Posts
State of the art white box cryptography implementations
Hello, I'm looking for a library for doing encryptions while hiding the keys in implementations. I'm aware obscurity is not security and the goal here is to simply make life a bit harder for people reverse engineering my application. The use case will mostly be obfuscating binaries and semi-frequent HTTP …
Baillie-PSW after Miller-Rabin?
Somewhere it was recommended to perhaps do Baillie-PSW after Miller-Rabin. That as a belt-and-suspenders approach. But as I read it, Baillie-PSW seems merely a pairing of Lucas to Miller-Rabin. Which makes the first paragraph above to seem semi-redundant. Say I have Miller-Rabin already coded (in Forth). Ought I proceed to …
OpenSSL Advisory Committees elections
https://openssl-corporation.org/post/2026-01-20-bacs-and.tacs.election/ The OpenSSL Corporation announced the opening of the 2026 elections cycle for its Advisory Committees, inviting members of the communities to actively participate in shaping the future direction of the OpenSSL Library and related activities. Registration and nomination period is scheduled to close on Feb 1st, and various communities …
Exploiting Keyspace Reduction and Relay Attacks in 3DES and AES-protected NFC Technologies
Would it be possible to replace some steps of this paper that perform elliptic curve pairing inversion with a polynomial time universal Miller inversion algorithm?
Everything is in the title and in https://drive.google.com/file/d/1SXS1h-6Tywdj9_1XlMRhrS0piHl7DrLG/view?usp=drivesdk. My point is if it s possible even if it makes the whole process more complex. Or am I correct that no steps can be made related to such method?
Rejection of weak keys for AES
TCG documentation for TPM 2.0 defines weak key rejection for DES and AES in the [section 11.4.10.4](https://trustedcomputinggroup.org/wp-content/uploads/TPM-2.0-1.83-Part-1-Architecture.pdf#page=82). I understand why the check exists for DES, but AFAIK AES does not have a similar cryptographic vulnerability. So what is rationale behind the check? Is it just defense in depth to reject …
WebCrypto PDKDF2+AES-GCM sufficient for secure notes app.
I’m working on a little secure notes app, think along the lines of StandardNotes/Notesnook, as is client side encryption/zero-knowledge server. I’m an experienced web dev but newb at crypto (at least in this regard). I’m trying to weigh the pros/cons of just sticking with browser native WebCrypto using PBKDF2/sha256 for …
Guide on SMT/MILP based linear and differential analysis
I have come up with a new lightweight ARX based cipher and want to perform linear and differential analysis based on SMT or MILP tool. Please guide me how and what to do.
What happens if an elliptic curve over large characteristics has a negative trace?
Of course, this means having an order larger than the underlying finite s field order s. Are there any security implication? What s the name of such curves?