Skip to content

ed25519, ristretto: more test coverage - #271

Open
tob-scott-a wants to merge 1 commit into
C2SP:mainfrom
tob-scott-a:tests/from-sodium-compat
Open

ed25519, ristretto: more test coverage#271
tob-scott-a wants to merge 1 commit into
C2SP:mainfrom
tob-scott-a:tests/from-sodium-compat

Conversation

@tob-scott-a

Copy link
Copy Markdown
Contributor

Adds 146 regression vectors derived from cryptographic boundary fixes in sodium_compat v2.5.1 and v2.5.2, using vector-forge:

  • 59 Ed25519 small- and mixed-order subgroup cases
  • 34 Ed25519-to-X25519 conversion cases
  • 42 ChaCha20/XChaCha20 counter carry and overflow cases
  • 4 Ristretto255 scalar-inversion cases
  • 7 Secretstream counter and rekey state checkpoints

This also adds four schemas for the new vector formats.

The main idea behind this PR was to write stable test vectors to exercise the attack surface in those releases so that other implementations that currently test with Wycheproof can ensure they are resilient to similar bugs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant