aes-ffx-vectors.txt

AES FFX Test Vector Data, version 1.0

Profile:  FFX[radix]
Test data generated by Voltage Security, June 2011.

AES-128 key for all test vectors: 2b7e151628aed2a6abf7158809cf4f3c

Test vector 1:

  Radix = 10
  Input (length = 10): "0123456789"
  Tweak (length = 10): "9876543210"

  Encrypted: "6124200773"

  Intermediate values:

  P = [ 1, 2, 1, 0, 0, 10, 5, 0, 0, 0, 10, 0, 0, 0, 10 ]

  Round 0:
    B_0 = "56789"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 0, 0, 231, 223 ]
    CBC_MAC = [ 178, 23, 94, 227, 235, 107, 241, 88, 255, 225, 124, 35, 113, 229, 204, 19 ]
    F_out = "24728"
    L = "56789", R = "25962"

  Round 1:
    B_1 = "25962"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 1, 0, 101, 106 ]
    CBC_MAC = [ 51, 190, 249, 61, 4, 109, 120, 103, 51, 255, 70, 97, 20, 140, 87, 153 ]
    F_out = "53767"
    L = "25962", R = "10556"

  Round 2:
    B_2 = "10556"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 2, 0, 41, 60 ]
    CBC_MAC = [ 46, 119, 157, 146, 150, 130, 241, 192, 111, 134, 229, 160, 201, 157, 218, 98 ]
    F_out = "03136"
    L = "10556", R = "29098"

  Round 3:
    B_3 = "29098"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 3, 0, 113, 170 ]
    CBC_MAC = [ 174, 123, 224, 87, 184, 248, 56, 84, 44, 10, 27, 227, 157, 233, 178, 91 ]
    F_out = "23220"
    L = "29098", R = "33776"

  Round 4:
    B_4 = "33776"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 4, 0, 131, 240 ]
    CBC_MAC = [ 143, 241, 191, 84, 85, 109, 85, 62, 98, 142, 122, 217, 177, 208, 239, 4 ]
    F_out = "49630"
    L = "33776", R = "78728"

  Round 5:
    B_5 = "78728"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 5, 1, 51, 136 ]
    CBC_MAC = [ 38, 71, 126, 189, 186, 53, 31, 145, 238, 76, 86, 253, 112, 160, 174, 231 ]
    F_out = "80529"
    L = "78728", R = "14305"

  Round 6:
    B_6 = "14305"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 6, 0, 55, 225 ]
    CBC_MAC = [ 125, 75, 237, 158, 131, 55, 209, 9, 101, 197, 0, 121, 194, 2, 116, 132 ]
    F_out = "80169"
    L = "14305", R = "58897"

  Round 7:
    B_7 = "58897"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 7, 0, 230, 17 ]
    CBC_MAC = [ 242, 246, 229, 238, 234, 164, 97, 149, 226, 83, 116, 152, 51, 255, 35, 135 ]
    F_out = "00469"
    L = "58897", R = "14774"

  Round 8:
    B_8 = "14774"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 8, 0, 57, 182 ]
    CBC_MAC = [ 207, 0, 24, 102, 176, 164, 198, 169, 67, 219, 228, 100, 60, 109, 178, 131 ]
    F_out = "02345"
    L = "14774", R = "61242"

  Round 9:
    B_9 = "61242"
    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 9, 0, 239, 58 ]
    CBC_MAC = [ 242, 84, 227, 1, 12, 169, 217, 207, 48, 18, 229, 133, 12, 69, 210, 146 ]
    F_out = "85999"
    L = "61242", R = "00773"


Test vector 2:

  Radix = 10
  Input (length = 10): "0123456789"
  No Tweak

  Encrypted: "2433477484"

  Intermediate values:

  P = [ 1, 2, 1, 0, 0, 10, 10, 5, 0, 0, 0, 10, 0, 0, 0, 0 ]

  Round 0:
    B_0 = 56789
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 221, 213 ]
    CBC-MAC = [ 195, 184, 41, 161, 232, 100, 43, 120, 204, 41, 148, 123, 59, 147, 219, 99 ]
    F_out = 60536
    L = 56789, R = 61770

  Round 1:
    B_1 = 61770
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 241, 74 ]
    CBC-MAC = [ 121, 100, 61, 158, 221, 250, 131, 16, 72, 2, 224, 89, 189, 220, 199, 44 ]
    F_out = 55248
    L = 61770, R = 12037

