Testlogs auto-pushed to gh-pages

20 files changed, 10421 insertions, 4599 deletions

diff --git a/testlogs/BouncyCastleAllTests_1_49.txt b/testlogs/BouncyCastleAllTests_1_49.txt
index a511974..1fb1cf1 100755
--- a/testlogs/BouncyCastleAllTests_1_49.txt
+++ b/testlogs/BouncyCastleAllTests_1_49.txt
@@ -480,39 +480,38 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+.........E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E.E...testTiming: SHA1WITHDSA
-count:50000 cutoff:1159896 relative average:0.9961986880327899 sigmas:1.4722417942743848
-count:25001 cutoff:521666 relative average:0.942340690076947 sigmas:15.790968157407693
-count:12502 cutoff:509850 relative average:0.7871629587826584 sigmas:41.2190129299259
-count:6250 cutoff:503334 relative average:0.726391857823311 sigmas:37.46533784681331
-count:3125 cutoff:492817 relative average:0.8790864897825577 sigmas:11.707400285090863
-count:1563 cutoff:483890 relative average:0.7884785086110918 sigmas:14.48420344536109
-count:782 cutoff:479681 relative average:0.5762188649223247 sigmas:20.52606140374617
-count:391 cutoff:476402 relative average:0.3706290211457101 sigmas:21.55538177451655
-count:196 cutoff:473416 relative average:0.21084191116972115 sigmas:19.13606667081195
-count:98 cutoff:470551 relative average:0.10783987113368679 sigmas:15.297359592047068
-count:49 cutoff:468527 relative average:0.055511471392623954 sigmas:11.451314830997623
-count:25 cutoff:465034 relative average:0.03188635354382503 sigmas:8.384110115814343
-count:13 cutoff:462642 relative average:0.01263695746992902 sigmas:6.166080224292846
+count:50000 cutoff:4533826 relative average:1.0034068576287216 sigmas:1.3194702858938159
+count:25001 cutoff:538782 relative average:0.8566464376781028 sigmas:39.25977506315906
+count:12500 cutoff:532250 relative average:0.6623414476415698 sigmas:65.38729749943526
+count:6251 cutoff:527920 relative average:0.47119706468303874 sigmas:72.4151165512429
+count:3125 cutoff:524379 relative average:0.304366611458607 sigmas:67.3544132221662
+count:1564 cutoff:521080 relative average:0.1708618594454848 sigmas:56.79444958202656
+count:782 cutoff:517852 relative average:0.08916830876915612 sigmas:44.11661038015649
+count:391 cutoff:514550 relative average:0.04683382268921739 sigmas:32.645071884140954
+count:196 cutoff:510790 relative average:0.024183952547268774 sigmas:23.662281622408422
+count:98 cutoff:507972 relative average:0.011851438483197745 sigmas:16.943218360469515
+count:49 cutoff:504751 relative average:0.0038549124171928352 sigmas:12.077617323824999
+count:25 cutoff:502195 relative average:0.0025931344900251402 sigmas:8.637796834406473
+count:13 cutoff:498051 relative average:8.27909177634351E-4 sigmas:6.239827707241217
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:3a386d3ccb630c50bc5f8101daa4067052eec7415cd1e63527c27d7c12dd846b computed:3a386d3ccb630c50bc5f8101daa4067052eec7415cd1e63527c27d7c12dd846b
+expected:0e650f35efbdb67c56667175b5de8d88ff7ec7f3424458392e9c5d130103a0be computed:0e650f35efbdb67c56667175b5de8d88ff7ec7f3424458392e9c5d130103a0be
 Generated shared secret with a modified order:ECDHC
-expected:89b58a1ec5a08f6bb95f99a416c791097c924f4807d2d7cda99daa7a400ffb52 computed:89b58a1ec5a08f6bb95f99a416c791097c924f4807d2d7cda99daa7a400ffb52
+expected:44a50e52c0d26a219748426a5d501301432fc344a86ad9f2ed470d264049e554 computed:44a50e52c0d26a219748426a5d501301432fc344a86ad9f2ed470d264049e554
 ..E.Generated shared secret with a modified order:ECDH
-expected:f59c15dee72e91b031b79e681eea67fe3cb637eab3ae5a2995470fe231fb3485 computed:f59c15dee72e91b031b79e681eea67fe3cb637eab3ae5a2995470fe231fb3485
+expected:bd7d02620a87278f49899bc764170b698069662c77bf68f30e3f1a21e3e335c3 computed:bd7d02620a87278f49899bc764170b698069662c77bf68f30e3f1a21e3e335c3
 Generated shared secret with a modified order:ECDH
-expected:859eb5defb9f1491da046eb793c193f307167e58f5b160304a2613b464ffffa9 computed:859eb5defb9f1491da046eb793c193f307167e58f5b160304a2613b464ffffa9
+expected:a42af4e8572ceebd0d33f1213a56c0fcc26b2d82a6539a9ccd6380aba6ac04be computed:a42af4e8572ceebd0d33f1213a56c0fcc26b2d82a6539a9ccd6380aba6ac04be
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -522,39 +521,36 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:16504288944572309271894197248570427114063209431335786649399902228459097726802
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420247d18b4a8c7e5d6b5a929f7c8ed7a3646d95037e9540601b7d0c06bcd409f52a00a06082a8648ce3d030107a1440342000483058fc41de48eb7d6bf8358b3fdb9a521e3e34688ffa07b9c7b9793f7da68c6ade78207c9277b7080a96afd8311cbd0d3b4762c7233837583ac8d42d7820eee
+S:109363843162566772709903385971919794496197136118608845437759532204084481268381
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420f1c9bddd36cd66c54dab5450c855ce6fd0d957d4139e92be9f24a1d2c9209a9da00a06082a8648ce3d030107a144034200041e74553424ca20a936b4d53335d47f4c0323400abfbef33c5f85cf341400ecbc3f9e85ffb7882209a40e48b6e5baa0552c3cd87b3572cf57c5363479f35fb80d
 Public key:
-X:59262809636757006168033361948268166618678324229027186798600650154492603033798
-Y:78659161913797614066449158902470218601048263405758396891413552413843390598894
-encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000483058fc41de48eb7d6bf8358b3fdb9a521e3e34688ffa07b9c7b9793f7da68c6ade78207c9277b7080a96afd8311cbd0d3b4762c7233837583ac8d42d7820eee
-Signature:3046022100fc68c2578a26eff38af1146c96b5a2d6119be32f4e35cd921020400dc0d06298022100f62e83bcb17d11c2b4896fd205c5618810a341b21711eca7ae049f4c78de58ee
-r:114167931236575833382325359615931591552655430403586303630376806142214423995032
-s:111351144932396466390057160232177832455666981134183800857266637092263605197038
-.BC curve:secp256r1 countLsb:518 countMsb:528
-BC curve:secp224r1 countLsb:487 countMsb:496
-BC curve:secp384r1 countLsb:500 countMsb:524
-BC curve:secp521r1 countLsb:524 countMsb:505
-BC curve:brainpoolP256r1 countLsb:545 countMsb:498
+X:13774927771243381087588374276764660657532178830881271163998774657075187346620
+Y:28775796123359441686695402593552812389293707732947876452143603572596927346701
+encoded:3059301306072a8648ce3d020106082a8648ce3d030107034200041e74553424ca20a936b4d53335d47f4c0323400abfbef33c5f85cf341400ecbc3f9e85ffb7882209a40e48b6e5baa0552c3cd87b3572cf57c5363479f35fb80d
+Signature:304502210091a49e3885524a08c8c57b507b054e3c6271e295b712dfc7b89ece1374d5d27c02202f05180bd746e02ad81e6160b7227c98c3dd2e91039967387643301292a81cd2
+r:65876217962917474217596087533042936402386451190013048345568921213239811232380
+s:21267704079880447748934405789502737385286006774461771499125586525087863413970
+.BC curve:secp256r1 countLsb:534 countMsb:499
+BC curve:secp224r1 countLsb:517 countMsb:509
+BC curve:secp384r1 countLsb:529 countMsb:484
+BC curve:secp521r1 countLsb:503 countMsb:526
+BC curve:brainpoolP256r1 countLsb:516 countMsb:503
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:17516452 relative average:0.9977739595728413 sigmas:0.8621417502370169
-count:25000 cutoff:6975649 relative average:0.8961485555088237 sigmas:28.44088938865646
-count:12501 cutoff:6874836 relative average:0.8227255726441939 sigmas:34.330418377222266
-count:6250 cutoff:6805595 relative average:0.7522761243714379 sigmas:33.92098867859193
-count:3125 cutoff:6743705 relative average:0.7251694385302391 sigmas:26.61035469003045
-count:1563 cutoff:6680079 relative average:0.7235055702878604 sigmas:18.933308124687922
-count:782 cutoff:6622853 relative average:0.6748656638805822 sigmas:15.748051990162748
-count:391 cutoff:6576988 relative average:0.58406169475483 sigmas:14.24550744383902
-count:196 cutoff:6540025 relative average:0.5681539131857554 sigmas:10.471711087769005
-count:98 cutoff:6505326 relative average:0.44123440350506443 sigmas:9.580834180641283
-count:49 cutoff:6476846 relative average:0.38932310644068746 sigmas:7.404063846571424
-count:25 cutoff:6449979 relative average:0.26470307659972186 sigmas:6.3678581498918145
-count:13 cutoff:6420122 relative average:0.29451659975292505 sigmas:4.405742422446279
+count:50000 cutoff:318629706 relative average:0.9932375778677283 sigmas:2.6190748298312823
+count:25000 cutoff:7374122 relative average:0.8805133630771804 sigmas:32.72276318152897
+count:12500 cutoff:7275837 relative average:0.8055405140733846 sigmas:37.65691752529186
+count:6250 cutoff:7163819 relative average:0.852483014348498 sigmas:20.19959516412338
+count:3125 cutoff:7064980 relative average:0.7680110560701651 sigmas:22.462232908612425
+count:1563 cutoff:7010690 relative average:0.6134106930221456 sigmas:26.47219502520026
+count:782 cutoff:6968123 relative average:0.49047476435196724 sigmas:24.67912185792035
+count:391 cutoff:6935849 relative average:0.36955633596637816 sigmas:21.59212026316828
+count:196 cutoff:6908799 relative average:0.26427639745417125 sigmas:17.840349239117806
+count:98 cutoff:6880502 relative average:0.146687466128227 sigmas:14.63126209375062
+count:49 cutoff:6849070 relative average:0.06866973208309873 sigmas:11.291779398611652
+count:25 cutoff:6823164 relative average:0.05653233166453651 sigmas:8.170669684277827
+count:13 cutoff:6794930 relative average:0.0175554100059861 sigmas:6.1353644980499515
 E..E.Skipping because of:java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC
-Skipping because of:java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC/NONE/PKCS7PADDING
-.04bd874a55d9d36069984384f48273678eb62ba0a35fb91fc71076ff1bfacf9ef8a74cd6d7aa044898eff9b5d89aaaa309793e0fd14e93086e972c0810ee701f3df10a95b54606f4c54f0920bbd82c6c2747df29f35245b93e2cf3bee8d3010065a5a733b940b5f142bed25778a1bf229c58997cba0b6a4fd7a8748ebd
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.E.E.E.E...E.No implementation for:ECIESWithAES-CBC
+E.E.E.E.E.E..E.E.No implementation for:ECIESWithAES-CBC
 ..E........Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
@@ -564,17 +560,17 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:18691091318130112460166261485590308424249296422347488481402388640432129129617464011196897377407414757031109768622496921452700774956104763768448655559221313578352830930281105437687140300925895351511451292899910774707188966476624517112861358240036811317518196773946125063207966198216826390586450180035296520511775258631813364234975228102529007543079283131662459554792609060116770087989799786452735808478793393689518487454498466517803959662027997187097179940126667795477810815646994988307647312730877483490946457116002859639227483004385857038110410123679192698136888676740691343684443505690725786779098595266454580875517
+Modulus:19805791156985947679597598896432416744212759597960841371631825966187254346287547067024687613285657012249152603587490197696070349614140201590001620120749569050489843709633420895101715053870553815287959325804790579245203318687530247495163007465472178257862861443743545814299885448416544207519966892353756527760455909472181411355011451512870541452690731757549174087495761453152643768969023481058605835612073169669640757976579956825993596861575349323705834904599490987721911493979251406501485146568534120494609955855508671232843214946777054899912609461458529230472414932088012586575719954016691107084194664143991504896423
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:13460255212329963038741579215922611599415136395457711924077500255944501066594836984794066994585048855956791684695780470648361471761422104014765746796054276449088914789898027865741219061636915894989615869199142300121770762497990001215475298892179644276387213557885794566171218894533490064087738265360725309093499881638661724687945801893693313948617947223167322576211824052958804988298900164058530472094481526292998962757279421878469772894173400340769901985251962936978956947198645101891482923255881154776228780312577647704422510856156171224284040617393683798880108529516031667841018185694690353906030189704290481129473
-encoded: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
-Signature:57e3c70c337ebdd41b0fdd0a92d92e5a0ed291a11d44ebb4d064f91551376980ecc0de7d9666e6a950b43f92e6c5c6b2e2ec13a66658763d8fed129409afba799f5089f2e475141ed688b4274cf392eb544822162b18b370d7fddd286901a5c3d8e825b4a3574d67cb706058564e030b8eb4f6cbc3cd02d3c154914d5378f659eabfab8d8d447ddd55c611d27bcbded3ac14b3060ba9af66f8ea0d804f22744ba25bfa5311ca3045b42d8b525306e6d636c6e6da0fe1697468a45767312db17042ba5e8ede2767aeae06325c98bba4c3bb61bf9df7df927ec9d2ae1af7427842b046ea02dab2e608299a6834c7eb397e888695269d56ee3153c5fa65659f7127
+D:6251167891149340490905539362081031178632542415487739807623240613860618523169475427337315764847548946371877284666787230714607247536025299752646344998973172952826379253456327131470451437955847928181507219651068757063750715581298551496672823129274944035642359109569178405615043875986026472565886677271426122293043442505839465154103889408469921579058720804326457391051659257985088374897463612994004336643275302450059383955864245201398221692160909176042498192862073000072083259147138331568567564841185417290196846144952721751551359862872920151408521864537899517421131399219969492426474556113637012791783749050918692198513
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 480.818
-There were 38 failures:
+Time: 1,321.724
+There were 44 failures:
 1) testEax(com.google.security.wycheproof.AesEaxTest)
 java.security.InvalidAlgorithmParameterException: unknown parameter type.
 	at org.bouncycastle.jcajce.provider.symmetric.util.BaseBlockCipher.engineInit(Unknown Source)
@@ -1292,11 +1288,14 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 19) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1329,12 +1328,136 @@ java.lang.AssertionError: Ciphertext repeats at 256:5e29d45f9488612a351557db5752
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+20) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+21) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+22) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+23) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1367,7 +1490,7 @@ java.lang.AssertionError: Ciphertext repeats at 256:3bb9d675ea69f8538f20b04a931a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+24) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1408,7 +1531,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+25) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.security.InvalidParameterException: strength must be from 512 - 1024 and a multiple of 64
 	at org.bouncycastle.jcajce.provider.asymmetric.dsa.KeyPairGeneratorSpi.initialize(Unknown Source)
 	at java.security.KeyPairGenerator.initialize(KeyPairGenerator.java:351)
@@ -1446,7 +1569,7 @@ java.security.InvalidParameterException: strength must be from 512 - 1024 and a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-23) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+26) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1482,7 +1605,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-24) testBiasSha1WithDSA(com.google.security.wycheproof.DsaTest)
+27) testBiasSha1WithDSA(com.google.security.wycheproof.DsaTest)
 java.security.InvalidParameterException: strength must be from 512 - 1024 and a multiple of 64
 	at org.bouncycastle.jcajce.provider.asymmetric.dsa.KeyPairGeneratorSpi.initialize(Unknown Source)
 	at java.security.KeyPairGenerator.initialize(KeyPairGenerator.java:351)
@@ -1519,7 +1642,7 @@ java.security.InvalidParameterException: strength must be from 512 - 1024 and a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-25) testTiming(com.google.security.wycheproof.DsaTest)
+28) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1555,8 +1678,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-26) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[49c0e6480647930d25b3378e2a9170f1feefdd1b52efef32515ab25148dd2106]> but was:<[1053fa8b56f426700e697ca06c16117aaae6e2e4ec13d60d4489eba01e7117e1]>
+29) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[524bd9f5c1fc36a714b92659ecc08a97de8c066a8ffb6b2a1f91407c5b8327d]a> but was:<[dfa54b54213a37a4f81d555d46557dc3f613976d72a3d7d56acc8707f5b20ff]a>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1592,8 +1715,8 @@ org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expec
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-27) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[4eb2c140e1fd73f510a8a88b2db56b4968670729cca94a7d9536355143c49b17]> but was:<[5076e72809cb06907a7f481831715bc7841e57200f3a675c0cb21d05d5ddb604]>
+30) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[082a0b5dbd5038755f91f542437ba2864bab92a219c510bd2942c478ebc6ed1a]> but was:<[a8bd911b67537f87f4c3bc2a70c7d949c2f384d49f1aebbd76f295f4670622e7]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublicSpec(EcdhTest.java:2000)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublicSpec(EcdhTest.java:2016)
@@ -1629,7 +1752,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expec
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-28) testEncode(com.google.security.wycheproof.EcdhTest)
+31) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1666,7 +1789,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-29) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+32) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1707,7 +1830,7 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-30) testTimingAll(com.google.security.wycheproof.EcdsaTest)
+33) testTimingAll(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.EcdsaTest.testTiming(EcdsaTest.java:905)
@@ -1744,10 +1867,10 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-31) testModifyPoint(com.google.security.wycheproof.EciesTest)
+34) testModifyPoint(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:236)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:226)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1780,7 +1903,89 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-32) testEciesBasic(com.google.security.wycheproof.EciesTest)
+35) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:333)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+36) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+37) testEciesBasic(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
 	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:88)
@@ -1816,10 +2021,10 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-33) testValidNames(com.google.security.wycheproof.EciesTest)
+38) testValidNames(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC/NONE/NOPADDING
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testValidNames(EciesTest.java:141)
+	at com.google.security.wycheproof.EciesTest.testValidNames(EciesTest.java:136)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1852,10 +2057,10 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-34) testByteBuffer(com.google.security.wycheproof.EciesTest)
+39) testByteBuffer(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:379)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:358)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1888,12 +2093,15 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-35) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:046693a91a250b56e0df0938540fb8dbc50b61210cd8edaccf0c0b50a1da28a249f91fb81b5048f09cb07222bcc07dd73a3e4863cf8a8594938f58e5fd88b1403fcf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf57827cf69bbae2bf5782709305588b2a17f22cae395577a6f9e3ac1bce933b15bbf6907cf39df
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+40) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1926,12 +2134,56 @@ java.lang.AssertionError: Ciphertext repeats:046693a91a250b56e0df0938540fb8dbc50
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-36) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04a6c35903551fb00000193f5f169246c91368620dc6a6eefb20561df08473418d7682258ea7150c40b58a02e443fb8e92222a60b172e09614da3c5acf477a0d0e4b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232814b1a1a25e8072d67766ced3a385232810f86924ee11fbbb09198890ce21a2b812ca0501987d1beba5440334f44644d0178e043ed
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+41) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+42) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1964,10 +2216,10 @@ java.lang.AssertionError: Ciphertext repeats:04a6c35903551fb00000193f5f169246c91
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-37) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+43) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:412)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:386)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -2000,7 +2252,7 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-38) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+44) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -2039,12 +2291,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 38
+Tests run: 96,  Failures: 44
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:34:35 --
+-- JVM shutdown starting at 2018-04-06 21:06:53 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_50.txt b/testlogs/BouncyCastleAllTests_1_50.txt
index a2d20d7..c6d0892 100755
--- a/testlogs/BouncyCastleAllTests_1_50.txt
+++ b/testlogs/BouncyCastleAllTests_1_50.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
+.E.E.testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
 .E.....E.........E..
 Provider:BC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
@@ -607,37 +607,36 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-..E.E......E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E.E...testTiming: SHA1WITHDSA
-count:50000 cutoff:2807343 relative average:0.9983367325131753 sigmas:0.6441807276760091
-count:25000 cutoff:538687 relative average:0.9331898455142409 sigmas:18.29671434112761
-count:12500 cutoff:524269 relative average:0.8114436865753325 sigmas:36.51377308580016
-count:6250 cutoff:518516 relative average:0.6431500388122194 sigmas:48.863693346847604
-count:3125 cutoff:512649 relative average:0.6279824190247707 sigmas:36.02044739033581
-count:1563 cutoff:505056 relative average:0.7612138616154942 sigmas:16.351184863453046
-count:782 cutoff:497042 relative average:0.7308569751461631 sigmas:13.036083480986607
-count:391 cutoff:492328 relative average:0.5685374440587474 sigmas:14.777198865528863
-count:196 cutoff:488651 relative average:0.39368036427160036 sigmas:14.702469805915388
-count:98 cutoff:485614 relative average:0.20385557629978837 sigmas:13.65103319739385
-count:49 cutoff:482715 relative average:0.14610148884825758 sigmas:10.352969240755662
-count:25 cutoff:479995 relative average:0.07483661177771585 sigmas:8.012149968517832
-count:13 cutoff:478125 relative average:0.025392759035361694 sigmas:6.086420269048752
+count:50000 cutoff:1893885 relative average:1.0014898703107291 sigmas:0.5770242901462669
+count:25002 cutoff:537777 relative average:0.8425833114239029 sigmas:43.11206000938543
+count:12500 cutoff:531308 relative average:0.6487002050967372 sigmas:68.0289127593209
+count:6250 cutoff:527148 relative average:0.45922628281817973 sigmas:74.0484908516005
+count:3125 cutoff:523587 relative average:0.28373019094277524 sigmas:69.35252604674496
+count:1563 cutoff:520352 relative average:0.1567945674983742 sigmas:57.73956561289486
+count:782 cutoff:516950 relative average:0.08158928487838292 sigmas:44.48370437487608
+count:391 cutoff:513660 relative average:0.042581323406774056 sigmas:32.79071610449537
+count:196 cutoff:510526 relative average:0.02012701166984481 sigmas:23.760657210530443
+count:98 cutoff:507226 relative average:0.00838174452572343 sigmas:17.002711218785528
+count:49 cutoff:504162 relative average:0.0037662764201567343 sigmas:12.07869197817672
+count:25 cutoff:500596 relative average:0.0015154486922341413 sigmas:8.64712986718832
+count:13 cutoff:496987 relative average:5.295505592851453E-4 sigmas:6.241690956215612
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:f6ffad01f96eb73c59ff274a8143425fac7b1c0653a2e0d3c398bd7960ebf7a0 computed:d1fa2b38babe0c769894efd1dfb8ab9998f18842007a9b6796bef47b9f97c743
+expected:6f517a2f9dc7abbb8e9a73617720766e7b9bc05c9bcff71036bfd293e3d61ecf computed:e54e416fea3ef4dba061e5669f2dbca7d57ac6fb721d00f07279db4d2266407d
 E..E.Generated shared secret with a modified order:ECDH
-expected:49f0c9ca39de5d59f7b93b0ffa300bb3167f6f49b7347ee9271a96c594c8f47a computed:49f0c9ca39de5d59f7b93b0ffa300bb3167f6f49b7347ee9271a96c594c8f47a
+expected:11e9ae58ec59d529507aea9d8674dbce450745b6f038b8137af05d17018573a6 computed:11e9ae58ec59d529507aea9d8674dbce450745b6f038b8137af05d17018573a6
 Generated shared secret with a modified order:ECDH
-expected:33cb959debdbe11ee3e674b0b8198df3e3dfb974bd7e39def26f7fcd8b67fb79 computed:33cb959debdbe11ee3e674b0b8198df3e3dfb974bd7e39def26f7fcd8b67fb79
+expected:80bb3a8d14792a6e743f2c846beb279498cf3fe5f2bfbeb0de91df3c7a052139 computed:80bb3a8d14792a6e743f2c846beb279498cf3fe5f2bfbeb0de91df3c7a052139
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -647,39 +646,36 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:1676850076905045926216071147875394747035244691213291205781876951496785119738
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042003b5104230bc011f1b25c7c6439383bb8733d0ad24565358f416a0943053c9faa00a06082a8648ce3d030107a14403420004d38bac7d0d046cef076b62934fa35fcf5f8cb568193b265596c28c6c49afaf214dfc849873592780834eaf77b9246dfc0e1b35ae3539645823c16caafcb3dc3b
+S:106006938859217654580232976033191835000562105484619479095033448506724857492867
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420ea5dcd185251754d4ae76d51b9941855f4ffe651126e58a28fec5b13d6c53583a00a06082a8648ce3d030107a1440342000454367d2dd61641c8b8d8c30d9343cd606503faccd3407604cddee42257b2af258a37d8759a6586ae31aba5e9c7532b08fc140d1c33e1cfe7cfd0ddc1e28e5e16
 Public key:
-X:95684793264809265085351473571554492036005575920668651273967260129035610468129
-Y:35274249941812924012675010236471791422330528712855798456843599599654592044091
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004d38bac7d0d046cef076b62934fa35fcf5f8cb568193b265596c28c6c49afaf214dfc849873592780834eaf77b9246dfc0e1b35ae3539645823c16caafcb3dc3b
-Signature:304502200c65a6f210bb1ff52bbf4fc8d5b46e6435cda0722020c737fb661f3ab41bdf3a022100b2cc61e22f1bb37ef5af99e4f20c061e157b666eb47364586f677f9232214085
-r:5607357952504449520605006965385129402443706813977130974948867701382567419706
-s:80872799416340866297451716672509561622796654722464192323090883211507215188101
-.BC curve:secp256r1 countLsb:530 countMsb:537
-BC curve:secp224r1 countLsb:525 countMsb:498
-BC curve:secp384r1 countLsb:492 countMsb:524
-BC curve:secp521r1 countLsb:508 countMsb:522
-BC curve:brainpoolP256r1 countLsb:499 countMsb:532
+X:38090552976529344622471104663917530984406887198021395403857621677478939635493
+Y:62517843640838097882210474343745714911508273452643672502153110264643616398870
+encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000454367d2dd61641c8b8d8c30d9343cd606503faccd3407604cddee42257b2af258a37d8759a6586ae31aba5e9c7532b08fc140d1c33e1cfe7cfd0ddc1e28e5e16
+Signature:3046022100b9869db4a4ae07c3d91c9de4defb66aa441837f6f477c68653066d5920b7007b022100d35e5406113fc912c8007ee30ceff7da0236641dfc2cc8c8e60252277ab76f6f
+r:83915722938894239314670486551896305306894521847237586562216219837214238376059
+s:95604674585427735251596252720530416727091048800793162014840982887209018814319
+.BC curve:secp256r1 countLsb:518 countMsb:485
+BC curve:secp224r1 countLsb:489 countMsb:516
+BC curve:secp384r1 countLsb:501 countMsb:522
+BC curve:secp521r1 countLsb:505 countMsb:533
+BC curve:brainpoolP256r1 countLsb:524 countMsb:494
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:5479430 relative average:0.9937266734099974 sigmas:2.4296489408400173
-count:25000 cutoff:2168752 relative average:0.8764316673533936 sigmas:33.84058159192417
-count:12500 cutoff:2142596 relative average:0.7849860001935203 sigmas:41.63728202259704
-count:6250 cutoff:2120104 relative average:0.7576866920259037 sigmas:33.18011619027725
-count:3125 cutoff:2101424 relative average:0.7034640598945504 sigmas:28.71196893950916
-count:1563 cutoff:2086184 relative average:0.59656628032576 sigmas:27.625637631954056
-count:782 cutoff:2073470 relative average:0.5250438228796529 sigmas:23.004751388647545
-count:391 cutoff:2061237 relative average:0.5181924793190689 sigmas:16.50146797206418
-count:196 cutoff:2047937 relative average:0.5403763296144496 sigmas:11.145281692566895
-count:98 cutoff:2032499 relative average:0.5388814681466486 sigmas:7.906535797874157
-count:49 cutoff:2017095 relative average:0.5601842360201726 sigmas:5.332482744279478
-count:25 cutoff:2005257 relative average:0.3868478034097842 sigmas:5.3100537863335715
-count:13 cutoff:1999024 relative average:0.4352858259957955 sigmas:3.5266388863234615
+count:50000 cutoff:4878144 relative average:0.9997812732253085 sigmas:0.08471251557496366
+count:25000 cutoff:2045945 relative average:0.933364499818912 sigmas:18.248883289910733
+count:12501 cutoff:2016302 relative average:0.7995085515384199 sigmas:38.82655501645825
+count:6250 cutoff:2001676 relative average:0.6512502206024186 sigmas:47.75453027525146
+count:3125 cutoff:1991227 relative average:0.5015251185666884 sigmas:48.264622857348314
+count:1563 cutoff:1982060 relative average:0.3685322162535233 sigmas:43.24056051665522
+count:782 cutoff:1973495 relative average:0.24895802383862578 sigmas:36.377111776468354
+count:391 cutoff:1965800 relative average:0.16075324494053017 sigmas:28.743435614496708
+count:196 cutoff:1957320 relative average:0.1077920631310215 sigmas:21.634892686025864
+count:98 cutoff:1949254 relative average:0.07183742718192142 sigmas:15.914672912271898
+count:49 cutoff:1942098 relative average:0.02002925886759426 sigmas:11.88151379500578
+count:25 cutoff:1934833 relative average:0.011626332326725431 sigmas:8.559567046366544
+count:13 cutoff:1929313 relative average:0.004563522295591069 sigmas:6.216498810796786
 E..E.Skipping because of:java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC
-Skipping because of:java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC/NONE/PKCS7PADDING
-.045973b61b989d38389cfd9b89558e5d290ae754e58b30aa0fb5ab110aab4e5863601a2d124d72d3855bc9dbde1b4eaac498bfa56cf8c787c4666baa99f60c5a9899bd1e9b393f44bb76de9e62719ca14c52f6ca4d4b0aee828fafa05dc7d28a0a3157131aa473e5ff52731085a9b08920cb5b710b36c316baea3612bd
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.E.E.E.E...E.No implementation for:ECIESWithAES-CBC
+E.E.E.E.E.E..E.E.No implementation for:ECIESWithAES-CBC
 ..E........Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
@@ -689,18 +685,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:27775238558284238011554135586397190403959791602934533445091234053967836064031081556981102600705105351189249936438801180952405860161602220584801594035623009654304261518087307047562222140848483667017489043948544772038932369681733636963103455010920882979366107856831855234756696603654345251363334335155972702367231220308652792816499861250799688084127757780387886026402200361462425467549182726709909514461103910755348914913826040191897215422439834454848527331533806699723909696887487736089743798833042258899788749607148089246327935482698960148761537295838268383141721183969501177237419655619315990042050709362965667456851
+Modulus:19093420442875980374795044383143639832346511946294343735674514612906629803514750745544382290647464894084377220160213693644987941666766310466874107921857100953478851703294897096418303375048235111214996960337601649057743171379181531086606985478091814293419459937466392187172569636695984222589051894883922142299064456834386922695819921612103971182558896964642731400692414461855810899595628143875014261772946192936072563003132193803922189570476722894267181456292467384860844678815269851128052569361532385746366937626208465384139059870011924367874025899435022499051541548409238991428038206087636270174732982730163358426951
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:25431145229845796818916298579387976370294814454822308221403857220232753572153883758917985911132803633115066781908642502162596182993684527036812860700086887060991218955007811567450733200844623814380448411907416842256560046616752500413628727610133489541172813342952108049144915641528947634974262479444730426754780735893040654429303291971325394651476355354922040404655490706990691939055048330742659983155421341187251206610277458241471391366643477651679556128773635280951703204385811080826948375499504407789955675228841855235327313209165508073840920654255805113946654992336210020444571988216106190711637901439479408321569
-encoded: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
-Signature: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
+D:2088019657813023961215131652257357930305437403590209523682488460422384543109849681757123272000097363258964120067873896308247685703125168181578142598470327334690067140050880075225139696491610861682376111429262722108073993458269283508517513235599493920089983816345295524748856471706060987278876587738728809586270552394640221663652745886191363546691735334237503287824982775225309556788132019166593069869254660143162544111353664546376431681063821667301858140889842728012942504174309581810555085135989721043130712256734208212853931980085095824738966335659746071622250032306529241518886825801477709569292357773686851120873
+encoded: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
+Signature:914f780e81b3f870da519cebbd8532bb25920408b5b65da205049fcf03440b5284c225be6701382a9f1cb88eac5f99a882c2928c0d2ffbe1fa0a396cd782709bd56cd0327180e8be91ec0701bd6f2c797dc991039afcfb48c073677fc0947cd5795c07b77e4b195eab6060400c90df28b1f642630e79eb271d7cbaf6ffd1a15db1969ff2434e8d7d2734c26f15fea7b0a371733c84c6bdbbea31fe7410b700f1ce6ca9c2929fee3e6a23e35d054bdab0c3cc7f68123b595e5489bb2072b5ed3df753ae5c17e136bb4532d6604d6031ba8d17acc629c294f1541b8cf16dfda83c274417fc811b63688ec293cd9c872d7610de2c057bbc731d3075aeafb193cb5a
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 174.77
-There were 27 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 702.217
+There were 38 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -742,7 +818,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -784,7 +860,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+5) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -820,8 +896,8 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
-java.lang.AssertionError: this should fail; decrypted:ea56d5e771a7ba41e36ad168f9dd4518 pt: ea56d5e771a7ba41e36ad168f9dd4518
+6) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:f8ec9ac0156a81b68efb678f72b42c87 pt: f8ec9ac0156a81b68efb678f72b42c87
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
 	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
@@ -857,8 +933,8 @@ java.lang.AssertionError: this should fail; decrypted:ea56d5e771a7ba41e36ad168f9
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
-java.lang.AssertionError: this should fail; decrypted:cc568d747b0b5dbe289b070c69919a09 pt: cc568d747b0b5dbe289b070c69919a09
+7) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:e4cc068980d548a9a46f7bf60bf8744e pt: e4cc068980d548a9a46f7bf60bf8744e
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
 	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
@@ -894,10 +970,48 @@ java.lang.AssertionError: this should fail; decrypted:cc568d747b0b5dbe289b070c69
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+8) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:9110bfa2694b6d50df1e4ae639ceec30ec9a4a00bc646541dc2f1fd670413c42a2d07013ea42cdb3b5da86e763574466 pt: 9110bfa2694b6d50df1e4ae639ceec30ec9a4a00bc646541dc2f1fd670413c42a2d07013ea42cdb3b5da86e763574466d489012406ec8bfa03ad74bddb25dcf024
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -930,12 +1044,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+10) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:8e57452b21c05acbcd96d2ccc103a752 pt: 8e57452b21c05acbcd96d2ccc103a752
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -968,12 +1081,91 @@ java.lang.AssertionError: Ciphertext repeats at 256:2a208365b5cc10dd3ae89725dc81
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+11) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1006,7 +1198,129 @@ java.lang.AssertionError: Ciphertext repeats at 256:036d789c2a1814bbb52264bf02bc
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+14) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1047,7 +1361,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+18) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.security.InvalidParameterException: strength must be from 512 - 1024 and a multiple of 64
 	at org.bouncycastle.jcajce.provider.asymmetric.dsa.KeyPairGeneratorSpi.initialize(Unknown Source)
 	at java.security.KeyPairGenerator.initialize(KeyPairGenerator.java:351)
@@ -1085,7 +1399,7 @@ java.security.InvalidParameterException: strength must be from 512 - 1024 and a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+19) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1121,7 +1435,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testBiasSha1WithDSA(com.google.security.wycheproof.DsaTest)
+20) testBiasSha1WithDSA(com.google.security.wycheproof.DsaTest)
 java.security.InvalidParameterException: strength must be from 512 - 1024 and a multiple of 64
 	at org.bouncycastle.jcajce.provider.asymmetric.dsa.KeyPairGeneratorSpi.initialize(Unknown Source)
 	at java.security.KeyPairGenerator.initialize(KeyPairGenerator.java:351)
@@ -1158,7 +1472,7 @@ java.security.InvalidParameterException: strength must be from 512 - 1024 and a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1194,8 +1508,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[f6ffad01f96eb73c59ff274a8143425fac7b1c0653a2e0d3c398bd7960ebf7a0]> but was:<[d1fa2b38babe0c769894efd1dfb8ab9998f18842007a9b6796bef47b9f97c743]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[6f517a2f9dc7abbb8e9a73617720766e7b9bc05c9bcff71036bfd293e3d61ecf]> but was:<[e54e416fea3ef4dba061e5669f2dbca7d57ac6fb721d00f07279db4d2266407d]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1231,8 +1545,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[f6ffad01f96eb73c59ff274a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[fc185b1cdb08bd8056959d58067ced11656ce09e68b941d4c8984e76b3fdc82d]> but was:<[ad0cba28981b13f9081a5bb1a910409702e6558571c8830e49c8654bd2172761]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[20c72fcf69910dd68be1aed49fcd28767c44cb9c7e36bdb70d1a064f1cd8669d]> but was:<[3388bca3bdb09e04e18f2d67d8c76639829b3a7f33a19f9dd9a5cbb06905804a]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1268,8 +1582,8 @@ org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expec
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[4bb2b7d2aaee3d25cfd4f31dd88e4f3224b352ace07531abe721848737f78f]9a> but was:<[39493fc4dd8b8abd35b4449f11ea88cdf6c804f198ee5d50e8651d334da8b2]9a>
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[76d7136735476af1c9c57bf30c5045b886b6155a526e4202b37d6c3d92e8af32]> but was:<[4e82a122ea41af36db6667a4e7dfdeb816d665ba02d5b5ce4f92bb59df07908a]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublicSpec(EcdhTest.java:2000)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublicSpec(EcdhTest.java:2016)
@@ -1305,7 +1619,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expec
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1342,7 +1656,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1383,7 +1697,7 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testTimingAll(com.google.security.wycheproof.EcdsaTest)
+27) testTimingAll(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.EcdsaTest.testTiming(EcdsaTest.java:905)
@@ -1420,10 +1734,10 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testModifyPoint(com.google.security.wycheproof.EciesTest)
+28) testModifyPoint(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:236)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:226)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1456,7 +1770,89 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testEciesBasic(com.google.security.wycheproof.EciesTest)
+29) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:333)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+30) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testEciesBasic(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
 	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:88)
@@ -1492,10 +1888,10 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testValidNames(com.google.security.wycheproof.EciesTest)
+32) testValidNames(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC/NONE/NOPADDING
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testValidNames(EciesTest.java:141)
+	at com.google.security.wycheproof.EciesTest.testValidNames(EciesTest.java:136)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1528,10 +1924,10 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-23) testByteBuffer(com.google.security.wycheproof.EciesTest)
+33) testByteBuffer(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:379)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:358)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1564,12 +1960,15 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-24) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04240663e695bc205bd2d065f46bcde3890deafd608a752216b84f5ed7c084d696e390af970af2783d1a0171360ef38e61fee4e4417584a48e24ee480fc4ef3ae2cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a4480cce28898713a44800cc0e90d0dc1932e150610d9a6ffb47d34c709cb86376c1c3e07afbb
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+34) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1602,12 +2001,56 @@ java.lang.AssertionError: Ciphertext repeats:04240663e695bc205bd2d065f46bcde3890
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-25) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:040d4ec95ada3c5e72c0cd04dc244d7304eaf77be36d03a8e3a6fdb3b92d20d6151849d51cae110939838bc6a066322b2c01ef61fe24ac857f9a9f5c76f77925aa27d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed7927d94a84eab907565f6d4f943a5aed79216bfb266fa83bbe642908aff0a9297f7c1f2644d63e50d84c1e50c89b352c8afa2321d6
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+35) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+36) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1640,10 +2083,10 @@ java.lang.AssertionError: Ciphertext repeats:040d4ec95ada3c5e72c0cd04dc244d7304e
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-26) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+37) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:412)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:386)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1676,7 +2119,7 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-27) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+38) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1715,12 +2158,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 27
+Tests run: 96,  Failures: 38
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:36:48 --
+-- JVM shutdown starting at 2018-04-06 20:43:57 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_51.txt b/testlogs/BouncyCastleAllTests_1_51.txt
index 087176c..63d182f 100755
--- a/testlogs/BouncyCastleAllTests_1_51.txt
+++ b/testlogs/BouncyCastleAllTests_1_51.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
+.E.E.testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
 .E.....E.........E..
 Provider:BC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
@@ -625,41 +625,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:3349578 relative average:0.9974232597838139 sigmas:0.9979671944791714
-count:25000 cutoff:535041 relative average:0.9305850324533776 sigmas:19.01007177688706
-count:12500 cutoff:524196 relative average:0.7429969513568286 sigmas:49.768426365976865
-count:6250 cutoff:518380 relative average:0.6332985440584885 sigmas:50.21266482228817
-count:3125 cutoff:511420 relative average:0.7360088442715296 sigmas:25.56083374206037
-count:1563 cutoff:500947 relative average:0.8512998661436572 sigmas:10.1824310002035
-count:782 cutoff:494878 relative average:0.6456239169619075 sigmas:17.164391329325426
-count:391 cutoff:491131 relative average:0.4185483692763121 sigmas:19.914187823658782
-count:196 cutoff:487808 relative average:0.21783748392079572 sigmas:18.966433046751266
-count:98 cutoff:484900 relative average:0.12102718169862488 sigmas:15.071244318301085
-count:49 cutoff:481734 relative average:0.057640993927723906 sigmas:11.425495742411032
-count:25 cutoff:479077 relative average:0.03028941627950111 sigmas:8.397939998205889
-count:13 cutoff:476767 relative average:0.012390055665767851 sigmas:6.167622125565633
+count:50000 cutoff:1975154 relative average:0.9990794119040571 sigmas:0.35654223643036587
+count:25000 cutoff:502606 relative average:0.8456735270758098 sigmas:42.26404522039462
+count:12500 cutoff:496691 relative average:0.6428180347747148 sigmas:69.16799014415832
+count:6250 cutoff:492797 relative average:0.4550464621518256 sigmas:74.6208363679226
+count:3128 cutoff:489577 relative average:0.2897973959515475 sigmas:68.7980707641788
+count:1564 cutoff:486452 relative average:0.1572786204053777 sigmas:57.72487666901118
+count:782 cutoff:483607 relative average:0.08184158620599283 sigmas:44.47148402782874
+count:391 cutoff:480370 relative average:0.044981863664881265 sigmas:32.70849979095833
+count:196 cutoff:477663 relative average:0.021207772179244213 sigmas:23.73445016094713
+count:98 cutoff:475161 relative average:0.010160415740973466 sigmas:16.972213360502757
+count:49 cutoff:472188 relative average:0.006145239798659978 sigmas:12.049848580090329
+count:25 cutoff:468324 relative average:0.0030200545706156002 sigmas:8.634099598054704
+count:13 cutoff:464966 relative average:0.0015686253356537714 sigmas:6.2352019363170035
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:555f910b50a02062a24d2bcb50d31580c9a326a1cd9b2416f18c0860ed154cce computed:a5601b97f0d85c949358d0cc5ad4fe67462e450d6b8a66afd18fbdf6f7a5ec9a
+expected:0351b3704063db6b7b32935c97ccd81bf5085d101a5d0c4164328e34f578550d computed:6d54b2a2ff018d972eb038293b6cdacada35d9943f81853f10244636cacc4bfa
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:e746e49e38737cb7fe2ca4254c56613eec0d8c4999b2897d3d397a9bd8b75b55 computed:e746e49e38737cb7fe2ca4254c56613eec0d8c4999b2897d3d397a9bd8b75b55
+expected:2568a2a173b8224fac528ca396ff624998de4ae97c83a838c66050ca5f0b2ab2 computed:2568a2a173b8224fac528ca396ff624998de4ae97c83a838c66050ca5f0b2ab2
 Generated shared secret with a modified order:ECDH
-expected:05cf6297348f408ab7c1ffd61bc25fdb8e3725ac031a013e88905c83d0cb5ef9 computed:05cf6297348f408ab7c1ffd61bc25fdb8e3725ac031a013e88905c83d0cb5ef9
+expected:82e87cec0ff9767b2a2f954096ca0b36ba2447fc7f8e245bfb014661cb6fa288 computed:82e87cec0ff9767b2a2f954096ca0b36ba2447fc7f8e245bfb014661cb6fa288
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -669,41 +668,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:43778437643949623902630724611191654962248803332114476362180107480001748506209
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042060c9b7b5c3a5077825eb756efeb024144e0b3374728e183beb7f463c293d9661a00a06082a8648ce3d030107a14403420004d0e9bc6c5fd83992ab6b3f38c0bf0c1391d5b04736d0b26d446661a1e2ba08c33fab7e21512e3ce99e57803bb86cc58fbdb7933cce283de8704ac317ebde11b3
+S:5128686423797377313724977134565897854837804550075044828433616056848971511143
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104200b56bbd047ed321da6a2f1f9fbbdde3c863346cff1371b3033a83bf7fe08b567a00a06082a8648ce3d030107a14403420004fc398d113c067cc1a7973e692d3bb9ed80ae8724265508007a279e92bc8da8a912a27b97428c82d870085c61f0e04c14ee0c260ccd8ee08ac7ce048c81676af6
 Public key:
-X:94494048321493826479442303204632938835425424486977254284816031367884357372099
-Y:28798710827090138625178711493967820504261404473751457298446768917050963136947
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004d0e9bc6c5fd83992ab6b3f38c0bf0c1391d5b04736d0b26d446661a1e2ba08c33fab7e21512e3ce99e57803bb86cc58fbdb7933cce283de8704ac317ebde11b3
-Signature:3046022100daf3014ae6cbbfbf4d2ceed3d98251f42e58519c896da0353068936aafb2840c0221009fce585694f472971265232deeda602459af4f8099c92da5fe61a9013c204ee7
-r:99033553748981264783221967752489988183040552441351838114264708961324718261260
-s:72282323108004412951994527879472448505096921142894439064742627868657389162215
-.BC curve:secp256r1 countLsb:507 countMsb:550
-BC curve:secp224r1 countLsb:487 countMsb:518
-BC curve:secp384r1 countLsb:509 countMsb:500
-BC curve:secp521r1 countLsb:502 countMsb:517
-BC curve:brainpoolP256r1 countLsb:531 countMsb:491
+X:114084521736550894820775691553277684943503031845945927503212578328109768353961
+Y:8428713491753909401382570415460425523414696443436576510373538166162365836022
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004fc398d113c067cc1a7973e692d3bb9ed80ae8724265508007a279e92bc8da8a912a27b97428c82d870085c61f0e04c14ee0c260ccd8ee08ac7ce048c81676af6
+Signature:30460221008035d6311c657791e1feb1f6d68c776c9f0eb171c31c9885ca25647daf6765fe022100e73c40e0ae8c5e3dc004d11d904abf3506c42b01054c7493e2c1f15728b8eb65
+r:57991165810837437250425627277484109081663053268648651589917010864296759354878
+s:104590726615797569661461435249167097824669210254283185138465119894994689780581
+.BC curve:secp256r1 countLsb:524 countMsb:504
+BC curve:secp224r1 countLsb:499 countMsb:523
+BC curve:secp384r1 countLsb:479 countMsb:504
+BC curve:secp521r1 countLsb:507 countMsb:506
+BC curve:brainpoolP256r1 countLsb:494 countMsb:529
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:479326 relative average:0.9952923184100525 sigmas:1.82327723971138
-count:25001 cutoff:151570 relative average:0.9856112710145118 sigmas:3.9405945291164577
-count:12505 cutoff:148223 relative average:0.9801559069547183 sigmas:3.8435605758266944
-count:6252 cutoff:146295 relative average:0.9700380643123183 sigmas:4.103363391281033
-count:3126 cutoff:144751 relative average:0.9642120977223619 sigmas:3.4657031173760235
-count:1563 cutoff:142866 relative average:0.9859443452507328 sigmas:0.9624788555023256
-count:782 cutoff:139976 relative average:0.973962540234232 sigmas:1.2611380113741106
-count:391 cutoff:138424 relative average:0.9887716952859962 sigmas:0.3845591915145988
-count:196 cutoff:137485 relative average:0.9380345454746882 sigmas:1.502582417727143
-count:98 cutoff:136437 relative average:0.8995854976993912 sigmas:1.7217500538841344
-count:49 cutoff:135691 relative average:0.8309373548945427 sigmas:2.049775636892465
-count:25 cutoff:135022 relative average:0.7354862230448074 sigmas:2.2907565049416765
-count:13 cutoff:134301 relative average:0.6335155195567541 sigmas:2.288694846812147
-....04de94006b36dcaa9eef2ae9dbc49dd4c04b14fe81402df0cf4f8c666600a79d45aabc7d31d0e1bc7baa0400fbe14ff710bfdcb4aa3f347cc38ca822fd5cafe326bc3651c0aa704c3c56034a06c42a5cd6cc6a9a21c337810f01a62c8f12b1aea8cf31300cca87958826110c437991de28f447332b59d2a7968d1e04c1
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:0402c5d1d228c16dd063567b7b3975c35913880c7bff2b1ee68f5082dc02e4353299d9c40a751786d1fcce9c9505525518dcf501100bfb64fc226be94f050cae69972d8aea7182bb5628b471c15db032b097c40d80868c5497ac2bb7e05bc4654cdd6efef0
-..E.E...E.04e8d86fbbea033f86ee3c845b3e33862de6a440e9ea6ec30b5e135611e7ca6a7d165129be874c6f3d6e7f4b15d7446911b1aa2d03251d59c5dc6c3c7103d6af7ea57a739f2cb5f3ff6b6d51250e93b248d62b9bf2ff6b918e0114652baefcdda143e041eff03aedb9808c0751649034a91f91737b976554e705cafdd8bfd733a03a1aabea
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E........Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:1073765 relative average:0.9962340132087707 sigmas:1.4585604124468134
+count:25001 cutoff:137239 relative average:0.9872226141909695 sigmas:3.4993012007007183
+count:12503 cutoff:135575 relative average:0.9718200536834778 sigmas:5.457677942536303
+count:6254 cutoff:134514 relative average:0.955026137020696 sigmas:6.160270153713877
+count:3132 cutoff:133670 relative average:0.942613190045944 sigmas:5.562673728449369
+count:1563 cutoff:132941 relative average:0.9166062803721152 sigmas:5.710491133663715
+count:782 cutoff:132285 relative average:0.9078090447144159 sigmas:4.46531724144604
+count:392 cutoff:131692 relative average:0.8988197674034872 sigmas:3.4697591868460402
+count:196 cutoff:131145 relative average:0.8983048119843566 sigmas:2.465977255397095
+count:98 cutoff:130592 relative average:0.8997524046592225 sigmas:1.7188881956813942
+count:49 cutoff:130182 relative average:0.903961810487994 sigmas:1.16440116591206
+count:25 cutoff:129611 relative average:0.9051027514734802 sigmas:0.8218342797321155
+count:13 cutoff:129239 relative average:0.9473691754885262 sigmas:0.3286793937282113
+..E.E.E.E..E.E..E.E.E..E........Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -712,18 +705,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:18163523819090636485692182814054006827815033431929581041918255280520027868873918511740662770998506471792236505100956438814163154174101022281020343353723033245733501260746791628999024804430932361411763572300787719913851364820631330257414651217045939736171866930084608928810386933800333787284082357721728824613416575906142923868249841141312514064826966164025503438281292510233246397715424363365166882972569138092682148260776980396704295551570859425956925107501088875486263837183195383889020949184511022532719928588091996265993038275961862145735498051467099544631934892029124103644643615871614386707957047682151787885133
+Modulus:19690946630028132508978680276162550425054201200447573262902299730827690265949421945059184360182979868216866027987969953973751736983974173001862842036076489329375651036818137697654307372957042145542024771165743236960762553335695125427525484208909245551144660806346308362681445591528983696491310173462545696576413097767631664612673177734073755065613166634879502807149839056307367038217416161597172877570677208700743183681256191356142478752866754796358174582249620557818384545104874858732043080783144892308687861113428910578424501272276141246748188978760921205531462310150835584982540093484082813394152557580096414882989
 E:65537
-encoded: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
+encoded:30820122300d06092a864886f70d01010105000382010f003082010a02820101009bfb7adaaffc59d139ab1c21ad6050bea4c7cebcc64de34a423ef9ba460d6b2baeb0edcc3f0a5edac946ceff274c4823ad7e990de29d45716290c10540adc3fc05eb6fe14d1d38fee86eab939526fa96ad3a23f7d388961fe509e104b0c77f1f78b092562f6a632be945792a3ece80421fba6a803d8f53340e3958df13dc70b4a7df64fed2d32bcf8b6a97895cc6fcb43da468193fce7a29bb529d0dc3885a9380d1482bbed55512bae0cbf2ff5943df11b90918a2c49b17f80db335a9e62586cf987975b6613f2f0cd299dc65af7e82d4238898cd1df9f7c16c76cb32b648515cddea85905526d89b045828362fbd95d8b741079291d99d732bf1c65f431cad0203010001
 Private key:
-D:15489588823491410692415740807401382235985083288479978559466703837114665571562543779890350513577605447335036788891578107159082114281037155107251567354261357783706908341270998632118139330375824019209638132540682742241256678341398971828991980741710492178691570728832548154817640650978330638227567311453220353064742573463886588004032924181617219595926750268886255972126118654704142349671645922482913308602134636276640652177832779133246681898736886248710226630305349626227512806689497922672293363451817315972905076374764992250518773720637196030589722743471825869656974533860284493464941711414782505433677007602184304576449
-encoded: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
-Signature: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
+D:17590162357980942333920637758334017648577112307249388538941592348464335056838257896661274522283787118494231069602754183978413650941098432311428049605598334800010642689633609587090825413884828912076503963072744217890166527076892001741832544562775100794845112942422518929660882130034398134047694494794768417932612449518623145543584598925468787468825622398809632071613055793153990260304106440844740796930996108453581795093539649978575176297398090654770545719361281242063355195687315091712012944716713354956361306255227705137277180026465687822084854384048056154762596367591510245361328231061212705341248722234868884178433
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 115.679
-There were 21 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 1,103.339
+There were 36 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -765,7 +838,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -807,7 +880,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+5) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -843,10 +916,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+6) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:3181cc7b2ff2e50a17264e8f41515680 pt: 3181cc7b2ff2e50a17264e8f41515680
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -879,12 +953,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256:292b3bf57085deb61420807a505fc32fb76bca0ca90682ff81a870a03b945a972a08470136b6e8f002938715459db5660ef3524d75da060d3da2220be99264258968b36188ddc30588d790a71ccbd5a942f50d726bed3a917bc26abf3f5d1433f96c997411d0aad6532577a83c163ddd02fba50a89e48bc4afbfccdb0a29a0bc651ad3d90b4f4a0880cc36f96f9ddeb28e2a6fcfbce41459dad70293bcdd4a6027caa6e67743bb01baf4d1aefaada70d24396effd22c8e52d9a3523e70d7a40fc4faa3eeb4c2cb420ccc16b1eddcf961ad46d336be60f36d7075880b2d30a2f4077b66067d56864f775a451c60af6b3af481d81f07285aba039f60695d65833eba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c11ba37f74773d7ee6ccfa6146c2a7a4c118f1e4b520c009608c077c167b09eb774566bf947c33ca5cdd060db6ca66d6b3457b6d60b
+7) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:0ebd740d2179e6f53639e5224ccf398b pt: 0ebd740d2179e6f53639e5224ccf398b
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -917,12 +990,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:292b3bf57085deb61420807a505f
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:a50aa9330d317a1a83f92845e97b6b16 pt: a50aa9330d317a1a83f92845e97b6b16
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:c1359662a8b26f023ebd6761695d5658 pt: c1359662a8b26f023ebd6761695d5658
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -955,7 +1258,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:5af7d42db41e297a8d557c210ed9
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+15) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -996,7 +1381,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+18) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1034,7 +1419,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+19) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1070,7 +1455,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testTiming(com.google.security.wycheproof.DsaTest)
+20) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1106,8 +1491,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[555f910b50a02062a24d2bcb50d31580c9a326a1cd9b2416f18c0860ed154cce]> but was:<[a5601b97f0d85c949358d0cc5ad4fe67462e450d6b8a66afd18fbdf6f7a5ec9a]>
+21) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[0351b3704063db6b7b32935c97ccd81bf5085d101a5d0c4164328e34f578550d]> but was:<[6d54b2a2ff018d972eb038293b6cdacada35d9943f81853f10244636cacc4bfa]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1143,8 +1528,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[555f910b50a02062a24d2bcb
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[1d6288ea44a2cb10137077736565189feee4e93d7879110447391ecb51539ef4]> but was:<[6d4138e05641c33206a1812942f8d3de4483efde47d381a49add71b02ebd661c]>
+22) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[a3d2c6de0476d5f567c8923ca90e1b61e20500e72cc43b13e8831313d3f69e8]b> but was:<[4859ad34691c5eee735589253253b8f81eb2bc7b55b2c6f18e8a1d41a3d6a51]b>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1180,7 +1565,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[1d628
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+23) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.bouncycastle.math.ec.ECAlgorithms.validatePoint(Unknown Source)
 	at org.bouncycastle.math.ec.AbstractECMultiplier.multiply(Unknown Source)
@@ -1222,7 +1607,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testEncode(com.google.security.wycheproof.EcdhTest)
+24) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1259,7 +1644,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+25) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1300,13 +1685,14 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.bouncycastle.jce.interfaces.ECKey
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(Unknown Source)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:388)
+26) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1339,12 +1725,15 @@ java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04d8e441782ddfd726f4ccc8141eda2342b2d1e9dd69dbd369ded2446d769210797dfef75dd4c48438ff3595e78121ce3cc779763bbc918bea1485b1cc9f3d5129bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866bd973078e2451866900f29c8ab5666a84deb3217ee63b19edfb76b70a583a5c8c61ea377
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+27) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1377,12 +1766,15 @@ java.lang.AssertionError: Ciphertext repeats:04d8e441782ddfd726f4ccc8141eda2342b
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:0413095911e581a4c1a9d509f9d109381a47e4d5152b216332d8d3dde74b406a7cc0341e58d34df174ffe300930321ee7e29fe639411eb6b1d11e0afa34ee5bdd827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e85827d136877e63fb5bce3c42de1fc8e858c6e7ce5aa2cdfaf777eae32100fa14d6049733782e10039e40989af9a6ea34276ac73cac
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+28) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1415,15 +1807,218 @@ java.lang.AssertionError: Ciphertext repeats:0413095911e581a4c1a9d509f9d109381a4
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+29) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+30) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1456,13 +2051,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.bouncycastle.jce.interfaces.ECKey
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(Unknown Source)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+35) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1495,7 +2091,7 @@ java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+36) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1534,12 +2130,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 21
+Tests run: 96,  Failures: 36
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:40:27 --
+-- JVM shutdown starting at 2018-04-06 20:44:51 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_52.txt b/testlogs/BouncyCastleAllTests_1_52.txt
index 1e6504a..f777b4a 100755
--- a/testlogs/BouncyCastleAllTests_1_52.txt
+++ b/testlogs/BouncyCastleAllTests_1_52.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...E.E.....E.........E..
+.E.E.E.E.....E.........E..
 Provider:BC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -642,41 +642,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic:997b23baf47add686658cbe78974d0aad2bef18cde856341238b91654695e71176f0d1b763cddcb1bfbb45251eacaf564db471b9a6e8c4b8e74ce2c74ffd5ba79f3988c1e2ec8b91cc4b2c0795264475d1d1e3120bef9e50c02ffb56fb97838e1ce7bfb8f08984404a89e0f2080b0459981462ec6fce132a9b5c76bd6b457d287f89a4c5375ea9001713c2a58886334ccd26e998d9fc8bf1578c2aaa16861906c581b86c6240227093369a61b041744ef623b606ea85c8f3fef484f4248a9e9af3076ea0b5bffc15a69a3fe271436dd956dc3702f8664c0a4c5894736b491630f1ff60938146952ec62750226979f45ebe4083a7557cff28e9f74a6939bbfed1fff79bba5401c4aecfb31313a62172c365174a35add1697a805c1834db863cf2f2afc907
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:971819 relative average:0.9964796925169405 sigmas:1.363409225541888
-count:25001 cutoff:527583 relative average:0.9295863839451186 sigmas:19.28394860178528
-count:12500 cutoff:514344 relative average:0.7948807340008059 sigmas:39.721175060058385
-count:6250 cutoff:509050 relative average:0.6016080514314299 sigmas:54.552064239860954
-count:3126 cutoff:504684 relative average:0.5022153660682885 sigmas:48.20550095994269
-count:1563 cutoff:499843 relative average:0.5431473982437546 sigmas:31.283563598809707
-count:782 cutoff:492685 relative average:0.6689622326039385 sigmas:16.033987778349672
-count:391 cutoff:486441 relative average:0.6186952801939133 sigmas:13.059338742958055
-count:196 cutoff:482049 relative average:0.4642890016543791 sigmas:12.99030134231287
-count:98 cutoff:478500 relative average:0.3054765313194923 sigmas:11.908596788585683
-count:49 cutoff:474711 relative average:0.1435473737754578 sigmas:10.38393624027693
-count:25 cutoff:471932 relative average:0.11285525674876287 sigmas:7.682898844893948
-count:13 cutoff:470111 relative average:0.09756139125648193 sigmas:5.635727305280706
+count:50000 cutoff:1912757 relative average:1.0022217124941275 sigmas:0.8604655489816408
+count:25000 cutoff:534384 relative average:0.8592560790257264 sigmas:38.544310174667075
+count:12501 cutoff:528020 relative average:0.6565436620494189 sigmas:66.5126941997475
+count:6251 cutoff:523893 relative average:0.45986096461580983 sigmas:73.96750015726977
+count:3125 cutoff:520402 relative average:0.29408181167790776 sigmas:68.35023467890936
+count:1563 cutoff:517088 relative average:0.1780191106221517 sigmas:56.28618799806704
+count:782 cutoff:513882 relative average:0.09821557910321245 sigmas:43.67840109937032
+count:391 cutoff:511026 relative average:0.05072269120780557 sigmas:32.51188168566428
+count:196 cutoff:507809 relative average:0.025267552935387266 sigmas:23.636005709425906
+count:98 cutoff:504226 relative average:0.011518300726081204 sigmas:16.94893048310245
+count:49 cutoff:501350 relative average:0.004239341947847907 sigmas:12.072956363471828
+count:25 cutoff:497863 relative average:0.0015652997397920625 sigmas:8.646698144452417
+count:13 cutoff:494468 relative average:0.0010860387495892664 sigmas:6.23821568858103
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:d7f4661d8f3a7e1029ec60884771e3ac7d715730d71bab0fca63e59c7caa501f computed:d393f220b11e26b00c67a87861fa1b8d69c72c73e00ce3406b803bb30595d075
+expected:9e32ae48fa9c17bec6729fba52ba84e8f97954476d452300dd25eca4c5104a57 computed:300271c4d10a158030d8a5ee9abca573179c7c2f026143b5b57d6bfd1752a900
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:ac2ea560e140a51fcb4d9080a7709228e84a3c462f0d4132b8ab307555631446 computed:ac2ea560e140a51fcb4d9080a7709228e84a3c462f0d4132b8ab307555631446
+expected:e71ea76ca5bb4b39ade352b1519964c89a905661719d25d6370d6f99add93e04 computed:e71ea76ca5bb4b39ade352b1519964c89a905661719d25d6370d6f99add93e04
 Generated shared secret with a modified order:ECDH
-expected:a60ba284935f6cdc0afeb3e5b4aeaf6cf22e5c3956163d8176d41a53f3eb4345 computed:a60ba284935f6cdc0afeb3e5b4aeaf6cf22e5c3956163d8176d41a53f3eb4345
+expected:8b309e8d9377ec202e0131fa405918815b699aa98d8eeef470d646addcffa363 computed:8b309e8d9377ec202e0131fa405918815b699aa98d8eeef470d646addcffa363
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -686,41 +685,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:95915292401681345093827461353495072838559481620923955227864568295046101428109
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420d40e21b5368678f6e82eb8f8b56f89f161e68dc0b232fc567f0fc43bcadd678da00a06082a8648ce3d030107a14403420004cf63ec8f680d8bf492ab74954e984715a6d0ac444245b7e900470734c3d29ba086b312111fc33718c803e6d5ae6451f6b0dc29dcbada6d6d2a15520e37de1830
+S:13227085381202652127986282602088593561696016767698208008440873682180058780790
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104201d3e43d88428aac5675cc21f7c1cfdc033b707b1eb6d96a692cb32e01dde1476a00a06082a8648ce3d030107a144034200046bb0f61562ce307a5d0215a0ed9b621cc4cdb424fc4186dd17618e8926803f24bd4797a20e8eb8baa106fa5fc3ec93c99aedcdbd7cacebceb66577db8642e865
 Public key:
-X:93805310194517469540440721370448610870050203010635101016174791014720824581024
-Y:60926312027851350334771814968195456497525181191277513223470529481496195897392
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004cf63ec8f680d8bf492ab74954e984715a6d0ac444245b7e900470734c3d29ba086b312111fc33718c803e6d5ae6451f6b0dc29dcbada6d6d2a15520e37de1830
-Signature:30450220059520740f1b66a31fe8f8f3f1ff4879a9d8af5a8c476201986851428d464546022100902c96a2c684c4ee0a86a35e926d332cd6b8255749966473ec1ae204d333e3f8
-r:2525048440396178356910751566367804538058029386973887312635082920416300647750
-s:65211831117210439354063011717009052096337202017591494109670906583528296932344
-.BC curve:secp256r1 countLsb:512 countMsb:502
-BC curve:secp224r1 countLsb:504 countMsb:523
-BC curve:secp384r1 countLsb:527 countMsb:507
-BC curve:secp521r1 countLsb:515 countMsb:525
-BC curve:brainpoolP256r1 countLsb:487 countMsb:524
+X:48710138287976115656141225713686052544261388020944588653304460255907589144356
+Y:85613621056579422486728376522254768382439971055735057655983657379613225707621
+encoded:3059301306072a8648ce3d020106082a8648ce3d030107034200046bb0f61562ce307a5d0215a0ed9b621cc4cdb424fc4186dd17618e8926803f24bd4797a20e8eb8baa106fa5fc3ec93c99aedcdbd7cacebceb66577db8642e865
+Signature:3046022100f5aa1831c44c583cf973c387bb3429bccfa22a8efb864342217867efbb80e773022100d73640edd25ea1096421f651ccc3c2d9919707e320adc604383bc9eec55399da
+r:111117178887534915698322688819527426671204567756228486032832244928080412469107
+s:97343120310328370348314564327372233764329760475238236978460332193921816041946
+.BC curve:secp256r1 countLsb:537 countMsb:523
+BC curve:secp224r1 countLsb:505 countMsb:504
+BC curve:secp384r1 countLsb:490 countMsb:514
+BC curve:secp521r1 countLsb:526 countMsb:517
+BC curve:brainpoolP256r1 countLsb:529 countMsb:529
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:498063 relative average:1.002662358794719 sigmas:1.0311271273575224
-count:25000 cutoff:149301 relative average:0.995019730626258 sigmas:1.363902939225312
-count:12503 cutoff:146685 relative average:0.9860286384788154 sigmas:2.705867170394961
-count:6250 cutoff:144595 relative average:0.992055917436037 sigmas:1.0877883047414956
-count:3125 cutoff:141373 relative average:0.9976048396453515 sigmas:0.23191040412624594
-count:1563 cutoff:139288 relative average:0.9892055344376801 sigmas:0.73916477357432
-count:782 cutoff:138127 relative average:0.9904547743744807 sigmas:0.4623280063330531
-count:391 cutoff:137123 relative average:1.002695526285754 sigmas:0.0923193158325238
-count:196 cutoff:136389 relative average:1.0131766973152097 sigmas:0.3195179291625922
-count:98 cutoff:135729 relative average:0.9474015440297583 sigmas:0.9018756486973778
-count:49 cutoff:135073 relative average:0.9455661229561964 sigmas:0.6599756848497756
-count:25 cutoff:134582 relative average:1.03698357627508 sigmas:0.3202871657701884
