using System;

using NUnit.Framework;

using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Security;
using Org.BouncyCastle.Utilities;
using Org.BouncyCastle.Utilities.Encoders;

namespace Org.BouncyCastle.Math.EC.Rfc8032.Tests
{
    [TestFixture]
    public class Ed448Test
    {
        private static readonly SecureRandom Random = new SecureRandom();

        private static readonly byte[] Neutral = Hex.DecodeStrict("010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000");

        [SetUp]
        public void SetUp()
        {
            Ed448.Precompute();
        }

        [Test]
        public void TestEd448Consistency()
        {
            byte[] sk = new byte[Ed448.SecretKeySize];
            byte[] pk = new byte[Ed448.PublicKeySize];
            byte[] ctx = new byte[Random.NextInt() & 7];
            byte[] m = new byte[255];
            byte[] sig1 = new byte[Ed448.SignatureSize];
            byte[] sig2 = new byte[Ed448.SignatureSize];

            Random.NextBytes(ctx);
            Random.NextBytes(m);

            for (int i = 0; i < 10; ++i)
            {
                Random.NextBytes(sk);
                Ed448.GeneratePublicKey(sk, 0, pk, 0);

                int mLen = Random.NextInt() & 255;

                Ed448.Sign(sk, 0, ctx, m, 0, mLen, sig1, 0);
                Ed448.Sign(sk, 0, pk, 0, ctx, m, 0, mLen, sig2, 0);

                Assert.IsTrue(Arrays.AreEqual(sig1, sig2), "Ed448 consistent signatures #" + i);

                bool shouldVerify = Ed448.Verify(sig1, 0, pk, 0, ctx, m, 0, mLen);

                Assert.IsTrue(shouldVerify, "Ed448 consistent sign/verify #" + i);

                sig1[Ed448.PublicKeySize - 1] ^= 0x80;
                bool shouldNotVerify = Ed448.Verify(sig1, 0, pk, 0, ctx, m, 0, mLen);

                Assert.IsFalse(shouldNotVerify, "Ed448 consistent verification failure #" + i);
            }
        }

        [Test]
        public void TestEd448phConsistency()
        {
            byte[] sk = new byte[Ed448.SecretKeySize];
            byte[] pk = new byte[Ed448.PublicKeySize];
            byte[] ctx = new byte[Random.NextInt() & 7];
            byte[] m = new byte[255];
            byte[] ph = new byte[Ed448.PrehashSize];
            byte[] sig1 = new byte[Ed448.SignatureSize];
            byte[] sig2 = new byte[Ed448.SignatureSize];

            Random.NextBytes(ctx);
            Random.NextBytes(m);

            for (int i = 0; i < 10; ++i)
            {
                Random.NextBytes(sk);
                Ed448.GeneratePublicKey(sk, 0, pk, 0);

                int mLen = Random.NextInt() & 255;

                IXof prehash = Ed448.CreatePrehash();
                prehash.BlockUpdate(m, 0, mLen);
                prehash.DoFinal(ph, 0, ph.Length);

                Ed448.SignPrehash(sk, 0, ctx, ph, 0, sig1, 0);
                Ed448.SignPrehash(sk, 0, pk, 0, ctx, ph, 0, sig2, 0);

                Assert.IsTrue(Arrays.AreEqual(sig1, sig2), "Ed448ph consistent signatures #" + i);

                bool shouldVerify = Ed448.VerifyPrehash(sig1, 0, pk, 0, ctx, ph, 0);

                Assert.IsTrue(shouldVerify, "Ed448ph consistent sign/verify #" + i);

                sig1[Ed448.PublicKeySize - 1] ^= 0x80;
                bool shouldNotVerify = Ed448.VerifyPrehash(sig1, 0, pk, 0, ctx, ph, 0);

                Assert.IsFalse(shouldNotVerify, "Ed448ph consistent verification failure #" + i);
            }
        }

        [Test]
        public void TestEd448Vector1()
        {
            CheckEd448Vector(
                ( "6c82a562cb808d10d632be89c8513ebf"
                + "6c929f34ddfa8c9f63c9960ef6e348a3"
                + "528c8a3fcc2f044e39a3fc5b94492f8f"
                + "032e7549a20098f95b"),
                ( "5fd7449b59b461fd2ce787ec616ad46a"
                + "1da1342485a70e1f8a0ea75d80e96778"
                + "edf124769b46c7061bd6783df1e50f6c"
                + "d1fa1abeafe8256180"),
                "",
                "",
                ( "533a37f6bbe457251f023c0d88f976ae"
                + "2dfb504a843e34d2074fd823d41a591f"
                + "2b233f034f628281f2fd7a22ddd47d78"
                + "28c59bd0a21bfd3980ff0d2028d4b18a"
                + "9df63e006c5d1c2d345b925d8dc00b41"
                + "04852db99ac5c7cdda8530a113a0f4db"
                + "b61149f05a7363268c71d95808ff2e65"
                + "2600"),
                "Ed448 Vector #1");
        }

