test/vectors/wycheproof-ed25519_test.json

1{

2 "algorithm": "EDDSA",

3 "schema": "eddsa_verify_schema_v1.json",

4 "numberOfTests": 151,

5 "header": [

6 "Test vectors of type EddsaVerify are intended for testing"

7 ],

8 "notes": {

9 "CompressedSignature": {

10 "bugType": "CAN_OF_WORMS",

      "description": "The test vector contains a signature where r and s overlap or where 0 bytes were cut from the signature. This signature was specifically generated.",

      "effect": "The effect of the bug is unclear without further analysis. It could be rather benign and just allow signature malleability in some cases or it could hide a more severe flaw."

13 },

14 "InvalidEncoding": {

15 "bugType": "CAN_OF_WORMS",

      "description": "The test vector contains a signature with an invalid encoding of the values. The vector checks that invalid encodings are not accepted. For the vectors that modify the encoding of R, S has been recomputed so that the hash matches the modified R and the R recovered from S and the hash equals the original R. Such vectors are accepted only by verifiers that decode R leniently or that compare R to the recovered R incompletely.",

      "effect": "Accepting such signatures means the encoding of a signature is not unique. A holder of the private key can generate multiple distinct signatures for the same message, and different verifiers can disagree about which signatures are valid."

18 },

19 "InvalidKtv": {

20 "bugType": "UNKNOWN",

21 "description": "The test vector contains a known invalid signature."

22 },

23 "InvalidSignature": {

24 "bugType": "AUTH_BYPASS",

25 "description": "The test vector contains a signature with edge case values such as 0 or the order of the group.",

      "effect": "The effect of accepting such signatures probably indicates that signatures can be forged without even knowing the message itself."

27 },

28 "Ktv": {

29 "bugType": "BASIC",

30 "description": "The test vector contains a known valid signature."

31 },

32 "SignatureMalleability": {

33 "bugType": "SIGNATURE_MALLEABILITY",

      "description": "EdDSA signatures are non-malleable, if implemented correctly. If an implementation fails to check the range of S then it may be possible to modify a signature in such a way that it still verifies. See RFC 8032, Section 5.1.7 and Section 8.4."

35 },

36 "SignatureWithGarbage": {

37 "bugType": "SIGNATURE_MALLEABILITY",

      "description": "The test vector contains a signature with additional content. EdDSA signature are expected to be non-malleable. Signatures of the wrong length should be rejected. See RFC 8032, Section 5.1.7 and Section 8.4."

39 },

40 "TinkOverflow": {

41 "bugType": "KNOWN_BUG",

42 "description": "The test vector contains a signature that caused an arithmetic overflow in tink."

43 },

44 "TruncatedSignature": {

45 "bugType": "AUTH_BYPASS",

46 "description": "The test vector contains a signature that was truncated.",

47 "effect": "Accepting such signatures likely means that signatures can be forged."

48 },

49 "Valid": {

50 "bugType": "BASIC",

51 "description": "The test vector is an ordinary valid signature."

52 }

53 },

54 "testGroups": [

55 {

56 "type": "EddsaVerify",

57 "source": {

58 "name": "google-wycheproof",

59 "version": "0.9rc5"

60 },

61 "publicKey": {

62 "type": "EDDSAPublicKey",

63 "curve": "edwards25519",

64 "keySize": 255,

65 "pk": "7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa"

66 },

67 "publicKeyDer": "302a300506032b65700321007d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAfU0Of2FTpptiQrUiq77mhf2kQg+INLEIw72uNp71Sfo=\n-----END PUBLIC KEY-----\n",

69 "publicKeyJwk": {

70 "kty": "OKP",

71 "crv": "Ed25519",

72 "kid": "none",

73 "x": "fU0Of2FTpptiQrUiq77mhf2kQg-INLEIw72uNp71Sfo"

74 },

75 "tests": [

76 {

77 "tcId": 1,

78 "comment": "",

79 "flags": [

80 "Valid"

81 ],

82 "msg": "",

          "sig": "d4fbdb52bfa726b44d1786a8c0d171c3e62ca83c9e5bbe63de0bb2483f8fd6cc1429ab72cafc41ab56af02ff8fcc43b99bfe4c7ae940f60f38ebaa9d311c4007",

84 "result": "valid"

85 },

86 {

87 "tcId": 2,

88 "comment": "",

89 "flags": [

90 "Valid"

91 ],

92 "msg": "78",

          "sig": "d80737358ede548acb173ef7e0399f83392fe8125b2ce877de7975d8b726ef5b1e76632280ee38afad12125ea44b961bf92f1178c9fa819d020869975bcbe109",

94 "result": "valid"

95 },

96 {

97 "tcId": 3,

98 "comment": "",

99 "flags": [

100 "Valid"

101 ],

102 "msg": "54657374",

103

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b30d",

104 "result": "valid"

105 },

106 {

107 "tcId": 4,

108 "comment": "",

109 "flags": [

110 "Valid"

111 ],

112 "msg": "48656c6c6f",

113

          "sig": "1c1ad976cbaae3b31dee07971cf92c928ce2091a85f5899f5e11ecec90fc9f8e93df18c5037ec9b29c07195ad284e63d548cd0a6fe358cc775bd6c1608d2c905",

114 "result": "valid"

115 },

116 {

117 "tcId": 5,

118 "comment": "",

119 "flags": [

120 "Valid"

121 ],

122 "msg": "313233343030",

123

          "sig": "657c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2bf0cf5b3a289976458a1be6277a5055545253b45b07dcc1abd96c8b989c00f301",

124 "result": "valid"

125 },

126 {

127 "tcId": 6,

128 "comment": "",

129 "flags": [

130 "Valid"

131 ],

132 "msg": "000000000000000000000000",

133

          "sig": "d46543bfb892f84ec124dcdfc847034c19363bf3fc2fa89b1267833a14856e52e60736918783f950b6f1dd8d40dc343247cd43ce054c2d68ef974f7ed0f3c60f",

134 "result": "valid"

135 },

136 {

137 "tcId": 7,

138 "comment": "",

139 "flags": [

140 "Valid"

141 ],

142

          "msg": "6161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161",

143

          "sig": "879350045543bc14ed2c08939b68c30d22251d83e018cacbaf0c9d7a48db577e80bdf76ce99e5926762bc13b7b3483260a5ef63d07e34b58eb9c14621ac92f00",

144 "result": "valid"

145 },

146 {

147 "tcId": 8,

148 "comment": "",

149 "flags": [

150 "Valid"

151 ],

152

          "msg": "202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f60",

153

          "sig": "7bdc3f9919a05f1d5db4a3ada896094f6871c1f37afc75db82ec3147d84d6f237b7e5ecc26b59cfea0c7eaf1052dc427b0f724615be9c3d3e01356c65b9b5109",

154 "result": "valid"

155 },

156 {

157 "tcId": 9,

158 "comment": "",

159 "flags": [

160 "Valid"

161 ],

162 "msg": "ffffffffffffffffffffffffffffffff",

163

          "sig": "5dbd7360e55aa38e855d6ad48c34bd35b7871628508906861a7c4776765ed7d1e13d910faabd689ec8618b78295c8ab8f0e19c8b4b43eb8685778499e943ae04",

164 "result": "valid"

165 }

166 ]

167 },

168 {

169 "type": "EddsaVerify",

170 "source": {

171 "name": "google-wycheproof",

172 "version": "0.9rc5"

173 },

174 "publicKey": {

175 "type": "EDDSAPublicKey",

176 "curve": "edwards25519",

177 "keySize": 255,

178 "pk": "7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa"

179 },

180 "publicKeyDer": "302a300506032b65700321007d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",

181

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAfU0Of2FTpptiQrUiq77mhf2kQg+INLEIw72uNp71Sfo=\n-----END PUBLIC KEY-----\n",

182 "publicKeyJwk": {

183 "kty": "OKP",

184 "crv": "Ed25519",

185 "kid": "none",

186 "x": "fU0Of2FTpptiQrUiq77mhf2kQg-INLEIw72uNp71Sfo"

187 },

188 "tests": [

189 {

190 "tcId": 10,

191 "comment": "special values for r and s",

192 "flags": [

193 "InvalidSignature"

194 ],

195 "msg": "3f",

196

          "sig": "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",

197 "result": "invalid"

198 },

199 {

200 "tcId": 11,

201 "comment": "special values for r and s",

202 "flags": [

203 "InvalidSignature"

204 ],

205 "msg": "3f",

206

          "sig": "00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000",

207 "result": "invalid"

208 },

209 {

210 "tcId": 12,

211 "comment": "special values for r and s",

212 "flags": [

213 "InvalidSignature"

214 ],

215 "msg": "3f",

216

          "sig": "0000000000000000000000000000000000000000000000000000000000000000ecd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

217 "result": "invalid"

218 },

219 {

220 "tcId": 13,

221 "comment": "special values for r and s",

222 "flags": [

223 "InvalidSignature"

224 ],

225 "msg": "3f",

226

          "sig": "0000000000000000000000000000000000000000000000000000000000000000edd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

227 "result": "invalid"

228 },

229 {

230 "tcId": 14,

231 "comment": "special values for r and s",

232 "flags": [

233 "InvalidSignature"

234 ],

235 "msg": "3f",

236

          "sig": "0000000000000000000000000000000000000000000000000000000000000000edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",

237 "result": "invalid"

238 },

239 {

240 "tcId": 15,

241 "comment": "special values for r and s",

242 "flags": [

243 "InvalidSignature"

244 ],

245 "msg": "3f",

246

          "sig": "01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",

247 "result": "invalid"

248 },

249 {

250 "tcId": 16,

251 "comment": "special values for r and s",

252 "flags": [

253 "InvalidSignature"

254 ],

255 "msg": "3f",

256

          "sig": "01000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000",

257 "result": "invalid"

258 },

259 {

260 "tcId": 17,

261 "comment": "special values for r and s",

262 "flags": [

263 "InvalidSignature"

264 ],

265 "msg": "3f",

266

          "sig": "0100000000000000000000000000000000000000000000000000000000000000ecd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

267 "result": "invalid"

268 },

269 {

270 "tcId": 18,

271 "comment": "special values for r and s",

272 "flags": [

273 "InvalidSignature"

274 ],

275 "msg": "3f",

276

          "sig": "0100000000000000000000000000000000000000000000000000000000000000edd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

277 "result": "invalid"

278 },

279 {

280 "tcId": 19,

281 "comment": "special values for r and s",

282 "flags": [

283 "InvalidSignature"

284 ],

285 "msg": "3f",

286

          "sig": "0100000000000000000000000000000000000000000000000000000000000000edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",

287 "result": "invalid"

288 },

289 {

290 "tcId": 20,

291 "comment": "special values for r and s",

292 "flags": [

293 "InvalidSignature"

294 ],

295 "msg": "3f",

296

          "sig": "edd3f55c1a631258d69cf7a2def9de14000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000",

297 "result": "invalid"

298 },

299 {

300 "tcId": 21,

301 "comment": "special values for r and s",

302 "flags": [

303 "InvalidSignature"

304 ],

305 "msg": "3f",

306

          "sig": "edd3f55c1a631258d69cf7a2def9de14000000000000000000000000000000100100000000000000000000000000000000000000000000000000000000000000",

307 "result": "invalid"

308 },

309 {

310 "tcId": 22,

311 "comment": "special values for r and s",

312 "flags": [

313 "InvalidSignature"

314 ],

315 "msg": "3f",

316

          "sig": "edd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010ecd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

317 "result": "invalid"

318 },

319 {

320 "tcId": 23,

321 "comment": "special values for r and s",

322 "flags": [

323 "InvalidSignature"

324 ],

325 "msg": "3f",

326

          "sig": "edd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010edd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

327 "result": "invalid"

328 },

329 {

330 "tcId": 24,

331 "comment": "special values for r and s",

332 "flags": [

333 "InvalidSignature"

334 ],

335 "msg": "3f",

336

          "sig": "edd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",

337 "result": "invalid"

338 },

339 {

340 "tcId": 25,

341 "comment": "special values for r and s",

342 "flags": [

343 "InvalidSignature"

344 ],

345 "msg": "3f",

346

          "sig": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f0000000000000000000000000000000000000000000000000000000000000000",

347 "result": "invalid"

348 },

349 {

350 "tcId": 26,

351 "comment": "special values for r and s",

352 "flags": [

353 "InvalidSignature"

354 ],

355 "msg": "3f",

356

          "sig": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f0100000000000000000000000000000000000000000000000000000000000000",

357 "result": "invalid"

358 },

359 {

360 "tcId": 27,

361 "comment": "special values for r and s",

362 "flags": [

363 "InvalidSignature"

364 ],

365 "msg": "3f",

366

          "sig": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fecd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

367 "result": "invalid"

368 },

369 {

370 "tcId": 28,

371 "comment": "special values for r and s",

372 "flags": [

373 "InvalidSignature"

374 ],

375 "msg": "3f",

376

          "sig": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fedd3f55c1a631258d69cf7a2def9de1400000000000000000000000000000010",

377 "result": "invalid"

378 },

379 {

380 "tcId": 29,

381 "comment": "special values for r and s",

382 "flags": [

383 "InvalidSignature"

384 ],

385 "msg": "3f",

386

          "sig": "edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fedffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f",

387 "result": "invalid"

388 }

389 ]

390 },

391 {

392 "type": "EddsaVerify",

393 "source": {

394 "name": "google-wycheproof",

395 "version": "0.9rc5"

396 },

397 "publicKey": {

398 "type": "EDDSAPublicKey",

399 "curve": "edwards25519",

400 "keySize": 255,

401 "pk": "7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa"

402 },

403 "publicKeyDer": "302a300506032b65700321007d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",

404

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAfU0Of2FTpptiQrUiq77mhf2kQg+INLEIw72uNp71Sfo=\n-----END PUBLIC KEY-----\n",

405 "publicKeyJwk": {

406 "kty": "OKP",

407 "crv": "Ed25519",

408 "kid": "none",

409 "x": "fU0Of2FTpptiQrUiq77mhf2kQg-INLEIw72uNp71Sfo"

410 },

411 "tests": [

412 {

413 "tcId": 30,

414 "comment": "empty signature",

415 "flags": [

416 "TruncatedSignature"

417 ],

418 "msg": "54657374",

419 "sig": "",

420 "result": "invalid"

421 },

422 {

423 "tcId": 31,

424 "comment": "s missing",

425 "flags": [

426 "TruncatedSignature"

427 ],

428 "msg": "54657374",

429 "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab0",

430 "result": "invalid"

431 },

432 {

433 "tcId": 32,

434 "comment": "signature too short",

435 "flags": [

436 "TruncatedSignature"

437 ],

438 "msg": "54657374",

439

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946",

440 "result": "invalid"

441 },

442 {

443 "tcId": 33,

444 "comment": "signature too long",

445 "flags": [

446 "SignatureWithGarbage"

447 ],

448 "msg": "54657374",

449

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b30d2020",

450 "result": "invalid"

451 },

452 {

453 "tcId": 34,

454 "comment": "include pk in signature",

455 "flags": [

456 "SignatureWithGarbage"

457 ],

458 "msg": "54657374",

459

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b30d7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",

460 "result": "invalid"

461 },

462 {

463 "tcId": 35,

464 "comment": "prepending 0 byte to signature",

465 "flags": [

466 "SignatureWithGarbage"

467 ],

468 "msg": "54657374",

469

          "sig": "007c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b30d",

470 "result": "invalid"

471 },

472 {

473 "tcId": 36,

474 "comment": "prepending 0 byte to s",

475 "flags": [

476 "SignatureWithGarbage"

477 ],

478 "msg": "54657374",

479

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab0007a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b30d",

480 "result": "invalid"

481 },

482 {

483 "tcId": 37,

484 "comment": "appending 0 byte to signature",

485 "flags": [

486 "SignatureWithGarbage"

487 ],

488 "msg": "54657374",

489

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b30d00",

490 "result": "invalid"

491 },

492 {

493 "tcId": 38,

494 "comment": "removing 0 byte from signature",

495 "flags": [

496 "CompressedSignature"

497 ],

498 "msg": "546573743137",

499

          "sig": "93de3ca252426c95f735cb9edd92e83321ac62372d5aa5b379786bae111ab6b17251330e8f9a7c30d6993137c596007d7b001409287535ac4804e662bc58a3",

500 "result": "invalid"

501 },

502 {

503 "tcId": 39,

504 "comment": "removing 0 byte from signature",

505 "flags": [

506 "CompressedSignature"

507 ],

508 "msg": "54657374313236",

509

          "sig": "dffed33a7f420b62bb1731cfd03be805affd18a281ec02b1067ba6e9d20826569e742347df59c88ae96db1f1969fb189b0ec34381d85633e1889da48d95e0e",

510 "result": "invalid"

511 },

512 {

513 "tcId": 40,

514 "comment": "removing leading 0 byte from signature",

515 "flags": [

516 "CompressedSignature"

517 ],

518 "msg": "546573743530",

519

          "sig": "6e170c719577c25e0e1e8b8aa7a6346f8b109f37385cc2e85dc3b4c0f46a9c6bcafd67f52324c5dbaf40a1b673fb29c4a56052d2d6999d0838a8337bccb502",

520 "result": "invalid"

521 },

522 {

523 "tcId": 41,

524 "comment": "dropping byte from signature",

525 "flags": [

526 "CompressedSignature"

527 ],

528 "msg": "54657374333437",

529

          "sig": "b0928b46e99fbbad3f5cb502d2cd309d94a7e86cfd4d84b1fcf4cea18075a9c36993c0582dba1e9e519fae5a8654f454201ae0c3cb397c37b8f4f8eef18400",

530 "result": "invalid"

531 }

532 ]

533 },

534 {

535 "type": "EddsaVerify",

536 "source": {

537 "name": "google-wycheproof",

538 "version": "0.9rc5"

539 },

540 "publicKey": {

541 "type": "EDDSAPublicKey",

542 "curve": "edwards25519",

543 "keySize": 255,

544 "pk": "7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa"

545 },

546 "publicKeyDer": "302a300506032b65700321007d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",

