Cryspen

PQC Support for JZLint MTG and Cryspen release JZLint 2.0: A tool for analyzing post-quantum certificates

JZLint 2.0 is here from MTG & Cryspen to lint post-quantum certificates! Now supporting ML-KEM & ML-DSA via libcrux.

Read more detail on the blog: buff.ly/EviQFar

#PQC #cryptography

Safer web browsing now possible thanks to spinout tech rooted in academic research. 🔐

On #WorldWideWebDay note Karthikeyan Bhargavan & team at Inria who developed tools to improve cryptographic security online.

👉 europa.eu/!hP6t8w

#ERCPoC #AI #Cryptography #Encryption #WebSecurity
@cryspen.com

We're launching the embedded-cal project: Providing access to hardware accelerated and formally proven cryptographic algorithms on #embedded systems in #RustLang. For this, I'm teaming up with @inria Paris and @cryspen, supported by the #EU funded @NGIZero.

Right now we're going through […]

As of today, XMTP is now a fully quantum-resistant decentralized messaging protocol.

This means, any developer, anywhere in the world can leverage XMTP to provide their users with private, decentralized, & quantum-resistant messaging.

Radar des startups cybersécurité françaises 2025 Wavestone, en partenariat avec Bpifrance, a le plaisir de publier son Radar de l’innovation cybersécurité français 2025.

We're proud to be recognized by Wavestone on their 2025 Radar of French Cybersecurity Startups.

A significant milestone that validates our core mission: building the essential developer tools for creating high-assurance software. Making provably secure software accessible to all developers.

Orange Me2eets: We made an end-to-end encrypted video calling app and it was easy Orange Meets, our open-source video calling web application, now supports end-to-end encryption using the MLS protocol with continuous group key agreement

Cloudflare has launched Orange Me2eets, an open-source end-to-end encrypted video calling demo! Built on top of our OpenMLS implementation, this project showcases secure, private real-time communication.

buff.ly/eEdJdnf

#Cloudflare #E2EE #VideoCalling #OpenSource #OpenMLS

The hax toolchain already supports several proof backends, including F*, Rocq, ProVerif, and SSProve. Give it a try hax-playground.cryspen.com

With the support of this grant, Cryspen will release a new version of hax that can translate Rust source code to purely functional models in Lean, enabling users to mathematically prove the correctness of their code using the increasingly popular Lean proof assistant.

Cryspen is excited to announce it has been awarded a grant from the Ethereum Foundation to extend our hax verification toolchain with support for the Lean prover. Watch this space for more on this soon!

#FormalVerification #Lean #Rust

TreeKEM: A Modular Machine-Checked Symbolic Security Analysis of Group Key Agreement in Messaging Layer Security The Messaging Layer Security (MLS) protocol standard proposes a novel tree-based protocol that enables efficient end-to-end encrypted messaging over large groups with thousands of members. Its…

At IEEE S&P, Théophile Wallez presented new results on the formal security verification of a bit-precise executable specification of TreeKEM, the core key agreement component of the MLS protocol. This work was done in collaboration with chief research scientist Karthikeyan Bhargavan.

Cryspen Welcomes Clement A Warm Welcome to Clement, Our Newest Cryspen Crew Member!

Thrilled to welcome Clément to Cryspen's Tools and Proofs team! 🎉 His expertise in formal methods (PhD from Inria Paris!) will be for conducting rigorous proofs and enhancing our tooling. Welcome, Clément! 🚀

#NewHire #FormalMethods

buff.ly/Ab4wuNA

This Month in Hax: April 2025 - hax In April, we successfully merged 38 pull requests!

Updates from some of Cryspen's Open Source Projects!

Check out our latest updates:
- Dive into the latest developments from the past month on 𝐡𝐚𝐱. buff.ly/trIZnTx
- And see how the 𝐎𝐩𝐞𝐧𝐌𝐋𝐒 project is progressing and what's on the horizon. buff.ly/LAxrwnH

MLS Group State Forks: What, Why, How What are state forks, why can’t they happen but do anyway and how can they be resolved in OpenMLS?

MLS Group State Forks: What, Why, How

Group state forks are faulty states that MLS groups can end up in. We have a new blog post that looks at what they are exactly, how that happens and how to resolve them, and how a a new OpenMLS feature makes fork resolutions a little easier.

Redesigning Global Identifiers in hax - hax A careful treatment of identifiers lies at the heart of all code analysis frameworks, and we hope our experience here proves useful to others.

Rust identifiers, demystified! We're revealing our analysis toolchain's secrets in our latest blog. Discover how we tackle global vs. local identifiers for better formal verification with hax.

Read the full story: buff.ly/fWGDzLY

#RustLang #CodeAnalysis #HighAssurance

This Month in Hax: March 2025 - hax In March, we successfully merged 32 pull requests!

Updates from some of Cryspen's Open Source Projects!

