AES FFX Test Vector Data, version 1.0

Profile:  FFX[radix]
Test data generated by Voltage Security, June 2011.



AES-128 key for all test vectors: 2b7e151628aed2a6abf7158809cf4f3c



Test vector 1:



  Radix = 10

  Input (length = 10): "0123456789"

  Tweak (length = 10): "9876543210"



  Encrypted: "6124200773"



  Intermediate values:



  P = [ 1, 2, 1, 0, 0, 10, 5, 0, 0, 0, 10, 0, 0, 0, 10 ]



  Round 0:

    B_0 = "56789"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 0, 0, 231, 223 ]

    CBC_MAC = [ 178, 23, 94, 227, 235, 107, 241, 88, 255, 225, 124, 35, 113, 229, 204, 19 ]

    F_out = "24728"

    L = "56789", R = "25962"



  Round 1:

    B_1 = "25962"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 1, 0, 101, 106 ]

    CBC_MAC = [ 51, 190, 249, 61, 4, 109, 120, 103, 51, 255, 70, 97, 20, 140, 87, 153 ]

    F_out = "53767"

    L = "25962", R = "10556"



  Round 2:

    B_2 = "10556"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 2, 0, 41, 60 ]

    CBC_MAC = [ 46, 119, 157, 146, 150, 130, 241, 192, 111, 134, 229, 160, 201, 157, 218, 98 ]

    F_out = "03136"

    L = "10556", R = "29098"



  Round 3:

    B_3 = "29098"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 3, 0, 113, 170 ]

    CBC_MAC = [ 174, 123, 224, 87, 184, 248, 56, 84, 44, 10, 27, 227, 157, 233, 178, 91 ]

    F_out = "23220"

    L = "29098", R = "33776"



  Round 4:

    B_4 = "33776"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 4, 0, 131, 240 ]

    CBC_MAC = [ 143, 241, 191, 84, 85, 109, 85, 62, 98, 142, 122, 217, 177, 208, 239, 4 ]

    F_out = "49630"

    L = "33776", R = "78728"



  Round 5:

    B_5 = "78728"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 5, 1, 51, 136 ]

    CBC_MAC = [ 38, 71, 126, 189, 186, 53, 31, 145, 238, 76, 86, 253, 112, 160, 174, 231 ]

    F_out = "80529"

    L = "78728", R = "14305"



  Round 6:

    B_6 = "14305"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 6, 0, 55, 225 ]

    CBC_MAC = [ 125, 75, 237, 158, 131, 55, 209, 9, 101, 197, 0, 121, 194, 2, 116, 132 ]

    F_out = "80169"

    L = "14305", R = "58897"



  Round 7:

    B_7 = "58897"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 7, 0, 230, 17 ]

    CBC_MAC = [ 242, 246, 229, 238, 234, 164, 97, 149, 226, 83, 116, 152, 51, 255, 35, 135 ]

    F_out = "00469"

    L = "58897", R = "14774"



  Round 8:

    B_8 = "14774"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 8, 0, 57, 182 ]

    CBC_MAC = [ 207, 0, 24, 102, 176, 164, 198, 169, 67, 219, 228, 100, 60, 109, 178, 131 ]

    F_out = "02345"

    L = "14774", R = "61242"



  Round 9:

    B_9 = "61242"

    Q = [ 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 0, 0, 9, 0, 239, 58 ]

    CBC_MAC = [ 242, 84, 227, 1, 12, 169, 217, 207, 48, 18, 229, 133, 12, 69, 210, 146 ]

    F_out = "85999"

    L = "61242", R = "00773"





Test vector 2:



  Radix = 10

  Input (length = 10): "0123456789"

  No Tweak



  Encrypted: "2433477484"



  Intermediate values:



  P = [ 1, 2, 1, 0, 0, 10, 10, 5, 0, 0, 0, 10, 0, 0, 0, 0 ]



  Round 0:

    B_0 = 56789

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 221, 213 ]

    CBC-MAC = [ 195, 184, 41, 161, 232, 100, 43, 120, 204, 41, 148, 123, 59, 147, 219, 99 ]

    F_out = 60536

    L = 56789, R = 61770



  Round 1:

    B_1 = 61770

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 241, 74 ]

    CBC-MAC = [ 121, 100, 61, 158, 221, 250, 131, 16, 72, 2, 224, 89, 189, 220, 199, 44 ]

