« earlier | later » Page 8 of 11
A formally verified implementation of TLS. (Being written in F# means it's a bit impractical to use as a library, though...)
to cryptography formal-methods security tls verification ... on 28 April 2014
Practical recommendations for TLS settings.
to cryptography security ssl tls ... on 28 April 2014
Patterns for secure cryptographic software (e.g. same comparisons).
to cryptography patterns programming safety security ... on 27 April 2014
Diffie Hellman and TLS with nonsense parameters - Hanno's blog
Apparently quite a lot of TLS implementations will happily accept 15 as a prime for DH key exchange. Presumably even if they were checking you could rely on the probabilistic test too...
to cryptography dh prime security ssl testing tls ... on 16 April 2014
Embedded in Academia : A New Development for Coverity and Heartbleed
What Coverity is doing to detect the Heartbleed problem (in short: treating n2hs-style functions as generating tainted results).
to coverity security ssl static-analysis tls ... on 14 April 2014
Generating randomly-varied certificates and comparing how different implementations respond to them.
to ca certificate papers security ssl testing tls ... on 13 April 2014
ImperialViolet - Apple's SSL/TLS bug
The famous copy-and-paste error.
An autoconf-ised version of the NaCl cryptography library. Looks worth playing with!
to api autoconf crypto djb nacl network security software ... on 17 January 2014
Eben Moglen: Snowden and the Future
Eben Moglen is very angry.
to freedom politics security snowden ... on 15 December 2013
About Crossbear | pki.net.in.tum.de|crossbear.org
"Crossbear is a tool that aims to detect and localise Man-in-the-middle (MitM) attacks on the SSL/TLS [and SSH] protocols." It works by comparing the certificate you get with what others got from different locations. (I imagine CDNs will break this as usual...)
to ca certificate security ssh ssl tls ... on 14 December 2013
« earlier | later » Page 8 of 11
tasty by Adam Sampson.