3GPP TS 35.232 V12.1.0 (2014-06)
Technical Specification
3rd Generation Partnership Project;
Technical Specification Group Services and System Aspects;
Specification of the Tuak algorithm set:
A second example algorithm set for the 3GPP authentication
and key generation functions f1, f1*, f2, f3, f4, f5 and f5*;
Document 2: Implementers’ test data
(Release 12)
The present document has been developed within the 3rd Generation Partnership Project (3GPP TM) and may be further elaborated for the purposes of 3GPP..
The present document has not been subject to any approval process by the 3GPP Organizational Partners and shall not be implemented.
This Specification is provided for future development work within 3GPP only. The Organizational Partners accept no liability for any use of this Specification.
Specifications and Reports for implementation of the 3GPP TM system should be obtained via the 3GPP Organizational Partners' Publications Offices.
Release 12
2
3GPP TS 35.232 V12.1.0 (2014-06)
Keywords
GSM, UMTS, LTE, Security, Algorithm
3GPP
Postal address
3GPP support office address
650 Route des Lucioles - Sophia Antipolis
Valbonne - FRANCE
Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16
Internet
http://www.3gpp.org
Copyright Notification
No part may be reproduced except as authorized by written permission.
The copyright and the foregoing restriction extend to reproduction in all media.
© 2014, 3GPP Organizational Partners (ARIB, ATIS, CCSA, ETSI, TTA, TTC).
All rights reserved.
UMTS™ is a Trade Mark of ETSI registered for the benefit of its members
3GPP™ is a Trade Mark of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners
LTE™ is a Trade Mark of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners
GSM® and the GSM logo are registered and owned by the GSM Association
3GPP
Release 12
3
3GPP TS 35.232 V12.1.0 (2014-06)
Contents
Foreword............................................................................................................................................................. 5
Introduction ........................................................................................................................................................ 5
1
Scope ........................................................................................................................................................ 6
2
References ................................................................................................................................................ 6
3
Definitions ................................................................................................................................................ 6
3.1
3.2
4
4.1
4.2
4.3
4.4
5
5.1
5.2
5.3
5.4
5.5
5.6
5.7
5.8
6
6.1
6.2
6.3
6.4
6.5
6.6
6.7
6.8
7
7.1
7.2
7.3
7.4
7.5
7.6
7.7
7.8
Definitions ......................................................................................................................................................... 6
Symbols ............................................................................................................................................................. 7
Preliminary information ........................................................................................................................... 7
Introduction........................................................................................................................................................ 7
Radix .................................................................................................................................................................. 7
Bit/Byte ordering for Tuak inputs and outputs .................................................................................................. 7
Tuak inputs and outputs ..................................................................................................................................... 8
KECCAK test data ................................................................................................................................. 10
Overview ......................................................................................................................................................... 10
Format .............................................................................................................................................................. 10
Test set 1 .......................................................................................................................................................... 10
Test set 2 .......................................................................................................................................................... 11
Test set 3 .......................................................................................................................................................... 11
Test set 4 .......................................................................................................................................................... 12
Test set 5 .......................................................................................................................................................... 12
Test set 6 .......................................................................................................................................................... 13
Authentication algorithms f1 and f1* ..................................................................................................... 14
Overview ......................................................................................................................................................... 14
Format .............................................................................................................................................................. 14
Test set 1 .......................................................................................................................................................... 14
Test set 2 .......................................................................................................................................................... 16
Test set 3 .......................................................................................................................................................... 18
Test set 4 .......................................................................................................................................................... 18
Test set 5 .......................................................................................................................................................... 21
Test set 6 .......................................................................................................................................................... 23
Algorithms f2, f3, f4, f5 and f5* ............................................................................................................ 25
Overview ......................................................................................................................................................... 25
Format .............................................................................................................................................................. 25
Test set 1 .......................................................................................................................................................... 26
Test set 2 .......................................................................................................................................................... 28
Test set 3 .......................................................................................................................................................... 28
Test set 4 .......................................................................................................................................................... 30
Test set 5 .......................................................................................................................................................... 30
Test set 6 .......................................................................................................................................................... 31
Annex A (informative):
Change history ............................................................................................... 33
3GPP
Release 12
4
3GPP TS 35.232 V12.1.0 (2014-06)
Foreword
This Technical Specification has been produced by the 3 rd Generation Partnership Project (3GPP).
The contents of the present document are subject to continuing work within the TSG and may change following formal
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an
identifying change of release date and an increase in version number as follows:
Version x.y.z
where:
x the first digit:
1 presented to TSG for information;
2 presented to TSG for approval;
3 or greater indicates TSG approved document under change control.
y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections,
updates, etc.
z the third digit is incremented when editorial only changes have been incorporated in the document.
Introduction
The present document is second of three, which between them form the entire specification of the example algorithms,
entitled:
-
3GPP TS 35.231: "Specification of the Tuak algorithm set: A second example algorithm set for the 3GPP
authentication and key generation Functions f1, f1*, f2, f3, f4, f5 and f5*;
Document 1: Algorithm specification ".
-
3GPP TS 35.232: " Specification of the Tuak algorithm set: A second example algorithm set for the 3GPP
authentication and key generation functions f1, f1*, f2, f3, f4, f5 and f5*;
Document 2: Implementers' test data".
-
3GPP TS 35.233: "specification of the Tuak algorithm set: A second example algorithm set for the 3GPP
authentication and key generation functions f1, f1*, f2, f3, f4, f5 and f5*;
Document 3: Design conformance test data".
3GPP
Release 12
1
5
3GPP TS 35.232 V12.1.0 (2014-06)
Scope
The present document and the other Technical Specifications in the series, TS 35.231 [4] and TS 35.233 [6], contain an
example set of algorithms which could be used as the authentication and key generation functions f1, f1*, f2, f3, f4, f5
and f5* for 3GPP systems. In particular, the present document defines the test data:
-
for the Keccak permutation used within Tuak,
-
for the authentication algorithms f1 and f1*,
-
for the algorithms f2, f3, f4, f5 and f5*.
2
References
The following documents contain provisions which, through reference in this text, constitute provisions of the present
document.
-
References are either specific (identified by date of publication, edition number, version number, etc.) or
non-specific.
-
For a specific reference, subsequent revisions do not apply.
-
For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same
Release as the present document.
[1]
3GPP TS 33.102: "3G Security; Security Architecture".
[2]
3GPP TS 35.206: "3G Security; Specification of the MILENAGE algorithm set: An example algorithm set for
the 3GPP authentication and key generation functions f1, f1*, f2, f3, f4, f5 and f5*; Document 2: Algorithm
specification".
[3]
"The KECCAK Reference", version 3.0, 14 January 2011, G. Bertoni, J. Daemen, M. Peeters, G. van Aasche,
(available at http://keccak.noekeon.org/Keccak-reference-3.0.pdf).
[4]
3GPP TS 35. 231: "Specification of the Tuaka lgorithm set: A second example algorithm set for the 3GPP
authentication and key generation functions f1, f1*, f2, f3, f4, f5 and f5*; Document 1: Algorithm specification
".
[5]
3GPP TS 33.401: "3rd Generation Partnership Project; Technical Specification Group Services and System
Aspects; 3GPP System Architecture Evolution (SAE); Security architecture".
[6]
3GPP TS 35.233: "Specification of the Tuak algorithm set: A second example algorithm set for the 3GPP
authentication and key generation functions f1, f1*, f2, f3, f4, f5 and f5*; Document 3: Design conformance test
data".
[7]
3GPP TR 21.905: "Vocabulary for 3GPP Specifications".
3
Definitions
3.1
Definitions
For the purposes of the present document, the terms and definitions given in TR 21.905 [7] and the following apply. A
term defined in the present document takes precedence over the definition of the same term, if any, in TR 21.905 [7].
Tuak: The name of this algorithm set is "Tuak". It should be pronounced like "too-ack".
3GPP
Release 12
3.2
AK
AMF
CK
IK
IN
K
MAC-A
MAC-S
TOP
TOPC
OUT
RAND
RES
SQN
6
3GPP TS 35.232 V12.1.0 (2014-06)
Symbols
a 48-bit anonymity key that is the output of either of the functions f5 and f5*
a 16-bit authentication management field that is an input to the functions f1 and f1*
a 128-bit or 256-bit confidentiality key that is the output of the function f3
a 128-bit or 256-bit integrity key that is the output of the function f4
a 1600-bit value that is used as the input to the permutation Π when computing the functions f1,
f1*, f2, f3, f4, f5 and f5*
a 128-bit or 256-bit subscriber key that is an input to the functions f1, f1*, f2, f3, f4, f5 and f5*
a 64-bit, 128-bit or 256-bit network authentication code that is the output of the function f1
a 64-bit, 128-bit or 256-bit resynchronization authentication code that is the output of the function
f1*
a 256-bit Operator Variant Algorithm Configuration Field that is a component of the functions f1,
f1*, f2, f3, f4, f5 and f5*
a 256-bit value derived from TOP and K and used within the computation of the functions
a 1600-bit value that is taken as the output of the permutation Π when computing the functions f1,
f1*, f2, f3, f4, f5 and f5*
a 128-bit random challenge that is an input to the functions f1, f1*, f2, f3, f4, f5 and f5*
a 32-bit, 64-bit, 128-bit or 256-bit signed response that is the output of the function f2
a 48-bit sequence number that is an input to either of the functions f1 and f1*. (For f1* this input is
more precisely called SQNMS.) See informative Annex C of [1] for methods of encoding
sequence numbers.
4 Preliminary information
4.1
Introduction
Within the security architecture of the 3GPP system there are seven security functions f1, f1*, f2, f3, f4, f5 and f5*. The
operation of these functions falls within the domain of one operator, and the functions are therefore to be specified by
each operator rather than being fully standardized. The algorithms specified in this document are examples that may be
used by an operator who does not wish to design his own.
The inputs and outputs of all seven algorithms are defined in clause4.4 .
4.2
Radix
Unless stated otherwise, all test data values presented in the present document are in hexadecimal.
4.3
Bit/Byte ordering for Tuak inputs and outputs
3GPP TS 33.102 [1] includes the following convention. (There is similar text in the specification of MILENAGE, as
defined in 3GPP TS 35.206 [2]):
All data variables in the presentdocument are presented with the most significant substring on the left hand side and the
least significant substring on the right hand side. A substring may be a bit, byte or other arbitrary length bit string.
Where a variable is broken down into a number of substrings, the left-most (most significant) substring is numbered 0,
the next most significant is numbered 1, and so on through to the least significant.
So, for example, RAND[0] is the most-significant bit of RAND and RAND[127] is the least significant bit of RAND.
This convention applies to all inputs and outputs to Tuak, as listed in tables 1 to 9 below.
However, when describing intermediate states of Tuak (e.g. inputs and outputs for the Keccak permutation), variables
are simply treated as indexed bit strings. These bit strings will be presented in hexadecimal notation, using a display
convention described in clause 5.2.
3GPP
Release 12
4.4
7
3GPP TS 35.232 V12.1.0 (2014-06)
Tuak inputs and outputs
The inputs to Tuak are given in tables 1 and 2, the outputs in tables 3 to 9 below.
There are a few differences from the inputs and outputs to MILENAGE [2].
The key K may be 128 bits or 256 bits. MAC-A and MAC-S may be 64, 128 or 256 bits. RES may be 32, 64, 128 or
256 bits. CK and IK may be 128 or 256 bits. Existing 3GPP specifications (see [1] and [5]) do not support all these
possibilities, but they are included in Tuak for future flexibility in case future releases of these specifications support
them.
NOTE 1: The 3G security architecture specification [1] calls the output of the f1 function ‘MAC’ while the present
document and [2] call it 'MAC-A'.
Any sizes for the parameters K, MAC-A, MAC-S, RES, CK and IK mentioned in the present document shall not be
supported nor used in entities defined in 3GPP specifications until these specifications explicitly allow their use.
In any particular implementation, the parameters shall have a fixed length, chosen in advance. For example an operator
may fix K at length 256 bits, RES at length 64 bits, CK and IK at length 128 bits. As the lengths do not vary with input,
they are not specified as formal input parameters.
Table 1: Inputs to f1 and f1*
Parameter
K
RAND
SQN
AMF
Size (bits)
128 or 256
128
48
Comment
Subscriber key K[0]…K[127] or K[0]…K[255]
Random challenge RAND[0]…RAND[127]
Sequence number SQN[0]…SQN[47] (for f1* this input is more
precisely called SQNMS)
Authentication management field AMF[0]…AMF[15]
16
Table 2: Inputs to f2, f3, f4, f5 and f5*
Parameter
K
RAND
Size (bits)
128 or 256
128
Comment
Subscriber key K[0]…K[127] or K[0]…K[255]
Random challenge RAND[0]…RAND[127]
Table 3: f1 output
Parameter
MAC-A
Size (bits)
64, 128 or
256
Comment
Network authentication code MAC-A[0]…MAC-A[63] or MACA[0]…MAC-A[127] or MAC-A[0]…MAC-A[255]
Table 4: f1* output
Parameter
MAC-S
Size (bits)
64, 128 or
256
Comment
Resynch authentication code MAC-S[0]…MAC-S[63] or MACS[0]…MAC-S[127] or MAC-S[0]…MAC-S[255]
Table 5: f2 output
Parameter
RES
Size (bits)
32, 64, 128
or 256
Comment
Response RES[0]…RES[31] or RES[0]…RES[63] or
RES[0]…RES[127] or RES[0]…RES[255]
3GPP
Release 12
3GPP TS 35.232 V12.1.0 (2014-06)
8
Table 6: f3 output
Size (bits)
Parameter
CK
128 or 256
Comment
Confidentiality key CK[0]…CK[127] or CK[0]…CK[255]
Table 7: f4 output
Parameter
IK
Size (bits)
128 or 256
Comment
Integrity key IK[0]…IK[127] or IK[0]…IK[255]
Table 8: f5 output
Parameter
AK
Size (bits)
48
Comment
Anonymity key AK[0]…AK[47]
Table 9: f5* output
Parameter
AK
Size (bits)
48
Comment
Resynch anonymity key AK[0]…AK[47]
NOTE 2: Both f5 and f5* outputs are called AK according to [1]. In practice only one of them at a time will be
calculated in any given call to the authentication and key agreement algorithms.
