Adding test vectors for AEGIS256 to wycheproof.
AEGIS256 is described here: https://eprint.iacr.org/2013/695.pdf https://competitions.cr.yp.to/round3/aegisv11.pdf Test vector generation: I'm using a python version for the generation of the test vectors: CL 252436459 The test vectors are then compared against a second implementation: CL 252613429 Third party test vectors: I don't have any third party test vectors. https://eprint.iacr.org/2013/695.pdf contains some test vectors. But, these test vectors can only be reproduced if the number of rounds in finalize is reduced from 7 to 6. Both papers describe AEGIS256 with 7 rounds in finalize. All third party implementations I've found use 7 rounds, such as this one: https://github.com/torvalds/linux/blob/master/crypto/aegis256.c NOKEYCHECK=True PiperOrigin-RevId: 252811267 GitOrigin-RevId: 1de1fb2cb2c4e7d33a1ab8a23ddd63c79b143d3a
This commit is contained in: