[번역] RFC3394_AES_KEY_WRAP
기술 이야기 2012. 4. 2. 17:48 |예전 S모 사에서 요청하여 구현했었던 AES Key Wrapping 의 RFC 표준인 RFC3394 번역...
======================================================================================================
Advanced Encryption Standard (AES) Key Wrap Algorithm
Abstract
이 문서의 목적은 인터넷 세계에서 편리하게 사용할 수 있는 AES Key Wrap 알고리즘을 만드는 것이다. 미국은 AES를 새로운 암호 표준으로 채택하였으며, AES Key Wrap 알고리즘이 AES 키를 암호화하는 목적으로 미국에서 채택되어질 것이다. 이 문서는 NIST에서 제시한 AES Key Wrap 드래프트로부터 대부분을 가져왔다.
Table of Contents
2.2.3 Key Data Integrity -- the Initial Value
2.2.3.2 Alternative Initial Values
4.1 Wrap 128 bits of Key Data with a 128-bit KEK
4.2 Wrap 128 bits of Key Data with a 192-bit KEK
4.3 Wrap 128 bits of Key Data with a 256-bit KEK
4.4 Wrap 192 bits of Key Data with a 192-bit KEK
4.5 Wrap 192 bits of Key Data with a 256-bit KEK
4.6 Wrap 256 bits of Key Data with a 256-bit KEK
1. Introduction
NOTE: 아래 내용의 대부분은 [AES-WRAP]로부터 가져왔으며, AES Key Wrap 알고리즘의 보안성과 관련된 내용은 이 문서의 저자가 아닌 미 정부에 의해 만들어졌다.
이 규격은 NIST(National Institute of Standards and Technology)의 Key Wrap 요구사항을 만족하기 위한 목적을 가진다: 즉, AES를 사용하여 평문(plain text)로 된 키(들)를 관련된 무결성 정보 및 데이터와 함께 안전하게 암호화하기 위한 Key Wrap이라고 부르는 암호학적 알고리즘의 디자인이다 평문과 무결성 정보나 데이터와의 조합은 AES 블록 사이즈(128비트)보다 클 수 있다. 각 암호문(ciphertext) 비트는 각 평문(plaintext) 비트에 대한 고도의 비선형 함수(highly non-linear function)이어야 하며, 또한 unwrapping의 경우 각 평문 비트는 각 암호문 비트에 대한 고도의 비선형 함수(highly non-linear function)이어야 한다. It is sufficient to approximate an ideal pseudorandom permutation to the degree that exploitation of undesirable phenomena is as unlikely as guessing the AES engine key(뭔소린지.. 대략 추측하기 어렵다 정도인듯).
이 key wrap 알고리즘은 신중하게 디자인된 키 관리 아키텍쳐로서 키를 보호하기 위한 충분한 보안성을 제공하여야 한다.
이 문서 전반에 걸쳐서, wrapping되어지는 모든 데이터를 키 데이터로 부른다. 그 데이터가 키인가 아닌가는 알고리즘 자체에 아무런 차이를 만들지 않으며, 사실 복수개의 키를 함께 wrapping하거나 키가 아닌 데이터를 wrapping 하기 위한 목적으로 키와 함께 다른 데이터를 포함해야 하는 이유가 있을 수 있다. 따라서 ‘key data’라는 용어는 wrapping되어지는 모든 데이터를 의미하기 위해 사용되는 것이며, 그럼에도 불구하고 이 규격이 키를 wrapping하기 위한 알고리즘이므로 실제로 키 데이터가 주 대상이 될 것이다. Wrapping 자체를 수행하기 위하여 사용되는 키를 KEK(key encryption key)라고 부른다.
이 문서에서 KEK는 AES codebook에서 지원하는 어떠한 키도 사용될 수 있다. 즉 KEK는 128 비트, 192 비트, 256 비트의 길이를 가지는 키가 될 수 있다.
2. Overview
AES key wrap 알고리즘은 키 데이터를 wrapping 하거나 암호화하기 위하여 설계되었다. Key wrapping은 64 비트 블록 단위로 동작한다. Wrapping 되기 이전에, 키 데이터는 n개의 64 비트 블록으로 나누어진다.
Key wrapping 알고리즘에서의 유일한 제한요소는 n이 최소한 2이상이어야 한다는 것이다. (키 데이터의 길이가 64 비트보다 작거나 같은 경우, 이 규격에서 사용되는 상수 필드(constant field)와 키 데이터를 합쳐서 128 비트의 codebook를 만들게 되며 이 때는 이 key wrap 이 불필요하게 된다). Key wrapping 알고리즘은 지원되는 모든 AES 키 사이즈를 사용할 수 있다. 그러나, 다른 암호확적 값들이 wrapping되어질 필요가 있을 수 있다. 그러한 값 중에 하나가 DSS를 위한 랜덤넘버 생성기의 시드(seed)이다. 이 시드 값은 4보다 큰 n을 요구한다. 다른 값들 역시 이러한 형태의 보호를 요구하고 있다. 따라서 n의 값에 대한 상한선(upper bound)가 없다.
AES key wrapping은 AES에서 지원하는 세가지 키 사이즈 중 어느것이라도 사용할 수 있도록 설정될 수 있다. 키 사이즈의 선택은 key wrap이 제공하는 보안성 전체에 영향을 주지만, key wrap 알고리즘의 기술(description)을 변경하지는 않는다. 따라서 아래의 설명에서 key wrap은 일반론적으로(generically) 기술되며 KEK에 대한 키 사이즈는 명시되지 않는다.
2.1 Notation and Definitions
다음의 표기들이 Key Wrapping 알고리즘의 기술에 사용된다.
AES(K, W) W를 키 K를 가지고 AES codebook을 사용하여 암호화
AES-1(K, W) W를 키 K를 가지고 AES codebook을 사용하여 복호화
MSB(j, W) W에서 j개의 Most Significant Bit를 리턴
LSB(j, W) W에서 j개의 Least Significant Bit를 리턴
B1 ^ B2 B1과 B2를 비트단위(bitwise)로 Exclusive Or (XOR)
B1 | B2 B1과 B2를 연접(concatenate)
K Key-Encryption 키 K
n 64 비트 크기의 키 데이터 블록의 수
s Wrapping 과정 안의 스텝 수, s = 6n
P[i] j번째 평문 키 데이터 블록
C[i] j번째 암호문 키 데이터 블록
A 64 비트의 무결성 체크 레지스터(integrity check register)
R[i] 64 비트 레지스터들의 배열. 여기서 i = 0, 1, 2, ..., n
A[t], R[i][t] 암호화 스텝 t 이후의 레지스터 A의 내용 및 R[i]의 내용
IV Wrapping 과정에서 사용되는 64 비트의 초기화 벡터
Key wrap 알고리즘에서, AES codebook에 대한 128 비트의 입력을 만들기 위해 64 비트의 quantity들을 병합하는데 연접 함수(concatenation function)가 사용되며, AES codebook로부터 얻어지는 128 비트의 출력을 두개의 64 비트의 quantity들로 분할하는데 추출 함수(extraction function)가 사용된다.
