Testing about wycheproof HOT 3 OPEN

Sounds great. I'm also planning to cover the new variants, when time allows.

from wycheproof.

There are a few algorithms that have poor coverage (i.e. no third party verification) Hence I'm wondering if there are any major libraries that implement these. Some of the algorithms are:

• Aegis,
• GCM with ciphers other than AES (there are some RFCs using other ciphers, but I haven't seen a library
  implementing them yet)
• Rijndael variants with key sizes and block sizes not included in AES,
  any ciphers with X9.23 padding
• ECDSA with a lot of options (many libraries implement a short list of variants, which by itself is a good
  idea, except that such libraries cannot be used to get good coverage)
• KW/KWP with ciphers other than AES (again there are some RFCs defining these modes, not sure if
  they are used anywhere)
• PBES2 (a main issue here are restricted inputs)
• RSA-PSS with SHAKE.

from wycheproof.

AEGIS has quite a lot of implementations. It's included by default in libsodium since version 1.0.19 and in the Zig standard library.

I'm planning to add the Wycheproof test vectors to libaegis, since this is what some TLS libraries depend on.
[EDIT: Done - libaegis is now using the Wycheproof test vectors, and they are correct].

from wycheproof.