When cryptographic software fails, what’s to blame? — When cryptographic software fails, what’s to blame? Algorithms? Cryptography libraries? Apps incorrectly using those libraries? Or is it something else entirely? We rely on cryptographic algorithms and protocols every day for secure communication over the Internet. We’re able to access our bank accounts online because cryptography protects us. We’re able…

Unless you know how and where it “lives”! — Unless you know how and where it “lives”! Encryption is useless, completely useless, unless you know its limits and use accordingly. Let me make my point by showing you two examples from the recent past. It is disheartening that we continue to make similar mistakes as if we did not…

Views from a person who has added/has been attempting to add better client side encryption to relational databases [Our previous work… — Views from a person who has added/has been attempting to add better client side encryption to relational databases [Our previous work: DBMask]: The Issue at Our Hand While the title sounds negative, the actual purpose of this post is to motivate you to think critically of the security guarantees provided…

“I’ll love you forever, I’ll like you for always, As long as I’m living.. my baby you’ll be” — “I’ll love you forever, I’ll like you for always, As long as I’m living.. my baby you’ll be” “I’ll love you forever, I’ll like you for always, As long as I’m living.. my baby you’ll be” .. yes that’s what a mother sings to her son [daughter] when he was…

I don’t always talk about myths, but when I do it is about encryption. — I don’t always talk about myths, but when I do it is about encryption. #1 Encrypted data is secure. Just because some data is encrypted, it does not mean it is secure. Encrypted data is only as secure as the security of the keys used to encrypt. As a rule…