
In this episode, Alex Gaynor and Paul Kehrer discuss the Python cryptography library’s decision to move away from OpenSSL as its primary backend, citing long‑standing maintenance headaches and architectural constraints. They explain the technical challenges they faced with OpenSSL’s API volatility, security patches, and performance quirks, and outline their plans to adopt a modular backend strategy that can incorporate alternatives like BoringSSL or Rust‑based implementations. The hosts also explore the broader impact of OpenSSL’s recent vulnerabilities and the community’s response, highlighting how the shift aims to improve stability, auditability, and cross‑platform support for Python developers.

The episode examines the IACR's botched Helios election, where a key management failure forced the organization to discard the vote and schedule a new election. Guest Matt Bernhard, an expert in secure voting systems, explains how Helios' homomorphic encryption works,...