The Curious Engineer

All blogs / Security

cryptologie.net

cryptologie.net

David Wong writes about cryptography, security, and programming.

SecurityMath

Posts
637 from 29 May 2013 to 21 Oct 2026
Posting
monthly (11 in the last year)
Kind
personal blog
Feed
https://cryptologie.net/feed.xml

2026 11

  1. The API is English, the deterministic-agentic border is shifting
  2. this video
  3. Neha Narula
  4. open-source
  5. published
  6. http://play.plaidctf.com/
  7. Pohlig-Hellman Algorithm
  8. Discrete Logarithm problem
  9. binary exponentiation
  10. Looking for a cryptography audit? Here's where to go
  11. What's next after soulbound NFTs? Self-willed NFTs via zkML

2025 15

  1. How to Make it in a Security Team
  2. Getting Into The Zone
  3. Intuitions Behind the Range Proofs of Bulletproof: Part 2
  4. Halo2's Elegant Transcript As Proof
  5. High-level intuitions for the Bulletproofs/IPA protocol
  6. Intuitions Behind the Range Proofs of Bulletproof: Part 1
  7. New cryptologie.net
  8. Weaponizing AI Assistants: With Their Permission
  9. What are Schwartz-Zippel circuits? How do they relate to iterative constraint systems?
  10. Short Note On Montgomery Reduction: Why Operating Modulo b?
  11. Still confused by Plonk's permutation?
  12. Partial evaluations and linearization
  13. The trap of the top-down approach
  14. My company is looking for interns
  15. Vlogging attempts

2024 19

  1. I like whiteboards
  2. Don't go in debt, and other mistakes not to make when receiving stocks or crypto tokens as payment
  3. Some news from founding a startup (zkSecurity)
  4. Two And A Half Coins #8 - Consensus protocols, Bitcoin, Fastpay, and Linera with Mathieu Baudet
  5. Two And A Half Coins #9 - Tradfi, Banks, SWIFT, CBDCs, with Xavier Lavayssière and Clément Berthou
  6. They're all SNARKs
  7. The case against slashing?
  8. Interactive Arithmetization and Iterative Constraint Systems
  9. Two And A Half Coins #7 - It's time to talk about Ethereum
  10. Two And A Half Coins: Exploring Layer 2 Solutions on Bitcoin with Kevin Hurley and Alex Akselrod
  11. An introduction to multi-party computation (videos)
  12. Pedersen commitment
  13. Plonk's permutation, the definitive explanation
  14. Are you into finding bugs and learning ZK? Here's a challenge for you
  15. Want to learn more about zkBitcoin? I've made some videos
  16. Zero-knowledge proofs in stateful applications
  17. Verifying zero-knowledge proofs on Bitcoin?
  18. What's out there for ECDSA threshold signatures
  19. The ZK update conflict issue in multi-user applications

2023 19

  1. Cairo's public memory
  2. How STARKs work if you don't care about FRI
  3. A journey into zero-knowledge proofs
  4. I talked about ZK security on the first episode of Node Guardians season 2!
  5. Mum, I was on the zkpodcast!
  6. First zksecurity public report is out!
  7. The zero-knowledge attack of the year might just have happened, or how Nova got broken
  8. What's happening in the round 5 of PlonK?
  9. zksecurity.xyz
  10. Two And A Half Coins episode 5: Bitcoin transactions, the Bitcoin script and UTXOs
  11. Paillier's additively homomorphic cryptosystem
  12. Learn How to Code a zkApp Hello World With Me Using TypeScript
  13. zkVMs are cool, but have you heard of zkCPUs?
  14. Dealing with the unknown
  15. Real-World Cryptography, a bit more than a year later
  16. A new series of videos on zero-knowledge proof composition and recursion (part 1)
  17. Contributing to open source projects and about learning zero-knowledge proofs
  18. Learning OCaml for non-functional language people like me
  19. Permutation-Based Crypto 2023

2022 36

  1. Creating cryptographic protocols with multiplications
  2. State monads in OCaml
  3. ZK Security - A Whole New Layer to Worry About
  4. Some unrelated rambling about counter strike
  5. Simple introduction to monads in OCaml
  6. The intuition behind the sum-check protocol in 5 minutes
  7. Intro to Kimchi @ 0xPARC CARML Weekend
  8. What's the deal with zkapps?
  9. OCaml wishlist
  10. noname developer update #4: showcasing method calls
  11. noname developer update #3: user-defined functions
  12. noname developer update #2: structs are working!
  13. noname developer update #1: learning about zero-knowledge apps and circuits using the noname educational DSL
  14. Two And A Half Coins episode 4: More on Bitcoin: 51% attacks and Merkle trees!
  15. the noname language, a toy DSL for zkapps
  16. I'm launching a podcast: Two And A Half Coins
  17. JournalDuCoin: Cryptographie, VMs & circuits
  18. CFF22 trip report
  19. What are zkVMs? And what's the difference with a zkEVM?
  20. Panel: how ZKPs and other advanced cryptographic schemes can be deployed to solve hard problems in decentralized systems
  21. Smart contracts with private keys
  22. The Web PKI 2.0
  23. ZK FAQ: What's a trusted setup? What's a Structured Reference String? What's toxic waste?
  24. What's two-adicity?
  25. Are system thinkers right? And why I left security
  26. Linearization in Plonk and Kimchi. Why?
  27. Kimchi at ZK Summit 7
  28. My friends always ask me what the heck is blockchain. It’s simple really!
  29. Kimchi: The latest update to Mina's proof system
  30. The code is the specification? Introducing cargo spec
  31. Contributing to open source while learning Rust and zero-knowledge proofs
  32. Looking for a cryptography engineer job? Interested in zero-knowledge proofs?
  33. Libra/Diem's second life as Aptos
  34. Supply chain attacks are the new big thing
  35. How to write a tic-tac-toe zkapp
  36. In response to Moxie's doubts on web3, and about ultra light clients

2021 34

  1. The Cairo SNARK CPU architecture in one example
  2. I got interviewed by Quartz
  3. No, cryptocurrencies are not just about Bitcoin: Part 1
  4. ZK HACK: 1st puzzle write up
  5. David Wong's 7 rules of programming
  6. Project Memento: An NFT art project
  7. The Real-World Cryptography book is done and shipping!
  8. How does PLONK work? Part 11: Our final protocol! (Without the copy constraints)
  9. How does PLONK work? Part 10: The Kate polynomial commitment scheme
  10. How does PLONK work? Part 2: An overview
  11. How does PLONK work? Part 1: What's PLONK?
  12. How does PLONK work? Part 5: From arithmetic circuits to constraint systems
  13. How does PLONK work? Part 6: From constraint systems to polynomials
  14. How does PLONK work? Part 8: A polynomial dance
  15. How does PLONK work? Part 7: A sketch protocol with our polynomial
  16. How does PLONK work? Part 9: Our final protocol! (Without the copy constraints)
  17. How does PLONK work? Part 3: Starting with the end: polynomials
  18. How does PLONK work? Part 4: From programs to arithmetic circuits
  19. I wrote about Bulletproofs / inner product arguments (IPA) here in the past
  20. Understanding PLONK
  21. Maller optimization to reduce proof size
  22. Pairing-based polynomial commitments and Kate polynomial commitments
  23. I'm now at O(1) Labs working on Mina protocol!!!
  24. WTF are these security chips?
  25. What is Host Card Emulation (HCE)?
  26. One password to rule them all, single sign-on (SSO) and password managers
  27. Cryptography and assembly code
  28. Key wrapping and nonce-misuse resistance
  29. The Let's Encrypt duplicate signature key selection attack
  30. Signature forgeries in Golang ECDSA library?
  31. A flamegraph of Real-World Cryptography
  32. ''This destroyes the RSA cryptosystem''
  33. I was on the Technoculture podcast
  34. I'm on the develomentor podcast to talk about what applied cryptography is!

