str4d 🛡️

480 Followers
239 Following
276 Posts
Zcash, Rust 🦀 cryptography, privacy, zero knowledge.
LocationInternet, ARPA
Website / Blueskyhttps://str4d.xyz
cohosthttps://cohost.org/str4d
Twitterhttps://twitter.com/str4d

Apple requires clients to be authorized before using #PrivateRelay, but doesn't want to link that authorization to the client's relay activity. That's great! This is what #PrivacyPass enables you to do! More people should do this!

I'm sad that part of that authorization is baked-in geoblocking restrictions, but I'm guessing that was a necessary restriction in order for websites to not block the egress relay IPs (which does occur to #Tor exit nodes).

#RealWorldCrypto

Apple describing their #PrivateRelay system (two-hop client IP privacy).

Tunnel establishment looks pretty similar to #Tor: build the first hop, extend new hops through earlier hops.

#I2P by comparision has single-shot tunnel building: it uses nested encryption to send a single message out, each hop stores its reply in its message layer and forwards it on, and the last hop is given a different tunnel to send the reply through to reach the client.

https://iacr.org/submit/files/slides/2023/rwc/rwc2023/IT_1/slides.pdf

#RealWorldCrypto

This was a common thread at yesterday's #RealWorldPQC conference as well: hashing is dominating the costs of post-quantum algorithms! (c/f using classical elliptic-curve crypto, where the cost is usually dominated by point addition and scalar multiplication).

https://iacr.org/submit/files/slides/2023/rwc/rwc2023/68/slides.pdf

#RealWorldCrypto #PostQuantum #Dilithium

Rowhammer-assisted attack on FrodoKEM's key generation enables a long-term public key to be permanently and undetectably poisoned.

The engineering to get reliable Rowhammer results within an 8ms keygen window is impressive! Requires access to the memory space in which keygen runs, but that is potentially relevant to deployments in cloud systems.

https://iacr.org/submit/files/slides/2023/rwc/rwc2023/100/slides.pptx

#RealWorldCrypto #Cryptanalysis #PostQuantum #KEM

If you use Rust, then you absolutely need to install the Rust Search Extension (https://rust.extension.sh/).

I haven't used the search side much yet (my muscle memory is still pointing at my custom Firefox search commands), but the visual macro rendering it augments docs.rs pages with is a standout feature.

#rust #rustlang #macro #firefox #chrome #edge #search #extension

Rust Search Extension: The ultimate search extension for Rust

Search docs, crates, builtin attributes, official books, and error codes, etc in your address bar instantly.

Not quite what I intended, GitHub, but cute!

#FlipperZero #dolphin #rust #rustlang #git #github

Initial demo! Save game parsing is working sufficiently well to populate the menu screens. No pixel art yet though 😅

#FlipperZero #ChocoboWorld #FinalFantasy #FinalFantasy8 #rust #rustlang #tamagotchi

One of life's simple pleasures: coming up with branch names.

#rust #rustlang #git #tokio

You know you're having a good day when 13% of the lines added in your refactor are a code comment explaining what the hell is going on.

Welp, I know why the assembly code is so fast now!

I've sketched out the flow graph for just the AVX2 code, and started figuring out what each of the steps does. Most of the unlabelled steps are stuff like "9 ChaCha rounds, poly_add, 8 ChaCha rounds, poly_stage1_mulx, ...".

You can't distinguish the ChaCha20 and Poly1305 parts; they are interleaved far more tightly than the modular compositional code I've been trying to write. The only piece that stands out is... the associated data!