Skip to content

Stricter checks (RSA OAEP, X25519, X448) - based on wycheproof results#753

Merged
sjaeckel merged 2 commits intodevelopfrom
pr/wycheproof-pk-stricter-checks
May 5, 2026
Merged

Stricter checks (RSA OAEP, X25519, X448) - based on wycheproof results#753
sjaeckel merged 2 commits intodevelopfrom
pr/wycheproof-pk-stricter-checks

Conversation

@karel-m
Copy link
Copy Markdown
Member

@karel-m karel-m commented May 3, 2026

This PR makes libtomcrypt checks stricter for a few Wycheproof test cases.

While checking Wycheproof results, I found some tests marked as acceptable that our code does not reject. These cases can technically be tolerated when they pass, but I think these three are worth rejecting:

  • RSA OAEP: Reject ciphertext values 0 and 1
  • X448: Reject all-zero shared secrets
  • X25519: Reject all-zero shared secrets

@sjaeckel sjaeckel force-pushed the pr/wycheproof-pk-stricter-checks branch from 2462a42 to e5fc656 Compare May 5, 2026 05:40
@sjaeckel sjaeckel force-pushed the pr/wycheproof-pk-stricter-checks branch from e5fc656 to 2c375b3 Compare May 5, 2026 05:42
@sjaeckel sjaeckel merged commit efd7f24 into develop May 5, 2026
1 check was pending
@sjaeckel sjaeckel deleted the pr/wycheproof-pk-stricter-checks branch May 5, 2026 05:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants