p521: add Wycheproof test vectors

[tarcieri]

Generated using the wycheproof2blb utility:

$ cargo run ~/src/wycheproof secp521r1 521 wycheproof.blb desc.txt

This required a small change to wycheproof2blb:

RustCrypto/utils#980

Includes the following test vectors:

ECDSA case 1 [valid] signature malleability
ECDSA case 2 [valid] valid
ECDSA case 3 [invalid] length of sequence contains leading 0 ECDSA case 4 [invalid] wrong length of sequence
ECDSA case 5 [invalid] wrong length of sequence
ECDSA case 6 [invalid] uint32 overflow in length of sequence ECDSA case 7 [invalid] uint64 overflow in length of sequence ECDSA case 8 [invalid] length of sequence = 2**31 - 1 ECDSA case 9 [invalid] length of sequence = 2**32 - 1 ECDSA case 10 [invalid] length of sequence = 2**40 - 1 ECDSA case 11 [invalid] length of sequence = 2**64 - 1 ECDSA case 12 [invalid] incorrect length of sequence ECDSA case 13 [invalid] indefinite length without termination ECDSA case 14 [invalid] indefinite length without termination ECDSA case 15 [invalid] indefinite length without termination ECDSA case 16 [invalid] removing sequence
ECDSA case 17 [invalid] lonely sequence tag
ECDSA case 18 [invalid] appending 0's to sequence
ECDSA case 19 [invalid] prepending 0's to sequence ECDSA case 20 [invalid] appending unused 0's to sequence ECDSA case 21 [invalid] appending null value to sequence ECDSA case 22 [invalid] including garbage
ECDSA case 23 [invalid] including garbage
ECDSA case 24 [invalid] including garbage
ECDSA case 25 [invalid] including garbage
ECDSA case 26 [invalid] including garbage
ECDSA case 27 [invalid] including garbage
ECDSA case 28 [invalid] including garbage
ECDSA case 29 [invalid] including garbage
ECDSA case 30 [invalid] including garbage
ECDSA case 31 [invalid] including undefined tags
ECDSA case 32 [invalid] including undefined tags
ECDSA case 33 [invalid] including undefined tags
ECDSA case 34 [invalid] including undefined tags
ECDSA case 35 [invalid] including undefined tags
ECDSA case 36 [invalid] including undefined tags
ECDSA case 37 [invalid] truncated length of sequence ECDSA case 38 [invalid] using composition with indefinite length ECDSA case 39 [invalid] using composition with indefinite length ECDSA case 40 [invalid] using composition with indefinite length ECDSA case 41 [invalid] using composition with wrong tag ECDSA case 42 [invalid] using composition with wrong tag ECDSA case 43 [invalid] using composition with wrong tag ECDSA case 44 [invalid] Replacing sequence with NULL ECDSA case 45 [invalid] changing tag value of sequence ECDSA case 46 [invalid] changing tag value of sequence ECDSA case 47 [invalid] changing tag value of sequence ECDSA case 48 [invalid] changing tag value of sequence ECDSA case 49 [invalid] changing tag value of sequence ECDSA case 50 [invalid] dropping value of sequence ECDSA case 51 [invalid] using composition for sequence ECDSA case 52 [invalid] truncated sequence
ECDSA case 53 [invalid] truncated sequence
ECDSA case 54 [invalid] indefinite length
ECDSA case 55 [invalid] indefinite length with truncated delimiter ECDSA case 56 [invalid] indefinite length with additional element ECDSA case 57 [invalid] indefinite length with truncated element ECDSA case 58 [invalid] indefinite length with garbage ECDSA case 59 [invalid] indefinite length with nonempty EOC ECDSA case 60 [invalid] prepend empty sequence
ECDSA case 61 [invalid] append empty sequence
ECDSA case 62 [invalid] append garbage with high tag number ECDSA case 63 [invalid] sequence of sequence
ECDSA case 64 [invalid] truncated sequence: removed last 1 elements ECDSA case 65 [invalid] repeating element in sequence ECDSA case 66 [invalid] long form encoding of length of integer ECDSA case 67 [invalid] long form encoding of length of integer ECDSA case 68 [invalid] length of integer contains leading 0 ECDSA case 69 [invalid] length of integer contains leading 0 ECDSA case 70 [invalid] wrong length of integer
