This repository contains the 25 cryptographic vulnerability patterns presented as supporting material for the Black Hat USA 2026 briefing:
“Breaking the Unbreakable: Dismantling the Myth of ‘Trusted’ Cryptographic Libraries”
Guannan Wang, Lili Tang, and Guancheng Li
Official Black Hat USA 2026 briefing page
All patterns are published in patterns.json. Each entry contains:
name: the pattern name;description: the vulnerability mechanism and impact;audit: guidance and a semantic prompt for finding candidate code.
A pattern identifies an audit hypothesis, not a confirmed vulnerability. Target-specific reachability, preconditions, and impact must still be verified.
If these patterns materially contribute to a vulnerability discovery, report, or publication, please cite the Black Hat USA 2026 briefing above and link to this repository.
No license has been selected yet.