    F_out = 55248

    L = 61770, R = 12037



  Round 2:

    B_2 = 12037

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 47, 5 ]

    CBC-MAC = [ 9, 132, 75, 58, 46, 151, 10, 51, 165, 69, 95, 100, 199, 67, 56, 77 ]

    F_out = 94867

    L = 12037, R = 56637



  Round 3:

    B_3 = 56637

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 0, 221, 61 ]

    CBC-MAC = [ 125, 29, 160, 178, 41, 158, 148, 66, 104, 179, 136, 46, 59, 198, 72, 57 ]

    F_out = 82370

    L = 56637, R = 94407



  Round 4:

    B_4 = 94407

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 4, 1, 112, 199 ]

    CBC-MAC = [ 67, 122, 82, 147, 218, 251, 246, 239, 143, 18, 111, 55, 229, 180, 6, 114 ]

    F_out = 87727

    L = 94407, R = 44364



  Round 5:

    B_5 = 44364

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 5, 0, 173, 76 ]

    CBC-MAC = [ 216, 186, 138, 193, 244, 52, 17, 22, 8, 188, 121, 95, 62, 150, 28, 18 ]

    F_out = 90358

    L = 44364, R = 84765



  Round 6:

    B_6 = 84765

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 6, 1, 75, 29 ]

    CBC-MAC = [ 190, 15, 19, 163, 157, 41, 253, 232, 18, 10, 55, 166, 7, 219, 21, 192 ]

    F_out = 39560

    L = 84765, R = 83924



  Round 7:

    B_7 = 83924

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 7, 1, 71, 212 ]

    CBC-MAC = [ 79, 25, 29, 191, 153, 112, 242, 154, 155, 129, 202, 99, 245, 71, 41, 192 ]

    F_out = 48570

    L = 83924, R = 33335



  Round 8:

    B_8 = 33335

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 8, 0, 130, 55 ]

    CBC-MAC = [ 194, 52, 118, 117, 58, 50, 235, 26, 244, 207, 225, 21, 85, 189, 189, 27 ]

    F_out = 40410

    L = 33335, R = 24334



  Round 9:

    B_9 = 24334

    Q = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 9, 0, 95, 14 ]

    CBC-MAC = [ 143, 196, 218, 77, 67, 14, 128, 21, 112, 172, 197, 74, 236, 154, 4, 243 ]

    F_out = 44149

    L = 24334, R = 77484





Test vector 3:



  Radix = 10

  Input (length = 6): "314159"

  Tweak (length = 10): "2718281828"



  Encrypted: "535005"



  Intermediate values:



  P = [ 1, 2, 1, 0, 0, 10, 10, 3, 0, 0, 0, 6, 0, 0, 0, 10 ]



  Round 0:

    B_0 = 159

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 0, 0, 159 ]

    CBC-MAC = [ 254, 119, 122, 10, 253, 83, 220, 199, 186, 120, 103, 231, 179, 152, 128, 213 ]

    F_out = 095

    L = 159, R = 409



  Round 1:

    B_1 = 409

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 1, 1, 153 ]

    CBC-MAC = [ 16, 218, 152, 198, 28, 31, 71, 59, 236, 130, 145, 205, 133, 209, 228, 19 ]

    F_out = 443

    L = 409, R = 602



  Round 2:

    B_2 = 602

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 2, 2, 90 ]

    CBC-MAC = [ 142, 37, 43, 59, 120, 121, 141, 127, 122, 175, 192, 117, 9, 116, 33, 27 ]

    F_out = 015

    L = 602, R = 424



  Round 3:

    B_3 = 424

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 3, 1, 168 ]

    CBC-MAC = [ 27, 117, 235, 118, 96, 156, 23, 239, 112, 3, 243, 87, 2, 205, 203, 238 ]

    F_out = 791

    L = 424, R = 393



  Round 4:

    B_4 = 393

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 4, 1, 137 ]

    CBC-MAC = [ 111, 92, 41, 248, 198, 224, 26, 28, 68, 240, 251, 186, 185, 168, 152, 207 ]

    F_out = 988

    L = 393, R = 412



  Round 5:

    B_5 = 412

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 5, 1, 156 ]

    CBC-MAC = [ 12, 114, 120, 133, 136, 103, 35, 245, 221, 72, 50, 62, 141, 37, 19, 77 ]

    F_out = 293

    L = 412, R = 686



  Round 6:

