libmongocrypt-helper 1.7.4.0.1001 → 1.8.0.0.1001

data/ext/libmongocrypt/libmongocrypt/test/data/fle2-insert-unindexed-v2/encrypted-field-map.json

@@ -0,0 +1,18 @@
+{
+    "db.test": {
+        "escCollection": "fle2.test.esc",
+        "ecocCollection": "fle2.test.ecoc",
+        "fields": [
+            {
+                "keyId": {
+                    "$binary": {
+                        "base64": "EjRWeBI0mHYSNBI0VniQEg==",
+                        "subType": "04"
+                    }
+                },
+                "path": "encrypted",
+                "bsonType": "string"
+            }
+        ]
+    }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/fle2-insert-unindexed-v2/encrypted-payload.json

@@ -0,0 +1,14 @@
+{
+   "insert": "test",
+   "documents": [
+      {
+         "plainText": "sample",
+         "encrypted": {
+            "$binary": {
+               "base64": "EKvN76sSNJh2EjQSNFZ4kBICTQaVZPWgXp41I7mPV1rLFVl3jjP90PgD4T+Mtubn/mm4CKsKGaV1yxlic9Dty1Adef4Y+bsLGKhBbCa5eojM/A==",
+               "subType": "06"
+            }
+         }
+      }
+   ]
+}

data/ext/libmongocrypt/libmongocrypt/test/data/fle2-insert-unindexed-v2/mongocryptd-reply.json

@@ -0,0 +1,41 @@
+{
+    "ok": {
+        "$numberInt": "1"
+    },
+    "result": {
+        "insert": "test",
+        "documents": [
+            {
+                "plainText": "sample",
+                "encrypted": {
+                    "$binary": {
+                        "base64": "A2EAAAAQdAABAAAAEGEAAQAAAAVraQAQAAAABBI0VngSNJh2EjQSNFZ4kBIFa3UAEAAAAASrze+rEjSYdhI0EjRWeJASAnYACQAAAHZhbHVlMTIzABJjbQAAAAAAAAAAAAA=",
+                        "subType": "6"
+                    }
+                }
+            }
+        ],
+        "encryptionInformation": {
+            "type": 1,
+            "schema": {
+                "db.test": {
+                    "escCollection": "fle2.test.esc",
+                    "ecocCollection": "fle2.test.ecoc",
+                    "fields": [
+                        {
+                            "keyId": {
+                                "$binary": {
+                                    "base64": "EjRWeBI0mHYSNBI0VniQEg==",
+                                    "subType": "04"
+                                }
+                            },
+                            "path": "encrypted",
+                            "bsonType": "string"
+                        }
+                    ]
+                }
+            }
+        }
+    },
+    "hasEncryptedPlaceholders": true
+}

data/ext/libmongocrypt/libmongocrypt/test/data/fle2-insert-v2/cmd.json

@@ -0,0 +1,9 @@
+{
+   "insert": "test",
+   "documents": [
+      {
+         "_id": 1,
+         "ssn": "value123"
+      }
+   ]
+}

data/ext/libmongocrypt/libmongocrypt/test/data/fle2-insert-v2/encrypted-field-map.json

@@ -0,0 +1,22 @@
+{
+   "db.test": {
+      "escCollection": "fle2.test.esc",
+      "ecocCollection": "fle2.test.ecoc",
+      "fields": [
+         {
+            "keyId": {
+               "$binary": {
+                  "base64": "EjRWeBI0mHYSNBI0VniQEg==",
+                  "subType": "04"
+               }
+            },
+            "path": "ssn",
+            "bsonType": "string",
+            "queries": {
+               "queryType": "equality",
+               "contention": 0
+            }
+         }
+      ]
+   }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/fle2-insert-v2/encrypted-payload.json

@@ -0,0 +1,39 @@
+{
+   "insert": "test",
+   "documents": [
+      {
+         "_id": 1,
+         "ssn": {
+            "$binary": {
+               "base64": "C18BAAAFZAAgAAAAAHb62aV7+mqmaGcotPLdG3KP7S8diFwWMLM/5rYtqLrEBXMAIAAAAAAVJ6OWHRv3OtCozHpt3ZzfBhaxZirLv3B+G8PuaaO4EgVwADAAAAAAx0PWdXaep4jV5cRA2yQN+ULLwjv8e++oMonpfGOGs9BZ0uqPP7waiwZSwHsDx57+BXUAEAAAAAQSNFZ4EjSYdhI0EjRWeJASEHQAAgAAAAV2AFAAAAAAq83vqxI0mHYSNBI0VniQEkzZZBBDgeZh+h+gXEmOrSHYikH9u4e644rfZY9N9UQR4h76qKAmcbo43utRcXMQy+FXXIxSuNntFHZHTcNJhJoFZQAgAAAAAOuac/eRLYakKX6B0vZ1r3QodOQFfjqJD+xlGiPu4/PsBWwAIAAAAABpn2zcb7jOd/FK3F45nBxnLU6HOMwZzmGOZ0w35v/DqRJrAAAAAAAAAAAAAA==",
+               "subType": "06"
+            }
+         }
+      }
+   ],
+   "encryptionInformation": {
+      "type": 1,
+      "schema": {
+         "db.test": {
+            "escCollection": "fle2.test.esc",
+            "ecocCollection": "fle2.test.ecoc",
+            "fields": [
+               {
+                  "keyId": {
+                     "$binary": {
+                        "base64": "EjRWeBI0mHYSNBI0VniQEg==",
+                        "subType": "04"
+                     }
+                  },
+                  "path": "ssn",
+                  "bsonType": "string",
+                  "queries": {
+                     "queryType": "equality",
+                     "contention": 0
+                  }
+               }
+            ]
+         }
+      }
+   }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/fle2-insert-v2/mongocryptd-reply.json

