/*

 * Copyright (C) 2013-2018 Red Hat

 *

 * Author: Nikos Mavrogiannopoulos

 *

 * This file is part of GnuTLS.

 *

 * The GnuTLS is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public License

 * as published by the Free Software Foundation; either version 2.1 of

 * the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public License

 * along with this program.  If not, see <https://www.gnu.org/licenses/>

 *

 */

#include "gnutls_int.h"

#include "errors.h"

#include <cipher_int.h>

#include <datum.h>

#include <gnutls/crypto.h>

#include <gnutls/self-test.h>

#include "errors.h"

#include <random.h>

#include <crypto.h>

#include <nettle/sha3.h>

#define STR(tag, tag_size, val) \

	.tag = (uint8_t*)val, \

	.tag_size = (sizeof(val)-1)

#define V(x) (x), (sizeof(x)/sizeof(x[0]))

/* This does check the AES and SHA implementation against test vectors.

 * This should not run under valgrind in order to use the native

 * cpu instructions (AES-NI or padlock).

 */

struct cipher_vectors_st {

	const uint8_t *key;

	unsigned int key_size;

	const uint8_t *plaintext;

	unsigned int plaintext_size;

	const uint8_t *ciphertext;	/* also of plaintext_size */

	const uint8_t *iv;

	unsigned int iv_size;

	const uint8_t *internal_iv;

	unsigned int internal_iv_size;

};

struct cipher_aead_vectors_st {

	unsigned compat_apis;

	const uint8_t *key;

	unsigned int key_size;

	const uint8_t *auth;

	unsigned int auth_size;

	const uint8_t *plaintext;

	unsigned int plaintext_size;

	const uint8_t *ciphertext;	/* also of plaintext_size */

	unsigned int iv_size;

	const uint8_t *iv;

	const uint8_t *tag;

	unsigned tag_size;

	unsigned tag_prepended;

};

const struct cipher_aead_vectors_st chacha_poly1305_vectors[] = {

	{

	 .compat_apis = 1,

	 STR(key, key_size,

	     "\x1c\x92\x40\xa5\xeb\x55\xd3\x8a\xf3\x33\x88\x86\x04\xf6\xb5\xf0\x47\x39\x17\xc1\x40\x2b\x80\x09\x9d\xca\x5c\xbc\x20\x70\x75\xc0"),

	 .auth = (void*)"\xf3\x33\x88\x86\x00\x00\x00\x00\x00\x00\x4e\x91",

	 .auth_size = 12,

	 .plaintext = (void*)"\x49\x6e\x74\x65\x72\x6e\x65\x74\x2d\x44\x72\x61\x66\x74\x73\x20\x61\x72\x65\x20\x64\x72\x61\x66\x74\x20\x64\x6f\x63\x75\x6d\x65\x6e\x74\x73\x20\x76\x61\x6c\x69\x64\x20\x66\x6f\x72\x20\x61\x20\x6d\x61\x78\x69\x6d\x75\x6d\x20\x6f\x66\x20\x73\x69\x78\x20\x6d\x6f\x6e\x74\x68\x73\x20\x61\x6e\x64\x20\x6d\x61\x79\x20\x62\x65\x20\x75\x70\x64\x61\x74\x65\x64\x2c\x20\x72\x65\x70\x6c\x61\x63\x65\x64\x2c\x20\x6f\x72\x20\x6f\x62\x73\x6f\x6c\x65\x74\x65\x64\x20\x62\x79\x20\x6f\x74\x68\x65\x72\x20\x64\x6f\x63\x75\x6d\x65\x6e\x74\x73\x20\x61\x74\x20\x61\x6e\x79\x20\x74\x69\x6d\x65\x2e\x20\x49\x74\x20\x69\x73\x20\x69\x6e\x61\x70\x70\x72\x6f\x70\x72\x69\x61\x74\x65\x20\x74\x6f\x20\x75\x73\x65\x20\x49\x6e\x74\x65\x72\x6e\x65\x74\x2d\x44\x72\x61\x66\x74\x73\x20\x61\x73\x20\x72\x65\x66\x65\x72\x65\x6e\x63\x65\x20\x6d\x61\x74\x65\x72\x69\x61\x6c\x20\x6f\x72\x20\x74\x6f\x20\x63\x69\x74\x65\x20\x74\x68\x65\x6d\x20\x6f\x74\x68\x65\x72\x20\x74\x68\x61\x6e\x20\x61\x73\x20\x2f\xe2\x80\x9c\x77\x6f\x72\x6b\x20\x69\x6e\x20\x70\x72\x6f\x67\x72\x65\x73\x73\x2e\x2f\xe2\x80\x9d",

	 .plaintext_size = 265,

	 .ciphertext = (void*)"\x64\xa0\x86\x15\x75\x86\x1a\xf4\x60\xf0\x62\xc7\x9b\xe6\x43\xbd\x5e\x80\x5c\xfd\x34\x5c\xf3\x89\xf1\x08\x67\x0a\xc7\x6c\x8c\xb2\x4c\x6c\xfc\x18\x75\x5d\x43\xee\xa0\x9e\xe9\x4e\x38\x2d\x26\xb0\xbd\xb7\xb7\x3c\x32\x1b\x01\x00\xd4\xf0\x3b\x7f\x35\x58\x94\xcf\x33\x2f\x83\x0e\x71\x0b\x97\xce\x98\xc8\xa8\x4a\xbd\x0b\x94\x81\x14\xad\x17\x6e\x00\x8d\x33\xbd\x60\xf9\x82\xb1\xff\x37\xc8\x55\x97\x97\xa0\x6e\xf4\xf0\xef\x61\xc1\x86\x32\x4e\x2b\x35\x06\x38\x36\x06\x90\x7b\x6a\x7c\x02\xb0\xf9\xf6\x15\x7b\x53\xc8\x67\xe4\xb9\x16\x6c\x76\x7b\x80\x4d\x46\xa5\x9b\x52\x16\xcd\xe7\xa4\xe9\x90\x40\xc5\xa4\x04\x33\x22\x5e\xe2\x82\xa1\xb0\xa0\x6c\x52\x3e\xaf\x45\x34\xd7\xf8\x3f\xa1\x15\x5b\x00\x47\x71\x8c\xbc\x54\x6a\x0d\x07\x2b\x04\xb3\x56\x4e\xea\x1b\x42\x22\x73\xf5\x48\x27\x1a\x0b\xb2\x31\x60\x53\xfa\x76\x99\x19\x55\xeb\xd6\x31\x59\x43\x4e\xce\xbb\x4e\x46\x6d\xae\x5a\x10\x73\xa6\x72\x76\x27\x09\x7a\x10\x49\xe6\x17\xd9\x1d\x36\x10\x94\xfa\x68\xf0\xff\x77\x98\x71\x30\x30\x5b\xea\xba\x2e\xda\x04\xdf\x99\x7b\x71\x4d\x6c\x6f\x2c\x29\xa6\xad\x5c\xb4\x02\x2b\x02\x70\x9b",

