Posts
Modeling and Analyzing Security Protocols with Tamarin: A Comprehensive Guide
ePrint: SNARKs for Stateful Computations on Authenticated Data
Questionable US Federal Government Cryptosystems
I am researching the history of cryptographic development in the United States. It has come to my attention that there are some algorithms the US Federal Government recommended in the past that have failed to gain traction, whose design choices were suspicious, or were cracked in public. Here is a …
ShulginSigning: A Standard For A High-Integrity, Secure, Modern Digital Signature Scheme using SPHINCS+ and ED448 (with hedged signatures)
Apple will soon support encrypted RCS messaging with Android users
Non NIST-Standardized Cryptosystems That Are Still Worth Studying?
We are all aware that the NIST selects cryptosystems for federal government use. As I was speaking to a colleague we both agreed that just because the NIST does not select certain cryptosystems does not mean they are worthless. Even the NIST chosen cryptosystems have their downsides. Certainly there have …
Constant-Time Code: The Pessimist Case
The 4th Annual FHE.org Conference is affiliated with Real World Crypto 2025 and will be held at the Grand Hotel Millennium Sofia in Sofia, Bulgaria March 25, 2025. The invited speaker is Craig Gentry, father of modern FHE. If you're interested in FHE research and development, don't miss it.
The Problem with the Advice: Don't Roll Your Own Crypto
One of my concerns with modern cryptography is that people are violating the sage advice "Don't Roll Your Own Crypto(graphy)\[sic\])". Machines are only getting smaller and sometimes such machines don't have the system resources to use off-the-shelf de facto crypto libraries such as OpenSSL. What I learned from security conferences …