547

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAfU0Of2FTpptiQrUiq77mhf2kQg+INLEIw72uNp71Sfo=\n-----END PUBLIC KEY-----\n",

548 "publicKeyJwk": {

549 "kty": "OKP",

550 "crv": "Ed25519",

551 "kid": "none",

552 "x": "fU0Of2FTpptiQrUiq77mhf2kQg-INLEIw72uNp71Sfo"

553 },

554 "tests": [

555 {

556 "tcId": 42,

557

          "comment": "modified bit 0 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

558 "flags": [

559 "InvalidEncoding"

560 ],

561 "msg": "313233343030",

562

          "sig": "647c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2b1d125e5538f38afbcc1c84e489521083041d24bc6240767029da063271a1ff0c",

563 "result": "invalid"

564 },

565 {

566 "tcId": 43,

567

          "comment": "modified bit 1 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

568 "flags": [

569 "InvalidEncoding"

570 ],

571 "msg": "313233343030",

572

          "sig": "677c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2bc108ca4b87a49c9ed2cf383aecad8f54a962b2899da891e12004d7993a627e01",

573 "result": "invalid"

574 },

575 {

576 "tcId": 44,

577

          "comment": "modified bit 2 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

578 "flags": [

579 "InvalidEncoding"

580 ],

581 "msg": "313233343030",

582

          "sig": "617c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2b9ce23fc6213ed5b87912e9bbf92f5e2c780eae26d15c50a112d1e97d2ea33c06",

583 "result": "invalid"

584 },

585 {

586 "tcId": 45,

587

          "comment": "modified bit 7 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

588 "flags": [

589 "InvalidEncoding"

590 ],

591 "msg": "313233343030",

592

          "sig": "e57c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2bbb3eb51cd98dddb235a5f46f2bded6af184a58d09cce928bda43f41d69118a03",

593 "result": "invalid"

594 },

595 {

596 "tcId": 46,

597

          "comment": "modified bit 8 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

598 "flags": [

599 "InvalidEncoding"

600 ],

601 "msg": "313233343030",

602

          "sig": "657d1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2bcd237dda9a116501f67a5705a854b9adc304f34720803a91b324f2c13e0f5a09",

603 "result": "invalid"

604 },

605 {

606 "tcId": 47,

607

          "comment": "modified bit 16 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

608 "flags": [

609 "InvalidEncoding"

610 ],

611 "msg": "313233343030",

612

          "sig": "657c1592402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2b6b167bbdc0d881cc04d28905552c1876f3709851abc5007376940cc8a435c300",

613 "result": "invalid"

614 },

615 {

616 "tcId": 48,

617

          "comment": "modified bit 31 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

618 "flags": [

619 "InvalidEncoding"

620 ],

621 "msg": "313233343030",

622

          "sig": "657c1412402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2b7fd2ac7da14afffcceeb13f2a0d6b887941cb1a5eb57a52f3cb131a16cce7b0e",

623 "result": "invalid"

624 },

625 {

626 "tcId": 49,

627

          "comment": "modified bit 32 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

628 "flags": [

629 "InvalidEncoding"

630 ],

631 "msg": "313233343030",

632

          "sig": "657c1492412ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2b7373ba13ebbef99cd2a8ead55ce735c987d85a35320925a8e871702dc7c5c40d",

633 "result": "invalid"

634 },

635 {

636 "tcId": 50,

637

          "comment": "modified bit 63 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

638 "flags": [

639 "InvalidEncoding"

640 ],

641 "msg": "313233343030",

642

          "sig": "657c1492402ab54e03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2bd35bd331c03f0855504ca1cab87b83c36a028425a3cf007ede4f4254c261cb00",

643 "result": "invalid"

644 },

645 {

646 "tcId": 51,

647

          "comment": "modified bit 64 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

648 "flags": [

649 "InvalidEncoding"

650 ],

651 "msg": "313233343030",

652

          "sig": "657c1492402ab5ce02e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2bcb35101f73cf467deac8c1a03b6c3dc35af544132734b7e57ab20c89b2e4750d",

653 "result": "invalid"

654 },

655 {

656 "tcId": 52,

657

          "comment": "modified bit 97 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

658 "flags": [

659 "InvalidEncoding"

660 ],

661 "msg": "313233343030",

662

          "sig": "657c1492402ab5ce03e2c3a7f2384d051b9cf3570f1207fc78c1bcc98c281c2bb58d2e8878290bff8d3355fdd4ea381924ee578752354eb6dee678ab4011c301",

663 "result": "invalid"

664 },

665 {

666 "tcId": 53,

667

          "comment": "modified bit 127 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

668 "flags": [

669 "InvalidEncoding"

670 ],

671 "msg": "313233343030",

672

          "sig": "657c1492402ab5ce03e2c3a7f0384d851b9cf3570f1207fc78c1bcc98c281c2bb978c866187ffb1cc7b29a0b4045aefc08768df65717194ff0c6e63f4dea0d02",

673 "result": "invalid"

674 },

675 {

676 "tcId": 54,

677

          "comment": "modified bit 240 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

678 "flags": [

679 "InvalidEncoding"

680 ],

681 "msg": "313233343030",

682

          "sig": "657c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281d2b0576ecf8eaf675f00f3dfbe19f75b83b7607a6c96414f6821af920a2498d0305",

683 "result": "invalid"

684 },

685 {

686 "tcId": 55,

687

          "comment": "modified bit 247 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

688 "flags": [

689 "InvalidEncoding"

690 ],

691 "msg": "313233343030",

692

          "sig": "657c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c289c2be5241a345c7b5428054c74b7c382fa10d4a5f1e8f8b79a71d3fdea2254f1ff0e",

693 "result": "invalid"

694 },

695 {

696 "tcId": 56,

697

          "comment": "modified bit 248 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

698 "flags": [

699 "InvalidEncoding"

700 ],

701 "msg": "313233343030",

702

          "sig": "657c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c2a63950c85cd6dc96364e768de50ff7732b538f8a0b1615d799190ab600849230e",

703 "result": "invalid"

704 },

705 {

706 "tcId": 57,

707

          "comment": "modified bit 253 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

708 "flags": [

709 "InvalidEncoding"

710 ],

711 "msg": "313233343030",

712

          "sig": "657c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c0b543bd3da0a56a8c9c152f59c9fec12f31fa66434d48b817b30d90cb4efa8b501",

713 "result": "invalid"

714 },

715 {

716 "tcId": 58,

717

          "comment": "modified bit 254 in R. Accepted only by verifiers that ignore this bit when comparing R to the recovered R.",

718 "flags": [

719 "InvalidEncoding"

720 ],

721 "msg": "313233343030",

722

          "sig": "657c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281c6b8da07efd07a6dafb015ed6a32fe136319a972ffbc341f3a0beae97ccf8136505",

723 "result": "invalid"

724 },

725 {

726 "tcId": 59,

727

          "comment": "modified bit 255 in R. This flips the sign of x and yields the canonical encoding of the negated R point. Accepted only by verifiers that ignore the sign of x when comparing R to the recovered R.",

728 "flags": [

729 "InvalidEncoding"

730 ],

731 "msg": "313233343030",

732

          "sig": "657c1492402ab5ce03e2c3a7f0384d051b9cf3570f1207fc78c1bcc98c281cab227aedf259f910f0f3a759a335062665217925d019173b88917eae294f75d40f",

733 "result": "invalid"

734 },

735 {

736 "tcId": 60,

737 "comment": "R==0",

738 "flags": [

739 "InvalidEncoding"

740 ],

741 "msg": "313233343030",

742

          "sig": "0000000000000000000000000000000000000000000000000000000000000000e0b8e7770d51c7a36375d006c5bffd6af43ff54aaf47e4330dc118c71d61ec02",

743 "result": "invalid"

744 },

745 {

746 "tcId": 61,

747 "comment": "invalid R",

748 "flags": [

749 "InvalidEncoding"

750 ],

751 "msg": "313233343030",

752

          "sig": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff463a1908382e7eb7693acef9884f7cf931a215e0791876be22c631a59881fd0e",

753 "result": "invalid"

754 },

755 {

756 "tcId": 62,

757 "comment": "all bits flipped in R",

758 "flags": [

759 "InvalidEncoding"

760 ],

761 "msg": "313233343030",

762

          "sig": "9a83eb6dbfd54a31fc1d3c580fc7b2fae4630ca8f0edf803873e433673d7e3d40e94254586cb6188c5386c3febed477cb9a6cb29e3979adc4cb27cf5278fb70a",

763 "result": "invalid"

764 }

765 ]

766 },

767 {

768 "type": "EddsaVerify",

769 "source": {

770 "name": "google-wycheproof",

771 "version": "0.9rc5"

772 },

773 "publicKey": {

774 "type": "EDDSAPublicKey",

775 "curve": "edwards25519",

776 "keySize": 255,

777 "pk": "7d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa"

778 },

779 "publicKeyDer": "302a300506032b65700321007d4d0e7f6153a69b6242b522abbee685fda4420f8834b108c3bdae369ef549fa",

780

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAfU0Of2FTpptiQrUiq77mhf2kQg+INLEIw72uNp71Sfo=\n-----END PUBLIC KEY-----\n",

781 "publicKeyJwk": {

782 "kty": "OKP",

783 "crv": "Ed25519",

784 "kid": "none",

785 "x": "fU0Of2FTpptiQrUiq77mhf2kQg-INLEIw72uNp71Sfo"

786 },

787 "tests": [

788 {

789 "tcId": 63,

790

          "comment": "the encoded s was replaced by s + L. The scalar is unchanged mod L. Accepted only by verifiers that fail to enforce s < L. See RFC 8032, Section 5.1.7.",

791 "flags": [

792 "SignatureMalleability"

793 ],

794 "msg": "54657374",

795

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab067654bce3832c2d76f8f6f5dafc08d9339d4eef676573336a5c51eb6f946b31d",

796 "result": "invalid"

797 },

798 {

799 "tcId": 64,

800

          "comment": "the encoded s was replaced by s + 2L. The scalar is unchanged mod L. Accepted only by verifiers that fail to enforce s < L. See RFC 8032, Section 5.1.7.",

801 "flags": [

802 "SignatureMalleability"

803 ],

804 "msg": "54657374",

805

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab05439412b5395d42f462c67008eba6ca839d4eef676573336a5c51eb6f946b32d",

806 "result": "invalid"

807 },

808 {

809 "tcId": 65,

810

          "comment": "the encoded s was replaced by s + 4L. The scalar is unchanged mod L. Accepted only by verifiers that fail to enforce s < L. See RFC 8032, Section 5.1.7.",

811 "flags": [

812 "SignatureMalleability"

813 ],

814 "msg": "54657374",

815

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab02ee12ce5875bf9dff26556464bae2ad239d4eef676573336a5c51eb6f946b34d",

816 "result": "invalid"

817 },

818 {

819 "tcId": 66,

820

          "comment": "the encoded s was replaced by s + 8L. The scalar is unchanged mod L. Accepted only by verifiers that fail to enforce s < L. See RFC 8032, Section 5.1.7.",

821 "flags": [

822 "SignatureMalleability"

823 ],

824 "msg": "54657374",

825

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab0e2300459f1e742404cd934d2c595a6253ad4eef676573336a5c51eb6f946b38d",

826 "result": "invalid"

827 },

828 {

829 "tcId": 67,

830

          "comment": "the encoded s was replaced by s + 2^253. The scalar differs from the valid s mod L, so verification fails even without a range check on s. Accepted only by parsers that silently clear bit 253 of s.",

831 "flags": [

832 "SignatureMalleability"

833 ],

834 "msg": "54657374",

835

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b32d",

836 "result": "invalid"

837 },

838 {

839 "tcId": 68,

840

          "comment": "the encoded s was replaced by s + 2^254. The scalar differs from the valid s mod L, so verification fails even without a range check on s. Accepted only by parsers that silently clear bit 254 of s.",

841 "flags": [

842 "SignatureMalleability"

843 ],

844 "msg": "54657374",

845

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b34d",

846 "result": "invalid"

847 },

848 {

849 "tcId": 69,

850

          "comment": "the encoded s was replaced by s + 2^255. The scalar differs from the valid s mod L, so verification fails even without a range check on s. Accepted only by parsers that silently clear bit 255 of s.",

851 "flags": [

852 "SignatureMalleability"

853 ],

854 "msg": "54657374",

855

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab07a9155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b38d",

856 "result": "invalid"

857 },

858 {

859 "tcId": 70,

860

          "comment": "the encoded s was replaced by s + p where p is the field prime 2^255 - 19. The scalar differs from the valid s mod L, so verification fails even without a range check on s. Accepted only by verifiers that reduce s mod p instead of checking s < L.",

861 "flags": [

862 "SignatureMalleability"

863 ],

864 "msg": "54657374",

865

          "sig": "7c38e026f29e14aabd059a0f2db8b0cd783040609a8be684db12f82a27774ab0679155711ecfaf7f99f277bad0c6ae7e39d4eef676573336a5c51eb6f946b38d",

866 "result": "invalid"

867 }

868 ]

869 },

870 {

871 "type": "EddsaVerify",

872 "source": {

873 "name": "google-wycheproof",

874 "version": "0.9rc5"

875 },

876 "publicKey": {

877 "type": "EDDSAPublicKey",

878 "curve": "edwards25519",

879 "keySize": 255,

880 "pk": "a12c2beb77265f2aac953b5009349d94155a03ada416aad451319480e983ca4c"

881 },

882 "publicKeyDer": "302a300506032b6570032100a12c2beb77265f2aac953b5009349d94155a03ada416aad451319480e983ca4c",

883

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoSwr63cmXyqslTtQCTSdlBVaA62kFqrUUTGUgOmDykw=\n-----END PUBLIC KEY-----\n",

884 "publicKeyJwk": {

885 "kty": "OKP",

886 "crv": "Ed25519",

887 "kid": "none",

888 "x": "oSwr63cmXyqslTtQCTSdlBVaA62kFqrUUTGUgOmDykw"

889 },

890 "tests": [

891 {

892 "tcId": 71,

893 "comment": "",

894 "flags": [

895 "Valid"

896 ],

897 "msg": "",

898

          "sig": "5056325d2ab440bf30bbf0f7173199aa8b4e6fbc091cf3eb6bc6cf87cd73d992ffc216c85e4ab5b8a0bbc7e9a6e9f8d33b7f6e5ac0ffdc22d9fcaf784af84302",

899 "result": "valid"

900 },

901 {

902 "tcId": 72,

903 "comment": "",

904 "flags": [

905 "Valid"

906 ],

907 "msg": "78",

908

          "sig": "481fafbf4364d7b682475282f517a3ac0538c9a6b6a562e99a3d8e5afb4f90a559b056b9f07af023905753b02d95eb329a35c77f154b79abbcd291615ce42f02",

909 "result": "valid"

910 },

911 {

912 "tcId": 73,

913 "comment": "",

914 "flags": [

915 "Valid"

916 ],

917 "msg": "54657374",

918

          "sig": "8a9bb4c465a3863abc9fd0dd35d80bb28f7d33d37d74679802d63f82b20da114b8d765a1206b3e9ad7cf2b2d8d778bb8651f1fa992db293c0039eacb6161480f",

919 "result": "valid"

920 },

921 {

922 "tcId": 74,

923 "comment": "",

924 "flags": [

925 "Valid"

926 ],

927 "msg": "48656c6c6f",

928

          "sig": "d839c20abfda1fd429531831c64f813f84b913e9928540310cf060b44c3dbf9457d44a7721fdc0d67724ff81cb450dd39b10cfb65db15dda4b8bf09d26bd3801",

929 "result": "valid"

930 },

931 {

932 "tcId": 75,

933 "comment": "",

934 "flags": [

935 "Valid"

936 ],

937 "msg": "313233343030",

938

          "sig": "9bbb1052dcfa8ad2715c2eb716ae4f1902dea353d42ee09fd4c0b4fcb8b52b5219e2200016e1199d0061891c263e31b0bc3b55673c19610c4e0fa5408004160b",

939 "result": "valid"

940 },

941 {

942 "tcId": 76,

943 "comment": "",

944 "flags": [

945 "Valid"

946 ],

947 "msg": "000000000000000000000000",

948

          "sig": "f63b5c0667c7897fc283296416f7f60e84bbde9cbd832e56be463ed9f568069702b17a2f7c341ebf590706a6388ac76ac613c1675ec0f2c7118f2573422a500b",

949 "result": "valid"

950 },

951 {

952 "tcId": 77,

953 "comment": "",

954 "flags": [

955 "Valid"

956 ],

957

          "msg": "6161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161",

958

          "sig": "1bc44d7001e6b5b9090fef34b2ca480f9786bbefa7d279353e5881e8dfb91b803ccd46500e270ef0109bfd741037558832120bc2a4f20fbe7b5fb3c3aaf23e08",

959 "result": "valid"

960 },

961 {

962 "tcId": 78,

963 "comment": "",

964 "flags": [

965 "Valid"

966 ],

967

          "msg": "202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f60",

968

          "sig": "ea8e22143b02372e76e99aece3ed36aec529768a27e2bb49bdc135d44378061e1f62d1ac518f33ebf37b2ee8cc6dde68a4bd7d4a2f4d6cb77f015f71ca9fc30d",

969 "result": "valid"

970 },

971 {

972 "tcId": 79,

973 "comment": "",

974 "flags": [

975 "Valid"

976 ],

977 "msg": "ffffffffffffffffffffffffffffffff",

978

          "sig": "8acd679e1a914fc45d5fa83d3021f0509c805c8d271df54e52f43cfbd00cb6222bf81d58fe1de2de378df67ee9f453786626961fe50a9b05f12b6f0899ebdd0a",

979 "result": "valid"

980 }

981 ]

982 },

983 {

984 "type": "EddsaVerify",

985 "source": {

986 "name": "google-wycheproof",

987 "version": "0.9rc5"

988 },

989 "publicKey": {

990 "type": "EDDSAPublicKey",

991 "curve": "edwards25519",

992 "keySize": 255,

993 "pk": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a"

994 },

995 "publicKeyDer": "302a300506032b6570032100d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",

