xff, 0x0d, 0xdb, 0x0a, 0x0d, 0x7b, 0x36, 0xd2, 0x19, 0xda, + 0x12, 0xb5 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x79, 0x71, 0x28, 0x4e, 0x6c, 0x9e, 0x6a, 0xac, 0x34, 0x6f, + 0xe2, 0xb7, 0xa0, 0xa0, 0x64, 0xc2 ) ); + +/* AES-GCM test case 179 */ +CIPHER_TEST ( wycheproof_aes_gcm_96e5612f, &aes_gcm_algorithm, + KEY ( 0x21, 0x21, 0x8a, 0xf7, 0x90, 0x42, 0x8f, 0x80, 0x24, 0xd3, + 0xe7, 0xe1, 0x42, 0x8c, 0x9f, 0xcf, 0x57, 0x8c, 0x21, 0x66, + 0x36, 0xd6, 0x0e, 0x73 ), + IV ( 0x34, 0x04, 0x7b, 0xc3, 0x9b, 0x9c, 0x60, 0x83, 0x84, 0xdf, + 0xf5, 0xb8 ), + ADDITIONAL(), + PLAINTEXT ( 0xe3 ), + CIPHERTEXT ( 0xfe ), + AUTH ( 0x2e, 0x98, 0x2e, 0x24, 0xb8, 0x1c, 0xd1, 0x20, 0xd3, 0x5a, + 0x70, 0xfe, 0x69, 0x35, 0xe6, 0x65 ) ); + +/* AES-GCM test case 180 */ +CIPHER_TEST ( wycheproof_aes_gcm_2e57ea6b, &aes_gcm_algorithm, + KEY ( 0x3a, 0x8b, 0xf5, 0x43, 0xc4, 0x80, 0x92, 0x56, 0x32, 0x11, + 0x82, 0x45, 0xbc, 0xbf, 0x5d, 0x01, 0x52, 0x2b, 0x98, 0x7a, + 0x31, 0xa3, 0x3d, 0xa3 ), + IV ( 0x4e, 0xbc, 0x13, 0xcf, 0x46, 0x36, 0xcc, 0x7c, 0x45, 0xe5, + 0x60, 0xa7 ), + ADDITIONAL(), + PLAINTEXT ( 0x53, 0xfc, 0x72, 0xe7, 0x1b, 0x59, 0xee, 0xb3 ), + CIPHERTEXT ( 0x99, 0xf2, 0xff, 0x1c, 0x8a, 0x44, 0xe5, 0xf2 ), + AUTH ( 0x68, 0x70, 0xf1, 0x04, 0xdd, 0xc5, 0x14, 0x47, 0x7b, 0x40, + 0x03, 0x36, 0xfb, 0x01, 0x86, 0x0e ) ); + +/* AES-GCM test case 181 */ +CIPHER_TEST ( wycheproof_aes_gcm_08c164fc, &aes_gcm_algorithm, + KEY ( 0x92, 0xf4, 0xd2, 0x67, 0x2f, 0xce, 0xec, 0x43, 0x96, 0x3c, + 0xcf, 0xfb, 0x17, 0xe6, 0xea, 0x75, 0x78, 0xb1, 0x14, 0x18, + 0xb0, 0x6a, 0x3b, 0x82 ), + IV ( 0x6e, 0x7f, 0xf7, 0xf0, 0x79, 0x76, 0x85, 0xcf, 0xc4, 0x4b, + 0x05, 0xff ), + ADDITIONAL(), + PLAINTEXT ( 0xc3, 0xec, 0x16, 0xad, 0xb1, 0x84, 0xaf, 0xfa, 0x8a, + 0xe9, 0x73, 0x8b, 0xff, 0xb9, 0x16 ), + CIPHERTEXT ( 0xaf, 0xe8, 0xef, 0x41, 0x59, 0x1b, 0xfc, 0xc0, 0x0d, + 0xb3, 0xc8, 0x80, 0xce, 0xb1, 0x86 ), + AUTH ( 0x29, 0xff, 0xf7, 0xf2, 0x85, 0x76, 0x86, 0x45, 0xc9, 0xc8, + 0xbf, 0x7a, 0x47, 0x1c, 0x93, 0x93 ) ); + +/* AES-GCM test case 182 */ +CIPHER_TEST ( wycheproof_aes_gcm_19c96e4e, &aes_gcm_algorithm, + KEY ( 0xbc, 0xb6, 0xbc, 0x5e, 0xe6, 0x74, 0x3d, 0xf1, 0x39, 0x6a, + 0x34, 0x63, 0x93, 0x27, 0xb2, 0x58, 0x09, 0xec, 0x9c, 0x81, + 0xdd, 0x6a, 0x0c, 0x0e ), + IV ( 0xbe, 0x03, 0x26, 0xd2, 0x3b, 0xdc, 0x2c, 0x64, 0x64, 0x8d, + 0x13, 0xf4 ), + ADDITIONAL(), + PLAINTEXT ( 0x80, 0x47, 0x4a, 0x3a, 0x3b, 0x80, 0x95, 0x60, 0xee, + 0xe2, 0xce, 0x7a, 0x7a, 0x33, 0xea, 0x07 ), + CIPHERTEXT ( 0x90, 0x33, 0x9d, 0xca, 0x02, 0xef, 0x71, 0x7f, 0x16, + 0x03, 0x99, 0x4a, 0xee, 0x6c, 0xf6, 0xd2 ), + AUTH ( 0xe3, 0xd3, 0x3e, 0x01, 0xce, 0x64, 0xf2, 0x71, 0x78, 0x31, + 0x47, 0xde, 0x22, 0x62, 0x28, 0xbc ) ); + +/* AES-GCM test case 183 */ +CIPHER_TEST ( wycheproof_aes_gcm_63801d8f, &aes_gcm_algorithm, + KEY ( 0x5e, 0x1d, 0x28, 0x21, 0x3e, 0x09, 0x25, 0x36, 0x52, 0x5b, + 0xba, 0xe0, 0x9e, 0x21, 0x4a, 0xf4, 0xc8, 0x91, 0xe2, 0x02, + 0xb2, 0xb4, 0xfa, 0x4f ), + IV ( 0xb6, 0xbe, 0x6c, 0xd0, 0x68, 0x12, 0x35, 0xd8, 0x26, 0xaa, + 0x28, 0xea ), + ADDITIONAL(), + PLAINTEXT ( 0x53, 0xd5, 0x94, 0x33, 0xa7, 0xdb, 0x7f, 0x41, 0xb3, + 0x1c, 0xcb, 0x6d, 0x4a, 0x2d, 0x78, 0x99, 0x65 ), + CIPHERTEXT ( 0xb9, 0x8e, 0xd6, 0x32, 0x16, 0x79, 0x94, 0x1a, 0x3e, + 0x52, 0x18, 0x34, 0x29, 0x66, 0x86, 0xad, 0x98 ), + AUTH ( 0x9f, 0x50, 0xc0, 0x3e, 0x05, 0x5e, 0x51, 0x97, 0x12, 0xc5, + 0x82, 0xec, 0x9d, 0xb3, 0x23, 0x5b ) ); + +/* AES-GCM test case 184 */ +CIPHER_TEST ( wycheproof_aes_gcm_3d467b77, &aes_gcm_algorithm, + KEY ( 0x7f, 0x67, 0x2d, 0x85, 0xe1, 0x51, 0xaa, 0x49, 0x0b, 0xc0, + 0xee, 0xc8, 0xf6, 0x6b, 0x5e, 0x5b, 0xee, 0x74, 0xaf, 0x11, + 0x64, 0x2b, 0xe3, 0xff ), + IV ( 0xb0, 0x22, 0x06, 0x70, 0x48, 0x50, 0x5b, 0x20, 0x94, 0x62, + 0x16, 0xef ), + ADDITIONAL(), + PLAINTEXT ( 0xef, 0x64, 0x12, 0xc7, 0x2b, 0x03, 0xc6, 0x43, 0xfa, + 0x02, 0x56, 0x5a, 0x0a, 0xe2, 0x37, 0x8a, 0x93, 0x11, + 0xc1, 0x1a, 0x84, 0x06, 0x5f, 0x80 ), + CIPHERTEXT ( 0xad, 0xdd, 0x30, 0x36, 0x51, 0x11, 0x9e, 0x52, 0xf6, + 0x17, 0x0d, 0xfc, 0x7a, 0x91, 0x50, 0x64, 0x25, 0x3d, + 0x57, 0x53, 0x29, 0x87, 0xb9, 0xab ), + AUTH ( 0xfa, 0x04, 0x84, 0xf8, 0xba, 0xa9, 0x5f, 0x5b, 0x7a, 0x31, + 0xc5, 0x6d, 0x1b, 0x34, 0xc5, 0x8b ) ); + +/* AES-GCM test case 185 */ +CIPHER_TEST ( wycheproof_aes_gcm_566b5fcd, &aes_gcm_algorithm, + KEY ( 0x96, 0x9f, 0xed, 0x50, 0x68, 0x54, 0x1d, 0x65, 0x41, 0x8c, + 0x2c, 0x1d, 0xe8, 0xfe, 0x1f, 0x84, 0x5e, 0x03, 0x60, 0x30, + 0x49, 0x6e, 0x12, 0x72 ), + IV ( 0x81, 0x7f, 0xe5, 0x1c, 0x31, 0xf2, 0x87, 0x91, 0x41, 0xa3, + 0x43, 0x35 ), + ADDITIONAL ( 0xcb ), + PLAINTEXT ( 0x3d, 0x82, 0x33, 0x19, 0x1a, 0x28, 0x23, 0xbf, 0x76, + 0x7e, 0x99, 0x16, 0x7b, 0x1d, 0x4a, 0xf4, 0xf4, 0x84, + 0x84, 0x58 ), + CIPHERTEXT ( 0x0d, 0x2c, 0x3a, 0x3c, 0x0c, 0xc4, 0xb4, 0x0e, 0x70, + 0xed, 0x45, 0xe1, 0x88, 0xe3, 0x56, 0xa0, 0xe1, 0x53, + 0x3b, 0x31 ), + AUTH ( 0x92, 0x90, 0x9a, 0x80, 0xe9, 0x05, 0x40, 0xe1, 0x87, 0x8a, + 0xb5, 0x9e, 0xf3, 0x00, 0x07, 0x2b ) ); + +/* AES-GCM test case 186 */ +CIPHER_TEST ( wycheproof_aes_gcm_39054267, &aes_gcm_algorithm, + KEY ( 0xfa, 0x5b, 0x9b, 0x41, 0xf9, 0x3f, 0x8b, 0x68, 0x2c, 0x04, + 0xba, 0x81, 0x6c, 0x3f, 0xec, 0xc2, 0x4e, 0xec, 0x09, 0x5b, + 0x04, 0xdd, 0x74, 0x97 ), + IV ( 0x62, 0xb9, 0xcf, 0x1e, 0x92, 0x3b, 0xc1, 0x13, 0x8d, 0x05, + 0xd2, 0x05 ), + ADDITIONAL ( 0x2e, 0xd8, 0x48, 0x71, 0x53, 0xe2, 0x1b, 0x12 ), + PLAINTEXT ( 0x18, 0x15, 0x98, 0x41, 0x81, 0x3a, 0x69, 0xfc, 0x0f, + 0x8f, 0x42, 0x29, 0xe1, 0x67, 0x8d, 0xa7, 0xc9, 0x01, + 0x67, 0x11 ), + CIPHERTEXT ( 0xc7, 0xc1, 0xcb, 0xb8, 0x5c, 0xe2, 0xa0, 0xa3, 0xf3, + 0x2c, 0xb9, 0xef, 0x01, 0xad, 0x45, 0xec, 0x11, 0x18, + 0xb6, 0x6d ), + AUTH ( 0x25, 0x33, 0x17, 0xf9, 0x8b, 0xda, 0xb8, 0x75, 0x31, 0xec, + 0xe2, 0x04, 0x75, 0xcd, 0x9e, 0xbb ) ); + +/* AES-GCM test case 187 */ +CIPHER_TEST ( wycheproof_aes_gcm_99c80b8d, &aes_gcm_algorithm, + KEY ( 0xfb, 0xfb, 0x39, 0x56, 0x62, 0x78, 0x7e, 0x2d, 0x25, 0xa2, + 0xe7, 0x51, 0x0f, 0x81, 0x8e, 0x82, 0x59, 0x36, 0xa3, 0x51, + 0x14, 0xe2, 0x37, 0xc9 ), + IV ( 0x3f, 0x1a, 0x1e, 0x02, 0xe9, 0x0a, 0x4b, 0xa7, 0xa1, 0xdb, + 0x9d, 0xf2 ), + ADDITIONAL ( 0x74, 0x31, 0x8d, 0x88, 0x76, 0x52, 0x82, 0x43, 0xf1, + 0x94, 0x4b, 0x73, 0xeb, 0x77, 0xe9, 0x6e ), + PLAINTEXT ( 0x29, 0x52, 0xa3, 0xd6, 0x41, 0x07, 0xd5, 0xcb, 0xb9, + 0x60, 0x22, 0x39, 0xd0, 0x5a, 0x5c, 0x5c, 0x22, 0x2c, + 0xf7, 0x2b ), + CIPHERTEXT ( 0xec, 0xf5, 0xe4, 0x03, 0xf1, 0x9c, 0x00, 0x7c, 0x8d, + 0xa7, 0xa4, 0x56, 0xca, 0xf0, 0xa6, 0xd7, 0x57, 0x62, + 0x82, 0x9b ), + AUTH ( 0xe0, 0x87, 0x7a, 0x10, 0x0f, 0x9d, 0xd9, 0xd6, 0x79, 0x5f, + 0x0e, 0x74, 0xc5, 0x6a, 0x9f, 0xab ) ); + +/* AES-GCM test case 188 */ +CIPHER_TEST ( wycheproof_aes_gcm_c40c4226, &aes_gcm_algorithm, + KEY ( 0x5d, 0x8e, 0x9c, 0x22, 0x22, 0x31, 0x6c, 0x9e, 0xd5, 0xff, + 0x94, 0x51, 0x3c, 0xc9, 0x57, 0x43, 0x6a, 0xe4, 0x47, 0xa6, + 0xe1, 0xa7, 0x3a, 0x29 ), + IV ( 0x08, 0x02, 0xae, 0x86, 0xc7, 0x5a, 0x73, 0xbf, 0x79, 0x56, + 0x15, 0x21 ), + ADDITIONAL ( 0x5c, 0xa3, 0x54, 0xa4, 0xcb, 0x8e, 0x4f, 0xc9, 0x79, + 0x8a, 0xa2, 0x09, 0xad, 0x4f, 0x73, 0x9d, 0xc7, 0xc2, + 0x32, 0xfd, 0xd1, 0xf2, 0x25, 0x84 ), + PLAINTEXT ( 0x42, 0xb4, 0x43, 0x9e, 0x1d, 0x21, 0x16, 0xf8, 0x34, + 0xb9, 0x1c, 0x51, 0x6a, 0x26, 0x29, 0x9d, 0xf2, 0x79, + 0x95, 0x6b ), + CIPHERTEXT ( 0x94, 0xd8, 0x44, 0xd9, 0x8b, 0x94, 0x67, 0xda, 0xa7, + 0xe8, 0xdd, 0xe7, 0xf4, 0x29, 0x00, 0x37, 0x35, 0x4d, + 0x7f, 0xb2 ), + AUTH ( 0x62, 0x19, 0x66, 0x38, 0x59, 0x0c, 0xef, 0x42, 0x9d, 0x6b, + 0x1d, 0x1a, 0x59, 0x83, 0x9c, 0x02 ) ); + +/* AES-GCM test case 189 */ +CIPHER_TEST ( wycheproof_aes_gcm_b6419c85, &aes_gcm_algorithm, + KEY ( 0x11, 0xb1, 0x8e, 0xa3, 0x9c, 0x38, 0x49, 0x15, 0x93, 0xfd, + 0xd5, 0xe6, 0xe4, 0xab, 0x8b, 0x4a, 0x01, 0x29, 0xa5, 0x3f, + 0x49, 0xed, 0x6c, 0xa9 ), + IV ( 0x09, 0x52, 0xa7, 0x0d, 0x99, 0x31, 0x88, 0xc1, 0xdd, 0x88, + 0x91, 0xa5 ), + ADDITIONAL(), + PLAINTEXT ( 0x71, 0x53, 0x21, 0x78, 0x13, 0xc3, 0x90, 0xb8, 0xd4, + 0x58, 0xbe, 0x71, 0xfa, 0xd1, 0xaf, 0xb8, 0x79, 0x71, + 0xff, 0xbc, 0xa3, 0xa9, 0x41, 0x1e, 0x3e, 0x7a, 0xbe, + 0x8b, 0x87, 0x74, 0xf9, 0x87, 0x16, 0x7a, 0xcf, 0xeb, + 0x52, 0x96, 0xe1, 0x9b, 0x40, 0x8b, 0x58, 0x1a, 0xd6, + 0xca, 0xb0, 0x8c, 0x8d, 0xc8, 0x1d, 0x40, 0xcd, 0xbe, + 0x1c, 0x65, 0x92, 0xfb, 0x57, 0x3b, 0xd7, 0xa3, 0xc6 ), + CIPHERTEXT ( 0xe4, 0x63, 0x87, 0xd0, 0x32, 0x4f, 0x3e, 0x8f, 0xfd, + 0x28, 0x7b, 0x35, 0xe4, 0xb2, 0x1f, 0x7e, 0x71, 0xf6, + 0x2b, 0xa7, 0x5f, 0x13, 0xc0, 0x32, 0x57, 0x6a, 0xe8, + 0x34, 0x4f, 0x9d, 0x52, 0x0a, 0x6d, 0x61, 0xef, 0x9f, + 0x99, 0xb9, 0xa0, 0xdd, 0x87, 0x5d, 0x26, 0x92, 0x20, + 0x3a, 0xb6, 0x68, 0xf7, 0x96, 0x2f, 0x2a, 0xc9, 0x29, + 0x4f, 0x91, 0x10, 0x6a, 0x38, 0x84, 0x47, 0x70, 0x98 ), + AUTH ( 0x36, 0xdc, 0xe4, 0x05, 0xee, 0x69, 0xe4, 0x15, 0x27, 0xfb, + 0x78, 0x08, 0x23, 0x0a, 0x11, 0x23 ) ); + +/* AES-GCM test case 190 */ +CIPHER_TEST ( wycheproof_aes_gcm_1c119a15, &aes_gcm_algorithm, + KEY ( 0xcc, 0xbd, 0x0f, 0x50, 0x98, 0x25, 0xa5, 0xf3, 0x58, 0xa1, + 0x4a, 0xac, 0x04, 0x4a, 0xe2, 0x82, 0x6b, 0xb2, 0xc9, 0xea, + 0xaa, 0xaa, 0x07, 0x7f ), + IV ( 0x91, 0x89, 0xa7, 0x1a, 0xc3, 0x59, 0xb7, 0x3c, 0x8c, 0x08, + 0xdf, 0x22 ), + ADDITIONAL(), + PLAINTEXT ( 0xa1, 0xed, 0x10, 0x07, 0xb5, 0x2e, 0x36, 0xec, 0x0f, + 0x70, 0x10, 0x9c, 0x68, 0xda, 0x72, 0xee, 0x7b, 0x67, + 0x5c, 0x85, 0x5e, 0x3e, 0x49, 0x56, 0xd2, 0xdc, 0xf9, + 0xd1, 0x2f, 0x67, 0x5d, 0x69, 0x33, 0xf6, 0x77, 0xdd, + 0xcc, 0x58, 0xfa, 0xce, 0x85, 0x76, 0x99, 0xd2, 0xe3, + 0xd9, 0x0a, 0xdc, 0xb8, 0xc6, 0xc5, 0x7c, 0x9d, 0x88, + 0xb5, 0xdf, 0xcf, 0x35, 0x6d, 0xe4, 0xc0, 0xb6, 0x3f, + 0x0e ), + CIPHERTEXT ( 0xe9, 0x91, 0x5b, 0xc5, 0xae, 0xa6, 0x3c, 0x8b, 0xc0, + 0x14, 0xf2, 0xae, 0x6a, 0x49, 0x86, 0xb0, 0x31, 0x15, + 0xff, 0x1f, 0x34, 0xad, 0x6c, 0x0a, 0xcd, 0x74, 0xff, + 0xca, 0x07, 0xc4, 0x53, 0xec, 0x3f, 0x3c, 0xe6, 0x90, + 0x2d, 0x5f, 0xf3, 0x38, 0xc5, 0x88, 0xa3, 0x4a, 0x1c, + 0x3b, 0x30, 0xef, 0x75, 0x3e, 0xc7, 0x00, 0x15, 0x72, + 0xcb, 0xfe, 0xaf, 0xe6, 0x90, 0xfd, 0x00, 0xf5, 0x9b, + 0x02 ), + AUTH ( 0xfb, 0xf1, 0x9b, 0x6b, 0x90, 0xe2, 0xd9, 0xdf, 0x7e, 0xad, + 0x0c, 0x3b, 0xc6, 0xe3, 0x75, 0xa2 ) ); + +/* AES-GCM test case 191 */ +CIPHER_TEST ( wycheproof_aes_gcm_e36c2be6, &aes_gcm_algorithm, + KEY ( 0xc0, 0xa5, 0x2b, 0x33, 0xc0, 0x09, 0x5e, 0xcf, 0xe1, 0xf3, + 0x8e, 0x34, 0x94, 0xe1, 0x94, 0x73, 0x9e, 0xd9, 0x74, 0xb8, + 0xc7, 0xc0, 0x8a, 0x2b ), + IV ( 0x1d, 0xeb, 0xe7, 0x39, 0x4e, 0xf2, 0xa2, 0xa5, 0x99, 0x88, + 0x34, 0x4f ), + ADDITIONAL(), + PLAINTEXT ( 0x7d, 0x98, 0x98, 0x48, 0xd8, 0x22, 0xa5, 0xc6, 0xa0, + 0xfe, 0x3e, 0x31, 0x6e, 0xdc, 0x0a, 0xdf, 0xae, 0x9d, + 0xd6, 0x31, 0xda, 0x2e, 0x5d, 0x15, 0x0b, 0xb6, 0xae, + 0xfa, 0x04, 0x15, 0x05, 0xac, 0xce, 0xcd, 0x2b, 0xa3, + 0xa2, 0x73, 0x79, 0x98, 0x9c, 0x47, 0x1b, 0xc7, 0x21, + 0x3a, 0x84, 0xff, 0xe5, 0x12, 0x88, 0x50, 0xe2, 0x71, + 0xd5, 0x18, 0x79, 0x8d, 0x19, 0x9e, 0x7b, 0x8b, 0x65, + 0x7c, 0x39 ), + CIPHERTEXT ( 0x7f, 0x16, 0xdf, 0x48, 0xf0, 0x9a, 0x34, 0x90, 0x53, + 0x44, 0x0f, 0xac, 0x4b, 0x83, 0x53, 0x55, 0xc2, 0x4c, + 0x95, 0x31, 0x7b, 0x82, 0xbb, 0x8f, 0x91, 0xbb, 0xc1, + 0x91, 0x82, 0x63, 0x30, 0x0c, 0x0a, 0x4a, 0x20, 0xa3, + 0xfa, 0x03, 0xc0, 0x08, 0x07, 0xb8, 0x28, 0x39, 0xff, + 0xaf, 0x89, 0x8c, 0xe2, 0x37, 0xfe, 0xe3, 0xd0, 0x4f, + 0x76, 0xf2, 0x9c, 0xdd, 0xaf, 0x44, 0x86, 0x8f, 0x69, + 0x11, 0x03 ), + AUTH ( 0x6b, 0xf3, 0x42, 0x30, 0x8d, 0xba, 0x90, 0x79, 0x25, 0x45, + 0xdc, 0xb6, 0x7e, 0xa7, 0x85, 0xc5 ) ); + +/* AES-GCM test case 192 */ +CIPHER_TEST ( wycheproof_aes_gcm_93996ee5, &aes_gcm_algorithm, + KEY ( 0x24, 0x77, 0x72, 0x88, 0x32, 0x6e, 0x1a, 0x21, 0x90, 0xa3, + 0x18, 0xc7, 0x71, 0x88, 0xa7, 0x91, 0x2d, 0x0b, 0xa8, 0xd4, + 0x14, 0x23, 0xa2, 0x9c ), + IV ( 0xf2, 0xf4, 0x19, 0x82, 0xfe, 0x0f, 0x01, 0x7a, 0xe4, 0xea, + 0x1b, 0x06 ), + ADDITIONAL(), + PLAINTEXT ( 0x60, 0xb8, 0xbe, 0xab, 0xd7, 0xe4, 0xa3, 0x6f, 0xd3, + 0x66, 0x6e, 0x13, 0xa4, 0xcf, 0xad, 0x40, 0x5a, 0xd7, + 0xb0, 0xb1, 0x7a, 0x61, 0x45, 0x77, 0xef, 0x9e, 0x9d, + 0xc1, 0x59, 0xb2, 0x04, 0x0c, 0xfb, 0x61, 0xcb, 0xe9, + 0xa2, 0xa8, 0x56, 0x05, 0x3c, 0xd4, 0x6a, 0x88, 0x9b, + 0x8a, 0x8f, 0xde, 0x21, 0xdb, 0x88, 0x22, 0xd6, 0xb3, + 0x46, 0xf6, 0x65, 0xe0, 0x3a, 0xc6, 0x9c, 0xe8, 0x6a, + 0x15, 0x18, 0x5b, 0xbd, 0xe8, 0xcc, 0x9a, 0xbf, 0x0e, + 0xf9, 0x34, 0xfd, 0x22, 0x52, 0x37, 0x31, 0xfa, 0x2c, + 0x3c, 0x19, 0xc2, 0xcb, 0x45, 0x79, 0xe5, 0x75, 0x03, + 0xb0, 0x32, 0x2d, 0xbd, 0x29, 0xee, 0x30, 0xc6, 0x30, + 0x45, 0x49, 0x8e, 0x40, 0x25, 0x18, 0x51, 0x1f, 0x58, + 0x52, 0x56, 0x26, 0xb2, 0x58, 0x70, 0x3f, 0x9d, 0x01, + 0xdc, 0x93, 0x51, 0xbc, 0x62, 0xea, 0x53, 0xc2, 0xa9, + 0xbf ), + CIPHERTEXT ( 0x18, 0xca, 0xb2, 0x5b, 0x5d, 0x7c, 0x4c, 0xdf, 0x63, + 0x22, 0x16, 0x12, 0x3f, 0x74, 0x39, 0x33, 0x24, 0xbd, + 0x13, 0xdc, 0xf0, 0x70, 0x3c, 0xac, 0x6f, 0xaa, 0xdc, + 0xfc, 0x7e, 0xd0, 0xa7, 0xc0, 0xe4, 0xad, 0x96, 0x2d, + 0x9a, 0xfa, 0x1c, 0x63, 0x57, 0xfc, 0x20, 0x34, 0x5b, + 0x9f, 0x43, 0xdf, 0xcb, 0xc6, 0x2b, 0x72, 0xa7, 0xb4, + 0x62, 0xb8, 0xe7, 0x13, 0xb1, 0xc7, 0x59, 0x95, 0x7b, + 0xe6, 0xc6, 0x24, 0xf3, 0xe2, 0x4f, 0xf6, 0x2b, 0x27, + 0xa9, 0x40, 0x09, 0x17, 0x3e, 0x72, 0x1a, 0x3a, 0x99, + 0x39, 0xbe, 0xbe, 0x78, 0x85, 0x5c, 0x84, 0x2b, 0xcd, + 0xcd, 0x51, 0xbc, 0x19, 0x6d, 0x66, 0xaa, 0xd7, 0x9d, + 0xa4, 0xf0, 0x9b, 0x38, 0x13, 0x7b, 0x1a, 0x6f, 0x2a, + 0x39, 0x45, 0x6c, 0x1b, 0x61, 0x89, 0xcf, 0x89, 0x57, + 0xb2, 0x6b, 0x0c, 0x21, 0x35, 0x8d, 0xe6, 0x90, 0x15, + 0xed ), + AUTH ( 0xbf, 0xe7, 0xea, 0x91, 0xf4, 0x62, 0x2d, 0x12, 0xde, 0x15, + 0x45, 0x35, 0x71, 0xd4, 0x40, 0xc4 ) ); + +/* AES-GCM test case 193 */ +CIPHER_TEST ( wycheproof_aes_gcm_6aada21e, &aes_gcm_algorithm, + KEY ( 0xd0, 0x45, 0xc6, 0xeb, 0x17, 0x3f, 0x44, 0x08, 0x43, 0xfa, + 0xec, 0x3e, 0x93, 0x74, 0x60, 0x2a, 0x94, 0xee, 0x3f, 0x71, + 0x76, 0x31, 0x22, 0x08 ), + IV ( 0x98, 0xe9, 0x15, 0x3d, 0xac, 0xa2, 0x52, 0x2e, 0x31, 0x62, + 0xcb, 0x15 ), + ADDITIONAL(), + PLAINTEXT ( 0x3f, 0x0b, 0x30, 0xdc, 0x96, 0x3a, 0x82, 0xd1, 0x82, + 0xc0, 0x35, 0xb5, 0xa8, 0x23, 0x06, 0x0f, 0x07, 0xc4, + 0x12, 0x37, 0x92, 0xe6, 0xce, 0xe6, 0xbf, 0x91, 0xfe, + 0xa3, 0xc5, 0x2f, 0xa6, 0x6b, 0xb6, 0xa9, 0x3e, 0xa6, + 0xcc, 0xe9, 0xf4, 0x81, 0x3e, 0xb9, 0x5b, 0xf1, 0x8f, + 0x81, 0x6c, 0x00, 0xad, 0x4f, 0xb5, 0x69, 0x32, 0x82, + 0x7a, 0x39, 0xef, 0xb2, 0xfe, 0x56, 0x80, 0x4e, 0x60, + 0x4a, 0x60, 0x67, 0x74, 0xee, 0x92, 0xad, 0x46, 0xcd, + 0x8c, 0x17, 0x2a, 0x0d, 0x2b, 0xde, 0xa2, 0xfc, 0x99, + 0xf6, 0x7c, 0xd8, 0x2c, 0x60, 0x24, 0xc3, 0x15, 0xcf, + 0xee, 0x6d, 0xbb, 0x8d, 0x27, 0xf7, 0x45, 0xc9, 0xd0, + 0xce, 0x9b, 0xf5, 0xd0, 0x97, 0x24, 0xf4, 0xbe, 0xd0, + 0x03, 0xcf, 0x39, 0x47, 0x83, 0x48, 0xb3, 0x30, 0x4b, + 0xaa, 0x4e, 0xcc, 0x99, 0x74, 0xfc, 0x4f, 0x3f, 0xf9, + 0x3f, 0x95 ), + CIPHERTEXT ( 0x96, 0x63, 0xe6, 0xf9, 0x8b, 0x27, 0x68, 0x44, 0x8e, + 0x6d, 0xd0, 0xdd, 0x78, 0x0e, 0x14, 0x56, 0x68, 0xaf, + 0x5b, 0x00, 0x22, 0x57, 0xe3, 0x53, 0x21, 0x38, 0x68, + 0xc9, 0xcd, 0x9f, 0xd3, 0xa1, 0xe9, 0x42, 0x75, 0x30, + 0x32, 0x75, 0x41, 0x77, 0x5a, 0x09, 0x31, 0x23, 0x07, + 0x6d, 0x34, 0x98, 0x5d, 0xb3, 0xaa, 0x24, 0x8c, 0xd5, + 0x5e, 0x53, 0x26, 0x09, 0xd1, 0xa3, 0x92, 0x74, 0xc4, + 0x92, 0x16, 0xea, 0x20, 0xfb, 0xab, 0x71, 0x9b, 0x9c, + 0x7e, 0x31, 0x0b, 0x27, 0x87, 0x7b, 0x9a, 0x33, 0xd1, + 0xb6, 0x9a, 0xb7, 0x47, 0xaf, 0xac, 0x94, 0x4d, 0x1e, + 0x97, 0xea, 0x78, 0x93, 0x67, 0x82, 0x1c, 0x33, 0x1f, + 0x00, 0xb5, 0xd6, 0x18, 0x40, 0x2b, 0xfc, 0x57, 0x88, + 0x4d, 0x18, 0xed, 0xbd, 0x60, 0xc4, 0xdf, 0xe2, 0x18, + 0xc0, 0x80, 0x80, 0xb8, 0xe3, 0x47, 0x9f, 0xf8, 0x4b, + 0xdf, 0xb5 ), + AUTH ( 0xfc, 0x2f, 0xf6, 0x2a, 0x41, 0xbd, 0xb7, 0x9a, 0xfc, 0x36, + 0x98, 0x42, 0xe4, 0xec, 0xca, 0xbf ) ); + +/* AES-GCM test case 194 */ +CIPHER_TEST ( wycheproof_aes_gcm_f50057ef, &aes_gcm_algorithm, + KEY ( 0x34, 0x93, 0xfc, 0x87, 0x61, 0xe9, 0xdc, 0x24, 0x75, 0x85, + 0x04, 0x6f, 0x2b, 0x78, 0xaa, 0x7f, 0x13, 0x8f, 0xf9, 0xa9, + 0xd4, 0x7d, 0x9b, 0x39 ), + IV ( 0x87, 0xea, 0xfe, 0x6c, 0xae, 0xad, 0x7f, 0x91, 0x6c, 0x11, + 0xab, 0x76 ), + ADDITIONAL(), + PLAINTEXT ( 0x53, 0x38, 0xeb, 0xcc, 0xc9, 0x68, 0x96, 0x00, 0x17, + 0x15, 0xfd, 0x3a, 0x2b, 0x88, 0x71, 0x0f, 0x6a, 0xfd, + 0x6e, 0xf4, 0x79, 0xd7, 0x33, 0x2a, 0x6c, 0xb5, 0x4a, + 0x3a, 0x46, 0xb3, 0x56, 0x82, 0xc9, 0x1f, 0x54, 0xed, + 0x7f, 0x4b, 0xd5, 0x01, 0xc5, 0x0d, 0x51, 0xc3, 0xcb, + 0x6a, 0x74, 0xd2, 0x1e, 0x26, 0x9b, 0x83, 0x2d, 0x98, + 0x5a, 0x30, 0xf6, 0x3b, 0x79, 0xe8, 0x2f, 0xdf, 0xcc, + 0x21, 0xce, 0xa5, 0xc0, 0x87, 0xe6, 0x48, 0xde, 0x74, + 0x0c, 0x4c, 0x1a, 0x32, 0x7e, 0xed, 0x5c, 0x51, 0xac, + 0xf7, 0xc6, 0x7a, 0x57, 0x68, 0xd9, 0x85, 0xbc, 0x93, + 0xee, 0xd9, 0x79, 0xbc, 0xc2, 0xbb, 0xa6, 0xea, 0xcd, + 0x08, 0x53, 0x89, 0x08, 0x53, 0x29, 0xdb, 0x18, 0x24, + 0x13, 0xb6, 0x54, 0x79, 0x5f, 0xd7, 0xb3, 0x98, 0x77, + 0x5e, 0xe3, 0x62, 0x8f, 0x38, 0x69, 0x51, 0xbc, 0x39, + 0xf9, 0x40, 0x5e ), + CIPHERTEXT ( 0x74, 0x5d, 0xc7, 0x93, 0x6a, 0xc2, 0xdd, 0x20, 0xb5, + 0xf9, 0xca, 0x87, 0xc6, 0xe7, 0xd9, 0xd5, 0xb7, 0xc5, + 0x7a, 0x88, 0x02, 0xd3, 0x6f, 0x15, 0x3b, 0xd8, 0x1d, + 0x96, 0xc8, 0x8f, 0x1b, 0xbb, 0x81, 0xd8, 0x07, 0x44, + 0x4e, 0x21, 0x1b, 0x8e, 0x7e, 0x06, 0x9a, 0x68, 0x1f, + 0xd8, 0xdd, 0x6c, 0x25, 0x67, 0xdc, 0xc3, 0x2a, 0x6b, + 0x84, 0x09, 0x02, 0xc7, 0x69, 0xfb, 0x21, 0xee, 0x07, + 0xdd, 0xb4, 0x1a, 0x7f, 0x67, 0xe2, 0xfa, 0x5c, 0x4e, + 0xcb, 0xe6, 0x61, 0x9c, 0x47, 0xf0, 0x19, 0xff, 0xc3, + 0x2d, 0x50, 0x33, 0xd4, 0x76, 0x9b, 0x5a, 0x73, 0xfe, + 0x52, 0x98, 0x8e, 0xdb, 0xeb, 0xd9, 0xe9, 0x65, 0xa8, + 0xb8, 0x25, 0xf6, 0xbc, 0x50, 0x01, 0x43, 0xb4, 0x56, + 0xb4, 0x08, 0x95, 0x88, 0xa5, 0xdf, 0x6e, 0x9d, 0x56, + 0xe6, 0x18, 0x8d, 0xa2, 0x6a, 0x94, 0x2b, 0x53, 0x83, + 0x30, 0x47, 0x09 ), + AUTH ( 0xa7, 0xc8, 0x0b, 0x93, 0xa0, 0xfb, 0xbc, 0xf4, 0x8d, 0x78, + 0x4d, 0xe3, 0x03, 0xd1, 0x11, 0x6c ) ); + +/* AES-GCM test case 195 */ +CIPHER_TEST ( wycheproof_aes_gcm_7095e3af, &aes_gcm_algorithm, + KEY ( 0x0b, 0x68, 0xb6, 0x6d, 0x51, 0x82, 0xfa, 0x6c, 0x3b, 0x08, + 0xed, 0xd5, 0x0a, 0x0a, 0x74, 0x83, 0xf0, 0x25, 0x93, 0x5a, + 0x0d, 0x64, 0xab, 0xcf ), + IV ( 0x6f, 0xa4, 0x90, 0x2b, 0xee, 0xbd, 0x20, 0xe0, 0xe3, 0x31, + 0x38, 0xa2 ), + ADDITIONAL(), + PLAINTEXT ( 0xe4, 0x2a, 0xd7, 0xf8, 0x9a, 0x18, 0x7d, 0x99, 0x59, + 0x68, 0x14, 0x75, 0x51, 0x5f, 0xa1, 0x17, 0x09, 0x15, + 0x56, 0x09, 0x7c, 0x0d, 0x86, 0x6d, 0xea, 0x5c, 0x87, + 0xab, 0x45, 0xd9, 0x4b, 0x89, 0x77, 0x79, 0x38, 0xeb, + 0x38, 0x1f, 0x6f, 0x24, 0xbd, 0x22, 0x26, 0x84, 0xbe, + 0x49, 0xd0, 0xf7, 0x82, 0x23, 0xaa, 0x48, 0x19, 0x3c, + 0xe9, 0xe9, 0xa8, 0x3d, 0x00, 0x7c, 0x26, 0xfe, 0x4a, + 0xd4, 0xd0, 0x36, 0x04, 0x0b, 0x81, 0x02, 0x1e, 0xe4, + 0x40, 0x81, 0x85, 0xed, 0x5f, 0x4f, 0xd8, 0x71, 0xde, + 0xf6, 0xf5, 0x50, 0x1b, 0xfb, 0x4d, 0x5a, 0xd5, 0xb9, + 0x1c, 0xc4, 0xc3, 0x37, 0x53, 0xe8, 0xa8, 0xa0, 0xb4, + 0x19, 0xff, 0x77, 0x50, 0x17, 0x8b, 0xb3, 0x05, 0x66, + 0x2a, 0x59, 0x13, 0xbf, 0x5a, 0xc9, 0x74, 0x24, 0x11, + 0x4c, 0x2a, 0x59, 0x6b, 0xe6, 0x4f, 0xa8, 0x4e, 0x6a, + 0xce, 0x89, 0xf0, 0xa5, 0xa3, 0x4e, 0x30, 0x59, 0x50, + 0xb4, 0xfa, 0x50, 0x4c, 0x5d, 0x0c, 0xac, 0x49, 0x9c, + 0xe6, 0xc1, 0x42, 0x62, 0x4a, 0x61, 0x8c, 0x2d, 0xb9, + 0xef, 0x33, 0x87, 0x8e, 0x8c, 0x01, 0x4a, 0x58, 0xf9, + 0x74, 0x35, 0x6c, 0xd6, 0x77, 0x37, 0x49, 0x94, 0x2b, + 0x4c, 0x67, 0x47, 0xaa, 0x2e, 0x19, 0xf6, 0x8d, 0x08, + 0x6c, 0x1d, 0x33, 0x05, 0xda, 0x85, 0xf9, 0xf6, 0x52, + 0x8b, 0x72, 0x5c, 0xfb, 0x42, 0x8b, 0x58, 0x3c, 0x72, + 0x7e, 0x4c, 0x40, 0x18, 0xc8, 0xc1, 0x97, 0xd8, 0xfc, + 0x35, 0x60, 0x79, 0xd6, 0xf4, 0xeb, 0x89, 0x08, 0x89, + 0x25, 0xfa, 0xbb, 0x0b, 0x02, 0x10, 0x0a, 0x64, 0x7b, + 0xce, 0x9a, 0x95, 0x6f, 0xc4, 0x47, 0xf5, 0x41, 0xf4, + 0xa8, 0x2f, 0xf1, 0xd8, 0x56, 0x38, 0x3c, 0xeb, 0x34, + 0x63, 0x48, 0x9d, 0xef, 0x07, 0xff, 0x01, 0x49, 0x49, + 0xd5, 0x9a, 0xda ), + CIPHERTEXT ( 0x0e, 0x11, 0xaf, 0xe5, 0xba, 0xa1, 0xdc, 0xc2, 0x6f, + 0xb4, 0xce, 0x1a, 0x14, 0x53, 0x01, 0x29, 0xa1, 0x08, + 0xed, 0xc6, 0x7b, 0x51, 0x1f, 0x97, 0x99, 0x74, 0xd3, + 0x1d, 0x07, 0x97, 0x4d, 0xc6, 0xba, 0x4a, 0x1e, 0x7b, + 0x9c, 0xdc, 0xc0, 0x66, 0xe7, 0x7e, 0x70, 0xa5, 0x14, + 0x7f, 0xfd, 0xc6, 0x5b, 0x29, 0xbc, 0x52, 0x59, 0x22, + 0x6e, 0xdc, 0x9a, 0x27, 0x9f, 0x7a, 0x43, 0x75, 0xdd, + 0xd3, 0x9e, 0x0d, 0x3f, 0xdb, 0xcb, 0x08, 0x4b, 0xd4, + 0xdc, 0x26, 0xa4, 0x89, 0xd3, 0xaf, 0xc4, 0xbe, 0x4f, + 0xb2, 0x0d, 0xaa, 0x00, 0xb7, 0x2f, 0xbd, 0x66, 0x2d, + 0xab, 0xe4, 0x55, 0xcd, 0x47, 0x85, 0x9b, 0xd3, 0xd3, + 0x82, 0x84, 0xbc, 0xcd, 0x8e, 0x7f, 0x8d, 0x32, 0x09, + 0x48, 0x05, 0x4f, 0x17, 0x7f, 0x75, 0xa9, 0x4e, 0x0b, + 0x13, 0x93, 0x5e, 0x59, 0x58, 0xc1, 0x59, 0x02, 0x9d, + 0x77, 0x6c, 0x4d, 0x58, 0x60, 0x88, 0xb7, 0x62, 0x56, + 0x3e, 0x82, 0x34, 0x3f, 0xa8, 0xa6, 0xbe, 0xda, 0x38, + 0x07, 0x1b, 0xf1, 0xcd, 0xaf, 0xce, 0x3f, 0x50, 0x3d, + 0x8f, 0xc1, 0xa9, 0x24, 0x78, 0xb7, 0xf6, 0x30, 0x34, + 0x1b, 0x0b, 0xb1, 0x2d, 0x4e, 0x5b, 0x59, 0xd6, 0x0e, + 0xac, 0x69, 0xc9, 0x52, 0x14, 0xde, 0xcb, 0xd4, 0x9a, + 0xa6, 0x84, 0x71, 0x66, 0x49, 0x75, 0x2d, 0xe3, 0x54, + 0x66, 0xab, 0xfa, 0x39, 0x36, 0x14, 0x86, 0xa3, 0x57, + 0x2f, 0x61, 0xe3, 0x41, 0x8d, 0x74, 0xe6, 0xd1, 0x19, + 0x2f, 0x07, 0x43, 0x8c, 0xe5, 0x41, 0xae, 0x96, 0xf7, + 0x3d, 0xaf, 0x0e, 0xfb, 0x8c, 0x4a, 0x5a, 0x7b, 0xb4, + 0x4a, 0x6d, 0x0b, 0xfc, 0x70, 0x7e, 0xb0, 0xff, 0x9b, + 0x62, 0xc1, 0x57, 0xf7, 0x49, 0xf3, 0xa3, 0xa6, 0xa5, + 0x8f, 0x4c, 0xf2, 0x71, 0x46, 0xb5, 0xd8, 0x7f, 0x50, + 0x1d, 0x7f, 0x72 ), + AUTH ( 0xee, 0x53, 0x09, 0x2e, 0x3b, 0x28, 0xd6, 0x14, 0x88, 0xd9, + 0xcb, 0x59, 0xa7, 0x18, 0xa4, 0xfa ) ); + +/* AES-GCM test case 196 */ +CIPHER_TEST ( wycheproof_aes_gcm_ff5845cf, &aes_gcm_algorithm, + KEY ( 0xa5, 0xe1, 0x66, 0x74, 0x00, 0xc4, 0x97, 0xa9, 0x27, 0xed, + 0xdb, 0xf3, 0x75, 0x66, 0xd2, 0x95, 0xa0, 0x9e, 0x1f, 0x06, + 0x1b, 0x24, 0xaf, 0x46 ), + IV ( 0xc8, 0xca, 0xc0, 0xa0, 0x2a, 0x3b, 0x32, 0x76, 0xc3, 0x57, + 0xc2, 0xb3 ), + ADDITIONAL(), + PLAINTEXT ( 0x07, 0x13, 0x39, 0x89, 0xd3, 0xc4, 0x2b, 0x89, 0x75, + 0x5d, 0x10, 0xfb, 0x60, 0xec, 0x4c, 0x1b, 0x22, 0x52, + 0x1a, 0x11, 0xa3, 0x04, 0xf0, 0x0c, 0xfd, 0x7c, 0xc5, + 0x9a, 0xb5, 0x47, 0x79, 0x17, 0x80, 0x08, 0xd0, 0x5e, + 0xf2, 0x96, 0x0e, 0x1d, 0x2b, 0x70, 0x11, 0xfa, 0x7a, + 0x8f, 0xb6, 0xbb, 0x27, 0xb0, 0xbc, 0x54, 0xfb, 0x50, + 0x90, 0x84, 0xed, 0x7a, 0x5a, 0x69, 0x7b, 0x4d, 0x72, + 0xfe, 0x24, 0xfd, 0xa3, 0xda, 0x0a, 0x5a, 0xc5, 0x19, + 0x8b, 0xc1, 0xdb, 0x4b, 0x91, 0xea, 0xc9, 0xc1, 0x85, + 0xad, 0xe8, 0x10, 0x03, 0x83, 0x46, 0xa2, 0x33, 0x5a, + 0xa1, 0xcc, 0xb0, 0xeb, 0x81, 0xd3, 0x5a, 0x07, 0xba, + 0x0b, 0x89, 0xb4, 0x87, 0x0c, 0xdc, 0xcd, 0x36, 0x7b, + 0xc3, 0xd7, 0xed, 0x1e, 0xe3, 0xf2, 0x42, 0x30, 0x8b, + 0x29, 0xde, 0xbd, 0x9f, 0x12, 0xe4, 0xe6, 0xdc, 0xa7, + 0x4a, 0x3f, 0x42, 0xf8, 0x48, 0x99, 0x03, 0x5f, 0x89, + 0x9e, 0x4d, 0x0f, 0x9c, 0xcd, 0x1c, 0x30, 0xc8, 0xb3, + 0x2d, 0x21, 0x77, 0x9d, 0x55, 0x5f, 0x0a, 0x03, 0xbd, + 0x5d, 0x5c, 0x5e, 0x44, 0x47, 0xa9, 0x20, 0x98, 0xa1, + 0x0c, 0x72, 0x11, 0x6b, 0x97, 0x72, 0x2c, 0x70, 0x19, + 0xda, 0x23, 0xf6, 0x32, 0x0f, 0x47, 0xed, 0xb9, 0xc9, + 0x5c, 0x1b, 0xa6, 0xb3, 0x7a, 0xcc, 0x02, 0xd6, 0x3a, + 0xcc, 0x50, 0xdd, 0xd0, 0xd2, 0x69, 0x69, 0x25, 0x60, + 0x03, 0x01, 0x1d, 0x7f, 0x4c, 0xdc, 0x2a, 0xb5, 0xc2, + 0x4e, 0x25, 0x6d, 0xa6, 0x48, 0xed, 0x1b, 0x0e, 0xb5, + 0x6c, 0x95, 0xc5, 0x7a, 0x7f, 0xcc, 0xdd, 0x23, 0x45, + 0xf3, 0x59, 0xc0, 0xbc, 0xe6, 0xa2, 0xf0, 0xf4, 0x9d, + 0x71, 0x84, 0xa0, 0x02, 0x3d, 0xd0, 0x5f, 0x2e, 0xec, + 0xbc, 0xc7, 0x0f, 0xd0, 0xfd, 0xba, 0xe0, 0x6f, 0x42, + 0x55, 0x90, 0xdb, 0x38 ), + CIPHERTEXT ( 0x84, 0x1c, 0xa3, 0x04, 0x34, 0x55, 0xe4, 0x80, 0x15, + 0x3a, 0xf6, 0x2a, 0x17, 0xce, 0x90, 0x4f, 0x08, 0x43, + 0x90, 0x61, 0x20, 0x22, 0x93, 0x84, 0xc9, 0xbb, 0x20, + 0x13, 0xb4, 0x41, 0x69, 0x5d, 0xf2, 0x49, 0x87, 0xd3, + 0x7d, 0xa6, 0xb2, 0x03, 0x07, 0xfc, 0xea, 0xd5, 0x84, + 0x19, 0xb1, 0x1e, 0x24, 0xf7, 0xb5, 0xf2, 0x3a, 0x13, + 0xfd, 0xac, 0x75, 0x55, 0x18, 0x9b, 0x64, 0x5a, 0xe9, + 0x73, 0xf2, 0x72, 0x50, 0x10, 0xf7, 0x79, 0x63, 0x9d, + 0x87, 0x0e, 0xbf, 0x38, 0x2b, 0x0d, 0xf7, 0xaa, 0x97, + 0xe2, 0x02, 0xd9, 0xaa, 0x32, 0x69, 0xf4, 0xf5, 0x77, + 0xb1, 0xe1, 0xdd, 0x00, 0x1c, 0xd1, 0xac, 0x6d, 0xbd, + 0xd3, 0x96, 0x8b, 0x2f, 0x2f, 0x58, 0x6f, 0x94, 0x8d, + 0x64, 0x29, 0x76, 0xba, 0xf7, 0x48, 0x12, 0x1f, 0x97, + 0x20, 0xc6, 0xa8, 0xac, 0x86, 0xab, 0x21, 0xec, 0xc1, + 0xde, 0xad, 0x08, 0xf0, 0xdb, 0xd0, 0xf1, 0x96, 0x5c, + 0xc6, 0xbb, 0xc4, 0xf2, 0x15, 0xa5, 0x3a, 0x63, 0x0d, + 0x28, 0x48, 0xd7, 0x0c, 0x03, 0x9f, 0x98, 0x69, 0xea, + 0xc9, 0x11, 0xbc, 0x04, 0x9f, 0x8a, 0x47, 0x0f, 0x76, + 0x66, 0x1b, 0xcf, 0xd0, 0x5c, 0x07, 0xe0, 0x63, 0x17, + 0xa1, 0x16, 0x3b, 0x20, 0x8b, 0x86, 0x26, 0xeb, 0x56, + 0x16, 0xfa, 0x5d, 0x0e, 0xf6, 0xb8, 0x77, 0xe4, 0x29, + 0x0e, 0xc0, 0xb0, 0xe3, 0xea, 0xa5, 0x01, 0x22, 0x21, + 0x9a, 0x0c, 0x60, 0xb2, 0xfd, 0x17, 0x62, 0x9e, 0x91, + 0x96, 0x20, 0x09, 0x16, 0x1b, 0x66, 0x87, 0xa0, 0xe6, + 0x81, 0x0e, 0x0a, 0x40, 0xc9, 0xf7, 0xf6, 0x17, 0xd0, + 0x4c, 0x0d, 0x71, 0xe0, 0x37, 0x71, 0xef, 0x8d, 0xa5, + 0xbc, 0x95, 0x0c, 0x7c, 0x7d, 0xfc, 0x61, 0xcb, 0xac, + 0xf1, 0x1b, 0x3c, 0x14, 0x33, 0x10, 0x95, 0x6c, 0x77, + 0x36, 0xc9, 0x66, 0x76 ), + AUTH ( 0x46, 0xe9, 0x21, 0xd8, 0xfb, 0x4f, 0xa0, 0x31, 0x83, 0xad, + 0x42, 0x7b, 0x30, 0x2c, 0x16, 0x5d ) ); + +/* AES-GCM test case 197 */ +CIPHER_TEST ( wycheproof_aes_gcm_2b7f8f4f, &aes_gcm_algorithm, + KEY ( 0xe6, 0x02, 0x18, 0x8a, 0xbf, 0x6a, 0x91, 0xf3, 0xe2, 0x58, + 0x83, 0x8c, 0xea, 0x6b, 0xef, 0xef, 0xfc, 0xf6, 0x25, 0x7a, + 0x50, 0x9c, 0x3e, 0x95 ), + IV ( 0x9e, 0x35, 0xd3, 0xef, 0x18, 0x97, 0xc5, 0xfe, 0x3f, 0x64, + 0x72, 0x04 ), + ADDITIONAL(), + PLAINTEXT ( 0x3b, 0x9a, 0x6e, 0xdc, 0x44, 0x84, 0x8c, 0x07, 0x23, + 0x41, 0xfd, 0x4a, 0xf5, 0x1e, 0xc1, 0x16, 0xac, 0x32, + 0x8f, 0x69, 0xcc, 0x5a, 0x33, 0x54, 0xe4, 0x92, 0x99, + 0xfb, 0x2e, 0x5d, 0x22, 0xfa, 0x00, 0x84, 0xe3, 0x0b, + 0x36, 0xec, 0xaf, 0x54, 0x30, 0x93, 0x97, 0xb2, 0xb4, + 0x98, 0xd6, 0x86, 0x08, 0x7f, 0x34, 0x57, 0x69, 0x8c, + 0x36, 0x39, 0xe7, 0x3c, 0xa1, 0x8c, 0x78, 0xc3, 0xe0, + 0x21, 0xd6, 0x73, 0x98, 0x6c, 0xfc, 0x2c, 0xeb, 0x4d, + 0x07, 0xe6, 0x69, 0x71, 0xe9, 0x76, 0xf5, 0x8f, 0x03, + 0x36, 0xf8, 0x2c, 0x7f, 0xc0, 0xd5, 0x2d, 0x66, 0x61, + 0x0f, 0x26, 0xca, 0x3b, 0xfe, 0x53, 0xc0, 0xb0, 0x1c, + 0xf7, 0xc2, 0x07, 0x30, 0x6d, 0xb9, 0x04, 0xc1, 0xad, + 0x30, 0x0a, 0xb9, 0x5c, 0x56, 0xfd, 0xe8, 0x20, 0xa8, + 0xed, 0xd2, 0x56, 0xf2, 0xb9, 0x90, 0x6b, 0x31, 0x2b, + 0xf7, 0xaf, 0x5e, 0xf4, 0xa8, 0x06, 0xf6, 0x18, 0xdd, + 0xfc, 0xb6, 0x71, 0x79, 0xb0, 0x3f, 0xff, 0x80, 0xa2, + 0x45, 0xc3, 0x8d, 0x8f, 0x4c, 0xff, 0x28, 0x75, 0xb7, + 0x1a, 0x0b, 0xf6, 0x91, 0x29, 0xca, 0xf9, 0x71, 0x21, + 0x46, 0x2e, 0x05, 0x01, 0xec, 0x65, 0x74, 0xed, 0xe9, + 0x47, 0x06, 0xf4, 0xa0, 0x4d, 0x2f, 0xb3, 0x01, 0xd4, + 0x15, 0xc2, 0x2e, 0xa1, 0x21, 0x57, 0xd2, 0xe9, 0x19, + 0xbc, 0x7a, 0x01, 0x69, 0xa5, 0xad, 0x5c, 0x7b, 0xb5, + 0x76, 0x1a, 0x85, 0x31, 0xab, 0xbe, 0x77, 0xd6, 0x6a, + 0x48, 0x71, 0xb3, 0xf2, 0x7a, 0x71, 0x70, 0xf0, 0x99, + 0x04, 0x4b, 0x9f, 0xdc, 0x50, 0xa8, 0xcb, 0x3b, 0x89, + 0x42, 0x52, 0xa5, 0x01, 0xcc, 0x89, 0x6a, 0xc4, 0x79, + 0x3b, 0xdb, 0x47, 0x8b, 0xb1, 0xcb, 0x99, 0xc0, 0x23, + 0x41, 0xd7, 0x23, 0x8d, 0xd8, 0xd5, 0x93, 0xcf, 0xda, + 0x02, 0xf7, 0xd5, 0x20, 0xd7 ), + CIPHERTEXT ( 0x16, 0x71, 0x83, 0x66, 0x16, 0x75, 0x67, 0x76, 0x25, + 0xbe, 0xd2, 0xd5, 0xf5, 0x5f, 0x72, 0x8d, 0xab, 0x80, + 0xd7, 0xf0, 0x6f, 0x62, 0x9d, 0x99, 0xe5, 0x8b, 0x45, + 0x06, 0x9f, 0xe9, 0xd7, 0x42, 0x8e, 0x89, 0x61, 0x56, + 0x1b, 0x11, 0x24, 0x5c, 0x70, 0x9a, 0xc9, 0xeb, 0xb5, + 0xc5, 0x9a, 0xc2, 0xa8, 0x9d, 0x83, 0x75, 0xd8, 0xa0, + 0x1d, 0x84, 0x9c, 0x77, 0x33, 0xa1, 0xb4, 0x82, 0x52, + 0x99, 0x27, 0xe3, 0xf1, 0xa1, 0xa5, 0x3f, 0x63, 0xa4, + 0xbe, 0x08, 0xa1, 0x1c, 0x94, 0x1c, 0x63, 0x4c, 0xd4, + 0x03, 0x73, 0xc4, 0x2f, 0xfb, 0x24, 0x49, 0xc6, 0x41, + 0xbc, 0x9e, 0x39, 0xea, 0xfb, 0xcf, 0x9c, 0x0f, 0xba, + 0x67, 0x7e, 0x36, 0x49, 0x6f, 0x73, 0xfc, 0x70, 0xaa, + 0x09, 0x72, 0x22, 0x49, 0x01, 0xab, 0x04, 0xb0, 0xa1, + 0x96, 0xab, 0x74, 0x52, 0x62, 0x02, 0x1b, 0x23, 0x13, + 0xa8, 0x46, 0x41, 0x87, 0xfe, 0xce, 0xc4, 0x3a, 0xdb, + 0x40, 0x62, 0x58, 0xbd, 0xdc, 0xd8, 0xc9, 0xd0, 0x4d, + 0xc2, 0xae, 0x29, 0xe6, 0x5d, 0x54, 0xa8, 0x9d, 0xd0, + 0xf1, 0x75, 0x2d, 0x6d, 0x95, 0x0d, 0xbf, 0x7d, 0xa4, + 0xde, 0xa0, 0xa7, 0xb9, 0x46, 0x55, 0x79, 0x50, 0x3f, + 0xc8, 0xec, 0x44, 0x51, 0xf4, 0xb3, 0x98, 0x78, 0xac, + 0x47, 0x54, 0xa1, 0xaa, 0xf7, 0xb0, 0xb7, 0x3f, 0xee, + 0x11, 0x21, 0x3c, 0xb8, 0xe6, 0x01, 0xfc, 0x60, 0x39, + 0x39, 0x3f, 0x72, 0xe0, 0xe0, 0x79, 0xee, 0x97, 0xec, + 0xc6, 0x10, 0x24, 0x17, 0x57, 0xda, 0x2d, 0xb2, 0xf5, + 0x1d, 0x5e, 0xd1, 0x21, 0x48, 0x15, 0x40, 0xef, 0xf4, + 0x72, 0x87, 0x74, 0x4d, 0xac, 0x43, 0x37, 0x5c, 0x4f, + 0x48, 0xa4, 0x6a, 0xf7, 0x01, 0x90, 0x45, 0x3a, 0x17, + 0xc3, 0xc7, 0x8d, 0x73, 0x5b, 0xa1, 0xd1, 0xfc, 0x76, + 0xa3, 0x30, 0xe6, 0xcb, 0xed ), + AUTH ( 0xc7, 0x20, 0x35, 0x31, 0x4f, 0x43, 0xd2, 0x56, 0xf8, 0xd8, + 0x45, 0xeb, 0x69, 0x6b, 0xd9, 0x43 ) ); + +/* AES-GCM test case 198 */ +CIPHER_TEST ( wycheproof_aes_gcm_d993a57b, &aes_gcm_algorithm, + KEY ( 0x62, 0xd3, 0x47, 0x58, 0x7e, 0xf0, 0xd5, 0x8d, 0x6c, 0xc3, + 0xba, 0x2a, 0xe7, 0xaf, 0x65, 0x57, 0x04, 0xac, 0x4d, 0xab, + 0xc1, 0xcf, 0xb2, 0x9c ), + IV ( 0x34, 0xe6, 0xe2, 0x96, 0xf7, 0x62, 0x59, 0x99, 0xbc, 0x9f, + 0x02, 0xe3 ), + ADDITIONAL(), + PLAINTEXT ( 0x82, 0x3a, 0x00, 0x50, 0x97, 0xd7, 0x81, 0x1a, 0x4a, + 0x81, 0x63, 0x68, 0x35, 0x71, 0x66, 0x70, 0xd7, 0xe2, + 0x39, 0xfe, 0x02, 0x59, 0x78, 0xd9, 0x45, 0x34, 0x61, + 0xd8, 0xb0, 0x89, 0x55, 0xfc, 0x9f, 0x92, 0xf2, 0x97, + 0xf0, 0x47, 0x41, 0x77, 0xe9, 0xf7, 0x30, 0xcd, 0xe7, + 0x14, 0x46, 0x7f, 0xd3, 0x76, 0xb3, 0x70, 0xed, 0x96, + 0x72, 0x54, 0x97, 0x08, 0x3f, 0x0f, 0xb7, 0xde, 0x9d, + 0xe1, 0x03, 0x7f, 0x50, 0x94, 0xbb, 0x9c, 0xce, 0x8a, + 0x7e, 0xf3, 0x13, 0x7c, 0xfe, 0x31, 0x82, 0x4a, 0xc1, + 0xf6, 0x41, 0xaf, 0x92, 0xe2, 0x80, 0x6c, 0x92, 0xe3, + 0xc5, 0x8e, 0x66, 0x2c, 0x89, 0xcc, 0x25, 0x9b, 0x3d, + 0xa6, 0x6b, 0xb2, 0x78, 0xa7, 0xdc, 0x08, 0xde, 0x92, + 0x40, 0xee, 0xef, 0x71, 0x51, 0xf8, 0x8e, 0xc4, 0x65, + 0xf2, 0x58, 0xec, 0xc0, 0x1b, 0x7a, 0x2c, 0xdb, 0x3e, + 0x18, 0x8e, 0xeb, 0x68, 0x98, 0x13, 0xc9, 0xfb, 0x41, + 0x99, 0xb8, 0xad, 0x62, 0xcc, 0x26, 0xaf, 0x1f, 0x52, + 0xf1, 0xf3, 0xaa, 0x02, 0xef, 0x3b, 0x60, 0x5d, 0xee, + 0xb0, 0xf2, 0x0a, 0x8f, 0x00, 0xa9, 0xf9, 0xca, 0x3d, + 0x15, 0x3e, 0x51, 0xd8, 0x1c, 0xca, 0xfa, 0x07, 0x67, + 0x9b, 0x43, 0x84, 0x50, 0xd0, 0xd4, 0x6e, 0x45, 0x7d, + 0x53, 0x23, 0xd3, 0xad, 0x38, 0x53, 0x00, 0x93, 0x0e, + 0x22, 0x25, 0x17, 0xb8, 0x62, 0xdd, 0xf8, 0xb1, 0x25, + 0x3d, 0xf0, 0xe2, 0x0f, 0x51, 0xea, 0xe6, 0x76, 0xcf, + 0x83, 0x69, 0x2b, 0x6a, 0xe6, 0xd4, 0xcf, 0xe3, 0x5b, + 0xcf, 0x43, 0xd2, 0xce, 0xc2, 0xed, 0xfb, 0x72, 0xbf, + 0x92, 0x19, 0xe8, 0xb0, 0x5a, 0xa6, 0x1f, 0x90, 0x0c, + 0x80, 0x4e, 0xba, 0x59, 0xc1, 0x00, 0x7f, 0x2d, 0xda, + 0xda, 0xb3, 0xe1, 0xda, 0xb4, 0x48, 0x5e, 0x5c, 0x77, + 0xf7, 0xa9, 0x88, 0x09, 0x5c, 0x5a, 0x44, 0x7c, 0x7c, + 0xd7, 0xec, 0xef, 0xa2, 0x65, 0x27, 0xdf, 0xcf, 0x8b, + 0x46, 0x15, 0x46, 0x3f, 0x12, 0xe3, 0xca, 0x69, 0x10, + 0xa8, 0xa4, 0x1b, 0x07, 0xac, 0x4f, 0x58, 0xe5, 0x21, + 0x94, 0x59, 0x95, 0x41, 0x31, 0xc8, 0x5f, 0x8a, 0xa7, + 0x0b, 0x94, 0x30, 0x38, 0xe1, 0xd6, 0xe9, 0x90, 0x9b, + 0xb6, 0x47, 0x70, 0x7b, 0xf2, 0x6a, 0x5c, 0xec, 0xed, + 0x87, 0x29, 0x8e, 0x4f, 0x4e, 0x61, 0x6c, 0x0c, 0xc1, + 0xed, 0xeb, 0x8e, 0x0c, 0x5a, 0x6d, 0x21, 0x49, 0x18, + 0xcd, 0x24, 0x5e, 0x5d, 0x7d, 0x38, 0xd8, 0xc8, 0xec, + 0x14, 0x1d, 0xdb, 0xba, 0x35, 0x4c, 0xd2, 0xd9, 0xb7, + 0xdd, 0x21, 0x13, 0x2d, 0x9e, 0x4a, 0xf5, 0x8f, 0x4b, + 0x6b, 0x69, 0xee, 0xab, 0x9a, 0xc0, 0xeb, 0xd6, 0x16, + 0xf5, 0x64, 0xbb, 0x4d, 0x5a, 0x38, 0x23, 0x2d, 0x03, + 0xe7, 0xfe, 0x62, 0xed, 0x70, 0x0c, 0x77, 0x61, 0xba, + 0x25, 0xa7, 0x84, 0xc4, 0xb0, 0xc4, 0x80, 0x4e, 0xb5, + 0x00, 0x17, 0x5e, 0xeb, 0x8a, 0x58, 0x43, 0xe6, 0x71, + 0x04, 0xe3, 0xd1, 0xe3, 0x74, 0x0a, 0xcd, 0x02, 0x25, + 0x27, 0xcf, 0xf1, 0xc9, 0x82, 0x87, 0x4f, 0xe9, 0x56, + 0x87, 0x28, 0x18, 0xa7, 0x3b, 0x8c, 0xa4, 0x78, 0x2b, + 0xdb, 0xb2, 0xd1, 0x7a, 0x56, 0x4d, 0xe7, 0x07, 0x0b, + 0x51, 0xe0, 0xa8, 0x9e, 0xc1, 0x83, 0x4d, 0xfc, 0x74, + 0xf2, 0x3d, 0xff, 0xdf, 0xc4, 0x78, 0xb9, 0x2b, 0x25, + 0xb2, 0x6b, 0xc8, 0xf8, 0xa5, 0x52, 0x67, 0x03, 0x1d, + 0x98, 0x27, 0x8b, 0x69, 0x1d, 0x4d, 0x3e, 0x6f, 0x70, + 0x66, 0x70, 0xd3, 0xa2, 0x97, 0x74, 0xcf, 0x45, 0x17, + 0xad, 0x83, 0x2b, 0x63, 0x9f, 0x94, 0x4e, 0x10, 0x16, + 0x94, 0xaf, 0x69, 0x01, 0xd0, 0x21, 0xa9, 0xa7, 0xc6, + 0x3c, 0xbc, 0xc5, 0x43, 0x85, 0x44, 0x60 ), + CIPHERTEXT ( 0xed, 0x35, 0xbb, 0xdc, 0x40, 0xa2, 0xfd, 0x24, 0x92, + 0xb1, 0x10, 0x6d, 0x11, 0x8d, 0x0c, 0x26, 0x5b, 0xec, + 0x23, 0xba, 0x55, 0xc5, 0x64, 0x85, 0x37, 0xfd, 0x88, + 0xa5, 0xd2, 0xc2, 0x54, 0xe5, 0x76, 0x46, 0x02, 0xa6, + 0xe4, 0x0c, 0xd4, 0xba, 0x5c, 0x0c, 0xaa, 0x4a, 0x11, + 0x41, 0x4a, 0xc1, 0xbe, 0x35, 0x2c, 0x4a, 0x73, 0x38, + 0x50, 0x5d, 0x85, 0x4f, 0x34, 0xb8, 0x9f, 0xc7, 0x23, + 0xd6, 0xa3, 0xd7, 0x03, 0x69, 0xcd, 0x1b, 0xf2, 0xd1, + 0x90, 0x06, 0x5e, 0x3d, 0x15, 0xa4, 0xa9, 0x3f, 0xc8, + 0x42, 0xe1, 0xeb, 0x03, 0xd5, 0x80, 0xbf, 0x50, 0x02, + 0x70, 0xe8, 0x8d, 0x3f, 0x62, 0x4c, 0xf2, 0x4a, 0xdb, + 0xb1, 0x18, 0xed, 0x7f, 0xfa, 0xe7, 0x32, 0x93, 0xc8, + 0xd3, 0x5f, 0xe3, 0x60, 0xee, 0x26, 0x3c, 0xcb, 0x41, + 0xda, 0xdc, 0x5b, 0x75, 0xc8, 0x02, 0x4c, 0xef, 0x1a, + 0x3b, 0x79, 0xaf, 0x12, 0xdb, 0x46, 0x41, 0xf2, 0x5e, + 0x9d, 0x9a, 0x25, 0xdc, 0x39, 0x06, 0x4f, 0x2f, 0x9c, + 0x5c, 0x96, 0xc5, 0x4a, 0x9d, 0x29, 0xc8, 0xc9, 0xca, + 0xf7, 0x32, 0x1e, 0x27, 0xde, 0x79, 0xc9, 0x8c, 0x77, + 0xf0, 0x26, 0xf2, 0x45, 0x1a, 0x18, 0xac, 0xa3, 0x84, + 0x7e, 0x2e, 0x92, 0xf2, 0x14, 0x40, 0xb3, 0x74, 0x45, + 0x69, 0x56, 0x10, 0x02, 0x07, 0x62, 0xc6, 0x56, 0xec, + 0x2d, 0x20, 0x67, 0xa8, 0x54, 0xc2, 0x9a, 0x69, 0xb9, + 0xd0, 0x5a, 0x02, 0x28, 0xb3, 0x89, 0xeb, 0xf0, 0x09, + 0xa7, 0xd2, 0x88, 0xba, 0x21, 0x72, 0x4f, 0x77, 0x33, + 0xc8, 0x17, 0xa9, 0x95, 0x75, 0x33, 0x59, 0x33, 0x5c, + 0x92, 0x8d, 0x44, 0x26, 0xdc, 0x2c, 0x6d, 0x22, 0xa6, + 0x10, 0x34, 0x89, 0x2f, 0xed, 0x04, 0xa1, 0x71, 0xbd, + 0x29, 0x5e, 0x31, 0xf1, 0xf3, 0x3f, 0x5c, 0x95, 0x5f, + 0xcc, 0x2a, 0x6e, 0xd4, 0x60, 0x51, 0xf6, 0x9f, 0x11, + 0x60, 0x29, 0x8b, 0x0d, 0xe6, 0xbb, 0xfd, 0xb5, 0x0e, + 0x10, 0xe4, 0x7d, 0x4c, 0x7d, 0x66, 0x4c, 0x3d, 0xd6, + 0x42, 0xf6, 0x15, 0xf3, 0x2f, 0xf3, 0x24, 0x65, 0x93, + 0xd2, 0x9b, 0x99, 0x39, 0x5b, 0x28, 0x0a, 0xac, 0x02, + 0xd5, 0x38, 0x97, 0xba, 0xa0, 0xf9, 0x5b, 0x91, 0x9f, + 0xaf, 0x94, 0xdc, 0xf4, 0x3f, 0x38, 0xe0, 0x37, 0xac, + 0xad, 0xf5, 0x6a, 0x1f, 0x7f, 0x1a, 0x20, 0xde, 0x91, + 0x48, 0xed, 0x15, 0x27, 0xb6, 0x8c, 0x93, 0x91, 0x9d, + 0xde, 0xb6, 0x3d, 0x38, 0x69, 0x08, 0xed, 0x15, 0x97, + 0x97, 0xa3, 0x11, 0xbf, 0x19, 0xa7, 0x20, 0x48, 0xbb, + 0x2f, 0xf3, 0xf4, 0xb2, 0x7d, 0x46, 0x34, 0x1a, 0xa4, + 0xaa, 0x62, 0x2c, 0xb0, 0xcf, 0x3a, 0xdf, 0xbd, 0xcc, + 0x42, 0xab, 0x21, 0x1b, 0xde, 0xc5, 0x8a, 0x72, 0xfe, + 0x36, 0xf9, 0x97, 0xc4, 0x9b, 0x14, 0x79, 0x96, 0x26, + 0x5b, 0xb2, 0xee, 0x55, 0x55, 0xf2, 0xce, 0xca, 0x4e, + 0x01, 0x6a, 0xf6, 0xc0, 0x69, 0xb0, 0x3f, 0x22, 0xad, + 0x2c, 0xab, 0x55, 0x5a, 0xf4, 0xe2, 0xdd, 0x14, 0x09, + 0x56, 0x67, 0x45, 0xe1, 0xe8, 0x9a, 0x6d, 0xfd, 0xb6, + 0xf8, 0xa0, 0xe7, 0x59, 0xc0, 0x9d, 0x57, 0x76, 0x8f, + 0x8b, 0x47, 0x40, 0x6a, 0x3b, 0x9b, 0x32, 0x46, 0xc9, + 0x0f, 0xa1, 0x2e, 0x60, 0x76, 0xb0, 0x1a, 0xd0, 0x2e, + 0x77, 0x52, 0xbf, 0x10, 0x42, 0x4a, 0x10, 0x3b, 0x3e, + 0x56, 0x63, 0x3a, 0xdf, 0x55, 0xb9, 0x7f, 0x0a, 0x18, + 0x82, 0x3e, 0xf4, 0xac, 0x26, 0xc9, 0x2f, 0x7c, 0xbd, + 0xbf, 0xb5, 0x44, 0x79, 0x12, 0x7f, 0xa9, 0x8c, 0x8c, + 0x5b, 0x73, 0x25, 0xdf, 0x4a, 0x7c, 0x2b, 0xcc, 0xdf, + 0xe0, 0x7d, 0x92, 0x00, 0xcd, 0x95, 0x3c, 0x01, 0xd4, + 0x12, 0x90, 0xc0, 0xb1, 0x57, 0xa6, 0xc2 ), + AUTH ( 0x8e, 0x88, 0x35, 0x70, 0x21, 0x9f, 0xc3, 0x8c, 0xfa, 0xa0, + 0x9f, 0xe2, 0x70, 0xa3, 0x56, 0x04 ) ); + +/* AES-GCM test case 199 */ +CIPHER_TEST ( wycheproof_aes_gcm_009e52d4, &aes_gcm_algorithm, + KEY ( 0xf2, 0x08, 0xe9, 0x0e, 0x0a, 0x08, 0xf2, 0x22, 0xc8, 0xac, + 0x3d, 0x4a, 0x0c, 0x8a, 0x81, 0x85, 0xf3, 0xf4, 0x77, 0xf1, + 0xa4, 0x3f, 0xfc, 0xe6 ), + IV ( 0x60, 0x3d, 0xdb, 0xeb, 0x61, 0x2b, 0x71, 0xb1, 0xd0, 0x8e, + 0xbf, 0x40 ), + ADDITIONAL(), + PLAINTEXT ( 0xbb, 0xae, 0x93, 0x80, 0x2b, 0xe4, 