1# Imported from Wycheproof's aes_cbc_pkcs5_test.json.
2# This file is generated by convert_wycheproof.go. Do not edit by hand.
3#
4# Algorithm: AES-CBC-PKCS5
5# Generator version: 0.4.12
6
7[ivSize = 128]
8[keySize = 128]
9
10# tcId = 1
11# empty message
12ct = b10ab60153276941361000414aed0a9d
13iv = da9520f7d3520277035173299388bee2
14key = e34f15c7bd819930fe9d66e0c166e61c
15msg =
16result = valid
17
18# tcId = 2
19# message size divisible by block size
20ct = d1fa697f3e2e04d64f1a0da203813ca5bc226a0b1d42287b2a5b994a66eaf14a
21iv = c9ee3cd746bf208c65ca9e72a266d54f
22key = e09eaa5a3f5e56d279d5e7a03373f6ea
23msg = ef4eab37181f98423e53e947e7050fd0
24result = valid
25
26# tcId = 3
27# message size divisible by block size
28ct = 514cbc69aced506926deacdeb0cc0a5a07d540f65d825b65c7db0075cf930a06e0124ae598461cab0b3251baa853e377
29iv = 8b2e86a9a185cfa6f51c7cc595b822bc
30key = 9bd3902ed0996c869b572272e76f3889
31msg = a7ba19d49ee1ea02f098aa8e30c740d893a4456ccc294040484ed8a00a55f93e
32result = valid
33
34# tcId = 4
35# message size divisible by block size
36ct = 137c824d7f7dc36f24216dde37c2e1c10cee533f6453de92e44b898fc3037d2e9e19d67a96387136dd9717a56e28614a5c177158f402ce2936fd98d1feb6a817
37iv = 2717d10eb2eea3b39ec257e43307a260
38key = 75ce184447cada672e02290310d224f7
39msg = c774810a31a6421ad8eaafd5c22fa2455e2c167fee4a0b73ff927b2d96c69da1e939407b86b1c19bcfc69c434c3cf8a2
40result = valid
41
42# tcId = 5
43# small plaintext size
44ct = 599d77aca16910b42d8b4ac9560efe1b
45iv = 155fd397579b0b5d991d42607f2cc9ad
46key = e1e726677f4893890f8c027f9d8ef80d
47msg = 3f
48result = valid
49
50# tcId = 6
51# small plaintext size
52ct = 74e20bf03a0ad4b49edc86a1b19c3d1d
53iv = 4eb836be6808db264cb1111a3283b394
54key = b151f491c4c006d1f28214aa3da9a985
55msg = 27d9
56result = valid
57
58# tcId = 7
59# small plaintext size
60ct = 3f7a26558ba51cf352219d34c46907ae
61iv = a8446c27ea9068d8d924d5c4eac91157
62key = c36ff15f72777ee21deec07b63c1a0cd
63msg = 50b428
64result = valid
65
66# tcId = 8
67# small plaintext size
68ct = c29d1463baccc558fd720c897da5bb98
69iv = ef026d27da3702d7bb72e5e364a8f8f2
70key = 32b9c5c78c3a0689a86052420fa1e8fc
71msg = 0b9262ec
72result = valid
73
74# tcId = 9
75# small plaintext size
76ct = e24a717914f9cc8eaa1dc96f7840d6af
77iv = c9defd3929dcd6c355c144e9750dd869
78key = 43151bbaef367277ebfc97509d0aa49c
79msg = eaa91273e7
80result = valid
81
82# tcId = 10
83# small plaintext size
84ct = f080e487f4e5b7aed793ea95ffe4bb30
85iv = ce91e0454b0123f1ead0f158826459e9
86key = 481440298525cc261f8159159aedf62d
87msg = 6123c556c5cc
88result = valid
89
90# tcId = 11
91# small plaintext size
92ct = 27cadee413ed901f51c9366d731d95f6
93iv = 1cb7bc8fe00523e7743d3cd9f483d6fe
94key = 9ca26eb88731efbf7f810d5d95e196ac
95msg = 7e48f06183aa40
96result = valid
97
98# tcId = 12
99# small plaintext size
100ct = 59bf12427b51a3aee0c9d3c540d04d24
101iv = a345f084229dbfe0ceab6c6939571532
102key = 48f0d03e41cc55c4b58f737b5acdea32
103msg = f4a133aa6d5985a0
104result = valid
105
106# tcId = 13
107# small plaintext size
108ct = 1a0a18355f8ca4e6e2cf31da18d070da
109iv = e5b6f73f132355b7be7d977bea068dfc
110key = 1c958849f31996b28939ce513087d1be
111msg = b0d2fee11b8e2f86b7
112result = valid
113
114# tcId = 14
115# small plaintext size
116ct = cef498ea61715a27f400418d1d5bfbf0
117iv = c7cd10ca949ea03e7d4ba204b69e09b8
118key = 39de0ebea97c09b2301a90009a423253
119msg = 81e5c33b4c620852f044
120result = valid
121
122# tcId = 15
123# small plaintext size
124ct = 7ab43ddc45835ce40d2280bcea6a63f2
125iv = bb8c9af30821dfeb7124392a554d9f01
126key = 91656d8fc0aced60ddb1c4006d0dde53
127msg = 7b3e440fe566790064b2ec
128result = valid
129
130# tcId = 16
131# small plaintext size
132ct = c70b457c945ad40895cf4c8be3ce7c66
133iv = 54c3b90ca6e933f9094334d0263d3775
134key = af7d5134720b5386158d51ea126e7cf9
135msg = 7cc6fcc925c20f3c83b5567c
136result = valid
137
138# tcId = 17
139# small plaintext size
140ct = f9900afee2acfe63f8f15d81bbf64c39
141iv = 9a2c5e91d4f0b9b9da64b46c5c2c8cb2
142key = 4ed56753de6f75a032ebabca3ce27971
143msg = 0c8c0f5619d9f8da5339281285
144result = valid
145
146# tcId = 18
147# small plaintext size
148ct = da4137bd8ac78e75a700b3de806f2d6f
149iv = cf7951501104e1434309e6b936ec1742
150key = beba50c936b696c15e25046dffb23a64
151msg = 821ea8532fbabffb6e3d212e9b46
152result = valid
153
154# tcId = 19
155# small plaintext size
156ct = fed05321d11d978e2ec32527ecfce06c
157iv = 90f5cf4fbfd2e2a1ab8eef402617bd5c
158key = 501d81ebf912ddb87fbe3b7aac1437bc
159msg = 2368e3c3636b5e8e94d2081adbf798
160result = valid
161
162# tcId = 20
163# plaintext size > 16
164ct = 8d55dc10584e243f55d2bdbb5758b7fabcd58c8d3785f01c7e3640b2a1dadcd9
165iv = 54f2459e40e002763144f4752cde2fb5
166key = 831e664c9e3f0c3094c0b27b9d908eb2
167msg = 26603bb76dd0a0180791c4ed4d3b058807
168result = valid
169
170# tcId = 21
171# plaintext size > 16
172ct = e9199842355ea0c3dbf1b2a94fef1c802a95d024df9e407883cf5bf1f02c3cdc
173iv = 088e01c2c65b26e7ad6af7b92ea09d73
174key = cbffc6c8c7f76f46349c32d666f4efb0
175msg = 6df067add738195fd55ac2e76b476971b9a0e6d8
176result = valid
177
178# tcId = 22
179# plaintext size > 16
180ct = 19beb4db2be0f3aff0083583038b2281a77c85b5f345ba4d2bc7f742a14f9247
181iv = d9c9468796a2f5741b84d2d41430c5d3
182key = fda6a01194beb462953d7e6c49b32dac
183msg = f60ae3b036abcab78c98fc1d4b67970c0955cb6fe24483f8907fd73319679b
184result = valid
185
186# tcId = 23
187# plaintext size > 16
188ct = 84904fc92bd2e7590aa268e667370327b9446f41067dd40d3e5091a63a0d5687e4926e00cc3cb461c3b85d80ee2da818
189iv = c98b47808add45c0c891983ec4b09846
190key = efd9caa8ac68e9e29acdae57e93bcea8
191msg = 3e1d2001f1e475b972738936443a5f51eedaf802a66fadf2406cfaadb0549149fcb9f485e534dc2d
192result = valid
193
194# tcId = 24
195# plaintext size > 16
196ct = 1d1391593a336be4b207295ad0542bc4ef2f39053066e12c38f71603f377fd42f4f0b2b5a42cdfeaee2af039f06fcf347abe171af3157ff07f3cdd3b33e11a60caecf9890325c132eeb66ab847278d165c26bca7c30486bb2fd83b63c5ff7ae0
197iv = 08e9410de244d3f40607ebae38fa74e7
198key = 37e4dbdc436258d5a9adb9f205c77cf3
199msg = 24a874aec067116ad22eb55846ded3f5e86919a135585c929a86d92b2958fed110e52e33804887243584a6a94402cc9a105e0c940ec335bd2890f16dcce3fc8bd02873c80ade6f1ac08683130bcca454
200result = valid
201
202# tcId = 25
203# zero padding
204ct = aa62606a287476777b92d8e4c4e53028
205iv = 23468aa734f5f0f19827316ff168e94f
206key = db4f3e5e3795cc09a073fa6a81e5a6bc
207msg =
208result = invalid
209# The ciphertext in this test vector is the message encrypted with an invalid or
210# unexpected padding. This allows to find implementations that are not properly
211# checking the padding during decryption.
212
213# tcId = 26
214# zero padding
215ct = ada437b682c92384b6c23ec10a21b3d8
216iv = 23468aa734f5f0f19827316ff168e94f
217key = db4f3e5e3795cc09a073fa6a81e5a6bc
218msg = 6162636465666768
219result = invalid
220# The ciphertext in this test vector is the message encrypted with an invalid or
221# unexpected padding. This allows to find implementations that are not properly
222# checking the padding during decryption.
