tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

test-vectors.js (51990B)

      1 /* This Source Code Form is subject to the terms of the Mozilla Public
      2 * License, v. 2.0. If a copy of the MPL was not distributed with this
      3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
      4 
      5 // This file expects utils.js to be included in its scope
      6 /* import-globals-from ./util.js */
      7 let tv = {
      8  raw: util.hex2abv("f3095c4fe5e299477643c2310b44f0aa"),
      9 
     10  // this key had an inappropriate length (18 octets)
     11  negative_raw: util.hex2abv("f3095c4fe5e299477643c2310b44f0aabbcc"),
     12 
     13  // openssl genrsa 512 | openssl pkcs8 -topk8 -nocrypt
     14  pkcs8: util.hex2abv(
     15    "30820154020100300d06092a864886f70d01010105000482013e3082013a0201" +
     16      "00024100a240ceb54e70dc14825b587d2f5dfd463c4b8250b696004a1acaafe4" +
     17      "9bcf384a46aa9fb4d9c7ee88e9ef0a315f53868f63680b58347249baedd93415" +
     18      "16c4cab70203010001024034e6dc7ed0ec8b55448b73f69d1310196e5f5045f0" +
     19      "c247a5e1c664432d6a0af7e7da40b83af047dd01f5e0a90e47c224d7b5133a35" +
     20      "4d11aa5003b3e8546c9901022100cdb2d7a7435bcb45e50e86f6c14e97ed781f" +
     21      "0956cd26e6f75ed9fc88125f8407022100c9ee30af6cb95ac9c1149ed84b3338" +
     22      "481741359409f369c497be177d950fb7d10221008b0ef98d611320639b0b6c20" +
     23      "4ae4a7fee8f30a6c3cfaacafd4d6c74af228d26702206b0e1dbf935bbd774327" +
     24      "2483b572a53f0b1d2643a2f6eab7305fb6627cf9855102203d2263156b324146" +
     25      "4478b713eb854c4f6b3ef052f0463b65d8217daec0099834"
     26  ),
     27 
     28  // Truncated form of the PKCS#8 stucture above
     29  negative_pkcs8: util.hex2abv("30820154020100300d06092a864886f70d010"),
     30 
     31  // Extracted from a cert via http://lapo.it/asn1js/
     32  spki: util.hex2abv(
     33    "30819F300D06092A864886F70D010101050003818D0030818902818100895309" +
     34      "7086EE6147C5F4D5FFAF1B498A3D11EC5518E964DC52126B2614F743883F64CA" +
     35      "51377ABB530DFD20464A48BD67CD27E7B29AEC685C5D10825E605C056E4AB8EE" +
     36      "A460FA27E55AA62C498B02D7247A249838A12ECDF37C6011CF4F0EDEA9CEE687" +
     37      "C1CB4A51C6AE62B2EFDB000723A01C99D6C23F834880BA8B42D5414E6F020301" +
     38      "0001"
     39  ),
     40 
     41  // Truncated form of the PKCS#8 stucture above
     42  negative_spki: util.hex2abv("30819F300D06092A864886F70D010101050003"),
     43 
     44  // From the NESSIE project
     45  // https://www.cosic.esat.kuleuven.be/nessie/testvectors/hash
     46  //        /sha/Sha-2-256.unverified.test-vectors
     47  // Set 1, vector# 5
     48  sha256: {
     49    data: util.hex2abv(
     50      "616263646263646563646566646566676566676866676" +
     51        "8696768696a68696a6b696a6b6c6a6b6c6d6b6c6d6e6c" +
     52        "6d6e6f6d6e6f706e6f7071"
     53    ),
     54    result: util.hex2abv(
     55      // eslint-disable-next-line no-useless-concat
     56      "248D6A61D20638B8E5C026930C3E6039A33CE45964F" + "F2167F6ECEDD419DB06C1"
     57    ),
     58  },
     59 
     60  // Test vector 2 from:
     61  // <https://github.com/geertj/bluepass/blob/master/tests/vectors/aes-cbc-pkcs7.txt>
     62  aes_cbc_enc: {
     63    /*
     64    key: util.hex2abv("893123f2d57b6e2c39e2f10d3ff818d1"),
     65    iv: util.hex2abv("64be1b06ea7453ed2df9a79319d5edc5"),
     66    data: util.hex2abv("44afb9a64ac896c2"),
     67    result: util.hex2abv("7067c4cb6dfc69df949c2f39903c9310"),
     68    */
     69    key: util.hex2abv("893123f2d57b6e2c39e2f10d3ff818d1"),
     70    iv: util.hex2abv("64be1b06ea7453ed2df9a79319d5edc5"),
     71    data: util.hex2abv("44afb9a64ac896c2"),
     72    result: util.hex2abv("7067c4cb6dfc69df949c2f39903c9310"),
     73  },
     74 
     75  // Test vector 11 from:
     76  // <https://github.com/geertj/bluepass/blob/master/tests/vectors/aes-cbc-pkcs7.txt>
     77  aes_cbc_dec: {
     78    key: util.hex2abv("04952c3fcf497a4d449c41e8730c5d9a"),
     79    iv: util.hex2abv("53549bf7d5553b727458c1abaf0ba167"),
     80    data: util.hex2abv(
     81      // eslint-disable-next-line no-useless-concat
     82      "7fa290322ca7a1a04b61a1147ff20fe6" + "6fde58510a1d0289d11c0ddf6f4decfd"
     83    ),
     84    result: util.hex2abv("c9a44f6f75e98ddbca7332167f5c45e3"),
     85  },
     86 
     87  // Test vector 2 from:
     88  // <http://tools.ietf.org/html/rfc3686#section-6>
     89  aes_ctr_enc: {
     90    key: util.hex2abv("7E24067817FAE0D743D6CE1F32539163"),
     91    iv: util.hex2abv("006CB6DBC0543B59DA48D90B00000001"),
     92    data: util.hex2abv(
     93      // eslint-disable-next-line no-useless-concat
     94      "000102030405060708090A0B0C0D0E0F" + "101112131415161718191A1B1C1D1E1F"
     95    ),
     96    result: util.hex2abv(
     97      // eslint-disable-next-line no-useless-concat
     98      "5104A106168A72D9790D41EE8EDAD3" + "88EB2E1EFC46DA57C8FCE630DF9141BE28"
     99    ),
    100  },
    101 
    102  // Test vector 3 from:
    103  // <http://tools.ietf.org/html/rfc3686#section-6>
    104  aes_ctr_dec: {
    105    key: util.hex2abv("7691BE035E5020A8AC6E618529F9A0DC"),
    106    iv: util.hex2abv("00E0017B27777F3F4A1786F000000001"),
    107    data: util.hex2abv(
    108      "000102030405060708090A0B0C0D0E0F" +
    109        "101112131415161718191A1B1C1D1E1F20212223"
    110    ),
    111    result: util.hex2abv(
    112      "C1CF48A89F2FFDD9CF4652E9EFDB72D7" +
    113        "4540A42BDE6D7836D59A5CEAAEF3105325B2072F"
    114    ),
    115  },
    116 
    117  // Test case #18 from McGrew and Viega
    118  // <http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf>
    119  aes_gcm_enc: {
    120    key: util.hex2abv(
    121      // eslint-disable-next-line no-useless-concat
    122      "feffe9928665731c6d6a8f9467308308" + "feffe9928665731c6d6a8f9467308308"
    123    ),
    124    key_jwk: {
    125      kty: "oct",
    126      k: "_v_pkoZlcxxtao-UZzCDCP7_6ZKGZXMcbWqPlGcwgwg",
    127    },
    128    iv: util.hex2abv(
    129      "9313225df88406e555909c5aff5269aa" +
    130        "6a7a9538534f7da1e4c303d2a318a728" +
    131        "c3c0c95156809539fcf0e2429a6b5254" +
    132        "16aedbf5a0de6a57a637b39b"
    133    ),
    134    adata: util.hex2abv("feedfacedeadbeeffeedfacedeadbeefabaddad2"),
    135    data: util.hex2abv(
    136      "d9313225f88406e5a55909c5aff5269a" +
    137        "86a7a9531534f7da2e4c303d8a318a72" +
    138        "1c3c0c95956809532fcf0e2449a6b525" +
    139        "b16aedf5aa0de657ba637b39"
    140    ),
    141    result: util.hex2abv(
    142      "5a8def2f0c9e53f1f75d7853659e2a20" +
    143        "eeb2b22aafde6419a058ab4f6f746bf4" +
    144        "0fc0c3b780f244452da3ebf1c5d82cde" +
    145        "a2418997200ef82e44ae7e3f" +
    146        "a44a8266ee1c8eb0c8b5d4cf5ae9f19a"
    147    ),
    148  },
    149 
    150  // Test case #17 from McGrew and Viega
    151  // <http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf>
    152  aes_gcm_dec: {
    153    key: util.hex2abv(
    154      // eslint-disable-next-line no-useless-concat
    155      "feffe9928665731c6d6a8f9467308308" + "feffe9928665731c6d6a8f9467308308"
    156    ),
    157    iv: util.hex2abv("cafebabefacedbad"),
    158    adata: util.hex2abv("feedfacedeadbeeffeedfacedeadbeefabaddad2"),