0x40, 0x78, 0x15, + 0xf6, 0x7e, 0x49, 0x62, 0xb9, 0xc3, 0x94, 0xb2, 0xfc, + 0x7c, 0x94, 0xe6, 0xc1, 0x0a, 0x42, 0x46, 0x5f, 0x45, + 0x36, 0x72, 0x10, 0x0b, 0xe0, 0xd3, 0x58, 0xff, 0x7b, + 0x0b, 0x28, 0x5c, 0xbf, 0xce, 0x15, 0xf3, 0xa9, 0x56, + 0xa8, 0xc2, 0x0f, 0x33, 0xa9, 0xd8, 0x7b, 0x12, 0x02, + 0xb2, 0x49, 0xcf, 0x3f, 0x21, 0x97, 0xfd, 0x5d, 0x7f, + 0x8b, 0xce, 0xe8, 0x0d, 0x41, 0x60, 0xd0, 0xa7, 0xc1, + 0xe8, 0xce, 0x74, 0x34, 0x36, 0x5a, 0x9e, 0x5a, 0xa4, + 0x13, 0xb1, 0x92, 0x3d, 0x96, 0x07, 0x3e, 0xac, 0x3f, + 0x68, 0xf8, 0xb5, 0xa2, 0xbb, 0xf2, 0x3a, 0x9a, 0xe1, + 0x3f, 0x7f, 0x13, 0xd6, 0x25, 0xc4, 0x0b, 0x42, 0xab, + 0x06, 0x77, 0x1c, 0x1e, 0xc0, 0x09, 0x60, 0xc2, 0x46, + 0x53, 0x36, 0xb8, 0x55, 0xcb, 0x55, 0x4d, 0x3d, 0xb6, + 0x45, 0xf0, 0xb7, 0xba, 0x2f, 0x4c, 0x64, 0xe0, 0xf6, + 0x52, 0xbd, 0x79, 0x02, 0x84, 0x3c, 0xc4, 0x3f, 0x8a, + 0xa8, 0x68, 0x1c, 0x83, 0x8d, 0xd3, 0x15, 0x73, 0x67, + 0x9c, 0x34, 0x33, 0x24, 0x6a, 0x02, 0x4c, 0x66, 0x94, + 0xb2, 0xed, 0xbe, 0x35, 0xd1, 0x2a, 0xd0, 0x21, 0x9d, + 0x55, 0x69, 0x62, 0xe6, 0x8a, 0x00, 0xb0, 0x58, 0x6a, + 0x36, 0xf1, 0xef, 0xe7, 0x21, 0x05, 0x5b, 0x3a, 0xc8, + 0x10, 0x71, 0xa6, 0xcb, 0x62, 0x58, 0x4a, 0x97, 0x93, + 0x16, 0xaa, 0xdf, 0x22, 0x0c, 0x19, 0xd3, 0x30, 0x9b, + 0x6b, 0x22, 0x41, 0x5c, 0x28, 0xf6, 0xd9, 0xff, 0xeb, + 0x20, 0xc8, 0x3a, 0x85, 0xd5, 0xda, 0x48, 0x01, 0x7b, + 0x73, 0xcf, 0x92, 0x67, 0xd6, 0x5b, 0x32, 0xd4, 0xcb, + 0xf6, 0xe1, 0x2a, 0x83, 0xbe, 0x27, 0xa2, 0xc9, 0x84, + 0x8b, 0x71, 0x5c, 0x8a, 0xb7, 0xb8, 0x70, 0xa5, 0x23, + 0xf5, 0xd9, 0x60, 0x27, 0x3f, 0x70, 0x35, 0x57, 0xcb, + 0xf9, 0x8f, 0x4b, 0x05, 0xb9, 0xd9, 0xf7, 0x8b, 0xf4, + 0xdc, 0x44, 0x75, 0xe0, 0x72, 0x22, 0xe5, 0xfb, 0xf5, + 0x2e, 0xb4, 0x7c, 0x78, 0x5a, 0x84, 0xb9, 0xec, 0x48, + 0xa0, 0x4b, 0xdc, 0x35, 0x18, 0x86, 0x4c, 0xd9, 0xd5, + 0x78, 0xe9, 0x4a, 0x63, 0xbb, 0xc5, 0x95, 0x45, 0x4d, + 0xb1, 0x03, 0x0d, 0xf7, 0xe9, 0x9c, 0x29, 0x3f, 0x0d, + 0x4b, 0x33, 0xa6, 0x08, 0x2c, 0x90, 0xba, 0xd9, 0x53, + 0xaf, 0xae, 0x04, 0xdb, 0x99, 0xa2, 0x0a, 0xba, 0xb2, + 0x9c, 0xa8, 0x53, 0x85, 0x8e, 0x46, 0x08, 0xde, 0x8d, + 0xf4, 0x83, 0x58, 0x52, 0x1e, 0xeb, 0x5b, 0x98, 0x3c, + 0xa4, 0xaa, 0x0d, 0xfe, 0x3f, 0x04, 0xbb, 0xa8, 0x99, + 0x3d, 0xe8, 0x4c, 0x80, 0x7a, 0xd5, 0x6e, 0x5d, 0x79, + 0xb6, 0x51, 0xd5, 0xc2, 0xc9, 0xcc, 0xa4, 0x4f, 0xe4, + 0x79, 0x7d, 0xe1, 0x6d, 0x71, 0x3b, 0xa4, 0x5e, 0x78, + 0x97, 0xc0, 0x31, 0xb4, 0xf9, 0xae, 0x85, 0xa2, 0x19, + 0xc0, 0xec, 0x49, 0xab, 0x89, 0xab, 0x19, 0x5e, 0xff, + 0xd3, 0xfb, 0x9f, 0x49, 0x97, 0xa3, 0xe1, 0xa6, 0xd0, + 0x66, 0xcf, 0x44, 0x37, 0xc4, 0xda, 0x39, 0xf9, 0x93, + 0x9e, 0xee, 0x4b, 0x6d, 0x52, 0xc1, 0x77, 0x6e, 0xbc, + 0x34, 0xce, 0x5f, 0x45, 0xf2, 0xf8, 0x70, 0x3d, 0xe2, + 0x40, 0x4e, 0x1f, 0x97, 0x89, 0x3a, 0x07, 0xc8, 0x99, + 0x78, 0x39, 0xc3, 0x5e, 0xed, 0xc5, 0x2e, 0x1c, 0x5a, + 0x64, 0x12, 0xd3, 0xb6, 0xa9, 0x35, 0x6f, 0xf0, 0x70, + 0x28, 0x45, 0x59, 0x4b, 0x58, 0x10, 0x04, 0xce, 0x83, + 0x7e, 0xbf, 0x54, 0x17, 0x07, 0xdc, 0xc1, 0x18, 0x07, + 0x86, 0x8d, 0x60, 0x40, 0x8c, 0x70, 0xc7, 0xab, 0xe9, + 0x96, 0xdd, 0x60, 0x2b, 0xc8, 0x13, 0x95, 0x20, 0x2d, + 0x06, 0x0d, 0x4f, 0x07, 0x6a, 0x43, 0x2f, 0xad ), + CIPHERTEXT ( 0xef, 0xe8, 0x49, 0xef, 0x16, 0x0f, 0x3e, 0x4c, 0x23, + 0x61, 0xda, 0xdf, 0xf9, 0xe1, 0x16, 0x53, 0x45, 0x03, + 0x06, 0x5f, 0x80, 0x7a, 0xcf, 0xb1, 0x41, 0xec, 0xb9, + 0xe2, 0xc3, 0xf6, 0xbe, 0xce, 0xaa, 0x9c, 0x3c, 0xca, + 0x56, 0x8b, 0x64, 0x6e, 0x85, 0xf7, 0x26, 0x0d, 0xbd, + 0x20, 0x49, 0x5f, 0xc3, 0xe9, 0xfa, 0x53, 0x5c, 0xdb, + 0xeb, 0xb2, 0x4d, 0x38, 0xb2, 0x4b, 0xbf, 0x8a, 0xc6, + 0x6f, 0x35, 0x88, 0x71, 0x32, 0xe4, 0xc7, 0xfb, 0x6a, + 0x7a, 0x49, 0x4f, 0x92, 0x17, 0x3f, 0x33, 0x70, 0x18, + 0xcf, 0x47, 0xc3, 0xfe, 0xa5, 0x64, 0xca, 0x69, 0xf5, + 0x9f, 0xb4, 0x0b, 0xe9, 0x67, 0xac, 0xa0, 0xd9, 0x5b, + 0x99, 0xc9, 0xae, 0xee, 0x4a, 0xde, 0xca, 0x6e, 0xcb, + 0xe3, 0x27, 0x69, 0x3d, 0x63, 0x5d, 0xfb, 0x8f, 0xac, + 0xf3, 0x3c, 0xde, 0xb2, 0x6d, 0x8b, 0xae, 0x38, 0x3a, + 0x0e, 0x09, 0xab, 0x76, 0x1e, 0xfe, 0x6b, 0xdf, 0xbe, + 0x40, 0x57, 0x9d, 0xf2, 0xaa, 0x7f, 0x52, 0x4b, 0x99, + 0xbb, 0x2d, 0x89, 0x02, 0xb4, 0x5c, 0x4e, 0x2b, 0x4a, + 0x5f, 0x67, 0x3e, 0xa3, 0x2d, 0x88, 0x3d, 0x08, 0xf9, + 0x10, 0x0f, 0x62, 0xe7, 0x01, 0x8d, 0xca, 0x2a, 0x8d, + 0xa8, 0x14, 0x22, 0x24, 0xe6, 0x2f, 0xfb, 0x2e, 0x9e, + 0x2d, 0xad, 0xc4, 0x70, 0x12, 0x92, 0x8d, 0x67, 0xbe, + 0x5f, 0xd2, 0xbc, 0x0a, 0xaa, 0xa6, 0x56, 0xff, 0x53, + 0xe2, 0xc2, 0x0b, 0x2f, 0x7a, 0xcb, 0xcc, 0xdb, 0x77, + 0x71, 0x63, 0x26, 0xa3, 0x3a, 0xd2, 0x1c, 0x3d, 0xcf, + 0x19, 0x94, 0xcb, 0x2f, 0xf1, 0x03, 0xfa, 0x10, 0x4d, + 0x43, 0x6b, 0x85, 0x15, 0xb6, 0x34, 0x1f, 0xa3, 0x2c, + 0x92, 0xe2, 0x42, 0x25, 0xb4, 0xc2, 0xea, 0xaf, 0x63, + 0x50, 0x38, 0x47, 0x16, 0xec, 0xd3, 0x95, 0x9f, 0x51, + 0x29, 0x67, 0x26, 0x8f, 0xd0, 0xa8, 0x14, 0x11, 0xd0, + 0x1e, 0xb4, 0xd1, 0x13, 0xea, 0x97, 0x1f, 0x79, 0x53, + 0x6b, 0x9d, 0xa1, 0x2e, 0x05, 0x43, 0xd2, 0xe5, 0xcb, + 0x2d, 0x94, 0x43, 0x61, 0x46, 0x5e, 0x25, 0x5a, 0xed, + 0xda, 0xa7, 0x53, 0xb6, 0x26, 0x43, 0xde, 0x5f, 0x08, + 0xba, 0x89, 0x36, 0x38, 0x4d, 0x6a, 0x62, 0x92, 0xbf, + 0xa5, 0xcb, 0x01, 0x4a, 0x55, 0xe8, 0x73, 0x21, 0xf1, + 0xf7, 0xe2, 0xa1, 0xba, 0x26, 0xb3, 0x92, 0x98, 0x65, + 0x70, 0xd8, 0xbb, 0x95, 0xcd, 0x37, 0x3c, 0x17, 0xd9, + 0xb2, 0x40, 0x9d, 0x4a, 0x65, 0x9b, 0x42, 0x88, 0x17, + 0x95, 0x75, 0x05, 0xe2, 0x90, 0x39, 0x72, 0xe9, 0x9b, + 0xef, 0x50, 0x45, 0x07, 0xbd, 0xae, 0x03, 0x5a, 0xf6, + 0x29, 0x32, 0x69, 0x3e, 0xc5, 0xe6, 0x98, 0xc4, 0x8c, + 0xeb, 0xa5, 0x0e, 0x35, 0xf7, 0x00, 0xfa, 0xbd, 0xdb, + 0xf9, 0x9b, 0xfe, 0xe0, 0x83, 0x5a, 0x2a, 0xb2, 0x6d, + 0x19, 0x10, 0xd9, 0x6e, 0xe5, 0xe0, 0xde, 0x57, 0x85, + 0x88, 0xa3, 0xee, 0xb0, 0xb8, 0x3f, 0xf8, 0x9a, 0xd0, + 0x19, 0x59, 0x2d, 0x20, 0x72, 0xb5, 0xa9, 0x79, 0x03, + 0x49, 0xc4, 0x2f, 0x17, 0x53, 0x2b, 0xba, 0x7c, 0x42, + 0x64, 0xb4, 0x4d, 0xe0, 0x11, 0x7e, 0xcf, 0x90, 0x29, + 0x87, 0x80, 0x54, 0x3c, 0xe6, 0x16, 0x01, 0x8f, 0xe3, + 0xb2, 0x86, 0x15, 0xcb, 0x97, 0x13, 0x06, 0x3e, 0xa9, + 0x63, 0x1f, 0x7f, 0x64, 0x05, 0xd2, 0x53, 0x6c, 0x04, + 0x33, 0x45, 0x7f, 0x42, 0xee, 0xec, 0x5b, 0x72, 0x99, + 0xdb, 0x8c, 0x51, 0xd3, 0x08, 0xec, 0x32, 0x18, 0x4c, + 0xf2, 0x1b, 0x8e, 0x8a, 0xeb, 0xde, 0x72, 0x48, 0xbb, + 0x67, 0x21, 0x28, 0xf6, 0x4e, 0x35, 0xe1, 0x02, 0x1e, + 0xaf, 0xfb, 0x7b, 0x78, 0xc4, 0x81, 0xbf, 0x3f, 0xf9, + 0xf8, 0x90, 0xaa, 0x65, 0xb4, 0x61, 0x5f, 0x25 ), + AUTH ( 0xa2, 0xab, 0x3c, 0x03, 0x12, 0x9d, 0xc8, 0xd5, 0x07, 0xb0, + 0x06, 0x23, 0x2a, 0x33, 0x77, 0x16 ) ); + +/* AES-GCM test case 200 */ +CIPHER_TEST ( wycheproof_aes_gcm_2eef8b22, &aes_gcm_algorithm, + KEY ( 0x70, 0x1a, 0xea, 0x28, 0x30, 0x75, 0x2a, 0x8c, 0xb9, 0x82, + 0x1a, 0xf7, 0xb4, 0x38, 0x95, 0xd3, 0x9c, 0x24, 0x31, 0xec, + 0x87, 0x7a, 0xce, 0x03 ), + IV ( 0xa2, 0x1c, 0x68, 0x0b, 0x6e, 0x9e, 0x40, 0xc5, 0xb0, 0x68, + 0x6f, 0x09 ), + ADDITIONAL(), + PLAINTEXT ( 0xa3, 0xb7, 0xe4, 0x3f, 0x27, 0x02, 0x7c, 0x7c, 0xe0, + 0xfd, 0x94, 0x4f, 0xe7, 0x06, 0xd8, 0x9f, 0x91, 0x7b, + 0x44, 0x24, 0x11, 0xcd, 0xaf, 0xdc, 0xd7, 0x4b, 0x7f, + 0x42, 0x8b, 0x79, 0x62, 0xb9, 0xe3, 0x1b, 0x80, 0xc9, + 0x57, 0xe3, 0xf0, 0xdc, 0x17, 0xe6, 0x63, 0x96, 0x24, + 0xc0, 0xd0, 0xa0, 0x69, 0xcc, 0x68, 0x4b, 0x50, 0xe7, + 0x00, 0xfb, 0xc1, 0x26, 0xf1, 0x79, 0x51, 0xee, 0x31, + 0xa3, 0x88, 0xb8, 0x96, 0x6b, 0xfd, 0x79, 0x2d, 0x2c, + 0xbe, 0x67, 0xa0, 0xed, 0x27, 0x52, 0x06, 0x28, 0x13, + 0xeb, 0x7e, 0x61, 0x38, 0xf8, 0xd3, 0x33, 0xa1, 0xb6, + 0x72, 0x1c, 0x3d, 0x3f, 0xab, 0xe9, 0x60, 0x60, 0x57, + 0x5e, 0x98, 0x76, 0xce, 0xc0, 0x95, 0x31, 0x70, 0x90, + 0x72, 0x4e, 0x13, 0x34, 0xfa, 0x29, 0x1b, 0x90, 0xcb, + 0x92, 0x62, 0x37, 0xe3, 0x31, 0xf7, 0x19, 0x29, 0x07, + 0x40, 0xc7, 0xe7, 0xe4, 0x43, 0x29, 0x76, 0xc5, 0x22, + 0x03, 0xd6, 0x17, 0xb3, 0x07, 0x79, 0x88, 0x10, 0xc9, + 0x9d, 0xf5, 0x5f, 0x0a, 0x3f, 0xd1, 0xfe, 0xd1, 0xb9, + 0x29, 0xfa, 0x1f, 0xcb, 0x00, 0x74, 0x65, 0x94, 0x2d, + 0x9a, 0xe3, 0xc1, 0xd9, 0x64, 0x30, 0x91, 0x6e, 0xd1, + 0x5f, 0x92, 0x62, 0x3c, 0x18, 0x14, 0x61, 0xd6, 0x07, + 0xa2, 0x97, 0x7b, 0x49, 0x4a, 0xf8, 0x8d, 0x62, 0xf4, + 0xe3, 0xd8, 0x48, 0x5d, 0x46, 0x00, 0xc3, 0xe1, 0xa0, + 0x9a, 0xae, 0x4a, 0xb7, 0x43, 0xa7, 0x4e, 0x87, 0x64, + 0x7d, 0xb9, 0x2a, 0xb8, 0x47, 0x7f, 0x2a, 0x8d, 0x76, + 0x19, 0x35, 0x74, 0xc8, 0x55, 0x50, 0x36, 0x33, 0x0e, + 0xac, 0xa6, 0x9a, 0x12, 0xb1, 0x5d, 0x66, 0x59, 0x1d, + 0x98, 0xb8, 0xfc, 0x08, 0xba, 0x06, 0x03, 0x5a, 0x54, + 0x90, 0x51, 0x48, 0x4a, 0xf9, 0xb3, 0xba, 0xf9, 0xcc, + 0x36, 0x6a, 0x1d, 0xea, 0x63, 0x88, 0x52, 0x02, 0xa6, + 0xdd, 0xe3, 0xaa, 0xfc, 0xb3, 0xc7, 0x35, 0x0f, 0x7b, + 0x2f, 0xa4, 0xbe, 0xaa, 0xb7, 0xd5, 0xec, 0x79, 0x83, + 0x62, 0x7e, 0xe7, 0x06, 0x77, 0x31, 0x0f, 0xaa, 0xa0, + 0xcf, 0x5e, 0xd3, 0xaf, 0xe7, 0x1c, 0x8c, 0xb2, 0xc3, + 0xee, 0xa9, 0xc6, 0x41, 0x69, 0x46, 0xf2, 0x8d, 0xfb, + 0x8c, 0xb6, 0xe6, 0x18, 0x24, 0x3b, 0xef, 0x42, 0x58, + 0xa0, 0x42, 0xb3, 0x6d, 0xdd, 0x6a, 0xfe, 0x75, 0x5e, + 0x98, 0x2b, 0xc4, 0x9d, 0x30, 0x17, 0xee, 0xe0, 0x40, + 0xc2, 0xcd, 0x25, 0x5e, 0x82, 0x0a, 0xcd, 0x27, 0x8e, + 0xe8, 0x66, 0xdb, 0x3f, 0xa2, 0xa8, 0x36, 0xbb, 0xca, + 0x91, 0x07, 0xe5, 0x5a, 0xe5, 0x59, 0x53, 0xe2, 0xdb, + 0x0a, 0x62, 0xd9, 0xfc, 0x24, 0x5e, 0xc5, 0x89, 0x41, + 0x1d, 0x1c, 0x70, 0xb8, 0x4d, 0x97, 0x4a, 0xf8, 0x79, + 0x8b, 0xd4, 0xb1, 0x5d, 0x4c, 0x95, 0x33, 0x9a, 0x96, + 0x76, 0x5f, 0x7b, 0x12, 0x83, 0xa6, 0xc6, 0x7e, 0xbc, + 0x04, 0x07, 0x5e, 0xce, 0x47, 0x8d, 0x40, 0x40, 0x82, + 0x59, 0xa2, 0x5f, 0x82, 0x91, 0xef, 0x9e, 0x2f, 0x2e, + 0x50, 0x17, 0xde, 0x23, 0x77, 0x57, 0x8c, 0x42, 0x06, + 0x72, 0x28, 0xfe, 0x70, 0x56, 0x2e, 0xe0, 0x0a, 0xcd, + 0x61, 0x85, 0x5e, 0xfe, 0xca, 0x0c, 0x37, 0xf1, 0xaa, + 0x44, 0x9c, 0x05, 0x68, 0xcc, 0x36, 0xb8, 0xeb, 0x2c, + 0x13, 0x8d, 0x97, 0x8d, 0x8b, 0x8e, 0x28, 0x81, 0xac, + 0xec, 0x5a, 0xf7, 0xfe, 0x04, 0xe5, 0x95, 0xbf, 0x61, + 0x5f, 0xed, 0xe7, 0x4f, 0x49, 0x48, 0x26, 0x6a, 0x94, + 0x04, 0xee, 0x6f, 0x1a, 0x12, 0x41, 0xcd, 0x08, 0xc1, + 0x1e, 0xf4, 0xd0, 0x37, 0x95, 0x1d, 0xd9, 0x78, 0x07, + 0x52, 0x54, 0x45, 0x18, 0x47, 0x4f, 0xbc, 0x2d, 0x4e, + 0x33, 0x55, 0xa7, 0x2a, 0x7c, 0x80, 0xc7, 0x03, 0xf9 ), + CIPHERTEXT ( 0x9d, 0x5d, 0x5a, 0x51, 0x3e, 0x89, 0xc0, 0xcd, 0x14, + 0x06, 0x35, 0x99, 0x3c, 0x13, 0xec, 0x73, 0x43, 0x5f, + 0x35, 0x74, 0xaa, 0x10, 0xc9, 0xb8, 0x07, 0x14, 0xc3, + 0x49, 0x97, 0xf2, 0xef, 0xaf, 0xa5, 0x53, 0x9e, 0x7e, + 0xf4, 0x5b, 0x36, 0x60, 0x2b, 0x16, 0x47, 0x19, 0xed, + 0xa8, 0xd7, 0x99, 0xa4, 0x0a, 0x07, 0x75, 0xed, 0xf7, + 0x43, 0xe5, 0x46, 0xe9, 0x15, 0x14, 0x26, 0x22, 0xdb, + 0xbe, 0xba, 0x21, 0x0d, 0x72, 0xaf, 0x78, 0x2b, 0xb2, + 0x6b, 0x11, 0xdf, 0x3b, 0x9f, 0x5a, 0xa7, 0xbd, 0x1a, + 0x16, 0xcf, 0xb3, 0x7d, 0x16, 0xaa, 0x9b, 0xf1, 0x16, + 0x0d, 0xc7, 0xfc, 0x69, 0x01, 0xcc, 0x85, 0x1d, 0x84, + 0x43, 0xbd, 0xa7, 0x43, 0xa8, 0x4d, 0x5c, 0xef, 0x58, + 0xc8, 0x16, 0x4b, 0x3b, 0xb9, 0xc7, 0x5f, 0xe2, 0xab, + 0xaf, 0x24, 0x78, 0x14, 0xe2, 0xbe, 0x0a, 0xce, 0x46, + 0x9a, 0xee, 0xb4, 0x67, 0xf2, 0x19, 0x6c, 0xec, 0xa2, + 0x9c, 0x4b, 0xfd, 0x87, 0x4e, 0x9a, 0x58, 0x72, 0x5c, + 0x7c, 0x5d, 0x03, 0xca, 0x45, 0xbd, 0xe6, 0x7f, 0xcb, + 0x65, 0xfa, 0x9b, 0x01, 0xa9, 0xd8, 0x6c, 0x8e, 0xf6, + 0xc8, 0x4a, 0x5e, 0x01, 0x4c, 0x99, 0xfd, 0xfc, 0xab, + 0x06, 0x60, 0xbc, 0x2c, 0xea, 0x6d, 0xe7, 0x9b, 0x9b, + 0xd1, 0x35, 0xd7, 0x4f, 0x24, 0x47, 0x3d, 0x28, 0x3c, + 0x2b, 0x8c, 0x92, 0xec, 0x24, 0x16, 0xa6, 0x09, 0x10, + 0x9f, 0x21, 0xde, 0x69, 0x92, 0xe3, 0xc9, 0xe5, 0xc7, + 0xff, 0x67, 0xd9, 0x77, 0x89, 0xe2, 0x40, 0x12, 0x55, + 0x75, 0xb0, 0x7b, 0x08, 0x7b, 0x3b, 0x98, 0x5b, 0x71, + 0xad, 0x1f, 0xa8, 0x1a, 0x8a, 0xf6, 0xa2, 0xdf, 0x6e, + 0xae, 0x7c, 0xbc, 0x4c, 0x91, 0x1e, 0x3e, 0x02, 0xe1, + 0xff, 0x31, 0x40, 0xc0, 0x1c, 0x38, 0xa2, 0xd7, 0xce, + 0x18, 0x46, 0x45, 0x92, 0x15, 0x0b, 0x3a, 0x3c, 0x00, + 0xa9, 0x6a, 0xe0, 0x2f, 0x08, 0x9c, 0x12, 0xa8, 0xe2, + 0x9e, 0x40, 0x0e, 0xb5, 0x5c, 0xf7, 0x39, 0xf7, 0x8e, + 0x1e, 0x9c, 0x45, 0x13, 0xdf, 0x38, 0x21, 0xaf, 0x2d, + 0xf5, 0x1a, 0xf4, 0x76, 0x17, 0x4d, 0x81, 0x80, 0x04, + 0x5a, 0xc2, 0xce, 0xb3, 0xe3, 0x57, 0x9d, 0x94, 0x79, + 0x83, 0xd3, 0xff, 0x5b, 0xf4, 0x14, 0xce, 0x83, 0xba, + 0x3b, 0xf5, 0x53, 0x49, 0x53, 0x5b, 0xc1, 0xff, 0xfb, + 0xec, 0x73, 0xf0, 0x1a, 0xcb, 0x4a, 0xaf, 0xfd, 0x67, + 0x9f, 0xc1, 0x01, 0x38, 0x5c, 0xdd, 0x56, 0x49, 0xa7, + 0x8e, 0x95, 0x3a, 0x14, 0xdd, 0xd3, 0x85, 0xc5, 0xea, + 0x3e, 0xc0, 0xd0, 0x60, 0xb9, 0x8f, 0x7d, 0xde, 0xfe, + 0x2b, 0x66, 0x69, 0x98, 0x00, 0x20, 0xbb, 0xa0, 0x5e, + 0x62, 0x38, 0xbc, 0xc6, 0x50, 0x89, 0x6d, 0x03, 0x50, + 0xad, 0xef, 0xdd, 0x00, 0xf7, 0x41, 0xfb, 0x06, 0x04, + 0x35, 0x10, 0x73, 0x0d, 0xa4, 0x7a, 0x54, 0x55, 0xc2, + 0x78, 0x16, 0x80, 0x67, 0xef, 0x4e, 0x85, 0x79, 0xf6, + 0x3f, 0x7b, 0x2f, 0xb7, 0xe4, 0xc2, 0xa0, 0xfe, 0x84, + 0xe6, 0xc0, 0x3e, 0xa2, 0xe4, 0xa7, 0xb1, 0x38, 0xe7, + 0x59, 0x8f, 0x8c, 0xe8, 0xce, 0xd8, 0x31, 0xb1, 0xf5, + 0xe5, 0xa8, 0x8e, 0x0d, 0x66, 0x5f, 0x3b, 0x7b, 0x61, + 0x70, 0x5c, 0xc5, 0x0b, 0x19, 0x08, 0x0f, 0x82, 0xbc, + 0x65, 0x2f, 0xe8, 0x0f, 0x2e, 0x8f, 0x7f, 0xee, 0x8d, + 0x2e, 0xee, 0x55, 0x78, 0x8b, 0x86, 0xc1, 0xe5, 0x6d, + 0x50, 0x18, 0x02, 0x3e, 0xbf, 0x7a, 0x23, 0x70, 0x8e, + 0xdd, 0x97, 0x4c, 0xfe, 0x69, 0x63, 0xf3, 0xeb, 0x9b, + 0x92, 0xaf, 0x9b, 0x1e, 0x29, 0x12, 0x37, 0x78, 0x10, + 0x46, 0x1e, 0xd6, 0xc9, 0x41, 0xe7, 0x98, 0x73, 0xba, + 0xbf, 0x7b, 0xfa, 0x65, 0xb1, 0x3c, 0x4f, 0x32, 0x6d ), + AUTH ( 0x1a, 0x72, 0xa5, 0xeb, 0x33, 0xbd, 0xc8, 0x48, 0xcd, 0x5f, + 0x9f, 0x93, 0x79, 0x33, 0x49, 0x55 ) ); + +/* AES-GCM test case 201 */ +CIPHER_TEST ( wycheproof_aes_gcm_a2b24e57, &aes_gcm_algorithm, + KEY ( 0x85, 0x6b, 0x07, 0xff, 0x0a, 0xfa, 0x13, 0x81, 0x9e, 0xef, + 0x43, 0xf5, 0xdd, 0x4a, 0x81, 0xf7, 0xbe, 0xd2, 0xa9, 0xc7, + 0x08, 0x9c, 0xbf, 0x06 ), + IV ( 0x90, 0x10, 0x07, 0xf7, 0x57, 0xeb, 0x3b, 0xf0, 0xbf, 0xd1, + 0xe0, 0x3e ), + ADDITIONAL ( 0x03, 0xa4, 0x7b, 0x93, 0x00, 0x53, 0xa4, 0xab, 0xb4, + 0x0c, 0x66, 0x1e, 0xab, 0xfc, 0xf1, 0x9e, 0xc2, 0x69, + 0xf4, 0x91, 0x3a, 0x5a, 0x18, 0x51, 0x3e, 0xb6, 0x72, + 0x43, 0xb1, 0x84, 0xb2, 0xe9, 0x46, 0xfa, 0xe1, 0x83, + 0x8b, 0x35, 0xc6, 0xf0, 0x86, 0xf8, 0x22, 0x7e, 0x4d, + 0x35, 0x36, 0x20, 0x68, 0x40, 0x08, 0x82, 0x7b, 0x97, + 0x20, 0xf4, 0x50, 0xc3, 0x97, 0x7e, 0xbe, 0x86, 0x22 ), + PLAINTEXT ( 0xb0, 0x30, 0x92, 0xf7, 0xad, 0x0d, 0x36, 0xd7, 0xe0, + 0x07, 0x84, 0x65, 0x2e, 0x4c, 0xe1, 0x2e, 0xaa, 0xe6, + 0x50, 0x06 ), + CIPHERTEXT ( 0x99, 0x8a, 0x38, 0x79, 0xdf, 0x76, 0x67, 0xff, 0x94, + 0x65, 0xbc, 0x21, 0xd5, 0x88, 0xf6, 0x6b, 0xf8, 0xc1, + 0xc1, 0x2e ), + AUTH ( 0x97, 0x8b, 0x9e, 0x5b, 0xb4, 0x9f, 0x18, 0xf9, 0xf4, 0x6c, + 0xaf, 0x59, 0x36, 0xa6, 0x7e, 0x85 ) ); + +/* AES-GCM test case 202 */ +CIPHER_TEST ( wycheproof_aes_gcm_4cccfc2f, &aes_gcm_algorithm, + KEY ( 0x55, 0xa4, 0xca, 0x52, 0x64, 0x43, 0x35, 0x7a, 0xc7, 0xc8, + 0x96, 0xd9, 0xa6, 0x7c, 0xf7, 0xd4, 0x67, 0xf6, 0x92, 0x1d, + 0x69, 0x00, 0x2d, 0x3a ), + IV ( 0xdb, 0xa2, 0x33, 0xcc, 0xbc, 0x79, 0x92, 0xe6, 0x4e, 0x82, + 0xcf, 0xa3 ), + ADDITIONAL ( 0xdf, 0x73, 0x7c, 0xd7, 0x7d, 0x31, 0xeb, 0x90, 0x97, + 0xa1, 0x7c, 0x31, 0xb4, 0xc9, 0x28, 0x89, 0xef, 0x1f, + 0x32, 0xb7, 0x46, 0x4e, 0x26, 0x20, 0xe9, 0x00, 0x71, + 0x92, 0xea, 0x67, 0x5b, 0x9a, 0xd6, 0x91, 0x05, 0x27, + 0xff, 0xec, 0xee, 0x24, 0x52, 0xbe, 0x02, 0x48, 0xfa, + 0xb7, 0x56, 0x08, 0xc7, 0xfd, 0xca, 0x08, 0xe8, 0x65, + 0x80, 0x32, 0x2a, 0xac, 0x1d, 0x6a, 0x11, 0xb9, 0x6e, + 0xcf ), + PLAINTEXT ( 0x4e, 0x56, 0xd1, 0xea, 0x53, 0x8c, 0xf4, 0x9c, 0xad, + 0x49, 0x95, 0x9e, 0x88, 0x4e, 0xb5, 0x40, 0xc8, 0x46, + 0x55, 0x6c ), + CIPHERTEXT ( 0x3f, 0x57, 0xec, 0x1b, 0x41, 0x4f, 0x74, 0x81, 0x8f, + 0xea, 0xd9, 0xf3, 0x5a, 0xa1, 0x67, 0x94, 0x02, 0xc3, + 0xe7, 0x50 ), + AUTH ( 0x97, 0xb8, 0x9b, 0x29, 0x14, 0x19, 0xe3, 0x2c, 0xf6, 0x54, + 0xea, 0x63, 0x0a, 0x3a, 0xd0, 0x14 ) ); + +/* AES-GCM test case 203 */ +CIPHER_TEST ( wycheproof_aes_gcm_0b49b77a, &aes_gcm_algorithm, + KEY ( 0xef, 0x97, 0xa3, 0x9d, 0x45, 0xa5, 0x05, 0x4d, 0xf3, 0x44, + 0xd8, 0x18, 0xeb, 0x15, 0x63, 0x77, 0xd4, 0xfa, 0x51, 0x24, + 0x27, 0x4f, 0x2f, 0x2f ), + IV ( 0xd0, 0x27, 0x8d, 0x7b, 0xa5, 0x1e, 0x31, 0xeb, 0xf8, 0xf7, + 0x0f, 0xca ), + ADDITIONAL ( 0x66, 0xf6, 0x12, 0xf2, 0xb9, 0x9e, 0x74, 0xdb, 0x94, + 0x9c, 0x1c, 0xaf, 0x3c, 0xfb, 0xe1, 0xdd, 0xe9, 0x64, + 0x6d, 0xa8, 0x49, 0x78, 0x61, 0xc3, 0x7f, 0x46, 0xdc, + 0x43, 0xbf, 0xff, 0x08, 0xdf, 0x3a, 0xec, 0x09, 0xb2, + 0x29, 0xa5, 0xc8, 0xb9, 0xd8, 0xb8, 0x90, 0x1f, 0x22, + 0xdf, 0xa3, 0xaa, 0x1f, 0x95, 0x5d, 0xba, 0x7a, 0xa2, + 0xe8, 0x83, 0xbd, 0x0a, 0x2a, 0xc5, 0x10, 0xb5, 0x01, + 0xa0, 0x38 ), + PLAINTEXT ( 0xb4, 0x91, 0xa4, 0x7f, 0x10, 0x82, 0x58, 0x16, 0x42, + 0xf8, 0x05, 0x3f, 0x66, 0x01, 0x77, 0x40, 0xe8, 0x98, + 0x02, 0x8f ), + CIPHERTEXT ( 0x13, 0x9b, 0xd0, 0x8a, 0x98, 0xf9, 0x2d, 0x51, 0x0c, + 0x9b, 0x42, 0x97, 0xc4, 0x92, 0x68, 0xb2, 0x22, 0x48, + 0x13, 0x0f ), + AUTH ( 0x71, 0x21, 0x17, 0xf4, 0x0a, 0xa4, 0x6d, 0xb9, 0x96, 0x77, + 0xa1, 0xb7, 0x8a, 0xa5, 0xb8, 0x1b ) ); + +/* AES-GCM test case 204 */ +CIPHER_TEST ( wycheproof_aes_gcm_86a429e2, &aes_gcm_algorithm, + KEY ( 0xe4, 0x30, 0xff, 0xe6, 0x2c, 0xf0, 0x02, 0x8c, 0xa5, 0x0b, + 0xac, 0xd8, 0xac, 0x02, 0x0d, 0x54, 0x20, 0xaf, 0xf3, 0x45, + 0xb7, 0x1a, 0x98, 0xd8 ), + IV ( 0x2b, 0x5d, 0xd5, 0xd7, 0xb0, 0xe2, 0x6f, 0xb5, 0x1f, 0xa1, + 0xe0, 0xff ), + ADDITIONAL ( 0x62, 0x5d, 0x9a, 0x34, 0x42, 0x76, 0xac, 0x8b, 0x4f, + 0x62, 0xf4, 0x9b, 0xf2, 0x74, 0xa1, 0x9f, 0x80, 0x86, + 0x97, 0x67, 0x41, 0xc7, 0x9e, 0x04, 0xef, 0x14, 0x99, + 0xc7, 0xf4, 0xf4, 0xb8, 0x20, 0x3d, 0xed, 0xc6, 0xb0, + 0x2e, 0x3d, 0x49, 0xd6, 0xc5, 0xbc, 0x67, 0xa9, 0x73, + 0xfb, 0x12, 0x57, 0x93, 0xab, 0x89, 0x99, 0xf5, 0x65, + 0xa4, 0x14, 0x14, 0xa6, 0xde, 0x06, 0xf9, 0xad, 0xf1, + 0x16, 0x5f, 0x6a, 0xde, 0x26, 0x0f, 0x44, 0x7e, 0x02, + 0x8a, 0x48, 0xad, 0x65, 0x04, 0x4d, 0x01, 0x31, 0x53, + 0xae, 0x96, 0xe7, 0x06, 0x37, 0x32, 0xd1, 0xba, 0x3a, + 0x37, 0x83, 0xfc, 0x09, 0x05, 0xe9, 0xa2, 0x8f, 0xa2, + 0x3a, 0x5c, 0x49, 0xab, 0x2c, 0xba, 0x01, 0x6d, 0x20, + 0xc6, 0xdf, 0x70, 0x4b, 0xad, 0xa6, 0x2a, 0x24, 0x3d, + 0x76, 0xdb, 0xaf, 0x17, 0xa9, 0x84, 0x57, 0x79, 0x38, + 0x93 ), + PLAINTEXT ( 0x56, 0xa1, 0xc5, 0x58, 0x0e, 