1035 lines
40 KiB
Rust
1035 lines
40 KiB
Rust
// Copyright (c) Facebook, Inc. and its affiliates.
|
|
//
|
|
// This source code is licensed under both the MIT license found in the
|
|
// LICENSE-MIT file in the root directory of this source tree and the Apache
|
|
// License, Version 2.0 found in the LICENSE-APACHE file in the root directory
|
|
// of this source tree.
|
|
|
|
//! The VOPRF test vectors taken from:
|
|
//! https://github.com/cfrg/draft-irtf-cfrg-voprf/blob/master/draft-irtf-cfrg-voprf.md
|
|
|
|
pub(crate) const VECTORS: &str = r#"
|
|
## OPRF(ristretto255, SHA-512)
|
|
|
|
### OPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = e617ae6f2d10de61e16cab73023c5a2df74335d13f89470957214664468d2
|
|
e0b
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706
|
|
BlindedElement = c83d0d8a3e80be2ced8bf35c5f3e24d42260ca8fa9a0403ca83
|
|
033588c26614d
|
|
EvaluationElement = b29ca44d6dfafc77a50b72abc53cfb7abcbe9cf6714afc76
|
|
893ee8dcaf053b59
|
|
Output = 8a19c9b8f4459d541ebbfff4e29f36620e44e825a27b0f2e3a3c0d8e963
|
|
588ee04348312dc8b43a48c41d4e7d904f95c91813a6b4f624392433f0568409da62
|
|
8
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706
|
|
BlindedElement = 8673ffd2f26b2579922fc485c77e106def00982e0abb233b4c6
|
|
e54841d43ba29
|
|
EvaluationElement = 68ed7037846f48a1b4073a0d110f6e4de8f53ab845365c0f
|
|
3d7f1b67caa39126
|
|
Output = bcdbd421c0863495d63d81a868858f34f5215437c5777072a92703f36b3
|
|
6c4a2d3e7e54a5762e70b06223527c211e2d4364481270f72971a2db8b7ab8fad84e
|
|
e
|
|
~~~
|
|
|
|
### VOPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = a3b8dea4a99be2469da7f7d2d93fe5f2867317d6705350475d47739c7214d
|
|
a07
|
|
pkSm = c00fbee6832a8e5d6cc1d1a23315daf6a6018f19e29ba37b05499259da854
|
|
b48
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706
|
|
BlindedElement = 6cce2c7913f4c8c0ac44ec149a1544b0e711e1630753d4efc7c
|
|
5fe36a4d50638
|
|
EvaluationElement = 826f2f3e553a039bcd69c9df6cb166e7943fd207089ae704
|
|
1f6041322ce7033a
|
|
Proof = 2e541a6962e783d2f42d5f4fb1364e51c368e95e83a962614714e9dfe21a
|
|
720cd8c8eb8106131b4a758b5a0987d3870adb348f5eae7b4a2bc26735928cc4b90c
|
|
ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
|
|
81aa6f61d645fc0e
|
|
Output = 4d5dd83db5bfd850e3e0c17519f1013aab904e7b131dc1ded31f7a76aac
|
|
f040f6b344b0e635cf6df30771a35157e0e3d9539f7a891b48cd8521692b15c51538
|
|
d
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706
|
|
BlindedElement = 6a4e632b76a2cfcb0295ee74098a15a3e858f6006fd9fa8576a
|
|
5813e051ac134
|
|
EvaluationElement = 2cb879d933a1af46c77e89f3f39a38f80347bf4716da3dc3
|
|
07c8aa1282179823
|
|
Proof = eabae3489c46b9e9a8da0cc921d2bc2960ef5fb0b38c8f067cc5c21f62f4
|
|
eb0ff5472009aec126f543b6051b5d62ccbf2625aab6684076c26cfdf0904257090c
|
|
ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
|
|
81aa6f61d645fc0e
|
|
Output = 5c3fe06ef39905710a124df0727c6c938f48234b35ccc4548c0736d7f6f
|
|
36e6b7333a9aefc93d6b1ee20151a40bce453866b62cf5d41799982fee6100680915
|
|
9
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706,222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d9881aa6f61d645fc0
|
|
e
|
|
BlindedElement = 6cce2c7913f4c8c0ac44ec149a1544b0e711e1630753d4efc7c
|
|
5fe36a4d50638,aa9908e4c40b7fe5f091cf0f7fb8ec75ffdaaf2d19512b7b9939f0
|
|
ffaaa0654f
|
|
EvaluationElement = 826f2f3e553a039bcd69c9df6cb166e7943fd207089ae704
|
|
1f6041322ce7033a,902ef95488cc3c47fe569bc96c922a4ae3f9ebd8ccbc71bfefa
|
|
5f1e7da9ab953
|
|
Proof = d9bfee92cd7496cdf469947b534549ceb79ebd7b5695d20437b3e14758cf
|
|
de0998eaa13a480cc35b562cbfb1412b1677650cd901b5fb4d6805581a95b440320f
|
|
ProofRandomScalar = 419c4f4f5052c53c45f3da494d2b67b220d02118e0857cdb
|
|
cf037f9ea84bbe0c
|
|
Output = 4d5dd83db5bfd850e3e0c17519f1013aab904e7b131dc1ded31f7a76aac
|
|
f040f6b344b0e635cf6df30771a35157e0e3d9539f7a891b48cd8521692b15c51538
|
|
d,5c3fe06ef39905710a124df0727c6c938f48234b35ccc4548c0736d7f6f36e6b73
|
|
33a9aefc93d6b1ee20151a40bce453866b62cf5d41799982fee61006809159
|
|
~~~
|
|
|
|
### POPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 024eaeb72e5b3729d7f19d90aa44e3d2f4c445fb29011ffd755655636f2b1
|
|
00a
|
|
pkSm = e001954ccd18ec5aa89bcbf26c03d84dc4d9c9b973d9f06b1e0ceb7b79f41
|
|
d65
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Info = 7465737420696e666f
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706
|
|
BlindedElement = 009ffa1ffc529e4f1d3d8de1c06d22fbb15e39920a72ad4efed
|
|
6c39af9438a2d
|
|
EvaluationElement = aa9af25bf4edead5e2e0a4b8f93db9b497017f93cf68c750
|
|
45f02172bfc5d304
|
|
