Professional maintainers: a wake-up call 11 Dec 2021 I work on the Go team at Go... 2021-12-12 02:58:3 | 阅读: 13 | 收藏 | words.filippo.io maintainer maintainers career paying github

Automatic Cipher Suite Ordering in crypto/tls 16 Sep 2021 This is the first article I... 2021-9-16 06:0:0 | 阅读: 10 | 收藏 | words.filippo.io suites client preference security hardware

The Most Backdoor-Looking Bug I’ve Ever Seen 10 Jan 2021 This is the story of a bug... 2021-1-10 07:0:0 | 阅读: 12 | 收藏 | words.filippo.io alice hellman diffie parties mtproto

Re-Deriving the edwards25519 Decoding Formulas A lot of my job is implementing specifications, and sometimes in a crypto spec you'll e... 2020-12-18 07:0:0 | 阅读: 19 | 收藏 | words.filippo.io square uv x² 121666 121665

Reconstruct Instead of Validating Project Zero dropped a great bug in Vault which I think would have been prevented by on... 2020-10-8 06:0:0 | 阅读: 14 | 收藏 | words.filippo.io sts attacker amz

NaCl Is Not a High-Level API 08 Sep 2020 When talking about high-lev... 2020-9-8 06:0:0 | 阅读: 18 | 收藏 | words.filippo.io nacl recipient libsodium library ciphertext

Registries Considered Harmful 22 Aug 2020 Cryptographic protocols and... 2020-8-22 06:0:0 | 阅读: 10 | 收藏 | words.filippo.io registries primitives recipient aead choices

Replace PGP With an HTTPS Form 19 Jul 2020 I asked my Twitter follower... 2020-7-19 06:0:0 | 阅读: 13 | 收藏 | words.filippo.io pgp security x25519 coordinate clamp

DSA Is Past Its Prime 04 Jul 2020 I want to sta... 2020-7-4 06:0:0 | 阅读: 8 | 收藏 | words.filippo.io dsa ssh security elliptic openssh

Is X25519 Associative? Sometimes! 27 May 2020 X25519 is a s... 2020-5-27 06:0:0 | 阅读: 19 | 收藏 | words.filippo.io clamp x25519 scalar scalars modulo

OpenSSH 8.2 Just Works with U2F/FIDO2 Security Keys 24 Apr 2020 OpenSSH is on... 2020-4-24 06:0:0 | 阅读: 18 | 收藏 | words.filippo.io ssh hardware security openssh fido2

Hacking together a USB-C charger for a cheap Chromebook 18 Apr 2020 The era of USB-C has come.... 2020-4-19 03:53:5 | 阅读: 13 | 收藏 | words.filippo.io charger connector barrel 12v cable

Install Go tools from modules with brew-gomod 15 Mar 2020 As of Go 1.14, modules are... 2020-3-16 02:18:54 | 阅读: 15 | 收藏 | words.filippo.io gomod brew pp github cellar

New Crypto in Go 1.14 28 Feb 2020 Go 1.14 is ou... 2020-2-28 07:0:0 | 阅读: 10 | 收藏 | words.filippo.io suites publickey signer sslv3

The Linux CSPRNG Is Now Good! 10 Feb 2020 Oceans of ink... 2020-2-10 07:0:0 | 阅读: 13 | 收藏 | words.filippo.io entropy getrandom csprng chacha20 userspace

Efficient Go APIs with the mid-stack inliner 18 Jul 2019 A common task in Go API des... 2019-7-18 13:4:51 | 阅读: 13 | 收藏 | words.filippo.io x25519 scalar inliner analysis curve25519

Using Ed25519 signing keys for encryption 18 May 2019 @Benjojo12 and I are buildi... 2019-5-19 00:25:20 | 阅读: 18 | 收藏 | words.filippo.io ed25519 x25519 montgomery edwards scalar

A Go implementation of Poly1305 that makes sense 02 Apr 2019 Poly1305 is a Message Authe... 2019-4-3 00:45:7 | 阅读: 10 | 收藏 | words.filippo.io h0 add64 2¹³ poly1305 tagsize

mkcert: valid HTTPS certificates for localhost 07 Jan 2019 (or for any other name)Th... 2019-1-7 10:8:29 | 阅读: 9 | 收藏 | words.filippo.io mkcert acme development staging filippo

Touch-to-operate password-store with YubiKey 4 10 Sep 2018 There are dozens of tutoria... 2018-9-10 12:25:31 | 阅读: 8 | 收藏 | words.filippo.io yubikey pgp ssh bonus gnupg