"Formally Verifying Everybody's Cryptography" by Mike Dodds, Joey Dodds (Strange Loop 2022)

Nearly everybody relies on cryptographic libraries such as OpenSSL, but how can we be sure they are secure and bug-free? Formal verification offers an answer: using mathematical reasoning we can prove for certain that code behaves as we expected. Formal verification is an old idea, but recent advances have at last made it cost effective as an assurance tool for real-world cryptographic systems. This talk will explore what formal verification is, how we apply it to cryptography in production, and what lessons we can draw when securing other types of software systems.

Mike Dodds
Principal Scientist, Galois Inc
@miike

Mike is a principal scientist at Galois Inc focusing on engineering applications of formal methods. He has led many commercial and US-government funded research projects in cryptographic and distributed systems verification, and he previously led Galois' collaboration with Amazon Web Services. Before joining Galois in 2017, Mike was an academic at the University of York, UK, and a Royal Society Industry Fellow.

Joey Dodds
Principal Researcher, Galois
@n1nj4

Joey is a principal researcher at Galois, focused on applying formal methods and automated reasoning to industry. He co-leads Galois' ongoing collaboration with AWS. He also co-leads the verification effort that is a collaboration between Galois, Supranational, Ethereum Labs, and Protocol Labs. As a critical part of making those projects work, he also helps drive the direction of the SAW and Cryptol projects with a focus on making the tools more understandable and usable.

------- Sponsored by: -------

Stream is the # 1 Chat API for custom messaging apps. Activate your free 30-day trial to explore Stream Chat. https://gstrm.io/tsl