{ "$schema": "https://a3e9.com/schemas/acvp-report-1.json", "reportVersion": "1.0.0", "claim": "ACVP-aligned automated test evidence", "notClaimed": [ "CAVP algorithm certificate", "CMVP module certificate", "FIPS 140-3 validation", "Entropy-source (SP 800-90B / ESV) assessment", "Physical or tamper testing", "Non-invasive-attack mitigation" ], "run": { "repoCommit": "dc771528a82bae2146a8c5a795fcc69df22776e0", "builtFromMergeCommit": null, "treeDirty": false, "origin": "github-actions", "workflow": "A3E9 CI — Build, Test, Static Analysis", "runId": "31742157896", "platform": "Linux 6.17.0-1020-azure x86_64", "command": "make test-kat-pqc && make test-kat" }, "toolchain": { "compiler": "13.3.0", "openssl": "OpenSSL 3.0.13 30 Jan 2024", "liboqs": "0.16.0" }, "vectorSources": [ { "commit": "975de31eb83d87039ec88934fdc47d8c312b892d", "file": "ml-kem-keygen.json", "licence": "US Government work, public domain", "sha256": "b7fe094055e02d19871b4105f6101acf7dcb0b11185636fdeb447ee654c02e4d", "upstream": "usnistgov/ACVP-Server" }, { "commit": "975de31eb83d87039ec88934fdc47d8c312b892d", "file": "ml-kem-encapdecap.json", "licence": "US Government work, public domain", "sha256": "1eac6102952f1c46f7c26a97b93eafb7c08a8134f1b57d0d2d934e3ee0197f0d", "upstream": "usnistgov/ACVP-Server" }, { "commit": "975de31eb83d87039ec88934fdc47d8c312b892d", "file": "ml-dsa-sigver.json", "licence": "US Government work, public domain", "sha256": "70bb6d1c3e9b0a18ba824a6366cfb75f3e00559473f3eafde3b0aca7127158a4", "upstream": "usnistgov/ACVP-Server" } ], "totals": { "executed": 236, "passed": 236, "failed": 0, "pqcExecuted": 225, "pqcPublished": 420, "pqcExcluded": 195, "classicalExecuted": 11, "expectAccept": 200, "expectReject": 36, "cbomAlgorithmAssets": 18, "cbomAssetsCovered": 4, "cbomAssetsUncovered": 14 }, "groups": [ { "algorithm": "Ed25519", "entryPoint": "EVP_DigestVerify", "executed": 5, "function": "verify", "id": "ed25519", "note": "Verify only — A3E9 never signs Ed25519 in software. Each case pairs a published RFC 8032 vector with a negative check.", "passed": 5, "standard": "RFC 8032 §6.1", "suite": "classical" }, { "algorithm": "RIPEMD-160", "entryPoint": "Hash160::ripemd160", "executed": 6, "function": "digest", "id": "ripemd160", "note": "Required for Bitcoin P2WPKH addresses since OpenSSL 3.0 deprecated RIPEMD-160 under FIPS mode.", "passed": 6, "standard": "Dobbertin et al., 1996", "suite": "classical" }, { "algorithm": "ML-KEM", "entryPoint": "OQS_KEM_keypair_derand", "executed": 75, "function": "keyGen", "id": "mlkem-keygen", "note": "Deterministic given the 64-byte seed d‖z.", "passed": 75, "standard": "FIPS 203", "suite": "pqc" }, { "algorithm": "ML-KEM", "entryPoint": "OQS_KEM_encaps_derand", "executed": 75, "function": "encapsulation", "id": "mlkem-encaps", "note": "Deterministic given the 32-byte message m.", "passed": 75, "standard": "FIPS 203", "suite": "pqc" }, { "algorithm": "ML-KEM", "entryPoint": "OQS_KEM_decaps", "executed": 30, "function": "decapsulation", "id": "mlkem-decaps", "note": "Implicit rejection is part of the standard: a malformed ciphertext yields a deterministic pseudorandom secret rather than an error, and ACVP publishes that expected value.", "passed": 30, "standard": "FIPS 203", "suite": "pqc" }, { "algorithm": "ML-DSA", "entryPoint": "OQS_SIG_verify_with_ctx_str", "executed": 45, "function": "sigVer", "id": "mldsa-sigver", "note": "External interface, pure. tcIds are upstream's own and are non-contiguous because the excluded preHash and internal groups were removed rather than renumbered — any tcId here resolves directly in upstream ACVP.", "passed": 45, "standard": "FIPS 204", "suite": "pqc" } ], "cases": [ { "actual": "conformant", "expected": "conformant", "group": "ed25519", "label": "RFC 8032 §6.1 Vector 1 — empty message; paired with a tampered-signature rejection", "result": "PASS", "suite": "classical" }, { "actual": "conformant", "expected": "conformant", "group": "ed25519", "label": "RFC 8032 §6.1 Vector 2 — 1-byte message 0x72; paired with a wrong-public-key rejection", "result": "PASS", "suite": "classical" }, { "actual": "conformant", "expected": "conformant", "group": "ed25519", "label": "RFC 8032 §6.1 Vector 3 — 2-byte message af 82; paired with an altered-message rejection", "result": "PASS", "suite": "classical" }, { "actual": "conformant", "expected": "conformant", "group": "ed25519", "label": "Truncated 31-byte signature must be rejected", "result": "PASS", "suite": "classical" }, { "actual": "conformant", "expected": "conformant", "group": "ed25519", "label": "All-zero 64-byte signature must be rejected (low-order / degenerate point)", "result": "PASS", "suite": "classical" }, { "actual": "9c1185a5c5e9fc54612808977ee8f548b2258d31", "expected": "9c1185a5c5e9fc54612808977ee8f548b2258d31", "group": "ripemd160", "label": "\"\"", "result": "PASS", "suite": "classical" }, { "actual": "0bdc9d2d256b3ee9daae347be6f4dc835a467ffe", "expected": "0bdc9d2d256b3ee9daae347be6f4dc835a467ffe", "group": "ripemd160", "label": "\"a\"", "result": "PASS", "suite": "classical" }, { "actual": "8eb208f7e05d987a9b044a8e98c6b087f15a0bfc", "expected": "8eb208f7e05d987a9b044a8e98c6b087f15a0bfc", "group": "ripemd160", "label": "\"abc\"", "result": "PASS", "suite": "classical" }, { "actual": "5d0689ef49d2fae572b881b123a85ffa21595f36", "expected": "5d0689ef49d2fae572b881b123a85ffa21595f36", "group": "ripemd160", "label": "\"message digest\"", "result": "PASS", "suite": "classical" }, { "actual": "f71c27109c692c1b56bbdceb5b9d2865b3708dbc", "expected": "f71c27109c692c1b56bbdceb5b9d2865b3708dbc", "group": "ripemd160", "label": "\"abcdefghijklmnopqrstuvwxyz\"", "result": "PASS", "suite": "classical" }, { "actual": "b0e20b6e3116640286ed3a87a5713079b21f5189", "expected": "b0e20b6e3116640286ed3a87a5713079b21f5189", "group": "ripemd160", "label": "\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\"", "result": "PASS", "suite": "classical" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "7e4a2b716a684c1ad33c43c808782da9e1a72f14ccda82723f712d49f53a9f28", "expectedSha256": "7e4a2b716a684c1ad33c43c808782da9e1a72f14ccda82723f712d49f53a9f28", "field": "ek" }, { "bytes": 1632, "computedSha256": "c725c25ca8636d75653a07e7a9ccf0b3c2b927617e8f99f0f05ab1f9cb7e046d", "expectedSha256": "c725c25ca8636d75653a07e7a9ccf0b3c2b927617e8f99f0f05ab1f9cb7e046d", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 1, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "7e8024d36aa6fc519e169975acfbf3a29e758d2d11d36d9bc5f875a7b16a6548", "expectedSha256": "7e8024d36aa6fc519e169975acfbf3a29e758d2d11d36d9bc5f875a7b16a6548", "field": "ek" }, { "bytes": 1632, "computedSha256": "c0e03df5ce84aa4858f184721cfa57d28681e1766c42ef475c43ce1ec121308b", "expectedSha256": "c0e03df5ce84aa4858f184721cfa57d28681e1766c42ef475c43ce1ec121308b", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 2, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "5fb4f2b1be0ebc97a476d76f18ed9ddf56b20dea729428b9f95d0e7385928f9e", "expectedSha256": "5fb4f2b1be0ebc97a476d76f18ed9ddf56b20dea729428b9f95d0e7385928f9e", "field": "ek" }, { "bytes": 1632, "computedSha256": "e2647af313149106e623ea580556c935bb8ce2f543917ebea9cc093653eea40e", "expectedSha256": "e2647af313149106e623ea580556c935bb8ce2f543917ebea9cc093653eea40e", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 3, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "bb416cee3fdd3e97d2253248003422871cce7a2555ee439e6d58c77f3c9fc992", "expectedSha256": "bb416cee3fdd3e97d2253248003422871cce7a2555ee439e6d58c77f3c9fc992", "field": "ek" }, { "bytes": 1632, "computedSha256": "937b6d507277ccaefaf9ad580f894e2764ae93a9bde99ecbf9a7f13f7f8e7cfa", "expectedSha256": "937b6d507277ccaefaf9ad580f894e2764ae93a9bde99ecbf9a7f13f7f8e7cfa", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 4, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "65aa244323089281815ee47a3e2e8e3831f204ab9ba3e5a2d824d1616bb32d98", "expectedSha256": "65aa244323089281815ee47a3e2e8e3831f204ab9ba3e5a2d824d1616bb32d98", "field": "ek" }, { "bytes": 1632, "computedSha256": "92d4f5853747db3f2310697fcfec64937d9f7c57ecdc9386a02328311fb9b851", "expectedSha256": "92d4f5853747db3f2310697fcfec64937d9f7c57ecdc9386a02328311fb9b851", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 5, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "dd74a24e6a86d6b0f10f1564e0b0ba01beb22a782f92543b5c8f8ca3c8473432", "expectedSha256": "dd74a24e6a86d6b0f10f1564e0b0ba01beb22a782f92543b5c8f8ca3c8473432", "field": "ek" }, { "bytes": 1632, "computedSha256": "0ff7036b6085a4daba8210ca2d0646363459bfa32241e0973c2d4783517bfc6b", "expectedSha256": "0ff7036b6085a4daba8210ca2d0646363459bfa32241e0973c2d4783517bfc6b", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 6, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "ccd6baaa4bd493beca051524927fce6c860e37d0f78567d2c307166e0b21d941", "expectedSha256": "ccd6baaa4bd493beca051524927fce6c860e37d0f78567d2c307166e0b21d941", "field": "ek" }, { "bytes": 1632, "computedSha256": "79438dc4f2482ce06ca2028219c02014da0aec9f22280dcf8a44d11c8f3bb64f", "expectedSha256": "79438dc4f2482ce06ca2028219c02014da0aec9f22280dcf8a44d11c8f3bb64f", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 7, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "ea97b1cc099ee1403af0277c25f17c0fee091f935fc6d890a123b93e6be3b5b5", "expectedSha256": "ea97b1cc099ee1403af0277c25f17c0fee091f935fc6d890a123b93e6be3b5b5", "field": "ek" }, { "bytes": 1632, "computedSha256": "cb2826c2017078acdc0effcc95a157094a0bc8da8f452687be013fd6337947b1", "expectedSha256": "cb2826c2017078acdc0effcc95a157094a0bc8da8f452687be013fd6337947b1", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 8, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "f5e6a840eb4a11afcc2ecbd1c8bacbe12230959d2b70c788b6ef77136f0bdb3a", "expectedSha256": "f5e6a840eb4a11afcc2ecbd1c8bacbe12230959d2b70c788b6ef77136f0bdb3a", "field": "ek" }, { "bytes": 1632, "computedSha256": "d52aed200c7a2e72406ec0e479929211a891796e5ede9e2d32d29a2a68d7dc33", "expectedSha256": "d52aed200c7a2e72406ec0e479929211a891796e5ede9e2d32d29a2a68d7dc33", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 9, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "cf99e6f7e9f2e60328122134ceb0a3e54f001b7ffac8f2c305a343ba9b045285", "expectedSha256": "cf99e6f7e9f2e60328122134ceb0a3e54f001b7ffac8f2c305a343ba9b045285", "field": "ek" }, { "bytes": 1632, "computedSha256": "b3adff8e8be3b20da9cf1b6b232dea62b37973c925a8ea109e381b12d466b7ce", "expectedSha256": "b3adff8e8be3b20da9cf1b6b232dea62b37973c925a8ea109e381b12d466b7ce", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 10, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "bca0a281582b0f67e4f4a286a08e0440eadbc17918e474e12c7d9c6a0754f90b", "expectedSha256": "bca0a281582b0f67e4f4a286a08e0440eadbc17918e474e12c7d9c6a0754f90b", "field": "ek" }, { "bytes": 1632, "computedSha256": "22285b83f8e2c3810f8796e4d46494f65c454f41d4bbb390127baa0e1af2a830", "expectedSha256": "22285b83f8e2c3810f8796e4d46494f65c454f41d4bbb390127baa0e1af2a830", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 11, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "818e5813dcbd92d518efed95a0ab07365e5d71fbadd6c8994bd870d31a91450e", "expectedSha256": "818e5813dcbd92d518efed95a0ab07365e5d71fbadd6c8994bd870d31a91450e", "field": "ek" }, { "bytes": 1632, "computedSha256": "9e69e8a76548b428cbda32daa2100fe40bc4e44ee30ed6e319764c520e3bfa8c", "expectedSha256": "9e69e8a76548b428cbda32daa2100fe40bc4e44ee30ed6e319764c520e3bfa8c", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 12, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "3f293c5d4902a1685fb0d6d3679eee6168219d16e1737b31b0b1471c2ccc5e64", "expectedSha256": "3f293c5d4902a1685fb0d6d3679eee6168219d16e1737b31b0b1471c2ccc5e64", "field": "ek" }, { "bytes": 1632, "computedSha256": "ae6eff9fc8a302c7a30a19993542d43363ccf907676f76686e7d1df3b443ac27", "expectedSha256": "ae6eff9fc8a302c7a30a19993542d43363ccf907676f76686e7d1df3b443ac27", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 13, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "0a52272fba5a5468ffad00fa0ddb15a6430bfd83086326b75ee7e8fd5e79c5cd", "expectedSha256": "0a52272fba5a5468ffad00fa0ddb15a6430bfd83086326b75ee7e8fd5e79c5cd", "field": "ek" }, { "bytes": 1632, "computedSha256": "254bb4f99f7a2b7a03667813780300627bb583a32c40dcbccb7a49ef7e1d5c25", "expectedSha256": "254bb4f99f7a2b7a03667813780300627bb583a32c40dcbccb7a49ef7e1d5c25", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 14, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "202cb4e1563e1307b55e6506771e1f995704a646ba1165feab9f77159a229762", "expectedSha256": "202cb4e1563e1307b55e6506771e1f995704a646ba1165feab9f77159a229762", "field": "ek" }, { "bytes": 