AES FFX Test Vector Data, version 1.0 Profile: FFX[radix] Test data generated by Voltage Security, June 2011. AES-128 key for all test vectors: 2b7e151628aed2a6abf7158809cf4f3c Test vector 1: Radix = 10 Input (length = 10): "0123456789" Tweak (length = 10): "9876543210" Encrypted: "6124200773" Intermediate values: P = [ 1, 2, 1, 0, 0, 10, 5, 0, 0, 0, 10, 0, 0, 0, 10 ] Round 0: B_0 = "56789" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 0, 0, 231, 223 ] CBC_MAC = [ 178, 23, 94, 227, 235, 107, 241, 88, 255, 225, 124, 35, 113, 229, 204, 19 ] F_out = "24728" L = "56789", R = "25962" Round 1: B_1 = "25962" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 1, 0, 101, 106 ] CBC_MAC = [ 51, 190, 249, 61, 4, 109, 120, 103, 51, 255, 70, 97, 20, 140, 87, 153 ] F_out = "53767" L = "25962", R = "10556" Round 2: B_2 = "10556" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 2, 0, 41, 60 ] CBC_MAC = [ 46, 119, 157, 146, 150, 130, 241, 192, 111, 134, 229, 160, 201, 157, 218, 98 ] F_out = "03136" L = "10556", R = "29098" Round 3: B_3 = "29098" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 3, 0, 113, 170 ] CBC_MAC = [ 174, 123, 224, 87, 184, 248, 56, 84, 44, 10, 27, 227, 157, 233, 178, 91 ] F_out = "23220" L = "29098", R = "33776" Round 4: B_4 = "33776" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 4, 0, 131, 240 ] CBC_MAC = [ 143, 241, 191, 84, 85, 109, 85, 62, 98, 142, 122, 217, 177, 208, 239, 4 ] F_out = "49630" L = "33776", R = "78728" Round 5: B_5 = "78728" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 5, 1, 51, 136 ] CBC_MAC = [ 38, 71, 126, 189, 186, 53, 31, 145, 238, 76, 86, 253, 112, 160, 174, 231 ] F_out = "80529" L = "78728", R = "14305" Round 6: B_6 = "14305" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 6, 0, 55, 225 ] CBC_MAC = [ 125, 75, 237, 158, 131, 55, 209, 9, 101, 197, 0, 121, 194, 2, 116, 132 ] F_out = "80169" L = "14305", R = "58897" Round 7: B_7 = "58897" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 7, 0, 230, 17 ] CBC_MAC = [ 242, 246, 229, 238, 234, 164, 97, 149, 226, 83, 116, 152, 51, 255, 35, 135 ] F_out = "00469" L = "58897", R = "14774" Round 8: B_8 = "14774" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 8, 0, 57, 182 ] CBC_MAC = [ 207, 0, 24, 102, 176, 164, 198, 169, 67, 219, 228, 100, 60, 109, 178, 131 ] F_out = "02345" L = "14774", R = "61242" Round 9: B_9 = "61242" Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 9, 0, 239, 58 ] CBC_MAC = [ 242, 84, 227, 1, 12, 169, 217, 207, 48, 18, 229, 133, 12, 69, 210, 146 ] F_out = "85999" L = "61242", R = "00773" Test vector 2: Radix = 10 Input (length = 10): "0123456789" No Tweak Encrypted: "2433477484" Intermediate values: P = [ 1, 2, 1, 0, 0, 10, 10, 5, 0, 0, 0, 10, 0, 0, 0, 0 ] Round 0: B_0 = 56789 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 221, 213 ] CBC-MAC = [ 195, 184, 41, 161, 232, 100, 43, 120, 204, 41, 148, 123, 59, 147, 219, 99 ] F_out = 60536 L = 56789, R = 61770 Round 1: B_1 = 61770 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 241, 74 ] CBC-MAC = [ 121, 100, 61, 158, 221, 250, 131, 16, 72, 2, 224, 89, 189, 220, 199, 44 ] F_out = 55248 L = 61770, R = 12037 Round 2: B_2 = 12037 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 47, 5 ] CBC-MAC = [ 9, 132, 75, 58, 46, 151, 10, 51, 165, 69, 95, 100, 199, 67, 56, 77 ] F_out = 94867 L = 12037, R = 56637 Round 3: B_3 = 56637 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 0, 221, 61 ] CBC-MAC = [ 125, 29, 160, 178, 41, 158, 148, 66, 104, 179, 136, 46, 59, 198, 72, 57 ] F_out = 82370 L = 56637, R = 94407 Round 4: B_4 = 94407 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 4, 1, 112, 199 ] CBC-MAC = [ 67, 122, 82, 147, 218, 251, 246, 239, 143, 18, 111, 55, 229, 180, 6, 114 ] F_out = 87727 L = 94407, R = 44364 Round 5: B_5 = 44364 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 5, 0, 173, 76 ] CBC-MAC = [ 216, 186, 138, 193, 244, 52, 17, 22, 8, 188, 121, 95, 62, 150, 28, 18 ] F_out = 90358 L = 44364, R = 84765 Round 6: B_6 = 84765 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 6, 1, 75, 29 ] CBC-MAC = [ 190, 15, 19, 163, 157, 41, 253, 232, 18, 10, 55, 166, 7, 219, 21, 192 ] F_out = 39560 L = 84765, R = 83924 Round 7: B_7 = 83924 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 7, 1, 71, 212 ] CBC-MAC = [ 79, 25, 29, 191, 153, 112, 242, 154, 155, 129, 202, 99, 245, 71, 41, 192 ] F_out = 48570 L = 83924, R = 33335 Round 8: B_8 = 33335 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 8, 0, 130, 55 ] CBC-MAC = [ 194, 52, 118, 117, 58, 50, 235, 26, 244, 207, 225, 21, 85, 189, 189, 27 ] F_out = 40410 L = 33335, R = 24334 Round 9: B_9 = 24334 Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 9, 0, 95, 14 ] CBC-MAC = [ 143, 196, 218, 77, 67, 14, 128, 21, 112, 172, 197, 74, 236, 154, 4, 243 ] F_out = 44149 L = 24334, R = 77484 Test vector 3: Radix = 10 Input (length = 6): "314159" Tweak (length = 10): "2718281828" Encrypted: "535005" Intermediate values: P = [ 1, 2, 1, 0, 0, 10, 10, 3, 0, 0, 0, 6, 0, 0, 0, 10 ] Round 0: B_0 = 159 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 0, 0, 159 ] CBC-MAC = [ 254, 119, 122, 10, 253, 83, 220, 199, 186, 120, 103, 231, 179, 152, 128, 213 ] F_out = 095 L = 159, R = 409 Round 1: B_1 = 409 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 1, 1, 153 ] CBC-MAC = [ 16, 218, 152, 198, 28, 31, 71, 59, 236, 130, 145, 205, 133, 209, 228, 19 ] F_out = 443 L = 409, R = 602 Round 2: B_2 = 602 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 2, 2, 90 ] CBC-MAC = [ 142, 37, 43, 59, 120, 121, 141, 127, 122, 175, 192, 117, 9, 116, 33, 27 ] F_out = 015 L = 602, R = 424 Round 3: B_3 = 424 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 3, 1, 168 ] CBC-MAC = [ 27, 117, 235, 118, 96, 156, 23, 239, 112, 3, 243, 87, 2, 205, 203, 238 ] F_out = 791 L = 424, R = 393 Round 4: B_4 = 393 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 4, 1, 137 ] CBC-MAC = [ 111, 92, 41, 248, 198, 224, 26, 28, 68, 240, 251, 