  Round 2:
    B_2 = 12037
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 47, 5 ]
    CBC-MAC = [ 9, 132, 75, 58, 46, 151, 10, 51, 165, 69, 95, 100, 199, 67, 56, 77 ]
    F_out = 94867
    L = 12037, R = 56637

  Round 3:
    B_3 = 56637
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 0, 221, 61 ]
    CBC-MAC = [ 125, 29, 160, 178, 41, 158, 148, 66, 104, 179, 136, 46, 59, 198, 72, 57 ]
    F_out = 82370
    L = 56637, R = 94407

  Round 4:
    B_4 = 94407
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 4, 1, 112, 199 ]
    CBC-MAC = [ 67, 122, 82, 147, 218, 251, 246, 239, 143, 18, 111, 55, 229, 180, 6, 114 ]
    F_out = 87727
    L = 94407, R = 44364

  Round 5:
    B_5 = 44364
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 5, 0, 173, 76 ]
    CBC-MAC = [ 216, 186, 138, 193, 244, 52, 17, 22, 8, 188, 121, 95, 62, 150, 28, 18 ]
    F_out = 90358
    L = 44364, R = 84765

  Round 6:
    B_6 = 84765
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 6, 1, 75, 29 ]
    CBC-MAC = [ 190, 15, 19, 163, 157, 41, 253, 232, 18, 10, 55, 166, 7, 219, 21, 192 ]
    F_out = 39560
    L = 84765, R = 83924

  Round 7:
    B_7 = 83924
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 7, 1, 71, 212 ]
    CBC-MAC = [ 79, 25, 29, 191, 153, 112, 242, 154, 155, 129, 202, 99, 245, 71, 41, 192 ]
    F_out = 48570
    L = 83924, R = 33335

  Round 8:
    B_8 = 33335
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 8, 0, 130, 55 ]
    CBC-MAC = [ 194, 52, 118, 117, 58, 50, 235, 26, 244, 207, 225, 21, 85, 189, 189, 27 ]
    F_out = 40410
    L = 33335, R = 24334

  Round 9:
    B_9 = 24334
    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 9, 0, 95, 14 ]
    CBC-MAC = [ 143, 196, 218, 77, 67, 14, 128, 21, 112, 172, 197, 74, 236, 154, 4, 243 ]
    F_out = 44149
    L = 24334, R = 77484


Test vector 3:

  Radix = 10
  Input (length = 6): "314159"
  Tweak (length = 10): "2718281828"

  Encrypted: "535005"

  Intermediate values:

  P = [ 1, 2, 1, 0, 0, 10, 10, 3, 0, 0, 0, 6, 0, 0, 0, 10 ]

  Round 0:
    B_0 = 159
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 0, 0, 159 ]
    CBC-MAC = [ 254, 119, 122, 10, 253, 83, 220, 199, 186, 120, 103, 231, 179, 152, 128, 213 ]
    F_out = 095
    L = 159, R = 409

  Round 1:
    B_1 = 409
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 1, 1, 153 ]
    CBC-MAC = [ 16, 218, 152, 198, 28, 31, 71, 59, 236, 130, 145, 205, 133, 209, 228, 19 ]
    F_out = 443
    L = 409, R = 602

  Round 2:
    B_2 = 602
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 2, 2, 90 ]
    CBC-MAC = [ 142, 37, 43, 59, 120, 121, 141, 127, 122, 175, 192, 117, 9, 116, 33, 27 ]
    F_out = 015
    L = 602, R = 424

  Round 3:
    B_3 = 424
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 3, 1, 168 ]
    CBC-MAC = [ 27, 117, 235, 118, 96, 156, 23, 239, 112, 3, 243, 87, 2, 205, 203, 238 ]
    F_out = 791
    L = 424, R = 393

  Round 4:
    B_4 = 393
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 4, 1, 137 ]
    CBC-MAC = [ 111, 92, 41, 248, 198, 224, 26, 28, 68, 240, 251, 186, 185, 168, 152, 207 ]
    F_out = 988
    L = 393, R = 412

