Automated test suites are useful and arguably necessary - see the AES test vectors - but they aren't sufficient (by themselves) to prove validation. There are many anecdotes online of early compilers detecting when a particular benchmark (e.g., SPEC) was compiled and inserting hand-optimized assembly to improve the benchmark results. It doesn't take much to imagine someone writing a crypto library that detects and passes the automated test suite but fails to properly encrypt real data at run-time. For a real world example, see the Volkswagen emissions scandal.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。