Automated crypto library vuln testing as part of CI/CD workflow?

[diego-]

Hi Ya'll! 👋

Saw this new project and thought it might be useful as a CI integration for login.gov:

https://security.googleblog.com/2016/12/project-wycheproof.html
https://github.com/google/wycheproof

Happy Holidays!

[pkarman]

Thanks @diego- nice find.

Some good ideas here. Would need to port to Ruby from Java.

[diego-]

oh, I thought maybe it could just be turned into a test with an external app (compiled java program) exec.

[zachmargolis]

Thanks for reporting, as Peter said we'd need to do some porting so I'm going to close this out for now as we keep it under consideration. Thanks again!