Project Wycheproof

https://github.com/c2sp/wycheproof
Admin
A community-managed repository of cryptographic test vectors for testing against known attacks,...
Tokens:25,514
Snippets:404
Trust Score:8.4
License:Apache-2.0
Update:2 months ago
Show doc for...
Tokens:
Raw
### AES-GCM Counter Overflow Example

Source: https://github.com/c2sp/wycheproof/blob/main/doc/aesgcm.md

Illustrates the counter increment behavior in AES-GCM for a specific block value, showing the modulo 2^32 arithmetic.

```plaintext
0xffffffffffffffffffffffffffffffff
```

--------------------------------

### RSA Key with 'alg' field

Source: https://github.com/c2sp/wycheproof/blob/main/doc/json_web_crypto.md

Example of an RSA key object including the 'alg' field, which specifies the intended encryption algorithm. This field is crucial for security to prevent algorithm confusion attacks.

```json
{
        "alg": "RSA-OAEP",
        "use": "enc",
        "n": "...",
        "e": "...",
        "d": "...",
        "p": "...",
        "q": "...",
        "dp": "...",
        "dq": "...",
        "qi": "...",
        "kid": "...",
        "kty": "RSA"
}
```

--------------------------------

### JWE Ciphertext Header with 'alg'

Source: https://github.com/c2sp/wycheproof/blob/main/doc/json_web_crypto.md

Example of a JWE ciphertext header containing an 'alg' field. This field indicates the algorithm used for encryption and should match the algorithm associated with the key.

```json
{"alg":"RSA1_5","enc":"..."}
```

--------------------------------

### Scaffold a starter envelope

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Generates a template JSON file with placeholders based on a provided schema.

```bash
go run ./tools/vectorgen scaffold add \
  --schema mlkem_semi_expanded_decaps_test_schema.json \
  --output envelope.json
```

--------------------------------

### Troubleshooting Build Errors

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Error message displayed when the required GOEXPERIMENT environment variable is missing.

```text
imports encoding/json/jsontext: build constraints exclude all Go files in
.../src/encoding/json/jsontext
```

--------------------------------

### Initialize RSASSA-PSS Verifier in Java

Source: https://github.com/c2sp/wycheproof/blob/main/doc/rsa.md

Demonstrates how to initialize an RSASSA-PSS verifier in Java by specifying algorithm parameters. This approach is used when the algorithm name is 'RSASSA-PSS' and requires explicit parameter configuration.

```java
Signature verifier = Signature.getInstance("RSASSA-PSS");
PSSParameterSpec pssParams = ...;
verifier.setParameter(pssParams);
verifier.init(publicKey);
```

--------------------------------

### Replay Vector Replacement Workflow

Source: https://github.com/c2sp/wycheproof/blob/main/vectorgen/testdata/replace_reenc/README.md

Commands to copy the source file, execute the vectorgen replace tool, and verify the output against the expected result.

```bash
cp vectorgen/testdata/add_intogroup/before.json /tmp/mlkem_512.json
GOEXPERIMENT=jsonv2 go run ./tools/vectorgen replace \
  --vectors /tmp/mlkem_512.json \
  --source github/lukaszobernig/reenc@1.0 \
  --input vectorgen/testdata/replace_reenc/envelope.json \
  --schemas-dir vectorgen/testdata/add_intogroup
diff /tmp/mlkem_512.json vectorgen/testdata/replace_reenc/after.json
```

--------------------------------

### Create a new test file

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Applies a populated envelope to create a new test vector file.

```bash
go run ./tools/vectorgen add --create \
  --vectors testvectors_v1/my_new_test.json \
  --input envelope.json
```

--------------------------------

### Scaffold an update envelope

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Create a JSON file to define the source and the specific test cases to be patched.

```json
{
  "source": "github/aws/aws-lc",
  "patches": [
    { "tcId": 1, "ek": "...", "K": "..." },
    { "tcId": 2, "ek": "..." }
  ]
}
```

