- Make sure errors related to malformed csv credential file or bad path are thrown.

PiperOrigin-RevId: 269639332

To replicate:
find -name BUILD.bazel -exec sed -Ei 's/\s+# Apache 2.0$//' {} \;
find -name BUILD.bazel -exec sed -Ei 's/\s+# Apache 2.0 # keep$/  # keep/' {} \;

PiperOrigin-RevId: 257604221

PiperOrigin-RevId: 249747173

NOKEYCHECK=True
PiperOrigin-RevId: 244120137
GitOrigin-RevId: a3e69d36c4c98100bd2a08011c1c54afdb215dd7

NOKEYCHECK=True
PiperOrigin-RevId: 241739854
GitOrigin-RevId: d180a24e7fa9df2e93c4e8e9d86a2981e8dea6c9

NOKEYCHECK=True
PiperOrigin-RevId: 237356228
GitOrigin-RevId: 984d57fd725606039db54712e668cd5c184c16fc

NOKEYCHECK=True
PiperOrigin-RevId: 237348599
GitOrigin-RevId: 7f2e08b2b5871f02b139dd9b5ac55b3e0c30c62f

This prevents accidentally leaking unpublished test vectors.

PiperOrigin-RevId: 191730673
GitOrigin-RevId: 25ef0af66bb4b2e7de1e6f31195d30f251e911e6

1/ Catching unchecked exceptions to not crash the JVM.

Wycheproof found that some Java security providers would throw unchecked exceptions when processing attacker-controlled input. To prevent DoS attacks, we'd catch these exceptions in Tink.

2/ Do not report errors if the shared secret is correct.

Android M and N ignore the public key parameters, thus we'd stop reporting errors in tests that modify parameters if the shared secret is still correct.

3/ Skipping CVE-2017-10176 test because it's not a severe issue.

PiperOrigin-RevId: 191113399
GitOrigin-RevId: b069f3af3f515b30b5cc1e2af791b226fb0635c5

There are some format changes:
- The field notes in the header is now a dictionary.
- Test vectors have a new field flags, that should document the
  test vectors better. Additionally it can be used to change
  tests easier (e.g. a test can define if it cares about signature
  malleability or not).
- There are more special cases (e.g. implementations for brainpool curves
  can use the group isomorphisms defined in the standard).

Bug fixes:
- Some ECDH test vectors were missing a shared value.
- Some ECDH test vectors where the public key has modifications in unused
  parameters are now acceptable, as long as the change does not modify the
  shared secret.

PiperOrigin-RevId: 189929126
GitOrigin-RevId: b3e2b1caee4ba33c3dc4fcc223402527479e7140

Copying all Wycheproof test vectors to testdata/wycheproof and adding a few C++ transformation rules.

This is to prepare for cr/188575891.

PiperOrigin-RevId: 188892942
GitOrigin-RevId: 136568e214b16060e5e9750800533e50ed6eebe4

PiperOrigin-RevId: 188804612
GitOrigin-RevId: f74c008ce89de81d4aaa167b653e3043a6e19375

PiperOrigin-RevId: 188463467
GitOrigin-RevId: 0fd2ab773808de613c52e8143092ced7de7b5b26

PiperOrigin-RevId: 187930665
Change-Id: I140a9e3de957540cd0c6b40cc6a0c93dd0123575
GitOrigin-RevId: 39ca3a385405482e7c942728584e6c1c057aa9d4

This allows to use BUILD for Blaze.

Change-Id: I6fa84543b8ec927b0bdf5641f698b00d9c4de416
ORIGINAL_AUTHOR=Google Engineers <noreply@google.com>
GitOrigin-RevId: c049652c44d7e575d04169caf19d85b0d5371181

Bug: 66947041
Bug: 65864441

Change-Id: I367b1f6ee318b8b42ade5467a9ce649f25731efb
ORIGINAL_AUTHOR=Daniel Bleichenbacher <bleichen@google.com>
GitOrigin-RevId: 19b921d2d165971059e087294ffae893156e7657

Based on Daniel's idea.

