https://github.com/mmcloughlin/cryptofuzz
Fuzzing Go crypto
https://github.com/mmcloughlin/cryptofuzz
Last synced: 7 months ago
JSON representation
Fuzzing Go crypto
- Host: GitHub
- URL: https://github.com/mmcloughlin/cryptofuzz
- Owner: mmcloughlin
- License: bsd-3-clause
- Created: 2019-01-31T04:15:49.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2019-04-03T18:01:03.000Z (over 6 years ago)
- Last Synced: 2025-03-18T11:04:34.590Z (7 months ago)
- Language: Go
- Size: 1.42 MB
- Stars: 75
- Watchers: 5
- Forks: 3
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# cryptofuzz
Fuzzing Go crypto with [`go-fuzz`](https://github.com/dvyukov/go-fuzz).
## Discoveries
* `salsa20` counter increment vulnerability: [announcement](https://groups.google.com/forum/#!topic/golang-dev/1X7VG7FDw2A), [patch](https://github.com/golang/crypto/commit/b7391e95e576cacdcdd422573063bc057239113d), [investigation](https://github.com/mmcloughlin/bugsalsa), [discussion](https://twitter.com/FiloSottile/status/1108569374343000064), [rebuttal](https://twitter.com/hashbreaker/status/1108637226089496577)
* `curve25519` missing input mask: [#30095](https://golang.org/issue/30095), [patch](https://github.com/golang/crypto/commit/193df9c0f06f8bb35fba505183eaf0acc0136505)
## Targets
Fuzzers compare assembly implementations to the corresponding pure Go versions.
* [aesgcm](target/aesgcm): `crypto/aes` GCM mode
* [chacha20poly1305](target/chacha20poly1305): `x/crypto/chacha20poly1305`
* [curve25519](target/curve25519): `x/crypto/curve25519`
* [p256](target/p256): `crypto/elliptic` P-256 curve
* [sha1](target/sha1): `crypto/sha1`
* [sha256](target/sha256): `crypto/sha256`
* [sha512](target/sha512): `crypto/sha512`
* [sha3](target/sha3): `x/crypto/sha3`
* [blake2b](target/blake2b): `x/crypto/blake2b`
* [blake2s](target/blake2s): `x/crypto/blake2s`
* [argon2](target/argon2): `x/crypto/argon2`
* [poly1305](target/poly1305): `x/crypto/poly1305`
* [salsa20](target/salsa20): `x/crypto/salsa20`
Experimental:
* [exp/litpoly1305](target/exp/litpoly1305): Filippo Valsorda's ["literate" `poly1305`](https://blog.filippo.io/a-literate-go-implementation-of-poly1305/) ([CL #169037](https://golang.org/cl/169037))
## Quick Start
Install dependencies with
```sh
$ ./script/bootstrap
```
Then start a fuzzer with `./script/fuzz ` where `` is one of the subdirectories of [`target/`](target), for example
```
$ ./script/fuzz sha1
...
2019/02/05 22:37:37 workers: 4, corpus: 56 (3s ago), crashers: 0, restarts: 1/0, execs: 0 (0/sec), cover: 0, uptime: 3s
2019/02/05 22:37:40 workers: 4, corpus: 56 (6s ago), crashers: 0, restarts: 1/4459, execs: 40139 (6666/sec), cover: 124, uptime: 6s
2019/02/05 22:37:43 workers: 4, corpus: 56 (9s ago), crashers: 0, restarts: 1/4349, execs: 52191 (5787/sec), cover: 124, uptime: 9s
2019/02/05 22:37:46 workers: 4, corpus: 56 (12s ago), crashers: 0, restarts: 1/6450, execs: 103200 (8588/sec), cover: 124, uptime: 12s
...
```
## Infrastructure
The [`infra/`](infra) directory contains [Terraform](https://www.terraform.io/) configuration to run fuzzers on [EC2 spot fleets](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet.html) (to minimize cost). Before you proceed note that this _will cost you money_.
To utilize this infrastructure, first build an archive to distribute to the boxes
```
$ GOOS=linux GOARCH=amd64 ./script/dist
```
This should build an archive of all files required to run the fuzzers on EC2 boxes. To setup the infrastructure:
```sh
$ cd infra/
$ terraform init
$ terraform apply -var 'package_path=' -var 'targets=["p256", "sha3"]'
```
Note this expects to find AWS credentials in `~/.aws/credentials`. For each specified target, this will setup a coordinator node and a worker fleet. See [`variables.tf`](infra/variables.tf) to configure the size of the worker fleet.