Gitiles
Code Review Sign In
gerrit.nordix.org / fdio / vpp / 7108cb15cab8bd20f2f2dc7632f2d0a154a78eff / . / src / vppinfra / test / aes_gcm.c
blob: aeaf7cf8c1520fd64e49157de45305bf1750c094 [file] [log] [blame]
Damjan Marionb47376f2023-03-15 11:42:06 +0000[diff] [blame]1/* SPDX-License-Identifier: Apache-2.0
2 * Copyright(c) 2021 Cisco Systems, Inc.
3 */
4
5#if defined(__AES__) && defined(__PCLMUL__)
6#include <vppinfra/format.h>
7#include <vppinfra/test/test.h>
8#include <vppinfra/crypto/aes_gcm.h>
9
10static const u8 tc1_key128[16] = {
11 0,
12};
13
14static const u8 tc1_iv[12] = {
15 0,
16};
17
18static const u8 tc1_tag128[] = { 0x58, 0xe2, 0xfc, 0xce, 0xfa, 0x7e,
19 0x30, 0x61, 0x36, 0x7f, 0x1d, 0x57,
20 0xa4, 0xe7, 0x45, 0x5a };
21static const u8 tc1_key256[32] = {
22 0,
23};
24
25static const u8 tc1_tag256[] = {
26 0x53, 0x0f, 0x8a, 0xfb, 0xc7, 0x45, 0x36, 0xb9,
27 0xa9, 0x63, 0xb4, 0xf1, 0xc4, 0xcb, 0x73, 0x8b,
28};
29
30static const u8 tc2_ciphertext256[] = { 0xce, 0xa7, 0x40, 0x3d, 0x4d, 0x60,
31 0x6b, 0x6e, 0x07, 0x4e, 0xc5, 0xd3,
32 0xba, 0xf3, 0x9d, 0x18 };
33
34static const u8 tc2_tag256[] = { 0xd0, 0xd1, 0xc8, 0xa7, 0x99, 0x99,
35 0x6b, 0xf0, 0x26, 0x5b, 0x98, 0xb5,
36 0xd4, 0x8a, 0xb9, 0x19 };
37
38static const u8 tc2_plaintext[16] = {
39 0,
40};
41
42static const u8 tc2_tag128[] = { 0xab, 0x6e, 0x47, 0xd4, 0x2c, 0xec,
43 0x13, 0xbd, 0xf5, 0x3a, 0x67, 0xb2,
44 0x12, 0x57, 0xbd, 0xdf };
45
46static const u8 tc2_ciphertext128[] = { 0x03, 0x88, 0xda, 0xce, 0x60, 0xb6,
47 0xa3, 0x92, 0xf3, 0x28, 0xc2, 0xb9,
48 0x71, 0xb2, 0xfe, 0x78 };
49
50static const u8 tc3_key128[] = { 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65,
51 0x73, 0x1c, 0x6d, 0x6a, 0x8f, 0x94,
52 0x67, 0x30, 0x83, 0x08 };
53
54static const u8 tc3_iv[] = { 0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce,
55 0xdb, 0xad, 0xde, 0xca, 0xf8, 0x88 };
56
57static const u8 tc3_plaintext[] = {
58 0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5, 0xa5, 0x59, 0x09, 0xc5, 0xaf,
59 0xf5, 0x26, 0x9a, 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda, 0x2e, 0x4c,
60 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72, 0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09,
61 0x53, 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25, 0xb1, 0x6a, 0xed, 0xf5,
62 0xaa, 0x0d, 0xe6, 0x57, 0xba, 0x63, 0x7b, 0x39, 0x1a, 0xaf, 0xd2, 0x55
63};
64
65static const u8 tc3_ciphertext128[] = {
66 0x42, 0x83, 0x1e, 0xc2, 0x21, 0x77, 0x74, 0x24, 0x4b, 0x72, 0x21, 0xb7, 0x84,
67 0xd0, 0xd4, 0x9c, 0xe3, 0xaa, 0x21, 0x2f, 0x2c, 0x02, 0xa4, 0xe0, 0x35, 0xc1,
68 0x7e, 0x23, 0x29, 0xac, 0xa1, 0x2e, 0x21, 0xd5, 0x14, 0xb2, 0x54, 0x66, 0x93,
69 0x1c, 0x7d, 0x8f, 0x6a, 0x5a, 0xac, 0x84, 0xaa, 0x05, 0x1b, 0xa3, 0x0b, 0x39,
70 0x6a, 0x0a, 0xac, 0x97, 0x3d, 0x58, 0xe0, 0x91, 0x47, 0x3f, 0x59, 0x85
71};
72
73static const u8 tc3_tag128[] = { 0x4d, 0x5c, 0x2a, 0xf3, 0x27, 0xcd,
74 0x64, 0xa6, 0x2c, 0xf3, 0x5a, 0xbd,
75 0x2b, 0xa6, 0xfa, 0xb4 };
76
77static const u8 tc3_key256[] = { 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73,
78 0x1c, 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30,
79 0x83, 0x08, 0xfe, 0xff, 0xe9, 0x92, 0x86,
80 0x65, 0x73, 0x1c, 0x6d, 0x6a, 0x8f, 0x94,
81 0x67, 0x30, 0x83, 0x08 };
82
83static const u8 tc3_ciphertext256[] = {
84 0x52, 0x2d, 0xc1, 0xf0, 0x99, 0x56, 0x7d, 0x07, 0xf4, 0x7f, 0x37, 0xa3, 0x2a,
85 0x84, 0x42, 0x7d, 0x64, 0x3a, 0x8c, 0xdc, 0xbf, 0xe5, 0xc0, 0xc9, 0x75, 0x98,
86 0xa2, 0xbd, 0x25, 0x55, 0xd1, 0xaa, 0x8c, 0xb0, 0x8e, 0x48, 0x59, 0x0d, 0xbb,
87 0x3d, 0xa7, 0xb0, 0x8b, 0x10, 0x56, 0x82, 0x88, 0x38, 0xc5, 0xf6, 0x1e, 0x63,
88 0x93, 0xba, 0x7a, 0x0a, 0xbc, 0xc9, 0xf6, 0x62, 0x89, 0x80, 0x15, 0xad
89};
90
91static const u8 tc3_tag256[] = { 0xb0, 0x94, 0xda, 0xc5, 0xd9, 0x34,
92 0x71, 0xbd, 0xec, 0x1a, 0x50, 0x22,
93 0x70, 0xe3, 0xcc, 0x6c };
94
95static const u8 tc4_plaintext[] = {
96 0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5, 0xa5, 0x59, 0x09, 0xc5,
97 0xaf, 0xf5, 0x26, 0x9a, 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
98 0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72, 0x1c, 0x3c, 0x0c, 0x95,
99 0x95, 0x68, 0x09, 0x53, 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
100 0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57, 0xba, 0x63, 0x7b, 0x39,
101};
102
103static const u8 tc4_aad[] = { 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe,
104 0xef, 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad,
105 0xbe, 0xef, 0xab, 0xad, 0xda, 0xd2 };
106
107static const u8 tc4_ciphertext128[] = {
108 0x42, 0x83, 0x1e, 0xc2, 0x21, 0x77, 0x74, 0x24, 0x4b, 0x72, 0x21, 0xb7,
109 0x84, 0xd0, 0xd4, 0x9c, 0xe3, 0xaa, 0x21, 0x2f, 0x2c, 0x02, 0xa4, 0xe0,
110 0x35, 0xc1, 0x7e, 0x23, 0x29, 0xac, 0xa1, 0x2e, 0x21, 0xd5, 0x14, 0xb2,
111 0x54, 0x66, 0x93, 0x1c, 0x7d, 0x8f, 0x6a, 0x5a, 0xac, 0x84, 0xaa, 0x05,
112 0x1b, 0xa3, 0x0b, 0x39, 0x6a, 0x0a, 0xac, 0x97, 0x3d, 0x58, 0xe0, 0x91
113};
114
115static const u8 tc4_tag128[] = { 0x5b, 0xc9, 0x4f, 0xbc, 0x32, 0x21,
116 0xa5, 0xdb, 0x94, 0xfa, 0xe9, 0x5a,
117 0xe7, 0x12, 0x1a, 0x47 };
118
119static const u8 tc4_ciphertext256[] = {
120 0x52, 0x2d, 0xc1, 0xf0, 0x99, 0x56, 0x7d, 0x07, 0xf4, 0x7f, 0x37, 0xa3,
121 0x2a, 0x84, 0x42, 0x7d, 0x64, 0x3a, 0x8c, 0xdc, 0xbf, 0xe5, 0xc0, 0xc9,
122 0x75, 0x98, 0xa2, 0xbd, 0x25, 0x55, 0xd1, 0xaa, 0x8c, 0xb0, 0x8e, 0x48,
123 0x59, 0x0d, 0xbb, 0x3d, 0xa7, 0xb0, 0x8b, 0x10, 0x56, 0x82, 0x88, 0x38,
