libmongocrypt-helper 1.7.4.0.1002 → 1.11.0.0.1001

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2aead-decrypt.json

@@ -0,0 +1,35 @@
+[
+   {
+      "name": "Mismatched HMAC",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "74657374310a",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1070cead40b081ee0cbfe7265dd57a84f6c331421b7fe6a9c8375748b46acbed1ec7a1b9983800",
+      "ignore_ciphertext_mismatch_on_encrypt": true,
+      "decrypt_error": "HMAC validation failure"
+   },
+   {
+      "name": "Ciphertext too small",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "00",
+      "ignore_ciphertext_mismatch_on_encrypt": true,
+      "decrypt_error": "input ciphertext too small"
+   },
+   {
+      "name": "Ciphertext symmetric cipher output is 0 bytes",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "74c1b6102bbcb96436795ccbf2703af6",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "74c1b6102bbcb96436795ccbf2703af61703e0e33de37f148490c7ed7989f31720c4ed6a24ecc01cc3622f90ed2b5500",
+      "ignore_ciphertext_mismatch_on_encrypt": true,
+      "decrypt_error": "input ciphertext too small"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2aead-fixed.json

@@ -0,0 +1,29 @@
+[
+   {
+      "name": "Plaintext is 'test1'",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "74657374310a",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1070cead40b081ee0cbfe7265dd57a84f6c331421b7fe6a9c8375748b46acbed1ec7a1b998387c"
+   },
+   {
+      "name": "Plaintext is one byte",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1004b2f319e0ec466bc9d265cbf0ae6b895d4d1db028502bb4e2293780d7196af635"
+   },
+   {
+      "name": "Plaintext is zero bytes",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "",
+      "encrypt_error": "input plaintext too small"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2aead-generated.json