996

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=\n-----END PUBLIC KEY-----\n",

997 "publicKeyJwk": {

998 "kty": "OKP",

999 "crv": "Ed25519",

1000 "kid": "none",

1001 "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"

1002 },

1003 "tests": [

1004 {

1005 "tcId": 80,

1006 "comment": "draft-josefsson-eddsa-ed25519-02: Test 1",

1007 "flags": [

1008 "Ktv"

1009 ],

1010 "msg": "",

1011

          "sig": "e5564300c360ac729086e2cc806e828a84877f1eb8e5d974d873e065224901555fb8821590a33bacc61e39701cf9b46bd25bf5f0595bbe24655141438e7a100b",

1012 "result": "valid"

1013 }

1014 ]

1015 },

1016 {

1017 "type": "EddsaVerify",

1018 "source": {

1019 "name": "google-wycheproof",

1020 "version": "0.9rc5"

1021 },

1022 "publicKey": {

1023 "type": "EDDSAPublicKey",

1024 "curve": "edwards25519",

1025 "keySize": 255,

1026 "pk": "3d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c"

1027 },

1028 "publicKeyDer": "302a300506032b65700321003d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c",

1029

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAPUAXw+hDiVqStwqnTRt+vJyYLM8uxJaMwM1V8Sr0Zgw=\n-----END PUBLIC KEY-----\n",

1030 "publicKeyJwk": {

1031 "kty": "OKP",

1032 "crv": "Ed25519",

1033 "kid": "none",

1034 "x": "PUAXw-hDiVqStwqnTRt-vJyYLM8uxJaMwM1V8Sr0Zgw"

1035 },

1036 "tests": [

1037 {

1038 "tcId": 81,

1039 "comment": "draft-josefsson-eddsa-ed25519-02: Test 2",

1040 "flags": [

1041 "Ktv"

1042 ],

1043 "msg": "72",

1044

          "sig": "92a009a9f0d4cab8720e820b5f642540a2b27b5416503f8fb3762223ebdb69da085ac1e43e15996e458f3613d0f11d8c387b2eaeb4302aeeb00d291612bb0c00",

1045 "result": "valid"

1046 }

1047 ]

1048 },

1049 {

1050 "type": "EddsaVerify",

1051 "source": {

1052 "name": "google-wycheproof",

1053 "version": "0.9rc5"

1054 },

1055 "publicKey": {

1056 "type": "EDDSAPublicKey",

1057 "curve": "edwards25519",

1058 "keySize": 255,

1059 "pk": "fc51cd8e6218a1a38da47ed00230f0580816ed13ba3303ac5deb911548908025"

1060 },

1061 "publicKeyDer": "302a300506032b6570032100fc51cd8e6218a1a38da47ed00230f0580816ed13ba3303ac5deb911548908025",

1062

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA/FHNjmIYoaONpH7QAjDwWAgW7RO6MwOsXeuRFUiQgCU=\n-----END PUBLIC KEY-----\n",

1063 "publicKeyJwk": {

1064 "kty": "OKP",

1065 "crv": "Ed25519",

1066 "kid": "none",

1067 "x": "_FHNjmIYoaONpH7QAjDwWAgW7RO6MwOsXeuRFUiQgCU"

1068 },

1069 "tests": [

1070 {

1071 "tcId": 82,

1072 "comment": "draft-josefsson-eddsa-ed25519-02: Test 3",

1073 "flags": [

1074 "Ktv"

1075 ],

1076 "msg": "af82",

1077

          "sig": "6291d657deec24024827e69c3abe01a30ce548a284743a445e3680d7db5ac3ac18ff9b538d16f290ae67f760984dc6594a7c15e9716ed28dc027beceea1ec40a",

1078 "result": "valid"

1079 }

1080 ]

1081 },

1082 {

1083 "type": "EddsaVerify",

1084 "source": {

1085 "name": "google-wycheproof",

1086 "version": "0.9rc5"

1087 },

1088 "publicKey": {

1089 "type": "EDDSAPublicKey",

1090 "curve": "edwards25519",

1091 "keySize": 255,

1092 "pk": "278117fc144c72340f67d0f2316e8386ceffbf2b2428c9c51fef7c597f1d426e"

1093 },

1094 "publicKeyDer": "302a300506032b6570032100278117fc144c72340f67d0f2316e8386ceffbf2b2428c9c51fef7c597f1d426e",

1095

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAJ4EX/BRMcjQPZ9DyMW6Dhs7/vyskKMnFH+98WX8dQm4=\n-----END PUBLIC KEY-----\n",

1096 "publicKeyJwk": {

1097 "kty": "OKP",

1098 "crv": "Ed25519",

1099 "kid": "none",

1100 "x": "J4EX_BRMcjQPZ9DyMW6Dhs7_vyskKMnFH-98WX8dQm4"

1101 },

1102 "tests": [

1103 {

1104 "tcId": 83,

1105 "comment": "draft-josefsson-eddsa-ed25519-02: Test 1024",

1106 "flags": [

1107 "Ktv"

1108 ],

1109

          "msg": "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",

1110

          "sig": "0aab4c900501b3e24d7cdf4663326a3a87df5e4843b2cbdb67cbf6e460fec350aa5371b1508f9f4528ecea23c436d94b5e8fcd4f681e30a6ac00a9704a188a03",

1111 "result": "valid"

1112 }

1113 ]

1114 },

1115 {

1116 "type": "EddsaVerify",

1117 "source": {

1118 "name": "google-wycheproof",

1119 "version": "0.9rc5"

1120 },

1121 "publicKey": {

1122 "type": "EDDSAPublicKey",

1123 "curve": "edwards25519",

1124 "keySize": 255,

1125 "pk": "100fdf47fb94f1536a4f7c3fda27383fa03375a8f527c537e6f1703c47f94f86"

1126 },

1127 "publicKeyDer": "302a300506032b6570032100100fdf47fb94f1536a4f7c3fda27383fa03375a8f527c537e6f1703c47f94f86",

1128

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEA/fR/uU8VNqT3w/2ic4P6Azdaj1J8U35vFwPEf5T4Y=\n-----END PUBLIC KEY-----\n",

1129 "publicKeyJwk": {

1130 "kty": "OKP",

1131 "crv": "Ed25519",

1132 "kid": "none",

1133 "x": "EA_fR_uU8VNqT3w_2ic4P6Azdaj1J8U35vFwPEf5T4Y"

1134 },

1135 "tests": [

1136 {

1137 "tcId": 84,

1138 "comment": "Signature with S just under the bound. [David Benjamin]",

1139 "flags": [

1140 "Ktv"

1141 ],

1142 "msg": "124e583f8b8eca58bb29c271b41d36986bbc45541f8e51f9cb0133eca447601e",

1143

          "sig": "dac119d6ca87fc59ae611c157048f4d4fc932a149dbe20ec6effd1436abf83ea05c7df0fef06147241259113909bc71bd3c53ba4464ffcad3c0968f2ffffff0f",

1144 "result": "valid"

1145 }

1146 ]

1147 },

1148 {

1149 "type": "EddsaVerify",

1150 "source": {

1151 "name": "google-wycheproof",

1152 "version": "0.9rc5"

1153 },

1154 "publicKey": {

1155 "type": "EDDSAPublicKey",

1156 "curve": "edwards25519",

1157 "keySize": 255,

1158 "pk": "100fdf47fb94f1536a4f7c3fda27383fa03375a8f527c537e6f1703c47f94f86"

1159 },

1160 "publicKeyDer": "302a300506032b6570032100100fdf47fb94f1536a4f7c3fda27383fa03375a8f527c537e6f1703c47f94f86",

1161

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEA/fR/uU8VNqT3w/2ic4P6Azdaj1J8U35vFwPEf5T4Y=\n-----END PUBLIC KEY-----\n",

1162 "publicKeyJwk": {

1163 "kty": "OKP",

1164 "crv": "Ed25519",

1165 "kid": "none",

1166 "x": "EA_fR_uU8VNqT3w_2ic4P6Azdaj1J8U35vFwPEf5T4Y"

1167 },

1168 "tests": [

1169 {

1170 "tcId": 85,

1171 "comment": "Signature with S just above the bound. [David Benjamin]",

1172 "flags": [

1173 "InvalidKtv"

1174 ],

1175 "msg": "6a0bc2b0057cedfc0fa2e3f7f7d39279b30f454a69dfd1117c758d86b19d85e0",

1176

          "sig": "0971f86d2c9c78582524a103cb9cf949522ae528f8054dc20107d999be673ff4e25ebf2f2928766b1248bec6e91697775f8446639ede46ad4df4053000000010",

1177 "result": "invalid"

1178 }

1179 ]

1180 },

1181 {

1182 "type": "EddsaVerify",

1183 "source": {

1184 "name": "google-wycheproof",

1185 "version": "0.9rc5"

1186 },

1187 "publicKey": {

1188 "type": "EDDSAPublicKey",

1189 "curve": "edwards25519",

1190 "keySize": 255,

1191 "pk": "8fd659b77b558ed93882c1157438450ac86ec62d421d568e98ee236f3810295a"

1192 },

1193 "publicKeyDer": "302a300506032b65700321008fd659b77b558ed93882c1157438450ac86ec62d421d568e98ee236f3810295a",

1194

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAj9ZZt3tVjtk4gsEVdDhFCshuxi1CHVaOmO4jbzgQKVo=\n-----END PUBLIC KEY-----\n",

1195 "publicKeyJwk": {

1196 "kty": "OKP",

1197 "crv": "Ed25519",

1198 "kid": "none",

1199 "x": "j9ZZt3tVjtk4gsEVdDhFCshuxi1CHVaOmO4jbzgQKVo"

1200 },

1201 "tests": [

1202 {

1203 "tcId": 86,

1204 "comment": "Random test failure 1",

1205 "flags": [

1206 "Ktv"

1207 ],

1208

          "msg": "b0729a713593a92e46b56eaa66b9e435f7a09a8e7de03b078f6f282285276635f301e7aaafe42187c45d6f5b13f9f16b11195cc125c05b90d24dfe4c",

1209

          "sig": "7db17557ac470c0eda4eedaabce99197ab62565653cf911f632ee8be0e5ffcfc88fb94276b42e0798fd3aa2f0318be7fc6a29fae75f70c3dcdc414a0ad866601",

1210 "result": "valid"

1211 }

1212 ]

1213 },

1214 {

1215 "type": "EddsaVerify",

1216 "source": {

1217 "name": "google-wycheproof",

1218 "version": "0.9rc5"

1219 },

1220 "publicKey": {

1221 "type": "EDDSAPublicKey",

1222 "curve": "edwards25519",

1223 "keySize": 255,

1224 "pk": "2a606bf67ac770c607038b004101b325edb569efd3413d2d1f2c3e6b4e6e3082"

1225 },

1226 "publicKeyDer": "302a300506032b65700321002a606bf67ac770c607038b004101b325edb569efd3413d2d1f2c3e6b4e6e3082",

1227

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKmBr9nrHcMYHA4sAQQGzJe21ae/TQT0tHyw+a05uMII=\n-----END PUBLIC KEY-----\n",

1228 "publicKeyJwk": {

1229 "kty": "OKP",

1230 "crv": "Ed25519",

1231 "kid": "none",

1232 "x": "KmBr9nrHcMYHA4sAQQGzJe21ae_TQT0tHyw-a05uMII"

1233 },

1234 "tests": [

1235 {

1236 "tcId": 87,

1237 "comment": "Random test failure 2",

1238 "flags": [

1239 "Ktv"

1240 ],

1241

          "msg": "a8546e50ba31cae3234310d32672447be213fad91a227a19669c53d309b959782b0e6b71f8791fdb470043b58122003157d2d96a43a6cbd7d3a8d86bf4c97391883e268d50af80e1e6e12939c2bd50ca746cdadfad4edf1bda875299740724148efb1ebe73fb60088cda890317658627a5f7ab5a0c075d9d8f3f97b6492b35519e50ff6b38377432a7081f9176bb1c29a862deac1336ca20b097a47829cec10a6a7cec178eda2d12f6dc6c87f910454af0123555ba184e68804d9cced60fd5c8c90943e56599c8f0ba59a38491ba5e5a53460682474c07e40ca142983314fd762856bb1093f359da6eb0a756bd93a3160c10dd8feea6b97e7c6a17cb54bd5d7649c05c66d7bdee056671dfdaf689fa3945bb8e29a429f4bd5d355dce9687b06f01d5e33e3999f0e8",

1242

          "sig": "67d84d4c3945aaf06e06d524be63acbfb5dbb1988c4aea96a5ee9f7a9b9eecc29df4f66b8aa1d9e8607a58fb1ef0c2ad69aac005b4f58e34103344a9c8871a09",

1243 "result": "valid"

1244 }

1245 ]

1246 },

1247 {

1248 "type": "EddsaVerify",

1249 "source": {

1250 "name": "google-wycheproof",

1251 "version": "0.9rc5"

1252 },

1253 "publicKey": {

1254 "type": "EDDSAPublicKey",

1255 "curve": "edwards25519",

1256 "keySize": 255,

1257 "pk": "c9c946cbc5544ac74eef491f07c5881c16faf7ec31ce4aa91bb60ae7b4539051"

1258 },

1259 "publicKeyDer": "302a300506032b6570032100c9c946cbc5544ac74eef491f07c5881c16faf7ec31ce4aa91bb60ae7b4539051",

1260

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAyclGy8VUSsdO70kfB8WIHBb69+wxzkqpG7YK57RTkFE=\n-----END PUBLIC KEY-----\n",

1261 "publicKeyJwk": {

1262 "kty": "OKP",

1263 "crv": "Ed25519",

1264 "kid": "none",

1265 "x": "yclGy8VUSsdO70kfB8WIHBb69-wxzkqpG7YK57RTkFE"

1266 },

1267 "tests": [

1268 {

1269 "tcId": 88,

1270 "comment": "Random test failure 3",

1271 "flags": [

1272 "Ktv"

1273 ],

1274

          "msg": "cd2212eddb0706f62c995cef958634f0cb7793444cbf4d30e81c27c41ebea6cb02607510131f9c015692dfd521b148841e9a2d3564d20ac401f6cb8e40f520fe0cafbeaa88840b83013369d879f013463fe52a13267aa0c8c59c45cde9399cd1e6be8cc64cf48315ac2eb31a1c567a4fb7d601746d1f63b5ac020712adbbe07519bded6f",

1275

          "sig": "24087d47f3e20af51b9668ae0a88ce76586802d0ec75d8c0f28fc30962b5e1d1a1d509571a1624ed125a8df92a6e963728d6b5de99200b8e285f70feb6f05207",

1276 "result": "valid"

1277 }

1278 ]

1279 },

1280 {

1281 "type": "EddsaVerify",

1282 "source": {

1283 "name": "google-wycheproof",

1284 "version": "0.9rc5"

1285 },

1286 "publicKey": {

1287 "type": "EDDSAPublicKey",

1288 "curve": "edwards25519",

1289 "keySize": 255,

1290 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1291 },

1292 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1293

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1294 "publicKeyJwk": {

1295 "kty": "OKP",

1296 "crv": "Ed25519",

1297 "kid": "none",

1298 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1299 },

1300 "tests": [

1301 {

1302 "tcId": 89,

1303 "comment": "Random test failure 4",

1304 "flags": [

1305 "Ktv"

1306 ],

1307 "msg": "ec5c7cb078",

1308

          "sig": "d920d421a5956b69bfe1ba834c025e2babb6c7a6d78c97de1d9bb1116dfdd1185147b2887e34e15578172e150774275ea2aad9e02106f7e8ca1caa669a066f0c",

1309 "result": "valid"

1310 }

1311 ]

1312 },

1313 {

1314 "type": "EddsaVerify",

1315 "source": {

1316 "name": "google-wycheproof",

1317 "version": "0.9rc5"

1318 },

1319 "publicKey": {

1320 "type": "EDDSAPublicKey",

1321 "curve": "edwards25519",

1322 "keySize": 255,

1323 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1324 },

1325 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1326

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1327 "publicKeyJwk": {

1328 "kty": "OKP",

1329 "crv": "Ed25519",

1330 "kid": "none",

1331 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1332 },

1333 "tests": [

1334 {

1335 "tcId": 90,

1336 "comment": "Random test failure 5",

1337 "flags": [

1338 "Ktv"

1339 ],

1340 "msg": "4668c6a76f0e482190a7175b9f3806a5fe4314a004fa69f988373f7a",

1341

          "sig": "4f62daf7f7c162038552ad7d306e195baa37ecf6ca7604142679d7d1128e1f8af52e4cb3545748c44ef1ff1c64e877e4f4d248259b7f6eb56e3ef72097dc8e0c",

1342 "result": "valid"

1343 }

1344 ]

1345 },

1346 {

1347 "type": "EddsaVerify",

1348 "source": {

1349 "name": "google-wycheproof",

1350 "version": "0.9rc5"

1351 },

1352 "publicKey": {

1353 "type": "EDDSAPublicKey",

1354 "curve": "edwards25519",

1355 "keySize": 255,

1356 "pk": "c29ec1894e06d27b4e40486b4fa5063d66a746c7f9c323b12203c03b72b8b78a"

1357 },

1358 "publicKeyDer": "302a300506032b6570032100c29ec1894e06d27b4e40486b4fa5063d66a746c7f9c323b12203c03b72b8b78a",

1359

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwp7BiU4G0ntOQEhrT6UGPWanRsf5wyOxIgPAO3K4t4o=\n-----END PUBLIC KEY-----\n",

1360 "publicKeyJwk": {

1361 "kty": "OKP",

1362 "crv": "Ed25519",

1363 "kid": "none",

1364 "x": "wp7BiU4G0ntOQEhrT6UGPWanRsf5wyOxIgPAO3K4t4o"

1365 },

1366 "tests": [

1367 {

1368 "tcId": 91,

1369 "comment": "Random test failure 6",

1370 "flags": [

1371 "Ktv"

