From the lab.

Insights from our audit practice, software releases, and applied cryptography research. Updated whenever we publish.

2026.03.07 · Research

Cryspen's Approach to TLS: A Critical Analysis

An examination of Cryspen's TLS implementations reveals 75% of valid ECDSA signatures rejected, authentication tags silently dropped, no certificate validation, and remote denial-of-service vectors.

11 min read
2026.03.01 · Software

Making Verifpal Easier to Reason About

Verifpal's analysis engine has been redesigned with a unified equational theory, provenance-tagged values, a formally grounded deduction loop, and a bounded-depth search that runs 3x faster — plus updated tooling across the board.

11 min read
2026.02.24 · Software

Verifpal Workbench: Protocol Analysis in Your Browser

Verifpal now runs entirely in the browser via WebAssembly. The new Workbench at verifpal.com/workbench lets anyone write, verify, and visualize cryptographic protocol models with zero installation.

3 min read