Finally we are able to share our latest work with you. TLS-Anvil, an automated test suite for TLS 1.2/1.3 servers and clients. Our paper describing TLS-Anvil and discussing results we could obtain by testing open source TLS implementations is published as part of USENIX 2022.

TLS-Anvil was designed with the goal in mind to provide an easy to use and extendible testing solution for TLS. We use combinatorial testing to be able discover hard observable RFC compliance and security issues, that only occur when certain parameters are negotiated.

Have a look at our publications and docs if you are interested to learn how TLS-Anvil works under the hood.