124 0xc5, 0xf6, 0x1e, 0x63, 0x93, 0xba, 0x7a, 0x0a, 0xbc, 0xc9, 0xf6, 0x62
125};
126
127static const u8 tc4_tag256[] = { 0x76, 0xfc, 0x6e, 0xce, 0x0f, 0x4e,
128 0x17, 0x68, 0xcd, 0xdf, 0x88, 0x53,
129 0xbb, 0x2d, 0x55, 0x1b };
130
131static const u8 inc_key[] = { 0x97, 0x3e, 0x43, 0x70, 0x84, 0x71, 0xd4, 0xe2,
132 0x45, 0xd1, 0xcb, 0x79, 0xe8, 0xd7, 0x5f, 0x3b,
133 0x97, 0x3e, 0x43, 0x70, 0x84, 0x71, 0xd4, 0xe2,
134 0x45, 0xd1, 0xcb, 0x79, 0xe8, 0xd7, 0x5f, 0x3b };
135static const u8 inc_iv[] = { 0xe2, 0xe4, 0x3f, 0x29, 0xfe, 0xd4,
136 0xbc, 0x31, 0x56, 0xa7, 0x97, 0xf5 };
137
138static const struct
139{
140 const u16 n_bytes;
141 const u64 tag_gcm_128[2];
142 const u64 tag_gcm_256[2];
143 const u64 tag_gmac_128[2];
144 const u64 tag_gmac_256[2];
145 const u8 tag256[16];
146} inc_test_cases[] = {
147 {
148 .n_bytes = 0,
149 .tag_gcm_128 = { 0x95f4b8cc824294eb, 0xbf964ccf94b47f96 },
150 .tag_gcm_256 = { 0x206b456eaa81a3c8, 0xa308160d180e080d },
151 .tag_gmac_128 = { 0x95f4b8cc824294eb, 0xbf964ccf94b47f96 },
152 .tag_gmac_256 = { 0x206b456eaa81a3c8, 0xa308160d180e080d },
153 },
154 {
155 .n_bytes = 1,
156 .tag_gcm_128 = { 0xe89aa5be94fa1db4, 0x70d82ed02542a560 },
157 .tag_gcm_256 = { 0xcb0659b38e60d3a7, 0x9758b874959187ff },
158 .tag_gmac_128 = { 0xf9be1e7db073c565, 0x3b8a0ecc7a91f09d },
159 .tag_gmac_256 = { 0x1e302e97ab394130, 0xef29621c33bdb710 },
160 },
161 {
162 .n_bytes = 7,
163 .tag_gcm_128 = { 0xf4af7cbe57bd2078, 0x063dd60abbe51049 },
164 .tag_gcm_256 = { 0x7d231388fe8a19be, 0x59be3e7205269abd },
165 .tag_gmac_128 = { 0x27d0a47980eed1c6, 0xe6163485e73d02b3 },
166 .tag_gmac_256 = { 0x61ce281b47729f6c, 0x128a6bc0880e5d84 },
167 },
168 {
169 .n_bytes = 8,
170 .tag_gcm_128 = { 0xf45b40961422abc4, 0x0a932b98c4999694 },
171 .tag_gcm_256 = { 0xf7f945beed586ee2, 0x67239433a7bd3f23 },
172 .tag_gmac_128 = { 0x3a25d38572abe3b1, 0x220798aca96d594a },
173 .tag_gmac_256 = { 0x2e0e6d58d1ab41ca, 0x09bbc83e3b7b5e11 },
174 },
175 {
176 .n_bytes = 9,
177 .tag_gcm_128 = { 0x791b0a879d236364, 0xde9553e3ed1b763f },
178 .tag_gcm_256 = { 0x24c13ed7b46813cd, 0xe646ce24ea4b281e },
179 .tag_gmac_128 = { 0x0e521672b23a4fc7, 0x16f129224dec5fd8 },
180 .tag_gmac_256 = { 0x8b9c603789c34043, 0x0a8b626928c9fb6f },
181 },
182 {
183 .n_bytes = 15,
184 .tag_gcm_128 = { 0xb277ef05e2be1cc0, 0x2922fba5e321c81e },
185 .tag_gcm_256 = { 0xc3ca9f633fa803dc, 0x96e60b0c3347d744 },
186 .tag_gmac_128 = { 0xab99e6327c8e1493, 0x09a9a153045ba43f },
187 .tag_gmac_256 = { 0xfc9ec2d6a1ad492b, 0xf0b0ba877663732d },
188 },
189 {
190 .n_bytes = 16,
191 .tag_gcm_128 = { 0x3e3438e8f932ebe3, 0x958e270d56ae588e },
192 .tag_gcm_256 = { 0x6ac53524effc8171, 0xccab3a16a0b5813c },
193 .tag_gmac_128 = { 0x0eb4a09c6c7db16b, 0x1cdb5573a27a2e4a },
194 .tag_gmac_256 = { 0x71752018b31eae33, 0xdc4bd36d44b9fd5d },
195 },
196 {
197 .n_bytes = 31,
198 .tag_gcm_128 = { 0x1f4d4a7a056e4bca, 0x97ac76121dccb4e0 },
199 .tag_gcm_256 = { 0x609aea9aec919ab6, 0x1eba3c4998e7abb9 },
200 .tag_gmac_128 = { 0x289280f9e8879c68, 0xe6b0e36afc0d2ae1 },
201 .tag_gmac_256 = { 0x0b3f61762ba4ed43, 0x293f596a76d63b37 },
202 },
203 {
204 .n_bytes = 32,
205 .tag_gcm_128 = { 0xc4b64505d045818f, 0x72bfd499f0f983b4 },
206 .tag_gcm_256 = { 0x3f003fb179b2c480, 0x883876d4904700c2 },
207 .tag_gmac_128 = { 0x3dd10ab954d807f0, 0x5ae32ee41675051e },
208 .tag_gmac_256 = { 0x1a80ab830fc736c0, 0x51db27630adae337 },
209 },
210 {
211 .n_bytes = 47,
212 .tag_gcm_128 = { 0x3aedb0c6c14f2ea1, 0xe4626626bae641cd },
213 .tag_gcm_256 = { 0x9c91b87dfd302880, 0x05bb594dde5abb9c },
214 .tag_gmac_128 = { 0xe0fe54f2bdadeba8, 0x6f8f40edb569701f },
215 .tag_gmac_256 = { 0x26c5632c7abbdb3f, 0xc18ccc24df8bb239 },
216 },
217 {
218 .n_bytes = 48,
219 .tag_gcm_128 = { 0xdbceb2aed0dbbe27, 0xfef0013e8ebe6ef1 },
220 .tag_gcm_256 = { 0x98ad025f30b58ffa, 0xabc8a99857034e42 },
221 .tag_gmac_128 = { 0x269518e8584b7f6c, 0x1c9f41410a81799c },
222 .tag_gmac_256 = { 0x144807ce7aa8eb61, 0x611a8355b4377dc6 },
223 },
224 {
225 .n_bytes = 63,
226 .tag_gcm_128 = { 0x1769ccf523a2046e, 0x7328e18749a559b4 },
227 .tag_gcm_256 = { 0xcdf2f28efa9689ce, 0x636676f6aedea9de },
228 .tag_gmac_128 = { 0x4d47537060defce8, 0x0d4819c20ba8e889 },
229 .tag_gmac_256 = { 0x7b60615e7bfc9a7a, 0x610633296eb30b94 },
230 },
231 {
232 .n_bytes = 64,
233 .tag_gcm_128 = { 0xa5602f73865b6a77, 0x78317e461ff9b560 },
234 .tag_gcm_256 = { 0x5c17a6dcd1f23b65, 0x25331c378256a93e },
235 .tag_gmac_128 = { 0x39d941ed85d81ab0, 0xe358a61078628d63 },
236 .tag_gmac_256 = { 0x5276fbdd333f380d, 0xb0dc63e68f137e74 },
237 },
238 {
239 .n_bytes = 79,
240 .tag_gcm_128 = { 0x5d32cd75f2e82d84, 0xbc15801c1fe285bd },
241 .tag_gcm_256 = { 0xb2b2855f4b1ecf70, 0xa524adc1609c757b },
242 .tag_gmac_128 = { 0xa147493f08a8738e, 0xbf07da9f4a88944f },
243 .tag_gmac_256 = { 0xfee15e0d4b936bc7, 0x1dc88398c6b168bc },
244 },
245 {
246 .n_bytes = 80,
247 .tag_gcm_128 = { 0xa303b7247b9b00df, 0xe72d6d7063d48b72 },
248 .tag_gcm_256 = { 0x7abfffc9ecfa00ec, 0x9c5ffcd753ee4568 },
249 .tag_gmac_128 = { 0xc3e61bf9f370b40e, 0x66b1c4a6df3b19d7 },
250 .tag_gmac_256 = { 0x0cc7b09a7d602352, 0x29e8a64447a764d2 },
251 },
252 {
253 .n_bytes = 95,
254 .tag_gcm_128 = { 0xf0fb35c36eac3025, 0xa13463307fc48907 },
255 .tag_gcm_256 = { 0x283a73a05bd0e3c2, 0x794a181dd07a0fb7 },
256 .tag_gmac_128 = { 0x26f3546060d9f958, 0xc1367fca8869ab40 },
257 .tag_gmac_256 = { 0xa046e1705100c711, 0xbcf9d6a06f360260 },
258 },
259 {
260 .n_bytes = 96,
261 .tag_gcm_128 = { 0x974bb3c1c258bfb5, 0xcf057344bccb0596 },
