Questions tagged [test-vectors]

A test vector is a set of inputs used to test new and/or established cryptographic designs and/or implementations.

Filter by
Sorted by
Tagged with
2 votes
1 answer
164 views

SHAKE128 range calculation for MonteCarlo messages

For SHAKE128 NIST has provided test vectors for Monte Carlo: ...
Umadevi Palathur's user avatar
1 vote
0 answers
88 views

Trouble interpreting CTR_DRBG test vector results

I've implemented a CTR_DRBG random number generator according to NIST SP 800-90A Rev. 1 and I am now testing it with test vectors provided in NIST CAVS 14.3 (drbgvectors_no_reseed\CTR_DRBG.txt). ...
MDude's user avatar
  • 23
1 vote
1 answer
68 views

getting wrong rsa private exponent (d) for this particular test vector from nist cavp

In 186-2rsatestvectors.zip/SigVerRSA.rsp ...
d186's user avatar
  • 13
1 vote
1 answer
427 views

How are long IVs used in AES-GCM?

I looked through NIST's official test vectors (CAVP) for the AES-GCM mode, and noticed that there are some test vectors in there with 8-bit or 1024-bit IVs. But as far as I understand, the GCM ...
polfosol's user avatar
  • 201
4 votes
0 answers
102 views

Hasty Pudding test vectors

I’ve been implementing Hasty Pudding from its spec, but I can’t find a copy of the test data to validate my implementation against. The directory of tests links to various files in ftp://ftp.cs....
Chris Morgan's user avatar
0 votes
2 answers
210 views

E382 and E521 edward curves test vector

I need test vectors for E382 and E521 edward curves in order to test signature and verification process of a software.
1chenar's user avatar
  • 11
2 votes
1 answer
436 views

Test vectors (points) for Ed25519

I am trying to verify an Ed25519 implementation, but I can't find any test vectors for the curve points. All test vectors focus directly on signature constructions (EdDSA). I tried to use https://...
SquareRootOfTwentyThree's user avatar
1 vote
0 answers
41 views

running Project Wycheproof against crypto implementations in languages other than Java

So I guess https://github.com/google/wycheproof "tests crypto libraries against known attacks". It appears to mainly be intended for Java crypto providers but can it easily be adapted to be ...
neubert's user avatar
  • 2,927
0 votes
1 answer
93 views

How to test Salsa20/8 Core RFC 7914 implementation with the test vectors?

I wanted to test the implementation of the Salsa20/8 Core function provided in the RFC 7914, with the test vectors provided, and I do not get the expected output from provided input. I guess that I am ...
Patrice's user avatar
  • 11
1 vote
1 answer
169 views

Is using only one or two test vector(s) for ChaCha20 enough for validation of coded algorithm?

For validating the ChaCha20 encryption/decryption algorithm written in VB.NET, I am looking for more ChaCha20 test vectors that are based on the final spec for ChaCha20 that can be found here. See the ...
DotNET Afficionado's user avatar
1 vote
2 answers
144 views

test vectors for IDEA

I'm implementing IDEA algorithm in java and I need test vectors for the algorithm that include plaintext,ciphertext and keys in each step to verify my code.
siba36's user avatar
  • 301
1 vote
1 answer
732 views

Verify that x, y coordinates given as hex string are valid points on an Elliptic Curve [duplicate]

Given the following information: "curve": "P-256", "qx": "729C51D177EBE2079A0FB7B0B3C2145159CF81EC61960E642A1744719AA9F913", "qy": "...
factor2's user avatar
  • 11
2 votes
0 answers
41 views

Does anybody have test vectors for the LBlock block cipher?

LBlock is a lightweight block cipher with 64-80 bits block-key size, designed by a group of Chinese scholars. Does anybody have LBlock test vectors? I am looking for test vectors, which contain the ...
nari's user avatar
  • 21
0 votes
0 answers
730 views

Where to get AES GCM NIST-like test cases

I'm implementing AES GCM 256 bit at the moment. Now I'm finished with copying the content of the standard as a program and now have to make it actually work. With the test cases in the official NIST ...
zvavybir's user avatar
  • 101
1 vote
0 answers
309 views

Test vectors for FF1/FF3-1

I'm working on a C implementation of the FF1 and FF3-1 format-preserving encryption algorithms, here. For FF1, NIST provides test vectors, here; however, none of the test vectors is crafted such that <...
John Tyner's user avatar
3 votes
1 answer
652 views

Public key derivation for Ed448

Another potentially silly question here, but I seem to have developed tunnel vision and I am missing something very basic. In RFC 8032 one can find a number of test vectors for Ed488 - for example: <...
Jay Smith's user avatar
1 vote
0 answers
348 views

ECDSA sign test vectors

I've seen a large set of ECDSA test vectors for verification. In addition, I've seen some test vectors from NIST, and those can be found here. Is anyone aware of ECDSA sign test vectors which, if &...
hannes's user avatar
  • 11
0 votes
1 answer
260 views

Byte order in AES-CMAC test code

I'm looking at the AES-CMAC RFC and I found somehow counter-intuitive the way test vectors are used in the test code. Let's look at the key K ...
Šatov's user avatar
  • 103
1 vote
0 answers
107 views

Does there exist a test vector for the Xoodoo permutation?

