// Copyright (c) Facebook, Inc. and its affiliates. // // This source code is licensed under both the MIT license found in the // LICENSE-MIT file in the root directory of this source tree and the Apache // License, Version 2.0 found in the LICENSE-APACHE file in the root directory // of this source tree. //! The VOPRF test vectors taken from: //! https://github.com/cfrg/draft-irtf-cfrg-voprf/blob/master/draft-irtf-cfrg-voprf.md pub(crate) const VECTORS: &str = r#" ## OPRF(ristretto255, SHA-512) ### OPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = e617ae6f2d10de61e16cab73023c5a2df74335d13f89470957214664468d2 e0b ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706 BlindedElement = c83d0d8a3e80be2ced8bf35c5f3e24d42260ca8fa9a0403ca83 033588c26614d EvaluationElement = b29ca44d6dfafc77a50b72abc53cfb7abcbe9cf6714afc76 893ee8dcaf053b59 Output = 8a19c9b8f4459d541ebbfff4e29f36620e44e825a27b0f2e3a3c0d8e963 588ee04348312dc8b43a48c41d4e7d904f95c91813a6b4f624392433f0568409da62 8 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706 BlindedElement = 8673ffd2f26b2579922fc485c77e106def00982e0abb233b4c6 e54841d43ba29 EvaluationElement = 68ed7037846f48a1b4073a0d110f6e4de8f53ab845365c0f 3d7f1b67caa39126 Output = bcdbd421c0863495d63d81a868858f34f5215437c5777072a92703f36b3 6c4a2d3e7e54a5762e70b06223527c211e2d4364481270f72971a2db8b7ab8fad84e e ~~~ ### VOPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = a3b8dea4a99be2469da7f7d2d93fe5f2867317d6705350475d47739c7214d a07 pkSm = c00fbee6832a8e5d6cc1d1a23315daf6a6018f19e29ba37b05499259da854 b48 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706 BlindedElement = 6cce2c7913f4c8c0ac44ec149a1544b0e711e1630753d4efc7c 5fe36a4d50638 EvaluationElement = 826f2f3e553a039bcd69c9df6cb166e7943fd207089ae704 1f6041322ce7033a Proof = 2e541a6962e783d2f42d5f4fb1364e51c368e95e83a962614714e9dfe21a 720cd8c8eb8106131b4a758b5a0987d3870adb348f5eae7b4a2bc26735928cc4b90c ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98 81aa6f61d645fc0e Output = 4d5dd83db5bfd850e3e0c17519f1013aab904e7b131dc1ded31f7a76aac f040f6b344b0e635cf6df30771a35157e0e3d9539f7a891b48cd8521692b15c51538 d ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706 BlindedElement = 6a4e632b76a2cfcb0295ee74098a15a3e858f6006fd9fa8576a 5813e051ac134 EvaluationElement = 2cb879d933a1af46c77e89f3f39a38f80347bf4716da3dc3 07c8aa1282179823 Proof = eabae3489c46b9e9a8da0cc921d2bc2960ef5fb0b38c8f067cc5c21f62f4 eb0ff5472009aec126f543b6051b5d62ccbf2625aab6684076c26cfdf0904257090c ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98 81aa6f61d645fc0e Output = 5c3fe06ef39905710a124df0727c6c938f48234b35ccc4548c0736d7f6f 36e6b7333a9aefc93d6b1ee20151a40bce453866b62cf5d41799982fee6100680915 9 ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706,222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d9881aa6f61d645fc0 e BlindedElement = 6cce2c7913f4c8c0ac44ec149a1544b0e711e1630753d4efc7c 5fe36a4d50638,aa9908e4c40b7fe5f091cf0f7fb8ec75ffdaaf2d19512b7b9939f0 ffaaa0654f EvaluationElement = 826f2f3e553a039bcd69c9df6cb166e7943fd207089ae704 1f6041322ce7033a,902ef95488cc3c47fe569bc96c922a4ae3f9ebd8ccbc71bfefa 5f1e7da9ab953 Proof = d9bfee92cd7496cdf469947b534549ceb79ebd7b5695d20437b3e14758cf de0998eaa13a480cc35b562cbfb1412b1677650cd901b5fb4d6805581a95b440320f ProofRandomScalar = 419c4f4f5052c53c45f3da494d2b67b220d02118e0857cdb cf037f9ea84bbe0c Output = 4d5dd83db5bfd850e3e0c17519f1013aab904e7b131dc1ded31f7a76aac f040f6b344b0e635cf6df30771a35157e0e3d9539f7a891b48cd8521692b15c51538 d,5c3fe06ef39905710a124df0727c6c938f48234b35ccc4548c0736d7f6f36e6b73 33a9aefc93d6b1ee20151a40bce453866b62cf5d41799982fee61006809159 ~~~ ### POPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = 024eaeb72e5b3729d7f19d90aa44e3d2f4c445fb29011ffd755655636f2b1 00a pkSm = e001954ccd18ec5aa89bcbf26c03d84dc4d9c9b973d9f06b1e0ceb7b79f41 d65 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Info = 7465737420696e666f Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706 BlindedElement = 009ffa1ffc529e4f1d3d8de1c06d22fbb15e39920a72ad4efed 6c39af9438a2d EvaluationElement = aa9af25bf4edead5e2e0a4b8f93db9b497017f93cf68c750 45f02172bfc5d304 Proof = bb893ccce54685a871185bb056cb5e0594d09d3b53f2f879de06a650b8ae