is there Stack fuzzing test report?

[Ethan.jskim]

Dear expert.

one of my clients manufactures medical devices.

as you may know, medical devices need to special certification depending on the country, such as North America(FDA), Europe, Korea(KFDA) etc.

we are currently in the process of European medical device certification, and report of "FUZZ test for BT STACK" must be submitted.

is Nordic has FUZZ test report for STACK?

if you have FUZZ test or similar test report, please let me know where I can find.

BR.

Ethan.

[Simonr]

Hi

Sigurd is out of office, so I have been assigned this case while he's away. According to the product security team, we don't have BLE tests using random inputs like this I'm afraid. We test for invalid parameters and invalid behavior, both as part of BLE conformance and for our own testing, as well as robustness tests that check how the stack operates in stressful conditions but all of these are deterministic.

Best regards,

Simon

[Ethan.jskim]

Simon.

thanks for your answer.

I understood that there is no random input test and I think this is FUZZ test I need

so, is there any way I can get the result of the robustness test report for BLE conformance verification that Nordic has tested themselves?

BR.

Ethan

[Simonr]

Hi Ethan

Do you have a reference to what exactly this is so I know what to ask the product security team about?

Best regards,

Simon

[Ethan.jskim]

Simon

I think what the certification body is asking for is a test report on the stability of the BLE stack.

So even if it is not a FUZZ TEST, we need to submit a report related to the stability of the stack, and it seems like we need to explain the current situation that our supplier (Nordic) does not do FUZZ testing.

BR.

Ethan.