--------------------------------

### Verifying Vector Files

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Commands to check that vector files are canonical and schema-valid after modifications.

```bash
go run ./tools/vectorgen fmt --check
'testvectors_v1/*.json'
```

```bash
go run ./tools/vectorgen lint
```

--------------------------------

### Instantiate Signature with SHA1withDSA

Source: https://github.com/c2sp/wycheproof/blob/main/doc/dsa.md

This Java code snippet shows how to instantiate a Signature object for SHA1withDSA. Using the short name 'DSA' is equivalent to this.

```java
    Signature s = Signature.getInstance("SHA1withDSA");
```

--------------------------------

### Replay Vector Update Workflow

Source: https://github.com/c2sp/wycheproof/blob/main/vectorgen/testdata/update_pr254c1/README.md

Executes the vector update process using the vectorgen tool and verifies the output against the expected result.

```bash
cp vectorgen/testdata/update_pr254c1/before.json /tmp/mlkem_512.json
GOEXPERIMENT=jsonv2 go run ./tools/vectorgen update \
  --vectors /tmp/mlkem_512.json \
  --input vectorgen/testdata/update_pr254c1/envelope.json \
  --schemas-dir vectorgen/testdata/update_pr254c1
diff /tmp/mlkem_512.json vectorgen/testdata/update_pr254c1/after.json
```

--------------------------------

### RSA PSS Signing with Parameters

Source: https://github.com/c2sp/wycheproof/blob/main/doc/rsa.md

When signing or verifying RSA PSS signatures, it is necessary to copy the parameters. This snippet demonstrates the correct initialization and usage of the Signature object for signing.

```java
RSAPrivateKey priv = ...;
byte[] msg = ...;
signer = Signature.getInstance("RSASSA-PSS");
signer.initSign(priv);
signer.setParameter(priv.getParams());
signer.update(msg);
byte[] signature = signer.sign();
```

--------------------------------

### Instantiate Signature with Explicit Hash Algorithm

Source: https://github.com/c2sp/wycheproof/blob/main/doc/dsa.md

These Java code snippets demonstrate how to instantiate Signature objects for DSA with specific SHA algorithms (SHA1, SHA224, SHA256).

```java
  Signature.getInstance("SHA1withDSA");
```

```java
  Signature.getInstance("SHA224withDSA");
```

```java
  Signature.getInstance("SHA256withDSA");
```

--------------------------------

### Utility Functions

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Additional utility functions for scaffolding, linting, and formatting.

```APIDOC
## Utility Functions

### ScaffoldAdd
func ScaffoldAdd(schemaName string, opts Options) ([]byte, error)
- Generates the JSON skeleton for a given schema.

### LintBytes
func LintBytes(data []byte, schemasFS fs.FS) error
- Validates an in-memory buffer against a schema.

### FormatBytes
func FormatBytes(in []byte) ([]byte, error)
- Canonical formatter for one-off JSON bytes.
```

--------------------------------

### Generate 2048-bit DSA Key Pair and Initialize Signature

Source: https://github.com/c2sp/wycheproof/blob/main/doc/dsa.md

This Java code snippet demonstrates generating a 2048-bit DSA key pair and initializing a signature instance. Note that 'DSA' defaults to 'SHA1withDSA'.

```java
    KeyPairGenerator keygen = KeyPairGenerator.getInstance("DSA");
    Keygen.initialize(2048);
    KeyPair keypair = keygen.genKeyPair();
    Signature s = Signature.getInstance("DSA");
    s.initSign(keypair.getPrivate());
```

--------------------------------

### Replay Vectorgen Add Workflow

Source: https://github.com/c2sp/wycheproof/blob/main/vectorgen/testdata/add_pr254c2/README.md

