C9S/boringssl
2
0
Fork 0
mirror of https://boringssl.googlesource.com/boringssl synced 2026-07-21 14:43:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update documentation on fuzzer mode

Browse Source 
Noticed some things were out-of-date or confusing.

Change-Id: Ib71155fcaa5962aeff89a3ba00f1a1246ac79bff
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/89248
Commit-Queue: Lily Chen <chlily@google.com>
Auto-Submit: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Lily Chen <chlily@google.com>
This commit is contained in:
David Benjamin
2026-02-11 16:04:12 -05:00
committed by Boringssl LUCI CQ
parent c5a1531c33
commit 4f0a7a7974
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
FUZZING.md
+9 -5
View File
@@ -54,15 +54,19 @@ When `-DFUZZ=1` is passed into CMake, BoringSSL builds with `FUZZING_BUILD_MODE_
Additionally, if `CRYPTO_set_fuzzer_mode()` is called to enable fuzzer mode, BoringSSL will:
* Modify the TLS stack to perform all signature checks (CertificateVerify and ServerKeyExchange) and the Finished check, but always act as if the check succeeded.
* Ignore the result of the PKCS#12 MAC check.
* Treat every cipher as the NULL cipher.
* Ignore the result of TLS signature checks (CertificateVerify and ServerKeyExchange), Finished checks, and PSK binder checks.
* Tickets are unencrypted and the MAC check is performed but ignored.
* Treat every TLS cipher as the NULL cipher.
* renegotiation\_info checks are ignored.
* Skip encrypting TLS EncryptedClientHello payloads.
This is to prevent the fuzzer from getting stuck at a cryptographic invariant in the protocol.
* Skip TLS ticket encryption and ignore the result of the MAC check.
* Ignore the result of the TLS `renegotiation\_info` check.
This is to prevent the fuzzer from getting stuck on cryptographic invariants.
## TLS transcripts