2 ms·
From: Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations https://www.cs.utexas.edu/~shmat/shmat_oak14.pd
by dfc 13y ago
From: Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations
https://www.cs.utexas.edu/~shmat/shmat_oak14.pdf https://www.cs.utexas.edu/~shmat/shmat_oak14.pdf
github: https://github.com/sumanj/frankencert https://github.com/sumanj/frankencert
- pencilo 13y agoThe code used for the paper is actually here: https://github.com/pencilo/ssl https://github.com/pencilo/ssl I quit gradschool a month after publishing this so can't comment on what Suman is currently working on, but it looks like it is still mostly my code for generation. I didn't write the script for using polarSSL but I wrote most the other ones,the testing harness, cert generation and cert crawling, and I can say that polarSSL loved to crash on my weird certs. I almost wanted to remove them from the tested list for being so unreliable.