crypto: testmgr - add aead cbc aes hmac sha1,256,512 test vectors

Test vectors were generated starting from existing CBC(AES) test vectors
(RFC3602, NIST SP800-38A) and adding HMAC(SHA*) computed with Crypto++ and
double-checked with HashCalc.

Signed-off-by: Horia Geanta <horia.geanta@freescale.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

diff --git a/crypto/testmgr.c b/crypto/testmgr.c
index 4308a11..a2ca743 100644 (file)
--- a/crypto/testmgr.c
+++ b/crypto/testmgr.c
@@ -1721,6 +1721,42 @@ static const struct alg_test_desc alg_test_descs[] = {
                        }
                }
        }, {
+               .alg = "authenc(hmac(sha1),cbc(aes))",
+               .test = alg_test_aead,
+               .fips_allowed = 1,
+               .suite = {
+                       .aead = {
+                               .enc = {
+                                       .vecs = hmac_sha1_aes_cbc_enc_tv_template,
+                                       .count = HMAC_SHA1_AES_CBC_ENC_TEST_VECTORS
+                               }
+                       }
+               }
+       }, {
+               .alg = "authenc(hmac(sha256),cbc(aes))",
+               .test = alg_test_aead,
+               .fips_allowed = 1,
+               .suite = {
+                       .aead = {
+                               .enc = {
+                                       .vecs = hmac_sha256_aes_cbc_enc_tv_template,
+                                       .count = HMAC_SHA256_AES_CBC_ENC_TEST_VECTORS
+                               }
+                       }
+               }
+       }, {
+               .alg = "authenc(hmac(sha512),cbc(aes))",
+               .test = alg_test_aead,
+               .fips_allowed = 1,
+               .suite = {
+                       .aead = {
+                               .enc = {
+                                       .vecs = hmac_sha512_aes_cbc_enc_tv_template,
+                                       .count = HMAC_SHA512_AES_CBC_ENC_TEST_VECTORS
+                               }
+                       }
+               }
+       }, {
                .alg = "cbc(aes)",
                .test = alg_test_skcipher,
                .fips_allowed = 1,

diff --git a/crypto/testmgr.h b/crypto/testmgr.h
index 4d84fe4..f8179e0 100644 (file)
--- a/crypto/testmgr.h
+++ b/crypto/testmgr.h
@@ -6975,6 +6975,9 @@ static struct cipher_testvec cast6_dec_tv_template[] = {
 #define AES_DEC_TEST_VECTORS 3
 #define AES_CBC_ENC_TEST_VECTORS 4
 #define AES_CBC_DEC_TEST_VECTORS 4
+#define HMAC_SHA1_AES_CBC_ENC_TEST_VECTORS 7
+#define HMAC_SHA256_AES_CBC_ENC_TEST_VECTORS 7
+#define HMAC_SHA512_AES_CBC_ENC_TEST_VECTORS 7
 #define AES_LRW_ENC_TEST_VECTORS 8
 #define AES_LRW_DEC_TEST_VECTORS 8
 #define AES_XTS_ENC_TEST_VECTORS 5
@@ -7232,6 +7235,837 @@ static struct cipher_testvec aes_cbc_dec_tv_template[] = {
        },
 };
 
+static struct aead_testvec hmac_sha1_aes_cbc_enc_tv_template[] = {
+       { /* RFC 3602 Case 1 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00"
+                         "\x06\xa9\x21\x40\x36\xb8\xa1\x5b"
+                         "\x51\x2e\x03\xd5\x34\x12\x00\x06",
+               .klen   = 8 + 20 + 16,
+               .iv     = "\x3d\xaf\xba\x42\x9d\x9e\xb4\x30"
+                         "\xb4\x22\xda\x80\x2c\x9f\xac\x41",
+               .input  = "Single block msg",
+               .ilen   = 16,
+               .result = "\xe3\x53\x77\x9c\x10\x79\xae\xb8"
+                         "\x27\x08\x94\x2d\xbe\x77\x18\x1a"
+                         "\x1b\x13\xcb\xaf\x89\x5e\xe1\x2c"
+                         "\x13\xc5\x2e\xa3\xcc\xed\xdc\xb5"
+                         "\x03\x71\xa2\x06",
+               .rlen   = 16 + 20,
+       }, { /* RFC 3602 Case 2 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x20\x21\x22\x23\x24\x25\x26\x27"
+                         "\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
+                         "\x30\x31\x32\x33"
+                         "\xc2\x86\x69\x6d\x88\x7c\x9a\xa0"
+                         "\x61\x1b\xbb\x3e\x20\x25\xa4\x5a",
+               .klen   = 8 + 20 + 16,
+               .iv     = "\x56\x2e\x17\x99\x6d\x09\x3d\x28"
+                         "\xdd\xb3\xba\x69\x5a\x2e\x6f\x58",
+               .input  = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+                         "\x10\x11\x12\x13\x14\x15\x16\x17"
+                         "\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f",
+               .ilen   = 32,
+               .result = "\xd2\x96\xcd\x94\xc2\xcc\xcf\x8a"
+                         "\x3a\x86\x30\x28\xb5\xe1\xdc\x0a"
+                         "\x75\x86\x60\x2d\x25\x3c\xff\xf9"
+                         "\x1b\x82\x66\xbe\xa6\xd6\x1a\xb1"
+                         "\xad\x9b\x4c\x5c\x85\xe1\xda\xae"
+                         "\xee\x81\x4e\xd7\xdb\x74\xcf\x58"
