1# Imported from Wycheproof's ecdh_secp256r1_test.json.
2# This file is generated by convert_wycheproof.go. Do not edit by hand.
3#
4# Algorithm: ECDH
5# Generator version: 0.4.12
6
7[curve = secp256r1]
8[encoding = asn]
9
10# tcId = 1
11# normal case
12private = 612465c89a023ab17855b0a6bcebfd3febb53aef84138647b5352e02c10c346
13public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000462d5bd3372af75fe85a040715d0f502428e07046868b0bfdfa61d731afe44f26ac333a93a9e70a81cd5a95b5bf8d13990eb741c8c38872b4a07d275a014e30cf
14result = valid
15shared = 53020d908b0219328b658b525f26780e3ae12bcd952bb25a93bc0895e1714285
16
17# tcId = 2
18# compressed public key
19private = 612465c89a023ab17855b0a6bcebfd3febb53aef84138647b5352e02c10c346
20public = 3039301306072a8648ce3d020106082a8648ce3d0301070322000362d5bd3372af75fe85a040715d0f502428e07046868b0bfdfa61d731afe44f26
21result = acceptable
22shared = 53020d908b0219328b658b525f26780e3ae12bcd952bb25a93bc0895e1714285
23# The point in the public key is compressed. Not every library supports points
24# in compressed format.
25
26# tcId = 3
27# edge case for shared secret
28private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
29public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000458fd4168a87795603e2b04390285bdca6e57de6027fe211dd9d25e2212d29e62080d36bd224d7405509295eed02a17150e03b314f96da37445b0d1d29377d12c
30result = valid
31shared = 0000000000000000000000000000000000000000000000000000000000000000
32
33# tcId = 4
34# edge case for shared secret
35private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
36public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040f6d20c04261ecc3e92846acad48dc8ec5ee35ae0883f0d2ea71216906ee1c47c042689a996dd12830ae459382e94aac56b717af2e2080215f9e41949b1f52be
37result = valid
38shared = 00000000000000000000000000000000ffffffffffffffffffffffffffffffff
39
40# tcId = 5
41# edge case for shared secret
42private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
43public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400c7defeb1a16236738e9a1123ba621bc8e9a3f2485b3f8ffde7f9ce98f5a8a1cb338c3912b1792f60c2b06ec5231e2d84b0e596e9b76d419ce105ece3791dbc
44result = valid
45shared = 0000000000000000ffffffffffffffff00000000000000010000000000000001
46
47# tcId = 6
48# edge case for shared secret
49private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
50public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004e9b98fb2c0ac045f8c76125ffd99eb8a5157be1d7db3e85d655ec1d8210288cf218df24fd2c2746be59df41262ef3a97d986744b2836748a7486230a319ffec0
51result = valid
52shared = 00000000ffffffff00000000ffffffff00000000ffffffff0000000100000000
53
54# tcId = 7
55# edge case for shared secret
56private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
57public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004e9484e58f3331b66ffed6d90cb1c78065fa28cfba5c7dd4352013d3252ee4277bd7503b045a38b4b247b32c59593580f39e6abfa376c3dca20cf7f9cfb659e13
58result = valid
59shared = 000003ffffff0000003ffffff0000003ffffff0000003ffffff0000003ffffff
60
61# tcId = 8
62# edge case for shared secret
63private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
64public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004767d7fbb84aa6a4db1079372644e42ecb2fec200c178822392cb8b950ffdd0c91c86853cafd09b52ba2f287f0ebaa26415a3cfabaf92c6a617a19988563d9dea
65result = valid
66shared = 0000ffff0000ffff0000ffff0000ffff0000ffff0000ffff0000ffff00010001
67
68# tcId = 9
69# edge case for shared secret
70private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
71public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004c74d546f2fcc6dd392f85e5be167e358de908756b0c0bb01cb69d864ca083e1c93f959eece6e10ee11bd3934207d65ae28af68b092585a1509260eceb39b92ef
72result = valid
73shared = 085ec5a4af40176b63189069aeffcb229c96d3e046e0283ed2f9dac21b15ad3c
74
75# tcId = 10
76# edge case for shared secret
77private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
78public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000434fc9f1e7a094cd29598d1841fa9613dbe82313d633a51d63fb6eff074cc9b9a4ecfd9f258c5c4d4210b49751213a24c596982bd1d54e0445443f21ef15492a5
79result = valid
80shared = 190c25f88ad9ae3a098e6cffe6fd0b1bea42114eb0cedd5868a45c5fe277dff3
81
82# tcId = 11
83# edge case for shared secret
84private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
85public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004d5c96efd1907fd48de2ad715acf82eae5c6690fe3efe16a78d61c68d3bfd10df03eac816b9e7b776192a3f5075887c0e225617505833ca997cda32fd0f673c5e
86result = valid
87shared = 507442007322aa895340cba4abc2d730bfd0b16c2c79a46815f8780d2c55a2dd
88
89# tcId = 12
90# edge case for shared secret
91private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
92public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004f475f503a770df72c45aedfe42c008f59aa57e72b232f26600bdd0353957cb20bdb8f6405b4918050a3549f44c07a8eba820cdce4ece699888c638df66f54f7c
93result = valid
94shared = 5f177bfe19baaaee597e68b6a87a519e805e9d28a70cb72fd40f0fe5a754ba45
95
96# tcId = 13
97# edge case for shared secret
98private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
99public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004f3cb6754b7e2a86d064dfb9f903185aaa4c92b481c2c1a1ff276303bbc4183e49c318599b0984c3563df339311fe143a7d921ee75b755a52c6f804f897b809f7
100result = valid
101shared = 7fff0001fffc0007fff0001fffc0007fff0001fffc0007fff0001fffc0007fff
102
103# tcId = 14
104# edge case for shared secret
105private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
106public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004cce13fbdc96a946dfb8c6d9ed762dbd1731630455689f57a437fee124dd54cecaef78026c653030cf2f314a67064236b0a354defebc5e90c94124e9bf5c4fc24
107result = valid
108shared = 8000000000000000000000000000000000000000000000000000000000000004
109
110# tcId = 15
111# edge case for shared secret
112private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
113public = 3059301306072a8648ce3d020106082a8648ce3d030107034200047633dfd0ad06765097bc11bd5022b200df31f28c4ff0625421221ac7eeb6e6f4cb9c67693609ddd6f92343a5a1c635408240f4f8e27120c12554c7ff8c76e2fe
114result = valid
115shared = 8000003ffffff0000007fffffe000000ffffffc000001ffffff8000004000000
116
117# tcId = 16
118# edge case for shared secret
119private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
120public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004a386ace573f87558a68ead2a20088e3fe928bdae9e109446f93a078c15741f0421261e6db2bf12106e4c6bf85b9581b4c0302a526222f90abc5a549206b11011
121result = valid
122shared = ff00000001fffffffc00000007fffffff00000001fffffffc00000007fffffff
123
124# tcId = 17
125# edge case for shared secret
126private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
127public = 3059301306072a8648ce3d020106082a8648ce3d030107034200048e7b50f7d8c44d5d3496c43141a502f4a43f153d03ad43eda8e39597f1d477b8647f3da67969b7f989ff4addc393515af40c82085ce1f2ee195412c6f583774f
128result = valid
129shared = ffff00000003fffffff00000003fffffff00000003fffffff00000003fffffff
130
131# tcId = 18
132# edge case for shared secret
133private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
134public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004c827fb930fd51d926086191b502af83abb5f717debc8de29897a3934b2571ca05990c0597b0b7a2e42febd56b13235d1d408d76ed2c93b3facf514d902f6910a
135result = valid
136shared = ffffffff00000000000000ffffffffffffff00000000000000ffffffffffffff
137
138# tcId = 19
139# y-coordinate of the public key is small
140private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
141public = 3059301306072a8648ce3d020106082a8648ce3d030107034200043cbc1b31b43f17dc200dd70c2944c04c6cb1b082820c234a300b05b7763844c74fde0a4ef93887469793270eb2ff148287da9265b0334f9e2609aac16e8ad503
142result = valid
143shared = 7fffffffffffffffffffffffeecf2230ffffffffffffffffffffffffffffffff
144
145# tcId = 20
146# y-coordinate of the public key is small
147private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
148public = 3059301306072a8648ce3d020106082a8648ce3d030107034200042830d96489ae24b79cad425056e82746f9e3f419ab9aa21ca1fbb11c7325e7d318abe66f575ee8a2f1c4a80e35260ae82ad7d6f661d15f06967930a585097ef7
149result = valid
150shared = 000000000000000000000000111124f400000000000000000000000000000000
151
152# tcId = 21
153# y-coordinate of the public key is small
154private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
155public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004450b6b6e2097178e9d2850109518d28eb3b6ded2922a5452003bc2e4a4ec775c894e90f0df1b0e6cadb03b9de24f6a22d1bd0a4a58cd645c273cae1c619bfd61
156result = valid
157shared = 000000000000000000000001ea77d449ffffffffffffffffffffffffffffffff
158
159# tcId = 22
160# y-coordinate of the public key is large
161private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
162public = 3059301306072a8648ce3d020106082a8648ce3d030107034200043cbc1b31b43f17dc200dd70c2944c04c6cb1b082820c234a300b05b7763844c7b021f5b006c778ba686cd8f14d00eb7d78256d9b4fccb061d9f6553e91752afc
163result = valid
164shared = 7fffffffffffffffffffffffeecf2230ffffffffffffffffffffffffffffffff
165
166# tcId = 23
167# y-coordinate of the public key is large
168private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
169public = 3059301306072a8648ce3d020106082a8648ce3d030107034200042830d96489ae24b79cad425056e82746f9e3f419ab9aa21ca1fbb11c7325e7d3e754198fa8a1175e0e3b57f1cad9f517d528290a9e2ea0f96986cf5a7af68108
170result = valid
171shared = 000000000000000000000000111124f400000000000000000000000000000000
172
173# tcId = 24
174# y-coordinate of the public key is large
175private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
176public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004450b6b6e2097178e9d2850109518d28eb3b6ded2922a5452003bc2e4a4ec775c76b16f0e20e4f194524fc4621db095dd2e42f5b6a7329ba3d8c351e39e64029e
177result = valid
178shared = 000000000000000000000001ea77d449ffffffffffffffffffffffffffffffff
179
180# tcId = 25
181# y-coordinate of the public key has many trailing 1's
182private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
183public = 3059301306072a8648ce3d020106082a8648ce3d030107034200049a0f0e3dd31417bbd9e298bc068ab6d5c36733af26ed67676f410c804b8b2ca1b02c82f3a61a376db795626e9400557112273a36cddb08caaa43953965454730
184result = valid
185shared = 7fffffffffffffffffffffffca089011ffffffffffffffffffffffffffffffff
186
187# tcId = 26
188# y-coordinate of the public key has many trailing 1's
189private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
190public = 3059301306072a8648ce3d020106082a8648ce3d030107034200048e5d22d5e53ec797c55ecd68a08a7c3361cd99ca7fad1a68ea802a6a4cb58a918ea7a07023ef67677024bd3841e187c64b30a30a3750eb2ee873fbe58fa1357b
191result = valid
192shared = 0000000000000000000000001f6bd1e500000000000000000000000000000000
193
194# tcId = 27
195# y-coordinate of the public key has many trailing 1's
196private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
197public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004293aa349b934ab2c839cf54b8a737df2304ef9b20fa494e31ad62b315dd6a53c118182b85ef466eb9a8e87f9661f7d017984c15ea82043f536d1ee6a6d95b509
198result = valid
199shared = 000000000000000000000002099f55d5ffffffffffffffffffffffffffffffff
200
201# tcId = 28
202# y-coordinate of the public key has many trailing 0's
203private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
204public = 3059301306072a8648ce3d020106082a8648ce3d030107034200049a0f0e3dd31417bbd9e298bc068ab6d5c36733af26ed67676f410c804b8b2ca14fd37d0b59e5c893486a9d916bffaa8eedd8c5ca3224f73555bc6ac69abab8cf
205result = valid
206shared = 7fffffffffffffffffffffffca089011ffffffffffffffffffffffffffffffff
207
208# tcId = 29
209# y-coordinate of the public key has many trailing 0's
210private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
211public = 3059301306072a8648ce3d020106082a8648ce3d030107034200048e5d22d5e53ec797c55ecd68a08a7c3361cd99ca7fad1a68ea802a6a4cb58a9171585f8edc1098998fdb42c7be1e7839b4cf5cf6c8af14d1178c041a705eca84
212result = valid
213shared = 0000000000000000000000001f6bd1e500000000000000000000000000000000
214
215# tcId = 30
216# y-coordinate of the public key has many trailing 0's
217private = 0a0d622a47e48f6bc1038ace438c6f528aa00ad2bd1da5f13ee46bf5f633d71a
218public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004293aa349b934ab2c839cf54b8a737df2304ef9b20fa494e31ad62b315dd6a53cee7e7d46a10b99156571780699e082fe867b3ea257dfbc0ac92e1195926a4af6
219result = valid
220shared = 000000000000000000000002099f55d5ffffffffffffffffffffffffffffffff
221
222# tcId = 31
223# edge cases for ephemeral key
224private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
225public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000000000000000000000000000000000000000000000000000000000000000066485c780e2f83d72433bd5d84a06bb6541c2af31dae871728bf856a174f93f4
226result = valid
227shared = cfe4077c8730b1c9384581d36bff5542bc417c9eff5c2afcb98cc8829b2ce848
228
229# tcId = 32
230# edge cases for ephemeral key
231private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
232public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400000000000000000000000000000000ffffffffffffffffffffffffffffffff4f2b92b4c596a5a47f8b041d2dea6043021ac77b9a80b1343ac9d778f4f8f733
233result = valid
234shared = 49ae50fe096a6cd26698b78356b2c8adf1f6a3490f14e364629f7a0639442509
235
236# tcId = 33
237# edge cases for ephemeral key
238private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
239public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000000000000000ffffffffffffffff0000000000000001000000000000000138120be6ab31edfa34768c4387d2f84fb4b0be8a9a985864a1575f4436bb37b0
240result = valid
241shared = 5a1334572b2a711ead8b4653eb310cd8d9fd114399379a8f6b872e3b8fdda2d9
242
243# tcId = 34
244# edge cases for ephemeral key
245private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
246public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400000000ffffffff00000000ffffffff00000000ffffffff0000000100000000462c0466e41802238d6c925ecbefc747cfe505ea196af9a2d11b62850fce946e
247result = valid
248shared = c73755133b6b9b4b2a00631cbc7940ecbe6ec08f20448071422e3362f2556888
249
250# tcId = 35
251# edge cases for ephemeral key
252private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
253public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000003ffffff0000003ffffff0000003ffffff0000003ffffff0000003ffffff1582fa32e2d4a89dfcfb3d0b149f667dba3329490f4d64ee2ad586c0c9e8c508
254result = valid
255shared = 06fa1059935e47a9fd667e13f469614eb257cc9a7e3fc599bfb92780d59b146d
256
257# tcId = 36
258# edge cases for ephemeral key
259private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
260public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000ffff0000ffff0000ffff0000ffff0000ffff0000ffff0000ffff00010001684c8a9586ed6f9cbe447058a7da2108bab1e5e0a60d1f73e4e2e713f0a3dfe0
261result = valid
262shared = f237df4c10bd3e357971bb2b16b293566b7e355bdc8141d6c92cabc682983c45
263
264# tcId = 37
265# edge cases for ephemeral key
266private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
267public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004085ec5a4af40176b63189069aeffcb229c96d3e046e0283ed2f9dac21b15ad3c7859f97cb6e203f46bf3438f61282325e94e681b60b5669788aeb0655bf19d38
268result = valid
269shared = d874b55678d0a04d216c31b02f3ad1f30c92caaf168f34e3a743356d9276e993
270
271# tcId = 38
272# edge cases for ephemeral key
273private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
274public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004190c25f88ad9ae3a098e6cffe6fd0b1bea42114eb0cedd5868a45c5fe277dff321b8342ef077bc6724112403eaee5a15b4c31a71589f02ded09cd99cc5db9c83
275result = valid
276shared = 11a8582057463fc76fda3ab8087eb0a420b0d601bb3134165a369646931e52a6
277
278# tcId = 39
279# edge cases for ephemeral key
280private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
281public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004507442007322aa895340cba4abc2d730bfd0b16c2c79a46815f8780d2c55a2dd4619d69f9940f51663aa12381bc7cf678bd1a72a49fbc11b0b69cb22d1af9f2d
282result = valid
283shared = 4e173a80907f361fe5a5d335ba7685d5eba93e9dfc8d8fcdb1dcd2d2bde27507
284
285# tcId = 40
286# edge cases for ephemeral key
287private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
288public = 3059301306072a8648ce3d020106082a8648ce3d030107034200045f177bfe19baaaee597e68b6a87a519e805e9d28a70cb72fd40f0fe5a754ba4562ca1103f70a2006cd1f67f5f6a3580b29dc446abc90e0e910c1e05a9aa788cd
289result = valid
290shared = 73220471ec8bad99a297db488a34a259f9bc891ffaf09922e6b5001f5df67018
291
292# tcId = 41
293# edge cases for ephemeral key
294private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
295public = 3059301306072a8648ce3d020106082a8648ce3d030107034200047fff0001fffc0007fff0001fffc0007fff0001fffc0007fff0001fffc0007fff2e2213caf03033e0fd0f7951154f6e6c3a9244a72faca65e9ce9eeb5c8e1cea9
296result = valid
297shared = 55d0a203e22ffb523c8d2705060cee9d28308b51f184beefc518cff690bad346
298
299# tcId = 42
300# edge cases for ephemeral key
301private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
302public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000480000000000000000000000000000000000000000000000000000000000000042be8789db81bb4870a9e60c5c18c80c83de464277281f1af1e640843a1a3148e
303result = valid
304shared = 2518d846e577d95e9e7bc766cde7997cb887fb266d3a6cb598a839fd54aa2f4f
305
306# tcId = 43
307# edge cases for ephemeral key
308private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