-count:13 cutoff:133978 relative average:0.877561126413371 sigmas:0.7646305204746523
-....04bdecf3d89f24555e2ddb3c184eeff09ae48116ecd0eae350af3d38f6eb0f79afebf0ede74d7b1a118f982a322b35afb306a5752a2efd2ed416594411b7aa086bfec04a6e519d46ee2b71f246c562c9efa7316c167655ecbd31aabb6476aaa79ff2c25bcd506627b668a8f91459dbe8a4a5b75cbc713571bea7b6775a
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:042d7e177c7dae437f0af6cd0945b780b669faedb1df44be3b8f06f6fae9ad852d3d7ec7593cd6d5b345e2b8d8d0706a8cc64811c7695b5c197be5590972c3737a2669e9107b9ec32e276e09c3e1b0f6be6769994230f174211c1de0a23955be48ad7c9076
-..E.E...E.047f61fabf3ac389116a70c443635ad6e19a57036abccbb4f2ed02dfb7c466511cc64eb0e6732897dc511f77da276209e730ae93fc067380614e9f58bd0b8ad5e92f9d226f8321133fc815b3606cdff2a2acdfb27251bdcfcbd8ccd8f0d5b029b6388b0cd2c530e3c50fe73934b44927f2e86b251a961765264952a9a3629894560ef6dc43
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E........Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:837870 relative average:1.0007142771678876 sigmas:0.2766383575804982
+count:25000 cutoff:137563 relative average:0.9872844390856598 sigmas:3.4822997720575937
+count:12507 cutoff:135946 relative average:0.9738318267370848 sigmas:5.068863648398262
+count:6261 cutoff:134920 relative average:0.9658625896669978 sigmas:4.678569137722634
+count:3126 cutoff:134062 relative average:0.9606227971373696 sigmas:3.813291252889075
+count:1563 cutoff:133321 relative average:0.951792006142094 sigmas:3.301103760878853
+count:782 cutoff:132672 relative average:0.94458914358336 sigmas:2.683853874320398
+count:391 cutoff:132033 relative average:0.9462364242388241 sigmas:1.8413534148094146
+count:196 cutoff:131460 relative average:0.9250397228958085 sigmas:1.8176901189146242
+count:98 cutoff:130852 relative average:0.8983326788757711 sigmas:1.743231421890296
+count:49 cutoff:130454 relative average:0.953396041675939 sigmas:0.5650429655576719
+count:25 cutoff:130044 relative average:0.8349210209027993 sigmas:1.4296258952897614
+count:13 cutoff:129465 relative average:0.7545502805648079 sigmas:1.5328330065802234
+..E.E.E.E..E.E..E.E.E..E........Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -729,18 +722,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:23459509264633785209006480206578845853234666929425691250222645985330938280280452650937926175787602472040054706998006277558618183979147442628440718907813348337976928981167631151954085450540854133493871483387999604219487584383326054605840691068297482484633134541284366989689577263176686268775839322515081476243622576466271201717209796007981646017733445750949817944063989877100821873946742202219136885479039642551961177737919664892876041352397935903564010625953288993051399043077596337991635021123073054433173844880466968196552686493222146659271245103494027402919840780897858872936580519178202401422107203851873199377589
+Modulus:16647004479738943751999720267954240768376043980833610737401283488453261343071989003221220771764243000943087205427534872752007088098056743517907753196492333539839056313902739020270380046317290090197561841259667509224459793596684874811219886196506784841646420691183203212050845966451439137454583009113511523474952277020667085391752532078393347950615524203339019643704692729539321980604682475133225080882510629032671794663469716241169701817798909283577093223597541382456868405118773716011360114792861266867060537022172135066504353570100675381748013285659821932613856824563234839085823581130319388080719955898772211958099
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:2254063045903824487863555027859483838714294179693815368458306022088727258661916327310620277536880430389493331857827571139762557097772120271469417381975077505595933927314533368385108810016567106803956676852682202538567729967221633059996320119277190704575046892693709796513042525996362260013144639118016815781988056412830887660291804629051571377351515765084125356894019567940158733724840481233350439342325921242302380928691316100677649012387816308856340397213669834364754944948162631765063637533273767188027378465646866406572880936219060078261002579791429499014356483171046395568067705542224416912466117550479685901217
-encoded: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
-Signature:6895f102d99a65692056ab5d43ba67a46a30b1e17c4c9d9d1e043208b720adb043b33d4d00fdee0747d51a20c43b4493e7b1d48876bc96e01f437f651795d12d2e8021270538cc03a5c70f8eb46f6338cb1208324a54dcae4c2a81991f3df2ab67e612290a29fd1d68d393524ca9b2f9244d26e05aedb3b52cd576bdc67bf15b76bb919480bc195371cee59fa7ad24b3badf29a638ce34741feb95f43c9581c5d446d47999e79e753a398c5279ce2a0fed4966726f4926d5797f6c541d813fd8c3a406cc02d5a979404aa5b9a784e2e8f0bfe99bcb8fba5f9acb2db7be4110fbb1e5fe2c11aeb880a1d5c5ead111d3a0ae86335025bb7ca95263a806ecce076e
+D:6796779618671203395273029203807308459041551869007518746835887263439467278299590792196674022473833318876895912886308163710548326339743997177963221692047879226376145823693630936789826041462960590712213860085542261803684867434580372616973949293469773544604954832456172109618330658563980780933056626910895240019161096831019300800583683248650714740478974963041007121805445347105486752607886434395434349517040469824240606069746025397344678567501769833062597589225921177591308206461661383485241282115608460596776043072956266120148106830270834604622321400052622819024936321622447249627964216700887773724531661473254495591313
+encoded:308204bd020100300d06092a864886f70d0101010500048204a7308204a3020100028201010083dea32411123b7d41f4ec6e0de155ed59ed330d21e7fb458e49d1fd8fb7c4760cdd65f7394a0de988f7e4dfa39ab98bf58c0bbdce476aa654602ccb70719eeebcbe205056d6cb2a526f1ad962462855e3c85fe79b4e23ff961074ca6963b0124f5632373468b300817fe464129ba3952ecd0acead117cf85ee7d2e2ff4c834a0c3f38cb9bb7d6c80354cdf23f60eb7504c6b5066e6d0516b191605ba294034cca847dfd18401e2a51f26047deb1356ddd0f5f7cb7d6b25971c254f46302fa415c65f84d98bf281ca04d9c32978f683b272f6235bd546a2db59b170271356d7420711eb7142b3c794bb2f4d1e832be3bf44b68c5d815a4ca4f13dceab6c9015302030100010282010035d742f8c8d78ede777d8ec2e87be65f8065ee802025dd5beada8d18600381fd490764486a65a8047fdde6dec0a7bdb63d4d2ec61260ea547b02c18756a3ad66803d886804ecb20ad7997176ec3f04dcfca1a536a51c646a4854f3ba690940ac5924326083cf73b673294a90e9600e8c2c8d9f29ff53b2989df73d0d5d7b59e6db76701ee8e24801bcf4872b0e7fe6aac610df24c35969ed00a0eefb2ebf50a27e61cabf32e10a07bad44cd504f6b99c035d2d7ca6037b751fd271a019e57897be10b5e51b85e9fe243270beff247c9c941ca4c4bc33fd48ea932d1fca5b3574d0ca9d798b8a552fb459273fb81bb43208dca4f83ed20daf4e94e1ef688d9b9102818100db20df4f23b6e3475e712ff7164540b332c257d909b3c66f3ea91ba183fa3e841838816b4fe5241e1a549baf924c9a813423904979a8877c34f58a3cb41e6b2371611c0b9f41d635030e9ebd5581f336a30a4223ef629646567f1583b4f049b3fbbadae717d99a6c4a26473a5e0475f09f7b857fb8bbf56db2641942a90ce5d7028181009a0f06dead25da60f7a4a4f81a2c8d3500ba486b7fcc147a4e2b740ba28c1306d0fc5b7788a2a5501e039ad4b536cab236c0e6da1e8cc1105f2684c69cd57edc2f531ee7a08fd8c390270b389a5325ad0bae8f48f5b7dfd5c4e76391aefb2fce170e2f69dfd91434e7e6b0c28a82f7f8647522776f1994684cf87865d7fed8e502818040a5ef1c031666f15c5c9a611471f407aa5709e1df69e986527f43c6a01049376189f22cbdd2859857fe543c35366272f1f5f810a552e23df3c5e935c5921fdbc20c7b60b6688f10eec8f66e3776f2515142aa86bd8e617578f95f588f1e413057792631fda85655d27e7e8f2ac3b823f87951c67fb2fc5293c9d2660747e5db028180634ee878c658ae4aef97fc97ca1789f6eebf264bd597b2639cdc39f3fe161975bd65cf786065a7f6db422b9e8e2a01c39bb4019bfd31728aa12b6d4fb26d95574e52608ba35ed6b649c8415d7d6db7cdb2c815a94c6bf9280dc3b2d5885c77567c5a328a273801e490d08e84f950af9438fda0f8286feed0c53d2e2f486b0959028181009a4ed4f6302d03cf6a0c6a14a91140826950c1ac486966b653c90afb267d4dda26b4190d93bf45dc2b67ca70705e7b41e130e1da1ca01dbb4d425e81992f796befdc623098abe66ab38b768bd222a05a0ec21a31ca3c20293387dff583e837ee911ff91d29024ceced2856b92ba408845988f479f711a5fd297e543f4f65f9d0
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 64.333
-There were 22 failures:
-1) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
+Time: 807.584
+There were 37 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: expected:<26> but was:<22>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -780,7 +853,7 @@ java.lang.AssertionError: expected:<26> but was:<22>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-2) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+4) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -822,7 +895,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-3) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+5) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -864,7 +937,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-4) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+6) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -900,10 +973,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+7) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:e9801730c79667e6babcbc71ce406514 pt: e9801730c79667e6babcbc71ce406514
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -936,12 +1010,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:e32cee32fc7e4e5d8d0b9ff40af24d70 pt: e32cee32fc7e4e5d8d0b9ff40af24d70
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -974,12 +1047,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:864cf221d3864928ec5b5a48e81f
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+9) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:98610318df902330b36debc72882b4eb pt: 98610318df902330b36debc72882b4eb
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:ce8ed5857741666d9a12bf8d3a77596a pt: ce8ed5857741666d9a12bf8d3a77596a
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1012,7 +1315,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:00db289f6b6780990a3fb293a890
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+16) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1053,7 +1438,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+19) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1091,7 +1476,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+20) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1127,7 +1512,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1163,8 +1548,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<d[7f4661d8f3a7e1029ec60884771e3ac7d715730d71bab0fca63e59c7caa501f]> but was:<d[393f220b11e26b00c67a87861fa1b8d69c72c73e00ce3406b803bb30595d075]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[9e32ae48fa9c17bec6729fba52ba84e8f97954476d452300dd25eca4c5104a57]> but was:<[300271c4d10a158030d8a5ee9abca573179c7c2f026143b5b57d6bfd1752a900]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1200,8 +1585,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<d[7f4661d8f3a7e1029ec6088
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[effa9a49c9810f77c70b13f5f68cd7025af33efe9da24303c21d9d858835a3cd]> but was:<[393fe0e3ddebd005b6b722ab2e0f709f235024fff65e9e3beaa88b765764084c]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<6[bef5b418e41e6deeb570f38320cf47afdf90a5c736d9148d25fdc67685bd2ca]> but was:<6[9fede35ad49507b92503362d8ecfa5a7041da0b1574356590c7a2012b30e1f2]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1237,7 +1622,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[effa9
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.bouncycastle.math.ec.ECAlgorithms.validatePoint(Unknown Source)
 	at org.bouncycastle.math.ec.AbstractECMultiplier.multiply(Unknown Source)
@@ -1279,7 +1664,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1316,7 +1701,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1357,13 +1742,14 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.bouncycastle.jce.interfaces.ECKey
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(Unknown Source)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:388)
+27) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1396,12 +1782,15 @@ java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04ea35cc7bb45f3e471f5d0825cb8226c6d5921195ecd1dd5096ff53ca919c096de331a17f494c12cc15c9b5ac30c22c9eb27c927dc85bc95672c4bf83f30f26b6846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579d846062e13f95579de42642c3aa4ca7a82a939e6418fb73354cf9b0dd0132e2b1edb0d471
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+28) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1434,12 +1823,15 @@ java.lang.AssertionError: Ciphertext repeats:04ea35cc7bb45f3e471f5d0825cb8226c6d
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats: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
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+29) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1472,15 +1864,218 @@ java.lang.AssertionError: Ciphertext repeats:049d2a771b822510e655847ffb5b07ed2df
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+30) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+35) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1513,13 +2108,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.bouncycastle.jce.interfaces.ECKey
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(Unknown Source)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+36) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1552,7 +2148,7 @@ java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+37) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1591,12 +2187,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 22
+Tests run: 96,  Failures: 37
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:26:25 --
+-- JVM shutdown starting at 2018-04-06 20:26:27 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_53.txt b/testlogs/BouncyCastleAllTests_1_53.txt
index 1b718a1..c569c0c 100755
--- a/testlogs/BouncyCastleAllTests_1_53.txt
+++ b/testlogs/BouncyCastleAllTests_1_53.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...E.E.....E.........E..
+.E.E.E.E.....E.........E..
 Provider:BC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -810,41 +810,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:1068572 relative average:1.0015679866427372 sigmas:0.6072786154396956
-count:25003 cutoff:535630 relative average:0.9083940556709714 sigmas:25.088826249394547
-count:12500 cutoff:524347 relative average:0.8302077592192552 sigmas:32.88012604295322
-count:6250 cutoff:516505 relative average:0.7370610926631009 sigmas:36.00439269854506
-count:3125 cutoff:511732 relative average:0.5716182783009007 sigmas:41.4778818490068
-count:1564 cutoff:507793 relative average:0.4401096734495396 sigmas:38.35146565742114
-count:782 cutoff:503451 relative average:0.44293517559366574 sigmas:26.981726757458606
-count:391 cutoff:498542 relative average:0.49859593469573943 sigmas:17.172631745116085
-count:196 cutoff:492695 relative average:0.5706403825344016 sigmas:10.411417410362553
-count:98 cutoff:487037 relative average:0.5010800024312763 sigmas:8.55469591559798
-count:49 cutoff:482049 relative average:0.3297667475018905 sigmas:8.126146323742061
-count:25 cutoff:478623 relative average:0.20764949982818895 sigmas:6.861956618500946
-count:13 cutoff:477332 relative average:0.19316810304911303 sigmas:5.038663581502272
+count:50000 cutoff:2268907 relative average:0.9994118267375883 sigmas:0.22779852500049305
+count:25000 cutoff:557834 relative average:0.8682179738149839 sigmas:36.08999420763491
+count:12500 cutoff:551235 relative average:0.6690601866909937 sigmas:64.08621927713865
+count:6250 cutoff:546923 relative average:0.45947592974479945 sigmas:74.01430653832014
+count:3125 cutoff:543180 relative average:0.28715607683409944 sigmas:69.02081607166731
+count:1563 cutoff:539898 relative average:0.16741638363854874 sigmas:57.01222322833007
+count:782 cutoff:536457 relative average:0.09019545500156449 sigmas:44.066860014007744
+count:391 cutoff:533236 relative average:0.0392029107030542 sigmas:32.90642365706337
+count:196 cutoff:530109 relative average:0.023325439594931045 sigmas:23.68309945514209
+count:98 cutoff:526304 relative average:0.010328202360952271 sigmas:16.96933641927046
+count:49 cutoff:523502 relative average:0.007428506191702663 sigmas:12.03428980194356
+count:25 cutoff:520294 relative average:0.00404791445105099 sigmas:8.625198070374823
+count:13 cutoff:518338 relative average:0.0024710124382209602 sigmas:6.229566530667691
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:47a313dec050c78805cd3203ef363c6dee32fec9326597eb8574454132ee26dd computed:1f5e0d7c5a46beeee5dcbaf1f00e3221421d37e6a35c10f2b42ef1d238d21120
+expected:95c5222146db34bea2415bf7e729e4fc64625eae69bebe848087ce3f74bc800a computed:3d9ae44d11cd7399a324a93b24c69940b959ab2cb5d6f6f59ba70bdcd5c3dc64
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:e9d0e7230c397198771300319d18d9d4506e6d8b365d47692b8773fcea8338cc computed:e9d0e7230c397198771300319d18d9d4506e6d8b365d47692b8773fcea8338cc
+expected:12415c73f8d7a660977dfca7fa11edde8021eebd81ff59a59e80e28d754d73cf computed:12415c73f8d7a660977dfca7fa11edde8021eebd81ff59a59e80e28d754d73cf
 Generated shared secret with a modified order:ECDH
-expected:1e83cc20e64365c26504a15cd31c62dcb4cfe317bf9f9c308f8378cfd60b15fe computed:1e83cc20e64365c26504a15cd31c62dcb4cfe317bf9f9c308f8378cfd60b15fe
+expected:a48f3e880f89ddceac7445f71e5d62f06e73cd4330a015f25799318162a62894 computed:a48f3e880f89ddceac7445f71e5d62f06e73cd4330a015f25799318162a62894
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -854,41 +853,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:99392690621425944008225613990394637357872346412371037844886551569187696887554
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420dbbe44f1dd183a6fc9ad9ebdc0c5117e1ea9f6c9ff7eb628a45e357fc6514702a00a06082a8648ce3d030107a144034200040adab2605fc61d7510f9a704ce1b52a9b30b5322708aeb34196e70dfab3d8d12cb3c59fecd45a04ae8d0bd1fbdb24f748d8ce82ff97f97ac26ba2ae4e8f8f4f2
+S:1502567991953531333155150823379815078313557724002571370082333238231853980652
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042003526c6060347c40aa7b884bc2e3e49c86ae28020b06a92b0f4c2b3e4f845beca00a06082a8648ce3d030107a14403420004fe8e6bcdeb926b515581b0af827c2ab056b2abca7d6bf811bc69c0db22e95c593852e461ef98a4aefd8273db763deb1d43bdc932f347d4340ea45d996ccf4887
 Public key:
-X:4909532255045127954538733927446345074603489188171920297897711355815138266386
-Y:91926140211158760041968632491115154513970703842855592517908835820259258201330
-encoded:3059301306072a8648ce3d020106082a8648ce3d030107034200040adab2605fc61d7510f9a704ce1b52a9b30b5322708aeb34196e70dfab3d8d12cb3c59fecd45a04ae8d0bd1fbdb24f748d8ce82ff97f97ac26ba2ae4e8f8f4f2
-Signature:304602210096f3493d77d8cb0c5d7c9187fae5cf0ae014d18c5d4f126af2194cc4e1066248022100b2c396cc0900f2639bd1addb6d0782acbc85983f129697b798cc2ae7f9d4e1bf
-r:68276776608892514296127015930995209174704062306117290108276419003160606433864
-s:80857262988182540887296546223183723580407906025946866259997754106014067909055
-.BC curve:secp256r1 countLsb:504 countMsb:512
-BC curve:secp224r1 countLsb:502 countMsb:514
-BC curve:secp384r1 countLsb:508 countMsb:497
-BC curve:secp521r1 countLsb:516 countMsb:504
-BC curve:brainpoolP256r1 countLsb:500 countMsb:517
+X:115139099861804988489197333318659738226320658029611026213485142948741351300185
+Y:25475977218489071744321949277887157779071064328457085801413324486171601881223
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004fe8e6bcdeb926b515581b0af827c2ab056b2abca7d6bf811bc69c0db22e95c593852e461ef98a4aefd8273db763deb1d43bdc932f347d4340ea45d996ccf4887
+Signature:30460221009cf460819140e09591a51aa33dc066ecd2cf0a748325479193dbbe9406e5014d022100f99486c9493508436bbe9c3db9319904f48aaf8303e9ea86d83099fb0f2459f1
+r:70992581123574865577052228264174185253827107362560912846369892902760641528141
+s:112888322923489895124463399061906954139687033467999509007560270168014014667249
+.BC curve:secp256r1 countLsb:510 countMsb:510
+BC curve:secp224r1 countLsb:510 countMsb:515
+BC curve:secp384r1 countLsb:480 countMsb:506
+BC curve:secp521r1 countLsb:504 countMsb:488
+BC curve:brainpoolP256r1 countLsb:508 countMsb:535
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:2652924 relative average:0.9994441754173954 sigmas:0.21526993518402068
-count:25001 cutoff:151455 relative average:0.98770148153516 sigmas:3.3681553546295944
-count:12505 cutoff:148300 relative average:0.9804873748326379 sigmas:3.7793592608652284
-count:6252 cutoff:146528 relative average:0.9589035868043816 sigmas:5.628258440231229
-count:3129 cutoff:145300 relative average:0.9435291950325586 sigmas:5.471260428359065
-count:1563 cutoff:144248 relative average:0.9270247987257236 sigmas:4.99706982388561
-count:782 cutoff:143244 relative average:0.9229294468439321 sigmas:3.732952638895013
-count:391 cutoff:142201 relative average:0.938543117734843 sigmas:2.104842143037028
-count:196 cutoff:141185 relative average:0.9497305729291048 sigmas:1.2189688245583625
-count:98 cutoff:140013 relative average:1.013194146956317 sigmas:0.22623249343990767
-count:49 cutoff:138940 relative average:0.9900714844609335 sigmas:0.12037685350180123
-count:25 cutoff:138212 relative average:0.942807157492188 sigmas:0.4953045452640769
-count:13 cutoff:137392 relative average:0.9397958245231083 sigmas:0.3759749553484149
-....0409dc56cf936f52905c031cee13af063e412ffbd5bcbec58829e32742792d7870af26e4d1404b82b4860cf26bf4e7e33585d9a98dcee150f71d8ad7261bda3224748c9b14f375052f40dae22319d1116c266f5e10a7541e4b6b39fc1b99d59060e20f857d4e54793d103ab7f83029d0df3cb39cfb12c826f8f38b750a
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:0490b96e5235bdf095c4d74ba72a13d7b3d22ec35f4dc483a9c0e42bbd28bc9f45a9fe48d3a7c92fe6fc53268dab7f9403541fc3898f9f9bf4e6511bbb74f2d9d4cb0351d5bbee9a1b472bd6689557ce7908dde30552eba67aab9e42d4618b0e5494d4fec5
-..E.E...E.04de50a963392eb34c49438873d30b2471364553303a81a0581ce3483ca5c49309d8f37ec0d1a1a4b9d8590da55911f9d9c166625adaebed2c42dda83397c6b14986aec6dd55c3540f061725204a325f28da47db5447464992cd47202c2ae18da5ac47351f59e437901cf9945a86a80258db6d62943bc06505128b9b7f0aefdd6e4e9ac2ad
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E........Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:1066619 relative average:1.0050852668139185 sigmas:1.9695153681327933
+count:25000 cutoff:137212 relative average:0.9931100574499574 sigmas:1.8868884772865087
+count:12500 cutoff:135560 relative average:0.9769262327921052 sigmas:4.468215806522169
+count:6255 cutoff:134515 relative average:0.9723477757841341 sigmas:3.7879510139580734
+count:3126 cutoff:133664 relative average:0.961706145033509 sigmas:3.7083797620806553
+count:1567 cutoff:132950 relative average:0.9396989507244102 sigmas:4.13447142596344
+count:782 cutoff:132337 relative average:0.9385821764982656 sigmas:2.9748044736582595
+count:391 cutoff:131728 relative average:0.9189105598609192 sigmas:2.7772393370625448
+count:196 cutoff:131175 relative average:0.928473026871546 sigmas:1.734436921981346
+count:98 cutoff:130678 relative average:0.9490619582392938 sigmas:0.8734054756721761
+count:49 cutoff:130278 relative average:0.9431215759267133 sigmas:0.6896142424456686
+count:25 cutoff:129551 relative average:0.9957870284183832 sigmas:0.03648540415102095
+count:13 cutoff:129044 relative average:0.9205078361581982 sigmas:0.49642840408040984
+..E.E.E.E..E.E..E.E.E..E........Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -897,18 +890,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:21866079042971707928918090228587732727317660514934594901429118556434777684027869409575162792826365083788042848721368528521750774224499656313752574535746213729973235115486503386301773272104666319808460336426496347463030374405328280322939528744181851563696265109194128943222973870398470640855431569732401853129542835217966684604012158889982325942739038947889086130171764250396178469450064522873570133522478394615638963180055930833729331324363190295517275510248467447378381559973947746327284698658404192728882580825460597849602644809113475913668680682067022219429938730653938092779918913557285739398071462563445453568639
+Modulus:16690199284280651064283637792896249637950704908504929235828462367950975128752110296644156292612498743626317909291278988535151293133971921057595635002500405855081036236453579408174562357410952852238384938959875399407628201970692992420789973134051393560414328464242130636629223380235368219895646555644518744147760788457700144129795628871114593321113847750894388717438072999866425253661895380059084827172084574874756032329272796850004880587184094654103824331624737157865054600523069768359497503573959702158975034027435414447626639677831296182428986746534075847773401897878274965139642572679791904142822255648672584996933
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:746919484935217207839916861087096922332246964911936460106494347849387709364843121466788701123649581675086825111579265847547076204748155961788314441115052420314734409751272089264602231286423135042462627317089834595021194106668420030663909318633877631982870319938089781256824351199048521313584074249776517313965170139987574039922698407615844309291483607968196348719940358984809165235299229490479366223032708612208114083083401907863349214453707431858207208387938619254616327062370274505037663334868664062651261135732546529000191052221477957766629662750056851708236173270919517175006370523247253221575934799726469379553
-encoded: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
-Signature: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
+D:5445955209953149864720287049791565838881194578877941609221870905098610367285647842266001804162106586860506207657344027500952787402893366279447546526557058287806588940574661166274149392435639734328573824361619474169284912111361281358963382218977402468722709416720109901261846397830892956625394109727027649789004565922804933103662872296829000055740259894326764454988303716048017083394251201369522831312654343435492175062459880647676677593566153013731148724675034528845164389243839382239015630157944078398572775216605887004878796453521722406485266243113639717269416023792620230607928358263272484358796693383062632102151
+encoded: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
+Signature:058699942e810bbc666a6945e527c7f838590d3e217c4ce810e28874f8cd271bdc24b7d1c21b11bf31b8bc1bc861cec80030d749744981485e574134f0de7560b8c47ed2d19bde23d2f68befd09f004faa47624f84bdd2f5fbb387ba2a0812e85bac4cc389ca95d1d96e613bcedef0d1905feba590cf30c92dfed86632c138f427df9a346c064b12d566b6b08b76ec31be1fbec587697995ff81722a030b84405f07ee39f3031b75e5b35fe33e874a72e6d0924c49c1a761d638b23503d4a45dbc3f7e1d8243d9c9226b0b3db0732a865440bdde0b173df842dc3c8ff860b0d2deeeef6d574c63e2ff1b87e1986baebd3261ed946ebf99de2725cc6d9165c756
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 108.431
-There were 22 failures:
-1) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
+Time: 783.898
+There were 37 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: expected:<26> but was:<22>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -948,7 +1021,7 @@ java.lang.AssertionError: expected:<26> but was:<22>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-2) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+4) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -990,7 +1063,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-3) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+5) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1032,7 +1105,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-4) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+6) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -1068,10 +1141,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+7) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:4639d8fe79a607f9524e6ab4670193f5 pt: 4639d8fe79a607f9524e6ab4670193f5
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1104,12 +1178,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:f584cf63829a5fc879d411217741ee2d pt: f584cf63829a5fc879d411217741ee2d
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1142,12 +1215,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:c7390aacaa17e1db6378adee83bc
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+9) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:02f79f6e381708495eed8f91d6ebaefc pt: 02f79f6e381708495eed8f91d6ebaefc
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:83ae5d664a184b574acb8e3d58f12f63 pt: 83ae5d664a184b574acb8e3d58f12f63
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1180,7 +1483,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:b3afaccbdc76638218fe93ecf2b9
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+16) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1221,7 +1606,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+19) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1259,7 +1644,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+20) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1295,7 +1680,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1331,8 +1716,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[47a313dec050c78805cd3203ef363c6dee32fec9326597eb8574454132ee26dd]> but was:<[1f5e0d7c5a46beeee5dcbaf1f00e3221421d37e6a35c10f2b42ef1d238d21120]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[95c5222146db34bea2415bf7e729e4fc64625eae69bebe848087ce3f74bc800a]> but was:<[3d9ae44d11cd7399a324a93b24c69940b959ab2cb5d6f6f59ba70bdcd5c3dc64]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1368,8 +1753,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[47a313dec050c78805cd3203
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[e9b8eea5b19b435e780b04e08f4040197ba43fdb3d54d38ab2907c5c368f0030]> but was:<[a2a00b7533f666bfbdf976d5344a7d4fcd6a75399d1534d42819c75463eed016]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[17350d41bdc2bf299fc656f3482e565342542741b95e372be33d1b1cb58adc62]> but was:<[a9c949fd8d3e4298fee90ba8ab2f927810a18fcf3e1aa02ef14b5c7b6502b84e]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1405,7 +1790,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[e9b8e
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.bouncycastle.math.ec.ECAlgorithms.validatePoint(Unknown Source)
 	at org.bouncycastle.math.ec.AbstractECMultiplier.multiply(Unknown Source)
@@ -1447,7 +1832,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1484,7 +1869,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1525,13 +1910,14 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.bouncycastle.jce.interfaces.ECKey
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(Unknown Source)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:388)
+27) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1564,12 +1950,15 @@ java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04b400a59e0ac455d50b081a3d7b85f3b0ab8ef64de086c37c854b2f333a3644472e24bd8b47838cfe38fb4cc01b626e1e3e833633188f9a348170536b18e962149ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c6249ed5f6689361c62487a7b39b77ffd4febe476de4060cc92b0dcc2ae06e305fac9da4a961
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+28) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1602,12 +1991,15 @@ java.lang.AssertionError: Ciphertext repeats:04b400a59e0ac455d50b081a3d7b85f3b0a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04dbb642f88c7ae95eb74ce02b7c838d63a5fa16a6cb7ecc552209af34d2dc9d4d73b06a7b59ab47d9f4379e42ec795805a7ef4ed7632fd036bba78299c5465a7b88ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c05288ff974ecc072d08ddf065652e54c052455348409071fcd48842c37f06d6a2cbf999f011d9b7c8290f612c53d8ba0738caa5e7f0
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+29) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1640,15 +2032,218 @@ java.lang.AssertionError: Ciphertext repeats:04dbb642f88c7ae95eb74ce02b7c838d63a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+30) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+35) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1681,13 +2276,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.bouncycastle.jce.interfaces.ECKey
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(Unknown Source)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+36) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1720,7 +2316,7 @@ java.lang.ClassCastException: org.bouncycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+37) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1759,12 +2355,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 22
+Tests run: 96,  Failures: 37
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:36:24 --
+-- JVM shutdown starting at 2018-04-06 20:12:59 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_54.txt b/testlogs/BouncyCastleAllTests_1_54.txt
index 93bff90..37f5baf 100755
--- a/testlogs/BouncyCastleAllTests_1_54.txt
+++ b/testlogs/BouncyCastleAllTests_1_54.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...E.E.....E.........E..
+.E.E.E.E.....E.........E..
 Provider:BC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -827,41 +827,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic:9945557dba75da81f17e1c08158f61549657fdf3d8dd3c4e39b49f50e416cf7df8ea232bd0c0fa01561a2fd7c0bca5d2e6c3ba12868cdb4b7ecffeb80473d26a5c9107c47014c227e048523b28fc7372f58d305234cbdd44492470fc40eb99b1c57e14d8c3ca99456723646a036d4d59f02f635c841383f4a8c116c01d7d85181f9176b0a97b19876732b579b448480d0df9ca2033de2f98d0b05aade51aa6ed69f11afa4fbc6c0817af2a871ec538fcbd4b256b54919f121d5d560d53b35911ff925f2cb4b38c16aeb1d007b84137160829984848927914a0608cbaa7ca1cbdf5c3c5f5c9f4c5b7784f82f770968e54f685302af226d2102868303770c9e71708e822250a7620ef69d2d54fd4d48e70f7db6b065220b0e48407a6cc0623712fa460be7c
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:4110224 relative average:0.9950775822983859 sigmas:1.9064441781428003
-count:25000 cutoff:538968 relative average:0.9039150554586963 sigmas:26.31394578095245
-count:12502 cutoff:524429 relative average:0.8200510981437575 sigmas:34.8497426477759
-count:6251 cutoff:517840 relative average:0.6576452663101802 sigmas:46.882602735852934
-count:3125 cutoff:512947 relative average:0.542627981732145 sigmas:44.28485524431692
-count:1563 cutoff:507339 relative average:0.5880455040424026 sigmas:28.2091086371468
-count:782 cutoff:499582 relative average:0.7436838463630279 sigmas:12.414807250351533
-count:391 cutoff:491373 relative average:0.6667107942000492 sigmas:11.414851198607005
-count:196 cutoff:487019 relative average:0.5030227797224668 sigmas:12.051057140150522
-count:98 cutoff:484214 relative average:0.35691814526584975 sigmas:11.026556848588982
-count:49 cutoff:481196 relative average:0.2603220669932903 sigmas:8.968118328436045
-count:25 cutoff:478527 relative average:0.09864019499325749 sigmas:7.806004890860271
-count:13 cutoff:475990 relative average:0.05608889859966713 sigmas:5.894722938911106
+count:50000 cutoff:3004957 relative average:1.0035551830251577 sigmas:1.3769164649154928
+count:25001 cutoff:530083 relative average:0.8830129386248285 sigmas:32.03886698382837
+count:12500 cutoff:523729 relative average:0.6949860223536621 sigmas:59.06570278923739
+count:6251 cutoff:519708 relative average:0.4917394753605405 sigmas:69.60200610100847
+count:3125 cutoff:516264 relative average:0.3105034815028209 sigmas:66.76021333518922
+count:1565 cutoff:512962 relative average:0.18327200149965167 sigmas:55.96225967108492
+count:782 cutoff:509683 relative average:0.09661721381984946 sigmas:43.75581875965837
+count:391 cutoff:506504 relative average:0.04754139787167953 sigmas:32.620838079748026
+count:196 cutoff:503350 relative average:0.024082057330212986 sigmas:23.664752450110267
+count:98 cutoff:499996 relative average:0.014110135236637516 sigmas:16.904489778762258
+count:49 cutoff:496763 relative average:0.004227825990337696 sigmas:12.073095987036366
+count:25 cutoff:493660 relative average:0.002704602099312781 sigmas:8.636831496593052
+count:13 cutoff:491875 relative average:0.0010532867852479665 sigmas:6.238420224532785
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:d8e0c7263bbf6bd824a5b3a7fa489d4ee06a2394e60d39b0ec283dc849880fcb computed:ce96fdb6e6877f9e231be0e957a78fe4ad8d57dd9af9139f660055a5bd537104
+expected:fde0b03338ac81e21d3c9ff4c366673e30a96f0d8a367410287d5b4eab7121ac computed:3cb760a0a673004c97d8aa21b99ad793e74a5264e931e29c6e48620a937e88e2
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:ebcea37b3659b4884503efea03c465cb771e44919cd250be88595f4fb2bad8d3 computed:ebcea37b3659b4884503efea03c465cb771e44919cd250be88595f4fb2bad8d3
+expected:1fc15fbc2d4e9808d14bb7ef639d8bb78a1d2bcdad72ee2cb9a295ae8b4d95d5 computed:1fc15fbc2d4e9808d14bb7ef639d8bb78a1d2bcdad72ee2cb9a295ae8b4d95d5
 Generated shared secret with a modified order:ECDH
-expected:5fd2f05cb0493d794d8f718b055811d3cfe805e7f57b4d387511af1f9b63e9a8 computed:5fd2f05cb0493d794d8f718b055811d3cfe805e7f57b4d387511af1f9b63e9a8
+expected:229bafc3fb4de37e61167e1e8e0c69464fd7ffa7c11e26fdd76a5bc46a2dcf8c computed:229bafc3fb4de37e61167e1e8e0c69464fd7ffa7c11e26fdd76a5bc46a2dcf8c
 ..E...E.Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
 Invalid ECDSA signature was verified:3067022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce
@@ -870,41 +869,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:15630608829132020486439324576892535460783818851586740408998554476188901490722
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420228e9c70147e8d87e1415513e17ec1c48b801e2669c322593bc0b6c886bac022a00a06082a8648ce3d030107a14403420004a90403351b66c0f5de702b8bbfbc31f8cb3d61e701c547a1393e1d194d6487fe4dd82ce97e12fe8e8f2949c3df268cbd5e40a7bf65861c390d59cb00bc97479b
+S:70739175900084609526941825381131720737768307977794247107855866555811921734463
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104209c64f4676e78e8899b93f7007a95156632e9e04a7289451e10f3684db6812b3fa00a06082a8648ce3d030107a144034200043f801f8ef30b76e8a5c8d1537eed5264aec3ed5bc7a3130c3b64746b4a466a3c12c2da11e496e2c38989cab9f274c909d140de6f5280da288817e05151424a39
 Public key:
-X:76447960935833049219796713296947478349003861649670473649694862241194144204798
-Y:35210038278687637728709815457177365518554676218991713715715721713356945967003
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004a90403351b66c0f5de702b8bbfbc31f8cb3d61e701c547a1393e1d194d6487fe4dd82ce97e12fe8e8f2949c3df268cbd5e40a7bf65861c390d59cb00bc97479b
-Signature:3045022046d9dddad2e45c0a3526da941ab54319284f71376bc9bdc312afe2ded4f65b63022100a31418d47f22f910b31592be7b89e3808a599f3ce21f67b720211b3363d47313
-r:32046836399306093651627449896868866636250825807968041078937091229089120279395
-s:73762502631178053463951813714235745246646271164784762588628364619095490196243
-.BC curve:secp256r1 countLsb:505 countMsb:503
-BC curve:secp224r1 countLsb:487 countMsb:509
-BC curve:secp384r1 countLsb:550 countMsb:503
-BC curve:secp521r1 countLsb:499 countMsb:517
-BC curve:brainpoolP256r1 countLsb:508 countMsb:511
+X:28722083693082195996608223087356849530776184965112554437300671315100471552572
+Y:8485904668161768551861384678177215950152993126717028142311994218161979411001
+encoded:3059301306072a8648ce3d020106082a8648ce3d030107034200043f801f8ef30b76e8a5c8d1537eed5264aec3ed5bc7a3130c3b64746b4a466a3c12c2da11e496e2c38989cab9f274c909d140de6f5280da288817e05151424a39
+Signature:304402201efc86c980afe267b26a0c4bdf3d64a0a0d0156c728b5b2a966cb588976fc4b4022023cee84ace0337afdef8a9a75a6ef7efe1d3b6fe1237e7c39868378fe1e2b1de
+r:14015561184334222511953139383521000599546910580495505385975259634613045150900
+s:16196523417642835242599785178998727504679924674471402865455956224586612388318
+.BC curve:secp256r1 countLsb:522 countMsb:522
+BC curve:secp224r1 countLsb:532 countMsb:513
+BC curve:secp384r1 countLsb:505 countMsb:503
+BC curve:secp521r1 countLsb:535 countMsb:511
+BC curve:brainpoolP256r1 countLsb:509 countMsb:521
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:495982 relative average:0.9989065535594972 sigmas:0.42348998540371724
-count:25005 cutoff:148193 relative average:0.9886310939461712 sigmas:3.113814484668577
-count:12503 cutoff:146078 relative average:0.9717870412971388 sigmas:5.464071530754298
-count:6251 cutoff:144494 relative average:0.9724498806729743 sigmas:3.772757238708204
-count:3126 cutoff:142718 relative average:0.975745454015345 sigmas:2.3488120364652763
-count:1563 cutoff:140254 relative average:0.9772489405608817 sigmas:1.55790776317764
-count:782 cutoff:138618 relative average:0.9599035641211412 sigmas:1.9420918884696807
-count:392 cutoff:137575 relative average:0.9708623347594585 sigmas:0.9992137698949898
-count:196 cutoff:136680 relative average:0.9855285592597719 sigmas:0.3509137886911608
-count:98 cutoff:135905 relative average:0.9383690622824996 sigmas:1.0567504484398837
-count:49 cutoff:135330 relative average:0.9743391450343468 sigmas:0.31112133196317154
-count:25 cutoff:134813 relative average:0.9120059939127426 sigmas:0.7620504465232741
-count:13 cutoff:134378 relative average:1.0156915648839853 sigmas:0.0979937912922263
-....04b893b7f558830cd2dd5060d088c5dc6a43879370f0e5e525808f0c35b72d8000180a191c8a4ff8367f29f57412250bca826ed1c6b85b177c857896192a941d67eeedfadf3d445fe9dabc602f4d1e00d76f3fef23f4e4afeb751d4ee71c0aad58e0e09df7c360419bd43385c01b606e27b0fd09a7cd6ff53697bfc9ca
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:04762f3a84370f13824082457d333d9eb0bfa2ef5e0389d0e5e68482a5711ec3edb859ed9e4e604d829bf601891b7b8de6bf95dcb37e8c31a3be5df788d5d8cb3f381ad767b40eb54591b489e71e4443bca693417cc36a9e62e4e8ceb696f718edc6ecc972
-...E...E.048ca14adba04a976c0d615ceb168028bb96526a627afa2bbc1807c1aef81041d5356480b7fe689482c441433f3551cc07400c3cf57ee5c908229b6bc946c26cd1b5782571a4911ed73707dbc0e63676aa0a4adbd4a86bd6750708e0d30924ed01945d24855047edd68733dccdae4aec6fade1973b6d1646e78ae050c71306755b611929da
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E........Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:1117421 relative average:0.9962891602602493 sigmas:1.4372020512499313
+count:25003 cutoff:137338 relative average:0.9818876622912825 sigmas:4.960565573258021
+count:12518 cutoff:135650 relative average:0.9637658731319364 sigmas:7.021758708913605
+count:6251 cutoff:134592 relative average:0.9503221594959073 sigmas:6.802962634769899
+count:3125 cutoff:133740 relative average:0.9360882403730033 sigmas:6.18822951655424
+count:1565 cutoff:132978 relative average:0.9259460309005991 sigmas:5.0741831503568875
+count:782 cutoff:132298 relative average:0.9322250104884097 sigmas:3.2827171414748566
+count:391 cutoff:131727 relative average:0.9408308675608137 sigmas:2.026488798888313
+count:196 cutoff:131194 relative average:0.9118880514950852 sigmas:2.13660120190167
+count:98 cutoff:130602 relative average:0.9456061555441889 sigmas:0.9326601484553706
+count:49 cutoff:130070 relative average:0.9619193081975531 sigmas:0.46170385092446753
+count:25 cutoff:129673 relative average:1.0885176826655731 sigmas:0.7665856187251571
+count:13 cutoff:129127 relative average:1.0277266294506682 sigmas:0.17315274542175746
+E..E.E.E.E..E.E..E.E.E..E........Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -913,18 +906,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:20642889054059944207925687264474157927245934082973630546129138915523868106912995650139827024333488134142553808912142874994230981340670169119094062982236337765753559980934838536568082104002387775049723101003169165153902811045486231016150899730112730495184424395349200840922696498110418385340834070705018882868322969573182698354894667250470077050196593403106535474632228282342875330931946548291849105506480566642290429076902431118761186891744880538607960228228619369127545712328427722096800210630289414510570946949980447035769503080637026301772782070211801465151274226585103718480811067533063879719759503307609943904239
+Modulus:25973535921523778737271628035169247955757510550542131519331728024515854167614700173287717041916440022293134043328191560400647882410188017242443953052329984090181614796368235897937858303461352142389506469313529592278745617304603990931179130294268094105043117839162237883266610651680532113662012449431051576286453111374485849299004468906846144573675901167317879821258112819280793937577920444246499797477221367520398271147245886961762844849558063078665376967381918499349061178013442810713513940555537137466917461630132977363819484812146333395407777412413004435660147778851089805190018037708614657162551107226260917125631
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:2781751906265627008747664785940820082311861495853969790624219758799594750846119307936125888664436889950409142368548908258106884839253072288558817419589242976917658192648824733138547951561668792214346545714779261822431491764166984287030786745906748544611765018959159974161295056579674992296528313707239792240246661679880962572922297624311148151664277142859085993085968080100430186583164918993634439206513272404214225801786262594366225978575815369011844122828927610189905951276160734603886165272419237048844160122965210741534332738747997546690605574398599098284744520945128645779053441704684247998388713291156746761393
-encoded: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
-Signature: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
+D:1248139561807613315174340915189277582057956877700240874593212823166688487295337937537687874086528858154556614031589045692587501172424006728548303342327813243836997403991064044044925692108289236315852404606427044203272393672245695847728664332210532234231286028474524942760592934459809814353615482461431838975191400244796554430290940013547377826318229090206724242775708277020349757090564931396221512215611411610897259723868761951750502693762979973828493073462907301385200069071869375074397546088622352289613912887779749705999108899343417107001619899025414900499948010934632579338230694953129640178899554492296761129409
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 85.262
-There were 21 failures:
-1) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
+Time: 697.864
+There were 38 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: expected:<26> but was:<22>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -964,7 +1037,7 @@ java.lang.AssertionError: expected:<26> but was:<22>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-2) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+4) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1006,7 +1079,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-3) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+5) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1048,7 +1121,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-4) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+6) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -1084,10 +1157,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+7) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:5d45f7a1cb6658f5254b5b64069b65d4 pt: 5d45f7a1cb6658f5254b5b64069b65d4
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1120,12 +1194,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:92674c65068cd38f8f9fc16092bc56d7 pt: 92674c65068cd38f8f9fc16092bc56d7
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1158,12 +1231,283 @@ java.lang.AssertionError: Ciphertext repeats at 256:180fbaac02f32579a098177f2e7b
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+9) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:f6eb3f1f438abfd1c8582b1074a42823 pt: f6eb3f1f438abfd1c8582b1074a42823
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:2a8e45a1af29d4f130e0dfc73bc0a300 pt: 2a8e45a1af29d4f130e0dfc73bc0a300
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1196,7 +1540,48 @@ java.lang.AssertionError: Ciphertext repeats at 256:9f6b8c57c1bf77314db7929c2ccd
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+17) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1237,7 +1622,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+19) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1275,7 +1660,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+20) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1311,7 +1696,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1347,8 +1732,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[d8e0c7263bbf6bd824a5b3a7fa489d4ee06a2394e60d39b0ec283dc849880fcb]> but was:<[ce96fdb6e6877f9e231be0e957a78fe4ad8d57dd9af9139f660055a5bd537104]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[fde0b03338ac81e21d3c9ff4c366673e30a96f0d8a367410287d5b4eab7121ac]> but was:<[3cb760a0a673004c97d8aa21b99ad793e74a5264e931e29c6e48620a937e88e2]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1384,8 +1769,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[d8e0c7263bbf6bd824a5b3a7
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[8a5fbfed648b2366c7603365d35eaac91bcae3094b8c7eea14cc48cd4febfc67]> but was:<[6a0d6e0dd9c05e6b6bed5ec9e56b8e97712eb0ee3ff15734e7d58124e956b222]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<6[25baa71de16831ac00c59082f0b9adfbe5dbfdb38383d9a8546e4f4c2f85bd9]> but was:<6[887513f551f0063d220b6b27193409da2a234143cd62e8f57802bd5f37a1963]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1421,7 +1806,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[8a5fb
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.bouncycastle.math.ec.ECAlgorithms.validatePoint(Unknown Source)
 	at org.bouncycastle.math.ec.AbstractECMultiplier.multiply(Unknown Source)
@@ -1463,7 +1848,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1500,7 +1885,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1541,12 +1926,11 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats: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
+27) testTimingAll(com.google.security.wycheproof.EcdsaTest)
+java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+	at com.google.security.wycheproof.EcdsaTest.testTiming(EcdsaTest.java:905)
+	at com.google.security.wycheproof.EcdsaTest.testTimingAll(EcdsaTest.java:919)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1579,12 +1963,14 @@ java.lang.AssertionError: Ciphertext repeats:04cbeeecebb2feb453a09645d62ccab1c49
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04d788896c8c2e3c962b4135773f3b3dac9952d3005b6d685d1efe68b164cdf133e18ad67a3f141b9271da81f2e0833bf931daf8fa1451b76c6a2cd876ea72710a42518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af442518800ab3cfca0bc5363cfcdb40af40ef801d63c0ab06288618913d3dd1a606cba73bd59abc7889bf1275673f9d045a46fc427
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+28) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1617,15 +2003,300 @@ java.lang.AssertionError: Ciphertext repeats:04d788896c8c2e3c962b4135773f3b3dac9
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+29) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+30) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+35) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+36) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1658,12 +2329,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-javax.crypto.ShortBufferException: Need at least 102 bytes of space in output buffer
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:759)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+37) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1696,7 +2369,7 @@ javax.crypto.ShortBufferException: Need at least 102 bytes of space in output bu
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+38) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1735,12 +2408,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 21
+Tests run: 96,  Failures: 38
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:31:34 --
+-- JVM shutdown starting at 2018-04-06 19:59:55 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_55.txt b/testlogs/BouncyCastleAllTests_1_55.txt
index 76af5e3..373ffbc 100755
--- a/testlogs/BouncyCastleAllTests_1_55.txt
+++ b/testlogs/BouncyCastleAllTests_1_55.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...E.E.....E.........E..
+.E.E.E.E.....E.........E..
 Provider:BC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -878,31 +878,30 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:2370831 relative average:1.0017738833779744 sigmas:0.6870220781009134
-count:25001 cutoff:521597 relative average:0.8938560397998936 sigmas:29.069302040864244
-count:12500 cutoff:511759 relative average:0.7955506730212634 sigmas:39.59144192659809
-count:6252 cutoff:504025 relative average:0.7369150257546794 sigmas:36.03015717566586
-count:3125 cutoff:498926 relative average:0.5790449784115027 sigmas:40.75879470286584
-count:1563 cutoff:494799 relative average:0.45143431406719675 sigmas:37.56373381268354
-count:782 cutoff:491003 relative average:0.4277371353554053 sigmas:27.717851802500924
-count:391 cutoff:486001 relative average:0.4570723465124693 sigmas:18.59477675340286
-count:196 cutoff:480441 relative average:0.5103292972120489 sigmas:11.873883506893666
-count:98 cutoff:475236 relative average:0.5209239886210016 sigmas:8.214442431204336
-count:49 cutoff:471048 relative average:0.40083173435122105 sigmas:7.264529148706278
-count:25 cutoff:468389 relative average:0.1933244294051202 sigmas:6.9860153674747325
-count:13 cutoff:463909 relative average:0.12783237879757722 sigmas:5.446685048677022
+count:50000 cutoff:2367500 relative average:0.9957614120413957 sigmas:1.6415980575109652
+count:25001 cutoff:542187 relative average:0.892544638032662 sigmas:29.42845138856815
+count:12500 cutoff:533668 relative average:0.6903458188548032 sigmas:59.9642743329421
+count:6251 cutoff:528990 relative average:0.5003430300878863 sigmas:68.42382160783372
+count:3125 cutoff:525219 relative average:0.3290820702068024 sigmas:64.96134921902528
+count:1563 cutoff:521750 relative average:0.1973165199706153 sigmas:54.96477332225213
+count:782 cutoff:518542 relative average:0.10353618555673953 sigmas:43.42069473698058
+count:391 cutoff:515282 relative average:0.05582289594398837 sigmas:32.33720432698347
+count:196 cutoff:512156 relative average:0.02776697977480742 sigmas:23.57539782956643
+count:98 cutoff:508701 relative average:0.01727099195508926 sigmas:16.850292375990474
+count:49 cutoff:505414 relative average:0.005034243045123205 sigmas:12.063318699859517
+count:25 cutoff:502144 relative average:0.004147287951492726 sigmas:8.62433747061637
+count:13 cutoff:499594 relative average:0.005024290348982267 sigmas:6.213621315225631
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey:3082024b0201003081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc63255102010104820155308201510201010420319579245829fba5982d55f3a855324a97702bfc254bc27b2418438dd7511fb3a081e33081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101a1440342000476aabc753793ea8a6c7563d54d5bfeed8e0e68170dda17ecf31a972a4f0d1078dd990c627227dba0bae6ab4d76f78effa30b632866ec3345d099ea48018b2786
 ...E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.E..E...E.Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
@@ -913,41 +912,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:91957258999082495774437854580343626565685330640286356467671391932498428301152
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420cb4df6d2cc2af11e5f0462396e1131898a431bad2c4e09f6a1161eb3d1bc0f60a00a06082a8648ce3d030107a144034200040dc1db34c51b397b3f70bdd6d756d60ff9774012ba94edf93c20613d3fa75b6467d9a4f01f8f66fc23cff3b898c782506cf1f7ff06caeb59a44e56b45087a82f
+S:17544660856978285125929843966309755411334281276132725679502957320813283660879
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042026c9ed179fd145f5b29a7425f8c30b2106f180ce05c2a33a17951f987154544fa00a06082a8648ce3d030107a1440342000428479f20676f8dc872cbaa6d53d31e398eb75dba98a49692744c685f777e1dd7092780cdd270e7491ab3febc90964d7960a57281a6ba4b7c4bd4141e9c7e7f67
 Public key:
-X:6222581420209586033340782170881094352863114487312646860182437320758093372260
-Y:46972767577245094490624427066216902178286647877996593534982182700100591527983
-encoded:3059301306072a8648ce3d020106082a8648ce3d030107034200040dc1db34c51b397b3f70bdd6d756d60ff9774012ba94edf93c20613d3fa75b6467d9a4f01f8f66fc23cff3b898c782506cf1f7ff06caeb59a44e56b45087a82f
-Signature:30450220616919b42e09be215372a2a1b368fdaafd97679ad0d66eb692fa2510f5116ed102210098e0b786d15c7bf82802bfcacc2be8cf418d87a19cf8de5e32b43b24be09447b
-r:44060042655676013207455042419317815334416408222144737442083061938499932483281
-s:69148593381429479968559338491382610669407428683743866470492431140875663918203
-.BC curve:secp256r1 countLsb:502 countMsb:514
-BC curve:secp224r1 countLsb:523 countMsb:502
-BC curve:secp384r1 countLsb:512 countMsb:508
-BC curve:secp521r1 countLsb:509 countMsb:516
-BC curve:brainpoolP256r1 countLsb:531 countMsb:527
+X:18219058336210410500622476546254785755088342284283557150565997119984608615895
+Y:4140611645259237481833027332587460336052470748104107715060850184442842349415
+encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000428479f20676f8dc872cbaa6d53d31e398eb75dba98a49692744c685f777e1dd7092780cdd270e7491ab3febc90964d7960a57281a6ba4b7c4bd4141e9c7e7f67
+Signature:30460221009ecd07a15994fe834516b6b37cbd9f1def019499d6322077caed8a1f088d42a7022100b19e2fd3cab7afa3df579f7fa51779853f71c24fd8bd644ef73f4b5e53f69337
+r:71827686386645585709129406256331792475666837039917910950555616520341350597287
+s:80338866127448828384783205257610241632458235114004647197717527035824123056951
+.BC curve:secp256r1 countLsb:519 countMsb:515
+BC curve:secp224r1 countLsb:525 countMsb:504
+BC curve:secp384r1 countLsb:532 countMsb:506
+BC curve:secp521r1 countLsb:508 countMsb:500
+BC curve:brainpoolP256r1 countLsb:500 countMsb:486
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:516167 relative average:0.9972031963988279 sigmas:1.08319737699525
-count:25003 cutoff:150748 relative average:0.9881117012248759 sigmas:3.2559400435705346
-count:12500 cutoff:147498 relative average:0.9782546178940567 sigmas:4.210975137661776
-count:6253 cutoff:145928 relative average:0.9675989260368721 sigmas:4.437764454449132
-count:3126 cutoff:144785 relative average:0.9547937027552672 sigmas:4.377781186241632
-count:1563 cutoff:143802 relative average:0.9519017678005299 sigmas:3.293587691561986
-count:782 cutoff:142921 relative average:0.9397615177293137 sigmas:2.917682462976909
-count:391 cutoff:142094 relative average:0.9046396361055415 sigmas:3.266005454594954
-count:196 cutoff:141259 relative average:0.9172323849589455 sigmas:2.007008002613717
-count:98 cutoff:140422 relative average:0.929680655964916 sigmas:1.205725583532259
-count:49 cutoff:139696 relative average:0.9072133917021327 sigmas:1.1249778388372869
-count:25 cutoff:139222 relative average:0.8769187230519861 sigmas:1.0659151256720805
-count:13 cutoff:138671 relative average:0.8113152389027 sigmas:1.1783359553809183
-....0493af445c1015d8220467b7ca130a25f68f5f15ef9728f2ff70b040da8816c15edba92ace2d3641a0a4410e924f4cf68458f3493050db3c0b8f0310e7827f9af5bac58c3016243bb237552a1d7e23ea1c2cb157013bde74a3f26eee239d8322e32d74d282d6f9b91fbf401ce058585ac156cd7a91e3c0c9dd5192965c
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:04befab604552ecb6b0d1cab88b5371458e7cb5db902d8845bd75e8d115b124f2b14bb98e8c1014450b30cdacda665786c56422eeadc8dd49d92095d051fb10f65485ebaf069573ef85e8f0ba1edb41623e0f69557d96af55f6e70fd5968d5e779445bc05e
-...E...E.04a10979a3b012ea425d98818d853d28c4381bd2809087a19d12dc2b29a247b704546f06eee6ec974cea40f5b250f1bd4577191069cce10b0021f5aa1630af9b2b77a22289a48897c9e4e36391770a45b0d01b6b999a10e7775b184200c08ed80680a5230b1f5727a173daefd1fb0d04b99da8a892daceb86485276ce72cda52305985da0e
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E........Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:6333367 relative average:1.002519123911631 sigmas:0.9756524956779761
+count:25004 cutoff:139031 relative average:0.9943891344724773 sigmas:1.5367217312640757
+count:12509 cutoff:136570 relative average:0.9765407238302765 sigmas:4.54450443464553
+count:6250 cutoff:135373 relative average:0.9694712114504977 sigmas:4.180326535466944
+count:3127 cutoff:134448 relative average:0.9443254865562909 sigmas:5.392386320185573
+count:1563 cutoff:133701 relative average:0.9490262102517432 sigmas:3.4904951560564172
+count:783 cutoff:133006 relative average:0.9198548166809685 sigmas:3.8843551860389254
+count:391 cutoff:132371 relative average:0.8966108227205559 sigmas:3.5409849873734744
+count:196 cutoff:131792 relative average:0.8658128622791758 sigmas:3.2538651635659366
+count:98 cutoff:131309 relative average:0.9128767158737834 sigmas:1.4938531357732643
+count:49 cutoff:130769 relative average:0.8491934431043091 sigmas:1.828432330605043
+count:25 cutoff:130243 relative average:0.9548588725803642 sigmas:0.390933631008749
+count:13 cutoff:129897 relative average:0.8289848423108606 sigmas:1.0679893174644621
+..E.E.E.E..E.E..E.E.E..E........Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -956,18 +949,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:24796912570862934492396474647086082250747627083422190366676084221166857887119052674005020360912144872680930958713202206329533338013758867195407283976740747225057781050536131299315600650638122501685744968016649941226544622684204342896466922494281504403989353971897102414676343273632848699778746657284591455662808228691869713904224664595251797616227517098267186562682478980669721295332656352747026052194019098548422732084840060447398597051755285784257074828431614605739256243628619512262160836686875134209764045391094657052351615115220706208500284604451330872431774193632137763415972012917684785724763517099219193963559
+Modulus:21856240641518021523182966854272399121723891811865034638425452528692126703252088204068432093162186247617491926474873832502909814938115992470568662665794586104684931725912486086079381552022233001267239209715695968430139630750828668848394768275160067495177978828379771085237123514540694752144863559359888962727489216361937696666649686635057492486229510718882948080732662051631739192852409672439953825567580547223302853792187285286672955655436927107945282257728876871105026381797928718696502666275121009683687215805137068116671218890974101959736585220249912850273889758889601494786605262991050439141148440171952608177277
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:7129533295280074990314277000397379310173452204600825992634350900704138168774651106035927776075614474814635733326714209894676239196076389437463714420460593252083003011051044784976484475334149294280551328750747437974453824942222903599464824764022558058568005811868976315665140856387441720706332655800747010071385034022648337139269083881121711179662174307143545149871987146170197557507919337407954317891668576690212804957711218356779676298997312947353789054260533527931054343962358540140163696382313642783902156195137125113517199515311472617150333363082643945668231824905525743931797040870146416096202736803866718459153
-encoded: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
-Signature:b9d6ff7a0a262fa2d21fb58e89de4cb16b93b0b45698bcebbcba5e9f2d5363efed05e8a808a67fba2e67683839e4e21943c6446b29d3c6ce166a71ca81ca22e30bd1af5dc913d49dcc05ac47cd8aae83d44876dfa0ad1ff4fc1d1d12d96b09ea16a50817aab17ba046f02bede482c4e6dfc391fe54a9058c6210d51141b1fd3dc91f37ef845a2ed01c06172c7491de67f42450a06bfa32cfe8eadd2d4a3e54f5d697f04a5fa5876abfbd3c1e0ab00b2a584988f034aac42ad9cd41dd657e523dc83f8219691fa629705562d48606fd68eee1f31a62a4ff3b0fd6ec342a1e0ff920cf4a6a79b4fd9f6cb082c69a4cca419934a780a757da9dd03aa566a650e6d6
+D:2537894491385814788461821227108548717767349996006727704936412923132689689972815222438634179607919760507333469039989469541589387547172783354456681308065624002573391068162931155149977777604852116203727518591581035441862804065090043333327497239329968012547178218166380181556288965708755162180484484897519798073667296684894264919415694693055024445809532800059057538948202303068057259890332846679594282667913091543047968529949617284194390431268163527794674919446761532623137262686338742563866181214681332964473313030420982796165213002093309309051883170789351458527863458985289041935421609314382003264516350322553793517273
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 76.633
-There were 22 failures:
-1) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
+Time: 599.501
+There were 38 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: expected:<26> but was:<22>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1007,7 +1080,7 @@ java.lang.AssertionError: expected:<26> but was:<22>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-2) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+4) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1049,7 +1122,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-3) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+5) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1091,7 +1164,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-4) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+6) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -1127,10 +1200,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+7) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:f7caf7a4ad108233befca4ee85df98cf pt: f7caf7a4ad108233befca4ee85df98cf
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1163,12 +1237,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:bbd68a723ff074bf5bbb4764dbd8d3a9 pt: bbd68a723ff074bf5bbb4764dbd8d3a9
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1201,12 +1274,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:1995faa8949cf8cf6bf1d0abc0fd
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+9) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:9e76859b803a435297f08e46309ca339 pt: 9e76859b803a435297f08e46309ca339
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:9ac2b701c6d245d15850a693109db68e pt: 9ac2b701c6d245d15850a693109db68e
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1239,7 +1542,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:4dd23f019fde781bbbbf7c356056
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+16) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1280,7 +1665,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+19) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1318,7 +1703,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+20) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1354,7 +1739,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1390,7 +1775,7 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalStateException: ECDHC public key has wrong domain parameters
 	at org.bouncycastle.crypto.agreement.ECDHCBasicAgreement.calculateAgreement(Unknown Source)
 	at org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi.engineDoPhase(Unknown Source)
@@ -1429,7 +1814,7 @@ java.lang.IllegalStateException: ECDHC public key has wrong domain parameters
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalStateException: ECDH public key has wrong domain parameters
 	at org.bouncycastle.crypto.agreement.ECDHBasicAgreement.calculateAgreement(Unknown Source)
 	at org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi.engineDoPhase(Unknown Source)
@@ -1468,7 +1853,7 @@ java.lang.IllegalStateException: ECDH public key has wrong domain parameters
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testWrongOrderEcdh(com.google.security.wycheproof.EcdhTest)
+24) testWrongOrderEcdh(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalStateException: ECDH public key has wrong domain parameters
 	at org.bouncycastle.crypto.agreement.ECDHBasicAgreement.calculateAgreement(Unknown Source)
 	at org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi.engineDoPhase(Unknown Source)
@@ -1507,7 +1892,7 @@ java.lang.IllegalStateException: ECDH public key has wrong domain parameters
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+25) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.bouncycastle.math.ec.ECAlgorithms.validatePoint(Unknown Source)
 	at org.bouncycastle.math.ec.AbstractECMultiplier.multiply(Unknown Source)
@@ -1549,7 +1934,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testEncode(com.google.security.wycheproof.EcdhTest)
+26) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1586,7 +1971,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+27) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1627,12 +2012,14 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04001f2f414249a0495820c76060388bab90bb3b5c4dfde4fed130b795f202bdc8fa7a86f7f27fa023636484844e47b38885275bf64dd12575b224c3b1bfe8908937a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100237a10ce53b41100244a00dba509eec09971cf93404b7f9ee59a4e3f3103fcd2568e29473
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+28) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1665,12 +2052,15 @@ java.lang.AssertionError: Ciphertext repeats:04001f2f414249a0495820c76060388bab9
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats: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
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+29) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1703,15 +2093,259 @@ java.lang.AssertionError: Ciphertext repeats:04d3e59b7aa18f4423466d1929a2bf043b0
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+30) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+35) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+36) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1744,12 +2378,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-javax.crypto.ShortBufferException: Need at least 102 bytes of space in output buffer
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:759)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+37) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1782,7 +2418,7 @@ javax.crypto.ShortBufferException: Need at least 102 bytes of space in output bu
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+38) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1821,12 +2457,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 22
+Tests run: 96,  Failures: 38
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:32:51 --
+-- JVM shutdown starting at 2018-04-06 19:48:16 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_56.txt b/testlogs/BouncyCastleAllTests_1_56.txt
index cd909ff..1c78e21 100755
--- a/testlogs/BouncyCastleAllTests_1_56.txt
+++ b/testlogs/BouncyCastleAllTests_1_56.txt
@@ -1,1383 +1,4 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-....E.....E.........E..
-Provider:BC
-AlgorithmParameterGenerator.1.2.840.113549.3.2
-AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
-AlgorithmParameterGenerator.AES
-AlgorithmParameterGenerator.CAMELLIA
-AlgorithmParameterGenerator.CAST5
-AlgorithmParameterGenerator.CCM
-AlgorithmParameterGenerator.DES
-AlgorithmParameterGenerator.DESEDE
-AlgorithmParameterGenerator.DH
-AlgorithmParameterGenerator.DSA
