yuqei/wycheproof
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adding JSON test vectors for version 0.4.6.

Browse Source 
This CL only adds test vectors.
Changes using the new test vectors are in CL 199130745.

There are the following changes to version 0.4:
ECDSA test vectors with a valid signature but non-DER encoding
have "result":"invalid" and have the flag "BER".

Version 0.4.4 has some additional test vectors:
- Tests for invalid encoding of the INTEGER 0 (i.e. "0200" instead
of "020100")
- Truncation after the ASN tag.
- ECDH test vectors now include shared secrets in invalid test vectors.
  This allows to check if an implementation is just sloppy at comparing
  public keys (i.e. ignoring parameters) or vulnerable (i.e. using
  modified parameters for ECDH computation)
- More tests vectors like the unexplained test vector in b/74209208
- ECDH now has tests vectors where public and private keys are
  on different, but isomorphic curves. The result is invalid, since
  the encoding of the shared secret is undefined.
- ECDH has test vectors with modified ASN. Again the shared secret
  computed with the original public key is included so that it is
  a bit easier to distinguish between serious and non-serious cases.
- Some third party test cases were added to all files. They are
  removed.

Version 0.4.5:
- adds more test vectors for ECDSA.
- adds more test vectors for RSA signatures and splits the signatures
  into more files, sorted by key size and hash.
Version 0.4.6:
- adds an uncompressed encoding to EC keys.
- rsa_signature_test.json now contains more keys for size 1024 to 4096.
  Most keys only contain a small number of tests.
  More extensive tests are done with a 2048 bit key only.

New bugs:
BouncyCastle and ConsCrypt both accepts some invalid keys (with
additional garbage) as valid. These bugs are currently silenced
by marking the test vectors as acceptable. I.e. the first goal is
to verify that invalid ECDH keys cannot be used to find the private
key.

PiperOrigin-RevId: 199611433
GitOrigin-RevId: f1f99cc52617e18224ec98f84dcaa55c42df9b46
This commit is contained in:
Daniel Bleichenbacher
2018-06-07 03:52:42 -07:00
committed by Tink Team
parent 127d8022a2
commit b9b3b2119c
52 changed files with 133128 additions and 20764 deletions
Download Patch File Download Diff File Expand all files Collapse all files
javascript/webcryptoapi/testcases/RSASSA-PKCS1-v1_5Test.js
+1 -1
View File
@@ -55,7 +55,7 @@ function testRsaSsaPkcs1Vectors() {
}
for (var j = 0; j < tg['tests'].length; j++) {
var tc = tg['tests'][j];
var msg = BigInteger.fromHex(tc['msg']).toArrayBuffer();
var msg = TestUtil.hexToArrayBuffer(tc['msg']);
var sig = TestUtil.hexToArrayBuffer(tc['sig']);
var result = tc['result'];
var tcId = tc['tcId'];
testvectors/BUILD.bazel
+3 -13
View File
@@ -49,22 +49,12 @@ filegroup(
filegroup(
name = "ecdsa",
srcs = [
"ecdsa_brainpoolP256r1_sha256_test.json",
"ecdsa_secp224r1_sha224_test.json",
"ecdsa_secp224r1_sha256_test.json",
"ecdsa_secp256k1_sha256_test.json",
"ecdsa_secp256r1_sha256_test.json",
"ecdsa_secp384r1_sha384_test.json",
"ecdsa_secp384r1_sha512_test.json",
"ecdsa_secp521r1_sha512_test.json",
"ecdsa_test.json",
],
srcs = glob(["ecdsa_*test.json"]),
)
filegroup(
name = "ecdh",
srcs = ["ecdh_test.json"],
srcs = glob(["ecdh_*test.json"]),
)
filegroup(
@@ -74,7 +64,7 @@ filegroup(
filegroup(
name = "rsa_signature",
srcs = ["rsa_signature_test.json"],
srcs = glob(["rsa_signature_*test.json"]),
)
filegroup(
testvectors/aes_cbc_pkcs5_test.json
+2 -2
View File
@@ -1,10 +1,10 @@
{
"algorithm" : "AES-CBC-PKCS5",
"generatorVersion" : "0.4",
"numberOfTests" : 183,
"generatorVersion" : "0.4.6",
"notes" : {
"BadPadding" : "The ciphertext in this test vector is the message encrypted with an invalid or unexpected padding. This allows to find implementations that are not properly checking the padding during decryption."
},
"numberOfTests" : 183,
"header" : [],
"testGroups" : [
{
testvectors/aes_cmac_test.json
+1 -1
View File
@@ -1,6 +1,6 @@
{
"algorithm" : "AES-CMAC",
"generatorVersion" : "0.4",
"generatorVersion" : "0.4.6",
"numberOfTests" : 290,
"header" : [],
"testGroups" : [
testvectors/aes_eax_test.json
+2 -2
View File
@@ -1,10 +1,10 @@
{
"algorithm" : "AES-EAX",
"generatorVersion" : "0.4",
"numberOfTests" : 155,
"generatorVersion" : "0.4.6",
"notes" : {
"CounterWrap" : "AES-EAX reduces the counter value modulo 2**128. This test vector was constructed for testing the wrapping of the counter value."
},
"numberOfTests" : 155,
"header" : [],
"testGroups" : [
{
testvectors/aes_gcm_siv_test.json
+2 -2
View File
@@ -1,10 +1,10 @@
{
"algorithm" : "AES-GCM",
"generatorVersion" : "0.4",
"numberOfTests" : 143,
"generatorVersion" : "0.4.6",
"notes" : {
"ConstructedIv" : "The counter for AES-GCM-SIV is reduced modulo 2**32. This test vector was constructed to test for correct wrapping of the counter."
},
"numberOfTests" : 143,
"header" : [],
"testGroups" : [
{
testvectors/aes_gcm_test.json
+2 -2
View File
@@ -1,11 +1,11 @@
{
"algorithm" : "AES-GCM",
"generatorVersion" : "0.4",
"numberOfTests" : 104,
"generatorVersion" : "0.4.6",
"notes" : {
"ConstructedIv" : "The counter for AES-GCM is reduced modulo 2**32. This test vector was constructed to test for correct wrapping of the counter.",
"ZeroLengthIv" : "AES-GCM does not allow an IV of length 0. Encrypting with such an IV leaks the authentication key. Hence using an IV of length 0 is insecure even if the key itself is only used for a single encryption."