1372 ],

1373 "msg": "0f325ffd87e58131ffa23c05ea4579513b287fdba87b44",

1374

          "sig": "6669acf94667c5b541afe5307bde9476b13ae7e0e6058a772101ac8eb0a94331428eb4db0a2c68a9b6c1763b8624dab259b0876cdcfaeacc17b21a18e3fc010a",

1375 "result": "valid"

1376 }

1377 ]

1378 },

1379 {

1380 "type": "EddsaVerify",

1381 "source": {

1382 "name": "google-wycheproof",

1383 "version": "0.9rc5"

1384 },

1385 "publicKey": {

1386 "type": "EDDSAPublicKey",

1387 "curve": "edwards25519",

1388 "keySize": 255,

1389 "pk": "cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10"

1390 },

1391 "publicKeyDer": "302a300506032b6570032100cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10",

1392

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA=\n-----END PUBLIC KEY-----\n",

1393 "publicKeyJwk": {

1394 "kty": "OKP",

1395 "crv": "Ed25519",

1396 "kid": "none",

1397 "x": "z9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA"

1398 },

1399 "tests": [

1400 {

1401 "tcId": 92,

1402 "comment": "Random test failure 7",

1403 "flags": [

1404 "Ktv"

1405 ],

1406 "msg": "ec5c7cb078",

1407

          "sig": "30490c28f806298225df62103521dcee047153912c33ab8ab8bbdd1ffabd70fd4fdb360f05be535b067d1cf4e78c2cb432206bf280aab3bd21aaa1cb894c5b06",

1408 "result": "valid"

1409 }

1410 ]

1411 },

1412 {

1413 "type": "EddsaVerify",

1414 "source": {

1415 "name": "google-wycheproof",

1416 "version": "0.9rc5"

1417 },

1418 "publicKey": {

1419 "type": "EDDSAPublicKey",

1420 "curve": "edwards25519",

1421 "keySize": 255,

1422 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1423 },

1424 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1425

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1426 "publicKeyJwk": {

1427 "kty": "OKP",

1428 "crv": "Ed25519",

1429 "kid": "none",

1430 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1431 },

1432 "tests": [

1433 {

1434 "tcId": 93,

1435 "comment": "Random test failure 8",

1436 "flags": [

1437 "Ktv"

1438 ],

1439 "msg": "5dc9bb87eb11621a93f92abe53515697d2611b2eef73",

1440

          "sig": "deecafb6f2ede73fec91a6f10e45b9c1c61c4b9bfbe6b6147e2de0b1df6938971f7896c3ab83851fb5d9e537037bff0fca0ccb4a3cc38f056f91f7d7a0557e08",

1441 "result": "valid"

1442 }

1443 ]

1444 },

1445 {

1446 "type": "EddsaVerify",

1447 "source": {

1448 "name": "google-wycheproof",

1449 "version": "0.9rc5"

1450 },

1451 "publicKey": {

1452 "type": "EDDSAPublicKey",

1453 "curve": "edwards25519",

1454 "keySize": 255,

1455 "pk": "cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10"

1456 },

1457 "publicKeyDer": "302a300506032b6570032100cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10",

1458

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA=\n-----END PUBLIC KEY-----\n",

1459 "publicKeyJwk": {

1460 "kty": "OKP",

1461 "crv": "Ed25519",

1462 "kid": "none",

1463 "x": "z9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA"

1464 },

1465 "tests": [

1466 {

1467 "tcId": 94,

1468 "comment": "Random test failure 9",

1469 "flags": [

1470 "Ktv"

1471 ],

1472 "msg": "67484059b2490b1a0a4f8dee77979e26",

1473

          "sig": "4cd4f77ed473a6647387f3163541c67a1708a3c3bd1673247cb87f0cb68b3c56f04bfa72970c8a483efe659c87009ab4020b590b6641316b3deddb5450544e02",

1474 "result": "valid"

1475 }

1476 ]

1477 },

1478 {

1479 "type": "EddsaVerify",

1480 "source": {

1481 "name": "google-wycheproof",

1482 "version": "0.9rc5"

1483 },

1484 "publicKey": {

1485 "type": "EDDSAPublicKey",

1486 "curve": "edwards25519",

1487 "keySize": 255,

1488 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1489 },

1490 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1491

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1492 "publicKeyJwk": {

1493 "kty": "OKP",

1494 "crv": "Ed25519",

1495 "kid": "none",

1496 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1497 },

1498 "tests": [

1499 {

1500 "tcId": 95,

1501 "comment": "Random test failure 10",

1502 "flags": [

1503 "Ktv"

1504 ],

1505 "msg": "7dcfe60f881e1285676f35b68a1b2dbcdd7be6f719a288ababc28d36e3a42ac3010a1ca54b32760e74",

1506

          "sig": "7f8663cf98cbd39d5ff553f00bcf3d0d520605794f8866ce75714d77cc51e66c91818b657d7b0dae430a68353506edc4a714c345f5ddb5c8b958ba3d035f7a01",

1507 "result": "valid"

1508 }

1509 ]

1510 },

1511 {

1512 "type": "EddsaVerify",

1513 "source": {

1514 "name": "google-wycheproof",

1515 "version": "0.9rc5"

1516 },

1517 "publicKey": {

1518 "type": "EDDSAPublicKey",

1519 "curve": "edwards25519",

1520 "keySize": 255,

1521 "pk": "cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10"

1522 },

1523 "publicKeyDer": "302a300506032b6570032100cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10",

1524

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA=\n-----END PUBLIC KEY-----\n",

1525 "publicKeyJwk": {

1526 "kty": "OKP",

1527 "crv": "Ed25519",

1528 "kid": "none",

1529 "x": "z9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA"

1530 },

1531 "tests": [

1532 {

1533 "tcId": 96,

1534 "comment": "Random test failure 11",

1535 "flags": [

1536 "Ktv"

1537 ],

1538

          "msg": "a020a4381dc9141f47ee508871ab7a8b5a3648727c4281ae9932376f23a8e1bcda0626b7129197d864178631ec89c4332dbb18",

1539

          "sig": "1e41a24fe732bd7cab14c2a2f5134ee8c87fcbd2e987e60957ed9239e5c32404d56977e1b4282871896cb10625a1937468e4dc266e16a9c1b8e9891177eca802",

1540 "result": "valid"

1541 }

1542 ]

1543 },

1544 {

1545 "type": "EddsaVerify",

1546 "source": {

1547 "name": "google-wycheproof",

1548 "version": "0.9rc5"

1549 },

1550 "publicKey": {

1551 "type": "EDDSAPublicKey",

1552 "curve": "edwards25519",

1553 "keySize": 255,

1554 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1555 },

1556 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1557

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1558 "publicKeyJwk": {

1559 "kty": "OKP",

1560 "crv": "Ed25519",

1561 "kid": "none",

1562 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1563 },

1564 "tests": [

1565 {

1566 "tcId": 97,

1567 "comment": "Random test failure 12",

1568 "flags": [

1569 "Ktv"

1570 ],

1571 "msg": "58e456064dff471109def4ca27fa8310a1df32739655b624f27e6418d34b7f007173f3faa5",

1572

          "sig": "6aab49e5c0bc309b783378ee03ffda282f0185cdf94c847701ff307a6ee8d0865411c44e0a8206f6a5f606107451940c2593af790ce1860f4c14ab25b2deae08",

1573 "result": "valid"

1574 }

1575 ]

1576 },

1577 {

1578 "type": "EddsaVerify",

1579 "source": {

1580 "name": "google-wycheproof",

1581 "version": "0.9rc5"

1582 },

1583 "publicKey": {

1584 "type": "EDDSAPublicKey",

1585 "curve": "edwards25519",

1586 "keySize": 255,

1587 "pk": "529919c9c780985a841c42ba6c180ff2d67a276ccfbe281080e47ab71a758f56"

1588 },

1589 "publicKeyDer": "302a300506032b6570032100529919c9c780985a841c42ba6c180ff2d67a276ccfbe281080e47ab71a758f56",

1590

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAUpkZyceAmFqEHEK6bBgP8tZ6J2zPvigQgOR6txp1j1Y=\n-----END PUBLIC KEY-----\n",

1591 "publicKeyJwk": {

1592 "kty": "OKP",

1593 "crv": "Ed25519",

1594 "kid": "none",

1595 "x": "UpkZyceAmFqEHEK6bBgP8tZ6J2zPvigQgOR6txp1j1Y"

1596 },

1597 "tests": [

1598 {

1599 "tcId": 98,

1600 "comment": "Random test failure 13",

1601 "flags": [

1602 "Ktv"

1603 ],

1604 "msg": "e1cbf2d86827825613fb7a85811d",

1605

          "sig": "01abfa4d6bbc726b196928ec84fd03f0c953a4fa2b228249562ff1442a4f63a7150b064f3712b51c2af768d2c2711a71aabf8d186833e941a0301b82f0502905",

1606 "result": "valid"

1607 }

1608 ]

1609 },

1610 {

1611 "type": "EddsaVerify",

1612 "source": {

1613 "name": "google-wycheproof",

1614 "version": "0.9rc5"

1615 },

1616 "publicKey": {

1617 "type": "EDDSAPublicKey",

1618 "curve": "edwards25519",

1619 "keySize": 255,

1620 "pk": "cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10"

1621 },

1622 "publicKeyDer": "302a300506032b6570032100cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10",

1623

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA=\n-----END PUBLIC KEY-----\n",

1624 "publicKeyJwk": {

1625 "kty": "OKP",

1626 "crv": "Ed25519",

1627 "kid": "none",

1628 "x": "z9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA"

1629 },

1630 "tests": [

1631 {

1632 "tcId": 99,

1633 "comment": "Random test failure 14",

1634 "flags": [

1635 "Ktv"

1636 ],

1637 "msg": "a25176b3afea318b2ec11ddacb10caf7179c0b3f8eabbfa2895581138d3c1e0e",

1638

          "sig": "2a833aadecd9f28235cb5896bf3781521dc71f28af2e91dbe1735a61dce3e31ac15ca24b3fc47817a59d386bbbb2ce60a6adc0a2703bb2bdea8f70f91051f706",

1639 "result": "valid"

1640 }

1641 ]

1642 },

1643 {

1644 "type": "EddsaVerify",

1645 "source": {

1646 "name": "google-wycheproof",

1647 "version": "0.9rc5"

1648 },

1649 "publicKey": {

1650 "type": "EDDSAPublicKey",

1651 "curve": "edwards25519",

1652 "keySize": 255,

1653 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1654 },

1655 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1656

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1657 "publicKeyJwk": {

1658 "kty": "OKP",

1659 "crv": "Ed25519",

1660 "kid": "none",

1661 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1662 },

1663 "tests": [

1664 {

1665 "tcId": 100,

1666 "comment": "Random test failure 15",

1667 "flags": [

1668 "Ktv"

1669 ],

1670 "msg": "a1",

1671

          "sig": "1a74ed2cbdc7d8f3827014e8e6ecf8fd2698ac8f86833acccdd400df710fe0d6b0543c9cfa00d52bf024ab7ce0d91981944097233ec134d5c7abbd44bfd32d0d",

1672 "result": "valid"

1673 }

1674 ]

1675 },

1676 {

1677 "type": "EddsaVerify",

1678 "source": {

1679 "name": "google-wycheproof",

1680 "version": "0.9rc5"

1681 },

1682 "publicKey": {

1683 "type": "EDDSAPublicKey",

1684 "curve": "edwards25519",

1685 "keySize": 255,

1686 "pk": "2252b3d57c74cbf8bc460dc2e082847926bc022f09ab6ae95756362bfd1167c1"

1687 },

1688 "publicKeyDer": "302a300506032b65700321002252b3d57c74cbf8bc460dc2e082847926bc022f09ab6ae95756362bfd1167c1",

1689

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAIlKz1Xx0y/i8Rg3C4IKEeSa8Ai8Jq2rpV1Y2K/0RZ8E=\n-----END PUBLIC KEY-----\n",

1690 "publicKeyJwk": {

1691 "kty": "OKP",

1692 "crv": "Ed25519",

1693 "kid": "none",

1694 "x": "IlKz1Xx0y_i8Rg3C4IKEeSa8Ai8Jq2rpV1Y2K_0RZ8E"

1695 },

1696 "tests": [

1697 {

1698 "tcId": 101,

1699 "comment": "Random test failure 16",

1700 "flags": [

1701 "Ktv"

1702 ],

1703 "msg": "975ef941710071a9e1e6325a0c860becd7c695b5117c3107b686e330e5",

1704

          "sig": "af0fd9dda7e03e12313410d8d8844ebb6fe6b7f65141f22d7bcba5695a25414a9e54326fb44d59fb14707899a8aae70857b23d4080d7ab2c396ef3a36d45ce02",

1705 "result": "valid"

1706 }

1707 ]

1708 },

1709 {

1710 "type": "EddsaVerify",

1711 "source": {

1712 "name": "google-wycheproof",

1713 "version": "0.9rc5"

1714 },

1715 "publicKey": {

1716 "type": "EDDSAPublicKey",

1717 "curve": "edwards25519",

1718 "keySize": 255,

1719 "pk": "c0a773110f975de3732355bb7ec7f0c41c091c0252966070205516693b992a4a"

1720 },

1721 "publicKeyDer": "302a300506032b6570032100c0a773110f975de3732355bb7ec7f0c41c091c0252966070205516693b992a4a",

1722

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwKdzEQ+XXeNzI1W7fsfwxBwJHAJSlmBwIFUWaTuZKko=\n-----END PUBLIC KEY-----\n",

1723 "publicKeyJwk": {

1724 "kty": "OKP",

1725 "crv": "Ed25519",

1726 "kid": "none",

1727 "x": "wKdzEQ-XXeNzI1W7fsfwxBwJHAJSlmBwIFUWaTuZKko"

1728 },

1729 "tests": [

1730 {

1731 "tcId": 102,

1732 "comment": "Random test failure 17",

1733 "flags": [

1734 "Ktv"

1735 ],

1736 "msg": "",

1737

          "sig": "0280427e713378f49d478df6373c6cac847b622b567daa2376c839e7ac10e22c380ab0fa8617c9dcfe76c4d9db5459b21dc1413726e46cc8f387d359e344f407",

1738 "result": "valid"

1739 }

1740 ]

1741 },

1742 {

1743 "type": "EddsaVerify",

1744 "source": {

1745 "name": "google-wycheproof",

1746 "version": "0.9rc5"

1747 },

1748 "publicKey": {

1749 "type": "EDDSAPublicKey",

1750 "curve": "edwards25519",

1751 "keySize": 255,

1752 "pk": "cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10"

1753 },

1754 "publicKeyDer": "302a300506032b6570032100cfda5b899e35764c5229e59295fe1222b7ddce176643697c29e46ecbba10cf10",

1755

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA=\n-----END PUBLIC KEY-----\n",

1756 "publicKeyJwk": {

1757 "kty": "OKP",

1758 "crv": "Ed25519",

1759 "kid": "none",

1760 "x": "z9pbiZ41dkxSKeWSlf4SIrfdzhdmQ2l8KeRuy7oQzxA"

1761 },

1762 "tests": [

1763 {

1764 "tcId": 103,

1765 "comment": "Random test failure 18",

1766 "flags": [

1767 "Ktv"

1768 ],

1769 "msg": "a9e6d94870a67a9fe1cf13b1e6f9150cdd407bf6480ec841ea586ae3935e9787163cf419c1",

1770

          "sig": "c97e3190f83bae7729ba473ad46b420b8aad735f0808ea42c0f898ccfe6addd4fd9d9fa3355d5e67ee21ab7e1f805cd07f1fce980e307f4d7ad36cc924eef00c",

1771 "result": "valid"

1772 }

1773 ]

1774 },

1775 {

1776 "type": "EddsaVerify",

1777 "source": {

1778 "name": "google-wycheproof",

1779 "version": "0.9rc5"

1780 },

1781 "publicKey": {

1782 "type": "EDDSAPublicKey",

1783 "curve": "edwards25519",

1784 "keySize": 255,

1785 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1786 },

1787 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1788

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1789 "publicKeyJwk": {

1790 "kty": "OKP",

1791 "crv": "Ed25519",

1792 "kid": "none",

1793 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1794 },

1795 "tests": [

1796 {

1797 "tcId": 104,

1798 "comment": "Random test failure 19",

1799 "flags": [

1800 "Ktv"

1801 ],

1802 "msg": "11cb1eafa4c42a8402c4193c4696f7b2e6d4585e4b42dcf1a8b67a80b2da80bc9d4b649fb2f35eaf1f56c426fd0b",

1803

          "sig": "14ceb2eaf4688d995d482f44852d71ad878cd7c77b41e60b0065fd01a59b054ee74759224187dbde9e59a763a70277c960892ef89fba997aba2576b2c54ba608",

1804 "result": "valid"

1805 }

1806 ]

1807 },

1808 {

1809 "type": "EddsaVerify",

1810 "source": {

1811 "name": "google-wycheproof",

1812 "version": "0.9rc5"

1813 },

1814 "publicKey": {

1815 "type": "EDDSAPublicKey",

1816 "curve": "edwards25519",

1817 "keySize": 255,

1818 "pk": "c9c946cbc5544ac74eef491f07c5881c16faf7ec31ce4aa91bb60ae7b4539051"

1819 },

1820 "publicKeyDer": "302a300506032b6570032100c9c946cbc5544ac74eef491f07c5881c16faf7ec31ce4aa91bb60ae7b4539051",

1821

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAyclGy8VUSsdO70kfB8WIHBb69+wxzkqpG7YK57RTkFE=\n-----END PUBLIC KEY-----\n",

1822 "publicKeyJwk": {

1823 "kty": "OKP",

1824 "crv": "Ed25519",

1825 "kid": "none",

1826 "x": "yclGy8VUSsdO70kfB8WIHBb69-wxzkqpG7YK57RTkFE"

1827 },

1828 "tests": [

1829 {

1830 "tcId": 105,

1831 "comment": "Random test failure 20",

1832 "flags": [

1833 "Ktv"

1834 ],

1835 "msg": "27d465bc632743522aefa23c",

1836

          "sig": "c2656951e2a0285585a51ff0eda7e9a23c2dfd2ffa273aee7808f4604e8f9a8c8ea49e9fce4eb2d8d75d36b7238fe6fc13b6c5d9427dd58f8c6615d033c0bd0f",

