xorhash

Applied cryptography. Occasional infosec and ancient UNIX facts. DMs always open. Signify pubkey: RWRiJk1/ZiS/OSnKOjZaSAu1ySSQkwy27E2TJB3Ad1Rol5bKxk2GHI3V

[xorhash @xorhash]

@ezekgabrielse @keygen_sh Has this non-RSA cryptography stuff gone anywhere?
I don't seem to see anything in the documentation other than RSA with PKCS#1 v1.5.
(I also noticed you've removed the notice that you're hiring. I hope you found a good employee!)

[xorhash @xorhash]

@keygen_sh Out of curiosity: Is there any particular reason why you use RSA for the offline validation? ECC would give shorter signatures, which given offline contexts would probably be more convenient for manual human input.
(Also why is PKCS#1 v1.5 padding still not dead...)

[xorhash @xorhash]

@oconnor663 As far as I know, BLAKE3 has a trivial native MAC mode though and HopMAC for K12 specified in draft-irtf-cfrg-kangarootwelve-04 needs double invocation of K12. I'm not aware of there being an officially condoned, performant alternative to HopMAC.

[Tanja Lange @hyperelliptic]

I am very sad to learn that Harold (Ed) Edwards has died last Tuesday.
https://t.co/neTrYePHNd
Among other achievements in mathemaics, Ed discovered Edwards cuvers as a new normal form of elliptic curves.
These are _the_ Edwards curves behind Ed2215 & EdDSA.

[xorhash @xorhash]

This is a fascinating read about breaking a tiny embedded device for the hell of it.
https://t.co/iBO1divmnV

[xorhash @xorhash]

@ShinyQuagsire See, you might be targeting PRIMOS (that died in the late 90s), which represents NULL as all-1.
https://t.co/b9v5uhHkty

[xorhash @xorhash]

Anybody have good recommendations for a book on Win32 in the sense of a programmer's manual? May be as old as covering Windows XP SP2.

[xorhash @xorhash]

NIST actually released NIST SP 800-208 "Recommendation for Stateful Hash-Based Signature Schemes".
Right after even the NSA told them that stateful hash-based signatures are a bad idea.
https://t.co/qc8cBkSl40

[Daniel J. Bernstein @hashbreaker]

People who trust optimizing compilers to work correctly seem to be surprised by a 2020 gcc bug report https://t.co/QzvTYMG2M4 where the optimizer treats byte arrays as equal if they pass strcmp. For comparison, here's a gcc bug report I filed last century: https://t.co/o1DaHWYeGR

[Josh Baron @JoshuaWBaron]

Fascinating: NSA made a public comment on QKD, quantum crypto (QC), and post quantum crypto.

Short version: They aren’t fans of QKD or QC, they like lattice-based crypto, they don’t like hash-based signatures.

https://t.co/wTwuCho1k7

[xorhash @xorhash]

You know, I was wondering if the post-quantum cryptography competition didn't drag on too long, but now I'm not sure if it isn't actually too short.

[xorhash @xorhash]

A curiosity I learned about today: X-Face.
The X-Face e-mail header contained a 48x48 black-and-white picture with the idea of showing the author's face.
Anybody aware of this still being used for, well, anything?
https://t.co/PmvgBmOYw8

[Maxim Goryachy @h0t_max]

We've achieved next step - Intel Microcode RC4 key.
We can now decrypt microcode updates!

[xorhash @xorhash]

.@veorq Is the https://t.co/agjVrIwVGM website gone intentionally?

[xorhash @xorhash]

@ezekgabrielse How did you end up implementing it? Standard TOTP?

[Frank @jedisct1]

CVE-2020-16898 | Windows TCP/IP Remote Code Execution Vulnerability
https://t.co/u3iddjemXg

[xorhash @xorhash]

Occasional reminder to make backups.

[Ninji (has moved) @_Ninji]

I have to say, I’m really impressed with how Microsoft has recently embraced open-source technologies like Rust

[xorhash @xorhash]

@dakoraa @veorq So does the list of safe examples. When's the last time the masses have used Poly1305 on its own (outside of a pre-specified AEAD) safely?

[xorhash @xorhash]

May your soul rest in peace, longcat.

[Daniel J. Bernstein @hashbreaker]

New paper "A discretization attack": https://t.co/lpmMYIZO7r Identifies another NSA-exploitable weakness in standardization processes. Includes a detailed case study of how #NISTPQC could hypothetically have been attacked, and evidence suggesting that it was in fact attacked.