Revision control
Copy as Markdown
Other Tools
#test cpuid aesni clmul pmull ssse3
[AES-128/GCM]
# Nist | Test Case 1
Key = 00000000000000000000000000000000
Nonce = 000000000000000000000000
In =
Out = 58E2FCCEFA7E3061367F1D57A4E7455A
# Nist | Test Case 2
Key = 00000000000000000000000000000000
Nonce = 000000000000000000000000
In = 00000000000000000000000000000000
Out = 0388DACE60B6A392F328C2B971B2FE78AB6E47D42CEC13BDF53A67B21257BDDF
# Nist | Test Case 3
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = CAFEBABEFACEDBADDECAF888
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B391AAFD255
Out = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E091473F59854D5C2AF327CD64A62CF35ABD2BA6FAB4
# Nist | Test Case 4
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = CAFEBABEFACEDBADDECAF888
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 42831EC2217774244B7221B784D0D49CE3AA212F2C02A4E035C17E2329ACA12E21D514B25466931C7D8F6A5AAC84AA051BA30B396A0AAC973D58E0915BC94FBC3221A5DB94FAE95AE7121A47
# Nist | Test Case 5
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = CAFEBABEFACEDBAD
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 61353B4C2806934A777FF51FA22A4755699B2A714FCDC6F83766E5F97B6C742373806900E49F24B22B097544D4896B424989B5E1EBAC0F07C23F45983612D2E79E3B0785561BE14AACA2FCCB
# Nist | Test Case 6
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = 9313225DF88406E555909C5AFF5269AA6A7A9538534F7DA1E4C303D2A318A728C3C0C95156809539FCF0E2429A6B525416AEDBF5A0DE6A57A637B39B
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 8CE24998625615B603A033ACA13FB894BE9112A5C3A211A8BA262A3CCA7E2CA701E4A9A4FBA43C90CCDCB281D48C7C6FD62875D2ACA417034C34AEE5619CC5AEFFFE0BFA462AF43C1699D050
# GCM vectors generated by OpenSSL via Python cryptography
#
# These GCM nonces are not 96 bits and so are hashed with GHASH to
# produce the counter value. For these inputs the CTR value is
# very near 2^32, which exposed a bug in GCM when the counter overflowed
Key = 00000000000000000000000000000000
Nonce = 0AAC82F3E53C2756034F7BD5827C9EDD
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out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
Key = 00000000000000000000000000000000
Nonce = 63ADFF969337DB7AAA3D862A8A827558
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = E7813D2279516D5EE54E03371B0192FE2B66EF4BF3C7F741D2B8E1809CA5C1805908ADEFE6C5884736DF98B7EBCB08110B58C384E4A2FF25644CDFEAA2104FA3B33F00B689319EF7F09B2F066AEC96DC
Key = 00000000000000000000000000000000
Nonce = E60108DFED8198FB286E0A77E699DA7B
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = A833DCC2EC04BEF5ED9E7E7FB08D61244CD795C21FEE194E7AAF7D9BD66B324F39FFC46DB5A7B9E1D6703F95290027DE6AC274CAE11C632F16261B71CE97EEA6CBE8A82B4F55F5A8B5CE1B268A7B35D8
[AES-128/GCM(12)]
# Nist | Test Case 5 with 12 byte tag
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = CAFEBABEFACEDBAD
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 61353B4C2806934A777FF51FA22A4755699B2A714FCDC6F83766E5F97B6C742373806900E49F24B22B097544D4896B424989B5E1EBAC0F07C23F45983612D2E79E3B0785561BE14A
# Nist | Test Case 6 with 12 byte tag
Key = FEFFE9928665731C6D6A8F9467308308
Nonce = 9313225DF88406E555909C5AFF5269AA6A7A9538534F7DA1E4C303D2A318A728C3C0C95156809539FCF0E2429A6B525416AEDBF5A0DE6A57A637B39B
In = D9313225F88406E5A55909C5AFF5269A86A7A9531534F7DA2E4C303D8A318A721C3C0C95956809532FCF0E2449A6B525B16AEDF5AA0DE657BA637B39
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
Out = 8CE24998625615B603A033ACA13FB894BE9112A5C3A211A8BA262A3CCA7E2CA701E4A9A4FBA43C90CCDCB281D48C7C6FD62875D2ACA417034C34AEE5619CC5AEFFFE0BFA462AF43C
[AES-192/GCM]
# Nist | Test Case 7
Key = 000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In =
Out = cd33b28ac773f74ba00ed1f312572435
# Nist | Test Case 8
Key = 000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In = 00000000000000000000000000000000
Out = 98e7247c07f0fe411c267e4384b0f6002ff58d80033927ab8ef4d4587514f0fb
