Ben Laurie is a security-focused software engineer and system designer with over 30 years of programming experience, best known as a founder and core team member of OpenSSL. Currently a Principal Engineer at Google running the Certificate Transparency project, he is a long-standing Apache member, FreeBSD committer and Visiting Fellow at the University of Cambridge. His work spans cryptography, privacy and civil liberties—he has implemented constant-time fixes and padding mitigations in OpenSSL and helped build auditing infrastructure for TLS certificates. Beyond core crypto, Ben contributes to embedded and IoT projects (Paparazzi UAV, g2 motor firmware), demonstrating hands-on firmware and sensor-data expertise alongside large-scale backend systems. Based in Llanwrda, Wales, he combines open source stewardship and advisory roles in health and policy with an unexpectedly rural base as owner of Glansevin Mansion.
18 years of coding experience
25 years of employment as a software developer
Latymer
Incomplete, Mathematics, Incomplete, Mathematics at University of Cambridge
Contributions:227 commits, 8 PRs, 2 pushes in 4 years 4 months
Contributions summary:Ben implemented the beginnings of a command-line client and a general server for auditing TLS certificates. The code changes primarily involved the creation of a server-side component with event handling and network input/output capabilities. The user added functionality for handling client connections, reading data, and basic server operations within the `ct-server.cc` file, while laying out the client interface in `ct.cc`.
Contributions:4 PRs, 51 comments, 6 issues in 2 years 7 months
Contributions summary:Ben primarily contributed to fixing warnings and addressing potential security vulnerabilities within the OpenSSL library, focusing on cryptography, TLS/SSL, and cryptographic libraries. Their work involved modifying code to eliminate warnings, improve code quality, and incorporate constant-time comparisons to mitigate timing-based side-channel attacks, particularly related to padding vulnerabilities in TLS/SSL CBC records. Furthermore, the user made numerous changes to address potential buffer overruns.
crypto-librarycryptographyssltlscrypto
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.