What I need is a set of pairs, where the first element of the pair is a 384-bit input (including the sequence of 384 zero bits) and the second element is a corresponding 384-bit output of the Xoodoo ...
lyrically wicked's user avatar
1 vote
1 answer
310 views

Are the Serpent Test Vectors incorrect?

I have recently written an implementation of Serpent and was testing it against known vectors to no avail. Using 256-bit key, I compared my encryption to the test vectors located here: http://www.cs....
toothandsticks's user avatar
2 votes
1 answer
192 views

ChaCha matrix - tests for original implementation not passing due to bad counter encoding?

Hello everyone and already thanks for taking your time to read this! I am currently implementing ChaCha20 (256-bit key) for my bachelor thesis. I know that there are two version of ChaCha out there; ...
ekzyis's user avatar
  • 43
1 vote
1 answer
453 views

ECRYPT Salsa20 Test Vectors Interpretation

I am currently implementing Salsa20 for my bachelor thesis. After having verified all the functions needed for the final encryption function with the given test data in the specification from DJB, I ...
ekzyis's user avatar
  • 43
3 votes
2 answers
270 views

Bleichenbacher attack test vectors

I was trying to understand the Bleichenbacher attack. I went through the paper of Bleichenbacher to understand it a bit more. However, I tried to get some test vectors to simulate this attack locally ...
Vikash's user avatar
  • 68
1 vote
0 answers
442 views

Using ECC CDH test vectors with ECDH when h >1

I am writing formal tests for a system with a number of crypto requirements including support for ECDSA, ECDH and HMAC. The system is required to support the following EC's: NIST curves P-224, 384, ...
Phil's user avatar
  • 41
1 vote
0 answers
66 views

Are there official test vectors for historic ciphers? [closed]

In many cases when cryptographic algorithms are published the paper also provides a set of test vectors that can be used by developers to verify their implementations. For historic ciphers such as ...
766F6964's user avatar
  • 111
1 vote
1 answer
265 views

IEEE P1619/XTS, inconsistent reference implementation and test vectors [closed]

I'm testing IEEE's P1619, which is XTS mode. IEEE documents from 2007 provided both test vectors and a reference implementation. Documents from 2008 only provided the reference implementation. Here is ...
user avatar
1 vote
1 answer
554 views

SHA3-512 troubleshooting - is there a worked example for hashing the "zero-length string"?

(I wondered if this question should be asked on StackOverflow instead because it's a programming related issue, but it's bound to the intricacies of SHA3, which I figured was a better fit for Crypto....
Wossname's user avatar
  • 117
2 votes
1 answer
596 views

Where can I find test vectors for the PRESENT cipher with a 128-bit key?

Where can I find the test vectors for the PRESENT block cipher with a 128-bit key?
Madhu Ghattamaneni's user avatar
3 votes
1 answer
156 views

Test Vectors for XEdDSA

Anyone aware of test vectors (preferably with intermediate values) for the XEdDSA algorithm?
Peter Waher's user avatar
1 vote
1 answer
73 views

How can I get select messages ciphers for salsa20poly1305 for unit tests?

In order to avoid memory errors, I always write safe C++ wrappers with strong type-safety for any C encryption library I use. To test my wrapper of ...
The Quantum Physicist's user avatar
5 votes
2 answers
1k views

What's the reason for Monte Carlo tests for block ciphers?

NIST specifies that implementations were required to create Monte Carlo test vectors for ECB and CBC mode for the AES competition. What's the reason for these tests? The only thing I can think of is ...
Maarten Bodewes's user avatar
  • 92.6k
0 votes
0 answers
651 views

Signature Generation with RSA PKCS#1 v.15

I am trying to validate my RSA implementation for digital signatures with the test vectors provided by NIST. For now, I am focusing on the tests for signature generation (SigGen15) with the PKCS#1 v....
lucas's user avatar
  • 1
1 vote
2 answers
319 views

Implementations of GCM with 64-bit cipher

The paper The Galois/Counter Mode of Operation (GCM) describes mainly the 128-bit case, for use with 128-bit block ciphers such as AES. AES-GCM test vectors are available from NIST. The paper also ...
Craig McQueen's user avatar
2 votes
3 answers
1k views

64 DES full example with all the stages

I'm trying to write a code to perform encryption and decryption of 64-bit DES but I'm having a problem in verifying that my code is working correctly. My graduation project is about DES crypt-analysis ...
siba36's user avatar
  • 301
3 votes
2 answers
2k views

