2fb91a6923
Adding a test for HMACs to Wycheproof. The main focus are: * incremental updates * long inputs * using ByteBuffers Tested providers: jdk8, jdk11, BouncyCastle, Conscrypt, hazmat, pythons implementation of hmac. Resuts: - all implementations are compatible. - all implementations support HMAC with SHA-1 and SHA-2. - BouncyCastle and python 3.7 support SHA-3 - jdk8 doesn't support SHA-3 and hence not HMAC with SHA-3 - jdk11 implements SHA-3, but not HMAC with SHA-3 - hazmat would support HMAC with SHA-3 if the backend were supporting the hashes, but the defaultbackend does not.
bleichen
2019-12-12 03:47:05 -08:00
5cf58d2985
Allow Wycheproof to contain all kind of secrets.
thaidn
2019-12-04 03:24:06 -08:00
93171c2770
Fixing changed links in documentation.
bleichen
2019-11-28 04:23:32 -08:00
93c29044f2
Removing non-compatible anchors from documentation.
bleichen
2019-11-28 04:20:37 -08:00
1349cee066
Testing alternative link format. Adding some missing files and tests.
bleichen
2019-11-28 04:11:48 -08:00
c1cbf80387
Alternative format for md links. Maybe this one is more compatible with github.
bleichen
2019-11-28 04:04:48 -08:00
91ee28e1c4
third_party/wycheproof: add a missing sLen value to rsassa_pss_verify_schema.json
Wycheproof Team
2019-11-26 07:34:28 -08:00
06e5e105ee
Modifying RSA Key test: There are differences between the NIST standard and RFC 8017. NIST requires d < lcm(p-1, q-1), RFC 8017 only requires d < n jdk does follows RFC 8017, but not the NIST standard.
bleichen
2019-11-25 06:03:56 -08:00
fe3dba2640
wycheproof/testvectors/dsa_test: Small typo fixes
Wycheproof Team
2019-11-20 10:40:30 -08:00
a8b9d3d935
Adding test vectors and tests for DSA with P1363 encoding. Splitting DSA test vectors into several files depending on key size and hash.
bleichen
2019-11-18 07:55:14 -08:00
20ff4847ae
Adding a test for the API of SecureRandom. This test does not check if SecureRandom is weak or predictable. It simply checks whether the seeding follows the claims in the API.
bleichen
2019-11-12 04:02:58 -08:00
ee5a73dbff
Adding test vectors for HKDF with maximal output size, and output size that is too large.
bleichen
2019-11-04 09:13:53 -08:00
13af3d7d29
Adding HKDF with SHA-384. Motivation: tink implements this KDF.
bleichen
2019-11-04 06:17:30 -08:00
68482d5d8d
Moving test vectors for primality test into a JSON file. Adding more tests: - the previous test did not include any primes. Hence arithmetic errors in a primality test would likely remain undetected. - some primes have been generated so that the multiplier for a Montgomery reduction is an edge case (e.g. high or low Hamming weight). - adding negatives of primes. Different libraries disagree, whether such integers are prime or not. The corresponding test vectors have a flag and result "acceptable".
bleichen
2019-11-04 02:50:27 -08:00
f63678bb71
Including some of the tink failures for EDDSA. The full list of failures is longer (~2800 cases). They should be tested separately.
bleichen
2019-10-22 09:18:58 -07:00
a5b8266776
New versions for HKDF. E.g., since HMAC simply pads the key with 0s, it does not matter whether the salt is a empty byte array or any other array of size <= 64.
bleichen
2019-10-18 07:38:54 -07:00
04b8adc7ba
Adding test vectors RSA primitives with truncated hashes: SHA-512/224 and SHA-512/256.
bleichen
2019-10-16 06:25:50 -07:00
c2f1a59591
Adding difference between NIST standard and RFC for KeyWrap.
bleichen
2019-08-23 06:45:37 -07:00
4672ff74d6
New version of the test vectors.
bleichen
2019-08-22 06:04:30 -07:00
06b80c9dcd
Adding test vectors and tests for the bug fix in CL 264115794.
bleichen
2019-08-20 03:09:58 -07:00
2f40e86f93
LSC: Delete uses of goog.isDefAndNotNull, goog.isDef, goog.isNull, goog.isString, goog.isBoolean, and goog.isNumber.
