List of blog entries

  • 2022-08-23 @Matthias Valvekens
    PyCon LT 2022 talk: Bringing digital signatures and PKI to the masses with Python

    A couple months ago, I went to PyCon Lithuania to give a talk on PKI for Python devs. I had a great time getting to know the Python scene in Vilnius. There’s a video of the talk below.

    Read »
  • 2022-07-24 @Matthias Valvekens
    Intermezzo: MACs vs. signatures in PDF

    If you’ve dabbled in PDF-related development before, your first thought might be “Wait, why are we having this whole integrity protection conversation? Can’t you just slap a digital signature on your encrypted files and call it a day?”.

    Read »
  • 2022-07-24 @Matthias Valvekens
    ISO 32004: an overview

    For a few years now, the PDF industry has been working on a new mechanism to improve integrity protection in encrypted documents. ISO/TC 171/SC 2, the committee that manages the PDF standard, took ownership of that effort in the form of the ISO 32004 project.

    Read »
  • 2022-05-27 @Matthias Valvekens
    Why point compression shouldn't scare you

    The most widely used method to represent ECC public keys represents the key by directly encoding the coordinates of the public key point as-is. However, there’s an alternative method that not only uses less data, but also comes with a number of security benefits (almost) for free.

    Read »