Google GitGoogle Git
Sign in
boringssl/boringssl/refs/heads/main/./third_party/wycheproof_testvectors/aes_ff1_radix256_test.json
blob: 9564f97fdc0cfeeb7e82261d93a9823702d5f397 [file] [edit]
{
"algorithm": "AES-FF1",
"generatorVersion": "0.9rc5",
"numberOfTests": 2021,
"header": [
"Test vectors of type FpeListTest are intended for format preserving encryption."
],
"notes": {
"EdgeCasePrf": {
"bugType": "EDGE_CASE",
"description": "FF1 computes a pseudorandom function, converts the result into an integer y, which is then reduced modulo radix**v, where v is the size of the longer block in the Feistel structure. This test vector contains cases where the value y is an edge case. The goal of the test vector is to check for arithmetic errors such as integer overflow or incorrect modular reduction."
},
"EdgeCaseState": {
"bugType": "EDGE_CASE",
"description": "FF1 requires integer arithmetic of various sizes. This test vector contains values such that edge cases are reached during encryption and decryption. The goal of the test vector is to check for incorrect integer arithmetic e.g., because of integer overflows."
},
"InvalidKeySize": {
"bugType": "MODIFIED_PARAMETER",
"description": "The key size is invalid."
},
"InvalidMessageSize": {
"bugType": "MISSING_STEP",
"description": "FF1 imposes a minimal size of the inputs. The original specification of FF1 required radix**minlen >= 100, NIST SP 800-38G rev 1, requires radix**minlen >= 1'000'000. This test vector contains a short message such that both limits are violated and hence should be rejected."
},
"InvalidPlaintext": {
"bugType": "MODIFIED_PARAMETER",
"description": "FF1 expects inputs from a fixed range of digits. This test vector contains a plaintext containing invalid digits."
},
"LargeMessageSize": {
"bugType": "FUNCTIONALITY",
"description": "The specification of FF1 uses integer arithmetic of arbitrary size for long messages. Some implementations may choose to restrict the message length to simplify the implementation of FF1. This test vector contains a message of size msglen such that radix**msglen > 2**128."
},
"NormalMessageSize": {
"bugType": "BASIC",
"description": "The specification of FF1 uses integer arithmetic of arbitrary size for long messages. Some implementations may choose to restrict the message length to simplify the implementation of FF1. This test vector contains a message of size msglen such that 1'000'000 <= radix**msglen <= 2**128."
},
"SmallMessageSize": {
"bugType": "LEGACY",
"description": "FF1 imposes a minimal size of the inputs. The original specification of FF1 required radix**msglen >= 100, NIST SP 800-38G rev 1 changes this and requires radix**msglen >= 1'000'000. This test vector contains a message of size msglen, such that radix**msglen lies between these two limits."
}
},
"schema": "fpe_list_test_schema.json",
"testGroups": [
{
"keySize": 128,
"msgSize": 0,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 1,
"comment": "Invalid message size",
"flags": [
"InvalidMessageSize"
],
"key": "fb9fc869af3e4828da6efa18b5fa71a0",
"tweak": "379f81cab6ed2517",
"msg": [],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 1,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 2,
"comment": "Invalid message size",
"flags": [
"InvalidMessageSize"
],
"key": "7325733095d90aff456a1e00fa977365",
"tweak": "a5f8950069a56f6c",
"msg": [223],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 0,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 3,
"comment": "Invalid message size",
"flags": [
"InvalidMessageSize"
],
"key": "af2463f51df63a015178e30edcf25dacbeb2abbc5144d0a6",
"tweak": "5d9c3dfb797c952a",
"msg": [],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 1,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 4,
"comment": "Invalid message size",
"flags": [
"InvalidMessageSize"
],
"key": "e9e279f5fad3e7fd7922e838cf07da528ddcc5387f6145bf",
"tweak": "a25989a2e4360bae",
"msg": [191],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 256,
"msgSize": 0,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 5,
"comment": "Invalid message size",
"flags": [
"InvalidMessageSize"
],
"key": "f25e816c4d42629a428e48f2d48a31f79d6b1e8ef47e5ed3e7e5bbdf37f1806d",
"tweak": "42dbc8913a275520",
"msg": [],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 256,
"msgSize": 1,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 6,
"comment": "Invalid message size",
"flags": [
"InvalidMessageSize"
],
"key": "b8c800bed3286920bd1d9ad89a78808e9f815ec638663a725f256cc7078fdaf0",
"tweak": "90120912eba3c19c",
"msg": [139],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 2,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 7,
"comment": "small message size",
"flags": [
"SmallMessageSize"
],
"key": "ad65778960d778c614e2673dee073acb",
"tweak": "4505f45a8fa30b90",
"msg": [138, 147],
"ct": [134, 221],
"result": "valid"
}
]
},
{
"keySize": 192,
"msgSize": 2,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 8,
"comment": "small message size",
"flags": [
"SmallMessageSize"
],
"key": "911c9e0a87977587050ebb48f4f9e199fde8472781ecaf7a",
"tweak": "cf98ea96ef005bc6",
"msg": [116, 145],
"ct": [54, 134],
"result": "valid"
}
]
},
{
"keySize": 256,
"msgSize": 2,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 9,
"comment": "small message size",
"flags": [
"SmallMessageSize"
],
"key": "d05ae6e3819e2dcdd218be7c62465e8f1474f1fec8e79a1a3f7b88040d0f4160",
"tweak": "823988f1ffb8ce23",
"msg": [1, 41],
"ct": [87, 138],
"result": "valid"
}
]
},
{
"keySize": 128,
"msgSize": 3,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 10,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "aa6f23f573da39b110f4e155c418ba1f",
"tweak": "8402018f66fd2cb9",
"msg": [219, 161, 130],
"ct": [93, 160, 186],
"result": "valid"
},
{
"tcId": 11,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [0, 0, 0],
"ct": [67, 78, 134],
"result": "valid"
},
{
"tcId": 12,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [255, 255, 255],
"ct": [103, 147, 102],
"result": "valid"
},
{
"tcId": 13,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [128, 128, 0],
"ct": [113, 129, 77],
"result": "valid"
},
{
"tcId": 14,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [127, 127, 255],
"ct": [186, 160, 48],
"result": "valid"
},
{
"tcId": 15,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [167, 77, 105],
"ct": [219, 102, 18],
"result": "valid"
},
{
"tcId": 16,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [73, 131, 84],
"ct": [251, 169, 69],
"result": "valid"
},
{
"tcId": 17,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [158, 50, 217],
"ct": [76, 181, 124],
"result": "valid"
},
{
"tcId": 18,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [222, 43, 162],
"ct": [31, 173, 53],
"result": "valid"
},
{
"tcId": 19,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [36, 16, 226],
"ct": [254, 141, 174],
"result": "valid"
},
{
"tcId": 20,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [236, 159, 77],
"ct": [195, 226, 251],
"result": "valid"
},
{
"tcId": 21,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [51, 142, 11],
"ct": [200, 103, 119],
"result": "valid"
},
{
"tcId": 22,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [117, 232, 68],
"ct": [224, 130, 236],
"result": "valid"
},
{
"tcId": 23,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [189, 37, 137],
"ct": [0, 0, 0],
"result": "valid"
},
{
"tcId": 24,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [123, 75, 109],
"ct": [255, 255, 255],
"result": "valid"
},
{
"tcId": 25,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [2, 114, 94],
"ct": [128, 128, 0],
"result": "valid"
},
{
"tcId": 26,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fac360c003aeb623e94b78491f49aad4",
"tweak": "37e0cdf083f8e109",
"msg": [192, 253, 23],
"ct": [127, 127, 255],
"result": "valid"
},
{
"tcId": 27,
"comment": "y = 0 and (y + a) % radix == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "7ea3a598c2a4965d57d96cec24",
"msg": [179, 41, 11],
"ct": [16, 241, 67],
"result": "valid"
},
{
"tcId": 28,
"comment": "y = 0 and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "7ea3a598c2a4965d57d96cec24",
"msg": [53, 89, 70],
"ct": [172, 13, 151],
"result": "valid"
},
{
"tcId": 29,
"comment": "y = 0 and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "7ea3a598c2a4965d57d96cec24",
"msg": [57, 18, 141],
"ct": [78, 219, 194],
"result": "valid"
},
{
"tcId": 30,
"comment": "y = 0 and (y + a) % radix is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "7ea3a598c2a4965d57d96cec24",
"msg": [245, 5, 44],
"ct": [53, 110, 75],
"result": "valid"
},
{
"tcId": 31,
"comment": "y = 1 and a = 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ba11b9575afdb0d8c2f48b4ccd",
"msg": [0, 19, 217],
"ct": [100, 8, 218],
"result": "valid"
},
{
"tcId": 32,
"comment": "y = 1 and a = 1 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ba11b9575afdb0d8c2f48b4ccd",
"msg": [1, 19, 217],
"ct": [47, 222, 139],
"result": "valid"
},
{
"tcId": 33,
"comment": "y = 1 and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ba11b9575afdb0d8c2f48b4ccd",
"msg": [128, 19, 217],
"ct": [196, 69, 27],
"result": "valid"
},
{
"tcId": 34,
"comment": "y = 1 and (y + a) % radix is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ba11b9575afdb0d8c2f48b4ccd",
"msg": [254, 19, 217],
"ct": [193, 163, 157],
"result": "valid"
},
{
"tcId": 35,
"comment": "y = 1 and (y + a) % radix == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ba11b9575afdb0d8c2f48b4ccd",
"msg": [255, 19, 217],
"ct": [48, 157, 143],
"result": "valid"
},
{
"tcId": 36,
"comment": "y is maximal and (y + a) % radix is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ae9ef70a293d1c2493e961f756",
"msg": [150, 48, 252],
"ct": [255, 110, 22],
"result": "valid"
},
{
"tcId": 37,
"comment": "y is maximal and (y + a) % radix == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ae9ef70a293d1c2493e961f756",
"msg": [178, 113, 138],
"ct": [0, 132, 240],
"result": "valid"
},
{
"tcId": 38,
"comment": "y is maximal and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ae9ef70a293d1c2493e961f756",
"msg": [69, 37, 187],
"ct": [127, 234, 221],
"result": "valid"
},
{
"tcId": 39,
"comment": "y is maximal and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "ae9ef70a293d1c2493e961f756",
"msg": [9, 240, 254],
"ct": [254, 68, 68],
"result": "valid"
},
{
"tcId": 40,
"comment": "y is edge case for modular reduction and (y + a) % radix == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "e0ee238d7be504427454822f51",
"msg": [16, 98, 194],
"ct": [182, 210, 126],
"result": "valid"
},
{
"tcId": 41,
"comment": "y is edge case for modular reduction and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "e0ee238d7be504427454822f51",
"msg": [82, 108, 34],
"ct": [129, 225, 164],
"result": "valid"
},
{
"tcId": 42,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "e0ee238d7be504427454822f51",
"msg": [102, 226, 71],
"ct": [198, 227, 225],
"result": "valid"
},
{
"tcId": 43,
"comment": "y is edge case for modular reduction and (y + a) % radix is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "e0ee238d7be504427454822f51",
"msg": [195, 106, 33],
"ct": [224, 57, 92],
"result": "valid"
},
{
"tcId": 44,
"comment": "y is maximal after modular reduction and (y + a) % radix is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "d363c402f8af827f56fc149a5e",
"msg": [49, 169, 41],
"ct": [255, 186, 192],
"result": "valid"
},
{
"tcId": 45,
"comment": "y is maximal after modular reduction and (y + a) % radix == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "d363c402f8af827f56fc149a5e",
"msg": [58, 72, 138],
"ct": [0, 227, 211],
"result": "valid"
},
{
"tcId": 46,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "d363c402f8af827f56fc149a5e",
"msg": [118, 142, 107],
"ct": [127, 176, 15],
"result": "valid"
},
{
"tcId": 47,
"comment": "y is maximal after modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "f53833f4d5805d8aa046c2b3267df177",
"tweak": "d363c402f8af827f56fc149a5e",
"msg": [147, 214, 144],
"ct": [254, 85, 209],
"result": "valid"
},
{
"tcId": 48,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "d92d8109dcb611caf2f46b27ffb87450",
"tweak": "0c8c1a946ca8694d",
"msg": [-1, 115, 248],
"ct": [49, 209, 217],
"result": "invalid"
},
{
"tcId": 49,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "d92d8109dcb611caf2f46b27ffb87450",
"tweak": "0c8c1a946ca8694d",
"msg": [215, 115, -1],
"ct": [199, 17, 203],
"result": "invalid"
},
{
"tcId": 50,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "d328660cbffcbfdd92454f3b6ce1f0df",
"tweak": "a88a266ec1fb75e9",
"msg": [256, 17, 57],
"ct": [35, 33, 194],
"result": "invalid"
},
{
"tcId": 51,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "d328660cbffcbfdd92454f3b6ce1f0df",
"tweak": "a88a266ec1fb75e9",
"msg": [217, 17, 256],
"ct": [93, 133, 113],
"result": "invalid"
},
{
"tcId": 52,
"comment": "can't convert negative int to unsigned",
"flags": [
"InvalidPlaintext"
],
"key": "d92d8109dcb611caf2f46b27ffb87450",
"tweak": "0c8c1a946ca8694d",
"msg": [215, -1, 248],
"ct": [],
"result": "invalid"
},
{
"tcId": 53,
"comment": "int too big to convert",
"flags": [
"InvalidPlaintext"
],
"key": "d328660cbffcbfdd92454f3b6ce1f0df",
"tweak": "a88a266ec1fb75e9",
"msg": [217, 256, 57],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 4,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 54,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "5dd5899794ff9b5007b4481aaa97f882",
"tweak": "742f7f8b2ab0dc48",
"msg": [184, 107, 185, 95],
"ct": [8, 23, 81, 223],
"result": "valid"
},
{
"tcId": 55,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [0, 0, 0, 0],
"ct": [160, 38, 30, 224],
"result": "valid"
},
{
"tcId": 56,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [255, 255, 255, 255],
"ct": [216, 54, 49, 168],
"result": "valid"
},
{
"tcId": 57,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [128, 0, 128, 0],
"ct": [166, 221, 14, 146],
"result": "valid"
},
{
"tcId": 58,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [127, 255, 127, 255],
"ct": [57, 39, 82, 99],
"result": "valid"
},
{
"tcId": 59,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [87, 30, 105, 126],
"ct": [215, 86, 99, 189],
"result": "valid"
},
{
"tcId": 60,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [209, 87, 181, 66],
"ct": [105, 244, 13, 82],
"result": "valid"
},
{
"tcId": 61,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [119, 117, 42, 201],
"ct": [147, 58, 9, 182],
"result": "valid"
},
{
"tcId": 62,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [189, 191, 186, 0],
"ct": [6, 183, 175, 47],
"result": "valid"
},
{
"tcId": 63,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [89, 235, 221, 104],
"ct": [202, 238, 1, 238],
"result": "valid"
},
{
"tcId": 64,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [244, 149, 47, 192],
"ct": [22, 119, 130, 73],
"result": "valid"
},
{
"tcId": 65,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [47, 52, 9, 16],
"ct": [11, 243, 193, 43],
"result": "valid"
},
{
"tcId": 66,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [64, 103, 200, 1],
"ct": [132, 59, 221, 92],
"result": "valid"
},
{
"tcId": 67,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [209, 193, 22, 158],
"ct": [0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 68,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [161, 124, 0, 25],
"ct": [255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 69,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [197, 249, 33, 182],
"ct": [128, 0, 128, 0],
"result": "valid"
},
{
"tcId": 70,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "16e4e676552c2fef6f1942adef4c440a",
"tweak": "aba4ba6db9422dc4",
"msg": [37, 36, 90, 196],
"ct": [127, 255, 127, 255],
"result": "valid"
},
{
"tcId": 71,
"comment": "y = 0 and (y + a) % radix**2 == 0 in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "e02faeb76d472c921c32e5b2b2",
"msg": [23, 122, 0, 0],
"ct": [10, 198, 114, 11],
"result": "valid"
},
{
"tcId": 72,
"comment": "y = 0 and a = 1 in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "e02faeb76d472c921c32e5b2b2",
"msg": [93, 250, 0, 1],
"ct": [110, 221, 84, 225],
"result": "valid"
},
{
"tcId": 73,
"comment": "y = 0 and a has large Hamming weight in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "e02faeb76d472c921c32e5b2b2",
"msg": [163, 23, 128, 0],
"ct": [201, 87, 127, 106],
"result": "valid"
},
{
"tcId": 74,
"comment": "y = 0 and (y + a) % radix**2 is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "e02faeb76d472c921c32e5b2b2",
"msg": [155, 248, 255, 255],
"ct": [194, 43, 120, 173],
"result": "valid"
},
{
"tcId": 75,
"comment": "y = 1 and a = 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "a2b66403ba3982ab8003b275f3",
"msg": [64, 62, 68, 244],
"ct": [70, 7, 5, 200],
"result": "valid"
},
{
"tcId": 76,
"comment": "y = 1 and a = 1 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "a2b66403ba3982ab8003b275f3",
"msg": [9, 79, 102, 20],
"ct": [34, 223, 96, 21],
"result": "valid"
},
{
"tcId": 77,
"comment": "y = 1 and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "a2b66403ba3982ab8003b275f3",
"msg": [174, 104, 169, 113],
"ct": [27, 9, 237, 183],
"result": "valid"
},
{
"tcId": 78,
"comment": "y = 1 and (y + a) % radix**2 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "a2b66403ba3982ab8003b275f3",
"msg": [10, 10, 168, 73],
"ct": [150, 75, 200, 142],
"result": "valid"
},
{
"tcId": 79,
"comment": "y = 1 and (y + a) % radix**2 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "a2b66403ba3982ab8003b275f3",
"msg": [113, 53, 228, 151],
"ct": [153, 53, 42, 91],
"result": "valid"
},
{
"tcId": 80,
"comment": "y is maximal and (y + a) % radix**2 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "6afaa98dea5f9da7ca6ac04ae3",
"msg": [75, 9, 225, 211],
"ct": [114, 5, 174, 106],
"result": "valid"
},
{
"tcId": 81,
"comment": "y is maximal and (y + a) % radix**2 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "6afaa98dea5f9da7ca6ac04ae3",
"msg": [8, 86, 254, 244],
"ct": [133, 35, 243, 115],
"result": "valid"
},
{
"tcId": 82,
"comment": "y is maximal and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "6afaa98dea5f9da7ca6ac04ae3",
"msg": [197, 42, 116, 202],
"ct": [211, 253, 219, 244],
"result": "valid"
},
{
"tcId": 83,
"comment": "y is maximal and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "6afaa98dea5f9da7ca6ac04ae3",
"msg": [85, 62, 222, 107],
"ct": [181, 180, 46, 172],
"result": "valid"
},
{
"tcId": 84,
"comment": "y is edge case for modular reduction and a = 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "2d86249a2a9b85c8e27ef3a785",
"msg": [110, 216, 87, 255],
"ct": [204, 132, 201, 184],
"result": "valid"
},
{
"tcId": 85,
"comment": "y is edge case for modular reduction and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "2d86249a2a9b85c8e27ef3a785",
"msg": [12, 168, 128, 167],
"ct": [158, 107, 244, 100],
"result": "valid"
},
{
"tcId": 86,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "2d86249a2a9b85c8e27ef3a785",
"msg": [112, 237, 243, 85],
"ct": [92, 183, 54, 3],
"result": "valid"
},
{
"tcId": 87,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "2d86249a2a9b85c8e27ef3a785",
"msg": [145, 230, 171, 12],
"ct": [20, 248, 55, 134],
"result": "valid"
},
{
"tcId": 88,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "2d86249a2a9b85c8e27ef3a785",
"msg": [254, 244, 232, 81],
"ct": [167, 148, 79, 208],
"result": "valid"
},
{
"tcId": 89,
"comment": "y is edge case for modular reduction and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "2d86249a2a9b85c8e27ef3a785",
"msg": [21, 177, 62, 200],
"ct": [134, 167, 124, 72],
"result": "valid"
},
{
"tcId": 90,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 is maximal in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "76babaa368183618cb3ecf6ff1",
"msg": [0, 135, 168, 113],
"ct": [104, 237, 255, 255],
"result": "valid"
},
{
"tcId": 91,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 == 0 in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "76babaa368183618cb3ecf6ff1",
"msg": [90, 149, 176, 207],
"ct": [104, 237, 0, 0],
"result": "valid"
},
{
"tcId": 92,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "76babaa368183618cb3ecf6ff1",
"msg": [108, 66, 105, 140],
"ct": [104, 237, 127, 255],
"result": "valid"
},
{
"tcId": 93,
"comment": "y is maximal after modular reduction and a is maximal in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "a88f0018e583ed7310f3f5336e592a25",
"tweak": "76babaa368183618cb3ecf6ff1",
"msg": [204, 174, 205, 125],
"ct": [104, 237, 255, 254],
"result": "valid"
},
{
"tcId": 94,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "8a74f1cae832ef8d58c26b49157c187b",
"tweak": "d7b8bdae53aba381",
"msg": [-1, 80, 217, 139],
"ct": [149, 7, 65, 0],
"result": "invalid"
},
{
"tcId": 95,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "8a74f1cae832ef8d58c26b49157c187b",
"tweak": "d7b8bdae53aba381",
"msg": [230, -1, 217, 139],
"ct": [183, 106, 50, 15],
"result": "invalid"
},
{
"tcId": 96,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "8a74f1cae832ef8d58c26b49157c187b",
"tweak": "d7b8bdae53aba381",
"msg": [230, 80, 217, -1],
"ct": [178, 252, 122, 183],
"result": "invalid"
},
{
"tcId": 97,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "6e71af2d944cca31b3d058b75a63262d",
"tweak": "cd2f5a7f50f72090",
"msg": [256, 250, 63, 136],
"ct": [188, 15, 182, 183],
"result": "invalid"
},
{
"tcId": 98,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "6e71af2d944cca31b3d058b75a63262d",
"tweak": "cd2f5a7f50f72090",
"msg": [80, 256, 63, 136],
"ct": [52, 18, 32, 227],
"result": "invalid"
},
{
"tcId": 99,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "6e71af2d944cca31b3d058b75a63262d",
"tweak": "cd2f5a7f50f72090",
"msg": [80, 250, 63, 256],
"ct": [246, 97, 39, 24],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 5,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 100,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "0319599d6c7ca301230ec2b06c681097",
"tweak": "125fd8f86c787e2d",
"msg": [22, 61, 132, 188, 179],
"ct": [168, 157, 72, 53, 113],
"result": "valid"
},
{
"tcId": 101,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [0, 0, 0, 0, 0],
"ct": [193, 119, 104, 165, 221],
"result": "valid"
},
{
"tcId": 102,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [255, 255, 255, 255, 255],
"ct": [12, 89, 21, 148, 224],
"result": "valid"
},
{
"tcId": 103,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [128, 0, 128, 0, 0],
"ct": [45, 108, 181, 63, 253],
"result": "valid"
},
{
"tcId": 104,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [127, 255, 127, 255, 255],
"ct": [36, 117, 198, 230, 136],
"result": "valid"
},
{
"tcId": 105,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [42, 193, 92, 156, 144],
"ct": [5, 241, 188, 164, 135],
"result": "valid"
},
{
"tcId": 106,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [191, 159, 227, 251, 76],
"ct": [59, 9, 222, 211, 238],
"result": "valid"
},
{
"tcId": 107,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [112, 112, 96, 104, 8],
"ct": [129, 185, 14, 188, 176],
"result": "valid"
},
{
"tcId": 108,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [132, 101, 97, 140, 228],
"ct": [210, 246, 216, 225, 48],
"result": "valid"
},
{
"tcId": 109,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [134, 5, 251, 78, 52],
"ct": [2, 51, 246, 248, 140],
"result": "valid"
},
{
"tcId": 110,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [162, 186, 208, 84, 246],
"ct": [6, 28, 68, 67, 69],
"result": "valid"
},
{
"tcId": 111,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [126, 68, 246, 235, 183],
"ct": [91, 250, 236, 188, 173],
"result": "valid"
},
{
"tcId": 112,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [160, 99, 153, 230, 193],
"ct": [22, 23, 179, 47, 164],
"result": "valid"
},
{
"tcId": 113,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [111, 196, 59, 166, 188],
"ct": [0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 114,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [140, 123, 182, 194, 78],
"ct": [255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 115,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [7, 121, 54, 7, 250],
"ct": [128, 0, 128, 0, 0],
"result": "valid"
},
{
"tcId": 116,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "ed3d0c6668748336d74abc8a161dea33",
"tweak": "61a3e1c030481108",
"msg": [48, 239, 22, 7, 222],
"ct": [127, 255, 127, 255, 255],
"result": "valid"
},
{
"tcId": 117,
"comment": "y = 0 and (y + a) % radix**2 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "424102349de1704a5e985dba",
"msg": [0, 0, 142, 50, 52],
"ct": [46, 220, 184, 195, 215],
"result": "valid"
},
{
"tcId": 118,
"comment": "y = 0 and a = 1 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "424102349de1704a5e985dba",
"msg": [0, 1, 142, 50, 52],
"ct": [60, 205, 14, 254, 22],
"result": "valid"
},
{
"tcId": 119,
"comment": "y = 0 and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "424102349de1704a5e985dba",
"msg": [128, 0, 142, 50, 52],
"ct": [7, 195, 53, 89, 96],
"result": "valid"
},
{
"tcId": 120,
"comment": "y = 0 and (y + a) % radix**2 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "424102349de1704a5e985dba",
"msg": [255, 255, 142, 50, 52],
"ct": [237, 201, 251, 122, 185],
"result": "valid"
},
{
"tcId": 121,
"comment": "y = 1 and a = 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "79c1f8bdf0efdb144ec1a8a5",
"msg": [251, 208, 54, 197, 138],
"ct": [43, 61, 243, 61, 242],
"result": "valid"
},
{
"tcId": 122,
"comment": "y = 1 and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "79c1f8bdf0efdb144ec1a8a5",
"msg": [3, 90, 45, 68, 147],
"ct": [216, 35, 11, 53, 18],
"result": "valid"
},
{
"tcId": 123,
"comment": "y = 1 and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "79c1f8bdf0efdb144ec1a8a5",
"msg": [158, 33, 11, 177, 14],
"ct": [159, 23, 118, 73, 181],
"result": "valid"
},
{
"tcId": 124,
"comment": "y = 1 and (y + a) % radix**2 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "79c1f8bdf0efdb144ec1a8a5",
"msg": [23, 9, 35, 94, 234],
"ct": [14, 30, 31, 83, 140],
"result": "valid"
},
{
"tcId": 125,
"comment": "y = 1 and (y + a) % radix**2 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "79c1f8bdf0efdb144ec1a8a5",
"msg": [81, 189, 249, 51, 166],
"ct": [155, 251, 32, 10, 229],
"result": "valid"
},
{
"tcId": 126,
"comment": "y is maximal and (y + a) % radix**2 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "e8949df5c8d6a2ab7d46c678",
"msg": [181, 166, 146, 53, 227],
"ct": [255, 255, 242, 112, 255],
"result": "valid"
},
{
"tcId": 127,
"comment": "y is maximal and (y + a) % radix**2 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "e8949df5c8d6a2ab7d46c678",
"msg": [36, 243, 250, 241, 78],
"ct": [0, 0, 210, 156, 119],
"result": "valid"
},
{
"tcId": 128,
"comment": "y is maximal and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "e8949df5c8d6a2ab7d46c678",
"msg": [207, 51, 223, 81, 255],
"ct": [127, 255, 93, 71, 107],
"result": "valid"
},
{
"tcId": 129,
"comment": "y is maximal and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "e8949df5c8d6a2ab7d46c678",
"msg": [152, 249, 255, 211, 68],
"ct": [255, 254, 124, 244, 39],
"result": "valid"
},
{
"tcId": 130,
"comment": "y is edge case for modular reduction and a = 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "63067e18626aecec7fc63e47",
"msg": [109, 161, 89, 4, 184],
"ct": [123, 102, 130, 34, 169],
"result": "valid"
},
{
"tcId": 131,
"comment": "y is edge case for modular reduction and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "63067e18626aecec7fc63e47",
