From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 8 Aug 2025 09:49:48 +0000 (+0200)
Subject: github: Check active transforms against reference files
X-Git-Tag: 6.0.3dr1~23
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4096a911a02075e403e26dff487f91561539c516;p=thirdparty%2Fstrongswan.git

github: Check active transforms against reference files

Also collect current results so we can update reference files easily.

Enabled AES-CFB in wolfSSL as we have already support for it in the
plugin.
---

diff --git a/.github/active-transforms/botan b/.github/active-transforms/botan
new file mode 100644
index 0000000000..2d285a7798
--- /dev/null
+++ b/.github/active-transforms/botan
@@ -0,0 +1,102 @@
+AES_ECB[botan]
+AES_ECB[botan]
+AES_ECB[botan]
+AES_CBC[botan]
+AES_CBC[botan]
+AES_CBC[botan]
+AES_CFB[botan]
+AES_CFB[botan]
+AES_CFB[botan]
+AES_GCM_16[botan]
+AES_GCM_16[botan]
+AES_GCM_16[botan]
+AES_GCM_12[botan]
+AES_GCM_12[botan]
+AES_GCM_12[botan]
+AES_GCM_8[botan]
+AES_GCM_8[botan]
+AES_GCM_8[botan]
+AES_CCM_16[botan]
+AES_CCM_16[botan]
+AES_CCM_16[botan]
+AES_CCM_12[botan]
+AES_CCM_12[botan]
+AES_CCM_12[botan]
+AES_CCM_8[botan]
+AES_CCM_8[botan]
+AES_CCM_8[botan]
+CHACHA20_POLY1305[botan]
+HMAC_SHA1_96[botan]
+HMAC_SHA1_96[hmac]
+HMAC_SHA1_128[botan]
+HMAC_SHA1_128[hmac]
+HMAC_SHA1_160[botan]
+HMAC_SHA1_160[hmac]
+HMAC_SHA2_256_128[botan]
+HMAC_SHA2_256_128[hmac]
+HMAC_SHA2_256_256[botan]
+HMAC_SHA2_256_256[hmac]
+HMAC_SHA2_384_192[botan]
+HMAC_SHA2_384_192[hmac]
+HMAC_SHA2_384_384[botan]
+HMAC_SHA2_384_384[hmac]
+HMAC_SHA2_512_256[botan]
+HMAC_SHA2_512_256[hmac]
+HMAC_SHA2_512_512[botan]
+HMAC_SHA2_512_512[hmac]
+HMAC_MD5_96[hmac]
+HMAC_MD5_128[hmac]
+HASH_MD5[botan]
+HASH_SHA1[botan]
+HASH_SHA2_224[botan]
+HASH_SHA2_256[botan]
+HASH_SHA2_384[botan]
+HASH_SHA2_512[botan]
+HASH_SHA3_224[botan]
+HASH_SHA3_256[botan]
+HASH_SHA3_384[botan]
+HASH_SHA3_512[botan]
+HASH_IDENTITY[botan]
+PRF_HMAC_SHA1[botan]
+PRF_HMAC_SHA1[hmac]
+PRF_HMAC_SHA2_256[botan]
+PRF_HMAC_SHA2_256[hmac]
+PRF_HMAC_SHA2_384[botan]
+PRF_HMAC_SHA2_384[hmac]
+PRF_HMAC_SHA2_512[botan]
+PRF_HMAC_SHA2_512[hmac]
+PRF_HMAC_MD5[hmac]
+KDF_PRF[botan]
+KDF_PRF_PLUS[botan]
+DRBG_CTR_AES256[drbg]
+DRBG_CTR_AES128[drbg]
+DRBG_CTR_AES192[drbg]
+DRBG_HMAC_SHA1[drbg]
+DRBG_HMAC_SHA256[drbg]
+DRBG_HMAC_SHA384[drbg]
+DRBG_HMAC_SHA512[drbg]
+RNG_WEAK[botan]
