Hashing to Elliptic Curves
draft-irtf-cfrg-hash-to-curve-15
The information below is for an old version of the document.
| Document | Type |
This is an older version of an Internet-Draft that was ultimately published as RFC 9380.
|
|
|---|---|---|---|
| Authors | Armando Faz-Hernandez , Sam Scott , Nick Sullivan , Riad S. Wahby , Christopher A. Wood | ||
| Last updated | 2022-06-15 | ||
| Replaces | draft-sullivan-cfrg-hash-to-curve | ||
| RFC stream | Internet Research Task Force (IRTF) | ||
| Formats | |||
| IETF conflict review | conflict-review-irtf-cfrg-hash-to-curve, conflict-review-irtf-cfrg-hash-to-curve, conflict-review-irtf-cfrg-hash-to-curve, conflict-review-irtf-cfrg-hash-to-curve, conflict-review-irtf-cfrg-hash-to-curve, conflict-review-irtf-cfrg-hash-to-curve | ||
| Additional resources | Mailing list discussion | ||
| Stream | IRTF state | In IRSG Poll | |
| Consensus boilerplate | Yes | ||
| Document shepherd | Stanislav V. Smyshlyaev | ||
| Shepherd write-up | Show Last changed 2021-11-10 | ||
| IESG | IESG state | Became RFC 9380 (Informational) | |
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | smyshsv@gmail.com |
draft-irtf-cfrg-hash-to-curve-15
DST_prime = 412717974da474d0f8c420f320ff81e8432adb7c927d9bd082b4
fb4d16c0a23620
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
0000000000000000000000613531325f6161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161002000412717974da474d0f8
c420f320ff81e8432adb7c927d9bd082b4fb4d16c0a23620
uniform_bytes = 20cce7033cabc5460743180be6fa8aac5a103f56d481cf36
9a8accc0c374431b
msg =
len_in_bytes = 0x80
DST_prime = 412717974da474d0f8c420f320ff81e8432adb7c927d9bd082b4
fb4d16c0a23620
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
0000000000000000000000008000412717974da474d0f8c420f320
ff81e8432adb7c927d9bd082b4fb4d16c0a23620
uniform_bytes = 14604d85432c68b757e485c8894db3117992fc57e0e136f7
1ad987f789a0abc287c47876978e2388a02af86b1e8d1342e5ce4f
7aaa07a87321e691f6fba7e0072eecc1218aebb89fb14a0662322d
5edbd873f0eb35260145cd4e64f748c5dfe60567e126604bcab1a3
ee2dc0778102ae8a5cfd1429ebc0fa6bf1a53c36f55dfc
msg = abc
len_in_bytes = 0x80
DST_prime = 412717974da474d0f8c420f320ff81e8432adb7c927d9bd082b4
fb4d16c0a23620
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
Faz-Hernandez, et al. Expires 17 December 2022 [Page 155]
Internet-Draft hash-to-curve June 2022
0000000000000000000000616263008000412717974da474d0f8c4
20f320ff81e8432adb7c927d9bd082b4fb4d16c0a23620
uniform_bytes = 1a30a5e36fbdb87077552b9d18b9f0aee16e80181d5b951d
0471d55b66684914aef87dbb3626eaabf5ded8cd0686567e503853
e5c84c259ba0efc37f71c839da2129fe81afdaec7fbdc0ccd4c794
727a17c0d20ff0ea55e1389d6982d1241cb8d165762dbc39fb0cee
4474d2cbbd468a835ae5b2f20e4f959f56ab24cd6fe267
msg = abcdef0123456789
len_in_bytes = 0x80
DST_prime = 412717974da474d0f8c420f320ff81e8432adb7c927d9bd082b4
fb4d16c0a23620
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000061626364656630313233343536373839
008000412717974da474d0f8c420f320ff81e8432adb7c927d9bd0
82b4fb4d16c0a23620
uniform_bytes = d2ecef3635d2397f34a9f86438d772db19ffe9924e28a1ca
f6f1c8f15603d4028f40891044e5c7e39ebb9b31339979ff33a424
9206f67d4a1e7c765410bcd249ad78d407e303675918f20f26ce6d
7027ed3774512ef5b00d816e51bfcc96c3539601fa48ef1c07e494
bdc37054ba96ecb9dbd666417e3de289d4f424f502a982
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x80
DST_prime = 412717974da474d0f8c420f320ff81e8432adb7c927d9bd082b4
fb4d16c0a23620
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
0000000000000000000000713132385f7171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171008000412717974da474d0f8c420f320ff81
e8432adb7c927d9bd082b4fb4d16c0a23620
uniform_bytes = ed6e8c036df90111410431431a232d41a32c86e296c05d42
6e5f44e75b9a50d335b2412bc6c91e0a6dc131de09c43110d9180d
0a70f0d6289cb4e43b05f7ee5e9b3f42a1fad0f31bac6a625b3b5c
50e3a83316783b649e5ecc9d3b1d9471cb5024b7ccf40d41d1751a