3GPP
Release 12
3GPP TS 35.232 V12.1.0 (2014-06)
9
5
KECCAK test data
5.1
Overview
The test data sets presented here are for the cryptographic permutation Keccak-f[1600], as it is specified in [3], and used
within [4]. This permutation is abbreviated as Π, and use strings IN[0] .. IN[1599] and OUT[0] .. OUT[1599] to
represent the input and output of Π.
5.2
Format
For brevity, the IN and OUT strings are presented as lists of 200 bytes (octets), with each individual byte written
separately in hexadecimal notation. The lists of bytes should be read from left to right, and then from top to bottom.
For IN, the first byte of the list will denote the bits IN[0] to IN[7], with IN[0] equal to the least significant bit of the
corresponding hexadecimal number equal to and IN[7] equal to the most significant bit of the same hexadecimal
number. The final byte of the list will denote IN[1592] to IN[1599], with IN[1592] equal to the least significant bit of
the corresponding hexadecimal number, and IN[1599] equal to the most significant bit of the same number.
OUT strings will be presented in the same way.
As an example, in Test Set 1 below:
IN[0] = 0,
IN[8] = 0,
IN[1584]=1,
IN[1592]=0,
IN[1] = 0,
IN[9] = 1,
IN[1585]=1,
IN[1593]=0,
IN[2] = 1, IN[3] = 0, IN[4] = 0, IN[5] = 1, IN[6] = 0, IN[7] = 0,
IN[10]=1, IN[11]=0, IN[12]=1, IN[13]=1, IN[14]=1, IN[15]=0, … ,
IN[1586]=0, IN[1587]=1, IN[1588]=0, IN[1589]=0, IN[1590]=0, IN[1591]=0,
IN[1594]=0, IN[1595]=0, IN[1596]=1, IN[1597]=0, IN[1598]=1, IN[1599]=0.
OUT[0] = 1, OUT[1] = 1, OUT[2] = 1, OUT[3] = 1, OUT[4] = 0, OUT[5] = 1, OUT[6] = 0, OUT[7] = 0,
OUT[8] = 0, OUT[9] = 0, OUT[10]=1, OUT[11]=1, OUT[12]=1, OUT[13]=0, OUT[14]=1, OUT[15]=1, … ,
OUT[1584]=0, OUT[1585]=1, OUT[1586]=1, OUT[1587]=1, OUT[1588]=1,OUT[1589]=0,OUT[1590]=0,
OUT[1591]=0, OUT[1592]=1, OUT[1593]=1, OUT[1594]=1,OUT[1595]=0,OUT[1596]=0, OUT[1597]=1,
OUT[1598]=0, OUT[1599]=1.
5.3
Test set 1
IN:
24 76
b0 af
ae 0b
97 0a
22 ea
ad 4b
0b 50
d2
b6
d8
34
c6
e4
da
c7
05
56
11
4c
c5
3e
20
b6
a9
4d
9e
37
c4
ce
8e
2d
2e
ce
3a
2c
0e
98
93
8c
d4
78
74
1a
49
cc
b4
cd
42
34
df
cf
36
11
b9
12
32
20
62
28
99
08
55
b7
57
71
64
1c
a9
9d
92
7f
75
9c
da
8a
a7
4b
22
6b
b1
67
6c
db
93
05
b6
29
52
73
e4
c9
9e
41
08
1a
f9
93
b5
49
9d
4c
c6
ff
c2
17
0f
97
96
1c
08
48
73
db
ba
56
f1
09
92
e5
05
1a
51
e4
71
eb
f0
0d
c7
29
15
73
7a
24
30
70
1a
53
21
2b
9e
93
37
fe
45
47
8c
30
59
81
1f
06
8f
c4
4d
e3
90
d5
17
ad
f6
7c
73
01
db
23
6d
33
0c
c3
45
1d
e4
ac
96
47
6d
3e
42
60
78
65
0b
52
9f
b8
c6
b3
5e
11
3c
21
45
7a
OUT:
2f dc
64 6f
5a c2
88 a3
aa a7
8e 59
1e a7
58
87
27
dc
42
5e
d4
18
f6
06
dc
a4
d9
9b
7f
29
19
bb
4a
43
2a
bd
3f
92
88
54
d8
ed
f7
99
4c
25
a0
79
8c
2c
1c
b5
62
5f
17
7c
b0
d6
97
32
67
2d
3a
65
67
20
a3
3d
8e
4e
82
f3
8a
cd
63
22
b0
c6
1c
38
ac
82
8a
5c
96
19
ab
28
7e
76
40
75
83
b6
c3
bd
8c
b6
75
97
f1
d0
ce
e0
e8
b8
b5
12
16
5f
56
1c
38
43
92
85
b5
be
d6
e8
39
ba
61
ad
00
8f
b0
18
ba
65
8c
63
77
15
3a
5b
0b
d6
f2
20
06
71
ab
91
90
96
25
aa
ef
2e
3a
cc
e8
cc
83
5f
07
30
30
c2
da
b5
b8
ed
ac
5e
64
cd
c4
22
db
3d
36
a1
6a
14
55
7e
6b
67
04
0f
73
51
62
b7
8d
f3
42
b5
a5
1f
66
b6
86
cb
3f
9b
31
71
3GPP
Release 12
5.4
3GPP TS 35.232 V12.1.0 (2014-06)
10
Test set 2
IN:
80 00
00 00
00 00
00 00
00 00
00 00
00 00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
OUT:
44 e0
de 06
22 78
0f 03
4d 9e
76 e0
1b 61
e5
7f
ad
13
7d
40
8c
1f
11
e3
98
31
a9
de
5e
49
76
7a
68
09
fc
88
17
fc
97
c0
70
ae
03
2a
5c
a4
f7
0d
63
fb
4c
b5
1d
36
fd
fa
25
c2
64
73
e7
dc
92
10
1f
7e
67
7b
a1
a6
f0
2c
86
a7
57
a1
77
05
c5
fc
f5
9f
4a
29
8c
23
3f
06
a5
90
cb
72
21
ba
d5
7f
cf
35
24
4c
47
e6
5c
c6
51
8f
b6
53
3a
55
9b
0c
d9
fc
01
51
01
6f
91
4e
bb
aa
0b
c8
49
18
91
31
89
68
14
5d
4c
39
e1
f0
02
07
1b
64
5e
fc
2c
f3
02
1f
30
80
51
96
08
a8
1e
a6
4c
1f
a2
db
f5
3b
45
82
7c
2e
8f
25
fc
6b
7b
64
76
53
ec
b8
e3
83
50
79
a6
80
bb
f2
1d
1e
1c
31
bb
87
b5
41
b6
af
bb
40
9c
c8
6b
84
99
b3
5.5
Test set 3
IN:
01 02
22 23
43 44
64 65
85 86
a6 a7
c7 c8
03
24
45
66
87
a8
04
25
46
67
88
a9
05
26
47
68
89
aa
06
27
48
69
8a
ab
07
28
49
6a
8b
ac
08
29
4a
6b
8c
ad
09
2a
4b
6c
8d
ae
0a
2b
4c
6d
8e
af
0b
2c
4d
6e
8f
b0
0c
2d
4e
6f
90
b1
0d
2e
4f
70
91
b2
0e
2f
50
71
92
b3
0f
30
51
72
93
b4
10
31
52
73
94
b5
11
32
53
74
95
b6
12
33
54
75
96
b7
13
34
55
76
97
b8
14
35
56
77
98
b9
15
36
57
78
99
ba
16
37
58
79
9a
bb
17
38
59
7a
9b
bc
18
39
5a
7b
9c
bd
19
3a
5b
7c
9d
be
1a
3b
5c
7d
9e
bf
1b
3c
5d
7e
9f
c0
1c
3d
5e
7f
a0
c1
1d
3e
5f
80
a1
c2
1e
3f
60
81
a2
c3
1f
40
61
82
a3
c4
20
41
62
83
a4
c5
21
42
63
84
a5
c6
OUT:
5d d0
fb bc
34 d1
9d 80
7c 3b
01 0a
4b 3e
e3
58
dd
92
2b
50
dd
6f
47
14
5d
e1
9e
5a
fa
a4
83
26
46
4d
39
cd
b5
2f
db
69
8c
30
9e
9e
21
4d
78
1f
5a
9e
87
d6
f4
18
7a
81
a9
06
8a
57
62
2e
e1
68
91
30
e0
6c
a4
fb
a6
0a
13
b3
44
f3
65
55
16
dd
42
b4
7d
d0
14
52
7d
bb
29
1d
ba
d9
7a
da
03
32
0d
ad
83
49
6c
36
7b
b7
2f
45
87
5b
fa
be
ef
c9
f7
6a
cd
19
29
ea
73
bd
4e
10
91
0c
5f
a5
ba
42
39
be
43
1e
71
76
90
e2
e2
ad
62
34
e0
11
ab
75
32
02
15
73
b7
41
80
52
ea
5e
6a
db
88
31
8d
bf
13
7b
59
96
1f
a8
50
ed
f0
8d
3f
39
45
dc
03
e0
1f
9b
b7
46
85
b4
a6
61
0e
e4
5f
3f
41
3a
42
85
5c
a2
3f
ff
c5
72
47
4b
3GPP
Release 12
5.6
3GPP TS 35.232 V12.1.0 (2014-06)
11
Test set 4
IN:
ab ab
ab ab
ab ab
ab ab
ab ab
ab ab
ab ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
ab
OUT:
00 52
b6 6f
58 74
21 cf
e4 4d
be de
12 58
f0
b5
77
a0
dd
5a
0e
ba
c4
52
69
19
b4
9e
c8
e0
db
86
09
f2
d4
b0
72
a0
b5
88
1a
40
9a
c9
ce
0b
d4
21
82
1d
5f
05
19
4c
5d
38
78
75
14
5f
4d
c4
e9
ed
04
3b
bb
85
53
0a
52
81
fd
ee
20
98
cc
c3
9f
2d
ee
70
17
20
97
54
6a
c5
13
75
da
72
71
0c
23
87
46
bd
5f
66
ae
92
c6
d0
5b
57
1f
ce
10
a5
1a
83
f0
a0
3d
b9
0a
8a
91
c8
5a
fa
7e
1d
0c
d1
5f
ab
5b
32
e1
e4
8c
f7
ed
f3
c3
2e
8d
07
03
88
27
92
21
73
43
fd
8b
e1
bd
13
d6
c3
62
ef
42
ca
91
a4
c6
3c
7d
f9
13
e7
48
f0
58
f3
30
32
75
66
af
0a
ab
46
91
be
4b
1e
e2
dd
2b
16
41
46
fc
d9
7f
c6
11
ac
57
56
7c
1e
78
8e
5.7
IN:
cd cd
cd cd
cd cd
cd cd
cd cd
cd cd
cd cd
OUT:
c1 6c
59 5f
3c 6f
93 ff
4a 7a
a3 02
8f a8
Test set 5
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
cd
a0
41
45
d0
9c
4a
6d
1b
22
05
8b
c5
ef
af
64
88
22
6b
3a
6a
87
a2
33
33
dd
ab
a9
8e
c0
af
45
16
a6
6c
20
5a
b2
53
07
1b
de
26
0c
f1
8b
80
a3
11
cf
7e
65
1f
00
23
d6
95
6a
73
34
3d
7a
1e
37
54
c1
53
a8
2d
ff
63
f2
7d
f9
c8
86
bc
c6
11
12
8d
1d
05
cf
80
15
fb
fa
58
5e
4e
c2
f7
79
1e
0c
f0
e8
68
30
d5
cc
2e
75
67
77
97
cc
b5
1e
94
c0
bd
53
59
dd
0a
88
bf
55
78
02
63
03
37
40
ff
a5
38
a8
a4
87
d4
10
60
b9
59
18
3d
3f
82
62
29
03
9a
61
18
da
7f
ed
7e
ba
f8
67
65
3d
48
6f
df
24
05
20
84
7b
f1
dd
39
b0
42
f3
41
c8
98
c5
64
bb
7b
6d
9e
10
de
b2
db
10
fc
13
ce
3GPP
Release 12
5.8
3GPP TS 35.232 V12.1.0 (2014-06)
12
Test set 6
IN:
00 00
00 00
00 00
00 00
00 00
00 00
00 00
00
00
00
00
00
00
00
00
00
00
00
01
00
00
00
00
02
00
00
00
00
03
00
00
00
00
04
00
00
00
00
00
00
00
00
00
01
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
02
00
00
00
00
03
00
00
00
00
04
00
00
00
00
00
00
00
00
00
01
00
00
00
00
02
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
03
00
00
00
00
04
00
00
00
00
00
00
00
00
00
01
00
00
00
00
02
00
00
00
00
03
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
04
00
00
00
00
00
00
00
00
00
01
00
00
00
00
02
00
00
00
00
03
00
00
00
00
04
00
00
00
00
00
OUT:
56 0d
41 b1
2f 6f
df 6d
9b 76
29 8a
a3 37
be
fd
e1
2f
65
09
41
37
a5
02
a5
26
f6
41
17
fc
9c
83
a7
8d
a2
5c
61
90
5a
a6
49
29
41
d5
7d
f3
ce
73
11
74
33
5a
3c
2a
55
f6
e1
b7
8a
12
05
3d
5d
0e
5f
65
c9
4f
6b
15
83
14
d9
76
fe
87
4e
fb
e9
fb
0b
cc
ec
15
f8
6d
dc
36
fa
eb
05
6d
64
8c
2f
7a
af
fc
7d
1b
aa
be
6f
d1
e5
89
ad
7f
9e
37
54
ad
de
bf
6b
38
34
cc
e8
57
c4
c4
1c
ce
32
18
f1
98
e0
1d
e6
91
9c
48
d0
07
db
66
65
ac
61
ad
24
91
c6
d5
bb
92
d4
c7
0e
1e
bd
0d
2a
c2
a9
4e
f1
4d
2b
f8
72
d7
be
9d
04
43
a6
83
75
08
a7
46
e4
af
76
a0
84
00
fa
a1
49
43
63
da
01
ba
de
94
a9
7e
85
52
e7
6c
b2
2f
7d
0f
3GPP
Release 12
3GPP TS 35.232 V12.1.0 (2014-06)
13
6
Authentication algorithms f1 and f1*
6.1
Overview
The test data sets presented here are for the authentication algorithms f1, f1*. Inputs and outputs to the permutation Π
are also presented here to assist with the implementation.
