# Test vectors for the conversion of digest values to scalars.

# Minimum Digest Values.

Curve = P-256
Digest = SHA1
Input =  0000000000000000000000000000000000000000
Output = 0000000000000000000000000000000000000000000000000000000000000000

Curve = P-256
Digest = SHA256
Input = 0000000000000000000000000000000000000000000000000000000000000000
Output = 0000000000000000000000000000000000000000000000000000000000000000

Curve = P-256
Digest = SHA384
Input = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Output = 0000000000000000000000000000000000000000000000000000000000000000

Curve = P-256
Digest = SHA512
Input = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Output = 0000000000000000000000000000000000000000000000000000000000000000

Curve = P-384
Digest = SHA1
Input = 0000000000000000000000000000000000000000
Output = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Curve = P-384
Digest = SHA256
Input = 0000000000000000000000000000000000000000000000000000000000000000
Output = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Curve = P-384
Digest = SHA384
Input = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Output = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Curve = P-384
Digest = SHA512
Input = 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Output = 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

# The truncated digest value is equal to n - 1 (not possible when digest is
# shorter than the curve's scalars).

Curve = P-256
Digest = SHA256
Input = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632550
Output = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632550

Curve = P-256
Digest = SHA384
Input = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC63255000000000000000000000000000000000
Output = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632550

Curve = P-256
Digest = SHA512
Input = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC6325500000000000000000000000000000000000000000000000000000000000000000
Output = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632550

Curve = P-384
Digest = SHA384
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52972
Output = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52972

Curve = P-384
Digest = SHA512
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC5297200000000000000000000000000000000
Output = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52972

# The truncated digest value is equal to n (not possible when digest is shorter
# than the curve's scalars).

Curve = P-256
Digest = SHA256
Input = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551
Output = 7FFFFFFF800000007FFFFFFFFFFFFFFFDE737D56D38BCF4279DCE5617E3192A8

Curve = P-256
Digest = SHA384
Input = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC63255100000000000000000000000000000000
Output = 7FFFFFFF800000007FFFFFFFFFFFFFFFDE737D56D38BCF4279DCE5617E3192A8

Curve = P-256
Digest = SHA512
Input = FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC6325510000000000000000000000000000000000000000000000000000000000000000
Output = 7FFFFFFF800000007FFFFFFFFFFFFFFFDE737D56D38BCF4279DCE5617E3192A8

Curve = P-384
Digest = SHA384
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52973
Output = 7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE3B1A6C0FA1B96EFAC0D06D9245853BD76760CB5666294B9

Curve = P-384
Digest = SHA512
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC5297300000000000000000000000000000000
Output = 7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFE3B1A6C0FA1B96EFAC0D06D9245853BD76760CB5666294B9


# Maximum digest values.

Curve = P-256
Digest = SHA1
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Curve = P-256
Digest = SHA256
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Curve = P-256
Digest = SHA384
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Curve = P-256
Digest = SHA512
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Curve = P-384
Digest = SHA1
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 00000000000000000000000000000000000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Curve = P-384
Digest = SHA256
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 00000000000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Curve = P-384
Digest = SHA384
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Curve = P-384
Digest = SHA512
Input = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Output = 7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