"msg": [214, 131, 219, 31, 152],
"ct": [49, 76, 64, 212, 175],
"result": "valid"
},
{
"tcId": 132,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "63067e18626aecec7fc63e47",
"msg": [2, 154, 66, 112, 236],
"ct": [169, 119, 218, 35, 166],
"result": "valid"
},
{
"tcId": 133,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "63067e18626aecec7fc63e47",
"msg": [176, 35, 1, 177, 17],
"ct": [238, 13, 240, 114, 248],
"result": "valid"
},
{
"tcId": 134,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "63067e18626aecec7fc63e47",
"msg": [196, 224, 9, 171, 56],
"ct": [74, 236, 141, 183, 127],
"result": "valid"
},
{
"tcId": 135,
"comment": "y is edge case for modular reduction and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "63067e18626aecec7fc63e47",
"msg": [211, 18, 72, 59, 219],
"ct": [111, 189, 178, 103, 137],
"result": "valid"
},
{
"tcId": 136,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "382618428cd0f928a7f1e243",
"msg": [52, 175, 240, 221, 83],
"ct": [42, 16, 178, 4, 37],
"result": "valid"
},
{
"tcId": 137,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "382618428cd0f928a7f1e243",
"msg": [189, 252, 235, 204, 161],
"ct": [124, 40, 29, 253, 168],
"result": "valid"
},
{
"tcId": 138,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "382618428cd0f928a7f1e243",
"msg": [213, 65, 208, 187, 13],
"ct": [107, 29, 93, 50, 119],
"result": "valid"
},
{
"tcId": 139,
"comment": "y is maximal after modular reduction and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "2dcc7a48fa759e58062f64099e2654fb",
"tweak": "382618428cd0f928a7f1e243",
"msg": [222, 144, 100, 203, 206],
"ct": [254, 92, 159, 111, 219],
"result": "valid"
},
{
"tcId": 140,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "8d8a7cd63e6554b77d0345f3d799bfad",
"tweak": "ea7fef1b2f555ad8",
"msg": [-1, 136, 158, 239, 244],
"ct": [96, 107, 8, 202, 134],
"result": "invalid"
},
{
"tcId": 141,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "8d8a7cd63e6554b77d0345f3d799bfad",
"tweak": "ea7fef1b2f555ad8",
"msg": [85, -1, 158, 239, 244],
"ct": [216, 55, 223, 106, 198],
"result": "invalid"
},
{
"tcId": 142,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "8d8a7cd63e6554b77d0345f3d799bfad",
"tweak": "ea7fef1b2f555ad8",
"msg": [85, 136, 158, 239, -1],
"ct": [140, 162, 89, 83, 69],
"result": "invalid"
},
{
"tcId": 143,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "03139bbf3ba2a8407b30ef44038a33fc",
"tweak": "286a3d5745702eda",
"msg": [256, 179, 165, 24, 243],
"ct": [107, 224, 169, 69, 176],
"result": "invalid"
},
{
"tcId": 144,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "03139bbf3ba2a8407b30ef44038a33fc",
"tweak": "286a3d5745702eda",
"msg": [236, 256, 165, 24, 243],
"ct": [243, 58, 134, 237, 19],
"result": "invalid"
},
{
"tcId": 145,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "03139bbf3ba2a8407b30ef44038a33fc",
"tweak": "286a3d5745702eda",
"msg": [236, 179, 165, 24, 256],
"ct": [253, 84, 171, 140, 118],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 6,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 146,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "474bbf2aff5c252419c49a07d50e2bdf",
"tweak": "d64296c362368a3d",
"msg": [143, 111, 239, 199, 216, 40],
"ct": [249, 181, 86, 239, 74, 100],
"result": "valid"
},
{
"tcId": 147,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [0, 0, 0, 0, 0, 0],
"ct": [74, 222, 195, 99, 53, 29],
"result": "valid"
},
{
"tcId": 148,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [255, 255, 255, 255, 255, 255],
"ct": [31, 141, 17, 127, 214, 57],
"result": "valid"
},
{
"tcId": 149,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [128, 0, 0, 128, 0, 0],
"ct": [207, 207, 23, 251, 237, 99],
"result": "valid"
},
{
"tcId": 150,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [127, 255, 255, 127, 255, 255],
"ct": [93, 65, 35, 55, 8, 251],
"result": "valid"
},
{
"tcId": 151,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [86, 112, 50, 105, 67, 32],
"ct": [186, 196, 43, 173, 133, 184],
"result": "valid"
},
{
"tcId": 152,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [197, 43, 186, 37, 113, 116],
"ct": [10, 56, 73, 219, 83, 71],
"result": "valid"
},
{
"tcId": 153,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [57, 196, 120, 60, 95, 18],
"ct": [44, 242, 9, 101, 214, 24],
"result": "valid"
},
{
"tcId": 154,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [55, 155, 129, 84, 32, 167],
"ct": [184, 164, 81, 88, 10, 192],
"result": "valid"
},
{
"tcId": 155,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [54, 200, 86, 95, 32, 100],
"ct": [38, 230, 97, 75, 4, 187],
"result": "valid"
},
{
"tcId": 156,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [65, 40, 158, 162, 201, 123],
"ct": [32, 59, 212, 156, 162, 245],
"result": "valid"
},
{
"tcId": 157,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [150, 177, 227, 79, 49, 140],
"ct": [241, 151, 177, 107, 45, 193],
"result": "valid"
},
{
"tcId": 158,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [130, 174, 26, 146, 44, 56],
"ct": [185, 49, 93, 151, 150, 140],
"result": "valid"
},
{
"tcId": 159,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [111, 11, 219, 246, 255, 243],
"ct": [0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 160,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [254, 60, 157, 90, 238, 84],
"ct": [255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 161,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [31, 204, 70, 70, 56, 64],
"ct": [128, 0, 0, 128, 0, 0],
"result": "valid"
},
{
"tcId": 162,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "26dbd1998c3a046ac3ff11937079c034",
"tweak": "5e551c3daad7e5fa",
"msg": [128, 203, 93, 89, 70, 70],
"ct": [127, 255, 255, 127, 255, 255],
"result": "valid"
},
{
"tcId": 163,
"comment": "y = 0 and (y + a) % radix**3 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "343800f1e2fd4f166a745184",
"msg": [0, 0, 0, 152, 13, 186],
"ct": [38, 209, 19, 27, 86, 0],
"result": "valid"
},
{
"tcId": 164,
"comment": "y = 0 and a = 1 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "343800f1e2fd4f166a745184",
"msg": [0, 0, 1, 152, 13, 186],
"ct": [128, 214, 96, 23, 249, 238],
"result": "valid"
},
{
"tcId": 165,
"comment": "y = 0 and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "343800f1e2fd4f166a745184",
"msg": [128, 0, 0, 152, 13, 186],
"ct": [239, 104, 55, 40, 114, 104],
"result": "valid"
},
{
"tcId": 166,
"comment": "y = 0 and (y + a) % radix**3 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "343800f1e2fd4f166a745184",
"msg": [255, 255, 255, 152, 13, 186],
"ct": [51, 69, 60, 245, 83, 218],
"result": "valid"
},
{
"tcId": 167,
"comment": "y = 1 and a = 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "dc2f7b7fe4fc05c694d7bf81",
"msg": [0, 0, 0, 138, 228, 18],
"ct": [252, 166, 66, 74, 43, 117],
"result": "valid"
},
{
"tcId": 168,
"comment": "y = 1 and a = 1 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "dc2f7b7fe4fc05c694d7bf81",
"msg": [0, 0, 1, 138, 228, 18],
"ct": [246, 4, 44, 199, 138, 107],
"result": "valid"
},
{
"tcId": 169,
"comment": "y = 1 and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "dc2f7b7fe4fc05c694d7bf81",
"msg": [128, 0, 0, 138, 228, 18],
"ct": [221, 96, 117, 121, 227, 101],
"result": "valid"
},
{
"tcId": 170,
"comment": "y = 1 and (y + a) % radix**3 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "dc2f7b7fe4fc05c694d7bf81",
"msg": [255, 255, 254, 138, 228, 18],
"ct": [205, 114, 21, 74, 176, 70],
"result": "valid"
},
{
"tcId": 171,
"comment": "y = 1 and (y + a) % radix**3 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "dc2f7b7fe4fc05c694d7bf81",
"msg": [255, 255, 255, 138, 228, 18],
"ct": [59, 139, 194, 31, 107, 88],
"result": "valid"
},
{
"tcId": 172,
"comment": "y is maximal and (y + a) % radix**3 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "07579130ea877a351213a33d",
"msg": [247, 245, 186, 213, 150, 50],
"ct": [255, 255, 255, 152, 109, 132],
"result": "valid"
},
{
"tcId": 173,
"comment": "y is maximal and (y + a) % radix**3 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "07579130ea877a351213a33d",
"msg": [182, 247, 16, 199, 144, 37],
"ct": [0, 0, 0, 253, 100, 2],
"result": "valid"
},
{
"tcId": 174,
"comment": "y is maximal and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "07579130ea877a351213a33d",
"msg": [1, 99, 59, 253, 131, 149],
"ct": [127, 255, 255, 128, 144, 88],
"result": "valid"
},
{
"tcId": 175,
"comment": "y is maximal and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "07579130ea877a351213a33d",
"msg": [199, 140, 153, 215, 132, 99],
"ct": [255, 255, 254, 62, 154, 134],
"result": "valid"
},
{
"tcId": 176,
"comment": "y is edge case for modular reduction and a = 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "c52a86a9914239dd341f9a2a",
"msg": [84, 199, 191, 128, 26, 146],
"ct": [202, 192, 217, 248, 14, 66],
"result": "valid"
},
{
"tcId": 177,
"comment": "y is edge case for modular reduction and a = 1 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "c52a86a9914239dd341f9a2a",
"msg": [187, 85, 216, 129, 63, 176],
"ct": [109, 177, 0, 169, 239, 86],
"result": "valid"
},
{
"tcId": 178,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "c52a86a9914239dd341f9a2a",
"msg": [242, 9, 85, 34, 46, 132],
"ct": [153, 45, 103, 32, 64, 132],
"result": "valid"
},
{
"tcId": 179,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "c52a86a9914239dd341f9a2a",
"msg": [160, 249, 216, 201, 236, 14],
"ct": [86, 47, 189, 160, 250, 137],
"result": "valid"
},
{
"tcId": 180,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "c52a86a9914239dd341f9a2a",
"msg": [215, 12, 129, 2, 138, 121],
"ct": [10, 54, 32, 49, 203, 83],
"result": "valid"
},
{
"tcId": 181,
"comment": "y is edge case for modular reduction and a is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "c52a86a9914239dd341f9a2a",
"msg": [132, 176, 203, 56, 212, 57],
"ct": [164, 32, 209, 50, 117, 166],
"result": "valid"
},
{
"tcId": 182,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "2d8b03d8b14ab958418a41bb",
"msg": [64, 3, 173, 0, 0, 0],
"ct": [161, 109, 63, 245, 202, 31],
"result": "valid"
},
{
"tcId": 183,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 == 0 in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "2d8b03d8b14ab958418a41bb",
"msg": [196, 135, 211, 0, 0, 1],
"ct": [155, 29, 218, 47, 114, 114],
"result": "valid"
},
{
"tcId": 184,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "2d8b03d8b14ab958418a41bb",
"msg": [171, 20, 96, 128, 0, 0],
"ct": [72, 218, 194, 8, 90, 101],
"result": "valid"
},
{
"tcId": 185,
"comment": "y is maximal after modular reduction and a is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "6a24278db37f29768c4263256ffbd956",
"tweak": "2d8b03d8b14ab958418a41bb",
"msg": [42, 5, 199, 255, 255, 255],
"ct": [113, 251, 195, 250, 24, 183],
"result": "valid"
},
{
"tcId": 186,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ed4561abc903a9e722ddb8aa94cc662d",
"tweak": "975f6d7701e004f7",
"msg": [-1, 158, 238, 200, 1, 252],
"ct": [98, 152, 56, 156, 199, 9],
"result": "invalid"
},
{
"tcId": 187,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ed4561abc903a9e722ddb8aa94cc662d",
"tweak": "975f6d7701e004f7",
"msg": [37, 158, -1, 200, 1, 252],
"ct": [72, 47, 34, 74, 36, 0],
"result": "invalid"
},
{
"tcId": 188,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ed4561abc903a9e722ddb8aa94cc662d",
"tweak": "975f6d7701e004f7",
"msg": [37, 158, 238, 200, 1, -1],
"ct": [28, 201, 48, 130, 247, 15],
"result": "invalid"
},
{
"tcId": 189,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "52b7cf68bfa0ad8bc5ddfda56ba1549a",
"tweak": "c69b8acd337a7601",
"msg": [256, 119, 16, 148, 19, 66],
"ct": [118, 11, 3, 90, 143, 131],
"result": "invalid"
},
{
"tcId": 190,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "52b7cf68bfa0ad8bc5ddfda56ba1549a",
"tweak": "c69b8acd337a7601",
"msg": [180, 119, 256, 148, 19, 66],
"ct": [98, 137, 134, 229, 136, 137],
"result": "invalid"
},
{
"tcId": 191,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "52b7cf68bfa0ad8bc5ddfda56ba1549a",
"tweak": "c69b8acd337a7601",
"msg": [180, 119, 16, 148, 19, 256],
"ct": [112, 8, 1, 166, 149, 41],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 7,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 192,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "20b2c30d44c72c32a4564541332f45c3",
"tweak": "3de9de4b8736f463",
"msg": [137, 202, 95, 139, 217, 47, 123],
"ct": [200, 160, 168, 109, 135, 246, 15],
"result": "valid"
},
{
"tcId": 193,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [0, 0, 0, 0, 0, 0, 0],
"ct": [254, 197, 118, 245, 255, 215, 87],
"result": "valid"
},
{
"tcId": 194,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [255, 255, 255, 255, 255, 255, 255],
"ct": [80, 7, 197, 32, 244, 73, 18],
"result": "valid"
},
{
"tcId": 195,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [128, 0, 0, 128, 0, 0, 0],
"ct": [48, 69, 159, 200, 79, 3, 188],
"result": "valid"
},
{
"tcId": 196,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [127, 255, 255, 127, 255, 255, 255],
"ct": [147, 151, 54, 155, 146, 50, 238],
"result": "valid"
},
{
"tcId": 197,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [13, 89, 45, 158, 106, 135, 148],
"ct": [180, 229, 223, 46, 29, 88, 243],
"result": "valid"
},
{
"tcId": 198,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [151, 54, 196, 79, 89, 23, 107],
"ct": [191, 172, 138, 20, 178, 27, 146],
"result": "valid"
},
{
"tcId": 199,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [192, 108, 209, 170, 76, 175, 106],
"ct": [254, 24, 55, 86, 95, 109, 197],
"result": "valid"
},
{
"tcId": 200,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [29, 227, 231, 1, 92, 16, 100],
"ct": [226, 121, 5, 116, 169, 85, 79],
"result": "valid"
},
{
"tcId": 201,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [146, 131, 31, 74, 203, 125, 78],
"ct": [232, 203, 224, 177, 229, 39, 231],
"result": "valid"
},
{
"tcId": 202,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [185, 40, 11, 200, 212, 69, 122],
"ct": [196, 31, 72, 51, 2, 202, 164],
"result": "valid"
},
{
"tcId": 203,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [132, 133, 194, 62, 3, 21, 244],
"ct": [43, 176, 173, 164, 214, 177, 99],
"result": "valid"
},
{
"tcId": 204,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [141, 90, 207, 58, 49, 193, 156],
"ct": [73, 201, 198, 136, 2, 165, 52],
"result": "valid"
},
{
"tcId": 205,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [180, 20, 154, 105, 119, 65, 117],
"ct": [0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 206,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [58, 202, 119, 95, 103, 179, 10],
"ct": [255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 207,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [186, 131, 56, 2, 53, 174, 232],
"ct": [128, 0, 0, 128, 0, 0, 0],
"result": "valid"
},
{
"tcId": 208,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "53b43d40c44c62982d5123e5716d25db",
"tweak": "c34af5583d26dacc",
"msg": [140, 93, 75, 31, 103, 76, 180],
"ct": [127, 255, 255, 127, 255, 255, 255],
"result": "valid"
},
{
"tcId": 209,
"comment": "y = 0 and (y + a) % radix**3 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "47dd5cdc116c97b03fe965",
"msg": [33, 64, 108, 11, 203, 180, 167],
"ct": [41, 139, 107, 89, 232, 66, 41],
"result": "valid"
},
{
"tcId": 210,
"comment": "y = 0 and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "47dd5cdc116c97b03fe965",
"msg": [221, 147, 203, 114, 122, 64, 79],
"ct": [62, 212, 102, 43, 120, 77, 236],
"result": "valid"
},
{
"tcId": 211,
"comment": "y = 0 and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "47dd5cdc116c97b03fe965",
"msg": [27, 157, 213, 71, 192, 215, 56],
"ct": [74, 165, 90, 4, 197, 53, 72],
"result": "valid"
},
{
"tcId": 212,
"comment": "y = 0 and (y + a) % radix**3 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "47dd5cdc116c97b03fe965",
"msg": [17, 236, 145, 110, 90, 254, 52],
"ct": [193, 76, 248, 130, 14, 143, 182],
"result": "valid"
},
{
"tcId": 213,
"comment": "y = 1 and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "e6ec11a0a4842578a77324",
"msg": [123, 197, 222, 36, 143, 92, 255],
"ct": [0, 0, 1, 23, 36, 236, 27],
"result": "valid"
},
{
"tcId": 214,
"comment": "y = 1 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "e6ec11a0a4842578a77324",
"msg": [142, 122, 161, 93, 218, 212, 20],
"ct": [0, 0, 2, 68, 74, 233, 232],
"result": "valid"
},
{
"tcId": 215,
"comment": "y = 1 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "e6ec11a0a4842578a77324",
"msg": [120, 229, 26, 33, 99, 88, 96],
"ct": [128, 0, 1, 153, 35, 194, 19],
"result": "valid"
},
{
"tcId": 216,
"comment": "y = 1 and (y + a) % radix**3 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "e6ec11a0a4842578a77324",
"msg": [145, 159, 37, 114, 98, 37, 186],
"ct": [255, 255, 255, 65, 5, 209, 21],
"result": "valid"
},
{
"tcId": 217,
"comment": "y = 1 and (y + a) % radix**3 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "e6ec11a0a4842578a77324",
"msg": [149, 177, 94, 7, 110, 23, 78],
"ct": [0, 0, 0, 237, 11, 117, 226],
"result": "valid"
},
{
"tcId": 218,
"comment": "y is maximal and (y + a) % radix**3 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "ca93d47fd9f78e7833e316",
"msg": [52, 114, 190, 14, 89, 201, 157],
"ct": [215, 217, 58, 158, 212, 133, 56],
"result": "valid"
},
{
"tcId": 219,
"comment": "y is maximal and (y + a) % radix**3 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "ca93d47fd9f78e7833e316",
"msg": [90, 173, 1, 90, 225, 62, 14],
"ct": [186, 249, 242, 224, 92, 140, 208],
"result": "valid"
},
{
"tcId": 220,
"comment": "y is maximal and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "ca93d47fd9f78e7833e316",
"msg": [177, 228, 181, 233, 8, 98, 69],
"ct": [14, 92, 136, 59, 98, 81, 4],
"result": "valid"
},
{
"tcId": 221,
"comment": "y is maximal and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "ca93d47fd9f78e7833e316",
"msg": [241, 27, 182, 106, 114, 170, 72],
"ct": [5, 165, 102, 136, 80, 5, 31],
"result": "valid"
},
{
"tcId": 222,
"comment": "y is edge case for modular reduction and a = 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "becdc1e5b13b9694d5f4e6",
"msg": [0, 0, 0, 231, 61, 110, 223],
"ct": [1, 55, 65, 116, 104, 244, 203],
"result": "valid"
},
{
"tcId": 223,
"comment": "y is edge case for modular reduction and a = 1 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "becdc1e5b13b9694d5f4e6",
"msg": [0, 0, 1, 231, 61, 110, 223],
"ct": [24, 129, 200, 254, 214, 2, 183],
"result": "valid"
},
{
"tcId": 224,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "becdc1e5b13b9694d5f4e6",
"msg": [0, 0, 255, 231, 61, 110, 223],
"ct": [121, 87, 157, 36, 176, 58, 52],
"result": "valid"
},
{
"tcId": 225,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "becdc1e5b13b9694d5f4e6",
"msg": [0, 1, 0, 231, 61, 110, 223],
"ct": [197, 156, 16, 158, 152, 234, 1],
"result": "valid"
},
{
"tcId": 226,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "becdc1e5b13b9694d5f4e6",
"msg": [128, 0, 0, 231, 61, 110, 223],
"ct": [21, 7, 220, 75, 146, 86, 219],
"result": "valid"
},
{
"tcId": 227,
"comment": "y is edge case for modular reduction and a is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "becdc1e5b13b9694d5f4e6",
"msg": [255, 255, 255, 231, 61, 110, 223],
"ct": [250, 148, 222, 208, 216, 148, 67],
"result": "valid"
},
{
"tcId": 228,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "41300dbb385d1394f2a12e",
"msg": [249, 236, 52, 26, 230, 120, 67],
"ct": [255, 255, 255, 137, 34, 19, 147],
"result": "valid"
},
{
"tcId": 229,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "41300dbb385d1394f2a12e",
"msg": [153, 245, 127, 162, 229, 79, 146],
"ct": [0, 0, 0, 174, 230, 7, 51],
"result": "valid"
},
{
"tcId": 230,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "41300dbb385d1394f2a12e",
"msg": [231, 252, 143, 11, 179, 3, 247],
"ct": [127, 255, 255, 65, 200, 87, 154],
"result": "valid"
},
{
"tcId": 231,
"comment": "y is maximal after modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "ad837c09903b33e60eecfa1d04308e32",
"tweak": "41300dbb385d1394f2a12e",
"msg": [99, 109, 149, 162, 102, 234, 202],
"ct": [255, 255, 254, 218, 105, 102, 139],
"result": "valid"
},
{
"tcId": 232,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ea35a8f24783be82abd93cc74e4944cb",
"tweak": "a704f808982bb10f",
"msg": [-1, 80, 245, 176, 102, 132, 173],
"ct": [123, 15, 80, 28, 137, 157, 1],
"result": "invalid"
},
{
"tcId": 233,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ea35a8f24783be82abd93cc74e4944cb",
"tweak": "a704f808982bb10f",
"msg": [18, 80, -1, 176, 102, 132, 173],
"ct": [76, 208, 183, 7, 106, 240, 154],
"result": "invalid"
},
{
"tcId": 234,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ea35a8f24783be82abd93cc74e4944cb",
"tweak": "a704f808982bb10f",
"msg": [18, 80, 245, 176, 102, 132, -1],
"ct": [228, 95, 254, 154, 162, 116, 138],
"result": "invalid"
},
{
"tcId": 235,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "222eb460ea443cd84c118ad00e12030b",
"tweak": "4507a07f5859d00f",
"msg": [256, 142, 134, 39, 4, 103, 160],
"ct": [76, 177, 103, 208, 222, 44, 56],
"result": "invalid"
},
{
"tcId": 236,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "222eb460ea443cd84c118ad00e12030b",
"tweak": "4507a07f5859d00f",
"msg": [65, 142, 256, 39, 4, 103, 160],
"ct": [160, 254, 0, 194, 225, 152, 216],
"result": "invalid"
},
{
"tcId": 237,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "222eb460ea443cd84c118ad00e12030b",
"tweak": "4507a07f5859d00f",
"msg": [65, 142, 134, 39, 4, 103, 256],
"ct": [139, 173, 247, 187, 132, 106, 74],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 8,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 238,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "60d83b209822c0d9b7033dca86444fa1",
"tweak": "23ef05b155a108c4",
"msg": [46, 94, 206, 131, 61, 5, 68, 138],
"ct": [87, 0, 187, 47, 81, 172, 52, 187],
"result": "valid"
},
{
"tcId": 239,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [0, 0, 0, 0, 0, 0, 0, 0],
"ct": [129, 149, 113, 156, 224, 61, 139, 197],
"result": "valid"
},
{
"tcId": 240,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [255, 255, 255, 255, 255, 255, 255, 255],
"ct": [105, 50, 201, 235, 185, 177, 62, 139],
"result": "valid"
},
{
"tcId": 241,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [128, 0, 0, 0, 128, 0, 0, 0],
"ct": [113, 166, 170, 146, 5, 209, 79, 225],
"result": "valid"
},
{
"tcId": 242,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [127, 255, 255, 255, 127, 255, 255, 255],
"ct": [112, 76, 85, 67, 222, 190, 15, 49],
"result": "valid"
},
{
"tcId": 243,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [125, 128, 42, 105, 63, 7, 81, 50],
"ct": [98, 41, 21, 73, 34, 96, 241, 237],
"result": "valid"
},
{
"tcId": 244,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [177, 200, 8, 31, 232, 166, 154, 177],
"ct": [72, 146, 204, 194, 183, 15, 211, 101],
"result": "valid"
},
{
"tcId": 245,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [6, 9, 154, 246, 204, 153, 243, 88],
"ct": [72, 165, 153, 87, 133, 21, 82, 223],
"result": "valid"
},
{
"tcId": 246,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [209, 128, 250, 78, 41, 229, 135, 239],
"ct": [58, 89, 70, 78, 226, 222, 130, 46],
"result": "valid"
},
{
"tcId": 247,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [244, 58, 30, 7, 195, 141, 118, 164],
"ct": [195, 154, 71, 29, 90, 36, 216, 88],
"result": "valid"
},
{
"tcId": 248,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [215, 248, 17, 233, 59, 122, 180, 132],
"ct": [252, 108, 74, 111, 39, 39, 100, 67],
"result": "valid"
},
{
"tcId": 249,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [158, 248, 80, 223, 252, 240, 245, 244],
"ct": [24, 215, 11, 20, 103, 72, 196, 58],
"result": "valid"
},
{
"tcId": 250,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [108, 40, 92, 238, 123, 39, 92, 250],
"ct": [54, 150, 103, 3, 202, 94, 67, 4],
"result": "valid"
},
{
"tcId": 251,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [104, 87, 42, 105, 61, 123, 170, 115],
"ct": [0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 252,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [114, 20, 63, 53, 45, 4, 159, 189],
"ct": [255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 253,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [139, 158, 83, 46, 199, 52, 114, 195],
"ct": [128, 0, 0, 0, 128, 0, 0, 0],
"result": "valid"
},
{
"tcId": 254,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3bfee9ab1eadaa8cff5b05281fcb0140",
"tweak": "2024d5e34b3ba6a0",
"msg": [228, 219, 237, 15, 82, 122, 68, 175],
"ct": [127, 255, 255, 255, 127, 255, 255, 255],
"result": "valid"
},
{
"tcId": 255,
"comment": "y = 0 and (y + a) % radix**4 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "173a14714a81d0fd5ff9fb",
"msg": [253, 163, 52, 193, 142, 195, 209, 166],
"ct": [129, 124, 99, 93, 115, 192, 99, 89],
"result": "valid"
},
{
"tcId": 256,
"comment": "y = 0 and a = 1 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "173a14714a81d0fd5ff9fb",
"msg": [249, 163, 216, 214, 255, 188, 179, 218],
"ct": [111, 178, 95, 73, 28, 149, 163, 8],
"result": "valid"
},
{
"tcId": 257,
"comment": "y = 0 and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "173a14714a81d0fd5ff9fb",
"msg": [71, 5, 217, 177, 150, 171, 215, 198],
"ct": [160, 159, 127, 66, 118, 145, 117, 112],
"result": "valid"
},
{
"tcId": 258,
"comment": "y = 0 and (y + a) % radix**4 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "173a14714a81d0fd5ff9fb",
"msg": [168, 189, 232, 5, 47, 28, 108, 204],
"ct": [136, 61, 38, 164, 117, 159, 16, 34],
"result": "valid"
},
{
"tcId": 259,
"comment": "y = 1 and a = 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "e11039e9cc9671e8ee2304",
"msg": [148, 210, 253, 56, 242, 216, 69, 111],
"ct": [10, 79, 51, 2, 45, 54, 251, 122],
"result": "valid"
},
{
"tcId": 260,
"comment": "y = 1 and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "e11039e9cc9671e8ee2304",
"msg": [54, 111, 126, 140, 62, 148, 28, 189],
"ct": [11, 135, 186, 166, 95, 182, 1, 188],
"result": "valid"
},
{
"tcId": 261,
"comment": "y = 1 and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "e11039e9cc9671e8ee2304",
"msg": [41, 219, 207, 109, 73, 106, 45, 251],
"ct": [125, 117, 60, 13, 23, 150, 52, 234],
"result": "valid"
},
{
"tcId": 262,
"comment": "y = 1 and (y + a) % radix**4 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "e11039e9cc9671e8ee2304",
"msg": [76, 66, 82, 78, 249, 76, 98, 37],
"ct": [100, 62, 72, 213, 147, 184, 35, 233],
"result": "valid"
},
{
"tcId": 263,
"comment": "y = 1 and (y + a) % radix**4 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "e11039e9cc9671e8ee2304",
"msg": [126, 247, 79, 235, 48, 17, 76, 184],
"ct": [93, 211, 195, 34, 253, 95, 208, 178],
"result": "valid"
},
{
"tcId": 264,
"comment": "y is maximal and (y + a) % radix**4 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "5ec4afa1cdb68f4043d31d",
"msg": [203, 37, 182, 31, 200, 167, 160, 88],
"ct": [255, 255, 255, 255, 121, 88, 187, 121],
"result": "valid"
},
{
"tcId": 265,
"comment": "y is maximal and (y + a) % radix**4 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "5ec4afa1cdb68f4043d31d",
"msg": [60, 107, 97, 163, 160, 150, 99, 102],
"ct": [0, 0, 0, 0, 251, 27, 154, 59],
"result": "valid"
},
{
"tcId": 266,
"comment": "y is maximal and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "5ec4afa1cdb68f4043d31d",
"msg": [57, 123, 145, 112, 81, 120, 139, 61],
