=== [1] prod-semantics KAT (RFC 3713 App.A + canary) ===
KAT-128: enc OK    dec OK    canary OK  ctx->bits 128
KAT-192: enc OK    dec OK    canary OK  ctx->bits 192
KAT-256: enc OK    dec OK    canary OK  ctx->bits 256
RESULT-PASS: 0 failures
exit=0

=== [2] prod-semantics guard (production kernel: KASSERT compiled out) ===
semantics: production (-DNDEBUG) (KASSERT COMPILED OUT)
after camellia_set_key(key, 64):
  ctx->bits : 64 (0x40)
  schedule  : UNTOUCHED -- never generated for this key length
  plaintext 0123456789abcdeffedcba9876543210
  ciphertext0123456789abcdeffedcba9876543210
  encrypt   : IDENTITY (ct == pt, no rounds executed)
bits=64   : ACCEPTED  (encrypt = identity)
bits=0    : ACCEPTED  (encrypt = identity)
bits=-1   : ACCEPTED  (encrypt = identity)
bits=129  : ACCEPTED  (encrypt = identity)
BUG-CONFIRMED: invalid key lengths silently accepted; schedule never generated; encryption is the identity function
exit=42

=== [3] debug-semantics guard (INVARIANTS: KASSERT active) ===
semantics: debug (assert active) (KASSERT ACTIVE)
Assertion failed: (keyBitLength == 128 || keyBitLength == 192 || keyBitLength == 256), function Camellia_Ekeygen, file /usr/src/sys/crypto/camellia/camellia.c, line 1254.
exit=134
Abort trap (core dumped)