Questions tagged [test-vectors]
A test vector is a set of inputs used to test new and/or established cryptographic designs and/or implementations.
66
questions
1
vote
0
answers
67
views
Trouble interpreting CTR_DRBG test vector results
I've implemented a CTR_DRBG random number generator according to NIST SP 800-90A Rev. 1 and I am now testing it with test vectors provided in NIST CAVS 14.3 (drbgvectors_no_reseed\CTR_DRBG.txt).
...
- 23
1
vote
1
answer
63
views
getting wrong rsa private exponent (d) for this particular test vector from nist cavp
In 186-2rsatestvectors.zip/SigVerRSA.rsp
...
- 13
1
vote
1
answer
382
views
How are long IVs used in AES-GCM?
I looked through NIST's official test vectors (CAVP) for the AES-GCM mode, and noticed that there are some test vectors in there with 8-bit or 1024-bit IVs. But as far as I understand, the GCM ...
- 201
4
votes
0
answers
102
views
Hasty Pudding test vectors
I’ve been implementing Hasty Pudding from its spec, but I can’t find a copy of the test data to validate my implementation against.
The directory of tests links to various files in ftp://ftp.cs....
- 203
0
votes
2
answers
183
views
E382 and E521 edward curves test vector
I need test vectors for E382 and E521 edward curves in order to test signature and verification process of a software.
- 11
2
votes
1
answer
329
views
Test vectors (points) for Ed25519
I am trying to verify an Ed25519 implementation, but I can't find any test vectors for the curve points. All test vectors focus directly on signature constructions (EdDSA).
I tried to use https://...
- 1,695
1
vote
0
answers
35
views
running Project Wycheproof against crypto implementations in languages other than Java
So I guess https://github.com/google/wycheproof "tests crypto libraries against known attacks". It appears to mainly be intended for Java crypto providers but can it easily be adapted to be ...
- 2,895
0
votes
1
answer
82
views
How to test Salsa20/8 Core RFC 7914 implementation with the test vectors?
I wanted to test the implementation of the Salsa20/8 Core function provided in the RFC 7914, with the test vectors provided, and I do not get the expected output from provided input. I guess that I am ...
- 11
1
vote
1
answer
152
views
Is using only one or two test vector(s) for ChaCha20 enough for validation of coded algorithm?
For validating the ChaCha20 encryption/decryption algorithm written in VB.NET, I am looking for more ChaCha20 test vectors that are based on the final spec for ChaCha20 that can be found here. See the ...
1
vote
2
answers
114
views
test vectors for IDEA
I'm implementing IDEA algorithm in java and I need test vectors for the algorithm that include plaintext,ciphertext and keys in each step to verify my code.
- 191
1
vote
1
answer
611
views
Verify that x, y coordinates given as hex string are valid points on an Elliptic Curve [duplicate]
Given the following information:
"curve": "P-256",
"qx": "729C51D177EBE2079A0FB7B0B3C2145159CF81EC61960E642A1744719AA9F913",
"qy": "...
- 11
2
votes
0
answers
40
views
Does anybody have test vectors for the LBlock block cipher?
LBlock is a lightweight block cipher with 64-80 bits block-key size, designed by a group of Chinese scholars. Does anybody have LBlock test vectors?
I am looking for test vectors, which contain the ...
- 21
0
votes
0
answers
601
views
Where to get AES GCM NIST-like test cases
I'm implementing AES GCM 256 bit at the moment. Now I'm finished with copying the content of the standard as a program and now have to make it actually work. With the test cases in the official NIST ...
- 101
1
vote
0
answers
261
views
Test vectors for FF1/FF3-1
I'm working on a C implementation of the FF1 and FF3-1 format-preserving encryption algorithms, here.
For FF1, NIST provides test vectors, here; however, none of the test vectors is crafted such that <...
- 111
3
votes
1
answer
487
views
Public key derivation for Ed448
Another potentially silly question here, but I seem to have developed tunnel vision and I am missing something very basic.
In RFC 8032 one can find a number of test vectors for Ed488 - for example:
<...
- 71
1
vote
0
answers
309
views
ECDSA sign test vectors
I've seen a large set of ECDSA test vectors for verification. In addition, I've seen some test vectors from NIST, and those can be found here.
Is anyone aware of ECDSA sign test vectors which, if &...
- 11
0
votes
1
answer
218
views
Byte order in AES-CMAC test code
I'm looking at the AES-CMAC RFC and I found somehow counter-intuitive the way test vectors are used in the test code.