04ca0356548bc6e703fca02ab521b505e8e45600508d32
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Faz-Hernandez, et al. Expires 17 December 2022 [Page 156]
Internet-Draft hash-to-curve June 2022
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x80
DST_prime = 412717974da474d0f8c420f320ff81e8432adb7c927d9bd082b4
fb4d16c0a23620
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
0000000000000000000000613531325f6161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161008000412717974da474d0f8
c420f320ff81e8432adb7c927d9bd082b4fb4d16c0a23620
uniform_bytes = 78b53f2413f3c688f07732c10e5ced29a17c6a16f717179f
fbe38d92d6c9ec296502eb9889af83a1928cd162e845b0d3c5424e
83280fed3d10cffb2f8431f14e7a23f4c68819d40617589e4c4116
9d0b56e0e3535be1fd71fbb08bb70c5b5ffed953d6c14bf7618b35
fc1f4c4b30538236b4b08c9fbf90462447a8ada60be495
K.3. expand_message_xmd(SHA-512)
name = expand_message_xmd
DST = QUUX-V01-CS02-with-expander-SHA512-256
hash = SHA512
k = 256
msg =
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
Faz-Hernandez, et al. Expires 17 December 2022 [Page 157]
Internet-Draft hash-to-curve June 2022
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000002000515555
582d5630312d435330322d776974682d657870616e6465722d5348
413531322d32353626
uniform_bytes = 6b9a7312411d92f921c6f68ca0b6380730a1a4d982c50721
1a90964c394179ba
msg = abc
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000616263002000
515555582d5630312d435330322d776974682d657870616e646572
2d5348413531322d32353626
uniform_bytes = 0da749f12fbe5483eb066a5f595055679b976e93abe9be6f
0f6318bce7aca8dc
msg = abcdef0123456789
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000616263646566
30313233343536373839002000515555582d5630312d435330322d
776974682d657870616e6465722d5348413531322d32353626
uniform_bytes = 087e45a86e2939ee8b91100af1583c4938e0f5fc6c9db4b1
07b83346bc967f58
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
Faz-Hernandez, et al. Expires 17 December 2022 [Page 158]
Internet-Draft hash-to-curve June 2022
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000713132385f71
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
71717171717171717171717171717171717171002000515555582d
5630312d435330322d776974682d657870616e6465722d53484135
31322d32353626
uniform_bytes = 7336234ee9983902440f6bc35b348352013becd88938d2af
ec44311caf8356b3
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000613531325f61
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
Faz-Hernandez, et al. Expires 17 December 2022 [Page 159]
Internet-Draft hash-to-curve June 2022
616161616161616161616161616161616161616161616161610020
00515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
uniform_bytes = 57b5f7e766d5be68a6bfe1768e3c2b7f1228b3e4b3134956
dd73a59b954c66f4
msg =
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000008000515555
582d5630312d435330322d776974682d657870616e6465722d5348
413531322d32353626
uniform_bytes = 41b037d1734a5f8df225dd8c7de38f851efdb45c372887be
655212d07251b921b052b62eaed99b46f72f2ef4cc96bfaf254ebb
bec091e1a3b9e4fb5e5b619d2e0c5414800a1d882b62bb5cd1778f
098b8eb6cb399d5d9d18f5d5842cf5d13d7eb00a7cff859b605da6
78b318bd0e65ebff70bec88c753b159a805d2c89c55961
msg = abc
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000616263008000
515555582d5630312d435330322d776974682d657870616e646572
2d5348413531322d32353626
uniform_bytes = 7f1dddd13c08b543f2e2037b14cefb255b44c83cc397c178
6d975653e36a6b11bdd7732d8b38adb4a0edc26a0cef4bb4521713
5456e58fbca1703cd6032cb1347ee720b87972d63fbf232587043e
d2901bce7f22610c0419751c065922b488431851041310ad659e4b
23520e1772ab29dcdeb2002222a363f0c2b1c972b3efe1
msg = abcdef0123456789
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
Faz-Hernandez, et al. Expires 17 December 2022 [Page 160]
Internet-Draft hash-to-curve June 2022
000000000000000000000000000000000000000000616263646566
30313233343536373839008000515555582d5630312d435330322d
