Stories by kkl

Go's filepath.Clean does not prevent path traversal

String comparison timing attacks in Go

Confessions to a Data Lake

Control planes are a useful concept

Authenticated Dictionaries with Skip Lists and Commutative Hashing

RSA-Based Key Encapsulation Mechanisms

Building lattice reduction (LLL) intuition

The Goldreich–Goldwasser–Halevi (GGH) Cryptosystem

Some challenges in post-quantum standardization

Why PKCS#1v1.5 Signature Should (Also) Be Put Out of Our Misery

Executing non-alphanumeric JavaScript without parentheses

Encrypted Email Obstacles and Experiments

Web Storage: the lesser evil for session tokens

Security challenges for the Qubes build process

BLESS: SSH Certificate Authority for Ephemeral SSH Sessions

Signal Protocol and Deniable Authentication

A Systematic Analysis of the Juniper Dual EC Incident

Scalable vendor security reviews

Go Proverbs Illustrated

PQCHacks: A gentle introduction to post-quantum cryptography