Hey! I'm David, a security engineer at the Blockchain team of Facebook, previously a security consultant for the Cryptography Services of NCC Group. This is my blog about cryptography and security and other related topics that I find interesting.

If you don't know where to start, you might want to check these popular articles:

07058 How to Backdoor Diffie-Hellman: quick explanation
01397 Bits and Bytes ordering in 5 minutes
09750 Key Compromise Impersonation attacks (KCI)
07858 How did length extension attacks made it into SHA-2?
11755 Common x509 certificate validation/creation pitfalls
21990 Developers Are Not Idiots
10273 KangarooTwelve

Here are the latest links posted:

18 May Degenerate Fault Attacks On Elliptic Curve Parameters In Openssl
16 May Bitcoin Obituaries
16 May Ridl And Fallout: Mds Attacks
16 May Zombieload Attack
16 May In Pursuit Of Clarity In Obfuscation

You can also suggest a link.

Have you been pwned? posted December 2013

HaveIbeenPwned.com is a new website allowing you to check if your mail + password has been leak by some of those famous data breach. It's pretty bad, mine is compromised. Fortunately I use different passwords for different kind of websites. I use a garbage password for websites I don't trust, I use an easy and quick password to type for websites I don't care about, I use complicated password for more important things like my server, my steam account, my gmail account, my facebook account etc... and I regularly change them.

Well done! You've reached the end of my post. Now you can leave me a comment :)