776974682d657870616e6465722d5348413531322d32353626
uniform_bytes = 3f721f208e6199fe903545abc26c837ce59ac6fa45733f1b
aaf0222f8b7acb0424814fcb5eecf6c1d38f06e9d0a6ccfbf85ae6
12ab8735dfdf9ce84c372a77c8f9e1c1e952c3a61b7567dd069301
6af51d2745822663d0c2367e3f4f0bed827feecc2aaf98c949b5ed
0d35c3f1023d64ad1407924288d366ea159f46287e61ac
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000713132385f71
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
71717171717171717171717171717171717171008000515555582d
5630312d435330322d776974682d657870616e6465722d53484135
31322d32353626
uniform_bytes = b799b045a58c8d2b4334cf54b78260b45eec544f9f2fb5bd
12fb603eaee70db7317bf807c406e26373922b7b8920fa29142703
dd52bdf280084fb7ef69da78afdf80b3586395b433dc66cde048a2
58e476a561e9deba7060af40adf30c64249ca7ddea79806ee5beb9
a1422949471d267b21bc88e688e4014087a0b592b695ed
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
msg_prime = 0000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
Faz-Hernandez, et al. Expires 17 December 2022 [Page 161]
Internet-Draft hash-to-curve June 2022
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000613531325f61
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161610080
00515555582d5630312d435330322d776974682d657870616e6465
722d5348413531322d32353626
uniform_bytes = 05b0bfef265dcee87654372777b7c44177e2ae4c13a27f10
3340d9cd11c86cb2426ffcad5bd964080c2aee97f03be1ca18e30a
1f14e27bc11ebbd650f305269cc9fb1db08bf90bfc79b42a952b46
daf810359e7bc36452684784a64952c343c52e5124cd1f71d474d5
197fefc571a92929c9084ffe1112cf5eea5192ebff330b
K.4. expand_message_xof(SHAKE128)
name = expand_message_xof
DST = QUUX-V01-CS02-with-expander-SHAKE128
hash = SHAKE128
k = 128
msg =
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 0020515555582d5630312d435330322d776974682d657870616e
6465722d5348414b4531323824
uniform_bytes = 86518c9cd86581486e9485aa74ab35ba150d1c75c88e26b7
043e44e2acd735a2
msg = abc
len_in_bytes = 0x20
Faz-Hernandez, et al. Expires 17 December 2022 [Page 162]
Internet-Draft hash-to-curve June 2022
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 6162630020515555582d5630312d435330322d776974682d6578
70616e6465722d5348414b4531323824
uniform_bytes = 8696af52a4d862417c0763556073f47bc9b9ba43c99b5053
05cb1ec04a9ab468
msg = abcdef0123456789
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 616263646566303132333435363738390020515555582d563031
2d435330322d776974682d657870616e6465722d5348414b453132
3824
uniform_bytes = 912c58deac4821c3509dbefa094df54b34b8f5d01a191d1d
3108a2c89077acca
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 713132385f717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717100
20515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
uniform_bytes = 1adbcc448aef2a0cebc71dac9f756b22e51839d348e031e6
3b33ebb50faeaf3f
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 613531325f616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
Faz-Hernandez, et al. Expires 17 December 2022 [Page 163]
Internet-Draft hash-to-curve June 2022
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
61616161610020515555582d5630312d435330322d776974682d65
7870616e6465722d5348414b4531323824
uniform_bytes = df3447cc5f3e9a77da10f819218ddf31342c310778e0e4ef
72bbaecee786a4fe
msg =
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 0080515555582d5630312d435330322d776974682d657870616e
6465722d5348414b4531323824
uniform_bytes = 7314ff1a155a2fb99a0171dc71b89ab6e3b2b7d59e38e644
19b8b6294d03ffee42491f11370261f436220ef787f8f76f5b26bd
cd850071920ce023f3ac46847744f4612b8714db8f5db83205b2e6
25d95afd7d7b4d3094d3bdde815f52850bb41ead9822e08f22cf41
d615a303b0d9dde73263c049a7b9898208003a739a2e57
msg = abc
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 6162630080515555582d5630312d435330322d776974682d6578
70616e6465722d5348414b4531323824
uniform_bytes = c952f0c8e529ca8824acc6a4cab0e782fc3648c563ddb00d
a7399f2ae35654f4860ec671db2356ba7baa55a34a9d7f79197b60
