Quantum is unimportant to post-quantum

AES-Gem (AES with Galois Extended Mode)

EuroLLVM 2024 trip report

The good, the bad, and the weird (2018)

Themes from Real World Crypto 2024

The life and times of an Abstract Syntax Tree

The life of an optimization barrier

A peek into build provenance for Homebrew

Introducing Ruzzy, a coverage-guided Ruby fuzzer

Read code like a pro with our weAudit VSCode extension

Why fuzzing over formal verification?

How we applied fuzzing techniques to cURL

Cloud cryptography demystified: Amazon Web Services

Security flaws in an SSO plugin for Caddy (2023)

appsec.guide just got a new chapter on fuzzing

We build X.509 chains so you don't have to

LeftoverLocals: Listening to LLM responses through leaked GPU local memory

Enhancing trust for SGX enclaves

Differ: Tool for testing and validating transformed programs

Adding Build Provenance to Homebrew

Security flaws in an SSO plugin for Caddy

Holy Macroni! A recipe for progressive language enhancement

Pitfalls of relying on eBPF for security monitoring (and some solutions)

Announcing the Trail of Bits Testing Handbook

The future of Clang-based tooling

Finding bugs in C code with Multi-Level IR and VAST

Trusted publishing: a new benchmark for packaging security

Real World Crypto 2023 Recap

Improving messages and types in GDB’s Python API

Escaping misconfigured VSCode extensions

More →