Cyber Risks · Trail of Bits Blog

We crypto now

Summary: Trail of Bits announced a new cryptographic services practice, led by principal engineer Paul Kehrer, a founding member of the Python Cryptographic Authority, alongside security engineers JP Smith and Ben Perez. The firm says it will publish tools, safe cryptographic constructions it calls recipes, and blog posts, and will work with clients on designing novel cryptographic constructions, reviewing proposed schemes for soundness, and building tools to detect implementation errors.

What you should know: The practice rests on a stated premise that correctly implementing each component is already difficult and that improperly combining them can produce disastrous results, so the risk sits in composition and API design rather than in any single library.

Read the original at Trail of Bits Blog ↗