Articles

Demystifying SOP and CSP, …

In my experience, many developers are not aware of the Same Origin Policy nor of the Content Security Policy, or at least were not aware of more than one or two of the directives CSP supports. Let’s lay out what these terms are and how they drastically improve the security of the web. …

Quantum Computing Physics …

Anyone who can contemplate quantum mechanics without getting dizzy hasn’t understood it. - Niels Bohr, one of the fathers of quantum mechanics I would like to begin a series examining the various post-quantum cryptography schemes being explored by NIST’s Post-Quantum Cryptography …

Random vs. Pseudorandom

https://www.xkcd.com/221/ RFC 1149.5 specifies 4 as the standard IEEE-vetted random number In discussions with friends and developers, I feel that there is a pervasive uncertainty about pseudorandomness, especially in its relationship to cryptographic randomness. I often hear confusion over what is …