3 ms·

Here's the relevant commit: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=c6dbfe89903d0c8191cf50ecf1abb3c8458b427a https://git.gnupg.org/cgi-b

by ctz 10y ago

Here's the relevant commit: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=c6dbfe89903d0c8191cf50ecf1abb3c8458b427a https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commi... You'll notice that there are no tests with this commit, and no tests on other commits for the same feature. You can conclude from this that there are no tests at all for correct CSPRNG operation.

voltagex_ 10y ago
How would you normally write a unit test for a RNG?
- ctz 10y ago
  It's a PRNG, so you fix the inputs and make sure the output is correct for all possible parameter sets. Matthew Green has more on this here: http://blog.cryptographyengineering.com/2014/03/how-do-you-know-if-rng-is-working.html http://blog.cryptographyengineering.com/2014/03/how-do-you-k... ('Known Answer Tests (KATs)' section).