Sophie Schmieg

Leading cryptography (ISE Crypto) at Google.

Opinions my own.

Content usually badly explained mathematics

profession: cryptography engineer
hobby: Kerbal Space Program
hobby: Lego
hobby: Factory Sim Games

Public Key

npub10qaqswg07tsrztrauf69ylup6qj50kef7e4ut7t0vganygk0t2rsyr4hg8

NIP-05 Address

sophieschmieg_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqs8swsg8y8l9cp39377yazj07qaqf28mv5lv679l9hkywejyt844pcprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntck29yg

Publishing to

relay.momostr.pink

Author Public Key

npub10qaqswg07tsrztrauf69ylup6qj50kef7e4ut7t0vganygk0t2rsyr4hg8

Show more details

Last Notes

2026-06-30 22:04:27 UTC

- reply

Please read this before treating djb with any seriousness. https://keymaterial.net/2025/11/27/ml-kem-mythbusting/

2026-05-02 20:27:13 UTC

I think I might need to check some luggage, this does want to close.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/506/852/631/049/654/original/9397cca902bf5108.jpg

2026-04-19 16:41:22 UTC

My hot take on the vulnpocalypse:
We don't have more vulnerabilities than we had before. The vulnerabilities were always there, we just didn't know they existed. But importantly, for moderately sophisticated attackers, who only have to find a relatively low number of vulns to begin with, not much has changed. Yeah it's a little bit cheaper, but finding vulns wasn't all that difficult, depending on the target. For defenders otoh, making the finding of vulns cheaper is theoretically a good thing, but we already had not enough capacity to fix the vulns found by fuzz testing and similar methods before, so this is just adding on the pile of stuff we know is broken, but can't keep up with fixing it. The net effect seems to be that we made triage more expensive. Yay.

2026-04-14 16:25:03 UTC

- reply

there also is an amount of survivorship bias both in the positive and in the negative direction. Examples where things work spookily well are shared widely, as are examples of embarrassing misses. Add confirmation bias into the mix and you get the hype cycle almost entirely organically.

2026-04-02 19:20:57 UTC

A very nice explainer why "if you're so worried about quantum computers, why haven't they factored 21 yet?" isn't a very convincing argument. Look at the labels of the graph, and how extremely close the various lines are for factoring 21 and 2048 bit numbers. Polynomial scaling remains polynomial, unfortunately, and by the time you can factor 21 you're almost ready to break RSA.
https://bas.westerbaan.name/notes/2026/04/02/factoring.html

2026-03-20 19:49:20 UTC

Have you licked your sister today?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/263/231/142/863/085/original/7b6f6b4011e9f4a7.jpg

2026-03-17 22:11:28 UTC

I got my key signed by Diffie.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/246/802/253/632/489/original/cdaeaa549314edc5.jpg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/246/802/529/745/200/original/9e8d8bc1799c99bc.jpg

2026-03-05 19:15:58 UTC

So far, nobody seems to have concerns about flying with an inoperative cryptographer on board
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/178/163/595/639/639/original/add7c02127db029e.jpg

2026-02-25 21:05:29 UTC

- reply

it turns out, a random number generator does not get better when you first run it through a lot of linear algebra 😏

2026-02-12 21:08:04 UTC

Lol. Rofl, even.
(Not the Onion: https://www.ibm.com/thought-leadership/institute-business-value/en-us/report/enterprise-2030)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/059/698/181/615/660/original/827499da278edf3a.png

2026-02-07 16:38:41 UTC

Blog post about PQC
https://blog.google/innovation-and-ai/technology/safety-security/the-quantum-era-is-coming-are-we-ready-to-secure-it/

2026-01-31 16:23:18 UTC

From the analysis people have put out on the Epstein files, I'm left to wonder if Epstein had some sort of mind control device that only works on rich people. Like why do all these rich people get themselves in such a compromised position by associating with a known pedophile?

2026-01-21 17:52:21 UTC

- reply

Like I fully expect real humans to start avoiding AI phrases like "you're absolutely right" or "that's a great question!", just because it sounds cringe.

2026-01-21 17:51:13 UTC

One of the aspects of AI that I hate the most is that at some point, I start reading my own or other people's genuine writing in "AI voice".
Way to undermine your own confidence or devalue other people's writing instantly.

2026-01-10 06:29:34 UTC

Me: oh, we could buy an oscilloscope!
@npub184f…pnjc : why would we need an oscilloscope?!?
Me: uhm, because it's an oscilloscope?!?

