Posts
Anyone across this CopyFail bug?
[Copy Fail](https://xint.io/blog/copy-fail-linux-distributions) allows privilege escalation on Linux distributions. The root cause is due to an AEAD encryption bug, writing 4 bytes beyond the AEAD tag. I wish I could say more but I have never read the Linux kernel so this is too deep in the weeds for me. Would …
Groth16, Intuitively
Soundness Failures in LaBRADOR Implementations from NTT -Friendly Rings
Introduction to Secret Sharing from First Principles - Stoffel - MPC Made Simple
PhantomChat v3.0.0: PQXDH (ML-KEM-1024 + X25519) + MLS RFC 9420 + Monero stealth addresses in Rust — pre-audit, looking for crypto review
Built and shipped a desktop messenger that stacks several privacy primitives in one wire format: \*\*Envelope (Monero stealth model)\*\* \- Recipient publishes (view\_pub, spend\_pub) as \`phantom:<view>:<spend>\` \- Sender's ephemeral r: \- tag = HMAC(HKDF(r × view\_pub, "ViewTag"), epk) \- enc\_key = HKDF(r × spend\_pub, "Envelope") \- ciphertext = XChaCha20-Poly1305(enc\_key, payload, …
I built a post-quantum encrypted IRC client. OTRv4 + ML-KEM-1024 + ML-DSA-87. Looking for people to break it. Version 10.5.8 update
I've been working on a full OTRv4 implementation with NIST Level 5 PQC for a while now. It's a terminal IRC client that runs on Android via Termux (also Linux/macOS) over I2P, Tor, or plain TLS. GitHub: https://github.com/muc111/OTRv4Plus What's under the hood: AES-256-GCM for message encryption with secure entropy from …
Cryptographic Right Answers - PQ / updated
Requesting resources to understand how often is a cipher's side-channel vulnerability exploited in a hash function built from it.
Hello, all. I'm a recently-graduated electrical engineer, not a cryptographer so, bear with me, please. I implemented a hash function on an FPGA, and my research advisor suggested I look into the implementation security of that specific algorithm. Basically, I couldn't find no side-channel vulnerabilities, but I found the cipher …
Found a numerical bug in fplll's GSO + RHF misses structural BKZ/SD-BKZ differences
Ran a 4,541-seed benchmark of BKZ vs SD-BKZ on LWE-Kannan embeddings (n=50-150, β=20/30/40). Two things worth posting about. At q=3329 (the ML-KEM modulus), n=100, β=30, 1000-bit MPFR, 38% of reduced bases end with a GSO log-norm sitting at the precision floor (\~-345). fplll's squared-form recurrence in `gso_interface.cpp:147-151` computes `r(i,i) = …