2.2 Algorithms
Key wrap 알고리즘에 대한 규격은 AES codebook [AES]의 사용을 요구한다. 다음의 3개 절에서는 각각 ‘Key Wrap 알고리즘’, ‘Key Unwrap 알고리즘’, ‘데이터 무결성 체크’에 대하여 기술한다.
2.2.1 Key Wrap
Key wrapping 과정에 대한 입력은 KEK와 wrapping 하고자 하는 평문 데이터이다. 평문 데이터는 n개의 64 비트 블록으로 이루어진 키 데이터이다. Key wrapping 과정은 다음과 같다.
Inputs: Plaintext, n 64-bit values {P1, P2, ..., Pn}, and Key, K (the KEK).
Outputs: Ciphertext, (n+1) 64-bit values {C0, C1, ..., Cn}.
1) 변수들을 초기화 (Initialize variables).
Set A0 to an initial value (see 2.2.3)
For i = 1 to n
R[0][i] = P[i]
2) 중간 단계 값들을 계산(Calculate intermediate values).
For t = 1 to s, where s = 6n
A[t] = MSB(64, AES(K, A[t-1] | R[t-1][1])) ^ t
For i = 1 to n-1
R[t][i] = R[t-1][i+1]
R[t][n] = LSB(64, AES(K, A[t-1] | R[t-1][1]))
3) 결과를 출력(Output the results).
Set C[0] = A[t]
For i = 1 to n
C[i] = R[t][i]
또 다른 key wrap 알고리즘은 shifting 대신에 indexing을 사용하는 방법이다. 이것은 이전 방법에서의 rotation을 피하면서 그 자리에서(in place) wrapped key를 계산할 수 있게 해준다. 이 방법은 이전 방법과 동일한 결과를 내면서도 소프트웨어적으로 더 쉬운 구현이 가능하다.
Inputs: Plaintext, n 64-bit values {P1, P2, ..., Pn}, and Key, K (the KEK).
Outputs: Ciphertext, (n+1) 64-bit values {C0, C1, ..., Cn}.
1) 변수들을 초기화 (Initialize variables)..
Set A = IV, an initial value (see 2.2.3)
For i = 1 to n
R[i] = P[i]
2) 중간 단계 값들을 계산(Calculate intermediate values).
For j = 0 to 5
For i=1 to n
B = AES(K, A | R[i])
A = MSB(64, B) ^ t where t = (n*j)+i
R[i] = LSB(64, B)
3) 결과를 출력(Output the results).
Set C[0] = A
For i = 1 to n
C[i] = R[i]
2.2.2 Key Unwrap
Unwrap 과정에 대한 입력은 KEK 및 wrapped key를 구성하는 (n+1)개의 64비트 블록의 암호문이다. 이 과정의 결과물은 n개의 64 비트 블록의 복호화된 키 데이터를 구성하는 n개의 평문 블록들이다.
Inputs: Ciphertext, (n+1) 64-bit values {C0, C1, ..., Cn}, and Key, K (the KEK).
Outputs: Plaintext, n 64-bit values {P1, P2, ..., Pn}.
1) 변수들을 초기화 (Initialize variables).
Set A[s] = C[0] where s = 6n
For i = 1 to n
R[s][i] = C[i]
2) 중간 단계 값들을 계산(Calculate intermediate values).
For t = s to 1
A[t-1] = MSB(64, AES-1(K, ((A[t] ^ t) | R[t][n]))
R[t-1][1] = LSB(64, AES-1(K, ((A[t]^t) | R[t][n]))
For i = 2 to n
R[t-1][i] = R[t][i-1]
3) 결과를 출력(Output the results).
If A[0] is an appropriate initial value (see 2.2.3),
Then
For i = 1 to n
P[i] = R[0][i]
Else
Return an error
Unwrap 알고리즘 역시 index 기반의 오퍼레이션으로 정의할 수 있으며 이는 계산 과정이 그 자리에서 수행되도록 해준다. 이 방법 역시 레지스터 shifting 방법과 동일한 결과를 생성한다.
Inputs: Ciphertext, (n+1) 64-bit values {C0, C1, ..., Cn}, and Key, K (the KEK).
Outputs: Plaintext, n 64-bit values {P0, P1, K, Pn}.
1 변수들을 초기화 (Initialize variables).
Set A = C[0]
For i = 1 to n
R[i] = C[i]
2) 중간 단계 값들을 계산(Calculate intermediate values).
For j = 5 to 0
For i = n to 1
B = AES-1(K, (A ^ t) | R[i]) where t = n*j+i
A = MSB(64, B)
R[i] = LSB(64, B)
3) 결과를 출력(Output the results).
If A is an appropriate initial value (see 2.2.3),
Then
For i = 1 to n
P[i] = R[i]
Else
Return an error
2.2.3 Key Data Integrity -- the Initial Value
초기값(IV)은 wrapping 과정의 첫번째 단계에서 A[0]에 할당되는 값이다. 이 값은 키 데이터에 대한 무결성 체크를 위해 사용된다. Unwrapping 과정의 마지막 단계에서 복구된 A[0] 값을 기대되는 A[0] 값(처음에 입력된 값)과 비교하여 일치하면 해당 키가 유효한 것으로 받아들여지며 Unwrapping 알고리즘은 해당 키를 리턴한다. 만약 일치하지 않는다면 해당 키는 거부되어지고 Unwrapping 알고리즘은 에러를 리턴한다.