Proof = bb893ccce54685a871185bb056cb5e0594d09d3b53f2f879de06a650b8ae
|
|
ff08371f2ff9f3d5cac7f393cc37b2c71c2a6fbb80f35fe36b8e5cbddf11469c8e03
|
|
ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
|
|
81aa6f61d645fc0e
|
|
Output = e7ed59e3f808c369598961ebfd9af74272894e0904d1c11653a21b08204
|
|
dba1a5fb5c3dd6be6c419190a84b576d91eb3d8d920d450fee0427fd24524950d72d
|
|
6
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706
|
|
BlindedElement = 5e009e08e228f95ee3703cff60a1d54225bb282bdb6d7dc9a78
|
|
e287f8418315a
|
|
EvaluationElement = 2e528236481eb6d87b07ef5f8c17910323d04b3bf0cb2f2d
|
|
23d5a7ad9f069b22
|
|
Proof = 3796381ab287189839288bbaffc971eb87c3a28226fa99dc83b363adb2f4
|
|
b20e4ae81fb675ebcd43d13918f71846cb488d0ce7d473bfca68450a5a5472564500
|
|
ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
|
|
81aa6f61d645fc0e
|
|
Output = 9a0d8c55e2fef4bada9fb5877a0e739496e539a0d835722911dab9ec112
|
|
397e763a605acbc072619e8b8acefb8ee704a357556edc802648089d684baa763ce1
|
|
4
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
|
|
6706,222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d9881aa6f61d645fc0
|
|
e
|
|
BlindedElement = 009ffa1ffc529e4f1d3d8de1c06d22fbb15e39920a72ad4efed
|
|
6c39af9438a2d,1ee64b9e5148987ca6647ccddc11ef506231e986d5ce08ef9b8230
|
|
871f840b3a
|
|
EvaluationElement = aa9af25bf4edead5e2e0a4b8f93db9b497017f93cf68c750
|
|
45f02172bfc5d304,3073794fd68f64432b4d1f24752c4398f0e81e00b5b5842e463
|
|
5dd381331091b
|
|
Proof = 7d59db67715a9030d46ab50a614fb55927961c8d9322cb6973ef36775309
|
|
810b9f4a670ba4b9321f5cf753be2a58dee0730cfabd12b8f25a8a342e158ae2b608
|
|
ProofRandomScalar = 419c4f4f5052c53c45f3da494d2b67b220d02118e0857cdb
|
|
cf037f9ea84bbe0c
|
|
Output = e7ed59e3f808c369598961ebfd9af74272894e0904d1c11653a21b08204
|
|
dba1a5fb5c3dd6be6c419190a84b576d91eb3d8d920d450fee0427fd24524950d72d
|
|
6,9a0d8c55e2fef4bada9fb5877a0e739496e539a0d835722911dab9ec112397e763
|
|
a605acbc072619e8b8acefb8ee704a357556edc802648089d684baa763ce14
|
|
~~~
|
|
|
|
## OPRF(decaf448, SHAKE-256)
|
|
|
|
### OPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 30f71e5b5be9c91dd54c5a48e82be8d47eeb2cb2c45d7874a45dddc85af8d
|
|
3f95b1ce73a99c47edc26ac9ddd936bd9b6b73728995bf1d213
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112
|
|
BlindedElement = a4205d2af0410dccbd4464629ba1b835456d04d994cf93988cf
|
|
2c3b9d45d3c4671c7625f52c66c760a069e2c3c367826debb13da089d735c
|
|
EvaluationElement = e8d78cf5212fddf940f9f6fe02250ed83cc0595e3f0e7481
|
|
1cdb9f62c0fa7fea94c45795637dc5c3ac31ee1cff18d0d675396ae09b302f76
|
|
Output = 1c1a9df7d0616e0f5fdfb6479acec73a4f5562da8f9488f3b6112ef11c6
|
|
7c5900e0abc3a169486ac7230a306c8796562a045c66305ed7cb2a3fae658e45eae4
|
|
c
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112
|
|
BlindedElement = ec5b609e5d3c0bb024c35256194694ea6e42aa24d13cf6b0597
|
|
49cb36911ccba0923cb73136acdf4bcecf23b6025f7b9b93d2eb0c09d964d
|
|
EvaluationElement = 524c3a644e381b4ae416724247f94b996f655167e0d4e1ba
|
|
d93cbc731c3beb36e3822e9dcbdc3600966226387a2306ba70eb68db5a64f92f
|
|
Output = 95f519e8ff2b54d8d596da2c54829ae3dd900f5c18eef48efa03ef6694c
|
|
505bea17b7982246c862d081b9fdcf295debc60abec8b0ddbfdf48bd302a3fe61b21
|
|
e
|
|
~~~
|
|
|
|
### VOPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 44c46e78aa6386cee57a46c75d124b13ced3e5f055caa3baaad61501330a4
|
|
24463400453c97245a8f7b4c65f2c4c3dabd09a049c034f9e20
|
|
pkSm = 78f4233110896fd41531fce182094c3bc4cf65f97b23078476b3b68118736
|
|
617172d3735c5832081864e7c75cd3ddb449e93068b34ba863e
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112
|
|
BlindedElement = 38b758b69dfaaff8576eaaabfe70801813d95eb098f85516bcd
|
|
46a0f68d1ea8cc1dea3bc7c8d340ee77c5bbca6e7d723e51d77e0807acd0d
|
|
EvaluationElement = 7a8374bbae55dfc91e10a9d8042015419c505a6a8ac54e5b
|
|
93867747eb04252aba316d9f750fa0c54458aa8c90e963a60af5ae6f141af8d2
|
|
Proof = 2fd38cf9829c5f3fd294a5eb114356cd67cc5839cf797dc060273e07cf57
|
|
0dbabea029f0bf4675d84866865d1d146bfa38eff8195b59cf3c180bab30509061b9
|
|
d02e70f709f085dc8c98c0924259c9a3463ef5ceb97105989941155b98bd7b03b1e1
|
|
e538850139dc1a56beff1bb9401f
|
|
ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
|
|
627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
|
|
Output = 3db64b6f803391e7c9803135457da250eb29778480c30f29d53e9ff46c3
|
|
ce5ba9555418fc28af347c18b77a990eb904d0043a3411837b6d316f749428a9a370
|
|
4
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112
|
|
BlindedElement = ea9b2d51579f5c07c5c511cf3bba888f5fc76d6ce29075a0b02
|
|
5adb3daf4b568045c28e6bd00442251597ba6264e59beaf46220d8405fff6
