/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

blog.trailofbits.com
| | paragonie.com
4.1 parsecs away

Travel
| | JWT, JWE, JWS, etc. are terrible designs and need to be scrapped, not resuscitated.
| | soatok.blog
3.2 parsecs away

Travel
| | Cryptographers and cryptography engineers love to talk about the latest attacks and how to mitigate them. LadderLeak breaks ECDSA with less than 1 bit of nonce leakage? Raccoon attack brings the Hidden Number attack to finite field Diffie-Hellman in TLS? And while this sort of research is important and fun, most software developers have much...
| | soatok.blog
3.3 parsecs away

Travel
| | Recently, it occurred to me that there wasn't a good, focused resource that covers commitments in the context of asymmetric cryptography. I had covered confused deputy attacks in my very short (don't look at the scroll bar) blog post on database cryptography., and that's definitely relevant. I had also touched on the subject of commitment...
| | developerlife.com
17.4 parsecs away

Travel
| TLS is the backbone of web security. We will explore using TLS with Rust, and CFSSL to create a certificate authority to issue self signed certificates & keys. We will also create a server and client that communicate securely over the network using tokio and upgrade insecure TcpStream to TLSStream, and work with TLSAcceptor and TLSConnector.