util/fipstools: document AES-gcm-randnonce cmds
The acvptool supports modules that have an ACVP-AES-GCM algorithm
capability that includes ivGen=internal. For these test vectors
the tool invokes the AES-GCM-randnonce/open and AES-GCM-randnonce/seal
commands.
This commit updates ACVP.md to describe these commands since their
arguments differ slightly from the base AES-GCM/open and AES-GCM/seal
commands used for ivGen=external vectors.
Change-Id: I52d84e2cc721adf1e1d8314b2679db4896f000b4
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/74527
Reviewed-by: Bob Beck <bbe@google.com>
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: Adam Langley <agl@google.com>
diff --git a/util/fipstools/acvp/ACVP.md b/util/fipstools/acvp/ACVP.md
index 3a3b84e..38700ac 100644
--- a/util/fipstools/acvp/ACVP.md
+++ b/util/fipstools/acvp/ACVP.md
@@ -57,6 +57,8 @@
| AES-CTR/encrypt | Key, plaintexttext, initial counter, constant 1 | Ciphertext |
| AES-GCM/open | Tag length, key, ciphertext, nonce, ad | One-byte success flag, plaintext or empty |
| AES-GCM/seal | Tag length, key, plaintext, nonce, ad | Ciphertext |
+| AES-GCM-randnonce/open | Tag length, key, ciphertext (with rand nonce appended), nonce (empty), ad | One-byte success flag, plaintext or empty |
+| AES-GCM-randnonce/seal | Tag length, key, plaintext, nonce (empty), ad | Ciphertext (with rand nonce appended) |
| AES-KW/open | (dummy), key, ciphertext, (dummy), (dummy) | One-byte success flag, plaintext or empty |
| AES-KW/seal | (dummy), key, plaintext, (dummy), (dummy) | Ciphertext |
| AES-KWP/open | (dummy), key, ciphertext, (dummy), (dummy) | One-byte success flag, plaintext or empty |