ddae6e64768a37d699a78323496db3878c8d64d909d0f8a7de4927
dcab0d3dbbc26cb20a49eceb0530b431cdf47bc8c0fa3e0d88f53b
318b6739fbed7d7634974f1b5c386d6230c76260d5337a
msg = abcdef0123456789
len_in_bytes = 0x80
Faz-Hernandez, et al. Expires 17 December 2022 [Page 164]
Internet-Draft hash-to-curve June 2022
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 616263646566303132333435363738390080515555582d563031
2d435330322d776974682d657870616e6465722d5348414b453132
3824
uniform_bytes = 19b65ee7afec6ac06a144f2d6134f08eeec185f1a890fe34
e68f0e377b7d0312883c048d9b8a1d6ecc3b541cb4987c26f45e0c
82691ea299b5e6889bbfe589153016d8131717ba26f07c3c14ffbe
f1f3eff9752e5b6183f43871a78219a75e7000fbac6a7072e2b83c
790a3a5aecd9d14be79f9fd4fb180960a3772e08680495
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 713132385f717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717100
80515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
uniform_bytes = ca1b56861482b16eae0f4a26212112362fcc2d76dcc80c93
c4182ed66c5113fe41733ed68be2942a3487394317f3379856f482
2a611735e50528a60e7ade8ec8c71670fec6661e2c59a09ed36386
513221688b35dc47e3c3111ee8c67ff49579089d661caa29db1ef1
0eb6eace575bf3dc9806e7c4016bd50f3c0e2a6481ee6d
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4531323824
msg_prime = 613531325f616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
Faz-Hernandez, et al. Expires 17 December 2022 [Page 165]
Internet-Draft hash-to-curve June 2022
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
61616161610080515555582d5630312d435330322d776974682d65
7870616e6465722d5348414b4531323824
uniform_bytes = 9d763a5ce58f65c91531b4100c7266d479a5d9777ba76169
3d052acd37d149e7ac91c796a10b919cd74a591a1e38719fb91b72
03e2af31eac3bff7ead2c195af7d88b8bc0a8adf3d1e90ab9bed6d
dc2b7f655dd86c730bdeaea884e73741097142c92f0e3fc1811b69
9ba593c7fbd81da288a29d423df831652e3a01a9374999
K.5. expand_message_xof(SHAKE128) (long DST)
name = expand_message_xof
DST = QUUX-V01-CS02-with-expander-SHAKE128-long-DST-11111111
111111111111111111111111111111111111111111111111111111
111111111111111111111111111111111111111111111111111111
111111111111111111111111111111111111111111111111111111
1111111111111111111111111111111111111111
hash = SHAKE128
k = 128
msg =
len_in_bytes = 0x20
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 0020acb9736c0867fdfbd6385519b90fc8c034b5af04a9589732
12950132d035792f20
uniform_bytes = 827c6216330a122352312bccc0c8d6e7a146c5257a776dbd
9ad9d75cd880fc53
msg = abc
len_in_bytes = 0x20
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 6162630020acb9736c0867fdfbd6385519b90fc8c034b5af04a9
58973212950132d035792f20
Faz-Hernandez, et al. Expires 17 December 2022 [Page 166]
Internet-Draft hash-to-curve June 2022
uniform_bytes = 690c8d82c7213b4282c6cb41c00e31ea1d3e2005f93ad19b
bf6da40f15790c5c
msg = abcdef0123456789
len_in_bytes = 0x20
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 616263646566303132333435363738390020acb9736c0867fdfb
d6385519b90fc8c034b5af04a958973212950132d035792f20
uniform_bytes = 979e3a15064afbbcf99f62cc09fa9c85028afcf3f825eb07
11894dcfc2f57057
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x20
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 713132385f717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717100
20acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
uniform_bytes = c5a9220962d9edc212c063f4f65b609755a1ed96e62f9db5
d1fd6adb5a8dc52b
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x20
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 613531325f616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
Faz-Hernandez, et al. Expires 17 December 2022 [Page 167]
Internet-Draft hash-to-curve June 2022
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
61616161610020acb9736c0867fdfbd6385519b90fc8c034b5af04
a958973212950132d035792f20
uniform_bytes = f7b96a5901af5d78ce1d071d9c383cac66a1dfadb508300e
c6aeaea0d62d5d62
