Freeze 116 more BLS12-381 edge cases from the differential corpora

Two samples of every class of the 41,686-input differential corpus and
the 2,765-input adversarial corpus (cofactor torsion, small-order points,
points plus torsion, sign edge cases, coordinates >= p, every flag
combination, other lengths), with the Go reference verdict recomputed by
scripts/bls12381-go-verdicts.go. On those corpora bls12381.ts matched the
Go reference on all 49,451 inputs, at the same rejection stage; noble
>= 2.3.0 with a length check matched too, while noble 1.9.7 (the version
tlock-js 0.9.0 pulls in) differed on 5,615.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/lib/dkc/bls12381.contrast.test.ts

@@ -3,7 +3,7 @@
 // checkCompressedPoint is our own code. It is kept because it matches the Go
 // reference on every edge case, is 1.3 KB gzip and adds no runtime
 // dependency. Its assurance comes from this file: on every run it is compared
-// with the Go reference on frozen edge cases and with @noble/curves 2.4.0
+// with the Go reference on 157 frozen edge cases and with @noble/curves 2.4.0
 // (Cure53 2024; Trail of Bits 2026 review, whose BLS findings were fixed in
 // 2.3.0) on a deterministic corpus. noble is a development dependency only:
 // the last test fails if anything outside a test imports it, so it never
@@ -137,7 +137,7 @@ describe('bls12381.ts against the Go reference and @noble/curves 2.4.0', () => {
   };
 
   it('matches the Go reference on every frozen edge case', () => {
-    expect(file.vectors.length).toBe(41);
+    expect(file.vectors.length).toBe(157);
     for (const v of file.vectors) expect(checkCompressedPoint(v.group, hex(v.hex)), v.label).toBe(v.go);
   });
 

src/lib/dkc/testing/bls12381-vectors.json

@@ -1,5 +1,5 @@
 {
- "description": "Edge-case compressed BLS12-381 encodings (valid points, sort-bit flips, identity encodings with stray flags or payload, missing compression flag, wrong lengths, uncompressed forms, x + p, points on the curve outside the subgroup) with the verdict of the Go reference: the KeyGroup of the drand/drand/v2 crypto schemes (G1 for the unchained scheme, G2 for bls-unchained-g1-rfc9380), backed by github.com/drand/kyber-bls12381 v0.3.4 over github.com/kilic/bls12-381 v0.1.0, as profile.Validate uses it. Encodings generated with @noble/curves 2.4.0 arithmetic; verdicts from scripts/bls12381-go-verdicts.go.",
+ "description": "Edge-case compressed BLS12-381 encodings (valid points, sort-bit flips, identity encodings with stray flags or payload, missing compression flag, wrong lengths, uncompressed forms, x + p, points on the curve outside the subgroup) with the verdict of the Go reference: the KeyGroup of the drand/drand/v2 crypto schemes (G1 for the unchained scheme, G2 for bls-unchained-g1-rfc9380), backed by github.com/drand/kyber-bls12381 v0.3.4 over github.com/kilic/bls12-381 v0.1.0, as profile.Validate uses it. The first 41 encodings were generated with @noble/curves 2.4.0 arithmetic; the rest are two samples of every class of a 41,686-input differential corpus and a 2,765-input adversarial corpus (cofactor torsion, small-order points, points plus torsion, sign edge cases, coordinates >= p, every flag combination, other lengths), on which this implementation, kilic and noble >= 2.3.0 with a length check agreed on every input; verdicts from scripts/bls12381-go-verdicts.go.",
  "vectors": [
   {
    "label": "g1_generator",
@@ -246,6 +246,702 @@
    "group": "G2",
    "hex": "9fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
    "go": "invalid"
+  },
+  {
+   "label": "measure valid.random G1 #0",
+   "group": "G1",
+   "hex": "871170bb82dd2eff22c992f6cbcefaaf1e9771d157f3c400cd9cb7c43b23b573bd5daa4e2d2a0b6302decd7b6473bd4f",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.random G1 #1500",
+   "group": "G1",
+   "hex": "a86f277a0e4c4b8176c44eeb50420c39c43559835e72afe63d4584a5a39418e6aced898928af6ed863bd5dfbf6eab7d2",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.special G1 #3189 (k=0x1000000000000000000000000000000000)",
+   "group": "G1",
+   "hex": "829147d95814aeedf3b5397004c8d32fee3a440f6d1c51383422c92f96014f0caa8333b476b98fb184a50f14312e2cda",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.signflip G1 #3378",
+   "group": "G1",