Let's look at the key K
...
- 103
1
vote
0
answers
103
views
Does there exist a test vector for the Xoodoo permutation?
What I need is a set of pairs, where the first element of the pair is a 384-bit input (including the sequence of 384 zero bits) and the second element is a corresponding 384-bit output of the Xoodoo ...
- 1,327
1
vote
1
answer
281
views
Are the Serpent Test Vectors incorrect?
I have recently written an implementation of Serpent and was testing it against known vectors to no avail. Using 256-bit key, I compared my encryption to the test vectors located here:
http://www.cs....
- 121
2
votes
1
answer
175
views
ChaCha matrix - tests for original implementation not passing due to bad counter encoding?
Hello everyone and already thanks for taking your time to read this!
I am currently implementing ChaCha20 (256-bit key) for my bachelor thesis. I know that there are two version of ChaCha out there; ...
- 43
1
vote
1
answer
424
views
ECRYPT Salsa20 Test Vectors Interpretation
I am currently implementing Salsa20 for my bachelor thesis. After having verified all the functions needed for the final encryption function with the given test data in the specification from DJB, I ...
- 43
3
votes
2
answers
231
views
Bleichenbacher attack test vectors
I was trying to understand the Bleichenbacher attack. I went through the paper of Bleichenbacher to understand it a bit more. However, I tried to get some test vectors to simulate this attack locally ...
- 68
1
vote
0
answers
411
views
Using ECC CDH test vectors with ECDH when h >1
I am writing formal tests for a system with a number of crypto requirements including support for ECDSA, ECDH and HMAC. The system is required to support the following EC's: NIST curves P-224, 384, ...
- 41
1
vote
0
answers
65
views
Are there official test vectors for historic ciphers? [closed]
In many cases when cryptographic algorithms are published the paper also provides a set of test vectors that can be used by developers to verify their implementations.
For historic ciphers such as ...
- 111
1
vote
1
answer
239
views
IEEE P1619/XTS, inconsistent reference implementation and test vectors [closed]
I'm testing IEEE's P1619, which is XTS mode. IEEE documents from 2007 provided both test vectors and a reference implementation. Documents from 2008 only provided the reference implementation. Here is ...
user10496
1
vote
1
answer
468
views
SHA3-512 troubleshooting - is there a worked example for hashing the "zero-length string"?
(I wondered if this question should be asked on StackOverflow instead because it's a programming related issue, but it's bound to the intricacies of SHA3, which I figured was a better fit for Crypto....
- 117
2
votes
1
answer
579
views
Where can I find test vectors for the PRESENT cipher with a 128-bit key?
Where can I find the test vectors for the PRESENT block cipher with a 128-bit key?
3
votes
1
answer
153
views
Test Vectors for XEdDSA
Anyone aware of test vectors (preferably with intermediate values) for the XEdDSA algorithm?
- 31
1
vote
1
answer
72
views
How can I get select messages ciphers for salsa20poly1305 for unit tests?
In order to avoid memory errors, I always write safe C++ wrappers with strong type-safety for any C encryption library I use.
To test my wrapper of ...
5
votes
2
answers
1k
views
What's the reason for Monte Carlo tests for block ciphers?
NIST specifies that implementations were required to create Monte Carlo test vectors for ECB and CBC mode for the AES competition.
What's the reason for these tests? The only thing I can think of is ...
- 91.7k
0
votes
0
answers
623
views
Signature Generation with RSA PKCS#1 v.15
I am trying to validate my RSA implementation for digital signatures with the test vectors provided by NIST. For now, I am focusing on the tests for signature generation (SigGen15) with the PKCS#1 v....
- 1
1
vote
2
answers
299
views
Implementations of GCM with 64-bit cipher
The paper The Galois/Counter Mode of Operation (GCM) describes mainly the 128-bit case, for use with 128-bit block ciphers such as AES. AES-GCM test vectors are available from NIST.
The paper also ...
- 252
2
votes
2
answers
966
views
64 DES full example with all the stages
I'm trying to write a code to perform encryption and decryption of 64-bit DES but I'm having a problem in verifying that my code is working correctly. My graduation project is about DES crypt-analysis ...
- 191
3
votes
2
answers
2k
views
Where can I find official test vectors for NIST SP 800-56C r1 Single Step KDF
NIST 800-56Cr1 describes a single and two (extract-expand) step KDF designed for use in key agreement routines. NIST declares that HKDF (RFC5869) is a version of the two-step variation so test vectors ...