186, 185, 168, 152, 207 ] F_out = 988 L = 393, R = 412 Round 5: B_5 = 412 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 5, 1, 156 ] CBC-MAC = [ 12, 114, 120, 133, 136, 103, 35, 245, 221, 72, 50, 62, 141, 37, 19, 77 ] F_out = 293 L = 412, R = 686 Round 6: B_6 = 686 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 6, 2, 174 ] CBC-MAC = [ 37, 201, 185, 194, 254, 210, 60, 83, 63, 39, 218, 199, 88, 37, 55, 36 ] F_out = 339 L = 686, R = 751 Round 7: B_7 = 751 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 7, 2, 239 ] CBC-MAC = [ 31, 234, 156, 109, 202, 217, 33, 32, 99, 149, 103, 162, 71, 202, 248, 220 ] F_out = 264 L = 751, R = 950 Round 8: B_8 = 950 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 8, 3, 182 ] CBC-MAC = [ 0, 134, 88, 236, 94, 197, 163, 112, 150, 170, 152, 85, 243, 40, 10, 210 ] F_out = 784 L = 950, R = 535 Round 9: B_9 = 535 Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 9, 2, 23 ] CBC-MAC = [ 202, 187, 102, 252, 135, 173, 229, 55, 200, 200, 53, 184, 182, 20, 112, 105 ] F_out = 055 L = 535, R = 005 Test vector 4: Radix = 10 Input (length = 9): "999999999" Tweak (length = 7): "7777777" Encrypted: "658229573" Intermediate values: P = [ 1, 2, 1, 0, 0, 10, 10, 4, 0, 0, 0, 9, 0, 0, 0, 7 ] Round 0: B_0 = 99999 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 0, 1, 134, 159 ] CBC-MAC = [ 255, 112, 209, 229, 147, 253, 182, 161, 5, 33, 183, 42, 141, 37, 129, 203 ] F_out = 1233 L = 99999, R = 1232 Round 1: B_1 = 1232 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 1, 0, 4, 208 ] CBC-MAC = [ 222, 232, 229, 169, 154, 89, 227, 203, 203, 41, 107, 211, 129, 105, 243, 30 ] F_out = 89995 L = 1232, R = 89994 Round 2: B_2 = 89994 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 2, 1, 95, 138 ] CBC-MAC = [ 78, 231, 88, 101, 235, 49, 207, 123, 60, 77, 237, 23, 76, 48, 233, 34 ] F_out = 1867 L = 89994, R = 3099 Round 3: B_3 = 3099 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 3, 0, 12, 27 ] CBC-MAC = [ 164, 20, 211, 124, 220, 136, 90, 131, 90, 142, 6, 228, 175, 113, 234, 56 ] F_out = 23651 L = 3099, R = 13645 Round 4: B_4 = 13645 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 4, 0, 53, 77 ] CBC-MAC = [ 21, 187, 102, 200, 90, 106, 179, 135, 114, 194, 232, 65, 179, 19, 85, 216 ] F_out = 3895 L = 13645, R = 6994 Round 5: B_5 = 6994 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 5, 0, 27, 82 ] CBC-MAC = [ 158, 91, 78, 114, 180, 122, 192, 144, 40, 20, 251, 45, 48, 128, 168, 76 ] F_out = 65424 L = 6994, R = 79069 Round 6: B_6 = 79069 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 6, 1, 52, 221 ] CBC-MAC = [ 141, 136, 240, 83, 248, 94, 25, 150, 194, 26, 70, 193, 117, 188, 27, 43 ] F_out = 6502 L = 79069, R = 3496 Round 7: B_7 = 3496 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 7, 0, 13, 168 ] CBC-MAC = [ 242, 54, 189, 214, 131, 102, 122, 85, 21, 79, 7, 104, 128, 109, 101, 13 ] F_out = 18229 L = 3496, R = 97298 Round 8: B_8 = 97298 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 