+RNG_STRONG[botan]
+RNG_TRUE[botan]
+MODP_3072[botan]
+MODP_4096[botan]
+MODP_6144[botan]
+MODP_8192[botan]
+MODP_2048[botan]
+MODP_2048_224[botan]
+MODP_2048_256[botan]
+MODP_1536[botan]
+MODP_1024[botan]
+MODP_1024_160[botan]
+MODP_768[botan]
+MODP_CUSTOM[botan]
+ECP_256[botan]
+ECP_384[botan]
+ECP_521[botan]
+ECP_256_BP[botan]
+ECP_384_BP[botan]
+ECP_512_BP[botan]
+CURVE_25519[botan]
+ML_KEM_512[botan]
+ML_KEM_768[botan]
+ML_KEM_1024[botan]
diff --git a/.github/active-transforms/gcrypt b/.github/active-transforms/gcrypt
new file mode 100644
index 0000000000..d168a33667
--- /dev/null
+++ b/.github/active-transforms/gcrypt
@@ -0,0 +1,81 @@
+AES_CTR[gcrypt]
+AES_CTR[gcrypt]
+AES_CTR[gcrypt]
+AES_CBC[gcrypt]
+AES_CBC[gcrypt]
+AES_CBC[gcrypt]
+AES_ECB[gcrypt]
+AES_ECB[gcrypt]
+AES_ECB[gcrypt]
+AES_CFB[gcrypt]
+AES_CFB[gcrypt]
+AES_CFB[gcrypt]
+BLOWFISH_CBC[gcrypt]
+CAMELLIA_CTR[gcrypt]
+CAMELLIA_CTR[gcrypt]
+CAMELLIA_CTR[gcrypt]
+CAMELLIA_CBC[gcrypt]
+CAMELLIA_CBC[gcrypt]
+CAMELLIA_CBC[gcrypt]
+CAST_CBC[gcrypt]
+3DES_CBC[gcrypt]
+DES_CBC[gcrypt]
+DES_ECB[gcrypt]
+SERPENT_CBC[gcrypt]
+SERPENT_CBC[gcrypt]
+SERPENT_CBC[gcrypt]
+TWOFISH_CBC[gcrypt]
+TWOFISH_CBC[gcrypt]
+AES_GCM_8[gcm]
+AES_GCM_8[gcm]
+AES_GCM_8[gcm]
+AES_GCM_12[gcm]
+AES_GCM_12[gcm]
+AES_GCM_12[gcm]
+AES_GCM_16[gcm]
+AES_GCM_16[gcm]
+AES_GCM_16[gcm]
+HMAC_SHA1_96[hmac]
+HMAC_SHA1_128[hmac]
+HMAC_SHA1_160[hmac]
+HMAC_MD5_96[hmac]
+HMAC_MD5_128[hmac]
+HMAC_SHA2_256_128[hmac]
+HMAC_SHA2_256_256[hmac]
+HMAC_SHA2_384_192[hmac]
+HMAC_SHA2_384_384[hmac]
+HMAC_SHA2_512_256[hmac]
+HMAC_SHA2_512_512[hmac]
+HASH_MD4[gcrypt]
+HASH_MD5[gcrypt]
+HASH_SHA1[gcrypt]
+HASH_SHA2_224[gcrypt]
+HASH_SHA2_256[gcrypt]
+HASH_SHA2_384[gcrypt]
+HASH_SHA2_512[gcrypt]
+HASH_IDENTITY[curve25519]
+PRF_HMAC_SHA1[hmac]
+PRF_HMAC_MD5[hmac]
+PRF_HMAC_SHA2_256[hmac]
+PRF_HMAC_SHA2_384[hmac]
+PRF_HMAC_SHA2_512[hmac]
+KDF_PRF[kdf]
+KDF_PRF_PLUS[kdf]
+RNG_WEAK[gcrypt]
+RNG_STRONG[gcrypt]
+RNG_STRONG[random]
+RNG_TRUE[gcrypt]
+RNG_TRUE[random]
+MODP_3072[gcrypt]
+MODP_4096[gcrypt]
+MODP_6144[gcrypt]
+MODP_8192[gcrypt]
+MODP_2048[gcrypt]
+MODP_2048_224[gcrypt]
+MODP_2048_256[gcrypt]
+MODP_1536[gcrypt]
+MODP_1024[gcrypt]
+MODP_1024_160[gcrypt]
+MODP_768[gcrypt]
+MODP_CUSTOM[gcrypt]
+CURVE_25519[curve25519]
diff --git a/.github/active-transforms/openssl b/.github/active-transforms/openssl
new file mode 100644
