Lightnews — Scholar-powered news

Cryspen @cryspen.com · 3d

Attending the OpenSSL conference? 🗣️

Our Chief Researcher, Karthikeyan Bhargavan, is giving a talk on high assurance post-quantum cryptography. He'd love to connect, so come find him for a chat about the future of crypto!

buff.ly/JIGSr0L

#OpenSSL #PQC #PostQuantum #Cryptography #Cybersecurity

OpenSSL Conference Prague 2025 | October 7-9, 2025

buff.ly

2

Cryspen @cryspen.com · 4d

We're excited to see the release of Signal's new post-quantum ratcheting protocol, SPQR!
We are proud to have collaborated with the Signal team on the formal analysis of the design and implementation of this.

Learn more on our blog buff.ly/Zi3rCBs and in Signal's announcement buff.ly/Srroli9

Helping Secure Signal's Post-Quantum Transition

Cryspen worked with Signal to formally analyze their new post-quantum ratchet

buff.ly

2 5

Cryspen @cryspen.com · 22d

RWC 2026 will be held in Taipei between March 9 and 11, 2026, and Karthik is serving as one of the program committee chairs. Submissions are now open and the deadline is October 10th. So if you have something cool you're doing with crypto, submit a talk!

1

Cryspen @cryspen.com · 22d

Submissions for RWC 2026 are open now!

Real World Crypto (RWC) is an annual event where cryptographers and security engineers can exchange ideas and results on the use of cryptography in mainstream applications.

buff.ly/0PoLe2D

RWC 2026

Real World Crypto Symposium

rwc.iacr.org

1 1 4

Cryspen @cryspen.com · Aug 18

How do we prove our cryptography is secure? 🧐

Join a talk by our Chief Researcher, Karthikeyan Bhargavan, on the rise of formally verified crypto!

#cryptography #formalverification #cybersecurity #PQC #infosec

High-Assurance Post-Quantum Cryptography OpenSSL Conference

Recent years have seen several landmark results in the formal verification of high-performance cryptographic libraries, leading to verified crypto code being adopted by mainstream projects like…

buff.ly

2

Cryspen @cryspen.com · Aug 11

JZLint 2.0 is here from MTG & Cryspen to lint post-quantum certificates! Now supporting ML-KEM & ML-DSA via libcrux.

Read more detail on the blog: buff.ly/EviQFar

#PQC #cryptography

PQC Support for JZLint

MTG and Cryspen release JZLint 2.0: A tool for analyzing post-quantum certificates

buff.ly

1 3

Reposted by Cryspen

European Research Council (ERC) @erc.europa.eu · Aug 1

Safer web browsing now possible thanks to spinout tech rooted in academic research. 🔐

On #WorldWideWebDay note Karthikeyan Bhargavan & team at Inria who developed tools to improve cryptographic security online.

👉 europa.eu/!hP6t8w

#ERCPoC #AI #Cryptography #Encryption #WebSecurity
@cryspen.com

3 11

Reposted by Cryspen

chrysn @chrysn.chaos.social.ap.brid.gy · Jul 15

We're launching the embedded-cal project: Providing access to hardware accelerated and formally proven cryptographic algorithms on #embedded systems in #rustlang. For this, I'm teaming up with @inria Paris and @cryspen, supported by the #eu funded @NGIZero.

Right now we're going through […]

Original post on chaos.social

chaos.social

2 4 5

Reposted by Cryspen

XMTP @xmtp.bsky.social · Jul 10

As of today, XMTP is now a fully quantum-resistant decentralized messaging protocol.

This means, any developer, anywhere in the world can leverage XMTP to provide their users with private, decentralized, & quantum-resistant messaging.

1 2 3

Cryspen @cryspen.com · Jul 9

We're proud to be recognized by Wavestone on their 2025 Radar of French Cybersecurity Startups.

A significant milestone that validates our core mission: building the essential developer tools for creating high-assurance software. Making provably secure software accessible to all developers.

Radar des startups cybersécurité françaises 2025

Wavestone, en partenariat avec Bpifrance, a le plaisir de publier son Radar de l’innovation cybersécurité français 2025.

www.wavestone.com

1

Cryspen @cryspen.com · Jun 30

Cloudflare has launched Orange Me2eets, an open-source end-to-end encrypted video calling demo! Built on top of our OpenMLS implementation, this project showcases secure, private real-time communication.

buff.ly/eEdJdnf

#Cloudflare #E2EE #VideoCalling #OpenSource #OpenMLS

Orange Me2eets: We made an end-to-end encrypted video calling app and it was easy

Orange Meets, our open-source video calling web application, now supports end-to-end encryption using the MLS protocol with continuous group key agreement

blog.cloudflare.com

5 6

Cryspen @cryspen.com · Jun 17

The hax toolchain already supports several proof backends, including F*, Rocq, ProVerif, and SSProve. Give it a try hax-playground.cryspen.com

1 4

Cryspen @cryspen.com · Jun 17

With the support of this grant, Cryspen will release a new version of hax that can translate Rust source code to purely functional models in Lean, enabling users to mathematically prove the correctness of their code using the increasingly popular Lean proof assistant.

1 2 4

Cryspen @cryspen.com · Jun 17

Cryspen is excited to announce it has been awarded a grant from the Ethereum Foundation to extend our hax verification toolchain with support for the Lean prover. Watch this space for more on this soon!