	 STR(iv, iv_size,

	     "\x00\x00\x00\x00\x01\x02\x03\x04\x05\x06\x07\x08"),

	 .tag_size = 16,

	 .tag = (void *)

	 "\xee\xad\x9d\x67\x89\x0c\xbb\x22\x39\x23\x36\xfe\xa1\x85\x1f\x38"},

};

const struct cipher_aead_vectors_st aes128_gcm_vectors[] = {

	{

	 .compat_apis = 1,

	 STR(key, key_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .auth = NULL,

	 .auth_size = 0,

	 .plaintext = NULL,

	 .plaintext_size = 0,

	 .ciphertext = NULL,

	 STR(iv, iv_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .tag_size = 16,

	 .tag = (void *)

	 "\x58\xe2\xfc\xce\xfa\x7e\x30\x61\x36\x7f\x1d\x57\xa4\xe7\x45\x5a"},

	{

	 .compat_apis = 1,

	 STR(key, key_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .auth = NULL,

	 .auth_size = 0,

	 STR(plaintext, plaintext_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .ciphertext = (void *)

	 "\x03\x88\xda\xce\x60\xb6\xa3\x92\xf3\x28\xc2\xb9\x71\xb2\xfe\x78",

	 STR(iv, iv_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .tag_size = 16,

	 .tag = (void *)

	 "\xab\x6e\x47\xd4\x2c\xec\x13\xbd\xf5\x3a\x67\xb2\x12\x57\xbd\xdf"},

	{

	 .compat_apis = 1,

	 STR(key, key_size,

	     "\xfe\xff\xe9\x92\x86\x65\x73\x1c\x6d\x6a\x8f\x94\x67\x30\x83\x08"),

	 .auth = (void *)

	 "\xfe\xed\xfa\xce\xde\xad\xbe\xef\xfe\xed\xfa\xce\xde\xad\xbe\xef\xab\xad\xda\xd2",

	 .auth_size = 20,

	 STR(plaintext, plaintext_size,

	     "\xd9\x31\x32\x25\xf8\x84\x06\xe5\xa5\x59\x09\xc5\xaf\xf5\x26\x9a\x86\xa7\xa9\x53\x15\x34\xf7\xda\x2e\x4c\x30\x3d\x8a\x31\x8a\x72\x1c\x3c\x0c\x95\x95\x68\x09\x53\x2f\xcf\x0e\x24\x49\xa6\xb5\x25\xb1\x6a\xed\xf5\xaa\x0d\xe6\x57\xba\x63\x7b\x39"),

	 .ciphertext = (void *)

	 "\x42\x83\x1e\xc2\x21\x77\x74\x24\x4b\x72\x21\xb7\x84\xd0\xd4\x9c\xe3\xaa\x21\x2f\x2c\x02\xa4\xe0\x35\xc1\x7e\x23\x29\xac\xa1\x2e\x21\xd5\x14\xb2\x54\x66\x93\x1c\x7d\x8f\x6a\x5a\xac\x84\xaa\x05\x1b\xa3\x0b\x39\x6a\x0a\xac\x97\x3d\x58\xe0\x91",

	 STR(iv, iv_size,

	     "\xca\xfe\xba\xbe\xfa\xce\xdb\xad\xde\xca\xf8\x88"),

	 .tag_size = 16,

	 .tag = (void *)

	 "\x5b\xc9\x4f\xbc\x32\x21\xa5\xdb\x94\xfa\xe9\x5a\xe7\x12\x1a\x47"}

};

const struct cipher_aead_vectors_st aes192_gcm_vectors[] = {

	{

	 .compat_apis = 1,

	 STR(key, key_size,

	     "\xfe\xff\xe9\x92\x86\x65\x73\x1c\x6d\x6a\x8f\x94\x67\x30\x83\x08\xfe\xff\xe9\x92\x86\x65\x73\x1c"),

	 .auth = NULL,

	 .auth_size = 0,

	 STR(plaintext, plaintext_size,

	     "\xd9\x31\x32\x25\xf8\x84\x06\xe5\xa5\x59\x09\xc5\xaf\xf5\x26\x9a\x86\xa7\xa9\x53\x15\x34\xf7\xda\x2e\x4c\x30\x3d\x8a\x31\x8a\x72\x1c\x3c\x0c\x95\x95\x68\x09\x53\x2f\xcf\x0e\x24\x49\xa6\xb5\x25\xb1\x6a\xed\xf5\xaa\x0d\xe6\x57\xba\x63\x7b\x39\x1a\xaf\xd2\x55"),

	 .ciphertext =

	 (uint8_t *)

	 "\x39\x80\xca\x0b\x3c\x00\xe8\x41\xeb\x06\xfa\xc4\x87\x2a\x27\x57\x85\x9e\x1c\xea\xa6\xef\xd9\x84\x62\x85\x93\xb4\x0c\xa1\xe1\x9c\x7d\x77\x3d\x00\xc1\x44\xc5\x25\xac\x61\x9d\x18\xc8\x4a\x3f\x47\x18\xe2\x44\x8b\x2f\xe3\x24\xd9\xcc\xda\x27\x10\xac\xad\xe2\x56",

	 STR(iv, iv_size,

	     "\xca\xfe\xba\xbe\xfa\xce\xdb\xad\xde\xca\xf8\x88"),

	 .tag_size = 16,

	 .tag =

	 (void *)

	 "\x99\x24\xa7\xc8\x58\x73\x36\xbf\xb1\x18\x02\x4d\xb8\x67\x4a\x14"},

};

const struct cipher_aead_vectors_st aes256_gcm_vectors[] = {

	{

	 .compat_apis = 1,

	 STR(key, key_size,

	     "\xfe\xff\xe9\x92\x86\x65\x73\x1c\x6d\x6a\x8f\x94\x67\x30\x83\x08\xfe\xff\xe9\x92\x86\x65\x73\x1c\x6d\x6a\x8f\x94\x67\x30\x83\x08"),

	 .auth = NULL,

	 .auth_size = 0,

	 STR(plaintext, plaintext_size,

	     "\xd9\x31\x32\x25\xf8\x84\x06\xe5\xa5\x59\x09\xc5\xaf\xf5\x26\x9a\x86\xa7\xa9\x53\x15\x34\xf7\xda\x2e\x4c\x30\x3d\x8a\x31\x8a\x72\x1c\x3c\x0c\x95\x95\x68\x09\x53\x2f\xcf\x0e\x24\x49\xa6\xb5\x25\xb1\x6a\xed\xf5\xaa\x0d\xe6\x57\xba\x63\x7b\x39\x1a\xaf\xd2\x55"),

	 .ciphertext =

	 (uint8_t *)