index 0000000000..2ba76b53ec
--- /dev/null
+++ b/.github/active-transforms/openssl
@@ -0,0 +1,108 @@
+AES_ECB[openssl]
+AES_ECB[openssl]
+AES_ECB[openssl]
+AES_CBC[openssl]
+AES_CBC[openssl]
+AES_CBC[openssl]
+AES_CTR[openssl]
+AES_CTR[openssl]
+AES_CTR[openssl]
+AES_CFB[openssl]
+AES_CFB[openssl]
+AES_CFB[openssl]
+CAMELLIA_CBC[openssl]
+CAMELLIA_CBC[openssl]
+CAMELLIA_CBC[openssl]
+CAMELLIA_CTR[openssl]
+CAMELLIA_CTR[openssl]
+CAMELLIA_CTR[openssl]
+CAST_CBC[openssl]
+BLOWFISH_CBC[openssl]
+3DES_CBC[openssl]
+DES_CBC[openssl]
+DES_ECB[openssl]
+NULL[openssl]
+AES_GCM_16[openssl]
+AES_GCM_16[openssl]
+AES_GCM_16[openssl]
+AES_GCM_12[openssl]
+AES_GCM_12[openssl]
+AES_GCM_12[openssl]
+AES_GCM_8[openssl]
+AES_GCM_8[openssl]
+AES_GCM_8[openssl]
+AES_CCM_16[openssl]
+AES_CCM_16[openssl]
+AES_CCM_16[openssl]
+AES_CCM_12[openssl]
+AES_CCM_12[openssl]
+AES_CCM_12[openssl]
+AES_CCM_8[openssl]
+AES_CCM_8[openssl]
+AES_CCM_8[openssl]
+CHACHA20_POLY1305[openssl]
+HMAC_MD5_96[openssl]
+HMAC_MD5_128[openssl]
+HMAC_SHA1_96[openssl]
+HMAC_SHA1_128[openssl]
+HMAC_SHA1_160[openssl]
+HMAC_SHA2_256_128[openssl]
+HMAC_SHA2_256_256[openssl]
+HMAC_SHA2_384_192[openssl]
+HMAC_SHA2_384_384[openssl]
+HMAC_SHA2_512_256[openssl]
+HMAC_SHA2_512_512[openssl]
+HASH_MD4[openssl]
+HASH_MD5[openssl]
+HASH_SHA1[openssl]
+HASH_SHA2_224[openssl]
+HASH_SHA2_256[openssl]
+HASH_SHA2_384[openssl]
+HASH_SHA2_512[openssl]
+HASH_SHA3_224[openssl]
+HASH_SHA3_256[openssl]
+HASH_SHA3_384[openssl]
+HASH_SHA3_512[openssl]
+HASH_IDENTITY[openssl]
+PRF_KEYED_SHA1[openssl]
+PRF_HMAC_MD5[openssl]
+PRF_HMAC_SHA1[openssl]
+PRF_HMAC_SHA2_256[openssl]
+PRF_HMAC_SHA2_384[openssl]
+PRF_HMAC_SHA2_512[openssl]
+XOF_SHAKE128[openssl]
+XOF_SHAKE256[openssl]
+KDF_PRF[openssl]
+KDF_PRF_PLUS[openssl]
+DRBG_CTR_AES256[drbg]
+DRBG_CTR_AES128[drbg]
+DRBG_CTR_AES192[drbg]
+DRBG_HMAC_SHA1[drbg]
+DRBG_HMAC_SHA256[drbg]
+DRBG_HMAC_SHA384[drbg]
+DRBG_HMAC_SHA512[drbg]
+RNG_WEAK[openssl]
+RNG_STRONG[openssl]
+MODP_3072[openssl]
+MODP_4096[openssl]
+MODP_6144[openssl]
+MODP_8192[openssl]
+MODP_2048[openssl]
+MODP_2048_224[openssl]
+MODP_2048_256[openssl]
+MODP_1536[openssl]
+MODP_1024[openssl]
+MODP_1024_160[openssl]
+MODP_768[openssl]
+MODP_CUSTOM[openssl]
+ECP_256[openssl]
+ECP_384[openssl]
+ECP_521[openssl]
+ECP_224[openssl]
+ECP_192[openssl]
+ECP_256_BP[openssl]
+ECP_384_BP[openssl]
+ECP_512_BP[openssl]
