fuzz: Differential fuzzing for ChaCha20Forward4064-Poly1305@bitcoin cipher suite#23441
fuzz: Differential fuzzing for ChaCha20Forward4064-Poly1305@bitcoin cipher suite#23441stratospher wants to merge 4 commits intobitcoin:masterfrom
Conversation
|
The following sections might be updated with supplementary metadata relevant to reviewers and maintainers. ConflictsReviewers, this pull request conflicts with the following ones:
If you consider this pull request important, please also help to review the conflicting pull requests. Ideally, start with the one that should be merged first. |
Co-authored-by: Dhruv Mehta <856960+dhruv@users.noreply.github.com>
0cf91b7 to
90682d9
Compare
|
🐙 This pull request conflicts with the target branch and needs rebase. Want to unsubscribe from rebase notifications on this pull request? Just convert this pull request to a "draft". |
There hasn't been much activity lately and the patch still needs rebase. What is the status here?
|
|
Are you still working on this? |
|
Closing this PR since this has been replaced with a better AEAD with formal security analysis in BIP 324. And if anyone's interested in differential fuzzing(feel free to reach out!), I am working on fuzz testing python and cpp implementations of cryptography used in BIP 324 outside this repository. This would be a stronger test compared to the one in the PR since different programming languages are involved. See #23915. |
This PR does an alternate implementation of the ChaCha20Forward4064-Poly1305@bitcoin cipher suite according to the new specification proposed in BIP 324. It performs differential fuzzing in order to ensure that the outputs obtained from #20962 and the alternate implementation are consistent.
The alternate implementation was successfully tested with the ChaCha20Poly1305@Bitcoin AEAD's test vectors in this branch. The first two commits in this PR are from #20962.