William Wang

Summary: Trail of Bits published a post by William Wang of UCLA on May 29, 2020, describing work on detecting bad OpenSSL usage through program analysis. The post notes that OpenSSL is one of the most popular cryptographic libraries, used even by other languages through bindings, and that its low-level API design makes it notoriously easy to misuse.
Why it matters: The library behind so much of the world's encryption is easy to call incorrectly, and the mistakes tend to cluster into recurring patterns rather than one-off errors - which is exactly what makes automated detection worth building.

Read the original at Trail of Bits Blog ↗