@@ -0,0 +1,122 @@
+[
+   {
+      "name": "generated test. AD length=5, M length=1",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "5f8cd7018d18047c24e951095a00974b",
+      "aad": "c225f83d18",
+      "key": "c4145873aafc4b1dc3587bf2f493f4d72ae3836c95b7d72c11da68972632b2f46cec54424dc45325e30453396487e715925581a557f57b7976a3f63eab5578610000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "d1",
+      "ciphertext": "5f8cd7018d18047c24e951095a00974b6118defefa125ef6ccbbbf7e95cdee9aff9e85fc389a4b6c62cbd98ba17e541bad"
+   },
+   {
+      "name": "generated test. AD length=5, M length=16",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "820c2236059ebc4bf3b7e82592098199",
+      "aad": "1923d87dfc",
+      "key": "295b948495b5eaba751b919c0e4a4a8ceb7f81c649a14b9fde06ad17d41e2e738284d519eeea5bb731c3476c5311b9f85a8c2b2cf77918bbcb1af6a16c292a160000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "3c06a636989d553532d2eb089b144d99",
+      "ciphertext": "820c2236059ebc4bf3b7e825920981998d1ebe4ae73cdb550c3ed76342ee170d77733d11f7745bed0244f0cfb8b898ab2911d01161dc127c13287afd99aec2f8"
+   },
+   {
+      "name": "generated test. AD length=5, M length=64",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "20d8392eea831d024c44013f57c04e63",
+      "aad": "dccd27ede9",
+      "key": "f357344abc192a002f70f2abb6210d4dc6df8988ee3736e43551eb5dbe0a0c04cea86dbd0440eabb3d75014de192ece0f86c91b476bf8fe3b3778477a354f7860000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "3ba03e17129cff2b05217541b39562cff28904451aeb50848f1668f521d6dd9193ee4e494428d70d3120348e984286062d1719a1b4bbbed99e6dbb0fff1071c3",
+      "ciphertext": "20d8392eea831d024c44013f57c04e637316cc3b1e9cae5b0f539ae0d606467ad7cea5c3794a9045d11cc033a22342f923bdcd31034955fe0c3ba96948527e821e610870062e87045a387a5cf2a6ace9a052cc9269eb9602dc6602ca83e4f60df065d387501211465a5830a3ab165732"
+   },
+   {
+      "name": "generated test. AD length=5, M length=100",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "066048a059dc3691a6251605f40f4089",
+      "aad": "d611c4635c",
+      "key": "8c77b9209eed11c0875a37a0d31407b770cc55fd8776e62eeff10fa34c062e30ef856d59bec8855ab6544ff0ad2c51bd2de042c3585e43568bb7f390236ec8640000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "67af140501548da74f2e6865d6866eac5bc880a797a99571813706504544488607d88ecbeabd89c62584ffc7f4d7b29d0792570670628ee39492a4aeaabd192dfead1102c9d8e386e56189f6fee9cefb5f2c9939df94bedeae433670e9544b8d52ad1e2a",
+      "ciphertext": "066048a059dc3691a6251605f40f4089f2dfd34e99ab777154e3652311001a56766c0619d013b960f62ee3a6306d20e55d290838d0519077f74fa6db87a34622133b9dbe68862e30d7303724a6c3f9a20f05d32ba33669fd85dca50ceda01ec4f7600cb4b389cc2b6c1581125212567c90df74080ab742ecbc4b367cb3bddbd490fb15f5640b61811d92af8fac317ca1289ad14b"
+   },
+   {
+      "name": "generated test. AD length=10, M length=1",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "5b28df85be62398949b6a3c33af5206e",
+      "aad": "96158646db0e9d89abf5",
+      "key": "10adae2342f060c56d56cb18a08ca462cecd0a3c9ce78ea6941ee1ba0e6d294e27fc91be4d4e561cdfbb788a72685e84b616cf8aba28237cf458bee3626449fa0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "01",
+      "ciphertext": "5b28df85be62398949b6a3c33af5206edac469c25b610abbc8a0ebca17e58002887fa308a5a78ef9422d2e3a8a50c236a4"
+   },
+   {
+      "name": "generated test. AD length=10, M length=16",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "05b88d0b82edc539a1e3aa8107d070b2",
+      "aad": "3f9219d32b1a0db0b1e0",
+      "key": "d9dc626b911ba9b3907b1c8e0d0c92c400aeddf041d12c79e18c4e10705e322e40a5bf6728537d73b72174ec7f380be5e5aed223609d66be5f1cba680baf287d0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "567f9de1b20c251eade0cc16b91d5ac5",
+      "ciphertext": "05b88d0b82edc539a1e3aa8107d070b25ddf05c1a8388ff6f985c2d02907538096049e3598b7b25cf32a2e98aba6e70eb50524f143bfbc25ee6cc100192aa3c6"
+   },
+   {
+      "name": "generated test. AD length=10, M length=64",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "0a31fa49a2afec6a783381e700e161b0",
+      "aad": "2579c17bac86d076a29e",
+      "key": "5f07fe8e76023f6c2fadf656c176e0d6fa894bf5827fe5541550fbc27cd0344a14fc6a27b406477852a48a3c0a41e1df9dbdbf239607fd7750a31e67d6f0c6ec0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "83dd74ae12649c409fd64004756f372e5fd080cc8f7d168abf6966591750fa3f195c31cd5ee6c973bf850404bf250ff04902128281b8e946907f59b904062566",
