HNHacker News
TopNewBestAskShowJobs

CiPHPerCoder

6,663 karma · joined February 25, 2016

My name is Scott. I do a lot of open source security research, and cryptography.

Previously AWS Cryptography (2019 - 2023).

Unless otherwise stated, my opinions are my own and do not reflect my employer.

https://scottarc.blog/about/

submissionscomments

Post-Quantum Cryptography for the PHP Community

paragonie.com·3 pts·CiPHPerCoder·
0

Building Cryptographic Agility into Sigstore

blog.trailofbits.com·3 pts·CiPHPerCoder·
1

How we avoided side-channels in our new post-quantum Go cryptography libraries

blog.trailofbits.com·5 pts·CiPHPerCoder·
0

A WordPress Hard Fork Could Be Made Painless for Plugin/Theme Developers

scottarc.blog·5 pts·CiPHPerCoder·
0

Attacking NIST SP 800-108 (Loss of Key Control Security)

scottarc.blog·42 pts·CiPHPerCoder·
3

Attacking NIST SP 800-108 (Loss of Key Control Security)

scottarc.blog·1 pts·CiPHPerCoder·
0

Loss of Key Control Security in NIST SP 800-108

scottarc.blog·1 pts·CiPHPerCoder·
0

Encryption at Rest: Whose Threat Model Is It Anyway?

scottarc.blog·2 pts·CiPHPerCoder·
0

Open Source, Supply Chains, and Bears

scottarc.blog·18 pts·CiPHPerCoder·
14

How to Write a Secure JWT Library If You Must

scottarc.blog·3 pts·CiPHPerCoder·
0

Innovations in the AWS Database Encryption SDK

scottarc.blog·2 pts·CiPHPerCoder·
0

Lucid Multi-Key Deputies Require Commitment

scottarc.blog·2 pts·CiPHPerCoder·
0

We Need Non-Interactive Post-Quantum KEMs

scottarc.blog·1 pts·CiPHPerCoder·
0

Line Goes Up – The Problem with NFTs (and “Web 3”)

nfts.io·3 pts·CiPHPerCoder·
1

Solving Open Source Supply Chain Security for the PHP Ecosystem

paragonie.com·80 pts·CiPHPerCoder·
28

Gossamer: Supply-Chain Security for the PHP Ecosystem

gossamer.tools·2 pts·CiPHPerCoder·
0

Private key of DigiCert Certificate Transparency log compromised

feistyduck.com·79 pts·CiPHPerCoder·
39

Auth0 JWT Auth Bypass: Case-Sensitive Blacklisting Is Harmful

insomniasec.com·195 pts·CiPHPerCoder·
92

Show HN: Gossamer, an authority-free PKI for securing software updates

github.com·3 pts·CiPHPerCoder·
0

The Curious Case of WebCrypto Diffie-Hellman on Firefox

blog.intothesymmetry.com·81 pts·CiPHPerCoder·
5

Cipher Agility Considered Harmful

paragonie.com·1 pts·CiPHPerCoder·
0

Against Cipher Agility in Cryptography Protocols

paragonie.com·1 pts·CiPHPerCoder·
0

Against Agility in Cryptography Protocols

paragonie.com·1 pts·CiPHPerCoder·
0

String Encryption in JavaScript and PHP with Libsodium

gist.github.com·1 pts·CiPHPerCoder·
0

Message Encryption in JavaScript and PHP with Libsodium

dev.to·3 pts·CiPHPerCoder·
0

A Thorough Introduction to Paseto (Secure JWT Alternative)

developer.okta.com·6 pts·CiPHPerCoder·
0

Show HN: Sodium-Plus (Cross-Platform JavaScript Cryptography Library)

github.com·1 pts·CiPHPerCoder·
0

JavaScript Cryptography – Improving the Ecosystem

paragonie.com·2 pts·CiPHPerCoder·
0

Improving the Cryptography of the JavaScript Ecosystem

paragonie.com·2 pts·CiPHPerCoder·
0

Show HN: Sodium-Plus – JavaScript Cryptography for Humans

github.com·1 pts·CiPHPerCoder·
0
Page 1 of 8Next →