|
|
EvaluationElement = f6d23094a82e33e231003a1ecdd4659029d613932b767451
|
|
c607ec428315283fe0b121bf09d7c88cf2ed50910463e38383fb52e5562a87f0
|
|
Proof = 104e45c171bd7ca9119af1091e3175c8af4e9efdbd4704b3d5a8dfc99465
|
|
9842ea021da27a9c1e0fbac369627eb5e9cf9e82964b7412081f15f6bfc5c68425f6
|
|
4f1a4dae420a03d582a6cfffc0fc4da71a145bb5305ae28985e15e067d28523578ea
|
|
696205cea28cf5831abed3e40f37
|
|
ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
|
|
627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
|
|
Output = 4dc9ec52b6aa7f1f38a320d10cb58e0d86b040f6376d2f178f42c99986f
|
|
e932aca7162cb72dd94056724617979c0f7ea652b1492bbad1d82748a38ff4daf129
|
|
8
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112,b1b748135d405ce
|
|
48c6973401d9455bb8ccd18b01d0295c0627f67661200dbf9569f73fbb3925daa043
|
|
a070e5f953d80bb464ea369e5522b
|
|
BlindedElement = 38b758b69dfaaff8576eaaabfe70801813d95eb098f85516bcd
|
|
46a0f68d1ea8cc1dea3bc7c8d340ee77c5bbca6e7d723e51d77e0807acd0d,5a788e
|
|
f7949021b22da4a4e89b2443458c96fcbec8b66b08df885eec8fb4070fefe8b50e08
|
|
5e043c368cc05a9339b5ae31eb6482efc0d933
|
|
EvaluationElement = 7a8374bbae55dfc91e10a9d8042015419c505a6a8ac54e5b
|
|
93867747eb04252aba316d9f750fa0c54458aa8c90e963a60af5ae6f141af8d2,0ac
|
|
81e0e5b9fa6d90be58a6fc3fb4fde57e0efacbe210cebc2c85a6e934114b5e0e5ba4
|
|
cc202bde7cd7708415cdcc2312a51fca6ad6f06bf
|
|
Proof = a221b134d99ba97cad98bf45341eeacd8a402a6e4c5ea5f93cee54ad0f2b
|
|
ee544f67d2859a5253cb9def403bfee9420a5224fad35e3f9a3fbb5f28f6b8abcb34
|
|
130beaa158a41d1497aacc2f073b2da5471067bb832ec8044f417f528e2e6ccb897f
|
|
992424220d608b5e7bbfd4257e1f
|
|
ProofRandomScalar = 63798726803c9451ba405f00ef3acb633ddf0c420574a2ec
|
|
6cbf28f840800e355c9fbaac10699686de2724ed22e797a00f3bd93d105a7f23
|
|
Output = 3db64b6f803391e7c9803135457da250eb29778480c30f29d53e9ff46c3
|
|
ce5ba9555418fc28af347c18b77a990eb904d0043a3411837b6d316f749428a9a370
|
|
4,4dc9ec52b6aa7f1f38a320d10cb58e0d86b040f6376d2f178f42c99986fe932aca
|
|
7162cb72dd94056724617979c0f7ea652b1492bbad1d82748a38ff4daf1298
|
|
~~~
|
|
|
|
### POPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = fdd59cb218c7fbdcd48b18ef21ab647a6c210110c765bc3da6c11e563671a
|
|
48402c23129ce2ffd021d99da5a2d04158883c65d7f74a4901b
|
|
pkSm = 1223e0aec4ee5bc19181078be380cc745d1896e1369aed3cc8a45b40ba3f9
|
|
aa1f79e23d542d6529e17465d1954d75e336910c6417de99200
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Info = 7465737420696e666f
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112
|
|
BlindedElement = f86104fcefec6bdca7767bc3e6a2ac9de2b00546579fd50ff66
|
|
687df531f7a2dfa8689a6cfdf91efc32d6fff490e722990752b7bc4bda28f
|
|
EvaluationElement = 76f27e6fa79cd38638e35f5caa5d641e41526fbfd9272c19
|
|
be22dfc8cdd962e6d5d4e0c605c9bd6588eb9698a2bbf792a0827bb1116c8812
|
|
Proof = 3a1b3400ad16e1562e731c64520fa5a3664c1487ffe6537e85029842904d
|
|
3e01f9e7435b881ab9346847cc3470a2b37e6a10a4ef7bd36b2d06c602086a33252f
|
|
39c562aab5820a66c3bdf9d72583587e93ea893725be535cdeca1094d5b4dae119b4
|
|
9456162f60034a904f521f7cd818
|
|
ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
|
|
627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
|
|
Output = 2a08f81bf204eb43a57dbc011946861ed715a2fd3d39a3b35e43c74d07d
|
|
4734149ba163389a02f6cd33fbb5b84e167d35dca7a7dc00b89418398c255c8293ac
|
|
6
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112
|
|
BlindedElement = e6f508abea28cbb0242f0dae1c0a92e017127edb7c8d8e0ec98
|
|
a5ea25c6bc9bb86bfc0bf9b8a086302e29a2a4b0a1d9d80f2d439cfba3ec1
|
|
EvaluationElement = 1ea637b039e0ab12c6959c74e275471e33655007a7fa23af
|
|
97ec578bcfc8c3381d4929ebf51433b76460d583f16b7cf1e75b9708f5d9d2f7
|
|
Proof = d53a1bfeafc5b47fc86406fba080e57434a7004a0739399ccb356f790b13
|
|
585da9d69a25c526e039fa06ad6a5781283ea7997eced063fd32e58bc95d57fd771c
|
|
ad4a7e23633ae2049eec5ad86ade6a5e98d44f78fd86b5f55ab3c7a03025d6aec1f4
|
|
f50a2bd7b9b554841f6b4cd23d14
|
|
ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
|
|
627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
|
|
Output = 80ac73a09fbf8cbd329ff1b7f42d8d14e46ae5b732f776f3203f0680daf
|
|
265254360da0afcd9dc1d0cd3858ab21ce8e7a19f0426d7e701cfda34fb8238c9e43
|
|
4
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
|
|
3833a26e9388336361686ff1f83df55046504dfecad8549ba112,b1b748135d405ce
|
|
48c6973401d9455bb8ccd18b01d0295c0627f67661200dbf9569f73fbb3925daa043
|
|
a070e5f953d80bb464ea369e5522b
|
|
BlindedElement = f86104fcefec6bdca7767bc3e6a2ac9de2b00546579fd50ff66
|
|