+ECP_224_BP[openssl]
+CURVE_25519[openssl]
+CURVE_448[openssl]
diff --git a/.github/active-transforms/openssl-3 b/.github/active-transforms/openssl-3
new file mode 100644
index 0000000000..485847af0f
--- /dev/null
+++ b/.github/active-transforms/openssl-3
@@ -0,0 +1,111 @@
+AES_ECB[openssl]
+AES_ECB[openssl]
+AES_ECB[openssl]
+AES_CBC[openssl]
+AES_CBC[openssl]
+AES_CBC[openssl]
+AES_CTR[openssl]
+AES_CTR[openssl]
+AES_CTR[openssl]
+AES_CFB[openssl]
+AES_CFB[openssl]
+AES_CFB[openssl]
+CAMELLIA_CBC[openssl]
+CAMELLIA_CBC[openssl]
+CAMELLIA_CBC[openssl]
+CAMELLIA_CTR[openssl]
+CAMELLIA_CTR[openssl]
+CAMELLIA_CTR[openssl]
+CAST_CBC[openssl]
+BLOWFISH_CBC[openssl]
+3DES_CBC[openssl]
+DES_CBC[openssl]
+DES_ECB[openssl]
+NULL[openssl]
+AES_GCM_16[openssl]
+AES_GCM_16[openssl]
+AES_GCM_16[openssl]
+AES_GCM_12[openssl]
+AES_GCM_12[openssl]
+AES_GCM_12[openssl]
+AES_GCM_8[openssl]
+AES_GCM_8[openssl]
+AES_GCM_8[openssl]
+AES_CCM_16[openssl]
+AES_CCM_16[openssl]
+AES_CCM_16[openssl]
+AES_CCM_12[openssl]
+AES_CCM_12[openssl]
+AES_CCM_12[openssl]
+AES_CCM_8[openssl]
+AES_CCM_8[openssl]
+AES_CCM_8[openssl]
+CHACHA20_POLY1305[openssl]
+HMAC_MD5_96[openssl]
+HMAC_MD5_128[openssl]
+HMAC_SHA1_96[openssl]
+HMAC_SHA1_128[openssl]
+HMAC_SHA1_160[openssl]
+HMAC_SHA2_256_128[openssl]
+HMAC_SHA2_256_256[openssl]
+HMAC_SHA2_384_192[openssl]
+HMAC_SHA2_384_384[openssl]
+HMAC_SHA2_512_256[openssl]
+HMAC_SHA2_512_512[openssl]
+HASH_MD4[openssl]
+HASH_MD5[openssl]
+HASH_SHA1[openssl]
+HASH_SHA2_224[openssl]
+HASH_SHA2_256[openssl]
+HASH_SHA2_384[openssl]
+HASH_SHA2_512[openssl]
+HASH_SHA3_224[openssl]
+HASH_SHA3_256[openssl]
+HASH_SHA3_384[openssl]
+HASH_SHA3_512[openssl]
+HASH_IDENTITY[openssl]
+PRF_KEYED_SHA1[openssl]
+PRF_HMAC_MD5[openssl]
+PRF_HMAC_SHA1[openssl]
+PRF_HMAC_SHA2_256[openssl]
+PRF_HMAC_SHA2_384[openssl]
+PRF_HMAC_SHA2_512[openssl]
+XOF_SHAKE128[openssl]
+XOF_SHAKE256[openssl]
+KDF_PRF[openssl]
+KDF_PRF_PLUS[openssl]
+DRBG_CTR_AES256[drbg]
+DRBG_CTR_AES128[drbg]
+DRBG_CTR_AES192[drbg]
+DRBG_HMAC_SHA1[drbg]
+DRBG_HMAC_SHA256[drbg]
+DRBG_HMAC_SHA384[drbg]
+DRBG_HMAC_SHA512[drbg]
+RNG_WEAK[openssl]
+RNG_STRONG[openssl]
+MODP_3072[openssl]
+MODP_4096[openssl]
+MODP_6144[openssl]
+MODP_8192[openssl]
+MODP_2048[openssl]
+MODP_2048_224[openssl]
+MODP_2048_256[openssl]
+MODP_1536[openssl]
+MODP_1024[openssl]
+MODP_1024_160[openssl]