6.2
Format
Each test starts by showing the various inputs (K, RAND, SQN, AMF) to the functions. Next are shown the operator
configuration field TOP, and other operator configuration parameters: the length of the K, the length of the output
MAC, and the number of Keccak iterations.
These are followed by the value of TOP C and then the output values of f1 and f1* are shown. The value TOPC should
not be computed on but off the UICC. In the example code TOP C is computed inside the functions, so it was included in
the test data.
All the input, output and configuration parameters are presented using the bit/byte ordering convention described in
clause 4.3. Intermediate inputs and outputs to the permutation Π are also shown, as lists of 200 bytes, using the
convention described in clause 5.2.
6.3
Test set 1
Input Parameters:
K:
RAND:
SQN:
AMF:
abababababababababababababababab
42424242424242424242424242424242
111111111111
ffff
Operator Configuration Parameters:
TOP:
5555555555555555555555555555555555555555555555555555555555555555
Klength = 128 bits, MAClength = 64 bits, KeccakIterations = 1
TOPc:
bd04d9530e87513c5d837ac2ad954623a8e2330c115305a73eb45d1f40cccbff
Output Parameters:
f1:
f1*:
f9a54e6aeaa8618d
e94b4dc6c7297df3
Intermediate Values:
IN
55
30
ab
00
00
00
00
when computing
55 55 55 55 55
2e 31 4b 41 55
ab ab ab ab ab
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
ff cb cc
03 f9 ad
d0 24 e8
a3 b2 62
eb 71 e8
7f 77 d1
99 b7
TOPc:
55 55
54 00
ab ab
00 00
00 00
00 00
55
00
ab
00
00
00
55
00
ab
00
00
00
55
00
ab
00
00
00
55
00
ab
00
00
00
55
00
ab
00
00
00
55
00
ab
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
00
00
00
00
55
00
1f
00
00
00
55
ab
00
00
00
00
00
ab
00
00
00
00
computing TOPc:
40 1f 5d b4 3e a7
b1 49 08 91 49 1c
8e e9 53 a0 6c 3d
dd 7b c8 76 b7 36
9f 92 46 4c 4a 24
29 05 0a 99 5f 61
05
23
13
43
e8
bd
53
5c
31
df
6a
0b
11
3d
ad
2c
29
2f
0c
41
61
55
72
72
33
31
14
a3
78
e0
e2
eb
00
f1
6c
8a
a8
8f
4f
af
81
ae
23
9a
62
11
53
75
46
84
b3
63
b4
aa
95
b5
bc
ba
ca
fe
ad
fe
da
79
21
b4
c2
b1
77
da
46
1e
7a
84
fd
aa
35
ee
83
d6
10
4f
49
b0
5d
13
58
ce
da
4f
3c
c1
05
02
3a
8c
51
c4
50
fc
b3
51
87
db
06
fe
e0
ff
0e
07
40
7f
b7
f1
53
6d
9a
d4
19
91
d9
19
40
d8
5b
27
04
ea
6d
b6
be
a7
bd
ac
84
06
e4
9b
de
df
ac
f1
e7
2c
IN when computing f1:
3GPP
Release 12
ff
30
ab
00
00
00
00
cb
2e
ab
00
00
00
00
cc
31
ab
00
00
00
OUT when
8d 61 a8
93 5c 6d
1a 9e f1
ad 2d 8d
92 36 3d
50 79 e4
93 03
IN
ff
30
ab
00
00
00
00
40
4b
ab
00
80
00
1f
41
ab
00
00
00
5d
55
ab
00
00
00
3e
42
ab
00
00
00
a7
42
ab
00
00
00
05
42
ab
00
00
00
53
42
ab
00
00
00
11
42
ab
00
00
00
0c
42
ab
00
00
00
33
42
ab
00
00
00
e2
42
00
00
00
00
a8
42
00
00
00
00
23
42
00
00
00
00
46
42
00
00
00
00
95
42
00
00
00
00
ad
42
00
00
00
00
c2
42
00
00
00
00
7a
42
00
00
00
00
83
42
00
00
00
00
5d
ff
00
00
00
00
3c
ff
00
00
00
00
51
11
00
00
00
00
87
11
00
00
00
00
0e
11
00
00
00
00
53
11
00
00
00
00
d9
11
00
00
00
00
04
11
1f
00
00
00
bd
ab
00
00
00
00
08
ab
00
00
00
00
computing f1:
ea 6a 4e a5 f9
5d 52 af 2c 27
e4 56 16 2e ef
b2 43 9a 41 29
2a 38 f0 e1 12
08 52 ca 0b 66
61
81
18
3e
d7
67
5f
c7
c5
d9
31
a6
1e
6f
51
27
f5
55
f1
16
fd
4b
14
71
ee
10
9e
fc
ec
8e
2b
ee
52
7e
84
c3
9e
84
99
30
5c
34
22
8e
72
e7
26
8b
f6
81
ca
73
c7
81
f3
86
01
69
f9
2e
3b
59
f1
25
a9
83
b0
e8
67
61
1f
f5
c6
c3
0e
16
17
8b
59
45
3f
6c
a4
de
1c
8f
04
d3
27
28
b2
78
c0
e0
f5
23
ef
bb
f7
16
e4
f3
ed
a4
08
23
30
b5
f4
a5
ab
6a
ec
de
6b
a9
30
61
28
18
fe
66
a9
5e
19
89
15
11
be
2d
94
21
b3
6c
52
de
b9
00
bf
ef
31
df
b4
8f
a4
4a
26
ff
4a
1e
f1*:
b4 3e
54 42
ab ab
00 00
00 00
00 00
a7
42
ab
00
00
00
05
42
ab
00
00
00
53
42
ab
00
00
00
11
42
ab
00
00
00
0c
42
ab
00
00
00
33
42
ab
00
00
00
e2
42
00
00
00
00
a8
42
00
00
00
00
23
42
00
00
00
00
46
42
00
00
00
00
95
42
00
00
00
00
ad
42
00
00
00
00
c2
42
00
00
00
00
7a
42
00
00
00
00
83
42
00
00
00
00
5d
ff
00
00
00
00
3c
ff
00
00
00
00
51
11
00
00
00
00
87
11
00
00
00
00
0e
11
00
00
00
00
53
11
00
00
00
00
d9
11
00
00
00
00
04
11
1f
00
00
00
bd
ab
00
00
00
00
88
ab
00
00
00
00
computing f1*:
c7 c6 4d 4b e9
65 a7 1e 21 b2
32 98 ce 01 55
de 3f da b2 7e
4e 73 ca c1 18
4c 08 b1 51 56
08
6c
ac
1a
61
5a
40
31
90
1e
8c
fe
73
72
a6
19
98
60
fe
ae
df
5c
87
0b
c7
3c
92
a3
0a
ce
69
c4
51
19
b9
ad
e9
ea
c1
02
60
14
b0
93
95
de
40
ca
ca
a1
b6
39
3d
09
72
4f
1a
94
40
b6
71
98
78
24
b4
8a
ef
17
25
d6
40
e2
e7
18
f0
1b
61
d3
7b
3d
48
eb
ab
a5
16
3a
ca
57
db
f4
1c
22
de
17
81
0c
8e
6e
ee
df
1e
a4
9d
ce
77
4b
44
d0
81
f0
5e
d2
1c
7e
4d
a9
e0
c7
62
db
4e
f1
9b
f9
0f
90
19
a6
cb
f4
03
d4
77
9d
14
57
95
c1
c0
ca
4b
84
0f
8a
8d
75
f9
7c
da
f7
when computing
cb cc 40 1f 5d
2e 31 4b 41 55
ab ab ab ab ab
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
f3 7d 29
f0 52 cd
2d fd ee
58 bb cf
43 7e bb
e3 c3 84
00 9f
3GPP TS 35.232 V12.1.0 (2014-06)
14
b4
54
ab
00
00
00
3GPP
Release 12
6.4
3GPP TS 35.232 V12.1.0 (2014-06)
15
Test set 2
Input Parameters:
K:
RAND:
SQN:
AMF:
fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0efeeedecebeae9e8e7e6e5e4e3e2e1e0
0123456789abcdef0123456789abcdef
0123456789ab
abcd
Operator Configuration Parameters:
TOP:
808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
Klength = 256 bits, MAClength = 128 bits, KeccakIterations = 1
TOPc:
305425427e18c503c8a4b294ea72c95d0c36c6c6b29d0c65de5974d5977f8524
Output Parameters:
f1:
f1*:
c0b8c2d4148ec7aa5f1d78a97e4d1d58
ef81af7290f7842c6ceafa537fa0745b
Intermediate Values:
IN
9f
30
e2
00
00
00
00
when computing
9e 9d 9c 9b 9a
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
24 85 7f
db 97 25
8c 8e 29
2f af 79
1c fb 47
13 f4 b7
8c b5
IN
24
30
e2
00
00
00
00
97
00
ea
00
00
00
96
00
eb
00
00
00
95
00
ec
00
00
00
94
00
ed
00
00
00
93
00
ee
00
00
00
92
00
ef
00
00
00
91
00
f0
00
00
00
90
00
f1
00
00
00
8f
00
f2
00
00
00
8e
00
f3
00
00
00
8d
00
f4
00
00
00
8c
00
f5
00
00
00
8b
00
f6
00
00
00
8a
00
f7
00
00
00
89
00
f8
00
00
00
88
00
f9
00
00
00
87
00
fa
00
00
00
86
00
fb
00
00
00
85
00
fc
00
00
00
84
00
fd
00
00
00
83
00
fe
00
00
00
82
00
ff
00
00
00
81
00
1f
00
00
00
80
e0
00
00
00
00
01
e1
00
00
00
00
computing TOPc:
97 d5 74 59 de 65
30 c0 28 ed 2d 29
1e 56 23 b9 87 fd
d2 df 63 ac f1 bb
97 c0 48 d0 36 08
2d 31 76 5a d2 19
0c
7e
e7
e2
c0
4f
9d
a9
9c
4a
10
42
b2
37
eb
7d
10
27
c6
bb
91
71
0f
70
c6
65
82
a3
02
2c
36
75
38
4b
dd
e1
0c
b6
96
48
81
98
5d
06
7c
ca
95
50
c9
03
e0
88
06
4e
72
b5
51
28
b9
21
ea
3d
0e
1a
8e
d3
94
24
15
55
0a
15
b2
25
dc
f5
1f
8f
a4
bf
83
e6
28
a6
c8
21
cd
6f
14
f1
03
85
84
61
a2
9e
c5
91
20
0f
54
e0
18
4c
b2
08
36
3a
7e
29
45
a0
d2
87
42
83
2a
b7
0a
90
25
a0
b8
05
7f
f0
54
c0
5f
11
27
a2
30
22
b6
b8
82
9c
90
7b
f5
1f
24
30
when computing
85 7f 97 d5 74
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
58 1d 4d
3f c3 e5
3d a6 ac
1f 26 4e
30 e2 b3
56 05 5a
59 4c
TOPc:
99 98
54 00
e8 e9
00 00
00 00
00 00
f1:
59 de
54 ef
e8 e9
00 00
00 00
00 00
65
cd
ea
00
00
00
0c
ab
eb
00
00
00
9d
89
ec
00
00
00
b2
67
ed
00
00
00
c6
45
ee
00
00
00
c6
23
ef
00
00
00
36
01
f0
00
00
00
0c
ef
f1
00
00
00
5d
cd
f2
00
00
00
c9
ab
f3
00
00
00
72
89
f4
00
00
00
ea
67
f5
00
00
00
94
45
f6
00
00
00
b2
23
f7
00
00
00
a4
01
f8
00
00
00
c8
cd
f9
00
00
00
03
ab
fa
00
00
00
c5
ab
fb
00
00
00
18
89
fc
00
00
00
7e
67
fd
00
00
00
42
45
fe
00
00
00
25
23
ff
00
00
00
54
01
1f
00
00
00
30
e0
00
00
00
00
11
e1
00
00
00
00
computing f1:
7e a9 78 1d 5f
7f 18 63 d3 62
45 16 59 2c 0f
c3 61 95 b6 12
8b 5c 8b 6b d8
4e de 7e c4 66
aa
f9
b3
79
90
74
c7
fc
f5
84
b6
37
8e
91
ec
66
14
24
14
f9
99
4f
1c
6d
d4
92
f1
3e
02
90
c2
b8
5b
74
7f
be
b8
50
94
ba
23
59
c0
48
dc
e0
9c
b6
11
54
bc
9e
bf
ed
fe
19
7a
b6
f4
f9
0e
ed
63
ce
f2
35
69
bf
bc
b0
e2
19
e9
ee
da
66
3c
50
d9
23
40
94
2d
68
72
79
36
22
c4
e6
c8
4d
5f
14
89
d2
9a
15
9e
8e
f3
f1
e9
09
a8
e8
7a
82
c0
57
d6
c9
61
60
99
82
e2
12
38
80
88
72
3a
dd
18
3d
b6
78
b2
dc
cd
07
2c
1a
9d
bf
64
bd
37
1d
b5
f9
7a
b7
ea
54
b7
f9
27
ae
3GPP
Release 12
IN
24
30
e2
00
00
00
00
when computing
85 7f 97 d5 74
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
5b 74 a0
7d 3d 57
f9 cc 1e
65 1e ef
ab ba 56
bc c3 ff
4b eb
3GPP TS 35.232 V12.1.0 (2014-06)
16
f1*:
59 de
54 ef
e8 e9
00 00
00 00
00 00
65
cd
ea
00
00
00
0c
ab
eb
00
00
00
9d
89
ec
00
00
00
b2
67
ed
00
00
00
c6
45
ee
00
00
00
c6
23
ef
00
00
00
36
01
f0
00
00
00
0c
ef
f1
00
00
00
5d
cd
f2
00
00
00
c9
ab
f3
00
00
00
72
89
f4
00
00
00
ea
67
f5
00
00
00
94
45
f6
00
00
00
b2
23
f7
00
00
00
a4
01
f8
00
00
00
c8
cd
f9
00
00
00
03
ab
fa
00
00
00
c5
ab
fb
00
00
00
18
89
fc
00
00
00
7e
67
fd
00
00
00
42
45
fe
00
00
00
25
23
ff
00
00
00
54
01
1f
00
00
00
30
e0
00
00
00
00
91
e1
00
00
00
00
computing f1*:
7f 53 fa ea 6c
fc ac c4 9c 07
bc 4f 8b 99 4c
55 3d b3 b0 0d
49 24 e4 2b 89
a1 0e 8d 25 df
2c
9d
3f
f3
fe
c5
84
fd
64
93
6a
1d
f7
e2
6a
c2
cd
72
90
ec
a5
d8
f8
ab
72
ac
f5
a4
23
86
af
e8
38
29
c8
0a
81
56
dc
cb
29
8a
ef
43
83
4c
15
e6
3c
78
64
d4
ad
cc
41
70
16
b6
a3
43
02
87
bf
e9
39
e2
e7
44
7d
3f
37
5e
94
63
32
11
c5
f7
ab
f5
e6
e1
f2
0c
e0
6f
cf
f4
c6
14
40
92
72
95
7a
82
1b
94
41
a4
f3
8c
ce
12
46
a1
c0
c9
a6
b1
63
5f
27
3d
44
6b
2b
dd
0f
e0
c2
67
df
50
d8
a7
c8
6d
11
e6
49
26
13
67
a5
e9
1d
ba
1f
d3
2a
67
1d
f6
54
3a
96
6e
22
f4
3GPP
Release 12
6.5
3GPP TS 35.232 V12.1.0 (2014-06)
17
Test set 3
Input Parameters:
K:
RAND:
SQN:
AMF:
fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0efeeedecebeae9e8e7e6e5e4e3e2e1e0
0123456789abcdef0123456789abcdef
0123456789ab
abcd
Operator Configuration Parameters:
TOP:
808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
Klength = 256 bits, MAClength = 256 bits, KeccakIterations = 1
TOPc:
305425427e18c503c8a4b294ea72c95d0c36c6c6b29d0c65de5974d5977f8524
Output Parameters:
f1:
f1*:
d97b75a1776065271b1e212bc3b1bf173f438b21e6c64a55a96c372e085e5cc5
427bbf07c6e3a86c54f8c5216499f3909a6fd4a164c9fe235b1550258111b821
Intermediate Values:
As for Test Set 2 in clause6 .4, when computing TOPc.
