fuzz: Differential fuzzing for ChaCha20Forward4064-Poly1305@bitcoin cipher suite #23441

1. 
   stratospher commented at 7:18 am on November 5, 2021: contributor

   This PR does an alternate implementation of the ChaCha20Forward4064-Poly1305@bitcoin cipher suite according to the new specification proposed in BIP 324. It performs differential fuzzing in order to ensure that the outputs obtained from #20962 and the alternate implementation are consistent.

   The alternate implementation was successfully tested with the ChaCha20Poly1305@Bitcoin AEAD’s test vectors in this branch. The first two commits in this PR are from #20962.

2. DrahtBot added the label Build system on Nov 5, 2021
3. DrahtBot added the label Utils/log/libs on Nov 5, 2021
4. 
   DrahtBot commented at 8:13 pm on November 5, 2021: contributor

   The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

   Conflicts

   Reviewers, this pull request conflicts with the following ones:

   • #24203 (doc: Fix typos pointed out by lint-spelling by brunoerg)
   • #23233 (BIP324: Add encrypted p2p transport {de}serializer by dhruv)
   • #20962 (Alter the ChaCha20Poly1305@Bitcoin AEAD to the new specification by jonasschnelli)

   If you consider this pull request important, please also help to review the conflicting pull requests. Ideally, start with the one that should be merged first.

5. fanquake removed the label Build system on Dec 10, 2021
6. DrahtBot added the label Needs rebase on Dec 17, 2021
7. Alter the ChaCha20Poly1305@Bitcoin AEAD to the new specification

   Co-authored-by: Dhruv Mehta <856960+dhruv@users.noreply.github.com>

   e1d597644a
8. test: clarify that encrypted length is payload length 93f7c70b4f
9. [crypto] Add alternate implementation of ChaCha20Forward4064-Poly1305@Bitcoin e6af6dcb15
10. [fuzz] Add fuzzing harness to compare both implementations of aead v2 90682d98cb
11. stratospher force-pushed on Dec 17, 2021
12. DrahtBot removed the label Needs rebase on Dec 17, 2021
13. DrahtBot added the label Needs rebase on Jan 31, 2022
14. 
    DrahtBot commented at 8:07 am on January 31, 2022: contributor

    🐙 This pull request conflicts with the target branch and needs rebase.

    Want to unsubscribe from rebase notifications on this pull request? Just convert this pull request to a “draft”.

15. 
    DrahtBot commented at 7:03 am on July 25, 2022: contributor

    • Is it still relevant? ➡️ Please solve the conflicts to make it ready for review and to ensure the CI passes.
    • Is it no longer relevant? ➡️ Please close.
    • Did the author lose interest or time to work on this? ➡️ Please close it and mark it ‘Up for grabs’ with the label, so that it can be picked up in the future.
16. 
    achow101 commented at 6:45 pm on October 12, 2022: member

    Are you still working on this?
17. 
    stratospher commented at 7:19 pm on October 12, 2022: contributor

    Closing this PR since this has been replaced with a better AEAD with formal security analysis in BIP 324.

    And if anyone’s interested in differential fuzzing(feel free to reach out!), I am working on fuzz testing python and cpp implementations of cryptography used in BIP 324 outside this repository. This would be a stronger test compared to the one in the PR since different programming languages are involved. See #23915.

18. stratospher closed this on Oct 12, 2022

    ---

19. bitcoin locked this on Oct 12, 2023

Contributors
stratospher DrahtBot achow101

Labels
Utils/log/libs Needs rebase