PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Security Audit of Monero RandomX

blog.quarkslab.com | research | #security-audit | #cryptography | #blockchain | #proof-of-work | #randomx | #monero
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's review of Monero's RandomX proof-of-work algorithm, covering areas left uncovered by three earlier audits; only minor inconsistencies found, mainly affecting alternative configurations.
Published
Collected

Related coverage

blog · blog.trailofbits.com
State of the Art Proof-of-Work: RandomX
A review of RandomX, Monero's ASIC- and GPU-resistant proof-of-work algorithm, covering its memory-hard design and findings like weak AES rounds in AesGenerator and brittle configurable parameters.
research · blog.quarkslab.com
Security Audit of Monero Bulletproofs
Quarkslab's audit of Monero's Bulletproof implementation — non-interactive zero-knowledge range proofs expected to cut transaction fees by 70-80%; several issues found, some possibly critical.
blog · hackenproof.com
Security State 2022: Near Ecosystem
HackenProof surveyed 515 NEAR ecosystem projects and found only about a quarter rely on audits or bug bounties, noting the ecosystem's low entry barrier attracts many GameFi and NFT projects.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · blog.quarkslab.com
Security Assessment of OpenVPN
OSTIF-funded security assessment of OpenVPN 2.4.0: 50 man-days of code and cryptography review that uncovered pre-auth and post-auth DoS bugs (CVE-2017-7478/7479) plus an info leak, fixed in 2.4.2.
research · blog.quarkslab.com
Security Assessment of VeraCrypt: fixes and evolutions from TrueCrypt
VeraCrypt 1.18 security assessment: verifying fixes inherited from TrueCrypt and auditing new features (UEFI, extra ciphers); a critical cryptography flaw introduced in 1.18 was fixed in 1.19.
Back