### QNSQY own-code NIST vector replay — v7.2.38
### build: qnsqy 7.2.38 (868cc4e0, 2026-08-04)   binary sha256: c7e22265953fbf87b3e110374e28fb7025701a82a4f10b6038c4ef306906f3dc
### generated: 2026-08-05T10:02:58Z
### source corpus: NIST ACVP-Server v1.1.0.42
###   commit 15c0f3deeefbfa8cb6cd32a99e1ca3b738c66bf0
###
### These vectors are driven through QNSQY's OWN API (qnsqy_core::), not
### through the upstream crate's API. Deterministic replay uses seeded entry
### points that are compiled out of shipping builds.
###
CORPUS FILE                             VECTORS
hash_vectors.json                          4191
hmac_vectors.json                         12375
internal_interface.json                     606
key_validation.json                          76
lms_sigver.json                              80
ml_dsa_keygen.json                           75
ml_dsa_siggen.json                           90
ml_dsa_sigver.json                            3
ml_dsa_sigver_context.json                   42
ml_kem_decap.json                            30
ml_kem_encap.json                            75
ml_kem_keygen.json                           75
prehash.json                                591
slh_dsa_keygen.json                         120
slh_dsa_siggen.json                         168
slh_dsa_sigver.json                          12
slh_dsa_sigver_context.json                 156
x25519_keygen.json                           10
x25519_ssc.json                              25
TOTAL                                     18800

RESULT: all vectors pass. 0 failures.

EXCLUSIONS (not covered anywhere; every entry recorded in a corpus file):
    1218  SHAKE-128: bit-oriented message (len % 8 != 0)
    1095  SHA3-224: bit-oriented message (len % 8 != 0)
    1043  SHA3-256: bit-oriented message (len % 8 != 0)
    1005  SHAKE-256: bit-oriented message (len % 8 != 0)
     892  SHA2-384: bit-oriented message (len % 8 != 0)
     878  SHA2-512-224: bit-oriented message (len % 8 != 0)
     820  SHA3-384: bit-oriented message (len % 8 != 0)
     641  SHAKE-256: bit-granular outLen (not a multiple of 8 bits)   [554 distinct output lengths, collapsed]
     596  SHA3-512: bit-oriented message (len % 8 != 0)
     450  SHAKE-128: bit-granular outLen (not a multiple of 8 bits)   [450 distinct output lengths, collapsed]
     433  SHA2-224: bit-oriented message (len % 8 != 0)
     160  SHAKE
      80  M24
      35  Curve448
      16  Curve448: algorithm not implemented
       4  SHA2-256: testType=LDT (needs a chaining/large-data driver)
       4  SHA2-512: testType=LDT (needs a chaining/large-data driver)
       4  SHA3-256: testType=LDT (needs a chaining/large-data driver)
       4  SHA3-512: testType=LDT (needs a chaining/large-data driver)
       4  SHA2-224: testType=LDT (needs a chaining/large-data driver)
       4  SHA2-384: testType=LDT (needs a chaining/large-data driver)
       4  SHA2-512-224: testType=LDT (needs a chaining/large-data driver)
       4  SHA2-512-256: testType=LDT (needs a chaining/large-data driver)
       4  SHA3-224: testType=LDT (needs a chaining/large-data driver)
       4  SHA3-384: testType=LDT (needs a chaining/large-data driver)
       1  SHA2-256: testType=MCT (needs a chaining/large-data driver)
       1  SHA2-512: testType=MCT (needs a chaining/large-data driver)
       1  SHA3-256: testType=MCT (needs a chaining/large-data driver)
       1  SHA3-512: testType=MCT (needs a chaining/large-data driver)
       1  SHA2-224: testType=MCT (needs a chaining/large-data driver)
       1  SHA2-384: testType=MCT (needs a chaining/large-data driver)
       1  SHA2-512-224: testType=MCT (needs a chaining/large-data driver)
       1  SHA2-512-256: testType=MCT (needs a chaining/large-data driver)
       1  SHA3-224: testType=MCT (needs a chaining/large-data driver)
       1  SHA3-384: testType=MCT (needs a chaining/large-data driver)
       1  SHAKE-128: testType=MCT (needs a chaining/large-data driver)
       1  SHAKE-256: testType=MCT (needs a chaining/large-data driver)

  TOTAL EXCLUDED: 9414

CROSS-REFERENCES (ledgered by a suite whose API cannot express them,
but replayed through a SIBLING corpus; NOT excluded from coverage):
     864  signatureInterface=internal
          -> replayed via internal_interface.json (606 unique; the sigVer half is ledgered by both the no-context and context suites)
     804  preHash=preHash
          -> replayed via prehash.json (591 unique; the sigVer half is ledgered by two suites)
     198  non-empty context (needs a context API)
          -> replayed via the *_sigver_context.json corpora (198 unique)
      15  empty context (already covered by the no-context suite)
          -> replayed via the no-context sigver corpora (15 unique)

  'bit-oriented message (len % 8 != 0)' — NIST vectors whose message length
  is not a whole number of bytes. A byte-oriented API cannot express them.
  'signatureInterface=internal' — NIST's internal signing interface. The
  shipping product exposes only the external interface; these vectors are
  replayed through acvp-harness-gated internal entry points that are
  compiled out of shipping builds (see internal_interface.json).