"ct": [127, 255, 255, 255, 245, 204, 252, 144],
"result": "valid"
},
{
"tcId": 267,
"comment": "y is maximal and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "5ec4afa1cdb68f4043d31d",
"msg": [55, 92, 67, 206, 247, 190, 38, 251],
"ct": [255, 255, 255, 254, 30, 251, 122, 129],
"result": "valid"
},
{
"tcId": 268,
"comment": "y is edge case for modular reduction and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "4a470798ef708bf7b74fa1",
"msg": [196, 5, 175, 186, 251, 126, 20, 224],
"ct": [255, 255, 255, 0, 117, 71, 222, 129],
"result": "valid"
},
{
"tcId": 269,
"comment": "y is edge case for modular reduction and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "4a470798ef708bf7b74fa1",
"msg": [190, 150, 107, 136, 245, 249, 3, 233],
"ct": [255, 255, 255, 1, 253, 45, 174, 242],
"result": "valid"
},
{
"tcId": 270,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "4a470798ef708bf7b74fa1",
"msg": [45, 147, 61, 25, 133, 38, 104, 175],
"ct": [255, 255, 255, 255, 200, 223, 212, 74],
"result": "valid"
},
{
"tcId": 271,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "4a470798ef708bf7b74fa1",
"msg": [219, 78, 174, 212, 123, 205, 184, 41],
"ct": [0, 0, 0, 0, 181, 0, 81, 48],
"result": "valid"
},
{
"tcId": 272,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "4a470798ef708bf7b74fa1",
"msg": [241, 74, 41, 33, 121, 10, 29, 227],
"ct": [127, 255, 255, 0, 171, 117, 45, 18],
"result": "valid"
},
{
"tcId": 273,
"comment": "y is edge case for modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "4a470798ef708bf7b74fa1",
"msg": [145, 87, 148, 141, 94, 237, 83, 202],
"ct": [255, 255, 254, 255, 248, 34, 77, 103],
"result": "valid"
},
{
"tcId": 274,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 is maximal in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "a65ee685c7fffb3334fb90",
"msg": [159, 135, 122, 160, 87, 170, 93, 8],
"ct": [58, 173, 229, 73, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 275,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 == 0 in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "a65ee685c7fffb3334fb90",
"msg": [76, 89, 250, 176, 155, 134, 88, 56],
"ct": [58, 173, 229, 73, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 276,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "a65ee685c7fffb3334fb90",
"msg": [98, 224, 149, 106, 173, 159, 217, 147],
"ct": [58, 173, 229, 73, 127, 255, 255, 255],
"result": "valid"
},
{
"tcId": 277,
"comment": "y is maximal after modular reduction and a is maximal in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "475b7573760904fa57ad2cb88ea52f32",
"tweak": "a65ee685c7fffb3334fb90",
"msg": [20, 110, 122, 110, 75, 57, 32, 171],
"ct": [58, 173, 229, 73, 255, 255, 255, 254],
"result": "valid"
},
{
"tcId": 278,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ebc261665fab01ae2bfe156e54de3006",
"tweak": "5080dd547abdeddd",
"msg": [-1, 77, 133, 94, 202, 73, 32, 26],
"ct": [33, 66, 11, 129, 110, 78, 244, 126],
"result": "invalid"
},
{
"tcId": 279,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ebc261665fab01ae2bfe156e54de3006",
"tweak": "5080dd547abdeddd",
"msg": [5, 77, -1, 94, 202, 73, 32, 26],
"ct": [36, 11, 64, 228, 243, 131, 80, 197],
"result": "invalid"
},
{
"tcId": 280,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ebc261665fab01ae2bfe156e54de3006",
"tweak": "5080dd547abdeddd",
"msg": [5, 77, 133, 94, 202, 73, 32, -1],
"ct": [42, 25, 123, 255, 212, 225, 5, 158],
"result": "invalid"
},
{
"tcId": 281,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "18517c2b9634e36b498fa3f470acb6f2",
"tweak": "0e573f5c0129feb4",
"msg": [256, 101, 187, 166, 53, 200, 68, 20],
"ct": [6, 161, 128, 247, 84, 118, 232, 56],
"result": "invalid"
},
{
"tcId": 282,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "18517c2b9634e36b498fa3f470acb6f2",
"tweak": "0e573f5c0129feb4",
"msg": [53, 101, 256, 166, 53, 200, 68, 20],
"ct": [99, 78, 29, 175, 215, 250, 252, 4],
"result": "invalid"
},
{
"tcId": 283,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "18517c2b9634e36b498fa3f470acb6f2",
"tweak": "0e573f5c0129feb4",
"msg": [53, 101, 187, 166, 53, 200, 68, 256],
"ct": [183, 246, 30, 15, 232, 185, 223, 78],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 9,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 284,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "2215b9528000f5f306fcdfe2969c6785",
"tweak": "0539d85c7b076285",
"msg": [175, 97, 141, 205, 239, 137, 63, 86, 141],
"ct": [41, 215, 164, 47, 190, 119, 196, 50, 53],
"result": "valid"
},
{
"tcId": 285,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [3, 159, 158, 255, 141, 32, 36, 49, 238],
"result": "valid"
},
{
"tcId": 286,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [88, 63, 27, 5, 115, 165, 76, 111, 12],
"result": "valid"
},
{
"tcId": 287,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [128, 0, 0, 0, 128, 0, 0, 0, 0],
"ct": [198, 34, 25, 227, 163, 13, 131, 17, 204],
"result": "valid"
},
{
"tcId": 288,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [127, 255, 255, 255, 127, 255, 255, 255, 255],
"ct": [216, 47, 218, 112, 46, 19, 154, 33, 182],
"result": "valid"
},
{
"tcId": 289,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [221, 155, 251, 28, 106, 85, 190, 128, 181],
"ct": [93, 39, 46, 76, 43, 166, 174, 243, 173],
"result": "valid"
},
{
"tcId": 290,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [225, 106, 50, 194, 40, 147, 242, 1, 229],
"ct": [65, 166, 225, 90, 136, 179, 160, 119, 88],
"result": "valid"
},
{
"tcId": 291,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [13, 171, 53, 167, 197, 52, 120, 244, 0],
"ct": [37, 231, 105, 110, 148, 94, 163, 170, 239],
"result": "valid"
},
{
"tcId": 292,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [50, 235, 77, 149, 27, 227, 239, 251, 121],
"ct": [249, 232, 111, 236, 12, 103, 78, 216, 3],
"result": "valid"
},
{
"tcId": 293,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [245, 183, 161, 238, 189, 35, 105, 43, 51],
"ct": [115, 98, 40, 137, 92, 96, 201, 26, 45],
"result": "valid"
},
{
"tcId": 294,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [186, 40, 111, 200, 113, 223, 122, 73, 5],
"ct": [164, 220, 19, 254, 59, 2, 8, 187, 45],
"result": "valid"
},
{
"tcId": 295,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [121, 11, 184, 11, 241, 138, 125, 74, 176],
"ct": [163, 94, 52, 42, 106, 28, 150, 149, 148],
"result": "valid"
},
{
"tcId": 296,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [251, 56, 35, 86, 246, 125, 117, 176, 138],
"ct": [233, 66, 241, 4, 87, 4, 120, 195, 167],
"result": "valid"
},
{
"tcId": 297,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [153, 67, 83, 246, 160, 123, 129, 37, 230],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 298,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [9, 73, 191, 84, 153, 107, 186, 248, 202],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 299,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [252, 196, 106, 78, 236, 241, 82, 116, 163],
"ct": [128, 0, 0, 0, 128, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 300,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "4c00ade3e32b12866bb56e736e18eaf4",
"tweak": "3f0bf1e88240178e",
"msg": [217, 206, 161, 141, 90, 62, 134, 104, 64],
"ct": [127, 255, 255, 255, 127, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 301,
"comment": "y = 0 and (y + a) % radix**4 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "b427db712dcd20ea1f32",
"msg": [211, 194, 55, 215, 20, 92, 64, 108, 43],
"ct": [70, 147, 68, 129, 61, 66, 221, 84, 149],
"result": "valid"
},
{
"tcId": 302,
"comment": "y = 0 and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "b427db712dcd20ea1f32",
"msg": [98, 250, 142, 68, 253, 153, 125, 11, 174],
"ct": [246, 41, 220, 204, 45, 24, 61, 245, 53],
"result": "valid"
},
{
"tcId": 303,
"comment": "y = 0 and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "b427db712dcd20ea1f32",
"msg": [56, 230, 110, 78, 252, 233, 146, 234, 59],
"ct": [218, 146, 154, 63, 178, 144, 198, 177, 71],
"result": "valid"
},
{
"tcId": 304,
"comment": "y = 0 and (y + a) % radix**4 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "b427db712dcd20ea1f32",
"msg": [242, 159, 18, 27, 121, 54, 202, 97, 175],
"ct": [176, 121, 142, 88, 195, 42, 155, 11, 189],
"result": "valid"
},
{
"tcId": 305,
"comment": "y = 1 and a = 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "793e837028cf6e9e3682",
"msg": [63, 10, 145, 138, 44, 19, 178, 249, 72],
"ct": [84, 7, 13, 141, 150, 218, 90, 229, 32],
"result": "valid"
},
{
"tcId": 306,
"comment": "y = 1 and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "793e837028cf6e9e3682",
"msg": [230, 11, 75, 190, 172, 231, 166, 193, 84],
"ct": [156, 206, 87, 32, 172, 41, 59, 122, 233],
"result": "valid"
},
{
"tcId": 307,
"comment": "y = 1 and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "793e837028cf6e9e3682",
"msg": [29, 125, 18, 60, 60, 201, 172, 83, 204],
"ct": [68, 12, 215, 225, 167, 85, 52, 105, 90],
"result": "valid"
},
{
"tcId": 308,
"comment": "y = 1 and (y + a) % radix**4 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "793e837028cf6e9e3682",
"msg": [191, 155, 79, 240, 94, 219, 106, 230, 121],
"ct": [111, 54, 36, 75, 92, 91, 228, 220, 15],
"result": "valid"
},
{
"tcId": 309,
"comment": "y = 1 and (y + a) % radix**4 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "793e837028cf6e9e3682",
"msg": [139, 246, 86, 2, 85, 239, 130, 91, 6],
"ct": [137, 32, 170, 29, 163, 48, 243, 240, 11],
"result": "valid"
},
{
"tcId": 310,
"comment": "y is maximal and (y + a) % radix**4 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "f5febcc6ad4d7b274775",
"msg": [148, 49, 175, 52, 83, 157, 116, 47, 46],
"ct": [255, 255, 255, 255, 169, 127, 150, 226, 123],
"result": "valid"
},
{
"tcId": 311,
"comment": "y is maximal and (y + a) % radix**4 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "f5febcc6ad4d7b274775",
"msg": [2, 85, 208, 65, 113, 72, 139, 181, 236],
"ct": [0, 0, 0, 0, 130, 227, 32, 96, 159],
"result": "valid"
},
{
"tcId": 312,
"comment": "y is maximal and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "f5febcc6ad4d7b274775",
"msg": [154, 236, 89, 147, 233, 21, 132, 134, 245],
"ct": [127, 255, 255, 255, 217, 86, 37, 142, 248],
"result": "valid"
},
{
"tcId": 313,
"comment": "y is maximal and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "f5febcc6ad4d7b274775",
"msg": [206, 249, 113, 66, 174, 155, 42, 166, 207],
"ct": [255, 255, 255, 254, 92, 227, 30, 96, 217],
"result": "valid"
},
{
"tcId": 314,
"comment": "y is edge case for modular reduction and a = 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "055748aa9afece89944b",
"msg": [137, 163, 142, 25, 61, 162, 173, 93, 186],
"ct": [195, 177, 16, 165, 73, 96, 9, 136, 64],
"result": "valid"
},
{
"tcId": 315,
"comment": "y is edge case for modular reduction and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "055748aa9afece89944b",
"msg": [201, 196, 100, 124, 176, 67, 238, 46, 123],
"ct": [90, 72, 184, 59, 67, 162, 155, 40, 88],
"result": "valid"
},
{
"tcId": 316,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "055748aa9afece89944b",
"msg": [249, 115, 8, 107, 101, 137, 44, 51, 68],
"ct": [140, 40, 63, 101, 212, 119, 222, 125, 114],
"result": "valid"
},
{
"tcId": 317,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "055748aa9afece89944b",
"msg": [88, 91, 120, 24, 227, 65, 208, 195, 177],
"ct": [92, 194, 42, 107, 208, 190, 148, 199, 112],
"result": "valid"
},
{
"tcId": 318,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "055748aa9afece89944b",
"msg": [2, 248, 116, 77, 81, 99, 250, 179, 177],
"ct": [185, 47, 78, 101, 42, 154, 198, 170, 138],
"result": "valid"
},
{
"tcId": 319,
"comment": "y is edge case for modular reduction and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "055748aa9afece89944b",
"msg": [142, 216, 195, 48, 129, 19, 26, 3, 170],
"ct": [253, 21, 44, 76, 240, 45, 198, 241, 211],
"result": "valid"
},
{
"tcId": 320,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "130c8ba958d937aa9c83",
"msg": [63, 11, 254, 60, 211, 220, 229, 132, 174],
"ct": [39, 200, 109, 59, 241, 8, 136, 96, 203],
"result": "valid"
},
{
"tcId": 321,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "130c8ba958d937aa9c83",
"msg": [9, 21, 253, 236, 39, 159, 12, 124, 49],
"ct": [137, 118, 155, 245, 123, 148, 3, 190, 81],
"result": "valid"
},
{
"tcId": 322,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "130c8ba958d937aa9c83",
"msg": [197, 243, 228, 44, 78, 232, 7, 58, 11],
"ct": [208, 141, 75, 231, 124, 79, 228, 5, 97],
"result": "valid"
},
{
"tcId": 323,
"comment": "y is maximal after modular reduction and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "36e6ec14d7abaf2fa03904af42244b5f",
"tweak": "130c8ba958d937aa9c83",
"msg": [188, 80, 40, 95, 198, 156, 52, 167, 181],
"ct": [143, 239, 119, 37, 214, 244, 51, 4, 28],
"result": "valid"
},
{
"tcId": 324,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "7fd4e71784e95a3dd0b41315a67131d2",
"tweak": "47d48ea4716ab8df",
"msg": [-1, 131, 111, 121, 72, 28, 213, 96, 6],
"ct": [174, 201, 193, 199, 20, 101, 183, 60, 67],
"result": "invalid"
},
{
"tcId": 325,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "7fd4e71784e95a3dd0b41315a67131d2",
"tweak": "47d48ea4716ab8df",
"msg": [241, 131, 111, -1, 72, 28, 213, 96, 6],
"ct": [79, 0, 126, 110, 230, 174, 161, 202, 69],
"result": "invalid"
},
{
"tcId": 326,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "7fd4e71784e95a3dd0b41315a67131d2",
"tweak": "47d48ea4716ab8df",
"msg": [241, 131, 111, 121, 72, 28, 213, 96, -1],
"ct": [77, 133, 59, 16, 243, 194, 36, 17, 236],
"result": "invalid"
},
{
"tcId": 327,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "833be8275ce2efc4c69cdd5d345d6aa8",
"tweak": "22f7f0ac09a976c5",
"msg": [256, 211, 15, 116, 32, 157, 78, 7, 252],
"ct": [205, 228, 120, 86, 107, 140, 40, 234, 50],
"result": "invalid"
},
{
"tcId": 328,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "833be8275ce2efc4c69cdd5d345d6aa8",
"tweak": "22f7f0ac09a976c5",
"msg": [123, 211, 15, 256, 32, 157, 78, 7, 252],
"ct": [13, 231, 88, 75, 141, 125, 205, 233, 132],
"result": "invalid"
},
{
"tcId": 329,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "833be8275ce2efc4c69cdd5d345d6aa8",
"tweak": "22f7f0ac09a976c5",
"msg": [123, 211, 15, 116, 32, 157, 78, 7, 256],
"ct": [89, 45, 162, 97, 233, 113, 216, 191, 107],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 10,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 330,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "5474525ca99fb5da2babdbd45c727d16",
"tweak": "f2cb4d9ba04b81f8",
"msg": [150, 52, 65, 198, 230, 170, 201, 76, 37, 23],
"ct": [39, 214, 120, 239, 23, 229, 164, 202, 84, 102],
"result": "valid"
},
{
"tcId": 331,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [125, 55, 211, 43, 117, 181, 85, 167, 47, 88],
"result": "valid"
},
{
"tcId": 332,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [23, 63, 98, 245, 96, 46, 85, 141, 229, 244],
"result": "valid"
},
{
"tcId": 333,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [128, 0, 0, 0, 0, 128, 0, 0, 0, 0],
"ct": [222, 202, 83, 101, 148, 91, 144, 164, 137, 246],
"result": "valid"
},
{
"tcId": 334,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [127, 255, 255, 255, 255, 127, 255, 255, 255, 255],
"ct": [216, 209, 55, 101, 69, 225, 41, 92, 213, 113],
"result": "valid"
},
{
"tcId": 335,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [47, 120, 142, 10, 0, 243, 64, 6, 55, 50],
"ct": [202, 80, 4, 109, 248, 81, 184, 149, 132, 14],
"result": "valid"
},
{
"tcId": 336,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [203, 159, 212, 167, 89, 24, 113, 125, 3, 110],
"ct": [84, 14, 122, 151, 25, 11, 129, 150, 188, 39],
"result": "valid"
},
{
"tcId": 337,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [3, 173, 20, 113, 231, 75, 62, 88, 208, 55],
"ct": [109, 97, 147, 112, 241, 27, 155, 142, 50, 25],
"result": "valid"
},
{
"tcId": 338,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [52, 249, 153, 88, 95, 238, 152, 202, 68, 211],
"ct": [76, 119, 176, 212, 74, 150, 227, 75, 113, 93],
"result": "valid"
},
{
"tcId": 339,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [120, 40, 236, 200, 191, 29, 128, 127, 107, 25],
"ct": [55, 68, 118, 193, 96, 96, 198, 178, 5, 73],
"result": "valid"
},
{
"tcId": 340,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [181, 226, 194, 79, 243, 72, 208, 254, 17, 155],
"ct": [11, 131, 21, 54, 19, 46, 93, 242, 240, 74],
"result": "valid"
},
{
"tcId": 341,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [187, 87, 118, 238, 139, 24, 97, 2, 112, 209],
"ct": [220, 203, 174, 180, 30, 222, 124, 64, 146, 126],
"result": "valid"
},
{
"tcId": 342,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [2, 66, 107, 78, 123, 164, 83, 38, 186, 158],
"ct": [129, 164, 0, 229, 216, 144, 103, 180, 28, 165],
"result": "valid"
},
{
"tcId": 343,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [94, 139, 179, 14, 64, 224, 81, 109, 194, 18],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 344,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [66, 39, 48, 189, 240, 206, 225, 151, 121, 159],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 345,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [85, 155, 198, 228, 167, 81, 27, 107, 149, 145],
"ct": [128, 0, 0, 0, 0, 128, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 346,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3e7ffa3f410e329464ad1d205799b3d5",
"tweak": "0d5a58b58855ef5a",
"msg": [123, 179, 91, 121, 152, 2, 166, 30, 102, 220],
"ct": [127, 255, 255, 255, 255, 127, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 347,
"comment": "y = 0 and (y + a) % radix**5 == 0 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "3e464baa5a92c2bf6345",
"msg": [21, 194, 115, 213, 120, 156, 122, 169, 5, 169],
"ct": [144, 201, 177, 10, 63, 90, 39, 136, 254, 253],
"result": "valid"
},
{
"tcId": 348,
"comment": "y = 0 and a = 1 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "3e464baa5a92c2bf6345",
"msg": [109, 68, 41, 145, 212, 22, 182, 94, 25, 193],
"ct": [128, 170, 43, 98, 111, 80, 142, 4, 195, 119],
"result": "valid"
},
{
"tcId": 349,
"comment": "y = 0 and a has large Hamming weight in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "3e464baa5a92c2bf6345",
"msg": [136, 87, 22, 97, 195, 174, 198, 144, 105, 41],
"ct": [211, 175, 79, 60, 239, 103, 171, 241, 222, 163],
"result": "valid"
},
{
"tcId": 350,
"comment": "y = 0 and (y + a) % radix**5 is maximal in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "3e464baa5a92c2bf6345",
"msg": [119, 54, 29, 210, 94, 199, 149, 142, 236, 214],
"ct": [79, 194, 139, 158, 171, 214, 127, 36, 2, 244],
"result": "valid"
},
{
"tcId": 351,
"comment": "y = 1 and a = 0 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a72cd04d071fa5ef4853",
"msg": [21, 3, 10, 7, 89, 242, 192, 57, 176, 128],
"ct": [237, 128, 98, 185, 254, 205, 10, 76, 24, 5],
"result": "valid"
},
{
"tcId": 352,
"comment": "y = 1 and a = 1 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a72cd04d071fa5ef4853",
"msg": [58, 127, 165, 250, 33, 34, 205, 197, 19, 108],
"ct": [220, 37, 157, 23, 50, 229, 42, 51, 239, 66],
"result": "valid"
},
{
"tcId": 353,
"comment": "y = 1 and a has large Hamming weight in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a72cd04d071fa5ef4853",
"msg": [59, 3, 118, 73, 187, 5, 21, 5, 70, 181],
"ct": [16, 41, 30, 220, 38, 122, 244, 59, 131, 140],
"result": "valid"
},
{
"tcId": 354,
"comment": "y = 1 and (y + a) % radix**5 is maximal in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a72cd04d071fa5ef4853",
"msg": [163, 164, 183, 226, 58, 100, 161, 192, 246, 29],
"ct": [230, 180, 50, 237, 151, 112, 180, 182, 101, 159],
"result": "valid"
},
{
"tcId": 355,
"comment": "y = 1 and (y + a) % radix**5 == 0 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a72cd04d071fa5ef4853",
"msg": [217, 210, 159, 243, 29, 231, 166, 59, 4, 76],
"ct": [7, 201, 176, 108, 242, 211, 115, 203, 184, 203],
"result": "valid"
},
{
"tcId": 356,
"comment": "y is maximal and (y + a) % radix**5 is maximal in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "4973b4e35985f5a8867d",
"msg": [80, 188, 24, 157, 236, 248, 169, 22, 174, 90],
"ct": [85, 239, 234, 33, 234, 248, 101, 180, 120, 175],
"result": "valid"
},
{
"tcId": 357,
"comment": "y is maximal and (y + a) % radix**5 == 0 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "4973b4e35985f5a8867d",
"msg": [58, 245, 227, 17, 73, 185, 50, 241, 177, 41],
"ct": [44, 112, 134, 115, 1, 214, 198, 244, 249, 80],
"result": "valid"
},
{
"tcId": 358,
"comment": "y is maximal and a has large Hamming weight in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "4973b4e35985f5a8867d",
"msg": [73, 184, 220, 48, 81, 44, 121, 60, 98, 92],
"ct": [201, 163, 187, 160, 219, 147, 198, 89, 189, 105],
"result": "valid"
},
{
"tcId": 359,
"comment": "y is maximal and a is maximal in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "4973b4e35985f5a8867d",
"msg": [185, 65, 247, 169, 158, 12, 148, 183, 15, 212],
"ct": [78, 161, 52, 85, 244, 125, 199, 214, 109, 152],
"result": "valid"
},
{
"tcId": 360,
"comment": "y is edge case for modular reduction and a = 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "1935e19f8e8ba7914c4a",
"msg": [106, 63, 30, 214, 159, 152, 76, 204, 122, 246],
"ct": [64, 174, 60, 48, 59, 215, 150, 2, 83, 112],
"result": "valid"
},
{
"tcId": 361,
"comment": "y is edge case for modular reduction and a = 1 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "1935e19f8e8ba7914c4a",
"msg": [70, 80, 139, 23, 158, 40, 82, 123, 173, 70],
"ct": [14, 13, 253, 190, 201, 184, 217, 153, 105, 4],
"result": "valid"
},
{
"tcId": 362,
"comment": "y is edge case for modular reduction and (y + a) % radix**5 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "1935e19f8e8ba7914c4a",
"msg": [138, 2, 203, 47, 223, 94, 86, 131, 34, 245],
"ct": [251, 58, 210, 127, 59, 55, 159, 37, 95, 76],
"result": "valid"
},
{
"tcId": 363,
"comment": "y is edge case for modular reduction and (y + a) % radix**5 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "1935e19f8e8ba7914c4a",
"msg": [88, 180, 81, 8, 77, 14, 113, 224, 49, 3],
"ct": [71, 179, 244, 48, 172, 254, 139, 163, 242, 85],
"result": "valid"
},
{
"tcId": 364,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "1935e19f8e8ba7914c4a",
"msg": [148, 152, 65, 209, 190, 6, 81, 155, 88, 108],
"ct": [96, 87, 85, 250, 122, 188, 159, 144, 131, 39],
"result": "valid"
},
{
"tcId": 365,
"comment": "y is edge case for modular reduction and a is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "1935e19f8e8ba7914c4a",
"msg": [2, 38, 201, 180, 184, 133, 113, 41, 144, 128],
"ct": [242, 162, 7, 53, 137, 11, 93, 227, 240, 142],
"result": "valid"
},
{
"tcId": 366,
"comment": "y is maximal after modular reduction and (y + a) % radix**5 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a02b19adca0f1329333c",
"msg": [194, 46, 128, 65, 198, 155, 121, 205, 214, 96],
"ct": [220, 218, 251, 111, 168, 51, 235, 1, 223, 177],
"result": "valid"
},
{
"tcId": 367,
"comment": "y is maximal after modular reduction and (y + a) % radix**5 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a02b19adca0f1329333c",
"msg": [50, 230, 136, 223, 206, 17, 110, 25, 0, 126],
"ct": [59, 248, 77, 97, 232, 162, 10, 149, 57, 200],
"result": "valid"
},
{
"tcId": 368,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a02b19adca0f1329333c",
"msg": [159, 86, 251, 231, 53, 151, 178, 55, 169, 231],
"ct": [83, 65, 7, 132, 104, 218, 52, 34, 98, 106],
"result": "valid"
},
{
"tcId": 369,
"comment": "y is maximal after modular reduction and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "7b64450714b0a262376044de6e260f0a",
"tweak": "a02b19adca0f1329333c",
"msg": [66, 253, 74, 223, 251, 29, 168, 230, 240, 215],
"ct": [210, 109, 212, 22, 77, 72, 29, 136, 5, 236],
"result": "valid"
},
{
"tcId": 370,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "c2153daac19904cf16ea81dbc73a58dc",
"tweak": "38b7196a238d3892",
"msg": [-1, 225, 129, 54, 138, 246, 19, 180, 152, 246],
"ct": [78, 25, 236, 221, 33, 205, 227, 150, 126, 189],
"result": "invalid"
},
{
"tcId": 371,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "c2153daac19904cf16ea81dbc73a58dc",
"tweak": "38b7196a238d3892",
"msg": [186, 225, 129, -1, 138, 246, 19, 180, 152, 246],
"ct": [165, 177, 133, 147, 206, 27, 108, 13, 212, 144],
"result": "invalid"
},
{
"tcId": 372,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "c2153daac19904cf16ea81dbc73a58dc",
"tweak": "38b7196a238d3892",
"msg": [186, 225, 129, 54, 138, 246, 19, 180, 152, -1],
"ct": [180, 93, 143, 208, 255, 86, 25, 20, 113, 17],
"result": "invalid"
},
{
"tcId": 373,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "bd8843a155537b6eafd5495325f0b9c8",
"tweak": "08508835ecd1921b",
"msg": [256, 157, 35, 105, 80, 58, 254, 204, 48, 203],
"ct": [34, 180, 23, 28, 56, 84, 164, 231, 26, 225],
"result": "invalid"
},
{
"tcId": 374,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "bd8843a155537b6eafd5495325f0b9c8",
"tweak": "08508835ecd1921b",
"msg": [112, 157, 35, 256, 80, 58, 254, 204, 48, 203],
"ct": [134, 235, 75, 28, 229, 15, 57, 162, 254, 136],
"result": "invalid"
},
{
"tcId": 375,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "bd8843a155537b6eafd5495325f0b9c8",
"tweak": "08508835ecd1921b",
"msg": [112, 157, 35, 105, 80, 58, 254, 204, 48, 256],
"ct": [104, 242, 161, 118, 113, 165, 84, 155, 118, 19],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 11,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 376,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "63396f38c44f0c2d97468c4804b5d022",
"tweak": "73068af95fd924fc",
"msg": [78, 38, 136, 255, 183, 77, 180, 59, 142, 58, 95],
"ct": [129, 53, 92, 99, 164, 12, 151, 123, 224, 3, 187],
"result": "valid"
},
{
"tcId": 377,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [85, 110, 201, 82, 132, 222, 99, 121, 248, 163, 18],
"result": "valid"
},
{
"tcId": 378,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [119, 134, 28, 133, 109, 49, 205, 248, 253, 176, 119],
"result": "valid"
},
{
"tcId": 379,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [128, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0],
"ct": [208, 5, 77, 80, 125, 52, 143, 127, 214, 24, 147],
"result": "valid"
},
{
"tcId": 380,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [127, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255],
"ct": [165, 223, 155, 240, 113, 254, 88, 29, 190, 175, 151],
"result": "valid"
},
{
"tcId": 381,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [16, 217, 242, 114, 75, 2, 232, 202, 159, 201, 238],
"ct": [95, 249, 96, 146, 21, 64, 119, 3, 5, 239, 207],
"result": "valid"
},
{
"tcId": 382,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [4, 60, 134, 14, 122, 50, 102, 202, 213, 41, 164],
"ct": [3, 106, 86, 78, 244, 65, 211, 39, 35, 121, 53],
"result": "valid"
},
{
"tcId": 383,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [27, 37, 74, 236, 81, 59, 6, 160, 223, 203, 185],
"ct": [133, 217, 241, 108, 241, 83, 189, 163, 92, 87, 139],
"result": "valid"
},
{
"tcId": 384,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [57, 218, 88, 57, 167, 31, 132, 67, 35, 162, 233],
"ct": [52, 208, 199, 6, 104, 121, 144, 155, 105, 159, 210],
"result": "valid"
},
{
"tcId": 385,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [34, 187, 35, 222, 27, 242, 129, 161, 181, 116, 87],
"ct": [109, 219, 138, 66, 220, 252, 27, 228, 251, 124, 123],
"result": "valid"
},
{
