feat: add SDK crypto conformance vectors (sha256, ripemd160, hash160, hmac, aes, ecies)

Mine 60 cross-language conformance vectors across 6 crypto categories from
ts-sdk test files (Hash.test.ts, AESGCM.test.ts, HMAC.test.ts, ECIES.test.ts):
- sha256.json: 14 vectors (empty, abc, NIST 448-bit, deadbeef, double-hash, BSV, zero/ff bytes)
- ripemd160.json: 7 vectors (empty, abc, message digest, full alphanumeric, quick brown fox)
- hash160.json: 8 vectors (P2PKH pubkeys for privkeys 1-4, genesis coinbase, empty/abc/Bitcoin strings)
- hmac.json: 11 vectors (HMAC-SHA256 NIST 1-4 + regression, HMAC-SHA512 RFC 4231 TC 1-4 + utf8 pairs)
- aes.json: 15 vectors (AES-128/192/256 block encrypt NIST FIPS 197, AES-GCM NIST TC1/2/3/7/8/9/13/14/15)
- ecies.json: 5 vectors (Electrum ECIES with fixed Alice/Bob key pair, ECDH no-key mode)

All binary data encoded as lowercase hex. Vector IDs stable and unique.
Fixes ripemd160 vectors to use utf8 encoding instead of hex for ASCII inputs.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: sirdeggen

conformance/vectors/sdk/crypto/aes.json

@@ -147,15 +147,67 @@
     },
     {
       "id": "sdk.crypto.aes.11",
-      "description": "AES-GCM SymmetricKey decrypt: known ciphertext with known key (base64-encoded)",
+      "description": "AES-GCM SymmetricKey decrypt: known ciphertext with known key (hex-encoded iv+ciphertext+tag)",
       "input": {
         "algorithm": "aes-gcm-symmetrickey",
-        "ciphertext_b64": "8c8d25348dfd5240be833215a123173c64919779ab8845a700a4520311504c168ade2d4b728cc53a254f0aba857caaf6af97453ac2ff61487d0d52",
+        "ciphertext_hex": "8c8d25348dfd5240be833215a123173c64919779ab8845a700a4520311504c168ade2d4b728cc53a254f0aba857caaf6af97453ac2ff61487d0d52",
         "key": "5a90d59d829197983a54d887fdea2dc4c38098f00ba3110f2645633b6ea11458",
         "key_encoding": "hex"
       },
       "expected": { "plaintext_utf8": "hello there" },
       "tags": ["happy-path", "symmetrickey", "round-trip"]
+    },
+    {
+      "id": "sdk.crypto.aes.12",
+      "description": "AES-GCM encrypt: NIST Test Case 8 — 16-byte zero plaintext, 192-bit zero key",
+      "input": {
+        "algorithm": "aes-gcm",
+        "plaintext": "00000000000000000000000000000000",
+        "key": "000000000000000000000000000000000000000000000000",
+        "iv": "000000000000000000000000"
+      },
+      "expected": {
+        "ciphertext": "98e7247c07f0fe411c267e4384b0f600",
+        "authentication_tag": "2ff58d80033927ab8ef4d4587514f0fb"
+      },
+      "tags": ["happy-path", "nist", "aes-gcm", "aes-192"]
+    },
+    {
+      "id": "sdk.crypto.aes.13",
+      "description": "AES-GCM encrypt: NIST Test Case 9 — 60-byte plaintext, 192-bit key, cafebabe IV",
+      "input": {
+        "algorithm": "aes-gcm",
+        "plaintext": "d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255",
+        "key": "feffe9928665731c6d6a8f9467308308feffe9928665731c",
+        "iv": "cafebabefacedbaddecaf888"
+      },
+      "expected": {
+        "ciphertext": "3980ca0b3c00e841eb06fac4872a2757859e1ceaa6efd984628593b40ca1e19c7d773d00c144c525ac619d18c84a3f4718e2448b2fe324d9ccda2710acade256",
+        "authentication_tag": "9924a7c8587336bfb118024db8674a14"
+      },
+      "tags": ["happy-path", "nist", "aes-gcm", "aes-192"]
+    },
+    {
+      "id": "sdk.crypto.aes.14",
+      "description": "AES-128 block encrypt: zero plaintext with zero key",
+      "input": {
+        "algorithm": "aes-block",
+        "plaintext": "00000000000000000000000000000000",
+        "key": "00000000000000000000000000000000"
+      },
+      "expected": { "ciphertext": "66e94bd4ef8a2c3b884cfa59ca342b2e" },
+      "tags": ["happy-path", "aes-128", "edge-case"]
+    },
+    {
+      "id": "sdk.crypto.aes.15",
+      "description": "AES-128 block encrypt: zero plaintext with sequential key 00..0f",
+      "input": {
+        "algorithm": "aes-block",
+        "plaintext": "00000000000000000000000000000000",
+        "key": "000102030405060708090a0b0c0d0e0f"
+      },
+      "expected": { "ciphertext": "c6a13b37878f5b826f4f8162a1c8d879" },
+      "tags": ["happy-path", "aes-128"]
     }
   ]
 }