ff08371f2ff9f3d5cac7f393cc37b2c71c2a6fbb80f35fe36b8e5cbddf11469c8e03 ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98 81aa6f61d645fc0e Output = e7ed59e3f808c369598961ebfd9af74272894e0904d1c11653a21b08204 dba1a5fb5c3dd6be6c419190a84b576d91eb3d8d920d450fee0427fd24524950d72d 6 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706 BlindedElement = 5e009e08e228f95ee3703cff60a1d54225bb282bdb6d7dc9a78 e287f8418315a EvaluationElement = 2e528236481eb6d87b07ef5f8c17910323d04b3bf0cb2f2d 23d5a7ad9f069b22 Proof = 3796381ab287189839288bbaffc971eb87c3a28226fa99dc83b363adb2f4 b20e4ae81fb675ebcd43d13918f71846cb488d0ce7d473bfca68450a5a5472564500 ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98 81aa6f61d645fc0e Output = 9a0d8c55e2fef4bada9fb5877a0e739496e539a0d835722911dab9ec112 397e763a605acbc072619e8b8acefb8ee704a357556edc802648089d684baa763ce1 4 ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f 6706,222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d9881aa6f61d645fc0 e BlindedElement = 009ffa1ffc529e4f1d3d8de1c06d22fbb15e39920a72ad4efed 6c39af9438a2d,1ee64b9e5148987ca6647ccddc11ef506231e986d5ce08ef9b8230 871f840b3a EvaluationElement = aa9af25bf4edead5e2e0a4b8f93db9b497017f93cf68c750 45f02172bfc5d304,3073794fd68f64432b4d1f24752c4398f0e81e00b5b5842e463 5dd381331091b Proof = 7d59db67715a9030d46ab50a614fb55927961c8d9322cb6973ef36775309 810b9f4a670ba4b9321f5cf753be2a58dee0730cfabd12b8f25a8a342e158ae2b608 ProofRandomScalar = 419c4f4f5052c53c45f3da494d2b67b220d02118e0857cdb cf037f9ea84bbe0c Output = e7ed59e3f808c369598961ebfd9af74272894e0904d1c11653a21b08204 dba1a5fb5c3dd6be6c419190a84b576d91eb3d8d920d450fee0427fd24524950d72d 6,9a0d8c55e2fef4bada9fb5877a0e739496e539a0d835722911dab9ec112397e763 a605acbc072619e8b8acefb8ee704a357556edc802648089d684baa763ce14 ~~~ ## OPRF(decaf448, SHAKE-256) ### OPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3 KeyInfo = 74657374206b6579 skSm = 30f71e5b5be9c91dd54c5a48e82be8d47eeb2cb2c45d7874a45dddc85af8d 3f95b1ce73a99c47edc26ac9ddd936bd9b6b73728995bf1d213 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112 BlindedElement = a4205d2af0410dccbd4464629ba1b835456d04d994cf93988cf 2c3b9d45d3c4671c7625f52c66c760a069e2c3c367826debb13da089d735c EvaluationElement = e8d78cf5212fddf940f9f6fe02250ed83cc0595e3f0e7481 1cdb9f62c0fa7fea94c45795637dc5c3ac31ee1cff18d0d675396ae09b302f76 Output = 1c1a9df7d0616e0f5fdfb6479acec73a4f5562da8f9488f3b6112ef11c6 7c5900e0abc3a169486ac7230a306c8796562a045c66305ed7cb2a3fae658e45eae4 c ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112 BlindedElement = ec5b609e5d3c0bb024c35256194694ea6e42aa24d13cf6b0597 49cb36911ccba0923cb73136acdf4bcecf23b6025f7b9b93d2eb0c09d964d EvaluationElement = 524c3a644e381b4ae416724247f94b996f655167e0d4e1ba d93cbc731c3beb36e3822e9dcbdc3600966226387a2306ba70eb68db5a64f92f Output = 95f519e8ff2b54d8d596da2c54829ae3dd900f5c18eef48efa03ef6694c 505bea17b7982246c862d081b9fdcf295debc60abec8b0ddbfdf48bd302a3fe61b21 e ~~~ ### VOPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3 KeyInfo = 74657374206b6579 skSm = 44c46e78aa6386cee57a46c75d124b13ced3e5f055caa3baaad61501330a4 24463400453c97245a8f7b4c65f2c4c3dabd09a049c034f9e20 pkSm = 78f4233110896fd41531fce182094c3bc4cf65f97b23078476b3b68118736 617172d3735c5832081864e7c75cd3ddb449e93068b34ba863e ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112 BlindedElement = 38b758b69dfaaff8576eaaabfe70801813d95eb098f85516bcd 46a0f68d1ea8cc1dea3bc7c8d340ee77c5bbca6e7d723e51d77e0807acd0d EvaluationElement = 7a8374bbae55dfc91e10a9d8042015419c505a6a8ac54e5b 93867747eb04252aba316d9f750fa0c54458aa8c90e963a60af5ae6f141af8d2 Proof = 2fd38cf9829c5f3fd294a5eb114356cd67cc5839cf797dc060273e07cf57 0dbabea029f0bf4675d84866865d1d146bfa38eff8195b59cf3c180bab30509061b9 d02e70f709f085dc8c98c0924259c9a3463ef5ceb97105989941155b98bd7b03b1e1 e538850139dc1a56beff1bb9401f ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0 627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b Output = 3db64b6f803391e7c9803135457da250eb29778480c30f29d53e9ff46c3 ce5ba9555418fc28af347c18b77a990eb904d0043a3411837b6d316f749428a9a370 4 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112 BlindedElement = ea9b2d51579f5c07c5c511cf3bba888f5fc76d6ce29075a0b02 5adb3daf4b568045c28e6bd00442251597ba6264e59beaf46220d8405fff6 