309public = 3059301306072a8648ce3d020106082a8648ce3d030107034200048000003ffffff0000007fffffe000000ffffffc000001ffffff8000004000000722540f8a471c379083c600b58fde4d95c7dcad5095f4219fc5e9bdde3c5cd39
310result = valid
311shared = bdb49f4bdf42ac64504e9ce677b3ec5c0a03828c5b3efad726005692d35c0f26
312
313# tcId = 44
314# edge cases for ephemeral key
315private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
316public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ff00000001fffffffc00000007fffffff00000001fffffffc00000007fffffff5df80fc6cae26b6c1952fbd00ed174ee1209d069335f5b48588e29e80b9191ad
317result = valid
318shared = f503ac65637e0f17cb4408961cb882c875e4c6ef7a548d2d52d8c2f681838c55
319
320# tcId = 45
321# edge cases for ephemeral key
322private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
323public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffff00000003fffffff00000003fffffff00000003fffffff00000003fffffff2c63650e6a5d332e2987dd09a79008e8faabbd37e49cb016bfb92c8cd0f5da77
324result = valid
325shared = e3c18e7d7377dc540bc45c08d389bdbe255fa80ca8faf1ef6b94d52049987d21
326
327# tcId = 46
328# edge cases for ephemeral key
329private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
330public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000000000000ffffffffffffff00000000000000ffffffffffffff7a116c964a4cd60668bf89cffe157714a3ce21b93b3ca607c8a5b93ac54ffc0a
331result = valid
332shared = 516d6d329b095a7c7e93b4023d4d05020c1445ef1ddcb3347b3a27d7d7f57265
333
334# tcId = 47
335# edge cases for ephemeral key
336private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
337public = 3059301306072a8648ce3d020106082a8648ce3d030107034200047fffffffffffffffffffffffeecf2230ffffffffffffffffffffffffffffffff00000001c7c30643abed0af0a49fe352cb483ff9b97dccdf427c658e8793240d
338result = valid
339shared = 6fd26661851a8de3c6d06f834ef3acb8f2a5f9c136a985ffe10d5eeb51edcfa3
340
341# tcId = 48
342# edge cases for ephemeral key
343private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
344public = 3059301306072a8648ce3d020106082a8648ce3d030107034200047fffffffffffffffffffffffeecf2230fffffffffffffffffffffffffffffffffffffffd383cf9bd5412f50f5b601cad34b7c00746823320bd839a71786cdbf2
345result = valid
346shared = 6fd26661851a8de3c6d06f834ef3acb8f2a5f9c136a985ffe10d5eeb51edcfa3
347
348# tcId = 49
349# edge cases for ephemeral key
350private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
351public = 3059301306072a8648ce3d020106082a8648ce3d030107034200047fffffffffffffffffffffffca089011ffffffffffffffffffffffffffffffff267bfdf8a61148decd80283732dd4c1095e4bb40b9658408208dc1147fffffff
352result = valid
353shared = 44236c8b9505a19d48774a3903c0292759b0f826e6ac092ff898d87e53d353fc
354
355# tcId = 50
356# edge cases for ephemeral key
357private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
358public = 3059301306072a8648ce3d020106082a8648ce3d030107034200047fffffffffffffffffffffffca089011ffffffffffffffffffffffffffffffffd984020659eeb722327fd7c8cd22b3ef6a1b44c0469a7bf7df723eeb80000000
359result = valid
360shared = 44236c8b9505a19d48774a3903c0292759b0f826e6ac092ff898d87e53d353fc
361
362# tcId = 51
363# edge cases for ephemeral key
364private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
365public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000000000000000000000000111124f4000000000000000000000000000000000000000d12d381b0760b1c50be8acf859385052c7f53cde67ce13759de3123a0
366result = valid
367shared = f1f0e43b374feb7e7f96d4ffe7519fa8bb6c3cfd25f6f87dab2623d2a2d33851
368
369# tcId = 52
370# edge cases for ephemeral key
371private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
372public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000000000000000000000000111124f400000000000000000000000000000000fffffff1ed2c7e5089f4e3af4175307a6c7afad480ac3219831ec8a621cedc5f
373result = valid
374shared = f1f0e43b374feb7e7f96d4ffe7519fa8bb6c3cfd25f6f87dab2623d2a2d33851
375
376# tcId = 53
377# edge cases for ephemeral key
378private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
379public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000000000000000000000001f6bd1e5000000000000000000000000000000004096edd6871c320cb8a9f4531751105c97b4c257811bbc32963eaf39ffffffff
380result = valid
381shared = 3ebbace1098a81949d5605dd94a7aa88dc396c2c23e01a9c8cca5bb07bfbb6a1
382
383# tcId = 54
384# edge cases for ephemeral key
385private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
386public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000000000000000000000001f6bd1e500000000000000000000000000000000bf69122878e3cdf447560bace8aeefa3684b3da97ee443cd69c150c600000000
387result = valid
388shared = 3ebbace1098a81949d5605dd94a7aa88dc396c2c23e01a9c8cca5bb07bfbb6a1
389
390# tcId = 55
391# edge cases for ephemeral key
392private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
393public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000000000000000000000001ea77d449ffffffffffffffffffffffffffffffff000000007afbc0b325e820646dec622fb558a51c342aa257f4b6a8ec5ddf144f
394result = valid
395shared = 1b085213a9c89d353e1111af078c38c502b7b4771efba51f589b5be243417bdc
396
397# tcId = 56
398# edge cases for ephemeral key
399private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
400public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000000000000000000000001ea77d449fffffffffffffffffffffffffffffffffffffffe85043f4dda17df9b92139dd04aa75ae4cbd55da80b495713a220ebb0
401result = valid
402shared = 1b085213a9c89d353e1111af078c38c502b7b4771efba51f589b5be243417bdc
403
404# tcId = 57
405# edge cases for ephemeral key
406private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
407public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000000000000000000000002099f55d5ffffffffffffffffffffffffffffffff152c1a22d823a27855ed03f8e2ab5038bb1df4d87e43865f2daf6948ffffffff
408result = valid
409shared = 67cb63566c7ceb12fdd85ce9d2f77c359242bbaa0ea1bf3cf510a4a26591d1f1
410
411# tcId = 58
412# edge cases for ephemeral key
413private = 55d55f11bb8da1ea318bca7266f0376662441ea87270aa2077f1b770c4854a48
414public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004000000000000000000000002099f55d5ffffffffffffffffffffffffffffffffead3e5dc27dc5d88aa12fc071d54afc744e20b2881bc79a0d25096b700000000
415result = valid
416shared = 67cb63566c7ceb12fdd85ce9d2f77c359242bbaa0ea1bf3cf510a4a26591d1f1
417
418# tcId = 59
419# edge case private key
420private = 3
421public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
422result = valid
423shared = 85a0b58519b28e70a694ec5198f72c4bfdabaa30a70f7143b5b1cd7536f716ca
424
425# tcId = 60
426# edge case private key
427private = 0ffffffffffffffffffffffffffffffffffffffffffffffffffffffff
428public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
429result = valid
430shared = a329a7d80424ea2d6c904393808e510dfbb28155092f1bac284dceda1f13afe5
431
432# tcId = 61
433# edge case private key
434private = 100000000000000000000000000000000000000000000000000000000000000
435public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
436result = valid
437shared = bd26d0293e8851c51ebe0d426345683ae94026aca545282a4759faa85fde6687
438
439# tcId = 62
440# edge case private key
441private = 7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
442public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
443result = valid
444shared = ea9350b2490a2010c7abf43fb1a38be729a2de375ea7a6ac34ff58cc87e51b6c
445
446# tcId = 63
447# edge case private key
448private = 08000000000000000000000000000000000000000000000000000000000000000
449public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
450result = valid
451shared = 34eed3f6673d340b6f716913f6dfa36b5ac85fa667791e2d6a217b0c0b7ba807
452
453# tcId = 64
454# edge case private key
455private = 0ffffffff00000000ffffffffffffffffbce6faada7179e83f3b9cac2fc632551
456public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
457result = valid
458shared = 1354ce6692c9df7b6fc3119d47c56338afbedccb62faa546c0fe6ed4959e41c3
459
460# tcId = 65
461# edge case private key
462private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3a9cac2fc632551
463public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
464result = valid
465shared = fe7496c30d534995f0bf428b5471c21585aaafc81733916f0165597a55d12cb4
466
467# tcId = 66
468# edge case private key
469private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b1cac2fc632551
470public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
471result = valid
472shared = 348bf8042e4edf1d03c8b36ab815156e77c201b764ed4562cfe2ee90638ffef5
473
474# tcId = 67
475# edge case private key
476private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac1fc632551
477public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
478result = valid
479shared = 6e4ec5479a7c20a537501700484f6f433a8a8fe53c288f7a25c8e8c92d39e8dc
480
481# tcId = 68
482# edge case private key
483private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc6324f3
484public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
485result = valid
486shared = f7407d61fdf581be4f564621d590ca9b7ba37f31396150f9922f1501da8c83ef
487# The private key has a special value. Implementations using addition
488# subtraction chains for the point multiplication may get the point at infinity
489# as an intermediate result. See CVE_2017_10176
490
491# tcId = 69
492# edge case private key
493private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632533
494public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
495result = valid
496shared = 82236fd272208693e0574555ca465c6cc512163486084fa57f5e1bd2e2ccc0b3
497# The private key has a special value. Implementations using addition
498# subtraction chains for the point multiplication may get the point at infinity
499# as an intermediate result. See CVE_2017_10176
500
501# tcId = 70
502# edge case private key
503private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632543
504public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
505result = valid
506shared = 06537149664dba1a9924654cb7f787ed224851b0df25ef53fcf54f8f26cd5f3f
507# The private key has a special value. Implementations using addition
508# subtraction chains for the point multiplication may get the point at infinity
509# as an intermediate result. See CVE_2017_10176
510
511# tcId = 71
512# edge case private key
513private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc63254b
514public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
515result = valid
516shared = f2b38539bce995d443c7bfeeefadc9e42cc2c89c60bf4e86eac95d51987bd112
517# The private key has a special value. Implementations using addition
518# subtraction chains for the point multiplication may get the point at infinity
519# as an intermediate result. See CVE_2017_10176
520
521# tcId = 72
522# edge case private key
523private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc63254e
524public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
525result = valid
526shared = 85a0b58519b28e70a694ec5198f72c4bfdabaa30a70f7143b5b1cd7536f716ca
527
528# tcId = 73
529# edge case private key
530private = 0ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc63254f
531public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000431028f3377fc8f2b1967edaab90213acad0da9f50897f08f57537f78f116744743a1930189363bbde2ac4cbd1649cdc6f451add71dd2f16a8a867f2b17caa16b
532result = valid
533shared = 027b013a6f166db655d69d643c127ef8ace175311e667dff2520f5b5c75b7659
534# The private key has a special value. Implementations using addition
535# subtraction chains for the point multiplication may get the point at infinity
536# as an intermediate result. See CVE_2017_10176
537
538# tcId = 74
539# CVE-2017-8932
540private = 2a265f8bcbdcaf94d58519141e578124cb40d64a501fba9c11847b28965bc737
541public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004023819813ac969847059028ea88a1f30dfbcde03fc791d3a252c6b41211882eaf93e4ae433cc12cf2a43fc0ef26400c0e125508224cdb649380f25479148a4ad
542result = valid
543shared = 4d4de80f1534850d261075997e3049321a0864082d24a917863366c0724f5ae3
544
545# tcId = 75
546# CVE-2017-8932
547private = 313f72ff9fe811bf573176231b286a3bdb6f1b14e05c40146590727a71c3bccd
548public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004cc11887b2d66cbae8f4d306627192522932146b42f01d3c6f92bd5c8ba739b06a2f08a029cd06b46183085bae9248b0ed15b70280c7ef13a457f5af382426031
549result = valid
550shared = 831c3f6b5f762d2f461901577af41354ac5f228c2591f84f8a6e51e2e3f17991
551
552# tcId = 76
553# point is not on curve
554private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
555public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
556result = invalid
557shared =
558
559# tcId = 77
560# point is not on curve
561private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
562public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001
563result = invalid
564shared =
565
566# tcId = 78
567# point is not on curve
568private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
569public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000000000000000000000000000000000000000000000000000000000000000ffffffff00000001000000000000000000000000fffffffffffffffffffffffe
570result = invalid
571shared =
572
573# tcId = 79
574# point is not on curve
575private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
576public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000000000000000000000000000000000000000000000000000000000000000ffffffff00000001000000000000000000000000ffffffffffffffffffffffff
577result = invalid
578shared =
579
580# tcId = 80
581# point is not on curve
582private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
583public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000
584result = invalid
585shared =
586
587# tcId = 81
588# point is not on curve
589private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
590public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000001
591result = invalid
592shared =
593
594# tcId = 82
595# point is not on curve
596private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
597public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000000000000000000000000000000000000000000000000000000000000001ffffffff00000001000000000000000000000000fffffffffffffffffffffffe
598result = invalid
599shared =
600
601# tcId = 83
602# point is not on curve
603private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
604public = 3059301306072a8648ce3d020106082a8648ce3d030107034200040000000000000000000000000000000000000000000000000000000000000001ffffffff00000001000000000000000000000000ffffffffffffffffffffffff
605result = invalid
606shared =
607
608# tcId = 84
609# point is not on curve
610private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
611public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000fffffffffffffffffffffffe0000000000000000000000000000000000000000000000000000000000000000
612result = invalid
613shared =
614
615# tcId = 85
616# point is not on curve
617private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
618public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000fffffffffffffffffffffffe0000000000000000000000000000000000000000000000000000000000000001
619result = invalid
620shared =
621
622# tcId = 86
623# point is not on curve
624private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
625public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000fffffffffffffffffffffffeffffffff00000001000000000000000000000000fffffffffffffffffffffffe
626result = invalid
627shared =
628
629# tcId = 87
630# point is not on curve
631private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
632public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000fffffffffffffffffffffffeffffffff00000001000000000000000000000000ffffffffffffffffffffffff
633result = invalid
634shared =
635
636# tcId = 88
637# point is not on curve
638private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
639public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000
640result = invalid
641shared =
642
643# tcId = 89
644# point is not on curve
645private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
646public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000001
647result = invalid
648shared =
649
650# tcId = 90
651# point is not on curve
652private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
653public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000ffffffffffffffffffffffffffffffff00000001000000000000000000000000fffffffffffffffffffffffe
654result = invalid
655shared =
656
657# tcId = 91
658# point is not on curve
659private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
660public = 3059301306072a8648ce3d020106082a8648ce3d03010703420004ffffffff00000001000000000000000000000000ffffffffffffffffffffffffffffffff00000001000000000000000000000000ffffffffffffffffffffffff
661result = invalid
662shared =
663
664# tcId = 92
665private = 7e4aa54f714bf01df85c50269bea3a86721f84afe74f7b41ea58abcf3474e88d
666public = 3018301306072a8648ce3d020106082a8648ce3d030107030100
667result = invalid
668shared =
669
670# tcId = 93
671# public point not on curve
672private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
673public = 3059301306072a8648ce3d020106082a8648ce3d030107034200041510264c189c3d523ff9916abd7069efa6968d8dc7ddb6457d7869b53ea60cdcfafb7ed4786da15d29ee59256f536da3575a4888c1bb0a95b256f4a7e9fd764c
674result = invalid
675shared =
676# The public key has been modified and is invalid. An implementation should
677# always check whether the public key is valid and on the same curve as the
678# private key. The test vector includes the shared secret computed with the
679# original public key if the public point is on the curve of the private key.