    B_6 = 686

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 6, 2, 174 ]

    CBC-MAC = [ 37, 201, 185, 194, 254, 210, 60, 83, 63, 39, 218, 199, 88, 37, 55, 36 ]

    F_out = 339

    L = 686, R = 751



  Round 7:

    B_7 = 751

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 7, 2, 239 ]

    CBC-MAC = [ 31, 234, 156, 109, 202, 217, 33, 32, 99, 149, 103, 162, 71, 202, 248, 220 ]

    F_out = 264

    L = 751, R = 950



  Round 8:

    B_8 = 950

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 8, 3, 182 ]

    CBC-MAC = [ 0, 134, 88, 236, 94, 197, 163, 112, 150, 170, 152, 85, 243, 40, 10, 210 ]

    F_out = 784

    L = 950, R = 535



  Round 9:

    B_9 = 535

    Q = [ 50, 55, 49, 56, 50, 56, 49, 56, 50, 56, 0, 0, 0, 9, 2, 23 ]

    CBC-MAC = [ 202, 187, 102, 252, 135, 173, 229, 55, 200, 200, 53, 184, 182, 20, 112, 105 ]

    F_out = 055

    L = 535, R = 005





Test vector 4:



  Radix = 10

  Input (length = 9): "999999999"

  Tweak (length = 7): "7777777"



  Encrypted: "658229573"



  Intermediate values:



  P = [ 1, 2, 1, 0, 0, 10, 10, 4, 0, 0, 0, 9, 0, 0, 0, 7 ]



  Round 0:

    B_0 = 99999

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 0, 1, 134, 159 ]

    CBC-MAC = [ 255, 112, 209, 229, 147, 253, 182, 161, 5, 33, 183, 42, 141, 37, 129, 203 ]

    F_out = 1233

    L = 99999, R = 1232



  Round 1:

    B_1 = 1232

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 1, 0, 4, 208 ]

    CBC-MAC = [ 222, 232, 229, 169, 154, 89, 227, 203, 203, 41, 107, 211, 129, 105, 243, 30 ]

    F_out = 89995

    L = 1232, R = 89994



  Round 2:

    B_2 = 89994

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 2, 1, 95, 138 ]

    CBC-MAC = [ 78, 231, 88, 101, 235, 49, 207, 123, 60, 77, 237, 23, 76, 48, 233, 34 ]

    F_out = 1867

    L = 89994, R = 3099



  Round 3:

    B_3 = 3099

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 3, 0, 12, 27 ]

    CBC-MAC = [ 164, 20, 211, 124, 220, 136, 90, 131, 90, 142, 6, 228, 175, 113, 234, 56 ]

    F_out = 23651

    L = 3099, R = 13645



  Round 4:

    B_4 = 13645

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 4, 0, 53, 77 ]

    CBC-MAC = [ 21, 187, 102, 200, 90, 106, 179, 135, 114, 194, 232, 65, 179, 19, 85, 216 ]

    F_out = 3895

    L = 13645, R = 6994



  Round 5:

    B_5 = 6994

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 5, 0, 27, 82 ]

    CBC-MAC = [ 158, 91, 78, 114, 180, 122, 192, 144, 40, 20, 251, 45, 48, 128, 168, 76 ]

    F_out = 65424

    L = 6994, R = 79069



  Round 6:

    B_6 = 79069

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 6, 1, 52, 221 ]

    CBC-MAC = [ 141, 136, 240, 83, 248, 94, 25, 150, 194, 26, 70, 193, 117, 188, 27, 43 ]

    F_out = 6502

    L = 79069, R = 3496



  Round 7:

    B_7 = 3496

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 7, 0, 13, 168 ]

    CBC-MAC = [ 242, 54, 189, 214, 131, 102, 122, 85, 21, 79, 7, 104, 128, 109, 101, 13 ]

    F_out = 18229

    L = 3496, R = 97298



  Round 8:

    B_8 = 97298

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 8, 1, 124, 18 ]

    CBC-MAC = [ 196, 167, 217, 126, 145, 96, 14, 30, 86, 208, 212, 106, 174, 140, 93, 101 ]

    F_out = 3086

    L = 97298, R = 6582



  Round 9:

    B_9 = 6582

    Q = [ 55, 55, 55, 55, 55, 55, 55, 0, 0, 0, 0, 0, 9, 0, 25, 182 ]

