Reproduce “Hidden Ciphers and Where to Find Them: Static Discovery and Assessment of Cryptographic Assets in Software” on OpenResearch

Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.

Universal app for Apple silicon and Intel. Requires macOS 11 or later.

About this paper

Christian Näther, Eduard Hirsch

Crypsy builds a cryptographic inventory from source code, configuration, dependencies, and cryptographic files. It classifies evidence as secret material, structured artifacts, or invocations, then applies separately maintained discovery and assessment rules. On a synthetic benchmark, it achieved occurrence-level F1 of 0.75. Across ten services, it found 370 components, including 52 migration candidates, against a partial manual reference.

Summary by alphaXiv.

Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.