Executes the vectorgen add command to append a new test group to an existing JSON file and verifies the result against the expected output.

```bash
cp vectorgen/testdata/add_pr254c2/before.json /tmp/mlkem_512.json
GOEXPERIMENT=jsonv2 go run ./tools/vectorgen add \
  --vectors /tmp/mlkem_512.json \
  --input vectorgen/testdata/add_pr254c2/envelope.json \
  --schemas-dir vectorgen/testdata/add_pr254c2
diff /tmp/mlkem_512.json vectorgen/testdata/add_pr254c2/after.json
```

--------------------------------

### Simplified FF1.Encrypt Algorithm

Source: https://github.com/c2sp/wycheproof/blob/main/doc/ff1.md

This simplified version of FF1.Encrypt avoids numeral string conversions for intermediate values, directly using integer representations. This can improve performance and reduce arithmetic complexity.

```pseudocode
1. Let u = ⎣n/2⎦; v = n - u.
2. Let A = NUMradix(X[1..u]); B = NUMradix(X[u + 1..n])
3. Let b = ⎡ ⎡v log2(radix)⎤/8⎤.
4. Let d = 4⎡b / 4⎤ + 4.
5. Let P = [1]1 || [2]1 || [1]1 || [radix]3 || [10]1 || [u mod 256]1 || [n]4 || [t]4 .
6. For i from 0 to 9: 
   i. Let Q = T || [0]^(-t-b-1) mod 16 || [i]1 || [B]b 
   ii. Let R = PRF(P || Q). 
   iii. Let S be the first d bytes of the following string of ⎡d/16⎤ blocks: R || EK(R ⊕ [1]16) || EK(R ⊕ [2]16) .. EK(R ⊕ [⎡d/16⎤-1]16). 
   iv. Let y = NUM(S). 
   v. If i is even, let m = u; else, let m = v. 
   vi. Let C = (A+y) mod radixm .
   vii. A = B
   viii. B = C
7. Return STRmradix(A) || STRmradix(B).
```

--------------------------------

### FF1.Encrypt Algorithm (NIST SP800-38G)

Source: https://github.com/c2sp/wycheproof/blob/main/doc/ff1.md

This snippet outlines the steps for FF1 encryption as described in NIST SP800-38G. It involves conversions to numeral strings and blockwise operations.

```pseudocode
1. Let u = ⎣n/2⎦; v = n - u.
2. Let A = X[1..u]; B = X[u + 1..n].
3. Let b = ⎡ ⎡v log2(radix)⎤/8⎤.
4. Let d = 4⎡b / 4⎤ + 4.
5. Let P = [1]1 || [2]1 || [1]1 || [radix]3 || [10]1 || [u mod 256]1 || [n]4 || [t]4 .
6. For i from 0 to 9: 
   i. Let Q = T || [0]^(-t-b-1) mod 16 || [i]1 || [NUMradix(B)]b 
   ii. Let R = PRF(P || Q). 
   iii. Let S be the first d bytes of the following string of ⎡d/16⎤ blocks: R || EK(R ⊕ [1]16) || EK(R ⊕ [2]16) .. EK(R ⊕ [⎡d/16⎤-1]16). 
   iv. Let y = NUM(S). 
   v. If i is even, let m = u; else, let m = v. 
   vi. Let c = (NUMradix(A)+y) mod radix m . 
   vii. Let C = STRmradix(c). 
   viii. Let A = B. 
   ix. Let B = C.
7. Return A || B.
```

--------------------------------

### JWS Compact Serialization Format

Source: https://github.com/c2sp/wycheproof/blob/main/doc/json_web_crypto.md

Illustrates the structure of a JSON Web Signature in its compact serialization format.

```text
BASE64URL(UTF8(JWS Protected Header)) || '.' ||
BASE64URL(JWS Payload) || '.' ||
BASE64URL(JWS Signature)
```

