KEL.BZ

It’s well known that string comparisons can leak timing information.

A useful software architecture concept is the distinction between the control plane and data plane.

An experiment showing the effects physical proximity has on network latency.

Notes from reversing implmentation details of the macOS Virtualization.Framework

Reference code for creating NIST P-256 curve objects in Sagemath.

Notes and implementation of the Goodrich and Tamassia paper on authenticated dictionaries with skip lists.

Notes on the Boneh and Venkatesan’s paper describing the Hidden Number Problem and code demonstrating some of the results.

Unexpected properties of ECDSA signatures.

Different ways to describe the entropy of a random variable.

How to use RSA to encrypt symmetric keys and how RSA-KEM relates to RSA-OAEP.

Moving towards operationalizing system design reviews.

The purpose of ssh-agent and observations how ssh-agent improves UX and security.

Overview and implementation of the Fiat-Shamir heuristic used to build signature schemes from interactive zero-knowledge proofs.

My attempt to grok the Lenstra–Lenstra–Lovász (LLL) algorithm used for basis reduction.

Subgroup confinement attacks can apply in offline and online contexts.

Non-obvious ways of getting code execution when testing code that uses user input to build shell commands.

An introduction to lattice-based cryptography using the broken Goldreich–Goldwasser–Halevi (GGH) cryptosystem.

Breaking RSA with sequential prime key parameter generation.

Decrypting RSA ciphertexts using correlated parameters.

Using netfilter to programmtically rewrite the source IP address of ICMP packets.

Takeaways from my first trip to Iceland and places I hope to revisit.

Patterns/anti-patterns for designing authorization APIs.

How to securely migrate from an insecure password hash algorithm to a secure one.

One tip for finding fast and useful fuzz targets for networked code.