jmg
/
ed448goldilocks
1
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
561 Commits
2 Branches
1.6 MiB
 
 
 
 
 
Tree: c3917f27cb
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'c3917f27cb'
${ noResults }
ed448goldilocks/test/vectors.inc.cxx

1208 lines
43 KiB
Raw Blame History 

  1. 

  2. /* X25519, X448 test vectors */

  3. template<> const uint8_t Tests<Ristretto>::rfc7748_1[32] = {

  4.     0x42,0x2c,0x8e,0x7a,0x62,0x27,0xd7,0xbc,

  5.     0xa1,0x35,0x0b,0x3e,0x2b,0xb7,0x27,0x9f,

  6.     0x78,0x97,0xb8,0x7b,0xb6,0x85,0x4b,0x78,

  7.     0x3c,0x60,0xe8,0x03,0x11,0xae,0x30,0x79

  8. };

  9. template<> const uint8_t Tests<Ristretto>::rfc7748_1000[32] = {

  10.     0x68,0x4c,0xf5,0x9b,0xa8,0x33,0x09,0x55,

  11.     0x28,0x00,0xef,0x56,0x6f,0x2f,0x4d,0x3c,

  12.     0x1c,0x38,0x87,0xc4,0x93,0x60,0xe3,0x87,

  13.     0x5f,0x2e,0xb9,0x4d,0x99,0x53,0x2c,0x51

  14. };

  15. template<> const uint8_t Tests<Ristretto>::rfc7748_1000000[32] = {

  16.     0x7c,0x39,0x11,0xe0,0xab,0x25,0x86,0xfd,

  17.     0x86,0x44,0x97,0x29,0x7e,0x57,0x5e,0x6f,

  18.     0x3b,0xc6,0x01,0xc0,0x88,0x3c,0x30,0xdf,

  19.     0x5f,0x4d,0xd2,0xd2,0x4f,0x66,0x54,0x24

  20. };

  21. template<> const uint8_t Tests<Ed448Goldilocks>::rfc7748_1[56] = {

  22.     0x3f,0x48,0x2c,0x8a,0x9f,0x19,0xb0,0x1e,

  23.     0x6c,0x46,0xee,0x97,0x11,0xd9,0xdc,0x14,

  24.     0xfd,0x4b,0xf6,0x7a,0xf3,0x07,0x65,0xc2,

  25.     0xae,0x2b,0x84,0x6a,0x4d,0x23,0xa8,0xcd,

  26.     0x0d,0xb8,0x97,0x08,0x62,0x39,0x49,0x2c,

  27.     0xaf,0x35,0x0b,0x51,0xf8,0x33,0x86,0x8b,

  28.     0x9b,0xc2,0xb3,0xbc,0xa9,0xcf,0x41,0x13

  29. };

  30. template<> const uint8_t Tests<Ed448Goldilocks>::rfc7748_1000[56] = {

  31.     0xaa,0x3b,0x47,0x49,0xd5,0x5b,0x9d,0xaf,

  32.     0x1e,0x5b,0x00,0x28,0x88,0x26,0xc4,0x67,

  33.     0x27,0x4c,0xe3,0xeb,0xbd,0xd5,0xc1,0x7b,

  34.     0x97,0x5e,0x09,0xd4,0xaf,0x6c,0x67,0xcf,

  35.     0x10,0xd0,0x87,0x20,0x2d,0xb8,0x82,0x86,

  36.     0xe2,0xb7,0x9f,0xce,0xea,0x3e,0xc3,0x53,

  37.     0xef,0x54,0xfa,0xa2,0x6e,0x21,0x9f,0x38

  38. };

  39. template<> const uint8_t Tests<Ed448Goldilocks>::rfc7748_1000000[56] = {

  40.     0x07,0x7f,0x45,0x36,0x81,0xca,0xca,0x36,

  41.     0x93,0x19,0x84,0x20,0xbb,0xe5,0x15,0xca,

  42.     0xe0,0x00,0x24,0x72,0x51,0x9b,0x3e,0x67,

  43.     0x66,0x1a,0x7e,0x89,0xca,0xb9,0x46,0x95,

  44.     0xc8,0xf4,0xbc,0xd6,0x6e,0x61,0xb9,0xb9,

  45.     0xc9,0x46,0xda,0x8d,0x52,0x4d,0xe3,0xd6,

  46.     0x9b,0xd9,0xd9,0xd6,0x6b,0x99,0x7e,0x37

  47. };

  48. 

  49. template<> const Block Tests<Ed448Goldilocks>::sqrt_minus_one(NULL,0);

  50. const uint8_t sm1_25519[32] = {

  51.     0xb0,0xa0,0x0e,0x4a,0x27,0x1b,0xee,0xc4,

  52.     0x78,0xe4,0x2f,0xad,0x06,0x18,0x43,0x2f,

  53.     0xa7,0xd7,0xfb,0x3d,0x99,0x00,0x4d,0x2b,

  54.     0x0b,0xdf,0xc1,0x4f,0x80,0x24,0x83,0x2b

  55. };

  56. template<> const Block Tests<Ristretto>::sqrt_minus_one(sm1_25519,32);

  57. 

  58. template<> const Block Tests<Ed448Goldilocks>::minus_sqrt_minus_one(NULL,0);

  59. const uint8_t msm1_25519[32] = {

  60.     0x3d,0x5f,0xf1,0xb5,0xd8,0xe4,0x11,0x3b,

  61.     0x87,0x1b,0xd0,0x52,0xf9,0xe7,0xbc,0xd0,

  62.     0x58,0x28,0x04,0xc2,0x66,0xff,0xb2,0xd4,

  63.     0xf4,0x20,0x3e,0xb0,0x7f,0xdb,0x7c,0x54

  64. };

  65. template<> const Block Tests<Ristretto>::minus_sqrt_minus_one(msm1_25519,32);

  66. 

  67. const uint8_t elli_patho_448[56] = {

  68.     0x14,0xf0,0x70,0x58,0x41,0xc7,0xf9,0xa5,

  69.     0xfa,0x2c,0x7d,0x87,0x07,0x89,0xe8,0x61,

  70.     0x63,0xe8,0xc8,0xdc,0x06,0x2d,0x39,0x8f,

  71.     0x18,0x83,0x1e,0xc6,0x8c,0x6d,0x73,0x24,

  72.     0xd4,0xb3,0xd3,0xe1,0xf3,0x51,0x8c,0xee,

  73.     0x65,0x79,0x88,0xc1,0x0b,0xcf,0x8e,0xa5,

  74.     0x86,0xa9,0x2e,0xc9,0x17,0x68,0x9b,0x20

  75. };

  76. template<> const Block Tests<Ed448Goldilocks>::elli_patho(elli_patho_448,56);

  77. template<> const Block Tests<Ristretto>::elli_patho(NULL,0);

  78. 

