curve25519-selftest.c 60 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321
  1. // SPDX-License-Identifier: GPL-2.0 OR MIT
  2. /*
  3. * Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
  4. */
  5. #include <crypto/curve25519.h>
  6. struct curve25519_test_vector {
  7. u8 private[CURVE25519_KEY_SIZE];
  8. u8 public[CURVE25519_KEY_SIZE];
  9. u8 result[CURVE25519_KEY_SIZE];
  10. bool valid;
  11. };
  12. static const struct curve25519_test_vector curve25519_test_vectors[] __initconst = {
  13. {
  14. .private = { 0x77, 0x07, 0x6d, 0x0a, 0x73, 0x18, 0xa5, 0x7d,
  15. 0x3c, 0x16, 0xc1, 0x72, 0x51, 0xb2, 0x66, 0x45,
  16. 0xdf, 0x4c, 0x2f, 0x87, 0xeb, 0xc0, 0x99, 0x2a,
  17. 0xb1, 0x77, 0xfb, 0xa5, 0x1d, 0xb9, 0x2c, 0x2a },
  18. .public = { 0xde, 0x9e, 0xdb, 0x7d, 0x7b, 0x7d, 0xc1, 0xb4,
  19. 0xd3, 0x5b, 0x61, 0xc2, 0xec, 0xe4, 0x35, 0x37,
  20. 0x3f, 0x83, 0x43, 0xc8, 0x5b, 0x78, 0x67, 0x4d,
  21. 0xad, 0xfc, 0x7e, 0x14, 0x6f, 0x88, 0x2b, 0x4f },
  22. .result = { 0x4a, 0x5d, 0x9d, 0x5b, 0xa4, 0xce, 0x2d, 0xe1,
  23. 0x72, 0x8e, 0x3b, 0xf4, 0x80, 0x35, 0x0f, 0x25,
  24. 0xe0, 0x7e, 0x21, 0xc9, 0x47, 0xd1, 0x9e, 0x33,
  25. 0x76, 0xf0, 0x9b, 0x3c, 0x1e, 0x16, 0x17, 0x42 },
  26. .valid = true
  27. },
  28. {
  29. .private = { 0x5d, 0xab, 0x08, 0x7e, 0x62, 0x4a, 0x8a, 0x4b,
  30. 0x79, 0xe1, 0x7f, 0x8b, 0x83, 0x80, 0x0e, 0xe6,
  31. 0x6f, 0x3b, 0xb1, 0x29, 0x26, 0x18, 0xb6, 0xfd,
  32. 0x1c, 0x2f, 0x8b, 0x27, 0xff, 0x88, 0xe0, 0xeb },
  33. .public = { 0x85, 0x20, 0xf0, 0x09, 0x89, 0x30, 0xa7, 0x54,
  34. 0x74, 0x8b, 0x7d, 0xdc, 0xb4, 0x3e, 0xf7, 0x5a,
  35. 0x0d, 0xbf, 0x3a, 0x0d, 0x26, 0x38, 0x1a, 0xf4,
  36. 0xeb, 0xa4, 0xa9, 0x8e, 0xaa, 0x9b, 0x4e, 0x6a },
  37. .result = { 0x4a, 0x5d, 0x9d, 0x5b, 0xa4, 0xce, 0x2d, 0xe1,
  38. 0x72, 0x8e, 0x3b, 0xf4, 0x80, 0x35, 0x0f, 0x25,
  39. 0xe0, 0x7e, 0x21, 0xc9, 0x47, 0xd1, 0x9e, 0x33,
  40. 0x76, 0xf0, 0x9b, 0x3c, 0x1e, 0x16, 0x17, 0x42 },
  41. .valid = true
  42. },
  43. {
  44. .private = { 1 },
  45. .public = { 0x25, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  46. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  47. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  48. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  49. .result = { 0x3c, 0x77, 0x77, 0xca, 0xf9, 0x97, 0xb2, 0x64,
  50. 0x41, 0x60, 0x77, 0x66, 0x5b, 0x4e, 0x22, 0x9d,
  51. 0x0b, 0x95, 0x48, 0xdc, 0x0c, 0xd8, 0x19, 0x98,
  52. 0xdd, 0xcd, 0xc5, 0xc8, 0x53, 0x3c, 0x79, 0x7f },
  53. .valid = true
  54. },
  55. {
  56. .private = { 1 },
  57. .public = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  58. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  59. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  60. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  61. .result = { 0xb3, 0x2d, 0x13, 0x62, 0xc2, 0x48, 0xd6, 0x2f,
  62. 0xe6, 0x26, 0x19, 0xcf, 0xf0, 0x4d, 0xd4, 0x3d,
  63. 0xb7, 0x3f, 0xfc, 0x1b, 0x63, 0x08, 0xed, 0xe3,
  64. 0x0b, 0x78, 0xd8, 0x73, 0x80, 0xf1, 0xe8, 0x34 },
  65. .valid = true
  66. },
  67. {
  68. .private = { 0xa5, 0x46, 0xe3, 0x6b, 0xf0, 0x52, 0x7c, 0x9d,
  69. 0x3b, 0x16, 0x15, 0x4b, 0x82, 0x46, 0x5e, 0xdd,
  70. 0x62, 0x14, 0x4c, 0x0a, 0xc1, 0xfc, 0x5a, 0x18,
  71. 0x50, 0x6a, 0x22, 0x44, 0xba, 0x44, 0x9a, 0xc4 },
  72. .public = { 0xe6, 0xdb, 0x68, 0x67, 0x58, 0x30, 0x30, 0xdb,
  73. 0x35, 0x94, 0xc1, 0xa4, 0x24, 0xb1, 0x5f, 0x7c,
  74. 0x72, 0x66, 0x24, 0xec, 0x26, 0xb3, 0x35, 0x3b,
  75. 0x10, 0xa9, 0x03, 0xa6, 0xd0, 0xab, 0x1c, 0x4c },
  76. .result = { 0xc3, 0xda, 0x55, 0x37, 0x9d, 0xe9, 0xc6, 0x90,
  77. 0x8e, 0x94, 0xea, 0x4d, 0xf2, 0x8d, 0x08, 0x4f,
  78. 0x32, 0xec, 0xcf, 0x03, 0x49, 0x1c, 0x71, 0xf7,
  79. 0x54, 0xb4, 0x07, 0x55, 0x77, 0xa2, 0x85, 0x52 },
  80. .valid = true
  81. },
  82. {
  83. .private = { 1, 2, 3, 4 },
  84. .public = { 0 },
  85. .result = { 0 },
  86. .valid = false
  87. },
  88. {
  89. .private = { 2, 4, 6, 8 },
  90. .public = { 0xe0, 0xeb, 0x7a, 0x7c, 0x3b, 0x41, 0xb8, 0xae,
  91. 0x16, 0x56, 0xe3, 0xfa, 0xf1, 0x9f, 0xc4, 0x6a,
  92. 0xda, 0x09, 0x8d, 0xeb, 0x9c, 0x32, 0xb1, 0xfd,
  93. 0x86, 0x62, 0x05, 0x16, 0x5f, 0x49, 0xb8 },
  94. .result = { 0 },
  95. .valid = false
  96. },
  97. {
  98. .private = { 0xff, 0xff, 0xff, 0xff, 0x0a, 0xff, 0xff, 0xff,
  99. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  100. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  101. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  102. .public = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  103. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  104. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  105. 0xff, 0xff, 0xff, 0xff, 0x0a, 0x00, 0xfb, 0x9f },
  106. .result = { 0x77, 0x52, 0xb6, 0x18, 0xc1, 0x2d, 0x48, 0xd2,
  107. 0xc6, 0x93, 0x46, 0x83, 0x81, 0x7c, 0xc6, 0x57,
  108. 0xf3, 0x31, 0x03, 0x19, 0x49, 0x48, 0x20, 0x05,
  109. 0x42, 0x2b, 0x4e, 0xae, 0x8d, 0x1d, 0x43, 0x23 },
  110. .valid = true
  111. },
  112. {
  113. .private = { 0x8e, 0x0a, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  114. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  115. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  116. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  117. .public = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  118. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  119. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  120. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x8e, 0x06 },
  121. .result = { 0x5a, 0xdf, 0xaa, 0x25, 0x86, 0x8e, 0x32, 0x3d,
  122. 0xae, 0x49, 0x62, 0xc1, 0x01, 0x5c, 0xb3, 0x12,
  123. 0xe1, 0xc5, 0xc7, 0x9e, 0x95, 0x3f, 0x03, 0x99,
  124. 0xb0, 0xba, 0x16, 0x22, 0xf3, 0xb6, 0xf7, 0x0c },
  125. .valid = true
  126. },
  127. /* wycheproof - normal case */
  128. {
  129. .private = { 0x48, 0x52, 0x83, 0x4d, 0x9d, 0x6b, 0x77, 0xda,
  130. 0xde, 0xab, 0xaa, 0xf2, 0xe1, 0x1d, 0xca, 0x66,
  131. 0xd1, 0x9f, 0xe7, 0x49, 0x93, 0xa7, 0xbe, 0xc3,
  132. 0x6c, 0x6e, 0x16, 0xa0, 0x98, 0x3f, 0xea, 0xba },
  133. .public = { 0x9c, 0x64, 0x7d, 0x9a, 0xe5, 0x89, 0xb9, 0xf5,
  134. 0x8f, 0xdc, 0x3c, 0xa4, 0x94, 0x7e, 0xfb, 0xc9,
  135. 0x15, 0xc4, 0xb2, 0xe0, 0x8e, 0x74, 0x4a, 0x0e,
  136. 0xdf, 0x46, 0x9d, 0xac, 0x59, 0xc8, 0xf8, 0x5a },
  137. .result = { 0x87, 0xb7, 0xf2, 0x12, 0xb6, 0x27, 0xf7, 0xa5,
  138. 0x4c, 0xa5, 0xe0, 0xbc, 0xda, 0xdd, 0xd5, 0x38,
  139. 0x9d, 0x9d, 0xe6, 0x15, 0x6c, 0xdb, 0xcf, 0x8e,
  140. 0xbe, 0x14, 0xff, 0xbc, 0xfb, 0x43, 0x65, 0x51 },
  141. .valid = true
  142. },
  143. /* wycheproof - public key on twist */
  144. {
  145. .private = { 0x58, 0x8c, 0x06, 0x1a, 0x50, 0x80, 0x4a, 0xc4,
  146. 0x88, 0xad, 0x77, 0x4a, 0xc7, 0x16, 0xc3, 0xf5,
  147. 0xba, 0x71, 0x4b, 0x27, 0x12, 0xe0, 0x48, 0x49,
  148. 0x13, 0x79, 0xa5, 0x00, 0x21, 0x19, 0x98, 0xa8 },
  149. .public = { 0x63, 0xaa, 0x40, 0xc6, 0xe3, 0x83, 0x46, 0xc5,
  150. 0xca, 0xf2, 0x3a, 0x6d, 0xf0, 0xa5, 0xe6, 0xc8,
  151. 0x08, 0x89, 0xa0, 0x86, 0x47, 0xe5, 0x51, 0xb3,
  152. 0x56, 0x34, 0x49, 0xbe, 0xfc, 0xfc, 0x97, 0x33 },
  153. .result = { 0xb1, 0xa7, 0x07, 0x51, 0x94, 0x95, 0xff, 0xff,
  154. 0xb2, 0x98, 0xff, 0x94, 0x17, 0x16, 0xb0, 0x6d,
  155. 0xfa, 0xb8, 0x7c, 0xf8, 0xd9, 0x11, 0x23, 0xfe,
  156. 0x2b, 0xe9, 0xa2, 0x33, 0xdd, 0xa2, 0x22, 0x12 },
  157. .valid = true
  158. },
  159. /* wycheproof - public key on twist */
  160. {
  161. .private = { 0xb0, 0x5b, 0xfd, 0x32, 0xe5, 0x53, 0x25, 0xd9,
  162. 0xfd, 0x64, 0x8c, 0xb3, 0x02, 0x84, 0x80, 0x39,
  163. 0x00, 0x0b, 0x39, 0x0e, 0x44, 0xd5, 0x21, 0xe5,
  164. 0x8a, 0xab, 0x3b, 0x29, 0xa6, 0x96, 0x0b, 0xa8 },
  165. .public = { 0x0f, 0x83, 0xc3, 0x6f, 0xde, 0xd9, 0xd3, 0x2f,
  166. 0xad, 0xf4, 0xef, 0xa3, 0xae, 0x93, 0xa9, 0x0b,
  167. 0xb5, 0xcf, 0xa6, 0x68, 0x93, 0xbc, 0x41, 0x2c,
  168. 0x43, 0xfa, 0x72, 0x87, 0xdb, 0xb9, 0x97, 0x79 },
  169. .result = { 0x67, 0xdd, 0x4a, 0x6e, 0x16, 0x55, 0x33, 0x53,
  170. 0x4c, 0x0e, 0x3f, 0x17, 0x2e, 0x4a, 0xb8, 0x57,
  171. 0x6b, 0xca, 0x92, 0x3a, 0x5f, 0x07, 0xb2, 0xc0,
  172. 0x69, 0xb4, 0xc3, 0x10, 0xff, 0x2e, 0x93, 0x5b },
  173. .valid = true
  174. },
  175. /* wycheproof - public key on twist */
  176. {