"tcId": 386,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [219, 222, 52, 241, 226, 88, 199, 24, 4, 35, 118],
"ct": [143, 154, 99, 74, 215, 195, 141, 118, 70, 46, 56],
"result": "valid"
},
{
"tcId": 387,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [134, 122, 239, 250, 72, 224, 221, 168, 144, 199, 247],
"ct": [225, 242, 135, 73, 109, 27, 166, 243, 195, 76, 10],
"result": "valid"
},
{
"tcId": 388,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [194, 205, 126, 165, 11, 108, 234, 153, 58, 168, 10],
"ct": [43, 182, 229, 233, 52, 24, 235, 96, 87, 92, 108],
"result": "valid"
},
{
"tcId": 389,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [244, 169, 159, 66, 115, 43, 2, 70, 176, 103, 100],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 390,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [79, 111, 125, 182, 198, 244, 76, 240, 177, 97, 145],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 391,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [181, 70, 25, 216, 156, 205, 35, 168, 181, 219, 209],
"ct": [128, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 392,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "cd69e5d5444781e0645ba24b2a32dee8",
"tweak": "e1310d099e8e72c6",
"msg": [21, 69, 128, 114, 72, 92, 225, 190, 29, 115, 214],
"ct": [127, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 393,
"comment": "y = 0 and (y + a) % radix**5 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "18c92bed11e1df1d3e",
"msg": [164, 135, 190, 109, 55, 115, 194, 58, 193, 173, 153],
"ct": [0, 0, 0, 0, 0, 32, 46, 253, 204, 161, 107],
"result": "valid"
},
{
"tcId": 394,
"comment": "y = 0 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "18c92bed11e1df1d3e",
"msg": [108, 128, 125, 143, 2, 6, 142, 201, 204, 146, 125],
"ct": [0, 0, 0, 0, 1, 253, 99, 19, 11, 145, 218],
"result": "valid"
},
{
"tcId": 395,
"comment": "y = 0 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "18c92bed11e1df1d3e",
"msg": [247, 73, 230, 146, 223, 244, 178, 195, 59, 244, 131],
"ct": [128, 0, 0, 0, 0, 245, 241, 2, 102, 235, 153],
"result": "valid"
},
{
"tcId": 396,
"comment": "y = 0 and (y + a) % radix**5 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "18c92bed11e1df1d3e",
"msg": [74, 178, 126, 150, 23, 220, 252, 99, 226, 90, 67],
"ct": [255, 255, 255, 255, 255, 236, 106, 200, 24, 73, 6],
"result": "valid"
},
{
"tcId": 397,
"comment": "y = 1 and a = 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d9df8dae2bc6862499",
"msg": [163, 163, 73, 94, 68, 173, 130, 252, 10, 23, 84],
"ct": [120, 36, 254, 229, 8, 89, 152, 98, 105, 222, 64],
"result": "valid"
},
{
"tcId": 398,
"comment": "y = 1 and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d9df8dae2bc6862499",
"msg": [251, 198, 254, 227, 79, 48, 228, 241, 219, 152, 233],
"ct": [196, 124, 122, 73, 161, 195, 131, 60, 29, 202, 180],
"result": "valid"
},
{
"tcId": 399,
"comment": "y = 1 and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d9df8dae2bc6862499",
"msg": [181, 13, 95, 161, 241, 20, 85, 228, 43, 102, 203],
"ct": [150, 156, 139, 4, 135, 64, 128, 181, 139, 127, 60],
"result": "valid"
},
{
"tcId": 400,
"comment": "y = 1 and (y + a) % radix**5 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d9df8dae2bc6862499",
"msg": [101, 131, 132, 132, 139, 246, 144, 153, 64, 112, 203],
"ct": [141, 173, 112, 154, 143, 106, 65, 93, 102, 168, 69],
"result": "valid"
},
{
"tcId": 401,
"comment": "y = 1 and (y + a) % radix**5 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d9df8dae2bc6862499",
"msg": [190, 107, 137, 70, 32, 198, 111, 206, 29, 252, 219],
"ct": [122, 205, 160, 158, 78, 204, 220, 3, 133, 91, 40],
"result": "valid"
},
{
"tcId": 402,
"comment": "y is maximal and (y + a) % radix**5 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a8c863714509af7761",
"msg": [165, 128, 50, 52, 127, 17, 7, 135, 107, 27, 110],
"ct": [77, 151, 65, 80, 146, 169, 25, 103, 126, 31, 243],
"result": "valid"
},
{
"tcId": 403,
"comment": "y is maximal and (y + a) % radix**5 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a8c863714509af7761",
"msg": [199, 75, 159, 204, 115, 42, 178, 47, 104, 55, 221],
"ct": [65, 195, 253, 82, 95, 134, 128, 241, 33, 145, 30],
"result": "valid"
},
{
"tcId": 404,
"comment": "y is maximal and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a8c863714509af7761",
"msg": [213, 112, 159, 226, 56, 129, 232, 52, 19, 93, 223],
"ct": [26, 171, 234, 219, 154, 88, 61, 214, 206, 104, 236],
"result": "valid"
},
{
"tcId": 405,
"comment": "y is maximal and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a8c863714509af7761",
"msg": [150, 154, 116, 47, 17, 234, 15, 94, 62, 217, 181],
"ct": [140, 159, 37, 148, 153, 181, 183, 38, 105, 70, 226],
"result": "valid"
},
{
"tcId": 406,
"comment": "y is edge case for modular reduction and a = 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a80b5ea6f47a98af09",
"msg": [131, 33, 82, 135, 148, 81, 140, 90, 22, 130, 20],
"ct": [118, 17, 237, 44, 87, 153, 147, 166, 93, 193, 23],
"result": "valid"
},
{
"tcId": 407,
"comment": "y is edge case for modular reduction and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a80b5ea6f47a98af09",
"msg": [234, 214, 174, 239, 230, 151, 148, 255, 42, 166, 85],
"ct": [63, 224, 92, 57, 220, 252, 54, 20, 34, 206, 220],
"result": "valid"
},
{
"tcId": 408,
"comment": "y is edge case for modular reduction and (y + a) % radix**5 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a80b5ea6f47a98af09",
"msg": [216, 9, 110, 183, 171, 130, 120, 181, 18, 245, 63],
"ct": [99, 112, 132, 189, 153, 57, 78, 50, 142, 41, 230],
"result": "valid"
},
{
"tcId": 409,
"comment": "y is edge case for modular reduction and (y + a) % radix**5 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a80b5ea6f47a98af09",
"msg": [94, 207, 56, 130, 161, 207, 232, 217, 4, 204, 170],
"ct": [19, 130, 147, 129, 177, 2, 247, 134, 113, 155, 64],
"result": "valid"
},
{
"tcId": 410,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a80b5ea6f47a98af09",
"msg": [137, 162, 84, 198, 14, 168, 22, 225, 24, 64, 27],
"ct": [142, 146, 216, 124, 190, 151, 193, 40, 152, 76, 217],
"result": "valid"
},
{
"tcId": 411,
"comment": "y is edge case for modular reduction and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "a80b5ea6f47a98af09",
"msg": [232, 130, 175, 167, 167, 19, 75, 231, 84, 140, 243],
"ct": [228, 184, 200, 94, 147, 20, 197, 94, 172, 204, 46],
"result": "valid"
},
{
"tcId": 412,
"comment": "y is maximal after modular reduction and (y + a) % radix**5 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d3a374abfd23767e67",
"msg": [0, 0, 0, 0, 0, 158, 221, 106, 56, 168, 159],
"ct": [9, 213, 44, 5, 191, 94, 187, 237, 200, 95, 152],
"result": "valid"
},
{
"tcId": 413,
"comment": "y is maximal after modular reduction and (y + a) % radix**5 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d3a374abfd23767e67",
"msg": [0, 0, 0, 0, 1, 158, 221, 106, 56, 168, 159],
"ct": [83, 53, 178, 220, 209, 87, 198, 112, 107, 101, 245],
"result": "valid"
},
{
"tcId": 414,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d3a374abfd23767e67",
"msg": [128, 0, 0, 0, 0, 158, 221, 106, 56, 168, 159],
"ct": [87, 31, 243, 146, 26, 227, 116, 174, 218, 180, 49],
"result": "valid"
},
{
"tcId": 415,
"comment": "y is maximal after modular reduction and a is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "6c6ec910e1fcdff2f0df935de10d0560",
"tweak": "d3a374abfd23767e67",
"msg": [255, 255, 255, 255, 255, 158, 221, 106, 56, 168, 159],
"ct": [138, 204, 254, 255, 161, 84, 103, 116, 88, 112, 168],
"result": "valid"
},
{
"tcId": 416,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "0b55b77a1d06778b795b541037eabb26",
"tweak": "3e26f18ba99add01",
"msg": [-1, 59, 118, 123, 12, 220, 162, 215, 186, 247, 83],
"ct": [221, 24, 26, 120, 80, 65, 20, 32, 122, 173, 130],
"result": "invalid"
},
{
"tcId": 417,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "0b55b77a1d06778b795b541037eabb26",
"tweak": "3e26f18ba99add01",
"msg": [90, 59, 118, -1, 12, 220, 162, 215, 186, 247, 83],
"ct": [70, 119, 189, 225, 2, 238, 96, 183, 118, 248, 148],
"result": "invalid"
},
{
"tcId": 418,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "0b55b77a1d06778b795b541037eabb26",
"tweak": "3e26f18ba99add01",
"msg": [90, 59, 118, 123, 12, 220, 162, 215, 186, 247, -1],
"ct": [243, 188, 234, 125, 168, 132, 87, 202, 68, 140, 195],
"result": "invalid"
},
{
"tcId": 419,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a2ce0d0929f2931115a29e5ea39f5cb8",
"tweak": "877dedc11a14f7dc",
"msg": [256, 231, 176, 159, 170, 237, 87, 9, 239, 148, 141],
"ct": [206, 192, 30, 253, 103, 60, 25, 149, 231, 218, 108],
"result": "invalid"
},
{
"tcId": 420,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a2ce0d0929f2931115a29e5ea39f5cb8",
"tweak": "877dedc11a14f7dc",
"msg": [236, 231, 176, 256, 170, 237, 87, 9, 239, 148, 141],
"ct": [0, 30, 200, 248, 42, 134, 206, 128, 234, 17, 11],
"result": "invalid"
},
{
"tcId": 421,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a2ce0d0929f2931115a29e5ea39f5cb8",
"tweak": "877dedc11a14f7dc",
"msg": [236, 231, 176, 159, 170, 237, 87, 9, 239, 148, 256],
"ct": [16, 217, 22, 58, 85, 29, 178, 226, 124, 187, 5],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 12,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 422,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "ddc31fc7751a2bf5c8d2d815035622e8",
"tweak": "0e10628c19795c4e",
"msg": [124, 102, 58, 165, 243, 169, 37, 34, 59, 70, 193, 51],
"ct": [111, 2, 165, 95, 43, 104, 224, 71, 172, 170, 42, 87],
"result": "valid"
},
{
"tcId": 423,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [5, 163, 215, 158, 36, 185, 182, 240, 204, 33, 237, 3],
"result": "valid"
},
{
"tcId": 424,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [79, 116, 168, 151, 227, 140, 125, 185, 157, 200, 17, 184],
"result": "valid"
},
{
"tcId": 425,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [128, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0],
"ct": [127, 196, 112, 2, 46, 238, 207, 209, 230, 119, 34, 112],
"result": "valid"
},
{
"tcId": 426,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [127, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255],
"ct": [179, 237, 109, 232, 120, 151, 162, 224, 54, 202, 123, 98],
"result": "valid"
},
{
"tcId": 427,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [216, 211, 130, 61, 191, 220, 29, 106, 86, 56, 215, 233],
"ct": [59, 204, 73, 144, 157, 211, 245, 184, 215, 238, 246, 247],
"result": "valid"
},
{
"tcId": 428,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [98, 170, 190, 191, 64, 157, 181, 111, 86, 204, 170, 83],
"ct": [178, 39, 181, 160, 96, 50, 77, 204, 55, 152, 146, 192],
"result": "valid"
},
{
"tcId": 429,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [69, 6, 190, 213, 193, 125, 166, 185, 132, 231, 46, 69],
"ct": [186, 53, 243, 163, 98, 28, 26, 128, 194, 122, 17, 32],
"result": "valid"
},
{
"tcId": 430,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [36, 1, 18, 202, 5, 112, 202, 24, 25, 101, 111, 43],
"ct": [52, 186, 88, 139, 189, 194, 220, 72, 140, 16, 140, 147],
"result": "valid"
},
{
"tcId": 431,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [128, 74, 78, 30, 101, 147, 32, 244, 226, 4, 83, 161],
"ct": [22, 239, 191, 169, 69, 52, 250, 234, 16, 162, 202, 123],
"result": "valid"
},
{
"tcId": 432,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [109, 236, 249, 133, 176, 134, 226, 194, 111, 127, 34, 193],
"ct": [17, 31, 156, 157, 91, 135, 253, 17, 159, 92, 159, 73],
"result": "valid"
},
{
"tcId": 433,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [9, 213, 100, 194, 194, 151, 151, 70, 236, 182, 44, 107],
"ct": [116, 60, 19, 221, 164, 223, 156, 3, 203, 176, 190, 14],
"result": "valid"
},
{
"tcId": 434,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [176, 226, 51, 165, 138, 151, 228, 96, 61, 15, 194, 122],
"ct": [34, 190, 6, 197, 4, 152, 61, 25, 45, 235, 192, 164],
"result": "valid"
},
{
"tcId": 435,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [163, 51, 197, 145, 230, 223, 116, 232, 227, 186, 173, 115],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 436,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [76, 243, 72, 238, 175, 69, 43, 12, 57, 213, 118, 133],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 437,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [138, 40, 69, 244, 237, 41, 145, 102, 12, 29, 208, 163],
"ct": [128, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 438,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "d954ee3f3fabdcd92a2ad30b675ef74d",
"tweak": "bb3a5b86df3e19bc",
"msg": [82, 182, 55, 197, 244, 82, 139, 212, 18, 125, 143, 174],
"ct": [127, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 439,
"comment": "y = 0 and (y + a) % radix**6 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28c1dea5fa50b660a1",
"msg": [117, 12, 68, 225, 239, 82, 233, 202, 158, 239, 13, 30],
"ct": [47, 219, 72, 100, 83, 119, 52, 207, 238, 179, 143, 101],
"result": "valid"
},
{
"tcId": 440,
"comment": "y = 0 and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28c1dea5fa50b660a1",
"msg": [255, 0, 7, 55, 168, 192, 48, 209, 158, 125, 85, 79],
"ct": [98, 48, 75, 152, 190, 173, 130, 55, 45, 6, 10, 45],
"result": "valid"
},
{
"tcId": 441,
"comment": "y = 0 and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28c1dea5fa50b660a1",
"msg": [196, 227, 89, 140, 59, 53, 179, 3, 172, 200, 49, 80],
"ct": [205, 3, 119, 106, 212, 244, 155, 90, 188, 140, 126, 2],
"result": "valid"
},
{
"tcId": 442,
"comment": "y = 0 and (y + a) % radix**6 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28c1dea5fa50b660a1",
"msg": [175, 36, 239, 242, 0, 205, 216, 7, 201, 212, 241, 56],
"ct": [229, 79, 228, 204, 130, 216, 2, 120, 11, 222, 206, 201],
"result": "valid"
},
{
"tcId": 443,
"comment": "y = 1 and a = 0 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "7895120f6a37befaae",
"msg": [244, 163, 63, 30, 251, 110, 103, 19, 12, 144, 238, 74],
"ct": [47, 158, 122, 124, 236, 189, 95, 8, 177, 76, 243, 68],
"result": "valid"
},
{
"tcId": 444,
"comment": "y = 1 and a = 1 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "7895120f6a37befaae",
"msg": [115, 228, 233, 137, 126, 229, 215, 240, 0, 121, 76, 5],
"ct": [219, 167, 143, 116, 238, 3, 97, 182, 227, 225, 5, 92],
"result": "valid"
},
{
"tcId": 445,
"comment": "y = 1 and a has large Hamming weight in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "7895120f6a37befaae",
"msg": [14, 229, 197, 174, 135, 117, 42, 254, 101, 106, 83, 19],
"ct": [9, 229, 54, 24, 3, 89, 41, 35, 156, 55, 114, 27],
"result": "valid"
},
{
"tcId": 446,
"comment": "y = 1 and (y + a) % radix**6 is maximal in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "7895120f6a37befaae",
"msg": [235, 195, 1, 119, 56, 4, 124, 190, 27, 50, 60, 158],
"ct": [20, 131, 60, 102, 120, 58, 29, 239, 102, 203, 123, 183],
"result": "valid"
},
{
"tcId": 447,
"comment": "y = 1 and (y + a) % radix**6 == 0 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "7895120f6a37befaae",
"msg": [197, 54, 197, 65, 247, 254, 56, 5, 232, 209, 199, 236],
"ct": [191, 94, 130, 205, 145, 254, 40, 234, 23, 240, 76, 13],
"result": "valid"
},
{
"tcId": 448,
"comment": "y is maximal and (y + a) % radix**6 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28663bbd6226487d4a",
"msg": [111, 104, 111, 37, 50, 166, 189, 234, 255, 62, 13, 110],
"ct": [48, 143, 240, 165, 242, 61, 58, 199, 172, 172, 189, 232],
"result": "valid"
},
{
"tcId": 449,
"comment": "y is maximal and (y + a) % radix**6 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28663bbd6226487d4a",
"msg": [128, 63, 115, 235, 215, 117, 159, 120, 59, 65, 69, 108],
"ct": [196, 176, 197, 234, 33, 208, 14, 183, 135, 124, 90, 128],
"result": "valid"
},
{
"tcId": 450,
"comment": "y is maximal and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28663bbd6226487d4a",
"msg": [251, 129, 202, 242, 237, 21, 43, 212, 80, 219, 243, 153],
"ct": [99, 69, 130, 41, 141, 104, 246, 69, 115, 132, 129, 154],
"result": "valid"
},
{
"tcId": 451,
"comment": "y is maximal and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "28663bbd6226487d4a",
"msg": [204, 53, 73, 29, 235, 26, 203, 194, 55, 23, 216, 158],
"ct": [25, 169, 61, 104, 31, 144, 40, 156, 39, 81, 187, 100],
"result": "valid"
},
{
"tcId": 452,
"comment": "y is edge case for modular reduction and a = 0 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "3990cfa959450f616e",
"msg": [58, 39, 149, 71, 153, 233, 79, 230, 18, 72, 156, 131],
"ct": [249, 41, 145, 123, 91, 65, 224, 74, 243, 103, 86, 132],
"result": "valid"
},
{
"tcId": 453,
"comment": "y is edge case for modular reduction and a = 1 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "3990cfa959450f616e",
"msg": [194, 38, 108, 131, 179, 224, 22, 185, 161, 4, 70, 39],
"ct": [79, 1, 24, 52, 32, 42, 116, 74, 103, 133, 102, 188],
"result": "valid"
},
{
"tcId": 454,
"comment": "y is edge case for modular reduction and (y + a) % radix**6 is maximal in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "3990cfa959450f616e",
"msg": [126, 21, 141, 55, 50, 143, 119, 137, 97, 105, 113, 152],
"ct": [226, 250, 181, 117, 202, 161, 88, 242, 40, 173, 16, 36],
"result": "valid"
},
{
"tcId": 455,
"comment": "y is edge case for modular reduction and (y + a) % radix**6 == 0 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "3990cfa959450f616e",
"msg": [114, 70, 32, 193, 34, 192, 174, 212, 12, 86, 111, 203],
"ct": [120, 19, 29, 48, 137, 70, 210, 40, 82, 50, 200, 147],
"result": "valid"
},
{
"tcId": 456,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "3990cfa959450f616e",
"msg": [72, 32, 219, 66, 47, 200, 126, 46, 140, 12, 42, 253],
"ct": [97, 246, 35, 86, 229, 226, 103, 183, 29, 114, 195, 4],
"result": "valid"
},
{
"tcId": 457,
"comment": "y is edge case for modular reduction and a is maximal in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "3990cfa959450f616e",
"msg": [61, 212, 5, 224, 153, 58, 61, 197, 233, 20, 103, 205],
"ct": [62, 83, 101, 93, 162, 7, 60, 118, 117, 162, 103, 123],
"result": "valid"
},
{
"tcId": 458,
"comment": "y is maximal after modular reduction and (y + a) % radix**6 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "b67adb5fbe65e3541b",
"msg": [50, 111, 249, 255, 10, 67, 57, 31, 203, 101, 249, 153],
"ct": [204, 67, 84, 169, 5, 48, 112, 21, 156, 120, 49, 152],
"result": "valid"
},
{
"tcId": 459,
"comment": "y is maximal after modular reduction and (y + a) % radix**6 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "b67adb5fbe65e3541b",
"msg": [138, 38, 135, 251, 0, 119, 42, 167, 205, 181, 95, 47],
"ct": [38, 164, 27, 37, 72, 10, 202, 69, 89, 32, 189, 121],
"result": "valid"
},
{
"tcId": 460,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "b67adb5fbe65e3541b",
"msg": [96, 248, 186, 101, 81, 199, 34, 192, 123, 234, 250, 244],
"ct": [82, 119, 2, 193, 166, 245, 30, 212, 132, 59, 42, 62],
"result": "valid"
},
{
"tcId": 461,
"comment": "y is maximal after modular reduction and a is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "a3e590e923e5c47a216ec271e9da8180",
"tweak": "b67adb5fbe65e3541b",
"msg": [179, 238, 161, 187, 255, 33, 62, 241, 254, 186, 77, 241],
"ct": [250, 242, 68, 151, 15, 61, 194, 110, 52, 38, 8, 177],
"result": "valid"
},
{
"tcId": 462,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "dbac185fba36fe7028184de1a577dbaa",
"tweak": "6ba28735b4acc0ff",
"msg": [-1, 132, 54, 229, 183, 62, 238, 177, 161, 133, 206, 4],
"ct": [174, 208, 209, 145, 226, 128, 15, 41, 168, 218, 65, 234],
"result": "invalid"
},
{
"tcId": 463,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "dbac185fba36fe7028184de1a577dbaa",
"tweak": "6ba28735b4acc0ff",
"msg": [210, 132, 54, 229, -1, 62, 238, 177, 161, 133, 206, 4],
"ct": [86, 93, 90, 37, 52, 240, 185, 242, 113, 77, 186, 186],
"result": "invalid"
},
{
"tcId": 464,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "dbac185fba36fe7028184de1a577dbaa",
"tweak": "6ba28735b4acc0ff",
"msg": [210, 132, 54, 229, 183, 62, 238, 177, 161, 133, 206, -1],
"ct": [197, 225, 151, 1, 146, 218, 28, 143, 227, 103, 87, 168],
"result": "invalid"
},
{
"tcId": 465,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "444caa37c11e006aa3991d868a58799c",
"tweak": "6be7a7dd1c0cbb3a",
"msg": [256, 245, 95, 255, 211, 224, 105, 47, 127, 181, 11, 163],
"ct": [88, 234, 112, 42, 202, 172, 230, 228, 1, 43, 244, 18],
"result": "invalid"
},
{
"tcId": 466,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "444caa37c11e006aa3991d868a58799c",
"tweak": "6be7a7dd1c0cbb3a",
"msg": [223, 245, 95, 255, 256, 224, 105, 47, 127, 181, 11, 163],
"ct": [180, 123, 39, 63, 39, 73, 11, 201, 82, 166, 5, 100],
"result": "invalid"
},
{
"tcId": 467,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "444caa37c11e006aa3991d868a58799c",
"tweak": "6be7a7dd1c0cbb3a",
"msg": [223, 245, 95, 255, 211, 224, 105, 47, 127, 181, 11, 256],
"ct": [210, 208, 190, 45, 164, 56, 189, 138, 172, 236, 13, 87],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 13,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 468,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "d5e6c882f005525ce577f704ef6b525d",
"tweak": "7ce1a7a4e6508c83",
"msg": [78, 96, 231, 207, 135, 221, 48, 33, 71, 165, 31, 106, 150],
"ct": [160, 14, 186, 103, 75, 140, 121, 236, 220, 121, 247, 197, 81],
"result": "valid"
},
{
"tcId": 469,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [115, 192, 201, 251, 39, 190, 205, 142, 8, 217, 71, 26, 52],
"result": "valid"
},
{
"tcId": 470,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [44, 249, 63, 205, 217, 11, 33, 171, 75, 173, 245, 194, 99],
"result": "valid"
},
{
"tcId": 471,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [128, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0],
"ct": [104, 64, 217, 59, 114, 145, 131, 32, 80, 197, 167, 202, 120],
"result": "valid"
},
{
"tcId": 472,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [127, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255],
"ct": [67, 254, 88, 74, 121, 116, 128, 80, 241, 177, 207, 225, 193],
"result": "valid"
},
{
"tcId": 473,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [60, 222, 185, 29, 122, 237, 100, 171, 171, 104, 4, 183, 85],
"ct": [47, 169, 165, 52, 143, 44, 148, 85, 140, 220, 174, 13, 66],
"result": "valid"
},
{
"tcId": 474,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [194, 113, 238, 247, 194, 63, 50, 254, 63, 201, 22, 105, 81],
"ct": [73, 128, 113, 213, 45, 199, 225, 170, 182, 83, 32, 216, 199],
"result": "valid"
},
{
"tcId": 475,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [249, 58, 193, 75, 91, 41, 186, 162, 106, 128, 29, 58, 107],
"ct": [23, 71, 57, 216, 164, 206, 149, 150, 139, 61, 193, 226, 221],
"result": "valid"
},
{
"tcId": 476,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [49, 126, 5, 27, 204, 194, 85, 226, 82, 177, 27, 204, 42],
"ct": [71, 18, 64, 223, 30, 53, 40, 111, 230, 11, 84, 198, 97],
"result": "valid"
},
{
"tcId": 477,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [146, 183, 73, 49, 70, 196, 247, 39, 111, 7, 11, 248, 208],
"ct": [215, 5, 51, 28, 235, 249, 127, 242, 28, 218, 196, 163, 132],
"result": "valid"
},
{
"tcId": 478,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [121, 234, 230, 138, 115, 196, 12, 163, 226, 195, 174, 163, 71],
"ct": [7, 193, 70, 12, 71, 170, 225, 47, 228, 181, 244, 22, 52],
"result": "valid"
},
{
"tcId": 479,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [154, 79, 165, 237, 196, 196, 30, 206, 19, 21, 185, 230, 97],
"ct": [242, 240, 200, 7, 218, 142, 4, 221, 199, 67, 146, 16, 75],
"result": "valid"
},
{
"tcId": 480,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [222, 146, 109, 246, 106, 95, 154, 122, 98, 165, 20, 69, 179],
"ct": [81, 33, 242, 255, 28, 63, 136, 238, 155, 23, 6, 234, 123],
"result": "valid"
},
{
"tcId": 481,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [50, 238, 15, 169, 223, 236, 234, 153, 138, 124, 155, 183, 35],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 482,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [29, 202, 77, 123, 123, 191, 234, 205, 53, 186, 251, 96, 212],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 483,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [242, 231, 85, 165, 181, 214, 12, 91, 142, 34, 32, 96, 199],
"ct": [128, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 484,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bb7ca258d353deb4a4f52b08290ab6a1",
"tweak": "a211ccbb8d59238e",
"msg": [38, 128, 101, 103, 170, 193, 3, 20, 210, 45, 244, 228, 88],
"ct": [127, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 485,
"comment": "y = 0 and (y + a) % radix**6 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "20e0cd33bd09b600",
"msg": [170, 253, 104, 216, 196, 147, 117, 170, 158, 238, 56, 182, 36],
"ct": [216, 3, 88, 93, 70, 112, 34, 101, 126, 55, 96, 130, 95],
"result": "valid"
},
{
"tcId": 486,
"comment": "y = 0 and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "20e0cd33bd09b600",
"msg": [113, 184, 233, 45, 209, 186, 229, 136, 150, 158, 162, 137, 217],
"ct": [206, 101, 18, 34, 228, 194, 201, 55, 138, 20, 170, 177, 100],
"result": "valid"
},
{
"tcId": 487,
"comment": "y = 0 and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "20e0cd33bd09b600",
"msg": [252, 231, 162, 17, 71, 160, 7, 134, 118, 99, 56, 117, 113],
"ct": [142, 79, 52, 46, 178, 251, 51, 99, 126, 104, 183, 50, 87],
"result": "valid"
},
{
"tcId": 488,
"comment": "y = 0 and (y + a) % radix**6 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "20e0cd33bd09b600",
"msg": [235, 194, 117, 232, 32, 218, 238, 174, 42, 182, 117, 142, 61],
"ct": [158, 30, 248, 154, 118, 76, 69, 79, 244, 104, 70, 142, 50],
"result": "valid"
},
{
"tcId": 489,
"comment": "y = 1 and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "461787ba0997a8c5",
"msg": [115, 112, 5, 172, 125, 1, 228, 243, 217, 174, 129, 2, 63],
"ct": [0, 0, 0, 0, 0, 1, 42, 22, 178, 108, 150, 172, 215],
"result": "valid"
},
{
"tcId": 490,
"comment": "y = 1 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "461787ba0997a8c5",
"msg": [128, 238, 111, 146, 165, 136, 90, 98, 126, 50, 197, 99, 179],
"ct": [0, 0, 0, 0, 0, 2, 230, 65, 184, 227, 14, 183, 178],
"result": "valid"
},
{
"tcId": 491,
"comment": "y = 1 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "461787ba0997a8c5",
"msg": [167, 231, 191, 119, 229, 17, 107, 40, 29, 122, 7, 133, 69],
"ct": [128, 0, 0, 0, 0, 1, 70, 168, 92, 195, 235, 46, 167],
"result": "valid"
},
{
"tcId": 492,
"comment": "y = 1 and (y + a) % radix**6 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "461787ba0997a8c5",
"msg": [34, 151, 61, 126, 45, 27, 148, 166, 71, 106, 140, 29, 231],
"ct": [255, 255, 255, 255, 255, 255, 39, 127, 211, 75, 65, 100, 235],
"result": "valid"
},
{
"tcId": 493,
"comment": "y = 1 and (y + a) % radix**6 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "461787ba0997a8c5",
"msg": [111, 222, 39, 46, 227, 203, 160, 74, 185, 136, 226, 45, 208],
"ct": [0, 0, 0, 0, 0, 0, 181, 236, 11, 60, 244, 67, 165],
"result": "valid"
},
{
"tcId": 494,
"comment": "y is maximal and (y + a) % radix**6 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "03d20310a51cb49d",
"msg": [0, 0, 0, 0, 0, 0, 153, 145, 65, 212, 146, 146, 206],
"ct": [20, 7, 49, 188, 44, 237, 231, 197, 163, 213, 193, 182, 160],
"result": "valid"
},
{
"tcId": 495,
"comment": "y is maximal and (y + a) % radix**6 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "03d20310a51cb49d",
"msg": [0, 0, 0, 0, 0, 1, 153, 145, 65, 212, 146, 146, 206],
"ct": [141, 204, 217, 48, 85, 153, 63, 2, 39, 37, 248, 92, 139],
"result": "valid"
},
{
"tcId": 496,
"comment": "y is maximal and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "03d20310a51cb49d",
