domains / families / security / wycheproof

wycheproof

separate

Validates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge cases across AES, RSA, ECDSA, ECDH, and more. Covers loading test vectors, mapping result flags onto pass and fail expectations, and reading a failure. Use when testing a crypto implementation against known attacks, checking a library against standard test vectors, or investigating why two implementations disagree on the same input.

When to use

• Testing cryptographic implementations (AES-GCM, ECDSA, ECDH, RSA, etc.)
• Validating that crypto code handles edge cases correctly
• Verifying implementations against known attack vectors
• Setting up CI/CD for cryptographic libraries
• Auditing third-party crypto code for correctness
• Testing for timing side-channels (use constant-time testing tools instead)
• Finding new unknown bugs (use fuzzing instead)
• Testing custom/experimental cryptographic algorithms (Wycheproof only covers established algorithms)

When not to use

• Testing for timing side-channels
• Finding new unknown bugs
• Testing custom/experimental cryptographic algorithms

Skill page

Source