SS
Simo Sorce
— On the schedule —
Hybrid FIPS module using OpenSSL code: the Kryoptic project
This presentation will detail the building an ultra-portable FIPS module, the motivations behind it, the research on the various options when the project was created.A little bit of background on the motivation for using both Rust and C code, with the challenges that this union creates. The talk will also provide background on the PKCS#11 interface and why Kryoptic implements it. Finally we'll provide some anecdotal evidence on the challenges of bringing such a module through certification.
— Compositor's note —
Simo Sorce is a software engineer currently working in the Red Hat Crypto team. His work primarily focuses on cryptography, with past experience in authentication, and identity management. He founded and is active in several upstream projects (including OpenSSL) and participates in standardization initiatives like the PKCS#11 Technical Committee by OASIS and IETF RFCs.