2020 25

  1. I'm on the Cyber Security Interviews podcast!
  2. How do people find bugs?
  3. The book is finished, well sort of...
  4. I'm on the Real World Cryptographers Podcast
  5. The missing explanation of zk-SNARKs: Part 2
  6. The missing explanation of ZK-SNARKs: Part 1
  7. Cute Cryptography Stories
  8. Why not rust for security?
  9. Why I’m Writing A Book On Cryptography
  10. Anyone could have obtained a valid ID token for any Apple account, just by querying Apple’s servers
  11. User authentication with passwords, What’s SRP?
  12. Coronavirus and cryptography
  13. Alternatives to PGP
  14. Hardware Solutions To Highly-Adversarial Environments Part 3: Trusted Execution Environment (TEE), SGX, TrustZone and Hardware Security Tokens
  15. Hardware Solutions To Highly-Adversarial Environments Part 2: HSM vs TPM vs Secure Enclave
  16. Hardware Solutions To Highly-Adversarial Environments Part 1: Whitebox Crypto vs Smart Cards vs Secure Elements vs Host-Card Emulation (HCE)
  17. Real World Crypto 2019 registrations open
  18. What Are Short Authenticated Strings (SAS)?
  19. EdDSA, Ed25519, Ed25519-IETF, Ed25519ph, Ed25519ctx, HashEdDSA, PureEdDSA, WTF?
  20. What's a key exchange?
  21. Authentication What The Fuck: Part II
  22. What's a symmetric password-authenticated key exchange (sPAKE) and how does SPAKE2 work?
  23. Authentication, What The Fuck?
  24. Messaging Layer Security: A Few Thoughts
  25. A history of end-to-end encryption and the death of PGP

2019 20

  1. Difference between shamir secret sharing (SSS) vs Multisig vs aggregated signatures (BLS) vs distributed key generation (dkg) vs threshold signatures
  2. Writing a book is hard
  3. Algorand's cryptographic sortition
  4. What's my birthday?
  5. My book Real World Cryptography is out in pre-access
  6. Libra: a usable cryptocurrency
  7. A book in preparation
  8. Why 2f+1
  9. New Job, New Design
  10. Disco: whitepaper
  11. Bits and Bytes ordering in 5 minutes
  12. [paper review] A faster, more efficient cryptocurrency
  13. What is the BLS signature scheme?
  14. Database Encryption
  15. On Doing Research
  16. Speed and Cryptography
  17. QUIC + Noise = nQUIC
  18. Developers Are Not Idiots
  19. !(Spotting the promising cryptography-related start ups)
  20. Proof of Elgamal's semantic security using a reduction to DDH

2018 28

  1. A Readable TLS 1.3 Specification
  2. Public Audits
  3. The 9 Lives of Bleichenbacher's CAT: New Cache ATtacks on TLS Implementations
  4. Browser End-to-End Encryption
  5. End to End encryption for Yahoo mail users (plugin)
  6. EmbeddedDisco
  7. The Cryptography Services of NCC Group is looking for summer interns!
  8. About Disco (again)
  9. Encrypting a file
  10. Want to implement something fun today?
  11. Tamuro meetup in London tonight
  12. Advances in permutation-based cryptography
  13. Smart Contract Security @ Black Hat Asia
  14. Facebook's TLS 1.3 library
  15. Problems that UDP and only UDP has
  16. TLS 1.3 is out!
  17. WhatsApp, Secure Messaging, Transcript Consistency and Trust in a group chat
  18. QUIC Crypto and simple state machines
  19. About Bitcoin Transactions
  20. CryptoMag is looking for articles
  21. Tamuro meetup in London
  22. Smart Contract Security @ IT Camp
  23. Ethereum Smart Contract Security @ IT Camp - Cluj Napoca
  24. Decentralized Application Security Project
  25. Fed Up Getting Shattered and Log Jammed? A New Generation of Crypto Is Coming
  26. Two Student Tickets for Black Hat Asia in March 2018
  27. On Real World Crypto and Secure Messaging
  28. Updates on How to Backdoor Diffie-Hellman