  177. .private = { 0x70, 0xe3, 0x4b, 0xcb, 0xe1, 0xf4, 0x7f, 0xbc,
  178. 0x0f, 0xdd, 0xfd, 0x7c, 0x1e, 0x1a, 0xa5, 0x3d,
  179. 0x57, 0xbf, 0xe0, 0xf6, 0x6d, 0x24, 0x30, 0x67,
  180. 0xb4, 0x24, 0xbb, 0x62, 0x10, 0xbe, 0xd1, 0x9c },
  181. .public = { 0x0b, 0x82, 0x11, 0xa2, 0xb6, 0x04, 0x90, 0x97,
  182. 0xf6, 0x87, 0x1c, 0x6c, 0x05, 0x2d, 0x3c, 0x5f,
  183. 0xc1, 0xba, 0x17, 0xda, 0x9e, 0x32, 0xae, 0x45,
  184. 0x84, 0x03, 0xb0, 0x5b, 0xb2, 0x83, 0x09, 0x2a },
  185. .result = { 0x4a, 0x06, 0x38, 0xcf, 0xaa, 0x9e, 0xf1, 0x93,
  186. 0x3b, 0x47, 0xf8, 0x93, 0x92, 0x96, 0xa6, 0xb2,
  187. 0x5b, 0xe5, 0x41, 0xef, 0x7f, 0x70, 0xe8, 0x44,
  188. 0xc0, 0xbc, 0xc0, 0x0b, 0x13, 0x4d, 0xe6, 0x4a },
  189. .valid = true
  190. },
  191. /* wycheproof - public key on twist */
  192. {
  193. .private = { 0x68, 0xc1, 0xf3, 0xa6, 0x53, 0xa4, 0xcd, 0xb1,
  194. 0xd3, 0x7b, 0xba, 0x94, 0x73, 0x8f, 0x8b, 0x95,
  195. 0x7a, 0x57, 0xbe, 0xb2, 0x4d, 0x64, 0x6e, 0x99,
  196. 0x4d, 0xc2, 0x9a, 0x27, 0x6a, 0xad, 0x45, 0x8d },
  197. .public = { 0x34, 0x3a, 0xc2, 0x0a, 0x3b, 0x9c, 0x6a, 0x27,
  198. 0xb1, 0x00, 0x81, 0x76, 0x50, 0x9a, 0xd3, 0x07,
  199. 0x35, 0x85, 0x6e, 0xc1, 0xc8, 0xd8, 0xfc, 0xae,
  200. 0x13, 0x91, 0x2d, 0x08, 0xd1, 0x52, 0xf4, 0x6c },
  201. .result = { 0x39, 0x94, 0x91, 0xfc, 0xe8, 0xdf, 0xab, 0x73,
  202. 0xb4, 0xf9, 0xf6, 0x11, 0xde, 0x8e, 0xa0, 0xb2,
  203. 0x7b, 0x28, 0xf8, 0x59, 0x94, 0x25, 0x0b, 0x0f,
  204. 0x47, 0x5d, 0x58, 0x5d, 0x04, 0x2a, 0xc2, 0x07 },
  205. .valid = true
  206. },
  207. /* wycheproof - public key on twist */
  208. {
  209. .private = { 0xd8, 0x77, 0xb2, 0x6d, 0x06, 0xdf, 0xf9, 0xd9,
  210. 0xf7, 0xfd, 0x4c, 0x5b, 0x37, 0x69, 0xf8, 0xcd,
  211. 0xd5, 0xb3, 0x05, 0x16, 0xa5, 0xab, 0x80, 0x6b,
  212. 0xe3, 0x24, 0xff, 0x3e, 0xb6, 0x9e, 0xa0, 0xb2 },
  213. .public = { 0xfa, 0x69, 0x5f, 0xc7, 0xbe, 0x8d, 0x1b, 0xe5,
  214. 0xbf, 0x70, 0x48, 0x98, 0xf3, 0x88, 0xc4, 0x52,
  215. 0xba, 0xfd, 0xd3, 0xb8, 0xea, 0xe8, 0x05, 0xf8,
  216. 0x68, 0x1a, 0x8d, 0x15, 0xc2, 0xd4, 0xe1, 0x42 },
  217. .result = { 0x2c, 0x4f, 0xe1, 0x1d, 0x49, 0x0a, 0x53, 0x86,
  218. 0x17, 0x76, 0xb1, 0x3b, 0x43, 0x54, 0xab, 0xd4,
  219. 0xcf, 0x5a, 0x97, 0x69, 0x9d, 0xb6, 0xe6, 0xc6,
  220. 0x8c, 0x16, 0x26, 0xd0, 0x76, 0x62, 0xf7, 0x58 },
  221. .valid = true
  222. },
  223. /* wycheproof - public key = 0 */
  224. {
  225. .private = { 0x20, 0x74, 0x94, 0x03, 0x8f, 0x2b, 0xb8, 0x11,
  226. 0xd4, 0x78, 0x05, 0xbc, 0xdf, 0x04, 0xa2, 0xac,
  227. 0x58, 0x5a, 0xda, 0x7f, 0x2f, 0x23, 0x38, 0x9b,
  228. 0xfd, 0x46, 0x58, 0xf9, 0xdd, 0xd4, 0xde, 0xbc },
  229. .public = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  230. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  231. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  232. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  233. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  234. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  235. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  236. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  237. .valid = false
  238. },
  239. /* wycheproof - public key = 1 */
  240. {
  241. .private = { 0x20, 0x2e, 0x89, 0x72, 0xb6, 0x1c, 0x7e, 0x61,
  242. 0x93, 0x0e, 0xb9, 0x45, 0x0b, 0x50, 0x70, 0xea,
  243. 0xe1, 0xc6, 0x70, 0x47, 0x56, 0x85, 0x54, 0x1f,
  244. 0x04, 0x76, 0x21, 0x7e, 0x48, 0x18, 0xcf, 0xab },
  245. .public = { 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  246. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  247. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  248. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  249. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  250. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  251. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  252. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  253. .valid = false
  254. },
  255. /* wycheproof - edge case on twist */
  256. {
  257. .private = { 0x38, 0xdd, 0xe9, 0xf3, 0xe7, 0xb7, 0x99, 0x04,
  258. 0x5f, 0x9a, 0xc3, 0x79, 0x3d, 0x4a, 0x92, 0x77,
  259. 0xda, 0xde, 0xad, 0xc4, 0x1b, 0xec, 0x02, 0x90,
  260. 0xf8, 0x1f, 0x74, 0x4f, 0x73, 0x77, 0x5f, 0x84 },
  261. .public = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  262. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  263. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  264. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  265. .result = { 0x9a, 0x2c, 0xfe, 0x84, 0xff, 0x9c, 0x4a, 0x97,
  266. 0x39, 0x62, 0x5c, 0xae, 0x4a, 0x3b, 0x82, 0xa9,
  267. 0x06, 0x87, 0x7a, 0x44, 0x19, 0x46, 0xf8, 0xd7,
  268. 0xb3, 0xd7, 0x95, 0xfe, 0x8f, 0x5d, 0x16, 0x39 },
  269. .valid = true
  270. },
  271. /* wycheproof - edge case on twist */
  272. {
  273. .private = { 0x98, 0x57, 0xa9, 0x14, 0xe3, 0xc2, 0x90, 0x36,
  274. 0xfd, 0x9a, 0x44, 0x2b, 0xa5, 0x26, 0xb5, 0xcd,
  275. 0xcd, 0xf2, 0x82, 0x16, 0x15, 0x3e, 0x63, 0x6c,
  276. 0x10, 0x67, 0x7a, 0xca, 0xb6, 0xbd, 0x6a, 0xa5 },
  277. .public = { 0x03, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  278. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  279. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  280. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  281. .result = { 0x4d, 0xa4, 0xe0, 0xaa, 0x07, 0x2c, 0x23, 0x2e,
  282. 0xe2, 0xf0, 0xfa, 0x4e, 0x51, 0x9a, 0xe5, 0x0b,
  283. 0x52, 0xc1, 0xed, 0xd0, 0x8a, 0x53, 0x4d, 0x4e,
  284. 0xf3, 0x46, 0xc2, 0xe1, 0x06, 0xd2, 0x1d, 0x60 },
  285. .valid = true
  286. },
  287. /* wycheproof - edge case on twist */
  288. {
  289. .private = { 0x48, 0xe2, 0x13, 0x0d, 0x72, 0x33, 0x05, 0xed,
  290. 0x05, 0xe6, 0xe5, 0x89, 0x4d, 0x39, 0x8a, 0x5e,
  291. 0x33, 0x36, 0x7a, 0x8c, 0x6a, 0xac, 0x8f, 0xcd,
  292. 0xf0, 0xa8, 0x8e, 0x4b, 0x42, 0x82, 0x0d, 0xb7 },
  293. .public = { 0xff, 0xff, 0xff, 0x03, 0x00, 0x00, 0xf8, 0xff,
  294. 0xff, 0x1f, 0x00, 0x00, 0xc0, 0xff, 0xff, 0xff,
  295. 0x00, 0x00, 0x00, 0xfe, 0xff, 0xff, 0x07, 0x00,
  296. 0x00, 0xf0, 0xff, 0xff, 0x3f, 0x00, 0x00, 0x00 },
  297. .result = { 0x9e, 0xd1, 0x0c, 0x53, 0x74, 0x7f, 0x64, 0x7f,
  298. 0x82, 0xf4, 0x51, 0x25, 0xd3, 0xde, 0x15, 0xa1,
  299. 0xe6, 0xb8, 0x24, 0x49, 0x6a, 0xb4, 0x04, 0x10,
  300. 0xff, 0xcc, 0x3c, 0xfe, 0x95, 0x76, 0x0f, 0x3b },
  301. .valid = true
  302. },
  303. /* wycheproof - edge case on twist */
  304. {
  305. .private = { 0x28, 0xf4, 0x10, 0x11, 0x69, 0x18, 0x51, 0xb3,
  306. 0xa6, 0x2b, 0x64, 0x15, 0x53, 0xb3, 0x0d, 0x0d,
  307. 0xfd, 0xdc, 0xb8, 0xff, 0xfc, 0xf5, 0x37, 0x00,
  308. 0xa7, 0xbe, 0x2f, 0x6a, 0x87, 0x2e, 0x9f, 0xb0 },
  309. .public = { 0x00, 0x00, 0x00, 0xfc, 0xff, 0xff, 0x07, 0x00,
  310. 0x00, 0xe0, 0xff, 0xff, 0x3f, 0x00, 0x00, 0x00,
  311. 0xff, 0xff, 0xff, 0x01, 0x00, 0x00, 0xf8, 0xff,
  312. 0xff, 0x0f, 0x00, 0x00, 0xc0, 0xff, 0xff, 0x7f },
  313. .result = { 0xcf, 0x72, 0xb4, 0xaa, 0x6a, 0xa1, 0xc9, 0xf8,
  314. 0x94, 0xf4, 0x16, 0x5b, 0x86, 0x10, 0x9a, 0xa4,
  315. 0x68, 0x51, 0x76, 0x48, 0xe1, 0xf0, 0xcc, 0x70,
  316. 0xe1, 0xab, 0x08, 0x46, 0x01, 0x76, 0x50, 0x6b },
  317. .valid = true
  318. },
  319. /* wycheproof - edge case on twist */
  320. {
  321. .private = { 0x18, 0xa9, 0x3b, 0x64, 0x99, 0xb9, 0xf6, 0xb3,
  322. 0x22, 0x5c, 0xa0, 0x2f, 0xef, 0x41, 0x0e, 0x0a,
  323. 0xde, 0xc2, 0x35, 0x32, 0x32, 0x1d, 0x2d, 0x8e,
  324. 0xf1, 0xa6, 0xd6, 0x02, 0xa8, 0xc6, 0x5b, 0x83 },
  325. .public = { 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff,
  326. 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff,
  327. 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff,
  328. 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0x7f },
  329. .result = { 0x5d, 0x50, 0xb6, 0x28, 0x36, 0xbb, 0x69, 0x57,
  330. 0x94, 0x10, 0x38, 0x6c, 0xf7, 0xbb, 0x81, 0x1c,
  331. 0x14, 0xbf, 0x85, 0xb1, 0xc7, 0xb1, 0x7e, 0x59,
  332. 0x24, 0xc7, 0xff, 0xea, 0x91, 0xef, 0x9e, 0x12 },
  333. .valid = true
  334. },
  335. /* wycheproof - edge case on twist */
  336. {
  337. .private = { 0xc0, 0x1d, 0x13, 0x05, 0xa1, 0x33, 0x8a, 0x1f,
  338. 0xca, 0xc2, 0xba, 0x7e, 0x2e, 0x03, 0x2b, 0x42,
  339. 0x7e, 0x0b, 0x04, 0x90, 0x31, 0x65, 0xac, 0xa9,