@@ -0,0 +1,49 @@
+{
+    "ok": {
+        "$numberInt": "1"
+    },
+    "result": {
+        "insert": "test",
+        "documents": [
+            {
+                "_id": 1,
+                "ssn": {
+                    "$binary": {
+                        "base64": "A2EAAAAQdAABAAAAEGEAAgAAAAVraQAQAAAABBI0VngSNJh2EjQSNFZ4kBIFa3UAEAAAAASrze+rEjSYdhI0EjRWeJASAnYACQAAAHZhbHVlMTIzABJjbQAAAAAAAAAAAAA=",
+                        "subType": "06"
+                    }
+                }
+            }
+        ],
+        "encryptionInformation": {
+            "type": {
+                "$numberInt": "1"
+            },
+            "schema": {
+                "db.test": {
+                    "escCollection": "fle2.test.esc",
+                    "ecocCollection": "fle2.test.ecoc",
+                    "fields": [
+                        {
+                            "keyId": {
+                                "$binary": {
+                                    "base64": "EjRWeBI0mHYSNBI0VniQEg==",
+                                    "subType": "04"
+                                }
+                            },
+                            "path": "ssn",
+                            "bsonType": "string",
+                            "queries": {
+                                "queryType": "equality",
+                                "contention": {
+                                    "$numberInt": "0"
+                                }
+                            }
+                        }
+                    ]
+                }
+            }
+        }
+    },
+    "hasEncryptedPlaceholders": true
+}

data/ext/libmongocrypt/libmongocrypt/test/data/iev-v2/FLECrudTest-insertOneRangeV2.json

@@ -0,0 +1,10 @@
+{
+	"type": "range",
+	"payload": "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",
+	"S_KeyId": "12345678123498761234123456789012",
+	"S_Key": "f502e66502ff5d4559452ce928a0f08557a9853c4dfeacca77cff482434f0ca1251fbd60d200bc35f24309521b45ad781b2d3c4df788cacef3c0e7beca8170b6cfc514ecfcf27e217ed697ae65c08272886324def514b14369c7c60414e80f22",
+	"K_KeyId": "ABCDEFAB123498761234123456789012",
+	"K_Key": "cbebdf05fe16099fef502a6d045c1cbb77d29d2fe19f51aec5079a81008305d8868358845d2e3ab38e4fa9cbffcd651a0fc07201d7c9ed9ca3279bfa7cd673ec37b362a0aaa92f95062405a999afd49e4b1f7f818f766c49715407011ac37fa9",
+	"bson_value_type": 16,
+	"bson_value": "05000000"
+}

data/ext/libmongocrypt/libmongocrypt/test/data/iev-v2/FLECrudTest-insertOneV2.json

@@ -0,0 +1,10 @@
+{
+	"type": "equality",
+	"payload": "0e123456781234987612341234567890120215da2a70905291b8a5b4b634732dad2b67e3d8b66c02ef4f3d991405627b7b5e685062e36f5743b8890ea02fdbcc67202daac24cf3c3b5f6466c9e3fabeb43b6607eb9b9cb37193e6176c680444b43414fe9a96b643a45b91b3b1b5ca7966a3681740531ddf2920cd9a640d02edf076abf87a8e31bb7b1afd78219c74f24fa538dbe68e7b9fa42edf928cadc495b51460d0c3b3174df01b0e8b19845da8b188af1ca67aaa23e828317e44cb237e3628f76de9ede194321cd9470a2df0b6923ae",
+	"S_KeyId": "12345678123498761234123456789012",
+	"S_Key": "f502e66502ff5d4559452ce928a0f08557a9853c4dfeacca77cff482434f0ca1251fbd60d200bc35f24309521b45ad781b2d3c4df788cacef3c0e7beca8170b6cfc514ecfcf27e217ed697ae65c08272886324def514b14369c7c60414e80f22",
+	"K_KeyId": "ABCDEFAB123498761234123456789012",
+	"K_Key": "cbebdf05fe16099fef502a6d045c1cbb77d29d2fe19f51aec5079a81008305d8868358845d2e3ab38e4fa9cbffcd651a0fc07201d7c9ed9ca3279bfa7cd673ec37b362a0aaa92f95062405a999afd49e4b1f7f818f766c49715407011ac37fa9",
+	"bson_value_type": 2,
+	"bson_value": "0700000073656372657400",
+}

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/README.md

@@ -0,0 +1,17 @@
+# Roundtrip crypto test cases
+
+Each file is a JSON array containing a set of documents with the following fields:
+
+* `name` (required): This is a symbolic field used for identifying a failing test case in logs.
+* `algo` (required): The name of the cipher and hmac to use during crypto operations. One of:
+   * `AES-256-CBC/SHA-512-256` aka `FLE1`
+   * `AES-256-CTR/SHA-256` aka `FLE2` with AEAD
+   * `AES-256-CTR/NONE` aka `FLE2` with no MAC
+* `key` (required): Either 32 or 96 octets of key material expressed as hexits
+* `iv` (required): 16 octets of inintialization vector expressed as hexits
+* `aad` (optional if MAC is NONE, otherwise required): Associated Data as hexits
+* `plaintext` (required): Hexits representing data to encrypt.
+* `ciphertext` (required): The expected ciphertext as hexits produced by the operation.
+* `ignore_ciphertext_mismatch_on_encrypt` (optional): True if the encryption operation is expected to produce something other than the contents of `ciphertext`.  This is useful when focusing on the decrypt operation, such as in [`fle2aead-decrypt.json`](fle2aead-decrypt.json).
+* `encrypt_error` (optional): An error message to expect when attempting to encrypt.
+* `decrypt_error` (optional): An error message to expect when attempting to decrypt.