+      "ciphertext": "0a31fa49a2afec6a783381e700e161b092b7fb6bd5495cb197fffd71eb51c5800cbc81867af2dd2c7cc27c9e124347a7ee5791f3263a843ecdfe51455d393deb996c2849b7527646808cd31dcbb792eadf760d834b7354f52621dfe784ed242325795d220d7ea30f7360d37b0a1c95aa"
+   },
+   {
+      "name": "generated test. AD length=10, M length=100",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "3d13c9658b0d53752c5764af97749443",
+      "aad": "6cce5ab29fe6fd67b06a",
+      "key": "213d15cf3a8b74883ff7ee71b15c02eacea7e9571edf294676c783231e7d9463d8960a96efd6c99974a36ca23160abc460ac4b4abfb82b5556767bbfbe2df3290000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "4bb184d6dd581f0ea7a943b8091af382a3007b04cfb9bce1f7b7c1a73e94c2fb71a5aef1a0fffbb2d9629e112426dfddcf69d90982c3a78aaeee85598e33a5538b803a239c143693acbc024576e58e615370019015000d5b6e0c6f8230a8271fa5769cab",
+      "ciphertext": "3d13c9658b0d53752c5764af977494436e8833ef340e3adadf27e4c9428ef537b3c0930bc1445cedff24425352f41b0d4070937fe9c752c4755ed80ab6e9439133c97dd26ee1a453d0cd5344e05224ee2ccda23dac3b23f126d4809fdbe6f86bb70930bb3b1b6d93d05e7edd97697c08eea30052918a9ca148df8b859b5b0688fd107f659e58c711eea4862558879f816924d9a8"
+   },
+   {
+      "name": "generated test. AD length=20, M length=1",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "946fa491604d45e7d757d1bbb84e834e",
+      "aad": "b71a4d87005b8e7f0dcca0ddcda4b4894033debe",
+      "key": "e00f828cac1696d4a4168a8b517cfd4dab2287bddd7bbbc81c8605a946754fc8ceb55d8b67a14b7c979e848d29460bada71e85cdfd32ec2e2b00aef3192167e60000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "e1",
+      "ciphertext": "946fa491604d45e7d757d1bbb84e834ea29b08d6d3c95b7421a5ef21b8a4447924fa134e3d347ccbf8a3ab38fe3bbd940e"
+   },
+   {
+      "name": "generated test. AD length=20, M length=16",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "92276e63c9463789f5df927d4c83679b",
+      "aad": "f5a7519eba1b3c8ef61c0c5585136da9af4f4944",
+      "key": "c28fc39c0a89da61a95084145153556a47f57715c2fcca725333ce15d94c39a1351b74722974709918d2f406b2d8232a39a42e158feffd3d7cde9e2f5472dccd0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "4405b7fa30c0b3b4e0a08a8ae69f6347",
+      "ciphertext": "92276e63c9463789f5df927d4c83679bf297c9ae0a686767bb0a786565564b450eb0eb6ee14a40d84a8d2c65c4882789fbdc8cc1bd668b110a54413de0601457"
+   },
+   {
+      "name": "generated test. AD length=20, M length=64",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "9df2f988712e7cecbdd4a2f6874e7ee6",
+      "aad": "9f87da25af14d5755ea672e361114dd59ed4f930",
+      "key": "d5859cf0ba821e2c8b0adfd12ea728fd1b241288ab03e492f0df1dac20ca6974298655b609d674412ae0e747cfff2f4de89c79f6a4911e19ea4e660758f119b10000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "e7e643a2f21a439758edf32c1685d4470ef7f4c6a7fccda186f6e584fd4de74e4d3db5fbf440f588bbfe937f8454ca633850b7c261a0f721e7fca5d8d2668a17",
+      "ciphertext": "9df2f988712e7cecbdd4a2f6874e7ee67d6c1bbf072bbd2ebdd13a97bf1fa0801283c41af27281bbee75fb783f33661f0bbee69dac5b792331c68612b76658d4fd9c18869023fc06824d0f73a06321bd3bdd002b0c35b3ffa4a1dc5da13eaf2910221a1be2b951a3fcb2d0319685bc00"
+   },
+   {
+      "name": "generated test. AD length=20, M length=100",
+      "origin": "etc/fle2_aead_generate_tests.py",
+      "algo": "AES-256-CTR/SHA-256",
+      "iv": "8a48039b1bee4c011a35d2b8b990d59a",
+      "aad": "3f8a52d9642c7c596b0f8bb2a6e5a568ebfcdebc",
+      "key": "5e32c06ebbd28ea8b1d325e3cf6b85192eeeda6f672bc6436c43ea2ef710daa435dea75714bcb2f5e6d962f5479eec3827f85a50db17dd5c4f31e551e321249c0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "8e76b3f282c2c788fd903b3eeec7eb6f133a280bb2d598a9f6d919c5288eeb786615ce6f8ac105b433f4f8c62fb0a11af3996cbf3b9078001241efe776cb39614417481def9390d1a89bfc85be1d1f2249ac8e6d68a3c5c953495eb7b975032d9e4018ff",
+      "ciphertext": "8a48039b1bee4c011a35d2b8b990d59ad386ef0af4dc7b462bda7b1b1b6dce6fad692b55f2ec74dfe66345f80b584539ff5c96d20d11a96e9840473e228ee34d3c00e24d2d81ee6a4cc48d9af819cf7bbb4efa1fde0b5904f957d9752a06053b765b388974a72a95650071493c004e5ea871e0bded9d6400c56b3b705695141c4ac81927cf023d996c3049c33abb6a4235d3740b"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2v2-aead-fixed.json

