reading
46 writings
2026
- Saying the obvious thing
- So you want to deploy FN-DSA
- Proxies all the way down
- Open source security at Astral
- Quantum Computers Are Not a Threat to 128-bit Symmetric Keys
- The Future of Everything is Lies, I Guess
- Thoughts on slowing the fuck down
- A tale about fixing eBPF spinlock issues in the Linux kernel
- Large-Scale Online Deanonymization with LLMs
- Please, please, please stop using passkeys for encrypting user data
- Cryptography Engineering Has An Intrinsic Duty of Care
- Zero Knowledge (About) Encryption
- Fancy cryptography in the wild🎩
- WhatsApp Encryption, a Lawsuit, and a Lot of Noise
- Look for what's true
- So, You’ve Hit an Age Gate. What Now?
- LLMs and your career
- The State of OpenSSL for <code>pyca/cryptography</code>
- University of Utah finds tape with only known copy of UNIX V4 hidden in storage
- Internet Security Research Group (ISRG) 2025 Annual Report
- What can strong engineers do that weak engineers can't?
2025
- Against Cipher Agility in Cryptography Protocols (2019)
- It's not your codebase
- Signatures are like backups (2024)
- Building a Transparent Keyserver
- Invisible Salamanders Are Not What You Think (2024)
- Picking parameters (2022)
- Experimenting with Post-Quantum Cryptography
- Your job is to deliver code you have proven to work
- The Typestate Pattern in Rust
- Arenas in Rust (2021)
- Too Much Crypto (2019)
- Should I Switch From Git to Jujutsu?
- The UK Is Still Trying to Backdoor Encryption for Apple Users
- A Tour of WebAuthn (2024)
- Don't write bugs
- <code>TIGER_STYLE</code>
- Burroughs' B6500/B7500 stack mechanism (1968)
- Lord of the <code>io_uring</code>
- <code>Scrypt</code> is Maximally Memory-Hard (2016)
- Inside Zig's New Writer
- Zig 0.15.1 Release Notes
- Shredding Your Garbage: Reducing Data Lifetime Through Secure Deallocation (2005)
- Jujutsu For Busy Devs
- Zero Knowledge Proofs Alone Are Not a Digital ID Solution to Protecting User Privacy
- High-assurance zeroization (2023)