687df531f7a2dfa8689a6cfdf91efc32d6fff490e722990752b7bc4bda28f,50c684
|
|
9c8f6355687bbc9d4675bcea953cb913c5447c9c8400062ae37f808ce8a75d592c56
|
|
f3393d4ea12ec72f9f84402002eb497201089a
|
|
EvaluationElement = 76f27e6fa79cd38638e35f5caa5d641e41526fbfd9272c19
|
|
be22dfc8cdd962e6d5d4e0c605c9bd6588eb9698a2bbf792a0827bb1116c8812,7ca
|
|
a4dd83ecae98fc3e282a0e7df1887393a3fc1e17935dfe355da394756fbfcad65386
|
|
eeedf1ba8498411645448c7027753cd9090198c02
|
|
Proof = b4f869bf5ec65e0152af5bd29f9fa32c3dfc00355e4e019feda07a281547
|
|
fb2f0c559c600bf6cb52a92753264d1c1367e0134b132880732ec70a8c741d60370e
|
|
5c22c4aca0e4564732b0157858f3c968bda06aab34c71386ec88afe76ec2c14bf56f
|
|
0adf7b05bab826e4aa034cc78837
|
|
ProofRandomScalar = 63798726803c9451ba405f00ef3acb633ddf0c420574a2ec
|
|
6cbf28f840800e355c9fbaac10699686de2724ed22e797a00f3bd93d105a7f23
|
|
Output = 2a08f81bf204eb43a57dbc011946861ed715a2fd3d39a3b35e43c74d07d
|
|
4734149ba163389a02f6cd33fbb5b84e167d35dca7a7dc00b89418398c255c8293ac
|
|
6,80ac73a09fbf8cbd329ff1b7f42d8d14e46ae5b732f776f3203f0680daf2652543
|
|
60da0afcd9dc1d0cd3858ab21ce8e7a19f0426d7e701cfda34fb8238c9e434
|
|
~~~
|
|
|
|
## OPRF(P-256, SHA-256)
|
|
|
|
### OPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 274d7747cf2e26352ecea6bd768c426087da3dfcd466b6841b441ada8412f
|
|
b33
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 02ff9dc7d4350ab6fe1f41299ec5fa8283b6ef37fc62682ea69
|
|
6142e13aad4ae9c
|
|
EvaluationElement = 023a5facf92477164f10cc6bf35b4d9272bfadf98dbabbe7
|
|
b7a137efa1af6546fb
|
|
Output = 488d693c0d43ab75703901fa1398907cf7dc7a90978d1c2f0def63c88e8
|
|
1b8b0
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 03b3cd723330e42975e6e18a6157ecf9455894c18a0189e3e62
|
|
4a46d705f790fcc
|
|
EvaluationElement = 03f1ea590f2cc4afd45a841285c6be4d88825a9c6c04eb55
|
|
a1ca996583dd3e2e9f
|
|
Output = dacd8400f6fae62beabead9bc27869b5109fb5d87da338ae2488712ec25
|
|
f1be9
|
|
~~~
|
|
|
|
### VOPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = b3d12edba73e40401fdc27c0094a56337feb3646d1633345af7e7142a6b15
|
|
59d
|
|
pkSm = 03f9fc787c9a4dda44a4b811a961d1fd60f87be7465b8a1b9058dc534dae7
|
|
0624c
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 02bf13d60f3e39e2018c7be9876d88b52e56c0fc2847c8550e3
|
|
cee152c51cf72ec
|
|
EvaluationElement = 0253e64b5251607348f2b46064805275a849e44db465f649
|
|
267c54bd7a774d670f
|
|
Proof = d0bff8c87ee38f2b2e9e28161fb0f3bc7e4c3bee7329276487d4fd98d4f4
|
|
74fff793a846ffcb44d48f9545e321d89e4e6bccea858089732abf10bf19a220a936
|
|
ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = 9df5d51a9149a86c3660396feabaf790b8c838fc96012adba5acbd913f2
|
|
a4016
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 02a13e263fd9df5aa0078f8d5d6cbe8763e5bee69ee06841a66
|
|
dad0db8701480cf
|
|
EvaluationElement = 02d9f54fcb97bdab47e6664376a75911f1c3e447f5754550
|
|
89d926fbd032cb6e53
|
|
Proof = e3ccd78a2f2428d04599c90d4b45e3de49b38a3ba0c80a224b8125747648
|
|
718319238dd349cdeb533a6d24333b56aafbb202bec1831511717b231b89b8b36853
|
|
ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = beef8ec835625f610d616d32b1d13f2f899f07c0b8089fa48a1f0ecbc5a
|
|
91b8b
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364,f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
|
|
1
|
|
BlindedElement = 02bf13d60f3e39e2018c7be9876d88b52e56c0fc2847c8550e3
|
|
cee152c51cf72ec,0322b89e261428d77367cba2aa78fdfa2b21c2919150cafe802e
|
|
9020c7f95ec180
|
|
EvaluationElement = 0253e64b5251607348f2b46064805275a849e44db465f649
|
|
267c54bd7a774d670f,02182b225cfab1d2e25da200549d8b5e2c4581aa7b7bd85be
|
|
f9b61a14549f58230
|
|
Proof = 900fd64d21320b6059a2810f7046066c4c91a5f4e4f6063c7b51316a4862
|
|
2de8f3a28e5f1d0ebe8ae77fdaacbcb1ae92685243e9ceb813bb749dee6c7123270e
|
|
ProofRandomScalar = 350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
|
|
51943c8026877963
|
|
Output = 9df5d51a9149a86c3660396feabaf790b8c838fc96012adba5acbd913f2
|
|
a4016,beef8ec835625f610d616d32b1d13f2f899f07c0b8089fa48a1f0ecbc5a91b
|
|
8b
|
|
~~~
|
|
|
|
### POPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 59519f6c7da344f340ad35ad895a5b97437673cc3ac8b964b823cdb52c932
|
|
f86
|
|
pkSm = 0335065d006a3db4fb09154024dff38c3188a1027e19ce6932e6824c12764
|
|
47766
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Info = 7465737420696e666f
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 02811b5218bd2bb8361f990efb6062f1201241bcd6f053a5c35
|
|
c34dcd7292e7730
|
|
EvaluationElement = 02555fc8577c4f88eeb13bc6ac53994f8fb287a33a704592
|
|
05ddff91bc19b6a2da
|
|
