# orderedItems[].object.content
My colleague Eli Sohl released another installment of his Cryptopals Guided Tour: Video 18: Implement CTR. Worth the watch if you are interested in #cryptography, #python, #CTF

https://www. nccgroup.com/us/research-blog/announcing-the-cryptopals-guided-tour-video-18-implement-ctr/

# orderedItems[].object.contentMap.en
My colleague Eli Sohl released another installment of his Cryptopals Guided Tour: Video 18: Implement CTR. Worth the watch if you are interested in #cryptography, #python, #CTF

https://www. nccgroup.com/us/research-blog/announcing-the-cryptopals-guided-tour-video-18-implement-ctr/

# orderedItems[].object.content
My colleagues and I from NCC Group Cryptography Services team, performed a cryptography security assessment of selected aspects of the WhatsApp Identity Proof Linked Storage (IPLS) protocol implementation. IPLS underpins the WhatsApp Contacts solution, which aims to store a WhatsApp user’s in-app contacts on WhatsApp servers in a privacy-friendly way. The report is publicly available on NCC Group's research web site.

https://www. nccgroup.com/us/research-blog/public-report-whatsapp-contacts-security-assessment/

#cryptography
#research #privacy #security

# orderedItems[].object.contentMap.en
My colleagues and I from NCC Group Cryptography Services team, performed a cryptography security assessment of selected aspects of the WhatsApp Identity Proof Linked Storage (IPLS) protocol implementation. IPLS underpins the WhatsApp Contacts solution, which aims to store a WhatsApp user’s in-app contacts on WhatsApp servers in a privacy-friendly way. The report is publicly available on NCC Group's research web site.

https://www. nccgroup.com/us/research-blog/public-report-whatsapp-contacts-security-assessment/

#cryptography
#research #privacy #security

# orderedItems[].object.content
My team discussed their favorite talks, and takeaways of this year's Real World Cryptography Conference, which recently took place in Toronto, Canada, in a blog post https://research.nccgroup.com/2024/06/07/real-world-cryptography-conference-2024/

#cryptography

# orderedItems[].object.contentMap.en
My team discussed their favorite talks, and takeaways of this year's Real World Cryptography Conference, which recently took place in Toronto, Canada, in a blog post https://research.nccgroup.com/2024/06/07/real-world-cryptography-conference-2024/

#cryptography

# orderedItems[].object.content
My colleague Eli Sohl released another great video on exploiting the classic CBC padding oracle attack, as part of his walkthrough of the cryptopals crypto challenges. He also published cranim, the Manim toolkit for cryptographic scenes that he wrote for his guided tour visuals.

https://research.nccgroup.com/2024/05/24/announcing-the-cryptopals-guided-tour-video-17-padding-oracles/

# orderedItems[].object.contentMap.en
My colleague Eli Sohl released another great video on exploiting the classic CBC padding oracle attack, as part of his walkthrough of the cryptopals crypto challenges. He also published cranim, the Manim toolkit for cryptographic scenes that he wrote for his guided tour visuals.

https://research.nccgroup.com/2024/05/24/announcing-the-cryptopals-guided-tour-video-17-padding-oracles/

# orderedItems[].object.content
Double Nonce Derive Key AES-GCM (DNDK-GCM) https://datatracker.ietf.org/doc/draft-gueron-cfrg-dndkgcm/

# orderedItems[].object.contentMap.en
Double Nonce Derive Key AES-GCM (DNDK-GCM) https://datatracker.ietf.org/doc/draft-gueron-cfrg-dndkgcm/

# orderedItems[].object.content
Really interesting work from Juicebox https://www. juicebox.xyz/blog/key-to-simpl icity-squeezing-the-hassle-out-of-encryption-key-recovery

# orderedItems[].object.contentMap.en
Really interesting work from Juicebox https://www. juicebox.xyz/blog/key-to-simpl icity-squeezing-the-hassle-out-of-encryption-key-recovery

# orderedItems[].object.content
I've reported a DNS rebinding vulnerability in Ollama, an open-source system for running and managing large language models https://research.nccgroup.com/2024/04/08/technical-advisory-ollama-dns-rebinding-attack-cve-2024-28224/

# orderedItems[].object.contentMap.en
I've reported a DNS rebinding vulnerability in Ollama, an open-source system for running and managing large language models https://research.nccgroup.com/2024/04/08/technical-advisory-ollama-dns-rebinding-attack-cve-2024-28224/

# orderedItems[].object.content
This is going well.

# orderedItems[].object.contentMap.en
This is going well.

# orderedItems[].object.attachment[].name
Philips Hue app screenshot explaining that one must sign in to control their Hue system.

