celabs.github.io/index.html at main · celabshq/celabs.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
<!doctype html><html lang=en><head><meta name=generator content="Hugo 0.163.3"><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>CE Labs</title><meta name=description content="Secure systems engineering, verified all the way down to the cryptography."><link rel=preconnect href=https://fonts.googleapis.com><link rel=preconnect href=https://fonts.gstatic.com crossorigin><link href="https://fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@400;500;600;700&family=IBM+Plex+Mono:wght@400;500;600&display=swap" rel=stylesheet><link rel=stylesheet href=/css/main.bf5224ad467a6d099a8c65bc1169ef83ae7750710883d4101f77a9c35fde9784.css integrity="sha256-v1IkrUZ6bQmajGW8EWnvg653UHEIg9QQH3epw1/el4Q="><link rel=icon href=/favicon.svg type=image/svg+xml><link rel=icon href=/favicon-32.png sizes=32x32 type=image/png><link rel=icon href=/favicon-16.png sizes=16x16 type=image/png><link rel=apple-touch-icon href=/apple-touch-icon.png><link rel=manifest href=/site.webmanifest><meta name=theme-color content="#0E2436"><meta property="og:title" content="CE Labs"><meta property="og:type" content="website"><meta property="og:site_name" content="CE Labs"><meta property="og:url" content="https://celabs.eu/"><meta property="og:description" content="Secure systems engineering, verified all the way down to the cryptography."><meta property="og:image" content="https://celabs.eu/social-card.png"><meta property="og:image:width" content="1200"><meta property="og:image:height" content="630"><meta name=twitter:card content="summary_large_image"><meta name=twitter:title content="CE Labs"><meta name=twitter:description content="Secure systems engineering, verified all the way down to the cryptography."><meta name=twitter:image content="https://celabs.eu/social-card.png"></head><body><header class=nav><div class="wrap nav__row"><a href=/ class=ce-seal-lockup aria-label="CE Labs home"><span class=ce-seal><span>CE</span></span>
<span class=ce-seal__text><span class=ce-seal__name>CE Labs</span>
<span class=ce-seal__sub>Cryptography Engineering</span>
</span></a><button class=nav__toggle type=button aria-label="Toggle menu" aria-expanded=false aria-controls=nav-menu>
<span aria-hidden=true></span>
<span aria-hidden=true></span>
<span aria-hidden=true></span></button><div class=nav__menu id=nav-menu><nav class=nav__links><a href=/services/>Services</a>
<a href=/blog/>Blog</a>
<a href=/publications/>Publications</a>
<a href=/projects/>Projects</a>
<a href=/about/>About</a></nav><a href=/contact/ class="btn btn--solid nav__cta">Contact</a></div></div></header><script>(function(){var e=document.querySelector("header.nav"),t=e&&e.querySelector(".nav__toggle");if(!t)return;t.addEventListener("click",function(){var n=e.classList.toggle("is-open");t.setAttribute("aria-expanded",n?"true":"false")}),e.querySelectorAll(".nav__menu a").forEach(function(n){n.addEventListener("click",function(){e.classList.remove("is-open"),t.setAttribute("aria-expanded","false")})})})()</script><main><section class=hero><div class="wrap hero__grid"><div><span class=eyebrow>High Assurance Security Engineering</span><h1>Secure design, <em>engineered for certainty</em>.</h1><p class=hero__lede>CE Labs designs and builds systems where security comes first — applied cryptography and rigorous engineering, backed by formal methods where correctness matters most.</p><div class=cta><a href=/contact/ class="btn btn--solid">Get in touch <span class=arw>→</span></a>
<a href=/services/ class="btn btn--ghost">Learn more</a></div></div><div class="card showcase"><img src=/images/hero-lattice.svg alt="Point lattice whose highlighted points spell CE — a post-quantum cryptography motif" loading=lazy></div></div></section><section class="band band--alt" id=services><div class=wrap><div class=sec-head><div class=l><span class=eyebrow>What we do</span><h2>Security on every layer.</h2></div></div><div class=stack><article class="card layer"><div class=layer__meta><span class=layer__no>L1</span>
<span class=layer__depth>System</span>
<span class=layer__bar style=width:24px></span></div><div class=layer__body><h3>Systems & Architecture</h3><p>Threat models, trust boundaries, and the architecture of systems that stay secure under real-world pressure — not just on the whiteboard.</p></div><div class=layer__tags><span>Threat modelling</span><span>Design review</span>
<span class=is-tech>STRIDE</span><span class=is-tech>MITRE ATT&amp;CK</span></div></article><article class="card layer"><div class=layer__meta><span class=layer__no>L2</span>
<span class=layer__depth>Protocol</span>
<span class=layer__bar style=width:48px></span></div><div class=layer__body><h3>Protocols & Key Management</h3><p>Key exchange, authentication, and transport — designed and reviewed against formal security models and the threats they actually face.</p></div><div class=layer__tags><span>Protocol analysis</span><span>Design</span>
<span class=is-tech>TLS</span><span class=is-tech>MLS</span></div></article><article class="card layer"><div class=layer__meta><span class=layer__no>L3</span>
<span class=layer__depth>Primitive</span>