223
224# tcId = 27
225# zero padding
226ct = 26c5b3e540ee3dd6b52d14afd01a44f8
227iv = 23468aa734f5f0f19827316ff168e94f
228key = db4f3e5e3795cc09a073fa6a81e5a6bc
229msg = 303132333435363738396162636465
230result = invalid
231# The ciphertext in this test vector is the message encrypted with an invalid or
232# unexpected padding. This allows to find implementations that are not properly
233# checking the padding during decryption.
234
235# tcId = 28
236# zero padding
237ct = fbcbdfdaaf17980be939c0b243266ecbc0deb417e98aba3ee12fea2921f8ae51
238iv = 23468aa734f5f0f19827316ff168e94f
239key = db4f3e5e3795cc09a073fa6a81e5a6bc
240msg = 30313233343536373839414243444546
241result = invalid
242# The ciphertext in this test vector is the message encrypted with an invalid or
243# unexpected padding. This allows to find implementations that are not properly
244# checking the padding during decryption.
245
246# tcId = 29
247# zero padding
248ct = fbcbdfdaaf17980be939c0b243266ecb1188ff22f6563f6173440547d1e0dfd8
249iv = 23468aa734f5f0f19827316ff168e94f
250key = db4f3e5e3795cc09a073fa6a81e5a6bc
251msg = 3031323334353637383941424344454647
252result = invalid
253# The ciphertext in this test vector is the message encrypted with an invalid or
254# unexpected padding. This allows to find implementations that are not properly
255# checking the padding during decryption.
256
257# tcId = 30
258# padding with 0xff
259ct = 726570a34cea08139d9f836579102a0e
260iv = 23468aa734f5f0f19827316ff168e94f
261key = db4f3e5e3795cc09a073fa6a81e5a6bc
262msg =
263result = invalid
264# The ciphertext in this test vector is the message encrypted with an invalid or
265# unexpected padding. This allows to find implementations that are not properly
266# checking the padding during decryption.
267
268# tcId = 31
269# padding with 0xff
270ct = c8ef7ac3fd659ce7157d72a25f0a5048
271iv = 23468aa734f5f0f19827316ff168e94f
272key = db4f3e5e3795cc09a073fa6a81e5a6bc
273msg = 6162636465666768
274result = invalid
275# The ciphertext in this test vector is the message encrypted with an invalid or
276# unexpected padding. This allows to find implementations that are not properly
277# checking the padding during decryption.
278
279# tcId = 32
280# padding with 0xff
281ct = 6123c889bbc766acd4bca4cb982f9978
282iv = 23468aa734f5f0f19827316ff168e94f
283key = db4f3e5e3795cc09a073fa6a81e5a6bc
284msg = 303132333435363738396162636465
285result = invalid
286# The ciphertext in this test vector is the message encrypted with an invalid or
287# unexpected padding. This allows to find implementations that are not properly
288# checking the padding during decryption.
289
290# tcId = 33
291# padding with 0xff
292ct = fbcbdfdaaf17980be939c0b243266ecb442cd16f7410fca70924b573f7967e84
293iv = 23468aa734f5f0f19827316ff168e94f
294key = db4f3e5e3795cc09a073fa6a81e5a6bc
295msg = 30313233343536373839414243444546
296result = invalid
297# The ciphertext in this test vector is the message encrypted with an invalid or
298# unexpected padding. This allows to find implementations that are not properly
299# checking the padding during decryption.
300
301# tcId = 34
302# padding with 0xff
303ct = fbcbdfdaaf17980be939c0b243266ecbb20f899b0e7c1d65b931af94b5c44c25
304iv = 23468aa734f5f0f19827316ff168e94f
305key = db4f3e5e3795cc09a073fa6a81e5a6bc
306msg = 3031323334353637383941424344454647
307result = invalid
308# The ciphertext in this test vector is the message encrypted with an invalid or
309# unexpected padding. This allows to find implementations that are not properly
310# checking the padding during decryption.
311
312# tcId = 35
313# bit padding
314ct = 50aeed98a820c5a037a5aa4d4ef3090b
315iv = 23468aa734f5f0f19827316ff168e94f
316key = db4f3e5e3795cc09a073fa6a81e5a6bc
317msg =
318result = invalid
319# The ciphertext in this test vector is the message encrypted with an invalid or
320# unexpected padding. This allows to find implementations that are not properly
321# checking the padding during decryption.
322
323# tcId = 36
324# bit padding
325ct = 25ee339006f948f42713543c62467ef9
326iv = 23468aa734f5f0f19827316ff168e94f
327key = db4f3e5e3795cc09a073fa6a81e5a6bc
328msg = 6162636465666768
329result = invalid
330# The ciphertext in this test vector is the message encrypted with an invalid or
331# unexpected padding. This allows to find implementations that are not properly
332# checking the padding during decryption.
333
334# tcId = 37
335# bit padding
336ct = 97914574676ed5b8db0b6f3931195b3f
337iv = 23468aa734f5f0f19827316ff168e94f
338key = db4f3e5e3795cc09a073fa6a81e5a6bc
339msg = 303132333435363738396162636465
340result = invalid
341# The ciphertext in this test vector is the message encrypted with an invalid or
342# unexpected padding. This allows to find implementations that are not properly
343# checking the padding during decryption.
344
345# tcId = 38
346# bit padding
347ct = fbcbdfdaaf17980be939c0b243266ecb2874a1e2d28dd18e5573df9fd59fd789
348iv = 23468aa734f5f0f19827316ff168e94f
349key = db4f3e5e3795cc09a073fa6a81e5a6bc
350msg = 30313233343536373839414243444546
351result = invalid
352# The ciphertext in this test vector is the message encrypted with an invalid or
353# unexpected padding. This allows to find implementations that are not properly
354# checking the padding during decryption.
355
356# tcId = 39
357# bit padding
358ct = fbcbdfdaaf17980be939c0b243266ecbb547c4fddbdcd3e02f438a2e48587594
359iv = 23468aa734f5f0f19827316ff168e94f
360key = db4f3e5e3795cc09a073fa6a81e5a6bc
361msg = 3031323334353637383941424344454647
362result = invalid
363# The ciphertext in this test vector is the message encrypted with an invalid or
364# unexpected padding. This allows to find implementations that are not properly
365# checking the padding during decryption.
366
367# tcId = 40
368# padding longer than 1 block
369ct = d17ccbb26f0aa95f397b20063547349bac24c5429cbea591e96595cccc11451b
370iv = 23468aa734f5f0f19827316ff168e94f
371key = db4f3e5e3795cc09a073fa6a81e5a6bc
372msg =
373result = invalid
374# The ciphertext in this test vector is the message encrypted with an invalid or
375# unexpected padding. This allows to find implementations that are not properly
376# checking the padding during decryption.
377
378# tcId = 41
379# padding longer than 1 block
380ct = fc07025e81d43efa85f92afdf8781b1e88598e12d6812df43733e93414b9e901
381iv = 23468aa734f5f0f19827316ff168e94f
382key = db4f3e5e3795cc09a073fa6a81e5a6bc
383msg = 6162636465666768
384result = invalid
385# The ciphertext in this test vector is the message encrypted with an invalid or
386# unexpected padding. This allows to find implementations that are not properly
387# checking the padding during decryption.
388
389# tcId = 42
390# padding longer than 1 block
391ct = deb1746f4e9e0be4a21825b071b6e93303031651e0c59091e2ae0fbcce11b987
392iv = 23468aa734f5f0f19827316ff168e94f
393key = db4f3e5e3795cc09a073fa6a81e5a6bc
394msg = 303132333435363738396162636465
395result = invalid
396# The ciphertext in this test vector is the message encrypted with an invalid or
397# unexpected padding. This allows to find implementations that are not properly
398# checking the padding during decryption.
399
400# tcId = 43
401# padding longer than 1 block
402ct = fbcbdfdaaf17980be939c0b243266ecb563d35096fde10ccb6f768438c9eb4ec90f399b76924c716e9f94143263306c6
403iv = 23468aa734f5f0f19827316ff168e94f
404key = db4f3e5e3795cc09a073fa6a81e5a6bc
405msg = 30313233343536373839414243444546
406result = invalid
407# The ciphertext in this test vector is the message encrypted with an invalid or
408# unexpected padding. This allows to find implementations that are not properly
409# checking the padding during decryption.
410
411# tcId = 44
412# padding longer than 1 block
413ct = fbcbdfdaaf17980be939c0b243266ecbc8fd2e2c5362acf5212bd47859aa827d8469b87b0e6adafe3dba98c1885b6345
414iv = 23468aa734f5f0f19827316ff168e94f
415key = db4f3e5e3795cc09a073fa6a81e5a6bc
416msg = 3031323334353637383941424344454647
417result = invalid
418# The ciphertext in this test vector is the message encrypted with an invalid or
419# unexpected padding. This allows to find implementations that are not properly
420# checking the padding during decryption.
421
422# tcId = 45
423# ANSI X.923 padding
424ct = ca5dd2d09bd56eec9e8acaeca20af68e
425iv = 23468aa734f5f0f19827316ff168e94f
426key = db4f3e5e3795cc09a073fa6a81e5a6bc
427msg =
428result = invalid
429# The ciphertext in this test vector is the message encrypted with an invalid or
430# unexpected padding. This allows to find implementations that are not properly
431# checking the padding during decryption.
432
433# tcId = 46
434# ANSI X.923 padding
435ct = 01e53a5ec9b0957c45f79ed0f4b2b982
436iv = 23468aa734f5f0f19827316ff168e94f
437key = db4f3e5e3795cc09a073fa6a81e5a6bc
438msg = 6162636465666768
439result = invalid
440# The ciphertext in this test vector is the message encrypted with an invalid or
441# unexpected padding. This allows to find implementations that are not properly
442# checking the padding during decryption.
