Know Your Crypto: Standardizing and Detecting Crypto Algorithms the Open Source Way
Talkat Open Source Summit Europe 2025 · on Monday, 2025-08-25· at 16:30· Elicium 2B (Elicium Level 1)·
summary
Open dataset and standardize work that began as a customer request now maps concrete results: a YAML-based list (started at ~60 algorithms and grown to >120), keyword patterns used in production scans across billions of files, a simple Python PoC demo for CI integration, and adoption by SPDX Crypto Algorithms List with donation to the Software Transparency Foundation. Detection is keyword-based with documented false-positive challenges, released under CC0 license and published as crypto_algorithms_open_dataset.
AI-written summary · about
chapters (9)
- 0:00Crypto detection challenges
- 2:30Why standardizing crypto matters
- 3:56Open crypto dataset
- 5:44Customer request to open-source
- 7:53Community contributions cycle
- 9:17SPDX standardization efforts
- 11:26Crypto detection challenges and future
- 12:30How to contribute
- 13:17Conclusion
related talks
23mTowards declaring crypto algorithms in SBOMs: crypto_algorithms_open_dataset
43mOpen Source, Encryption and Export Regulations & The New Compliance Frontier
21mCryptography at Scale: Building a Practical Cryptographic...
26mPANDEMONIUM: Automated Identification of Cryptographic Algorithms
44mNavigating Open Source and Open Standards for Better Cybersecurity
18mBeyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection(…)
12mUsable Cybersecurity Assessment Tools
13mSecuring the Software Commons: Standards, Automation, and AI for a Resilie...