First, an apology: we’re super late posting the 2018 entries, and we’re sorry. We know some of you have been waiting to see them for a long time. We have more to say about the future of the contest, but first, let’s see the winners! Winner: Matt Cheung – Incomplete Elliptic-Curve Parameter Validation The winning entry comes from Matt Cheung. You can find the full submission here...
Underhanded Crypto Contest participants put a lot of effort into their submissions, and it’s important for us to reward that effort. For the 2018 Underhanded Crypto Contest, we have two generous sponsors that have agreed to provide cash prizes for our winners. See the contest rules for more information. Note: Due to tax regulations, winners may be required to complete certain tax forms to...
Introduction The Underhanded Crypto contest was inspired by the famous Underhanded C Contest, which is a contest for producing C programs that look correct, yet are flawed in some subtle way that makes them behave inappropriately. This is a great model for demonstrating how hard code review is, and how easy it is to slip in a backdoor even when smart people are paying attention. The Underhanded...
Stay tuned, as we will announce the 2018 contest in the coming months.