Tessera
Folgen

Security Cryptography Whatever

@scwpod.bsky.social

@durumcrustulum.com, @sockpuppet.org, @dadrian.io “Freewheelin’ dynamic”. https://securitycryptographywhatever.com https://podcasts.apple.com/us/podcast/feed/id1578405214

73 Posts1403 Follower3 Folgt
Justin Schuh@justinschuh.com · 2mo ago

TIL I cannot listen to @lcamtuf.coredump.cx at 3x speed. It's never bothered me with other voices I already know from conversation (including the hosts on @scwpod.bsky.social). But I had to slow everything down below 2x to get him out of the uncanny valley.

Facing the Vulnpocalypse With lcamtuf

We talk to Michał Zalewski (lcamtuf) about the vulnpocalypse and if we even need fuzzers anymore. This episode may be export controlled at a future date. Th...

securitycryptographywhatever.com

Chris Fenner@chrisfenner.bsky.social · 6mo ago

I finally reached the end. This was a super good episode and it gave me all the warm fuzzies about my internal reactions to getting started with Ossl3 for PQC. As a former windows NCrypt provider maintainer, I really thought all my “magic strings to throw at a generic API” was behind me 😭

Thomas Ptacek@sockpuppet.org · 6mo ago

Just recorded the premiere episode of Season VIII of Security Cryptography & W/evs, this time with Alex Gaynor and Paul Kehrer, who have a momentous announcement about pyca/cryptography and OpenSSL.

Ben Adida@benadida.com · 7mo ago

Threshold decryption.... I struggled with that one and still do. Obviously it's a point of fragility to allow one lost share to cancel the election. But true DKG with parties spread across the world is also not obviously easy to implement.

Ben Adida@benadida.com · 7mo ago

Yes, it's finite fields, in large part because implementing over elliptic curves, especially with proper hashing for NIZKs, was more complexity than I could handle. Would likely make sense to upgrade to EC at some point but also probably not a huge priority? Happy to hear counter arguments!

Ben Adida@benadida.com · 7mo ago

Yes, Helios definitely uses NIZKs to prove proper ballot form. Implemented in 2008 browser JavaScript, which was a fun challenge.

Thomas Ptacek@sockpuppet.org · 7mo ago

Final SCW of 2025! We had Matt Bernhard on to talk about cryptographic voting systems, in the wake of the IACR election. (Everybody I voted for in the new election won! Woo!)

Security Cryptography Whatever @scwpod.bsky.social · 7mo ago

NEW EPISODE! The IACR lost the keys to decrypt their encrypted election results. We welcome Matt Bernhard who works on secure voting systems to explain which Helios bits are homomorphically additive or not and more: securitycryptographywhatever.com/2025/12/30/i... www.youtube.com/watch?v=euw_...

Security Cryptography Whatever @scwpod.bsky.social · 7mo ago

NEW EPISODE! The IACR lost the keys to decrypt their encrypted election results. We welcome Matt Bernhard who works on secure voting systems to explain which Helios bits are homomorphically additive or not and more: securitycryptographywhatever.com/2025/12/30/i... www.youtube.com/watch?v=euw_...

The IACR Can

The International Association of Cryptologic Research (IACR) held their regular election using secure voting software called Helios…and lost the keys to decr...

securitycryptographywhatever.com

Simon Fondrie-Teitler@simon.overgrown.garden · 12mo ago

The first part of this interview with my ex-colleague Alex is a great listen if you're a software engineer (or otherwise technical) and are interested in what we were working on as technologists at the Federal Trade Commission.

Security Cryptography Whatever @scwpod.bsky.social · 12mo ago

NEW EPISODE! We chat with friend of the pod and special guest Alex Gaynor, former deputy chief technologist at the FTC and all around good Security Person™. Join for nerdery about WebAuthn, stay for accidentally melting down GitHub APIs around November 2020! youtu.be/gBoGvyvsSi4