  340. 0x57, 0xd8, 0xd0, 0x55, 0x3d, 0x87, 0x17, 0xb0 },
  341. .public = { 0xea, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  342. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  343. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  344. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  345. .result = { 0x19, 0x23, 0x0e, 0xb1, 0x48, 0xd5, 0xd6, 0x7c,
  346. 0x3c, 0x22, 0xab, 0x1d, 0xae, 0xff, 0x80, 0xa5,
  347. 0x7e, 0xae, 0x42, 0x65, 0xce, 0x28, 0x72, 0x65,
  348. 0x7b, 0x2c, 0x80, 0x99, 0xfc, 0x69, 0x8e, 0x50 },
  349. .valid = true
  350. },
  351. /* wycheproof - edge case for public key */
  352. {
  353. .private = { 0x38, 0x6f, 0x7f, 0x16, 0xc5, 0x07, 0x31, 0xd6,
  354. 0x4f, 0x82, 0xe6, 0xa1, 0x70, 0xb1, 0x42, 0xa4,
  355. 0xe3, 0x4f, 0x31, 0xfd, 0x77, 0x68, 0xfc, 0xb8,
  356. 0x90, 0x29, 0x25, 0xe7, 0xd1, 0xe2, 0x1a, 0xbe },
  357. .public = { 0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  358. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  359. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  360. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  361. .result = { 0x0f, 0xca, 0xb5, 0xd8, 0x42, 0xa0, 0x78, 0xd7,
  362. 0xa7, 0x1f, 0xc5, 0x9b, 0x57, 0xbf, 0xb4, 0xca,
  363. 0x0b, 0xe6, 0x87, 0x3b, 0x49, 0xdc, 0xdb, 0x9f,
  364. 0x44, 0xe1, 0x4a, 0xe8, 0xfb, 0xdf, 0xa5, 0x42 },
  365. .valid = true
  366. },
  367. /* wycheproof - edge case for public key */
  368. {
  369. .private = { 0xe0, 0x23, 0xa2, 0x89, 0xbd, 0x5e, 0x90, 0xfa,
  370. 0x28, 0x04, 0xdd, 0xc0, 0x19, 0xa0, 0x5e, 0xf3,
  371. 0xe7, 0x9d, 0x43, 0x4b, 0xb6, 0xea, 0x2f, 0x52,
  372. 0x2e, 0xcb, 0x64, 0x3a, 0x75, 0x29, 0x6e, 0x95 },
  373. .public = { 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00,
  374. 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00,
  375. 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00,
  376. 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00 },
  377. .result = { 0x54, 0xce, 0x8f, 0x22, 0x75, 0xc0, 0x77, 0xe3,
  378. 0xb1, 0x30, 0x6a, 0x39, 0x39, 0xc5, 0xe0, 0x3e,
  379. 0xef, 0x6b, 0xbb, 0x88, 0x06, 0x05, 0x44, 0x75,
  380. 0x8d, 0x9f, 0xef, 0x59, 0xb0, 0xbc, 0x3e, 0x4f },
  381. .valid = true
  382. },
  383. /* wycheproof - edge case for public key */
  384. {
  385. .private = { 0x68, 0xf0, 0x10, 0xd6, 0x2e, 0xe8, 0xd9, 0x26,
  386. 0x05, 0x3a, 0x36, 0x1c, 0x3a, 0x75, 0xc6, 0xea,
  387. 0x4e, 0xbd, 0xc8, 0x60, 0x6a, 0xb2, 0x85, 0x00,
  388. 0x3a, 0x6f, 0x8f, 0x40, 0x76, 0xb0, 0x1e, 0x83 },
  389. .public = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  390. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  391. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  392. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x03 },
  393. .result = { 0xf1, 0x36, 0x77, 0x5c, 0x5b, 0xeb, 0x0a, 0xf8,
  394. 0x11, 0x0a, 0xf1, 0x0b, 0x20, 0x37, 0x23, 0x32,
  395. 0x04, 0x3c, 0xab, 0x75, 0x24, 0x19, 0x67, 0x87,
  396. 0x75, 0xa2, 0x23, 0xdf, 0x57, 0xc9, 0xd3, 0x0d },
  397. .valid = true
  398. },
  399. /* wycheproof - edge case for public key */
  400. {
  401. .private = { 0x58, 0xeb, 0xcb, 0x35, 0xb0, 0xf8, 0x84, 0x5c,
  402. 0xaf, 0x1e, 0xc6, 0x30, 0xf9, 0x65, 0x76, 0xb6,
  403. 0x2c, 0x4b, 0x7b, 0x6c, 0x36, 0xb2, 0x9d, 0xeb,
  404. 0x2c, 0xb0, 0x08, 0x46, 0x51, 0x75, 0x5c, 0x96 },
  405. .public = { 0xff, 0xff, 0xff, 0xfb, 0xff, 0xff, 0xfb, 0xff,
  406. 0xff, 0xdf, 0xff, 0xff, 0xdf, 0xff, 0xff, 0xff,
  407. 0xfe, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xf7, 0xff,
  408. 0xff, 0xf7, 0xff, 0xff, 0xbf, 0xff, 0xff, 0x3f },
  409. .result = { 0xbf, 0x9a, 0xff, 0xd0, 0x6b, 0x84, 0x40, 0x85,
  410. 0x58, 0x64, 0x60, 0x96, 0x2e, 0xf2, 0x14, 0x6f,
  411. 0xf3, 0xd4, 0x53, 0x3d, 0x94, 0x44, 0xaa, 0xb0,
  412. 0x06, 0xeb, 0x88, 0xcc, 0x30, 0x54, 0x40, 0x7d },
  413. .valid = true
  414. },
  415. /* wycheproof - edge case for public key */
  416. {
  417. .private = { 0x18, 0x8c, 0x4b, 0xc5, 0xb9, 0xc4, 0x4b, 0x38,
  418. 0xbb, 0x65, 0x8b, 0x9b, 0x2a, 0xe8, 0x2d, 0x5b,
  419. 0x01, 0x01, 0x5e, 0x09, 0x31, 0x84, 0xb1, 0x7c,
  420. 0xb7, 0x86, 0x35, 0x03, 0xa7, 0x83, 0xe1, 0xbb },
  421. .public = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  422. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  423. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  424. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x3f },
  425. .result = { 0xd4, 0x80, 0xde, 0x04, 0xf6, 0x99, 0xcb, 0x3b,
  426. 0xe0, 0x68, 0x4a, 0x9c, 0xc2, 0xe3, 0x12, 0x81,
  427. 0xea, 0x0b, 0xc5, 0xa9, 0xdc, 0xc1, 0x57, 0xd3,
  428. 0xd2, 0x01, 0x58, 0xd4, 0x6c, 0xa5, 0x24, 0x6d },
  429. .valid = true
  430. },
  431. /* wycheproof - edge case for public key */
  432. {
  433. .private = { 0xe0, 0x6c, 0x11, 0xbb, 0x2e, 0x13, 0xce, 0x3d,
  434. 0xc7, 0x67, 0x3f, 0x67, 0xf5, 0x48, 0x22, 0x42,
  435. 0x90, 0x94, 0x23, 0xa9, 0xae, 0x95, 0xee, 0x98,
  436. 0x6a, 0x98, 0x8d, 0x98, 0xfa, 0xee, 0x23, 0xa2 },
  437. .public = { 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0x7f,
  438. 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0x7f,
  439. 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0x7f,
  440. 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0x7f },
  441. .result = { 0x4c, 0x44, 0x01, 0xcc, 0xe6, 0xb5, 0x1e, 0x4c,
  442. 0xb1, 0x8f, 0x27, 0x90, 0x24, 0x6c, 0x9b, 0xf9,
  443. 0x14, 0xdb, 0x66, 0x77, 0x50, 0xa1, 0xcb, 0x89,
  444. 0x06, 0x90, 0x92, 0xaf, 0x07, 0x29, 0x22, 0x76 },
  445. .valid = true
  446. },
  447. /* wycheproof - edge case for public key */
  448. {
  449. .private = { 0xc0, 0x65, 0x8c, 0x46, 0xdd, 0xe1, 0x81, 0x29,
  450. 0x29, 0x38, 0x77, 0x53, 0x5b, 0x11, 0x62, 0xb6,
  451. 0xf9, 0xf5, 0x41, 0x4a, 0x23, 0xcf, 0x4d, 0x2c,
  452. 0xbc, 0x14, 0x0a, 0x4d, 0x99, 0xda, 0x2b, 0x8f },
  453. .public = { 0xeb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  454. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  455. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  456. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  457. .result = { 0x57, 0x8b, 0xa8, 0xcc, 0x2d, 0xbd, 0xc5, 0x75,
  458. 0xaf, 0xcf, 0x9d, 0xf2, 0xb3, 0xee, 0x61, 0x89,
  459. 0xf5, 0x33, 0x7d, 0x68, 0x54, 0xc7, 0x9b, 0x4c,
  460. 0xe1, 0x65, 0xea, 0x12, 0x29, 0x3b, 0x3a, 0x0f },
  461. .valid = true
  462. },
  463. /* wycheproof - public key with low order */
  464. {
  465. .private = { 0x10, 0x25, 0x5c, 0x92, 0x30, 0xa9, 0x7a, 0x30,
  466. 0xa4, 0x58, 0xca, 0x28, 0x4a, 0x62, 0x96, 0x69,
  467. 0x29, 0x3a, 0x31, 0x89, 0x0c, 0xda, 0x9d, 0x14,
  468. 0x7f, 0xeb, 0xc7, 0xd1, 0xe2, 0x2d, 0x6b, 0xb1 },
  469. .public = { 0xe0, 0xeb, 0x7a, 0x7c, 0x3b, 0x41, 0xb8, 0xae,
  470. 0x16, 0x56, 0xe3, 0xfa, 0xf1, 0x9f, 0xc4, 0x6a,
  471. 0xda, 0x09, 0x8d, 0xeb, 0x9c, 0x32, 0xb1, 0xfd,
  472. 0x86, 0x62, 0x05, 0x16, 0x5f, 0x49, 0xb8, 0x00 },
  473. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  474. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  475. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  476. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  477. .valid = false
  478. },
  479. /* wycheproof - public key with low order */
  480. {
  481. .private = { 0x78, 0xf1, 0xe8, 0xed, 0xf1, 0x44, 0x81, 0xb3,
  482. 0x89, 0x44, 0x8d, 0xac, 0x8f, 0x59, 0xc7, 0x0b,
  483. 0x03, 0x8e, 0x7c, 0xf9, 0x2e, 0xf2, 0xc7, 0xef,
  484. 0xf5, 0x7a, 0x72, 0x46, 0x6e, 0x11, 0x52, 0x96 },
  485. .public = { 0x5f, 0x9c, 0x95, 0xbc, 0xa3, 0x50, 0x8c, 0x24,
  486. 0xb1, 0xd0, 0xb1, 0x55, 0x9c, 0x83, 0xef, 0x5b,
  487. 0x04, 0x44, 0x5c, 0xc4, 0x58, 0x1c, 0x8e, 0x86,
  488. 0xd8, 0x22, 0x4e, 0xdd, 0xd0, 0x9f, 0x11, 0x57 },
  489. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  490. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  491. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  492. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  493. .valid = false
  494. },
  495. /* wycheproof - public key with low order */
  496. {
  497. .private = { 0xa0, 0xa0, 0x5a, 0x3e, 0x8f, 0x9f, 0x44, 0x20,
  498. 0x4d, 0x5f, 0x80, 0x59, 0xa9, 0x4a, 0xc7, 0xdf,
  499. 0xc3, 0x9a, 0x49, 0xac, 0x01, 0x6d, 0xd7, 0x43,
  500. 0xdb, 0xfa, 0x43, 0xc5, 0xd6, 0x71, 0xfd, 0x88 },
