PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sneak peek: A new ASN.1 API for Python

blog.trailofbits.com | blog | #rust | #cryptography | #python | #supply-chain-security | #pyca | #asn1
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

We're working on integrating an ASN.1 API into PyCA Cryptography, built on top of the same Rust ASN.1 implementation already used by Cryptography's X.509 APIs.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Rust-proof your code with our new Testing Handbook chapter
Trail of Bits added a Rust testing chapter to its Testing Handbook: Miri, property testing, Clippy, zeroization, Kani model checking and dependency vetting, plus the rust-review Claude Code plugin.
blog · blog.trailofbits.com
Shipping post-quantum cryptography to Python
Trail of Bits added post-quantum support to pyca/cryptography, one of PyPI's most-downloaded packages, putting quantum-resistant ML-KEM and ML-DSA one pip install away for the Python ecosystem.
blog · blog.trailofbits.com
Reverie: An optimized zero-knowledge proof system
Trail of Bits built Reverie, a ZK proof system optimized for prover efficiency with no trusted setup, trading larger proofs for speed; proofs can stream across a network and verify incrementally.
blog · blog.trailofbits.com
Better Encrypted Group Chat
An intern built molasses, a Rust implementation of the MLS draft-6 protocol, showing how tree-based group keying scales end-to-end encrypted group chat beyond pairwise and sender-key schemes.
blog · blog.trailofbits.com
Siderophile: Expose your Crate’s Unsafety
Trail of Bits open-sourced Siderophile, a Rust tool that finds every unsafe function in a crate's dependencies and traces them up the callgraph, ranking functions by unsafety to pick fuzzing targets.
blog · blog.trailofbits.com
Introducing windows-acl: working with ACLs in Rust
windows-acl, a new open-source Rust crate from Trail of Bits, simplifies programmatically working with Windows Access Control Lists used in sandboxing and auditing.
Back