Posts
Question About Breaking Encrypted Files
Good morning everyone, A bit of a novice question here but hope you will be able to give me some insights. Using VeraCrypt I mount an \*.HC file as a drive on my computer. This drive is encrypted as it holds all my sensitive personal files. I also have a …
Did we lose the weekly and monthly automod posts again?
They went dark 5 and 11 months back.
Post-Quantum Cryptography for the PHP Community
A Cryptography Engineer’s Perspective on Quantum Computing Timelines
Bitsliced first-order masked AES-128 decryption in Cortex-M0 assembly — how many traces to break it?
Wrote this from scratch for a university smart card lab course — couldn't find any usable reference implementation of bitsliced first-order masked AES in assembly, so I had to write one. Key details: * Platform: STM32F051 (Cortex-M0, 8 MHz) * 26,801 cycles * Bitsliced representation: 16-bit per bit-plane * S-box: …
Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices
It is possible to use the Ueli Maurer s Diffie Hellman reduction to transfer the discrete logarithm problem from an elliptic curve to a finite field?
The [original paper](https://crypto.ethz.ch/publications/files/Maurer94.ps) ("Towards the equivalence of breaking the Diffie-Hellman protocol and computing discrete logarithms") solves the discrete logarithm problem using a Diffie-Hellman oracle and auxiliary groups. It also transfers the problem from a finite field to solving the discrete logarithm on an elliptic curve. It was since extended for …
PGP Tools: A zero-permission Chrome extension using WebAuthn PRF for PGP key management
I built Chrome extension for PGP and I think the cryptographic approach is interesting enough to share here. The extension uses WebAuthn PRF to derive a master key from a passkey, which encrypts/decrypts the user's PGP private keys and contacts at rest. No passwords if you don't want them, no …
Understanding the Ultrahonk Verifier
AI-Enhanced Traffic Analysis of Post-Quantum Encrypted Network Packets
One of my biggest concerns for online privacy is that even after PQC adoption of TLS Traffic takes off--people will simply apply statistical analysis of encrypted network packets to figure out what people are doing. Problems like this have been shown: 1. From the Whisper Attack (https://www.microsoft.com/en-us/security/blog/2025/11/07/whisper-leak-a-novel-side-channel-cyberattack-on-remote-language-models/) 2. And AI-enhanced …