AES-GCM - SudoSecurity

SudoSecurity

Sign in Subscribe

AES-GCM

A collection of 6 posts

Claude Mythos vs. HAWK and AES: What It Found

Claude Mythos vs. HAWK and AES: What It Found

Claude Mythos halved HAWK's effective key strength and sped up an AES attack 200-800x. What the math actually shows, and what it doesn't mean yet.

CVE-2026-33032: The nginx-ui MCP Vulnerability That Hands Attackers Full Server Control

CVE-2026-33032: The nginx-ui MCP Vulnerability That Hands Attackers Full Server Control

CVE-2026-33032, dubbed MCPwn, is a CVSS 9.8 authentication bypass in nginx-ui's MCP integration that lets any attacker on the internet restart your Nginx server, rewrite your configs, and intercept all traffic -- in two HTTP requests, no credentials required. Roughly 2,700 instances are exposed.

Implementing RSA, AES-GCM, and a TLS 1.3 Handshake from Scratch in Python

Implementing RSA, AES-GCM, and a TLS 1.3 Handshake from Scratch in Python

A deep-dive into the full cryptographic stack powering every HTTPS connection — RSA-OAEP, AES-GCM, ECDHE key exchange, and a working TLS 1.3 handshake simulation, all built in pure Python from first principles.

The CPU-ocalypse Is Here, and the AI Industry Walked Right Into It

Hardware Featured

The CPU-ocalypse Is Here, and the AI Industry Walked Right Into It

For three years the AI industry watched GPUs. Nobody was watching the CPU. Now Intel is warning of six-month lead times, AMD has blown past expectations, and the chip everyone assumed would always be available has become the new bottleneck in the biggest infrastructure buildout since the internet.

What is Encryption? The Math That Keeps Your Data Private

What is Encryption? The Math That Keeps Your Data Private

Encryption transforms readable data into unreadable ciphertext that only someone with the right key can reverse. It's what makes HTTPS, messaging apps, banking, and password storage work. Here's how it actually functions.

Ask Java for AES and You Get ECB. Nobody Warns You.

Ask Java for AES and You Get ECB. Nobody Warns You.

Cipher.getInstance("AES") compiles, runs, encrypts, decrypts, and hands you the weakest mode in the box. Here is the OpenJDK source that makes that decision, and the line where ECB gets chosen for you.