=== [4] FIXED build KAT (fix must not break valid sizes) ===
KAT-128: enc OK    dec OK    canary OK  ctx->bits 128
KAT-192: enc OK    dec OK    canary OK  ctx->bits 192
KAT-256: enc OK    dec OK    canary OK  ctx->bits 256
RESULT-PASS: 0 failures
exit=0

=== [5] FIXED build guard (invalid lengths must be rejected) ===
semantics: production (-DNDEBUG) (KASSERT COMPILED OUT)
after camellia_set_key(key, 64):
  ctx->bits : 123 (0x7b)
  schedule  : UNTOUCHED -- never generated for this key length
  plaintext 0123456789abcdeffedcba9876543210
  ciphertext5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
  encrypt   : REFUSED (dst untouched -- fixed behavior)
bits=64   : REJECTED (ctx untouched, encrypt refused)
bits=0    : REJECTED (ctx untouched, encrypt refused)
bits=-1   : REJECTED (ctx untouched, encrypt refused)
bits=129  : REJECTED (ctx untouched, encrypt refused)
BUG-NOT-PRESENT: invalid key lengths rejected before touching key material; encrypt/decrypt refuse invalid schedules
exit=0