wycheproof
wycheproof copied to clipboard
Project Wycheproof tests crypto libraries against known attacks.
I have recently been importing a subset of the Wycheproof test vectors into the test suite for our in-house JWT library. In doing so, the JWK key format has been...
Wycheproof defines a tri-state `result` value, with "acceptable" alongside "valid" and "invalid". It would be nice to programmatically dispatch on these so implementations can test that they accept or reject...
The OpenJDK test setup code removes all security providers and then tries to re-add specific ones based on dynamic class loading. This no longer works with the latest JDKs because...
Libsecp256k1 implements a variant of ECDSA used by the Bitcoin system (and many other things now) which eliminates malleability by requiring s to be in the lower half of its...
Whycheproof test vectors are *amazing*. But to be of any use, people must know of their existence. When I first checked out Whycheproof, this list didn't include EdDSA, which my...
Hello! The README clearly states how I can run the Java tests with Bazel, but it does not say how to run the Javascript implementation of the tests. So, how...
I notice that it has been almost two years since this repo had a commit added to it. Is it possible that there might be a non-public version of this...
https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009457.html has the precise details, it'd be great to add these to the wycheproof tests! Commit that looks relevant (which has a test case): https://git.lysator.liu.se/nettle/nettle/-/commit/2397757b3f95fcae1e2d3011bf99ca5b5438378f
For more security, can you change old spongycastle (based on old bouncycastle) to bouncycastle? - https://www.bouncycastle.org/ - https://www.bouncycastle.org/releasenotes.html - http://www.bouncycastle.org/latest_releases.html - https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncy%20castle - https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncycastle - https://www.cvedetails.com/vulnerability-list/vendor_id-7637/Bouncycastle.html
If we wish to use the Wycheproof tests in another library, is it sufficient to create a README.md file in the directory containing the JSON files that includes the Apache2-required...