        [Test]
        public void TestEd448Vector2()
        {
            CheckEd448Vector(
                ( "c4eab05d357007c632f3dbb48489924d"
                + "552b08fe0c353a0d4a1f00acda2c463a"
                + "fbea67c5e8d2877c5e3bc397a659949e"
                + "f8021e954e0a12274e"),
                ( "43ba28f430cdff456ae531545f7ecd0a"
                + "c834a55d9358c0372bfa0c6c6798c086"
                + "6aea01eb00742802b8438ea4cb82169c"
                + "235160627b4c3a9480"),
                "03",
                "",
                ( "26b8f91727bd62897af15e41eb43c377"
                + "efb9c610d48f2335cb0bd0087810f435"
                + "2541b143c4b981b7e18f62de8ccdf633"
                + "fc1bf037ab7cd779805e0dbcc0aae1cb"
                + "cee1afb2e027df36bc04dcecbf154336"
                + "c19f0af7e0a6472905e799f1953d2a0f"
                + "f3348ab21aa4adafd1d234441cf807c0"
                + "3a00"),
                "Ed448 Vector #2");
        }

        [Test]
        public void TestEd448Vector3()
        {
            CheckEd448Vector(
                ( "c4eab05d357007c632f3dbb48489924d"
                + "552b08fe0c353a0d4a1f00acda2c463a"
                + "fbea67c5e8d2877c5e3bc397a659949e"
                + "f8021e954e0a12274e"),
                ( "43ba28f430cdff456ae531545f7ecd0a"
                + "c834a55d9358c0372bfa0c6c6798c086"
                + "6aea01eb00742802b8438ea4cb82169c"
                + "235160627b4c3a9480"),
                "03",
                "666f6f",
                ( "d4f8f6131770dd46f40867d6fd5d5055"
                + "de43541f8c5e35abbcd001b32a89f7d2"
                + "151f7647f11d8ca2ae279fb842d60721"
                + "7fce6e042f6815ea000c85741de5c8da"
                + "1144a6a1aba7f96de42505d7a7298524"
                + "fda538fccbbb754f578c1cad10d54d0d"
                + "5428407e85dcbc98a49155c13764e66c"
                + "3c00"),
                "Ed448 Vector #3");
        }

        [Test]
        public void TestEd448Vector4()
        {
            CheckEd448Vector(
                ( "cd23d24f714274e744343237b93290f5"
                + "11f6425f98e64459ff203e8985083ffd"
                + "f60500553abc0e05cd02184bdb89c4cc"
                + "d67e187951267eb328"),
                ( "dcea9e78f35a1bf3499a831b10b86c90"
                + "aac01cd84b67a0109b55a36e9328b1e3"
                + "65fce161d71ce7131a543ea4cb5f7e9f"
                + "1d8b00696447001400"),
                "0c3e544074ec63b0265e0c",
                "",
                ( "1f0a8888ce25e8d458a21130879b840a"
                + "9089d999aaba039eaf3e3afa090a09d3"
                + "89dba82c4ff2ae8ac5cdfb7c55e94d5d"
                + "961a29fe0109941e00b8dbdeea6d3b05"
                + "1068df7254c0cdc129cbe62db2dc957d"
                + "bb47b51fd3f213fb8698f064774250a5"
                + "028961c9bf8ffd973fe5d5c206492b14"
                + "0e00"),
                "Ed448 Vector #4");
        }

