wycheproof
jdk17u
wycheproof | jdk17u | |
---|---|---|
12 | 4 | |
2,587 | 86 | |
- | - | |
0.0 | 9.7 | |
about 4 years ago | 16 days ago | |
Java | Java | |
Apache License 2.0 | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
wycheproof
- Google's Project Wycheproof
- SHA-3 Buffer Overflow - CVE-2022-37454
-
When To Roll Your Own X
I failed to notice the relevant Wycheproof test vectors because they weren’t listed on the front page (they still aren’t).
-
Automated Tests Are the Safety Net that Saves You
When I wrote the Monocypher cryptographic library, I didn't really know how to write serous tests. With some help, I eventually got something pretty good, with 100% code and path coverage, that test every possible input lengths as well as obscure corner cases I stole from various places (most notably Whycheproof).
- Project Wycheproof
- Psychic Signatures in Java
- What are some real-world security issues in cryptography?
-
How to verify ECC double and add algorithm implementation
"GitHub - google/wycheproof: Project Wycheproof tests crypto libraries against known attacks." https://github.com/google/wycheproof
-
An Illustrated Guide to Elliptic Curve Cryptography Validation
Thankfully, Curve25519 is much easier to implement, with much fewer death traps than short Weierstraß curves. For X25519, just follow DJB’s advice from ECC Hacks https://www.youtube.com/watch?v=vEt-D8xZmgE and make sure your arithmetic is up to snuff (constant time arithmetic is actually the hard part, by default I strongly suggest you steal it from the ref10 implementation).
For EdDSA, just follow the relevant explicit formulas, avoid clever (but dangerous) tricks such as converting to Montgomery form and back, and test with Wycheproof’s Ed25519 test vectors. https://github.com/google/wycheproof/blob/master/testvectors...
-
Is AES 256-bit good enough for files.
Have you tested all your applicable components against the Wycheproof test vectors and passed?
jdk17u
- Como (onde) trabalhar com números ENORMES?
-
Is it me or it is in general a good decision to avoid java-based selfhosted apps?
I wouldn't have been surprised if that was the case - Java Strings are immutable, there's no need to copy data that is already there. But apparently it isn't. Each constructed string seems to be getting its own byte array. Please provide a source if you disagree.
- Psychic Signatures in Java
-
How are LTS updates made?
The majority of the work on 8u, 11u, 17u releases happens in OpenJDK upstream, in so called JDK Updates Projects, by engineers from the interested JDK vendors. You can get a peek who does this kind of work from the repository histories, for example the most recent 11.0.13 is done by engineers from Red Hat (including yours truly), SAP, Azul, Microsoft, BellSoft, Tencent, Amazon, Alibaba, IBM, ARM, Google.
What are some alternatives?
ejbca-ce - EJBCA® – Open-source public key infrastructure (PKI) and certificate authority (CA) software.
jdk8u - https://wiki.openjdk.org/display/jdk8u
kyberJCE - Pure Java implementation of the Kyber (version 3) post-quantum IND-CCA2 KEM.
jdk11u - https://openjdk.org/projects/jdk-updates
cryptofuzz - Fuzzing cryptographic libraries. Magic bug printer go brrrr.
jdk-backports-monitor - JDK Backports Monitor
Monocypher - An easy to use, easy to deploy crypto library
bloomer - A scalable ruby Bloom filter
noise_spec - Noise Specification
adoptium
writeups - CTF writeups from The Flat Network Society
Quarkus - Quarkus: Supersonic Subatomic Java.