443
444# tcId = 47
445# ANSI X.923 padding
446ct = fbcbdfdaaf17980be939c0b243266ecbd3909bb3457e5b946ff709be9a2ed84d
447iv = 23468aa734f5f0f19827316ff168e94f
448key = db4f3e5e3795cc09a073fa6a81e5a6bc
449msg = 30313233343536373839414243444546
450result = invalid
451# The ciphertext in this test vector is the message encrypted with an invalid or
452# unexpected padding. This allows to find implementations that are not properly
453# checking the padding during decryption.
454
455# tcId = 48
456# ANSI X.923 padding
457ct = fbcbdfdaaf17980be939c0b243266ecbc5ab3ab637166a6a067b82b5672c08f8
458iv = 23468aa734f5f0f19827316ff168e94f
459key = db4f3e5e3795cc09a073fa6a81e5a6bc
460msg = 3031323334353637383941424344454647
461result = invalid
462# The ciphertext in this test vector is the message encrypted with an invalid or
463# unexpected padding. This allows to find implementations that are not properly
464# checking the padding during decryption.
465
466# tcId = 49
467# ISO 10126 padding
468ct = ba0726bd6dea11382b19c842e2ddead2
469iv = 23468aa734f5f0f19827316ff168e94f
470key = db4f3e5e3795cc09a073fa6a81e5a6bc
471msg =
472result = invalid
473# The ciphertext in this test vector is the message encrypted with an invalid or
474# unexpected padding. This allows to find implementations that are not properly
475# checking the padding during decryption.
476
477# tcId = 50
478# ISO 10126 padding
479ct = 22f18b85c729903744fb8db5ed2840d4
480iv = 23468aa734f5f0f19827316ff168e94f
481key = db4f3e5e3795cc09a073fa6a81e5a6bc
482msg = 6162636465666768
483result = invalid
484# The ciphertext in this test vector is the message encrypted with an invalid or
485# unexpected padding. This allows to find implementations that are not properly
486# checking the padding during decryption.
487
488# tcId = 51
489# ISO 10126 padding
490ct = fbcbdfdaaf17980be939c0b243266ecb6b103fbe43519a18880b7e6d9153e1c2
491iv = 23468aa734f5f0f19827316ff168e94f
492key = db4f3e5e3795cc09a073fa6a81e5a6bc
493msg = 30313233343536373839414243444546
494result = invalid
495# The ciphertext in this test vector is the message encrypted with an invalid or
496# unexpected padding. This allows to find implementations that are not properly
497# checking the padding during decryption.
498
499# tcId = 52
500# ISO 10126 padding
501ct = fbcbdfdaaf17980be939c0b243266ecbe00bdb15b8a61285447498700d35e0c6
502iv = 23468aa734f5f0f19827316ff168e94f
503key = db4f3e5e3795cc09a073fa6a81e5a6bc
504msg = 3031323334353637383941424344454647
505result = invalid
506# The ciphertext in this test vector is the message encrypted with an invalid or
507# unexpected padding. This allows to find implementations that are not properly
508# checking the padding during decryption.
509
510# tcId = 53
511# padding longer than message
512ct = d17ccbb26f0aa95f397b20063547349b
513iv = 23468aa734f5f0f19827316ff168e94f
514key = db4f3e5e3795cc09a073fa6a81e5a6bc
515msg =
516result = invalid
517# The ciphertext in this test vector is the message encrypted with an invalid or
518# unexpected padding. This allows to find implementations that are not properly
519# checking the padding during decryption.
520
521# tcId = 54
522# padding longer than message
523ct = 2056dfa339fa00be6836999411a98c76
524iv = 23468aa734f5f0f19827316ff168e94f
525key = db4f3e5e3795cc09a073fa6a81e5a6bc
526msg = 6162636465666768
527result = invalid
528# The ciphertext in this test vector is the message encrypted with an invalid or
529# unexpected padding. This allows to find implementations that are not properly
530# checking the padding during decryption.
531
532# tcId = 55
533# padding longer than message
534ct = f92628f6418d8d9c9afac233861b3835
535iv = 23468aa734f5f0f19827316ff168e94f
536key = db4f3e5e3795cc09a073fa6a81e5a6bc
537msg = 303132333435363738396162636465
538result = invalid
539# The ciphertext in this test vector is the message encrypted with an invalid or
540# unexpected padding. This allows to find implementations that are not properly
541# checking the padding during decryption.
542
543# tcId = 56
544# padding longer than message
545ct = fbcbdfdaaf17980be939c0b243266ecbc0c41093b495a7d5a080d976493fd0e7
546iv = 23468aa734f5f0f19827316ff168e94f
547key = db4f3e5e3795cc09a073fa6a81e5a6bc
548msg = 30313233343536373839414243444546
549result = invalid
550# The ciphertext in this test vector is the message encrypted with an invalid or
551# unexpected padding. This allows to find implementations that are not properly
552# checking the padding during decryption.
553
554# tcId = 57
555# padding longer than message
556ct = fbcbdfdaaf17980be939c0b243266ecb6770446a5ccaa26f7d4f970cc5834eba
557iv = 23468aa734f5f0f19827316ff168e94f
558key = db4f3e5e3795cc09a073fa6a81e5a6bc
559msg = 3031323334353637383941424344454647
560result = invalid
561# The ciphertext in this test vector is the message encrypted with an invalid or
562# unexpected padding. This allows to find implementations that are not properly
563# checking the padding during decryption.
564
565# tcId = 58
566#  invalid padding
567ct = 4ff3e623fdd432608c183f40864177af
568iv = 23468aa734f5f0f19827316ff168e94f
569key = db4f3e5e3795cc09a073fa6a81e5a6bc
570msg =
571result = invalid
572# The ciphertext in this test vector is the message encrypted with an invalid or
573# unexpected padding. This allows to find implementations that are not properly
574# checking the padding during decryption.
575
576# tcId = 59
577#  invalid padding
578ct = 6a1ef1e6ae6a788777aabd9ccf3cf43a
579iv = 23468aa734f5f0f19827316ff168e94f
580key = db4f3e5e3795cc09a073fa6a81e5a6bc
581msg = 6162636465666768
582result = invalid
583# The ciphertext in this test vector is the message encrypted with an invalid or
584# unexpected padding. This allows to find implementations that are not properly
585# checking the padding during decryption.
586
587# tcId = 60
588#  invalid padding
589ct = fbcbdfdaaf17980be939c0b243266ecbee1345cd513161b241f4ae2799b0327f
590iv = 23468aa734f5f0f19827316ff168e94f
591key = db4f3e5e3795cc09a073fa6a81e5a6bc
592msg = 30313233343536373839414243444546
593result = invalid
594# The ciphertext in this test vector is the message encrypted with an invalid or
595# unexpected padding. This allows to find implementations that are not properly
596# checking the padding during decryption.
597
598# tcId = 61
599#  invalid padding
600ct = fbcbdfdaaf17980be939c0b243266ecbe0d539beef6f2d4f7cda4fd9f4f05570
601iv = 23468aa734f5f0f19827316ff168e94f
602key = db4f3e5e3795cc09a073fa6a81e5a6bc
603msg = 3031323334353637383941424344454647
604result = invalid
605# The ciphertext in this test vector is the message encrypted with an invalid or
606# unexpected padding. This allows to find implementations that are not properly
607# checking the padding during decryption.
