[Cryptography] The GOTO Squirrel! [was GOTO Considered Harmful]

Andrew Righter andrew.righter at gmail.com
Sat Mar 1 10:11:54 EST 2014


> I doubt there are, because to do this kind of testing you need to poke around
> deep inside the internals of the crypto library.  What you're doing is
> generating incorrect or malformed output in a controlled manner, which isn't
> generally something that's supported in standard code.  In fact you don't even
> want the capability to do this present in your code (in my case you need to do
> a custom build) because it's rather dangerous to have sitting in there.
> 
> Peter.

So more like intelligent fuzzing? Wondering if people like Mu Security did any of this with their quarter million dollar appliance. 


More information about the cryptography mailing list