[Cryptography] CMS or S/MIME test vectors

Peter Gutmann pgut001 at cs.auckland.ac.nz
Mon May 25 02:38:58 EDT 2020


Stephan Neuhaus <stephan.neuhaus at zhaw.ch> writes:

>Or you could adapt techniques from fuzzing to make your code fail and then
>see if the thing they failed on was really invalid or just an odd corner case.

It really depends what the OP is trying to do with the test vectors: Is it
find bugs in the code, or make sure it's compatible with as many different
implementations as possible?  They'd lead to two very different sets of test
vectors.

(Having said that, fuzz it anyway, that never hurts).

Peter.


More information about the cryptography mailing list