IN
24
30
e2
00
00
00
00
when computing
85 7f 97 d5 74
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
c5 5c 5e
4e b1 85
90 da 63
49 10 99
22 a0 e5
c4 69 23
00 1d
IN
24
30
e2
00
00
00
00
f1:
59 de
54 ef
e8 e9
00 00
00 00
00 00
65
cd
ea
00
00
00
0c
ab
eb
00
00
00
9d
89
ec
00
00
00
b2
67
ed
00
00
00
c6
45
ee
00
00
00
c6
23
ef
00
00
00
36
01
f0
00
00
00
0c
ef
f1
00
00
00
5d
cd
f2
00
00
00
c9
ab
f3
00
00
00
72
89
f4
00
00
00
ea
67
f5
00
00
00
94
45
f6
00
00
00
b2
23
f7
00
00
00
a4
01
f8
00
00
00
c8
cd
f9
00
00
00
03
ab
fa
00
00
00
c5
ab
fb
00
00
00
18
89
fc
00
00
00
7e
67
fd
00
00
00
42
45
fe
00
00
00
25
23
ff
00
00
00
54
01
1f
00
00
00
30
e0
00
00
00
00
21
e1
00
00
00
00
computing f1:
08 2e 37 6c a9
f6 20 a8 57 a8
7c 2d 0a 80 79
d1 62 e3 dd 92
4e e4 30 a1 76
70 70 50 4f 9e
55
55
02
03
5b
0a
4a
ce
a7
fa
bc
16
c6
33
a3
bb
bb
b2
e6
ce
b1
f9
cc
22
21
b3
fd
99
b0
5b
8b
98
ce
df
6d
ad
43
40
8b
76
b0
56
3f
b3
f2
ca
b9
58
17
06
ac
c8
c3
ff
bf
ca
0a
4e
95
19
b1
9c
0f
d6
26
26
c3
15
17
fb
4f
93
2b
6d
04
8a
3b
39
21
87
e3
da
4e
73
1e
36
3c
dd
b9
37
1b
0d
28
1e
d7
7a
27
3d
37
cf
6f
5c
65
e0
ed
07
d6
96
60
13
c6
be
fc
75
77
b0
df
52
bc
7f
a1
41
01
9e
f9
38
75
c8
88
74
4c
eb
7b
00
b9
6e
0e
a2
d9
68
5b
17
4f
c0
75
80
b6
c9
13
8e
f1*:
59 de
54 ef
e8 e9
00 00
00 00
00 00
65
cd
ea
00
00
00
0c
ab
eb
00
00
00
9d
89
ec
00
00
00
b2
67
ed
00
00
00
c6
45
ee
00
00
00
c6
23
ef
00
00
00
36
01
f0
00
00
00
0c
ef
f1
00
00
00
5d
cd
f2
00
00
00
c9
ab
f3
00
00
00
72
89
f4
00
00
00
ea
67
f5
00
00
00
94
45
f6
00
00
00
b2
23
f7
00
00
00
a4
01
f8
00
00
00
c8
cd
f9
00
00
00
03
ab
fa
00
00
00
c5
ab
fb
00
00
00
18
89
fc
00
00
00
7e
67
fd
00
00
00
42
45
fe
00
00
00
25
23
ff
00
00
00
54
01
1f
00
00
00
30
e0
00
00
00
00
a1
e1
00
00
00
00
computing f1*:
81 25 50 15 5b
1e 28 2a a6 4f
56 98 4a a3 ec
25 82 b1 b7 d2
ad 25 e5 b0 49
dd db f4 c9 9e
23
a7
fe
bd
14
a3
fe
ed
ef
0a
54
74
c9
58
a6
38
ba
40
64
9b
7a
6f
3a
96
a1
93
05
51
32
32
d4
f2
90
93
bd
ec
6f
37
67
a6
f8
8d
9a
b9
5a
b4
7d
bd
90
0d
67
a3
14
00
f3
d5
5b
b2
f0
1f
99
6f
95
00
3d
c6
64
c7
03
42
24
71
21
fa
fb
ab
61
f3
c5
6d
05
be
a8
31
f8
05
59
68
65
ae
54
a4
6d
ad
f1
5e
6c
c9
a7
2b
5f
fd
a8
b7
7b
58
51
3d
e3
5d
a7
da
62
90
c6
b4
0c
9d
41
bb
07
28
17
ac
ec
a5
bf
1c
aa
7c
3d
7b
7b
19
d6
9b
54
62
42
5b
2e
d5
d5
fb
d9
d7
c2
82
4f
a6
when computing
85 7f 97 d5 74
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
21 b8 11
20 f9 d5
fb 1d 5f
1d 24 5e
8a fb 15
b4 16 4f
46 d2
6.6
Test set 4
Input Parameters:
K:
RAND:
SQN:
AMF:
b8da837a50652d6ac7c97da14f6acc61
6887e55425a966bd86c9661a5fa72be8
0dea2ee2c5af
df1e
Operator Configuration Parameters:
3GPP
Release 12
3GPP TS 35.232 V12.1.0 (2014-06)
18
TOP:
0952be13556c32ebc58195d9dd930493e12a9003669988ffde5fa1f0fe35cc01
Klength = 128 bits, MAClength = 128 bits, KeccakIterations = 1
TOPc:
2bc16eb657a68e1f446f08f57c0efb1d493527a2e652ce281eb6ca0e4487760a
Output Parameters:
f1:
f1*:
749214087958dd8f58bfcdf869d8ae3f
619e865afe80e382aee13063f9dfb56d
Intermediate Values:
IN
01
30
6a
00
00
00
00
when computing
cc 35 fe f0 a1
2e 31 4b 41 55
4f a1 7d c9 c7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
0a 76 87
1d 66 b7
43 7f ae
5f 19 35
14 e6 0d
0d 1a 1d
13 42
TOPc:
5f de
54 00
6a 2d
00 00
00 00
00 00
ff
00
65
00
00
00
88
00
50
00
00
00
99
00
7a
00
00
00
66
00
83
00
00
00
03
00
da
00
00
00
90
00
b8
00
00
00
2a
00
00
00
00
00
e1
00
00
00
00
00
93
00
00
00
00
00
04
00
00
00
00
00
93
00
00
00
00
00
dd
00
00
00
00
00
d9
00
00
00
00
00
95
00
00
00
00
00
81
00
00
00
00
00
c5
00
00
00
00
00
eb
00
00
00
00
00
32
00
00
00
00
00
6c
00
00
00
00
00
55
00
00
00
00
00
13
00
00
00
00
00
be
00
00
00
00
00
52
00
1f
00
00
00
09
61
00
00
00
00
00
cc
00
00
00
00
computing TOPc:
44 0e ca b6 1e 28
67 81 62 b7 4d 5a
d3 2b 85 e1 38 af
fc eb 75 2c 8e 86
c1 43 ab 18 02 ee
9c 48 f7 89 a4 6d
ce
55
04
30
4c
00
52
3e
03
68
54
04
e6
82
66
1c
46
ef
a2
41
1c
fd
e5
a7
27
ec
68
80
a9
f3
35
7a
87
86
15
1c
49
e5
d9
46
af
7e
1d
dd
e6
cd
75
08
fb
89
84
31
10
a1
0e
25
c7
dd
f5
d4
7c
12
ec
5a
b6
85
f5
a9
20
65
e4
ae
08
44
78
8e
03
e1
6f
90
27
de
c5
4c
44
1a
ea
d4
84
15
1f
b6
bd
68
d3
fa
8e
e0
a3
40
d9
3a
a6
cb
63
d2
f5
09
57
c9
22
d7
9c
ac
b6
ee
2d
7e
83
62
6e
a3
f1
3d
07
00
c1
bd
e6
6f
96
5d
2b
86
f3
67
86
c7
6a
ad
bb
7b
62
8e
3GPP
Release 12
IN
0a
30
6a
00
00
00
00
when computing
76 87 44 0e ca
2e 31 4b 41 55
4f a1 7d c9 c7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
f1:
b6 1e
54 e8
6a 2d
00 00
00 00
00 00
OUT when computing f1:
3f ae d8 69 f8 cd bf 58
58 31 c8 61 39 47 b8 65
2c dc c3 e5 1d 00 e2 45
07 ff da 7a 49 0d 3e c1
54 fc 6f 31 45 1e 3c ed
8d cf 2e 29 fd 8c 6a 8d
4a 13
IN when computing f1*:
0a 76 87 44 0e ca b6 1e
30 2e 31 4b 41 55 54 e8
6a 4f a1 7d c9 c7 6a 2d
00 00 00 00 00 00 00 00
00 00 00 80 00 00 00 00
00 00 00 00 00 00 00 00
00 00
OUT when
6d b5 df
a7 ea 5f
76 31 3c
04 85 a7
41 96 71
01 86 af
5c b3
3GPP TS 35.232 V12.1.0 (2014-06)
19
computing f1*:
f9 63 30 e1 ae
bc b4 76 48 96
ba dc fb 2b 18
b3 05 b3 38 83
8a 8e 90 63 6b
b5 37 99 54 fc
28
2b
65
00
00
00
ce
a7
50
00
00
00
52
5f
7a
00
00
00
e6
1a
83
00
00
00
a2
66
da
00
00
00
27
c9
b8
00
00
00
35
86
00
00
00
00
49
bd
00
00
00
00
1d
66
00
00
00
00
fb
a9
00
00
00
00
0e
25
00
00
00
00
7c
54
00
00
00
00
f5
e5
00
00
00
00
08
87
00
00
00
00
6f
68
00
00
00
00
44
1e
00
00
00
00
1f
df
00
00
00
00
8e
af
00
00
00
00
a6
c5
00
00
00
00
57
e2
00
00
00
00
b6
2e
00
00
00
00
6e
ea
00
00
00
00
c1
0d
1f
00
00
00
2b
61
00
00
00
00
10
cc
00
00
00
00
8f
77
1c
91
a3
dd
dd
5b
e2
6d
39
c8
58
59
cd
5f
17
07
79
92
54
aa
44
a5
08
a5
ea
8c
87
c5
14
6e
44
a9
a2
e3
92
74
d2
92
6e
90
74
37
6b
43
6a
b7
cf
0e
b9
d1
1d
09
f4
9b
c3
99
58
38
d0
eb
db
3f
77
df
cd
fb
0b
72
76
54
c5
24
3e
ad
86
ae
0f
57
da
47
8a
a7
e0
5a
55
e2
e5
1e
23
04
d6
a6
c9
c9
26
ab
02
fa
02
9a
0d
80
7e
bb
d6
6c
55
11
87
68
7c
34
74
96
63
1e
07
5c
cf
c3
4d
c4
ce
6a
c5
9a
3a
17
5b
ae
a3
de
7d
54
79
e8
83
74
83
53
e3
04
6a
62
93
fe
9e
5d
28
2b
65
00
00
00
ce
a7
50
00
00
00
52
5f
7a
00
00
00
e6
1a
83
00
00
00
a2
66
da
00
00
00
27
c9
b8
00
00
00
35
86
00
00
00
00
49
bd
00
00
00
00
1d
66
00
00
00
00
fb
a9
00
00
00
00
0e
25
00
00
00
00
7c
54
00
00
00
00
f5
e5
00
00
00
00
08
87
00
00
00
00
6f
68
00
00
00
00
44
1e
00
00
00
00
1f
df
00
00
00
00
8e
af
00
00
00
00
a6
c5
00
00
00
00
57
e2
00
00
00
00
b6
2e
00
00
00
00
6e
ea
00
00
00
00
c1
0d
1f
00
00
00
2b
61
00
00
00
00
90
cc
00
00
00
00
82
e8
b4
53
03
19
e3
07
94
0e
60
18
80
e6
fb
9c
30
55
fe
32
a4
c3
80
09
5a
05
e2
de
95
85
86
16
0a
4b
93
73
9e
0d
68
a5
12
c7
61
e8
7a
c2
4b
e9
38
ee
35
c7
df
22
ad
f8
73
1e
a7
60
67
2e
41
35
22
c0
63
ed
bf
03
6f
bd
c4
bb
d9
cc
ca
07
95
95
81
19
04
e3
c9
c0
a9
0e
c8
23
d9
09
69
69
64
04
a6
60
18
22
77
66
36
8c
0b
18
e7
dd
e6
f7
26
f7
6e
3d
cb
ee
7d
b4
12
95
97
ba
11
42
51
af
a9
0c
fc
e4
88
93
0b
08
be
be
0e
13
9e
b4
de
a7
6e
14
39
9c
7a
06
d9
bf
3GPP
Release 12
6.7
3GPP TS 35.232 V12.1.0 (2014-06)
20
Test set 5
Input Parameters:
K:
RAND:
SQN:
AMF:
1574ca56881d05c189c82880f789c9cd4244955f4426aa2b69c29f15770e5aa5
c570aac68cde651fb1e3088322498bef
c89bb71f3a41
297d
Operator Configuration Parameters:
TOP:
e59f6eb10ea406813f4991b0b9e02f181edf4c7e17b480f66d34da35ee88c95e
Klength = 256 bits, MAClength = 64 bits, KeccakIterations = 1
TOPc:
3c6052e41532a28a47aa3cbb89f223e8f3aaa976aecd48bc3e7d6165a55eff62
Output Parameters:
f1:
f1*:
d7340dad02b4cb01
c6021e2e66accb15
Intermediate Values:
IN
5e
30
0e
00
00
00
00
when computing
c9 88 ee 35 da
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
62 ff 5e
f5 71 a5
df 81 0a
22 43 46
08 ea 5a
66 6d e3
1c 0f
IN
62
30
0e
00
00
00
00
IN
