Hey! I'm David, a security consultant at Cryptography Services, the crypto team of NCC Group . This is my blog about cryptography and security and other related topics that I find interesting.

If you don't know where to start, you might want to check these blogposts:

BEAST: the CBC Attack on TLS
Maybe You Shouldn't Skip SHA-3
How to Backdoor Diffie-Hellman
Let's Encrypt Overview
Fault attacks on RSA signatures
Hash-Based Signatures: a 4-part Series

Here are the latest links posted:

21 Jun Verifiable Delay Functions
21 Jun Why You Must Learn To Love Dnssec
14 Jun Normalized Top-100 Crypto Papers
14 Jun Why The "multiply And Floor" Rng Method Is Biased
14 Jun Sigspoof: Spoofing Signatures In Gnupg, Enigmail, Gpgtools And Python-Gnupg (Cve-2018-12020)

You can also suggest a link.

Markdown

posted December 2013

I've changed the way I handle articles on this blog. I used to type plain html, but I'm now using the markdown syntax with the php parsedown parser.

So if you see any display errors, please tell me.

Well done! You've reached the end of my post. Now you can leave me a comment :)