  79. /* EdDSA test vectors */

  80. /* EdDSA test vectors */

  81. const uint8_t ed448_eddsa_sk[][57] = {{

  82.     // RFC 8032 - test vector 1 - blank

  83.     0x6c,0x82,0xa5,0x62,0xcb,0x80,0x8d,0x10,

  84.     0xd6,0x32,0xbe,0x89,0xc8,0x51,0x3e,0xbf,

  85.     0x6c,0x92,0x9f,0x34,0xdd,0xfa,0x8c,0x9f,

  86.     0x63,0xc9,0x96,0x0e,0xf6,0xe3,0x48,0xa3,

  87.     0x52,0x8c,0x8a,0x3f,0xcc,0x2f,0x04,0x4e,

  88.     0x39,0xa3,0xfc,0x5b,0x94,0x49,0x2f,0x8f,

  89.     0x03,0x2e,0x75,0x49,0xa2,0x00,0x98,0xf9,

  90.     0x5b

  91. }, {

  92.     // RFC 8032 - test vector 2/3 - 1 octet

  93.     0xc4,0xea,0xb0,0x5d,0x35,0x70,0x07,0xc6,

  94.     0x32,0xf3,0xdb,0xb4,0x84,0x89,0x92,0x4d,

  95.     0x55,0x2b,0x08,0xfe,0x0c,0x35,0x3a,0x0d,

  96.     0x4a,0x1f,0x00,0xac,0xda,0x2c,0x46,0x3a,

  97.     0xfb,0xea,0x67,0xc5,0xe8,0xd2,0x87,0x7c,

  98.     0x5e,0x3b,0xc3,0x97,0xa6,0x59,0x94,0x9e,

  99.     0xf8,0x02,0x1e,0x95,0x4e,0x0a,0x12,0x27,

  100.     0x4e

  101. }, {

  102.     // RFC 8032 - test vector 4 - 11 octet

  103.     0xcd,0x23,0xd2,0x4f,0x71,0x42,0x74,0xe7,

  104.     0x44,0x34,0x32,0x37,0xb9,0x32,0x90,0xf5,

  105.     0x11,0xf6,0x42,0x5f,0x98,0xe6,0x44,0x59,

  106.     0xff,0x20,0x3e,0x89,0x85,0x08,0x3f,0xfd,

  107.     0xf6,0x05,0x00,0x55,0x3a,0xbc,0x0e,0x05,

  108.     0xcd,0x02,0x18,0x4b,0xdb,0x89,0xc4,0xcc,

  109.     0xd6,0x7e,0x18,0x79,0x51,0x26,0x7e,0xb3,

  110.     0x28

  111. }, {

  112.     // RFC 8032 - test vector 5 - 12 octet

  113.     0x25,0x8c,0xdd,0x4a,0xda,0x32,0xed,0x9c,

  114.     0x9f,0xf5,0x4e,0x63,0x75,0x6a,0xe5,0x82,

  115.     0xfb,0x8f,0xab,0x2a,0xc7,0x21,0xf2,0xc8,

  116.     0xe6,0x76,0xa7,0x27,0x68,0x51,0x3d,0x93,

  117.     0x9f,0x63,0xdd,0xdb,0x55,0x60,0x91,0x33,

  118.     0xf2,0x9a,0xdf,0x86,0xec,0x99,0x29,0xdc,

  119.     0xcb,0x52,0xc1,0xc5,0xfd,0x2f,0xf7,0xe2,

  120.     0x1b

  121. }, {

  122.     // RFC 8032 - test vector 1 - prehash - blank

  123.     0x83,0x3f,0xe6,0x24,0x09,0x23,0x7b,0x9d,

  124.     0x62,0xec,0x77,0x58,0x75,0x20,0x91,0x1e,

  125.     0x9a,0x75,0x9c,0xec,0x1d,0x19,0x75,0x5b,

  126.     0x7d,0xa9,0x01,0xb9,0x6d,0xca,0x3d,0x42,

  127.     0xef,0x78,0x22,0xe0,0xd5,0x10,0x41,0x27,

  128.     0xdc,0x05,0xd6,0xdb,0xef,0xde,0x69,0xe3,

  129.     0xab,0x2c,0xec,0x7c,0x86,0x7c,0x6e,0x2c,

  130.     0x49

  131. }, {

  132.     // RFC 8032 - test vector 6 - 13 octet

  133. 	0x7e,0xf4,0xe8,0x45,0x44,0x23,0x67,0x52,

  134. 	0xfb,0xb5,0x6b,0x8f,0x31,0xa2,0x3a,0x10,

  135. 	0xe4,0x28,0x14,0xf5,0xf5,0x5c,0xa0,0x37,

  136. 	0xcd,0xcc,0x11,0xc6,0x4c,0x9a,0x3b,0x29,

  137. 	0x49,0xc1,0xbb,0x60,0x70,0x03,0x14,0x61,

  138. 	0x17,0x32,0xa6,0xc2,0xfe,0xa9,0x8e,0xeb,

  139. 	0xc0,0x26,0x6a,0x11,0xa9,0x39,0x70,0x10,

  140. 	0x0e,

  141. }, {

  142.     // RFC 8032 - test vector 7 - 64 octet

  143. 	0xd6,0x5d,0xf3,0x41,0xad,0x13,0xe0,0x08,

  144. 	0x56,0x76,0x88,0xba,0xed,0xda,0x8e,0x9d,

  145. 	0xcd,0xc1,0x7d,0xc0,0x24,0x97,0x4e,0xa5,

  146. 	0xb4,0x22,0x7b,0x65,0x30,0xe3,0x39,0xbf,

  147. 	0xf2,0x1f,0x99,0xe6,0x8c,0xa6,0x96,0x8f,

  148. 	0x3c,0xca,0x6d,0xfe,0x0f,0xb9,0xf4,0xfa,

  149. 	0xb4,0xfa,0x13,0x5d,0x55,0x42,0xea,0x3f,

  150. 	0x01,

  151. }, {

  152.     // RFC 8032 - test vector 8 - 256 octet

  153. 	0x2e,0xc5,0xfe,0x3c,0x17,0x04,0x5a,0xbd,

  154. 	0xb1,0x36,0xa5,0xe6,0xa9,0x13,0xe3,0x2a,

  155. 	0xb7,0x5a,0xe6,0x8b,0x53,0xd2,0xfc,0x14,

  156. 	0x9b,0x77,0xe5,0x04,0x13,0x2d,0x37,0x56,

  157. 	0x9b,0x7e,0x76,0x6b,0xa7,0x4a,0x19,0xbd,

  158. 	0x61,0x62,0x34,0x3a,0x21,0xc8,0x59,0x0a,

  159. 	0xa9,0xce,0xbc,0xa9,0x01,0x4c,0x63,0x6d,

  160. 	0xf5,

  161. }, {

  162.     // RFC 8032 - test vector 9 - 1023 octet

  163. 	0x87,0x2d,0x09,0x37,0x80,0xf5,0xd3,0x73,

  164. 	0x0d,0xf7,0xc2,0x12,0x66,0x4b,0x37,0xb8,

  165. 	0xa0,0xf2,0x4f,0x56,0x81,0x0d,0xaa,0x83,

  166. 	0x82,0xcd,0x4f,0xa3,0xf7,0x76,0x34,0xec,

  167. 	0x44,0xdc,0x54,0xf1,0xc2,0xed,0x9b,0xea,

  168. 	0x86,0xfa,0xfb,0x76,0x32,0xd8,0xbe,0x19,

  169. 	0x9e,0xa1,0x65,0xf5,0xad,0x55,0xdd,0x9c,

  170. 	0xe8,

  171. }};

  172. const uint8_t ed448_eddsa_pk[][57] = {{

  173.     // RFC 8032 - test vector 1 - blank

  174.     0x5f,0xd7,0x44,0x9b,0x59,0xb4,0x61,0xfd,

  175.     0x2c,0xe7,0x87,0xec,0x61,0x6a,0xd4,0x6a,

  176.     0x1d,0xa1,0x34,0x24,0x85,0xa7,0x0e,0x1f,

  177.     0x8a,0x0e,0xa7,0x5d,0x80,0xe9,0x67,0x78,

  178.     0xed,0xf1,0x24,0x76,0x9b,0x46,0xc7,0x06,

  179.     0x1b,0xd6,0x78,0x3d,0xf1,0xe5,0x0f,0x6c,

  180.     0xd1,0xfa,0x1a,0xbe,0xaf,0xe8,0x25,0x61,

  181.     0x80

  182. }, {

  183.     // RFC 8032 - test vector 2/3 - 1 octet

  184.     0x43,0xba,0x28,0xf4,0x30,0xcd,0xff,0x45,

  185.     0x6a,0xe5,0x31,0x54,0x5f,0x7e,0xcd,0x0a,

  186.     0xc8,0x34,0xa5,0x5d,0x93,0x58,0xc0,0x37,

  187.     0x2b,0xfa,0x0c,0x6c,0x67,0x98,0xc0,0x86,

  188.     0x6a,0xea,0x01,0xeb,0x00,0x74,0x28,0x02,

  189.     0xb8,0x43,0x8e,0xa4,0xcb,0x82,0x16,0x9c,

  190.     0x23,0x51,0x60,0x62,0x7b,0x4c,0x3a,0x94,

  191.     0x80

  192. }, {

  193.     // RFC 8032 - test vector 4 - 11 octet

  194.     0xdc,0xea,0x9e,0x78,0xf3,0x5a,0x1b,0xf3,

  195.     0x49,0x9a,0x83,0x1b,0x10,0xb8,0x6c,0x90,

  196.     0xaa,0xc0,0x1c,0xd8,0x4b,0x67,0xa0,0x10,

  197.     0x9b,0x55,0xa3,0x6e,0x93,0x28,0xb1,0xe3,

  198.     0x65,0xfc,0xe1,0x61,0xd7,0x1c,0xe7,0x13,

  199.     0x1a,0x54,0x3e,0xa4,0xcb,0x5f,0x7e,0x9f,

  200.     0x1d,0x8b,0x00,0x69,0x64,0x47,0x00,0x14,

  201.     0x00

  202. }, {

  203.     // RFC 8032 - test vector 5 - 12 octet

  204.     0x3b,0xa1,0x6d,0xa0,0xc6,0xf2,0xcc,0x1f,

  205.     0x30,0x18,0x77,0x40,0x75,0x6f,0x5e,0x79,

  206.     0x8d,0x6b,0xc5,0xfc,0x01,0x5d,0x7c,0x63,

  207.     0xcc,0x95,0x10,0xee,0x3f,0xd4,0x4a,0xdc,

  208.     0x24,0xd8,0xe9,0x68,0xb6,0xe4,0x6e,0x6f,

  209.     0x94,0xd1,0x9b,0x94,0x53,0x61,0x72,0x6b,

  210.     0xd7,0x5e,0x14,0x9e,0xf0,0x98,0x17,0xf5,

  211.     0x80

  212. }, {

  213.     // RFC 8032 - test vector 1 - prehash - abc

  214.     0x25,0x9b,0x71,0xc1,0x9f,0x83,0xef,0x77,

  215.     0xa7,0xab,0xd2,0x65,0x24,0xcb,0xdb,0x31,

  216.     0x61,0xb5,0x90,0xa4,0x8f,0x7d,0x17,0xde,

  217.     0x3e,0xe0,0xba,0x9c,0x52,0xbe,0xb7,0x43,

  218.     0xc0,0x94,0x28,0xa1,0x31,0xd6,0xb1,0xb5,

  219.     0x73,0x03,0xd9,0x0d,0x81,0x32,0xc2,0x76,

  220.     0xd5,0xed,0x3d,0x5d,0x01,0xc0,0xf5,0x38,

  221.     0x80

  222. }, {

  223.     // RFC 8032 - test vector 6 - 13 octet

  224. 	0xb3,0xda,0x07,0x9b,0x0a,0xa4,0x93,0xa5,

  225. 	0x77,0x20,0x29,0xf0,0x46,0x7b,0xae,0xbe,

  226. 	0xe5,0xa8,0x11,0x2d,0x9d,0x3a,0x22,0x53,

  227. 	0x23,0x61,0xda,0x29,0x4f,0x7b,0xb3,0x81,

  228. 	0x5c,0x5d,0xc5,0x9e,0x17,0x6b,0x4d,0x9f,

  229. 	0x38,0x1c,0xa0,0x93,0x8e,0x13,0xc6,0xc0,

  230. 	0x7b,0x17,0x4b,0xe6,0x5d,0xfa,0x57,0x8e,

  231. 	0x80

  232. }, {

  233.     // RFC 8032 - test vector 7 - 64 octet

  234. 	0xdf,0x97,0x05,0xf5,0x8e,0xdb,0xab,0x80,

  235. 	0x2c,0x7f,0x83,0x63,0xcf,0xe5,0x56,0x0a,

  236. 	0xb1,0xc6,0x13,0x2c,0x20,0xa9,0xf1,0xdd,

  237. 	0x16,0x34,0x83,0xa2,0x6f,0x8a,0xc5,0x3a,

  238. 	0x39,0xd6,0x80,0x8b,0xf4,0xa1,0xdf,0xbd,

  239. 	0x26,0x1b,0x09,0x9b,0xb0,0x3b,0x3f,0xb5,

  240. 	0x09,0x06,0xcb,0x28,0xbd,0x8a,0x08,0x1f,

  241. 	0x00

  242. }, {

  243.     // RFC 8032 - test vector 8 - 256 octet

  244. 	0x79,0x75,0x6f,0x01,0x4d,0xcf,0xe2,0x07,

  245. 	0x9f,0x5d,0xd9,0xe7,0x18,0xbe,0x41,0x71,

  246. 	0xe2,0xef,0x24,0x86,0xa0,0x8f,0x25,0x18,

  247. 	0x6f,0x6b,0xff,0x43,0xa9,0x93,0x6b,0x9b,

  248. 	0xfe,0x12,0x40,0x2b,0x08,0xae,0x65,0x79,

  249. 	0x8a,0x3d,0x81,0xe2,0x2e,0x9e,0xc8,0x0e,

  250. 	0x76,0x90,0x86,0x2e,0xf3,0xd4,0xed,0x3a,

  251. 	0x00

  252. }, {

  253.     // RFC 8032 - test vector 9 - 1023 octet

  254. 	0xa8,0x1b,0x2e,0x8a,0x70,0xa5,0xac,0x94,

  255. 	0xff,0xdb,0xcc,0x9b,0xad,0xfc,0x3f,0xeb,

  256. 	0x08,0x01,0xf2,0x58,0x57,0x8b,0xb1,0x14,

  257. 	0xad,0x44,0xec,0xe1,0xec,0x0e,0x79,0x9d,

  258. 	0xa0,0x8e,0xff,0xb8,0x1c,0x5d,0x68,0x5c,

  259. 	0x0c,0x56,0xf6,0x4e,0xec,0xae,0xf8,0xcd,

  260. 	0xf1,0x1c,0xc3,0x87,0x37,0x83,0x8c,0xf4,

  261. 	0x00

  262. }};