608
609[ivSize = 128]
610[keySize = 192]
611
612# tcId = 62
613# empty message
614ct = ff0c315873b4b1872abef2353b792ef0
615iv = db20f9a6f4d6b4e478f1a4b9d4051d34
616key = 3d6bf9edae6d881eade0ff8c7076a4835b71320c1f36b631
617msg =
618result = valid
619
620# tcId = 63
621# message size divisible by block size
622ct = 7dbd573e4db58a318edfe29f199d8cda538a49f36486337c2711163e55fd5d0b
623iv = 69a76dc4da64d89c580eb75ae975ec39
624key = f4bfa5aa4f0f4d62cf736cd2969c43d580fdb92f2753bedb
625msg = 0e239f239705b282ce2200fe20de1165
626result = valid
627
628# tcId = 64
629# message size divisible by block size
630ct = bd0258909e5b72438d95ca4b29c8a79c6228fd06a3b2fa06f7659654c7b24610f23f2fb16313b7d3614cb0cd16fabb8e
631iv = 6525667350930fb945dd1895a3abfcd1
632key = 9d11abc1fcb248a436598e695be12c3c2ed90a18ba09d62c
633msg = aa5182cae2a8fb068c0b3fb2be3e57ae523d13dffd1a944587707c2b67447f3f
634result = valid
635
636# tcId = 65
637# message size divisible by block size
638ct = 6cbeacf8de25d7dd9dcdc087bf2f80873b1eb335400589076f8d2bf81e294c5d72b85eb8ac9558b0de9e9fbee4b18716e5220c507fbb9d319a08f67816765ca6
639iv = 3943d8fddd5bb2a59772df31a31a8fff
640key = 7e41d83181659a2c38da5ead353cdb04c2b4d4a3cfe58e25
641msg = 8a32d11c7a11aa72e13381632b1310f4fd90fc209a6a350e61c069a561871214f9c04fc1df7354cbe4d8d639c525d324
642result = valid
643
644# tcId = 66
645# small plaintext size
646ct = 519925956d32e4fa350b1144f088e4e8
647iv = 1379d48493f743e6a149deb3b9bab31e
648key = 915429743435c28997a33b33b6574a953d81dae0e7032e6a
649msg = 58
650result = valid
651
652# tcId = 67
653# small plaintext size
654ct = bfb90aa7de1bdeed5bdc5703bdfd9630
655iv = 48c7f44b43a1279d820733e6cb30617a
656key = f0c288ba26b284f9fb321b444a6517b3cdda1a799d55fdff
657msg = 0f7e
658result = valid
659
660# tcId = 68
661# small plaintext size
662ct = b1a25816908c086f26037d10b7be9ad9
663iv = 2c287b38cc30c8c351b087b91a6a97ba
664key = 6b55e4d4fd6847a80a6bfb0dcc0aa93f9fd797fc5c50292e
665msg = 33f530
666result = valid
667
668# tcId = 69
669# small plaintext size
670ct = 74dbdecbfa94b71d2d6ef03200c7d095
671iv = 61f6060919c9c09ef06be28f39c344aa
672key = 1eb21a9e995a8e45c9e71ecbd6fe615b3e0318007c64b644
673msg = 3aa73c48
674result = valid
675
676# tcId = 70
677# small plaintext size
678ct = 10c860aaee23c3c3c1b9306b189dd80d
679iv = 7682005907bfef3ce00196a17ad2246d
680key = 710e2d5d4a9f0bc7e50796655e046a18cc5769d7764355da
681msg = 7e4c690a88
682result = valid
683
684# tcId = 71
685# small plaintext size
686ct = 673dcd444386930a0cc577fab4501e5c
687iv = 1f6c912997ce007701e5fdf407c6b421
688key = d8c09ea400779b63e774bdacd0cb7b5dd6f736ca23d52acf
689msg = e9520280973b
690result = valid
691
692# tcId = 72
693# small plaintext size
694ct = 059e5f72a81d8820add8eae8fabcdd42
695iv = 5854033ae50de090678432781a168b6c
696key = 8e67e9a0863b55bed408866f1cbc05357abe3f9d79f406f2
697msg = 4880b412287a0b
698result = valid
699
700# tcId = 73
701# small plaintext size
702ct = c412159fd5ae20d771b7d2e734124d6a
703iv = 003b2d86d8b636c58cf664565572d5e6
704key = 28d8da67806410e5565bcc5a9d7ab9fb357413fa0158378c
705msg = 004e3f4a4e6db955
706result = valid
707
708# tcId = 74
709# small plaintext size
710ct = 4aba571c2c5ab9a6140f16efc68c8ec1
711iv = 3f22b50f888ab9424ba871d15aac55b7
712key = dc968dd89fd602bb7eca6f3a8a13e4f59c08d02a514b1934
713msg = 41a25354efeb1bc3b8
714result = valid
715
716# tcId = 75
717# small plaintext size
718ct = 66d1b9152a8cd1a88eab341c775070b4
719iv = e4b8dde04b49fa6b88bfccd8d70c21d1
720key = 7658951c0f620d82afd92756cc2d7983b79da3e56fdd1b78
721msg = f0e82fb5c5666f4af49f
722result = valid
723
724# tcId = 76
725# small plaintext size
726ct = d9377788e2881a48f9347786db7df51f
727iv = 7753f616cd8796c9b8a3bbfbe6cb1e7f
728key = d9574c3a221b986690931faac5258d9d3c52362b2cb9b054
729msg = 178ea8404ba54ee4e4522c
730result = valid
731
732# tcId = 77
733# small plaintext size
734ct = db825f4434ea3bb53576fa7385fb7dfe
735iv = eae9ee19ccb7f8b087675709c4d35f73
736key = 704409bab28085c44981f28f75dd143a4f747106f63f262e
737msg = cda5709e7f115624e74ab031
738result = valid
739
740# tcId = 78
741# small plaintext size
742ct = 3e7287df2a5ed9de4d817e352bd47ea7
743iv = a6aaff339a729d30a7ec1328db36d23e
744key = d8d06ef6a53bbff5c8f12d791b8f4c67e574bf440736d1cc
745msg = a1171eae1979f48345dd9485a0
746result = valid
747
748# tcId = 79
749# small plaintext size
750ct = 17c3ade4b469ae614760039a8fa6250e
751iv = 92fda71e88c70d18ed71b992735a2150
752key = 71129e781613f39d9ac39fbde2628b44c250c14deb5ef9e2
753msg = 967593cc64bcbf7f3c58d04cb82b
754result = valid
755
756# tcId = 80
757# small plaintext size
758ct = 9cafecff2a28d02f732573f65a2cadca
759iv = ed6596c86b98123ad2f3c573e974d051
760key = 850fc859e9f7b89a367611dee6698f33962d8245ca8dc331
761msg = 586f4f171af116519061a8e0e77940
762result = valid
763
764# tcId = 81
765# plaintext size > 16
766ct = 401ad889bdb9d38816c782e00b168ccccde9bf75f4be868ceb91237e8b37b750
767iv = c45b52a240eba3bdde5dfd57f3d474fb
768key = cfd3f68873d81a27d2bfce876c79f6e609074dec39e34614
769msg = b1973cb25aa87ef9d1a8888b0a0f5c04c6
770result = valid
771
772# tcId = 82
773# plaintext size > 16
774ct = 455d516e87851e6c894578a0f7126e0acbc7cfbb1d80296647ab89a79dfa6f71
775iv = 07ece5fe02266e073499fd4d66929034
776key = b7f165bced1613da5e747fdf9255832d30c07f2deeb5a326
777msg = 289647ea8d0ff31375a82aa1c620903048bb1d0e
778result = valid
779
780# tcId = 83
781# plaintext size > 16
782ct = cbf541330a5a9bda24984976b0cf96ba08ef521fa2cdb3df839128570e222ac4
783iv = d799157bc1f77c182027be918b30783a
784key = 9bbe6e004fb260dadb02b68b78954f1da5e6a2d02e0aeefe
785msg = 665423092ce95b927e98b8082030f58e33f3ec1b0c29532c2f421855f00f97
786result = valid
787
788# tcId = 84
789# plaintext size > 16
790ct = 03225f08592efca14ad8ecf822465e8be4157465d0be150dd3d645b6fef1b19ca7bbaa5940b2a7895fa2b0ee55b0d4ec
791iv = fdf97645e4192ba84728bbf6683f79de
792key = 1381fbd5e79045d40f29790fc1a436c95b040a046ebf0b0f
793msg = d575dce596dd0a2cd1c18dab7eb0948fafb8669969a48b6314493bfb8daf8acacd51382f9bb5b357
794result = valid
795
796# tcId = 85
797# plaintext size > 16
798ct = 27ad00313f328f0d3e6c3238ab560cb7243a9f54f7dff79b5a7a879439993d458017f09e8d3f694098bc19e61fe54085138664abb51a5b328cf2c9ce5d59726fff5e1b7553c143d9e0493c51cab23ff2ecdad91bd72bb12b32f3b611f9a4225d
799iv = 059685f59247eea5d3f2a1532cb9d6b2
800key = 1bb4ed0e8435e20729f48c1b7e3af6e69e4cebf0731131cf
801msg = 6d29dab6a0568c961ab3c825e0d89940cef06c63ade7e557cd3e92792eaf23c8cd5a0f029c63b1cdce4754ccfad7a73c7c9e50ffe081e9136f5e9a424077339de12ea43572afe1b034e833e5887763aa
802result = valid
803
804# tcId = 86
805# zero padding
806ct = 2c010faa25c68c3b30b8c1491c316d5f
807iv = a3fe6f76e8f582830bbe83574a7bb729
808key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
809msg =
810result = invalid
811# The ciphertext in this test vector is the message encrypted with an invalid or
812# unexpected padding. This allows to find implementations that are not properly
813# checking the padding during decryption.
814
815# tcId = 87
816# zero padding
817ct = 818454d433154a8e00e8f590b8a1c38c
818iv = a3fe6f76e8f582830bbe83574a7bb729
819key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
820msg = 6162636465666768
821result = invalid
822# The ciphertext in this test vector is the message encrypted with an invalid or
823# unexpected padding. This allows to find implementations that are not properly
824# checking the padding during decryption.
825
826# tcId = 88
827# zero padding
828ct = 0a7423fae3f4c8d4633f839d36f2e9ff
829iv = a3fe6f76e8f582830bbe83574a7bb729
830key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
831msg = 303132333435363738396162636465
832result = invalid
833# The ciphertext in this test vector is the message encrypted with an invalid or
834# unexpected padding. This allows to find implementations that are not properly
835# checking the padding during decryption.
836
837# tcId = 89
838# zero padding
839ct = a7cfcdabcc5a2736a2708c1cb0b61432e83f6e522c371e6e71bde539595b70b7
840iv = a3fe6f76e8f582830bbe83574a7bb729
841key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
842msg = 30313233343536373839414243444546
843result = invalid
844# The ciphertext in this test vector is the message encrypted with an invalid or
845# unexpected padding. This allows to find implementations that are not properly
846# checking the padding during decryption.
847
848# tcId = 90
849# zero padding
850ct = a7cfcdabcc5a2736a2708c1cb0b6143254d15f47701fa54f5957828f386e1d97
851iv = a3fe6f76e8f582830bbe83574a7bb729
852key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
853msg = 3031323334353637383941424344454647
854result = invalid
855# The ciphertext in this test vector is the message encrypted with an invalid or
856# unexpected padding. This allows to find implementations that are not properly
857# checking the padding during decryption.
858
859# tcId = 91
860# padding with 0xff
861ct = 6ded36cc7603e514014dfb7199900676
862iv = a3fe6f76e8f582830bbe83574a7bb729
863key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
864msg =
865result = invalid
866# The ciphertext in this test vector is the message encrypted with an invalid or
867# unexpected padding. This allows to find implementations that are not properly
868# checking the padding during decryption.
869
870# tcId = 92
871# padding with 0xff
872ct = 839f772f8e5f50afdc02f954094869fe
873iv = a3fe6f76e8f582830bbe83574a7bb729
874key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
875msg = 6162636465666768
876result = invalid
877# The ciphertext in this test vector is the message encrypted with an invalid or
878# unexpected padding. This allows to find implementations that are not properly
879# checking the padding during decryption.