conformance/vectors/sdk/crypto/hash160.json

@@ -67,6 +67,16 @@
       "input": { "message": "Bitcoin", "encoding": "utf8" },
       "expected": { "hash160": "024f9137e731852f3570492545d6efb85cbcdf49" },
       "tags": ["happy-path"]
+    },
+    {
+      "id": "sdk.crypto.hash160.8",
+      "description": "Hash160 of compressed pubkey for privkey=4",
+      "input": {
+        "pubkey": "02e493dbf1c10d80f3581e4904930b1404cc6c13900ee0758474fa94abe8c4cd13",
+        "encoding": "hex"
+      },
+      "expected": { "hash160": "c42e7ef92fdb603af844d064faad95db9bcdfd3d" },
+      "tags": ["happy-path", "p2pkh"]
     }
   ]
 }

conformance/vectors/sdk/crypto/ripemd160.json

@@ -30,15 +30,15 @@
     },
     {
       "id": "sdk.crypto.ripemd160.4",
-      "description": "RIPEMD-160 of 448-bit ASCII string",
-      "input": { "message": "6162636462636465636465666465666765666768666768696768696a68696a6b696a6b6c6a6b6c6d6b6c6d6e6c6d6e6f6d6e6f706e6f7071", "encoding": "hex" },
+      "description": "RIPEMD-160 of 448-bit ASCII string 'abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq'",
+      "input": { "message": "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq", "encoding": "utf8" },
       "expected": { "hash": "12a053384a9c0c88e405a06c27dcf49ada62eb2b" },
       "tags": ["happy-path"]
     },
     {
       "id": "sdk.crypto.ripemd160.5",
       "description": "RIPEMD-160 of full alphanumeric ASCII string (A-Z a-z 0-9)",
-      "input": { "message": "4142434445464748494a4b4c4d4e4f505152535455565758595a6162636465666768696a6b6c6d6e6f707172737475767778797a30313233343536373839", "encoding": "hex" },
+      "input": { "message": "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789", "encoding": "utf8" },
       "expected": { "hash": "b0e20b6e3116640286ed3a87a5713079b21f5189" },
       "tags": ["happy-path"]
     },

conformance/vectors/sdk/crypto/sha256.json

@@ -90,6 +90,20 @@
       "input": { "message": "0000000000000000", "encoding": "hex" },
       "expected": { "hash": "af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc" },
       "tags": ["happy-path", "binary", "edge-case"]
+    },
+    {
+      "id": "sdk.crypto.sha256.13",
+      "description": "SHA-256 of ASCII string 'BSV'",
+      "input": { "message": "BSV", "encoding": "utf8" },
+      "expected": { "hash": "6c080e27dedb22dd1850901075c94cfc2c0c5c7d762ff4070871260a71263ad4" },
+      "tags": ["happy-path"]
+    },
+    {
+      "id": "sdk.crypto.sha256.14",
+      "description": "SHA-256 of 16 0xff bytes",
+      "input": { "message": "ffffffffffffffffffffffffffffffff", "encoding": "hex" },
+      "expected": { "hash": "5ac6a5945f16500911219129984ba8b387a06f24fe383ce4e81a73294065461b" },
+      "tags": ["happy-path", "binary", "edge-case"]
     }
   ]
 }