strongswan · arthurscchan · Jun 3, 2026 · Jun 3, 2026
diff --git a/README.md b/README.md
@@ -9,6 +9,8 @@ Corpora for fuzzing parts of the strongSwan code base
 - **ocsp_rsp**: OCSP responses, initially 4 files in DER format derived from the strongSwan KVM regression tests
 - **pa_tnc**: RFC 5792 PA-TNC messages, initially 18 messages derived from the strongSwan KVM regression tests
 - **pb_tnc**: RFC 5793 PB-TNC batches, initially 6 batches derived from the strongSwan KVM regression tests
+- **pubkey**: Public keys in four wire formats, initially 10 hand-crafted samples covering DER-encoded SubjectPublicKeyInfo (RSA-2048, EC P-256, EC P-384, Ed25519), SSH wire format (RSA, ECDSA-P256, Ed25519), DNSKEY records (RSA/SHA-256, ECDSA-P256/SHA-256) and a PGP v4 RSA public-key packet, matching the four `BUILD_BLOB_*` paths exercised by `fuzz_pubkey`
+- **trusted_pubkey**: Bare public-key DERs (RSA-2048, EC P-256, EC P-384, Ed25519), initially 4 samples used as `CRED_CERTIFICATE / CERT_TRUSTED_PUBKEY / BUILD_BLOB` input for `fuzz_trusted_pubkey`
 - **tls**: TLS messages (prefixed with 0x00 for server replies and 0x01 for client requests), initially 10 files derived from the strongSwan libtls unit tests
 
 The `*-crash` directories contain input generated while fuzzing that caused crashes (or timeouts etc.).

diff --git a/pubkey/5609ede8e8e97f5a56cf6c54114d95391e635b7ea9f17f4433247e3f32a26352 b/pubkey/5609ede8e8e97f5a56cf6c54114d95391e635b7ea9f17f4433247e3f32a26352
diff --git a/pubkey/5d8375d0f75933a3eb17457b23e608c5a2e7390b4327412f91e46297d5f8a316 b/pubkey/5d8375d0f75933a3eb17457b23e608c5a2e7390b4327412f91e46297d5f8a316
diff --git a/pubkey/8365293f0391a7b38db4ca18d765e2fca6b63ea464a9daf6d9ac0e4d7c873fde b/pubkey/8365293f0391a7b38db4ca18d765e2fca6b63ea464a9daf6d9ac0e4d7c873fde
diff --git a/pubkey/99809cb66fd3902817979c70d8cf51e33ae00856b296dd3d04a7bf61ffe26831 b/pubkey/99809cb66fd3902817979c70d8cf51e33ae00856b296dd3d04a7bf61ffe26831
diff --git a/pubkey/a2f7b28bb2f9c90c63e9715558f4046451b68abc03212dcd37f34db33351c10c b/pubkey/a2f7b28bb2f9c90c63e9715558f4046451b68abc03212dcd37f34db33351c10c
diff --git a/pubkey/b52b4fd42982d1248c48cb0d543faa55f10199d6017c7e04d7d539eb3f7889a5 b/pubkey/b52b4fd42982d1248c48cb0d543faa55f10199d6017c7e04d7d539eb3f7889a5
diff --git a/pubkey/d42acbd6b547132d5fee5af98a9491daf006831748129e4f91ede1448134249b b/pubkey/d42acbd6b547132d5fee5af98a9491daf006831748129e4f91ede1448134249b
diff --git a/pubkey/d47cc904bb87be5ef774a68efa5b9be52f17bfd931bc8f0b9ce58db6cdc79e05 b/pubkey/d47cc904bb87be5ef774a68efa5b9be52f17bfd931bc8f0b9ce58db6cdc79e05
diff --git a/pubkey/dd9ee5dc8718ff0e04149dec72d108cd022c8f11401de11f781ad6fef1b5b423 b/pubkey/dd9ee5dc8718ff0e04149dec72d108cd022c8f11401de11f781ad6fef1b5b423
diff --git a/pubkey/eb6f18d0c27075b91006f81760a831a5f033c4ab1e2d632dca64f38e69f16e67 b/pubkey/eb6f18d0c27075b91006f81760a831a5f033c4ab1e2d632dca64f38e69f16e67
diff --git a/trusted_pubkey/5d8375d0f75933a3eb17457b23e608c5a2e7390b4327412f91e46297d5f8a316 b/trusted_pubkey/5d8375d0f75933a3eb17457b23e608c5a2e7390b4327412f91e46297d5f8a316
diff --git a/trusted_pubkey/8365293f0391a7b38db4ca18d765e2fca6b63ea464a9daf6d9ac0e4d7c873fde b/trusted_pubkey/8365293f0391a7b38db4ca18d765e2fca6b63ea464a9daf6d9ac0e4d7c873fde
diff --git a/trusted_pubkey/b52b4fd42982d1248c48cb0d543faa55f10199d6017c7e04d7d539eb3f7889a5 b/trusted_pubkey/b52b4fd42982d1248c48cb0d543faa55f10199d6017c7e04d7d539eb3f7889a5
diff --git a/trusted_pubkey/d42acbd6b547132d5fee5af98a9491daf006831748129e4f91ede1448134249b b/trusted_pubkey/d42acbd6b547132d5fee5af98a9491daf006831748129e4f91ede1448134249b