What problem does it solve?
Wycheproof helps you detect subtle cryptographic correctness and validation bugs by running your implementation against known attack-focused test vectors, including edge cases that often slip through standard unit tests.
Core Features & Use Cases
- Test-vector driven crypto testing: Verify encryption/decryption, sign/verify, and key exchange behavior using structured JSON test cases with expected outcomes.
- Known-attack and edge-case coverage: Exercise inputs designed to trigger real-world failure modes such as signature malleability, invalid encodings, invalid curve attacks, and AEAD tag issues.
- CI-friendly harness patterns: Use result flags (valid/acceptable/invalid) and group filtering (by key/IV/curve parameters) to make repeatable automated tests.
Core Use Case Example: You want confidence that your ECDSA or AES-GCM implementation rejects malformed inputs and handles encoding/validation correctly; Wycheproof provides test vectors specifically crafted to catch these issues.
Quick Start
Use the wycheproof skill to load the appropriate Wycheproof JSON test vectors for your algorithm, parse the test groups, and generate a test harness that asserts your implementation behavior matches each test case result.