-AlgorithmParameterGenerator.ELGAMAL
-AlgorithmParameterGenerator.ElGamal
-AlgorithmParameterGenerator.GCM
-AlgorithmParameterGenerator.GOST3410
-AlgorithmParameterGenerator.IDEA
-AlgorithmParameterGenerator.NOEKEON
-AlgorithmParameterGenerator.RC2
-AlgorithmParameterGenerator.SEED
-AlgorithmParameterGenerator.SHACAL-2
-AlgorithmParameterGenerator.SM4
-AlgorithmParameterGenerator.Shacal2
-AlgorithmParameters.1.2.840.113549.3.2
-AlgorithmParameters.1.3.6.1.4.1.188.7.1.1.2
-AlgorithmParameters.AES
-AlgorithmParameters.BLOWFISH
-AlgorithmParameters.CAMELLIA
-AlgorithmParameters.CAST5
-AlgorithmParameters.CCM
-AlgorithmParameters.DES
-AlgorithmParameters.DESEDE
-AlgorithmParameters.DH
-AlgorithmParameters.DSA
-AlgorithmParameters.EC
-AlgorithmParameters.ECIES
-AlgorithmParameters.ELGAMAL
-AlgorithmParameters.ElGamal
-AlgorithmParameters.GCM
-AlgorithmParameters.GOST3410
-AlgorithmParameters.IDEA
-AlgorithmParameters.IES
-AlgorithmParameters.NOEKEON
-AlgorithmParameters.OAEP
-AlgorithmParameters.PBKDF2
-AlgorithmParameters.PKCS12PBE
-AlgorithmParameters.PSS
-AlgorithmParameters.RC2
-AlgorithmParameters.RC5
-AlgorithmParameters.RC5-64
-AlgorithmParameters.RC6
-AlgorithmParameters.RIJNDAEL
-AlgorithmParameters.SEED
-AlgorithmParameters.SHACAL-2
-AlgorithmParameters.SKIPJACK
-AlgorithmParameters.SM4
-AlgorithmParameters.Serpent
-AlgorithmParameters.Shacal2
-AlgorithmParameters.TEA
-AlgorithmParameters.Threefish-1024
-AlgorithmParameters.Threefish-256
-AlgorithmParameters.Threefish-512
-AlgorithmParameters.Tnepres
-AlgorithmParameters.Twofish
-AlgorithmParameters.XTEA
-CertPathBuilder.PKIX
-CertPathBuilder.RFC3280
-CertPathBuilder.RFC3281
-CertPathValidator.PKIX
-CertPathValidator.RFC3280
-CertPathValidator.RFC3281
-CertStore.Collection
-CertStore.LDAP
-CertStore.Multi
-CertificateFactory.X.509
-Cipher.1.2.392.200011.61.1.1.1.2
-Cipher.1.2.392.200011.61.1.1.1.3
-Cipher.1.2.392.200011.61.1.1.1.4
-Cipher.1.2.410.200004.1.4
-Cipher.1.2.643.2.2.21
-Cipher.1.2.840.113533.7.66.10
-Cipher.1.2.840.113549.1.1.1
-Cipher.1.2.840.113549.1.1.7
-Cipher.1.2.840.113549.1.9.16.3.6
-Cipher.1.2.840.113549.3.2
-Cipher.1.2.840.113549.3.7
-Cipher.1.3.14.3.2.7
-Cipher.1.3.6.1.4.1.11591.13.2.1
-Cipher.1.3.6.1.4.1.11591.13.2.2
-Cipher.1.3.6.1.4.1.11591.13.2.21
-Cipher.1.3.6.1.4.1.11591.13.2.22
-Cipher.1.3.6.1.4.1.11591.13.2.23
-Cipher.1.3.6.1.4.1.11591.13.2.24
-Cipher.1.3.6.1.4.1.11591.13.2.3
-Cipher.1.3.6.1.4.1.11591.13.2.4
-Cipher.1.3.6.1.4.1.11591.13.2.41
-Cipher.1.3.6.1.4.1.11591.13.2.42
-Cipher.1.3.6.1.4.1.11591.13.2.43
-Cipher.1.3.6.1.4.1.11591.13.2.44
-Cipher.1.3.6.1.4.1.188.7.1.1.2
-Cipher.1.3.6.1.4.1.3029.1.1.2
-Cipher.2.16.840.1.101.3.4.1.1
-Cipher.2.16.840.1.101.3.4.1.2
-Cipher.2.16.840.1.101.3.4.1.21
-Cipher.2.16.840.1.101.3.4.1.22
-Cipher.2.16.840.1.101.3.4.1.23
-Cipher.2.16.840.1.101.3.4.1.24
-Cipher.2.16.840.1.101.3.4.1.3
-Cipher.2.16.840.1.101.3.4.1.4
-Cipher.2.16.840.1.101.3.4.1.41
-Cipher.2.16.840.1.101.3.4.1.42
-Cipher.2.16.840.1.101.3.4.1.43
-Cipher.2.16.840.1.101.3.4.1.44
-Cipher.2.5.8.1.1
-Cipher.AES
-Cipher.AESRFC3211WRAP
-Cipher.AESRFC5649WRAP
-Cipher.AESWRAP
-Cipher.ARC4
-Cipher.BLOWFISH
-Cipher.BROKENPBEWITHMD5ANDDES
-Cipher.BROKENPBEWITHSHA1ANDDES
-Cipher.BROKENPBEWITHSHAAND2-KEYTRIPLEDES-CBC
-Cipher.BROKENPBEWITHSHAAND3-KEYTRIPLEDES-CBC
-Cipher.CAMELLIA
-Cipher.CAMELLIARFC3211WRAP
-Cipher.CAMELLIAWRAP
-Cipher.CAST5
-Cipher.CAST6
-Cipher.CCM
-Cipher.CHACHA
-Cipher.CHACHA7539
-Cipher.DES
-Cipher.DESEDE
-Cipher.DESEDERFC3211WRAP
-Cipher.DESEDEWRAP
-Cipher.DESRFC3211WRAP
-Cipher.DHIES
-Cipher.DHIESWITHAES-CBC
-Cipher.DHIESWITHDESEDE-CBC
-Cipher.DHIESwithAES-CBC
-Cipher.ECIES
-Cipher.ECIESWITHAES-CBC
-Cipher.ECIESWITHDESEDE-CBC
-Cipher.ECIESwithAES-CBC
-Cipher.ECIESwithDESEDE-CBC
-Cipher.ELGAMAL
-Cipher.ELGAMAL/PKCS1
-Cipher.ElGamal
-Cipher.GCM
-Cipher.GOST28147
-Cipher.Grain128
-Cipher.Grainv1
-Cipher.HC128
-Cipher.HC256
-Cipher.IDEA
-Cipher.IES
-Cipher.IESWITHAES-CBC
-Cipher.IESWITHDESEDE-CBC
-Cipher.IESwithAES-CBC
-Cipher.NOEKEON
-Cipher.OID.1.2.392.200011.61.1.1.1.2
-Cipher.OID.1.2.392.200011.61.1.1.1.3
-Cipher.OID.1.2.392.200011.61.1.1.1.4
-Cipher.OID.1.2.410.200004.1.4
-Cipher.OID.1.2.840.113533.7.66.10
-Cipher.OID.1.2.840.113549.1.1.1
-Cipher.OID.1.2.840.113549.1.1.7
-Cipher.OID.1.2.840.113549.1.9.16.3.6
-Cipher.OID.1.2.840.113549.3.2
-Cipher.OID.1.2.840.113549.3.7
-Cipher.OID.1.3.14.3.2.7
-Cipher.OID.1.3.6.1.4.1.11591.13.2.1
-Cipher.OID.1.3.6.1.4.1.11591.13.2.2
-Cipher.OID.1.3.6.1.4.1.11591.13.2.21
-Cipher.OID.1.3.6.1.4.1.11591.13.2.22
-Cipher.OID.1.3.6.1.4.1.11591.13.2.23
-Cipher.OID.1.3.6.1.4.1.11591.13.2.24
-Cipher.OID.1.3.6.1.4.1.11591.13.2.3
-Cipher.OID.1.3.6.1.4.1.11591.13.2.4
-Cipher.OID.1.3.6.1.4.1.11591.13.2.41
-Cipher.OID.1.3.6.1.4.1.11591.13.2.42
-Cipher.OID.1.3.6.1.4.1.11591.13.2.43
-Cipher.OID.1.3.6.1.4.1.11591.13.2.44
-Cipher.OID.1.3.6.1.4.1.188.7.1.1.2
-Cipher.OID.1.3.6.1.4.1.3029.1.1.2
-Cipher.OID.2.16.840.1.101.3.4.1.1
-Cipher.OID.2.16.840.1.101.3.4.1.2
-Cipher.OID.2.16.840.1.101.3.4.1.21
-Cipher.OID.2.16.840.1.101.3.4.1.22
-Cipher.OID.2.16.840.1.101.3.4.1.23
-Cipher.OID.2.16.840.1.101.3.4.1.24
-Cipher.OID.2.16.840.1.101.3.4.1.3
-Cipher.OID.2.16.840.1.101.3.4.1.4
-Cipher.OID.2.16.840.1.101.3.4.1.41
-Cipher.OID.2.16.840.1.101.3.4.1.42
-Cipher.OID.2.16.840.1.101.3.4.1.43
-Cipher.OID.2.16.840.1.101.3.4.1.44
-Cipher.OID.2.5.8.1.1
-Cipher.OLDPBEWITHSHAAND3-KEYTRIPLEDES-CBC
-Cipher.OLDPBEWITHSHAANDTWOFISH-CBC
-Cipher.PBEWITHMD2ANDDES
-Cipher.PBEWITHMD5AND128BITAES-CBC-OPENSSL
-Cipher.PBEWITHMD5AND192BITAES-CBC-OPENSSL
-Cipher.PBEWITHMD5AND256BITAES-CBC-OPENSSL
-Cipher.PBEWITHMD5ANDDES
-Cipher.PBEWITHMD5ANDRC2
-Cipher.PBEWITHSHA1ANDDES
-Cipher.PBEWITHSHA1ANDRC2
-Cipher.PBEWITHSHA256AND128BITAES-CBC-BC
-Cipher.PBEWITHSHA256AND192BITAES-CBC-BC
-Cipher.PBEWITHSHA256AND256BITAES-CBC-BC
-Cipher.PBEWITHSHAAND128BITAES-CBC-BC
-Cipher.PBEWITHSHAAND128BITRC2-CBC
-Cipher.PBEWITHSHAAND128BITRC4
-Cipher.PBEWITHSHAAND192BITAES-CBC-BC
-Cipher.PBEWITHSHAAND2-KEYTRIPLEDES-CBC
-Cipher.PBEWITHSHAAND256BITAES-CBC-BC
-Cipher.PBEWITHSHAAND3-KEYTRIPLEDES-CBC
-Cipher.PBEWITHSHAAND40BITRC2-CBC
-Cipher.PBEWITHSHAAND40BITRC4
-Cipher.PBEWITHSHAANDIDEA-CBC
-Cipher.PBEWITHSHAANDTWOFISH-CBC
-Cipher.RC2
-Cipher.RC2WRAP
-Cipher.RC5
-Cipher.RC5-64
-Cipher.RC6
-Cipher.RIJNDAEL
-Cipher.RSA
-Cipher.RSA/1
-Cipher.RSA/2
-Cipher.RSA/ISO9796-1
-Cipher.RSA/OAEP
-Cipher.RSA/PKCS1
-Cipher.RSA/RAW
-Cipher.SALSA20
-Cipher.SEED
-Cipher.SEEDWRAP
-Cipher.SHACAL-2
-Cipher.SKIPJACK
-Cipher.SM4
-Cipher.Serpent
-Cipher.Shacal2
-Cipher.TEA
-Cipher.Threefish-1024
-Cipher.Threefish-256
-Cipher.Threefish-512
-Cipher.Tnepres
-Cipher.Twofish
-Cipher.VMPC
-Cipher.VMPC-KSA3
-Cipher.XSALSA20
-Cipher.XTEA
-KeyAgreement.1.2.840.113549.1.9.16.3.10
-KeyAgreement.1.2.840.113549.1.9.16.3.5
-KeyAgreement.1.3.132.1.11.0
-KeyAgreement.1.3.132.1.11.1
-KeyAgreement.1.3.132.1.11.2
-KeyAgreement.1.3.132.1.11.3
-KeyAgreement.1.3.132.1.14.0
-KeyAgreement.1.3.132.1.14.1
-KeyAgreement.1.3.132.1.14.2
-KeyAgreement.1.3.132.1.14.3
-KeyAgreement.1.3.132.1.15.0
-KeyAgreement.1.3.132.1.15.1
-KeyAgreement.1.3.132.1.15.2
-KeyAgreement.1.3.132.1.15.3
-KeyAgreement.1.3.133.16.840.63.0.16
-KeyAgreement.1.3.133.16.840.63.0.2
-KeyAgreement.1.3.133.16.840.63.0.3
-KeyAgreement.DH
-KeyAgreement.ECCDH
-KeyAgreement.ECCDHWITHSHA1CKDF
-KeyAgreement.ECCDHWITHSHA256CKDF
-KeyAgreement.ECCDHWITHSHA384CKDF
-KeyAgreement.ECCDHWITHSHA512CKDF
-KeyAgreement.ECDH
-KeyAgreement.ECDHC
-KeyAgreement.ECDHWITHSHA1KDF
-KeyAgreement.ECMQV
-KeyAgreement.ECMQVWITHSHA1CKDF
-KeyAgreement.ECMQVWITHSHA224CKDF
-KeyAgreement.ECMQVWITHSHA256CKDF
-KeyAgreement.ECMQVWITHSHA384CKDF
-KeyAgreement.ECMQVWITHSHA512CKDF
-KeyAgreement.OID.1.2.840.113549.1.9.16.3.10
-KeyAgreement.OID.1.2.840.113549.1.9.16.3.5
-KeyFactory.DH
-KeyFactory.DSA
-KeyFactory.DSTU4145
-KeyFactory.EC
-KeyFactory.ECDH
-KeyFactory.ECDHC
-KeyFactory.ECDSA
-KeyFactory.ECGOST3410
-KeyFactory.ECMQV
-KeyFactory.ELGAMAL
-KeyFactory.ElGamal
-KeyFactory.GOST3410
-KeyFactory.RSA
-KeyFactory.X.509
-KeyGenerator.1.2.392.200011.61.1.1.1.2
-KeyGenerator.1.2.392.200011.61.1.1.1.3
-KeyGenerator.1.2.392.200011.61.1.1.1.4
-KeyGenerator.1.2.392.200011.61.1.1.3.2
-KeyGenerator.1.2.392.200011.61.1.1.3.3
-KeyGenerator.1.2.392.200011.61.1.1.3.4
-KeyGenerator.1.2.410.200004.1.4
-KeyGenerator.1.2.410.200004.7.1.1.1
-KeyGenerator.1.2.840.113549.3.2
-KeyGenerator.1.2.840.113549.3.7
-KeyGenerator.1.3.6.1.4.1.188.7.1.1.2
-KeyGenerator.2.16.840.1.101.3.4.1.1
-KeyGenerator.2.16.840.1.101.3.4.1.2
-KeyGenerator.2.16.840.1.101.3.4.1.21
-KeyGenerator.2.16.840.1.101.3.4.1.22
-KeyGenerator.2.16.840.1.101.3.4.1.23
-KeyGenerator.2.16.840.1.101.3.4.1.24
-KeyGenerator.2.16.840.1.101.3.4.1.25
-KeyGenerator.2.16.840.1.101.3.4.1.26
-KeyGenerator.2.16.840.1.101.3.4.1.27
-KeyGenerator.2.16.840.1.101.3.4.1.3
-KeyGenerator.2.16.840.1.101.3.4.1.4
-KeyGenerator.2.16.840.1.101.3.4.1.41
-KeyGenerator.2.16.840.1.101.3.4.1.42
-KeyGenerator.2.16.840.1.101.3.4.1.43
-KeyGenerator.2.16.840.1.101.3.4.1.44
-KeyGenerator.2.16.840.1.101.3.4.1.45
-KeyGenerator.2.16.840.1.101.3.4.1.46
-KeyGenerator.2.16.840.1.101.3.4.1.47
-KeyGenerator.2.16.840.1.101.3.4.1.5
-KeyGenerator.2.16.840.1.101.3.4.1.6
-KeyGenerator.2.16.840.1.101.3.4.1.7
-KeyGenerator.2.16.840.1.101.3.4.2
-KeyGenerator.2.16.840.1.101.3.4.22
-KeyGenerator.2.16.840.1.101.3.4.42
-KeyGenerator.AES
-KeyGenerator.AES-GMAC
-KeyGenerator.AESWRAP
-KeyGenerator.ARC4
-KeyGenerator.BLOWFISH
-KeyGenerator.CAMELLIA
-KeyGenerator.CAMELLIA-GMAC
-KeyGenerator.CAST5
-KeyGenerator.CAST6
-KeyGenerator.CAST6-GMAC
-KeyGenerator.CHACHA
-KeyGenerator.CHACHA7539
-KeyGenerator.DES
-KeyGenerator.DESEDE
-KeyGenerator.DESEDEWRAP
-KeyGenerator.GOST28147
-KeyGenerator.Grain128
-KeyGenerator.Grainv1
-KeyGenerator.HC128
-KeyGenerator.HC256
-KeyGenerator.HMACGOST3411
-KeyGenerator.HMACGOST3411-2012-256
-KeyGenerator.HMACGOST3411-2012-512
-KeyGenerator.HMACKECCAK224
-KeyGenerator.HMACKECCAK256
-KeyGenerator.HMACKECCAK288
-KeyGenerator.HMACKECCAK384
-KeyGenerator.HMACKECCAK512
-KeyGenerator.HMACMD2
-KeyGenerator.HMACMD4
-KeyGenerator.HMACMD5
-KeyGenerator.HMACRIPEMD128
-KeyGenerator.HMACRIPEMD160
-KeyGenerator.HMACRIPEMD256
-KeyGenerator.HMACRIPEMD320
-KeyGenerator.HMACSHA1
-KeyGenerator.HMACSHA224
-KeyGenerator.HMACSHA256
-KeyGenerator.HMACSHA3-224
-KeyGenerator.HMACSHA3-256
-KeyGenerator.HMACSHA3-384
-KeyGenerator.HMACSHA3-512
-KeyGenerator.HMACSHA384
-KeyGenerator.HMACSHA512
-KeyGenerator.HMACSHA512/224
-KeyGenerator.HMACSHA512/256
-KeyGenerator.HMACSkein-1024-1024
-KeyGenerator.HMACSkein-1024-384
-KeyGenerator.HMACSkein-1024-512
-KeyGenerator.HMACSkein-256-128
-KeyGenerator.HMACSkein-256-160
-KeyGenerator.HMACSkein-256-224
-KeyGenerator.HMACSkein-256-256
-KeyGenerator.HMACSkein-512-128
-KeyGenerator.HMACSkein-512-160
-KeyGenerator.HMACSkein-512-224
-KeyGenerator.HMACSkein-512-256
-KeyGenerator.HMACSkein-512-384
-KeyGenerator.HMACSkein-512-512
-KeyGenerator.HMACTIGER
-KeyGenerator.HMACWHIRLPOOL
-KeyGenerator.IDEA
-KeyGenerator.NOEKEON
-KeyGenerator.NOEKEON-GMAC
-KeyGenerator.OID.1.2.392.200011.61.1.1.1.2
-KeyGenerator.OID.1.2.392.200011.61.1.1.1.3
-KeyGenerator.OID.1.2.392.200011.61.1.1.1.4
-KeyGenerator.OID.1.2.392.200011.61.1.1.3.2
-KeyGenerator.OID.1.2.392.200011.61.1.1.3.3
-KeyGenerator.OID.1.2.392.200011.61.1.1.3.4
-KeyGenerator.OID.1.2.410.200004.1.4
-KeyGenerator.OID.1.2.410.200004.7.1.1.1
-KeyGenerator.OID.1.3.6.1.4.1.188.7.1.1.2
-KeyGenerator.OID.2.16.840.1.101.3.4.1.1
-KeyGenerator.OID.2.16.840.1.101.3.4.1.2
-KeyGenerator.OID.2.16.840.1.101.3.4.1.21
-KeyGenerator.OID.2.16.840.1.101.3.4.1.22
-KeyGenerator.OID.2.16.840.1.101.3.4.1.23
-KeyGenerator.OID.2.16.840.1.101.3.4.1.24
-KeyGenerator.OID.2.16.840.1.101.3.4.1.25
-KeyGenerator.OID.2.16.840.1.101.3.4.1.26
-KeyGenerator.OID.2.16.840.1.101.3.4.1.27
-KeyGenerator.OID.2.16.840.1.101.3.4.1.3
-KeyGenerator.OID.2.16.840.1.101.3.4.1.4
-KeyGenerator.OID.2.16.840.1.101.3.4.1.41
-KeyGenerator.OID.2.16.840.1.101.3.4.1.42
-KeyGenerator.OID.2.16.840.1.101.3.4.1.43
-KeyGenerator.OID.2.16.840.1.101.3.4.1.44
-KeyGenerator.OID.2.16.840.1.101.3.4.1.45
-KeyGenerator.OID.2.16.840.1.101.3.4.1.46
-KeyGenerator.OID.2.16.840.1.101.3.4.1.47
-KeyGenerator.OID.2.16.840.1.101.3.4.1.5
-KeyGenerator.OID.2.16.840.1.101.3.4.1.6
-KeyGenerator.OID.2.16.840.1.101.3.4.1.7
-KeyGenerator.POLY1305
-KeyGenerator.POLY1305-AES
-KeyGenerator.POLY1305-CAMELLIA
-KeyGenerator.POLY1305-CAST6
-KeyGenerator.POLY1305-NOEKEON
-KeyGenerator.POLY1305-RC6
-KeyGenerator.POLY1305-SEED
-KeyGenerator.POLY1305-SERPENT
-KeyGenerator.POLY1305-SM4
-KeyGenerator.POLY1305-Twofish
-KeyGenerator.RC2
-KeyGenerator.RC5
-KeyGenerator.RC5-64
-KeyGenerator.RC6
-KeyGenerator.RC6-GMAC
-KeyGenerator.RIJNDAEL
-KeyGenerator.SALSA20
-KeyGenerator.SEED
-KeyGenerator.SEED-CMAC
-KeyGenerator.SEED-GMAC
-KeyGenerator.SERPENT-GMAC
-KeyGenerator.SHACAL-2
-KeyGenerator.SIPHASH
-KeyGenerator.SKIPJACK
-KeyGenerator.SM4
-KeyGenerator.SM4-CMAC
-KeyGenerator.SM4-GMAC
-KeyGenerator.Serpent
-KeyGenerator.Shacal2
-KeyGenerator.Skein-MAC-1024-1024
-KeyGenerator.Skein-MAC-1024-384
-KeyGenerator.Skein-MAC-1024-512
-KeyGenerator.Skein-MAC-256-128
-KeyGenerator.Skein-MAC-256-160
-KeyGenerator.Skein-MAC-256-224
-KeyGenerator.Skein-MAC-256-256
-KeyGenerator.Skein-MAC-512-128
-KeyGenerator.Skein-MAC-512-160
-KeyGenerator.Skein-MAC-512-224
-KeyGenerator.Skein-MAC-512-256
-KeyGenerator.Skein-MAC-512-384
-KeyGenerator.Skein-MAC-512-512
-KeyGenerator.TEA
-KeyGenerator.TNEPRES-GMAC
-KeyGenerator.Threefish-1024
-KeyGenerator.Threefish-256
-KeyGenerator.Threefish-512
-KeyGenerator.Tnepres
-KeyGenerator.Twofish
-KeyGenerator.Twofish-GMAC
-KeyGenerator.VMPC
-KeyGenerator.VMPC-KSA3
-KeyGenerator.XSALSA20
-KeyGenerator.XTEA
-KeyPairGenerator.DH
-KeyPairGenerator.DSA
-KeyPairGenerator.DSTU4145
-KeyPairGenerator.EC
-KeyPairGenerator.ECDH
-KeyPairGenerator.ECDHC
-KeyPairGenerator.ECDHWITHSHA1KDF
-KeyPairGenerator.ECDSA
-KeyPairGenerator.ECGOST3410
-KeyPairGenerator.ECIES
-KeyPairGenerator.ECMQV
-KeyPairGenerator.ELGAMAL
-KeyPairGenerator.ElGamal
-KeyPairGenerator.GOST3410
-KeyPairGenerator.RSA
-KeyStore.BCFKS
-KeyStore.BCFKS-DEF
-KeyStore.BCPKCS12
-KeyStore.BKS
-KeyStore.BKS-V1
-KeyStore.BouncyCastle
-KeyStore.PKCS12
-KeyStore.PKCS12-3DES-3DES
-KeyStore.PKCS12-3DES-40RC2
-KeyStore.PKCS12-DEF
-KeyStore.PKCS12-DEF-3DES-3DES
-KeyStore.PKCS12-DEF-3DES-40RC2
-Mac.AES-GMAC
-Mac.AESCCMMAC
-Mac.AESCMAC
-Mac.BLOWFISHCMAC
-Mac.CAMELLIA-GMAC
-Mac.CAST6-GMAC
-Mac.DESCMAC
-Mac.DESEDECMAC
-Mac.DESEDEMAC
-Mac.DESEDEMAC/CFB8
-Mac.DESEDEMAC64
-Mac.DESEDEMAC64WITHISO7816-4PADDING
-Mac.DESMAC
-Mac.DESMAC/CFB8
-Mac.DESMAC64
-Mac.DESMAC64WITHISO7816-4PADDING
-Mac.DESWITHISO9797
-Mac.GOST28147MAC
-Mac.HMACGOST3411
-Mac.HMACGOST3411-2012-256
-Mac.HMACGOST3411-2012-512
-Mac.HMACKECCAK224
-Mac.HMACKECCAK256
-Mac.HMACKECCAK288
-Mac.HMACKECCAK384
-Mac.HMACKECCAK512
-Mac.HMACMD2
-Mac.HMACMD4
-Mac.HMACMD5
-Mac.HMACRIPEMD128
-Mac.HMACRIPEMD160
-Mac.HMACRIPEMD256
-Mac.HMACRIPEMD320
-Mac.HMACSHA1
-Mac.HMACSHA224
-Mac.HMACSHA256
-Mac.HMACSHA3-224
-Mac.HMACSHA3-256
-Mac.HMACSHA3-384
-Mac.HMACSHA3-512
-Mac.HMACSHA384
-Mac.HMACSHA512
-Mac.HMACSHA512/224
-Mac.HMACSHA512/256
-Mac.HMACSkein-1024-1024
-Mac.HMACSkein-1024-384
-Mac.HMACSkein-1024-512
-Mac.HMACSkein-256-128
-Mac.HMACSkein-256-160
-Mac.HMACSkein-256-224
-Mac.HMACSkein-256-256
-Mac.HMACSkein-512-128
-Mac.HMACSkein-512-160
-Mac.HMACSkein-512-224
-Mac.HMACSkein-512-256
-Mac.HMACSkein-512-384
-Mac.HMACSkein-512-512
-Mac.HMACTIGER
-Mac.HMACWHIRLPOOL
-Mac.IDEAMAC
-Mac.IDEAMAC/CFB8
-Mac.ISO9797ALG3MAC
-Mac.ISO9797ALG3WITHISO7816-4PADDING
-Mac.NOEKEON-GMAC
-Mac.OLDHMACSHA384
-Mac.OLDHMACSHA512
-Mac.PBEWITHHMACRIPEMD160
-Mac.PBEWITHHMACSHA
-Mac.PBEWITHHMACSHA1
-Mac.PBEWITHHMACSHA224
-Mac.PBEWITHHMACSHA256
-Mac.PBEWITHHMACSHA384
-Mac.PBEWITHHMACSHA512
-Mac.POLY1305
-Mac.POLY1305-AES
-Mac.POLY1305-CAMELLIA
-Mac.POLY1305-CAST6
-Mac.POLY1305-NOEKEON
-Mac.POLY1305-RC6
-Mac.POLY1305-SEED
-Mac.POLY1305-SERPENT
-Mac.POLY1305-SM4
-Mac.POLY1305-Twofish
-Mac.RC2MAC
-Mac.RC2MAC/CFB8
-Mac.RC5MAC
-Mac.RC5MAC/CFB8
-Mac.RC6-GMAC
-Mac.SEED-CMAC
-Mac.SEED-GMAC
-Mac.SERPENT-GMAC
-Mac.SIPHASH-2-4
-Mac.SIPHASH-4-8
-Mac.SKIPJACKMAC
-Mac.SKIPJACKMAC/CFB8
-Mac.SM4-CMAC
-Mac.SM4-GMAC
-Mac.Shacal-2CMAC
-Mac.Skein-MAC-1024-1024
-Mac.Skein-MAC-1024-384
-Mac.Skein-MAC-1024-512
-Mac.Skein-MAC-256-128
-Mac.Skein-MAC-256-160
-Mac.Skein-MAC-256-224
-Mac.Skein-MAC-256-256
-Mac.Skein-MAC-512-128
-Mac.Skein-MAC-512-160
-Mac.Skein-MAC-512-224
-Mac.Skein-MAC-512-256
-Mac.Skein-MAC-512-384
-Mac.Skein-MAC-512-512
-Mac.TNEPRES-GMAC
-Mac.Threefish-1024CMAC
-Mac.Threefish-256CMAC
-Mac.Threefish-512CMAC
-Mac.Twofish-GMAC
-Mac.VMPCMAC
-MessageDigest.2.16.840.1.101.3.4.2.10
-MessageDigest.2.16.840.1.101.3.4.2.7
-MessageDigest.2.16.840.1.101.3.4.2.8
-MessageDigest.2.16.840.1.101.3.4.2.9
-MessageDigest.BLAKE2B-160
-MessageDigest.BLAKE2B-256
-MessageDigest.BLAKE2B-384
-MessageDigest.BLAKE2B-512
-MessageDigest.GOST3411
-MessageDigest.GOST3411-2012-256
-MessageDigest.GOST3411-2012-512
-MessageDigest.KECCAK-224
-MessageDigest.KECCAK-256
-MessageDigest.KECCAK-288
-MessageDigest.KECCAK-384
-MessageDigest.KECCAK-512
-MessageDigest.MD2
-MessageDigest.MD4
-MessageDigest.MD5
-MessageDigest.OID.2.16.840.1.101.3.4.2.10
-MessageDigest.OID.2.16.840.1.101.3.4.2.7
-MessageDigest.OID.2.16.840.1.101.3.4.2.8
-MessageDigest.OID.2.16.840.1.101.3.4.2.9
-MessageDigest.RIPEMD128
-MessageDigest.RIPEMD160
-MessageDigest.RIPEMD256
-MessageDigest.RIPEMD320
-MessageDigest.SHA-1
-MessageDigest.SHA-224
-MessageDigest.SHA-256
-MessageDigest.SHA-384
-MessageDigest.SHA-512
-MessageDigest.SHA-512/224
-MessageDigest.SHA-512/256
-MessageDigest.SHA3-224
-MessageDigest.SHA3-256
-MessageDigest.SHA3-384
-MessageDigest.SHA3-512
-MessageDigest.SM3
-MessageDigest.Skein-1024-1024
-MessageDigest.Skein-1024-384
-MessageDigest.Skein-1024-512
-MessageDigest.Skein-256-128
-MessageDigest.Skein-256-160
-MessageDigest.Skein-256-224
-MessageDigest.Skein-256-256
-MessageDigest.Skein-512-128
-MessageDigest.Skein-512-160
-MessageDigest.Skein-512-224
-MessageDigest.Skein-512-256
-MessageDigest.Skein-512-384
-MessageDigest.Skein-512-512
-MessageDigest.TIGER
-MessageDigest.Tiger
-MessageDigest.WHIRLPOOL
-Provider.id className
-Provider.id info
-Provider.id name
-Provider.id version
-SecretKeyFactory.1.3.14.3.2.17
-SecretKeyFactory.2.16.840.1.101.3.4.1
-SecretKeyFactory.AES
-SecretKeyFactory.DES
-SecretKeyFactory.DESEDE
-SecretKeyFactory.OID.1.3.14.3.2.17
-SecretKeyFactory.OID.2.16.840.1.101.3.4.1
-SecretKeyFactory.PBEWITHHMACGOST3411
-SecretKeyFactory.PBEWITHHMACRIPEMD160
-SecretKeyFactory.PBEWITHHMACSHA1
-SecretKeyFactory.PBEWITHHMACSHA256
-SecretKeyFactory.PBEWITHHMACTIGER
-SecretKeyFactory.PBEWITHMD2ANDDES
-SecretKeyFactory.PBEWITHMD2ANDRC2
-SecretKeyFactory.PBEWITHMD5AND128BITAES-CBC-OPENSSL
-SecretKeyFactory.PBEWITHMD5AND192BITAES-CBC-OPENSSL
-SecretKeyFactory.PBEWITHMD5AND256BITAES-CBC-OPENSSL
-SecretKeyFactory.PBEWITHMD5ANDDES
-SecretKeyFactory.PBEWITHMD5ANDRC2
-SecretKeyFactory.PBEWITHSHA1ANDDES
-SecretKeyFactory.PBEWITHSHA1ANDRC2
-SecretKeyFactory.PBEWITHSHA256AND128BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHA256AND192BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHA256AND256BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND128BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND128BITRC2-CBC
-SecretKeyFactory.PBEWITHSHAAND128BITRC4
-SecretKeyFactory.PBEWITHSHAAND192BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND2-KEYTRIPLEDES-CBC
-SecretKeyFactory.PBEWITHSHAAND256BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND3-KEYTRIPLEDES-CBC
-SecretKeyFactory.PBEWITHSHAAND40BITRC2-CBC
-SecretKeyFactory.PBEWITHSHAAND40BITRC4
-SecretKeyFactory.PBEWITHSHAANDIDEA-CBC
-SecretKeyFactory.PBEWITHSHAANDTWOFISH-CBC
-SecretKeyFactory.PBKDF-OPENSSL
-SecretKeyFactory.PBKDF2
-SecretKeyFactory.PBKDF2WITHASCII
-SecretKeyFactory.PBKDF2WITHHMACSHA224
-SecretKeyFactory.PBKDF2WITHHMACSHA256
-SecretKeyFactory.PBKDF2WITHHMACSHA384
-SecretKeyFactory.PBKDF2WITHHMACSHA512
-SecretKeyFactory.TLS10KDF
-SecretKeyFactory.TLS11KDF
-SecretKeyFactory.TLS12WITHSHA256KDF
-SecretKeyFactory.TLS12WITHSHA384KDF
-SecretKeyFactory.TLS12WITHSHA512KDF
-SecureRandom.DEFAULT
-SecureRandom.NONCEANDIV
-Signature.1.2.840.113549.1.1.10
-Signature.DDSA
-Signature.DETDSA
-Signature.DSA
-Signature.DSTU4145
-Signature.ECDDSA
-Signature.ECDSA
-Signature.ECGOST3410
-Signature.GOST3410
-Signature.GOST3411WITHDSTU4145
-Signature.GOST3411WITHDSTU4145LE
-Signature.GOST3411WITHECGOST3410
-Signature.MD2WITHRSA
-Signature.MD4WITHRSA
-Signature.MD5WITHRSA
-Signature.MD5WITHRSA/ISO9796-2
-Signature.NONEWITHDSA
-Signature.NONEwithECDSA
-Signature.OID.1.2.840.113549.1.1.10
-Signature.RAWRSASSA-PSS
-Signature.RIPEMD128WITHRSA
-Signature.RIPEMD128WITHRSA/X9.31
-Signature.RIPEMD160WITHECDSA
-Signature.RIPEMD160WITHPLAIN-ECDSA
-Signature.RIPEMD160WITHRSA
-Signature.RIPEMD160WITHRSA/X9.31
-Signature.RIPEMD160withRSA/ISO9796-2
-Signature.RIPEMD256WITHRSA
-Signature.RMD128WITHRSA
-Signature.RMD128WITHRSA/X9.31
-Signature.RMD160WITHRSA
-Signature.RMD160WITHRSA/X9.31
-Signature.RMD256WITHRSA
-Signature.RSA
-Signature.RSASSA-PSS
-Signature.SHA1WITHCVC-ECDSA
-Signature.SHA1WITHDDSA
-Signature.SHA1WITHDETDSA
-Signature.SHA1WITHECDDSA
-Signature.SHA1WITHECNR
-Signature.SHA1WITHPLAIN-ECDSA
-Signature.SHA1WITHRSA
-Signature.SHA1WITHRSA/ISO9796-2
-Signature.SHA1WITHRSA/X9.31
-Signature.SHA1WITHRSAANDMGF1
-Signature.SHA224WITHCVC-ECDSA
-Signature.SHA224WITHDDSA
-Signature.SHA224WITHDETDSA
-Signature.SHA224WITHDSA
-Signature.SHA224WITHECDDSA
-Signature.SHA224WITHECDSA
-Signature.SHA224WITHECNR
-Signature.SHA224WITHPLAIN-ECDSA
-Signature.SHA224WITHRSA
-Signature.SHA224WITHRSA/ISO9796-2
-Signature.SHA224WITHRSA/X9.31
-Signature.SHA224WITHRSAANDMGF1
-Signature.SHA256WITHCVC-ECDSA
-Signature.SHA256WITHDDSA
-Signature.SHA256WITHDETDSA
-Signature.SHA256WITHDSA
-Signature.SHA256WITHECDDSA
-Signature.SHA256WITHECDSA
-Signature.SHA256WITHECNR
-Signature.SHA256WITHPLAIN-ECDSA
-Signature.SHA256WITHRSA
-Signature.SHA256WITHRSA/ISO9796-2
-Signature.SHA256WITHRSA/X9.31
-Signature.SHA256WITHRSAANDMGF1
-Signature.SHA3-224WITHDDSA
-Signature.SHA3-224WITHDSA
-Signature.SHA3-224WITHECDDSA
-Signature.SHA3-224WITHECDSA
-Signature.SHA3-224WITHRSA
-Signature.SHA3-224WITHRSAANDMGF1
-Signature.SHA3-256WITHDDSA
-Signature.SHA3-256WITHDSA
-Signature.SHA3-256WITHECDDSA
-Signature.SHA3-256WITHECDSA
-Signature.SHA3-256WITHRSA
-Signature.SHA3-256WITHRSAANDMGF1
-Signature.SHA3-384WITHDDSA
-Signature.SHA3-384WITHDSA
-Signature.SHA3-384WITHECDDSA
-Signature.SHA3-384WITHECDSA
-Signature.SHA3-384WITHRSA
-Signature.SHA3-384WITHRSAANDMGF1
-Signature.SHA3-512WITHDDSA
-Signature.SHA3-512WITHDSA
-Signature.SHA3-512WITHECDDSA
-Signature.SHA3-512WITHECDSA
-Signature.SHA3-512WITHRSA
-Signature.SHA3-512WITHRSAANDMGF1
-Signature.SHA384WITHCVC-ECDSA
-Signature.SHA384WITHDDSA
-Signature.SHA384WITHDETDSA
-Signature.SHA384WITHDSA
-Signature.SHA384WITHECDDSA
-Signature.SHA384WITHECDSA
-Signature.SHA384WITHECNR
-Signature.SHA384WITHPLAIN-ECDSA
-Signature.SHA384WITHRSA
-Signature.SHA384WITHRSA/ISO9796-2
-Signature.SHA384WITHRSA/X9.31
-Signature.SHA384WITHRSAANDMGF1
-Signature.SHA512(224)WITHRSA
-Signature.SHA512(224)WITHRSA/ISO9796-2
-Signature.SHA512(224)WITHRSA/X9.31
-Signature.SHA512(224)WITHRSAANDMGF1
-Signature.SHA512(256)WITHRSA
-Signature.SHA512(256)WITHRSA/ISO9796-2
-Signature.SHA512(256)WITHRSA/X9.31
-Signature.SHA512(256)WITHRSAANDMGF1
-Signature.SHA512WITHCVC-ECDSA
-Signature.SHA512WITHDDSA
-Signature.SHA512WITHDETDSA
-Signature.SHA512WITHDSA
-Signature.SHA512WITHECDDSA
-Signature.SHA512WITHECDSA
-Signature.SHA512WITHECNR
-Signature.SHA512WITHPLAIN-ECDSA
-Signature.SHA512WITHRSA
-Signature.SHA512WITHRSA/ISO9796-2
-Signature.SHA512WITHRSA/X9.31
-Signature.SHA512WITHRSAANDMGF1
-Signature.WHIRLPOOLWITHRSA/ISO9796-2
-Signature.WHIRLPOOLWITHRSA/X9.31
-Signature.WhirlpoolWITHRSA/ISO9796-2
-Signature.WhirlpoolWITHRSA/X9.31
-X509Store.ATTRIBUTECERTIFICATE/COLLECTION
-X509Store.ATTRIBUTECERTIFICATE/LDAP
-X509Store.CERTIFICATE/COLLECTION
-X509Store.CERTIFICATE/LDAP
-X509Store.CERTIFICATEPAIR/COLLECTION
-X509Store.CERTIFICATEPAIR/LDAP
-X509Store.CRL/COLLECTION
-X509Store.CRL/LDAP
-X509StreamParser.ATTRIBUTECERTIFICATE
-X509StreamParser.CERTIFICATE
-X509StreamParser.CERTIFICATEPAIR
-X509StreamParser.CRL
-...........No implementation for:DHIESWithAES
-....No implementation for:DHIESWITHDESEDE
-.....testDefaultSize: keysize=1024
-E....testTiming: SHA1WITHDSA
-count:50000 cutoff:2618047 relative average:0.9997457113147664 sigmas:0.09848558430386996
-count:25000 cutoff:573725 relative average:0.9978446523346174 sigmas:0.5902662677980667
-count:12500 cutoff:557263 relative average:0.9951765411138338 sigmas:0.9340587968618882
-count:6251 cutoff:551274 relative average:0.9896408070412078 sigmas:1.4186043900042062
-count:3125 cutoff:536420 relative average:0.9837611116474488 sigmas:1.572323603758805
-count:1563 cutoff:528435 relative average:0.9806928415059166 sigmas:1.322082260974451
-count:782 cutoff:525085 relative average:0.9935978463075482 sigmas:0.3100916698035642
-count:391 cutoff:522870 relative average:0.9668998219989433 sigmas:1.133650895241574
-count:196 cutoff:521135 relative average:0.9653386989139258 sigmas:0.8404918835253192
-count:98 cutoff:519458 relative average:1.0028447133549079 sigmas:0.0487766732880347
-count:49 cutoff:518283 relative average:1.0549770428090457 sigmas:0.6665612197660942
-count:25 cutoff:517169 relative average:0.8978239811483526 sigmas:0.8848702798308438
-count:13 cutoff:516094 relative average:0.9912524843062952 sigmas:0.05462821799814475
-...java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-..Encoded ECPrivateKey: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
-...testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:order = 1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:cofactor = 2 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:cofactor = None throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: null
-testModifiedPublic:modified prime throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:using secp224r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:order = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:cofactor = -1 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-testModifiedPublic:cofactor = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:order = 1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:cofactor = 2 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:cofactor = None throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: null
-testModifiedPublic:modified prime throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:using secp224r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:order = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:cofactor = -1 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-testModifiedPublic:cofactor = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-.testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:order = 1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:generator not on curve throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:cofactor = 2 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-modified prime throws java.lang.IllegalArgumentException: first coefficient is too large
-testModifiedPublic:using secp224r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.lang.IllegalArgumentException: n is not positive
-order = 0 throws java.lang.IllegalArgumentException: n is not positive
-cofactor = -1 throws java.lang.IllegalArgumentException: h is not positive
-cofactor = 0 throws java.lang.IllegalArgumentException: h is not positive
-testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:order = 1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:generator not on curve throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:cofactor = 2 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-modified prime throws java.lang.IllegalArgumentException: first coefficient is too large
-testModifiedPublic:using secp224r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.lang.IllegalArgumentException: n is not positive
-order = 0 throws java.lang.IllegalArgumentException: n is not positive
-cofactor = -1 throws java.lang.IllegalArgumentException: h is not positive
-cofactor = 0 throws java.lang.IllegalArgumentException: h is not positive
-...E..Message:Hello
-Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
-Curve:secp256r1
-Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
-Private key:
-S:35772769282105872300471612945013135665363006870844525241957210961946638046110
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104204f16ab7e7babe2f773d079304017bef4cad6d0dd7d1f46b223b16446b4f0539ea00a06082a8648ce3d030107a14403420004feef7d57638a32c24b7e86e1e13a13f76d707b782397547478504981a756948d59bcb3e761e0c1e54808d79542c23c4c324b65dfec3506c6d96faace45a5aacd
-Public key:
-X:115310605062923173713099642494475503766589850074763944964114678912022289486989
-Y:40589252422740552567228409383220882863865982481228772588580854859730539358925
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004feef7d57638a32c24b7e86e1e13a13f76d707b782397547478504981a756948d59bcb3e761e0c1e54808d79542c23c4c324b65dfec3506c6d96faace45a5aacd
-Signature:3044022002e90cc79c24d269c4531fc8f2ce50de55757d3ee605b8874c51ca1911fb4bb6022041fbcaea4a6630e6f9b249e024d17f40ceacbc6f109fd49a7129eab2c0f4fe2d
-r:1316389265689309737491981305610942338776367244200585140906801591666918247350
-s:29845214240396410050693236885836029467829961438889379111990883631536440409645
-.BC curve:secp256r1 countLsb:535 countMsb:500
-BC curve:secp224r1 countLsb:531 countMsb:497
-BC curve:secp384r1 countLsb:499 countMsb:513
-BC curve:secp521r1 countLsb:503 countMsb:487
-BC curve:brainpoolP256r1 countLsb:524 countMsb:504
-..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:2049799 relative average:0.998247498961095 sigmas:0.6787407337890404
-count:25001 cutoff:161943 relative average:0.9868065934086503 sigmas:3.6132354627511627
-count:12501 cutoff:159748 relative average:0.9797625729286775 sigmas:3.919117656166945
-count:6251 cutoff:158043 relative average:0.9723753073489642 sigmas:3.7829694285224993
-count:3126 cutoff:155093 relative average:0.9851267615730108 sigmas:1.4403255150861958
-count:1564 cutoff:152028 relative average:0.9558062506713726 sigmas:3.027191182408792
-count:782 cutoff:150715 relative average:0.9484548958784237 sigmas:2.496614135662361
-count:391 cutoff:149802 relative average:0.8974943940299686 sigmas:3.5107234762150323
-count:196 cutoff:149060 relative average:0.8845385316009361 sigmas:2.799791814171619
-count:98 cutoff:148329 relative average:0.8888675573174363 sigmas:1.9055244490896546
-count:49 cutoff:147858 relative average:0.9056297083146034 sigmas:1.144178979469411
-count:25 cutoff:147462 relative average:0.975061016577249 sigmas:0.21597793188661368
-count:13 cutoff:147150 relative average:0.9062036176890592 sigmas:0.5857582197888362
-...E.048cdefe2222c1a62c0d9a33ee0bf89958d7073a7419a06f8db15de83f7cebef679416e3e87aa4ad7368720812984bed61144c0f5a3a0810c0b3e26e6d8d29b4ccd8da9da0bbbbaa5505c42352fc76551900fd6060f3f0e0073bf9a5c122e34fa5a8bd78eb9f84c6ccd7f45195d0f5e839c93d99480882d4c09cb420b0
-ECIES:org.bouncycastle.jcajce.provider.util.BadBlockException: unable to process block
-.testEciesBasic:04da2a68fd7edbebc9c746d744546d045bd71d668323d42da50bf8314bf958e479e3e99297ea24ccd20ee6e7f5384f9be3579acf1fbc9d917ad49df0e212f40281ed97482d867e96a2ecaafe79f080a53a9ee75e5833594c8f1010d378161cef1127c48241
-..E.No implementation for:ECIESwithDESede
-...No implementation for:ECIESWithAES
-.04829ff8944efa39f46f4360d16f99b675ff4f269904104d2c5fdcb5d8e87cd40db5e0ab488c04a0d49aca9547ac375758ca38acd9edc5767944f67fe4b1ea267a168c698f0fb6a460a43ddf83266c29c9487b7165f42d31805342581a4ab88bb28315a0b8671e707ac6ecd74428ed2580a3d210ae2d4d1fe14402f0daa82128a55b57eebf
-E..E...........testDefaultSize: keysize=2048
-....Message:Hello
-Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
-Public key:
-Modulus:20578102097905189978177102269457653312961929379052369427447026702233471511630078895330663348370498417834224923808385625824564553730567395807514111496456358759652721293046768427256562563463442641161798178438814994596765901785900118964925985360605713059533385972098641148274923996811752075857863534720259997784984408990083019577570760882879218339647512153707164513471394018502298429931619449271137925459596090532083161285578765394576090125486192227914273419288089980451809659778771074295437136991276622753487315580641880608802501973507498916337191226368358276000685356987578882009034642036920309310301359420231696859141
-E:65537
-encoded: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
-Private key:
-D:659977811208071201756072905307793019007664389006738340781074519795004838528489377443764334891331256381235920952447210428925153337975430969997116134997322168111057007197505368967873369540169233606477098103611906729352156370668248307631451925971876317790342186537986899166786974197978701736893904320619029626461160112028886382786840858315403659498811856725925632315502045541553231541194990934900372425113112423314743874090722273028447798187582769662670149989908600199293522046302882678250935938866396614380347254220513723289795572911614370843563096840673748649350894837813069647667309255203477621834165763324962572569
-encoded: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
-Signature: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
-..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
-
-Time: 61.221
-There were 9 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
-java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
-	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
-	at org.junit.internal.ComparisonCriteria.arrayEquals(ComparisonCriteria.java:50)
-	at org.junit.Assert.internalArrayEquals(Assert.java:473)
-	at org.junit.Assert.assertArrayEquals(Assert.java:294)
-	at org.junit.Assert.assertArrayEquals(Assert.java:305)
-	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
-	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
-java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
-	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim=8192 cap=8192]> but was:<java.nio.HeapByteBuffer[pos=0 lim=8192 cap=8208]>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:144)
-	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
-	... 32 more
-3) testIvReuse(com.google.security.wycheproof.AesGcmTest)
-java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
-	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
-java.lang.AssertionError: DSA default key size too small:1024
-	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testEncode(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
-	at org.junit.Assert.assertEquals(Assert.java:115)
-	at org.junit.Assert.assertEquals(Assert.java:144)
-	at com.google.security.wycheproof.EcdhTest.testEncode(EcdhTest.java:1894)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testAlias(com.google.security.wycheproof.EciesTest)
-java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1537)
-	at javax.crypto.Cipher.init(Cipher.java:1470)
-	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:345)
-	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:353)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
-	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:393)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
-	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:202)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-javax.crypto.ShortBufferException: Need at least 102 bytes of space in output buffer
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:759)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-
-FAILURES!!!
-Tests run: 96,  Failures: 9
-
-
-BazelTestRunner exiting with a return value of 1
-JVM shutdown hooks (if any) will run now.
-The JVM will exit once they complete.
-
--- JVM shutdown starting at 2018-04-06 21:33:53 --
-
+.E.E.Terminated
diff --git a/testlogs/BouncyCastleAllTests_1_57.txt b/testlogs/BouncyCastleAllTests_1_57.txt
index ec5bf2f..6d39787 100755
--- a/testlogs/BouncyCastleAllTests_1_57.txt
+++ b/testlogs/BouncyCastleAllTests_1_57.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-....E.....E...........
+.E.E..E.....E...........
 Provider:BC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -993,29 +993,29 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-...........No implementation for:DHIESWithAES
-....No implementation for:DHIESWITHDESEDE
+..E.E..E.E.E....No implementation for:DHIESWithAES
+...E.No implementation for:DHIESWITHDESEDE
 .....testDefaultSize: keysize=2048
 ....testTiming: SHA1WITHDSA
-count:50000 cutoff:1407150 relative average:1.0018659059474473 sigmas:0.7226622660052507
-count:25000 cutoff:617667 relative average:0.9992565545125512 sigmas:0.20360093187554404
-count:12500 cutoff:593048 relative average:0.9990099575079213 sigmas:0.19172090419291082
-count:6250 cutoff:579110 relative average:1.0022231445281051 sigmas:0.3044166016593459
-count:3125 cutoff:573241 relative average:0.9994745449200177 sigmas:0.05087696934878572
-count:1563 cutoff:569826 relative average:1.0039562123920536 sigmas:0.2709066808450391
-count:782 cutoff:567014 relative average:1.0054450110839936 sigmas:0.2637319658734885
-count:391 cutoff:562528 relative average:1.0535817322136083 sigmas:1.8351254392230818
-count:196 cutoff:553606 relative average:1.0239779133386222 sigmas:0.5814334982676813
-count:98 cutoff:545174 relative average:0.9620212392696109 sigmas:0.6512000939689315
-count:49 cutoff:540858 relative average:0.9233680115681271 sigmas:0.9291134821432402
-count:25 cutoff:539317 relative average:0.8902665522630883 sigmas:0.9503195338501756
-count:13 cutoff:535639 relative average:0.6930881679712619 sigmas:1.9166637767042547
+count:50000 cutoff:3184994 relative average:1.0078840516143037 sigmas:3.0534800602837766
+count:25001 cutoff:570007 relative average:1.0084437242654263 sigmas:2.3124553724838552
+count:12500 cutoff:558555 relative average:1.007589338805938 sigmas:1.4696691402061712
+count:6250 cutoff:553999 relative average:1.0044738619116085 sigmas:0.6126087720377922
+count:3126 cutoff:550953 relative average:1.0039838077761936 sigmas:0.385792241240365
+count:1564 cutoff:548590 relative average:1.014636693056141 sigmas:1.002586764695985
+count:782 cutoff:546672 relative average:1.0114212870829713 sigmas:0.5531960263684533
+count:391 cutoff:545035 relative average:1.0251019984095266 sigmas:0.8597205419379893
+count:196 cutoff:543350 relative average:0.9941843686902997 sigmas:0.14102156469084962
+count:98 cutoff:542210 relative average:0.9994344537492805 sigmas:0.009697098181447818
+count:49 cutoff:540893 relative average:1.0159611830627802 sigmas:0.19351906009550227
+count:25 cutoff:539717 relative average:1.0217820579371475 sigmas:0.18863815520274152
+count:13 cutoff:538356 relative average:0.9022815637836672 sigmas:0.6102514385776197
 ...java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 ..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
@@ -1087,56 +1087,132 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:64881979466146146964951760978411881176394737420409096056397857350129498561355
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104208f71e6250bc9738b361e1cebd819c59f47eb597203bc34ac9ff7346fcdf99b4ba00a06082a8648ce3d030107a14403420004e4fc3c1e7a1e1c5cfb35c0eaa52952d577df0627e86f89dd1b0622f8c848e85c9c4cfe15ea8f10c8a6b57ad4beecc753fbf450ac7a50984c7dcd9516a4565574
+S:66733676928396147561697754367614869096859653167284960056469323238973440950445
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104209389ec31353bb962c7231f52ec328e80d6efd4abfe800a8c4dc1243b7ab680ada00a06082a8648ce3d030107a14403420004952cb5d27d1550d900dd088b7ddfbccab33242ce825b8417d2304d37bbb14d4ea0fcd088866898fd279a2ae0d88b4301adbd99cf987408283bfb3ce0ffdd898c
 Public key:
-X:103572989863748583294181474810935873883599310736695963917030470220863190394972
-Y:70696838390345608617535704209115729906641053849703515748688818810509969479028
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004e4fc3c1e7a1e1c5cfb35c0eaa52952d577df0627e86f89dd1b0622f8c848e85c9c4cfe15ea8f10c8a6b57ad4beecc753fbf450ac7a50984c7dcd9516a4565574
-Signature:304502210086a48b41c2ba276ce6c99d99ad606a6d5805c5c011019ced1abf37e1214db21f02204fc6b85f23fd44eda26f89dc4b7b65ccf71f9fd800c97ab4002a2dbcbce770c5
-r:60900645744427252225020276693658287023585189824740945888789802224729201685023
-s:36083823243217026756890870472678336696610289671566856258007746679195818225861
-.BC curve:secp256r1 countLsb:477 countMsb:526
-BC curve:secp224r1 countLsb:504 countMsb:485
-BC curve:secp384r1 countLsb:521 countMsb:514
-BC curve:secp521r1 countLsb:516 countMsb:546
-BC curve:brainpoolP256r1 countLsb:497 countMsb:521
+X:67473610600607315246498220288028553147308207546800981824850541335134992420174
+Y:72816740477594530206279179428279091686339900409937011376063240057818953124236
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004952cb5d27d1550d900dd088b7ddfbccab33242ce825b8417d2304d37bbb14d4ea0fcd088866898fd279a2ae0d88b4301adbd99cf987408283bfb3ce0ffdd898c
+Signature:304502203123dcd47a4b953e45bbbdf50ead5e225a892d279f1317556e093dff2f8bb43c02210089f9c3e6e3c541acf887c1654ba4ef4aa88e372ed6de509d874f2f7ad31cd2da
+r:22226693340431476460469680141700464804199996148722783850842570571504729961532
+s:62408157240349707354736224768626083073893287701440684595453292963906941932250
+.BC curve:secp256r1 countLsb:489 countMsb:519
+BC curve:secp224r1 countLsb:517 countMsb:494
+BC curve:secp384r1 countLsb:532 countMsb:508
+BC curve:secp521r1 countLsb:535 countMsb:553
+BC curve:brainpoolP256r1 countLsb:494 countMsb:518
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:1947454 relative average:1.00018048909991 sigmas:0.06990312781235207
-count:25001 cutoff:178868 relative average:0.9992449439518837 sigmas:0.20678475043796365
-count:12502 cutoff:174312 relative average:0.9998746871290214 sigmas:0.024268674379277804
-count:6251 cutoff:173084 relative average:0.9964316472483443 sigmas:0.4886559115868227
-count:3126 cutoff:172211 relative average:0.9999757126421568 sigmas:0.0023519895392866887
-count:1563 cutoff:169214 relative average:1.014921759844545 sigmas:1.0217865046811125
-count:782 cutoff:164877 relative average:0.9954933018522477 sigmas:0.21828428698686114
-count:391 cutoff:163844 relative average:0.9959997899638214 sigmas:0.13700354386382427
-count:196 cutoff:163216 relative average:0.9875476105724741 sigmas:0.30195439629751647
-count:98 cutoff:162748 relative average:0.9444496166877644 sigmas:0.9524906589169639
-count:49 cutoff:162364 relative average:0.8511395591377289 sigmas:1.8048369276738905
-count:25 cutoff:162133 relative average:0.9143525607511147 sigmas:0.7417285815861905
-count:13 cutoff:161907 relative average:0.5805644827076085 sigmas:2.6193739659481814
-...E.04eba24e825d86067913e904ff720c895a1e66e58345a8da540e6aa9c7b5e37cb086efcb4a8acaa2ff5e24cd795f6a67d79eb19dd968f7abeea4476d8327000aebdde6943a25de31be51f79d93e702dc5d9faa2a5a761e9a741cb7d49b8058fb68292d3882950f4882bdab19850ef10a18376e8bbf27278ff224160d79
-ECIES:org.bouncycastle.jcajce.provider.util.BadBlockException: unable to process block
-.testEciesBasic:04ced331a3ef8de3ab97cc7d41234d2d72eafcb26f3a16c174ff2140008f347450d55730f3ad9374fcc5d4e24f9e82e9eb465c4a558c0b29c48bdc0b373ed89fefe96e42ce84745b99b50c496009dba2b0306aa5f6db7a36a9700eb214ac4c78bf698b09cc
-..E.No implementation for:ECIESwithDESede
-...No implementation for:ECIESWithAES
-.040c0e0b456497dd2ffd64af4c3516df8023a4acc3f886c46c0b17a9289d9b06a07d651d717885377255dbfd11551d71d050364667c3f2cc68a7372f659fd2dad35e5b9819983eb95ad6cca709eb6d406d167ac746af74304205d9d78a1fce61ff91eee6c60875c0d4f7f704f27a94cd4a5af43226ea9c7ad0c9da6cbee4726bea83674091
-E..E...........testDefaultSize: keysize=2048
+count:50000 cutoff:5461412 relative average:1.0031062731258475 sigmas:1.2030544085179347
+count:25005 cutoff:162393 relative average:1.0014314993367852 sigmas:0.39207144016940065
+count:12502 cutoff:160722 relative average:0.9862695305049342 sigmas:2.659106687510926
+count:6254 cutoff:160012 relative average:0.9833507601459092 sigmas:2.2805204748005994
+count:3125 cutoff:159518 relative average:0.9737480046399359 sigmas:2.541838520856067
+count:1565 cutoff:159110 relative average:0.9854797613436377 sigmas:0.9949277699130177
+count:782 cutoff:158800 relative average:0.959232906192408 sigmas:1.974575556775404
+count:391 cutoff:158510 relative average:0.934870639560368 sigmas:2.230621169666909
+count:196 cutoff:158236 relative average:0.9075392045627371 sigmas:2.242055135678009
+count:98 cutoff:157986 relative average:0.885571444927659 sigmas:1.9620410035183946
+count:49 cutoff:157717 relative average:0.8224532406714152 sigmas:2.1526400551341855
+count:25 cutoff:157463 relative average:0.8259505259164345 sigmas:1.5073126607168907
+count:13 cutoff:157294 relative average:0.8858407502854874 sigmas:0.7129242859657945
+..E.E.E.E..E.No implementation for:ECIESwithDESede
+..E.No implementation for:ECIESWithAES
+.E..E...........testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:25979585205709636548674932911120109282186496444109474727708067183639741473952688540602276186773611994365090145089791322855856894231108787008120570427584085928661814114293980705159396862698592134496921792764898281675161685156648769521778233029309560243510891203660652072030989620022863005635806329315136937002661291156260859031421554403384964934594139133755757285045221889037286299702604749154678706125490127025029606637299350103017341684937043589163244233150077540493414813339642087654996196991735604320000389663240226138618617835298421171658031749591192328162969333534279197491850998893535718631809243738467449763583
+Modulus:18476924098480009006315378649085902419336443395115094866613354748028246127597440448992413623619135449517773826125939602674612354171353170024364657036875487194026297500725092638157845102680608057508245261211116371625426815545001957728244591019009052406752832813820470756064414949639681185882427271122924314766012523337870569739274004688925938923770801522249439771582330585043499002333883327929893222517244786094516454546650609841058810279803382477431207225098850864327286745654227043304154491635124395211542815594409519609391512953724483447823892536356435497543897949534747493240793803001632251507334665915977971252297
 E:65537
-encoded:30820122300d06092a864886f70d01010105000382010f003082010a0282010100cdcc46e21c355eec01acc65e609eae53c3ca2a9b8d43fa6e78851e074c868bd7ff94c4eeb15a9aebae6c7d17cc4248466f656f3f7ee52b1a25a2dd499939be5f4c1003e552928fab616f5229b34c4efe2353b7bf93e80967ee6f28ee082fe06c97e62890d38f6d608c41ebf3e6d34e6b6dd3c7082ae7f1a1210ed6174c307ad590a6fecd02b04e2b296d41c73078e434878f6953d55b893c24b464f6db8f9ab51d21abe3ba9725cc5e1ea752f40b4299003c6b5c0e5474c525abac35cf13e4074d37f5854ba02da84407679bf524a001130b1937fff5b30ceaf8cc47c73ec4f3ed1b0e5b4099b43e0d12c33b6b80726d606dba569d28d7a2cf8212cb9fd4f6ff0203010001
+encoded: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
 Private key:
-D:4151017386843896716655470344672386962302453537917395739981919000159963880624617819749404688798692006027038794182030758766576215999222662971383105012930813979919468185877129239270589502841880274293674055158729150808878276181666044982945523401535240552511166169326220580317568820758798998482007812036307069835665053580965328344962400130134299782595574472025548167529961848260021482996387535503202584152556174630065936613480828826013533409619653005703103679097804882472952381471299520234249138208225293094007300154809741507599924398030089953578150282846275035176331752586424482009931445631192085746945150766946035275653
-encoded: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
-Signature:4c8f15ae7ab0d065491e16e78d3e8f23a1320a7f2356dc06571e3de9f027af561f04e25945a905bffd2d39bd45ce6df787d5d0cf1a13671c0c5206102f80be1a4190b319edd09c6b85b5ddb3a86738afc735898ffad752f792112d0a77ccea41a713412ec5dec2ed7e80d310238fbc12640c0f9d8578fa4101d1634d52803666ae82d2f94333e6cc679441b3683f1d7fce6cddfab4e4382ad4a971119e372b52ae7e7b181ac037f0ecc5e44e4bcfaccd6e31c3c1802660f59f667193ca6539bf6c29587846e4c4b35d24f5e652799d1d2f1109394b333f6fe7c30e226546fc9acfa81f70dc0a7c027ef2af8666395ed66f47cf8cb0c7a0449044692ea128937b
+D:6381089485068698351228147804356100712697428804848215506713663498321517749194755152086146661430698722807887664885811892475026911792381738159306307353771477782107728527132175476841258939706143742765351925166269472163573215582614428647057752885068608383786872171317051815880860212745010057229807858781462494136905723905903663173546600856545955066055103102467014574748084126362740890781329221550215994198127712648677623710964616366546453545062212494233826069759106094384736836934752480024897420325648905627022058509392153095497096132237133513909617653166156420538450980417705922753998164995638844749016867140309100433351
+encoded:308204bf020100300d06092a864886f70d0101010500048204a9308204a50201000282010100925d8cfb3229a1100229fe233e28bea0ef1548860925ed47238c4ca9aaf43c4810f0dd778ec9e5f5a27a7f03799eac04d5e8be93b24d8f1bdb75a32ef07897e300c35d2d2432bb90a24c77e6412e76875a641dbcc718e210c7eec02fb510da62e137449a204d4d70770497a4c62f68596cc15ca14aaa35a664cbadca3e9fabe93021532d8d540e728bd217d4c42328c5f871c8c3dc845d3614b6c96d047ffc5daa1396460012f6b7d3829a648ebad563e674a4e71b8fabcb1db5c6c0a6685522a8f6fe8ae44a4fb06b09d24d0485717573232d788b91913e821561c7494df07de1cbc2a6be3dfe9984f3e0b0e47a1ae84bf3378713383a7c42101a83eb93bc49020301000102820100328c4777ab4bd039909dc30c95d7897a5807802bf635d87be48d7c1e6e9179ce23b7a3acba2e0512af81e1a2a81a81eb0b9b1d5231d672519b19c5f91c8871602eefc99aa0f13a70c97462462d85a7deb7fb727fb33ce73a076a6f8a2a5cbf273e0391d82ec6b3b35f0f4175e112175626e6a2a07b824c1402a48b091956988e62dd89039ae244dfe62afafcd9ee73c2d451d58713cee7f5ffdfe7bfaca1f5204dfd2781c22235aa6b5d742cade559c4c685156b56afef67d808ffe86c8687a19ceeaef6425e28c4154e59d1cfcb1ef47b7d620c4c6d92f22d72799f94f437afb1fe240be3104014f7568b479ddf7fe6394b0da2338c8815cd6418a2daba8fc702818100c4e0a04b7fb5a8d14404b6f621ee7ddc64362d7d222d21d9623cd519fefe7a08f14aa8c657ab63cb3eef7e579a60e12d4c5f07a285873715cd527c943aa228e11a8a70ced1d50c2073f580d9d6e41d583f74b8e2d580a08a890f8e2b3fcb48429a7f54d21081927aa101f45fbb06a46bedd7ec6dbdfd6608101ae87da63cf63b02818100be51b4a9b17bc436abda25793d73d8ca7c2f3c01ed4d182fde83fadaf5c9c978da39af0f21ced9268efa305b7eb6e5c332258a5a091958ea2fb8006ae28961c558f76a796b9648ad7da789512ec8de2bc0f121a15c88494340787429ef2b8be4c73503f7e04f643aa177690844c262b655253b08f113ad2f6483109739683b4b02818100954105c4b6e8ed36d8ae0a56c69a9b683dc0a4f3bcb922743ef98744d1fff25c5d31108a6d644d9f83f2e4815d541ce1ce882cad9535511982330aa7055c72495569a6e3e447f38d96db83f7a1e6062924d24468131c149972170cdcd4dc33c7ea80a5b92b324fee0fa9ffada3880196a11594f40d98d185435062f8fed2308902818100a3f42b590ca6fcafc47857540cd6a1ea3df54b12b5e57672b694a824bd1d2acd4be1e9a7758e868fab18695448e333286728e3f910619fb18f8e49fdca4e63c5e910abcf121a135e3223842e45c9916bcbf96ee95d97a2d5a6d29df00a344f7db5073cf5eb6d398130dc77c541c6dbd70b9ed92ea8d0349fe14cef9bf73e8de502818100a222df48126414fd22a9145ef71c36619cd0915dd05a6a5d7c840b81befd147f716d6d66fb08c79f0de26041815aa56ac3bfa8cf3babc160252da549257f375b1f50e73c1bc93d9a429ef5ceefbddf08ad8f4869c4e5a79e74bdd97b3d45bbd5eaefbc53d1de2fa025444c2b5f198c14774f273627b9cd1d981ba18dd0c93bd0
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 72.652
-There were 7 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 2,549.299
+There were 19 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1178,7 +1254,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1220,7 +1296,233 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testEncode(com.google.security.wycheproof.EcdhTest)
+5) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:d00d3d60f0adb08d98559dc3c387aeb6 pt: d00d3d60f0adb08d98559dc3c387aeb6
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+6) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:2728c8a3305827b1cfa1b25b510767d0 pt: 2728c8a3305827b1cfa1b25b510767d0
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+7) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+8) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:baedaf9c2a32955122b400cde0fcce7e pt: baedaf9c2a32955122b400cde0fcce7e
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:ec4b4ccb6b332b48eb94c3b0769adb31 pt: ec4b4ccb6b332b48eb94c3b0769adb31
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1257,14 +1559,96 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testAlias(com.google.security.wycheproof.EciesTest)
-java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1537)
-	at javax.crypto.Cipher.init(Cipher.java:1470)
-	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:345)
-	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:353)
+12) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1297,12 +1681,14 @@ java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+15) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:393)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1335,13 +1721,14 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+16) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:202)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1374,12 +1761,96 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-javax.crypto.ShortBufferException: Need at least 102 bytes of space in output buffer
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:759)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+17) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+19) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1414,12 +1885,12 @@ javax.crypto.ShortBufferException: Need at least 102 bytes of space in output bu
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 7
+Tests run: 96,  Failures: 19
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:26:34 --
+-- JVM shutdown starting at 2018-04-06 19:38:16 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_58.txt b/testlogs/BouncyCastleAllTests_1_58.txt
index 1719bea..6f1ca99 100755
--- a/testlogs/BouncyCastleAllTests_1_58.txt
+++ b/testlogs/BouncyCastleAllTests_1_58.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-....E.....E...........
+.E.E..E.....E...........
 Provider:BC
 AlgorithmParameterGenerator.1.2.804.2.1.1.1.1.1.3.5.1
 AlgorithmParameterGenerator.1.2.804.2.1.1.1.1.1.3.5.2
@@ -1139,29 +1139,29 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-...........No implementation for:DHIESWithAES
-....No implementation for:DHIESWITHDESEDE
+..E.E..E.E.E....No implementation for:DHIESWithAES
+...E.No implementation for:DHIESWITHDESEDE
 .....testDefaultSize: keysize=2048
 ....testTiming: SHA1WITHDSA
-count:50000 cutoff:2591584 relative average:0.996147280792515 sigmas:1.4921517328202731
-count:25000 cutoff:627893 relative average:0.9959874123974368 sigmas:1.0988923719447268
-count:12501 cutoff:603898 relative average:0.9969023681838236 sigmas:0.599877815509674
-count:6250 cutoff:590451 relative average:0.9919723079422182 sigmas:1.0992370061880354
-count:3125 cutoff:583900 relative average:0.9951278902572616 sigmas:0.47173999736302424
-count:1563 cutoff:579980 relative average:0.9847192404252197 sigmas:1.0463694683100753
-count:782 cutoff:576263 relative average:0.9946663530270544 sigmas:0.2583379867830096
-count:391 cutoff:567824 relative average:0.9859110282474177 sigmas:0.4825344274534776
-count:196 cutoff:558089 relative average:1.0179977980189334 sigmas:0.43642340830416987
-count:98 cutoff:552846 relative average:1.0710308043278665 sigmas:1.217924586359235
-count:49 cutoff:549628 relative average:1.0040969396198813 sigmas:0.049672753040234656
-count:25 cutoff:547181 relative average:1.0818616006651844 sigmas:0.7089422577050688
-count:13 cutoff:545973 relative average:0.9065255126942757 sigmas:0.5837479861255647
+count:50000 cutoff:1814742 relative average:1.0053631102299219 sigmas:2.0771236604362113
+count:25000 cutoff:604410 relative average:1.0122313401758187 sigmas:3.349690461407549
+count:12501 cutoff:592009 relative average:1.0171673619957882 sigmas:3.3245783305548375
+count:6251 cutoff:587340 relative average:1.0167746167046305 sigmas:2.2971427400268443
+count:3125 cutoff:584383 relative average:1.0165565925393687 sigmas:1.603085179372925
+count:1563 cutoff:582024 relative average:1.0268087363422513 sigmas:1.8357623556098672
+count:782 cutoff:580109 relative average:1.0375085002970053 sigmas:1.8167438720877527
+count:391 cutoff:578427 relative average:1.014419726495704 sigmas:0.4938624756178563
+count:196 cutoff:576872 relative average:0.9601926050066653 sigmas:0.9652780290358618
+count:98 cutoff:575596 relative average:0.9953120674071986 sigmas:0.08038129960648316
+count:49 cutoff:574139 relative average:0.9458401671824433 sigmas:0.6566530751861105
+count:25 cutoff:572752 relative average:1.008497444691189 sigmas:0.07359002969822874
+count:13 cutoff:571049 relative average:1.0143401760630917 sigmas:0.08955437081068844
 ...java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 ..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
@@ -1233,56 +1233,132 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:66615708483588035920911213766838394200512665201933333141984651115921270741497
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420934727a465b2299fa70682e55cd7881f08d77776f0e972fbaf34c7fc467199f9a00a06082a8648ce3d030107a144034200042bd2b0cd9a59f3b93bdcbf97c84359fbdab3db20cadb895711b3208a2c9988fed6ca4b7fc6c4ae49ea5ab0b0bbce783f962c8e5d6db6bd0be05cceb1e85dd02f
+S:47579604518636340537618298356974237936010037375566939938270279649592463585602
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042069311a11472ba005f98d1947fe8299339190f630cfbf0310547a17cb1917f142a00a06082a8648ce3d030107a1440342000452523420129c9d7665c076fc129939d01a7ada2b9e5350ebf9344ddf86266f2d591fd0fd0b70cbf53e3dda15c96f20bf9e6305bde81b2b00ac7d0ace80f184c4
 Public key:
-X:19821710623085114356407776641872547205739496718183204093599036664684064901374
-Y:97152373779726220311760047415173211337110194904363065739180557165790859481135
-encoded:3059301306072a8648ce3d020106082a8648ce3d030107034200042bd2b0cd9a59f3b93bdcbf97c84359fbdab3db20cadb895711b3208a2c9988fed6ca4b7fc6c4ae49ea5ab0b0bbce783f962c8e5d6db6bd0be05cceb1e85dd02f
-Signature:3044022035452428a5aea43f9cf876146f4cba446a99dab2f8e34e8e054ede12cd001aff02202f6339f0344c3f56ccbeb55bbf16e8987f40bfb0e7e00595b1678ec73fdec3ad
-r:24094742981097549759550350257070700149388672596404771223788250813512758074111
-s:21434021618263153015766362349576190019443077192063739981840929803335335068589
-.BC curve:secp256r1 countLsb:512 countMsb:508
-BC curve:secp224r1 countLsb:533 countMsb:500
-BC curve:secp384r1 countLsb:520 countMsb:532
-BC curve:secp521r1 countLsb:515 countMsb:534
-BC curve:brainpoolP256r1 countLsb:507 countMsb:496
+X:37234894798628046780011288658589463554412268593514711508704591471367567077165
+Y:40312058168230314789620779338157425051763084441057313813211598925139692061892
+encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000452523420129c9d7665c076fc129939d01a7ada2b9e5350ebf9344ddf86266f2d591fd0fd0b70cbf53e3dda15c96f20bf9e6305bde81b2b00ac7d0ace80f184c4
+Signature:30450221009a0369e5eaa106bfbb1350c40262ee1faea7bbc307805c25189eca1ee26e905a0220528aa15ac1b65598bd06086c9a083f6ceaed5fe24faf4a598934cc3b669f397d
+r:69662210104920877403191198147957272829735564659974645552696415445089856163930
+s:37334592106724574506300156760271351494101392376363749855232528592715372247421
+.BC curve:secp256r1 countLsb:506 countMsb:507
+BC curve:secp224r1 countLsb:510 countMsb:498
+BC curve:secp384r1 countLsb:507 countMsb:508
+BC curve:secp521r1 countLsb:548 countMsb:510
+BC curve:brainpoolP256r1 countLsb:499 countMsb:524
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:2234575 relative average:1.001155165356496 sigmas:0.44739361878252665
-count:25000 cutoff:179964 relative average:0.9932912600582666 sigmas:1.8372640992616398
-count:12500 cutoff:175879 relative average:0.9972547348330686 sigmas:0.5316183136224388
-count:6252 cutoff:174145 relative average:0.986700975173862 sigmas:1.8213353162542192
-count:3126 cutoff:173364 relative average:0.9861201379965832 sigmas:1.3441268683704932
-count:1563 cutoff:172736 relative average:0.9976466059277739 sigmas:0.16115165558547173
-count:782 cutoff:171875 relative average:0.9894929001038838 sigmas:0.5089168907989398
-count:391 cutoff:167865 relative average:0.9949738601281574 sigmas:0.17214070465548015
-count:196 cutoff:164932 relative average:1.0100974310190094 sigmas:0.24484968971184715
-count:99 cutoff:164081 relative average:1.0729486803473078 sigmas:1.257174792712163
-count:49 cutoff:163607 relative average:1.0183759451195442 sigmas:0.2227964940890343
-count:25 cutoff:163118 relative average:0.9290462735185513 sigmas:0.6144772962610722
-count:13 cutoff:162974 relative average:0.8522764017946244 sigmas:0.9225335751087798
-...E.04b991ca5bc9f80bcc5cab4d4820db17ac97a858c89d59c354320824cf475ca306790db959fd0ae188b23b1daf77cab492cbe49739e7f7a0c6e3e6bfa70810da20fc46c96f251d0bf2efa58e8d169fafb2b4fa1936479c42e40f038ad8cfe4f01a650972b2ed6054e8a74058f80178d07f9a0a0b2dc4253e4f91a29187
-ECIES:org.bouncycastle.jcajce.provider.util.BadBlockException: unable to process block
-.testEciesBasic:04e3f709f0fc9ea9524c08ad2904948b3d5322f1a49fc8b7b7d68c87be6892ea4190fd7302ee05bd920cda52e1d3796bd5eb154e1512a3af261798a98af94a163e296d8911accf000caaf4076aad3bbc588866b113b0524703e51bff847a9c84ebfeea0b2d
-..E.No implementation for:ECIESwithDESede
-...No implementation for:ECIESWithAES
-.0436f491ded30fde197e8580bf5fc8ea7816e9a927f99095d7e153179f3e336570f2d9e9d6899abbee712cb3b15aa421a1a4e7b288bf93672d1ed7f7a5a9836a9ea60992ad02f05f8e5d8b6c5f1cc45bddd69e59a0f608092725741f747ca24f35314ef14b4f4c4ae64a6b5e50d2d5c14ee3634202993a965a49e6818d601ca967633a1ac4
-E..E...........testDefaultSize: keysize=2048
+count:50000 cutoff:1371837 relative average:1.0014435768887362 sigmas:0.5590949249044953
+count:25001 cutoff:162330 relative average:0.9962461251952508 sigmas:1.0280615149192152
+count:12507 cutoff:160748 relative average:0.9862663940650013 sigmas:2.660245909636983
+count:6259 cutoff:160062 relative average:0.9821484681190479 sigmas:2.446181024772211
+count:3128 cutoff:159588 relative average:0.9862073523631051 sigmas:1.3361082355081653
+count:1568 cutoff:159208 relative average:0.9777033267278311 sigmas:1.5292332293942312
+count:782 cutoff:158875 relative average:0.9764194782954857 sigmas:1.1421349285652223
+count:391 cutoff:158578 relative average:0.97494813038864 sigmas:0.8580036763393446
+count:197 cutoff:158338 relative average:0.9788108329970825 sigmas:0.5151190656363039
+count:99 cutoff:158083 relative average:0.9858912287284323 sigmas:0.24314616130559097
+count:49 cutoff:157857 relative average:1.010785897008216 sigmas:0.13077205136404602
+count:25 cutoff:157638 relative average:1.0038893967083369 sigmas:0.033683163548153754
+count:13 cutoff:157453 relative average:1.038294444855056 sigmas:0.23914873146960175
+..E.E.E.E..E.No implementation for:ECIESwithDESede
+..E.No implementation for:ECIESWithAES
+.E..E...........testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:27268732988680494177538125473894212438854892687460650056643408401382025160582004731018208017658785123824128353969496951052208000464570532733023628362739598025750195127253641873558217532319856978607798889761906706315889429914159935303400150965678383410706441705979154725452722738652355030353533280853361979850394372354902158482147326839728692188916322782609763427287682517970561396385566085221770541645685262820740459120671788367020171549608568852881997030952012834819310253521047775373605561891105021933366338442413800495913384040682510831715202089332624168382405958472730569411661867167837537790248460428856554272317
+Modulus:21508164727075686825423098702336920048672798594425904274096273024076738041534378573776732320465250363124743103573752805835277448823784489322448705649322163310838910483704033817839034635778566200415031192984928261441629891567900066979546584627996176821712001656969123502418594828321242053654763748111240016746106747506674263213473644516033346683028441384107826023838086992804778865105166900102391266430938605449943890030406044679898794932320286776264819910534360645862620808449599544166084820926307710627039260535488941996230728334462247069886596650133138622343876549445503251191414695899085654213893751041896204634241
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:8120870593810695410380401360097811789910285304904301958901654385674865741057101749204996795469053186051198943323613481577757139464230211523517839793853397385714625835729022617257007655020107856325094447883302777675517218492601378416529783885021100267306452477172408751606321864773293548757573367854120457782986998209843421318457528620192348790255443045354312331274800163092744861507133035919803227922550792776495064144338121078770192912563447678586169298308588510268853194252580394458678976372630913341487973763457686659528224164265696606025687897306328662584186970442692780948314267265754308713692452607740301034523
-encoded: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
-Signature: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
+D:1504475397868329605100108949542823530725060301150448627012616378696366729738986755219738241605395791341602508087919439402938350012518639015768733370049058198539958731478709996329227680990400721794598574033617000816543202014436820148175632552312304096845037819795851265940803566561357002677370809043425119348871447029412670739310543353951175786445081880786994222479847926641259053594887644510884490226680996817726271487020075267992600036176634625866573353714686437230554569906426865356640810161781538253367045437601823227661702387431862578706769974328653947704710382968763737416457060507214779309469543482563185728941
+encoded:308204be020100300d06092a864886f70d0101010500048204a8308204a40201000282010100aa60a2c2f79cb5cade4022666b19cb5b2068d3cc659df1e42e8025774ce84bd734188fd3375560948236d5eaab7f529d6f0dc841d8e3cec027916c875963e8afb8721f6bb8940a64af3fa2fa1ac46254f0a07388636d220594576e6ffaf915c45739aaa96264a93c07af2b48e2b6443f1a7cdb73e59d0e5e77d820e7ff3c1ea1ae87add83fdb7160d4bc37fd12ccc50973471a3dd096cb003e16bd9d47dc1f265118674ca3751d5fa02582b71399747f9e48a1e55383295377cdf3ad24fbd59172a2eb5dc103ff21a2a330daac0ef2ec7bfdf743c917b27e9c17bda19961879b6a054121171f9a5c1815c7f2648c06fd0dbaea6337c6279e2045956053aa88810203010001028201000beaf10faac2e13b84d2df2523623d458d4d8fdd2911848955d05c6e8d28659fb2d2f20290090e95accb19a90de07cdeaad53fb80d6c17fafc79916a21505a072aa37efba9c05f3ebe3c7911be1c1515c47430c8ae4dc4b6b7b2eaf475cd851e840c7259e15a51b53383670774e6537d4784cad3ff507e6010c98339bf328d20dc44ea5c39d4ff8c51ca2ed7d9fdfaa15d98ff1829ef680421901c2c220cea47afb1e488e547e24e69c7c32ae31bde93f4fd97a250bad8cdb636ba89cd9d4600fae26ffb18f1271c72c63f0544b8dc8ad501aa9b9e9f3c707d706b4d368087eaed256aec4b50047493c0d32c21fc62c348741c93819fd28416c16451fca1ddad02818100e7a035bbaca4967e91a474440171757094ce3c7efaa14e49015aadb5d3dd4e617c4d306b56637812845e9bef70f07f3977b7e5753a3d0e2f6c165ae7f79b3d12e70f90fee4ebd0ffc0a02462110e3db8942061a6386a1a7f238c568aa5c68fdd38f200742015d398ea791f8217f65728157c9a793b791a9137db9e5066c772d502818100bc4e737b915f75b84350e9ae37287c92ddfa2cbdace56bc3e5335bbd63fe59ad5d4c6c51eef89f7da8d3d899e982caed3035a6092fde0dd1a249c7d82b606beaca3563dcaa4bcdefbded1d1c9374e7331f0662b65532f1bd54c82cbd6aedd470378182f32cc52143e9d667779ea8d3c58b7af86a30d4cc63850e4087ebe3dcfd02818100c82bb7641a5e1ec5011eab6fbe038c679fe1df7c2922cfe1ddaebce29f56e90eec7a54b6de7095eb02c43464a828defa0e1139d6a65eef6c622fab9e3e68c54e19ab65363325ec77a9c37bcdd84983638977b68c0cc2fd6514968a8fc59624ec1cf35f1afc43809aed3f81d04edf10114f0861031637a193103fd6c04b226085028181009637db4653151cfaeeb0888a533438148d823ad8e1296fcba9774c130cc6e65137a174b3f3f8607b450822bdbd9b7a38b701c53f84f116830a7ce330de819ff58074110302d350289591a76c997163d2d3482bcd1ab0764a3c6d27cbbf9694a724906b9f84328a33fc41eeee6d226f3622ebe96a05246d1c6313988515b8041d02818033256d15c06d8e71c66bad862b6c3cde29c06bfa6f282d76f64b75cae25f5b87fb87571c0153141591154cae7d00efbab6d216939ec411a0c58bde3884dd2af7d03412cc5369efba7dff82b7b99a0a46206ee43c65a5930eeeeb5ed9f582b299e17a7c1f8201e517961e8971290eb8772cc6a47622bc793c15bf92c85669fce4
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 65.024
-There were 7 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 2,200.089
+There were 19 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1324,7 +1400,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1366,7 +1442,233 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testEncode(com.google.security.wycheproof.EcdhTest)
+5) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:0d6159c6a9d509e71df173d39f8a8892 pt: 0d6159c6a9d509e71df173d39f8a8892
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+6) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:5b8dd86d517f6b3368b57a5da9f7f5c9 pt: 5b8dd86d517f6b3368b57a5da9f7f5c9
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+7) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+8) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:5daca603c36a4c2a6aba0975617a2e8f pt: 5daca603c36a4c2a6aba0975617a2e8f
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:f2d4ce6cce4527c0266a972d13753608 pt: f2d4ce6cce4527c0266a972d13753608
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1403,14 +1705,176 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testAlias(com.google.security.wycheproof.EciesTest)
-java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1537)
-	at javax.crypto.Cipher.init(Cipher.java:1470)
-	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:345)
-	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:353)
+12) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1443,12 +1907,15 @@ java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+17) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:393)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1481,13 +1948,15 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+18) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:202)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1520,12 +1989,14 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+19) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:430)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1560,12 +2031,12 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 7
+Tests run: 96,  Failures: 19
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:30:08 --
+-- JVM shutdown starting at 2018-04-06 19:32:14 --
 