262 .tag_gcm_256 = { 0x18920d75fcfb702e, 0x18e5f14ba429b7be },
263 .tag_gmac_128 = { 0xf43cca4837ad00b8, 0xb1a1585d51838352 },
264 .tag_gmac_256 = { 0xce3427dc5123b31f, 0xdcc6e49fa0f6587e },
265 },
266 {
267 .n_bytes = 111,
268 .tag_gcm_128 = { 0x5d73baa8eef0ced3, 0x79339e31d5d813de },
269 .tag_gcm_256 = { 0x4cefa311c9c39a86, 0xe809ee78930ef736 },
270 .tag_gmac_128 = { 0x452003e6d535a523, 0x723f08581012c62e },
271 .tag_gmac_256 = { 0x6ce2e1661db942ca, 0xccd700c9c6d03cfd },
272 },
273 {
274 .n_bytes = 112,
275 .tag_gcm_128 = { 0x189aa61ce15a0d11, 0xc907e6bccbdbb8f9 },
276 .tag_gcm_256 = { 0xa41c96c843b791b4, 0x0f9f60953f03e5fc },
277 .tag_gmac_128 = { 0x44c75b94dbf8539f, 0xcdebe3ed9c68c840 },
278 .tag_gmac_256 = { 0x21a289dd39eadd19, 0x749a038e1ea0711c },
279 },
280 {
281 .n_bytes = 127,
282 .tag_gcm_128 = { 0xc6ea87bfe82d73f6, 0x9d85dbf8072bb051 },
283 .tag_gcm_256 = { 0xd5e436b2ddfac9fa, 0x54d7d13fa214703a },
284 .tag_gmac_128 = { 0xdc5374b7d7d221c4, 0xa8cf4e11958b9dff },
285 .tag_gmac_256 = { 0xc7ad0bba9de54f6a, 0x38ed037fe0924dee },
286 },
287 {
288 .n_bytes = 128,
289 .tag_gcm_128 = { 0x357d4954b7c2b440, 0xb3b07ce0cd143149 },
290 .tag_gcm_256 = { 0x5555d09cb247322d, 0xeb9d1cea38b68951 },
291 .tag_gmac_128 = { 0x6a77579181663dde, 0xe359157bd4246d3f },
292 .tag_gmac_256 = { 0x9fe930d50d661e37, 0xba4a0f3c3a6b63cf },
293 },
294 {
295 .n_bytes = 143,
296 .tag_gcm_128 = { 0x358f897d4783966f, 0x6fa44993a9ed54c4 },
297 .tag_gcm_256 = { 0x60e91f959f2ccdbe, 0x116c56fdaa107deb },
298 .tag_gmac_128 = { 0x121d26aba8aaee0d, 0xc37cda9c43f51008 },
299 .tag_gmac_256 = { 0x06918b1cd20e0abc, 0x42938b1d8e745dcd },
300 },
301 {
302 .n_bytes = 144,
303 .tag_gcm_128 = { 0x8a9efe3df387e069, 0xc0a3f2f7547c704b },
304 .tag_gcm_256 = { 0x217d59f53bfbc314, 0x2d8f088d05532b0d },
305 .tag_gmac_128 = { 0x382949d56e0e8f05, 0x4e87fb8f83f095a7 },
306 .tag_gmac_256 = { 0x75e07060883db37d, 0x5fde7b9bda37d680 },
307 },
308 {
309 .n_bytes = 159,
310 .tag_gcm_128 = { 0x297252081cc8db1e, 0x6357143fa7f756c8 },
311 .tag_gcm_256 = { 0x7e8fca9d1b17e003, 0x7bf7dad063b9a5c9 },
312 .tag_gmac_128 = { 0x5d0524b130e97547, 0xd6befd8591072437 },
313 .tag_gmac_256 = { 0xf5f631d391b635fc, 0xe8f7b6808544f312 },
314 },
315 {
316 .n_bytes = 160,
317 .tag_gcm_128 = { 0x90e034ee0f08a871, 0x002f483eefa24ec9 },
318 .tag_gcm_256 = { 0xed24df02e455d6d3, 0x7a7d318ed132cb7f },
319 .tag_gmac_128 = { 0xc75f87215ae12a2f, 0xf264e5381d5b0412 },
320 .tag_gmac_256 = { 0x1ad3e294fd55b0a6, 0xa1a551e59fd12e2f },
321 },
322 {
323 .n_bytes = 175,
324 .tag_gcm_128 = { 0x8f663955c8e4249e, 0xd9d8d8d7352b18d9 },
325 .tag_gcm_256 = { 0xd9af34eae74a35e1, 0xc22e74b34267e5df },
326 .tag_gmac_128 = { 0xb54a2e8b186a55db, 0x980f586c6da8afce },
327 .tag_gmac_256 = { 0x9cceb31baad18ff1, 0xce97588909ece8af },
328 },
329 {
330 .n_bytes = 176,
331 .tag_gcm_128 = { 0x258ec0df82f003bd, 0x571496e92c966695 },
332 .tag_gcm_256 = { 0xa1925cda1fa1dd2c, 0x914038618faecf99 },
333 .tag_gmac_128 = { 0xfc384b412bdb05ef, 0x73968cf3b464a997 },
334 .tag_gmac_256 = { 0x50d9ce4be242e176, 0x5fb78e9404c9226d },
335 },
336 {
337 .n_bytes = 191,
338 .tag_gcm_128 = { 0x796a90a3edaab614, 0x4bf34c2c6333c736 },
339 .tag_gcm_256 = { 0x4ffd3a84b346c6d5, 0x9d4c84c7ac5a191c },
340 .tag_gmac_128 = { 0x16c11c6bfad5973e, 0xa0825b9c827137c8 },
341 .tag_gmac_256 = { 0x82c144c209c22758, 0x7428b4ac38a65c56 },
342 },
343 {
344 .n_bytes = 192,
345 .tag_gcm_128 = { 0x2a44492af2e06a75, 0xbe4eab62aacfc2d3 },
346 .tag_gcm_256 = { 0xb7d4971a8061092d, 0x94da543669369e41 },
347 .tag_gmac_128 = { 0xed462726c984b596, 0xd61b317d979f5df8 },
348 .tag_gmac_256 = { 0x554dc7f30981dbf6, 0x94447d0fbf9f2c8b },
349 },
350 {
351 .n_bytes = 207,
352 .tag_gcm_128 = { 0xcfac9f67252713c8, 0xd638cf6b74c6acf6 },
353 .tag_gcm_256 = { 0x57a4a9d299663925, 0xa802f8453e8bcc5b },
354 .tag_gmac_128 = { 0xef03f3cdcb0ea819, 0xeea8f0f7f805c306 },
355 .tag_gmac_256 = { 0x3d8cd7d92cf0a212, 0x12c1ddddab7e752c },
356 },
357 {
358 .n_bytes = 208,
359 .tag_gcm_128 = { 0x5467633795b92cf5, 0x6b45fb93e19f9341 },
360 .tag_gcm_256 = { 0xaeced4090d4d20bc, 0xd20161cd2617613e },
361 .tag_gmac_128 = { 0x02bb88dbe681ab69, 0xaf973bfd0b924144 },
362 .tag_gmac_256 = { 0x313020fc5283b45e, 0x1757616d4cf17c7f },
363 },
364 {
365 .n_bytes = 223,
366 .tag_gcm_128 = { 0x2f9c725903c07adf, 0xe01712c7d6d5055d },
367 .tag_gcm_256 = { 0xeae53a9b0d03a4f9, 0x42b2375d569d384e },
368 .tag_gmac_128 = { 0x6ea092dd400ec00d, 0x23237fa0bd0c1977 },
369 .tag_gmac_256 = { 0xa02e0f41f12f0053, 0xfba53430aa616219 },
370 },
371 {
372 .n_bytes = 224,
373 .tag_gcm_128 = { 0x73e40772334901a9, 0xddf6075b357cb307 },
374 .tag_gcm_256 = { 0x2eb3450f9462c968, 0xa9fb95f281c117e9 },
375 .tag_gmac_128 = { 0x33762525c12dfd1d, 0xcb3d8d0402c23ebf },
376 .tag_gmac_256 = { 0x30c6d05fb98c2a84, 0xaa2c9f6303383d3a },
377 },
378 {
379 .n_bytes = 239,
380 .tag_gcm_128 = { 0x184d15fd2e2c63a6, 0x3dfe238b88dd2924 },
381 .tag_gcm_256 = { 0x18deafee39975b36, 0xc07761cf4fc16c06 },
382 .tag_gmac_128 = { 0x10a48f2bc4e64f87, 0x85eec49ae83d4256 },
383 .tag_gmac_256 = { 0x5ac87f47f32770eb, 0x31706ca888dd6d44 },
384 },
385 {
386 .n_bytes = 240,
387 .tag_gcm_128 = { 0x153134f11cfa06ec, 0xd987642cc3688a34 },
388 .tag_gcm_256 = { 0x3eb66b6dc0bba824, 0x274c4648d515c844 },
389 .tag_gmac_128 = { 0x9e5afe891c7c7dcb, 0xa2b3fa1c026343e2 },
390 .tag_gmac_256 = { 0xe9120e4e9ff4b1e1, 0xb88bf68336342598 },
391 },
392 {
393 .n_bytes = 255,
