Top all-time · #1334
Kudelski Security Research
Company blog · research.kudelskisecurity.comsecurityprogramming
Kudelski Security Research is the company blog at research.kudelskisecurity.com, writing about security and programming. Since 2016, 52 different Hacker News readers have linked it 83 times, most often “Open-source crypto is no better than closed-source crypto”. No feed was found, so read it on the site itself.
The Latest News from Research at Kudelski Security
Most-linked posts?
- Open-source crypto is no better than closed-source crypto5 people · 7 mentions · first linked 2018-10-02
- Polynonce: A Tale of a Novel Ecdsa Attack and Bitcoin Tears5 people · 5 mentions · first linked 2023-03-06
- When Constant-Time Source Code May Not Save You – Kudelski Security3 people · 4 mentions · first linked 2017-01-17
- The definitive guide to “modulo bias” and how to avoid it (2020)3 people · 3 mentions · first linked 2020-07-30
- Should Curve25519 keys be validated?3 people · 3 mentions · first linked 2017-04-25
- Forget Homomorphic Encryption, Here Comes Functional Encryption3 people · 3 mentions · first linked 2019-11-26
- How to defeat Ed25519 and EdDSA using faults2 people · 4 mentions · first linked 2017-10-05
- Shufflecake: plausible deniability for multiple hidden filesystems2 people · 3 mentions · first linked 2022-11-10
- FIDO2 Deep Dive: Attestations, Trust Model and Security2 people · 3 mentions · first linked 2020-02-12
- The Quantum Computer FAQ2 people · 2 mentions · first linked 2017-02-07
What Hacker News says?
Another group did a talk on this at DEF CON 26 last year: https://research.kudelskisecurity.com/2018/08/16/breaking-an... They analyzed over 340 million keys from the web. > As part of the presentation given at DEF CON 26, one of the outputs was Kudelski Security’s Keylookup application. On this site, you can submit your own public keys and have them tested against our dataset. We will let you know if your key is vu…
Comment linking /2018/08/16/breaking-and-reaping-keys-updated-slides-and-resources/
on “An Almost-Secret Algorithm Researchers Used to Break Thousands of RSA Keys”Submitted How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos as a story · 687 points
HN discussionHello from Kudelski Security. This is super timely, because we recently had to discontinue one of the other only existing Go libraries for quantum-resistant cryptography in Go! Full story at https://research.kudelskisecurity.com/2024/02/01/the-kybersl...
Comment linking /2024/02/01/the-kyberslash-vulnerability-and-the-crystals-go-library-a-retrospective-story/
on “Show HN: filippo.io/mlkem768 – Post-Quantum Cryptography for the Go Ecosystem”Submitted How to defeat Ed25519 and EdDSA using faults as a story · 171 points
HN discussionIn order to comment on individual cells, we appear to first have to have an argument about how audits work. You say WhatsApp can only "claim" certain features as a consequence of it being closed source, but that's because of a misunderstanding about how audits work. In a backchannel, as a consequence of this HN article, someone (names withheld to protect the guilty, they can identify themselves if they'd like) start…
Comment linking /2018/10/02/open-source-crypto-is-no-better-than-closed-source-crypto/
on “Messenger systems compared by security, privacy, compatibility, and features”Submitted Passkeys – Under the Hood as a story · 158 points
HN discussion> Also, this is a fallacy. What is a fallacy? I asked a question. Non-technical users will never modify their software. The act of doing so would recategorize them as "technical". I don't see any fallacy here? The most likely interpretation of your comment is, you're assuming an argument that I am not making. > Just because "typical user" won't care or won't be able to do something doesn't mean we shouldn't strive t…
Comment linking /2018/10/02/open-source-crypto-is-no-better-than-closed-source-crypto/
on “Messenger systems compared by security, privacy, compatibility, and features”Submitted Auditing Rust Crypto: The First Hours as a story · 149 points
HN discussionWhen you say "the FIDO Alliance", you mean the entity that runs a Metadata Service[0] which: > provides organizations deploying FIDO Authentication with a centralized and trusted source of information about FIDO authenticators. The aim of this centralized system is to allow revocation of hardware that doesn't meet their unchallengeable opinion of whether you've spent enough money on your device or not. They can simi…
Comment linking /2020/02/12/fido2-deep-dive-attestations-trust-model-and-security/
on “Bringing passkeys to Android and Chrome”Submitted The definitive guide to “modulo bias” and how to avoid it (2020) as a story · 133 points
HN discussionI don't use Signal mostly because nobody I know uses it, even though I know they have it installed. By pure usage statistics the winner would be WhatsApp. I also use Wire. In terms of issues with each of these, Wire has occasional bugs and hiccups (UX wise) and would be unsuitable for large groups exchanging messages (every device implies an entirely new ratchet, users own multiple devices, and all Wire group chats…
Comment linking /2017/04/25/should-ecdh-keys-be-validated/
