<html>

  <head>

    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

  </head>

  <body>

    <div class="moz-cite-prefix">On 3/23/2021 4:15 PM, Greg Rubin wrote:<br>

    </div>

    <blockquote type="cite"

cite="mid:VBGKWza3Eqds_jwFlEOaTZPxmKHGOGuQvIpF57Oza_w=.ffe453a3-09ae-4528-aac9-ac993622d388@github.com">

      <blockquote type="cite" style="color: #007cff;">

        <pre class="moz-quote-pre" wrap="">177:         System.out.println("Testing " + ALGO);

178:         c = Cipher.getInstance(ALGO, "SunJCE");

179:         for (int i = 0; i < MAX_KWP_PAD_LEN; i++) {

</pre>

      </blockquote>

      <pre class="moz-quote-pre" wrap="">I see that here (and earlier) we do test all padding lengths. I'd still like some KATs generated by a known good implementation to ensure that we are not just compatible with ourselves.

</pre>

    </blockquote>

    <p><br>

    </p>

    <p><a class="moz-txt-link-freetext" href="http://csrc.nist.gov/groups/STM/cavp/documents/mac/kwtestvectors.zip">http://csrc.nist.gov/groups/STM/cavp/documents/mac/kwtestvectors.zip</a>

      has the NIST test vectors.  See

<a class="moz-txt-link-freetext" href="https://csrc.nist.gov/CSRC/media/Projects/Cryptographic-Algorithm-Validation-Program/documents/mac/KWVS.pdf">https://csrc.nist.gov/CSRC/media/Projects/Cryptographic-Algorithm-Validation-Program/documents/mac/KWVS.pdf</a>

      for details.</p>

    <p>Mike</p>

    <p><br>

    </p>

  </body>

</html>