Apple publishes corecrypto with formal verification proofs for quantum-secure ML-KEM and ML-DSA algorithms
By
hasheddan
Sesame, salt, and substance. A flagship bake.
Summary
Apple has published the corecrypto library containing quantum-secure ML-KEM and ML-DSA algorithms, along with formal verification proofs that mathematically confirm their implementations are faithful to FIPS 203 and FIPS 204 specifications. This work, which began with quantum-secure cryptography in iMessage, represents the strongest known correctness results for any widely-deployed production implementation of these algorithms. Apple is also releasing the formal verification libraries and tools they created to advance the state of the art for assuring critical software.
Key quotes
· 4 pulledThe introduction of quantum-secure cryptography in iMessage marked the start of a significant security transition to protect Apple users from threats posed by future quantum computers.
Deploying this new generation of algorithms at scale across all Apple platforms requires high assurance, so we developed rigorous new formal verification methods to prove the mathematical correctness of our implementation.
With this week's release of corecrypto, we're publishing our implementations of quantum-secure ML-KEM and ML-DSA algorithms — along with the mathematical proofs we built to assure they are faithful to the FIPS 203 and FIPS 204 specifications.
To advance the state of the art for assuring critical software, we're also publishing the formal verification libraries and tools that we created to achieve the strongest known correctness results for any widely-deployed production implementation of the relevant algorithms.
You might also wanna read
Security flaw found: keyword information leaked from updated ciphertexts in PAUKS encryption schemes
This short academic note by Takeshi Yoshida and Keita Emura demonstrates a security vulnerability in the proxy-free public key authenticated
How Shamir's Secret Sharing Algorithm Enables Threshold Cryptography
This article explains Adi Shamir's Secret Sharing algorithm, a cryptographic method published in 1979 that splits a secret into multiple pie
ente.com·6d ago
Security researchers adapt Pixel 9 exploit chain to target Google Pixel 10
This article describes how security researchers adapted an exploit chain originally developed for the Google Pixel 9 to work on the Pixel 10
projectzero.google·16d ago
Technical Analysis: Exploiting the Tesla Wall Connector via Charge Port Firmware Manipulation
This article details the technical process of exploiting a Tesla Wall Connector through its charge port connector. It describes the firmware
synacktiv.com·17d ago
Researchers demonstrate first public macOS kernel memory corruption exploit on Apple M5 silicon
Researchers report the first public macOS kernel memory corruption exploit on Apple's M5 silicon, successfully bypassing Apple's MIE (Memory
blog.calif.io·17d ago
Understanding Beaver Triples: A Primer on Secure Multiparty Computation
The article introduces the concept of Beaver Triples in the context of secure multiparty computation (MPC). It uses an analogy about a frien
stoffelmpc.com·22d ago