iiinova — where your digital self keeps evolving

Matteo Scarlata

@hjkl.space

60 followers 113 following 5 posts

software occultist

Posts Replies Media

Reposted by Matteo Scarlata

Miro Haller @mirohaller.bsky.social · 21/09/2026

We finally finished the universal signature forgery for 1024-bit RSA! 2^32 oracle queries, 1200 core years precomputation, 180 core years for an individual forgery, and 3 years of human labor (no AI involved) by Laura, Adam, Nadia, Emmanuel and me to pull of this computation against real HSMs.

14019

Reposted by Matteo Scarlata

Kenny Paterson @kennyog.bsky.social · 10/09/2026

Our latest “Crypto in the Wild” project, analysing secure email gateways. We give 29 cryptographic attacks on 4 different products, from SEPPmail, Cisco, Proton and CipherMail. Paper to appear at ACM CCS 2026.

11911

Reposted by Matteo Scarlata

Thomas Ptacek @sockpuppet.org · 17/02/2026

"presenting a cornucopia of practical attacks". These are my favorite words ever to have occurred in a cryptography paper.

3549

Matteo Scarlata @hjkl.space · 17/02/2026

You mean Professor Matilda Backendal! 😉

020

Matteo Scarlata @hjkl.space · 16/02/2026

Check out the excellent responses by @bitwarden.bsky.social (bitwarden.com/blog/securit...), @dashlane.com (www.dashlane.com/blog/zero-kn...) and @lastpass.bsky.social (blog.lastpass.com/posts/detail...). It was really great to working with these companies, and a uniquely smooth disclosure process!

bitwarden.com

Security through transparency: ETH Zurich audits Bitwarden cryptography against malicious server scenarios | Bitwarden

A new in-depth security report is available, continuing the Bitwarden commitment to transparency and trusted open source security. The audit, conducted by the prestigious Applied Cryptography Group at...

010

Reposted by Matteo Scarlata

Filippo Valsorda @filippo.abyssdomain.expert · 16/02/2026

Frog and Toad with a box illustration. Badly edited text.

Frog put the KEY in a box. "There," he said. "Now we will not SIGN MALICIOUS MESSAGES."
"But we can ASK THE HSM," said Toad.
"That is true," said Frog.

124935

Matteo Scarlata @hjkl.space · 16/02/2026

I always assumed that #passwordmanagers were simple objects -- create a database, encrypt it, send it to the server, done. I could not have been more wrong! At zkae.io, we take a look at all the hidden complexity in cloud password managers, and the #attacks that result from that. (ia.cr/2026/058)

zkae.io

Zero Knowledge (About) Encryption

184

Reposted by Matteo Scarlata

Kenny Paterson @kennyog.bsky.social · 16/02/2026

Do you use a cloud-based password manager? So what's your threat model? Vendors like Bitwarden, Dashlane, LastPass and 1Password offer you "Zero Knowledge Encryption", with statements like: "Not even the team at Bitwarden can read your data (even if we wanted to)." We decided to test this… 1/n

23215

Matteo Scarlata @hjkl.space · 16/02/2026

FYI, this is going live tomorrow morning! :)

010

Matteo Scarlata @hjkl.space · 16/01/2026

We wanted a link to the full version for our camera-ready, without having to maintain a redirect (inevitably subject to bit rot). We cleared the submission with the eprint editors in advance (kudos Sofia and Matthias for being super responsive!).

110

Reposted by Matteo Scarlata

Miro Haller @mirohaller.bsky.social · 11/11/2025

The call for talks for CAW 2026 (a workshop affiliated with Eurocrypt) is out! This year's motto is "cryptography under real-world constraints and threat models", but other applied cryptography is also very welcome. All info is on: caw.cryptanalysis.fun.

1128

Reposted by Matteo Scarlata

Miro Haller @mirohaller.bsky.social · 09/04/2025

This year, #CAW offers the option for remote participation to make our Eurocrypt workshop accessible to the members of our community that cannot or prefer not to travel to Madrid. Register on our website before May 2 (free): caw.cryptanalysis.fun The updated program is below.

062

Reposted by Matteo Scarlata

Kenny Paterson @kennyog.bsky.social · 25/03/2025

Our latest work is out! Breaking and repairing Content-Defined Chunking, with impact across multiple backup systems. Read Kien Tuong Truong’s blog here: blog.ktruong.dev/breaking-cdc

blog.ktruong.dev

Breaking and Fixing Content-Defined Chunking

A collection of my (future) writings about cryptography, music and other random stuff.

1112