Verified ML-KEM (Kyber) in Rust

We implemented ML-KEM in Rust and formally verified its correctness with hax

ML-KEM, previously known as Kyber, is the first post-quantum secure key-encapsulation mechanism (KEM) to get standardised by NIST in FIPS 203. Cryspen has built a new high assurance Rust …

Welcome Jan & Lucas

📢 Exciting News! Cryspen is thrilled to announce the addition of two exceptional minds to our team: Dr. Lucas Franceschino and Jan Winkelmann.

An Analysis of Signal's PQXDH

A comprehensive, machine-checked, post-quantum security proof of the Signal PQXDH protocol.

Signal recently published a new, post-quantum secure, version of their X3DH protocol called PQXDH. As with any new cryptographic protocol, it is important to precisely analyse its security …

Announcing Campus Cyber Circus Project

Cryspen partners with Inria to build a new integrated development and verification environment

🎉 We’re excited to announce that Cryspen partnered with Inria on a transfer project to build a new integrated development and verification environment (IDVE). The project is part of the transfer …

Specifying Oblivious Pseudonymization

In this blog post we announce an executable specification in the hacspec specification language for the ScrambleDB pseudonymization system, developed by Cryspen as part of the BMBF ATLAS project.

Internet Defense Prize 2023

Cryspen co-founders win Usenix Security prizes

At the 32nd Usenix Security Symposium in Anaheim CA, a paper on the Messaging Layer Security Protocol, co-authored by our founders Jonathan Protzenko and Karthikeyan Bhargavan, was awarded both the …

Prairie and Atlas

Privacy-Preserving Data Analysis at Cryspen

With the widespread adoption and deployment of machine learning across enterprises, ever-increasing amounts of data are being collected, stored, communicated, combined, and computed over by …

Three (thousand) may keep a secret

An introduction to Messaging Layer Security

“Three may keep a secret, if two of them are dead.” - Benjamin Franklin (1735) However skeptical we may be of our human ability to keep secrets, we still routinely participate in group conversations …

MLS - RFC 9420

A new standard for secure messaging

✨ We are thrilled to announce the release of the MLS specification as RFC 9420. RFC 9420 is a comprehensive description of the first standardised, efficient, asynchronous, key establishment protocol …