880
881# tcId = 93
882# padding with 0xff
883ct = eefe3553c099c187929b287e54f95726
884iv = a3fe6f76e8f582830bbe83574a7bb729
885key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
886msg = 303132333435363738396162636465
887result = invalid
888# The ciphertext in this test vector is the message encrypted with an invalid or
889# unexpected padding. This allows to find implementations that are not properly
890# checking the padding during decryption.
891
892# tcId = 94
893# padding with 0xff
894ct = a7cfcdabcc5a2736a2708c1cb0b61432d0531a2641d40467353542d79ce20ea8
895iv = a3fe6f76e8f582830bbe83574a7bb729
896key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
897msg = 30313233343536373839414243444546
898result = invalid
899# The ciphertext in this test vector is the message encrypted with an invalid or
900# unexpected padding. This allows to find implementations that are not properly
901# checking the padding during decryption.
902
903# tcId = 95
904# padding with 0xff
905ct = a7cfcdabcc5a2736a2708c1cb0b61432aaf08a090ecf66167ba5958100be7950
906iv = a3fe6f76e8f582830bbe83574a7bb729
907key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
908msg = 3031323334353637383941424344454647
909result = invalid
910# The ciphertext in this test vector is the message encrypted with an invalid or
911# unexpected padding. This allows to find implementations that are not properly
912# checking the padding during decryption.
913
914# tcId = 96
915# bit padding
916ct = c0e402c8bbdda18c8ddd86470bd4b244
917iv = a3fe6f76e8f582830bbe83574a7bb729
918key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
919msg =
920result = invalid
921# The ciphertext in this test vector is the message encrypted with an invalid or
922# unexpected padding. This allows to find implementations that are not properly
923# checking the padding during decryption.
924
925# tcId = 97
926# bit padding
927ct = dc185d4572565e01131e471ec4c48125
928iv = a3fe6f76e8f582830bbe83574a7bb729
929key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
930msg = 6162636465666768
931result = invalid
932# The ciphertext in this test vector is the message encrypted with an invalid or
933# unexpected padding. This allows to find implementations that are not properly
934# checking the padding during decryption.
935
936# tcId = 98
937# bit padding
938ct = 3ad1ddf3c3b320398785e6ec6544e9a2
939iv = a3fe6f76e8f582830bbe83574a7bb729
940key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
941msg = 303132333435363738396162636465
942result = invalid
943# The ciphertext in this test vector is the message encrypted with an invalid or
944# unexpected padding. This allows to find implementations that are not properly
945# checking the padding during decryption.
946
947# tcId = 99
948# bit padding
949ct = a7cfcdabcc5a2736a2708c1cb0b614325876f90cfbbdbcd85e8252d37c44c638
950iv = a3fe6f76e8f582830bbe83574a7bb729
951key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
952msg = 30313233343536373839414243444546
953result = invalid
954# The ciphertext in this test vector is the message encrypted with an invalid or
955# unexpected padding. This allows to find implementations that are not properly
956# checking the padding during decryption.
957
958# tcId = 100
959# bit padding
960ct = a7cfcdabcc5a2736a2708c1cb0b61432d18f57216b0e6426d911998a0e44156b
961iv = a3fe6f76e8f582830bbe83574a7bb729
962key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
963msg = 3031323334353637383941424344454647
964result = invalid
965# The ciphertext in this test vector is the message encrypted with an invalid or
966# unexpected padding. This allows to find implementations that are not properly
967# checking the padding during decryption.
968
969# tcId = 101
970# padding longer than 1 block
971ct = f1605abb4e6628347c616da350fe243043a8d7b6aea244ca013f45241d802213
972iv = a3fe6f76e8f582830bbe83574a7bb729
973key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
974msg =
975result = invalid
976# The ciphertext in this test vector is the message encrypted with an invalid or
977# unexpected padding. This allows to find implementations that are not properly
978# checking the padding during decryption.
979
980# tcId = 102
981# padding longer than 1 block
982ct = a5f027fb9514ec8844534d452c940feb2c1807f57ed628156cf753f2ab698356
983iv = a3fe6f76e8f582830bbe83574a7bb729
984key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
985msg = 6162636465666768
986result = invalid
987# The ciphertext in this test vector is the message encrypted with an invalid or
988# unexpected padding. This allows to find implementations that are not properly
989# checking the padding during decryption.
990
991# tcId = 103
992# padding longer than 1 block
993ct = f346fbc9744d723c42bbb2a4c934cdd4f1019e58c226cb2491fed621271a38f3
994iv = a3fe6f76e8f582830bbe83574a7bb729
995key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
996msg = 303132333435363738396162636465
997result = invalid
998# The ciphertext in this test vector is the message encrypted with an invalid or
999# unexpected padding. This allows to find implementations that are not properly
1000# checking the padding during decryption.
1001
1002# tcId = 104
1003# padding longer than 1 block
1004ct = a7cfcdabcc5a2736a2708c1cb0b6143263eb325d36e13aa1d3dd1d7e071700104c7eb3e22e0859aa06296bc3194bb909
1005iv = a3fe6f76e8f582830bbe83574a7bb729
1006key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1007msg = 30313233343536373839414243444546
1008result = invalid
1009# The ciphertext in this test vector is the message encrypted with an invalid or
1010# unexpected padding. This allows to find implementations that are not properly
1011# checking the padding during decryption.
1012
1013# tcId = 105
1014# padding longer than 1 block
1015ct = a7cfcdabcc5a2736a2708c1cb0b61432219485d41584bd110a6d7a9cad472815d93921c48d4bcb509fdf2e63d7627c37
1016iv = a3fe6f76e8f582830bbe83574a7bb729
1017key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1018msg = 3031323334353637383941424344454647
1019result = invalid
1020# The ciphertext in this test vector is the message encrypted with an invalid or
1021# unexpected padding. This allows to find implementations that are not properly
1022# checking the padding during decryption.
1023
1024# tcId = 106
1025# ANSI X.923 padding
1026ct = 215571a18a70140f3a0fd4c1b2dd6316
1027iv = a3fe6f76e8f582830bbe83574a7bb729
1028key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1029msg =
1030result = invalid
1031# The ciphertext in this test vector is the message encrypted with an invalid or
1032# unexpected padding. This allows to find implementations that are not properly
1033# checking the padding during decryption.
1034
1035# tcId = 107
1036# ANSI X.923 padding
1037ct = 2529985ec0ec3cf4bd22746e00d7bdc6
1038iv = a3fe6f76e8f582830bbe83574a7bb729
1039key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1040msg = 6162636465666768
1041result = invalid
1042# The ciphertext in this test vector is the message encrypted with an invalid or
1043# unexpected padding. This allows to find implementations that are not properly
1044# checking the padding during decryption.
1045
1046# tcId = 108
1047# ANSI X.923 padding
1048ct = a7cfcdabcc5a2736a2708c1cb0b614329a8058657ac4a150e995cf83efccf051
1049iv = a3fe6f76e8f582830bbe83574a7bb729
1050key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1051msg = 30313233343536373839414243444546
1052result = invalid
1053# The ciphertext in this test vector is the message encrypted with an invalid or
1054# unexpected padding. This allows to find implementations that are not properly
1055# checking the padding during decryption.
1056
1057# tcId = 109
1058# ANSI X.923 padding
1059ct = a7cfcdabcc5a2736a2708c1cb0b614328a068626780ba600f880bd5323f8ac15
1060iv = a3fe6f76e8f582830bbe83574a7bb729
1061key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1062msg = 3031323334353637383941424344454647
1063result = invalid
1064# The ciphertext in this test vector is the message encrypted with an invalid or
1065# unexpected padding. This allows to find implementations that are not properly
1066# checking the padding during decryption.
1067
1068# tcId = 110
1069# ISO 10126 padding
1070ct = 13e75f9ffe2afa81b9a2e7faf74aab6d
1071iv = a3fe6f76e8f582830bbe83574a7bb729
1072key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1073msg =
1074result = invalid
1075# The ciphertext in this test vector is the message encrypted with an invalid or
1076# unexpected padding. This allows to find implementations that are not properly
1077# checking the padding during decryption.
1078
1079# tcId = 111
1080# ISO 10126 padding
1081ct = a382197fe491f5c3f91b629dc47c3d58
1082iv = a3fe6f76e8f582830bbe83574a7bb729
1083key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1084msg = 6162636465666768
1085result = invalid
1086# The ciphertext in this test vector is the message encrypted with an invalid or
1087# unexpected padding. This allows to find implementations that are not properly
1088# checking the padding during decryption.
1089
1090# tcId = 112
1091# ISO 10126 padding
1092ct = a7cfcdabcc5a2736a2708c1cb0b614320b842e5d6e32660263ff814a0277659f
1093iv = a3fe6f76e8f582830bbe83574a7bb729
1094key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1095msg = 30313233343536373839414243444546
1096result = invalid
1097# The ciphertext in this test vector is the message encrypted with an invalid or
1098# unexpected padding. This allows to find implementations that are not properly
1099# checking the padding during decryption.
1100
1101# tcId = 113
1102# ISO 10126 padding
1103ct = a7cfcdabcc5a2736a2708c1cb0b614321d2f736515cfe17921800eb392e0139d
1104iv = a3fe6f76e8f582830bbe83574a7bb729
1105key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1106msg = 3031323334353637383941424344454647
1107result = invalid
1108# The ciphertext in this test vector is the message encrypted with an invalid or
1109# unexpected padding. This allows to find implementations that are not properly
1110# checking the padding during decryption.
