Trust, But Verify.
Verdict Security is an independent formal verification firm. We restate claims about cryptographic implementations as theorems, check them by machine, and publish the results with the code that reproduces them.
What we publish
Eight papers on arXiv
A seven-paper series on masking in post-quantum cryptographic hardware, written with Khaled Kirah of the Faculty of Engineering, Ain Shams University, and a standalone paper on smart-contract reentrancy defense. Every paper carries the Verdict Security affiliation.
Machine-checked proofs
Six of the eight papers carry proofs written in Lean 4 and checked by its kernel. The other two are structural and security-margin analyses of a production accelerator for ML-KEM and ML-DSA.
Public artifacts
Each paper has a public repository holding the proof suites, the analysis code and the reproduction commands, under MIT or Apache-2.0 licences.
Latest
How we work
Claims become theorems
A security claim about a circuit or a program is restated as a mathematical statement and then proved, or refuted with a counterexample. The proof is the deliverable, not a reviewer's opinion.
Independent by construction
We verify; we do not build devices or accelerators. Our results are published on arXiv with public artifacts, so anyone can check them. Our founder also runs NileStack, a system integrator; Verdict Security does not verify NileStack systems. Independence note.
Engagements follow from research
Everything we offer commercially is a method we have already published and applied to a production design. The three engagements.
Founder
Verdict Security was founded by Ray Iskander. He spent more than a decade in telecom infrastructure at Ericsson (1999–2010), and has since built technology ventures focused on innovation, open architectures, and post-quantum cryptography. About the founder.