ECDSA case 71 [invalid] wrong length of integer
ECDSA case 72 [invalid] wrong length of integer
ECDSA case 73 [invalid] wrong length of integer
ECDSA case 74 [invalid] uint32 overflow in length of integer ECDSA case 75 [invalid] uint32 overflow in length of integer ECDSA case 76 [invalid] uint64 overflow in length of integer ECDSA case 77 [invalid] uint64 overflow in length of integer ECDSA case 78 [invalid] length of integer = 2**31 - 1 ECDSA case 79 [invalid] length of integer = 2**31 - 1 ECDSA case 80 [invalid] length of integer = 2**32 - 1 ECDSA case 81 [invalid] length of integer = 2**32 - 1 ECDSA case 82 [invalid] length of integer = 2**40 - 1 ECDSA case 83 [invalid] length of integer = 2**40 - 1 ECDSA case 84 [invalid] length of integer = 2**64 - 1 ECDSA case 85 [invalid] length of integer = 2**64 - 1 ECDSA case 86 [invalid] incorrect length of integer ECDSA case 87 [invalid] incorrect length of integer ECDSA case 88 [invalid] removing integer
ECDSA case 89 [invalid] lonely integer tag
ECDSA case 90 [invalid] lonely integer tag
ECDSA case 91 [invalid] appending 0's to integer
ECDSA case 92 [invalid] appending 0's to integer
ECDSA case 93 [invalid] prepending 0's to integer
ECDSA case 94 [invalid] prepending 0's to integer
ECDSA case 95 [invalid] appending unused 0's to integer ECDSA case 96 [invalid] appending null value to integer ECDSA case 97 [invalid] appending null value to integer ECDSA case 98 [invalid] truncated length of integer ECDSA case 99 [invalid] truncated length of integer ECDSA case 100 [invalid] Replacing integer with NULL ECDSA case 101 [invalid] Replacing integer with NULL ECDSA case 102 [invalid] changing tag value of integer ECDSA case 103 [invalid] changing tag value of integer ECDSA case 104 [invalid] changing tag value of integer ECDSA case 105 [invalid] changing tag value of integer ECDSA case 106 [invalid] changing tag value of integer ECDSA case 107 [invalid] changing tag value of integer ECDSA case 108 [invalid] changing tag value of integer ECDSA case 109 [invalid] changing tag value of integer ECDSA case 110 [invalid] changing tag value of integer ECDSA case 111 [invalid] changing tag value of integer ECDSA case 112 [invalid] dropping value of integer ECDSA case 113 [invalid] dropping value of integer ECDSA case 114 [invalid] using composition for integer ECDSA case 115 [invalid] using composition for integer ECDSA case 116 [invalid] modify first byte of integer ECDSA case 117 [invalid] modify first byte of integer ECDSA case 118 [invalid] modify last byte of integer ECDSA case 119 [invalid] modify last byte of integer ECDSA case 120 [invalid] truncated integer
ECDSA case 121 [invalid] truncated integer
ECDSA case 122 [invalid] truncated integer
ECDSA case 123 [invalid] truncated integer
ECDSA case 124 [invalid] leading ff in integer
ECDSA case 125 [invalid] leading ff in integer
ECDSA case 126 [invalid] replaced integer by infinity ECDSA case 127 [invalid] replaced integer by infinity ECDSA case 128 [invalid] replacing integer with zero ECDSA case 129 [invalid] replacing integer with zero ECDSA case 130 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 131 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 132 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 133 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 134 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 135 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 136 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 137 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 138 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 139 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 140 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 141 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 142 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 143 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 144 [invalid] Modified