+   "hex": "a71170bb82dd2eff22c992f6cbcefaaf1e9771d157f3c400cd9cb7c43b23b573bd5daa4e2d2a0b6302decd7b6473bd4f",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.signflip G1 #4128",
+   "group": "G1",
+   "hex": "b7edefc8b85d014ea1b3404e13a4ef58562f287772c4f97dfc915b7a43017c530714ba7d3926336af14b20453dfd5588",
+   "go": "point"
+  },
+  {
+   "label": "measure flags.validx G1 #4878 (flags=00)",
+   "group": "G1",
+   "hex": "086f277a0e4c4b8176c44eeb50420c39c43559835e72afe63d4584a5a39418e6aced898928af6ed863bd5dfbf6eab7d2",
+   "go": "invalid"
+  },
+  {
+   "label": "measure flags.validx G1 #5878 (flags=00)",
+   "group": "G1",
+   "hex": "09c9f05335c6cea52d91ed327475332d9af6a540c8bbb38dec977aba64621b97e9dc32af17378fe5b284efd1072480bf",
+   "go": "invalid"
+  },
+  {
+   "label": "measure identity.payloadbit G1 #7076 (bit 190)",
+   "group": "G1",
+   "hex": "c00000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "measure identity.payload G1 #7321 (random payload flags c0)",
+   "group": "G1",
+   "hex": "c5ced01c69591a4144e6cadf308cdaaa5f45bd378f32b7a2f48f5695fa427122c5fb99007e4a0ac0fdbb50739d551c52",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.validpoint G1 #7375 (x+p)",
+   "group": "G1",
+   "hex": "9efcd08e6ae7afcde4ccfa9fc6cb1a442ae52be0a2d62bb6201a893122f71debf9cf2d2a8320e15a9c81cbedc1eab27c",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.validpoint G1 #8575 (x+p)",
+   "group": "G1",
+   "hex": "bef56240399d668dce0c484d060357e91bc6bc7a34673427043081c9a3f15bc254c262a545947c98ba724963972a7a87",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.edge G1 #9781 (x=0x340223d4.. f80)",
+   "group": "G1",
+   "hex": "b40223d472ffcd3496374f6c869759aec8ee9709e70a257ece61a541ed61ec483d57fffd62a7ffff73fdffffffff5556",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.random G1 #9787",
+   "group": "G1",
+   "hex": "9a28acba703c86776c3c47c7e169528afa54c241f2d6bb6bfbbd4dddc9bf363fbfe4f270312130007077376470d929ed",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.random G1 #10037",
+   "group": "G1",
+   "hex": "9c562cf9757ff6cf2e275e2319715245e260d7f64e627c3f23ce76e3847875eb3e1b86c049b18f65a140cad7752550e3",
+   "go": "invalid"
+  },
+  {
+   "label": "measure offcurve.random G1 #10287",
+   "group": "G1",
+   "hex": "b9a8f1bd22a9661ef998931c4ffc9eb70b66bc54a5148b416e719a10e96a917d0791724b5f03df93178cf396030f4b1e",
+   "go": "invalid"
+  },
+  {
+   "label": "measure offcurve.random G1 #12037",
+   "group": "G1",
+   "hex": "8f240e2108e23a63d6eec367a08f9fe66f787703aa591bc2fbc67d4de88e97d6a0c5cf18de5d5ae58ccb9299277cf9dd",
+   "go": "invalid"
+  },
+  {
+   "label": "measure smallx G1 #13987 (x=100 on-curve)",
+   "group": "G1",
+   "hex": "800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.random G1 #14187",
+   "group": "G1",
+   "hex": "a5160b3e9012a4c01c757eb0d039feb753c9cff400c1a40c4ffb15e3b34eae493296ef7f4b5e8efd39bc6c32cf496f8f",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.random G1 #15287",
+   "group": "G1",
+   "hex": "94c901b2258995398e881a677486c7a03ad70dd952fa96dca1ba718888a5401157a43cecb2892c8392548d416b6c0759",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.torsion G1 #16387 ([r]Q)",
+   "group": "G1",
+   "hex": "89df67fd6d1cbb4a6de2bd519923af7d354579bae3e4be21b60db1b5c33925333eb8dc9e043db2855aa70aee9b42618d",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.torsion G1 #16487 ([r]Q)",
+   "group": "G1",
+   "hex": "a288ca5f12d3a54e31ee6c35f0c27e684c741a56049fc4d41157ed9dd4372081ee0cb102ef525a7afb98db5f9b3bcaa9",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.smallorder G1 #16587 (order | 3^1)",
+   "group": "G1",
+   "hex": "a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.smallorder G1 #16600 (order | 10177^2)",
+   "group": "G1",
+   "hex": "b43a0d4f84024575a885779f6fbd6b5b1ebe3fb06141170c0b21d53bfca0490673d20ff95e5624ddaa662c39c988e5f2",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.mixed G1 #16613 (P+T)",
+   "group": "G1",
+   "hex": "b0e3c067bf97d1aed31cd0050388724bf068360e238409cf395247e37a0b43d6a288e53cd617151e7b774aa37bbb4911",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.mixed G1 #17363 (P+T)",
+   "group": "G1",
+   "hex": "8a571fb0e00c9b92e65d2e026dab6a9d28a3104aa3d5cff8dc976b3f4dedfcf727c41fded27f81872138eee623dbabef",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.signflip G1 #18113",
