I have my favouriate module of the year coming up in Semester 2: Applied Cryptography and Trust. Overall, it gives me a chance to cover most of the key cryptographic principles. So, this year, I have been investigating the usage of a chat bot, and where I could try and…

When Victor Shoup writes a paper, I read it. One of his most recent research outputs is [5][here]:

We have grown up with servers, and can only see them as the solution to provide services. But, the end game is to remove these complex computing machines and replace them with scripts. With our server infrastructures, we often setup complex databases and use files to store data in a…

Everyone in cybersecurity (hopefully) knows about Bruce Schneier and Ron Rivest. But, there’s another person that you should know about … Jan Camenisch:

In 1978, Rivest, Shamir, and Adleman, publish the classic paper [1]:

In the car industry, if you find out that something is truly unsafe, you recall the car and replace the component with something that fixes the vulnerability. But, in cybersecurity, well, for some reason — in places — we just never learn. One area of cybersecurity is the cryptographic naughty…

With envelope encryption, we take our data, and then encrypt it with a Data Encryption Key (DEK). We then take the DEK and encrypt it with a Customer Master Key (CMK). After this we can store the encrypted DEK alongside the encrypted data. In Figure 1, we see that Alice…

A MAC (Message Authentication Code) is used to sign a message with a shared key. This differs from public key signing which uses a private key to sign and a public key to verify. In the following figure, Bob has a message and creates an HMAC-SHA-256 message authentication code using…