1111
1112# tcId = 114
1113# padding longer than message
1114ct = f1605abb4e6628347c616da350fe2430
1115iv = a3fe6f76e8f582830bbe83574a7bb729
1116key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1117msg =
1118result = invalid
1119# The ciphertext in this test vector is the message encrypted with an invalid or
1120# unexpected padding. This allows to find implementations that are not properly
1121# checking the padding during decryption.
1122
1123# tcId = 115
1124# padding longer than message
1125ct = b3602ff0f797cbbdde35105d27e55b94
1126iv = a3fe6f76e8f582830bbe83574a7bb729
1127key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1128msg = 6162636465666768
1129result = invalid
1130# The ciphertext in this test vector is the message encrypted with an invalid or
1131# unexpected padding. This allows to find implementations that are not properly
1132# checking the padding during decryption.
1133
1134# tcId = 116
1135# padding longer than message
1136ct = 0334c1bc34b597f60a639e74d8b45c4e
1137iv = a3fe6f76e8f582830bbe83574a7bb729
1138key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1139msg = 303132333435363738396162636465
1140result = invalid
1141# The ciphertext in this test vector is the message encrypted with an invalid or
1142# unexpected padding. This allows to find implementations that are not properly
1143# checking the padding during decryption.
1144
1145# tcId = 117
1146# padding longer than message
1147ct = a7cfcdabcc5a2736a2708c1cb0b61432c3f9fe42d9715035bcda97d27405ced7
1148iv = a3fe6f76e8f582830bbe83574a7bb729
1149key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1150msg = 30313233343536373839414243444546
1151result = invalid
1152# The ciphertext in this test vector is the message encrypted with an invalid or
1153# unexpected padding. This allows to find implementations that are not properly
1154# checking the padding during decryption.
1155
1156# tcId = 118
1157# padding longer than message
1158ct = a7cfcdabcc5a2736a2708c1cb0b61432362b014a9abdaf25ae1f6dfb99d03d9d
1159iv = a3fe6f76e8f582830bbe83574a7bb729
1160key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1161msg = 3031323334353637383941424344454647
1162result = invalid
1163# The ciphertext in this test vector is the message encrypted with an invalid or
1164# unexpected padding. This allows to find implementations that are not properly
1165# checking the padding during decryption.
1166
1167# tcId = 119
1168#  invalid padding
1169ct = 97ab405b86c388f144cf74fbb9358493
1170iv = a3fe6f76e8f582830bbe83574a7bb729
1171key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1172msg =
1173result = invalid
1174# The ciphertext in this test vector is the message encrypted with an invalid or
1175# unexpected padding. This allows to find implementations that are not properly
1176# checking the padding during decryption.
1177
1178# tcId = 120
1179#  invalid padding
1180ct = 691f6009802f0fb4920928db7eca1349
1181iv = a3fe6f76e8f582830bbe83574a7bb729
1182key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1183msg = 6162636465666768
1184result = invalid
1185# The ciphertext in this test vector is the message encrypted with an invalid or
1186# unexpected padding. This allows to find implementations that are not properly
1187# checking the padding during decryption.
1188
1189# tcId = 121
1190#  invalid padding
1191ct = a7cfcdabcc5a2736a2708c1cb0b61432a99fc96a6fa0c9fcb18de1672d74914d
1192iv = a3fe6f76e8f582830bbe83574a7bb729
1193key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1194msg = 30313233343536373839414243444546
1195result = invalid
1196# The ciphertext in this test vector is the message encrypted with an invalid or
1197# unexpected padding. This allows to find implementations that are not properly
1198# checking the padding during decryption.
1199
1200# tcId = 122
1201#  invalid padding
1202ct = a7cfcdabcc5a2736a2708c1cb0b61432dd1bb2e98102322fb1aa92c979d4c7c3
1203iv = a3fe6f76e8f582830bbe83574a7bb729
1204key = 9e20311eaf2eaf3e3a04bc52564e67313c84940a2996e3f2
1205msg = 3031323334353637383941424344454647
1206result = invalid
1207# The ciphertext in this test vector is the message encrypted with an invalid or
1208# unexpected padding. This allows to find implementations that are not properly
1209# checking the padding during decryption.
1210
1211[ivSize = 128]
1212[keySize = 256]
1213
1214# tcId = 123
1215# empty message
1216ct = e7c166554d1bb32792c981fa674cc4d8
1217iv = eb38ef61717e1324ae064e86f1c3e797
1218key = 7bf9e536b66a215c22233fe2daaa743a898b9acb9f7802de70b40e3d6e43ef97
1219msg =
1220result = valid
1221
1222# tcId = 124
1223# message size divisible by block size
1224ct = 299295be47e9f5441fe83a7a811c4aeb2650333e681e69fa6b767d28a6ccf282
1225iv = 9ec7b863ac845cad5e4673da21f5b6a9
1226key = 612e837843ceae7f61d49625faa7e7494f9253e20cb3adcea686512b043936cd
1227msg = cc37fae15f745a2f40e2c8b192f2b38d
1228result = valid
1229
1230# tcId = 125
1231# message size divisible by block size
1232ct = a615a39ff8f59f82cf72ed13e1b01e32459700561be112412961365c7a0b58aa7a16d68c065e77ebe504999051476bd7
1233iv = e70d83a77a2ce722ac214c00837acedf
1234key = 96e1e4896fb2cd05f133a6a100bc5609a7ac3ca6d81721e922dadd69ad07a892
1235msg = 91a17e4dfcc3166a1add26ff0e7c12056e8a654f28a6de24f4ba739ceb5b5b18
1236result = valid
1237
1238# tcId = 126
1239# message size divisible by block size
1240ct = ed3ed8ecdbabc0a8c06259e913f3ab9a1f1dc6d05e5dfdd9c80e1008f3423064d540681291bbd3e159820fee3ff190a68fe506d8ab9e62c8e7b3816093336dbc
1241iv = bd003c0a9d804c29f053a77cb380cb47
1242key = 649e373e681ef52e3c10ac265484750932a9918f28fb824f7cb50adab39781fe
1243msg = 39b447bd3a01983c1cb761b456d69000948ceb870562a536126a0d18a8e7e49b16de8fe672f13d0808d8b7d957899917
1244result = valid
1245
1246# tcId = 127
1247# small plaintext size
1248ct = 42c0b89a706ed2606cd94f9cb361fa51
1249iv = 014d2e13dfbcb969ba3bb91442d52eca
1250key = e754076ceab3fdaf4f9bcab7d4f0df0cbbafbc87731b8f9b7cd2166472e8eebc
1251msg = 40
1252result = valid
1253
1254# tcId = 128
1255# small plaintext size
1256ct = b90c326b72eb222ddb4dae47f2bc223c
1257iv = fae3e2054113f6b3b904aadbfe59655c
1258key = ea3b016bdd387dd64d837c71683808f335dbdc53598a4ea8c5f952473fafaf5f
1259msg = 6601
1260result = valid
1261
1262# tcId = 129
1263# small plaintext size
1264ct = 567c45c5e6d570bef583d21cac43757d
1265iv = 203cd3e0068e43d38b6f2e48a188f252
1266key = 73d4709637857dafab6ad8b2b0a51b06524717fedf100296644f7cfdaae1805b
1267msg = f1d300
1268result = valid
1269
1270# tcId = 130
1271# small plaintext size
1272ct = c45afe62fc9351ad0fc9b03bc2f3a91f
1273iv = abcf220eede012279c3a2d33295ff273
1274key = d5c81b399d4c0d1583a13da56de6d2dc45a66e7b47c24ab1192e246dc961dd77
1275msg = 2ae63cbf
1276result = valid
1277
1278# tcId = 131
1279# small plaintext size
1280ct = 281fa533d0740cc6cdf94dd1a5f7402d
1281iv = 01373953578902909ae4f6cb0a72587c
1282key = 2521203fa0dddf59d837b2830f87b1aa61f958155df3ca4d1df2457cb4284dc8
1283msg = af3a015ea1
1284result = valid
1285
1286# tcId = 132
1287# small plaintext size
1288ct = 3f3f39697bd7e88d85a14132be1cbc48
1289iv = 3fb0d5ecd06c71150748b599595833cb
1290key = 665a02bc265a66d01775091da56726b6668bfd903cb7af66fb1b78a8a062e43c
1291msg = 3f56935def3f
1292result = valid
1293
1294# tcId = 133
1295# small plaintext size
1296ct = 379990d91557614836381d5026fa04a0
1297iv = 27a2db6114ece34fb6c23302d9ba07c6
1298key = facd75b22221380047305bc981f570e2a1af38928ea7e2059e3af5fc6b82b493
1299msg = 57bb86beed156f
1300result = valid
1301
1302# tcId = 134
1303# small plaintext size
1304ct = 7ecefe24caa78a68f4031d40fdb9a43a
1305iv = 9b2b631e3f24bdc814a14abb3416059e
1306key = 505aa98819809ef63b9a368a1e8bc2e922da45b03ce02d9a7966b15006dba2d5
1307msg = 2e4e7ef728fe11af
1308result = valid
1309
1310# tcId = 135
1311# small plaintext size
1312ct = ffe4ec8baf4af40ab2e7f4d6193fae9c
1313iv = 92cfc4eb146b18b73fc76483fc5e1229
1314key = f942093842808ba47f64e427f7351dde6b9546e66de4e7d60aa6f328182712cf
1315msg = 852a21d92848e627c7
1316result = valid
1317
1318# tcId = 136
1319# small plaintext size
1320ct = ef96215e7950e7be8aae78b9ec8aaf39
1321iv = 4ceed8dcb75b6259dad737bdef96f099
1322key = 64be162b39c6e5f1fed9c32d9f674d9a8cde6eaa2443214d86bd4a1fb53b81b4
1323msg = 195a3b292f93baff0a2c
1324result = valid
1325
1326# tcId = 137
1327# small plaintext size
1328ct = 4ed0eac75b05868078303875f82fb4f0
1329iv = 2d4cead3f1120a2b4b59419d04951e20
1330key = b259a555d44b8a20c5489e2f38392ddaa6be9e35b9833b67e1b5fdf6cb3e4c6c
1331msg = afd73117330c6e8528a6e4
1332result = valid
1333
1334# tcId = 138
1335# small plaintext size
1336ct = f4d298caea7c390fc8c7f558f584f852
1337iv = a10392634143c2a3332fa0fb3f72200a
1338key = 2c6fc62daa77ba8c6881b3dd6989898fef646663cc7b0a3db8228a707b85f2dc
1339msg = 0ff54d6b6759120c2e8a51e3
1340result = valid
1341
1342# tcId = 139
1343# small plaintext size
1344ct = 5e1c00e2ec829f92b87c6adf5c25262d