62
30
0e
00
00
00
00
f6
00
26
00
00
00
80
00
44
00
00
00
b4
00
5f
00
00
00
17
00
95
00
00
00
7e
00
44
00
00
00
4c
00
42
00
00
00
df
00
cd
00
00
00
1e
00
c9
00
00
00
18
00
89
00
00
00
2f
00
f7
00
00
00
e0
00
80
00
00
00
b9
00
28
00
00
00
b0
00
c8
00
00
00
91
00
89
00
00
00
49
00
c1
00
00
00
3f
00
05
00
00
00
81
00
1d
00
00
00
06
00
88
00
00
00
a4
00
56
00
00
00
0e
00
ca
00
00
00
b1
00
74
00
00
00
6e
00
15
00
00
00
9f
00
1f
00
00
00
e5
a5
00
00
00
00
01
5a
00
00
00
00
computing TOPc:
a5 65 61 7d 3e bc
ba 6c 9d 75 07 6f
0a b1 1f 3d 73 47
74 bd 13 f2 ef 33
75 44 fd ce 57 08
24 de 09 24 72 4d
48
91
e5
54
ea
20
cd
9a
77
45
7b
ae
ae
b5
d9
2f
2d
2a
76
a5
b3
2e
a1
ce
a9
4c
fc
c9
c2
d6
aa
d7
93
b0
a9
e0
f3
78
75
91
15
5b
e8
70
6e
b3
bc
ea
23
f9
ef
1b
2a
53
f2
b7
30
51
48
22
89
8d
fd
e3
cd
91
bb
11
3d
11
a1
27
3c
f2
8a
29
58
96
aa
61
38
ab
2d
3f
47
41
9a
2a
05
b9
8a
78
80
70
6e
4f
a2
05
ad
54
6e
72
32
1e
11
96
25
28
15
d8
97
ff
c7
85
e4
ba
2f
c9
48
02
52
a8
07
ce
24
cb
60
cd
a8
ee
7a
a6
3c
6e
fe
e8
6e
94
43
09
f8
7e
95
95
when computing
ff 5e a5 65 61
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
01 cb b4
ae 0c f2
4d 34 4b
a3 0f b0
d7 f8 22
02 c7 e2
83 2c
f1:
7d 3e
54 ef
2b aa
00 00
00 00
00 00
bc
8b
26
00
00
00
48
49
44
00
00
00
cd
22
5f
00
00
00
ae
83
95
00
00
00
76
08
44
00
00
00
a9
e3
42
00
00
00
aa
b1
cd
00
00
00
f3
1f
c9
00
00
00
e8
65
89
00
00
00
23
de
f7
00
00
00
f2
8c
80
00
00
00
89
c6
28
00
00
00
bb
aa
c8
00
00
00
3c
70
89
00
00
00
aa
c5
c1
00
00
00
47
7d
05
00
00
00
8a
29
1d
00
00
00
a2
41
88
00
00
00
32
3a
56
00
00
00
15
1f
ca
00
00
00
e4
b7
74
00
00
00
52
9b
15
00
00
00
60
c8
1f
00
00
00
3c
a5
00
00
00
00
09
5a
00
00
00
00
computing f1:
02 ad 0d 34 d7
e9 24 4b e1 37
60 b2 1c a6 84
97 33 53 70 f0
52 05 97 76 b6
d4 56 4e 32 f7
dd
2f
ba
57
f2
57
3d
4d
97
7a
65
8f
1c
42
d3
4c
90
cb
29
18
4c
cd
cd
55
35
ff
17
f3
b6
75
6f
e0
88
7f
ae
18
0c
4e
92
b5
5b
9a
34
b0
cd
2d
34
97
05
4c
8d
06
c8
44
fb
8d
92
d6
08
2c
f6
83
44
5d
86
9a
00
3f
64
a8
ee
36
94
5b
37
0e
da
cf
91
5f
c1
de
a4
58
47
0a
0f
90
18
d9
ff
c6
54
6c
e9
e6
38
b2
af
f5
d6
c8
52
13
d1
a8
60
66
13
d5
54
d9
1f
cf
d1
7b
b3
0c
59
a1
10
5f
20
cf
24
28
a7
1c
c1
40
df
98
f5
b5
06
db
16
b0
4d
18
0a
c0
71
46
4e
dc
de
38
99
f7
f1*:
7d 3e
54 ef
2b aa
00 00
00 00
00 00
bc
8b
26
00
00
00
48
49
44
00
00
00
cd
22
5f
00
00
00
ae
83
95
00
00
00
76
08
44
00
00
00
a9
e3
42
00
00
00
aa
b1
cd
00
00
00
f3
1f
c9
00
00
00
e8
65
89
00
00
00
23
de
f7
00
00
00
f2
8c
80
00
00
00
89
c6
28
00
00
00
bb
aa
c8
00
00
00
3c
70
89
00
00
00
aa
c5
c1
00
00
00
47
7d
05
00
00
00
8a
29
1d
00
00
00
a2
41
88
00
00
00
32
3a
56
00
00
00
15
1f
ca
00
00
00
e4
b7
74
00
00
00
52
9b
15
00
00
00
60
c8
1f
00
00
00
3c
a5
00
00
00
00
89
5a
00
00
00
00
computing f1*:
66 2e 1e 02 c6
c0 fb 55 7f 5f
7d 0c 75 56 4a
f5 a5 fb fa 49
05 ba ba c3 e5
a0
bd
6a
1b
4c
8d
41
5f
07
b4
88
ca
ce
a8
34
13
30
85
3e
46
f1
2b
7b
d8
93
23
f7
1d
1f
6b
34
31
68
8b
1e
c7
0c
11
b6
17
bb
9b
98
22
3f
f6
35
ab
3d
c6
0e
64
ca
29
a9
14
ae
ed
d2
f5
55
7b
76
71
bc
9b
48
72
ce
38
d3
86
e5
91
5d
d6
69
b6
01
37
73
fd
4d
e5
68
a5
3a
1b
0c
90
ea
d8
3e
34
b8
4d
5d
0b
0c
6b
c5
86
36
e4
8c
98
e4
51
9e
2f
e9
e7
73
65
4a
63
46
d9
ea
66
dd
07
dc
5f
a1
when computing
ff 5e a5 65 61
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
15 cb ac
ec bf 5e
05 e3 8e
24 10 72
ad d6 38
TOPc:
34 6d
54 00
2b aa
00 00
00 00
00 00
3GPP
Release 12
21
3GPP TS 35.232 V12.1.0 (2014-06)
75 8f 17 a0 9c 2e d8 8d 79 0d 59 9a 03 15 27 6e 66 17 33 cf 33 7c d4 8d 22 b1 09 50 46 eb f0 73 a4
82 24
3GPP
Release 12
6.8
3GPP TS 35.232 V12.1.0 (2014-06)
22
Test set 6
Input Parameters:
K:
RAND:
SQN:
AMF:
1574ca56881d05c189c82880f789c9cd4244955f4426aa2b69c29f15770e5aa5
c570aac68cde651fb1e3088322498bef
c89bb71f3a41
297d
Operator Configuration Parameters:
TOP:
e59f6eb10ea406813f4991b0b9e02f181edf4c7e17b480f66d34da35ee88c95e
Klength = 256 bits, MAClength = 256 bits, KeccakIterations = 2
TOPc:
b04a66f26c62fcd6c82de22a179ab65506ecf47f56245cd149966cfa9cec7a51
Output Parameters:
f1:
f1*:
90d2289ed1ca1c3dbc2247bb480d431ac71d2e4a7677f6e997cfddb0cbad88b7
427355dbac30e825063aba61b556e87583abac638e3ab01c4c884ad9d458dc2f
Intermediate Values:
IN
5e
30
0e
00
00
00
00
when computing
c9 88 ee 35 da
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
TOPc:
34 6d
54 00
2b aa
00 00
00 00
00 00
e0
00
80
00
00
00
b9
00
28
00
00
00
b0
00
c8
00
00
00
91
00
89
00
00
00
49
00
c1
00
00
00
3f
00
05
00
00
00
81
00
1d
00
00
00
06
00
88
00
00
00
a4
00
56
00
00
00
0e
00
ca
00
00
00
b1
00
74
00
00
00
6e
00
15
00
00
00
9f
00
1f
00
00
00
e5
a5
00
00
00
00
01
5a
00
00
00
00
OUT/IN after one Keccak
62 ff 5e a5 65 61 7d 3e
f5 71 a5 ba 6c 9d 75 07
df 81 0a 0a b1 1f 3d 73
22 43 46 74 bd 13 f2 ef
08 ea 5a 75 44 fd ce 57
66 6d e3 24 de 09 24 72
1c 0f
iteration, when computing TOPc:
bc 48 cd ae 76 a9 aa f3 e8 23 f2
6f 91 9a b5 a5 4c d7 78 70 f9 b7
47 e5 77 d9 b3 fc 93 75 6e ef 30
33 54 45 2f 2e c9 b0 91 b3 1b 51
08 ea 7b 2d a1 c2 a9 15 bc 2a 48
4d 20 ae 2a ce d6 e0 5b ea 53 22
89
8d
fd
e3
cd
91
bb
11
3d
11
a1
27
3c
f2
8a
29
58
96
aa
61
38
ab
2d
3f
47
41
9a
2a
05
b9
8a
78
80
70
6e
4f
a2
05
ad
54
6e
72
32
1e
11
96
25
28
15
d8
97
ff
c7
85
e4
ba
2f
c9
48
02
52
a8
07
ce
24
cb
60
cd
a8
ee
7a
a6
3c
6e
fe
e8
6e
94
43
09
f8
7e
95
95
OUT after second Keccak
51 7a ec 9c fa 6c 96 49
93 fc cc 52 f0 45 26 53
44 5b dc c3 f1 07 43 37
d8 db 1c 3b c3 4b 96 e9
79 c6 bd a0 1a 35 96 0f
c8 f8 7c e7 d7 b6 2d a8
67 ac
iteration, when computing TOPc:
d1 5c 24 56 7f f4 ec 06 55 b6 9a
4e 5f 33 9f ec 28 68 9d 6b 24 10
b8 b5 fd c5 e0 dd dd 91 04 aa 78
23 ed 3f af 4a ec fc cf 8e f4 e0
03 a3 78 17 bf a6 85 ad 3a 43 d1
db 9c 87 72 e8 2c 07 12 2c 95 61
17
d4
b3
a1
46
6c
2a
ef
38
52
45
ee
e2
31
64
90
98
1b
2d
27
72
44
da
03
c8
6d
7d
40
b6
3f
d6
f1
46
40
9a
2b
fc
28
13
07
54
77
62
30
78
e4
e4
20
6c
88
3b
1b
56
c1
f2
bc
35
2d
5d
2c
66
84
fa
53
0b
65
4a
4d
09
47
5b
a7
b0
e3
61
11
71
4d
5f
18
77
e4
3a
45
d1
8b
26
00
00
00
17
c6
28
00
00
00
2a
aa
c8
00
00
00
e2
70
89
00
00
00
2d
c5
c1
00
00
00
c8
7d
05
00
00
00
d6
29
1d
00
00
00
fc
41
88
00
00
00
62
3a
56
00
00
00
6c
1f
ca
00
00
00
f2
b7
74
00
00
00
66
9b
15
00
00
00
4a
c8
1f
00
00
00
b0
a5
00
00
00
00
21
5a
00
00
00
00
IN
51
30
0e
00
00
00
00
when computing
7a ec 9c fa 6c
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
f1:
96 49
54 ef
2b aa
00 00
00 00
00 00
f6
00
26
00
00
00
80
00
44
00
00
00
5c
49
44
00
00
00
b4
00
5f
00
00
00
24
22
5f
00
00
00
17
00
95
00
00
00
56
83
95
00
00
00
7e
00
44
00
00
00
7f
08
44
00
00
00
4c
00
42
00
00
00
f4
e3
42
00
00
00
df
00
cd
00
00
00
ec
b1
cd
00
00
00
1e
00
c9
00
00
00
06
1f
c9
00
00
00
18
00
89
00
00
00
55
65
89
00
00
00
2f
00
f7
00
00
00
b6
de
f7
00
00
00
3GPP
9a
8c
80
00
00
00
Release 12
3GPP TS 35.232 V12.1.0 (2014-06)
23
OUT/IN after one Keccak
26 52 3f 89 99 46 a9 85
22 63 bb 8b ee 5a c0 b4
30 26 ef e3 4b c9 d7 c9
eb a0 cb 01 34 59 18 58
16 6d f2 84 90 b4 29 e9
76 4e bc a7 0f cd 6f 12
57 e9
iteration, when computing f1:
f3 76 19 e7 38 9b 7e 42 e7 ab
b6 04 9d 77 54 69 a3 5c 21 42
2f 62 8c 25 95 e3 00 61 3d c1
b0 db ed 7f 54 f1 4f 5f 43 78
06 b0 9f 3d 09 dc d6 d9 9f 8f
46 fe 82 67 23 ab 3f 17 94 e1
ff
a5
df
6c
3d
56
ff
0d
db
44
a8
82
8c
d6
a7
38
b7
b9
82
28
1c
9d
14
48
cb
4d
18
a8
40
b9
1b
83
87
26
4e
08
0f
be
22
b6
7e
00
22
05
18
34
07
2c
5f
57
12
41
e9
cc
1d
50
e4
1e
dc
c1
64
3c
53
28
d4
7b
29
5f
27
98
fd
ef
a3
55
1d
6f
36
4d
36
0d
98
a6
a9
c9
e2
18
20
7d
fa
70
OUT after second Keccak
b7 88 ad cb b0 dd cf 97
69 1a f6 7f 10 1f 51 d8
2e 02 c7 08 cd 6d 56 5a
fc 7a d5 b7 30 a7 76 22
7a a6 0c 0c 1c 25 ed b1
