Cryptography & Keys

57 posts

Long-form

The Post-Quantum WebPKI50 min readPKI & Certificates Cryptography & Keys
How the Internet will decide which public keys to trust once signatures no longer fit on the wire.
FIPS 140-3 Validation, in Practice10 min readCompliance & Audits Cryptography & Keys
What the US and Canadian standard for validating cryptographic modules actually covers, with data from the validation corpus.

Posts

Why FIPS 140 Means Running Old CodeJuly 13, 20263 min readCompliance & Audits Cryptography & Keys
The Certification Ends Where the Code BeginsJuly 10, 20265 min readCompliance & Audits Cryptography & Keys
Confidential Computing's Inconvenient TruthApril 3, 202623 min readCryptography & Keys Security Practice AI
What Is Confidential Computing, What It Isn't, and How to Think About ItApril 3, 20267 min readCryptography & Keys Security Practice
Why Nobody Can Verify What Booted Your ServerApril 3, 202610 min readCryptography & Keys Security Practice
Signed, Auditable, Offline-Tolerant, PQ Secure QR CodesMarch 14, 20266 min readCryptography & Keys
Attestation, What It Really Proves and Why Everyone Is About to CareDecember 2, 20258 min readCryptography & Keys Security Practice
Beyond the Mathematics, Deploying Advanced Crypto SuccessfullySeptember 19, 202510 min readCryptography & Keys
Crypto agility isn’t a checkbox—it’s an operational mindset.April 18, 20254 min readCryptography & Keys Engineering & Code
How ‘Sneakers’ Predicted Our Quantum Computing FutureApril 17, 202511 min readCryptography & Keys
TPMs, TEEs, and Everything In Between: What You Actually Need to KnowMarch 9, 20252 min readCryptography & Keys Security Practice
Key Management: A Meme RetrospectiveFebruary 5, 20251 min readCryptography & Keys
What Makes a QR Code Verifiable?January 22, 20254 min readCryptography & Keys PKI & Certificates
HSMs Largely Protect Keys from Theft Rather Than AbuseJuly 26, 20246 min readCryptography & Keys Security Practice
Global Consistency for AKD: Using Armored Witness to Prevent Split ViewsJuly 3, 20244 min readCryptography & Keys
Groundhog Day: Learning from Past Key and Credential CompromisesJune 21, 20245 min readCryptography & Keys Security Practice
Credential Management vs. Secret Management: Choosing the Right ApproachJune 18, 20243 min readIdentity & Authentication Cryptography & Keys
Automating Non-Human Identities: The Future of Production Key Management May 22, 20246 min readIdentity & Authentication Cryptography & Keys
Tenement Farming and Cloud HSMsFebruary 24, 20246 min readCryptography & Keys Security Practice
The Rise of Key Transparency and Its Potential Future in Email SecurityDecember 18, 20235 min readCryptography & Keys PKI & Certificates
Words matter in cryptography or at least they used toSeptember 17, 20232 min readCryptography & Keys
The Evolution and Limitations of Hardware Security ModulesApril 22, 20238 min readCryptography & Keys
Key Management and preparing for the Crypto ApocalypseMarch 19, 20232 min readCryptography & Keys PKI & Certificates
Cryptographic controls and feature trade-offsSeptember 13, 20211 min readCryptography & Keys Privacy
Evolution of privacy governance and how cryptographic controls can helpSeptember 7, 20214 min readPrivacy Compliance & Audits Cryptography & Keys
Secure, Privacy Preserving Key Discovery for End-To-End EncryptionMay 14, 20194 min readCryptography & Keys Privacy
How to keep a secret in WindowsMay 4, 20174 min readCryptography & Keys Engineering & Code
Why bother with short-lived certificates and keys in TLS?May 3, 20173 min readPKI & Certificates Cryptography & Keys
The PKCS#12 standard needs another updateDecember 2, 20159 min readPKI & Certificates Cryptography & Keys Standards & Governance
Graphene CLINovember 17, 20151 min readEngineering & Code Cryptography & Keys
Certificate based Encryption in PDFsNovember 10, 20157 min readPKI & Certificates Cryptography & Keys Standards & Governance
ECC, NSA and Crypto AgilityOctober 21, 20152 min readCryptography & Keys Standards & Governance
PKCS #11, Javascript and NodejsOctober 20, 20151 min readEngineering & Code Cryptography & Keys
WebCrypto and the modern web appAugust 10, 20154 min readCryptography & Keys Engineering & Code
A look at short lived certificates, keys and the relevance of FIPS 140-2May 12, 20155 min readPKI & Certificates Cryptography & Keys Compliance & Audits
Key management and key lifetimeMay 12, 20153 min readCryptography & Keys PKI & Certificates
What are some upsides of googles’s SHA1 deprecation plan?August 29, 20142 min readPKI & Certificates Cryptography & Keys
Why might you have a certificate with a SHA1 based signature in its chain that is valid beyond 2016/1/1?August 28, 20143 min readPKI & Certificates Cryptography & Keys
What will Chrome’s SHA1 early warning look like?August 28, 20141 min readPKI & Certificates Cryptography & Keys
Smart cards, PIV, Bitcoin and secp256k1July 30, 20142 min readIdentity & Authentication Bitcoin Cryptography & Keys
Hardware Based Key Management and BitcoinMay 16, 20143 min readBitcoin Cryptography & Keys
If you don’t hold it, you don’t own itMay 15, 20143 min readBitcoin Cryptography & Keys
Verifying a Bitcoin Wallet AddressMay 5, 20144 min readBitcoin Cryptography & Keys
Generating signed messages using CMS and PKI.jsApril 28, 20141 min readPKI & Certificates Engineering & Code Cryptography & Keys
WebCrypto and PKIApril 25, 20143 min readCryptography & Keys PKI & Certificates Engineering & Code
Bitcoin Paper Wallets and Digital BackupsApril 24, 20142 min readBitcoin Cryptography & Keys
Protecting Bitcoin keys with hardwareApril 23, 20144 min readBitcoin Cryptography & Keys
Keeping an eye on your Bitcoin keysApril 23, 20143 min readBitcoin Cryptography & Keys
Deploying forward secrecy on RedHat, Centos or Fedora based systemsJune 30, 20133 min readPKI & Certificates Cryptography & Keys Engineering & Code
How to Build Your Own OpenSSLJune 30, 20131 min readEngineering & Code Cryptography & Keys
Algorithms, key size and digital certificatesSeptember 4, 20124 min readCryptography & Keys PKI & Certificates Standards & Governance
Using ECC keys in X509 certificatesAugust 16, 20122 min readCryptography & Keys PKI & Certificates
Using SHA2 based signatures in X509 certificatesAugust 16, 20122 min readCryptography & Keys PKI & Certificates
Was the Flame WSUS attack caused just because of the use of MD5?June 13, 20122 min readCryptography & Keys Security Practice PKI & Certificates
RSA keys under 1024 bits and youJune 13, 20122 min readCryptography & Keys PKI & Certificates
How to tell if a volume is Bitlocker Protected with TPM and PINNovember 12, 20082 min readCryptography & Keys Security Practice
Understanding Server Gated CryptographyDecember 6, 20067 min readPKI & Certificates Cryptography & Keys