Streamlining cryptographic processes in a test environment

1. A method of testing handling of secure communication sessions of a plurality of clients with a plurality of servers by device or system under test (DUT), the testing conducted by a test system having at least first and second ports that are coupled to ports on the DUT, the method including:

using a plurality of client state machines running one or more processor cores, communicating through the DUT with a plurality of server state machines running on one or more additional processor cores;

for each connection between (i) a client represented by a client state machine, of the plurality of client state machines, and (ii) a server represented by a server state machine, of the plurality of server state machines, setting up a secure communication session including:

establishing a secure communication session, with a handshake between the client and the server, wherein standards associated with the secure communication session require a verification step or a validation step to be performed during the handshake and wherein the handshake includes the client and/or the server transitioning past the standards-required verification step or validation step without performing the required verification or validation step;

using at least 1,000 of the established secure communication sessions, conducting a test including:

generating test packets; and

transmitting the test packets through the DUT; and

compiling and reporting results of the test.

2. The method of claim 1 , wherein the establishing of the secure communication session includes one of the client and the server bypassing a transmission of a standards-required error message to another of the client and the server when an error has occurred at the one of the client and the server with respect to a security mechanism related to the secure communication session.

3. The method of claim 1 ,

wherein the standards-required verification step or validation step is a verification of a certificate received by one of the client and the server, from the other of the client and the server, and

wherein the one of the client and the server receiving the certificate operates as if there has been a successful verification of the certificate without verifying the certificate.

4. The method of claim 1 ,

wherein the standards-required verification step or validation step is a verification that a particular field (i) does correspond to a particular group and (ii) does not correspond to another particular group, and

wherein one of the client and the server transmits a standards-required message to another of the client and the server as if there has been a successful verification that the particular field (i) does correspond to the particular group and (ii) does not correspond to the other particular group.

5. The method of claim 1 ,

wherein, the standards-required verification step or validation step is a validation of a key received by one of the client and the server, from the other of the client and the server, and

wherein the one of the client and the server receiving the key operates as if there has been a successful validation of the key without validating the key.

6. The method of claim 1 ,

wherein, the standards-required verification step or validation step is a verification of a hash received by one of the client and the server, from the other of the client and the server, and

wherein the one of the client and the server receiving the hash operates as if there has been a successful verification of the hash without verifying the hash.

7. The method of claim 1 ,

wherein, the standards-required verification step or validation step is a verification of a digital signing of content received by one of the client and the server, from the other of the client and the server, and

wherein the one of the client and the server receiving the content operates as if there has been a successful verification of the digital signing of the content without verifying the digital signing of the content.

8. A test system including one or more processors and non-transitory memory coupled to the processors, the non-transitory memory holding a computer program thereon, the computer program for testing handling of secure communication sessions of a plurality of clients with a plurality of servers by device or system under test (DUT), the test system further including at least first and second ports that couple the processors to ports on the DUT, the test system executing the computer program on the one or more processors to perform the method of claim 1 .

9. A method of testing handling of secure communication sessions of a plurality of clients with a plurality of servers by device or system under test (DUT), the testing conducted by a test system having at least first and second ports that are coupled to ports on the DUT, the method including:

using a plurality of client state machines running one or more processor cores, communicating through the DUT with a plurality of server state machines running on one or more additional processor cores;

for each connection between (i) a client represented by a client state machine, of the plurality of client state machines, and (ii) a server represented by a server state machine, of the plurality of server state machines, setting up a secure communication session including:

establishing a secure communication session, with a handshake between the client and the server, including the client and/or the server reusing standards-required security mechanisms without generating or obtaining new standards-required security mechanisms;

following the setup of at least 1,000 secure communication sessions, conducting a test including:

generating test packets; and

transmitting the test packets through the DUT; and

compiling and reporting results of the test.

10. The method of claim 9 , wherein one of the standards-required security mechanisms that is reused by the client or the server is a reused certificate, where reuse of certificates is contrary to a standard-based procedure of the secure communication session.

11. The method of claim 9 , wherein one of the standards-required security mechanisms that is reused by the client or the server is a reused key, where reuse of keys is contrary to a standard-based procedure of the secure communication session.

12. The method of claim 9 , wherein one of the standards-required security mechanisms that is reused by the client or the server is a reused ticket, where reuse of tickets is contrary to a standard-based procedure of the secure communication session.

13. The method of claim 9 , where reuse of the standards-required security mechanisms is performed when a standard-based procedure of the secure communication session requires at least one of a discarding of the standards-required security mechanism, a creation of a new standards-required security mechanism, an implementation of a standards-required security mechanism having new values.

14. The method of claim 9 , wherein the establishing of the secure communication session includes the server selecting an exchange mode of exchanging standards-required security mechanisms regardless of whether the exchange mode is listed by the client.

15. The method of claim 9 , wherein the establishing of the secure communication session includes the server transmitting a non-unique standards-required security mechanism request contrary to a standard-based procedure of the secure communication session that requires a unique standards-required security mechanism request.

16. The method of claim 9 , wherein the standards-required security mechanisms are a requirement of a standard-based procedure utilized to conduct the secure communication session.

17. The method of claim 9 , wherein one of the reused standards-required security mechanisms is an invalid certificate, key or hash.

18. The method of claim 9 , further including the secure communication session using a security mechanism that has a lower security strength than a security strength required by a standard-based procedure utilized.

19. A test system including one or more processors and non-transitory memory coupled to the processors, the non-transitory memory holding a computer program thereon, the computer program for testing handling of secure communication sessions of a plurality of clients with a plurality of servers by device or system under test (DUT), the test system further including at least first and second ports that couple the processors to ports on the DUT, the test system executing the computer program on the one or more processors to perform the method of claim 9 .

20. The method of claim 10 , wherein the reused certificate is selected from a pool of reusable certificates.

21. The method of claim 10 , wherein the reused certificate is a wildcard certificate covering all subdomains of a top-level domain or a wildcard certificate covering all top-level domains, both types of wildcard certificates being unusable or non-compliant according to a standard-based procedure utilized to conduct the secure communication session.

22. A method of testing handling of secure communication sessions of a plurality of clients with a plurality of servers by device or system under test (DUT), the testing conducted by a test system having at least first and second ports that are coupled to ports on the DUT, the method including:

using a plurality of client state machines running one or more processor cores, communicating through the DUT with a plurality of server state machines running on one or more additional processor cores;

for each connection between (i) a client represented by a client state machine, of the plurality of client state machines, and (ii) a server represented by a server state machine, of the plurality of server state machines, setting up a secure communication session including:

establishing a secure communication session between the client and the server, including completing a handshake between the client and the server and the client and, during the handshake, the server transmitting content contrary to an established standard-based procedure that requires signing of the content; and

following the setup of at least 1,000 secure communication sessions, conducting a test including:

generating test packets; and

transmitting the test packets through the DUT; and

compiling and reporting results of the test.

23. The method of claim 22 , wherein elements of the content generated and transmitted by the client and server are unsigned or improperly signed, which is contrary to the established standard-based procedure that requires the elements of the content to be signed or properly signed.

24. A test system including one or more processors and non-transitory memory coupled to the processors, the non-transitory memory holding a computer program thereon, the computer program for testing handling of secure communication sessions of a plurality of clients with a plurality of servers by device or system under test (DUT), the test system further including at least first and second ports that couple the processors to ports on the DUT, the test system executing the computer program on the one or more processors to perform the method of claim 22 .

25. The method of claim 23 , wherein the unsigned content is selected from a pool of unsigned content.

26. The method of claim 23 , further including transmitting content contrary to an established-based procedure that requires encryption of the content.