fa 92 72 3d 47 63 86 45
a1 47
iteration, when computing f1:
e9 f6 77 76 4a 2e 1d c7 1a 43
d6 91 9c 19 55 1d 80 28 97 a8
2a 7f 42 77 c7 7b c5 dd cb 2d
6b d5 b0 e6 e5 b7 47 d5 03 af
d1 bb bb 15 40 3a bf fc 83 b5
6c 61 4c c9 30 93 1c f7 73 52
0d
e1
8f
b3
c3
24
48
d6
f5
a1
87
7c
bb
11
a2
64
7a
20
47
68
02
f9
2f
96
22
70
76
b1
65
f8
bc
01
d1
f0
82
95
3d
39
0b
b5
1f
aa
1c
24
da
aa
41
1c
ca
28
13
13
97
b1
d1
7e
f0
99
06
63
9e
b8
ac
8c
8f
44
28
b8
06
fd
13
74
d2
c4
76
a4
f1
db
90
54
05
69
7f
f4
f3
0f
14
b0
fb
0c
d1
8b
26
00
00
00
9a
8c
80
00
00
00
17
c6
28
00
00
00
2a
aa
c8
00
00
00
e2
70
89
00
00
00
2d
c5
c1
00
00
00
c8
7d
05
00
00
00
d6
29
1d
00
00
00
fc
41
88
00
00
00
62
3a
56
00
00
00
6c
1f
ca
00
00
00
f2
b7
74
00
00
00
66
9b
15
00
00
00
4a
c8
1f
00
00
00
b0
a5
00
00
00
00
a1
5a
00
00
00
00
OUT/IN after one Keccak
24 76 d2 da c5 9e 2e 93
b0 af b6 c7 3e 37 ce 8c
ae 0b d8 05 20 c4 3a d4
97 0a 34 56 b6 ce 2c 78
22 ea c6 11 a9 8e 0e 74
ad 4b e4 4c 4d 2d 98 1a
0b 50
iteration, when computing f1*:
49 df 32 55 a9 da b1 b6 9e b5 c2
cc cf 20 b7 9d 8a 67 29 41 49 17
b4 36 62 57 92 a7 6c 52 08 9d 0f
cd 11 28 71 7f 4b db 73 1a 4c 97
42 b9 99 64 75 22 93 e4 f9 c6 96
34 12 08 1c 9c 6b 05 c9 93 ff 1c
08
48
73
db
ba
56
f1
09
92
e5
05
1a
51
e4
71
eb
f0
0d
c7
29
15
73
7a
24
30
70
1a
53
21
2b
9e
93
37
fe
45
47
8c
30
59
81
1f
06
8f
c4
4d
e3
90
d5
17
ad
f6
7c
73
01
db
23
6d
33
0c
c3
45
1d
e4
ac
96
47
6d
3e
42
60
78
65
0b
52
9f
b8
c6
b3
5e
11
3c
21
45
7a
OUT after second Keccak
2f dc 58 d4 d9 4a 88 4c
64 6f 87 18 9b 43 54 25
5a c2 27 f6 7f 2a d8 a0
88 a3 dc 06 29 bd ed 79
aa a7 42 dc 19 3f f7 8c
8e 59 5e a4 bb 92 99 2c
1e a7
iteration, when computing f1*:
1c b0 3a 8e 63 ac ab 83 75 e8 56
b5 d6 65 4e 22 82 28 b6 97 b8 1c
62 97 67 82 b0 8a 7e c3 f1 b5 38
5f 32 20 f3 c6 5c 76 bd d0 12 43
17 67 a3 8a 1c 96 40 8c ce 16 92
7c 2d 3d cd 38 19 75 b6 e0 5f 85
b5
be
d6
e8
39
ba
61
ad
00
8f
b0
18
ba
65
8c
63
77
15
3a
5b
0b
d6
f2
20
06
71
ab
91
90
96
25
aa
ef
2e
3a
cc
e8
cc
83
5f
07
30
30
c2
da
b5
b8
ed
ac
5e
64
cd
c4
22
db
3d
36
a1
6a
14
55
7e
6b
67
04
0f
73
51
62
b7
8d
f3
42
b5
a5
1f
66
b6
86
cb
3f
9b
31
71
IN
51
30
0e
00
00
00
00
when computing
7a ec 9c fa 6c
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
f1*:
96 49
54 ef
2b aa
00 00
00 00
00 00
5c
49
44
00
00
00
24
22
5f
00
00
00
56
83
95
00
00
00
7f
08
44
00
00
00
f4
e3
42
00
00
00
ec
b1
cd
00
00
00
06
1f
c9
00
00
00
55
65
89
00
00
00
b6
de
f7
00
00
00
Note that this final iteration corresponds to Test Set 1 for Keccak inclause 5.3.
3GPP
Release 12
24
7
Algorithms f2, f3, f4, f5 and f5*
7.1
Overview
3GPP TS 35.232 V12.1.0 (2014-06)
The test data sets presented here are for the algorithms f2, f3, f4, f5, f5*. Inputs and outputs to the permutation Π are
also presented here to assist with the implementation.
7.2
Format
Each test starts by showing the inputs K and RAND to the functions. Next are shown the operator configuration field
TOP, and other operator configuration parameters: the length of the K, the length of the outputs CK, IK and RES, and
the number of Keccak iterations.
These are followed by the value of TOP C and then the output values of f2-f5 and f5* are shown. The value TOPC should
not be computed on but off the UICC. In the example code TOP C is computed inside the functions, so it was included in
the test data.
All the input, output and configuration parameters are presented using the bit/byte ordering convention described in
clause 4.3. Intermediate inputs and outputs to the permutation Π are also shown, as lists of 200 bytes, using the
convention described in clause 5.2.
3GPP
Release 12
7.3
3GPP TS 35.232 V12.1.0 (2014-06)
25
Test set 1
Input Parameters:
K:
RAND:
abababababababababababababababab
42424242424242424242424242424242
Operator Configuration Parameters:
TOP:
5555555555555555555555555555555555555555555555555555555555555555
Klength = 128 bits, CKlength = 128 bits, IKlength = 128 bits,
RESLength = 32 bits, KeccakIterations = 1
TOPc:
bd04d9530e87513c5d837ac2ad954623a8e2330c115305a73eb45d1f40cccbff
Output Parameters:
f2:
f3:
f4:
f5:
f5*:
657acd64
d71a1e5c6caffe986a26f783e5c78be1
be849fa2564f869aecee6f62d4337e72
719f1e9b9054
e7af6b3d0e38
Intermediate Values:
As for Test Set 1 in clause 6.3, when computing TOPc.
IN
ff
30
ab
00
00
00
00
when computing
cb cc 40 1f 5d
2e 31 4b 41 55
ab ab ab ab ab
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
f2-f5:
b4 3e a7
54 42 42
ab ab ab
00 00 00
00 00 00
00 00 00
05
42
ab
00
00
00
53
42
ab
00
00
00
11
42
ab
00
00
00
0c
42
ab
00
00
00
33
42
ab
00
00
00
e2
42
00
00
00
00
a8
42
00
00
00
00
23
42
00
00
00
00
46
42
00
00
00
00
3GPP
95
42
00
00
00
00
ad
42
00
00
00
00
c2
42
00
00
00
00
7a
42
00
00
00
00
83
42
00
00
00
00
5d
00
00
00
00
00
3c
00
00
00
00
00
51
00
00
00
00
00
87
00
00
00
00
00
0e
00
00
00
00
00
53
00
00
00
00
00
d9
00
00
00
00
00
04
00
1f
00
00
00
bd
ab
00
00
00
00
40
ab
00
00
00
00
Release 12
OUT when
64 cd 7a
8b c7 e5
33 d4 62
1e 9f 71
e8 09 5d
37 88 6c
73 8b
IN
ff
30
ab
00
00
00
00
computing f2-f5:
65 43 ac 5e 7a a6
83 f7 26 6a 98 fe
6f ee ec 9a 86 4f
33 52 f1 8b e8 b5
35 57 da cd ee 0b
ad 0a cd 41 02 1e
when computing
cb cc 40 1f 5d
2e 31 4b 41 55
ab ab ab ab ab
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
46 6b 1d
00 8c 8c
e2 8f 0e
6b af e7
6b 38 5d
67 b1 70
56 9b
3GPP TS 35.232 V12.1.0 (2014-06)
26
f8
af
56
f0
ad
a0
d1
6c
a2
37
c1
61
82
5c
9f
71
99
7c
ec
1e
84
57
b4
2c
01
1a
be
45
c5
6a
84
d7
f6
62
ff
78
d9
13
7b
92
80
ff
16
32
f6
1a
7f
46
97
e5
1a
4d
77
b5
5e
90
31
74
61
c9
5e
c7
a8
b5
5f
68
fc
72
cd
76
b4
28
3b
8f
73
12
4a
0c
0b
04
76
8c
ce
bb
c7
0e
a5
d9
33
6a
87
db
40
b3
d2
29
80
e9
02
53
5e
52
f7
a9
bd
ee
de
2e
f0
8a
ae
4b
8e
53
94
52
f1
9a
19
c2
db
1c
f0
16
44
99
05
e2
54
ff
39
16
1a
72
90
6a
f2
9a
e1
7e
9b
aa
e5
61
f5*:
b4 3e
54 42
ab ab
00 00
00 00
00 00
a7
42
ab
00
00
00
05
42
ab
00
00
00
53
42
ab
00
00
00
11
42
ab
00
00
00
0c
42
ab
00
00
00
33
42
ab
00
00
00
e2
42
00
00
00
00
a8
42
00
00
00
00
23
42
00
00
00
00
46
42
00
00
00
00
95
42
00
00
00
00
ad
42
00
00
00
00
c2
42
00
00
00
00
7a
42
00
00
00
00
83
42
00
00
00
00
5d
00
00
00
00
00
3c
00
00
00
00
00
51
00
00
00
00
00
87
00
00
00
00
00
0e
00
00
00
00
00
53
00
00
00
00
00
d9
00
00
00
00
00
04
00
1f
00
00
00
bd
ab
00
00
00
00
c0
ab
00
00
00
00
computing f5*:
bd 30 d3 3e 41
02 08 71 70 e0
bd 1f a1 b8 48
fb 66 1a 2e 97
68 c2 2d 8a 60
11 b7 44 9b eb
a9
52
97
4a
32
28
65
e8
e5
bf
2b
99
b0
bf
24
f0
de
e9
17
ab
31
6d
04
7e
b1
d5
72
7f
0d
36
63
cf
61
94
82
9f
d5
67
bf
a5
46
a6
aa
b0
4c
ec
6e
17
3f
dc
2c
1b
39
13
75
d0
69
8e
cf
a9
7f
cb
18
ef
ec
1f
65
94
b2
46
ac
c7
ec
e7
66
3e
6c
d4
81
a7
76
11
b7
1e
5b
08
78
b6
cc
91
e0
20
92
e0
cc
fe
e1
7d
e2
59
1e
4a
f1
40
87
77
8d
46
97
f7
13
19
fd
a0
5b
ef
c1
ae
1b
a3
c9
2e
9e
7d
87
e9
a0
86
82
27
9a
b9
70
bf
38
f5
ff
38
61
81
0e
f9
29
5b
64
99
3d
5e
72
c8
3GPP
Release 12
7.4
3GPP TS 35.232 V12.1.0 (2014-06)
27
Test set 2
Input Parameters:
K:
RAND:
fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0efeeedecebeae9e8e7e6e5e4e3e2e1e0
0123456789abcdef0123456789abcdef
Operator Configuration Parameters:
TOP:
808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
Klength = 256 bits, CKlength = 128 bits, IKlength = 128 bits,
RESLength = 64 bits, KeccakIterations = 1
TOPc:
305425427e18c503c8a4b294ea72c95d0c36c6c6b29d0c65de5974d5977f8524
Output Parameters:
f2:
f3:
f4:
f5:
f5*:
e9d749dc4eea0035
a4cb6f6529ab17f8337f27baa8234d47
2274155ccf4199d5e2abcbf621907f90
480a9345cc1e
f84eb338848c
Intermediate Values:
As for Test Set 2 in clause 6.4, when computing TOPc.