},
"numberOfTests" : 104,
"header" : [],
"testGroups" : [
{
testvectors/aes_siv_cmac_test.json
+2 -2
View File
@@ -1,10 +1,10 @@
{
"algorithm" : "AES-SIV-CMAC",
"generatorVersion" : "0.4",
"numberOfTests" : 442,
"generatorVersion" : "0.4.6",
"notes" : {
"EdgeCaseSiv" : "The SIV of this test vector has an edge case value. One purpose of these test vectors is to detect implementations where integer overflows of the counter is incorrectly implemented. AES-SIV itself prevents such overflow problems by clearing some msbs in the IV."
},
"numberOfTests" : 442,
"header" : [],
"testGroups" : [
{
testvectors/chacha20_poly1305_test.json
+1 -1
View File
@@ -1,6 +1,6 @@
{
"algorithm" : "CHACHA20-POLY1305",
"generatorVersion" : "0.4",
"generatorVersion" : "0.4.6",
"numberOfTests" : 151,
"header" : [],
"testGroups" : [
testvectors/dsa_test.json
+1721 -1529
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_brainpoolP224r1_test.json
+3438
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_brainpoolP256r1_test.json
+3446
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_brainpoolP320r1_test.json
+3436
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_brainpoolP384r1_test.json
+3550
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_brainpoolP512r1_test.json
+3334
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_secp224r1_test.json
+3300
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_secp256k1_test.json
+3400
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_secp256r1_test.json
+3436
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_secp384r1_test.json
+3372
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_secp521r1_test.json
+3557
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_test.json
+39555 -1621
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdh_webcrypto_test.json
+47 -24
View File
@@ -1,20 +1,23 @@
{
"algorithm" : "ECDH",
"generatorVersion" : "0.4",
"numberOfTests" : 148,
"generatorVersion" : "0.4.6",
"notes" : {
"AddSubChain" : "The private key has a special value. Implementations using addition subtraction chains for the point multiplication may get the point at infinity as an intermediate result. See CVE_2017_10176",
"CVE_2017_10176" : "This test vector leads to an EC point multiplication where an intermediate result can be the point at infinity, if addition-subtraction chains are used to speed up the point multiplication.",
"InvalidPublic" : "The public key has been modified and is invalid. An implementation should always check whether the public key is valid and on the same curve as the private key. The test vector includes the shared secret computed with the original public key. Generating a shared secret other than the one with the original key likely indicates that the bug is exploitable.",
"ModifiedPrime" : "The modulus of the public key has been modified. The public point of the public key has been chosen so that it is both a point on both the curve of the modified public key and the private key.",
"UnnamedCurve" : "The public key does not use a named curve. RFC 3279 allows to encode such curves by explicitly encoding, the parameters of the curve equation, modulus, generator, order and cofactor. However, many crypto libraries only support named curves. Modifying some of the EC parameters and encoding the corresponding public key as an unnamed curve is a potential attack vector.",
"UnusedParam" : "A parameter that is typically not used for ECDH has been modified. Sometimes libraries ignore small differences between public and private key. For example, a library might ignore an incorrect cofactor in the public key. We consider ignoring such changes as acceptable as long as these differences do not change the outcome of the ECDH computation, i.e. as long as the computation is done on the curve from the private key.",
"WeakPublicKey" : "The vector contains a weak public key. The curve is not a named curve, the public key point has order 3 and has been chosen to be on the same curve as the private key. This test vector is used to check ECC implementations for missing steps in the verification of the public key.",
"WrongOrder" : "The order of the public key has been modified. If this order is used in a cryptographic primitive instead of the correct order then private keys may leak. E.g. ECDHC in BC 1.52 suffered from this."
},
"numberOfTests" : 148,
"header" : [],
"testGroups" : [
{
"curve" : "P-256",
"encoding" : "webcrypto",
"type" : "ECHDComp",
"tests" : [
{
"tcId" : 1,
@@ -1011,9 +1014,11 @@
"x" : "Qd7jCiJE2SAcpk1v0t0Sa3CVNp5nOuyqpeBCMIUonV0",
"y" : "TRc1uShB5308iyBk3tLD1l2GkvCgVFJl322i5SuUock"
},
"shared" : "",
"shared" : "d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 44,
@@ -1034,13 +1039,15 @@
"x" : "Qd7jCiJE2SAcpk1v0t0Sa3CVNp5nOuyqpeBCMIUonV0",
"y" : "TRc1uShB5308iyBk3tLD1l2GkvCgVFJl322i5SuUock"
},
"shared" : "",
"shared" : "d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 45,
"comment" : "Private key and public key are not on the same curve",
"comment" : "Public key uses wrong curve: secp384r1",
"curve" : "P-256",
"public" : {
"crv" : "P-384",
@@ -1063,7 +1070,7 @@
},
{
"tcId" : 46,
"comment" : "Private key and public key are not on the same curve",
"comment" : "Public key uses wrong curve: secp521r1",
"curve" : "P-256",
"public" : {
"crv" : "P-521",
@@ -1088,6 +1095,8 @@
},
{
