Picture

OpenSSL Fact @OpenSSLFact

One terrible, frightening line of OpenSSL code each day. 365 days a year until the madness ends. Maintained by @matthew_d_green. openssl.org Joined September 2012
  • Tweets
    47
  • Followers
    2K
  • Following
    0
  • Likes
    0
OpenSSL Fact retweeted
tqbf Profile Picture

Thomas H. Ptacek @tqbf

10 years ago

In crypto: VERSIONING > NEGOTIATION. Nobody in the history of cryptography has ever gotten negotiation right.

OpenSSL Fact retweeted
bascule Profile Picture

Tony "Abolish ICE" Arcieri 🦀🌹 @bascule

12 years ago

OpenSSL thinks 15 is a prime number: blog.hboeck.de/archives/841-D… /cc @OpenSSLFact

OpenSSL Fact retweeted
morgs Profile Picture

ʍօʀɢǟռ @morgs

12 years ago

Fun OpenSSL fact: ssleay became OpenSSL because RSA - that RSA - aqui-hired Eric Young, the EAY in ssleay

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

#if 1 if (pseudorand == 2) { /* generate patterns that are more likely to trigger BN library bugs */ ... #whaaaaa

OpenSSL Fact retweeted
azhrdesai Profile Picture

Azhar Desai @azhrdesai

12 years ago

@OpenSSLFact "It recently occurred to me that 0^0^0^0^0^0^0 == 0" #opensslhumour des/des_locl.h

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

bn_rand(...){ /* make a random number and set the top and bottom bits */ time(&tim); RAND_add(&tim,sizeof(tim),0.0); #miningyourpsandqs

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

if ( (s->options&SSL_OP_TLS_BLOCK_PADDING_BUG) && !s->expand)

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

12 years ago

/*The aim of right-shifting md_size is so that the compiler doesn't figure out that it can remove div_spoiler...which I hope is beyond it.*/

OpenSSL Fact retweeted
veorq Profile Picture

JP Aumasson @veorq

13 years ago

OpenSSL wikibook, nice initiative en.m.wikibooks.org/wiki/OpenSSL

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

#else if (0) ; #endif

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

/* EEK! Experimental code starts */

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

MT @Code_Analysis The kind of things you find when you let a robot look at OpenSSL: viva64.com/en/b/0183/

OpenSSL Fact retweeted
matthew_d_green Profile Picture

Matthew Green is on BlueSky @matthew_d_green

13 years ago

.@solardiz @Code_Analysis "Consider inspecting the '*ptr++' pattern. Probably meant: '(*ptr)++'." << In OpenSSL's case, probably not :(

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

OpenSSL vs. best practices (RSA decryption edition Part 2, cont'd from Part 1 bit.ly/SWu3Sx) oi50.tinypic.com/29qbjhw.jpg

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

A random discussion of AES timing attacks pastebin.com/raw.php?i=Z8Hz…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

/* Construct the per-ENGINE context. We create it blindly and then use a lock to check for a race... pastebin.com/raw.php?i=n9vQ…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

/* ...so all future session negotiations will fail due to conflicts.*/ pastebin.com/raw.php?i=5FT4…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

Oops (cryptographer edition): pastebin.com/raw.php?i=KK4u…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

The SSL_OP_TLS_ROLLBACK_BUG. pastebin.com/raw.php?i=4rRH…

OpenSSLFact Profile Picture

OpenSSL Fact @OpenSSLFact

13 years ago

OpenSSL vs. best practices (RSA decryption edition) oi50.tinypic.com/10xv6fc.jpg

Trends for United States

Rachel
74,8 B posts
Karen
80,5 B posts
Chiefs
199 B posts
Herbert
57 B posts
AJ Lee
245 B posts
Mahomes
68 B posts
#SmackDown
195 B posts
Big Brother
24,2 B posts
Kelce
41,6 B posts
Ken Dryden
3.809 posts
Worthy
55,7 B posts
Rich Eisen
5.675 posts
#KCvsLAC
8.113 posts
#TheLastDriveIn
4.340 posts
Chris Jones
5.358 posts
Keenan Allen
5.549 posts
Tart
6.372 posts
#BoltUp
7.220 posts
Bader
13,3 B posts
Brazil
117 B posts

You might like

Designing cryptography (deployed now: X25519, Ed25519, ChaCha20, sntrup, Classic McEliece) to proactively reduce risks. Coined phrase
Daniel J. Bernstein
@hashbreaker
22K Followers
cofounder & CSO @taurus_hq, author https://t.co/yOkMDW2B9a @cryptolexicon, designer BLAKE2 BLAKE3 SipHash, Signal: jpa.01
JP Aumasson
@veorq
18K Followers
Tamagotchi Hacker. Google Project Zero. She/her.
Natalie Silvanovich
@natashenka
45K Followers
Tanja Lange
@hyperelliptic
6K Followers
I'm that 0day guy
Charlie Miller
@0xcharlie
71K Followers
Chief Scientist at Red Sift. Founder of Hardenize and author of Bulletproof TLS and PKI. Previously, founder of SSL Labs and ModSecurity.
Ivan Ristic
@ivanristic
11K Followers
Computer Scientist, FreeBSD/EC2 maintainer, FreeBSD Release Engineering Lead, AWS Hero, and author of @Tarsnap.
Colin Percival
@cperciva
15K Followers
🇫🇷 grep'ing for memcpy() since 2002AD. Currently @ Databricks. Formerly GOOG, MSFT. Tweets are my own, and sometimes attempts at being funny.
Kostya Kortchinsky
@crypt0ad
8K Followers
The cat is the Otocolobus Manul, https://t.co/Xswt7Vp2F1 . Manul is the perfect privacy mascot. All views & opinions are my own & personal.
sergey bratus
@sergeybratus
6K Followers
Professor of computer science at the City College of New York.
Rosario Gennaro
@rgennaro67
2K Followers
Tarjei Mandt
@kernelpool
17K Followers
@Openwall founder, @oss_security maintainer, @lkrg_org co-author, @CtrlIQ Linux security engineer. RTs don't imply agreement with points of view.
Solar Designer
@solardiz
13K Followers
Retired security engineer but still hacking when free+beer
beist
@beist
7K Followers
Certs and sigs. Opinions are only mine, obv.
Cryptoki
@Cryptoki
2K Followers