Hey! I'm David, a security consultant at Cryptography Services, the crypto team of NCC Group . This is my blog about cryptography and security and other related topics that I find interesting.

If you don't know where to start, you might want to check these blogposts:

Here are the latest links posted:

21 Jun Verifiable Delay Functions
21 Jun Why You Must Learn To Love Dnssec
14 Jun Normalized Top-100 Crypto Papers
14 Jun Why The "multiply And Floor" Rng Method Is Biased
14 Jun Sigspoof: Spoofing Signatures In Gnupg, Enigmail, Gpgtools And Python-Gnupg (Cve-2018-12020)

You can also suggest a link.

Have you been pwned?

posted December 2013

HaveIbeenPwned.com is a new website allowing you to check if your mail + password has been leak by some of those famous data breach. It's pretty bad, mine is compromised. Fortunately I use different passwords for different kind of websites. I use a garbage password for websites I don't trust, I use an easy and quick password to type for websites I don't care about, I use complicated password for more important things like my server, my steam account, my gmail account, my facebook account etc... and I regularly change them.

Well done! You've reached the end of my post. Now you can leave me a comment :)