NCC Group Cryptography Services

Paul (@paulbottinelli) just published a blog post about a popular algebraic hash function, Pedersen hash, and three potential pitfalls that arise from its improper use. Always read the fine print—and make sure you know how the generators were chosen! research.nccgroup.com/2023/03/22/bre…

Aleks (@aleks___0) just published a primer on slowable encoders! Learn all about why slowable and tradeoff-resistant encodings are applied to data on storage-oriented blockchains, and how to construct (and how not to construct) such encodings. research.nccgroup.com/2023/02/20/a-p…

PS In case you missed it, Set 1 of the Cryptopals Guided Tour was released in December 2021. research.nccgroup.com/2021/12/10/ann…

Our very own Eli Sohl released Set 2 of the Cryptopals Guided Tour this week! Set 2 focuses on block ciphers: ECB and CBC modes, and PKCS#7 padding. These screencasts have it all: clear explanations, slick animations, and Eli's dulcet articulations. Enjoy! research.nccgroup.com/2023/01/23/ann…

Had so much fun at #realworldcrypto with my team @NCCCrypto, we decided to write a blog post about some of our favourite talks. I gave a short overview of 🏴‍☠️ @luca_defeo’s 🦜 talk on practical plaintext recovery exposed by ElGamal interoperability bugs research.nccgroup.com/2022/04/26/rea…

NCC Group’s Cryptography Services Team shares summaries of some of their Real World Cryptography Conference 2022 favorite talks research.nccgroup.com/2022/04/26/rea…

Public Report – WhatsApp opaque-ke Cryptographic Implementation Review research.nccgroup.com/2021/12/13/pub…

We promise this Cryptopals guided tour was worth the wait!

Technical Advisory – Arbitrary Signature Forgery in Stark Bank ECDSA Libraries, by Paul Bottinelli research.nccgroup.com/2021/11/08/tec…

Public Report – Zcash NU5 Cryptography Review research.nccgroup.com/2021/11/02/pub…

Today on the blog, @gerald_doussot provides a technical introduction on how to leverage the Z3 Theorem Prover to reason about the correctness of cryptographic software, using it to analyze aspects of QUIC and elliptic curve finite field arithmetic research.nccgroup.com/2021/01/29/sof…

New blog post by Thomas Pornin (@BearSSLnews): Double-odd Elliptic Curves, efficient & secure elliptic curve cryptography for embedded devices We share our: - whitepaper, incl. formulas & parameter choices - implementations on 64bit x86 & ARM Cortex M0+ research.nccgroup.com/2021/01/06/dou…

How to Backdoor Diffie-Hellman - a new whitepaper by @lyon01_david showing some fun math tricks! nccgroup.trust/us/our-researc…

Happy to be sponsoring the Underhanded Crypto Contest again! underhandedcrypto.com/2016/06/06/pri…

Looks like the Mon/Tues #BlackHat training is almost sold out! #beyond-the-beast-a-broad-survey-of-crypto-vulnerabilities" target="_blank" rel="nofollow noopener">blackhat.com/us-16/training…

Did you know there's a Cryptopals Set 8? And it teaches you the GCM nonce attack from eprint.iacr.org/2016/475? cryptopals.com/sets/8

REGISTER NOW: Our @BlackHatEvents @NCCCrypto Trainings are 70% & 80% full! #BHUSA #crypto ubm.io/1WMYCQk

We've published a video blog about the Noise Protocol Framework noiseprotocol.org at cryptoservices.github.io/cryptography/p… by @lyon01_david

.@lyon01_david found an infinite loop in Go's crypto github.com/golang/go/issu… - remote DOS for SSH and HTTPS Servers w/ Client Certs

Did you know we're hiring? Apply today! nccgroup.trust/us/about-us/ca… twitter.com/NCCsecurityUS/…