{
  "title": "ゼロIVとゼロ平文に対するAES-CFB8のオフライン計算",
  "kind": "deterministic-offline-cryptographic-calculation",
  "limitations": "認証処理・Windows・Netlogonへの通信を検証したものではない。鍵とIVは説明用の公開固定値であり、実環境の秘密ではない。別IVの結果は対照例であって、固定IVの安全性を主張しない。",
  "runtime": {
    "node": "v22.23.2",
    "openssl": "3.5.7"
  },
  "reference": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf#page=46",
  "nistF37": {
    "key": "2b7e151628aed2a6abf7158809cf4f3c",
    "iv": "000102030405060708090a0b0c0d0e0f",
    "plaintext": "6bc1bee22e409f96e93d7e117393172a",
    "ciphertext": "3b79424c9c0dd436bace9e0ed4586a4f",
    "builtinMatched": true
  },
  "allZeroFixedPoint": {
    "key": "3b902ea5bf4d9855826a3291bc752e76",
    "iv": "00000000000000000000000000000000",
    "plaintext": "0000000000000000",
    "ciphertext": "0000000000000000",
    "trace": [
      {
        "byte": 1,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      },
      {
        "byte": 2,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      },
      {
        "byte": 3,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      },
      {
        "byte": 4,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      },
      {
        "byte": 5,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      },
      {
        "byte": 6,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      },
      {
        "byte": 7,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      },
      {
        "byte": 8,
        "stateBefore": "00000000000000000000000000000000",
        "aesOutput": "0050788bb253f874d76eabc8efb3adfa",
        "plaintextByte": 0,
        "ciphertextByte": 0,
        "stateAfter": "00000000000000000000000000000000"
      }
    ]
  },
  "sameKeyDifferentIv": {
    "iv": "000102030405060708090a0b0c0d0e0f",
    "ciphertext": "9a8608ba9702c130"
  },
  "differentKeySameIv": {
    "key": "00000000000000000000000000000000",
    "ciphertext": "6616f92e42a8f11a"
  },
  "repeatedTrialModel": {
    "assumedIndependentProbability": 0.00390625,
    "trials": 256,
    "atLeastOneSuccess": 0.6328402451084637
  }
}