r or s, e.g. by adding or subtracting the order of the group ECDSA case 145 [invalid] Signature with special case values for r and s ECDSA case 146 [invalid] Signature with special case values for r and s ECDSA case 147 [invalid] Signature with special case values for r and s ECDSA case 148 [invalid] Signature with special case values for r and s ECDSA case 149 [invalid] Signature with special case values for r and s ECDSA case 150 [invalid] Signature with special case values for r and s ECDSA case 151 [invalid] Signature with special case values for r and s ECDSA case 152 [invalid] Signature with special case values for r and s ECDSA case 153 [invalid] Signature with special case values for r and s ECDSA case 154 [invalid] Signature with special case values for r and s ECDSA case 155 [invalid] Signature with special case values for r and s ECDSA case 156 [invalid] Signature with special case values for r and s ECDSA case 157 [invalid] Signature with special case values for r and s ECDSA case 158 [invalid] Signature with special case values for r and s ECDSA case 159 [invalid] Signature with special case values for r and s ECDSA case 160 [invalid] Signature with special case values for r and s ECDSA case 161 [invalid] Signature with special case values for r and s ECDSA case 162 [invalid] Signature with special case values for r and s ECDSA case 163 [invalid] Signature with special case values for r and s ECDSA case 164 [invalid] Signature with special case values for r and s ECDSA case 165 [invalid] Signature with special case values for r and s ECDSA case 166 [invalid] Signature with special case values for r and s ECDSA case 167 [invalid] Signature with special case values for r and s ECDSA case 168 [invalid] Signature with special case values for r and s ECDSA case 169 [invalid] Signature with special case values for r and s ECDSA case 170 [invalid] Signature with special case values for r and s ECDSA case 171 [invalid] Signature with special case values for r and s ECDSA case 172 [invalid] Signature with special case values for r and s ECDSA case 173 [invalid] Signature with special case values for r and s ECDSA case 174 [invalid] Signature with special case values for r and s ECDSA case 175 [invalid] Signature with special case values for r and s ECDSA case 176 [invalid] Signature with special case values for r and s ECDSA case 177 [invalid] Signature with special case values for r and s ECDSA case 178 [invalid] Signature with special case values for r and s ECDSA case 179 [invalid] Signature with special case values for r and s ECDSA case 180 [invalid] Signature with special case values for r and s ECDSA case 181 [invalid] Signature with special case values for r and s ECDSA case 182 [invalid] Signature with special case values for r and s ECDSA case 183 [invalid] Signature with special case values for r and s ECDSA case 184 [invalid] Signature with special case values for r and s ECDSA case 185 [invalid] Signature with special case values for r and s ECDSA case 186 [invalid] Signature with special case values for r and s ECDSA case 187 [invalid] Signature with special case values for r and s ECDSA case 188 [invalid] Signature with special case values for r and s ECDSA case 189 [invalid] Signature with special case values for r and s ECDSA case 190 [invalid] Signature with special case values for r and s ECDSA case 191 [invalid] Signature with special case values for r and s ECDSA case 192 [invalid] Signature with special case values for r and s ECDSA case 193 [invalid] Signature with special case values for r and s ECDSA case 194 [invalid] Signature with special case values for r and s ECDSA case 195 [invalid] Signature with special case values for r and s ECDSA case 196 [invalid] Signature with special case values for r and s ECDSA case 197 [invalid] Signature with special case values for r and s ECDSA case 198 [invalid] Signature with special case values for r and