Hacker GitHub

← All repos

C2SP/wycheproof

View on GitHub ↗ ★ 3,136 Go

Project Wycheproof tests crypto libraries against known attacks.

17 mentions on Hacker News by 14 people: 5 stories, 12 comments · first 2016-12-19 · latest 2023-08-30

Mentions per year 17 mentions · busiest year 2017 (4)
20082026
AllStoriesComments NewestTopOldest
  1. …get them to fix their front page so people know they have EdDSA test vectors, that would be great. https://github.com/google/wycheproof/pull/79 If I had known about those, the whole debacle could have been avoided. Heck, I bet my hat their…
    comment by loup-vaillant · 2022-04-20 · in Psychic Signatures in Java
  2. …such as converting to Montgomery form and back, and test with Wycheproof’s Ed25519 test vectors. https://github.com/google/wycheproof/blob/master/testvectors...
    comment by loup-vaillant · 2021-11-30 · in An Illustrated Guide to Elliptic Curve Cryptography Validation
  3. …on. I guess they too were busy. [2]: https://monocypher.org/quality-assurance/disclosures [3]: https://github.com/google/wycheproof/pull/79
    comment by loup-vaillant · 2021-11-30 · in An Illustrated Guide to Elliptic Curve Cryptography Validation
  4. …[2] https://github.com/dalek-cryptography/ed25519-dalek/issues/2... [3] https://github.com/google/wycheproof . Wycheproof has tests for EdDSA malleability, but it only tests if s is not properly range checked.
    comment by cryptbe · 2020-04-09 · in Cofactor Explained: Clearing Elliptic Curves' dirty little secret
  5. The author found the bug inspired by: https://github.com/google/wycheproof (it's in the thread of the original tweet, though the thread is in Italian: https://twitter.com/asanso/status/1214450115777351681 )
    comment by ecesena · 2020-01-07 · in The Curious Case of WebCrypto Diffie-Hellman on Firefox
  6. Yes, for known attacks. Unknown attacks are harder. https://github.com/google/wycheproof is a Google's effort to test for known attacks. If your crypto library does not mention Project Wycheproof or known attacks listed there, ignore it.
    comment by sanxiyn · 2019-05-25 · in Does open-source cryptographic software work correctly? [pdf]
  7. https://github.com/google/wycheproof
    comment by based2 · 2018-08-31 · in A cross-platform cryptographic APIs that are hard(er) to misuse
  8. …check for that vulnerability. Footnotes: 0: Wycheproof is the closest I've seen to this ideal yet: https://github.com/google/wycheproof
    comment by jf · 2018-04-03 · in MesaLink: A memory-safe and OpenSSL-compatible TLS library
  9. …crypto tasks. If this sounds exciting, please send your resumes to thaidn@google.com. Cheers! [1] https://github.com/google/wycheproof [2] https://github.com/google/tink [3] https://github.com/google/wycheproof/blob/master/doc/bugs.md…
    comment by cryptbe · 2017-08-17 · in The Matasano Crypto Challenges (2013)
  10. See e.g. https://github.com/google/wycheproof Fuzzing tests can also uncover weird bugs and edge cases that can lead to vulnerabilities.
    comment by arnarbi · 2017-02-15 · in Show HN: Monocypher: a small, easy to use crypto library
  11. …testing for and google recently released a framework that checks for common implementation errors: https://github.com/google/wycheproof
    comment by benmmurphy · 2017-01-30 · in Cryptkeeper sets the same password “p” independently of user input
  12. They did an amazing job at commenting the code. Example: https://github.com/google/wycheproof/blob/master/java/com/go...
    comment by r3bl · 2016-12-19 · in Wycheproof – Tests that check cryptographic software for known weaknesses