"curve" : "P-384",
"encoding" : "webcrypto",
"type" : "ECHDComp",
"tests" : [
{
"tcId" : 47,
@@ -2080,9 +2089,11 @@
"x" : "Zc5rnX5x6TG2_R-skQUHtDd6wV5FMpKiNV3zmrdByjYpe_bePDSlr7utNxgGuJHy",
"y" : "SwiLxdFGRqdPPvz-o54S4rX1brvdUD1ej-4_wwDXUJuqIrZo2_H9JBgHCrQKB9n2"
},
"shared" : "",
"shared" : "455cf3c0b0090688599825522ef3312878201514f6330ccc7f42ec1945204adfe419b2dbbfb942dc98b16d8323150cf6",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 90,
@@ -2103,9 +2114,11 @@
"x" : "Zc5rnX5x6TG2_R-skQUHtDd6wV5FMpKiNV3zmrdByjYpe_bePDSlr7utNxgGuJHy",
"y" : "SwiLxdFGRqdPPvz-o54S4rX1brvdUD1ej-4_wwDXUJuqIrZo2_H9JBgHCrQKB9n2"
},
"shared" : "",
"shared" : "455cf3c0b0090688599825522ef3312878201514f6330ccc7f42ec1945204adfe419b2dbbfb942dc98b16d8323150cf6",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 91,
@@ -2126,13 +2139,15 @@
"x" : "Zc5rnX5x6TG2_R-skQUHtDd6wV5FMpKiNV3zmrdByjYpe_bePDSlr7utNxgGuJHy",
"y" : "SwiLxdFGRqdPPvz-o54S4rX1brvdUD1ej-4_wwDXUJuqIrZo2_H9JBgHCrQKB9n2"
},
"shared" : "",
"shared" : "455cf3c0b0090688599825522ef3312878201514f6330ccc7f42ec1945204adfe419b2dbbfb942dc98b16d8323150cf6",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 92,
"comment" : "Private key and public key are not on the same curve",
"comment" : "Public key uses wrong curve: secp256r1",
"curve" : "P-384",
"public" : {
"crv" : "P-256",
@@ -2155,7 +2170,7 @@
},
{
"tcId" : 93,
"comment" : "Private key and public key are not on the same curve",
"comment" : "Public key uses wrong curve: secp521r1",
"curve" : "P-384",
"public" : {
"crv" : "P-521",
@@ -2180,6 +2195,8 @@
},
{
"curve" : "P-521",
"encoding" : "webcrypto",
"type" : "ECHDComp",
"tests" : [
{
"tcId" : 94,
@@ -3364,9 +3381,11 @@
"x" : "Aep4GB4E9ID9mJ4FlkJEYTt_emN5q_CBkyep9a3vpvRBB0UCi_GkaoAx_scAN-vLUH29j1C4EqS8wDE7p98Cx9NV",
"y" : "AeBFX-bOHqmYxzl1aUjPonu4sangygpQJjGDb5bg9d9mnLPKP298D5JAs9h-F0Fhs7BNg5q2_kbyRb1iZQXvS0FU"
},
"shared" : "",
"shared" : "00fb8542487cbd45e609632f681db6b48fdabed9b97a2467a34205eadadad9dedb54a2a647d23dca68e929a2041888b091f4bb4023a0517be669a6c9f9c847ef89de",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 145,
@@ -3387,9 +3406,11 @@
"x" : "Aep4GB4E9ID9mJ4FlkJEYTt_emN5q_CBkyep9a3vpvRBB0UCi_GkaoAx_scAN-vLUH29j1C4EqS8wDE7p98Cx9NV",
"y" : "AeBFX-bOHqmYxzl1aUjPonu4sangygpQJjGDb5bg9d9mnLPKP298D5JAs9h-F0Fhs7BNg5q2_kbyRb1iZQXvS0FU"
},
"shared" : "",
"shared" : "00fb8542487cbd45e609632f681db6b48fdabed9b97a2467a34205eadadad9dedb54a2a647d23dca68e929a2041888b091f4bb4023a0517be669a6c9f9c847ef89de",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 146,
@@ -3410,13 +3431,15 @@
"x" : "Aep4GB4E9ID9mJ4FlkJEYTt_emN5q_CBkyep9a3vpvRBB0UCi_GkaoAx_scAN-vLUH29j1C4EqS8wDE7p98Cx9NV",
"y" : "AeBFX-bOHqmYxzl1aUjPonu4sangygpQJjGDb5bg9d9mnLPKP298D5JAs9h-F0Fhs7BNg5q2_kbyRb1iZQXvS0FU"
},
"shared" : "",
"shared" : "00fb8542487cbd45e609632f681db6b48fdabed9b97a2467a34205eadadad9dedb54a2a647d23dca68e929a2041888b091f4bb4023a0517be669a6c9f9c847ef89de",
"result" : "invalid",
"flags" : []
"flags" : [
"InvalidPublic"
]
},
{
"tcId" : 147,
"comment" : "Private key and public key are not on the same curve",
"comment" : "Public key uses wrong curve: secp256r1",
"curve" : "P-521",
"public" : {
"crv" : "P-256",
@@ -3439,7 +3462,7 @@
},
{
"tcId" : 148,
"comment" : "Private key and public key are not on the same curve",
"comment" : "Public key uses wrong curve: secp384r1",
"curve" : "P-521",
"public" : {
"crv" : "P-384",
testvectors/ecdsa_brainpoolP224r1_sha224_test.json
+1363 -754
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_brainpoolP256r1_sha256_test.json
+1185 -799
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_brainpoolP320r1_sha384_test.json
+1121 -742
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_brainpoolP384r1_sha384_test.json
+1189 -802
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_brainpoolP512r1_sha512_test.json
+1547 -662
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp224r1_sha224_test.json
+1094 -711
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp224r1_sha256_test.json
+1094 -711
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp224r1_sha512_test.json
+4158
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp256k1_sha256_test.json
+1181 -794
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp256k1_sha512_test.json
+4190
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp256r1_sha256_test.json
+1132 -742
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp256r1_sha512_test.json
+4294
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp384r1_sha384_test.json
+1086 -703
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp384r1_sha512_test.json
+1086 -703
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_secp521r1_sha512_test.json
+1174 -790
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_test.json
+9618 -5180
View File
File diff suppressed because it is too large Load Diff
testvectors/ecdsa_webcrypto_test.json
+1738 -974
View File
File diff suppressed because it is too large Load Diff
testvectors/eddsa_test.json
+53 -53
View File
@@ -1,16 +1,13 @@
{
"algorithm" : "EDDSA",
"generatorVersion" : "0.4",
"numberOfTests" : 109,
"generatorVersion" : "0.4.6",
"notes" : {
"SignatureMalleability" : "EdDSA signatures are non-malleable, if implemented accordingly. Failing to check the range of S allows to modify signatures. See RFC 8032, Section 5.2.7 and Section 8.4."