+                         "\x65\x39\xf8\xde",
+               .rlen   = 32 + 20,
+       }, { /* RFC 3602 Case 3 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55"
+                         "\x6c\x3e\xa0\x47\x76\x30\xce\x21"
+                         "\xa2\xce\x33\x4a\xa7\x46\xc2\xcd",
+               .klen   = 8 + 20 + 16,
+               .iv     = "\xc7\x82\xdc\x4c\x09\x8c\x66\xcb"
+                         "\xd9\xcd\x27\xd8\x25\x68\x2c\x81",
+               .input  = "This is a 48-byte message (exactly 3 AES blocks)",
+               .ilen   = 48,
+               .result = "\xd0\xa0\x2b\x38\x36\x45\x17\x53"
+                         "\xd4\x93\x66\x5d\x33\xf0\xe8\x86"
+                         "\x2d\xea\x54\xcd\xb2\x93\xab\xc7"
+                         "\x50\x69\x39\x27\x67\x72\xf8\xd5"
+                         "\x02\x1c\x19\x21\x6b\xad\x52\x5c"
+                         "\x85\x79\x69\x5d\x83\xba\x26\x84"
+                         "\xc2\xec\x0c\xf8\x7f\x05\xba\xca"
+                         "\xff\xee\x4c\xd0\x93\xe6\x36\x7f"
+                         "\x8d\x62\xf2\x1e",
+               .rlen   = 48 + 20,
+       }, { /* RFC 3602 Case 4 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55"
+                         "\x56\xe4\x7a\x38\xc5\x59\x89\x74"
+                         "\xbc\x46\x90\x3d\xba\x29\x03\x49",
+               .klen   = 8 + 20 + 16,
+               .iv     = "\x8c\xe8\x2e\xef\xbe\xa0\xda\x3c"
+                         "\x44\x69\x9e\xd7\xdb\x51\xb7\xd9",
+               .input  = "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7"
+                         "\xa8\xa9\xaa\xab\xac\xad\xae\xaf"
+                         "\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7"
+                         "\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf"
+                         "\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7"
+                         "\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf"
+                         "\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7"
+                         "\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf",
+               .ilen   = 64,
+               .result = "\xc3\x0e\x32\xff\xed\xc0\x77\x4e"
+                         "\x6a\xff\x6a\xf0\x86\x9f\x71\xaa"
+                         "\x0f\x3a\xf0\x7a\x9a\x31\xa9\xc6"
+                         "\x84\xdb\x20\x7e\xb0\xef\x8e\x4e"
+                         "\x35\x90\x7a\xa6\x32\xc3\xff\xdf"
+                         "\x86\x8b\xb7\xb2\x9d\x3d\x46\xad"
+                         "\x83\xce\x9f\x9a\x10\x2e\xe9\x9d"
+                         "\x49\xa5\x3e\x87\xf4\xc3\xda\x55"
+                         "\x1c\x45\x57\xa9\x56\xcb\xa9\x2d"
+                         "\x18\xac\xf1\xc7\x5d\xd1\xcd\x0d"
+                         "\x1d\xbe\xc6\xe9",
+               .rlen   = 64 + 20,
+       }, { /* RFC 3602 Case 5 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55"
+                         "\x90\xd3\x82\xb4\x10\xee\xba\x7a"
+                         "\xd9\x38\xc4\x6c\xec\x1a\x82\xbf",
+               .klen   = 8 + 20 + 16,
+               .iv     = "\xe9\x6e\x8c\x08\xab\x46\x57\x63"
+                         "\xfd\x09\x8d\x45\xdd\x3f\xf8\x93",
+               .assoc  = "\x00\x00\x43\x21\x00\x00\x00\x01",
+               .alen   = 8,
+               .input  = "\x08\x00\x0e\xbd\xa7\x0a\x00\x00"
+                         "\x8e\x9c\x08\x3d\xb9\x5b\x07\x00"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+                         "\x10\x11\x12\x13\x14\x15\x16\x17"
+                         "\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f"
+                         "\x20\x21\x22\x23\x24\x25\x26\x27"
+                         "\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
+                         "\x30\x31\x32\x33\x34\x35\x36\x37"
+                         "\x01\x02\x03\x04\x05\x06\x07\x08"
+                         "\x09\x0a\x0b\x0c\x0d\x0e\x0e\x01",
+               .ilen   = 80,
+               .result = "\xf6\x63\xc2\x5d\x32\x5c\x18\xc6"
+                         "\xa9\x45\x3e\x19\x4e\x12\x08\x49"
+                         "\xa4\x87\x0b\x66\xcc\x6b\x99\x65"
+                         "\x33\x00\x13\xb4\x89\x8d\xc8\x56"
+                         "\xa4\x69\x9e\x52\x3a\x55\xdb\x08"
+                         "\x0b\x59\xec\x3a\x8e\x4b\x7e\x52"
+                         "\x77\x5b\x07\xd1\xdb\x34\xed\x9c"
+                         "\x53\x8a\xb5\x0c\x55\x1b\x87\x4a"
+                         "\xa2\x69\xad\xd0\x47\xad\x2d\x59"
+                         "\x13\xac\x19\xb7\xcf\xba\xd4\xa6"
+                         "\x58\xc6\x84\x75\xe4\xe9\x6b\x0c"
+                         "\xe1\xc5\x0b\x73\x4d\x82\x55\xa8"
+                         "\x85\xe1\x59\xf7",
+               .rlen   = 80 + 20,
