=== test_rmd160 ===
OK   spec = 9c1185a5c5e9fc54612808977ee8f548b2258d31
OK   spec = 0bdc9d2d256b3ee9daae347be6f4dc835a467ffe
OK   spec = 8eb208f7e05d987a9b044a8e98c6b087f15a0bfc
OK   spec = 5d0689ef49d2fae572b881b123a85ffa21595f36
OK   spec = f71c27109c692c1b56bbdceb5b9d2865b3708dbc
OK   spec = 12a053384a9c0c88e405a06c27dcf49ada62eb2b
OK   million-a = 52783243c1697bdbe16d37f97f68f08325dc1528
OK   split-update sweep 0..260 (byte + random chunks)
OK   edge = e039bc5afc5eea12f6d477a5bafe2d0c9b1027bb
OK   edge = abd06061aa02c08cb771daaa9b13ba780c086e37
OK   edge = b23df20e120e73c3ce2da4369ab7966ba559bef8
OK   edge = e41f072c296f2637455e651513de982b6d3625cd
OK   edge = e9ce60f72fbc9029e3ea677a131dc5613e113985
OK   edge = 49f1892930653bb8d9e4417e204e9020ce91bbfc
OK   edge = d678ac1b6cfdfa2b4b77e2219e8ab44f15d1a2f0
OK   edge = 4e3a612e60353fd02c8bde1c98debe9f3dd1e519
OK   edge = ed99638d51344dec67a0ce7fb105521f346b8a16
OK   edge = f61ff8ff401a32dff857c5d920931e3a4943be05
OK   edge = 62995dfa3a827f97f48ae575e99628465720f189
OK   edge = b49222279a4f4b2c3d97e8420e2543077f31df74
OK   edge = 7df584d231cd6e27776d5f1986cd97b96db1db88
OK   RMD160Final zeroizes whole context (96 bytes)
rmd160: 544 checks, 0 failures
=== test_chacha ===
OK   RFC 8439 2.3.2 block keystream
OK   RFC 8439 2.4.2 sunscreen encryption (114 bytes, partial block)
OK   hchacha20 draft-xchacha 2.2.1 subkey
OK   35 generated chacha vectors (incl. counter-wrap j12->j13)
OK   counter continuity across calls (128+22 == 150, block-aligned)
OK   sub-64 tail resync: 2nd call continues at next full block (no keystream reuse)
OK   in-place aliasing equals out-of-place
chacha(plain): 43 checks, 0 failures
=== test_chacha_ks ===
OK   8 ctr128 keystream vectors (csprng config, wraps incl.)
OK   csprng-config keystream == plain-config keystream
OK   chacha_ctrsave/restore resumes at block 12
chacha(csprng config): 11 checks, 0 failures
=== test_poly1305 ===
OK   RFC 8439 2.5.2 tag
OK   60 generated poly1305 vectors x3 update patterns
OK   r clamp limbs for all-ones key (0x3ffffff,0x3ffff03,0x3ffc0ff,0x3f03fff,0x00fffff)
OK   poly1305_finish zeroes h/r/pad (leftover=8 final=1 buffer[0]=99 not wiped - documented)
poly1305: 178 checks, 0 failures
=== test_des ===
OK   classic published KAT 0: 85e813540f0ab405
OK   classic published KAT 1: 0000000000000000
OK   24 openssl cross-matched single-DES vectors (+decrypt)
OK   24 openssl cross-matched 3DES-EDE vectors (+decrypt)
OK   all 16 canonical weak/semi-weak keys detected
OK   des_set_key_checked: weak->-2, bad parity->-1 (NOTE: des_set_key defaults to UNCHECKED, des_check_key=0)
OK   des_set_odd_parity/des_check_key_parity round-trip
des: 106 checks, 0 failures
=== test_aead ===
OK   RFC 8439 A.5 AEAD (enc + dec + tamper-reject)
OK   10 generated AEAD vectors (enc + dec + tamper-reject)
aead: 35 checks, 0 failures