},
"numberOfTests" : 109,
"header" : [],
"testGroups" : [
{
"keyDer" : "302a300506032b65700321007d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAfU0Of2FTpptiQrUiq77mhf2kQg+INLEIw72uNp71Sfo=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -18,6 +15,9 @@
"sk" : "add4bb8103785baf9ac534258e8aaf65f5f1adb5ef5f3df19bb80ab989c4d64b",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b65700321007d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAfU0Of2FTpptiQrUiq77mhf2kQg+INLEIw72uNp71Sfo=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 1,
@@ -582,9 +582,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100a12c2beb77265f2aac953b5009349d94155a03ada416aad451319480e983ca4c",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoSwr63cmXyqslTtQCTSdlBVaA62kFqrUUTGUgOmDykw=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -592,6 +589,9 @@
"sk" : "0a23a20072891237aa0864b5765139514908787878cd77135a0059881d313f00",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100a12c2beb77265f2aac953b5009349d94155a03ada416aad451319480e983ca4c",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoSwr63cmXyqslTtQCTSdlBVaA62kFqrUUTGUgOmDykw=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 69,
@@ -668,9 +668,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -678,6 +675,9 @@
"sk" : "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 78,
@@ -690,9 +690,6 @@
]
},
{
"keyDer" : "302a300506032b65700321003d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAPUAXw+hDiVqStwqnTRt+vJyYLM8uxJaMwM1V8Sr0Zgw=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -700,6 +697,9 @@
"sk" : "4ccd089b28ff96da9db6c346ec114e0f5b8a319f35aba624da8cf6ed4fb8a6fb",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b65700321003d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAPUAXw+hDiVqStwqnTRt+vJyYLM8uxJaMwM1V8Sr0Zgw=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 79,
@@ -712,9 +712,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100fc51cd8e6218a1a38da47ed00230f0580816ed13ba3303ac5deb911548908025",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA/FHNjmIYoaONpH7QAjDwWAgW7RO6MwOsXeuRFUiQgCU=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -722,6 +719,9 @@
"sk" : "c5aa8df43f9f837bedb7442f31dcb7b166d38535076f094b85ce3a2e0b4458f7",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100fc51cd8e6218a1a38da47ed00230f0580816ed13ba3303ac5deb911548908025",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA/FHNjmIYoaONpH7QAjDwWAgW7RO6MwOsXeuRFUiQgCU=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 80,
@@ -734,9 +734,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100278117fc144c72340f67d0f2316e8386ceffbf2b2428c9c51fef7c597f1d426e",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAJ4EX/BRMcjQPZ9DyMW6Dhs7/vyskKMnFH+98WX8dQm4=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -744,6 +741,9 @@
"sk" : "f5e5767cf153319517630f226876b86c8160cc583bc013744c6bf255f5cc0ee5",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100278117fc144c72340f67d0f2316e8386ceffbf2b2428c9c51fef7c597f1d426e",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAJ4EX/BRMcjQPZ9DyMW6Dhs7/vyskKMnFH+98WX8dQm4=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 81,
@@ -756,9 +756,6 @@
]
},
{
"keyDer" : "302a300506032b65700321008fd659b77b558ed93882c1157438450ac86ec62d421d568e98ee236f3810295a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAj9ZZt3tVjtk4gsEVdDhFCshuxi1CHVaOmO4jbzgQKVo=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -766,6 +763,9 @@
"sk" : "d7ad3f1f6bbe0477c3c357a806a19eb41ae3f94025035bc87f281f8ee9fc0e34",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b65700321008fd659b77b558ed93882c1157438450ac86ec62d421d568e98ee236f3810295a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAj9ZZt3tVjtk4gsEVdDhFCshuxi1CHVaOmO4jbzgQKVo=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 82,
@@ -778,9 +778,6 @@
]
},
{
"keyDer" : "302a300506032b65700321002a606bf67ac770c607038b004101b325edb569efd3413d2d1f2c3e6b4e6e3082",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKmBr9nrHcMYHA4sAQQGzJe21ae/TQT0tHyw+a05uMII=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -788,6 +785,9 @@
"sk" : "ad9b22793336fcdac10e136c4deea599be187a38eef91c1cf7c7a4ec884dda08",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b65700321002a606bf67ac770c607038b004101b325edb569efd3413d2d1f2c3e6b4e6e3082",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKmBr9nrHcMYHA4sAQQGzJe21ae/TQT0tHyw+a05uMII=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 83,
@@ -808,9 +808,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100c9c946cbc5544ac74eef491f07c5881c16faf7ec31ce4aa91bb60ae7b4539051",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAyclGy8VUSsdO70kfB8WIHBb69+wxzkqpG7YK57RTkFE=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -818,6 +815,9 @@
"sk" : "04a6553d68a9baef78a2175af375458eaa01cdb77350c61e282ef5f0c7116599",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100c9c946cbc5544ac74eef491f07c5881c16faf7ec31ce4aa91bb60ae7b4539051",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAyclGy8VUSsdO70kfB8WIHBb69+wxzkqpG7YK57RTkFE=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 85,
@@ -838,9 +838,6 @@
]
},
{
"keyDer" : "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -848,6 +845,9 @@
"sk" : "c367c8d2ebeeecd70c1e8985b70c3808b75657f243b21ba4f322792540e92257",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 87,
@@ -924,9 +924,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100c29ec1894e06d27b4e40486b4fa5063d66a746c7f9c323b12203c03b72b8b78a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwp7BiU4G0ntOQEhrT6UGPWanRsf5wyOxIgPAO3K4t4o=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -934,6 +931,9 @@