8, 1, 124, 18 ] CBC-MAC = [ 196, 167, 217, 126, 145, 96, 14, 30, 86, 208, 212, 106, 174, 140, 93, 101 ] F_out = 3086 L = 97298, R = 6582 Round 9: B_9 = 6582 Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 9, 0, 25, 182 ] CBC-MAC = [ 194, 177, 132, 170, 147, 14, 201, 115, 88, 45, 229, 88, 176, 147, 68, 73 ] F_out = 32275 L = 6582, R = 29573 Test vector 5: Radix = 36 Input (length = 16): "C4XPWULBM3M863JH" Tweak (length = 16): "TQF9J5QDAGSCSPB1" Encrypted: "C8AQ3U846ZWH6QZP" Intermediate values: P = [ 1, 2, 1, 0, 0, 36, 10, 8, 0, 0, 0, 16, 0, 0, 0, 16 ] Round 0: B_0 = M3M863JH Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 147, 60, 114, 39, 109 ] CBC-MAC = [ 208, 146, 224, 204, 140, 102, 171, 180, 206, 125, 48, 178, 174, 227, 44, 82 ] F_out = 0yvjtuwi L = M3M863JH, R = d3t9qpht Round 1: B_1 = d3t9qpht Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 239, 32, 4, 176, 145 ] CBC-MAC = [ 11, 95, 134, 200, 101, 178, 117, 81, 5, 138, 157, 54, 22, 2, 81, 228 ] F_out = qi75y7ue L = d3t9qpht, R = clte4bdv Round 2: B_2 = clte4bdv Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 230, 1, 5, 196, 163 ] CBC-MAC = [ 63, 177, 151, 77, 74, 227, 63, 53, 70, 208, 52, 187, 19, 94, 131, 141 ] F_out = e2uj0kvv L = clte4bdv, R = r6nsrado Round 3: B_3 = r6nsrado Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 1, 240, 1, 176, 229, 76 ] CBC-MAC = [ 23, 178, 193, 174, 191, 52, 42, 89, 205, 218, 204, 149, 163, 69, 47, 111 ] F_out = el46x7yt L = r6nsrado, R = r6xl1jco Round 4: B_4 = r6xl1jco Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 4, 1, 240, 36, 245, 145, 56 ] CBC-MAC = [ 195, 180, 234, 251, 217, 198, 241, 66, 234, 19, 252, 142, 245, 70, 180, 64 ] F_out = e4q6hzm6 L = r6xl1jco, R = 5bdz99zu Round 5: B_5 = 5bdz99zu Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 5, 0, 96, 255, 238, 225, 218 ] CBC-MAC = [ 163, 229, 90, 83, 179, 159, 225, 53, 163, 201, 186, 179, 170, 28, 233, 110 ] F_out = 8lwdqboz L = 5bdz99zu, R = zstyrv1n Round 6: B_6 = zstyrv1n Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 6, 2, 141, 53, 72, 75, 235 ] CBC-MAC = [ 23, 101, 72, 135, 87, 122, 54, 137, 69, 167, 200, 176, 23, 138, 66, 12 ] F_out = 7kgar168 L = zstyrv1n, R = cvua0b62 Round 7: B_7 = cvua0b62 Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 7, 0, 235, 21, 173, 170, 138 ] CBC-MAC = [ 65, 139, 179, 225, 22, 103, 89, 136, 82, 168, 181, 89, 181, 6, 10, 150 ] F_out = r1altw7t L = cvua0b62, R = qu4klr9g Round 8: B_8 = qu4klr9g Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 8, 1, 233, 167, 113, 1, 68 ] CBC-MAC = [ 52, 45, 23, 185, 113, 48, 200, 24, 44, 75, 83, 58, 167, 199, 234, 251 ] F_out = zcgg3j22 L = qu4klr9g, R = c8aq3u84 Round 9: B_9 = c8aq3u84 P = [ 1, 2, 1, 0, 0, 36, 10, 8, 0, 0, 0, 16, 0, 0, 0, 16 ] Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 9, 0, 223, 39, 10, 253, 196 ] CBC-MAC = [ 59, 60, 185, 126, 53, 229, 238, 165, 240, 167, 173, 225, 162, 23, 56, 195 ] F_out = g5rwkzq9 L = c8aq3u84, R = 6zwh6qzp