Visual Cryptography
Ever heard of visual cryptography ? It’s a simple method of cryptography that doesn’t involve computing.
There’s a nice blog post about it here
cryptography, security, and random thoughts
Hey! I'm David, cofounder of zkSecurity, research advisor at Archetype, and author of the Real-World Cryptography book. I was previously a cryptography architect of Mina at O(1) Labs, the security lead for Libra/Diem at Facebook, and a security engineer at the Cryptography Services of NCC Group. Welcome to my blog about cryptography, security, and other related topics.
Ever heard of visual cryptography ? It’s a simple method of cryptography that doesn’t involve computing.
There’s a nice blog post about it here
Bullrun or BULLRUN is a clandestine, highly classified decryption program run by the United States National Security Agency (NSA). The British signals intelligence agency Government Communications Headquarters (GCHQ) has a similar program codenamed Edgehill. According to the NSA's BULLRUN Classification Guide, which was published by The Guardian, BULLRUN is not a Sensitive Compartmented Information (SCI) control system or compartment, but the codeword has to be shown in the classification line, after all other classification and dissemination markings. Information about the program's existence was leaked in 2013 by Edward Snowden.
from wikipedia.
My Programmmation class first part is about coding a sudoku solver. We have to do everything in english, we have to commit with svn, we have to write a final report with LaTeX.
Every week we’re given some vague guidelines and we have to dive deep into C to first, understand what we have to do, and secondly, find solutions in a language we’ve never really played with before. We have to turn in what we did every week, if our code doesn’t compile it’s a zero, if it does compile it goes through a multitude of tests that quickly decrease your grade (out of 20). Let’s just say I spent many nights and early mornings coding and I started the first week with a 2/20.
It felt like a crash course, it felt unfair at times, but holy cow did I learn some C in a really short amount of time. Props to my professor for that, and I wish I had more courses like that. I might not get the best grade out of this course but I sure learn the most things there.
I’ve also committed everything I’ve done on a public git repo so everyone can see how it looks like here :
https://github.com/mimoo/sudoku
You can compile with make, learn how to use with ./sudoku -h
It can read sudokus of different sizes from 1x1 to 64x64 as long as it is presented like this :
#this is a comment
5 3 _ _ 7 _ _ _ _
6 _ _ 1 9 5 _ _ _
_ 9 8 _ _ _ _ 6 _
8 _ _ _ 6 _ _ _ 3
4 _ _ 8 _ 3 _ _ 1
7 _ _ _ 2 _ _ _ 6
_ 6 _ _ _ _ 2 8 _
_ _ _ 4 1 9 _ _ 5
_ _ _ _ 8 _ _ 7 9
It’s time for a new list of random things I noticed about Bordeaux :
This is pretty huge since it is the most trusted and the most used way to counter spams. More info here.
So, I’ve been living here for a month and here is my list of what it is to live in Bordeaux.
SecureDrop is an open-source whistleblower support system, originally written by Aaron Swartz and now run by the Freedom of the Press Foundation. The first instance of this system was named StrongBox and is being run by the New Yorker. To further add to the naming confusion, Aaron Swartz called the system DeadDrop when he wrote the code.
You can find the website here and if you have something important to submit and do not want to go through Wikileaks, I think this is the best alternative.
The security audit was done by Schneier himself, who is pretty popular in the cryptography community, the work was started by Aaron Swartz who is also extremly popular, especially since his suicide last year.
I just learned that TrueCrypt, the multi-OS solution to encrypt your personal data in a “very easy way” is coded and maintained by … no one knows. Like bitcoin, the main creators are anonymous. The source code is available here but no info about the coders can be found.
It seems like folks are getting a bit worried as TrueCrypt is wildly used, and money is being raised to conduct a security audit on them. More info here.
Now I’m wondering, why is it that those huge cryptographic applications, that are polished and well maintained, are created by anonymous persons? Do they fear they would get pressure from governments? Mafia? Who knows…
It’s official, Baidu, the chinese google, now accepts bitcoins.
"As a cutting-edge IT guy and a professional webmaster, what else can showcase our difference? The answer is that we have Bitcoin! Bitcoin, as a new electronic and digital currency, is being accepted internationally. It's also used in daily lives. You can use Bitcoin buy a cup of coffee, or easily convert it to cash. But in China, Bitcoin is still a fairly new thing. Today, we have a good news: from today, we are starting to officially accept Bitcoin as a payment method. You can use Bitcoin to buy all Baidu Jiasule services. Baidu Jiasule as an innovator in the Internet industry, is now the first cloud service provider to accept Bitcoin and give everyone a better payment method and experience."
Read more on the bitcointalk about it.
The bitcoin who has been remarkably stable these past weeks, even after the silk road shutdown, has increased a bit more since the announcement.
a great video I bookmarked about ECC.