        [Test]
        public void TestEd448Vector5()
        {
            CheckEd448Vector(
                ( "258cdd4ada32ed9c9ff54e63756ae582"
                + "fb8fab2ac721f2c8e676a72768513d93"
                + "9f63dddb55609133f29adf86ec9929dc"
                + "cb52c1c5fd2ff7e21b"),
                ( "3ba16da0c6f2cc1f30187740756f5e79"
                + "8d6bc5fc015d7c63cc9510ee3fd44adc"
                + "24d8e968b6e46e6f94d19b945361726b"
                + "d75e149ef09817f580"),
                "64a65f3cdedcdd66811e2915",
                "",
                ( "7eeeab7c4e50fb799b418ee5e3197ff6"
                + "bf15d43a14c34389b59dd1a7b1b85b4a"
                + "e90438aca634bea45e3a2695f1270f07"
                + "fdcdf7c62b8efeaf00b45c2c96ba457e"
                + "b1a8bf075a3db28e5c24f6b923ed4ad7"
                + "47c3c9e03c7079efb87cb110d3a99861"
                + "e72003cbae6d6b8b827e4e6c143064ff"
                + "3c00"),
                "Ed448 Vector #5");
        }

        [Test]
        public void TestEd448Vector6()
        {
            CheckEd448Vector(
                ( "7ef4e84544236752fbb56b8f31a23a10"
                + "e42814f5f55ca037cdcc11c64c9a3b29"
                + "49c1bb60700314611732a6c2fea98eeb"
                + "c0266a11a93970100e"),
                ( "b3da079b0aa493a5772029f0467baebe"
                + "e5a8112d9d3a22532361da294f7bb381"
                + "5c5dc59e176b4d9f381ca0938e13c6c0"
                + "7b174be65dfa578e80"),
                "64a65f3cdedcdd66811e2915e7",
                "",
                ( "6a12066f55331b6c22acd5d5bfc5d712"
                + "28fbda80ae8dec26bdd306743c5027cb"
                + "4890810c162c027468675ecf645a8317"
                + "6c0d7323a2ccde2d80efe5a1268e8aca"
                + "1d6fbc194d3f77c44986eb4ab4177919"
                + "ad8bec33eb47bbb5fc6e28196fd1caf5"
                + "6b4e7e0ba5519234d047155ac727a105"
                + "3100"),
                "Ed448 Vector #6");
        }

        [Test]
        public void TestEd448Vector64()
        {
            string m =
                "bd0f6a3747cd561bdddf4640a332461a" +
                "4a30a12a434cd0bf40d766d9c6d458e5" +
                "512204a30c17d1f50b5079631f64eb31" +
                "12182da3005835461113718d1a5ef944";

            CheckEd448Vector(
                ( "d65df341ad13e008567688baedda8e9d"
                + "cdc17dc024974ea5b4227b6530e339bf"
                + "f21f99e68ca6968f3cca6dfe0fb9f4fa"
                + "b4fa135d5542ea3f01"),
                ( "df9705f58edbab802c7f8363cfe5560a"
                + "b1c6132c20a9f1dd163483a26f8ac53a"
                + "39d6808bf4a1dfbd261b099bb03b3fb5"
                + "0906cb28bd8a081f00"),
                m,
                "",
                ( "554bc2480860b49eab8532d2a533b7d5"
                + "78ef473eeb58c98bb2d0e1ce488a98b1"
                + "8dfde9b9b90775e67f47d4a1c3482058"
                + "efc9f40d2ca033a0801b63d45b3b722e"
                + "f552bad3b4ccb667da350192b61c508c"
                + "f7b6b5adadc2c8d9a446ef003fb05cba"
                + "5f30e88e36ec2703b349ca229c267083"
                + "3900"),
                "Ed448 Vector #64");
        }

        [Test]
        public void TestEd448Vector256()
        {
            string m =
                "15777532b0bdd0d1389f636c5f6b9ba7" +
                "34c90af572877e2d272dd078aa1e567c" +
                "fa80e12928bb542330e8409f31745041" +
                "07ecd5efac61ae7504dabe2a602ede89" +
                "e5cca6257a7c77e27a702b3ae39fc769" +
                "fc54f2395ae6a1178cab4738e543072f" +
                "c1c177fe71e92e25bf03e4ecb72f47b6" +
                "4d0465aaea4c7fad372536c8ba516a60" +
                "39c3c2a39f0e4d832be432dfa9a706a6" +
                "e5c7e19f397964ca4258002f7c0541b5" +
                "90316dbc5622b6b2a6fe7a4abffd9610" +
                "5eca76ea7b98816af0748c10df048ce0" +
                "12d901015a51f189f3888145c03650aa" +
                "23ce894c3bd889e030d565071c59f409" +
                "a9981b51878fd6fc110624dcbcde0bf7" +
                "a69ccce38fabdf86f3bef6044819de11";