EvaluationElement = f6d23094a82e33e231003a1ecdd4659029d613932b767451 c607ec428315283fe0b121bf09d7c88cf2ed50910463e38383fb52e5562a87f0 Proof = 104e45c171bd7ca9119af1091e3175c8af4e9efdbd4704b3d5a8dfc99465 9842ea021da27a9c1e0fbac369627eb5e9cf9e82964b7412081f15f6bfc5c68425f6 4f1a4dae420a03d582a6cfffc0fc4da71a145bb5305ae28985e15e067d28523578ea 696205cea28cf5831abed3e40f37 ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0 627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b Output = 4dc9ec52b6aa7f1f38a320d10cb58e0d86b040f6376d2f178f42c99986f e932aca7162cb72dd94056724617979c0f7ea652b1492bbad1d82748a38ff4daf129 8 ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112,b1b748135d405ce 48c6973401d9455bb8ccd18b01d0295c0627f67661200dbf9569f73fbb3925daa043 a070e5f953d80bb464ea369e5522b BlindedElement = 38b758b69dfaaff8576eaaabfe70801813d95eb098f85516bcd 46a0f68d1ea8cc1dea3bc7c8d340ee77c5bbca6e7d723e51d77e0807acd0d,5a788e f7949021b22da4a4e89b2443458c96fcbec8b66b08df885eec8fb4070fefe8b50e08 5e043c368cc05a9339b5ae31eb6482efc0d933 EvaluationElement = 7a8374bbae55dfc91e10a9d8042015419c505a6a8ac54e5b 93867747eb04252aba316d9f750fa0c54458aa8c90e963a60af5ae6f141af8d2,0ac 81e0e5b9fa6d90be58a6fc3fb4fde57e0efacbe210cebc2c85a6e934114b5e0e5ba4 cc202bde7cd7708415cdcc2312a51fca6ad6f06bf Proof = a221b134d99ba97cad98bf45341eeacd8a402a6e4c5ea5f93cee54ad0f2b ee544f67d2859a5253cb9def403bfee9420a5224fad35e3f9a3fbb5f28f6b8abcb34 130beaa158a41d1497aacc2f073b2da5471067bb832ec8044f417f528e2e6ccb897f 992424220d608b5e7bbfd4257e1f ProofRandomScalar = 63798726803c9451ba405f00ef3acb633ddf0c420574a2ec 6cbf28f840800e355c9fbaac10699686de2724ed22e797a00f3bd93d105a7f23 Output = 3db64b6f803391e7c9803135457da250eb29778480c30f29d53e9ff46c3 ce5ba9555418fc28af347c18b77a990eb904d0043a3411837b6d316f749428a9a370 4,4dc9ec52b6aa7f1f38a320d10cb58e0d86b040f6376d2f178f42c99986fe932aca 7162cb72dd94056724617979c0f7ea652b1492bbad1d82748a38ff4daf1298 ~~~ ### POPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3 KeyInfo = 74657374206b6579 skSm = fdd59cb218c7fbdcd48b18ef21ab647a6c210110c765bc3da6c11e563671a 48402c23129ce2ffd021d99da5a2d04158883c65d7f74a4901b pkSm = 1223e0aec4ee5bc19181078be380cc745d1896e1369aed3cc8a45b40ba3f9 aa1f79e23d542d6529e17465d1954d75e336910c6417de99200 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Info = 7465737420696e666f Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112 BlindedElement = f86104fcefec6bdca7767bc3e6a2ac9de2b00546579fd50ff66 687df531f7a2dfa8689a6cfdf91efc32d6fff490e722990752b7bc4bda28f EvaluationElement = 76f27e6fa79cd38638e35f5caa5d641e41526fbfd9272c19 be22dfc8cdd962e6d5d4e0c605c9bd6588eb9698a2bbf792a0827bb1116c8812 Proof = 3a1b3400ad16e1562e731c64520fa5a3664c1487ffe6537e85029842904d 3e01f9e7435b881ab9346847cc3470a2b37e6a10a4ef7bd36b2d06c602086a33252f 39c562aab5820a66c3bdf9d72583587e93ea893725be535cdeca1094d5b4dae119b4 9456162f60034a904f521f7cd818 ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0 627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b Output = 2a08f81bf204eb43a57dbc011946861ed715a2fd3d39a3b35e43c74d07d 4734149ba163389a02f6cd33fbb5b84e167d35dca7a7dc00b89418398c255c8293ac 6 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112 BlindedElement = e6f508abea28cbb0242f0dae1c0a92e017127edb7c8d8e0ec98 a5ea25c6bc9bb86bfc0bf9b8a086302e29a2a4b0a1d9d80f2d439cfba3ec1 EvaluationElement = 1ea637b039e0ab12c6959c74e275471e33655007a7fa23af 97ec578bcfc8c3381d4929ebf51433b76460d583f16b7cf1e75b9708f5d9d2f7 Proof = d53a1bfeafc5b47fc86406fba080e57434a7004a0739399ccb356f790b13 585da9d69a25c526e039fa06ad6a5781283ea7997eced063fd32e58bc95d57fd771c ad4a7e23633ae2049eec5ad86ade6a5e98d44f78fd86b5f55ab3c7a03025d6aec1f4 f50a2bd7b9b554841f6b4cd23d14 ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0 627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b Output = 80ac73a09fbf8cbd329ff1b7f42d8d14e46ae5b732f776f3203f0680daf 265254360da0afcd9dc1d0cd3858ab21ce8e7a19f0426d7e701cfda34fb8238c9e43 4 ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa 3833a26e9388336361686ff1f83df55046504dfecad8549ba112,b1b748135d405ce 48c6973401d9455bb8ccd18b01d0295c0627f67661200dbf9569f73fbb3925daa043 a070e5f953d80bb464ea369e5522b BlindedElement = f86104fcefec6bdca7767bc3e6a2ac9de2b00546579fd50ff66 