+       }, { /* NIST SP800-38A F.2.3 CBC-AES192.Encrypt */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x18"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55"
+                         "\x8e\x73\xb0\xf7\xda\x0e\x64\x52"
+                         "\xc8\x10\xf3\x2b\x80\x90\x79\xe5"
+                         "\x62\xf8\xea\xd2\x52\x2c\x6b\x7b",
+               .klen   = 8 + 20 + 24,
+               .iv     = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
+               .input  = "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96"
+                         "\xe9\x3d\x7e\x11\x73\x93\x17\x2a"
+                         "\xae\x2d\x8a\x57\x1e\x03\xac\x9c"
+                         "\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"
+                         "\x30\xc8\x1c\x46\xa3\x5c\xe4\x11"
+                         "\xe5\xfb\xc1\x19\x1a\x0a\x52\xef"
+                         "\xf6\x9f\x24\x45\xdf\x4f\x9b\x17"
+                         "\xad\x2b\x41\x7b\xe6\x6c\x37\x10",
+               .ilen   = 64,
+               .result = "\x4f\x02\x1d\xb2\x43\xbc\x63\x3d"
+                         "\x71\x78\x18\x3a\x9f\xa0\x71\xe8"
+                         "\xb4\xd9\xad\xa9\xad\x7d\xed\xf4"
+                         "\xe5\xe7\x38\x76\x3f\x69\x14\x5a"
+                         "\x57\x1b\x24\x20\x12\xfb\x7a\xe0"
+                         "\x7f\xa9\xba\xac\x3d\xf1\x02\xe0"
+                         "\x08\xb0\xe2\x79\x88\x59\x88\x81"
+                         "\xd9\x20\xa9\xe6\x4f\x56\x15\xcd"
+                         "\x73\xe3\x19\x3f\x8b\xc9\xc6\xf4"
+                         "\x5a\xf1\x5b\xa8\x98\x07\xc5\x36"
+                         "\x47\x4c\xfc\x36",
+               .rlen   = 64 + 20,
+       }, { /* NIST SP800-38A F.2.5 CBC-AES256.Encrypt */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x20"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55"
+                         "\x60\x3d\xeb\x10\x15\xca\x71\xbe"
+                         "\x2b\x73\xae\xf0\x85\x7d\x77\x81"
+                         "\x1f\x35\x2c\x07\x3b\x61\x08\xd7"
+                         "\x2d\x98\x10\xa3\x09\x14\xdf\xf4",
+               .klen   = 8 + 20 + 32,
+               .iv     = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
+               .input  = "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96"
+                         "\xe9\x3d\x7e\x11\x73\x93\x17\x2a"
+                         "\xae\x2d\x8a\x57\x1e\x03\xac\x9c"
+                         "\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"
+                         "\x30\xc8\x1c\x46\xa3\x5c\xe4\x11"
+                         "\xe5\xfb\xc1\x19\x1a\x0a\x52\xef"
+                         "\xf6\x9f\x24\x45\xdf\x4f\x9b\x17"
+                         "\xad\x2b\x41\x7b\xe6\x6c\x37\x10",
+               .ilen   = 64,
+               .result = "\xf5\x8c\x4c\x04\xd6\xe5\xf1\xba"
+                         "\x77\x9e\xab\xfb\x5f\x7b\xfb\xd6"
+                         "\x9c\xfc\x4e\x96\x7e\xdb\x80\x8d"
+                         "\x67\x9f\x77\x7b\xc6\x70\x2c\x7d"
+                         "\x39\xf2\x33\x69\xa9\xd9\xba\xcf"
+                         "\xa5\x30\xe2\x63\x04\x23\x14\x61"
+                         "\xb2\xeb\x05\xe2\xc3\x9b\xe9\xfc"
+                         "\xda\x6c\x19\x07\x8c\x6a\x9d\x1b"
+                         "\xa3\xe8\x9b\x17\xe3\xf4\x7f\xde"
+                         "\x1b\x9f\xc6\x81\x26\x43\x4a\x87"
+                         "\x51\xee\xd6\x4e",
+               .rlen   = 64 + 20,
+       },
+};
+
+static struct aead_testvec hmac_sha256_aes_cbc_enc_tv_template[] = {
+       { /* RFC 3602 Case 1 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x06\xa9\x21\x40\x36\xb8\xa1\x5b"
+                         "\x51\x2e\x03\xd5\x34\x12\x00\x06",
+               .klen   = 8 + 32 + 16,
+               .iv     = "\x3d\xaf\xba\x42\x9d\x9e\xb4\x30"
+                         "\xb4\x22\xda\x80\x2c\x9f\xac\x41",
+               .input  = "Single block msg",
+               .ilen   = 16,
+               .result = "\xe3\x53\x77\x9c\x10\x79\xae\xb8"
+                         "\x27\x08\x94\x2d\xbe\x77\x18\x1a"
+                         "\xcc\xde\x2d\x6a\xae\xf1\x0b\xcc"
+                         "\x38\x06\x38\x51\xb4\xb8\xf3\x5b"
+                         "\x5c\x34\xa6\xa3\x6e\x0b\x05\xe5"
+                         "\x6a\x6d\x44\xaa\x26\xa8\x44\xa5",
+               .rlen   = 16 + 32,
+       }, { /* RFC 3602 Case 2 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x20\x21\x22\x23\x24\x25\x26\x27"
+                         "\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
+                         "\x30\x31\x32\x33\x34\x35\x36\x37"
+                         "\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f"
+                         "\xc2\x86\x69\x6d\x88\x7c\x9a\xa0"
+                         "\x61\x1b\xbb\x3e\x20\x25\xa4\x5a",