"msg": [128, 0, 0, 0, 0, 0, 153, 145, 65, 212, 146, 146, 206],
"ct": [70, 243, 216, 178, 18, 235, 11, 164, 70, 183, 212, 228, 16],
"result": "valid"
},
{
"tcId": 497,
"comment": "y is maximal and a is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "03d20310a51cb49d",
"msg": [255, 255, 255, 255, 255, 255, 153, 145, 65, 212, 146, 146, 206],
"ct": [209, 180, 91, 203, 3, 143, 169, 63, 5, 214, 108, 134, 201],
"result": "valid"
},
{
"tcId": 498,
"comment": "y is edge case for modular reduction and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "0f36ba2c672592cb",
"msg": [77, 167, 23, 21, 128, 223, 101, 31, 35, 140, 217, 129, 164],
"ct": [255, 255, 255, 255, 255, 0, 64, 204, 32, 169, 192, 223, 49],
"result": "valid"
},
{
"tcId": 499,
"comment": "y is edge case for modular reduction and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "0f36ba2c672592cb",
"msg": [215, 185, 72, 37, 146, 183, 149, 1, 217, 127, 106, 110, 13],
"ct": [255, 255, 255, 255, 255, 1, 90, 150, 252, 172, 55, 193, 5],
"result": "valid"
},
{
"tcId": 500,
"comment": "y is edge case for modular reduction and (y + a) % radix**6 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "0f36ba2c672592cb",
"msg": [212, 219, 66, 211, 29, 188, 225, 102, 9, 35, 144, 112, 193],
"ct": [255, 255, 255, 255, 255, 255, 2, 204, 189, 136, 27, 80, 174],
"result": "valid"
},
{
"tcId": 501,
"comment": "y is edge case for modular reduction and (y + a) % radix**6 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "0f36ba2c672592cb",
"msg": [255, 17, 220, 228, 99, 132, 193, 120, 184, 38, 172, 16, 201],
"ct": [0, 0, 0, 0, 0, 0, 81, 233, 254, 239, 111, 165, 172],
"result": "valid"
},
{
"tcId": 502,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "0f36ba2c672592cb",
"msg": [74, 219, 105, 44, 234, 236, 218, 144, 67, 237, 46, 148, 123],
"ct": [127, 255, 255, 255, 255, 0, 6, 24, 71, 127, 107, 13, 58],
"result": "valid"
},
{
"tcId": 503,
"comment": "y is edge case for modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "0f36ba2c672592cb",
"msg": [155, 220, 132, 247, 255, 107, 226, 99, 202, 168, 203, 247, 18],
"ct": [255, 255, 255, 255, 254, 255, 222, 192, 228, 130, 52, 218, 11],
"result": "valid"
},
{
"tcId": 504,
"comment": "y is maximal after modular reduction and (y + a) % radix**6 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "a96df4c3ccf7a25d",
"msg": [243, 181, 84, 2, 7, 224, 160, 117, 22, 70, 86, 22, 143],
"ct": [203, 144, 33, 209, 224, 249, 247, 149, 164, 201, 227, 220, 210],
"result": "valid"
},
{
"tcId": 505,
"comment": "y is maximal after modular reduction and (y + a) % radix**6 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "a96df4c3ccf7a25d",
"msg": [97, 158, 27, 146, 82, 170, 205, 36, 125, 170, 166, 149, 17],
"ct": [72, 116, 236, 29, 194, 99, 11, 190, 234, 233, 70, 22, 7],
"result": "valid"
},
{
"tcId": 506,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "a96df4c3ccf7a25d",
"msg": [105, 10, 55, 65, 165, 172, 110, 32, 224, 207, 124, 53, 25],
"ct": [17, 69, 71, 185, 36, 142, 183, 28, 176, 61, 237, 82, 48],
"result": "valid"
},
{
"tcId": 507,
"comment": "y is maximal after modular reduction and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "002d4f865568a9c32a7edeb2b39d73d7",
"tweak": "a96df4c3ccf7a25d",
"msg": [45, 219, 227, 23, 142, 241, 120, 106, 130, 203, 28, 244, 174],
"ct": [20, 221, 23, 186, 115, 27, 155, 197, 140, 253, 176, 224, 17],
"result": "valid"
},
{
"tcId": 508,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "b8d9b3c80209587bbe3c0f7125eed049",
"tweak": "522499e28e9e7712",
"msg": [-1, 19, 200, 114, 213, 82, 228, 141, 134, 185, 251, 230, 128],
"ct": [23, 171, 204, 61, 156, 91, 98, 147, 185, 225, 173, 3, 187],
"result": "invalid"
},
{
"tcId": 509,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "b8d9b3c80209587bbe3c0f7125eed049",
"tweak": "522499e28e9e7712",
"msg": [101, 19, 200, 114, -1, 82, 228, 141, 134, 185, 251, 230, 128],
"ct": [117, 146, 193, 9, 221, 110, 107, 132, 230, 135, 201, 243, 90],
"result": "invalid"
},
{
"tcId": 510,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "b8d9b3c80209587bbe3c0f7125eed049",
"tweak": "522499e28e9e7712",
"msg": [101, 19, 200, 114, 213, 82, 228, 141, 134, 185, 251, 230, -1],
"ct": [193, 174, 47, 248, 11, 81, 45, 243, 25, 218, 63, 240, 141],
"result": "invalid"
},
{
"tcId": 511,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "d86a3dbca6f759accfcd7f64c9b21a1a",
"tweak": "b4fc14bc746c337f",
"msg": [256, 225, 35, 62, 231, 207, 123, 176, 102, 203, 61, 39, 71],
"ct": [217, 147, 76, 171, 9, 106, 179, 160, 178, 247, 80, 72, 53],
"result": "invalid"
},
{
"tcId": 512,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "d86a3dbca6f759accfcd7f64c9b21a1a",
"tweak": "b4fc14bc746c337f",
"msg": [183, 225, 35, 62, 256, 207, 123, 176, 102, 203, 61, 39, 71],
"ct": [78, 165, 125, 190, 5, 81, 189, 123, 118, 235, 240, 136, 122],
"result": "invalid"
},
{
"tcId": 513,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "d86a3dbca6f759accfcd7f64c9b21a1a",
"tweak": "b4fc14bc746c337f",
"msg": [183, 225, 35, 62, 231, 207, 123, 176, 102, 203, 61, 39, 256],
"ct": [26, 14, 192, 87, 248, 103, 65, 80, 53, 0, 162, 149, 190],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 14,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 514,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "7a1122636a4417351c97156308d4f6aa",
"tweak": "a9508e64d1ab8e34",
"msg": [237, 27, 3, 245, 41, 28, 188, 72, 146, 239, 236, 196, 122, 11],
"ct": [151, 67, 89, 136, 87, 181, 8, 146, 88, 227, 44, 128, 202, 37],
"result": "valid"
},
{
"tcId": 515,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [63, 159, 116, 55, 205, 205, 157, 121, 80, 122, 19, 51, 99, 115],
"result": "valid"
},
{
"tcId": 516,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [157, 127, 67, 31, 185, 43, 83, 213, 20, 222, 110, 101, 144, 218],
"result": "valid"
},
{
"tcId": 517,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [128, 0, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0],
"ct": [20, 151, 38, 159, 245, 71, 240, 125, 225, 61, 248, 9, 224, 12],
"result": "valid"
},
{
"tcId": 518,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [127, 255, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255],
"ct": [255, 105, 177, 8, 162, 163, 21, 216, 28, 100, 255, 24, 134, 0],
"result": "valid"
},
{
"tcId": 519,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [254, 2, 41, 174, 10, 48, 241, 182, 102, 198, 243, 86, 178, 248],
"ct": [251, 145, 31, 229, 119, 231, 41, 43, 36, 243, 127, 27, 201, 29],
"result": "valid"
},
{
"tcId": 520,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [177, 18, 28, 31, 229, 187, 148, 90, 14, 63, 129, 135, 45, 91],
"ct": [192, 78, 94, 174, 238, 55, 208, 106, 147, 9, 247, 51, 53, 9],
"result": "valid"
},
{
"tcId": 521,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [60, 228, 8, 166, 21, 97, 162, 202, 8, 5, 16, 229, 223, 78],
"ct": [243, 95, 123, 123, 88, 35, 14, 189, 232, 60, 14, 47, 227, 166],
"result": "valid"
},
{
"tcId": 522,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [99, 114, 27, 144, 63, 97, 228, 116, 252, 213, 59, 148, 137, 234],
"ct": [213, 100, 232, 177, 180, 128, 82, 166, 67, 221, 68, 249, 63, 210],
"result": "valid"
},
{
"tcId": 523,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [110, 28, 90, 153, 193, 19, 197, 68, 12, 103, 203, 44, 80, 246],
"ct": [91, 179, 39, 209, 63, 92, 28, 98, 67, 191, 1, 149, 154, 142],
"result": "valid"
},
{
"tcId": 524,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [83, 229, 18, 254, 145, 47, 70, 56, 128, 220, 254, 38, 63, 106],
"ct": [98, 32, 174, 244, 242, 190, 227, 59, 51, 76, 6, 83, 108, 244],
"result": "valid"
},
{
"tcId": 525,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [223, 183, 227, 61, 222, 241, 162, 22, 167, 31, 238, 249, 47, 31],
"ct": [142, 94, 224, 250, 16, 78, 214, 231, 6, 54, 167, 64, 57, 170],
"result": "valid"
},
{
"tcId": 526,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [181, 92, 70, 41, 127, 35, 105, 206, 53, 17, 150, 6, 218, 170],
"ct": [232, 33, 77, 82, 36, 16, 140, 107, 164, 241, 67, 110, 72, 228],
"result": "valid"
},
{
"tcId": 527,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [245, 86, 202, 191, 6, 80, 212, 17, 182, 101, 60, 118, 117, 87],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 528,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [152, 126, 166, 8, 34, 219, 185, 245, 25, 173, 70, 87, 124, 237],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 529,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [156, 254, 184, 34, 158, 7, 34, 177, 99, 121, 131, 3, 204, 126],
"ct": [128, 0, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 530,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "8a9c22148e4fed1fc918f33eba1f06cc",
"tweak": "c37a26d7ade80ea1",
"msg": [0, 244, 36, 154, 252, 43, 7, 26, 214, 111, 44, 200, 189, 6],
"ct": [127, 255, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 531,
"comment": "y = 0 and (y + a) % radix**7 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "49d0f568a6a4bccd",
"msg": [69, 75, 185, 0, 36, 60, 218, 240, 197, 210, 24, 215, 25, 170],
"ct": [61, 79, 2, 97, 41, 135, 12, 122, 121, 224, 20, 152, 47, 170],
"result": "valid"
},
{
"tcId": 532,
"comment": "y = 0 and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "49d0f568a6a4bccd",
"msg": [75, 135, 24, 161, 74, 160, 163, 151, 10, 118, 132, 136, 41, 141],
"ct": [53, 115, 7, 243, 35, 9, 15, 11, 135, 200, 233, 176, 161, 69],
"result": "valid"
},
{
"tcId": 533,
"comment": "y = 0 and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "49d0f568a6a4bccd",
"msg": [165, 248, 216, 180, 135, 162, 166, 149, 151, 253, 66, 39, 219, 22],
"ct": [163, 120, 53, 69, 232, 95, 231, 28, 176, 210, 81, 222, 133, 48],
"result": "valid"
},
{
"tcId": 534,
"comment": "y = 0 and (y + a) % radix**7 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "49d0f568a6a4bccd",
"msg": [19, 119, 150, 220, 246, 165, 237, 195, 191, 144, 12, 200, 140, 55],
"ct": [166, 39, 167, 115, 170, 255, 173, 190, 3, 200, 138, 150, 102, 204],
"result": "valid"
},
{
"tcId": 535,
"comment": "y = 1 and a = 0 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "d4f3e594f0763bbe",
"msg": [160, 27, 175, 213, 95, 140, 15, 244, 23, 188, 15, 153, 134, 238],
"ct": [223, 98, 138, 62, 102, 64, 240, 12, 244, 101, 137, 41, 181, 207],
"result": "valid"
},
{
"tcId": 536,
"comment": "y = 1 and a = 1 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "d4f3e594f0763bbe",
"msg": [137, 144, 49, 74, 70, 42, 195, 174, 131, 130, 51, 97, 29, 210],
"ct": [194, 130, 79, 254, 252, 49, 154, 140, 239, 208, 9, 194, 92, 84],
"result": "valid"
},
{
"tcId": 537,
"comment": "y = 1 and a has large Hamming weight in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "d4f3e594f0763bbe",
"msg": [6, 144, 192, 223, 239, 217, 164, 38, 184, 116, 91, 228, 106, 147],
"ct": [240, 185, 227, 231, 205, 39, 197, 154, 133, 14, 242, 233, 235, 121],
"result": "valid"
},
{
"tcId": 538,
"comment": "y = 1 and (y + a) % radix**7 is maximal in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "d4f3e594f0763bbe",
"msg": [121, 120, 111, 222, 112, 201, 117, 128, 84, 42, 25, 11, 181, 111],
"ct": [19, 247, 128, 20, 167, 221, 20, 223, 12, 40, 178, 242, 36, 136],
"result": "valid"
},
{
"tcId": 539,
"comment": "y = 1 and (y + a) % radix**7 == 0 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "d4f3e594f0763bbe",
"msg": [58, 64, 186, 252, 220, 201, 84, 93, 191, 76, 204, 195, 65, 160],
"ct": [106, 137, 20, 176, 150, 27, 121, 115, 154, 111, 11, 160, 100, 105],
"result": "valid"
},
{
"tcId": 540,
"comment": "y is maximal and (y + a) % radix**7 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "ac75c4f5a3dd4a60",
"msg": [174, 173, 158, 85, 134, 131, 134, 227, 255, 246, 248, 131, 198, 136],
"ct": [64, 72, 22, 16, 187, 187, 87, 248, 171, 248, 136, 252, 240, 185],
"result": "valid"
},
{
"tcId": 541,
"comment": "y is maximal and (y + a) % radix**7 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "ac75c4f5a3dd4a60",
"msg": [78, 43, 209, 134, 118, 221, 159, 177, 205, 146, 4, 9, 210, 72],
"ct": [122, 168, 234, 212, 90, 94, 21, 157, 27, 80, 2, 77, 112, 146],
"result": "valid"
},
{
"tcId": 542,
"comment": "y is maximal and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "ac75c4f5a3dd4a60",
"msg": [227, 184, 163, 114, 3, 123, 75, 51, 253, 102, 123, 126, 97, 114],
"ct": [167, 150, 133, 157, 188, 44, 127, 62, 203, 227, 241, 131, 123, 55],
"result": "valid"
},
{
"tcId": 543,
"comment": "y is maximal and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "ac75c4f5a3dd4a60",
"msg": [109, 238, 234, 133, 75, 98, 155, 108, 194, 51, 137, 215, 39, 80],
"ct": [147, 173, 195, 188, 103, 2, 116, 149, 20, 144, 26, 163, 137, 220],
"result": "valid"
},
{
"tcId": 544,
"comment": "y is edge case for modular reduction and a = 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "a13933a6359d06aa",
"msg": [189, 99, 211, 137, 236, 202, 219, 23, 115, 60, 175, 30, 112, 37],
"ct": [133, 12, 1, 222, 166, 58, 125, 34, 126, 242, 76, 194, 107, 214],
"result": "valid"
},
{
"tcId": 545,
"comment": "y is edge case for modular reduction and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "a13933a6359d06aa",
"msg": [58, 30, 19, 50, 144, 79, 120, 95, 80, 140, 78, 140, 12, 209],
"ct": [224, 65, 100, 42, 184, 50, 148, 227, 220, 180, 215, 239, 136, 128],
"result": "valid"
},
{
"tcId": 546,
"comment": "y is edge case for modular reduction and (y + a) % radix**7 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "a13933a6359d06aa",
"msg": [126, 216, 39, 43, 85, 112, 23, 74, 2, 60, 186, 21, 101, 13],
"ct": [52, 25, 42, 2, 156, 59, 137, 86, 230, 148, 215, 238, 21, 185],
"result": "valid"
},
{
"tcId": 547,
"comment": "y is edge case for modular reduction and (y + a) % radix**7 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "a13933a6359d06aa",
"msg": [91, 4, 169, 252, 222, 92, 101, 244, 8, 86, 157, 33, 88, 180],
"ct": [61, 119, 92, 22, 221, 103, 249, 167, 12, 212, 103, 155, 74, 138],
"result": "valid"
},
{
"tcId": 548,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "a13933a6359d06aa",
"msg": [248, 135, 166, 171, 150, 115, 152, 196, 68, 9, 227, 223, 195, 233],
"ct": [125, 13, 127, 51, 54, 234, 13, 84, 208, 157, 214, 243, 65, 115],
"result": "valid"
},
{
"tcId": 549,
"comment": "y is edge case for modular reduction and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "a13933a6359d06aa",
"msg": [183, 138, 35, 94, 224, 112, 227, 100, 221, 39, 13, 189, 40, 124],
"ct": [108, 129, 128, 227, 114, 157, 111, 47, 220, 197, 240, 152, 59, 217],
"result": "valid"
},
{
"tcId": 550,
"comment": "y is maximal after modular reduction and (y + a) % radix**7 is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "972a31502d43c680",
"msg": [87, 165, 184, 178, 12, 239, 163, 0, 0, 0, 0, 0, 0, 0],
"ct": [231, 100, 176, 109, 142, 131, 42, 118, 82, 249, 242, 140, 54, 169],
"result": "valid"
},
{
"tcId": 551,
"comment": "y is maximal after modular reduction and (y + a) % radix**7 == 0 in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "972a31502d43c680",
"msg": [65, 228, 22, 16, 69, 77, 249, 0, 0, 0, 0, 0, 0, 1],
"ct": [99, 139, 239, 252, 144, 69, 95, 196, 71, 198, 210, 158, 157, 22],
"result": "valid"
},
{
"tcId": 552,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "972a31502d43c680",
"msg": [212, 82, 130, 207, 96, 116, 180, 128, 0, 0, 0, 0, 0, 0],
"ct": [160, 81, 107, 97, 15, 70, 218, 170, 27, 99, 20, 82, 38, 174],
"result": "valid"
},
{
"tcId": 553,
"comment": "y is maximal after modular reduction and a is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "4dfedd6f97765da94b445cc712ea4e7f",
"tweak": "972a31502d43c680",
"msg": [58, 50, 65, 55, 5, 175, 69, 255, 255, 255, 255, 255, 255, 255],
"ct": [202, 36, 110, 173, 225, 95, 251, 164, 122, 212, 104, 245, 156, 178],
"result": "valid"
},
{
"tcId": 554,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "3a6e047dffbfcdaf0ee7e0c93fc4c0e0",
"tweak": "0e5628b6bce472c6",
"msg": [-1, 195, 247, 104, 199, 1, 11, 213, 0, 136, 186, 47, 74, 63],
"ct": [182, 8, 37, 161, 119, 77, 25, 105, 222, 133, 64, 108, 156, 75],
"result": "invalid"
},
{
"tcId": 555,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "3a6e047dffbfcdaf0ee7e0c93fc4c0e0",
"tweak": "0e5628b6bce472c6",
"msg": [33, 195, 247, 104, -1, 1, 11, 213, 0, 136, 186, 47, 74, 63],
"ct": [31, 165, 136, 27, 238, 73, 221, 157, 224, 177, 53, 232, 38, 179],
"result": "invalid"
},
{
"tcId": 556,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "3a6e047dffbfcdaf0ee7e0c93fc4c0e0",
"tweak": "0e5628b6bce472c6",
"msg": [33, 195, 247, 104, 199, 1, 11, 213, 0, 136, 186, 47, 74, -1],
"ct": [56, 42, 244, 55, 200, 130, 35, 138, 84, 102, 59, 77, 101, 82],
"result": "invalid"
},
{
"tcId": 557,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "673e565cbb06fbfcc66f1f8e9d7a2033",
"tweak": "e1ade8718aa9cc1b",
"msg": [256, 19, 228, 142, 174, 174, 239, 105, 181, 230, 11, 120, 71, 62],
"ct": [13, 211, 214, 102, 225, 206, 16, 16, 97, 18, 222, 76, 132, 202],
"result": "invalid"
},
{
"tcId": 558,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "673e565cbb06fbfcc66f1f8e9d7a2033",
"tweak": "e1ade8718aa9cc1b",
"msg": [201, 19, 228, 142, 256, 174, 239, 105, 181, 230, 11, 120, 71, 62],
"ct": [232, 154, 56, 120, 67, 10, 234, 150, 241, 157, 166, 227, 150, 218],
"result": "invalid"
},
{
"tcId": 559,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "673e565cbb06fbfcc66f1f8e9d7a2033",
"tweak": "e1ade8718aa9cc1b",
"msg": [201, 19, 228, 142, 174, 174, 239, 105, 181, 230, 11, 120, 71, 256],
"ct": [6, 210, 10, 250, 166, 56, 230, 97, 226, 202, 241, 132, 96, 136],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 15,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 560,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "7b0c5d430ef9383b04b2691ce3402a9a",
"tweak": "ec71532112064259",
"msg": [18, 2, 143, 132, 218, 54, 166, 155, 31, 216, 221, 55, 181, 191, 236],
"ct": [215, 41, 0, 104, 1, 129, 51, 28, 167, 89, 31, 251, 67, 139, 242],
"result": "valid"
},
{
"tcId": 561,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [243, 71, 85, 155, 10, 5, 159, 139, 60, 37, 150, 71, 94, 98, 173],
"result": "valid"
},
{
"tcId": 562,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [172, 208, 127, 103, 88, 47, 84, 82, 83, 184, 29, 48, 184, 198, 255],
"result": "valid"
},
{
"tcId": 563,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [128, 0, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0, 0],
"ct": [47, 20, 159, 37, 49, 224, 31, 99, 215, 161, 14, 239, 245, 245, 192],
"result": "valid"
},
{
"tcId": 564,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [127, 255, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255, 255],
"ct": [115, 33, 132, 208, 201, 153, 225, 120, 134, 219, 140, 25, 88, 38, 111],
"result": "valid"
},
{
"tcId": 565,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [104, 205, 50, 48, 195, 179, 155, 214, 250, 178, 244, 140, 96, 35, 211],
"ct": [163, 246, 100, 56, 192, 6, 172, 14, 85, 64, 207, 188, 240, 178, 48],
"result": "valid"
},
{
"tcId": 566,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [158, 197, 91, 222, 66, 245, 16, 51, 202, 47, 191, 20, 51, 152, 96],
"ct": [190, 98, 44, 234, 30, 159, 85, 200, 241, 88, 240, 110, 236, 112, 172],
"result": "valid"
},
{
"tcId": 567,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [62, 143, 122, 107, 182, 96, 82, 182, 134, 157, 69, 170, 228, 165, 133],
"ct": [37, 252, 75, 182, 251, 30, 204, 209, 108, 252, 150, 255, 197, 60, 22],
"result": "valid"
},
{
"tcId": 568,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [186, 102, 131, 217, 139, 140, 89, 140, 157, 19, 249, 97, 171, 251, 202],
"ct": [114, 230, 90, 136, 229, 249, 1, 105, 242, 20, 16, 178, 157, 130, 160],
"result": "valid"
},
{
"tcId": 569,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [74, 92, 123, 82, 68, 220, 116, 222, 179, 128, 93, 132, 26, 76, 74],
"ct": [147, 220, 218, 110, 73, 161, 108, 250, 242, 109, 107, 33, 244, 202, 225],
"result": "valid"
},
{
"tcId": 570,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [172, 100, 108, 68, 170, 155, 159, 101, 183, 148, 207, 100, 192, 232, 146],
"ct": [46, 220, 158, 90, 119, 32, 229, 180, 185, 91, 22, 167, 38, 210, 106],
"result": "valid"
},
{
"tcId": 571,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [164, 99, 118, 68, 37, 121, 105, 177, 95, 53, 238, 57, 189, 162, 90],
"ct": [105, 137, 229, 31, 38, 109, 128, 214, 108, 227, 197, 214, 153, 129, 205],
"result": "valid"
},
{
"tcId": 572,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [81, 220, 241, 121, 251, 73, 171, 248, 18, 243, 27, 62, 67, 39, 208],
"ct": [131, 219, 236, 19, 244, 35, 141, 144, 166, 242, 27, 20, 209, 133, 250],
"result": "valid"
},
{
"tcId": 573,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [122, 55, 226, 11, 242, 240, 240, 187, 70, 70, 31, 172, 55, 85, 23],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 574,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [78, 35, 55, 8, 92, 226, 52, 78, 130, 196, 94, 64, 22, 62, 166],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 575,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [46, 4, 109, 252, 170, 90, 57, 114, 12, 107, 167, 187, 177, 55, 149],
"ct": [128, 0, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 576,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "bd2dc7f87af6e676fa6bf4e92c43f183",
"tweak": "71e1ede1a7e70a42",
"msg": [154, 58, 241, 14, 39, 98, 126, 74, 169, 18, 232, 138, 188, 252, 208],
"ct": [127, 255, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 577,
"comment": "y = 0 and (y + a) % radix**7 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "584643bc47d336",
"msg": [109, 221, 97, 24, 14, 203, 49, 141, 98, 220, 198, 7, 136, 231, 84],
"ct": [0, 0, 0, 0, 0, 0, 0, 88, 170, 228, 91, 27, 194, 98, 27],
"result": "valid"
},
{
"tcId": 578,
"comment": "y = 0 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "584643bc47d336",
"msg": [25, 70, 234, 181, 215, 57, 253, 107, 68, 178, 243, 64, 163, 18, 18],
"ct": [0, 0, 0, 0, 0, 0, 1, 239, 7, 169, 50, 91, 247, 63, 93],
"result": "valid"
},
{
"tcId": 579,
"comment": "y = 0 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "584643bc47d336",
"msg": [16, 16, 7, 147, 98, 76, 187, 119, 9, 24, 199, 179, 226, 203, 183],
"ct": [128, 0, 0, 0, 0, 0, 0, 187, 50, 66, 44, 127, 132, 37, 5],
"result": "valid"
},
{
"tcId": 580,
"comment": "y = 0 and (y + a) % radix**7 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "584643bc47d336",
"msg": [81, 175, 69, 129, 120, 182, 88, 128, 228, 42, 147, 170, 143, 156, 214],
"ct": [255, 255, 255, 255, 255, 255, 255, 202, 79, 178, 125, 176, 55, 210, 11],
"result": "valid"
},
{
"tcId": 581,
"comment": "y = 1 and a = 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "cb7ea030175645",
"msg": [142, 231, 50, 217, 44, 216, 178, 232, 156, 203, 123, 38, 185, 26, 105],
"ct": [119, 223, 48, 72, 116, 77, 201, 60, 206, 7, 70, 58, 96, 41, 42],
"result": "valid"
},
{
"tcId": 582,
"comment": "y = 1 and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "cb7ea030175645",
"msg": [215, 233, 84, 215, 69, 162, 119, 192, 108, 91, 34, 188, 28, 186, 210],
"ct": [254, 136, 14, 64, 114, 160, 231, 166, 5, 154, 243, 176, 148, 204, 40],
"result": "valid"
},
{
"tcId": 583,
"comment": "y = 1 and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "cb7ea030175645",
"msg": [23, 46, 161, 145, 149, 68, 205, 169, 227, 175, 167, 107, 21, 252, 84],
"ct": [92, 128, 70, 134, 178, 146, 137, 79, 96, 97, 90, 106, 143, 45, 49],
"result": "valid"
},
{
"tcId": 584,
"comment": "y = 1 and (y + a) % radix**7 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "cb7ea030175645",
"msg": [173, 13, 184, 230, 173, 191, 144, 76, 50, 253, 147, 227, 73, 144, 48],
"ct": [169, 220, 76, 118, 38, 129, 95, 172, 91, 65, 224, 222, 43, 135, 109],
"result": "valid"
},
{
"tcId": 585,
"comment": "y = 1 and (y + a) % radix**7 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "cb7ea030175645",
"msg": [188, 64, 38, 19, 45, 208, 210, 131, 129, 70, 72, 52, 209, 159, 88],
"ct": [124, 14, 79, 223, 163, 23, 136, 110, 87, 12, 244, 156, 165, 71, 106],
"result": "valid"
},
{
"tcId": 586,
"comment": "y is maximal and (y + a) % radix**7 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "2b9226e85cbba7",
"msg": [206, 98, 125, 41, 190, 246, 121, 53, 124, 11, 253, 32, 229, 246, 96],
"ct": [253, 160, 169, 49, 248, 66, 202, 88, 234, 219, 112, 65, 206, 78, 217],
"result": "valid"
},
{
"tcId": 587,
"comment": "y is maximal and (y + a) % radix**7 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "2b9226e85cbba7",
"msg": [88, 246, 62, 64, 123, 175, 205, 54, 14, 103, 21, 182, 6, 170, 228],
"ct": [31, 25, 183, 139, 42, 51, 74, 203, 126, 7, 228, 41, 37, 214, 37],
"result": "valid"
},
{
"tcId": 588,
"comment": "y is maximal and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "2b9226e85cbba7",
"msg": [208, 1, 159, 46, 171, 203, 21, 167, 27, 201, 168, 37, 6, 119, 27],
"ct": [80, 73, 200, 113, 80, 213, 49, 148, 29, 170, 223, 202, 153, 55, 97],
"result": "valid"
},
{
"tcId": 589,
"comment": "y is maximal and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "2b9226e85cbba7",
"msg": [216, 168, 161, 80, 121, 143, 134, 173, 107, 21, 234, 191, 168, 239, 46],
"ct": [94, 49, 250, 254, 109, 220, 190, 47, 183, 220, 237, 19, 195, 242, 5],
"result": "valid"
},
{
"tcId": 590,
"comment": "y is edge case for modular reduction and a = 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "3e82357f475a30",
"msg": [63, 166, 177, 240, 50, 112, 157, 51, 40, 131, 108, 19, 134, 31, 18],
"ct": [129, 68, 6, 237, 123, 140, 183, 107, 10, 31, 169, 159, 231, 213, 80],
"result": "valid"
},
{
"tcId": 591,
"comment": "y is edge case for modular reduction and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "3e82357f475a30",
"msg": [223, 100, 88, 248, 20, 107, 173, 152, 95, 236, 46, 155, 61, 102, 233],
"ct": [228, 26, 14, 191, 128, 148, 133, 8, 124, 12, 205, 18, 91, 184, 233],
"result": "valid"
},
{
"tcId": 592,
"comment": "y is edge case for modular reduction and (y + a) % radix**7 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "3e82357f475a30",
"msg": [99, 52, 156, 196, 15, 156, 86, 10, 122, 82, 172, 227, 63, 124, 157],
"ct": [245, 134, 243, 251, 99, 158, 86, 111, 80, 5, 39, 54, 189, 125, 126],
"result": "valid"
},
{
"tcId": 593,
"comment": "y is edge case for modular reduction and (y + a) % radix**7 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "3e82357f475a30",
"msg": [19, 78, 154, 184, 55, 155, 39, 243, 3, 75, 183, 161, 109, 145, 154],
"ct": [253, 0, 17, 34, 84, 153, 48, 172, 111, 230, 166, 107, 37, 153, 11],
"result": "valid"
},
{
"tcId": 594,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "3e82357f475a30",
"msg": [233, 163, 221, 17, 20, 99, 177, 224, 152, 117, 120, 189, 64, 139, 147],
"ct": [132, 1, 163, 46, 139, 255, 232, 138, 167, 206, 202, 9, 143, 205, 186],
"result": "valid"
},
{
"tcId": 595,
"comment": "y is edge case for modular reduction and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "3e82357f475a30",
"msg": [4, 231, 170, 4, 1, 237, 225, 82, 157, 212, 204, 114, 191, 123, 81],
"ct": [138, 166, 214, 111, 23, 67, 160, 144, 237, 241, 122, 18, 113, 82, 32],
"result": "valid"
},
{
"tcId": 596,
"comment": "y is maximal after modular reduction and (y + a) % radix**7 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "a25fe274a9adda",
"msg": [193, 53, 179, 32, 4, 127, 84, 204, 49, 202, 167, 194, 172, 184, 105],
"ct": [255, 255, 255, 255, 255, 255, 255, 195, 218, 48, 22, 144, 13, 97, 191],
"result": "valid"
},
{
"tcId": 597,
"comment": "y is maximal after modular reduction and (y + a) % radix**7 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "a25fe274a9adda",