+   "group": "G1",
+   "hex": "8d19966097c60f492313ecde40ec3ab5565b630a33b2da7c78a860a295f39b6c62d79bacb7e49649737d06d5e89d9328",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.signflip G1 #18363",
+   "group": "G1",
+   "hex": "ae92306deb250866507391839e433dcf8400d9baa0ea59325939a047a03cfca02db49a4ba956409f5e00c75cafbef1cd",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.uncompressed G1 #18613 (ZCash uncompressed 96B)",
+   "group": "G1",
+   "hex": "071170bb82dd2eff22c992f6cbcefaaf1e9771d157f3c400cd9cb7c43b23b573bd5daa4e2d2a0b6302decd7b6473bd4f07a863c5cdb1c2ed6c45aeb06b1d72413e277881715274620384c01e2bea1fb957e516d1520672d0f37bc58effd8003d",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.uncompressed G1 #18638 (ZCash uncompressed 96B)",
+   "group": "G1",
+   "hex": "08ac11c2c551bdfba864a883910eaf2204facf075e9524c3e3c9e89a35300b2e246658a69d240c035c808d30abc53b0e1391f3450ae61a9e157f258e67dff1b1fb7383bd4511473edcc2f9bfed945fef41cdf8be659f9516d44ecc645dc247eb",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.trailing G1 #18664 (valid + 1 byte)",
+   "group": "G1",
+   "hex": "871170bb82dd2eff22c992f6cbcefaaf1e9771d157f3c400cd9cb7c43b23b573bd5daa4e2d2a0b6302decd7b6473bd4fdd",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.trailing G1 #18689 (valid + 1 byte)",
+   "group": "G1",
+   "hex": "a8ac11c2c551bdfba864a883910eaf2204facf075e9524c3e3c9e89a35300b2e246658a69d240c035c808d30abc53b0e6c",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.truncated G1 #18714 (valid - last byte)",
+   "group": "G1",
+   "hex": "871170bb82dd2eff22c992f6cbcefaaf1e9771d157f3c400cd9cb7c43b23b573bd5daa4e2d2a0b6302decd7b6473bd",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.truncated G1 #18739 (valid - last byte)",
+   "group": "G1",
+   "hex": "a8ac11c2c551bdfba864a883910eaf2204facf075e9524c3e3c9e89a35300b2e246658a69d240c035c808d30abc53b",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.othergroup G1 #18764 (point of the other group)",
+   "group": "G1",
+   "hex": "8bdb7e83246d78578d16e5301625e337f51bffe9fb8130640a473dd672721f1d726d0ad1c03fab6db5c34b588d74a386117af9503fed0154d1d5e0bbe2008b010bcecf1e52abe12a65aaad565ced01e12ee02e25920736688e50712d82b0e492",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.othergroup G1 #18774 (point of the other group)",
+   "group": "G1",
+   "hex": "8176c82448a2a22e52fc8fbbb03def5ac0d38d709664e44686c087ce8ee217e7e7946893678f14d945d8305916bca009153acaa13e1c9ee5d8e51b59dbf0d42a13e31419272e551ff6eeeb834a18b22f14d96473b1e32de68472877cbff2067a",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.other G1 #18784 (zeros len 0)",
+   "group": "G1",
+   "hex": "",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.other G1 #18809 (c0+zeros len 95)",
+   "group": "G1",
+   "hex": "c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "measure drand G1 #18840 (drand mainnet default (pedersen-bls-chained))",
+   "group": "G1",
+   "hex": "868f005eb8e6e4ca0a47c8a77ceaa5309a47978a7c71bc5cce96366b5d7a569937c529eeda66c7293784a9402801af31",
+   "go": "point"
+  },
+  {
+   "label": "measure drand G1 #18848 (drand pedersen-bls-chained test beacon key, compression bit cleared)",
+   "group": "G1",
+   "hex": "122a2e93828ff83345bae533f5172669a26c02dc76d6bf59c80892e12ab1455c229211886f35bb56af6d5bea981024df",
+   "go": "invalid"
+  },
+  {
+   "label": "measure random.bytes G1 #18856",
+   "group": "G1",
+   "hex": "c7c80e66cb91c3bb52e043d80aa247106ef572bcbb6ff4685ae20d51b7f001c30d4bf061525172ba6e373ba0d8ae878e",
+   "go": "invalid"
+  },
+  {
+   "label": "measure random.bytes G1 #19606",
+   "group": "G1",
+   "hex": "a0f3213dd5b44225a795e2d13689c19155667fa83780741acd50fb40766cc3a84c488f4b8d1a7b55447de636cf98eace",
+   "go": "invalid"
+  },
+  {
+   "label": "measure valid.random G2 #20358",
+   "group": "G2",
+   "hex": "94b4242bc518b0b3d54a1d46e17540359fce04f7364ad4e8370fee21f83655364ff2dd6460af84aa52e0d6e2d05fc70309f6b28c78f224dc4c2d8c296d1ec24179c2b68b745610c9ff12774c871db3a9c5c48bbb8d05257926106d749796bcd3",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.random G2 #21858",
+   "group": "G2",
+   "hex": "8cf291c9b004a8725184fac3a0105ea640927e8e920b73dc94ce7243577831b3b7801290e10b3895596c07244c23877a01bb6b96b2533451b07b99618e4c5d77405cfed19c3461da77bd4cc4fcdc7af237285de2ce7f1ed81d5d14fb327b0e75",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.special G2 #23547 (k=0x1000000000000000000000000000000000)",
