Announcing CE Labs
High-Assurance Cryptography for a Secure Future.
Today we’re launching CE Labs, focused on high-assurance security engineering, spun off from Cryspen . The new independence lets both teams pursue their missions with greater agility: Cryspen continues its work on verification products and the Spectrum EIC Grant initiative , while we concentrate on designing and building systems that are secure from the cryptography up. This is just the start — we’ve got exciting projects underway and plenty to share, so expect more from us here soon.
CE Labs and Cryspen remain close strategic partners, continuing to collaborate where cryptography and formal verification intersect. CE Labs leverages Cryspen’s verification tools to ensure high assurance, while Cryspen utilizes CE Labs’ production code to test and refine its toolchain.
Our Focus
Our work is built around four areas, and the thread running through all of them is the same: security you can demonstrate, not just claim. That ambition shapes how we approach each engagement, from first design sketch to the final proof.
- Systems & architecture: We model threats, draw trust boundaries, and design systems that stay secure under real-world pressure: adversarial users, partial compromise, and long operational lifetimes.
- Protocols & key management: We design new protocols and review existing ones — key exchange, authentication, identity, and transport — against the formal security models they’re meant to satisfy.
- Cryptography engineering: We build the algorithms at the foundation for performance and correctness, hardened against side-channel attacks and ready for the post-quantum transition.
- Machine-checked proofs: When the stakes call for it, we go further and deliver machine-checked proofs that the implementation matches its specification.
These pillars reinforce each other: a sound architecture is only as strong as the protocols beneath it, and a protocol is only as strong as the cryptography, and the proofs that back it.
Looking Ahead
We’re just getting started, and the road ahead is full. Our near-term work turns high-assurance security engineering from proof of concepts into infrastructure people can deploy.
As part of the EvIT program , we’re building verified cryptographic components for secure communication, and we’re developing advanced protocols and demonstrators to help set new industry standards. Turning formal guarantees into systems you can actually run.
We’re also pushing our open-source libraries forward, because the code securing real systems should be open to inspection. libcrux is nearing a stable release and integration into platforms like Ariel OS , while OpenMLS has passed a security audit by SRLabs. See the full report .
Let’s work together
Have something that has to be right? Tell us what you’re building, and we’ll tell you what it would take to make it secure — from security design and analysis to cryptography engineering and machine-checked proofs. Follow our updates on LinkedIn and Bluesky . Reach us at info@celabs.eu .