Top all-time · #4481
Cossack Labs
Company blog · cossacklabs.com/blogsecurity
Cossack Labs is the company blog at cossacklabs.com, writing about security. Since 2015, 17 different Hacker News readers have linked it 43 times, most often “Crypto in iOS: Choose your destiny (Infographic)”. No feed was found, so read it on the site itself.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Cossack Labs posts on encrypted search and alternatives to fully homomorphic encryption, such as functional encryption and secure search over encrypted data.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
We design, build, and secure critical systems that must remain operational in high-risk environments.
Most-linked posts?
- Crypto in iOS: Choose your destiny (Infographic)2 people · 2 mentions · first linked 2016-03-30
What Hacker News says?
Well, FHE may not be there yet but there are other approaches using functional encryption (?) [ref] concepts, like this one I stumbled upon: https://www.cossacklabs.com/blog/secure-search-over-encrypte... [ref] https://cseweb.ucsd.edu/~daniele/LatticeLinks/FE.html
Comment linking /blog/secure-search-over-encrypted-data-acra-se.html
on “Fully Homomorphic Encryption (FHE)”Submitted Crypto wallet security as seen by security engineers as a story · 175 points
HN discussionThis is literally untrue. Zero-knowledge comparison protocols exist [1], and their goal is to prevent malicious party from obtaining any knowledge of the secret. Yes, the genuine server will have its copy of the password (or its hash, whatever) and the user will have their copy of the password too. What you don't want is to have the user send their copy of the password to a place which looks like your server but isn…
Comment linking /files/secure-comparator-paper-rev12.pdf
on “Reviewing the worst piece of code ever”Submitted Zero Knowledge Protocols without Magic as a story · 65 points
HN discussion> With E2EE, all the server can do is hand you encrypted blobs. Encrypted search is a thing. You need to know in advance what kind of queries you want to do against your DB, but there are off-the-shelf solutions for encrypted search which do not involve homomorphic encryption. Here's an overview: https://www.cossacklabs.com/blog/secure-search-over-encrypte...
Comment linking /blog/secure-search-over-encrypted-data-acra-se/
on “Should notes be end-to-end encrypted?”Submitted Cryptographic failures in RF encryption allow stealing robotic devices as a story · 63 points
HN discussion... and a more formal whitepaper for cryptographic people: https://cossacklabs.com/static/secure-comparator-paper-v1.pd...
Comment linking /static/secure-comparator-paper-v1.pdf
on “Zero Knowledge Authentication Protocol Secure Comparator”Submitted Auditable Macros in C Code as a story · 55 points
HN discussionSubmitted Techniques for investigating untypical Go memory leaks as a story · 27 points
HN discussionSubmitted Introducing WebThemis: modern cryptography for Google Chrome web apps as a story · 24 points
HN discussionSubmitted Preventing SQL Injections When WAF’s Not Enough as a story · 18 points
HN discussionSubmitted Nuances of Replacing OpenSSL with Google's BoringSSL as a story · 10 points
HN discussionSubmitted Zero Knowledge Authentication Protocol Secure Comparator as a story · 10 points
HN discussionSubmitted Themis crypto library adds Rust support in 0.11 as a story · 9 points
HN discussionSubmitted Show HN: Acra, new database protection suite for PostgreSQL as a story · 8 points
HN discussionSubmitted What do we really need to encrypt? Cheatsheet as a story · 7 points
HN discussionSubmitted Why making Internet safe is everyone’s responsibility as a story · 6 points
HN discussionSubmitted You should avoid SSL for your applications as a story · 6 points
HN discussionSubmitted How We Built an SQL Firewall as a story · 5 points
HN discussionSubmitted Importing with ctypes in Python: preventing overflows as a story · 5 points
HN discussionSubmitted Implementing tracing in modern distributed app as a story · 4 points
HN discussionSubmitted Choosing crypto frameworks for Android (infographic) as a story · 4 points
HN discussionSubmitted Upgrading curve ed25519 implementation to meet extended security challenges as a story · 4 points
HN discussionSubmitted Reducing Docker container image sizes as a story · 3 points
HN discussionSubmitted Advanced encryption for Redis and Postgres as a story · 3 points
HN discussionSubmitted Classic database security patterns you should know as a story · 3 points
HN discussionSubmitted Crypto in iOS: Choose your destiny (Infographic) as a story · 3 points
HN discussionSubmitted Crypto in iOS: Choose your destiny (Infographic) as a story · 3 points
HN discussionSubmitted Implementing End-to-End Encryption in Bear App as a story · 2 points
HN discussionSubmitted Hiring external security team: what you need to know as a story · 2 points
HN discussion
