Viewing profile — sevenoftwelve

Hi there, I am Karolin Varner, the person who designed the Rosenpass Protocol, which secures WireGuard against quantum attacks, and I am the managing director of Rosenpass e. V. I …

Why do the different sha2 variants not share code? This seems like a lot of opportunities for small mistakes/discrepancies; especially considering the many architectures. Was any o…

Hi @LoadingAlias, > Constant-time MAC, AEAD, and signature verification. That sounds suspiciously incomplete to me. Which cryptographic algorithms in the library are currently not …

Look, you can't write stuff like that any more. It took me three minutes to figure out you where joking.

Cryptographer and IACR member with a tiny bit of inside knowledge here. To me, the entire matter is mostly amusing; the negative impact on IACR is pretty low. I now have to spend 1…

I don't think so. Using hash functions requires a minimum amount of entropy in the seed. So do the schemes put forward in the article. In particular, these schemes require a relati…

The article is interesting, but it misses the most practical and unambiguously safe way to generate streams of random data: Use cryptography. To generate a stream of random data, u…

I am researching formal methods systems to conduct cryptographic proofs; I think a big issue in that space is having syntax sugar in the core compiler, so I am pursuing ways to mov…

I am the Rosenpass author; Rosenpass is an add-on to make WireGuard even more secure. There are certain types of attacks (i.e. those from quantum computers) that could become possi…

Rosenpass author here; Mate, you could just read the code…or give it a try ;) > the WG author seems like he doesn't care about PQC This is plainly not true; WG supports post-quantu…

We are based on the work of Hülsing, Ning, Zimmermann, Weber and Schwabe and in contact with the group. I havn't heard about kuedlki; the slides seem to refer to a reimplementation…

Rosenpass author here; nope, that is not correct. NIST has elected Kyber as one of the algorithms to standardize and we are using that. As other commenters mentioned (very good inf…

Rosenpass author here; There is a confusion about terminology here I think. Mathematical proofs including cryptography proofs use models simplifying reality; i.e. the real practica…

Granted, writing things in Rust doesn't exclude the possibility of a buffer overflow entirely. It does help make it much less likely.

Author here; We are :) Rosenpass is a fancy way of generating a PSK for WireGuard.

Rosenpass author here. It does yes. But it is a mitigation, not a real fix. An attacker could still just speed up time. Although not being able to produce a KillPacket for the year…

Rosenpass author here; I myself am independent, thus funding by NLNet. We have some project participants who are Freelancers; two of my co-authors are employed at research institut…

Author of Rosenpass here; Coq is fairly generic; it has a long history and made it possible to write some really cool proofs such as a proof of the four colors theorem, but writing…

Author here: No, symbolic verification does not protect from buffer overflows. Writing the implementation in Rust does We are investigating ways how to do more formal verification …

Direct link to the project: https://github.com/adobe/ferrum