Collaborate Disseminate
After reading a blog post about the new Roughtime protocol, I am not convinced of the original premise that shorter certificate lifetimes increase security. The claim is that a shorter time somehow reduces the exposure if a secret key is c… Continue reading How do short lived certificates increase security?
We will have a symmetric key arriving in three component parts. Once all parts arrive, the key custodians will get together for a ceremony where each enters their part of the key into a secured system. This system will XOR the parts toge… Continue reading Is there a standard checksum for verifying multipart key fragments?
The BlueBorne vulnerability was announced on September 12, 2017. It’s a family of attacks against several implementations of the Bluetooth protocol that enable full compromises of various Bluetooth stacks, including Linux Bl… Continue reading How will we stop BlueBorne on older devices?