WPT
wpt / WebCryptoAPI / encrypt_decrypt / aes_ocb.tentative.https.any.worker.html
Spec: Web Cryptography ↗
Runs: Chrome 155.0.8042.0 (wpt@0588f3896, 2026-09-04) | Firefox 157.0a1 (wpt@0588f3896, 2026-09-04) | Safari 251 preview (wpt@0588f3896, 2026-09-04) | Ladybird 1.0-b1af2 (wpt@0588f3896, 2026-09-04) | Servo Servo 0.6 (wpt@2c385f65e, 2026-09-04) | Blitz a50cb8971 (wpt@a95401e4e, 2026-09-03)
View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi
| Chrome | Firefox | Safari | Ladybird | Servo | Blitz | |
|---|---|---|---|---|---|---|
| Total | 1/277 | 1/277 | 1/277 | 277/277 | 277/277 | NOT RUN |
| Subtest | Chrome | Firefox | Safari | Ladybird | Servo | Blitz |
|---|---|---|---|---|---|---|
| setup | PASS | PASS | PASS | PASS | PASS | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with altered ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with altered ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with transferred ciphertext during call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step for decryption: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with transferred ciphertext after call | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv without encrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with mismatched key and algorithm | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 64-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 96-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 128-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 64-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 96-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 128-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 64-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 96-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 128-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv without decrypt usage | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 120-bit iv, illegal tag length 24-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 120-bit iv, illegal tag length 48-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 120-bit iv, illegal tag length 72-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 120-bit iv, illegal tag length 95-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, 120-bit iv, illegal tag length 129-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, illegal iv length 0-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 128-bit key, illegal iv length 128-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 120-bit iv, illegal tag length 24-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 120-bit iv, illegal tag length 48-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 120-bit iv, illegal tag length 72-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 120-bit iv, illegal tag length 95-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, 120-bit iv, illegal tag length 129-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, illegal iv length 0-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 192-bit key, illegal iv length 128-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 120-bit iv, illegal tag length 24-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 120-bit iv, illegal tag length 48-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 120-bit iv, illegal tag length 72-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 120-bit iv, illegal tag length 95-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, 120-bit iv, illegal tag length 129-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, illegal iv length 0-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: AES-OCB 256-bit key, illegal iv length 128-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 128-bit key, 120-bit iv, illegal tag length 24-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 128-bit key, 120-bit iv, illegal tag length 48-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 128-bit key, 120-bit iv, illegal tag length 72-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 128-bit key, 120-bit iv, illegal tag length 95-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 128-bit key, 120-bit iv, illegal tag length 129-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 128-bit key, illegal iv length 0-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 128-bit key, illegal iv length 128-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 192-bit key, 120-bit iv, illegal tag length 24-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 192-bit key, 120-bit iv, illegal tag length 48-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 192-bit key, 120-bit iv, illegal tag length 72-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 192-bit key, 120-bit iv, illegal tag length 95-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 192-bit key, 120-bit iv, illegal tag length 129-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 192-bit key, illegal iv length 0-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 192-bit key, illegal iv length 128-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 256-bit key, 120-bit iv, illegal tag length 24-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 256-bit key, 120-bit iv, illegal tag length 48-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 256-bit key, 120-bit iv, illegal tag length 72-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 256-bit key, 120-bit iv, illegal tag length 95-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 256-bit key, 120-bit iv, illegal tag length 129-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 256-bit key, illegal iv length 0-bits | FAIL | FAIL | FAIL | — | — | — |
| importKey step: decryption AES-OCB 256-bit key, illegal iv length 128-bits | FAIL | FAIL | FAIL | — | — | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with altered plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with transferred plaintext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv decryption with altered ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv decryption with altered ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv decryption with transferred ciphertext during call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv decryption with transferred ciphertext after call | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv without encrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv with mismatched key and algorithm | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 64-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 64-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 96-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 96-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 128-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, no additional data, 128-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 64-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 64-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 96-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 96-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 128-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, no additional data, 128-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 64-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 64-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 96-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 96-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 128-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, no additional data, 128-bit tag, 120-bit iv without decrypt usage | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 24-bits | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 48-bits | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 72-bits | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 95-bits | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 129-bits | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, illegal iv length 0-bits | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, illegal iv length 128-bits | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 24-bits | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 48-bits | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 72-bits | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 95-bits | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 129-bits | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, illegal iv length 0-bits | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, illegal iv length 128-bits | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 24-bits | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 48-bits | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 72-bits | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 95-bits | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 129-bits | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, illegal iv length 0-bits | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, illegal iv length 128-bits | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 24-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 48-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 72-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 95-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, 120-bit iv, illegal tag length 129-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, illegal iv length 0-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 128-bit key, illegal iv length 128-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 24-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 48-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 72-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 95-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, 120-bit iv, illegal tag length 129-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, illegal iv length 0-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 192-bit key, illegal iv length 128-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 24-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 48-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 72-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 95-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, 120-bit iv, illegal tag length 129-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, illegal iv length 0-bits decryption | — | — | — | PASS | PASS | — |
| AES-OCB 256-bit key, illegal iv length 128-bits decryption | — | — | — | PASS | PASS | — |