  263. const uint8_t ed448_eddsa_message[][1023] = {{

  264.     // RFC 8032 - test vector 1 - blank

  265.     0

  266. }, {

  267.     // RFC 8032 - test vector 2/3 - 1 octet

  268.     0x03

  269. }, {

  270.     // RFC 8032 - test vector 4 - 11 octet

  271.     0x0c,0x3e,0x54,0x40,0x74,0xec,0x63,0xb0,

  272.     0x26,0x5e,0x0c

  273. }, {

  274.     // RFC 8032 - test vector 5 - 12 octet

  275.     0x64,0xa6,0x5f,0x3c,0xde,0xdc,0xdd,0x66,

  276.     0x81,0x1e,0x29,0x15

  277. }, {

  278.     // RFC 8032 - test vector 1/2 - prehash - abc

  279.     0x61,0x62,0x63

  280. }, {

  281.     // RFC 8032 - test vector 6 - 13 octet

  282. 	0x64,0xa6,0x5f,0x3c,0xde,0xdc,0xdd,0x66,

  283. 	0x81,0x1e,0x29,0x15,0xe7

  284. }, {

  285.     // RFC 8032 - test vector 7 - 64 octet

  286. 	0xbd,0x0f,0x6a,0x37,0x47,0xcd,0x56,0x1b,

  287. 	0xdd,0xdf,0x46,0x40,0xa3,0x32,0x46,0x1a,

  288. 	0x4a,0x30,0xa1,0x2a,0x43,0x4c,0xd0,0xbf,

  289. 	0x40,0xd7,0x66,0xd9,0xc6,0xd4,0x58,0xe5,

  290. 	0x51,0x22,0x04,0xa3,0x0c,0x17,0xd1,0xf5,

  291. 	0x0b,0x50,0x79,0x63,0x1f,0x64,0xeb,0x31,

  292. 	0x12,0x18,0x2d,0xa3,0x00,0x58,0x35,0x46,

  293. 	0x11,0x13,0x71,0x8d,0x1a,0x5e,0xf9,0x44

  294. }, {

  295.     // RFC 8032 - test vector 8 - 256 octet

  296. 	0x15,0x77,0x75,0x32,0xb0,0xbd,0xd0,0xd1,

  297. 	0x38,0x9f,0x63,0x6c,0x5f,0x6b,0x9b,0xa7,

  298. 	0x34,0xc9,0x0a,0xf5,0x72,0x87,0x7e,0x2d,

  299. 	0x27,0x2d,0xd0,0x78,0xaa,0x1e,0x56,0x7c,

  300. 	0xfa,0x80,0xe1,0x29,0x28,0xbb,0x54,0x23,

  301. 	0x30,0xe8,0x40,0x9f,0x31,0x74,0x50,0x41,

  302. 	0x07,0xec,0xd5,0xef,0xac,0x61,0xae,0x75,

  303. 	0x04,0xda,0xbe,0x2a,0x60,0x2e,0xde,0x89,

  304. 	0xe5,0xcc,0xa6,0x25,0x7a,0x7c,0x77,0xe2,

  305. 	0x7a,0x70,0x2b,0x3a,0xe3,0x9f,0xc7,0x69,

  306. 	0xfc,0x54,0xf2,0x39,0x5a,0xe6,0xa1,0x17,

  307. 	0x8c,0xab,0x47,0x38,0xe5,0x43,0x07,0x2f,

  308. 	0xc1,0xc1,0x77,0xfe,0x71,0xe9,0x2e,0x25,

  309. 	0xbf,0x03,0xe4,0xec,0xb7,0x2f,0x47,0xb6,

  310. 	0x4d,0x04,0x65,0xaa,0xea,0x4c,0x7f,0xad,

  311. 	0x37,0x25,0x36,0xc8,0xba,0x51,0x6a,0x60,

  312. 	0x39,0xc3,0xc2,0xa3,0x9f,0x0e,0x4d,0x83,

  313. 	0x2b,0xe4,0x32,0xdf,0xa9,0xa7,0x06,0xa6,

  314. 	0xe5,0xc7,0xe1,0x9f,0x39,0x79,0x64,0xca,

  315. 	0x42,0x58,0x00,0x2f,0x7c,0x05,0x41,0xb5,

  316. 	0x90,0x31,0x6d,0xbc,0x56,0x22,0xb6,0xb2,

  317. 	0xa6,0xfe,0x7a,0x4a,0xbf,0xfd,0x96,0x10,

  318. 	0x5e,0xca,0x76,0xea,0x7b,0x98,0x81,0x6a,

  319. 	0xf0,0x74,0x8c,0x10,0xdf,0x04,0x8c,0xe0,

  320. 	0x12,0xd9,0x01,0x01,0x5a,0x51,0xf1,0x89,

  321. 	0xf3,0x88,0x81,0x45,0xc0,0x36,0x50,0xaa,

  322. 	0x23,0xce,0x89,0x4c,0x3b,0xd8,0x89,0xe0,

  323. 	0x30,0xd5,0x65,0x07,0x1c,0x59,0xf4,0x09,

  324. 	0xa9,0x98,0x1b,0x51,0x87,0x8f,0xd6,0xfc,

  325. 	0x11,0x06,0x24,0xdc,0xbc,0xde,0x0b,0xf7,

  326. 	0xa6,0x9c,0xcc,0xe3,0x8f,0xab,0xdf,0x86,

  327. 	0xf3,0xbe,0xf6,0x04,0x48,0x19,0xde,0x11

  328. }, {

  329.     // RFC 8032 - test vector 9 - 1023 octet

  330. 	0x6d,0xdf,0x80,0x2e,0x1a,0xae,0x49,0x86,

  331. 	0x93,0x5f,0x7f,0x98,0x1b,0xa3,0xf0,0x35,

  332. 	0x1d,0x62,0x73,0xc0,0xa0,0xc2,0x2c,0x9c,

  333. 	0x0e,0x83,0x39,0x16,0x8e,0x67,0x54,0x12,

  334. 	0xa3,0xde,0xbf,0xaf,0x43,0x5e,0xd6,0x51,

  335. 	0x55,0x80,0x07,0xdb,0x43,0x84,0xb6,0x50,

  336. 	0xfc,0xc0,0x7e,0x3b,0x58,0x6a,0x27,0xa4,

  337. 	0xf7,0xa0,0x0a,0xc8,0xa6,0xfe,0xc2,0xcd,

  338. 	0x86,0xae,0x4b,0xf1,0x57,0x0c,0x41,0xe6,

  339. 	0xa4,0x0c,0x93,0x1d,0xb2,0x7b,0x2f,0xaa,

  340. 	0x15,0xa8,0xce,0xdd,0x52,0xcf,0xf7,0x36,

  341. 	0x2c,0x4e,0x6e,0x23,0xda,0xec,0x0f,0xbc,

  342. 	0x3a,0x79,0xb6,0x80,0x6e,0x31,0x6e,0xfc,

  343. 	0xc7,0xb6,0x81,0x19,0xbf,0x46,0xbc,0x76,

  344. 	0xa2,0x60,0x67,0xa5,0x3f,0x29,0x6d,0xaf,

  345. 	0xdb,0xdc,0x11,0xc7,0x7f,0x77,0x77,0xe9,

  346. 	0x72,0x66,0x0c,0xf4,0xb6,0xa9,0xb3,0x69,

  347. 	0xa6,0x66,0x5f,0x02,0xe0,0xcc,0x9b,0x6e,

  348. 	0xdf,0xad,0x13,0x6b,0x4f,0xab,0xe7,0x23,

  349. 	0xd2,0x81,0x3d,0xb3,0x13,0x6c,0xfd,0xe9,

  350. 	0xb6,0xd0,0x44,0x32,0x2f,0xee,0x29,0x47,

  351. 	0x95,0x2e,0x03,0x1b,0x73,0xab,0x5c,0x60,

  352. 	0x33,0x49,0xb3,0x07,0xbd,0xc2,0x7b,0xc6,

  353. 	0xcb,0x8b,0x8b,0xbd,0x7b,0xd3,0x23,0x21,

  354. 	0x9b,0x80,0x33,0xa5,0x81,0xb5,0x9e,0xad,

  355. 	0xeb,0xb0,0x9b,0x3c,0x4f,0x3d,0x22,0x77,

  356. 	0xd4,0xf0,0x34,0x36,0x24,0xac,0xc8,0x17,

  357. 	0x80,0x47,0x28,0xb2,0x5a,0xb7,0x97,0x17,

  358. 	0x2b,0x4c,0x5c,0x21,0xa2,0x2f,0x9c,0x78,

  359. 	0x39,0xd6,0x43,0x00,0x23,0x2e,0xb6,0x6e,

  360. 	0x53,0xf3,0x1c,0x72,0x3f,0xa3,0x7f,0xe3,

  361. 	0x87,0xc7,0xd3,0xe5,0x0b,0xdf,0x98,0x13,

  362. 	0xa3,0x0e,0x5b,0xb1,0x2c,0xf4,0xcd,0x93,

  363. 	0x0c,0x40,0xcf,0xb4,0xe1,0xfc,0x62,0x25,

  364. 	0x92,0xa4,0x95,0x88,0x79,0x44,0x94,0xd5,

  365. 	0x6d,0x24,0xea,0x4b,0x40,0xc8,0x9f,0xc0,

  366. 	0x59,0x6c,0xc9,0xeb,0xb9,0x61,0xc8,0xcb,

  367. 	0x10,0xad,0xde,0x97,0x6a,0x5d,0x60,0x2b,

  368. 	0x1c,0x3f,0x85,0xb9,0xb9,0xa0,0x01,0xed,

  369. 	0x3c,0x6a,0x4d,0x3b,0x14,0x37,0xf5,0x20,

  370. 	0x96,0xcd,0x19,0x56,0xd0,0x42,0xa5,0x97,

  371. 	0xd5,0x61,0xa5,0x96,0xec,0xd3,0xd1,0x73,

  372. 	0x5a,0x8d,0x57,0x0e,0xa0,0xec,0x27,0x22,

  373. 	0x5a,0x2c,0x4a,0xaf,0xf2,0x63,0x06,0xd1,

  374. 	0x52,0x6c,0x1a,0xf3,0xca,0x6d,0x9c,0xf5,

  375. 	0xa2,0xc9,0x8f,0x47,0xe1,0xc4,0x6d,0xb9,

  376. 	0xa3,0x32,0x34,0xcf,0xd4,0xd8,0x1f,0x2c,

  377. 	0x98,0x53,0x8a,0x09,0xeb,0xe7,0x69,0x98,

  378. 	0xd0,0xd8,0xfd,0x25,0x99,0x7c,0x7d,0x25,

  379. 	0x5c,0x6d,0x66,0xec,0xe6,0xfa,0x56,0xf1,

  380. 	0x11,0x44,0x95,0x0f,0x02,0x77,0x95,0xe6,

  381. 	0x53,0x00,0x8f,0x4b,0xd7,0xca,0x2d,0xee,

  382. 	0x85,0xd8,0xe9,0x0f,0x3d,0xc3,0x15,0x13,

  383. 	0x0c,0xe2,0xa0,0x03,0x75,0xa3,0x18,0xc7,

  384. 	0xc3,0xd9,0x7b,0xe2,0xc8,0xce,0x5b,0x6d,

  385. 	0xb4,0x1a,0x62,0x54,0xff,0x26,0x4f,0xa6,

  386. 	0x15,0x5b,0xae,0xe3,0xb0,0x77,0x3c,0x0f,

  387. 	0x49,0x7c,0x57,0x3f,0x19,0xbb,0x4f,0x42,

  388. 	0x40,0x28,0x1f,0x0b,0x1f,0x4f,0x7b,0xe8,

  389. 	0x57,0xa4,0xe5,0x9d,0x41,0x6c,0x06,0xb4,

  390. 	0xc5,0x0f,0xa0,0x9e,0x18,0x10,0xdd,0xc6,

  391. 	0xb1,0x46,0x7b,0xae,0xac,0x5a,0x36,0x68,

  392. 	0xd1,0x1b,0x6e,0xca,0xa9,0x01,0x44,0x00,

  393. 	0x16,0xf3,0x89,0xf8,0x0a,0xcc,0x4d,0xb9,

  394. 	0x77,0x02,0x5e,0x7f,0x59,0x24,0x38,0x8c,

  395. 	0x7e,0x34,0x0a,0x73,0x2e,0x55,0x44,0x40,

  396. 	0xe7,0x65,0x70,0xf8,0xdd,0x71,0xb7,0xd6,

  397. 	0x40,0xb3,0x45,0x0d,0x1f,0xd5,0xf0,0x41,

  398. 	0x0a,0x18,0xf9,0xa3,0x49,0x4f,0x70,0x7c,

  399. 	0x71,0x7b,0x79,0xb4,0xbf,0x75,0xc9,0x84,

  400. 	0x00,0xb0,0x96,0xb2,0x16,0x53,0xb5,0xd2,

  401. 	0x17,0xcf,0x35,0x65,0xc9,0x59,0x74,0x56,

  402. 	0xf7,0x07,0x03,0x49,0x7a,0x07,0x87,0x63,

  403. 	0x82,0x9b,0xc0,0x1b,0xb1,0xcb,0xc8,0xfa,

  404. 	0x04,0xea,0xdc,0x9a,0x6e,0x3f,0x66,0x99,

  405. 	0x58,0x7a,0x9e,0x75,0xc9,0x4e,0x5b,0xab,

  406. 	0x00,0x36,0xe0,0xb2,0xe7,0x11,0x39,0x2c,

  407. 	0xff,0x00,0x47,0xd0,0xd6,0xb0,0x5b,0xd2,

  408. 	0xa5,0x88,0xbc,0x10,0x97,0x18,0x95,0x42,

  409. 	0x59,0xf1,0xd8,0x66,0x78,0xa5,0x79,0xa3,

  410. 	0x12,0x0f,0x19,0xcf,0xb2,0x96,0x3f,0x17,

  411. 	0x7a,0xeb,0x70,0xf2,0xd4,0x84,0x48,0x26,

  412. 	0x26,0x2e,0x51,0xb8,0x02,0x71,0x27,0x20,

  413. 	0x68,0xef,0x5b,0x38,0x56,0xfa,0x85,0x35,

  414. 	0xaa,0x2a,0x88,0xb2,0xd4,0x1f,0x2a,0x0e,

  415. 	0x2f,0xda,0x76,0x24,0xc2,0x85,0x02,0x72,

  416. 	0xac,0x4a,0x2f,0x56,0x1f,0x8f,0x2f,0x7a,

  417. 	0x31,0x8b,0xfd,0x5c,0xaf,0x96,0x96,0x14,

  418. 	0x9e,0x4a,0xc8,0x24,0xad,0x34,0x60,0x53,

  419. 	0x8f,0xdc,0x25,0x42,0x1b,0xee,0xc2,0xcc,

  420. 	0x68,0x18,0x16,0x2d,0x06,0xbb,0xed,0x0c,

  421. 	0x40,0xa3,0x87,0x19,0x23,0x49,0xdb,0x67,

  422. 	0xa1,0x18,0xba,0xda,0x6c,0xd5,0xab,0x01,

  423. 	0x40,0xee,0x27,0x32,0x04,0xf6,0x28,0xaa,

  424. 	0xd1,0xc1,0x35,0xf7,0x70,0x27,0x9a,0x65,

  425. 	0x1e,0x24,0xd8,0xc1,0x4d,0x75,0xa6,0x05,

  426. 	0x9d,0x76,0xb9,0x6a,0x6f,0xd8,0x57,0xde,

  427. 	0xf5,0xe0,0xb3,0x54,0xb2,0x7a,0xb9,0x37,

  428. 	0xa5,0x81,0x5d,0x16,0xb5,0xfa,0xe4,0x07,

  429. 	0xff,0x18,0x22,0x2c,0x6d,0x1e,0xd2,0x63,

  430. 	0xbe,0x68,0xc9,0x5f,0x32,0xd9,0x08,0xbd,

  431. 	0x89,0x5c,0xd7,0x62,0x07,0xae,0x72,0x64,

  432. 	0x87,0x56,0x7f,0x9a,0x67,0xda,0xd7,0x9a,

  433. 	0xbe,0xc3,0x16,0xf6,0x83,0xb1,0x7f,0x2d,

  434. 	0x02,0xbf,0x07,0xe0,0xac,0x8b,0x5b,0xc6,

  435. 	0x16,0x2c,0xf9,0x46,0x97,0xb3,0xc2,0x7c,

  436. 	0xd1,0xfe,0xa4,0x9b,0x27,0xf2,0x3b,0xa2,

  437. 	0x90,0x18,0x71,0x96,0x25,0x06,0x52,0x0c,

  438. 	0x39,0x2d,0xa8,0xb6,0xad,0x0d,0x99,0xf7,

  439. 	0x01,0x3f,0xbc,0x06,0xc2,0xc1,0x7a,0x56,

  440. 	0x95,0x00,0xc8,0xa7,0x69,0x64,0x81,0xc1,

  441. 	0xcd,0x33,0xe9,0xb1,0x4e,0x40,0xb8,0x2e,

  442. 	0x79,0xa5,0xf5,0xdb,0x82,0x57,0x1b,0xa9,

  443. 	0x7b,0xae,0x3a,0xd3,0xe0,0x47,0x95,0x15,

  444. 	0xbb,0x0e,0x2b,0x0f,0x3b,0xfc,0xd1,0xfd,

  445. 	0x33,0x03,0x4e,0xfc,0x62,0x45,0xed,0xdd,

  446. 	0x7e,0xe2,0x08,0x6d,0xda,0xe2,0x60,0x0d,

  447. 	0x8c,0xa7,0x3e,0x21,0x4e,0x8c,0x2b,0x0b,

  448. 	0xdb,0x2b,0x04,0x7c,0x6a,0x46,0x4a,0x56,

  449. 	0x2e,0xd7,0x7b,0x73,0xd2,0xd8,0x41,0xc4,

  450. 	0xb3,0x49,0x73,0x55,0x12,0x57,0x71,0x3b,

  451. 	0x75,0x36,0x32,0xef,0xba,0x34,0x81,0x69,

  452. 	0xab,0xc9,0x0a,0x68,0xf4,0x26,0x11,0xa4,

  453. 	0x01,0x26,0xd7,0xcb,0x21,0xb5,0x86,0x95,

  454. 	0x56,0x81,0x86,0xf7,0xe5,0x69,0xd2,0xff,

  455. 	0x0f,0x9e,0x74,0x5d,0x04,0x87,0xdd,0x2e,

  456. 	0xb9,0x97,0xca,0xfc,0x5a,0xbf,0x9d,0xd1,

  457. 	0x02,0xe6,0x2f,0xf6,0x6c,0xba,0x87

  458. }};

  459. 

  460. template<> const bool Tests<Ed448Goldilocks>::eddsa_prehashed[] = {

  461.     false,

  462.     false,

  463.     false,

  464.     false,

  465.     false,

  466.     true,

  467.     true,

  468.     false,

  469.     false,

  470.     false,

  471.     false

  472. };

  473. 

  474. const uint8_t ed448_eddsa_context[][3] = {{

  475.     0x66,0x6f,0x6f

  476. }};

  477. 