Proof = d87b112dfa11b77f226b85693ab1b5f63adfa491b6e051e570a12392a926
|
|
c4816778b527526ba6212c4b0597f13e05f5f9b2223429aab82cd2596625ab1cad0b
|
|
ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = af6525716fe5dd844076bb5cb118ceda08c02c2d1a02368922ddad63f40
|
|
f8b44
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 03e9ddbb1fa70461119afcf0ffbfe3fcd105690c14cf0e07872
|
|
e72d4f63aa0e197
|
|
EvaluationElement = 03156037ca1ab2166e924e6197344a9885256de2cd7d9432
|
|
ae36e3f94049e94bbb
|
|
Proof = d087b632e2aa4a67e0bc8b7cf012646217a2dfdbf49c60f236a43c66c72b
|
|
7f2767b85dc93b96a11e3286ef1ff1864b544a68c2c2d8c2bc35ef7cf7dd34189d3e
|
|
ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = 192f4e5d4f89ffe4b9cea5c1c9619ffe32443a5c04fc35f98c3821420cf
|
|
1890c
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364,f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
|
|
1
|
|
BlindedElement = 02811b5218bd2bb8361f990efb6062f1201241bcd6f053a5c35
|
|
c34dcd7292e7730,0366ff91265bb4a9d24130b9e8cd3ecc523084b512b6b0722de4
|
|
4049616b8c374f
|
|
EvaluationElement = 02555fc8577c4f88eeb13bc6ac53994f8fb287a33a704592
|
|
05ddff91bc19b6a2da,032bdb191ef5604cf43d0c37faead30c4b2b21e3f61c0d47c
|
|
cc84850fc5656e500
|
|
Proof = 1bd5f64dffa2ab8d6532122887ed55ad17d114020901a7a01cf2412d568e
|
|
22b6d0536fd6dbefe9f417060468ee3cc451a8f3750f4d8d4acf1e98437248cc7fa2
|
|
ProofRandomScalar = 350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
|
|
51943c8026877963
|
|
Output = af6525716fe5dd844076bb5cb118ceda08c02c2d1a02368922ddad63f40
|
|
f8b44,192f4e5d4f89ffe4b9cea5c1c9619ffe32443a5c04fc35f98c3821420cf189
|
|
0c
|
|
~~~
|
|
|
|
## OPRF(P-384, SHA-384)
|
|
|
|
### OPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = c0503759ddd1e31d8c7eae9304c9b1c16f83d1f6d962e3e7b789cd85fd581
|
|
800e96c5c4256131aafcff9a76919abbd55
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364
|
|
BlindedElement = 0396a1584fedc4d91ddb753a0c49e0aa2298c1936dbc935d60f
|
|
e793d82809f44ff05fbd1922a2cae789d700b5ef4310fb3
|
|
EvaluationElement = 0361804cebcb1873cee5e51efd5257cd8b095521cc0089cf
|
|
4c1100b1d749e212a044eae6d4f3d852e379eeb1bb54047823
|
|
Output = b7ccad41ed7f56be97621bbba8cc3a4f5e8a46a28d72b0fe089d12802f8
|
|
6f080b20726e01a99390aba3437ac50c640d6
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364
|
|
BlindedElement = 0370b0b4649c0880d44c421a3ca7c915b1b6ffa61f5a1290aa2
|
|
2258b006d148e5c105d47725e1ee1b2483b9c5666384038
|
|
EvaluationElement = 036d0aaf31ec411ef8e11c68551434883468e56cbd5d615a
|
|
c8c52b9dc7af326889d52d7466c5eed47f8c89707976aadc64
|
|
Output = ca7dc32dc6434101f35a790717dd591e5963acc86d20fda68011fe228fb
|
|
76be8da7f42c6a92284df88fb8e69480a3cb9
|
|
~~~
|
|
|
|
### VOPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 514fb6fe2e66af1383840759d56f71730331280f062930ee2a2f7ea42f935
|
|
acf94087355699d788abfdf09d19a5c85ac
|
|
pkSm = 02f773b99e65ad26e8cd20614910ce7ad74c1baa5bdbfd9f124389dc8ef44
|
|
b5989f5bf036f6802dc2242fd7068b73da29f
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364
|
|
BlindedElement = 03022e23d8356d74d8f9a24ade759fb4e7cf050d1a770110878
|
|
83d4db52f16751d8d987fa49764c157c1039c4cdfa5ef7a
|
|
EvaluationElement = 0202bdefbc2d55a37aa848df5efc561055235d9190da9ec3
|
|
0ccfb84d93b033a29c4fb1968c55c63a0b90a205e1e9c4c19f
|
|
Proof = 929ee0254047350f580cdbd6fca706a9d110e4fc0aa1383af8d35a536795
|
|
69c038d90900e8810eca177b9cfd6a2d0f1fb5ed7a2e0f3107719cbd9c74ab7d9502
|
|
79869f67551b629c3706c8f9cee651d700453ca44e43b0a08c05502cd28f3960
|
|
ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
|
|
c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
|
|
Output = 7eb3cc88d920431c3a5ea3fb6e36b515b6d82c5ef537e285918fe7c741e
|
|
97819ce029657d6cced0f8850f47ff281c444
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364
|
|
BlindedElement = 037ae30a62126a39ca791aadafb65769c812a559c7da92820e1
|
|
43350b6bb8cefb543af2e0179664f9cd0d1499c018a0b18
|
|
EvaluationElement = 0355f95a68e8c4f0d40910e9a85f09109e4e7fff84f75db1
|
|
a4aa8e21c451ac2d872113b497bea6c0be1b535241557032a2
|
|
Proof = f4ec262642fc9981fe5d1f0a3737f2d09ec9b056f577224013f5a3d09812
|
|
fb22c6b45e17150d8fe3a8c7e63094cdf40a60ae1e50fc2e1678954c1ecbaed2f7d0
|
|
7e6d597fffedc7aca450ed64164c46e62d1326ff1f6eaeba4b5dd151e953e060
|
|
ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
|
|
c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
|
|
Output = fb538f84dae5f214c5adfcf529c6fe63bc46d6a4073d540cf0dabcc7c8e
|
|
0f3c1b43b606002a9aa52ae158a19d900c136
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364,803d955f0e073a04aa5d92b3fb739f5