    159    data: util.hex2abv(
    160      "c3762df1ca787d32ae47c13bf19844cb" +
    161        "af1ae14d0b976afac52ff7d79bba9de0" +
    162        "feb582d33934a4f0954cc2363bc73f78" +
    163        "62ac430e64abe499f47c9b1f" +
    164        "3a337dbf46a792c45e454913fe2ea8f2"
    165    ),
    166    result: util.hex2abv(
    167      "d9313225f88406e5a55909c5aff5269a" +
    168        "86a7a9531534f7da2e4c303d8a318a72" +
    169        "1c3c0c95956809532fcf0e2449a6b525" +
    170        "b16aedf5aa0de657ba637b39"
    171    ),
    172  },
    173 
    174  // Test case #17 from McGrew and Viega
    175  // ... but with part of the authentication tag zeroed
    176  // <http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf>
    177  aes_gcm_dec_fail: {
    178    key: util.hex2abv(
    179      // eslint-disable-next-line no-useless-concat
    180      "feffe9928665731c6d6a8f9467308308" + "feffe9928665731c6d6a8f9467308308"
    181    ),
    182    iv: util.hex2abv("cafebabefacedbad"),
    183    adata: util.hex2abv("feedfacedeadbeeffeedfacedeadbeefabaddad2"),
    184    data: util.hex2abv(
    185      "c3762df1ca787d32ae47c13bf19844cb" +
    186        "af1ae14d0b976afac52ff7d79bba9de0" +
    187        "feb582d33934a4f0954cc2363bc73f78" +
    188        "62ac430e64abe499f47c9b1f" +
    189        "00000000000000005e454913fe2ea8f2"
    190    ),
    191    result: util.hex2abv(
    192      "d9313225f88406e5a55909c5aff5269a" +
    193        "86a7a9531534f7da2e4c303d8a318a72" +
    194        "1c3c0c95956809532fcf0e2449a6b525" +
    195        "b16aedf5aa0de657ba637b39"
    196    ),
    197  },
    198 
    199  // RFC 4231 <http://tools.ietf.org/html/rfc4231>, Test Case 7
    200  hmac_sign: {
    201    key: util.hex2abv(
    202      "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    203        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    204        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    205        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    206        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    207        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    208        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    209        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    210        "aaaaaa"
    211    ),
    212    data: util.hex2abv(
    213      "54686973206973206120746573742075" +
    214        "73696e672061206c6172676572207468" +
    215        "616e20626c6f636b2d73697a65206b65" +
    216        "7920616e642061206c61726765722074" +
    217        "68616e20626c6f636b2d73697a652064" +
    218        "6174612e20546865206b6579206e6565" +
    219        "647320746f2062652068617368656420" +
    220        "6265666f7265206265696e6720757365" +
    221        "642062792074686520484d414320616c" +
    222        "676f726974686d2e"
    223    ),
    224    result: util.hex2abv(
    225      // eslint-disable-next-line no-useless-concat
    226      "9b09ffa71b942fcb27635fbcd5b0e944" + "bfdc63644f0713938a7f51535c3a35e2"
    227    ),
    228  },
    229 
    230  // RFC 4231 <http://tools.ietf.org/html/rfc4231>, Test Case 6
    231  hmac_verify: {
    232    key: util.hex2abv(
    233      "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    234        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    235        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    236        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    237        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    238        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    239        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    240        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" +
    241        "aaaaaa"
    242    ),
    243    data: util.hex2abv(
    244      "54657374205573696e67204c61726765" +
    245        "72205468616e20426c6f636b2d53697a" +
    246        "65204b6579202d2048617368204b6579" +
    247        "204669727374"
    248    ),
    249    sig: util.hex2abv(
    250      // eslint-disable-next-line no-useless-concat
    251      "60e431591ee0b67f0d8a26aacbf5b77f" + "8e0bc6213728c5140546040f0ee37f54"
    252    ),
    253    sig_fail: util.hex2abv(
    254      // eslint-disable-next-line no-useless-concat
    255      "000000001ee0b67f0d8a26aacbf5b77f" + "8e0bc6213728c5140546040f0ee37f54"
    256    ),
    257  },
    258 
    259  // RSA test vectors, Example 1.3
    260  // <ftp://ftp.rsa.com/pub/rsalabs/tmp/pkcs1v15crypt-vectors.txt>
    261  rsaes: {
    262    pkcs8: util.hex2abv(
    263      "30820276020100300d06092a864886f70d0101010500048202603082025c0201" +
    264        "0002818100a8b3b284af8eb50b387034a860f146c4919f318763cd6c5598c8ae" +
    265        "4811a1e0abc4c7e0b082d693a5e7fced675cf4668512772c0cbc64a742c6c630" +
    266        "f533c8cc72f62ae833c40bf25842e984bb78bdbf97c0107d55bdb662f5c4e0fa" +
    267        "b9845cb5148ef7392dd3aaff93ae1e6b667bb3d4247616d4f5ba10d4cfd226de" +
    268        "88d39f16fb020301000102818053339cfdb79fc8466a655c7316aca85c55fd8f" +
    269        "6dd898fdaf119517ef4f52e8fd8e258df93fee180fa0e4ab29693cd83b152a55" +
    270        "3d4ac4d1812b8b9fa5af0e7f55fe7304df41570926f3311f15c4d65a732c4831" +
    271        "16ee3d3d2d0af3549ad9bf7cbfb78ad884f84d5beb04724dc7369b31def37d0c" +
    272        "f539e9cfcdd3de653729ead5d1024100d32737e7267ffe1341b2d5c0d150a81b" +
    273        "586fb3132bed2f8d5262864a9cb9f30af38be448598d413a172efb802c21acf1" +
    274        "c11c520c2f26a471dcad212eac7ca39d024100cc8853d1d54da630fac004f471" +
    275        "f281c7b8982d8224a490edbeb33d3e3d5cc93c4765703d1dd791642f1f116a0d" +
    276        "d852be2419b2af72bfe9a030e860b0288b5d7702400e12bf1718e9cef5599ba1" +
    277        "c3882fe8046a90874eefce8f2ccc20e4f2741fb0a33a3848aec9c9305fbecbd2" +
    278        "d76819967d4671acc6431e4037968db37878e695c102410095297b0f95a2fa67" +
    279        "d00707d609dfd4fc05c89dafc2ef6d6ea55bec771ea333734d9251e79082ecda" +
    280        "866efef13c459e1a631386b7e354c899f5f112ca85d7158302404f456c502493" +
    281        "bdc0ed2ab756a3a6ed4d67352a697d4216e93212b127a63d5411ce6fa98d5dbe" +
    282        "fd73263e3728142743818166ed7dd63687dd2a8ca1d2f4fbd8e1"
    283    ),
    284    spki: util.hex2abv(
    285      "30819f300d06092a864886f70d010101050003818d0030818902818100a8b3b2" +
    286        "84af8eb50b387034a860f146c4919f318763cd6c5598c8ae4811a1e0abc4c7e0" +
    287        "b082d693a5e7fced675cf4668512772c0cbc64a742c6c630f533c8cc72f62ae8" +
    288        "33c40bf25842e984bb78bdbf97c0107d55bdb662f5c4e0fab9845cb5148ef739" +
    289        "2dd3aaff93ae1e6b667bb3d4247616d4f5ba10d4cfd226de88d39f16fb020301" +
    290        "0001"
    291    ),
    292    data: util.hex2abv(
    293      "d94ae0832e6445ce42331cb06d531a82b1db4baad30f746dc916df24d4e3c245" +
    294        "1fff59a6423eb0e1d02d4fe646cf699dfd818c6e97b051"
    295    ),
    296    result: util.hex2abv(
    297      "709c7d2d4598c96065b6588da2f89fa87f062d7241ef6595898f637ada57eae9" +
    298        "0173f0fb4bf6a91ebd96506907c853dacf208494be94d313a04185d474a90741" +
    299        "2effc3e024d07e4d09aa245fbcb130219bfa5de02d4f7e2ec9e62e8ad32dee5f" +
    300        "f4d8e4cfecbc5033a1c2c61c5233ae16192a481d0075bfc7ce028212cd27bebe"
    301    ),
    302  },
    303 
