Underhanded Crypto Contest participants put a lot of effort into their submissions, and it’s important for us to reward that effort. For the 2018 Underhanded Crypto Contest, we have two generous sponsors that have agreed to provide cash prizes for our winners. See the contest rules for more information. Note: Due to tax regulations, winners may be required to complete certain tax forms to...
Introduction The Underhanded Crypto contest was inspired by the famous Underhanded C Contest, which is a contest for producing C programs that look correct, yet are flawed in some subtle way that makes them behave inappropriately. This is a great model for demonstrating how hard code review is, and how easy it is to slip in a backdoor even when smart people are paying attention. The Underhanded...
We’ve taken too long to publish all of last year’s entries. We wanted to give each non-winning entry its own blog post, since they can all teach us a useful lesson, but I (Taylor) promised to write those blog posts and took far too long. Sorry everyone! Those posts are finished now and we’ll be posting one per week. Here’s the first one: AverageSecurityGuy’s Entry...
Stay tuned, as we will announce the 2018 contest in the coming months.