The OpenSC project [1] is an open-source middleware providing a set of libraries and utilities for the interaction with smartcards, mainly focusing on cryptographic smartcards and their applications. OpenSC processes potentially untrusted inputs from the hardware, and if the input is not handled correctly, it might pose a security threat.

A simple yet quite efficient method for discovering issues in input handling is fuzzing. Continuous fuzzing of open-source software is a longstanding effort of the OSS-Fuzz project [2]. The OSS-Fuzz project already supports OpenSC fuzzing, but the code coverage of existing fuzz targets is limited only to the most common drivers and operations.

The goal of this work is to analyze the current state of OpenSC fuzzing support in the OSS-Fuzz and suggest and implement improvements to the fuzz targets in the OpenSC project. For this purpose, the student will:

• Learn about fuzz testing techniques and the OSS-Fuzz environment.
• Study existing fuzz targets in the OpenSC project, and analyze their code coverage and limitations.
• Propose and implement at least three new fuzz targets in the OpenSC project and try to improve existing fuzz targets based on the acquired data from OSS-Fuzz.
• Evaluate testing results with the implemented enhancements.

1. OpenSC: Open-source smart card tools and middleware
   https://github.com/OpenSC/OpenSC
2. OSS-Fuzz: Continuous Fuzzing for Open Source Software
   https://github.com/google/oss-fuzz