    304  // RSA test vectors, Example 1.3 (sig256 generated with PyCrypto)
    305  // <ftp://ftp.rsa.com/pub/rsalabs/tmp/pkcs1v15sign-vectors.txt>
    306  rsassa: {
    307    pkcs8: util.hex2abv(
    308      "30820275020100300d06092a864886f70d01010105000482025f3082025b0201" +
    309        "0002818100a56e4a0e701017589a5187dc7ea841d156f2ec0e36ad52a44dfeb1" +
    310        "e61f7ad991d8c51056ffedb162b4c0f283a12a88a394dff526ab7291cbb307ce" +
    311        "abfce0b1dfd5cd9508096d5b2b8b6df5d671ef6377c0921cb23c270a70e2598e" +
    312        "6ff89d19f105acc2d3f0cb35f29280e1386b6f64c4ef22e1e1f20d0ce8cffb22" +
    313        "49bd9a2137020301000102818033a5042a90b27d4f5451ca9bbbd0b44771a101" +
    314        "af884340aef9885f2a4bbe92e894a724ac3c568c8f97853ad07c0266c8c6a3ca" +
    315        "0929f1e8f11231884429fc4d9ae55fee896a10ce707c3ed7e734e44727a39574" +
    316        "501a532683109c2abacaba283c31b4bd2f53c3ee37e352cee34f9e503bd80c06" +
    317        "22ad79c6dcee883547c6a3b325024100e7e8942720a877517273a356053ea2a1" +
    318        "bc0c94aa72d55c6e86296b2dfc967948c0a72cbccca7eacb35706e09a1df55a1" +
    319        "535bd9b3cc34160b3b6dcd3eda8e6443024100b69dca1cf7d4d7ec81e75b90fc" +
    320        "ca874abcde123fd2700180aa90479b6e48de8d67ed24f9f19d85ba275874f542" +
    321        "cd20dc723e6963364a1f9425452b269a6799fd024028fa13938655be1f8a159c" +
    322        "baca5a72ea190c30089e19cd274a556f36c4f6e19f554b34c077790427bbdd8d" +
    323        "d3ede2448328f385d81b30e8e43b2fffa02786197902401a8b38f398fa712049" +
    324        "898d7fb79ee0a77668791299cdfa09efc0e507acb21ed74301ef5bfd48be455e" +
    325        "aeb6e1678255827580a8e4e8e14151d1510a82a3f2e729024027156aba4126d2" +
    326        "4a81f3a528cbfb27f56886f840a9f6e86e17a44b94fe9319584b8e22fdde1e5a" +
    327        "2e3bd8aa5ba8d8584194eb2190acf832b847f13a3d24a79f4d"
    328    ),
    329    jwk_priv: {
    330      kty: "RSA",
    331      n:
    332        "pW5KDnAQF1iaUYfcfqhB0Vby7A42rVKkTf6x5h962ZHYxRBW_-2xYrTA8oOhK" +
    333        "oijlN_1JqtykcuzB86r_OCx39XNlQgJbVsri2311nHvY3fAkhyyPCcKcOJZjm" +
    334        "_4nRnxBazC0_DLNfKSgOE4a29kxO8i4eHyDQzoz_siSb2aITc",
    335      e: "AQAB",
    336      d:
    337        "M6UEKpCyfU9UUcqbu9C0R3GhAa-IQ0Cu-YhfKku-kuiUpySsPFaMj5eFOtB8A" +
    338        "mbIxqPKCSnx6PESMYhEKfxNmuVf7olqEM5wfD7X5zTkRyejlXRQGlMmgxCcKr" +
    339        "rKuig8MbS9L1PD7jfjUs7jT55QO9gMBiKtecbc7og1R8ajsyU",
    340      p:
    341        "5-iUJyCod1Fyc6NWBT6iobwMlKpy1VxuhilrLfyWeUjApyy8zKfqyzVwbgmh31W" +
    342        "hU1vZs8w0Fgs7bc0-2o5kQw",
    343      q:
    344        "tp3KHPfU1-yB51uQ_MqHSrzeEj_ScAGAqpBHm25I3o1n7ST58Z2FuidYdPVCz" +
    345        "SDccj5pYzZKH5QlRSsmmmeZ_Q",
    346      dp:
    347        "KPoTk4ZVvh-KFZy6ylpy6hkMMAieGc0nSlVvNsT24Z9VSzTAd3kEJ7vdjdPt4" +
    348        "kSDKPOF2Bsw6OQ7L_-gJ4YZeQ",
    349      dq:
    350        "Gos485j6cSBJiY1_t57gp3ZoeRKZzfoJ78DlB6yyHtdDAe9b_Ui-RV6utuFng" +
    351        "lWCdYCo5OjhQVHRUQqCo_LnKQ",
    352      qi:
    353        "JxVqukEm0kqB86Uoy_sn9WiG-ECp9uhuF6RLlP6TGVhLjiL93h5aLjvYqluo2" +
    354        "FhBlOshkKz4MrhH8To9JKefTQ",
    355    },
    356    spki: util.hex2abv(
    357      "30819f300d06092a864886f70d010101050003818d0030818902818100a56e4a" +
    358        "0e701017589a5187dc7ea841d156f2ec0e36ad52a44dfeb1e61f7ad991d8c510" +
    359        "56ffedb162b4c0f283a12a88a394dff526ab7291cbb307ceabfce0b1dfd5cd95" +
    360        "08096d5b2b8b6df5d671ef6377c0921cb23c270a70e2598e6ff89d19f105acc2" +
    361        "d3f0cb35f29280e1386b6f64c4ef22e1e1f20d0ce8cffb2249bd9a2137020301" +
    362        "0001"
    363    ),
    364    jwk_pub: {
    365      kty: "RSA",
    366      n:
    367        "pW5KDnAQF1iaUYfcfqhB0Vby7A42rVKkTf6x5h962ZHYxRBW_-2xYrTA8oOhK" +
    368        "oijlN_1JqtykcuzB86r_OCx39XNlQgJbVsri2311nHvY3fAkhyyPCcKcOJZjm" +
    369        "_4nRnxBazC0_DLNfKSgOE4a29kxO8i4eHyDQzoz_siSb2aITc",
    370      e: "AQAB",
    371    },
    372    data: util.hex2abv(
    373      "a4b159941761c40c6a82f2b80d1b94f5aa2654fd17e12d588864679b54cd04ef" +
    374        "8bd03012be8dc37f4b83af7963faff0dfa225477437c48017ff2be8191cf3955" +
    375        "fc07356eab3f322f7f620e21d254e5db4324279fe067e0910e2e81ca2cab31c7" +
    376        "45e67a54058eb50d993cdb9ed0b4d029c06d21a94ca661c3ce27fae1d6cb20f4" +
    377        "564d66ce4767583d0e5f060215b59017be85ea848939127bd8c9c4d47b51056c" +
    378        "031cf336f17c9980f3b8f5b9b6878e8b797aa43b882684333e17893fe9caa6aa" +
    379        "299f7ed1a18ee2c54864b7b2b99b72618fb02574d139ef50f019c9eef4169713" +
    380        "38e7d470"
    381    ),
    382    sig1: util.hex2abv(
    383      "0b1f2e5180e5c7b4b5e672929f664c4896e50c35134b6de4d5a934252a3a245f" +
    384        "f48340920e1034b7d5a5b524eb0e1cf12befef49b27b732d2c19e1c43217d6e1" +
    385        "417381111a1d36de6375cf455b3c9812639dbc27600c751994fb61799ecf7da6" +
    386        "bcf51540afd0174db4033188556675b1d763360af46feeca5b60f882829ee7b2"
    387    ),
    388    sig256: util.hex2abv(
    389      "558af496a9900ec497a51723a0bf1be167a3fdd0e40c95764575bcc93d35d415" +
    390        "94aef08cd8d339272387339fe5faa5635a1c4ad6c9b622f8c38edce6b26d9b76" +
    391        "e3fec5b567e5b996624c4aeef74191c4349e5ac9e29b848c54bcfa538fec58d5" +
    392        "9368253f0ff9a7ba0637918dd16b2c95f8c73ad7484482ba4387655f2f7d4b00"
    393    ),
    394    sig_fail: util.hex2abv(
    395      "8000000080e5c7b4b5e672929f664c4896e50c35134b6de4d5a934252a3a245f" +
    396        "f48340920e1034b7d5a5b524eb0e1cf12befef49b27b732d2c19e1c43217d6e1" +
    397        "417381111a1d36de6375cf455b3c9812639dbc27600c751994fb61799ecf7da6" +
    398        "bcf51540afd0174db4033188556675b1d763360af46feeca5b60f882829ee7b2"
    399    ),
    400    // This RSA private key has p < q
    401    jwk_priv_pLTq: {
    402      kty: "RSA",
    403      n:
    404        "p0HwS3l58WCcN5MPJ3TDu2fMRFZdAFhItiuGMvfDGj0myIM2BhJixSsDleu0h" +
    405        "x8mSL4CP9c63-zTFdMjwHluYJ_ugK_jV5c4igfyyD2yQ9IAbaBtSh2GV_PrgM" +
    406        "l9XCMobLQonC0ktHcMojYMTNSmLBc1kXLxKq1PnY8ja8oNoNKmDzJt3Hx_KlJ" +
    407        "mORwrchrrVzKdrRuj37PmMKKl6MCNThrFFn4PtZ6e59cxgwSAWoOqvvTewCdI" +
    408        "H4uGuoEnafBcPsuMOLD-oS0CTml_AK3Wgwt-zJ9BSFSial_PSTg0hpUp8pqWv" +
    409        "1NZaxG1HiY3gS-8JHSqTVeoGznFmod3FqRG_Q",
    410      e: "AQAB",
    411      d:
    412        "SrxoBxGMr5KfuyV3DAZcv4yt9Ysxm0nXk673FCcpgrv4bHhU13m3sKp7u63Ky" +
    413        "OXeUXq1vpkJsa081O-3dfXMoFhWViJBz42-sc7DaT5IPY3EqzeYHhn7Qam4fZ" +
    414        "-K6HS9R3VpAAAb-peHiaPk8x_B8MmeIhPeN1ehz6F6DlwGoulDPOI3EMLoOCL" +
    415        "V_cus8AV8il5FaJxwuuo2xc4oEbwT24AN2hXVZekTgPkNSGXBMhagu82lDlx8" +
    416        "y7awiC1bchWMUJ88BLqgScbl4bpTLqos0fRXDugY957diwF_zRHdr2jsj8Dm_" +
    417        "0J1XdgaIeycIApU61PSUy8ZLZbDQ9mlajRlgQ",
    418      p:
    419        "uQKh1mjslzbWrDBgqAWcCCPpV9tvA5AAotKuyDRe8ohj-WbKcClwQEXTLqT3Z" +
    420        "uirrHrqrmronElxdN22ukpmf_Kk301Kz1HU5qJZKTOzwiO8JSJ7wtLDDWkoyV" +
    421        "3Zj6On2N8ZX69cvwbo-S5trIv3iDjfsb0ZvmuGjEn-4dcYUxk",
    422      q:
    423        "52957s9n0wOBwe5sCtttd_R-h-IX03mZ3Jie4K2GugCZy6H2Rs0hPoylOn0X9" +
    424        "eI7atHiP3laaHyEwTOQhdC_RUCLsS-ZMa8p0EaewF_Lk6eCL0pDmHpTZiGjeB" +
    425        "EwvftzoO_cEpbkRkF-OxjRs6ejppm3MKkgZZJT2-R5iSaQU4U",
    426      dp:
    427        "ijDlIXoN_oT_pG4eRGKsQYhRa0aEjWyqjPRBiVlU8mPeCRQ2ccECD4AYVebyx" +