2017 66

  1. Best crypto blog posts of 2017
  2. SHAKE and SP 800-185
  3. Briefs about crypto
  4. Real World Crypto: Day 1
  5. Real World Crypto 2018
  6. Noise protocol framework
  7. Strobe protocol framework
  8. Introducing Disco
  9. My talk on SHA-3 and derived functions at DEF CON 25
  10. SHA-3 vs the world @ OWASP London
  11. Speaking at OWASP
  12. Ethernaut CTF walk through
  13. Noise Plug-and-play Implementation in Golang
  14. Speaking at Defcamp
  15. Publishing my smart contract on the main ethereum network
  16. Writing a DAPP for the Ethereum block chain
  17. Attacks on Ethereum Smart Contracts
  18. Posters, figures and graphics
  19. Two Student Tickets for Black Hat Europe in December 2017
  20. Go Assembly by Example
  21. Zero'ing memory, compiler optimizations and memset_s
  22. How did length extension attacks made it into SHA-2?
  23. integer promotion in C
  24. The Strobe Protocol Framework
  25. Interview: How to pique your curiosity in cryptography
  26. SHA-3 vs the world: slides
  27. BEAST: An Explanation of the CBC Attack on TLS
  28. Defcon: SHA-3 vs the world
  29. Real World Crypto: Day 3
  30. KangarooTwelve
  31. DTLS and Finished messages
  32. How are TLS records encrypted?
  33. How big are TLS records during a handshake?
  34. TLS 1.3 - Draft 19
  35. 1/n-1 split to circumvent BEAST
  36. Freak Attack
  37. Crypto training at Black Hat USA
  38. SIMD instructions in Go
  39. Readable implementation of the Noise protocol framework
  40. Noise+Strobe=Disco
  41. SIMD instructions in crypto
  42. Tamarin Prover Introduction
  43. Is Symmetric Security Solved?
  44. A New Public-Key Cryptosystem via Mersenne Numbers
  45. Implementation of Kangaroo Twelve in Go
  46. Maybe you shouldn't skip SHA-3
  47. Loop unrolling
  48. StrobeGo
  49. Crypto Blogging Award 2016
  50. Tamarin looking for sources
  51. How to obtain a nice trace in Tamarin
  52. Bug in KangarooTwelve's reference implementation
  53. Strobe's padding
  54. Tamarin Prover
  55. Keeping up with TLS 1.3
  56. Real World Crypto
  57. A hash function does not provide integrity!
  58. SHAKE, cSHAKE and some more bit ordering
  59. see my video here
  60. Byte ordering and bit numbering in Keccak and SHA-3
  61. SHA-3, Keccak and disturbing implementation stories
  62. One GCM implementation pitfall
  63. NCC Con and the NCC T-shirt
  64. Real World Crypto 2017: Day 3
  65. Real World Crypto 2017: Day 2
  66. Real World Crypto 2017: Day 1

