News for hackers. Stuff that matters.

A comment on How do we know if a crypto function is correctly implemented?. Parent comment

Re:How do we know if a crypto function is correctly implemen... by giech on Wednesday August 19, 2015 @08:40AM (#10085018)
It can, but it is highly non-trivial. Here are a couple of 2015 papers on OpenSSL verification from the same group at Princeton:

SHA verification (ACM TOPLAS): https://www.cs.princeton.edu/~appel/papers/verif-sha.pdf

HMAC verification (Usenix Security): http://www.cs.princeton.edu/~appel/papers/verified-hmac.pdf

[ Parent | on HN ]

There are no comments on this comment yet.