680# Generating a shared secret other than the one with the original key likely
681# indicates that the bug is exploitable.
682
683# tcId = 94
684# public point = (0,0)
685private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
686public = 3059301306072a8648ce3d020106082a8648ce3d0301070342000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
687result = invalid
688shared =
689# The public key has been modified and is invalid. An implementation should
690# always check whether the public key is valid and on the same curve as the
691# private key. The test vector includes the shared secret computed with the
692# original public key if the public point is on the curve of the private key.
693# Generating a shared secret other than the one with the original key likely
694# indicates that the bug is exploitable.
695
696# tcId = 95
697# order =
698# -115792089210356248762697446949407573529996955224135760342422259061068512044369
699private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
700public = 308201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f50221ff00000000ffffffff00000000000000004319055258e8617b0c46353d039cdaaf020101034200041510264c189c3d523ff9916abd7069efa6968d8dc7ddb6457d7869b53ea60cdcfafb7ed4786da15d29ee59256f536da3575a4888c1bb0a95b256f4a7e9fd764a
701result = invalid
702shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
703# The order of the public key has been modified. If this order is used in a
704# cryptographic primitive instead of the correct order then private keys may
705# leak. E.g. ECDHC in BC 1.52 suffered from this.
706# The public key has been modified and is invalid. An implementation should
707# always check whether the public key is valid and on the same curve as the
708# private key. The test vector includes the shared secret computed with the
709# original public key if the public point is on the curve of the private key.
710# Generating a shared secret other than the one with the original key likely
711# indicates that the bug is exploitable.
712# The public key does not use a named curve. RFC 3279 allows to encode such
713# curves by explicitly encoding, the parameters of the curve equation, modulus,
714# generator, order and cofactor. However, many crypto libraries only support
715# named curves. Modifying some of the EC parameters and encoding the
716# corresponding public key as an unnamed curve is a potential attack vector.
717
718# tcId = 96
719# order = 0
720private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
721public = 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
722result = invalid
723shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
724# The order of the public key has been modified. If this order is used in a
725# cryptographic primitive instead of the correct order then private keys may
726# leak. E.g. ECDHC in BC 1.52 suffered from this.
727# The public key has been modified and is invalid. An implementation should
728# always check whether the public key is valid and on the same curve as the
729# private key. The test vector includes the shared secret computed with the
730# original public key if the public point is on the curve of the private key.
731# Generating a shared secret other than the one with the original key likely
732# indicates that the bug is exploitable.
733# The public key does not use a named curve. RFC 3279 allows to encode such
734# curves by explicitly encoding, the parameters of the curve equation, modulus,
735# generator, order and cofactor. However, many crypto libraries only support
736# named curves. Modifying some of the EC parameters and encoding the
737# corresponding public key as an unnamed curve is a potential attack vector.
738
739# tcId = 97
740# order = 1
741private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
742public = 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
743result = acceptable
744shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
745# The order of the public key has been modified. If this order is used in a
746# cryptographic primitive instead of the correct order then private keys may
747# leak. E.g. ECDHC in BC 1.52 suffered from this.
748# A parameter that is typically not used for ECDH has been modified. Sometimes
749# libraries ignore small differences between public and private key. For
750# example, a library might ignore an incorrect cofactor in the public key. We
751# consider ignoring such changes as acceptable as long as these differences do
752# not change the outcome of the ECDH computation, i.e. as long as the
753# computation is done on the curve from the private key.
754# The public key does not use a named curve. RFC 3279 allows to encode such
755# curves by explicitly encoding, the parameters of the curve equation, modulus,
756# generator, order and cofactor. However, many crypto libraries only support
757# named curves. Modifying some of the EC parameters and encoding the
758# corresponding public key as an unnamed curve is a potential attack vector.
759
760# tcId = 98
761# order = 26959946660873538060741835960514744168612397095220107664918121663170
762private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
763public = 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
764result = acceptable
765shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
766# The order of the public key has been modified. If this order is used in a
767# cryptographic primitive instead of the correct order then private keys may
768# leak. E.g. ECDHC in BC 1.52 suffered from this.
769# A parameter that is typically not used for ECDH has been modified. Sometimes
770# libraries ignore small differences between public and private key. For
771# example, a library might ignore an incorrect cofactor in the public key. We
772# consider ignoring such changes as acceptable as long as these differences do
773# not change the outcome of the ECDH computation, i.e. as long as the
774# computation is done on the curve from the private key.
775# The public key does not use a named curve. RFC 3279 allows to encode such
776# curves by explicitly encoding, the parameters of the curve equation, modulus,
777# generator, order and cofactor. However, many crypto libraries only support
778# named curves. Modifying some of the EC parameters and encoding the
779# corresponding public key as an unnamed curve is a potential attack vector.
780
781# tcId = 99
782# generator = (0,0)
783private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
784public = 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
785result = acceptable
786shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
787# A parameter that is typically not used for ECDH has been modified. Sometimes
788# libraries ignore small differences between public and private key. For
789# example, a library might ignore an incorrect cofactor in the public key. We
790# consider ignoring such changes as acceptable as long as these differences do
791# not change the outcome of the ECDH computation, i.e. as long as the
792# computation is done on the curve from the private key.
793# The public key does not use a named curve. RFC 3279 allows to encode such
794# curves by explicitly encoding, the parameters of the curve equation, modulus,
795# generator, order and cofactor. However, many crypto libraries only support
796# named curves. Modifying some of the EC parameters and encoding the
797# corresponding public key as an unnamed curve is a potential attack vector.
798
799# tcId = 100
800# generator not on curve
801private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
802public = 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
803result = acceptable
804shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
805# A parameter that is typically not used for ECDH has been modified. Sometimes
806# libraries ignore small differences between public and private key. For
807# example, a library might ignore an incorrect cofactor in the public key. We
808# consider ignoring such changes as acceptable as long as these differences do
809# not change the outcome of the ECDH computation, i.e. as long as the
810# computation is done on the curve from the private key.
811# The public key does not use a named curve. RFC 3279 allows to encode such
812# curves by explicitly encoding, the parameters of the curve equation, modulus,
813# generator, order and cofactor. However, many crypto libraries only support
814# named curves. Modifying some of the EC parameters and encoding the
815# corresponding public key as an unnamed curve is a potential attack vector.
816
817# tcId = 101
818# cofactor = -1
819private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
820public = 308201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc6325510201ff034200041510264c189c3d523ff9916abd7069efa6968d8dc7ddb6457d7869b53ea60cdcfafb7ed4786da15d29ee59256f536da3575a4888c1bb0a95b256f4a7e9fd764a
821result = invalid
822shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
823# The public key has been modified and is invalid. An implementation should
824# always check whether the public key is valid and on the same curve as the
825# private key. The test vector includes the shared secret computed with the
826# original public key if the public point is on the curve of the private key.
827# Generating a shared secret other than the one with the original key likely
828# indicates that the bug is exploitable.
829# The public key does not use a named curve. RFC 3279 allows to encode such
830# curves by explicitly encoding, the parameters of the curve equation, modulus,
831# generator, order and cofactor. However, many crypto libraries only support
832# named curves. Modifying some of the EC parameters and encoding the
833# corresponding public key as an unnamed curve is a potential attack vector.
834
835# tcId = 102
836# cofactor = 0
837private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
838public = 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
839result = invalid
840shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
841# The public key has been modified and is invalid. An implementation should
842# always check whether the public key is valid and on the same curve as the
843# private key. The test vector includes the shared secret computed with the
844# original public key if the public point is on the curve of the private key.
845# Generating a shared secret other than the one with the original key likely
846# indicates that the bug is exploitable.
847# The public key does not use a named curve. RFC 3279 allows to encode such
848# curves by explicitly encoding, the parameters of the curve equation, modulus,
849# generator, order and cofactor. However, many crypto libraries only support
850# named curves. Modifying some of the EC parameters and encoding the
851# corresponding public key as an unnamed curve is a potential attack vector.
852
853# tcId = 103
854# cofactor = 2
855private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
856public = 308201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020102034200041510264c189c3d523ff9916abd7069efa6968d8dc7ddb6457d7869b53ea60cdcfafb7ed4786da15d29ee59256f536da3575a4888c1bb0a95b256f4a7e9fd764a
857result = acceptable
858shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
859# A parameter that is typically not used for ECDH has been modified. Sometimes
860# libraries ignore small differences between public and private key. For
861# example, a library might ignore an incorrect cofactor in the public key. We
862# consider ignoring such changes as acceptable as long as these differences do
863# not change the outcome of the ECDH computation, i.e. as long as the
864# computation is done on the curve from the private key.
865# The public key does not use a named curve. RFC 3279 allows to encode such
866# curves by explicitly encoding, the parameters of the curve equation, modulus,
867# generator, order and cofactor. However, many crypto libraries only support
868# named curves. Modifying some of the EC parameters and encoding the
869# corresponding public key as an unnamed curve is a potential attack vector.
870
871# tcId = 104
872# cofactor =
873# 115792089210356248762697446949407573529996955224135760342422259061068512044369
874private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
875public = 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
876result = invalid
877shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
878# The public key has been modified and is invalid. An implementation should
879# always check whether the public key is valid and on the same curve as the
880# private key. The test vector includes the shared secret computed with the
881# original public key if the public point is on the curve of the private key.
882# Generating a shared secret other than the one with the original key likely
883# indicates that the bug is exploitable.
884# The public key does not use a named curve. RFC 3279 allows to encode such
885# curves by explicitly encoding, the parameters of the curve equation, modulus,
886# generator, order and cofactor. However, many crypto libraries only support
887# named curves. Modifying some of the EC parameters and encoding the
888# corresponding public key as an unnamed curve is a potential attack vector.
889
890# tcId = 105
891# cofactor = None
892private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
893public = 308201303081e906072a8648ce3d02013081dd020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551034200041510264c189c3d523ff9916abd7069efa6968d8dc7ddb6457d7869b53ea60cdcfafb7ed4786da15d29ee59256f536da3575a4888c1bb0a95b256f4a7e9fd764a
894result = acceptable
895shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
896# A parameter that is typically not used for ECDH has been modified. Sometimes
897# libraries ignore small differences between public and private key. For
898# example, a library might ignore an incorrect cofactor in the public key. We
899# consider ignoring such changes as acceptable as long as these differences do
900# not change the outcome of the ECDH computation, i.e. as long as the
901# computation is done on the curve from the private key.
902# The public key does not use a named curve. RFC 3279 allows to encode such
903# curves by explicitly encoding, the parameters of the curve equation, modulus,
904# generator, order and cofactor. However, many crypto libraries only support
905# named curves. Modifying some of the EC parameters and encoding the
906# corresponding public key as an unnamed curve is a potential attack vector.
907
908# tcId = 106
909# modified prime
910private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
911public = 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
912result = invalid
913shared = cea0fbd8f20abc8cf8127c132e29756d25ff1530a88bf5c9e22dc1c137c36be9
914# The modulus of the public key has been modified. The public point of the
915# public key has been chosen so that it is both a point on both the curve of the
916# modified public key and the private key.
917# The public key has been modified and is invalid. An implementation should
918# always check whether the public key is valid and on the same curve as the
919# private key. The test vector includes the shared secret computed with the
920# original public key if the public point is on the curve of the private key.
921# Generating a shared secret other than the one with the original key likely
922# indicates that the bug is exploitable.
923# The public key does not use a named curve. RFC 3279 allows to encode such
924# curves by explicitly encoding, the parameters of the curve equation, modulus,
925# generator, order and cofactor. However, many crypto libraries only support
926# named curves. Modifying some of the EC parameters and encoding the
927# corresponding public key as an unnamed curve is a potential attack vector.
928
929# tcId = 107
930# using secp224r1
931private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
932public = 304e301006072a8648ce3d020106052b81040021033a0004074f56dc2ea648ef89c3b72e23bbd2da36f60243e4d2067b70604af1c2165cec2f86603d60c8a611d5b84ba3d91dfe1a480825bcc4af3bcf
933result = invalid
934shared =
935# The public key has been modified and is invalid. An implementation should
936# always check whether the public key is valid and on the same curve as the
937# private key. The test vector includes the shared secret computed with the
938# original public key if the public point is on the curve of the private key.
939# Generating a shared secret other than the one with the original key likely
940# indicates that the bug is exploitable.
941
942# tcId = 108
943# using secp256k1
944private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
945public = 3056301006072a8648ce3d020106052b8104000a03420004a1263e75b87ae0937060ff1472f330ee55cdf8f4329d6284a9ebfbcc856c11684225e72cbebff41e54fb6f00e11afe53a17937bedbf2df787f8ef9584f775838
946result = invalid
947shared =
948# The public key has been modified and is invalid. An implementation should
949# always check whether the public key is valid and on the same curve as the
950# private key. The test vector includes the shared secret computed with the
951# original public key if the public point is on the curve of the private key.
952# Generating a shared secret other than the one with the original key likely
953# indicates that the bug is exploitable.
954
955# tcId = 109
956# a = 0
957private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
958public = 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
959result = acceptable
960shared = d003f5cc83852584061f7a8a28bcb5671ecbda096e16e7accfa8f8d311a3db7a
961# A parameter that is typically not used for ECDH has been modified. Sometimes
962# libraries ignore small differences between public and private key. For
963# example, a library might ignore an incorrect cofactor in the public key. We
964# consider ignoring such changes as acceptable as long as these differences do
965# not change the outcome of the ECDH computation, i.e. as long as the
966# computation is done on the curve from the private key.
967# The public key does not use a named curve. RFC 3279 allows to encode such
968# curves by explicitly encoding, the parameters of the curve equation, modulus,
969# generator, order and cofactor. However, many crypto libraries only support
970# named curves. Modifying some of the EC parameters and encoding the
971# corresponding public key as an unnamed curve is a potential attack vector.
972
973# tcId = 110
974# public key of order 3
975private = 4f3414d1589b49f7172d439cbbe78e5b5350dc85dea40cd2d6274740c6e0239c
976public = 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
977result = invalid
978shared = f0652d1cc135c763cd51e429d320a6101634d13b59790c3b1db0063f9f00dc99
979# The vector contains a weak public key. The curve is not a named curve, the
980# public key point has order 3 and has been chosen to be on the same curve as
981# the private key. This test vector is used to check ECC implementations for
982# missing steps in the verification of the public key.
983# The public key has been modified and is invalid. An implementation should
984# always check whether the public key is valid and on the same curve as the
985# private key. The test vector includes the shared secret computed with the
986# original public key if the public point is on the curve of the private key.
987# Generating a shared secret other than the one with the original key likely
988# indicates that the bug is exploitable.
989# The public key does not use a named curve. RFC 3279 allows to encode such
990# curves by explicitly encoding, the parameters of the curve equation, modulus,
991# generator, order and cofactor. However, many crypto libraries only support
992# named curves. Modifying some of the EC parameters and encoding the
993# corresponding public key as an unnamed curve is a potential attack vector.
