Picture

OpenSSL Fact @OpenSSLFact

One terrible, frightening line of OpenSSL code each day. 365 days a year until the madness ends. Maintained by @matthew_d_green. openssl.org Joined September 2012
  • Tweets
    47
  • Followers
    2K
  • Following
    0
  • Likes
    0
OpenSSL Fact retweeted
tqbf Profile Picture

Thomas H. Ptacek @tqbf

10 years ago

In crypto: VERSIONING > NEGOTIATION. Nobody in the history of cryptography has ever gotten negotiation right.

OpenSSL Fact retweeted
bascule Profile Picture

Tony "Abolish ICE" Arcieri 🦀🌹 @bascule

12 years ago

OpenSSL thinks 15 is a prime number: blog.hboeck.de/archives/841-D… /cc @OpenSSLFact

OpenSSL Fact retweeted
morgs Profile Picture

ʍօʀɢǟռ @morgs

12 years ago

Fun OpenSSL fact: ssleay became OpenSSL because RSA - that RSA - aqui-hired Eric Young, the EAY in ssleay

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

#if 1 if (pseudorand == 2) { /* generate patterns that are more likely to trigger BN library bugs */ ... #whaaaaa

OpenSSL Fact retweeted
azhrdesai Profile Picture

Azhar Desai @azhrdesai

12 years ago

@OpenSSLFact "It recently occurred to me that 0^0^0^0^0^0^0 == 0" #opensslhumour des/des_locl.h

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

bn_rand(...){ /* make a random number and set the top and bottom bits */ time(&tim); RAND_add(&tim,sizeof(tim),0.0); #miningyourpsandqs

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

if ( (s->options&SSL_OP_TLS_BLOCK_PADDING_BUG) && !s->expand)

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

/*The aim of right-shifting md_size is so that the compiler doesn't figure out that it can remove div_spoiler...which I hope is beyond it.*/

OpenSSL Fact retweeted
veorq Profile Picture

JP Aumasson @veorq

13 years ago

OpenSSL wikibook, nice initiative en.m.wikibooks.org/wiki/OpenSSL

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

#else if (0) ; #endif

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

/* EEK! Experimental code starts */

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

MT @Code_Analysis The kind of things you find when you let a robot look at OpenSSL: viva64.com/en/b/0183/

OpenSSL Fact retweeted
matthew_d_green Profile Picture

Matthew Green is on BlueSky @matthew_d_green

13 years ago

.@solardiz @Code_Analysis "Consider inspecting the '*ptr++' pattern. Probably meant: '(*ptr)++'." << In OpenSSL's case, probably not :(

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

OpenSSL vs. best practices (RSA decryption edition Part 2, cont'd from Part 1 bit.ly/SWu3Sx) oi50.tinypic.com/29qbjhw.jpg

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

A random discussion of AES timing attacks pastebin.com/raw.php?i=Z8Hz…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

/* Construct the per-ENGINE context. We create it blindly and then use a lock to check for a race... pastebin.com/raw.php?i=n9vQ…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

/* ...so all future session negotiations will fail due to conflicts.*/ pastebin.com/raw.php?i=5FT4…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

Oops (cryptographer edition): pastebin.com/raw.php?i=KK4u…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

The SSL_OP_TLS_ROLLBACK_BUG. pastebin.com/raw.php?i=4rRH…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

OpenSSL vs. best practices (RSA decryption edition) oi50.tinypic.com/10xv6fc.jpg

Trends for United States

#DWTS
25,3 B posts
Boone
22 B posts
Chapman
15,3 B posts
Yankees
90,6 B posts
Lauren
45,2 B posts
Fried
36,3 B posts
Hunter Greene
4.480 posts
#WWENXT
16,1 B posts
Dodgers
54,1 B posts
Weaver
11,5 B posts
Crochet
28,6 B posts
Hilaria
2.322 posts
#DirtyWater
5.286 posts
Bregman
7.127 posts
Teoscar
2.853 posts
Cora
9.993 posts
Snell
4.956 posts
#DWCS
2.572 posts
Shohei
15,5 B posts
Volpe
11,5 B posts

You might like

Designing cryptography (deployed now: X25519, Ed25519, ChaCha20, sntrup, Classic McEliece) to proactively reduce risks. Coined phrase
Daniel J. Bernstein
@hashbreaker
22K Followers
cofounder & CSO @taurus_hq, author https://t.co/yOkMDW2B9a @cryptolexicon, designer BLAKE2 BLAKE3 SipHash, Signal: jpa.01
JP Aumasson
@veorq
19K Followers
Tamagotchi Hacker. Google Project Zero. She/her.
Natalie Silvanovich
@natashenka
45K Followers
Tanja Lange
@hyperelliptic
6K Followers
I'm that 0day guy
Charlie Miller
@0xcharlie
71K Followers
Chief Scientist at Red Sift. Founder of Hardenize and author of Bulletproof TLS and PKI. Previously, founder of SSL Labs and ModSecurity.
Ivan Ristic
@ivanristic
11K Followers
Computer Scientist, FreeBSD/EC2 maintainer, FreeBSD Release Engineering Lead, AWS Hero, and author of @Tarsnap.
Colin Percival
@cperciva
15K Followers
🇫🇷 grep'ing for memcpy() since 2002AD. Currently @ Databricks. Formerly GOOG, MSFT. Tweets are my own, and sometimes attempts at being funny.
Kostya Kortchinsky
@crypt0ad
8K Followers
The cat is the Otocolobus Manul, https://t.co/Xswt7Vp2F1 . Manul is the perfect privacy mascot. All views & opinions are my own & personal.
sergey bratus
@sergeybratus
6K Followers
Professor of computer science at the City College of New York.
Rosario Gennaro
@rgennaro67
2K Followers
Tarjei Mandt
@kernelpool
17K Followers
@Openwall founder, @oss_security maintainer, @lkrg_org co-author, @CtrlIQ Linux security engineer. RTs don't imply agreement with points of view.
Solar Designer
@solardiz
13K Followers
Retired security engineer but still hacking when free+beer
beist
@beist
7K Followers
Stop, Think, Pwn! (see also @dragosr@chaos.social, https://t.co/BjclXYWQ9R for alternate)
dragosr
@dragosr
24K Followers
Journalist. Climate, Energy, IT Security. Mastodon: https://t.co/TebFCJxAf4 Newsletter about Climate/Energy/Industry at https://t.co/FqP69GdhD4
hanno
@hanno
7K Followers