#FormalVerification #Lean #Rust

2 5 12

Cryspen @cryspen.com · Jun 10

At IEEE S&P, Théophile Wallez presented new results on the formal security verification of a bit-precise executable specification of TreeKEM, the core key agreement component of the MLS protocol. This work was done in collaboration with chief research scientist Karthikeyan Bhargavan.

TreeKEM: A Modular Machine-Checked Symbolic Security Analysis of Group Key Agreement in Messaging Layer Security

The Messaging Layer Security (MLS) protocol standard proposes a novel tree-based protocol that enables efficient end-to-end encrypted messaging over large groups with thousands of members. Its…

buff.ly

Cryspen @cryspen.com · May 14

Thrilled to welcome Clément to Cryspen's Tools and Proofs team! 🎉 His expertise in formal methods (PhD from Inria Paris!) will be for conducting rigorous proofs and enhancing our tooling. Welcome, Clément! 🚀

#NewHire #FormalMethods

buff.ly/Ab4wuNA

Cryspen Welcomes Clement

A Warm Welcome to Clement, Our Newest Cryspen Crew Member!

cryspen.com

4

Cryspen @cryspen.com · May 6

Updates from some of Cryspen's Open Source Projects!

Check out our latest updates:
- Dive into the latest developments from the past month on 𝐡𝐚𝐱. buff.ly/trIZnTx
- And see how the 𝐎𝐩𝐞𝐧𝐌𝐋𝐒 project is progressing and what's on the horizon. buff.ly/LAxrwnH

This Month in Hax: April 2025 - hax

In April, we successfully merged 38 pull requests!

hax.cryspen.com

Cryspen @cryspen.com · Apr 7

MLS Group State Forks: What, Why, How

Group state forks are faulty states that MLS groups can end up in. We have a new blog post that looks at what they are exactly, how that happens and how to resolve them, and how a a new OpenMLS feature makes fork resolutions a little easier.

MLS Group State Forks: What, Why, How

What are state forks, why can’t they happen but do anyway and how can they be resolved in OpenMLS?

buff.ly

1 1

Cryspen @cryspen.com · Apr 3

Rust identifiers, demystified! We're revealing our analysis toolchain's secrets in our latest blog. Discover how we tackle global vs. local identifiers for better formal verification with hax.

Read the full story: buff.ly/fWGDzLY

#RustLang #CodeAnalysis #HighAssurance

Redesigning Global Identifiers in hax - hax

A careful treatment of identifiers lies at the heart of all code analysis frameworks, and we hope our experience here proves useful to others.

buff.ly

1 1 6

Cryspen @cryspen.com · Apr 1

Updates from some of Cryspen's Open Source Projects!

Check out our latest updates:
- Dive into the latest developments from the past month on 𝐡𝐚𝐱. buff.ly/TJpxWW1
- And see how the 𝐎𝐩𝐞𝐧𝐌𝐋𝐒 project is progressing and what's on the horizon. buff.ly/VAJxltR

This Month in Hax: March 2025 - hax

In March, we successfully merged 32 pull requests!

buff.ly

3 5

Cryspen @cryspen.com · Mar 27

RWC 2025 buzzed with energy as the cutting edge of cryptography was presented to and discussed among an audience. Today, Cryspen teamed up with Google to showcase practical, scalable, verified solutions for high-assurance software and post-quantum cryptography.

Cryspen @ RWC 2025

Real World Crypto 2025 buzzed with energy as the cutting edge of cryptography was presented to and discussed among an audience of leading researchers and developers from academia and industry. Today,…

buff.ly

3

Cryspen @cryspen.com · Mar 27

New blog post! 📝 Control flow analysis with Hax. In this post we show how to ensure control flow properties such as "function A is always called before function B" in Rust. Super relevant for security! 🔒

buff.ly/ntTW299

#rustlang #formalverification #security

Control flow analysis with hax

A difficulty of formal verification is that specifying programs can be hard. Certain kinds of programs can end up having a specification that is as complex as the code itself. In this case it is…

buff.ly

3 7

Reposted by Cryspen

Real World Crypto Symposium @rwc.iacr.org · Feb 4

Thank you to new sponsors of Real World Crypto 2025, CASA, Chelpis Quantum, Cryspen, and Interop Labs! Your contributions are essential in making this conference possible and we look forward to seeing you in Sofia!

1 4 8

Cryspen @cryspen.com · Mar 18

Cryspen is heading to RWC in Sofia next week! 🚀 We'll be presenting "Using Formally Verified Post-Quantum Algorithms at Scale" and our team will be on hand to discuss all things high assurance software and crypto. Oh, and we're sponsoring too!

buff.ly/IC7eg8O

#RWC #Cryptography #PostQuantum

RWC 2025

Real World Crypto Symposium

buff.ly

1 11

Cryspen @cryspen.com · Mar 15

Exciting to see MLS gaining traction! 🚀 This increased adoption is a huge win for security and privacy in messaging.

#MLS #Security #Privacy #XMTP #OpenMLS

XMTP @xmtp.bsky.social · Mar 14

Privacy is under attack.

🇬🇧 The UK made Apple drop ADP.
🇮🇳 India forced a backdoor to WhatsApp.
🇷🇺 Russia & 🇹🇷 Turkey banned Discord.

Centralized systems are breaking down & encryption is not enough.
We need decentralized messaging.

1/7

1 3