Cryptography RSA Is Simple. Deploying RSA Correctly Almost Never Is. The capstone to our RSA series. The math checks out. Shipping it as written gets you breached. This is the nineteen-year-old attack that proves it, and what belongs in production instead.
Cryptography RSA in JavaScript Part 2: The JWT Is Where You'll Actually Meet It Most JavaScript developers never call an RSA function directly. They verify an RS256 token, and two classic attacks turn that into an authentication bypass — both demonstrated here, both fixed by one line.
Cybersecurity Google and Cloudflare Set a 2029 PQC Deadline. The Rest of Big Tech Did Not. Two papers dropped at the end of March. Both said the same thing in different ways: the quantum threat to elliptic curve cryptography is closer than we thought. How close? The kind of close that made Google set an internal deadline five years ahead of what the US government asked
Artificial intelligence Claude Mythos Hacked Every Major OS, Escaped Its Sandbox, and Emailed a Researcher Eating a Sandwich. We Need to Talk. I use AI as a tool. I'll say that upfront. Claude helps me write frontends faster. It handles search queries that Google stopped being useful for three years ago. I hand it boilerplate I've written by hand a thousand times and I get time back. That&
Cybersecurity What is Encryption? The Math That Keeps Your Data Private Encryption transforms readable data into unreadable ciphertext that only someone with the right key can reverse. It's what makes HTTPS, messaging apps, banking, and password storage work. Here's how it actually functions.
Cryptography RSA Signatures: The Version in Most Tutorials Is Forgeable Signing is encryption with the keys swapped, and that symmetry is exactly what makes the naive implementation breakable. Here are two forgeries executed against textbook RSA signatures, and what PSS does that hashing alone cannot.
Cryptography RSA in JavaScript: Your Numbers Are Too Small JavaScript cannot do RSA with numbers. Not slowly, not imprecisely — at all. The largest modulus a Number can handle is 26 bits and RSA needs 2048, and the failure is silent. Here's the implementation that works and why.
Cryptography Ask Java for AES and You Get ECB. Nobody Warns You. Cipher.getInstance("AES") compiles, runs, encrypts, decrypts, and hands you the weakest mode in the box. Here is the OpenJDK source that makes that decision, and the line where ECB gets chosen for you.
Cryptography Featured RSA Part 3: Your Correct Implementation Still Leaks the Key Key generation works, encryption round-trips, the math is provably right — and an attacker can still recover the private key by timing your decryptions. Here are both defenses, measured, with what they actually cost.
Cryptography Featured RSA Part 2: Real Primes, Real Text, and a Bug That Eats Your Data Part 1 used 15-bit primes and only encrypted integers. Making it usable means generating 1024-bit primes and chunking bytes — and the standard way to do the second one silently destroys data on inputs the tests never cover.
Cryptography Featured RSA in Python From Scratch: The Math, the Code, and What Breaks It Every HTTPS connection you have ever made runs on a 1978 paper. You can build the core of it in about fifty lines of Python — and then see exactly why those fifty lines would get you destroyed in production.