@@ -0,0 +1,29 @@
+[
+   {
+      "name": "Plaintext is 'test1'",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "74657374310a",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb1099db649a94f48960a9dbc0c438c904ccc042c6cf4f80af9fa4c8a00a1f41f11581b25d8ea083851460f03501ddb90dfb"
+   },
+   {
+      "name": "Plaintext is one byte",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "00",
+      "ciphertext": "918ab83c8966995dfb528a0020d9bb101dd2f66aba26a2cfbf868527c5c983076efca019407d3e82f60e3e9b97412a703fb14e40bc35d6af124b1d2433663334"
+   },
+   {
+      "name": "Plaintext is zero bytes",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "918ab83c8966995dfb528a0020d9bb10",
+      "aad": "99f05406f40d1af74cc737a96c1932fdec90",
+      "key": "c0b091fd93dfbb2422e53553f971d8127f3731058ba67f32b1549c53fce4120e50ecc9c6c1a6277ad951f729b3cc6446e21b4024345088a0edda82231a46ca9a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "",
+      "encrypt_error": "input plaintext too small"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/fle2v2-aead-generated.json

@@ -0,0 +1,122 @@
+[
+   {
+      "name": "generated test. AD length=5, M length=1",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "fb1d6c81c02cb6b58a38b2bfe81e72ed",
+      "aad": "ff6e78cc5a",
+      "key": "a58df9360b011f8a49ccbc0f45a3c7b3e3c79afa0d1aa3a986be22942d619cfb046b3ed7468ebe5f0e987b7adbfe274dbdf18b841e32db0ef8266e4e0dff1d4f0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "49",
+      "ciphertext": "fb1d6c81c02cb6b58a38b2bfe81e72ed4d302fe9487190c8f5a21640dbcdab4aae4d7fe426df86baf50f3b5ac793fc799c182f6657fe3fe30307cd6e55d72291"
+   },
+   {
+      "name": "generated test. AD length=5, M length=16",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "17a826cd1dd9d69c05026bed44709c66",
+      "aad": "d80ddf23c5",
+      "key": "8a1c5e0bbca800b67e7b775e0f771e457a63484ef8429b90b7d829a3b69c7b21a6e48664ceb969dfd3b117dfeac5e405470a7d682d9bbb1e7b8de07948fe84270000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "2b66ae58212ec33b71487f1561c01554",
+      "ciphertext": "17a826cd1dd9d69c05026bed44709c668bda7372f4a66870c2650a936d420405650eef307c81635bba0ed7d19843fed615099a2278bd08f3055b07b7d0865ee7f55b90c4623d87ae0d42ec35188d3175"
+   },
+   {
+      "name": "generated test. AD length=5, M length=64",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "cff68ad5356c7dce46df063a1b09a205",
+      "aad": "3a8462a3ac",
+      "key": "26472cf07e7acd1c649ed2648a21bd1779940df7ec263c8e87eb116acbf223cb5f18d82716554498bd86a3a1772d92b9ed28208d86fef1a41a7272dbb24df8b20000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "16fe1a1a40378950b49542da67e6c5eabe6260f1378ae82d1ab02e006d80dacc635c271913ad46c8afd8ef114a0dc8d4cfb00f36e7f67365b3037b5c59d25a67",
+      "ciphertext": "cff68ad5356c7dce46df063a1b09a2050469720e9166fe244860e2da3514b9e444766cc0903a5a91e579a0f7bcb81c3db8800f8da003cbbe0aadc4b2b7619a961227215f26847d9f03e8fe19a44bfc56aa24d6be802c628e6bb6945e96f11d67df6e36b532de9e4b7bbfe3bb44139bbee6f25337021afa50f00dfe7d40acf69c"
+   },
+   {
+      "name": "generated test. AD length=5, M length=100",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "f06ae9800331df58e18d5964f1d28ed1",
+      "aad": "6f80661806",
+      "key": "41880f49b2aba514495a03ab437a005817330a55d62da466504e955ee8a58273b4fa1d61505ffbce877a315b42f2aff2770c053a5fefde6c7c2208eac977db070000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "94a8938d4abb700dc2aec1c2be533d816018d6eb576c2ee4fe9d5cc509615f51762e4a74bae3a084b677fae278555fa0250465bf8f5c790750d4cdfdd8c3b0b884886db23cc434ee98f8dc88f303795eb4de0b30119e4a6d0af3a04034f1645667aa179b",
+      "ciphertext": "f06ae9800331df58e18d5964f1d28ed12210c460ca3345f6e086f45d4b718917c8e720725b2fa33ae9d4f59916e3c3aade685287e10123c35bfcfd19a1560d4a72d84f5c526ed39f654a47b5ea4d6b4c2b3a6f5f7ed27b27a4c0c2fcc6c061d6265f5e60e2765462cb7e2cc79780940530063cd8285a1f20f017724406e6556e6b99662022f1a22cea7b10768a6a11da39b086d9b44e39722a2f8549691b6468"
+   },
+   {
+      "name": "generated test. AD length=10, M length=1",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "c5a137ea066a5e82707d5eddcbc9d6a4",
+      "aad": "b4abbaa384d7bbd96f03",
+      "key": "9b53522a62a4c4c5252f79e0dcdd33062c7bd070a748cfd3687b41e19a06f22fd2469dc7ba40f5ac81477f45b8d9d85f399c1e90b7097a2637d12bb3bfdc8b4b0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "bb",
+      "ciphertext": "c5a137ea066a5e82707d5eddcbc9d6a4132d6f47d1d902a2bd0d07c01a8f2c415aadf64b65945a26b3ea1389b7ad336d81840f3797f2ec0fb5e57e94ba9ce265"
+   },
+   {
+      "name": "generated test. AD length=10, M length=16",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "39cedf823a3efd6776a5adb90b631f34",
+      "aad": "3f1b82afa35bfde34a4c",
+      "key": "19242d129a8f57efc583a465e759e8d944406d5d6751c7ac83a9918fea1c341ba8fd6bc81dd0594c9e708bdbd403aebd7bd7b448bea798e67ceb40ba7195350a0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "e635cff558de4c6888da603a25e7fa46",
