The US lock of the Web
ache
Let's talk about Let's Encrypt.
cryptography
Speculative Parallel Rejection Sampling in ML-DSA Signing
Among Bytes
Speculative Parallel Rejection Sampling in ML-DSA Signing ML-DSA signing uses the Fiat-Shamir with Aborts construction. The signer picks a random masking vector y, computes a candidate signature, checks norm bounds, and either accepts or discards and retries. The acceptance probability per attempt...
Benchmarking ML-DSA Signature Generation: Understanding Rejection Sampling Performance
Kris Kwiatkowski
Introduction As post-quantum cryptography (PQC) adoption accelerates, developers face new challenges in deploying signature schemes like ML-DSA on constrained devices-from embedded IoT devices to edge servers with limited computational resources. Unlike traditional signature algorithms such as RSA...
Elliptic Curves math in Rust
Sergey Melnychuk
TL/DR: ecc - porting “Elliptic Curve Cryptography for Developers” from C/GMP to Rust, chapter by chapter. From modular arithmetic to a working SNARK in ~3700 lines. Motivation After learning ZK proofs through Circom, Noir, and Halo2, I had a working understanding of circuits and proof systems...
Migration to Post-Quantum Cryptography
Kris Kwiatkowski
The global internet security ecosystem is preparing for one of its biggest shifts in decades: the migration from traditional cryptographic algorithms to post-quantum cryptography. Quantum computing may still be years away from breaking widely deployed algorithms, but the “harvest-now,...
Obtaining a self-signed SSL certificate from our own Certificate Authority
ache
In this blog post, we will create a self-signed TLS certificate, install it on an nginx server and on client systems.
Two ways ISPs can do content-based filtering of encrypted traffic
Keunwoo Lee (Cog)
Vaguely a propos of the revived net neutrality debate, a while back I saw someone on Twitter claim that it is technically not possible for ISPs to do content-based (as opposed to destination-based) filtering of SSL traffic. This statement seems initially plausible, but is false. I can think of two...
How To Use Django’s Signing Functions For One Click Unsubscribes
GrokCode
Sometimes it is handy to allow users to change part of their profile without having to log in, as long as we can be reasonably sure of their identity. The most common use case is to unsubscribe from email newsletters, where it is annoying to have to login first. The workflow we want to handle...
Bitcoin
Jeffrey Wang
The virtual currency bitcoin has been getting a lot of hype and news recently, as the price per coin has gone from about \$14 at the beginning of the year to a high of over \$1200 last week with a subsequent drop to its current value, which is between \$700 and \$800 (see here). While nobody...