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/aes-ctr.json

@@ -0,0 +1,29 @@
+[
+   {
+      "name": "AESTestVectors, CTRTestCase_Random_90",
+      "origin": "https://github.com/mongodb/mongo/blob/master/src/mongo/crypto/symmetric_crypto_tests.gen",
+      "algo": "AES-256-CTR/NONE",
+      "key": "2078bf7187b8792860071c205a9ad88fc285232780f4ac4d77be9146b63c6ec9",
+      "iv": "185405c26aca39e507a2c71572b209df",
+      "plaintext": "d3e88a3f39bf4788a325e4b9ba829e0a768a66e66b03940c50e6fd92f0fd85be4742f183c69891fc337ea5f9f8680c86827098277e8a32e8899eb6397fc93b94627c38e36815b6a2869a8f41f2e7d4369f8831c8b07a3d39197d",
+      "ciphertext": "185405c26aca39e507a2c71572b209dfe36455d10b5884911f5a5bdb4519148ca7a754fd4b54b31ecf8afaaea522f1e0cc917f49bb4869307c19bf9862171905e644fccbebbd764f0015fd362ed33bae74811b7773987e129a3b58d339324a5415467baaacb25b4d3cc1"
+   },
+   {
+      "name": "ESTestVectors, CTRTestCase_Random_1059",
+      "origin": "https://github.com/mongodb/mongo/blob/master/src/mongo/crypto/symmetric_crypto_tests.gen",
+      "algo": "AES-256-CTR/NONE",
+      "key": "faf3ca75c08501664fb9c7fcf78f291fc4a63dc58c179c12c1b70c3b644f71f0",
+      "iv": "9413b67c240bb84e94b7bbb716a97ea3",
+      "plaintext": "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",
+      "ciphertext": "9413b67c240bb84e94b7bbb716a97ea3e21d884cd383819d07e3b08df52fe31567ee7ffbf7c496d44b262eba1e6c5f94c692ad53cc07b77d04605d8e337f3e99cf96ecbcb277d7f7c8c372fe8e6de7c28769f32bf3a5348b0294e584ff2c9825a7a452aff9b6f03c1ac05b6c6d20661eaedd11cac57bf15234c53371ffc8a3dea7de321b1e45408e3ea3b03c9731739cfc8aec30e6ecda9ed3d5dd8c665a593bf8f7adc5d8f072f9346438ac5dddc6788243ca5c4b9301f6703b85998970af6d4cdea0c21136b0c469bbb3fea47b9132476ee7790cf0da2a9d633f934db54e121502a0b505e55c31a9b91447b684f8a8f3de881ed4e391e6fee8d0d5775fbd2fbc482215122f3d5cc0ed91eb7fa8d20587422b898cede3f2bfb2a809087759e254a54e2a04d476504e978fb071fc73f38ebe15e21145a58cf3bd9e18815555aeb0030158b3fb744a19050a09225d8923eee46ddd3e714b3a67a2a84e47d0de5be84df866b7c236c47b86598d978e619d9e085fa5c743c8535adcf3574e1341e6621699a56f2c4f8ee19224a862244001c44b443e32e43abba22fc60d2b9be5d7bef3513ccbd59f8590b1a61a3302f7e495a127b2e336c4de14d735f4126c932b9c4d9096f97f79f13ea50f000490d39621a0a4edd50b90205144795926d4b3b5b1ad32a6e706a3560739fe014f151d4ad2db4a3629b3734261e4d41ada1aaff9f7a3ba9a6e602b6a7f8faa2e572151f4de8d470f772f9dc86f5dfd343b1f55d1e414d33a208d14fffb662e05b2cfe7474087d2e6d7097a1a3c0347d0590240d6dfceecd3ab65a5edc2f86519dbfef07e9b3c5a6fc29d18126d68efff7af18f76660ce4aecf7b8c3fc1b04fd7789b6ae28b93f13d96806f236144b36abd4cb6aed9b153ec6dfeb6c576b2a3738b9d7832b7e0a0168d8e3f6267f6c3fd6fd40be9ecc4a3a53b5c185a33fb3f27ed42c5092ce832d8f7afe971de8ffe23f1d5f9300ba5a3ffe8bfda3302a128904ae63b0e751987d5359427de6257e329d21263bf2da500eab3cf26d67d69272f27ea9bbcfd1229deb2170912b1c367c3cc73e7ccc16e12f27b2cb0373e0608d829675b2e595c1cfb74938a854f783f4d4b43ba0ada137f64d94aa278cbe90afc7430d31f26888df0ddd431beff3162e2db29a915b4e682e673743ae40f8cf566b5dc6e189c23aa2a3c0f8b9f1aabdc1c6289c6de623b2cbff2917e96c10c632be402ef1d6e1d83553dcb4c492aa38d07444c070566ac58ab9a97b678d56d9ee4589d46fcf2ac68033144340780ea1f1670f03095388aec797184272db78ccd77a34dcb1980effe2c4b898ceb022f0c78239a8624f15555ce89b2ef626aa867b3791fb3507848cf9d38a471ce7ede75b585fea4fc30ff1ed36c3e0e33a11c9e0be3b6fa069a6fe0094159a105abc7eb283ed47be88bddfffe3b5132ea4acd5fcb4fc3c5ff51a883af5e8c52f3f1a09fdcceec1115070187dd0bacce093b941f1e63ea1941b1a9f1"
+   },
+   {
+      "name": "AESTestVectors, CTRTestCase_Random_3888",
+      "origin": "https://github.com/mongodb/mongo/blob/master/src/mongo/crypto/symmetric_crypto_tests.gen",
+      "algo": "AES-256-CTR/NONE",
+      "key": "b17c259ad25e022595d44b91cc1ff933d657ebf90e6e0316754eee085d6014ff",
+      "iv": "3fb363e376719096eca5de9976353d45",
+      "plaintext": "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",