+      "ciphertext": "39cedf823a3efd6776a5adb90b631f344231627c81d7b57f7496ccaedccb2d5b5412619bbb26b60170269f6aec58bc945f483e4c937aa71f22668d37df8fe6730773262adf42df1f1f54e638d46c0cb3"
+   },
+   {
+      "name": "generated test. AD length=10, M length=64",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "d9a613d0724951825a4cd3eee0f3145f",
+      "aad": "e2ecf7e131f45c609aee",
+      "key": "00cc4ba44ddf60e7a3388f1de5911eceddc261a2f06a7216636df1ffd4e96438b9d3c75c47004c73c91e29911b74709f912748a12e3a644fe406308ddc1b11320000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "cf9b0932953195de207b705f4e636446eae7edfc4375f91906c8939205e8b0618b05b80ea865a1047abf1e160109ed143bf367c4f8e47e59e8d59fce33dcdf71",
+      "ciphertext": "d9a613d0724951825a4cd3eee0f3145f4dcd76e8863a731feae223a2de5800db5522afe6cb57908a558aa278b858fd2ba0dd2fc49912ddfd33c29f9b5da63cc1b8a7b9cd636fc8db4476ea7294e1ce7118818e8e6ab573ffd81bb02b27a31e5a5310ecf7c24cdf21e722f99e961bb66dc1684a6bf839c1c34751473fe6b48c3a"
+   },
+   {
+      "name": "generated test. AD length=10, M length=100",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "8466405c5fe9a790cb6f4650132bce73",
+      "aad": "4041fcc02b394fbbac7f",
+      "key": "70dfb2d08ec15436eefdd211ffba22b605399af0367531461ea96f55a22a824def7b0cf489dad6277d99be2c9f7083c0e6fc5dca5a5e57b3b8b0f63a3afe0e890000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "db17e9f5d09370ef8b26fdcd177b8e7c52d3479ff16182a4ff3be30f9088104d1203e6a8048210b86650a313d134db6729e85b3f7237a605bcf32c0363706d8f73e28feb8bfc78ed9311fe5826d579c5e8685474548e501397921f877163b0582efea6bc",
+      "ciphertext": "8466405c5fe9a790cb6f4650132bce73ae3027d215290969960e4245831ce0c08e9fa4a31e0d6ffd017334ca5314705eeb22297cea4dcfd960b29e14b4e95efaf701896d9233cac43a40a8d7d560bb10fb3c0d85d69e29419894c32c58f5986dd934ec0c473c57e33d252084528ba709ab4f84674b6e40190eef9582228efbd8cf42df8a81015c6866397c81b56f9e8c548aabd35eb9ac4a63065445ccfd1ed2"
+   },
+   {
+      "name": "generated test. AD length=20, M length=1",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "43d601f463e000ed0d10a51f5145f9e1",
+      "aad": "9d57dd5b87dd7bd7b8633494537e26a2870af052",
+      "key": "b9208f5af904c60ff0d01ba03522e2c9df68334bb70a698e543b7b034192ec5199675c39148535f8db28522d516b2ff822564e68dbfdb22b01f17e3f80253d5f0000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "1d",
+      "ciphertext": "43d601f463e000ed0d10a51f5145f9e158afe11eb61498a4046397160588aafd7dca2da66eb26a13b62be7f9ee86975c99727108d82c0c98b10e94d34ddad5bf"
+   },
+   {
+      "name": "generated test. AD length=20, M length=16",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "1928360d70d848107e7c0c2b7d51fbd0",
+      "aad": "92a7b11d85f7704487aaad08c4aa1cf96f1a85d8",
+      "key": "489783288d6b06845c160dacbfa880f293b7aed9ef2d32744d4a7ff3a8d7b6f21f592ec9cbc66e417df6b4c5e42c6ffd4b223a2520acf634d3e259b12b23c2350000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "7d59536214b6c6ed5873e8d494910c32",
+      "ciphertext": "1928360d70d848107e7c0c2b7d51fbd08728a6e93cd58511be79fcd0e3f22a11a823ea583775c99e1eea9631550a7e84dcb1c29f7afdcdbc6aef25e1ee2e0eeb3d09c21c849911ee2341b3cacfcf5239"
+   },
+   {
+      "name": "generated test. AD length=20, M length=64",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "0f006c7e5a9ec1508de9db0aa6b626f3",
+      "aad": "a67faf62dd67ad07bf27644edfddbb9ebdae6d55",
+      "key": "b44af86deb6dbb59df8528c2414681f05e0bcd087333441ab097f2fd9eff6625612281875489f93cb90d80847318a9f266fc6b79f17203a43aafa766e0d746780000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "cbab838e2128b184a016ea9c13a20c2eeeb77cf34bea7349408c6c97db948c0eea17ef66d1b0faf92fb656500e443baa0aaa33d6ec8aabdb82f2faebe5b2f989",
+      "ciphertext": "0f006c7e5a9ec1508de9db0aa6b626f3ecf4a00d9231ae317550cfd689a5e93fa9df633b989f9a63fbcebbc21ca99842a1f5f1847a97ebaad2f54dc8c6c818eae8525b4d178b5066b343b7d44c02f9b699fb77a1b1aad638267e494712405d835729c209b6c5a0842913881494a92e5274f703f49d6004183e307b532b356113"
+   },
+   {
+      "name": "generated test. AD length=20, M length=100",
+      "origin": "etc/fle2v2_generate_tests.py",
+      "algo": "AES-256-CBC/SHA-256",
+      "iv": "bc2f11970b4b6e01cb23b57d697dff5d",
+      "aad": "080e6a6c5c1c6af249460eade36f7b0459881e65",
+      "key": "75b5dc7b15c76bb30707d0587562a96111116cd8befcada105c6e4238ef3bb045eb78f724c44100278687067b7636986dbb40793a5b9e58ff79bb1b561fad9d90000000000000000000000000000000000000000000000000000000000000000",
+      "plaintext": "b70fc343ebaeeea399ec9ca4e41c1b5d09a6f403dc7457a3ea9a6ec04189925584bf0ac2e63034137b1c2e218cc3dae823e6d82ab2aca85d7553da477aa18fb472a2d6ac8547b6fff9c88534e56f29ccd447a5cf3ecae02992ac873d473a34ee1729bb3b",
+      "ciphertext": "bc2f11970b4b6e01cb23b57d697dff5ded97a254c782cca5449a73c2098579fec3b850b219c4f8c1fefc213153a75fdfe83baa2bc0ecbbd1f6d4f4c291d245142a21d4f42bfff8b81241af24e24f037bd2f2ba30c4369825b04b2e8f72ef7da047443948ac503b46eacb8dc89a44f9b70b0d2986c56ed8d3b8b383b9aabb630d2785bb76dd9bd229179e28e635693caaf2a82c65db13e437bcbf60803df69638"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/mcgrew.json