IN
24
30
e2
00
00
00
00
when computing
85 7f 97 d5 74
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
35 00 ea
4d 23 a8
90 21 f6
93 0a 48
60 ff 16
8e 66 25
40 31
IN
24
30
e2
00
00
00
00
f2-f5:
59 de 65
54 ef cd
e8 e9 ea
00 00 00
00 00 00
00 00 00
0c
ab
eb
00
00
00
9d
89
ec
00
00
00
b2
67
ed
00
00
00
c6
45
ee
00
00
00
c6
23
ef
00
00
00
36
01
f0
00
00
00
0c
ef
f1
00
00
00
5d
cd
f2
00
00
00
c9
ab
f3
00
00
00
72
89
f4
00
00
00
ea
67
f5
00
00
00
94
45
f6
00
00
00
b2
23
f7
00
00
00
a4
01
f8
00
00
00
c8
00
f9
00
00
00
03
00
fa
00
00
00
c5
00
fb
00
00
00
18
00
fc
00
00
00
7e
00
fd
00
00
00
42
00
fe
00
00
00
25
00
ff
00
00
00
54
00
1f
00
00
00
30
e0
00
00
00
00
49
e1
00
00
00
00
computing f2-f5:
4e dc 49 d7 e9 ec
ba 27 7f 33 f8 17
cb ab e2 d5 99 41
1b 99 ad 40 f6 06
af 27 d4 b3 89 ec
e4 5e 83 1e 79 35
66
ab
cf
d7
b5
9b
ca
29
5c
f4
5c
f4
43
65
15
12
0e
b8
7c
6f
74
47
7e
c2
c7
cb
22
88
1e
8e
37
a4
5f
d6
7f
88
70
41
68
b6
ed
26
f9
fd
0a
fe
e7
f1
06
a2
9d
66
b8
fb
35
ba
4e
da
0b
5b
f0
f5
a5
8c
37
8b
2c
a3
e1
9d
e0
b4
f3
45
20
53
17
82
99
0b
e5
8a
8f
1a
02
b0
8c
21
86
5e
fa
c5
28
ad
8c
76
a5
0f
a2
08
eb
13
f7
29
fa
f7
b9
fb
4d
2b
ad
c0
12
48
38
3b
50
cc
63
32
c5
ca
34
61
bc
11
7f
35
1e
34
c1
87
84
90
cc
1d
72
80
47
7f
45
4c
6e
5a
when computing
85 7f 97 d5 74
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
2b 8b b3
03 de e6
89 79 9c
b3 4e f8
36 b0 91
06 b7 3f
02 5e
7.5
f5*:
59 de
54 ef
e8 e9
00 00
00 00
00 00
65
cd
ea
00
00
00
0c
ab
eb
00
00
00
9d
89
ec
00
00
00
b2
67
ed
00
00
00
c6
45
ee
00
00
00
c6
23
ef
00
00
00
36
01
f0
00
00
00
0c
ef
f1
00
00
00
5d
cd
f2
00
00
00
c9
ab
f3
00
00
00
72
89
f4
00
00
00
ea
67
f5
00
00
00
94
45
f6
00
00
00
b2
23
f7
00
00
00
a4
01
f8
00
00
00
c8
00
f9
00
00
00
03
00
fa
00
00
00
c5
00
fb
00
00
00
18
00
fc
00
00
00
7e
00
fd
00
00
00
42
00
fe
00
00
00
25
00
ff
00
00
00
54
00
1f
00
00
00
30
e0
00
00
00
00
c1
e1
00
00
00
00
computing f5*:
71 5f 6f 3d a7
a0 0e 01 56 32
69 96 3f ab e6
e4 ad cd 1a a9
13 6f 96 90 e2
5b a3 dd 23 50
0a
7c
d0
fe
d4
76
69
8c
76
7a
79
ac
56
71
16
61
d4
1d
67
f4
06
3c
6d
55
60
e3
0e
e6
31
42
93
88
36
ba
d3
5e
cd
8d
d1
5e
9b
6e
86
f6
09
0b
f4
f9
85
a3
9d
79
10
e3
2f
77
a1
d7
75
f7
b8
c8
b7
0d
08
20
d1
00
69
22
e4
3c
69
aa
c2
7f
b5
47
c8
33
7e
33
8a
0a
34
c5
cd
9e
9b
98
65
29
e5
6a
e6
32
1d
5c
7d
3d
e5
18
0c
bb
87
fb
d0
b1
76
e5
d6
3d
0a
2a
cd
81
a7
f5
48
c9
31
62
1f
fa
e4
f4
7c
10
01
94
c0
d6
de
23
8c
5e
67
b9
24
26
84
98
51
05
be
bd
38
10
93
9a
Test set 3
Input Parameters:
K:
RAND:
fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0efeeedecebeae9e8e7e6e5e4e3e2e1e0
0123456789abcdef0123456789abcdef
Operator Configuration Parameters:
TOP:
808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
Klength = 256 bits, CKlength = 128 bits, IKlength = 256 bits,
3GPP
Release 12
3GPP TS 35.232 V12.1.0 (2014-06)
28
RESLength = 64 bits, KeccakIterations = 1
TOPc:
305425427e18c503c8a4b294ea72c95d0c36c6c6b29d0c65de5974d5977f8524
Output Parameters:
f2:
f3:
f4:
f5:
f5*:
07021c73e7635c7d
4d59ac796834eb85d11fa148a5058c3c
126d47500136fdc5ddfd14f19ebf16749ce4b6435323fbb5715a3a796a6082bd
1d6622c4e59a
f84eb338848c
Intermediate Values:
As for Test Set 2 in clause6.4, when computing TOPc.
IN
24
30
e2
00
00
00
00
when computing
85 7f 97 d5 74
2e 31 4b 41 55
e3 e4 e5 e6 e7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
f2-f5:
59 de 65
54 ef cd
e8 e9 ea
00 00 00
00 00 00
00 00 00
0c
ab
eb
00
00
00
9d
89
ec
00
00
00
b2
67
ed
00
00
00
c6
45
ee
00
00
00
c6
23
ef
00
00
00
36
01
f0
00
00
00
0c
ef
f1
00
00
00
5d
cd
f2
00
00
00
c9
ab
f3
00
00
00
OUT when computing f2-f5:
7d 5c 63 e7 73 1c 02 07 12 5c 5e fe bf 31 b4 c9 22 52
8c 05 a5 48 a1 1f d1 85 eb 34 68 79 ac 59 4d ac 21 e8
60 6a 79 3a 5a 71 b5 fb 23 53 43 b6 e4 9c 74 16 bf 9e
22 66 1d 2c 03 c8 d4 c3 e9 59 a9 6e a8 cb d2 8a 81 4a
03 74 83 39 1f 3c 39 2f 3a 05 a9 43 3c 11 de 27 eb 6f
e3 b8 8b d2 33 48 f2 20 3b 60 f7 f6 82 78 e6 7a 35 d2
24 3e
As for Test Set 2 in clause7.4, when computing f5*.
3GPP
72
89
f4
00
00
00
ea
67
f5
00
00
00
94
45
f6
00
00
00
b2
23
f7
00
00
00
a4
01
f8
00
00
00
c8
00
f9
00
00
00
03
00
fa
00
00
00
c5
00
fb
00
00
00
18
00
fc
00
00
00
7e
00
fd
00
00
00
42
00
fe
00
00
00
25
00
ff
00
00
00
54
00
1f
00
00
00
30
e0
00
00
00
00
4b
e1
00
00
00
00
ed
b7
f1
18
67
e7
1e
cd
14
8b
4d
28
96
87
fd
2f
98
fb
2a
d5
dd
a6
7a
2f
98
57
c5
c1
90
7d
3f
a0
fd
c6
ad
52
87
b4
36
f1
f1
08
bf
19
01
44
74
ce
79
c4
50
2f
8c
11
3b
67
47
96
26
9e
1a
2c
6d
5e
f3
40
d0
74
12
af
65
44
93
ef
9a
ab
fc
30
43
bd
e5
93
69
6e
3c
82
c4
11
75
e7
Release 12
7.6
3GPP TS 35.232 V12.1.0 (2014-06)
29
Test set 4
Input Parameters:
K:
RAND:
b8da837a50652d6ac7c97da14f6acc61
6887e55425a966bd86c9661a5fa72be8
Operator Configuration Parameters:
TOP:
0952be13556c32ebc58195d9dd930493e12a9003669988ffde5fa1f0fe35cc01
Klength = 128 bits, CKlength = 128 bits, IKlength = 128 bits,
RESLength = 128 bits, KeccakIterations = 1
TOPc:
2bc16eb657a68e1f446f08f57c0efb1d493527a2e652ce281eb6ca0e4487760a
Output Parameters:
f2:
f3:
f4:
f5:
f5*:
4041ce438e3e38e8aa96562eed83ac43
3e3bc01bea0cd914c4c2c83ce2d92757
666a8e6f577b1aa77b7fd53cebb8a3d6
1f880d005119
45e617d77fe5
Intermediate Values:
As for Test Set 4 in clause6.6, when computing TOPc.
IN
0a
30
6a
00
00
00
00
when computing
76 87 44 0e ca
2e 31 4b 41 55
4f a1 7d c9 c7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
43 ac 83
27 d9 e2
b8 eb 3c
0d 88 1f
55 9a 72
e0 46 fb
bc 8d
IN
0a
30
6a
00
00
00
00
f2-f5:
b6 1e 28
54 e8 2b
6a 2d 65
00 00 00
00 00 00
00 00 00
ce
a7
50
00
00
00
52
5f
7a
00
00
00
e6
1a
83
00
00
00
a2
66
da
00
00
00
27
c9
b8
00
00
00
35
86
00
00
00
00
49
bd
00
00
00
00
1d
66
00
00
00
00
fb
a9
00
00
00
00
0e
25
00
00
00
00
7c
54
00
00
00
00
f5
e5
00
00
00
00
08
87
00
00
00
00
6f
68
00
00
00
00
44
00
00
00
00
00
1f
00
00
00
00
00
8e
00
00
00
00
00
a6
00
00
00
00
00
57
00
00
00
00
00
b6
00
00
00
00
00
6e
00
00
00
00
00
c1
00
1f
00
00
00
2b
61
00
00
00
00
50
cc
00
00
00
00
computing f2-f5:
ed 2e 56 96 aa e8
3c c8 c2 c4 14 d9
d5 7f 7b a7 1a 7b
ed ff 87 53 22 88
66 b0 47 17 9d 7e
17 f6 2f 8e 6d 97
38
0c
57
56
45
09
3e
ea
6f
a3
1a
2d
8e
1b
8e
e5
78
f6
43
c0
6a
3d
a3
8e
ce
3b
66
8b
cf
93
41
3e
5c
03
ed
a4
40
ee
4c
5c
b7
a0
33
84
99
a1
4f
d2
d3
85
c0
06
43
f4
16
d7
ad
78
21
c3
49
7f
5c
c8
66
2b
0b
a4
93
9a
49
8a
ac
c8
b3
69
63
3d
6f
a2
ad
24
c4
73
15
c6
d9
05
62
d1
ad
9b
8f
3a
ba
13
56
c1
5f
a9
c6
94
87
37
62
87
c3
27
1e
79
e6
67
61
4b
b8
b4
eb
72
78
2b
d4
26
74
19
88
16
7b
19
19
a0
c9
ae
3d
d6
51
5f
00
db
57
a3
00
b3
86
db
when computing
76 87 44 0e ca
2e 31 4b 41 55
4f a1 7d c9 c7
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
d1 72 29
7d 45 2e
67 26 cd
17 e6 45
97 74 e9
9b 66 ac
0b 21
7.7
f5*:
b6 1e
54 e8
6a 2d
00 00
00 00
00 00
28
2b
65
00
00
00
ce
a7
50
00
00
00
52
5f
7a
00
00
00
e6
1a
83
00
00
00
a2
66
da
00
00
00
27
c9
b8
00
00
00
35
86
00
00
00
00
49
bd
00
00
00
00
1d
66
00
00
00
00
fb
a9
00
00
00
00
0e
25
00
00
00
00
7c
54
00
00
00
00
f5
e5
00
00
00
00
08
87
00
00
00
00
6f
68
00
00
00
00
44
00
00
00
00
00
1f
00
00
00
00
00
8e
00
00
00
00
00
a6
00
00
00
00
00
57
00
00
00
00
00
b6
00
00
00
00
00
6e
00
00
00
00
00
c1
00
1f
00
00
00
2b
61
00
00
00
00
c0
cc
00
00
00
00
computing f5*:
2f 8e 08 be 5b
0a e7 f8 0f 93
ea 48 3d 8a 69
47 b6 2d fb 8c
ea be 89 82 83
dd 64 ae 6c 25
00
3a
01
c6
c1
1f
a2
79
49
af
06
6a
ac
13
1a
ac
6d
c6
d3
f3
b6
46
34
a9
7f
72
b3
76
d7
23
51
23
c4
2e
fc
60
00
13
f0
07
ee
93
0c
fc
a7
95
51
bd
e5
24
59
ba
75
59
8d
b5
e6
5b
66
97
ad
63
fb
c2
4c
1c
a9
27
ac
aa
aa
25
84
29
e5
9f
21
9f
9b
b9
55
bd
f1
87
7f
b1
4b
48
16
1b
76
10
f9
e2
d3
88
94
59
ad
e8
24
6a
0c
bf
9e
14
69
a1
10
17
8e
cb
b2
b8
40
e7
91
7a
3d
07
88
b9
59
17
6c
94
8b
38
34
99
e1
e2
64
ed
e5
58
7c
a7
d8
cc
7f
d3
f5
3f
05
bc
d7
ed
34
f2
Test set 5
Input Parameters:
K:
RAND:
1574ca56881d05c189c82880f789c9cd4244955f4426aa2b69c29f15770e5aa5
c570aac68cde651fb1e3088322498bef
Operator Configuration Parameters:
TOP:
e59f6eb10ea406813f4991b0b9e02f181edf4c7e17b480f66d34da35ee88c95e
Klength = 256 bits, CKlength = 256 bits, IKlength = 128 bits,
3GPP
Release 12
3GPP TS 35.232 V12.1.0 (2014-06)
30
RESLength = 256 bits, KeccakIterations = 1
TOPc:
3c6052e41532a28a47aa3cbb89f223e8f3aaa976aecd48bc3e7d6165a55eff62
Output Parameters:
f2:
f3:
f4:
f5:
f5*:
84d89b41db1867ffd4c7ba1d82163f4d526a20fbae5418fbb526940b1eeb905c
d419676afe5ab58c1d8bee0d43523a4d2f52ef0b31a4676a0c334427a988fe65
205533e505661b61d05cc0eac87818f4
d7b3d2d4980a
ca9655264986
Intermediate Values:
As for Test Set 5 in clause 6.7, when computing TOPc.