+      "ciphertext": "3fb363e376719096eca5de9976353d45999264c56b6cd5f1b6c01834e39a2abdc31a4b73fde183ede01d5506184dcd6fdfba2d2ac17cd54bca45d6f7800f695cca8f1e365f33bc6fee82c7f69285b5720107f7b63881e25ead1bb7be4abc7bee14b81da8f655e999a3836d1eb1f4af171fdb49bd0540efd351ba13b624158222a07642becd3a0cce57108ac577fcdd138dd20bf92c65b78cf6a36871f2bc08b7af6e9bc21994f7f860e9a0bb97cda16a7b849cc922bd37683cafeb6b198a3f6a1f88450080cf5a1ec3e2dac5f2581aab59de3f4b212fbb8e07f7b754122abefc6fc8e09d0fa5bc6a8ac32af418a2f6325678d0f0f0d3861e8aa0a29e806982698c2b6a58eb171a426594fe5c6347794ad4435c1de1f9224d387d95f3b773033f5c96069f49613276f3ba8b2c3f24d7ff523d13266e84b9c753da33ccf21c97d9a120efaca36aafafc940835dc62a7f0b4ae0a9a7842b4eaeb19573a9b332b540d74a2e2a2e714808f293144bfec2d3735b2bc4d9b6510c972c477adfe67e3055ed10bfaebba217153eec70c28c21b4e8b57b3a23868554777dc268d1d1f11084b130f68fefb0a94fc58ee536256ae4f103e2a3ff7953f54a62868213bf4b68f7542c00accb5bdbfc4b592533b86e0e7834b8818b1527de9cc93f98941b7672c6de788bc518e45369ad937c93075e6a948c630fdbce333a138201a9f6c50dd7caa1dba1f3416015f23c7a6e1f712fe13ce86c8a0b8681fa8b82dcab827670d8e912820efb1d329ea5ddc9cef4d16ad664a11f1c8080aad3de9a5c79207732bbb5bef9f06419b2fad7de9054cd25f91b7773e6b307e2b259c70f258929acf02966190027142d1c46bb3058cd1b2510188f25189af92df419426557a1b16a70b08d45a51df48884a207ee0b987c8ca17a1a671bb78a5548dbb020b80d5f73bb3bec4986ba1858f097621377a15746efd8c2c59231624c10d8268865c0f4b58dce54fc71446fbb67935b4a67b0b8f837c92b43850fbf7d7311896515672143f1a2d1c5374fe8d564eb8436817cbc52faa9751002e02295e1e4e53f3070b6de6323a450783bc0ea08b36c215ecb341b86dca0dfc13b8f129bf3599d2de73d774243dc04cbe60fbc0abb1ee77a3af112edd659954ddc50b965226bf93fb04cdb3f8da1e48bf473d1c131fb1f80b123f381ea8b5d3f471ba09f8de65111bc95abdbd77e369719aaa1a9d1949f38ce8abeedd14e8b0624c25de19106e281742a8771c03fda9010a9d598ae91e8eed61e8422da3a94fe157b25fdef8518fedf0ee3a56af2d3801b6baecf38e4dc4dd74f03c7a94a338ccb6188664d0be62feab0dd226fd7dfe5e27427a4ae1df9310a134113bdbb8b61f9e343632537550ac2204e2d3e1cbe82f10825dbb40e08bf9d2a0f6825e260c3a123995356b6c667404c8f42d3e24580cf1d57a0d7d66a4ea35e6d932b909960b488a6a4a017ceb04123bf54dbe64803d54478d303fe9e444dd4dfd713e5195fbd710a7af60dcee39b38cd24d48504e895c357965ca10157319e70e64019ca831019637ffd458aba4242b18c483e42b1ee9b632843344a632a8491ffcb1e30e1ae0ddedf29957185ada4891521d9d2f381a4d4cee31362e1b9b5c4e2e034d7274a3b32af150910d7a30522e4b02b99dbe0a9d9b54efa8663801b4d1a5a9db4d6efdd81447289c67dcac1557b33a04a030ee65e07624f1cb931b302882ac04ccc1ca258f092cb41c70441ab850b590c0aec31241937a427399e78b8c4b7a653f9f9440728b0747200466c088cb378350a48ae088ff50670ba37b7b791a0e8ea9b845628a84910a36b117d2927d6635fbe93bbe4bdbc70c0469239621fb30097bcca92c56ee7cd2bb949fe74b7c4a81df28cb4b2dc0d26c7b01dc2ec7c095972bcd7d86da57c936a1aa8d6c07ce58a3361034658e21eff8246201e8c6edd482cfd4f24c1986f8c9320dda7ed01646f2a567191fd41b559fd677d037bc2e24f82d308dfd4038ee4d1c5c82e05361d9c089ed1926ce25a296db23c6c92e95a6006129dc38c6aa5c85f9fce44548f0bd0a7c321226f2042d1594f4e2026c51085f103433c50b0b183027d426a79b54187701a7c0dcd90c1413399acfe7f06ddfc8e6fba6df15c147811035f11097b82d4f75f296f2b1570f35cca8c5bafdb1edf495bc0e88de303f57267f25f678ef6613e952ae4999bdff8f5413956ca34aabc1d740d75a1b8c4da528fa1c83ef10bd9fd66df75f0cd94f92d29b82ee5d0fcbb3908a91d2b0e84805a5bbf4f629db29ca6aa66965dd602abae69cc4107e18551bca1e1bcee8da0be2cbd3e1c009dfdd8ba1c628f4c0456750794517fbb5226577892e46bcc326accb6201d85301a9720e28b7b531b24fa485fbeb758d06b1f4a732ad44b249d593e73cb153253445d26a5c57db620445627bcb7d20b82350ff32c8f4abc29e24ef3e21b8ded8d88c2962f2f494025a659d1889a32d3afbd2875ab46252c6fc93ad62a89175db177da985993bf569dc52c3fa53cfe215bd536515358d5937a683dccde9f9a98ad35b228ebb567a63bdc06f839ba5d5c5fbe7dcd29cdd50a9c66d477ca318d8ab3ecaff0e167d242d052998630cbac10af3864f3545b8a6c1c6314527a70b46f9cc0f08f3d194053858f7213736702bf3984b7a91453ea18f8c6fab86244dba6b1a0e98a18695752114ac054ab47dc452ff0b94ea9b92798f30680bf4a9f05311ee01e5dbecba47cb442d32513ffd3dded6c1083b98b81f509fd4