progscrape: blog.trailofbits.com

Constant-time support coming to LLVM: Protecting cryptographic code

19 days ago blog.trailofbits.com compiler llvm rust

LLVM Adds Constant-Time Support for Protecting Cryptographic Code

18 days ago blog.trailofbits.com compiler cryptography llvm

We found cryptography bugs in the elliptic library using Wycheproof

23 days ago blog.trailofbits.com cryptography javascript

Supply chain attacks are exploiting our assumptions

37 days ago blog.trailofbits.com

How we avoided side-channels in our new post-quantum Go cryptography libraries

29 days ago blog.trailofbits.com cryptography go security

The cryptography behind electronic passports

44 days ago blog.trailofbits.com

Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more

3 months ago blog.trailofbits.com security signal

Weaponizing image scaling against production AI systems

3 months ago blog.trailofbits.com ai

Marshal madness: A brief history of Ruby deserialization exploits

3 months ago blog.trailofbits.com ruby security

Buttercup is now open-source

4 months ago blog.trailofbits.com

Exploiting zero days in abandoned hardware

4 months ago blog.trailofbits.com

Unexpected security footguns in Go's parsers

5 months ago blog.trailofbits.com go parser security

The cryptography behind passkeys

7 months ago blog.trailofbits.com cryptography

Making PyPI's test suite 81% faster

7 months ago blog.trailofbits.com performance python testing

A New ASN.1 API for Python

7 months ago blog.trailofbits.com api python security

The $1.5B Bybit Hack

9 months ago blog.trailofbits.com security

Don't Recurse on Untrusted Input

9 months ago blog.trailofbits.com

Best practices for key derivation

10 months ago blog.trailofbits.com cryptography

Attestations: A new generation of signatures on PyPI

13 months ago blog.trailofbits.com cryptography python security

A deep dive into Linux's new mseal syscall

13 months ago blog.trailofbits.com linux security

Fuzzing between the lines in popular barcode software

13 months ago blog.trailofbits.com security

Microsoft didn't sandbox Windows Defender, so I did (2017)

14 months ago blog.trailofbits.com microsoft windows

Friends don’t let friends reuse nonces

15 months ago blog.trailofbits.com cryptography security

"Unstripping" binaries: Restoring debugging information in GDB with Pwndbg

15 months ago blog.trailofbits.com debugging reversing

Why You Should Stop Using RSA: A Deep Dive Into Its Security Pitfalls

14 months ago blog.trailofbits.com rsa

Notes on AWS Nitro Enclaves: Attack Surface

14 months ago blog.trailofbits.com aws

AWS Nitro Enclaves: Attack Surface