Posts
Barking Up The Ratchet Tree – MLS Is Neither Royal Nor Nude
As a programmer non-cryptographer, what will I be missing in RFCs?
I am a decent C programmer, but I have next to zero knowledge in cryptography. Now, if I was to implement "naïvely" some well-established crypto-related standard protocol like https://www.ietf.org/rfc/rfc2898.txt or https://www.rfc-editor.org/rfc/rfc7296.txt , what do you think would be the risks for the resulting system? What vulnerabilities would I be likely …
Pollard Rho - Pseudorandom Sequences
Hi, I’m currently writing my bachelor thesis about factoring Algorithms. One of them is Pollard Rho, so here is my question: In his paper Pollard states that the pseudorandom sequence: $x_{i+1}=x_{i}^{2}$ shouldn’t be used for his algorithm. Why so? I did some research and found out that although the sequence …
Tips on Auditing Cryptographic Source Code
I am interested in auditing cryptographic source code on my spare time. Some of the projects I am considering auditing include GNUPG, Sequoia-PGP, Mullvad, and Rustls. For those of you who have experience auditing cryptographic source code what advice would you give? I thank all in advance for any responses.
Why was Classic McEliece Rejected for ML-KEM?
I have learnt that Classic McEliece made it to round 3 of NIST but was rejected in favor of Kyber for ML-KEM. McEliece was introduced in 1978--around the same time as RSA and remains resistant to classical and post-quantum cryptanalysis to this day. I am just asking for a quick …
Any Practical Use of Menezes Qu Vanstone over Authenticated Diffie-Hellman
I was studying Menezes Qu Vanstone from Serious Cryptography 2nd Edition. Aumasson mentions MQV is elegant and more secure than Authenticated Diffie-Hellman. You cannot break MQV just by leaking ephemeral secrets. Even if a long-term key is compromised the previously established keys are safe since they were derived using ephemeral …
Decrypting Memory Chip Data
I just got two Nitrokey 3C NFC keys. My first time using 2FA, first time having keys
Hi I am new to understanding how to be more secure online. I bought two Nitrokey 3C NFC keys, one for a primary, and one for a backup. I have successfully gone into terminal on my Macbook M1 Air and also my M1 Macbook Pro. I am not sure how …
Signal protocol in JavaScript
i wanted the signal protocol in javascript that would be able to run in the browser. * [https://www.reddit.com/r/crypto/comments/1mi4ooa/looking\_for\_the\_signal\_protocol\_in\_javascript](https://www.reddit.com/r/crypto/comments/1mi4ooa/looking_for_the_signal_protocol_in_javascript) * [https://www.reddit.com/r/cryptography/comments/1mi5z1b/looking\_for\_the\_signal\_protocol\_in\_javascript](https://www.reddit.com/r/cryptography/comments/1mi5z1b/looking_for_the_signal_protocol_in_javascript) i decided to get AI to teach me with examples. * [https://cryptography.positive-intentions.com/?path=/story/signal-protocol-x3dh-key-exchange--educational-guide](https://cryptography.positive-intentions.com/?path=/story/signal-protocol-x3dh-key-exchange--educational-guide) * [https://github.com/positive-intentions/cryptography](https://github.com/positive-intentions/cryptography) i had it create this page to teach me how to use the signal protocol in …