    428        "PNWB-doFA_W36YcEObq7gtUtI1RiVn6XxEIrZzmbFgqFQEML9CqEMPM3d-Gj6" +
    429        "KCN0BOxzcdhNM_u5A1xKphUVja8-1HaUOOTyWRwogi0h4QFUE",
    430      dq:
    431        "KN1yNkzBFG1mGAw1X6VnKuss_Glbs6ehF2aLhzictXMttNsgVVgbKqRC-JTmC" +
    432        "jCsNSxiOrr-z7xM5KBqQHafj2baQ6sX7cH0LCaMGYPQun21aww960qON1ZxOt" +
    433        "4uMR2ZSS2ROmcSX6Vo2J6FSKetKdmykxEJ-2VfEVDCdQkuKtE",
    434      qi:
    435        "pDhm0DZADZiGIsjYMmpoDo4EmYHari-VfxjAqCgcec5nPfNt5BSKQow3_E_v0" +
    436        "Yik1qa-AGWuC8vTh8vUFsQ0rE1lVSgXYPalMTjLFNY_hCBXmsDfMS5vcsL0-G" +
    437        "Y8F2U_XRY3WEaoNPb9UZqzgp7xl6_XM__2U47LIoUpCgcN9RA",
    438    },
    439  },
    440 
    441  // RSA test vectors, oaep-vect.txt, Example 1.1: A 1024-bit RSA Key Pair
    442  // <ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-1/pkcs-1v2-1-vec.zip>
    443  rsaoaep: {
    444    pkcs8: util.hex2abv(
    445      "30820276020100300d06092a864886f70d0101010500048202603082025c0201" +
    446        "0002818100a8b3b284af8eb50b387034a860f146c4919f318763cd6c5598c8ae" +
    447        "4811a1e0abc4c7e0b082d693a5e7fced675cf4668512772c0cbc64a742c6c630" +
    448        "f533c8cc72f62ae833c40bf25842e984bb78bdbf97c0107d55bdb662f5c4e0fa" +
    449        "b9845cb5148ef7392dd3aaff93ae1e6b667bb3d4247616d4f5ba10d4cfd226de" +
    450        "88d39f16fb020301000102818053339cfdb79fc8466a655c7316aca85c55fd8f" +
    451        "6dd898fdaf119517ef4f52e8fd8e258df93fee180fa0e4ab29693cd83b152a55" +
    452        "3d4ac4d1812b8b9fa5af0e7f55fe7304df41570926f3311f15c4d65a732c4831" +
    453        "16ee3d3d2d0af3549ad9bf7cbfb78ad884f84d5beb04724dc7369b31def37d0c" +
    454        "f539e9cfcdd3de653729ead5d1024100d32737e7267ffe1341b2d5c0d150a81b" +
    455        "586fb3132bed2f8d5262864a9cb9f30af38be448598d413a172efb802c21acf1" +
    456        "c11c520c2f26a471dcad212eac7ca39d024100cc8853d1d54da630fac004f471" +
    457        "f281c7b8982d8224a490edbeb33d3e3d5cc93c4765703d1dd791642f1f116a0d" +
    458        "d852be2419b2af72bfe9a030e860b0288b5d7702400e12bf1718e9cef5599ba1" +
    459        "c3882fe8046a90874eefce8f2ccc20e4f2741fb0a33a3848aec9c9305fbecbd2" +
    460        "d76819967d4671acc6431e4037968db37878e695c102410095297b0f95a2fa67" +
    461        "d00707d609dfd4fc05c89dafc2ef6d6ea55bec771ea333734d9251e79082ecda" +
    462        "866efef13c459e1a631386b7e354c899f5f112ca85d7158302404f456c502493" +
    463        "bdc0ed2ab756a3a6ed4d67352a697d4216e93212b127a63d5411ce6fa98d5dbe" +
    464        "fd73263e3728142743818166ed7dd63687dd2a8ca1d2f4fbd8e1"
    465    ),
    466    spki: util.hex2abv(
    467      "30819f300d06092a864886f70d010101050003818d0030818902818100a8b3b2" +
    468        "84af8eb50b387034a860f146c4919f318763cd6c5598c8ae4811a1e0abc4c7e0" +
    469        "b082d693a5e7fced675cf4668512772c0cbc64a742c6c630f533c8cc72f62ae8" +
    470        "33c40bf25842e984bb78bdbf97c0107d55bdb662f5c4e0fab9845cb5148ef739" +
    471        "2dd3aaff93ae1e6b667bb3d4247616d4f5ba10d4cfd226de88d39f16fb020301" +
    472        "0001"
    473    ),
    474    data: util.hex2abv(
    475      "6628194e12073db03ba94cda9ef9532397d50dba79b987004afefe34"
    476    ),
    477    result: util.hex2abv(
    478      "354fe67b4a126d5d35fe36c777791a3f7ba13def484e2d3908aff722fad468fb" +
    479        "21696de95d0be911c2d3174f8afcc201035f7b6d8e69402de5451618c21a535f" +
    480        "a9d7bfc5b8dd9fc243f8cf927db31322d6e881eaa91a996170e657a05a266426" +
    481        "d98c88003f8477c1227094a0d9fa1e8c4024309ce1ecccb5210035d47ac72e8a"
    482    ),
    483  },
    484 
    485  // [pss-vect.txt] Example 1.1 from
    486  // <ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-1/pkcs-1v2-1-vec.zip>
    487  rsapss: {
    488    pkcs8: util.hex2abv(
    489      "30820275020100300d06092a864886f70d01010105000482025f3082025b0201" +
    490        "0002818100a56e4a0e701017589a5187dc7ea841d156f2ec0e36ad52a44dfeb1" +
    491        "e61f7ad991d8c51056ffedb162b4c0f283a12a88a394dff526ab7291cbb307ce" +
    492        "abfce0b1dfd5cd9508096d5b2b8b6df5d671ef6377c0921cb23c270a70e2598e" +
    493        "6ff89d19f105acc2d3f0cb35f29280e1386b6f64c4ef22e1e1f20d0ce8cffb22" +
    494        "49bd9a2137020301000102818033a5042a90b27d4f5451ca9bbbd0b44771a101" +
    495        "af884340aef9885f2a4bbe92e894a724ac3c568c8f97853ad07c0266c8c6a3ca" +
    496        "0929f1e8f11231884429fc4d9ae55fee896a10ce707c3ed7e734e44727a39574" +
    497        "501a532683109c2abacaba283c31b4bd2f53c3ee37e352cee34f9e503bd80c06" +
    498        "22ad79c6dcee883547c6a3b325024100e7e8942720a877517273a356053ea2a1" +
    499        "bc0c94aa72d55c6e86296b2dfc967948c0a72cbccca7eacb35706e09a1df55a1" +
    500        "535bd9b3cc34160b3b6dcd3eda8e6443024100b69dca1cf7d4d7ec81e75b90fc" +
    501        "ca874abcde123fd2700180aa90479b6e48de8d67ed24f9f19d85ba275874f542" +
    502        "cd20dc723e6963364a1f9425452b269a6799fd024028fa13938655be1f8a159c" +
    503        "baca5a72ea190c30089e19cd274a556f36c4f6e19f554b34c077790427bbdd8d" +
    504        "d3ede2448328f385d81b30e8e43b2fffa02786197902401a8b38f398fa712049" +
    505        "898d7fb79ee0a77668791299cdfa09efc0e507acb21ed74301ef5bfd48be455e" +
    506        "aeb6e1678255827580a8e4e8e14151d1510a82a3f2e729024027156aba4126d2" +
    507        "4a81f3a528cbfb27f56886f840a9f6e86e17a44b94fe9319584b8e22fdde1e5a" +
    508        "2e3bd8aa5ba8d8584194eb2190acf832b847f13a3d24a79f4d"
    509    ),
    510    spki: util.hex2abv(
    511      "30819f300d06092a864886f70d010101050003818d0030818902818100a56e4a" +
    512        "0e701017589a5187dc7ea841d156f2ec0e36ad52a44dfeb1e61f7ad991d8c510" +
    513        "56ffedb162b4c0f283a12a88a394dff526ab7291cbb307ceabfce0b1dfd5cd95" +
    514        "08096d5b2b8b6df5d671ef6377c0921cb23c270a70e2598e6ff89d19f105acc2" +
    515        "d3f0cb35f29280e1386b6f64c4ef22e1e1f20d0ce8cffb2249bd9a2137020301" +
    516        "0001"
    517    ),
    518    data: util.hex2abv(
    519      "cdc87da223d786df3b45e0bbbc721326d1ee2af806cc315475cc6f0d9c66e1b6" +
    520        "2371d45ce2392e1ac92844c310102f156a0d8d52c1f4c40ba3aa65095786cb76" +
    521        "9757a6563ba958fed0bcc984e8b517a3d5f515b23b8a41e74aa867693f90dfb0" +
    522        "61a6e86dfaaee64472c00e5f20945729cbebe77f06ce78e08f4098fba41f9d61" +
    523        "93c0317e8b60d4b6084acb42d29e3808a3bc372d85e331170fcbf7cc72d0b71c" +
    524        "296648b3a4d10f416295d0807aa625cab2744fd9ea8fd223c42537029828bd16" +
    525        "be02546f130fd2e33b936d2676e08aed1b73318b750a0167d0"
    526    ),
    527    sig: util.hex2abv(
    528      "9074308fb598e9701b2294388e52f971faac2b60a5145af185df5287b5ed2887" +
    529        "e57ce7fd44dc8634e407c8e0e4360bc226f3ec227f9d9e54638e8d31f5051215" +
    530        "df6ebb9c2f9579aa77598a38f914b5b9c1bd83c4e2f9f382a0d0aa3542ffee65" +
    531        "984a601bc69eb28deb27dca12c82c2d4c3f66cd500f1ff2b994d8a4e30cbb33c"
    532    ),
    533    saltLength: 20,
    534    jwk_priv: {
    535      kty: "RSA",
    536      n:
    537        "pW5KDnAQF1iaUYfcfqhB0Vby7A42rVKkTf6x5h962ZHYxRBW_-2xYrTA8oOhK" +
    538        "oijlN_1JqtykcuzB86r_OCx39XNlQgJbVsri2311nHvY3fAkhyyPCcKcOJZjm" +
    539        "_4nRnxBazC0_DLNfKSgOE4a29kxO8i4eHyDQzoz_siSb2aITc",
    540      e: "AQAB",
    541      d:
    542        "M6UEKpCyfU9UUcqbu9C0R3GhAa-IQ0Cu-YhfKku-kuiUpySsPFaMj5eFOtB8A" +