  501. .public = { 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  502. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  503. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  504. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  505. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  506. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  507. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  508. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  509. .valid = false
  510. },
  511. /* wycheproof - public key with low order */
  512. {
  513. .private = { 0xd0, 0xdb, 0xb3, 0xed, 0x19, 0x06, 0x66, 0x3f,
  514. 0x15, 0x42, 0x0a, 0xf3, 0x1f, 0x4e, 0xaf, 0x65,
  515. 0x09, 0xd9, 0xa9, 0x94, 0x97, 0x23, 0x50, 0x06,
  516. 0x05, 0xad, 0x7c, 0x1c, 0x6e, 0x74, 0x50, 0xa9 },
  517. .public = { 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  518. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  519. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  520. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  521. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  522. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  523. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  524. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  525. .valid = false
  526. },
  527. /* wycheproof - public key with low order */
  528. {
  529. .private = { 0xc0, 0xb1, 0xd0, 0xeb, 0x22, 0xb2, 0x44, 0xfe,
  530. 0x32, 0x91, 0x14, 0x00, 0x72, 0xcd, 0xd9, 0xd9,
  531. 0x89, 0xb5, 0xf0, 0xec, 0xd9, 0x6c, 0x10, 0x0f,
  532. 0xeb, 0x5b, 0xca, 0x24, 0x1c, 0x1d, 0x9f, 0x8f },
  533. .public = { 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  534. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  535. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  536. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  537. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  538. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  539. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  540. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  541. .valid = false
  542. },
  543. /* wycheproof - public key with low order */
  544. {
  545. .private = { 0x48, 0x0b, 0xf4, 0x5f, 0x59, 0x49, 0x42, 0xa8,
  546. 0xbc, 0x0f, 0x33, 0x53, 0xc6, 0xe8, 0xb8, 0x85,
  547. 0x3d, 0x77, 0xf3, 0x51, 0xf1, 0xc2, 0xca, 0x6c,
  548. 0x2d, 0x1a, 0xbf, 0x8a, 0x00, 0xb4, 0x22, 0x9c },
  549. .public = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  550. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  551. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  552. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80 },
  553. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  554. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  555. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  556. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  557. .valid = false
  558. },
  559. /* wycheproof - public key with low order */
  560. {
  561. .private = { 0x30, 0xf9, 0x93, 0xfc, 0xf8, 0x51, 0x4f, 0xc8,
  562. 0x9b, 0xd8, 0xdb, 0x14, 0xcd, 0x43, 0xba, 0x0d,
  563. 0x4b, 0x25, 0x30, 0xe7, 0x3c, 0x42, 0x76, 0xa0,
  564. 0x5e, 0x1b, 0x14, 0x5d, 0x42, 0x0c, 0xed, 0xb4 },
  565. .public = { 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  566. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  567. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  568. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80 },
  569. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  570. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  571. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  572. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  573. .valid = false
  574. },
  575. /* wycheproof - public key with low order */
  576. {
  577. .private = { 0xc0, 0x49, 0x74, 0xb7, 0x58, 0x38, 0x0e, 0x2a,
  578. 0x5b, 0x5d, 0xf6, 0xeb, 0x09, 0xbb, 0x2f, 0x6b,
  579. 0x34, 0x34, 0xf9, 0x82, 0x72, 0x2a, 0x8e, 0x67,
  580. 0x6d, 0x3d, 0xa2, 0x51, 0xd1, 0xb3, 0xde, 0x83 },
  581. .public = { 0xe0, 0xeb, 0x7a, 0x7c, 0x3b, 0x41, 0xb8, 0xae,
  582. 0x16, 0x56, 0xe3, 0xfa, 0xf1, 0x9f, 0xc4, 0x6a,
  583. 0xda, 0x09, 0x8d, 0xeb, 0x9c, 0x32, 0xb1, 0xfd,
  584. 0x86, 0x62, 0x05, 0x16, 0x5f, 0x49, 0xb8, 0x80 },
  585. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  586. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  587. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  588. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  589. .valid = false
  590. },
  591. /* wycheproof - public key with low order */
  592. {
  593. .private = { 0x50, 0x2a, 0x31, 0x37, 0x3d, 0xb3, 0x24, 0x46,
  594. 0x84, 0x2f, 0xe5, 0xad, 0xd3, 0xe0, 0x24, 0x02,
  595. 0x2e, 0xa5, 0x4f, 0x27, 0x41, 0x82, 0xaf, 0xc3,
  596. 0xd9, 0xf1, 0xbb, 0x3d, 0x39, 0x53, 0x4e, 0xb5 },
  597. .public = { 0x5f, 0x9c, 0x95, 0xbc, 0xa3, 0x50, 0x8c, 0x24,
  598. 0xb1, 0xd0, 0xb1, 0x55, 0x9c, 0x83, 0xef, 0x5b,
  599. 0x04, 0x44, 0x5c, 0xc4, 0x58, 0x1c, 0x8e, 0x86,
  600. 0xd8, 0x22, 0x4e, 0xdd, 0xd0, 0x9f, 0x11, 0xd7 },
  601. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  602. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  603. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  604. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  605. .valid = false
  606. },
  607. /* wycheproof - public key with low order */
  608. {
  609. .private = { 0x90, 0xfa, 0x64, 0x17, 0xb0, 0xe3, 0x70, 0x30,
  610. 0xfd, 0x6e, 0x43, 0xef, 0xf2, 0xab, 0xae, 0xf1,
  611. 0x4c, 0x67, 0x93, 0x11, 0x7a, 0x03, 0x9c, 0xf6,
  612. 0x21, 0x31, 0x8b, 0xa9, 0x0f, 0x4e, 0x98, 0xbe },
  613. .public = { 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  614. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  615. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  616. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  617. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  618. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  619. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  620. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  621. .valid = false
  622. },
  623. /* wycheproof - public key with low order */
  624. {
  625. .private = { 0x78, 0xad, 0x3f, 0x26, 0x02, 0x7f, 0x1c, 0x9f,
  626. 0xdd, 0x97, 0x5a, 0x16, 0x13, 0xb9, 0x47, 0x77,
  627. 0x9b, 0xad, 0x2c, 0xf2, 0xb7, 0x41, 0xad, 0xe0,
  628. 0x18, 0x40, 0x88, 0x5a, 0x30, 0xbb, 0x97, 0x9c },
  629. .public = { 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  630. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  631. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  632. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  633. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  634. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  635. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  636. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  637. .valid = false
  638. },
  639. /* wycheproof - public key with low order */
  640. {
  641. .private = { 0x98, 0xe2, 0x3d, 0xe7, 0xb1, 0xe0, 0x92, 0x6e,
  642. 0xd9, 0xc8, 0x7e, 0x7b, 0x14, 0xba, 0xf5, 0x5f,
  643. 0x49, 0x7a, 0x1d, 0x70, 0x96, 0xf9, 0x39, 0x77,
  644. 0x68, 0x0e, 0x44, 0xdc, 0x1c, 0x7b, 0x7b, 0x8b },
  645. .public = { 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  646. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  647. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  648. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  649. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  650. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  651. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  652. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  653. .valid = false
  654. },
  655. /* wycheproof - public key >= p */
  656. {
  657. .private = { 0xf0, 0x1e, 0x48, 0xda, 0xfa, 0xc9, 0xd7, 0xbc,
  658. 0xf5, 0x89, 0xcb, 0xc3, 0x82, 0xc8, 0x78, 0xd1,
  659. 0x8b, 0xda, 0x35, 0x50, 0x58, 0x9f, 0xfb, 0x5d,
  660. 0x50, 0xb5, 0x23, 0xbe, 0xbe, 0x32, 0x9d, 0xae },
