Skip to content

Add runtime option to break PCT#788

Merged
hanno-becker merged 1 commit intomainfrom
pct_breakage_logic
Feb 19, 2025
Merged

Add runtime option to break PCT#788
hanno-becker merged 1 commit intomainfrom
pct_breakage_logic

Conversation

@hanno-becker
Copy link
Copy Markdown
Contributor

This commit introduces a config option MLK_KEYGEN_PCT_BREAKAGE_TEST. When set, the user must provide a runtime (!) function mlk_break_pct() to indicate if the PCT should be made fail. If set, the shared secret in the PCT will be deliberately corrupted to make the PCT fail. A test is added to exercise the runtime breakage logic.

This commit introduces a config option MLK_KEYGEN_PCT_BREAKAGE_TEST.
When set, the user must provide a runtime (!) function mlk_break_pct()
to indicate if the PCT should be made fail. If set, the shared secret
in the PCT will be deliberately corrupted to make the PCT fail.
A test is added to exercise the runtime breakage logic.

Signed-off-by: Hanno Becker <beckphan@amazon.co.uk>
Copy link
Copy Markdown
Contributor

@mkannwischer mkannwischer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think neither PCT itself, nor testing it using it a runtime configuration option are a good idea.... but if this helps with integration into AWS-LC, I'm okay with it.

@hanno-becker hanno-becker merged commit 34872b3 into main Feb 19, 2025
180 checks passed
@hanno-becker hanno-becker deleted the pct_breakage_logic branch February 19, 2025 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants