Hey! I'm David, a security engineer at the Blockchain team of Facebook, previously a security consultant for the Cryptography Services of NCC Group. This is my blog about cryptography and security and other related topics that I find interesting.

If you don't know where to start, you might want to check these popular articles:

05476 The 9 Lives of Bleichenbacher's CAT: New Cache ATtacks on TLS Implementations
30567 Attacks on Ethereum Smart Contracts
03772 Database Encryption
15675 Fault attacks on RSA's signatures
07567 How to Backdoor Diffie-Hellman: quick explanation
10424 Key Compromise Impersonation attacks (KCI)
36879 Maybe you shouldn't skip SHA-3

Here are the latest links posted:

17 Jul What’S The Matter With Pgp? (2014)
17 Jul Gpg And Me (2015)
17 Jul The Pgp Problem
16 Jul New Face Of The Bank Of England's £50 Note Is Revealed As Alan Turing
15 Jul Algorithmic Aspects Of Elliptic Bases In Finite Field Discrete Logarithm Algorithms

You can also suggest a link.

Have you been pwned? posted December 2013

HaveIbeenPwned.com is a new website allowing you to check if your mail + password has been leak by some of those famous data breach. It's pretty bad, mine is compromised. Fortunately I use different passwords for different kind of websites. I use a garbage password for websites I don't trust, I use an easy and quick password to type for websites I don't care about, I use complicated password for more important things like my server, my steam account, my gmail account, my facebook account etc... and I regularly change them.

Well done! You've reached the end of my post. Now you can leave me a comment :)