    543        "mbIxqPKCSnx6PESMYhEKfxNmuVf7olqEM5wfD7X5zTkRyejlXRQGlMmgxCcKr" +
    544        "rKuig8MbS9L1PD7jfjUs7jT55QO9gMBiKtecbc7og1R8ajsyU",
    545      p:
    546        "5-iUJyCod1Fyc6NWBT6iobwMlKpy1VxuhilrLfyWeUjApyy8zKfqyzVwbgmh3" +
    547        "1WhU1vZs8w0Fgs7bc0-2o5kQw",
    548      q:
    549        "tp3KHPfU1-yB51uQ_MqHSrzeEj_ScAGAqpBHm25I3o1n7ST58Z2FuidYdPVCz" +
    550        "SDccj5pYzZKH5QlRSsmmmeZ_Q",
    551      dp:
    552        "KPoTk4ZVvh-KFZy6ylpy6hkMMAieGc0nSlVvNsT24Z9VSzTAd3kEJ7vdjdPt" +
    553        "4kSDKPOF2Bsw6OQ7L_-gJ4YZeQ",
    554      dq:
    555        "Gos485j6cSBJiY1_t57gp3ZoeRKZzfoJ78DlB6yyHtdDAe9b_Ui-RV6utuFn" +
    556        "glWCdYCo5OjhQVHRUQqCo_LnKQ",
    557      qi:
    558        "JxVqukEm0kqB86Uoy_sn9WiG-ECp9uhuF6RLlP6TGVhLjiL93h5aLjvYqluo" +
    559        "2FhBlOshkKz4MrhH8To9JKefTQ",
    560    },
    561    jwk_pub: {
    562      kty: "RSA",
    563      n:
    564        "pW5KDnAQF1iaUYfcfqhB0Vby7A42rVKkTf6x5h962ZHYxRBW_-2xYrTA8oOhK" +
    565        "oijlN_1JqtykcuzB86r_OCx39XNlQgJbVsri2311nHvY3fAkhyyPCcKcOJZjm" +
    566        "_4nRnxBazC0_DLNfKSgOE4a29kxO8i4eHyDQzoz_siSb2aITc",
    567      e: "AQAB",
    568    },
    569  },
    570 
    571  // [pss-vect.txt] Example 1.4 from
    572  // <ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-1/pkcs-1v2-1-vec.zip>
    573  rsapss2: {
    574    spki: util.hex2abv(
    575      "30819f300d06092a864886f70d010101050003818d0030818902818100a56e4a" +
    576        "0e701017589a5187dc7ea841d156f2ec0e36ad52a44dfeb1e61f7ad991d8c510" +
    577        "56ffedb162b4c0f283a12a88a394dff526ab7291cbb307ceabfce0b1dfd5cd95" +
    578        "08096d5b2b8b6df5d671ef6377c0921cb23c270a70e2598e6ff89d19f105acc2" +
    579        "d3f0cb35f29280e1386b6f64c4ef22e1e1f20d0ce8cffb2249bd9a2137020301" +
    580        "0001"
    581    ),
    582    data: util.hex2abv("bc656747fa9eafb3f0"),
    583    sig: util.hex2abv(
    584      "4609793b23e9d09362dc21bb47da0b4f3a7622649a47d464019b9aeafe53359c" +
    585        "178c91cd58ba6bcb78be0346a7bc637f4b873d4bab38ee661f199634c547a1ad" +
    586        "8442e03da015b136e543f7ab07c0c13e4225b8de8cce25d4f6eb8400f81f7e18" +
    587        "33b7ee6e334d370964ca79fdb872b4d75223b5eeb08101591fb532d155a6de87"
    588    ),
    589    saltLength: 20,
    590  },
    591 
    592  // [SigVerPSS_186-3.rsp] from
    593  // <http://csrc.nist.gov/groups/STM/cavp/documents/dss/186-2rsatestvectors.zip>
    594  rsapss3: {
    595    spki: util.hex2abv(
    596      "30819d300d06092a864886f70d010101050003818b0030818702818100be499b" +
    597        "5e7f06c83fa0293e31465c8eb6b58af920bae52a7b5b9bfeb7aa72db1264112e" +
    598        "b3fd431d31a2a7e50941566929494a0e891ed5613918b4b51b0d1fb97783b26a" +
    599        "cf7d0f384cfb35f4d2824f5dd380623a26bf180b63961c619dcdb20cae406f22" +
    600        "f6e276c80a37259490cfeb72c1a71a84f1846d330877ba3e3101ec9c7b020111"
    601    ),
    602    data: util.hex2abv(
    603      "c7f5270fca725f9bd19f519a8d7cca3cc5c079024029f3bae510f9b02140fe23" +
    604        "8908e4f6c18f07a89c687c8684669b1f1db2baf9251a3c829faccb493084e16e" +
    605        "c9e28d58868074a5d6221667dd6e528d16fe2c9f3db4cfaf6c4dce8c8439af38" +
    606        "ceaaaa9ce2ecae7bc8f4a5a55e3bf96df9cd575c4f9cb327951b8cdfe4087168"
    607    ),
    608    sig: util.hex2abv(
    609      "11e169f2fd40b07641b9768a2ab19965fb6c27f10fcf0323fcc6d12eb4f1c06b" +
    610        "330ddaa1ea504407afa29de9ebe0374fe9d1e7d0ffbd5fc1cf3a3446e4145415" +
    611        "d2ab24f789b3464c5c43a256bbc1d692cf7f04801dac5bb401a4a03ab7d5728a" +
    612        "860c19e1a4dc797ca542c8203cec2e601eb0c51f567f2eda022b0b9ebddeeefa"
    613    ),
    614    saltLength: 10,
    615  },
    616 
    617  // [SigVerPSS_186-3.rsp] from
    618  // <http://csrc.nist.gov/groups/STM/cavp/documents/dss/186-2rsatestvectors.zip>
    619  rsapss4: {
    620    spki: util.hex2abv(
    621      "30819d300d06092a864886f70d010101050003818b0030818702818100be499b" +
    622        "5e7f06c83fa0293e31465c8eb6b58af920bae52a7b5b9bfeb7aa72db1264112e" +
    623        "b3fd431d31a2a7e50941566929494a0e891ed5613918b4b51b0d1fb97783b26a" +
    624        "cf7d0f384cfb35f4d2824f5dd380623a26bf180b63961c619dcdb20cae406f22" +
    625        "f6e276c80a37259490cfeb72c1a71a84f1846d330877ba3e3101ec9c7b020111"
    626    ),
    627    data: util.hex2abv(
    628      "c7f5270fca725f9bd19f519a8d7cca3cc5c079024029f3bae510f9b02140fe23" +
    629        "8908e4f6c18f07a89c687c8684669b1f1db2baf9251a3c829faccb493084e16e" +
    630        "c9e28d58868074a5d6221667dd6e528d16fe2c9f3db4cfaf6c4dce8c8439af38" +
    631        "ceaaaa9ce2ecae7bc8f4a5a55e3bf96df9cd575c4f9cb327951b8cdfe4087168"
    632    ),
    633    sig: util.hex2abv(
    634      "b281ad934b2775c0cba5fb10aa574d2ed85c7f99b942b78e49702480069362ed" +
    635        "394baded55e56cfcbe7b0b8d2217a05a60e1acd725cb09060dfac585bc2132b9" +
    636        "9b41cdbd530c69d17cdbc84bc6b9830fc7dc8e1b2412cfe06dcf8c1a0cc3453f" +
    637        "93f25ebf10cb0c90334fac573f449138616e1a194c67f44efac34cc07a526267"
    638    ),
    639    saltLength: 10,
    640  },
    641 
    642  // [SigVerPSS_186-3.rsp] from
    643  // <http://csrc.nist.gov/groups/STM/cavp/documents/dss/186-2rsatestvectors.zip>
    644  rsapss5: {
    645    spki: util.hex2abv(
    646      "30819d300d06092a864886f70d010101050003818b0030818702818100be499b" +
    647        "5e7f06c83fa0293e31465c8eb6b58af920bae52a7b5b9bfeb7aa72db1264112e" +
    648        "b3fd431d31a2a7e50941566929494a0e891ed5613918b4b51b0d1fb97783b26a" +
    649        "cf7d0f384cfb35f4d2824f5dd380623a26bf180b63961c619dcdb20cae406f22" +
    650        "f6e276c80a37259490cfeb72c1a71a84f1846d330877ba3e3101ec9c7b020111"
    651    ),
    652    data: util.hex2abv(
    653      "c7f5270fca725f9bd19f519a8d7cca3cc5c079024029f3bae510f9b02140fe23" +
    654        "8908e4f6c18f07a89c687c8684669b1f1db2baf9251a3c829faccb493084e16e" +
    655        "c9e28d58868074a5d6221667dd6e528d16fe2c9f3db4cfaf6c4dce8c8439af38" +
    656        "ceaaaa9ce2ecae7bc8f4a5a55e3bf96df9cd575c4f9cb327951b8cdfe4087168"
    657    ),
    658    sig: util.hex2abv(
    659      "8ffc38f9b820ef6b080fd2ec7de5626c658d79056f3edf610a295b7b0546f73e" +
    660        "01ffdf4d0070ebf79c33fd86c2d608be9438b3d420d09535b97cd3d846ecaf8f" +
    661        "6551cdf93197e9f8fb048044473ab41a801e9f7fc983c62b324361dade9f71a6" +
    662        "5952bd35c59faaa4d6ff462f68a6c4ec0b428aa47336f2178aeb276136563b7d"
    663    ),
    664    saltLength: 10,
    665  },
    666 
    667  key_wrap_known_answer: {
    668    key: util.hex2abv("0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a"),
    669    wrapping_key: util.hex2abv("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b"),
    670    wrapping_iv: util.hex2abv("0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c"),
    671    wrapped_key: util.hex2abv(
    672      // eslint-disable-next-line no-useless-concat
    673      "9ed0283a9a2b7e4292ebc5135e6342cc" + "8a7f65802a1f6fd41bd3251c4da0c138"
    674    ),
    675  },
    676 
    677  // AES Key Wrap
    678  // From RFC 3394, "Wrap 128 bits of Key Data with a 256-bit KEK"
    679  // http://tools.ietf.org/html/rfc3394#section-4.3
    680  aes_kw: {
    681    wrapping_key: {
    682      kty: "oct",
    683      alg: "A256KW",
    684      k: "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8",