2016 54

  1. About Sweet32
  2. What Diffie-Hellman parameters to use?
  3. Defcon: How to Backdoor Diffie-Hellman
  4. Looking for a crypto intern at Cryptography Services!
  5. tl;dr of the sweet32 attack (On the Practical (In-)Security of 64-bit Block Ciphers)
  6. Common x509 certificate validation/creation pitfalls
  7. Key Compromise Impersonation attacks (KCI)
  8. Fault attacks on RSA's signatures
  9. 64-bit ciphers attack in 75 hours => AES-GCM attack in 75 hours?
  10. Crypto and CHES Debriefing
  11. Security Proofs for Embedded Systems (PROOFS)
  12. CHES 2016 tutorial part 2: Micro-Architectural Side-Channel Attacks
  13. CHES 2016 tutorial part 1: Common Criteria Certification of a Smartcard: A Technical Overview
  14. Whibox part 2: Whitebox Crypto
  15. WhibOx part 3: Attacks on Whitebox crypto
  16. WhibOx part 4: Whitebox crypto, vendors' perspective
  17. Whibox part 1: Indistinguishability Obfuscation
  18. Breaking https' AES-GCM (or a part of it)
  19. How to Backdoor Diffie-Hellman: quick explanation
  20. Generating randomness and you're too close to boot?
  21. Generating one's own elliptic curve.
  22. Blackhat + Defcon
  23. I talked at the NCC Group open forum
  24. How to Backdoor Diffie-Hellman is on ePrint
  25. Interested in Crypto and living in Chicago?
  26. Crypto training at Black Hat US 2016
  27. Referencing eprint papers
  28. How Gavin Andresen was duped into believing Wright is Satoshi
  29. The Noise Protocol Framework
  30. CVE-2016-3959
  31. The Juniper paper is out!
  32. Some Q/A on phone security
  33. Demo of the Diffie-Hellman backdoor
  34. Pollard's p-1 factorization algorithm
  35. To_print
  36. Distinction between the TLS PRF for the Master Key and for the Keys
  37. TLS, Pre-Master Secrets and Master Secrets
  38. Discrete logarithms in Multiplicative prime groups
  39. DROWN attack on OpenSSL
  40. Do people use Socat in real life?
  41. Checking your Diffie-Hellman parameters
  42. NIST and Quantum Computers
  43. Moxie and TLS
  44. How does the Mersenne's Twister work?
  45. How to backdoor Diffie-Hellman, lessons learned from the Socat non-prime prime
  46. Socat new DH modulus
  47. Openssl dhparam 2048
  48. Another look on Public key crypto
  49. complexities of attacks on MD5 and SHA-1
  50. Looking for a Boneh and Durfee attack in the wild
  51. Firefox Add-on: Unencrypted Warnings
  52. Real World Crypto: debriefing
  53. Real World Crypto: Day 2
  54. Happy New Year

