// and as tested by TestCASTRejectionPat. It tests only one parameter set as // allowed by Note26. It tests the modified version of Algorithm 7 and 8 with a // fixed mu/μ, as allowed by IG 10.3.A, Resolution 15. It compares sk and not // pk, because H(pk) is part of sk, as allowed by the same Resolution. It // compares the results with hashes instead of values, to avoid embedding several // kilobytes of test vectors in every binary, as allowed by GeneralNote7. func fips140CAST() error { // From h...

be found in the LICENSE file. package gcm import ( "crypto/internal/fips140" "crypto/internal/fips140/aes" _ "crypto/internal/fips140/check" "errors" ) func init() { // Counter KDF covers CMAC per IG 10.3.B, and CMAC covers GCM per IG 10.3.A // Resolution 1.d(i). AES decryption is covered by the CBC CAST in package // crypto/internal/fips140/aes. fips140.CAST("CounterKDF", func() error { key := []byte{ 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10,...