Skip to content
Fuzzing for Roughenough, a Rust implementation of the Roughtime secure time sync protocol
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.


Apache License 2

This crate is for fuzzing Roughenough, a Rust implementation of the Roughtime secure time synchronization protocol.

Building and Installation

Fuzzing uses American fuzzy lop via, libFuzzer via cargo-fuzz, and honggfuzz via honggfuzz-rs.

Rust Nightly is needed to compile this crate. The nightly-only -Z compiler flag is required by cargo-fuzz. MacOS users also need nightly to compile

To install:

  • cargo install afl cargo-fuzz honggfuzz

FYI, Ubuntu 17.10 needed the binutils-dev and libunwind-dev packages to compile cargo-fuzz. YMMV.


$ cd roughenough-fuzz

# Run AFL
$ cargo afl build --release --bin afl_target
$ cargo afl fuzz -i in -o out -x dictionary.txt target/release/afl_target

# Run libFuzzer
$ cargo fuzz run -O fuzz_target_1 -- -dict=dictionary.txt -max_len=2048

# Run honggfuzz
$ HFUZZ_RUN_ARGS="--dict dictionary.txt --max_file_size 2048 --input in/" cargo hfuzz run hfuzz_target



  • Stuart Stock (stuart {at}
  • Aaron Hill (aa1ronham {at}

Copyright and License

roughenough-fuzz is copyright (c) 2018 int08h LLC. All rights reserved.

int08h LLC licenses roughenough-fuzz (the "Software") to you under the Apache License, version 2.0 (the "License"); you may not use this Software except in compliance with the License. You may obtain a copy of the License from the LICENSE file included with the Software or at:

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

You can’t perform that action at this time.