  478. const uint8_t ed448_eddsa_sig[][114] = {{

  479.     // RFC 8032 - test vector 1 - blank

  480.     0x53,0x3a,0x37,0xf6,0xbb,0xe4,0x57,0x25,

  481.     0x1f,0x02,0x3c,0x0d,0x88,0xf9,0x76,0xae,

  482.     0x2d,0xfb,0x50,0x4a,0x84,0x3e,0x34,0xd2,

  483.     0x07,0x4f,0xd8,0x23,0xd4,0x1a,0x59,0x1f,

  484.     0x2b,0x23,0x3f,0x03,0x4f,0x62,0x82,0x81,

  485.     0xf2,0xfd,0x7a,0x22,0xdd,0xd4,0x7d,0x78,

  486.     0x28,0xc5,0x9b,0xd0,0xa2,0x1b,0xfd,0x39,

  487.     0x80,0xff,0x0d,0x20,0x28,0xd4,0xb1,0x8a,

  488.     0x9d,0xf6,0x3e,0x00,0x6c,0x5d,0x1c,0x2d,

  489.     0x34,0x5b,0x92,0x5d,0x8d,0xc0,0x0b,0x41,

  490.     0x04,0x85,0x2d,0xb9,0x9a,0xc5,0xc7,0xcd,

  491.     0xda,0x85,0x30,0xa1,0x13,0xa0,0xf4,0xdb,

  492.     0xb6,0x11,0x49,0xf0,0x5a,0x73,0x63,0x26,

  493.     0x8c,0x71,0xd9,0x58,0x08,0xff,0x2e,0x65,

  494.     0x26,0x00

  495. }, {

  496.     // RFC 8032 - test vector 2 - 1 octet

  497.     0x26,0xb8,0xf9,0x17,0x27,0xbd,0x62,0x89,

  498.     0x7a,0xf1,0x5e,0x41,0xeb,0x43,0xc3,0x77,

  499.     0xef,0xb9,0xc6,0x10,0xd4,0x8f,0x23,0x35,

  500.     0xcb,0x0b,0xd0,0x08,0x78,0x10,0xf4,0x35,

  501.     0x25,0x41,0xb1,0x43,0xc4,0xb9,0x81,0xb7,

  502.     0xe1,0x8f,0x62,0xde,0x8c,0xcd,0xf6,0x33,

  503.     0xfc,0x1b,0xf0,0x37,0xab,0x7c,0xd7,0x79,

  504.     0x80,0x5e,0x0d,0xbc,0xc0,0xaa,0xe1,0xcb,

  505.     0xce,0xe1,0xaf,0xb2,0xe0,0x27,0xdf,0x36,

  506.     0xbc,0x04,0xdc,0xec,0xbf,0x15,0x43,0x36,

  507.     0xc1,0x9f,0x0a,0xf7,0xe0,0xa6,0x47,0x29,

  508.     0x05,0xe7,0x99,0xf1,0x95,0x3d,0x2a,0x0f,

  509.     0xf3,0x34,0x8a,0xb2,0x1a,0xa4,0xad,0xaf,

  510.     0xd1,0xd2,0x34,0x44,0x1c,0xf8,0x07,0xc0,

  511.     0x3a,0x00

  512. }, {

  513.     // RFC 8032 - test vector 4 - 11 octet

  514.     0x1f,0x0a,0x88,0x88,0xce,0x25,0xe8,0xd4,

  515.     0x58,0xa2,0x11,0x30,0x87,0x9b,0x84,0x0a,

  516.     0x90,0x89,0xd9,0x99,0xaa,0xba,0x03,0x9e,

  517.     0xaf,0x3e,0x3a,0xfa,0x09,0x0a,0x09,0xd3,

  518.     0x89,0xdb,0xa8,0x2c,0x4f,0xf2,0xae,0x8a,

  519.     0xc5,0xcd,0xfb,0x7c,0x55,0xe9,0x4d,0x5d,

  520.     0x96,0x1a,0x29,0xfe,0x01,0x09,0x94,0x1e,

  521.     0x00,0xb8,0xdb,0xde,0xea,0x6d,0x3b,0x05,

  522.     0x10,0x68,0xdf,0x72,0x54,0xc0,0xcd,0xc1,

  523.     0x29,0xcb,0xe6,0x2d,0xb2,0xdc,0x95,0x7d,

  524.     0xbb,0x47,0xb5,0x1f,0xd3,0xf2,0x13,0xfb,

  525.     0x86,0x98,0xf0,0x64,0x77,0x42,0x50,0xa5,

  526.     0x02,0x89,0x61,0xc9,0xbf,0x8f,0xfd,0x97,

  527.     0x3f,0xe5,0xd5,0xc2,0x06,0x49,0x2b,0x14,

  528.     0x0e,0x00

  529. }, {

  530.     // RFC 8032 - test vector 5 - 12 octet

  531.     0x7e,0xee,0xab,0x7c,0x4e,0x50,0xfb,0x79,

  532.     0x9b,0x41,0x8e,0xe5,0xe3,0x19,0x7f,0xf6,

  533.     0xbf,0x15,0xd4,0x3a,0x14,0xc3,0x43,0x89,

  534.     0xb5,0x9d,0xd1,0xa7,0xb1,0xb8,0x5b,0x4a,

  535.     0xe9,0x04,0x38,0xac,0xa6,0x34,0xbe,0xa4,

  536.     0x5e,0x3a,0x26,0x95,0xf1,0x27,0x0f,0x07,

  537.     0xfd,0xcd,0xf7,0xc6,0x2b,0x8e,0xfe,0xaf,

  538.     0x00,0xb4,0x5c,0x2c,0x96,0xba,0x45,0x7e,

  539.     0xb1,0xa8,0xbf,0x07,0x5a,0x3d,0xb2,0x8e,

  540.     0x5c,0x24,0xf6,0xb9,0x23,0xed,0x4a,0xd7,

  541.     0x47,0xc3,0xc9,0xe0,0x3c,0x70,0x79,0xef,

  542.     0xb8,0x7c,0xb1,0x10,0xd3,0xa9,0x98,0x61,

  543.     0xe7,0x20,0x03,0xcb,0xae,0x6d,0x6b,0x8b,

  544.     0x82,0x7e,0x4e,0x6c,0x14,0x30,0x64,0xff,

  545.     0x3c,0x00

  546. }, {

  547.     // RFC 8032 - test vector 3 - 1 octet - context

  548.     0xd4,0xf8,0xf6,0x13,0x17,0x70,0xdd,0x46,

  549.     0xf4,0x08,0x67,0xd6,0xfd,0x5d,0x50,0x55,

  550.     0xde,0x43,0x54,0x1f,0x8c,0x5e,0x35,0xab,

  551.     0xbc,0xd0,0x01,0xb3,0x2a,0x89,0xf7,0xd2,

  552.     0x15,0x1f,0x76,0x47,0xf1,0x1d,0x8c,0xa2,

  553.     0xae,0x27,0x9f,0xb8,0x42,0xd6,0x07,0x21,

  554.     0x7f,0xce,0x6e,0x04,0x2f,0x68,0x15,0xea,

  555.     0x00,0x0c,0x85,0x74,0x1d,0xe5,0xc8,0xda,

  556.     0x11,0x44,0xa6,0xa1,0xab,0xa7,0xf9,0x6d,

  557.     0xe4,0x25,0x05,0xd7,0xa7,0x29,0x85,0x24,

  558.     0xfd,0xa5,0x38,0xfc,0xcb,0xbb,0x75,0x4f,

  559.     0x57,0x8c,0x1c,0xad,0x10,0xd5,0x4d,0x0d,

  560.     0x54,0x28,0x40,0x7e,0x85,0xdc,0xbc,0x98,

  561.     0xa4,0x91,0x55,0xc1,0x37,0x64,0xe6,0x6c,

  562.     0x3c,0x00

  563. }, {

  564.     // RFC 8032 - test vector 1 - prehash - abc

  565.     0x82,0x2f,0x69,0x01,0xf7,0x48,0x0f,0x3d,

  566.     0x5f,0x56,0x2c,0x59,0x29,0x94,0xd9,0x69,

  567.     0x36,0x02,0x87,0x56,0x14,0x48,0x32,0x56,

  568.     0x50,0x56,0x00,0xbb,0xc2,0x81,0xae,0x38,

  569.     0x1f,0x54,0xd6,0xbc,0xe2,0xea,0x91,0x15,

  570.     0x74,0x93,0x2f,0x52,0xa4,0xe6,0xca,0xdd,

  571.     0x78,0x76,0x93,0x75,0xec,0x3f,0xfd,0x1b,

  572.     0x80,0x1a,0x0d,0x9b,0x3f,0x40,0x30,0xcd,

  573.     0x43,0x39,0x64,0xb6,0x45,0x7e,0xa3,0x94,

  574.     0x76,0x51,0x12,0x14,0xf9,0x74,0x69,0xb5,

  575.     0x7d,0xd3,0x2d,0xbc,0x56,0x0a,0x9a,0x94,

  576.     0xd0,0x0b,0xff,0x07,0x62,0x04,0x64,0xa3,

  577.     0xad,0x20,0x3d,0xf7,0xdc,0x7c,0xe3,0x60,

  578.     0xc3,0xcd,0x36,0x96,0xd9,0xd9,0xfa,0xb9,

  579.     0x0f,0x00

  580. }, {

  581.     // RFC 8032 - test vector 2 - prehash - abc - context

  582.     0xc3,0x22,0x99,0xd4,0x6e,0xc8,0xff,0x02,

  583.     0xb5,0x45,0x40,0x98,0x28,0x14,0xdc,0xe9,

  584.     0xa0,0x58,0x12,0xf8,0x19,0x62,0xb6,0x49,

  585.     0xd5,0x28,0x09,0x59,0x16,0xa2,0xaa,0x48,

  586.     0x10,0x65,0xb1,0x58,0x04,0x23,0xef,0x92,

  587.     0x7e,0xcf,0x0a,0xf5,0x88,0x8f,0x90,0xda,

  588.     0x0f,0x6a,0x9a,0x85,0xad,0x5d,0xc3,0xf2,

  589.     0x80,0xd9,0x12,0x24,0xba,0x99,0x11,0xa3,

  590.     0x65,0x3d,0x00,0xe4,0x84,0xe2,0xce,0x23,

  591.     0x25,0x21,0x48,0x1c,0x86,0x58,0xdf,0x30,

  592.     0x4b,0xb7,0x74,0x5a,0x73,0x51,0x4c,0xdb,

  593.     0x9b,0xf3,0xe1,0x57,0x84,0xab,0x71,0x28,

  594.     0x4f,0x8d,0x07,0x04,0xa6,0x08,0xc5,0x4a,

  595.     0x6b,0x62,0xd9,0x7b,0xeb,0x51,0x1d,0x13,

  596.     0x21,0x00

  597. }, {

  598.     // RFC 8032 - test vector 6 - 13 octet

  599. 	0x6a,0x12,0x06,0x6f,0x55,0x33,0x1b,0x6c,

  600. 	0x22,0xac,0xd5,0xd5,0xbf,0xc5,0xd7,0x12,

  601. 	0x28,0xfb,0xda,0x80,0xae,0x8d,0xec,0x26,

  602. 	0xbd,0xd3,0x06,0x74,0x3c,0x50,0x27,0xcb,

  603. 	0x48,0x90,0x81,0x0c,0x16,0x2c,0x02,0x74,

  604. 	0x68,0x67,0x5e,0xcf,0x64,0x5a,0x83,0x17,

  605. 	0x6c,0x0d,0x73,0x23,0xa2,0xcc,0xde,0x2d,

  606. 	0x80,0xef,0xe5,0xa1,0x26,0x8e,0x8a,0xca,

  607. 	0x1d,0x6f,0xbc,0x19,0x4d,0x3f,0x77,0xc4,

  608. 	0x49,0x86,0xeb,0x4a,0xb4,0x17,0x79,0x19,

  609. 	0xad,0x8b,0xec,0x33,0xeb,0x47,0xbb,0xb5,

  610. 	0xfc,0x6e,0x28,0x19,0x6f,0xd1,0xca,0xf5,

  611. 	0x6b,0x4e,0x7e,0x0b,0xa5,0x51,0x92,0x34,

  612. 	0xd0,0x47,0x15,0x5a,0xc7,0x27,0xa1,0x05,

  613. 	0x31,0x00

  614. }, {

  615.     // RFC 8032 - test vector 7 - 64 octet

  616. 	0x55,0x4b,0xc2,0x48,0x08,0x60,0xb4,0x9e,

  617. 	0xab,0x85,0x32,0xd2,0xa5,0x33,0xb7,0xd5,

  618. 	0x78,0xef,0x47,0x3e,0xeb,0x58,0xc9,0x8b,

  619. 	0xb2,0xd0,0xe1,0xce,0x48,0x8a,0x98,0xb1,

  620. 	0x8d,0xfd,0xe9,0xb9,0xb9,0x07,0x75,0xe6,

  621. 	0x7f,0x47,0xd4,0xa1,0xc3,0x48,0x20,0x58,

  622. 	0xef,0xc9,0xf4,0x0d,0x2c,0xa0,0x33,0xa0,

  623. 	0x80,0x1b,0x63,0xd4,0x5b,0x3b,0x72,0x2e,

  624. 	0xf5,0x52,0xba,0xd3,0xb4,0xcc,0xb6,0x67,

  625. 	0xda,0x35,0x01,0x92,0xb6,0x1c,0x50,0x8c,

  626. 	0xf7,0xb6,0xb5,0xad,0xad,0xc2,0xc8,0xd9,

  627. 	0xa4,0x46,0xef,0x00,0x3f,0xb0,0x5c,0xba,

  628. 	0x5f,0x30,0xe8,0x8e,0x36,0xec,0x27,0x03,

  629. 	0xb3,0x49,0xca,0x22,0x9c,0x26,0x70,0x83,

  630. 	0x39,0x00

  631. }, {

  632.     // RFC 8032 - test vector 8 - 256 octet

  633. 	0xc6,0x50,0xdd,0xbb,0x06,0x01,0xc1,0x9c,

  634. 	0xa1,0x14,0x39,0xe1,0x64,0x0d,0xd9,0x31,

  635. 	0xf4,0x3c,0x51,0x8e,0xa5,0xbe,0xa7,0x0d,

  636. 	0x3d,0xcd,0xe5,0xf4,0x19,0x1f,0xe5,0x3f,

  637. 	0x00,0xcf,0x96,0x65,0x46,0xb7,0x2b,0xcc,

  638. 	0x7d,0x58,0xbe,0x2b,0x9b,0xad,0xef,0x28,

  639. 	0x74,0x39,0x54,0xe3,0xa4,0x4a,0x23,0xf8,

  640. 	0x80,0xe8,0xd4,0xf1,0xcf,0xce,0x2d,0x7a,

  641. 	0x61,0x45,0x2d,0x26,0xda,0x05,0x89,0x6f,

  642. 	0x0a,0x50,0xda,0x66,0xa2,0x39,0xa8,0xa1,

  643. 	0x88,0xb6,0xd8,0x25,0xb3,0x30,0x5a,0xd7,

  644. 	0x7b,0x73,0xfb,0xac,0x08,0x36,0xec,0xc6,

  645. 	0x09,0x87,0xfd,0x08,0x52,0x7c,0x1a,0x8e,

  646. 	0x80,0xd5,0x82,0x3e,0x65,0xca,0xfe,0x2a,

  647. 	0x3d,0x00

  648. }, {

  649.     // RFC 8032 - test vector 9 - 1023 octet

  650. 	0xe3,0x01,0x34,0x5a,0x41,0xa3,0x9a,0x4d,

  651. 	0x72,0xff,0xf8,0xdf,0x69,0xc9,0x80,0x75,

  652. 	0xa0,0xcc,0x08,0x2b,0x80,0x2f,0xc9,0xb2,

  653. 	0xb6,0xbc,0x50,0x3f,0x92,0x6b,0x65,0xbd,

  654. 	0xdf,0x7f,0x4c,0x8f,0x1c,0xb4,0x9f,0x63,

  655. 	0x96,0xaf,0xc8,0xa7,0x0a,0xbe,0x6d,0x8a,

  656. 	0xef,0x0d,0xb4,0x78,0xd4,0xc6,0xb2,0x97,

  657. 	0x00,0x76,0xc6,0xa0,0x48,0x4f,0xe7,0x6d,

  658. 	0x76,0xb3,0xa9,0x76,0x25,0xd7,0x9f,0x1c,

  659. 	0xe2,0x40,0xe7,0xc5,0x76,0x75,0x0d,0x29,

  660. 	0x55,0x28,0x28,0x6f,0x71,0x9b,0x41,0x3d,

  661. 	0xe9,0xad,0xa3,0xe8,0xeb,0x78,0xed,0x57,

  662. 	0x36,0x03,0xce,0x30,0xd8,0xbb,0x76,0x17,

  663. 	0x85,0xdc,0x30,0xdb,0xc3,0x20,0x86,0x9e,

  664. 	0x1a,0x00

  665. }};

  666. template<> const Block Tests<Ed448Goldilocks>::eddsa_sk[] = {

  667.     // RFC 8032 - test vector 1 - blank

  668.     Block(ed448_eddsa_sk[0],57),

  669.     // RFC 8032 - test vector 2/3 - 1 octet

  670.     Block(ed448_eddsa_sk[1],57),

  671.     // RFC 8032 - test vector 2/3 - 1 octet

  672.     Block(ed448_eddsa_sk[1],57),

  673.     // RFC 8032 - test vector 4 - 11 octet

  674.     Block(ed448_eddsa_sk[2],57),

  675.     // RFC 8032 - test vector 5 - 12 octet

  676.     Block(ed448_eddsa_sk[3],57),

  677.     // RFC 8032 - test vector 1 - prehash - blank

  678.     Block(ed448_eddsa_sk[4],57),

  679.     // RFC 8032 - test vector 1 - prehash - blank

  680.     Block(ed448_eddsa_sk[4],57),

  681.     // RFC 8032 - test vector 6 - 13 octet

  682.     Block(ed448_eddsa_sk[5],57),

  683.     // RFC 8032 - test vector 7 - 64 octet

  684.     Block(ed448_eddsa_sk[6],57),

  685.     // RFC 8032 - test vector 8 - 256 octet

  686.     Block(ed448_eddsa_sk[7],57),

  687.     // RFC 8032 - test vector 9 - 1023 octet

  688.     Block(ed448_eddsa_sk[8],57)

  689. };