  661. .public = { 0xef, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  662. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  663. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  664. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  665. .result = { 0xbd, 0x36, 0xa0, 0x79, 0x0e, 0xb8, 0x83, 0x09,
  666. 0x8c, 0x98, 0x8b, 0x21, 0x78, 0x67, 0x73, 0xde,
  667. 0x0b, 0x3a, 0x4d, 0xf1, 0x62, 0x28, 0x2c, 0xf1,
  668. 0x10, 0xde, 0x18, 0xdd, 0x48, 0x4c, 0xe7, 0x4b },
  669. .valid = true
  670. },
  671. /* wycheproof - public key >= p */
  672. {
  673. .private = { 0x28, 0x87, 0x96, 0xbc, 0x5a, 0xff, 0x4b, 0x81,
  674. 0xa3, 0x75, 0x01, 0x75, 0x7b, 0xc0, 0x75, 0x3a,
  675. 0x3c, 0x21, 0x96, 0x47, 0x90, 0xd3, 0x86, 0x99,
  676. 0x30, 0x8d, 0xeb, 0xc1, 0x7a, 0x6e, 0xaf, 0x8d },
  677. .public = { 0xf0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  678. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  679. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  680. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  681. .result = { 0xb4, 0xe0, 0xdd, 0x76, 0xda, 0x7b, 0x07, 0x17,
  682. 0x28, 0xb6, 0x1f, 0x85, 0x67, 0x71, 0xaa, 0x35,
  683. 0x6e, 0x57, 0xed, 0xa7, 0x8a, 0x5b, 0x16, 0x55,
  684. 0xcc, 0x38, 0x20, 0xfb, 0x5f, 0x85, 0x4c, 0x5c },
  685. .valid = true
  686. },
  687. /* wycheproof - public key >= p */
  688. {
  689. .private = { 0x98, 0xdf, 0x84, 0x5f, 0x66, 0x51, 0xbf, 0x11,
  690. 0x38, 0x22, 0x1f, 0x11, 0x90, 0x41, 0xf7, 0x2b,
  691. 0x6d, 0xbc, 0x3c, 0x4a, 0xce, 0x71, 0x43, 0xd9,
  692. 0x9f, 0xd5, 0x5a, 0xd8, 0x67, 0x48, 0x0d, 0xa8 },
  693. .public = { 0xf1, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  694. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  695. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  696. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  697. .result = { 0x6f, 0xdf, 0x6c, 0x37, 0x61, 0x1d, 0xbd, 0x53,
  698. 0x04, 0xdc, 0x0f, 0x2e, 0xb7, 0xc9, 0x51, 0x7e,
  699. 0xb3, 0xc5, 0x0e, 0x12, 0xfd, 0x05, 0x0a, 0xc6,
  700. 0xde, 0xc2, 0x70, 0x71, 0xd4, 0xbf, 0xc0, 0x34 },
  701. .valid = true
  702. },
  703. /* wycheproof - public key >= p */
  704. {
  705. .private = { 0xf0, 0x94, 0x98, 0xe4, 0x6f, 0x02, 0xf8, 0x78,
  706. 0x82, 0x9e, 0x78, 0xb8, 0x03, 0xd3, 0x16, 0xa2,
  707. 0xed, 0x69, 0x5d, 0x04, 0x98, 0xa0, 0x8a, 0xbd,
  708. 0xf8, 0x27, 0x69, 0x30, 0xe2, 0x4e, 0xdc, 0xb0 },
  709. .public = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  710. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  711. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  712. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  713. .result = { 0x4c, 0x8f, 0xc4, 0xb1, 0xc6, 0xab, 0x88, 0xfb,
  714. 0x21, 0xf1, 0x8f, 0x6d, 0x4c, 0x81, 0x02, 0x40,
  715. 0xd4, 0xe9, 0x46, 0x51, 0xba, 0x44, 0xf7, 0xa2,
  716. 0xc8, 0x63, 0xce, 0xc7, 0xdc, 0x56, 0x60, 0x2d },
  717. .valid = true
  718. },
  719. /* wycheproof - public key >= p */
  720. {
  721. .private = { 0x18, 0x13, 0xc1, 0x0a, 0x5c, 0x7f, 0x21, 0xf9,
  722. 0x6e, 0x17, 0xf2, 0x88, 0xc0, 0xcc, 0x37, 0x60,
  723. 0x7c, 0x04, 0xc5, 0xf5, 0xae, 0xa2, 0xdb, 0x13,
  724. 0x4f, 0x9e, 0x2f, 0xfc, 0x66, 0xbd, 0x9d, 0xb8 },
  725. .public = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  726. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  727. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  728. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80 },
  729. .result = { 0x1c, 0xd0, 0xb2, 0x82, 0x67, 0xdc, 0x54, 0x1c,
  730. 0x64, 0x2d, 0x6d, 0x7d, 0xca, 0x44, 0xa8, 0xb3,
  731. 0x8a, 0x63, 0x73, 0x6e, 0xef, 0x5c, 0x4e, 0x65,
  732. 0x01, 0xff, 0xbb, 0xb1, 0x78, 0x0c, 0x03, 0x3c },
  733. .valid = true
  734. },
  735. /* wycheproof - public key >= p */
  736. {
  737. .private = { 0x78, 0x57, 0xfb, 0x80, 0x86, 0x53, 0x64, 0x5a,
  738. 0x0b, 0xeb, 0x13, 0x8a, 0x64, 0xf5, 0xf4, 0xd7,
  739. 0x33, 0xa4, 0x5e, 0xa8, 0x4c, 0x3c, 0xda, 0x11,
  740. 0xa9, 0xc0, 0x6f, 0x7e, 0x71, 0x39, 0x14, 0x9e },
  741. .public = { 0x03, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  742. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  743. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  744. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80 },
  745. .result = { 0x87, 0x55, 0xbe, 0x01, 0xc6, 0x0a, 0x7e, 0x82,
  746. 0x5c, 0xff, 0x3e, 0x0e, 0x78, 0xcb, 0x3a, 0xa4,
  747. 0x33, 0x38, 0x61, 0x51, 0x6a, 0xa5, 0x9b, 0x1c,
  748. 0x51, 0xa8, 0xb2, 0xa5, 0x43, 0xdf, 0xa8, 0x22 },
  749. .valid = true
  750. },
  751. /* wycheproof - public key >= p */
  752. {
  753. .private = { 0xe0, 0x3a, 0xa8, 0x42, 0xe2, 0xab, 0xc5, 0x6e,
  754. 0x81, 0xe8, 0x7b, 0x8b, 0x9f, 0x41, 0x7b, 0x2a,
  755. 0x1e, 0x59, 0x13, 0xc7, 0x23, 0xee, 0xd2, 0x8d,
  756. 0x75, 0x2f, 0x8d, 0x47, 0xa5, 0x9f, 0x49, 0x8f },
  757. .public = { 0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  758. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  759. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  760. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80 },
  761. .result = { 0x54, 0xc9, 0xa1, 0xed, 0x95, 0xe5, 0x46, 0xd2,
  762. 0x78, 0x22, 0xa3, 0x60, 0x93, 0x1d, 0xda, 0x60,
  763. 0xa1, 0xdf, 0x04, 0x9d, 0xa6, 0xf9, 0x04, 0x25,
  764. 0x3c, 0x06, 0x12, 0xbb, 0xdc, 0x08, 0x74, 0x76 },
  765. .valid = true
  766. },
  767. /* wycheproof - public key >= p */
  768. {
  769. .private = { 0xf8, 0xf7, 0x07, 0xb7, 0x99, 0x9b, 0x18, 0xcb,
  770. 0x0d, 0x6b, 0x96, 0x12, 0x4f, 0x20, 0x45, 0x97,
  771. 0x2c, 0xa2, 0x74, 0xbf, 0xc1, 0x54, 0xad, 0x0c,
  772. 0x87, 0x03, 0x8c, 0x24, 0xc6, 0xd0, 0xd4, 0xb2 },
  773. .public = { 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  774. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  775. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  776. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  777. .result = { 0xcc, 0x1f, 0x40, 0xd7, 0x43, 0xcd, 0xc2, 0x23,
  778. 0x0e, 0x10, 0x43, 0xda, 0xba, 0x8b, 0x75, 0xe8,
  779. 0x10, 0xf1, 0xfb, 0xab, 0x7f, 0x25, 0x52, 0x69,
  780. 0xbd, 0x9e, 0xbb, 0x29, 0xe6, 0xbf, 0x49, 0x4f },
  781. .valid = true
  782. },
  783. /* wycheproof - public key >= p */
  784. {
  785. .private = { 0xa0, 0x34, 0xf6, 0x84, 0xfa, 0x63, 0x1e, 0x1a,
  786. 0x34, 0x81, 0x18, 0xc1, 0xce, 0x4c, 0x98, 0x23,
  787. 0x1f, 0x2d, 0x9e, 0xec, 0x9b, 0xa5, 0x36, 0x5b,
  788. 0x4a, 0x05, 0xd6, 0x9a, 0x78, 0x5b, 0x07, 0x96 },
  789. .public = { 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  790. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  791. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  792. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  793. .result = { 0x54, 0x99, 0x8e, 0xe4, 0x3a, 0x5b, 0x00, 0x7b,
  794. 0xf4, 0x99, 0xf0, 0x78, 0xe7, 0x36, 0x52, 0x44,
  795. 0x00, 0xa8, 0xb5, 0xc7, 0xe9, 0xb9, 0xb4, 0x37,
  796. 0x71, 0x74, 0x8c, 0x7c, 0xdf, 0x88, 0x04, 0x12 },
  797. .valid = true
  798. },
  799. /* wycheproof - public key >= p */
  800. {
  801. .private = { 0x30, 0xb6, 0xc6, 0xa0, 0xf2, 0xff, 0xa6, 0x80,
  802. 0x76, 0x8f, 0x99, 0x2b, 0xa8, 0x9e, 0x15, 0x2d,
  803. 0x5b, 0xc9, 0x89, 0x3d, 0x38, 0xc9, 0x11, 0x9b,
  804. 0xe4, 0xf7, 0x67, 0xbf, 0xab, 0x6e, 0x0c, 0xa5 },
  805. .public = { 0xdc, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  806. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  807. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  808. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  809. .result = { 0xea, 0xd9, 0xb3, 0x8e, 0xfd, 0xd7, 0x23, 0x63,
  810. 0x79, 0x34, 0xe5, 0x5a, 0xb7, 0x17, 0xa7, 0xae,
  811. 0x09, 0xeb, 0x86, 0xa2, 0x1d, 0xc3, 0x6a, 0x3f,
  812. 0xee, 0xb8, 0x8b, 0x75, 0x9e, 0x39, 0x1e, 0x09 },
  813. .valid = true
  814. },
  815. /* wycheproof - public key >= p */
  816. {
  817. .private = { 0x90, 0x1b, 0x9d, 0xcf, 0x88, 0x1e, 0x01, 0xe0,
  818. 0x27, 0x57, 0x50, 0x35, 0xd4, 0x0b, 0x43, 0xbd,
  819. 0xc1, 0xc5, 0x24, 0x2e, 0x03, 0x08, 0x47, 0x49,
  820. 0x5b, 0x0c, 0x72, 0x86, 0x46, 0x9b, 0x65, 0x91 },
  821. .public = { 0xea, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  822. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  823. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  824. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  825. .result = { 0x60, 0x2f, 0xf4, 0x07, 0x89, 0xb5, 0x4b, 0x41,