+   "group": "G2",
+   "hex": "b6250fb73accfd5bbfd0080444934dfdb5e5ade2e5102b22e719f6b577440a8efe809564464b003287f8089f1df81937155e8535335be4d2f563da0c453c008ebcc7b51de3dbc3eb326fb623a70c8be9398e66a3916ee25ada32c851f98a5aad",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.signflip G2 #23736",
+   "group": "G2",
+   "hex": "b4b4242bc518b0b3d54a1d46e17540359fce04f7364ad4e8370fee21f83655364ff2dd6460af84aa52e0d6e2d05fc70309f6b28c78f224dc4c2d8c296d1ec24179c2b68b745610c9ff12774c871db3a9c5c48bbb8d05257926106d749796bcd3",
+   "go": "point"
+  },
+  {
+   "label": "measure valid.signflip G2 #24486",
+   "group": "G2",
+   "hex": "801b046bb35b2cc0e92ca89d360ca509aefdeb32386a4c003c7b8a7584b6924c614b9a807f961703da13116d7cc290c50b80999704dd94dd851128c89770bfc645f69d1a116b1ccbe8eaea947cdca19bc259991f71469a821ec94897c6d144b8",
+   "go": "point"
+  },
+  {
+   "label": "measure flags.validx G2 #25236 (flags=00)",
+   "group": "G2",
+   "hex": "0cf291c9b004a8725184fac3a0105ea640927e8e920b73dc94ce7243577831b3b7801290e10b3895596c07244c23877a01bb6b96b2533451b07b99618e4c5d77405cfed19c3461da77bd4cc4fcdc7af237285de2ce7f1ed81d5d14fb327b0e75",
+   "go": "invalid"
+  },
+  {
+   "label": "measure flags.validx G2 #26236 (flags=00)",
+   "group": "G2",
+   "hex": "01cc395abf2e04a1141cbf097da1f9507fda820a609ca3c00876d02029aabdbcdbd6da39d6bb30548776be56755c7bd3109e87f98aa33f2ccd81e669a58ddb2b1cd167dfbd784eeb788acbf356f8e66b6d58f051cc6ac5beb1e9b4f50517fe8e",
+   "go": "invalid"
+  },
+  {
+   "label": "measure identity.payloadbit G2 #27626 (bit 382)",
+   "group": "G2",
+   "hex": "c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "measure identity.payload G2 #28067 (random payload flags c0)",
+   "group": "G2",
+   "hex": "d9e701bad6321f0d988c35f224968be5faae3f48786d609ea760a35a546734e8ac59a9f3b0cbcd178abd545f7bfd9053316e4a5cfa6191c5847e221123b2c886b18ce60036ec541b4c3cf5b84ab06c07afe38c1877ab354fd53dea98cc276434",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.validpoint G2 #28125 (c1+p)",
+   "group": "G2",
+   "hex": "bd64d5b490871b645e784d58053a2662642fc04bb3b1bdbe3ca4af274ab4fbf85d3ecee523c2d220b784eb11333e6e40041f444f98f30d27ec19ddb909258d31195b848e9f3e9ada3124116b071f96513d01eeb151053050c53b45bbec09b42d",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.validpoint G2 #29726 (c0+4p)",
+   "group": "G2",
+   "hex": "819b4cb2af167b7a964bf01f183fa97d54435dd313ed43d0bd45ababb3a24206d4ce86124788f9bff5db879ba67e9be87240eb82ea20e83859380041848447221fc8ede40841c8d0e2a7cf494b0356b4cdc77098182eace71756d4c86823a0eb",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.edge G2 #31341 (c1 edge c0=1 f80)",
+   "group": "G2",
+   "hex": "b40223d472ffcd3496374f6c869759aec8ee9709e70a257ece61a541ed61ec483d57fffd62a7ffff73fdffffffff5556000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.random G2 #31354 (c1>=p)",
+   "group": "G2",
+   "hex": "bc610c14aeb30bd55782bd160300cc263ca659dd2fc86a7320c682159bcbb7a8741d2c11152829581bfef2219fc8c31a045f0065678cc13da33deb72c550671cfdef758cc8b6c4e06e2bfb737ab486ed1b5750b3d6752fd60eeefed7afed6ea3",
+   "go": "invalid"
+  },
+  {
+   "label": "measure xgep.random G2 #31604 (c1>=p)",
+   "group": "G2",
+   "hex": "9db41dc8a85be47e782628f7a3fb1e2d41ae92fe6f3ea47ebed7aba132f38067f655eb7b18bd9fe11755be1d3d06b8b60ad5ee7dd452826b165372181599d8543cdd85ca15319b302c116fed3d206171be20a4527f780913747b9ce230c0bcfe",
+   "go": "invalid"
+  },
+  {
+   "label": "measure offcurve.random G2 #31854",
+   "group": "G2",
+   "hex": "857cf5757c9a5c918a4e5619e9ba50bbc016ca8b4ea4380bfa887feb84705bbbca672919062066510687573f6c62a13302e5fb8954b400e8bb8185cfc0150a0de0c817629fadd36c7856035495ff947b3f43cf27e5fb99143e6c46d76096a204",
+   "go": "invalid"
+  },
+  {
+   "label": "measure offcurve.random G2 #33354",
+   "group": "G2",
+   "hex": "b94391ca258648f81fcfbf265e7ea88836aac24c2fd9cf42a524e86ae9602592d64b5a5482e6e2dd35aa55042fdc141c10f97e19b29323d510b371e5f63236a8f288b080ed1079f6e3f0e031b4f144d7b8ab6ef88564b323b1478c258cf5250b",
+   "go": "invalid"
+  },
+  {
+   "label": "measure smallx G2 #35054 (x=50 (real) on-curve)",
+   "group": "G2",
+   "hex": "800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.random G2 #35254",
+   "group": "G2",