994
995# tcId = 111
996# Public key uses wrong curve: secp224r1
997private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
998public = 304e301006072a8648ce3d020106052b81040021033a00042af270d2a6030e3dd38cc46e7d719f176c2ca4eb04d7e8b84290c8edbcaed964ebe226b2d7ce17251622804c0d3b7adce020a3cdc97cac6c
999result = invalid
1000shared =
1001
1002# tcId = 112
1003# Public key uses wrong curve: secp384r1
1004private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1005public = 3076301006072a8648ce3d020106052b81040022036200041f17901e731b06f349b6e9d7d17d45e8a2b46115a47485be16197932db87b39405b5c941b36fd61b9ef7dd20878e129e55a2277099c601dcdb3747f80ad6e166116378e1ebce2c95744a0986128cfeeaac7f90b71787d9a1cfe417cd4c8f6af5
1006result = invalid
1007shared =
1008
1009# tcId = 113
1010# Public key uses wrong curve: secp521r1
1011private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1012public = 30819b301006072a8648ce3d020106052b81040023038186000400ed76e5888428fad409ff203ab298b0f24827c091939ae0f9b1245d865ac5fbcd2749f9ae6c90fa8e29414d1bc7dc7b3c4aca904cd824484421cc66fe6af43bdfd200c1f790a0b3ae994937f91b6bdb9778b08c83ecadb8cba22a78c37bf565dac164f18e719be0ef890ee5cbf20e17fcfc9a5585e5416470b9862f82fb769339994f4e
1013result = invalid
1014shared =
1015
1016# tcId = 114
1017# Public key uses wrong curve: secp256k1
1018private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1019public = 3056301006072a8648ce3d020106052b8104000a034200048028d16082b07696d4aa4aab9d6b1f1463435ac097900631108f9888e13da67c4841fd8dd3ced6e7ad8c6fc656621c2f93d3db0eb29d48d1423154519865dbc1
1020result = invalid
1021shared =
1022
1023# tcId = 115
1024# Public key uses wrong curve: brainpoolP224r1
1025private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1026public = 3052301406072a8648ce3d020106092b2403030208010105033a0004a6bae3d155c1f9ca263928c986ede69acefd0dd9b3a19d2b9f4b0a3a66bea5d167318dcc028945fc1b40c60ce716ba2d414a743c6b856a6f
1027result = invalid
1028shared =
1029
1030# tcId = 116
1031# Public key uses wrong curve: brainpoolP256r1
1032private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1033public = 305a301406072a8648ce3d020106092b2403030208010107034200045d3ddbbb9bc071d8b59855c74bdf3541ae4cb6c1a24ec439034df7abde16a346523edf6a67896b304cb2cd2a083eec2b16935bbc910e85ec6eae38b50230bf70
1034result = invalid
1035shared =
1036
1037# tcId = 117
1038# Public key uses wrong curve: brainpoolP320r1
1039private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1040public = 306a301406072a8648ce3d020106092b240303020801010903520004a43c6ef2500723d54c1fc88f8844d83445ca5a0f585c10b8eb3f022d47d0e84862b7f5cbf97d352d4348ca730f600f2258d1d192da223f6ba83a7cc0d6da598d55c2b77824d326c8df000b8fff156d2c
1041result = invalid
1042shared =
1043
1044# tcId = 118
1045# Public key uses wrong curve: brainpoolP384r1
1046private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1047public = 307a301406072a8648ce3d020106092b240303020801010b036200042391c062833d1e6d89ec256cf4a3989534c1ead5e1e14ffae933a53f962857e4713087e1b3d65ac79634c71577af24698b5ce959183835551f7b08aef7853378c299930b360813fd58d5e4da8b37d5a7473e891ee11cb02881bd848b364fb7d5
1048result = invalid
1049shared =
1050
1051# tcId = 119
1052# Public key uses wrong curve: brainpoolP512r1
1053private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1054public = 30819b301406072a8648ce3d020106092b240303020801010d038182000484beae85096640953c1fd6ebbc32697263d53f89943cbaf14432061aea8c0318acbd9389ab1d2e904fa0e081d08cfabb614ed9bca618211142d94623c14b476a25e47abf98fd3b1da1417dfc2e2cfc8424b16ea14dd45e1422be7d4e0a5cc7f4d4ab5f198cdbaaa3f642ec6361842cbe869382ee78cd596ff5e740d9ec2c3ad6
1055result = invalid
1056shared =
1057
1058# tcId = 120
1059# Public key uses wrong curve: brainpoolP224t1
1060private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1061public = 3052301406072a8648ce3d020106092b2403030208010106033a00042b0a1a858ffc44e7752940731d378f96570837e279ea3948fe00cff8b5f89adb4e2fe6f8781ba6426364f4590b34dd79fc80629de4a86084
1062result = invalid
1063shared =
1064
1065# tcId = 121
1066# Public key uses wrong curve: brainpoolP256t1
1067private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1068public = 305a301406072a8648ce3d020106092b2403030208010108034200043037c01b4a5ac53742e3f5528dffb0f010ab6ebeb08d792b32e19e9006ca331a024b67698d7cf4b575ccd9389441d5c640b77c63771cef1bd85675361c6602a4
1069result = invalid
1070shared =
1071
1072# tcId = 122
1073# Public key uses wrong curve: brainpoolP320t1
1074private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1075public = 306a301406072a8648ce3d020106092b240303020801010a035200040f0fd972a495a140124a4019291a20f5b39fb755c126bf268643bb3091eca44f2a3cda1dead6ab1f4fe08a4b3872423f71e5bf96b1c20bc0ca73b7e2c134cc14a5f77bc838ebcf01084da3bf15663536
1076result = invalid
1077shared =
1078
1079# tcId = 123
1080# Public key uses wrong curve: brainpoolP384t1
1081private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1082public = 307a301406072a8648ce3d020106092b240303020801010c0362000403b65faf5a6bf74bd5c166278a4b566c6c705ac6363e61f3b0699e116d3c5b19e8b7021b75b005f78a8cea8de34c49397f9b3b2bfc8706eb8163c802371eff7dfc825c40aa84dd9d1c4b34615ee5ae28c6c05d58d2a8ccc3786382b712d3bcda
1083result = invalid
1084shared =
1085
1086# tcId = 124
1087# Public key uses wrong curve: brainpoolP512t1
1088private = 0b44f9670fedba887ad8e806226063e77604b27c362836326e93ecb7fcc6dc297
1089public = 30819b301406072a8648ce3d020106092b240303020801010e03818200047504d660943a69ab043378e44c034896534a346e0e95f35fcaad3503b490856bfb20a753ecabc6d7bfeec28d057f919923b7d3c086953eb16c5bd287b59788db72dbb7c273854294c927ea7eca205aae2f0830e5faaddad8316231bfc3572c85c33cb7054e04c8936e3ce059c907e59f40593444e590b31820bc1f514ed0ec8a
1090result = invalid
1091shared =
1092
1093# tcId = 125
1094# invalid public key
1095private = 6f953faff3599e6c762d7f4cabfeed092de2add1df1bc5748c6cbb725cf35458
1096public = 3039301306072a8648ce3d020106082a8648ce3d03010703220002fd4bf61763b46581fd9174d623516cf3c81edd40e29ffa2777fb6cb0ae3ce535
1097result = invalid
1098shared =
1099# The point in the public key is compressed. Not every library supports points
1100# in compressed format.
1101
1102# tcId = 126
1103# public key is a low order point on twist
1104private = 0d27edf0ff5b6b6b465753e7158370332c153b468a1be087ad0f490bdb99e5f02
1105public = 3039301306072a8648ce3d020106082a8648ce3d03010703220003efdde3b32872a9effcf3b94cbf73aa7b39f9683ece9121b9852167f4e3da609b
1106result = invalid
1107shared =
1108# The point in the public key is compressed. Not every library supports points
1109# in compressed format.
1110
1111# tcId = 127
1112# public key is a low order point on twist
1113private = 0d27edf0ff5b6b6b465753e7158370332c153b468a1be087ad0f490bdb99e5f03
1114public = 3039301306072a8648ce3d020106082a8648ce3d03010703220002efdde3b32872a9effcf3b94cbf73aa7b39f9683ece9121b9852167f4e3da609b
1115result = invalid
1116shared =
1117# The point in the public key is compressed. Not every library supports points
1118# in compressed format.
1119
1120# tcId = 128
1121# public key is a low order point on twist
1122private = 095ead84540c2d027aa3130ff1b47888cc1ed67e8dda46156e71ce0991791e835
1123public = 3039301306072a8648ce3d020106082a8648ce3d03010703220002c49524b2adfd8f5f972ef554652836e2efb2d306c6d3b0689234cec93ae73db5
1124result = invalid
1125shared =
1126# The point in the public key is compressed. Not every library supports points
1127# in compressed format.
1128
1129# tcId = 129
1130# public key is a low order point on twist
1131private = 0a8681ef67fb1f189647d95e8db00c52ceef6d41a85ba0a5bd74c44e8e62c8aa4
1132public = 3039301306072a8648ce3d020106082a8648ce3d0301070322000318f9bae7747cd844e98525b7ccd0daf6e1d20a818b2175a9a91e4eae5343bc98
1133result = invalid
1134shared =
1135# The point in the public key is compressed. Not every library supports points
1136# in compressed format.
1137
1138# tcId = 130
1139# public key is a low order point on twist
1140private = 0a8681ef67fb1f189647d95e8db00c52ceef6d41a85ba0a5bd74c44e8e62c8aa5
1141public = 3039301306072a8648ce3d020106082a8648ce3d0301070322000218f9bae7747cd844e98525b7ccd0daf6e1d20a818b2175a9a91e4eae5343bc98
1142result = invalid
1143shared =
1144# The point in the public key is compressed. Not every library supports points
1145# in compressed format.
1146
1147# tcId = 131
1148# public key is a low order point on twist
1149private = 095ead84540c2d027aa3130ff1b47888cc1ed67e8dda46156e71ce0991791e834
1150public = 3039301306072a8648ce3d020106082a8648ce3d03010703220003c49524b2adfd8f5f972ef554652836e2efb2d306c6d3b0689234cec93ae73db5
1151result = invalid
1152shared =
1153# The point in the public key is compressed. Not every library supports points
1154# in compressed format.
1155
1156# tcId = 132
1157# long form encoding of length
1158private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1159public = 308159301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1160result = acceptable
1161shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1162# The public key in this test uses an invalid ASN encoding. Some cases where the
1163# ASN parser is not strictly checking the ASN format are benign as long as the
1164# ECDH computation still returns the correct shared value.
1165
1166# tcId = 133
1167# long form encoding of length
1168private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1169public = 305a30811306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1170result = acceptable
1171shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1172# The public key in this test uses an invalid ASN encoding. Some cases where the
1173# ASN parser is not strictly checking the ASN format are benign as long as the
1174# ECDH computation still returns the correct shared value.
1175
1176# tcId = 134
1177# long form encoding of length
1178private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1179public = 305a30140681072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1180result = acceptable
1181shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1182# The public key in this test uses an invalid ASN encoding. Some cases where the
1183# ASN parser is not strictly checking the ASN format are benign as long as the
1184# ECDH computation still returns the correct shared value.
1185
1186# tcId = 135
1187# long form encoding of length
1188private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1189public = 305a301406072a8648ce3d02010681082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1190result = acceptable
1191shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1192# The public key in this test uses an invalid ASN encoding. Some cases where the
1193# ASN parser is not strictly checking the ASN format are benign as long as the
1194# ECDH computation still returns the correct shared value.
1195
1196# tcId = 136
1197# long form encoding of length
1198private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1199public = 305a301306072a8648ce3d020106082a8648ce3d03010703814200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1200result = acceptable
1201shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1202# The public key in this test uses an invalid ASN encoding. Some cases where the
1203# ASN parser is not strictly checking the ASN format are benign as long as the
1204# ECDH computation still returns the correct shared value.
1205
1206# tcId = 137
1207# length contains leading 0
1208private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1209public = 30820059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1210result = acceptable
1211shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1212# The public key in this test uses an invalid ASN encoding. Some cases where the
1213# ASN parser is not strictly checking the ASN format are benign as long as the
1214# ECDH computation still returns the correct shared value.
1215
1216# tcId = 138
1217# length contains leading 0
1218private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1219public = 305b3082001306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1220result = acceptable
1221shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1222# The public key in this test uses an invalid ASN encoding. Some cases where the
1223# ASN parser is not strictly checking the ASN format are benign as long as the
1224# ECDH computation still returns the correct shared value.
1225
1226# tcId = 139
1227# length contains leading 0
1228private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1229public = 305b3015068200072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1230result = acceptable
1231shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1232# The public key in this test uses an invalid ASN encoding. Some cases where the
1233# ASN parser is not strictly checking the ASN format are benign as long as the
1234# ECDH computation still returns the correct shared value.
1235
1236# tcId = 140
1237# length contains leading 0
1238private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1239public = 305b301506072a8648ce3d0201068200082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1240result = acceptable
1241shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1242# The public key in this test uses an invalid ASN encoding. Some cases where the
1243# ASN parser is not strictly checking the ASN format are benign as long as the
1244# ECDH computation still returns the correct shared value.
1245
1246# tcId = 141
1247# length contains leading 0
1248private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1249public = 305b301306072a8648ce3d020106082a8648ce3d0301070382004200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1250result = acceptable
1251shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1252# The public key in this test uses an invalid ASN encoding. Some cases where the
1253# ASN parser is not strictly checking the ASN format are benign as long as the
1254# ECDH computation still returns the correct shared value.
1255
1256# tcId = 142
1257# wrong length
1258private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1259public = 305a301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1260result = acceptable
1261shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1262# The public key in this test uses an invalid ASN encoding. Some cases where the
1263# ASN parser is not strictly checking the ASN format are benign as long as the
1264# ECDH computation still returns the correct shared value.
1265
1266# tcId = 143
1267# wrong length
1268private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1269public = 3058301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1270result = acceptable
1271shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1272# The public key in this test uses an invalid ASN encoding. Some cases where the
1273# ASN parser is not strictly checking the ASN format are benign as long as the
1274# ECDH computation still returns the correct shared value.
1275
1276# tcId = 144
1277# wrong length
1278private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1279public = 3059301406072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1280result = acceptable
1281shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1282# The public key in this test uses an invalid ASN encoding. Some cases where the
1283# ASN parser is not strictly checking the ASN format are benign as long as the
1284# ECDH computation still returns the correct shared value.
1285
1286# tcId = 145
1287# wrong length
1288private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1289public = 3059301206072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1290result = acceptable
1291shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1292# The public key in this test uses an invalid ASN encoding. Some cases where the
1293# ASN parser is not strictly checking the ASN format are benign as long as the
1294# ECDH computation still returns the correct shared value.
1295
1296# tcId = 146
1297# wrong length
1298private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1299public = 3059301306082a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1300result = acceptable
1301shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1302# The public key in this test uses an invalid ASN encoding. Some cases where the
1303# ASN parser is not strictly checking the ASN format are benign as long as the
1304# ECDH computation still returns the correct shared value.
1305
1306# tcId = 147
1307# wrong length
1308private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1309public = 3059301306062a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1310result = acceptable
1311shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1312# The public key in this test uses an invalid ASN encoding. Some cases where the
1313# ASN parser is not strictly checking the ASN format are benign as long as the
1314# ECDH computation still returns the correct shared value.
1315
1316# tcId = 148
1317# wrong length
1318private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1319public = 3059301306072a8648ce3d020106092a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1320result = acceptable
1321shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1322# The public key in this test uses an invalid ASN encoding. Some cases where the
1323# ASN parser is not strictly checking the ASN format are benign as long as the
1324# ECDH computation still returns the correct shared value.
1325
1326# tcId = 149
1327# wrong length
1328private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1329public = 3059301306072a8648ce3d020106072a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1330result = acceptable
1331shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1332# The public key in this test uses an invalid ASN encoding. Some cases where the
1333# ASN parser is not strictly checking the ASN format are benign as long as the
1334# ECDH computation still returns the correct shared value.
1335
1336# tcId = 150
1337# wrong length
1338private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1339public = 3059301306072a8648ce3d020106082a8648ce3d030107034300042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1340result = acceptable
1341shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1342# The public key in this test uses an invalid ASN encoding. Some cases where the
1343# ASN parser is not strictly checking the ASN format are benign as long as the
1344# ECDH computation still returns the correct shared value.
1345
1346# tcId = 151
1347# wrong length
1348private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1349public = 3059301306072a8648ce3d020106082a8648ce3d030107034100042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1350result = acceptable
1351shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1352# The public key in this test uses an invalid ASN encoding. Some cases where the
1353# ASN parser is not strictly checking the ASN format are benign as long as the
1354# ECDH computation still returns the correct shared value.
1355
1356# tcId = 152
1357# uint32 overflow in length
1358private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1359public = 30850100000059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1360result = acceptable
1361shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1362# The public key in this test uses an invalid ASN encoding. Some cases where the
1363# ASN parser is not strictly checking the ASN format are benign as long as the
1364# ECDH computation still returns the correct shared value.