  Round 5:
    B_5 = 412
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 5, 1, 156 ]
    CBC-MAC = [ 12, 114, 120, 133, 136, 103, 35, 245, 221, 72, 50, 62, 141, 37, 19, 77 ]
    F_out = 293
    L = 412, R = 686

  Round 6:
    B_6 = 686
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 6, 2, 174 ]
    CBC-MAC = [ 37, 201, 185, 194, 254, 210, 60, 83, 63, 39, 218, 199, 88, 37, 55, 36 ]
    F_out = 339
    L = 686, R = 751

  Round 7:
    B_7 = 751
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 7, 2, 239 ]
    CBC-MAC = [ 31, 234, 156, 109, 202, 217, 33, 32, 99, 149, 103, 162, 71, 202, 248, 220 ]
    F_out = 264
    L = 751, R = 950

  Round 8:
    B_8 = 950
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 8, 3, 182 ]
    CBC-MAC = [ 0, 134, 88, 236, 94, 197, 163, 112, 150, 170, 152, 85, 243, 40, 10, 210 ]
    F_out = 784
    L = 950, R = 535

  Round 9:
    B_9 = 535
    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 9, 2, 23 ]
    CBC-MAC = [ 202, 187, 102, 252, 135, 173, 229, 55, 200, 200, 53, 184, 182, 20, 112, 105 ]
    F_out = 055
    L = 535, R = 005


Test vector 4:

  Radix = 10
  Input (length = 9): "999999999"
  Tweak (length = 7): "7777777"

  Encrypted: "658229573"

  Intermediate values:

  P = [ 1, 2, 1, 0, 0, 10, 10, 4, 0, 0, 0, 9, 0, 0, 0, 7 ]

  Round 0:
    B_0 = 99999
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 0, 1, 134, 159 ]
    CBC-MAC = [ 255, 112, 209, 229, 147, 253, 182, 161, 5, 33, 183, 42, 141, 37, 129, 203 ]
    F_out = 1233
    L = 99999, R = 1232

  Round 1:
    B_1 = 1232
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 1, 0, 4, 208 ]
    CBC-MAC = [ 222, 232, 229, 169, 154, 89, 227, 203, 203, 41, 107, 211, 129, 105, 243, 30 ]
    F_out = 89995
    L = 1232, R = 89994

  Round 2:
    B_2 = 89994
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 2, 1, 95, 138 ]
    CBC-MAC = [ 78, 231, 88, 101, 235, 49, 207, 123, 60, 77, 237, 23, 76, 48, 233, 34 ]
    F_out = 1867
    L = 89994, R = 3099

  Round 3:
    B_3 = 3099
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 3, 0, 12, 27 ]
    CBC-MAC = [ 164, 20, 211, 124, 220, 136, 90, 131, 90, 142, 6, 228, 175, 113, 234, 56 ]
    F_out = 23651
    L = 3099, R = 13645

  Round 4:
    B_4 = 13645
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 4, 0, 53, 77 ]
    CBC-MAC = [ 21, 187, 102, 200, 90, 106, 179, 135, 114, 194, 232, 65, 179, 19, 85, 216 ]
    F_out = 3895
    L = 13645, R = 6994

  Round 5:
    B_5 = 6994
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 5, 0, 27, 82 ]
    CBC-MAC = [ 158, 91, 78, 114, 180, 122, 192, 144, 40, 20, 251, 45, 48, 128, 168, 76 ]
    F_out = 65424
    L = 6994, R = 79069

  Round 6:
    B_6 = 79069
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 6, 1, 52, 221 ]
    CBC-MAC = [ 141, 136, 240, 83, 248, 94, 25, 150, 194, 26, 70, 193, 117, 188, 27, 43 ]
    F_out = 6502
    L = 79069, R = 3496

  Round 7:
    B_7 = 3496
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 7, 0, 13, 168 ]
    CBC-MAC = [ 242, 54, 189, 214, 131, 102, 122, 85, 21, 79, 7, 104, 128, 109, 101, 13 ]
    F_out = 18229
    L = 3496, R = 97298

  Round 8:
    B_8 = 97298
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 8, 1, 124, 18 ]
    CBC-MAC = [ 196, 167, 217, 126, 145, 96, 14, 30, 86, 208, 212, 106, 174, 140, 93, 101 ]
    F_out = 3086
    L = 97298, R = 6582

