- Study design and implementations of SSL/TLS protocol and existing attacks on its design and implementation , testing approaches and tlsfuzzer project . Get familiar with existing attacks against SSL/TLS.
- Identify existing attacks that are suitable for reproduction in tlsfuzzer framework. Design a test suite for them.
- Implement the tests and necessary improvements to tlsfuzzer and tlslite-ng .
- Run the tests against existing SSL/TLS implementations and evaluate the results.
Points that should be done during the first semester: 1. and 2.