1345iv = 38b916a7ad3a9251ae3bd8865ca3a688
1346key = abab815d51df29f740e4e2079fb798e0152836e6ab57d1536ae8929e52c06eb8
1347msg = f0058d412a104e53d820b95a7f
1348result = valid
1349
1350# tcId = 140
1351# small plaintext size
1352ct = bf3a04ddb2dbfe7c6dc9e15aa67be25d
1353iv = bfcc3ac44d12e42d780c1188ac64b57f
1354key = 3d5da1af83f7287458bff7a7651ea5d8db72259401333f6b82096996dd7eaf19
1355msg = aacc36972f183057919ff57b49e1
1356result = valid
1357
1358# tcId = 141
1359# small plaintext size
1360ct = fdcfa77f5bd09326b4c11f9281b72474
1361iv = 35bc82e3503b95044c6406a8b2c2ecff
1362key = c19bdf314c6cf64381425467f42aefa17c1cc9358be16ce31b1d214859ce86aa
1363msg = 5d066a92c300e9b6ddd63a7c13ae33
1364result = valid
1365
1366# tcId = 142
1367# plaintext size > 16
1368ct = fbea776fb1653635f88e2937ed2450ba4e9063e96d7cdba04928f01cb85492fe
1369iv = 4b74bd981ea9d074757c3e2ef515e5fb
1370key = 73216fafd0022d0d6ee27198b2272578fa8f04dd9f44467fbb6437aa45641bf7
1371msg = d5247b8f6c3edcbfb1d591d13ece23d2f5
1372result = valid
1373
1374# tcId = 143
1375# plaintext size > 16
1376ct = 3a79bb6084c7116b58afe52d7181a0aacee1caa11df959090e2e7b0073d74817
1377iv = 9a1d8ccc24c5e4d3995480af236be103
1378key = c2039f0d05951aa8d9fbdf68be58a37cf99bd1afcedda286a9db470c3729ca92
1379msg = ed5b5e28e9703bdf5c7b3b080f2690a605fcd0d9
1380result = valid
1381
1382# tcId = 144
1383# plaintext size > 16
1384ct = 642b11efb79b49e5d038bc7aa29b8c6c3ce0bf11c3a69670eb565799908be66d
1385iv = 400aab92803bcbb44a96ef789655b34e
1386key = 4f097858a1aec62cf18f0966b2b120783aa4ae9149d3213109740506ae47adfe
1387msg = ee53d8e5039e82d9fcca114e375a014febfea117a7e709d9008d43858e3660
1388result = valid
1389
1390# tcId = 145
1391# plaintext size > 16
1392ct = a9b051354f0cf61f11921b330e60f996de796aeb68140a0f9c5962e1f48e4805262fb6f53b26d9bb2fa0e359efe14734
1393iv = 6eedf45753ffe38f2407fbc28ab5959c
1394key = 5f99f7d60653d79f088dd07ef306b65e057d36e053fa1c9f6854425c019fd4df
1395msg = fcc9212c23675c5d69a1266c77389bc955e453daba20034aabbcd502a1b73e05af30f8b7622abdbc
1396result = valid
1397
1398# tcId = 146
1399# plaintext size > 16
1400ct = 5074f46f1a6d0eeff070d623172eb15bbfc83e7d16466a00c9da5f4545eecf44adbf60cf9ac9aa1a3ec5eca22d4a34a7b21ca44d214c9d04ab1cb0b2c07001de9adb46f3c12f8f48436b516a409bf6cbdf1871dee3115d5cbb7943558b68867e
1401iv = f88551c6aa197f9ad80251c2e32d7663
1402key = 95aaa5df4ccb529e9b2dc929e770c1f419f8e8933bfb36f632f532b3dcad2ba6
1403msg = f5735567b7c8312f116517788b091cc6cb1d474b010a77910154fd11c3b2f0cd19f713b63d66492e8cc7ee8ad714783f46c305a26416e11ff4b99ec5ce2550593cc5ec1b86ba6a66d10f82bdff827055
1404result = valid
1405
1406# tcId = 147
1407# zero padding
1408ct = e07558d746574528fb813f34e3fb7719
1409iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1410key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1411msg =
1412result = invalid
1413# The ciphertext in this test vector is the message encrypted with an invalid or
1414# unexpected padding. This allows to find implementations that are not properly
1415# checking the padding during decryption.
1416
1417# tcId = 148
1418# zero padding
1419ct = c01af61276368818a8295f7d4b5bb2fd
1420iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1421key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1422msg = 6162636465666768
1423result = invalid
1424# The ciphertext in this test vector is the message encrypted with an invalid or
1425# unexpected padding. This allows to find implementations that are not properly
1426# checking the padding during decryption.
1427
1428# tcId = 149
1429# zero padding
1430ct = 97dd9716f06be49160399a5b212250ae
1431iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1432key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1433msg = 303132333435363738396162636465
1434result = invalid
1435# The ciphertext in this test vector is the message encrypted with an invalid or
1436# unexpected padding. This allows to find implementations that are not properly
1437# checking the padding during decryption.
1438
1439# tcId = 150
1440# zero padding
1441ct = 8881e9e02fa9e3037b397957ba1fb7ce783bb4b4e18d7c646f38e0bb8ff92896
1442iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1443key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1444msg = 30313233343536373839414243444546
1445result = invalid
1446# The ciphertext in this test vector is the message encrypted with an invalid or
1447# unexpected padding. This allows to find implementations that are not properly
1448# checking the padding during decryption.
1449
1450# tcId = 151
1451# zero padding
1452ct = 8881e9e02fa9e3037b397957ba1fb7ce64679a46621b792f643542a735f0bbbf
1453iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1454key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1455msg = 3031323334353637383941424344454647
1456result = invalid
1457# The ciphertext in this test vector is the message encrypted with an invalid or
1458# unexpected padding. This allows to find implementations that are not properly
1459# checking the padding during decryption.
1460
1461# tcId = 152
1462# padding with 0xff
1463ct = c007ddffb76b95208505fe7f3be96172
1464iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1465key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1466msg =
1467result = invalid
1468# The ciphertext in this test vector is the message encrypted with an invalid or
1469# unexpected padding. This allows to find implementations that are not properly
1470# checking the padding during decryption.
1471
1472# tcId = 153
1473# padding with 0xff
1474ct = e9b7719c4c2b9fa6b94cb50e87b28156
1475iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1476key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1477msg = 6162636465666768
1478result = invalid
1479# The ciphertext in this test vector is the message encrypted with an invalid or
1480# unexpected padding. This allows to find implementations that are not properly
1481# checking the padding during decryption.
1482
1483# tcId = 154
1484# padding with 0xff
1485ct = 77b31f474c4bd489dbadd532643d1fa5
1486iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1487key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1488msg = 303132333435363738396162636465
1489result = invalid
1490# The ciphertext in this test vector is the message encrypted with an invalid or
1491# unexpected padding. This allows to find implementations that are not properly
1492# checking the padding during decryption.
1493
1494# tcId = 155
1495# padding with 0xff
1496ct = 8881e9e02fa9e3037b397957ba1fb7cea0166e9e1c0122cb2e2983fc0fac7176
1497iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1498key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1499msg = 30313233343536373839414243444546
1500result = invalid
1501# The ciphertext in this test vector is the message encrypted with an invalid or
1502# unexpected padding. This allows to find implementations that are not properly
1503# checking the padding during decryption.
1504
1505# tcId = 156
1506# padding with 0xff
1507ct = 8881e9e02fa9e3037b397957ba1fb7ce6f0effa789cbb0b875cc53cc8f7b3caf
1508iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1509key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1510msg = 3031323334353637383941424344454647
1511result = invalid
1512# The ciphertext in this test vector is the message encrypted with an invalid or
1513# unexpected padding. This allows to find implementations that are not properly
1514# checking the padding during decryption.
1515
1516# tcId = 157
1517# bit padding
1518ct = 4dd5f910c94700235c9ed239160e34e2
1519iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1520key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1521msg =
1522result = invalid
1523# The ciphertext in this test vector is the message encrypted with an invalid or
1524# unexpected padding. This allows to find implementations that are not properly
1525# checking the padding during decryption.
1526
1527# tcId = 158
1528# bit padding
1529ct = 94d18b5923f8f3608ae7ad494fbb517e
1530iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1531key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1532msg = 6162636465666768
1533result = invalid
1534# The ciphertext in this test vector is the message encrypted with an invalid or
1535# unexpected padding. This allows to find implementations that are not properly
1536# checking the padding during decryption.
1537
1538# tcId = 159
1539# bit padding
1540ct = 0c92886dbcb030b873123a25d224da42
1541iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1542key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1543msg = 303132333435363738396162636465
1544result = invalid
1545# The ciphertext in this test vector is the message encrypted with an invalid or
1546# unexpected padding. This allows to find implementations that are not properly
1547# checking the padding during decryption.
