• The Curious Case of WebCrypto Diffie-Hellman on Firefox https://blog.intothesymmetry.com/2020/01/the-curious-case-of-webcrypto-diffie.html 5 comments 7/1/2020

• On Verifiable Delay Functions - How to Slow Burning the Planet Down (Verifiably) https://blog.intothesymmetry.com/2019/05/on-verifiable-delay-functions-how-to.html 16 comments 22/5/2019 crypto
• Billion Laugh Attack in sites google com https://blog.intothesymmetry.com/2018/12/billion-laugh-attack-in.html 9 comments 5/12/2018 netsec
• The Ugly Duckling in factoring aka the filtering steps part I https://blog.intothesymmetry.com/2018/04/the-ugly-duckling-in-factoring-aka.html 4 comments 27/4/2018 crypto
• Bug bounty left over (and rant) Part III (Google and Twitter) http://blog.intothesymmetry.com/2018/02/bug-bounty-left-over-and-rant-part-iii.html 5 comments 6/2/2018 netsec
• Real World Crypto 2018 (RWC 2018) brain dump http://blog.intothesymmetry.com/2018/01/real-world-crypto-2018-rwc-2018-brain.html 3 comments 13/1/2018 crypto
• Slack SAML authentication bypass http://blog.intothesymmetry.com/2017/10/slack-saml-authentication-bypass.html 13 comments 26/10/2017 netsec
• How to try to predict the output of Micali-Schnorr Generator (MS-DRBG) knowing the factorization http://blog.intothesymmetry.com/2017/10/how-to-try-to-predict-output-of-micali.html 8 comments 8/10/2017 crypto
• Historical courses and resorts in Elliptic Curves Cryptography - Is Curve25519 dead? http://blog.intothesymmetry.com/2017/06/historical-courses-and-resorts-in.html 20 comments 21/6/2017 crypto
• OAuth Worm II - The revenge http://blog.intothesymmetry.com/2017/05/oauth-worm-ii-revenge.html 9 comments 5/5/2017 netsec
• Critical vulnerability in JSON Web Encryption (#JWE) - RFC 7516 Invalid Curve Attack http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html 4 comments 13/3/2017 netsec
• Critical vulnerability in JSON Web Encryption (JWE) - RFC 7516 http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html 5 comments 13/3/2017 crypto
• All your Paypal #OAuth tokens belong to me - localhost for the win http://blog.intothesymmetry.com/2016/11/all-your-paypal-tokens-belong-to-me.html 35 comments 28/11/2016 netsec
• The RFC 5114 saga http://blog.intothesymmetry.com/2016/10/the-rfc-5114-saga.html 3 comments 20/10/2016 crypto