GnuTLS patches memory mismanagement bug – update now!
August 1 2022GnuTLS may well be the most widespread cryptographic toolkit you've never heard of. Learn more...
Read moreGnuTLS patches memory mismanagement bug – update now!
August 1 2022GnuTLS may well be the most widespread cryptographic toolkit you've never heard of. Learn more...
Read moreLatest episode - listen now! Great discussion, technical content, solid advice... all covered in plain English.
Read more"As bad as Heartbleed"? We heard that concern a week ago, but we think it's less ungood than that...
Read moreLatest episode - listen and read now! Use our advice to advise your own friends and family... let's all do our bit to stand up to scammers!
Read moreOpenSSL issues a bugfix for the previous bugfix
June 24 2022Fortunately, it's not a major bugfix, which means it's easy to patch and can teach us all some useful lessons.
Read moreOn the Subversion of NIST by the NSA
June 23 2022Nadiya Kostyuk and Susan Landau wrote an interesting paper: “Dueling Over DUAL_EC_DRBG: The Consequences of Corrupting a Cryptographic Standardization Process“:
Abstract: In recent decades, the U.S. National Institute of...
Read more
Two bills attempting to reduce the power of Internet monopolies are currently being debated in Congress: S. 2992, the American Innovation and Choice Online Act; and S. 2710,...
Read moreHertzbleed: A New Side-Channel Attack
June 20 2022Hertzbleed is a new side-channel attack that works against a variety of microprocressors. Deducing cryptographic keys by analyzing power consumption has long been an attack, but it’s not generally...
Read more
Recent Comments