Posts
OTRv4+ v10.5.10 — Rust SMP Engine
Post-quantum encrypted IRC with zero-knowledge identity verification now running entirely in Rust. No Python secrets. Months ago I posted this project here. The main criticism was that SMP exponents were Python int objects with no deterministic zeroization. That's fixed. The Socialist Millionaire Protocol proves two people share a secret without …
Anyone across this CopyFail bug?
[Copy Fail](https://xint.io/blog/copy-fail-linux-distributions) allows privilege escalation on Linux distributions. The root cause is due to an AEAD encryption bug, writing 4 bytes beyond the AEAD tag. I wish I could say more but I have never read the Linux kernel so this is too deep in the weeds for me. Would …
Groth16, Intuitively
Soundness Failures in LaBRADOR Implementations from NTT -Friendly Rings
Introduction to Secret Sharing from First Principles - Stoffel - MPC Made Simple
PhantomChat v3.0.0: PQXDH (ML-KEM-1024 + X25519) + MLS RFC 9420 + Monero stealth addresses in Rust — pre-audit, looking for crypto review
Built and shipped a desktop messenger that stacks several privacy primitives in one wire format: \*\*Envelope (Monero stealth model)\*\* \- Recipient publishes (view\_pub, spend\_pub) as \`phantom:<view>:<spend>\` \- Sender's ephemeral r: \- tag = HMAC(HKDF(r × view\_pub, "ViewTag"), epk) \- enc\_key = HKDF(r × spend\_pub, "Envelope") \- ciphertext = XChaCha20-Poly1305(enc\_key, payload, …
I built a post-quantum encrypted IRC client. OTRv4 + ML-KEM-1024 + ML-DSA-87. Looking for people to break it. Version 10.5.8 update
I've been working on a full OTRv4 implementation with NIST Level 5 PQC for a while now. It's a terminal IRC client that runs on Android via Termux (also Linux/macOS) over I2P, Tor, or plain TLS. GitHub: https://github.com/muc111/OTRv4Plus What's under the hood: AES-256-GCM for message encryption with secure entropy from …
Cryptographic Right Answers - PQ / updated
Requesting resources to understand how often is a cipher's side-channel vulnerability exploited in a hash function built from it.
Hello, all. I'm a recently-graduated electrical engineer, not a cryptographer so, bear with me, please. I implemented a hash function on an FPGA, and my research advisor suggested I look into the implementation security of that specific algorithm. Basically, I couldn't find no side-channel vulnerabilities, but I found the cipher …