            CheckEd448Vector(
                ( "2ec5fe3c17045abdb136a5e6a913e32a"
                + "b75ae68b53d2fc149b77e504132d3756"
                + "9b7e766ba74a19bd6162343a21c8590a"
                + "a9cebca9014c636df5"),
                ( "79756f014dcfe2079f5dd9e718be4171"
                + "e2ef2486a08f25186f6bff43a9936b9b"
                + "fe12402b08ae65798a3d81e22e9ec80e"
                + "7690862ef3d4ed3a00"),
                m,
                "",
                ( "c650ddbb0601c19ca11439e1640dd931"
                + "f43c518ea5bea70d3dcde5f4191fe53f"
                + "00cf966546b72bcc7d58be2b9badef28"
                + "743954e3a44a23f880e8d4f1cfce2d7a"
                + "61452d26da05896f0a50da66a239a8a1"
                + "88b6d825b3305ad77b73fbac0836ecc6"
                + "0987fd08527c1a8e80d5823e65cafe2a"
                + "3d00"),
                "Ed448 Vector #256");
        }

        [Test]
        public void TestEd448Vector1023()
        {
            string m =
                "6ddf802e1aae4986935f7f981ba3f035" +
                "1d6273c0a0c22c9c0e8339168e675412" +
                "a3debfaf435ed651558007db4384b650" +
                "fcc07e3b586a27a4f7a00ac8a6fec2cd" +
                "86ae4bf1570c41e6a40c931db27b2faa" +
                "15a8cedd52cff7362c4e6e23daec0fbc" +
                "3a79b6806e316efcc7b68119bf46bc76" +
                "a26067a53f296dafdbdc11c77f7777e9" +
                "72660cf4b6a9b369a6665f02e0cc9b6e" +
                "dfad136b4fabe723d2813db3136cfde9" +
                "b6d044322fee2947952e031b73ab5c60" +
                "3349b307bdc27bc6cb8b8bbd7bd32321" +
                "9b8033a581b59eadebb09b3c4f3d2277" +
                "d4f0343624acc817804728b25ab79717" +
                "2b4c5c21a22f9c7839d64300232eb66e" +
                "53f31c723fa37fe387c7d3e50bdf9813" +
                "a30e5bb12cf4cd930c40cfb4e1fc6225" +
                "92a49588794494d56d24ea4b40c89fc0" +
                "596cc9ebb961c8cb10adde976a5d602b" +
                "1c3f85b9b9a001ed3c6a4d3b1437f520" +
                "96cd1956d042a597d561a596ecd3d173" +
                "5a8d570ea0ec27225a2c4aaff26306d1" +
                "526c1af3ca6d9cf5a2c98f47e1c46db9" +
                "a33234cfd4d81f2c98538a09ebe76998" +
                "d0d8fd25997c7d255c6d66ece6fa56f1" +
                "1144950f027795e653008f4bd7ca2dee" +
                "85d8e90f3dc315130ce2a00375a318c7" +
                "c3d97be2c8ce5b6db41a6254ff264fa6" +
                "155baee3b0773c0f497c573f19bb4f42" +
                "40281f0b1f4f7be857a4e59d416c06b4" +
                "c50fa09e1810ddc6b1467baeac5a3668" +
                "d11b6ecaa901440016f389f80acc4db9" +
                "77025e7f5924388c7e340a732e554440" +
                "e76570f8dd71b7d640b3450d1fd5f041" +
                "0a18f9a3494f707c717b79b4bf75c984" +
                "00b096b21653b5d217cf3565c9597456" +
                "f70703497a078763829bc01bb1cbc8fa" +
                "04eadc9a6e3f6699587a9e75c94e5bab" +
                "0036e0b2e711392cff0047d0d6b05bd2" +
                "a588bc109718954259f1d86678a579a3" +
                "120f19cfb2963f177aeb70f2d4844826" +
                "262e51b80271272068ef5b3856fa8535" +
                "aa2a88b2d41f2a0e2fda7624c2850272" +
                "ac4a2f561f8f2f7a318bfd5caf969614" +
                "9e4ac824ad3460538fdc25421beec2cc" +
                "6818162d06bbed0c40a387192349db67" +
                "a118bada6cd5ab0140ee273204f628aa" +
                "d1c135f770279a651e24d8c14d75a605" +
                "9d76b96a6fd857def5e0b354b27ab937" +
                "a5815d16b5fae407ff18222c6d1ed263" +
                "be68c95f32d908bd895cd76207ae7264" +
                "87567f9a67dad79abec316f683b17f2d" +
                "02bf07e0ac8b5bc6162cf94697b3c27c" +
                "d1fea49b27f23ba2901871962506520c" +
                "392da8b6ad0d99f7013fbc06c2c17a56" +
                "9500c8a7696481c1cd33e9b14e40b82e" +
                "79a5f5db82571ba97bae3ad3e0479515" +
                "bb0e2b0f3bfcd1fd33034efc6245eddd" +
                "7ee2086ddae2600d8ca73e214e8c2b0b" +
                "db2b047c6a464a562ed77b73d2d841c4" +
                "b34973551257713b753632efba348169" +
                "abc90a68f42611a40126d7cb21b58695" +
                "568186f7e569d2ff0f9e745d0487dd2e" +
                "b997cafc5abf9dd102e62ff66cba87";