0xc7, 0x85, 0xda, 0x04, + 0x6f, 0xa1, 0x6b, 0xd0, 0x39, 0xa4, 0x73, 0x7e, 0xb8, + 0x8c, 0x7b ), + CIPHERTEXT ( 0x21, 0xab, 0x90, 0xdd, 0xa8, 0x19, 0x0e, 0xe8, 0x14, + 0x20, 0x6f, 0xbf, 0x89, 0xe4, 0x9e, 0x83, 0x34, 0xd8, + 0x18, 0x78 ), + AUTH ( 0x5e, 0xe3, 0xbd, 0x42, 0xfb, 0xcc, 0x55, 0xf7, 0xc5, 0xcd, + 0x46, 0x2c, 0x6f, 0xa9, 0x91, 0xc6 ) ); + +/* AES-GCM test case 205 */ +CIPHER_TEST ( wycheproof_aes_gcm_8ed4ba4c, &aes_gcm_algorithm, + KEY ( 0xf3, 0x81, 0xd0, 0xff, 0xd3, 0x37, 0x3a, 0x1a, 0xa0, 0x2e, + 0xdd, 0x1d, 0x7f, 0xa7, 0x48, 0xe9, 0x19, 0x08, 0xfe, 0x53, + 0x4b, 0xef, 0x73, 0xd2 ), + IV ( 0x10, 0xaa, 0xec, 0x0d, 0xe4, 0xad, 0x75, 0x37, 0x6b, 0xe9, + 0xfd, 0x41 ), + ADDITIONAL ( 0x77, 0x39, 0xaa, 0xd7, 0x39, 0x9d, 0x9c, 0x0f, 0x0a, + 0x3c, 0x95, 0xb4, 0x03, 0x88, 0x8f, 0x00, 0x72, 0xd9, + 0x4a, 0xcb, 0x76, 0xff, 0x57, 0x6e, 0x05, 0xf4, 0xa0, + 0x63, 0x12, 0x0b, 0x84, 0xe7, 0x22, 0xb4, 0xd5, 0xcd, + 0x43, 0xa5, 0x8e, 0x4a, 0xba, 0xb4, 0x44, 0xcb, 0x8c, + 0xed, 0x11, 0x2f, 0x3d, 0xbd, 0x89, 0x93, 0xb8, 0x31, + 0xc3, 0x9b, 0x4e, 0xdb, 0x76, 0xe9, 0x2e, 0xb3, 0x3e, + 0xe2, 0x4c, 0x59, 0x22, 0xb5, 0x65, 0x52, 0x68, 0x5f, + 0x3b, 0x0f, 0x4c, 0xf2, 0x2e, 0x0e, 0x11, 0x62, 0x8f, + 0x6a, 0x3d, 0x33, 0xef, 0xf9, 0xde, 0xf7, 0xec, 0x52, + 0x71, 0x12, 0xdf, 0xaf, 0xcf, 0x12, 0x28, 0x14, 0xe3, + 0xd1, 0xaa, 0xf6, 0x6c, 0x3f, 0x97, 0x05, 0x26, 0x51, + 0x10, 0x88, 0xbf, 0xfe, 0xf8, 0x10, 0x1d, 0x1c, 0xef, + 0x83, 0x32, 0x68, 0xff, 0x80, 0x38, 0x7d, 0xf3, 0x05, + 0x57, 0xf7 ), + PLAINTEXT ( 0x65, 0x3a, 0x3f, 0x03, 0x3c, 0x27, 0x75, 0xe0, 0x8f, + 0xef, 0x73, 0xcf, 0x80, 0xf5, 0xe2, 0x69, 0x9f, 0xb3, + 0x60, 0xcb ), + CIPHERTEXT ( 0x55, 0x65, 0xc6, 0xd0, 0x9c, 0x4c, 0x92, 0x4d, 0x61, + 0xc0, 0xef, 0x80, 0x8f, 0xb0, 0xea, 0x14, 0x4f, 0xfb, + 0x47, 0x38 ), + AUTH ( 0x12, 0xb7, 0x2e, 0xc1, 0xd9, 0xc3, 0x2f, 0xb2, 0x2c, 0x13, + 0xc4, 0x0b, 0x33, 0x79, 0x6f, 0xa9 ) ); + +/* AES-GCM test case 206 */ +CIPHER_TEST ( wycheproof_aes_gcm_0e8ed23e, &aes_gcm_algorithm, + KEY ( 0xf8, 0xce, 0x76, 0x9a, 0x34, 0xf4, 0x8d, 0x24, 0xa2, 0x07, + 0x68, 0x60, 0xe7, 0xd1, 0x8a, 0xb5, 0xf4, 0xf2, 0xa5, 0x28, + 0xe2, 0x28, 0x0d, 0xa2 ), + IV ( 0x8d, 0x7f, 0x86, 0x76, 0x11, 0x52, 0x66, 0xf5, 0xd1, 0xa0, + 0xe9, 0x1f ), + ADDITIONAL ( 0x7b, 0x6d, 0xcc, 0xc1, 0x50, 0x56, 0x3e, 0x84, 0x54, + 0x34, 0xc2, 0xbc, 0xa2, 0x9f, 0x3f, 0x9d, 0x78, 0x41, + 0x62, 0x8f, 0x00, 0xc9, 0x47, 0x4e, 0x06, 0x20, 0x01, + 0x7f, 0x7f, 0xa8, 0xe2, 0x50, 0x03, 0x62, 0xfd, 0x7c, + 0xf3, 0xcd, 0x16, 0x23, 0x95, 0xb1, 0x4a, 0x52, 0x0d, + 0xe4, 0x84, 0xc3, 0x05, 0xfe, 0x2f, 0x6b, 0xe6, 0x30, + 0x91, 0x74, 0xed, 0xc3, 0xe1, 0x4f, 0xd5, 0xae, 0xcc, + 0xfb, 0xa6, 0xdc, 0xae, 0x18, 0x34, 0x28, 0x61, 0x3e, + 0xd9, 0xd6, 0xdf, 0x3f, 0x01, 0xd5, 0xdb, 0x53, 0x82, + 0x45, 0xc8, 0xae, 0x8f, 0xf5, 0x0f, 0x30, 0xba, 0x3d, + 0x42, 0x85, 0x10, 0xca, 0xd3, 0x28, 0x9b, 0x46, 0x28, + 0x05, 0xea, 0x10, 0x29, 0x13, 0x3c, 0x64, 0xaf, 0x45, + 0x7e, 0x46, 0xff, 0x51, 0x2b, 0x19, 0x58, 0x0d, 0x5d, + 0xfd, 0x0d, 0x5a, 0x01, 0xe4, 0x2d, 0x0f, 0xa6, 0x28, + 0xc2, 0xf7, 0x29 ), + PLAINTEXT ( 0x50, 0x75, 0x96, 0xe9, 0x23, 0x6f, 0x4d, 0x9e, 0xbc, + 0xde, 0xb0, 0xed, 0x75, 0xdc, 0xc7, 0xff, 0x7e, 0x52, + 0xb1, 0x55 ), + CIPHERTEXT ( 0x9e, 0xd3, 0xee, 0x25, 0x62, 0xd3, 0x6b, 0x18, 0x85, + 0x3a, 0x08, 0x60, 0xce, 0xc4, 0x9c, 0x23, 0x89, 0xd9, + 0x08, 0x11 ), + AUTH ( 0x65, 0xd5, 0x9c, 0xf5, 0x32, 0x84, 0x70, 0x93, 0xe4, 0xc4, + 0x81, 0x0d, 0x1b, 0x55, 0x25, 0x40 ) ); + +/* AES-GCM test case 207 */ +CIPHER_TEST ( wycheproof_aes_gcm_b1a4bc0b, &aes_gcm_algorithm, + KEY ( 0x4b, 0x72, 0x6f, 0x49, 0x03, 0x6f, 0x5e, 0xf8, 0x72, 0x00, + 0x0a, 0x34, 0xca, 0x09, 0xa8, 0x52, 0x8a, 0x1e, 0xea, 0x7e, + 0x05, 0x63, 0xa5, 0x5e ), + IV ( 0xae, 0x05, 0x12, 0x4d, 0x76, 0xb0, 0x56, 0xfc, 0xce, 0x5c, + 0x8b, 0x37 ), + ADDITIONAL ( 0x95, 0xdf, 0x74, 0x13, 0x2d, 0xef, 0x5a, 0xe8, 0xad, + 0xb6, 0xb3, 0xb6, 0xcc, 0x91, 0x8a, 0x9f, 0x7c, 0x90, + 0x72, 0xf2, 0xdf, 0x63, 0x9d, 0x26, 0x9a, 0xbc, 0x3c, + 0x55, 0x1c, 0xbd, 0x6a, 0xb2, 0x45, 0xf5, 0x7a, 0x8e, + 0x97, 0x09, 0x5a, 0x58, 0x0d, 0x47, 0x3a, 0xad, 0xbf, + 0xf5, 0x0f, 0x1d, 0x87, 0x1e, 0x76, 0x6f, 0xec, 0x32, + 0x91, 0x00, 0xb4, 0x5f, 0xa3, 0x57, 0x1b, 0x49, 0x04, + 0xb4, 0xf5, 0xe4, 0xe0, 0xd1, 0xbd, 0x25, 0x91, 0x0f, + 0x45, 0x7d, 0xd1, 0xf0, 0x1b, 0xbf, 0x82, 0xff, 0x59, + 0xa2, 0x13, 0x8a, 0xf1, 0x67, 0x56, 0xd6, 0x4f, 0xa9, + 0xd8, 0x20, 0x89, 0xcc, 0xd6, 0xba, 0xa1, 0x8c, 0x16, + 0xd0, 0x38, 0x1d, 0xdd, 0xbc, 0x46, 0x9c, 0xcc, 0x54, + 0x40, 0x5e, 0x85, 0x3f, 0xce, 0xcf, 0x3b, 0x22, 0x85, + 0x24, 0x7d, 0xee, 0x88, 0x66, 0x39, 0xed, 0xaa, 0xfb, + 0xaa, 0xd5, 0x8e, 0xdb, 0x8e, 0x12, 0x87, 0xc1, 0x7d, + 0xa2, 0xf4, 0x49, 0x68, 0x19, 0x88, 0xf1, 0xe5, 0x75, + 0xc8, 0xc6, 0xe9, 0x9e, 0x2a, 0x2a, 0xee, 0xfb, 0xf7, + 0xe6, 0xe1, 0xfc, 0xac, 0x86, 0xad, 0xf9, 0xb1, 0xc1, + 0x34, 0x9b, 0xe7, 0xfe, 0x29, 0xf0, 0xf7, 0x1d, 0x7c, + 0xbe, 0x87, 0x40, 0xe0, 0x9d, 0x29, 0x6a, 0x47, 0x18, + 0xb4, 0x12, 0x50, 0xb6, 0xfb, 0xfc, 0x68, 0xcc, 0x52, + 0x06, 0x1c, 0x05, 0x30, 0xfd, 0x79, 0xe1, 0x5c, 0x5b, + 0x0e, 0xf0, 0x13, 0xa9, 0x77, 0x78, 0x1f, 0x7a, 0x63, + 0xed, 0x51, 0x38, 0x92, 0xb8, 0xd1, 0x05, 0xb1, 0x06, + 0x4e, 0xea, 0xcf, 0x15, 0x24, 0xde, 0x4c, 0x50, 0xab, + 0x85, 0xc2, 0x23, 0xd4, 0x7d, 0xe3, 0x5e, 0xaf, 0xb9, + 0xe9, 0x31, 0xcf, 0x42, 0x6d, 0xc4, 0x55, 0x86, 0x6e, + 0xa8, 0x8f, 0x49, 0xd5, 0x10, 0x03, 0xb8, 0x2b, 0xf5, + 0xef, 0xc7, 0xe6 ), + PLAINTEXT ( 0xe1, 0xdd, 0x0b, 0x94, 0xdb, 0x0a, 0x9f, 0x7f, 0xd6, + 0xb2, 0xc4, 0xa6, 0xd6, 0x52, 0xe0, 0xe2, 0x66, 0x48, + 0x96, 0xdc ), + CIPHERTEXT ( 0xb5, 0x7c, 0x95, 0x8e, 0x54, 0x84, 0x42, 0x11, 0x43, + 0x87, 0xf4, 0xcf, 0xec, 0x8f, 0xe0, 0xdc, 0xce, 0x93, + 0x4c, 0x9b ), + AUTH ( 0x0a, 0xcf, 0x89, 0x55, 0xd6, 0x54, 0xb8, 0x48, 0x74, 0x20, + 0x1a, 0x21, 0x54, 0x2d, 0x1b, 0x2a ) ); + +/* AES-GCM test case 208 */ +CIPHER_TEST ( wycheproof_aes_gcm_b025b360, &aes_gcm_algorithm, + KEY ( 0xf8, 0xac, 0x92, 0xd2, 0x06, 0xdf, 0x1d, 0xa3, 0xad, 0xa5, + 0xe9, 0x06, 0x80, 0x62, 0x52, 0xa7, 0x82, 0x62, 0xe5, 0x1e, + 0x00, 0xa7, 0xce, 0x0b ), + IV ( 0x2c, 0x93, 0x3d, 0x75, 0x90, 0xff, 0x40, 0x58, 0xe2, 0x2f, + 0x7e, 0x5b ), + ADDITIONAL ( 0xff, 0x27, 0x71, 0xb5, 0xc8, 0x17, 0xa5, 0xe1, 0x32, + 0x6c, 0xb9, 0x07, 0xd5, 0x38, 0x4d, 0xb2, 0x86, 0x1a, + 0x32, 0x95, 0x10, 0x9e, 0x67, 0x8b, 0x55, 0x3b, 0xa1, + 0x4a, 0x5a, 0x99, 0x00, 0x5f, 0xe0, 0xd6, 0xdc, 0x6d, + 0x73, 0x17, 0x8b, 0x75, 0xd3, 0x48, 0xb6, 0xd9, 0xc1, + 0xa8, 0xb6, 0x98, 0x3e, 0x20, 0xcf, 0x2b, 0x23, 0x16, + 0x1c, 0xc8, 0x8b, 0x02, 0x75, 0x2c, 0xba, 0x16, 0x6f, + 0x36, 0xeb, 0xb4, 0x33, 0xd7, 0xb4, 0x29, 0xff, 0x5f, + 0x59, 0x07, 0x58, 0xd3, 0xba, 0x56, 0x96, 0xf7, 0x26, + 0x8c, 0xaa, 0x55, 0xb0, 0xe5, 0xfb, 0xff, 0xf4, 0x98, + 0xaa, 0x77, 0xec, 0x79, 0x11, 0x5c, 0x67, 0x9b, 0x7d, + 0xf6, 0xb1, 0x18, 0xcf, 0x4c, 0x51, 0xa3, 0x18, 0x5f, + 0x9d, 0x61, 0x77, 0xde, 0x14, 0x5b, 0xe8, 0x85, 0xca, + 0x5e, 0x1b, 0x35, 0x5a, 0x4a, 0x21, 0xb6, 0xb0, 0xb7, + 0x92, 0x8c, 0x6e, 0x70, 0xd6, 0xcf, 0xee, 0x65, 0xa3, + 0xd1, 0x77, 0x58, 0xe0, 0x80, 0x12, 0xf0, 0x88, 0xb2, + 0x8e, 0x38, 0x1e, 0x8a, 0xbc, 0x6e, 0x15, 0x47, 0x1d, + 0x58, 0x00, 0x36, 0xbb, 0x3e, 0x78, 0xae, 0x1f, 0x97, + 0x6c, 0xaa, 0x66, 0x0e, 0xad, 0x30, 0x0c, 0x4d, 0x0f, + 0x50, 0xd0, 0x4f, 0xa0, 0x70, 0x88, 0x64, 0x33, 0x61, + 0xac, 0x8c, 0x63, 0x4d, 0x4c, 0x37, 0x58, 0x27, 0xbe, + 0x90, 0x0d, 0x62, 0xf8, 0x60, 0xf9, 0x08, 0x9c, 0x5d, + 0xbc, 0x5a, 0xd0, 0x2f, 0x9c, 0xab, 0x9d, 0xd4, 0x9a, + 0x32, 0x4c, 0x96, 0x0b, 0x25, 0x9a, 0xb8, 0x39, 0xde, + 0x45, 0x89, 0x6c, 0x60, 0x49, 0xeb, 0x71, 0xf4, 0xa0, + 0x56, 0xd9, 0x37, 0xa9, 0x0a, 0xfa, 0xc1, 0xf5, 0x2e, + 0x7c, 0x73, 0xc2, 0x4c, 0xa3, 0x41, 0x30, 0x6c, 0x32, + 0xa0, 0x16, 0xcb, 0xe4, 0x0c, 0x74, 0x78, 0xde, 0x24, + 0xec, 0x8c, 0x7f, 0x6f ), + PLAINTEXT ( 0x44, 0xac, 0x8c, 0x52, 0x54, 0x84, 0x52, 0x89, 0x58, + 0xec, 0xfe, 0xe0, 0x9e, 0xd4, 0x4e, 0xc0, 0xdf, 0x82, + 0x8a, 0x61 ), + CIPHERTEXT ( 0x97, 0x14, 0x45, 0x25, 0x63, 0x32, 0xbf, 0x87, 0x26, + 0x85, 0x38, 0xe1, 0x0b, 0xb4, 0x70, 0xf1, 0x1d, 0xf9, + 0x12, 0xe5 ), + AUTH ( 0x41, 0xa6, 0xaf, 0x58, 0xf6, 0x7c, 0x6c, 0xc4, 0xfc, 0x6f, + 0x55, 0x18, 0x9f, 0x68, 0xcd, 0xac ) ); + +/* AES-GCM test case 209 */ +CIPHER_TEST ( wycheproof_aes_gcm_f5019269, &aes_gcm_algorithm, + KEY ( 0x8f, 0x27, 0xb1, 0xc3, 0xb3, 0xd7, 0x02, 0x3c, 0x76, 0xee, + 0x66, 0xc7, 0x68, 0xa3, 0xe9, 0x2d, 0x49, 0x71, 0xe2, 0x5f, + 0x72, 0x9d, 0x87, 0x88 ), + IV ( 0x12, 0x44, 0x40, 0x40, 0xca, 0xed, 0xe6, 0x72, 0x85, 0xe4, + 0x90, 0xd7 ), + ADDITIONAL ( 0x58, 0xfd, 0x02, 0xac, 0x23, 0xec, 0x7f, 0xa5, 0xb9, + 0x46, 0x0f, 0x60, 0xbf, 0xc8, 0x5b, 0x4b, 0xeb, 0xba, + 0x70, 0x03, 0x9a, 0x8f, 0x83, 0x26, 0x1d, 0x6c, 0xc4, + 0xf5, 0x60, 0x10, 0x7c, 0x10, 0xbc, 0x69, 0x54, 0x8a, + 0x5d, 0x61, 0x52, 0x88, 0x2f, 0xb4, 0x65, 0xfd, 0x59, + 0xfb, 0x81, 0x64, 0xd7, 0xc9, 0x45, 0x23, 0xc3, 0xdd, + 0x42, 0x06, 0xd3, 0x30, 0x64, 0xf5, 0x19, 0x1b, 0xd3, + 0x1f, 0x0c, 0x48, 0xfe, 0x03, 0xd7, 0x46, 0x0e, 0x99, + 0x5c, 0x93, 0x17, 0x5b, 0x57, 0xcb, 0x03, 0xf5, 0x87, + 0x11, 0xad, 0xc9, 0x46, 0x32, 0x03, 0x1c, 0x43, 0x05, + 0x27, 0x23, 0x67, 0xb4, 0x28, 0x9c, 0x72, 0x5d, 0x9c, + 0xb7, 0xae, 0x9b, 0xa9, 0x96, 0xb3, 0xa0, 0x79, 0x17, + 0x45, 0x08, 0xc1, 0xea, 0xe8, 0x16, 0x2a, 0x0b, 0xac, + 0x44, 0x6c, 0x1e, 0x53, 0xfe, 0x0c, 0x40, 0x2b, 0x69, + 0x12, 0xdf, 0xd6, 0x70, 0x2a, 0xdd, 0xcc, 0xad, 0xa3, + 0x0a, 0x5c, 0x01, 0x0f, 0xc2, 0x2c, 0x2c, 0x75, 0xe4, + 0x32, 0x26, 0x37, 0x8e, 0xc7, 0xf4, 0xb3, 0xb7, 0x1c, + 0xcc, 0x71, 0xf3, 0x2a, 0xb1, 0xad, 0xc8, 0x77, 0xcc, + 0x7b, 0x0a, 0x18, 0x0c, 0x75, 0xd3, 0x85, 0xc0, 0xf7, + 0x1a, 0x0b, 0x29, 0x1a, 0x1c, 0xcc, 0xf4, 0xbe, 0x47, + 0xe2, 0x72, 0x24, 0x9d, 0x61, 0xff, 0xbf, 0x05, 0x9c, + 0x4f, 0x7b, 0xe7, 0x4e, 0xba, 0x07, 0xd5, 0xe1, 0xbe, + 0x3a, 0x74, 0x38, 0x45, 0x8a, 0x61, 0x1f, 0xe5, 0x8c, + 0xee, 0x4f, 0x94, 0x6e, 0x25, 0xde, 0xe0, 0x3e, 0x64, + 0x85, 0x23, 0x55, 0x66, 0xf2, 0x0e, 0xd5, 0x55, 0xbe, + 0x32, 0xcd, 0x57, 0xa9, 0x4e, 0x52, 0x2d, 0x21, 0x68, + 0xea, 0xe2, 0x3c, 0x45, 0x87, 0x37, 0x1a, 0x2d, 0x14, + 0x5f, 0x41, 0x8c, 0x59, 0xe7, 0xbb, 0xc4, 0x64, 0xa3, + 0xbd, 0x88, 0xb8, 0x91, 0x9b ), + PLAINTEXT ( 0x0d, 0xf6, 0xe7, 0x50, 0x09, 0x2b, 0x9a, 0xc5, 0x76, + 0xdd, 0xe6, 0x60, 0x06, 0xa4, 0xca, 0xb2, 0x11, 0x6e, + 0xee, 0x21 ), + CIPHERTEXT ( 0xc6, 0x87, 0x7b, 0x03, 0x55, 0x2e, 0x97, 0xd9, 0xa1, + 0xe6, 0x55, 0x7f, 0x90, 0xdc, 0x7a, 0xdd, 0xe1, 0x5a, + 0x2f, 0x43 ), + AUTH ( 0x25, 0x36, 0x27, 0x2b, 0xee, 0x74, 0x46, 0x82, 0x00, 0x41, + 0x85, 0x4e, 0x10, 0xb4, 0x9a, 0x03 ) ); + +/* AES-GCM test case 210 */ +CIPHER_TEST ( wycheproof_aes_gcm_31562fe1, &aes_gcm_algorithm, + KEY ( 0x97, 0x55, 0xeb, 0x90, 0x9e, 0x1c, 0x30, 0xc2, 0xc1, 0x1d, + 0x3f, 0x10, 0x61, 0x07, 0xe7, 0xb5, 0x73, 0xc2, 0x5b, 0x9f, + 0xdb, 0x8b, 0xc1, 0x9a ), + IV ( 0xa8, 0x2a, 0x5f, 0x56, 0x14, 0x31, 0xc6, 0x89, 0xe7, 0xc4, + 0xdc, 0x0b ), + ADDITIONAL ( 0xe1, 0x2f, 0x56, 0x81, 0x34, 0x51, 0x3a, 0x0e, 0xa7, + 0x58, 0x37, 0x57, 0x13, 0x21, 0xe6, 0x35, 0x5f, 0x70, + 0x78, 0x97, 0x01, 0x84, 0x40, 0x0b, 0x12, 0x97, 0xdb, + 0x21, 0xb0, 0xcd, 0x34, 0xc6, 0x67, 0x78, 0x52, 0xa3, + 0x07, 0x9a, 0x31, 0xf2, 0xae, 0x83, 0x78, 0x12, 0x70, + 0xb3, 0x6a, 0x97, 0xa2, 0x8d, 0xa3, 0x91, 0x60, 0x5f, + 0x02, 0xb4, 0x07, 0x54, 0x50, 0x18, 0x71, 0x67, 0x56, + 0x16, 0xa9, 0xa9, 0x04, 0x7f, 0x7e, 0x38, 0x65, 0x29, + 0x51, 0x20, 0xd5, 0xd3, 0xd3, 0x29, 0xeb, 0xcc, 0x7a, + 0x4e, 0x24, 0xef, 0x8d, 0xb3, 0xef, 0xe6, 0x15, 0xc2, + 0xa9, 0x10, 0x2d, 0xfa, 0x7a, 0x49, 0xc3, 0x70, 0xf3, + 0x33, 0xc6, 0x2a, 0xc1, 0x96, 0xfb, 0x49, 0x49, 0xc6, + 0x44, 0x09, 0x49, 0x27, 0x12, 0xe3, 0xb4, 0x23, 0xfa, + 0xf6, 0x21, 0x44, 0x3e, 0x6d, 0x07, 0xe7, 0x67, 0x38, + 0x49, 0x7e, 0x30, 0x1d, 0x41, 0xc2, 0x6a, 0x41, 0x4e, + 0x8d, 0x08, 0xff, 0x11, 0x8d, 0x65, 0xb6, 0xa2, 0xd6, + 0x76, 0x8d, 0x18, 0x88, 0x3c, 0x52, 0x46, 0x6b, 0x5a, + 0xf5, 0x8c, 0xf8, 0x33, 0x59, 0x04, 0xa2, 0xeb, 0xb1, + 0xc0, 0x26, 0x73, 0xc8, 0x0c, 0x28, 0x5d, 0x67, 0x71, + 0x06, 0x7b, 0x0d, 0xb6, 0xe6, 0xe9, 0x31, 0x56, 0x40, + 0x5b, 0xb2, 0xf5, 0xb6, 0x1b, 0x5b, 0xe8, 0x0d, 0xf0, + 0xdb, 0x6a, 0xe5, 0xfa, 0x8a, 0x9f, 0xc6, 0x9d, 0xb8, + 0x0b, 0xe2, 0x15, 0xa0, 0xae, 0x17, 0xb8, 0x08, 0xf6, + 0xa0, 0x0c, 0x52, 0x55, 0x5b, 0x4b, 0x31, 0x88, 0xe7, + 0x1e, 0xa3, 0x8f, 0xf0, 0x85, 0x83, 0xb6, 0xca, 0xbd, + 0x0b, 0x3f, 0x86, 0xb4, 0x4f, 0x2a, 0x49, 0x4c, 0xf5, + 0x4b, 0xb4, 0x13, 0x20, 0xbd, 0xcd, 0x8b, 0xeb, 0xd1, + 0xe8, 0xb5, 0x66, 0x43, 0x5e, 0x9f, 0x6b, 0x29, 0x49, + 0xe2, 0x15, 0x2c, 0x5f, 0x72, 0x1d, 0x04, 0x90, 0xdb, + 0x80, 0xf5, 0x64, 0x16, 0x4d, 0xbc, 0x6f, 0x39, 0x49, + 0x33, 0xda, 0xdd, 0x7b, 0x98, 0xef, 0x28, 0xb0, 0x4f, + 0x54, 0x06, 0x4f, 0x9a, 0xb8, 0x4e, 0xa7, 0xf6, 0xfd, + 0x92, 0xf3, 0xbb, 0x07, 0x1e, 0xee, 0x8b, 0x3b, 0x92, + 0x4e, 0xa9, 0xf1, 0x82, 0xe7, 0x07, 0xa0, 0x6f, 0x80, + 0xc6, 0x12, 0x94, 0x85, 0xc6, 0x48, 0xa7, 0xae, 0xc6, + 0xe0, 0x0c, 0xdb, 0xb1, 0xae, 0x41, 0xfd, 0x91, 0x27, + 0x3f, 0xb8, 0x37, 0x0e, 0xa5, 0xac, 0x9b, 0x19, 0xa7, + 0xfe, 0x00, 0x0b, 0x4f, 0x45, 0xa5, 0x86, 0xdd, 0x04, + 0xe7, 0x93, 0x56, 0x52, 0x26, 0x93, 0x13, 0x00, 0xea, + 0xf9, 0x00, 0xb9, 0x9d, 0x50, 0xb7, 0xa6, 0x8e, 0x7f, + 0xc5, 0x17, 0xb5, 0x81, 0x41, 0x2b, 0x2b, 0x19, 0x3c, + 0xc5, 0xd8, 0xb0, 0x2c, 0xab, 0x61, 0x02, 0x7c, 0xee, + 0xe8, 0x70, 0x17, 0x18, 0xea, 0xe5, 0x84, 0x7b, 0x67, + 0x4d, 0x68, 0xd3, 0x71, 0x77, 0x5e, 0xbd, 0x40, 0x13, + 0x5a, 0x24, 0x96, 0x21, 0x65, 0xf2, 0xf7, 0xdb, 0xfd, + 0x70, 0x69, 0xad, 0x1d, 0x8c, 0x88, 0xf2, 0xd2, 0xe1, + 0x3b, 0xf0, 0x49, 0xe8, 0x47, 0xf6, 0xe5, 0x19, 0x80, + 0x37, 0xa9, 0x0d, 0x19, 0x6d, 0x49, 0xee, 0x04, 0xb0, + 0x8e, 0x21, 0x0a, 0xb9, 0x96, 0x7b, 0x37, 0x6c, 0xf8, + 0x75, 0xb6, 0xcc, 0x66, 0xd7, 0x7e, 0x70, 0xa8, 0x2a, + 0x0f, 0x7f, 0x06, 0xe2, 0x0c, 0xb2, 0xd4, 0x69, 0xb5, + 0x9f, 0x2b, 0x59, 0xe5, 0xed, 0x0f, 0x27, 0x90, 0x79, + 0x55, 0xd4, 0xe4, 0x82, 0x6b, 0x5b, 0x6b, 0xa9, 0x8d, + 0x7c, 0xb3, 0x0f, 0x18, 0x04, 0xc6, 0xc4, 0x35, 0x01, + 0x01, 0xdc, 0x79, 0x06, 0x84, 0x81, 0x17, 0x74, 0xaf, + 0xc1, 0xbd, 0xc6, 0xa8, 0x4b, 0xae, 0x3b, 0xd3, 0xe2, + 0xdf, 0xe0, 0x81, 0x80, 0xf0, 0xa5, 0x09 ), + PLAINTEXT ( 0xf8, 0x00, 0x7e, 0x07, 0x49, 0x51, 0xf1, 0x1f, 0x55, + 0xe1, 0x07, 0x36, 0xb5, 0xdd, 0x17, 0xab, 0xff, 0x63, + 0xe8, 0x7a ), + CIPHERTEXT ( 0xa8, 0x6d, 0xf5, 0x40, 0x84, 0x63, 0xe8, 0xba, 0xa3, + 0x19, 0x8e, 0xb8, 0xb9, 0x31, 0xa2, 0x29, 0x8c, 0xeb, + 0xb0, 0x97 ), + AUTH ( 0x67, 0x3d, 0xa0, 0x4c, 0x8e, 0xe1, 0xbb, 0xf2, 0xf7, 0xbe, + 0x33, 0xc7, 0xbe, 0x2d, 0x09, 0xa5 ) ); + +/* AES-GCM test case 211 */ +CIPHER_TEST ( wycheproof_aes_gcm_49e334ce, &aes_gcm_algorithm, + KEY ( 0xd4, 0x09, 0x00, 0x19, 0xa0, 0x7d, 0xe8, 0xff, 0x31, 0xe9, + 0x8f, 0xd1, 0x89, 0x8f, 0xfb, 0xd8, 0xc1, 0x00, 0x1f, 0x58, + 0x26, 0x9a, 0x64, 0x33 ), + IV ( 0x65, 0xae, 0xaa, 0x5e, 0xd2, 0xc6, 0x3a, 0xfd, 0x95, 0xff, + 0x52, 0x2a ), + ADDITIONAL ( 0x37, 0xdf, 0x31, 0x1e, 0xda, 0xb4, 0x30, 0x3e, 0x9b, + 0x10, 0xdc, 0x83, 0xa9, 0x0e, 0x85, 0x62, 0xc5, 0x5a, + 0xeb, 0x9a, 0xb9, 0x85, 0x64, 0x43, 0x74, 0x68, 0xc6, + 0xb4, 0x1d, 0x3e, 0x08, 0x89, 0x80, 0x79, 0xc9, 0xd8, + 0x18, 0xe1, 0xca, 0x0f, 0x02, 0x49, 0xec, 0x36, 0xc1, + 0x83, 0xd2, 0x66, 0x78, 0x82, 0x8f, 0x05, 0x36, 0xcb, + 0x06, 0xa8, 0x74, 0x87, 0x09, 0x33, 0x08, 0x77, 0x15, + 0x5c, 0xa9, 0xa7, 0xf8, 0x76, 0x29, 0x86, 0x8c, 0x12, + 0x6b, 0x3d, 0xfb, 0xa2, 0x62, 0xe0, 0xe5, 0xec, 0x2e, + 0x49, 0x3e, 0xa5, 0x1e, 0x45, 0x66, 0xa9, 0x4d, 0x82, + 0x5c, 0x47, 0x79, 0x26, 0x34, 0xc8, 0xd9, 0x94, 0x46, + 0x66, 0x00, 0x1e, 0x12, 0xad, 0x23, 0x99, 0xa4, 0xdd, + 0xed, 0x6e, 0x2c, 0x67, 0x83, 0x0f, 0xd5, 0x27, 0x95, + 0x6c, 0x02, 0xf2, 0xeb, 0x1b, 0xc5, 0x59, 0x91, 0xcc, + 0x8b, 0xe6, 0x09, 0xb3, 0x49, 0x0c, 0x0c, 0x2a, 0x40, + 0x63, 0xf0, 0xf2, 0xbd, 0x2a, 0x32, 0x03, 0x32, 0x8e, + 0xa6, 0x81, 0x65, 0x79, 0xae, 0xd7, 0x60, 0x90, 0x80, + 0x9e, 0x51, 0x17, 0x5f, 0x27, 0x52, 0x86, 0xf5, 0x6e, + 0x77, 0xd0, 0x45, 0x5f, 0x9e, 0xc4, 0x5c, 0x0e, 0xd2, + 0xf0, 0xf4, 0x54, 0x37, 0x43, 0x82, 0xa3, 0xb2, 0xd0, + 0x43, 0x86, 0x2d, 0x3e, 0xe0, 0x69, 0xd5, 0x96, 0x6c, + 0xbe, 0x01, 0x79, 0x27, 0xa8, 0xa8, 0xaa, 0xf5, 0x87, + 0x3d, 0xe0, 0x38, 0xd9, 0x40, 0x37, 0x5b, 0x3a, 0x29, + 0x71, 0xd4, 0x53, 0xe6, 0x46, 0xdb, 0xbb, 0x61, 0x42, + 0x46, 0x32, 0x5f, 0x1f, 0x88, 0x63, 0x9c, 0x1e, 0x86, + 0x8e, 0x43, 0xb7, 0x86, 0x8f, 0x37, 0xcd, 0x57, 0x7f, + 0x8c, 0xe3, 0x5f, 0xf0, 0x5b, 0xc0, 0x15, 0x99, 0x92, + 0xc3, 0x4b, 0x93, 0x3e, 0xb9, 0xc5, 0x0b, 0xf9, 0xd5, + 0x25, 0x7d, 0x91, 0xb6, 0x44, 0xf0, 0xb2, 0x65, 0x8c, + 0x63, 0x01, 0x0a, 0xfc, 0x9f, 0xc4, 0x9f, 0x60, 0xa5, + 0x0b, 0x6f, 0x7a, 0xe9, 0x94, 0xd4, 0x37, 0x73, 0x13, + 0xb9, 0xe7, 0x86, 0x57, 0xcc, 0xcd, 0xf4, 0xcd, 0xfa, + 0x5d, 0x96, 0xeb, 0x5e, 0x93, 0x56, 0x13, 0xa2, 0x7d, + 0x10, 0x9b, 0x5c, 0x20, 0x43, 0x4c, 0xa1, 0x08, 0xf0, + 0x5d, 0xf5, 0xf7, 0x98, 0xd8, 0xbb, 0x42, 0x1c, 0x3e, + 0x9d, 0xc2, 0xf5, 0x46, 0xd1, 0xb4, 0x50, 0x50, 0xa2, + 0x6f, 0x88, 0x9a, 0xe0, 0x23, 0x5d, 0x2c, 0x39, 0xb1, + 0xea, 0x4b, 0x2f, 0x3b, 0x52, 0x67, 0x27, 0x27, 0xc9, + 0xe5, 0xda, 0x6d, 0xb7, 0x31, 0xc3, 0x53, 0x9c, 0x80, + 0xd1, 0x05, 0x38, 0xe6, 0x96, 0x43, 0xc7, 0x9c, 0x68, + 0x10, 0x14, 0xf8, 0x4f, 0xb3, 0xa8, 0x35, 0x6d, 0xba, + 0xfb, 0xeb, 0x6e, 0x8e, 0x70, 0x1c, 0x44, 0x5d, 0x52, + 0x4b, 0x63, 0xb1, 0xb8, 0xff, 0xf4, 0x9c, 0x4f, 0xbc, + 0xf6, 0x72, 0xa0, 0x79, 0x77, 0xb9, 0x66, 0x1f, 0x47, + 0x2e, 0xfc, 0x50, 0x8d, 0x43, 0x0c, 0xef, 0xe8, 0xe7, + 0x44, 0xf3, 0x24, 0xc2, 0x28, 0x46, 0x06, 0x0c, 0x63, + 0x7a, 0xda, 0x1e, 0x83, 0xa1, 0x77, 0xad, 0x25, 0x20, + 0xb8, 0xac, 0x21, 0x4b, 0x84, 0x4c, 0x50, 0x64, 0x93, + 0x43, 0x4f, 0x8f, 0x16, 0x66, 0xa0, 0xbb, 0x6a, 0x3f, + 0x57, 0xec, 0x6c, 0x4e, 0xfd, 0x3f, 0x13, 0x8f, 0xb7, + 0x67, 0xd7, 0xef, 0x6c, 0xac, 0x7c, 0x9d, 0x31, 0xdb, + 0x5c, 0x95, 0x4b, 0x7a, 0x7f, 0xd2, 0xa8, 0x73, 0x08, + 0xf9, 0x97, 0xed, 0xa1, 0xd8, 0xae, 0x8c, 0xc0, 0xc7, + 0x21, 0x1e, 0xc1, 0x3f, 0xc6, 0xfd, 0xa8, 0x45, 0xea, + 0xdc, 0xd2, 0x5c, 0x7f, 0x7a, 0x9c, 0x69, 0xcc, 0x38, + 0xd9, 0x14, 0x39, 0xfe, 0x7e, 0xf1, 0x53, 0x83, 0x5f, + 0xd9, 0x72, 0xe2, 0x18, 0x59, 0x4c, 0x2a, 0x06 ), + PLAINTEXT ( 0xab, 0xe8, 0x60, 0x98, 0xf7, 