	 "\x52\x2d\xc1\xf0\x99\x56\x7d\x07\xf4\x7f\x37\xa3\x2a\x84\x42\x7d\x64\x3a\x8c\xdc\xbf\xe5\xc0\xc9\x75\x98\xa2\xbd\x25\x55\xd1\xaa\x8c\xb0\x8e\x48\x59\x0d\xbb\x3d\xa7\xb0\x8b\x10\x56\x82\x88\x38\xc5\xf6\x1e\x63\x93\xba\x7a\x0a\xbc\xc9\xf6\x62\x89\x80\x15\xad",

	 STR(iv, iv_size,

	     "\xca\xfe\xba\xbe\xfa\xce\xdb\xad\xde\xca\xf8\x88"),

	 .tag_size = 16,

	 .tag =

	 (void *)

	 "\xb0\x94\xda\xc5\xd9\x34\x71\xbd\xec\x1a\x50\x22\x70\xe3\xcc\x6c"},

};

const struct cipher_aead_vectors_st aes256_ccm_vectors[] = {

	{

	 .compat_apis = 0,

	 STR(key, key_size,

	     "\xfb\x76\x15\xb2\x3d\x80\x89\x1d\xd4\x70\x98\x0b\xc7\x95\x84\xc8\xb2\xfb\x64\xce\x60\x97\x8f\x4d\x17\xfc\xe4\x5a\x49\xe8\x30\xb7"),

	 .auth = NULL,

	 .auth_size = 0,

	 STR(plaintext, plaintext_size,

	     "\xa8\x45\x34\x8e\xc8\xc5\xb5\xf1\x26\xf5\x0e\x76\xfe\xfd\x1b\x1e"),

	 .ciphertext = (void *)

	     "\xcc\x88\x12\x61\xc6\xa7\xfa\x72\xb9\x6a\x17\x39\x17\x6b\x27\x7f",

	 STR(iv, iv_size,

	     "\xdb\xd1\xa3\x63\x60\x24\xb7\xb4\x02\xda\x7d\x6f"),

	 .tag_size = 16,

	 .tag = (void *)

	     "\x34\x72\xe1\x14\x5f\x2c\x0c\xbe\x14\x63\x49\x06\x2c\xf0\xe4\x23"},

	{

	 .compat_apis = 0,

	 STR(key, key_size,

	     "\xfb\x76\x15\xb2\x3d\x80\x89\x1d\xd4\x70\x98\x0b\xc7\x95\x84\xc8\xb2\xfb\x64\xce\x60\x97\x87\x8d\x17\xfc\xe4\x5a\x49\xe8\x30\xb7"),

	 STR(auth, auth_size, "\x36"),

	 STR(plaintext, plaintext_size,

	     "\xa9"),

	 .ciphertext = (void *)

	     "\x9d",

	 STR(iv, iv_size,

	     "\xdb\xd1\xa3\x63\x60\x24\xb7\xb4\x02\xda\x7d\x6f"),

	 .tag_size = 16,

	 .tag = (void *)

	     "\x32\x61\xb1\xcf\x93\x14\x31\xe9\x9a\x32\x80\x67\x38\xec\xbd\x2a"},

};

const struct cipher_aead_vectors_st aes128_ccm_vectors[] = {

	{

	 .compat_apis = 0,

	 STR(key, key_size,

	     "\xC0\xC1\xC2\xC3\xC4\xC5\xC6\xC7\xC8\xC9\xCA\xCB\xCC\xCD\xCE\xCF"),

	 STR(auth, auth_size, "\x08\xD0\x84\x21\x43\x01\x00\x00\x00\x00\x48\xDE\xAC\x02\x05\x00\x00\x00\x55\xCF\x00\x00\x51\x52\x53\x54"),

	 .plaintext = NULL,

	 .plaintext_size = 0,

	 STR(iv, iv_size,

	     "\xAC\xDE\x48\x00\x00\x00\x00\x01\x00\x00\x00\x05\x02"),

	 .tag_size = 8,

	 .tag = (void *)

	     "\x22\x3B\xC1\xEC\x84\x1A\xB5\x53"},

	{

	 .compat_apis = 0,

	 STR(key, key_size,

	     "\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f"),

	 STR(auth, auth_size, "\x00\x01\x02\x03\x04\x05\x06\x07"),

	 STR(plaintext, plaintext_size,

	     "\x20\x21\x22\x23"),

	 .ciphertext = (void *)

	     "\x71\x62\x01\x5b",

	 STR(iv, iv_size,

	     "\x10\x11\x12\x13\x14\x15\x16"),

	 .tag_size = 4,

	 .tag = (void *)

	     "\x4d\xac\x25\x5d"},

	/* from rfc3610 */

	{

	 .compat_apis = 0,

	 STR(key, key_size,

	     "\xC0\xC1\xC2\xC3\xC4\xC5\xC6\xC7\xC8\xC9\xCA\xCB\xCC\xCD\xCE\xCF"),

	 STR(auth, auth_size, "\x00\x01\x02\x03\x04\x05\x06\x07"),

	 STR(plaintext, plaintext_size,

	     "\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E"),

	 .ciphertext = (void *)

	     "\x01\x35\xD1\xB2\xC9\x5F\x41\xD5\xD1\xD4\xFE\xC1\x85\xD1\x66\xB8\x09\x4E\x99\x9D\xFE\xD9\x6C",

	 STR(iv, iv_size,

	     "\x00\x00\x00\x09\x08\x07\x06\xA0\xA1\xA2\xA3\xA4\xA5"),

	 .tag_size = 10,

	 .tag = (void *)

	     "\x04\x8C\x56\x60\x2C\x97\xAC\xBB\x74\x90"},

	{

	 .compat_apis = 0,

	 STR(key, key_size,

	     "\xC0\xC1\xC2\xC3\xC4\xC5\xC6\xC7\xC8\xC9\xCA\xCB\xCC\xCD\xCE\xCF"),

	 STR(auth, auth_size, "\x00\x01\x02\x03\x04\x05\x06\x07"),

	 STR(plaintext, plaintext_size,

	     "\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E"),

	 .ciphertext = (void *)

	     "\x58\x8C\x97\x9A\x61\xC6\x63\xD2\xF0\x66\xD0\xC2\xC0\xF9\x89\x80\x6D\x5F\x6B\x61\xDA\xC3\x84",

	 STR(iv, iv_size,

	     "\x00\x00\x00\x03\x02\x01\x00\xA0\xA1\xA2\xA3\xA4\xA5"),

	 .tag_size = 8,

	 .tag = (void *)

	     "\x17\xE8\xD1\x2C\xFD\xF9\x26\xE0"},

};

const struct cipher_vectors_st aes128_cbc_vectors[] = {

	{

	 STR(key, key_size,

	     "\x2b\x7e\x15\x16\x28\xae\xd2\xa6\xab\xf7\x15\x88\x09\xcf\x4f\x3c"),

	 STR(plaintext, plaintext_size,

	     "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96\xe9\x3d\x7e\x11\x73\x93\x17\x2a"),

