@soatok.blog.category.cryptography@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Cryptography, as well as cryptanalysis and various topics related to the two.
Site URL: soatok.blog/category/cryptography
Feed URL: soatok.blog/feed
Posts: 10
Followers: 1
The Long Tail of Work Left Until ActivityPub Has E2EE
https://soatok.blog/2026/07/15/the-long-tail-of-work-left-until-activitypub-has-e2ee/
Published: July 15, 2026 20:12
Separate from my proposal for key transparency for the Fediverse (which I’ve certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for ActivityPub. The two projects are mostly being developed independent of…
Soatok’s Informal Guide to Threat Models
https://soatok.blog/2026/06/30/soatoks-informal-guide-to-threat-models/
Published: June 30, 2026 09:58
After a long day of exhausting conversations about Hybrid Post-Quantum Cryptography, random jackasses trying to play gotcha with endpoint attacks against end-to-end encrypted messaging apps, and message board discussions in the wake of dumb politicians…
Hybrid Constructions: The Post-Quantum Safety Blanket
https://soatok.blog/2026/04/13/hybrid-constructions-the-post-quantum-safety-blanket/
Published: April 13, 2026 15:10
The funny thing about safety blankets is they can double as stage curtains for security theater. “When will a cryptography-relevant quantum computer exist?” is a question many technologists are pondering as they stare into crystal balls or entrails. Two…
Cryptography Engineering Has An Intrinsic Duty of Care
https://soatok.blog/2026/02/25/cryptography-engineering-has-an-intrinsic-duty-of-care/
Published: February 25, 2026 21:57
To understand my point, I need to first explain three different cryptography attack papers / blog posts. I promise this won’t be boring. Three Little Disclosures Misuse-Prone Ciphers For All In a blog post titled Carelessness versus craftsmanship in…
Cryptographic Issues in Matrix’s Rust Library Vodozemac
https://soatok.blog/2026/02/17/cryptographic-issues-in-matrixs-rust-library-vodozemac/
Published: February 17, 2026 23:44
Two years ago, I glanced at Matrix’s Olm library and immediately found several side-channel vulnerabilities. After dragging their feet for 90 days, they ended up not bothering to fix any of it. The Matrix.org security team also failed to notify many of the…
Is End-to-End Encryption Optional For Large Groups?
https://soatok.blog/2026/02/14/is-end-to-end-encryption-optional-for-large-groups/
Published: February 14, 2026 16:54
One of the recent topics in Messaging App Discourse is whether it makes sense to prioritize End-to-End Encryption (E2EE) when searching for an alternative to Discord. Who’s Saying “No”? I’m going to quote 0xabad1dea here, because she is awesome and…
On Discord Alternatives
https://soatok.blog/2026/02/11/on-discord-alternatives/
Published: February 11, 2026 18:01
Next month, Discord is going to start requiring age verification. The backlash from gamers everywhere has been predictable and justified. I guess their company name checks out. I’ve had a few people reach out to me because of my prior vulnerability…
Software Assurance & That Warm and Fuzzy Feeling
https://soatok.blog/2026/01/15/software-assurance-that-warm-and-fuzzy-feeling/
Published: January 15, 2026 13:49
If I were to recommend you use a piece of cryptography-relevant software that I created, how would you actually know if it was any good? Trust is, first and foremost, a social problem. If I told you a furry designed a core piece of Internet infrastructure,…
Practical Collision Attack Against Long Key IDs in PGP
https://soatok.blog/2026/01/07/practical-collision-attack-against-long-key-ids-in-pgp/
Published: January 7, 2026 19:12
In response to the GPG.Fail attacks, a Hacker News user made this claim about the 64-bit “Long Key IDs” used by OpenPGP and GnuPG, while responding to an answer I gave to someone else’s question: OK, to be clear, I am specifically contending that a key…
Everything You Need to Know About Email Encryption in 2026
https://soatok.blog/2026/01/04/everything-you-need-to-know-about-email-encryption-in-2026/
Published: January 4, 2026 22:02
If you think about emails as if they’re anything but the digital equivalent of a postcard–that is to say, they provide zero confidentiality–then someone lied to you and I’m sorry you had to find out from a furry blog that sometimes talks about applied…