Check out our latest updates:
- Dive into the latest developments from the past month on 𝐡𝐚𝐱. buff.ly/TJpxWW1
- And see how the 𝐎𝐩𝐞𝐧𝐌𝐋𝐒 project is progressing and what's on the horizon. buff.ly/VAJxltR

Cryspen @ RWC 2025 Real World Crypto 2025 buzzed with energy as the cutting edge of cryptography was presented to and discussed among an audience of leading researchers and developers from academia and industry. Today,…

RWC 2025 buzzed with energy as the cutting edge of cryptography was presented to and discussed among an audience. Today, Cryspen teamed up with Google to showcase practical, scalable, verified solutions for high-assurance software and post-quantum cryptography.

Control flow analysis with hax A difficulty of formal verification is that specifying programs can be hard. Certain kinds of programs can end up having a specification that is as complex as the code itself. In this case it is…

New blog post! 📝 Control flow analysis with Hax. In this post we show how to ensure control flow properties such as "function A is always called before function B" in Rust. Super relevant for security! 🔒

buff.ly/ntTW299

#rustlang #formalverification #security

Thank you to new sponsors of Real World Crypto 2025, CASA, Chelpis Quantum, Cryspen, and Interop Labs! Your contributions are essential in making this conference possible and we look forward to seeing you in Sofia!

RWC 2025 Real World Crypto Symposium

Cryspen is heading to RWC in Sofia next week! 🚀 We'll be presenting "Using Formally Verified Post-Quantum Algorithms at Scale" and our team will be on hand to discuss all things high assurance software and crypto. Oh, and we're sponsoring too!

buff.ly/IC7eg8O

#RWC #Cryptography #PostQuantum

Exciting to see MLS gaining traction! 🚀 This increased adoption is a huge win for security and privacy in messaging.

#MLS #Security #Privacy #XMTP #OpenMLS

Hax for everyone - hax The hax toolchain has been successfully used to formally verify our cryptographic implementations for ML-KEM,Bertie and more. All these projects are developed with formal verification (using hax) in…

New Blog Post: Making hax More Usable for Everyone!

We've just published a new technical blog post detailing our ongoing efforts to improve hax. Learn about the strategies and implementations we're employing to make hax more usable and efficient for all users.

Cryspen Welcomes Clara A Warm Welcome to Clara, Our Newest Cryspen Crew Member!

We welcomed Clara to the Cryspen team this month!

She's a TU Berlin grad, a Rust enthusiast, and a passionate open-source contributor. Her skills in low-level programming and commitment to secure software make her a perfect fit for our mission.

Protecting against cyberattacks: Project sets new standards in IT security with formal verification and flexibility Cyberattacks on companies and public institutions are increasing dramatically worldwide. The PROTECT project, funded by the Cyberagentur, is developing solutions to enhance the resilience of IT system...

We are excited to be part of the PROTECT team to develop new approaches to make IT systems more resilient.

www.dfki.de/en/web/news/...

Our paper "hax: Verifying Security-Critical Rust Software using Multiple Provers" is now available on eprint and will be published in the VSTTE 2024 proceedings.

A new chapter - hax We're thrilled to announce that hax is entering a new era of stability and growth with the launch of our new website, a fresh start at Cryspen, and our first official release, v0.1.0!

🚀 hax is entering a new era! 🚀

We're excited to announce the launch of our new website and our first official release!

Check out our latest blog post to learn more about this exciting new chapter

🔗 https://hax.cryspen.com/blog/2025/01/21/a-new-chapter.html

#opensource #hax

Cryspen is thrilled to be part of the "Verifiably Secure IT Ecosystem" funded by the Cyberagentur! 🚀

Test your PQC readiness now! Our new website, featuring our formally verified libcrux crypto library, makes it easy to see if your browser is future-proof.

Head over to https://buff.ly/4ak1LB6 to test your browser and learn more about post-quantum cryptography.

#postquantumcrypto #cryptography

Cryspen is looking for a talented Proof Engineer to join our team in Germany or France! 🇫🇷🇩🇪

Cryspen is on a mission to build high-assurance software and formal verification tools that make the world a safer place.

https://buff.ly/4jeEJiN

#ProofEngineering #Hiring

Boffins carve up C so code can be converted to Rust Mini-C is a subset of C that can be automatically turned to Rust without much fuss

Great News! Cryspen's libcrux crypto library was mentioned in a recent article in The Register.

If you're interested in learning more about how libcrux can be used to improve the security of your applications, please visit our website or contact us.

bertie.cryspen.com now available with mlkem TLS and Bertie

We've launched bertie.cryspen.com with mlkem TLS, powered by our Bertie TLS 1.3 implementation. This provides a secure and efficient endpoint for your applications.

Read more here: https://buff.ly/3ZOiJT3

#mlkem #TLS #pqc