msg =
len_in_bytes = 0x80
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 0080acb9736c0867fdfbd6385519b90fc8c034b5af04a9589732
12950132d035792f20
uniform_bytes = 3890dbab00a2830be398524b71c2713bbef5f4884ac2e6f0
70b092effdb19208c7df943dc5dcbaee3094a78c267ef276632ee2
c8ea0c05363c94b6348500fae4208345dd3475fe0c834c2beac7fa
7bc181692fb728c0a53d809fc8111495222ce0f38468b11becb15b
32060218e285c57a60162c2c8bb5b6bded13973cd41819
msg = abc
len_in_bytes = 0x80
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 6162630080acb9736c0867fdfbd6385519b90fc8c034b5af04a9
58973212950132d035792f20
uniform_bytes = 41b7ffa7a301b5c1441495ebb9774e2a53dbbf4e54b9a1af
6a20fd41eafd69ef7b9418599c5545b1ee422f363642b01d4a5344
9313f68da3e49dddb9cd25b97465170537d45dcbdf92391b5bdff3
44db4bd06311a05bca7dcd360b6caec849c299133e5c9194f4e15e
3e23cfaab4003fab776f6ac0bfae9144c6e2e1c62e7d57
msg = abcdef0123456789
len_in_bytes = 0x80
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 616263646566303132333435363738390080acb9736c0867fdfb
d6385519b90fc8c034b5af04a958973212950132d035792f20
uniform_bytes = 55317e4a21318472cd2290c3082957e1242241d9e0d04f47
Faz-Hernandez, et al. Expires 17 December 2022 [Page 168]
Internet-Draft hash-to-curve June 2022
026f03401643131401071f01aa03038b2783e795bdfa8a3541c194
ad5de7cb9c225133e24af6c86e748deb52e560569bd54ef4dac034
65111a3a44b0ea490fb36777ff8ea9f1a8a3e8e0de3cf0880b4b2f
8dd37d3a85a8b82375aee4fa0e909f9763319b55778e71
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x80
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 713132385f717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717100
80acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
uniform_bytes = 19fdd2639f082e31c77717ac9bb032a22ff0958382b2dbb3
9020cdc78f0da43305414806abf9a561cb2d0067eb2f7bc544482f
75623438ed4b4e39dd9e6e2909dd858bd8f1d57cd0fce2d3150d90
aa67b4498bdf2df98c0100dd1a173436ba5d0df6be1defb0b2ce55
ccd2f4fc05eb7cb2c019c35d5398b85adc676da4238bc7
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x80
DST_prime = acb9736c0867fdfbd6385519b90fc8c034b5af04a95897321295
0132d035792f20
msg_prime = 613531325f616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
Faz-Hernandez, et al. Expires 17 December 2022 [Page 169]
Internet-Draft hash-to-curve June 2022
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
61616161610080acb9736c0867fdfbd6385519b90fc8c034b5af04
a958973212950132d035792f20
uniform_bytes = 945373f0b3431a103333ba6a0a34f1efab2702efde41754c
4cb1d5216d5b0a92a67458d968562bde7fa6310a83f53dda138368
0a276a283438d58ceebfa7ab7ba72499d4a3eddc860595f63c93b1
c5e823ea41fc490d938398a26db28f61857698553e93f0574eb8c5
017bfed6249491f9976aaa8d23d9485339cc85ca329308
K.6. expand_message_xof(SHAKE256)
name = expand_message_xof
DST = QUUX-V01-CS02-with-expander-SHAKE256
hash = SHAKE256
k = 256
msg =
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 0020515555582d5630312d435330322d776974682d657870616e
6465722d5348414b4532353624
uniform_bytes = 2ffc05c48ed32b95d72e807f6eab9f7530dd1c2f013914c8
fed38c5ccc15ad76
msg = abc
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 6162630020515555582d5630312d435330322d776974682d6578
70616e6465722d5348414b4532353624
uniform_bytes = b39e493867e2767216792abce1f2676c197c0692aed06156
0ead251821808e07
msg = abcdef0123456789
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 616263646566303132333435363738390020515555582d563031
2d435330322d776974682d657870616e6465722d5348414b453235
3624
Faz-Hernandez, et al. Expires 17 December 2022 [Page 170]
Internet-Draft hash-to-curve June 2022
uniform_bytes = 245389cf44a13f0e70af8665fe5337ec2dcd138890bb7901
c4ad9cfceb054b65
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 713132385f717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717100
20515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
uniform_bytes = 719b3911821e6428a5ed9b8e600f2866bcf23c8f0515e52d
6c6c019a03f16f0e