394 .tag_gcm_128 = { 0x2b5e78936d1ace73, 0x15b766bfee18d348 },
395 .tag_gcm_256 = { 0xeb3741a345395c97, 0x02e11e0478e4cc5a },
396 .tag_gmac_128 = { 0xf7daf525751192df, 0x1b1641c3362905ac },
397 .tag_gmac_256 = { 0x0b16a2bb842caaca, 0x996732fedaa6b829 },
398 },
399 {
400 .n_bytes = 256,
401 .tag_gcm_128 = { 0x6d4507e0c354e80a, 0x2345eccddd0bd71e },
402 .tag_gcm_256 = { 0xa582b8122d699b63, 0xb16db944f6b073f3 },
403 .tag_gmac_128 = { 0xc58bb57544c07b40, 0x1a8dd3d8124cdf39 },
404 .tag_gmac_256 = { 0xb0f6db0da52e1dc2, 0xbd3a86a577ed208a },
405 },
406 {
407 .n_bytes = 319,
408 .tag_gcm_128 = { 0x2cd41fdf6f659a6b, 0x2486849d7666d76e },
409 .tag_gcm_256 = { 0xb7e416c8a716cb4d, 0xc7abe0d755b48845 },
410 .tag_gmac_128 = { 0xad83725394d4a36b, 0x5fdd42e941cad49b },
411 .tag_gmac_256 = { 0xbb0b73609b90f7eb, 0xe4d382b8b9b7d43e },
412 },
413 {
414 .n_bytes = 320,
415 .tag_gcm_128 = { 0x064cfe34b7d9f89c, 0xb6c7263f66c89b47 },
416 .tag_gcm_256 = { 0x1254c9ae84d8ff50, 0x9faeab423099dc9a },
417 .tag_gmac_128 = { 0xd91d60ce71d24533, 0xb1cdfd3b3200b171 },
418 .tag_gmac_256 = { 0x921de9e3d353559c, 0x3509d2775817a1de },
419 },
420 {
421 .n_bytes = 383,
422 .tag_gcm_128 = { 0x14788c7531d682e1, 0x8af79effe807a4dc },
423 .tag_gcm_256 = { 0x947754a0844b4a4d, 0x9eb3849d93d5048e },
424 .tag_gmac_128 = { 0xfa84d3a18ea6f895, 0x9a45c729797a8ac4 },
425 .tag_gmac_256 = { 0xe8e61e134e40359a, 0xe8e404d4b523607c },
426 },
427 {
428 .n_bytes = 384,
429 .tag_gcm_128 = { 0xfba3fcfd9022e9a7, 0x257ba59f12055d70 },
430 .tag_gcm_256 = { 0x7c6ca4e7fba2bc35, 0x1c590be09b3d549b },
431 .tag_gmac_128 = { 0x4ca0f087d812e48f, 0xd1d39c4338d57a04 },
432 .tag_gmac_256 = { 0xb0a2257cdec364c7, 0x6a4308976fda4e5d },
433 },
434 {
435 .n_bytes = 447,
436 .tag_gcm_128 = { 0x8fde1490c60f09bf, 0xd2932f04c202c5e4 },
437 .tag_gcm_256 = { 0x1845a80cbdcf2e62, 0xc7c49c9864bca732 },
438 .tag_gmac_128 = { 0x35aa90d2deb41b9c, 0x516ab85a3f17b71e },
439 .tag_gmac_256 = { 0x1db78f8b7b34d9e7, 0xd168177351e601fe },
440 },
441 {
442 .n_bytes = 448,
443 .tag_gcm_128 = { 0xd0a7b75f734a1a7c, 0xc7689b7c571a09bf },
444 .tag_gcm_256 = { 0xef3a9118c347118d, 0x282a7736060d7bb5 },
445 .tag_gmac_128 = { 0xce2dab9fede53934, 0x27f3d2bb2af9dd2e },
446 .tag_gmac_256 = { 0xca3b0cba7b772549, 0x3104ded0d6df7123 },
447 },
448 {
449 .n_bytes = 511,
450 .tag_gcm_128 = { 0x6fb5d366fa97b2d2, 0xed2d955fcc78e556 },
451 .tag_gcm_256 = { 0xc2bc52eca9348b7c, 0x0ec18a2eb637446f },
452 .tag_gmac_128 = { 0xe3012a4897edd5b5, 0xfe18c3ec617a7e88 },
453 .tag_gmac_256 = { 0x00e050eecf184591, 0xba24484f84867f4f },
454 },
455 {
456 .n_bytes = 512,
457 .tag_gcm_128 = { 0x25138f7fe88b54bd, 0xcc078b619c0e83a2 },
458 .tag_gcm_256 = { 0x63313c5ebe68fa92, 0xccc78784896cdcc3 },
459 .tag_gmac_128 = { 0xc688fe54c5595ec0, 0x5b8a687343c3ef03 },
460 .tag_gmac_256 = { 0x807c9f8e1c198242, 0xb1e0befc0b9b8193 },
461 },
462 {
463 .n_bytes = 575,
464 .tag_gcm_128 = { 0x0ce8e0b7332a7076, 0xe4aa7ab60dd0946a },
465 .tag_gcm_256 = { 0x585cff3cf78504d4, 0x45f3a9532ea40e8b },
466 .tag_gmac_128 = { 0xc06ca34dbad542b4, 0x840508722ff031dc },
467 .tag_gmac_256 = { 0xa46e22748f195488, 0x43817a5d4d17408a },
468 },
469 {
470 .n_bytes = 576,
471 .tag_gcm_128 = { 0x45360be81e8323bd, 0x10892d9804b75bb5 },
472 .tag_gcm_256 = { 0x66208ae5d809036e, 0x603d0af49475de88 },
473 .tag_gmac_128 = { 0xb4f2b1d05fd3a4ec, 0x6a15b7a05c3a5436 },
474 .tag_gmac_256 = { 0x8d78b8f7c7daf6ff, 0x925b2a92acb7356a },
475 },
476 {
477 .n_bytes = 577,
478 .tag_gcm_128 = { 0xc7e5cd17251fd138, 0xecfb0e05110303df },
479 .tag_gcm_256 = { 0x2939d12c85ea8cf8, 0xea063fba37c92eb5 },
480 .tag_gmac_128 = { 0x1fa02b370bec64a0, 0x8c759ca95a8cea85 },
481 .tag_gmac_256 = { 0x6a602c2b1fff6617, 0x17e06d829bd24a8d },
482 },
483 {
484 .n_bytes = 639,
485 .tag_gcm_128 = { 0xc679ef7a01e8f14c, 0x281e3b9a9f715cb9 },
486 .tag_gcm_256 = { 0x13abd2d67e162f98, 0xf637d467046af949 },
487 .tag_gmac_128 = { 0x05037392550b7ae2, 0x5095b4629ba46d40 },
488 .tag_gmac_256 = { 0xd8e8045772299aa7, 0x564d72fb58ea9808 },
489 },
490 {
491 .n_bytes = 640,
492 .tag_gcm_128 = { 0xff1a2c922cdd1336, 0xcaa02eab8691bf51 },
493 .tag_gcm_256 = { 0xd57e16f169d79da5, 0x3e2b47264f8efe9c },
494 .tag_gmac_128 = { 0xb32750b403bf66f8, 0x1b03ef08da0b9d80 },
495 .tag_gmac_256 = { 0x80ac3f38e2aacbfa, 0xd4ea7eb88213b629 },
496 },
497 {
498 .n_bytes = 703,
499 .tag_gcm_128 = { 0xefd0804f0155b8f1, 0xb1849ed867269569 },
500 .tag_gcm_256 = { 0xf66c5ecbd1a06fa4, 0x55ef36f3fdbe763a },
501 .tag_gmac_128 = { 0x725813463d977e5b, 0xd52aaabb923cfabb },
502 .tag_gmac_256 = { 0x4add8f86736adc52, 0xf6dabb4596975fd7 },
503 },
504 {
505 .n_bytes = 704,
506 .tag_gcm_128 = { 0x583b29260ea8e49f, 0xfaa93b0db98f9274 },
507 .tag_gcm_256 = { 0x0b777f2cd9e2f0ef, 0x01510fc85a99382e },
508 .tag_gmac_128 = { 0x89df280b0ec65cf3, 0xa3b3c05a87d2908b },
509 .tag_gmac_256 = { 0x9d510cb7732920fc, 0x16b672e611ae2f0a },
510 },
511 {
512 .n_bytes = 767,
513 .tag_gcm_128 = { 0x671ec58ab6d4a210, 0x0845fbe603169eff },
514 .tag_gcm_256 = { 0xb3913f7eb9bbdbbb, 0x4cb17aa290f6ab11 },
515 .tag_gmac_128 = { 0x3036046580a81443, 0xe18d34bb706e632b },
516 .tag_gmac_256 = { 0x4e82bc959349466c, 0x01210641d62bbdda },
517 },
518 {
519 .n_bytes = 768,
520 .tag_gcm_128 = { 0x66993b5de915fc6e, 0x4aaf0b8441040267 },
521 .tag_gcm_256 = { 0x958ed0a6c1bf11e0, 0xc29d9f4a8ce8bdc6 },
522 .tag_gmac_128 = { 0x02674435b179fddc, 0xe016a6a0540bb9be },
523 .tag_gmac_256 = { 0xf562c523b24bf164, 0x257cb21a7b602579 },
524 },
525 {
526 .n_bytes = 831,