2015 118

  1. PQCHacks: A gentle introduction to post-quantum cryptography
  2. How to parse scans.io public keys in python
  3. Juniper's backdoor
  4. How to check if a binary contains the Dual EC backdoor for the NSA
  5. Analyze a TLS handshake
  6. Real world crypto day 1
  7. How to efficiently compute a batch GCD
  8. List of terms from "Threat Model for BGP Path Security"
  9. Zeroisation
  10. How not to mess with implementing a stateful signature scheme
  11. Hash-Based Signatures Part IV: XMSS and SPHINCS
  12. Hash-Based Signatures Part II: Few-Times Signatures
  13. Hash-Based Signatures Part III: Many-times Signatures
  14. Hash-Based Signatures Part I: One-Time Signatures (OTS)
  15. What kind of signature for a post-Quantum world?
  16. Multilinear maps
  17. Asiacrypt
  18. Mildly interesting stuff I screenshot
  19. Toilet paper and MIT students
  20. /r/crypto wiki
  21. Time Complexity
  22. Funny cryptographers
  23. About the easiness of SVP
  24. I'm back! Oh and also: my master defense
  25. ECC 2015 in Bordeaux
  26. Factoring RSA Keys With TLS Perfect Forward Secrecy
  27. Types of Cryptography
  28. Explanation of my paper: Timing and Lattice Attacks on a Remote ECDSA OpenSSL Server: How Practical Are They Really?
  29. Timing and Lattice Attacks on a Remote ECDSA OpenSSL Server: How Practical Are They Really?
  30. My RSS Subscriptions
  31. Key Ceremony
  32. I got a job!
  33. Dual EC or the NSA's Backdoor: Explanations
  34. Need helpz for my Master Thesis
  35. Vegas - Part 3: Defcon 23
  36. Lattices and Tikz
  37. Vegas - Part 1: Blackhat 2015
  38. Vegas - Part 2: Blackhat 2015
  39. PBKDF2 Performance Matters
  40. Cryptographic Signatures, Surprising Pitfalls, and LetsEncrypt
  41. Let’s Encrypt Overview
  42. right_encode()
  43. Homomorphic Encryption Vocabulary
  44. How to fairly compare two objects?
  45. Homomorphic Encryption : Part 1
  46. What is GCM (Galois Counter Mode)?
  47. CVE TOMEK
  48. OWASP Chicago
  49. Let's Encrypt Overview
  50. Nist ECC Workshop
  51. Hacking Week 2015 : Crypto 4 Write-Up
  52. Links from the past weeks
  53. The Logjam Attack
  54. Hacking Week 2015
  55. How to compare password hashes in PHP?
  56. Some research on recovering small RSA private keys
  57. Previous Links
  58. Small RSA private key problem
  59. Same RSA modulus and correlated public exponents
  60. Plaid CTF
  61. What are x509 certificates? RFC? ASN.1? DER?
  62. Cryptography Services to audit Let's Encrypt
  63. ASN.1 vs DER vs PEM vs x509 vs PKCS#7 vs ....
  64. Video: How the RSA attacks using lattices work
  65. Hanno Böck: Some tales from TLS
  66. How would you detect an Evil Twin attack, especially in a new environment?
  67. encryption with a one letter XOR? Really?
  68. Breaking beer ciphers
  69. Enough with salts?
  70. Truecrypt report
  71. Unix command of the day: Tee
  72. I'm officialy an intern at Cryptography Services
  73. Cryptool...
  74. Spotlight on an Unprotected AES128 White-box Implementation
  75. Talk: RSA and LLL attacks
  76. Links section
  77. How Enigma Works
  78. Citizen Four
  79. Survey on RSA Attacks using Lattice reduction techniques (LLL)
  80. Implementation of Boneh and Durfee attack on RSA's low private exponents
  81. Top news in 60 seconds from NakedSecurity
  82. Hacking Week CTF starting April the 3rd
  83. Apple rejects Signal 2 from the appstore
  84. Cryptography Services will audit OpenSSL
  85. Pretty diagrams with Tikz in LaTeX
  86. Starfighter
  87. Funny matasano job post
  88. GPS tracking device in real life!
  89. How to memorise a 20 item (and upto 1000 item) grocery list.
  90. The story behind Schneier's law
  91. Kasumi
  92. Invisibility glasses
  93. Keep in touch with crypto
  94. Big Numbers
  95. The ghetto way of extracting the private key of superfish
  96. Using crypto to replace database access.
  97. Babun, Cmder and Tmux
  98. Implementation of Coppersmith attack (RSA attack using lattice reductions)
  99. Nothing up my sleeve numbers
  100. gwern trying to crack DPR's PGP
  101. Vim cheatsheets
  102. A Brief History of NSA Backdoors.
  103. Magma vs Sage vs Pari
  104. Flint vs NTL
  105. Firefox Time Tracker : update 2
  106. Firefox Time Tracker
  107. A tutorial on how to get into an admin account on ANY windows.
  108. Kleptography: hidding a private key in plain sight
  109. Powerful Algorithms too complex to implement (stackexchange)
  110. Explanation of Shellshock
  111. One example of a crypto backdoor: NSA's backdoor in Lotus-Notes
  112. Awk in 20 minutes
  113. How Differential Power Analysis (DPA) works? An explanation of the first paper from Kocher et al (1998)
  114. How facebook hash its passwords
  115. Morse code in a pop song
  116. How does TOR works
  117. How to prepare for interviews?
  118. Sed and Awk tutorials