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x20
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 613531325f616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
Faz-Hernandez, et al. Expires 17 December 2022 [Page 171]
Internet-Draft hash-to-curve June 2022
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
61616161610020515555582d5630312d435330322d776974682d65
7870616e6465722d5348414b4532353624
uniform_bytes = 9181ead5220b1963f1b5951f35547a5ea86a820562287d6c
a4723633d17ccbbc
msg =
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 0080515555582d5630312d435330322d776974682d657870616e
6465722d5348414b4532353624
uniform_bytes = 7a1361d2d7d82d79e035b8880c5a3c86c5afa719478c007d
96e6c88737a3f631dd74a2c88df79a4cb5e5d9f7504957c70d669e
c6bfedc31e01e2bacc4ff3fdf9b6a00b17cc18d9d72ace7d6b81c2
e481b4f73f34f9a7505dccbe8f5485f3d20c5409b0310093d5d649
2dea4e18aa6979c23c8ea5de01582e9689612afbb353df
msg = abc
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 6162630080515555582d5630312d435330322d776974682d6578
70616e6465722d5348414b4532353624
uniform_bytes = a54303e6b172909783353ab05ef08dd435a558c3197db0c1
32134649708e0b9b4e34fb99b92a9e9e28fc1f1d8860d85897a8e0
21e6382f3eea10577f968ff6df6c45fe624ce65ca25932f679a42a
404bc3681efe03fcd45ef73bb3a8f79ba784f80f55ea8a3c367408
f30381299617f50c8cf8fbb21d0f1e1d70b0131a7b6fbe
msg = abcdef0123456789
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 616263646566303132333435363738390080515555582d563031
2d435330322d776974682d657870616e6465722d5348414b453235
3624
uniform_bytes = e42e4d9538a189316e3154b821c1bafb390f78b2f010ea40
4e6ac063deb8c0852fcd412e098e231e43427bd2be1330bb47b403
9ad57b30ae1fc94e34993b162ff4d695e42d59d9777ea18d3848d9
d336c25d2acb93adcad009bcfb9cde12286df267ada283063de0bb
1505565b2eb6c90e31c48798ecdc71a71756a9110ff373
msg = q128_qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
qqqqqqqqqqqqqqqqqqqqqqqqq
Faz-Hernandez, et al. Expires 17 December 2022 [Page 172]
Internet-Draft hash-to-curve June 2022
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 713132385f717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717171
717171717171717171717171717171717171717171717171717100
80515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
uniform_bytes = 4ac054dda0a38a65d0ecf7afd3c2812300027c8789655e47
aecf1ecc1a2426b17444c7482c99e5907afd9c25b991990490bb9c
686f43e79b4471a23a703d4b02f23c669737a886a7ec28bddb92c3
a98de63ebf878aa363a501a60055c048bea11840c4717beae7eee2
8c3cfa42857b3d130188571943a7bd747de831bd6444e0
msg = a512_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
len_in_bytes = 0x80
DST_prime = 515555582d5630312d435330322d776974682d657870616e6465
722d5348414b4532353624
msg_prime = 613531325f616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
616161616161616161616161616161616161616161616161616161
Faz-Hernandez, et al. Expires 17 December 2022 [Page 173]
Internet-Draft hash-to-curve June 2022
61616161610080515555582d5630312d435330322d776974682d65
7870616e6465722d5348414b4532353624
uniform_bytes = 09afc76d51c2cccbc129c2315df66c2be7295a231203b8ab
2dd7f95c2772c68e500bc72e20c602abc9964663b7a03a389be128
c56971ce81001a0b875e7fd17822db9d69792ddf6a23a151bf4700
79c518279aef3e75611f8f828994a9988f4a8a256ddb8bae161e65
8d5a2a09bcfe839c6396dc06ee5c8ff3c22d3b1f9deb7e
Authors' Addresses
Armando Faz-Hernandez
Cloudflare, Inc.
101 Townsend St
San Francisco,
United States of America
Email: armfazh@cloudflare.com
Sam Scott
Cornell Tech
2 West Loop Rd
New York, New York 10044,
United States of America
Email: sam.scott@cornell.edu
Nick Sullivan
Cloudflare, Inc.
101 Townsend St
San Francisco,
United States of America
Email: nick@cloudflare.com
Riad S. Wahby
Stanford University
Email: rsw@cs.stanford.edu
Christopher A. Wood
Cloudflare, Inc.
101 Townsend St
San Francisco,
United States of America
Email: caw@heapingbits.net
Faz-Hernandez, et al. Expires 17 December 2022 [Page 174]