	 .ciphertext = (uint8_t *)

	 "\x76\x49\xab\xac\x81\x19\xb2\x46\xce\xe9\x8e\x9b\x12\xe9\x19\x7d",

	 STR(iv, iv_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"),

	 },

	{

	 STR(key, key_size,

	     "\x2b\x7e\x15\x16\x28\xae\xd2\xa6\xab\xf7\x15\x88\x09\xcf\x4f\x3c"),

	 STR(plaintext, plaintext_size,

	     "\xae\x2d\x8a\x57\x1e\x03\xac\x9c\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"),

	 .ciphertext =

	 (uint8_t *)

	 "\x50\x86\xcb\x9b\x50\x72\x19\xee\x95\xdb\x11\x3a\x91\x76\x78\xb2",

	 STR(iv, iv_size,

	     "\x76\x49\xab\xac\x81\x19\xb2\x46\xce\xe9\x8e\x9b\x12\xe9\x19\x7d"),

	 },

};

const struct cipher_vectors_st aes192_cbc_vectors[] = {

	{

	 STR(key, key_size,

	     "\x8e\x73\xb0\xf7\xda\x0e\x64\x52\xc8\x10\xf3\x2b\x80\x90\x79\xe5\x62\xf8\xea\xd2\x52\x2c\x6b\x7b"),

	 STR(plaintext, plaintext_size,

	     "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96\xe9\x3d\x7e\x11\x73\x93\x17\x2a"),

	 .ciphertext = (uint8_t *)

	 "\x4f\x02\x1d\xb2\x43\xbc\x63\x3d\x71\x78\x18\x3a\x9f\xa0\x71\xe8",

	 STR(iv, iv_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"),

	 },

	{

	 STR(key, key_size,

	     "\x8e\x73\xb0\xf7\xda\x0e\x64\x52\xc8\x10\xf3\x2b\x80\x90\x79\xe5\x62\xf8\xea\xd2\x52\x2c\x6b\x7b"),

	 STR(plaintext, plaintext_size,

	     "\xae\x2d\x8a\x57\x1e\x03\xac\x9c\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"),

	 .ciphertext = (uint8_t *)

	 "\xb4\xd9\xad\xa9\xad\x7d\xed\xf4\xe5\xe7\x38\x76\x3f\x69\x14\x5a",

	 STR(iv, iv_size,

	     "\x4F\x02\x1D\xB2\x43\xBC\x63\x3D\x71\x78\x18\x3A\x9F\xA0\x71\xE8"),

	 },

};

const struct cipher_vectors_st aes256_cbc_vectors[] = {

	{

	 STR(key, key_size,

	     "\x60\x3d\xeb\x10\x15\xca\x71\xbe\x2b\x73\xae\xf0\x85\x7d\x77\x81\x1f\x35\x2c\x07\x3b\x61\x08\xd7\x2d\x98\x10\xa3\x09\x14\xdf\xf4"),

	 STR(plaintext, plaintext_size,

	     "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96\xe9\x3d\x7e\x11\x73\x93\x17\x2a"),

	 .ciphertext = (uint8_t *)

	 "\xF5\x8C\x4C\x04\xD6\xE5\xF1\xBA\x77\x9E\xAB\xFB\x5F\x7B\xFB\xD6",

	 STR(iv, iv_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"),

	 },

	{

	 STR(key, key_size,

	     "\x60\x3d\xeb\x10\x15\xca\x71\xbe\x2b\x73\xae\xf0\x85\x7d\x77\x81\x1f\x35\x2c\x07\x3b\x61\x08\xd7\x2d\x98\x10\xa3\x09\x14\xdf\xf4"),

	 STR(plaintext, plaintext_size,

	     "\xae\x2d\x8a\x57\x1e\x03\xac\x9c\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"),

	 .ciphertext = (uint8_t *)

	 "\x9c\xfc\x4e\x96\x7e\xdb\x80\x8d\x67\x9f\x77\x7b\xc6\x70\x2c\x7d",

	 STR(iv, iv_size,

	     "\xF5\x8C\x4C\x04\xD6\xE5\xF1\xBA\x77\x9E\xAB\xFB\x5F\x7B\xFB\xD6"),

	 },

};

const struct cipher_vectors_st tdes_cbc_vectors[] = {

/* First 2 from https://www.cosic.esat.kuleuven.be/nessie/testvectors/bc/des/Triple-Des-3-Key-192-64.unverified.test-vectors */

	{

	 STR(key, key_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17"),

	 STR(plaintext, plaintext_size,

	     "\x98\x26\x62\x60\x55\x53\x24\x4D"),

	 .ciphertext = (uint8_t *)

	 "\x00\x11\x22\x33\x44\x55\x66\x77",

	 STR(iv, iv_size, "\x00\x00\x00\x00\x00\x00\x00\x00"),

	 },

	{

	 STR(key, key_size,

	     "\x2B\xD6\x45\x9F\x82\xC5\xB3\x00\x95\x2C\x49\x10\x48\x81\xFF\x48\x2B\xD6\x45\x9F\x82\xC5\xB3\x00"),

	 STR(plaintext, plaintext_size,

	     "\x85\x98\x53\x8A\x8E\xCF\x11\x7D"),

	 .ciphertext = (uint8_t *)

	 "\xEA\x02\x47\x14\xAD\x5C\x4D\x84",

	 STR(iv, iv_size, "\x00\x00\x00\x00\x00\x00\x00\x00"),

	 },

};

const struct cipher_vectors_st arcfour_vectors[] = { /* RFC6229 */

	{

	 STR(key, key_size,

	     "\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18"),

	 STR(plaintext, plaintext_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .ciphertext = (uint8_t *)

	     "\x05\x95\xe5\x7f\xe5\xf0\xbb\x3c\x70\x6e\xda\xc8\xa4\xb2\xdb\x11",

	 .iv = NULL,

	 .iv_size = 0

	},

	{

	 STR(key, key_size,

	     "\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20"),

	 STR(plaintext, plaintext_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .ciphertext = (uint8_t *)

	     "\xea\xa6\xbd\x25\x88\x0b\xf9\x3d\x3f\x5d\x1e\x4c\xa2\x61\x1d\x91",

	 .iv = NULL,

	 .iv_size = 0

	},

	{

	 STR(key, key_size,

	     "\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10"),

	 STR(plaintext, plaintext_size,

	     "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"),

	 .ciphertext = (uint8_t *)

	 "\x9a\xc7\xcc\x9a\x60\x9d\x1e\xf7\xb2\x93\x28\x99\xcd\xe4\x1b\x97",

	 .iv = NULL,

	 .iv_size = 0

	},

};

const struct cipher_vectors_st aes128_cfb8_vectors[] = { /* NIST 800-38a */

	{

	 STR(key, key_size,

	     "\x2b\x7e\x15\x16\x28\xae\xd2\xa6\xab\xf7\x15\x88\x09\xcf\x4f\x3c"),

	 STR(plaintext, plaintext_size,

	     "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96\xe9\x3d\x7e\x11\x73\x93\x17\x2a"

