LFX Mentorship
Enhancing Constant-Time Analysis Tooling in liboqs
Linux Foundation1 Program Years
Enhancing Constant-Time Analysis Tooling in liboqs
About the Organization
This project aims to improve the detection of timing side-channel vulnerabilities in the liboqs library by extending and integrating constant-time analysis tools into the CI pipeline. Past vulnerabilities such as Kyberslash, clangover highlight the need for improved automated detection. The mentee will explore existing tooling, enhance it for broader coverage, integrate it into liboqs workflows, triage and investigate any findings. The project may also include reporting issues upstream, contributing fixes, and documenting the results.
Primary Technologies & Languages
c programming - basic scripting (e.g., python) for ci integration - interest in cryptographic implementations - interest in side-channel analysis and secure coding practicesquantumsecurityopen quantum safe
Technical Topics & Focus Areas
c programming - basic scripting (e.g., python) for ci integration - interest in cryptographic implementations - interest in side-channel analysis and secure coding practicesquantumsecurityopen quantum safe
Participation Years
Completed Projects Distribution
Annual Completed Projects History
Enhancing Constant-Time Analysis Tooling in liboqsHover over bars to view completed counts
4
3
2
1
0
2025
Projects1
Years Active1
Stackc programming - basic scripting (e.g., python) for ci integration - interest in cryptographic implementations - interest in side-channel analysis and secure coding practices
TierTier 1
Past Projects
Showing 1 of 1 projects. Click any project card for scope, mentors, and proposal studio.
Enhancing Constant-Time Analysis Tooling in liboqs Mentorship Project
IntermediateThis project aims to improve the detection of timing side-channel vulnerabilities in the liboqs library by extending and integrating constant-time analysis tools into the CI pipeline. Past vulnerabilities such as Kyberslash, clangover highlight the need for improved automated detection. The mentee will explore existing tooling, enhance it for broader coverage, integrate it into liboqs workflows, triage and investigate any findings. The project may also include reporting issues upstream, contributing fixes, and documenting the results.