이 무결성 체크에 의해 얻어지는 정확한 속성(exact properties)들은 초기값(initial value)의 정의에 달려있다. 서로 다른 어플리케이션들은 서로 다른 속성들을 요구할 수 있다; 예를 들어, 키 데이터의 무결성을 그 lifecycle 동안 보장할 필요가 있거나 혹은 그것이 unwrapping되어질 때만 필요할 수도 있다. 이 규격에서는 키 데이터가 unwrapping 되어지는 동안의 키 데이터의 무결성을 지원하는 디폴트 초기값(initial value)을 정의한다(2.2.3.1). 또 다른 초기값들을 지원하기 위한 준비도 되어 있다(2.2.3.2)
2.2.3.1 Default Initial Value
디폴트 초기값(IV)은 다음과 같은 16진수 상수(hexadecimal constant)로 정의된다:
A[0] = IV = A6A6A6A6A6A6A6A6
상수를 IV로 사용하는 것은 키 데이터가 wrapping되는 동안의 강력한 무결성 체크를 지원한다. 만약 unwrapping 과정이 ‘A[0] = A6A6A6A6A6A6A6A6’을 결과로 낸다면 해당 키 데이터가 훼손(corrupt)되어질 확률은 ‘2^-64’가 된다. Unwrapping 과정이 이와 다른 값을 A[0]로 낸다면 unwrapping 과정은 반드시 에러를 리턴하고 어떠한 키 데이터도 리턴하여서는 않된다.
2.2.3.2 Alternative Initial Values
Key wrap이 대용량의 키 관리 프로토콜이나 시스템의 일부로 사용되는 경우, 데이터 무결성의 적절한 범위(scope)는 단지 키 데이터에 대한 무결성 이상일 수 있으며, 혹은 키가 wrapping되는 시간 이상의 기간 동안에 무결성을 보장하여야 할 수도 있다. 또한 키 데이터가 단지 AES 키만이 아닌 경우 키 데이터가 항상 64 비트의 배수가 아닐 수도 있다. 초기값에 대한 또 다른 정의들이 이러한 문제들을 해결하기 위하여 사용될 수 있다. NIST는 향후의 키 관리 관련 발표에서 필요한 형태의 다른 초기값들을 정의하게 될 것이다. 향후 시간을 가지고 발전하게 될 여러 가지 대안들의 집합을 조정하기 위하여, 어플리케이션에 특화되지 않는(application-specific) key wrap 구현물은 초기값의 설정 및 테스트가 가능한 방법에 있어서 어느 정도의 유연성을 요구할 수 있을 것이다.
3. Object Identifiers
NIST는 2.2.3.1에 명시되어 있는 디폴트 초기값을 사용하는 key wrap 알고리즘을 식별하기 위하여 다음과 같은 오브젝트 식별자(OID)들을 할당하였다. OID는 각각 하나의 KEK AES 키 사이즈마다 할당되어진다.
aes OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16)
us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) 1 }
id-aes128-wrap OBJECT IDENTIFIER ::= { aes 5 }
id-aes192-wrap OBJECT IDENTIFIER ::= { aes 25 }
id-aes256-wrap OBJECT IDENTIFIER ::= { aes 45 }
4. Test Vectors
이 절에 있는 예제들은 index 기반의 key wrap 알고리즘의 구현을 사용하여 생성된 값들이다. Index 기반의 구현방법은 key wrap 알고리즘을 소프트웨어적으로 구현하기 쉽게 해준다.
4.1 Wrap 128 bits of Key Data with a 128-bit KEK
Input:
KEK: 000102030405060708090A0B0C0D0E0F
Key Data: 00112233445566778899AABBCCDDEEFF
Wrap:
Step t A R1 R2
1
In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Enc F4740052E82A2251 74CE86FBD7B805E7 8899AABBCCDDEEFF
XorT F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF
2
In F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF
Enc 06BA4EBDE7768D0B 74CE86FBD7B805E7 D132EE38147E76F8
XorT 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8
3
In 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8
Enc FC967627BE937208 FE6E8D679C5D3460 D132EE38147E76F8
XorT FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8
4
In FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8
Enc 5896EA9028EE203B FE6E8D679C5D3460 07B2BD973E36A6FC
XorT 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC
5
In 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC
Enc 93AEA71B258D90C3 25F5A3ADC2195401 07B2BD973E36A6FC
XorT 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC
6
In 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC
Enc E3EE986344D878F7 25F5A3ADC2195401 F14863BB1E9CA90A
XorT E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A
7
In E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A
Enc 2BFC21B2C20E4006 B556D35ED8CEF052 F14863BB1E9CA90A
XorT 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A
8
In 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A
Enc 4BE8CE99C0A43A7D B556D35ED8CEF052 64BAE5818D0570BB
XorT 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB
9
In 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB
Enc EBE1CE91067024F3 BE114B343EB00981 64BAE5818D0570BB
XorT EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB
10
In EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB
Enc 5A9C7B1F5B1C3B46 BE114B343EB00981 4FD3D2B7D74FBB42
XorT 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42
11
In 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42
Enc 93B71967EED41FFC AEF34BD8FB5A7B82 4FD3D2B7D74FBB42
XorT 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42
12
In 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42
Enc 1FA68B0A8112B44B AEF34BD8FB5A7B82 9D3E862371D2CFE5
XorT 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E862371D2CFE5
Output:
Ciphertext: 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E862371D2CFE5
Unwrap:
Step t A R1 R2
12
In 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E862371D2CFE5
XorT 1FA68B0A8112B44B AEF34BD8FB5A7B82 9D3E862371D2CFE5
Dec 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42
11
In 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42
XorT 93B71967EED41FFC AEF34BD8FB5A7B82 4FD3D2B7D74FBB42
Dec 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42
10
In 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42
XorT 5A9C7B1F5B1C3B46 BE114B343EB00981 4FD3D2B7D74FBB42
Dec EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB
9
In EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB
XorT EBE1CE91067024F3 BE114B343EB00981 64BAE5818D0570BB
Dec 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB
8
In 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB
XorT 4BE8CE99C0A43A7D B556D35ED8CEF052 64BAE5818D0570BB
Dec 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A
7
In 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A
XorT 2BFC21B2C20E4006 B556D35ED8CEF052 F14863BB1E9CA90A
Dec E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A
6
In E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A
XorT E3EE986344D878F7 25F5A3ADC2195401 F14863BB1E9CA90A
Dec 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC
5
In 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC
XorT 93AEA71B258D90C3 25F5A3ADC2195401 07B2BD973E36A6FC
Dec 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC
4
In 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC
XorT 5896EA9028EE203B FE6E8D679C5D3460 07B2BD973E36A6FC
Dec FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8
3
In FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8
XorT FC967627BE937208 FE6E8D679C5D3460 D132EE38147E76F8
Dec 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8
2
In 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8
XorT 06BA4EBDE7768D0B 74CE86FBD7B805E7 D132EE38147E76F8
Dec F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF
1
In F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF
XorT F4740052E82A2251 74CE86FBD7B805E7 8899AABBCCDDEEFF
Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Plaintext A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Output:
Key Data: 00112233445566778899AABBCCDDEEFF
4.2 Wrap 128 bits of Key Data with a 192-bit KEK
Input:
KEK: 000102030405060708090A0B0C0D0E0F1011121314151617
Key Data: 00112233445566778899AABBCCDDEEFF
Wrap:
Step t A R1 R21
In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Enc DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF
XorT DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
2
In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
Enc 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D
XorT 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
3
In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
Enc 7B8E343CA51CF8AB BC164F51E20CC983 51F22F3286758A2D
XorT 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D
4
In 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D
Enc 02A97C5897140595 BC164F51E20CC983 05FC2D8F8FF4B919
XorT 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919
5
In 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919
Enc 15D4B63F66583817 429487269D3A0016 05FC2D8F8FF4B919
XorT 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919
6
In 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919
Enc AE2D0B76A6951EEA 429487269D3A0016 05A2D8FB4DD5BD7A