Where can I find official test vectors for NIST SP 800-56C r1 Single Step KDF

NIST 800-56Cr1 describes a single and two (extract-expand) step KDF designed for use in key agreement routines. NIST declares that HKDF (RFC5869) is a version of the two-step variation so test vectors ...
Patrick's user avatar
  • 251
5 votes
3 answers
3k views

Need a test suite for my RSA implementation

I have an assignment to build a software which can encrypt/decrypt by RSA method. I already did it, but my teacher said that I need to find a test suite (include: modulus, public key, private key) to ...
user63361's user avatar
0 votes
1 answer
703 views

Using NIST SP 800 - 90Ar1 Test Vectors for HMAC_DRBG with Reseeding and AdditionalInput

I'm trying to test my HMAC-DRBG implementation, but I do not understand how the AdditionalInput paramter should be used. From one test case (pr-false): ...
Patrick's user avatar
  • 251
15 votes
1 answer
1k views

Doubt about published test vectors for gimli hash

In https://eprint.iacr.org/2017/630.pdf and https://gimli.cr.yp.to/gimli-20170627.pdf there are test vectors for the gimli hash function. I have compile the reference C code test_hash.c from https://...
gammatester's user avatar
  • 1,005
5 votes
3 answers
3k views

ChaCha20-Poly1305 test vectors

I was trying to use OpenSSL 1.1 (via Ruby) to validate the ChaCha20-Poly1305 test vector from this IETF draft: https://datatracker.ietf.org/doc/html/draft-agl-tls-chacha20poly1305-04#section-7 The ...
Jonas's user avatar
  • 779
2 votes
1 answer
1k views

Could someone please explain test vectors of NIST for RSASSA-PSS 1024 bit?

I am new to RSASSA-PSS Signature verification algorithm. Below are the test vectors from NIST but i am not able to understand each parameter. I could understand that SHA1 is used for Hashing and e ...
danny's user avatar
  • 253
5 votes
2 answers
4k views

Explanation of CAVP format for NIST Test Vectors for SHA-2 and 3

I want to run the SHA2 and SHA3 NIST algorithm test vectors provided in the zip files at the bottom of this page: http://csrc.nist.gov/groups/STM/cavp/secure-hashing.html#sha-2 I don't quite ...
Vincent Russo's user avatar
3 votes
0 answers
120 views

mCrypton - does anyone know where I can find test vectors or a reference implementation?

I am currently writing an implementation of the mCrypton lightweight block cipher (as presented in this paper). Unfortunately, the authors do not provide any test vectors. I tried to contact the ...
Huljar's user avatar
  • 31
9 votes
2 answers
6k views

Complete Set of Test-Vectors for ECDSA secp256k1

Although there are several implementations of ECDSA secp256k1 public available over the internet (the most popular being OpenSSL), it seems that there are no complete set of test-vectors available. ...
Mark Messa's user avatar
1 vote
0 answers
233 views

Test vectors for Piccolo algorithm?

I'm looking for Test Vectors to test my implementation of PICCOLO. I would like to test a different input from the usual where the key and the plaintext are either 000..000 or FFF...FFF. I wrote ...
Aleksandra Arsić's user avatar
2 votes
1 answer
507 views

Is there any use for PBKDF with empty password?

As the name suggests, password based key derivation functions are used for deriving a cryptographic key from, well, a password. Is there any use for PBKDFs with empty password? Does it give any ...
buc's user avatar
  • 123
1 vote
1 answer
1k views

Testing implementation of cryptography algorithms: Brainstorm

I wonder what kind of techniques can be used to validate implementation of cryptography algorithms? The obvious one is to run specific algorithms against publically known test vectors (i.e. from ...
Kris Kwiatkowski's user avatar
0 votes
1 answer
1k views

Is there any place where I can find test vectors for point addition and doubling of ECC?

I want to extensively test my implementation of point addition and doubling. I have only one test vector with me. I need more values to test. In the web, I could find test vectors only for key pair ...
abejoe's user avatar
  • 605
1 vote
2 answers
2k views

NIST HMAC Test vectors

I am searching test vectors of the HMAC-SHA256 primitive to verify the correctness of an implementation. Without hesitation I go on the NIST website to see what they offer. While reading the ...
Raoul722's user avatar
  • 2,836
2 votes
1 answer
210 views

Problem reproducing AES results

First of all, I just implemented AES because I wanted to understand how it works and as a challenge to see if I could do it and I won't use to encrypt anything important, ever. The (German) Wikipedia ...
Joba's user avatar
  • 143
-2 votes
1 answer
152 views

Test vectors representation

The test vectors listed in https://github.com/cantora/avr-crypto-lib/blob/master/testvectors/Mickey-v2-128-unverified.test-vectors Are represented as Hex strings? I'm sure that the key is, because ...
Mark's user avatar
  • 1