             "\xae\x2d"),

	 .ciphertext = (uint8_t *)

	     "\x3b\x79\x42\x4c\x9c\x0d\xd4\x36\xba\xce\x9e\x0e\xd4\x58\x6a\x4f"

             "\x32\xb9",

	 STR(iv, iv_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"),

	 /* the least significant 16 bytes of ciphertext */

	 STR(internal_iv, internal_iv_size,

	     "\x42\x4c\x9c\x0d\xd4\x36\xba\xce\x9e\x0e\xd4\x58\x6a\x4f\x32\xb9"),

	 },

};

const struct cipher_vectors_st aes192_cfb8_vectors[] = { /* NIST 800-38a */

	{

	 STR(key, key_size,

	     "\x8e\x73\xb0\xf7\xda\x0e\x64\x52\xc8\x10\xf3\x2b\x80\x90\x79\xe5"

             "\x62\xf8\xea\xd2\x52\x2c\x6b\x7b"),

	 STR(plaintext, plaintext_size,

	     "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96\xe9\x3d\x7e\x11\x73\x93\x17\x2a"

             "\xae\x2d"),

	 .ciphertext = (uint8_t *)

	     "\xcd\xa2\x52\x1e\xf0\xa9\x05\xca\x44\xcd\x05\x7c\xbf\x0d\x47\xa0"

             "\x67\x8a",

	 STR(iv, iv_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"),

	 /* the least significant 16 bytes of ciphertext */

	 STR(internal_iv, internal_iv_size,

	     "\x52\x1e\xf0\xa9\x05\xca\x44\xcd\x05\x7c\xbf\x0d\x47\xa0\x67\x8a"),

	 },

};

const struct cipher_vectors_st aes256_cfb8_vectors[] = { /* NIST 800-38a */

	{

	 STR(key, key_size,

	     "\x60\x3d\xeb\x10\x15\xca\x71\xbe\x2b\x73\xae\xf0\x85\x7d\x77\x81"

             "\x1f\x35\x2c\x07\x3b\x61\x08\xd7\x2d\x98\x10\xa3\x09\x14\xdf\xf4"),

	 STR(plaintext, plaintext_size,

	     "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96\xe9\x3d\x7e\x11\x73\x93\x17\x2a"

             "\xae\x2d"),

	 .ciphertext = (uint8_t *)

	     "\xdc\x1f\x1a\x85\x20\xa6\x4d\xb5\x5f\xcc\x8a\xc5\x54\x84\x4e\x88"

             "\x97\x00",

	 STR(iv, iv_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"),

	 /* the least significant 16 bytes of ciphertext */

	 STR(internal_iv, internal_iv_size,

	     "\x1a\x85\x20\xa6\x4d\xb5\x5f\xcc\x8a\xc5\x54\x84\x4e\x88\x97\x00"),

	 },

};

/* GOST 28147-89 vectors come from the testsuite contributed to OpenSSL by

 * Sergey E. Leontiev. CryptoPro-B test vector is just truncated.

 * TC26Z is calculated using Nettle */

const struct cipher_vectors_st gost28147_cpa_cfb_vectors[] = {

	{

	 STR(key, key_size,

	     "\x8d\x5a\x2c\x83\xa7\xc7\x0a\x61\xd6\x1b\x34\xb5\x1f\xdf\x42\x68"

	     "\x66\x71\xa3\x5d\x87\x4c\xfd\x84\x99\x36\x63\xb6\x1e\xd6\x0d\xad"),

	 STR(plaintext, plaintext_size,

	     "\xd2\xfd\xf8\x3a\xc1\xb4\x39\x23\x2e\xaa\xcc\x98\x0a\x02\xda\x33"),

	 .ciphertext = (uint8_t *)

		 "\x88\xb7\x75\x16\x74\xa5\xee\x2d\x14\xfe\x91\x67\xd0\x5c\xcc\x40",

	 STR(iv, iv_size,

	     "\x46\x60\x6f\x0d\x88\x34\x23\x5a"),

	},

};

const struct cipher_vectors_st gost28147_cpb_cfb_vectors[] = {

	{

	 STR(key, key_size,

	     "\x48\x0c\x74\x1b\x02\x6b\x55\xd5\xb6\x6d\xd7\x1d\x40\x48\x05\x6b"

	     "\x6d\xeb\x3c\x29\x0f\x84\x80\x23\xee\x0d\x47\x77\xe3\xfe\x61\xc9"),

	 STR(plaintext, plaintext_size,

	     "\x8c\x9c\x44\x35\xfb\xe9\xa5\xa3\xa0\xae\x28\x56\x91\x10\x8e\x1e"

	     "\xd2\xbb\x18\x53\x81\x27\x0d\xa6\x68\x59\x36\xc5\x81\x62\x9a\x8e"

	     "\x7d\x50\xf1\x6f\x97\x62\x29\xec\x80\x51\xe3\x7d\x6c\xc4\x07\x95"

	     "\x28\x63\xdc\xb4\xb9\x2d\xb8\x13\xb1\x05\xb5\xf9\xeb\x75\x37"),

	 .ciphertext = (uint8_t *)

		 "\x23\xc6\x7f\x20\xa1\x23\x58\xbc\x7b\x05\xdb\x21\x15\xcf\x96\x41"

		 "\xc7\x88\xef\x76\x5c\x49\xdb\x42\xbf\xf3\xc0\xf5\xbd\x5d\xd9\x8e"

		 "\xaf\x3d\xf4\xe4\xda\x88\xbd\xbc\x47\x5d\x76\x07\xc9\x5f\x54\x1d"

		 "\x1d\x6a\xa1\x2e\x18\xd6\x60\x84\x02\x18\x37\x92\x92\x15\xab",

	 STR(iv, iv_size,

	     "\x1f\x3f\x82\x1e\x0d\xd8\x1e\x22"),

	},

};

const struct cipher_vectors_st gost28147_cpc_cfb_vectors[] = {

	{

	 STR(key, key_size,

	     "\x77\xc3\x45\x8e\xf6\x42\xe7\x04\x8e\xfc\x08\xe4\x70\x96\xd6\x05"

	     "\x93\x59\x02\x6d\x6f\x97\xca\xe9\xcf\x89\x44\x4b\xde\x6c\x22\x1d"),

	 STR(plaintext, plaintext_size,

	     "\x07\x9c\x91\xbe"),

	 .ciphertext = (uint8_t *)