1365
1366# tcId = 153
1367# uint32 overflow in length
1368private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1369public = 305e3085010000001306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1370result = acceptable
1371shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1372# The public key in this test uses an invalid ASN encoding. Some cases where the
1373# ASN parser is not strictly checking the ASN format are benign as long as the
1374# ECDH computation still returns the correct shared value.
1375
1376# tcId = 154
1377# uint32 overflow in length
1378private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1379public = 305e3018068501000000072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1380result = acceptable
1381shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1382# The public key in this test uses an invalid ASN encoding. Some cases where the
1383# ASN parser is not strictly checking the ASN format are benign as long as the
1384# ECDH computation still returns the correct shared value.
1385
1386# tcId = 155
1387# uint32 overflow in length
1388private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1389public = 305e301806072a8648ce3d0201068501000000082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1390result = acceptable
1391shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1392# The public key in this test uses an invalid ASN encoding. Some cases where the
1393# ASN parser is not strictly checking the ASN format are benign as long as the
1394# ECDH computation still returns the correct shared value.
1395
1396# tcId = 156
1397# uint32 overflow in length
1398private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1399public = 305e301306072a8648ce3d020106082a8648ce3d0301070385010000004200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1400result = acceptable
1401shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1402# The public key in this test uses an invalid ASN encoding. Some cases where the
1403# ASN parser is not strictly checking the ASN format are benign as long as the
1404# ECDH computation still returns the correct shared value.
1405
1406# tcId = 157
1407# uint64 overflow in length
1408private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1409public = 3089010000000000000059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1410result = acceptable
1411shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1412# The public key in this test uses an invalid ASN encoding. Some cases where the
1413# ASN parser is not strictly checking the ASN format are benign as long as the
1414# ECDH computation still returns the correct shared value.
1415
1416# tcId = 158
1417# uint64 overflow in length
1418private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1419public = 3062308901000000000000001306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1420result = acceptable
1421shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1422# The public key in this test uses an invalid ASN encoding. Some cases where the
1423# ASN parser is not strictly checking the ASN format are benign as long as the
1424# ECDH computation still returns the correct shared value.
1425
1426# tcId = 159
1427# uint64 overflow in length
1428private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1429public = 3062301c06890100000000000000072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1430result = acceptable
1431shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1432# The public key in this test uses an invalid ASN encoding. Some cases where the
1433# ASN parser is not strictly checking the ASN format are benign as long as the
1434# ECDH computation still returns the correct shared value.
1435
1436# tcId = 160
1437# uint64 overflow in length
1438private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1439public = 3062301c06072a8648ce3d020106890100000000000000082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1440result = acceptable
1441shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1442# The public key in this test uses an invalid ASN encoding. Some cases where the
1443# ASN parser is not strictly checking the ASN format are benign as long as the
1444# ECDH computation still returns the correct shared value.
1445
1446# tcId = 161
1447# uint64 overflow in length
1448private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1449public = 3062301306072a8648ce3d020106082a8648ce3d030107038901000000000000004200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1450result = acceptable
1451shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1452# The public key in this test uses an invalid ASN encoding. Some cases where the
1453# ASN parser is not strictly checking the ASN format are benign as long as the
1454# ECDH computation still returns the correct shared value.
1455
1456# tcId = 162
1457# length = 2**31 - 1
1458private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1459public = 30847fffffff301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1460result = acceptable
1461shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1462# The public key in this test uses an invalid ASN encoding. Some cases where the
1463# ASN parser is not strictly checking the ASN format are benign as long as the
1464# ECDH computation still returns the correct shared value.
1465
1466# tcId = 163
1467# length = 2**31 - 1
1468private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1469public = 305d30847fffffff06072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1470result = acceptable
1471shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1472# The public key in this test uses an invalid ASN encoding. Some cases where the
1473# ASN parser is not strictly checking the ASN format are benign as long as the
1474# ECDH computation still returns the correct shared value.
1475
1476# tcId = 164
1477# length = 2**31 - 1
1478private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1479public = 305d301706847fffffff2a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1480result = acceptable
1481shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1482# The public key in this test uses an invalid ASN encoding. Some cases where the
1483# ASN parser is not strictly checking the ASN format are benign as long as the
1484# ECDH computation still returns the correct shared value.
1485
1486# tcId = 165
1487# length = 2**31 - 1
1488private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1489public = 305d301706072a8648ce3d020106847fffffff2a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1490result = acceptable
1491shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1492# The public key in this test uses an invalid ASN encoding. Some cases where the
1493# ASN parser is not strictly checking the ASN format are benign as long as the
1494# ECDH computation still returns the correct shared value.
1495
1496# tcId = 166
1497# length = 2**31 - 1
1498private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1499public = 305d301306072a8648ce3d020106082a8648ce3d03010703847fffffff00042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1500result = acceptable
1501shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1502# The public key in this test uses an invalid ASN encoding. Some cases where the
1503# ASN parser is not strictly checking the ASN format are benign as long as the
1504# ECDH computation still returns the correct shared value.
1505
1506# tcId = 167
1507# length = 2**32 - 1
1508private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1509public = 3084ffffffff301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1510result = acceptable
1511shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1512# The public key in this test uses an invalid ASN encoding. Some cases where the
1513# ASN parser is not strictly checking the ASN format are benign as long as the
1514# ECDH computation still returns the correct shared value.
1515
1516# tcId = 168
1517# length = 2**32 - 1
1518private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1519public = 305d3084ffffffff06072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1520result = acceptable
1521shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1522# The public key in this test uses an invalid ASN encoding. Some cases where the
1523# ASN parser is not strictly checking the ASN format are benign as long as the
1524# ECDH computation still returns the correct shared value.
1525
1526# tcId = 169
1527# length = 2**32 - 1
1528private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1529public = 305d30170684ffffffff2a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1530result = acceptable
1531shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1532# The public key in this test uses an invalid ASN encoding. Some cases where the
1533# ASN parser is not strictly checking the ASN format are benign as long as the
1534# ECDH computation still returns the correct shared value.
1535
1536# tcId = 170
1537# length = 2**32 - 1
1538private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1539public = 305d301706072a8648ce3d02010684ffffffff2a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1540result = acceptable
1541shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1542# The public key in this test uses an invalid ASN encoding. Some cases where the
1543# ASN parser is not strictly checking the ASN format are benign as long as the
1544# ECDH computation still returns the correct shared value.
1545
1546# tcId = 171
1547# length = 2**32 - 1
1548private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1549public = 305d301306072a8648ce3d020106082a8648ce3d0301070384ffffffff00042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1550result = acceptable
1551shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1552# The public key in this test uses an invalid ASN encoding. Some cases where the
1553# ASN parser is not strictly checking the ASN format are benign as long as the
1554# ECDH computation still returns the correct shared value.
1555
1556# tcId = 172
1557# length = 2**40 - 1
1558private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1559public = 3085ffffffffff301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1560result = acceptable
1561shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1562# The public key in this test uses an invalid ASN encoding. Some cases where the
1563# ASN parser is not strictly checking the ASN format are benign as long as the
1564# ECDH computation still returns the correct shared value.
1565
1566# tcId = 173
1567# length = 2**40 - 1
1568private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1569public = 305e3085ffffffffff06072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1570result = acceptable
1571shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1572# The public key in this test uses an invalid ASN encoding. Some cases where the
1573# ASN parser is not strictly checking the ASN format are benign as long as the
1574# ECDH computation still returns the correct shared value.
1575
1576# tcId = 174
1577# length = 2**40 - 1
1578private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1579public = 305e30180685ffffffffff2a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1580result = acceptable
1581shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1582# The public key in this test uses an invalid ASN encoding. Some cases where the
1583# ASN parser is not strictly checking the ASN format are benign as long as the
1584# ECDH computation still returns the correct shared value.
1585
1586# tcId = 175
1587# length = 2**40 - 1
1588private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1589public = 305e301806072a8648ce3d02010685ffffffffff2a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1590result = acceptable
1591shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1592# The public key in this test uses an invalid ASN encoding. Some cases where the
1593# ASN parser is not strictly checking the ASN format are benign as long as the
1594# ECDH computation still returns the correct shared value.
1595
1596# tcId = 176
1597# length = 2**40 - 1
1598private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1599public = 305e301306072a8648ce3d020106082a8648ce3d0301070385ffffffffff00042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1600result = acceptable
1601shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1602# The public key in this test uses an invalid ASN encoding. Some cases where the
1603# ASN parser is not strictly checking the ASN format are benign as long as the
1604# ECDH computation still returns the correct shared value.
1605
1606# tcId = 177
1607# length = 2**64 - 1
1608private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1609public = 3088ffffffffffffffff301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1610result = acceptable
1611shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1612# The public key in this test uses an invalid ASN encoding. Some cases where the
1613# ASN parser is not strictly checking the ASN format are benign as long as the
1614# ECDH computation still returns the correct shared value.
1615
1616# tcId = 178
1617# length = 2**64 - 1
1618private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1619public = 30613088ffffffffffffffff06072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1620result = acceptable
1621shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1622# The public key in this test uses an invalid ASN encoding. Some cases where the
1623# ASN parser is not strictly checking the ASN format are benign as long as the
1624# ECDH computation still returns the correct shared value.
1625
1626# tcId = 179
1627# length = 2**64 - 1
1628private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1629public = 3061301b0688ffffffffffffffff2a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1630result = acceptable
1631shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1632# The public key in this test uses an invalid ASN encoding. Some cases where the
1633# ASN parser is not strictly checking the ASN format are benign as long as the
1634# ECDH computation still returns the correct shared value.
1635
1636# tcId = 180
1637# length = 2**64 - 1
1638private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1639public = 3061301b06072a8648ce3d02010688ffffffffffffffff2a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1640result = acceptable
1641shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1642# The public key in this test uses an invalid ASN encoding. Some cases where the
1643# ASN parser is not strictly checking the ASN format are benign as long as the
1644# ECDH computation still returns the correct shared value.
1645
1646# tcId = 181
1647# length = 2**64 - 1
1648private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1649public = 3061301306072a8648ce3d020106082a8648ce3d0301070388ffffffffffffffff00042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1650result = acceptable
1651shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1652# The public key in this test uses an invalid ASN encoding. Some cases where the
1653# ASN parser is not strictly checking the ASN format are benign as long as the
1654# ECDH computation still returns the correct shared value.
1655
1656# tcId = 182
1657# incorrect length
1658private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1659public = 30ff301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1660result = acceptable
1661shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1662# The public key in this test uses an invalid ASN encoding. Some cases where the
1663# ASN parser is not strictly checking the ASN format are benign as long as the
1664# ECDH computation still returns the correct shared value.
1665
1666# tcId = 183
1667# incorrect length
1668private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1669public = 305930ff06072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1670result = acceptable
1671shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1672# The public key in this test uses an invalid ASN encoding. Some cases where the
1673# ASN parser is not strictly checking the ASN format are benign as long as the
1674# ECDH computation still returns the correct shared value.
1675
1676# tcId = 184
1677# incorrect length
1678private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1679public = 3059301306ff2a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1680result = acceptable
1681shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1682# The public key in this test uses an invalid ASN encoding. Some cases where the
1683# ASN parser is not strictly checking the ASN format are benign as long as the
1684# ECDH computation still returns the correct shared value.
1685
1686# tcId = 185
1687# incorrect length
1688private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1689public = 3059301306072a8648ce3d020106ff2a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1690result = acceptable
1691shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1692# The public key in this test uses an invalid ASN encoding. Some cases where the
1693# ASN parser is not strictly checking the ASN format are benign as long as the
1694# ECDH computation still returns the correct shared value.
1695
1696# tcId = 186
1697# incorrect length
1698private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1699public = 3059301306072a8648ce3d020106082a8648ce3d03010703ff00042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1700result = acceptable
1701shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1702# The public key in this test uses an invalid ASN encoding. Some cases where the
1703# ASN parser is not strictly checking the ASN format are benign as long as the
1704# ECDH computation still returns the correct shared value.
1705
1706# tcId = 187
1707# indefinite length without termination
1708private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1709public = 3080301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1710result = acceptable
1711shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1712# The public key in this test uses an invalid ASN encoding. Some cases where the
1713# ASN parser is not strictly checking the ASN format are benign as long as the
1714# ECDH computation still returns the correct shared value.
1715
1716# tcId = 188
1717# indefinite length without termination
1718private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1719public = 3059308006072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1720result = acceptable
1721shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1722# The public key in this test uses an invalid ASN encoding. Some cases where the
1723# ASN parser is not strictly checking the ASN format are benign as long as the
1724# ECDH computation still returns the correct shared value.
1725
1726# tcId = 189
1727# indefinite length without termination
1728private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1729public = 3059301306802a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1730result = acceptable
1731shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1732# The public key in this test uses an invalid ASN encoding. Some cases where the
1733# ASN parser is not strictly checking the ASN format are benign as long as the
1734# ECDH computation still returns the correct shared value.
1735
1736# tcId = 190
1737# indefinite length without termination
1738private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1739public = 3059301306072a8648ce3d020106802a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1740result = acceptable
1741shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1742# The public key in this test uses an invalid ASN encoding. Some cases where the
1743# ASN parser is not strictly checking the ASN format are benign as long as the
1744# ECDH computation still returns the correct shared value.
1745
1746# tcId = 191
1747# indefinite length without termination
1748private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1749public = 3059301306072a8648ce3d020106082a8648ce3d030107038000042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1750result = acceptable
1751shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1752# The public key in this test uses an invalid ASN encoding. Some cases where the
1753# ASN parser is not strictly checking the ASN format are benign as long as the
1754# ECDH computation still returns the correct shared value.
1755
1756# tcId = 192
1757# removing sequence
1758private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1759public =
1760result = acceptable
1761shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1762# The public key in this test uses an invalid ASN encoding. Some cases where the
1763# ASN parser is not strictly checking the ASN format are benign as long as the
1764# ECDH computation still returns the correct shared value.
1765
1766# tcId = 193
1767# removing sequence
1768private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1769public = 3044034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1770result = acceptable
1771shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1772# The public key in this test uses an invalid ASN encoding. Some cases where the
1773# ASN parser is not strictly checking the ASN format are benign as long as the
1774# ECDH computation still returns the correct shared value.
1775
1776# tcId = 194
1777# lonely sequence tag
1778private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1779public = 30
1780result = acceptable
1781shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1782# The public key in this test uses an invalid ASN encoding. Some cases where the
1783# ASN parser is not strictly checking the ASN format are benign as long as the
1784# ECDH computation still returns the correct shared value.
1785
1786# tcId = 195
1787# lonely sequence tag
1788private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1789public = 304530034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1790result = acceptable
1791shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1792# The public key in this test uses an invalid ASN encoding. Some cases where the
1793# ASN parser is not strictly checking the ASN format are benign as long as the
1794# ECDH computation still returns the correct shared value.
1795
1796# tcId = 196
1797# appending 0's to sequence
1798private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1799public = 305b301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0000
1800result = acceptable
1801shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1802# The public key in this test uses an invalid ASN encoding. Some cases where the
1803# ASN parser is not strictly checking the ASN format are benign as long as the
1804# ECDH computation still returns the correct shared value.
1805
1806# tcId = 197
1807# appending 0's to sequence
1808private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1809public = 305b301506072a8648ce3d020106082a8648ce3d0301070000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1810result = acceptable
1811shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1812# The public key in this test uses an invalid ASN encoding. Some cases where the
1813# ASN parser is not strictly checking the ASN format are benign as long as the
1814# ECDH computation still returns the correct shared value.
1815
1816# tcId = 198
1817# prepending 0's to sequence
1818private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1819public = 305b0000301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1820result = acceptable
1821shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1822# The public key in this test uses an invalid ASN encoding. Some cases where the
1823# ASN parser is not strictly checking the ASN format are benign as long as the
1824# ECDH computation still returns the correct shared value.
1825
1826# tcId = 199
1827# prepending 0's to sequence
1828private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1829public = 305b3015000006072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1830result = acceptable
1831shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1832# The public key in this test uses an invalid ASN encoding. Some cases where the
1833# ASN parser is not strictly checking the ASN format are benign as long as the
1834# ECDH computation still returns the correct shared value.
1835
1836# tcId = 200
1837# appending unused 0's to sequence
1838private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1839public = 3059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0000
1840result = acceptable
1841shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1842# The public key in this test uses an invalid ASN encoding. Some cases where the
1843# ASN parser is not strictly checking the ASN format are benign as long as the
1844# ECDH computation still returns the correct shared value.
