Status update, November 2021
A developer's monthly update on FOSS projects, including SourceHut's anniversary, a new programming language delay, and progress on various tools.
A developer's monthly update on FOSS projects, including SourceHut's anniversary, a new programming language delay, and progress on various tools.
A developer's monthly update focusing on a private programming language project, seeking experienced contributors for cryptography, date/time, and networking tasks.
Announcing a pure Rust library for Apple code signing, enabling binary and bundle signing on non-Apple hardware.
A tutorial on implementing password-based encryption in Go, covering key derivation and AES-GCM for secure data handling.
The article argues for optimizing code for auditability to make security vulnerabilities easier to spot, using cryptography as a key example.
Guide to finalizing receipt validation in Swift by computing and comparing GUID hash using OpenSSL.
Guide to verifying receipt signatures in Swift using PKCS #7 containers and Apple's root certificate.
Explains why forward secrecy is crucial for modern encryption, contrasting GPG's long-term key model with the Signal Protocol's ephemeral keys.
A reflection on teaching basic cryptography to children, highlighting the importance of usable security through historical ciphers like the rail fence and Caesar cipher.
Discusses the importance of cryptographic safety factors, using SHA1's vulnerabilities and Feynman's Challenger report as analogies.
A proposal for PEP 543, which aims to create a unified TLS API for Python to address issues with the current standard library approach.
A technical guide on using PowerShell to read, analyze, and validate certificates within PFX files, including trust chain inspection.
A software engineer with extensive experience in open source, security, and multiple languages announces they are seeking a new role focused on impactful information security work.
A technical guide on generating write-only Shared Access Signature (SAS) keys for Azure Blob Storage using .NET Core.
A developer explores parallel computing by writing a Go program to brute-force crack the WWII Enigma cipher, inspired by Alan Turing's work.
Analysis of a cryptographic vulnerability in the Beaker Python library's session encryption due to nonce reuse in AES-CTR mode.
Highlights five key projects advancing security: U2F, Let's Encrypt, Rust, X25519/Ed25519, and Chromebooks.
Guide to integrating OpenSSL into iOS apps using CocoaPods for receipt validation and cryptography.
Guide to integrating OpenSSL into iOS Swift projects using CocoaPods for cryptography tasks like receipt validation.
An update on the certifi project's new release, addressing 1024-bit root certificate removal and the plan for a hybrid bundle.