# Nist | Test Case 9
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade2569924a7c8587336bfb118024db8674a14
# Nist | Test Case 10
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda27102519498e80f1478f37ba55bd6d27618c
# Nist | Test Case 11
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f765dcc57fcf623a24094fcca40d3533f8
# Nist | Test Case 12
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = d27e88681ce3243c4830165a8fdcf9ff1de9a1d8e6b447ef6ef7b79828666e4581e79012af34ddd9e2f037589b292db3e67c036745fa22e7e9b7373bdcf566ff291c25bbb8568fc3d376a6d9
[AES-192/GCM(12)]
# Nist | Test Case 10 with 12 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda27102519498e80f1478f37ba55bd
# Nist | Test Case 11 with 12 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 0f10f599ae14a154ed24b36e25324db8c566632ef2bbb34f8347280fc4507057fddc29df9a471f75c66541d4d4dad1c9e93a19a58e8b473fa0f062f765dcc57fcf623a24094fcca4
[AES-256/GCM]
# Nist | Test Case 13
Key = 0000000000000000000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In =
Out = 530f8afbc74536b9a963b4f1c4cb738b
# Nist | Test Case 14
Key = 0000000000000000000000000000000000000000000000000000000000000000
Nonce = 000000000000000000000000
In = 00000000000000000000000000000000
Out = cea7403d4d606b6e074ec5d3baf39d18d0d1c8a799996bf0265b98b5d48ab919
# Nist | Test Case 15
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f662898015adb094dac5d93471bdec1a502270e3cc6c
# Nist | Test Case 16
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853bb2d551b
# Nist | Test Case 17
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913fe2ea8f2
# Nist | Test Case 18
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = 9313225df88406e555909c5aff5269aa6a7a9538534f7da1e4c303d2a318a728c3c0c95156809539fcf0e2429a6b525416aedbf5a0de6a57a637b39b
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 5a8def2f0c9e53f1f75d7853659e2a20eeb2b22aafde6419a058ab4f6f746bf40fc0c3b780f244452da3ebf1c5d82cdea2418997200ef82e44ae7e3fa44a8266ee1c8eb0c8b5d4cf5ae9f19a
[AES-256/GCM(12)]
# Nist | Test Case 16 with 12 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853
# Nist | Test Case 17 with 12 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913
[AES-256/GCM(13)]
# Nist | Test Case 16 with 13 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853bb
# Nist | Test Case 17 with 13 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913fe
[AES-256/GCM(14)]
# Nist | Test Case 16 with 14 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853bb2d
# Nist | Test Case 17 with 14 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913fe2e
[AES-256/GCM(15)]
# Nist | Test Case 16 with 15 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbaddecaf888
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = 522dc1f099567d07f47f37a32a84427d643a8cdcbfe5c0c97598a2bd2555d1aa8cb08e48590dbb3da7b08b1056828838c5f61e6393ba7a0abcc9f66276fc6ece0f4e1768cddf8853bb2d55
# Nist | Test Case 17 with 15 byte tag
Key = feffe9928665731c6d6a8f9467308308feffe9928665731c6d6a8f9467308308
Nonce = cafebabefacedbad
In = d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39
AD = feedfacedeadbeeffeedfacedeadbeefabaddad2
Out = c3762df1ca787d32ae47c13bf19844cbaf1ae14d0b976afac52ff7d79bba9de0feb582d33934a4f0954cc2363bc73f7862ac430e64abe499f47c9b1f3a337dbf46a792c45e454913fe2ea8
# Wycheproof GCM tests
[AES-128/GCM(8)]
Key = 5b9604fe14eadba931b0ccf34843dab9
Nonce = 921d2507fa8007b7bd067d34
AD = 00112233445566778899aabbccddeeff
In = 001d0c231287c1182784554ca3a21908
Out = 49d8b9783e911913d87094d1f63cc7651e348ba07cca2cf0
[AES-128/GCM(12)]
Key = 5b9604fe14eadba931b0ccf34843dab9
Nonce = 921d2507fa8007b7bd067d34
AD = 00112233445566778899aabbccddeeff
In = 001d0c231287c1182784554ca3a21908
Out = 49d8b9783e911913d87094d1f63cc7651e348ba07cca2cf04c618cb4
[AES-128/GCM]
Key = 5b9604fe14eadba931b0ccf34843dab9
Nonce = 028318abc1824029138141a2
AD =
In = 001d0c231287c1182784554ca3a21908