+               .klen   = 8 + 32 + 16,
+               .iv     = "\x56\x2e\x17\x99\x6d\x09\x3d\x28"
+                         "\xdd\xb3\xba\x69\x5a\x2e\x6f\x58",
+               .input  = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+                         "\x10\x11\x12\x13\x14\x15\x16\x17"
+                         "\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f",
+               .ilen   = 32,
+               .result = "\xd2\x96\xcd\x94\xc2\xcc\xcf\x8a"
+                         "\x3a\x86\x30\x28\xb5\xe1\xdc\x0a"
+                         "\x75\x86\x60\x2d\x25\x3c\xff\xf9"
+                         "\x1b\x82\x66\xbe\xa6\xd6\x1a\xb1"
+                         "\xf5\x33\x53\xf3\x68\x85\x2a\x99"
+                         "\x0e\x06\x58\x8f\xba\xf6\x06\xda"
+                         "\x49\x69\x0d\x5b\xd4\x36\x06\x62"
+                         "\x35\x5e\x54\x58\x53\x4d\xdf\xbf",
+               .rlen   = 32 + 32,
+       }, { /* RFC 3602 Case 3 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x6c\x3e\xa0\x47\x76\x30\xce\x21"
+                         "\xa2\xce\x33\x4a\xa7\x46\xc2\xcd",
+               .klen   = 8 + 32 + 16,
+               .iv     = "\xc7\x82\xdc\x4c\x09\x8c\x66\xcb"
+                         "\xd9\xcd\x27\xd8\x25\x68\x2c\x81",
+               .input  = "This is a 48-byte message (exactly 3 AES blocks)",
+               .ilen   = 48,
+               .result = "\xd0\xa0\x2b\x38\x36\x45\x17\x53"
+                         "\xd4\x93\x66\x5d\x33\xf0\xe8\x86"
+                         "\x2d\xea\x54\xcd\xb2\x93\xab\xc7"
+                         "\x50\x69\x39\x27\x67\x72\xf8\xd5"
+                         "\x02\x1c\x19\x21\x6b\xad\x52\x5c"
+                         "\x85\x79\x69\x5d\x83\xba\x26\x84"
+                         "\x68\xb9\x3e\x90\x38\xa0\x88\x01"
+                         "\xe7\xc6\xce\x10\x31\x2f\x9b\x1d"
+                         "\x24\x78\xfb\xbe\x02\xe0\x4f\x40"
+                         "\x10\xbd\xaa\xc6\xa7\x79\xe0\x1a",
+               .rlen   = 48 + 32,
+       }, { /* RFC 3602 Case 4 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x56\xe4\x7a\x38\xc5\x59\x89\x74"
+                         "\xbc\x46\x90\x3d\xba\x29\x03\x49",
+               .klen   = 8 + 32 + 16,
+               .iv     = "\x8c\xe8\x2e\xef\xbe\xa0\xda\x3c"
+                         "\x44\x69\x9e\xd7\xdb\x51\xb7\xd9",
+               .input  = "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7"
+                         "\xa8\xa9\xaa\xab\xac\xad\xae\xaf"
+                         "\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7"
+                         "\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf"
+                         "\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7"
+                         "\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf"
+                         "\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7"
+                         "\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf",
+               .ilen   = 64,
+               .result = "\xc3\x0e\x32\xff\xed\xc0\x77\x4e"
+                         "\x6a\xff\x6a\xf0\x86\x9f\x71\xaa"
+                         "\x0f\x3a\xf0\x7a\x9a\x31\xa9\xc6"
+                         "\x84\xdb\x20\x7e\xb0\xef\x8e\x4e"
+                         "\x35\x90\x7a\xa6\x32\xc3\xff\xdf"
+                         "\x86\x8b\xb7\xb2\x9d\x3d\x46\xad"
+                         "\x83\xce\x9f\x9a\x10\x2e\xe9\x9d"
+                         "\x49\xa5\x3e\x87\xf4\xc3\xda\x55"
+                         "\x7a\x1b\xd4\x3c\xdb\x17\x95\xe2"
+                         "\xe0\x93\xec\xc9\x9f\xf7\xce\xd8"
+                         "\x3f\x54\xe2\x49\x39\xe3\x71\x25"
+                         "\x2b\x6c\xe9\x5d\xec\xec\x2b\x64",
+               .rlen   = 64 + 32,
+       }, { /* RFC 3602 Case 5 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x90\xd3\x82\xb4\x10\xee\xba\x7a"
+                         "\xd9\x38\xc4\x6c\xec\x1a\x82\xbf",
+               .klen   = 8 + 32 + 16,
+               .iv     = "\xe9\x6e\x8c\x08\xab\x46\x57\x63"
+                         "\xfd\x09\x8d\x45\xdd\x3f\xf8\x93",
+               .assoc  = "\x00\x00\x43\x21\x00\x00\x00\x01",
+               .alen   = 8,
+               .input  = "\x08\x00\x0e\xbd\xa7\x0a\x00\x00"
+                         "\x8e\x9c\x08\x3d\xb9\x5b\x07\x00"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+                         "\x10\x11\x12\x13\x14\x15\x16\x17"
+                         "\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f"
+                         "\x20\x21\x22\x23\x24\x25\x26\x27"
+                         "\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
+                         "\x30\x31\x32\x33\x34\x35\x36\x37"
+                         "\x01\x02\x03\x04\x05\x06\x07\x08"