@@ -0,0 +1,12 @@
+[
+   {
+      "name": "mcgrew aes-256-cbc sha-512-256",
+      "algo": "AES-256-CBC/SHA-512-256",
+      "origin": "https://datatracker.ietf.org/doc/html/draft-mcgrew-aead-aes-cbc-hmac-sha2-05#section-5.4",
+      "key": "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f0000000000000000000000000000000000000000000000000000000000000000",
+      "aad": "546865207365636f6e64207072696e6369706c65206f662041756775737465204b6572636b686f666673",
+      "iv": "1af38c2dc2b96ffdd86694092341bc04",
+      "plaintext": "41206369706865722073797374656d206d757374206e6f7420626520726571756972656420746f206265207365637265742c20616e64206974206d7573742062652061626c6520746f2066616c6c20696e746f207468652068616e6473206f662074686520656e656d7920776974686f757420696e636f6e76656e69656e6365",
+      "ciphertext": "1af38c2dc2b96ffdd86694092341bc044affaaadb78c31c5da4b1b590d10ffbd3dd8d5d302423526912da037ecbcc7bd822c301dd67c373bccb584ad3e9279c2e6d12a1374b77f077553df829410446b36ebd97066296ae6427ea75c2e0846a11a09ccf5370dc80bfecbad28c73f09b3a3b75e662a2594410ae496b2e2e6609e31e6e02cc837f053d21f37ff4f51950bbe2638d09dd7a4930930806d0703b1f64dd3b4c088a7f45c216839645b2012bf2e6269a8c56a816dbc1b267761955bc5"
+   }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/roundtrip/nist.json