+   "hex": "a12448180acd917e36d5442a96623d264793d9456dcdce6c09abde7f71ea9fea51eb49082a27a54d3f1b6bef11b0febf0a60d48ea2fcaab8382d8195d66ec033823c4d52dfb3309fe30e72a535b808b3f1db88da411467b4e15f837f8f4e1561",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.random G2 #36354",
+   "group": "G2",
+   "hex": "b94355df63d233136f3a091b8374362a71260d6ac79e9dc1af8d19e3caa988a134e4a6c2149050d1d5d703b744abf050119a3b43311f4f04bfac0d691073b6136ef716a2b7bc64909b808aa7cd9afb800ba032997062518129696ea11e50b371",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.torsion G2 #37454 ([r]Q)",
+   "group": "G2",
+   "hex": "a4c423d43d8b223718ffb8ce126276a6955e8437cc9229f13c61ef429c018c0055a915c1cd5e8d3af23b3632ccdd3e8707840eded25896a45ffa11a8dcddabf5eb9aaa812323da75581c98f119c9aa1176e8cf4cc7bb0239bb380d89c9bb91a1",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.torsion G2 #37529 ([r]Q)",
+   "group": "G2",
+   "hex": "aa3ce5b6dac1100ebdbce9167f76f7f1f0e1222f6f1a843c066b3cc074c2aecc65e6af58fe397b5ebfb8c8e30cffc602102e5029209a8e41813fc23bbd7b5a9096ce4e16b88287e38cbbcf4c63296d9a367abb2446ef30e359578252bd7c010a",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.smallorder G2 #37604 (order | 13^2)",
+   "group": "G2",
+   "hex": "b22c6ad97b36430e70b87f8d4eaac5003ac6b9b60cae3ee29a3b0870be6e9a94a8925515bba4f6a956a33bc66b1cb98c13933f98c70ab0f4e6809d0a7c57420877f42dd9e1fcb4c01e786cd57bbc6bacea92547b5d5036c172d53c6a6bc9be5e",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.smallorder G2 #37619 (order | 11953^1)",
+   "group": "G2",
+   "hex": "a432c8c2d2668ebd3f7af5564b52f69e35994137aee72da537efdd005cc580a66265305610dc4f580bc1a6be875ae9b20b2bf3bc77887ce68b0c901518bf966b93ca8e7478d9c047405d70db0d1fc31a646d1202a5924fb10564edfa546362a5",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.mixed G2 #37634 (P+T)",
+   "group": "G2",
+   "hex": "addfb7fdb45f49c4a4969e96581c5558c056c4434bc295eb9735eb80e52b9d88e96a98d2c30fb652051f5858286e771603e45b0b4b3177295ade6ad7779ab286694b5fa64e01f17d30c75ccc4f165bd06e249a5b4020ec8a8b6d6f68a6c6baff",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.mixed G2 #38384 (P+T)",
+   "group": "G2",
+   "hex": "ac8ca3abdede5a74b157d785f8ba83d45e320c1b93470fb0b70c0641ba6fc4b32e860fadbd9a440c11d1c8cf6d45f2110522b32938a960c27e966e8ed882c17f06587fd42bde7986628ee8a2aad7d8a0ad52a815aec0ee0f0b57c74959986512",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.signflip G2 #39134",
+   "group": "G2",
+   "hex": "87f4bac5d974187cc7fa63653ff1318235ebfbbc1684758a4e237b735dc5824e8ff1743409c7cf61dcce901abae4edf6071a199be086e082cf62ac63872ca40539e2f4b2689fc2d190e24aa3ff0e178561c1f5d856c83ad0d140abd9005168da",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.signflip G2 #39384",
+   "group": "G2",
+   "hex": "91f62644195a518c94ffdecf420021d7eb722666220ec0b8cb9d0423ab020f7d4fb940b9c1dbb4d746f1c316dec486240c1cd632102ac7783bde06ac78537e3a1a71f40f43ecb741dacf1b4839edc9b9843fbbe90ab3a782eae35618d5c51d63",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.imzero G2 #39634 (Im(rhs)=0 Re(rhs) QR)",
+   "group": "G2",
+   "hex": "93d11cbc4be6e4dea336293d8d87f7b0c5f94d9941777581efb1edc24c12eca832597d12697503613d85b6355146c12f132d891f2b1ebd8a0cf46f8f7430b8e236a389d08ddb86ac0136d092e7c8533bce9c895358fa648f9bc09359c1f1feee",
+   "go": "invalid"
+  },
+  {
+   "label": "measure nonsub.imzero G2 #39784 (Im(rhs)=0 Re(rhs) nonQR)",
+   "group": "G2",
+   "hex": "9133e6105d70b5388fcdaaf749f5d652092dc9c1a75b3239085f83742af891f2b132384f4011fe32b61551cc155e0f4b132ddb712d4d31fe8dbcc6823ad872cbe28bbbc28f6cd525db7e07f08b7996c9b63a1d2e21ef8c4c9735fcbc88487a43",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.uncompressed G2 #39934 (ZCash uncompressed 192B)",
+   "group": "G2",
+   "hex": "14b4242bc518b0b3d54a1d46e17540359fce04f7364ad4e8370fee21f83655364ff2dd6460af84aa52e0d6e2d05fc70309f6b28c78f224dc4c2d8c296d1ec24179c2b68b745610c9ff12774c871db3a9c5c48bbb8d05257926106d749796bcd307da8f503a91edb6a38421d7c3da802fd49a85a9f36f5ea51aacf896959f80fc6db6b31cf8205b99347c436bcb2146470f2faace3f20e4c88c86e942b9e39dda22341d5130ea916c7e7c45a15aac8b90305ad985b0646ea128ac4282df4bba81",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.uncompressed G2 #39959 (ZCash uncompressed 192B)",
+   "group": "G2",
+   "hex": "1011ef186aae9fbad7e8d9c160a53a1d4dd976c886c486b599bd5c66358a132e8b69ef121024337f9151cd7a72877fbf1939707cb0401405d549f653cde8b8fff384ee2f94c9b0e418d48c145bcb5d7276d51368983fc0c4dbcef3c28763d1d4080e8af64f7ba42cfebcfe8cd9b83f2eb62b13dc58c11e91d32ed10dafe3ba3a344564f6f47157f8d7f2dafecb0a9504092c5ad5d24d1c41254d6d17ab96473c9984b1a2c3548d34cc9fa4c80d2c77669a107b675005c48f2284448684dbb888",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.trailing G2 #39985 (valid + 1 byte)",
+   "group": "G2",
+   "hex": "94b4242bc518b0b3d54a1d46e17540359fce04f7364ad4e8370fee21f83655364ff2dd6460af84aa52e0d6e2d05fc70309f6b28c78f224dc4c2d8c296d1ec24179c2b68b745610c9ff12774c871db3a9c5c48bbb8d05257926106d749796bcd36a",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.trailing G2 #40010 (valid + 1 byte)",
+   "group": "G2",
+   "hex": "9011ef186aae9fbad7e8d9c160a53a1d4dd976c886c486b599bd5c66358a132e8b69ef121024337f9151cd7a72877fbf1939707cb0401405d549f653cde8b8fff384ee2f94c9b0e418d48c145bcb5d7276d51368983fc0c4dbcef3c28763d1d4e0",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.truncated G2 #40035 (valid - last byte)",
+   "group": "G2",
+   "hex": "94b4242bc518b0b3d54a1d46e17540359fce04f7364ad4e8370fee21f83655364ff2dd6460af84aa52e0d6e2d05fc70309f6b28c78f224dc4c2d8c296d1ec24179c2b68b745610c9ff12774c871db3a9c5c48bbb8d05257926106d749796bc",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.truncated G2 #40060 (valid - last byte)",
+   "group": "G2",
+   "hex": "9011ef186aae9fbad7e8d9c160a53a1d4dd976c886c486b599bd5c66358a132e8b69ef121024337f9151cd7a72877fbf1939707cb0401405d549f653cde8b8fff384ee2f94c9b0e418d48c145bcb5d7276d51368983fc0c4dbcef3c28763d1",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.othergroup G2 #40085 (point of the other group)",
+   "group": "G2",
+   "hex": "a1ece8f99feffa8db90360f583fc640830de065823159b63ad666613be62660fdc40bd6e69cb81b042cc110995822686",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.othergroup G2 #40095 (point of the other group)",
+   "group": "G2",
+   "hex": "9158b831b8a65ef6bf9c0c32470b8a2adafa7d77c540575d22a224e23cc0d136497162ff7b71ab085f908ea16c234221",
+   "go": "invalid"
+  },
+  {
+   "label": "measure length.other G2 #40130 (c0+zeros len 64)",
+   "group": "G2",
+   "hex": "c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "measure special G2 #40158 (first a0 rest 0)",
+   "group": "G2",
+   "hex": "a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "measure drand G2 #40172 (drand fastnet (bls-unchained-on-g1), compression bit cleared)",
+   "group": "G2",
+   "hex": "20b862a7527fee3a731bcb59280ab6abd62d5c0b6ea03dc4ddf6612fdfc9d01f01c31542541771903475eb1ec6615f8d0df0b8b6dce385811d6dcf8cbefb8759e5e616a3dfd054c928940766d9a5b9db91e3b697e5d70a975181e007f87fca5e",
+   "go": "invalid"
+  },
+  {
+   "label": "measure random.bytes G2 #40184",
+   "group": "G2",
+   "hex": "8ba8c87aa87c10d66f982984297d3c45a7502840bcd484fa494e0cc70217ffc940561a2f60ff381a6b8ef78359059045e55003d3426231824b69f06a75788e697d02ad7ff558b0a847279525c84c4bf69a6f1fac6cb8c962b74de16547c64893",
+   "go": "invalid"
+  },
+  {
+   "label": "measure random.bytes G2 #40934",
+   "group": "G2",
+   "hex": "6c15a12feae569813adb66ec9e99cd94851893e6c3ccae77f57c3da44b5a0ed54c6ddb5b54e53ba85ba1159d79cf9d3eed218700f57d44c199275b9b167a1c5e9b0c355b91589e8dda4d233e9b748dc15c37e1bf67d966dae35eb660ae258e02",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.eigen G1 #257 (l=10177 eigen, sort flipped simK=0 simN=0)",
+   "group": "G1",
+   "hex": "9392cf2430b28c730a73decc83fcda30c3e16c8c663522328f3c146252c6befa3b92d2ac662a6cfed4bf20f3a0f1b033",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.full G1 #131 (l=11 all elements simK=0 simN=0)",
+   "group": "G1",
+   "hex": "b494bcab2527546aba307599495ea7be2556bd83b99d60f1284222ef4243fdc54f72df0c6b5e65a041539d8a436ed91a",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.fullmixed G1 #4 (G+T l=3)",
+   "group": "G1",
+   "hex": "9200ed0e311e2c8b88d49a3c846c293cf36ea2b61d48eb32d08896cbfad3dfb3034ba49572500bf063ae9157ea06503e",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.fullmixed G1 #132 (G+T l=11)",
+   "group": "G1",
+   "hex": "98f830c824b50c5cf2894a25a43ff4d03f679101af5d5024dfd02b648224753d686d7d943b526f738ddd8e9034fd8d6c",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.noeigen G1 #7 (l=11 (no eigenvector) T simK=0 simN=0)",
+   "group": "G1",