  690. template<> const Block Tests<Ed448Goldilocks>::eddsa_pk[] = {

  691.     // RFC 8032 - test vector 1 - blank

  692.     Block(ed448_eddsa_pk[0],57),

  693.     // RFC 8032 - test vector 2/3 - 1 octet

  694.     Block(ed448_eddsa_pk[1],57),

  695.     // RFC 8032 - test vector 2/3 - 1 octet

  696.     Block(ed448_eddsa_pk[1],57),

  697.     // RFC 8032 - test vector 4 - 11 octet

  698.     Block(ed448_eddsa_pk[2],57),

  699.     // RFC 8032 - test vector 5 - 12 octet

  700.     Block(ed448_eddsa_pk[3],57),

  701.     // RFC 8032 - test vector 1 - prehash - abc

  702.     Block(ed448_eddsa_pk[4],57),

  703.     // RFC 8032 - test vector 1 - prehash - abc

  704.     Block(ed448_eddsa_pk[4],57),

  705.     // RFC 8032 - test vector 6 - 13 octet

  706.     Block(ed448_eddsa_pk[5],57),

  707.     // RFC 8032 - test vector 7 - 64 octet

  708.     Block(ed448_eddsa_pk[6],57),

  709.     // RFC 8032 - test vector 8 - 256 octet

  710.     Block(ed448_eddsa_pk[7],57),

  711.     // RFC 8032 - test vector 9 - 1023 octet

  712.     Block(ed448_eddsa_pk[8],57)

  713. };

  714. template<> const Block Tests<Ed448Goldilocks>::eddsa_message[] = {

  715.     // RFC 8032 - test vector 1 - blank

  716.     Block(ed448_eddsa_message[0],0),

  717.     // RFC 8032 - test vector 2/3 - 1 octet

  718.     Block(ed448_eddsa_message[1],1),

  719.     // RFC 8032 - test vector 2/3 - 1 octet

  720.     Block(ed448_eddsa_message[1],1),

  721.     // RFC 8032 - test vector 4 - 11 octet

  722.     Block(ed448_eddsa_message[2],11),

  723.     // RFC 8032 - test vector 5 - 12 octet

  724.     Block(ed448_eddsa_message[3],12),

  725.     // RFC 8032 - test vector 1/2 - prehash - abc

  726.     Block(ed448_eddsa_message[4],3),

  727.     // RFC 8032 - test vector 1/2 - prehash - abc

  728.     Block(ed448_eddsa_message[4],3),

  729.     // RFC 8032 - test vector 6 - 13 octet

  730.     Block(ed448_eddsa_message[5],13),

  731.     // RFC 8032 - test vector 7 - 64 octet

  732.     Block(ed448_eddsa_message[6],64),

  733.     // RFC 8032 - test vector 8 - 256 octet

  734.     Block(ed448_eddsa_message[7],256),

  735.     // RFC 8032 - test vector 9 - 1023 octet

  736.     Block(ed448_eddsa_message[8],1023)

  737. };

  738. template<> const Block Tests<Ed448Goldilocks>::eddsa_context[] = {

  739.     // RFC 8032 - test vector 1 - blank

  740.     Block(NULL,0),

  741.     // RFC 8032 - test vector 2 - 1 octet

  742.     Block(NULL,0),

  743.     // RFC 8032 - test vector 3 - 1 octet

  744.     Block(ed448_eddsa_context[0],3),

  745.     // RFC 8032 - test vector 4 - 11 octet

  746.     Block(NULL,0),

  747.     // RFC 8032 - test vector 5 - 12 octet

  748.     Block(NULL,0),

  749.     // RFC 8032 - test vector 1 - prehash - abc

  750.     Block(NULL,0),

  751.     // RFC 8032 - test vector 2 - prehash - abc - context

  752.     Block(ed448_eddsa_context[0],3),

  753.     // RFC 8032 - test vector 6 - 13 octet

  754.     Block(NULL,0),

  755.     // RFC 8032 - test vector 7 - 64 octet

  756.     Block(NULL,0),

  757.     // RFC 8032 - test vector 8 - 256 octet

  758.     Block(NULL,0),

  759.     // RFC 8032 - test vector 9 - 1023 octet

  760.     Block(NULL,0)

  761. 

  762. };

  763. template<> const Block Tests<Ed448Goldilocks>::eddsa_sig[] = {

  764.     // RFC 8032 - test vector 1 - blank

  765.     Block(ed448_eddsa_sig[0],114),

  766.     // RFC 8032 - test vector 2 - 1 octet

  767.     Block(ed448_eddsa_sig[1],114),

  768.     // RFC 8032 - test vector 3 - 1 octet - context

  769.     Block(ed448_eddsa_sig[4],114),

  770.     // RFC 8032 - test vector 4 - 11 octet

  771.     Block(ed448_eddsa_sig[2],114),

  772.     // RFC 8032 - test vector 5 - 12 octet

  773.     Block(ed448_eddsa_sig[3],114),

  774.     // RFC 8032 - test vector 1 - prehash - abc

  775.     Block(ed448_eddsa_sig[5],114),

  776.     // RFC 8032 - test vector 2 - prehash - abc - context

  777.     Block(ed448_eddsa_sig[6],114),

  778.     // RFC 8032 - test vector 6 - 13 octet

  779.     Block(ed448_eddsa_sig[7],114),

  780.     // RFC 8032 - test vector 7 - 64 octet

  781.     Block(ed448_eddsa_sig[8],114),

  782.     // RFC 8032 - test vector 8 - 256 octet

  783.     Block(ed448_eddsa_sig[9],114),

  784.     // RFC 8032 - test vector 9 - 1023 octet

  785.     Block(ed448_eddsa_sig[10],114)

  786. };

  787. 

  788. template<> const bool Tests<Ed448Goldilocks>::eddsa_verify_should_succeed[] = {

  789.     true,

  790.     true,

  791.     true,

  792.     true,

  793.     true,

  794.     true,

  795.     true,

  796.     true,

  797.     true,

  798.     true,

  799.     true

  800. };

  801. 

  802. const uint8_t ed25519_eddsa_sk[][32] = {{

  803.     0x9d,0x61,0xb1,0x9d,0xef,0xfd,0x5a,0x60,

  804.     0xba,0x84,0x4a,0xf4,0x92,0xec,0x2c,0xc4,

  805.     0x44,0x49,0xc5,0x69,0x7b,0x32,0x69,0x19,

  806.     0x70,0x3b,0xac,0x03,0x1c,0xae,0x7f,0x60

  807. }, {

  808.     0x4c,0xcd,0x08,0x9b,0x28,0xff,0x96,0xda,

  809.     0x9d,0xb6,0xc3,0x46,0xec,0x11,0x4e,0x0f,

  810.     0x5b,0x8a,0x31,0x9f,0x35,0xab,0xa6,0x24,

  811.     0xda,0x8c,0xf6,0xed,0x4f,0xb8,0xa6,0xfb

  812. }, {

  813.     0xc5,0xaa,0x8d,0xf4,0x3f,0x9f,0x83,0x7b,

  814.     0xed,0xb7,0x44,0x2f,0x31,0xdc,0xb7,0xb1,

  815.     0x66,0xd3,0x85,0x35,0x07,0x6f,0x09,0x4b,

  816.     0x85,0xce,0x3a,0x2e,0x0b,0x44,0x58,0xf7

  817. }, {

  818.     0x83,0x3f,0xe6,0x24,0x09,0x23,0x7b,0x9d,

  819.     0x62,0xec,0x77,0x58,0x75,0x20,0x91,0x1e,

  820.     0x9a,0x75,0x9c,0xec,0x1d,0x19,0x75,0x5b,

  821.     0x7d,0xa9,0x01,0xb9,0x6d,0xca,0x3d,0x42

  822. }, {

  823.     0x03,0x05,0x33,0x4e,0x38,0x1a,0xf7,0x8f,

  824.     0x14,0x1c,0xb6,0x66,0xf6,0x19,0x9f,0x57,

  825.     0xbc,0x34,0x95,0x33,0x5a,0x25,0x6a,0x95,

  826.     0xbd,0x2a,0x55,0xbf,0x54,0x66,0x63,0xf6

  827. }};

  828. const uint8_t ed25519_eddsa_pk[][32] = {{

  829.     0xd7,0x5a,0x98,0x01,0x82,0xb1,0x0a,0xb7,

  830.     0xd5,0x4b,0xfe,0xd3,0xc9,0x64,0x07,0x3a,

  831.     0x0e,0xe1,0x72,0xf3,0xda,0xa6,0x23,0x25,

  832.     0xaf,0x02,0x1a,0x68,0xf7,0x07,0x51,0x1a

  833. }, {

  834.     0x3d,0x40,0x17,0xc3,0xe8,0x43,0x89,0x5a,

  835.     0x92,0xb7,0x0a,0xa7,0x4d,0x1b,0x7e,0xbc,

  836.     0x9c,0x98,0x2c,0xcf,0x2e,0xc4,0x96,0x8c,

  837.     0xc0,0xcd,0x55,0xf1,0x2a,0xf4,0x66,0x0c

  838. }, {

  839.     0xfc,0x51,0xcd,0x8e,0x62,0x18,0xa1,0xa3,

  840.     0x8d,0xa4,0x7e,0xd0,0x02,0x30,0xf0,0x58,

  841.     0x08,0x16,0xed,0x13,0xba,0x33,0x03,0xac,

  842.     0x5d,0xeb,0x91,0x15,0x48,0x90,0x80,0x25

  843. }, {

  844.     0xec,0x17,0x2b,0x93,0xad,0x5e,0x56,0x3b,

  845.     0xf4,0x93,0x2c,0x70,0xe1,0x24,0x50,0x34,

  846.     0xc3,0x54,0x67,0xef,0x2e,0xfd,0x4d,0x64,

  847.     0xeb,0xf8,0x19,0x68,0x34,0x67,0xe2,0xbf

  848. }, {

  849.     0xdf,0xc9,0x42,0x5e,0x4f,0x96,0x8f,0x7f,

  850.     0x0c,0x29,0xf0,0x25,0x9c,0xf5,0xf9,0xae,

  851.     0xd6,0x85,0x1c,0x2b,0xb4,0xad,0x8b,0xfb,

  852.     0x86,0x0c,0xfe,0xe0,0xab,0x24,0x82,0x92

  853. }, {

  854.     0xc7,0x17,0x6a,0x70,0x3d,0x4d,0xd8,0x4f,

  855.     0xba,0x3c,0x0b,0x76,0x0d,0x10,0x67,0x0f,

  856.     0x2a,0x20,0x53,0xfa,0x2c,0x39,0xcc,0xc6,

  857.     0x4e,0xc7,0xfd,0x77,0x92,0xac,0x03,0xfa

  858. }, {

  859.     0xf7,0xba,0xde,0xc5,0xb8,0xab,0xea,0xf6,

  860.     0x99,0x58,0x39,0x92,0x21,0x9b,0x7b,0x22,

  861.     0x3f,0x1d,0xf3,0xfb,0xbe,0xa9,0x19,0x84,

  862.     0x4e,0x3f,0x7c,0x55,0x4a,0x43,0xdd,0x43

  863. }, {

  864.     0xcd,0xb2,0x67,0xce,0x40,0xc5,0xcd,0x45,

  865.     0x30,0x6f,0xa5,0xd2,0xf2,0x97,0x31,0x45,

  866.     0x93,0x87,0xdb,0xf9,0xeb,0x93,0x3b,0x7b,

  867.     0xd5,0xae,0xd9,0xa7,0x65,0xb8,0x8d,0x4d

  868. }, {

  869.     0x44,0x2a,0xad,0x9f,0x08,0x9a,0xd9,0xe1,

  870.     0x46,0x47,0xb1,0xef,0x90,0x99,0xa1,0xff,

  871.     0x47,0x98,0xd7,0x85,0x89,0xe6,0x6f,0x28,

  872.     0xec,0xa6,0x9c,0x11,0xf5,0x82,0xa6,0x23

  873. }};

