search

cloudflare / tls-tris

crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
Other
292 stars 50 forks source link

Implement fuzz testing #65

Open kriskwiatkowski opened 6 years ago

kriskwiatkowski commented 6 years ago

I was thinking about introducing fuzzing tests for tls-tris. One idea I've in mind is to run this https://github.com/tomato42/tlsfuzzer. Even though it doesn't seem it has TLS 1.3 support yet I think it may be useful.

Thoughts?

Lekensteyn commented 6 years ago

Since 1.3 support is not complete yet, I don't think that the fuzzer will be sufficiently useful for tls-tris. Perhaps it could be used with upstream crypto/tls though (which is still using TLS 1.2)

kriskwiatkowski commented 5 years ago

https://github.com/google/gofuzz

tomato42 commented 4 years ago

FYI TLS 1.3 support in tlsfuzzer is in place, the test coverage is not complete, but there are over 40 test scripts for different TLS 1.3 features already implemented