0x98, 0x94, 0x6a, 0xdd, + 0x9b, 0x1b, 0x07, 0x8f, 0x16, 0x35, 0x8e, 0xa0, 0xdd, + 0x0c, 0xd1 ), + CIPHERTEXT ( 0x9d, 0x0a, 0x4e, 0x2f, 0xcd, 0x6f, 0xf3, 0x0c, 0xb3, + 0xcc, 0xaa, 0xa2, 0x9f, 0x31, 0x13, 0x92, 0xe1, 0xb4, + 0x3f, 0xe4 ), + AUTH ( 0xf3, 0x5d, 0xac, 0x66, 0x5c, 0x8b, 0xac, 0x31, 0xf6, 0xab, + 0x05, 0x87, 0x61, 0x5e, 0xc1, 0xbc ) ); + +/* AES-GCM test case 212 */ +CIPHER_TEST ( wycheproof_aes_gcm_6677d2a7, &aes_gcm_algorithm, + KEY ( 0x2c, 0xa0, 0x90, 0xf0, 0xf4, 0xec, 0x5a, 0xfd, 0xf4, 0xa3, + 0xcf, 0xb2, 0x53, 0xfe, 0x2e, 0x87, 0x77, 0x1d, 0xdd, 0x5b, + 0x03, 0x75, 0xf5, 0x67 ), + IV ( 0x4c, 0x48, 0xb1, 0x51, 0x43, 0xa3, 0xf4, 0x03, 0x05, 0xc7, + 0x0c, 0xd6 ), + ADDITIONAL ( 0x89, 0x4f, 0xb5, 0x98, 0xd6, 0x7e, 0x5d, 0x2d, 0x43, + 0x4f, 0xd2, 0x16, 0xd3, 0x8e, 0x69, 0x63, 0x1e, 0x69, + 0xc2, 0x3e, 0x48, 0x8f, 0xfb, 0xde, 0x6e, 0x4f, 0xf8, + 0x4b, 0x10, 0xf5, 0x15, 0x63, 0xda, 0x1c, 0x8c, 0xa0, + 0x53, 0x08, 0xfd, 0xa7, 0x43, 0xaf, 0x0c, 0x55, 0xc3, + 0x71, 0x44, 0x79, 0xd0, 0xb3, 0x37, 0xb6, 0x15, 0x7c, + 0x06, 0x5b, 0xf7, 0x4e, 0x95, 0x27, 0x98, 0x5a, 0x76, + 0x56, 0x18, 0x43, 0xf3, 0x47, 0xf1, 0x52, 0x68, 0xf2, + 0xc9, 0xb7, 0x78, 0xb2, 0x73, 0xa6, 0x49, 0x6c, 0x0b, + 0x13, 0xdd, 0x6b, 0xed, 0xd7, 0x87, 0x6b, 0x33, 0x6a, + 0xba, 0xc4, 0xe8, 0x71, 0x58, 0x4c, 0x54, 0xc8, 0xab, + 0x1e, 0xe7, 0x31, 0xbe, 0x17, 0xed, 0x00, 0x44, 0xc8, + 0x2f, 0xef, 0x47, 0x34, 0x11, 0x31, 0xf3, 0xce, 0x09, + 0x91, 0x8d, 0xc2, 0x92, 0x0a, 0x8b, 0x64, 0x26, 0xef, + 0x40, 0xa3, 0xa5, 0x39, 0x23, 0x0a, 0x28, 0xe2, 0x63, + 0x6d, 0x27, 0xe4, 0x2a, 0x26, 0x36, 0xd0, 0x16, 0xbb, + 0x58, 0xef, 0x89, 0x87, 0xfb, 0x52, 0xf0, 0x66, 0xe7, + 0x5e, 0x31, 0x93, 0xa8, 0xf9, 0x8f, 0x58, 0xf6, 0xeb, + 0x61, 0x78, 0xbf, 0x93, 0x0c, 0xca, 0x0f, 0xfc, 0x57, + 0x28, 0xd6, 0x7a, 0x9e, 0x02, 0x35, 0x10, 0x51, 0xb4, + 0x7a, 0xbc, 0xcc, 0x8e, 0x8a, 0xfa, 0xef, 0xf2, 0x13, + 0x4c, 0x79, 0xa0, 0x8d, 0x3c, 0x4f, 0x59, 0x6d, 0xe2, + 0x27, 0xf8, 0x7f, 0x48, 0xf5, 0x3f, 0x60, 0x71, 0x50, + 0x54, 0xbb, 0x59, 0xe9, 0x64, 0x0b, 0x3f, 0x22, 0x48, + 0x17, 0xff, 0x24, 0x53, 0xcd, 0x68, 0x57, 0x40, 0xbb, + 0xd6, 0x5f, 0x7d, 0xe9, 0xd7, 0x1d, 0x04, 0x1a, 0x90, + 0xa5, 0x14, 0x61, 0x22, 0xe1, 0xc1, 0x3b, 0xba, 0xf3, + 0x64, 0xa7, 0xbc, 0x30, 0xe1, 0x82, 0x7c, 0xb9, 0x62, + 0xaa, 0x40, 0x9f, 0xef, 0xcc, 0x2d, 0x51, 0x2c, 0xef, + 0x53, 0xb3, 0xf0, 0x05, 0x95, 0x50, 0xc5, 0x46, 0x42, + 0x19, 0xb6, 0x36, 0x08, 0x27, 0x68, 0xf6, 0x12, 0x96, + 0xcd, 0x1e, 0xef, 0x8c, 0xce, 0x71, 0xc1, 0x7c, 0x84, + 0xfd, 0x47, 0x17, 0xe2, 0x31, 0xbb, 0x5b, 0xe2, 0x72, + 0x83, 0x9b, 0xd7, 0x38, 0x5c, 0x8e, 0xf8, 0x68, 0x01, + 0x00, 0x21, 0x2e, 0xca, 0xb4, 0x43, 0x0a, 0x8b, 0xb6, + 0xfa, 0x65, 0x99, 0xc4, 0x7a, 0xce, 0x67, 0x34, 0x09, + 0x90, 0x1b, 0x0f, 0x09, 0x8b, 0x61, 0x72, 0x09, 0x20, + 0x41, 0x9f, 0x03, 0x3c, 0x5e, 0xfc, 0x7c, 0xf6, 0x33, + 0x04, 0x70, 0x21, 0xc8, 0x32, 0x96, 0x97, 0xa3, 0x88, + 0x7b, 0xa7, 0xd0, 0xe4, 0xce, 0x8e, 0x57, 0x3c, 0x9c, + 0x05, 0x5d, 0xaf, 0x28, 0x57, 0x82, 0xeb, 0x06, 0x57, + 0xeb, 0xf4, 0x66, 0x6f, 0x4f, 0xe0, 0x78, 0xf2, 0xfb, + 0x93, 0x32, 0x3b, 0x71, 0x51, 0xd9, 0x5a, 0xf1, 0xff, + 0xb5, 0xbd, 0xde, 0xc2, 0xfb, 0x1e, 0x96, 0xb4, 0xc7, + 0x0a, 0x0b, 0x81, 0x62, 0x22, 0x49, 0x05, 0xdd, 0x2c, + 0x0a, 0xcb, 0x9b, 0x1c, 0x1c, 0x33, 0x2b, 0xdd, 0x35, + 0x6d, 0x05, 0xb5, 0xfa, 0xb9, 0x81, 0x3c, 0x16, 0xf8, + 0x93, 0xdc, 0xce, 0x2a, 0x95, 0xb0, 0xb3, 0x4d, 0x4d, + 0x9a, 0x59, 0x97, 0x03, 0x7a, 0x90, 0xde, 0xd2, 0x2d, + 0xe5, 0xe4, 0xd0, 0xe3, 0xe4, 0x10, 0x56, 0x9d, 0x3b, + 0x01, 0x0d, 0x31, 0xba, 0x78, 0x84, 0x3c, 0x6b, 0x62, + 0x26, 0xf3, 0x64, 0xec, 0xc9, 0x69, 0x56, 0x23, 0xce, + 0x1c, 0x1c, 0x21, 0xbf, 0x57, 0x34, 0xe0, 0x8c, 0x30, + 0x97, 0xd0, 0xf3, 0x2a, 0x06, 0x24, 0xd3, 0x2b, 0x9e, + 0xb4, 0x9f, 0x7a, 0xe6, 0x1b, 0x68, 0xc5, 0x0f, 0x59, + 0x20, 0xdb, 0x67, 0x5a, 0x5a, 0x8a, 0x73, 0xcd, 0x28, + 0x83, 0x64, 0xec, 0x97, 0x05, 0xdb, 0x79, 0x98, 0x93 ), + PLAINTEXT ( 0x00, 0xf6, 0x84, 0x0e, 0x9b, 0x66, 0xef, 0x3b, 0x6b, + 0xe0, 0x1f, 0x74, 0xdf, 0xea, 0x1c, 0xa4, 0x08, 0x03, + 0x8e, 0xf5 ), + CIPHERTEXT ( 0xda, 0xf4, 0xf2, 0xee, 0xd7, 0x2c, 0x51, 0x94, 0x1e, + 0x80, 0x38, 0xe9, 0x2c, 0x5d, 0x92, 0x72, 0xc2, 0xb2, + 0xd9, 0x7b ), + AUTH ( 0x5c, 0x3f, 0xd7, 0xda, 0x0d, 0xfb, 0xf6, 0x7c, 0x11, 0xac, + 0xb8, 0x66, 0xca, 0xf9, 0x2a, 0x99 ) ); + +/* AES-GCM test case 213 (skipped: modified tag) */ + +/* AES-GCM test case 214 (skipped: modified tag) */ + +/* AES-GCM test case 215 (skipped: modified tag) */ + +/* AES-GCM test case 216 (skipped: modified tag) */ + +/* AES-GCM test case 217 (skipped: modified tag) */ + +/* AES-GCM test case 218 (skipped: modified tag) */ + +/* AES-GCM test case 219 (skipped: modified tag) */ + +/* AES-GCM test case 220 (skipped: modified tag) */ + +/* AES-GCM test case 221 (skipped: modified tag) */ + +/* AES-GCM test case 222 (skipped: modified tag) */ + +/* AES-GCM test case 223 (skipped: modified tag) */ + +/* AES-GCM test case 224 (skipped: modified tag) */ + +/* AES-GCM test case 225 (skipped: modified tag) */ + +/* AES-GCM test case 226 (skipped: modified tag) */ + +/* AES-GCM test case 227 (skipped: modified tag) */ + +/* AES-GCM test case 228 (skipped: modified tag) */ + +/* AES-GCM test case 229 (skipped: modified tag) */ + +/* AES-GCM test case 230 (skipped: modified tag) */ + +/* AES-GCM test case 231 (skipped: modified tag) */ + +/* AES-GCM test case 232 (skipped: modified tag) */ + +/* AES-GCM test case 233 (skipped: modified tag) */ + +/* AES-GCM test case 234 (skipped: modified tag) */ + +/* AES-GCM test case 235 (skipped: modified tag) */ + +/* AES-GCM test case 236 (skipped: modified tag) */ + +/* AES-GCM test case 237 (skipped: modified tag) */ + +/* AES-GCM test case 238 (skipped: modified tag) */ + +/* AES-GCM test case 239 (skipped: modified tag) */ + +/* AES-GCM test case 240 */ +CIPHER_TEST ( wycheproof_aes_gcm_5d6316ec, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x5c, 0x2e, 0xa9, 0xb6, 0x95, 0xfc, 0xf6, 0xe2, 0x64, 0xb9, + 0x60, 0x74, 0xd6, 0xbf, 0xa5, 0x72 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x28, 0xe1, 0xc5, 0x23, 0x2f, 0x4e, 0xe8, 0x16, 0x1d, + 0xbe, 0x4c, 0x03, 0x63, 0x09, 0xe0, 0xb3, 0x25, 0x4e, + 0x92, 0x12, 0xbe, 0xf0, 0xa9, 0x34, 0x31, 0xce, 0x5e, + 0x56, 0x04, 0xc8, 0xf6, 0xa7, 0x3c, 0x18, 0xa3, 0x18, + 0x30, 0x18, 0xb7, 0x70 ), + AUTH ( 0xd5, 0x80, 0x8a, 0x1b, 0xd1, 0x1a, 0x01, 0x12, 0x9b, 0xf3, + 0xc6, 0x91, 0x9a, 0xff, 0x23, 0x39 ) ); + +/* AES-GCM test case 241 */ +CIPHER_TEST ( wycheproof_aes_gcm_6c7b5516, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x57, 0xb3, 0xa8, 0x1f, 0x2c, 0x36, 0xb6, 0xb0, 0x65, 0x77, + 0xca, 0x0f, 0xba, 0xb8, 0xfa, 0x8e ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xcc, 0xee, 0xbe, 0xb4, 0xfe, 0x4c, 0xd9, 0x0c, 0x51, + 0x4e, 0x52, 0xd2, 0x32, 0x7a, 0x2e, 0xcd, 0x75, 0x39, + 0x36, 0x61, 0x00, 0x6c, 0xf2, 0x47, 0x6d, 0x86, 0x20, + 0x14, 0x9a, 0xef, 0x3d, 0x1c, 0xdc, 0xe4, 0x91, 0xff, + 0xf3, 0xe7, 0xa7, 0xa3 ), + AUTH ( 0x81, 0x32, 0xe8, 0x65, 0xb6, 0x9d, 0x64, 0xef, 0x37, 0xdb, + 0x26, 0x1f, 0x80, 0xcb, 0xbe, 0x24 ) ); + +/* AES-GCM test case 242 */ +CIPHER_TEST ( wycheproof_aes_gcm_3d134168, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0xce, 0x20, 0xa7, 0xe8, 0x70, 0x69, 0x6a, 0x5e, 0x68, 0x53, + 0x3c, 0x46, 0x5b, 0xad, 0x2b, 0xa1 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x4f, 0x43, 0x50, 0x56, 0x5d, 0x91, 0xd9, 0xaa, 0x8c, + 0x5f, 0x40, 0x48, 0x55, 0x04, 0x92, 0xad, 0x6d, 0x6f, + 0xda, 0xbf, 0x66, 0xda, 0x5d, 0x1e, 0x2a, 0xf7, 0xbf, + 0xe1, 0xa8, 0xaa, 0xda, 0xa0, 0xba, 0xa3, 0xde, 0x38, + 0xa4, 0x1d, 0x97, 0x13 ), + AUTH ( 0x15, 0x5d, 0xa6, 0x44, 0x1e, 0xc0, 0x71, 0xef, 0x2d, 0x8e, + 0x6c, 0xff, 0xba, 0xcc, 0x1c, 0x7c ) ); + +/* AES-GCM test case 243 */ +CIPHER_TEST ( wycheproof_aes_gcm_637cdd7c, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x91, 0x8e, 0x3c, 0x19, 0xdb, 0xdf, 0xee, 0x2d, 0xb1, 0x81, + 0x56, 0xc5, 0xb9, 0x3f, 0x3d, 0x75 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x83, 0x16, 0xa5, 0x31, 0x67, 0xb6, 0xde, 0x1a, 0x75, + 0x75, 0x70, 0x06, 0x93, 0xff, 0xef, 0x27, 0x4f, 0x43, + 0x50, 0x56, 0x5d, 0x91, 0xd9, 0xaa, 0x8c, 0x5f, 0x40, + 0x48, 0x55, 0x04, 0x92, 0xad, 0x6d, 0x6f, 0xda, 0xbf, + 0x66, 0xda, 0x5d, 0x1e ), + AUTH ( 0x6c, 0x57, 0x4a, 0xa6, 0xa2, 0x49, 0x0c, 0xc3, 0xb2, 0xf2, + 0xf8, 0xf0, 0xff, 0xbc, 0x56, 0xc4 ) ); + +/* AES-GCM test case 244 */ +CIPHER_TEST ( wycheproof_aes_gcm_a524a3e1, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x71, 0x7d, 0x90, 0x0b, 0x27, 0x04, 0x62, 0xb9, 0xdb, 0xf7, + 0xe9, 0x41, 0x9e, 0x89, 0x06, 0x09 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x51, 0x75, 0x92, 0x75, 0x13, 0xe7, 0x51, 0xeb, 0x30, + 0x9f, 0x45, 0xbc, 0x2e, 0xf2, 0x25, 0xf2, 0x83, 0x16, + 0xa5, 0x31, 0x67, 0xb6, 0xde, 0x1a, 0x75, 0x75, 0x70, + 0x06, 0x93, 0xff, 0xef, 0x27, 0x4f, 0x43, 0x50, 0x56, + 0x5d, 0x91, 0xd9, 0xaa ), + AUTH ( 0x80, 0x82, 0xa7, 0x61, 0xe1, 0xd7, 0x55, 0x34, 0x4b, 0xf2, + 0x96, 0x22, 0x14, 0x4e, 0x7d, 0x39 ) ); + +/* AES-GCM test case 245 */ +CIPHER_TEST ( wycheproof_aes_gcm_b5f09448, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0xec, 0xd5, 0x21, 0x20, 0xaf, 0x24, 0x0e, 0x9b, 0x4b, 0xf3, + 0xb9, 0xd1, 0xee, 0xb4, 0x94, 0x34 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x36, 0xb3, 0xfb, 0xec, 0xd0, 0x91, 0x78, 0xd0, 0x45, + 0x27, 0xfb, 0x37, 0x54, 0x4f, 0x55, 0x79, 0xd2, 0x0d, + 0x60, 0xa4, 0x12, 0x66, 0xf6, 0x85, 0xc4, 0x80, 0x98, + 0xe1, 0xa5, 0x28, 0x04, 0xca, 0x38, 0x7d, 0x90, 0x70, + 0x9d, 0x32, 0x68, 0xdd ), + AUTH ( 0x03, 0x3e, 0x0e, 0xf2, 0x95, 0x3e, 0xbf, 0xd8, 0x42, 0x57, + 0x37, 0xc7, 0xd3, 0x93, 0xf8, 0x9a ) ); + +/* AES-GCM test case 246 */ +CIPHER_TEST ( wycheproof_aes_gcm_c90d1019, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0xb3, 0x7b, 0xba, 0xd1, 0x04, 0x92, 0x8a, 0xe8, 0x92, 0x21, + 0xd3, 0x52, 0x0c, 0x26, 0x82, 0xe0 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x16, 0x92, 0x9b, 0x77, 0x30, 0x51, 0xf1, 0x2b, 0x0a, + 0xda, 0xc9, 0x5f, 0x65, 0xe2, 0x1a, 0x7f, 0x36, 0xb3, + 0xfb, 0xec, 0xd0, 0x91, 0x78, 0xd0, 0x45, 0x27, 0xfb, + 0x37, 0x54, 0x4f, 0x55, 0x79, 0xd2, 0x0d, 0x60, 0xa4, + 0x12, 0x66, 0xf6, 0x85 ), + AUTH ( 0xca, 0x44, 0x8b, 0xb7, 0xe5, 0x2e, 0x89, 0x7e, 0xca, 0x23, + 0x4e, 0xf3, 0x43, 0xd0, 0x57, 0xd0 ) ); + +/* AES-GCM test case 247 */ +CIPHER_TEST ( wycheproof_aes_gcm_cc16f896, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x53, 0x88, 0x16, 0xc3, 0xf8, 0x49, 0x06, 0x7c, 0xf8, 0x57, + 0x6c, 0xd6, 0x2b, 0x90, 0xb9, 0x9c ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x6d, 0x3f, 0xae, 0xfa, 0xf6, 0x91, 0xd5, 0x81, 0x63, + 0x84, 0x6f, 0x8d, 0x4b, 0x9f, 0xfd, 0x59, 0x16, 0x92, + 0x9b, 0x77, 0x30, 0x51, 0xf1, 0x2b, 0x0a, 0xda, 0xc9, + 0x5f, 0x65, 0xe2, 0x1a, 0x7f, 0x36, 0xb3, 0xfb, 0xec, + 0xd0, 0x91, 0x78, 0xd0 ), + AUTH ( 0x84, 0xf4, 0x97, 0x40, 0xe6, 0x75, 0x7f, 0x63, 0xdd, 0x0d, + 0xf7, 0xcb, 0x76, 0x56, 0xd0, 0xef ) ); + +/* AES-GCM test case 248 */ +CIPHER_TEST ( wycheproof_aes_gcm_c9b9c25b, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0xd1, 0x0e, 0x63, 0x19, 0x43, 0xcd, 0x3b, 0xda, 0xba, 0xba, + 0xb2, 0xbb, 0xd1, 0x39, 0x51, 0xc0 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xd6, 0x01, 0x96, 0xc2, 0xd1, 0x4f, 0xcf, 0x30, 0xc0, + 0x99, 0x1d, 0x27, 0x21, 0xdd, 0xc5, 0x2d, 0x38, 0x5f, + 0x40, 0x7a, 0x16, 0x69, 0x1d, 0xad, 0xe8, 0x2c, 0x90, + 0x23, 0xc8, 0x55, 0xfd, 0x8e, 0x2e, 0x8f, 0xbb, 0x56, + 0x21, 0x02, 0xf0, 0x18 ), + AUTH ( 0x87, 0x7e, 0x15, 0xd9, 0x88, 0x9e, 0x69, 0xa9, 0x9f, 0xcc, + 0x6d, 0x72, 0x74, 0x65, 0xc3, 0x91 ) ); + +/* AES-GCM test case 249 */ +CIPHER_TEST ( wycheproof_aes_gcm_9bcfa234, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x8e, 0xa0, 0xf8, 0xe8, 0xe8, 0x7b, 0xbf, 0xa9, 0x63, 0x68, + 0xd8, 0x38, 0x33, 0xab, 0x47, 0x14 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x94, 0x8f, 0xbc, 0xec, 0xa1, 0x2a, 0x6e, 0x4f, 0xab, + 0xb7, 0x9b, 0x6d, 0x96, 0x5e, 0x33, 0x6f, 0xd6, 0x01, + 0x96, 0xc2, 0xd1, 0x4f, 0xcf, 0x30, 0xc0, 0x99, 0x1d, + 0x27, 0x21, 0xdd, 0xc5, 0x2d, 0x38, 0x5f, 0x40, 0x7a, + 0x16, 0x69, 0x1d, 0xad ), + AUTH ( 0xcd, 0x57, 0x57, 0x62, 0x69, 0x45, 0x97, 0x6b, 0xa9, 0xf0, + 0x26, 0x4b, 0xd6, 0xbe, 0xe8, 0x94 ) ); + +/* AES-GCM test case 250 */ +CIPHER_TEST ( wycheproof_aes_gcm_02e3c344, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x7b, 0x2d, 0xf4, 0xfb, 0xed, 0x1d, 0xe2, 0x72, 0x7e, 0xb2, + 0x48, 0x98, 0xe5, 0xde, 0xab, 0xb9 ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0xa1, 0xa0, 0x12, 0x06, 0x60, 0xff, 0x52, 0xe6, 0xb1, + 0x70, 0x0b, 0x12, 0xc5, 0x4d, 0x2d, 0x33, 0xb9, 0x4b, + 0x00, 0xcd, 0x78, 0x82, 0xd8, 0x85, 0x7d, 0x84, 0xe6, + 0xe1, 0x83, 0xa1, 0xde, 0xa6, 0xee, 0x85, 0xa7, 0xda, + 0x84, 0xfb, 0xc3, 0x5d ), + AUTH ( 0xb0, 0x15, 0xd7, 0x2d, 0xa6, 0x2c, 0x81, 0xcb, 0x4d, 0x26, + 0x72, 0x53, 0xb2, 0x0d, 0xb9, 0xe5 ) ); + +/* AES-GCM test case 251 */ +CIPHER_TEST ( wycheproof_aes_gcm_0a6597f4, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x24, 0x83, 0x6f, 0x0a, 0x46, 0xab, 0x66, 0x01, 0xa7, 0x60, + 0x22, 0x1b, 0x07, 0x4c, 0xbd, 0x6d ), + ADDITIONAL(), + PLAINTEXT ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 ), + CIPHERTEXT ( 0x5e, 0x34, 0x34, 0xb4, 0x5e, 0xdb, 0xf0, 0xd1, 0xf6, + 0xe0, 0x2d, 0x11, 0x44, 0xdb, 0xf8, 0x67, 0xa1, 0xa0, + 0x12, 0x06, 0x60, 0xff, 0x52, 0xe6, 0xb1, 0x70, 0x0b, + 0x12, 0xc5, 0x4d, 0x2d, 0x33, 0xb9, 0x4b, 0x00, 0xcd, + 0x78, 0x82, 0xd8, 0x85 ), + AUTH ( 0xee, 0x74, 0xcc, 0xb3, 0x0d, 0x64, 0x9e, 0xbf, 0x69, 0x16, + 0xd0, 0x5a, 0x7d, 0xbe, 0x56, 0x96 ) ); + +/* AES-GCM test case 252 */ +CIPHER_TEST ( wycheproof_aes_gcm_4723a634, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ), + ADDITIONAL(), + PLAINTEXT ( 0x8d, 0x74, 0xf1, 0xc9, 0x72, 0x43, 0xd3, 0x62, 0x57, + 0x7f, 0xf3, 0x76, 0xc3, 0x93, 0xd2, 0xdc ), + CIPHERTEXT ( 0x26, 0x5c, 0x42, 0xe2, 0xb9, 0x6e, 0xa1, 0xde, 0x9c, + 0x24, 0xf7, 0x18, 0x2e, 0x33, 0x73, 0x90 ), + AUTH ( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ) ); + +/* AES-GCM test case 253 */ +CIPHER_TEST ( wycheproof_aes_gcm_b7cd0c19, &aes_gcm_algorithm, + KEY ( 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, + 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff, 0x10, 0x21, 0x32, 0x43, + 0x54, 0x65, 0x76, 0x87, 0x98, 0xa9, 0xba, 0xcb, 0xdc, 0xed, + 0xfe, 0x0f ), + IV ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ), + ADDITIONAL(), + PLAINTEXT ( 0x88, 0x4d, 0xf0, 0xe7, 0x6f, 0x3c, 0xe2, 0x27, 0xbf, + 0x95, 0x95, 0xd1, 0x03, 0x82, 0x5a, 0x46 ), + CIPHERTEXT ( 0x98, 0x8f, 0x47, 0x66, 0x8e, 0xa6, 0x50, 0xcb, 0xaa, + 0x67, 0x14, 0x71, 0x1a, 0xbe, 0x26, 0x8d ), + AUTH ( 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff ) ); + +/* AES-GCM test case 254 */ +CIPHER_TEST ( wycheproof_aes_gcm_bcf63dc2, &aes_gcm_algorithm, + KEY ( 0xb4, 0xcd, 0x11, 0xdb, 0x0b, 0x3e, 0x0b, 0x9b, 0x34, 0xea, + 0xfd, 0x9f, 0xe0, 0x27, 0x74, 0x69, 0x76, 0x37, 0x91, 0x55, + 0xe7, 0x61, 0x16, 0xaf, 0xde, 0x1b, 0x96, 0xd2, 0x12, 0x98, + 0xe3, 0x4f ), + IV ( 0x00, 0xc4, 0x9f, 0x4e, 0xbb, 0x07, 0x39, 0x3f, 0x07, 0xeb, + 0xc3, 0x82, 0x5f, 0x7b, 0x08, 0x30 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x30, 0x6f, 0xe8, 0xc9, 0x64, 0x5c, 0xc8, 0x49, 0x82, 0x3e, + 0x33, 0x3a, 0x68, 0x5b, 0x90, 0xb2 ) ); + +/* AES-GCM test case 255 */ +CIPHER_TEST ( wycheproof_aes_gcm_294b997d, &aes_gcm_algorithm, + KEY ( 0xb7, 0x79, 0x7e, 0xb0, 0xc1, 0xa6, 0x08, 0x9a, 0xd5, 0x45, + 0x2d, 0x81, 0xfd, 0xb1, 0x48, 0x28, 0xc0, 0x40, 0xdd, 0xc4, + 0x58, 0x9c, 0x32, 0xb5, 0x65, 0xaa, 0xd8, 0xcb, 0x4d, 0xe3, + 0xe4, 0xa0 ), + IV ( 0x0a, 0xd5, 0x70, 0xd8, 0x86, 0x39, 0x18, 0xfe, 0x89, 0x12, + 0x4e, 0x09, 0xd1, 0x25, 0xa2, 0x71 ), + ADDITIONAL(), + PLAINTEXT ( 0xed ), + CIPHERTEXT ( 0x3f ), + AUTH ( 0xfd, 0x8f, 0x59, 0x3b, 0x83, 0x31, 0x4e, 0x33, 0xc5, 0xa7, + 0x2e, 0xfb, 0xeb, 0x70, 0x95, 0xe8 ) ); + +/* AES-GCM test case 256 */ +CIPHER_TEST ( wycheproof_aes_gcm_c973e6d5, &aes_gcm_algorithm, + KEY ( 0x4c, 0x01, 0x0d, 0x95, 0x61, 0xc7, 0x23, 0x4c, 0x30, 0x8c, + 0x01, 0xce, 0xa3, 0x04, 0x0c, 0x92, 0x5a, 0x9f, 0x32, 0x4d, + 0xc9, 0x58, 0xff, 0x90, 0x4a, 0xe3, 0x9b, 0x37, 0xe6, 0x0e, + 0x1e, 0x03 ), + IV ( 0x2a, 0x55, 0xca, 0xa1, 0x37, 0xc5, 0xb0, 0xb6, 0x6c, 0xf3, + 0x80, 0x9e, 0xb8, 0xf7, 0x30, 0xc4 ), + ADDITIONAL(), + PLAINTEXT ( 0x2a, 0x09, 0x3c, 0x9e, 0xd7, 0x2b, 0x8f, 0xf4, 0x99, + 0x42, 0x01, 0xe9, 0xf9, 0xe0, 0x10 ), + CIPHERTEXT ( 0x04, 0x13, 0x41, 0x07, 0x8f, 0x04, 0x39, 0xe5, 0x0b, + 0x43, 0xc9, 0x91, 0x63, 0x51, 0x17 ), + AUTH ( 0x5b, 0x8a, 0x2f, 0x2d, 0xa2, 0x0e, 0xf6, 0x57, 0xc9, 0x03, + 0xda, 0x88, 0xef, 0x5f, 0x57, 0xbb ) ); + +/* AES-GCM test case 257 */ +CIPHER_TEST ( wycheproof_aes_gcm_9d586636, &aes_gcm_algorithm, + KEY ( 0xe7, 0xf7, 0xa4, 0x8d, 0xf9, 0x9e, 0xdd, 0x92, 0xb8, 0x1f, + 0x50, 0x86, 0x18, 0xaa, 0x96, 0x52, 0x6b, 0x27, 0x9d, 0xeb, + 0xd9, 0xdd, 0xb2, 0x92, 0xd3, 0x85, 0xdd, 0xba, 0xe8, 0x0b, + 0x22, 0x59 ), + IV ( 0x7e, 0xe3, 0x76, 0x91, 0x0f, 0x08, 0xf4, 0x97, 0xaa, 0x6c, + 0x3a, 0xa7, 0x11, 0x36, 0x97, 0xfd ), + ADDITIONAL(), + PLAINTEXT ( 0x5e, 0x51, 0xdb, 0xbb, 0x86, 0x1b, 0x5e, 0xc6, 0x07, + 0x51, 0xc0, 0x99, 0x6e, 0x00, 0x52, 0x7f ), + CIPHERTEXT ( 0x46, 0x94, 0x78, 0xd4, 0x48, 0xf7, 0xe9, 0x7d, 0x75, + 0x55, 0x41, 0xaa, 0x09, 0xad, 0x95, 0xb0 ), + AUTH ( 0x25, 0x4a, 0xda, 0x5c, 0xf6, 0x62, 0xd9, 0x0c, 0x5e, 0x11, + 0xb2, 0xbd, 0x9c, 0x4d, 0xb4, 0xc4 ) ); + +/* AES-GCM test case 258 */ +CIPHER_TEST ( wycheproof_aes_gcm_07918c73, &aes_gcm_algorithm, + KEY ( 0x4f, 0x84, 0x78, 0x2b, 0xfb, 0xb6, 0x4a, 0x97, 0x3c, 0x3d, + 0xe3, 0xdc, 0xfa, 0x34, 0x30, 0x36, 0x7f, 0xd6, 0x8b, 0xc0, + 0xb4, 0xc3, 0xb3, 0x1e, 0x5d, 0x7c, 0x81, 0x41, 0xba, 0x3e, + 0x6a, 0x67 ), + IV ( 0x5d, 0x1b, 0xde, 0x6f, 0xa0, 0x99, 0x4b, 0x33, 0xef, 0xd8, + 0xf2, 0x3f, 0x53, 0x12, 0x48, 0xa7 ), + ADDITIONAL(), + PLAINTEXT ( 0x78, 0xcb, 0x66, 0x50, 0xa1, 0x90, 0x8a, 0x84, 0x21, + 0x01, 0xea, 0x85, 0x80, 0x4f, 0xed, 0x00, 0xcc, 0x56, + 0xfb, 0xda, 0xfa, 0xfb, 0xa0, 0xef, 0x4d, 0x1c, 0xa6, + 0x07, 0xdc, 0xae, 0x57, 0xb6 ), + CIPHERTEXT ( 0xcb, 0x96, 0x02, 0x01, 0xfa, 0x5a, 0xd4, 