Stan Drapkin

[Stan Drapkin @sdrapkin]

CryptoRandom - .NET Random done right.
Modern, fast, safe, cryptographically strong .NET replacement for Random & RandomNumberGenerator.
https://t.co/sDCcDKq5es

[Stan Drapkin @sdrapkin]

Azure client-side encryption SDK vulnerability: https://t.co/z4TIJB5gsQ

In 2016 I complained about it on Azure team's Github: https://t.co/BKoZXRUycu

So Microsoft took ~6 years to acknowledge the problem.

[Stan Drapkin @sdrapkin]

AesGcmStrict - wraps AesGcm and enforces Tag to be exactly 16 bytes. AesGcm allows truncated tags to decrypt. (WTF Microsoft?)
https://t.co/daqV0g0vb1

[Stan Drapkin @sdrapkin]

FastGuid - fast replacement for Guid.NewGuid().
https://t.co/VotezO9eM0

[Stan Drapkin @sdrapkin]

TinyORM is the fastest .NET micro-orm. For now. If you prefer a micro-orm over full because "speed", and you're not using TinyORM -- you're doing it wrong.

Benchmarks:
https://t.co/6DCrOjExLb

https://t.co/iUEOAxUHMz

P.S. latest code is not yet on Github - will be pushed soon.

[Stan Drapkin @sdrapkin]

Is "OrSub" better than "OrXor"? 🤔
https://t.co/7czUALLMjI

[Stan Drapkin @sdrapkin]

@voropaevviktor Hi Viktor, thanks for coming to my talk.
https://t.co/11ndt3bpwz
The conference organizers will make the slides available soon.

[Stan Drapkin @sdrapkin]

@hospifyapp I'm waiting for next NetStandard (2.1 ?) to add ECDiffieHellman. https://t.co/QwfiIMErl1

[Stan Drapkin @sdrapkin]

My "Application Security in .NET Succinctly" ebook is published (free). https://t.co/Mt5uhJGrOF

[Stan Drapkin @sdrapkin]

https://t.co/UUsbaaTG2u encryption is badly designed: https://t.co/dx8wfVPSCW

[Stan Drapkin @sdrapkin]

https://t.co/mBLU3BI3zo

[Stan Drapkin @sdrapkin]

New micro-ORM for .NET: TinyORM
https://t.co/iUEOAxD6V1

[Stan Drapkin @sdrapkin]

@marcin_hoppe @chrismckee I've been told "March 6".

[Stan Drapkin @sdrapkin]

@marcin_hoppe @chrismckee I'm inquiring with the publisher..

[Stan Drapkin @sdrapkin]

Client-side encryption in Azure Storage: https://t.co/BKoZXSc942

[Stan Drapkin @sdrapkin]

@chrismckee Updated book has been written in April'2016, and will be published in Feb'2017 (as I've been told). I don't control the date.

[Stan Drapkin @sdrapkin]

Inferno crypto library has been professionally audited! The audit report is published.
https://t.co/BcSiwO7Eqz

[Stan Drapkin @sdrapkin]

Still trusting AES-GCM implementations? https://t.co/d4HYmSawF4 If only there was a smarter approach.. wait, there is.

[Stan Drapkin @sdrapkin]

@ridercz How can the documentation be improved? You can email me.

[Stan Drapkin @sdrapkin]

@ridercz Thanks for raising awareness of https://t.co/BcSiwO7Eqz with "Praktická kryptografie pro programátory v .NET" and "WTF E2E" talks.