Apple open-sources formal verification proofs for corecrypto

// 5h agoOPENSOURCE RELEASE

Apple open-sources formal verification proofs for corecrypto

Apple has open-sourced the mathematical proofs and formal verification pipeline used to validate its post-quantum cryptographic algorithms in corecrypto. The release includes the portable C code, ARM64 assembly, and custom Isabelle and Cryptol tools that secure over 2.5 billion active devices.

// ANALYSIS

This is a rare and welcome glimpse into Apple's high-assurance engineering, setting a new benchmark for open security verification.

–A custom multi-layered pipeline translates FIPS specifications into Isabelle and C code into Cryptol, mathematically proving equivalence to catch subtle arithmetic bugs that conventional testing misses.
–The process uniquely verifies hand-optimized ARM64 assembly by proving each subroutine matches its already-verified C counterpart, preserving native performance without sacrificing assurance.
–By releasing the custom Cryptol-to-Isabelle translators developed with Galois, Apple is democratizing enterprise-grade formal verification tools for the broader security community.

// TAGS

corecryptocryptographyformal-verificationsecuritytestingopen-sourceresearch

DISCOVERED

5h ago

2026-05-23

PUBLISHED

14h ago

2026-05-22

RELEVANCE

5/ 10

AUTHOR

hasheddan

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

OPEN SOURCE25m ago

Codex masters one-shot video gen via HyperFrames

Bin Liu, VP at HeyGen, showcases OpenAI’s Codex model achieving "one-shot" professional video compositions using HyperFrames, an open-source HTML-to-video framework. The project plans to open-source its specialized "secret sauce" agent skills next week to enable fully autonomous, code-driven video production.

MODEL1h ago

APEX quantization boosts Gemma 4 MoE performance

Developer mudler released APEX (Adaptive Precision for EXpert Models), a quantization format optimized for Mixture-of-Experts models like Google's Gemma 4. It achieves 38 tokens per second at a 90,000-token context window while solving long-context looping issues common in standard quants.

LAUNCH1h ago

Junct launches 1,200+ AI agent tools via Clanker

Junct.dev bridges any API to agent frameworks, offering 1,200+ tools across Binance, Uniswap, and Aave. Its new Clanker integration enables agents to autonomously deploy and manage tokens on the Base network with a single line of config.