Collaborate Disseminate
If you are writing a program that has a technical user base, it is a nice touch to make the program scriptable. In fact, you might want to do the hard work in a programming language and then use your scripting language to build out features. In theory, this should …read more
Continue reading Add Scripting To Your C++ Programs With ChaiScript
Is the TinyCrypt library side channel resistant.
I found a mentioned in the “Genral Remarks” on github. But it is mentioned that it is not fully side channel resistant.
Does anyone know the extend of the protection?
Can w… Continue reading Side channel resistant of Intel TinyCrypt library
While reading about how to properly ask a user for a password in CLIs, this SO answer and this SSE answer recommend the usage of unistd’s getpass.
However, this function is being documented as obsolete and multi-thread unsaf… Continue reading Why is unistd’s getpass unsafe?
I’m trying to exploit a simple buffer overflow with gdb and peda, I just want to rewrite the return address with the address of a function of the program. I can easily do it with python2 but it seems to be impossible with python3, the retu… Continue reading Buffer overflow exploit with python3 : wrong return address written
I’m actually busy with learning more about buffer overflows. I read some interesting tutorials and just got the basic idea behind it. I tried to produce a vulnerable c++ file to test my knowledge against it, but it seems like… Continue reading Why is this not a buffer overflow?
First, some background: I’ve got a C++-based client/server system that uses the OpenSSL C library to encrypt the client/server connections. This is done in (what I believe is) the canonical OpenSSL fashion; that is to say, … Continue reading Client-only authentication instead of server-only authentication, using OpenSSL
In computer security and control-flow integrity (CFI) there are two terms: code-pointer separation (CPS) and code-pointer integrity (CPI), defined as follows:
Code-Pointer Integrity (CPI) is a property of C/C++ programs t… Continue reading Are code-pointer separation (CPS) and code-pointer integrity (CPI) about programming or compilers?
I am reading “The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86)”.
The author claims that x86 code is like English written without punctuation or spaces, so that the words all ru… Continue reading In Return-Oriented Programming how can the machine execute unaligned instructions?
I’m currently using nested functions (which is extensions to C in GCC), however that is not supported (and is not planned to be supported) in clang. Mostly on the grounds that executable stack is dangerous and I would like to… Continue reading How and why is executable stack dangerous?
I’m trying to implement a self signed x509 certificate that uses a post-quantum (PQ) public key algorithm as the public key algorithm. I looked at the openssl library in c, and the way it’s done using RSA. I’m essentially try… Continue reading Creating X509 certificate in C using post-quantum public key algorithm?