List of blog entries

  • 2022-07-24 @Matthias Valvekens
    Intermezzo: MACs vs. signatures in PDF

    If you’ve dabbled in PDF-related development before, your first thought might be “Wait, why are we having this whole integrity protection conversation? Can’t you just slap a digital signature on your encrypted files and call it a day?”.

    Read »
  • 2022-07-24 @Matthias Valvekens
    ISO 32004: an overview

    For a few years now, the PDF industry has been working on a new mechanism to improve integrity protection in encrypted documents. ISO/TC 171/SC 2, the committee that manages the PDF standard, took ownership of that effort in the form of the ISO 32004 project.

    Read »
  • 2022-05-27 @Matthias Valvekens
    Why point compression shouldn't scare you

    The most widely used method to represent ECC public keys represents the key by directly encoding the coordinates of the public key point as-is. However, there’s an alternative method that not only uses less data, but also comes with a number of security benefits (almost) for free.

    Read »
  • 2022-05-25 @Matthias Valvekens
    PyCon LT 2022

    I was invited to speak at PyCon LT 2022. Right now, I’m getting on a plane for the first time in over two years. The last time I gave an in-person talk at a conference was back in late 2019. It’s been a while…

    Read »