s ECDSA case 199 [invalid] Signature with special case values for r and s ECDSA case 200 [invalid] Signature with special case values for r and s ECDSA case 201 [invalid] Signature with special case values for r and s ECDSA case 202 [invalid] Signature with special case values for r and s ECDSA case 203 [invalid] Signature with special case values for r and s ECDSA case 204 [invalid] Signature with special case values for r and s ECDSA case 205 [invalid] Signature with special case values for r and s ECDSA case 206 [invalid] Signature with special case values for r and s ECDSA case 207 [invalid] Signature with special case values for r and s ECDSA case 208 [invalid] Signature with special case values for r and s ECDSA case 209 [invalid] Signature with special case values for r and s ECDSA case 210 [invalid] Signature with special case values for r and s ECDSA case 211 [invalid] Signature with special case values for r and s ECDSA case 212 [invalid] Signature with special case values for r and s ECDSA case 213 [invalid] Signature with special case values for r and s ECDSA case 214 [invalid] Signature with special case values for r and s ECDSA case 215 [invalid] Signature with special case values for r and s ECDSA case 216 [invalid] Signature with special case values for r and s ECDSA case 217 [invalid] Signature with special case values for r and s ECDSA case 218 [invalid] Signature with special case values for r and s ECDSA case 219 [invalid] Signature with special case values for r and s ECDSA case 220 [invalid] Signature with special case values for r and s ECDSA case 221 [invalid] Signature with special case values for r and s ECDSA case 222 [invalid] Signature with special case values for r and s ECDSA case 223 [invalid] Signature with special case values for r and s ECDSA case 224 [invalid] Signature with special case values for r and s ECDSA case 225 [invalid] Signature encoding contains wrong types. ECDSA case 226 [invalid] Signature encoding contains wrong types. ECDSA case 227 [invalid] Signature encoding contains wrong types. ECDSA case 228 [invalid] Signature encoding contains wrong types. ECDSA case 229 [invalid] Signature encoding contains wrong types. ECDSA case 230 [invalid] Signature encoding contains wrong types. ECDSA case 231 [valid] Edge case for Shamir multiplication ECDSA case 232 [valid] special case hash
ECDSA case 233 [valid] special case hash
ECDSA case 234 [valid] special case hash
ECDSA case 235 [valid] special case hash
ECDSA case 236 [valid] special case hash
ECDSA case 237 [valid] special case hash
ECDSA case 238 [valid] special case hash
ECDSA case 239 [valid] special case hash
ECDSA case 240 [valid] special case hash
ECDSA case 241 [valid] special case hash
ECDSA case 242 [valid] special case hash
ECDSA case 243 [valid] special case hash
ECDSA case 244 [valid] special case hash
ECDSA case 245 [valid] special case hash
ECDSA case 246 [valid] special case hash
ECDSA case 247 [valid] special case hash
ECDSA case 248 [valid] special case hash
ECDSA case 249 [valid] special case hash
ECDSA case 250 [valid] special case hash
ECDSA case 251 [valid] special case hash
ECDSA case 252 [valid] special case hash
ECDSA case 253 [valid] special case hash
ECDSA case 254 [valid] special case hash
ECDSA case 255 [valid] special case hash
ECDSA case 256 [valid] special case hash
ECDSA case 257 [valid] special case hash
ECDSA case 258 [valid] special case hash
ECDSA case 259 [valid] special case hash
ECDSA case 260 [valid] special case hash
ECDSA case 261 [valid] special case hash
ECDSA case 262 [valid] special case hash
ECDSA case 263 [valid] special case hash
ECDSA case 264 [valid] special case hash
ECDSA case 265 [valid] special case hash
ECDSA case 266 [valid] special case hash
ECDSA case 267 [valid] special case hash
ECDSA case 268 [valid] special case hash
ECDSA case 269 [valid] special case hash
ECDSA case 270 [valid] special case hash