527 .tag_gcm_128 = { 0x4914f7980699f93c, 0xc2e44fdba6a839e7 },
528 .tag_gcm_256 = { 0xa8fab43ecd572a25, 0x3cd465e491195b81 },
529 .tag_gmac_128 = { 0xa6d725516e956d5d, 0x630768e80ac3de3d },
530 .tag_gmac_256 = { 0xb4746cdde367c9e2, 0x3ea53280901a0375 },
531 },
532 {
533 .n_bytes = 832,
534 .tag_gcm_128 = { 0xac9a519f06fb8c70, 0xdc1a6544ed2cfcf7 },
535 .tag_gcm_256 = { 0x54877a7ccd02c592, 0x1a09a4474d903b56 },
536 .tag_gmac_128 = { 0xd24937cc8b938b05, 0x8d17d73a7909bbd7 },
537 .tag_gmac_256 = { 0x9d62f65eaba46b95, 0xef7f624f71ba7695 },
538 },
539 {
540 .n_bytes = 895,
541 .tag_gcm_128 = { 0x3d365bf4d44c1071, 0x07ac3129079f2013 },
542 .tag_gcm_256 = { 0x608543d4fe6526a1, 0xc78a987b87c8d96c },
543 .tag_gmac_128 = { 0xc71cf903f7a557c5, 0x06788583ad2122a5 },
544 .tag_gmac_256 = { 0x7cdaa511565b289a, 0xf818a4c85a8bd575 },
545 },
546 {
547 .n_bytes = 896,
548 .tag_gcm_128 = { 0x97000fafd1359a0b, 0xfc226d534866b495 },
549 .tag_gcm_256 = { 0x1850ee7af3133326, 0xf198d539eee4b1f5 },
550 .tag_gmac_128 = { 0x7138da25a1114bdf, 0x4deedee9ec8ed265 },
551 .tag_gmac_256 = { 0x249e9e7ec6d879c7, 0x7abfa88b8072fb54 },
552 },
553 {
554 .n_bytes = 959,
555 .tag_gcm_128 = { 0x17200025564902f2, 0x3f2c3b711ba4086d },
556 .tag_gcm_256 = { 0x3d0bf3e8b24e296d, 0x42fe0f54e33deb6d },
557 .tag_gmac_128 = { 0x8baae9b6f3bd797a, 0x177e0b6c577f2436 },
558 .tag_gmac_256 = { 0x853f961c965f472c, 0x8adc4113b3cf933a },
559 },
560 {
561 .n_bytes = 960,
562 .tag_gcm_128 = { 0x2a30ca7325e7a81b, 0xacbc71832bdceb63 },
563 .tag_gcm_256 = { 0x037786319dc22ed7, 0x6730acf359ec3b6e },
564 .tag_gmac_128 = { 0x702dd2fbc0ec5bd2, 0x61e7618d42914e06 },
565 .tag_gmac_256 = { 0x52b3152d961cbb82, 0x6ab088b034f6e3e7 },
566 },
567 {
568 .n_bytes = 1023,
569 .tag_gcm_128 = { 0x8e8789e6c4c90855, 0x4ec5503d7f953df6 },
570 .tag_gcm_256 = { 0xdb0afebe6c085f53, 0x4eb6f07b63b8a020 },
571 .tag_gmac_128 = { 0x6e9b48e5ad508180, 0xdc86430db2bad514 },
572 .tag_gmac_256 = { 0xbb52b4fbf236b741, 0x47ae63bc836dfba3 },
573 },
574 {
575 .n_bytes = 1024,
576 .tag_gcm_128 = { 0x94e1ccbea0f24089, 0xf51b53b600363bd2 },
577 .tag_gcm_256 = { 0x70f3eb3d562f0b34, 0xffd09e1a25d5bef3 },
578 .tag_gmac_128 = { 0x65a2b560392ecee3, 0x30079a9a9dbbd3a3 },
579 .tag_gmac_256 = { 0x4d361736c43090e6, 0x135810df49dcc981 },
580 },
581 {
582 .n_bytes = 1025,
583 .tag_gcm_128 = { 0x830a99737df5a71a, 0xd9ea6e87c63d3aae },
584 .tag_gcm_256 = { 0xa3fc30e0254a5ee2, 0x52e59adc9a75be40 },
585 .tag_gmac_128 = { 0xb217556427fc09ab, 0xc32fd72ec886730d },
586 .tag_gmac_256 = { 0xeab5a9a02cb0869e, 0xd59e51684bc2839c },
587 },
588 {
589 .n_bytes = 1039,
590 .tag_gcm_128 = { 0x238f229130e92934, 0x52752fc860bca067 },
591 .tag_gcm_256 = { 0xae2754bcaed68191, 0xe0770d1e9a7a67f3 },
592 .tag_gmac_128 = { 0xe030ad2beb01d85d, 0xf10c78b1b64c27af },
593 .tag_gmac_256 = { 0x081b45e126248e85, 0xca0789f30e1c47a1 },
594 },
595 {
596 .n_bytes = 1040,
597 .tag_gcm_128 = { 0x4eebcf7391d66c6f, 0x107d8bef4a93d9c6 },
598 .tag_gcm_256 = { 0xbeb02ae5466964f3, 0x8eb90364c5f9e4cb },
599 .tag_gmac_128 = { 0x451deb85fbf27da5, 0xe47e8c91106dadda },
600 .tag_gmac_256 = { 0x85f0a72f3497699d, 0xe6fce0193cc6c9d1 },
601 },
602 {
603 .n_bytes = 1041,
604 .tag_gcm_128 = { 0xbbddfb0304411d71, 0xe573f63553d7ede4 },
605 .tag_gcm_256 = { 0x68e42d2959af0b24, 0x35ac8e73c749e7f4 },
606 .tag_gmac_128 = { 0x98d022b9896b68f8, 0x98dfde2a17b2869b },
607 .tag_gmac_256 = { 0xb8dac6add35d0d9b, 0x1c55973c6dd769af },
608 },
609 {
610 .n_bytes = 1536,
611 .tag_gcm_128 = { 0x7d8933fd922418bd, 0xc88c2f289c5d3d83 },
612 .tag_gcm_256 = { 0x966c103eb6ee69f2, 0x2f6b070b5c0fc66f },
613 .tag_gmac_128 = { 0x3b70f6154246e758, 0xd485c0edf236b6e2 },
614 .tag_gmac_256 = { 0xfefe1832387b9768, 0xc876712098256ca3 },
615 },
616 {
617 .n_bytes = 2047,
618 .tag_gcm_128 = { 0x15c6bbcb0d835fd4, 0xc33afd1328c1deb1 },
619 .tag_gcm_256 = { 0xcde3edeea228ada6, 0x8276721a8662e708 },
620 .tag_gmac_128 = { 0xb556b0e42419759e, 0x23b0365cf956a3ad },
621 .tag_gmac_256 = { 0x8df762cbbe4b2a04, 0x6841bc61e5702419 },
622 },
623 {
624 .n_bytes = 2048,
625 .tag_gcm_128 = { 0xc5ddbeb8765e3aac, 0x1bad7349fd9f2b50 },
626 .tag_gcm_256 = { 0xa2a623dde251a98d, 0xaf905fbd16f6a7d9 },
627 .tag_gmac_128 = { 0xe20f1e533df2b3d0, 0x5d170bdbcc278a63 },
628 .tag_gmac_256 = { 0x9663185c4342cd4a, 0x82d3c5a3a4998fc6 },
629 },
630 {
631 .n_bytes = 2064,
632 .tag_gcm_128 = { 0x12b76ea0a6ee9cbc, 0xdaecfae7c815aa58 },
633 .tag_gcm_256 = { 0xb5bb2f76028713dd, 0xc8f3a1448b3bd050 },
634 .tag_gmac_128 = { 0x019445c168c42f9b, 0xdf33e251bd9a27fe },
635 .tag_gmac_256 = { 0xbbabd0cefc4d6a42, 0xb138675ca66ba54f },
636 },
637 {
638 .n_bytes = 2065,
639 .tag_gcm_128 = { 0x8758c5168ffc3fd7, 0x554f1df7cfa3b976 },
640 .tag_gcm_256 = { 0xc9808cf0fd21aede, 0xe26921f3fd308006 },
641 .tag_gmac_128 = { 0x44a57e7a32031596, 0x75476d5542faa57b },
642 .tag_gmac_256 = { 0xea0e81807fa79a4a, 0x889cca80746fb8d5 },
643 },
644 {
645 .n_bytes = 4095,
646 .tag_gcm_128 = { 0x06db87757f541dc9, 0x823c619c6b88ef80 },
647 .tag_gcm_256 = { 0xdf0861a56a7fe7b0, 0xe077a5c735cc21b2 },
648 .tag_gmac_128 = { 0x43cb482bea0449e9, 0x70d668af983c9a6c },
649 .tag_gmac_256 = { 0x5fc304ad7be1d19a, 0x81bf2f4111de0b06 },
650 },
651 {
652 .n_bytes = 4096,
653 .tag_gcm_128 = { 0xe4afdad642876152, 0xf78cfcfcb92520b6 },
654 .tag_gcm_256 = { 0x7552cda8d91bdab1, 0x4bf57b7567d59e89 },
655 .tag_gmac_128 = { 0xac5240f8e9c49cfc, 0x2a3c9d0999aded50 },
656 .tag_gmac_256 = { 0x9fb6cd8f10f7b6c5, 0x16e442c147869222 },