IN
62
30
0e
00
00
00
00
when computing
ff 5e a5 65 61
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
5c 90 eb
fe 88 a9
78 c8 ea
d2 b3 d7
62 dc a1
4a fe f8
5c a3
IN
62
30
0e
00
00
00
00
f2-f5:
7d 3e bc
54 ef 8b
2b aa 26
00 00 00
00 00 00
00 00 00
48
49
44
00
00
00
cd
22
5f
00
00
00
ae
83
95
00
00
00
76
08
44
00
00
00
a9
e3
42
00
00
00
aa
b1
cd
00
00
00
f3
1f
c9
00
00
00
e8
65
89
00
00
00
23
de
f7
00
00
00
f2
8c
80
00
00
00
89
c6
28
00
00
00
bb
aa
c8
00
00
00
3c
70
89
00
00
00
aa
c5
c1
00
00
00
47
00
05
00
00
00
8a
00
1d
00
00
00
a2
00
88
00
00
00
32
00
56
00
00
00
15
00
ca
00
00
00
e4
00
74
00
00
00
52
00
15
00
00
00
60
00
1f
00
00
00
3c
a5
00
00
00
00
65
5a
00
00
00
00
computing f2-f5:
1e 0b 94 26 b5 fb
27 44 33 0c 6a 67
c0 5c d0 61 1b 66
c0 31 b7 ce 7e 47
2f ac 4a 9a e3 e8
42 f8 05 8b 2a eb
18
a4
05
3c
81
60
54
31
e5
45
13
f0
ae
0b
33
8b
f1
74
fb
ef
55
01
d2
52
20
52
20
ed
6e
92
6a
2f
77
35
bd
13
52
4d
dc
bf
df
2c
4d
3a
33
2a
b6
b2
3f
52
69
3f
6f
42
16
43
95
33
ae
a0
82
0d
08
2f
2c
c5
1d
ee
62
94
61
96
ba
8b
22
e6
ca
da
c7
1d
b2
e0
ca
c0
d4
8c
11
46
17
5f
ff
b5
98
7b
0d
68
67
5a
a1
48
a3
d9
18
fe
ed
5e
58
8f
db
6a
d9
51
02
b0
41
67
50
e5
32
f5
9b
19
7c
e5
b4
32
d8
d4
0a
d6
e0
ee
84
f4
98
9b
02
d5
65
18
d4
28
ba
eb
when computing
ff 5e a5 65 61
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
OUT when
b1 ef 6c
8d 73 9e
05 a5 5b
55 96 ca
68 14 08
1d 65 01
88 f4
7.8
f5*:
7d 3e
54 ef
2b aa
00 00
00 00
00 00
bc
8b
26
00
00
00
48
49
44
00
00
00
cd
22
5f
00
00
00
ae
83
95
00
00
00
76
08
44
00
00
00
a9
e3
42
00
00
00
aa
b1
cd
00
00
00
f3
1f
c9
00
00
00
e8
65
89
00
00
00
23
de
f7
00
00
00
f2
8c
80
00
00
00
89
c6
28
00
00
00
bb
aa
c8
00
00
00
3c
70
89
00
00
00
aa
c5
c1
00
00
00
47
00
05
00
00
00
8a
00
1d
00
00
00
a2
00
88
00
00
00
32
00
56
00
00
00
15
00
ca
00
00
00
e4
00
74
00
00
00
52
00
15
00
00
00
60
00
1f
00
00
00
3c
a5
00
00
00
00
c1
5a
00
00
00
00
computing f5*:
a0 a5 a4 8b 08
c2 68 3e c1 94
51 0c a8 a1 89
5f 7f e1 89 a7
15 ba 72 96 de
6f e9 b3 6f 04
fc
1d
9f
06
53
99
c2
61
63
c0
07
e5
f1
bc
4b
12
cb
cc
84
58
c6
4d
f2
4c
39
7c
a3
ae
51
86
77
8d
89
0a
a5
fe
3b
f2
a4
24
34
a1
f2
c2
64
73
80
a8
ee
b6
1a
fc
bc
bd
e8
86
93
f3
c8
21
f4
ef
9b
d4
ae
b9
b8
05
16
61
f5
fe
95
d9
30
92
1a
22
25
a3
2e
5a
99
92
8b
8c
17
b4
73
31
14
d2
06
a2
e6
f4
ce
a2
86
28
75
18
08
6c
02
f4
51
8e
2f
fc
6e
22
bc
fd
cf
e6
a3
ec
79
fb
16
4e
09
b4
8f
0f
06
81
0a
7c
78
f4
2b
3d
86
24
1f
04
76
cf
49
5d
f1
18
09
e4
26
b0
71
0a
Test set 6
Input Parameters:
K:
RAND:
1574ca56881d05c189c82880f789c9cd4244955f4426aa2b69c29f15770e5aa5
c570aac68cde651fb1e3088322498bef
Operator Configuration Parameters:
TOP:
e59f6eb10ea406813f4991b0b9e02f181edf4c7e17b480f66d34da35ee88c95e
Klength = 256 bits, CKlength = 256 bits, IKlength = 256 bits,
RESLength = 256 bits, KeccakIterations = 2
TOPc:
b04a66f26c62fcd6c82de22a179ab65506ecf47f56245cd149966cfa9cec7a51
Output Parameters:
f2:
f3:
f4:
f5:
f5*:
d67e6e64590d22eecba7324afa4af4460c93f01b24506d6e12047d789a94c867
ede57edfc57cdffe1aae75066a1b7479bbc3837438e88d37a801cccc9f972b89
48ed9299126e5057402fe01f9201cf25249f9c5c0ed2afcf084755daff1d3999
6aae8d18c448
8c5f33b61f4e
Intermediate Values:
As for Test Set 6 in clause 6.8, when computing TOPc.
3GPP
Release 12
IN
51
30
0e
00
00
00
00
when computing
7a ec 9c fa 6c
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
3GPP TS 35.232 V12.1.0 (2014-06)
31
f2-f5:
96 49 d1
54 ef 8b
2b aa 26
00 00 00
00 00 00
00 00 00
9a
8c
80
00
00
00
17
c6
28
00
00
00
2a
aa
c8
00
00
00
e2
70
89
00
00
00
2d
c5
c1
00
00
00
c8
00
05
00
00
00
d6
00
1d
00
00
00
fc
00
88
00
00
00
62
00
56
00
00
00
6c
00
ca
00
00
00
f2
00
74
00
00
00
66
00
15
00
00
00
4a
00
1f
00
00
00
b0
a5
00
00
00
00
67
5a
00
00
00
00
OUT/IN after one Keccak
45 de 3d d1 50 4d 7c 3b
d8 d6 a6 f1 0f 25 83 65
d8 fa c1 3c 8a 92 4a bd
7b 93 6f fe 6c 63 80 5a
86 d0 c0 5b 5a 2e b9 29
7f 27 15 2c a2 a7 32 54
8b 13
iteration, when computing f2-f5:
b7 32 1a a8 2e c4 5a bc ed 2b b0
cb c7 2d 71 f1 bf ae 8f 9f 1a b8
97 d1 79 fa 28 b6 04 1a ca 29 6b
8a c8 5f 07 e2 ba 9c 76 df 61 65
c9 d4 d3 9e fc 63 38 83 77 06 f4
02 3b 99 d1 cb b6 6b 88 eb 6e 2a
6d
04
86
3c
8a
36
4c
92
03
1f
ab
93
56
fb
bb
ec
ab
fd
ef
03
af
15
a2
56
84
50
f8
55
69
48
7f
db
ac
93
a1
e1
53
45
a2
cd
d9
3d
c3
d4
d5
eb
ff
81
95
4c
4c
05
42
9b
2b
16
fd
61
d2
5f
76
c9
f5
73
f3
2a
75
f3
a9
7c
ef
00
e9
4d
80
ca
01
65
6b
38
b1
b3
bd
ca
OUT after second Keccak
67 c8 94 9a 78 7d 04 12
2b 97 9f cc cc 01 a8 37
1d ff da 55 47 08 cf af
8d ae 6a ae 10 c1 1d 8d
9e af 5b 40 0f 17 bd a3
c1 3c 26 a1 fe d0 dd 0a
46 28
iteration, when computing f2-f5:
6e 6d 50 24 1b f0 93 0c 46 f4 4a
8d e8 38 74 83 c3 bb 79 74 1b 6a
d2 0e 5c 9c 9f 24 25 cf 01 92 1f
25 00 c7 d0 95 53 8b 9e dc 42 6b
3f a3 da f8 a2 b3 bf a3 a1 b4 b7
66 0f f8 96 31 29 04 7e 2f 63 cd
fa
06
e0
7b
54
4a
4a
75
2f
0b
53
94
32
ae
40
ba
69
81
a7
1a
57
58
83
79
cb
fe
50
d4
2e
38
ee
df
6e
15
0b
2e
22
7c
12
a2
94
4e
0d
c5
99
01
da
db
59
df
92
62
31
4d
64
7e
ed
d6
93
52
6e
e5
48
41
81
35
7e
ed
48
42
d1
90
d6
99
c4
b9
26
c7
89
39
18
eb
9a
87
d1
8b
26
00
00
00
9a
8c
80
00
00
00
17
c6
28
00
00
00
2a
aa
c8
00
00
00
e2
70
89
00
00
00
2d
c5
c1
00
00
00
c8
00
05
00
00
00
d6
00
1d
00
00
00
fc
00
88
00
00
00
62
00
56
00
00
00
6c
00
ca
00
00
00
f2
00
74
00
00
00
66
00
15
00
00
00
4a
00
1f
00
00
00
b0
a5
00
00
00
00
c1
5a
00
00
00
00
OUT/IN after one Keccak
bf 66 e2 27 5d d6 6e 1c
d5 ef c8 70 11 12 7c 72
61 d3 41 be e4 05 12 e6
35 bf 79 fb c0 31 db 27
53 cc d6 5f 94 19 24 62
aa ba 4e 1d 57 a5 ec 8c
94 98
iteration, when computing f5*:
15 82 da 5b ab b8 d6 dd 33 46 ff
32 d6 82 83 20 39 df e3 a9 8b 4f
0f d3 c1 70 0b 5a 34 47 47 7d 5b
b8 0f c1 b1 43 14 d7 99 f5 0e 01
b2 fb d6 91 e2 e5 5c 35 b3 e5 d1
0f 30 e3 59 2e b7 38 56 2b f7 e3
ca
63
b5
28
59
f9
e0
2f
b5
e4
a4
0f
c5
5f
f5
23
04
a0
95
e4
ba
fa
20
41
d9
6b
5e
db
de
dc
08
af
e4
72
d5
b1
22
34
c0
cd
16
4e
7d
4f
2b
de
12
d1
f9
21
f6
c2
c0
5d
ec
7f
f8
a8
96
0b
75
e8
38
ee
64
6c
2a
68
8f
1c
f4
5d
ac
be
8c
74
9b
34
c2
5e
cc
69
ea
05
OUT after second Keccak
3f cb 12 cc 5c aa aa 1f
62 72 a7 99 99 4b 3b 9d
3c 38 a5 89 27 39 24 5e
33 5f 8c 4a ef e0 d6 30
7d da 64 b3 d1 c3 10 fe
09 1c d9 e5 27 92 07 90
e6 25
iteration, when computing f5*:
ea 8e 1c 14 8e 67 4a 6f ee e5 fc
21 de b6 c5 5a 14 14 e1 a3 27 4d
64 fa 6b 00 01 1b ec 63 10 b2 3f
0a 8f f0 f9 34 68 0d a7 cf 7e 53
d3 fe 08 1b ad 8e 09 ef a6 c1 e2
0e 33 43 86 ed e9 79 4a 38 ec f9
38
75
3c
90
7f
ae
88
c2
3f
4b
1b
90
9a
81
02
af
11
5f
a1
f6
0a
f9
3c
72
7a
15
cd
e8
8a
e0
b4
7a
b5
1f
fd
9b
d8
19
df
09
bc
76
85
a4
fb
fa
be
84
68
d0
af
0a
b2
79
14
07
92
1f
14
24
02
14
7d
c6
4f
78
d0
0d
4e
2f
31
b4
9a
52
1f
39
4e
1a
55
35
b6
d3
2c
db
IN
51
30
0e
00
00
00
00
when computing
7a ec 9c fa 6c
2e 31 4b 41 55
77 15 9f c2 69
00 00 00 00 00
00 00 80 00 00
00 00 00 00 00
00
f5*:
96 49
54 ef
2b aa
00 00
00 00
00 00
5c
49
44
00
00
00
5c
49
44
00
00
00
24
22
5f
00
00
00
24
22
5f
00
00
00
56
83
95
00
00
00
56
83
95
00
00
00
7f
08
44
00
00
00
7f
08
44
00
00
00
f4
e3
42
00
00
00
f4
e3
42
00
00
00
ec
b1
cd
00
00
00
ec
b1
cd
00
00
00
06
1f
c9
00
00
00
06
1f
c9
00
00
00
55
65
89
00
00
00
55
65
89
00
00
00
b6
de
f7
00
00
00
b6
de
f7
00
00
00
3GPP
Release 12
32
3GPP TS 35.232 V12.1.0 (2014-06)
Annex A (informative):
Change history
Change history
Date
TSG #
TSG Doc.
CR
Rev Subject/Comment
Old
New
Dec
2013
Version after approval
1.1.0 12.0.0
Dec
2013
Update of Introduction with spec numbers
12.0. 12.0.1
0
Overall editorial modification to the Tuak specification
TS 35.232
12.0. 12.1.0
1
June
2014
SP-64
SP140316
001 2
3GPP