Hey! I'm David, a security engineer at the Blockchain team of Facebook, previously a security consultant for the Cryptography Services of NCC Group. This is my blog about cryptography and security and other related topics that I find interesting.

If you don't know where to start, you might want to check these popular articles:

03146 Problems that UDP and only UDP has
08291 How did length extension attacks made it into SHA-2?
12562 Common x509 certificate validation/creation pitfalls
05285 Speed and Cryptography
03302 Database Encryption
24940 What are x509 certificates? RFC? ASN.1? DER?
28506 QUIC Crypto and simple state machines

Here are the latest links posted:

17 Jun League Of Entropy
16 Jun Rambleed - Reading Bits In Memory Without Accessing Them
16 Jun Yubico Security Advisory 2019-06-13 – Reduced Initial Randomness On Fips Keys
10 Jun Darpa On Zero Knowledge Proofs
09 Jun Future-Proof Tls Configuration Using The Updated Tls Guidelines From Ncsc

You can also suggest a link.

Defcon CTF 2009 write up comic posted November 2014

sapheads

The Sapheads team draw a comic as a write up for the finale of the Defcon CTF in 2009. Since it's a classic here it is

Well done! You've reached the end of my post. Now you can leave me a comment :)