  Round 9:
    B_9 = 6582
    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 9, 0, 25, 182 ]
    CBC-MAC = [ 194, 177, 132, 170, 147, 14, 201, 115, 88, 45, 229, 88, 176, 147, 68, 73 ]
    F_out = 32275
    L = 6582, R = 29573


Test vector 5:

  Radix = 36
  Input (length = 16): "C4XPWULBM3M863JH"
  Tweak (length = 16): "TQF9J5QDAGSCSPB1"

  Encrypted: "C8AQ3U846ZWH6QZP"

  Intermediate values:

  P = [ 1, 2, 1, 0, 0, 36, 10, 8, 0, 0, 0, 16, 0, 0, 0, 16 ]

  Round 0:
    B_0 = M3M863JH
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 147, 60, 114, 39, 109 ]
    CBC-MAC = [ 208, 146, 224, 204, 140, 102, 171, 180, 206, 125, 48, 178, 174, 227, 44, 82 ]
    F_out = 0yvjtuwi
    L = M3M863JH, R = d3t9qpht

  Round 1:
    B_1 = d3t9qpht
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 239, 32, 4, 176, 145 ]
    CBC-MAC = [ 11, 95, 134, 200, 101, 178, 117, 81, 5, 138, 157, 54, 22, 2, 81, 228 ]
    F_out = qi75y7ue
    L = d3t9qpht, R = clte4bdv

  Round 2:
    B_2 = clte4bdv
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 230, 1, 5, 196, 163 ]
    CBC-MAC = [ 63, 177, 151, 77, 74, 227, 63, 53, 70, 208, 52, 187, 19, 94, 131, 141 ]
    F_out = e2uj0kvv
    L = clte4bdv, R = r6nsrado

  Round 3:
    B_3 = r6nsrado
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 1, 240, 1, 176, 229, 76 ]
    CBC-MAC = [ 23, 178, 193, 174, 191, 52, 42, 89, 205, 218, 204, 149, 163, 69, 47, 111 ]
    F_out = el46x7yt
    L = r6nsrado, R = r6xl1jco

  Round 4:
    B_4 = r6xl1jco
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 4, 1, 240, 36, 245, 145, 56 ]
    CBC-MAC = [ 195, 180, 234, 251, 217, 198, 241, 66, 234, 19, 252, 142, 245, 70, 180, 64 ]
    F_out = e4q6hzm6
    L = r6xl1jco, R = 5bdz99zu

  Round 5:
    B_5 = 5bdz99zu
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 5, 0, 96, 255, 238, 225, 218 ]
    CBC-MAC = [ 163, 229, 90, 83, 179, 159, 225, 53, 163, 201, 186, 179, 170, 28, 233, 110 ]
    F_out = 8lwdqboz
    L = 5bdz99zu, R = zstyrv1n

  Round 6:
    B_6 = zstyrv1n
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 6, 2, 141, 53, 72, 75, 235 ]
    CBC-MAC = [ 23, 101, 72, 135, 87, 122, 54, 137, 69, 167, 200, 176, 23, 138, 66, 12 ]
    F_out = 7kgar168
    L = zstyrv1n, R = cvua0b62

  Round 7:
    B_7 = cvua0b62
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 7, 0, 235, 21, 173, 170, 138 ]
    CBC-MAC = [ 65, 139, 179, 225, 22, 103, 89, 136, 82, 168, 181, 89, 181, 6, 10, 150 ]
    F_out = r1altw7t
    L = cvua0b62, R = qu4klr9g

  Round 8:
    B_8 = qu4klr9g
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 8, 1, 233, 167, 113, 1, 68 ]
    CBC-MAC = [ 52, 45, 23, 185, 113, 48, 200, 24, 44, 75, 83, 58, 167, 199, 234, 251 ]
    F_out = zcgg3j22
    L = qu4klr9g, R = c8aq3u84

  Round 9:
    B_9 = c8aq3u84
    P = [ 1, 2, 1, 0, 0, 36, 10, 8, 0, 0, 0, 16, 0, 0, 0, 16 ]
    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 9, 0, 223, 39, 10, 253, 196 ]
    CBC-MAC = [ 59, 60, 185, 126, 53, 229, 238, 165, 240, 167, 173, 225, 162, 23, 56, 195 ]
    F_out = g5rwkzq9
    L = c8aq3u84, R = 6zwh6qzp