+   "hex": "a0d1d1ffc09ffab044764f30fc9a110ca90d1d61505636cedbd76e024f03b4e562dd6beaa4b5b5435f020bcad67a1c12",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.noeigen G1 #265 (l=52437899 (no eigenvector) T simK=0 simN=0)",
+   "group": "G1",
+   "hex": "a49796c116edb60a81381cf0b8e3d201f85955b1044e9b9b835eedb762eab7ee1e663f65c798954833e99dbecb8c633f",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.sum G1 #271 (sum of one torsion direction per prime simK=0 simN=0)",
+   "group": "G1",
+   "hex": "93d1046cfbf4e469aad7b763d5c03cb62eca00054b8961e73daf4494dcbbab080b1a7ff9d3aed062bed7ef060630f45f",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.sum G1 #290 (pair 2+5)",
+   "group": "G1",
+   "hex": "80ac79603f1c4154f19a3024948d48241d0b0b376c10551b8f3553517537af956fcd5ec73160e874c9a92d153e37b1b1",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.eigen G2 #309 (l=13 eigen mu=7 simK=0 simN=0)",
+   "group": "G2",
+   "hex": "aff113772534c26a8378a6bb6158bf58832f3ae67c3859016b02f7c1102f63c37e2822ad624249273048e65941967f4a132fd2a503aad25a2c12cfba968208420e4a749b71dcb48b6515af61a89d5dcdc1daa58556d93de6425b5dc0351589dc",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.eigen G2 #1716 (l=11953 eigen mu=3605 simK=0 simN=0)",
+   "group": "G2",
+   "hex": "a604d56bd522e8d08ec33463eba605d36da89056b9ee415b03e4bad79fc2d7bfe1258ca5dec597a22484d25d28e6088705adee0798db2e5a8b8b596201820444db44d2536f14b2240b0d377d44338810cbe2ddb2f5f717c7b71b00559ff3345a",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.full G2 #315 (l=13 all elements simK=0 simN=0)",
+   "group": "G2",
+   "hex": "97f85c67f5b6b7d757891ab6fea9cff6446d5ed3fc0553a078ba26fd2f38a6134798ed4b82c0da8b1c1369ea5262c5cb1062c9f535dae4df9074685f97ab50ab19cd1c5979edc1fb169cfbe5136e88d6d32d9eb0cfbffa8909f62854320ef4fb",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.full G2 #1017 (l=23 all elements simK=0 simN=0)",
+   "group": "G2",
+   "hex": "ab838ed7d3512b23ef282e5065e06cc553051d39eccd728bb61d4f66daaffa20a0befe000eb160e219914fe91de0b78315f14302364d801875634573bc621d0190032de4c583d981545836c87e46a2c7f59c6420c6b435fd220e21b181c9dccc",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.fullmixed G2 #316 (G+T l=13)",
+   "group": "G2",
+   "hex": "8a2be91cd94b77dc0efe9c7f9e794d992dd9f0fe39397b57893f0b54c9ccbd7aad525dcda6ff349bb84d92af084c51000dc0023cff67aeca7bdeb640f034f71823c34cbd18257a1360720c8641e420907573c5c76cbe39eca19e1bb26b3d719e",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.fullmixed G2 #1018 (G+T l=23)",
+   "group": "G2",
+   "hex": "953b93e0e8570e3d64ec1fced49ba16d1ca234eb453a4a24b386a705660213698100c20733f901b85f871acb43b589621428776a8c86e38aa0f8c9e75f3b9ea11068ac72b3c7a5c4ca87ab7225d9ae66424b2443cd50161f91d53699ae94c9a3",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.noeigen G2 #651 (l=23 (no eigenvector) T simK=0 simN=0)",
+   "group": "G2",
+   "hex": "923f01c22fba16ed19c6308005e3c39f73f5e5713e948faf4a636c8893f702a83278fe6097a651af7bb68f405b48f0c711cc8a1d961dee48fe32a3667f2b08b0368bf805d3519904267298eb9b6d18f4d1b2785d9f5d017097e910d7031260ce",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.noeigen G2 #654 (l=23 (no eigenvector) T simK=0 simN=0)",
+   "group": "G2",
+   "hex": "af7bd66d859d4de976b3092d2a46a60386c05e3ffb942ede1dfb0495da11d7a226e317498db6a7ca7ca633bb6745a73c0b9a97582d0f06911421ba5aefe14032ebcec164381b45c689f5c02c8634c7f89f2e50e9868f21b203a8b7bc6998488d",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.sum G2 #1725 (sum of one torsion direction per prime simK=0 simN=0)",
+   "group": "G2",
+   "hex": "b7b9f23c7e0b126d2ac71a9ff6e7fdb30af3791fadc87974d274c28fdd67d59ecb0b2a96f433ac0bfc03d4ddfa0fc89415715fedac539bdaba26d2181c5dfccdef3f61a91f138de0811440173440b43fc3b9c8074c280355c97162ac636bf9e3",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.torsion.sum G2 #1740 (pair 2+3)",
+   "group": "G2",
+   "hex": "8e667a920c70e00936f9ed5b536a6ca478a88a20bb69ccf8dd3b1274707c2e2b7f7daf152ac4de4db65648439667621e0a853b7cb3e298b0d4689e89190506d3ddb6ed44f7f0e3e14935ce0b1c9f1e81f7c8e8b5239d58353d58cc4498ba036f",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.sign.y G1 #1851 (y=HALF-23)",
+   "group": "G1",
+   "hex": "8310305dfc42058974023bc4cdca468c8591c1d7b74b4296a92346826b62cf4a384fccb560e26a9e6f804756097b51e6",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.sign.y G2 #1947 (y=[0,1])",
