~/devreads

#provable security

3 posts

8 May 2023

Matthew Green 27 min read

A few weeks ago I ran into a conversation on Twitter about the weaknesses of applied cryptography textbooks, and how they tend to spend way too much time lecturing people about Feistel networks and the boring details of AES. Some of the folks in this conversation suggested that instead of these things, we should be … Continue reading PRFs, PRPs…

fundamentalsprovable security

5 Jan 2020

19 Oct 2018

Matthew Green 12 min read

The first rule of PAKE is: nobody ever wants to talk about PAKE. The second rule of PAKE is that this is a shame, because PAKE — which stands for Password Authenticated Key Exchange — is actually one of the most useful technologies that (almost) never gets used. It should be deployed everywhere, and yet it isn’t. … Continue reading…

passwordsprotocolsprovable security