687df531f7a2dfa8689a6cfdf91efc32d6fff490e722990752b7bc4bda28f,50c684 9c8f6355687bbc9d4675bcea953cb913c5447c9c8400062ae37f808ce8a75d592c56 f3393d4ea12ec72f9f84402002eb497201089a EvaluationElement = 76f27e6fa79cd38638e35f5caa5d641e41526fbfd9272c19 be22dfc8cdd962e6d5d4e0c605c9bd6588eb9698a2bbf792a0827bb1116c8812,7ca a4dd83ecae98fc3e282a0e7df1887393a3fc1e17935dfe355da394756fbfcad65386 eeedf1ba8498411645448c7027753cd9090198c02 Proof = b4f869bf5ec65e0152af5bd29f9fa32c3dfc00355e4e019feda07a281547 fb2f0c559c600bf6cb52a92753264d1c1367e0134b132880732ec70a8c741d60370e 5c22c4aca0e4564732b0157858f3c968bda06aab34c71386ec88afe76ec2c14bf56f 0adf7b05bab826e4aa034cc78837 ProofRandomScalar = 63798726803c9451ba405f00ef3acb633ddf0c420574a2ec 6cbf28f840800e355c9fbaac10699686de2724ed22e797a00f3bd93d105a7f23 Output = 2a08f81bf204eb43a57dbc011946861ed715a2fd3d39a3b35e43c74d07d 4734149ba163389a02f6cd33fbb5b84e167d35dca7a7dc00b89418398c255c8293ac 6,80ac73a09fbf8cbd329ff1b7f42d8d14e46ae5b732f776f3203f0680daf2652543 60da0afcd9dc1d0cd3858ab21ce8e7a19f0426d7e701cfda34fb8238c9e434 ~~~ ## OPRF(P-256, SHA-256) ### OPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = 274d7747cf2e26352ecea6bd768c426087da3dfcd466b6841b441ada8412f b33 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 02ff9dc7d4350ab6fe1f41299ec5fa8283b6ef37fc62682ea69 6142e13aad4ae9c EvaluationElement = 023a5facf92477164f10cc6bf35b4d9272bfadf98dbabbe7 b7a137efa1af6546fb Output = 488d693c0d43ab75703901fa1398907cf7dc7a90978d1c2f0def63c88e8 1b8b0 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 03b3cd723330e42975e6e18a6157ecf9455894c18a0189e3e62 4a46d705f790fcc EvaluationElement = 03f1ea590f2cc4afd45a841285c6be4d88825a9c6c04eb55 a1ca996583dd3e2e9f Output = dacd8400f6fae62beabead9bc27869b5109fb5d87da338ae2488712ec25 f1be9 ~~~ ### VOPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = b3d12edba73e40401fdc27c0094a56337feb3646d1633345af7e7142a6b15 59d pkSm = 03f9fc787c9a4dda44a4b811a961d1fd60f87be7465b8a1b9058dc534dae7 0624c ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 02bf13d60f3e39e2018c7be9876d88b52e56c0fc2847c8550e3 cee152c51cf72ec EvaluationElement = 0253e64b5251607348f2b46064805275a849e44db465f649 267c54bd7a774d670f Proof = d0bff8c87ee38f2b2e9e28161fb0f3bc7e4c3bee7329276487d4fd98d4f4 74fff793a846ffcb44d48f9545e321d89e4e6bccea858089732abf10bf19a220a936 ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = 9df5d51a9149a86c3660396feabaf790b8c838fc96012adba5acbd913f2 a4016 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 02a13e263fd9df5aa0078f8d5d6cbe8763e5bee69ee06841a66 dad0db8701480cf EvaluationElement = 02d9f54fcb97bdab47e6664376a75911f1c3e447f5754550 89d926fbd032cb6e53 Proof = e3ccd78a2f2428d04599c90d4b45e3de49b38a3ba0c80a224b8125747648 718319238dd349cdeb533a6d24333b56aafbb202bec1831511717b231b89b8b36853 ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = beef8ec835625f610d616d32b1d13f2f899f07c0b8089fa48a1f0ecbc5a 91b8b ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364,f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b 1 BlindedElement = 02bf13d60f3e39e2018c7be9876d88b52e56c0fc2847c8550e3 cee152c51cf72ec,0322b89e261428d77367cba2aa78fdfa2b21c2919150cafe802e 9020c7f95ec180 EvaluationElement = 0253e64b5251607348f2b46064805275a849e44db465f649 267c54bd7a774d670f,02182b225cfab1d2e25da200549d8b5e2c4581aa7b7bd85be f9b61a14549f58230 Proof = 900fd64d21320b6059a2810f7046066c4c91a5f4e4f6063c7b51316a4862 2de8f3a28e5f1d0ebe8ae77fdaacbcb1ae92685243e9ceb813bb749dee6c7123270e ProofRandomScalar = 350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba 51943c8026877963 Output = 9df5d51a9149a86c3660396feabaf790b8c838fc96012adba5acbd913f2 a4016,beef8ec835625f610d616d32b1d13f2f899f07c0b8089fa48a1f0ecbc5a91b 8b ~~~ ### POPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = 59519f6c7da344f340ad35ad895a5b97437673cc3ac8b964b823cdb52c932 f86 pkSm = 0335065d006a3db4fb09154024dff38c3188a1027e19ce6932e6824c12764 47766 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Info = 7465737420696e666f Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 02811b5218bd2bb8361f990efb6062f1201241bcd6f053a5c35 c34dcd7292e7730 EvaluationElement = 02555fc8577c4f88eeb13bc6ac53994f8fb287a33a704592 05ddff91bc19b6a2da Proof = d87b112dfa11b77f226b85693ab1b5f63adfa491b6e051e570a12392a926 c4816778b527526ba6212c4b0597f13e05f5f9b2223429aab82cd2596625ab1cad0b ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = af6525716fe5dd844076bb5cb118ceda08c02c2d1a02368922ddad63f40 f8b44 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 03e9ddbb1fa70461119afcf0ffbfe3fcd105690c14cf0e07872 e72d4f63aa0e197 EvaluationElement = 03156037ca1ab2166e924e6197344a9885256de2cd7d9432 ae36e3f94049e94bbb Proof = d087b632e2aa4a67e0bc8b7cf012646217a2dfdbf49c60f236a43c66c72b 7f2767b85dc93b96a11e3286ef1ff1864b544a68c2c2d8c2bc35ef7cf7dd34189d3e ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = 192f4e5d4f89ffe4b9cea5c1c9619ffe32443a5c04fc35f98c3821420cf 1890c ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364,f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b 1 BlindedElement = 02811b5218bd2bb8361f990efb6062f1201241bcd6f053a5c35 c34dcd7292e7730,0366ff91265bb4a9d24130b9e8cd3ecc523084b512b6b0722de4 4049616b8c374f EvaluationElement = 02555fc8577c4f88eeb13bc6ac53994f8fb287a33a704592 05ddff91bc19b6a2da,032bdb191ef5604cf43d0c37faead30c4b2b21e3f61c0d47c cc84850fc5656e500 Proof = 1bd5f64dffa2ab8d6532122887ed55ad17d114020901a7a01cf2412d568e 22b6d0536fd6dbefe9f417060468ee3cc451a8f3750f4d8d4acf1e98437248cc7fa2 ProofRandomScalar = 350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba 51943c8026877963 Output = af6525716fe5dd844076bb5cb118ceda08c02c2d1a02368922ddad63f40 f8b44,192f4e5d4f89ffe4b9cea5c1c9619ffe32443a5c04fc35f98c3821420cf189 0c ~~~ ## OPRF(P-384, SHA-384) ### OPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3 KeyInfo = 74657374206b6579 skSm = c0503759ddd1e31d8c7eae9304c9b1c16f83d1f6d962e3e7b789cd85fd581 800e96c5c4256131aafcff9a76919abbd55 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364 BlindedElement = 0396a1584fedc4d91ddb753a0c49e0aa2298c1936dbc935d60f e793d82809f44ff05fbd1922a2cae789d700b5ef4310fb3 EvaluationElement = 0361804cebcb1873cee5e51efd5257cd8b095521cc0089cf 4c1100b1d749e212a044eae6d4f3d852e379eeb1bb54047823 Output = b7ccad41ed7f56be97621bbba8cc3a4f5e8a46a28d72b0fe089d12802f8 6f080b20726e01a99390aba3437ac50c640d6 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364 BlindedElement = 0370b0b4649c0880d44c421a3ca7c915b1b6ffa61f5a1290aa2 2258b006d148e5c105d47725e1ee1b2483b9c5666384038 EvaluationElement = 036d0aaf31ec411ef8e11c68551434883468e56cbd5d615a c8c52b9dc7af326889d52d7466c5eed47f8c89707976aadc64 Output = ca7dc32dc6434101f35a790717dd591e5963acc86d20fda68011fe228fb 76be8da7f42c6a92284df88fb8e69480a3cb9 ~~~ ### VOPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3 KeyInfo = 74657374206b6579 skSm = 514fb6fe2e66af1383840759d56f71730331280f062930ee2a2f7ea42f935 acf94087355699d788abfdf09d19a5c85ac pkSm = 02f773b99e65ad26e8cd20614910ce7ad74c1baa5bdbfd9f124389dc8ef44 b5989f5bf036f6802dc2242fd7068b73da29f ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364 BlindedElement = 03022e23d8356d74d8f9a24ade759fb4e7cf050d1a770110878 83d4db52f16751d8d987fa49764c157c1039c4cdfa5ef7a EvaluationElement = 0202bdefbc2d55a37aa848df5efc561055235d9190da9ec3 0ccfb84d93b033a29c4fb1968c55c63a0b90a205e1e9c4c19f Proof = 929ee0254047350f580cdbd6fca706a9d110e4fc0aa1383af8d35a536795 69c038d90900e8810eca177b9cfd6a2d0f1fb5ed7a2e0f3107719cbd9c74ab7d9502 79869f67551b629c3706c8f9cee651d700453ca44e43b0a08c05502cd28f3960 ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62 c095021db018cd8cbb55941d4073698ce45c405d1348b7b1 Output = 7eb3cc88d920431c3a5ea3fb6e36b515b6d82c5ef537e285918fe7c741e 97819ce029657d6cced0f8850f47ff281c444 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364 BlindedElement = 037ae30a62126a39ca791aadafb65769c812a559c7da92820e1 43350b6bb8cefb543af2e0179664f9cd0d1499c018a0b18 EvaluationElement = 0355f95a68e8c4f0d40910e9a85f09109e4e7fff84f75db1 a4aa8e21c451ac2d872113b497bea6c0be1b535241557032a2 Proof = f4ec262642fc9981fe5d1f0a3737f2d09ec9b056f577224013f5a3d09812 fb22c6b45e17150d8fe3a8c7e63094cdf40a60ae1e50fc2e1678954c1ecbaed2f7d0 7e6d597fffedc7aca450ed64164c46e62d1326ff1f6eaeba4b5dd151e953e060 ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62 c095021db018cd8cbb55941d4073698ce45c405d1348b7b1 Output = fb538f84dae5f214c5adfcf529c6fe63bc46d6a4073d540cf0dabcc7c8e 0f3c1b43b606002a9aa52ae158a19d900c136 ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364,803d955f0e073a04aa5d92b3fb739f5 6f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b1 BlindedElement = 03022e23d8356d74d8f9a24ade759fb4e7cf050d1a770110878 83d4db52f16751d8d987fa49764c157c1039c4cdfa5ef7a,031ee43111a2406b09eb 4fb2a3a5fd7c690c0aa51158af766c9df1428bb18195f054c5f68ae1863e6ab3dd42 98b3db712b EvaluationElement = 0202bdefbc2d55a37aa848df5efc561055235d9190da9ec3 0ccfb84d93b033a29c4fb1968c55c63a0b90a205e1e9c4c19f,021fdbb3b92cf4f8e 04534bc1a9f62596667c3ea49a6e89f1610b9f7f89708e8730df159827ea92e26fcf db2063920c89c Proof = 9cc7fe5a120cec6ef0d877260cf1af1861f281aa0015f371c8830f93f286 8f5891ee6f32ec6fcbe130a50de24c93b131261eb4a242941c8d5ad9ad2f2be402d9 386ac4afcf5e5498f35cc3db0442a77e139eb56a7b3435177e7bf1a48cef184a ProofRandomScalar = a097e722ed2427de86966910acba9f5c350e8040f828bf6c eca27405420cdf3d63cb3aef005f40ba51943c8026877963 Output = 7eb3cc88d920431c3a5ea3fb6e36b515b6d82c5ef537e285918fe7c741e 97819ce029657d6cced0f8850f47ff281c444,fb538f84dae5f214c5adfcf529c6fe 63bc46d6a4073d540cf0dabcc7c8e0f3c1b43b606002a9aa52ae158a19d900c136 ~~~ ### POPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3 KeyInfo = 74657374206b6579 skSm = 0fcba4a204f67d6c13f780e613915f755319aaa3cb03cd20a5a4a6c403a48 12a4fff5d3223e2c309aa66b05cb7611fd4 pkSm = 03a571100213c4356177af14a7039cfee270ad1f9abde42ac3418c501209e d7b2fc0d4aa3373c12ba956fb555b02843fc8 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Info = 7465737420696e666f Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364 BlindedElement = 03156aece0ce92e9eb8f7a9b7f6bd30230a048d41384f2fe49f 1f9f69e180c23390e3ba8d0ee66dde6d637f03c06385f76 EvaluationElement = 02352ec7586660cc4257a9e78366727341db0825e431fc82 4a70a91019b67be26d8b880b2d4d8e734207d4a21a23429d74 Proof = 77bb1ca3ba4013b93ccb302db838839098eca743de542d3c79d189f2adf0 01999583a01aead6c248a32ff13b7f1f3d6b2dd04f653a5beb0f0394ad83ce5e79ea 08ae029d669b918b6d62ed3b77b08a07f04bbc341fae06444d196746da4da884 ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62 c095021db018cd8cbb55941d4073698ce45c405d1348b7b1 Output = fa15c0fe8706ac256dfd3c38d21ba0cd57b927cfcf3e4d6d5554ec1272e 670079b95cdbb2778e0df22baf50f33e12607 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364 BlindedElement = 02d46e0e2d27d8bb126e1201e881d0070b8807cb5635687b20d d4a3a248e7a40c50a1ad3e905e43342771eb23bc8827a00 EvaluationElement = 030879805ff65cb536293a1449c00824e55c4c1b25379f2e c17d97923055169a6d97b46ed7b11bb661cc8cb9535abc3d66 Proof = 9982a8501f45839213441d4ec501cf496d06fffab65f13ca3b3e66d21398 fe9e0e04aafdf50eae214fa9cccad3c53d524d0f8c185ed60b11fcf5c7e82e10a8d3 f3b2ce1e4a004d65e6ad596eeb5738453465d881f2770858cd46ac32f0e16121 ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62 c095021db018cd8cbb55941d4073698ce45c405d1348b7b1 Output = 77cb533216c32cac017d706d5f0ee4630bcb0bfefbb980d95e98dc240ab c70a944a44cde69b805aee3a39b2eb7d834be ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562 889d89dbfa691d1cde91517fa222ed7ad364,803d955f0e073a04aa5d92b3fb739f5 6f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b1 BlindedElement = 03156aece0ce92e9eb8f7a9b7f6bd30230a048d41384f2fe49f 1f9f69e180c23390e3ba8d0ee66dde6d637f03c06385f76,025663d73e3418039fdd ea1a212d254ec0103f28904e588b73c7da8298347706b2f69902a98e8d01c7aaa69a 297b14c7dc EvaluationElement = 02352ec7586660cc4257a9e78366727341db0825e431fc82 4a70a91019b67be26d8b880b2d4d8e734207d4a21a23429d74,02f8e532fabdd09bb 2a7391a2a80c14f265c0456009199b77eefac1013d4a4f449dfe46d5d6d2d4d74f8c 9fb1e2868b611 Proof = f8c938b5d2aff7d1a05ecdcf4178d682fe7b35c375be5db88dfa59f488c6 e4a68d4f99f16330a06f918e264ad68a78fdfad91446b72e1a3da2a65e531d520dd0 4fd91dd49b09037648e04a44e83d0dfd2aab7627e7389818924ad9bff591d646 ProofRandomScalar = a097e722ed2427de86966910acba9f5c350e8040f828bf6c eca27405420cdf3d63cb3aef005f40ba51943c8026877963 Output = fa15c0fe8706ac256dfd3c38d21ba0cd57b927cfcf3e4d6d5554ec1272e 670079b95cdbb2778e0df22baf50f33e12607,77cb533216c32cac017d706d5f0ee4 630bcb0bfefbb980d95e98dc240abc70a944a44cde69b805aee3a39b2eb7d834be ~~~ ## OPRF(P-521, SHA-512) ### OPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = 0152e55f3a5d836ab6c2091a904ba4b4f92e51ba59ecc211b4fc771f7c6c8 b17fcbbb2bed8a65afd7811ceeec3eac83df6a58515b6d3c71ee0ffc349e28c3fb78 