"sk" : "56c1e22d616cbb6dea869288b4b1c02bb98696583c2f6e650013a03e17049c62",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100c29ec1894e06d27b4e40486b4fa5063d66a746c7f9c323b12203c03b72b8b78a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwp7BiU4G0ntOQEhrT6UGPWanRsf5wyOxIgPAO3K4t4o=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 96,
@@ -954,9 +954,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -964,6 +961,9 @@
"sk" : "b7d2f64276df417fed27d8e15b4e90f6fd93dace707294c338bd32bc4bbd8fdb",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 98,
@@ -1008,9 +1008,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100529919c9c780985a841c42ba6c180ff2d67a276ccfbe281080e47ab71a758f56",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAUpkZyceAmFqEHEK6bBgP8tZ6J2zPvigQgOR6txp1j1Y=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -1018,6 +1015,9 @@
"sk" : "7d597c3b7283929d07ed8f01f31d2596823e5e46ab226c7be4234d1a9dcaef37",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100529919c9c780985a841c42ba6c180ff2d67a276ccfbe281080e47ab71a758f56",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAUpkZyceAmFqEHEK6bBgP8tZ6J2zPvigQgOR6txp1j1Y=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 103,
@@ -1038,9 +1038,6 @@
]
},
{
"keyDer" : "302a300506032b65700321002252b3d57c74cbf8bc460dc2e082847926bc022f09ab6ae95756362bfd1167c1",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAIlKz1Xx0y/i8Rg3C4IKEeSa8Ai8Jq2rpV1Y2K/0RZ8E=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -1048,6 +1045,9 @@
"sk" : "f401cee4bfb1732f0e9b8d8ba79469565c3115296141dbdf7e9c311a0ac1823b",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b65700321002252b3d57c74cbf8bc460dc2e082847926bc022f09ab6ae95756362bfd1167c1",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAIlKz1Xx0y/i8Rg3C4IKEeSa8Ai8Jq2rpV1Y2K/0RZ8E=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 105,
@@ -1068,9 +1068,6 @@
]
},
{
"keyDer" : "302a300506032b6570032100c0a773110f975de3732355bb7ec7f0c41c091c0252966070205516693b992a4a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwKdzEQ+XXeNzI1W7fsfwxBwJHAJSlmBwIFUWaTuZKko=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -1078,6 +1075,9 @@
"sk" : "3d658956410377d0644676d2599542412a4f3b0e4eadfb7f3f836615f42b18bc",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b6570032100c0a773110f975de3732355bb7ec7f0c41c091c0252966070205516693b992a4a",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwKdzEQ+XXeNzI1W7fsfwxBwJHAJSlmBwIFUWaTuZKko=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 107,
@@ -1090,9 +1090,6 @@
]
},
{
"keyDer" : "302a300506032b657003210054cda623245759ad6d43e620a606908befc633d60792bc7798447a0ef38e7311",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAVM2mIyRXWa1tQ+YgpgaQi+/GM9YHkrx3mER6DvOOcxE=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -1100,6 +1097,9 @@
"sk" : "bccb61323840c2a96fc36f7e54ea6c8e55f9d221f7f05791ed60025e06064439",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b657003210054cda623245759ad6d43e620a606908befc633d60792bc7798447a0ef38e7311",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAVM2mIyRXWa1tQ+YgpgaQi+/GM9YHkrx3mER6DvOOcxE=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 108,
@@ -1112,9 +1112,6 @@
]
},
{
"keyDer" : "302a300506032b65700321002362bac514d5fad33802642e979a1e82de6eb6f1bcbf6a5b304f2bb02b9e57fe",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAI2K6xRTV+tM4AmQul5oegt5utvG8v2pbME8rsCueV/4=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"key" : {
"curve" : "edwards25519",
"keySize" : 255,
@@ -1122,6 +1119,9 @@
"sk" : "f2d3023b9c19e241748bc4039a7a43c595701f23675505015213a8a2a0274c1b",
"type" : "EDDSAKeyPair"
},
"keyDer" : "302a300506032b65700321002362bac514d5fad33802642e979a1e82de6eb6f1bcbf6a5b304f2bb02b9e57fe",
"keyPem" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAI2K6xRTV+tM4AmQul5oegt5utvG8v2pbME8rsCueV/4=\n-----END PUBLIC KEY-----\n",
"type" : "EDDSAVer",
"tests" : [
{
"tcId" : 109,
testvectors/kw_test.json
+1 -1
View File
@@ -1,6 +1,6 @@
{
"algorithm" : "KW",
"generatorVersion" : "0.4.2",
"generatorVersion" : "0.4.6",
"numberOfTests" : 162,
"header" : [],
"testGroups" : [
testvectors/kwp_test.json
+1 -1
View File
@@ -1,6 +1,6 @@
{
"algorithm" : "KWP",
"generatorVersion" : "0.4.2",
"generatorVersion" : "0.4.6",
"numberOfTests" : 224,
"header" : [],
"testGroups" : [
testvectors/rsa_signature_2048_sha224_test.json
+2113
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_2048_sha256_test.json
+2095
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_2048_sha512_test.json
+2095
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_3072_sha256_test.json
+2095
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_3072_sha384_test.json
+2095
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_3072_sha512_test.json
+2095
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_4096_sha384_test.json
+2095
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_4096_sha512_test.json
+2095
View File
File diff suppressed because it is too large Load Diff
testvectors/rsa_signature_test.json
+2128 -2343
View File
File diff suppressed because it is too large Load Diff
testvectors/x25519_test.json
+309 -99
View File
@@ -1,10 +1,12 @@
{
"algorithm" : "X25519",
"generatorVersion" : "0.4",
"numberOfTests" : 72,
"generatorVersion" : "0.4.6",
"notes" : {
"LowOrderPublic" : "Curve25519 or its twist contains some points of low order. This test vector contains a public key with such a point. While many libraries reject such public keys, doing so is not a strict requirement according to RFC 7748.",
"Small public key" : "The public key is insecure and does not belong to a valid private key. Some libraries reject such keys.",
"Twist" : "Public keys are either points on curve25519 or points on its twist. Implementations may either reject such keys or compute X25519 using the twist. If a point multiplication is performed then it is important that the result is correct, since otherwise attacks with invalid keys are possible."
