tests: finish parsing and X25519 tests, distinguish HMAC errors

Browse Source

If the implementation re-encodes the header before checking the HMAC,
that would mask malleability issues: the HMAC check would fail because
the tests HMAC'd the original header, but an attacker could also produce
the right HMAC. Instead of duplicating every parsing tests (with the
original and re-encoded HMAC), we make the test framework distinguish
HMAC errors, which ensures bad encodings are recognized as such and not
bypassable HMAC errors.

...

This commit is contained in:

Filippo Valsorda

2022-06-18 13:47:00 +02:00

parent f8a121dd87

commit eaa4e03cfe

43 changed files with 557 additions and 59 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

testdata/testkit/scrypt_long_file_key

Vendored

BIN

Binary file not shown.