jameswryan

6 ms·

1.
by jameswryan 2y ago
Rainbow is not a KEM, but a signature scheme.
2.
by jameswryan 2y ago
> ... destroying Internet security seems like a dubious reason to build a new machine. I can't agree with this; Destroying internet security is an excellent reason to build a new machine.
3.
by jameswryan 3y ago
/dev/random does not block when 'out of entropy'. 'Running out of entropy' isn't something that can happen, and /dev/random will only block if the RNG hasn't been initialized (short enough a
4.
by jameswryan 3y ago
The Discrete Log Problem is relatively simple to explain in the context of a generic group. It's sort of intuitive that elliptic curve groups are a pretty good instance of a generic group. So I don't think it is simpler to explain
5.
by jameswryan 3y ago
That isn't sufficient to protect you on a charger you don't control: https://www.usenix.org/conference/usenixsecurity21/presentat...
6.
by jameswryan 3y ago
For the cryptography & theory? https://toc.cryptobook.us/ For the design and internals of hash functions? The finalists for the SHA3 competition have extensive design documentation. There's an archive at https:&#x
7.
by jameswryan 4y ago
> And C++ just... doesn't have that many real problems. 70% of security bugs are memory safety issues. That's a lot of real problems. > It has a lot of irks, but the problems people run into are problems that others already
8.
by jameswryan 4y ago
Joan Daemen even lost twice in one competition! Subterranean 2.0, another Duplex, didn't make it past round 2.
9.
by jameswryan 4y ago
There is as of Git 2.34 [0][1]. [0] https://github.blog/2021-11-15-highlights-from-git-2-34/#tid... [1] https://git-scm.com/docs/git-config#Documentation/git-config...