            CheckEd448Vector(
                ( "872d093780f5d3730df7c212664b37b8"
                + "a0f24f56810daa8382cd4fa3f77634ec"
                + "44dc54f1c2ed9bea86fafb7632d8be19"
                + "9ea165f5ad55dd9ce8"),
                ( "a81b2e8a70a5ac94ffdbcc9badfc3feb"
                + "0801f258578bb114ad44ece1ec0e799d"
                + "a08effb81c5d685c0c56f64eecaef8cd"
                + "f11cc38737838cf400"),
                m,
                "",
                ( "e301345a41a39a4d72fff8df69c98075"
                + "a0cc082b802fc9b2b6bc503f926b65bd"
                + "df7f4c8f1cb49f6396afc8a70abe6d8a"
                + "ef0db478d4c6b2970076c6a0484fe76d"
                + "76b3a97625d79f1ce240e7c576750d29"
                + "5528286f719b413de9ada3e8eb78ed57"
                + "3603ce30d8bb761785dc30dbc320869e"
                + "1a00"),
                "Ed448 Vector #1023");
        }

        [Test]
        public void TestEd448phVector1()
        {
            CheckEd448phVector(
                ("833fe62409237b9d62ec77587520911e"
                + "9a759cec1d19755b7da901b96dca3d42"
                + "ef7822e0d5104127dc05d6dbefde69e3"
                + "ab2cec7c867c6e2c49"),
                ("259b71c19f83ef77a7abd26524cbdb31"
                + "61b590a48f7d17de3ee0ba9c52beb743"
                + "c09428a131d6b1b57303d90d8132c276"
                + "d5ed3d5d01c0f53880"),
                "616263",
                "",
                ("822f6901f7480f3d5f562c592994d969"
                + "3602875614483256505600bbc281ae38"
                + "1f54d6bce2ea911574932f52a4e6cadd"
                + "78769375ec3ffd1b801a0d9b3f4030cd"
                + "433964b6457ea39476511214f97469b5"
                + "7dd32dbc560a9a94d00bff07620464a3"
                + "ad203df7dc7ce360c3cd3696d9d9fab9"
                + "0f00"),
                "Ed448ph Vector #1");
        }

        [Test]
        public void TestEd448phVector2()
        {
            CheckEd448phVector(
                ("833fe62409237b9d62ec77587520911e"
                + "9a759cec1d19755b7da901b96dca3d42"
                + "ef7822e0d5104127dc05d6dbefde69e3"
                + "ab2cec7c867c6e2c49"),
                ("259b71c19f83ef77a7abd26524cbdb31"
                + "61b590a48f7d17de3ee0ba9c52beb743"
                + "c09428a131d6b1b57303d90d8132c276"
                + "d5ed3d5d01c0f53880"),
                "616263",
                "666f6f",
                ("c32299d46ec8ff02b54540982814dce9"
                + "a05812f81962b649d528095916a2aa48"
                + "1065b1580423ef927ecf0af5888f90da"
                + "0f6a9a85ad5dc3f280d91224ba9911a3"
                + "653d00e484e2ce232521481c8658df30"
                + "4bb7745a73514cdb9bf3e15784ab7128"
                + "4f8d0704a608c54a6b62d97beb511d13"
                + "2100"),
                "Ed448ph Vector #2");
        }

        [Test]
        public void TestPublicKeyValidationFull()
        {
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Neutral, 0));

            byte[] sk = new byte[Ed448.SecretKeySize];
            byte[] pk = new byte[Ed448.PublicKeySize];

            for (int i = 0; i < 10; ++i)
            {
                Random.NextBytes(sk);
                Ed448.GeneratePublicKey(sk, 0, pk, 0);
                Assert.IsTrue(Ed448.ValidatePublicKeyFull(pk, 0));
            }

            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"), 0));