a8325dfa83d9c3787b06d4f1a564e7f4fb9ea586b68ad11180b721b180715a3e644b687ec84ba37a8ffd1987fb9003ca3fbde0b7ad1239881979a7546ebb31b5b535e4367ea52f591c78535479863b75a5b4cde7e9fd19181cc4648980d617f124ea3584259d245b6fbc36eef4dc4c45b22e2d8b1b76775d3d7e8bddabdd375be0511b22d42dd7ac3450a7a5bff67c29081823a31daf43aff862e90d2afed570550399432691c2beccee99ff2d42425fffad201a70976c4048472fd87e9ea9b899cc32446f597f9a4e763dab0da02c7f0283b26696142d1371006f219935a1cfaef4db6c1e91d9ff3b51567a85f202159fcc19db1c6f8d687bfcc3aa60c429fa605d61fe3d374eb1fcc50ac3a69094412a0dcfdd312c40358ac259e6d027452d12b65b91c75c029db49f3c7605882686de6ffdc492593960ec9354e7e834fd1e7a5d7f94f0c88433897b63ddb1691e2e9a6f41c03d449ee9acc4b9769a58a7f1991071d5360a63a39b85b4c38b5f06ae62187fdf0220f20db673946675fa7be4c67d19eb6140e2f4606fe961a49526f3e40806416f67289cebdbae1b4f8239cd5aa9d7afb9ee1b3f446b0b2b97f8be9020735950b157b73991538286f55322e9531a41e7f47cc855479af3b9858397a9672af3e03d0471b00048f51005411c3b968c41c50fcff0735c083244e06946371228bf2b6385d1a43e2c724ab086e0f0739e392b914e86dc0450e89d55a571c7a37bcd25baaead8e2a49fabd9c05a061c348ca805b7ef089a71b06f4cf4617a285e51e74e9433a66d2dcaae94b944d27d9a9caca7a06e5795eb48ed5ddff471bd534374845dba3455232bbcd2644ed1bd7e6ed22b566f1b250795b6f82d4eb7a0170be792f76d5fe96a86803e92b5c58446e656cbc2e13fecdca44a83af48f70e620ac34d7fbd2bac610a10a010287a67ea40285a85a2c91a0495c5e47d4ea363dec1d69f587975fbe64d70e3423c75cde86602369aa38359dd410c1dad185cabcf161bac22c434b27da6e8f25907307a8c273c37aebfb4f38c06ed145fa13f1e47585cb2070c363a106d0e0f5d9602f7bf1b0e4001e89a59210b3cbf01a1497498548b8948e286bf73b9afda48e0105e07a05cbbd79c66066e74c6480f78dfad23d57d61313d978f08143ac8c77e7c28c0397bdba32b5bf33d2c71606e71c196dac449b3bb03e733b7036ebf0b73e277e135452b2a1338222aa259b1448fc629805483eb15f591639756a20b57d590904ba17b4e3e6b965a8ba7f20f5ab89cd47aece129870507ddc43e2c829c64d93e36883943d3da458b8955a3b1f8b92fac4564e7c219d743bc39331c18d22fe27ead16219a61d82a2c18755bf6bcc553ad5b0683ac6abb5b92e79cddfee4b92d9dbcc6626979c358a4e1a8f37b651241faabb4e1e460110b2db5254971fef2b9877498feb6107f1c5adcc763ed6de820943b703249bdd796adffd76c7cc6046d3baf57a13ff5f55ad589396298c6b0e230da90a0b9230f457eb5db8962b9bb0ae406f29feab529c827117e39c757c2eed15b9b72576605ebbab9b632024bce65a759e17975182d50c04bdee6b8fca4fc488ed2a386fa226c5ce8366f67ec3eba883ceefed963bf29c0de829b406b02a6850f953a430e70fdbaa2998095daf93366819e3df71260b66d035b1c908b20ba62c0d83c27b24cfb9c3b4a5a35316ae8703245f47323e15ff775b41d2953633865f1d6861a9cab887635aae8b80efe7dcd0cfbeb3ffa6aa4a31a0550b0a9b0f6517c83f0247529bf8cfbdbe5c0092c6d4fd1a8c5539704619d28300ac53a9fcd0266fd65ff4e8fd350f3d128eb001312b1ffeacef11d5dde1b7dcf3282eae4c206d76d38a2f22a8fee2d0666ed36012ae4857b75171694e1a89a849007f4dce1f769d465055abfdcdb72e9eab8670b5a359e8d6b18d226ef24af5f72f79b00b4f3473737f65732865970752c6a1efcd03d9846c41403ba3cb9a8e50d89ca49201e899c61ad7acc87b69b9e28f86f9f44fc3400202dd6c010848b3daeea2c3ca54886ce8e11cf5ecef01589f65032cb901f051d291e5dc85d1a72f49bd549c3fb1fc1f08abf0d35fa1eaf3d60b44621e757825963f9407b80ba1a310979fa303ded3e73c34089ab2764143976b002af7ce663ee367a3824951bc7a87e16169db3d65fec5acd329db54fc30ae9f1e65aef750474e3283c858b7f325734b7112206e1992e6db244ef867e1179d544da3dccdbaa79ffd19adb7340b5af3e3de55040734ae354fbcb12efbd02cd1ed6cbbd9057977a60f3440488d26e68cf0e07cfbd65026bb57bba20bb69e53fe87228420cf08e73f12dab7b4ae87e00cb38a010a8368d8c8db225317c60a2cf2a01acbb6de8adee370e62ca4e8c6cf5fa976f45ec62421f084d19c5f724135020fa1c01578fecc38183454911d67ea34ff0bae3ebe29c1d12d14f5f561ff960f770cfc3cdd9f716c5a12e8fedb6928f2f7bdf80d05c7cee7e12d1510eae13bcd1619be41feb16a5f4070563a28b2d59d8ca92be92297910ba63d827b1174cdcac6ce64af153a773945bbb293d8e5c6603684f24a8dfdea742e07ff312f912fa961863d8a665ca68a7875be7a09ee5920bf442767fbcd245b5300e1479f8b082ca2e3adffa4680fd1adea93ea83ecba4d6deca41d07573ed2098862dd3185d651d42c1420de3f64f15c7f246a06fbc"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2-fixed.json

