honzaik

4 ms·

1.
by honzaik 3mo ago
look at essentially any proceedings of any conference (in crypto we dont really do journals). see EUROCRYPT for example https://link.springer.com/book/10.1007/978-3-031-91098-2 in there, every paper will be cut do
2.
by honzaik 3mo ago
cryptography, for example, which is essentially math + cs together
3.
by honzaik 4mo ago
Location: Prague, Czechia (CET) Remote: Yes Willing to relocate: Open Technologies: cryptography (post-quantum, provable security, applied cryptography, security protocols, elliptic curves), PKI, Rust, Java, PHP, Python, Sage, C++, SQL, SAM
4.
by honzaik 4mo ago
this is like arguing that laws are useless because theyre not bulletproof. please stop with this pseudological thinking
5.
by honzaik 4mo ago
maybe they were using quantum computers the whole time https://eprint.iacr.org/2022/1178 /s
6.
by honzaik 4mo ago
I can't wait to give Google more data about my browsing habits! Seriously, this is insane and everyone who supports this lost the plot.
7.
by honzaik 5mo ago
although emdashes are not common on the internet, there are prevalent in books.
8.
by honzaik 5mo ago
I was just wondering about that. Did they embrace it as a “signature look”? it cant be accidental, right?
9.
by honzaik 5mo ago
last week's "truth" ( https://truthsocial.com/@realDonaldTrump/posts/1164091464198... ) "I am willing to risk the giving up of my Rights and Privileges as a Citizen for our Great Military and Co
10.
by honzaik 6mo ago
I am aware that google will take looong time to act. that is why I mentioned that it is LinkedIn (Microsoft) or its contracted fingerprinting/"monitoring" partner who may have more direct ways to report this if they actually
11.
by honzaik 6mo ago
well if they have evidence why they dont report it? why are these extensions on the store? im sure linkedin has enough motion to report it directly to google also, having a PQC enabled extension doesnt seem like a good "large user base
12.
by honzaik 6mo ago
it apparently scans for something like "PQC Checker", an extension for checking if TLS connection is PQC-enabled? how is that a spam extension (and thats just a random one i saw)
13.
by honzaik 6mo ago
1) yes, everything is affected, but everything else is being migrated to PQC as we speak 2) "256-bit encryption" has different meanings in different contexts. "256-bit security" generally refers to cryptosystem for which
14.
by honzaik 7mo ago
the NYT is reporting this was the US https://www.nytimes.com/2026/03/05/world/middleeast/iran-sch... i recommend employing more critical thinking in the future and less propaganda spreading
15.
by honzaik 10mo ago
this comment feels so eerie as I am currently reading Zuboff's "The Age of Surveillance Capitalism," which itself is interesting to read now since its written before the huge AI leap. Also, it reminded me of the following quo
16.
by honzaik 1y ago
this may give you an idea about his current outlook https://www.youtube.com/watch?v=DQFyQgA_GE4
17.
by honzaik 2y ago
afaik the "right kind of code" does a lot of heavy lifting for practical implementations, such as Classical McEliece. correct me if I am wrong as I havent spent much time looking into it, but the security analysis essentially says
18.
by honzaik 2y ago
OK, hoarding discovered zero-days might not be the best strategy, BUT if we actually create a backdoor and don't tell anyone about it, then this should be safer right? right? /s https://www.wired.com/2015/12&#
19.
by honzaik 2y ago
i am no C programmer, but doesnt the first pseudocode make no sense (and others after since they reuse it)? address = X length = *X address = address + 1 while length > 0 { address = address + 1 print *address } 1)
20.
by honzaik 2y ago
well, it depends on the size of the quantum computer. of course you can make large enough RSA keys (depends whats your security margin/assumptions) but the problem is that the size/computational increase is exponential whereas the
21.
by honzaik 2y ago
it might be this https://facthacks.cr.yp.to/fermat.html if N=p*q and p-q < sqrt(p) then its easy to factor
22.
by honzaik 2y ago
It may be a combination of making the battery overheat which would trigger the planted explosives from a supply chain attack. Of course, I am no hardware engineer/bomb expert to know if that is possible.
23.
by honzaik 2y ago
time to issue 50€ gift cards!
24.
by honzaik 2y ago
Well that depends on the binding right? In case you use the "artifact binding" then theres also direct communication between SP and IdP. I havent seen it in the wild and I am also no professional, but I saw it in the 2.0 standard,
25.
by honzaik 2y ago
I watched the TC interview with Durov (Telegram) and apart from it being a big Telegram ad what struck me is that he told a story about his employee being approached by "an intelligence agency" and asked to reveal information abou
26.
by honzaik 2y ago
These solutions are not perfect and typically stop working after a certain time because they patch it/unintentionally break it. The only reliable solution I found is to VPN to some non-western country where they typically don't ha
27.
by honzaik 2y ago
I mean it highly depends on the CPU so I only posted it to show the relative slowdown compared to ECDSA. I ran this on my free tier Google Cloud server so it is not some super CPU. However yes, even on this, not so powerful CPU, it doesnt t
28.
by honzaik 2y ago
Another interesting thing regarding the ECC is they use Ed448, compared to something conventional like ECDSA with P-256 or Ed25519, which is way slower (30x-ish slower verification): (OpenSSL benchmark numbers)
29.
by honzaik 2y ago
I am confused. What does happen after clicking allow? Does Apple just provide a password reset form to the person on the iForgot website or does it show up only on the device?
30.
by honzaik 3y ago
This (and Signal's solution as well) does not protect against active MITM attackers with quantum computers . They would need to incorporate post-quantum signatures into it as well. The reason why it is missing (but seemingly planned i

More ›