iiinova — where your digital self keeps evolving

Daniel Hugenroth

@lambda.bsky.social

Computer Security Researcher @ Cambridge (www.danielhugenroth.com) and Co-Founder @ Light Squares (www.lightsquares.dev)

Posts Replies Media

Daniel Hugenroth @lambda.bsky.social · 24/10/2025

How to trust that the binaries that we deploy are truthfully built from the correct source code? 🤝 Just back from ACM CCS '25 🌏 where we presented Attestable Builds as a solution to this challenge. It complements Reproducible Builds and uses TEEs as a trust anchor. With @coderlime.bsky.social

The picture shows Mario and Daniel presenting the last slide of their presentation at ACM CCS 2025 in Taipei. The text on the slide reads: A-Bs provide source-to-binary provenance using TEEs and sandboxing; complements Reproducible Builds and both can be combined in an any-trust model; practical evaluation (see our GitHub) and formal verification using Tamarin.

151

Daniel Hugenroth @lambda.bsky.social · 29/07/2025

One of my favourite CoverDrop details: out-of-band verification of the trusted organization key which signs the entire key hierarchy. Its digest is included in the imprint of every printed Guardian newspaper, removing the need to trust CAs 🔑🗞️ more details: www.coverdrop.org

The picture shows a smartphone and the imprint of a newspaper. The smartphone displays a screen from the SecureMessaging feature showing a key digest. The newspaper imprint shows the same digest. The digest consists of a number of randomly-looking letters and digits.

16229

Daniel Hugenroth @lambda.bsky.social · 28/04/2025

Greatly enjoyed talking at JKU Linz about our Sloth 🦥 library which uses Secure Enclaves (SEs) for key stretching and deniable encryption. Importantly, it works around Android/iOS API limitations and, therefore, Sloth is available to regular apps on most smartphones without modifications.

100

Daniel Hugenroth @lambda.bsky.social · 29/01/2025

I am quite excited that our brand-new module "P79: Cryptography and Protocol Engineering" has its first lecture today! @martin.kleppmann.com and I designed the course to bridge the gap between mathematical ideas and the challenge of implementing secure cryptography in the real world. @cst.cam.ac.uk

4608