},
"numberOfTests" : 87,
"header" : [],
"testGroups" : [
{
@@ -22,6 +24,18 @@
},
{
"tcId" : 2,
"comment" : "normal case",
"curve" : "curve25519",
"public" : "9c647d9ae589b9f58fdc3ca4947efbc915c4b2e08e744a0edf469dac59c8f85a",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "4b82bd8650ea9b81a42181840926a4ffa16434d1bf298de1db87efb5b0a9e34e",
"result" : "valid",
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 3,
"comment" : "public key on twist",
"curve" : "curve25519",
"public" : "63aa40c6e38346c5caf23a6df0a5e6c80889a08647e551b3563449befcfc9733",
@@ -33,7 +47,7 @@
]
},
{
"tcId" : 3,
"tcId" : 4,
"comment" : "public key on twist",
"curve" : "curve25519",
"public" : "0f83c36fded9d32fadf4efa3ae93a90bb5cfa66893bc412c43fa7287dbb99779",
@@ -45,7 +59,7 @@
]
},
{
"tcId" : 4,
"tcId" : 5,
"comment" : "public key on twist",
"curve" : "curve25519",
"public" : "0b8211a2b6049097f6871c6c052d3c5fc1ba17da9e32ae458403b05bb283092a",
@@ -57,7 +71,7 @@
]
},
{
"tcId" : 5,
"tcId" : 6,
"comment" : "public key on twist",
"curve" : "curve25519",
"public" : "343ac20a3b9c6a27b1008176509ad30735856ec1c8d8fcae13912d08d152f46c",
@@ -69,7 +83,7 @@
]
},
{
"tcId" : 6,
"tcId" : 7,
"comment" : "public key on twist",
"curve" : "curve25519",
"public" : "fa695fc7be8d1be5bf704898f388c452bafdd3b8eae805f8681a8d15c2d4e142",
@@ -81,87 +95,103 @@
]
},
{
"tcId" : 7,
"tcId" : 8,
"comment" : "public key = 0",
"curve" : "curve25519",
"public" : "0000000000000000000000000000000000000000000000000000000000000000",
"private" : "207494038f2bb811d47805bcdf04a2ac585ada7f2f23389bfd4658f9ddd4debc",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"Small public key"
]
},
{
"tcId" : 8,
"tcId" : 9,
"comment" : "public key = 1",
"curve" : "curve25519",
"public" : "0100000000000000000000000000000000000000000000000000000000000000",
"private" : "202e8972b61c7e61930eb9450b5070eae1c670475685541f0476217e4818cfab",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"Small public key"
]
},
{
"tcId" : 9,
"tcId" : 10,
"comment" : "edge case on twist",
"curve" : "curve25519",
"public" : "0200000000000000000000000000000000000000000000000000000000000000",
"private" : "38dde9f3e7b799045f9ac3793d4a9277dadeadc41bec0290f81f744f73775f84",
"shared" : "9a2cfe84ff9c4a9739625cae4a3b82a906877a441946f8d7b3d795fe8f5d1639",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 10,
"tcId" : 11,
"comment" : "edge case on twist",
"curve" : "curve25519",
"public" : "0300000000000000000000000000000000000000000000000000000000000000",
"private" : "9857a914e3c29036fd9a442ba526b5cdcdf28216153e636c10677acab6bd6aa5",
"shared" : "4da4e0aa072c232ee2f0fa4e519ae50b52c1edd08a534d4ef346c2e106d21d60",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 11,
"tcId" : 12,
"comment" : "edge case on twist",
"curve" : "curve25519",
"public" : "ffffff030000f8ffff1f0000c0ffffff000000feffff070000f0ffff3f000000",
"private" : "48e2130d723305ed05e6e5894d398a5e33367a8c6aac8fcdf0a88e4b42820db7",
"shared" : "9ed10c53747f647f82f45125d3de15a1e6b824496ab40410ffcc3cfe95760f3b",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 12,
"tcId" : 13,
"comment" : "edge case on twist",
"curve" : "curve25519",
"public" : "000000fcffff070000e0ffff3f000000ffffff010000f8ffff0f0000c0ffff7f",
"private" : "28f41011691851b3a62b641553b30d0dfddcb8fffcf53700a7be2f6a872e9fb0",
"shared" : "cf72b4aa6aa1c9f894f4165b86109aa468517648e1f0cc70e1ab08460176506b",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 13,
"tcId" : 14,
"comment" : "edge case on twist",
"curve" : "curve25519",
"public" : "00000000ffffffff00000000ffffffff00000000ffffffff00000000ffffff7f",
"private" : "18a93b6499b9f6b3225ca02fef410e0adec23532321d2d8ef1a6d602a8c65b83",
"shared" : "5d50b62836bb69579410386cf7bb811c14bf85b1c7b17e5924c7ffea91ef9e12",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 14,
"tcId" : 15,
"comment" : "edge case on twist",
"curve" : "curve25519",
"public" : "eaffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"private" : "c01d1305a1338a1fcac2ba7e2e032b427e0b04903165aca957d8d0553d8717b0",
"shared" : "19230eb148d5d67c3c22ab1daeff80a57eae4265ce2872657b2c8099fc698e50",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 15,
"tcId" : 16,
"comment" : "edge case for public key",
"curve" : "curve25519",
"public" : "0400000000000000000000000000000000000000000000000000000000000000",
@@ -171,7 +201,7 @@
"flags" : []
},
{
"tcId" : 16,
"tcId" : 17,
"comment" : "edge case for public key",
"curve" : "curve25519",
"public" : "ffffffff00000000ffffffff00000000ffffffff00000000ffffffff00000000",
@@ -181,7 +211,7 @@
"flags" : []
},
{
"tcId" : 17,
"tcId" : 18,
"comment" : "edge case for public key",
"curve" : "curve25519",
"public" : "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03",
@@ -191,7 +221,7 @@
"flags" : []
},
{
"tcId" : 18,
"tcId" : 19,
"comment" : "edge case for public key",
"curve" : "curve25519",
"public" : "fffffffbfffffbffffdfffffdffffffffefffffefffff7fffff7ffffbfffff3f",
@@ -201,7 +231,7 @@
"flags" : []
},
{
"tcId" : 19,
"tcId" : 20,
"comment" : "edge case for public key",
"curve" : "curve25519",
"public" : "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3f",
@@ -211,7 +241,7 @@
"flags" : []
},
{
"tcId" : 20,
"tcId" : 21,
"comment" : "edge case for public key",
"curve" : "curve25519",
"public" : "fffffffffeffff7ffffffffffeffff7ffffffffffeffff7ffffffffffeffff7f",
@@ -221,7 +251,7 @@
"flags" : []
},
{
"tcId" : 21,
"tcId" : 22,
"comment" : "edge case for public key",
"curve" : "curve25519",
"public" : "ebffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
@@ -231,127 +261,291 @@
"flags" : []
},
{
"tcId" : 22,
"tcId" : 23,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "e0eb7a7c3b41b8ae1656e3faf19fc46ada098deb9c32b1fd866205165f49b800",
"private" : "10255c9230a97a30a458ca284a629669293a31890cda9d147febc7d1e22d6bb1",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 23,
"tcId" : 24,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "5f9c95bca3508c24b1d0b1559c83ef5b04445cc4581c8e86d8224eddd09f1157",
"private" : "78f1e8edf14481b389448dac8f59c70b038e7cf92ef2c7eff57a72466e115296",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 24,
