Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there to be a review in the code of OpenSSL any time in the near future? It seems OpenBSD is doing a controversial one, in that the review is also "Ripping out some windows-specific cruft". But is any actual security firm doing a code review, or are there plans by the OpenSSL project to hire one?

share|improve this question
It appears the answer is yes ( – mikeazo Apr 18 '14 at 13:08
Maybe those guys will take care of it in a similar manner as truecrypt has been audited – binaryanomaly Apr 20 '14 at 19:08
up vote 4 down vote accepted

OpenBSD folks have started an OpenSSL code review recently, after which they decided to fork OpenSSL into LibreSSL. Their changes to the code can be followed here.

As of last week, the major changes were:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.