prehistoric-systems/age - Forgejo: Beyond coding. We Forge.

250 commits 4 branches 18 tags 10 MiB

Author	SHA1	Message	Date
Filippo Valsorda	eaa4e03cfe	tests: finish parsing and X25519 tests, distinguish HMAC errors If the implementation re-encodes the header before checking the HMAC, that would mask malleability issues: the HMAC check would fail because the tests HMAC'd the original header, but an attacker could also produce the right HMAC. Instead of duplicating every parsing tests (with the original and re-encoded HMAC), we make the test framework distinguish HMAC errors, which ensures bad encodings are recognized as such and not bypassable HMAC errors.	2022-06-18 13:47:00 +02:00
Filippo Valsorda	f8a121dd87	tests: add more tests for hmac and X25519 encodings	2022-06-16 15:55:29 +02:00
Filippo Valsorda	bb4493a7cd	tests: add X25519 low order point tests	2022-06-16 11:47:27 +02:00

Author

SHA1

Message

Date

Filippo Valsorda

eaa4e03cfe

tests: finish parsing and X25519 tests, distinguish HMAC errors

If the implementation re-encodes the header before checking the HMAC,
that would mask malleability issues: the HMAC check would fail because
the tests HMAC'd the original header, but an attacker could also produce
the right HMAC. Instead of duplicating every parsing tests (with the
original and re-encoded HMAC), we make the test framework distinguish
HMAC errors, which ensures bad encodings are recognized as such and not
bypassable HMAC errors.

2022-06-18 13:47:00 +02:00

Filippo Valsorda

f8a121dd87

tests: add more tests for hmac and X25519 encodings

2022-06-16 15:55:29 +02:00

Filippo Valsorda

bb4493a7cd

tests: add X25519 low order point tests

2022-06-16 11:47:27 +02:00

Renamed from testdata/testkit/bad_hmac (Browse further)

3 commits