diff --git a/testlogs/BouncyCastleAllTests_1_59.txt b/testlogs/BouncyCastleAllTests_1_59.txt
index fb5cb19..5184c99 100755
--- a/testlogs/BouncyCastleAllTests_1_59.txt
+++ b/testlogs/BouncyCastleAllTests_1_59.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-....E.....E...........
+.E.E..E.....E...........
 Provider:BC
 AlgorithmParameterGenerator.1.2.804.2.1.1.1.1.1.3.5.1
 AlgorithmParameterGenerator.1.2.804.2.1.1.1.1.1.3.5.2
@@ -1171,29 +1171,29 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-...........No implementation for:DHIESWithAES
-....No implementation for:DHIESWITHDESEDE
+..E.E..E.E.E....No implementation for:DHIESWithAES
+...E.No implementation for:DHIESWITHDESEDE
 .....testDefaultSize: keysize=2048
 ....testTiming: SHA1WITHDSA
-count:50000 cutoff:3924489 relative average:1.0029099344617844 sigmas:1.127012770904612
-count:25000 cutoff:608133 relative average:1.0013004772407617 sigmas:0.35615036014362816
-count:12500 cutoff:592423 relative average:1.0064033932773635 sigmas:1.2400117761222502
-count:6251 cutoff:582544 relative average:1.0125275900861586 sigmas:1.715548147726544
-count:3125 cutoff:578628 relative average:1.0067279159583225 sigmas:0.6514276615316503
-count:1564 cutoff:575856 relative average:1.0170483698136603 sigmas:1.167782221657441
-count:782 cutoff:573583 relative average:1.0168660032262493 sigmas:0.8169137066337753
-count:391 cutoff:570467 relative average:1.0477473655651892 sigmas:1.6353037049128714
-count:196 cutoff:563225 relative average:0.9785384157648601 sigmas:0.5204157602865412
-count:98 cutoff:551641 relative average:1.0155913140551276 sigmas:0.2673353469818241
-count:49 cutoff:547478 relative average:0.9720005743647165 sigmas:0.33947499448140145
-count:25 cutoff:545498 relative average:0.9826395137975803 sigmas:0.15034622073344736
-count:13 cutoff:544246 relative average:1.0561370031015858 sigmas:0.35057547200548733
+count:50000 cutoff:2613024 relative average:1.0008606511917093 sigmas:0.3333287732383658
+count:25000 cutoff:630914 relative average:0.9999169699697992 sigmas:0.022738710245660328
+count:12501 cutoff:587530 relative average:1.0030946142461579 sigmas:0.5992934422147616
+count:6250 cutoff:571888 relative average:1.0048194050706887 sigmas:0.6599242177427467
+count:3125 cutoff:565995 relative average:1.0172198898201648 sigmas:1.667308662425623
+count:1563 cutoff:562721 relative average:1.02306763533877 sigmas:1.5795857009906933
+count:782 cutoff:560510 relative average:1.0353194723829853 sigmas:1.7107171576861047
+count:391 cutoff:558677 relative average:1.036802187367001 sigmas:1.260441338234406
+count:196 cutoff:557309 relative average:1.0304862494002165 sigmas:0.7392522605074783
+count:98 cutoff:555817 relative average:1.009688050391892 sigmas:0.16611546043754177
+count:49 cutoff:554400 relative average:1.0930096360787545 sigmas:1.1276819069732589
+count:25 cutoff:553409 relative average:1.119583845980221 sigmas:1.0356264850111692
+count:13 cutoff:552552 relative average:1.2225244613087243 sigmas:1.3896648154676654
 ...java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 testWrongOrder:org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 ..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
@@ -1265,56 +1265,132 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:16255592886200508176474909246745232948584117516790033121034089377557656588460
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042023f056eb2a68716339f08991543454d1454868f500b8f714a54aab9d6ceb50aca00a06082a8648ce3d030107a1440342000467ae559844ddca28e04f6de84b10030a2583770f413cbf78c139c38cd7d8fbb61043b9292643c9bc21c65fefd348ebff45d984970ff45f2a3fb1dd947f5a0f51
+S:3862242592028930855359318856049666955109054403517567571661795852861791367171
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104200889f3abc72b6d54f0ba1d77d8cfc6c3ad0d47c396638e47c51090abb3a17003a00a06082a8648ce3d030107a14403420004667a0b7ac932a1afe79be1b7eba15d354161848cb6d04b413aa7e1a69c2c0110c034604beb16cce39737e8380170909f522980a2caac2ff898de3f38098ae71c
 Public key:
-X:46896245546951722298942029905578478302243987807174250063622428635501407304630
-Y:7356662263134137031742658284363597086229988684219570460303434154704956428113
-encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000467ae559844ddca28e04f6de84b10030a2583770f413cbf78c139c38cd7d8fbb61043b9292643c9bc21c65fefd348ebff45d984970ff45f2a3fb1dd947f5a0f51
-Signature:3044022034f41eb3b4c4734207c60df584b67aa1be55731d801e3d2db4b9e3490c93bafa0220507a5d32700a46d4cfd9a1ea4c5bccbecacf5575db325f84d3dc7a1230f1e1cc
-r:23951590707393662544712773584834229809830212270060378333571184114675924318970
-s:36401226450771063087816160514318985156163266732580007024128973848244540006860
-.BC curve:secp256r1 countLsb:526 countMsb:517
-BC curve:secp224r1 countLsb:479 countMsb:521
-BC curve:secp384r1 countLsb:490 countMsb:484
-BC curve:secp521r1 countLsb:502 countMsb:480
-BC curve:brainpoolP256r1 countLsb:542 countMsb:524
+X:46351545126908041844411416378978791395309020105171017335122914303256054989072
+Y:86936607589758682544385340900690074855726303759393466913977564655975672768284
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004667a0b7ac932a1afe79be1b7eba15d354161848cb6d04b413aa7e1a69c2c0110c034604beb16cce39737e8380170909f522980a2caac2ff898de3f38098ae71c
+Signature:3046022100a2a5f96112d4b041f9ae27a79d0046d73e5d5e3745fc53340fb1b737b0458e82022100924ce8177aa983d1764d783e83dff7db18ae31189d2329759070489fc400214b
+r:73567932388115882121656487998978607584539742707255470157008231780029678587522
+s:66173558108229112641626688199136090013223829613761896047812242857888709615947
+.BC curve:secp256r1 countLsb:508 countMsb:516
+BC curve:secp224r1 countLsb:516 countMsb:513
+BC curve:secp384r1 countLsb:522 countMsb:545
+BC curve:secp521r1 countLsb:497 countMsb:538
+BC curve:brainpoolP256r1 countLsb:517 countMsb:482
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:566375 relative average:1.0017150632685854 sigmas:0.6642411476923606
-count:25003 cutoff:206258 relative average:0.9995538664250083 sigmas:0.1221860418444432
-count:12505 cutoff:204108 relative average:0.9808161717470442 sigmas:3.7156752791996834
-count:6252 cutoff:203236 relative average:0.972676508196254 sigmas:3.7420217825096724
-count:3129 cutoff:202550 relative average:0.9675999043344654 sigmas:3.1391328916259167
-count:1563 cutoff:201636 relative average:0.9754080275850547 sigmas:1.683966623163917
-count:782 cutoff:197114 relative average:0.9749769801223825 sigmas:1.212003083669579
-count:391 cutoff:193798 relative average:0.9612047451323672 sigmas:1.3287020816145714
-count:196 cutoff:192512 relative average:0.9609605983394369 sigmas:0.9466551804245754
-count:98 cutoff:191834 relative average:0.9711751561950324 sigmas:0.49424311466316845
-count:49 cutoff:191483 relative average:0.8753021299242265 sigmas:1.5118813259680373
-count:25 cutoff:191065 relative average:0.8980543050405072 sigmas:0.8828756164137993
-count:13 cutoff:190740 relative average:0.8862985100352523 sigmas:0.7100655772447653
-...E.0414273c9f931c1dd7a4a5953973fc38ea688cbbe1dc561e0deaaa9bf408f453c4ad090a38ae99fb86f68ab8c2a7ec293c22131ef107374c426e45783612221ab53b1a15cdf3abcf8e9470295303fe93b826b56efcfd3aeb8ee1089df2ef8f7b55758949e4a75203d79b9a05f693d8246fe1970dfb4a5e0829dd0f4e0a
-ECIES:org.bouncycastle.jcajce.provider.util.BadBlockException: unable to process block
-.testEciesBasic:04761920be0d8e02b03b00bd1420271cb55366415fb42be182d503a6e8346cb591079df0ed9126a4d4edb926e6bf82ab420a9520c4b2df3abeb1c8527b3815d4d6309a3b0107a1e3bbb9c0c7f8785ec3832dce8cc87ba9d419affa28e07d73d720f49bfa83
-..E.No implementation for:ECIESwithDESede
-...No implementation for:ECIESWithAES
-.04e58a7be870c3144172891df193d67402124ad4cb5ca15deb9f8ebb8accf689cb716017b68cdcc0ee32ef81595afa81e1dc9f1b2cccf85b2a2f6c4392d5c21d6278269ee745e75b3ba28cdde466c0db64e5638da3dd61041b82b0d5b17bfdbb9abaa9b298fc40bcb6251b1f6eb44372078b9ae9551bfcbb0eb111aad90428d91786f8ee56
-E..E...........testDefaultSize: keysize=2048
+count:50000 cutoff:1673457 relative average:1.0023790841819393 sigmas:0.9214153415876214
+count:25001 cutoff:184260 relative average:1.001173146913709 sigmas:0.32128593947904377
+count:12504 cutoff:180676 relative average:0.9948911148044179 sigmas:0.9894896443655747
+count:6258 cutoff:179875 relative average:0.9908699257661127 sigmas:1.2509867661421925
+count:3125 cutoff:179323 relative average:0.9798839777485905 sigmas:1.947725479291176
+count:1563 cutoff:178914 relative average:0.9685680211063096 sigmas:2.1523447759237047
+count:782 cutoff:178585 relative average:0.9637252979280808 sigmas:1.7569842083563632
+count:394 cutoff:178262 relative average:0.993948391199816 sigmas:0.20805568351114231
+count:196 cutoff:177967 relative average:1.0390280768047453 sigmas:0.946380567265269
+count:99 cutoff:177729 relative average:0.9684586346954711 sigmas:0.5435740468476218
+count:49 cutoff:177513 relative average:0.9255827116511287 sigmas:0.9022616706722401
+count:26 cutoff:177360 relative average:1.0022905067034489 sigmas:0.020229207467580976
+count:13 cutoff:177232 relative average:0.884400966671641 sigmas:0.7219157317523913
+..E.E.E.E..E.No implementation for:ECIESwithDESede
+..E.No implementation for:ECIESWithAES
+.E..E...........testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:25547378574698785467380898684758009905046547062837349719496355975821093392756166440336923782300670195981688917453981093568777566752656442884244626726307705446136152771974048575626691458639978150782299687770228228053291900530079284559203231375888845637589825049344151510284759886216609772748041855813522212866942818429473932795182038872731765281585751715953957881711805070602155793041840167820268095822173843583794696458595662568806540961854669423256918478635870742340212962654029078012178951442265367735222914132431926669803100078071674435583228416842479032416085585856137279653395743186604364368111367663625323911383
+Modulus:23785390121118787438025409312316433074698417193577003555839955401084148641641774590334800287679450946063680902669985696510486560867536757635254306416164153722379202628921565812731327056569367672767606950723044510550220306912770423160207032881259505158026036856627908880231860004698844495687807469657783335894279285525958718633285343393756583111310220892236875946801375554095515425906769720074062454969080978096976308541473885906077114751507530582272188603033371348968212544680906123359982900431139626591937424404261350378110480110917633251656113376207239283704341289828667127206878829227168304602899807737718287633849
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:9369814991695490438785738914448111831219789256082670194434810266152306503730466677497573408811359372045010691126884302845200756568811916770483024403114197506081322552200348178708988346210535038547366318950960385791277458032733428800636105878611352948226617480180061610646804568488724549531689092684464144980218600773639060105261777592564317609164182162885015465587153109993312012117568711780808903304060617166620995834468589211547028071271927225333708914164811822878182779561854780103503058351139929300055178073870612742333164718268293541552712501700759704294359339633982455323590376593670433797887673478158039168333
-encoded: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
-Signature:8e486765230e573875b8b654d559b922de3e238defc8836c04b87c289e27e5e6d54ed7b7e12e7a26f90f8da4d55ee6d82a073eed1eb6ed81cfb70b354248feac5498b683ec1d0f2cfc091ac8539e45dbc5573d7b84b84d70755d95d7983116007a0a9225719debf10620eaa70eeeeb4a4b7346f91582e29093170ca6007981901f85aefb279c796827d3b24e7920d930230bf368e9a6b61c1d2e417351f0e92dcd87ed4049c12a68ceee460d4f4de4dc4fcabcd5401a6a7339717b23537e0d1b3b5c5fde413f37809a8e890c3279506009ad3f037d5b346f2ee80f15ebabf71748ae7716fd2d86c85716939d723a8a038795047c2994ecff7ddfc0bb36e19db6
+D:1664218783288679674032462798138868179257970185408965161745336458667185919347061314737937756063813148498939664299452514020306637851260964068182227170473484091337257330285485146318560511129573148961286932153447985155378415511062587170623149507560850525689738498955815435102357356173559232723140228452870370733201065288827836420389684053828770923921109624563320236712388219504928272480506249697813197302975935165866779848475342491111445398882218711078703164698779934522084334012449232386047382553091194608168956986839294268638936617870573172427389638531091231219933730652379067357626847619814767207116698975072549643329
+encoded:308204bc020100300d06092a864886f70d0101010500048204a6308204a20201000282010100bc6aa53660346d565e3f9c7287517d7a5a8af073df8321d0a04be518bb5d5d83697953ea520c66330ca666f8c983a743b5b4e0f0f9cd05029400663667f0def3137a4478ff40d97e66c30bb15bb11cdfe1f7e930e602d6ce00a83f1e4bd4ab822fe9a1845b1db9c3698d7fc92e1a0b3d497c4d5b64fef8e06daedc8f872f7e62ae50705eeb8a009944a6e5b6e7587f1d185073bd6ab2b8b7289ddbb8722af49be99f9945193583863d2ae103cf1e5db02984fb7c5a83e9cb6fea7c7e1f66d421f382f1a2623182f3ec697908451784efab661f360965b9cb0606645ef6d9d1ac70af8cf6b39147674969a5a36388dce08d5649a7e25f5f313b6e4d7f62a40db90203010001028201000d2ee30f6a6cd0a7a5e18a8742eb933d7fdf4fd2b3b55fa4d2ca6ca5adda6b041a59a862f149b7cee39833053e484d6841eafd802ee246f2f6bb0e6bc91b03e67b1ae77695d98a3e3b5f734e7e0d66e94d4cc4ceac914f494ba779ff1b2c2eb1e5bb51974aaeca441f7b0c915d7dea0268455fbe40d34c439bb90beaa8f94c3ce9807b5bcf35c0e6b11b7c766fc7b2fdc99a7e53a6f4cdba7c64e908d74ce815f2b8ea0189f9fead7041f2cb4f1579123d7cbeec653b93b5d3aad6e40058182a7dd060f5e090c7c77ba2513149da2903826a3c2ae5e60413ab0aeb746e817867758fdae9b7e3dd456e570b43dccd50ad394ff8d5953172851782e944b5dca44102818100eefb6f121330cced599676eb8520bc5ff3bb18e228ea8018cbb148a11ae56d47166e91ef18af17f728c98c44e1078c3e30f3847100f9752c2755f28fb3edea57a238f2e091ca0963e4dd2ae6079801d3410dcd12040726ea0c8ddb59c2de3ef73b1cc3146b8aa80fe9b0282c46c26a66310c897840c823254996be52e15029b102818100c9d56ae928fd1b6ad276426a573d70a4efa484221d70c18c84dffd4325b5d554d5ef4e61409d2959b62609e4d0f5820bb0c624d459ae945daa1327602815178963f886cbc727e52f4197b42e8519beb2b572b91494af62e98270b82ced4f4adc670c29111ab054bd07e15f9a397d25608a6426357ddbeb512456a2ee234b1e890281805ee697e7dc990f77dd90a3aec952039c32e4847023016456f464754c0cab38e6f6e077b133e32c282919484b7df50a5b14034fffb3fc5bec69be76b15c29495afd7f91eb5dd9963b060251ebc0ee3b2351fd12076a74109ef6d74a58edca65c4b5c3a9302db8851eb495108eec967dbc1114426eef82ca7a1f2bee6e692cf53102818013526d13b92ad1ef1e0ad83cd9f135d17467a986a28ee2d892f7e685011d313917e9faf4f07c9b32cd6f42cf36f9e9e3389f1f737cca6bc5b3bc75ae8ce7c8030d2103b68a70554e7ad70d16cf0331f065d27fc96a9a87bb9713376e85a16ba741ee36183f17d664ea563712caa2226be593c4dca619e1a338f95a4bb5f1411102818015f78e63bd9d27fbd6d0a0c716a68051a9c9726ddbbb327809e5a4f0a37a61479fb3daee0c51a5d379fe14e487a2acb0670862fda53e385034ca8ca146cb5dae3e13e3165ff28fae7cf989108ea2e9f4b1456ed7c9aa90433495f4dabf0f9ad7ecf947f27af43dff2844102311cb7dcdeda3372c805395be1344556bf3fd3a0f
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 59.013
-There were 7 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 76.712
+There were 19 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1356,7 +1432,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1398,7 +1474,233 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testEncode(com.google.security.wycheproof.EcdhTest)
+5) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:c08c259fae5affd694ddb1ea7518c876 pt: c08c259fae5affd694ddb1ea7518c876
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+6) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:67f9e8484e6a09086c83dda22c5594cf pt: 67f9e8484e6a09086c83dda22c5594cf
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+7) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+8) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:8a9f050386bb3510554fd4cd27f297c6 pt: 8a9f050386bb3510554fd4cd27f297c6
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:d013684dad5c724ddca83a02d5cbd54d pt: d013684dad5c724ddca83a02d5cbd54d
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1435,14 +1737,176 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testAlias(com.google.security.wycheproof.EciesTest)
-java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1537)
-	at javax.crypto.Cipher.init(Cipher.java:1470)
-	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:345)
-	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:353)
+12) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1475,12 +1939,15 @@ java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+17) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:393)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1513,13 +1980,15 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+18) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:202)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1552,12 +2021,14 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(Unknown Source)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+19) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:430)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1592,12 +2063,12 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 96,  Failures: 7
+Tests run: 96,  Failures: 19
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:29:02 --
+-- JVM shutdown starting at 2018-04-06 18:55:46 --
 