<span class=layer__bar style=width:72px></span></div><div class=layer__body><h3>Cryptography Engineering</h3><p>The algorithms at the foundation: implemented for performance and correctness, hardened against side channels, and post-quantum ready.</p></div><div class=layer__tags><span>Performance</span><span>Post-quantum</span>
<span class=is-tech>ML-KEM</span><span class=is-tech>AES-GCM</span></div></article><article class="card layer"><div class=layer__meta><span class=layer__no>L4</span>
<span class=layer__depth>Foundation</span>
<span class=layer__bar style=width:96px></span></div><div class=layer__body><h3>Machine-Checked Proofs</h3><p>When the stakes call for it, we go further: machine-checked proofs that the code meets its specification.</p></div><div class=layer__tags><span>Functional correctness</span><span>Equivalence proofs</span>
<span class=is-tech>F*</span><span class=is-tech>Lean</span></div></article></div></div></section><section class=band id=approach><div class=wrap><div class=sec-head><div class=l><span class=eyebrow>How we work</span><h2>From Specification to Production.</h2></div></div><div class=grid-2><div class="card feat"><span class=bar></span>
<span class=k>01 · DESIGN</span><h4>Design the system</h4><p>We map the requirements, threats, and trust boundaries up front, then design an architecture that stays secure under the pressure it will actually face.</p></div><div class="card feat"><span class=bar></span>
<span class=k>02 · SPECIFY</span><h4>Pin down the spec</h4><p>We capture what the system must do — and what an attacker must never be able to do — as a precise specification that everything else is built and tested against.</p></div><div class="card feat"><span class=bar></span>
<span class=k>03 · IMPLEMENT</span><h4>Build the system</h4><p>We build to that spec, with security and correctness designed in from the first line rather than bolted on after, and reviewed as the code is written.</p></div><div class="card feat"><span class=bar></span>
<span class=k>04 · ANALYZE</span><h4>Confirm it holds</h4><p>We check the result against the spec through review, testing, and — where the stakes call for it — machine-checked proofs, with every requirement traced to what we specified.</p></div></div></div></section><section class="band band--alt" id=research><div class=wrap><div class=sec-head><div class=l><span class=eyebrow>Learn More</span><h2>We publish what we do.</h2></div></div><div class=two><div class="card panelcard"><h3 class=kicker>From the blog</h3><div class=feed><a class=feed__item href=/blog/ce-labs-announcement/><div class=feed__meta><span class=cat>Announcement</span><span>2026·06·24</span></div><h4>Announcing CE Labs</h4></a><a class=feed__item href=/blog/iot-pqc-06-2025/><div class=feed__meta><span class=cat>Post-Quantum</span><span>2025·07·02</span></div><h4>Pushing the Boundaries of PQC for IoT</h4></a><a class=feed__item href=/blog/iot-pqc-announce/><div class=feed__meta><span class=cat>Post-Quantum</span><span>2024·08·05</span></div><h4>High Assurance Post-Quantum Cryptography for IoT</h4></a></div><a href=/blog/ class=seemore>All posts <span>→</span></a></div><div class="card panelcard" id=opensource><h3 class=kicker>Open source</h3><a class=repo href=https://github.com/celabshq/hpke-rs><div class=repo__top><span class=repo__name>celabshq/hpke-rs</span><span class=repo__lang>Rust</span></div><p>A high-assurance Rust implementation of HPKE (Hybrid Public Key Encryption, RFC 9180), built on libcrux's verified cryptographic primitives.</p></a><a class=repo href=https://github.com/celabshq/libcrux><div class=repo__top><span class=repo__name>celabshq/libcrux</span><span class=repo__lang>Rust</span></div><p>A high-assurance cryptographic library: formally verified, high-performance implementations of post-quantum and classical primitives.</p></a><a href=/projects/ class=seemore>View all projects <span>→</span></a></div></div></div></section><section class=band id=contact><div class=wrap><div class=cta-band><div><h2>Have something that has to be right?</h2><p>Tell us what you're building. We'll tell you what it would take to make it secure.</p></div><a href=/contact/ class="btn btn--amber">Start a conversation <span class=arw>→</span></a></div></div></section></main><footer class=foot><div class=wrap><div class=foot__grid><div class="foot__brand on-ink"><span class=ce-lockup><span class=ce-lockup__word>CE<span class=ce-dot></span>Labs</span>
<span class=ce-lockup__rule><span class=ce-bar></span><span class=ce-sub>Cryptography Engineering</span></span></span><p>High-assurance security engineering — built secure from the cryptography up, for organisations that cannot afford to be wrong.</p></div><div><h5>Company</h5><ul><li><a href=/about/>About</a></li><li><a href=/about/#team>Team</a></li><li><a href=/careers/>Careers</a></li><li><a href=/imprint/>Imprint</a></li></ul></div></div><div class=foot__bottom><span>© 2026 CE Labs</span>
<span><a class=foot__spinoff href=https://cryspen.com target=_blank rel=noopener><span class=foot__spinoff-label>A</span>
<img src=/images/cryspen-logo.svg alt=Cryspen loading=lazy>
<span class=foot__spinoff-label>spin-off.</span>
</a></span><span>secure(system) ⊨ spec</span></div></div></footer></body></html>