Skip to content

GRANT RECIPIENTS: Unclear description for OpenSSL #350

@Chealer

Description

@Chealer

The entry for OpenSSL in the Alpha grant recipients for 2023 reads:

OpenSSL is a globally distributed cryptography library touching nearly every industry in the world.

In 2023 OpenSSL was granted $127,000 for the purpose of assessments that will be performed by teams of Trail of Bits security consultants for a total of eight engineer-weeks of effort. The secure code review, including fuzzing enhancements, will be performed over a four calendar-week period, for a total of eight engineer-weeks.

This is largely unclear. In particular, please clarify:

  1. What does "globally distributed" mean?
  2. What type of dollars does "$" designate?
  3. What will the scope be? Is it a review (assessments), or does it actually include enhancements?

Metadata

Metadata

Assignees

No one assigned

    Labels

    websiteThe website content isn't on GitHub, but reporting issues here is very useful

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions