LibreCryptography – Telegram
LibreCryptography
114 subscribers
24 photos
5 files
173 links
Aggregating and Organizing Some Crypto-Related Resources | Under the #librehash brand
Download Telegram
Merlin (weird ass website that apparently is for people that are trying to run from the law [just kidding]); this is zero knowledge proofs and some other other shit that's related or peripherally related to it.

https://merlin.cool/ (kind of weird actually ; one off website, designed in the fashion of the Rust documentation)
Trillian (this one is pretty significant) = https://github.com/google/trillian/

Trillian is an implementation of the concepts described in the Verifiable Data Structures white paper, which in turn is an extension and generalisation of the ideas which underpin Certificate Transparency.
HTTP Signed Exchanges

A signed exchange is a delivery mechanism that makes it possible to authenticate the origin of a resource independently of how it was delivered (this sounds cool but I just need to get more information on what the fuck this actually means)

web.dev = https://web.dev/signed-exchanges/

"Signed Exchanges allow a site to cryptographically sign a request/response pair in a way that makes it possible for the browser to verify the origin and integrity of the content independently of how the content was distributed. As a result, the browser can display the URL of the origin site in the address bar, rather than the URL of the server that delivered the content. Separating content attribution from content distribution advances a variety of use cases such as privacy-preserving prefetching, offline internet experiences, and serving content from third-party caches."
Asylo Dev = asylo.dev

Encrypted enclave applications

1. Integrates with gRPC for easy and secure inter-enclave and external communication

2. Use attestation to verify your enclave's integrity, and cryptographically bind your secrets to identity ACLs for safe storage.

Code for piping this all through Docker can be found here = https://asylo.dev/docs/guides/quickstart.html#what-is-an-enclave
Phenomenal post by this individual regarding potential vulnerabilities in attempting to leverage ed25519 for HD keys (not as straightforwarfd as one would imagine that it is)

https://forum.w3f.community/t/key-recovery-attack-on-bip32-ed25519/44
Key recovery attack on BIP32-Ed25519 (they deserve their fucking credit for this ; just failing to understand why they're so daft in so many other areas of blockchain...just doesn't even make sense really)

https://forum.w3f.community/t/key-recovery-attack-on-bip32-ed25519/44
libp2p TLS = https://github.com/libp2p/go-libp2p-tls (this is the GitHub but there's no documentation that speaks on this as well ; fuck )

There's more information about TLS 1.3 for libp2p contained here = https://github.com/libp2p/specs/blob/master/tls/tls.md [had to find additional information]

Replacement / Currently used in lieu of the TLS that we were looking at above = https://github.com/libp2p/go-libp2p-secio (secio)

More specs on the protocol can be found here = https://github.com/libp2p/specs/blob/master/secio/README.md [SECIO allows participating peers to support a subset of algorithms]
Verifiable Secret Sharing (this is interesting ; another in-depth banger) = https://www.jcraige.com/vss-forgery
In-depth Post That Explains Everything That One Needs to Know About ed25519 Down to the Nucleus (gets into clamping / subgroups / all of that) = https://www.jcraige.com/an-explainer-on-ed25519-clamping
Threshold BLS Signatures (feel like we haven't gotten into blind signatures a lot lately) = https://www.jcraige.com/threshold-bls-signatures
Showing all of the algorithms that Cloudflare supports for DNSSEC (not ed448 ; few if any resolvers support ed448 - algorithm448 / naturally uses shake256 as well // the parameters of that curve seem to be problematic [also the strength of ed448 could pose an issue as well given U.S. export restrictions + that of other countries]

https://community.cloudflare.com/t/support-for-ed448-dnssec-signature-algorithm/71494
Edwards' Curve Resources

There are plenty of resources out there for ed25519, but it seems that there are few resources dedicated to ed448, so this list will make a concerted

1. IETF Outline / Guidance for ed448 Deployment (as well as ed25519)

2. Async SSH (allows for ed448 to be used ; this is not enabled with OpenSSH to the best of my knowledge) = https://asyncssh.readthedocs.io/en/stable/#interactive-input

3. https://github.com/otrv4/otrv4/blob/master/otrv4.md

4. BIP 32 With ed25519 = https://cardano.org/assets/Ed25519_BIP.pdf

4a. BIP32 with ed25519 keys ; GUI interface included here = https://superdarkbit.github.io/nano-bip32-ed25519/ (should look closely at the spec to ensure that these keys are being generated in a secure manner here ; there is nuance in the generation hierarchical deterministic key wallets when using Edwards' curves vs. secg curves)