Show HN: Differential Fuzzing of Cryptographic Libraries

Re:Show HN: Differential Fuzzing of Cryptographic Libraries by guidovranken on Thursday October 24, 2019 @05:09PM (#21349196)

I've posted this once before but it failed to get traction. I'm reposting this with the permission of HN admins.

In a nutshell: This open-source project provides a framework for fuzzing cryptographic libraries. It can find both memory bugs and implementation errors. So far it has found about 35 bugs of varying severity in the stable releases of major cryptographic libraries. The fuzzers run continually on Google's OSS-Fuzz platform which helps detect bugs before they end up in stable releases.

The article describes the technical details of the software. Here you can find a summary of the bugs it has found: https://github.com/guidovranken/cryptofuzz#hall-of-fame

[ Parent | on HN ]

Re:Show HN: Differential Fuzzing of Cryptographic Libraries by technion on Thursday October 24, 2019 @05:33PM (#21349428)

Thanks for posting this. It looks like some really great tooling. I tried fuzzing the Argon2 library a while ago and very quickly hit some of the issues you appear to have addressed.

[ Parent | on HN ]

Re:Show HN: Differential Fuzzing of Cryptographic Libraries by TheCrott on Tuesday October 29, 2019 @09:17PM (#21393764)

What tools/library you used to fuzz Argon2?

[ Parent | on HN ]