Cryptography

Pulling the whole series together to demonstrate the 1Password vault system from unlock to item decryption

Slides from my BSidesDE talk, November 9, 2018. A detailed description of how 1Password client unlocking and shared vault encryption works.

Finishing the Inside 1Password series with some miscellaneous topics

Looking at how Local Vaults are encrypted, and how that affects unlocking 1Password clients

How 1Password's shared vaults work

How the Encrypted Master Key works to unlock the Windows 1Password client

The Master Unlock Key and unlocking 1Pass on macOS

Beginning of a deep dive into how 1password works

How to properly encrypt EICES-format messages to be decrypted by the iOS and macOS Secure Enclave system

The key to decrypt the firmware for the Secure Enclave Processor (SEP) on the iPhone 5S has been disclosed. It's actually potentially a good thing.

Slides from my BSidesROC talk, April 23, 2016. An overview of how iOS encryption works, with emphasis on passcoes and potential attacks.

A high-level summary of what we know, what we think we know, and what we know we don't know, as well as some words of caution.

A first, rough look at a new mobile app authentication service from Trail of Bits

A new service called Blind Hashing, that incorporates salts taken from petabyte-sized cloud databases, hopes to make password cracking obsolete.

Nails in the Crypt - White Paper

Slides from a quick NoVA Hackers talk I pulled together based on recent blog posts about Apple iOS encryption and privacy changes.

Making sense of how iOS encryption works, especially what's changed in iOS 8 and how Apple made it harder for law enforcement, can be difficult. I'll try to help.

ShmooCon 13 Badge contest, scoring, solutions to the puzzles.

A rough introduction to how poem codes work and how they may have been used in practice by SOE agents in WWII.

VPNs which require 2-Factor Google Authenticator codes are a pain to start up in Tunnelblick on OS X. Here's a script to make it easier.