		 "\x19\x35\x81\x34",

	 STR(iv, iv_size,

	     "\x43\x7c\x3e\x8e\x2f\x2a\x00\x98"),

	},

};

const struct cipher_vectors_st gost28147_cpd_cfb_vectors[] = {

	{

	 STR(key, key_size,

	     "\x38\x9f\xe8\x37\xff\x9c\x5d\x29\xfc\x48\x55\xa0\x87\xea\xe8\x40"

	     "\x20\x87\x5b\xb2\x01\x15\x55\xa7\xe3\x2d\xcb\x3d\xd6\x59\x04\x73"),

	 STR(plaintext, plaintext_size,

	     "\x2f\x31\xd8\x83\xb4\x20\xe8\x6e\xda"),

	 .ciphertext = (uint8_t *)

		 "\x6d\xa4\xed\x40\x08\x88\x71\xad\x16",

	 STR(iv, iv_size,

	     "\xc5\xa2\xd2\x1f\x2f\xdf\xb8\xeb"),

	},

};

const struct cipher_vectors_st gost28147_tc26z_cfb_vectors[] = {

	{

	 STR(key, key_size,

	     "\x8d\x5a\x2c\x83\xa7\xc7\x0a\x61\xd6\x1b\x34\xb5\x1f\xdf\x42\x68"

	     "\x66\x71\xa3\x5d\x87\x4c\xfd\x84\x99\x36\x63\xb6\x1e\xd6\x0d\xad"),

	 STR(plaintext, plaintext_size,

	     "\xd2\xfd\xf8\x3a\xc1\xb4\x39\x23\x2e\xaa\xcc\x98\x0a\x02\xda\x33"),

	 .ciphertext = (uint8_t *)

		 "\xed\xa7\xf1\x41\x01\x9c\xbd\xcd\x44\x6b\x00\x96\x87\xf7\xc7\xe6",

	 STR(iv, iv_size,

	     "\x46\x60\x6f\x0d\x88\x34\x23\x5a"),

	},

};

const struct cipher_vectors_st gost28147_tc26z_cnt_vectors[] = {

	{

	 STR(key, key_size,

	     "\x59\x9f\x84\xba\xc3\xf3\xd2\xf1\x60\xe1\xe3\xf2\x6a\x96\x1a\xf9"

	     "\x9c\x48\xb2\x4e\xbc\xbb\xbf\x7c\xd8\xf3\xac\xcd\x96\x8d\x28\x6a"),

	 STR(plaintext, plaintext_size,

	     "\x90\xa2\x39\x66\xae\x01\xb9\xa3\x52\x4e\xc8\xed\x6c\xdd\x88\x30"),

	 .ciphertext = (uint8_t *)

		 "\xe8\xb1\x4f\xc7\x30\xdc\x25\xbb\x36\xba\x64\x3c\x17\xdb\xff\x99",

	 STR(iv, iv_size,

	     "\x8d\xaf\xa8\xd1\x58\xed\x05\x8d"),

	}

};

const struct cipher_vectors_st aes128_xts_vectors[] = {

	{

	 STR(key, key_size,

	     "\xa1\xb9\x0c\xba\x3f\x06\xac\x35\x3b\x2c\x34\x38\x76\x08\x17\x62"

             "\x09\x09\x23\x02\x6e\x91\x77\x18\x15\xf2\x9d\xab\x01\x93\x2f\x2f"),

	 STR(plaintext, plaintext_size,

	     "\xeb\xab\xce\x95\xb1\x4d\x3c\x8d\x6f\xb3\x50\x39\x07\x90\x31\x1c"),

	 .ciphertext = (uint8_t *)

	     "\x77\x8a\xe8\xb4\x3c\xb9\x8d\x5a\x82\x50\x81\xd5\xbe\x47\x1c\x63",

	 STR(iv, iv_size,

	     "\x4f\xae\xf7\x11\x7c\xda\x59\xc6\x6e\x4b\x92\x01\x3e\x76\x8a\xd5"),

	 },

	{

	 STR(key, key_size,

	     "\x75\x03\x72\xc3\xd8\x2f\x63\x38\x28\x67\xbe\x66\x62\xac\xfa\x4a"

             "\x25\x9b\xe3\xfa\x9b\xc6\x62\xa1\x15\x4f\xfa\xae\xd8\xb4\x48\xa5"),

	 STR(plaintext, plaintext_size,

	     "\xd8\xe3\xa5\x65\x59\xa4\x36\xce\x0d\x8b\x21\x2c\x80\xa8\x8b\x23"

             "\xaf\x62\xb0\xe5\x98\xf2\x08\xe0\x3c\x1f\x2e\x9f\xa5\x63\xa5\x4b"),

	 .ciphertext = (uint8_t *)

	     "\x49\x5f\x78\x55\x53\x5e\xfd\x13\x34\x64\xdc\x9a\x9a\xbf\x8a\x0f"

             "\x28\xfa\xcb\xce\x21\xbd\x3c\x22\x17\x8e\xc4\x89\xb7\x99\xe4\x91",

	 STR(iv, iv_size,

	     "\x93\xa2\x92\x54\xc4\x7e\x42\x60\x66\x96\x21\x30\x7d\x4f\x5c\xd3"),

	 },

};

const struct cipher_vectors_st aes256_xts_vectors[] = {

	{

	 STR(key, key_size,

             "\x1e\xa6\x61\xc5\x8d\x94\x3a\x0e\x48\x01\xe4\x2f\x4b\x09\x47\x14"

             "\x9e\x7f\x9f\x8e\x3e\x68\xd0\xc7\x50\x52\x10\xbd\x31\x1a\x0e\x7c"

             "\xd6\xe1\x3f\xfd\xf2\x41\x8d\x8d\x19\x11\xc0\x04\xcd\xa5\x8d\xa3"

             "\xd6\x19\xb7\xe2\xb9\x14\x1e\x58\x31\x8e\xea\x39\x2c\xf4\x1b\x08"),

	 STR(plaintext, plaintext_size,

	     "\x2e\xed\xea\x52\xcd\x82\x15\xe1\xac\xc6\x47\xe8\x10\xbb\xc3\x64"

             "\x2e\x87\x28\x7f\x8d\x2e\x57\xe3\x6c\x0a\x24\xfb\xc1\x2a\x20\x2e"),

	 .ciphertext = (uint8_t *)

	     "\xcb\xaa\xd0\xe2\xf6\xce\xa3\xf5\x0b\x37\xf9\x34\xd4\x6a\x9b\x13"

             "\x0b\x9d\x54\xf0\x7e\x34\xf3\x6a\xf7\x93\xe8\x6f\x73\xc6\xd7\xdb",

	 STR(iv, iv_size,

	     "\xad\xf8\xd9\x26\x27\x46\x4a\xd2\xf0\x42\x8e\x84\xa9\xf8\x75\x64"),

	 },

};

const struct cipher_aead_vectors_st aes128_siv_vectors[] = {

	{

	 STR(key, key_size,

	     "\x7f\x7e\x7d\x7c\x7b\x7a\x79\x78\x77\x76\x75\x74\x73\x72\x71\x70"