--------------------------------

### Domain Parameters Structure (RFC 2459)

Source: https://github.com/c2sp/wycheproof/blob/main/doc/dh.md

Describes the domain parameters for Diffie-Hellman keys according to RFC 2459, including p, g, q, and an optional j and validationParms.

```ASN.1
DomainParameters ::=
SEQUENCE {
    p       INTEGER, -- odd prime, p=jq +1
    g       INTEGER, -- generator, g
    q       INTEGER, -- factor of p-1
    j       INTEGER OPTIONAL, -- subgroup factor, j>= 2
    validationParms  ValidationParms OPTIONAL }
```

--------------------------------

### Recreate PR255 Test Vector

Source: https://github.com/c2sp/wycheproof/blob/main/vectorgen/testdata/add_pr255/README.md

Command sequence to generate the test vector file using the vectorgen tool and verify it against the expected output.

```bash
rm -f /tmp/mldsa_87_reduction_omission_verify_test.json
GOEXPERIMENT=jsonv2 go run ./tools/vectorgen add --create \
  --vectors /tmp/mldsa_87_reduction_omission_verify_test.json \
  --input vectorgen/testdata/add_pr255/envelope.json
diff /tmp/mldsa_87_reduction_omission_verify_test.json vectorgen/testdata/add_pr255/after.json
```

--------------------------------

### vectorgen.Add

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Adds new vectors to an existing test vector file or creates a new file.

```APIDOC
## vectorgen.Add

### Description
Adds new test vectors to a specified JSON file. Can be used to append to an existing group or create a new file by providing appropriate template information.

### Signature
func Add(path string, env AddEnvelope, opts Options) error

### Parameters
- **path** (string) - Required - The file path to the test vector JSON file.
- **env** (AddEnvelope) - Required - The envelope containing the tests and group configuration.
- **opts** (Options) - Required - Configuration options for the operation.
```

--------------------------------

### Add New Vectors in Go

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Use AddEnvelope to append new test objects into an existing group identified by source name.

```go
env := vectorgen.AddEnvelope{
    Tests:     []jsontext.Value{ /* one or more test objects */ },
    IntoGroup: "github/aws/aws-lc", // or "name@version"
}
err := vectorgen.Add("testvectors_v1/mlkem_512_semi_expanded_decaps_test.json",
    env, vectorgen.Options{})
```

--------------------------------

### Apply vector updates

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Execute the update command using the vectorgen tool with the specified input envelope.

```bash
go run ./tools/vectorgen update \
  --vectors 'testvectors_v1/mlkem_*_semi_expanded_decaps_test.json' \
  --input envelope.json
```

--------------------------------

### DHParameter Structure (PKCS #3)

Source: https://github.com/c2sp/wycheproof/blob/main/doc/dh.md

Defines the Diffie-Hellman parameters as specified in PKCS #3, including prime (p), base (g), and an optional privateValueLength.

```ASN.1
DHParameter ::=
SEQUENCE {
prime INTEGER, -- p
base INTEGER, -- g
privateValueLength INTEGER OPTIONAL }
```

--------------------------------

### Construct a replacement envelope

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Define a new group template and test cases to replace an existing group of vectors.

```json
{
  "groupTemplate": {
    "type": "MLKEMDecapsValidationTest",
    "source": { "name": "github/lukaszobernig/reenc", "version": "2.0" },
    "parameterSet": "ML-KEM-512"
  },
  "tests": [
    { "comment": "...", "dk": "...", "c": "...", "ek": "...", "result": "invalid", "flags": [...] }
  ]
}
```

--------------------------------

### Update or Rewrite Vector Fields in Go

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Use UpdateEnvelope with patches to modify specific fields within existing test vectors.

```go
env := vectorgen.UpdateEnvelope{
    Source: "github/aws/aws-lc",
    Patches: []jsontext.Value{
        jsontext.Value(`{"tcId": 1, "ek": "..."}`),
        jsontext.Value(`{"tcId": 2, "ek": "..."}`),
    },
    Overwrite: true, // replace existing values
    Partial:   true, // patch a subset
}
err := vectorgen.Update("testvectors_v1/mlkem_512_semi_expanded_decaps_test.json",
    env, vectorgen.Options{})
```