ECDSA case 271 [valid] special case hash
ECDSA case 272 [valid] special case hash
ECDSA case 273 [valid] special case hash
ECDSA case 274 [valid] special case hash
ECDSA case 275 [valid] special case hash
ECDSA case 276 [valid] special case hash
ECDSA case 277 [valid] special case hash
ECDSA case 278 [valid] special case hash
ECDSA case 279 [valid] special case hash
ECDSA case 280 [valid] special case hash
ECDSA case 281 [valid] special case hash
ECDSA case 282 [valid] special case hash
ECDSA case 283 [valid] special case hash
ECDSA case 284 [valid] special case hash
ECDSA case 285 [valid] special case hash
ECDSA case 286 [valid] special case hash
ECDSA case 287 [valid] special case hash
ECDSA case 288 [valid] special case hash
ECDSA case 289 [valid] special case hash
ECDSA case 290 [valid] special case hash
ECDSA case 291 [valid] special case hash
ECDSA case 292 [valid] special case hash
ECDSA case 293 [valid] special case hash
ECDSA case 294 [valid] special case hash
ECDSA case 295 [valid] special case hash
ECDSA case 296 [valid] special case hash
ECDSA case 297 [valid] special case hash
ECDSA case 298 [valid] special case hash
ECDSA case 299 [valid] special case hash
ECDSA case 300 [valid] special case hash
ECDSA case 301 [valid] special case hash
ECDSA case 302 [valid] special case hash
ECDSA case 303 [valid] special case hash
ECDSA case 304 [valid] special case hash
ECDSA case 305 [valid] special case hash
ECDSA case 306 [valid] special case hash
ECDSA case 307 [valid] special case hash
ECDSA case 308 [valid] special case hash
ECDSA case 309 [valid] special case hash
ECDSA case 310 [valid] special case hash
ECDSA case 311 [valid] special case hash
ECDSA case 312 [valid] special case hash
ECDSA case 313 [valid] special case hash
ECDSA case 314 [valid] special case hash
ECDSA case 315 [valid] special case hash
ECDSA case 316 [valid] special case hash
ECDSA case 317 [valid] special case hash
ECDSA case 318 [valid] special case hash
ECDSA case 319 [valid] special case hash
ECDSA case 320 [valid] special case hash
ECDSA case 321 [valid] special case hash
ECDSA case 322 [valid] special case hash
ECDSA case 323 [valid] special case hash
ECDSA case 324 [valid] special case hash
ECDSA case 325 [valid] special case hash
ECDSA case 326 [valid] special case hash
ECDSA case 327 [valid] special case hash
ECDSA case 328 [valid] special case hash
ECDSA case 329 [valid] special case hash
ECDSA case 330 [valid] special case hash
ECDSA case 331 [valid] special case hash
ECDSA case 332 [valid] special case hash
ECDSA case 333 [valid] special case hash
ECDSA case 334 [valid] special case hash
ECDSA case 335 [valid] special case hash
ECDSA case 336 [valid] special case hash
ECDSA case 337 [valid] special case hash
ECDSA case 338 [valid] special case hash
ECDSA case 339 [valid] special case hash
ECDSA case 340 [valid] special case hash
ECDSA case 341 [valid] special case hash
ECDSA case 342 [valid] special case hash
ECDSA case 343 [valid] special case hash
ECDSA case 344 [valid] special case hash
ECDSA case 345 [valid] special case hash
ECDSA case 346 [valid] special case hash
ECDSA case 347 [valid] special case hash
ECDSA case 348 [valid] special case hash
ECDSA case 349 [valid] special case hash
ECDSA case 350 [valid] special case hash
ECDSA case 351 [valid] special case hash
ECDSA case 352 [valid] special case hash
ECDSA case 353 [valid] special case hash
ECDSA case 354 [valid] special case hash
ECDSA case 355 [valid] k*G has a large x-coordinate ECDSA case 356 [invalid] r too large
ECDSA case 357 [valid] r,s are large
ECDSA case 358 [valid] r and s^-1 have a large Hamming weight ECDSA case 359 [valid] r and s^-1 have a large Hamming weight ECDSA case 360 [valid] small r and s
ECDSA case 361 [valid] small r and s
ECDSA case 362 [valid] small r and s
ECDSA case 363 [invalid] r is larger than n
ECDSA case 364 [invalid] s is larger than n
ECDSA case 365 [valid] small r and s^-1
ECDSA case 366 [valid] smallish r and s^-1