"msg": [121, 30, 165, 204, 254, 139, 190, 162, 68, 98, 59, 66, 231, 138, 223],
"ct": [0, 0, 0, 0, 0, 0, 0, 62, 112, 133, 201, 206, 184, 178, 1],
"result": "valid"
},
{
"tcId": 598,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "a25fe274a9adda",
"msg": [250, 54, 161, 209, 222, 177, 118, 35, 184, 2, 252, 98, 208, 191, 19],
"ct": [127, 255, 255, 255, 255, 255, 255, 149, 36, 219, 217, 14, 220, 151, 118],
"result": "valid"
},
{
"tcId": 599,
"comment": "y is maximal after modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "b4aac83ef6dc59fd0ab9a7692e6ef3c4",
"tweak": "a25fe274a9adda",
"msg": [49, 204, 24, 218, 141, 83, 53, 122, 124, 220, 43, 140, 194, 21, 166],
"ct": [255, 255, 255, 255, 255, 255, 254, 64, 54, 214, 131, 193, 147, 86, 91],
"result": "valid"
},
{
"tcId": 600,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "18f316e92e027b0d4d068bb94f8dd864",
"tweak": "17d37026864474b3",
"msg": [-1, 125, 106, 122, 89, 28, 125, 211, 3, 144, 99, 194, 234, 2, 199],
"ct": [117, 113, 79, 183, 91, 244, 30, 180, 81, 109, 228, 1, 125, 147, 108],
"result": "invalid"
},
{
"tcId": 601,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "18f316e92e027b0d4d068bb94f8dd864",
"tweak": "17d37026864474b3",
"msg": [138, 125, 106, 122, 89, -1, 125, 211, 3, 144, 99, 194, 234, 2, 199],
"ct": [169, 136, 236, 102, 202, 106, 22, 210, 236, 158, 179, 11, 187, 112, 110],
"result": "invalid"
},
{
"tcId": 602,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "18f316e92e027b0d4d068bb94f8dd864",
"tweak": "17d37026864474b3",
"msg": [138, 125, 106, 122, 89, 28, 125, 211, 3, 144, 99, 194, 234, 2, -1],
"ct": [181, 64, 118, 19, 52, 169, 188, 214, 61, 208, 101, 70, 155, 255, 26],
"result": "invalid"
},
{
"tcId": 603,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a698902ea0ade763b6b331e641366570",
"tweak": "5914f746cae7bcfb",
"msg": [256, 131, 132, 7, 103, 135, 91, 23, 216, 233, 28, 125, 104, 5, 251],
"ct": [195, 238, 96, 170, 143, 92, 114, 12, 89, 80, 78, 63, 197, 149, 98],
"result": "invalid"
},
{
"tcId": 604,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a698902ea0ade763b6b331e641366570",
"tweak": "5914f746cae7bcfb",
"msg": [205, 131, 132, 7, 103, 256, 91, 23, 216, 233, 28, 125, 104, 5, 251],
"ct": [70, 158, 35, 250, 202, 131, 170, 24, 214, 90, 117, 13, 53, 196, 165],
"result": "invalid"
},
{
"tcId": 605,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a698902ea0ade763b6b331e641366570",
"tweak": "5914f746cae7bcfb",
"msg": [205, 131, 132, 7, 103, 135, 91, 23, 216, 233, 28, 125, 104, 5, 256],
"ct": [63, 16, 103, 204, 60, 226, 224, 37, 164, 62, 225, 247, 41, 51, 46],
"result": "invalid"
}
]
},
{
"keySize": 128,
"msgSize": 16,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 606,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "48f0d03e41cc55c4b58f737b5acdea32",
"tweak": "30944debca89ca90",
"msg": [23, 92, 120, 187, 226, 72, 209, 221, 243, 2, 175, 52, 160, 156, 60, 85],
"ct": [157, 183, 169, 227, 229, 187, 175, 86, 83, 183, 105, 210, 121, 240, 28, 220],
"result": "valid"
},
{
"tcId": 607,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [25, 1, 245, 223, 198, 225, 220, 84, 92, 214, 15, 238, 114, 170, 121, 94],
"result": "valid"
},
{
"tcId": 608,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [168, 173, 165, 102, 180, 200, 172, 191, 135, 41, 144, 238, 173, 41, 188, 225],
"result": "valid"
},
{
"tcId": 609,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [128, 0, 0, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0, 0],
"ct": [214, 162, 148, 255, 22, 53, 143, 146, 174, 20, 216, 102, 96, 180, 4, 117],
"result": "valid"
},
{
"tcId": 610,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [127, 255, 255, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255, 255],
"ct": [134, 39, 191, 211, 163, 188, 40, 224, 225, 33, 118, 211, 95, 228, 149, 81],
"result": "valid"
},
{
"tcId": 611,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [84, 166, 89, 9, 90, 185, 35, 254, 8, 227, 46, 184, 97, 125, 34, 31],
"ct": [130, 118, 235, 169, 171, 163, 144, 79, 31, 110, 5, 30, 221, 106, 68, 177],
"result": "valid"
},
{
"tcId": 612,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [88, 197, 0, 197, 107, 23, 108, 223, 85, 154, 171, 104, 53, 69, 223, 241],
"ct": [175, 94, 185, 157, 99, 204, 109, 190, 92, 206, 105, 76, 196, 35, 76, 11],
"result": "valid"
},
{
"tcId": 613,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [2, 101, 141, 37, 224, 192, 110, 137, 34, 209, 238, 191, 160, 127, 101, 45],
"ct": [64, 2, 8, 99, 43, 30, 138, 230, 128, 158, 252, 104, 104, 210, 75, 162],
"result": "valid"
},
{
"tcId": 614,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [40, 169, 124, 59, 31, 93, 117, 214, 86, 106, 11, 160, 202, 195, 4, 220],
"ct": [200, 219, 69, 230, 26, 70, 8, 143, 200, 101, 138, 88, 186, 159, 230, 184],
"result": "valid"
},
{
"tcId": 615,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [84, 64, 219, 19, 105, 38, 99, 204, 14, 130, 76, 46, 183, 58, 197, 162],
"ct": [18, 184, 199, 170, 92, 157, 188, 11, 217, 203, 60, 200, 161, 251, 11, 227],
"result": "valid"
},
{
"tcId": 616,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [218, 29, 212, 171, 1, 112, 241, 194, 153, 246, 134, 150, 198, 107, 174, 42],
"ct": [8, 26, 230, 68, 61, 218, 213, 18, 48, 128, 134, 48, 20, 61, 109, 250],
"result": "valid"
},
{
"tcId": 617,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [139, 25, 35, 255, 228, 84, 18, 20, 117, 123, 41, 188, 104, 72, 98, 247],
"ct": [123, 24, 108, 78, 59, 182, 120, 29, 69, 61, 183, 102, 25, 75, 183, 8],
"result": "valid"
},
{
"tcId": 618,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [112, 79, 211, 35, 66, 42, 78, 16, 148, 218, 67, 73, 153, 188, 12, 138],
"ct": [176, 163, 50, 160, 109, 235, 101, 139, 177, 86, 45, 147, 204, 28, 15, 184],
"result": "valid"
},
{
"tcId": 619,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [62, 89, 11, 221, 22, 86, 247, 202, 86, 145, 139, 154, 170, 227, 90, 24],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 620,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [249, 72, 96, 15, 172, 120, 176, 108, 85, 99, 4, 228, 168, 194, 148, 204],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 621,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [202, 166, 30, 3, 6, 67, 220, 127, 118, 255, 54, 215, 24, 73, 139, 192],
"ct": [128, 0, 0, 0, 0, 0, 0, 0, 128, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 622,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "58a68a9bf81642540bcff165563af592",
"tweak": "a4a9513e222fab29",
"msg": [54, 9, 228, 103, 14, 208, 111, 16, 82, 212, 221, 95, 28, 74, 192, 231],
"ct": [127, 255, 255, 255, 255, 255, 255, 255, 127, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 623,
"comment": "y = 0 and (y + a) % radix**8 == 0 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "06763f5715d93a",
"msg": [143, 190, 231, 246, 55, 112, 157, 89, 215, 3, 66, 167, 119, 118, 84, 121],
"ct": [244, 85, 15, 125, 166, 124, 84, 18, 114, 241, 6, 95, 136, 25, 242, 215],
"result": "valid"
},
{
"tcId": 624,
"comment": "y = 0 and a = 1 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "06763f5715d93a",
"msg": [140, 178, 250, 205, 73, 68, 13, 172, 226, 3, 243, 247, 16, 209, 220, 136],
"ct": [77, 67, 51, 236, 24, 166, 229, 168, 129, 219, 55, 247, 174, 48, 170, 189],
"result": "valid"
},
{
"tcId": 625,
"comment": "y = 0 and a has large Hamming weight in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "06763f5715d93a",
"msg": [176, 180, 234, 179, 182, 27, 225, 83, 154, 5, 38, 142, 205, 174, 242, 232],
"ct": [155, 48, 65, 150, 75, 52, 186, 2, 177, 250, 231, 57, 147, 67, 166, 13],
"result": "valid"
},
{
"tcId": 626,
"comment": "y = 0 and (y + a) % radix**8 is maximal in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "06763f5715d93a",
"msg": [172, 221, 46, 82, 245, 54, 55, 96, 169, 205, 213, 233, 65, 42, 237, 44],
"ct": [104, 242, 161, 153, 103, 137, 191, 43, 129, 218, 84, 35, 88, 246, 81, 65],
"result": "valid"
},
{
"tcId": 627,
"comment": "y = 1 and a = 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "b87ffd1b31a62a",
"msg": [103, 226, 10, 78, 197, 16, 163, 108, 124, 58, 229, 68, 5, 206, 148, 28],
"ct": [150, 253, 135, 161, 192, 236, 204, 205, 152, 149, 166, 31, 67, 130, 159, 36],
"result": "valid"
},
{
"tcId": 628,
"comment": "y = 1 and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "b87ffd1b31a62a",
"msg": [253, 106, 227, 30, 43, 226, 105, 119, 134, 179, 42, 36, 124, 89, 34, 38],
"ct": [199, 75, 33, 181, 167, 205, 174, 75, 61, 2, 156, 249, 217, 223, 180, 238],
"result": "valid"
},
{
"tcId": 629,
"comment": "y = 1 and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "b87ffd1b31a62a",
"msg": [218, 232, 115, 95, 228, 133, 171, 4, 201, 88, 123, 240, 58, 33, 66, 243],
"ct": [203, 181, 119, 231, 247, 222, 72, 254, 202, 236, 158, 143, 5, 136, 60, 19],
"result": "valid"
},
{
"tcId": 630,
"comment": "y = 1 and (y + a) % radix**8 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "b87ffd1b31a62a",
"msg": [144, 99, 196, 113, 108, 10, 75, 61, 98, 90, 173, 221, 251, 167, 20, 196],
"ct": [79, 100, 81, 94, 235, 240, 189, 151, 69, 244, 179, 31, 208, 177, 235, 6],
"result": "valid"
},
{
"tcId": 631,
"comment": "y = 1 and (y + a) % radix**8 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "b87ffd1b31a62a",
"msg": [85, 67, 173, 234, 186, 154, 218, 141, 73, 206, 49, 241, 112, 143, 231, 83],
"ct": [203, 215, 50, 224, 107, 75, 231, 28, 58, 230, 77, 197, 158, 215, 17, 109],
"result": "valid"
},
{
"tcId": 632,
"comment": "y is maximal and (y + a) % radix**8 is maximal in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "16a574d6d93c4e",
"msg": [14, 160, 121, 72, 128, 225, 192, 112, 219, 175, 32, 24, 211, 34, 201, 2],
"ct": [100, 89, 47, 183, 116, 112, 124, 88, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 633,
"comment": "y is maximal and (y + a) % radix**8 == 0 in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "16a574d6d93c4e",
"msg": [208, 76, 217, 46, 115, 93, 182, 26, 225, 94, 95, 215, 72, 122, 243, 21],
"ct": [100, 89, 47, 183, 116, 112, 124, 88, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 634,
"comment": "y is maximal and a has large Hamming weight in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "16a574d6d93c4e",
"msg": [12, 54, 82, 164, 105, 255, 157, 244, 86, 114, 196, 142, 146, 144, 196, 244],
"ct": [100, 89, 47, 183, 116, 112, 124, 88, 127, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 635,
"comment": "y is maximal and a is maximal in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "16a574d6d93c4e",
"msg": [43, 185, 35, 33, 17, 1, 139, 89, 44, 209, 198, 241, 86, 9, 53, 187],
"ct": [100, 89, 47, 183, 116, 112, 124, 88, 255, 255, 255, 255, 255, 255, 255, 254],
"result": "valid"
},
{
"tcId": 636,
"comment": "y is edge case for modular reduction and a = 0 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "bca6b58bb55962",
"msg": [205, 255, 29, 101, 109, 227, 175, 126, 73, 127, 203, 215, 174, 139, 212, 171],
"ct": [2, 122, 122, 212, 49, 206, 103, 81, 136, 205, 79, 137, 248, 136, 210, 213],
"result": "valid"
},
{
"tcId": 637,
"comment": "y is edge case for modular reduction and a = 1 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "bca6b58bb55962",
"msg": [189, 54, 147, 98, 153, 181, 42, 161, 56, 209, 16, 59, 80, 235, 182, 74],
"ct": [118, 112, 188, 184, 170, 248, 23, 27, 78, 198, 240, 249, 213, 76, 105, 249],
"result": "valid"
},
{
"tcId": 638,
"comment": "y is edge case for modular reduction and (y + a) % radix**8 is maximal in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "bca6b58bb55962",
"msg": [5, 52, 64, 154, 218, 149, 35, 113, 248, 24, 246, 107, 141, 88, 17, 105],
"ct": [219, 108, 153, 254, 244, 184, 5, 178, 243, 248, 249, 144, 136, 52, 196, 174],
"result": "valid"
},
{
"tcId": 639,
"comment": "y is edge case for modular reduction and (y + a) % radix**8 == 0 in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "bca6b58bb55962",
"msg": [150, 126, 180, 152, 135, 75, 212, 174, 224, 16, 205, 160, 26, 113, 5, 247],
"ct": [167, 116, 196, 216, 188, 27, 82, 84, 9, 226, 140, 26, 199, 87, 96, 72],
"result": "valid"
},
{
"tcId": 640,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "bca6b58bb55962",
"msg": [232, 159, 234, 9, 222, 184, 65, 76, 16, 45, 146, 46, 161, 161, 56, 62],
"ct": [2, 139, 178, 156, 219, 39, 54, 61, 183, 217, 63, 7, 44, 76, 169, 187],
"result": "valid"
},
{
"tcId": 641,
"comment": "y is edge case for modular reduction and a is maximal in round 7",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "bca6b58bb55962",
"msg": [193, 217, 128, 170, 12, 101, 102, 67, 216, 221, 9, 184, 20, 38, 174, 141],
"ct": [144, 53, 58, 232, 97, 77, 142, 2, 210, 147, 74, 175, 21, 165, 105, 80],
"result": "valid"
},
{
"tcId": 642,
"comment": "y is maximal after modular reduction and (y + a) % radix**8 is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "5373f51848e549",
"msg": [247, 162, 233, 129, 40, 231, 122, 143, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [68, 92, 51, 15, 252, 232, 75, 96, 123, 94, 11, 22, 31, 249, 122, 181],
"result": "valid"
},
{
"tcId": 643,
"comment": "y is maximal after modular reduction and (y + a) % radix**8 == 0 in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "5373f51848e549",
"msg": [251, 247, 6, 85, 27, 220, 223, 214, 0, 0, 0, 0, 0, 0, 0, 1],
"ct": [130, 166, 185, 23, 23, 51, 93, 137, 54, 185, 179, 158, 36, 125, 88, 241],
"result": "valid"
},
{
"tcId": 644,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "5373f51848e549",
"msg": [74, 200, 76, 227, 103, 255, 107, 250, 128, 0, 0, 0, 0, 0, 0, 0],
"ct": [29, 118, 105, 53, 235, 194, 30, 192, 103, 175, 70, 89, 70, 48, 148, 29],
"result": "valid"
},
{
"tcId": 645,
"comment": "y is maximal after modular reduction and a is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "ce2295b38289779ad19a532cd6be845b",
"tweak": "5373f51848e549",
"msg": [225, 179, 12, 54, 148, 132, 214, 192, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [67, 114, 133, 132, 98, 71, 150, 101, 220, 247, 227, 5, 224, 89, 38, 27],
"result": "valid"
},
{
"tcId": 646,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "c3a8f68c88eeea1a255db6a7e012ec22",
"tweak": "a841e8a1819dfb69",
"msg": [-1, 147, 27, 2, 108, 58, 21, 80, 217, 147, 241, 40, 238, 27, 69, 144],
"ct": [211, 248, 66, 100, 119, 186, 88, 56, 37, 40, 192, 62, 141, 121, 162, 77],
"result": "invalid"
},
{
"tcId": 647,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "c3a8f68c88eeea1a255db6a7e012ec22",
"tweak": "a841e8a1819dfb69",
"msg": [30, 147, 27, 2, 108, -1, 21, 80, 217, 147, 241, 40, 238, 27, 69, 144],
"ct": [121, 238, 123, 35, 67, 157, 222, 83, 8, 117, 129, 41, 19, 182, 213, 223],
"result": "invalid"
},
{
"tcId": 648,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "c3a8f68c88eeea1a255db6a7e012ec22",
"tweak": "a841e8a1819dfb69",
"msg": [30, 147, 27, 2, 108, 58, 21, 80, 217, 147, 241, 40, 238, 27, 69, -1],
"ct": [197, 130, 237, 249, 64, 196, 197, 54, 223, 62, 0, 44, 221, 167, 39, 45],
"result": "invalid"
},
{
"tcId": 649,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "638fd1c3ddf7fc2b4c212e28cd3afd22",
"tweak": "0c4840d96e2d134c",
"msg": [256, 45, 159, 21, 15, 252, 227, 37, 121, 40, 40, 119, 2, 254, 250, 51],
"ct": [220, 36, 156, 67, 63, 224, 141, 35, 72, 92, 2, 35, 206, 195, 60, 177],
"result": "invalid"
},
{
"tcId": 650,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "638fd1c3ddf7fc2b4c212e28cd3afd22",
"tweak": "0c4840d96e2d134c",
"msg": [112, 45, 159, 21, 15, 256, 227, 37, 121, 40, 40, 119, 2, 254, 250, 51],
"ct": [45, 227, 227, 192, 10, 90, 76, 99, 213, 12, 246, 195, 193, 9, 125, 225],
"result": "invalid"
},
{
"tcId": 651,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "638fd1c3ddf7fc2b4c212e28cd3afd22",
"tweak": "0c4840d96e2d134c",
"msg": [112, 45, 159, 21, 15, 252, 227, 37, 121, 40, 40, 119, 2, 254, 250, 256],
"ct": [132, 75, 154, 107, 82, 159, 122, 207, 20, 188, 105, 33, 101, 119, 173, 7],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 3,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 652,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "3c453964f4e42587db3a6de5de00673ede7e17672a4deb84",
"tweak": "fe6290783f11946c",
"msg": [22, 22, 21],
"ct": [221, 225, 250],
"result": "valid"
},
{
"tcId": 653,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [0, 0, 0],
"ct": [227, 86, 93],
"result": "valid"
},
{
"tcId": 654,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [255, 255, 255],
"ct": [123, 129, 81],
"result": "valid"
},
{
"tcId": 655,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [128, 128, 0],
"ct": [7, 254, 182],
"result": "valid"
},
{
"tcId": 656,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [127, 127, 255],
"ct": [19, 149, 204],
"result": "valid"
},
{
"tcId": 657,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [122, 203, 177],
"ct": [183, 109, 1],
"result": "valid"
},
{
"tcId": 658,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [241, 180, 14],
"ct": [1, 190, 1],
"result": "valid"
},
{
"tcId": 659,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [13, 190, 36],
"ct": [104, 111, 51],
"result": "valid"
},
{
"tcId": 660,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [216, 241, 142],
"ct": [238, 88, 224],
"result": "valid"
},
{
"tcId": 661,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [242, 228, 215],
"ct": [135, 17, 189],
"result": "valid"
},
{
"tcId": 662,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [56, 62, 19],
"ct": [145, 180, 246],
"result": "valid"
},
{
"tcId": 663,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [248, 128, 17],
"ct": [218, 73, 221],
"result": "valid"
},
{
"tcId": 664,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [4, 85, 53],
"ct": [125, 245, 162],
"result": "valid"
},
{
"tcId": 665,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [200, 249, 15],
"ct": [0, 0, 0],
"result": "valid"
},
{
"tcId": 666,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [147, 239, 211],
"ct": [255, 255, 255],
"result": "valid"
},
{
"tcId": 667,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [117, 27, 18],
"ct": [128, 128, 0],
"result": "valid"
},
{
"tcId": 668,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "855d42c74c42d558846bf7a6fc05bb8bccce83bd48fb1614",
"tweak": "ed9b18d990ce1f78",
"msg": [251, 53, 203],
"ct": [127, 127, 255],
"result": "valid"
},
{
"tcId": 669,
"comment": "y = 0 and (y + a) % radix == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "9992c9d1087bd40fd16382e2db",
"msg": [160, 208, 127],
"ct": [0, 168, 110],
"result": "valid"
},
{
"tcId": 670,
"comment": "y = 0 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "9992c9d1087bd40fd16382e2db",
"msg": [61, 103, 194],
"ct": [1, 216, 209],
"result": "valid"
},
{
"tcId": 671,
"comment": "y = 0 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "9992c9d1087bd40fd16382e2db",
"msg": [35, 103, 125],
"ct": [128, 59, 50],
"result": "valid"
},
{
"tcId": 672,
"comment": "y = 0 and (y + a) % radix is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "9992c9d1087bd40fd16382e2db",
"msg": [61, 93, 0],
"ct": [255, 32, 56],
"result": "valid"
},
{
"tcId": 673,
"comment": "y = 1 and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "c0bb2e2ff067ab8a63039db451",
"msg": [150, 192, 21],
"ct": [1, 67, 168],
"result": "valid"
},
{
"tcId": 674,
"comment": "y = 1 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "c0bb2e2ff067ab8a63039db451",
"msg": [177, 136, 110],
"ct": [2, 159, 83],
"result": "valid"
},
{
"tcId": 675,
"comment": "y = 1 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "c0bb2e2ff067ab8a63039db451",
"msg": [21, 126, 123],
"ct": [129, 153, 15],
"result": "valid"
},
{
"tcId": 676,
"comment": "y = 1 and (y + a) % radix is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "c0bb2e2ff067ab8a63039db451",
"msg": [124, 28, 194],
"ct": [255, 22, 162],
"result": "valid"
},
{
"tcId": 677,
"comment": "y = 1 and (y + a) % radix == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "c0bb2e2ff067ab8a63039db451",
"msg": [203, 183, 97],
"ct": [0, 16, 39],
"result": "valid"
},
{
"tcId": 678,
"comment": "y is maximal and (y + a) % radix is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "fd3e4bb45bbfaef8d92c9f2966",
"msg": [216, 169, 207],
"ct": [1, 68, 233],
"result": "valid"
},
{
"tcId": 679,
"comment": "y is maximal and (y + a) % radix == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "fd3e4bb45bbfaef8d92c9f2966",
"msg": [192, 123, 47],
"ct": [219, 233, 94],
"result": "valid"
},
{
"tcId": 680,
"comment": "y is maximal and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "fd3e4bb45bbfaef8d92c9f2966",
"msg": [176, 255, 14],
"ct": [182, 215, 168],
"result": "valid"
},
{
"tcId": 681,
"comment": "y is maximal and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "fd3e4bb45bbfaef8d92c9f2966",
"msg": [115, 111, 229],
"ct": [58, 198, 115],
"result": "valid"
},
{
"tcId": 682,
"comment": "y is edge case for modular reduction and (y + a) % radix == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "a341f37b81fa067a169fd0bba3",
"msg": [93, 82, 10],
"ct": [97, 17, 92],
"result": "valid"
},
{
"tcId": 683,
"comment": "y is edge case for modular reduction and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "a341f37b81fa067a169fd0bba3",
"msg": [141, 163, 134],
"ct": [155, 204, 63],
"result": "valid"
},
{
"tcId": 684,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "a341f37b81fa067a169fd0bba3",
"msg": [253, 123, 213],
"ct": [84, 204, 62],
"result": "valid"
},
{
"tcId": 685,
"comment": "y is edge case for modular reduction and (y + a) % radix is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "a341f37b81fa067a169fd0bba3",
"msg": [1, 124, 212],
"ct": [3, 100, 63],
"result": "valid"
},
{
"tcId": 686,
"comment": "y is maximal after modular reduction and (y + a) % radix is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "5a00e78e3936dbbea8b9ca256a",
"msg": [74, 81, 24],
"ct": [176, 82, 77],
"result": "valid"
},
{
"tcId": 687,
"comment": "y is maximal after modular reduction and (y + a) % radix == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "5a00e78e3936dbbea8b9ca256a",
"msg": [65, 38, 136],
"ct": [100, 155, 39],
"result": "valid"
},
{
"tcId": 688,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "5a00e78e3936dbbea8b9ca256a",
"msg": [22, 120, 148],
"ct": [71, 158, 78],
"result": "valid"
},
{
"tcId": 689,
"comment": "y is maximal after modular reduction and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "df06ade31531cea420fef404e1069313741f2c52a4bcc716",
"tweak": "5a00e78e3936dbbea8b9ca256a",
"msg": [208, 180, 40],
"ct": [124, 169, 34],
"result": "valid"
},
{
"tcId": 690,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "1d87dad9a6a01c9d03fe38f0651e8eb7845f87b200803640",
"tweak": "e41baa4ddf050d00",
"msg": [-1, 30, 101],
"ct": [4, 245, 49],
"result": "invalid"
},
{
"tcId": 691,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "1d87dad9a6a01c9d03fe38f0651e8eb7845f87b200803640",
"tweak": "e41baa4ddf050d00",
"msg": [220, 30, -1],
"ct": [228, 160, 198],
"result": "invalid"
},
{
"tcId": 692,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "e1f8bceb82c2fd7cf5fc1d860f36b6af4ff370d5995e6b31",
"tweak": "451386001a077edc",
"msg": [256, 255, 44],
"ct": [214, 123, 61],
"result": "invalid"
},
{
"tcId": 693,
"comment": "can't convert negative int to unsigned",
"flags": [
"InvalidPlaintext"
],
"key": "1d87dad9a6a01c9d03fe38f0651e8eb7845f87b200803640",
"tweak": "e41baa4ddf050d00",
"msg": [220, -1, 101],
"ct": [],
"result": "invalid"
},
{
"tcId": 694,
"comment": "int too big to convert",
"flags": [
"InvalidPlaintext"
],
"key": "e1f8bceb82c2fd7cf5fc1d860f36b6af4ff370d5995e6b31",
"tweak": "451386001a077edc",
"msg": [97, 256, 44],
"ct": [],
"result": "invalid"
},
{
"tcId": 695,
"comment": "int too big to convert",
"flags": [
"InvalidPlaintext"
],
"key": "e1f8bceb82c2fd7cf5fc1d860f36b6af4ff370d5995e6b31",
"tweak": "451386001a077edc",
"msg": [97, 255, 256],
"ct": [],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 4,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 696,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "f9626066827656fe088a7bf737c1cc1a3a3adc7015ffee7f",
"tweak": "bc6d9ff72c250366",
"msg": [232, 15, 97, 38],
"ct": [47, 239, 244, 57],
"result": "valid"
},
{
"tcId": 697,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [0, 0, 0, 0],
"ct": [13, 237, 31, 171],
"result": "valid"
},
{
"tcId": 698,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [255, 255, 255, 255],
"ct": [178, 190, 82, 101],
"result": "valid"
},
{
"tcId": 699,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [128, 0, 128, 0],
"ct": [206, 188, 131, 241],
"result": "valid"
},
{
"tcId": 700,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [127, 255, 127, 255],
"ct": [140, 244, 210, 220],
"result": "valid"
},
{
"tcId": 701,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [158, 193, 169, 85],
"ct": [185, 192, 145, 51],
"result": "valid"
},
{
"tcId": 702,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [25, 119, 161, 173],
"ct": [70, 59, 239, 87],
"result": "valid"
},
{
"tcId": 703,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [42, 59, 171, 234],
"ct": [177, 212, 244, 240],
"result": "valid"
},
{
"tcId": 704,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [132, 104, 14, 10],
"ct": [168, 155, 206, 111],
"result": "valid"
},
{
"tcId": 705,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [226, 216, 106, 50],
"ct": [47, 218, 83, 55],
"result": "valid"
},
{
"tcId": 706,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [17, 84, 124, 203],
"ct": [10, 53, 144, 10],
"result": "valid"
},
{
"tcId": 707,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [139, 62, 34, 79],
"ct": [150, 47, 47, 46],
"result": "valid"
},
{
"tcId": 708,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [230, 179, 119, 31],
"ct": [209, 223, 211, 242],
"result": "valid"
},
{
"tcId": 709,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [174, 12, 31, 54],
"ct": [0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 710,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [169, 231, 25, 223],
"ct": [255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 711,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [205, 155, 20, 25],
"ct": [128, 0, 128, 0],
"result": "valid"
},
{
"tcId": 712,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "449d31bba4be09dfd5a4523610236b6c80775dfa965a70dc",
"tweak": "f7e902be3a607c1c",
"msg": [211, 89, 156, 202],
"ct": [127, 255, 127, 255],
"result": "valid"
},
{
"tcId": 713,
"comment": "y = 0 and (y + a) % radix**2 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "ad2c15125b9180c97ce6131732",
"msg": [33, 38, 159, 55],
"ct": [9, 218, 75, 160],
"result": "valid"
},
{
"tcId": 714,
"comment": "y = 0 and a = 1 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "ad2c15125b9180c97ce6131732",
"msg": [49, 215, 197, 189],
"ct": [179, 56, 244, 47],
"result": "valid"
},
{
"tcId": 715,
"comment": "y = 0 and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "ad2c15125b9180c97ce6131732",
"msg": [134, 241, 227, 93],
"ct": [101, 159, 248, 50],
"result": "valid"
},
{
"tcId": 716,
"comment": "y = 0 and (y + a) % radix**2 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "ad2c15125b9180c97ce6131732",
"msg": [110, 250, 174, 61],
"ct": [14, 228, 8, 85],
"result": "valid"
},
{
"tcId": 717,
"comment": "y = 1 and a = 0 in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "e0dafe5f0a32d7fe53a24f52dc",
"msg": [0, 111, 172, 20],
"ct": [251, 199, 0, 1],
"result": "valid"
},
{
"tcId": 718,
"comment": "y = 1 and a = 1 in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "e0dafe5f0a32d7fe53a24f52dc",
"msg": [91, 80, 2, 72],
"ct": [251, 199, 0, 2],
"result": "valid"
},
{
"tcId": 719,
"comment": "y = 1 and a has large Hamming weight in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "e0dafe5f0a32d7fe53a24f52dc",
"msg": [197, 181, 117, 73],
"ct": [251, 199, 128, 1],
"result": "valid"
},
{
"tcId": 720,
"comment": "y = 1 and (y + a) % radix**2 is maximal in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "e0dafe5f0a32d7fe53a24f52dc",
"msg": [209, 69, 48, 177],
"ct": [251, 199, 255, 255],
"result": "valid"
},
{
"tcId": 721,
"comment": "y = 1 and (y + a) % radix**2 == 0 in round 9",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "e0dafe5f0a32d7fe53a24f52dc",
"msg": [99, 220, 210, 190],
"ct": [251, 199, 0, 0],
"result": "valid"
},
{
"tcId": 722,
"comment": "y is maximal and (y + a) % radix**2 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "3381336ba3d2df23fad792f8da",
"msg": [111, 126, 73, 111],
"ct": [171, 223, 116, 184],
"result": "valid"
},
{
"tcId": 723,
"comment": "y is maximal and (y + a) % radix**2 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "3381336ba3d2df23fad792f8da",
"msg": [38, 233, 107, 161],
"ct": [20, 97, 81, 245],
"result": "valid"
},
{
"tcId": 724,
"comment": "y is maximal and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "3381336ba3d2df23fad792f8da",
"msg": [103, 169, 112, 26],
"ct": [238, 226, 247, 27],
"result": "valid"
},
{
"tcId": 725,
"comment": "y is maximal and a is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "3381336ba3d2df23fad792f8da",
"msg": [78, 5, 10, 20],
"ct": [133, 12, 240, 106],
"result": "valid"
},
{
"tcId": 726,
"comment": "y is edge case for modular reduction and a = 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "adb53f85e65db8c63116554d5b",
"msg": [2, 242, 70, 217],
"ct": [126, 145, 67, 46],
"result": "valid"
},
{
"tcId": 727,
"comment": "y is edge case for modular reduction and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "adb53f85e65db8c63116554d5b",
"msg": [65, 156, 53, 56],
"ct": [252, 56, 213, 15],
"result": "valid"
},
{
"tcId": 728,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "adb53f85e65db8c63116554d5b",
"msg": [41, 219, 205, 114],
"ct": [251, 186, 57, 37],
"result": "valid"
},
{
"tcId": 729,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "adb53f85e65db8c63116554d5b",
"msg": [52, 4, 116, 90],
"ct": [225, 105, 168, 150],
"result": "valid"
},
{
"tcId": 730,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "adb53f85e65db8c63116554d5b",
"msg": [202, 13, 92, 77],
"ct": [203, 200, 147, 103],
"result": "valid"
},
{
"tcId": 731,
"comment": "y is edge case for modular reduction and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "adb53f85e65db8c63116554d5b",
"msg": [233, 249, 213, 254],
"ct": [61, 44, 237, 134],
"result": "valid"
},
{
"tcId": 732,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "cdaa98f44b7ccc33071118ce49",
"msg": [0, 0, 177, 92],
"ct": [253, 1, 150, 98],
"result": "valid"
},
{
"tcId": 733,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "cdaa98f44b7ccc33071118ce49",
"msg": [0, 1, 177, 92],
"ct": [53, 84, 37, 250],
"result": "valid"
},
{
"tcId": 734,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "cdaa98f44b7ccc33071118ce49",
"msg": [128, 0, 177, 92],
"ct": [149, 19, 179, 67],
"result": "valid"
},
{
"tcId": 735,
"comment": "y is maximal after modular reduction and a is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "cc15ff8fc1e35214d16a3a58278c62123d56a1b8b87fc1b3",
"tweak": "cdaa98f44b7ccc33071118ce49",
"msg": [255, 255, 177, 92],
"ct": [41, 205, 184, 101],
"result": "valid"
},
{
"tcId": 736,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ecd2c32bd1b77097a477742649b384243714a567a0f67eb9",
"tweak": "2cd30b0db6e83292",
"msg": [-1, 193, 214, 18],
"ct": [54, 59, 179, 10],
"result": "invalid"
},
{
"tcId": 737,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ecd2c32bd1b77097a477742649b384243714a567a0f67eb9",
"tweak": "2cd30b0db6e83292",
"msg": [130, -1, 214, 18],
"ct": [62, 169, 208, 64],
"result": "invalid"
},
{
"tcId": 738,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "ecd2c32bd1b77097a477742649b384243714a567a0f67eb9",
"tweak": "2cd30b0db6e83292",
"msg": [130, 193, 214, -1],
"ct": [200, 189, 209, 0],
"result": "invalid"
},
{
"tcId": 739,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "4ecf396112fec6962167b83ca0b5a933c4aad2e207f3a125",
"tweak": "1f86874323f09a25",
"msg": [256, 146, 77, 216],
"ct": [221, 168, 167, 70],
"result": "invalid"
},
{
"tcId": 740,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "4ecf396112fec6962167b83ca0b5a933c4aad2e207f3a125",
"tweak": "1f86874323f09a25",
"msg": [50, 256, 77, 216],
"ct": [117, 146, 113, 244],
"result": "invalid"
},
{
"tcId": 741,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "4ecf396112fec6962167b83ca0b5a933c4aad2e207f3a125",
"tweak": "1f86874323f09a25",
"msg": [50, 146, 77, 256],
"ct": [31, 83, 235, 104],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 5,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 742,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "a6c055a8cba4718f411d1a3d9c9e2051261ce3e369b2fa13",
"tweak": "c5d9512a52de22b7",
"msg": [146, 125, 51, 51, 25],
"ct": [247, 176, 219, 200, 80],
"result": "valid"
},
{
"tcId": 743,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [0, 0, 0, 0, 0],
"ct": [43, 75, 193, 28, 14],
"result": "valid"
},
{
"tcId": 744,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [255, 255, 255, 255, 255],
"ct": [203, 17, 104, 135, 20],
"result": "valid"
},
{
"tcId": 745,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [128, 0, 128, 0, 0],
"ct": [224, 152, 199, 69, 138],
"result": "valid"
},
{
"tcId": 746,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [127, 255, 127, 255, 255],
"ct": [95, 144, 21, 4, 30],
"result": "valid"
},
{
"tcId": 747,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [72, 71, 151, 21, 71],
"ct": [36, 185, 199, 7, 98],
"result": "valid"
},
{
"tcId": 748,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [189, 3, 13, 36, 110],
"ct": [183, 3, 139, 221, 222],
"result": "valid"
},
{
"tcId": 749,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [57, 174, 224, 15, 183],
"ct": [190, 9, 169, 206, 203],
"result": "valid"
},
{
"tcId": 750,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [177, 41, 97, 32, 103],
"ct": [44, 8, 135, 18, 167],
"result": "valid"
},
{
"tcId": 751,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [151, 187, 106, 111, 81],
"ct": [25, 206, 139, 122, 240],
"result": "valid"
},
{
"tcId": 752,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [24, 103, 116, 107, 135],
"ct": [147, 171, 111, 245, 83],
"result": "valid"
},
{
"tcId": 753,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [177, 34, 185, 156, 235],
"ct": [158, 99, 16, 2, 126],
"result": "valid"
},
{
"tcId": 754,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [209, 213, 232, 50, 67],
"ct": [117, 239, 164, 42, 102],
"result": "valid"
},
{
"tcId": 755,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [152, 157, 123, 113, 29],
"ct": [0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 756,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [238, 91, 111, 254, 143],
"ct": [255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 757,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [63, 39, 131, 2, 98],
"ct": [128, 0, 128, 0, 0],
"result": "valid"
},
{
"tcId": 758,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "96fc2e2e2fba26508b73927dea1a42c8edcaa1e9d752f84e",
"tweak": "bdbf3377d69e6a6e",
"msg": [38, 67, 163, 249, 120],
"ct": [127, 255, 127, 255, 255],
"result": "valid"
},
{
"tcId": 759,
"comment": "y = 0 and (y + a) % radix**2 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "9273dead2537ba4dfe4826f2",
"msg": [34, 60, 87, 103, 162],
"ct": [104, 168, 17, 223, 187],
"result": "valid"
},
{
"tcId": 760,
"comment": "y = 0 and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "9273dead2537ba4dfe4826f2",
"msg": [215, 118, 183, 152, 224],
"ct": [60, 31, 253, 39, 209],
"result": "valid"
},
{
"tcId": 761,
"comment": "y = 0 and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "9273dead2537ba4dfe4826f2",
"msg": [247, 23, 180, 55, 215],
"ct": [153, 119, 122, 83, 80],
"result": "valid"
},
{
"tcId": 762,
"comment": "y = 0 and (y + a) % radix**2 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "9273dead2537ba4dfe4826f2",
"msg": [190, 134, 55, 114, 153],
"ct": [18, 23, 209, 123, 18],
"result": "valid"
},
{
"tcId": 763,
"comment": "y = 1 and a = 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "fb61976146ba3551af7ccd85",
"msg": [117, 193, 157, 100, 75],
"ct": [68, 85, 76, 237, 37],
"result": "valid"
},
{
"tcId": 764,
"comment": "y = 1 and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "fb61976146ba3551af7ccd85",
"msg": [216, 60, 245, 211, 84],
"ct": [123, 184, 19, 15, 128],
"result": "valid"
},
{
"tcId": 765,
"comment": "y = 1 and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "fb61976146ba3551af7ccd85",
"msg": [239, 164, 9, 81, 54],
"ct": [63, 200, 219, 63, 236],
"result": "valid"
},
{
"tcId": 766,
"comment": "y = 1 and (y + a) % radix**2 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "fb61976146ba3551af7ccd85",
"msg": [230, 168, 132, 185, 46],
"ct": [190, 232, 164, 53, 240],
"result": "valid"
},
{
"tcId": 767,
"comment": "y = 1 and (y + a) % radix**2 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "fb61976146ba3551af7ccd85",
"msg": [43, 149, 137, 104, 89],
"ct": [185, 98, 6, 149, 252],
"result": "valid"
},
{
"tcId": 768,
"comment": "y is maximal and (y + a) % radix**2 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "cca3749141af9e6de0634cdf",
"msg": [169, 13, 169, 14, 145],
"ct": [79, 11, 107, 2, 15],
"result": "valid"
},
{
"tcId": 769,
"comment": "y is maximal and (y + a) % radix**2 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "cca3749141af9e6de0634cdf",
"msg": [121, 59, 180, 214, 151],
"ct": [154, 136, 136, 180, 170],
"result": "valid"
},
{
"tcId": 770,
"comment": "y is maximal and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "cca3749141af9e6de0634cdf",
"msg": [205, 157, 201, 240, 43],
"ct": [236, 250, 124, 123, 158],
"result": "valid"
},
{
"tcId": 771,
"comment": "y is maximal and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "cca3749141af9e6de0634cdf",
"msg": [176, 120, 185, 176, 132],
"ct": [47, 17, 12, 104, 179],
"result": "valid"
},
{
"tcId": 772,
"comment": "y is edge case for modular reduction and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "db5ff81d581cf94d2cf70a74",
"msg": [168, 170, 55, 68, 244],
"ct": [255, 0, 76, 86, 242],
"result": "valid"
},
{
"tcId": 773,
"comment": "y is edge case for modular reduction and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "db5ff81d581cf94d2cf70a74",
"msg": [136, 12, 228, 120, 194],
"ct": [255, 1, 88, 200, 18],
"result": "valid"
},
{
"tcId": 774,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "db5ff81d581cf94d2cf70a74",
"msg": [130, 232, 100, 239, 245],
"ct": [255, 255, 203, 82, 47],
"result": "valid"
},
{
"tcId": 775,
"comment": "y is edge case for modular reduction and (y + a) % radix**2 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "db5ff81d581cf94d2cf70a74",
"msg": [240, 82, 227, 99, 211],
"ct": [0, 0, 81, 249, 155],
"result": "valid"
},
{
"tcId": 776,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "db5ff81d581cf94d2cf70a74",
"msg": [220, 174, 15, 241, 56],
"ct": [127, 0, 152, 23, 26],
"result": "valid"
},
{
"tcId": 777,
"comment": "y is edge case for modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "db5ff81d581cf94d2cf70a74",
"msg": [151, 219, 224, 25, 196],
"ct": [254, 255, 64, 144, 229],
"result": "valid"
},
{
"tcId": 778,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "1232d7e4c545cee134400ac4",
"msg": [78, 83, 34, 93, 149],
"ct": [225, 86, 98, 151, 172],
"result": "valid"
},
{
"tcId": 779,
"comment": "y is maximal after modular reduction and (y + a) % radix**2 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "1232d7e4c545cee134400ac4",
"msg": [48, 234, 208, 60, 145],
"ct": [111, 162, 76, 118, 113],
"result": "valid"
},
{
"tcId": 780,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "1232d7e4c545cee134400ac4",
"msg": [2, 5, 40, 219, 243],
"ct": [104, 103, 42, 229, 146],
"result": "valid"
},
{
"tcId": 781,
"comment": "y is maximal after modular reduction and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "47ba0d5030df62cede1d0ed4f4e86b418ad54d330cb37894",
"tweak": "1232d7e4c545cee134400ac4",
"msg": [83, 214, 136, 204, 168],
"ct": [244, 109, 122, 142, 49],
"result": "valid"
},
{
"tcId": 782,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "7d1dd7c87db4b2ad95137c34ca1baac73b195c0ede42becd",
"tweak": "2ae737de3b2aa4b0",
"msg": [-1, 28, 81, 247, 43],
"ct": [207, 234, 101, 6, 217],
"result": "invalid"
},
{
"tcId": 783,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "7d1dd7c87db4b2ad95137c34ca1baac73b195c0ede42becd",
"tweak": "2ae737de3b2aa4b0",
"msg": [246, -1, 81, 247, 43],
"ct": [183, 68, 68, 61, 223],
"result": "invalid"
},
{
"tcId": 784,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "7d1dd7c87db4b2ad95137c34ca1baac73b195c0ede42becd",
"tweak": "2ae737de3b2aa4b0",
"msg": [246, 28, 81, 247, -1],
"ct": [165, 3, 251, 140, 230],
"result": "invalid"
},
{
"tcId": 785,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "cd20a2cd69037694f413fe175daa45605af1b793f3636d9a",
"tweak": "5669b3e9033ceea8",
"msg": [256, 40, 228, 240, 34],
"ct": [35, 181, 109, 76, 195],
"result": "invalid"
},
{
"tcId": 786,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "cd20a2cd69037694f413fe175daa45605af1b793f3636d9a",
"tweak": "5669b3e9033ceea8",
"msg": [242, 256, 228, 240, 34],
"ct": [39, 233, 114, 148, 222],
"result": "invalid"
},
{
"tcId": 787,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "cd20a2cd69037694f413fe175daa45605af1b793f3636d9a",
"tweak": "5669b3e9033ceea8",
"msg": [242, 40, 228, 240, 256],
"ct": [169, 66, 211, 81, 90],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 6,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 788,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "4d7429ddc83d27457a152d4981aab3ddf56dd2410647ad47",
"tweak": "ada060734534dfa1",
"msg": [68, 145, 217, 61, 177, 3],
"ct": [77, 181, 48, 102, 201, 90],
"result": "valid"
},
{
"tcId": 789,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [0, 0, 0, 0, 0, 0],
"ct": [179, 102, 60, 236, 10, 16],
"result": "valid"
},
{
"tcId": 790,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [255, 255, 255, 255, 255, 255],
"ct": [212, 54, 18, 45, 142, 230],
"result": "valid"
},
{
"tcId": 791,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [128, 0, 0, 128, 0, 0],
"ct": [142, 132, 5, 153, 181, 242],
"result": "valid"
},
{
"tcId": 792,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [127, 255, 255, 127, 255, 255],
"ct": [211, 146, 102, 139, 51, 145],
"result": "valid"
},
{
"tcId": 793,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [218, 102, 188, 104, 160, 225],
"ct": [30, 112, 229, 94, 193, 138],
"result": "valid"
},
{
"tcId": 794,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [171, 40, 88, 217, 168, 165],
"ct": [152, 30, 117, 152, 73, 255],
"result": "valid"
},
{
"tcId": 795,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [71, 10, 202, 116, 147, 147],
"ct": [120, 89, 127, 19, 91, 49],
"result": "valid"
},
{
"tcId": 796,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [36, 73, 177, 125, 215, 245],
"ct": [120, 96, 205, 42, 236, 119],
"result": "valid"
},
{
"tcId": 797,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [152, 222, 252, 183, 247, 12],
"ct": [74, 68, 27, 69, 153, 23],
"result": "valid"
},
{
"tcId": 798,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [78, 161, 238, 119, 110, 138],
"ct": [130, 35, 104, 244, 59, 41],
"result": "valid"
},
{
"tcId": 799,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [49, 226, 148, 80, 142, 244],
"ct": [105, 234, 91, 147, 245, 234],
"result": "valid"
},
{
"tcId": 800,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [4, 41, 70, 51, 25, 109],
"ct": [74, 5, 128, 121, 125, 113],
"result": "valid"
},
{
"tcId": 801,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [222, 236, 127, 16, 105, 118],
"ct": [0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 802,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [164, 38, 54, 70, 180, 86],
"ct": [255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 803,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [59, 156, 247, 18, 42, 113],
"ct": [128, 0, 0, 128, 0, 0],
"result": "valid"
},
{
"tcId": 804,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "fb11ec30c2d9417c1a8e1484073c1d8e73277b92880ff21e",
"tweak": "94045aa1a1f8fef4",
"msg": [144, 67, 86, 2, 118, 178],
"ct": [127, 255, 255, 127, 255, 255],
"result": "valid"
},
{
"tcId": 805,
"comment": "y = 0 and (y + a) % radix**3 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "720dc7b3210da7ed27082d88",
"msg": [78, 186, 195, 244, 31, 19],
"ct": [160, 128, 2, 31, 114, 109],
"result": "valid"
},
{
"tcId": 806,
"comment": "y = 0 and a = 1 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "720dc7b3210da7ed27082d88",
"msg": [132, 45, 181, 139, 127, 222],
"ct": [47, 149, 75, 81, 10, 28],
"result": "valid"
},
{
"tcId": 807,
"comment": "y = 0 and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "720dc7b3210da7ed27082d88",
"msg": [229, 114, 148, 96, 51, 115],
"ct": [29, 202, 111, 100, 86, 6],
"result": "valid"
},
{
"tcId": 808,
"comment": "y = 0 and (y + a) % radix**3 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "720dc7b3210da7ed27082d88",
"msg": [20, 127, 202, 201, 202, 105],
"ct": [119, 144, 136, 72, 104, 123],
"result": "valid"
},
{
"tcId": 809,
"comment": "y = 1 and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "40a542fdce64b9a93c87bbfc",
"msg": [172, 188, 37, 7, 159, 240],
"ct": [0, 0, 1, 184, 118, 124],
"result": "valid"
},
{
"tcId": 810,
"comment": "y = 1 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "40a542fdce64b9a93c87bbfc",
"msg": [6, 209, 208, 252, 32, 160],
"ct": [0, 0, 2, 85, 124, 194],
"result": "valid"
},
{
"tcId": 811,
"comment": "y = 1 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "40a542fdce64b9a93c87bbfc",
"msg": [61, 38, 86, 101, 133, 24],
"ct": [128, 0, 1, 210, 128, 202],
"result": "valid"
},
{
"tcId": 812,
"comment": "y = 1 and (y + a) % radix**3 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "40a542fdce64b9a93c87bbfc",
"msg": [201, 156, 132, 78, 227, 151],
"ct": [255, 255, 255, 213, 135, 195],
"result": "valid"
},
{
"tcId": 813,
"comment": "y = 1 and (y + a) % radix**3 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "40a542fdce64b9a93c87bbfc",
"msg": [14, 214, 211, 72, 160, 81],
"ct": [0, 0, 0, 154, 82, 14],
"result": "valid"
},
{
"tcId": 814,
"comment": "y is maximal and (y + a) % radix**3 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "97a61ac16831dfe867bc9196",
"msg": [50, 28, 228, 99, 49, 55],
"ct": [207, 12, 99, 110, 36, 160],
"result": "valid"
},
{
"tcId": 815,
"comment": "y is maximal and (y + a) % radix**3 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "97a61ac16831dfe867bc9196",
"msg": [157, 157, 17, 139, 52, 34],
"ct": [202, 82, 232, 85, 127, 28],
"result": "valid"
},
{
"tcId": 816,
"comment": "y is maximal and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "97a61ac16831dfe867bc9196",
"msg": [123, 182, 122, 188, 253, 129],
"ct": [0, 44, 90, 247, 125, 51],
"result": "valid"
},
{
"tcId": 817,
"comment": "y is maximal and a is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "97a61ac16831dfe867bc9196",
"msg": [197, 231, 77, 184, 220, 204],
"ct": [211, 4, 36, 210, 219, 174],
"result": "valid"
},
{
"tcId": 818,
"comment": "y is edge case for modular reduction and a = 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "3d79044886a6d51ef257d63a",
"msg": [135, 97, 32, 38, 30, 18],
"ct": [140, 127, 182, 128, 177, 167],
"result": "valid"
},
{
"tcId": 819,
"comment": "y is edge case for modular reduction and a = 1 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "3d79044886a6d51ef257d63a",
"msg": [149, 44, 87, 133, 218, 236],
"ct": [206, 19, 178, 225, 40, 177],
"result": "valid"
},
{
"tcId": 820,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "3d79044886a6d51ef257d63a",
"msg": [88, 196, 21, 233, 149, 35],
"ct": [22, 221, 225, 56, 48, 197],
"result": "valid"
},
{
"tcId": 821,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 == 0 in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "3d79044886a6d51ef257d63a",
"msg": [19, 55, 224, 246, 36, 127],
"ct": [81, 158, 60, 145, 241, 234],
"result": "valid"
},
{
"tcId": 822,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "3d79044886a6d51ef257d63a",
"msg": [81, 158, 117, 170, 160, 35],
"ct": [115, 137, 224, 101, 7, 40],
"result": "valid"
},
{
"tcId": 823,
"comment": "y is edge case for modular reduction and a is maximal in round 5",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "3d79044886a6d51ef257d63a",
"msg": [252, 220, 230, 113, 15, 205],
"ct": [0, 193, 7, 102, 139, 170],
"result": "valid"
},
{
"tcId": 824,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "c7e79cdba5fcbd88271264a9",
"msg": [41, 204, 55, 0, 0, 0],
"ct": [100, 124, 221, 213, 41, 17],
"result": "valid"
},
{
"tcId": 825,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 == 0 in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "c7e79cdba5fcbd88271264a9",
"msg": [243, 120, 197, 0, 0, 1],
"ct": [37, 180, 118, 60, 181, 75],
"result": "valid"
},
{
"tcId": 826,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "c7e79cdba5fcbd88271264a9",
"msg": [239, 33, 134, 128, 0, 0],
"ct": [88, 177, 242, 130, 161, 115],
"result": "valid"
},
{
"tcId": 827,
"comment": "y is maximal after modular reduction and a is maximal in round 1",
"flags": [
"EdgeCasePrf"
],
"key": "554366274f70a25ea36c134016e632c910fb14f397c950ed",
"tweak": "c7e79cdba5fcbd88271264a9",
"msg": [242, 173, 172, 255, 255, 255],
"ct": [154, 198, 57, 184, 127, 209],
"result": "valid"
},
{
"tcId": 828,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "88167c8609d65b4d1f5f83c582b079e4ef7079b329a49fda",
"tweak": "c0b22a647b59d5ca",
"msg": [-1, 140, 28, 203, 198, 238],
"ct": [96, 190, 251, 72, 223, 69],
"result": "invalid"
},
{
"tcId": 829,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "88167c8609d65b4d1f5f83c582b079e4ef7079b329a49fda",
"tweak": "c0b22a647b59d5ca",
"msg": [4, 140, -1, 203, 198, 238],
"ct": [226, 54, 199, 120, 155, 211],
"result": "invalid"
},
{
"tcId": 830,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "88167c8609d65b4d1f5f83c582b079e4ef7079b329a49fda",
"tweak": "c0b22a647b59d5ca",
"msg": [4, 140, 28, 203, 198, -1],
"ct": [202, 145, 106, 187, 11, 42],
"result": "invalid"
},
{
"tcId": 831,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "f8c8fa48565ff3dd3cb5446d273d3dbbc2275f56a7b412eb",
"tweak": "8170339ffce05fd9",
"msg": [256, 72, 169, 94, 183, 230],
"ct": [146, 77, 92, 39, 75, 226],
"result": "invalid"
},
{
"tcId": 832,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "f8c8fa48565ff3dd3cb5446d273d3dbbc2275f56a7b412eb",
"tweak": "8170339ffce05fd9",
"msg": [8, 72, 256, 94, 183, 230],
"ct": [238, 150, 255, 227, 253, 85],
"result": "invalid"
},
{
"tcId": 833,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "f8c8fa48565ff3dd3cb5446d273d3dbbc2275f56a7b412eb",
"tweak": "8170339ffce05fd9",
"msg": [8, 72, 169, 94, 183, 256],
"ct": [77, 80, 250, 178, 242, 253],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 7,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 834,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "87f7c60d04f5313cff17a4e7fad56c33b0afb439939c1ab5",
"tweak": "20e854d3f367ab8e",
"msg": [232, 30, 135, 28, 51, 146, 241],
"ct": [81, 132, 132, 91, 17, 163, 225],
"result": "valid"
},
{
"tcId": 835,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [0, 0, 0, 0, 0, 0, 0],
"ct": [125, 80, 101, 96, 184, 120, 134],
"result": "valid"
},
{
"tcId": 836,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [255, 255, 255, 255, 255, 255, 255],
"ct": [178, 225, 225, 176, 179, 144, 54],
"result": "valid"
},
{
"tcId": 837,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [128, 0, 0, 128, 0, 0, 0],
"ct": [220, 73, 224, 153, 166, 85, 178],
"result": "valid"
},
{
"tcId": 838,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [127, 255, 255, 127, 255, 255, 255],
"ct": [178, 94, 245, 94, 131, 75, 171],
"result": "valid"
},
{
"tcId": 839,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [197, 120, 143, 196, 14, 28, 94],
"ct": [193, 107, 153, 14, 135, 75, 45],
"result": "valid"
},
{
"tcId": 840,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [164, 251, 163, 253, 232, 209, 59],
"ct": [43, 12, 58, 210, 158, 55, 72],
"result": "valid"
},
{
"tcId": 841,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [44, 140, 217, 199, 223, 134, 200],
"ct": [34, 174, 221, 150, 138, 120, 138],
"result": "valid"
},
{
"tcId": 842,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [123, 44, 195, 56, 86, 79, 145],
"ct": [43, 47, 159, 188, 83, 149, 7],
"result": "valid"
},
{
"tcId": 843,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [136, 244, 184, 143, 202, 74, 4],
"ct": [40, 192, 37, 112, 33, 86, 114],
"result": "valid"
},
{
"tcId": 844,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [0, 232, 185, 136, 31, 93, 11],
"ct": [28, 138, 130, 254, 219, 15, 235],
"result": "valid"
},
{
"tcId": 845,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [54, 0, 123, 17, 154, 181, 226],
"ct": [233, 101, 202, 116, 46, 119, 211],
"result": "valid"
},
{
"tcId": 846,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [132, 190, 175, 134, 2, 5, 6],
"ct": [252, 177, 230, 2, 70, 63, 242],
"result": "valid"
},
{
"tcId": 847,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [55, 216, 54, 176, 227, 38, 94],
"ct": [0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 848,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [179, 20, 101, 215, 149, 147, 50],
"ct": [255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 849,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [178, 133, 178, 225, 158, 52, 8],
"ct": [128, 0, 0, 128, 0, 0, 0],
"result": "valid"
},
{
"tcId": 850,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "75cab941d9824399ade8dd4b38df396804fe8d43296f901c",
"tweak": "b08eb74eb083e732",
"msg": [128, 177, 51, 98, 116, 53, 124],
"ct": [127, 255, 255, 127, 255, 255, 255],
"result": "valid"
},
{
"tcId": 851,
"comment": "y = 0 and (y + a) % radix**3 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "187f51d6c832c089d7cf2e",
"msg": [182, 191, 182, 7, 200, 159, 229],
"ct": [0, 0, 0, 226, 206, 160, 240],
"result": "valid"
},
{
"tcId": 852,
"comment": "y = 0 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "187f51d6c832c089d7cf2e",
"msg": [231, 206, 244, 226, 142, 244, 13],
"ct": [0, 0, 1, 127, 68, 50, 150],
"result": "valid"
},
{
"tcId": 853,
"comment": "y = 0 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "187f51d6c832c089d7cf2e",
"msg": [153, 92, 37, 240, 135, 104, 81],
"ct": [128, 0, 0, 137, 245, 90, 99],
"result": "valid"
},
{
"tcId": 854,
"comment": "y = 0 and (y + a) % radix**3 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "187f51d6c832c089d7cf2e",
"msg": [134, 212, 219, 163, 203, 4, 160],
"ct": [255, 255, 255, 141, 124, 145, 65],
"result": "valid"
},
{
"tcId": 855,
"comment": "y = 1 and a = 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "bc3eef39dd01197ea1e4d0",
"msg": [50, 107, 21, 95, 73, 198, 113],
"ct": [101, 240, 47, 202, 178, 49, 106],
