"Don't roll your own crypto": Formal Methods for Security
summary
Explains why implementing cryptographic protocols is error-prone and shows how formal methods can prove the absence of vulnerabilities in primitives and protocol specifications. Gives concrete examples (Heartbleed, a SHA-3 buffer overflow, Matrix flaws) and describes applying formal methods to validate the MLS secure messaging protocol.
AI-written summary · about
chapters (9)
- 0:00Presentation by Théophile
- 0:48Heartbleed Vulnerability
- 2:57Chat3 Vulnerability
- 4:42Matrix Vulnerability
- 5:35PayPal Example
- 6:36Bug Concepts
- 9:35Testing
- 10:50Solutions
- 12:40Conclusion
related talks
19mModern Cryptography & Implementation Flaws
41mFormally Verifying Everybody's Cryptography
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
54mBroken Crypto is Broken
44mCryptography Pitfalls
39mKeynote: Towards High-Assurance Cryptographic Software
01h 28mThe Unfalsifiability of Security Claims
44mCryptography in the age of Heartbleed