==== cryptoapi race (XTS vs CBC control) ====
serial sanity OK (both modes)
RACE aes-xts : 3401362 iterations, 0 corrupted outputs -> no corruption
RACE aes-cbc : 3610941 iterations, 0 corrupted outputs -> no corruption
SUMMARY cryptoapi_race corrupted_xts_outputs=0 corrupted_cbc_outputs=0
race exit=4 (3 => XTS corruption observed, 4 => none)
==== X25519 vs LibreSSL (if supported) ====
LibreSSL genpkey X25519 unsupported -> skipped (RFC 7748 vectors already verified)