Security reviews of core network components #410 - Milestone 3: _(CRY) Crypto API_

Milestone 3: _(CRY) Crypto API_

• Scope: The Crypto API of Canton exposes cryptographic operations behind an abstract interface serving the needs of the protocol in a safe way. Therefore, the implementation of this API must be done with great care to guarantee the security of the protocol. Previous security audits no longer apply due to the recent addition of session signing keys and new crypto schemes. Therefore, the security audit should be renewed.
• Estimated Delivery: EOY 2026
• Estimated Effort: 8PW
• Selected Independent Auditor: RFQ

| Milestone | Description | Amount | Note | |---|---|---|---| | _(CRY) Crypto API_ | Audit 3 | 430,000 CC | For DA upon completion of audit and remediation of all high-severity findings, and an approximate budget of up to 350,000 CC for the third-party auditor. This section can be repeated multiple times if additional audits are required. |

Total Funding Request: 6,420,000 CC for DA and a budget of up to 3,850,000 CC for the 11 third-party audits.

_Originally posted by @pedrodneves in https://github.com/canton-foundation/canton-dev-fund/issues/410#issuecomment-4907936268_