  874. const uint8_t ed25519_eddsa_message[][32] = {{

  875.     0

  876. }, {

  877.     0x72

  878. }, {

  879.     0xaf,0x82

  880. }, {

  881.     0x61,0x62,0x63

  882. }, {

  883.     0xf7,0x26,0x93,0x6d,0x19,0xc8,0x00,0x49,

  884.     0x4e,0x3f,0xda,0xff,0x20,0xb2,0x76,0xa8

  885. }, { // https://eprint.iacr.org/2020/1244.pdf

  886.     0x8c,0x93,0x25,0x5d,0x71,0xdc,0xab,0x10,

  887.     0xe8,0xf3,0x79,0xc2,0x62,0x00,0xf3,0xc7,

  888.     0xbd,0x5f,0x09,0xd9,0xbc,0x30,0x68,0xd3,

  889.     0xef,0x4e,0xde,0xb4,0x85,0x30,0x22,0xb6

  890. }, {

  891.     0x9b,0xd9,0xf4,0x4f,0x4d,0xcc,0x75,0xbd,

  892.     0x53,0x1b,0x56,0xb2,0xcd,0x28,0x0b,0x0b,

  893.     0xb3,0x8f,0xc1,0xcd,0x6d,0x12,0x30,0xe1,

  894.     0x48,0x61,0xd8,0x61,0xde,0x09,0x2e,0x79

  895. }, {

  896.     0xae,0xbf,0x3f,0x26,0x01,0xa0,0xc8,0xc5,

  897.     0xd3,0x9c,0xc7,0xd8,0x91,0x16,0x42,0xf7,

  898.     0x40,0xb7,0x81,0x68,0x21,0x8d,0xa8,0x47,

  899.     0x17,0x72,0xb3,0x5f,0x9d,0x35,0xb9,0xab

  900. }, {

  901.     0xe4,0x7d,0x62,0xc6,0x3f,0x83,0x0d,0xc7,

  902.     0xa6,0x85,0x1a,0x0b,0x1f,0x33,0xae,0x4b,

  903.     0xb2,0xf5,0x07,0xfb,0x6c,0xff,0xec,0x40,

  904.     0x11,0xea,0xcc,0xd5,0x5b,0x53,0xf5,0x6c

  905. }, {

  906.     0x85,0xe2,0x41,0xa0,0x7d,0x14,0x8b,0x41,

  907.     0xe4,0x7d,0x62,0xc6,0x3f,0x83,0x0d,0xc7,

  908.     0xa6,0x85,0x1a,0x0b,0x1f,0x33,0xae,0x4b,

  909.     0xb2,0xf5,0x07,0xfb,0x6c,0xff,0xec,0x40

  910. }, {

  911.     0xfd,0xae,0xbc,0x42,0x9f,0x4a,0x73,0x59,

  912.     0x32,0xa1,0x60,0xda,0x13,0x01,0x08,0x0c,

  913.     0x13,0x28,0x0e,0xea,0x8b,0xc2,0x80,0xd1,

  914.     0xb3,0x92,0xc6,0xb9,0xe6,0xba,0x3a,0x5a

  915. }, {

  916.     0x84,0xb6,0x98,0xd3,0x9b,0xe1,0x26,0xff,

  917.     0x55,0xfe,0x45,0x07,0x9e,0x6c,0x8b,0xf6,

  918.     0x4a,0x0d,0x7d,0xb6,0x99,0x45,0x60,0xb4,

  919.     0xe9,0x6b,0x70,0x21,0xeb,0x39,0xc1,0xa1

  920. }};

  921. const uint8_t ed25519_eddsa_context[][3] = {{

  922.     0x66,0x6f,0x6f

  923. }, {

  924.     0x62,0x61,0x72

  925. }};