1548
1549# tcId = 160
1550# bit padding
1551ct = 8881e9e02fa9e3037b397957ba1fb7ce851be67798a2937cd6681165da6dce03
1552iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1553key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1554msg = 30313233343536373839414243444546
1555result = invalid
1556# The ciphertext in this test vector is the message encrypted with an invalid or
1557# unexpected padding. This allows to find implementations that are not properly
1558# checking the padding during decryption.
1559
1560# tcId = 161
1561# bit padding
1562ct = 8881e9e02fa9e3037b397957ba1fb7ce45658a37aaebc51098866b0894007e8e
1563iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1564key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1565msg = 3031323334353637383941424344454647
1566result = invalid
1567# The ciphertext in this test vector is the message encrypted with an invalid or
1568# unexpected padding. This allows to find implementations that are not properly
1569# checking the padding during decryption.
1570
1571# tcId = 162
1572# padding longer than 1 block
1573ct = 524236e25956e950713bec0d3d579068f34e4d18c4ccab081317dae526fe7fca
1574iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1575key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1576msg =
1577result = invalid
1578# The ciphertext in this test vector is the message encrypted with an invalid or
1579# unexpected padding. This allows to find implementations that are not properly
1580# checking the padding during decryption.
1581
1582# tcId = 163
1583# padding longer than 1 block
1584ct = d29eb845640c3a8878f51bc50e290aa4a65a34a93728fe8f82fdb8d3d2b7c648
1585iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1586key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1587msg = 6162636465666768
1588result = invalid
1589# The ciphertext in this test vector is the message encrypted with an invalid or
1590# unexpected padding. This allows to find implementations that are not properly
1591# checking the padding during decryption.
1592
1593# tcId = 164
1594# padding longer than 1 block
1595ct = c34563be2952277c0f5c67ae1d6f847118730dd7f6a502ceef3c4bce5999f7aa
1596iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1597key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1598msg = 303132333435363738396162636465
1599result = invalid
1600# The ciphertext in this test vector is the message encrypted with an invalid or
1601# unexpected padding. This allows to find implementations that are not properly
1602# checking the padding during decryption.
1603
1604# tcId = 165
1605# padding longer than 1 block
1606ct = 8881e9e02fa9e3037b397957ba1fb7cec0f74a1aa92fd9c96f9d15d193d1695c1eb33486e269277612f90f509f0535c2
1607iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1608key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1609msg = 30313233343536373839414243444546
1610result = invalid
1611# The ciphertext in this test vector is the message encrypted with an invalid or
1612# unexpected padding. This allows to find implementations that are not properly
1613# checking the padding during decryption.
1614
1615# tcId = 166
1616# padding longer than 1 block
1617ct = 8881e9e02fa9e3037b397957ba1fb7ce151ade309ec5200bacdd83b57ce794cd2b3bf9f8957def829e8465f7db266f9e
1618iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1619key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1620msg = 3031323334353637383941424344454647
1621result = invalid
1622# The ciphertext in this test vector is the message encrypted with an invalid or
1623# unexpected padding. This allows to find implementations that are not properly
1624# checking the padding during decryption.
1625
1626# tcId = 167
1627# ANSI X.923 padding
1628ct = fb38cbef13f1d5be9c0ac7ed9cbe023c
1629iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1630key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1631msg =
1632result = invalid
1633# The ciphertext in this test vector is the message encrypted with an invalid or
1634# unexpected padding. This allows to find implementations that are not properly
1635# checking the padding during decryption.
1636
1637# tcId = 168
1638# ANSI X.923 padding
1639ct = 18cf8988abe9a2463a3a75db1fac8bcc
1640iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1641key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1642msg = 6162636465666768
1643result = invalid
1644# The ciphertext in this test vector is the message encrypted with an invalid or
1645# unexpected padding. This allows to find implementations that are not properly
1646# checking the padding during decryption.
1647
1648# tcId = 169
1649# ANSI X.923 padding
1650ct = 8881e9e02fa9e3037b397957ba1fb7cee16d6fc4b4d3cdf6f915996e437fd4cc
1651iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1652key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1653msg = 30313233343536373839414243444546
1654result = invalid
1655# The ciphertext in this test vector is the message encrypted with an invalid or
1656# unexpected padding. This allows to find implementations that are not properly
1657# checking the padding during decryption.
1658
1659# tcId = 170
1660# ANSI X.923 padding
1661ct = 8881e9e02fa9e3037b397957ba1fb7cea8f41f61ead6e9936cbe7ee5a1163b9b
1662iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1663key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1664msg = 3031323334353637383941424344454647
1665result = invalid
1666# The ciphertext in this test vector is the message encrypted with an invalid or
1667# unexpected padding. This allows to find implementations that are not properly
1668# checking the padding during decryption.
1669
1670# tcId = 171
1671# ISO 10126 padding
1672ct = a05c14da0109093c195b4998812fe150
1673iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1674key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1675msg =
1676result = invalid
1677# The ciphertext in this test vector is the message encrypted with an invalid or
1678# unexpected padding. This allows to find implementations that are not properly
1679# checking the padding during decryption.
1680
1681# tcId = 172
1682# ISO 10126 padding
1683ct = c477877250c8e4ca2869f35c4757cdb4
1684iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1685key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1686msg = 6162636465666768
1687result = invalid
1688# The ciphertext in this test vector is the message encrypted with an invalid or
1689# unexpected padding. This allows to find implementations that are not properly
1690# checking the padding during decryption.
1691
1692# tcId = 173
1693# ISO 10126 padding
1694ct = 8881e9e02fa9e3037b397957ba1fb7ce69f57c6e99c7b9df7d4879ccd15caf3d
1695iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1696key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1697msg = 30313233343536373839414243444546
1698result = invalid
1699# The ciphertext in this test vector is the message encrypted with an invalid or
1700# unexpected padding. This allows to find implementations that are not properly
1701# checking the padding during decryption.
1702
1703# tcId = 174
1704# ISO 10126 padding
1705ct = 8881e9e02fa9e3037b397957ba1fb7ce77f89a247c928f147748ce6bc8fc4b67
1706iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1707key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1708msg = 3031323334353637383941424344454647
1709result = invalid
1710# The ciphertext in this test vector is the message encrypted with an invalid or
1711# unexpected padding. This allows to find implementations that are not properly
1712# checking the padding during decryption.
1713
1714# tcId = 175
1715# padding longer than message
1716ct = 524236e25956e950713bec0d3d579068
1717iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1718key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1719msg =
1720result = invalid
1721# The ciphertext in this test vector is the message encrypted with an invalid or
1722# unexpected padding. This allows to find implementations that are not properly
1723# checking the padding during decryption.
1724
1725# tcId = 176
1726# padding longer than message
1727ct = e03b6f2ae1c963b6dfa40b42d34314b7
1728iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1729key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1730msg = 6162636465666768
1731result = invalid
1732# The ciphertext in this test vector is the message encrypted with an invalid or
1733# unexpected padding. This allows to find implementations that are not properly
1734# checking the padding during decryption.
1735
1736# tcId = 177
1737# padding longer than message
1738ct = df14f4cbbccca57b9727d68270a1b6c1
1739iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1740key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1741msg = 303132333435363738396162636465
1742result = invalid
1743# The ciphertext in this test vector is the message encrypted with an invalid or
1744# unexpected padding. This allows to find implementations that are not properly
1745# checking the padding during decryption.
1746
1747# tcId = 178
1748# padding longer than message
1749ct = 8881e9e02fa9e3037b397957ba1fb7ceea228bf1edd41c390e2eef140142bc00
1750iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1751key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1752msg = 30313233343536373839414243444546
1753result = invalid
1754# The ciphertext in this test vector is the message encrypted with an invalid or
1755# unexpected padding. This allows to find implementations that are not properly
1756# checking the padding during decryption.
1757
1758# tcId = 179
1759# padding longer than message
1760ct = 8881e9e02fa9e3037b397957ba1fb7ce3937e0e9abf7f672a34a500ba8e9099a
1761iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1762key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1763msg = 3031323334353637383941424344454647
1764result = invalid
1765# The ciphertext in this test vector is the message encrypted with an invalid or
1766# unexpected padding. This allows to find implementations that are not properly
1767# checking the padding during decryption.
1768
1769# tcId = 180
1770#  invalid padding
1771ct = 32ac6057df2a5d1e2e5131348c6ebc4e
1772iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1773key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1774msg =
1775result = invalid
1776# The ciphertext in this test vector is the message encrypted with an invalid or
1777# unexpected padding. This allows to find implementations that are not properly
1778# checking the padding during decryption.
1779
1780# tcId = 181
1781#  invalid padding
1782ct = df4a7c3b9f4756d30fca0d18e9b28960
1783iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1784key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1785msg = 6162636465666768
1786result = invalid
1787# The ciphertext in this test vector is the message encrypted with an invalid or
1788# unexpected padding. This allows to find implementations that are not properly
1789# checking the padding during decryption.
1790
1791# tcId = 182
1792#  invalid padding
1793ct = 8881e9e02fa9e3037b397957ba1fb7ceae2855c47c7988873d57f901e049494b
1794iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1795key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1796msg = 30313233343536373839414243444546
1797result = invalid
1798# The ciphertext in this test vector is the message encrypted with an invalid or
1799# unexpected padding. This allows to find implementations that are not properly
1800# checking the padding during decryption.
1801
1802# tcId = 183
1803#  invalid padding
1804ct = 8881e9e02fa9e3037b397957ba1fb7ce0714c8de200b27ac91d9257fc93c13be
1805iv = f010f61c31c9aa8fa0d5be5f6b0f2f70
1806key = 7c78f34dbce8f0557d43630266f59babd1cb92ba624bd1a8f45a2a91c84a804a
1807msg = 3031323334353637383941424344454647
1808result = invalid
1809# The ciphertext in this test vector is the message encrypted with an invalid or
1810# unexpected padding. This allows to find implementations that are not properly
1811# checking the padding during decryption.
1812
1813