Home on CE Labs

hpke-rs

Mon, 01 Jan 0001 00:00:00 +0000

libcrux

Mon, 01 Jan 0001 00:00:00 +0000

libcrux-iot

Mon, 01 Jan 0001 00:00:00 +0000

OpenMLS

Mon, 01 Jan 0001 00:00:00 +0000

PQ Readiness Check

Mon, 01 Jan 0001 00:00:00 +0000

Post-Quantum HPKE

Fri, 31 Jul 2026 00:00:00 +0000

The IETF is working on post-quantum security for HPKE , the scheme used in protocols like TLS ECH, MLS, and Oblivious HTTP. We’ve implemented the draft: it runs today in hpke-rs, part of libcrux , and you can try it live in the demo further down this post. This post covers what changes on the way to post-quantum HPKE, and why the transition may not be a drop-in.

Check Your Post-Quantum Readiness

Fri, 24 Jul 2026 00:00:00 +0000

The post-quantum transition is no longer a future concern. Browsers and cloud providers are negotiating post-quantum key exchange by default for a while now, using the NIST standardized algorithms. The harvest-now, decrypt-later threat means data captured today can be broken once a cryptographically relevant quantum computer exists. None of this is new, but the timelines keep moving closer: Google’s estimates for the resources needed to break classical cryptography have dropped sharply, and the BSI continues to urge organizations to start migrating now. The practical question for most teams is simple: where do we actually stand right now?

Announcing CE Labs

Wed, 24 Jun 2026 00:00:00 +0000

Today we’re launching CE Labs, focused on high-assurance security engineering, spun off from Cryspen . The new independence lets both teams pursue their missions with greater agility: Cryspen continues its work on verification products and the Spectrum EIC Grant initiative , while we concentrate on designing and building systems that are secure from the cryptography up. This is just the start — we’ve got exciting projects underway and plenty to share, so expect more from us here soon.

Pushing the Boundaries of PQC for IoT

Wed, 02 Jul 2025 00:00:00 +0000

We’re dedicated to bringing robust, next-generation cryptography to even the most resource-constrained devices. One direction of ongoing work has focused heavily on implementing and optimizing the NIST-standardized post-quantum cryptographic algorithms, ML-KEM (formerly Kyber) and ML-DSA (formerly Dilithium), along with the SHA-3 hash function, specifically for the Internet of Things (IoT) ecosystem. All of our technical work and results are open source and available on our Github repository .

High Assurance Post-Quantum Cryptography for IoT

Mon, 05 Aug 2024 00:00:00 +0000

We extend the libcrux cryptographic library with support for resource constrained IoT devices. The libcrux-iot library contains high performance, high assurance implementations of post-quantum, as well as classical, cryptographic primitives.

About CE Labs

Mon, 01 Jan 0001 00:00:00 +0000

We are a specialized European team of cryptography engineers partnering with organizations building software where the cost of failure is absolute.

Most teams stop at code reviews and pentesting. We go further. Our engineers don’t just look for bugs; we explicitly define what “secure” means for your architecture and show that your system achieves it. We replace human guesswork with empirical evidence.

Careers

Mon, 01 Jan 0001 00:00:00 +0000

Contact

Mon, 01 Jan 0001 00:00:00 +0000

The best engagements start with a concrete problem. Whether you’re designing a new system, hardening an existing one, building on advanced cryptography, or planning a post-quantum migration, we’re happy to talk through scope and what assurance is realistic.

embedded-cal: A Formally Verified Cryptographic Provider for Embedded Platforms

Mon, 01 Jan 0001 00:00:00 +0000

Formal Security and Functional Verification of Cryptographic Protocol Implementations in Rust

Mon, 01 Jan 0001 00:00:00 +0000

Formal verification of the PQXDH Post-Quantum key agreement protocol for end-to-end secure messaging

Mon, 01 Jan 0001 00:00:00 +0000

hax: Verifying Security-Critical Rust Software Using Multiple Provers

Mon, 01 Jan 0001 00:00:00 +0000

Imprint

Mon, 01 Jan 0001 00:00:00 +0000

Legal Notice (Impressum)

Information Provider

CryptoEng UG (haftungsbeschränkt)
Weserstr. 44
10247 Berlin
Germany

Email: info@cryptoeng.de
Register Court: Amtsgericht Berlin-Charlottenburg
Register Number: HRB 241948 B
VAT ID: DE353123425

Represented by

Dr. Franziskus Kiefer

KyberSlash: Exploiting secret-dependent division timings in Kyber implementations

Mon, 01 Jan 0001 00:00:00 +0000

Public Key Linting for ML-KEM and ML-DSA

Mon, 01 Jan 0001 00:00:00 +0000

Secure systems engineering

Mon, 01 Jan 0001 00:00:00 +0000

CE Labs builds systems where security is a requirement, not an afterthought. We work across the full depth of the stack — from the architecture down to the cryptography it rests on — and bring formal methods to bear where correctness matters most.