  926. const uint8_t ed25519_eddsa_sig[][64] = {{

  927.     0xe5,0x56,0x43,0x00,0xc3,0x60,0xac,0x72,

  928.     0x90,0x86,0xe2,0xcc,0x80,0x6e,0x82,0x8a,

  929.     0x84,0x87,0x7f,0x1e,0xb8,0xe5,0xd9,0x74,

  930.     0xd8,0x73,0xe0,0x65,0x22,0x49,0x01,0x55,

  931.     0x5f,0xb8,0x82,0x15,0x90,0xa3,0x3b,0xac,

  932.     0xc6,0x1e,0x39,0x70,0x1c,0xf9,0xb4,0x6b,

  933.     0xd2,0x5b,0xf5,0xf0,0x59,0x5b,0xbe,0x24,

  934.     0x65,0x51,0x41,0x43,0x8e,0x7a,0x10,0x0b

  935. } , {

  936.     0x92,0xa0,0x09,0xa9,0xf0,0xd4,0xca,0xb8,

  937.     0x72,0x0e,0x82,0x0b,0x5f,0x64,0x25,0x40,

  938.     0xa2,0xb2,0x7b,0x54,0x16,0x50,0x3f,0x8f,

  939.     0xb3,0x76,0x22,0x23,0xeb,0xdb,0x69,0xda,

  940.     0x08,0x5a,0xc1,0xe4,0x3e,0x15,0x99,0x6e,

  941.     0x45,0x8f,0x36,0x13,0xd0,0xf1,0x1d,0x8c,

  942.     0x38,0x7b,0x2e,0xae,0xb4,0x30,0x2a,0xee,

  943.     0xb0,0x0d,0x29,0x16,0x12,0xbb,0x0c,0x00

  944. }, {

  945.     0x62,0x91,0xd6,0x57,0xde,0xec,0x24,0x02,

  946.     0x48,0x27,0xe6,0x9c,0x3a,0xbe,0x01,0xa3,

  947.     0x0c,0xe5,0x48,0xa2,0x84,0x74,0x3a,0x44,

  948.     0x5e,0x36,0x80,0xd7,0xdb,0x5a,0xc3,0xac,

  949.     0x18,0xff,0x9b,0x53,0x8d,0x16,0xf2,0x90,

  950.     0xae,0x67,0xf7,0x60,0x98,0x4d,0xc6,0x59,

  951.     0x4a,0x7c,0x15,0xe9,0x71,0x6e,0xd2,0x8d,

  952.     0xc0,0x27,0xbe,0xce,0xea,0x1e,0xc4,0x0a

  953. }, {

  954.     0x98,0xa7,0x02,0x22,0xf0,0xb8,0x12,0x1a,

  955.     0xa9,0xd3,0x0f,0x81,0x3d,0x68,0x3f,0x80,

  956.     0x9e,0x46,0x2b,0x46,0x9c,0x7f,0xf8,0x76,

  957.     0x39,0x49,0x9b,0xb9,0x4e,0x6d,0xae,0x41,

  958.     0x31,0xf8,0x50,0x42,0x46,0x3c,0x2a,0x35,

  959.     0x5a,0x20,0x03,0xd0,0x62,0xad,0xf5,0xaa,

  960.     0xa1,0x0b,0x8c,0x61,0xe6,0x36,0x06,0x2a,

  961.     0xaa,0xd1,0x1c,0x2a,0x26,0x08,0x34,0x06

  962. }, {

  963.     0x55,0xa4,0xcc,0x2f,0x70,0xa5,0x4e,0x04,

  964.     0x28,0x8c,0x5f,0x4c,0xd1,0xe4,0x5a,0x7b,

  965.     0xb5,0x20,0xb3,0x62,0x92,0x91,0x18,0x76,

  966.     0xca,0xda,0x73,0x23,0x19,0x8d,0xd8,0x7a,

  967.     0x8b,0x36,0x95,0x0b,0x95,0x13,0x00,0x22,

  968.     0x90,0x7a,0x7f,0xb7,0xc4,0xe9,0xb2,0xd5,

  969.     0xf6,0xcc,0xa6,0x85,0xa5,0x87,0xb4,0xb2,

  970.     0x1f,0x4b,0x88,0x8e,0x4e,0x7e,0xdb,0x0d

  971. }, {

  972.     0xfc,0x60,0xd5,0x87,0x2f,0xc4,0x6b,0x3a,

  973.     0xa6,0x9f,0x8b,0x5b,0x43,0x51,0xd5,0x80,

  974.     0x8f,0x92,0xbc,0xc0,0x44,0x60,0x6d,0xb0,

  975.     0x97,0xab,0xab,0x6d,0xbc,0xb1,0xae,0xe3,

  976.     0x21,0x6c,0x48,0xe8,0xb3,0xb6,0x64,0x31,

  977.     0xb5,0xb1,0x86,0xd1,0xd2,0x8f,0x8e,0xe1,

  978.     0x5a,0x5c,0xa2,0xdf,0x66,0x68,0x34,0x62,

  979.     0x91,0xc2,0x04,0x3d,0x4e,0xb3,0xe9,0x0d

  980. }, {

  981.     0xc7,0x17,0x6a,0x70,0x3d,0x4d,0xd8,0x4f,

  982.     0xba,0x3c,0x0b,0x76,0x0d,0x10,0x67,0x0f,

  983.     0x2a,0x20,0x53,0xfa,0x2c,0x39,0xcc,0xc6,

  984.     0x4e,0xc7,0xfd,0x77,0x92,0xac,0x03,0x7a,

  985.     0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,

  986.     0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,

  987.     0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,

  988.     0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00

  989. }, {

  990.     0xf7,0xba,0xde,0xc5,0xb8,0xab,0xea,0xf6,

  991.     0x99,0x58,0x39,0x92,0x21,0x9b,0x7b,0x22,

  992.     0x3f,0x1d,0xf3,0xfb,0xbe,0xa9,0x19,0x84,

  993.     0x4e,0x3f,0x7c,0x55,0x4a,0x43,0xdd,0x43,

  994.     0xa5,0xbb,0x70,0x47,0x86,0xbe,0x79,0xfc,

  995.     0x47,0x6f,0x91,0xd3,0xf3,0xf8,0x9b,0x03,

  996.     0x98,0x4d,0x80,0x68,0xdc,0xf1,0xbb,0x7d,

  997.     0xfc,0x66,0x37,0xb4,0x54,0x50,0xac,0x04

  998. }, {

  999.     0xc7,0x17,0x6a,0x70,0x3d,0x4d,0xd8,0x4f,

  1000.     0xba,0x3c,0x0b,0x76,0x0d,0x10,0x67,0x0f,

  1001.     0x2a,0x20,0x53,0xfa,0x2c,0x39,0xcc,0xc6,

  1002.     0x4e,0xc7,0xfd,0x77,0x92,0xac,0x03,0xfa,

  1003.     0x8c,0x4b,0xd4,0x5a,0xec,0xac,0xa5,0xb2,

  1004.     0x4f,0xb9,0x7b,0xc1,0x0a,0xc2,0x7a,0xc8,

  1005.     0x75,0x1a,0x7d,0xfe,0x1b,0xaf,0xf8,0xb9,

  1006.     0x53,0xec,0x9f,0x58,0x33,0xca,0x26,0x0e

  1007. }, {

  1008.     0x90,0x46,0xa6,0x47,0x50,0x44,0x49,0x38,

  1009.     0xde,0x19,0xf2,0x27,0xbb,0x80,0x48,0x5e,

  1010.     0x92,0xb8,0x3f,0xdb,0x4b,0x65,0x06,0xc1,

  1011.     0x60,0x48,0x4c,0x01,0x6c,0xc1,0x85,0x2f,

  1012.     0x87,0x90,0x9e,0x14,0x42,0x8a,0x7a,0x1d,

  1013.     0x62,0xe9,0xf2,0x2f,0x3d,0x3a,0xd7,0x80,

  1014.     0x2d,0xb0,0x2e,0xb2,0xe6,0x88,0xb6,0xc5,

  1015.     0x2f,0xcd,0x66,0x48,0xa9,0x8b,0xd0,0x09

  1016. }, {

  1017.     0x16,0x0a,0x1c,0xb0,0xdc,0x9c,0x02,0x58,

  1018.     0xcd,0x0a,0x7d,0x23,0xe9,0x4d,0x8f,0xa8,

  1019.     0x78,0xbc,0xb1,0x92,0x5f,0x2c,0x64,0x24,

  1020.     0x6b,0x2d,0xee,0x17,0x96,0xbe,0xd5,0x12,

  1021.     0x5e,0xc6,0xbc,0x98,0x2a,0x26,0x9b,0x72,

  1022.     0x3e,0x06,0x68,0xe5,0x40,0x91,0x1a,0x9a,

  1023.     0x6a,0x58,0x92,0x1d,0x69,0x25,0xe4,0x34,

  1024.     0xab,0x10,0xaa,0x79,0x40,0x55,0x1a,0x09

  1025. }, {

  1026.     0x21,0x12,0x2a,0x84,0xe0,0xb5,0xfc,0xa4,

  1027.     0x05,0x2f,0x5b,0x12,0x35,0xc8,0x0a,0x53,

  1028.     0x78,0x78,0xb3,0x8f,0x31,0x42,0x35,0x6b,

  1029.     0x2c,0x23,0x84,0xeb,0xad,0x46,0x68,0xb7,

  1030.     0xe4,0x0b,0xc8,0x36,0xda,0xc0,0xf7,0x10,

  1031.     0x76,0xf9,0xab,0xe3,0xa5,0x3f,0x9c,0x03,

  1032.     0xc1,0xce,0xee,0xdd,0xb6,0x58,0xd0,0x03,

  1033.     0x04,0x94,0xac,0xe5,0x86,0x68,0x74,0x05

  1034. }, {

  1035.     0xe9,0x6f,0x66,0xbe,0x97,0x6d,0x82,0xe6,

  1036.     0x01,0x50,0xba,0xec,0xff,0x99,0x06,0x68,

  1037.     0x4a,0xeb,0xb1,0xef,0x18,0x1f,0x67,0xa7,

  1038.     0x18,0x9a,0xc7,0x8e,0xa2,0x3b,0x6c,0x0e,

  1039.     0x54,0x7f,0x76,0x90,0xa0,0xe2,0xdd,0xcd,

  1040.     0x04,0xd8,0x7d,0xbc,0x34,0x90,0xdc,0x19,

  1041.     0xb3,0xb3,0x05,0x2f,0x7f,0xf0,0x53,0x8c,

  1042.     0xb6,0x8a,0xfb,0x36,0x9b,0xa3,0xa5,0x14

  1043. }, {

  1044.     0x8c,0xe5,0xb9,0x6c,0x8f,0x26,0xd0,0xab,

  1045.     0x6c,0x47,0x95,0x8c,0x9e,0x68,0xb9,0x37,

  1046.     0x10,0x4c,0xd3,0x6e,0x13,0xc3,0x35,0x66,

  1047.     0xac,0xd2,0xfe,0x8d,0x38,0xaa,0x19,0x42,

  1048.     0x7e,0x71,0xf9,0x8a,0x47,0x34,0x74,0xf2,

  1049.     0xf1,0x3f,0x06,0xf9,0x7c,0x20,0xd5,0x8c,

  1050.     0xc3,0xf5,0x4b,0x8b,0xd0,0xd2,0x72,0xf4,

  1051.     0x2b,0x69,0x5d,0xd7,0xe8,0x9a,0x8c,0x22

