Cryspen provides high‑assurance software and consulting that use formal methods to verify cryptographic protocols and implementations. Its Rust‑based tools—including the Hax verification framework, the OpenMLS reference implementation, and the formally verified libcrux library—enable provable security, post‑quantum readiness, and safe integration of standards like Messaging Layer Security.
Funding
Funding not disclosed
Founders
Product
Problem
Organizations deploying cryptographic protocols and secure messaging often rely on conventional implementations that lack formal guarantees, making them vulnerable to bugs, side‑channel attacks, and future quantum threats. Additionally, integrating emerging standards such as Messaging Layer Security (MLS) and post‑quantum algorithms requires expertise and verified code, which is scarce in the industry.
Solution
Cryspen delivers high‑assurance software and consulting services that apply formal methods to cryptographic designs and implementations. Their Rust‑based verification framework, Hax, translates safe Rust code into formal languages for proof assistants, enabling full functional verification and early detection of security flaws. They maintain OpenMLS, a reference implementation of the IETF MLS protocol, and provide custom integration, extensions, and key‑management components for group messaging. Cryspen also offers libcrux, a fast, portable cryptographic library whose primitives—including post‑quantum KEMs and signatures—are formally verified for memory safety and functional correctness. Through consulting, they assess existing systems, design migration roadmaps to post‑quantum cryptography, and perform rigorous formal security analyses of protocols and custom mechanisms.
Target Audience
Primary customers are software vendors, enterprise security teams, and developers of encrypted communication platforms that require provably secure cryptographic components and formal verification of their protocols.
Features
- Hax framework: translates safe Rust into F*, Coq, or ProVerif for automated security analysis and functional verification
- OpenMLS: production‑grade Rust implementation of the MLS protocol with formal security analysis and support for post‑quantum extensions
- libcrux library: formally verified cryptographic primitives (symmetric, asymmetric, hash, post‑quantum KEMs/signatures) optimized for speed and cross‑platform portability
- Formal specification workflow using hacspec to produce machine‑checked proofs of protocol designs and implementations
- Consulting services for post‑quantum migration, protocol audits, and custom MLS integration, including documentation and white‑papers
- Long‑term maintenance contracts ensuring continued proof validity, updates, and support across Rust, C, and WebAssembly targets