diff --git a/testlogs/ConscryptAllTests_1_0_1.txt b/testlogs/ConscryptAllTests_1_0_1.txt
index 6a6176e..be71061 100755
--- a/testlogs/ConscryptAllTests_1_0_1.txt
+++ b/testlogs/ConscryptAllTests_1_0_1.txt
@@ -176,13 +176,13 @@ Signature.SHA512withRSA/PSS
 Signature.SHA512withRSA/PSS SupportedKeyClasses
 Signature.SHA512withRSA/PSS SupportedKeyFormats
 ...Skipping testAesEax
-...Skipping testAesEax
+..E.Skipping testAesEax
 ...java.security.spec.InvalidKeySpecException: org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: Error parsing public key
 java.security.spec.InvalidKeySpecException: org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: Error parsing public key
 java.security.spec.InvalidKeySpecException: org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: Error parsing public key
 java.security.spec.InvalidKeySpecException: org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: Error parsing public key
 java.security.spec.InvalidKeySpecException: org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: Error parsing public key
-..Encoded ECPrivateKey:308187020100301306072a8648ce3d020106082a8648ce3d030107046d306b0201010420ec10e9aaf2a7ba8365894c75772b9856521c0a6c52459bd876351f172def6fdda14403420004c89c6c6bbb99783bb917d0529f1cf009fb90d322a477090b3efe74b98bab6030898b50c45f9945daacd93c98f57edf70bcd613ce7bbf0359a567119f36cb28ef
+..Encoded ECPrivateKey:308187020100301306072a8648ce3d020106082a8648ce3d030107046d306b0201010420a0102437b89e6abcde27f417049a4c192d849084b54323638f95bb4ef9d534cfa14403420004db700fac250bfa2934f96347a5812af95be69fdb7a1f54718a40d3f0821df69885bcf1634fee907b44da5a454e825fece62f09314f1f9866bc60dde29f7e73ad
 ...testWrongOrder: ECDHC not supported
 testWrongOrder: ECDHC not supported
 ..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: Error parsing public key
@@ -203,7 +203,7 @@ testModifiedPublic:cofactor = -1 throws java.security.spec.InvalidKeySpecExcepti
 testModifiedPublic:cofactor = 0 throws java.security.spec.InvalidKeySpecException: org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: Error parsing public key
 testWrongOrder: ECDHC not supported
 .Generated shared secret with a modified order:ECDH
-expected:9a1c61c81972b00c71069bae64c3c0b16a8dc7715865c2a5c16f535516e260b5 computed:9a1c61c81972b00c71069bae64c3c0b16a8dc7715865c2a5c16f535516e260b5
+expected:b84d077d5a9152702dd6dbfd4ccac7484350452aafecd2c204e976e743badc93 computed:b84d077d5a9152702dd6dbfd4ccac7484350452aafecd2c204e976e743badc93
 testWrongOrder: can't modify order.
 ..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: java.lang.RuntimeException: error:0f000078:elliptic curve routines:OPENSSL_internal:POINT_IS_NOT_ON_CURVE
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: java.lang.RuntimeException: error:0f000078:elliptic curve routines:OPENSSL_internal:POINT_IS_NOT_ON_CURVE
@@ -223,49 +223,49 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:95110945688219516092201264416916396641717826057026013805338592985534804765709
-encoded:308187020100301306072a8648ce3d020106082a8648ce3d030107046d306b0201010420d246e33771c4ecf88f3b7aebda4a6d18663a11df48ac5ae8d44cc998cb23ac0da14403420004fd22f95e20bd719a17fc35170e261caf919caa520757253ace026a76a2dbfab29bd594f0caeee573e9d5d18a6ee67793aede9dcc19a7f3dfd7fae04af147eb93
+S:21146568867564984479024083837944905997251082007306305936037988135052790122899
+encoded:308187020100301306072a8648ce3d020106082a8648ce3d030107046d306b02010104202ec088a91856a00fd2b594cb4fda2bb73aeebf3f1ed538036fd246bb671ec993a14403420004f03f92c6e6841bc63e3d0aedcc1812cf03f80dc3c163252799571e9bf096d5a2590937f30671cc2a9c02341b1d3bff93077ea93ed4e06dec66057060b22840d0
 Public key:
-X:114496944564292124863188097098483717485709476211905926388853775868856268225202
-Y:70485857905421970334282199733557304531766070277273062215339915088492298234771
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004fd22f95e20bd719a17fc35170e261caf919caa520757253ace026a76a2dbfab29bd594f0caeee573e9d5d18a6ee67793aede9dcc19a7f3dfd7fae04af147eb93
-Signature:304502202e5e9685389c2fb9671d6f4dabe68cc699d79516517f3c6afbe4e504b1109fd2022100aa8bb0b440f740f79fae04e016c957702ddd2536528c177ee4c90978ec665e8f
-r:20973513512506087008811951890779471628599793055708763259498381222579671179218
-s:77139995568148617643215479148741031423966611106779424449304036588936168365711
-.Conscrypt curve:secp256r1 countLsb:508 countMsb:494
-Conscrypt curve:secp224r1 countLsb:476 countMsb:497
-Conscrypt curve:secp384r1 countLsb:514 countMsb:507
-Conscrypt curve:secp521r1 countLsb:516 countMsb:484
-Conscrypt curve:brainpoolP256r1 countLsb:486 countMsb:509
+X:108667408042377216306380364650602851914169198397811438578710515045895528437154
+Y:40272131295488514959386167788306727723773982423264014771879373699321921290448
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004f03f92c6e6841bc63e3d0aedcc1812cf03f80dc3c163252799571e9bf096d5a2590937f30671cc2a9c02341b1d3bff93077ea93ed4e06dec66057060b22840d0
+Signature:3045022013e1089566ec9d9a223db7f3fbc30d29bc958ea850d1702ef20949b8af305efd022100c81b1f811c37a1bf5ae64af8f222a76177e4111784ebb4f68aad715e0f93857a
+r:8991543954499217359066019013901242998661207912983857481123298588149993725693
+s:90510492022343794394036701279714486709409831748953960284747679540866083685754
+.Conscrypt curve:secp256r1 countLsb:495 countMsb:512
+Conscrypt curve:secp224r1 countLsb:512 countMsb:527
+Conscrypt curve:secp384r1 countLsb:530 countMsb:518
+Conscrypt curve:secp521r1 countLsb:510 countMsb:534
+Conscrypt curve:brainpoolP256r1 countLsb:503 countMsb:510
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:158050 relative average:1.0026319856079573 sigmas:1.0193636427076083
-count:25002 cutoff:52076 relative average:1.0068011160030783 sigmas:1.8626368265507443
-count:12503 cutoff:51141 relative average:1.0095311965719442 sigmas:1.84592975133452
-count:6260 cutoff:50954 relative average:1.0137364961222317 sigmas:1.8824513531425144
-count:3125 cutoff:50740 relative average:1.0115524722943952 sigmas:1.118563320092868
-count:1564 cutoff:49549 relative average:1.0111678915196567 sigmas:0.7649801894609453
-count:788 cutoff:48420 relative average:1.0207482876248295 sigmas:1.0088021424706208
-count:392 cutoff:48249 relative average:0.9930766617429845 sigmas:0.23742104464929153
-count:196 cutoff:48159 relative average:1.0021897086380134 sigmas:0.05309761260736302
-count:98 cutoff:48078 relative average:0.9537817662291308 sigmas:0.7924776268590938
-count:49 cutoff:48019 relative average:0.8828908992364661 sigmas:1.4198723878580064
-count:25 cutoff:47973 relative average:0.957788644422948 sigmas:0.36556106257904963
-count:13 cutoff:47917 relative average:0.9851475792995927 sigmas:0.09275333754541415
+count:50000 cutoff:760930 relative average:0.9986282831067681 sigmas:0.5312636683198397
+count:25030 cutoff:44063 relative average:0.9981408787394593 sigmas:0.5094467189727442
+count:12505 cutoff:43796 relative average:0.9974155508537388 sigmas:0.5005765104069814
+count:6257 cutoff:43653 relative average:0.9935182712522335 sigmas:0.8880441490723817
+count:3135 cutoff:43555 relative average:0.9943350062210984 sigmas:0.5493875801413087
+count:1569 cutoff:43481 relative average:0.9842869919459897 sigmas:1.07803145327494
+count:787 cutoff:43415 relative average:0.9763552776549187 sigmas:1.1488999541152833
+count:391 cutoff:43365 relative average:1.0045397355418475 sigmas:0.1554818001586329
+count:198 cutoff:43318 relative average:1.0296218804444512 sigmas:0.7219478830447694
+count:99 cutoff:43284 relative average:1.0051954412714281 sigmas:0.08953661358038344
+count:49 cutoff:43249 relative average:1.068218823148017 sigmas:0.8271092740744475
+count:27 cutoff:43220 relative average:1.1753356750007309 sigmas:1.5780210750065775
+count:13 cutoff:43196 relative average:1.0320860044452465 sigmas:0.20037703353716566
 ............testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:26954838764287528505968742536241768662774062657516275921970685815497082306187222045569384616683963710330765144014966355075976410595136739856411764472580117600924773288118542672262735395562558739581496158154974166291454678333874432614927108585463263182903967796811251231938249684124714772149658910075434843552759475317682750798369706252273999404158368007751391053781612055652310846140505648571037658181493482610631201828835673445157133998828537395533260531162030153430861025510167382044007558816732129879146008574994296529278740345128054194156969741851466343396183920497783401696740857281771686452445409695708450916949
+Modulus:27428004659764144464458133661628547000519693533828190698315088400800675854249701362154088341195740069406428760605120320427496061935304872298018100036368191927600436980591372898728673760026312061229138511668586865400465575841245421633293237411189988184049036268965595906982704705031638440175440946431459341769305570305527260223918895037476472505064417642341131583902420774706758915108845840621476335399604380400520712460317335735036689615114531040146509335823555239326587201791114065686706264868547691599672148900115503725647678290499504789625926948188849506754143877453442218114570403851239560249466385598639063863793
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:4897252928366748583556919257503864068658174223157091374382485557854704350516063489274679381583776430091527237587716929213873859361220274981617939172910134126893377413394380084511533795489012113953901990557261964966848510840005536859269375801869342123057777203055244646820707981580984463615758863577341084916593628567601820141955758068660200674208216366625149532855739679790392319032566729452240769010084614170065943991213657763162028891062216743485406899727224385475075044487403242518907659049108669841313327299429393628303916281905398410066460682929780646739127397105234201990511104360458233186480129763617775521413
-encoded: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
-Signature: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
+D:2867956405270286112864724895093230167047794831376796829392232205297569792029077330507979139724569445666187110933316115717984095067323198554102927125505014377097882028758526185693011872820243678801104398062726530690648648471033073883417767561370404375059005344952530438554949565396731011808783632843404229737512165465417201049527061611034646728261546175955693654224865859832236932035389480088088253432604460601077277055906029622401590580307887758111831618097067342149847242812456703969773435490601184416865658338835820944892712986468044717796038257696762516606008150692064247816674749875340832704789003733335204611413
+encoded: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
+Signature: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
 ..Rejected legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 11.731
-There were 2 failures:
+Time: 11.438
+There were 3 failures:
 1) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: direct buffers and output offset -1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
@@ -349,14 +349,51 @@ java.lang.AssertionError: ciphertext size:32 expected:<16> but was:<32>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 63,  Failures: 2
+Tests run: 63,  Failures: 3
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:39:23 --
+-- JVM shutdown starting at 2018-04-06 18:54:28 --
 
diff --git a/testlogs/SpongyCastleAllTests_1_50.txt b/testlogs/SpongyCastleAllTests_1_50.txt
index d58daa7..f75e878 100755
--- a/testlogs/SpongyCastleAllTests_1_50.txt
+++ b/testlogs/SpongyCastleAllTests_1_50.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
+.E.E.testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
 .E.....E.........E..
 Provider:SC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
@@ -607,37 +607,36 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-..E.E......E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E.E...testTiming: SHA1WITHDSA
-count:50000 cutoff:3258994 relative average:0.9990724026003706 sigmas:0.3592569280750184
-count:25003 cutoff:514612 relative average:0.9279413868033777 sigmas:19.735247963482877
-count:12500 cutoff:505097 relative average:0.7390711434765991 sigmas:50.52865579300381
-count:6251 cutoff:499485 relative average:0.6458479683783331 sigmas:48.49814351232834
-count:3125 cutoff:492222 relative average:0.7469246640351148 sigmas:24.50391403819618
-count:1563 cutoff:483158 relative average:0.7818736112344943 sigmas:14.936482202995583
-count:782 cutoff:477660 relative average:0.5974381790465682 sigmas:19.498292801965988
-count:391 cutoff:473964 relative average:0.3922259296611882 sigmas:20.8157073633324
-count:196 cutoff:470788 relative average:0.2481734384066116 sigmas:18.230825244233845
-count:98 cutoff:468060 relative average:0.1397264557378033 sigmas:14.750618558605868
-count:49 cutoff:465790 relative average:0.07268679771407793 sigmas:11.24307506622029
-count:25 cutoff:462705 relative average:0.027837691480725117 sigmas:8.419172557794171
-count:13 cutoff:459473 relative average:0.021676582273349884 sigmas:6.10962778548921
+count:50000 cutoff:2160800 relative average:0.9965607085331655 sigmas:1.33203185738034
+count:25000 cutoff:512350 relative average:0.9201394659208899 sigmas:21.870707984769325
+count:12501 cutoff:499800 relative average:0.7750061524253848 sigmas:43.571613992775525
+count:6250 cutoff:494429 relative average:0.5774485116704964 sigmas:57.86024546636253
+count:3125 cutoff:490645 relative average:0.3956719283864245 sigmas:58.513813925125525
+count:1563 cutoff:487578 relative average:0.24880099262760905 sigmas:51.43930850378626
+count:782 cutoff:484840 relative average:0.1461965861594014 sigmas:41.35441587320306
+count:391 cutoff:481700 relative average:0.07406353200964079 sigmas:31.71247918487268
+count:196 cutoff:478491 relative average:0.03107954025590745 sigmas:23.495072506776687
+count:98 cutoff:475599 relative average:0.018484081939873328 sigmas:16.829492215666864
+count:49 cutoff:472855 relative average:0.011032648771885398 sigmas:11.990591895477365
+count:25 cutoff:470728 relative average:0.006031921387593197 sigmas:8.608016066291524
+count:13 cutoff:468114 relative average:0.003033874019543931 sigmas:6.226051461218954
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:35656020acb58290e4c02fa07a30f9017042ecccb6d0ba028ca6332b43820c7c computed:4119958107aa1f554a68e53f0f2b0ea64181fc784907b40d64d8c305d44953a3
+expected:3be7c5e1fe19c5546d43e03a5862a0985ec161d2a67621960b278232d96ee555 computed:6906970d3e439daa8cebba0ab281c265620dade9931efe90e6ff05bd0face478
 E..E.Generated shared secret with a modified order:ECDH
-expected:f2cabdb76d77fb5da3f402a49668c162d4f0d836e10df63d76f2a955a127bbcf computed:f2cabdb76d77fb5da3f402a49668c162d4f0d836e10df63d76f2a955a127bbcf
+expected:d11e0568e9b4910077f58b6bc7412d2606fe507cc594649b1d1f51de6a49ebbe computed:d11e0568e9b4910077f58b6bc7412d2606fe507cc594649b1d1f51de6a49ebbe
 Generated shared secret with a modified order:ECDH
-expected:6b9cdb28d993a821214920e76e086ad36ed9dc3f29ca407a167b062431764a4c computed:6b9cdb28d993a821214920e76e086ad36ed9dc3f29ca407a167b062431764a4c
+expected:8c228dd7fe768a80bac50bf354cc43a5f7950027c32399fb06ae7a5d9069d33c computed:8c228dd7fe768a80bac50bf354cc43a5f7950027c32399fb06ae7a5d9069d33c
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -647,39 +646,36 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:68869239317030554744464772944285131306531335920365526739752279029429788254908
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042098429bacadced446cdbfe7595d29a0ffcf639c25f3881befc3edcbeab008a2bca00a06082a8648ce3d030107a14403420004e8f9b7f2e7481c504e15d50a1a9dde8994a81ac5706eabc9a9cf6d4b5d3bc4e49f28521857b575ae4b1f49f8bd31c046ac5ce179cba5401d82a9520b8e67eadc
+S:21165216289227740290619742536278018060130807304271478127404687675662491239178
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104202ecb1680680554e282de6ef6146612cbab8e56e35ad77d0a75ce610af0a8c30aa00a06082a8648ce3d030107a14403420004a2f90ed74f27472aba7118bf19d7ca466194ba1280fdbdeed41be85c262650b85da7d1e432d65a502241b81a900d2b2218d0569de4683150ea0bd628342a2de4
 Public key:
-X:105377795358692979880121892573115147968813544510170818350721647917259424515300
-Y:71988983406806465524579929702754220423894404896526496089613816536353328327388
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004e8f9b7f2e7481c504e15d50a1a9dde8994a81ac5706eabc9a9cf6d4b5d3bc4e49f28521857b575ae4b1f49f8bd31c046ac5ce179cba5401d82a9520b8e67eadc
-Signature:304302203627cf59ff00283fac5392c48c1f0f5c2265ff4bb9a3720ef73e030ee357fb59021f544176d7812de6fb6b8f976fdfb3ddab64d11acea7396ebf652bbcc0b144f1
-r:24495231946806480036810888730988557435798413906016139526183786108711958215513
-s:148866970922916386930275228336405852790565855937349230929360379594291627249
-.SC curve:secp256r1 countLsb:504 countMsb:503
-SC curve:secp224r1 countLsb:516 countMsb:510
-SC curve:secp384r1 countLsb:491 countMsb:506
-SC curve:secp521r1 countLsb:505 countMsb:513
-SC curve:brainpoolP256r1 countLsb:528 countMsb:529
+X:73714728818792190191886188989216969807293089847601594866070795727771892338872
+Y:42361606995269877844613642845336946230666735792114755584284073678796036386276
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004a2f90ed74f27472aba7118bf19d7ca466194ba1280fdbdeed41be85c262650b85da7d1e432d65a502241b81a900d2b2218d0569de4683150ea0bd628342a2de4
+Signature:3045022100d8798ec0172ac7c845b1d4d284dc2a5d15c599a9e39cda415d45e1b1de9e268602207ab1fdd984c708dfd376bbb220c1d2a42c482449d77b8b3c06ec70e0e517edd5
+r:97914349015554510289527004419292854761210171669537727115680721221955471943302
+s:55496651463741538804668244670601972240447559178097900507136915026133594402261
+.SC curve:secp256r1 countLsb:512 countMsb:506
+SC curve:secp224r1 countLsb:520 countMsb:536
+SC curve:secp384r1 countLsb:507 countMsb:481
+SC curve:secp521r1 countLsb:511 countMsb:486
+SC curve:brainpoolP256r1 countLsb:491 countMsb:524
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:6128569 relative average:0.9964759276933994 sigmas:1.3648673354294547
-count:25000 cutoff:2159726 relative average:0.890921218341278 sigmas:29.8724546298314
-count:12501 cutoff:2122641 relative average:0.8573706202834789 sigmas:27.6211653964285
-count:6250 cutoff:2097590 relative average:0.7691742289600919 sigmas:31.60712041302009
-count:3125 cutoff:2079026 relative average:0.717605353753215 sigmas:27.342744049298336
-count:1563 cutoff:2058964 relative average:0.7590396391602448 sigmas:16.50006751443343
-count:782 cutoff:2033705 relative average:0.795708477189205 sigmas:9.89496698740635
-count:391 cutoff:2014385 relative average:0.7554639370147643 sigmas:8.375137037426574
-count:196 cutoff:1996719 relative average:0.6715489868551269 sigmas:7.964513795901507
-count:98 cutoff:1981873 relative average:0.643189287172272 sigmas:6.118029268306719
-count:49 cutoff:1972827 relative average:0.5420089266402495 sigmas:5.55284665930465
-count:25 cutoff:1960314 relative average:0.4654397713038563 sigmas:4.629427379036798
-count:13 cutoff:1950596 relative average:0.18611694249490274 sigmas:5.082698065049701
+count:50000 cutoff:6087019 relative average:1.0015661437080206 sigmas:0.6065648498931315
+count:25000 cutoff:2173671 relative average:0.9890511530650001 sigmas:2.9984652224853754
+count:12500 cutoff:2093507 relative average:0.8797297736690344 sigmas:23.29022918122133
+count:6250 cutoff:2067200 relative average:0.8225251463381196 sigmas:24.301745185135058
+count:3125 cutoff:2046872 relative average:0.7781694633295816 sigmas:21.47864935511961
+count:1563 cutoff:2032363 relative average:0.6464721860423834 sigmas:24.20826719466104
+count:782 cutoff:2021538 relative average:0.505632236233349 sigmas:23.94496176250749
+count:391 cutoff:2012028 relative average:0.34904501898198353 sigmas:22.294614154929235
+count:196 cutoff:2003072 relative average:0.22399304632453096 sigmas:18.817168591097246
+count:98 cutoff:1994581 relative average:0.11417437435734433 sigmas:15.188745487343237
+count:49 cutoff:1985422 relative average:0.07588509231398344 sigmas:11.204297805008023
+count:25 cutoff:1978044 relative average:0.0627081998885063 sigmas:8.117185096553998
+count:13 cutoff:1970589 relative average:0.04095395807128655 sigmas:5.989240612216721
 E..E.Skipping because of:java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC
-Skipping because of:java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC/NONE/PKCS7PADDING
-.04b78d68094f85469b5202efb752fc608072e60713be68a4f1e98434526d7b134540ceda23e365864b98bb7f8a4455d0742c0c8e343b9140b82419b703123946b7db527425b39c610bffe2db58de6d853f4f36dbd0abd1f90fc282e2096d1c667a9d3b5d3bb51d92bc7bbe1a47a1b2f8376f1952960571cd8b4d223da7
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.E.E.E.E...E.No implementation for:ECIESWithAES-CBC
+E.E.E.E.E.E..E.E.No implementation for:ECIESWithAES-CBC
 ..E..Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
@@ -689,18 +685,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:16204083161270984663366806665596717981500741301775825610126860423680019923416559662927407663023718258211738985638499336205179859574197045667822692187769026169193055493500755238928788819528320493427003228083851024579204954859188851760776479541231286957978363587004491312222970904311467075404003184268538210386585219404155007796797808949145607116413249699542403623707351902597040144522652176603912003376261560725988345472866656381080508456698423603493833410261148232896685125611578039659535316079747034260243668148084593006614430512254484257871281516044700781193989598472722645360258342326572762021227519655958704212197
+Modulus:24455309787393884728997083411497716848241355285870714013221910345478265512227994558125045744775463819734783145707975458103100428523421012661470106970251983007258870330595783667817012702891332178633514762720565941187217701669605657298284178625841417743923070784087171704660214781686825366370806220119645998206538974877176760077988818113157836787641710741710080550617251845306906496035192171555198432039665172580317126461459884898005480370585608397054434022255411041423485491379948259146517107413064876192366689551290450859384896923035272838750279294649864536914688905388451974056406578883030562576571226342643152241143
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:13572097180043134262195870294458627087607591002595154178419574017374058221099253750055865563554907039226067357365587463005244867048336424169524439928147723949514704703438415804435343025795330401531883687016170261702575924777310442205968270060839950008351745334968804448030018445755299307308490513616256457337480463150126396034931068601899808326729728537833524116506348076313109187609815274475705703316694318270681550474146666947672960928654671391825907075443123843938124271741882822229773732817888426243061726534230971028027322990676112963892801683192260335158454282714086498971541995351474634460622629123920682820609
-encoded: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
-Signature:5821bf43e56c50aa8e75278f6d305891066c9ad180f4f5f29e874724f77413c972cc5a593b680a8577230aa8bddcdcc4308684d3cb216e70609d6a26db3acbedc2787899885948041b159877b6430efe611733aedfb1f3e8c245abaf485ec79a6dac2ad1255f904b9dae7507f877cfbc22c5284e0ece6c02f751f242fca09d767a12bfa0a21d9401739ce4748c0f3b994add35d31f8eacf427a462fcfda666f2045cb7409bf1c6a43328d8bdb82b90d9aaf60ec3a1cc4d6e19e71e8151dc593a993b6e46622352014b88c3f0a18827e0b9c0c2035ae8fefaa89851572e9d68e137c9367b7380be1c6e4a5aac2b47ad248ba94ce589328eedcd93bbb9e6e7a4eb
+D:23567952620077366458622255995648020178190575682443633769642837412607561705400123720899946048709485014428935848448510337036082212568636766081538527642921479389588522379878528169975047763887783222764456091958256012320421789519670166612788660418229673364487804257933101571549422545990176592071863986092386310034131813253238060775047776264321192917645553793275614124650709412735383222288841523469570186569600897069669514130249355967278357255063384977251289686618087331063473992068848730488627715724989539630040108801823907303779492875988993255660075112118492662863526947307542397321951701758971978383453634546045712028809
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 172.59
-There were 27 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 198.52
+There were 38 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -742,7 +818,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -784,7 +860,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+5) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -820,8 +896,8 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
-java.lang.AssertionError: this should fail; decrypted:194815ab399cc9c9bb57e1299a2b8078 pt: 194815ab399cc9c9bb57e1299a2b8078
+6) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:5f843c0efc0e51d3a2897134dda475d6 pt: 5f843c0efc0e51d3a2897134dda475d6
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
 	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
@@ -857,8 +933,8 @@ java.lang.AssertionError: this should fail; decrypted:194815ab399cc9c9bb57e1299a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
-java.lang.AssertionError: this should fail; decrypted:18a7aefcd9acd196d10c59f53f702f5c pt: 18a7aefcd9acd196d10c59f53f702f5c
+7) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:847bca4cafd36b7ea037d2ad5c8fc1f1 pt: 847bca4cafd36b7ea037d2ad5c8fc1f1
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
 	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
@@ -894,10 +970,48 @@ java.lang.AssertionError: this should fail; decrypted:18a7aefcd9acd196d10c59f53f
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+8) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:fcd2c472c6016af61eabb2ae54c38d2b96a9d83d81727caa1d773f5a628dd57a944fade89ee46199645cb85948006d43 pt: fcd2c472c6016af61eabb2ae54c38d2b96a9d83d81727caa1d773f5a628dd57a944fade89ee46199645cb85948006d43e0690ffd3749883a86b12d5fdda4bcd6a4
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -930,12 +1044,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+10) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:74ea713dadf0df04e49b8fa0361c7fed pt: 74ea713dadf0df04e49b8fa0361c7fed
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -968,12 +1081,91 @@ java.lang.AssertionError: Ciphertext repeats at 256:2d3ace54325b5707cd3e87e15106
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256:0a378cd8742bac9b5f8d51b8523a5bd1572ed29c2c48be66eb1aaee22359210a10d2c817f156b379d95cc273f326cdc54fcad3f67ae03af0a3264b6ce401c816fc092c91b28e8cb8971d0586a769d07ddb1b4bf005062af5d51f519b1550c220a88a8da3cc2a394d456b1a0237075c442d58c7a4f6e82ee234ca3bf004074e1ff502c9b62ea19f50352b94060564ca7e56b958676ab5ffb9f8c06431f85b9181ececa1f182cd5f09d4c896750f4801a317ab42c5221828e679a9cdfc1eeb1915509e0934bfb64db462c498c3612511503efbd9476be9c0b46e75c79818616e8a5eb634ac648125db91916f6152b03bb91727364cd75fa017b36bfe741df976df41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068ad41c6e011cca068add75c0940a1ebbd749e7e5c7bbc8ce44c50030edcf35eb91789cdabbc
+11) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1006,7 +1198,129 @@ java.lang.AssertionError: Ciphertext repeats at 256:0a378cd8742bac9b5f8d51b8523a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+14) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1047,7 +1361,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+18) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.security.InvalidParameterException: strength must be from 512 - 1024 and a multiple of 64
 	at org.spongycastle.jcajce.provider.asymmetric.dsa.KeyPairGeneratorSpi.initialize(KeyPairGeneratorSpi.java:39)
 	at java.security.KeyPairGenerator.initialize(KeyPairGenerator.java:351)
@@ -1085,7 +1399,7 @@ java.security.InvalidParameterException: strength must be from 512 - 1024 and a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+19) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1121,7 +1435,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testBiasSha1WithDSA(com.google.security.wycheproof.DsaTest)
+20) testBiasSha1WithDSA(com.google.security.wycheproof.DsaTest)
 java.security.InvalidParameterException: strength must be from 512 - 1024 and a multiple of 64
 	at org.spongycastle.jcajce.provider.asymmetric.dsa.KeyPairGeneratorSpi.initialize(KeyPairGeneratorSpi.java:39)
 	at java.security.KeyPairGenerator.initialize(KeyPairGenerator.java:351)
@@ -1158,7 +1472,7 @@ java.security.InvalidParameterException: strength must be from 512 - 1024 and a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1194,8 +1508,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[35656020acb58290e4c02fa07a30f9017042ecccb6d0ba028ca6332b43820c7c]> but was:<[4119958107aa1f554a68e53f0f2b0ea64181fc784907b40d64d8c305d44953a3]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[3be7c5e1fe19c5546d43e03a5862a0985ec161d2a67621960b278232d96ee555]> but was:<[6906970d3e439daa8cebba0ab281c265620dade9931efe90e6ff05bd0face478]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1231,8 +1545,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[35656020acb58290e4c02fa0
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[1b6e57fb0cdf11c99f0ea3fea4a97d8577959fa07af4e8745a8470ed806c78f5]> but was:<[d25842f5a323859634c568416b73ffca0368d860a937e821913b8c9706db3de6]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[7e4ce887536ecf2e872ae3d19f99290e95b6cfc52fe810cb4c3f8bf8f731d5f6]> but was:<[f23c402e33e5eadfe6552e59aed6c53d0e8198d6ba13ecfe617e4c35e4bc3d45]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1268,8 +1582,8 @@ org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expec
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[94bb80f6626cc90046eeaaadad4fae1f4c8437df8751e11a1cd22ddb05891e98]> but was:<[d1bed137ef5f7ca1a750ef1b297d80ba1bcd07a2b7f7099bf3a69c6b2734fc09]>
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expected:<[36fca65a3202bc6cb8220c00cc579bc79780e304cf931567380c06173c753b6b]> but was:<[0e1b9c9324efd54c01223a9e71ce74283967b25a336d59f502176749a5f8f62a]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublicSpec(EcdhTest.java:2000)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublicSpec(EcdhTest.java:2016)
@@ -1305,7 +1619,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:public point not on curve expec
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1342,7 +1656,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1383,7 +1697,7 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testTimingAll(com.google.security.wycheproof.EcdsaTest)
+27) testTimingAll(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.EcdsaTest.testTiming(EcdsaTest.java:905)
@@ -1420,10 +1734,10 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testModifyPoint(com.google.security.wycheproof.EciesTest)
+28) testModifyPoint(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:236)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:226)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1456,7 +1770,89 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testEciesBasic(com.google.security.wycheproof.EciesTest)
+29) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:333)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+30) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testEciesBasic(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
 	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:88)
@@ -1492,10 +1888,10 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testValidNames(com.google.security.wycheproof.EciesTest)
+32) testValidNames(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWITHAES-CBC/NONE/NOPADDING
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testValidNames(EciesTest.java:141)
+	at com.google.security.wycheproof.EciesTest.testValidNames(EciesTest.java:136)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1528,10 +1924,10 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-23) testByteBuffer(com.google.security.wycheproof.EciesTest)
+33) testByteBuffer(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESwithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:379)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:358)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1564,12 +1960,15 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-24) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04d53337dda4cbc8a467bb10090ae53cf71215544dc215d2abed3cba6b1bf40fa11f4095be2e549ae4c68950873a81f6fac71634db57353294e3e61629f7528d2305ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a05ce24ddefb0691a206912abc2e285b228b482afd21bf717956833ece1937bf332764468
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+34) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1602,12 +2001,56 @@ java.lang.AssertionError: Ciphertext repeats:04d53337dda4cbc8a467bb10090ae53cf71
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-25) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04c7f7640c6a70d104c1721dc89aed6743ef5264e41180cedbe252607ab8876b50d58056ced0519250cbd1fd53ea9aefaec92f79600e4f091bad72b49e0c8541b8e3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cfe3a7cda0b5ee3e9d83a05484ec2fe1cf4e33c10d30f420a36129af70541c458602fc14e336dd9ff44628b817e1bef63a3a12540d
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+35) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+36) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1640,10 +2083,10 @@ java.lang.AssertionError: Ciphertext repeats:04c7f7640c6a70d104c1721dc89aed6743e
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-26) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+37) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
 java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIESWithAES-CBC
 	at javax.crypto.Cipher.getInstance(Cipher.java:540)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:412)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:386)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1676,7 +2119,7 @@ java.security.NoSuchAlgorithmException: Cannot find any provider supporting ECIE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-27) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+38) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1715,12 +2158,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 90,  Failures: 27
+Tests run: 90,  Failures: 38
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:42:16 --
+-- JVM shutdown starting at 2018-04-06 18:55:33 --
 