XorT AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A
7
In AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A
Enc 79F849444F4B8AA8 D40B091CDBAC0340 05A2D8FB4DD5BD7A
XorT 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A
8
In 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A
Enc 5933A9195B5F5E21 D40B091CDBAC0340 89F0D6C06F8CA9B4
XorT 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4
9
In 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4
Enc 57ADA800299C2E85 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4
XorT 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4
10
In 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4
Enc BF17BD6A9BC80163 4D5B3DFE7C04ABBA EB24CCFA52EA9078
XorT BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078
11
In BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078
Enc B68BF270AE81544F F92B5B97C050AED2 EB24CCFA52EA9078
XorT B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078
12
In B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078
Enc 96778B25AE6CA439 F92B5B97C050AED2 468AB8A17AD84E5D
XorT 96778B25AE6CA435 F92B5B97C050AED2 468AB8A17AD84E5D
Output:
Ciphertext: 96778B25AE6CA435 F92B5B97C050AED2 468AB8A17AD84E5D
Unwrap:
Step t A R1 R2
12
In 96778B25AE6CA435 F92B5B97C050AED2 468AB8A17AD84E5D
XorT 96778B25AE6CA439 F92B5B97C050AED2 468AB8A17AD84E5D
Dec B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078
11
In B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078
XorT B68BF270AE81544F F92B5B97C050AED2 EB24CCFA52EA9078
Dec BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078
10
In BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078
XorT BF17BD6A9BC80163 4D5B3DFE7C04ABBA EB24CCFA52EA9078
Dec 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4
9
In 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4
XorT 57ADA800299C2E85 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4
Dec 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4
8
In 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4
XorT 5933A9195B5F5E21 D40B091CDBAC0340 89F0D6C06F8CA9B4
Dec 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A
7
In 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A
XorT 79F849444F4B8AA8 D40B091CDBAC0340 05A2D8FB4DD5BD7A
Dec AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A
6
In AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A
XorT AE2D0B76A6951EEA 429487269D3A0016 05A2D8FB4DD5BD7A
Dec 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919
5
In 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919
XorT 15D4B63F66583817 429487269D3A0016 05FC2D8F8FF4B919
Dec 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919
4
In 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919
XorT 02A97C5897140595 BC164F51E20CC983 05FC2D8F8FF4B919
Dec 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D
3
In 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D
XorT 7B8E343CA51CF8AB BC164F51E20CC983 51F22F3286758A2D
Dec 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
2
In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
XorT 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D
Dec DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
1
In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
XorT DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF
Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Plaintext A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Output:
Key Data: 00112233445566778899AABBCCDDEEFF
4.3 Wrap 128 bits of Key Data with a 256-bit KEK
Input:
KEK:
000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
Key Data: 00112233445566778899AABBCCDDEEFF
Wrap:
Step t A R1 R2
1
In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Enc 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF
XorT 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
2
In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
Enc D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8
XorT D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
3
In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
Enc 85DBDF1879D5C0A5 5602001BFA07AD8B F60E0CDB7F429FE8
XorT 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8
4
In 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8
Enc 738C291128B7226D 5602001BFA07AD8B 58924F777C3F678C
XorT 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C
5
In 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C
Enc 2656A02DFFF054DC F4DF378183E3D5B2 58924F777C3F678C
XorT 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C
6
In 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C
Enc DDFD0C0E8B52A63A F4DF378183E3D5B2 91AC1D36A964F41B
XorT DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B
7
In DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B
Enc 39AB00D4AE4399EA 5271D5CED80F34ED 91AC1D36A964F41B
XorT 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B
8
In 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B
Enc 4CE414878463EAAC 5271D5CED80F34ED 67D8ED899E7929B8
XorT 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8
9
In 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8
Enc FBB44DB106AA0789 0DF7E50829123648 67D8ED899E7929B8
XorT FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8
10
In FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8
Enc 877112A7308ADCC5 0DF7E50829123648 3472D5993D318FD2
XorT 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2
11
In 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2
Enc 78E40190807CC151 63E9777905818A2A 3472D5993D318FD2
XorT 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2
12
In 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2
Enc 64E8C3F9CE0F5BAE 63E9777905818A2A 93C8191E7D6E8AE7
XorT 64E8C3F9CE0F5BA2 63E9777905818A2A 93C8191E7D6E8AE7
Output:
Ciphertext: 64E8C3F9CE0F5BA2 63E9777905818A2A 93C8191E7D6E8AE7
Unwrap:
Step t A R1 R2
12
In 64E8C3F9CE0F5BA2 63E9777905818A2A 93C8191E7D6E8AE7
XorT 64E8C3F9CE0F5BAE 63E9777905818A2A 93C8191E7D6E8AE7
Dec 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2
11
In 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2
XorT 78E40190807CC151 63E9777905818A2A 3472D5993D318FD2
Dec 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2
10
In 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2
XorT 877112A7308ADCC5 0DF7E50829123648 3472D5993D318FD2
Dec FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8
9
In FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8
XorT FBB44DB106AA0789 0DF7E50829123648 67D8ED899E7929B8
Dec 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8
8
In 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8
XorT 4CE414878463EAAC 5271D5CED80F34ED 67D8ED899E7929B8
Dec 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B
7
In 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B
XorT 39AB00D4AE4399EA 5271D5CED80F34ED 91AC1D36A964F41B
Dec DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B
6
In DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B
XorT DDFD0C0E8B52A63A F4DF378183E3D5B2 91AC1D36A964F41B
Dec 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C
5
In 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C
XorT 2656A02DFFF054DC F4DF378183E3D5B2 58924F777C3F678C
Dec 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C
4
In 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C
XorT 738C291128B7226D 5602001BFA07AD8B 58924F777C3F678C
Dec 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8
3
In 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8
