Fuzz introspector: JweAlgorithmProviderFuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
31 18 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) call site: {node_id}
17 0 EP call site: {node_id}
11 50 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) call site: {node_id}
9 70 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) call site: {node_id}
7 62 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) call site: {node_id}

Fuzzer calltree

0 [JweAlgorithmProviderFuzzer].fuzzerTestOneInput(com.code_intelligence.jazzer.api.FuzzedDataProvider) [function] [call site] 00000
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeInt(int,int) [function] [call site] 00001
1 [org.keycloak.crypto.def.AesKeyWrapAlgorithmProvider]. () [function] [call site] 00002
1 [org.keycloak.crypto.elytron.AesKeyWrapAlgorithmProvider]. () [function] [call site] 00003
1 [org.keycloak.crypto.fips.FIPSAesKeyWrapAlgorithmProvider]. () [function] [call site] 00004
1 [org.keycloak.crypto.def.DefaultRsaKeyEncryption256JWEAlgorithmProvider]. (java.lang.String) [function] [call site] 00005
2 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider]. (java.lang.String) [function] [call site] 00006
1 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryption256JWEAlgorithmProvider]. (java.lang.String) [function] [call site] 00007
2 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider]. (java.lang.String) [function] [call site] 00008
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeBoolean() [function] [call site] 00009
1 [org.keycloak.jose.jwe.enc.AesGcmJWEEncryptionProvider]. (java.lang.String) [function] [call site] 00010
2 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider]. () [function] [call site] 00011
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].pickValue(java.lang.Object[]) [function] [call site] 00012
1 [org.keycloak.jose.jwe.JWEKeyStorage]. () [function] [call site] 00013
1 [org.keycloak.jose.jwe.JWEKeyStorage].setEncryptionProvider(org.keycloak.jose.jwe.enc.JWEEncryptionProvider) [function] [call site] 00014
1 [org.keycloak.jose.jwe.JWEKeyStorage].setEncryptionKey(java.security.Key) [function] [call site] 00015
1 [org.keycloak.jose.jwe.JWEKeyStorage].setDecryptionKey(java.security.Key) [function] [call site] 00016
1 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00017
2 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00018
2 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00019
2 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00020
2 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00021
3 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].serializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00022
4 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00023
5 [org.keycloak.jose.jwe.JWEKeyStorage].generateCekBytes() [function] [call site] 00024
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider:org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes192CbcHmacSha384Provider:org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes256CbcHmacSha512Provider:org.keycloak.jose.jwe.enc.AesCbcHmacShaJWEEncryptionProvider:org.keycloak.jose.jwe.enc.AesGcmJWEEncryptionProvider].getExpectedCEKLength() [function] [call site] 00025
6 [org.keycloak.jose.jwe.JWEUtils].generateSecret(int) [function] [call site] 00026
5 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].deserializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00027
6 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00028
6 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00029
5 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider].deserializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00030
6 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00031
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaJWEEncryptionProvider].getExpectedCEKLength() [function] [call site] 00032
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes256CbcHmacSha512Provider].getExpectedCEKLength() [function] [call site] 00033
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes128CbcHmacSha256Provider].getExpectedCEKLength() [function] [call site] 00034
6 [org.keycloak.jose.jwe.enc.AesCbcHmacShaEncryptionProvider$Aes192CbcHmacSha384Provider].getExpectedCEKLength() [function] [call site] 00035
6 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00036
6 [org.keycloak.jose.jwe.JWEKeyStorage].setCEKKey(java.security.Key,org.keycloak.jose.jwe.JWEKeyStorage$KeyUse) [function] [call site] 00037
4 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00038
3 [org.keycloak.jose.jwe.enc.AesGcmEncryptionProvider].serializeCEK(org.keycloak.jose.jwe.JWEKeyStorage) [function] [call site] 00039
4 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00040
1 [org.keycloak.crypto.def.AesKeyWrapAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00041
2 [org.bouncycastle.crypto.engines.AESWrapEngine]. () [function] [call site] 00042
2 [org.bouncycastle.crypto.params.KeyParameter]. (byte[]) [function] [call site] 00043
2 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00044
1 [org.keycloak.crypto.fips.FIPSRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00045
2 [org.bouncycastle.crypto.asymmetric.AsymmetricRSAPublicKey]. (org.bouncycastle.crypto.Algorithm,byte[]) [function] [call site] 00046
2 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00047
2 [org.bouncycastle.crypto.fips.FipsRSA$KeyWrapOperatorFactory]. () [function] [call site] 00048
1 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00049
2 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00050
2 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00051
2 [org.keycloak.crypto.def.DefaultRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00052
2 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00053
1 [org.keycloak.crypto.fips.FIPSAesKeyWrapAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00054
2 [org.keycloak.jose.jwe.JWEKeyStorage].getCekBytes() [function] [call site] 00055
2 [org.bouncycastle.crypto.SymmetricSecretKey]. (org.bouncycastle.crypto.Parameters,byte[]) [function] [call site] 00056
2 [org.bouncycastle.crypto.fips.FipsAES$KeyWrapOperatorFactory]. () [function] [call site] 00057
1 [org.keycloak.crypto.elytron.AesKeyWrapAlgorithmProvider].encodeCek(org.keycloak.jose.jwe.enc.JWEEncryptionProvider,org.keycloak.jose.jwe.JWEKeyStorage,java.security.Key) [function] [call site] 00058
2 [org.keycloak.jose.jwe.JWEKeyStorage].getCEKKey(org.keycloak.jose.jwe.JWEKeyStorage$KeyUse,boolean) [function] [call site] 00059
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsBytes() [function] [call site] 00060
1 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00061
2 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00062
2 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00063
2 [org.keycloak.crypto.elytron.ElytronRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00064
1 [org.keycloak.crypto.elytron.AesKeyWrapAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00065
1 [org.keycloak.crypto.def.AesKeyWrapAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00066
2 [org.bouncycastle.crypto.engines.AESWrapEngine]. () [function] [call site] 00067
2 [org.bouncycastle.crypto.params.KeyParameter]. (byte[]) [function] [call site] 00068
1 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00069
2 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].getCipherProvider() [function] [call site] 00070
2 [org.keycloak.crypto.def.DefaultRsaKeyEncryptionJWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00071
2 [org.keycloak.crypto.def.DefaultRsaKeyEncryption256JWEAlgorithmProvider].initCipher(javax.crypto.Cipher,int,java.security.Key) [function] [call site] 00072
1 [org.keycloak.crypto.fips.FIPSAesKeyWrapAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00073
2 [org.bouncycastle.crypto.SymmetricSecretKey]. (org.bouncycastle.crypto.Parameters,byte[]) [function] [call site] 00074
2 [org.bouncycastle.crypto.fips.FipsAES$KeyWrapOperatorFactory]. () [function] [call site] 00075
1 [org.keycloak.crypto.fips.FIPSRsaKeyEncryptionJWEAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00076
2 [org.bouncycastle.crypto.asymmetric.AsymmetricRSAPrivateKey]. (org.bouncycastle.crypto.Algorithm,byte[]) [function] [call site] 00077
2 [org.bouncycastle.crypto.fips.FipsRSA$KeyWrapOperatorFactory]. () [function] [call site] 00078
1 [org.keycloak.jose.jwe.alg.DirectAlgorithmProvider].decodeCek(byte[],java.security.Key) [function] [call site] 00079