@@ -0,0 +1,20 @@
+[
+   {
+      "name": "NIST AES-256-CTR/NONE",
+      "origin": "NIST SP 800-38A section F.5.5",
+      "algo": "AES-256-CTR/NONE",
+      "key": "603deb1015ca71be2b73aef0857d77811f352c073b6108d72d9810a30914dff4",
+      "iv": "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
+      "plaintext":  "6bc1bee22e409f96e93d7e117393172aae2d8a571e03ac9c9eb76fac45af8e5130c81c46a35ce411e5fbc1191a0a52eff69f2445df4f9b17ad2b417be66c3710",
+      "ciphertext": "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff601ec313775789a5b7a7f504bbf3d228f443e3ca4d62b59aca84e990cacaf5c52b0930daa23de94ce87017ba2d84988ddfc9c58db67aada613c2dd08457941a6"
+   },
+   {
+      "name": "Not 64 byte aligned input",
+      "algo": "AES-256-CTR/NONE",
+      "key": "603deb1015ca71be2b73aef0857d77811f352c073b6108d72d9810a30914dff4",
+      "iv": "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
+      "plaintext": "AAAA",
+      "ciphertext": "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeffA175"
+   }
+]
+

data/ext/libmongocrypt/libmongocrypt/test/data/tokens/README.md

@@ -0,0 +1,30 @@
+Documents in this test data directory provide inputs and corresponding expected outputs for token derivation functions in libmongocrypt.
+Each document is a single-depth set of key value pairs. All values are 32 octet hexit string except `counter` which is numeric.
+
+[server.json](server.json) comes from [TEST(FLETokens, TestVectors)](https://github.com/mongodb/mongo/blob/master/src/mongo/crypto/fle_crypto_test.cpp).
+
+| field | Description |
+| ----- | ----------- |
+| root | The base key from which all other tokens are derived. |
+| value | Data used in `DerivedFromData` tokens. |
+| contentionFactor | Data used in `DerivedFromDataAndContentionFactor` tokens. |
+| collectionsLevel1Token | HMAC(root, 1) |
+| serverTokenDerivationLevel1Token | HMAC(root, 2) |
+| serverDataEncryptionLevel1Token | HMAC(root, 3) |
+| EDCToken | HMAC(collectionsLevel1Token, 1) |
+| ESCToken | HMAC(collectionsLevel1Token, 2) |
+| ECCToken | HMAC(collectionsLevel1Token, 3) |
+| ECOCToken | HMAC(collectionsLevel1Token, 4) |
+| EDCDerivedFromDataToken | HMAC(EDCToken, value) |
+| ESCDerivedFromDataToken | HMAC(ESCToken, value) |
+| ECCDerivedFromDataToken | HMAC(ECCToken, value) |
+| EDCDerivedFromDataTokenAndContentionFactor| HMAC(EDCDerivedFromDataToken, contentionFactor) |
+| ESCDerivedFromDataTokenAndContentionFactor| HMAC(ESCDerivedFromDataToken, contentionFactor) |
+| ECCDerivedFromDataTokenAndContentionFactor| HMAC(ECCDerivedFromDataToken, contentionFactor) |
+| EDCTwiceDerivedToken | HMAC(EDCDerivedFromDataTokenAndContentionFactor, 1) |
+| ESCTwiceDerivedTagToken | HMAC(ESCDerivedFromDataTokenAndContentionFactor, 1) |
+| ESCTwiceDerivedValueToken | HMAC(ESCDerivedFromDataTokenAndContentionFactor, 2) |
+| serverDerivedFromDataToken | HMAC(serverTokenDerivationLevel1Token, value) |
+| serverCountAndContentionFactorEncryptionToken | HMAC(serverDerivedFromDataToken, 1) |
+| serverZerosEncryptionToken | HMAC(serverDerivedFromDataToken, 2) |
+

data/ext/libmongocrypt/libmongocrypt/test/data/tokens/mc.json

@@ -0,0 +1,25 @@
+{
+   "root": "6eda88c8496ec990f5d5518dd2ad6f3d9c33b6055904b120f12de82911fbd933",
+   "value": "c07c0df51257948e1a0fc70dd4568e3af99b23b3434c9858237ca7db62db9766",
+   "contentionFactor": 1234567890,
+   "collectionsLevel1Token": "ff2103ff205a36f39704f643c270c129919f008c391d9589a6d2c86a7429d0d3",
+   "serverDataEncryptionLevel1Token": "d915ccc1eb81687fb5fc5b799f48c99fbe17e7a011a46a48901b9ae3d790656b",
+   "serverTokenDerivationLevel1Token": "1adc114b462741e6ac9f52eacf3dcb8cbca19827693c571d9418fda570c29d82",
+   "EDCToken": "167d2d2ff8e4144df37ff759db593fde0ecc7d9636f96d62dacad672eccad349",
+   "ESCToken": "bfd480f1658f49f48985734737bc07d0bc36b88210277605c55ff3c9c3ef50b0",
+   "ECCToken": "9d34f9c182d75a5a3347c2f903e3e647105c651d52cf9555c9420ba07ddd3aa2",
+   "ECOCToken": "e354e3b05e81e08b970ca061cb365163fd33dec2f982ddf9440e742ed288a8f8",
+   "EDCDerivedFromDataToken": "53eaa4c23a3ff65e6b7c7dbc4b1389cf0a6151b1ede5383a0673ff9c67855ff9",
+   "ESCDerivedFromDataToken": "acb3fab332131bbeaf112814f29ae0f2b10e97dc94b62db56c594661248e7467",
+   "ECCDerivedFromDataToken": "826cfd35c35dcc7d4fbe13f33a3520749853bd1ea4c47919482252fba3a70cec",
+   "serverDerivedFromDataToken": "4a671dbf25d68b6c040a077dabb4e63869e03f4d466803609233b16356ec6d66",
+   "EDCDerivedFromDataTokenAndContentionFactor": "70fb9a3f760996f2f1438c5bf2a4d52bcba01b0badc3596276f49ffb2f0b136e",
+   "ESCDerivedFromDataTokenAndContentionFactor": "7076c7b05fb4be4fe585eed930b852a6d088a0c55f3c96b50069e8a26ebfb347",
+   "ECCDerivedFromDataTokenAndContentionFactor": "6c6a349956c19f9c5e638e612011a71fbb71921edb540310c17cd0208b7f548b",
+   "EDCTwiceDerivedToken": "3643fd370e2719c03234cdeec787dfdc7d8fceecafa8a992e3c1f9d4d53449fe",
+   "ESCTwiceDerivedTagToken": "c73bc4ff5e70222c653140b2b4998b4d62db973f20f116f66ff811a9a907a78f",
+   "ESCTwiceDerivedValueToken": "34150c6f5ab56dc39ddb935accb7f53e5276322fa937650b76a4dda9723d6fba",
+   "serverCountAndContentionFactorEncryptionToken": "a8c4a477e5518a527f718a5a1530919f2dad13b1f3559833e17b479711cbdbb9",
+   "serverZerosEncryptionToken": "95fda1e139ef1dc84260d4d3ebaab7627a9676f4af7aeb1b596c7c14a0b3a2ea",
+   "AnchorPaddingTokenRoot": "d5072cc56d9241470b9771292c3f75d950cba1cf842ca6707d1adfec5ec6f3e7"
+}

