My self is steam: Giuseppe Cocomazzi's blog

"Trustless" bridges claim to allow secure asset exchange across chains even in the presence of malicious actors.

This article explores an observation in the use of BLS signature aggregation within a production blockchain.

Vulnerabilities in Merkle tree implementation used for hashing collections of objects, with an application to Omni Network.

Inductive Reasoning Considered Harmful for blockchain light clients.

Missing BLS12-381 Public Key Validation, and BLS12-381 Wrong Signature Generation in CometBFT

Ethereum consensus vulnerability.

CVE-2023-25000

CoreDNS might be vulnerable to cache poisoning attacks.

How to find side channel leaks in Java Cryptography Extension providers.

Statistical inference of Chebyshev's bias in RSA numbers.

Duplicate RSA moduli census and bash interpreter abuse in the way of Diogenes.

An account of CVE-2018-5548

Exploiting SQL injections when error messages are the only output.

A Secret You Own is a Secret You Pwn.

Literate programming in APL.

Porting of GNU APL to OpenBSD.