On 3/23/2021 4:15 PM, Greg Rubin wrote:
177: System.out.println("Testing " + ALGO);
178: c = Cipher.getInstance(ALGO, "SunJCE");
179: for (int i = 0; i < MAX_KWP_PAD_LEN; i++) {
I see that here (and earlier) we do test all padding lengths. I'd still like
some KATs generated by a known good implementation to ensure that we are not
just compatible with ourselves.
http://csrc.nist.gov/groups/STM/cavp/documents/mac/kwtestvectors.zip has
the NIST test vectors. See
https://csrc.nist.gov/CSRC/media/Projects/Cryptographic-Algorithm-Validation-Program/documents/mac/KWVS.pdf
for details.
Mike