|
|
6f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
|
|
BlindedElement = 03022e23d8356d74d8f9a24ade759fb4e7cf050d1a770110878
|
|
83d4db52f16751d8d987fa49764c157c1039c4cdfa5ef7a,031ee43111a2406b09eb
|
|
4fb2a3a5fd7c690c0aa51158af766c9df1428bb18195f054c5f68ae1863e6ab3dd42
|
|
98b3db712b
|
|
EvaluationElement = 0202bdefbc2d55a37aa848df5efc561055235d9190da9ec3
|
|
0ccfb84d93b033a29c4fb1968c55c63a0b90a205e1e9c4c19f,021fdbb3b92cf4f8e
|
|
04534bc1a9f62596667c3ea49a6e89f1610b9f7f89708e8730df159827ea92e26fcf
|
|
db2063920c89c
|
|
Proof = 9cc7fe5a120cec6ef0d877260cf1af1861f281aa0015f371c8830f93f286
|
|
8f5891ee6f32ec6fcbe130a50de24c93b131261eb4a242941c8d5ad9ad2f2be402d9
|
|
386ac4afcf5e5498f35cc3db0442a77e139eb56a7b3435177e7bf1a48cef184a
|
|
ProofRandomScalar = a097e722ed2427de86966910acba9f5c350e8040f828bf6c
|
|
eca27405420cdf3d63cb3aef005f40ba51943c8026877963
|
|
Output = 7eb3cc88d920431c3a5ea3fb6e36b515b6d82c5ef537e285918fe7c741e
|
|
97819ce029657d6cced0f8850f47ff281c444,fb538f84dae5f214c5adfcf529c6fe
|
|
63bc46d6a4073d540cf0dabcc7c8e0f3c1b43b606002a9aa52ae158a19d900c136
|
|
~~~
|
|
|
|
### POPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 0fcba4a204f67d6c13f780e613915f755319aaa3cb03cd20a5a4a6c403a48
|
|
12a4fff5d3223e2c309aa66b05cb7611fd4
|
|
pkSm = 03a571100213c4356177af14a7039cfee270ad1f9abde42ac3418c501209e
|
|
d7b2fc0d4aa3373c12ba956fb555b02843fc8
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Info = 7465737420696e666f
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364
|
|
BlindedElement = 03156aece0ce92e9eb8f7a9b7f6bd30230a048d41384f2fe49f
|
|
1f9f69e180c23390e3ba8d0ee66dde6d637f03c06385f76
|
|
EvaluationElement = 02352ec7586660cc4257a9e78366727341db0825e431fc82
|
|
4a70a91019b67be26d8b880b2d4d8e734207d4a21a23429d74
|
|
Proof = 77bb1ca3ba4013b93ccb302db838839098eca743de542d3c79d189f2adf0
|
|
01999583a01aead6c248a32ff13b7f1f3d6b2dd04f653a5beb0f0394ad83ce5e79ea
|
|
08ae029d669b918b6d62ed3b77b08a07f04bbc341fae06444d196746da4da884
|
|
ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
|
|
c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
|
|
Output = fa15c0fe8706ac256dfd3c38d21ba0cd57b927cfcf3e4d6d5554ec1272e
|
|
670079b95cdbb2778e0df22baf50f33e12607
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364
|
|
BlindedElement = 02d46e0e2d27d8bb126e1201e881d0070b8807cb5635687b20d
|
|
d4a3a248e7a40c50a1ad3e905e43342771eb23bc8827a00
|
|
EvaluationElement = 030879805ff65cb536293a1449c00824e55c4c1b25379f2e
|
|
c17d97923055169a6d97b46ed7b11bb661cc8cb9535abc3d66
|
|
Proof = 9982a8501f45839213441d4ec501cf496d06fffab65f13ca3b3e66d21398
|
|
fe9e0e04aafdf50eae214fa9cccad3c53d524d0f8c185ed60b11fcf5c7e82e10a8d3
|
|
f3b2ce1e4a004d65e6ad596eeb5738453465d881f2770858cd46ac32f0e16121
|
|
ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
|
|
c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
|
|
Output = 77cb533216c32cac017d706d5f0ee4630bcb0bfefbb980d95e98dc240ab
|
|
c70a944a44cde69b805aee3a39b2eb7d834be
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
|
|
889d89dbfa691d1cde91517fa222ed7ad364,803d955f0e073a04aa5d92b3fb739f5
|
|
6f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
|
|
BlindedElement = 03156aece0ce92e9eb8f7a9b7f6bd30230a048d41384f2fe49f
|
|
1f9f69e180c23390e3ba8d0ee66dde6d637f03c06385f76,025663d73e3418039fdd
|
|
ea1a212d254ec0103f28904e588b73c7da8298347706b2f69902a98e8d01c7aaa69a
|
|
297b14c7dc
|
|
EvaluationElement = 02352ec7586660cc4257a9e78366727341db0825e431fc82
|
|
4a70a91019b67be26d8b880b2d4d8e734207d4a21a23429d74,02f8e532fabdd09bb
|
|
2a7391a2a80c14f265c0456009199b77eefac1013d4a4f449dfe46d5d6d2d4d74f8c
|
|
9fb1e2868b611
|
|
Proof = f8c938b5d2aff7d1a05ecdcf4178d682fe7b35c375be5db88dfa59f488c6
|
|
e4a68d4f99f16330a06f918e264ad68a78fdfad91446b72e1a3da2a65e531d520dd0
|
|
4fd91dd49b09037648e04a44e83d0dfd2aab7627e7389818924ad9bff591d646
|
|
ProofRandomScalar = a097e722ed2427de86966910acba9f5c350e8040f828bf6c
|
|
eca27405420cdf3d63cb3aef005f40ba51943c8026877963
|
|
Output = fa15c0fe8706ac256dfd3c38d21ba0cd57b927cfcf3e4d6d5554ec1272e
|
|
670079b95cdbb2778e0df22baf50f33e12607,77cb533216c32cac017d706d5f0ee4
|
|
630bcb0bfefbb980d95e98dc240abc70a944a44cde69b805aee3a39b2eb7d834be
|
|
~~~
|
|
|
|
## OPRF(P-521, SHA-512)
|
|
|
|
### OPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 0152e55f3a5d836ab6c2091a904ba4b4f92e51ba59ecc211b4fc771f7c6c8
|
|
b17fcbbb2bed8a65afd7811ceeec3eac83df6a58515b6d3c71ee0ffc349e28c3fb78
|
|
d83
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 03016480f33f005c8a8eb1003e48ebc22e082d0b86678f8460e
