Web

UVS: a draw's fairness as a fact you can recompute — not a certificate you trust

I've built casino slot machines and gaming systems for 15 years. I mostly stayed away from compliance, but once I had to write the official algorithm …

Encrypted Spaces

Fun stuff from Signal devs + edu+MS researchers: E2EE collaborative/social apps using zero-knowledge proofs and other crypto goodness. Servers provide…

Making post-quantum the default in a file format, not a toggle

Most "post-quantum" features I run into are a switch you have to find and flip. A checkbox in settings, an opt-in beta, a separate "secure mode." I wa…

rscrypto v0.4.0: Verifying Constant-Time Behavior Instead of Assuming It

Every cryptography library says it's secure and performant. Very few can explain how that security is validated and how that performance is proven aft…

How a Slow Office VPN Led Me to File a US Patent

This is the story of how a mundane complaint — "the VPN is slow" — turned into a US patent application. Not a granted patent. An application . I want …

Entropy

Random Oracles in Python

A random oracle is a function $\mathcal{O}: {0,1}^* \to {0,1}^\infty$ where each output bit is independently and uniformly random, but the function is…

Spectre and Meltdown: When CPUs Leak Secrets by Guessing

For decades, processor designers chased speed by letting the CPU run ahead of itself — executing instructions before it was certain they were needed, …

Zero-Knowledge Proofs: Proving You Know a Secret Without Revealing It

Suppose you need to prove you are over 18 without showing your birthdate, or that you know a password without sending it, or that a financial statemen…

Announcing the Trust Identity Protocol (TIP): HTTPS for the AI Era

Announcing the Trust Identity Protocol (TIP): HTTPS for the AI Era TL;DR. The Trust Identity Protocol (TIP) is a free, open, post-quantum-secure, pate…

What is the Difference Between Lattice-Based and Hash-Based Signatures?

Lattice-based and hash-based signature schemes represent two fundamentally distinct approaches to securing digital identities against quantum computer…

Post-quantum cryptography for embedded and IoT: secure boot, TLS and OTA

Post-quantum cryptography is no longer just a research topic. It is starting to affect the way embedded teams design TLS, secure boot, OTA, firmware s…

Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption

Critics note a lack of factual support in lawsuit filed by US Senate candidate.

Digital Signatures: The “Trust Me Bro” Detector for Junior Cybersecurity Engineers

Digital Signatures: The “Trust Me Bro” Detector for Junior Cybersecurity Engineers Subtitle: How digital signatures help prove who signed something, w…

OPAQUE: Password Authentication That Never Sends the Password

The standard way to log in — type a password, send it to the server, hope the server hashes it well — has a structural flaw nobody has been able to fi…

EU Chat Control: What Client-Side Scanning Actually Means for Encryption

The EU's proposed Chat Control regulation would require messaging providers to scan your messages for illegal content before encryption, on your devic…

Kettle: Attested builds for verifiable software provenance

Why Strict "Zero Trust" Breaks Secret Management (And How We Built a Zero-Persistence Vault Instead)

This is a technical deep dive into the cryptography behind Ennote's enterprise architecture. You can read the original full-length post on our enginee…

Matrix: The Open Protocol for Federated Encrypted Messaging

Signal works well when everyone involved trusts the same company. Matrix is built for the case where they don't — where organizations want to run thei…

Building an Experimental TypeScript Cipher Inspired by 8 Dimensions

Over the last few days, I started an experimental study on cryptography with the goal of better understanding concepts such as symmetric encryption , …

How to scan your codebase for post-quantum cryptographic risk

If you've been following NIST's post-quantum cryptography standardization process, you already know the threat is real. In August 2024, NIST finalized…

Post-Quantum VPN Based on QUIC

Supply Chain Attacks: When Your Privacy Tool Gets Compromised

On March 29, 2024, Andres Freund — a Microsoft engineer and PostgreSQL contributor — noticed something odd while investigating unexplained CPU usage i…

The Counter Galois Onion (CGO) Migration: Tor's Cryptographic Engine Swap

The Counter Galois Onion (CGO) Migration: Tor's Cryptographic Engine Swap If you've ever dug into Tor's internals, you know the network is a masterpie…

How Group Encrypted Messaging Actually Works

Adding a third person to an encrypted conversation seems like it should be simple. It isn't. The cryptographic properties that make 1:1 messaging secu…

Why I built Mickai: sovereignty is a title deed, the cloud is a rental agreement

By Micky Irons. Founder & sole inventor, Mickai . CEO, Trust-Agent.ai. When I started filing the patents that became Mickai , I didn't have a prod…