Addressing Quantum-Safe Cryptography in Open Source Development
Explore quantum-safe cryptography's importance, open-source initiatives, and practical implementation in OpenSSL to address future encryption vulnerabilities posed by quantum computing advancements.
Building an OpenSSL 3 Provider for PKCS11 - DevConf.CZ 2023
Explore OpenSSL 3's new provider system for PKCS11, learning its advantages, challenges, and implementation details for smartcard access and cryptographic operations.
OpenSSL's Journey: Technical Updates, Governance and Community - Lecture 1
Explore OpenSSL's technical updates, governance changes, and community engagement initiatives. Learn about new features in version 3.1 and future development plans.
Biting into the Forbidden Fruit
Exploring JavaScript cryptography's vulnerabilities, debunking myths, and analyzing real-world implementations to provide an updated perspective on its security challenges and potential solutions.
Managing Certificates and TLS Endpoints
Explore TLS/SSL management, vulnerabilities, and tools for maintaining secure systems. Learn about emerging threats, automation techniques, and best practices for certificate and endpoint management.
Getting Started with the TPM2 Software Stack - TSS2
Explore the TPM2 Software Stack: APIs, implementation, and community. Learn about recent developments, future directions, and practical applications in platform security.
OpenSSL and FIPS - They Are Back Together
Explore OpenSSL's FIPS 140-2 validation, architectural changes, and industry impact. Learn about TLS v1.3 support, validation scope, and post-certification steps in this technical presentation.
Post-Quantum Crypto - Today’s Defense Against Tomorrow’s Quantum Hacker
Overview of post-quantum cryptography and its practical applications in securing today's data against future quantum threats. Includes lessons from real-world integrations and demonstrations of quantum-safe alternatives.
The Security Trust Chain is Broken - What We're Doing About It
Explore the broken security trust chain, its impact on open-source projects, and ongoing efforts to address vulnerabilities in critical software infrastructure.
CacheBleed - A Timing Attack on OpenSSL Constant Time RSA
Explore a timing attack on OpenSSL's constant-time RSA implementation, uncovering vulnerabilities in cryptographic systems and their potential impact on security.
Hedging Public Key Encryption in the Real World
Explore real-world hedging techniques for public key encryption, focusing on OpenSSL implementation, coin sources, API design, and security models in cryptography.
OpenSSL Crypto PMD - Analysis and Performance Optimizations
Delve into OpenSSL PMD performance optimization techniques, exploring hotspot analysis, cross-platform benchmarking, and implementation strategies for enhanced cryptographic operations.
Secure FIPS Containers for Government Services
Secure government services with FIPS-compliant containers. Learn to implement OpenSSL, Java, Python, and Go security measures for enhanced protection.
OpenSSL and QUIC Using Foreign Function Memory API in Apache Tomcat
Leverage OpenSSL for TLS support in Apache Tomcat using Java 22's FFM API. Explore QUIC and HTTP/3 implementation with OpenSSL 3.3+.
Migration of OpenSSL from Dist-Git to Src-Git in Fedora
Explore OpenSSL migration from dist-git to src-git in Fedora, focusing on streamlining downstream package maintenance and simplifying rebase processes using packit for efficient workflow management.
The Missing Link: How to Collect and Leverage Software Bill of Materials (SBOMs)
Discover how Schneider Electric efficiently manages software security through SBOM collection and implementation, with real-world examples from Log4j and OpenSSL vulnerability responses.
Under-approximation for Scalable Bug Detection
Explore under-approximation techniques for efficient bug detection in large codebases. Learn about Incorrectness Logic, ISL, and Pulse-X for scalable, compositional program analysis and memory safety error detection.
Building a Rusty Path Validation Library for PyCA Cryptography
Explore the development of a new X.509 path validation implementation in Rust for PyCA Cryptography, enhancing security and standards compliance for Python's HTTPS connections.
Building a Rusty Path Validation Library for PyCA Cryptography
Explore the development of a new X.509 path validation implementation in Rust for PyCA Cryptography, enhancing security and standards compliance for Python's HTTPS connections.
GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers
Explore groundbreaking research on data memory-dependent prefetchers and their impact on cryptographic security, focusing on vulnerabilities in Apple M-series processors and constant-time implementations.