data/ext/libmongocrypt/libmongocrypt/test/data/tokens/server.json

@@ -0,0 +1,25 @@
+{
+   "root": "e3d9219f79586582112740b2add88e1030d91926ae8afc13ee575cfb8bb965b7",
+   "value": "c07c0df51257948e1a0fc70dd4568e3af99b23b3434c9858237ca7db62db9766",
+   "contentionFactor": 1234567890,
+   "collectionsLevel1Token": "BD53ACAC665EDD01E0CA30CB648B2B8F4967544047FD4E7D12B1A9BF07339928",
+   "serverTokenDerivationLevel1Token": "C17FDF249DE234F9AB15CD95137EA7EC82AE4E5B51F6BFB0FC1B8FEB6800F74C",
+   "serverDataEncryptionLevel1Token": "EB9A73F7912D86A4297E81D2F675AF742874E4057E3A890FEC651A23EEE3F3EC",
+   "EDCToken": "82B0AB0F8F1D31AEB6F4DBC915EF17CBA2FE21E36EC436984EB63BECEC173831",
+   "ESCToken": "279C575B52B73677EEF07D9C1126EBDF08C35369570A9B75E44A9AFDCCA96B6D",
+   "ECCToken": "C58F671F04A8CFDD8FB1F718F563139F1286D7950E97C0C4A94EDDF0EDB127FE",
+   "ECOCToken": "9E837ED3926CB8ED680E0E7DCB2A481A3E398BE7851FA1CE4D738FA5E67FFCC9",
+   "EDCDerivedFromDataToken": "CEA098AA664E578D4E9CE05B50ADD15DF2F0316CD5CCB08E720C61D8C7580E2A",
+   "ESCDerivedFromDataToken": "DE6A1AC292BC62094C33E94647B044B9B10514317B75F4128DDA2E0FB686704F",
+   "ECCDerivedFromDataToken": "9A95D4F44734447E3F0266D1629513A0B7698CCE8C1524F329CE7970627FFD06",
+   "serverDerivedFromDataToken": "EDBC92F3BFE4CCB3F088FED8D42379A83F26DC37F2B6D513D4F568A6F32C8C80",
+   "EDCDerivedFromDataTokenAndContentionFactor": "D8CC38AE6A64BD1BF195A2D35734C13AF2B1729AD1052A81BE00BF29C67A696E",
+   "ESCDerivedFromDataTokenAndContentionFactor": "8AAF04CBA6DC16BFB37CADBA43DCA66C183634CB3DA278DE174556AE6E17CEBB",
+   "ECCDerivedFromDataTokenAndContentionFactor": "E9580F805E0D07AF384EBA185384F28A49C3DB93AFA4A187A1F4DA129271D82C",
+   "EDCTwiceDerivedToken": "B39A7EC33FD976EFB8EEBBBF3A265A933E2128D709BB88C77E3D42AA735F697C",
+   "ESCTwiceDerivedTagToken": "D6F76A9D4767E0889B709517C8CF0412D81874AEB6E6CEBFBDDFF7B013EB7154",
+   "ESCTwiceDerivedValueToken": "53F0A51A43447B9881D5E79BA4C5F78E80BC2BC6AA42B00C81079EBF4C9D5A7C",
+   "serverCountAndContentionFactorEncryptionToken": "2F30DBCC06B722B60BC1FF018FC28D5FAEE2F222496BE34A264EF3267E811DA0",
+   "serverZerosEncryptionToken": "986F23F132FF7F14F748AC69373CFC982AD0AD4BAD25BE92008B83AB43E96029",
+   "AnchorPaddingTokenRoot": "4312890F621FE3CA7497C3405DFD8AAF46A578C77F7404D28C12BA853A4D3327"
+}

data/ext/libmongocrypt/libmongocrypt/test/example-no-bson.c

@@ -14,10 +14,10 @@
  * limitations under the License.
  */
 
-#include <stdio.h>
 #include <mongocrypt.h>
+#include <stdio.h>
 
-int main () {
-   printf ("mongocrypt_version=%s\n", mongocrypt_version(0));
-   return 0;
+int main() {
+    printf("mongocrypt_version=%s\n", mongocrypt_version(0));
+    return 0;
 }