+   "group": "G2",
+   "hex": "8c2b2b8487f8e8d648e4f7905c0943b14474f62dd4726f98e902923c7fa2518eab1519d0cd9eef39aad762206d086ced100fca6a493cd9f5ca905c1d4f7d1737991b651d141621b82918a8516e31553366ae29ee53ba1fd7fe5cb394b16c8a79",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.sign.y G2 #2118 (y=[HALF+5,1] sort flipped)",
+   "group": "G2",
+   "hex": "b858dd69aa80460709f8ffedfb03e9cd5c6f6cd6b1b9feada0cfdc2ec715b7416bb7e81becbc613b827dce052d32ff230dfef01906a233ada394d5872609fb41f54723f03a7f6aa16c833250900c81e55703c78fdf97384baaf547af693831c5",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.flags.payload G1 #2385 (byte1 0x80 byte0=0)",
+   "group": "G1",
+   "hex": "008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.flags.nocompress G1 #2481 (valid x, flags 0)",
+   "group": "G1",
+   "hex": "01dfb356a78cbab50a448b0ac960d6b1a778e29c0d3e5428f724779aef9a3e5b88a5b7371b1686f98fa3ae26520dbc03",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.flags.nocompress G1 #2483 (valid x, flags 40)",
+   "group": "G1",
+   "hex": "41dfb356a78cbab50a448b0ac960d6b1a778e29c0d3e5428f724779aef9a3e5b88a5b7371b1686f98fa3ae26520dbc03",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.len.uncompressed G1 #2485 (uncompressed valid point flags 0)",
+   "group": "G1",
+   "hex": "15de56ebc691250c312e452599e27fc74a2f77efa490962a2c7f20695f2ba8739a97f1e0e2504b45661d37e7fc7f2ba508054d42daf2b8ec3058dbd45a1b18d3494cdeb0f0e402576ca0f77c9f05adaf649f8bd507d1e353db3693a03acd6c2e",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.len.uncompressed G1 #2489 (uncompressed valid point flags 80)",
+   "group": "G1",
+   "hex": "95de56ebc691250c312e452599e27fc74a2f77efa490962a2c7f20695f2ba8739a97f1e0e2504b45661d37e7fc7f2ba508054d42daf2b8ec3058dbd45a1b18d3494cdeb0f0e402576ca0f77c9f05adaf649f8bd507d1e353db3693a03acd6c2e",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.flags.payload G2 #2622 (x=p byte0=1a)",
+   "group": "G2",
+   "hex": "1a0111ea397fe69a4b1ba7b6434bacd764774b84f38512bf6730d2a0f6b0f6241eabfffeb153ffffb9feffffffffaaab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.flags.nocompress G2 #2750 (valid x, flags 0)",
+   "group": "G2",
+   "hex": "174bdb6ef52391d465e0b59fba6ca3f8275da375c9d17b256930c3d7216de2dcafdef8f5f6e8733a43f0e6b55866d95d0941f417a3132c21ac96cda3a17c1cc8ace223795d830f76a39a72a89478f0b185b37639a057a1978317d6e2fa194878",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.flags.nocompress G2 #2752 (valid x, flags 40)",
+   "group": "G2",
+   "hex": "574bdb6ef52391d465e0b59fba6ca3f8275da375c9d17b256930c3d7216de2dcafdef8f5f6e8733a43f0e6b55866d95d0941f417a3132c21ac96cda3a17c1cc8ace223795d830f76a39a72a89478f0b185b37639a057a1978317d6e2fa194878",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.len.uncompressed G2 #2754 (uncompressed valid point flags 0)",
+   "group": "G2",
+   "hex": "19fc38b2d38833f7518c54fa75e7b138e74961aada30559cbdef4656484952fe81c81e85cdd5d261d49bb48ad8d422561356279532756b72a7c47e1071c3a96f4490de213f2582de914082a075ca71cba5ea3894122e3779b4de2616eedab633164c9c19ad855fc986d12ab4e42d120eb859b36c43ab817e7ef7de1c74acf65fc91c374678ac90dd1194fde9eef90018122ce65b7b12246476e5277cefdd3ac5e6491a2f273ab7664bdd83d083c5612c157bb11cecb7777fd638c790392708ca",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.len.uncompressed G2 #2758 (uncompressed valid point flags 80)",
+   "group": "G2",
+   "hex": "99fc38b2d38833f7518c54fa75e7b138e74961aada30559cbdef4656484952fe81c81e85cdd5d261d49bb48ad8d422561356279532756b72a7c47e1071c3a96f4490de213f2582de914082a075ca71cba5ea3894122e3779b4de2616eedab633164c9c19ad855fc986d12ab4e42d120eb859b36c43ab817e7ef7de1c74acf65fc91c374678ac90dd1194fde9eef90018122ce65b7b12246476e5277cefdd3ac5e6491a2f273ab7664bdd83d083c5612c157bb11cecb7777fd638c790392708ca",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.twist.smallorder G1 #2763 (twist point of order 29833)",
+   "group": "G1",
+   "hex": "822f303ed3ad9d6486f1c17e2c98cd0cb38863560cf5f553bf1d213539b8b3293ef67bfca7b9c8c4208e3d5dbb5323a6",
+   "go": "invalid"
+  },
+  {
+   "label": "adversarial adv.twist.smallorder G1 #2764 (twist point of order 29833)",
+   "group": "G1",
+   "hex": "a22f303ed3ad9d6486f1c17e2c98cd0cb38863560cf5f553bf1d213539b8b3293ef67bfca7b9c8c4208e3d5dbb5323a6",
+   "go": "invalid"
   }
  ]
 }