2022
-
Securing tokens in PHP
Feb 21
Learn how password reset and other tokens can be secured by splitting the data and leveraging common password hash methodologies.
-
Cryptopals: Set 1 – challenge 5
Feb 19
Breaking encryption is fun. Building an encryption cipher is even more so! Let’s continue our Cryptopals journey with XOR.
-
Cryptopals: Set 1 – challenge 4
Feb 18
Now that we know how to crack a single-byte XOR cipher, let’s expand and crack even more through Cryptopals’ next challenge.
-
Cryptopals: Set 1 – challenge 3
Feb 17
Next up in our Cryptopals walkthrough is some frequency analysis against simple cryptographic keys. Let’s have some fun!
-
Cryptopals: Set 1 – challenge 2
Feb 16
Building on our cryptopals encoding work last time, let’s introduce byte-based XOR operations.
-
Cryptopals: Set 1 – challenge 1
Feb 15
Challenge 1 in the cryptopals suite is to juggle between Base64 and Hex encoding of byte strings. Let’s do just that, with value objects!
-
The Cryptopals challenges
Feb 14
Starting today I kick off a series on the cryptopals crypto challenges, with my implementations in PHP. Feel free to join in the fun!
-
The value of encryption
Feb 11
I care very deeply about privacy, which translates to a passion for encryption and cryptography. You should care about privacy, too.
-
Information leakage and side channel attacks
Feb 8
Side channel attacks are one of the many cryptographic footguns we need to avoid while designing and building secure applications.
-
Security by obscurity
Feb 7
The weakest form of security is that obtained through obscurity – hiding what would otherwise be plainly found in hopes it’ll be missed.
-
Basic cryptography – Diffie-Hellman key exchange
Feb 3
How do you communicate securely over an insecure medium? Using the Diffie-Hellman key exchange to agree on an encryption key is a start!
-
You absolutely SHOULD roll your own crypto
Jan 31
Expert cryptographers will warn you to never roll your own algorithms. Well, they’re wrong and here are three reasons why.