Hacker GitHub

← All repos

C2SP/wycheproof

View on GitHub ↗ ★ 3,136 Go

Project Wycheproof tests crypto libraries against known attacks.

17 mentions on Hacker News by 14 people: 5 stories, 12 comments · first 2016-12-19 · latest 2023-08-30

Mentions per year 17 mentions · busiest year 2017 (4)
20082026
AllStoriesComments NewestTopOldest
  1. ▲ 2
    Google's Project Wycheproof
    story by sneakerblack · 2023-08-30 · 0 comments
  2. ▲ 1
    Project Wycheproof
    story by mooreds · 2022-04-20 · 0 comments
  3. …get them to fix their front page so people know they have EdDSA test vectors, that would be great. https://github.com/google/wycheproof/pull/79 If I had known about those, the whole debacle could have been avoided. Heck, I bet my hat their…
    comment by loup-vaillant · 2022-04-20 · in Psychic Signatures in Java
  4. …such as converting to Montgomery form and back, and test with Wycheproof’s Ed25519 test vectors. https://github.com/google/wycheproof/blob/master/testvectors...
    comment by loup-vaillant · 2021-11-30 · in An Illustrated Guide to Elliptic Curve Cryptography Validation
  5. …on. I guess they too were busy. [2]: https://monocypher.org/quality-assurance/disclosures [3]: https://github.com/google/wycheproof/pull/79
    comment by loup-vaillant · 2021-11-30 · in An Illustrated Guide to Elliptic Curve Cryptography Validation
  6. ▲ 1
    Project Wycheproof
    story by weinzierl · 2020-12-25 · 0 comments
  7. …[2] https://github.com/dalek-cryptography/ed25519-dalek/issues/2... [3] https://github.com/google/wycheproof . Wycheproof has tests for EdDSA malleability, but it only tests if s is not properly range checked.
    comment by cryptbe · 2020-04-09 · in Cofactor Explained: Clearing Elliptic Curves' dirty little secret
  8. The author found the bug inspired by: https://github.com/google/wycheproof (it's in the thread of the original tweet, though the thread is in Italian: https://twitter.com/asanso/status/1214450115777351681 )
    comment by ecesena · 2020-01-07 · in The Curious Case of WebCrypto Diffie-Hellman on Firefox
  9. Yes, for known attacks. Unknown attacks are harder. https://github.com/google/wycheproof is a Google's effort to test for known attacks. If your crypto library does not mention Project Wycheproof or known attacks listed there, ignore it.
    comment by sanxiyn · 2019-05-25 · in Does open-source cryptographic software work correctly? [pdf]
  10. https://github.com/google/wycheproof
    comment by based2 · 2018-08-31 · in A cross-platform cryptographic APIs that are hard(er) to misuse
  11. …check for that vulnerability. Footnotes: 0: Wycheproof is the closest I've seen to this ideal yet: https://github.com/google/wycheproof
    comment by jf · 2018-04-03 · in MesaLink: A memory-safe and OpenSSL-compatible TLS library
  12. …crypto tasks. If this sounds exciting, please send your resumes to thaidn@google.com. Cheers! [1] https://github.com/google/wycheproof [2] https://github.com/google/tink [3] https://github.com/google/wycheproof/blob/master/doc/bugs.md…
    comment by cryptbe · 2017-08-17 · in The Matasano Crypto Challenges (2013)
  13. ▲ 3
    Open data; Open source; but no Open tests
    story by prmph · 2017-07-18 · 0 comments
  14. See e.g. https://github.com/google/wycheproof Fuzzing tests can also uncover weird bugs and edge cases that can lead to vulnerabilities.
    comment by arnarbi · 2017-02-15 · in Show HN: Monocypher: a small, easy to use crypto library
  15. …testing for and google recently released a framework that checks for common implementation errors: https://github.com/google/wycheproof
    comment by benmmurphy · 2017-01-30 · in Cryptkeeper sets the same password “p” independently of user input
  16. ▲ 4
    Google's Project Wycheproof tests crypto libraries against known attacks
    story by lisper · 2016-12-20 · 0 comments
  17. They did an amazing job at commenting the code. Example: https://github.com/google/wycheproof/blob/master/java/com/go...
    comment by r3bl · 2016-12-19 · in Wycheproof – Tests that check cryptographic software for known weaknesses