Question

In March 2022, Tavis Ormandy reported a vulnerability in this library arising from an infinite loop in a modular square root function. Marco Peereboom equated this library to “monkeys throwing feces at the wall” in a rant titled “[this library] is written by (-5[1])monkeys”. A critical vulnerability in this library on Debian (“DEB-ian”) was hilariously caused by a developer commenting out a line because it was causing debugger warnings. OpenBSD forked this library into a “Libre” version (15[1])and Google forked it into a “Boring” version after a catastrophic 2014 (*) vulnerability that potentially affected (-5[1])70 percent of Internet traffic. A missing (10[1])bounds check in implementing the heartbeat protocol led to this library’s most notable vulnerability, called Heartbleed. For 10 points, name this cryptographic library that, as its name suggests, is a freely available implementation of (-5[1])a web security protocol and its successor TLS. ■END■ (10[2]0[1])

Back to tossups