    685    },
    686    key: {
    687      kty: "oct",
    688      k: "ABEiM0RVZneImaq7zN3u_w",
    689    },
    690    wrapped_key: util.hex2abv(
    691      // eslint-disable-next-line no-useless-concat
    692      "64e8c3f9ce0f5ba263e9777905818a2a" + "93c8191e7d6e8ae7"
    693    ),
    694  },
    695 
    696  // RFC 6070 <http://tools.ietf.org/html/rfc6070>
    697  pbkdf2_sha1: {
    698    password: new TextEncoder().encode("passwordPASSWORDpassword"),
    699    salt: new TextEncoder().encode("saltSALTsaltSALTsaltSALTsaltSALTsalt"),
    700    iterations: 4096,
    701    length: 25 * 8,
    702 
    703    derived: util.hex2abv("3d2eec4fe41c849b80c8d83662c0e44a8b291a964cf2f07038"),
    704 
    705    jwk: {
    706      kty: "oct",
    707      k: "cGFzc3dvcmRQQVNTV09SRHBhc3N3b3Jk",
    708    },
    709  },
    710 
    711  // https://stackoverflow.com/questions/5130513/pbkdf2-hmac-sha2-test-vectors
    712  pbkdf2_sha256: {
    713    password: new TextEncoder().encode("passwordPASSWORDpassword"),
    714    salt: new TextEncoder().encode("saltSALTsaltSALTsaltSALTsaltSALTsalt"),
    715    iterations: 4096,
    716    length: 40 * 8,
    717 
    718    derived: util.hex2abv(
    719      "348c89dbcbd32b2f32d814b8116e84cf2b17347ebc1800181c4e2a1fb8dd53e1" +
    720        "c635518c7dac47e9"
    721    ),
    722  },
    723 
    724  pbkdf2_sha256_no_salt: {
    725    password: util.hex2abv(
    726      "9c13a23bc58a52be8bb4fa1a2cbdff01747265736f7269745f64625f7265636f72645f6964"
    727    ),
    728    length: 32 * 8,
    729    iterations: 1,
    730 
    731    derived: util.hex2abv(
    732      "ef29dd382fa66a83a95be7ccfb71f1ccfee494977855a4c260d90c2f8c91e062"
    733    ),
    734  },
    735 
    736  pbkdf2_sha256_no_pwd: {
    737    password: new Uint8Array(),
    738    salt: new TextEncoder().encode("saltSALTsaltSALTsaltSALTsaltSALTsalt"),
    739    length: 32 * 8,
    740    iterations: 1,
    741 
    742    derived: util.hex2abv(
    743      "1635fa0f0542cc84f51207ff6cad5284aee3b0264faa55868eca95a7efd2335c"
    744    ),
    745  },
    746 
    747  broken_pkcs8: {
    748    // An RSA key that's missing the prime1 value. This currently fails the key
    749    // import due that missing value. See this gist for the construction:
    750    // <https://gist.github.com/jcjones/79efe5a6fe2aad3145e1d5e6be765893>
    751    rsa: util.hex2abv(
    752      "30820438020100300d06092a864886f70d0101010500048204223082041e0201000282" +
    753        "010100cd5286bf0558a0829d0218ae2912bb1ffb1c0533d42a419076dd777652b6fc61" +
    754        "c2deeb0dcb60cbcdce530ebdd0952fef6fb4086575a70318dfa9099284ccb99e0c789c" +
    755        "f1f006d371fc2a5644ab5dd3928aaf2b7b046968d3db2b5018c21a56f10f83646f34bc" +
    756        "f4bc898e6847d6848e51891f9ff8524aee3e3683a8efe437861db3c0671fa994980774" +
    757        "de555ffb70c30bd4341b2c2efe0b5624af52ff371bc11b092309b46fecc428c04e1d10" +
    758        "b11c678256c76ef9b3a6aee79b2e795496a31c363454c4fdf239d43b759ac321647a3b" +
    759        "4b7c76fe5575183a463cd9ebca2da17a6caac74ac9430ee6fef4cb24ca01d3da7321b1" +
    760        "972b97cda536a5e392f64d0cb04902030100010282010036599619928cb7505bc76649" +
    761        "13ce45825db2391e53172c6bd54b22884bb4ec71e467a5c8ed011e71c81fec530a97b3" +
    762        "2caa60f9a801d0c7dd19b761354bb9f59884ac98bee24eac420c0218fbec70d5c480b9" +
    763        "85c4f6920091b3fe6f215ea0224b8553be8e416393552504714e32d6bbe5916ab1a9c5" +
    764        "fed7b9d82c59d7c68d7c0e7ed37123e64176aa7d24a52972859b91fee93f25c263f900" +
    765        "a1c38764798d0396294c775b65e5563e8d8a6fc519307d14c49bd11a36dcbd05a120d9" +
    766        "6e05e47da12051311b4e8b027cce5016b411072927f3846a662b8019cd275430f80646" +
    767        "7d531dc595bb4af64136c8aadd9cf3f6c123b0aec69c040a0beb4ee2f023beab915102" +
    768        "818100d0e82ca2cd42a550f66b8ebaa6fe0fd51e204a15418a4fc97a8106c4106aee61" +
    769        "0b72f794a7e65eea45a44a9e844c36a75436c825349c94c8608b243d54a6835013bd77" +
    770        "56f386ea25102398bcbda264f1fea9dc5b415d8d71ee3d4e2c67b0e0c6abc1029bb94b" +
    771        "6d70b19cb4cea401dc4a9fdc351463666b8ac43c821672551b9f02818052b9f12d0b99" +
    772        "cae194fcb8abc8f21cab920453aded0789ec4f92bdb2b1c0c073d6cb29c089c9ac000a" +
    773        "afe2df7633741acea7ff216b4aa5f0c299ede0f713a0bd07a5a1001e730013efdc81c9" +
    774        "984d8aba957c5c175a7dff3b17c6e0725604f4c91bd867544f20c2b5f6dd39280a9800" +
    775        "4308ef55f20be709e5ebeab4c0dc879fc90281800fa02e26873fe2e9a964e62a23ef80" +
    776        "f3a9eb345f5ea59fce2c319675f7dc67b42e8d0ce3bba3499a305757957fc3cb9abc7b" +
    777        "d480a3ecca5c2a8c7dcb70977bdef37b0a80207b08ec78c690d81d3f1659db788d18ee" +
    778        "4cb715bc822d64b8e4cc0b503181a67037aa19f1cf0cdf1ff95ba6e14a31563311281e" +
    779        "1b0b83977639d3750281807759c93656b00d794f68388928309c380b0cfd075baf76c2" +
    780        "e37b5bc55409027ed02eb1bb3a2cb12d4fc43a84fdadd5b80216b88545d71559caa3a0" +
    781        "1267a3cd07c58230ee477d69a71053a6b6a81e5083f7f0cbc28c3d1eae8a3ceeaf8a75" +
    782        "651d0f52db8c79cff223edf4b1d412071b1bedf0d9b05348f39e0b2a89c692886ef3"
    783    ),
    784  },
    785 
    786  // KASValidityTest_ECCEphemeralUnified_NOKC_ZZOnly_init.fax [EC]
    787  // <http://csrc.nist.gov/groups/STM/cavp/documents/keymgmt/kastestvectors.zip>
    788  ecdh_p256: {
    789    pkcs8: util.hex2abv(
    790      "308187020100301306072a8648ce3d020106082a8648ce3d030107046d30" +
    791        "6b020101042086880a915c7de9140f5d06a936c3bcd0c192848bd551894d" +
    792        "916a72d1540d2495a14403420004656492c9b86256b6d324c98ad554d466" +
    793        "d80cfd8ade6ee841086f109c728ab3aa9b027586e77e7582a5ed59bdfc46" +
    794        "89d66e37d71dbbabae00614b2d3e83b7bc01"
    795    ),
    796    jwk_pub: {
    797      kty: "EC",
    798      crv: "P-256",
    799      x: "XOe4bjsyZgQD5jcS7wmY3q4QJ_rsPBvp92-TTf61jpg",
    800      y: "9M8HWzlAXdHxresJAQftz7K0ljc52HZ54wVssFV9Ct8",
    801    },
    802 
    803    jwk_priv: {
    804      kty: "EC",
    805      crv: "P-256",
    806      d: "qq_LEzeJpR00KM5DQvL2MNtJcbi0KcGVcoPIHNnwm2A",
    807      x: "FNwJHA-FwnSx5tKXFV_iLN408gbKUHRV06WnQlzTdN4",
    808      y: "is9pWAaneK4RdxmdLfsq5IwizDmUS2w8OGS99sKm3ek",
    809    },
    810 
    811    // vector with algorithm = id-ecDH
    812    spki: util.hex2abv(
    813      "3056301006042b81047006082a8648ce3d030107034200045ce7b86e3b326604" +
    814        "03e63712ef0998deae1027faec3c1be9f76f934dfeb58e98f4cf075b39405dd1" +
    815        "f1adeb090107edcfb2b4963739d87679e3056cb0557d0adf"
    816    ),
    817 
    818    // vector with algorithm = id-ecPublicKey
    819    spki_id_ecpk: util.hex2abv(
    820      "3059301306072a8648ce3d020106082a8648ce3d030107034200045ce7b86e3b" +
    821        "32660403e63712ef0998deae1027faec3c1be9f76f934dfeb58e98f4cf075b39" +
    822        "405dd1f1adeb090107edcfb2b4963739d87679e3056cb0557d0adf"
    823    ),
    824 
    825    raw: util.hex2abv(
    826      "045ce7b86e3b32660403e63712ef0998deae1027faec3c1be9f76f934dfeb58e" +
    827        "98f4cf075b39405dd1f1adeb090107edcfb2b4963739d87679e3056cb0557d0adf"
    828    ),
    829 
    830    secret: util.hex2abv(
    831      "35669cd5c244ba6c1ea89b8802c3d1db815cd769979072e6556eb98548c65f7d"
    832    ),