657 },
658 {
659 .n_bytes = 4112,
660 .tag_gcm_128 = { 0x2a34db8f06bcf0ee, 0x7a4a2456fa340c33 },
661 .tag_gcm_256 = { 0x4b6c0c5b5c943f5e, 0x6d1669e849ce061a },
662 .tag_gmac_128 = { 0x143bfc9ab07d9bb5, 0xf0aa7510a9039349 },
663 .tag_gmac_256 = { 0x8a97bdd033775ba0, 0x5901a5160739be25 },
664 },
665 {
666 .n_bytes = 4113,
667 .tag_gcm_128 = { 0x296acfcbcbf529af, 0xe3e2cfb1bc5855c8 },
668 .tag_gcm_256 = { 0x181f6f9068ea477e, 0x1e05bfd01ee3e173 },
669 .tag_gmac_128 = { 0x0d81fcb0829e3c8b, 0x68016225b5fa7745 },
670 .tag_gmac_256 = { 0xa2421ac50d65c6b5, 0x84bd16fa55486af8 },
671 },
672 {
673 .n_bytes = 16382,
674 .tag_gcm_128 = { 0xd39fd367e00a103d, 0xf873a278b32d207f },
675 .tag_gcm_256 = { 0xa8da09a851ae6c88, 0x2ef17f0da7f191f1 },
676 .tag_gmac_128 = { 0xd4a22896f44c1c14, 0x69a5d02715c90ea4 },
677 .tag_gmac_256 = { 0x64788ca5e11722b6, 0x63d74a4b24538762 },
678 },
679 {
680 .n_bytes = 16383,
681 .tag_gcm_128 = { 0x2162b91aad49eebc, 0x28c7efe93e639c75 },
682 .tag_gcm_256 = { 0xc5baee5e40004087, 0xf6b26211facc66a5 },
683 .tag_gmac_128 = { 0x3ec003d690d3d846, 0x204baef851d8ad7d },
684 .tag_gmac_256 = { 0xdb51d6f5dddf16bb, 0x529f3825cf78dbd5 },
685 },
686 {
687 .n_bytes = 16384,
688 .tag_gcm_128 = { 0x2272e778c4c5c9ef, 0x84c50021e75ddbab },
689 .tag_gcm_256 = { 0x6c32f1c5666b1f4c, 0x91142a86ae5241b2 },
690 .tag_gmac_128 = { 0x43dadd5ecee9674b, 0xa30fea9ae8091c6c },
691 .tag_gmac_256 = { 0xc360b76ac1887181, 0xcb732f29ea86edeb },
692 },
693 {
694 .n_bytes = 16385,
695 .tag_gcm_128 = { 0xe2a47837578b4056, 0xf96e7233cbeb1ce1 },
696 .tag_gcm_256 = { 0xfa3aa4ebe36fb390, 0x6a2cf1671f4f1a01 },
697 .tag_gmac_128 = { 0xfd0b7312c4975687, 0xdd3096b1c850e80a },
698 .tag_gmac_256 = { 0xaf2cae4642a5536a, 0xb27aff5cc8bd354c },
699 },
700 {
701 .n_bytes = 16386,
702 .tag_gcm_128 = { 0xe1b4c0e5825304ae, 0x48c5dd82aa114320 },
703 .tag_gcm_256 = { 0x76c3612118f47fa8, 0xdd0a47b132ecad3a },
704 .tag_gmac_128 = { 0x346bc841a7f5b642, 0x6fb1b96391c66b40 },
705 .tag_gmac_256 = { 0x2f1a1b6a000e18b2, 0xf7cba25e02551d43 },
706 },
707};
708
709#define MAX_TEST_DATA_LEN 32768
710
711static const struct
712{
713 char *name;
714 const u8 *pt, *key128, *key256, *ct128, *ct256, *tag128, *tag256, *aad, *iv;
715 u32 data_len, tag128_len, tag256_len, aad_len;
716} test_cases[] = {
717 /* test cases */
718 {
719 .name = "GCM Spec. TC1",
720 .iv = tc1_iv,
721 .key128 = tc1_key128,
722 .key256 = tc1_key256,
723 .tag128 = tc1_tag128,
724 .tag128_len = sizeof (tc1_tag128),
725 .tag256 = tc1_tag256,
726 .tag256_len = sizeof (tc1_tag256),
727 },
728 {
729 .name = "GCM Spec. TC2",
730 .pt = tc2_plaintext,
731 .data_len = sizeof (tc2_plaintext),
732 .iv = tc1_iv,
733 .key128 = tc1_key128,
734 .key256 = tc1_key256,
735 .ct128 = tc2_ciphertext128,
736 .ct256 = tc2_ciphertext256,
737 .tag128 = tc2_tag128,
738 .tag128_len = sizeof (tc2_tag128),
739 .tag256 = tc2_tag256,
740 .tag256_len = sizeof (tc2_tag256),
741 },
742 {
743 .name = "GCM Spec. TC3",
744 .pt = tc3_plaintext,
745 .data_len = sizeof (tc3_plaintext),
746 .iv = tc3_iv,
747 .key128 = tc3_key128,
748 .key256 = tc3_key256,
749 .ct128 = tc3_ciphertext128,
750 .ct256 = tc3_ciphertext256,
751 .tag128 = tc3_tag128,
752 .tag128_len = sizeof (tc3_tag128),
753 .tag256 = tc3_tag256,
754 .tag256_len = sizeof (tc3_tag256),
755 },
756 {
757 .name = "GCM Spec. TC4",
758 .pt = tc4_plaintext,
759 .data_len = sizeof (tc4_plaintext),
760 .aad = tc4_aad,
761 .aad_len = sizeof (tc4_aad),
762 .iv = tc3_iv,
763 .key128 = tc3_key128,
764 .key256 = tc3_key256,
765 .ct128 = tc4_ciphertext128,
766 .ct256 = tc4_ciphertext256,
767 .tag128 = tc4_tag128,
768 .tag128_len = sizeof (tc4_tag128),
769 .tag256 = tc4_tag256,
770 .tag256_len = sizeof (tc4_tag256),
771 }
772};
773
774#define perftest_aesXXX_enc_var_sz(a) \
775 void __test_perf_fn perftest_aes##a##_enc_var_sz (test_perf_t *tp) \
776 { \
777 u32 n = tp->n_ops; \
778 aes_gcm_key_data_t *kd = test_mem_alloc (sizeof (*kd)); \
779 u8 *dst = test_mem_alloc (n + 16); \
780 u8 *src = test_mem_alloc_and_fill_inc_u8 (n + 16, 0, 0); \
781 u8 *tag = test_mem_alloc (16); \
782 u8 *key = test_mem_alloc_and_fill_inc_u8 (32, 192, 0); \
783 u8 *iv = test_mem_alloc_and_fill_inc_u8 (16, 128, 0); \
784 \
785 clib_aes_gcm_key_expand (kd, key, AES_KEY_##a); \
786 \
787 test_perf_event_enable (tp); \
788 clib_aes##a##_gcm_enc (kd, src, n, 0, 0, iv, 16, dst, tag); \
789 test_perf_event_disable (tp); \
790 }
791
792#define perftest_aesXXX_dec_var_sz(a) \
793 void __test_perf_fn perftest_aes##a##_dec_var_sz (test_perf_t *tp) \
794 { \
795 u32 n = tp->n_ops; \
796 aes_gcm_key_data_t *kd = test_mem_alloc (sizeof (*kd)); \
797 u8 *dst = test_mem_alloc (n + 16); \
798 u8 *src = test_mem_alloc_and_fill_inc_u8 (n + 16, 0, 0); \
799 u8 *tag = test_mem_alloc (16); \
800 u8 *key = test_mem_alloc_and_fill_inc_u8 (32, 192, 0); \
801 u8 *iv = test_mem_alloc_and_fill_inc_u8 (16, 128, 0); \
802 int *rv = test_mem_alloc (16); \
803 \
804 clib_aes_gcm_key_expand (kd, key, AES_KEY_##a); \
805 \
806 test_perf_event_enable (tp); \
807 rv[0] = clib_aes##a##_gcm_dec (kd, src, n, 0, 0, iv, tag, 16, dst); \
808 test_perf_event_disable (tp); \
809 }
810
811static clib_error_t *
812test_clib_aes128_gcm_enc (clib_error_t *err)
813{
814 aes_gcm_key_data_t kd;
815 u8 pt[MAX_TEST_DATA_LEN];
816 u8 ct[MAX_TEST_DATA_LEN];
817 u8 tag[16];
818
819 FOREACH_ARRAY_ELT (tc, test_cases)
820 {
821 clib_aes_gcm_key_expand (&kd, tc->key128, AES_KEY_128);