d83 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 03016480f33f005c8a8eb1003e48ebc22e082d0b86678f8460e df21cc1518a13bfc0001fa143d474b18214188d93a7b3124b1b385db4cd4e356ad24 923ae55d70ce8a7 EvaluationElement = 03005fdb56bf49fcd073b1c4cfb42ceef5666c709785ae82 d659e4d75c0f5591cbf812ca9ffd992ac67c1877b63978f417687a2a6c17697e858c f715843f9e4235566a Output = ddcaaceceec790f4858a09f3e06e74e8b0841681a3d45ab1393d0948379 43f782d9ed22ae716a642d4ee428ddf1dae9ff631047864b99a305412aceb7efafa3 2 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 02000e860d3b8205e0cb4f289771c8e6189b47c60cbff24459e 12a60317ac242e9cb36ab033a620cdee5628ecae4a81303e7464d52194d801756911 fd7ddfa5430e69c EvaluationElement = 0300e2663f17144682b25de378531abd6d065b770eec073a 42494719f27748f75b4ab11aecb06bf8815bcc9eeb3ce54978605bd8a54c22a1dea6 2da1ae5f9f5e5e90f4 Output = 287712c6dbed773f39925fec0ad686dfda4a679cc7e88fa60ba9d3a7d71 2a11d4a0445995391ba56cfb018922e0d4bb4b25ec0965a33170c9b00f45c361b021 5 ~~~ ### VOPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = 00fb5507f94782c5b72acc16b9eb21064f86b4aa525b9865258d157b0431a b5c3515fc975fa19ddb28129c969992b31d8946c4e354bc49458bb25fae58f10ac3f 678 pkSm = 0301322c63ad53e079791739169e011f362f4396a8e93fceeee9cd814d471 80e75ffd717820fe9e9c763fa595340cd80989c31fbd0200572080752c73b80b7532 2f300 ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 02016dafe8eee47b591592705ce4d5231563b637e5a51b425b8 81f1cc576c53caae4ec59fd6e3a918d5c35e6db77cf3a5862b71a8b6c7eaded3ebdf 0c6e14778c03a8c EvaluationElement = 020124a0ee09ade261bbf67e1e3d296655c97e6c5c14c71a 386e636d8f55d29f5f6dcec954ff28bfc7e6e63240a52bf278ae94b312be3d8bf850 55d2a1dbab687905b0 Proof = 00156561564a9128de6e2fb92d0ee065bb19192ff86549c37fab777f2d57 a951ff94b3832162cf02ad73287a0f0906045878105d8ab54a7cc9a1a0039d0cb241 ebd10197e5cef77e8fbe0414f86b86fe2e823e0d8dbdcf2ccac54d273e814da062ba 941a27d1e7e28c44cdbdaffe392cc915bf8b9add15d51b68afd6e88a52d07ff8b3d1 ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07 3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = 16a9387153bf7fa2c733d42f299877324cfce3b39093e72067c3d59948b f745d77b2fe9180ffb442ec45b575eb4108d2b6f207cbfabd7bc540ad2a087cfabca 2 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 02008f585341e32244d67033ddcf4c1cc30f7661c4cfc177f09 82c69bf9c90e1da02d86a26ece60b8c42b278a1dc85afcc9cbc6aedff15cc092af03 5100b915c2bb4df EvaluationElement = 03006cfeb22e141859e6a2050a714bde8ab8109abb2b42bc 8f18ace67121c1811c9e95e7cf8ffd4f13f8cee80fc3c69318b0eb30ecdf6e7d7e84 faefa6f0b8299217fe Proof = 01db7070ab756e8c2b12cb81c40daac6ef1d5137be3626a10ee867b0b736 ae5ab05aadbc3ee3d1d0202b7687e1614765893cba67b307c67a8a4ce7b3eaf3ba64 204901ce6f8dc9234d27373b1027982d7e3bb196d157403f50c2f1bf0fa701753ef6 3d7265c0b1016e662456d4bdea55b3d983350b2c2ce80e192897161a1b780046b952 ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07 3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = 0163635204be5347419796f3564b36d6e89c9170e4fcca5b6df79d3f676 f641b2ae3ae1a64cc49f3d788e276abe14e3c38bb2f92fdba0b45ed122a6930e7d96 1 ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364,015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e073a04aa5d92b3fb7 39f56f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b 1 BlindedElement = 02016dafe8eee47b591592705ce4d5231563b637e5a51b425b8 81f1cc576c53caae4ec59fd6e3a918d5c35e6db77cf3a5862b71a8b6c7eaded3ebdf 0c6e14778c03a8c,03005467c05309dd2b9ef584dd33ae30e93ae5508f2ceda71497 63b4b44fe797f7d0f4c7441298a0ed821ede9ebdc8c0215f96db57c64feb734a145f 00d00f0f222db1 EvaluationElement = 020124a0ee09ade261bbf67e1e3d296655c97e6c5c14c71a 386e636d8f55d29f5f6dcec954ff28bfc7e6e63240a52bf278ae94b312be3d8bf850 55d2a1dbab687905b0,0300fdf99a9eb28097074daf75ba9fe16868690b16165f58f 9c4fa266d5fffa5a87026a98ac3b0ca6dc7e42f49140a004c325646aec5ddc778db7 08748cc2f632ed937 Proof = 01935896f4c03ea5257d6471677f191ea7dfc777cc1e15f82e423cf1948c 440ee56a1c5a8627aad8da8e507a7f382b45255e55a1f1afc99c6b14237ce7cf0855 40fa000fe413be351bd11ac910b1d4af34d2c97c7b7a53438340dd659272f3d86470 35b13cd8072903b9a3adf8e89bfb1f77d732fa224f32674506e3e88e29ce182186e3 ProofRandomScalar = 01ec21c7bb69b0734cb48dfd68433dd93b0fa097e722ed24 27de86966910acba9f5c350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba 51943c8026877963 Output = 16a9387153bf7fa2c733d42f299877324cfce3b39093e72067c3d59948b f745d77b2fe9180ffb442ec45b575eb4108d2b6f207cbfabd7bc540ad2a087cfabca 2,0163635204be5347419796f3564b36d6e89c9170e4fcca5b6df79d3f676f641b2a e3ae1a64cc49f3d788e276abe14e3c38bb2f92fdba0b45ed122a6930e7d961 ~~~ ### POPRF Mode ~~~ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a 3a3 KeyInfo = 74657374206b6579 skSm = 01e0993daeb97f8fc8176089e4e6adb4c03dc9b18daf7e976ed7fa6f3cb89 c40c6a84156f20371ef23bfe6e049423244d7d746c79ad380ac7fe285aba162419e9 012 pkSm = 0301264d23f5d1d615f9747d2a7177a419dabde6ca0f5a047979dbe9bce33 7241b7d2959025476f354c4f57017363d667b83b691fad8c172959963e6000de9533 f187a ~~~ #### Test Vector 1, Batch Size 1 ~~~ Input = 00 Info = 7465737420696e666f Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 0200e36b187060fef4f4cfef21cdb4ef8b5793a1bf44da95229 062303688d4cf6a50c16b7c943c79d91357223b56866351a17a9c7f49730fd28add9 301d399c0cf206c EvaluationElement = 03014e216c05cf1d108829946891cc44693b0a411851a03f c439130054d920eb8ad596a4dfa5314f68d298a094777855aa55c98480575a3816cf ac52f838693e0e7fe5 Proof = 00c5a46ff1e7d8cd2711daf8ec8752451c4c7ed815f3e8d51db64f1eed83 a7cc33f0f99ce067676c478bd616a9ef6377994e4bd69051424a576a4e26f0ec7ed8 1fd000b7ae1eaee9e5b6991afdbb2c9c29a04e2ab3a2066df89308410a59267a60a2 2a47666de009646c78e9094c9f4de177a620e97f63e35ada0c8b438b4605248c9087 ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07 3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = 3be90ca19fbe2fc250de62792c7cf4b6b5555c8655fce1694fc7563d5d4 c5001efd1e91fbbaea31d75e33dbdefe57420c395f1ac805cc0095c4d81a0beddcb0 1 ~~~ #### Test Vector 2, Batch Size 1 ~~~ Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364 BlindedElement = 0300357933cc17cdcce862b794a4161d8eb10d23009695639e3 fdc8dffc235e19e92e0a3d3c7c6249dd9dcd02da0a8f061d89b6809d3292951ee0e9 ead21a62d1335fe EvaluationElement = 0300a5132ae9c429dd33b25c051f45451c6e54e154d698c3 f3d8820bd9607e7a65762911c647b3460be166f37ba443bf000b23552298f14e0555 b3f0ddf0e900e1d38c Proof = 0004f0791cbe6ac6f4074834e172beedea19ecd3a2c504a71fd870b42314 d3b072633a8265c774668274dcbcaebf1726768fab4edec69a33a7d37095ebef3e1b b44900f0a175b56ceeae8a87bc5553405e0b030ebcf8303befc5890c8afa1e61fd41 66480ff428eae4193f12bbf1fc31d5d7196ce8692e37bc9a63cdf4c9fafe10a2dc9a ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07 3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c e45c405d1348b7b1 Output = 1d90446522e3c131e90be2e4f372959ae5ab4f25ca98e83e5e62d6336c4 8b5ec22fc6083d2b050cad2bbc22ae7115c2b934d965ffe74aaa43c905cd2af76728 d ~~~ #### Test Vector 3, Batch Size 2 ~~~ Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a Info = 7465737420696e666f Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333 88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a d364,015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e073a04aa5d92b3fb7 39f56f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b 1 BlindedElement = 0200e36b187060fef4f4cfef21cdb4ef8b5793a1bf44da95229 062303688d4cf6a50c16b7c943c79d91357223b56866351a17a9c7f49730fd28add9 301d399c0cf206c,03007530916e8ec76199429667a82ca4df65b913d8b1fb157319 e73706f118b4f46047c01b7da024bdf5a06f2f4e879b1a1cd3fcb1ca2c37ce158cc8 625e76b3bb1cc4 EvaluationElement = 03014e216c05cf1d108829946891cc44693b0a411851a03f c439130054d920eb8ad596a4dfa5314f68d298a094777855aa55c98480575a3816cf ac52f838693e0e7fe5,0200005cf5e719b3066dcf0fbd6228bc921cebccc49feb1ac be9d9c4c88f4169e1d0d5408f92ad9f599c2f5f6d7d4c6e575e86f64c4eead2bb9b3 e8e04d141a90b7382 Proof = 00d846f4a2a7722fe6a24e7257e43d88c3e01977282fba352c08fd38b69b f1df64f90660b03b73abba50cb389af3d602da66411401d3c9f87bcb6363d6406e0a cad3018a44bcda83524d4a48f0ed96ebca96d7626b634ba28fcba0c21956fc90c516 859df8ba6edeb7a44daeeec51c3a56b79c1f9e211e9974e5f293ade221523953d12f ProofRandomScalar = 01ec21c7bb69b0734cb48dfd68433dd93b0fa097e722ed24 27de86966910acba9f5c350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba 51943c8026877963 Output = 3be90ca19fbe2fc250de62792c7cf4b6b5555c8655fce1694fc7563d5d4 c5001efd1e91fbbaea31d75e33dbdefe57420c395f1ac805cc0095c4d81a0beddcb0 1,1d90446522e3c131e90be2e4f372959ae5ab4f25ca98e83e5e62d6336c48b5ec22 fc6083d2b050cad2bbc22ae7115c2b934d965ffe74aaa43c905cd2af76728d ~~~ "#;