XorT 85DBDF1879D5C0A5 5602001BFA07AD8B F60E0CDB7F429FE8
Dec D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
2
In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
XorT D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8
Dec 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
1
In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
XorT 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF
Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Plaintext A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
Output:
Key Data: 00112233445566778899AABBCCDDEEFF
4.4 Wrap 192 bits of Key Data with a 192-bit KEK
Input:
KEK: 000102030405060708090A0B0C0D0E0F1011121314151617
Key Data: 00112233445566778899AABBCCDDEEFF0001020304050607
Wrap:
Step t A/R3 R1 R2
1
In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
0001020304050607
Enc DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF
0001020304050607
XorT DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
0001020304050607
2
In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
0001020304050607
Enc 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D
0001020304050607
XorT 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
0001020304050607
3
In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
0001020304050607
Enc 2C8E19A519025B7C 351D385096CCFB29 51F22F3286758A2D
FF540E514DE120A3
XorT 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D
FF540E514DE120A3
4
In 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D
FF540E514DE120A3
Enc E727C7BDF822602E A08DAA041D17BBBA 51F22F3286758A2D
FF540E514DE120A3
XorT E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D
FF540E514DE120A3
5
In E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D
FF540E514DE120A3
Enc 15B61F7B25D51700 A08DAA041D17BBBA AE82BC1118A5DEA4
FF540E514DE120A3
XorT 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4
FF540E514DE120A3
6
In 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4
FF540E514DE120A3
Enc A187755AEA64719C A08DAA041D17BBBA AE82BC1118A5DEA4
D1E708FD13778787
XorT A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4
D1E708FD13778787
7
In A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4
D1E708FD13778787
Enc 5A994895D81644B7 926ED65A9E853FD9 AE82BC1118A5DEA4
D1E708FD13778787
XorT 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4
D1E708FD13778787
8
In 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4
D1E708FD13778787
Enc 864F408C8AB8CDCF 926ED65A9E853FD9 552A09E141D08AE3
D1E708FD13778787
XorT 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3
D1E708FD13778787
9
In 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3
D1E708FD13778787
Enc 53F4373F575EB7A4 926ED65A9E853FD9 552A09E141D08AE3
ED5E8456E61BD295
XorT 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3
ED5E8456E61BD295
10
In 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3
ED5E8456E61BD295
Enc 9EAA4CDA0B1BA5FF 98883EDC6B080FB5 552A09E141D08AE3
ED5E8456E61BD295
XorT 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3
ED5E8456E61BD295
11
In 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3
ED5E8456E61BD295
Enc B1B9902C68E0EB52 98883EDC6B080FB5 63F6D88A0663FEF9
ED5E8456E61BD295
XorT B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9
ED5E8456E61BD295
12
In B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9
ED5E8456E61BD295
Enc FCE591D77709A6E0 98883EDC6B080FB5 63F6D88A0663FEF9
463437433A93EFE5
XorT FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9
463437433A93EFE5
13
In FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9
463437433A93EFE5
Enc 428428D2BD88CF58 C46965F34EFB2261 63F6D88A0663FEF9
463437433A93EFE5
XorT 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9
463437433A93EFE5
14
In 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9
463437433A93EFE5
Enc 6AC861AB961DA578 C46965F34EFB2261 56E3CEE892BBEFC4
463437433A93EFE5
XorT 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4
463437433A93EFE5
15
In 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4
463437433A93EFE5
Enc E80DB49CC9A1EA61 C46965F34EFB2261 56E3CEE892BBEFC4
84943C8C67FCFD53
XorT E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4
84943C8C67FCFD53
16
In E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4
84943C8C67FCFD53
Enc ABEE3534AC465C2C 68F24EC260743EDC 56E3CEE892BBEFC4
84943C8C67FCFD53
XorT ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4
84943C8C67FCFD53
17
In ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4
84943C8C67FCFD53
Enc E7CC8D8CEDE62BF7 68F24EC260743EDC E1C6C7DDEE725A93
84943C8C67FCFD53
XorT E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93
84943C8C67FCFD53
18
In E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93
84943C8C67FCFD53
Enc 031D33264E15D320 68F24EC260743EDC E1C6C7DDEE725A93
6BA814915C6762D2
XorT 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93
6BA814915C6762D2
Output:
Ciphertext 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93
6BA814915C6762D2
Unwrap:
Step t A/R3 R1 R2
18
In 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93
6BA814915C6762D2
XorT 031D33264E15D320 68F24EC260743EDC E1C6C7DDEE725A93
6BA814915C6762D2
Dec E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93
84943C8C67FCFD53
17
In E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93
84943C8C67FCFD53
XorT E7CC8D8CEDE62BF7 68F24EC260743EDC E1C6C7DDEE725A93
84943C8C67FCFD53
Dec ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4
84943C8C67FCFD53
16
In ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4
84943C8C67FCFD53
XorT ABEE3534AC465C2C 68F24EC260743EDC 56E3CEE892BBEFC4
84943C8C67FCFD53
Dec E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4
84943C8C67FCFD53
15
In E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4
84943C8C67FCFD53
XorT E80DB49CC9A1EA61 C46965F34EFB2261 56E3CEE892BBEFC4
84943C8C67FCFD53
Dec 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4
463437433A93EFE5
14
In 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4
463437433A93EFE5
XorT 6AC861AB961DA578 C46965F34EFB2261 56E3CEE892BBEFC4
463437433A93EFE5
Dec 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9
463437433A93EFE5
13
In 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9
463437433A93EFE5
XorT 428428D2BD88CF58 C46965F34EFB2261 63F6D88A0663FEF9
463437433A93EFE5
Dec FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9
463437433A93EFE5
12
In FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9
463437433A93EFE5
XorT FCE591D77709A6E0 98883EDC6B080FB5 63F6D88A0663FEF9
463437433A93EFE5
Dec B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9
ED5E8456E61BD295
11
In B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9
ED5E8456E61BD295
XorT B1B9902C68E0EB52 98883EDC6B080FB5 63F6D88A0663FEF9
ED5E8456E61BD295
Dec 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3
ED5E8456E61BD295
10
In 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3
ED5E8456E61BD295
XorT 9EAA4CDA0B1BA5FF 98883EDC6B080FB5 552A09E141D08AE3
ED5E8456E61BD295
Dec 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3
ED5E8456E61BD295
9
In 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3
ED5E8456E61BD295
XorT 53F4373F575EB7A4 926ED65A9E853FD9 552A09E141D08AE3
ED5E8456E61BD295
Dec 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3
D1E708FD13778787
8
In 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3
D1E708FD13778787
XorT 864F408C8AB8CDCF 926ED65A9E853FD9 552A09E141D08AE3
D1E708FD13778787
Dec 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4