822 clib_aes128_gcm_enc (&kd, tc->pt, tc->data_len, tc->aad, tc->aad_len,
823 tc->iv, tc->tag128_len, ct, tag);
824
825 if (memcmp (tc->tag128, tag, tc->tag128_len) != 0)
826 return clib_error_return (err, "%s: invalid tag", tc->name);
827
828 if (tc->data_len && memcmp (tc->ct128, ct, tc->data_len) != 0)
829 return clib_error_return (err, "%s: invalid ciphertext", tc->name);
830 }
831
832 for (int i = 0; i < sizeof (pt); i++)
833 pt[i] = i;
834
835 clib_aes_gcm_key_expand (&kd, inc_key, AES_KEY_128);
836 FOREACH_ARRAY_ELT (tc, inc_test_cases)
837 {
838 clib_aes128_gcm_enc (&kd, pt, tc->n_bytes, 0, 0, inc_iv, 16, ct, tag);
839
840 if (memcmp (tc->tag_gcm_128, tag, 16) != 0)
841 return clib_error_return (err, "incremental %u bytes: invalid tag",
842 tc->n_bytes);
843 }
844
845 return err;
846}
847
848perftest_aesXXX_enc_var_sz (128);
849
850REGISTER_TEST (clib_aes128_gcm_enc) = {
851 .name = "clib_aes128_gcm_enc",
852 .fn = test_clib_aes128_gcm_enc,
853 .perf_tests = PERF_TESTS ({ .name = "variable size (per byte)",
854 .n_ops = 1424,
855 .fn = perftest_aes128_enc_var_sz },
856 { .name = "variable size (per byte)",
857 .n_ops = 1 << 20,
858 .fn = perftest_aes128_enc_var_sz }),
859};
860
861static clib_error_t *
862test_clib_aes256_gcm_enc (clib_error_t *err)
863{
864 aes_gcm_key_data_t kd;
865 u8 pt[MAX_TEST_DATA_LEN];
866 u8 ct[MAX_TEST_DATA_LEN];
867 u8 tag[16];
868
869 FOREACH_ARRAY_ELT (tc, test_cases)
870 {
871 clib_aes_gcm_key_expand (&kd, tc->key256, AES_KEY_256);
872 clib_aes256_gcm_enc (&kd, tc->pt, tc->data_len, tc->aad, tc->aad_len,
873 tc->iv, tc->tag256_len, ct, tag);
874
875 if (memcmp (tc->tag256, tag, tc->tag256_len) != 0)
876 return clib_error_return (err, "%s: invalid tag", tc->name);
877
878 if (tc->data_len && memcmp (tc->ct256, ct, tc->data_len) != 0)
879 return clib_error_return (err, "%s: invalid ciphertext", tc->name);
880 }
881
882 for (int i = 0; i < sizeof (pt); i++)
883 pt[i] = i;
884
885 clib_aes_gcm_key_expand (&kd, inc_key, AES_KEY_256);
886 FOREACH_ARRAY_ELT (tc, inc_test_cases)
887 {
888 clib_aes256_gcm_enc (&kd, pt, tc->n_bytes, 0, 0, inc_iv, 16, ct, tag);
889
890 if (memcmp (tc->tag_gcm_256, tag, 16) != 0)
891 return clib_error_return (err, "incremental %u bytes: invalid tag",
892 tc->n_bytes);
893 }
894
895 return err;
896}
897
898perftest_aesXXX_enc_var_sz (256);
899REGISTER_TEST (clib_aes256_gcm_enc) = {
900 .name = "clib_aes256_gcm_enc",
901 .fn = test_clib_aes256_gcm_enc,
902 .perf_tests = PERF_TESTS ({ .name = "variable size (per byte)",
903 .n_ops = 1424,
904 .fn = perftest_aes256_enc_var_sz },
905 { .name = "variable size (per byte)",
906 .n_ops = 1 << 20,
907 .fn = perftest_aes256_enc_var_sz }),
908};
909
910static clib_error_t *
911test_clib_aes128_gcm_dec (clib_error_t *err)
912{
913 aes_gcm_key_data_t kd;
914 u8 pt[MAX_TEST_DATA_LEN];
915 u8 ct[MAX_TEST_DATA_LEN];
916 u8 tag[16];
917 int rv;
918
919 FOREACH_ARRAY_ELT (tc, test_cases)
920 {
921 clib_aes_gcm_key_expand (&kd, tc->key128, AES_KEY_128);
922 rv = clib_aes128_gcm_dec (&kd, tc->ct128, tc->data_len, tc->aad,
923 tc->aad_len, tc->iv, tc->tag128,
924 tc->tag128_len, pt);
925
926 if (!rv)
927 return clib_error_return (err, "%s: invalid tag", tc->name);
928
929 if (tc->data_len && memcmp (tc->pt, pt, tc->data_len) != 0)
930 return clib_error_return (err, "%s: invalid ciphertext", tc->name);
931 }
932
933 for (int i = 0; i < sizeof (pt); i++)
934 pt[i] = i;
935
936 clib_aes_gcm_key_expand (&kd, inc_key, AES_KEY_128);
937 clib_aes128_gcm_enc (&kd, pt, sizeof (ct), 0, 0, inc_iv, 16, ct, tag);
938
939 FOREACH_ARRAY_ELT (tc, inc_test_cases)
940 {
941 if (!clib_aes128_gcm_dec (&kd, ct, tc->n_bytes, 0, 0, inc_iv,
942 (u8 *) tc->tag_gcm_128, 16, pt))
943 return clib_error_return (err, "incremental %u bytes: invalid tag",
944 tc->n_bytes);
945 }
946
947 return err;
948}
949
950perftest_aesXXX_dec_var_sz (128);
951
952REGISTER_TEST (clib_aes128_gcm_dec) = {
953 .name = "clib_aes128_gcm_dec",
954 .fn = test_clib_aes128_gcm_dec,
955 .perf_tests = PERF_TESTS ({ .name = "variable size (per byte)",
956 .n_ops = 1424,
957 .fn = perftest_aes128_dec_var_sz },
958 { .name = "variable size (per byte)",
959 .n_ops = 1 << 20,
960 .fn = perftest_aes128_dec_var_sz }),
961};
962
963static clib_error_t *
964test_clib_aes256_gcm_dec (clib_error_t *err)
965{
966 aes_gcm_key_data_t kd;
967 u8 pt[MAX_TEST_DATA_LEN];
968 u8 ct[MAX_TEST_DATA_LEN];
969 u8 tag[16];
970 int rv;
971
972 FOREACH_ARRAY_ELT (tc, test_cases)
973 {
974 clib_aes_gcm_key_expand (&kd, tc->key256, AES_KEY_256);
975 rv = clib_aes256_gcm_dec (&kd, tc->ct256, tc->data_len, tc->aad,
976 tc->aad_len, tc->iv, tc->tag256,
977 tc->tag256_len, pt);
978
979 if (!rv)
980 return clib_error_return (err, "%s: invalid tag", tc->name);
981
982 if (tc->data_len && memcmp (tc->pt, pt, tc->data_len) != 0)
983 return clib_error_return (err, "%s: invalid ciphertext", tc->name);
984 }
985
986 for (int i = 0; i < sizeof (pt); i++)
987 pt[i] = i;
988
989 clib_aes_gcm_key_expand (&kd, inc_key, AES_KEY_128);
990 clib_aes128_gcm_enc (&kd, pt, sizeof (ct), 0, 0, inc_iv, 16, ct, tag);
991
992 FOREACH_ARRAY_ELT (tc, inc_test_cases)
993 {
994 if (!clib_aes128_gcm_dec (&kd, ct, tc->n_bytes, 0, 0, inc_iv,
995 (u8 *) tc->tag_gcm_128, 16, pt))
996 return clib_error_return (err, "incremental %u bytes: invalid tag",
997 tc->n_bytes);
998 }
999
1000 return err;
1001}
1002
1003perftest_aesXXX_dec_var_sz (256);
1004REGISTER_TEST (clib_aes256_gcm_dec) = {