1837 "result": "valid"

1838 }

1839 ]

1840 },

1841 {

1842 "type": "EddsaVerify",

1843 "source": {

1844 "name": "google-wycheproof",

1845 "version": "0.9rc5"

1846 },

1847 "publicKey": {

1848 "type": "EDDSAPublicKey",

1849 "curve": "edwards25519",

1850 "keySize": 255,

1851 "pk": "c29ec1894e06d27b4e40486b4fa5063d66a746c7f9c323b12203c03b72b8b78a"

1852 },

1853 "publicKeyDer": "302a300506032b6570032100c29ec1894e06d27b4e40486b4fa5063d66a746c7f9c323b12203c03b72b8b78a",

1854

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwp7BiU4G0ntOQEhrT6UGPWanRsf5wyOxIgPAO3K4t4o=\n-----END PUBLIC KEY-----\n",

1855 "publicKeyJwk": {

1856 "kty": "OKP",

1857 "crv": "Ed25519",

1858 "kid": "none",

1859 "x": "wp7BiU4G0ntOQEhrT6UGPWanRsf5wyOxIgPAO3K4t4o"

1860 },

1861 "tests": [

1862 {

1863 "tcId": 106,

1864 "comment": "Random test failure 21",

1865 "flags": [

1866 "Ktv"

1867 ],

1868 "msg": "5ffa",

1869

          "sig": "931e5152fcef078c22cc5d6a3a65f06e396289f6f5f2d1efa6340254a53526ef5dc6874eeddf35c3f50991c53cd02bf06313e37d93ee1f7022128ffa3b8f300b",

1870 "result": "valid"

1871 }

1872 ]

1873 },

1874 {

1875 "type": "EddsaVerify",

1876 "source": {

1877 "name": "google-wycheproof",

1878 "version": "0.9rc5"

1879 },

1880 "publicKey": {

1881 "type": "EDDSAPublicKey",

1882 "curve": "edwards25519",

1883 "keySize": 255,

1884 "pk": "529919c9c780985a841c42ba6c180ff2d67a276ccfbe281080e47ab71a758f56"

1885 },

1886 "publicKeyDer": "302a300506032b6570032100529919c9c780985a841c42ba6c180ff2d67a276ccfbe281080e47ab71a758f56",

1887

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAUpkZyceAmFqEHEK6bBgP8tZ6J2zPvigQgOR6txp1j1Y=\n-----END PUBLIC KEY-----\n",

1888 "publicKeyJwk": {

1889 "kty": "OKP",

1890 "crv": "Ed25519",

1891 "kid": "none",

1892 "x": "UpkZyceAmFqEHEK6bBgP8tZ6J2zPvigQgOR6txp1j1Y"

1893 },

1894 "tests": [

1895 {

1896 "tcId": 107,

1897 "comment": "Random test failure 22",

1898 "flags": [

1899 "Ktv"

1900 ],

1901 "msg": "25",

1902

          "sig": "e4ae21f7a8f4b3b325c161a8c6e53e2edd7005b9c2f8a2e3b0ac4ba94aa80be6f2ee22ac8d4a96b9a3eb73a825e7bb5aff4a3393bf5b4a38119e9c9b1b041106",

1903 "result": "valid"

1904 }

1905 ]

1906 },

1907 {

1908 "type": "EddsaVerify",

1909 "source": {

1910 "name": "google-wycheproof",

1911 "version": "0.9rc5"

1912 },

1913 "publicKey": {

1914 "type": "EDDSAPublicKey",

1915 "curve": "edwards25519",

1916 "keySize": 255,

1917 "pk": "2252b3d57c74cbf8bc460dc2e082847926bc022f09ab6ae95756362bfd1167c1"

1918 },

1919 "publicKeyDer": "302a300506032b65700321002252b3d57c74cbf8bc460dc2e082847926bc022f09ab6ae95756362bfd1167c1",

1920

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAIlKz1Xx0y/i8Rg3C4IKEeSa8Ai8Jq2rpV1Y2K/0RZ8E=\n-----END PUBLIC KEY-----\n",

1921 "publicKeyJwk": {

1922 "kty": "OKP",

1923 "crv": "Ed25519",

1924 "kid": "none",

1925 "x": "IlKz1Xx0y_i8Rg3C4IKEeSa8Ai8Jq2rpV1Y2K_0RZ8E"

1926 },

1927 "tests": [

1928 {

1929 "tcId": 108,

1930 "comment": "Random test failure 23",

1931 "flags": [

1932 "Ktv"

1933 ],

1934 "msg": "80fdd6218f29c8c8f6bd820945f9b0854e3a8824",

1935

          "sig": "e097e0bd0370bff5bde359175a11b728ee9639095d5df8eda496395565616edfe079977f7d4dc8c75d6113a83d6a55e6e1676408c0967a2906339b43337dcb01",

1936 "result": "valid"

1937 }

1938 ]

1939 },

1940 {

1941 "type": "EddsaVerify",

1942 "source": {

1943 "name": "google-wycheproof",

1944 "version": "0.9rc5"

1945 },

1946 "publicKey": {

1947 "type": "EDDSAPublicKey",

1948 "curve": "edwards25519",

1949 "keySize": 255,

1950 "pk": "2a606bf67ac770c607038b004101b325edb569efd3413d2d1f2c3e6b4e6e3082"

1951 },

1952 "publicKeyDer": "302a300506032b65700321002a606bf67ac770c607038b004101b325edb569efd3413d2d1f2c3e6b4e6e3082",

1953

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKmBr9nrHcMYHA4sAQQGzJe21ae/TQT0tHyw+a05uMII=\n-----END PUBLIC KEY-----\n",

1954 "publicKeyJwk": {

1955 "kty": "OKP",

1956 "crv": "Ed25519",

1957 "kid": "none",

1958 "x": "KmBr9nrHcMYHA4sAQQGzJe21ae_TQT0tHyw-a05uMII"

1959 },

1960 "tests": [

1961 {

1962 "tcId": 109,

1963 "comment": "Random test failure 24",

1964 "flags": [

1965 "Ktv"

1966 ],

1967 "msg": "b477b0480bb84642608b908d29a51cf2fce63f24ee95",

1968

          "sig": "28fafbb62b4d688fa79e1ac92851f46e319b161f801d4dc09acc21fdd6780a2c4292b8c1003c61c2bcebe7f3f88ccc4bb26d407387c5f27cb8c94cf6ce810405",

1969 "result": "valid"

1970 }

1971 ]

1972 },

1973 {

1974 "type": "EddsaVerify",

1975 "source": {

1976 "name": "google-wycheproof",

1977 "version": "0.9rc5"

1978 },

1979 "publicKey": {

1980 "type": "EDDSAPublicKey",

1981 "curve": "edwards25519",

1982 "keySize": 255,

1983 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

1984 },

1985 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

1986

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

1987 "publicKeyJwk": {

1988 "kty": "OKP",

1989 "crv": "Ed25519",

1990 "kid": "none",

1991 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

1992 },

1993 "tests": [

1994 {

1995 "tcId": 110,

1996 "comment": "Random test failure 25",

1997 "flags": [

1998 "Ktv"

1999 ],

2000 "msg": "aa365b442d12b7f3c925",

2001

          "sig": "83c40ce13d483cc58ff65844875862d93df4bd367af77efa469ec06a8ed9e6d7905a04879535708ddf225567a815c9b941d405c98e918fd0c151165cea7fb101",

2002 "result": "valid"

2003 }

2004 ]

2005 },

2006 {

2007 "type": "EddsaVerify",

2008 "source": {

2009 "name": "google-wycheproof",

2010 "version": "0.9rc5"

2011 },

2012 "publicKey": {

2013 "type": "EDDSAPublicKey",

2014 "curve": "edwards25519",

2015 "keySize": 255,

2016 "pk": "54cda623245759ad6d43e620a606908befc633d60792bc7798447a0ef38e7311"

2017 },

2018 "publicKeyDer": "302a300506032b657003210054cda623245759ad6d43e620a606908befc633d60792bc7798447a0ef38e7311",

2019

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAVM2mIyRXWa1tQ+YgpgaQi+/GM9YHkrx3mER6DvOOcxE=\n-----END PUBLIC KEY-----\n",

2020 "publicKeyJwk": {

2021 "kty": "OKP",

2022 "crv": "Ed25519",

2023 "kid": "none",

2024 "x": "VM2mIyRXWa1tQ-YgpgaQi-_GM9YHkrx3mER6DvOOcxE"

2025 },

2026 "tests": [

2027 {

2028 "tcId": 111,

2029 "comment": "Random test failure 26",

2030 "flags": [

2031 "Ktv"

2032 ],

2033 "msg": "27e792b28b2f1702",

2034

          "sig": "14d9b497c19b91d43481c55bb6f5056de252d9ecb637575c807e58e9b4c5eac8b284089d97e2192dc242014363208e2c9a3435edf8928fb1d893553e9be4c703",

2035 "result": "valid"

2036 }

2037 ]

2038 },

2039 {

2040 "type": "EddsaVerify",

2041 "source": {

2042 "name": "google-wycheproof",

2043 "version": "0.9rc5"

2044 },

2045 "publicKey": {

2046 "type": "EDDSAPublicKey",

2047 "curve": "edwards25519",

2048 "keySize": 255,

2049 "pk": "2362bac514d5fad33802642e979a1e82de6eb6f1bcbf6a5b304f2bb02b9e57fe"

2050 },

2051 "publicKeyDer": "302a300506032b65700321002362bac514d5fad33802642e979a1e82de6eb6f1bcbf6a5b304f2bb02b9e57fe",

2052

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAI2K6xRTV+tM4AmQul5oegt5utvG8v2pbME8rsCueV/4=\n-----END PUBLIC KEY-----\n",

2053 "publicKeyJwk": {

2054 "kty": "OKP",

2055 "crv": "Ed25519",

2056 "kid": "none",

2057 "x": "I2K6xRTV-tM4AmQul5oegt5utvG8v2pbME8rsCueV_4"

2058 },

2059 "tests": [

2060 {

2061 "tcId": 112,

2062 "comment": "Random test failure 27",

2063 "flags": [

2064 "Ktv"

2065 ],

2066 "msg": "eef3bb0f617c17d0420c115c21c28e3762edc7b7fb048529b84a9c2bc6",

2067

          "sig": "242ddb3a5d938d07af690b1b0ef0fa75842c5f9549bf39c8750f75614c712e7cbaf2e37cc0799db38b858d41aec5b9dd2fca6a3c8e082c10408e2cf3932b9d08",

2068 "result": "valid"

2069 }

2070 ]

2071 },

2072 {

2073 "type": "EddsaVerify",

2074 "source": {

2075 "name": "google-wycheproof",

2076 "version": "0.9rc5"

2077 },

2078 "publicKey": {

2079 "type": "EDDSAPublicKey",

2080 "curve": "edwards25519",

2081 "keySize": 255,

2082 "pk": "32ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e"

2083 },

2084 "publicKeyDer": "302a300506032b657003210032ad026f693d0d2afe7f4388d91c4c964426fcb9e3665c3ebd8650009b815c8e",

2085

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMq0Cb2k9DSr+f0OI2RxMlkQm/LnjZlw+vYZQAJuBXI4=\n-----END PUBLIC KEY-----\n",

2086 "publicKeyJwk": {

2087 "kty": "OKP",

2088 "crv": "Ed25519",

2089 "kid": "none",

2090 "x": "Mq0Cb2k9DSr-f0OI2RxMlkQm_LnjZlw-vYZQAJuBXI4"

2091 },

2092 "tests": [

2093 {

2094 "tcId": 113,

2095 "comment": "Random test failure 28",

2096 "flags": [

2097 "Ktv"

2098 ],

2099 "msg": "475f",

2100

          "sig": "71a4a06a34075f2fd47bc3abf4714d46db7e97b08cb6180d3f1539ac50b18ce51f8af8ae95ed21d4fa0daab7235925631ecea1fd9d0d8a2ba7a7583fd04b900c",

2101 "result": "valid"

2102 }

2103 ]

2104 },

2105 {

2106 "type": "EddsaVerify",

2107 "source": {

2108 "name": "google-wycheproof",

2109 "version": "0.9rc5"

2110 },

2111 "publicKey": {

2112 "type": "EDDSAPublicKey",

2113 "curve": "edwards25519",

2114 "keySize": 255,

2115 "pk": "037b55b427dc8daa0f80fcebaf0846902309f8a6cf18b465c0ce9b6539629ac8"

2116 },

2117 "publicKeyDer": "302a300506032b6570032100037b55b427dc8daa0f80fcebaf0846902309f8a6cf18b465c0ce9b6539629ac8",

2118

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAA3tVtCfcjaoPgPzrrwhGkCMJ+KbPGLRlwM6bZTlimsg=\n-----END PUBLIC KEY-----\n",

2119 "publicKeyJwk": {

2120 "kty": "OKP",

2121 "crv": "Ed25519",

2122 "kid": "none",

2123 "x": "A3tVtCfcjaoPgPzrrwhGkCMJ-KbPGLRlwM6bZTlimsg"

2124 },

2125 "tests": [

2126 {

2127 "tcId": 114,

2128 "comment": "Test case for overflow in signature generation",

2129 "flags": [

2130 "Ktv"

2131 ],

2132 "msg": "01234567",

2133

          "sig": "c964e100033ce8888b23466677da4f4aea29923f642ae508f9d0888d788150636ab9b2c3765e91bbb05153801114d9e52dc700df377212222bb766be4b8c020d",

2134 "result": "valid"

2135 }

2136 ]

2137 },

2138 {

2139 "type": "EddsaVerify",

2140 "source": {

2141 "name": "google-wycheproof",

2142 "version": "0.9rc5"

2143 },

2144 "publicKey": {

2145 "type": "EDDSAPublicKey",

2146 "curve": "edwards25519",

2147 "keySize": 255,

2148 "pk": "9c0007698f177998a7666c7cf7973e2b88e9c4946e33804a7bbe8968d2394b2e"

2149 },

2150 "publicKeyDer": "302a300506032b65700321009c0007698f177998a7666c7cf7973e2b88e9c4946e33804a7bbe8968d2394b2e",

2151

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAnAAHaY8XeZinZmx895c+K4jpxJRuM4BKe76JaNI5Sy4=\n-----END PUBLIC KEY-----\n",

2152 "publicKeyJwk": {

2153 "kty": "OKP",

2154 "crv": "Ed25519",

2155 "kid": "none",

2156 "x": "nAAHaY8XeZinZmx895c-K4jpxJRuM4BKe76JaNI5Sy4"

2157 },

2158 "tests": [

2159 {

2160 "tcId": 115,

2161 "comment": "Test case for overflow in signature generation",

2162 "flags": [

2163 "Ktv"

2164 ],

2165 "msg": "9399a6db9433d2a28d2b0c11c8794ab7d108c95b",

2166

          "sig": "176065c6d64a136a2227687d77f61f3fca3b16122c966276fd9a8b14a1a2cea4c33b3533d11101717016684e3810efbea63bb23773f7cc480174199abd734f08",

2167 "result": "valid"

2168 }

2169 ]

2170 },

2171 {

2172 "type": "EddsaVerify",

2173 "source": {

2174 "name": "google-wycheproof",

2175 "version": "0.9rc5"

2176 },

2177 "publicKey": {

2178 "type": "EDDSAPublicKey",

2179 "curve": "edwards25519",

2180 "keySize": 255,

2181 "pk": "ed3a6f9721dc9729c1f76635bcf080d7036e1c2f0228654ccbbe1e738c17b963"

2182 },

2183 "publicKeyDer": "302a300506032b6570032100ed3a6f9721dc9729c1f76635bcf080d7036e1c2f0228654ccbbe1e738c17b963",

2184

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA7TpvlyHclynB92Y1vPCA1wNuHC8CKGVMy74ec4wXuWM=\n-----END PUBLIC KEY-----\n",

2185 "publicKeyJwk": {

2186 "kty": "OKP",

2187 "crv": "Ed25519",

2188 "kid": "none",

2189 "x": "7TpvlyHclynB92Y1vPCA1wNuHC8CKGVMy74ec4wXuWM"

2190 },

2191 "tests": [

2192 {

2193 "tcId": 116,

2194 "comment": "Test case for overflow in signature generation",

2195 "flags": [

2196 "Ktv"

2197 ],

2198 "msg": "7af783afbbd44c1833ab7237ecaf63b94ffdd003",

2199

          "sig": "7ca69331eec8610d38f00e2cdbd46966cb359dcde98a257ac6f362cc00c8f4fe85c02285fe4d66e31a44cadb2bf474e1a7957609eb4fe95a71473fe6699aa70d",

2200 "result": "valid"

2201 }

2202 ]

2203 },

2204 {

2205 "type": "EddsaVerify",

2206 "source": {

2207 "name": "google-wycheproof",

2208 "version": "0.9rc5"

2209 },

2210 "publicKey": {

2211 "type": "EDDSAPublicKey",

2212 "curve": "edwards25519",

2213 "keySize": 255,

2214 "pk": "4abfb535313705a6570018440cdec1a3ae33e51f352112fa6acbd0c6bc3ea859"

2215 },

2216 "publicKeyDer": "302a300506032b65700321004abfb535313705a6570018440cdec1a3ae33e51f352112fa6acbd0c6bc3ea859",

2217

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEASr+1NTE3BaZXABhEDN7Bo64z5R81IRL6asvQxrw+qFk=\n-----END PUBLIC KEY-----\n",

2218 "publicKeyJwk": {

2219 "kty": "OKP",

2220 "crv": "Ed25519",

2221 "kid": "none",

2222 "x": "Sr-1NTE3BaZXABhEDN7Bo64z5R81IRL6asvQxrw-qFk"

2223 },

2224 "tests": [

2225 {

2226 "tcId": 117,

2227 "comment": "Test case for overflow in signature generation",

2228 "flags": [

2229 "Ktv"