+MODP_768[openssl]
+MODP_CUSTOM[openssl]
+ML_KEM_512[openssl]
+ML_KEM_768[openssl]
+ML_KEM_1024[openssl]
+ECP_256[openssl]
+ECP_384[openssl]
+ECP_521[openssl]
+ECP_224[openssl]
+ECP_192[openssl]
+ECP_256_BP[openssl]
+ECP_384_BP[openssl]
+ECP_512_BP[openssl]
+ECP_224_BP[openssl]
+CURVE_25519[openssl]
+CURVE_448[openssl]
diff --git a/.github/active-transforms/openssl-awslc b/.github/active-transforms/openssl-awslc
new file mode 100644
index 0000000000..85a7f4385c
--- /dev/null
+++ b/.github/active-transforms/openssl-awslc
@@ -0,0 +1,97 @@
+AES_ECB[openssl]
+AES_ECB[openssl]
+AES_ECB[openssl]
+AES_CBC[openssl]
+AES_CBC[openssl]
+AES_CBC[openssl]
+AES_CTR[openssl]
+AES_CTR[openssl]
+AES_CTR[openssl]
+AES_CFB[openssl]
+AES_CFB[openssl]
+AES_CFB[openssl]
+BLOWFISH_CBC[openssl]
+3DES_CBC[openssl]
+DES_CBC[openssl]
+DES_ECB[openssl]
+NULL[openssl]
+AES_GCM_16[openssl]
+AES_GCM_16[openssl]
+AES_GCM_16[openssl]
+AES_GCM_12[openssl]
+AES_GCM_12[openssl]
+AES_GCM_12[openssl]
+AES_GCM_8[openssl]
+AES_GCM_8[openssl]
+AES_GCM_8[openssl]
+AES_CCM_16[openssl]
+AES_CCM_16[openssl]
+AES_CCM_16[openssl]
+AES_CCM_12[openssl]
+AES_CCM_12[openssl]
+AES_CCM_12[openssl]
+AES_CCM_8[openssl]
+AES_CCM_8[openssl]
+AES_CCM_8[openssl]
+CHACHA20_POLY1305[openssl]
+HMAC_MD5_96[openssl]
+HMAC_MD5_128[openssl]
+HMAC_SHA1_96[openssl]
+HMAC_SHA1_128[openssl]
+HMAC_SHA1_160[openssl]
+HMAC_SHA2_256_128[openssl]
+HMAC_SHA2_256_256[openssl]
+HMAC_SHA2_384_192[openssl]
+HMAC_SHA2_384_384[openssl]
+HMAC_SHA2_512_256[openssl]
+HMAC_SHA2_512_512[openssl]
+HASH_MD4[openssl]
+HASH_MD5[openssl]
+HASH_SHA1[openssl]
+HASH_SHA2_224[openssl]
+HASH_SHA2_256[openssl]
+HASH_SHA2_384[openssl]
+HASH_SHA2_512[openssl]
+HASH_SHA3_224[openssl]
+HASH_SHA3_256[openssl]
+HASH_SHA3_384[openssl]
+HASH_SHA3_512[openssl]
+PRF_KEYED_SHA1[openssl]
+PRF_HMAC_MD5[openssl]
+PRF_HMAC_SHA1[openssl]
+PRF_HMAC_SHA2_256[openssl]
+PRF_HMAC_SHA2_384[openssl]
+PRF_HMAC_SHA2_512[openssl]
+XOF_SHAKE128[openssl]
+XOF_SHAKE256[openssl]
+KDF_PRF[openssl]
+KDF_PRF_PLUS[openssl]
+DRBG_CTR_AES256[drbg]
+DRBG_CTR_AES128[drbg]
+DRBG_CTR_AES192[drbg]
+DRBG_HMAC_SHA1[drbg]
+DRBG_HMAC_SHA256[drbg]
+DRBG_HMAC_SHA384[drbg]
+DRBG_HMAC_SHA512[drbg]
+RNG_WEAK[openssl]
+RNG_STRONG[openssl]
+MODP_3072[openssl]
+MODP_4096[openssl]
+MODP_6144[openssl]
+MODP_8192[openssl]
+MODP_2048[openssl]
+MODP_2048_224[openssl]
+MODP_2048_256[openssl]