            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF80"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081"), 0));

            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("C784B7238BDDDB84C44FB80936FB103FCF39C1F74EE83163A57DB4AD3946FDC81BF0504D6EC1DBABABDB750997BCA465D5FCD3A45F8E183D00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("149578BCA53F7D199B472D6D367D22A35942BBCA2051F833122D4DC12FE758A16D672A54D5F8C390C44C2F8B32F21121DA69E9DE8FF9675780"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("9E9F6E7A8576E8D7C286C493FE76559419012B164589DF764E735CFFDE21BFCAF4D7553F9B37178A2F20C77473E4195E3E1E327F3174C14500"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("1979BDCBE0CEC16602B87257114059029605C720D5AFD2A90EF4B06655B34B561EBA6C1034452C3D8D1DA41C57340B0C9A95297E712CA75C00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("E2B8507036D478F262A7009734CDD383734002CE32397FEA22BFEDEE0CEBB0064D176FB45A05AF19F8B18B07EE20D6E2320D075E95DAF15200"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("3C2FFFFCF504A0EBD8051B3962546C39410464A9C44DC3E82FA9437F2450F0F93C892F28E2ABDF7EA84B051E5536CCA6B44762D0941C5D0700"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("997FE46037CF6207B27B6D0BB9D7D97A038D5BFCF898D07EE6ED07953F0889CC4745D1E018EB7A894EFE88871004452E99C6A344362DA6E080"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("F67C319B8EDCE2E85D450BE46E1671183EB499CE8ABE56BCF666C13A99C5ECBC89FCE9B3B578E2A5D061D3590506BC27614DB6B0C682971B80"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("A7776DDD0BD52EC4D017478E38700395F9F4C45A3BEFFE4EA9994EA1A9E92D8D1CC56539BF57FF88401BBDC764904BC0E3635AEE1721FD3380"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("9F914CD9920D2B75ADBF34F758DA39BB35D1C81B5C480571A7A8B2CAAD7BA0F32D13AF9C69B0BECE5775B324DC49C063354EA2F6F231A23800"), 0));

            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("2E0ACAB5953BC2F22C557C75E6B86225BE9CB3E82E78FC886EB57B628229C0C9548CD82630483C03D0E5DC02B2C3B1BD0E5DEE0B8DE4A88000"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("0F89D2E413A36A33031329169EFAAE88D8F84E90E741C3DFBB01C32544D995FF6EB354B6C5C29E62ACC124E806540C46CB0C0ED71931B39D00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("AB553809FE1B027328EC7DBE71929C1F3A435B74CC0C06BEA831BC5E287EF2ACF4E831EC8E0C964A80BF85B966D32CADAE8E17E12EAFD3AF80"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("3043631378826937A822BDB8878DC33B9174BEC3530B2A8A4048F6B06B378DBC450E34ED623E47B1449E7636DAFB72F584605EF3BE01647F00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("8A03959C8BD20BA7B1DA92A4C5591BC846F4CD8BE07387B325E179BB12245E17BDDE1AC82E9F7CAB2A79DDDBE68F8BA8DB7F03F91156C24A00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("46299C8D31BAFEBBCF1719A851123CC4722E5BE9D93D8F98C215D34082AF658C570B4CFD44079993CBC19B0EAD3BFD0DFB2B67EBABB119B780"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("81A58C03708DD60BD68237622EC9934E8DE27FE7997F74A501B06C60C8F9D68856E7D12B88F1507E29EB0C30531B5AA353F154F2551AF5E580"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("DC5028F5AA0B9217B40C7FE00E10503C37B6611BA87CDD70F01536E87AD659711BA1265E679F94EC8D5ED87476CE031D14B2C7E46268F11A80"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("910DDFE36AAB6DCB7D5B72E6F2DF0769AD86665262232C487F722FEA85429DE247D1EBBC5C579A01D04672894E2B0F3FBDF22B43EA191DF700"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyFull(Hex.DecodeStrict("43482D0750D4830AAAF578346288050EAE8ADF96DF66F243E73252114E432B448730517FD8726871508CAD7ECECFDB33120CA5558788B6C800"), 0));
        }

        [Test]
        public void TestPublicKeyValidationPartial()
        {
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Neutral, 0));

            byte[] sk = new byte[Ed448.SecretKeySize];
            byte[] pk = new byte[Ed448.PublicKeySize];

            for (int i = 0; i < 10; ++i)
            {
                Random.NextBytes(sk);
                Ed448.GeneratePublicKey(sk, 0, pk, 0);
                Assert.IsTrue(Ed448.ValidatePublicKeyPartial(pk, 0));
            }