diff --git a/testlogs/SpongyCastleAllTests_1_51.txt b/testlogs/SpongyCastleAllTests_1_51.txt
index 43a6f2a..a3fa293 100755
--- a/testlogs/SpongyCastleAllTests_1_51.txt
+++ b/testlogs/SpongyCastleAllTests_1_51.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
+.E.E.testDefaultTagSizeAlgorithmParameterGenerator:java.security.NoSuchAlgorithmException: GCM AlgorithmParameterGenerator not available
 .E.....E.........E..
 Provider:SC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
@@ -625,41 +625,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:1055881 relative average:1.000392094732888 sigmas:0.15185763706105251
-count:25001 cutoff:514565 relative average:0.9227634996040979 sigmas:21.152509802301118
-count:12500 cutoff:504806 relative average:0.7616235882552223 sigmas:46.16139364081031
-count:6250 cutoff:497617 relative average:0.7579735010618593 sigmas:33.140843245604934
-count:3125 cutoff:486683 relative average:0.8293139513676417 sigmas:16.526605594576814
-count:1563 cutoff:479759 relative average:0.6710862432848669 sigmas:22.522788284811657
-count:782 cutoff:475569 relative average:0.4620903852878668 sigmas:26.053934135654575
-count:391 cutoff:472355 relative average:0.33024790861965186 sigmas:22.9383980339625
-count:196 cutoff:469390 relative average:0.18104538647410626 sigmas:19.858593996076948
-count:98 cutoff:466403 relative average:0.08987024546799093 sigmas:15.605474488295496
-count:49 cutoff:464215 relative average:0.06619657273771948 sigmas:11.32176486210153
-count:25 cutoff:461879 relative average:0.028190258251726392 sigmas:8.416119239991998
-count:13 cutoff:458672 relative average:0.01567722498076173 sigmas:6.1470937597731
+count:50000 cutoff:1442700 relative average:0.9992940126104897 sigmas:0.2734277402205895
+count:25000 cutoff:502096 relative average:0.9361647875171927 sigmas:17.481992919984467
+count:12500 cutoff:482153 relative average:0.8919041232491123 sigmas:20.93267652249388
+count:6250 cutoff:473808 relative average:0.7233099503474363 sigmas:37.887345407983396
+count:3125 cutoff:469340 relative average:0.5324444895669084 sigmas:45.2708676333718
+count:1563 cutoff:465943 relative average:0.35846391826893204 sigmas:43.93000004074221
+count:782 cutoff:462891 relative average:0.2285210558344185 sigmas:37.366987033855324
+count:391 cutoff:460064 relative average:0.13977408048191778 sigmas:29.461952855375802
+count:196 cutoff:457352 relative average:0.06334425029075058 sigmas:22.712694867771123
+count:98 cutoff:454316 relative average:0.029398230620978728 sigmas:16.642353548947813
+count:49 cutoff:451613 relative average:0.012407552424759907 sigmas:11.973922074601331
+count:25 cutoff:448784 relative average:0.007476071404757228 sigmas:8.595509360274125
+count:13 cutoff:446467 relative average:0.006229920961670575 sigmas:6.206092154462585
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:193ed45ff5a5794d7c5290b685d2baf30553ebf5017947dafbb60cac081c7d31 computed:c932e32154d269aa7a80cf6dd70cde1af682bad1c0d8f90a61423e583f12bcad
+expected:09d256a9dd5d58dc5b158c24bbf250dce8f046bca172296664df1588d85377fc computed:5e5a391bd585a2ddabf6d51440252bb15d045bbea812695428168cfef72561de
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:ecfc9436771756e2ee093cb92ac2a9785a339d0cfbe0ceaf7709b1a31cdd71fd computed:ecfc9436771756e2ee093cb92ac2a9785a339d0cfbe0ceaf7709b1a31cdd71fd
+expected:64d5b40c2abb4f532eb1f98034236dd0072605a30d45ea3d87abe80dd425f211 computed:64d5b40c2abb4f532eb1f98034236dd0072605a30d45ea3d87abe80dd425f211
 Generated shared secret with a modified order:ECDH
-expected:7a0e9571d5c847bb4c29c3eeb55e0988f51c4808c34112c2626bc1b8b011c096 computed:7a0e9571d5c847bb4c29c3eeb55e0988f51c4808c34112c2626bc1b8b011c096
+expected:3f0d8eb3bc1f923f133e33b5371b094965b3ff2755fb1b50d992352ea574a521 computed:3f0d8eb3bc1f923f133e33b5371b094965b3ff2755fb1b50d992352ea574a521
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -669,41 +668,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:86389579379242688964462088939667677129788305620249169085901450324269300728246
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420befec4e7e34aedff8d59386f72930ab5c7df8d532aa0ab47f4e94ea2787c41b6a00a06082a8648ce3d030107a14403420004e1edbdd7f223fde589820912ebfb5ee35e5dbc40efddfbf9207c1fe12f740d90a5ca9bc0398d49bca868ee206e5b0c35ec66b6dcca7000197b2b5f03af2dec29
+S:60029207935404252215372609472487012281051621660974849972908773009288808352763
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d03010704793077020101042084b753e0f2eeca87dc1e3c36431dfcb9b8e52fc0f9c7ee4387408a05e2afcbfba00a06082a8648ce3d030107a1440342000469ab5ec139f41dac43ca6d92256670fc4c36c69e5b975cf8b5dd1f8bb5bb0b3a1f4e02210554208c7823b699d386fe49bc5cb0d628824546907f8c036f43e234
 Public key:
-X:102190443937535872068873138381390602172511132708596478984247621006964347374992
-Y:74989598076378623497939293132142854338468580680570707651610570010740053109801
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004e1edbdd7f223fde589820912ebfb5ee35e5dbc40efddfbf9207c1fe12f740d90a5ca9bc0398d49bca868ee206e5b0c35ec66b6dcca7000197b2b5f03af2dec29
-Signature:3046022100d032bd87a5acd9ad4b5be5bfe026467ea097a3f30fb3822a85e01b2444212956022100f9ada691ea2cd217b7612d596c20ee5757af3d20aa70d52746f6003c496e3c0b
-r:94170722945658306094641536408181989645953291782655094493447075946914765678934
-s:112932713463187339570839114671865128091935916252115429248958713725287979170827
-.SC curve:secp256r1 countLsb:518 countMsb:519
-SC curve:secp224r1 countLsb:513 countMsb:524
-SC curve:secp384r1 countLsb:541 countMsb:525
-SC curve:secp521r1 countLsb:525 countMsb:551
-SC curve:brainpoolP256r1 countLsb:490 countMsb:522
+X:47795633922849603658258639109307626413375185524046843823407061476675923151674
+Y:14159527070866074972183236858235735459684349214413921283191474685963592262196
+encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000469ab5ec139f41dac43ca6d92256670fc4c36c69e5b975cf8b5dd1f8bb5bb0b3a1f4e02210554208c7823b699d386fe49bc5cb0d628824546907f8c036f43e234
+Signature:30440220081a9feb487bfd2934e985a07f118d5550d087489963b16f889cde6504583dbe02203786cc13f53fcb0eba7a730d01c4078b027889aaf1cc37ac9b975744d8b73712
+r:3665544533240466658855829344999169332358743208571792842873895430395788803518
+s:25115372673081441268020947124756150755688813996875729386534828915960258705170
+.SC curve:secp256r1 countLsb:514 countMsb:502
+SC curve:secp224r1 countLsb:528 countMsb:514
+SC curve:secp384r1 countLsb:468 countMsb:536
+SC curve:secp521r1 countLsb:510 countMsb:504
+SC curve:brainpoolP256r1 countLsb:527 countMsb:533
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:2832891 relative average:0.9990741701159749 sigmas:0.35857237222502647
-count:25002 cutoff:148129 relative average:0.9927316997816428 sigmas:1.9905856108043258
-count:12501 cutoff:145650 relative average:0.9820813167194163 sigmas:3.4700768913313174
-count:6250 cutoff:143383 relative average:0.9868529908711786 sigmas:1.800228365895458
-count:3125 cutoff:139805 relative average:0.9756679345875127 sigmas:2.3559421030348244
-count:1563 cutoff:138077 relative average:0.9541519175012956 sigmas:3.139505825769521
-count:782 cutoff:136996 relative average:0.9384053362647884 sigmas:2.9833698230581147
-count:391 cutoff:136113 relative average:0.9480396100206862 sigmas:1.7795959470450555
-count:196 cutoff:135358 relative average:0.9399647585628722 sigmas:1.455777237792776
-count:98 cutoff:134708 relative average:0.9767532080994062 sigmas:0.3985994481918364
-count:49 cutoff:134233 relative average:0.9305104713310618 sigmas:0.8425157597403056
-count:25 cutoff:133355 relative average:0.9339541119264273 sigmas:0.5719741688721768
-count:13 cutoff:132919 relative average:1.0568459566949573 sigmas:0.3550028857770507
-....04f6871b70e19ac0dc92b5e06a3c8f5eae3a8cd845b9f94825153a3c3af034ee31529bfdc8abe1bc74c158f1a2da4052e44237c9ba6af4fea4722ba41315c690dcd9795daa3852fecaa166059c78c148b747fe61adb791b4b286358f58b915cd5cdb9bd7263cd471063afb1332899d291643b25ab629e61b98c9ffc2e3
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:042c61ab69c07657bd46d14b65a17473462cdde70a2b4a600f002e0ea1c15cbbfb6ebbd3ee283f58fe077427b93ee07ee0698fca299186762debb6424417790f4eb91a2beda3f1e4782940b2f75c6fc4aa54969a2fec096f50ae7dec142e5495d271572e0f
-..E.E...E.04ca22371427ca8d7d5ffeb4d5d761dc076c9445170f1d1e525038a92c0feee132bb1f5b38f013b645fb48a9d39b4a5f8add6c6abbcebf9c464ba349a1d155e1c5d13f392b6a7be3fd964a8d550fed316e67d3a61819d49d05ed128bc7da115a89baae236243583d30b7671e5384f4f597a8554ecfaa6c34378d99cc909a1cbe69b5b2d6e6
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E..Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:1771670 relative average:1.0033387230667357 sigmas:1.2930818835065685
+count:25001 cutoff:161055 relative average:1.0031736680872798 sigmas:0.8691621834408926
+count:12500 cutoff:138588 relative average:1.000366803014808 sigmas:0.07103109838450014
+count:6250 cutoff:136620 relative average:0.9839907540992668 sigmas:2.1921562771196634
+count:3125 cutoff:135480 relative average:0.9598524432685757 sigmas:3.8872704652930934
+count:1564 cutoff:134617 relative average:0.9511731496658734 sigmas:3.3445501466089933
+count:784 cutoff:133837 relative average:0.9412381901889609 sigmas:2.849796323847734
+count:391 cutoff:133115 relative average:0.9299775296930789 sigmas:2.398205718045788
+count:197 cutoff:132491 relative average:0.9427089466143495 sigmas:1.3927736699263595
+count:98 cutoff:131855 relative average:0.8602939458942499 sigmas:2.395459825757226
+count:49 cutoff:131319 relative average:0.7837801211291079 sigmas:2.6215267106754143
+count:25 cutoff:131013 relative average:0.7627604226078927 sigmas:2.054555008046494
+count:13 cutoff:130374 relative average:0.7909012792471007 sigmas:1.3058210925695213
+..E.E.E.E..E.E..E.E.E..E..Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -712,18 +705,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:26212843805405820878971875690423045741935627319147423587672773088188846080865236863589056611358084388660682865823041747070883256212842188940988932251441078000613103052462651700860724984568548048296480562343581719933074888214319551714193491399926866153983790229519699225108266559678921666190930781441237950722758111538503262580136535921844797951773451809792727061161187295520884761632253977074210681987679103548044891282694922748721474184038580481066067682766684463489506434945506807882114963376568529591340832070599082235827100966174780887133428480052571211832320978968431884716588943992994905362636797507686481411097
+Modulus:17389861460887756275146108160673303324613866984509301774910043538939770113230327790634087793732560657184062650234241790747382801739889488433468217170761382277127199715396858001336288234763579494703417710709642705096997146109239142357632456192932071554982062522436451247600542458750613449072779298955068343719727597700836101293266315123526289535517061422306880090727644206275120513095318390910838251077437241718202772814816705154728383344921171725887376167539709822649958816705432750567171308920273660872531641601910804039314064338219191218058338528390603427108773812506419179014394055752842180621952407290933655769939
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:17701079015701664843062382021687936773961321431194415037246841414634261137293008874910314622156390782375866776170171590984772104108450858503935276038265046431712368413106903179475597676382282717021057475427278523541788031994337947734308057362942511688217443892726609532117604480906211106076656433212741302579794929764165506179431468609077910774015761023785816449934777335665483287301610995898144996795656494763062296470754407228594808603675271455693797937138990415343196358446064216356851385055264084945845699388498575023485254752050829413874552900339247956020862958543242932748847072156903397160820333482878159060993
-encoded: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
-Signature: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
+D:10461990290673702708644899103697560210001610501933758798558878139880025878884376216932737438870979776179154098805799553314735326716211647618212381808883222918695869972361678399632073065905647379604900338707291950753992454289868027295676220803132974003537433222982809707346906145591332942765789434963462390041822748418548990416897424215859344597127514071291287011539005608361468358445283339094643056594007082131253960441329932558462468955594349545678329763864237348051723644610518398488893813992708365633552428235066020667888076947440794747558727479081464752006965014632266886597818696630963929891052407471643101307393
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 96.664
-There were 21 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 133.609
+There were 36 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -765,7 +838,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -807,7 +880,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+5) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -843,10 +916,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+6) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:2a7f49d6ebb6497637c9a9ba54ed680b pt: 2a7f49d6ebb6497637c9a9ba54ed680b
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -879,12 +953,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+7) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:5edfb0ae9a08d0d86f035cdce3f474db pt: 5edfb0ae9a08d0d86f035cdce3f474db
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -917,12 +990,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:e16f5ee24b3dcf00dc12d7db76cf
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256:f883afab9565b8c3aa27cd49eacecca201b2afdf3c1d65fab0185bb0e6bac0ddca9449a8b7b2d1540e9f956bcbc321f380f1a126b283053fd015c18fb481178bcaaa6a0d146c781d7d05fb9f05d8707c54c857e5c4b7103e116c841913d8e29a65efd3e748b2dae49f509c84d6eeb3806042e261339f5740815998be07a62b9d873262fb73931669121de81d5b03ba7b96a52bc8c69739962fae84397fcde799c4f519491299058688f68313d50e5e28d356fe3f362ca0379ac8680a04f9df9c8c6a7ad5062de5f7b8b789b52786a3de6baed1f75627f909dc02b44942d4651c1ee9c52a06591834f09065f9f6e37ce27868e84165112f2d49bf7807de3144e107f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc6607f47daa3a6dcc66e5f42c0419097fd21ac20aee12b8d872dccc6744653d32a7ca8c9fe5
+8) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:40bf4821abc3e94f63a224971752801a pt: 40bf4821abc3e94f63a224971752801a
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:6b35e8060d4976ee78540e201c50117d pt: 6b35e8060d4976ee78540e201c50117d
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -955,7 +1258,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:f883afab9565b8c3aa27cd49eace
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+15) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -996,7 +1381,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+18) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1034,7 +1419,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+19) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1070,7 +1455,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testTiming(com.google.security.wycheproof.DsaTest)
+20) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1106,8 +1491,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[193ed45ff5a5794d7c5290b685d2baf30553ebf5017947dafbb60cac081c7d31]> but was:<[c932e32154d269aa7a80cf6dd70cde1af682bad1c0d8f90a61423e583f12bcad]>
+21) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[09d256a9dd5d58dc5b158c24bbf250dce8f046bca172296664df1588d85377fc]> but was:<[5e5a391bd585a2ddabf6d51440252bb15d045bbea812695428168cfef72561de]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1143,8 +1528,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[193ed45ff5a5794d7c5290b6
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[9fd70cf0d8e3d03b32829b7d221b7105d3dc8275c6efdbb415c9f7f27ae3b7d0]> but was:<[fc92da486680e5f1a98dd42e8bdd9cb5b5ea2ede3d1cd3450a594d4eb98ceebd]>
+22) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[0967da2f2bf25c09d5f82caa6c6b05a86202dcba7018c7d2c2e5e7859d24e2f6]> but was:<[80d3464650b783eb8fb79869551de661153d6d3c9c8a0001e621f9abe6c5dfc0]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1180,7 +1565,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[9fd70
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+23) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.spongycastle.math.ec.ECAlgorithms.validatePoint(ECAlgorithms.java:193)
 	at org.spongycastle.math.ec.AbstractECMultiplier.multiply(AbstractECMultiplier.java:22)
@@ -1222,7 +1607,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testEncode(com.google.security.wycheproof.EcdhTest)
+24) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1259,7 +1644,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+25) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1300,13 +1685,14 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.spongycastle.jce.interfaces.ECKey
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(IESCipher.java:158)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:388)
+26) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1339,12 +1725,15 @@ java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats: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
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+27) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1377,12 +1766,15 @@ java.lang.AssertionError: Ciphertext repeats:04d9c461ceef420694cc4f5ef751f1c6d46
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04735e2648dc2b45316dde0bf74308275e450d1ccc281ae64ddd90a78ad235d60749f5970ff6f08f3e522aa0cc72fd912e1b0be1ae7372d1b75b49ec7ec3903f615c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a5c5fadf1e8e7f8371928f20091be776a2bb1fed2293ab1c6c0fbd4e3309428dadefe1c327f262795e0dcb6ddde63795efefbe597
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+28) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1415,15 +1807,218 @@ java.lang.AssertionError: Ciphertext repeats:04735e2648dc2b45316dde0bf74308275e4
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+29) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+30) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1456,13 +2051,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.spongycastle.jce.interfaces.ECKey
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(IESCipher.java:158)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+35) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1495,7 +2091,7 @@ java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+36) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1534,12 +2130,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 90,  Failures: 21
+Tests run: 90,  Failures: 36
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:28:02 --
+-- JVM shutdown starting at 2018-04-06 18:52:02 --
 
diff --git a/testlogs/SpongyCastleAllTests_1_52.txt b/testlogs/SpongyCastleAllTests_1_52.txt
index 5d4dab8..f6bc8bd 100755
--- a/testlogs/SpongyCastleAllTests_1_52.txt
+++ b/testlogs/SpongyCastleAllTests_1_52.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...E.E.....E.........E..
+.E.E.E.E.....E.........E..
 Provider:SC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -642,41 +642,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:925220 relative average:1.003508245110328 sigmas:1.3587374886714267
-count:25000 cutoff:521364 relative average:0.9263521792703112 sigmas:20.169286362373573
-count:12500 cutoff:508187 relative average:0.837879619716988 sigmas:31.394476645845938
-count:6250 cutoff:501960 relative average:0.6576063369828996 sigmas:46.884183195322066
-count:3125 cutoff:497523 relative average:0.5300516081343539 sigmas:45.50255738181511
-count:1563 cutoff:492895 relative average:0.5269420253229163 sigmas:32.39324714326714
-count:782 cutoff:487868 relative average:0.591048912360153 sigmas:19.807760282877396
-count:391 cutoff:481899 relative average:0.6660160500399759 sigmas:11.438645552190414
-count:196 cutoff:476259 relative average:0.6165157514160419 sigmas:9.298998834297045
-count:98 cutoff:472584 relative average:0.44952832767764195 sigmas:9.438623005324231
-count:49 cutoff:469515 relative average:0.33320836252996083 sigmas:8.084418959121088
-count:25 cutoff:466874 relative average:0.2164980232076995 sigmas:6.7853261581745805
-count:13 cutoff:465067 relative average:0.17060188170179738 sigmas:5.179589588647674
+count:50000 cutoff:2013816 relative average:1.0005211706886208 sigmas:0.20184853975599024
+count:25000 cutoff:497621 relative average:0.9248162864891436 sigmas:20.58990792345098
+count:12500 cutoff:487012 relative average:0.7503492237371477 sigmas:48.344664941689025
+count:6250 cutoff:482130 relative average:0.5564468145509515 sigmas:60.73602128092902
+count:3125 cutoff:478587 relative average:0.3771581393135834 sigmas:60.3064038439833
+count:1563 cutoff:475381 relative average:0.23637339744449837 sigmas:52.29030390754789
+count:782 cutoff:472458 relative average:0.140241904318251 sigmas:41.64283400934501
+count:391 cutoff:469587 relative average:0.08941683691066368 sigmas:31.186642500689118
+count:196 cutoff:466840 relative average:0.04637788002453554 sigmas:23.124107482266673
+count:98 cutoff:464134 relative average:0.022288610764084463 sigmas:16.764258135349664
+count:49 cutoff:461781 relative average:0.015167401476362457 sigmas:11.940460683151155
+count:25 cutoff:458945 relative average:0.009494423514997748 sigmas:8.578029918261622
+count:13 cutoff:455426 relative average:0.0019926700637027035 sigmas:6.232553777839106
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey: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
 ...Generated shared secret with a modified order:ECDHC
-expected:31545845aabd28139d320a1571591881c3eb026efa40f6a28c1008f726e0d1f7 computed:824dc7870d717b2bd9490cab65c116e323dd92cc89e7c0f1b53431b86e6ae112
+expected:56723be7006616e4b2c6086424ea2efb25b5310beaa58e65dd27a1bb9514debd computed:c0ab5447843f5069b1623449b359e6ae7ae752be51504cbab3f3c845de51fe99
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:e8815339bd452fb7a18babe1f8dc08df9c03fda3bdddf11b17cc518dc7ed16e6 computed:e8815339bd452fb7a18babe1f8dc08df9c03fda3bdddf11b17cc518dc7ed16e6
+expected:247188352f52ea97bed130bef7468ed597b092ebd73cf8e9049e1517b6de6f09 computed:247188352f52ea97bed130bef7468ed597b092ebd73cf8e9049e1517b6de6f09
 Generated shared secret with a modified order:ECDH
-expected:353600c92fb7350c6982ab415442418d58fb5ce8f9aeb8157bad4feed4183c9e computed:353600c92fb7350c6982ab415442418d58fb5ce8f9aeb8157bad4feed4183c9e
+expected:44a59c01090b0823fcf8df4a96dccb82a07b31ed592d7e9ca91f583710dc7238 computed:44a59c01090b0823fcf8df4a96dccb82a07b31ed592d7e9ca91f583710dc7238
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -686,41 +685,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:99092688806087937958945785437658442779597978543748814054537712556163577913485
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420db14796c13b3a192a27b8ab3047aef44450ae47c184ad4be52ce3612d917a08da00a06082a8648ce3d030107a1440342000425dca1502b1764dfd6dfd96d92ee8a4c54f25dbe7f576752dd840125398ce1e770867c685dc7b6eb453274ad8304a50def41165b62f6b0e264977a8f7715e58c
+S:108972129689722840667836410611095294820977576015456777557628724903229376323469
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420f0ec0a28fc7c6750ff08c550b75f6770ab7374d96f74f5edda112ee627f25f8da00a06082a8648ce3d030107a1440342000484d63aa58260833a58dc5c344ea2c2cf58f7f8154308c661104174141888077f92bfd738cdd2069176c201f2fd1de121d6dad1c79af248dc067c8a992f56981c
 Public key:
-X:17125395094327719866961654037272720142593124029269252526231394877636369768935
-Y:50896655178263795327994867457122250609325932900467911241352925773150765311372
-encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000425dca1502b1764dfd6dfd96d92ee8a4c54f25dbe7f576752dd840125398ce1e770867c685dc7b6eb453274ad8304a50def41165b62f6b0e264977a8f7715e58c
-Signature:3044022017922c681566bf472f0d920e284bfd5a638b5f6d7c30331081fbb10aec9b0249022052ec020db21226e049ea1b3556e1e36318e68c15900b9fc09a846687deedcc5a
-r:10661461671800309076424607693572848621809432596614085406429456144375085728329
-s:37506643663840597961520104492491099425108461022218687073275206967853098847322
-.SC curve:secp256r1 countLsb:500 countMsb:507
-SC curve:secp224r1 countLsb:490 countMsb:530
-SC curve:secp384r1 countLsb:510 countMsb:536
-SC curve:secp521r1 countLsb:536 countMsb:486
-SC curve:brainpoolP256r1 countLsb:503 countMsb:494
+X:60083806048263352345787553975015487647903199479787263326148442493903878752127
+Y:66376629089426556777139401778429803339047642124206495693459806290982422878236
+encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000484d63aa58260833a58dc5c344ea2c2cf58f7f8154308c661104174141888077f92bfd738cdd2069176c201f2fd1de121d6dad1c79af248dc067c8a992f56981c
+Signature:304402203477ec28662572e26ef0a64188970d756896122d767a07f54f1e265a7f2d27550220393f191bbe0e3d7a4145b5341049b0971be7156570177dd77e0fb4feb0da35b4
+r:23732152828331448469343028831689006638024878659328103489566900264437237491541
+s:25893317025919645600809258453378712278542036769743922405585774193481164142004
+.SC curve:secp256r1 countLsb:502 countMsb:536
+SC curve:secp224r1 countLsb:492 countMsb:509
+SC curve:secp384r1 countLsb:525 countMsb:490
+SC curve:secp521r1 countLsb:515 countMsb:517
+SC curve:brainpoolP256r1 countLsb:510 countMsb:518
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:493432 relative average:0.9969710642214155 sigmas:1.1731017827189782
-count:25002 cutoff:149220 relative average:0.9912585664475864 sigmas:2.394035926486493
-count:12502 cutoff:146348 relative average:0.9809168570640439 sigmas:3.6957303621673896
-count:6251 cutoff:144723 relative average:0.9775187580189311 sigmas:3.078617098257966
-count:3125 cutoff:142965 relative average:0.985767340202058 sigmas:1.3780713592416274
-count:1564 cutoff:140491 relative average:1.0052267305172173 sigmas:0.3580215024729252
-count:783 cutoff:138611 relative average:1.007287661698495 sigmas:0.3532073337453291
-count:391 cutoff:137338 relative average:0.9891673274200993 sigmas:0.3710091519045979
-count:196 cutoff:136418 relative average:0.9415021726930579 sigmas:1.418496926392192
-count:98 cutoff:135590 relative average:0.9665342513811546 sigmas:0.573818055834955
-count:50 cutoff:135054 relative average:0.8915808834384846 sigmas:1.3278575696952288
-count:25 cutoff:134416 relative average:0.9041157634993008 sigmas:0.8303818463208065
-count:13 cutoff:133773 relative average:1.1302192361306684 sigmas:0.8132188689889924
-....04354eab0bc8b8296c8d0bcaebc1701064245695cf47e9b4ecee504fb85d37ec6ed9e790601d315d8f23c87b1aa7a03c937c51e39ba4889c4ac2ce18aa2c474067edec3699d31f2fc6b943d58c8565a52f9d8961057b91938c59221d06a70749b810d9f3113c7d66a28c0b89b731613c133d3afca1e55ac7649bda8cc1
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:04cb988ec8b3eec818b74e61afe44d5f35819555202cecf916def9dd1b43cd3e3c1574cbacc540aef8bbfd5d28f6f76ad7aab348a51981f56914b0a5e947753c78468264718dae9e8cdd4e68a47b1ef4166e69f5e8e3e4075d4b10f4d756d8f3bef63f2233
-..E.E...E.04f6d9b02097650b1a664b60a0a903f7eaa13f7262f626599f532ae2b0a52014e0b24cc6f5762155d86c1d7184828c63b31695ce2257aa698abff634837829be7d61039da18d283b0174cb36ffd3ecd8f1792e1f142f648994e55db430c7c0466c460ba337b4efa2cdfc5b521707d99cd8f0759868fe44d57b910f8c61c0b574b0dbdbfdf8
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E..Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:1349021 relative average:1.0008522393849575 sigmas:0.33007089449220883
+count:25000 cutoff:141710 relative average:1.0002607858250687 sigmas:0.071419139533895
+count:12501 cutoff:136303 relative average:0.9879947272322085 sigmas:2.3249040653999122
+count:6254 cutoff:134982 relative average:0.9866090843899195 sigmas:1.834213302994258
+count:3126 cutoff:134027 relative average:0.9684979253506026 sigmas:3.0506632512084217
+count:1563 cutoff:133238 relative average:0.9607263173693625 sigmas:2.689315423863007
+count:782 cutoff:132509 relative average:0.968013965074055 sigmas:1.5492603672222829
+count:391 cutoff:131852 relative average:0.9721180940476727 sigmas:0.9549298388331353
+count:196 cutoff:131204 relative average:1.0113283216786593 sigmas:0.27469720196690317
+count:98 cutoff:130707 relative average:0.9961816676865307 sigmas:0.06547076085466334
+count:49 cutoff:130145 relative average:0.9820143269659918 sigmas:0.2180646965225656
+count:25 cutoff:129557 relative average:1.0056098939874312 sigmas:0.04858310705653051
+count:13 cutoff:128770 relative average:0.9033315043626859 sigmas:0.6036945617632102
+..E.E.E.E..E.E..E.E.E..E..Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -729,18 +722,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:27182908410066156190315438753491287627038232786435040976036532556113342539307766819051310865607098589783076756779860273295402360305126811506927419056277540499092015427886330081329630148197851460452820287710524423370921949198012606362192122223611823727984989356285669973728648855660877431300017587231043348190620575862881983175158755634958240143198418336168663161790132533321361056859271920929892397662583039559496584710060808608642795686213925802954742834423638977462800712446305077943515164779330743341208411749806386249325246782615795090926307246820842095602978151829276646888931636487776989965533346443508306640243
+Modulus:18671285101361454617793239269871934235031593846066486180636775991866348355452273977380944022124213556443224099465899184429391805683711102048318032455918775894572809176846862825826208518631714135798078123340227823918210509801014006248428513953864923111288629700994358350909804735343779215618545589870051882667521913694184308857335269038819776474811836434089918858271117191442940835779244997303224474501411062631500516504390891983126320442318780124266851022628295027808201832846253699122709824369899164860438571917779188026901185407943730007852984668994815540150115929693634939564799866374727537688435560904821178810403
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:12400021817100840829846809542310077283029967917104261486177093508973015068665715501508430194213800134888000102548037028402876984965470972989473154402955175713884597910067438608899257257892838660019493039373084489083984353773040952130919872529976945575351927030463957604629319105067940120636363058850104092916931422158639500043841062149373169909686793695068002878131502872768610637587978836321675593995986384711064975872918514832656618394376514633456168423829394198311063830315957722673785268582870709100707571826183420099834181821705483789579568203874604678406572523394642309712836710829740073620041796759506055173377
-encoded:308204be020100300d06092a864886f70d0101010500048204a8308204a40201000282010100d7548240b49fbdcbf09ada568dd39050cc311a30aa922d303755ce25dd3d3d3f79ec5b015083a00157a13aeb6e600ab1bd6410971858f989776ede79dff64864282ca311053c77a10fa7646baf677a65eef7d40485a5a2931a413ec7452ab15439a56a60a12a200b4d1ba8f6573d70eb3dc74be81b4d3a6e5c093124bf0ab9025fb8870d7768c6d3b0dc2f894223c3aab56d7a02c8ef725531a029e234f74bfcc878cf07a0ed7547fa1c1d7aa4e2097f1b03fccdab887971d8ac0f60bdd4f3a9e642f5ad35c79248607eb4804b8a31e3b52587c156dd43985e5030f2b9e95b5860c6a023aaf400453d2faea722ce0eccd4272a723edf4757ac2ecac2b8af7d73020301000102820100623a22d0f1948d38232200c7cb1adf927c134a2739284584e1393b38fa9b9cfcffd95a0a577833dd68e41bc49a2d25b3bef98eb7de5b7839c549c623428f4ea6a1ccfaf620b55cbd142f00183f83acca2320da8ed588a18909490a224ce314d19f1a5e548630793dae8717a4885776d358f33925408f124095ab7bc78f7e8cb63a4e8b5ae6b0908621475c28c47eeead384f5db9966482ba5ac96d75e32477ac4bd5b0842f247f68e0b905b084fe9b65afdacb4cb00789d41cdb21d9ad288a8fda3c15da28d70ebd50bbc8cf553e38c04fe4f9b8bd95291cbea77745dbbbd2607b0e4680e58184cb21268d17d39f7155131e30d5d2a5fddea3b44be86559950102818100ebae7888a5c9df5a7919803373f459271936955e81a1d9c87f095e5d5dc668477f365b291ad35fb34c5c7c553efbd8a132cc46c38c702139e381df1f4f1a2bbc6dc17a733dced4fb54891e74cf0a6d9fd7397eefb52644e1077bf94e9a41188f822d3cb578a3657b0e84c8ac2a9ab1d7ff53ecdacf5074c2c64246a59df9f5d102818100e9e4e1050a849af72e7725927e960214068fe597b4fe99dc63a3cf04bb904aa9d0e17b637e495d53bc52dbc5be46ea56db8a4cd254a1101ef7055826ff98ce287af02eed877a3744f7bdbdf4c276779f1bdf7bfe707a72d07b7150ab044f4a4883c5f8a3bb820b81ff1c7e4769fe06428ba280131fdadb95a36197cd7de2dc03028181008623ee7cb007df354a59c64b02c35f7ece6defc4337a204f6a66b5abe474c9e36fb74b5970e83fbef8466789c968645b13638b1f3fae8e6ab95fb0d3cc1cf429b23a7dec5b907e4e7245fcecb4ee95887562472a3deb8326a530ddabec4602a9a38905d5afcd28344b062e85375686c48e9180ece53440d09f3117aea9e49c1102818100bd00448cec48e7686255c938adadce141c915ef7ce3c065cbeef79b3db54e7e07d78175af88b942cbbfb40b873df9e317dca2df5b0894e1b9784ec0ce771b4f5a5123cf998063c6f30ba54ab5a109ced277ada196b0ea784ac9b8e92033387553d96562b08b437545eafc9a32f9523bdd65403a670914beb8950ad78520765bd028180127a4ca1cc736a39a6059de777451431212a87ca2236f4f34dc6db932950abd429a3b0d9614d044b4318ea1afe078aff5db00e2bf6194ae6b9807e5bfdcd6ef90f4a27f75afd5df0b35c3fd30549217c0a7ccf037d79d08ea792947b826ef0a8c5058329bbe3a8559d3cd563255be64a71af2a2e2f6fbda98b0b1c0e79ce0ec9
-Signature:068bc8bdf4472270d1fd78dc47475fc35735b03ddf3ee3dfe9d98f374e2e070f2824bd6e6f41f208ec6dd0435bc7e4fb044b07d0a8ebe4dbc495a7d639c41dc6bfc16aae66b97df3bfac6bcd225b2f8f0d66fab4b75bb3c4764d2db1091acc91636ae00b7c84f569bc4501eac10cafbb001fb43621652dcc1b703f2ce3c8b26a150ab8f7e751d5572f9808ed1f1238e3629fa324cca903d9d2ee4dea9772e86b9824d4dddf3d7c9c5e0304b8b74b71f89df63d699eb9db3dc5d62a6a22cff1af8b30fdc1f9491ea2c99e98b83831e5a21d3a234f612229b5dd45f519a18b2d0a885447bf8f37430eb7ab2005f3aaabbb1448d006672ccf2fe91a19c113144fbf
+D:9181940698106082379066150547457200794373151625263237302832638867233174254968511497581678210614481570877651853177387808642062781411726583577448492729630685388500954681486756214253824165692380104103579044465450089828036170718477812645995431225401110928997684462721015232486566318497866248686545093854187743205864151873965829054693529113316283628584901467207384660730320379214426369930952272082192570716026238859812139421549568789594209780760906420983380760020957777138301079754541491326840583198035754311756455871812456536634369535379219308101107460562551316954377612096970522383057194758548045984107895960097885838193
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 104.466
-There were 22 failures:
-1) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
+Time: 69.965
+There were 37 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: expected:<26> but was:<22>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -780,7 +853,7 @@ java.lang.AssertionError: expected:<26> but was:<22>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-2) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+4) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -822,7 +895,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-3) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+5) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -864,7 +937,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-4) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+6) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -900,10 +973,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+7) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:894c2fe3575bc1afc2c9ab5f4e4c141d pt: 894c2fe3575bc1afc2c9ab5f4e4c141d
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -936,12 +1010,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:c30446fb5988a0a6d861d8d403ed83cc pt: c30446fb5988a0a6d861d8d403ed83cc
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -974,12 +1047,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:a4baa6ae8ca62129ffb26759377e
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+9) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:ce0beab7fbbb631ee2528003c1793ecf pt: ce0beab7fbbb631ee2528003c1793ecf
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:8a3ebae51bdbccb850f892251de37aeb pt: 8a3ebae51bdbccb850f892251de37aeb
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1012,7 +1315,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:a36301e6245f9580b118ddf91b7d
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+16) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1053,7 +1438,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+19) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1091,7 +1476,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+20) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1127,7 +1512,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1163,8 +1548,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[31545845aabd28139d320a1571591881c3eb026efa40f6a28c1008f726e0d1f7]> but was:<[824dc7870d717b2bd9490cab65c116e323dd92cc89e7c0f1b53431b86e6ae112]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[56723be7006616e4b2c6086424ea2efb25b5310beaa58e65dd27a1bb9514debd]> but was:<[c0ab5447843f5069b1623449b359e6ae7ae752be51504cbab3f3c845de51fe99]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1200,8 +1585,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[31545845aabd28139d320a15
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[79ee0ae0515b9654b4b2dc651438195062772bf3cb0ea4167717a387552944ca]> but was:<[e9851557c3cf0faf686a082b3ac75fbdfa7a801dbcf21f7028c8a78860290c41]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[fd2c21e7f19a89b56a6fc9fafb16c25ed1ce727bb3e3a5644ccdf3a9fc6221cc]> but was:<[0bb80aaeef881a718910965ee0860dd6cf42d75f8556ac4d7c758f8288e473c6]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1237,7 +1622,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[79ee0
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.spongycastle.math.ec.ECAlgorithms.validatePoint(ECAlgorithms.java:205)
 	at org.spongycastle.math.ec.AbstractECMultiplier.multiply(AbstractECMultiplier.java:22)
@@ -1279,7 +1664,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1316,7 +1701,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1357,13 +1742,14 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.spongycastle.jce.interfaces.ECKey
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(IESCipher.java:159)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:388)
+27) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1396,12 +1782,15 @@ java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04600b4a055669ae34c0c3f8535454caa427e918129d9ecf97d461b69c87c95f7a5811205612f5c14366c2b2a00e695ff4f29046c09923965292665dcc9a3ef2c8a4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00ca4cadbb03c1af00c15ad12cfe6a0a5ef631772eef9506013f94f1692b744b13e9063a403
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+28) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1434,12 +1823,15 @@ java.lang.AssertionError: Ciphertext repeats:04600b4a055669ae34c0c3f8535454caa42
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:0463f3ea970251ca5787ca305fc5219ae490ba9c9003b10540bd9d377c0cc8d9b07fca27bf7c120e34064a8e8947776f6dbb72ed4efa34b5b73be1526cd6b96812591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f1591ad6d9ca0ad3ca176e6e78d203b6f171145c2f14c66daf1d174ca062f825349772c0fd3a7ed9ba858194ea3b1ddb5dbc282a88
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+29) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1472,15 +1864,218 @@ java.lang.AssertionError: Ciphertext repeats:0463f3ea970251ca5787ca305fc5219ae49
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+30) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+35) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1513,13 +2108,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.spongycastle.jce.interfaces.ECKey
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(IESCipher.java:159)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+36) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1552,7 +2148,7 @@ java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+37) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1591,12 +2187,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 90,  Failures: 22
+Tests run: 90,  Failures: 37
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:42:11 --
+-- JVM shutdown starting at 2018-04-06 18:50:59 --
 
diff --git a/testlogs/SpongyCastleAllTests_1_53.txt b/testlogs/SpongyCastleAllTests_1_53.txt
index cf4f767..5db8384 100755
--- a/testlogs/SpongyCastleAllTests_1_53.txt
+++ b/testlogs/SpongyCastleAllTests_1_53.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...E.E.....E.........E..
+.E.E.E.E.....E.........E..
 Provider:SC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -810,41 +810,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:3640171 relative average:0.9946325568740116 sigmas:2.0788017838668567
-count:25001 cutoff:515827 relative average:0.8892026268027137 sigmas:30.343717162373625
-count:12501 cutoff:508086 relative average:0.7087575476176833 sigmas:56.40111429848424
-count:6250 cutoff:502632 relative average:0.6120374077530137 sigmas:53.12396581046332
-count:3125 cutoff:497441 relative average:0.5682416296477958 sigmas:41.80482444899353
-count:1563 cutoff:492734 relative average:0.5065005097991044 sigmas:33.79300594618718
-count:782 cutoff:488593 relative average:0.5044626325163062 sigmas:24.00161213159404
-count:391 cutoff:483322 relative average:0.6276546548212736 sigmas:12.752488336691735
-count:196 cutoff:476042 relative average:0.7592654578262908 sigmas:5.837502414543756
-count:98 cutoff:469383 relative average:0.7139985436435554 sigmas:4.903903436363134
-count:49 cutoff:465692 relative average:0.5509404958331222 sigmas:5.444557137871042
-count:25 cutoff:462883 relative average:0.5206346343452166 sigmas:4.151425843514589
-count:13 cutoff:459423 relative average:0.24256949608236472 sigmas:4.730151980891523
+count:50000 cutoff:2347480 relative average:1.0003781638887816 sigmas:0.14646224433881122
+count:25001 cutoff:520234 relative average:0.9493506016315525 sigmas:13.87118642063802
+count:12501 cutoff:508092 relative average:0.7657290840272829 sigmas:45.36818242157501
+count:6251 cutoff:503183 relative average:0.5731156025938323 sigmas:58.4582295738312
+count:3125 cutoff:499554 relative average:0.3836639987177209 sigmas:59.676476715858506
+count:1563 cutoff:496405 relative average:0.23441470286071908 sigmas:52.42442801310566
+count:782 cutoff:493159 relative average:0.12630113836341486 sigmas:42.31806231546527
+count:391 cutoff:490200 relative average:0.062257088803950804 sigmas:32.11683909222188
+count:196 cutoff:487157 relative average:0.03104971504892858 sigmas:23.495795729610357
+count:98 cutoff:483872 relative average:0.014291723243676701 sigmas:16.901376193037674
+count:49 cutoff:480607 relative average:0.004704706892251161 sigmas:12.067314113377451
+count:25 cutoff:477162 relative average:0.002495060907735101 sigmas:8.638646176543507
+count:13 cutoff:473918 relative average:0.002824899008264202 sigmas:6.2273565097461105
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey:3082024b0201003081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101048201553082015102010104208b0707ee670d914532508f2f49650b6102bebe27dd855f9ff1240104199eba30a081e33081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101a14403420004bbe87be143797cc1ff90d065fba2706521f9814590567117c24dd472c6c43a1fb954ba4523e0d7abc69a65378fc9703575ab65e5a3d4dcb32f44fb7ffa32116f
 ...Generated shared secret with a modified order:ECDHC
-expected:3534dbcc8368eb24c1648095099e0239a9aa682a310bd59d73ab58ec7b3a43d7 computed:2bf725291378e83f1f04186c4737134a3f48518fdbff50243bcf270d3773644e
+expected:cca02fc01d229bb0dba62f945fb4115651268c2b69d0f35feee39203f94c57b0 computed:eafc4f6d601b3c3ce49c2e3b19c52b70c6383b1bf22085f5d0dd2bc317d665c7
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:0e13f8da30e4e5eb265043c90000c03c7efe3448fea8382c50192e921fe71fc5 computed:0e13f8da30e4e5eb265043c90000c03c7efe3448fea8382c50192e921fe71fc5
+expected:934722c18bf0894e211d50ac1e2f5c42a1e2a04a699c9448c24ffa1ac05294ce computed:934722c18bf0894e211d50ac1e2f5c42a1e2a04a699c9448c24ffa1ac05294ce
 Generated shared secret with a modified order:ECDH
-expected:212fa36ea379fe0d6a880d76efc010a5e6f9e20db8ae6586c2a0964c2b717eef computed:212fa36ea379fe0d6a880d76efc010a5e6f9e20db8ae6586c2a0964c2b717eef
+expected:405f1dfcc858d528402acc0a32b38a5b3a9e0b3a659255da268bfa68fef2c7e7 computed:405f1dfcc858d528402acc0a32b38a5b3a9e0b3a659255da268bfa68fef2c7e7
 ..E...E.Invalid ECDSA signature was verified:3045022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0000
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
@@ -854,41 +853,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:74216490854389279163644123936750529380705504842902137497561748357680461783780
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420a4150b93986a7a3cbf77ec69fe3ee3bb9f942f03fd7202aba96d072a8ca022e4a00a06082a8648ce3d030107a1440342000405a9b01167b2d6cf1ae31293df028650d4d5ca928402b06aeddc38948e1b154b2a5c662fc674a051ff867cd91bd59fc092d572d4a4eab2b86b50664477b03508
+S:54962724040208771502048735453514484436081262716750144390813892195028610633723
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104207983cca4af4d9822331e358b9ffba3c25cb3234421429bbb30763033c708cffba00a06082a8648ce3d030107a14403420004653e53e19b6954a2f42c19180acbf299779ede574bcb965a0aaede8b4aeb6b772ea2667d97fb6647fdcc8a4bf1dca3225bf1a2d742194a5fc006b8122c09501c
 Public key:
-X:2561376573460743553776645028870534554819736610639325597476444436103996052811
-Y:19160394836601476670922089906779677724648013280740270430726502610427697968392
-encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000405a9b01167b2d6cf1ae31293df028650d4d5ca928402b06aeddc38948e1b154b2a5c662fc674a051ff867cd91bd59fc092d572d4a4eab2b86b50664477b03508
-Signature:30450220105e94a3449ca411ae40225b37bbb2bb22d2101b37560a6d32dd4afc7620b7ba0221009554be508a9e9e1c6e734f9a417546b25b2c4649022b1daa20ebe449857fdf08
-r:7404115061577736249968857531944315076692466749342272222011591011701903898554
-s:67544343095548047485434250696121737981792755132987563082686305060373496061704
-.SC curve:secp256r1 countLsb:495 countMsb:500
-SC curve:secp224r1 countLsb:538 countMsb:534
-SC curve:secp384r1 countLsb:507 countMsb:491
-SC curve:secp521r1 countLsb:518 countMsb:489
-SC curve:brainpoolP256r1 countLsb:490 countMsb:527
+X:45793721152227684488757546336705184767461632876537050741218303234390218206071
+Y:21093327623450633970403609752831497143153978513512341125092398233072546959388
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004653e53e19b6954a2f42c19180acbf299779ede574bcb965a0aaede8b4aeb6b772ea2667d97fb6647fdcc8a4bf1dca3225bf1a2d742194a5fc006b8122c09501c
+Signature:304502203385a1aaac6f492dd7b81409f428f37304599a9d24c894f5ccbe72ba74942e480221008c4df4fc873a11b20177dded6e6a522a8fb520b8a9655088f7647ce204d57db2
+r:23304061719874372131946377261521614042071886123069849678483082516852179742280
+s:63461536859901454611811898561357568794879002173262840690775457233358919400882
+.SC curve:secp256r1 countLsb:528 countMsb:515
+SC curve:secp224r1 countLsb:536 countMsb:501
+SC curve:secp384r1 countLsb:498 countMsb:537
+SC curve:secp521r1 countLsb:506 countMsb:509
+SC curve:brainpoolP256r1 countLsb:505 countMsb:511
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:2271042 relative average:0.9999097690935062 sigmas:0.03494627981639735
-count:25005 cutoff:150223 relative average:0.9891475466945959 sigmas:2.9723639316357984
-count:12503 cutoff:147032 relative average:0.981046968717447 sigmas:3.670679128098361
-count:6251 cutoff:145366 relative average:0.9644435122669545 sigmas:4.869162085490313
-count:3128 cutoff:144247 relative average:0.952603884544658 sigmas:4.591311389814817
-count:1563 cutoff:143335 relative average:0.9532533618912632 sigmas:3.201035565264167
-count:783 cutoff:142559 relative average:0.9713335829406073 sigmas:1.389360422653933
-count:391 cutoff:141909 relative average:0.9474849180050725 sigmas:1.7985936424672289
-count:196 cutoff:141194 relative average:0.9316067954900367 sigmas:1.658447071451875
-count:98 cutoff:140574 relative average:0.9620388847545064 sigmas:0.6508975369291277
-count:49 cutoff:139938 relative average:0.9120688083932345 sigmas:1.0661090400309436
-count:25 cutoff:139505 relative average:0.8503861102723721 sigmas:1.2956942926312947
-count:13 cutoff:139148 relative average:0.9616344849265149 sigmas:0.23959256484143804
-....04a1b4a988f394c4a2648f014cc86e6321c5b714cc52a104844f37ccb2f68e81721a03da31cbd0657b3da37725e27f51342a9ad8dbbf302e331311481342564dfee74bdcfd0c2596652c41df52060126dcfe3b5d2195eadcb21bfe51bfea285619a3f3a70073a02cbccbe0fd3f3eaf905e490c31f91471472c3d7ff244
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:04f3089edb661a0160480cfd25e5f59bb6b8d9787a6f212456ad75f62fb14c2e6697e218c8dab2f7c82b396c36face55b1ec3d84c098611c5bd30337e7df12310b5416a2bf96ef6951c9954a8ee6e13e8f65d30e30a697cfbba499525a5b2673533f8cc4bc
-..E.E...E.049c33f194bca6dab5f8688bc248299d4ecd643ba3c8ffc57aeeb145df877345c33c43044c5ef774f7df16ac0a297d33cdbeee53a7ebda0bdb73576c12c95b1c23495442aed4297d44d63e0567df7367a5dccb12bef7168914d277b1045dc8a4bd5f0ffac9528c3a47a012786f40ba09811dcdd9f7d29b9155744987c3bc92bfb5872c24a8
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E..Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:1747580 relative average:0.9996574047858796 sigmas:0.13268655587788353
+count:25000 cutoff:268374 relative average:0.9925956944893289 sigmas:2.027752575427173
+count:12501 cutoff:140920 relative average:1.0019794726883902 sigmas:0.38333857044322617
+count:6251 cutoff:136827 relative average:0.9796106919483214 sigmas:2.792144332702131
+count:3125 cutoff:135595 relative average:0.9665446084356145 sigmas:3.2393043592428277
+count:1563 cutoff:134637 relative average:0.950044864977316 sigmas:3.420741476707362
+count:783 cutoff:133845 relative average:0.9503920709411149 sigmas:2.404321863504601
+count:391 cutoff:133114 relative average:0.9559651957438712 sigmas:1.5081518674961263
+count:196 cutoff:132461 relative average:0.9115106599967908 sigmas:2.1457524593931345
+count:98 cutoff:131896 relative average:0.9106481787267896 sigmas:1.5320645879540733
+count:49 cutoff:131400 relative average:0.8807705353621229 sigmas:1.4455804335842797
+count:25 cutoff:130866 relative average:0.8319768171728839 sigmas:1.4551234475299986
+count:13 cutoff:130357 relative average:0.7783839473761399 sigmas:1.38399180504896
+..E.E.E.E..E.E..E.E.E..E..Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -897,18 +890,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:24376103193109097687250746449043338038126804129557220442202561142156103706671553534512493894450188074511842122158634983224817151490326304053391027382289263067572075879511018599187694991039702012307111341271825601488118932465014356811085087822369856722734736763298844860573163510787538912135561552191915756545308740613698762151781004941022358846742389027331874692399978980554078990164509021379359890374641897716491612248786398190339512065582190518088710747057793789100665795093009097631906150142065825894561903037144731155539503506828547542626509079766395330286463912507318423582515609474267028885493890811069158093123
+Modulus:18674025209725352209406551339351986057186625947250377407674452996082831565612841183142703322387121053705884289705689161754571486925423197611425765976703487503910088107995743677337286463105497110405637122365780101238955051197149128725435661912825993639454973047923157993421846144777794436525679271405018694981105726242213917195554948192605590356418392070552753501942045409534434597558236153144756194953406234523779797989165162071408103635153581136297960185083362076818922619694728858692967364021012995537437581998476333676265647946467968028404937968928764344792004501764119458411324224899323545932116790955458357670911
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:10594642894916094619413367826232127841479209488203192787065609546572860155830841610904086734767633279039818223730528376026783407107835262642611299257988899611643145023268254715482275630136722644758867708324416991097980129267432159643946979325820440115030251756018523069884130735661193709549192105732801690149166043997261353167595925978808711223615884238893405454295939373375444390093852700808848727823553916018549679458718571392872351814801546745912374851845462067994794017741669122816923546405547189854976132698757452267739989155876255573875734757600624676172550266326293253698236859620131817928600803782188185636753
-encoded:308204bd020100300d06092a864886f70d0101010500048204a7308204a30201000282010100c1188f056991756cff82f2322134bf791c9ac462b00bca47c807b8fc00b48ecad483604eff3fe8ff8c5767cf80d9f5c3ee4ea3cca0e4595315d1eed362ed06305c9a2266caf10e40e15f0ce88f7b6e9cb8eea631e9e0c6bb2351c31403bf64ec344cfd725a6a763473f6953fced65e37e879f654343b8c2dd8c16704cc1885012d22b864767624e3168061bca2a36775128ea6683846c0602e8d97d115f446a434d40e54a569f52c720ea7990e29d0af97a363fc2cf8d297e8546ae5b5865d95fb2508ceb77c5b5e17e50fd7bb92fc011f719a1d395dd195a48714709746d87ea290e1a01a4e73a71890ec208dada6f80a86fdd48bd1432f6b69c12ea9db714302030100010282010053ecfd28a09030c5fdae27df62f05eb2609ce1f374c9c312fcdd6268e15398e68e844565406ac235e4050f6130834b5eebe2712e1cd5f2fefa326307ac6d11ae0e698dbf38c099edd826ac611e0fcb6d41b1b439688a22462f1d37d928a1d4d7170a49741cd93de4216cd0c4c97d01b972092467c7c603f0df4f7c1ba92b950ec1cfda7a84261ff63484d90dabe719082d2e166bc9b6e9be0bc9c211428ff6daf830fa9cdde5a78525c140d4fb1dd6048fab77e6bbdd6a48fb1af29adb5154ac25f091a149c25186e4abde1474a0a99dff6d3c4dd23f6c898672a55af6e8d5d38b0284b8dab3ee28326f2bd1bad6628777bcfdf2c77e91a735e5fd261af74f9102818100f90c2a7f03122872ea7d720dc8f6f0e3f4e29bca23130ca8c0e85a9ce87c69214d4a839babd7ff6ee68556220b260d042f75caf1f5fcc18e157f3d56cd98110bed4ef958c6aeb4cbf59fa580e272a3613935c43b61fe5ec4413be5e768327df88ea2b87f0dfc38af890a8dc12588987f73ceefd2d58072b79134b7dde0b85c9302818100c67c87f3cc42ba38901a610c97da3a2ffa91d0c4606dc06ccc105317a31b25e8d45989a9d7114b19783a5d168192569e38880ce03ef9197145fbd4a4c94f2d9ae2e6d484bc1c0c97e0002941269d3a45dd1e53f4c5ce0c774c825c81514e1bd0cdfa0da6c45a3d444326d01bc0d017646ea6356b1241f05ee85438d8237836910281803ce686b5cc707247b7a3b9723984795fa5108cfc1f1b976ae4d16ce715cae682683e2274bccef2fd918d6584a9a9426195a17e6130c0002cd880e6e5051d7c7da82839bd45c88f199914d309f3560931cb25a4b8c8bbc53cc49efb175d598b886e88c808f9c885ac171ce79125b683641753b13da34be7c18fd68e67c97e0bd50281806d633831be42900a98305187f530499d2384b4ff64fd576d1e5168d9c004383246c549bf164deb8b8fdcea6c7ae0416855537575287f73ec1f5b986770a27849c1fee0e47e1f1f399c33ba88b355374645846f5498a6e3ebe3787caeb03651d21392596fad0ae674f6652f8ffc0532bf20d3ece0a3613fadae70ac1b4201006102818100ec93d97e1a88dcc7e6403f94799c9f86eb2e2fe5904ab64b4b0b4bf75af9df27fa99bea92e602eddd80137ebc237b26979a71a80babcd26c369dac0b7f35abab73cd51f41dc1ae03e9386184bbecf31ecf5516e6ab434cab2a0e4441ac7b9bc5672f26095e2b125358ccc3259df21e4eab901c30e3e5c535e8ae4b63d7eb15e8
-Signature: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
+D:2978463852743627365380268873311965916288078505677833819711324246884261384490456213854626818879603527387393510235341392004829878585096185126451218880242939940466792056286975428524446578251091159117294426661115086107859638832473256977996841081751836542918089526068339571619673737756721931809556821703719432055703165141374024290032783183048324002412148804749712558618318512812988490736136047776364213772195387927255381252890527347893026752774095142125982488398789872651715610177094026863893439520869789885192598746493527912008249939788277202930421135245048749268753187215754935016597035981422241179182572435265663766561
+encoded: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
+Signature:0234b2ad1c4b5d412e50064bdae2b4d0dfdd9dad2a89d9fef27bea192e31fab0f1ddbe9b4765112ed0c055be4e0461d11c297828031cf8b96f45d0f101d16aeee11930eff36a73a7ae9188528bd158ef3b59928c263d24e4805872d71bf178f2d1ee3af1d6f9cf01b12e19f938eccce124ccf66bbc1585f6e52713d02436db9271d5b1fb5c136d6fecf254db60be80e8ab726940f481b4be35c8397391d99a3800996e5ffb3db00f99c8b213e22a447d5015edd1a28c664e33cc49f16cdca549b7f186cf71182c1ef2fa9ff9c156f2fee7853e62b5daa11648059e1e0b8f03c0244b22c1e7ab3942a3170a2eceed9416f29fb42462b7bafa138af62aff96bcc3
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 78.725
-There were 22 failures:
-1) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
+Time: 133.526
+There were 37 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: expected:<26> but was:<22>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -948,7 +1021,7 @@ java.lang.AssertionError: expected:<26> but was:<22>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-2) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+4) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -990,7 +1063,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-3) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+5) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1032,7 +1105,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-4) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+6) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -1068,10 +1141,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+7) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:e2d6f4be37466a27513aa2bddfe5f49b pt: e2d6f4be37466a27513aa2bddfe5f49b
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1104,12 +1178,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:5e3b2149e8dddb183cdf62d4d8700af6 pt: 5e3b2149e8dddb183cdf62d4d8700af6
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1142,12 +1215,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:f980947ee1abf7a11e513b7fdedc
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256:3c70d882eb08dde6dd439f02a92137ba1dd8e20f8236c0aee56030d8d4050073ef18c35a023e3dfd944829c1ca15d34de1c590a0a70f79208375ce2d006f2634b94acd6032ef6ffb7cb3cc14a45a4ffccd068b885e0db34d7d37c1052812a9f5996b49052da17339020a55be4f654e6ca70eb3682d21f6ba77f605f90b33f91c0c42611cbcb6682da4cd7730bf07ed92217f4186be152fff69c5ea211a6afaef860f3e3018ce35a16a47486ba8997fedecbf68611546839b766010c5d2a24b5ffc116b380bafe5692b6f8d9a3e7df8e17b9d0395e446f4cb7461142b5cb24efb69030c5891d6f416c7a55cc2a33b1973925a9003534271cbb1005b06842f89cc38ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a338ff1af70577d9a358dbef53211f4f677e4108bc20ad1f29d42b914f2c7d94af86c0359b
+9) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:49a18123cc6d0acd7347c5990335a9e8 pt: 49a18123cc6d0acd7347c5990335a9e8
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:51dc76a026d2f103da583a67fd2b9364 pt: 51dc76a026d2f103da583a67fd2b9364
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1180,7 +1483,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:3c70d882eb08dde6dd439f02a921
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+16) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1221,7 +1606,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+19) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1259,7 +1644,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+20) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1295,7 +1680,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1331,8 +1716,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[3534dbcc8368eb24c1648095099e0239a9aa682a310bd59d73ab58ec7b3a43d7]> but was:<[2bf725291378e83f1f04186c4737134a3f48518fdbff50243bcf270d3773644e]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[cca02fc01d229bb0dba62f945fb4115651268c2b69d0f35feee39203f94c57b0]> but was:<[eafc4f6d601b3c3ce49c2e3b19c52b70c6383b1bf22085f5d0dd2bc317d665c7]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1368,8 +1753,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[3534dbcc8368eb24c1648095
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<2[0e9b15ab73da31f2bf153950cc7ef44fdac3b81499e0c552c212ab379c9ccc6]> but was:<2[6ea888b10127da0b9c6a454b71b78b602a8417b6b072425f640391c86659567]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[9fcb29fbf09815caab49e5a4831c3f98e494d40c5100b6515f86380e5f08ef85]> but was:<[612ba65eb8135a660b4fb7c4981c56211638618e41fc7b4769c85521a10630d0]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1405,7 +1790,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<2[0e9b
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.spongycastle.math.ec.ECAlgorithms.validatePoint(ECAlgorithms.java:214)
 	at org.spongycastle.math.ec.AbstractECMultiplier.multiply(AbstractECMultiplier.java:22)
@@ -1447,7 +1832,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1484,7 +1869,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<4>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1525,13 +1910,14 @@ java.lang.AssertionError: expected:<0> but was:<4>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.spongycastle.jce.interfaces.ECKey
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(IESCipher.java:161)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:388)
+27) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1564,12 +1950,15 @@ java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04511123a8967308e6e70c00357c14408aba3ec098317415d56e3d354dea0bd7e7a36c7c57909442a43e75cb9667ee13f836ffd234b96c02337d211ea80c7bfc63fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f43136fc6ffd5102f431366cff5ae12d5aa4e26bcea9f80e1b16539ea14a51c15ab8f1d6bc368f
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+28) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1602,12 +1991,15 @@ java.lang.AssertionError: Ciphertext repeats:04511123a8967308e6e70c00357c14408ab
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats: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
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+29) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1640,15 +2032,218 @@ java.lang.AssertionError: Ciphertext repeats:0469762a1ab5410a12d26220afd91cd97ef
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+30) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+35) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1681,13 +2276,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParameters cannot be cast to org.spongycastle.jce.interfaces.ECKey
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineGetOutputSize(IESCipher.java:161)
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:757)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+36) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1720,7 +2316,7 @@ java.lang.ClassCastException: org.spongycastle.crypto.params.ECPublicKeyParamete
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-22) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+37) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1759,12 +2355,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 90,  Failures: 22
+Tests run: 90,  Failures: 37
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:38:08 --
+-- JVM shutdown starting at 2018-04-06 18:54:16 --
 
