Cryspen

Cryspen

@cryspen.com

High Assurance Software

117 followers0 following73 posts

๐Ÿš€ Protect your data against harvest-now-decrypt-later attacks with PSQ! Weโ€™ve built a lightweight, hybrid post-quantum protocol that injects HNDL security into your existing protocols. The easiest way to start your post-quantum transition today without rewriting your entire stack. buff.ly/irOf0lH

cryspen.comPSQ: Post-Quantum Shared Secrets Made EasyWeโ€™re pleased to announce the PSQ protocol for establishing a hybrid post-quantum shared secret between two parties. Cryptographic protocols, which exclusively rely on classical public keyโ€ฆ

๐Ÿš€ Weโ€™re growing! Cryspen is hiring. Are you passionate about high-assurance software or cutting-edge cryptography? We are looking for talented individuals to join our team. ๐Ÿ”น Compiler and Verification Tools Engineer ๐Ÿ”น Cryptography Engineer ๐Ÿ‘‰ Apply here: buff.ly/J9TF6NB #Hiring #TechJobs

join.comJobs at Cryspen | JOINJobs at Cryspen. Browse all our open positions and become part of our growing team! We are currently looking for additions to our company. Apply today!

New blog post is live! ๐Ÿฆ€ We used hax and F* to formally verify termination and panic freedom for a small real-world Rust crate. We also put Kani, Verus, and Aeneas to the test on the same code, exploring the different approaches, challenges, and proof efforts required by each tool. buff.ly/h5bG37W

hax.cryspen.comVerifying a real world Rust crate - haxIn this post, we are going to use hax and F* to verify a small real world Rust crate. Then, we will try other verification tools (Kani, Verus, Aeneas) to the same thing. The Rust crate gcd by Coreyโ€ฆ

Catch Karthik, our Chief Researcher, at the European Conference on PQC Migration next week, where he will be championing the need for the EU to implement provably secure protocols and high-assurance software. See you there? ๐Ÿ‘‹ ๐Ÿ“… Dec 2-3, 2025 ๐Ÿ”— buff.ly/w3XMpJQ #PQC #EU

Cryspen reposted

We are excited to share that Karthikeyan Bhargavan, co-founder and chief research scientist at Cryspen, will give a keynote talk at the PQCSA "PQC Migration & Supply Chain Readiness for the Automotive Industry" workshop (co-located with ESCAR in Frankfurt).

RWC 2026 will be held in Taipei between March 9 and 11, 2026, and Karthik is serving as one of the program committee chairs. Submissions are now open and the deadline is October 10th. So if you have something cool you're doing with crypto, submit a talk!

How do we prove our cryptography is secure? ๐Ÿง Join a talk by our Chief Researcher, Karthikeyan Bhargavan, on the rise of formally verified crypto! #cryptography #formalverification #cybersecurity #PQC #infosec

buff.lyHigh-Assurance Post-Quantum Cryptography OpenSSL ConferenceRecent years have seen several landmark results in the formal verification of high-performance cryptographic libraries, leading to verified crypto code being adopted by mainstream projects likeโ€ฆ

Cryspen reposted

As of today, XMTP is now a fully quantum-resistant decentralized messaging protocol. This means, any developer, anywhere in the world can leverage XMTP to provide their users with private, decentralized, & quantum-resistant messaging.

We're proud to be recognized by Wavestone on their 2025 Radar of French Cybersecurity Startups. A significant milestone that validates our core mission: building the essential developer tools for creating high-assurance software. Making provably secure software accessible to all developers.

wavestone.comRadar des startups cybersรฉcuritรฉ franรงaises 2025Wavestone, en partenariat avec Bpifrance, a le plaisir de publier son Radar de lโ€™innovation cybersรฉcuritรฉ franรงais 2025.

Cloudflare has launched Orange Me2eets, an open-source end-to-end encrypted video calling demo! Built on top of our OpenMLS implementation, this project showcases secure, private real-time communication. buff.ly/eEdJdnf #Cloudflare #E2EE #VideoCalling #OpenSource #OpenMLS

blog.cloudflare.comOrange Me2eets: We made an end-to-end encrypted video calling app and it was easyOrange Meets, our open-source video calling web application, now supports end-to-end encryption using the MLS protocol with continuous group key agreement

Cryspen is excited to announce it has been awarded a grant from the Ethereum Foundation to extend our hax verification toolchain with support for the Lean prover. Watch this space for more on this soon! #FormalVerification #Lean #Rust

With the support of this grant, Cryspen will release a new version of hax that can translate Rust source code to purely functional models in Lean, enabling users to mathematically prove the correctness of their code using the increasingly popular Lean proof assistant.

