Viewing profile — tabletopneedle

>It is questionable whether it solves its primary use case particularly well. It solves the problem of "how do I flaunt the fact I carry an iPhone to everyone around me" It's a con…

Five years ago, today, the infosec community found itself wondering about Robert Edward Grant's Quasi-primes, and an ever expanding portfolio of grifts by his company, Crown Sterli…

Even if you were using a perfect implementation of RSA-OAEP, it would still be less secure than Diffie-Hellman over Curve25519 (called X25519) or Curve448 (called X448). This is be…

If you're on Python and you for some weird reason absolutely have to use RSA, make sure to use RSA-OAEP and the pyca/cryptography library: https://cryptography.io/en/latest/hazmat/…

Hey, just wanted to chime in Crypto101 was the ~first book I read on crypto and it was really well written. Kudos for your work.

There is no place to use RSA instead of Diffie-Hellman. DH provides forward secrecy, and the ECC variants are much faster and use shorter keys for equivalent security. They are har…

Tl;dr Curve25519 for 128-bit security, to use with 128/256-bit symmetric cipher. X448 for 224-bit security to use with 256-bit symmetric cipher. - For symmetric ciphers choose any …

Yes. However, it never hurts to test your code. Assuming you're a C-programmer, read the libsodium docs first. https://download.libsodium.org/doc/public-key_cryptography/s... If yo…

Every time there's debate over Telegram's encryption the shill argument "it hasn't been broken in the wild now has it" pops up. This is fundamentally flawed thinking. The end-to-en…

This reminds me of the Niemöller's poem. IIRC it went something like First they came for the A2017U1s, or they would have, except he never opposed the wrongdoing.

It's much safer to just send the public key over whatever medium and then use an authenticated channel to verify the authenticity of said public key.

With DH both public keys have effect on the randomness of the shared secret. If the app on the client generates a random DH key-pair for every session, and it uses a public DH valu…

Thank you! So to help everyone (read whole post first), you should probably have the line KexAlgorithms sntrup4591761x25519-sha512@tinyssh.org,curve25519-sha256@libssh.org,diffie-h…

I was able to install the software, but there is no documentation about how to create NTRU+X25519 keys and enable it. I checked manpages, mailing list and tried google. How is this…

For example, cleanroom has classification that implies some amount of dust particles/impurities in the air. The technicians don't talk about the number of dust particles allowed, t…

They're not. The message they convey is "we do what we please because even if we lose a case every now and then, we still win more in the long run. We own this business". Until the…

You can't possibly say one needs to compromise MIT's entire infrastructure when all it needs is MITM attacks against the browsing session. That doesn't require compromising either …

Until Tox defaults it's communication through Tor, it doesn't offer any notable differences. Sure, there is no central server, but intelligence agencies can see who you talk to wit…

People still need to communicate with their peers in insecure networks. Now you need to compare the nitty gritty details and choose the most secure one for your needs. If you need …

Remember that OTR, Cryptocat and PGP were secure enough when Snowden was agreeing about handing data to Greenwald and Poitras. So while Signal isn't secure if you're NSA's target, …

It's also the case you can't use Telegram's end-to-end encryption on desktop clients at all.

"Google Play Services lets Google do silent background updates on apps on your phone and give them any permission they want. Having Google Play Services on your phone means your ph…