@@ -0,0 +1,10 @@
+[
+   {
+      "name": "Plaintext is 'test1'",
+      "algo": "AES-256-CTR/NONE",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e",
+      "plaintext": "7465737431",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1070cead40b0"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2-generated.json

@@ -0,0 +1,38 @@
+[
+   {
+      "name": "generated test. M length=1",
+      "source": "etc/fle2_generate_tests.py",
+      "algo": "AES-256-CTR/NONE",
+      "iv": "95874b7fdaf9ae802119db1c8ff57f83",
+      "key": "d5ca079dbfa2f2679a644457dd4e7ce16e4487b45a3600b67f07c862547dd945",
+      "plaintext": "f4",
+      "ciphertext": "95874b7fdaf9ae802119db1c8ff57f8342"
+   },
+   {
+      "name": "generated test. M length=16",
+      "source": "etc/fle2_generate_tests.py",
+      "algo": "AES-256-CTR/NONE",
+      "iv": "b212470f2da37d54e1f7cb97ea80056a",
+      "key": "0da6a32d900d022491132ac5f63b4d5fdea41d2f13917e8ece8cc2dc2a85ac47",
+      "plaintext": "547f1c41adea2ec92c789060056e11bc",
+      "ciphertext": "b212470f2da37d54e1f7cb97ea80056a4d583a9694a83e3ab77347b58d4149f1"
+   },
+   {
+      "name": "generated test. M length=64",
+      "source": "etc/fle2_generate_tests.py",
+      "algo": "AES-256-CTR/NONE",
+      "iv": "68324d32fecab2d74d21aceed29a092f",
+      "key": "fb1b6518c8c44598e67ad14166ff1446ef380353106f6b9dfa1096ff6983bcec",
+      "plaintext": "8ed05789e2308c5a8f382fdfbc57a47a79115eabb6b3b028ee5d4b2ec06b8718dc2c7f3a86fbc5cdd94a83dedc09f35dc5d566d25e00962b2f48911add81134d",
+      "ciphertext": "68324d32fecab2d74d21aceed29a092f43a11a83db67d73b994173f394f8fe6e85183d2dbafa010e5b9f1c808a4d06548d3a5cc9305673466ca4e3666387e554ec768b2ce26408e069291a117bbf595b"
+   },
+   {
+      "name": "generated test. M length=100",
+      "source": "etc/fle2_generate_tests.py",
+      "algo": "AES-256-CTR/NONE",
+      "iv": "a88d18f1eaa9d866a88467ccd4ddf6f5",
+      "key": "813f4abdfe7e84e047073347421b75dbec97f9e437a0d5ac9e4b79e738f2e8b9",
+      "plaintext": "f4504f0aa8d2a01fe481e84ec16478f448abb45ad1472e401b6ef810f32138e89363adf82654abd1df964209b2561d3b61cb8a347f5b6db89f95c6bee831b3aa502b311683b3a2e5f02107d44067fec1f81c15a5f5a9924b2068d8dc500011536fc3644c",
+      "ciphertext": "a88d18f1eaa9d866a88467ccd4ddf6f53f0307f159c40220571b42ef2a3c7f5fd35d646259695d07b3984a2eaa652e0438924be627779aa40373bcb19fdf025b24a6abafe9f71ca28d0631528d6cb4bbe5ddaf709f6382a963a6157828c42be55bacdf35ae45fead4cc55036b1b580416b211caf"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2aead-decrypt.json

@@ -0,0 +1,35 @@
+[
+   {
+      "name": "Mismatched HMAC",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "74657374310a",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1070cead40b081ee0cbfe7265dd57a84f6c331421b7fe6a9c8375748b46acbed1ec7a1b9983800",
+      "ignore_ciphertext_mismatch_on_encrypt": true,
+      "decrypt_error": "HMAC validation failure"
+   },
+   {
+      "name": "Ciphertext too small",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "00",
+      "ignore_ciphertext_mismatch_on_encrypt": true,
+      "decrypt_error": "input ciphertext too small"
+   },
+   {
+      "name": "Ciphertext symmetric cipher output is 0 bytes",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "74c1b6102bbcb96436795ccbf2703af6",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "74c1b6102bbcb96436795ccbf2703af61703e0e33de37f148490c7ed7989f31720c4ed6a24ecc01cc3622f90ed2b5500",
+      "ignore_ciphertext_mismatch_on_encrypt": true,
+      "decrypt_error": "input ciphertext too small"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2aead-fixed.json

@@ -0,0 +1,29 @@
+[
+   {
+      "name": "Plaintext is 'test1'",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "74657374310a",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1070cead40b081ee0cbfe7265dd57a84f6c331421b7fe6a9c8375748b46acbed1ec7a1b998387c"
+   },
+   {
+      "name": "Plaintext is one byte",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1004b2f319e0ec466bc9d265cbf0ae6b895d4d1db028502bb4e2293780d7196af635"
+   },
+   {
+      "name": "Plaintext is zero bytes",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "",
+      "encrypt_error": "input plaintext too small"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2aead-generated.json