At IEEE S&P, Thรฉophile Wallez presented new results on the formal security verification of a bit-precise executable specification of TreeKEM, the core key agreement component of the MLS protocol. This work was done in collaboration with chief research scientist Karthikeyan Bhargavan.

buff.lyTreeKEM: A Modular Machine-Checked Symbolic Security Analysis of Group Key Agreement in Messaging Layer SecurityThe Messaging Layer Security (MLS) protocol standard proposes a novel tree-based protocol that enables efficient end-to-end encrypted messaging over large groups with thousands of members. Itsโ€ฆ

RWC 2025 buzzed with energy as the cutting edge of cryptography was presented to and discussed among an audience. Today, Cryspen teamed up with Google to showcase practical, scalable, verified solutions for high-assurance software and post-quantum cryptography.

buff.lyCryspen @ RWC 2025Real World Crypto 2025 buzzed with energy as the cutting edge of cryptography was presented to and discussed among an audience of leading researchers and developers from academia and industry. Today,โ€ฆ

New blog post! ๐Ÿ“ Control flow analysis with Hax. In this post we show how to ensure control flow properties such as "function A is always called before function B" in Rust. Super relevant for security! ๐Ÿ”’ buff.ly/ntTW299 #rustlang #formalverification #security

buff.lyControl flow analysis with haxA difficulty of formal verification is that specifying programs can be hard. Certain kinds of programs can end up having a specification that is as complex as the code itself. In this case it isโ€ฆ

Cryspen reposted

Thank you to new sponsors of Real World Crypto 2025, CASA, Chelpis Quantum, Cryspen, and Interop Labs! Your contributions are essential in making this conference possible and we look forward to seeing you in Sofia!

Exciting to see MLS gaining traction! ๐Ÿš€ This increased adoption is a huge win for security and privacy in messaging. #MLS #Security #Privacy #XMTP #OpenMLS

XMTP@xmtp.org

Privacy is under attack. ๐Ÿ‡ฌ๐Ÿ‡ง The UK made Apple drop ADP. ๐Ÿ‡ฎ๐Ÿ‡ณ India forced a backdoor to WhatsApp. ๐Ÿ‡ท๐Ÿ‡บ Russia & ๐Ÿ‡น๐Ÿ‡ท Turkey banned Discord. Centralized systems are breaking down & encryption is not enough. We need decentralized messaging. 1/7

New Blog Post: Making hax More Usable for Everyone! We've just published a new technical blog post detailing our ongoing efforts to improve hax. Learn about the strategies and implementations we're employing to make hax more usable and efficient for all users.

buff.lyHax for everyone - haxThe hax toolchain has been successfully used to formally verify our cryptographic implementations for ML-KEM,Bertie and more. All these projects are developed with formal verification (using hax) inโ€ฆ

Our paper "hax: Verifying Security-Critical Rust Software using Multiple Provers" is now available on eprint and will be published in the VSTTE 2024 proceedings.

ePrint Updates@eprint.ing.bot

hax: Verifying Security-Critical Rust Software using Multiple Provers (Karthikeyan Bhargavan, Maxime Buyse, Lucas Franceschino, Lasse Letager Hansen, Franziskus Kiefer, Jonas Schneider-Bensch, Bas Spitters) ia.cr/2025/142

๐Ÿš€ hax is entering a new era! ๐Ÿš€ We're excited to announce the launch of our new website and our first official release! Check out our latest blog post to learn more about this exciting new chapter ๐Ÿ”— https://hax.cryspen.com/blog/2025/01/21/a-new-chapter.html #opensource #hax

hax.cryspen.comA new chapter - haxWe're thrilled to announce that hax is entering a new era of stability and growth with the launch of our new website, a fresh start at Cryspen, and our first official release, v0.1.0!

Cryspen is thrilled to be part of the "Verifiably Secure IT Ecosystem" funded by the Cyberagentur! ๐Ÿš€

20.01.25: A milestone for IT security: Contract by @CybAgBund with 5 partners for the "Trustworthy IT Ecosystem" (ร–vIT) research program. Aim: Proven IT security and a global network of experts. #ร–vIT #Cybersecurity #FormalVerification #Inno... weiterlesen

Test your PQC readiness now! Our new website, featuring our formally verified libcrux crypto library, makes it easy to see if your browser is future-proof. Head over to https://buff.ly/4ak1LB6 to test your browser and learn more about post-quantum cryptography. #postquantumcrypto #cryptography

Updates from Cryspen's Open Source Projects! Check out our latest updates: - Dive into the latest developments from the past month on ๐ก๐š๐ฑ. buff.ly/3VgVccc - And see how the ๐Ž๐ฉ๐ž๐ง๐Œ๐‹๐’ project is progressing and what's on the horizon. buff.ly/4fVzNgX

buff.lyThis month in hax: November 2024Despite some team members attending an offsite work week event, we merged 24 PRs this month. Hereโ€™s an overview of the work of the month. The frontend remained stable this month, with only a few pull ...