D1E708FD13778787
7
In 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4
D1E708FD13778787
XorT 5A994895D81644B7 926ED65A9E853FD9 AE82BC1118A5DEA4
D1E708FD13778787
Dec A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4
D1E708FD13778787
6
In A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4
D1E708FD13778787
XorT A187755AEA64719C A08DAA041D17BBBA AE82BC1118A5DEA4
D1E708FD13778787
Dec 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4
FF540E514DE120A3
5
In 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4
FF540E514DE120A3
XorT 15B61F7B25D51700 A08DAA041D17BBBA AE82BC1118A5DEA4
FF540E514DE120A3
Dec E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D
FF540E514DE120A3
4
In E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D
FF540E514DE120A3
XorT E727C7BDF822602E A08DAA041D17BBBA 51F22F3286758A2D
FF540E514DE120A3
Dec 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D
FF540E514DE120A3
3
In 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D
FF540E514DE120A3
XorT 2C8E19A519025B7C 351D385096CCFB29 51F22F3286758A2D
FF540E514DE120A3
Dec 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
0001020304050607
2
In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D
0001020304050607
XorT 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D
0001020304050607
Dec DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
0001020304050607
1
In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF
0001020304050607
XorT DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF
0001020304050607
Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
0001020304050607
Plaintext A6A6A6A6A6A6A6A6 0011223344556677
8899AABBCCDDEEFF 0001020304050607
Output:
Key Data: 00112233445566778899AABBCCDDEEFF0001020304050607
4.5 Wrap 192 bits of Key Data with a 256-bit KEK
Input:
KEK:
000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
Key Data: 00112233445566778899AABBCCDDEEFF0001020304050607
Wrap:
Step t A/R3 R1 R2
1
In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
0001020304050607
Enc 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607
XorT 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607
2
In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607
Enc D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607
XorT D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607
3
In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607
Enc 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154
XorT 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154
4
In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154
Enc F1D28EA6295891EC 0CC86A4D9B9C6A31 F60E0CDB7F429FE8
6CA405593A3B5154
XorT F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8
6CA405593A3B5154
5
In F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8
6CA405593A3B5154
Enc BF213BFD04E8A24F 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
6CA405593A3B5154
XorT BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
6CA405593A3B5154
6
In BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
6CA405593A3B5154
Enc 6F85BFBDB7E880E3 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
XorT 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
7
In 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
Enc D532789E4E79D819 444F92BF78E77BB1 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
XorT D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
8
In D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
Enc 2A5FFCEF1F1916D8 444F92BF78E77BB1 C6874607903270CD
39EBC1A1A53FF55B
XorT 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD
39EBC1A1A53FF55B
9
In 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD
39EBC1A1A53FF55B
Enc 01271BA91D9804F6 444F92BF78E77BB1 C6874607903270CD
740A273461ED82C6
XorT 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD
740A273461ED82C6
10
In 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD
740A273461ED82C6
Enc A3223BD7237F7033 FB1611A83BEB567F C6874607903270CD
740A273461ED82C6
XorT A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD
740A273461ED82C6
11
In A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD
740A273461ED82C6
Enc B50C330616E7B1C7 FB1611A83BEB567F 73EDC8CB9322C34E
740A273461ED82C6
XorT B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E
740A273461ED82C6
12
In B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E
740A273461ED82C6
Enc FB8AFF3F083E12CE FB1611A83BEB567F 73EDC8CB9322C34E
0B08CFDF48020F0D
XorT FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E
0B08CFDF48020F0D
13
In FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E
0B08CFDF48020F0D
Enc 82F597607784A33C FB1F2965FCE1E783 73EDC8CB9322C34E
0B08CFDF48020F0D
XorT 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E
0B08CFDF48020F0D
14
In 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E
0B08CFDF48020F0D
Enc D48E5E83B7C906DB FB1F2965FCE1E783 D36F4FFBA2C82ED9
0B08CFDF48020F0D
XorT D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9
0B08CFDF48020F0D
15
In D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9
0B08CFDF48020F0D
Enc 1BF2B1CD947311B6 FB1F2965FCE1E783 D36F4FFBA2C82ED9
C490C33642717146
XorT 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9
C490C33642717146
16
In 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9
C490C33642717146
Enc C9F5F26A378011DE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9
C490C33642717146
XorT C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9
C490C33642717146
17
In C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9
C490C33642717146
Enc 39128CE5E435F3A0 F6E6F4FBE30E71E4 769C8B80A32CB895
C490C33642717146
XorT 39128CE5E4325F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895
C490C33642717146
18
In 39128CE5E435F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895
C490C33642717146
Enc A8F9BC1612C68B2D F6E6F4FBE30E71E4 769C8B80A32CB895
8CD5D17D6B254DA1
XorT A8F9BC1612C68B3F F6E6F4FBE30E71E4 769C8B80A32CB895
8CD5D17D6B254DA1
Ciphertext A8F9BC1612C68B3F F6E6F4FBE30E71E4
769C8B80A32CB895 8CD5D17D6B254DA1
Unwrap:
Step t A/R3 R1 R2
18
In A8F9BC1612C68B3F F6E6F4FBE30E71E4 769C8B80A32CB895
8CD5D17D6B254DA1
XorT A8F9BC1612C68B2D F6E6F4FBE30E71E4 769C8B80A32CB895
8CD5D17D6B254DA1
Dec 39128CE5E435F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895
C490C33642717146
17
In 39128CE5E435F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895
C490C33642717146
XorT 39128CE5E435F3A0 F6E6F4FBE30E71E4 769C8B80A32CB895
C490C33642717146
Dec C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9
C490C33642717146
16
In C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9
C490C33642717146
XorT C9F5F26A378011DE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9
C490C33642717146
Dec 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9
C490C33642717146
15
In 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9
C490C33642717146
XorT 1BF2B1CD947311B6 FB1F2965FCE1E783 D36F4FFBA2C82ED9
C490C33642717146
Dec D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9
0B08CFDF48020F0D
14
In D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9
0B08CFDF48020F0D
XorT D48E5E83B7C906DB FB1F2965FCE1E783 D36F4FFBA2C82ED9
0B08CFDF48020F0D
Dec 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E
0B08CFDF48020F0D
13
In 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E
0B08CFDF48020F0D
XorT 82F597607784A33C FB1F2965FCE1E783 73EDC8CB9322C34E
0B08CFDF48020F0D
Dec FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E
0B08CFDF48020F0D
12
In FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E