+                         "\x09\x0a\x0b\x0c\x0d\x0e\x0e\x01",
+               .ilen   = 80,
+               .result = "\xf6\x63\xc2\x5d\x32\x5c\x18\xc6"
+                         "\xa9\x45\x3e\x19\x4e\x12\x08\x49"
+                         "\xa4\x87\x0b\x66\xcc\x6b\x99\x65"
+                         "\x33\x00\x13\xb4\x89\x8d\xc8\x56"
+                         "\xa4\x69\x9e\x52\x3a\x55\xdb\x08"
+                         "\x0b\x59\xec\x3a\x8e\x4b\x7e\x52"
+                         "\x77\x5b\x07\xd1\xdb\x34\xed\x9c"
+                         "\x53\x8a\xb5\x0c\x55\x1b\x87\x4a"
+                         "\xa2\x69\xad\xd0\x47\xad\x2d\x59"
+                         "\x13\xac\x19\xb7\xcf\xba\xd4\xa6"
+                         "\xbb\xd4\x0f\xbe\xa3\x3b\x4c\xb8"
+                         "\x3a\xd2\xe1\x03\x86\xa5\x59\xb7"
+                         "\x73\xc3\x46\x20\x2c\xb1\xef\x68"
+                         "\xbb\x8a\x32\x7e\x12\x8c\x69\xcf",
+               .rlen   = 80 + 32,
+       }, { /* NIST SP800-38A F.2.3 CBC-AES192.Encrypt */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x18"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x8e\x73\xb0\xf7\xda\x0e\x64\x52"
+                         "\xc8\x10\xf3\x2b\x80\x90\x79\xe5"
+                         "\x62\xf8\xea\xd2\x52\x2c\x6b\x7b",
+               .klen   = 8 + 32 + 24,
+               .iv     = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
+               .input  = "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96"
+                         "\xe9\x3d\x7e\x11\x73\x93\x17\x2a"
+                         "\xae\x2d\x8a\x57\x1e\x03\xac\x9c"
+                         "\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"
+                         "\x30\xc8\x1c\x46\xa3\x5c\xe4\x11"
+                         "\xe5\xfb\xc1\x19\x1a\x0a\x52\xef"
+                         "\xf6\x9f\x24\x45\xdf\x4f\x9b\x17"
+                         "\xad\x2b\x41\x7b\xe6\x6c\x37\x10",
+               .ilen   = 64,
+               .result = "\x4f\x02\x1d\xb2\x43\xbc\x63\x3d"
+                         "\x71\x78\x18\x3a\x9f\xa0\x71\xe8"
+                         "\xb4\xd9\xad\xa9\xad\x7d\xed\xf4"
+                         "\xe5\xe7\x38\x76\x3f\x69\x14\x5a"
+                         "\x57\x1b\x24\x20\x12\xfb\x7a\xe0"
+                         "\x7f\xa9\xba\xac\x3d\xf1\x02\xe0"
+                         "\x08\xb0\xe2\x79\x88\x59\x88\x81"
+                         "\xd9\x20\xa9\xe6\x4f\x56\x15\xcd"
+                         "\x2f\xee\x5f\xdb\x66\xfe\x79\x09"
+                         "\x61\x81\x31\xea\x5b\x3d\x8e\xfb"
+                         "\xca\x71\x85\x93\xf7\x85\x55\x8b"
+                         "\x7a\xe4\x94\xca\x8b\xba\x19\x33",
+               .rlen   = 64 + 32,
+       }, { /* NIST SP800-38A F.2.5 CBC-AES256.Encrypt */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x20"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x60\x3d\xeb\x10\x15\xca\x71\xbe"
+                         "\x2b\x73\xae\xf0\x85\x7d\x77\x81"
+                         "\x1f\x35\x2c\x07\x3b\x61\x08\xd7"
+                         "\x2d\x98\x10\xa3\x09\x14\xdf\xf4",
+               .klen   = 8 + 32 + 32,
+               .iv     = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
+               .input  = "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96"
+                         "\xe9\x3d\x7e\x11\x73\x93\x17\x2a"
+                         "\xae\x2d\x8a\x57\x1e\x03\xac\x9c"
+                         "\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"
+                         "\x30\xc8\x1c\x46\xa3\x5c\xe4\x11"
+                         "\xe5\xfb\xc1\x19\x1a\x0a\x52\xef"
+                         "\xf6\x9f\x24\x45\xdf\x4f\x9b\x17"
+                         "\xad\x2b\x41\x7b\xe6\x6c\x37\x10",
+               .ilen   = 64,
+               .result = "\xf5\x8c\x4c\x04\xd6\xe5\xf1\xba"
+                         "\x77\x9e\xab\xfb\x5f\x7b\xfb\xd6"
+                         "\x9c\xfc\x4e\x96\x7e\xdb\x80\x8d"
+                         "\x67\x9f\x77\x7b\xc6\x70\x2c\x7d"
+                         "\x39\xf2\x33\x69\xa9\xd9\xba\xcf"
+                         "\xa5\x30\xe2\x63\x04\x23\x14\x61"
+                         "\xb2\xeb\x05\xe2\xc3\x9b\xe9\xfc"
+                         "\xda\x6c\x19\x07\x8c\x6a\x9d\x1b"
+                         "\x24\x29\xed\xc2\x31\x49\xdb\xb1"
+                         "\x8f\x74\xbd\x17\x92\x03\xbe\x8f"
+                         "\xf3\x61\xde\x1c\xe9\xdb\xcd\xd0"
+                         "\xcc\xce\xe9\x85\x57\xcf\x6f\x5f",
+               .rlen   = 64 + 32,
+       },
+};
+
+static struct aead_testvec hmac_sha512_aes_cbc_enc_tv_template[] = {
+       { /* RFC 3602 Case 1 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x00\x00\x00\x00\x00\x00\x00\x00"
+                         "\x06\xa9\x21\x40\x36\xb8\xa1\x5b"
+                         "\x51\x2e\x03\xd5\x34\x12\x00\x06",