2230 ],

2231 "msg": "321b5f663c19e30ee7bbb85e48ecf44db9d3f512",

2232

          "sig": "f296715e855d8aecccba782b670163dedc4458fe4eb509a856bcac450920fd2e95a3a3eb212d2d9ccaf948c39ae46a2548af125f8e2ad9b77bd18f92d59f9200",

2233 "result": "valid"

2234 }

2235 ]

2236 },

2237 {

2238 "type": "EddsaVerify",

2239 "source": {

2240 "name": "google-wycheproof",

2241 "version": "0.9rc5"

2242 },

2243 "publicKey": {

2244 "type": "EDDSAPublicKey",

2245 "curve": "edwards25519",

2246 "keySize": 255,

2247 "pk": "4f2162e6bf03a712db0efa418b7e7006e23871d9d7ec555a313885c4afd96385"

2248 },

2249 "publicKeyDer": "302a300506032b65700321004f2162e6bf03a712db0efa418b7e7006e23871d9d7ec555a313885c4afd96385",

2250

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEATyFi5r8DpxLbDvpBi35wBuI4cdnX7FVaMTiFxK/ZY4U=\n-----END PUBLIC KEY-----\n",

2251 "publicKeyJwk": {

2252 "kty": "OKP",

2253 "crv": "Ed25519",

2254 "kid": "none",

2255 "x": "TyFi5r8DpxLbDvpBi35wBuI4cdnX7FVaMTiFxK_ZY4U"

2256 },

2257 "tests": [

2258 {

2259 "tcId": 118,

2260 "comment": "Test case for overflow in signature generation",

2261 "flags": [

2262 "Ktv"

2263 ],

2264 "msg": "c48890e92aeeb3af04858a8dc1d34f16a4347b91",

2265

          "sig": "367d07253a9d5a77d054b9c1a82d3c0a448a51905343320b3559325ef41839608aa45564978da1b2968c556cfb23b0c98a9be83e594d5e769d69d1156e1b1506",

2266 "result": "valid"

2267 }

2268 ]

2269 },

2270 {

2271 "type": "EddsaVerify",

2272 "source": {

2273 "name": "google-wycheproof",

2274 "version": "0.9rc5"

2275 },

2276 "publicKey": {

2277 "type": "EDDSAPublicKey",

2278 "curve": "edwards25519",

2279 "keySize": 255,

2280 "pk": "4abfb535313705a6570018440cdec1a3ae33e51f352112fa6acbd0c6bc3ea859"

2281 },

2282 "publicKeyDer": "302a300506032b65700321004abfb535313705a6570018440cdec1a3ae33e51f352112fa6acbd0c6bc3ea859",

2283

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEASr+1NTE3BaZXABhEDN7Bo64z5R81IRL6asvQxrw+qFk=\n-----END PUBLIC KEY-----\n",

2284 "publicKeyJwk": {

2285 "kty": "OKP",

2286 "crv": "Ed25519",

2287 "kid": "none",

2288 "x": "Sr-1NTE3BaZXABhEDN7Bo64z5R81IRL6asvQxrw-qFk"

2289 },

2290 "tests": [

2291 {

2292 "tcId": 119,

2293 "comment": "regression test for arithmetic error",

2294 "flags": [

2295 "TinkOverflow"

2296 ],

2297 "msg": "321b5f663c19e30ee7bbb85e48ecf44db9d3f512",

2298

          "sig": "f296715e855d8aecccba782b670163dedc4458fe4eb509a856bcac450920fd2e95a3a3eb212d2d9ccaf948c39ae46a2548af125f8e2ad9b77bd18f92d59f9200",

2299 "result": "valid"

2300 }

2301 ]

2302 },

2303 {

2304 "type": "EddsaVerify",

2305 "source": {

2306 "name": "google-wycheproof",

2307 "version": "0.9rc5"

2308 },

2309 "publicKey": {

2310 "type": "EDDSAPublicKey",

2311 "curve": "edwards25519",

2312 "keySize": 255,

2313 "pk": "4f2162e6bf03a712db0efa418b7e7006e23871d9d7ec555a313885c4afd96385"

2314 },

2315 "publicKeyDer": "302a300506032b65700321004f2162e6bf03a712db0efa418b7e7006e23871d9d7ec555a313885c4afd96385",

2316

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEATyFi5r8DpxLbDvpBi35wBuI4cdnX7FVaMTiFxK/ZY4U=\n-----END PUBLIC KEY-----\n",

2317 "publicKeyJwk": {

2318 "kty": "OKP",

2319 "crv": "Ed25519",

2320 "kid": "none",

2321 "x": "TyFi5r8DpxLbDvpBi35wBuI4cdnX7FVaMTiFxK_ZY4U"

2322 },

2323 "tests": [

2324 {

2325 "tcId": 120,

2326 "comment": "regression test for arithmetic error",

2327 "flags": [

2328 "TinkOverflow"

2329 ],

2330 "msg": "c48890e92aeeb3af04858a8dc1d34f16a4347b91",

2331

          "sig": "367d07253a9d5a77d054b9c1a82d3c0a448a51905343320b3559325ef41839608aa45564978da1b2968c556cfb23b0c98a9be83e594d5e769d69d1156e1b1506",

2332 "result": "valid"

2333 }

2334 ]

2335 },

2336 {

2337 "type": "EddsaVerify",

2338 "source": {

2339 "name": "google-wycheproof",

2340 "version": "0.9rc5"

2341 },

2342 "publicKey": {

2343 "type": "EDDSAPublicKey",

2344 "curve": "edwards25519",

2345 "keySize": 255,

2346 "pk": "0717d75ce27ea181ed5a30e6456c649b5cf453a6b4c12cd3f9fd16b31e0c25cd"

2347 },

2348 "publicKeyDer": "302a300506032b65700321000717d75ce27ea181ed5a30e6456c649b5cf453a6b4c12cd3f9fd16b31e0c25cd",

2349

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEABxfXXOJ+oYHtWjDmRWxkm1z0U6a0wSzT+f0Wsx4MJc0=\n-----END PUBLIC KEY-----\n",

2350 "publicKeyJwk": {

2351 "kty": "OKP",

2352 "crv": "Ed25519",

2353 "kid": "none",

2354 "x": "BxfXXOJ-oYHtWjDmRWxkm1z0U6a0wSzT-f0Wsx4MJc0"

2355 },

2356 "tests": [

2357 {

2358 "tcId": 121,

2359 "comment": "regression test for arithmetic error",

2360 "flags": [

2361 "TinkOverflow"

2362 ],

2363 "msg": "26d5f0631f49106db58c4cfc903691134811b33c",

2364

          "sig": "9588e02bc815649d359ce710cdc69814556dd8c8bab1c468f40a49ebefb7f0de7ed49725edfd1b708fa1bad277c35d6c1b9c5ec25990997645780f9203d7dd08",

2365 "result": "valid"

2366 }

2367 ]

2368 },

2369 {

2370 "type": "EddsaVerify",

2371 "source": {

2372 "name": "google-wycheproof",

2373 "version": "0.9rc5"

2374 },

2375 "publicKey": {

2376 "type": "EDDSAPublicKey",

2377 "curve": "edwards25519",

2378 "keySize": 255,

2379 "pk": "db5b9eab7e84e5a13505865fa711c9c896c898609fc11fc9bc1e55028f9496df"

2380 },

2381 "publicKeyDer": "302a300506032b6570032100db5b9eab7e84e5a13505865fa711c9c896c898609fc11fc9bc1e55028f9496df",

2382

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA21ueq36E5aE1BYZfpxHJyJbImGCfwR/JvB5VAo+Ult8=\n-----END PUBLIC KEY-----\n",

2383 "publicKeyJwk": {

2384 "kty": "OKP",

2385 "crv": "Ed25519",

2386 "kid": "none",

2387 "x": "21ueq36E5aE1BYZfpxHJyJbImGCfwR_JvB5VAo-Ult8"

2388 },

2389 "tests": [

2390 {

2391 "tcId": 122,

2392 "comment": "regression test for arithmetic error",

2393 "flags": [

2394 "TinkOverflow"

2395 ],

2396 "msg": "2a71f064af982a3a1103a75cef898732d7881981",

2397

          "sig": "2217a0be57dd0d6c0090641496bcb65e37213f02a0df50aff0368ee2808e1376504f37b37494132dfc4d4887f58b9e86eff924040db3925ee4f8e1428c4c500e",

2398 "result": "valid"

2399 }

2400 ]

2401 },

2402 {

2403 "type": "EddsaVerify",

2404 "source": {

2405 "name": "google-wycheproof",

2406 "version": "0.9rc5"

2407 },

2408 "publicKey": {

2409 "type": "EDDSAPublicKey",

2410 "curve": "edwards25519",

2411 "keySize": 255,

2412 "pk": "7bac18f6d2625d3915f233434cda38a577247a7332a5170b37142a34644145e0"

2413 },

2414 "publicKeyDer": "302a300506032b65700321007bac18f6d2625d3915f233434cda38a577247a7332a5170b37142a34644145e0",

2415

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAe6wY9tJiXTkV8jNDTNo4pXckenMypRcLNxQqNGRBReA=\n-----END PUBLIC KEY-----\n",

2416 "publicKeyJwk": {

2417 "kty": "OKP",

2418 "crv": "Ed25519",

2419 "kid": "none",

2420 "x": "e6wY9tJiXTkV8jNDTNo4pXckenMypRcLNxQqNGRBReA"

2421 },

2422 "tests": [

2423 {

2424 "tcId": 123,

2425 "comment": "regression test for arithmetic error",

2426 "flags": [

2427 "TinkOverflow"

2428 ],

2429 "msg": "bf26796cef4ddafcf5033c8d105057db0210b6ad",

2430

          "sig": "1fda6dd4519fdbefb515bfa39e8e5911f4a0a8aa65f40ef0c542b8b34b87f9c249dc57f320718ff457ed5915c4d0fc352affc1287724d3f3a9de1ff777a02e01",

2431 "result": "valid"

2432 }

2433 ]

2434 },

2435 {

2436 "type": "EddsaVerify",

2437 "source": {

2438 "name": "google-wycheproof",

2439 "version": "0.9rc5"

2440 },

2441 "publicKey": {

2442 "type": "EDDSAPublicKey",

2443 "curve": "edwards25519",

2444 "keySize": 255,

2445 "pk": "7bac18f6d2625d3915f233434cda38a577247a7332a5170b37142a34644145e0"

2446 },

2447 "publicKeyDer": "302a300506032b65700321007bac18f6d2625d3915f233434cda38a577247a7332a5170b37142a34644145e0",

2448

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAe6wY9tJiXTkV8jNDTNo4pXckenMypRcLNxQqNGRBReA=\n-----END PUBLIC KEY-----\n",

2449 "publicKeyJwk": {

2450 "kty": "OKP",

2451 "crv": "Ed25519",

2452 "kid": "none",

2453 "x": "e6wY9tJiXTkV8jNDTNo4pXckenMypRcLNxQqNGRBReA"

2454 },

2455 "tests": [

2456 {

2457 "tcId": 124,

2458 "comment": "regression test for arithmetic error",

2459 "flags": [

2460 "TinkOverflow"

2461 ],

2462 "msg": "bf26796cef4ddafcf5033c8d105057db0210b6ad",

2463

          "sig": "1fda6dd4519fdbefb515bfa39e8e5911f4a0a8aa65f40ef0c542b8b34b87f9c249dc57f320718ff457ed5915c4d0fc352affc1287724d3f3a9de1ff777a02e01",

2464 "result": "valid"

2465 }

2466 ]

2467 },

2468 {

2469 "type": "EddsaVerify",

2470 "source": {

2471 "name": "google-wycheproof",

2472 "version": "0.9rc5"

2473 },

2474 "publicKey": {

2475 "type": "EDDSAPublicKey",

2476 "curve": "edwards25519",

2477 "keySize": 255,

2478 "pk": "38ead304624abebf3e2b31e20e5629531e3fc659008887c9106f5e55adbbc62a"

2479 },

2480 "publicKeyDer": "302a300506032b657003210038ead304624abebf3e2b31e20e5629531e3fc659008887c9106f5e55adbbc62a",

2481

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAOOrTBGJKvr8+KzHiDlYpUx4/xlkAiIfJEG9eVa27xio=\n-----END PUBLIC KEY-----\n",

2482 "publicKeyJwk": {

2483 "kty": "OKP",

2484 "crv": "Ed25519",

2485 "kid": "none",

2486 "x": "OOrTBGJKvr8-KzHiDlYpUx4_xlkAiIfJEG9eVa27xio"

2487 },

2488 "tests": [

2489 {

2490 "tcId": 125,

2491 "comment": "regression test for arithmetic error",

2492 "flags": [

2493 "TinkOverflow"

2494 ],

2495 "msg": "ae03da6997e40cea67935020152d3a9a365cc055",

2496

          "sig": "068eafdc2f36b97f9bae7fbda88b530d16b0e35054d3a351e3a4c914b22854c711505e49682e1a447e10a69e3b04d0759c859897b64f71137acf355b63faf100",

2497 "result": "valid"

2498 }

2499 ]

2500 },

2501 {

2502 "type": "EddsaVerify",

2503 "source": {

2504 "name": "google-wycheproof",

2505 "version": "0.9rc5"

2506 },

2507 "publicKey": {

2508 "type": "EDDSAPublicKey",

2509 "curve": "edwards25519",

2510 "keySize": 255,

2511 "pk": "e9bc95049af7e4817b17c402269ba5e767b7348757ac8002fec9e08390c0a9cf"

2512 },

2513 "publicKeyDer": "302a300506032b6570032100e9bc95049af7e4817b17c402269ba5e767b7348757ac8002fec9e08390c0a9cf",

2514

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA6byVBJr35IF7F8QCJpul52e3NIdXrIAC/sngg5DAqc8=\n-----END PUBLIC KEY-----\n",

2515 "publicKeyJwk": {

2516 "kty": "OKP",

2517 "crv": "Ed25519",

2518 "kid": "none",

2519 "x": "6byVBJr35IF7F8QCJpul52e3NIdXrIAC_sngg5DAqc8"

2520 },

2521 "tests": [

2522 {

2523 "tcId": 126,

2524 "comment": "regression test for arithmetic error",

2525 "flags": [

2526 "TinkOverflow"

2527 ],

2528 "msg": "489d473f7fb83c7f6823baf65482517bccd8f4ea",

2529

          "sig": "43670abc9f09a8a415e76f4a21c6a46156f066b5a37b3c1e867cf67248c7b927e8d13a763e37abf936f5f27f7a8aa290539d21f740efd26b65fd5ad27085f400",

2530 "result": "valid"

2531 }

2532 ]

2533 },

2534 {

2535 "type": "EddsaVerify",

2536 "source": {

2537 "name": "google-wycheproof",

2538 "version": "0.9rc5"

2539 },

2540 "publicKey": {

2541 "type": "EDDSAPublicKey",

2542 "curve": "edwards25519",

2543 "keySize": 255,

2544 "pk": "ee8155ca4e8fe7bc5bca5992044eab7f8c3c6a13db1176f42f46c29da5b064f4"

2545 },

2546 "publicKeyDer": "302a300506032b6570032100ee8155ca4e8fe7bc5bca5992044eab7f8c3c6a13db1176f42f46c29da5b064f4",

2547

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA7oFVyk6P57xbylmSBE6rf4w8ahPbEXb0L0bCnaWwZPQ=\n-----END PUBLIC KEY-----\n",

2548 "publicKeyJwk": {

2549 "kty": "OKP",

2550 "crv": "Ed25519",

2551 "kid": "none",

2552 "x": "7oFVyk6P57xbylmSBE6rf4w8ahPbEXb0L0bCnaWwZPQ"

2553 },

2554 "tests": [

2555 {

2556 "tcId": 127,

2557 "comment": "regression test for arithmetic error",

2558 "flags": [

2559 "TinkOverflow"

2560 ],

2561 "msg": "1b704d6692d60a07ad1e1d047b65e105a80d3459",

2562

          "sig": "56388f2228893b14ce4f2a5e0cc626591061de3a57c50a5ecab7b9d5bb2caeea191560a1cf2344c75fdb4a085444aa68d727b39f498169eaa82cf64a31f59803",

2563 "result": "valid"

2564 }

2565 ]

2566 },

2567 {

2568 "type": "EddsaVerify",

2569 "source": {

2570 "name": "google-wycheproof",

2571 "version": "0.9rc5"

2572 },

2573 "publicKey": {

2574 "type": "EDDSAPublicKey",

2575 "curve": "edwards25519",

2576 "keySize": 255,

2577 "pk": "db507bfcc9576393f7157bb360532b05c5fcf2e764b690cc6698a4a30d349095"

2578 },

2579 "publicKeyDer": "302a300506032b6570032100db507bfcc9576393f7157bb360532b05c5fcf2e764b690cc6698a4a30d349095",

2580

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA21B7/MlXY5P3FXuzYFMrBcX88udktpDMZpikow00kJU=\n-----END PUBLIC KEY-----\n",

2581 "publicKeyJwk": {

2582 "kty": "OKP",

2583 "crv": "Ed25519",

2584 "kid": "none",

2585 "x": "21B7_MlXY5P3FXuzYFMrBcX88udktpDMZpikow00kJU"

2586 },

2587 "tests": [

2588 {

2589 "tcId": 128,

2590 "comment": "regression test for arithmetic error",

2591 "flags": [

2592 "TinkOverflow"

2593 ],

2594 "msg": "dc87030862c4c32f56261e93a367caf458c6be27",

2595

          "sig": "553e5845fc480a577da6544e602caadaa00ae3e5aa3dce9ef332b1541b6d5f21bdf1d01e98baf80b8435f9932f89b3eb70f02da24787aac8e77279e797d0bd0b",

2596 "result": "valid"

2597 }

2598 ]

2599 },

2600 {

2601 "type": "EddsaVerify",

2602 "source": {

2603 "name": "google-wycheproof",

2604 "version": "0.9rc5"

2605 },

2606 "publicKey": {

2607 "type": "EDDSAPublicKey",

2608 "curve": "edwards25519",

2609 "keySize": 255,

2610 "pk": "994eaf03309d6ad9d95a656bc1744e2886f029023a3750b34f35086b3c7227f8"