ECDSA case 367 [valid] 100-bit r and small s^-1
ECDSA case 368 [valid] small r and 100 bit s^-1
ECDSA case 369 [valid] 100-bit r and s^-1
ECDSA case 370 [valid] r and s^-1 are close to n
ECDSA case 371 [valid] s == 1
ECDSA case 372 [invalid] s == 0
ECDSA case 373 [invalid] point at infinity during verify ECDSA case 374 [valid] edge case for signature malleability ECDSA case 375 [valid] edge case for signature malleability ECDSA case 376 [valid] u1 == 1
ECDSA case 377 [valid] u1 == n - 1
ECDSA case 378 [valid] u2 == 1
ECDSA case 379 [valid] u2 == n - 1
ECDSA case 380 [valid] edge case for u1
ECDSA case 381 [valid] edge case for u1
ECDSA case 382 [valid] edge case for u1
ECDSA case 383 [valid] edge case for u1
ECDSA case 384 [valid] edge case for u1
ECDSA case 385 [valid] edge case for u1
ECDSA case 386 [valid] edge case for u1
ECDSA case 387 [valid] edge case for u1
ECDSA case 388 [valid] edge case for u1
ECDSA case 389 [valid] edge case for u1
ECDSA case 390 [valid] edge case for u1
ECDSA case 391 [valid] edge case for u1
ECDSA case 392 [valid] edge case for u1
ECDSA case 393 [valid] edge case for u1
ECDSA case 394 [valid] edge case for u2
ECDSA case 395 [valid] edge case for u2
ECDSA case 396 [valid] edge case for u2
ECDSA case 397 [valid] edge case for u2
ECDSA case 398 [valid] edge case for u2
ECDSA case 399 [valid] edge case for u2
ECDSA case 400 [valid] edge case for u2
ECDSA case 401 [valid] edge case for u2
ECDSA case 402 [valid] edge case for u2
ECDSA case 403 [valid] edge case for u2
ECDSA case 404 [valid] edge case for u2
ECDSA case 405 [valid] edge case for u2
ECDSA case 406 [valid] edge case for u2
ECDSA case 407 [valid] edge case for u2
ECDSA case 408 [valid] point duplication during verification ECDSA case 409 [invalid] duplication bug
ECDSA case 410 [invalid] point with x-coordinate 0 ECDSA case 411 [invalid] point with x-coordinate 0 ECDSA case 412 [invalid] comparison with point at infinity ECDSA case 413 [valid] extreme value for k and edgecase s ECDSA case 414 [valid] extreme value for k and s^-1 ECDSA case 415 [valid] extreme value for k and s^-1 ECDSA case 416 [valid] extreme value for k and s^-1 ECDSA case 417 [valid] extreme value for k and s^-1 ECDSA case 418 [valid] extreme value for k
ECDSA case 419 [valid] extreme value for k and edgecase s ECDSA case 420 [valid] extreme value for k and s^-1 ECDSA case 421 [valid] extreme value for k and s^-1 ECDSA case 422 [valid] extreme value for k and s^-1 ECDSA case 423 [valid] extreme value for k and s^-1 ECDSA case 424 [valid] extreme value for k
ECDSA case 425 [invalid] testing point duplication ECDSA case 426 [invalid] testing point duplication ECDSA case 427 [invalid] testing point duplication ECDSA case 428 [invalid] testing point duplication ECDSA case 429 [valid] pseudorandom signature
ECDSA case 430 [valid] pseudorandom signature
ECDSA case 431 [valid] pseudorandom signature
ECDSA case 432 [valid] pseudorandom signature
ECDSA case 433 [valid] y-coordinate of the public key is small ECDSA case 434 [valid] y-coordinate of the public key is small ECDSA case 435 [valid] y-coordinate of the public key is small ECDSA case 436 [valid] y-coordinate of the public key is large ECDSA case 437 [valid] y-coordinate of the public key is large ECDSA case 438 [valid] y-coordinate of the public key is large ECDSA case 439 [valid] x-coordinate of the public key is small ECDSA case 440 [valid] x-coordinate of the public key is small ECDSA case 441 [valid] x-coordinate of the public key is small ECDSA case 442 [valid] x-coordinate of the public key is large ECDSA case 443 [valid] x-coordinate of the public key is large ECDSA case 444 [valid] x-coordinate of the public key is large ECDSA case 445 [valid] y-coordinate of the public key has many trailing 1's ECDSA case 446 [valid] y-coordinate of the public key has many trailing 1's ECDSA case 447 [valid] y-coordinate of the public key has many trailing 1's