2025-12-13 23:56:19 UTC

New blog post: A very unscientific guide to the security of various PQC algorithm.
I guess I have entered the listicle stage of blog post writing, so I should add: Number 4 will shock you!
https://keymaterial.net/2025/12/13/a-very-unscientific-guide-to-the-security-of-various-pqc-algorithms/

2025-12-05 17:57:22 UTC

Me: you're a great kitten!
Cat: *pukes in carpet*
Me: guess you're just a good girl
Cat: *slashes curtains*
Me: well you're alright

2025-11-26 22:03:10 UTC

Unicode normalization.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/618/252/786/299/596/original/61c3b0006efa2b71.png

2025-11-18 17:59:14 UTC

- reply

service that was designed for less than 2^n entries achieved 2^n entries, where n was a reasonable choice at the time. Usually due to running out of integers of a certain size, or finding collisions in hash functions that were not supposed to collide with reasonable probability.
It happens with some frequency when more internet traffic then you could conceivably imagine runs through your servers. Ideally you catch that before bad stuff happens.

2025-11-14 18:38:13 UTC

WaPo's opinion section these days: as we can see. Democrats and progressive ideas are doomed, losing election after election, as evidenced by Mamdani in the New York mayoral race, where he lost, by winning by a wide margin.

2025-11-12 20:05:50 UTC

OH: Kerberos is identity based encryption in the same way that a hot dog is a sandwich.

2025-11-05 12:53:48 UTC

Me: reads random news items
My brain: Epstein, Epstein alles muss versteckt sien.

2025-11-04 19:15:49 UTC

- reply

"if I wanted your damn opinion, I would've beaten it out if ya" has somehow been stuck in my head since I played that game as a child in the nineties.

2025-10-27 14:59:56 UTC

Help, I'm trapped!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/446/719/321/301/712/original/f3e92489a7c852f6.jpg

2025-10-21 18:59:57 UTC

- reply

Like, I've seen @npub1jsl…93xu complain about there not being an involved Ocean's 11 style plot, but key detail: this happened in France. So obviously it would be more likely to be Lupin, and he loves stealing shit while everybody is watching.

2025-10-21 18:56:14 UTC

Did anyone check on Assane Diop? I was under the impression that stealing diamonds in broad daylight out of the Louvre is something that is really only accomplished by the legendary Lupin.

2025-10-20 20:09:25 UTC

Don't make me take out the emergency entropy generators again.
(Context: https://lkml.org/lkml/2025/10/17/1729)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/408/290/041/921/578/original/23046450d05ef13f.jpg

2025-10-15 00:19:23 UTC

- reply

On top of that, any junior dev I've ever worked with asked questions when they got stuck, instead of confidently force merging a bunch of buggy code. And not infrequently, those questions laid bare some flaw in the design decisions of the more senior engineer, and let to a better product that way.

2025-10-15 00:17:39 UTC

- reply

You didn't really think the business value of that PR that had more comments than lines of code that all of us have written at some point in our career (if you haven't, I'm sorry, your onboarding mentor sucked, they were supposed to point out all the stuff you had to learn the hard way) was in getting it merged eventually, right? The value was the PR after that, that had a lot less comments. And the PR after that one, etc.

2025-10-14 23:38:45 UTC

Whenever I see "GenAI basically can do the work of a junior dev", I assume that those people are using junior devs very differently from me. To me, the value of a junior developer is maybe like 20% the code they write, and 80% is a down payment to a future where they no longer are a junior. I still haven't found an AI that could do that second part.

2025-10-08 17:03:25 UTC

- reply

10.1 will warn if you're not using ML-KEM. And ML-KEM already generates a fresh lattice for each public key.

2025-10-03 14:04:50 UTC

Criticizing Linux on Mastodon is really the best way to make men type paragraphs, isn't it?