	     "\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f"),

	 STR(auth, auth_size,

	     "\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xaa\xbb\xcc\xdd\xee\xff"

	     "\xde\xad\xda\xda\xde\xad\xda\xda\xff\xee\xdd\xcc\xbb\xaa\x99\x88"

	     "\x77\x66\x55\x44\x33\x22\x11\x00"),

	 STR(plaintext, plaintext_size,

	     "\x74\x68\x69\x73\x20\x69\x73\x20\x73\x6f\x6d\x65\x20\x70\x6c\x61"

	     "\x69\x6e\x74\x65\x78\x74\x20\x74\x6f\x20\x65\x6e\x63\x72\x79\x70"

	     "\x74\x20\x75\x73\x69\x6e\x67\x20\x53\x49\x56\x2d\x41\x45\x53"),

	 .ciphertext = (uint8_t *)

	     "\xa4\xff\xb8\x7f\xdb\xa9\x7c\x89\x44\xa6\x23\x25\xf1\x33\xb4\xe0"

	     "\x1c\xa5\x52\x76\xe2\x26\x1c\x1a\x1d\x1d\x42\x48\xd1\xda\x30\xba"

	     "\x52\xb9\xc8\xd7\x95\x5d\x65\xc8\xd2\xce\x6e\xb7\xe3\x67\xd0",

	 STR(iv, iv_size,

	     "\x02\x03\x04"),

	 .tag_size = 16,

	 .tag = (void *)

	     "\xf1\xdb\xa3\x3d\xe5\xb3\x36\x9e\x88\x3f\x67\xb6\xfc\x82\x3c\xee",

	 .tag_prepended = 1,

	}

};

const struct cipher_aead_vectors_st aes256_siv_vectors[] = {

	{

	 STR(key, key_size,

	     "\xc2\x7d\xf2\xfd\xae\xc3\x5d\x4a\x2a\x41\x2a\x50\xc3\xe8\xc4\x7d"

	     "\x2d\x56\x8e\x91\xa3\x8e\x54\x14\x8a\xbd\xc0\xb6\xe8\x6c\xaf\x87"

	     "\x69\x5c\x0a\x8a\xdf\x4c\x5f\x8e\xb2\xc6\xc8\xb1\x36\x52\x98\x64"

	     "\xf3\xb8\x4b\x3a\xe8\xe3\x67\x6c\xe7\x60\xc4\x61\xf3\xa1\x3e\x83"),

	 STR(auth, auth_size,

	     "\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xaa\xbb\xcc\xdd\xee\xff"

	     "\xde\xad\xda\xda\xde\xad\xda\xda\xff\xee\xdd\xcc\xbb\xaa\x99\x88"

	     "\x77\x66\x55\x44\x33\x22\x11\x00"),

	 STR(plaintext, plaintext_size,

	     "\x74\x68\x69\x73\x20\x69\x73\x20\x73\x6f\x6d\x65\x20\x70\x6c\x61"

	     "\x69\x6e\x74\x65\x78\x74\x20\x74\x6f\x20\x65\x6e\x63\x72\x79\x70"

	     "\x74\x20\x75\x73\x69\x6e\x67\x20\x53\x49\x56\x2d\x41\x45\x53"),

	 .ciphertext = (uint8_t *)

	     "\x50\x93\x3d\xa8\x04\x7b\xc3\x06\xfa\xba\xf0\xc3\xd9\xfa\x84\x71"

	 "\xc7\x0a\x7d\xef\x39\xa2\xf9\x1d\x68\xa2\x02\x1c\x99\xac\x7e\x2a\x24"

	 "\x53\x5a\x13\x4b\xa2\x3e\xc1\x57\x87\xce\xbe\x5c\x53\xcc",

	 STR(iv, iv_size,

	     "\x09\xf9\x11\x02\x9d\x74\xe3\x5b\xd8\x41\x56\xc5\x63\x56\x88\xc0"),

	 .tag_size = 16,

	 .tag = (void *)

	     "\x5a\x97\x9b\x0d\xa5\x8f\xde\x80\x51\x62\x1a\xe6\xbf\x96\xfe\xda",

	 .tag_prepended = 1,

	}

};

const struct cipher_vectors_st chacha20_32_vectors[] = { /* RFC8439 */

	{

	 STR(key, key_size,

	     "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f"),

	 STR(plaintext, plaintext_size,

	     "\x4c\x61\x64\x69\x65\x73\x20\x61\x6e\x64\x20\x47\x65\x6e\x74\x6c\x65\x6d\x65\x6e\x20\x6f\x66\x20\x74\x68\x65\x20\x63\x6c\x61\x73\x73\x20\x6f\x66\x20\x27\x39\x39\x3a\x20\x49\x66\x20\x49\x20\x63\x6f\x75\x6c\x64\x20\x6f\x66\x66\x65\x72\x20\x79\x6f\x75\x20\x6f\x6e\x6c\x79\x20\x6f\x6e\x65\x20\x74\x69\x70\x20\x66\x6f\x72\x20\x74\x68\x65\x20\x66\x75\x74\x75\x72\x65\x2c\x20\x73\x75\x6e\x73\x63\x72\x65\x65\x6e\x20\x77\x6f\x75\x6c\x64\x20\x62\x65\x20\x69\x74\x2e"),

	 .ciphertext = (uint8_t *)

	     "\x6e\x2e\x35\x9a\x25\x68\xf9\x80\x41\xba\x07\x28\xdd\x0d\x69\x81\xe9\x7e\x7a\xec\x1d\x43\x60\xc2\x0a\x27\xaf\xcc\xfd\x9f\xae\x0b\xf9\x1b\x65\xc5\x52\x47\x33\xab\x8f\x59\x3d\xab\xcd\x62\xb3\x57\x16\x39\xd6\x24\xe6\x51\x52\xab\x8f\x53\x0c\x35\x9f\x08\x61\xd8\x07\xca\x0d\xbf\x50\x0d\x6a\x61\x56\xa3\x8e\x08\x8a\x22\xb6\x5e\x52\xbc\x51\x4d\x16\xcc\xf8\x06\x81\x8c\xe9\x1a\xb7\x79\x37\x36\x5a\xf9\x0b\xbf\x74\xa3\x5b\xe6\xb4\x0b\x8e\xed\xf2\x78\x5e\x42\x87\x4d",

	 STR(iv, iv_size,

	     "\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x4a\x00\x00\x00\x00")

	},

};

static int test_cipher(gnutls_cipher_algorithm_t cipher,

		       const struct cipher_vectors_st *vectors,

		       size_t vectors_size, unsigned flags)

{

	gnutls_cipher_hd_t hd;

	int ret;

	unsigned int i;

	uint8_t tmp[384];

	gnutls_datum_t key, iv = {NULL, 0};

	for (i = 0; i < vectors_size; i++) {

		key.data = (void *) vectors[i].key;

		key.size = vectors[i].key_size;

		if (vectors[i].iv != NULL) {

			iv.data = (void *) vectors[i].iv;

			iv.size = gnutls_cipher_get_iv_size(cipher);

