Organizers
Luca Dolfi (Kudelski Security)
Tommaso Gagliardoni (Kudelski Security)
Adina Nedelcu (Kudelski Security)
Marco Macchetti
Sylvain Pelissier
Abstract
The rapidly evolving landscape of cryptography introduces growing complexities which make secure code implementation very challenging. This is especially problematic in the fast-moving Web3 world, where bleeding-edge cryptographic schemes are deployed to protect large amount of funds, but also in privacy-sensitive applications and secure communications. In this context, not only does understanding cryptographic theory matter, but so does the effective implementation and auditing of cryptographic code.
This one-day workshop, uniquely situated at the intersection of theoretical and applied cryptography, aims to provide an immersive learning experience in cryptographic code auditing informed by real-world examples. It targets professionals and researchers looking to deepen their understanding and sharpen their skills in secure cryptographic code auditing.
The day will start with a series of lectures by seasoned experts on various critical topics, including hash functions, block ciphers, randomness, zero-knowledge protocols, and multi-party computation schemes. The lectures will be enriched with case studies from past cryptographic audits conducted by our company for high-profile clients. In the afternoon, attendees will put their learning to the test in an engaging Capture The Flag (CTF) challenge. Participants will split into teams and strive to identify vulnerabilities in flawed code snippets provided by the organizers, submitting their findings via an online portal. The event will conclude with a solutions discussion, and winning teams will be announced and awarded at the conference's rump session.