            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"), 0));

            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF80"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081"), 0));

            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("C784B7238BDDDB84C44FB80936FB103FCF39C1F74EE83163A57DB4AD3946FDC81BF0504D6EC1DBABABDB750997BCA465D5FCD3A45F8E183D00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("149578BCA53F7D199B472D6D367D22A35942BBCA2051F833122D4DC12FE758A16D672A54D5F8C390C44C2F8B32F21121DA69E9DE8FF9675780"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("9E9F6E7A8576E8D7C286C493FE76559419012B164589DF764E735CFFDE21BFCAF4D7553F9B37178A2F20C77473E4195E3E1E327F3174C14500"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("1979BDCBE0CEC16602B87257114059029605C720D5AFD2A90EF4B06655B34B561EBA6C1034452C3D8D1DA41C57340B0C9A95297E712CA75C00"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("E2B8507036D478F262A7009734CDD383734002CE32397FEA22BFEDEE0CEBB0064D176FB45A05AF19F8B18B07EE20D6E2320D075E95DAF15200"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("3C2FFFFCF504A0EBD8051B3962546C39410464A9C44DC3E82FA9437F2450F0F93C892F28E2ABDF7EA84B051E5536CCA6B44762D0941C5D0700"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("997FE46037CF6207B27B6D0BB9D7D97A038D5BFCF898D07EE6ED07953F0889CC4745D1E018EB7A894EFE88871004452E99C6A344362DA6E080"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("F67C319B8EDCE2E85D450BE46E1671183EB499CE8ABE56BCF666C13A99C5ECBC89FCE9B3B578E2A5D061D3590506BC27614DB6B0C682971B80"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("A7776DDD0BD52EC4D017478E38700395F9F4C45A3BEFFE4EA9994EA1A9E92D8D1CC56539BF57FF88401BBDC764904BC0E3635AEE1721FD3380"), 0));
            Assert.IsFalse(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("9F914CD9920D2B75ADBF34F758DA39BB35D1C81B5C480571A7A8B2CAAD7BA0F32D13AF9C69B0BECE5775B324DC49C063354EA2F6F231A23800"), 0));

            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("2E0ACAB5953BC2F22C557C75E6B86225BE9CB3E82E78FC886EB57B628229C0C9548CD82630483C03D0E5DC02B2C3B1BD0E5DEE0B8DE4A88000"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("0F89D2E413A36A33031329169EFAAE88D8F84E90E741C3DFBB01C32544D995FF6EB354B6C5C29E62ACC124E806540C46CB0C0ED71931B39D00"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("AB553809FE1B027328EC7DBE71929C1F3A435B74CC0C06BEA831BC5E287EF2ACF4E831EC8E0C964A80BF85B966D32CADAE8E17E12EAFD3AF80"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("3043631378826937A822BDB8878DC33B9174BEC3530B2A8A4048F6B06B378DBC450E34ED623E47B1449E7636DAFB72F584605EF3BE01647F00"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("8A03959C8BD20BA7B1DA92A4C5591BC846F4CD8BE07387B325E179BB12245E17BDDE1AC82E9F7CAB2A79DDDBE68F8BA8DB7F03F91156C24A00"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("46299C8D31BAFEBBCF1719A851123CC4722E5BE9D93D8F98C215D34082AF658C570B4CFD44079993CBC19B0EAD3BFD0DFB2B67EBABB119B780"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("81A58C03708DD60BD68237622EC9934E8DE27FE7997F74A501B06C60C8F9D68856E7D12B88F1507E29EB0C30531B5AA353F154F2551AF5E580"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("DC5028F5AA0B9217B40C7FE00E10503C37B6611BA87CDD70F01536E87AD659711BA1265E679F94EC8D5ED87476CE031D14B2C7E46268F11A80"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("910DDFE36AAB6DCB7D5B72E6F2DF0769AD86665262232C487F722FEA85429DE247D1EBBC5C579A01D04672894E2B0F3FBDF22B43EA191DF700"), 0));
            Assert.IsTrue(Ed448.ValidatePublicKeyPartial(Hex.DecodeStrict("43482D0750D4830AAAF578346288050EAE8ADF96DF66F243E73252114E432B448730517FD8726871508CAD7ECECFDB33120CA5558788B6C800"), 0));
        }

