Building the same secure channel twice
Why I implemented one encrypted channel with two different post-quantum families, and what attacking my own protocol taught me about crypto-agility.
~/writing
Security research notes and essays. The posts below live on this site; longer pieces are on Medium.
Why I implemented one encrypted channel with two different post-quantum families, and what attacking my own protocol taught me about crypto-agility.
Race conditions are the bugs coverage-guided fuzzers are worst at finding. Notes from RaceFuzz on why the network stack is a concurrency minefield and what semantic fuzzing means.
Solving challenges makes you a better attacker. Writing one makes you a better engineer: difficulty curves, unintended solutions, and infrastructure at scale.