Zcash, Rust, cryptography & privacy. He/him. https://xitter.cf/t.co/H3HuRnxc3h atproto: 🦋https://xitter.cf/t.co/BSw2zoJbif age18f63qx4gk8x7p4lfuwwglqcan7snvp406q5vmk26g9fmpe9c799qqzzr3w
Internet, ARPA
Joined April 2011
- Tweets7.2K
- Following472
- Followers3.1K
- Likes6K
Pinned Tweet
Keys fit in a tweet, so here's one for me:
age18f63qx4gk8x7p4lfuwwglqcan7snvp406q5vmk26g9fmpe9c799qqzzr3w
Try it out, have fun, and let me know in the comments section how it goes! Or here:
github.com/str4d/rage/issues…
The sky is blue and invites are no longer needed! I don't post here anymore; if you're following me here, go follow me there instead.
bsky.app/profile/str4d.xyz
rage 0.10.0 is out!
🚿 Recipient files and identities from pipes or stdin!
🐛 Fixed several bugs with SSH RSA keys.
🌍 Russian translation!
📖 Manpages!
Available where all good crates are stored:
cargo install rage
Binaries and Debian here: github.com/str4d/rage/releas…
Do you like using command-line tools in your language?
Do you like contributing to open source projects?
Do you like translating technical text?
I would love contributions that localize rage (the encryption tool I maintain) into more languages!
github.com/str4d/rage
All you need to do is copy these two files, and then rewrite the strings in your language:
github.com/str4d/rage/blob/m…
github.com/str4d/rage/blob/m…
Then submit a pull request! Or throw the file contents at me on pastebin or HackMD, whatever works for you!
If you're trying out @bluesky you can find me here (DID link because it's cool):
staging.bsky.app/profile/did…
If you're a mutual here and want an invite to Bluesky, DM me (limited supply!)
Reminder: it's still in beta, there is no block button yet (coming soon, but there is muting and initial content moderation). You're joining in-flight while the engine is being assembled.
@[email protected]🛡️ retweeted
This is our last opportunity to stop the Online Safety Bill and have it reconsidered. It really does affect every Internet user in the UK so please sign. Democracy requires your attention. petition.parliament.uk/petit…
@[email protected]🛡️ retweeted
Our position remains clear. We will not back down on providing private, safe communications. Today, we join with other encrypted messengers pushing back on the UK's flawed Online Safety Bill.
age-plugin-yubikey 0.4.0 is out!
🧠 PIN and touch caches are preserved across processes! A PIN policy of "once" works* now!
🔏 Identities can now be generated with a PIN policy of "always".
🛠️ Improved error messages & documentation.
*Not for YubiKey 4, or if you switch applet.
Available where all good crates are stored:
cargo install age-plugin-yubikey
Binaries and Debian here: github.com/str4d/age-plugin-…
@[email protected]🛡️ retweeted
In this work, we present a fully adaptive proof for a simple three-round threshold Schnorr scheme. We’ll release a similar fully adaptive proof for FROST soon, stay tuned!
First day of #RealWorldCrypto! Looking forward to some great talks and great discussions.
Find me if you want to chat about cryptographic implementations, zero-knowledge proofs, Rust, or how great it would be if RWC went to New Zealand! 😁
I'll be making any commentary on talks over on the Fediverse: abyssdomain.expert/@str4d/11…
Meanwhile over here, you can follow the indomitable @durumcrustulum for live updates:
xitter.cf/durumcrustulum/status/…
There were so many ways that the disclosure blog post could have been written that would have been more appreciative of the work done and the findings, while still conveying the exact same conclusion.
As per, they get more exposure now: breakingthe3ma.app/
#StreisandEffect
There’s a new paper on Threema’s old communication protocol. Apparently, today’s academia forces researchers and even students to hopelessly oversell their findings. Here’s some real talk: threema.ch/bp/new-paper-on-o…
After a constructive engagement with @ThreemaApp during responsible disclosure, this is unexpectedly dismissive. We broke their protocol 6 ways. They updated it, thanks to our work (breakingthe3ma.app). So of course our work applies to an old version.
In early 2022 I started working with Kenny and Matteo on analyzing Threema, the messenger used by 🇨🇭govt, army and 🇩🇪 chancellor. Happy to say that the disclosure period is over and results are out! Fun vulnerabilities included :)
Check out our website: breakingthe3ma.app
age-plugin-yubikey 0.3.1 is out!
🤺 Plays "nicely" with gpg-agent!
🧗♂️ Improved UX with suggested fixes for some errors
📦 Pre-built binaries for ARM64 macOS
Available where all good crates are stored:
cargo install age-plugin-yubikey
Binaries, Debian: github.com/str4d/age-plugin-…
I'm cross-posting announcements like this for now, but this will stop in the near future. You should follow me over here for the canonical update: abyssdomain.expert/@str4d/10…