1845
1846# tcId = 201
1847# appending unused 0's to sequence
1848private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1849public = 305b301306072a8648ce3d020106082a8648ce3d0301070000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1850result = acceptable
1851shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1852# The public key in this test uses an invalid ASN encoding. Some cases where the
1853# ASN parser is not strictly checking the ASN format are benign as long as the
1854# ECDH computation still returns the correct shared value.
1855
1856# tcId = 202
1857# appending null value to sequence
1858private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1859public = 305b301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0500
1860result = acceptable
1861shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1862# The public key in this test uses an invalid ASN encoding. Some cases where the
1863# ASN parser is not strictly checking the ASN format are benign as long as the
1864# ECDH computation still returns the correct shared value.
1865
1866# tcId = 203
1867# appending null value to sequence
1868private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1869public = 305b301506072a8648ce3d020106082a8648ce3d0301070500034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1870result = acceptable
1871shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1872# The public key in this test uses an invalid ASN encoding. Some cases where the
1873# ASN parser is not strictly checking the ASN format are benign as long as the
1874# ECDH computation still returns the correct shared value.
1875
1876# tcId = 204
1877# including garbage
1878private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1879public = 305e4981773059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1880result = acceptable
1881shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1882# The public key in this test uses an invalid ASN encoding. Some cases where the
1883# ASN parser is not strictly checking the ASN format are benign as long as the
1884# ECDH computation still returns the correct shared value.
1885
1886# tcId = 205
1887# including garbage
1888private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1889public = 305d25003059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1890result = acceptable
1891shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1892# The public key in this test uses an invalid ASN encoding. Some cases where the
1893# ASN parser is not strictly checking the ASN format are benign as long as the
1894# ECDH computation still returns the correct shared value.
1895
1896# tcId = 206
1897# including garbage
1898private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1899public = 305b3059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0004deadbeef
1900result = acceptable
1901shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1902# The public key in this test uses an invalid ASN encoding. Some cases where the
1903# ASN parser is not strictly checking the ASN format are benign as long as the
1904# ECDH computation still returns the correct shared value.
1905
1906# tcId = 207
1907# including garbage
1908private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1909public = 305e3018498177301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1910result = acceptable
1911shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1912# The public key in this test uses an invalid ASN encoding. Some cases where the
1913# ASN parser is not strictly checking the ASN format are benign as long as the
1914# ECDH computation still returns the correct shared value.
1915
1916# tcId = 208
1917# including garbage
1918private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1919public = 305d30172500301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1920result = acceptable
1921shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1922# The public key in this test uses an invalid ASN encoding. Some cases where the
1923# ASN parser is not strictly checking the ASN format are benign as long as the
1924# ECDH computation still returns the correct shared value.
1925
1926# tcId = 209
1927# including garbage
1928private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1929public = 30613015301306072a8648ce3d020106082a8648ce3d0301070004deadbeef034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1930result = acceptable
1931shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1932# The public key in this test uses an invalid ASN encoding. Some cases where the
1933# ASN parser is not strictly checking the ASN format are benign as long as the
1934# ECDH computation still returns the correct shared value.
1935
1936# tcId = 210
1937# including garbage
1938private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1939public = 305e3018260c49817706072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1940result = acceptable
1941shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1942# The public key in this test uses an invalid ASN encoding. Some cases where the
1943# ASN parser is not strictly checking the ASN format are benign as long as the
1944# ECDH computation still returns the correct shared value.
1945
1946# tcId = 211
1947# including garbage
1948private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1949public = 305d3017260b250006072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1950result = acceptable
1951shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1952# The public key in this test uses an invalid ASN encoding. Some cases where the
1953# ASN parser is not strictly checking the ASN format are benign as long as the
1954# ECDH computation still returns the correct shared value.
1955
1956# tcId = 212
1957# including garbage
1958private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1959public = 3061301b260906072a8648ce3d02010004deadbeef06082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1960result = acceptable
1961shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1962# The public key in this test uses an invalid ASN encoding. Some cases where the
1963# ASN parser is not strictly checking the ASN format are benign as long as the
1964# ECDH computation still returns the correct shared value.
1965
1966# tcId = 213
1967# including garbage
1968private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1969public = 305e301806072a8648ce3d0201260d49817706082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1970result = acceptable
1971shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1972# The public key in this test uses an invalid ASN encoding. Some cases where the
1973# ASN parser is not strictly checking the ASN format are benign as long as the
1974# ECDH computation still returns the correct shared value.
1975
1976# tcId = 214
1977# including garbage
1978private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1979public = 305d301706072a8648ce3d0201260c250006082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1980result = acceptable
1981shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1982# The public key in this test uses an invalid ASN encoding. Some cases where the
1983# ASN parser is not strictly checking the ASN format are benign as long as the
1984# ECDH computation still returns the correct shared value.
1985
1986# tcId = 215
1987# including garbage
1988private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1989public = 3061301b06072a8648ce3d0201260a06082a8648ce3d0301070004deadbeef034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
1990result = acceptable
1991shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
1992# The public key in this test uses an invalid ASN encoding. Some cases where the
1993# ASN parser is not strictly checking the ASN format are benign as long as the
1994# ECDH computation still returns the correct shared value.
1995
1996# tcId = 216
1997# including garbage
1998private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
1999public = 305e301306072a8648ce3d020106082a8648ce3d0301072347498177034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2000result = acceptable
2001shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2002# The public key in this test uses an invalid ASN encoding. Some cases where the
2003# ASN parser is not strictly checking the ASN format are benign as long as the
2004# ECDH computation still returns the correct shared value.
2005
2006# tcId = 217
2007# including garbage
2008private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2009public = 305d301306072a8648ce3d020106082a8648ce3d03010723462500034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2010result = acceptable
2011shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2012# The public key in this test uses an invalid ASN encoding. Some cases where the
2013# ASN parser is not strictly checking the ASN format are benign as long as the
2014# ECDH computation still returns the correct shared value.
2015
2016# tcId = 218
2017# including garbage
2018private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2019public = 3061301306072a8648ce3d020106082a8648ce3d0301072344034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0004deadbeef
2020result = acceptable
2021shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2022# The public key in this test uses an invalid ASN encoding. Some cases where the
2023# ASN parser is not strictly checking the ASN format are benign as long as the
2024# ECDH computation still returns the correct shared value.
2025
2026# tcId = 219
2027# including undefined tags
2028private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2029public = 3061aa00bb00cd003059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2030result = acceptable
2031shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2032# The public key in this test uses an invalid ASN encoding. Some cases where the
2033# ASN parser is not strictly checking the ASN format are benign as long as the
2034# ECDH computation still returns the correct shared value.
2035
2036# tcId = 220
2037# including undefined tags
2038private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2039public = 305faa02aabb3059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2040result = acceptable
2041shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2042# The public key in this test uses an invalid ASN encoding. Some cases where the
2043# ASN parser is not strictly checking the ASN format are benign as long as the
2044# ECDH computation still returns the correct shared value.
2045
2046# tcId = 221
2047# including undefined tags
2048private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2049public = 3061301baa00bb00cd00301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2050result = acceptable
2051shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2052# The public key in this test uses an invalid ASN encoding. Some cases where the
2053# ASN parser is not strictly checking the ASN format are benign as long as the
2054# ECDH computation still returns the correct shared value.
2055
2056# tcId = 222
2057# including undefined tags
2058private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2059public = 305f3019aa02aabb301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2060result = acceptable
2061shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2062# The public key in this test uses an invalid ASN encoding. Some cases where the
2063# ASN parser is not strictly checking the ASN format are benign as long as the
2064# ECDH computation still returns the correct shared value.
2065
2066# tcId = 223
2067# including undefined tags
2068private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2069public = 3061301b260faa00bb00cd0006072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2070result = acceptable
2071shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2072# The public key in this test uses an invalid ASN encoding. Some cases where the
2073# ASN parser is not strictly checking the ASN format are benign as long as the
2074# ECDH computation still returns the correct shared value.
2075
2076# tcId = 224
2077# including undefined tags
2078private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2079public = 305f3019260daa02aabb06072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2080result = acceptable
2081shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2082# The public key in this test uses an invalid ASN encoding. Some cases where the
2083# ASN parser is not strictly checking the ASN format are benign as long as the
2084# ECDH computation still returns the correct shared value.
2085
2086# tcId = 225
2087# including undefined tags
2088private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2089public = 3061301b06072a8648ce3d02012610aa00bb00cd0006082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2090result = acceptable
2091shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2092# The public key in this test uses an invalid ASN encoding. Some cases where the
2093# ASN parser is not strictly checking the ASN format are benign as long as the
2094# ECDH computation still returns the correct shared value.
2095
2096# tcId = 226
2097# including undefined tags
2098private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2099public = 305f301906072a8648ce3d0201260eaa02aabb06082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2100result = acceptable
2101shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2102# The public key in this test uses an invalid ASN encoding. Some cases where the
2103# ASN parser is not strictly checking the ASN format are benign as long as the
2104# ECDH computation still returns the correct shared value.
2105
2106# tcId = 227
2107# including undefined tags
2108private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2109public = 3061301306072a8648ce3d020106082a8648ce3d030107234aaa00bb00cd00034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2110result = acceptable
2111shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2112# The public key in this test uses an invalid ASN encoding. Some cases where the
2113# ASN parser is not strictly checking the ASN format are benign as long as the
2114# ECDH computation still returns the correct shared value.
2115
2116# tcId = 228
2117# including undefined tags
2118private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2119public = 305f301306072a8648ce3d020106082a8648ce3d0301072348aa02aabb034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2120result = acceptable
2121shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2122# The public key in this test uses an invalid ASN encoding. Some cases where the
2123# ASN parser is not strictly checking the ASN format are benign as long as the
2124# ECDH computation still returns the correct shared value.
2125
2126# tcId = 229
2127# truncated length of sequence
2128private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2129public = 3081
2130result = acceptable
2131shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2132# The public key in this test uses an invalid ASN encoding. Some cases where the
2133# ASN parser is not strictly checking the ASN format are benign as long as the
2134# ECDH computation still returns the correct shared value.
2135
2136# tcId = 230
2137# truncated length of sequence
2138private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2139public = 30463081034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2140result = acceptable
2141shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2142# The public key in this test uses an invalid ASN encoding. Some cases where the
2143# ASN parser is not strictly checking the ASN format are benign as long as the
2144# ECDH computation still returns the correct shared value.
2145
2146# tcId = 231
2147# Replacing sequence with NULL
2148private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2149public = 0500
2150result = acceptable
2151shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2152# The public key in this test uses an invalid ASN encoding. Some cases where the
2153# ASN parser is not strictly checking the ASN format are benign as long as the
2154# ECDH computation still returns the correct shared value.
2155
2156# tcId = 232
2157# Replacing sequence with NULL
2158private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2159public = 30460500034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2160result = acceptable
2161shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2162# The public key in this test uses an invalid ASN encoding. Some cases where the
2163# ASN parser is not strictly checking the ASN format are benign as long as the
2164# ECDH computation still returns the correct shared value.
2165
2166# tcId = 233
2167# changing tag value of sequence
2168private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2169public = 2e59301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2170result = acceptable
2171shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2172# The public key in this test uses an invalid ASN encoding. Some cases where the
2173# ASN parser is not strictly checking the ASN format are benign as long as the
2174# ECDH computation still returns the correct shared value.
2175
2176# tcId = 234
2177# changing tag value of sequence
2178private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2179public = 2f59301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2180result = acceptable
2181shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2182# The public key in this test uses an invalid ASN encoding. Some cases where the
2183# ASN parser is not strictly checking the ASN format are benign as long as the
2184# ECDH computation still returns the correct shared value.
2185
2186# tcId = 235
2187# changing tag value of sequence
2188private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2189public = 3159301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2190result = acceptable
2191shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2192# The public key in this test uses an invalid ASN encoding. Some cases where the
2193# ASN parser is not strictly checking the ASN format are benign as long as the
2194# ECDH computation still returns the correct shared value.
2195
2196# tcId = 236
2197# changing tag value of sequence
2198private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2199public = 3259301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2200result = acceptable
2201shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2202# The public key in this test uses an invalid ASN encoding. Some cases where the
2203# ASN parser is not strictly checking the ASN format are benign as long as the
2204# ECDH computation still returns the correct shared value.
2205
2206# tcId = 237
2207# changing tag value of sequence
2208private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2209public = ff59301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2210result = acceptable
2211shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2212# The public key in this test uses an invalid ASN encoding. Some cases where the
2213# ASN parser is not strictly checking the ASN format are benign as long as the
2214# ECDH computation still returns the correct shared value.
2215
2216# tcId = 238
2217# changing tag value of sequence
2218private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2219public = 30592e1306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2220result = acceptable
2221shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2222# The public key in this test uses an invalid ASN encoding. Some cases where the
2223# ASN parser is not strictly checking the ASN format are benign as long as the
2224# ECDH computation still returns the correct shared value.
2225
2226# tcId = 239
2227# changing tag value of sequence
2228private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2229public = 30592f1306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2230result = acceptable
2231shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2232# The public key in this test uses an invalid ASN encoding. Some cases where the
2233# ASN parser is not strictly checking the ASN format are benign as long as the
2234# ECDH computation still returns the correct shared value.
2235
2236# tcId = 240
2237# changing tag value of sequence
2238private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2239public = 3059311306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2240result = acceptable
2241shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2242# The public key in this test uses an invalid ASN encoding. Some cases where the
2243# ASN parser is not strictly checking the ASN format are benign as long as the
2244# ECDH computation still returns the correct shared value.
2245
2246# tcId = 241
2247# changing tag value of sequence
2248private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2249public = 3059321306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2250result = acceptable
2251shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2252# The public key in this test uses an invalid ASN encoding. Some cases where the
2253# ASN parser is not strictly checking the ASN format are benign as long as the
2254# ECDH computation still returns the correct shared value.
2255
2256# tcId = 242
2257# changing tag value of sequence
2258private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2259public = 3059ff1306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2260result = acceptable
2261shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2262# The public key in this test uses an invalid ASN encoding. Some cases where the
2263# ASN parser is not strictly checking the ASN format are benign as long as the
2264# ECDH computation still returns the correct shared value.
2265
2266# tcId = 243
2267# dropping value of sequence
2268private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2269public = 3000
2270result = acceptable
2271shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2272# The public key in this test uses an invalid ASN encoding. Some cases where the
2273# ASN parser is not strictly checking the ASN format are benign as long as the
2274# ECDH computation still returns the correct shared value.
2275
2276# tcId = 244
2277# dropping value of sequence
2278private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2279public = 30463000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2280result = acceptable
2281shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2282# The public key in this test uses an invalid ASN encoding. Some cases where the
2283# ASN parser is not strictly checking the ASN format are benign as long as the
2284# ECDH computation still returns the correct shared value.
2285
2286# tcId = 245
2287# truncate sequence
2288private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2289public = 3058301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add6
2290result = acceptable
2291shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2292# The public key in this test uses an invalid ASN encoding. Some cases where the
2293# ASN parser is not strictly checking the ASN format are benign as long as the
2294# ECDH computation still returns the correct shared value.
2295
2296# tcId = 246
2297# truncate sequence
2298private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2299public = 30581306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2300result = acceptable
2301shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2302# The public key in this test uses an invalid ASN encoding. Some cases where the
2303# ASN parser is not strictly checking the ASN format are benign as long as the
2304# ECDH computation still returns the correct shared value.
2305
2306# tcId = 247
2307# truncate sequence
2308private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2309public = 3058301206072a8648ce3d020106082a8648ce3d0301034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2310result = acceptable
2311shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2312# The public key in this test uses an invalid ASN encoding. Some cases where the
2313# ASN parser is not strictly checking the ASN format are benign as long as the
2314# ECDH computation still returns the correct shared value.
2315
2316# tcId = 248
2317# truncate sequence
2318private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2319public = 30583012072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2320result = acceptable
2321shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2322# The public key in this test uses an invalid ASN encoding. Some cases where the
2323# ASN parser is not strictly checking the ASN format are benign as long as the
2324# ECDH computation still returns the correct shared value.
