Clemens Lang

— On the schedule —

Instrumenting OpenSSL with Crypto-Auditing Probes for Post-Quantum Readiness

As organizations prepare for the transition to post-quantum cryptography (PQC), understanding the current state of cryptographic usage across a complex infrastructure is a critical first step. Static analysis often fails to capture the dynamic reality of protocol negotiation and legacy algorithm usage in production environments.

This session introduces the crypto-auditing project, an infrastructure designed to audit cryptographic operations performed by system libraries at runtime. By instrumenting libraries like OpenSSL with User-level Statically Defined Tracing (USDT) and leveraging eBPF, the project allows for the non-intrusive collection of data regarding TLS versions, cipher suites, and algorithm usage.

We will examine the architecture of the project, including the crau-agent for data collection and the high-performance binary logging format (CBOR). The presentation focuses on the practical instrumentation of the OpenSSL library, demonstrating how the crau helper library simplifies the definition and management of probe points to track specific cryptographic events, such as legacy signature verification or classical key exchange.