From base cases to backdoors: An Empirical Study of Unnatural Crypto-API Misuse

Victor Olaiya, Adwait Nadkarni

Tools focused on cryptographic API misuse often detect the most basic expressions of the vulnerable use, and are unable to detect non-trivial variants. The question of whether tool…