Definition
Plain language
A widely used free software library that handles the encryption behind secure internet connections.
As stated in the literature
An open-source cryptographic library implementing TLS/SSL and general-purpose encryption primitives; its complex internal type hierarchy and multi-step context initialization made it resistant to short-horizon agentic vulnerability discovery in the SAILOR work.
Why it matters: It underpins much of the internet's encryption, so its flaws have outsized impact, and its tangled internal setup also makes it hard for automated tools to probe quickly.
For example, when your browser shows a padlock for a secure website, OpenSSL is often the code scrambling that connection.
Heard on the show
“That pipeline finds three hundred and seventy-nine previously-unknown memory-safety vulnerabilities in code as battle-tested as OpenSSL and FFmpeg and GNU Binutils.”Episode 014 — Why a Constrained Pipeline Beat a Full Coding Agent at Finding Bugs 30-to-1