TKeeper logoTKeeperDevelopers
Download docs

Integration Tests

LLM index

Run the complete release verification with:

./gradlew releaseGate

This runs all root and module unit tests, verifies production/test artifact isolation, builds both test images, and executes the functional integration suite. Performance benchmarks remain separate.

Build both test images from the repository root:

./gradlew buildTestContainers

This creates exploit/tkeeper:dev and exploit/tkeeper:production-it. Run the complete functional suite with:

./gradlew :integration-tests:functional:test

Functional tests reuse the current images and do not rebuild them. Re-run buildTestContainers after changing application code, dependencies, or Dockerfiles. The test task always executes when requested instead of treating the external container state as UP-TO-DATE.

Run one class with:

./gradlew :integration-tests:functional:test \
  --tests 'org.exploit.test.functional.ProductionTransportSecurityTests'

Run only the audit-inspired malicious protocol-input probes with:

./gradlew :integration-tests:functional:test \
  --tests 'org.exploit.test.functional.FailureInjectionTests.frostRejectsInvalidSigningPackage' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.validFrostSigningTranscriptPasses' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.frostSigningTranscriptRejectsMaliciousInput' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.gg20RejectsInvalidSigningPackage' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.validGg20MtATranscriptsPassOnSupportedCurves' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.mldsaRejectsInvalidSigningPackage' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.validMLDSASigningTranscriptPasses' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.mldsaSigningTranscriptRejectsMaliciousInput' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.gg20MtARejectsMaliciousInput' \
  --tests 'org.exploit.test.functional.FailureInjectionTests.maliciousCoordinatorCannotInjectInvalidEciesParticipantSet'

Run the in-flight FROST, GG20, and ML-DSA crash-recovery checkpoints with:

./gradlew buildTestContainers
./gradlew :integration-tests:functional:test \
  --tests 'org.exploit.test.functional.FailureInjectionTests.inFlightProtocolStateDoesNotSurviveKeeperRestart*'

The development topology uses compose volumes for keeper-1 through keeper-3 so RocksDB and the keeper-2 SoftHSM token survive a container restart. Signing sessions remain process-local and must not survive it.

Run the deterministic property and fuzz-seed regressions for security-sensitive binary formats with:

./gradlew :platform-ecc:test \
  --tests 'org.exploit.keeper.platform.ecc.property.SecuritySerializationProperties' \
  --tests 'org.exploit.keeper.platform.ecc.fuzz.SecurityBinaryParserFuzzTest'

Run the coverage-guided parser fuzzer for 30 seconds with:

./gradlew :platform-ecc:fuzzSecurityParsers

Run the deterministic protocol-state properties and fuzz seeds with:

./gradlew :platform-ecc:test \
  --tests 'org.exploit.keeper.platform.ecc.property.ProtocolStateMachineProperties' \
  --tests 'org.exploit.keeper.platform.ecc.fuzz.SecurityProtocolStateFuzzTest'
./gradlew :platform-pqc:test \
  --tests 'org.exploit.keeper.platform.pqc.property.MLDSAStateMachineProperties' \
  --tests 'org.exploit.keeper.platform.pqc.fuzz.MLDSAStateMachineFuzzTest'
./gradlew :test \
  --tests 'org.exploit.keeper.tests.temporary.InMemoryTemporaryMapConcurrencyTest'

Run the coverage-guided FROST/GG20 and ML-DSA state-machine campaigns with:

./gradlew securityFuzz

Override the time budget when running a longer local or scheduled campaign:

./gradlew :platform-ecc:fuzzSecurityParsers -Pkeeper.fuzz.duration=5m
./gradlew :platform-ecc:fuzzProtocolStateMachines -Pkeeper.fuzz.duration=5m
./gradlew :platform-pqc:fuzzMLDSAStateMachine -Pkeeper.fuzz.duration=5m

The generated .cifuzz-corpus/ is local build state and is ignored. Minimize any finding and retain it as an explicit seed or property regression before merging the fix.

Do not pass keeper.features or keeper.platforms to buildTestContainers. The development integration artifact uses its own classpath and includes:

  • every production feature
  • development authentication
  • every platform
  • the test-only failure-injection module

The production transport test image uses the production UBI Dockerfile and excludes development authentication and failure injection. Regular shadowJar and dockerBuild also exclude failure injection.

See ../../integration-tests/README.md for local requirements and Testcontainers setup.

See Security Assurance for the security vectors exercised by the functional suite and the limits of that evidence.