diff --git a/testlogs/SpongyCastleAllTests_1_54.txt b/testlogs/SpongyCastleAllTests_1_54.txt
index e101ac2..02f186c 100755
--- a/testlogs/SpongyCastleAllTests_1_54.txt
+++ b/testlogs/SpongyCastleAllTests_1_54.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-...E.E.....E.........E..
+.E.E.E.E.....E.........E..
 Provider:SC
 AlgorithmParameterGenerator.1.2.840.113549.3.2
 AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
@@ -827,41 +827,40 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-.........E..E..testDhiesBasic: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
-..E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
+..E.E..E.E.E..E..E.E.E.E.E..Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862360500
 Invalid DSA signature was verified:303f021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe87862363000
 Invalid DSA signature was verified:305c021c1e41b479ad576905b960fe14eadb91b0ccf34843dab916173bb8c9cd021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236021d00ade65988d237d30f9ef41dd424a4e1c8f16967cf3365813fe8786236
 E.E..testDefaultSize: keysize=1024
 E....testTiming: SHA1WITHDSA
-count:50000 cutoff:3973553 relative average:1.0023060231061705 sigmas:0.8931189086168009
-count:25001 cutoff:513319 relative average:0.9581583749579239 sigmas:11.45903011283613
-count:12501 cutoff:486092 relative average:0.8984202759128619 sigmas:19.671615802514886
-count:6250 cutoff:479595 relative average:0.6836085391755405 sigmas:43.323685023892125
-count:3125 cutoff:475906 relative average:0.47116174726051985 sigmas:51.204543642435894
-count:1563 cutoff:472795 relative average:0.29034311692575215 sigmas:48.59465864841778
-count:782 cutoff:469779 relative average:0.17197775764504 sigmas:40.10569131901134
-count:391 cutoff:466716 relative average:0.0937565096844801 sigmas:31.0380126677941
-count:196 cutoff:463720 relative average:0.06970574505430426 sigmas:22.55843681777531
-count:98 cutoff:460437 relative average:0.02905226856266145 sigmas:16.648285562540497
-count:49 cutoff:457511 relative average:0.038688453328518876 sigmas:11.655283085163378
-count:25 cutoff:455631 relative average:0.02935576137206077 sigmas:8.406025686888002
-count:13 cutoff:451738 relative average:0.006974785796401735 sigmas:6.201440475060612
+count:50000 cutoff:2199709 relative average:1.0002402909823298 sigmas:0.09306429728069811
+count:25000 cutoff:536397 relative average:0.9453880984966427 sigmas:14.956085180819517
+count:12500 cutoff:516725 relative average:0.8849496423446364 sigmas:22.279405958721526
+count:6250 cutoff:503453 relative average:0.8492186848606438 sigmas:20.64658188803015
+count:3125 cutoff:495208 relative average:0.7358028378571123 sigmas:25.580780227366617
+count:1564 cutoff:490076 relative average:0.5650317259423022 sigmas:29.794533024653177
+count:782 cutoff:486559 relative average:0.39790148104102907 sigmas:29.162957357672887
+count:391 cutoff:483447 relative average:0.26299474210271384 sigmas:25.241757623972063
+count:196 cutoff:480315 relative average:0.17351719331678064 sigmas:20.04114297860447
+count:98 cutoff:476986 relative average:0.07768434267205057 sigmas:15.81441919563196
+count:49 cutoff:474299 relative average:0.05391112000058344 sigmas:11.470718060444469
+count:25 cutoff:472795 relative average:0.018692767886274206 sigmas:8.498369919278794
+count:13 cutoff:469816 relative average:0.014410930481285283 sigmas:6.155001766387713
 E...java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 java.security.spec.InvalidKeySpecException: encoded key spec not recognised
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey:3082024b0201003081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc63255102010104820155308201510201010420bb86b8c0e2687469ccd45f1c05457e08e6c9a5bf94b1828925c7916594ca5df8a081e33081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101a14403420004436914c442a425aacfbf3068301ba0be6fadd21ebbe96aaf8bc0a02b95897fbe393bc34b0c4162b9fe2ae6b24c5fa4ab6771adb5525b8899508352a8c4691898
 ...Generated shared secret with a modified order:ECDHC
-expected:47766d19bc15ddb3a73bcdbdf3a48caed4d44900d97971c67356a8e151a59646 computed:3def5f713ffe29b0e55602850836934c6249165aa159cb097000547596b45551
+expected:a8cd6bb19fe21c9d4786cdd932474220c95130043ca3f63c232e73c6bb918a5d computed:5f16ce02e5d7e3b6962c087d5d5d48ddec2e48535fab46b9eed022a56677c7a9
 E..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognised
 E.Generated shared secret with a modified order:ECDH
-expected:30454272ed69515d837cc5d178c8f6c67fd0c19503fff1e9ec3d03a0ed9f0704 computed:30454272ed69515d837cc5d178c8f6c67fd0c19503fff1e9ec3d03a0ed9f0704
+expected:fe0acc5b55731173c6c86b7b950330a8ea05f58d6f1c7b318221e7344fb960fb computed:fe0acc5b55731173c6c86b7b950330a8ea05f58d6f1c7b318221e7344fb960fb
 Generated shared secret with a modified order:ECDH
-expected:2afc8af7749e604083cc168dc55a486465a52ab53ba3aa4838f072ee94789edc computed:2afc8af7749e604083cc168dc55a486465a52ab53ba3aa4838f072ee94789edc
+expected:6e69cc8114e47e0e160634631d58e2ab312a26b4247f317c55da2b2bd43a3034 computed:6e69cc8114e47e0e160634631d58e2ab312a26b4247f317c55da2b2bd43a3034
 ..E...E.Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0500
 Invalid ECDSA signature was verified:3047022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce3000
 Invalid ECDSA signature was verified:3067022100b7babae9332b54b8a3a05b7004579821a887a1b21465f7db8a3d491b39fd2c3f0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce0220747291dd2f3f44af7ace68ea33431d6f94e418c106a6e76285cd59f43260ecce
@@ -870,41 +869,35 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:73125890469354416139038247105762107462121387180343043563499297129309029876059
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420a1abc98b08c4029c90e68c1b7819d41644de84838ad7ee633f0ce3c809e1415ba00a06082a8648ce3d030107a14403420004c3917cece3e2407ace21415ffd46ada3ea9409007bb583f1773ac2d907fce2ab2f6225397a69d8351461e6b3cd288fac67238a97b7c83675b4fba1ca54883744
+S:45370290052080199999603295713897197170639239109092174809555923496648361317771
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420644eac95324ca5ecf2eb16be7f37ad6d8f429ea106cccbafca4b61818843158ba00a06082a8648ce3d030107a14403420004328eb78ea2325769ca52bf339abbd8afb36c95b2a4666f027966bdc01c39257907ec3b594fd09384b0d186c876d009016888b2aa4224a8b107c77b35119f4bd2
 Public key:
-X:88458060501223191769195087174621391448205262688930901800878821996158967931563
-Y:21432111809985234706289388062434561337830070495661549538082574189701594888004
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004c3917cece3e2407ace21415ffd46ada3ea9409007bb583f1773ac2d907fce2ab2f6225397a69d8351461e6b3cd288fac67238a97b7c83675b4fba1ca54883744
-Signature:304402206d7c492220aecf1b40d30f195f8a69d09e06ffeb759d93500477254ce6e2478002203deed77b824fa1b418ccd8098ea1ce02e502009a2ed5e271c4a6b24366fe6ee1
-r:49521694279171963972722599878314623426239116542110588286887905129380368762752
-s:28013080570257861671387656385431158446076790890227809044307513785142365548257
-.SC curve:secp256r1 countLsb:520 countMsb:526
-SC curve:secp224r1 countLsb:511 countMsb:502
-SC curve:secp384r1 countLsb:520 countMsb:484
-SC curve:secp521r1 countLsb:507 countMsb:531
-SC curve:brainpoolP256r1 countLsb:509 countMsb:513
+X:22867801577337039926970250890728407037700219873906433156949598409290591839609
+Y:3583575458245751771667559407818502332873699816132877097828362726859358555090
+encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004328eb78ea2325769ca52bf339abbd8afb36c95b2a4666f027966bdc01c39257907ec3b594fd09384b0d186c876d009016888b2aa4224a8b107c77b35119f4bd2
+Signature:304402200fd24f59f3022dd1bfe81945c76ebd1db90163fe55c38806aabb5618dcf8ad9c02205a51fd30914da48d79eebf28dc5cd43808683ee2399a9ac37fbdc975d1327f59
+r:7156278275340889622328352283901482213458730888514423885005234783576055655836
+s:40853018435946424800733959862952586498981052115012905995392826995271810580313
+.SC curve:secp256r1 countLsb:503 countMsb:494
+SC curve:secp224r1 countLsb:511 countMsb:488
+SC curve:secp384r1 countLsb:505 countMsb:534
+SC curve:secp521r1 countLsb:527 countMsb:544
+SC curve:brainpoolP256r1 countLsb:506 countMsb:503
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:468624 relative average:1.000735180474843 sigmas:0.28473417355237085
-count:25003 cutoff:140670 relative average:0.9952610629525873 sigmas:1.2978892260780996
-count:12505 cutoff:138271 relative average:0.9778823614688511 sigmas:4.283918811241527
-count:6254 cutoff:137106 relative average:0.971204649142778 sigmas:3.944227351186039
-count:3125 cutoff:136179 relative average:0.9603904271616579 sigmas:3.835180398832218
-count:1566 cutoff:135399 relative average:0.9539983959211744 sigmas:3.153040012531077
-count:784 cutoff:134675 relative average:0.9731412615488235 sigmas:1.3025795894899606
-count:392 cutoff:133986 relative average:0.96237050011365 sigmas:1.2904230359674507
-count:196 cutoff:133346 relative average:0.9442376962828848 sigmas:1.3521640045918257
-count:98 cutoff:132774 relative average:0.915853296316872 sigmas:1.4428154129258643
-count:49 cutoff:132247 relative average:0.8810120203084216 sigmas:1.4426525842105122
-count:25 cutoff:131591 relative average:1.0086957541819757 sigmas:0.07530744026655721
-count:13 cutoff:131144 relative average:0.9577522909641398 sigmas:0.26383685836586457
-....0472eb04b93544c3cf5772f90354f24f32cea1f8e32d708960fd0066d06c21a5ba06792cdb39911fe5cb186efd8300541da5f6f1b5a02a1024d8f402d5c131fc2968aee117dbe67fdb4cdd897f22bb97c460e1d3d7074994b62a0d80083403733e04f455c59ae98edd19d942a35ae078f767d143c2a395b1c35d21d702
-ECIES:javax.crypto.BadPaddingException: Invalid MAC.
-.testEciesBasic:048cccfbee31372380c1c4024f81572bd8a82ed07ddf263d307186eb6e410964d186a396e7880dea074f5e032649e1cb4d6b7f06b8ca54c0d35fa1cf62aae38c27d4b23aa068ddcc1ce2ee89a0e3d7b654138ac8ef9c7288b7165b24fb3e91b78486ff74aa
-...E...E.04992de4ba6414a0f8c31ac9305eb3c515b1ca4ff686294890b35594a710617315ebf5989472e6435bc33583822694c8b82aec7517b03a67fc32db9ba7316407a802b22f2239d64e6f91e7f80294e4a9b8a51e6ac138479b597667d15b65f3a2b198e4f003c17731aac368803a3a3581503398e2b78bac445dc73e54a60a83302bf0b77546
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: Invalid MAC.
-ECIESWithAES-CBC:javax.crypto.BadPaddingException: pad block corrupted
-E..E..Exceptions for RSA/ECB/PKCS1PADDING
+count:50000 cutoff:1358428 relative average:1.0003605807237672 sigmas:0.1396523138113912
+count:25001 cutoff:145290 relative average:1.0026330200920879 sigmas:0.7210966709012002
+count:12503 cutoff:137090 relative average:0.9860327493315513 sigmas:2.7050710116638754
+count:6250 cutoff:135680 relative average:0.9750242382800296 sigmas:3.4199470212254535
+count:3126 cutoff:134678 relative average:0.9600982745610588 sigmas:3.864086058176965
+count:1563 cutoff:133871 relative average:0.9448782788479783 sigmas:3.7745300403371322
+count:782 cutoff:133179 relative average:0.9518953021432865 sigmas:2.329976254923605
+count:392 cutoff:132509 relative average:0.9155624944619983 sigmas:2.895603252101462
+count:196 cutoff:131940 relative average:0.9044887568787522 sigmas:2.316024560920904
+count:98 cutoff:131433 relative average:0.9503394929761472 sigmas:0.8515003180343758
+count:49 cutoff:130907 relative average:0.8198940766908537 sigmas:2.1836682694088165
+count:25 cutoff:130503 relative average:0.8836963368259186 sigmas:1.0072192686194321
+count:13 cutoff:130059 relative average:0.943355020557978 sigmas:0.35374778323474565
+..E.E.E.E..E.E..E.E.E..E..Exceptions for RSA/ECB/PKCS1PADDING
 javax.crypto.BadPaddingException: unknown block type
 javax.crypto.BadPaddingException: block truncated
 javax.crypto.BadPaddingException: block incorrect size
@@ -913,18 +906,98 @@ E...testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:25680345782964917907799115197249325077528247650761216710533984142792306841781881416503616688931302936227534765292423461719892441058628166449902303426175831743705364827403857399847602919061566121418202378218900434954076020030806042690250221143897624207088093859757292378287104816218290335934012309838925599786874345097666854778146723491163201667608451060211197638742325761609028692481488578489298299335378939314853250144833758071414619316002234131330998748414909866235187964222246456283746817316249848666371767759580689550058928295725645836106519034394753370372509938615267517903600860381849604389220751499441595509021
+Modulus:27806080787662867565999437203492846703089263238525353887404726752951995185028423176128042179803599219181474425008000033548592167404337912144533325861694099011645797877749913713849629172340348145225610965981258760652487706685987261001228380423453952823347628989002763124879551937268312425250223671195130508506000201608348923316904560366160678043300468083770022805967234317543288103886143509694186913372307538071559470838796314015231511847174510210638668553136388941974102271117392723688566739599867078593500265704258094828087715221465678614696337439939847232203770057533004566017370811092326002292759518569127881628879
 E:65537
-encoded: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
+encoded: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
 Private key:
-D:1794552140005395162858278496492097540684040956689712410242580738788059680160070973911415513849171225753208910101896277657074284861044178789064804219235374909260946405363425483726018271641549162222332611221874807619831997997102155637436462613237791544660446737785120767954901327220893772464314705830062705275225638405300220179052082431371598411824867137422069208178891601516372595038549485607228430012577744568066228695314272994637583724234506421961706534905279201237217968032132385799219847359783531864307572533934244298501065509470215656885002639647966186817416336826657424485247341318148171431894939519511076435305
-encoded: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
-Signature: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
+D:965097045918139922335882323352382043231971417365747668887548791075496361559800620280135698587463372200407817854822935791667775202644826141336422762104869674918854615040691574648976249915063428511220477144493999739040929095651703460500086302443148013420023397576711656846148294957652237107321189212381660181997270678604835996761394708919026435975971078426380197529994783125400341172795231740965734972265882502272905322949854496859438860871014820782734475706704253013976130643743859071631617445341262352627342718358146694626404804635941467073789743383406235574682192560107175110052622612122368675283835776149344062529
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 175.129
-There were 21 failures:
-1) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
+Time: 74.775
+There were 37 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testDefaultTagSizeAlgorithmParameterGenerator(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: expected:<26> but was:<22>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -964,7 +1037,7 @@ java.lang.AssertionError: expected:<26> but was:<22>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-2) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+4) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1006,7 +1079,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-3) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+5) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1048,7 +1121,7 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-4) testIvReuse(com.google.security.wycheproof.AesGcmTest)
+6) testIvReuse(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
@@ -1084,10 +1157,11 @@ java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d85
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
-java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+7) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:3ba697fb542d69be3358db2fb8f97f36 pt: 3ba697fb542d69be3358db2fb8f97f36
 	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1120,12 +1194,11 @@ java.lang.AssertionError: Generated secrets with weak public key:0 secret:000000
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+8) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:b76f4b4ec207d72cdb438bde06cd0fbe pt: b76f4b4ec207d72cdb438bde06cd0fbe
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:207)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1158,12 +1231,242 @@ java.lang.AssertionError: Ciphertext repeats at 256:a8ed7f4191af95b2ed5c6015b2b0
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
-java.lang.AssertionError: Ciphertext repeats at 256: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
+9) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
 	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:185)
-	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:211)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:7dc7e4f192cd6e13a350e558b478cc21 pt: 7dc7e4f192cd6e13a350e558b478cc21
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:d954ce42d92de5dcd99bbbaa8bce4b5d pt: d954ce42d92de5dcd99bbbaa8bce4b5d
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+12) testSubgroupConfinement(com.google.security.wycheproof.DhTest)
+java.lang.AssertionError: Generated secrets with weak public key:0 secret:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.DhTest.testSubgroupConfinement(DhTest.java:436)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testSemanticSecurityDhiesWithAes(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithAes(DhiesTest.java:192)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testDhiesCorrupt(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesCorrupt(DhiesTest.java:129)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testDhiesBasic(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testDhiesBasic(DhiesTest.java:100)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1196,7 +1499,89 @@ java.lang.AssertionError: Ciphertext repeats at 256:aaa41876ff1d16ec32e88828f001
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
+16) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+17) testSemanticSecurityDhiesWithDesede(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhiesWithDesede(DhiesTest.java:196)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+18) testInvalidSignatures(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1237,7 +1622,7 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
+19) testKeyGenerationAll(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.assertTrue(Assert.java:41)
@@ -1275,7 +1660,7 @@ java.lang.AssertionError: Invalid qsize for 2048 bit key:160
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-10) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
+20) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: DSA default key size too small:1024
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
@@ -1311,7 +1696,7 @@ java.lang.AssertionError: DSA default key size too small:1024
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-11) testTiming(com.google.security.wycheproof.DsaTest)
+21) testTiming(com.google.security.wycheproof.DsaTest)
 java.lang.AssertionError: Signatures with short timing have a biased k
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.DsaTest.testTiming(DsaTest.java:1190)
@@ -1347,8 +1732,8 @@ java.lang.AssertionError: Signatures with short timing have a biased k
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-12) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[47766d19bc15ddb3a73bcdbdf3a48caed4d44900d97971c67356a8e151a59646]> but was:<[3def5f713ffe29b0e55602850836934c6249165aa159cb097000547596b45551]>
+22) testWrongOrderEcdhc(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[a8cd6bb19fe21c9d4786cdd932474220c95130043ca3f63c232e73c6bb918a5d]> but was:<[5f16ce02e5d7e3b6962c087d5d5d48ddec2e48535fab46b9eed022a56677c7a9]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrder(EcdhTest.java:2150)
 	at com.google.security.wycheproof.EcdhTest.testWrongOrderEcdhc(EcdhTest.java:2162)
@@ -1384,8 +1769,8 @@ org.junit.ComparisonFailure: Algorithm:ECDHC expected:<[47766d19bc15ddb3a73bcdbd
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-13) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[72ee0ddd485a6fe22d20dff84095e33ce85867cb474cd2aadc56997e40aca016]> but was:<[a3deacfe3ec7c14508f16d9a49478a5853d2f732df7a4fe94f34362671574c8a]>
+23) testModifiedPublic(com.google.security.wycheproof.EcdhTest)
+org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[e4355da5f3f4e5c720f0526cafa98b73249b056a7e5c1a9fe34732c94779d38b]> but was:<[353243b1174f47878b73383ab0d355f0ac45f32723b8e46d2c885a89f73ad7ee]>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:1950)
 	at com.google.security.wycheproof.EcdhTest.testModifiedPublic(EcdhTest.java:2010)
@@ -1421,7 +1806,7 @@ org.junit.ComparisonFailure: algorithm:ECDH test:modified prime expected:<[72ee0
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-14) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
+24) testModifiedPublicSpec(com.google.security.wycheproof.EcdhTest)
 java.lang.IllegalArgumentException: Invalid point
 	at org.spongycastle.math.ec.ECAlgorithms.validatePoint(ECAlgorithms.java:214)
 	at org.spongycastle.math.ec.AbstractECMultiplier.multiply(AbstractECMultiplier.java:22)
@@ -1463,7 +1848,7 @@ java.lang.IllegalArgumentException: Invalid point
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-15) testEncode(com.google.security.wycheproof.EcdhTest)
+25) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1500,7 +1885,7 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-16) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
+26) testInvalidSignatures(com.google.security.wycheproof.EcdsaTest)
 java.lang.AssertionError: expected:<0> but was:<3>
 	at org.junit.Assert.fail(Assert.java:88)
 	at org.junit.Assert.failNotEquals(Assert.java:743)
@@ -1541,12 +1926,14 @@ java.lang.AssertionError: expected:<0> but was:<3>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-17) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:040e8923443f63087e0c711dfc2b18e5b97feeabeb2392b5959d1ae6fc55f3565cd58144c929fd4933f7e374c5122b00a06be6f452e7bdfb822393e77dbc862bb3c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0c84a8b3005d4d8b0668fc9e278f4ba9b0d2ee75d668cb8396fa369a5f44658eb0a303e07
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:309)
+27) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1579,12 +1966,15 @@ java.lang.AssertionError: Ciphertext repeats:040e8923443f63087e0c711dfc2b18e5b97
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-18) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: Ciphertext repeats:04285a08826a3d5e365d40046fd959dce6a78d28964d89287cbb3498b651abcbd4b0ec24f4cc7feb66b71bb7a2f1eec6145d11fc58208fc8a18d504b84d3736fa1bb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86cbb7079196ff1cfb7b5350ca43a6da86c9858b600ec169ded0cc5934add5483645d4a292de4f6a047a63d88315b9fdaa072a8bd41
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.assertTrue(Assert.java:41)
-	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:293)
-	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:304)
+28) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1617,15 +2007,259 @@ java.lang.AssertionError: Ciphertext repeats:04285a08826a3d5e365d40046fd959dce6a
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-19) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.AssertionError: expected:<1> but was:<2>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:555)
-	at org.junit.Assert.assertEquals(Assert.java:542)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:214)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+29) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+30) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+31) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+32) testDefaultEciesWithDESede(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithDESede(EciesTest.java:293)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+33) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+34) testDefaultEciesWithAes(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEciesWithAes(EciesTest.java:288)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+35) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1658,12 +2292,14 @@ java.lang.AssertionError: expected:<1> but was:<2>
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-20) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-javax.crypto.ShortBufferException: Need at least 102 bytes of space in output buffer
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:759)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
+36) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1696,7 +2332,7 @@ javax.crypto.ShortBufferException: Need at least 102 bytes of space in output bu
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-21) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
+37) testExceptionsPKCS1(com.google.security.wycheproof.RsaEncryptionTest)
 java.lang.AssertionError: Exceptions leak information about the padding for RSA/ECB/PKCS1PADDING
 	at org.junit.Assert.fail(Assert.java:88)
 	at com.google.security.wycheproof.RsaEncryptionTest.testExceptions(RsaEncryptionTest.java:138)
@@ -1735,12 +2371,12 @@ java.lang.AssertionError: Exceptions leak information about the padding for RSA/
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 90,  Failures: 21
+Tests run: 90,  Failures: 37
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:45:07 --
+-- JVM shutdown starting at 2018-04-06 18:52:14 --
 