2325
2326# tcId = 249
2327# indefinite length
2328private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2329public = 3080301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0000
2330result = acceptable
2331shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2332# The public key in this test uses an invalid ASN encoding. Some cases where the
2333# ASN parser is not strictly checking the ASN format are benign as long as the
2334# ECDH computation still returns the correct shared value.
2335
2336# tcId = 250
2337# indefinite length
2338private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2339public = 305b308006072a8648ce3d020106082a8648ce3d0301070000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2340result = acceptable
2341shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2342# The public key in this test uses an invalid ASN encoding. Some cases where the
2343# ASN parser is not strictly checking the ASN format are benign as long as the
2344# ECDH computation still returns the correct shared value.
2345
2346# tcId = 251
2347# indefinite length with truncated delimiter
2348private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2349public = 3080301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b00
2350result = acceptable
2351shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2352# The public key in this test uses an invalid ASN encoding. Some cases where the
2353# ASN parser is not strictly checking the ASN format are benign as long as the
2354# ECDH computation still returns the correct shared value.
2355
2356# tcId = 252
2357# indefinite length with truncated delimiter
2358private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2359public = 305a308006072a8648ce3d020106082a8648ce3d03010700034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2360result = acceptable
2361shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2362# The public key in this test uses an invalid ASN encoding. Some cases where the
2363# ASN parser is not strictly checking the ASN format are benign as long as the
2364# ECDH computation still returns the correct shared value.
2365
2366# tcId = 253
2367# indefinite length with additional element
2368private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2369public = 3080301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b05000000
2370result = acceptable
2371shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2372# The public key in this test uses an invalid ASN encoding. Some cases where the
2373# ASN parser is not strictly checking the ASN format are benign as long as the
2374# ECDH computation still returns the correct shared value.
2375
2376# tcId = 254
2377# indefinite length with additional element
2378private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2379public = 305d308006072a8648ce3d020106082a8648ce3d03010705000000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2380result = acceptable
2381shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2382# The public key in this test uses an invalid ASN encoding. Some cases where the
2383# ASN parser is not strictly checking the ASN format are benign as long as the
2384# ECDH computation still returns the correct shared value.
2385
2386# tcId = 255
2387# indefinite length with truncated element
2388private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2389public = 3080301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b060811220000
2390result = acceptable
2391shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2392# The public key in this test uses an invalid ASN encoding. Some cases where the
2393# ASN parser is not strictly checking the ASN format are benign as long as the
2394# ECDH computation still returns the correct shared value.
2395
2396# tcId = 256
2397# indefinite length with truncated element
2398private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2399public = 305f308006072a8648ce3d020106082a8648ce3d030107060811220000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2400result = acceptable
2401shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2402# The public key in this test uses an invalid ASN encoding. Some cases where the
2403# ASN parser is not strictly checking the ASN format are benign as long as the
2404# ECDH computation still returns the correct shared value.
2405
2406# tcId = 257
2407# indefinite length with garbage
2408private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2409public = 3080301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0000fe02beef
2410result = acceptable
2411shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2412# The public key in this test uses an invalid ASN encoding. Some cases where the
2413# ASN parser is not strictly checking the ASN format are benign as long as the
2414# ECDH computation still returns the correct shared value.
2415
2416# tcId = 258
2417# indefinite length with garbage
2418private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2419public = 305f308006072a8648ce3d020106082a8648ce3d0301070000fe02beef034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2420result = acceptable
2421shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2422# The public key in this test uses an invalid ASN encoding. Some cases where the
2423# ASN parser is not strictly checking the ASN format are benign as long as the
2424# ECDH computation still returns the correct shared value.
2425
2426# tcId = 259
2427# indefinite length with nonempty EOC
2428private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2429public = 3080301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0002beef
2430result = acceptable
2431shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2432# The public key in this test uses an invalid ASN encoding. Some cases where the
2433# ASN parser is not strictly checking the ASN format are benign as long as the
2434# ECDH computation still returns the correct shared value.
2435
2436# tcId = 260
2437# indefinite length with nonempty EOC
2438private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2439public = 305d308006072a8648ce3d020106082a8648ce3d0301070002beef034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2440result = acceptable
2441shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2442# The public key in this test uses an invalid ASN encoding. Some cases where the
2443# ASN parser is not strictly checking the ASN format are benign as long as the
2444# ECDH computation still returns the correct shared value.
2445
2446# tcId = 261
2447# prepend empty sequence
2448private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2449public = 305b3000301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2450result = acceptable
2451shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2452# The public key in this test uses an invalid ASN encoding. Some cases where the
2453# ASN parser is not strictly checking the ASN format are benign as long as the
2454# ECDH computation still returns the correct shared value.
2455
2456# tcId = 262
2457# prepend empty sequence
2458private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2459public = 305b3015300006072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2460result = acceptable
2461shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2462# The public key in this test uses an invalid ASN encoding. Some cases where the
2463# ASN parser is not strictly checking the ASN format are benign as long as the
2464# ECDH computation still returns the correct shared value.
2465
2466# tcId = 263
2467# append empty sequence
2468private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2469public = 305b301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b3000
2470result = acceptable
2471shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2472# The public key in this test uses an invalid ASN encoding. Some cases where the
2473# ASN parser is not strictly checking the ASN format are benign as long as the
2474# ECDH computation still returns the correct shared value.
2475
2476# tcId = 264
2477# append empty sequence
2478private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2479public = 305b301506072a8648ce3d020106082a8648ce3d0301073000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2480result = acceptable
2481shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2482# The public key in this test uses an invalid ASN encoding. Some cases where the
2483# ASN parser is not strictly checking the ASN format are benign as long as the
2484# ECDH computation still returns the correct shared value.
2485
2486# tcId = 265
2487# sequence of sequence
2488private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2489public = 305b3059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2490result = acceptable
2491shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2492# The public key in this test uses an invalid ASN encoding. Some cases where the
2493# ASN parser is not strictly checking the ASN format are benign as long as the
2494# ECDH computation still returns the correct shared value.
2495
2496# tcId = 266
2497# sequence of sequence
2498private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2499public = 305b3015301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2500result = acceptable
2501shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2502# The public key in this test uses an invalid ASN encoding. Some cases where the
2503# ASN parser is not strictly checking the ASN format are benign as long as the
2504# ECDH computation still returns the correct shared value.
2505
2506# tcId = 267
2507# truncated sequence
2508private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2509public = 3015301306072a8648ce3d020106082a8648ce3d030107
2510result = acceptable
2511shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2512# The public key in this test uses an invalid ASN encoding. Some cases where the
2513# ASN parser is not strictly checking the ASN format are benign as long as the
2514# ECDH computation still returns the correct shared value.
2515
2516# tcId = 268
2517# truncated sequence
2518private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2519public = 304f300906072a8648ce3d0201034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2520result = acceptable
2521shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2522# The public key in this test uses an invalid ASN encoding. Some cases where the
2523# ASN parser is not strictly checking the ASN format are benign as long as the
2524# ECDH computation still returns the correct shared value.
2525
2526# tcId = 269
2527# repeat element in sequence
2528private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2529public = 30819d301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2530result = acceptable
2531shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2532# The public key in this test uses an invalid ASN encoding. Some cases where the
2533# ASN parser is not strictly checking the ASN format are benign as long as the
2534# ECDH computation still returns the correct shared value.
2535
2536# tcId = 270
2537# repeat element in sequence
2538private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2539public = 3063301d06072a8648ce3d020106082a8648ce3d03010706082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2540result = acceptable
2541shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2542# The public key in this test uses an invalid ASN encoding. Some cases where the
2543# ASN parser is not strictly checking the ASN format are benign as long as the
2544# ECDH computation still returns the correct shared value.
2545
2546# tcId = 271
2547# removing oid
2548private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2549public = 3050300a06082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2550result = acceptable
2551shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2552# The public key in this test uses an invalid ASN encoding. Some cases where the
2553# ASN parser is not strictly checking the ASN format are benign as long as the
2554# ECDH computation still returns the correct shared value.
2555
2556# tcId = 272
2557# lonely oid tag
2558private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2559public = 3051300b0606082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2560result = acceptable
2561shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2562# The public key in this test uses an invalid ASN encoding. Some cases where the
2563# ASN parser is not strictly checking the ASN format are benign as long as the
2564# ECDH computation still returns the correct shared value.
2565
2566# tcId = 273
2567# lonely oid tag
2568private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2569public = 3050300a06072a8648ce3d020106034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2570result = acceptable
2571shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2572# The public key in this test uses an invalid ASN encoding. Some cases where the
2573# ASN parser is not strictly checking the ASN format are benign as long as the
2574# ECDH computation still returns the correct shared value.
2575
2576# tcId = 274
2577# appending 0's to oid
2578private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2579public = 305b301506092a8648ce3d0201000006082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2580result = acceptable
2581shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2582# The public key in this test uses an invalid ASN encoding. Some cases where the
2583# ASN parser is not strictly checking the ASN format are benign as long as the
2584# ECDH computation still returns the correct shared value.
2585
2586# tcId = 275
2587# appending 0's to oid
2588private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2589public = 305b301506072a8648ce3d0201060a2a8648ce3d0301070000034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2590result = acceptable
2591shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2592# The public key in this test uses an invalid ASN encoding. Some cases where the
2593# ASN parser is not strictly checking the ASN format are benign as long as the
2594# ECDH computation still returns the correct shared value.
2595
2596# tcId = 276
2597# prepending 0's to oid
2598private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2599public = 305b3015060900002a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2600result = acceptable
2601shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2602# The public key in this test uses an invalid ASN encoding. Some cases where the
2603# ASN parser is not strictly checking the ASN format are benign as long as the
2604# ECDH computation still returns the correct shared value.
2605
2606# tcId = 277
2607# prepending 0's to oid
2608private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2609public = 305b301506072a8648ce3d0201060a00002a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2610result = acceptable
2611shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2612# The public key in this test uses an invalid ASN encoding. Some cases where the
2613# ASN parser is not strictly checking the ASN format are benign as long as the
2614# ECDH computation still returns the correct shared value.
2615
2616# tcId = 278
2617# appending unused 0's to oid
2618private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2619public = 305b301506072a8648ce3d0201000006082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2620result = acceptable
2621shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2622# The public key in this test uses an invalid ASN encoding. Some cases where the
2623# ASN parser is not strictly checking the ASN format are benign as long as the
2624# ECDH computation still returns the correct shared value.
2625
2626# tcId = 279
2627# appending null value to oid
2628private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2629public = 305b301506092a8648ce3d0201050006082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2630result = acceptable
2631shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2632# The public key in this test uses an invalid ASN encoding. Some cases where the
2633# ASN parser is not strictly checking the ASN format are benign as long as the
2634# ECDH computation still returns the correct shared value.
2635
2636# tcId = 280
2637# appending null value to oid
2638private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2639public = 305b301506072a8648ce3d0201060a2a8648ce3d0301070500034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2640result = acceptable
2641shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2642# The public key in this test uses an invalid ASN encoding. Some cases where the
2643# ASN parser is not strictly checking the ASN format are benign as long as the
2644# ECDH computation still returns the correct shared value.
2645
2646# tcId = 281
2647# truncated length of oid
2648private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2649public = 3052300c068106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2650result = acceptable
2651shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2652# The public key in this test uses an invalid ASN encoding. Some cases where the
2653# ASN parser is not strictly checking the ASN format are benign as long as the
2654# ECDH computation still returns the correct shared value.
2655
2656# tcId = 282
2657# truncated length of oid
2658private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2659public = 3051300b06072a8648ce3d02010681034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2660result = acceptable
2661shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2662# The public key in this test uses an invalid ASN encoding. Some cases where the
2663# ASN parser is not strictly checking the ASN format are benign as long as the
2664# ECDH computation still returns the correct shared value.
2665
2666# tcId = 283
2667# Replacing oid with NULL
2668private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2669public = 3052300c050006082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2670result = acceptable
2671shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2672# The public key in this test uses an invalid ASN encoding. Some cases where the
2673# ASN parser is not strictly checking the ASN format are benign as long as the
2674# ECDH computation still returns the correct shared value.
2675
2676# tcId = 284
2677# Replacing oid with NULL
2678private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2679public = 3051300b06072a8648ce3d02010500034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2680result = acceptable
2681shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2682# The public key in this test uses an invalid ASN encoding. Some cases where the
2683# ASN parser is not strictly checking the ASN format are benign as long as the
2684# ECDH computation still returns the correct shared value.
2685
2686# tcId = 285
2687# changing tag value of oid
2688private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2689public = 3059301304072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2690result = acceptable
2691shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2692# The public key in this test uses an invalid ASN encoding. Some cases where the
2693# ASN parser is not strictly checking the ASN format are benign as long as the
2694# ECDH computation still returns the correct shared value.
2695
2696# tcId = 286
2697# changing tag value of oid
2698private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2699public = 3059301305072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2700result = acceptable
2701shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2702# The public key in this test uses an invalid ASN encoding. Some cases where the
2703# ASN parser is not strictly checking the ASN format are benign as long as the
2704# ECDH computation still returns the correct shared value.
2705
2706# tcId = 287
2707# changing tag value of oid
2708private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2709public = 3059301307072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2710result = acceptable
2711shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2712# The public key in this test uses an invalid ASN encoding. Some cases where the
2713# ASN parser is not strictly checking the ASN format are benign as long as the
2714# ECDH computation still returns the correct shared value.
2715
2716# tcId = 288
2717# changing tag value of oid
2718private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2719public = 3059301308072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2720result = acceptable
2721shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2722# The public key in this test uses an invalid ASN encoding. Some cases where the
2723# ASN parser is not strictly checking the ASN format are benign as long as the
2724# ECDH computation still returns the correct shared value.
2725
2726# tcId = 289
2727# changing tag value of oid
2728private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2729public = 30593013ff072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2730result = acceptable
2731shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2732# The public key in this test uses an invalid ASN encoding. Some cases where the
2733# ASN parser is not strictly checking the ASN format are benign as long as the
2734# ECDH computation still returns the correct shared value.
2735
2736# tcId = 290
2737# changing tag value of oid
2738private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2739public = 3059301306072a8648ce3d020104082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2740result = acceptable
2741shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2742# The public key in this test uses an invalid ASN encoding. Some cases where the
2743# ASN parser is not strictly checking the ASN format are benign as long as the
2744# ECDH computation still returns the correct shared value.
2745
2746# tcId = 291
2747# changing tag value of oid
2748private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2749public = 3059301306072a8648ce3d020105082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2750result = acceptable
2751shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2752# The public key in this test uses an invalid ASN encoding. Some cases where the
2753# ASN parser is not strictly checking the ASN format are benign as long as the
2754# ECDH computation still returns the correct shared value.
2755
2756# tcId = 292
2757# changing tag value of oid
2758private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2759public = 3059301306072a8648ce3d020107082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2760result = acceptable
2761shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2762# The public key in this test uses an invalid ASN encoding. Some cases where the
2763# ASN parser is not strictly checking the ASN format are benign as long as the
2764# ECDH computation still returns the correct shared value.
2765
2766# tcId = 293
2767# changing tag value of oid
2768private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2769public = 3059301306072a8648ce3d020108082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2770result = acceptable
2771shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2772# The public key in this test uses an invalid ASN encoding. Some cases where the
2773# ASN parser is not strictly checking the ASN format are benign as long as the
2774# ECDH computation still returns the correct shared value.
2775
2776# tcId = 294
2777# changing tag value of oid
2778private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2779public = 3059301306072a8648ce3d0201ff082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2780result = acceptable
2781shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2782# The public key in this test uses an invalid ASN encoding. Some cases where the
2783# ASN parser is not strictly checking the ASN format are benign as long as the
2784# ECDH computation still returns the correct shared value.
2785
2786# tcId = 295
2787# dropping value of oid
2788private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2789public = 3052300c060006082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2790result = acceptable
2791shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2792# The public key in this test uses an invalid ASN encoding. Some cases where the
2793# ASN parser is not strictly checking the ASN format are benign as long as the
2794# ECDH computation still returns the correct shared value.
2795
2796# tcId = 296
2797# dropping value of oid
2798private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2799public = 3051300b06072a8648ce3d02010600034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2800result = acceptable
2801shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2802# The public key in this test uses an invalid ASN encoding. Some cases where the
2803# ASN parser is not strictly checking the ASN format are benign as long as the
2804# ECDH computation still returns the correct shared value.