Wycheproof Team
2019-08-13 18:13:03 -07:00
3bab7ff533
Adding tests for EDDSA to Wycheproof.
bleichen
2019-07-30 08:58:30 -07:00
2927eee6ed
Adding a new test vector. https://github.com/google/tink/issues/224 So far I haven't been able to reproduce the bug. However, a lot of tests just check the signature verification.
bleichen
2019-07-29 03:37:19 -07:00
90b33e27b2
Updating documentation: New algorithms are GMAC and VMAC.
bleichen
2019-07-11 07:15:12 -07:00
0941e7b012
Adding test vectors for AES-GMAC to Wycheproof. AES-GMAC is equivalent to encrypting with AES-GCM an empty plaintext, using passing the data to authenticate as additional data.
bleichen
2019-07-10 05:36:52 -07:00
e9f9b7b234
Adding test vectors for VMAC.
bleichen
2019-06-28 07:47:41 -07:00
098eeb5616
Wycheproof g3doc: Fix typo and add link to GitHub source-code
Wycheproof Team
2019-06-16 23:07:47 -07:00
df9b1f3811
Adding test vectors for AEGIS256 to wycheproof.
bleichen
2019-06-12 06:19:34 -07:00
cf457615e3
Updating documentation. * including new primitives * more detailed description of JSON types. * adding links for algorithms
bleichen
2019-06-12 04:30:20 -07:00
763b2b03ea
Adding test vectors for Aegis128 and Aegis128L to third_party/wycheproof.
bleichen
2019-06-04 06:30:27 -07:00
8bc50bbb51
Updating the test vectors. Changes: * Unused flags are no longer listed in "notes:" * Added some new invalid encoding containing special values such as NaN. * Adding jwk keys to RSA-OAEP test vectors if the jwk key is defined. * Adding a flag InvalidOaepPadding to RSA-OAEP test vectors to test vectors where leaking padding information might allow Manger's attack. * Adding test vectors for invalid padding: PKCS-1 padding for PSS signatures signatures without hashing. * Adding test vectors from RFC 8037 to XDH. (There is not enough cross checking otherwise, since most libraries don't implement XDH).
bleichen
2019-03-06 09:54:51 -08:00
e36f091b42
Making another doc file more? compatible.
bleichen
2019-03-05 05:50:28 -08:00
6e734f1166
Reverting some mdformat features off to avoid making tables incompatible with other markdown dialects.
bleichen
2019-03-05 05:38:59 -08:00
3255146de3
Adding test vectors for RSA PKCS #1 v 1.5.
bleichen
2019-03-05 02:30:27 -08:00
4cd199592b
Minor updates to documentation.
bleichen
2019-02-20 06:33:20 -08:00
30c04bdbda
Refactoring ecdh.md. Adding some references to dh.md and dsa.md Adding a bibliography. There does not seem to be any simple support for references in g3doc.
bleichen
2019-01-29 07:21:36 -08:00
1025b43dd7
Adding timing analysis to the plans for version 0.8.
bleichen
2019-01-28 04:08:10 -08:00
ec8cac4845
Fix wycheproof build.