Out = 26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
Key = aa023d0478dcb2b2312498293d9a9129
Nonce = 0432bc49ac34412081288127
AD = aac39231129872a2
In = 2035af313d1346ab00154fea78322105
Out = eea945f3d0f98cc0fbab472a0cf24e874bb9b4812519dadf9e1232016d068133
Key = aa023d0478dcb2b2312498293d9a9129
Nonce = 0432bc49ac344120
AD = aac39231129872a2
In = 2035af313d1346ab00154fea78322105
Out = 64c36bb3b732034e3a7d04efc5197785b7d0dd70b00d65b97cfd080ff4b819d1
Key = 2034a82547276c83dd3212a813572bce
Nonce = 3254202d854734812398127a3d134421
AD = 1a0293d8f90219058902139013908190bc490890d3ff12a3
In = 02efd2e5782312827ed5d230189a2a342b277ce048462193
Out = 64069c2d58690561f27ee199e6b479b6369eec688672bde99b7abadd6e69c1d9ec925786534f5075
Key = 00112233445566778899aabbccddeeff
Nonce = 7b95b8c356810a84711d68150a1b7750
AD =
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = 84d4c9c08b4f482861e3a9c6c35bc4d91df927374513bfd49f436bd73f325285daef4ff7e13d46a6213a3cb93855d18e69337eee66aeec07
Key = 00112233445566778899aabbccddeeff
Nonce = 1a552e67cdc4dc1a33b824874ebf0bed
AD =
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = 948ca37a8e6649e88aeffb1c598f3607007702417ea0e0bc3c60ad5a949886de968cf53ea6462aed99b381bfa2af9751c39d1b6e86d1be6a
Key = 00112233445566778899aabbccddeeff
Nonce = 99821c2dd5daecded07300f577f7aff1
AD =
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = 127af9b39ecdfc57bb11a2847c7c2d3d8f938f40f877e0c4af37d0fe9af033052bd537c4ae978f6007eb2fe4a958f8434d40684899507c7c
Key = 00112233445566778899aabbccddeeff
Nonce = 5e4a3900142358d1c774d8d124d8d27d
AD =
In = 00000000000000000000000000000000000000000000000000000000000000000000000000000000
Out = 0cf6ae47156b14dce03c8a07a2e172b1127af9b39ecdfc57bb11a2847c7c2d3d8f938f40f877e0c4f145c2dcaf339eede427be934357eac0
[ARIA-128/GCM]
# from draft-ietf-avtcore-aria-srtp-10
Key = e91e5e75da65554a48181f3846349562
Nonce = 000020e8f5eb00000000315e
AD = 8008315ebf2e6fe020e8f5eb
In = f57af5fd4ae19562976ec57a5a7ad55a5af5c5e5c5fdf5c55ad57a4a7272d57262e9729566ed66e97ac54a4a5a7ad5e15ae5fdd5fd5ac5d56ae56ad5c572d54ae54ac55a956afd6aed5a4ac562957a9516991691d572fd14e97ae962ed7a9f4a955af572e162f57a956666e17ae1f54a95f566d54a66e16e4afd6a9f7ae1c5c55ae5d56afde916c5e94a6ec56695e14afde1148416e94ad57ac5146ed59d1cc5
Out = 4d8a9a0675550c704b17d8c9ddc81a5cd6f7da34f2fe1b3db7cb3dfb9697102ea0f3c1fc2dbc873d44bceeae8e4442974ba21ff6789d3272613fb9631a7cf3f14bacbeb421633a90ffbe58c2fa6bdca534f10d0de0502ce1d531b6336e58878278531e5c22bc6c85bbd784d78d9e680aa19031aaf89101d669d7a3965c1f7e16229d7463e0535f4e253f5d18187d40b8ae0f564bd970b5e7e2adfb211e89a9535abace3f37f5a736f4be984bbffbedc1
[ARIA-256/GCM]
Key = 0c5ffd37a11edc42c325287fc0604f2e3e8cd5671a00fe3216aa5eb105783b54
Nonce = 000020e8f5eb00000000315e
AD = 8008315ebf2e6fe020e8f5eb
In = f57af5fd4ae19562976ec57a5a7ad55a5af5c5e5c5fdf5c55ad57a4a7272d57262e9729566ed66e97ac54a4a5a7ad5e15ae5fdd5fd5ac5d56ae56ad5c572d54ae54ac55a956afd6aed5a4ac562957a9516991691d572fd14e97ae962ed7a9f4a955af572e162f57a956666e17ae1f54a95f566d54a66e16e4afd6a9f7ae1c5c55ae5d56afde916c5e94a6ec56695e14afde1148416e94ad57ac5146ed59d1cc5
Out = 6f9e4bcbc8c85fc0128fb1e4a0a20cb9932ff74581f54fc013dd054b19f99371425b352d97d3f337b90b63d1b082adeeea9d2d7391897d591b985e55fb50cb5350cf7d38dc27dda127c078a149c8eb98083d66363a46e3726af217d3a00275ad5bf772c7610ea4c23006878f0ee69a8397703169a419303f40b72e4573714d19e2697df61e7c7252e5abc6bade876ac4961bfac4d5e867afca351a48aed52822e210d6ced2cf430ff841472915e7ef48
[SM4/GCM]
# From RFC 8998
Nonce = 00001234567800000000ABCD
Key = 0123456789ABCDEFFEDCBA9876543210
AD = FEEDFACEDEADBEEFFEEDFACEDEADBEEFABADDAD2
In = AAAAAAAAAAAAAAAABBBBBBBBBBBBBBBBCCCCCCCCCCCCCCCCDDDDDDDDDDDDDDDDEEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFEEEEEEEEEEEEEEEEAAAAAAAAAAAAAAAA
Out = 17F399F08C67D5EE19D0DC9969C4BB7D5FD46FD3756489069157B282BB200735D82710CA5C22F0CCFA7CBF93D496AC15A56834CBCF98C397B4024A2691233B8D83DE3541E4C2B58177E065A9BF7B62EC