@@ -0,0 +1,122 @@
+[
+   {
+      "name": "generated test. AD length=5, M length=1",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "5f8cd7018d18047c24e951095a00974b",
+      "aad": "c225f83d18",
+      "key": "c4145873aafc4b1dc3587bf2f493f4d72ae3836c95b7d72c11da68972632b2f46cec54424dc45325e30453396487e715925581a557f57b7976a3f63eab5578610000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "d1",
+      "ciphertext": "5f8cd7018d18047c24e951095a00974b6118defefa125ef6ccbbbf7e95cdee9aff9e85fc389a4b6c62cbd98ba17e541bad"
+   },
+   {
+      "name": "generated test. AD length=5, M length=16",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "820c2236059ebc4bf3b7e82592098199",
+      "aad": "1923d87dfc",
+      "key": "295b948495b5eaba751b919c0e4a4a8ceb7f81c649a14b9fde06ad17d41e2e738284d519eeea5bb731c3476c5311b9f85a8c2b2cf77918bbcb1af6a16c292a160000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "3c06a636989d553532d2eb089b144d99",
+      "ciphertext": "820c2236059ebc4bf3b7e825920981998d1ebe4ae73cdb550c3ed76342ee170d77733d11f7745bed0244f0cfb8b898ab2911d01161dc127c13287afd99aec2f8"
+   },
+   {
+      "name": "generated test. AD length=5, M length=64",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "20d8392eea831d024c44013f57c04e63",
+      "aad": "dccd27ede9",
+      "key": "f357344abc192a002f70f2abb6210d4dc6df8988ee3736e43551eb5dbe0a0c04cea86dbd0440eabb3d75014de192ece0f86c91b476bf8fe3b3778477a354f7860000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "3ba03e17129cff2b05217541b39562cff28904451aeb50848f1668f521d6dd9193ee4e494428d70d3120348e984286062d1719a1b4bbbed99e6dbb0fff1071c3",
+      "ciphertext": "20d8392eea831d024c44013f57c04e637316cc3b1e9cae5b0f539ae0d606467ad7cea5c3794a9045d11cc033a22342f923bdcd31034955fe0c3ba96948527e821e610870062e87045a387a5cf2a6ace9a052cc9269eb9602dc6602ca83e4f60df065d387501211465a5830a3ab165732"
+   },
+   {
+      "name": "generated test. AD length=5, M length=100",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "066048a059dc3691a6251605f40f4089",
+      "aad": "d611c4635c",
+      "key": "8c77b9209eed11c0875a37a0d31407b770cc55fd8776e62eeff10fa34c062e30ef856d59bec8855ab6544ff0ad2c51bd2de042c3585e43568bb7f390236ec8640000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "67af140501548da74f2e6865d6866eac5bc880a797a99571813706504544488607d88ecbeabd89c62584ffc7f4d7b29d0792570670628ee39492a4aeaabd192dfead1102c9d8e386e56189f6fee9cefb5f2c9939df94bedeae433670e9544b8d52ad1e2a",
+      "ciphertext": "066048a059dc3691a6251605f40f4089f2dfd34e99ab777154e3652311001a56766c0619d013b960f62ee3a6306d20e55d290838d0519077f74fa6db87a34622133b9dbe68862e30d7303724a6c3f9a20f05d32ba33669fd85dca50ceda01ec4f7600cb4b389cc2b6c1581125212567c90df74080ab742ecbc4b367cb3bddbd490fb15f5640b61811d92af8fac317ca1289ad14b"
+   },
+   {
+      "name": "generated test. AD length=10, M length=1",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "5b28df85be62398949b6a3c33af5206e",
+      "aad": "96158646db0e9d89abf5",
+      "key": "10adae2342f060c56d56cb18a08ca462cecd0a3c9ce78ea6941ee1ba0e6d294e27fc91be4d4e561cdfbb788a72685e84b616cf8aba28237cf458bee3626449fa0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "01",
+      "ciphertext": "5b28df85be62398949b6a3c33af5206edac469c25b610abbc8a0ebca17e58002887fa308a5a78ef9422d2e3a8a50c236a4"
+   },
+   {
+      "name": "generated test. AD length=10, M length=16",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "05b88d0b82edc539a1e3aa8107d070b2",
+      "aad": "3f9219d32b1a0db0b1e0",
+      "key": "d9dc626b911ba9b3907b1c8e0d0c92c400aeddf041d12c79e18c4e10705e322e40a5bf6728537d73b72174ec7f380be5e5aed223609d66be5f1cba680baf287d0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "567f9de1b20c251eade0cc16b91d5ac5",
+      "ciphertext": "05b88d0b82edc539a1e3aa8107d070b25ddf05c1a8388ff6f985c2d02907538096049e3598b7b25cf32a2e98aba6e70eb50524f143bfbc25ee6cc100192aa3c6"
+   },
+   {
+      "name": "generated test. AD length=10, M length=64",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "0a31fa49a2afec6a783381e700e161b0",
+      "aad": "2579c17bac86d076a29e",
+      "key": "5f07fe8e76023f6c2fadf656c176e0d6fa894bf5827fe5541550fbc27cd0344a14fc6a27b406477852a48a3c0a41e1df9dbdbf239607fd7750a31e67d6f0c6ec0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "83dd74ae12649c409fd64004756f372e5fd080cc8f7d168abf6966591750fa3f195c31cd5ee6c973bf850404bf250ff04902128281b8e946907f59b904062566",
+      "ciphertext": "0a31fa49a2afec6a783381e700e161b092b7fb6bd5495cb197fffd71eb51c5800cbc81867af2dd2c7cc27c9e124347a7ee5791f3263a843ecdfe51455d393deb996c2849b7527646808cd31dcbb792eadf760d834b7354f52621dfe784ed242325795d220d7ea30f7360d37b0a1c95aa"
