Test vectors including Z

[emanjon]

Taylor R Campbell wrote:
Where does one find test vectors for the deterministic functions
defined here with the extra randomization parameters Z?

https://mailarchive.ietf.org/arch/msg/cfrg/jmfn1b880x7-7gZKb7_uwLvE3oU/

[dannyniu]

2023-hedged-dss.testvecs-local.d.zip

I've generated preliminary test vectors. Test vectors for some parameters and features (e.g. P-521, EdDSA pre-hash and context strings) hasn't been generated for now, although it should be easy.

The zip file also contain scripts and codes that generated the test vector. To use it, place the "2023-hedged-dss.testvecs-local.d" directory under the "utils" directory in the "2023-hedged-dss" branch of MySuiteA, and hack it all you want.

I encourage 3rd-party implementations to cross check on the correctness of the test vectors, to find potential errors that may have crept in.

---

2024-03-18 Update

The test vectors for ECDSA instantiated with P-384/SHAKE-256 + KMAC-256 was in error due to an inconsistency between my implementation and the *-03 draft. I've noted this and raised some other concerns in #2 (comment)

I've revised the test vectors in this regard: 2023-hedged-dss.testvecs-local.d.zip

---

2024-10-07 Update

PureEdDSA vectors were missing and is now being added. Some other bugs were found in my repo, I'll push some time soon.

2023-hedged-dss.testvecs-20241007-local.d.zip

---

2024-12-15 Update

I did an alternate implementation and found that the vectors for ECDSA and EdDSA were inconsistent. I've corrected the errors and uploaded a new version of test vectors and driver code.
2023-hedged-dss.testvecs-local.d.zip Small errata:
2023-hedged-dss.testvecs-local.d.zip

[dannyniu]

I've updated the test vectors in the previous comment in case anyone missed those.