+MODP_1536[openssl]
+MODP_1024[openssl]
+MODP_1024_160[openssl]
+MODP_768[openssl]
+MODP_CUSTOM[openssl]
+ML_KEM_512[openssl]
+ML_KEM_768[openssl]
+ML_KEM_1024[openssl]
+ECP_256[openssl]
+ECP_384[openssl]
+ECP_521[openssl]
+ECP_224[openssl]
+CURVE_25519[openssl]
diff --git a/.github/active-transforms/wolfssl b/.github/active-transforms/wolfssl
new file mode 100644
index 0000000000..b3e46c0617
--- /dev/null
+++ b/.github/active-transforms/wolfssl
@@ -0,0 +1,103 @@
+AES_ECB[wolfssl]
+AES_ECB[wolfssl]
+AES_ECB[wolfssl]
+AES_CTR[wolfssl]
+AES_CTR[wolfssl]
+AES_CTR[wolfssl]
+AES_CBC[wolfssl]
+AES_CBC[wolfssl]
+AES_CBC[wolfssl]
+AES_CFB[wolfssl]
+AES_CFB[wolfssl]
+AES_CFB[wolfssl]
+CAMELLIA_CBC[wolfssl]
+CAMELLIA_CBC[wolfssl]
+CAMELLIA_CBC[wolfssl]
+3DES_CBC[wolfssl]
+DES_CBC[wolfssl]
+DES_ECB[wolfssl]
+NULL[wolfssl]
+AES_GCM_16[wolfssl]
+AES_GCM_16[wolfssl]
+AES_GCM_16[wolfssl]
+AES_GCM_12[wolfssl]
+AES_GCM_12[wolfssl]
+AES_GCM_12[wolfssl]
+AES_GCM_8[wolfssl]
+AES_GCM_8[wolfssl]
+AES_GCM_8[wolfssl]
+AES_CCM_16[wolfssl]
+AES_CCM_16[wolfssl]
+AES_CCM_16[wolfssl]
+AES_CCM_12[wolfssl]
+AES_CCM_12[wolfssl]
+AES_CCM_12[wolfssl]
+AES_CCM_8[wolfssl]
+AES_CCM_8[wolfssl]
+AES_CCM_8[wolfssl]
+CHACHA20_POLY1305[wolfssl]
+HMAC_MD5_96[wolfssl]
+HMAC_MD5_128[wolfssl]
+HMAC_SHA1_96[wolfssl]
+HMAC_SHA1_128[wolfssl]
+HMAC_SHA1_160[wolfssl]
+HMAC_SHA2_256_128[wolfssl]
+HMAC_SHA2_256_256[wolfssl]
+HMAC_SHA2_384_192[wolfssl]
+HMAC_SHA2_384_384[wolfssl]
+HMAC_SHA2_512_256[wolfssl]
+HMAC_SHA2_512_512[wolfssl]
+HASH_MD5[wolfssl]
+HASH_SHA1[wolfssl]
+HASH_SHA2_224[wolfssl]
+HASH_SHA2_256[wolfssl]
+HASH_SHA2_384[wolfssl]
+HASH_SHA2_512[wolfssl]
+HASH_SHA3_224[wolfssl]
+HASH_SHA3_256[wolfssl]
+HASH_SHA3_384[wolfssl]
+HASH_SHA3_512[wolfssl]
+HASH_IDENTITY[wolfssl]
+PRF_KEYED_SHA1[wolfssl]
+PRF_HMAC_MD5[wolfssl]
+PRF_HMAC_SHA1[wolfssl]
+PRF_HMAC_SHA2_256[wolfssl]
+PRF_HMAC_SHA2_384[wolfssl]
+PRF_HMAC_SHA2_512[wolfssl]
+XOF_SHAKE256[wolfssl]
+KDF_PRF[wolfssl]
+KDF_PRF_PLUS[wolfssl]
+DRBG_CTR_AES256[drbg]
+DRBG_CTR_AES128[drbg]
+DRBG_CTR_AES192[drbg]
+DRBG_HMAC_SHA1[drbg]
+DRBG_HMAC_SHA256[drbg]
+DRBG_HMAC_SHA384[drbg]
+DRBG_HMAC_SHA512[drbg]
+RNG_WEAK[wolfssl]
+RNG_STRONG[wolfssl]
+ECP_256[wolfssl]
+ECP_384[wolfssl]
+ECP_521[wolfssl]
+ECP_224[wolfssl]
+ECP_256_BP[wolfssl]
+ECP_384_BP[wolfssl]
+ECP_512_BP[wolfssl]
+ECP_224_BP[wolfssl]
+MODP_3072[wolfssl]
