Calyptix pledges $1000 bounty for OpenBSD IPsec backdoor bug

There have been unsubstantiated claims that the FBI implemented backdoors and key-leaking bugs into the OpenBSD cryptographic framework.

Calyptix is pledging $1000 to the first person who newly finds such a bug in the IPsec implementation of the 4.7 or 4.8 release of OpenBSD before March 31, 2011. If it is not claimed by then, the $1000 will be contributed directly to the OpenBSD team.

Members of the OpenBSD team are eligible. :)

Other parties have made similar pledges, although obviously we cannot speak for them.

We are working on a formal definition of what would count as a bug.