HSM Fuzz Testing

Fuzz testing orchestration for HSM modules.

Usage

/hsm-fuzz <module-number> [iterations]

Default iterations: 1,000,000

What You Do

1. List Fuzz Targets:

   cd crates/<module>
   cargo fuzz list
   

2. Run Fuzz Tests: For each target:

   cargo fuzz run <target> -- -runs=<iterations>
   

3. Monitor Progress: Show real-time stats:

   • Runs completed / total
   • Crashes found
   • Hangs detected
   • Coverage achieved

4. Handle Crashes: If crash found:

   # Minimize corpus
   cargo fuzz cmin <target>
   
   # Minimize crash
   cargo fuzz tmin <target> crash-<hash>
   

5. Report Results:

   Target: fuzz_ed25519_verify
   Runs: 1,000,000
   Status: PASS ✅
   Crashes: 0
   Coverage: 94%
   

Common Fuzz Targets

• Crypto Engine: sign/verify, encrypt/decrypt
• gRPC API: request parsing
• Audit: event serialization
• Storage: encryption/compression