1632, "computedSha256": "ea63f4b84c2c593070837324768b8a5b9f07f87789c531091417e8c6832aeccb", "expectedSha256": "ea63f4b84c2c593070837324768b8a5b9f07f87789c531091417e8c6832aeccb", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 15, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "05a6f6ecbf02e9fd1aab1dda4b52a02dbb889ef987a61a04352ac0ae2b41a032", "expectedSha256": "05a6f6ecbf02e9fd1aab1dda4b52a02dbb889ef987a61a04352ac0ae2b41a032", "field": "ek" }, { "bytes": 1632, "computedSha256": "19b6706f1626b08ec6a869155338f33556fe779c23ca8559212808752125435c", "expectedSha256": "19b6706f1626b08ec6a869155338f33556fe779c23ca8559212808752125435c", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 16, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "9a961b29554acf197ef47c92123ca36417db2dac85166232402e13e2e5adcdd5", "expectedSha256": "9a961b29554acf197ef47c92123ca36417db2dac85166232402e13e2e5adcdd5", "field": "ek" }, { "bytes": 1632, "computedSha256": "b26226145e0f861469c3c7b0675a61eae1f89446ebd9f63d539322971983f031", "expectedSha256": "b26226145e0f861469c3c7b0675a61eae1f89446ebd9f63d539322971983f031", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 17, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "b48600297c469b737514fc27a1d9849842195af7e465cae0589908e72443df37", "expectedSha256": "b48600297c469b737514fc27a1d9849842195af7e465cae0589908e72443df37", "field": "ek" }, { "bytes": 1632, "computedSha256": "cfdbebb134d2e8c264308e46796510290ad590a99f2a0e1c73c0c1d0a2a666b4", "expectedSha256": "cfdbebb134d2e8c264308e46796510290ad590a99f2a0e1c73c0c1d0a2a666b4", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 18, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "17568338d33cf60a20114c5cff0b98021b7ba5500ff68a422e6a8b843eedfef1", "expectedSha256": "17568338d33cf60a20114c5cff0b98021b7ba5500ff68a422e6a8b843eedfef1", "field": "ek" }, { "bytes": 1632, "computedSha256": "7579a67482ae30bdeff2d7257f810d224203c4eb0c0d03fc8422caf780701ba9", "expectedSha256": "7579a67482ae30bdeff2d7257f810d224203c4eb0c0d03fc8422caf780701ba9", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 19, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "418e98ce8a938d640d9c1327661d6c725f34a15cc47a619486fd9542a143bb0f", "expectedSha256": "418e98ce8a938d640d9c1327661d6c725f34a15cc47a619486fd9542a143bb0f", "field": "ek" }, { "bytes": 1632, "computedSha256": "c830f1b7151d34ea51b9f20a5141ce1b31bc1292c18d50ef3d3846cbab8a47ac", "expectedSha256": "c830f1b7151d34ea51b9f20a5141ce1b31bc1292c18d50ef3d3846cbab8a47ac", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 20, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "7e58ccea0ed35bda84cd8ce3fca34ac6ea87066aa9a3c3bdcf98e52bbd1f0865", "expectedSha256": "7e58ccea0ed35bda84cd8ce3fca34ac6ea87066aa9a3c3bdcf98e52bbd1f0865", "field": "ek" }, { "bytes": 1632, "computedSha256": "7f7ad6809e29cc746a798c558a76bffbe4a93932f7cb5709f7b05a828536cd38", "expectedSha256": "7f7ad6809e29cc746a798c558a76bffbe4a93932f7cb5709f7b05a828536cd38", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 21, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "07e21cc8ec151db861bc17bfac9f0ef7b2d1e00ed5b845da1b13103883886d8a", "expectedSha256": "07e21cc8ec151db861bc17bfac9f0ef7b2d1e00ed5b845da1b13103883886d8a", "field": "ek" }, { "bytes": 1632, "computedSha256": "493f2500a24569c4d7bae6e6e1fb10b89ff2abc42436a7142e55b0ef106d2d4d", "expectedSha256": "493f2500a24569c4d7bae6e6e1fb10b89ff2abc42436a7142e55b0ef106d2d4d", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 22, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "98799059cc94b6978b2256cd52eb33aced59dc45fe6d6b79ab286e8649a86c33", "expectedSha256": "98799059cc94b6978b2256cd52eb33aced59dc45fe6d6b79ab286e8649a86c33", "field": "ek" }, { "bytes": 1632, "computedSha256": "70b35758825e240a38703f0f64ecdbbb0eca21651363d2116e541f5d095b0c4f", "expectedSha256": "70b35758825e240a38703f0f64ecdbbb0eca21651363d2116e541f5d095b0c4f", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 23, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "9ff9aed1896a6df6f1130f83952d08b18be40a722346428ebe9662ff61a19ab2", "expectedSha256": "9ff9aed1896a6df6f1130f83952d08b18be40a722346428ebe9662ff61a19ab2", "field": "ek" }, { "bytes": 1632, "computedSha256": "60b072f48e96d6ea9289ca822e3f144760687014fdb6ac52673d030fe5849418", "expectedSha256": "60b072f48e96d6ea9289ca822e3f144760687014fdb6ac52673d030fe5849418", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 24, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 800, "computedSha256": "3006e8964ae4228cec2237c5b469cb9217143234a2f1d1e655bdd628266fbce7", "expectedSha256": "3006e8964ae4228cec2237c5b469cb9217143234a2f1d1e655bdd628266fbce7", "field": "ek" }, { "bytes": 1632, "computedSha256": "b53671b2d438083f6a29bcee3504e4b44abb0217c83e2771a8d465eedb24f92a", "expectedSha256": "b53671b2d438083f6a29bcee3504e4b44abb0217c83e2771a8d465eedb24f92a", "field": "dk" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 25, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "4158f6afb5e516c99f1da07da8c651348422b17c1f4e9a08ad73fb1f91249b3e", "expectedSha256": "4158f6afb5e516c99f1da07da8c651348422b17c1f4e9a08ad73fb1f91249b3e", "field": "ek" }, { "bytes": 2400, "computedSha256": "7aab35839207f72b310abe36e2daa1cc7ff6f7fa8941e439967cd47d9b437079", "expectedSha256": "7aab35839207f72b310abe36e2daa1cc7ff6f7fa8941e439967cd47d9b437079", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 26, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "26eb7b8190b6038f6acca606bf563fd15425f3659b5170f10cd4cfadfcad084d", "expectedSha256": "26eb7b8190b6038f6acca606bf563fd15425f3659b5170f10cd4cfadfcad084d", "field": "ek" }, { "bytes": 2400, "computedSha256": "87908625991831229045ef4931ddc20c007993d02ce5abe643fc101bfa702c88", "expectedSha256": "87908625991831229045ef4931ddc20c007993d02ce5abe643fc101bfa702c88", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 27, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "45a9ea5951a229521be49f542520fe6fd8160684b2fcda2edf5d3d49a5991231", "expectedSha256": "45a9ea5951a229521be49f542520fe6fd8160684b2fcda2edf5d3d49a5991231", "field": "ek" }, { "bytes": 2400, "computedSha256": "5d31de843950557c633c01c7b2d2c3a5e95d051a30a23457dfbbd96d6b94cd74", "expectedSha256": "5d31de843950557c633c01c7b2d2c3a5e95d051a30a23457dfbbd96d6b94cd74", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 28, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "d1114b2c753f5a1ad7542bc63b9386718bc1ac3f9eda7257fc9ab70c5c76262e", "expectedSha256": "d1114b2c753f5a1ad7542bc63b9386718bc1ac3f9eda7257fc9ab70c5c76262e", "field": "ek" }, { "bytes": 2400, "computedSha256": "517b5165953eff70f2340e3c1e318bea0d296b731ed629eaf07ff84baaab6cee", "expectedSha256": "517b5165953eff70f2340e3c1e318bea0d296b731ed629eaf07ff84baaab6cee", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 29, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "95a35d0fb2fd9c12e71b14c5e6980bbf8076e5fac0981de0a0b0f401bc294838", "expectedSha256": "95a35d0fb2fd9c12e71b14c5e6980bbf8076e5fac0981de0a0b0f401bc294838", "field": "ek" }, { "bytes": 2400, "computedSha256": "a8b65a412db4d41da792ef4e90018121da504665270d6e2ec3dcf63a94b7088d", "expectedSha256": "a8b65a412db4d41da792ef4e90018121da504665270d6e2ec3dcf63a94b7088d", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 30, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "6290f93fe1601104febc90db31f54487a9dcd4d7b5305178c59b60dc1680aa84", "expectedSha256": "6290f93fe1601104febc90db31f54487a9dcd4d7b5305178c59b60dc1680aa84", "field": "ek" }, { "bytes": 2400, "computedSha256": "5c7131c9c4b64a260024712388ee3c0c545df6d4c006dc1681657408bfa79ec0", "expectedSha256": "5c7131c9c4b64a260024712388ee3c0c545df6d4c006dc1681657408bfa79ec0", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 31, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "2c89b520c0a512b41fdf681f2c5cdb2e48146b764ad9354c36f9c52deb7a7b45", "expectedSha256": "2c89b520c0a512b41fdf681f2c5cdb2e48146b764ad9354c36f9c52deb7a7b45", "field": "ek" }, { "bytes": 2400, "computedSha256": "cd303ee5ad40cd92628cb27de9383ee8e1de13960b0e59a1d0a1a3a9dc40f174", "expectedSha256": "cd303ee5ad40cd92628cb27de9383ee8e1de13960b0e59a1d0a1a3a9dc40f174", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 32, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "84441a63ca3b7b3c208f24c4bd8925d83964f0f33432a520865e9ed43cec34d9", "expectedSha256": "84441a63ca3b7b3c208f24c4bd8925d83964f0f33432a520865e9ed43cec34d9", "field": "ek" }, { "bytes": 2400, "computedSha256": "5b0aab496fb3e7a410e5730d34af59dfdd6a6a3e4c2ba766f4c14f13ec7f0e82", "expectedSha256": "5b0aab496fb3e7a410e5730d34af59dfdd6a6a3e4c2ba766f4c14f13ec7f0e82", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 33, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "24dbd7f6e05cdfeecb2417970685bc651a7e34ee6387c3fb6602e7e0326d118e", "expectedSha256": "24dbd7f6e05cdfeecb2417970685bc651a7e34ee6387c3fb6602e7e0326d118e", "field": "ek" }, { "bytes": 2400, "computedSha256": "9bccff7ec9479bd7532067f31babfaf54bf350f822d57042bf24afe803c48d41", "expectedSha256": "9bccff7ec9479bd7532067f31babfaf54bf350f822d57042bf24afe803c48d41", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 34, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "ddd4ed5306f390097a26a506db75196b7017a1dc203c98afc88c53e3e88b9b1a", "expectedSha256": "ddd4ed5306f390097a26a506db75196b7017a1dc203c98afc88c53e3e88b9b1a", "field": "ek" }, { "bytes": 2400, "computedSha256": "a72dc43b905c8a1027889f526b23fbd3f8e5c74d6f83724179ed581f37ff6ba4", "expectedSha256": "a72dc43b905c8a1027889f526b23fbd3f8e5c74d6f83724179ed581f37ff6ba4", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 35, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "6904eafaad362c3024ee60c77f004efaf417b184c0d2d6e5a3c1dfcd441b5498", "expectedSha256": "6904eafaad362c3024ee60c77f004efaf417b184c0d2d6e5a3c1dfcd441b5498", "field": "ek" }, { "bytes": 2400, "computedSha256": "008ed31fbdf10f013fe4a3b2f4dcf842ae2012da9b187b820dd76d367edda4f5", "expectedSha256": "008ed31fbdf10f013fe4a3b2f4dcf842ae2012da9b187b820dd76d367edda4f5", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 36, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "5e154d55462bd9a6acdd6947fd3f9a6c838f16cfdb265264e9832dc27e5b00f3", "expectedSha256": "5e154d55462bd9a6acdd6947fd3f9a6c838f16cfdb265264e9832dc27e5b00f3", "field": "ek" }, { "bytes": 2400, "computedSha256": "4f9744684c2b81e98c61a8e7ca66d71877eace712f2e30ea8ce274a31f7a8ca7", "expectedSha256": "4f9744684c2b81e98c61a8e7ca66d71877eace712f2e30ea8ce274a31f7a8ca7", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 37, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "7d00f62c9ce06fc453e8b0054867190571de07757effc6104b6c5d8f7a87aa5e", "expectedSha256": "7d00f62c9ce06fc453e8b0054867190571de07757effc6104b6c5d8f7a87aa5e", "field": "ek" }, { "bytes": 2400, "computedSha256": "862ddabe59d308a0ce84092a253d1db3ae01207c938094c0c6973de51472bef5", "expectedSha256": "862ddabe59d308a0ce84092a253d1db3ae01207c938094c0c6973de51472bef5", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 38, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "5d2c5e914951eab9ee5ddbf60fb9400cf1464790c400fc892ae4ab8381075c0f", "expectedSha256": "5d2c5e914951eab9ee5ddbf60fb9400cf1464790c400fc892ae4ab8381075c0f", "field": "ek" }, { "bytes": 2400, "computedSha256": "7ca3bcceb682dccfcc09d8a5109ccbc7db854bd8b1c80f97133548a0bcc80fc7", "expectedSha256": "7ca3bcceb682dccfcc09d8a5109ccbc7db854bd8b1c80f97133548a0bcc80fc7", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 39, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "ae003f9b8283772a65242299e1eee89fbcaca9abbf6b6bee28e37814c9ad3a9e", "expectedSha256": "ae003f9b8283772a65242299e1eee89fbcaca9abbf6b6bee28e37814c9ad3a9e", "field": "ek" }, { "bytes": 2400, "computedSha256": "203cb2ff33f8f2a22392bd9c4b1ecfc6366dfeca86840f46299ce9b87e139654", "expectedSha256": "203cb2ff33f8f2a22392bd9c4b1ecfc6366dfeca86840f46299ce9b87e139654", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 40, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "873d45b7b223bf3bbc7274c8226a607c07df6ea037ce67a953befb8bd8f89867", "expectedSha256": "873d45b7b223bf3bbc7274c8226a607c07df6ea037ce67a953befb8bd8f89867", "field": "ek" }, { "bytes": 2400, "computedSha256": "23155ea988b0b1059b0cefc9b3303f846b09c8057914c910276489d4b4e03af1", "expectedSha256": "23155ea988b0b1059b0cefc9b3303f846b09c8057914c910276489d4b4e03af1", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 41, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "f7936171cf2a811f8ba18d8c6c22a60c40a17b786fe703dc0907e7cad77af8fe", "expectedSha256": "f7936171cf2a811f8ba18d8c6c22a60c40a17b786fe703dc0907e7cad77af8fe", "field": "ek" }, { "bytes": 2400, "computedSha256": "085eccef60f62106703b72cf2fa348c59f67eb204683cd76e92a4dea2b7e2765", "expectedSha256": "085eccef60f62106703b72cf2fa348c59f67eb204683cd76e92a4dea2b7e2765", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 42, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "374e0eb48564c8dc137c6d9f8be16165e2dea3fe7657b2a14b8a024fc6abb18c", "expectedSha256": "374e0eb48564c8dc137c6d9f8be16165e2dea3fe7657b2a14b8a024fc6abb18c", "field": "ek" }, { "bytes": 2400, "computedSha256": "38018e5422e709798ee8b974cd32df38b5d88e107c1547453886014258c37352", "expectedSha256": "38018e5422e709798ee8b974cd32df38b5d88e107c1547453886014258c37352", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 43, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "1a6c7d32c0269e44c7521901f1a4839e8db57e21ec5c42a90bd321bd5b55db6a", "expectedSha256": "1a6c7d32c0269e44c7521901f1a4839e8db57e21ec5c42a90bd321bd5b55db6a", "field": "ek" }, { "bytes": 2400, "computedSha256": "69bdb8894e4bcaa32c675267af241c3413154f3ad1933d8d8a7d8b3c2a3e85b7", "expectedSha256": "69bdb8894e4bcaa32c675267af241c3413154f3ad1933d8d8a7d8b3c2a3e85b7", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 44, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "6411470a25ce2de8ec0df74a2a934a54eee5b741692b96d09b7966482288aaff", "expectedSha256": "6411470a25ce2de8ec0df74a2a934a54eee5b741692b96d09b7966482288aaff", "field": "ek" }, { "bytes": 2400, "computedSha256": "7463cdb422a0d7e37b044e42ad85ebe107ff386f003aff69d9ab3bd02897a33b", "expectedSha256": "7463cdb422a0d7e37b044e42ad85ebe107ff386f003aff69d9ab3bd02897a33b", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 45, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "459c7d4c5d05af35560c859ef744046b5c32a1d5b4919d804205b1277ff35436", "expectedSha256": "459c7d4c5d05af35560c859ef744046b5c32a1d5b4919d804205b1277ff35436", "field": "ek" }, { "bytes": 2400, "computedSha256": "7e28460b01cb99b0e376052c9d61d1dc8f7eacaa7fa5c82ebc398a19251436da", "expectedSha256": "7e28460b01cb99b0e376052c9d61d1dc8f7eacaa7fa5c82ebc398a19251436da", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 46, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "997c597d259ace16ba860442f618c9630c990854da427b13fbcf6ae3954bee7d", "expectedSha256": "997c597d259ace16ba860442f618c9630c990854da427b13fbcf6ae3954bee7d", "field": "ek" }, { "bytes": 2400, "computedSha256": "9f8de2d680e7ffa3f3e0e8b8765f2b9820ed4c0f029239b5e23ff4577d240578", "expectedSha256": "9f8de2d680e7ffa3f3e0e8b8765f2b9820ed4c0f029239b5e23ff4577d240578", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 47, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "ea287b77efe244e95ed38bdca27a5bcfb7deb343558106ce77df2be08f75e333", "expectedSha256": "ea287b77efe244e95ed38bdca27a5bcfb7deb343558106ce77df2be08f75e333", "field": "ek" }, { "bytes": 2400, "computedSha256": "6decfbf5a8b2078c82b691cea8ceb8bb257efaee2970fa044b2f4d144917ec32", "expectedSha256": "6decfbf5a8b2078c82b691cea8ceb8bb257efaee2970fa044b2f4d144917ec32", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 48, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "e157f3965a7db2e2396f29d3066659684b2e8431c0456f51b32dba3d8b8e257e", "expectedSha256": "e157f3965a7db2e2396f29d3066659684b2e8431c0456f51b32dba3d8b8e257e", "field": "ek" }, { "bytes": 2400, "computedSha256": "91fd5af1b3cc196102c7f7a48e51396b7265e86afa86722a6934f2b1bf1d2e7b", "expectedSha256": "91fd5af1b3cc196102c7f7a48e51396b7265e86afa86722a6934f2b1bf1d2e7b", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 49, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1184, "computedSha256": "14ec8d723610132c907d5dba007713389ac695ab74970dfa68645c4ff02d9264", "expectedSha256": "14ec8d723610132c907d5dba007713389ac695ab74970dfa68645c4ff02d9264", "field": "ek" }, { "bytes": 2400, "computedSha256": "cd64dd95d5a56e635068546d438efb2b8f961fb2ffd53a95b5b5ad86acce8ddd", "expectedSha256": "cd64dd95d5a56e635068546d438efb2b8f961fb2ffd53a95b5b5ad86acce8ddd", "field": "dk" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 50, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "b78619e4fceeeb86dee3fedb945eca6da61dae312771ef8fa871951d391bd7b6", "expectedSha256": "b78619e4fceeeb86dee3fedb945eca6da61dae312771ef8fa871951d391bd7b6", "field": "ek" }, { "bytes": 3168, "computedSha256": "925ed6f1cf0379ede29d8209432d6e08c73ed0423883febf85416343f4fa1f86", "expectedSha256": "925ed6f1cf0379ede29d8209432d6e08c73ed0423883febf85416343f4fa1f86", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 51, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "a5de1425ea855091c848e1ae423b8d51e5514db52b5df12142e3d4836f2cccaa", "expectedSha256": "a5de1425ea855091c848e1ae423b8d51e5514db52b5df12142e3d4836f2cccaa", "field": "ek" }, { "bytes": 3168, "computedSha256": "f04f9c44dace43240b6ebb8e7bb2d59edb3c7c56e013a04481c901cd550d457c", "expectedSha256": "f04f9c44dace43240b6ebb8e7bb2d59edb3c7c56e013a04481c901cd550d457c", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 52, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "0162a6f9d7b7357cc6a17ed00d0e6ec48784035ba5af5ce514671c352d1bffa9", "expectedSha256": "0162a6f9d7b7357cc6a17ed00d0e6ec48784035ba5af5ce514671c352d1bffa9", "field": "ek" }, { "bytes": 3168, "computedSha256": "2c57f7bf79e50a23da33345f3979f2576f5b74698e739bea97de677e53dfdf94", "expectedSha256": "2c57f7bf79e50a23da33345f3979f2576f5b74698e739bea97de677e53dfdf94", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 53, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "518cfa9204bd5e278343d1e0865d4bd327f8aa2b563bf882ce49f5ce176fcc81", "expectedSha256": "518cfa9204bd5e278343d1e0865d4bd327f8aa2b563bf882ce49f5ce176fcc81", "field": "ek" }, { "bytes": 3168, "computedSha256": "f9e62b032aa178239d2f1dd2f94be3fbe35add6604bcc2af06cfc05a35040ce3", "expectedSha256": "f9e62b032aa178239d2f1dd2f94be3fbe35add6604bcc2af06cfc05a35040ce3", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 54, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "e282e47d38cec05dffe756cd41ee7b943dfec68b00d0221c300aa0f8090c072a", "expectedSha256": "e282e47d38cec05dffe756cd41ee7b943dfec68b00d0221c300aa0f8090c072a", "field": "ek" }, { "bytes": 3168, "computedSha256": "5183091d1c1ac86f3024341bdc0622bd07e23bb064f663ccbf0a66f80bc02023", "expectedSha256": "5183091d1c1ac86f3024341bdc0622bd07e23bb064f663ccbf0a66f80bc02023", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 55, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "eddfd1f177c59874c28f53cd645d4290acdecbe6409001731fc038247b0023c3", "expectedSha256": "eddfd1f177c59874c28f53cd645d4290acdecbe6409001731fc038247b0023c3", "field": "ek" }, { "bytes": 3168, "computedSha256": "40de26e25c7016fe01a1928b7126c5126e440f9936ceff903c526c99595618b4", "expectedSha256": "40de26e25c7016fe01a1928b7126c5126e440f9936ceff903c526c99595618b4", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 56, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "2d60c8cf6fdf9c2e24558950a83519fec0c46f0225d732ad644d2cc4975b8e01", "expectedSha256": "2d60c8cf6fdf9c2e24558950a83519fec0c46f0225d732ad644d2cc4975b8e01", "field": "ek" }, { "bytes": 3168, "computedSha256": "531695514668da27f0fc3ada6647c0e32ff219cece9cbdafcf41e4ee8c52776f", "expectedSha256": "531695514668da27f0fc3ada6647c0e32ff219cece9cbdafcf41e4ee8c52776f", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 57, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "effe3ad5b0896c8be54d3e69bfe89e712b6b8757768c1274a0b8b06b0114f5b0", "expectedSha256": "effe3ad5b0896c8be54d3e69bfe89e712b6b8757768c1274a0b8b06b0114f5b0", "field": "ek" }, { "bytes": 3168, "computedSha256": "64cde5aed97c7747b4755dccc11f91cd9c9a609fd8a18d559baff2625ac76644", "expectedSha256": "64cde5aed97c7747b4755dccc11f91cd9c9a609fd8a18d559baff2625ac76644", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 58, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "255e2ec37b720cad0b1e6533cbb4a79783d91d39abb8a7bf952153730da923ed", "expectedSha256": "255e2ec37b720cad0b1e6533cbb4a79783d91d39abb8a7bf952153730da923ed", "field": "ek" }, { "bytes": 3168, "computedSha256": "fb9d7a2dec6d9026f44215318198046772996798cde36459ec8700480d13e365", "expectedSha256": "fb9d7a2dec6d9026f44215318198046772996798cde36459ec8700480d13e365", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 59, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "ab8fdf3ef1ac5e08d8df42fc3064f0f69cf507bc62344a1e82bb4a0b264bf27f", "expectedSha256": "ab8fdf3ef1ac5e08d8df42fc3064f0f69cf507bc62344a1e82bb4a0b264bf27f", "field": "ek" }, { "bytes": 3168, "computedSha256": "26b10fff5a73dbb447f796224f42b629282557e6a7f82d9b719d1a95ce391dce", "expectedSha256": "26b10fff5a73dbb447f796224f42b629282557e6a7f82d9b719d1a95ce391dce", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 60, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "e7a13677c5b26eac0629ab8381ce3c4eea7c6540f4644fa05b5bb97df2bf0c9f", "expectedSha256": "e7a13677c5b26eac0629ab8381ce3c4eea7c6540f4644fa05b5bb97df2bf0c9f", "field": "ek" }, { "bytes": 3168, "computedSha256": "822d13eb5e3d21b678b00d2d729ecd0d3c68f60d0e013e463871409a2cd97691", "expectedSha256": "822d13eb5e3d21b678b00d2d729ecd0d3c68f60d0e013e463871409a2cd97691", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 61, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "6ef1cffd57ed02f21c197a86636fe7bd75440cbbbd966a36ed2e845b9b83400d", "expectedSha256": "6ef1cffd57ed02f21c197a86636fe7bd75440cbbbd966a36ed2e845b9b83400d", "field": "ek" }, { "bytes": 3168, "computedSha256": "f8139a67c82fbcbf44892278881db9ce482f3cd7f40cd9e4c3eafb5cabd44a48", "expectedSha256": "f8139a67c82fbcbf44892278881db9ce482f3cd7f40cd9e4c3eafb5cabd44a48", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 62, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "1868f43f43e3393bed3ac7c44e770849d130a0354a0c11c7c3507a1eadce68bf", "expectedSha256": "1868f43f43e3393bed3ac7c44e770849d130a0354a0c11c7c3507a1eadce68bf", "field": "ek" }, { "bytes": 3168, "computedSha256": "915e880faddcc38336b9ccc4a22fe0473d028541eebf3f7b6a831c529efe59ed", "expectedSha256": "915e880faddcc38336b9ccc4a22fe0473d028541eebf3f7b6a831c529efe59ed", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 63, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "a8b7375fc4982ed0fa86da95f8de2ab209efb4adb17d4ec0cf516eff4ddc9e01", "expectedSha256": "a8b7375fc4982ed0fa86da95f8de2ab209efb4adb17d4ec0cf516eff4ddc9e01", "field": "ek" }, { "bytes": 3168, "computedSha256": "a81577ebf9d6934d20f0db5d0894635cfcfeac1b1613dce4b12d96613ea48c51", "expectedSha256": "a81577ebf9d6934d20f0db5d0894635cfcfeac1b1613dce4b12d96613ea48c51", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 64, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "2c95024713d6065889e87d55d10e8e46279f95f288758356f615c89f9642a4af", "expectedSha256": "2c95024713d6065889e87d55d10e8e46279f95f288758356f615c89f9642a4af", "field": "ek" }, { "bytes": 3168, "computedSha256": "44e4647a2fb79fa74e86fe537aa4b0f536b28656ee7105b03fda5e0dd88a2368", "expectedSha256": "44e4647a2fb79fa74e86fe537aa4b0f536b28656ee7105b03fda5e0dd88a2368", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 65, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "2e053b3f16b303eb5ff704fad28752ceb09db1dc5b823b52d2390a856acbfcf5", "expectedSha256": "2e053b3f16b303eb5ff704fad28752ceb09db1dc5b823b52d2390a856acbfcf5", "field": "ek" }, { "bytes": 3168, "computedSha256": "9b3f03aaff1c07d52af271c9436ccdb79cf7e83e5c06809eea25aac28cef7246", "expectedSha256": "9b3f03aaff1c07d52af271c9436ccdb79cf7e83e5c06809eea25aac28cef7246", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 66, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "dd1626c1f9b6a7f98c289becf12f79d20117edcd6eb6859b5ef79561dda38236", "expectedSha256": "dd1626c1f9b6a7f98c289becf12f79d20117edcd6eb6859b5ef79561dda38236", "field": "ek" }, { "bytes": 3168, "computedSha256": "a9ef98d94011439e2cd257fb304555cc15421f28a7295975061314034aad9ecf", "expectedSha256": "a9ef98d94011439e2cd257fb304555cc15421f28a7295975061314034aad9ecf", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 67, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "03dab43374dc0330a293f2a78f6437f83515ab8422eecc4f894cf1ee47f32a60", "expectedSha256": "03dab43374dc0330a293f2a78f6437f83515ab8422eecc4f894cf1ee47f32a60", "field": "ek" }, { "bytes": 3168, "computedSha256": "2e881f8ea0a8af02420b93f269e644c11df24e4aa9cc6a41eee2213f48324f83", "expectedSha256": "2e881f8ea0a8af02420b93f269e644c11df24e4aa9cc6a41eee2213f48324f83", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 68, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "6f696e5a5d23ac96c2387dd3c6f9aa8dae6589fe5decefeabca51d5b55f343f9", "expectedSha256": "6f696e5a5d23ac96c2387dd3c6f9aa8dae6589fe5decefeabca51d5b55f343f9", "field": "ek" }, { "bytes": 3168, "computedSha256": "8abaf6c3c01fe1241a1a527a89c2f5679e25747318eb72cf9503e096f6b1822c", "expectedSha256": "8abaf6c3c01fe1241a1a527a89c2f5679e25747318eb72cf9503e096f6b1822c", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 69, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "c01e835324c24bb31ad8466dcd2bb5cb13d4facd9b8ea28c33284e60b597a0ca", "expectedSha256": "c01e835324c24bb31ad8466dcd2bb5cb13d4facd9b8ea28c33284e60b597a0ca", "field": "ek" }, { "bytes": 3168, "computedSha256": "297a47c46c0d8183370f6f46e9b3b504332ee4906e48ec0a29d65eda3e249a87", "expectedSha256": "297a47c46c0d8183370f6f46e9b3b504332ee4906e48ec0a29d65eda3e249a87", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 70, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "d23fbc164958fd99cfd6eb410af70e436519c850741c30dae2e09081e49460c7", "expectedSha256": "d23fbc164958fd99cfd6eb410af70e436519c850741c30dae2e09081e49460c7", "field": "ek" }, { "bytes": 3168, "computedSha256": "f562efe8d986b093c703949c2e2bfbbd6eba7cf3d9be64d515a0b1eb4d1a35dd", "expectedSha256": "f562efe8d986b093c703949c2e2bfbbd6eba7cf3d9be64d515a0b1eb4d1a35dd", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 71, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "3f3354b4b47b7d337f2dc69f65988bef98956c01210b6c10b6c54f6d720ca076", "expectedSha256": "3f3354b4b47b7d337f2dc69f65988bef98956c01210b6c10b6c54f6d720ca076", "field": "ek" }, { "bytes": 3168, "computedSha256": "f9e16e29b4cb8ff70eb34363e6a78f0b35685ba56ae9729adaa7a8fa0dbc8d67", "expectedSha256": "f9e16e29b4cb8ff70eb34363e6a78f0b35685ba56ae9729adaa7a8fa0dbc8d67", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 72, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "55038b0fd285ec0c208be0932bf5b17ed207c8506548e8de0315b7edab1fbbce", "expectedSha256": "55038b0fd285ec0c208be0932bf5b17ed207c8506548e8de0315b7edab1fbbce", "field": "ek" }, { "bytes": 3168, "computedSha256": "cf7c06ea99d15d5c90a0afa094df438ad653f29d8709a6da22f0139404b3f4aa", "expectedSha256": "cf7c06ea99d15d5c90a0afa094df438ad653f29d8709a6da22f0139404b3f4aa", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 73, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "ff2957977efa86c802bab64c66c346f066dea24ae92d91fcf7801c63a494a56c", "expectedSha256": "ff2957977efa86c802bab64c66c346f066dea24ae92d91fcf7801c63a494a56c", "field": "ek" }, { "bytes": 3168, "computedSha256": "3bea3d2c3b26e0f86970a4d36f0fdeaa6f3ce020de5c395baaac291083d8e5a6", "expectedSha256": "3bea3d2c3b26e0f86970a4d36f0fdeaa6f3ce020de5c395baaac291083d8e5a6", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 74, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "keyGen", "group": "mlkem-keygen", "outputs": [ { "bytes": 1568, "computedSha256": "4c1461f4ab5472565b2e83aabeaf6577960a9e205bafd1f06527da8abadc1a8d", "expectedSha256": "4c1461f4ab5472565b2e83aabeaf6577960a9e205bafd1f06527da8abadc1a8d", "field": "ek" }, { "bytes": 3168, "computedSha256": "3b88310592bf40bb3de00377eb7ebbb329805fe96f80ba673a0bbaffbddbc733", "expectedSha256": "3b88310592bf40bb3de00377eb7ebbb329805fe96f80ba673a0bbaffbddbc733", "field": "dk" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 75, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "081d14f479358be7af78d18d6282832b81d8b7e71faa119571719e1b07b81e4a", "expectedSha256": "081d14f479358be7af78d18d6282832b81d8b7e71faa119571719e1b07b81e4a", "field": "c" }, { "bytes": 32, "computedSha256": "8e15c7c374f2d7709953d7be39b2fbbb1f5ebda15545bd439d56cd672ecfef66", "expectedSha256": "8e15c7c374f2d7709953d7be39b2fbbb1f5ebda15545bd439d56cd672ecfef66", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 1, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "a7e29d5761aeb7c88c364347e2fafb58c20b72ac7e62a75ef575b0c66091c7bb", "expectedSha256": "a7e29d5761aeb7c88c364347e2fafb58c20b72ac7e62a75ef575b0c66091c7bb", "field": "c" }, { "bytes": 32, "computedSha256": "3565d10995fc2ce886d595f92196a81d130810973bac089267d49ae7559b3e5e", "expectedSha256": "3565d10995fc2ce886d595f92196a81d130810973bac089267d49ae7559b3e5e", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 2, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "87f32d31c6f455d8a9253bdab976440e106536069b0614995c47a3f9d97c8b65", "expectedSha256": "87f32d31c6f455d8a9253bdab976440e106536069b0614995c47a3f9d97c8b65", "field": "c" }, { "bytes": 32, "computedSha256": "ec5b5386c7f1152b6f5d73f6970ae0f29d2a727ff27c2fe75c8d9ed6df68412e", "expectedSha256": "ec5b5386c7f1152b6f5d73f6970ae0f29d2a727ff27c2fe75c8d9ed6df68412e", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 3, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "4b2defd078c373a6995ee6eeca0a5971f3b6633ddf80f851a727135e8109b0d0", "expectedSha256": "4b2defd078c373a6995ee6eeca0a5971f3b6633ddf80f851a727135e8109b0d0", "field": "c" }, { "bytes": 32, "computedSha256": "d9b3580e78568a091e19eca5e30dcefa3361b31b8f92d2855f992cd92cbb6395", "expectedSha256": "d9b3580e78568a091e19eca5e30dcefa3361b31b8f92d2855f992cd92cbb6395", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 4, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "af88f8a5cd7f6213c305211f10c9f027c3060abcd97e546029aafa017b896328", "expectedSha256": "af88f8a5cd7f6213c305211f10c9f027c3060abcd97e546029aafa017b896328", "field": "c" }, { "bytes": 32, "computedSha256": "3a43d6e3f1771a36729e4ab3cbc1451d8e7dba36bfbf5f1172c4c7d4ff20ad8e", "expectedSha256": "3a43d6e3f1771a36729e4ab3cbc1451d8e7dba36bfbf5f1172c4c7d4ff20ad8e", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 5, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "a282896531e7665281fc477583220e11840e5531d08814ea3a19bc6aeaf22d59", "expectedSha256": "a282896531e7665281fc477583220e11840e5531d08814ea3a19bc6aeaf22d59", "field": "c" }, { "bytes": 32, "computedSha256": "660a3788eba94d2783cd08d6bacc6b32750f83e0d1275ee7cfccb4d7ce5381a9", "expectedSha256": "660a3788eba94d2783cd08d6bacc6b32750f83e0d1275ee7cfccb4d7ce5381a9", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 6, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "62d1eb413a21cdad284513c256b4fdd1e9d7932f3a48b4363cd8616051c7dd8b", "expectedSha256": "62d1eb413a21cdad284513c256b4fdd1e9d7932f3a48b4363cd8616051c7dd8b", "field": "c" }, { "bytes": 32, "computedSha256": "e8f1cdcd50147d8fad67cfcba168b0fe2709f6c44a89a2cb1f4551398880d046", "expectedSha256": "e8f1cdcd50147d8fad67cfcba168b0fe2709f6c44a89a2cb1f4551398880d046", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 7, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "4479b50641671a4ab6f780f50f78beff8d5dd9ac0ef50076ee7238a518615e7f", "expectedSha256": "4479b50641671a4ab6f780f50f78beff8d5dd9ac0ef50076ee7238a518615e7f", "field": "c" }, { "bytes": 32, "computedSha256": "7aca9d7218f7c55d40d8ee7587acaadccf7caa2413445bd6afa58950e4303480", "expectedSha256": "7aca9d7218f7c55d40d8ee7587acaadccf7caa2413445bd6afa58950e4303480", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 8, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "b1f51104067fbd2ccdb04f926428efeb46fe4e685b887edfeb41c060bc70c902", "expectedSha256": "b1f51104067fbd2ccdb04f926428efeb46fe4e685b887edfeb41c060bc70c902", "field": "c" }, { "bytes": 32, "computedSha256": "f251197b76f88e2f01814bf9806f7af634ee3faabf13df65467cd886e587ee75", "expectedSha256": "f251197b76f88e2f01814bf9806f7af634ee3faabf13df65467cd886e587ee75", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 9, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "d3d0d9fe8459f9e0142f9a07387addc203bd92fd8a04ceba17726ee6dd0c6e9a", "expectedSha256": "d3d0d9fe8459f9e0142f9a07387addc203bd92fd8a04ceba17726ee6dd0c6e9a", "field": "c" }, { "bytes": 32, "computedSha256": "67803728fcfb07e0f2e403a7da51d943bfc19a8285435736063603fb8f574044", "expectedSha256": "67803728fcfb07e0f2e403a7da51d943bfc19a8285435736063603fb8f574044", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 10, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "0cc83a658cd5b8cde87d2f8acd8f1b8bcc979ff19220ccbe932417435e04264f", "expectedSha256": "0cc83a658cd5b8cde87d2f8acd8f1b8bcc979ff19220ccbe932417435e04264f", "field": "c" }, { "bytes": 32, "computedSha256": "50e17703594ea89855eae3768d1968ba05beb962e2e7ebcd5ad997bf4311fa0e", "expectedSha256": "50e17703594ea89855eae3768d1968ba05beb962e2e7ebcd5ad997bf4311fa0e", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 11, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "59aa0a9264e1194dd725d79afa15afc032c5e63656093a4a64fbf0eea9377294", "expectedSha256": "59aa0a9264e1194dd725d79afa15afc032c5e63656093a4a64fbf0eea9377294", "field": "c" }, { "bytes": 32, "computedSha256": "dfd435524e023475b53d851a8d5246b9501626ba1411d64b72a7bc3c0c84d55c", "expectedSha256": "dfd435524e023475b53d851a8d5246b9501626ba1411d64b72a7bc3c0c84d55c", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 12, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "f7e8e9fd4ba22425dfc3c730eae8c11c6fead025901f67cc21a6ccc92128257f", "expectedSha256": "f7e8e9fd4ba22425dfc3c730eae8c11c6fead025901f67cc21a6ccc92128257f", "field": "c" }, { "bytes": 32, "computedSha256": "1057fe5840a25a12867bf2824a1045f59c654f75ab2fb38bfe22d6c13cfc14d2", "expectedSha256": "1057fe5840a25a12867bf2824a1045f59c654f75ab2fb38bfe22d6c13cfc14d2", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 13, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "4bc35909a8f93edefe95f66e4cd5969c1a101d8c460e600f978101c8bdb7d7b1", "expectedSha256": "4bc35909a8f93edefe95f66e4cd5969c1a101d8c460e600f978101c8bdb7d7b1", "field": "c" }, { "bytes": 32, "computedSha256": "913a6a56816c92a45d99eabc2f8fc542fe442706b24fb07c394d1676c7151f98", "expectedSha256": "913a6a56816c92a45d99eabc2f8fc542fe442706b24fb07c394d1676c7151f98", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 14, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "7c306a75da40c72580a20ad1ae13a56de3eb96a78b6d4e1b727949e0fda1dc0e", "expectedSha256": "7c306a75da40c72580a20ad1ae13a56de3eb96a78b6d4e1b727949e0fda1dc0e", "field": "c" }, { "bytes": 32, "computedSha256": "2ed2854f32d935252014df5db87b63e39e99511656a8007ef0d9413812baa6d8", "expectedSha256": "2ed2854f32d935252014df5db87b63e39e99511656a8007ef0d9413812baa6d8", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 15, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "43e4c9e13858c4ba44e182f13a9a513180906d02c722c7d8b2498a7968fa2d96", "expectedSha256": "43e4c9e13858c4ba44e182f13a9a513180906d02c722c7d8b2498a7968fa2d96", "field": "c" }, { "bytes": 32, "computedSha256": "08f105af8b62a4141c77f8c001521f860f04190db4a0c7308c16e1391a9c36a1", "expectedSha256": "08f105af8b62a4141c77f8c001521f860f04190db4a0c7308c16e1391a9c36a1", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 16, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "7de22a9c5f69a8042cca380a185ef6c6bd8299213335f8dc26d12c41ee341c16", "expectedSha256": "7de22a9c5f69a8042cca380a185ef6c6bd8299213335f8dc26d12c41ee341c16", "field": "c" }, { "bytes": 32, "computedSha256": "8ff4d006f888d72e2a211d0dc7758f65f67b54d898c791a2c2c305fb636abc3d", "expectedSha256": "8ff4d006f888d72e2a211d0dc7758f65f67b54d898c791a2c2c305fb636abc3d", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 17, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "af35f2c2a11216e38e0e7e30a68728e22bc1f152227da1f6dff3292c6500335a", "expectedSha256": "af35f2c2a11216e38e0e7e30a68728e22bc1f152227da1f6dff3292c6500335a", "field": "c" }, { "bytes": 32, "computedSha256": "54617af13a264867175870974fcea1c731dc795a2da166c32325989da5a3844d", "expectedSha256": "54617af13a264867175870974fcea1c731dc795a2da166c32325989da5a3844d", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 18, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "0525f780b2fa34b681d3ded450cf401475d1416bfb5f45d430b6b9f7b0dd1dcd", "expectedSha256": "0525f780b2fa34b681d3ded450cf401475d1416bfb5f45d430b6b9f7b0dd1dcd", "field": "c" }, { "bytes": 32, "computedSha256": "97e45774f50ec43cdcd664f602667b87a61b3a77324f5d7902b7e561d23c3b58", "expectedSha256": "97e45774f50ec43cdcd664f602667b87a61b3a77324f5d7902b7e561d23c3b58", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 19, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "b1306bbd5ae2ab0985ec0b752c34313d507cc1a8d7af0482b3ba4dd138858271", "expectedSha256": "b1306bbd5ae2ab0985ec0b752c34313d507cc1a8d7af0482b3ba4dd138858271", "field": "c" }, { "bytes": 32, "computedSha256": "b527558168cdec711d3836fb8472d249cf1c0a007f79649a3f7ac089198b0295", "expectedSha256": "b527558168cdec711d3836fb8472d249cf1c0a007f79649a3f7ac089198b0295", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 20, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "99f420b95111add23e52c3fb565f5fb1d0a0b7b6c8e3795b474bab1714d1d4e8", "expectedSha256": "99f420b95111add23e52c3fb565f5fb1d0a0b7b6c8e3795b474bab1714d1d4e8", "field": "c" }, { "bytes": 32, "computedSha256": "e3e581f46451dc95d62abf19113f5e1f11a1855c4feeb4bbb089c15dd85d4bdc", "expectedSha256": "e3e581f46451dc95d62abf19113f5e1f11a1855c4feeb4bbb089c15dd85d4bdc", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 21, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "c914b7fab672d81ec66f5fb88789c34a64bc891415b5399771ee5c4fad2106ee", "expectedSha256": "c914b7fab672d81ec66f5fb88789c34a64bc891415b5399771ee5c4fad2106ee", "field": "c" }, { "bytes": 32, "computedSha256": "9cffde216f2af78a52260965fe334af8ccad5e47ce2297fbb65bce3a90a48b36", "expectedSha256": "9cffde216f2af78a52260965fe334af8ccad5e47ce2297fbb65bce3a90a48b36", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 22, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "ad51cb79e39f51b11c9238c9dbf897ad836631320fc24393d7f4faf65962f93f", "expectedSha256": "ad51cb79e39f51b11c9238c9dbf897ad836631320fc24393d7f4faf65962f93f", "field": "c" }, { "bytes": 32, "computedSha256": "96761069d135ad7c023d72b0342a45d174e584f565fa97917a9385695516cc82", "expectedSha256": "96761069d135ad7c023d72b0342a45d174e584f565fa97917a9385695516cc82", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 23, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "b6ba85ce3cde8ae3aa5a4dd220a88bbe771dad4db331d3bab22bf54bc0d7f5ae", "expectedSha256": "b6ba85ce3cde8ae3aa5a4dd220a88bbe771dad4db331d3bab22bf54bc0d7f5ae", "field": "c" }, { "bytes": 32, "computedSha256": "00e60e9fd4838e1a512bb3ad66b924d8df38a229d63eea95b1f382877cabcee8", "expectedSha256": "00e60e9fd4838e1a512bb3ad66b924d8df38a229d63eea95b1f382877cabcee8", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 24, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 768, "computedSha256": "c55d30db41ae654e777fca7530f296a96ba7ad809286afad6731b1543c732cc6", "expectedSha256": "c55d30db41ae654e777fca7530f296a96ba7ad809286afad6731b1543c732cc6", "field": "c" }, { "bytes": 32, "computedSha256": "75eef863a1c4a0b1f0759cb88f3f4c9100005348188c25b87c44f279c6256794", "expectedSha256": "75eef863a1c4a0b1f0759cb88f3f4c9100005348188c25b87c44f279c6256794", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 25, "tgId": 1, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "6aa5618fa7e32446603b9b828f0367fde929305f422d29fbbd5e36e98c94f07c", "expectedSha256": "6aa5618fa7e32446603b9b828f0367fde929305f422d29fbbd5e36e98c94f07c", "field": "c" }, { "bytes": 32, "computedSha256": "08f145404e6cc41be2f91747001ea5cb4b1056c576c2499087d5ec8af25d6048", "expectedSha256": "08f145404e6cc41be2f91747001ea5cb4b1056c576c2499087d5ec8af25d6048", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 26, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "e1715028281405dbcdf8a12e8694bf0e612e257a1c65291db4bc53b3c9059f53", "expectedSha256": "e1715028281405dbcdf8a12e8694bf0e612e257a1c65291db4bc53b3c9059f53", "field": "c" }, { "bytes": 32, "computedSha256": "f46795ca280c7b86bb3a522714cf180ef24b33698e8fc133e7d2b7e6de35e613", "expectedSha256": "f46795ca280c7b86bb3a522714cf180ef24b33698e8fc133e7d2b7e6de35e613", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 27, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "f6290120c35d2fe360e8a5db5096f5928fc236aabfd92f235adee0afef038ec9", "expectedSha256": "f6290120c35d2fe360e8a5db5096f5928fc236aabfd92f235adee0afef038ec9", "field": "c" }, { "bytes": 32, "computedSha256": "4e7a2683805620f9aee80ac330c11b794583e0e168beb3611cd7c752caa0bbce", "expectedSha256": "4e7a2683805620f9aee80ac330c11b794583e0e168beb3611cd7c752caa0bbce", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 28, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "0275951938ce5eebf1a94adf58de4e611bef785abdb22afa6c58334a0b61dcfb", "expectedSha256": "0275951938ce5eebf1a94adf58de4e611bef785abdb22afa6c58334a0b61dcfb", "field": "c" }, { "bytes": 32, "computedSha256": "7eb303fdfc1c6d2d7c5aa5b336f3acafdf4fd764e16fa9905abfcc6532c8f8e2", "expectedSha256": "7eb303fdfc1c6d2d7c5aa5b336f3acafdf4fd764e16fa9905abfcc6532c8f8e2", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 29, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "56b0ea07c54b4ff40ce8297591459314f1078078c233ab72bc22cec7f2b7d661", "expectedSha256": "56b0ea07c54b4ff40ce8297591459314f1078078c233ab72bc22cec7f2b7d661", "field": "c" }, { "bytes": 32, "computedSha256": "9fbfd8be31a0dd63747ac824f813f190d554dd6951424f68b333aaca6950845b", "expectedSha256": "9fbfd8be31a0dd63747ac824f813f190d554dd6951424f68b333aaca6950845b", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 30, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "db788f052ddb4c43db53f8024f34eabfdfba5bf9f56a576587c0f3f1183f52b9", "expectedSha256": "db788f052ddb4c43db53f8024f34eabfdfba5bf9f56a576587c0f3f1183f52b9", "field": "c" }, { "bytes": 32, "computedSha256": "2f200cd81f6ba1e57ea62a4ae7ed0a996a9c3b1c80a60efda3ca08977d407b5b", "expectedSha256": "2f200cd81f6ba1e57ea62a4ae7ed0a996a9c3b1c80a60efda3ca08977d407b5b", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 31, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "361cde19bd603adc5632628cbbe34025805daa67760b06b62b3a8c90bee9deb0", "expectedSha256": "361cde19bd603adc5632628cbbe34025805daa67760b06b62b3a8c90bee9deb0", "field": "c" }, { "bytes": 32, "computedSha256": "1917e1ef7114c6d6bb27a741d7d0d705f6cd4fcb5691b3e4f7f96bf7e964cd10", "expectedSha256": "1917e1ef7114c6d6bb27a741d7d0d705f6cd4fcb5691b3e4f7f96bf7e964cd10", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 32, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "721eff71d8f32b41f3e4a659fbadfc540ffc24199d950244f86ac6fea03c751e", "expectedSha256": "721eff71d8f32b41f3e4a659fbadfc540ffc24199d950244f86ac6fea03c751e", "field": "c" }, { "bytes": 32, "computedSha256": "066396b7cf3ec188827a5e523158dc8f2d188cf85c1f027666059785ff71286c", "expectedSha256": "066396b7cf3ec188827a5e523158dc8f2d188cf85c1f027666059785ff71286c", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 33, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "17efa40c05477f89b92427c9f78a34090c0c2a6dfa0a70b4ef00cad69d66c7a2", "expectedSha256": "17efa40c05477f89b92427c9f78a34090c0c2a6dfa0a70b4ef00cad69d66c7a2", "field": "c" }, { "bytes": 32, "computedSha256": "3dedf5de52801f2d4921fd0eee20cb863966f774b8f3a365cc0bb59c048bc127", "expectedSha256": "3dedf5de52801f2d4921fd0eee20cb863966f774b8f3a365cc0bb59c048bc127", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 34, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "7d7c299d205e6f475ff3388182577c4158a4beee189b8723afa5af80e876f89c", "expectedSha256": "7d7c299d205e6f475ff3388182577c4158a4beee189b8723afa5af80e876f89c", "field": "c" }, { "bytes": 32, "computedSha256": "8a2b719281ef3e4d471e5baa8918024058c39f8022b3d1f5b5901f06fd9c2bcf", "expectedSha256": "8a2b719281ef3e4d471e5baa8918024058c39f8022b3d1f5b5901f06fd9c2bcf", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 35, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "d25ae7a804aa49279ee58a6ff5d4e39b013cf854cc24ce99c2d5356b474ab16c", "expectedSha256": "d25ae7a804aa49279ee58a6ff5d4e39b013cf854cc24ce99c2d5356b474ab16c", "field": "c" }, { "bytes": 32, "computedSha256": "c14a3e75505bfa2ef3ed7c5cd51eba8cb12dd8165117fc229f4f4bf09d5ecf1f", "expectedSha256": "c14a3e75505bfa2ef3ed7c5cd51eba8cb12dd8165117fc229f4f4bf09d5ecf1f", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 36, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "9d2acff24b49983ee34065bb8799072d80e11908e084e61e0fb1add41a51b6de", "expectedSha256": "9d2acff24b49983ee34065bb8799072d80e11908e084e61e0fb1add41a51b6de", "field": "c" }, { "bytes": 32, "computedSha256": "c894bc5854adcc7f67b9884ba253cff88fa9412056bfaea7c7154e11d56159e0", "expectedSha256": "c894bc5854adcc7f67b9884ba253cff88fa9412056bfaea7c7154e11d56159e0", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 37, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "483c3ba8f4d91330f8b6a3881738fbf46a141d7810ae754ee850a76287161cbc", "expectedSha256": "483c3ba8f4d91330f8b6a3881738fbf46a141d7810ae754ee850a76287161cbc", "field": "c" }, { "bytes": 32, "computedSha256": "bac2a635c33a89295a58c0e3087fc7943d7ed93263c9c20961e5f337f187a022", "expectedSha256": "bac2a635c33a89295a58c0e3087fc7943d7ed93263c9c20961e5f337f187a022", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 38, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "2a80b64c78735cd3af91686a30367428cbe09e124f1c404eab426333c7b7cfdb", "expectedSha256": "2a80b64c78735cd3af91686a30367428cbe09e124f1c404eab426333c7b7cfdb", "field": "c" }, { "bytes": 32, "computedSha256": "71022d3f0eeb525cc065f69cd9f1b742b9361e4b680543fb2d02301e33ce842d", "expectedSha256": "71022d3f0eeb525cc065f69cd9f1b742b9361e4b680543fb2d02301e33ce842d", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 39, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "6e2daf378e3f6970661a079a3e5c44789c05ae255ebd9f37902507b22ecb324b", "expectedSha256": "6e2daf378e3f6970661a079a3e5c44789c05ae255ebd9f37902507b22ecb324b", "field": "c" }, { "bytes": 32, "computedSha256": "5cf9393398617705fecd91b9e4f6b669f8b17322805435b20206696b2b745f50", "expectedSha256": "5cf9393398617705fecd91b9e4f6b669f8b17322805435b20206696b2b745f50", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 40, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "9c9733aa1160f2a90b52c079e698f85fcc7cef51da4eecd0b1f00d5553b66dea", "expectedSha256": "9c9733aa1160f2a90b52c079e698f85fcc7cef51da4eecd0b1f00d5553b66dea", "field": "c" }, { "bytes": 32, "computedSha256": "4f677cb07b04e320331419352552f2a1647717b9dfd3b562c51b068df1d98343", "expectedSha256": "4f677cb07b04e320331419352552f2a1647717b9dfd3b562c51b068df1d98343", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 41, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "f9e92ceb7c620bc363e0822deee3aa837cee28281c991640410690c930818c7f", "expectedSha256": "f9e92ceb7c620bc363e0822deee3aa837cee28281c991640410690c930818c7f", "field": "c" }, { "bytes": 32, "computedSha256": "bffa358cb212b28c997aaabc8d1d6366e8ba6b890857c0e4da14f52a1ecc8cf0", "expectedSha256": "bffa358cb212b28c997aaabc8d1d6366e8ba6b890857c0e4da14f52a1ecc8cf0", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 42, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "6555b26617c033fef808e8c056ea15136608ea4c4fe1df405a55d141fe6da265", "expectedSha256": "6555b26617c033fef808e8c056ea15136608ea4c4fe1df405a55d141fe6da265", "field": "c" }, { "bytes": 32, "computedSha256": "8c2910af3f7622c495faaafe46466b4d53d0bcbbd2c53d032c40649da6c03abf", "expectedSha256": "8c2910af3f7622c495faaafe46466b4d53d0bcbbd2c53d032c40649da6c03abf", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 43, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "94336b58a106e4d11c3b0ee728013bf2a34d55490c5d1a36d03b2100caed73e9", "expectedSha256": "94336b58a106e4d11c3b0ee728013bf2a34d55490c5d1a36d03b2100caed73e9", "field": "c" }, { "bytes": 32, "computedSha256": "ffbe8c491870247b46a3b56053e9463dea7c2cd10121a672b800819c1d265414", "expectedSha256": "ffbe8c491870247b46a3b56053e9463dea7c2cd10121a672b800819c1d265414", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 44, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "0b07eec04e8c1e68fa0639e2875aa238a0933083e5fac357650a7ae12b057bb4", "expectedSha256": "0b07eec04e8c1e68fa0639e2875aa238a0933083e5fac357650a7ae12b057bb4", "field": "c" }, { "bytes": 32, "computedSha256": "1e6d9c7f1972496300540b6eb85799a84b8616f77215e53d339be0d931fc9952", "expectedSha256": "1e6d9c7f1972496300540b6eb85799a84b8616f77215e53d339be0d931fc9952", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 45, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "0569583e8a79651145c994a94d4cf01684385a60e538b02af06594c1fb01b3f3", "expectedSha256": "0569583e8a79651145c994a94d4cf01684385a60e538b02af06594c1fb01b3f3", "field": "c" }, { "bytes": 32, "computedSha256": "34db677e082cf5d01092f7f44c51810962f8fa612c5157bdda243a83be1236d5", "expectedSha256": "34db677e082cf5d01092f7f44c51810962f8fa612c5157bdda243a83be1236d5", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 46, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "5b9a6de97894e473c7170670ea756f8aafa0d9d5e97ff54c9e65cf360a294146", "expectedSha256": "5b9a6de97894e473c7170670ea756f8aafa0d9d5e97ff54c9e65cf360a294146", "field": "c" }, { "bytes": 32, "computedSha256": "4c2df58e08187a8871804fca8c372b9ebb4be448b1e05e2d2e865b8152cb7ea9", "expectedSha256": "4c2df58e08187a8871804fca8c372b9ebb4be448b1e05e2d2e865b8152cb7ea9", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 47, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "ce7c27e4f796d667f2fd2166253d3a126557d46e5c82bbc03aab01e9cbf4c585", "expectedSha256": "ce7c27e4f796d667f2fd2166253d3a126557d46e5c82bbc03aab01e9cbf4c585", "field": "c" }, { "bytes": 32, "computedSha256": "01012c427e2c8f3a7425d5c54993f0f710d6e7c570038aa85e6f5abce018b62e", "expectedSha256": "01012c427e2c8f3a7425d5c54993f0f710d6e7c570038aa85e6f5abce018b62e", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 48, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "91c997406a93e77dce23181279e8f91836c8a7acbe2947fd3b0b768afc627942", "expectedSha256": "91c997406a93e77dce23181279e8f91836c8a7acbe2947fd3b0b768afc627942", "field": "c" }, { "bytes": 32, "computedSha256": "835febcc0dbc12722ab2fca9d6654e90e3ca4dd4fbdbf646519c7fdd1621543c", "expectedSha256": "835febcc0dbc12722ab2fca9d6654e90e3ca4dd4fbdbf646519c7fdd1621543c", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 49, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1088, "computedSha256": "cc1fac725611183c93f4f70d75cbaffc72563ce2fe3bb43656e4c6790431cb24", "expectedSha256": "cc1fac725611183c93f4f70d75cbaffc72563ce2fe3bb43656e4c6790431cb24", "field": "c" }, { "bytes": 32, "computedSha256": "b4e2ac2ac7b22f51dafe707835825b03c365486d2de3339ee8f14e3391cebeb9", "expectedSha256": "b4e2ac2ac7b22f51dafe707835825b03c365486d2de3339ee8f14e3391cebeb9", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 50, "tgId": 2, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "50354ab14ee479abefa58be0dce589fcd8710dbbc38cfddd9cca2ac8cb3992dd", "expectedSha256": "50354ab14ee479abefa58be0dce589fcd8710dbbc38cfddd9cca2ac8cb3992dd", "field": "c" }, { "bytes": 32, "computedSha256": "8820cec73cf9f60b1e81f3051f67e537e4e6460e8ee54df9bc2bf44b97de2230", "expectedSha256": "8820cec73cf9f60b1e81f3051f67e537e4e6460e8ee54df9bc2bf44b97de2230", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 51, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "68329f83934a1c821535d0d0016ce4e63082b74b83d1b48b3a6ac1f536db8973", "expectedSha256": "68329f83934a1c821535d0d0016ce4e63082b74b83d1b48b3a6ac1f536db8973", "field": "c" }, { "bytes": 32, "computedSha256": "d8db771faa66ee75f1d18c119ddfca949371145e637629bfe6e005990250f255", "expectedSha256": "d8db771faa66ee75f1d18c119ddfca949371145e637629bfe6e005990250f255", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 52, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "7071fc186a75a3f67aa2c2533bedc44369016bcc80f6cd2b537faec5da75d6f2", "expectedSha256": "7071fc186a75a3f67aa2c2533bedc44369016bcc80f6cd2b537faec5da75d6f2", "field": "c" }, { "bytes": 32, "computedSha256": "13467e8dcaeadc4fd9577600bf9101eb5f740565c44eb83287cee84db0f38933", "expectedSha256": "13467e8dcaeadc4fd9577600bf9101eb5f740565c44eb83287cee84db0f38933", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 53, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "bf0422af3f22f54bc8624d4ff863a4e9f3d30dc3f584a8e807a28f478f8dbc1e", "expectedSha256": "bf0422af3f22f54bc8624d4ff863a4e9f3d30dc3f584a8e807a28f478f8dbc1e", "field": "c" }, { "bytes": 32, "computedSha256": "f5699670ab87b8df3b2c282cc1bfe5fdd0d325cbace395657edb3f9fa9794b24", "expectedSha256": "f5699670ab87b8df3b2c282cc1bfe5fdd0d325cbace395657edb3f9fa9794b24", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 54, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "972d6ca2245d659e84dea0dde810717c7ccdbdcf967b7fd87217346c03f58313", "expectedSha256": "972d6ca2245d659e84dea0dde810717c7ccdbdcf967b7fd87217346c03f58313", "field": "c" }, { "bytes": 32, "computedSha256": "c140b10622da219df6ac53452bcde218147bc05f49e99ed69af4b8dc9b66b1eb", "expectedSha256": "c140b10622da219df6ac53452bcde218147bc05f49e99ed69af4b8dc9b66b1eb", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 55, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "878624f082e5035021fe830efb06d0ddb84c41282bca8636b7f1e682826f4ec7", "expectedSha256": "878624f082e5035021fe830efb06d0ddb84c41282bca8636b7f1e682826f4ec7", "field": "c" }, { "bytes": 32, "computedSha256": "8a5660a481a19d59ef608a196ef673ffeddc84243e8e77dc5ffcf9338c2e2c82", "expectedSha256": "8a5660a481a19d59ef608a196ef673ffeddc84243e8e77dc5ffcf9338c2e2c82", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 56, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "ac194a02b36af4e8c21a47236685339136668792860d081c7ee48928894c0e44", "expectedSha256": "ac194a02b36af4e8c21a47236685339136668792860d081c7ee48928894c0e44", "field": "c" }, { "bytes": 32, "computedSha256": "3d2f306cf590a050ba2d22e4ba81accac3e935ee821a1ec525a1a8d4fcba3c9f", "expectedSha256": "3d2f306cf590a050ba2d22e4ba81accac3e935ee821a1ec525a1a8d4fcba3c9f", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 57, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "42600e78d2aeb8fb098da287cfebe5ca2964c1a6efd7261bdc7d5d75764ca0ed", "expectedSha256": "42600e78d2aeb8fb098da287cfebe5ca2964c1a6efd7261bdc7d5d75764ca0ed", "field": "c" }, { "bytes": 32, "computedSha256": "c6e4d840b581168c8535b2a81c5283e8d18a2354c3cbb9b74f341bafaf2a24f0", "expectedSha256": "c6e4d840b581168c8535b2a81c5283e8d18a2354c3cbb9b74f341bafaf2a24f0", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 58, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "c1b34df2c40f1eaf4dfbfaeb7579a5d4fae3bff3df340df5f15d33bcb17f03a2", "expectedSha256": "c1b34df2c40f1eaf4dfbfaeb7579a5d4fae3bff3df340df5f15d33bcb17f03a2", "field": "c" }, { "bytes": 32, "computedSha256": "d86393feb525bd2bf90a1f085f2c087b61eb7af11af65a694f6f53b6c940349c", "expectedSha256": "d86393feb525bd2bf90a1f085f2c087b61eb7af11af65a694f6f53b6c940349c", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 59, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "b1c885cdd8b2dc1fa618c63251897c07d9dc4e46315b41bb33c9dc0d98b9dda1", "expectedSha256": "b1c885cdd8b2dc1fa618c63251897c07d9dc4e46315b41bb33c9dc0d98b9dda1", "field": "c" }, { "bytes": 32, "computedSha256": "9bbd75489e2fdaf6493d1e7d974f56ad05a1ce05378be5c2315f1227f74392f3", "expectedSha256": "9bbd75489e2fdaf6493d1e7d974f56ad05a1ce05378be5c2315f1227f74392f3", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 60, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "a996f3bf2c14e3a0e00afb31c787f11438bd9273f1b4877d67b774b5b56591b9", "expectedSha256": "a996f3bf2c14e3a0e00afb31c787f11438bd9273f1b4877d67b774b5b56591b9", "field": "c" }, { "bytes": 32, "computedSha256": "d788c958f63545ef56916292cf13527ed3de6df715a382d6165196c5427a3b83", "expectedSha256": "d788c958f63545ef56916292cf13527ed3de6df715a382d6165196c5427a3b83", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 61, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "1afa0a0a57521bb796bae8cee27a3c0c95ee2f474eeb5ab8c15680e706e0c6f3", "expectedSha256": "1afa0a0a57521bb796bae8cee27a3c0c95ee2f474eeb5ab8c15680e706e0c6f3", "field": "c" }, { "bytes": 32, "computedSha256": "fbcc75a1209d3d98fcf9f28b9f13c884bf22303ce852caefc2ff5379f7811a2d", "expectedSha256": "fbcc75a1209d3d98fcf9f28b9f13c884bf22303ce852caefc2ff5379f7811a2d", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 62, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "c38ac8dba356a60cea7496ee9271b3ad3c756d6d2dfe1cd1600f0b94ac2e21e6", "expectedSha256": "c38ac8dba356a60cea7496ee9271b3ad3c756d6d2dfe1cd1600f0b94ac2e21e6", "field": "c" }, { "bytes": 32, "computedSha256": "ec338a16776652fb69fe9c595c669185f64333a4a4d91e1ecccff81b838ef79f", "expectedSha256": "ec338a16776652fb69fe9c595c669185f64333a4a4d91e1ecccff81b838ef79f", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 63, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "b95b3b702b59fa633581b827fc26e9f324a6b5d6643d82b863e402e452645b9a", "expectedSha256": "b95b3b702b59fa633581b827fc26e9f324a6b5d6643d82b863e402e452645b9a", "field": "c" }, { "bytes": 32, "computedSha256": "28113dce5a53118ebde9cb6613f74054c6e60845e1e30b65827cec6347ad4e85", "expectedSha256": "28113dce5a53118ebde9cb6613f74054c6e60845e1e30b65827cec6347ad4e85", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 64, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "097d3847bfdd0db5be03b6408c286554af3dd0938afa23ac4578dd3f2907bc3b", "expectedSha256": "097d3847bfdd0db5be03b6408c286554af3dd0938afa23ac4578dd3f2907bc3b", "field": "c" }, { "bytes": 32, "computedSha256": "635c4388fc4c74c08ea2f112fea31893c338d78db0458924f9220c919109025e", "expectedSha256": "635c4388fc4c74c08ea2f112fea31893c338d78db0458924f9220c919109025e", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 65, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "6407487c60b4f7ea13c7dabd3ec7b72e4dec0ed8cb885c42d198ca8cffb30a11", "expectedSha256": "6407487c60b4f7ea13c7dabd3ec7b72e4dec0ed8cb885c42d198ca8cffb30a11", "field": "c" }, { "bytes": 32, "computedSha256": "a98b01787f3203b5ffff474ca5b6f75c0715489d4ebc76cd0d0e7646271e9785", "expectedSha256": "a98b01787f3203b5ffff474ca5b6f75c0715489d4ebc76cd0d0e7646271e9785", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 66, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "70d42e78306ea66e5184d3c804094ee9b7b16c8e9aa9dcf74a1af470d6da7296", "expectedSha256": "70d42e78306ea66e5184d3c804094ee9b7b16c8e9aa9dcf74a1af470d6da7296", "field": "c" }, { "bytes": 32, "computedSha256": "fbedf084fb224d9163e522dd4c98babc8cab0278b43ec2ec077a9308e062040e", "expectedSha256": "fbedf084fb224d9163e522dd4c98babc8cab0278b43ec2ec077a9308e062040e", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 67, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "ee776bea6973f8990268e729c26c9fa17b19b2d36b32b9ac060172f689424450", "expectedSha256": "ee776bea6973f8990268e729c26c9fa17b19b2d36b32b9ac060172f689424450", "field": "c" }, { "bytes": 32, "computedSha256": "031785d33d5cb304b2f78831263d6e5fe0a4d931bde093f305eb7205dc2cbac7", "expectedSha256": "031785d33d5cb304b2f78831263d6e5fe0a4d931bde093f305eb7205dc2cbac7", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 68, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "3822365c00e36f7d08067d958e98284b75118cc5961effa602417c0918a4759c", "expectedSha256": "3822365c00e36f7d08067d958e98284b75118cc5961effa602417c0918a4759c", "field": "c" }, { "bytes": 32, "computedSha256": "3b68890cc1a09ca214f81a18c82ebb840e95f33df2341b1f59e304df806ca8a3", "expectedSha256": "3b68890cc1a09ca214f81a18c82ebb840e95f33df2341b1f59e304df806ca8a3", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 69, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "f3855f56a65c898f2fb46496c74d9641a1699ed6bf459e7f7f7ccfce53f765bd", "expectedSha256": "f3855f56a65c898f2fb46496c74d9641a1699ed6bf459e7f7f7ccfce53f765bd", "field": "c" }, { "bytes": 32, "computedSha256": "61a6cb118e77ef1738eeeffea18e0bf60fe5cb0e84d04c2923dbf4a457c3856f", "expectedSha256": "61a6cb118e77ef1738eeeffea18e0bf60fe5cb0e84d04c2923dbf4a457c3856f", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 70, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "4fb945f74d4262ffb2518fc51d6b32710cf8046e84d291e1317e685397d82e60", "expectedSha256": "4fb945f74d4262ffb2518fc51d6b32710cf8046e84d291e1317e685397d82e60", "field": "c" }, { "bytes": 32, "computedSha256": "9f933286dbbad4f3d3c278175a517dd97025d61539801e56fcf76710d9363040", "expectedSha256": "9f933286dbbad4f3d3c278175a517dd97025d61539801e56fcf76710d9363040", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 71, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "b408302378e2551000c520cb061426606392cff110ba2e1e8595e793774e359f", "expectedSha256": "b408302378e2551000c520cb061426606392cff110ba2e1e8595e793774e359f", "field": "c" }, { "bytes": 32, "computedSha256": "3c221ff7873df2ff7581f9c960d62608ce0e42f0b1767c9ad5ceca9cea0d22e9", "expectedSha256": "3c221ff7873df2ff7581f9c960d62608ce0e42f0b1767c9ad5ceca9cea0d22e9", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 72, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "23ae2b724330d5787a626ca871e2f5e4db08e2ed083e0ef6c21c4971038e0506", "expectedSha256": "23ae2b724330d5787a626ca871e2f5e4db08e2ed083e0ef6c21c4971038e0506", "field": "c" }, { "bytes": 32, "computedSha256": "f9b858fe1f5c5d41c8b915f6b108062dd9e60775175190eb6ad19c6e14c39a1f", "expectedSha256": "f9b858fe1f5c5d41c8b915f6b108062dd9e60775175190eb6ad19c6e14c39a1f", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 73, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "7e1f1d21f3ef506e856dbf914a468daef092480f5c3fa44fe68f56749aeaa19d", "expectedSha256": "7e1f1d21f3ef506e856dbf914a468daef092480f5c3fa44fe68f56749aeaa19d", "field": "c" }, { "bytes": 32, "computedSha256": "43ae119d1b8c6e38d65c3032d5e8d1559a96b1f51e88063677e644ff6a81abe3", "expectedSha256": "43ae119d1b8c6e38d65c3032d5e8d1559a96b1f51e88063677e644ff6a81abe3", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 74, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "encapsulation", "group": "mlkem-encaps", "outputs": [ { "bytes": 1568, "computedSha256": "ba6d42399974abd430c918c2e2285ff4bda080678f4b258758d7c0acd667683c", "expectedSha256": "ba6d42399974abd430c918c2e2285ff4bda080678f4b258758d7c0acd667683c", "field": "c" }, { "bytes": 32, "computedSha256": "8b7ca4585f1a8d0ad97584e9164d5332ab4d2f1b7831677489c0a0bd20ab337d", "expectedSha256": "8b7ca4585f1a8d0ad97584e9164d5332ab4d2f1b7831677489c0a0bd20ab337d", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 75, "tgId": 3, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "13fafbf54eb4f33572d98dfdf363b1630a682c6ece795cfa8f08f5ad15282574", "expectedSha256": "13fafbf54eb4f33572d98dfdf363b1630a682c6ece795cfa8f08f5ad15282574", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 76, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "f6c51551bc3e1b3fb7363ff58bc1c1d0bc4792e7148c4c25f3728d925645589b", "expectedSha256": "f6c51551bc3e1b3fb7363ff58bc1c1d0bc4792e7148c4c25f3728d925645589b", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 77, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "28c11b8db5b6226ef2717dd2a2f5e791a085962349a98abe08f88069f5d2e25a", "expectedSha256": "28c11b8db5b6226ef2717dd2a2f5e791a085962349a98abe08f88069f5d2e25a", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 78, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "93b1d91b73aa8ad406ff6d890900a057438519015c120749b7cb160dfb145f07", "expectedSha256": "93b1d91b73aa8ad406ff6d890900a057438519015c120749b7cb160dfb145f07", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 79, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "ebaada4fb6ea168ef45716e590b465831aee1b0daa84d6a9f7a02b8f421056b1", "expectedSha256": "ebaada4fb6ea168ef45716e590b465831aee1b0daa84d6a9f7a02b8f421056b1", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 80, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "aef78b21ff32a2f48024674cf625f3ab1ef0ca00683cec095143cfa5c2a81ae6", "expectedSha256": "aef78b21ff32a2f48024674cf625f3ab1ef0ca00683cec095143cfa5c2a81ae6", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 81, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "672e97aef303034be4988d003e54834e9e1e94ea7db84fe7fa6ae44014fbc8dd", "expectedSha256": "672e97aef303034be4988d003e54834e9e1e94ea7db84fe7fa6ae44014fbc8dd", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 82, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "3f6e5b9dc3008a486fca19f23917e3464e344cfcc94c7ea86ad6573c7a52ceaa", "expectedSha256": "3f6e5b9dc3008a486fca19f23917e3464e344cfcc94c7ea86ad6573c7a52ceaa", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 83, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "f11f59a5987325e9c237b4f1cbe0cefcc6b306757a119c9ca641487e3bb1b088", "expectedSha256": "f11f59a5987325e9c237b4f1cbe0cefcc6b306757a119c9ca641487e3bb1b088", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 84, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "e8dd69ec69b0b52f77ee7b02e7790380bc652cf7d6b37a1bb683c494e7305077", "expectedSha256": "e8dd69ec69b0b52f77ee7b02e7790380bc652cf7d6b37a1bb683c494e7305077", "field": "k" } ], "parameterSet": "ML-KEM-512", "result": "PASS", "tcId": 85, "tgId": 4, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "ca4b36ac6565fbe8993b8cd84495a09f7104201008f529f3bc3f57a5c13727d2", "expectedSha256": "ca4b36ac6565fbe8993b8cd84495a09f7104201008f529f3bc3f57a5c13727d2", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 86, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "f2ac5304c91d840c1a9590bf17bd89208f437659fa176d1dc6b0561c54f4b62b", "expectedSha256": "f2ac5304c91d840c1a9590bf17bd89208f437659fa176d1dc6b0561c54f4b62b", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 87, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "5ba5e3046bbe63d222154345ad916290ee64993a3ff2b3f947b2ffb255c34be9", "expectedSha256": "5ba5e3046bbe63d222154345ad916290ee64993a3ff2b3f947b2ffb255c34be9", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 88, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "3ab1166f491622e453dd97ce0059e3bfc2661bd27aa418c13030f23aeaa34190", "expectedSha256": "3ab1166f491622e453dd97ce0059e3bfc2661bd27aa418c13030f23aeaa34190", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 89, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "9338d5f24df3168f2837678de70cb3a6ab5fab3a5b63d3b7c204d8da7dbd1a30", "expectedSha256": "9338d5f24df3168f2837678de70cb3a6ab5fab3a5b63d3b7c204d8da7dbd1a30", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 90, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "c6d0907b7d5d49d8765285629c6848e78509d5c7ae65579a2356021707a1202e", "expectedSha256": "c6d0907b7d5d49d8765285629c6848e78509d5c7ae65579a2356021707a1202e", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 91, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "3ff8f57de561484168252fd595ec417dc0fdf9a24ac4292f85e9473af2cde159", "expectedSha256": "3ff8f57de561484168252fd595ec417dc0fdf9a24ac4292f85e9473af2cde159", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 92, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "6f2b005f8560ba24e801c3bd7dceb603d335f1b23e18d4fafce2885679868fdf", "expectedSha256": "6f2b005f8560ba24e801c3bd7dceb603d335f1b23e18d4fafce2885679868fdf", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 93, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "2121ee6033df73ec0c5be35a71b08fd86cb9596c2e7d36131d717eb752236a7b", "expectedSha256": "2121ee6033df73ec0c5be35a71b08fd86cb9596c2e7d36131d717eb752236a7b", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 94, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "316d1a0ae40a4bb5b2f40c6b248fdfae48cadc7e5a8b4405c1ed17f18067db36", "expectedSha256": "316d1a0ae40a4bb5b2f40c6b248fdfae48cadc7e5a8b4405c1ed17f18067db36", "field": "k" } ], "parameterSet": "ML-KEM-768", "result": "PASS", "tcId": 95, "tgId": 5, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "27a776157ec07849b87b5166cce0356d2659f9b4e03e2c33280cab75a0a05bab", "expectedSha256": "27a776157ec07849b87b5166cce0356d2659f9b4e03e2c33280cab75a0a05bab", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 96, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "7f4991837e42d7955956f65e24f5c1725d2bce4accc92558cc9bc66f381048f9", "expectedSha256": "7f4991837e42d7955956f65e24f5c1725d2bce4accc92558cc9bc66f381048f9", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 97, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "6104107d18a9073c8179f3b08703f71274e339c96f0923f77a5918380188a829", "expectedSha256": "6104107d18a9073c8179f3b08703f71274e339c96f0923f77a5918380188a829", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 98, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "95e5570ceb327d92c3997a93a627257d81ff9d8655d0012a54e8576c8678a31d", "expectedSha256": "95e5570ceb327d92c3997a93a627257d81ff9d8655d0012a54e8576c8678a31d", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 99, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "c66b6b8fd16bafdea42d8d5a67b4bbdc473d14214d6812a436e6e4294f37bdd6", "expectedSha256": "c66b6b8fd16bafdea42d8d5a67b4bbdc473d14214d6812a436e6e4294f37bdd6", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 100, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "9ca30e07c2b03da9a76b1e19e40a48eff5e4d1d11849ac70fa30bdf98a4ec097", "expectedSha256": "9ca30e07c2b03da9a76b1e19e40a48eff5e4d1d11849ac70fa30bdf98a4ec097", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 101, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "8c4d274b6d0fd19423c0df281af60fdfecf73587cf6f252dd6e1b64918b16130", "expectedSha256": "8c4d274b6d0fd19423c0df281af60fdfecf73587cf6f252dd6e1b64918b16130", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 102, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "89b7ea6aad33f80d113a9689bc4877f8a21d115c00944e2bf7aad77d71780313", "expectedSha256": "89b7ea6aad33f80d113a9689bc4877f8a21d115c00944e2bf7aad77d71780313", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 103, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "dd23312bb1134a4649cd17f90c15f7d3240eb19bf114fcc8ffd9e96427884c8f", "expectedSha256": "dd23312bb1134a4649cd17f90c15f7d3240eb19bf114fcc8ffd9e96427884c8f", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 104, "tgId": 6, "suite": "pqc" }, { "actual": "MATCH", "expected": "MATCH", "function": "decapsulation", "group": "mlkem-decaps", "outputs": [ { "bytes": 32, "computedSha256": "e61682f06394688206ec1ba1078b89459fbeaa7f4fb594435d39143c3851f608", "expectedSha256": "e61682f06394688206ec1ba1078b89459fbeaa7f4fb594435d39143c3851f608", "field": "k" } ], "parameterSet": "ML-KEM-1024", "result": "PASS", "tcId": 105, "tgId": 6, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified message", "result": "PASS", "tcId": 1, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - commitment", "result": "PASS", "tcId": 2, "tgId": 1, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 3, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - commitment", "result": "PASS", "tcId": 4, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - z", "result": "PASS", "tcId": 5, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - z", "result": "PASS", "tcId": 6, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - hint", "result": "PASS", "tcId": 7, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - commitment", "result": "PASS", "tcId": 8, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - hint", "result": "PASS", "tcId": 9, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified message", "result": "PASS", "tcId": 10, "tgId": 1, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 11, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - z", "result": "PASS", "tcId": 12, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified signature - hint", "result": "PASS", "tcId": 13, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "modified message", "result": "PASS", "tcId": 14, "tgId": 1, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-44", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 15, "tgId": 1, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - z", "result": "PASS", "tcId": 31, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - hint", "result": "PASS", "tcId": 32, "tgId": 3, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 33, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - commitment", "result": "PASS", "tcId": 34, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified message", "result": "PASS", "tcId": 35, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - z", "result": "PASS", "tcId": 36, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - commitment", "result": "PASS", "tcId": 37, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - hint", "result": "PASS", "tcId": 38, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified message", "result": "PASS", "tcId": 39, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - z", "result": "PASS", "tcId": 40, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - hint", "result": "PASS", "tcId": 41, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified signature - commitment", "result": "PASS", "tcId": 42, "tgId": 3, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 43, "tgId": 3, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 44, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-65", "reason": "modified message", "result": "PASS", "tcId": 45, "tgId": 3, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified message", "result": "PASS", "tcId": 61, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified message", "result": "PASS", "tcId": 62, "tgId": 5, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 63, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - commitment", "result": "PASS", "tcId": 64, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - hint", "result": "PASS", "tcId": 65, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified message", "result": "PASS", "tcId": 66, "tgId": 5, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 67, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - commitment", "result": "PASS", "tcId": 68, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - hint", "result": "PASS", "tcId": 69, "tgId": 5, "suite": "pqc" }, { "actual": "ACCEPT", "expected": "ACCEPT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "valid signature and message - signature should verify successfully", "result": "PASS", "tcId": 70, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - commitment", "result": "PASS", "tcId": 71, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - z", "result": "PASS", "tcId": 72, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - z", "result": "PASS", "tcId": 73, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - hint", "result": "PASS", "tcId": 74, "tgId": 5, "suite": "pqc" }, { "actual": "REJECT", "expected": "REJECT", "function": "sigVer", "group": "mldsa-sigver", "parameterSet": "ML-DSA-87", "reason": "modified signature - z", "result": "PASS", "tcId": 75, "tgId": 5, "suite": "pqc" } ], "exclusions": [ { "standard": "FIPS 203", "group": "ML-KEM encapsulationKeyCheck / decapsulationKeyCheck", "vectors": 60, "disposition": "not reachable", "why": "These assert that a malformed encapsulation or decapsulation key is rejected. liboqs exposes no public key-validity entry point -- validity is checked internally, with no API to invoke it standalone." }, { "standard": "FIPS 204", "group": "ML-DSA sigVer, preHash (HashML-DSA)", "vectors": 45, "disposition": "not reachable", "why": "Pre-hashed message with an embedded hash OID. liboqs exposes no pre-hash entry point." }, { "standard": "FIPS 204", "group": "ML-DSA sigVer, internal interface", "vectors": 90, "disposition": "not reachable", "why": "The internal interface bypasses the domain separator and context encoding. liboqs exposes only the external interface." }, { "standard": "FIPS 204", "group": "ML-DSA keyGen and sigGen", "vectors": null, "disposition": "not vendored", "why": "keyGen needs the seed xi and sigGen needs the per-signature value rnd; the liboqs public API accepts neither. A sign-then-verify round trip is deliberately NOT substituted -- it proves the pair agrees with itself, which is exactly what a conformance vector exists to rule out. Round-trip coverage lives in tests/unit/test_PqcHybrid.cpp and tests/integration/test_SignPqc.cpp, which is the correct place for it." }, { "standard": "FIPS 205", "group": "SLH-DSA", "vectors": null, "disposition": "not implemented", "why": "No request enum and no wired PKCS#11 mechanism in A3E9. No vectors vendored and no claim made, even though sig_slh_dsa.h is present in the installed liboqs." } ], "uncovered": [ { "bomRef": "alg-3des-dukpt", "primitive": "2-key Triple DES (TDEA, EDE mode)", "usedFor": "DUKPT key derivation and PIN block encryption/translation (src/DUKPT.cpp, ANSI X9.24-1:2009) for payment-terminal PIN handling (Module 9B). LEGACY ALGORITHM: NIST SP 800-131A deprecated 3DES for new use after 2023; retained here only for interoperability with the existing installed base of retail payment terminals (VX-series, most ATMs globally) that only speak classic 3DES DUKPT. AES-DUKPT (ANSI X9.24-3:2017) is documented as the modern successor in src/DUKPT.h but is not implemented in this codebase.", "vectorsExist": "NIST TDES (withdrawn 2024)", "status": "not wired" }, { "bomRef": "alg-aes-cbc-ecb", "primitive": "AES-CBC / AES-ECB (unauthenticated modes)", "usedFor": "Raw AES block modes exposed through the Encrypt/Decrypt RPCs for interoperability with counterparty systems that mandate them (src/SigningServer.cpp). Neither mode provides integrity -- AES-256-GCM (alg-aes256-gcm) is the mode A3E9 uses for its own envelopes, and these are listed here so the inventory is complete rather than because they are recommended.", "vectorsExist": "NIST CAVP / ACVP AES", "status": "not wired" }, { "bomRef": "alg-aes-cmac", "primitive": "AES-CMAC", "usedFor": "HSM-backed payment message authentication code (src/CryptoOps.cpp computeMAC()/verifyMAC(), CKM_AES_CMAC, ISO 16609) -- the modern replacement for legacy retail-MAC schemes in the payment-MAC module (Module 9A).", "vectorsExist": "NIST CAVP / ACVP CMAC", "status": "not wired" }, { "bomRef": "alg-aes-keywrap", "primitive": "AES Key Wrap (RFC 3394 / RFC 5649)", "usedFor": "Key transport for the DORA cross-vendor KeySyncEngine wrap/unwrap path (src/dora/KeySyncEngine.cpp) and the WrapKey/UnwrapKey RPCs. CKM_AES_KEY_WRAP / CKM_AES_KEY_WRAP_PAD, with the per-vendor variant selected from VendorProfile (AWS CloudHSM uses CKM_CLOUDHSM_AES_KEY_WRAP_PKCS5_PAD). IMPORTANT SCOPE NOTE: this path can never move a real signing key -- every signing key A3E9 generates is CKA_EXTRACTABLE=CK_FALSE (FIPS 140-2 Level 3) and wrapping requires CKA_EXTRACTABLE=CK_TRUE. It applies only to transportable material (KEKs, and key shares under the MPC vendor-binding model).", "vectorsExist": "NIST CAVP / ACVP KW / KWP", "status": "not wired" }, { "bomRef": "alg-aes256-gcm", "primitive": "AES-256-GCM", "usedFor": "HSM-backed authenticated symmetric encryption (src/CryptoOps.cpp encrypt()/decrypt(), CKM_AES_GCM, 12-byte IV, 128-bit tag). CloudHSM shim enforces a 16 KB plaintext ceiling per operation; the plaintext is buffered and chunked above that limit (see src/shims/CloudHsmShim.h normalization 3.13).", "vectorsExist": "NIST CAVP / ACVP AES-GCM", "status": "not wired" }, { "bomRef": "alg-drbg", "primitive": "OpenSSL default DRBG (RAND_bytes)", "usedFor": "Random salt generation for the Privacy-Preserving Hardware Binding protocol (tools/hsm_bind_token.cpp, 16-byte salt), Craton PIN salts, and other software-path randomness needs outside the HSM boundary. Implementation is whatever OpenSSL 3.0's default RAND provider supplies (CTR-DRBG per NIST SP 800-90A on a standard OpenSSL 3.0 build); not independently verified as FIPS-validated in this deployment.", "vectorsExist": "NIST SP 800-90A ACVP DRBG", "status": "not wired", "note": "RAND_bytes() runs in software for Shamir coefficients, BIP32 chain codes, PIN salts and MPC session ids. Which DRBG and how it is seeded needs an answer even though full SP 800-90A validation belongs to the provider." }, { "bomRef": "alg-ecdsa-p256", "primitive": "ECDSA (NIST P-256)", "usedFor": "General-purpose HSM-backed signing for client keys on the P-256 curve (src/CryptoOps.cpp sign()/verify()). Caller pre-hashes with SHA-256 in software before CKM_ECDSA (SoftHSM2/most vendors); hardware HSMs supporting CKM_ECDSA_SHA256 hash internally.", "vectorsExist": "NIST CAVP / ACVP ECDSA", "status": "not wired" }, { "bomRef": "alg-ecdsa-secp256k1", "primitive": "ECDSA (secp256k1)", "usedFor": "HSM-backed signing for Ethereum/EVM (Keccak-256 pre-hash, src/CryptoOps.cpp signEVM/verifyEVM) and Bitcoin (SHA-256d pre-hash, signBitcoin) client keys. Not a NIST-recommended curve; standard choice for these blockchain ecosystems specifically.", "vectorsExist": "no NIST vectors -- non-NIST curve", "status": "not wired" }, { "bomRef": "alg-hmac-sha256", "primitive": "HMAC-SHA256", "usedFor": "Tamper-evident HMAC chain over the audit log (vendor/a3e9-audit AuditLogger::buildJson()) -- each entry's hmac field covers the previous entry's hmac (prev_hmac), so deleting or editing any entry breaks the chain. Key supplied via HSM_AUDIT_HMAC_KEY (CI/CD-injected secret, never stored in a config file). Uses OpenSSL's one-shot HMAC() convenience function -- no manually-managed HMAC_CTX in this codebase.", "vectorsExist": "RFC 4231", "status": "not wired" }, { "bomRef": "alg-keccak256", "primitive": "Keccak-256", "usedFor": "Ethereum address derivation and EVM transaction/message pre-hash (src/Keccak256.cpp). Note: this is the original Keccak padding as used by Ethereum, NOT the standardized FIPS 202 SHA3-256 (different padding byte) -- the two produce different digests for the same input and must not be confused.", "vectorsExist": "published Keccak team vectors (not SHA-3/FIPS 202)", "status": "not wired" }, { "bomRef": "alg-pbkdf2", "primitive": "PBKDF2-HMAC-SHA256", "usedFor": "Password-based key derivation for Craton SO/user PIN storage (src/craton_hsm/CratonSlotTable.cpp): 16-byte RAND_bytes salt, 100,000 iterations, 32-byte derived key, persisted as '::' and verified with a constant-time CRYPTO_memcmp. Meets NIST SP 800-132 (random salt, key stretching). This replaced the bare unsalted SHA-256(pin) that earlier revisions of this CBOM described as an open hardening gap -- the gap is closed.", "vectorsExist": "RFC 6070", "status": "not wired" }, { "bomRef": "alg-rsa-pkcs1", "primitive": "RSA PKCS#1 v1.5 / OAEP (key transport)", "usedFor": "RSA encryption/key-transport mechanisms surfaced through the vendor adapter and attribute-template layers (CKM_RSA_PKCS, CKM_RSA_PKCS_OAEP). PKCS#1 v1.5 encryption is retained only for vendor interoperability -- OAEP is the padding A3E9 selects where the vendor supports it. Distinct from alg-rsa-pss, which covers the signing path.", "vectorsExist": "NIST CAVP / ACVP RSA", "status": "not wired" }, { "bomRef": "alg-rsa-pss", "primitive": "RSA (2048/4096) with PSS-SHA256", "usedFor": "HSM-backed signing for client RSA keys (src/CryptoOps.cpp signRSA/verifyRSA), CKM_RSA_PKCS_PSS, MGF1-SHA256, salt length 32 bytes. Caller pre-hashes with SHA-256 in software before calling C_Sign. Padding scheme is PSS, which has no dedicated enum value in the CycloneDX padding vocabulary as of the 1.6 schema (pkcs5/pkcs7/pkcs1v15/oaep/raw/other/unknown) -- recorded as 'other'.", "vectorsExist": "NIST CAVP / ACVP RSA", "status": "not wired" }, { "bomRef": "alg-sha256", "primitive": "SHA-256", "usedFor": "Three distinct uses: (1) LicenseFile::computeBindingHash() -- SHA-256(salt || tenant_id || token_serial) for Privacy-Preserving Hardware Binding (Part 1 licensing); (2) pre-hash for ECDSA P-256 signing and SHA-256d for Bitcoin; (3) the underlying PRF for PBKDF2 PIN derivation and the audit-log HMAC chain (see alg-pbkdf2 and alg-hmac-sha256).", "vectorsExist": "NIST CAVP / ACVP SHA-2", "status": "not wired" } ], "limits": [ "Passing known-answer vectors is not a FIPS 140 certificate. CAVP algorithm validation precedes CMVP module validation, and both are performed by an accredited Cryptographic and Security Testing laboratory -- not by us.", "liboqs is not a FIPS-certified module.", "195 of the 420 published ML-KEM/ML-DSA vectors are unreachable through the liboqs public API and are excluded with a stated reason, not silently skipped.", "Part of A3E9's own software cryptography has no published-vector coverage yet -- see `uncovered`. It is declared rather than omitted.", "Only SoftHSM2 and Craton have been exercised against real PKCS#11 modules. Thales, AWS CloudHSM and Utimaco are written but unvalidated on hardware.", "The A3E9 source repository is private, so these results cannot be independently re-run. The vectors, the expected answers and every exclusion reason ARE independently checkable -- see `verification`." ], "verification": [ { "claim": "The vectors are NIST's own published bytes", "how": "usnistgov/ACVP-Server is public. Clone it, check out the commit recorded in vectorSources[], apply the trim documented in tests/vectors/acvp/README.md, and compare against the SHA-256 digests in this report." }, { "claim": "The expected answers were not softened", "how": "Every expectedSha256 in cases[] is recomputable from those public upstream files." }, { "claim": "The exclusions are honest", "how": "liboqs is public. Confirm there is no public key-validity entry point, no pre-hash entry point, only the external signature interface, and no seed or per-signature randomness injection on keypair/sign. Every exclusion reason resolves against that codebase." }, { "claim": "The arithmetic holds", "how": "Group counts sum to totals.executed; 420 minus the executed PQC vectors equals the excluded count; accept plus reject equals the total." }, { "claim": "NOT verifiable without access: that the computed column came from a real run", "how": "computedSha256 == expectedSha256 is by definition what a pass looks like, so a fabricated report is indistinguishable from a real one to an outside reader. These results are self-reported, and nothing published alongside this file corroborates them today. A detached signature over this record, and build provenance tying it to a specific CI run, would each narrow that gap; neither is published yet. Until one is, this row is the honest limit of what the report can offer, and no other row should be read as covering it." } ], "automation_limits": [ "uncovered[] is derived as (CBOM algorithm assets - assets with a KAT group), so wiring a known-answer test removes a primitive from it with no manual edit.", "The CBOM's under-claim gate keys on CKM_* tokens, so a primitive added purely in software through OpenSSL EVP would not trip it. Coverage of PKCS#11 mechanisms is enforced; software additions depend on the CBOM being updated.", "vendor/a3e9-attestation is outside the CBOM scan roots (private submodule, absent from a plain clone), so a novel primitive added inside it would not appear here." ] }