  826. 0x80, 0x59, 0x15, 0xfe, 0x2a, 0x62, 0x21, 0xf0,
  827. 0x7a, 0x50, 0xff, 0xc2, 0xc3, 0xfc, 0x94, 0xcf,
  828. 0x61, 0xf1, 0x3d, 0x79, 0x04, 0xe8, 0x8e, 0x0e },
  829. .valid = true
  830. },
  831. /* wycheproof - public key >= p */
  832. {
  833. .private = { 0x80, 0x46, 0x67, 0x7c, 0x28, 0xfd, 0x82, 0xc9,
  834. 0xa1, 0xbd, 0xb7, 0x1a, 0x1a, 0x1a, 0x34, 0xfa,
  835. 0xba, 0x12, 0x25, 0xe2, 0x50, 0x7f, 0xe3, 0xf5,
  836. 0x4d, 0x10, 0xbd, 0x5b, 0x0d, 0x86, 0x5f, 0x8e },
  837. .public = { 0xeb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  838. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  839. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  840. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  841. .result = { 0xe0, 0x0a, 0xe8, 0xb1, 0x43, 0x47, 0x12, 0x47,
  842. 0xba, 0x24, 0xf1, 0x2c, 0x88, 0x55, 0x36, 0xc3,
  843. 0xcb, 0x98, 0x1b, 0x58, 0xe1, 0xe5, 0x6b, 0x2b,
  844. 0xaf, 0x35, 0xc1, 0x2a, 0xe1, 0xf7, 0x9c, 0x26 },
  845. .valid = true
  846. },
  847. /* wycheproof - public key >= p */
  848. {
  849. .private = { 0x60, 0x2f, 0x7e, 0x2f, 0x68, 0xa8, 0x46, 0xb8,
  850. 0x2c, 0xc2, 0x69, 0xb1, 0xd4, 0x8e, 0x93, 0x98,
  851. 0x86, 0xae, 0x54, 0xfd, 0x63, 0x6c, 0x1f, 0xe0,
  852. 0x74, 0xd7, 0x10, 0x12, 0x7d, 0x47, 0x24, 0x91 },
  853. .public = { 0xef, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  854. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  855. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  856. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  857. .result = { 0x98, 0xcb, 0x9b, 0x50, 0xdd, 0x3f, 0xc2, 0xb0,
  858. 0xd4, 0xf2, 0xd2, 0xbf, 0x7c, 0x5c, 0xfd, 0xd1,
  859. 0x0c, 0x8f, 0xcd, 0x31, 0xfc, 0x40, 0xaf, 0x1a,
  860. 0xd4, 0x4f, 0x47, 0xc1, 0x31, 0x37, 0x63, 0x62 },
  861. .valid = true
  862. },
  863. /* wycheproof - public key >= p */
  864. {
  865. .private = { 0x60, 0x88, 0x7b, 0x3d, 0xc7, 0x24, 0x43, 0x02,
  866. 0x6e, 0xbe, 0xdb, 0xbb, 0xb7, 0x06, 0x65, 0xf4,
  867. 0x2b, 0x87, 0xad, 0xd1, 0x44, 0x0e, 0x77, 0x68,
  868. 0xfb, 0xd7, 0xe8, 0xe2, 0xce, 0x5f, 0x63, 0x9d },
  869. .public = { 0xf0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  870. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  871. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  872. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  873. .result = { 0x38, 0xd6, 0x30, 0x4c, 0x4a, 0x7e, 0x6d, 0x9f,
  874. 0x79, 0x59, 0x33, 0x4f, 0xb5, 0x24, 0x5b, 0xd2,
  875. 0xc7, 0x54, 0x52, 0x5d, 0x4c, 0x91, 0xdb, 0x95,
  876. 0x02, 0x06, 0x92, 0x62, 0x34, 0xc1, 0xf6, 0x33 },
  877. .valid = true
  878. },
  879. /* wycheproof - public key >= p */
  880. {
  881. .private = { 0x78, 0xd3, 0x1d, 0xfa, 0x85, 0x44, 0x97, 0xd7,
  882. 0x2d, 0x8d, 0xef, 0x8a, 0x1b, 0x7f, 0xb0, 0x06,
  883. 0xce, 0xc2, 0xd8, 0xc4, 0x92, 0x46, 0x47, 0xc9,
  884. 0x38, 0x14, 0xae, 0x56, 0xfa, 0xed, 0xa4, 0x95 },
  885. .public = { 0xf1, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  886. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  887. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  888. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  889. .result = { 0x78, 0x6c, 0xd5, 0x49, 0x96, 0xf0, 0x14, 0xa5,
  890. 0xa0, 0x31, 0xec, 0x14, 0xdb, 0x81, 0x2e, 0xd0,
  891. 0x83, 0x55, 0x06, 0x1f, 0xdb, 0x5d, 0xe6, 0x80,
  892. 0xa8, 0x00, 0xac, 0x52, 0x1f, 0x31, 0x8e, 0x23 },
  893. .valid = true
  894. },
  895. /* wycheproof - public key >= p */
  896. {
  897. .private = { 0xc0, 0x4c, 0x5b, 0xae, 0xfa, 0x83, 0x02, 0xdd,
  898. 0xde, 0xd6, 0xa4, 0xbb, 0x95, 0x77, 0x61, 0xb4,
  899. 0xeb, 0x97, 0xae, 0xfa, 0x4f, 0xc3, 0xb8, 0x04,
  900. 0x30, 0x85, 0xf9, 0x6a, 0x56, 0x59, 0xb3, 0xa5 },
  901. .public = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  902. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  903. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  904. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
  905. .result = { 0x29, 0xae, 0x8b, 0xc7, 0x3e, 0x9b, 0x10, 0xa0,
  906. 0x8b, 0x4f, 0x68, 0x1c, 0x43, 0xc3, 0xe0, 0xac,
  907. 0x1a, 0x17, 0x1d, 0x31, 0xb3, 0x8f, 0x1a, 0x48,
  908. 0xef, 0xba, 0x29, 0xae, 0x63, 0x9e, 0xa1, 0x34 },
  909. .valid = true
  910. },
  911. /* wycheproof - RFC 7748 */
  912. {
  913. .private = { 0xa0, 0x46, 0xe3, 0x6b, 0xf0, 0x52, 0x7c, 0x9d,
  914. 0x3b, 0x16, 0x15, 0x4b, 0x82, 0x46, 0x5e, 0xdd,
  915. 0x62, 0x14, 0x4c, 0x0a, 0xc1, 0xfc, 0x5a, 0x18,
  916. 0x50, 0x6a, 0x22, 0x44, 0xba, 0x44, 0x9a, 0x44 },
  917. .public = { 0xe6, 0xdb, 0x68, 0x67, 0x58, 0x30, 0x30, 0xdb,
  918. 0x35, 0x94, 0xc1, 0xa4, 0x24, 0xb1, 0x5f, 0x7c,
  919. 0x72, 0x66, 0x24, 0xec, 0x26, 0xb3, 0x35, 0x3b,
  920. 0x10, 0xa9, 0x03, 0xa6, 0xd0, 0xab, 0x1c, 0x4c },
  921. .result = { 0xc3, 0xda, 0x55, 0x37, 0x9d, 0xe9, 0xc6, 0x90,
  922. 0x8e, 0x94, 0xea, 0x4d, 0xf2, 0x8d, 0x08, 0x4f,
  923. 0x32, 0xec, 0xcf, 0x03, 0x49, 0x1c, 0x71, 0xf7,
  924. 0x54, 0xb4, 0x07, 0x55, 0x77, 0xa2, 0x85, 0x52 },
  925. .valid = true
  926. },
  927. /* wycheproof - RFC 7748 */
  928. {
  929. .private = { 0x48, 0x66, 0xe9, 0xd4, 0xd1, 0xb4, 0x67, 0x3c,
  930. 0x5a, 0xd2, 0x26, 0x91, 0x95, 0x7d, 0x6a, 0xf5,
  931. 0xc1, 0x1b, 0x64, 0x21, 0xe0, 0xea, 0x01, 0xd4,
  932. 0x2c, 0xa4, 0x16, 0x9e, 0x79, 0x18, 0xba, 0x4d },
  933. .public = { 0xe5, 0x21, 0x0f, 0x12, 0x78, 0x68, 0x11, 0xd3,
  934. 0xf4, 0xb7, 0x95, 0x9d, 0x05, 0x38, 0xae, 0x2c,
  935. 0x31, 0xdb, 0xe7, 0x10, 0x6f, 0xc0, 0x3c, 0x3e,
  936. 0xfc, 0x4c, 0xd5, 0x49, 0xc7, 0x15, 0xa4, 0x13 },
  937. .result = { 0x95, 0xcb, 0xde, 0x94, 0x76, 0xe8, 0x90, 0x7d,
  938. 0x7a, 0xad, 0xe4, 0x5c, 0xb4, 0xb8, 0x73, 0xf8,
  939. 0x8b, 0x59, 0x5a, 0x68, 0x79, 0x9f, 0xa1, 0x52,
  940. 0xe6, 0xf8, 0xf7, 0x64, 0x7a, 0xac, 0x79, 0x57 },
  941. .valid = true
  942. },
  943. /* wycheproof - edge case for shared secret */
  944. {
  945. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  946. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  947. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  948. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  949. .public = { 0x0a, 0xb4, 0xe7, 0x63, 0x80, 0xd8, 0x4d, 0xde,
  950. 0x4f, 0x68, 0x33, 0xc5, 0x8f, 0x2a, 0x9f, 0xb8,
  951. 0xf8, 0x3b, 0xb0, 0x16, 0x9b, 0x17, 0x2b, 0xe4,
  952. 0xb6, 0xe0, 0x59, 0x28, 0x87, 0x74, 0x1a, 0x36 },
  953. .result = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  954. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  955. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  956. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  957. .valid = true
  958. },
  959. /* wycheproof - edge case for shared secret */
  960. {
  961. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  962. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  963. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  964. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  965. .public = { 0x89, 0xe1, 0x0d, 0x57, 0x01, 0xb4, 0x33, 0x7d,
  966. 0x2d, 0x03, 0x21, 0x81, 0x53, 0x8b, 0x10, 0x64,
  967. 0xbd, 0x40, 0x84, 0x40, 0x1c, 0xec, 0xa1, 0xfd,
  968. 0x12, 0x66, 0x3a, 0x19, 0x59, 0x38, 0x80, 0x00 },
  969. .result = { 0x09, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  970. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  971. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  972. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  973. .valid = true
  974. },
  975. /* wycheproof - edge case for shared secret */
  976. {
  977. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  978. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  979. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  980. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  981. .public = { 0x2b, 0x55, 0xd3, 0xaa, 0x4a, 0x8f, 0x80, 0xc8,
  982. 0xc0, 0xb2, 0xae, 0x5f, 0x93, 0x3e, 0x85, 0xaf,
  983. 0x49, 0xbe, 0xac, 0x36, 0xc2, 0xfa, 0x73, 0x94,
  984. 0xba, 0xb7, 0x6c, 0x89, 0x33, 0xf8, 0xf8, 0x1d },