0x1d, 0x41, + 0xd1, 0xc2, 0xc8, 0x03, 0x7c, 0x71, 0xd5, 0x2b, 0x72, + 0xe7, 0x6b, 0x16, 0xb5, 0x89, 0xd7, 0x1b, 0x97, 0x66, + 0x27, 0xc9, 0x73, 0x4c, 0x9d ), + AUTH ( 0x8d, 0xfc, 0xe1, 0x64, 0x67, 0xc3, 0xa6, 0xeb, 0xb3, 0xe7, + 0x24, 0x2c, 0x9a, 0x55, 0x19, 0x62 ) ); + +/* AES-GCM test case 259 */ +CIPHER_TEST ( wycheproof_aes_gcm_807f66c0, &aes_gcm_algorithm, + KEY ( 0x34, 0xc7, 0x4e, 0x28, 0x18, 0x29, 0x48, 0xe0, 0x3a, 0xf0, + 0x2a, 0x01, 0xf4, 0x6e, 0xb4, 0xf7 ), + IV ( 0xb0, 0xa7, 0x31, 0x19, 0xa9, 0x7d, 0x62, 0x38, 0x06, 0xb4, + 0x9d, 0x45, 0xdd, 0xf4, 0xc7 ), + ADDITIONAL(), + PLAINTEXT ( 0xfe, 0x82, 0xba, 0x66, 0xcf, 0x2e, 0x26, 0x57, 0x41, + 0xf2, 0xc8, 0x6c ), + CIPHERTEXT ( 0x2b, 0xc3, 0xef, 0x8e, 0x74, 0x02, 0xb4, 0x63, 0x1f, + 0x48, 0xe9, 0xbe ), + AUTH ( 0x4b, 0x6f, 0x6f, 0x5b, 0xe2, 0x91, 0xa9, 0x0b, 0x9e, 0x93, + 0xa8, 0xa8, 0x2d, 0xdb, 0xc8, 0xd8 ) ); + +/* AES-GCM test case 260 */ +CIPHER_TEST ( wycheproof_aes_gcm_1a607e05, &aes_gcm_algorithm, + KEY ( 0x55, 0xcb, 0x7c, 0xac, 0x77, 0xef, 0xe1, 0x8a, 0x1e, 0xa3, + 0xb3, 0x0c, 0x65, 0xf3, 0xf3, 0x46 ), + IV ( 0xe2, 0x2b, 0x6b, 0x14, 0x4a, 0xb2, 0x6b, 0x57, 0x81, 0x31, + 0x6e, 0x7a, 0x42, 0xa7, 0x62, 0x02, 0xac, 0x4b, 0x22, 0x78 ), + ADDITIONAL(), + PLAINTEXT ( 0x2f, 0x3d, 0x11, 0xea, 0x32, 0xbf, 0x5b, 0xc7, 0x2c, + 0xbe, 0x2b, 0x8d ), + CIPHERTEXT ( 0x4f, 0xe1, 0x3e, 0xf2, 0x9f, 0x11, 0x8f, 0x85, 0xa6, + 0x31, 0x88, 0xf8 ), + AUTH ( 0x05, 0x97, 0x5b, 0x17, 0x53, 0x16, 0xdf, 0x80, 0x45, 0x88, + 0x9f, 0x43, 0xe0, 0xc8, 0x57, 0xe0 ) ); + +/* AES-GCM test case 261 */ +CIPHER_TEST ( wycheproof_aes_gcm_848e090c, &aes_gcm_algorithm, + KEY ( 0x66, 0xf7, 0x5a, 0xcb, 0xd8, 0xd3, 0xac, 0xf7, 0xaf, 0x47, + 0xd1, 0x3e, 0x83, 0x84, 0xc2, 0x80, 0x9d, 0x6b, 0x91, 0x50, + 0x3a, 0x7f, 0x29, 0x4b ), + IV ( 0xed, 0xf9, 0x3e, 0x16, 0x29, 0x4f, 0x15, 0xed, 0xed, 0x83, + 0x80, 0x8f, 0x09, 0x32, 0x0e ), + ADDITIONAL(), + PLAINTEXT ( 0xa9, 0x00, 0xc8, 0x6b, 0x6b, 0x7e, 0x0e, 0x55, 0x63, + 0xf8, 0xf8, 0x26 ), + CIPHERTEXT ( 0x9a, 0xf1, 0xa0, 0x22, 0xc6, 0x1c, 0x43, 0x15, 0xaa, + 0x0e, 0x92, 0x3e ), + AUTH ( 0x20, 0x52, 0x9b, 0xff, 0x3c, 0x59, 0x22, 0x2e, 0xc3, 0x33, + 0x53, 0xaf, 0x33, 0x7b, 0x1d, 0x40 ) ); + +/* AES-GCM test case 262 */ +CIPHER_TEST ( wycheproof_aes_gcm_b238bfb2, &aes_gcm_algorithm, + KEY ( 0xef, 0x2e, 0x29, 0x9d, 0xd4, 0xec, 0xd7, 0xe3, 0xb9, 0xcc, + 0x62, 0x78, 0x09, 0x22, 0xcc, 0x2c, 0x89, 0xf7, 0x88, 0x40, + 0x56, 0x4d, 0x12, 0x76 ), + IV ( 0x13, 0x0c, 0x14, 0xc8, 0x39, 0xe3, 0x5b, 0x7d, 0x56, 0xb3, + 0x35, 0x0b, 0x19, 0x4b, 0x0d, 0xa3, 0x42, 0xe6, 0xb6, 0x5d ), + ADDITIONAL(), + PLAINTEXT ( 0x03, 0xf5, 0x95, 0x79, 0xb1, 0x44, 0x37, 0x19, 0x95, + 0x83, 0x27, 0x0e ), + CIPHERTEXT ( 0x07, 0x3a, 0x52, 0x91, 0xb1, 0x1d, 0xf3, 0x79, 0xf3, + 0x1b, 0x4f, 0x16 ), + AUTH ( 0x17, 0x20, 0x59, 0x99, 0x49, 0x1b, 0xd4, 0xc1, 0xd6, 0xc7, + 0xec, 0x3e, 0x56, 0x77, 0x9c, 0x32 ) ); + +/* AES-GCM test case 263 */ +CIPHER_TEST ( wycheproof_aes_gcm_50ca31ab, &aes_gcm_algorithm, + KEY ( 0xe9, 0x8b, 0x06, 0x69, 0xa6, 0x45, 0xeb, 0x14, 0xcd, 0x06, + 0xdf, 0x69, 0x68, 0xfc, 0x5f, 0x10, 0xed, 0xc9, 0xf5, 0x4f, + 0xee, 0xd2, 0x64, 0xe3, 0xd4, 0x10, 0xcd, 0xc6, 0x1b, 0x72, + 0xef, 0x51 ), + IV ( 0x17, 0xca, 0x25, 0x0f, 0xb7, 0x33, 0x87, 0x75, 0x56, 0x26, + 0x32, 0x23, 0xea, 0xdd, 0xe1 ), + ADDITIONAL(), + PLAINTEXT ( 0xf3, 0x84, 0xb3, 0xed, 0x7b, 0x27, 0x46, 0x41, 0xf5, + 0xdb, 0x60, 0xcf ), + CIPHERTEXT ( 0xfc, 0x21, 0x36, 0x02, 0xaa, 0x42, 0x3b, 0x87, 0xd7, + 0xc2, 0xa8, 0x74 ), + AUTH ( 0x36, 0xb1, 0x5b, 0xab, 0x69, 0x23, 0xb1, 0x72, 0x18, 0xfe, + 0x1c, 0x24, 0x04, 0x8e, 0x23, 0x91 ) ); + +/* AES-GCM test case 264 */ +CIPHER_TEST ( wycheproof_aes_gcm_7a0a5da7, &aes_gcm_algorithm, + KEY ( 0x84, 0x9b, 0x3e, 0x6b, 0x8c, 0xdd, 0x85, 0xbd, 0xcf, 0xb8, + 0xeb, 0x70, 0x1a, 0xa5, 0x52, 0x2a, 0xe2, 0x34, 0x0f, 0xbe, + 0x52, 0x14, 0xe3, 0x89, 0x62, 0x2c, 0xef, 0x76, 0x97, 0x92, + 0x25, 0xc4 ), + IV ( 0x0f, 0x9d, 0x6e, 0xd7, 0xee, 0xf3, 0x62, 0xdf, 0xa4, 0xa7, + 0xdf, 0xa5, 0xc0, 0xf7, 0x4c, 0x5b, 0x27, 0xbd, 0x4e, 0xbf ), + ADDITIONAL(), + PLAINTEXT ( 0x8c, 0x55, 0x64, 0xe5, 0x30, 0x51, 0xc0, 0xde, 0x27, + 0x31, 0x99, 0xb4 ), + CIPHERTEXT ( 0xc1, 0xd7, 0x62, 0x33, 0xe8, 0xc5, 0x04, 0x2e, 0x92, + 0xbf, 0x8d, 0x32 ), + AUTH ( 0x7c, 0xf0, 0x36, 0xd2, 0x35, 0xd3, 0xb2, 0xdd, 0x34, 0x9a, + 0x8c, 0x80, 0x4b, 0x65, 0x14, 0x4a ) ); + +/* AES-GCM test case 265 */ +CIPHER_TEST ( wycheproof_aes_gcm_1b7eb29c, &aes_gcm_algorithm, + KEY ( 0x59, 0x27, 0xba, 0xe7, 0x48, 0xbb, 0x69, 0xd8, 0x1b, 0x5a, + 0x72, 0x4e, 0x0a, 0x16, 0x56, 0x52 ), + IV ( 0x36, 0x5e, 0x0b, 0x96, 0x93, 0x2b, 0x13, 0x30, 0x6f, 0x92, + 0xe9, 0xbb, 0x23, 0x84, 0x71, 0x65, 0xbc, 0xbf, 0x5d, 0x35, + 0xe4, 0x5a, 0x83, 0xd7, 0x5c, 0x86, 0xec, 0xca, 0x70, 0x13, + 0x1f, 0x4c ), + ADDITIONAL(), + PLAINTEXT ( 0x31, 0x6b, 0xf9, 0x9b, 0xfa, 0xfc, 0x76, 0xf1, 0xbf, + 0xc0, 0xb0, 0x3c ), + CIPHERTEXT ( 0x53, 0x48, 0xaf, 0x57, 0xfa, 0xfe, 0x24, 0x85, 0xb4, + 0x3f, 0x2b, 0xc4 ), + AUTH ( 0x01, 0x9a, 0x96, 0xc5, 0x37, 0x3c, 0x03, 0x16, 0x26, 0xb6, + 0xc0, 0x30, 0x0d, 0x4c, 0xf7, 0x8b ) ); + +/* AES-GCM test case 266 */ +CIPHER_TEST ( wycheproof_aes_gcm_22ddd4ff, &aes_gcm_algorithm, + KEY ( 0xdb, 0xd3, 0x67, 0x6f, 0x29, 0x34, 0x09, 0x27, 0x3f, 0x27, + 0xb3, 0x75, 0xe0, 0x37, 0x93, 0xa3 ), + IV ( 0x96, 0x7f, 0xa7, 0xc9, 0x90, 0xeb, 0x2b, 0xec, 0xbd, 0x45, + 0x08, 0x35, 0xe2, 0x8e, 0xa3, 0xa9, 0x00, 0x0c, 0x72, 0x16, + 0x28, 0x5c, 0xfa, 0x76, 0x96, 0xe8, 0xc3, 0xda, 0xc3, 0xce, + 0x95, 0x2a, 0x1f, 0xe6, 0x38, 0xd7, 0xc8, 0xc7, 0x3e, 0x1d, + 0x70, 0x8d, 0xce, 0x01, 0xb5, 0xa2, 0x0f, 0xcc, 0x9a, 0xa0, + 0x11, 0x94, 0x9d, 0x2a, 0x83, 0x5f, 0x77, 0x74, 0x23, 0xc1, + 0x72, 0xfa, 0x3a, 0xa0 ), + ADDITIONAL(), + PLAINTEXT ( 0x62, 0x5e, 0xfe, 0xdb, 0x8b, 0x7f, 0x1a, 0xa6, 0x22, + 0x38, 0xa8, 0xf2 ), + CIPHERTEXT ( 0xf5, 0x59, 0xb7, 0x0f, 0xe1, 0x14, 0x9c, 0xb3, 0x44, + 0x06, 0xa2, 0xc7 ), + AUTH ( 0x94, 0x18, 0x0d, 0xdb, 0x7b, 0xb1, 0x99, 0x5a, 0xbe, 0x02, + 0x19, 0xea, 0xb5, 0xce, 0x23, 0x2f ) ); + +/* AES-GCM test case 267 */ +CIPHER_TEST ( wycheproof_aes_gcm_047fcc3d, &aes_gcm_algorithm, + KEY ( 0x7e, 0x5a, 0x39, 0xdc, 0xda, 0x7e, 0x06, 0x69, 0x88, 0xf1, + 0x9a, 0xdf, 0x4d, 0xe4, 0xd5, 0x01 ), + IV ( 0x49, 0x43, 0x56, 0xc3, 0x45, 0x9d, 0x60, 0xe3, 0xa8, 0x34, + 0x33, 0xc9, 0xbc, 0xf2, 0xc0, 0x45, 0x4a, 0x76, 0x3e, 0x49, + 0x6e, 0x4e, 0xc9, 0x9b, 0xfb, 0xe4, 0xbb, 0xb8, 0x3a, 0x4f, + 0xda, 0x76, 0xb5, 0x42, 0x21, 0x38, 0x99, 0xdc, 0xf5, 0x52, + 0x1c, 0xd9, 0xbb, 0xbe, 0x5d, 0x11, 0x54, 0x5b, 0xda, 0x44, + 0xa3, 0xf4, 0xa6, 0x81, 0xce, 0x28, 0x43, 0xac, 0xea, 0x73, + 0x0d, 0x83, 0xd3, 0x93, 0x0e, 0xa3, 0x09, 0x91, 0xee, 0x1a, + 0x68, 0xeb, 0xf6, 0xd1, 0xa5, 0xa4, 0x0f, 0x9b, 0x02, 0xa1, + 0xaa, 0xb0, 0x91, 0x29, 0x8d, 0xf8, 0xdd, 0x68, 0x9d, 0xc7, + 0x61, 0x3b, 0xcb, 0xff, 0x94, 0xd3, 0x5f, 0x2c, 0xa4, 0x33, + 0x77, 0xd8, 0x16, 0x18, 0x56, 0x2b, 0xcf, 0x65, 0x73, 0x41, + 0x1e, 0xc9, 0xbc, 0x97, 0xc5, 0xa6, 0x27, 0x6b, 0x55, 0x40, + 0x54, 0xc0, 0xfa, 0x78, 0x70, 0x73, 0xd0, 0x67 ), + ADDITIONAL(), + PLAINTEXT ( 0xb0, 0x47, 0x29, 0xb4, 0xad, 0xba, 0xac, 0x63, 0xc2, + 0xaa, 0xf8, 0xd8 ), + CIPHERTEXT ( 0x52, 0x91, 0xdd, 0x4d, 0xa9, 0x1c, 0xcc, 0x2e, 0x77, + 0x30, 0x6d, 0x83 ), + AUTH ( 0xa7, 0xf7, 0xb2, 0x1a, 0x3b, 0x7e, 0xce, 0x50, 0x9e, 0x92, + 0x26, 0x47, 0xfd, 0x90, 0x5f, 0x06 ) ); + +/* AES-GCM test case 268 */ +CIPHER_TEST ( wycheproof_aes_gcm_b09553f4, &aes_gcm_algorithm, + KEY ( 0xea, 0xc3, 0xf2, 0x8c, 0xd9, 0x37, 0xff, 0x29, 0xeb, 0x61, + 0x58, 0xa3, 0x72, 0x1b, 0x51, 0x45 ), + IV ( 0x6f, 0xd2, 0x60, 0xbb, 0xa8, 0x73, 0x39, 0x53, 0x9c, 0x37, + 0xdc, 0x68, 0xfd, 0xc3, 0x65, 0x6f, 0x63, 0xc8, 0x30, 0x28, + 0xcb, 0x8a, 0xdc, 0xb5, 0x31, 0x08, 0x5e, 0x98, 0xbd, 0x57, + 0x0c, 0x6b, 0x73, 0x5d, 0x0c, 0xc4, 0xb4, 0xb9, 0x24, 0x69, + 0x60, 0x00, 0xa2, 0xd8, 0x93, 0x62, 0x1a, 0xe6, 0x4d, 0xcc, + 0xe9, 0x92, 0xb5, 0x62, 0xb8, 0x9a, 0x52, 0x85, 0x64, 0x3a, + 0x08, 0xfe, 0xbc, 0xcb, 0xc5, 0x22, 0x43, 0xcb, 0xfc, 0x8d, + 0x45, 0x21, 0x2e, 0x04, 0x7b, 0x00, 0xc8, 0x7c, 0x6b, 0x6b, + 0xf1, 0x75, 0xf8, 0xbb, 0x67, 0x8e, 0xc5, 0x5c, 0x10, 0x91, + 0x31, 0x5c, 0xbe, 0xcb, 0x8b, 0x85, 0x70, 0x0f, 0x4a, 0x46, + 0x53, 0x62, 0x3f, 0xb7, 0x8e, 0x63, 0xcf, 0xff, 0x7d, 0x62, + 0x35, 0xe4, 0x8e, 0x98, 0x32, 0xc9, 0xf0, 0x71, 0x6d, 0x10, + 0x99, 0x2f, 0xc5, 0xb0, 0xad, 0x4e, 0x69, 0x72, 0xbb, 0xee, + 0xb1, 0xad, 0x67, 0x0c, 0xd7, 0xec, 0x8f, 0xac, 0x82, 0xe0, + 0x7e, 0xa5, 0xa6, 0x4f, 0x97, 0x61, 0xa3, 0x97, 0x14, 0xaa, + 0xa7, 0x3a, 0xff, 0xd2, 0xcb, 0x19, 0x0a, 0x7a, 0xc2, 0xdf, + 0x5e, 0x5d, 0xce, 0xa6, 0x81, 0x2a, 0xe2, 0xc8, 0x72, 0xc7, + 0xac, 0x70, 0x45, 0x3c, 0x5e, 0x7e, 0xc4, 0xd0, 0xb5, 0xb1, + 0x8c, 0x6f, 0xf3, 0xbf, 0xb9, 0xae, 0x15, 0xfe, 0xa4, 0x4c, + 0xf3, 0x92, 0x61, 0x5b, 0x80, 0x03, 0x4e, 0xda, 0xe5, 0x96, + 0xb8, 0x82, 0x1f, 0x97, 0xfc, 0xa5, 0x8d, 0x16, 0x7f, 0xb4, + 0x4a, 0x09, 0x3b, 0x0c, 0x00, 0x9a, 0x0b, 0xd5, 0x63, 0x13, + 0x55, 0xb0, 0xcb, 0x25, 0xd9, 0x3b, 0xa9, 0xb7, 0x9b, 0x00, + 0x63, 0x01, 0xd9, 0x9d, 0xb6, 0x57, 0xe8, 0x01, 0x93, 0x3f, + 0xc2, 0x76, 0x4a, 0x0c, 0xe6, 0x50, 0xea, 0xf5, 0xa1, 0x29, + 0x9e, 0xfe, 0x60, 0xcb, 0x53, 0xb6, 0x34 ), + ADDITIONAL(), + PLAINTEXT ( 0x09, 0x89, 0x12, 0xa3, 0x02, 0x77, 0x33, 0x77, 0xb9, + 0xc2, 0x6a, 0xc3 ), + CIPHERTEXT ( 0xe3, 0xbe, 0x94, 0x71, 0x53, 0xa2, 0x6a, 0x3a, 0x54, + 0xe3, 0x01, 0x5c ), + AUTH ( 0xfd, 0x04, 0x2b, 0xdd, 0xe2, 0x2f, 0x67, 0xc4, 0xfd, 0x29, + 0x8d, 0x5d, 0xc0, 0x86, 0x76, 0x06 ) ); + +/* AES-GCM test case 269 */ +CIPHER_TEST ( wycheproof_aes_gcm_1dd3caab, &aes_gcm_algorithm, + KEY ( 0x8f, 0x9e, 0xbc, 0x67, 0xa9, 0xa6, 0x43, 0x0c, 0x2b, 0x0c, + 0xee, 0xaf, 0x98, 0x3e, 0x13, 0x56, 0x96, 0x4b, 0xb9, 0x28, + 0x63, 0x5b, 0x9c, 0xa4 ), + IV ( 0x36, 0xe4, 0xb3, 0x81, 0x57, 0x4d, 0x17, 0x1c, 0x77, 0x69, + 0xa7, 0x88, 0xcb, 0xc1, 0x47, 0x22, 0x4f, 0xab, 0xd8, 0xb7, + 0x73, 0xf1, 0x6b, 0x8a, 0xe8, 0x4d, 0x8f, 0x26, 0x03, 0xaa, + 0xa4, 0x40 ), + ADDITIONAL(), + PLAINTEXT ( 0xa3, 0xa9, 0x6e, 0xe9, 0x4f, 0x94, 0xca, 0xa8, 0x1e, + 0xbc, 0xd6, 0x6d ), + CIPHERTEXT ( 0x8c, 0x2a, 0x98, 0x23, 0xa3, 0xb3, 0xd4, 0x13, 0xbe, + 0x69, 0x63, 0x87 ), + AUTH ( 0xfa, 0xaf, 0x01, 0xce, 0xb4, 0x0a, 0x7e, 0x14, 0x5e, 0x8f, + 0xe6, 0x5a, 0xa9, 0xaf, 0x58, 0xc0 ) ); + +/* AES-GCM test case 270 */ +CIPHER_TEST ( wycheproof_aes_gcm_9ff40949, &aes_gcm_algorithm, + KEY ( 0xf4, 0xbb, 0xdf, 0xd0, 0x6f, 0x7f, 0xb1, 0x43, 0x48, 0x80, + 0xe4, 0x16, 0x6d, 0x38, 0xd5, 0x6e, 0x02, 0xa3, 0xf0, 0xdf, + 0x0d, 0x53, 0x01, 0xce ), + IV ( 0x90, 0x74, 0x3b, 0xd5, 0xd7, 0x94, 0xd5, 0x2a, 0xc8, 0x48, + 0xb7, 0xe2, 0x38, 0x45, 0x45, 0xa2, 0x58, 0x46, 0xac, 0xf1, + 0x43, 0xbe, 0x84, 0xc0, 0xea, 0xd0, 0x43, 0x2f, 0xcf, 0x31, + 0x72, 0x63, 0x1c, 0xf5, 0x8d, 0x0c, 0xa7, 0x85, 0x71, 0xc0, + 0x30, 0x53, 0xc1, 0xe1, 0xb8, 0x5e, 0xd7, 0x9c, 0xb5, 0x30, + 0x3d, 0x0e, 0x3a, 0x98, 0xff, 0x4f, 0x56, 0xc4, 0xf0, 0xa5, + 0xeb, 0x4f, 0x0e, 0xac ), + ADDITIONAL(), + PLAINTEXT ( 0x39, 0xd2, 0xab, 0xe6, 0x69, 0x7f, 0x17, 0xec, 0x27, + 0xf2, 0xa3, 0x9c ), + CIPHERTEXT ( 0xa6, 0x60, 0xea, 0x5b, 0xf0, 0x7a, 0x78, 0xfe, 0xa0, + 0x12, 0x01, 0x73 ), + AUTH ( 0x74, 0x04, 0xfc, 0x7b, 0x73, 0x54, 0x69, 0x44, 0x28, 0x23, + 0x6f, 0x20, 0x3c, 0x13, 0x02, 0x44 ) ); + +/* AES-GCM test case 271 */ +CIPHER_TEST ( wycheproof_aes_gcm_4bae909f, &aes_gcm_algorithm, + KEY ( 0x17, 0x61, 0xc7, 0x77, 0x98, 0xef, 0x9c, 0xdf, 0xa4, 0x05, + 0x53, 0xf3, 0x46, 0x14, 0xfe, 0x74, 0x02, 0x21, 0x20, 0x87, + 0xf0, 0x50, 0x94, 0x11 ), + IV ( 0xfb, 0xb3, 0xea, 0xb3, 0x79, 0xc9, 0xb8, 0x68, 0x9d, 0xc3, + 0x0b, 0x07, 0x13, 0x69, 0x0e, 0x55, 0xd5, 0x1c, 0x95, 0x6c, + 0xa3, 0x6f, 0xbc, 0xc7, 0x3e, 0xee, 0xee, 0x16, 0xa4, 0x6d, + 0x7c, 0x41, 0xa7, 0xa9, 0x62, 0x6e, 0x68, 0xe2, 0x5d, 0x68, + 0x5c, 0x00, 0x8c, 0x19, 0xd3, 0xb2, 0xb1, 0x79, 0x2b, 0xdc, + 0x99, 0xc3, 0x54, 0x41, 0xa6, 0xfc, 0xac, 0x35, 0xe0, 0xd6, + 0x44, 0x6d, 0xd9, 0x14, 0xf5, 0x43, 0xab, 0xd9, 0xec, 0xd6, + 0xb0, 0xcb, 0x52, 0x01, 0xc2, 0x43, 0x02, 0x6c, 0x4f, 0x13, + 0x64, 0x1d, 0x67, 0xc8, 0xd8, 0xcd, 0x51, 0x14, 0xb6, 0xe1, + 0x1e, 0xbb, 0xc6, 0xb1, 0xde, 0xe2, 0xa1, 0x8d, 0xb2, 0x15, + 0x0a, 0x5a, 0x57, 0x5d, 0xcd, 0x21, 0x64, 0x8e, 0x03, 0x37, + 0xda, 0xdb, 0xcc, 0xd3, 0xde, 0xff, 0xd6, 0xd9, 0x79, 0xe0, + 0x3e, 0x6b, 0x9d, 0xdf, 0xee, 0x0a, 0xbd, 0xc2 ), + ADDITIONAL(), + PLAINTEXT ( 0x35, 0xca, 0x4e, 0xb4, 0x63, 0xa2, 0x00, 0x01, 0x38, + 0x21, 0x0b, 0x4d ), + CIPHERTEXT ( 0xf4, 0x00, 0x13, 0x2f, 0xf3, 0x8c, 0x04, 0xed, 0x74, + 0x7d, 0xde, 0x34 ), + AUTH ( 0xca, 0x15, 0x34, 0xe7, 0xdd, 0x03, 0x36, 0xbb, 0xb3, 0x2a, + 0x79, 0x83, 0x0c, 0x71, 0xa4, 0x47 ) ); + +/* AES-GCM test case 272 */ +CIPHER_TEST ( wycheproof_aes_gcm_dbc87bdd, &aes_gcm_algorithm, + KEY ( 0xf7, 0x95, 0xec, 0xe7, 0xde, 0x18, 0x81, 0xfb, 0xc6, 0x84, + 0x3e, 0xb7, 0x40, 0xf8, 0x12, 0xe4, 0x1e, 0x3f, 0xc4, 0x9f, + 0xf6, 0xc7, 0xb9, 0x40 ), + IV ( 0x35, 0x69, 0xfc, 0xa7, 0xc9, 0xd0, 0x6e, 0x2a, 0x03, 0xfe, + 0xd1, 0xaa, 0xc2, 0x48, 0x4f, 0xd4, 0x41, 0x6c, 0xa0, 0x7d, + 0x55, 0xec, 0xbb, 0x33, 0x3e, 0xc6, 0x74, 0xf0, 0xea, 0x5c, + 0x6e, 0x75, 0xa1, 0x0d, 0xfb, 0x9c, 0x73, 0x8b, 0x69, 0xda, + 0xb2, 0xed, 0xa1, 0x0a, 0xda, 0x72, 0x1a, 0x61, 0xc7, 0xf0, + 0x2b, 0x7e, 0x7f, 0x79, 0xe8, 0xa9, 0xe2, 0xdc, 0x36, 0xb3, + 0xfd, 0xf6, 0x09, 0xe4, 0x36, 0x05, 0x4c, 0x82, 0xa7, 0x74, + 0xec, 0x61, 0x7d, 0xce, 0xec, 0x84, 0xa5, 0x77, 0x03, 0x7f, + 0xf1, 0xa3, 0xf1, 0x20, 0xd9, 0x81, 0x8d, 0x04, 0x20, 0x63, + 0xac, 0xb3, 0x6c, 0x95, 0x84, 0xe8, 0x1e, 0xc9, 0x4f, 0x11, + 0xf1, 0xee, 0x24, 0x0f, 0x2e, 0x45, 0xe9, 0x44, 0x69, 0x4a, + 0x9c, 0x8e, 0x53, 0x5a, 0xcb, 0xb0, 0x1d, 0x93, 0x95, 0x84, + 0x11, 0xcf, 0xf6, 0x8e, 0x3d, 0x32, 0xf8, 0x93, 0x17, 0x46, + 0xa4, 0xa0, 0xce, 0xce, 0x65, 0xe9, 0x3c, 0x51, 0xc7, 0x0b, + 0x31, 0x11, 0x03, 0x4b, 0x68, 0x67, 0xb4, 0x07, 0xe0, 0x14, + 0x7f, 0x97, 0xc5, 0x76, 0xd3, 0xed, 0x8c, 0xec, 0x7e, 0x8e, + 0xc2, 0x6e, 0x95, 0x64, 0x3e, 0x46, 0xe9, 0x7e, 0xa3, 0x59, + 0x5c, 0x9c, 0x31, 0x72, 0xb4, 0x85, 0x6f, 0x2d, 0x2b, 0x6d, + 0xc8, 0x56, 0x46, 0x66, 0xdd, 0xac, 0x92, 0xc7, 0x94, 0xff, + 0xb2, 0xd4, 0xdc, 0x7f, 0x46, 0x17, 0x61, 0xf0, 0xe3, 0x26, + 0x65, 0x0f, 0x48, 0xd3, 0x27, 0x60, 0x4e, 0x09, 0x5b, 0xd8, + 0x75, 0x40, 0x72, 0x11, 0x6c, 0x96, 0x36, 0x0d, 0x09, 0xf0, + 0x10, 0xac, 0x2f, 0x39, 0xeb, 0x96, 0xb2, 0x27, 0xf3, 0xd7, + 0x38, 0xde, 0xb7, 0x56, 0xc8, 0x69, 0x94, 0x60, 0xd8, 0x8c, + 0xf7, 0x16, 0x17, 0x0a, 0xe1, 0x52, 0x67, 0xb1, 0x4f, 0x4a, + 0x89, 0x16, 0x47, 0x20, 0xf1, 0xc6, 0x02 ), + ADDITIONAL(), + PLAINTEXT ( 0x22, 0xdb, 0xd8, 0x03, 0x7a, 0xa0, 0x5b, 0x14, 0xcf, + 0x81, 0xdd, 0x23 ), + CIPHERTEXT ( 0x13, 0xa9, 0x5a, 0x06, 0xc1, 0xbe, 0xd4, 0x84, 0x5a, + 0xf9, 0xc7, 0x01 ), + AUTH ( 0x03, 0x37, 0x98, 0x36, 0xb0, 0xc8, 0x2f, 0x64, 0xa1, 0xbc, + 0xcd, 0xcd, 0x76, 0x3a, 0xcb, 0xbc ) ); + +/* AES-GCM test case 273 */ +CIPHER_TEST ( wycheproof_aes_gcm_0834aa42, &aes_gcm_algorithm, + KEY ( 0xee, 0x41, 0x71, 0x91, 0x7d, 0x23, 0x37, 0x49, 0x68, 0x12, + 0xa2, 0x78, 0x4d, 0x6a, 0x71, 0x30, 0x0e, 0x6b, 0x8c, 0x1a, + 0xc3, 0xb1, 0xef, 0x58, 0xce, 0xe7, 0x7c, 0x22, 0x9a, 0xea, + 0xf2, 0xc5 ), + IV ( 0xe8, 0x26, 0xa7, 0x93, 0x61, 0xf9, 0xd5, 0x82, 0xb6, 0x44, + 0x50, 0xe3, 0xed, 0xc8, 0x25, 0x89, 0x48, 0x78, 0x53, 0xd5, + 0xb2, 0x2f, 0xea, 0xa0, 0xc8, 0x89, 0x87, 0x5b, 0xd0, 0xd8, + 0x7c, 0xd4 ), + ADDITIONAL(), + PLAINTEXT ( 0x94, 0xd2, 0xf8, 0x69, 0x7f, 0xac, 0xaa, 0xa1, 0x91, + 0xba, 0x61, 0x7a ), + CIPHERTEXT ( 0xa2, 0x95, 0xc2, 0xcb, 0x27, 0xce, 0x23, 0xd2, 0x68, + 0x74, 0xad, 0xe1 ), + AUTH ( 0x04, 0x65, 0x0a, 0x78, 0xbb, 0xb6, 0x1d, 0xb3, 0x37, 0xc9, + 0xc3, 0x2a, 0xa3, 0xe7, 0xb6, 0xfa ) ); + +/* AES-GCM test case 274 */ +CIPHER_TEST ( wycheproof_aes_gcm_0694ddb9, &aes_gcm_algorithm, + KEY ( 0x13, 0x2c, 0x59, 0xb4, 0xbc, 0xb8, 0xaf, 0xb3, 0x16, 0x37, + 0x73, 0x4a, 0x81, 0x10, 0x5b, 0xb2, 0xc9, 0x87, 0x8f, 0x32, + 0x0a, 0xce, 0x90, 0x76, 0xd5, 0xfd, 0x7c, 0x5d, 0x21, 0x6c, + 0x8d, 0x12 ), + IV ( 0xec, 0x51, 0xee, 0x18, 0xcf, 0xb4, 0x68, 0x97, 0xd3, 0x66, + 0x6c, 0x7d, 0xf3, 0x5c, 0x29, 0xca, 0x5d, 0x89, 0x82, 0x41, + 0xc4, 0xa3, 0x4f, 0x89, 0x3e, 0xb1, 0xdb, 0x5d, 0x5c, 0x6b, + 0x76, 0xe2, 0x46, 0x17, 0x45, 0x9d, 0x11, 0x53, 0x86, 0x81, + 0x54, 0x43, 0x7a, 0x0e, 0x95, 0xaa, 0x3c, 0x26, 0xe9, 0x56, + 0xb4, 0x94, 0xa5, 0x2d, 0xd5, 0xac, 0x3b, 0x93, 0x31, 0x11, + 0x6c, 0x7c, 0x77, 0x5f ), + ADDITIONAL(), + PLAINTEXT ( 0x12, 0xc7, 0xbe, 0x00, 0xfa, 0xcd, 0xa4, 0x95, 0x96, + 0xe1, 0x91, 0x34 ), + CIPHERTEXT ( 0x9c, 0xdc, 0xfc, 0x3a, 0xaa, 0x8d, 0x46, 0x6f, 0x25, + 0x58, 0x8e, 0x4b ), + AUTH ( 0x7e, 0x80, 0xf5, 0x1e, 0x71, 0x80, 0xf1, 0xcd, 0x3b, 0xa8, + 0x43, 0x49, 0x88, 0x8f, 0xcd, 0x5c ) ); + +/* AES-GCM test case 275 */ +CIPHER_TEST ( wycheproof_aes_gcm_c68a0e20, &aes_gcm_algorithm, + KEY ( 0x7b, 0x0b, 0x12, 0x49, 0x19, 0x01, 0xd6, 0x2d, 0x09, 0x7f, + 0xa2, 0x6d, 0xc7, 0x1e, 0x15, 0xcf, 0xac, 0xaf, 0xa3, 0x22, + 0x67, 0x19, 0xe4, 0x71, 0x26, 0xd9, 0x9c, 0x79, 0xd9, 0x8e, + 0xc2, 0x22 ), + IV ( 0x7d, 0x08, 0xb2, 0x26, 0xb4, 0xa5, 0xd0, 0x3f, 0x6f, 0x8c, + 0xb3, 0xa3, 0xcb, 0x8d, 0x1c, 0xe3, 0x1b, 0x05, 0x9d, 0xc5, + 0x11, 0x23, 0x85, 0x27, 0x5e, 0x38, 0xa1, 0x5c, 0x97, 0xe0, + 0xf2, 0x40, 0x22, 0xb2, 0x49, 0xa5, 0xf7, 0x01, 0x9e, 0xa5, + 0x77, 0x19, 0x8c, 0xb2, 0x6a, 0xc6, 0x4e, 0x82, 0xb2, 0xb0, + 0x46, 0x81, 0x53, 0x7c, 0x41, 0x98, 0x77, 0x5a, 0x52, 0x3b, + 0x0e, 0x64, 0x94, 0xb8, 0x4f, 0xeb, 0xae, 0xf3, 0x39, 0x9b, + 0x35, 0xc2, 0x7b, 0x09, 0x69, 0xfa, 0x43, 0x57, 0x2b, 0xf5, + 0x82, 0x7a, 0x76, 0x3a, 0xac, 0x1a, 0xf6, 0x95, 0x26, 0xf3, + 0x7e, 0x38, 0xac, 0xb5, 0xd3, 0x54, 0xf2, 0xb6, 0x84, 0x87, + 0xf2, 0x75, 0xf4, 0x36, 0x1e, 0xd3, 0x90, 0x73, 0xf7, 0xdd, + 0x66, 0x53, 0xac, 0x17, 0xc0, 0x79, 0x41, 0x18, 0xa0, 0xcf, + 0x14, 0x32, 0x93, 0xac, 0x0b, 0xe6, 0x62, 0x29 ), + ADDITIONAL(), + PLAINTEXT ( 0xc8, 0x03, 0x12, 0x59, 0x07, 0x00, 0xc3, 0xbb, 0xfa, + 0xcd, 0x1a, 0x40 ), + CIPHERTEXT ( 0x3f, 0x3c, 0x15, 0x1e, 0x98, 0x4d, 0x05, 0x94, 0x62, + 0xf9, 0xe5, 0xa0 ), + AUTH ( 0xe5, 0x59, 0xf5, 0xf7, 0x55, 0xaa, 0x29, 0x21, 0x71, 0xcc, + 0x35, 0xfb, 0xf9, 0x11, 0xa6, 0x4f ) ); + +/* AES-GCM test case 276 */ +CIPHER_TEST ( wycheproof_aes_gcm_a0b4e03a, &aes_gcm_algorithm, + KEY ( 0x3b, 0xc3, 0xbf, 0x39, 0xd0, 0xd5, 0xff, 0xd9, 0x4c, 0xca, + 0x2b, 0x45, 0xc6, 0x78, 0xa2, 0xd0, 0x49, 0x15, 0x1e, 0xd2, + 0xba, 0xbc, 0x71, 0x3b, 0xe5, 0x3c, 0xb6, 0x6f, 0x54, 0xa1, + 0x63, 0x37 ), + IV ( 0x92, 0xc2, 0xce, 0xe7, 0xe9, 0x13, 0x8b, 0x18, 0x6d, 0xa5, + 0x1f, 0x14, 0x6f, 0xb2, 0x1f, 0xd5, 0xb4, 0x91, 0xf1, 0xa1, + 0x9e, 0xef, 0x61, 0xd4, 0xed, 0x14, 0xce, 0x6b, 0x21, 0xb0, + 0x4f, 0xdb, 0x6f, 0xf8, 0xeb, 0xb6, 0x0f, 0xdd, 0xc5, 0x59, + 0x26, 0xe7, 0xbd, 0xa2, 0xa8, 0xf3, 0x5c, 0x61, 0x0b, 0xb7, + 0x95, 0x23, 0x24, 0x12, 0x73, 0x9d, 0x6c, 0x2d, 0x74, 0x45, + 0x8e, 0xf5, 0xa1, 0xa1, 0xcd, 0xe9, 0xbf, 0x17, 0xe4, 0x7e, + 0x3b, 0x00, 0xdb, 0x0b, 0x05, 0x04, 0xd5, 0x6d, 0xc8, 0xb8, + 0xd3, 0xde, 0x23, 0xf7, 0xc3, 0xa5, 0xd5, 0x2e, 0x8d, 0x0a, + 0xab, 0x1e, 0x64, 0x40, 0x5a, 0xaa, 0x85, 0x2e, 0xc2, 0xdd, + 0x66, 0x7e, 0xd9, 0xc1, 0xfd, 0x8d, 0xc1, 0xfd, 0xbb, 0xc8, + 0x71, 0x2c, 0x7a, 0x38, 0xf3, 0x0f, 0xae, 0xab, 0x59, 0x4f, + 0x33, 0x89, 0x7b, 0x41, 0xb1, 0x72, 0x0f, 0x3c, 0x2f, 0x95, + 0x4e, 0xd9, 0x1c, 0xa4, 0x50, 0xd8, 0x2c, 0x3d, 0xcd, 0x35, + 0x85, 0x8c, 0x60, 0x8a, 0xd4, 0x2f, 0x36, 0x83, 0x2e, 0x56, + 0xb0, 0x48, 0x21, 0xa1, 0x32, 0xf7, 0x2e, 0x0d, 0xa7, 0xb6, + 0x2c, 0xbd, 0x39, 0x25, 0x25, 0x0f, 0x64, 0xfb, 0xb3, 0xf5, + 0xc4, 0x78, 0x34, 0x95, 0x89, 0x30, 0x97, 0xad, 0xc0, 0x9a, + 0x32, 0xd7, 0x76, 0xe0, 0x4b, 0xf7, 0x25, 0x58, 0xd3, 0x78, + 0x30, 0xb3, 0x72, 0x34, 0x1f, 0x65, 0x36, 0xd8, 0xee, 0x9d, + 0xf4, 0xa8, 0x2e, 0x40, 0x74, 0xe7, 0x77, 0x4a, 0xb6, 0x91, + 0x7a, 0x04, 0xfa, 0x8c, 0x49, 0x9e, 0xb4, 0xb4, 0x6a, 0x92, + 0xde, 0xf3, 0x65, 0xda, 0x8b, 0x5e, 0xb1, 0xe0, 0xb4, 0x38, + 0x77, 0x95, 0x07, 0xd1, 0xf5, 0x27, 0x2a, 0x6e, 0x86, 0x29, + 0xa3, 0xf9, 0xc7, 0xbd, 0x48, 0x62, 0xc5, 0x69, 0x1e, 0xe8, + 0xb5, 0x6b, 0xfe, 0x29, 0x2d, 0xeb, 0x4e ), + ADDITIONAL(), + PLAINTEXT ( 0x81, 0x25, 0xee, 0x76, 0x37, 0xd7, 0xd0, 0xe0, 0x3b, + 0xba, 0xcf, 0x35 ), + CIPHERTEXT ( 0x54, 0x96, 0xae, 0x94, 0xc3, 0x32, 0x2e, 0xbf, 0x95, + 0x9e, 0xa9, 0xa9 ), + AUTH ( 0x70, 0x71, 0x7c, 0xc0, 0x0f, 0xd1, 0xff, 0xa5, 0x9b, 0xb0, + 0x43, 0x29, 0x22, 0x6a, 0x0c, 0x0a ) ); + +/* AES-GCM test case 277 */ +CIPHER_TEST ( wycheproof_aes_gcm_42f63793, &aes_gcm_algorithm, + KEY ( 0x59, 0xa2, 0x84, 0xf5, 0x0a, 0xed, 0xd8, 0xd3, 0xe2, 0xa9, + 0x16, 0x37, 0xd3, 0x81, 0x55, 0x79 ), + IV ( 0x80 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xaf, 0x49, 0x8f, 0x70, 0x1d, 0x24, 0x70, 0x69, 0x5f, 0x6e, + 0x7c, 0x83, 0x27, 0xa2, 0x39, 0x8b ) ); + +/* AES-GCM test case 278 */ +CIPHER_TEST ( wycheproof_aes_gcm_a9355b80, &aes_gcm_algorithm, + KEY ( 0xfe, 0xc5, 0x8a, 0xa8, 0xcf, 0x06, 0xbf, 0xe0, 0x5d, 0xe8, + 0x29, 0xf2, 0x7e, 0xc7, 0x76, 0x93 ), + IV ( 0x9d ), + ADDITIONAL(), + PLAINTEXT ( 0xf2, 0xd9, 0x9a, 0x9f, 0x89, 0x33, 0x78, 0xe0, 0x75, + 0x7d, 0x27, 0xc2, 0xe3, 0xa3, 0x10, 0x1b ), + CIPHERTEXT ( 0x0a, 0x24, 0x61, 0x2a, 0x9d, 0x1c, 0xbe, 0x96, 0x7d, + 0xbf, 0xe8, 0x04, 0xbf, 0x84, 0x40, 0xe5 ), + AUTH ( 0x96, 0xe6, 0xfd, 0x2c, 0xdc, 0x70, 0x7e, 0x3e, 0xe0, 0xa1, + 0xc9, 0x0d, 0x34, 0xc9, 0xc3, 0x6c ) ); + +/* AES-GCM test case 279 */ +CIPHER_TEST ( wycheproof_aes_gcm_380d7036, &aes_gcm_algorithm, + KEY ( 0x88, 0xa9, 0x72, 0xcc, 0xe9, 0xea, 0xf5, 0xa7, 0x81, 0x3c, + 0xe8, 0x14, 0x9d, 0x0c, 0x1d, 0x0e ), + IV ( 0x0f, 0x2f ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x4c, 0xcf, 0x1e, 0xfb, 0x4d, 0xa0, 0x5b, 0x4a, 0xe4, 0x45, + 0x2a, 0xea, 0x42, 0xf5, 0x42, 0x4b ) ); + +/* AES-GCM test case 280 */ +CIPHER_TEST ( wycheproof_aes_gcm_26a77e52, &aes_gcm_algorithm, + KEY ( 0xb4, 0x39, 0x67, 0xee, 0x93, 0x3e, 0x46, 0x32, 0xbd, 0x65, + 0x62, 0xba, 0x12, 0x01, 0xbf, 0x83 ), + IV ( 0x87, 0x60 ), + ADDITIONAL(), + PLAINTEXT ( 0x5a, 0x6a, 0xd6, 0xdb, 0x70, 0x59, 0x1d, 0x1e, 0x52, + 0x0b, 0x01, 0x22, 0xf0, 0x50, 0x21, 0xa0 ), + CIPHERTEXT ( 0xba, 0x3e, 0x7f, 0x8b, 0x29, 0x99, 0x99, 0x5c, 0x7f, + 0xc4, 0x00, 0x6c, 0xa4, 0xf4, 0x75, 0xff ), + AUTH ( 0x98, 0xf4, 0x7a, 0x52, 0x79, 0xce, 0xbb, 0xca, 0xc2, 0x14, + 0x51, 0x57, 0x10, 0xf6, 0xcd, 0x8a ) ); + +/* AES-GCM test case 281 */ +CIPHER_TEST ( wycheproof_aes_gcm_7016eb5c, &aes_gcm_algorithm, + KEY ( 0x4e, 0x9a, 0x97, 0xd3, 0xed, 0x54, 0xc7, 0xb5, 0x46, 0x10, + 0x79, 0x3a, 0xb0, 0x50, 0x52, 0xe1 ), + IV ( 0xcc, 0x85, 0x19, 0x57 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xe5, 0x74, 0xb3, 0x55, 0xbd, 0xa2, 0x98, 0x0e, 0x04, 0x7e, + 0x58, 0x4f, 0xeb, 0x16, 0x76, 0xca ) ); + +/* AES-GCM test case 282 */ +CIPHER_TEST ( wycheproof_aes_gcm_20abbc80, &aes_gcm_algorithm, + KEY ( 0xd8, 0x3c, 0x1d, 0x7a, 0x97, 0xc4, 0x3f, 0x18, 0x24, 0x09, + 0xa4, 0xaa, 0x56, 0x09, 0xc1, 0xb1 ), + IV ( 0x7b, 0x5f, 0xae, 0xb2 ), + ADDITIONAL(), + PLAINTEXT ( 0xc8, 0xf0, 0x7b, 0xa1, 0xd6, 0x55, 0x54, 0xa9, 0xbd, + 0x40, 0x39, 0x0c, 0x30, 0xc5, 0x52, 0x9c ), + CIPHERTEXT ( 0x1b, 0x84, 0xba, 0xea, 0x9d, 0xf1, 0xe6, 0x5b, 0xee, + 0x7b, 0x49, 0xe4, 0xa8, 0xcd, 0xa1, 0xec ), + AUTH ( 0x5c, 0x0b, 0xb7, 0x9d, 0x82, 0x40, 0x04, 0x1e, 0xdc, 0xe0, + 0xf9, 0x4b, 0xd4, 0xbb, 0x38, 0x4f ) ); + +/* AES-GCM test case 283 */ +CIPHER_TEST ( wycheproof_aes_gcm_1d93e9e2, &aes_gcm_algorithm, + KEY ( 0xc6, 0xa7, 0x05, 0x67, 0x7a, 0xff, 0xb4, 0x9e, 0x27, 0x6d, + 0x95, 0x11, 0xca, 0xa4, 0x61, 0x45 ), + IV ( 0x4a, 0xd8, 0x0c, 0x28, 0x54, 0xfb ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x1e, 0x2e, 0xd7, 0x2a, 0xf5, 0x90, 0xca, 0xfb, 0x86, 0x47, + 0xd1, 0x85, 0x86, 0x5f, 0x54, 0x63 ) ); + +/* AES-GCM test case 284 */ +CIPHER_TEST ( wycheproof_aes_gcm_559a53ba, &aes_gcm_algorithm, + KEY ( 0xeb, 0xa7, 0x69, 0x9b, 0x56, 0xcc, 0x0a, 0xa2, 0xf6, 0x6a, + 0x2a, 0x5b, 0xe9, 0x94, 0x44, 0x13 ), + IV ( 0xd1, 0xda, 0xfc, 0x8d, 0xe3, 0xe3 ), + ADDITIONAL(), + PLAINTEXT ( 0xd0, 0x21, 0xe5, 0x3d, 0x90, 0x98, 0xa2, 0xdf, 0x3d, + 0x6b, 0x90, 0x3c, 0xda, 0xd0, 0xcd, 0x9c ), + CIPHERTEXT ( 0x18, 0x29, 0x1a, 0xa8, 0xdc, 0x7b, 0x07, 0x44, 0x8a, + 0xa8, 0xf7, 0x1b, 0xb8, 0xe3, 0x80, 0xbf ), + AUTH ( 0x9c, 0x0e, 0x22, 0xe5, 0xc4, 0x1b, 0x10, 0x39, 0xff, 0x56, + 0x61, 0xff, 0xae, 0xfa, 0x8e, 0x0f ) ); + +/* AES-GCM test case 285 */ +CIPHER_TEST ( wycheproof_aes_gcm_2fba3231, &aes_gcm_algorithm, + KEY ( 0x1e, 0x6c, 0x62, 0x14, 0xa6, 0xa5, 0xdd, 0x5b, 0x62, 0x8c, + 0x71, 0xde, 0x07, 0x78, 0x81, 0x37 ), + IV ( 0x40, 0xbc, 0xc3, 0x15, 0xde, 0xc8, 0x8b, 0xf3, 0x26, 0xcc ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x6f, 0x53, 0x9a, 0x12, 0x5a, 0x2f, 0x4f, 0xd2, 0x14, 0x59, + 0x7e, 0x2f, 0x98, 0x1e, 0xfe, 0x6e ) ); + +/* AES-GCM test case 286 */ +CIPHER_TEST ( wycheproof_aes_gcm_51785cc5, &aes_gcm_algorithm, + KEY ( 0xfc, 0x93, 0x58, 0x2f, 0xa1, 0xf8, 0xb5, 0x8c, 0xc9, 0xe8, + 0x0d, 0xd5, 0x83, 0xe9, 0xbf, 0x8b ), + IV ( 0x5d, 0x4b, 0xf5, 0x87, 0x98, 0xfa, 0xc3, 0x51, 0xa3, 0x99 ), + ADDITIONAL(), + PLAINTEXT ( 0x86, 0x6d, 0x5e, 0x1b, 0x0a, 0xa2, 0x90, 0x04, 0xe5, + 0x1e, 0xa8, 0x7d, 0xe8, 0x6e, 0x3c, 0x05 ), + CIPHERTEXT ( 0x91, 0xc2, 0x05, 0x98, 0xdc, 0xbd, 0x90, 0x99, 0x8c, + 0x9a, 0x7d, 0x6b, 0x1e, 0x57, 0x32, 0x1f ), + AUTH ( 0xb0, 0x71, 0x20, 0x3f, 0x3d, 0xa1, 0x7c, 0x19, 0xad, 0x87, + 0xa4, 0x0d, 0xb0, 0x8b, 0x65, 0xf5 ) ); + +/* AES-GCM test case 287 */ +CIPHER_TEST ( wycheproof_aes_gcm_34d832ff, &aes_gcm_algorithm, + KEY ( 0xc7, 0x0c, 0xe3, 0x8e, 0x84, 0xe5, 0xf5, 0x3e, 0xd4, 0x1c, + 0x3f, 0x0d, 0x2c, 0xa4, 0x93, 0x41, 0x2a, 0xd3, 0x2c, 0xb0, + 0x4c, 0x6e, 0x2e, 0xfa ), + IV ( 0xcb ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x08, 0xd9, 0x6e, 0xdb, 0x5e, 0x22, 0x87, 0x4c, 0xd1, 0x0c, + 0xb2, 0x25, 0x6c, 0xa0, 0x4b, 0xc6 ) ); + +/* AES-GCM test case 288 */ +CIPHER_TEST ( wycheproof_aes_gcm_335f78f4, &aes_gcm_algorithm, + KEY ( 0x74, 0xc8, 0x16, 0xb8, 0x3d, 0xfd, 0x28, 0x72, 0x10, 0xa3, + 0xe2, 0xc6, 0xda, 0x8d, 0x30, 0x53, 0xbb, 0xfb, 0xd9, 0xb1, + 0x56, 0xd3, 0xfd, 0xd8 ), + IV ( 0x0f ), + ADDITIONAL(), + PLAINTEXT ( 0xf2, 0xb7, 0xb2, 0xc9, 0xb3, 0x12, 0xcf, 0x2a, 0xf7, + 0x8f, 0x00, 0x3d, 0xf1, 0x5c, 0x8e, 0x19 ), + CIPHERTEXT ( 0x6c, 0x5e, 0x79, 0x6b, 0xa9, 0xa3, 0xdd, 0xc6, 0x4f, + 0x40, 0x1e, 0x68, 0xd1, 0x35, 0x10, 0x1d ), + AUTH ( 0x96, 0xa1, 0x32, 0xed, 0x43, 0x92, 0x4e, 0x98, 0xfe, 0xb8, + 0x88, 0xff, 0x68, 0x2b, 0xda, 0xef ) ); + +/* AES-GCM test case 289 */ +CIPHER_TEST ( wycheproof_aes_gcm_39d2f365, &aes_gcm_algorithm, + KEY ( 0xcb, 0xf4, 0x5b, 0xa4, 0x88, 0x93, 0x2a, 0xea, 0x1a, 0x10, + 0xe5, 0x86, 0x2f, 0x92, 0xe4, 0xa7, 0xe2, 0x77, 0xbd, 0xa9, + 0xf3, 0x4a, 0xf6, 0xd0 ), + IV ( 0x75, 0xe5 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x1f, 0x0d, 0x23, 0x07, 0x0f, 0xcd, 0x74, 0x8e, 0x25, 0xbf, + 0x64, 0x54, 0xf5, 0xc9, 0x13, 0x6e ) ); + +/* AES-GCM test case 290 */ +CIPHER_TEST ( wycheproof_aes_gcm_eaa17e87, &aes_gcm_algorithm, + KEY ( 0xe1, 0xc0, 0x44, 0x6f, 0x11, 0xae, 0x6a, 0xa4, 0xfa, 0x25, + 0x4f, 0x9a, 0x84, 0x6f, 0xc6, 0xe1, 0x3e, 0x45, 0xe5, 0x37, + 0xe4, 0x7f, 0x20, 0x42 ), + IV ( 0x89, 0x89 ), + ADDITIONAL(), + PLAINTEXT ( 0x3a, 0x2f, 0x5a, 0xd0, 0xeb, 0x21, 0x6e, 0x54, 0x6e, + 0x0b, 0xca, 0xa3, 0x77, 0xb6, 0xcb, 0xc7 ), + CIPHERTEXT ( 0x55, 0x0b, 0x48, 0xa4, 0x3e, 0x82, 0x1f, 0xd7, 0x6f, + 0x49, 0xf0, 0xf1, 0xa8, 0x97, 0xae, 0xad ), + AUTH ( 0xf6, 0xe0, 0xa9, 0x79, 0x48, 0x1f, 0x99, 0x57, 0xdd, 0xad, + 0x0f, 0x21, 0xa7, 0x77, 0xa7, 0x3a ) ); + +/* AES-GCM test case 291 */ +CIPHER_TEST ( wycheproof_aes_gcm_e95b49a5, &aes_gcm_algorithm, + KEY ( 0x56, 0x75, 0x63, 0xbf, 0x4c, 0xf1, 0x54, 0x90, 0x22, 0x75, + 0xa5, 0x3b, 0xc5, 0x7c, 0xd6, 0xdd, 0x7b, 0x37, 0x0d, 0x27, + 0x01, 0x1b, 0xda, 0xc8 ), + IV ( 0x68, 0xd7, 0xfc, 0x38 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x14, 0x75, 0x56, 0x3e, 0x32, 0x12, 0xf3, 0xb5, 0xe4, 0x00, + 0x62, 0x56, 0x9a, 0xfd, 0x71, 0xe3 ) ); + +/* AES-GCM test case 292 */ +CIPHER_TEST ( wycheproof_aes_gcm_28dd9b0e, &aes_gcm_algorithm, + KEY ( 0x83, 0x4d, 0x0b, 0xb6, 0x01, 0x17, 0x08, 0x65, 0xa7, 0x81, + 0x39, 0x42, 0x8a, 0x15, 0x03, 0x69, 0x5a, 0x6a, 0x29, 0x1e, + 0xbd, 0x74, 0x7c, 0xd1 ), + IV ( 0xbb, 0x9d, 0x2a, 0xa3 ), + ADDITIONAL(), + PLAINTEXT ( 0x6f, 0x79, 0xe1, 0x8b, 0x4a, 0xcd, 0x5a, 0x03, 0xd3, + 0xa5, 0xf7, 0xe1, 0xa8, 0xd0, 0xf1, 0x83 ), + CIPHERTEXT ( 0x30, 0x91, 0x33, 0xe7, 0x61, 0x59, 0xfe, 0x8a, 0x41, + 0xb2, 0x08, 0x43, 0x48, 0x65, 0x11, 0xab ), + AUTH ( 0x03, 0xab, 0x26, 0x99, 0x3b, 0x70, 0x19, 0x10, 0xa2, 0xe8, + 0xec, 0xcc, 0xd2, 0xba, 0x9e, 0x52 ) ); + +/* AES-GCM test case 293 */ +CIPHER_TEST ( wycheproof_aes_gcm_6ae5995a, &aes_gcm_algorithm, + KEY ( 0x99, 0xfb, 0x18, 0xf5, 0xba, 0x43, 0x0b, 0xb9, 0xea, 0x94, + 0x29, 0x68, 0xec, 0xb7, 0x99, 0xb4, 0x34, 0x06, 0xe1, 0xaf, + 0x4b, 0x64, 0x25, 0xa1 ), + IV ( 0xa9, 0x84, 0xbd, 0xcd, 0xca, 0xe2 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xd7, 0xb9, 0xa6, 0xb5, 0x8a, 0x97, 0x98, 0x29, 0x16, 0xe8, + 0x32, 0x19, 0xfb, 0xf7, 0x1b, 0x1e ) ); + +/* AES-GCM test case 294 */ +CIPHER_TEST ( wycheproof_aes_gcm_df8aacfc, &aes_gcm_algorithm, + KEY ( 0xb7, 0x7b, 0x24, 0x2a, 0xa0, 0xd5, 0x1c, 0x92, 0xfd, 0xa0, + 0x13, 0xe0, 0xcb, 0x0e, 0xf2, 0x43, 0x73, 0x99, 0xac, 0xe5, + 0xd3, 0xf5, 0x07, 0xe4 ), + IV ( 0x52, 0xaa, 0x01, 0xe0, 0xd0, 0xd6 ), + ADDITIONAL(), + PLAINTEXT ( 0x4b, 0xa5, 0x41, 0xa9, 0x91, 0x47, 0x29, 0x21, 0x61, + 0x53, 0x80, 0x13, 0x40, 0xab, 0x17, 0x79 ), + CIPHERTEXT ( 0xe0, 0x82, 0x61, 0xe4, 0x6e, 0xaf, 0x90, 0xd9, 0x78, + 0xea, 0x8f, 0x78, 0x89, 0xbc, 0xcd, 0x4f ), + AUTH ( 0xc0, 0x52, 0xa5, 0x5d, 0xf3, 0x92, 0x6a, 0x50, 0x99, 0x0a, + 0x53, 0x2e, 0xfe, 0x3d, 0x80, 0xec ) ); + +/* AES-GCM test case 295 */ +CIPHER_TEST ( wycheproof_aes_gcm_f248c8cf, &aes_gcm_algorithm, + KEY ( 0xd7, 0x45, 0x99, 0xb3, 0xd2, 0xdb, 0x81, 0x65, 0x3d, 0xe4, + 0x3b, 0x52, 0xfc, 0x99, 0x4c, 0x50, 0xd0, 0xbe, 0x75, 0x9f, + 0xab, 0x87, 0xc3, 0x3a ), + IV ( 0xd1, 0xc6, 0x1c, 0xf8, 0x53, 0x25, 0x31, 0xb5 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xf9, 0x4f, 0x20, 0x49, 0xa6, 0x56, 0x0c, 0x47, 0x0b, 0x3a, + 0x7c, 0xa7, 0xbb, 0xc3, 0x1a, 0x3d ) ); + +/* AES-GCM test case 296 */ +CIPHER_TEST ( wycheproof_aes_gcm_bd6eb7fd, &aes_gcm_algorithm, + KEY ( 0x0b, 0x17, 0x71, 0x98, 0xc8, 0xb4, 0x19, 0xbf, 0x74, 0xac, + 0xc3, 0xbc, 0x65, 0xb5, 0xfb, 0x3d, 0x09, 0xa9, 0x15, 0xff, + 0x71, 0xad, 0xd7, 0x54 ), + IV ( 0x8f, 0x07, 0x5c, 0xbc, 0xda, 0x98, 0x31, 0xc3 ), + ADDITIONAL(), + PLAINTEXT ( 0xc4, 0xb1, 0xe0, 0x5c, 0xa3, 0xd5, 0x91, 0xf9, 0x54, + 0x3e, 0x64, 0xde, 0x3f, 0xc6, 0x82, 0xac ), + CIPHERTEXT ( 0x3c, 0x6e, 0xc0, 0xab, 0x1b, 0x82, 0x7b, 0xf2, 0x38, + 0xa5, 0x38, 0x4f, 0xb7, 0xe2, 0x12, 0xce ), + AUTH ( 0x7d, 0xb7, 0x40, 0x22, 0x24, 0xfd, 0x58, 0x3e, 0x31, 0x2b, + 0xc0, 0xe6, 0x1c, 0xf1, 0x13, 0x66 ) ); + +/* AES-GCM test case 297 */ +CIPHER_TEST ( wycheproof_aes_gcm_141e913b, &aes_gcm_algorithm, + KEY ( 0x17, 0x2f, 0x22, 0xf2, 0xe5, 0x93, 0x64, 0xdc, 0x41, 0x8c, + 0xd7, 0x51, 0xdf, 0xa8, 0x44, 0x4a, 0xe1, 0x86, 0x44, 0xc0, + 0xf9, 0xa2, 0xbe, 0x84 ), + IV ( 0xbf, 0x90, 0x26, 0xd3, 0xdd, 0xaa, 0x37, 0xe7, 0xf1, 0x80 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xa8, 0xdc, 0x52, 0xc7, 0x79, 0x61, 0x1a, 0x70, 0x28, 0xb1, + 0x88, 0x61, 0x5c, 0x9a, 0x34, 0xeb ) ); + +/* AES-GCM test case 298 */ +CIPHER_TEST ( wycheproof_aes_gcm_d2887a50, &aes_gcm_algorithm, + KEY ( 0x4c, 0x41, 0x10, 0x4d, 0x3f, 0x40, 0x26, 0x5f, 0x9e, 0x35, + 0xc3, 0x20, 0xa0, 0x1e, 0x78, 0x76, 0xc3, 0x14, 0x00, 0xa0, + 0xbd, 0x4d, 0x70, 0x92 ), + IV ( 0x85, 0xfd, 0xc8, 0x1a, 0xfd, 0x9f, 0x48, 0x28, 0x17, 0x7e ), + ADDITIONAL(), + PLAINTEXT ( 0xba, 0x7c, 0xd0, 0x7d, 0xfd, 0x8b, 0x5c, 0xf6, 0xff, + 0xd3, 0xdd, 0xb7, 0x63, 0x56, 0x12, 0xc6 ), + CIPHERTEXT ( 0x2d, 0x8d, 0xc3, 0x7e, 0xce, 0x9c, 0xda, 0x05, 0xdd, + 0x09, 0x77, 0x11, 0x2d, 0xd8, 0x64, 0xc5 ), + AUTH ( 0xab, 0xee, 0x97, 0xe6, 0xf2, 0x6d, 0x5c, 0x97, 0xe3, 0x6f, + 0xca, 0xd7, 0x60, 0xb2, 0xe6, 0xc6 ) ); + +/* AES-GCM test case 299 */ +CIPHER_TEST ( wycheproof_aes_gcm_6a453e9b, &aes_gcm_algorithm, + KEY ( 0x8f, 0x9a, 0x38, 0xc1, 0x01, 0x49, 0x66, 0xe4, 0xd9, 0xae, + 0x73, 0x61, 0x39, 0xc5, 0xe7, 0x9b, 0x99, 0x34, 0x58, 0x74, + 0xf4, 0x2d, 0x4c, 0x7d, 0x2c, 0x81, 0xaa, 0x67, 0x97, 0xc4, + 0x17, 0xc0 ), + IV ( 0xa9 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x2a, 0x26, 0x8b, 0xf3, 0xa7, 0x5f, 0xd7, 0xb0, 0x0b, 0xa2, + 0x30, 0xb9, 0x04, 0xbb, 0xb0, 0x14 ) ); + +/* AES-GCM test case 300 */ +CIPHER_TEST ( wycheproof_aes_gcm_54b2487f, &aes_gcm_algorithm, + KEY ( 0x14, 0x4c, 0xd8, 0x27, 0x92, 0x29, 0xe8, 0xbb, 0x2d, 0xe9, + 0x9d, 0x24, 0xe6, 0x15, 0x30, 0x66, 0x63, 0x91, 0x3f, 0xe9, + 0x17, 0x7f, 0xcd, 0x27, 0x0f, 0xaf, 0xec, 0x49, 0x3d, 0x43, + 0xbc, 0xa1 ), + IV ( 0xb3 ), + ADDITIONAL(), + PLAINTEXT ( 0x97, 0x62, 0x29, 0xf5, 0x53, 0x8f, 0x96, 0x36, 0x47, + 0x6d, 0x69, 0xf0, 0xc3, 0x28, 0xe2, 0x9d ), + CIPHERTEXT ( 0x7b, 0xea, 0x30, 0xec, 0xc2, 0xf7, 0x3f, 0x8e, 0x12, + 0x12, 0x63, 0xb3, 0x79, 0x66, 0x95, 0x4c ), + AUTH ( 0x8b, 0xba, 0xd4, 0xad, 0xc5, 0x4b, 0x37, 0xa2, 0xb2, 0xf0, + 0xf6, 0xe8, 0x61, 0x75, 0x48, 0xc9 ) ); + +/* AES-GCM test case 301 */ +CIPHER_TEST ( wycheproof_aes_gcm_2f6cfdb9, &aes_gcm_algorithm, + KEY ( 0x7d, 0x31, 0x86, 0x1f, 0x9d, 0x35, 0x36, 0xe1, 0x40, 0x16, + 0xa3, 0x21, 0x6b, 0x10, 0x42, 0xe0, 0xd2, 0xf7, 0xd4, 0x61, + 0x43, 0x14, 0x26, 0x8b, 0x6f, 0x83, 0x4e, 0xc7, 0xf3, 0x8b, + 0xbb, 0x65 ), + IV ( 0xc3, 0x32 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x1d, 0x97, 0x8a, 0x69, 0x31, 0x20, 0xc1, 0x1f, 0x6d, 0x51, + 0xa3, 0xed, 0x88, 0xcd, 0x4a, 0xce ) ); + +/* AES-GCM test case 302 */ +CIPHER_TEST ( wycheproof_aes_gcm_353db382, &aes_gcm_algorithm, + KEY ( 0x22, 0xb3, 0x5f, 0xe9, 0x62, 0x3e, 0xe1, 0x1f, 0x8b, 0x60, + 0xb6, 0xd2, 0x2d, 0xb3, 0x76, 0x5b, 0x66, 0x6e, 0xd9, 0x72, + 0xfa, 0x7c, 0xcd, 0x92, 0xb4, 0x5f, 0x22, 0xde, 0xee, 0x02, + 0xca, 0xb1 ), + IV ( 0xda, 0x6c ), + ADDITIONAL(), + PLAINTEXT ( 0x53, 0x41, 0xc7, 0x8e, 0x4c, 0xe5, 0xbf, 0x8f, 0xbc, + 0x3e, 0x07, 0x7d, 0x19, 0x90, 0xdd, 0x5d ), + CIPHERTEXT ( 0x9c, 0x39, 0xf5, 0xb1, 0x10, 0x36, 0x1e, 0x9a, 0x77, + 0x0c, 0xc5, 0xe8, 0xb0, 0xf4, 0x44, 0xbb ), + AUTH ( 0xb6, 0x3f, 0xf4, 0x3c, 0x12, 0x07, 0x3e, 0xc5, 0x57, 0x2b, + 0x1b, 0xe7, 0x0f, 0x17, 0xe2, 0x31 ) ); + +/* AES-GCM test case 303 */ +CIPHER_TEST ( wycheproof_aes_gcm_c0580c34, &aes_gcm_algorithm, + KEY ( 0xc2, 0x24, 0xe0, 0xbb, 0xa3, 0xd7, 0xa9, 0x91, 0x65, 0xf7, + 0x99, 0x6b, 0x67, 0xa0, 0xfc, 0xe3, 0xe1, 0x2f, 0x2c, 0x01, + 0x17, 0x9b, 0x19, 0x7b, 0x69, 0xb7, 0xe6, 0x28, 0xbc, 0xa9, + 0x20, 0x96 ), + IV ( 0x6b, 0x30, 0x14, 0x5e ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xae, 0x6f, 0x7c, 0x9a, 0x29, 0xf0, 0xd8, 0x20, 0x4c, 0xa5, + 0x0b, 0x14, 0xa1, 0xe0, 0xdc, 0xf2 ) ); + +/* AES-GCM test case 304 */ +CIPHER_TEST ( wycheproof_aes_gcm_6134968b, &aes_gcm_algorithm, + KEY ( 0x09, 0x3e, 0xb1, 0x23, 0x43, 0x53, 0x7e, 0xe8, 0xe9, 0x1c, + 0x1f, 0x71, 0x5b, 0x86, 0x26, 0x03, 0xf8, 0xda, 0xf9, 0xd4, + 0xe1, 0xd7, 0xd6, 0x72, 0x12, 0xa9, 0xd6, 0x8e, 0x5a, 0xac, + 0x93, 0x58 ), + IV ( 0x51, 0x10, 0x60, 0x4c ), + ADDITIONAL(), + PLAINTEXT ( 0x33, 0xef, 0xb5, 0x8c, 0x91, 0xe8, 0xc7, 0x02, 0x71, + 0x87, 0x0e, 0xc0, 0x0f, 0xe2, 0xe2, 0x02 ), + CIPHERTEXT ( 0xf7, 0x3f, 0x72, 0xf9, 0x76, 0xa2, 0x96, 0xba, 0x3c, + 0xa9, 0x4b, 0xc6, 0xeb, 0x08, 0xcd, 0x46 ), + AUTH ( 0xb8, 0x24, 0xc3, 0x3c, 0x13, 0xf2, 0x89, 0x42, 0x96, 0x59, + 0xaa, 0x01, 0x7c, 0x63, 0x2f, 0x71 ) ); + +/* AES-GCM test case 305 */ +CIPHER_TEST ( wycheproof_aes_gcm_4fa6ed1d, &aes_gcm_algorithm, + KEY ( 0x98, 0xe6, 0xf8, 0xab, 0x67, 0x3e, 0x80, 0x4e, 0x86, 0x5e, + 0x32, 0x40, 0x3a, 0x65, 0x51, 0xbf, 0x80, 0x7a, 0x95, 0x93, + 0x43, 0xc6, 0x0d, 0x34, 0x55, 0x93, 0x60, 0xbc, 0x29, 0x5e, + 0xcb, 0x5b ), + IV ( 0xd4, 0xd8, 0x57, 0x51, 0x08, 0x88 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x3d, 0xb1, 0x67, 0x25, 0xfa, 0xfc, 0x82, 0x8d, 0x41, 0x4a, + 0xb6, 0x1c, 0x16, 0xa6, 0xc3, 0x8f ) ); + +/* AES-GCM test case 306 */ +CIPHER_TEST ( wycheproof_aes_gcm_0cd1dd62, &aes_gcm_algorithm, + KEY ( 0x0b, 0xd0, 0xe8, 0xe7, 0x78, 0x11, 0x66, 0xe1, 0xd8, 0x76, + 0xde, 0xc8, 0xfa, 0xd3, 0x4b, 0xa9, 0x5b, 0x03, 0x2a, 0x27, + 0xca, 0xc0, 0x55, 0x15, 0x95, 0x11, 0x60, 0x91, 0x00, 0x59, + 0x47, 0xb7 ), + IV ( 0x1b, 0xdc, 0xd4, 