libgcrypt integration into OSS-Fuzz differential cryptography fuzzer

NIIBE Yutaka gniibe at fsij.org
Fri May 10 08:45:17 CEST 2019


Hello,

Jussi Kivilinna <jussi.kivilinna at iki.fi> wrote:
>> It's running 24/7 on Google's OSS-Fuzz. Are the libgcrypt maintainers interested in participating in the OSS-Fuzz project? This entails that results for message digests, HMACs, CMACs and symmetric ciphers are compared to other libraries, and if there is a mismatch, everyone gets an e-mail. At that point we have to find out which library is emitting the wrong result, and the bug has to be fixed.
>> 
>
> I'd be interested getting emails of such mismatches.
>
> What do others think? Werner? Niibe?

Getting email report is fine for me.

If Google account is required, I have old one (not in use currently).
(It was created when I joined Google SoC as a mentor org admin in 2005.
And it was used until 2009.)
-- 



More information about the Gcrypt-devel mailing list