  985. .result = { 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  986. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  987. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  988. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
  989. .valid = true
  990. },
  991. /* wycheproof - edge case for shared secret */
  992. {
  993. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  994. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  995. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  996. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  997. .public = { 0x63, 0xe5, 0xb1, 0xfe, 0x96, 0x01, 0xfe, 0x84,
  998. 0x38, 0x5d, 0x88, 0x66, 0xb0, 0x42, 0x12, 0x62,
  999. 0xf7, 0x8f, 0xbf, 0xa5, 0xaf, 0xf9, 0x58, 0x5e,
  1000. 0x62, 0x66, 0x79, 0xb1, 0x85, 0x47, 0xd9, 0x59 },
  1001. .result = { 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1002. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1003. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1004. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x3f },
  1005. .valid = true
  1006. },
  1007. /* wycheproof - edge case for shared secret */
  1008. {
  1009. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1010. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1011. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1012. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1013. .public = { 0xe4, 0x28, 0xf3, 0xda, 0xc1, 0x78, 0x09, 0xf8,
  1014. 0x27, 0xa5, 0x22, 0xce, 0x32, 0x35, 0x50, 0x58,
  1015. 0xd0, 0x73, 0x69, 0x36, 0x4a, 0xa7, 0x89, 0x02,
  1016. 0xee, 0x10, 0x13, 0x9b, 0x9f, 0x9d, 0xd6, 0x53 },
  1017. .result = { 0xfc, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1018. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1019. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1020. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x3f },
  1021. .valid = true
  1022. },
  1023. /* wycheproof - edge case for shared secret */
  1024. {
  1025. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1026. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1027. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1028. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1029. .public = { 0xb3, 0xb5, 0x0e, 0x3e, 0xd3, 0xa4, 0x07, 0xb9,
  1030. 0x5d, 0xe9, 0x42, 0xef, 0x74, 0x57, 0x5b, 0x5a,
  1031. 0xb8, 0xa1, 0x0c, 0x09, 0xee, 0x10, 0x35, 0x44,
  1032. 0xd6, 0x0b, 0xdf, 0xed, 0x81, 0x38, 0xab, 0x2b },
  1033. .result = { 0xf9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1034. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1035. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1036. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x3f },
  1037. .valid = true
  1038. },
  1039. /* wycheproof - edge case for shared secret */
  1040. {
  1041. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1042. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1043. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1044. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1045. .public = { 0x21, 0x3f, 0xff, 0xe9, 0x3d, 0x5e, 0xa8, 0xcd,
  1046. 0x24, 0x2e, 0x46, 0x28, 0x44, 0x02, 0x99, 0x22,
  1047. 0xc4, 0x3c, 0x77, 0xc9, 0xe3, 0xe4, 0x2f, 0x56,
  1048. 0x2f, 0x48, 0x5d, 0x24, 0xc5, 0x01, 0xa2, 0x0b },
  1049. .result = { 0xf3, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1050. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1051. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1052. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x3f },
  1053. .valid = true
  1054. },
  1055. /* wycheproof - edge case for shared secret */
  1056. {
  1057. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1058. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1059. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1060. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1061. .public = { 0x91, 0xb2, 0x32, 0xa1, 0x78, 0xb3, 0xcd, 0x53,
  1062. 0x09, 0x32, 0x44, 0x1e, 0x61, 0x39, 0x41, 0x8f,
  1063. 0x72, 0x17, 0x22, 0x92, 0xf1, 0xda, 0x4c, 0x18,
  1064. 0x34, 0xfc, 0x5e, 0xbf, 0xef, 0xb5, 0x1e, 0x3f },
  1065. .result = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1066. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1067. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1068. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x03 },
  1069. .valid = true
  1070. },
  1071. /* wycheproof - edge case for shared secret */
  1072. {
  1073. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1074. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1075. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1076. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1077. .public = { 0x04, 0x5c, 0x6e, 0x11, 0xc5, 0xd3, 0x32, 0x55,
  1078. 0x6c, 0x78, 0x22, 0xfe, 0x94, 0xeb, 0xf8, 0x9b,
  1079. 0x56, 0xa3, 0x87, 0x8d, 0xc2, 0x7c, 0xa0, 0x79,
  1080. 0x10, 0x30, 0x58, 0x84, 0x9f, 0xab, 0xcb, 0x4f },
  1081. .result = { 0xe5, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1082. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1083. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1084. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  1085. .valid = true
  1086. },
  1087. /* wycheproof - edge case for shared secret */
  1088. {
  1089. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1090. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1091. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1092. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1093. .public = { 0x1c, 0xa2, 0x19, 0x0b, 0x71, 0x16, 0x35, 0x39,
  1094. 0x06, 0x3c, 0x35, 0x77, 0x3b, 0xda, 0x0c, 0x9c,
  1095. 0x92, 0x8e, 0x91, 0x36, 0xf0, 0x62, 0x0a, 0xeb,
  1096. 0x09, 0x3f, 0x09, 0x91, 0x97, 0xb7, 0xf7, 0x4e },
  1097. .result = { 0xe3, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1098. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1099. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1100. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  1101. .valid = true
  1102. },
  1103. /* wycheproof - edge case for shared secret */
  1104. {
  1105. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1106. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1107. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1108. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1109. .public = { 0xf7, 0x6e, 0x90, 0x10, 0xac, 0x33, 0xc5, 0x04,
  1110. 0x3b, 0x2d, 0x3b, 0x76, 0xa8, 0x42, 0x17, 0x10,
  1111. 0x00, 0xc4, 0x91, 0x62, 0x22, 0xe9, 0xe8, 0x58,
  1112. 0x97, 0xa0, 0xae, 0xc7, 0xf6, 0x35, 0x0b, 0x3c },
  1113. .result = { 0xdd, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1114. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1115. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1116. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  1117. .valid = true
  1118. },
  1119. /* wycheproof - edge case for shared secret */
  1120. {
  1121. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1122. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1123. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1124. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1125. .public = { 0xbb, 0x72, 0x68, 0x8d, 0x8f, 0x8a, 0xa7, 0xa3,
  1126. 0x9c, 0xd6, 0x06, 0x0c, 0xd5, 0xc8, 0x09, 0x3c,
  1127. 0xde, 0xc6, 0xfe, 0x34, 0x19, 0x37, 0xc3, 0x88,
  1128. 0x6a, 0x99, 0x34, 0x6c, 0xd0, 0x7f, 0xaa, 0x55 },
  1129. .result = { 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1130. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1131. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1132. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
  1133. .valid = true
  1134. },
  1135. /* wycheproof - edge case for shared secret */
  1136. {
  1137. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1138. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1139. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1140. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1141. .public = { 0x88, 0xfd, 0xde, 0xa1, 0x93, 0x39, 0x1c, 0x6a,
  1142. 0x59, 0x33, 0xef, 0x9b, 0x71, 0x90, 0x15, 0x49,
  1143. 0x44, 0x72, 0x05, 0xaa, 0xe9, 0xda, 0x92, 0x8a,
  1144. 0x6b, 0x91, 0xa3, 0x52, 0xba, 0x10, 0xf4, 0x1f },