0x4b, 0x66, 0x3e ), + ADDITIONAL(), + PLAINTEXT ( 0x91, 0x22, 0x22, 0x63, 0xb1, 0x2c, 0xf5, 0x61, 0x6a, + 0x04, 0x9c, 0xbe, 0x29, 0xab, 0x9b, 0x5b ), + CIPHERTEXT ( 0xed, 0x46, 0x3f, 0x4f, 0x43, 0x33, 0x6a, 0xf3, 0xf4, + 0xd7, 0xe0, 0x87, 0x70, 0x20, 0x11, 0x45 ), + AUTH ( 0xc8, 0xfc, 0x39, 0x90, 0x6a, 0xca, 0x0c, 0x64, 0xe1, 0x4a, + 0x43, 0xff, 0x75, 0x0a, 0xbd, 0x8a ) ); + +/* AES-GCM test case 307 */ +CIPHER_TEST ( wycheproof_aes_gcm_97734f40, &aes_gcm_algorithm, + KEY ( 0x61, 0xba, 0x69, 0x48, 0x97, 0x92, 0x5d, 0x1b, 0x41, 0x74, + 0xd4, 0x04, 0x01, 0x46, 0x9c, 0x3e, 0xf2, 0x67, 0xcd, 0xb9, + 0xf8, 0x29, 0xed, 0xb1, 0xa1, 0x06, 0x18, 0xc1, 0x6d, 0x66, + 0x60, 0x59 ), + IV ( 0x0d, 0x10, 0xc5, 0xc8, 0x4b, 0x88, 0xd6, 0x88 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x13, 0x11, 0xf9, 0xf8, 0x30, 0xd7, 0x29, 0xc1, 0x89, 0xb7, + 0x4e, 0xc4, 0xf9, 0x08, 0x0f, 0xa1 ) ); + +/* AES-GCM test case 308 */ +CIPHER_TEST ( wycheproof_aes_gcm_2054c1b6, &aes_gcm_algorithm, + KEY ( 0x11, 0x58, 0x84, 0xf6, 0x93, 0xb1, 0x55, 0x56, 0x3e, 0x9b, + 0xfb, 0x3b, 0x07, 0xca, 0xcb, 0x2f, 0x7f, 0x7c, 0xaa, 0x9b, + 0xfe, 0x51, 0xf8, 0x9e, 0x23, 0xfe, 0xb5, 0xa9, 0x46, 0x8b, + 0xfd, 0xd0 ), + IV ( 0x04, 0x10, 0x21, 0x99, 0xef, 0x21, 0xe1, 0xdf ), + ADDITIONAL(), + PLAINTEXT ( 0x82, 0xe3, 0xe6, 0x04, 0xd2, 0xbe, 0x8f, 0xca, 0xb7, + 0x4f, 0x63, 0x8d, 0x1e, 0x70, 0xf2, 0x4c ), + CIPHERTEXT ( 0x7e, 0x0d, 0xd6, 0xc7, 0x2a, 0xec, 0x49, 0xf8, 0x9c, + 0xc6, 0xa8, 0x00, 0x60, 0xc0, 0xb1, 0x70 ), + AUTH ( 0xaf, 0x68, 0xa3, 0x7c, 0xfe, 0xfe, 0xcc, 0x4a, 0xb9, 0x9b, + 0xa5, 0x0a, 0x53, 0x53, 0xed, 0xca ) ); + +/* AES-GCM test case 309 */ +CIPHER_TEST ( wycheproof_aes_gcm_084d2089, &aes_gcm_algorithm, + KEY ( 0x44, 0xab, 0x20, 0x4d, 0x15, 0x0a, 0xdb, 0x17, 0xf8, 0x3d, + 0x1e, 0x52, 0x05, 0xb6, 0xe1, 0x41, 0x96, 0x73, 0xfa, 0xde, + 0xe6, 0x10, 0xfb, 0x9a, 0x38, 0x18, 0x5a, 0x96, 0x74, 0x10, + 0x21, 0xeb ), + IV ( 0xff, 0x39, 0x14, 0x98, 0x2b, 0xe3, 0x0b, 0x3b, 0x21, 0x12 ), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xf1, 0x87, 0xb2, 0x81, 0xc9, 0xfb, 0xb2, 0x4c, 0xca, 0x24, + 0x12, 0x27, 0xd0, 0xb5, 0xd1, 0x64 ) ); + +/* AES-GCM test case 310 */ +CIPHER_TEST ( wycheproof_aes_gcm_48d6b2ad, &aes_gcm_algorithm, + KEY ( 0xd3, 0xb4, 0x4b, 0x8d, 0xfc, 0x35, 0x30, 0x40, 0x4a, 0x63, + 0xb3, 0xca, 0x04, 0xcc, 0x71, 0xcf, 0xc7, 0x1a, 0x55, 0x38, + 0x44, 0x8b, 0x26, 0x25, 0xc9, 0x81, 0x85, 0x6c, 0xb7, 0xda, + 0xed, 0x0f ), + IV ( 0x7c, 0x3c, 0x42, 0xfa, 0x17, 0x34, 0x7e, 0x1d, 0xf7, 0x97 ), + ADDITIONAL(), + PLAINTEXT ( 0x1d, 0x17, 0x75, 0x57, 0x96, 0x56, 0xf7, 0xf6, 0xc6, + 0x89, 0x14, 0x01, 0xd7, 0x33, 0xe2, 0xab ), + CIPHERTEXT ( 0x68, 0x4a, 0x6f, 0x58, 0x76, 0x2e, 0x59, 0x17, 0x33, + 0xe9, 0xe7, 0xfe, 0x7f, 0x57, 0x22, 0xa2 ), + AUTH ( 0x1c, 0xe1, 0x63, 0x44, 0x4d, 0xc3, 0x75, 0x4c, 0x39, 0xd5, + 0x56, 0xcc, 0x39, 0x94, 0xb7, 0xda ) ); + +/* AES-GCM test case 311 */ +CIPHER_TEST ( wycheproof_aes_gcm_55e10870, &aes_gcm_algorithm, + KEY ( 0x8f, 0x3f, 0x52, 0xe3, 0xc7, 0x5c, 0x58, 0xf5, 0xcb, 0x26, + 0x1f, 0x51, 0x8f, 0x4a, 0xd3, 0x0a ), + IV(), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xcf, 0x71, 0x97, 0x8f, 0xfc, 0xc7, 0x78, 0xf3, 0xc8, 0x5a, + 0xc9, 0xc3, 0x1b, 0x6f, 0xe1, 0x91 ) ); + +/* AES-GCM test case 312 */ +CIPHER_TEST ( wycheproof_aes_gcm_ce163a5a, &aes_gcm_algorithm, + KEY ( 0x2a, 0x4b, 0xf9, 0x0e, 0x56, 0xb7, 0x0f, 0xdd, 0x86, 0x49, + 0xd7, 0x75, 0xc0, 0x89, 0xde, 0x3b ), + IV(), + ADDITIONAL(), + PLAINTEXT ( 0x32, 0x4c, 0xed, 0x6c, 0xd1, 0x5e, 0xcc, 0x5b, 0x37, + 0x41, 0x54, 0x1e, 0x22, 0xc1, 0x8a, 0xd9 ), + CIPHERTEXT ( 0x00, 0xa2, 0x9f, 0x0a, 0x5e, 0x2e, 0x74, 0x90, 0x27, + 0x9d, 0x1f, 0xaf, 0x8b, 0x88, 0x1c, 0x7b ), + AUTH ( 0xa2, 0xc7, 0xe8, 0xd7, 0xa1, 0x9b, 0x88, 0x4f, 0x74, 0x2d, + 0xfe, 0xc3, 0xe7, 0x6c, 0x75, 0xee ) ); + +/* AES-GCM test case 313 */ +CIPHER_TEST ( wycheproof_aes_gcm_acdd1126, &aes_gcm_algorithm, + KEY ( 0x0b, 0x18, 0xd2, 0x13, 0x37, 0x03, 0x5c, 0x7b, 0xaa, 0x08, + 0x21, 0x1b, 0x70, 0x2f, 0xa7, 0x80, 0xac, 0x7c, 0x09, 0xbe, + 0x8f, 0x9e, 0xd1, 0x1f ), + IV(), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0xca, 0x69, 0xa2, 0xeb, 0x3a, 0x09, 0x6e, 0xa3, 0x6b, 0x10, + 0x15, 0xd5, 0xdf, 0xff, 0xf5, 0x32 ) ); + +/* AES-GCM test case 314 */ +CIPHER_TEST ( wycheproof_aes_gcm_34de0776, &aes_gcm_algorithm, + KEY ( 0xba, 0x76, 0xd5, 0x94, 0xa6, 0xdf, 0x91, 0x5b, 0xb7, 0xab, + 0x7e, 0x6d, 0x1a, 0x8d, 0x02, 0x4b, 0x27, 0x96, 0x33, 0x6c, + 0x1b, 0x83, 0x28, 0xa9 ), + IV(), + ADDITIONAL(), + PLAINTEXT ( 0xd6, 0x2f, 0x30, 0x27, 0x42, 0xd6, 0x1d, 0x82, 0x3e, + 0xa9, 0x91, 0xb9, 0x34, 0x30, 0xd5, 0x89 ), + CIPHERTEXT ( 0x50, 0x9b, 0x06, 0x58, 0xd0, 0x9f, 0x7a, 0x5b, 0xb9, + 0xdb, 0x43, 0xb7, 0x0c, 0x83, 0x87, 0xf7 ), + AUTH ( 0x2c, 0x94, 0x88, 0xd5, 0x3a, 0x0b, 0x2b, 0x53, 0x08, 0xc2, + 0x75, 0x7d, 0xfa, 0xc7, 0x21, 0x9f ) ); + +/* AES-GCM test case 315 */ +CIPHER_TEST ( wycheproof_aes_gcm_59e33b44, &aes_gcm_algorithm, + KEY ( 0x3f, 0x8c, 0xa4, 0x7b, 0x9a, 0x94, 0x05, 0x82, 0x64, 0x4e, + 0x8e, 0xcf, 0x9c, 0x2d, 0x44, 0xe8, 0x13, 0x83, 0x77, 0xa8, + 0x37, 0x9c, 0x5c, 0x11, 0xaa, 0xfe, 0x7f, 0xec, 0x19, 0x85, + 0x6c, 0xf1 ), + IV(), + ADDITIONAL(), + PLAINTEXT(), + CIPHERTEXT(), + AUTH ( 0x17, 0x26, 0xaa, 0x69, 0x5f, 0xba, 0xa2, 0x1a, 0x1d, 0xb8, + 0x84, 0x55, 0xc6, 0x70, 0xa4, 0xb0 ) ); + +/* AES-GCM test case 316 */ +CIPHER_TEST ( wycheproof_aes_gcm_5356a2cb, &aes_gcm_algorithm, + KEY ( 0x76, 0x60, 0xd1, 0x09, 0x66, 0xc6, 0x50, 0x39, 0x03, 0xa5, + 0x52, 0xdd, 0xe2, 0xa8, 0x09, 0xed, 0xe9, 0xda, 0x49, 0x0e, + 0x5e, 0x5c, 0xc3, 0xe3, 0x49, 0xda, 0x99, 0x96, 0x71, 0x80, + 0x98, 0x83 ), + IV(), + ADDITIONAL(), + PLAINTEXT ( 0xc3, 0x14, 0x23, 0x53, 0x41, 0xde, 0xbf, 0xaf, 0xa1, + 0x52, 0x6b, 0xb6, 0x10, 0x44, 0xa7, 0xf1 ), + CIPHERTEXT ( 0x77, 0x72, 0xea, 0x35, 0x89, 0x01, 0xf5, 0x71, 0xd3, + 0xd3, 0x5c, 0x19, 0x49, 0x76, 0x39, 0xd9 ), + AUTH ( 0x8f, 0xe0, 0x52, 0x0a, 0xd7, 0x44, 0xa1, 0x1f, 0x0c, 0xcf, + 0xd2, 0x28, 0x45, 0x43, 0x63, 0xfa ) ); + +/** Perform Wycheproof AES-GCM self-tests */ +void wycheproof_aes_gcm_exec ( void ) { + + /* Perform tests in tcId order */ + cipher_ok ( &wycheproof_aes_gcm_157a9714 ); + cipher_ok ( &wycheproof_aes_gcm_9790df61 ); + cipher_ok ( &wycheproof_aes_gcm_115b44f1 ); + cipher_ok ( &wycheproof_aes_gcm_b7fccaa3 ); + cipher_ok ( &wycheproof_aes_gcm_91d6ea82 ); + cipher_ok ( &wycheproof_aes_gcm_e6ac9d52 ); + cipher_ok ( &wycheproof_aes_gcm_e313ce55 ); + cipher_ok ( &wycheproof_aes_gcm_74a144dd ); + cipher_ok ( &wycheproof_aes_gcm_a14ec21f ); + cipher_ok ( &wycheproof_aes_gcm_70b4e6f3 ); + cipher_ok ( &wycheproof_aes_gcm_7f9ca8b2 ); + cipher_ok ( &wycheproof_aes_gcm_2f81ba3b ); + cipher_ok ( &wycheproof_aes_gcm_3324275e ); + cipher_ok ( &wycheproof_aes_gcm_d0b2b893 ); + cipher_ok ( &wycheproof_aes_gcm_d06a8069 ); + cipher_ok ( &wycheproof_aes_gcm_f9082b41 ); + cipher_ok ( &wycheproof_aes_gcm_8224427d ); + cipher_ok ( &wycheproof_aes_gcm_110d48ee ); + cipher_ok ( &wycheproof_aes_gcm_417222f0 ); + cipher_ok ( &wycheproof_aes_gcm_f01459e0 ); + cipher_ok ( &wycheproof_aes_gcm_bc589a7e ); + cipher_ok ( &wycheproof_aes_gcm_d63ed865 ); + cipher_ok ( &wycheproof_aes_gcm_d08a751a ); + cipher_ok ( &wycheproof_aes_gcm_471d4ead ); + cipher_ok ( &wycheproof_aes_gcm_7ff74d83 ); + cipher_ok ( &wycheproof_aes_gcm_93db813a ); + cipher_ok ( &wycheproof_aes_gcm_2ec43c3e ); + cipher_ok ( &wycheproof_aes_gcm_b9939500 ); + cipher_ok ( &wycheproof_aes_gcm_398af67e ); + cipher_ok ( &wycheproof_aes_gcm_831a61d8 ); + cipher_ok ( &wycheproof_aes_gcm_63336678 ); + cipher_ok ( &wycheproof_aes_gcm_a88873d1 ); + cipher_ok ( &wycheproof_aes_gcm_febb3d17 ); + cipher_ok ( &wycheproof_aes_gcm_6e67f3d3 ); + cipher_ok ( &wycheproof_aes_gcm_7e3aa6d7 ); + cipher_ok ( &wycheproof_aes_gcm_507e4bb7 ); + cipher_ok ( &wycheproof_aes_gcm_a74ffd89 ); + cipher_ok ( &wycheproof_aes_gcm_876dc2f0 ); + cipher_ok ( &wycheproof_aes_gcm_0e57609d ); + cipher_ok ( &wycheproof_aes_gcm_5b8dd48a ); + cipher_ok ( &wycheproof_aes_gcm_15eae47a ); + cipher_ok ( &wycheproof_aes_gcm_5bf301b1 ); + cipher_ok ( &wycheproof_aes_gcm_6d9ec3c9 ); + cipher_ok ( &wycheproof_aes_gcm_5e73e414 ); + cipher_ok ( &wycheproof_aes_gcm_d5198faa ); + cipher_ok ( &wycheproof_aes_gcm_ab750cbd ); + cipher_ok ( &wycheproof_aes_gcm_ea79dc25 ); + cipher_ok ( &wycheproof_aes_gcm_3397c9ae ); + cipher_ok ( &wycheproof_aes_gcm_347e1695 ); + cipher_ok ( &wycheproof_aes_gcm_63a3e6ca ); + cipher_ok ( &wycheproof_aes_gcm_dc6c9702 ); + cipher_ok ( &wycheproof_aes_gcm_942cc802 ); + cipher_ok ( &wycheproof_aes_gcm_77d7dce1 ); + cipher_ok ( &wycheproof_aes_gcm_471412a0 ); + cipher_ok ( &wycheproof_aes_gcm_a9c89f85 ); + cipher_ok ( &wycheproof_aes_gcm_db3f21b0 ); + cipher_ok ( &wycheproof_aes_gcm_0755dc1c ); + cipher_ok ( &wycheproof_aes_gcm_1a31814f ); + cipher_ok ( &wycheproof_aes_gcm_8e51b36a ); + cipher_ok ( &wycheproof_aes_gcm_8737599d ); + cipher_ok ( &wycheproof_aes_gcm_0d33db46 ); + cipher_ok ( &wycheproof_aes_gcm_2bdc78c7 ); + cipher_ok ( &wycheproof_aes_gcm_d5bfae8c ); + cipher_ok ( &wycheproof_aes_gcm_4ba4c501 ); + cipher_ok ( &wycheproof_aes_gcm_13666319 ); + cipher_ok ( &wycheproof_aes_gcm_ba5c6dd8 ); + cipher_ok ( &wycheproof_aes_gcm_c95dab82 ); + cipher_ok ( &wycheproof_aes_gcm_ae22db55 ); + cipher_ok ( &wycheproof_aes_gcm_d6dc5d07 ); + cipher_ok ( &wycheproof_aes_gcm_c761752c ); + cipher_ok ( &wycheproof_aes_gcm_c63f1aed ); + cipher_ok ( &wycheproof_aes_gcm_dd4fb2f4 ); + cipher_ok ( &wycheproof_aes_gcm_922348b7 ); + cipher_ok ( &wycheproof_aes_gcm_90face03 ); + cipher_ok ( &wycheproof_aes_gcm_d999cc8e ); + cipher_ok ( &wycheproof_aes_gcm_4af502aa ); + cipher_ok ( &wycheproof_aes_gcm_4ebc55c7 ); + cipher_ok ( &wycheproof_aes_gcm_888186c8 ); + cipher_ok ( &wycheproof_aes_gcm_4a6005f6 ); + cipher_ok ( &wycheproof_aes_gcm_2d04655c ); + cipher_ok ( &wycheproof_aes_gcm_56b6987d ); + cipher_ok ( &wycheproof_aes_gcm_644b8aad ); + cipher_ok ( &wycheproof_aes_gcm_97bb5e35 ); + cipher_ok ( &wycheproof_aes_gcm_123ab900 ); + cipher_ok ( &wycheproof_aes_gcm_ea998729 ); + cipher_ok ( &wycheproof_aes_gcm_cdad6d3a ); + cipher_ok ( &wycheproof_aes_gcm_e77da61d ); + cipher_ok ( &wycheproof_aes_gcm_599f93e3 ); + cipher_ok ( &wycheproof_aes_gcm_12c1aa5e ); + cipher_ok ( &wycheproof_aes_gcm_b2c6c3cd ); + cipher_ok ( &wycheproof_aes_gcm_293c46f8 ); + cipher_ok ( &wycheproof_aes_gcm_1af86832 ); + cipher_ok ( &wycheproof_aes_gcm_d03f18fe ); + cipher_ok ( &wycheproof_aes_gcm_63a399bd ); + cipher_ok ( &wycheproof_aes_gcm_03a1cf9e ); + cipher_ok ( &wycheproof_aes_gcm_41df38af ); + cipher_ok ( &wycheproof_aes_gcm_1a8fedd4 ); + cipher_ok ( &wycheproof_aes_gcm_c5c5e61c ); + cipher_ok ( &wycheproof_aes_gcm_ceefcefc ); + cipher_ok ( &wycheproof_aes_gcm_21500b95 ); + cipher_ok ( &wycheproof_aes_gcm_e2c3a1a4 ); + cipher_ok ( &wycheproof_aes_gcm_77767307 ); + cipher_ok ( &wycheproof_aes_gcm_f5cabfe8 ); + cipher_ok ( &wycheproof_aes_gcm_14ea057a ); + cipher_ok ( &wycheproof_aes_gcm_b2454cd9 ); + cipher_ok ( &wycheproof_aes_gcm_a605fd40 ); + cipher_ok ( &wycheproof_aes_gcm_5fc2c3a4 ); + cipher_ok ( &wycheproof_aes_gcm_c73596ff ); + cipher_ok ( &wycheproof_aes_gcm_8b84b201 ); + cipher_ok ( &wycheproof_aes_gcm_077de8ed ); + cipher_ok ( &wycheproof_aes_gcm_8895d57d ); + cipher_ok ( &wycheproof_aes_gcm_bca38eea ); + cipher_ok ( &wycheproof_aes_gcm_e281bdf1 ); + cipher_ok ( &wycheproof_aes_gcm_09e34ed6 ); + cipher_ok ( &wycheproof_aes_gcm_a20bd785 ); + cipher_ok ( &wycheproof_aes_gcm_4d3c95a4 ); + cipher_ok ( &wycheproof_aes_gcm_fdf02744 ); + cipher_ok ( &wycheproof_aes_gcm_19fae6ad ); + cipher_ok ( &wycheproof_aes_gcm_de129db1 ); + cipher_ok ( &wycheproof_aes_gcm_1d084de2 ); + cipher_ok ( &wycheproof_aes_gcm_a5bb8fa1 ); + cipher_ok ( &wycheproof_aes_gcm_94e6bc4f ); + cipher_ok ( &wycheproof_aes_gcm_10226199 ); + cipher_ok ( &wycheproof_aes_gcm_0b1e8b5b ); + cipher_ok ( &wycheproof_aes_gcm_96e5612f ); + cipher_ok ( &wycheproof_aes_gcm_2e57ea6b ); + cipher_ok ( &wycheproof_aes_gcm_08c164fc ); + cipher_ok ( &wycheproof_aes_gcm_19c96e4e ); + cipher_ok ( &wycheproof_aes_gcm_63801d8f ); + cipher_ok ( &wycheproof_aes_gcm_3d467b77 ); + cipher_ok ( &wycheproof_aes_gcm_566b5fcd ); + cipher_ok ( &wycheproof_aes_gcm_39054267 ); + cipher_ok ( &wycheproof_aes_gcm_99c80b8d ); + cipher_ok ( &wycheproof_aes_gcm_c40c4226 ); + cipher_ok ( &wycheproof_aes_gcm_b6419c85 ); + cipher_ok ( &wycheproof_aes_gcm_1c119a15 ); + cipher_ok ( &wycheproof_aes_gcm_e36c2be6 ); + cipher_ok ( &wycheproof_aes_gcm_93996ee5 ); + cipher_ok ( &wycheproof_aes_gcm_6aada21e ); + cipher_ok ( &wycheproof_aes_gcm_f50057ef ); + cipher_ok ( &wycheproof_aes_gcm_7095e3af ); + cipher_ok ( &wycheproof_aes_gcm_ff5845cf ); + cipher_ok ( &wycheproof_aes_gcm_2b7f8f4f ); + cipher_ok ( &wycheproof_aes_gcm_d993a57b ); + cipher_ok ( &wycheproof_aes_gcm_009e52d4 ); + cipher_ok ( &wycheproof_aes_gcm_2eef8b22 ); + cipher_ok ( &wycheproof_aes_gcm_a2b24e57 ); + cipher_ok ( &wycheproof_aes_gcm_4cccfc2f ); + cipher_ok ( &wycheproof_aes_gcm_0b49b77a ); + cipher_ok ( &wycheproof_aes_gcm_86a429e2 ); + cipher_ok ( &wycheproof_aes_gcm_8ed4ba4c ); + cipher_ok ( &wycheproof_aes_gcm_0e8ed23e ); + cipher_ok ( &wycheproof_aes_gcm_b1a4bc0b ); + cipher_ok ( &wycheproof_aes_gcm_b025b360 ); + cipher_ok ( &wycheproof_aes_gcm_f5019269 ); + cipher_ok ( &wycheproof_aes_gcm_31562fe1 ); + cipher_ok ( &wycheproof_aes_gcm_49e334ce ); + cipher_ok ( &wycheproof_aes_gcm_6677d2a7 ); + cipher_ok ( &wycheproof_aes_gcm_5d6316ec ); + cipher_ok ( &wycheproof_aes_gcm_6c7b5516 ); + cipher_ok ( &wycheproof_aes_gcm_3d134168 ); + cipher_ok ( &wycheproof_aes_gcm_637cdd7c ); + cipher_ok ( &wycheproof_aes_gcm_a524a3e1 ); + cipher_ok ( &wycheproof_aes_gcm_b5f09448 ); + cipher_ok ( &wycheproof_aes_gcm_c90d1019 ); + cipher_ok ( &wycheproof_aes_gcm_cc16f896 ); + cipher_ok ( &wycheproof_aes_gcm_c9b9c25b ); + cipher_ok ( &wycheproof_aes_gcm_9bcfa234 ); + cipher_ok ( &wycheproof_aes_gcm_02e3c344 ); + cipher_ok ( &wycheproof_aes_gcm_0a6597f4 ); + cipher_ok ( &wycheproof_aes_gcm_4723a634 ); + cipher_ok ( &wycheproof_aes_gcm_b7cd0c19 ); + cipher_ok ( &wycheproof_aes_gcm_bcf63dc2 ); + cipher_ok ( &wycheproof_aes_gcm_294b997d ); + cipher_ok ( &wycheproof_aes_gcm_c973e6d5 ); + cipher_ok ( &wycheproof_aes_gcm_9d586636 ); + cipher_ok ( &wycheproof_aes_gcm_07918c73 ); + cipher_ok ( &wycheproof_aes_gcm_807f66c0 ); + cipher_ok ( &wycheproof_aes_gcm_1a607e05 ); + cipher_ok ( &wycheproof_aes_gcm_848e090c ); + cipher_ok ( &wycheproof_aes_gcm_b238bfb2 ); + cipher_ok ( &wycheproof_aes_gcm_50ca31ab ); + cipher_ok ( &wycheproof_aes_gcm_7a0a5da7 ); + cipher_ok ( &wycheproof_aes_gcm_1b7eb29c ); + cipher_ok ( &wycheproof_aes_gcm_22ddd4ff ); + cipher_ok ( &wycheproof_aes_gcm_047fcc3d ); + cipher_ok ( &wycheproof_aes_gcm_b09553f4 ); + cipher_ok ( &wycheproof_aes_gcm_1dd3caab ); + cipher_ok ( &wycheproof_aes_gcm_9ff40949 ); + cipher_ok ( &wycheproof_aes_gcm_4bae909f ); + cipher_ok ( &wycheproof_aes_gcm_dbc87bdd ); + cipher_ok ( &wycheproof_aes_gcm_0834aa42 ); + cipher_ok ( &wycheproof_aes_gcm_0694ddb9 ); + cipher_ok ( &wycheproof_aes_gcm_c68a0e20 ); + cipher_ok ( &wycheproof_aes_gcm_a0b4e03a ); + cipher_ok ( &wycheproof_aes_gcm_42f63793 ); + cipher_ok ( &wycheproof_aes_gcm_a9355b80 ); + cipher_ok ( &wycheproof_aes_gcm_380d7036 ); + cipher_ok ( &wycheproof_aes_gcm_26a77e52 ); + cipher_ok ( &wycheproof_aes_gcm_7016eb5c ); + cipher_ok ( &wycheproof_aes_gcm_20abbc80 ); + cipher_ok ( &wycheproof_aes_gcm_1d93e9e2 ); + cipher_ok ( &wycheproof_aes_gcm_559a53ba ); + cipher_ok ( &wycheproof_aes_gcm_2fba3231 ); + cipher_ok ( &wycheproof_aes_gcm_51785cc5 ); + cipher_ok ( &wycheproof_aes_gcm_34d832ff ); + cipher_ok ( &wycheproof_aes_gcm_335f78f4 ); + cipher_ok ( &wycheproof_aes_gcm_39d2f365 ); + cipher_ok ( &wycheproof_aes_gcm_eaa17e87 ); + cipher_ok ( &wycheproof_aes_gcm_e95b49a5 ); + cipher_ok ( &wycheproof_aes_gcm_28dd9b0e ); + cipher_ok ( &wycheproof_aes_gcm_6ae5995a ); + cipher_ok ( &wycheproof_aes_gcm_df8aacfc ); + cipher_ok ( &wycheproof_aes_gcm_f248c8cf ); + cipher_ok ( &wycheproof_aes_gcm_bd6eb7fd ); + cipher_ok ( &wycheproof_aes_gcm_141e913b ); + cipher_ok ( &wycheproof_aes_gcm_d2887a50 ); + cipher_ok ( &wycheproof_aes_gcm_6a453e9b ); + cipher_ok ( &wycheproof_aes_gcm_54b2487f ); + cipher_ok ( &wycheproof_aes_gcm_2f6cfdb9 ); + cipher_ok ( &wycheproof_aes_gcm_353db382 ); + cipher_ok ( &wycheproof_aes_gcm_c0580c34 ); + cipher_ok ( &wycheproof_aes_gcm_6134968b ); + cipher_ok ( &wycheproof_aes_gcm_4fa6ed1d ); + cipher_ok ( &wycheproof_aes_gcm_0cd1dd62 ); + cipher_ok ( &wycheproof_aes_gcm_97734f40 ); + cipher_ok ( &wycheproof_aes_gcm_2054c1b6 ); + cipher_ok ( &wycheproof_aes_gcm_084d2089 ); + cipher_ok ( &wycheproof_aes_gcm_48d6b2ad ); + cipher_iv_fail_ok ( &wycheproof_aes_gcm_55e10870 ); + cipher_iv_fail_ok ( &wycheproof_aes_gcm_ce163a5a ); + cipher_iv_fail_ok ( &wycheproof_aes_gcm_acdd1126 ); + cipher_iv_fail_ok ( &wycheproof_aes_gcm_34de0776 ); + cipher_iv_fail_ok ( &wycheproof_aes_gcm_59e33b44 ); + cipher_iv_fail_ok ( &wycheproof_aes_gcm_5356a2cb ); +} diff --git a/src/tests/wycheproof_test.c b/src/tests/wycheproof_test.c index 39c319999..8368d2bda 100644 --- a/src/tests/wycheproof_test.c +++ b/src/tests/wycheproof_test.c @@ -52,6 +52,10 @@ FILE_LICENCE ( BSD2 ); /** Self-tests */ struct self_test wycheproof_test[] __self_test = { + { + .name = "wycheproof:aes-gcm", + .exec = wycheproof_aes_gcm_exec, + }, { .name = "wycheproof:hkdf-sha1", .exec = wycheproof_hkdf_sha1_exec, diff --git a/src/tests/wycheproof_test.h b/src/tests/wycheproof_test.h index 9650b96c1..26ccc7567 100644 --- a/src/tests/wycheproof_test.h +++ b/src/tests/wycheproof_test.h @@ -10,16 +10,19 @@ FILE_LICENCE ( BSD2 ); #include +#include #include #include #include #include #include #include +#include "cipher_test.h" #include "exchange_test.h" #include "hkdf_test.h" #include "hmac_test.h" +extern void wycheproof_aes_gcm_exec ( void ); extern void wycheproof_hkdf_sha1_exec ( void ); extern void wycheproof_hkdf_sha256_exec ( void ); extern void wycheproof_hkdf_sha384_exec ( void );