Post

#realworldcrypto

Next up, 'Encryption in the microarchitectural world', presented by Ping-Lun Wang #realworldcrypto

microarchitectural 'weird machines' #realworldcrypto

#realworldcrypto

#realworldcrypto

#realworldcrypto

#realworldcrypto

#realworldcrypto

We can construct weird machines that work across processor classes, despite small changes in microarchitectures #realworldcrypto

END OF DAY 1 #realworldcrypto

DAY 2 Next up is 'Deploying Research: On Building and Shipping an Anonymous Whistleblowing System', presented by Daniel Hugenroth #realworldcrypto

Implemented and deployed in the Guardian app on iOS and Android #realworldcrypto

#realworldcrypto

Really want boring simple cryptography with few assumptions; used Rust bc strong typing enabled misuse-resistant API design, and performance came for free #realworldcrypto

How do we bootstrap trust in the org key? It helps to be part of a long-trusted publication #realworldcrypto

'Words matter' #realworldcrypto

When sufficiently motivated, users do read the manual #realworldcrypto

Awesome #realworldcrypto

Secure elements are great tools...except they don't expose auth attempt counters, nor enforce timeouts (they are reserved for the operating system) #realworldcrypto

RainbowSloth key stretching scheme #realworldcrypto

Work with actual UX researchers; in-person user testing; #realworldcrypto

Speaking of SecureDrop, next up is 'SecureDrop Next Generation: Lessons from a Decade of Deployment', presented by Rowen Shane, Shannon Veitch #realworldcrypto

Uses Tor, PGP encryption, #realworldcrypt