2025-09-28 17:36:26 UTC

Random childhood anecdote, posted as individual toot in order to not derail some random joke post about kids these days not being into non-Euclidean geometry:
I have three siblings, spaced two years apart each. All four of us went to the same high school. My youngest sister's math teacher wanted to do a cute little segment about triangles always having inner angles sum up to 180 degrees. It was supposed to take the form of a trial. My sister was assigned the role of prosecutor charging a triangle accused of having an inner angle sum different from 180 degrees. Obviously, taking her role very seriously, she consulted the Schmieg dinner table, and a plan was hatched, involving a grapefruit and a marker. The trial came, and just as the defense had produced what they thought was irrefutable proof that their client was innocent, my sister took out the grapefruit, drew a triangle connecting one pole to the equator using three right angles, and said "So how do you explain this?!?" Leading to the teacher/judge having to explain non-Euclidean geometry to a bunch of 10 year olds.
And to make this anecdote even better, in a different class the same day she had a substitute teacher who didn't know my sister, but seeing the triangled up grapefruit, approached her and asked her "Are you a Schmieg?". Our family name has racked up quite some reputation…

2025-09-13 01:49:13 UTC

When you think about it, we really should call "Tesla autopilot" vibe driving

2025-09-09 16:23:55 UTC

Calling linear regression "one layer neural network AI" going forward

2025-09-02 01:01:57 UTC

A key should always be considered to consist of both raw key material and all metadata required to fully describe and execute the associated cryptographic function.

2025-08-31 18:27:49 UTC

Please do not vibe code reference implementations. FFS.

2025-08-21 14:37:27 UTC

Damn girl "if you're actually an imposter, it's not a syndrome"
https://youtube.com/shorts/xBilK3gT5e0

2025-07-17 05:19:07 UTC

@npub184f…pnjc : oh yeah, I saw in the IETF companion WhatsApp group…
Me: Whatsapp group? I thought that was a mailing list?
@npub184f…pnjc : yes, initially, but email lists are cumbersome and awful, so we switched to WhatsApp.
Me: 😱I did not realize that was an option.

2025-07-11 14:53:22 UTC

- reply

I mean you're talking about the country that thinks this is a perfectly normal border:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/835/165/489/706/033/original/bfcab560f4dc1832.png

2025-06-25 02:38:20 UTC

Cat vs. SecUnit, a comparison:
Commonalities:
- terrifying murder machine
- weapons usually hidden unless in use
- could go rogue at any point in time and hurt humans, but chooses not to
- can react with superhuman speed
- often sits motionless, just watching the environment for hours
Differences:
SecUnit:
- just wants to watch media
Cat:
- just wants pets and cuddles

2025-06-24 22:32:54 UTC

- reply

it's a family of vulnerabilities that generally affect certain optimizations. The main idea behind SPECTRE is that the CPU (or GPU) falsely predicts that a certain code path is likely to be executed (for example assuming that an authentication check is likely to succeed, before waiting for e.g. a signature verification to complete), and that the execution of this code itself, even if undone by later actions, already leaks the information the attacker wanted, usually through side channels.

2025-05-23 16:05:43 UTC

I added the less interesting information to this blog post.
https://security.googleblog.com/2025/05/tracking-cost-of-quantum-factori.html?m=1

2025-05-15 05:52:05 UTC

My sister is defending her PhD today. Unbeknownst to her, I happen to be in the region and will drop by for "moral support".
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/510/282/593/892/275/original/739000eaffaefff9.jpg

2025-05-06 09:49:49 UTC

Ah, yes, the two genders
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/460/258/073/479/039/original/4e7f29b015b01956.jpg

2025-05-04 02:15:55 UTC

Damnit, I'm sitting next to a cryptocurrency person in this plane and am not wearing my "crypto means cryptozoology" shirt.

2025-04-19 21:57:50 UTC

I think I put that together wrong.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/366/863/323/642/312/original/94130da0e4a1f6ef.jpg

2025-04-15 20:39:29 UTC

And all of the sudden, we have solved supply chain security.
No CVE, no vulnerabilities!

2025-04-01 13:52:36 UTC

- reply

til the Babylonians already had the "no take, only throw" meme.

2025-03-29 14:30:41 UTC

- reply

for small to medium sized businesses that are not doing anything more adventurous than TLS when it comes to cryptography, my advice would be, if there is some free engineering capacity, to turn on 0x11EC (X25519-ML-KEM768) in their TLS config, assuming their stack supports the cipher. (The various different stacks are adding support for that currently)
That way, you can check if anything breaks, with both Chrome and Firefox negotiating that cipher by default, and Safari rolling out support for it. The main risk is with middleware breaking.
In that threat model, it may not be the most urgent task, but it's relatively simple, depending on the used TLS stack. You can also turn on the equivalent KEX in SSH (supported in OpenSSH). Otherwise, in that threat model, I wouldn't do much at all (and even these two things are mostly optional, unless there are very strict long term confidentiality concerns).
Of course, if your threat model is more adventurous, you might want to hire some cryptographers 🙂

2025-03-29 06:28:24 UTC

- reply

I agree that most small to medium companies probably do not have to care about any of this right now. Those that do probably know already. But it's not something that can be simply ignored by everybody.
The main way to recognize overhyped nonsense is when they talk about inventory and agility. Unfortunately, neither of these terms is completely without merit, but they are the most favorite buzzwords of the hype peddlers. Really both of these boil down to proper key management. Something that is extremely difficult, but not unique or novel with PQC.