Wycheproof Team
2019-01-16 12:39:40 -08:00
8d36c35a19
Adding documentation for the test vector files.
bleichen
2019-01-11 05:18:04 -08:00
18175b38da
Adding JSON schemas for the test vectors. Requires test vectors with version 0.7 or higher.
bleichen
2019-01-11 02:36:33 -08:00
7c9c6db85c
Test vectors version 0.7
bleichen
2019-01-10 06:38:30 -08:00
37bb634f23
Adding new test vector files:
bleichen
2018-12-06 08:37:57 -08:00
eab248dd02
Adding RFC 4055 (which has some unused definitions).
bleichen
2018-12-06 04:45:42 -08:00
d6a8486784
Adding documentation for RSA-PSS.
bleichen
2018-12-04 05:42:08 -08:00
ebb8e84653
Adding tests for SHA-3. BouncyCastle, jdk11 and hashlib in python 3.6 support SHA-3. All libraries give the same result.
bleichen
2018-11-22 01:53:52 -08:00
3fb47e7403
Adding documentation for Key-wrap tests.
bleichen
2018-11-21 05:19:18 -08:00
95552fc2e2
Wycheproof version 0.6
bleichen
2018-11-21 03:35:55 -08:00
9035918140
Checking defaults for PSS.
Daniel Bleichenbacher
2018-08-07 01:51:44 -07:00
8e7e87adb8
Adding a test for faulty RSA signature generation. Instead of inducing a fault (I don't know how to do this), the test uses faulty CRT parameters. Results: All Java providers pass.
Daniel Bleichenbacher
2018-08-06 02:41:25 -07:00
c313761979
Added two additional findings (#63)
Alex Gaynor
2018-09-20 20:31:11 -04:00
f89f4c53a8
Adding test with RSA-PSS test vectors where signature hash, mgf hash and salt length do not match. Applications typically used RSA-PSS such that signature hash and mgf hash are the same and the salt length is either 0 or the size of the hash. RFC 8017 allows other combinations. These test check that such combinations are either rejected or are implemented correctly. The test file contains just one valid signature for each combination of mgf-hash signature-hash, salt length that is tested.
Daniel Bleichenbacher
2018-07-31 08:01:13 -07:00
4d6cead1bb
Modifying some tests because of BC version 1.59. google3 switched from version 1.52 to 1.59. Hence some tests no longer fail.
Daniel Bleichenbacher
2018-07-26 08:20:27 -07:00
d59a68af04
Using the new test vectors. This mainly adds tests for RSA-PSS. BoringSSL is OK. BouncyCastle has a minor bug. OpenJdk is adding PSS, but we don't have that version yet.
Daniel Bleichenbacher
2018-07-26 01:28:41 -07:00
6eeb70e249
Automated g4 rollback of changelist 205815425.
Wycheproof Team
2018-07-25 01:31:16 -07:00
012a83f4fe
Adding the curve back to the test cases to avoid failing BoringSSL tests.
Daniel Bleichenbacher
2018-07-24 05:45:35 -07:00
8f2cba4d3f
Test vectors version 0.4.12.
Daniel Bleichenbacher
2018-07-24 03:12:32 -07:00
f1b3b3429b
Fixing Wycheproof ECDH tests. There's no bug, the tests are incorrect.
Thai Duong
2018-07-13 13:02:00 -07:00
abb656f1a3
Release empty IV tests.
Thai Duong
2018-07-13 06:35:02 -07:00
202ec7ef23
Format .bzl files with buildifier
Wycheproof Team
2018-07-06 04:55:56 -07:00
f22bfc7c3d
This CL is mainly documenting that Oracle is not fixing CipherInputStream and CipherOutputStream. The test code is slightly refactored.
Daniel Bleichenbacher
2018-07-03 01:33:32 -07:00
2904be69e9
Stop scrubbing @NoPresubmitTest annotation to make it easier to import external changes.
Thai Duong
2018-06-08 16:43:12 -07:00
b9b3b2119c
Adding JSON test vectors for version 0.4.6. This CL only adds test vectors. Changes using the new test vectors are in CL 199130745.
Daniel Bleichenbacher
2018-06-07 03:52:42 -07:00
127d8022a2
Integrate test fix from GitHub PR
Wycheproof Team
2018-06-05 18:58:21 -07:00
thaidn