--------------------------------

### Apply vector group replacement

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Execute the replace command to swap an existing group of vectors with the new data.

```bash
go run ./tools/vectorgen replace \
  --vectors testvectors_v1/mlkem_512_semi_expanded_decaps_test.json \
  --source github/lukaszobernig/reenc@1.0 \
  --input envelope.json
```

--------------------------------

### Replace a Group of Vectors in Go

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Use Replace to swap an entire group of vectors based on a source filter.

```go
env := vectorgen.AddEnvelope{
    GroupTemplate: jsontext.Value(`{
        "type": "MLKEMDecapsValidationTest",
        "source": {"name": "github/lukaszobernig/reenc", "version": "2.0"},
        "parameterSet": "ML-KEM-512"
    }`),
    Tests: []jsontext.Value{ /* new tests */ },
}
filter := vectorgen.ParseSourceFilter("github/lukaszobernig/reenc@1.0")
err := vectorgen.Replace("testvectors_v1/mlkem_512_semi_expanded_decaps_test.json",
    env, filter, vectorgen.Options{})
```

--------------------------------

### Append new tests to an existing group

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Adds specific test cases into an existing group identified by its source name.

```bash
go run ./tools/vectorgen add \
  --vectors testvectors_v1/mlkem_512_semi_expanded_decaps_test.json \
  --input envelope.json \
  --into-group github/aws/aws-lc
```

--------------------------------

### Specify RSA OAEP Parameters Explicitly

Source: https://github.com/c2sp/wycheproof/blob/main/doc/rsa.md

Use this pattern to ensure compatible RSA OAEP implementations by explicitly setting SHA-256 for both the digest and MGF1, and using a specified PSource.

```java
Cipher cipher = Cipher.getInstance("RSA/ECB/OAEPPadding");
  PSource p = PSource.PSpecified.DEFAULT;
  MGF1ParameterSpec mgf1Params = new MGF1ParameterSpec("SHA-256");
  OAEPParameterSpec params = new OAEPParameterSpec("SHA-256", "MGF1", mgf1Params, p);
  cipher.init(mode, key, params);
```

--------------------------------

### RSASSA-PSS-params ASN.1 Definition

Source: https://github.com/c2sp/wycheproof/blob/main/doc/rsa.md

Defines the ASN.1 structure for RSASSA-PSS parameters, including default values for hash algorithm, mask generation function, salt length, and trailer field. Note that the default values (sha1, mgf1SHA1, 20, trailerFieldBC) are considered weak and should not be used for key generation.

```asn.1
RSASSA-PSS-params ::= SEQUENCE {
     hashAlgorithm      [0] HashAlgorithm      DEFAULT sha1,
     maskGenAlgorithm   [1] MaskGenAlgorithm   DEFAULT mgf1SHA1,
     saltLength         [2] INTEGER            DEFAULT 20,
     trailerField       [3] TrailerField       DEFAULT trailerFieldBC
   }
```

--------------------------------

### Append a new group to an existing file

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Adds a new group of tests to an existing test vector file without creating a new file.

```bash
go run ./tools/vectorgen add \
  --vectors testvectors_v1/mlkem_512_semi_expanded_decaps_test.json \
  --input envelope.json
```

--------------------------------

### Generate 2048-bit DSA Key Pair

Source: https://github.com/c2sp/wycheproof/blob/main/doc/dsa.md

This Java code snippet focuses on generating a 2048-bit DSA key pair using KeyPairGenerator. The key size refers to the 'p' parameter.

```java
    KeyPairGenerator keygen = KeyPairGenerator.getInstance("DSA");
    Keygen.initialize(2048);
    KeyPair keypair = keygen.genKeyPair();
```