2025-03-29 06:24:29 UTC

- reply

but just in case you don't like watching my YouTube talks, here is the TLDR as to why you might need to care (not everybody has to care, figuring out who does is part of the difficulty):
a) whether or not you believe the hype about quantum computers, regulatory pressure puts a hard deadline on the migration for 2035. That's ten years. For encryption in transit you have store-now-decrypt-later, which might incentivise you to move faster, although that is somewhat overhyped, as forward secrecy acts as a form of "quantum annoyance", it depends how high you value you long term confidentiality of your data.
b) PQC algorithms are not easy drop in replacements. They are much, much larger than their classical counterparts, leading to quite a few use cases outright breaking (as the aforementioned WebPKI). Some of these are extremely difficult to migrate as a whole (again, as the aforementioned WebPKI), making 10 years not much time.

2025-03-29 05:59:33 UTC

- reply

ugh, please don't.
Yes it's overhyped, and yes consultants give extremely cringe talks about it, but no, this is neither a purely theoretical threat that can be safely ignored, nor is it business as usual when it comes to upgrading. Unless of course you consider potentially having to rip out the entirety of WebPKI and replacing it with something different as business as usual.
You can see my talk about the practical challenge and the threat model here (about half way through) https://youtu.be/wsnHMvuxy5Q?si=yK6oObpptIQfyOs8

2025-03-28 09:27:54 UTC

When your newspaper starts giving you opsec advice, you know things are totally fine and good and well.
It's good opsec advice, though, so have a gift link.
https://wapo.st/4hMOQtq
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/239/324/740/597/927/original/7ea00eb500bfcafa.png

2025-03-28 07:30:02 UTC

I love that the "Germans in foreign countries" app lets you register your fax number.
I guess, how else would they reach you?

2025-03-26 06:48:08 UTC

Being confused about which account belongs to which person is known to security professionals as a state management problem.
…
…
I'll see myself out

2025-03-26 05:36:17 UTC

- reply

(entirely fictional) Cryptographers: technically, the Atlantic could have fabricated the whole story, they have no way of proving the messages were actually sent.
Everyone else: they have screenshots, though!

2025-03-26 05:33:09 UTC

Days since Signal's deniable handshake has last been defeated by nobody caring about cryptographically deniable handshakes: 0

2025-03-25 08:27:43 UTC

- reply

hmm? Signal uses different colors for different people, that helps me distinguish chats fairly well.

2025-03-24 14:33:39 UTC

- reply

Visit https://keymaterial.net!
Am I doing that right?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/217/892/518/874/384/original/e65ea879f9cd03c1.jpg

2025-03-24 06:39:20 UTC

Hotel shower control review, Grand Millenium Sofia, Bulgaria:
What is this, a shower control designed by someone with a degree in Engineering (UX design)?
Uses the superior basis (hot-cold, more water/less water), having the more water/less water toggle also control the output shower head, well documented and with a very satisfying click once an output has been selected, to avoid the shower user from being sprayed by wayward cold water.
10/10, will shower again. A true beacon to us all.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/216/028/253/640/952/original/dfc664b32f7f000f.jpg

2025-03-18 19:49:24 UTC

- reply

again, I need to travel to do my job. If I'm unable to travel when based in the US, then I have to move country instead. I'm not risking much by traveling internationally, worst case scenario I get deported to Germany, where I would need to go anyhow if travel was impossible, so really all that happens is that the US pays for my flight.

2025-03-18 19:37:38 UTC

- reply

I don't back down from bullies. And I need to travel internationally to do my job. If that becomes infeasible, I will have to leave the US and move back to Europe. I can much more easily skip conferences in the US (a good chunk of which are organized by the federal government to begin with), then I can skip international travel. And a lot of my peers in industry and academia are in the same position.

2025-03-18 18:30:29 UTC

Feeling great about my upcoming international travel right now.
https://www.theguardian.com/us-news/2025/mar/18/germany-investigates-after-national-with-green-card-arrested-at-us-border

2025-03-18 16:39:16 UTC

- reply

look at number fields, split, ramified, and unramified primes while you're at it. IMHO easier to understand and deeper than split complex or dual numbers (although the dual number construction is extremely important for algebraic geometry).