    CBC-MAC = [ 194, 177, 132, 170, 147, 14, 201, 115, 88, 45, 229, 88, 176, 147, 68, 73 ]

    F_out = 32275

    L = 6582, R = 29573





Test vector 5:



  Radix = 36

  Input (length = 16): "C4XPWULBM3M863JH"

  Tweak (length = 16): "TQF9J5QDAGSCSPB1"



  Encrypted: "C8AQ3U846ZWH6QZP"



  Intermediate values:



  P = [ 1, 2, 1, 0, 0, 36, 10, 8, 0, 0, 0, 16, 0, 0, 0, 16 ]



  Round 0:

    B_0 = M3M863JH

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 147, 60, 114, 39, 109 ]

    CBC-MAC = [ 208, 146, 224, 204, 140, 102, 171, 180, 206, 125, 48, 178, 174, 227, 44, 82 ]

    F_out = 0yvjtuwi

    L = M3M863JH, R = d3t9qpht



  Round 1:

    B_1 = d3t9qpht

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 239, 32, 4, 176, 145 ]

    CBC-MAC = [ 11, 95, 134, 200, 101, 178, 117, 81, 5, 138, 157, 54, 22, 2, 81, 228 ]

    F_out = qi75y7ue

    L = d3t9qpht, R = clte4bdv



  Round 2:

    B_2 = clte4bdv

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 230, 1, 5, 196, 163 ]

    CBC-MAC = [ 63, 177, 151, 77, 74, 227, 63, 53, 70, 208, 52, 187, 19, 94, 131, 141 ]

    F_out = e2uj0kvv

    L = clte4bdv, R = r6nsrado



  Round 3:

    B_3 = r6nsrado

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 1, 240, 1, 176, 229, 76 ]

    CBC-MAC = [ 23, 178, 193, 174, 191, 52, 42, 89, 205, 218, 204, 149, 163, 69, 47, 111 ]

    F_out = el46x7yt

    L = r6nsrado, R = r6xl1jco



  Round 4:

    B_4 = r6xl1jco

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 4, 1, 240, 36, 245, 145, 56 ]

    CBC-MAC = [ 195, 180, 234, 251, 217, 198, 241, 66, 234, 19, 252, 142, 245, 70, 180, 64 ]

    F_out = e4q6hzm6

    L = r6xl1jco, R = 5bdz99zu



  Round 5:

    B_5 = 5bdz99zu

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 5, 0, 96, 255, 238, 225, 218 ]

    CBC-MAC = [ 163, 229, 90, 83, 179, 159, 225, 53, 163, 201, 186, 179, 170, 28, 233, 110 ]

    F_out = 8lwdqboz

    L = 5bdz99zu, R = zstyrv1n



  Round 6:

    B_6 = zstyrv1n

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 6, 2, 141, 53, 72, 75, 235 ]

    CBC-MAC = [ 23, 101, 72, 135, 87, 122, 54, 137, 69, 167, 200, 176, 23, 138, 66, 12 ]

    F_out = 7kgar168

    L = zstyrv1n, R = cvua0b62



  Round 7:

    B_7 = cvua0b62

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 7, 0, 235, 21, 173, 170, 138 ]

    CBC-MAC = [ 65, 139, 179, 225, 22, 103, 89, 136, 82, 168, 181, 89, 181, 6, 10, 150 ]

    F_out = r1altw7t

    L = cvua0b62, R = qu4klr9g



  Round 8:

    B_8 = qu4klr9g

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 8, 1, 233, 167, 113, 1, 68 ]

    CBC-MAC = [ 52, 45, 23, 185, 113, 48, 200, 24, 44, 75, 83, 58, 167, 199, 234, 251 ]

    F_out = zcgg3j22

    L = qu4klr9g, R = c8aq3u84



  Round 9:

    B_9 = c8aq3u84

    P = [ 1, 2, 1, 0, 0, 36, 10, 8, 0, 0, 0, 16, 0, 0, 0, 16 ]

    Q = [ 84, 81, 70, 57, 74, 53, 81, 68, 65, 71, 83, 67, 83, 80, 66, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 9, 0, 223, 39, 10, 253, 196 ]

    CBC-MAC = [ 59, 60, 185, 126, 53, 229, 238, 165, 240, 167, 173, 225, 162, 23, 56, 195 ]

    F_out = g5rwkzq9

    L = c8aq3u84, R = 6zwh6qzp

