Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is there to be a review in the code of OpenSSL any time in the near future? It seems OpenBSD is doing a controversial one, in that the review is also "Ripping out some windows-specific cruft". But is any actual security firm doing a code review, or are there plans by the OpenSSL project to hire one?

share|improve this question
    
It appears the answer is yes (blog.bugcrowd.com/open-letter-to-internet-users-and-businesses) –  mikeazo Apr 18 at 13:08
    
Maybe those guys will take care of it in a similar manner as truecrypt has been audited opencryptoaudit.org –  binaryanomaly Apr 20 at 19:08

1 Answer 1

up vote 3 down vote accepted

OpenBSD folks have started an OpenSSL code review recently, after which they decided to fork OpenSSL into LibreSSL. Their changes to the code can be followed here.

As of last week, the major changes were:

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.