2025-03-12 17:42:15 UTC

I'm on the same plane as Whitfield Diffie. We exchanged greetings, but not keys.

2025-03-12 16:58:33 UTC

What do you mean, of course that is my email address, IAD.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/150/513/123/771/200/original/38bef990ddcead9c.png

2025-03-07 14:14:52 UTC

Sometimes, a tiny bit of me wants them to outlaw encryption, just so I can show up at a pivotal moment, wearing a hoodie and half engulfed by fog from a fog machine, and mysteriously explain: "I possess the forbidden knowledge. Knowledge not meant for humans to know. Knowledge of matrices that will drive you mad just gazing upon. Infinite Knowledge of fields, finite in their nature!"

2025-03-06 00:54:23 UTC

Every time I fly Delta I end up disappointed because they somehow always end up using swept wing aircraft instead of the promised delta wing.

2025-03-05 18:10:10 UTC

This was a really fun vulnerability to have the pleasure to consult on:
https://bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-microcode-hacking
It turns out AES-CMAC is not second preimage resistant if you know the key (double so if the key is in an RFC), and 2048 bit numbers are quite often very easy to factor.

2025-02-14 16:01:45 UTC

Substantial layoffs at the largest employer in the country will, by themselves, cause an economic crisis. And that is nothing to say about the fact that federal employees are doing a job, and often one crucial to the economy.
But "Republicans are good for business"

2025-02-11 16:23:48 UTC

- reply

be that as it may, it matters that the president cannot change the law via executive fiat. It is still illegal to bribe foreign officials. There might not be enforcement right now, and if you outrun the statute of limitations that might mean you are able to commit an illegal act without penalty. But it is still an illegal act, and you still committed a crime.

2025-02-11 16:06:28 UTC

- reply

executive orders cannot suspend laws passed by Congress.

2025-02-03 18:55:09 UTC

- reply

tbf, I have not seen phishing emails trying to get me to visit a super secret cave which totally has snacks and is not full of wasp larva

2025-02-03 18:38:16 UTC

- reply

See this excellent blog post about a list of the problems and design issues with PGP.
And I do agree, at least some points also apply to Mastodon DMs, in general, retrofitting end to end encryption is not a simple undertaking, and usually leads to endless compromises that make the whole thing meaningless. https://www.latacora.com/blog/2019/07/16/the-pgp-problem/

2025-02-01 02:11:21 UTC

- reply

leopards, face, …

2025-01-28 05:27:54 UTC

- reply

great news, I have pretty much fully mitigated the risks posed to us by cryptographically relevant quantum computers!

2025-01-06 22:26:11 UTC

- reply

so far, there is still no evidence of person to person transmission. So I think for the moment the pandemic part 2 risk is contained. Let's hope it stays that way.

2025-01-04 19:09:03 UTC

I have to say, Mastodon's inability to actually reliably fetch content leads to hilarious situations, like a reply to my screenshot about someone earnestly proposing to use Gen AI as a random number generator being confused about why people are talking about what a bad idea it would be to use Gen AI as a random number generator.
Like I get it, distributed computing is hard, but at least if someone expands a thread, try to fetch the whole thread.
https://mastodon.social/@nf3xn/113770165305664382

2025-01-03 21:29:48 UTC

- reply

oh yeah, he founded a company, apparently. It doesn't say if he actually found anyone dumb enough to invest in it, but yeah.
Remember, it's only fraud if you actually understand that what you're doing is nonsense!

2025-01-03 21:11:35 UTC

- reply

that noise would be considered true random noise, but I don't know how many bits it has. While float isn't associative, it's like "mostly" associative, so depending on the condition of the matrix, it should be fairly low.
In any case, if you wanted to use that noise for cryptographic purposes, you'd first have to debias it by running it through a DRBG, and at that point you could just harvest it directly from the GPU for higher quality and performance.
Or query your stupid hardware RNG that literally every modern CPU has built-in.