2611 },

2612 "publicKeyDer": "302a300506032b6570032100994eaf03309d6ad9d95a656bc1744e2886f029023a3750b34f35086b3c7227f8",

2613

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAmU6vAzCdatnZWmVrwXROKIbwKQI6N1CzTzUIazxyJ/g=\n-----END PUBLIC KEY-----\n",

2614 "publicKeyJwk": {

2615 "kty": "OKP",

2616 "crv": "Ed25519",

2617 "kid": "none",

2618 "x": "mU6vAzCdatnZWmVrwXROKIbwKQI6N1CzTzUIazxyJ_g"

2619 },

2620 "tests": [

2621 {

2622 "tcId": 129,

2623 "comment": "regression test for arithmetic error",

2624 "flags": [

2625 "TinkOverflow"

2626 ],

2627 "msg": "7f41ef68508343ef18813cb2fb332445ec6480cd",

2628

          "sig": "bc10f88081b7be1f2505b6e76c5c82e358cf21ec11b7df1f334fb587bada465b53d9f7b4d4fec964432ee91ead1bc32ed3c82f2167da1c834a37515df7fe130e",

2629 "result": "valid"

2630 }

2631 ]

2632 },

2633 {

2634 "type": "EddsaVerify",

2635 "source": {

2636 "name": "google-wycheproof",

2637 "version": "0.9rc5"

2638 },

2639 "publicKey": {

2640 "type": "EDDSAPublicKey",

2641 "curve": "edwards25519",

2642 "keySize": 255,

2643 "pk": "127d37e406e0d83e4b55a09e21e8f50fb88af47e4a43f018cdebffc1948757f0"

2644 },

2645 "publicKeyDer": "302a300506032b6570032100127d37e406e0d83e4b55a09e21e8f50fb88af47e4a43f018cdebffc1948757f0",

2646

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEn035Abg2D5LVaCeIej1D7iK9H5KQ/AYzev/wZSHV/A=\n-----END PUBLIC KEY-----\n",

2647 "publicKeyJwk": {

2648 "kty": "OKP",

2649 "crv": "Ed25519",

2650 "kid": "none",

2651 "x": "En035Abg2D5LVaCeIej1D7iK9H5KQ_AYzev_wZSHV_A"

2652 },

2653 "tests": [

2654 {

2655 "tcId": 130,

2656 "comment": "regression test for arithmetic error",

2657 "flags": [

2658 "TinkOverflow"

2659 ],

2660 "msg": "e1ce107971534bc46a42ac609a1a37b4ca65791d",

2661

          "sig": "00c11e76b5866b7c37528b0670188c1a0473fb93c33b72ae604a8865a7d6e094ff722e8ede3cb18389685ff3c4086c29006047466f81e71a329711e0b9294709",

2662 "result": "valid"

2663 }

2664 ]

2665 },

2666 {

2667 "type": "EddsaVerify",

2668 "source": {

2669 "name": "google-wycheproof",

2670 "version": "0.9rc5"

2671 },

2672 "publicKey": {

2673 "type": "EDDSAPublicKey",

2674 "curve": "edwards25519",

2675 "keySize": 255,

2676 "pk": "d83ba84edfb4bec49f29be31d80a64b7c0b5a502438cdb1d0dd1e0e3e55786de"

2677 },

2678 "publicKeyDer": "302a300506032b6570032100d83ba84edfb4bec49f29be31d80a64b7c0b5a502438cdb1d0dd1e0e3e55786de",

2679

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA2DuoTt+0vsSfKb4x2Apkt8C1pQJDjNsdDdHg4+VXht4=\n-----END PUBLIC KEY-----\n",

2680 "publicKeyJwk": {

2681 "kty": "OKP",

2682 "crv": "Ed25519",

2683 "kid": "none",

2684 "x": "2DuoTt-0vsSfKb4x2Apkt8C1pQJDjNsdDdHg4-VXht4"

2685 },

2686 "tests": [

2687 {

2688 "tcId": 131,

2689 "comment": "regression test for arithmetic error",

2690 "flags": [

2691 "TinkOverflow"

2692 ],

2693 "msg": "869a827397c585cf35acf88a8728833ab1c8c81e",

2694

          "sig": "0a6f0ac47ea136cb3ff00f7a96638e4984048999ee2da0af6e5c86bffb0e70bb97406b6ad5a4b764f7c99ebb6ec0fd434b8efe253b0423ef876c037998e8ab07",

2695 "result": "valid"

2696 }

2697 ]

2698 },

2699 {

2700 "type": "EddsaVerify",

2701 "source": {

2702 "name": "google-wycheproof",

2703 "version": "0.9rc5"

2704 },

2705 "publicKey": {

2706 "type": "EDDSAPublicKey",

2707 "curve": "edwards25519",

2708 "keySize": 255,

2709 "pk": "d3c9aa2f3d6ef217a166e8ae403ed436c37facbbe3beceb78df6eb439f8fa04a"

2710 },

2711 "publicKeyDer": "302a300506032b6570032100d3c9aa2f3d6ef217a166e8ae403ed436c37facbbe3beceb78df6eb439f8fa04a",

2712

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA08mqLz1u8hehZuiuQD7UNsN/rLvjvs63jfbrQ5+PoEo=\n-----END PUBLIC KEY-----\n",

2713 "publicKeyJwk": {

2714 "kty": "OKP",

2715 "crv": "Ed25519",

2716 "kid": "none",

2717 "x": "08mqLz1u8hehZuiuQD7UNsN_rLvjvs63jfbrQ5-PoEo"

2718 },

2719 "tests": [

2720 {

2721 "tcId": 132,

2722 "comment": "regression test for arithmetic error",

2723 "flags": [

2724 "TinkOverflow"

2725 ],

2726 "msg": "619d8c4f2c93104be01cd574a385ceca08c33a9e",

2727

          "sig": "b7cbb942a6661e2312f79548224f3e44f5841c6e880c68340756a00ce94a914e8404858265985e6bb97ef01d2d7e5e41340309606bfc43c8c6a8f925126b3d09",

2728 "result": "valid"

2729 }

2730 ]

2731 },

2732 {

2733 "type": "EddsaVerify",

2734 "source": {

2735 "name": "google-wycheproof",

2736 "version": "0.9rc5"

2737 },

2738 "publicKey": {

2739 "type": "EDDSAPublicKey",

2740 "curve": "edwards25519",

2741 "keySize": 255,

2742 "pk": "d53280367c1c0b95ac4112218b92c6a71c51fb6312ce668de196c7d52a136155"

2743 },

2744 "publicKeyDer": "302a300506032b6570032100d53280367c1c0b95ac4112218b92c6a71c51fb6312ce668de196c7d52a136155",

2745

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA1TKANnwcC5WsQRIhi5LGpxxR+2MSzmaN4ZbH1SoTYVU=\n-----END PUBLIC KEY-----\n",

2746 "publicKeyJwk": {

2747 "kty": "OKP",

2748 "crv": "Ed25519",

2749 "kid": "none",

2750 "x": "1TKANnwcC5WsQRIhi5LGpxxR-2MSzmaN4ZbH1SoTYVU"

2751 },

2752 "tests": [

2753 {

2754 "tcId": 133,

2755 "comment": "regression test for arithmetic error",

2756 "flags": [

2757 "TinkOverflow"

2758 ],

2759 "msg": "5257a0bae8326d259a6ce97420c65e6c2794afe2",

2760

          "sig": "27a4f24009e579173ff3064a6eff2a4d20224f8f85fdec982a9cf2e6a3b51537348a1d7851a3a932128a923a393ea84e6b35eb3473c32dceb9d7e9cab03a0f0d",

2761 "result": "valid"

2762 }

2763 ]

2764 },

2765 {

2766 "type": "EddsaVerify",

2767 "source": {

2768 "name": "google-wycheproof",

2769 "version": "0.9rc5"

2770 },

2771 "publicKey": {

2772 "type": "EDDSAPublicKey",

2773 "curve": "edwards25519",

2774 "keySize": 255,

2775 "pk": "94ac2336ba97a476fb4c9f2b5563e4167ca292c6e99e422350a911ae3172c315"

2776 },

2777 "publicKeyDer": "302a300506032b657003210094ac2336ba97a476fb4c9f2b5563e4167ca292c6e99e422350a911ae3172c315",

2778

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAlKwjNrqXpHb7TJ8rVWPkFnyiksbpnkIjUKkRrjFywxU=\n-----END PUBLIC KEY-----\n",

2779 "publicKeyJwk": {

2780 "kty": "OKP",

2781 "crv": "Ed25519",

2782 "kid": "none",

2783 "x": "lKwjNrqXpHb7TJ8rVWPkFnyiksbpnkIjUKkRrjFywxU"

2784 },

2785 "tests": [

2786 {

2787 "tcId": 134,

2788 "comment": "regression test for arithmetic error",

2789 "flags": [

2790 "TinkOverflow"

2791 ],

2792 "msg": "5acb6afc9b368f7acac0e71f6a4831c72d628405",

2793

          "sig": "985b605fe3f449f68081197a68c714da0bfbf6ac2ab9abb0508b6384ea4999cb8d79af98e86f589409e8d2609a8f8bd7e80aaa8d92a84e7737fbe8dcef41920a",

2794 "result": "valid"

2795 }

2796 ]

2797 },

2798 {

2799 "type": "EddsaVerify",

2800 "source": {

2801 "name": "google-wycheproof",

2802 "version": "0.9rc5"

2803 },

2804 "publicKey": {

2805 "type": "EDDSAPublicKey",

2806 "curve": "edwards25519",

2807 "keySize": 255,

2808 "pk": "e1e7316d231f7f275bdf403360304da1509fdf1af1fd25ca214eaac0a289398f"

2809 },

2810 "publicKeyDer": "302a300506032b6570032100e1e7316d231f7f275bdf403360304da1509fdf1af1fd25ca214eaac0a289398f",

2811

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA4ecxbSMffydb30AzYDBNoVCf3xrx/SXKIU6qwKKJOY8=\n-----END PUBLIC KEY-----\n",

2812 "publicKeyJwk": {

2813 "kty": "OKP",

2814 "crv": "Ed25519",

2815 "kid": "none",

2816 "x": "4ecxbSMffydb30AzYDBNoVCf3xrx_SXKIU6qwKKJOY8"

2817 },

2818 "tests": [

2819 {

2820 "tcId": 135,

2821 "comment": "regression test for arithmetic error",

2822 "flags": [

2823 "TinkOverflow"

2824 ],

2825 "msg": "3c87b3453277b353941591fc7eaa7dd37604b42a",

2826

          "sig": "1c8fbda3d39e2b441f06da6071c13115cb4115c7c3341704cf6513324d4cf1ef4a1dd7678a048b0dde84e48994d080befcd70854079d44b6a0b0f9fa002d130c",

2827 "result": "valid"

2828 }

2829 ]

2830 },

2831 {

2832 "type": "EddsaVerify",

2833 "source": {

2834 "name": "google-wycheproof",

2835 "version": "0.9rc5"

2836 },

2837 "publicKey": {

2838 "type": "EDDSAPublicKey",

2839 "curve": "edwards25519",

2840 "keySize": 255,

2841 "pk": "fffbeea71215efaf9888fec2cc68edb3703ff11a66fd629b53cbda5eabc18750"

2842 },

2843 "publicKeyDer": "302a300506032b6570032100fffbeea71215efaf9888fec2cc68edb3703ff11a66fd629b53cbda5eabc18750",

2844

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA//vupxIV76+YiP7CzGjts3A/8Rpm/WKbU8vaXqvBh1A=\n-----END PUBLIC KEY-----\n",

2845 "publicKeyJwk": {

2846 "kty": "OKP",

2847 "crv": "Ed25519",

2848 "kid": "none",

2849 "x": "__vupxIV76-YiP7CzGjts3A_8Rpm_WKbU8vaXqvBh1A"

2850 },

2851 "tests": [

2852 {

2853 "tcId": 136,

2854 "comment": "regression test for arithmetic error",

2855 "flags": [

2856 "TinkOverflow"

2857 ],

2858 "msg": "0a68e27ef6847bfd9e398b328a0ded3679d4649d",

2859

          "sig": "59097233eb141ed948b4f3c28a9496b9a7eca77454ecfe7e46737d1449a0b76b15aacf77cf48af27a668aa4434cfa26c504d75a2bcc4feac46465446234c0508",

2860 "result": "valid"

2861 }

2862 ]

2863 },

2864 {

2865 "type": "EddsaVerify",

2866 "source": {

2867 "name": "google-wycheproof",

2868 "version": "0.9rc5"

2869 },

2870 "publicKey": {

2871 "type": "EDDSAPublicKey",

2872 "curve": "edwards25519",

2873 "keySize": 255,

2874 "pk": "19ccc0527599cb032e0b4c4d74e60f13901768a99df041c3bc1bf6c0ef271169"

2875 },

2876 "publicKeyDer": "302a300506032b657003210019ccc0527599cb032e0b4c4d74e60f13901768a99df041c3bc1bf6c0ef271169",

2877

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAGczAUnWZywMuC0xNdOYPE5AXaKmd8EHDvBv2wO8nEWk=\n-----END PUBLIC KEY-----\n",

2878 "publicKeyJwk": {

2879 "kty": "OKP",

2880 "crv": "Ed25519",

2881 "kid": "none",

2882 "x": "GczAUnWZywMuC0xNdOYPE5AXaKmd8EHDvBv2wO8nEWk"

2883 },

2884 "tests": [

2885 {

2886 "tcId": 137,

2887 "comment": "regression test for arithmetic error",

2888 "flags": [

2889 "TinkOverflow"

2890 ],

2891 "msg": "4e9bef60737c7d4dd10bd52567e1473a36d3573d",

2892

          "sig": "519105608508fe2f1b6da4cc8b23e39798b1d18d25972beed0404cec722e01ba1b6a0f85e99e092cca8076b101b60d4ac5035684357f4d0daacdc642da742a06",

2893 "result": "valid"

2894 }

2895 ]

2896 },

2897 {

2898 "type": "EddsaVerify",

2899 "source": {

2900 "name": "google-wycheproof",

2901 "version": "0.9rc5"

2902 },

2903 "publicKey": {

2904 "type": "EDDSAPublicKey",

2905 "curve": "edwards25519",

2906 "keySize": 255,

2907 "pk": "0e726e27047563aa0a1a9c2e085d8d26af2acba129d0869c65031e3e6cac329a"

2908 },

2909 "publicKeyDer": "302a300506032b65700321000e726e27047563aa0a1a9c2e085d8d26af2acba129d0869c65031e3e6cac329a",

2910

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEADnJuJwR1Y6oKGpwuCF2NJq8qy6Ep0IacZQMePmysMpo=\n-----END PUBLIC KEY-----\n",

2911 "publicKeyJwk": {

2912 "kty": "OKP",

2913 "crv": "Ed25519",

2914 "kid": "none",

2915 "x": "DnJuJwR1Y6oKGpwuCF2NJq8qy6Ep0IacZQMePmysMpo"

2916 },

2917 "tests": [

2918 {

2919 "tcId": 138,

2920 "comment": "regression test for arithmetic error",

2921 "flags": [

2922 "TinkOverflow"

2923 ],

2924 "msg": "cc82b3163efda3ba7e9240e765112caa69113694",

2925

          "sig": "d8b03ee579e73f16477527fc9dc37a72eaac0748a733772c483ba013944f01ef64fb4ec5e3a95021dc22f4ae282baff6e9b9cc8433c6b6710d82e7397d72ef04",

2926 "result": "valid"

2927 }

2928 ]

2929 },

2930 {

2931 "type": "EddsaVerify",

2932 "source": {

2933 "name": "google-wycheproof",

2934 "version": "0.9rc5"

2935 },

2936 "publicKey": {

2937 "type": "EDDSAPublicKey",

2938 "curve": "edwards25519",

2939 "keySize": 255,

2940 "pk": "e77717b54a2b5e5bce5bccb8f0c5fdb5fd7df77ac254020fc9120dc0d4df4178"

2941 },

2942 "publicKeyDer": "302a300506032b6570032100e77717b54a2b5e5bce5bccb8f0c5fdb5fd7df77ac254020fc9120dc0d4df4178",

2943

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA53cXtUorXlvOW8y48MX9tf1993rCVAIPyRINwNTfQXg=\n-----END PUBLIC KEY-----\n",

2944 "publicKeyJwk": {

2945 "kty": "OKP",

2946 "crv": "Ed25519",

2947 "kid": "none",

2948 "x": "53cXtUorXlvOW8y48MX9tf1993rCVAIPyRINwNTfQXg"

2949 },

2950 "tests": [

2951 {

2952 "tcId": 139,

2953 "comment": "regression test for arithmetic error",

2954 "flags": [

2955 "TinkOverflow"

2956 ],

2957 "msg": "923a5c9e7b5635bb6c32c5a408a4a15b652450eb",

2958

          "sig": "26da61fdfd38e6d01792813f27840c8b4766b0faaed39d0ee898cb450d94a5d5f57e58b6a003d7f9b56b20561954c6edcf66492d116b8b5e91f205a3a6449d0b",

2959 "result": "valid"

2960 }

2961 ]

2962 },

2963 {

2964 "type": "EddsaVerify",

2965 "source": {

2966 "name": "google-wycheproof",

2967 "version": "0.9rc5"

2968 },

2969 "publicKey": {

2970 "type": "EDDSAPublicKey",

2971 "curve": "edwards25519",

2972 "keySize": 255,

2973 "pk": "6220972d3f7d150b36790d7d522384876d64d640cd9913186815e1629582ed36"

2974 },

2975 "publicKeyDer": "302a300506032b65700321006220972d3f7d150b36790d7d522384876d64d640cd9913186815e1629582ed36",

2976

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAYiCXLT99FQs2eQ19UiOEh21k1kDNmRMYaBXhYpWC7TY=\n-----END PUBLIC KEY-----\n",

