Among Bytes

I co-authored RFC 10024 and ran the server side of the 2019 Cloudflare-Google post-quantum experiment.

Speculative Parallel Rejection Sampling in ML-DSA Signing ML-DSA signing uses the Fiat-Shamir with Aborts construction.

Introduction As post-quantum cryptography (PQC) adoption accelerates, developers face new challenges in deploying signature schemes like ML-DSA on constrained devices-from embedded IoT devices to edge servers with limited computational resources.

Introduction SmartFusion2 is an interesting platform: an FPGA tightly coupled with a Cortex‑M3 microcontroller, security features baked into silicon, and a toolchain that reflects its long industrial heritage.

Introduction Intel QuickAssist Technology (QAT) accelerates cryptographic workloads by offloading selected operations to dedicated hardware.

The global internet security ecosystem is preparing for one of its biggest shifts in decades: the migration from traditional cryptographic algorithms to post-quantum cryptography.

Here I’ll compare on the verification functionality of LMS and SLH-DSA.

FIPS has multiple ways of claiming CAVP-tested compliance of the key agreement schemes.

NTRU cryptosystem is a grandfather of lattice-based encryption schemes.

In the cryptography context, the side-channel attacks are about exploiting computer system implementation to gain information about the secret key.

This page describes how to enable support for some features on NGINX, i.e. post-quantum schemes or QUIC protocol.

The goal is to connect an embedded device to VPN network.

Problem description Typically, a TLS server uses a Certificate and associated Private Key in order to sign TLS session.

Recently I had a chance to play with i2c-stub.

This post is a step-by-step instruction to build HTTPS web server which uses quantum-resistant algorithm for TLS key exchange.

Slides from presentation given at the Cloudflare office in London.

Goals and assumptions Goal is to choose most suitable TLS library that could be statically linked with an application.

Android NDK comes with GDB, somewhere in the NDK folder one can find gdbserver and gdb binaries.

In some cases, it is needed to create your chain of certificates - CA and server (for example TLS testing).

When analyzing the core dump of a C++ based, long-running, server application it may be helpful to know the exact state of some objects created by the process.