bren2013

5 ms·

1.
by bren2013 6y ago
Are you interested in particular types of scientist? I.e., physicists, chemists, biologists? Computer scientists? :)
2.
Rendering React on the Edge with Flareact and Cloudflare Workers(blog.cloudflare.com)
2 points by bren2013 6y ago|0 comments
3.
by bren2013 8y ago
> I don't know of any issuer key compromises detected with CT. Such compromises are rare. DigiNotar is an obvious example, but can you think of any recent ones? Not key compromise, but general mis-issuance: Facebook detected overrea
4.
by bren2013 8y ago
Is Cirrus mentioned in the blog post? I can't find it. Right now, the way key compromise might be detected in RPKI is that a human network operator notices a signed object which is obviously suspicious and posts it on a mailing list. T
5.
by bren2013 8y ago
IPFS offers content integrity, which you can use to bootstrap confidentiality.
6.
by bren2013 8y ago
Not sure if this fully addresses your use-case, but I like the idea of serving a static bootloader from IPFS. The bootloader would contain all of a website's assets, and code for getting dynamic content from a backend. The backend coul
7.
by bren2013 8y ago
I believe the IPFS team has already built a browser extension that runs a js-ipfs node. Running an IPFS node is not ideal for power and bandwidth constrained devices like a mobile phone. This is where I see gateways fitting in, long-term. N
8.
by bren2013 8y ago
No plans currently. I'm not really familiar with Dat. Can it do something that IPFS can't?
9.
by bren2013 8y ago
Kiwix has an archive of StackOverflow but its gigantic. :( We barely got the Math StackExchange uploaded in time.
10.
by bren2013 8y ago
> And ultimately, how can I know for sure that CloudFlare won't play the game where as acting as a proxy they will modify some of the files served? https://blog.cloudflare.com/e2e-integrity/
11.
It's time to upgrade to TLS 1.3 already, says CDN engineer(pcworld.com)
1 points by bren2013 9y ago|0 comments
12.
Compressing X.509 certificates(grahamedgecombe.com)
1 points by bren2013 9y ago|0 comments
13.
Bn256: Fast cryptographic pairings in Golang(github.com)
3 points by bren2013 10y ago|0 comments
14.
by bren2013 11y ago
There are lots of scenarios where you would want to let an untrusted intermediary handle critical operations for you without actually having to build trust with them. Typical example: Certificate authorities distribute CRLs primarily throu
15.
Cryptographic Data Structures(blog.bren2010.io)
62 points by bren2013 11y ago|2 comments
16.
Secret Splitting with Monotone Span Programs(github.com)
12 points by bren2013 11y ago|0 comments
17.
Elliptic Curve Playground(blog.bren2010.io)
35 points by bren2013 12y ago|0 comments
18.
by bren2013 12y ago
Not for a while. DJB's curves have entirely too much structure and I'd prefer to get something general purpose working first. I don't even like having to implement NIST's speedup for A = -3, and it's fairly trivial
19.
by bren2013 12y ago
I've tested a scalar of about 50% 1s against a scalar with almost no 1s, measuring at the nanosecond resolution, with 100 samples each. The p-value of the 2-sample T-test was greater than 1%--there's no evidence that one takes le
20.
by bren2013 12y ago
Issue #1: Yes, it's supposed to be like that. The point is that any n-bit scalar takes the same amount of time as any other n-bit scalar. Issue #2: Rust has explicitly taken all memory management away from me. There's nothing
21.
by bren2013 12y ago
I missed my edit window... I actually take the above back. Scalar multiplication on a point IS constant-time (the two distributions are indistinguishable). Field exponentiation isn't constant-time and I will work on that.
22.
by bren2013 12y ago
About ElGamal: Agreed. I only planned to implement it for my own satisfaction, more than for anything else. The addition law only leaks general cases--doubling, negatives, one argument is zero. Is that not generally considered okay? Int
23.
Elliptic curve arithmetic and cryptography library in Rust(github.com)
65 points by bren2013 12y ago|14 comments
24.
Google's Macaroons in Five Minutes or Less(bren2010.github.io)
3 points by bren2013 12y ago|0 comments
25.
Small SRP(github.com)
2 points by bren2013 12y ago|0 comments
26.
A Small SRP Protocol for Web Applications(bren2010.github.io)
1 points by bren2013 12y ago|0 comments
27.
Attacking Suggest Boxes in Web Applications Over HTTPS [pdf](eprint.iacr.org)
14 points by bren2013 12y ago|0 comments
28.
by bren2013 12y ago
Uber employees are the kind of people who kept a telescope in their bedroom window to peep on girls down the street. I'll never understand why they're still in business.
29.
by bren2013 12y ago
Generally, when you backdoor hardware, you don't let people know it's backdoor'ed.
30.
NSA Surveillance Debate: Cindy Cohn vs. Ronald Sievert(youtube.com)
1 points by bren2013 12y ago|0 comments

More ›