+               .klen   = 8 + 64 + 16,
+               .iv     = "\x3d\xaf\xba\x42\x9d\x9e\xb4\x30"
+                         "\xb4\x22\xda\x80\x2c\x9f\xac\x41",
+               .input  = "Single block msg",
+               .ilen   = 16,
+               .result = "\xe3\x53\x77\x9c\x10\x79\xae\xb8"
+                         "\x27\x08\x94\x2d\xbe\x77\x18\x1a"
+                         "\x3f\xdc\xad\x90\x03\x63\x5e\x68"
+                         "\xc3\x13\xdd\xa4\x5c\x4d\x54\xa7"
+                         "\x19\x6e\x03\x75\x2b\xa1\x62\xce"
+                         "\xe0\xc6\x96\x75\xb2\x14\xca\x96"
+                         "\xec\xbd\x50\x08\x07\x64\x1a\x49"
+                         "\xe8\x9a\x7c\x06\x3d\xcb\xff\xb2"
+                         "\xfa\x20\x89\xdd\x9c\xac\x9e\x16"
+                         "\x18\x8a\xa0\x6d\x01\x6c\xa3\x3a",
+               .rlen   = 16 + 64,
+       }, { /* RFC 3602 Case 2 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x20\x21\x22\x23\x24\x25\x26\x27"
+                         "\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
+                         "\x30\x31\x32\x33\x34\x35\x36\x37"
+                         "\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f"
+                         "\x40\x41\x42\x43\x44\x45\x46\x47"
+                         "\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f"
+                         "\x50\x51\x52\x53\x54\x55\x56\x57"
+                         "\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f"
+                         "\xc2\x86\x69\x6d\x88\x7c\x9a\xa0"
+                         "\x61\x1b\xbb\x3e\x20\x25\xa4\x5a",
+               .klen   = 8 + 64 + 16,
+               .iv     = "\x56\x2e\x17\x99\x6d\x09\x3d\x28"
+                         "\xdd\xb3\xba\x69\x5a\x2e\x6f\x58",
+               .input  = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+                         "\x10\x11\x12\x13\x14\x15\x16\x17"
+                         "\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f",
+               .ilen   = 32,
+               .result = "\xd2\x96\xcd\x94\xc2\xcc\xcf\x8a"
+                         "\x3a\x86\x30\x28\xb5\xe1\xdc\x0a"
+                         "\x75\x86\x60\x2d\x25\x3c\xff\xf9"
+                         "\x1b\x82\x66\xbe\xa6\xd6\x1a\xb1"
+                         "\xda\xb2\x0c\xb2\x26\xc4\xd5\xef"
+                         "\x60\x38\xa4\x5e\x9a\x8c\x1b\x41"
+                         "\x03\x9f\xc4\x64\x7f\x01\x42\x9b"
+                         "\x0e\x1b\xea\xef\xbc\x88\x19\x5e"
+                         "\x31\x7e\xc2\x95\xfc\x09\x32\x0a"
+                         "\x46\x32\x7c\x41\x9c\x59\x3e\xe9"
+                         "\x8f\x9f\xd4\x31\xd6\x22\xbd\xf8"
+                         "\xf7\x0a\x94\xe5\xa9\xc3\xf6\x9d",
+               .rlen   = 32 + 64,
+       }, { /* RFC 3602 Case 3 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x33\x44\x55\x66\x77\x88\x99\xaa"
+                         "\xbb\xcc\xdd\xee\xff\x11\x22\x33"
+                         "\x44\x55\x66\x77\x88\x99\xaa\xbb"
+                         "\xcc\xdd\xee\xff\x11\x22\x33\x44"
+                         "\x6c\x3e\xa0\x47\x76\x30\xce\x21"
+                         "\xa2\xce\x33\x4a\xa7\x46\xc2\xcd",
+               .klen   = 8 + 64 + 16,
+               .iv     = "\xc7\x82\xdc\x4c\x09\x8c\x66\xcb"
+                         "\xd9\xcd\x27\xd8\x25\x68\x2c\x81",
+               .input  = "This is a 48-byte message (exactly 3 AES blocks)",
+               .ilen   = 48,
+               .result = "\xd0\xa0\x2b\x38\x36\x45\x17\x53"
+                         "\xd4\x93\x66\x5d\x33\xf0\xe8\x86"
+                         "\x2d\xea\x54\xcd\xb2\x93\xab\xc7"
+                         "\x50\x69\x39\x27\x67\x72\xf8\xd5"
+                         "\x02\x1c\x19\x21\x6b\xad\x52\x5c"
+                         "\x85\x79\x69\x5d\x83\xba\x26\x84"
+                         "\x64\x19\x17\x5b\x57\xe0\x21\x0f"
+                         "\xca\xdb\xa1\x26\x38\x14\xa2\x69"
+                         "\xdb\x54\x67\x80\xc0\x54\xe0\xfd"
+                         "\x3e\x91\xe7\x91\x7f\x13\x38\x44"
+                         "\xb7\xb1\xd6\xc8\x7d\x48\x8d\x41"
+                         "\x08\xea\x29\x6c\x74\x67\x3f\xb0"
+                         "\xac\x7f\x5c\x1d\xf5\xee\x22\x66"
+                         "\x27\xa6\xb6\x13\xba\xba\xf0\xc2",
+               .rlen   = 48 + 64,
+       }, { /* RFC 3602 Case 4 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x33\x44\x55\x66\x77\x88\x99\xaa"
+                         "\xbb\xcc\xdd\xee\xff\x11\x22\x33"
+                         "\x44\x55\x66\x77\x88\x99\xaa\xbb"
+                         "\xcc\xdd\xee\xff\x11\x22\x33\x44"
+                         "\x56\xe4\x7a\x38\xc5\x59\x89\x74"
+                         "\xbc\x46\x90\x3d\xba\x29\x03\x49",