"tcId" : 25,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"private" : "a0a05a3e8f9f44204d5f8059a94ac7dfc39a49ac016dd743dbfa43c5d671fd88",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 25,
"tcId" : 26,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"private" : "d0dbb3ed1906663f15420af31f4eaf6509d9a9949723500605ad7c1c6e7450a9",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 26,
"tcId" : 27,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "eeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"private" : "c0b1d0eb22b244fe3291140072cdd9d989b5f0ecd96c100feb5bca241c1d9f8f",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 27,
"tcId" : 28,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "0000000000000000000000000000000000000000000000000000000000000080",
"private" : "480bf45f594942a8bc0f3353c6e8b8853d77f351f1c2ca6c2d1abf8a00b4229c",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 28,
"tcId" : 29,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "0100000000000000000000000000000000000000000000000000000000000080",
"private" : "30f993fcf8514fc89bd8db14cd43ba0d4b2530e73c4276a05e1b145d420cedb4",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 29,
"tcId" : 30,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "e0eb7a7c3b41b8ae1656e3faf19fc46ada098deb9c32b1fd866205165f49b880",
"private" : "c04974b758380e2a5b5df6eb09bb2f6b3434f982722a8e676d3da251d1b3de83",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 30,
"tcId" : 31,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "5f9c95bca3508c24b1d0b1559c83ef5b04445cc4581c8e86d8224eddd09f11d7",
"private" : "502a31373db32446842fe5add3e024022ea54f274182afc3d9f1bb3d39534eb5",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 31,
"tcId" : 32,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
"private" : "90fa6417b0e37030fd6e43eff2abaef14c6793117a039cf621318ba90f4e98be",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 32,
"tcId" : 33,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
"private" : "78ad3f26027f1c9fdd975a1613b947779bad2cf2b741ade01840885a30bb979c",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 33,
"tcId" : 34,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "eeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
"private" : "98e23de7b1e0926ed9c87e7b14baf55f497a1d7096f93977680e44dc1c7b7b8b",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : [
"LowOrderPublic"
]
},
{
"tcId" : 35,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "0000000000000000000000000000000000000000000000000000000000000000",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 34,
"tcId" : 36,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "0100000000000000000000000000000000000000000000000000000000000000",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 37,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 38,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "5f9c95bca3508c24b1d0b1559c83ef5b04445cc4581c8e86d8224eddd09f1157",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 39,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "e0eb7a7c3b41b8ae1656e3faf19fc46ada098deb9c32b1fd866205165f49b800",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 40,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 41,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "eeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 42,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "0000000000000000000000000000000000000000000000000000000000000080",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 43,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "0100000000000000000000000000000000000000000000000000000000000080",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 44,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 45,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "5f9c95bca3508c24b1d0b1559c83ef5b04445cc4581c8e86d8224eddd09f11d7",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 46,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "e0eb7a7c3b41b8ae1656e3faf19fc46ada098deb9c32b1fd866205165f49b880",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 47,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 48,
"comment" : "public key with low order",
"curve" : "curve25519",
"public" : "eeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
"private" : "1064a67da639a8f6df4fbea2d63358b65bca80a770712e14ea8a72df5a3313ae",
"shared" : "0000000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
},
{
"tcId" : 49,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "efffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
@@ -361,7 +555,7 @@
"flags" : []
},
{
"tcId" : 35,
"tcId" : 50,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
@@ -371,7 +565,7 @@
"flags" : []
},
{
"tcId" : 36,
"tcId" : 51,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "f1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
@@ -381,7 +575,7 @@
"flags" : []
},
{
"tcId" : 37,
"tcId" : 52,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
@@ -391,7 +585,7 @@
"flags" : []
},
{
"tcId" : 38,
"tcId" : 53,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "0200000000000000000000000000000000000000000000000000000000000080",
@@ -401,7 +595,7 @@
"flags" : []
},
{
"tcId" : 39,
"tcId" : 54,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "0300000000000000000000000000000000000000000000000000000000000080",
@@ -411,7 +605,7 @@
"flags" : []
},
{
"tcId" : 40,
"tcId" : 55,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "0400000000000000000000000000000000000000000000000000000000000080",
@@ -421,7 +615,7 @@
"flags" : []
},
{
"tcId" : 41,
"tcId" : 56,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "daffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -431,7 +625,7 @@
"flags" : []
},
{
"tcId" : 42,
"tcId" : 57,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -441,7 +635,7 @@
"flags" : []
},
{
"tcId" : 43,
"tcId" : 58,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "dcffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -451,7 +645,7 @@
"flags" : []
},
{
"tcId" : 44,