+   },
+   {
+      "name": "generated test. AD length=10, M length=100",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "3d13c9658b0d53752c5764af97749443",
+      "aad": "6cce5ab29fe6fd67b06a",
+      "key": "213d15cf3a8b74883ff7ee71b15c02eacea7e9571edf294676c783231e7d9463d8960a96efd6c99974a36ca23160abc460ac4b4abfb82b5556767bbfbe2df3290000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "4bb184d6dd581f0ea7a943b8091af382a3007b04cfb9bce1f7b7c1a73e94c2fb71a5aef1a0fffbb2d9629e112426dfddcf69d90982c3a78aaeee85598e33a5538b803a239c143693acbc024576e58e615370019015000d5b6e0c6f8230a8271fa5769cab",
+      "ciphertext": "3d13c9658b0d53752c5764af977494436e8833ef340e3adadf27e4c9428ef537b3c0930bc1445cedff24425352f41b0d4070937fe9c752c4755ed80ab6e9439133c97dd26ee1a453d0cd5344e05224ee2ccda23dac3b23f126d4809fdbe6f86bb70930bb3b1b6d93d05e7edd97697c08eea30052918a9ca148df8b859b5b0688fd107f659e58c711eea4862558879f816924d9a8"
+   },
+   {
+      "name": "generated test. AD length=20, M length=1",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "946fa491604d45e7d757d1bbb84e834e",
+      "aad": "b71a4d87005b8e7f0dcca0ddcda4b4894033debe",
+      "key": "e00f828cac1696d4a4168a8b517cfd4dab2287bddd7bbbc81c8605a946754fc8ceb55d8b67a14b7c979e848d29460bada71e85cdfd32ec2e2b00aef3192167e60000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "e1",
+      "ciphertext": "946fa491604d45e7d757d1bbb84e834ea29b08d6d3c95b7421a5ef21b8a4447924fa134e3d347ccbf8a3ab38fe3bbd940e"
+   },
+   {
+      "name": "generated test. AD length=20, M length=16",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "92276e63c9463789f5df927d4c83679b",
+      "aad": "f5a7519eba1b3c8ef61c0c5585136da9af4f4944",
+      "key": "c28fc39c0a89da61a95084145153556a47f57715c2fcca725333ce15d94c39a1351b74722974709918d2f406b2d8232a39a42e158feffd3d7cde9e2f5472dccd0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "4405b7fa30c0b3b4e0a08a8ae69f6347",
+      "ciphertext": "92276e63c9463789f5df927d4c83679bf297c9ae0a686767bb0a786565564b450eb0eb6ee14a40d84a8d2c65c4882789fbdc8cc1bd668b110a54413de0601457"
+   },
+   {
+      "name": "generated test. AD length=20, M length=64",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "9df2f988712e7cecbdd4a2f6874e7ee6",
+      "aad": "9f87da25af14d5755ea672e361114dd59ed4f930",
+      "key": "d5859cf0ba821e2c8b0adfd12ea728fd1b241288ab03e492f0df1dac20ca6974298655b609d674412ae0e747cfff2f4de89c79f6a4911e19ea4e660758f119b10000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "e7e643a2f21a439758edf32c1685d4470ef7f4c6a7fccda186f6e584fd4de74e4d3db5fbf440f588bbfe937f8454ca633850b7c261a0f721e7fca5d8d2668a17",
+      "ciphertext": "9df2f988712e7cecbdd4a2f6874e7ee67d6c1bbf072bbd2ebdd13a97bf1fa0801283c41af27281bbee75fb783f33661f0bbee69dac5b792331c68612b76658d4fd9c18869023fc06824d0f73a06321bd3bdd002b0c35b3ffa4a1dc5da13eaf2910221a1be2b951a3fcb2d0319685bc00"
+   },
+   {
+      "name": "generated test. AD length=20, M length=100",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "8a48039b1bee4c011a35d2b8b990d59a",
+      "aad": "3f8a52d9642c7c596b0f8bb2a6e5a568ebfcdebc",
+      "key": "5e32c06ebbd28ea8b1d325e3cf6b85192eeeda6f672bc6436c43ea2ef710daa435dea75714bcb2f5e6d962f5479eec3827f85a50db17dd5c4f31e551e321249c0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "8e76b3f282c2c788fd903b3eeec7eb6f133a280bb2d598a9f6d919c5288eeb786615ce6f8ac105b433f4f8c62fb0a11af3996cbf3b9078001241efe776cb39614417481def9390d1a89bfc85be1d1f2249ac8e6d68a3c5c953495eb7b975032d9e4018ff",
+      "ciphertext": "8a48039b1bee4c011a35d2b8b990d59ad386ef0af4dc7b462bda7b1b1b6dce6fad692b55f2ec74dfe66345f80b584539ff5c96d20d11a96e9840473e228ee34d3c00e24d2d81ee6a4cc48d9af819cf7bbb4efa1fde0b5904f957d9752a06053b765b388974a72a95650071493c004e5ea871e0bded9d6400c56b3b705695141c4ac81927cf023d996c3049c33abb6a4235d3740b"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2v2-aead-fixed.json

@@ -0,0 +1,29 @@
+[
+   {
+      "name": "Plaintext is 'test1'",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "74657374310a",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1099db649a94f48960a9dbc0c438c904ccc042c6cf4f80af9fa4c8a00a1f41f11581b25d8ea083851460f03501ddb90dfb"
+   },
+   {
+      "name": "Plaintext is one byte",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb101dd2f66aba26a2cfbf868527c5c983076efca019407d3e82f60e3e9b97412a703fb14e40bc35d6af124b1d2433663334"
+   },
+   {
+      "name": "Plaintext is zero bytes",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "",
+      "encrypt_error": "input plaintext too small"
+   }
+]