+MODP_4096[wolfssl]
+MODP_6144[wolfssl]
+MODP_8192[wolfssl]
+MODP_2048[wolfssl]
+MODP_2048_224[wolfssl]
+MODP_2048_256[wolfssl]
+MODP_1536[wolfssl]
+MODP_1024[wolfssl]
+MODP_1024_160[wolfssl]
+MODP_768[wolfssl]
+MODP_CUSTOM[wolfssl]
+ML_KEM_512[wolfssl]
+ML_KEM_768[wolfssl]
+ML_KEM_1024[wolfssl]
+CURVE_25519[wolfssl]
+CURVE_448[wolfssl]
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index e3c3d41328..b423e462b8 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -116,6 +116,7 @@ jobs:
       LEAK_DETECTIVE: ${{ matrix.leak-detective || 'no' }}
       CC: ${{ matrix.compiler || 'gcc' }}
       TEST: ${{ matrix.test }}
+      ACTIVE_TRANSFORMS_REF: .github/active-transforms/${{ matrix.test }}
     steps:
       - uses: actions/checkout@v4
       - uses: actions/cache@v4
@@ -134,13 +135,17 @@ jobs:
           sudo apt-get install -qq ccache
           echo "PATH=/usr/lib/ccache:$PATH" >> $GITHUB_ENV
           ccache -z
+          echo "TESTS_ACTIVE_TRANSFORMS=$HOME/active-transforms.log" >> $GITHUB_ENV
       - uses: ./.github/actions/default
-      - name: Test Vectors (detailed)
-        env:
-          TESTS_SUITES: vectors
-          TESTS_VERBOSITY: 1
-        run:
-          ./scripts/test.sh
+      - name: Upload active transforms
+        uses: actions/upload-artifact@v4
+        with:
+          name: active-transforms-${{ matrix.test }}-${{ matrix.os }}-${{ matrix.leak-detective }}
+          path: ${{ env.TESTS_ACTIVE_TRANSFORMS }}
+          retention-days: 5
+      - name: Verify active transforms
+        run: |
+          test ! -f $ACTIVE_TRANSFORMS_REF || diff -u --color=always $ACTIVE_TRANSFORMS_REF $TESTS_ACTIVE_TRANSFORMS
       - run: ccache -s
       - if: ${{ failure() }}
         uses: actions/upload-artifact@v4
diff --git a/scripts/test.sh b/scripts/test.sh
index 056962dd4e..88ac1088c1 100755
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -51,7 +51,7 @@ build_wolfssl()
 					-DRSA_MIN_SIZE=1024"
 	WOLFSSL_CONFIG="--prefix=$DEPS_PREFIX
 					--disable-crypttests --disable-examples
-					--enable-aesccm --enable-aesctr --enable-camellia
+					--enable-aesccm --enable-aesctr --enable-aescfb --enable-camellia
 					--enable-curve25519 --enable-curve448 --enable-des3
 					--enable-ecccustcurves --enable-ed25519 --enable-ed448
 					--enable-keygen --enable-mlkem --with-max-rsa-bits=8192