Speaker Announcement! 🚨
Dive into Graviola. Learn how it boosts security and performance with verified assembly—and more cryptography innovations in Rust.
Joseph Birr-Pixton (@jpixton) presents "Graviola: Fast, High-Assurance Cryptography for Rust" at #rustnationuk25!
Get your ticket: https://t.co/toAGPOwM2V
@amvandyk the goal is to force friction for use cases that are a bad idea. the opposite of that looks like QT's `ignoreSslErrors` API which was just involved in CVE-2024-51774.
Cryptography & Security Newsletter: pyrtls is a new project that provides Python bindings for rustls, a modern, Rust-based TLS implementation. https://t.co/XhN9aLsOqJ
rustls outperforms OpenSSL and BoringSSL.
Security and performance: pick two!
Both handshake latency and throughput were better in the latest version of rustls compared to latest OpenSSL/BoringSSL. See blog post for more details, below.
After almost 6 years, I revived my blog to publish an overview of all the open source stuff I worked on last month. Updates from rustls, Hickory DNS, rustup, pyrtls, KumoMTA, Quinn, Askama, tokio, and instant-acme.
@veorq honestly? still catching up with widely-deployed things for TLS at this point: next up is QUIC header protection, then HPKE for ECH, then ML-KEM
pyrtls is a new set of Python bindings for rustls, providing a secure, modern alternative to the ssl module. I wanted to allow more people to benefit from the work we've done to build a better alternative to OpenSSL-backed TLS, and figured Python users might be interested.