"tcId" : 59,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "eaffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -461,7 +655,7 @@
"flags" : []
},
{
"tcId" : 45,
"tcId" : 60,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "ebffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -471,7 +665,7 @@
"flags" : []
},
{
"tcId" : 46,
"tcId" : 61,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "efffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -481,7 +675,7 @@
"flags" : []
},
{
"tcId" : 47,
"tcId" : 62,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -491,7 +685,7 @@
"flags" : []
},
{
"tcId" : 48,
"tcId" : 63,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "f1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -501,7 +695,7 @@
"flags" : []
},
{
"tcId" : 49,
"tcId" : 64,
"comment" : "public key >= p",
"curve" : "curve25519",
"public" : "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
@@ -511,7 +705,7 @@
"flags" : []
},
{
"tcId" : 50,
"tcId" : 65,
"comment" : "RFC 7748",
"curve" : "curve25519",
"public" : "e6db6867583030db3594c1a424b15f7c726624ec26b3353b10a903a6d0ab1c4c",
@@ -521,7 +715,7 @@
"flags" : []
},
{
"tcId" : 51,
"tcId" : 66,
"comment" : "RFC 7748",
"curve" : "curve25519",
"public" : "e5210f12786811d3f4b7959d0538ae2c31dbe7106fc03c3efc4cd549c715a413",
@@ -531,17 +725,19 @@
"flags" : []
},
{
"tcId" : 52,
"tcId" : 67,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "0ab4e76380d84dde4f6833c58f2a9fb8f83bb0169b172be4b6e0592887741a36",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "0200000000000000000000000000000000000000000000000000000000000000",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 53,
"tcId" : 68,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "89e10d5701b4337d2d032181538b1064bd4084401ceca1fd12663a1959388000",
@@ -551,7 +747,7 @@
"flags" : []
},
{
"tcId" : 54,
"tcId" : 69,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "2b55d3aa4a8f80c8c0b2ae5f933e85af49beac36c2fa7394bab76c8933f8f81d",
@@ -561,17 +757,19 @@
"flags" : []
},
{
"tcId" : 55,
"tcId" : 70,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "63e5b1fe9601fe84385d8866b0421262f78fbfa5aff9585e626679b18547d959",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3f",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 56,
"tcId" : 71,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "e428f3dac17809f827a522ce32355058d07369364aa78902ee10139b9f9dd653",
@@ -581,17 +779,19 @@
"flags" : []
},
{
"tcId" : 57,
"tcId" : 72,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "b3b50e3ed3a407b95de942ef74575b5ab8a10c09ee103544d60bdfed8138ab2b",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "f9ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3f",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 58,
"tcId" : 73,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "213fffe93d5ea8cd242e462844029922c43c77c9e3e42f562f485d24c501a20b",
@@ -601,7 +801,7 @@
"flags" : []
},
{
"tcId" : 59,
"tcId" : 74,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "91b232a178b3cd530932441e6139418f72172292f1da4c1834fc5ebfefb51e3f",
@@ -611,27 +811,31 @@
"flags" : []
},
{
"tcId" : 60,
"tcId" : 75,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "045c6e11c5d332556c7822fe94ebf89b56a3878dc27ca079103058849fabcb4f",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "e5ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 61,
"tcId" : 76,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "1ca2190b71163539063c35773bda0c9c928e9136f0620aeb093f099197b7f74e",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "e3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 62,
"tcId" : 77,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "f76e9010ac33c5043b2d3b76a842171000c4916222e9e85897a0aec7f6350b3c",
@@ -641,37 +845,43 @@
"flags" : []
},
{
"tcId" : 63,
"tcId" : 78,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "bb72688d8f8aa7a39cd6060cd5c8093cdec6fe341937c3886a99346cd07faa55",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 64,
"tcId" : 79,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "88fddea193391c6a5933ef9b71901549447205aae9da928a6b91a352ba10f41f",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "0000000000000000000000000000000000000000000000000000000000000002",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 65,
"tcId" : 80,
"comment" : "edge case for shared secret",
"curve" : "curve25519",
"public" : "303b392f153116cad9cc682a00ccc44c95ff0d3bbe568beb6c4e739bafdc2c68",
"private" : "a0a4f130b98a5be4b1cedb7cb85584a3520e142d474dc9ccb909a073a976bf63",
"shared" : "0000000000000000000000000000000000000000000000000000000000008000",
"result" : "acceptable",
"flags" : []
"flags" : [
"Twist"
]
},
{
"tcId" : 66,
"tcId" : 81,
"comment" : "checking for overflow",
"curve" : "curve25519",
"public" : "fd300aeb40e1fa582518412b49b208a7842b1e1f056a040178ea4141534f652d",
@@ -681,7 +891,7 @@
"flags" : []
},
{
"tcId" : 67,
"tcId" : 82,
"comment" : "checking for overflow",
"curve" : "curve25519",
"public" : "c8ef79b514d7682677bc7931e06ee5c27c9b392b4ae9484473f554e6678ecc2e",
@@ -691,7 +901,7 @@
"flags" : []
},
{
"tcId" : 68,
"tcId" : 83,
"comment" : "checking for overflow",
"curve" : "curve25519",
"public" : "64aeac2504144861532b7bbcb6c87d67dd4c1f07ebc2e06effb95aecc6170b2c",
@@ -701,7 +911,7 @@
"flags" : []
},
{
"tcId" : 69,
"tcId" : 84,
"comment" : "checking for overflow",
"curve" : "curve25519",
"public" : "bf68e35e9bdb7eee1b50570221860f5dcdad8acbab031b14974cc49013c49831",
@@ -711,7 +921,7 @@
"flags" : []
},
{
"tcId" : 70,
"tcId" : 85,
"comment" : "checking for overflow",
"curve" : "curve25519",
"public" : "5347c491331a64b43ddc683034e677f53dc32b52a52a577c15a83bf298e99f19",
@@ -721,7 +931,7 @@
"flags" : []
},
{
"tcId" : 71,
"tcId" : 86,
"comment" : "private key == -1 (mod order)",
"curve" : "curve25519",
"public" : "258e04523b8d253ee65719fc6906c657192d80717edc828fa0af21686e2faa75",
@@ -731,7 +941,7 @@
"flags" : []
},
{
"tcId" : 72,
"tcId" : 87,
"comment" : "private key == 1 (mod order) on twist",
"curve" : "curve25519",
"public" : "2eae5ec3dd494e9f2d37d258f873a8e6e9d0dbd1e383ef64d98bb91b3e0be035",