NSF safe-OSE: strengthening critical privacy infrastructure

Active Cooperative Agreement Awarded Last action

Award ID
2534285
Recipient
Awarding agency
Obligated
$0

Award facts

Completion date 54% complete
Place of performance
Winchester, NH 03470, USA

Award details come from USAspending.gov.

Description

As the agency reported it.

Abstract
This safety, security, and privacy of open-source ecosystems (safe-OSE) project focuses on improving a critical piece of open-source software utilized by U.S. Government agencies for national security and foreign policy purposes, by U.S.-based companies and organizations to deliver their services, and by individual citizens of the U.S. To bolster their privacy online. The project will focus on transitioning the software to a stronger form of encryption, ensuring that all users of the software are protected against evolving threats posed by quantum computing. The project will also resolve vulnerabilities posed by a variety of other threats that can compromise the safety, security, or privacy of the software?s users, including threats from outside governments, potential malicious developers who might TRY to inject compromised code into the software?s dependencies, and insiders that have had their accounts compromised through phishing attacks, and more. This safe-OSE project addresses the software?s (1) potential weakness to decryption caused by its use of pre-quantum encryption algorithms and (2) potential weaknesses to socio-technical threats like supply-chain attacks, long- and short-term infiltration, foreign government compromise, and compromised infrastructure. The project will (a) convert existing threat model findings into concrete security implementation measures; (b) implement supply chain resilience for automated dependency management; (c) provide a reproducible implementation of the software; and (d) integrate a standardized post-quantum cryptographic key exchange mechanism into the software. In mitigating these vulnerabilities, this project develops and publicly releases analysis, code, and tools that can be reviewed, evaluated, and reused by software developers. The project benefits other open-source software projects facing similar challenges, and will be of particular use to other projects with limited resources. The anticipated outcomes of this project are the use of the software to advance national security and foreign policy goals, to deliver company and industry services, and to bolster individuals' online privacy with increased safety, security, and privacy measures. This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the foundation's intellectual merit and broader impacts review criteria.- subawards are not planned for this award.

Transactions

Action Obligated Date
Amendment -$1,500,000
Original award $1,500,000

Quick answers

Who received award 2534285?

2534285 was awarded to The Tor Project Inc. by National Science Foundation on October 1, 2025.

How much is award 2534285 worth?

$0 has been obligated on 2534285.

On GovTribe

See this award's full record

  • Every transaction and subaward
  • The recipient's other awards and teaming partners
  • Similar grant awards
  • Ask GovTribe AI about this award
Try for free Login