PolySync / git-rsl

Command line tool for secure git fetch and push
MIT License
2 stars 1 forks source link

PBT for git, rsl effectiveness at attack detection #41

Closed clearydude closed 6 years ago

clearydude commented 6 years ago

This pull request adds a test suite to the implementation of git-rsl. This suite uses a property-based test framework to show that:

  1. Git does not detect a metadata attack
  2. RSL will detect any metadata attack.
  3. Git will not detect a metadata attack faster than RSL.

(note: These properties currently do not hold for our implementation -- some of the attacks are actually detected through normal git commands, and some attacks may go undetected by RSL, specifically if the attack is followed by a push operation. Additionally, in some cases both git and rsl are either equally effective or equally ineffective at detecting the metadata manipulation)

These tests must be run by using the command cargo test -- --ignored, as they use recursion to build the command sequence and can be a bit hefty.