Experimental News Clipping Site

Tag: cryptographic implementations

  • Hacker News: Constant-Time Code: The Pessimist Case [pdf]

    —

    by

    Kurt Seifried
    in

    Source URL: https://eprint.iacr.org/2025/435.pdf Source: Hacker News Title: Constant-Time Code: The Pessimist Case [pdf] Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the challenges and pessimistic outlook surrounding the implementation of constant-time coding in cryptographic software, especially in the light of modern compiler optimization techniques and the increasing complexity of CPU architectures.…

  • Hacker News: Constant-time coding will soon become infeasible

    —

    by

    Kurt Seifried
    in

    Source URL: https://eprint.iacr.org/2025/435 Source: Hacker News Title: Constant-time coding will soon become infeasible Feedly Summary: Comments AI Summary and Description: Yes Summary: This paper discusses the challenges and shortcomings associated with writing secure cryptographic software that is free from timing-based side-channels. It presents a pessimistic view on the feasibility of constant-time coding, suggesting that failures…

  • Hacker News: How (not) to sign a JSON object (2019)

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.latacora.com/blog/2019/07/24/how-not-to/ Source: Hacker News Title: How (not) to sign a JSON object (2019) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed examination of authentication methods, focusing on signing JSON objects and the complexities of canonicalization. It discusses both symmetric and asymmetric cryptographic methods, particularly emphasizing the strengths…

  • Hacker News: Botan: Crypto and TLS for Modern C++

    —

    by

    system automation
    in

    Source URL: https://github.com/randombit/botan Source: Hacker News Title: Botan: Crypto and TLS for Modern C++ Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The provided text details the Botan C++ cryptography library, emphasizing its capabilities in cryptographic protocols like TLS and various security features relevant to modern applications. This information is particularly significant for security…

  • Hacker News: A simple to use Java 8 JWT Library

    —

    by

    system automation
    in

    Source URL: https://github.com/FusionAuth/fusionauth-jwt Source: Hacker News Title: A simple to use Java 8 JWT Library Feedly Summary: Comments AI Summary and Description: Yes Summary: The provided text offers a comprehensive overview of the FusionAuth JWT library, emphasizing its security features, encryption capabilities, and functionalities for JSON Web Token (JWT) signing and verification. It is particularly…

  • Hacker News: Almost Secure (2011)

    —

    by

    system automation
    in

    Source URL: https://debugmo.de/2011/11/almost-secure/ Source: Hacker News Title: Almost Secure (2011) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text outlines seven classic security vulnerabilities that can affect embedded systems and devices, explaining how each can be exploited. It provides important insights for security professionals, especially those focusing on hardware and software security, by…

  • The Register: WeChat devs introduced security flaws when they modded TLS, say researchers

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/10/17/wechat_devs_modded_tls_introducing/ Source: The Register Title: WeChat devs introduced security flaws when they modded TLS, say researchers Feedly Summary: No attacks possible, but enough issues to cause concern Messaging giant WeChat uses a network protocol that the app’s developers modified – and by doing so introduced security weaknesses, researchers claim.… AI Summary and Description: Yes…