2022-07-24 @Matthias Valvekens
Intermezzo: MACs vs. signatures in PDF
If you’ve dabbled in PDF-related development before, your first thought might be “Wait, why are we having this whole integrity protection conversation? Can’t you just slap a digital signature on your encrypted files and call it a day?”.
2022-07-24 @Matthias Valvekens
ISO 32004: an overview
For a few years now, the PDF industry has been working on a new mechanism to improve integrity protection in encrypted documents. ISO/TC 171/SC 2, the committee that manages the PDF standard, took ownership of that effort in the form of the ISO 32004 project.
2022-05-27 @Matthias Valvekens
Why point compression shouldn't scare you
The most widely used method to represent ECC public keys represents the key by directly encoding the coordinates of the public key point as-is. However, there’s an alternative method that not only uses less data, but also comes with a number of security benefits (almost) for free.
2022-05-25 @Matthias Valvekens
PyCon LT 2022
I was invited to speak at PyCon LT 2022. Right now, I’m getting on a plane for the first time in over two years. The last time I gave an in-person talk at a conference was back in late 2019. It’s been a while…