--------------------------------

### JWS Signature Input Definition

Source: https://github.com/c2sp/wycheproof/blob/main/doc/json_web_crypto.md

Defines the input used for generating the JWS Signature in the compact serialization.

```text
ASCII(BASE64URL(UTF8(JWS Protected Header)) || '.' || BASE64URL(JWS Payload))
```

--------------------------------

### Append a test to an existing group using vectorgen

Source: https://github.com/c2sp/wycheproof/blob/main/vectorgen/testdata/add_intogroup/README.md

Executes the vectorgen tool to add a test case from an envelope file into a specified group within a JSON vector file.

```bash
cp vectorgen/testdata/add_intogroup/before.json /tmp/mlkem_512.json
GOEXPERIMENT=jsonv2 go run ./tools/vectorgen add \
  --vectors /tmp/mlkem_512.json \
  --input vectorgen/testdata/add_intogroup/envelope.json \
  --into-group github/lukaszobernig/reenc \
  --schemas-dir vectorgen/testdata/add_intogroup
diff /tmp/mlkem_512.json vectorgen/testdata/add_intogroup/after.json
```

--------------------------------

### RSAES-OAEP-params Structure

Source: https://github.com/c2sp/wycheproof/blob/main/doc/rsa.md

Defines the structure for RSA OAEP algorithm parameters as specified in RFC 8017 A.2.1. Ensure all parties use the same parameters when using a library.

```ASN.1
RSAES-OAEP-params ::= SEQUENCE {
     hashAlgorithm      [0] HashAlgorithm     DEFAULT sha1,
     maskGenAlgorithm   [1] MaskGenAlgorithm  DEFAULT mgf1SHA1,
     pSourceAlgorithm   [2] PSourceAlgorithm  DEFAULT pSpecifiedEmpty
   }
```

--------------------------------

### vectorgen.Replace

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Replaces an entire group of vectors within a file.

```APIDOC
## vectorgen.Replace

### Description
Replaces a whole group of vectors matching a specific source filter with a new group template and set of tests.

### Signature
func Replace(path string, env AddEnvelope, filter SourceFilter, opts Options) error

### Parameters
- **path** (string) - Required - The file path to the test vector JSON file.
- **env** (AddEnvelope) - Required - The new group template and tests.
- **filter** (SourceFilter) - Required - The filter used to identify the group to be replaced.
- **opts** (Options) - Required - Configuration options for the operation.
```

--------------------------------

### AES-CTR Next Counter Value

Source: https://github.com/c2sp/wycheproof/blob/main/doc/aesgcm.md

Shows the resulting counter value for the next block in AES-CTR after an overflow, highlighting the difference from AES-GCM.

```plaintext
0x00000000000000000000000000000000
```

--------------------------------

### JDK 8 DSA Key Size Check

Source: https://github.com/c2sp/wycheproof/blob/main/doc/dsa.md

This Java code snippet shows the key size check for DSA parameters in JDK 8, preventing keys larger than 1024 bits.

```java
 @Override
  protected void checkKey(DSAParams params)
     throws InvalidKeyException {
    int valueL = params.getP().bitLength();
    if (valueL > 1024) {
       throw new InvalidKeyException("Key is too long for this algorithm");
   }
 }
```

