Skip to content
Security

Lockstep

Proved first. Then shipped.

2026 · Rust, Lean

Lockstep diagram with two keys turning one lock together

Overview

A key-exchange protocol proved correct in Lean, then implemented in Rust against the proof.

The problem

Key-exchange code gets reviewed line by line and still ships the bug that only appears when two messages cross in flight.

What I built

A model of the protocol in Lean with a proof that both sides always agree on the key, and a Rust implementation fuzzed against the model.

The result

Placeholder result: the real project’s measurable outcome goes here, in one sentence with a number.