arXiv (Computer Science - Cryptography and Security) • 1h
Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities
Chai is an AI-driven research framework designed to detect high-impact semantic vulnerabilities in cryptographic implementations. Unlike traditional tools focused on memory safety via instrumentation, Chai utilizes an "inverted discovery model" through an AI-enhanced differential testing engine. By identifying behavioral discrepancies in foundational libraries—specifically within X.509, JWT, and SAML implementations—and propagating these findings via a Cryptographic Dependency Graph (CDG), Chai identifies systemic logic flaws. The framework has surfaced over 100 vulnerabilities, including a critical zero-day in a major SSL library affecting billions of devices across Linux distributions and web browser components.