  1052. }, {

  1053.     0xed,0xff,0xff,0xff,0xff,0xff,0xff,0xff,

  1054.     0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,

  1055.     0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,

  1056.     0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x7f,

  1057.     0x45,0x4d,0x37,0x0c,0x8d,0x9f,0xc3,0x23,

  1058.     0xa4,0x14,0x50,0xf8,0xd5,0x13,0xea,0xfe,

  1059.     0xb5,0xb0,0x69,0x73,0x90,0xc1,0xe5,0x05,

  1060.     0xa0,0xd4,0xdd,0xc7,0x1f,0x56,0x66,0x07

  1061. }, {

  1062.     0xed,0xff,0xff,0xff,0xff,0xff,0xff,0xff,

  1063.     0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,

  1064.     0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,

  1065.     0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x7f,

  1066.     0x08,0x4d,0x5b,0x99,0xc2,0xa9,0x46,0x3d,

  1067.     0x9c,0x8b,0xd5,0x02,0x69,0x16,0x99,0x69,

  1068.     0x84,0xee,0xec,0x87,0xdd,0xf1,0xd3,0xbe,

  1069.     0x32,0x90,0x06,0xac,0xe1,0xb3,0x7b,0x09

  1070. }};

  1071. 

  1072. template<> const bool Tests<Ristretto>::eddsa_prehashed[] = {

  1073.     false,

  1074.     false,

  1075.     false,

  1076.     true,

  1077.     false,

  1078.     false,

  1079.     false,

  1080.     false,

  1081.     false,

  1082.     false,

  1083.     false,

  1084.     false,

  1085.     false,

  1086.     false,

  1087.     false,

  1088.     false

  1089. };

  1090. template<> const Block Tests<Ristretto>::eddsa_sk[] = {

  1091.     Block(ed25519_eddsa_sk[0],32),

  1092.     Block(ed25519_eddsa_sk[1],32),

  1093.     Block(ed25519_eddsa_sk[2],32),

  1094.     Block(ed25519_eddsa_sk[3],32),

  1095.     Block(ed25519_eddsa_sk[4],32),

  1096.     Block(ed25519_eddsa_sk[4],32),

  1097.     // https://eprint.iacr.org/2020/1244.pdf

  1098.     // These tests don't have an associated private key

  1099.     // In many cases the public key is malformed

  1100.     Block(NULL,0),

  1101.     Block(NULL,0),

  1102.     Block(NULL,0),

  1103.     Block(NULL,0),

  1104.     Block(NULL,0),

  1105.     Block(NULL,0),

  1106.     Block(NULL,0),

  1107.     Block(NULL,0),

  1108.     Block(NULL,0),

  1109.     Block(NULL,0),

  1110. };

  1111. template<> const Block Tests<Ristretto>::eddsa_pk[] = {

  1112.     Block(ed25519_eddsa_pk[0],32),

  1113.     Block(ed25519_eddsa_pk[1],32),

  1114.     Block(ed25519_eddsa_pk[2],32),

  1115.     Block(ed25519_eddsa_pk[3],32),

  1116.     Block(ed25519_eddsa_pk[4],32),

  1117.     Block(ed25519_eddsa_pk[4],32),

  1118.     // https://eprint.iacr.org/2020/1244.pdf

  1119.     Block(ed25519_eddsa_pk[5],32),

  1120.     Block(ed25519_eddsa_pk[5],32),

  1121.     Block(ed25519_eddsa_pk[6],32),

  1122.     Block(ed25519_eddsa_pk[7],32),

  1123.     Block(ed25519_eddsa_pk[7],32),

  1124.     Block(ed25519_eddsa_pk[7],32),

  1125.     Block(ed25519_eddsa_pk[8],32),

  1126.     Block(ed25519_eddsa_pk[8],32),

  1127.     Block(ed25519_eddsa_pk[6],32),

  1128.     Block(ed25519_eddsa_pk[6],32)

  1129. };

  1130. template<> const Block Tests<Ristretto>::eddsa_context[] = {

  1131.     EdDSA<Ristretto>::NO_CONTEXT(),

  1132.     EdDSA<Ristretto>::NO_CONTEXT(),

  1133.     EdDSA<Ristretto>::NO_CONTEXT(),

  1134.     Block(NULL,0),

  1135.     Block(ed25519_eddsa_context[0],3),

  1136.     Block(ed25519_eddsa_context[1],3),

  1137.     // https://eprint.iacr.org/2020/1244.pdf

  1138.     EdDSA<Ristretto>::NO_CONTEXT(),

  1139.     EdDSA<Ristretto>::NO_CONTEXT(),

  1140.     EdDSA<Ristretto>::NO_CONTEXT(),

  1141.     EdDSA<Ristretto>::NO_CONTEXT(),

  1142.     EdDSA<Ristretto>::NO_CONTEXT(),

  1143.     EdDSA<Ristretto>::NO_CONTEXT(),

  1144.     EdDSA<Ristretto>::NO_CONTEXT(),

  1145.     EdDSA<Ristretto>::NO_CONTEXT(),

  1146.     EdDSA<Ristretto>::NO_CONTEXT(),

  1147.     EdDSA<Ristretto>::NO_CONTEXT()

  1148. };

  1149. template<> const Block Tests<Ristretto>::eddsa_message[] = {

  1150.     Block(ed25519_eddsa_message[0],0),

  1151.     Block(ed25519_eddsa_message[1],1),

  1152.     Block(ed25519_eddsa_message[2],2),

  1153.     Block(ed25519_eddsa_message[3],3),

  1154.     Block(ed25519_eddsa_message[4],16),

  1155.     Block(ed25519_eddsa_message[4],16),

  1156.     // https://eprint.iacr.org/2020/1244.pdf

  1157.     Block(ed25519_eddsa_message[5],32),

  1158.     Block(ed25519_eddsa_message[6],32),

  1159.     Block(ed25519_eddsa_message[7],32),

  1160.     Block(ed25519_eddsa_message[6],32),

  1161.     Block(ed25519_eddsa_message[8],32),

  1162.     Block(ed25519_eddsa_message[8],32),

  1163.     Block(ed25519_eddsa_message[9],32),

  1164.     Block(ed25519_eddsa_message[9],32),

  1165.     Block(ed25519_eddsa_message[10],32),

  1166.     Block(ed25519_eddsa_message[11],32)

  1167. };

  1168. template<> const Block Tests<Ristretto>::eddsa_sig[] = {

  1169.     Block(ed25519_eddsa_sig[0],64),

  1170.     Block(ed25519_eddsa_sig[1],64),

  1171.     Block(ed25519_eddsa_sig[2],64),

  1172.     Block(ed25519_eddsa_sig[3],64),

  1173.     Block(ed25519_eddsa_sig[4],64),

  1174.     Block(ed25519_eddsa_sig[5],64),

  1175.     // https://eprint.iacr.org/2020/1244.pdf

  1176.     Block(ed25519_eddsa_sig[6],64),

  1177.     Block(ed25519_eddsa_sig[7],64),

  1178.     Block(ed25519_eddsa_sig[8],64),

  1179.     Block(ed25519_eddsa_sig[9],64),

  1180.     Block(ed25519_eddsa_sig[10],64),

  1181.     Block(ed25519_eddsa_sig[11],64),

  1182.     Block(ed25519_eddsa_sig[12],64),

  1183.     Block(ed25519_eddsa_sig[13],64),

  1184.     Block(ed25519_eddsa_sig[14],64),

  1185.     Block(ed25519_eddsa_sig[15],64)

  1186. };

  1187. template<> const bool Tests<Ristretto>::eddsa_verify_should_succeed[] = {

  1188.     true,

  1189.     true,

  1190.     true,

  1191.     true,

  1192.     true,

  1193.     true,

  1194.     // https://eprint.iacr.org/2020/1244.pdf

  1195.     // Note that passing the first two means we conform

  1196.     // to RFC 8032, but sigs are malleable for the zero-key

  1197.     true,

  1198.     true,

  1199.     true,

  1200.     true,

  1201.     true,

  1202.     true,

  1203.     false,

  1204.     false,

  1205.     false,

  1206.     false

  1207. };