--------------------------------

### AEAD Test Vector JSON Structure

Source: https://github.com/c2sp/wycheproof/blob/main/doc/formats.md

This JSON structure represents a test vector for Authenticated Encryption with Associated Data (AEAD) algorithms. It includes algorithm details, test group configurations, and individual test cases with keys, nonces, and expected tags.

```json
{
  "algorithm" : "AES-EAX",
  "schema" : "aead_test_schema.json",
  "generatorVersion" : "0.9",
  "numberOfTests" : 240,
  "header" : [
     "text",
     "more text",
     ...
  ],
  "notes" : {
    "Ktv" : {
      "bugType" : "BASIC",
      "description" : "Known test vector from eprint.iacr.org/2003/069"
    },
  },
  "testGroups" : [
    {
      "type" : "AeadTest",
      "keySize" : 128,
      "ivSize" : 128,
      "tagSize" : 128,
      "tests" : [
        {
          "tcId" : 1,
          "comment" : "eprint.iacr.org/2003/069",
          "flags" : [
            "Ktv"
          ],
          "key" : "233952dee4d5ed5f9b9c6d6ff80ff478",
          "iv" : "62ec67f9c3a4a407fcb2a8c49031a8b3",
          "aad" : "6bfb914fd07eae6b",
          "msg" : "",
          "ct" : "",
          "tag" : "e037830e8389f27b025a2d6527e79d01",
          "result" : "valid"
        },
    ...
  ]
}
```

--------------------------------

### AES-GCM Next Counter Value

Source: https://github.com/c2sp/wycheproof/blob/main/doc/aesgcm.md

Shows the resulting counter value for the next block in AES-GCM after an overflow.

```plaintext
0xffffffffffffffffffffffff00000000
```

--------------------------------

### PKCS1Algorithms OID Definitions for RSA Keys

Source: https://github.com/c2sp/wycheproof/blob/main/doc/rsa.md

Defines the AlgorithmIdentifier structure for RSA keys as specified in RFC 8017 Section A.2. It lists various OIDs for different RSA encryption and signature schemes, including RSASSA-PSS.

```asn.1
PKCS1Algorithms    ALGORITHM-IDENTIFIER ::=
 {
  { OID rsaEncryption                PARAMETERS NULL } |
  { OID md2WithRSAEncryption         PARAMETERS NULL } |
  { OID md5WithRSAEncryption         PARAMETERS NULL } |
  { OID sha1WithRSAEncryption        PARAMETERS NULL } |
  { OID sha224WithRSAEncryption      PARAMETERS NULL } |
  { OID sha256WithRSAEncryption      PARAMETERS NULL } |
  { OID sha384WithRSAEncryption      PARAMETERS NULL } |
  { OID sha512WithRSAEncryption      PARAMETERS NULL } |
  { OID sha512-224WithRSAEncryption  PARAMETERS NULL } |
  { OID sha512-256WithRSAEncryption  PARAMETERS NULL } |
  { OID id-RSAES-OAEP   PARAMETERS RSAES-OAEP-params } |
   PKCS1PSourceAlgorithms                               |
  { OID id-RSASSA-PSS   PARAMETERS RSASSA-PSS-params },
   ...  -- Allows for future expansion --
 }
```

--------------------------------

### vectorgen.Update

Source: https://github.com/c2sp/wycheproof/blob/main/doc/vectorgen.md

Updates or patches existing vectors within a test vector file.

```APIDOC
## vectorgen.Update

### Description
Updates or rewrites specific fields of existing vectors identified by a source name. Supports partial patching and overwriting existing values.

### Signature
func Update(path string, env UpdateEnvelope, opts Options) error

### Parameters
- **path** (string) - Required - The file path to the test vector JSON file.
- **env** (UpdateEnvelope) - Required - The envelope containing the source identifier and patches.
- **opts** (Options) - Required - Configuration options for the operation.
```

--------------------------------

### AES-GCM Test Vector for Counter Overflow

Source: https://github.com/c2sp/wycheproof/blob/main/doc/aesgcm.md

This test vector can be used to identify issues in AES-GCM implementations where the counter might overflow within the first few increments. It specifies the key, IV, AAD, message, ciphertext, and expected tag.

```plaintext
key : "00112233445566778899aabbccddeeff",
iv : "dd9d0b4a0c3d681524bffca31d907661",
aad : "",
msg : "00000000000000000000000000000000000000000000000000000000000000000000000000000000",
ct : "64b19314c31af45accdf7e3c4db79f0d948ca37a8e6649e88aeffb1c598f3607007702417ea0e0bc",
tag : "5281efc7f13ac8e14ccf5dca7bfbfdd1"
```
Tokens:
Raw