|
|
df21cc1518a13bfc0001fa143d474b18214188d93a7b3124b1b385db4cd4e356ad24
|
|
923ae55d70ce8a7
|
|
EvaluationElement = 03005fdb56bf49fcd073b1c4cfb42ceef5666c709785ae82
|
|
d659e4d75c0f5591cbf812ca9ffd992ac67c1877b63978f417687a2a6c17697e858c
|
|
f715843f9e4235566a
|
|
Output = ddcaaceceec790f4858a09f3e06e74e8b0841681a3d45ab1393d0948379
|
|
43f782d9ed22ae716a642d4ee428ddf1dae9ff631047864b99a305412aceb7efafa3
|
|
2
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 02000e860d3b8205e0cb4f289771c8e6189b47c60cbff24459e
|
|
12a60317ac242e9cb36ab033a620cdee5628ecae4a81303e7464d52194d801756911
|
|
fd7ddfa5430e69c
|
|
EvaluationElement = 0300e2663f17144682b25de378531abd6d065b770eec073a
|
|
42494719f27748f75b4ab11aecb06bf8815bcc9eeb3ce54978605bd8a54c22a1dea6
|
|
2da1ae5f9f5e5e90f4
|
|
Output = 287712c6dbed773f39925fec0ad686dfda4a679cc7e88fa60ba9d3a7d71
|
|
2a11d4a0445995391ba56cfb018922e0d4bb4b25ec0965a33170c9b00f45c361b021
|
|
5
|
|
~~~
|
|
|
|
### VOPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 00fb5507f94782c5b72acc16b9eb21064f86b4aa525b9865258d157b0431a
|
|
b5c3515fc975fa19ddb28129c969992b31d8946c4e354bc49458bb25fae58f10ac3f
|
|
678
|
|
pkSm = 0301322c63ad53e079791739169e011f362f4396a8e93fceeee9cd814d471
|
|
80e75ffd717820fe9e9c763fa595340cd80989c31fbd0200572080752c73b80b7532
|
|
2f300
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 02016dafe8eee47b591592705ce4d5231563b637e5a51b425b8
|
|
81f1cc576c53caae4ec59fd6e3a918d5c35e6db77cf3a5862b71a8b6c7eaded3ebdf
|
|
0c6e14778c03a8c
|
|
EvaluationElement = 020124a0ee09ade261bbf67e1e3d296655c97e6c5c14c71a
|
|
386e636d8f55d29f5f6dcec954ff28bfc7e6e63240a52bf278ae94b312be3d8bf850
|
|
55d2a1dbab687905b0
|
|
Proof = 00156561564a9128de6e2fb92d0ee065bb19192ff86549c37fab777f2d57
|
|
a951ff94b3832162cf02ad73287a0f0906045878105d8ab54a7cc9a1a0039d0cb241
|
|
ebd10197e5cef77e8fbe0414f86b86fe2e823e0d8dbdcf2ccac54d273e814da062ba
|
|
941a27d1e7e28c44cdbdaffe392cc915bf8b9add15d51b68afd6e88a52d07ff8b3d1
|
|
ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
|
|
3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = 16a9387153bf7fa2c733d42f299877324cfce3b39093e72067c3d59948b
|
|
f745d77b2fe9180ffb442ec45b575eb4108d2b6f207cbfabd7bc540ad2a087cfabca
|
|
2
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 02008f585341e32244d67033ddcf4c1cc30f7661c4cfc177f09
|
|
82c69bf9c90e1da02d86a26ece60b8c42b278a1dc85afcc9cbc6aedff15cc092af03
|
|
5100b915c2bb4df
|
|
EvaluationElement = 03006cfeb22e141859e6a2050a714bde8ab8109abb2b42bc
|
|
8f18ace67121c1811c9e95e7cf8ffd4f13f8cee80fc3c69318b0eb30ecdf6e7d7e84
|
|
faefa6f0b8299217fe
|
|
Proof = 01db7070ab756e8c2b12cb81c40daac6ef1d5137be3626a10ee867b0b736
|
|
ae5ab05aadbc3ee3d1d0202b7687e1614765893cba67b307c67a8a4ce7b3eaf3ba64
|
|
204901ce6f8dc9234d27373b1027982d7e3bb196d157403f50c2f1bf0fa701753ef6
|
|
3d7265c0b1016e662456d4bdea55b3d983350b2c2ce80e192897161a1b780046b952
|
|
ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
|
|
3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = 0163635204be5347419796f3564b36d6e89c9170e4fcca5b6df79d3f676
|
|
f641b2ae3ae1a64cc49f3d788e276abe14e3c38bb2f92fdba0b45ed122a6930e7d96
|
|
1
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364,015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e073a04aa5d92b3fb7
|
|
39f56f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
|
|
1
|
|
BlindedElement = 02016dafe8eee47b591592705ce4d5231563b637e5a51b425b8
|
|
81f1cc576c53caae4ec59fd6e3a918d5c35e6db77cf3a5862b71a8b6c7eaded3ebdf
|
|
0c6e14778c03a8c,03005467c05309dd2b9ef584dd33ae30e93ae5508f2ceda71497
|
|
63b4b44fe797f7d0f4c7441298a0ed821ede9ebdc8c0215f96db57c64feb734a145f
|
|
00d00f0f222db1
|
|
EvaluationElement = 020124a0ee09ade261bbf67e1e3d296655c97e6c5c14c71a
|
|
386e636d8f55d29f5f6dcec954ff28bfc7e6e63240a52bf278ae94b312be3d8bf850
|
|
55d2a1dbab687905b0,0300fdf99a9eb28097074daf75ba9fe16868690b16165f58f
|
|
9c4fa266d5fffa5a87026a98ac3b0ca6dc7e42f49140a004c325646aec5ddc778db7
|
|
08748cc2f632ed937
|
|
Proof = 01935896f4c03ea5257d6471677f191ea7dfc777cc1e15f82e423cf1948c
|
|
440ee56a1c5a8627aad8da8e507a7f382b45255e55a1f1afc99c6b14237ce7cf0855
|
|
40fa000fe413be351bd11ac910b1d4af34d2c97c7b7a53438340dd659272f3d86470
|
|
35b13cd8072903b9a3adf8e89bfb1f77d732fa224f32674506e3e88e29ce182186e3
|
|
ProofRandomScalar = 01ec21c7bb69b0734cb48dfd68433dd93b0fa097e722ed24
|
|
27de86966910acba9f5c350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
|
|
51943c8026877963
|
|
Output = 16a9387153bf7fa2c733d42f299877324cfce3b39093e72067c3d59948b
|