		}

		if (iv.size != vectors[i].iv_size)

			return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

		ret = gnutls_cipher_init(&hd, cipher, &key, &iv;;

		if (ret < 0) {

			_gnutls_debug_log("error initializing: %s\n",

					  gnutls_cipher_get_name(cipher));

			return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

		}

		ret =

		    gnutls_cipher_encrypt2(hd,

					   vectors[i].plaintext,

					   vectors[i].plaintext_size,

					   tmp, sizeof(tmp));

		if (ret < 0)

			return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

		if (memcmp

		    (tmp, vectors[i].ciphertext,

		     vectors[i].plaintext_size) != 0) {

			_gnutls_debug_log("%s test vector %d failed!\n",

					  gnutls_cipher_get_name(cipher),

					  i);

			return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

		}

		/* check in-place encryption */

		if (cipher != GNUTLS_CIPHER_ARCFOUR_128) { /* arcfour is stream */

			gnutls_cipher_set_iv(hd, (void*)vectors[i].iv, vectors[i].iv_size);

			memcpy(tmp, vectors[i].plaintext, vectors[i].plaintext_size);

			ret = gnutls_cipher_encrypt(hd, tmp, vectors[i].plaintext_size);

			if (ret < 0)

				return

				    gnutls_assert_val

				    (GNUTLS_E_SELF_TEST_ERROR);

			if (memcmp(tmp, vectors[i].ciphertext, vectors[i].plaintext_size) != 0) {

				_gnutls_debug_log("%s vector %d in-place encryption failed!\n", gnutls_cipher_get_name(cipher), i);

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			}

		}

		/* check the internal IV */

		if (vectors[i].internal_iv_size > 0) {

			ret = _gnutls_cipher_get_iv(hd, tmp, sizeof(tmp));

			if (ret < 0)

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			if (memcmp(tmp, vectors[i].internal_iv, ret) != 0) {

				_gnutls_debug_log("%s vector %d internal IV check failed!\n",

						  gnutls_cipher_get_name(cipher),

						  i);

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			}

		}

		gnutls_cipher_deinit(hd);

	}

	iv.size = gnutls_cipher_get_iv_size(cipher);

	for (i = 0; i < vectors_size; i++) {

		key.data = (void *) vectors[i].key;

		key.size = vectors[i].key_size;

		iv.data = (void *) vectors[i].iv;

		ret = gnutls_cipher_init(&hd, cipher, &key, &iv;;

		if (ret < 0)

			return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

		ret =

		    gnutls_cipher_decrypt2(hd,

					   vectors[i].ciphertext,

					   vectors[i].plaintext_size, tmp,

					   sizeof(tmp));

		if (ret < 0) {

			_gnutls_debug_log

			    ("%s decryption of test vector %d failed!\n",

			     gnutls_cipher_get_name(cipher), i);

			return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

		}

		if (memcmp

		    (tmp, vectors[i].plaintext,

		     vectors[i].plaintext_size) != 0) {

			_gnutls_debug_log("%s test vector %d failed!\n",

					  gnutls_cipher_get_name(cipher),

					  i);

			return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

		}

		/* check in-place decryption */

		if (cipher != GNUTLS_CIPHER_ARCFOUR_128) { /* arcfour is stream */

			gnutls_cipher_set_iv(hd, (void*)vectors[i].iv, vectors[i].iv_size);

			memcpy(tmp, vectors[i].ciphertext, vectors[i].plaintext_size);

			ret = gnutls_cipher_decrypt(hd, tmp, vectors[i].plaintext_size);

			if (ret < 0)

				return

				    gnutls_assert_val

				    (GNUTLS_E_SELF_TEST_ERROR);

			if (memcmp(tmp, vectors[i].plaintext, vectors[i].plaintext_size) != 0) {

				_gnutls_debug_log("%s vector %d in-place decryption failed!\n", gnutls_cipher_get_name(cipher), i);

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			}

		}

		gnutls_cipher_deinit(hd);

	}

	_gnutls_debug_log

	    ("%s self check succeeded\n",

	     gnutls_cipher_get_name(cipher));

	return 0;

}

static int test_cipher_all_block_sizes(gnutls_cipher_algorithm_t cipher,

				       const struct cipher_vectors_st *vectors,

				       size_t vectors_size, unsigned flags)

{

	gnutls_cipher_hd_t hd;

	int ret;

	unsigned int i;

	uint8_t tmp[384];

	gnutls_datum_t key, iv = {NULL, 0};

	size_t block;

	size_t offset;

	for (i = 0; i < vectors_size; i++) {

		for (block = 1; block <= vectors[i].plaintext_size; block++) {

			key.data = (void *) vectors[i].key;

			key.size = vectors[i].key_size;

			iv.data = (void *) vectors[i].iv;

			iv.size = gnutls_cipher_get_iv_size(cipher);

			if (iv.size != vectors[i].iv_size)

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			ret = gnutls_cipher_init(&hd, cipher, &key, &iv;;

			if (ret < 0) {

				_gnutls_debug_log("error initializing: %s\n",

						  gnutls_cipher_get_name(cipher));

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			}

			for (offset = 0;

			     offset < vectors[i].plaintext_size;

			     offset += block) {

				ret =

				    gnutls_cipher_encrypt2(hd,

							   vectors[i].plaintext + offset,

							   MIN(block, vectors[i].plaintext_size - offset),

							   tmp + offset,

							   sizeof(tmp) - offset);

				if (ret < 0)

					return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			}

			if (memcmp

			    (tmp, vectors[i].ciphertext,

			     vectors[i].plaintext_size) != 0) {

				_gnutls_debug_log("%s encryption of test vector %d failed with block size %d/%d!\n",

						  gnutls_cipher_get_name(cipher),

						  i, (int)block, (int)vectors[i].plaintext_size);

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			}

			gnutls_cipher_deinit(hd);

		}

	}

	for (i = 0; i < vectors_size; i++) {

		for (block = 1; block <= vectors[i].plaintext_size; block++) {

			key.data = (void *) vectors[i].key;

			key.size = vectors[i].key_size;

			iv.data = (void *) vectors[i].iv;

			iv.size = gnutls_cipher_get_iv_size(cipher);

			ret = gnutls_cipher_init(&hd, cipher, &key, &iv;;

			if (ret < 0)

				return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);

			for (offset = 0;

			     offset + block <= vectors[i].plaintext_size;

			     offset += block) {

				ret =

				    gnutls_cipher_decrypt2(hd,

							   vectors[i].ciphertext + offset,

							   MIN(block, vectors[i].plaintext_size - offset),

							   tmp + offset,

							   sizeof(tmp) - offset);

				if (ret < 0)

					return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);