2805
2806# tcId = 297
2807# modify first byte of oid
2808private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2809public = 305930130607288648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2810result = acceptable
2811shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2812# The public key in this test uses an invalid ASN encoding. Some cases where the
2813# ASN parser is not strictly checking the ASN format are benign as long as the
2814# ECDH computation still returns the correct shared value.
2815
2816# tcId = 298
2817# modify first byte of oid
2818private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2819public = 3059301306072a8648ce3d02010608288648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2820result = acceptable
2821shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2822# The public key in this test uses an invalid ASN encoding. Some cases where the
2823# ASN parser is not strictly checking the ASN format are benign as long as the
2824# ECDH computation still returns the correct shared value.
2825
2826# tcId = 299
2827# modify last byte of oid
2828private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2829public = 3059301306072a8648ce3d028106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2830result = acceptable
2831shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2832# The public key in this test uses an invalid ASN encoding. Some cases where the
2833# ASN parser is not strictly checking the ASN format are benign as long as the
2834# ECDH computation still returns the correct shared value.
2835
2836# tcId = 300
2837# modify last byte of oid
2838private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2839public = 3059301306072a8648ce3d020106082a8648ce3d030187034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2840result = acceptable
2841shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2842# The public key in this test uses an invalid ASN encoding. Some cases where the
2843# ASN parser is not strictly checking the ASN format are benign as long as the
2844# ECDH computation still returns the correct shared value.
2845
2846# tcId = 301
2847# truncate oid
2848private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2849public = 3058301206062a8648ce3d0206082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2850result = acceptable
2851shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2852# The public key in this test uses an invalid ASN encoding. Some cases where the
2853# ASN parser is not strictly checking the ASN format are benign as long as the
2854# ECDH computation still returns the correct shared value.
2855
2856# tcId = 302
2857# truncate oid
2858private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2859public = 3058301206068648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2860result = acceptable
2861shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2862# The public key in this test uses an invalid ASN encoding. Some cases where the
2863# ASN parser is not strictly checking the ASN format are benign as long as the
2864# ECDH computation still returns the correct shared value.
2865
2866# tcId = 303
2867# truncate oid
2868private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2869public = 3058301206072a8648ce3d020106072a8648ce3d0301034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2870result = acceptable
2871shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2872# The public key in this test uses an invalid ASN encoding. Some cases where the
2873# ASN parser is not strictly checking the ASN format are benign as long as the
2874# ECDH computation still returns the correct shared value.
2875
2876# tcId = 304
2877# truncate oid
2878private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2879public = 3058301206072a8648ce3d020106078648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2880result = acceptable
2881shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2882# The public key in this test uses an invalid ASN encoding. Some cases where the
2883# ASN parser is not strictly checking the ASN format are benign as long as the
2884# ECDH computation still returns the correct shared value.
2885
2886# tcId = 305
2887# wrong oid
2888private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2889public = 305c3016060a3262306530333032316106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2890result = acceptable
2891shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2892# The public key in this test uses an invalid ASN encoding. Some cases where the
2893# ASN parser is not strictly checking the ASN format are benign as long as the
2894# ECDH computation still returns the correct shared value.
2895
2896# tcId = 306
2897# wrong oid
2898private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2899public = 3064301e061236303836343830313635303330343032303106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2900result = acceptable
2901shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2902# The public key in this test uses an invalid ASN encoding. Some cases where the
2903# ASN parser is not strictly checking the ASN format are benign as long as the
2904# ECDH computation still returns the correct shared value.
2905
2906# tcId = 307
2907# wrong oid
2908private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2909public = 305b301506072a8648ce3d0201060a32623065303330323161034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2910result = acceptable
2911shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2912# The public key in this test uses an invalid ASN encoding. Some cases where the
2913# ASN parser is not strictly checking the ASN format are benign as long as the
2914# ECDH computation still returns the correct shared value.
2915
2916# tcId = 308
2917# wrong oid
2918private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2919public = 3063301d06072a8648ce3d02010612363038363438303136353033303430323031034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2920result = acceptable
2921shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2922# The public key in this test uses an invalid ASN encoding. Some cases where the
2923# ASN parser is not strictly checking the ASN format are benign as long as the
2924# ECDH computation still returns the correct shared value.
2925
2926# tcId = 309
2927# longer oid
2928private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2929public = 3062301c06103261383634386365336430323031303106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2930result = acceptable
2931shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2932# The public key in this test uses an invalid ASN encoding. Some cases where the
2933# ASN parser is not strictly checking the ASN format are benign as long as the
2934# ECDH computation still returns the correct shared value.
2935
2936# tcId = 310
2937# longer oid
2938private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2939public = 3063301d06072a8648ce3d02010612326138363438636533643033303130373031034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2940result = acceptable
2941shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2942# The public key in this test uses an invalid ASN encoding. Some cases where the
2943# ASN parser is not strictly checking the ASN format are benign as long as the
2944# ECDH computation still returns the correct shared value.
2945
2946# tcId = 311
2947# oid with modified node
2948private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2949public = 3060301a060e326138363438636533643032313106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2950result = acceptable
2951shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2952# The public key in this test uses an invalid ASN encoding. Some cases where the
2953# ASN parser is not strictly checking the ASN format are benign as long as the
2954# ECDH computation still returns the correct shared value.
2955
2956# tcId = 312
2957# oid with modified node
2958private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2959public = 3068302206163261383634386365336430323838383038303830303106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2960result = acceptable
2961shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2962# The public key in this test uses an invalid ASN encoding. Some cases where the
2963# ASN parser is not strictly checking the ASN format are benign as long as the
2964# ECDH computation still returns the correct shared value.
2965
2966# tcId = 313
2967# oid with modified node
2968private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2969public = 3061301b06072a8648ce3d0201061032613836343863653364303330313137034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2970result = acceptable
2971shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2972# The public key in this test uses an invalid ASN encoding. Some cases where the
2973# ASN parser is not strictly checking the ASN format are benign as long as the
2974# ECDH computation still returns the correct shared value.
2975
2976# tcId = 314
2977# oid with modified node
2978private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2979public = 3069302306072a8648ce3d02010618326138363438636533643033303138383830383038303037034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2980result = acceptable
2981shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2982# The public key in this test uses an invalid ASN encoding. Some cases where the
2983# ASN parser is not strictly checking the ASN format are benign as long as the
2984# ECDH computation still returns the correct shared value.
2985
2986# tcId = 315
2987# large integer in oid
2988private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2989public = 3072302c0620326138363438636533643032383238303830383038303830383038303830303106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
2990result = acceptable
2991shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
2992# The public key in this test uses an invalid ASN encoding. Some cases where the
2993# ASN parser is not strictly checking the ASN format are benign as long as the
2994# ECDH computation still returns the correct shared value.
2995
2996# tcId = 316
2997# large integer in oid
2998private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
2999public = 3073302d06072a8648ce3d0201062232613836343863653364303330313832383038303830383038303830383038303037034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3000result = acceptable
3001shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3002# The public key in this test uses an invalid ASN encoding. Some cases where the
3003# ASN parser is not strictly checking the ASN format are benign as long as the
3004# ECDH computation still returns the correct shared value.
3005
3006# tcId = 317
3007# oid with invalid node
3008private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3009public = 3063301d0611326138363438636533643032303165303306082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3010result = acceptable
3011shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3012# The public key in this test uses an invalid ASN encoding. Some cases where the
3013# ASN parser is not strictly checking the ASN format are benign as long as the
3014# ECDH computation still returns the correct shared value.
3015
3016# tcId = 318
3017# oid with invalid node
3018private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3019public = 305a301406082a808648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3020result = acceptable
3021shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3022# The public key in this test uses an invalid ASN encoding. Some cases where the
3023# ASN parser is not strictly checking the ASN format are benign as long as the
3024# ECDH computation still returns the correct shared value.
3025
3026# tcId = 319
3027# oid with invalid node
3028private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3029public = 3064301e06072a8648ce3d0201061332613836343863653364303330313037653033034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3030result = acceptable
3031shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3032# The public key in this test uses an invalid ASN encoding. Some cases where the
3033# ASN parser is not strictly checking the ASN format are benign as long as the
3034# ECDH computation still returns the correct shared value.
3035
3036# tcId = 320
3037# oid with invalid node
3038private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3039public = 305a301406072a8648ce3d020106092a808648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3040result = acceptable
3041shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3042# The public key in this test uses an invalid ASN encoding. Some cases where the
3043# ASN parser is not strictly checking the ASN format are benign as long as the
3044# ECDH computation still returns the correct shared value.
3045
3046# tcId = 321
3047# lonely bit string tag
3048private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3049public = 3016301306072a8648ce3d020106082a8648ce3d03010703
3050result = acceptable
3051shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3052# The public key in this test uses an invalid ASN encoding. Some cases where the
3053# ASN parser is not strictly checking the ASN format are benign as long as the
3054# ECDH computation still returns the correct shared value.
3055
3056# tcId = 322
3057# appending 0's to bit string
3058private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3059public = 305b301306072a8648ce3d020106082a8648ce3d030107034400042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0000
3060result = acceptable
3061shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3062# The public key in this test uses an invalid ASN encoding. Some cases where the
3063# ASN parser is not strictly checking the ASN format are benign as long as the
3064# ECDH computation still returns the correct shared value.
3065
3066# tcId = 323
3067# prepending 0's to bit string
3068private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3069public = 305b301306072a8648ce3d020106082a8648ce3d0301070344000000042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3070result = acceptable
3071shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3072# The public key in this test uses an invalid ASN encoding. Some cases where the
3073# ASN parser is not strictly checking the ASN format are benign as long as the
3074# ECDH computation still returns the correct shared value.
3075
3076# tcId = 324
3077# appending null value to bit string
3078private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3079public = 305b301306072a8648ce3d020106082a8648ce3d030107034400042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b0500
3080result = acceptable
3081shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3082# The public key in this test uses an invalid ASN encoding. Some cases where the
3083# ASN parser is not strictly checking the ASN format are benign as long as the
3084# ECDH computation still returns the correct shared value.
3085
3086# tcId = 325
3087# truncated length of bit string
3088private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3089public = 3017301306072a8648ce3d020106082a8648ce3d0301070381
3090result = acceptable
3091shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3092# The public key in this test uses an invalid ASN encoding. Some cases where the
3093# ASN parser is not strictly checking the ASN format are benign as long as the
3094# ECDH computation still returns the correct shared value.
3095
3096# tcId = 326
3097# Replacing bit string with NULL
3098private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3099public = 3017301306072a8648ce3d020106082a8648ce3d0301070500
3100result = acceptable
3101shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3102# The public key in this test uses an invalid ASN encoding. Some cases where the
3103# ASN parser is not strictly checking the ASN format are benign as long as the
3104# ECDH computation still returns the correct shared value.
3105
3106# tcId = 327
3107# changing tag value of bit string
3108private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3109public = 3059301306072a8648ce3d020106082a8648ce3d030107014200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3110result = acceptable
3111shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3112# The public key in this test uses an invalid ASN encoding. Some cases where the
3113# ASN parser is not strictly checking the ASN format are benign as long as the
3114# ECDH computation still returns the correct shared value.
3115
3116# tcId = 328
3117# changing tag value of bit string
3118private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3119public = 3059301306072a8648ce3d020106082a8648ce3d030107024200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3120result = acceptable
3121shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3122# The public key in this test uses an invalid ASN encoding. Some cases where the
3123# ASN parser is not strictly checking the ASN format are benign as long as the
3124# ECDH computation still returns the correct shared value.
3125
3126# tcId = 329
3127# changing tag value of bit string
3128private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3129public = 3059301306072a8648ce3d020106082a8648ce3d030107044200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3130result = acceptable
3131shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3132# The public key in this test uses an invalid ASN encoding. Some cases where the
3133# ASN parser is not strictly checking the ASN format are benign as long as the
3134# ECDH computation still returns the correct shared value.
3135
3136# tcId = 330
3137# changing tag value of bit string
3138private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3139public = 3059301306072a8648ce3d020106082a8648ce3d030107054200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3140result = acceptable
3141shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3142# The public key in this test uses an invalid ASN encoding. Some cases where the
3143# ASN parser is not strictly checking the ASN format are benign as long as the
3144# ECDH computation still returns the correct shared value.
3145
3146# tcId = 331
3147# changing tag value of bit string
3148private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3149public = 3059301306072a8648ce3d020106082a8648ce3d030107ff4200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3150result = acceptable
3151shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3152# The public key in this test uses an invalid ASN encoding. Some cases where the
3153# ASN parser is not strictly checking the ASN format are benign as long as the
3154# ECDH computation still returns the correct shared value.
3155
3156# tcId = 332
3157# dropping value of bit string
3158private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3159public = 3017301306072a8648ce3d020106082a8648ce3d0301070300
3160result = acceptable
3161shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3162# The public key in this test uses an invalid ASN encoding. Some cases where the
3163# ASN parser is not strictly checking the ASN format are benign as long as the
3164# ECDH computation still returns the correct shared value.
3165
3166# tcId = 333
3167# modify first byte of bit string
3168private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3169public = 3059301306072a8648ce3d020106082a8648ce3d030107034202042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3170result = acceptable
3171shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3172# The public key in this test uses an invalid ASN encoding. Some cases where the
3173# ASN parser is not strictly checking the ASN format are benign as long as the
3174# ECDH computation still returns the correct shared value.
3175
3176# tcId = 334
3177# modify last byte of bit string
3178private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3179public = 3059301306072a8648ce3d020106082a8648ce3d030107034200042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add6eb
3180result = acceptable
3181shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3182# The public key in this test uses an invalid ASN encoding. Some cases where the
3183# ASN parser is not strictly checking the ASN format are benign as long as the
3184# ECDH computation still returns the correct shared value.
3185
3186# tcId = 335
3187# truncate bit string
3188private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3189public = 3058301306072a8648ce3d020106082a8648ce3d030107034100042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add6
3190result = acceptable
3191shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3192# The public key in this test uses an invalid ASN encoding. Some cases where the
3193# ASN parser is not strictly checking the ASN format are benign as long as the
3194# ECDH computation still returns the correct shared value.
3195
3196# tcId = 336
3197# truncate bit string
3198private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3199public = 3058301306072a8648ce3d020106082a8648ce3d0301070341042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3200result = acceptable
3201shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3202# The public key in this test uses an invalid ASN encoding. Some cases where the
3203# ASN parser is not strictly checking the ASN format are benign as long as the
3204# ECDH computation still returns the correct shared value.
3205
3206# tcId = 337
3207# declaring bits as unused in a bit-string
3208private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3209public = 3059301306072a8648ce3d020106082a8648ce3d030107034201042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3210result = acceptable
3211shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3212# The public key in this test uses an invalid ASN encoding. Some cases where the
3213# ASN parser is not strictly checking the ASN format are benign as long as the
3214# ECDH computation still returns the correct shared value.
3215
3216# tcId = 338
3217# unused bits in a bit-string
3218private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3219public = 305d301306072a8648ce3d020106082a8648ce3d030107034620042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b01020304
3220result = acceptable
3221shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3222# The public key in this test uses an invalid ASN encoding. Some cases where the
3223# ASN parser is not strictly checking the ASN format are benign as long as the
3224# ECDH computation still returns the correct shared value.
3225
3226# tcId = 339
3227# unused bits in empty bit-string
3228private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3229public = 3018301306072a8648ce3d020106082a8648ce3d030107030103
3230result = acceptable
3231shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3232# The public key in this test uses an invalid ASN encoding. Some cases where the
3233# ASN parser is not strictly checking the ASN format are benign as long as the
3234# ECDH computation still returns the correct shared value.
3235
3236# tcId = 340
3237# 128 unused bits
3238private = 0c9551ffe53ce60d73cbf8af553d0cb5f7632ece499590182c28cb6db2e3978d2
3239public = 3059301306072a8648ce3d020106082a8648ce3d030107034280042998705a9a71c783e1cf4397dbed9375a44e4cb88053594b0ea982203b6363b063d0af4971d1c3813db3c7799f9f9324cbe1b90054c81b510ff6297160add66b
3240result = acceptable
3241shared = f0b6d851dcd8e9a8c474d695137962f082c4f2a1a2eefb182df58d88a72829e4
3242# The public key in this test uses an invalid ASN encoding. Some cases where the
3243# ASN parser is not strictly checking the ASN format are benign as long as the
3244# ECDH computation still returns the correct shared value.
3245
3246