2025-01-03 20:54:00 UTC

- reply

In case you do not know how GenAI works, here is a very abridged description:
First you train your model on some inputs. This is using some very fancy linear algebra, but can be seen as mostly being a regression of some sorts, i.e. a lower dimensional approximation of the input data.
Once training is completed, you have your model predict the next token of your output. It will do so by creating a list of possible tokens, together with a rank of how good of a fit the model considers the specific token to be. You then randomly select from that list of tokens, with a bias to higher ranked tokens. How much bias your random choice has depends on the "temperature" parameter, with a higher temperature corresponding to a less biased, i.e. more random selection.
Now obviously, this process consumes a lot of randomness, and the randomness does not need to be cryptographically secure, so you usually use a statistical random number generator like the Mersenne twister at this step.
So when they write "using a Gen AI model to produce 'true' random numbers", what they're actually doing is using a cryptographically insecure random number generator and applying a bias to the random numbers generated, making it even less secure. It's amazing that someone can trick anyone into investing into that shit.

2025-01-03 20:46:33 UTC

I was forwarded this screenshot and it just is living rent free in my head right now.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/766/372/583/509/013/original/558b18b47adc8848.jpeg

2024-12-20 00:33:13 UTC

The tradition is only known as "the holidays" to most, but it's important to remember what we are celebrating this time of year: the Herculean effort to fix the log4j vulnerability caused by needless use of JNDI.

2024-12-13 16:42:37 UTC

- reply

Here is @npub1jzt…jnwm's very appropriate response.
https://mailarchive.ietf.org/arch/msg/tls/sEre58h7AHwzZOGH_P6TFGYFGQQ/

2024-12-13 16:14:36 UTC

At this point, the IETF might require an anti-SLAPP rule, disallowing participants threatening other participants or the IETF with frivolous lawsuits from taking part in the standards process.

2024-12-12 00:51:59 UTC

python3: Syntax error: source code cannot contain null bytes
Me: can you be cool just this one time?!?

2024-12-04 22:32:56 UTC

Some people, mostly figments of my imagination: "Why is TLS calling everything a group, isn't that inaccurate when it comes to ML-KEM?"
Me: "a module is a group, by definition"
Some people: "can we at least agree on not calling it a curve then?"
Me: "Technically, Z[X]/(X²⁵⁶ + 1) has Krull dimension one, so it's fair to say that Spec Z[X]/(X²⁵⁶ + 1) is a curve, and ML-KEM is operating on a vector bundle over a curve"

2024-11-23 17:50:39 UTC

@npub184f…pnjc, reviewing a resume, on a Saturday morning, while still in bed: this candidate's work experience is from September 2025 to present!
Me: you should tell them they're hired, start date is November 10th 2024, three unexcused consecutive days of absence are considered a resignation.

2024-11-12 14:20:24 UTC

https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/470/416/249/073/269/original/c44cb576c76e3701.jpg

2024-11-07 12:17:38 UTC

Quote: "We thought the internet was for porn, but it turns out it's for certificates."

2024-11-07 11:35:28 UTC

All other philosophies of mathematics: all hash functions have collisions! And trivially so due to the Pigeon Hole Principle!
Ultra finitist: cryptographically secure hash functions are injective 😎

2024-11-04 08:24:06 UTC

Damn, IETF is really stepping up enforcement.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/423/716/780/004/357/original/c13f042a84e2ee7e.jpg

2024-11-03 18:11:46 UTC

Hulu fucking shit, WaPo headline writer. Holy. Fucking. Shit.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/420/363/078/007/338/original/48fe1690d5ffd607.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/420/363/567/792/781/original/0851c536941fbb34.png

2024-10-27 12:38:41 UTC

Behold! The Internet.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/379/421/091/201/191/original/3f06b924a34670d6.jpg

2024-10-27 09:54:43 UTC

"Death by chocolate" is just the more extreme form of "pain au chocolate"

2024-10-21 11:02:20 UTC

There are two types of freezes in software engineering:
The first one is around the Thanksgiving to Christmas holidays, usually demanded by the business to increase reliability.
The second one is in the attached picture.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/345/070/209/669/393/original/a87127584e02b466.png

2024-10-09 22:09:02 UTC

- reply

how about:
1. Absorb the current state of the deck into SHAKE256.
2. Run Fisher-Yates, by squeezing and rejection sampling the XOF output for the "random" numbers.
Slightly complicated to run in real life, but very easily extendable to a randomized shuffle by also absorbing some randomness in the beginning!

2024-09-30 23:11:06 UTC

- reply

without saving needs an exclamation mark, and I think ZZ saves the file as well, so it would not be correct.

2024-09-26 19:30:32 UTC

There should be a book titled "So you want to build a PKI".
It should contain helpful advice on woodworking, sustenance farming, and similar relevant topics.