[Cryptography] The GOTO Squirrel! [was GOTO Considered Harmful]

Peter Gutmann pgut001 at cs.auckland.ac.nz
Sat Mar 1 09:06:24 EST 2014


Andrew Righter <andrew.righter at gmail.com> writes:

>Are there unit testing framworks for crypto libs? I suppose they would do as
>Peter suggested below in depth running along side assertions and check
>equalities.

I doubt there are, because to do this kind of testing you need to poke around
deep inside the internals of the crypto library.  What you're doing is
generating incorrect or malformed output in a controlled manner, which isn't
generally something that's supported in standard code.  In fact you don't even
want the capability to do this present in your code (in my case you need to do
a custom build) because it's rather dangerous to have sitting in there.

Peter.


More information about the cryptography mailing list