P1619.1: Problems with current test vectors
Hi
Everyone,
It looks like
there may be a problem with the GCM test vector #10. Within this
test vector, it appears that the GHASH operation is padding the IV with an extra
128 zeros. According to the GCM spec, there should not be any pad if the
IV is a multiple of 128 bits. Can anyone else confirm
this?
I'm also wondering
if there is a problem with the CCM test vector #8. Can anyone confirm this
vector?
Thanks,
-Matt