Using the notations at https://tools.ietf.org/html/rfc7748#section-5,
we want to verify whether u, x2/z2, x3/z3 are collinear (see comments in
the code for details).

This CL also bans public key in the list
https://cr.yp.to/ecdh.html#validate

Bug: 68164999

Change-Id: I03b719a9e8369096a89c5fba7e27f724f2a94188
ORIGINAL_AUTHOR=Quan Nguyen <quannguyen@google.com>
GitOrigin-RevId: f4f66fb7abd0ff095211a323fc43a4631660ad89

Based on cl/172745913.

Change-Id: I651986b6e4f0cf826a30df80126af16090bc3173
ORIGINAL_AUTHOR=Quan Nguyen <quannguyen@google.com>
GitOrigin-RevId: e8e09845aa30680fc12b21686e5aa5be029c832b

Wycheproof tests will shield us from making mistakes for the
follow-up refactoring/rewritting CLs.

Change-Id: I585038f2218497d1038ce4857c7de31dc2b6c606
ORIGINAL_AUTHOR=Quan Nguyen <quannguyen@google.com>
GitOrigin-RevId: 6177280951ea114ba7da35b185b655e27dd604f3

Move checkAlgAndVersion method to WycheproofTestUtil.

Change-Id: I25b81f9bf421a4c5c34604cdd3335c6714f4e2ce
ORIGINAL_AUTHOR=Quan Nguyen <quannguyen@google.com>
GitOrigin-RevId: 3e3c339ad6a5059da0cead658bc3783f67fb4def

- Moving wycheproof test vectors to testdata/wycheproof so that
they can be excluded in sync.

- StreamingAeadConfig does not use AeadConfig, removing the
dependency.

- Adding ToString() in a few places.

- Removing unused dependencies in AesGcmBoringSsl.

- Removing TestUtil.getBytes() and renaming TestUtil.getJsonObject
to readJson.

Change-Id: I5216275fa7050524af98c11ce6a8007cbab37212
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 4fdc9b5759d0f37b0ce054fe56a57bb27c3ba594

The bug is that isNonZeroVarTime assumes the input is reduced while it
isn't. Furthermore, the reduced number representation is not unique,
e.g., the following array is essentially zero
[67108845,33554431,67108863,33554431,67108863,33554431,67108863,33554431,67108863,33554431]
We have to call Field25519.contract() before checking for zero.

Change-Id: Ib4f80a686de3f72e44dc602664c9f12616663db8
ORIGINAL_AUTHOR=Quan Nguyen <quannguyen@google.com>
GitOrigin-RevId: c735f0857fad861647a53eb842838cf0e499636d

AES-GCM and ECDSA tests now obtain the test vectors directly from Wycheproof's repository.

Change-Id: I614ba141c342a34286b7f2f11af87e25b0f1dc81
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 176deedb86d4d4ebd10aed07aa9ad1042e467fba

To test ECDSA, also add test vectors from Wycheproof.

Change-Id: I08157184e727acecf854b2d4dda766ae8e613217
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: adfb86b2ebb474386f3aa51906a3cfdf632977c3

To test AES-GCM, also add AES-GCM test vectors from Wycheproof.

Change-Id: Ib367b2dff4200ca27068d78b1cbe026381ef4b32
ORIGINAL_AUTHOR=Thanh Bui <thanhb@google.com>
GitOrigin-RevId: 83e830ecaa3cd321161b2240897c940876c484c9

Change-Id: I7822198a4257a81db34231d1c4d416f87fb9b65a
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: e38021ac0481d7c14f68778d60468e66767a91d6

ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 1a4706c0eafb9a683aab304a5f51c709c1325fd3

Change-Id: I1b59df255d25a25e79849408b7df0901e5e4486b
ORIGINAL_AUTHOR=Thai Duong <thaidn@google.com>
GitOrigin-RevId: 81b35288e94edb4eec6f679268638f90d65de839