2014 147

  1. My internship at Cryptography Services in Chicago
  2. Faster Python
  3. Journal of Cryptology & University of Bordeaux
  4. Did Korea hacked Sony?
  5. I've open sourced my tournament app
  6. Pohlig-Hellman Algorithm
  7. Schnorr's Signature and non-interactive Protocols
  8. FAQ on Whitebox Cryptography
  9. This blog now has a rss feed
  10. Sécuday @ Lille on January 16th
  11. Onerng
  12. Git client vulnerability
  13. Awesome nmap cheatsheet
  14. Last exam of my life
  15. Bruce Schneier
  16. [facebook bug bounty] Reading local files from facebook
  17. What might have been going on at Mtgox
  18. Airbus crypto challenge write-up
  19. Is there any particular reason to use Diffie-Hellman over RSA for key exchange?
  20. Transform your messages into spam!
  21. AsiaCrypt 2014
  22. Real Life side-channels attacks
  23. Network/Software Security
  24. Pandoc : Markdown -> LaTeX
  25. How can you tell if a cipher is secure?
  26. Forward Secrecy
  27. Format String, Heap Overflow
  28. Differential Fault Analysis
  29. Myths about /dev/urandom
  30. Plethora of links
  31. Hacking PayPal Accounts with one click
  32. Google: a new kind of Captcha
  33. Hack.Summit()
  34. The Birthday Paradox
  35. ROP and ROPGadget
  36. Software Security course on Coursera
  37. Communication Theory of Secrecy Systems
  38. Cryptography Resources by Matthew Green
  39. Retiring Crypt
  40. DPA: Differential Power Analysis
  41. Launching in 2015: A Certificate Authority to Encrypt the Entire Web
  42. How to deal with multiple passwords
  43. Mathematical “urban legends”
  44. The NSA about academic cryptographers
  45. SineRider: play with functions
  46. Hack Summit
  47. Pseudo Random Number Generators using a block cipher in CTR mode
  48. MicroCorruption
  49. Defcon CTF 2009 write up comic
  50. Bitcoin Romania
  51. Elliptic Curves
  52. Hack of the Day: How do I run untrusted shell code?
  53. POODLE: new attack on SSL
  54. Vim Adventures
  55. Erasmus & Korean
  56. Bitcoin mining by hand
  57. Here we go again
  58. Slim
  59. Rails 4 Tutorial
  60. Unit Tests in Rails
  61. Some Rails' magic.
  62. Ruby on Rails
  63. Badusb
  64. Where have I been?
  65. 80s computer hacking: A Supercut
  66. Write up of the hackMIT admission puzzle
  67. A Stick Figure Guide to the Advanced Encryption Standard (AES)
  68. A Conversation with Elon Musk
  69. Coinbase: 10$ of bitcoins for students in the US
  70. New portfolio
  71. Bruteforce Apr1 hashes.
  72. Find all the pairs in a list that are summing to a known number
  73. I got my first dogecoins today
  74. Notes on ECC (Elliptic Curve Cryptography) & Internship progress
  75. Do you know what Elliptic Curve Cryptography is?
  76. Toom-Cook multiplication for dummies
  77. Why can't I copy PS3 games and play them on another console?
  78. Berlekamp & GO
  79. Ruby, Go, Rust
  80. Weblang
  81. Slides with LaTeX
  82. NAT Masquerade in one picture
  83. Using Google, Facebook (and others?) to DDoS any websites
  84. SSTIC 2014
  85. Lundum Dare about to start
  86. Nodster day 2
  87. Nodster day 3
  88. Nodster (node-webkit)
  89. Procrastination
  90. How to store passwords? Hash or KDF?
  91. LibreSSL
  92. Gröbner basis on numb3rs
  93. Diffie-Hellman, ElGamal and RSA
  94. An awesome explanation of the Fourier Transform
  95. Whitebox Cryptography
  96. How hard is it to find an internship?
  97. NAT with iptables : super fast tutorial
  98. How good is flask?
  99. Bordeaux, one more list
  100. So... The Heartbleed Challenge has been completed
  101. NSA was not aware of the Heartbleed bug
  102. Exams
  103. The Heartbleed Challenge
  104. How Heartbleed works thanks to XKCD
  105. How we got read access on Google’s production servers
  106. Heartbleed already being used to cash bitcoins
  107. My blog
  108. Brackets
  109. Condoleezza Rice join the Board of Directors at Dropbox
  110. Tarsnap: No heartbleed here
  111. Long polling and webhooks
  112. OpenSSL is written by monkeys
  113. Fast Fourier Transform
  114. Heartbleed : serious vulnerability in open SSL
  115. Bitcoins
  116. True randomness... exists?
  117. WPA2 cracked ?
  118. Prezi got pwned
  119. Decentralized Market Place
  120. Just learn Vim
  121. You just went to the Google home page. What just actually happened?
  122. Twitter is giving up on encrypting direct messages...
  123. Hashes, MACs, Signatures
  124. How I explained REST to my wife
  125. I made a LTC chart
  126. Atom invites
  127. Satoshi is actually Satoshi
  128. Elliptic Curve Cryptography
  129. Matt Whitlock - Elliptic Curve Cryptography, the Foundation of Bitcoin
  130. No ads, just make your user mine!
  131. Nyan Coin
  132. Hacking Week
  133. Bitpay launches Bitcore
  134. Coinbase organizing a hackaton
  135. Silk Road 2 : no more bitcoins!
  136. Bitcoin Transaction Malleability explained
  137. Bitcoin Exchanges Under ‘Massive and Concerted Attack’
  138. Mtgox statement and transaction malleability
  139. OWASP Cheat Sheet Series
  140. How I hacked Github again
  141. Why are people so bothered about truly random numbers?
  142. Manually making a transaction in bitcoins
  143. Belgian professor in cryptography hacked
  144. How I Lost My $50,000 Twitter Username
  145. Initial Permutations in DES
  146. Jamaican team raises $25,000 in Dogecoin
  147. Press talking about me