diff --git a/testlogs/SpongyCastleAllTests_1_56.txt b/testlogs/SpongyCastleAllTests_1_56.txt
index 885b3ef..1c78e21 100755
--- a/testlogs/SpongyCastleAllTests_1_56.txt
+++ b/testlogs/SpongyCastleAllTests_1_56.txt
@@ -1,1383 +1,4 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-....E.....E.........E..
-Provider:SC
-AlgorithmParameterGenerator.1.2.840.113549.3.2
-AlgorithmParameterGenerator.1.3.6.1.4.1.188.7.1.1.2
-AlgorithmParameterGenerator.AES
-AlgorithmParameterGenerator.CAMELLIA
-AlgorithmParameterGenerator.CAST5
-AlgorithmParameterGenerator.CCM
-AlgorithmParameterGenerator.DES
-AlgorithmParameterGenerator.DESEDE
-AlgorithmParameterGenerator.DH
-AlgorithmParameterGenerator.DSA
-AlgorithmParameterGenerator.ELGAMAL
-AlgorithmParameterGenerator.ElGamal
-AlgorithmParameterGenerator.GCM
-AlgorithmParameterGenerator.GOST3410
-AlgorithmParameterGenerator.IDEA
-AlgorithmParameterGenerator.NOEKEON
-AlgorithmParameterGenerator.RC2
-AlgorithmParameterGenerator.SEED
-AlgorithmParameterGenerator.SHACAL-2
-AlgorithmParameterGenerator.SM4
-AlgorithmParameterGenerator.Shacal2
-AlgorithmParameters.1.2.840.113549.3.2
-AlgorithmParameters.1.3.6.1.4.1.188.7.1.1.2
-AlgorithmParameters.AES
-AlgorithmParameters.BLOWFISH
-AlgorithmParameters.CAMELLIA
-AlgorithmParameters.CAST5
-AlgorithmParameters.CCM
-AlgorithmParameters.DES
-AlgorithmParameters.DESEDE
-AlgorithmParameters.DH
-AlgorithmParameters.DSA
-AlgorithmParameters.EC
-AlgorithmParameters.ECIES
-AlgorithmParameters.ELGAMAL
-AlgorithmParameters.ElGamal
-AlgorithmParameters.GCM
-AlgorithmParameters.GOST3410
-AlgorithmParameters.IDEA
-AlgorithmParameters.IES
-AlgorithmParameters.NOEKEON
-AlgorithmParameters.OAEP
-AlgorithmParameters.PBKDF2
-AlgorithmParameters.PKCS12PBE
-AlgorithmParameters.PSS
-AlgorithmParameters.RC2
-AlgorithmParameters.RC5
-AlgorithmParameters.RC5-64
-AlgorithmParameters.RC6
-AlgorithmParameters.RIJNDAEL
-AlgorithmParameters.SEED
-AlgorithmParameters.SHACAL-2
-AlgorithmParameters.SKIPJACK
-AlgorithmParameters.SM4
-AlgorithmParameters.Serpent
-AlgorithmParameters.Shacal2
-AlgorithmParameters.TEA
-AlgorithmParameters.Threefish-1024
-AlgorithmParameters.Threefish-256
-AlgorithmParameters.Threefish-512
-AlgorithmParameters.Tnepres
-AlgorithmParameters.Twofish
-AlgorithmParameters.XTEA
-CertPathBuilder.PKIX
-CertPathBuilder.RFC3280
-CertPathBuilder.RFC3281
-CertPathValidator.PKIX
-CertPathValidator.RFC3280
-CertPathValidator.RFC3281
-CertStore.Collection
-CertStore.LDAP
-CertStore.Multi
-CertificateFactory.X.509
-Cipher.1.2.392.200011.61.1.1.1.2
-Cipher.1.2.392.200011.61.1.1.1.3
-Cipher.1.2.392.200011.61.1.1.1.4
-Cipher.1.2.410.200004.1.4
-Cipher.1.2.643.2.2.21
-Cipher.1.2.840.113533.7.66.10
-Cipher.1.2.840.113549.1.1.1
-Cipher.1.2.840.113549.1.1.7
-Cipher.1.2.840.113549.1.9.16.3.6
-Cipher.1.2.840.113549.3.2
-Cipher.1.2.840.113549.3.7
-Cipher.1.3.14.3.2.7
-Cipher.1.3.6.1.4.1.11591.13.2.1
-Cipher.1.3.6.1.4.1.11591.13.2.2
-Cipher.1.3.6.1.4.1.11591.13.2.21
-Cipher.1.3.6.1.4.1.11591.13.2.22
-Cipher.1.3.6.1.4.1.11591.13.2.23
-Cipher.1.3.6.1.4.1.11591.13.2.24
-Cipher.1.3.6.1.4.1.11591.13.2.3
-Cipher.1.3.6.1.4.1.11591.13.2.4
-Cipher.1.3.6.1.4.1.11591.13.2.41
-Cipher.1.3.6.1.4.1.11591.13.2.42
-Cipher.1.3.6.1.4.1.11591.13.2.43
-Cipher.1.3.6.1.4.1.11591.13.2.44
-Cipher.1.3.6.1.4.1.188.7.1.1.2
-Cipher.1.3.6.1.4.1.3029.1.1.2
-Cipher.2.16.840.1.101.3.4.1.1
-Cipher.2.16.840.1.101.3.4.1.2
-Cipher.2.16.840.1.101.3.4.1.21
-Cipher.2.16.840.1.101.3.4.1.22
-Cipher.2.16.840.1.101.3.4.1.23
-Cipher.2.16.840.1.101.3.4.1.24
-Cipher.2.16.840.1.101.3.4.1.3
-Cipher.2.16.840.1.101.3.4.1.4
-Cipher.2.16.840.1.101.3.4.1.41
-Cipher.2.16.840.1.101.3.4.1.42
-Cipher.2.16.840.1.101.3.4.1.43
-Cipher.2.16.840.1.101.3.4.1.44
-Cipher.2.5.8.1.1
-Cipher.AES
-Cipher.AESRFC3211WRAP
-Cipher.AESRFC5649WRAP
-Cipher.AESWRAP
-Cipher.ARC4
-Cipher.BLOWFISH
-Cipher.BROKENPBEWITHMD5ANDDES
-Cipher.BROKENPBEWITHSHA1ANDDES
-Cipher.BROKENPBEWITHSHAAND2-KEYTRIPLEDES-CBC
-Cipher.BROKENPBEWITHSHAAND3-KEYTRIPLEDES-CBC
-Cipher.CAMELLIA
-Cipher.CAMELLIARFC3211WRAP
-Cipher.CAMELLIAWRAP
-Cipher.CAST5
-Cipher.CAST6
-Cipher.CCM
-Cipher.CHACHA
-Cipher.CHACHA7539
-Cipher.DES
-Cipher.DESEDE
-Cipher.DESEDERFC3211WRAP
-Cipher.DESEDEWRAP
-Cipher.DESRFC3211WRAP
-Cipher.DHIES
-Cipher.DHIESWITHAES-CBC
-Cipher.DHIESWITHDESEDE-CBC
-Cipher.DHIESwithAES-CBC
-Cipher.ECIES
-Cipher.ECIESWITHAES-CBC
-Cipher.ECIESWITHDESEDE-CBC
-Cipher.ECIESwithAES-CBC
-Cipher.ECIESwithDESEDE-CBC
-Cipher.ELGAMAL
-Cipher.ELGAMAL/PKCS1
-Cipher.ElGamal
-Cipher.GCM
-Cipher.GOST28147
-Cipher.Grain128
-Cipher.Grainv1
-Cipher.HC128
-Cipher.HC256
-Cipher.IDEA
-Cipher.IES
-Cipher.IESWITHAES-CBC
-Cipher.IESWITHDESEDE-CBC
-Cipher.IESwithAES-CBC
-Cipher.NOEKEON
-Cipher.OID.1.2.392.200011.61.1.1.1.2
-Cipher.OID.1.2.392.200011.61.1.1.1.3
-Cipher.OID.1.2.392.200011.61.1.1.1.4
-Cipher.OID.1.2.410.200004.1.4
-Cipher.OID.1.2.840.113533.7.66.10
-Cipher.OID.1.2.840.113549.1.1.1
-Cipher.OID.1.2.840.113549.1.1.7
-Cipher.OID.1.2.840.113549.1.9.16.3.6
-Cipher.OID.1.2.840.113549.3.2
-Cipher.OID.1.2.840.113549.3.7
-Cipher.OID.1.3.14.3.2.7
-Cipher.OID.1.3.6.1.4.1.11591.13.2.1
-Cipher.OID.1.3.6.1.4.1.11591.13.2.2
-Cipher.OID.1.3.6.1.4.1.11591.13.2.21
-Cipher.OID.1.3.6.1.4.1.11591.13.2.22
-Cipher.OID.1.3.6.1.4.1.11591.13.2.23
-Cipher.OID.1.3.6.1.4.1.11591.13.2.24
-Cipher.OID.1.3.6.1.4.1.11591.13.2.3
-Cipher.OID.1.3.6.1.4.1.11591.13.2.4
-Cipher.OID.1.3.6.1.4.1.11591.13.2.41
-Cipher.OID.1.3.6.1.4.1.11591.13.2.42
-Cipher.OID.1.3.6.1.4.1.11591.13.2.43
-Cipher.OID.1.3.6.1.4.1.11591.13.2.44
-Cipher.OID.1.3.6.1.4.1.188.7.1.1.2
-Cipher.OID.1.3.6.1.4.1.3029.1.1.2
-Cipher.OID.2.16.840.1.101.3.4.1.1
-Cipher.OID.2.16.840.1.101.3.4.1.2
-Cipher.OID.2.16.840.1.101.3.4.1.21
-Cipher.OID.2.16.840.1.101.3.4.1.22
-Cipher.OID.2.16.840.1.101.3.4.1.23
-Cipher.OID.2.16.840.1.101.3.4.1.24
-Cipher.OID.2.16.840.1.101.3.4.1.3
-Cipher.OID.2.16.840.1.101.3.4.1.4
-Cipher.OID.2.16.840.1.101.3.4.1.41
-Cipher.OID.2.16.840.1.101.3.4.1.42
-Cipher.OID.2.16.840.1.101.3.4.1.43
-Cipher.OID.2.16.840.1.101.3.4.1.44
-Cipher.OID.2.5.8.1.1
-Cipher.OLDPBEWITHSHAAND3-KEYTRIPLEDES-CBC
-Cipher.OLDPBEWITHSHAANDTWOFISH-CBC
-Cipher.PBEWITHMD2ANDDES
-Cipher.PBEWITHMD5AND128BITAES-CBC-OPENSSL
-Cipher.PBEWITHMD5AND192BITAES-CBC-OPENSSL
-Cipher.PBEWITHMD5AND256BITAES-CBC-OPENSSL
-Cipher.PBEWITHMD5ANDDES
-Cipher.PBEWITHMD5ANDRC2
-Cipher.PBEWITHSHA1ANDDES
-Cipher.PBEWITHSHA1ANDRC2
-Cipher.PBEWITHSHA256AND128BITAES-CBC-BC
-Cipher.PBEWITHSHA256AND192BITAES-CBC-BC
-Cipher.PBEWITHSHA256AND256BITAES-CBC-BC
-Cipher.PBEWITHSHAAND128BITAES-CBC-BC
-Cipher.PBEWITHSHAAND128BITRC2-CBC
-Cipher.PBEWITHSHAAND128BITRC4
-Cipher.PBEWITHSHAAND192BITAES-CBC-BC
-Cipher.PBEWITHSHAAND2-KEYTRIPLEDES-CBC
-Cipher.PBEWITHSHAAND256BITAES-CBC-BC
-Cipher.PBEWITHSHAAND3-KEYTRIPLEDES-CBC
-Cipher.PBEWITHSHAAND40BITRC2-CBC
-Cipher.PBEWITHSHAAND40BITRC4
-Cipher.PBEWITHSHAANDIDEA-CBC
-Cipher.PBEWITHSHAANDTWOFISH-CBC
-Cipher.RC2
-Cipher.RC2WRAP
-Cipher.RC5
-Cipher.RC5-64
-Cipher.RC6
-Cipher.RIJNDAEL
-Cipher.RSA
-Cipher.RSA/1
-Cipher.RSA/2
-Cipher.RSA/ISO9796-1
-Cipher.RSA/OAEP
-Cipher.RSA/PKCS1
-Cipher.RSA/RAW
-Cipher.SALSA20
-Cipher.SEED
-Cipher.SEEDWRAP
-Cipher.SHACAL-2
-Cipher.SKIPJACK
-Cipher.SM4
-Cipher.Serpent
-Cipher.Shacal2
-Cipher.TEA
-Cipher.Threefish-1024
-Cipher.Threefish-256
-Cipher.Threefish-512
-Cipher.Tnepres
-Cipher.Twofish
-Cipher.VMPC
-Cipher.VMPC-KSA3
-Cipher.XSALSA20
-Cipher.XTEA
-KeyAgreement.1.2.840.113549.1.9.16.3.10
-KeyAgreement.1.2.840.113549.1.9.16.3.5
-KeyAgreement.1.3.132.1.11.0
-KeyAgreement.1.3.132.1.11.1
-KeyAgreement.1.3.132.1.11.2
-KeyAgreement.1.3.132.1.11.3
-KeyAgreement.1.3.132.1.14.0
-KeyAgreement.1.3.132.1.14.1
-KeyAgreement.1.3.132.1.14.2
-KeyAgreement.1.3.132.1.14.3
-KeyAgreement.1.3.132.1.15.0
-KeyAgreement.1.3.132.1.15.1
-KeyAgreement.1.3.132.1.15.2
-KeyAgreement.1.3.132.1.15.3
-KeyAgreement.1.3.133.16.840.63.0.16
-KeyAgreement.1.3.133.16.840.63.0.2
-KeyAgreement.1.3.133.16.840.63.0.3
-KeyAgreement.DH
-KeyAgreement.ECCDH
-KeyAgreement.ECCDHWITHSHA1CKDF
-KeyAgreement.ECCDHWITHSHA256CKDF
-KeyAgreement.ECCDHWITHSHA384CKDF
-KeyAgreement.ECCDHWITHSHA512CKDF
-KeyAgreement.ECDH
-KeyAgreement.ECDHC
-KeyAgreement.ECDHWITHSHA1KDF
-KeyAgreement.ECMQV
-KeyAgreement.ECMQVWITHSHA1CKDF
-KeyAgreement.ECMQVWITHSHA224CKDF
-KeyAgreement.ECMQVWITHSHA256CKDF
-KeyAgreement.ECMQVWITHSHA384CKDF
-KeyAgreement.ECMQVWITHSHA512CKDF
-KeyAgreement.OID.1.2.840.113549.1.9.16.3.10
-KeyAgreement.OID.1.2.840.113549.1.9.16.3.5
-KeyFactory.DH
-KeyFactory.DSA
-KeyFactory.DSTU4145
-KeyFactory.EC
-KeyFactory.ECDH
-KeyFactory.ECDHC
-KeyFactory.ECDSA
-KeyFactory.ECGOST3410
-KeyFactory.ECMQV
-KeyFactory.ELGAMAL
-KeyFactory.ElGamal
-KeyFactory.GOST3410
-KeyFactory.RSA
-KeyFactory.X.509
-KeyGenerator.1.2.392.200011.61.1.1.1.2
-KeyGenerator.1.2.392.200011.61.1.1.1.3
-KeyGenerator.1.2.392.200011.61.1.1.1.4
-KeyGenerator.1.2.392.200011.61.1.1.3.2
-KeyGenerator.1.2.392.200011.61.1.1.3.3
-KeyGenerator.1.2.392.200011.61.1.1.3.4
-KeyGenerator.1.2.410.200004.1.4
-KeyGenerator.1.2.410.200004.7.1.1.1
-KeyGenerator.1.2.840.113549.3.2
-KeyGenerator.1.2.840.113549.3.7
-KeyGenerator.1.3.6.1.4.1.188.7.1.1.2
-KeyGenerator.2.16.840.1.101.3.4.1.1
-KeyGenerator.2.16.840.1.101.3.4.1.2
-KeyGenerator.2.16.840.1.101.3.4.1.21
-KeyGenerator.2.16.840.1.101.3.4.1.22
-KeyGenerator.2.16.840.1.101.3.4.1.23
-KeyGenerator.2.16.840.1.101.3.4.1.24
-KeyGenerator.2.16.840.1.101.3.4.1.25
-KeyGenerator.2.16.840.1.101.3.4.1.26
-KeyGenerator.2.16.840.1.101.3.4.1.27
-KeyGenerator.2.16.840.1.101.3.4.1.3
-KeyGenerator.2.16.840.1.101.3.4.1.4
-KeyGenerator.2.16.840.1.101.3.4.1.41
-KeyGenerator.2.16.840.1.101.3.4.1.42
-KeyGenerator.2.16.840.1.101.3.4.1.43
-KeyGenerator.2.16.840.1.101.3.4.1.44
-KeyGenerator.2.16.840.1.101.3.4.1.45
-KeyGenerator.2.16.840.1.101.3.4.1.46
-KeyGenerator.2.16.840.1.101.3.4.1.47
-KeyGenerator.2.16.840.1.101.3.4.1.5
-KeyGenerator.2.16.840.1.101.3.4.1.6
-KeyGenerator.2.16.840.1.101.3.4.1.7
-KeyGenerator.2.16.840.1.101.3.4.2
-KeyGenerator.2.16.840.1.101.3.4.22
-KeyGenerator.2.16.840.1.101.3.4.42
-KeyGenerator.AES
-KeyGenerator.AES-GMAC
-KeyGenerator.AESWRAP
-KeyGenerator.ARC4
-KeyGenerator.BLOWFISH
-KeyGenerator.CAMELLIA
-KeyGenerator.CAMELLIA-GMAC
-KeyGenerator.CAST5
-KeyGenerator.CAST6
-KeyGenerator.CAST6-GMAC
-KeyGenerator.CHACHA
-KeyGenerator.CHACHA7539
-KeyGenerator.DES
-KeyGenerator.DESEDE
-KeyGenerator.DESEDEWRAP
-KeyGenerator.GOST28147
-KeyGenerator.Grain128
-KeyGenerator.Grainv1
-KeyGenerator.HC128
-KeyGenerator.HC256
-KeyGenerator.HMACGOST3411
-KeyGenerator.HMACGOST3411-2012-256
-KeyGenerator.HMACGOST3411-2012-512
-KeyGenerator.HMACKECCAK224
-KeyGenerator.HMACKECCAK256
-KeyGenerator.HMACKECCAK288
-KeyGenerator.HMACKECCAK384
-KeyGenerator.HMACKECCAK512
-KeyGenerator.HMACMD2
-KeyGenerator.HMACMD4
-KeyGenerator.HMACMD5
-KeyGenerator.HMACRIPEMD128
-KeyGenerator.HMACRIPEMD160
-KeyGenerator.HMACRIPEMD256
-KeyGenerator.HMACRIPEMD320
-KeyGenerator.HMACSHA1
-KeyGenerator.HMACSHA224
-KeyGenerator.HMACSHA256
-KeyGenerator.HMACSHA3-224
-KeyGenerator.HMACSHA3-256
-KeyGenerator.HMACSHA3-384
-KeyGenerator.HMACSHA3-512
-KeyGenerator.HMACSHA384
-KeyGenerator.HMACSHA512
-KeyGenerator.HMACSHA512/224
-KeyGenerator.HMACSHA512/256
-KeyGenerator.HMACSkein-1024-1024
-KeyGenerator.HMACSkein-1024-384
-KeyGenerator.HMACSkein-1024-512
-KeyGenerator.HMACSkein-256-128
-KeyGenerator.HMACSkein-256-160
-KeyGenerator.HMACSkein-256-224
-KeyGenerator.HMACSkein-256-256
-KeyGenerator.HMACSkein-512-128
-KeyGenerator.HMACSkein-512-160
-KeyGenerator.HMACSkein-512-224
-KeyGenerator.HMACSkein-512-256
-KeyGenerator.HMACSkein-512-384
-KeyGenerator.HMACSkein-512-512
-KeyGenerator.HMACTIGER
-KeyGenerator.HMACWHIRLPOOL
-KeyGenerator.IDEA
-KeyGenerator.NOEKEON
-KeyGenerator.NOEKEON-GMAC
-KeyGenerator.OID.1.2.392.200011.61.1.1.1.2
-KeyGenerator.OID.1.2.392.200011.61.1.1.1.3
-KeyGenerator.OID.1.2.392.200011.61.1.1.1.4
-KeyGenerator.OID.1.2.392.200011.61.1.1.3.2
-KeyGenerator.OID.1.2.392.200011.61.1.1.3.3
-KeyGenerator.OID.1.2.392.200011.61.1.1.3.4
-KeyGenerator.OID.1.2.410.200004.1.4
-KeyGenerator.OID.1.2.410.200004.7.1.1.1
-KeyGenerator.OID.1.3.6.1.4.1.188.7.1.1.2
-KeyGenerator.OID.2.16.840.1.101.3.4.1.1
-KeyGenerator.OID.2.16.840.1.101.3.4.1.2
-KeyGenerator.OID.2.16.840.1.101.3.4.1.21
-KeyGenerator.OID.2.16.840.1.101.3.4.1.22
-KeyGenerator.OID.2.16.840.1.101.3.4.1.23
-KeyGenerator.OID.2.16.840.1.101.3.4.1.24
-KeyGenerator.OID.2.16.840.1.101.3.4.1.25
-KeyGenerator.OID.2.16.840.1.101.3.4.1.26
-KeyGenerator.OID.2.16.840.1.101.3.4.1.27
-KeyGenerator.OID.2.16.840.1.101.3.4.1.3
-KeyGenerator.OID.2.16.840.1.101.3.4.1.4
-KeyGenerator.OID.2.16.840.1.101.3.4.1.41
-KeyGenerator.OID.2.16.840.1.101.3.4.1.42
-KeyGenerator.OID.2.16.840.1.101.3.4.1.43
-KeyGenerator.OID.2.16.840.1.101.3.4.1.44
-KeyGenerator.OID.2.16.840.1.101.3.4.1.45
-KeyGenerator.OID.2.16.840.1.101.3.4.1.46
-KeyGenerator.OID.2.16.840.1.101.3.4.1.47
-KeyGenerator.OID.2.16.840.1.101.3.4.1.5
-KeyGenerator.OID.2.16.840.1.101.3.4.1.6
-KeyGenerator.OID.2.16.840.1.101.3.4.1.7
-KeyGenerator.POLY1305
-KeyGenerator.POLY1305-AES
-KeyGenerator.POLY1305-CAMELLIA
-KeyGenerator.POLY1305-CAST6
-KeyGenerator.POLY1305-NOEKEON
-KeyGenerator.POLY1305-RC6
-KeyGenerator.POLY1305-SEED
-KeyGenerator.POLY1305-SERPENT
-KeyGenerator.POLY1305-SM4
-KeyGenerator.POLY1305-Twofish
-KeyGenerator.RC2
-KeyGenerator.RC5
-KeyGenerator.RC5-64
-KeyGenerator.RC6
-KeyGenerator.RC6-GMAC
-KeyGenerator.RIJNDAEL
-KeyGenerator.SALSA20
-KeyGenerator.SEED
-KeyGenerator.SEED-CMAC
-KeyGenerator.SEED-GMAC
-KeyGenerator.SERPENT-GMAC
-KeyGenerator.SHACAL-2
-KeyGenerator.SIPHASH
-KeyGenerator.SKIPJACK
-KeyGenerator.SM4
-KeyGenerator.SM4-CMAC
-KeyGenerator.SM4-GMAC
-KeyGenerator.Serpent
-KeyGenerator.Shacal2
-KeyGenerator.Skein-MAC-1024-1024
-KeyGenerator.Skein-MAC-1024-384
-KeyGenerator.Skein-MAC-1024-512
-KeyGenerator.Skein-MAC-256-128
-KeyGenerator.Skein-MAC-256-160
-KeyGenerator.Skein-MAC-256-224
-KeyGenerator.Skein-MAC-256-256
-KeyGenerator.Skein-MAC-512-128
-KeyGenerator.Skein-MAC-512-160
-KeyGenerator.Skein-MAC-512-224
-KeyGenerator.Skein-MAC-512-256
-KeyGenerator.Skein-MAC-512-384
-KeyGenerator.Skein-MAC-512-512
-KeyGenerator.TEA
-KeyGenerator.TNEPRES-GMAC
-KeyGenerator.Threefish-1024
-KeyGenerator.Threefish-256
-KeyGenerator.Threefish-512
-KeyGenerator.Tnepres
-KeyGenerator.Twofish
-KeyGenerator.Twofish-GMAC
-KeyGenerator.VMPC
-KeyGenerator.VMPC-KSA3
-KeyGenerator.XSALSA20
-KeyGenerator.XTEA
-KeyPairGenerator.DH
-KeyPairGenerator.DSA
-KeyPairGenerator.DSTU4145
-KeyPairGenerator.EC
-KeyPairGenerator.ECDH
-KeyPairGenerator.ECDHC
-KeyPairGenerator.ECDHWITHSHA1KDF
-KeyPairGenerator.ECDSA
-KeyPairGenerator.ECGOST3410
-KeyPairGenerator.ECIES
-KeyPairGenerator.ECMQV
-KeyPairGenerator.ELGAMAL
-KeyPairGenerator.ElGamal
-KeyPairGenerator.GOST3410
-KeyPairGenerator.RSA
-KeyStore.BCFKS
-KeyStore.BCFKS-DEF
-KeyStore.BCPKCS12
-KeyStore.BKS
-KeyStore.BKS-V1
-KeyStore.BouncyCastle
-KeyStore.PKCS12
-KeyStore.PKCS12-3DES-3DES
-KeyStore.PKCS12-3DES-40RC2
-KeyStore.PKCS12-DEF
-KeyStore.PKCS12-DEF-3DES-3DES
-KeyStore.PKCS12-DEF-3DES-40RC2
-Mac.AES-GMAC
-Mac.AESCCMMAC
-Mac.AESCMAC
-Mac.BLOWFISHCMAC
-Mac.CAMELLIA-GMAC
-Mac.CAST6-GMAC
-Mac.DESCMAC
-Mac.DESEDECMAC
-Mac.DESEDEMAC
-Mac.DESEDEMAC/CFB8
-Mac.DESEDEMAC64
-Mac.DESEDEMAC64WITHISO7816-4PADDING
-Mac.DESMAC
-Mac.DESMAC/CFB8
-Mac.DESMAC64
-Mac.DESMAC64WITHISO7816-4PADDING
-Mac.DESWITHISO9797
-Mac.GOST28147MAC
-Mac.HMACGOST3411
-Mac.HMACGOST3411-2012-256
-Mac.HMACGOST3411-2012-512
-Mac.HMACKECCAK224
-Mac.HMACKECCAK256
-Mac.HMACKECCAK288
-Mac.HMACKECCAK384
-Mac.HMACKECCAK512
-Mac.HMACMD2
-Mac.HMACMD4
-Mac.HMACMD5
-Mac.HMACRIPEMD128
-Mac.HMACRIPEMD160
-Mac.HMACRIPEMD256
-Mac.HMACRIPEMD320
-Mac.HMACSHA1
-Mac.HMACSHA224
-Mac.HMACSHA256
-Mac.HMACSHA3-224
-Mac.HMACSHA3-256
-Mac.HMACSHA3-384
-Mac.HMACSHA3-512
-Mac.HMACSHA384
-Mac.HMACSHA512
-Mac.HMACSHA512/224
-Mac.HMACSHA512/256
-Mac.HMACSkein-1024-1024
-Mac.HMACSkein-1024-384
-Mac.HMACSkein-1024-512
-Mac.HMACSkein-256-128
-Mac.HMACSkein-256-160
-Mac.HMACSkein-256-224
-Mac.HMACSkein-256-256
-Mac.HMACSkein-512-128
-Mac.HMACSkein-512-160
-Mac.HMACSkein-512-224
-Mac.HMACSkein-512-256
-Mac.HMACSkein-512-384
-Mac.HMACSkein-512-512
-Mac.HMACTIGER
-Mac.HMACWHIRLPOOL
-Mac.IDEAMAC
-Mac.IDEAMAC/CFB8
-Mac.ISO9797ALG3MAC
-Mac.ISO9797ALG3WITHISO7816-4PADDING
-Mac.NOEKEON-GMAC
-Mac.OLDHMACSHA384
-Mac.OLDHMACSHA512
-Mac.PBEWITHHMACRIPEMD160
-Mac.PBEWITHHMACSHA
-Mac.PBEWITHHMACSHA1
-Mac.PBEWITHHMACSHA224
-Mac.PBEWITHHMACSHA256
-Mac.PBEWITHHMACSHA384
-Mac.PBEWITHHMACSHA512
-Mac.POLY1305
-Mac.POLY1305-AES
-Mac.POLY1305-CAMELLIA
-Mac.POLY1305-CAST6
-Mac.POLY1305-NOEKEON
-Mac.POLY1305-RC6
-Mac.POLY1305-SEED
-Mac.POLY1305-SERPENT
-Mac.POLY1305-SM4
-Mac.POLY1305-Twofish
-Mac.RC2MAC
-Mac.RC2MAC/CFB8
-Mac.RC5MAC
-Mac.RC5MAC/CFB8
-Mac.RC6-GMAC
-Mac.SEED-CMAC
-Mac.SEED-GMAC
-Mac.SERPENT-GMAC
-Mac.SIPHASH-2-4
-Mac.SIPHASH-4-8
-Mac.SKIPJACKMAC
-Mac.SKIPJACKMAC/CFB8
-Mac.SM4-CMAC
-Mac.SM4-GMAC
-Mac.Shacal-2CMAC
-Mac.Skein-MAC-1024-1024
-Mac.Skein-MAC-1024-384
-Mac.Skein-MAC-1024-512
-Mac.Skein-MAC-256-128
-Mac.Skein-MAC-256-160
-Mac.Skein-MAC-256-224
-Mac.Skein-MAC-256-256
-Mac.Skein-MAC-512-128
-Mac.Skein-MAC-512-160
-Mac.Skein-MAC-512-224
-Mac.Skein-MAC-512-256
-Mac.Skein-MAC-512-384
-Mac.Skein-MAC-512-512
-Mac.TNEPRES-GMAC
-Mac.Threefish-1024CMAC
-Mac.Threefish-256CMAC
-Mac.Threefish-512CMAC
-Mac.Twofish-GMAC
-Mac.VMPCMAC
-MessageDigest.2.16.840.1.101.3.4.2.10
-MessageDigest.2.16.840.1.101.3.4.2.7
-MessageDigest.2.16.840.1.101.3.4.2.8
-MessageDigest.2.16.840.1.101.3.4.2.9
-MessageDigest.BLAKE2B-160
-MessageDigest.BLAKE2B-256
-MessageDigest.BLAKE2B-384
-MessageDigest.BLAKE2B-512
-MessageDigest.GOST3411
-MessageDigest.GOST3411-2012-256
-MessageDigest.GOST3411-2012-512
-MessageDigest.KECCAK-224
-MessageDigest.KECCAK-256
-MessageDigest.KECCAK-288
-MessageDigest.KECCAK-384
-MessageDigest.KECCAK-512
-MessageDigest.MD2
-MessageDigest.MD4
-MessageDigest.MD5
-MessageDigest.OID.2.16.840.1.101.3.4.2.10
-MessageDigest.OID.2.16.840.1.101.3.4.2.7
-MessageDigest.OID.2.16.840.1.101.3.4.2.8
-MessageDigest.OID.2.16.840.1.101.3.4.2.9
-MessageDigest.RIPEMD128
-MessageDigest.RIPEMD160
-MessageDigest.RIPEMD256
-MessageDigest.RIPEMD320
-MessageDigest.SHA-1
-MessageDigest.SHA-224
-MessageDigest.SHA-256
-MessageDigest.SHA-384
-MessageDigest.SHA-512
-MessageDigest.SHA-512/224
-MessageDigest.SHA-512/256
-MessageDigest.SHA3-224
-MessageDigest.SHA3-256
-MessageDigest.SHA3-384
-MessageDigest.SHA3-512
-MessageDigest.SM3
-MessageDigest.Skein-1024-1024
-MessageDigest.Skein-1024-384
-MessageDigest.Skein-1024-512
-MessageDigest.Skein-256-128
-MessageDigest.Skein-256-160
-MessageDigest.Skein-256-224
-MessageDigest.Skein-256-256
-MessageDigest.Skein-512-128
-MessageDigest.Skein-512-160
-MessageDigest.Skein-512-224
-MessageDigest.Skein-512-256
-MessageDigest.Skein-512-384
-MessageDigest.Skein-512-512
-MessageDigest.TIGER
-MessageDigest.Tiger
-MessageDigest.WHIRLPOOL
-Provider.id className
-Provider.id info
-Provider.id name
-Provider.id version
-SecretKeyFactory.1.3.14.3.2.17
-SecretKeyFactory.2.16.840.1.101.3.4.1
-SecretKeyFactory.AES
-SecretKeyFactory.DES
-SecretKeyFactory.DESEDE
-SecretKeyFactory.OID.1.3.14.3.2.17
-SecretKeyFactory.OID.2.16.840.1.101.3.4.1
-SecretKeyFactory.PBEWITHHMACGOST3411
-SecretKeyFactory.PBEWITHHMACRIPEMD160
-SecretKeyFactory.PBEWITHHMACSHA1
-SecretKeyFactory.PBEWITHHMACSHA256
-SecretKeyFactory.PBEWITHHMACTIGER
-SecretKeyFactory.PBEWITHMD2ANDDES
-SecretKeyFactory.PBEWITHMD2ANDRC2
-SecretKeyFactory.PBEWITHMD5AND128BITAES-CBC-OPENSSL
-SecretKeyFactory.PBEWITHMD5AND192BITAES-CBC-OPENSSL
-SecretKeyFactory.PBEWITHMD5AND256BITAES-CBC-OPENSSL
-SecretKeyFactory.PBEWITHMD5ANDDES
-SecretKeyFactory.PBEWITHMD5ANDRC2
-SecretKeyFactory.PBEWITHSHA1ANDDES
-SecretKeyFactory.PBEWITHSHA1ANDRC2
-SecretKeyFactory.PBEWITHSHA256AND128BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHA256AND192BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHA256AND256BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND128BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND128BITRC2-CBC
-SecretKeyFactory.PBEWITHSHAAND128BITRC4
-SecretKeyFactory.PBEWITHSHAAND192BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND2-KEYTRIPLEDES-CBC
-SecretKeyFactory.PBEWITHSHAAND256BITAES-CBC-BC
-SecretKeyFactory.PBEWITHSHAAND3-KEYTRIPLEDES-CBC
-SecretKeyFactory.PBEWITHSHAAND40BITRC2-CBC
-SecretKeyFactory.PBEWITHSHAAND40BITRC4
-SecretKeyFactory.PBEWITHSHAANDIDEA-CBC
-SecretKeyFactory.PBEWITHSHAANDTWOFISH-CBC
-SecretKeyFactory.PBKDF-OPENSSL
-SecretKeyFactory.PBKDF2
-SecretKeyFactory.PBKDF2WITHASCII
-SecretKeyFactory.PBKDF2WITHHMACSHA224
-SecretKeyFactory.PBKDF2WITHHMACSHA256
-SecretKeyFactory.PBKDF2WITHHMACSHA384
-SecretKeyFactory.PBKDF2WITHHMACSHA512
-SecretKeyFactory.TLS10KDF
-SecretKeyFactory.TLS11KDF
-SecretKeyFactory.TLS12WITHSHA256KDF
-SecretKeyFactory.TLS12WITHSHA384KDF
-SecretKeyFactory.TLS12WITHSHA512KDF
-SecureRandom.DEFAULT
-SecureRandom.NONCEANDIV
-Signature.1.2.840.113549.1.1.10
-Signature.DDSA
-Signature.DETDSA
-Signature.DSA
-Signature.DSTU4145
-Signature.ECDDSA
-Signature.ECDSA
-Signature.ECGOST3410
-Signature.GOST3410
-Signature.GOST3411WITHDSTU4145
-Signature.GOST3411WITHDSTU4145LE
-Signature.GOST3411WITHECGOST3410
-Signature.MD2WITHRSA
-Signature.MD4WITHRSA
-Signature.MD5WITHRSA
-Signature.MD5WITHRSA/ISO9796-2
-Signature.NONEWITHDSA
-Signature.NONEwithECDSA
-Signature.OID.1.2.840.113549.1.1.10
-Signature.RAWRSASSA-PSS
-Signature.RIPEMD128WITHRSA
-Signature.RIPEMD128WITHRSA/X9.31
-Signature.RIPEMD160WITHECDSA
-Signature.RIPEMD160WITHPLAIN-ECDSA
-Signature.RIPEMD160WITHRSA
-Signature.RIPEMD160WITHRSA/X9.31
-Signature.RIPEMD160withRSA/ISO9796-2
-Signature.RIPEMD256WITHRSA
-Signature.RMD128WITHRSA
-Signature.RMD128WITHRSA/X9.31
-Signature.RMD160WITHRSA
-Signature.RMD160WITHRSA/X9.31
-Signature.RMD256WITHRSA
-Signature.RSA
-Signature.RSASSA-PSS
-Signature.SHA1WITHCVC-ECDSA
-Signature.SHA1WITHDDSA
-Signature.SHA1WITHDETDSA
-Signature.SHA1WITHECDDSA
-Signature.SHA1WITHECNR
-Signature.SHA1WITHPLAIN-ECDSA
-Signature.SHA1WITHRSA
-Signature.SHA1WITHRSA/ISO9796-2
-Signature.SHA1WITHRSA/X9.31
-Signature.SHA1WITHRSAANDMGF1
-Signature.SHA224WITHCVC-ECDSA
-Signature.SHA224WITHDDSA
-Signature.SHA224WITHDETDSA
-Signature.SHA224WITHDSA
-Signature.SHA224WITHECDDSA
-Signature.SHA224WITHECDSA
-Signature.SHA224WITHECNR
-Signature.SHA224WITHPLAIN-ECDSA
-Signature.SHA224WITHRSA
-Signature.SHA224WITHRSA/ISO9796-2
-Signature.SHA224WITHRSA/X9.31
-Signature.SHA224WITHRSAANDMGF1
-Signature.SHA256WITHCVC-ECDSA
-Signature.SHA256WITHDDSA
-Signature.SHA256WITHDETDSA
-Signature.SHA256WITHDSA
-Signature.SHA256WITHECDDSA
-Signature.SHA256WITHECDSA
-Signature.SHA256WITHECNR
-Signature.SHA256WITHPLAIN-ECDSA
-Signature.SHA256WITHRSA
-Signature.SHA256WITHRSA/ISO9796-2
-Signature.SHA256WITHRSA/X9.31
-Signature.SHA256WITHRSAANDMGF1
-Signature.SHA3-224WITHDDSA
-Signature.SHA3-224WITHDSA
-Signature.SHA3-224WITHECDDSA
-Signature.SHA3-224WITHECDSA
-Signature.SHA3-224WITHRSA
-Signature.SHA3-224WITHRSAANDMGF1
-Signature.SHA3-256WITHDDSA
-Signature.SHA3-256WITHDSA
-Signature.SHA3-256WITHECDDSA
-Signature.SHA3-256WITHECDSA
-Signature.SHA3-256WITHRSA
-Signature.SHA3-256WITHRSAANDMGF1
-Signature.SHA3-384WITHDDSA
-Signature.SHA3-384WITHDSA
-Signature.SHA3-384WITHECDDSA
-Signature.SHA3-384WITHECDSA
-Signature.SHA3-384WITHRSA
-Signature.SHA3-384WITHRSAANDMGF1
-Signature.SHA3-512WITHDDSA
-Signature.SHA3-512WITHDSA
-Signature.SHA3-512WITHECDDSA
-Signature.SHA3-512WITHECDSA
-Signature.SHA3-512WITHRSA
-Signature.SHA3-512WITHRSAANDMGF1
-Signature.SHA384WITHCVC-ECDSA
-Signature.SHA384WITHDDSA
-Signature.SHA384WITHDETDSA
-Signature.SHA384WITHDSA
-Signature.SHA384WITHECDDSA
-Signature.SHA384WITHECDSA
-Signature.SHA384WITHECNR
-Signature.SHA384WITHPLAIN-ECDSA
-Signature.SHA384WITHRSA
-Signature.SHA384WITHRSA/ISO9796-2
-Signature.SHA384WITHRSA/X9.31
-Signature.SHA384WITHRSAANDMGF1
-Signature.SHA512(224)WITHRSA
-Signature.SHA512(224)WITHRSA/ISO9796-2
-Signature.SHA512(224)WITHRSA/X9.31
-Signature.SHA512(224)WITHRSAANDMGF1
-Signature.SHA512(256)WITHRSA
-Signature.SHA512(256)WITHRSA/ISO9796-2
-Signature.SHA512(256)WITHRSA/X9.31
-Signature.SHA512(256)WITHRSAANDMGF1
-Signature.SHA512WITHCVC-ECDSA
-Signature.SHA512WITHDDSA
-Signature.SHA512WITHDETDSA
-Signature.SHA512WITHDSA
-Signature.SHA512WITHECDDSA
-Signature.SHA512WITHECDSA
-Signature.SHA512WITHECNR
-Signature.SHA512WITHPLAIN-ECDSA
-Signature.SHA512WITHRSA
-Signature.SHA512WITHRSA/ISO9796-2
-Signature.SHA512WITHRSA/X9.31
-Signature.SHA512WITHRSAANDMGF1
-Signature.WHIRLPOOLWITHRSA/ISO9796-2
-Signature.WHIRLPOOLWITHRSA/X9.31
-Signature.WhirlpoolWITHRSA/ISO9796-2
-Signature.WhirlpoolWITHRSA/X9.31
-X509Store.ATTRIBUTECERTIFICATE/COLLECTION
-X509Store.ATTRIBUTECERTIFICATE/LDAP
-X509Store.CERTIFICATE/COLLECTION
-X509Store.CERTIFICATE/LDAP
-X509Store.CERTIFICATEPAIR/COLLECTION
-X509Store.CERTIFICATEPAIR/LDAP
-X509Store.CRL/COLLECTION
-X509Store.CRL/LDAP
-X509StreamParser.ATTRIBUTECERTIFICATE
-X509StreamParser.CERTIFICATE
-X509StreamParser.CERTIFICATEPAIR
-X509StreamParser.CRL
-...........No implementation for:DHIESWithAES
-....No implementation for:DHIESWITHDESEDE
-.....testDefaultSize: keysize=1024
-E....testTiming: SHA1WITHDSA
-count:50000 cutoff:3619925 relative average:0.9990161004761705 sigmas:0.38106264701332354
-count:25001 cutoff:591148 relative average:0.9971878086239828 sigmas:0.7701657291855557
-count:12501 cutoff:580089 relative average:0.989845779126754 sigmas:1.9664350694733328
-count:6250 cutoff:574745 relative average:0.984847644790071 sigmas:2.0748216869522587
-count:3125 cutoff:569066 relative average:0.9910302758870448 sigmas:0.8684898027387655
-count:1563 cutoff:562285 relative average:1.0008387059502275 sigmas:0.05743145783514308
-count:782 cutoff:558289 relative average:0.9848211491627259 sigmas:0.7351955963473576
-count:391 cutoff:554086 relative average:0.9856759995617312 sigmas:0.4905839454931527
-count:196 cutoff:545831 relative average:0.9926427026864222 sigmas:0.1784049785490945
-count:98 cutoff:535117 relative average:0.961194044213916 sigmas:0.6653835345983719
-count:49 cutoff:529203 relative average:0.8923441229449356 sigmas:1.3052581415493207
-count:25 cutoff:526774 relative average:0.8516619649178694 sigmas:1.2846450672859242
-count:13 cutoff:524741 relative average:0.805362004629133 sigmas:1.215513891503341
-...java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
-java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-..Encoded ECPrivateKey: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
-...testWrongOrder:org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testWrongOrder:org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:order = 1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:cofactor = 2 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:cofactor = None throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: null
-testModifiedPublic:modified prime throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:using secp224r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:order = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:cofactor = -1 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-testModifiedPublic:cofactor = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:order = 1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:generator not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
-testModifiedPublic:cofactor = 2 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:cofactor = None throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: null
-testModifiedPublic:modified prime throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:using secp224r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:order = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
-testModifiedPublic:cofactor = -1 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-testModifiedPublic:cofactor = 0 throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-.testWrongOrder:org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testWrongOrder:org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:order = 1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:generator not on curve throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:cofactor = 2 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-modified prime throws java.lang.IllegalArgumentException: first coefficient is too large
-testModifiedPublic:using secp224r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDH public key has wrong domain parameters
-order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.lang.IllegalArgumentException: n is not positive
-order = 0 throws java.lang.IllegalArgumentException: n is not positive
-cofactor = -1 throws java.lang.IllegalArgumentException: h is not positive
-cofactor = 0 throws java.lang.IllegalArgumentException: h is not positive
-testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:public point = (0,0) throws java.security.spec.InvalidKeySpecException: invalid KeySpec: point not on curve
-testModifiedPublic:order = 1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:order = 26959946660873538060741835960514744168612397095220107664918121663170 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:generator = (0,0) throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:generator not on curve throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:cofactor = 2 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-modified prime throws java.lang.IllegalArgumentException: first coefficient is too large
-testModifiedPublic:using secp224r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:a = 0 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-testModifiedPublic:new curve with generator of order 3 that is also on secp256r1 throws org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
-order = -115792089210356248762697446949407573529996955224135760342422259061068512044369 throws java.lang.IllegalArgumentException: n is not positive
-order = 0 throws java.lang.IllegalArgumentException: n is not positive
-cofactor = -1 throws java.lang.IllegalArgumentException: h is not positive
-cofactor = 0 throws java.lang.IllegalArgumentException: h is not positive
-...E..Message:Hello
-Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
-Curve:secp256r1
-Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
-Private key:
-S:19984598131199368178406696673594128668058411924224600958479052831238968912841
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d0301070479307702010104202c2ee1b7129698f221a9d6383b7c86282037a1ce41a707aafd7c3ac206a52bc9a00a06082a8648ce3d030107a14403420004f29d9d21b67a0c01c7223098a30afdf86333eb261e1140e4ea33183152b92dd74e81eb305fcc1e0453b5345151f6d5d2256668e58ab742172d22714d62431ff1
-Public key:
-X:109738188829392402727666843098053105492345752699025872625887117645235954986455
-Y:35509948675408762353594846148217205469547916479975520895656258568570733273073
-encoded:3059301306072a8648ce3d020106082a8648ce3d03010703420004f29d9d21b67a0c01c7223098a30afdf86333eb261e1140e4ea33183152b92dd74e81eb305fcc1e0453b5345151f6d5d2256668e58ab742172d22714d62431ff1
-Signature:304602210080bca83560dd2dbfc90284972429949ade395532edd4f7ceb851a038b570226d022100874c5f1c909fc959b8407dbd8990f8e755abfdff753e33e5e83bd4f34a7e151f
-r:58229372799300835782488007090391736416871065206659807577771841725438188593773
-s:61197171371676273787377360018885101519741300913409804205169440660431788971295
-.SC curve:secp256r1 countLsb:499 countMsb:513
-SC curve:secp224r1 countLsb:492 countMsb:509
-SC curve:secp384r1 countLsb:528 countMsb:506
-SC curve:secp521r1 countLsb:483 countMsb:509
-SC curve:brainpoolP256r1 countLsb:485 countMsb:531
-..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:548350 relative average:1.0052681455257764 sigmas:2.0403439886729036
-count:25006 cutoff:166450 relative average:0.9916836670038013 sigmas:2.2777948750657457
-count:12500 cutoff:164600 relative average:0.974156929989073 sigmas:5.004488988359628
-count:6250 cutoff:163179 relative average:0.9732447826438478 sigmas:3.6636090192295643
-count:3125 cutoff:161782 relative average:0.9739074951633492 sigmas:2.5263959173296273
-count:1563 cutoff:160399 relative average:0.951647342046154 sigmas:3.3110098190437958
-count:782 cutoff:159134 relative average:0.9520001258633369 sigmas:2.3248990630992723
-count:391 cutoff:157857 relative average:0.915182041699332 sigmas:2.904937682118962
-count:196 cutoff:156265 relative average:0.8984002921487699 sigmas:2.4636619844547907
-count:98 cutoff:154225 relative average:0.9122375044139935 sigmas:1.504813329172838
-count:49 cutoff:152018 relative average:0.9865782021958985 sigmas:0.16273065007934026
-count:25 cutoff:150681 relative average:1.0660600232136261 sigmas:0.5720965827758997
-count:13 cutoff:149704 relative average:0.9767353575566868 sigmas:0.14528764549194548
-...E.04194126f4a30e65ddee19790f402006a68e85e047c87ca1d20c5f7f9dfe118dc096058e1b45c15b135b693b99d90975e8406fa984ede2df157b5acd55adfa2f741f62eae9b09e79a3549b53d398a8e4b9fdcb2778b8b11f9891320992835ae992ff80f3df009dfd9e964e3c0cd2c97f53061c1989764e6814e2d96dee
-ECIES:org.spongycastle.jcajce.provider.util.BadBlockException: unable to process block
-.testEciesBasic:04c60037826dae114b1c168f874c104bd0580112a244c77ff2d630c14e87719c83d7f235e78215ae643e9d923ce1d97e026401dc5bb3c03cbbe3b4c8ec14dd91bdf2e57d18f8d8a469b16885c67d3fe9946218871171dfefb67a38983bf399bf6239d8a9b9
-..E.No implementation for:ECIESwithDESede
-...No implementation for:ECIESWithAES
-.043908babf4717279a86741859cb9dacc74c6fde43fd26c8358cfe80a0c6d85b70fb87ff22d7c4c6b39eb9e1ef25e2f30286be8591fa9302dfdb805c0866ac445840c90cf95bd48db30174f6e1a1c1bb154fbffa1c0f5ebc0c1b03b147cb42e18930ed06463e1c17f95f5ee387c25f6759839b0ff79c0a89b113bec9e2911df2535d273794
-E..E.....testDefaultSize: keysize=2048
-....Message:Hello
-Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
-Public key:
-Modulus:22480472206430785719961526520271388224698823506394622532765356503120382200095705544009680001705977390130737150500535704545482046109455791257983211500808730650459396569251881112081692902427814947160309596531893086336851164889100610870030284195935550622072670975635399514776737404784769013559190345691549598361765427459547101866777017754067929181551872010420336077575724992504044372363072540412691496837712647742553578683859710675015303731081623558721492464847171339344829900874205319698640655057835887057341296787652830493571906948669148057076162159341398053273424591930858940639825410406935897867898230871208345143379
-E:65537
-encoded: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
-Private key:
-D:3315969983666728802887957594510940536920571995000027709908032124077463642344403703159155539260138294862350062314245062420330117944674140319070505295914033281932206030714831846292838019557954851369435782377493789242997699177303440885005153689093320839580336456070119277802565275982336116301885851836370446730248303294665192976922934097792639988440557260170958206775495313844648698477149240729637999240803957847387088529447866244717559996894361606569086057724938846782173722891017232284951314486140710885771098888803064662955666078068101446519970773694821180434171082364820026865671830808480198772286038742265562528217
-encoded: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
-Signature:50ad539cbf5045b11eb5f08f804d9f550c29983571a806d45518425e19319c091b62c1f0f6cfbabe4a4edfe7740fbf2ac5e561db8e0421d223b0b5c66282259ed9ea0a78d84b613f6564429937ff16ca7d0dba814f7a941defba72cf9629270706f00af04e58ec165f89fa522c8ddb25fa281ac0f019d7162b990f54343d7ea926ef6e21ef92a3648b307886bc4ece2e07e9a295dc325c127fb9eca5e56d251a4ec8f21be6b63641902dc0e101c38ce778c4054af037d3f2de5ad58363ac8cec4d64a7351ccc7ece983ce147694b64c8c45dedb22dd6db930405e5d62b0af4c543d015a58bac052892fec702cfae692c4bd6a2ab87c60720cb366166d1a092f1
-..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
-
-Time: 62.413
-There were 9 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
-java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
-	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
-	at org.junit.internal.ComparisonCriteria.arrayEquals(ComparisonCriteria.java:50)
-	at org.junit.Assert.internalArrayEquals(Assert.java:473)
-	at org.junit.Assert.assertArrayEquals(Assert.java:294)
-	at org.junit.Assert.assertArrayEquals(Assert.java:305)
-	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
-	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
-java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
-	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim=8192 cap=8192]> but was:<java.nio.HeapByteBuffer[pos=0 lim=8192 cap=8208]>
-	at org.junit.Assert.fail(Assert.java:88)
-	at org.junit.Assert.failNotEquals(Assert.java:743)
-	at org.junit.Assert.assertEquals(Assert.java:118)
-	at org.junit.Assert.assertEquals(Assert.java:144)
-	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
-	... 32 more
-3) testIvReuse(com.google.security.wycheproof.AesGcmTest)
-java.lang.AssertionError: It should not possible to reuse an IV. ct1:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554 ct2:26073cc1d851beff176384dc9896d5ff0a3ea7a5487cb5f7d70fb6c58d038554
-	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.AesGcmTest.testIvReuse(AesGcmTest.java:327)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testDefaultKeySize(com.google.security.wycheproof.DsaTest)
-java.lang.AssertionError: DSA default key size too small:1024
-	at org.junit.Assert.fail(Assert.java:88)
-	at com.google.security.wycheproof.DsaTest.testDefaultKeySize(DsaTest.java:942)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testEncode(com.google.security.wycheproof.EcdhTest)
-org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
-	at org.junit.Assert.assertEquals(Assert.java:115)
-	at org.junit.Assert.assertEquals(Assert.java:144)
-	at com.google.security.wycheproof.EcdhTest.testEncode(EcdhTest.java:1894)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testAlias(com.google.security.wycheproof.EciesTest)
-java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs to be 16 bytes long
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:292)
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:254)
-	at javax.crypto.Cipher.init(Cipher.java:1537)
-	at javax.crypto.Cipher.init(Cipher.java:1470)
-	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:345)
-	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:353)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:357)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
-	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:393)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-8) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:357)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
-	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:202)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-9) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-javax.crypto.ShortBufferException: Need at least 102 bytes of space in output buffer
-	at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:759)
-	at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
-	at javax.crypto.Cipher.doFinal(Cipher.java:2460)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:427)
-	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
-	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
-	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
-	at java.lang.reflect.Method.invoke(Method.java:498)
-	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
-	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
-	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
-	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
-	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
-	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at org.junit.runners.Suite.runChild(Suite.java:127)
-	at org.junit.runners.Suite.runChild(Suite.java:26)
-	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
-	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
-	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
-	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
-	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
-	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
-	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
-	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
-	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
-	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
-	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
-	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-
-FAILURES!!!
-Tests run: 90,  Failures: 9
-
-
-BazelTestRunner exiting with a return value of 1
-JVM shutdown hooks (if any) will run now.
-The JVM will exit once they complete.
-
--- JVM shutdown starting at 2018-04-06 21:39:10 --
-
+.E.E.Terminated
diff --git a/testlogs/SpongyCastleAllTests_1_58.txt b/testlogs/SpongyCastleAllTests_1_58.txt
index 07e3bda..a7cebd8 100755
--- a/testlogs/SpongyCastleAllTests_1_58.txt
+++ b/testlogs/SpongyCastleAllTests_1_58.txt
@@ -1,7 +1,7 @@
 exec ${PAGER:-/usr/bin/less} "$0" || exit 1
 -----------------------------------------------------------------------------
 JUnit4 Test Runner
-....E.....E...........
+.E.E..E.....E...........
 Provider:SC
 AlgorithmParameterGenerator.1.2.804.2.1.1.1.1.1.3.5.1
 AlgorithmParameterGenerator.1.2.804.2.1.1.1.1.1.3.5.2
@@ -1139,29 +1139,29 @@ X509StreamParser.ATTRIBUTECERTIFICATE
 X509StreamParser.CERTIFICATE
 X509StreamParser.CERTIFICATEPAIR
 X509StreamParser.CRL
-...........No implementation for:DHIESWithAES
-....No implementation for:DHIESWITHDESEDE
+..E.E..E.E.E....No implementation for:DHIESWithAES
+...E.No implementation for:DHIESWITHDESEDE
 .....testDefaultSize: keysize=2048
 ....testTiming: SHA1WITHDSA
-count:50000 cutoff:3777228 relative average:1.0019361849873758 sigmas:0.7498812211282995
-count:25000 cutoff:612169 relative average:1.0022569428083659 sigmas:0.6180892435704898
-count:12501 cutoff:599420 relative average:1.0062889830812844 sigmas:1.217905050198977
-count:6252 cutoff:593242 relative average:1.0031428640686781 sigmas:0.43042323759104706
-count:3126 cutoff:585105 relative average:0.9967062955654203 sigmas:0.3189625823296858
-count:1563 cutoff:579895 relative average:0.9939515514376779 sigmas:0.41417521657125056
-count:782 cutoff:577033 relative average:1.0027198252906222 sigmas:0.13173616355655215
-count:391 cutoff:574682 relative average:1.000205691439512 sigmas:0.007044744126117391
-count:196 cutoff:573049 relative average:1.0160293670798461 sigmas:0.3886914947365161
-count:98 cutoff:570996 relative average:1.020294541500338 sigmas:0.34797889867695575
-count:49 cutoff:568849 relative average:0.965543785557313 sigmas:0.4177593983585571
-count:25 cutoff:565500 relative average:1.0152379164658487 sigmas:0.13196422760170243
-count:13 cutoff:555323 relative average:1.1198422818288485 sigmas:0.7484148101446552
+count:50000 cutoff:1375088 relative average:0.9997802911361559 sigmas:0.08509287706827098
+count:25000 cutoff:581029 relative average:0.996578885241564 sigmas:0.9369108625046186
+count:12500 cutoff:570135 relative average:0.9903062469347628 sigmas:1.8771872091955555
+count:6251 cutoff:565982 relative average:0.9904141590901525 sigmas:1.3127003281708387
+count:3125 cutoff:563143 relative average:0.9910468226595356 sigmas:0.8668876683815092
+count:1563 cutoff:560981 relative average:0.9913896520980862 sigmas:0.5896045358216376
+count:782 cutoff:559138 relative average:1.0006436801338685 sigmas:0.031176984670955137
+count:391 cutoff:557501 relative average:0.997091861610485 sigmas:0.0996010863946054
+count:197 cutoff:556127 relative average:1.0006547791488407 sigmas:0.015918002973051758
+count:98 cutoff:554873 relative average:1.01673141894318 sigmas:0.2868840735846927
+count:50 cutoff:553900 relative average:1.0208259247663867 sigmas:0.2550644454961913
+count:25 cutoff:552257 relative average:1.156229228507242 sigmas:1.352984807009155
+count:13 cutoff:551315 relative average:1.2092807689708973 sigmas:1.3069579833265308
 ...java.security.spec.InvalidKeySpecException: encoded key spec not recognized: n is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Zero length BigInteger
 java.security.spec.InvalidKeySpecException: encoded key spec not recognized: h is not positive
-..Encoded ECPrivateKey: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
+..Encoded ECPrivateKey:3082024b0201003081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101048201553082015102010104200b4389c193f441b4ef31d17e93f38c6e5eaa0b6f16a42dc4e251f09e55551c72a081e33081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101a144034200042d6c88dd241fd5d9f1582eca17af30cea91a933cad1a276363d1c0df06184522d2cc873c4051d942ffb5e3f464b150c2c9446a03c0e9e221a0917525d6fa308b
 ...testWrongOrder:org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 testWrongOrder:org.spongycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi$1: calculation failed: ECDHC public key has wrong domain parameters
 ..testModifiedPublic:public point not on curve throws java.security.spec.InvalidKeySpecException: encoded key spec not recognized: Invalid point coordinates
@@ -1233,56 +1233,132 @@ Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Curve:secp256r1
 Order:115792089210356248762697446949407573529996955224135760342422259061068512044369
 Private key:
-S:93520343643127806705550188379751142945546823359688800412166418915261847032360
-encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420cec2a3828e0e8c8e957beceffb697a3599adcd3257ff8380b5312db341b9d228a00a06082a8648ce3d030107a1440342000427e5a970cce0937ce312d285b4e22015b1964417acff89e1741c84a3d2613aab713faea073b804b8a1ffcdeed701e4c8acbe7c4a798e98c2c9b7fb18e592fdd9
+S:74703253763543855797098260830765997382280286991425430698510833296345645761089
+encoded:308193020100301306072a8648ce3d020106082a8648ce3d030107047930770201010420a5288b135c6a94c6a7d1345aa25e7ae7ff0cbabd3af8b45483222dc05250c241a00a06082a8648ce3d030107a1440342000407e0b1892f12b40479ce9e453dfa7e31b186c396e9c005a52b1f30f52155e19764baa33dd80e02af191d3eb8851cfafe6def6f02c7471d3add4b387f84b9d62c
 Public key:
-X:18045978508804366243602552363437500906416067605478069064978367968994564061867
-Y:51223868484632562739382716643214337157288417089984540281475468701991374618073
-encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000427e5a970cce0937ce312d285b4e22015b1964417acff89e1741c84a3d2613aab713faea073b804b8a1ffcdeed701e4c8acbe7c4a798e98c2c9b7fb18e592fdd9
-Signature:3046022100fc0c1d1a29c170369be8ddddb8420cb07266d6ecaa7029c2cc4908675e878490022100b256da6090347af47f61b300035fbca18b3ea90eb56319ac07dda7604dc9911e
-r:114004240863760520627448094907789093453348765600787530204855332973186650702992
-s:80665143079437397712857967423066836386020720153230883422822819259981566152990
-.SC curve:secp256r1 countLsb:494 countMsb:545
-SC curve:secp224r1 countLsb:478 countMsb:485
-SC curve:secp384r1 countLsb:522 countMsb:521
-SC curve:secp521r1 countLsb:522 countMsb:500
-SC curve:brainpoolP256r1 countLsb:526 countMsb:517
+X:3563188990166669893741163807675262455480874928013726201841895489128025678231
+Y:45561045064339910460064956783742295449383648946197443732523230808636252608044
+encoded:3059301306072a8648ce3d020106082a8648ce3d0301070342000407e0b1892f12b40479ce9e453dfa7e31b186c396e9c005a52b1f30f52155e19764baa33dd80e02af191d3eb8851cfafe6def6f02c7471d3add4b387f84b9d62c
+Signature:3045022100fbea1e96010586b5a740fa1b8a79be3702604f75538356584271816b024df3720220644f9a7399499c2f5b8c3e12eebfb334dd2220c51056b61a94336447feaf9334
+r:113944178304047994846656053213288706723066545800097656544493467893900883391346
+s:45371931761918465731580131469502039856867473505698188764885097133455124173620
+.SC curve:secp256r1 countLsb:509 countMsb:523
+SC curve:secp224r1 countLsb:505 countMsb:513
+SC curve:secp384r1 countLsb:537 countMsb:516
+SC curve:secp521r1 countLsb:505 countMsb:491
+SC curve:brainpoolP256r1 countLsb:514 countMsb:535
 ..testTiming algorithm:SHA256WithECDSA
-count:50000 cutoff:568284 relative average:0.9998016462814129 sigmas:0.07682206487462138
-count:25000 cutoff:179553 relative average:0.9966474397265067 sigmas:0.9181364435939763
-count:12505 cutoff:177202 relative average:0.9950521812478766 sigmas:0.9583325903886155
-count:6250 cutoff:174131 relative average:0.9902836878276984 sigmas:1.330460838132899
-count:3125 cutoff:173267 relative average:0.9877401573519382 sigmas:1.1870541600766664
-count:1563 cutoff:172716 relative average:0.990637698843467 sigmas:0.6410954923660063
-count:783 cutoff:172269 relative average:0.9810845747157654 sigmas:0.9167641429737796
-count:391 cutoff:171841 relative average:1.0141775019934796 sigmas:0.48556650742736923
-count:197 cutoff:171405 relative average:1.0803882213995708 sigmas:1.9542771780414807
-count:98 cutoff:170680 relative average:1.019237427839783 sigmas:0.3298531751975616
-count:49 cutoff:168856 relative average:1.005208806743443 sigmas:0.06315342548515465
-count:25 cutoff:165501 relative average:1.031273410979623 sigmas:0.27083568371344713
-count:13 cutoff:164629 relative average:1.0687675230077898 sigmas:0.4294530435384628
-...E.0404edd82abaf8601e3d3caccbf6d5adc4f9a7112e5716c13b3354aa4784d221147dd018c44658f1928b0348476a493868f7c0a5962c344ce35307f4aca8de319cb17ac266ce7b8fe2d7686c3b61de0f4539d941abeba5bb736befd2491ecf436d9293ee30d3ad44dc04324a61b11e38159fc7d4fef7f28910fef35c5b
-ECIES:org.spongycastle.jcajce.provider.util.BadBlockException: unable to process block
-.testEciesBasic:04a30ad06daf1e14f6539b0c1644be702aec04dbd00c5234f0643b605c95eff54b47c3218405777f82b72b5ad787cc06265c4c9005168589709aeb3d1ebcfd704a1361fffa1c1b078e800582c9f7216077b18208318c6549b76afd4edacd2616f9fd6e18a6
-..E.No implementation for:ECIESwithDESede
-...No implementation for:ECIESWithAES
-.04026f3413e9daaacb1150dbc4f65b6b03231e32ee73064d7dab049ad6c32626c0e2aaec33632ee7010896df916e0557b60d37f932a825d628f7ae42e08defa272b98fce47e93772771266a0bd3fb64c16a973f5a5adcbc9eadc9d1c42e1fd1abb33a55399d868dc0031a6069274df1683c3ecaa154503545f8ea9bf58061bffdee56f0a15
-E..E.....testDefaultSize: keysize=2048
+count:50000 cutoff:1017535 relative average:0.9963436907980896 sigmas:1.4160824647583847
+count:25010 cutoff:161640 relative average:0.9907450107900385 sigmas:2.535090045835862
+count:12503 cutoff:160300 relative average:0.9815675110819848 sigmas:3.569864437070069
+count:6251 cutoff:159629 relative average:0.9785950777960156 sigmas:2.9312241529876046
+count:3130 cutoff:159150 relative average:0.9683760103634618 sigmas:3.0644282347273775
+count:1564 cutoff:158784 relative average:0.9563566452403772 sigmas:2.9894901588150025
+count:786 cutoff:158450 relative average:0.9465009968404586 sigmas:2.597871050209066
+count:391 cutoff:158153 relative average:0.9665974353698704 sigmas:1.1440073613834367
+count:196 cutoff:157890 relative average:0.9844594939443001 sigmas:0.376837244893256
+count:98 cutoff:157667 relative average:0.9613815648908717 sigmas:0.6621682247750327
+count:49 cutoff:157411 relative average:0.9309666652525873 sigmas:0.836984702389002
+count:25 cutoff:157230 relative average:0.8197798294829838 sigmas:1.5607524594209938
+count:13 cutoff:157124 relative average:0.7483394441328539 sigmas:1.5716196676661558
+..E.E.E.E..E.No implementation for:ECIESwithDESede
+..E.No implementation for:ECIESWithAES
+.E..E.....testDefaultSize: keysize=2048
 ....Message:Hello
 Hash:185f8db32271fe25f561a6fc938b2e264306ec304eda518007d1764826381969
 Public key:
-Modulus:24107388137327943078574192112142912659201346354570258953875481012958230026166564037578553630029075630520371232876547907843294756675464825619327198242747742677817358818231320570027512792954220311023100515345388446060388204802047688348976558741170502213815113004440892056129243672661538596753418802010461087259728295716804789741588123027547332769388723793088793472399367161459747319292487021060111764579427899805522794811365227775784057366264533715175169168947403383867122234806307809329893795527226954520918504620473144924663924685218825561848309091353883940197217966602803880433246838016341937766213106512785996864603
+Modulus:20225341611847596641763077701397168541661530502081216360077217453250835262967986696754440423677289813219682816249659564048510557279501628758961304296050395338430551724607810873628427560104971381207529663266543282774373802520246953244772683603614699205321331459235792744988575007035344393582661835590309976055843656514875397313075249781812579009164038169473343280403201735042615877635565487919594742739945492341479684526765850541560762240399663210170741028396195872576848467651873941200670877981670207882517990308195191322289630035416039499177450918451950129470701330015730307462093075466632321901844363131628673265931
 E:65537
-encoded:30820122300d06092a864886f70d01010105000382010f003082010a0282010100bef7a0e945c166be8993b111ff0810f7a74f6754de9a24731585898d3b775f53440f665780001d06f6ce899fece865ee031a0f8b82e2d7de7d1b00f6f31a1771d82073606c7074f2e79dab10b8b74a248193538df991dfb2d2af267859ea0a7dd1b7965029a35e2aacf7ebd81b63567afc75c7d736552c1b9de2de83559de51103249b6cbd5734b4425ada16e7c296cb864011128a1644906a35f54beb41a46274faf7e6a37bd88e065e68a46dedab8b82321ccafceb32e67b4b52b862953140d6dffec3e669a04f381ccc433cecdf753ad69b26f578140fdc09cad8f63f7ab6d17019d48ba563564ba7086fc16cf5563a37fd1d92e14b803a05ee7e3f555c5b0203010001
+encoded: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
 Private key:
-D:4683389013297211823495225810943490913178075618145300166329594339945133049928325881966677522888295023082920587408398430850677157056197539707116192197181199319071221027415371065163042142299664815294354574688763380918273076636704017090485825501511860997395273185720149498125296099002497969297717750083116263530324565437703298962045306803967771271390686097395260907646298967854151912367472304161353085886693954731931662127483675782999873898255150956047483233960172292953298937067470535185334645753779885168220358599047876643520807956973147706168484669294717503208625151510176845936715637005100963091972593341766684334753
-encoded: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
-Signature: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
+D:1522123836885342877405188700105758803136899777871507321530934463324896923631089369146165540956423528949480745018944579425363745221996092792849061523246101589761618127410632845429454055143655337387914884800391302307090139444746662538625018387624523847910125135774337808822995401829496705952796202229252588063250211404932172890294523779771652446994109285609986374657953254056211011571984950903758102945900689722228457253536652414304798032342394620291300511881831986126700381118187129226605339608918315632407271127938758885136680485584754536557210205217941308930210182244584680687657541000120695810122502811673266282793
+encoded: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
+Signature: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
 ..Verfied legacy signature:253e1d19bbe91064f2364c1e7db3ba8eb6dc5b19202e440eab6fbdf28c8c6ec05b812983713c338c72b6e99b8edf506a89ff9fc8e5c2c52362097a56dc228060eca01e1ff318c6c81617691438703411c1f953b21cd74331f87c9b8b189fdffdfe8550bd2bd1d47be915f8604a0f472199dd705e19b1b815f99b68d60bc257c7
 
-Time: 125.645
-There were 7 failures:
-1) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
+Time: 2,377.41
+There were 19 failures:
+1) testEax(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testEax(AesEaxTest.java:264)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+2) testLateUpdateAAD(com.google.security.wycheproof.AesEaxTest)
+java.security.InvalidKeyException: Illegal key size
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
+	at javax.crypto.Cipher.implInit(Cipher.java:805)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1396)
+	at javax.crypto.Cipher.init(Cipher.java:1327)
+	at com.google.security.wycheproof.AesEaxTest.testLateUpdateAAD(AesEaxTest.java:275)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+3) testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: testLargeByteBufferAlias failed with outputOffset=1
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:470)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1324,7 +1400,7 @@ Caused by: arrays first differed at element [16]; expected:<0> but was:<120>
 	at org.junit.Assert.assertArrayEquals(Assert.java:305)
 	at com.google.security.wycheproof.AesGcmTest.testLargeArrayAlias(AesGcmTest.java:465)
 	... 32 more
-2) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
+4) testByteBufferShiftedAlias(com.google.security.wycheproof.AesGcmTest)
 java.lang.AssertionError: Overlapping buffers test failed with buffer type: array backed buffers and output offset 1
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:583)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
@@ -1366,7 +1442,233 @@ Caused by: java.lang.AssertionError: expected:<java.nio.HeapByteBuffer[pos=0 lim
 	at org.junit.Assert.assertEquals(Assert.java:144)
 	at com.google.security.wycheproof.AesGcmTest.testByteBufferShiftedAlias(AesGcmTest.java:581)
 	... 32 more
-3) testEncode(com.google.security.wycheproof.EcdhTest)
+5) testCorruptAesGcm(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:67d40c1f045dae988bc33be501df4ea9 pt: 67d40c1f045dae988bc33be501df4ea9
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptAesGcm(CipherInputStreamTest.java:252)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+6) testAesEax(com.google.security.wycheproof.CipherInputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:ccb8fb5a59290f973911c76432d54d38 pt: ccb8fb5a59290f973911c76432d54d38
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherInputStreamTest.testCorruptDecrypt(CipherInputStreamTest.java:190)
+	at com.google.security.wycheproof.CipherInputStreamTest.testAesEax(CipherInputStreamTest.java:291)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+7) testEmptyPlaintext(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted: pt: 
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecryptEmpty(CipherOutputStreamTest.java:186)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testEmptyPlaintext(CipherOutputStreamTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+8) testAesEax(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:a6fe4b74b77a7b0a8957478f3604b529 pt: a6fe4b74b77a7b0a8957478f3604b529
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesEax(CipherOutputStreamTest.java:250)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+9) testAesGcm(com.google.security.wycheproof.CipherOutputStreamTest)
+java.lang.AssertionError: this should fail; decrypted:479982f5237fcdb602381b22e75fae9c pt: 479982f5237fcdb602381b22e75fae9c
+	at org.junit.Assert.fail(Assert.java:88)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testCorruptDecrypt(CipherOutputStreamTest.java:159)
+	at com.google.security.wycheproof.CipherOutputStreamTest.testAesGcm(CipherOutputStreamTest.java:208)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+10) testSemanticSecurityDhies(com.google.security.wycheproof.DhiesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.DhiesTest.testNotEcb(DhiesTest.java:165)
+	at com.google.security.wycheproof.DhiesTest.testSemanticSecurityDhies(DhiesTest.java:178)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+11) testEncode(com.google.security.wycheproof.EcdhTest)
 org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e0020101302c06072a8648ce3d0101022100ffffffff00000001000000000000000000000000ffffffffffffffffffffffff30440420ffffffff00000001000000000000000000000000fffffffffffffffffffffffc04205ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b0441046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5022100ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551020101]03420004cdeb39edd03e...> but was:<30[59301306072a8648ce3d020106082a8648ce3d030107]03420004cdeb39edd03e...>
 	at org.junit.Assert.assertEquals(Assert.java:115)
 	at org.junit.Assert.assertEquals(Assert.java:144)
@@ -1403,14 +1705,176 @@ org.junit.ComparisonFailure: expected:<30[8201333081ec06072a8648ce3d02013081e002
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-4) testAlias(com.google.security.wycheproof.EciesTest)
-java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs to be 16 bytes long
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:295)
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:257)
-	at javax.crypto.Cipher.init(Cipher.java:1537)
-	at javax.crypto.Cipher.init(Cipher.java:1470)
-	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:345)
-	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:353)
+12) testModifyPoint(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testModifyPoint(EciesTest.java:227)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+13) testAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testIsAlias(EciesTest.java:322)
+	at com.google.security.wycheproof.EciesTest.testAlias(EciesTest.java:332)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+14) testEciesCorruptDefault(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptDefault(EciesTest.java:209)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+15) testEciesBasic(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testEciesBasic(EciesTest.java:89)
+	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
+	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
+	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
+	at java.lang.reflect.Method.invoke(Method.java:498)
+	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:47)
+	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
+	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
+	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
+	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:271)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:70)
+	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:50)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at org.junit.runners.Suite.runChild(Suite.java:127)
+	at org.junit.runners.Suite.runChild(Suite.java:26)
+	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:238)
+	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:63)
+	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:236)
+	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:53)
+	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:229)
+	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
+	at org.junit.runners.ParentRunner.run(ParentRunner.java:309)
+	at com.google.testing.junit.runner.internal.junit4.CancellableRequestFactory$CancellableRunner.run(CancellableRequestFactory.java:89)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:160)
+	at org.junit.runner.JUnitCore.run(JUnitCore.java:138)
+	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
+	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
+	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
+16) testByteBuffer(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
+	at javax.crypto.Cipher.init(Cipher.java:1186)
+	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:359)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1443,12 +1907,15 @@ java.security.InvalidAlgorithmParameterException: NONCE in IES Parameters needs
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-5) testByteBuffer(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:360)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+17) testDefaultEcies(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBuffer(EciesTest.java:393)
+	at com.google.security.wycheproof.EciesTest.testNotEcb(EciesTest.java:273)
+	at com.google.security.wycheproof.EciesTest.testDefaultEcies(EciesTest.java:282)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1481,13 +1948,15 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-6) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:360)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+18) testEciesCorruptAesCbc(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:202)
-	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:223)
+	at com.google.security.wycheproof.EciesTest.testExceptions(EciesTest.java:183)
+	at com.google.security.wycheproof.EciesTest.testEciesCorruptAesCbc(EciesTest.java:213)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1520,12 +1989,14 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.junit4.JUnit4Runner.run(JUnit4Runner.java:112)
 	at com.google.testing.junit.runner.BazelTestRunner.runTestsInSuite(BazelTestRunner.java:144)
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
-7) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
-java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE in IES Parameters needs to be 16 bytes long
-	at org.spongycastle.jcajce.provider.asymmetric.ec.IESCipher.engineInit(IESCipher.java:360)
-	at javax.crypto.Cipher.init(Cipher.java:1246)
+19) testByteBufferAlias(com.google.security.wycheproof.EciesTest)
+java.security.InvalidKeyException: Illegal key size or default parameters
+	at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
+	at javax.crypto.Cipher.implInit(Cipher.java:801)
+	at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
+	at javax.crypto.Cipher.init(Cipher.java:1249)
 	at javax.crypto.Cipher.init(Cipher.java:1186)
-	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:430)
+	at com.google.security.wycheproof.EciesTest.testByteBufferAlias(EciesTest.java:394)
 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
@@ -1560,12 +2031,12 @@ java.lang.IllegalArgumentException: cannot handle supplied parameter spec: NONCE
 	at com.google.testing.junit.runner.BazelTestRunner.main(BazelTestRunner.java:82)
 
 FAILURES!!!
-Tests run: 90,  Failures: 7
+Tests run: 90,  Failures: 19
 
 
 BazelTestRunner exiting with a return value of 1
 JVM shutdown hooks (if any) will run now.
 The JVM will exit once they complete.
 
--- JVM shutdown starting at 2018-04-06 21:38:30 --
+-- JVM shutdown starting at 2018-04-06 21:46:31 --
 
diff --git a/testlogs/index.html b/testlogs/index.html
index 38541b5..e0bc89f 100644
--- a/testlogs/index.html
+++ b/testlogs/index.html
@@ -1,21 +1,21 @@
 <html><body><ul>
-<li><a href="BouncyCastleAllTests_1_49.txt">BouncyCastleAllTests_1_49.txt (Tests run: 96,  Failures: 38)</a></li>
-<li><a href="BouncyCastleAllTests_1_50.txt">BouncyCastleAllTests_1_50.txt (Tests run: 96,  Failures: 27)</a></li>
-<li><a href="BouncyCastleAllTests_1_51.txt">BouncyCastleAllTests_1_51.txt (Tests run: 96,  Failures: 21)</a></li>
-<li><a href="BouncyCastleAllTests_1_52.txt">BouncyCastleAllTests_1_52.txt (Tests run: 96,  Failures: 22)</a></li>
-<li><a href="BouncyCastleAllTests_1_53.txt">BouncyCastleAllTests_1_53.txt (Tests run: 96,  Failures: 22)</a></li>
-<li><a href="BouncyCastleAllTests_1_54.txt">BouncyCastleAllTests_1_54.txt (Tests run: 96,  Failures: 21)</a></li>
-<li><a href="BouncyCastleAllTests_1_55.txt">BouncyCastleAllTests_1_55.txt (Tests run: 96,  Failures: 22)</a></li>
-<li><a href="BouncyCastleAllTests_1_56.txt">BouncyCastleAllTests_1_56.txt (Tests run: 96,  Failures: 9)</a></li>
-<li><a href="BouncyCastleAllTests_1_57.txt">BouncyCastleAllTests_1_57.txt (Tests run: 96,  Failures: 7)</a></li>
-<li><a href="BouncyCastleAllTests_1_58.txt">BouncyCastleAllTests_1_58.txt (Tests run: 96,  Failures: 7)</a></li>
-<li><a href="BouncyCastleAllTests_1_59.txt">BouncyCastleAllTests_1_59.txt (Tests run: 96,  Failures: 7)</a></li>
-<li><a href="ConscryptAllTests_1_0_1.txt">ConscryptAllTests_1_0_1.txt (Tests run: 63,  Failures: 2)</a></li>
-<li><a href="SpongyCastleAllTests_1_50.txt">SpongyCastleAllTests_1_50.txt (Tests run: 90,  Failures: 27)</a></li>
-<li><a href="SpongyCastleAllTests_1_51.txt">SpongyCastleAllTests_1_51.txt (Tests run: 90,  Failures: 21)</a></li>
-<li><a href="SpongyCastleAllTests_1_52.txt">SpongyCastleAllTests_1_52.txt (Tests run: 90,  Failures: 22)</a></li>
-<li><a href="SpongyCastleAllTests_1_53.txt">SpongyCastleAllTests_1_53.txt (Tests run: 90,  Failures: 22)</a></li>
-<li><a href="SpongyCastleAllTests_1_54.txt">SpongyCastleAllTests_1_54.txt (Tests run: 90,  Failures: 21)</a></li>
-<li><a href="SpongyCastleAllTests_1_56.txt">SpongyCastleAllTests_1_56.txt (Tests run: 90,  Failures: 9)</a></li>
-<li><a href="SpongyCastleAllTests_1_58.txt">SpongyCastleAllTests_1_58.txt (Tests run: 90,  Failures: 7)</a></li>
+<li><a href="BouncyCastleAllTests_1_49.txt">BouncyCastleAllTests_1_49.txt (Tests run: 96,  Failures: 44)</a></li>
+<li><a href="BouncyCastleAllTests_1_50.txt">BouncyCastleAllTests_1_50.txt (Tests run: 96,  Failures: 38)</a></li>
+<li><a href="BouncyCastleAllTests_1_51.txt">BouncyCastleAllTests_1_51.txt (Tests run: 96,  Failures: 36)</a></li>
+<li><a href="BouncyCastleAllTests_1_52.txt">BouncyCastleAllTests_1_52.txt (Tests run: 96,  Failures: 37)</a></li>
+<li><a href="BouncyCastleAllTests_1_53.txt">BouncyCastleAllTests_1_53.txt (Tests run: 96,  Failures: 37)</a></li>
+<li><a href="BouncyCastleAllTests_1_54.txt">BouncyCastleAllTests_1_54.txt (Tests run: 96,  Failures: 38)</a></li>
+<li><a href="BouncyCastleAllTests_1_55.txt">BouncyCastleAllTests_1_55.txt (Tests run: 96,  Failures: 38)</a></li>
+<li><a href="BouncyCastleAllTests_1_56.txt">BouncyCastleAllTests_1_56.txt ()</a></li>
+<li><a href="BouncyCastleAllTests_1_57.txt">BouncyCastleAllTests_1_57.txt (Tests run: 96,  Failures: 19)</a></li>
+<li><a href="BouncyCastleAllTests_1_58.txt">BouncyCastleAllTests_1_58.txt (Tests run: 96,  Failures: 19)</a></li>
+<li><a href="BouncyCastleAllTests_1_59.txt">BouncyCastleAllTests_1_59.txt (Tests run: 96,  Failures: 19)</a></li>
+<li><a href="ConscryptAllTests_1_0_1.txt">ConscryptAllTests_1_0_1.txt (Tests run: 63,  Failures: 3)</a></li>
+<li><a href="SpongyCastleAllTests_1_50.txt">SpongyCastleAllTests_1_50.txt (Tests run: 90,  Failures: 38)</a></li>
+<li><a href="SpongyCastleAllTests_1_51.txt">SpongyCastleAllTests_1_51.txt (Tests run: 90,  Failures: 36)</a></li>
+<li><a href="SpongyCastleAllTests_1_52.txt">SpongyCastleAllTests_1_52.txt (Tests run: 90,  Failures: 37)</a></li>
+<li><a href="SpongyCastleAllTests_1_53.txt">SpongyCastleAllTests_1_53.txt (Tests run: 90,  Failures: 37)</a></li>
+<li><a href="SpongyCastleAllTests_1_54.txt">SpongyCastleAllTests_1_54.txt (Tests run: 90,  Failures: 37)</a></li>
+<li><a href="SpongyCastleAllTests_1_56.txt">SpongyCastleAllTests_1_56.txt ()</a></li>
+<li><a href="SpongyCastleAllTests_1_58.txt">SpongyCastleAllTests_1_58.txt (Tests run: 90,  Failures: 19)</a></li>
 </ul></body></html>