        private static void CheckEd448Vector(string sSK, string sPK, string sM, string sCTX, string sSig, string text)
        {
            byte[] sk = Hex.Decode(sSK);
            byte[] pk = Hex.Decode(sPK);

            byte[] pkGen = new byte[Ed448.PublicKeySize];
            Ed448.GeneratePublicKey(sk, 0, pkGen, 0);
            Assert.IsTrue(Arrays.AreEqual(pk, pkGen), text);

            byte[] m = Hex.Decode(sM);
            byte[] ctx = Hex.Decode(sCTX);
            byte[] sig = Hex.Decode(sSig);
            byte[] sigGen = new byte[Ed448.SignatureSize];

            byte[] badsig = Arrays.Clone(sig);
            badsig[Ed448.SignatureSize - 1] ^= 0x80;

            Ed448.Sign(sk, 0, ctx, m, 0, m.Length, sigGen, 0);
            Assert.IsTrue(Arrays.AreEqual(sig, sigGen), text);

            Ed448.Sign(sk, 0, pk, 0, ctx, m, 0, m.Length, sigGen, 0);
            Assert.IsTrue(Arrays.AreEqual(sig, sigGen), text);

            bool shouldVerify = Ed448.Verify(sig, 0, pk, 0, ctx, m, 0, m.Length);
            Assert.IsTrue(shouldVerify, text);

            bool shouldNotVerify = Ed448.Verify(badsig, 0, pk, 0, ctx, m, 0, m.Length);
            Assert.IsFalse(shouldNotVerify, text);
        }

        private static void CheckEd448phVector(string sSK, string sPK, string sM, string sCTX, string sSig, string text)
        {
            byte[] sk = Hex.Decode(sSK);
            byte[] pk = Hex.Decode(sPK);

            byte[] pkGen = new byte[Ed448.PublicKeySize];
            Ed448.GeneratePublicKey(sk, 0, pkGen, 0);
            Assert.IsTrue(Arrays.AreEqual(pk, pkGen), text);

            byte[] m = Hex.Decode(sM);
            byte[] ctx = Hex.Decode(sCTX);
            byte[] sig = Hex.Decode(sSig);

            byte[] badsig = Arrays.Clone(sig);
            badsig[Ed448.SignatureSize - 1] ^= 0x80;

            byte[] sigGen = new byte[Ed448.SignatureSize];

            {
                IXof prehash = Ed448.CreatePrehash();
                prehash.BlockUpdate(m, 0, m.Length);

                byte[] ph = new byte[Ed448.PrehashSize];
                prehash.DoFinal(ph, 0, ph.Length);

                Ed448.SignPrehash(sk, 0, ctx, ph, 0, sigGen, 0);
                Assert.IsTrue(Arrays.AreEqual(sig, sigGen), text);

                Ed448.SignPrehash(sk, 0, pk, 0, ctx, ph, 0, sigGen, 0);
                Assert.IsTrue(Arrays.AreEqual(sig, sigGen), text);

                bool shouldVerify = Ed448.VerifyPrehash(sig, 0, pk, 0, ctx, ph, 0);
                Assert.IsTrue(shouldVerify, text);

                bool shouldNotVerify = Ed448.VerifyPrehash(badsig, 0, pk, 0, ctx, ph, 0);
                Assert.IsFalse(shouldNotVerify, text);
            }

            {
                IXof ph = Ed448.CreatePrehash();
                ph.BlockUpdate(m, 0, m.Length);

                Ed448.SignPrehash(sk, 0, ctx, ph, sigGen, 0);
                Assert.IsTrue(Arrays.AreEqual(sig, sigGen), text);
            }

            {
                IXof ph = Ed448.CreatePrehash();
                ph.BlockUpdate(m, 0, m.Length);

                Ed448.SignPrehash(sk, 0, pk, 0, ctx, ph, sigGen, 0);
                Assert.IsTrue(Arrays.AreEqual(sig, sigGen), text);
            }

            {
                IXof ph = Ed448.CreatePrehash();
                ph.BlockUpdate(m, 0, m.Length);

                bool shouldVerify = Ed448.VerifyPrehash(sig, 0, pk, 0, ctx, ph);
                Assert.IsTrue(shouldVerify, text);
            }

            {
                IXof ph = Ed448.CreatePrehash();
                ph.BlockUpdate(m, 0, m.Length);

                bool shouldNotVerify = Ed448.VerifyPrehash(badsig, 0, pk, 0, ctx, ph);
                Assert.IsFalse(shouldNotVerify, text);
            }
        }
    }
}
