C2SP/wycheproof

Project Wycheproof is a test vector repository that cryptography library developers use to validate implementations against known attacks and specification inconsistencies.

The project addresses the challenge of ensuring cryptographic libraries are robust by providing a curated collection of test vectors in JSON format, accompanied by JSON schema documentation. Developers integrate these vectors into their testing workflows by loading the data, mapping their cryptographic APIs to the test inputs, and verifying that outputs match expected results. The README recommends integrating this process into continuous integration pipelines to catch regressions across changes.

The tool suits any project implementing cryptographic algorithms, from widely-used primitives like AES-GCM and ChaCha20-Poly1305 to post-quantum schemes like ML-KEM and ML-DSA. The coverage spans symmetric encryption, authenticated encryption, key derivation, digital signatures, key agreement, and hash-based constructions. Projects like pyca/cryptography have already integrated Wycheproof vectors into their test suites, providing a reference for adoption patterns. The README explicitly welcomes contributions of new test vector data and algorithms.

The project is undergoing active revitalization as a community-managed initiative with immediate priorities focused on expanding algorithm and test case coverage. Development activity shows engagement with the contribution process through pull requests and issue tracking, reflecting an open approach to growing the test vector collection.