1005 .name = "clib_aes256_gcm_dec",
1006 .fn = test_clib_aes256_gcm_dec,
1007 .perf_tests = PERF_TESTS ({ .name = "variable size (per byte)",
1008 .n_ops = 1424,
1009 .fn = perftest_aes256_dec_var_sz },
1010 { .name = "variable size (per byte)",
1011 .n_ops = 1 << 20,
1012 .fn = perftest_aes256_dec_var_sz }),
1013};
1014
1015static const u8 gmac1_key[] = {
1016 0x77, 0xbe, 0x63, 0x70, 0x89, 0x71, 0xc4, 0xe2,
1017 0x40, 0xd1, 0xcb, 0x79, 0xe8, 0xd7, 0x7f, 0xeb
1018};
1019static const u8 gmac1_iv[] = { 0xe0, 0xe0, 0x0f, 0x19, 0xfe, 0xd7,
1020 0xba, 0x01, 0x36, 0xa7, 0x97, 0xf3 };
1021static const u8 gmac1_aad[] = {
1022 0x7a, 0x43, 0xec, 0x1d, 0x9c, 0x0a, 0x5a, 0x78,
1023 0xa0, 0xb1, 0x65, 0x33, 0xa6, 0x21, 0x3c, 0xab
1024};
1025static const u8 gmac1_tag[] = {
1026 0x20, 0x9f, 0xcc, 0x8d, 0x36, 0x75, 0xed, 0x93,
1027 0x8e, 0x9c, 0x71, 0x66, 0x70, 0x9d, 0xd9, 0x46
1028};
1029
1030static const u8 gmac2_key[] = {
1031 0x20, 0xb5, 0xb6, 0xb8, 0x54, 0xe1, 0x87, 0xb0,
1032 0x58, 0xa8, 0x4d, 0x57, 0xbc, 0x15, 0x38, 0xb6
1033};
1034
1035static const u8 gmac2_iv[] = { 0x94, 0xc1, 0x93, 0x5a, 0xfc, 0x06,
1036 0x1c, 0xbf, 0x25, 0x4b, 0x93, 0x6f };
1037
1038static const u8 gmac2_aad[] = {
1039 0xca, 0x41, 0x8e, 0x71, 0xdb, 0xf8, 0x10, 0x03, 0x81, 0x74, 0xea, 0xa3, 0x71,
1040 0x9b, 0x3f, 0xcb, 0x80, 0x53, 0x1c, 0x71, 0x10, 0xad, 0x91, 0x92, 0xd1, 0x05,
1041 0xee, 0xaa, 0xfa, 0x15, 0xb8, 0x19, 0xac, 0x00, 0x56, 0x68, 0x75, 0x2b, 0x34,
1042 0x4e, 0xd1, 0xb2, 0x2f, 0xaf, 0x77, 0x04, 0x8b, 0xaf, 0x03, 0xdb, 0xdd, 0xb3,
1043 0xb4, 0x7d, 0x6b, 0x00, 0xe9, 0x5c, 0x4f, 0x00, 0x5e, 0x0c, 0xc9, 0xb7, 0x62,
1044 0x7c, 0xca, 0xfd, 0x3f, 0x21, 0xb3, 0x31, 0x2a, 0xa8, 0xd9, 0x1d, 0x3f, 0xa0,
1045 0x89, 0x3f, 0xe5, 0xbf, 0xf7, 0xd4, 0x4c, 0xa4, 0x6f, 0x23, 0xaf, 0xe0
1046};
1047
1048static const u8 gmac2_tag[] = {
1049 0xb3, 0x72, 0x86, 0xeb, 0xaf, 0x4a, 0x54, 0xe0,
1050 0xff, 0xc2, 0xa1, 0xde, 0xaf, 0xc9, 0xf6, 0xdb
1051};
1052
1053static const struct
1054{
1055 char *name;
1056 const u8 *key128, *key256, *tag128, *tag256, *aad, *iv;
1057 u32 tag128_len, tag256_len, aad_len;
1058} gmac_test_cases[] = {
1059 /* test cases */
1060 {
1061 .name = "GMAC1",
1062 .iv = gmac1_iv,
1063 .key128 = gmac1_key,
1064 .tag128 = gmac1_tag,
1065 .tag128_len = sizeof (gmac1_tag),
1066 .aad = gmac1_aad,
1067 .aad_len = sizeof (gmac1_aad),
1068 },
1069 {
1070 .name = "GMAC2",
1071 .iv = gmac2_iv,
1072 .key128 = gmac2_key,
1073 .tag128 = gmac2_tag,
1074 .tag128_len = sizeof (gmac2_tag),
1075 .aad = gmac2_aad,
1076 .aad_len = sizeof (gmac2_aad),
1077 },
1078};
1079
1080static clib_error_t *
1081test_clib_aes128_gmac (clib_error_t *err)
1082{
1083 u8 data[MAX_TEST_DATA_LEN];
1084 aes_gcm_key_data_t kd;
1085 u8 tag[16];
1086
1087 FOREACH_ARRAY_ELT (tc, gmac_test_cases)
1088 {
1089 clib_aes_gcm_key_expand (&kd, tc->key128, AES_KEY_128);
1090 clib_aes128_gmac (&kd, tc->aad, tc->aad_len, tc->iv, tc->tag128_len,
1091 tag);
1092
1093 if (memcmp (tc->tag128, tag, tc->tag128_len) != 0)
1094 return clib_error_return (err, "%s: invalid tag", tc->name);
1095 }
1096
1097 for (int i = 0; i < sizeof (data); i++)
1098 data[i] = i;
1099
1100 clib_aes_gcm_key_expand (&kd, inc_key, AES_KEY_128);
1101 FOREACH_ARRAY_ELT (tc, inc_test_cases)
1102 {
1103 clib_aes128_gmac (&kd, data, tc->n_bytes, inc_iv, 16, tag);
1104
1105 if (memcmp (tc->tag_gmac_128, tag, 16) != 0)
1106 return clib_error_return (err, "incremental %u bytes: invalid tag",
1107 tc->n_bytes);
1108 }
1109
1110 return err;
1111}
1112
1113void __test_perf_fn
1114perftest_gmac256_fixed_512byte (test_perf_t *tp)
1115{
1116 uword n = tp->n_ops;
1117 aes_gcm_key_data_t *kd = test_mem_alloc (sizeof (aes_gcm_key_data_t));
1118 u8 *ivs = test_mem_alloc_and_fill_inc_u8 (n * 12, 0, 0);
1119 u8 *tags = test_mem_alloc_and_fill_inc_u8 (8 + n * 16, 0, 0);
1120 u8 *data = test_mem_alloc_and_fill_inc_u8 (512, 0, 0);
1121
1122 test_perf_event_enable (tp);
1123 clib_aes_gcm_key_expand (kd, inc_key, AES_KEY_128);
1124
1125 for (int i = 0; i < n; i++)
1126 clib_aes128_gmac (kd, data, 512, ivs + n * 12, 16, tags + n * 16);
1127 test_perf_event_disable (tp);
1128}
1129
1130REGISTER_TEST (clib_aes128_gmac) = {
1131 .name = "clib_aes128_gmac",
1132 .fn = test_clib_aes128_gmac,
1133 .perf_tests = PERF_TESTS ({ .name = "fixed (512 byte)",
1134 .n_ops = 256,
1135 .fn = perftest_gmac256_fixed_512byte }),
1136};
1137
1138static clib_error_t *
1139test_clib_aes256_gmac (clib_error_t *err)
1140{
1141 u8 data[MAX_TEST_DATA_LEN];
1142 aes_gcm_key_data_t kd;
1143 u8 tag[16];
1144
1145#if 0
1146 FOREACH_ARRAY_ELT (tc, gmac_test_cases)
1147 {
1148 clib_aes_gcm_key_expand (&kd, tc->key256, AES_KEY_256);
1149 clib_aes256_gmac (&kd, tc->aad, tc->aad_len, tc->iv, tc->tag256_len,
1150 tag);
1151
1152 if (memcmp (tc->tag256, tag, tc->tag256_len) != 0)
1153 return clib_error_return (err, "%s: invalid tag", tc->name);
1154 }
1155#endif
1156
1157 for (int i = 0; i < sizeof (data); i++)
1158 data[i] = i;
1159
1160 clib_aes_gcm_key_expand (&kd, inc_key, AES_KEY_256);
1161 FOREACH_ARRAY_ELT (tc, inc_test_cases)
1162 {
1163 clib_aes256_gmac (&kd, data, tc->n_bytes, inc_iv, 16, tag);
1164
1165 if (memcmp (tc->tag_gmac_256, tag, 16) != 0)
1166 return clib_error_return (err, "incremental %u bytes: invalid tag",
1167 tc->n_bytes);
1168 }
1169
1170 return err;
1171}
1172
1173REGISTER_TEST (clib_aes256_gmac) = {
1174 .name = "clib_aes256_gmac",
1175 .fn = test_clib_aes256_gmac,
1176};
1177#endif