Point Intervention: Improving ACVP Test Vector Generation Through Human Assisted Fuzzing
Fuente:
arXiv
Salvato in:
| Autori principali: | , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2024
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866911952867950592 |
|---|---|
| author | Gridin, Iaroslav Michalas, Antonis |
| author_facet | Gridin, Iaroslav Michalas, Antonis |
| contents | Automated Cryptographic Validation Protocol (ACVP) is an existing protocol that is used to validate a software or hardware cryptographic module automatically. In this work, we present a system providing the method and tools to produce well-covering tests in ACVP format for cryptographic libraries. The system achieves better coverage than existing fuzzing methods by using a hybrid approach to fuzzing cryptographic primitives. In addition, the system offers a framework that allows to creates easily and securely create testing modules for cryptographic libraries. The work demonstrates how this system has been used to improve automated testing of NSS (Network Security Services), a popular cryptographic library, detect its vulnerabilities and suggest ways to improve and further develop the ACVP test format. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2407_08535 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Point Intervention: Improving ACVP Test Vector Generation Through Human Assisted Fuzzing Gridin, Iaroslav Michalas, Antonis Cryptography and Security D.2.5; D.2.4 Automated Cryptographic Validation Protocol (ACVP) is an existing protocol that is used to validate a software or hardware cryptographic module automatically. In this work, we present a system providing the method and tools to produce well-covering tests in ACVP format for cryptographic libraries. The system achieves better coverage than existing fuzzing methods by using a hybrid approach to fuzzing cryptographic primitives. In addition, the system offers a framework that allows to creates easily and securely create testing modules for cryptographic libraries. The work demonstrates how this system has been used to improve automated testing of NSS (Network Security Services), a popular cryptographic library, detect its vulnerabilities and suggest ways to improve and further develop the ACVP test format. |
| title | Point Intervention: Improving ACVP Test Vector Generation Through Human Assisted Fuzzing |
| topic | Cryptography and Security D.2.5; D.2.4 |
| url | https://arxiv.org/abs/2407.08535 |