+               .klen   = 8 + 64 + 16,
+               .iv     = "\x8c\xe8\x2e\xef\xbe\xa0\xda\x3c"
+                         "\x44\x69\x9e\xd7\xdb\x51\xb7\xd9",
+               .input  = "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7"
+                         "\xa8\xa9\xaa\xab\xac\xad\xae\xaf"
+                         "\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7"
+                         "\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf"
+                         "\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7"
+                         "\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf"
+                         "\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7"
+                         "\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf",
+               .ilen   = 64,
+               .result = "\xc3\x0e\x32\xff\xed\xc0\x77\x4e"
+                         "\x6a\xff\x6a\xf0\x86\x9f\x71\xaa"
+                         "\x0f\x3a\xf0\x7a\x9a\x31\xa9\xc6"
+                         "\x84\xdb\x20\x7e\xb0\xef\x8e\x4e"
+                         "\x35\x90\x7a\xa6\x32\xc3\xff\xdf"
+                         "\x86\x8b\xb7\xb2\x9d\x3d\x46\xad"
+                         "\x83\xce\x9f\x9a\x10\x2e\xe9\x9d"
+                         "\x49\xa5\x3e\x87\xf4\xc3\xda\x55"
+                         "\x82\xcd\x42\x28\x21\x20\x15\xcc"
+                         "\xb7\xb2\x48\x40\xc7\x64\x41\x3a"
+                         "\x61\x32\x82\x85\xcf\x27\xed\xb4"
+                         "\xe4\x68\xa2\xf5\x79\x26\x27\xb2"
+                         "\x51\x67\x6a\xc4\xf0\x66\x55\x50"
+                         "\xbc\x6f\xed\xd5\x8d\xde\x23\x7c"
+                         "\x62\x98\x14\xd7\x2f\x37\x8d\xdf"
+                         "\xf4\x33\x80\xeb\x8e\xb4\xa4\xda",
+               .rlen   = 64 + 64,
+       }, { /* RFC 3602 Case 5 */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x10"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x33\x44\x55\x66\x77\x88\x99\xaa"
+                         "\xbb\xcc\xdd\xee\xff\x11\x22\x33"
+                         "\x44\x55\x66\x77\x88\x99\xaa\xbb"
+                         "\xcc\xdd\xee\xff\x11\x22\x33\x44"
+                         "\x90\xd3\x82\xb4\x10\xee\xba\x7a"
+                         "\xd9\x38\xc4\x6c\xec\x1a\x82\xbf",
+               .klen   = 8 + 64 + 16,
+               .iv     = "\xe9\x6e\x8c\x08\xab\x46\x57\x63"
+                         "\xfd\x09\x8d\x45\xdd\x3f\xf8\x93",
+               .assoc  = "\x00\x00\x43\x21\x00\x00\x00\x01",
+               .alen   = 8,
+               .input  = "\x08\x00\x0e\xbd\xa7\x0a\x00\x00"
+                         "\x8e\x9c\x08\x3d\xb9\x5b\x07\x00"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+                         "\x10\x11\x12\x13\x14\x15\x16\x17"
+                         "\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f"
+                         "\x20\x21\x22\x23\x24\x25\x26\x27"
+                         "\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
+                         "\x30\x31\x32\x33\x34\x35\x36\x37"
+                         "\x01\x02\x03\x04\x05\x06\x07\x08"
+                         "\x09\x0a\x0b\x0c\x0d\x0e\x0e\x01",
+               .ilen   = 80,
+               .result = "\xf6\x63\xc2\x5d\x32\x5c\x18\xc6"
+                         "\xa9\x45\x3e\x19\x4e\x12\x08\x49"
+                         "\xa4\x87\x0b\x66\xcc\x6b\x99\x65"
+                         "\x33\x00\x13\xb4\x89\x8d\xc8\x56"
+                         "\xa4\x69\x9e\x52\x3a\x55\xdb\x08"
+                         "\x0b\x59\xec\x3a\x8e\x4b\x7e\x52"
+                         "\x77\x5b\x07\xd1\xdb\x34\xed\x9c"
+                         "\x53\x8a\xb5\x0c\x55\x1b\x87\x4a"
+                         "\xa2\x69\xad\xd0\x47\xad\x2d\x59"
+                         "\x13\xac\x19\xb7\xcf\xba\xd4\xa6"
+                         "\x74\x84\x94\xe2\xd7\x7a\xf9\xbf"
+                         "\x00\x8a\xa2\xd5\xb7\xf3\x60\xcf"
+                         "\xa0\x47\xdf\x4e\x09\xf4\xb1\x7f"
+                         "\x14\xd9\x3d\x53\x8e\x12\xb3\x00"
+                         "\x4c\x0a\x4e\x32\x40\x43\x88\xce"
+                         "\x92\x26\xc1\x76\x20\x11\xeb\xba"
+                         "\x62\x4f\x9a\x62\x25\xc3\x75\x80"
+                         "\xb7\x0a\x17\xf5\xd7\x94\xb4\x14",
+               .rlen   = 80 + 64,
+       }, { /* NIST SP800-38A F.2.3 CBC-AES192.Encrypt */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x18"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x33\x44\x55\x66\x77\x88\x99\xaa"
+                         "\xbb\xcc\xdd\xee\xff\x11\x22\x33"
+                         "\x44\x55\x66\x77\x88\x99\xaa\xbb"
+                         "\xcc\xdd\xee\xff\x11\x22\x33\x44"
+                         "\x8e\x73\xb0\xf7\xda\x0e\x64\x52"
