DEfO Audit Complete! (opens in new tab)

The Open Source Technology Improvement Fund is proud to share the results of our security engagement on Developing ECH for OpenSSL (“DEfO”). DEfO is an open source implementation of Encrypted Client Hello (ECH) for OpenSSL, and provides proof-of-concept implementations for various clients and servers that use OpenSSL as a demonstration and for interoperability testing. With the help of Ada Logics, 7ASecurity, and the Sovereign Tech Agency, this project received expert security review, testing...