2013 43

  1. What is the best tool?
  2. Monty Hall visualization
  3. Markdown
  4. Cameron Winklevoss AMA on Reddit
  5. Reed-Solomon
  6. NP Complexity
  7. I've been interviewed by Direct Matin Bordeaux
  8. Storing plain passwords in cookies
  9. ThePirateBay.sx -> ThePirateBay.ac
  10. 塞翁失马
  11. Bitcoin 0.8.6 Released, Updates to Block Size Limits, Free Transactions, OSX Bugs
  12. Have you been pwned?
  13. Someone Bought A Tesla Using Bitcoin
  14. What are litecoins?
  15. Sheep Market Place creator revealed?
  16. Bitcoin crashing
  17. Claude Shannon
  18. Canal discret sans mémoire
  19. bordeaux1 url
  20. Litecoin is growing fast, faster than bitcoin
  21. To the moon
  22. Bitecoin and Litecoin reach a new peak!
  23. Satoshi's original paper on Bitcoin
  24. Newegg trial: Crypto legend takes the stand, goes for knockout patent punch
  25. NSA infected 50,000 computer networks with malicious software
  26. Réseaux
  27. Hack of Cupid Media dating website exposes 42 million plaintext passwords
  28. Visual Cryptography
  29. Sudoku Solver
  30. One more list
  31. AI Startup Says It Has Defeated Captchas
  32. For Sale: 50,000 Bitcoins
  33. What is it like in Bordeaux?
  34. SecureDrop
  35. New effort to fully audit TrueCrypt raises $16,000+ in a few short weeks
  36. Elliptic Curve Cryptography (ECC)
  37. RSA-210 has been factored!
  38. Dread Pirate Roberts' journal?
  39. Silk Road caught, Tor compromised?
  40. Dread Pirate Roberts response to Atlantis' shutdown
  41. Moving to Bordeaux !
  42. Here we go
  43. VPN hacked and server used to mine bitcoins

Undated 2

  1. resume here
  2. here are the slides