2977 "publicKeyJwk": {

2978 "kty": "OKP",

2979 "crv": "Ed25519",

2980 "kid": "none",

2981 "x": "YiCXLT99FQs2eQ19UiOEh21k1kDNmRMYaBXhYpWC7TY"

2982 },

2983 "tests": [

2984 {

2985 "tcId": 140,

2986 "comment": "regression test for arithmetic error",

2987 "flags": [

2988 "TinkOverflow"

2989 ],

2990 "msg": "6f2f0245de4587062979d0422d349f93ccdc3af2",

2991

          "sig": "4adeaff7a58c5010a5a067feea0ae504d37b0c6a76c6c153e222f13409dff2df0fab69bc5059b97d925dc1b89e9851d7c627cb82d65585f9fd976124553f8902",

2992 "result": "valid"

2993 }

2994 ]

2995 },

2996 {

2997 "type": "EddsaVerify",

2998 "source": {

2999 "name": "google-wycheproof",

3000 "version": "0.9rc5"

3001 },

3002 "publicKey": {

3003 "type": "EDDSAPublicKey",

3004 "curve": "edwards25519",

3005 "keySize": 255,

3006 "pk": "7b64a28c50ec7678a90e3e1a21522e30ac9db7b5215aea2bfb33bea037eab987"

3007 },

3008 "publicKeyDer": "302a300506032b65700321007b64a28c50ec7678a90e3e1a21522e30ac9db7b5215aea2bfb33bea037eab987",

3009

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAe2SijFDsdnipDj4aIVIuMKydt7UhWuor+zO+oDfquYc=\n-----END PUBLIC KEY-----\n",

3010 "publicKeyJwk": {

3011 "kty": "OKP",

3012 "crv": "Ed25519",

3013 "kid": "none",

3014 "x": "e2SijFDsdnipDj4aIVIuMKydt7UhWuor-zO-oDfquYc"

3015 },

3016 "tests": [

3017 {

3018 "tcId": 141,

3019 "comment": "regression test for arithmetic error",

3020 "flags": [

3021 "TinkOverflow"

3022 ],

3023 "msg": "6e911edb27a170b983d4dee1110554f804330f41",

3024

          "sig": "4204d620cde0c3008c0b2901f5d6b44f88f0e3cb4f4d62252bf6f3cb37c1fb150a9ccb296afe5e7c75f65b5c8edd13dc4910ffe1e1265b3707c59042cf9a5902",

3025 "result": "valid"

3026 }

3027 ]

3028 },

3029 {

3030 "type": "EddsaVerify",

3031 "source": {

3032 "name": "google-wycheproof",

3033 "version": "0.9rc5"

3034 },

3035 "publicKey": {

3036 "type": "EDDSAPublicKey",

3037 "curve": "edwards25519",

3038 "keySize": 255,

3039 "pk": "724452210a9e4c994819229bf12bf84e95768a3a97c08d8d8f5f939a4cad34c5"

3040 },

3041 "publicKeyDer": "302a300506032b6570032100724452210a9e4c994819229bf12bf84e95768a3a97c08d8d8f5f939a4cad34c5",

3042

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAckRSIQqeTJlIGSKb8Sv4TpV2ijqXwI2Nj1+TmkytNMU=\n-----END PUBLIC KEY-----\n",

3043 "publicKeyJwk": {

3044 "kty": "OKP",

3045 "crv": "Ed25519",

3046 "kid": "none",

3047 "x": "ckRSIQqeTJlIGSKb8Sv4TpV2ijqXwI2Nj1-TmkytNMU"

3048 },

3049 "tests": [

3050 {

3051 "tcId": 142,

3052 "comment": "regression test for arithmetic error",

3053 "flags": [

3054 "TinkOverflow"

3055 ],

3056 "msg": "b8cf807eea809aaf739aa091f3b7a3f2fd39fb51",

3057

          "sig": "f8a69d3fd8c2ff0a9dec41e4c6b43675ce08366a35e220b1185ffc246c339e22c20ac661e866f52054015efd04f42eca2adcee6834c4df923b4a62576e4dff0e",

3058 "result": "valid"

3059 }

3060 ]

3061 },

3062 {

3063 "type": "EddsaVerify",

3064 "source": {

3065 "name": "google-wycheproof",

3066 "version": "0.9rc5"

3067 },

3068 "publicKey": {

3069 "type": "EDDSAPublicKey",

3070 "curve": "edwards25519",

3071 "keySize": 255,

3072 "pk": "bad265b294ed2f422cb6a141694086238fbfe987571aa765d8b4f3a24105aa01"

3073 },

3074 "publicKeyDer": "302a300506032b6570032100bad265b294ed2f422cb6a141694086238fbfe987571aa765d8b4f3a24105aa01",

3075

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAutJlspTtL0IstqFBaUCGI4+/6YdXGqdl2LTzokEFqgE=\n-----END PUBLIC KEY-----\n",

3076 "publicKeyJwk": {

3077 "kty": "OKP",

3078 "crv": "Ed25519",

3079 "kid": "none",

3080 "x": "utJlspTtL0IstqFBaUCGI4-_6YdXGqdl2LTzokEFqgE"

3081 },

3082 "tests": [

3083 {

3084 "tcId": 143,

3085 "comment": "regression test for arithmetic error",

3086 "flags": [

3087 "TinkOverflow"

3088 ],

3089 "msg": "01a2b5f7fee813b4e9bd7fc25137648004795010",

3090

          "sig": "61792c9442bc6338ac41fd42a40bee9b02ec1836503d60ff725128c63d72808880c36e6190b7da525cbee5d12900aa043547dd14a2709ef9e49d628f37f6b70c",

3091 "result": "valid"

3092 }

3093 ]

3094 },

3095 {

3096 "type": "EddsaVerify",

3097 "source": {

3098 "name": "google-wycheproof",

3099 "version": "0.9rc5"

3100 },

3101 "publicKey": {

3102 "type": "EDDSAPublicKey",

3103 "curve": "edwards25519",

3104 "keySize": 255,

3105 "pk": "0aaee4b723db9b51ba7d22eb23eb8a76a5ac02f4fc9dd06f77bea42e1d37ec5a"

3106 },

3107 "publicKeyDer": "302a300506032b65700321000aaee4b723db9b51ba7d22eb23eb8a76a5ac02f4fc9dd06f77bea42e1d37ec5a",

3108

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEACq7ktyPbm1G6fSLrI+uKdqWsAvT8ndBvd76kLh037Fo=\n-----END PUBLIC KEY-----\n",

3109 "publicKeyJwk": {

3110 "kty": "OKP",

3111 "crv": "Ed25519",

3112 "kid": "none",

3113 "x": "Cq7ktyPbm1G6fSLrI-uKdqWsAvT8ndBvd76kLh037Fo"

3114 },

3115 "tests": [

3116 {

3117 "tcId": 144,

3118 "comment": "regression test for arithmetic error",

3119 "flags": [

3120 "TinkOverflow"

3121 ],

3122 "msg": "0fbf5d47cb5d498feace8f98f1896208da38a885",

3123

          "sig": "fa3cd41e3a8c00b19eecd404a63c3cb787cd30de0dfc936966cff2117f5aff18db6bef80fcfd8856f3fb2e9c3dc47593e9471103032af918feee638a33d40505",

3124 "result": "valid"

3125 }

3126 ]

3127 },

3128 {

3129 "type": "EddsaVerify",

3130 "source": {

3131 "name": "google-wycheproof",

3132 "version": "0.9rc5"

3133 },

3134 "publicKey": {

3135 "type": "EDDSAPublicKey",

3136 "curve": "edwards25519",

3137 "keySize": 255,

3138 "pk": "812344af15a91ba83c2c91e96f1727ac0f3c4c41385b9fa84efa399ada5168be"

3139 },

3140 "publicKeyDer": "302a300506032b6570032100812344af15a91ba83c2c91e96f1727ac0f3c4c41385b9fa84efa399ada5168be",

3141

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAgSNErxWpG6g8LJHpbxcnrA88TEE4W5+oTvo5mtpRaL4=\n-----END PUBLIC KEY-----\n",

3142 "publicKeyJwk": {

3143 "kty": "OKP",

3144 "crv": "Ed25519",

3145 "kid": "none",

3146 "x": "gSNErxWpG6g8LJHpbxcnrA88TEE4W5-oTvo5mtpRaL4"

3147 },

3148 "tests": [

3149 {

3150 "tcId": 145,

3151 "comment": "regression test for arithmetic error",

3152 "flags": [

3153 "TinkOverflow"

3154 ],

3155 "msg": "36e67c1939750bffb3e4ba6cb85562612275e862",

3156

          "sig": "97fbbcd7a1d0eb42d2f8c42448ef35a2c2472740556b645547865330d6c57068af377fced08aaf810c08cd3c43d296f1975710312e9334c98b485f831efa4103",

3157 "result": "valid"

3158 }

3159 ]

3160 },

3161 {

3162 "type": "EddsaVerify",

3163 "source": {

3164 "name": "google-wycheproof",

3165 "version": "0.9rc5"

3166 },

3167 "publicKey": {

3168 "type": "EDDSAPublicKey",

3169 "curve": "edwards25519",

3170 "keySize": 255,

3171 "pk": "0ee5cb5597fbdf8dccc48b01485e39b33aa133b52d30d23740277267cfec3e3e"

3172 },

3173 "publicKeyDer": "302a300506032b65700321000ee5cb5597fbdf8dccc48b01485e39b33aa133b52d30d23740277267cfec3e3e",

3174

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEADuXLVZf7343MxIsBSF45szqhM7UtMNI3QCdyZ8/sPj4=\n-----END PUBLIC KEY-----\n",

3175 "publicKeyJwk": {

3176 "kty": "OKP",

3177 "crv": "Ed25519",

3178 "kid": "none",

3179 "x": "DuXLVZf7343MxIsBSF45szqhM7UtMNI3QCdyZ8_sPj4"

3180 },

3181 "tests": [

3182 {

3183 "tcId": 146,

3184 "comment": "regression test for arithmetic error",

3185 "flags": [

3186 "TinkOverflow"

3187 ],

3188 "msg": "13945c894c1d3fe8562e8b20e5f0efaa26ade8e3",

3189

          "sig": "d7dbaa337ffd2a5fd8d5fd8ad5aeccc0c0f83795c2c59fe62a40b87903b1ae62ed748a8df5af4d32f9f822a65d0e498b6f40eaf369a9342a1164ee7d08b58103",

3190 "result": "valid"

3191 }

3192 ]

3193 },

3194 {

3195 "type": "EddsaVerify",

3196 "source": {

3197 "name": "google-wycheproof",

3198 "version": "0.9rc5"

3199 },

3200 "publicKey": {

3201 "type": "EDDSAPublicKey",

3202 "curve": "edwards25519",

3203 "keySize": 255,

3204 "pk": "9fba1de92b60b5b4703089763d0d6f9125e4dd7efae41f08a22882aef96892c4"

3205 },

3206 "publicKeyDer": "302a300506032b65700321009fba1de92b60b5b4703089763d0d6f9125e4dd7efae41f08a22882aef96892c4",

3207

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAn7od6StgtbRwMIl2PQ1vkSXk3X765B8IoiiCrvloksQ=\n-----END PUBLIC KEY-----\n",

3208 "publicKeyJwk": {

3209 "kty": "OKP",

3210 "crv": "Ed25519",

3211 "kid": "none",

3212 "x": "n7od6StgtbRwMIl2PQ1vkSXk3X765B8IoiiCrvloksQ"

3213 },

3214 "tests": [

3215 {

3216 "tcId": 147,

3217 "comment": "regression test for arithmetic error",

3218 "flags": [

3219 "TinkOverflow"

3220 ],

3221 "msg": "4de142af4b8402f80a47fa812df84f42e283cee7",

3222

          "sig": "09a2ed303a2fa7027a1dd7c3b0d25121eeed2b644a2fbc17aa0c8aea4524071ede7e7dd7a536d5497f8165d29e4e1b63200f74bbae39fbbbccb29889c62c1f09",

3223 "result": "valid"

3224 }

3225 ]

3226 },

3227 {

3228 "type": "EddsaVerify",

3229 "source": {

3230 "name": "google-wycheproof",

3231 "version": "0.9rc5"

3232 },

3233 "publicKey": {

3234 "type": "EDDSAPublicKey",

3235 "curve": "edwards25519",

3236 "keySize": 255,

3237 "pk": "7582ab1b52e1316e5c13671f43b39ca36b28133cd0832831bcddd0b0f23398cb"

3238 },

3239 "publicKeyDer": "302a300506032b65700321007582ab1b52e1316e5c13671f43b39ca36b28133cd0832831bcddd0b0f23398cb",

3240

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAdYKrG1LhMW5cE2cfQ7Oco2soEzzQgygxvN3QsPIzmMs=\n-----END PUBLIC KEY-----\n",

3241 "publicKeyJwk": {

3242 "kty": "OKP",

3243 "crv": "Ed25519",

3244 "kid": "none",

3245 "x": "dYKrG1LhMW5cE2cfQ7Oco2soEzzQgygxvN3QsPIzmMs"

3246 },

3247 "tests": [

3248 {

3249 "tcId": 148,

3250 "comment": "regression test for arithmetic error",

3251 "flags": [

3252 "TinkOverflow"

3253 ],

3254 "msg": "563357f41b8b23b1d83f19f5667177a67da20b18",

3255

          "sig": "e6884a6e6b2e60a0b5862251c001e7c79d581d777d6fc11d218d0aecd79f26a30e2ca22cc7c4674f8b72655bc4ee5cb5494ca07c05177656142ac55cc9d33e02",

3256 "result": "valid"

3257 }

3258 ]

3259 },

3260 {

3261 "type": "EddsaVerify",

3262 "source": {

3263 "name": "google-wycheproof",

3264 "version": "0.9rc5"

3265 },

3266 "publicKey": {

3267 "type": "EDDSAPublicKey",

3268 "curve": "edwards25519",

3269 "keySize": 255,

3270 "pk": "dd2d678bae222f3fb6e8278f08cc9e1a66339c926c29ac0a16f9717f5ee18cd8"

3271 },

3272 "publicKeyDer": "302a300506032b6570032100dd2d678bae222f3fb6e8278f08cc9e1a66339c926c29ac0a16f9717f5ee18cd8",

3273

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA3S1ni64iLz+26CePCMyeGmYznJJsKawKFvlxf17hjNg=\n-----END PUBLIC KEY-----\n",

3274 "publicKeyJwk": {

3275 "kty": "OKP",

3276 "crv": "Ed25519",

3277 "kid": "none",

3278 "x": "3S1ni64iLz-26CePCMyeGmYznJJsKawKFvlxf17hjNg"

3279 },

3280 "tests": [

3281 {

3282 "tcId": 149,

3283 "comment": "regression test for arithmetic error",

3284 "flags": [

3285 "TinkOverflow"

3286 ],

3287 "msg": "931bbf9c877a6571cf7d4609fc3eb867edd43f51",

3288

          "sig": "6124c206d864507ea5d984b363b4cf583314db6856a45ded5e61eebff4d5e337e0b4c82b445ae2e52d549d2d961eace2ea01f81158e09a9686baa040db65ad08",

3289 "result": "valid"

3290 }

3291 ]

3292 },

3293 {

3294 "type": "EddsaVerify",

3295 "source": {

3296 "name": "google-wycheproof",

3297 "version": "0.9rc5"

3298 },

3299 "publicKey": {

3300 "type": "EDDSAPublicKey",

3301 "curve": "edwards25519",

3302 "keySize": 255,

3303 "pk": "ccbe7cb2e4bc215cee2f885e1d22f7e0d582b2bbbd782c104e548b152d26fc69"

3304 },

3305 "publicKeyDer": "302a300506032b6570032100ccbe7cb2e4bc215cee2f885e1d22f7e0d582b2bbbd782c104e548b152d26fc69",

3306

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAzL58suS8IVzuL4heHSL34NWCsru9eCwQTlSLFS0m/Gk=\n-----END PUBLIC KEY-----\n",

3307 "publicKeyJwk": {

3308 "kty": "OKP",

3309 "crv": "Ed25519",

3310 "kid": "none",

3311 "x": "zL58suS8IVzuL4heHSL34NWCsru9eCwQTlSLFS0m_Gk"

3312 },

3313 "tests": [

3314 {

3315 "tcId": 150,

3316 "comment": "regression test for arithmetic error",

3317 "flags": [

3318 "TinkOverflow"

3319 ],

3320 "msg": "44530b0b34f598767a7b875b0caee3c7b9c502d1",

3321

          "sig": "cfbd450a2c83cb8436c348822fe3ee347d4ee937b7f2ea11ed755cc52852407c9eec2c1fa30d2f9aef90e89b2cc3bcef2b1b9ca59f712110d19894a9cf6a2802",

3322 "result": "valid"

3323 }

3324 ]

3325 },

3326 {

3327 "type": "EddsaVerify",

3328 "source": {

3329 "name": "github/cpu/eddsazerosigngen",

3330 "version": "1.0"

3331 },

3332 "publicKey": {

3333 "type": "EDDSAPublicKey",

3334 "curve": "edwards25519",

3335 "keySize": 255,

3336 "pk": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a"

3337 },

3338 "publicKeyDer": "302a300506032b6570032100d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",

3339

      "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=\n-----END PUBLIC KEY-----\n",

3340 "publicKeyJwk": {

3341 "kty": "OKP",

3342 "crv": "Ed25519",

3343 "kid": "none",

3344 "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"

3345 },

3346 "tests": [

3347 {

3348 "tcId": 151,

3349

          "comment": "R encodes y = 1 with the sign bit of x set. The only point with y = 1 has x = 0, so decoding must fail (RFC 8032, Section 5.1.3). Accepted only by verifiers that ignore the sign of x.",

3350 "flags": [

3351 "InvalidEncoding"

3352 ],

3353 "msg": "313233343030",

3354

          "sig": "0100000000000000000000000000000000000000000000000000000000000080c803ee1f2342aa96ff698a393d1ab5e66f3eda101d6d120b394c3fd32c117d0a",

3355 "result": "invalid"

3356 }

3357 ]

3358 }

3359 ]

3360}