Posts
I built a ZK proof visualizer while learning - perhaps it is useful to you
I was learning ZK proofs and found that visualizing things really helped me understand them. I noticed there aren't many interactive visualizations out there, so I contributed to the area myself. Here's the first version: zkvisualizer.com It walks through the full pipeline step by step (Problem → Circuit → R1CS …
Building cryptographic agility into Sigstore
Transaction-Governed Security/Execution-Time Security: cryptographic enforcement of irreversible actions at authorization time
I am exploring a security model I refer to as **Transaction-Governed Security (TGS)** Or **Execution-Time Security** and would appreciate discussion focused on *cryptographic framing, threat models, and prior art*. This is **not** about currency systems, blockchains, or economic mechanisms. The term “transaction” here means *any irreversible action* (e.g. state mutation, …
State of the art white box cryptography implementations
Hello, I'm looking for a library for doing encryptions while hiding the keys in implementations. I'm aware obscurity is not security and the goal here is to simply make life a bit harder for people reverse engineering my application. The use case will mostly be obfuscating binaries and semi-frequent HTTP …
Baillie-PSW after Miller-Rabin?
Somewhere it was recommended to perhaps do Baillie-PSW after Miller-Rabin. That as a belt-and-suspenders approach. But as I read it, Baillie-PSW seems merely a pairing of Lucas to Miller-Rabin. Which makes the first paragraph above to seem semi-redundant. Say I have Miller-Rabin already coded (in Forth). Ought I proceed to …
OpenSSL Advisory Committees elections
https://openssl-corporation.org/post/2026-01-20-bacs-and.tacs.election/ The OpenSSL Corporation announced the opening of the 2026 elections cycle for its Advisory Committees, inviting members of the communities to actively participate in shaping the future direction of the OpenSSL Library and related activities. Registration and nomination period is scheduled to close on Feb 1st, and various communities …
Exploiting Keyspace Reduction and Relay Attacks in 3DES and AES-protected NFC Technologies
Would it be possible to replace some steps of this paper that perform elliptic curve pairing inversion with a polynomial time universal Miller inversion algorithm?
Everything is in the title and in https://drive.google.com/file/d/1SXS1h-6Tywdj9_1XlMRhrS0piHl7DrLG/view?usp=drivesdk. My point is if it s possible even if it makes the whole process more complex. Or am I correct that no steps can be made related to such method?
Rejection of weak keys for AES
TCG documentation for TPM 2.0 defines weak key rejection for DES and AES in the [section 11.4.10.4](https://trustedcomputinggroup.org/wp-content/uploads/TPM-2.0-1.83-Part-1-Architecture.pdf#page=82). I understand why the check exists for DES, but AFAIK AES does not have a similar cryptographic vulnerability. So what is rationale behind the check? Is it just defense in depth to reject …
WebCrypto PDKDF2+AES-GCM sufficient for secure notes app.
I’m working on a little secure notes app, think along the lines of StandardNotes/Notesnook, as is client side encryption/zero-knowledge server. I’m an experienced web dev but newb at crypto (at least in this regard). I’m trying to weigh the pros/cons of just sticking with browser native WebCrypto using PBKDF2/sha256 for …