PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Security Audit of dalek libraries

blog.quarkslab.com | research | #web3 | #rust | #security-audit | #cryptography | #blockchain | #zero-knowledge-proof | #curve25519
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's cryptographic and security assessment of the Rust dalek libraries (subtle, curve25519-dalek, bulletproofs) used by the Tari protocol; only minor issues found, with usage recommendations.
Published
Collected

Related coverage

research · blog.quarkslab.com
Security Audit of Monero Bulletproofs
Quarkslab's audit of Monero's Bulletproof implementation — non-interactive zero-knowledge range proofs expected to cut transaction fees by 70-80%; several issues found, some possibly critical.
blog · hackenproof.com
Security State 2022: Near Ecosystem
HackenProof surveyed 515 NEAR ecosystem projects and found only about a quarter rely on audits or bug bounties, noting the ecosystem's low entry barrier attracts many GameFi and NFT projects.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · blog.quarkslab.com
Workflow of a zkSync Era transaction: from generation to finalization
A walkthrough of a zkSync Era transaction's lifecycle from generation to finalization: how the ZK Rollup executes transactions and proves their execution on Ethereum with zero-knowledge proofs.
research · blog.quarkslab.com
Security Assessment of OpenVPN
OSTIF-funded security assessment of OpenVPN 2.4.0: 50 man-days of code and cryptography review that uncovered pre-auth and post-auth DoS bugs (CVE-2017-7478/7479) plus an info leak, fixed in 2.4.2.
research · blog.quarkslab.com
Security Assessment of VeraCrypt: fixes and evolutions from TrueCrypt
VeraCrypt 1.18 security assessment: verifying fixes inherited from TrueCrypt and auditing new features (UEFI, extra ciphers); a critical cryptography flaw introduced in 1.18 was fixed in 1.19.
Back