"result": "valid"
},
{
"tcId": 856,
"comment": "y = 1 and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "bc3eef39dd01197ea1e4d0",
"msg": [230, 174, 242, 193, 174, 251, 188],
"ct": [213, 239, 79, 204, 183, 190, 193],
"result": "valid"
},
{
"tcId": 857,
"comment": "y = 1 and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "bc3eef39dd01197ea1e4d0",
"msg": [203, 96, 96, 58, 179, 186, 197],
"ct": [188, 151, 121, 129, 86, 187, 129],
"result": "valid"
},
{
"tcId": 858,
"comment": "y = 1 and (y + a) % radix**3 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "bc3eef39dd01197ea1e4d0",
"msg": [152, 130, 146, 216, 153, 229, 193],
"ct": [194, 56, 215, 235, 3, 233, 36],
"result": "valid"
},
{
"tcId": 859,
"comment": "y = 1 and (y + a) % radix**3 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "bc3eef39dd01197ea1e4d0",
"msg": [218, 16, 122, 135, 164, 7, 22],
"ct": [185, 63, 176, 163, 76, 78, 236],
"result": "valid"
},
{
"tcId": 860,
"comment": "y is maximal and (y + a) % radix**3 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "229f6094dd097243d47a10",
"msg": [0, 0, 0, 152, 90, 123, 162],
"ct": [102, 186, 54, 99, 118, 169, 237],
"result": "valid"
},
{
"tcId": 861,
"comment": "y is maximal and (y + a) % radix**3 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "229f6094dd097243d47a10",
"msg": [0, 0, 1, 152, 90, 123, 162],
"ct": [10, 98, 32, 248, 255, 45, 48],
"result": "valid"
},
{
"tcId": 862,
"comment": "y is maximal and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "229f6094dd097243d47a10",
"msg": [128, 0, 0, 152, 90, 123, 162],
"ct": [44, 167, 19, 212, 73, 16, 233],
"result": "valid"
},
{
"tcId": 863,
"comment": "y is maximal and a is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "229f6094dd097243d47a10",
"msg": [255, 255, 255, 152, 90, 123, 162],
"ct": [51, 208, 145, 139, 156, 235, 49],
"result": "valid"
},
{
"tcId": 864,
"comment": "y is edge case for modular reduction and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "aaa4c91c7a18858a0aad8f",
"msg": [80, 200, 201, 20, 243, 158, 51],
"ct": [255, 255, 0, 235, 126, 200, 179],
"result": "valid"
},
{
"tcId": 865,
"comment": "y is edge case for modular reduction and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "aaa4c91c7a18858a0aad8f",
"msg": [75, 143, 153, 82, 58, 170, 103],
"ct": [255, 255, 1, 255, 220, 184, 23],
"result": "valid"
},
{
"tcId": 866,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "aaa4c91c7a18858a0aad8f",
"msg": [92, 151, 89, 173, 109, 42, 252],
"ct": [255, 255, 255, 49, 165, 147, 221],
"result": "valid"
},
{
"tcId": 867,
"comment": "y is edge case for modular reduction and (y + a) % radix**3 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "aaa4c91c7a18858a0aad8f",
"msg": [82, 64, 83, 96, 195, 97, 59],
"ct": [0, 0, 0, 86, 5, 247, 54],
"result": "valid"
},
{
"tcId": 868,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "aaa4c91c7a18858a0aad8f",
"msg": [244, 134, 58, 193, 194, 128, 66],
"ct": [127, 255, 0, 99, 205, 117, 16],
"result": "valid"
},
{
"tcId": 869,
"comment": "y is edge case for modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "aaa4c91c7a18858a0aad8f",
"msg": [178, 227, 9, 95, 7, 96, 43],
"ct": [255, 254, 255, 188, 18, 130, 200],
"result": "valid"
},
{
"tcId": 870,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "b9f561baf48f5678b27ae1",
"msg": [86, 75, 61, 42, 186, 17, 55],
"ct": [255, 255, 255, 31, 182, 124, 234],
"result": "valid"
},
{
"tcId": 871,
"comment": "y is maximal after modular reduction and (y + a) % radix**3 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "b9f561baf48f5678b27ae1",
"msg": [163, 242, 81, 185, 154, 245, 4],
"ct": [0, 0, 0, 162, 147, 252, 93],
"result": "valid"
},
{
"tcId": 872,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "b9f561baf48f5678b27ae1",
"msg": [147, 250, 91, 76, 218, 147, 126],
"ct": [127, 255, 255, 48, 154, 79, 97],
"result": "valid"
},
{
"tcId": 873,
"comment": "y is maximal after modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "5770c68113fac20abbd419d0c588e7929dd202a9829db695",
"tweak": "b9f561baf48f5678b27ae1",
"msg": [9, 68, 115, 223, 219, 87, 211],
"ct": [255, 255, 254, 218, 5, 101, 19],
"result": "valid"
},
{
"tcId": 874,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "feb4107ae457413c5445e8f77175ea0ee1d610dcea97129b",
"tweak": "60ffe987c829b479",
"msg": [-1, 156, 241, 59, 161, 189, 143],
"ct": [134, 30, 44, 251, 58, 169, 12],
"result": "invalid"
},
{
"tcId": 875,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "feb4107ae457413c5445e8f77175ea0ee1d610dcea97129b",
"tweak": "60ffe987c829b479",
"msg": [154, 156, -1, 59, 161, 189, 143],
"ct": [178, 217, 21, 217, 189, 230, 119],
"result": "invalid"
},
{
"tcId": 876,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "feb4107ae457413c5445e8f77175ea0ee1d610dcea97129b",
"tweak": "60ffe987c829b479",
"msg": [154, 156, 241, 59, 161, 189, -1],
"ct": [154, 21, 27, 54, 165, 181, 184],
"result": "invalid"
},
{
"tcId": 877,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "f703c7712d74260590eba4d12095cbd27d5a74f3ecc198c6",
"tweak": "64868cc5307d7c15",
"msg": [256, 141, 197, 80, 68, 202, 143],
"ct": [242, 18, 151, 4, 27, 7, 103],
"result": "invalid"
},
{
"tcId": 878,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "f703c7712d74260590eba4d12095cbd27d5a74f3ecc198c6",
"tweak": "64868cc5307d7c15",
"msg": [89, 141, 256, 80, 68, 202, 143],
"ct": [80, 161, 95, 80, 252, 235, 227],
"result": "invalid"
},
{
"tcId": 879,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "f703c7712d74260590eba4d12095cbd27d5a74f3ecc198c6",
"tweak": "64868cc5307d7c15",
"msg": [89, 141, 197, 80, 68, 202, 256],
"ct": [118, 252, 55, 80, 21, 76, 55],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 8,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 880,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "92a79c3f030f2aba3096f2537c9d47403d9f4b2ede166d87",
"tweak": "3146e53b9e1162f2",
"msg": [29, 39, 244, 212, 99, 86, 185, 35],
"ct": [128, 176, 104, 191, 5, 202, 234, 81],
"result": "valid"
},
{
"tcId": 881,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [0, 0, 0, 0, 0, 0, 0, 0],
"ct": [125, 43, 141, 43, 178, 4, 25, 163],
"result": "valid"
},
{
"tcId": 882,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [255, 255, 255, 255, 255, 255, 255, 255],
"ct": [212, 150, 42, 127, 0, 9, 155, 208],
"result": "valid"
},
{
"tcId": 883,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [128, 0, 0, 0, 128, 0, 0, 0],
"ct": [125, 118, 95, 252, 2, 203, 160, 254],
"result": "valid"
},
{
"tcId": 884,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [127, 255, 255, 255, 127, 255, 255, 255],
"ct": [221, 224, 8, 37, 211, 57, 193, 122],
"result": "valid"
},
{
"tcId": 885,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [68, 213, 28, 7, 115, 180, 46, 234],
"ct": [135, 27, 39, 77, 241, 67, 73, 36],
"result": "valid"
},
{
"tcId": 886,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [32, 75, 86, 70, 141, 78, 186, 131],
"ct": [200, 149, 253, 206, 137, 207, 60, 194],
"result": "valid"
},
{
"tcId": 887,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [85, 229, 136, 22, 149, 7, 59, 39],
"ct": [114, 169, 67, 117, 9, 84, 16, 177],
"result": "valid"
},
{
"tcId": 888,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [55, 198, 188, 128, 175, 87, 79, 197],
"ct": [23, 212, 241, 21, 97, 98, 141, 23],
"result": "valid"
},
{
"tcId": 889,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [241, 246, 155, 245, 247, 71, 177, 35],
"ct": [187, 195, 101, 27, 94, 122, 170, 88],
"result": "valid"
},
{
"tcId": 890,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [99, 12, 148, 163, 62, 141, 0, 210],
"ct": [132, 175, 12, 192, 21, 209, 225, 15],
"result": "valid"
},
{
"tcId": 891,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [2, 24, 88, 134, 103, 147, 71, 163],
"ct": [88, 107, 55, 186, 78, 82, 153, 211],
"result": "valid"
},
{
"tcId": 892,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [131, 108, 82, 204, 140, 131, 123, 103],
"ct": [228, 67, 137, 18, 223, 12, 135, 121],
"result": "valid"
},
{
"tcId": 893,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [2, 236, 32, 87, 168, 72, 130, 224],
"ct": [0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 894,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [181, 135, 185, 192, 247, 248, 167, 80],
"ct": [255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 895,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [223, 156, 114, 213, 115, 87, 72, 122],
"ct": [128, 0, 0, 0, 128, 0, 0, 0],
"result": "valid"
},
{
"tcId": 896,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "51457a1a434804c4b210581136078cce2b56562af03b5e4b",
"tweak": "b8519119f55eeaa7",
"msg": [23, 216, 150, 33, 175, 21, 95, 193],
"ct": [127, 255, 255, 255, 127, 255, 255, 255],
"result": "valid"
},
{
"tcId": 897,
"comment": "y = 0 and (y + a) % radix**4 == 0 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "cb2dc14d2ed4a90a9ee536",
"msg": [195, 28, 121, 77, 5, 183, 27, 24],
"ct": [218, 141, 28, 88, 136, 33, 139, 174],
"result": "valid"
},
{
"tcId": 898,
"comment": "y = 0 and a = 1 in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "cb2dc14d2ed4a90a9ee536",
"msg": [109, 40, 14, 124, 188, 10, 87, 225],
"ct": [4, 43, 68, 169, 109, 170, 101, 27],
"result": "valid"
},
{
"tcId": 899,
"comment": "y = 0 and a has large Hamming weight in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "cb2dc14d2ed4a90a9ee536",
"msg": [78, 243, 118, 59, 188, 239, 33, 177],
"ct": [119, 241, 22, 156, 83, 133, 5, 88],
"result": "valid"
},
{
"tcId": 900,
"comment": "y = 0 and (y + a) % radix**4 is maximal in round 3",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "cb2dc14d2ed4a90a9ee536",
"msg": [120, 97, 126, 86, 141, 152, 72, 55],
"ct": [151, 124, 96, 52, 119, 132, 107, 150],
"result": "valid"
},
{
"tcId": 901,
"comment": "y = 1 and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "129e8f480c6df07d48b57b",
"msg": [90, 87, 123, 247, 252, 185, 17, 104],
"ct": [0, 0, 0, 1, 222, 5, 25, 185],
"result": "valid"
},
{
"tcId": 902,
"comment": "y = 1 and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "129e8f480c6df07d48b57b",
"msg": [207, 168, 146, 85, 67, 157, 182, 166],
"ct": [0, 0, 0, 2, 24, 92, 193, 180],
"result": "valid"
},
{
"tcId": 903,
"comment": "y = 1 and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "129e8f480c6df07d48b57b",
"msg": [18, 38, 230, 130, 16, 246, 46, 43],
"ct": [128, 0, 0, 1, 114, 30, 32, 239],
"result": "valid"
},
{
"tcId": 904,
"comment": "y = 1 and (y + a) % radix**4 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "129e8f480c6df07d48b57b",
"msg": [193, 163, 155, 118, 62, 59, 91, 37],
"ct": [255, 255, 255, 255, 232, 9, 179, 153],
"result": "valid"
},
{
"tcId": 905,
"comment": "y = 1 and (y + a) % radix**4 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "129e8f480c6df07d48b57b",
"msg": [43, 20, 87, 17, 160, 99, 5, 131],
"ct": [0, 0, 0, 0, 218, 107, 6, 202],
"result": "valid"
},
{
"tcId": 906,
"comment": "y is maximal and (y + a) % radix**4 is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "fcf22d39976c8dcfc317a3",
"msg": [142, 186, 96, 237, 39, 130, 222, 202],
"ct": [107, 167, 2, 242, 219, 207, 59, 20],
"result": "valid"
},
{
"tcId": 907,
"comment": "y is maximal and (y + a) % radix**4 == 0 in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "fcf22d39976c8dcfc317a3",
"msg": [170, 111, 223, 40, 226, 109, 134, 179],
"ct": [56, 117, 252, 252, 109, 53, 70, 150],
"result": "valid"
},
{
"tcId": 908,
"comment": "y is maximal and a has large Hamming weight in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "fcf22d39976c8dcfc317a3",
"msg": [95, 130, 105, 12, 30, 75, 91, 201],
"ct": [21, 8, 30, 208, 124, 106, 82, 163],
"result": "valid"
},
{
"tcId": 909,
"comment": "y is maximal and a is maximal in round 6",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "fcf22d39976c8dcfc317a3",
"msg": [2, 34, 151, 160, 230, 52, 226, 98],
"ct": [166, 218, 149, 201, 231, 144, 112, 63],
"result": "valid"
},
{
"tcId": 910,
"comment": "y is edge case for modular reduction and a = 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "632b647af3d04af4225daa",
"msg": [0, 0, 0, 0, 71, 168, 42, 118],
"ct": [78, 97, 56, 73, 130, 35, 34, 39],
"result": "valid"
},
{
"tcId": 911,
"comment": "y is edge case for modular reduction and a = 1 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "632b647af3d04af4225daa",
"msg": [0, 0, 0, 1, 71, 168, 42, 118],
"ct": [195, 113, 246, 118, 77, 173, 91, 194],
"result": "valid"
},
{
"tcId": 912,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "632b647af3d04af4225daa",
"msg": [0, 0, 0, 255, 71, 168, 42, 118],
"ct": [65, 197, 212, 240, 206, 161, 27, 197],
"result": "valid"
},
{
"tcId": 913,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 == 0 in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "632b647af3d04af4225daa",
"msg": [0, 0, 1, 0, 71, 168, 42, 118],
"ct": [71, 47, 245, 97, 239, 59, 33, 253],
"result": "valid"
},
{
"tcId": 914,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "632b647af3d04af4225daa",
"msg": [128, 0, 0, 0, 71, 168, 42, 118],
"ct": [197, 173, 141, 226, 112, 159, 206, 19],
"result": "valid"
},
{
"tcId": 915,
"comment": "y is edge case for modular reduction and a is maximal in round 0",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "632b647af3d04af4225daa",
"msg": [255, 255, 255, 255, 71, 168, 42, 118],
"ct": [7, 10, 166, 170, 220, 85, 105, 80],
"result": "valid"
},
{
"tcId": 916,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "1f86275c91efe7ed0e1d3a",
"msg": [120, 56, 183, 175, 176, 109, 189, 72],
"ct": [167, 196, 82, 130, 25, 147, 230, 174],
"result": "valid"
},
{
"tcId": 917,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "1f86275c91efe7ed0e1d3a",
"msg": [36, 142, 213, 161, 87, 58, 197, 213],
"ct": [34, 146, 168, 95, 123, 52, 217, 3],
"result": "valid"
},
{
"tcId": 918,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "1f86275c91efe7ed0e1d3a",
"msg": [234, 159, 101, 130, 113, 200, 116, 12],
"ct": [22, 212, 172, 48, 19, 167, 135, 133],
"result": "valid"
},
{
"tcId": 919,
"comment": "y is maximal after modular reduction and a is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "2b2051b7468176d99a241501f41a390fa53b7b9f88048e81",
"tweak": "1f86275c91efe7ed0e1d3a",
"msg": [63, 244, 103, 240, 65, 18, 143, 227],
"ct": [162, 158, 150, 45, 50, 36, 57, 29],
"result": "valid"
},
{
"tcId": 920,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "26269e1a26e94d2e2ea71b104dc4b9e1bcd2b0ba346514c9",
"tweak": "1a7d6192c4daa46f",
"msg": [-1, 71, 5, 104, 172, 131, 175, 131],
"ct": [175, 172, 64, 217, 167, 66, 245, 124],
"result": "invalid"
},
{
"tcId": 921,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "26269e1a26e94d2e2ea71b104dc4b9e1bcd2b0ba346514c9",
"tweak": "1a7d6192c4daa46f",
"msg": [42, 71, -1, 104, 172, 131, 175, 131],
"ct": [245, 185, 88, 195, 23, 156, 13, 255],
"result": "invalid"
},
{
"tcId": 922,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "26269e1a26e94d2e2ea71b104dc4b9e1bcd2b0ba346514c9",
"tweak": "1a7d6192c4daa46f",
"msg": [42, 71, 5, 104, 172, 131, 175, -1],
"ct": [164, 247, 105, 2, 77, 27, 95, 204],
"result": "invalid"
},
{
"tcId": 923,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "51b236cd66cd54966661fdc551b48efd4651ba98e0d7f8b8",
"tweak": "b070a613ad5985cb",
"msg": [256, 133, 16, 218, 248, 197, 67, 6],
"ct": [194, 144, 120, 42, 64, 119, 16, 247],
"result": "invalid"
},
{
"tcId": 924,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "51b236cd66cd54966661fdc551b48efd4651ba98e0d7f8b8",
"tweak": "b070a613ad5985cb",
"msg": [88, 133, 256, 218, 248, 197, 67, 6],
"ct": [191, 162, 45, 0, 52, 68, 29, 125],
"result": "invalid"
},
{
"tcId": 925,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "51b236cd66cd54966661fdc551b48efd4651ba98e0d7f8b8",
"tweak": "b070a613ad5985cb",
"msg": [88, 133, 16, 218, 248, 197, 67, 256],
"ct": [61, 178, 125, 213, 242, 214, 67, 242],
"result": "invalid"
}
]
},
{
"keySize": 192,
"msgSize": 9,
"radix": 256,
"type": "FpeListTest",
"tests": [
{
"tcId": 926,
"comment": "normal message size",
"flags": [
"NormalMessageSize"
],
"key": "c5fa236ae679d3c1d533758578e3a5c48752179eb298ac0e",
"tweak": "72ac4fc84f5bc825",
"msg": [155, 6, 108, 148, 230, 127, 126, 145, 19],
"ct": [171, 146, 247, 152, 213, 131, 76, 230, 180],
"result": "valid"
},
{
"tcId": 927,
"comment": "minimal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [0, 0, 0, 0, 0, 0, 0, 0, 0],
"ct": [117, 88, 251, 65, 33, 27, 69, 112, 128],
"result": "valid"
},
{
"tcId": 928,
"comment": "maximal integer values in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [255, 255, 255, 255, 255, 255, 255, 255, 255],
"ct": [190, 152, 54, 8, 9, 207, 206, 19, 195],
"result": "valid"
},
{
"tcId": 929,
"comment": "powers of two in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [128, 0, 0, 0, 128, 0, 0, 0, 0],
"ct": [24, 193, 65, 239, 12, 173, 102, 226, 208],
"result": "valid"
},
{
"tcId": 930,
"comment": "integers with large hamming weight in plaintext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [127, 255, 255, 255, 127, 255, 255, 255, 255],
"ct": [183, 125, 233, 49, 219, 128, 168, 149, 107],
"result": "valid"
},
{
"tcId": 931,
"comment": "minimal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [92, 176, 94, 219, 97, 4, 162, 67, 208],
"ct": [127, 224, 200, 221, 235, 16, 54, 230, 254],
"result": "valid"
},
{
"tcId": 932,
"comment": "maximal integer values in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [161, 198, 229, 236, 150, 78, 38, 70, 53],
"ct": [136, 43, 79, 69, 22, 209, 41, 100, 135],
"result": "valid"
},
{
"tcId": 933,
"comment": "powers of two in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [196, 51, 203, 220, 73, 56, 243, 142, 215],
"ct": [187, 217, 205, 210, 24, 166, 13, 193, 41],
"result": "valid"
},
{
"tcId": 934,
"comment": "integers with large hamming weight in round 5",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [118, 204, 84, 197, 250, 11, 71, 8, 189],
"ct": [225, 177, 124, 149, 13, 102, 94, 48, 59],
"result": "valid"
},
{
"tcId": 935,
"comment": "minimal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [155, 236, 182, 246, 227, 225, 238, 73, 150],
"ct": [126, 111, 180, 63, 160, 18, 51, 199, 57],
"result": "valid"
},
{
"tcId": 936,
"comment": "maximal integer values in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [138, 167, 51, 196, 218, 55, 219, 241, 150],
"ct": [145, 62, 96, 24, 64, 178, 115, 168, 194],
"result": "valid"
},
{
"tcId": 937,
"comment": "powers of two in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [222, 60, 142, 209, 111, 145, 36, 249, 124],
"ct": [166, 37, 243, 218, 147, 185, 204, 149, 3],
"result": "valid"
},
{
"tcId": 938,
"comment": "integers with large hamming weight in round 6",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [244, 145, 194, 154, 175, 59, 77, 110, 81],
"ct": [116, 131, 89, 64, 26, 195, 183, 25, 205],
"result": "valid"
},
{
"tcId": 939,
"comment": "minimal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [231, 112, 137, 144, 45, 41, 223, 150, 196],
"ct": [0, 0, 0, 0, 0, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 940,
"comment": "maximal integer values in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [77, 250, 145, 110, 232, 156, 167, 225, 117],
"ct": [255, 255, 255, 255, 255, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 941,
"comment": "powers of two in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [183, 245, 244, 240, 44, 168, 11, 157, 110],
"ct": [128, 0, 0, 0, 128, 0, 0, 0, 0],
"result": "valid"
},
{
"tcId": 942,
"comment": "integers with large hamming weight in ciphertext",
"flags": [
"EdgeCaseState"
],
"key": "3f923c61df065e0134b869fc00291ad841dc168a6d7a8706",
"tweak": "2f9eb9835c605c21",
"msg": [146, 74, 52, 170, 184, 120, 235, 50, 251],
"ct": [127, 255, 255, 255, 127, 255, 255, 255, 255],
"result": "valid"
},
{
"tcId": 943,
"comment": "y = 0 and (y + a) % radix**4 == 0 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "9046e7c8005325bba76c",
"msg": [84, 244, 203, 133, 165, 225, 252, 247, 112],
"ct": [125, 49, 87, 20, 212, 4, 9, 75, 89],
"result": "valid"
},
{
"tcId": 944,
"comment": "y = 0 and a = 1 in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "9046e7c8005325bba76c",
"msg": [191, 159, 59, 177, 5, 214, 96, 163, 215],
"ct": [211, 178, 217, 38, 100, 197, 217, 213, 139],
"result": "valid"
},
{
"tcId": 945,
"comment": "y = 0 and a has large Hamming weight in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "9046e7c8005325bba76c",
"msg": [165, 41, 110, 12, 112, 248, 188, 27, 24],
"ct": [39, 211, 173, 153, 219, 188, 147, 188, 200],
"result": "valid"
},
{
"tcId": 946,
"comment": "y = 0 and (y + a) % radix**4 is maximal in round 4",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "9046e7c8005325bba76c",
"msg": [148, 245, 216, 87, 181, 99, 200, 81, 87],
"ct": [12, 33, 60, 129, 14, 188, 65, 150, 121],
"result": "valid"
},
{
"tcId": 947,
"comment": "y = 1 and a = 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "98c19940dd66e3ea0f40",
"msg": [192, 136, 149, 19, 39, 177, 91, 102, 196],
"ct": [103, 134, 189, 156, 210, 119, 238, 230, 197],
"result": "valid"
},
{
"tcId": 948,
"comment": "y = 1 and a = 1 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "98c19940dd66e3ea0f40",
"msg": [187, 224, 199, 66, 196, 78, 52, 41, 89],
"ct": [175, 190, 215, 116, 215, 116, 181, 140, 248],
"result": "valid"
},
{
"tcId": 949,
"comment": "y = 1 and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "98c19940dd66e3ea0f40",
"msg": [181, 221, 244, 53, 3, 68, 56, 184, 115],
"ct": [174, 122, 92, 202, 2, 230, 185, 213, 67],
"result": "valid"
},
{
"tcId": 950,
"comment": "y = 1 and (y + a) % radix**4 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "98c19940dd66e3ea0f40",
"msg": [208, 152, 242, 63, 116, 146, 22, 140, 103],
"ct": [165, 211, 166, 204, 119, 13, 36, 29, 86],
"result": "valid"
},
{
"tcId": 951,
"comment": "y = 1 and (y + a) % radix**4 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "98c19940dd66e3ea0f40",
"msg": [120, 57, 189, 194, 252, 20, 17, 180, 134],
"ct": [63, 43, 150, 95, 170, 47, 155, 106, 25],
"result": "valid"
},
{
"tcId": 952,
"comment": "y is maximal and (y + a) % radix**4 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "accfbb200b34280dec3d",
"msg": [42, 139, 164, 15, 155, 12, 222, 4, 115],
"ct": [255, 255, 255, 255, 253, 197, 42, 48, 234],
"result": "valid"
},
{
"tcId": 953,
"comment": "y is maximal and (y + a) % radix**4 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "accfbb200b34280dec3d",
"msg": [24, 121, 80, 126, 187, 113, 235, 123, 29],
"ct": [0, 0, 0, 0, 69, 13, 190, 66, 225],
"result": "valid"
},
{
"tcId": 954,
"comment": "y is maximal and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "accfbb200b34280dec3d",
"msg": [53, 173, 234, 218, 231, 41, 32, 175, 154],
"ct": [127, 255, 255, 255, 68, 114, 134, 161, 144],
"result": "valid"
},
{
"tcId": 955,
"comment": "y is maximal and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "accfbb200b34280dec3d",
"msg": [235, 52, 159, 57, 67, 121, 204, 23, 202],
"ct": [255, 255, 255, 254, 240, 98, 104, 249, 19],
"result": "valid"
},
{
"tcId": 956,
"comment": "y is edge case for modular reduction and a = 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "29762119817343f7f794",
"msg": [77, 127, 117, 88, 216, 122, 74, 141, 248],
"ct": [255, 255, 255, 0, 70, 142, 91, 185, 230],
"result": "valid"
},
{
"tcId": 957,
"comment": "y is edge case for modular reduction and a = 1 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "29762119817343f7f794",
"msg": [80, 81, 187, 29, 29, 243, 146, 42, 154],
"ct": [255, 255, 255, 1, 5, 178, 148, 241, 190],
"result": "valid"
},
{
"tcId": 958,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "29762119817343f7f794",
"msg": [183, 82, 28, 151, 20, 2, 200, 212, 159],
"ct": [255, 255, 255, 255, 100, 99, 133, 3, 101],
"result": "valid"
},
{
"tcId": 959,
"comment": "y is edge case for modular reduction and (y + a) % radix**4 == 0 in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "29762119817343f7f794",
"msg": [168, 12, 5, 214, 178, 172, 120, 94, 249],
"ct": [0, 0, 0, 0, 211, 119, 203, 204, 215],
"result": "valid"
},
{
"tcId": 960,
"comment": "y is edge case for modular reduction and a has large Hamming weight in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "29762119817343f7f794",
"msg": [138, 207, 176, 37, 145, 169, 48, 124, 228],
"ct": [127, 255, 255, 0, 189, 86, 135, 190, 79],
"result": "valid"
},
{
"tcId": 961,
"comment": "y is edge case for modular reduction and a is maximal in round 8",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "29762119817343f7f794",
"msg": [81, 81, 253, 82, 73, 235, 103, 65, 87],
"ct": [255, 255, 254, 255, 144, 236, 101, 244, 176],
"result": "valid"
},
{
"tcId": 962,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "2757ffdd3916d5571c5e",
"msg": [21, 106, 236, 153, 186, 218, 218, 211, 196],
"ct": [235, 168, 71, 53, 16, 215, 167, 41, 204],
"result": "valid"
},
{
"tcId": 963,
"comment": "y is maximal after modular reduction and (y + a) % radix**4 == 0 in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "2757ffdd3916d5571c5e",
"msg": [128, 80, 207, 103, 162, 130, 46, 218, 254],
"ct": [115, 0, 145, 87, 158, 11, 144, 207, 8],
"result": "valid"
},
{
"tcId": 964,
"comment": "y is maximal after modular reduction and a has large Hamming weight in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "2757ffdd3916d5571c5e",
"msg": [151, 225, 3, 171, 141, 220, 45, 41, 148],
"ct": [8, 43, 76, 52, 1, 189, 71, 145, 3],
"result": "valid"
},
{
"tcId": 965,
"comment": "y is maximal after modular reduction and a is maximal in round 2",
"flags": [
"EdgeCasePrf"
],
"key": "c678fa6efdfb88fdbba98d03c72a400b55e24a9240b493c0",
"tweak": "2757ffdd3916d5571c5e",
"msg": [19, 232, 208, 44, 24, 32, 247, 179, 108],
"ct": [40, 109, 158, 252, 186, 190, 9, 57, 212],
"result": "valid"
},
{
"tcId": 966,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "88a0eae50953549253b7548d6d10ae9c77957524fe235909",
"tweak": "2f4481b579f8a5f8",
"msg": [-1, 178, 221, 139, 10, 89, 73, 158, 38],
"ct": [33, 41, 21, 223, 167, 69, 118, 185, 100],
"result": "invalid"
},
{
"tcId": 967,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "88a0eae50953549253b7548d6d10ae9c77957524fe235909",
"tweak": "2f4481b579f8a5f8",
"msg": [145, 178, 221, -1, 10, 89, 73, 158, 38],
"ct": [187, 31, 87, 171, 58, 237, 38, 32, 103],
"result": "invalid"
},
{
"tcId": 968,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "88a0eae50953549253b7548d6d10ae9c77957524fe235909",
"tweak": "2f4481b579f8a5f8",
"msg": [145, 178, 221, 139, 10, 89, 73, 158, -1],
"ct": [237, 133, 69, 189, 63, 226, 216, 108, 231],
"result": "invalid"
},
{
"tcId": 969,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a697439473689fa6581d9113b682761f1440850cbdee4e93",
"tweak": "5620ef3be5b3d426",
"msg": [256, 164, 207, 145, 153, 213, 123, 94, 191],
"ct": [71, 200, 254, 228, 219, 60, 109, 67, 9],
"result": "invalid"
},
{
"tcId": 970,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a697439473689fa6581d9113b682761f1440850cbdee4e93",
"tweak": "5620ef3be5b3d426",
"msg": [125, 164, 207, 256, 153, 213, 123, 94, 191],
"ct": [66, 49, 244, 80, 99, 174, 46, 165, 51],
"result": "invalid"
},
{
"tcId": 971,
"comment": "plaintext contains invalid values",
"flags": [
"InvalidPlaintext"
],
"key": "a697439473689fa6581d9113b682761f1440850cbdee4e93",
"tweak": "5620ef3be5b3d426",
"msg": [125, 164, 207, 145, 153, 213, 123, 94, 256],
"ct": [136, 144, 123, 60, 160, 189, 87, 69, 165],
"result": "invalid"
}
]
},
{
"keySize"