Posts
Review request: Offline tool for Shamir's Secret Sharing with focus on generating and managing X.509 root certificates
# Background I think most of us have been here, setting up a root CA for one reason or the other and have asked the question: How do I store this safely? Both in terms of not having anyone steal it and not losing it. I have known about the …
I built a commitment scheme web app using HMAC-SHA256 with Bitcoin timestamps via OpenTimestamps — open source, MIT licensed
I built **PSI-COMMIT**, an open-source web app that implements a cryptographic commitment scheme. The idea: commit to a message now, reveal it later, and mathematically prove you didn't change it after the fact. **How it works:** Your browser generates a 256-bit random key and computes `HMAC-SHA256(key, domain || nonce || …
Google and Cloudflare testing Merkel Tree Certificates instead of normal signatures for TLS
softKMS - inspired by softHSMv2 - modern take
Implementing ML-KEM (Kyber) and X3DH for a P2P WebApp in JavaScript
I’ve been working on a P2P messaging implementation focused on mitigating "Harvest Now, Decrypt Later" risks by integrating Post-Quantum Cryptography (PQC) directly into the browser. Since NIST recently finalized FIPS 203 (ML-KEM), I decided to implement ML-KEM encryption into my cascading. The goal was to ensure that the security of …
Hash Based Verifiable Delay Function with simple approach
Hello, I want to make project that need vdf algorithm. But, majority of vdf implementation is based on RSA/factoring, which is not secure against quantum computer. And then I try to find paper that implement post quantum vdf. I found like lattice based and isogeny based, but It's very complex …
Project RedRabbit — A open source single HTML file app that fights surveillance.Ran by the community. Invisible by design. Unstoppable by nature.
Discord has been handing over user data to law enforcement at a rate that's been climbing every year. Their transparency reports don't lie — thousands of requests, most of them complied with. Telegram's "encrypted" private chats aren't the default, group chats aren't encrypted at all, and after their founder got …
Cryptography Engineering Has An Intrinsic Duty of Care
AirSnitch: Demystifying and Breaking Client Isolation in Wi-Fi Networks
Signal Protocol for Browsers
Id like to share my implementation of the signal protocol that i use in my messaging app. The implementation is in rust and compiles to WASM for browser-based usage. https://github.com/positive-intentions/signal-protocol Its far from finished and im not sure when its a good time to share it, but i think its …