KEMs and Post-Quantum Age

rustgo: calling Rust from Go with near-zero overhead (2017)

How to Pay Professional Maintainers

Reproducing Go binaries byte-by-byte

The Most Backdoor-Looking Bug I’ve Ever Seen

Professional maintainers: a wake-up call

Restic Cryptography (2017)

Hacking together a USB-C charger for a cheap Chromebook

Rustgo: Calling Rust from Go with near-zero overhead

Understanding Metrics in the Age of the TSDB (2016)

Using Ed25519 signing keys for encryption

A Go implementation of Poly1305 that makes sense

mkcert: valid HTTPS certificates for localhost

Restic Cryptography

Live streaming Cryptopals

The scrypt parameters

TLS 1.2 Session Tickets

A secure captive portal browser with automatic DNS detection

Playing with kernel TLS in Linux 4.13 and Go

rustgo: calling Rust from Go with near-zero overhead

Restic Cryptography

The “Behind the Sofa” Certificate Transparency Log

Reproducing Go binaries byte by byte

Setting a custom FileVault (macOS FDE) passphrase

Finding Ticketbleed

I'm giving up on PGP

Scroll with your mouse on a remote mosh tmux session

An overview of TLS 1.3

So I lost my OpenBSD FDE password

Securing a travel iPhone

More →