# orderedItems[].object.attachment[].name
Philips Hue app screenshot showing an error after trying to sign in to their cloud service.

# orderedItems[].object.content
Second part of NCC Group Cryptography Services team blog post on our thoughts on this year Real World Cryptography Conference in Japan https://research.nccgroup.com/2023/08/25/real-world-cryptography-conference-2023-part-ii/

# orderedItems[].object.contentMap.en
Second part of NCC Group Cryptography Services team blog post on our thoughts on this year Real World Cryptography Conference in Japan https://research.nccgroup.com/2023/08/25/real-world-cryptography-conference-2023-part-ii/

# orderedItems[].object.content
Kevin, Sam, Thomas, and I performed a cryptography assessment of Penumbra's Rank-1 Constraint System (R1CS) code, and the associated zero-knowledge proofs. The public report was published at the following URL https://research.nccgroup.com/2023/08/21/public-report-penumbra-labs-r1cs-implementation-review/

# orderedItems[].object.contentMap.en
Kevin, Sam, Thomas, and I performed a cryptography assessment of Penumbra's Rank-1 Constraint System (R1CS) code, and the associated zero-knowledge proofs. The public report was published at the following URL https://research.nccgroup.com/2023/08/21/public-report-penumbra-labs-r1cs-implementation-review/

# orderedItems[].object.content
My team attended the annual Real World Cryptography Conference organized by the IACR recently in Tokyo. We summarized some of our favorite talks and takeaways in the first of two blog posts https://research.nccgroup.com/2023/05/10/real-world-cryptography-conference-2023-part-i/

# orderedItems[].object.contentMap.en
My team attended the annual Real World Cryptography Conference organized by the IACR recently in Tokyo. We summarized some of our favorite talks and takeaways in the first of two blog posts https://research.nccgroup.com/2023/05/10/real-world-cryptography-conference-2023-part-i/

# orderedItems[].object.content
Pretty cool https://daringfireball.net/linked/2023/05/02/icloud-plus-domain-name-registration

# orderedItems[].object.contentMap.en
Pretty cool https://daringfireball.net/linked/2023/05/02/icloud-plus-domain-name-registration

# orderedItems[].object.content
Great update on DNS rebinding attacks by my colleague @sanktjodel including a primer on Local Network Access, and how to bypass it on Chrome https://research.nccgroup.com/2023/04/27/state-of-dns-rebinding-in-2023/ #dnsrebinding

# orderedItems[].object.contentMap.en
Great update on DNS rebinding attacks by my colleague @sanktjodel including a primer on Local Network Access, and how to bypass it on Chrome https://research.nccgroup.com/2023/04/27/state-of-dns-rebinding-in-2023/ #dnsrebinding

# orderedItems[].object.content
Thomas Pornin and I performed a cryptography security assessment of Solana Foundation ZK-Token SDK, a collection of open-source functions and types that implement the core cryptographic functionalities of the Solana Program Library (SPL) Confidential Token extension. https://research.nccgroup.com/2023/04/13/public-report-solana-program-library-zk-token-security-assessment/ #cryptography #research #security

# orderedItems[].object.contentMap.en
Thomas Pornin and I performed a cryptography security assessment of Solana Foundation ZK-Token SDK, a collection of open-source functions and types that implement the core cryptographic functionalities of the Solana Program Library (SPL) Confidential Token extension. https://research.nccgroup.com/2023/04/13/public-report-solana-program-library-zk-token-security-assessment/ #cryptography #research #security

# orderedItems[].object.content
My colleague Eli released the second installment of his Cryptopals guided tour, covering the solutions to NCC Group Crypto Challenges. Very thorough and entertaining work https://research.nccgroup.com/2023/01/23/announcing-ncc-groups-cryptopals-guided-tour-set-2/

# orderedItems[].object.contentMap.en
My colleague Eli released the second installment of his Cryptopals guided tour, covering the solutions to NCC Group Crypto Challenges. Very thorough and entertaining work https://research.nccgroup.com/2023/01/23/announcing-ncc-groups-cryptopals-guided-tour-set-2/