  1145. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1146. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1147. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1148. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02 },
  1149. .valid = true
  1150. },
  1151. /* wycheproof - edge case for shared secret */
  1152. {
  1153. .private = { 0xa0, 0xa4, 0xf1, 0x30, 0xb9, 0x8a, 0x5b, 0xe4,
  1154. 0xb1, 0xce, 0xdb, 0x7c, 0xb8, 0x55, 0x84, 0xa3,
  1155. 0x52, 0x0e, 0x14, 0x2d, 0x47, 0x4d, 0xc9, 0xcc,
  1156. 0xb9, 0x09, 0xa0, 0x73, 0xa9, 0x76, 0xbf, 0x63 },
  1157. .public = { 0x30, 0x3b, 0x39, 0x2f, 0x15, 0x31, 0x16, 0xca,
  1158. 0xd9, 0xcc, 0x68, 0x2a, 0x00, 0xcc, 0xc4, 0x4c,
  1159. 0x95, 0xff, 0x0d, 0x3b, 0xbe, 0x56, 0x8b, 0xeb,
  1160. 0x6c, 0x4e, 0x73, 0x9b, 0xaf, 0xdc, 0x2c, 0x68 },
  1161. .result = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1162. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1163. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1164. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0x00 },
  1165. .valid = true
  1166. },
  1167. /* wycheproof - checking for overflow */
  1168. {
  1169. .private = { 0xc8, 0x17, 0x24, 0x70, 0x40, 0x00, 0xb2, 0x6d,
  1170. 0x31, 0x70, 0x3c, 0xc9, 0x7e, 0x3a, 0x37, 0x8d,
  1171. 0x56, 0xfa, 0xd8, 0x21, 0x93, 0x61, 0xc8, 0x8c,
  1172. 0xca, 0x8b, 0xd7, 0xc5, 0x71, 0x9b, 0x12, 0xb2 },
  1173. .public = { 0xfd, 0x30, 0x0a, 0xeb, 0x40, 0xe1, 0xfa, 0x58,
  1174. 0x25, 0x18, 0x41, 0x2b, 0x49, 0xb2, 0x08, 0xa7,
  1175. 0x84, 0x2b, 0x1e, 0x1f, 0x05, 0x6a, 0x04, 0x01,
  1176. 0x78, 0xea, 0x41, 0x41, 0x53, 0x4f, 0x65, 0x2d },
  1177. .result = { 0xb7, 0x34, 0x10, 0x5d, 0xc2, 0x57, 0x58, 0x5d,
  1178. 0x73, 0xb5, 0x66, 0xcc, 0xb7, 0x6f, 0x06, 0x27,
  1179. 0x95, 0xcc, 0xbe, 0xc8, 0x91, 0x28, 0xe5, 0x2b,
  1180. 0x02, 0xf3, 0xe5, 0x96, 0x39, 0xf1, 0x3c, 0x46 },
  1181. .valid = true
  1182. },
  1183. /* wycheproof - checking for overflow */
  1184. {
  1185. .private = { 0xc8, 0x17, 0x24, 0x70, 0x40, 0x00, 0xb2, 0x6d,
  1186. 0x31, 0x70, 0x3c, 0xc9, 0x7e, 0x3a, 0x37, 0x8d,
  1187. 0x56, 0xfa, 0xd8, 0x21, 0x93, 0x61, 0xc8, 0x8c,
  1188. 0xca, 0x8b, 0xd7, 0xc5, 0x71, 0x9b, 0x12, 0xb2 },
  1189. .public = { 0xc8, 0xef, 0x79, 0xb5, 0x14, 0xd7, 0x68, 0x26,
  1190. 0x77, 0xbc, 0x79, 0x31, 0xe0, 0x6e, 0xe5, 0xc2,
  1191. 0x7c, 0x9b, 0x39, 0x2b, 0x4a, 0xe9, 0x48, 0x44,
  1192. 0x73, 0xf5, 0x54, 0xe6, 0x67, 0x8e, 0xcc, 0x2e },
  1193. .result = { 0x64, 0x7a, 0x46, 0xb6, 0xfc, 0x3f, 0x40, 0xd6,
  1194. 0x21, 0x41, 0xee, 0x3c, 0xee, 0x70, 0x6b, 0x4d,
  1195. 0x7a, 0x92, 0x71, 0x59, 0x3a, 0x7b, 0x14, 0x3e,
  1196. 0x8e, 0x2e, 0x22, 0x79, 0x88, 0x3e, 0x45, 0x50 },
  1197. .valid = true
  1198. },
  1199. /* wycheproof - checking for overflow */
  1200. {
  1201. .private = { 0xc8, 0x17, 0x24, 0x70, 0x40, 0x00, 0xb2, 0x6d,
  1202. 0x31, 0x70, 0x3c, 0xc9, 0x7e, 0x3a, 0x37, 0x8d,
  1203. 0x56, 0xfa, 0xd8, 0x21, 0x93, 0x61, 0xc8, 0x8c,
  1204. 0xca, 0x8b, 0xd7, 0xc5, 0x71, 0x9b, 0x12, 0xb2 },
  1205. .public = { 0x64, 0xae, 0xac, 0x25, 0x04, 0x14, 0x48, 0x61,
  1206. 0x53, 0x2b, 0x7b, 0xbc, 0xb6, 0xc8, 0x7d, 0x67,
  1207. 0xdd, 0x4c, 0x1f, 0x07, 0xeb, 0xc2, 0xe0, 0x6e,
  1208. 0xff, 0xb9, 0x5a, 0xec, 0xc6, 0x17, 0x0b, 0x2c },
  1209. .result = { 0x4f, 0xf0, 0x3d, 0x5f, 0xb4, 0x3c, 0xd8, 0x65,
  1210. 0x7a, 0x3c, 0xf3, 0x7c, 0x13, 0x8c, 0xad, 0xce,
  1211. 0xcc, 0xe5, 0x09, 0xe4, 0xeb, 0xa0, 0x89, 0xd0,
  1212. 0xef, 0x40, 0xb4, 0xe4, 0xfb, 0x94, 0x61, 0x55 },
  1213. .valid = true
  1214. },
  1215. /* wycheproof - checking for overflow */
  1216. {
  1217. .private = { 0xc8, 0x17, 0x24, 0x70, 0x40, 0x00, 0xb2, 0x6d,
  1218. 0x31, 0x70, 0x3c, 0xc9, 0x7e, 0x3a, 0x37, 0x8d,
  1219. 0x56, 0xfa, 0xd8, 0x21, 0x93, 0x61, 0xc8, 0x8c,
  1220. 0xca, 0x8b, 0xd7, 0xc5, 0x71, 0x9b, 0x12, 0xb2 },
  1221. .public = { 0xbf, 0x68, 0xe3, 0x5e, 0x9b, 0xdb, 0x7e, 0xee,
  1222. 0x1b, 0x50, 0x57, 0x02, 0x21, 0x86, 0x0f, 0x5d,
  1223. 0xcd, 0xad, 0x8a, 0xcb, 0xab, 0x03, 0x1b, 0x14,
  1224. 0x97, 0x4c, 0xc4, 0x90, 0x13, 0xc4, 0x98, 0x31 },
  1225. .result = { 0x21, 0xce, 0xe5, 0x2e, 0xfd, 0xbc, 0x81, 0x2e,
  1226. 0x1d, 0x02, 0x1a, 0x4a, 0xf1, 0xe1, 0xd8, 0xbc,
  1227. 0x4d, 0xb3, 0xc4, 0x00, 0xe4, 0xd2, 0xa2, 0xc5,
  1228. 0x6a, 0x39, 0x26, 0xdb, 0x4d, 0x99, 0xc6, 0x5b },
  1229. .valid = true
  1230. },
  1231. /* wycheproof - checking for overflow */
  1232. {
  1233. .private = { 0xc8, 0x17, 0x24, 0x70, 0x40, 0x00, 0xb2, 0x6d,
  1234. 0x31, 0x70, 0x3c, 0xc9, 0x7e, 0x3a, 0x37, 0x8d,
  1235. 0x56, 0xfa, 0xd8, 0x21, 0x93, 0x61, 0xc8, 0x8c,
  1236. 0xca, 0x8b, 0xd7, 0xc5, 0x71, 0x9b, 0x12, 0xb2 },
  1237. .public = { 0x53, 0x47, 0xc4, 0x91, 0x33, 0x1a, 0x64, 0xb4,
  1238. 0x3d, 0xdc, 0x68, 0x30, 0x34, 0xe6, 0x77, 0xf5,
  1239. 0x3d, 0xc3, 0x2b, 0x52, 0xa5, 0x2a, 0x57, 0x7c,
  1240. 0x15, 0xa8, 0x3b, 0xf2, 0x98, 0xe9, 0x9f, 0x19 },
  1241. .result = { 0x18, 0xcb, 0x89, 0xe4, 0xe2, 0x0c, 0x0c, 0x2b,
  1242. 0xd3, 0x24, 0x30, 0x52, 0x45, 0x26, 0x6c, 0x93,
  1243. 0x27, 0x69, 0x0b, 0xbe, 0x79, 0xac, 0xb8, 0x8f,
  1244. 0x5b, 0x8f, 0xb3, 0xf7, 0x4e, 0xca, 0x3e, 0x52 },
  1245. .valid = true
  1246. },
  1247. /* wycheproof - private key == -1 (mod order) */
  1248. {
  1249. .private = { 0xa0, 0x23, 0xcd, 0xd0, 0x83, 0xef, 0x5b, 0xb8,
  1250. 0x2f, 0x10, 0xd6, 0x2e, 0x59, 0xe1, 0x5a, 0x68,
  1251. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  1252. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x50 },
  1253. .public = { 0x25, 0x8e, 0x04, 0x52, 0x3b, 0x8d, 0x25, 0x3e,
  1254. 0xe6, 0x57, 0x19, 0xfc, 0x69, 0x06, 0xc6, 0x57,
  1255. 0x19, 0x2d, 0x80, 0x71, 0x7e, 0xdc, 0x82, 0x8f,
  1256. 0xa0, 0xaf, 0x21, 0x68, 0x6e, 0x2f, 0xaa, 0x75 },
  1257. .result = { 0x25, 0x8e, 0x04, 0x52, 0x3b, 0x8d, 0x25, 0x3e,
  1258. 0xe6, 0x57, 0x19, 0xfc, 0x69, 0x06, 0xc6, 0x57,
  1259. 0x19, 0x2d, 0x80, 0x71, 0x7e, 0xdc, 0x82, 0x8f,
  1260. 0xa0, 0xaf, 0x21, 0x68, 0x6e, 0x2f, 0xaa, 0x75 },
  1261. .valid = true
  1262. },
  1263. /* wycheproof - private key == 1 (mod order) on twist */
  1264. {
  1265. .private = { 0x58, 0x08, 0x3d, 0xd2, 0x61, 0xad, 0x91, 0xef,
  1266. 0xf9, 0x52, 0x32, 0x2e, 0xc8, 0x24, 0xc6, 0x82,
  1267. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
  1268. 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x5f },
  1269. .public = { 0x2e, 0xae, 0x5e, 0xc3, 0xdd, 0x49, 0x4e, 0x9f,
  1270. 0x2d, 0x37, 0xd2, 0x58, 0xf8, 0x73, 0xa8, 0xe6,
  1271. 0xe9, 0xd0, 0xdb, 0xd1, 0xe3, 0x83, 0xef, 0x64,
  1272. 0xd9, 0x8b, 0xb9, 0x1b, 0x3e, 0x0b, 0xe0, 0x35 },
  1273. .result = { 0x2e, 0xae, 0x5e, 0xc3, 0xdd, 0x49, 0x4e, 0x9f,
  1274. 0x2d, 0x37, 0xd2, 0x58, 0xf8, 0x73, 0xa8, 0xe6,
  1275. 0xe9, 0xd0, 0xdb, 0xd1, 0xe3, 0x83, 0xef, 0x64,
  1276. 0xd9, 0x8b, 0xb9, 0x1b, 0x3e, 0x0b, 0xe0, 0x35 },
  1277. .valid = true
  1278. }
  1279. };
  1280. bool __init curve25519_selftest(void)
  1281. {
  1282. bool success = true, ret, ret2;
  1283. size_t i = 0, j;
  1284. u8 in[CURVE25519_KEY_SIZE];
  1285. u8 out[CURVE25519_KEY_SIZE], out2[CURVE25519_KEY_SIZE],
  1286. out3[CURVE25519_KEY_SIZE];
  1287. for (i = 0; i < ARRAY_SIZE(curve25519_test_vectors); ++i) {
  1288. memset(out, 0, CURVE25519_KEY_SIZE);
  1289. ret = curve25519(out, curve25519_test_vectors[i].private,
  1290. curve25519_test_vectors[i].public);
  1291. if (ret != curve25519_test_vectors[i].valid ||
  1292. memcmp(out, curve25519_test_vectors[i].result,
  1293. CURVE25519_KEY_SIZE)) {
  1294. pr_err("curve25519 self-test %zu: FAIL\n", i + 1);
  1295. success = false;
  1296. }
  1297. }
  1298. for (i = 0; i < 5; ++i) {
  1299. get_random_bytes(in, sizeof(in));
  1300. ret = curve25519_generate_public(out, in);
  1301. ret2 = curve25519(out2, in, (u8[CURVE25519_KEY_SIZE]){ 9 });
  1302. curve25519_generic(out3, in, (u8[CURVE25519_KEY_SIZE]){ 9 });
  1303. if (ret != ret2 ||
  1304. memcmp(out, out2, CURVE25519_KEY_SIZE) ||
  1305. memcmp(out, out3, CURVE25519_KEY_SIZE)) {
  1306. pr_err("curve25519 basepoint self-test %zu: FAIL: input - 0x",
  1307. i + 1);
  1308. for (j = CURVE25519_KEY_SIZE; j-- > 0;)
  1309. printk(KERN_CONT "%02x", in[j]);
  1310. printk(KERN_CONT "\n");
  1311. success = false;
  1312. }
  1313. }
  1314. return success;
  1315. }