0B08CFDF48020F0D
XorT FB8AFF3F083E12CE FB1611A83BEB567F 73EDC8CB9322C34E
0B08CFDF48020F0D
Dec B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E
740A273461ED82C6
11
In B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E
740A273461ED82C6
XorT B50C330616E7B1C7 FB1611A83BEB567F 73EDC8CB9322C34E
740A273461ED82C6
Dec A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD
740A273461ED82C6
10
In A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD
740A273461ED82C6
XorT A3223BD7237F7033 FB1611A83BEB567F C6874607903270CD
740A273461ED82C6
Dec 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD
740A273461ED82C6
9
In 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD
740A273461ED82C6
XorT 01271BA91D9804F6 444F92BF78E77BB1 C6874607903270CD
740A273461ED82C6
Dec 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD
39EBC1A1A53FF55B
8
In 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD
39EBC1A1A53FF55B
XorT 2A5FFCEF1F1916D8 444F92BF78E77BB1 C6874607903270CD
39EBC1A1A53FF55B
Dec D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
7
In D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
XorT D532789E4E79D819 444F92BF78E77BB1 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
Dec 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
6
In 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
XorT 6F85BFBDB7E880E3 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
39EBC1A1A53FF55B
Dec BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
6CA405593A3B5154
5
In BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
6CA405593A3B5154
XorT BF213BFD04E8A24F 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9
6CA405593A3B5154
Dec F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8
6CA405593A3B5154
4
In F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8
6CA405593A3B5154
XorT F1D28EA6295891EC 0CC86A4D9B9C6A31 F60E0CDB7F429FE8
6CA405593A3B5154
Dec 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154
3
In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154
XorT 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154
Dec D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607
2
In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607
XorT D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607
Dec 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607
1
In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607
XorT 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607
Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
0001020304050607
Plaintext A6A6A6A6A6A6A6A6 0011223344556677
8899AABBCCDDEEFF 0001020304050607
Output:
Key Data: 00112233445566778899AABBCCDDEEFF0001020304050607
4.6 Wrap 256 bits of Key Data with a 256-bit KEK
Input:
KEK:
000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
Key Data:
00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F
Wrap:
Step t A/R3 R1/R4 R2
1
In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
Enc 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
XorT 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
2
In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
Enc D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607 08090A0B0C0D0E0F
XorT D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607 08090A0B0C0D0E0F
3
In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607 08090A0B0C0D0E0F
Enc 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 08090A0B0C0D0E0F
XorT 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 08090A0B0C0D0E0F
4
In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 08090A0B0C0D0E0F
Enc 564408FDD0DD2EA4 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
XorT 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
5
In 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
Enc 4EF02EDD3146AFBB E7D1194D853E53F8 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
XorT 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
6
In 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
Enc 963AAFFD96B223EC E7D1194D853E53F8 EFD48BA304945576
6CA405593A3B5154 E5923CB9FDB56FBC
XorT 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576
6CA405593A3B5154 E5923CB9FDB56FBC
7
In 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576
6CA405593A3B5154 E5923CB9FDB56FBC
Enc 66D7A8ADD086B9DD E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 E5923CB9FDB56FBC
XorT 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 E5923CB9FDB56FBC
8
In 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 E5923CB9FDB56FBC
Enc C58B9D3AC6D5B94E E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
XorT C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
9
In C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
Enc 1A681354E84C41F8 D6AE29ECE7192D43 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
XorT 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
10
In 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
Enc DBA417FB51F9E3CB D6AE29ECE7192D43 FBEC169FA5C0F6BA
C365B66943E2D760 73E3B6CBE5D05D74
XorT DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA
C365B66943E2D760 73E3B6CBE5D05D74
11
In DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA
C365B66943E2D760 73E3B6CBE5D05D74
Enc 0629EB29A42E4FD9 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 73E3B6CBE5D05D74
XorT 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 73E3B6CBE5D05D74
12
In 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 73E3B6CBE5D05D74
Enc F9ED8A1429515665 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
XorT F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
13
In F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
Enc 2E8E2B6BB2016696 4745856AF333F01F FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
XorT 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
14
In 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
Enc 15342443CB95ADB1 4745856AF333F01F BCA418BBF7DCE60B
F56701DAF0388216 3CF149E90E8C04D9
XorT 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B
F56701DAF0388216 3CF149E90E8C04D9
15
In 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B
F56701DAF0388216 3CF149E90E8C04D9
Enc 33FE29365885C4B7 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 3CF149E90E8C04D9
XorT 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 3CF149E90E8C04D9
16
In 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 3CF149E90E8C04D9
Enc 5075496800978B4A 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
XorT 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
17
In 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
Enc A5382A26B47551F1 1BB8C765A84195E7 BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
XorT A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
18
In A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
Enc F19D80D437EFE8F9 1BB8C765A84195E7 F7EDAD518C960D36
C272E9466AAE98F9 40F68C91DB49702C
XorT F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36
C272E9466AAE98F9 40F68C91DB49702C
19
In F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36
C272E9466AAE98F9 40F68C91DB49702C
Enc B422B444B87A190B 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 40F68C91DB49702C
XorT B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 40F68C91DB49702C
20
In B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 40F68C91DB49702C
Enc D058823360F88A37 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
XorT D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
21
In D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
