[pitboss] phase 11: Track J.9 + Track L.9 — CRYPTO, JSON_PARSE, UNAUTHORIZED_ID, DATA_EXFIL corpora

tests/dynamic_fixtures/crypto/rust/benign.rs

@@ -0,0 +1,11 @@
+// Phase 11 (Track J.9) — Rust CRYPTO benign control fixture.
+//
+// Uses `rand::rngs::OsRng` (a CSPRNG) for key derivation.
+use rand::rngs::OsRng;
+use rand::RngCore;
+
+pub fn run(_value: &str) -> [u8; 32] {
+    let mut key = [0u8; 32];
+    OsRng.fill_bytes(&mut key);
+    key
+}

tests/dynamic_fixtures/crypto/rust/vuln.rs

@@ -0,0 +1,9 @@
+// Phase 11 (Track J.9) — Rust CRYPTO vuln fixture.
+//
+// Uses `rand::thread_rng` truncated to 16 bits (a non-CSPRNG
+// configuration) to derive a key bounded inside the weak budget.
+use rand::Rng;
+
+pub fn run(_value: &str) -> u16 {
+    rand::thread_rng().gen_range(0..=0xFFFF) as u16
+}