on “Why Telegram is insecure (2015)”Submitted Open-source crypto is no better than closed-source crypto as a story · 83 points
HN discussionThis is a pretty good primer, and I think Matt Green is generally good at tutorials that reduce the technical complexity to make material more accessible. I'll add a couple of notes: 1. Hash-based cryptography is not capable of providing public-key encryption, so unfortunately these are only useful for quantum-resistant digital signature schemes. But they're still very good at that. 2. Since collision resistance is…
Comment linking /2017/12/01/our-submission-to-nists-post-quantum-project-gravity-sphincs/
on “Hash-based Signatures: An illustrated Primer”Submitted Defeating Quantum Algorithms with Hash Functions as a story · 74 points
HN discussion`cat /dev/urandom | od -N 1 -An -i` gives you a uniform random number between 0 and 255. The following mod 10 in the awk command introduces "modulo bias", which you can read about here https://research.kudelskisecurity.com/2020/07/28/the-definit... You can see it quite intuitively if you iterate over all possible numbers between 0 and 255: $ (for i in {0..255}; do; echo $i | awk ' {print $1 % 10 + 1}'; done) | sort…
Comment linking /2020/07/28/the-definitive-guide-to-modulo-bias-and-how-to-avoid-it/
on “I figured out how to get GitHub Copilot to run in the terminal”Submitted Practical bruteforce of AES-1024 military grade encryption as a story · 44 points
HN discussionRelevant stories: Even though Curve25519 is built to be easy to implement in constant time, there was a non-constant time bug in a Curve25519 library: https://research.kudelskisecurity.com/2017/01/16/when-consta... Basically the compiled code ends up using a run-time Windows library for 64-bit multiplication. That library decided to skip the upper 32-bit multiplication when the operands had 32 all zero MSBs. Oops. C…
Comment linking /2017/01/16/when-constant-time-source-may-not-save-you/
on “EverCrypt, a cryptographic library that is provably secure against known attacks”Submitted Should Curve25519 keys be validated? as a story · 18 points
HN discussion"Take, for example, the simple case of a linear congruential generator (LCG), which is the typical textbook introduction to PRNG implementations. LCGs are to PRNG what ROT13 is to encryption and “1234” is to secure passwords. Despite that, due to their simplicity and popularity, they are the default choice for many non-critically secure applications" [0] As a hacker, always try the easiest things first. It's crazy h…
Comment linking /2023/03/06/polynonce-a-tale-of-a-novel-ecdsa-attack-and-bitcoin-tears/
on “Why Quantum Cryptanalysis is Bollocks [pdf]”Submitted Breaking RSA OAEP with Manger Attack as a story · 11 points
HN discussionThere aren't many in-the-wild timing attacks because constant-time is table stakes for cryptography implementation, and has been for decades. It's like saying that when driving on a road, the "wheels fall off" risk is overhyped. Wheels falling off may be low on your personal list of concerns, but only because car manufacturers make sure they don't design cars whose wheels fall off. A car with wheels that fall off wo…
Comment linking /2023/03/06/polynonce-a-tale-of-a-novel-ecdsa-attack-and-bitcoin-tears/
on “Why Quantum Cryptanalysis is Bollocks [pdf]”Submitted Advancing Rust Support in Semgrep as a story · 8 points
HN discussionPlease don't, or if you do, host the relay node from a completely different connection. Onion sites are not completely hidden, and uptime times can be correlated to know which ip is running which hidden service [1], completely missing the point of hidden services. [1] https://research.kudelskisecurity.com/2013/09/04/dont-run-a-...
Comment linking /2013/09/04/dont-run-a-tor-router-and-a-hidden-service-from-the-same-connection/
on “Tor at the Heart: OnionShare”Submitted Forget Homomorphic Encryption, Here Comes Functional Encryption as a story · 6 points
HN discussionHey, Shufflecake co-author here, thanks for the questions. 1. Indeed! 2. Wow wow wow, hold on there :D there is a misunderstanding, the "Swiss Government" was never involved not even remotely. First of all, this project has roots that go waaay back in time [1]. It was finally realized when I met Elia, who was then a student at a joint ETHZ/EPFL MSc program, and Elia accepted the thesis project that I proposed in the…
Comment linking /
on “Shufflecake: Plausible deniability for hidden filesystems on Linux (2023)”Submitted Wire Cryptography Audit (with X41 D-Sec) as a story · 5 points
HN discussionI forgot to include a link to said research! https://research.kudelskisecurity.com/2017/01/16/when-consta...
Comment linking /2017/01/16/when-constant-time-source-may-not-save-you/
on “Show HN: Sodium_compat, a Pure PHP implementation of libsodium”Submitted FIDO2: Solving the Password Problem as a story · 4 points
HN discussionNever trust anything from the client. [1] https://research.kudelskisecurity.com/2017/10/04/defeating-e...
Comment linking /2017/10/04/defeating-eddsa-with-faults/
on “Google Warns Against Blocking Cookies Entirely, Triggering Criticism”Submitted Shufflecake: plausible deniability for multiple hidden filesystems as a story · 3 points
HN discussion