    833  },
    834 
    835  // KASValidityTest_ECCEphemeralUnified_NOKC_ZZOnly_init.fax [ED]
    836  // <http://csrc.nist.gov/groups/STM/cavp/documents/keymgmt/kastestvectors.zip>
    837  ecdh_p384: {
    838    jwk_pub: {
    839      kty: "EC",
    840      crv: "P-384",
    841      x: "YoV6fhCph4kyt7sUkqiZOtbRs0rF6etPqlnrn1nzSB95NElaw4uTK7Pn2nlFFqqH",
    842      y: "bf3tRz6icq3-W6hhmoqDTBKjdOQUJ5xHr5kX4X-h5MZk_P_nCrG3IUVl1SAbhWDw",
    843    },
    844 
    845    jwk_priv: {
    846      kty: "EC",
    847      crv: "P-384",
    848      d: "RT8f0pRw4CL1Tgk4rwuNnNbFoQBNTTBkr7WVLLm4fDA3boYZpNB_t-rbMVLx0CRp",
    849      x: "_XwhXRnOzEfCsWIRCz3QLClaDkigQFvXmqYNdh_7vJdADykPbfGi1VgAu3XJdXoD",
    850      y: "S1P_FBCXYGE-5VPvTCRnFT7bPIPmUPV9qKTM24TQFYEUgIDfzCLsyGCWK-rhP6jU",
    851    },
    852 
    853    secret: util.hex2abv(
    854      "a3d28aa18f905a48a5f166b4ddbf5f6b499e43858ccdd80b869946aba2c5d461" +
    855        "db6a1e5b1137687801878ff0f8d9a7b3"
    856    ),
    857  },
    858 
    859  // KASValidityTest_ECCEphemeralUnified_NOKC_ZZOnly_init.fax [EE]
    860  // <http://csrc.nist.gov/groups/STM/cavp/documents/keymgmt/kastestvectors.zip>
    861  ecdh_p521: {
    862    jwk_pub: {
    863      kty: "EC",
    864      crv: "P-521",
    865      x:
    866        "AeCLgRZ-BPqfhq4jt409-E26VHW5l29q74cHbIbQiS_-Gcqdo-087jHdPXUksGpr" +
    867        "Nyp_RcTZd94t3peXzQziQIqo",
    868      y:
    869        "AZIAp8QVnU9hBOkLScv0dy540uGtBWHkWj4DGh-Exh4iWZ0E-YBS8-HVx2eB-nfG" +
    870        "AGEy4-BzfpFFlfidOS1Tg77J",
    871    },
    872 
    873    jwk_priv: {
    874      kty: "EC",
    875      crv: "P-521",
    876      d:
    877        "ABtsfkDGFarQU4kb7e2gPszGCTT8GLDaaJbFQenFZce3qp_dh0qZarXHKBZ-BVic" +
    878        "NeIW5Sk661UoNfwykSvmh77S",
    879      x:
    880        "AcD_6Eb4A-8QdUM70c6F0WthN1kvV4fohS8QHbod6B4y1ZDU54mQuCR-3IBjcV1c" +
    881        "oh18uxbyUn5szMuCgjZUiD0y",
    882      y:
    883        "AU3WKJffztkhAQetBXaLvUSIHa87HMn8vZFB04lWipH-SrsrAu_4N-6iam0OD4EJ" +
    884        "0kOMH8iEh7yuivaKsFRzm2-m",
    885    },
    886 
    887    secret: util.hex2abv(
    888      "00561eb17d856552c21b8cbe7d3d60d1ea0db738b77d4050fa2dbd0773edc395" +
    889        "09854d9e30e843964ed3fd303339e338f31289120a38f94e9dc9ff7d4b3ea8f2" +
    890        "5e01"
    891    ),
    892  },
    893 
    894  // Some test vectors that we should fail to import.
    895  ecdh_p256_negative: {
    896    // The given curve doesn't exist / isn't supported.
    897    jwk_bad_crv: {
    898      kty: "EC",
    899      crv: "P-123",
    900      x: "XOe4bjsyZgQD5jcS7wmY3q4QJ_rsPBvp92-TTf61jpg",
    901      y: "9M8HWzlAXdHxresJAQftz7K0ljc52HZ54wVssFV9Ct8",
    902    },
    903 
    904    jwk_different_crv: {
    905      kty: "EC",
    906      crv: "P-521",
    907      x: "XOe4bjsyZgQD5jcS7wmY3q4QJ_rsPBvp92-TTf61jpg",
    908      y: "9M8HWzlAXdHxresJAQftz7K0ljc52HZ54wVssFV9Ct8",
    909    },
    910 
    911    // The crv parameter is missing.
    912    jwk_missing_crv: {
    913      kty: "EC",
    914      x: "XOe4bjsyZgQD5jcS7wmY3q4QJ_rsPBvp92-TTf61jpg",
    915      y: "9M8HWzlAXdHxresJAQftz7K0ljc52HZ54wVssFV9Ct8",
    916    },
    917 
    918    // The X coordinate is missing.
    919    jwk_missing_x: {
    920      kty: "EC",
    921      crv: "P-256",
    922      y: "9M8HWzlAXdHxresJAQftz7K0ljc52HZ54wVssFV9Ct8",
    923    },
    924 
    925    // The Y coordinate is missing.
    926    jwk_missing_y: {
    927      kty: "EC",
    928      crv: "P-256",
    929      x: "XOe4bjsyZgQD5jcS7wmY3q4QJ_rsPBvp92-TTf61jpg",
    930    },
    931 
    932    // Public point with Y not on the curve.
    933    raw_bad: util.hex2abv(
    934      "045ce7b86e3b32660403e63712ef0998deae1027faec3c1be9f76f934dfeb58e" +
    935        "98f4cf075b39405dd1f1adeb090106edcfb2b4963739d87679e3056cb0557d0adf"
    936    ),
    937 
    938    // Public point with Y a little too short.
    939    raw_short: util.hex2abv(
    940      "045ce7b86e3b32660403e63712ef0998deae1027faec3c1be9f76f934dfeb58e" +
    941        "98f4cf075b39405dd1f1adeb090107edcfb2b4963739d87679e3056cb0557d0a"
    942    ),
    943 
    944    // Public point with Y a little too long.
    945    raw_long: util.hex2abv(
    946      "045ce7b86e3b32660403e63712ef0998deae1027faec3c1be9f76f934dfeb58e" +
    947        "98f4cf075b39405dd1f1adeb090107edcfb2b4963739d87679e3056cb0557d0adfff"
    948    ),
    949 
    950    // Public point with EC_POINT_FORM_COMPRESSED_Y0.
    951    raw_compressed: util.hex2abv(
    952      "025ce7b86e3b32660403e63712ef0998deae1027faec3c1be9f76f934dfeb58e" +
    953        "98f4cf075b39405dd1f1adeb090107edcfb2b4963739d87679e3056cb0557d0adf"
    954    ),
    955  },
    956 
    957  // NIST ECDSA test vectors
    958  // http://csrc.nist.gov/groups/STM/cavp/index.html
    959  ecdsa_verify: {
    960    pub_jwk: {
    961      kty: "EC",
    962      crv: "P-521",
    963      alg: "ES512",
    964 
    965      // 0061387fd6b95914e885f912edfbb5fb274655027f216c4091ca83e19336740fd8
    966      // 1aedfe047f51b42bdf68161121013e0d55b117a14e4303f926c8debb77a7fdaad1
    967      x:
    968        "AGE4f9a5WRTohfkS7fu1-ydGVQJ_IWxAkcqD4ZM2dA_Y" +
    969        "Gu3-BH9RtCvfaBYRIQE-DVWxF6FOQwP5Jsjeu3en_arR",
    970      // 00e7d0c75c38626e895ca21526b9f9fdf84dcecb93f2b233390550d2b1463b7ee3
    971      // f58df7346435ff0434199583c97c665a97f12f706f2357da4b40288def888e59e6
    972      y:
    973        "AOfQx1w4Ym6JXKIVJrn5_fhNzsuT8rIzOQVQ0rFGO37j" +
    974        "9Y33NGQ1_wQ0GZWDyXxmWpfxL3BvI1faS0Aoje-Ijlnm",
    975    },
    976 
    977    raw: util.hex2abv(
    978      "040061387fd6b95914e885f912edfbb5fb274655027f216c4091ca83e19336740fd" +
    979        "81aedfe047f51b42bdf68161121013e0d55b117a14e4303f926c8debb77a7fdaad1" +
    980        "00e7d0c75c38626e895ca21526b9f9fdf84dcecb93f2b233390550d2b1463b7ee3f" +
    981        "58df7346435ff0434199583c97c665a97f12f706f2357da4b40288def888e59e6"
    982    ),
    983 
    984    data: util.hex2abv(
    985      "9ecd500c60e701404922e58ab20cc002651fdee7cbc9336adda33e4c1088fab1" +
    986        "964ecb7904dc6856865d6c8e15041ccf2d5ac302e99d346ff2f686531d255216" +
    987        "78d4fd3f76bbf2c893d246cb4d7693792fe18172108146853103a51f824acc62" +
    988        "1cb7311d2463c3361ea707254f2b052bc22cb8012873dcbb95bf1a5cc53ab89f"
    989    ),
    990    sig: util.hex2abv(
    991      "004de826ea704ad10bc0f7538af8a3843f284f55c8b946af9235af5af74f2b76e0" +
    992        "99e4bc72fd79d28a380f8d4b4c919ac290d248c37983ba05aea42e2dd79fdd33e8" +
    993        "0087488c859a96fea266ea13bf6d114c429b163be97a57559086edb64aed4a1859" +
    994        "4b46fb9efc7fd25d8b2de8f09ca0587f54bd287299f47b2ff124aac566e8ee3b43"
    995    ),
    996 
    997    // Same as "sig", but with the last few octets set to 0
    998    sig_tampered: util.hex2abv(
    999      "004de826ea704ad10bc0f7538af8a3843f284f55c8b946af9235af5af74f2b76e0" +
   1000        "99e4bc72fd79d28a380f8d4b4c919ac290d248c37983ba05aea42e2dd79fdd33e8" +
   1001        "0087488c859a96fea266ea13bf6d114c429b163be97a57559086edb64aed4a1859" +
   1002        "4b46fb9efc7fd25d8b2de8f09ca0587f54bd287299f47b2ff124aac56600000000"
   1003    ),
   1004  },
   1005 
   1006  // An ECDSA key in JWK format, which an "alg" field that doesn't match the
   1007  // curve.