- 251
5
votes
3
answers
3k
views
Need a test suite for my RSA implementation
I have an assignment to build a software which can encrypt/decrypt by RSA method. I already did it, but my teacher said that I need to find a test suite (include: modulus, public key, private key) to ...
- 61
0
votes
1
answer
644
views
Using NIST SP 800 - 90Ar1 Test Vectors for HMAC_DRBG with Reseeding and AdditionalInput
I'm trying to test my HMAC-DRBG implementation, but I do not understand how the AdditionalInput paramter should be used. From one test case (pr-false):
...
- 251
15
votes
1
answer
1k
views
Doubt about published test vectors for gimli hash
In https://eprint.iacr.org/2017/630.pdf and https://gimli.cr.yp.to/gimli-20170627.pdf there are test vectors for the gimli hash function. I have compile the reference C code test_hash.c from https://...
- 1,015
5
votes
3
answers
3k
views
ChaCha20-Poly1305 test vectors
I was trying to use OpenSSL 1.1 (via Ruby) to validate the ChaCha20-Poly1305 test vector from this IETF draft: https://datatracker.ietf.org/doc/html/draft-agl-tls-chacha20poly1305-04#section-7
The ...
- 779
2
votes
1
answer
1k
views
Could someone please explain test vectors of NIST for RSASSA-PSS 1024 bit?
I am new to RSASSA-PSS Signature verification algorithm. Below are the test vectors from NIST but i am not able to understand each parameter.
I could understand that SHA1 is used for Hashing and e ...
- 253
5
votes
2
answers
4k
views
Explanation of CAVP format for NIST Test Vectors for SHA-2 and 3
I want to run the SHA2 and SHA3 NIST algorithm test vectors provided in the zip files at the bottom of this page:
http://csrc.nist.gov/groups/STM/cavp/secure-hashing.html#sha-2
I don't quite ...
- 151
3
votes
0
answers
120
views
mCrypton - does anyone know where I can find test vectors or a reference implementation?
I am currently writing an implementation of the mCrypton lightweight block cipher (as presented in this paper). Unfortunately, the authors do not provide any test vectors. I tried to contact the ...
- 31
9
votes
2
answers
6k
views
Complete Set of Test-Vectors for ECDSA secp256k1
Although there are several implementations of ECDSA secp256k1 public available over the internet (the most popular being OpenSSL), it seems that there are no complete set of test-vectors available.
...
- 203
1
vote
0
answers
226
views
Test vectors for Piccolo algorithm?
I'm looking for Test Vectors to test my implementation of PICCOLO. I would like to test a different input from the usual where the key and the plaintext are either 000..000 or FFF...FFF.
I wrote ...
2
votes
1
answer
485
views
Is there any use for PBKDF with empty password?
As the name suggests, password based key derivation functions are used for deriving a cryptographic key from, well, a password.
Is there any use for PBKDFs with empty password? Does it give any ...
- 123
1
vote
1
answer
1k
views
Testing implementation of cryptography algorithms: Brainstorm
I wonder what kind of techniques can be used to validate implementation of cryptography algorithms?
The obvious one is to run specific algorithms against publically known test vectors (i.e. from ...
- 365
0
votes
1
answer
957
views
Is there any place where I can find test vectors for point addition and doubling of ECC?
I want to extensively test my implementation of point addition and doubling. I have only one test vector with me. I need more values to test.
In the web, I could find test vectors only for key pair ...
- 605
1
vote
2
answers
2k
views
NIST HMAC Test vectors
I am searching test vectors of the HMAC-SHA256 primitive to verify the correctness of an implementation.
Without hesitation I go on the NIST website to see what they offer.
While reading the ...
- 2,826
2
votes
1
answer
210
views
Problem reproducing AES results
First of all, I just implemented AES because I wanted to understand how it works and as a challenge to see if I could do it and I won't use to encrypt anything important, ever.
The (German) Wikipedia ...
- 143
-2
votes
1
answer
151
views
Test vectors representation
The test vectors listed in
https://github.com/cantora/avr-crypto-lib/blob/master/testvectors/Mickey-v2-128-unverified.test-vectors
Are represented as Hex strings? I'm sure that the key is, because ...
- 1
3
votes
0
answers
710
views
Test vectors for TLS PRF function
Does anyone know where I might be able to find test vectors for the PRF function in TLS? (either 1.0 or newer). I'm trying to implement a client and I am getting the BAD Record MAC return after ...
- 345