|
f745d77b2fe9180ffb442ec45b575eb4108d2b6f207cbfabd7bc540ad2a087cfabca
|
|
2,0163635204be5347419796f3564b36d6e89c9170e4fcca5b6df79d3f676f641b2a
|
|
e3ae1a64cc49f3d788e276abe14e3c38bb2f92fdba0b45ed122a6930e7d961
|
|
~~~
|
|
|
|
### POPRF Mode
|
|
|
|
~~~
|
|
Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
|
|
3a3
|
|
KeyInfo = 74657374206b6579
|
|
skSm = 01e0993daeb97f8fc8176089e4e6adb4c03dc9b18daf7e976ed7fa6f3cb89
|
|
c40c6a84156f20371ef23bfe6e049423244d7d746c79ad380ac7fe285aba162419e9
|
|
012
|
|
pkSm = 0301264d23f5d1d615f9747d2a7177a419dabde6ca0f5a047979dbe9bce33
|
|
7241b7d2959025476f354c4f57017363d667b83b691fad8c172959963e6000de9533
|
|
f187a
|
|
~~~
|
|
|
|
#### Test Vector 1, Batch Size 1
|
|
|
|
~~~
|
|
Input = 00
|
|
Info = 7465737420696e666f
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 0200e36b187060fef4f4cfef21cdb4ef8b5793a1bf44da95229
|
|
062303688d4cf6a50c16b7c943c79d91357223b56866351a17a9c7f49730fd28add9
|
|
301d399c0cf206c
|
|
EvaluationElement = 03014e216c05cf1d108829946891cc44693b0a411851a03f
|
|
c439130054d920eb8ad596a4dfa5314f68d298a094777855aa55c98480575a3816cf
|
|
ac52f838693e0e7fe5
|
|
Proof = 00c5a46ff1e7d8cd2711daf8ec8752451c4c7ed815f3e8d51db64f1eed83
|
|
a7cc33f0f99ce067676c478bd616a9ef6377994e4bd69051424a576a4e26f0ec7ed8
|
|
1fd000b7ae1eaee9e5b6991afdbb2c9c29a04e2ab3a2066df89308410a59267a60a2
|
|
2a47666de009646c78e9094c9f4de177a620e97f63e35ada0c8b438b4605248c9087
|
|
ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
|
|
3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = 3be90ca19fbe2fc250de62792c7cf4b6b5555c8655fce1694fc7563d5d4
|
|
c5001efd1e91fbbaea31d75e33dbdefe57420c395f1ac805cc0095c4d81a0beddcb0
|
|
1
|
|
~~~
|
|
|
|
#### Test Vector 2, Batch Size 1
|
|
|
|
~~~
|
|
Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364
|
|
BlindedElement = 0300357933cc17cdcce862b794a4161d8eb10d23009695639e3
|
|
fdc8dffc235e19e92e0a3d3c7c6249dd9dcd02da0a8f061d89b6809d3292951ee0e9
|
|
ead21a62d1335fe
|
|
EvaluationElement = 0300a5132ae9c429dd33b25c051f45451c6e54e154d698c3
|
|
f3d8820bd9607e7a65762911c647b3460be166f37ba443bf000b23552298f14e0555
|
|
b3f0ddf0e900e1d38c
|
|
Proof = 0004f0791cbe6ac6f4074834e172beedea19ecd3a2c504a71fd870b42314
|
|
d3b072633a8265c774668274dcbcaebf1726768fab4edec69a33a7d37095ebef3e1b
|
|
b44900f0a175b56ceeae8a87bc5553405e0b030ebcf8303befc5890c8afa1e61fd41
|
|
66480ff428eae4193f12bbf1fc31d5d7196ce8692e37bc9a63cdf4c9fafe10a2dc9a
|
|
ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
|
|
3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
|
|
e45c405d1348b7b1
|
|
Output = 1d90446522e3c131e90be2e4f372959ae5ab4f25ca98e83e5e62d6336c4
|
|
8b5ec22fc6083d2b050cad2bbc22ae7115c2b934d965ffe74aaa43c905cd2af76728
|
|
d
|
|
~~~
|
|
|
|
#### Test Vector 3, Batch Size 2
|
|
|
|
~~~
|
|
Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
|
|
Info = 7465737420696e666f
|
|
Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
|
|
88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
|
|
d364,015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e073a04aa5d92b3fb7
|
|
39f56f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
|
|
1
|
|
BlindedElement = 0200e36b187060fef4f4cfef21cdb4ef8b5793a1bf44da95229
|
|
062303688d4cf6a50c16b7c943c79d91357223b56866351a17a9c7f49730fd28add9
|
|
301d399c0cf206c,03007530916e8ec76199429667a82ca4df65b913d8b1fb157319
|
|
e73706f118b4f46047c01b7da024bdf5a06f2f4e879b1a1cd3fcb1ca2c37ce158cc8
|
|
625e76b3bb1cc4
|
|
EvaluationElement = 03014e216c05cf1d108829946891cc44693b0a411851a03f
|
|
c439130054d920eb8ad596a4dfa5314f68d298a094777855aa55c98480575a3816cf
|
|
ac52f838693e0e7fe5,0200005cf5e719b3066dcf0fbd6228bc921cebccc49feb1ac
|
|
be9d9c4c88f4169e1d0d5408f92ad9f599c2f5f6d7d4c6e575e86f64c4eead2bb9b3
|
|
e8e04d141a90b7382
|
|
Proof = 00d846f4a2a7722fe6a24e7257e43d88c3e01977282fba352c08fd38b69b
|
|
f1df64f90660b03b73abba50cb389af3d602da66411401d3c9f87bcb6363d6406e0a
|
|
cad3018a44bcda83524d4a48f0ed96ebca96d7626b634ba28fcba0c21956fc90c516
|
|
859df8ba6edeb7a44daeeec51c3a56b79c1f9e211e9974e5f293ade221523953d12f
|
|
ProofRandomScalar = 01ec21c7bb69b0734cb48dfd68433dd93b0fa097e722ed24
|
|
27de86966910acba9f5c350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
|
|
51943c8026877963
|
|
Output = 3be90ca19fbe2fc250de62792c7cf4b6b5555c8655fce1694fc7563d5d4
|
|
c5001efd1e91fbbaea31d75e33dbdefe57420c395f1ac805cc0095c4d81a0beddcb0
|
|
1,1d90446522e3c131e90be2e4f372959ae5ab4f25ca98e83e5e62d6336c48b5ec22
|
|
fc6083d2b050cad2bbc22ae7115c2b934d965ffe74aaa43c905cd2af76728d
|
|
~~~
|
|
"#;
|