How to: Microsoft Security Risk Detection (Fuzzing)
Microsoft Security Risk Detection (MSRD): How to fuzz
Vale
Vale (Verified Assembly Language for Everest) is a tool for constructing formally verified high-performance assembly language code, with an emphasis on cryptographic code. It uses existing verification frameworks, such as Dafny and F*, for formal…
EverCrypt
EverCrypt (opens in new tab) is a high-performance, cross-platform, formally verified modern cryptographic provider distributed as a combined C/ASM library. EverCrypt packages cryptographic implementations from the HACL* and ValeCrypt projects, and automatically picks the fastest…
GitHub Publication Publication Publication Publication Publication
PASTA: PASsword-based Threshold Authentication
We introduce and formalize a new notion of password-based threshold token authentication, which protects password-based authentication against single point of failures. Specifically, we distribute the role of a single server among n servers and allow…
snmalloc: A message passing Allocator
SIKE in Hardware for IoT
Elliptic curve groups have been a popular choice in the implementation of traditional and post-quantum cryptographic schemes, including Diffie-Hellman type key-exchange protocols and digital signature algorithms. While some of these applications require to perform multidimensional…
Permissions Plugins as Android Apps
AVML (Acquire Volatile Memory for Linux)
A portable volatile memory acquisition tool for Linux. AVML is an X86_64 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory…