Senior Security Evaluator – Crypto code review

Product security is the result of a combination of security provided by hardware and software. In general, security cannot be provided by hardware alone and needs to be complemented by security implemented in software. The smallest details can make the difference between a secure and an insecure product. Careful examination is therefore required to judge the security quality.  

Most of the ICT products for secure applications implement cryptographic operations. During the vulnerability analysis of these products, the code of the crypto library is thoroughly analyzed to identify weaknesses in the implementation of the crypto algorithms with the aim to exploit attacks using advanced techniques such as fault injection or side channel analysis. 

As a crypto library code reviewer, you apply your expertise in secure cryptographic implementations to identify the security mechanisms and to define sophisticated attack scenarios using state-of-th...