Insights into computer security, programming and math
"Trustless" bridges claim to allow secure asset exchange across chains even in the presence of malicious actors. However, we argue that truly trustless protocols based on commit-reveal schemes are actually impossible when at least one of the participants does not wait for block finality.
This article explores an observation in the use of BLS signature aggregation within a production blockchain.
Vulnerabilities in Merkle tree implementation used for hashing collections of objects, with an application to Omni Network.
Inductive Reasoning Considered Harmful for blockchain light clients.
Missing BLS12-381 Public Key Validation, and BLS12-381 Wrong Signature Generation in CometBFT
Ethereum consensus vulnerability.
CVE-2023-25000
CoreDNS might be vulnerable to cache poisoning attacks.
How to find side channel leaks in Java Cryptography Extension providers.
Statistical inference of Chebyshev's bias in RSA numbers.
Duplicate RSA moduli census and bash interpreter abuse in the way of Diogenes.
An account of CVE-2018-5548
Exploiting SQL injections when error messages are the only output.
A Secret You Own is a Secret You Pwn.
Literate programming in APL.
Porting of GNU APL to OpenBSD.