Posts
not quite cryptography, but a major supply chain attack is going on by TeamPCP, be careful!
What's the general opinion on combating deepfakes using hardware-based signatures?
[A very recent article](https://ethz.ch/en/news-and-events/eth-news/news/2026/03/chips-designed-to-help-identify-deepfakes.html) named "In-sensor cryptographic signature generation to link a physical process and an immutable digital entity" did a proof-of-concept on this idea. I know some of the drawbacks, like key compromise risk, and privacy issues when the secret key is different for every chip. But are these …
Probable copy-paste error in PSPICE's AES-256 implementation shrinks effective keyspace to 2^32 and leads to a practical crack of proprietary semiconductor model files
[https://www.reddit.com/r/netsec/comments/1ry14jw/a\_copypaste\_bug\_that\_broke\_pspice\_aes256/](https://www.reddit.com/r/netsec/comments/1ry14jw/a_copypaste_bug_that_broke_pspice_aes256/) >PSpice is a SPICE circuit simulator from Cadence Design Systems that encrypts proprietary semiconductor model files to protect vendor IP and prevent reuse in third-party SPICE simulators. The encryption scheme is proprietary and undocumented. >Many third-party component vendors distribute SPICE models exclusively as PSpice-encrypted files, locking them to a …
What are my options for a securit audit for my open source project?
I created the signal protocol for a related project. The implementation is in rust and compiles to WASM for browser-based usage. * Github: [https://github.com/positive-intentions/signal-protocol](https://github.com/positive-intentions/signal-protocol) * Demo: [https://signal.positive-intentions.com](https://signal.positive-intentions.com/) Im not sure when its a good time to share it, but i think its reasonable now. The aim is for it to …
Ensuring compliance with basic security principles in coding and operations
A simple error exposes the private key of a major security company. https://www.kucoin.com/news/flash/360-responds-to-openclaw-private-key-leak-certificates-revoked This shows the results when basic security principles are ignored and not followed.
An open source E2EE terminal chat — looking for a crypto review
X25519 DH, Ed25519, HKDF room isolation, sealed sender, blake2s routing tokens. Server is a blind forwarder , sees no usernames, no room names, no plaintext. I'd really appreciate someone experienced looking for flaws in the implementation.
two trust domains with one improvised data diode
Claim: Bacon was portrayed with a C2PA camera. Is the claim true? When and where do you believe the image was taken?
Seeking reviews on f6s
Software: PSI-COMMIT GitHub repo: https://github.com/RayanOgh/psi-commit Website link: https://psicommit.com Here’s the link for reviews: https://www.f6s.com/software/review?product=psi-commit I would deeply appreciate your guy’s help, means a lot for me. 🙏😁