Enc C89A96CA7B163ECC CBCCB35CFB87F826 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
XorT C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
22
In C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
Enc 39D02FE7435870ED CBCCB35CFB87F826 3F5786E2D80ED326
1CFBF6B4C24CB982 07DFE775B9687E73
XorT 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326
1CFBF6B4C24CB982 07DFE775B9687E73
23
In 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326
1CFBF6B4C24CB982 07DFE775B9687E73
Enc 0AEB82AE3146A91B CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B 07DFE775B9687E73
XorT 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B 07DFE775B9687E73
24
In 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B 07DFE775B9687E73
Enc 28C9F404C4B810EC CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B FB988B9B7A02DD21
XorT 28C9F404C4B810F4 CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B FB988B9B7A02DD21
Output:
Ciphertext 28C9F404C4B810F4 CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B FB988B9B7A02DD21
Unwrap:
Step t A/R3 R1/R4 R2
24
In 28C9F404C4B810F4 CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B FB988B9B7A02DD21
XorT 28C9F404C4B810EC CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B FB988B9B7A02DD21
Dec 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B 07DFE775B9687E73
23
In 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B 07DFE775B9687E73
XorT 0AEB82AE3146A91B CBCCB35CFB87F826 3F5786E2D80ED326
CBC7F0E71A99F43B 07DFE775B9687E73
Dec 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326
1CFBF6B4C24CB982 07DFE775B9687E73
22
In 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326
1CFBF6B4C24CB982 07DFE775B9687E73
XorT 39D02FE7435870ED CBCCB35CFB87F826 3F5786E2D80ED326
1CFBF6B4C24CB982 07DFE775B9687E73
Dec C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
21
In C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
XorT C89A96CA7B163ECC CBCCB35CFB87F826 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
Dec D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
20
In D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
XorT D058823360F88A37 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 07DFE775B9687E73
Dec B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 40F68C91DB49702C
19
In B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 40F68C91DB49702C
XorT B422B444B87A190B 1BB8C765A84195E7 F7EDAD518C960D36
1CFBF6B4C24CB982 40F68C91DB49702C
Dec F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36
C272E9466AAE98F9 40F68C91DB49702C
18
In F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36
C272E9466AAE98F9 40F68C91DB49702C
XorT F19D80D437EFE8F9 1BB8C765A84195E7 F7EDAD518C960D36
C272E9466AAE98F9 40F68C91DB49702C
Dec A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
17
In A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
XorT A5382A26B47551F1 1BB8C765A84195E7 BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
Dec 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
16
In 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
XorT 5075496800978B4A 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 40F68C91DB49702C
Dec 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 3CF149E90E8C04D9
15
In 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 3CF149E90E8C04D9
XorT 33FE29365885C4B7 4745856AF333F01F BCA418BBF7DCE60B
C272E9466AAE98F9 3CF149E90E8C04D9
Dec 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B
F56701DAF0388216 3CF149E90E8C04D9
14
In 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B
F56701DAF0388216 3CF149E90E8C04D9
XorT 15342443CB95ADB1 4745856AF333F01F BCA418BBF7DCE60B
F56701DAF0388216 3CF149E90E8C04D9
Dec 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
13
In 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
XorT 2E8E2B6BB2016696 4745856AF333F01F FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
Dec F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
12
In F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
XorT F9ED8A1429515665 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 3CF149E90E8C04D9
Dec 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 73E3B6CBE5D05D74
11
In 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 73E3B6CBE5D05D74
XorT 0629EB29A42E4FD9 D6AE29ECE7192D43 FBEC169FA5C0F6BA
F56701DAF0388216 73E3B6CBE5D05D74
Dec DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA
C365B66943E2D760 73E3B6CBE5D05D74
10
In DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA
C365B66943E2D760 73E3B6CBE5D05D74
XorT DBA417FB51F9E3CB D6AE29ECE7192D43 FBEC169FA5C0F6BA
C365B66943E2D760 73E3B6CBE5D05D74
Dec 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
9
In 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
XorT 1A681354E84C41F8 D6AE29ECE7192D43 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
Dec C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
8
In C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
XorT C58B9D3AC6D5B94E E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 73E3B6CBE5D05D74
Dec 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 E5923CB9FDB56FBC
7
In 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 E5923CB9FDB56FBC
XorT 66D7A8ADD086B9DD E7D1194D853E53F8 EFD48BA304945576
C365B66943E2D760 E5923CB9FDB56FBC
Dec 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576
6CA405593A3B5154 E5923CB9FDB56FBC
6
In 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576
6CA405593A3B5154 E5923CB9FDB56FBC
XorT 963AAFFD96B223EC E7D1194D853E53F8 EFD48BA304945576
6CA405593A3B5154 E5923CB9FDB56FBC
Dec 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
5
In 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
XorT 4EF02EDD3146AFBB E7D1194D853E53F8 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
Dec 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
4
In 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
XorT 564408FDD0DD2EA4 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 E5923CB9FDB56FBC
Dec 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 08090A0B0C0D0E0F
3
In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 08090A0B0C0D0E0F
XorT 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8
6CA405593A3B5154 08090A0B0C0D0E0F
Dec D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607 08090A0B0C0D0E0F
2
In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607 08090A0B0C0D0E0F
XorT D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8
0001020304050607 08090A0B0C0D0E0F
Dec 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
1
In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
XorT 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
Plaintext A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF
0001020304050607 08090A0B0C0D0E0F
Output:
Key Data:
00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F
5. Security Considerations
key wrap 알고리즘은 키 데이터에 대한 강력한 무결성 체크를 포함한다. 만약 unwrapping 과정이 A[0]의 값으로 기대하는 올바른 체크 값을 생성한다면 해당 키 데이터가 훼손되었을 확률은 ‘2^-64’이 된다. 만약 unwrapping 과정이 기대하지 않는 값을 생성한다면 알고리즘 구현은 반드시 에러를 리턴하여야 하며(MUST), 어떠한 키 데이터도 리턴하여서는 안된다 (MUST NOT).
구현은 반드시 KEK가 유출되지 않도록 보호하여야 한다. KEK의 유출은 해당 KEK로 보호하고 있는 모든 키 데이터의 유출을 야기할 수 있다.
6. References
AES
National Institute of Standards and Technology. FIPS Pub 197: Advanced Encryption Standard (AES). 26 November 2001.
AES-WRAP
National Institute of Standards and Technology. AES Key Wrap Specification. 17 November 2001. [http://csrc.nist.gov/encryption/kms/key-wrap.pdf]