+                         "\xc8\x10\xf3\x2b\x80\x90\x79\xe5"
+                         "\x62\xf8\xea\xd2\x52\x2c\x6b\x7b",
+               .klen   = 8 + 64 + 24,
+               .iv     = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
+               .input  = "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96"
+                         "\xe9\x3d\x7e\x11\x73\x93\x17\x2a"
+                         "\xae\x2d\x8a\x57\x1e\x03\xac\x9c"
+                         "\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"
+                         "\x30\xc8\x1c\x46\xa3\x5c\xe4\x11"
+                         "\xe5\xfb\xc1\x19\x1a\x0a\x52\xef"
+                         "\xf6\x9f\x24\x45\xdf\x4f\x9b\x17"
+                         "\xad\x2b\x41\x7b\xe6\x6c\x37\x10",
+               .ilen   = 64,
+               .result = "\x4f\x02\x1d\xb2\x43\xbc\x63\x3d"
+                         "\x71\x78\x18\x3a\x9f\xa0\x71\xe8"
+                         "\xb4\xd9\xad\xa9\xad\x7d\xed\xf4"
+                         "\xe5\xe7\x38\x76\x3f\x69\x14\x5a"
+                         "\x57\x1b\x24\x20\x12\xfb\x7a\xe0"
+                         "\x7f\xa9\xba\xac\x3d\xf1\x02\xe0"
+                         "\x08\xb0\xe2\x79\x88\x59\x88\x81"
+                         "\xd9\x20\xa9\xe6\x4f\x56\x15\xcd"
+                         "\x77\x4b\x69\x9d\x3a\x0d\xb4\x99"
+                         "\x8f\xc6\x8e\x0e\x72\x58\xe3\x56"
+                         "\xbb\x21\xd2\x7d\x93\x11\x17\x91"
+                         "\xc4\x83\xfd\x0a\xea\x71\xfe\x77"
+                         "\xae\x6f\x0a\xa5\xf0\xcf\xe1\x35"
+                         "\xba\x03\xd5\x32\xfa\x5f\x41\x58"
+                         "\x8d\x43\x98\xa7\x94\x16\x07\x02"
+                         "\x0f\xb6\x81\x50\x28\x95\x2e\x75",
+               .rlen   = 64 + 64,
+       }, { /* NIST SP800-38A F.2.5 CBC-AES256.Encrypt */
+#ifdef __LITTLE_ENDIAN
+               .key    = "\x08\x00"            /* rta length */
+                         "\x01\x00"            /* rta type */
+#else
+               .key    = "\x00\x08"            /* rta length */
+                         "\x00\x01"            /* rta type */
+#endif
+                         "\x00\x00\x00\x20"    /* enc key length */
+                         "\x11\x22\x33\x44\x55\x66\x77\x88"
+                         "\x99\xaa\xbb\xcc\xdd\xee\xff\x11"
+                         "\x22\x33\x44\x55\x66\x77\x88\x99"
+                         "\xaa\xbb\xcc\xdd\xee\xff\x11\x22"
+                         "\x33\x44\x55\x66\x77\x88\x99\xaa"
+                         "\xbb\xcc\xdd\xee\xff\x11\x22\x33"
+                         "\x44\x55\x66\x77\x88\x99\xaa\xbb"
+                         "\xcc\xdd\xee\xff\x11\x22\x33\x44"
+                         "\x60\x3d\xeb\x10\x15\xca\x71\xbe"
+                         "\x2b\x73\xae\xf0\x85\x7d\x77\x81"
+                         "\x1f\x35\x2c\x07\x3b\x61\x08\xd7"
+                         "\x2d\x98\x10\xa3\x09\x14\xdf\xf4",
+               .klen   = 8 + 64 + 32,
+               .iv     = "\x00\x01\x02\x03\x04\x05\x06\x07"
+                         "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
+               .input  = "\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96"
+                         "\xe9\x3d\x7e\x11\x73\x93\x17\x2a"
+                         "\xae\x2d\x8a\x57\x1e\x03\xac\x9c"
+                         "\x9e\xb7\x6f\xac\x45\xaf\x8e\x51"
+                         "\x30\xc8\x1c\x46\xa3\x5c\xe4\x11"
+                         "\xe5\xfb\xc1\x19\x1a\x0a\x52\xef"
+                         "\xf6\x9f\x24\x45\xdf\x4f\x9b\x17"
+                         "\xad\x2b\x41\x7b\xe6\x6c\x37\x10",
+               .ilen   = 64,
+               .result = "\xf5\x8c\x4c\x04\xd6\xe5\xf1\xba"
+                         "\x77\x9e\xab\xfb\x5f\x7b\xfb\xd6"
+                         "\x9c\xfc\x4e\x96\x7e\xdb\x80\x8d"
+                         "\x67\x9f\x77\x7b\xc6\x70\x2c\x7d"
+                         "\x39\xf2\x33\x69\xa9\xd9\xba\xcf"
+                         "\xa5\x30\xe2\x63\x04\x23\x14\x61"
+                         "\xb2\xeb\x05\xe2\xc3\x9b\xe9\xfc"
+                         "\xda\x6c\x19\x07\x8c\x6a\x9d\x1b"
+                         "\xb2\x27\x69\x7f\x45\x64\x79\x2b"
+                         "\xb7\xb8\x4c\xd4\x75\x94\x68\x40"
+                         "\x2a\xea\x91\xc7\x3f\x7c\xed\x7b"
+                         "\x95\x2c\x9b\xa8\xf5\xe5\x52\x8d"
+                         "\x6b\xe1\xae\xf1\x74\xfa\x0d\x0c"
+                         "\xe3\x8d\x64\xc3\x8d\xff\x7c\x8c"
+                         "\xdb\xbf\xa0\xb4\x01\xa2\xa8\xa2"
+                         "\x2c\xb1\x62\x2c\x10\xca\xf1\x21",
+               .rlen   = 64 + 64,
+       },
+};
+
 static struct cipher_testvec aes_lrw_enc_tv_template[] = {
        /* from http://grouper.ieee.org/groups/1619/email/pdf00017.pdf */
        { /* LRW-32-AES 1 */