   1008  ecdsa_jwk_alg_mismatch: {
   1009    pub_jwk: {
   1010      kty: "EC",
   1011      crv: "P-521",
   1012      alg: "ES256",
   1013 
   1014      // 0061387fd6b95914e885f912edfbb5fb274655027f216c4091ca83e19336740fd8
   1015      // 1aedfe047f51b42bdf68161121013e0d55b117a14e4303f926c8debb77a7fdaad1
   1016      x:
   1017        "AGE4f9a5WRTohfkS7fu1-ydGVQJ_IWxAkcqD4ZM2dA_Y" +
   1018        "Gu3-BH9RtCvfaBYRIQE-DVWxF6FOQwP5Jsjeu3en_arR",
   1019      // 00e7d0c75c38626e895ca21526b9f9fdf84dcecb93f2b233390550d2b1463b7ee3
   1020      // f58df7346435ff0434199583c97c665a97f12f706f2357da4b40288def888e59e6
   1021      y:
   1022        "AOfQx1w4Ym6JXKIVJrn5_fhNzsuT8rIzOQVQ0rFGO37j" +
   1023        "9Y33NGQ1_wQ0GZWDyXxmWpfxL3BvI1faS0Aoje-Ijlnm",
   1024    },
   1025  },
   1026 
   1027  // An ECDSA key in JWK format, which an "crv" field doesn't match the alg's crv.
   1028  ecdsa_jwk_crv_mismatch: {
   1029    pub_jwk: {
   1030      kty: "EC",
   1031      crv: "P-256",
   1032      alg: "ECDSA",
   1033 
   1034      x: "XOe4bjsyZgQD5jcS7wmY3q4QJ_rsPBvp92-TTf61jpg",
   1035      y: "9M8HWzlAXdHxresJAQftz7K0ljc52HZ54wVssFV9Ct8",
   1036    },
   1037  },
   1038 
   1039  ecdsa_bad: {
   1040    pub_jwk: {
   1041      kty: "EC",
   1042      crv: "P-521",
   1043      x:
   1044        "BhOH_WuVkU6IX5Eu37tfsnRlUCfyFsQJHKg-GTNnQP2B" +
   1045        "rt_gR_UbQr32gWESEBPg1VsRehTkMD-SbI3rt3p_2q0B",
   1046      y:
   1047        "AUNouOdGgHsraPNhXNeNdhpGTd15GPyN9R0iWWL98ePc" +
   1048        "JD4mUQD/DsEzNZ4zLkTdSa/Y5fOP6GEzVzQy0zwC+goD",
   1049    },
   1050  },
   1051 
   1052  // RFC 2409 <http://tools.ietf.org/html/rfc2409#section-6.2>
   1053  dh: {
   1054    prime: util.hex2abv(
   1055      "ffffffffffffffffc90fdaa22168c234c4c6628b80dc1cd129024e088a67cc74" +
   1056        "020bbea63b139b22514a08798e3404ddef9519b3cd3a431b302b0a6df25f1437" +
   1057        "4fe1356d6d51c245e485b576625e7ec6f44c42e9a637ed6b0bff5cb6f406b7ed" +
   1058        "ee386bfb5a899fa5ae9f24117c4b1fe649286651ece65381ffffffffffffffff"
   1059    ),
   1060  },
   1061 
   1062  // KASValidityTest_FFCStatic_NOKC_ZZOnly_resp.fax [FA]
   1063  // <http://csrc.nist.gov/groups/STM/cavp/documents/keymgmt/kastestvectors.zip>
   1064  dh_nist: {
   1065    prime: util.hex2abv(
   1066      "8b79f180cbd3f282de92e8b8f2d092674ffda61f01ed961f8ef04a1b7a3709ff" +
   1067        "748c2abf6226cf0c4538e48838193da456e92ee530ef7aa703e741585e475b26" +
   1068        "cd64fa97819181cef27de2449cd385c49c9b030f89873b5b7eaf063a788f00db" +
   1069        "3cb670c73846bc4f76af062d672bde8f29806b81548411ab48b99aebfd9c2d09"
   1070    ),
   1071 
   1072    gen: util.hex2abv(
   1073      "029843c81d0ea285c41a49b1a2f8e11a56a4b39040dfbc5ec040150c16f72f87" +
   1074        "4152f9c44c659d86f7717b2425b62597e9a453b13da327a31cde2cced6009152" +
   1075        "52d30262d1e54f4f864ace0e484f98abdbb37ebb0ba4106af5f0935b744677fa" +
   1076        "2f7f3826dcef3a1586956105ebea805d871f34c46c25bc30fc66b2db26cb0a93"
   1077    ),
   1078 
   1079    raw: util.hex2abv(
   1080      "4fc9904887ac7fabff87f054003547c2d9458c1f6f584c140d7271f8b266bb39" +
   1081        "0af7e3f625a629bec9c6a057a4cbe1a556d5e3eb2ff1c6ff677a08b0c7c50911" +
   1082        "0b9e7c6dbc961ca4360362d3dbcffc5bf2bb7207e0a5922f77cf5464b316aa49" +
   1083        "fb62b338ebcdb30bf573d07b663bb7777b69d6317df0a4f636ba3d9acbf9e8ac"
   1084    ),
   1085 
   1086    spki: util.hex2abv(
   1087      "308201a33082011806092a864886f70d01030130820109028181008b79f180cb" +
   1088        "d3f282de92e8b8f2d092674ffda61f01ed961f8ef04a1b7a3709ff748c2abf62" +
   1089        "26cf0c4538e48838193da456e92ee530ef7aa703e741585e475b26cd64fa9781" +
   1090        "9181cef27de2449cd385c49c9b030f89873b5b7eaf063a788f00db3cb670c738" +
   1091        "46bc4f76af062d672bde8f29806b81548411ab48b99aebfd9c2d090281800298" +
   1092        "43c81d0ea285c41a49b1a2f8e11a56a4b39040dfbc5ec040150c16f72f874152" +
   1093        "f9c44c659d86f7717b2425b62597e9a453b13da327a31cde2cced600915252d3" +
   1094        "0262d1e54f4f864ace0e484f98abdbb37ebb0ba4106af5f0935b744677fa2f7f" +
   1095        "3826dcef3a1586956105ebea805d871f34c46c25bc30fc66b2db26cb0a930000" +
   1096        "038184000281804fc9904887ac7fabff87f054003547c2d9458c1f6f584c140d" +
   1097        "7271f8b266bb390af7e3f625a629bec9c6a057a4cbe1a556d5e3eb2ff1c6ff67" +
   1098        "7a08b0c7c509110b9e7c6dbc961ca4360362d3dbcffc5bf2bb7207e0a5922f77" +
   1099        "cf5464b316aa49fb62b338ebcdb30bf573d07b663bb7777b69d6317df0a4f636" +
   1100        "ba3d9acbf9e8ac"
   1101    ),
   1102  },
   1103 
   1104  // Taken from appendix A of RFC 5869.
   1105  // <https://tools.ietf.org/html/rfc5869>
   1106  hkdf: [
   1107    {
   1108      prf: "SHA-256",
   1109      key: util.hex2abv("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b"),
   1110      salt: util.hex2abv("000102030405060708090a0b0c"),
   1111      info: util.hex2abv("f0f1f2f3f4f5f6f7f8f9"),
   1112      data: util.hex2abv(
   1113        "3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf" +
   1114          "34007208d5b887185865"
   1115      ),
   1116      jwk: {
   1117        kty: "oct",
   1118        k: "CwsLCwsLCwsLCwsLCwsLCwsLCwsLCw",
   1119      },
   1120    },
   1121    {
   1122      prf: "SHA-256",
   1123      key: util.hex2abv(
   1124        "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f" +
   1125          "202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f" +
   1126          "404142434445464748494a4b4c4d4e4f"
   1127      ),
   1128      salt: util.hex2abv(
   1129        "606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f" +
   1130          "808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f" +
   1131          "a0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
   1132      ),
   1133      info: util.hex2abv(
   1134        "b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecf" +
   1135          "d0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeef" +
   1136          "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff"
   1137      ),
   1138      data: util.hex2abv(
   1139        "b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c" +
   1140          "59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71" +
   1141          "cc30c58179ec3e87c14c01d5c1f3434f1d87"
   1142      ),
   1143    },
   1144    {
   1145      prf: "SHA-256",
   1146      key: util.hex2abv("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b"),
   1147      salt: util.hex2abv(""),
   1148      info: util.hex2abv(""),
   1149      data: util.hex2abv(
   1150        "8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d" +
   1151          "9d201395faa4b61a96c8"
   1152      ),
   1153    },
   1154    {
   1155      prf: "SHA-1",
   1156      key: util.hex2abv("0b0b0b0b0b0b0b0b0b0b0b"),
   1157      salt: util.hex2abv("000102030405060708090a0b0c"),
   1158      info: util.hex2abv("f0f1f2f3f4f5f6f7f8f9"),
   1159      data: util.hex2abv(
   1160        "085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2" +
   1161          "c22e422478d305f3f896"
   1162      ),
   1163    },
   1164    {
   1165      prf: "SHA-1",
   1166      key: util.hex2abv(
   1167        "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f" +
   1168          "202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f" +
   1169          "404142434445464748494a4b4c4d4e4f"
   1170      ),
   1171      salt: util.hex2abv(
   1172        "606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f" +
   1173          "808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f" +
   1174          "a0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
   1175      ),
   1176      info: util.hex2abv(
   1177        "b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecf" +
   1178          "d0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeef" +
   1179          "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff"
   1180      ),
   1181      data: util.hex2abv(
   1182        "0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe" +
   1183          "8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e" +
   1184          "927336d0441f4c4300e2cff0d0900b52d3b4"
   1185      ),
   1186    },
   1187    {
   1188      prf: "SHA-1",
   1189      key: util.hex2abv("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b"),
   1190      salt: util.hex2abv(""),
   1191      info: util.hex2abv(""),
   1192      data: util.hex2abv(
   1193        "0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0" +
   1194          "ea00033de03984d34918"
   1195      ),
   1196    },
   1197    {
   1198      prf: "SHA-1",
   1199      key: util.hex2abv("0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c"),
   1200      salt: util.hex2abv(""),
   1201      info: util.hex2abv(""),
   1202      data: util.hex2abv(
   1203        "2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5" +
   1204          "673a081d70cce7acfc48"
   1205      ),
   1206    },
   1207  ],
   1208 };