Response to "Breaking web applications built on top of encrypted data" (CCS 2016) by P. Grubbs, R. McPherson, M. Naveed, T. Ristenpart and V. Shmatikov.
Web Crypto’s SubtleCrypto: A Masterclass in Developer Hostility and How It Strangles the Modern Web
Not Subtle, Just Sabotage — An API Against the Web
Web-based cryptography is always snake oil
Nowadays, there is an epidemic of web applications purporting to offer “end-to-end” encryption. Examples might range from a file upload service, which allows you to upload and share files of arbitrary size and promises “end-to-end encryption”; or a web-based password safe service which claims that it can't see your passwords because they're encrypted; or a web-based cryptocurrency wallet.
Advanced web security topics
(Updated 22 May 2020) This post discusses web security issues that I come across – so far thankfully mostly by reading about them. It is a work in progress which I’ll keep updating. The…
The Decentralized Internet Is Here, With Some Glitches
Privacy advocates and venture capitalists want to circumvent the tech giants with apps using encrypted data stored on networks of computers.
Encrypted Spaces — Research preview
An architecture for collaborative applications where data is encrypted and operations are cryptographically verifiable.
CyberChef
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
encryption rant
Robustly-secured data that can surprisingly vanish at a moments notice.
Cryptomator - Free & Open-Source Cloud Storage Encryption
Cryptomator is an open-source encryption tool for secure cloud storage. Protect your privacy for free on Dropbox, Google Drive, OneDrive, and more.
Data Leeks: Made with love, leaked by hackers | The Mozilla Blog
Data breaches are on the rise. According to web security experts, the frequency of data breaches almost doubled from 2016 to 2017, and 73% of all U.S. comp
Architecture
Overview of Ente's end-to-end encrypted architecture—learn how your data is encrypted on-device, securely shared, and safely stored using cryptography.
Keeping Data Private | Web Browser Engineering
Our browser has grown up and now runs (small) web applications. With one final step—user identity via cookies—it will be able to run all sorts of personalized online services. But capability demands responsibility: our browser must now secure cookies against adversaries interested in stealing them. Luckily, browsers have sophisticated systems for controlling access to cookies and preventing their misuse.
Let’s talk about encrypted reasoning
This is a quick post I wanted to write about a hobby project I spent a weekend on. It has little to do with real cryptography, and mostly doesn’t expose a particularly exciting vulnerability.…
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
