2026-06-23
Proton's crypto is not Transparent and not OPAQUE
Proton says privacy "isn't a promise, it's mathematically ensured." I found new ways they could read your data anyway.
Hi, I'm Pascal! Cryptography Engineer at ELCASecurity, privacy enjoyer and tinkerer. Here I write about Cryptography and Security. For shorter and more frequent posts see:
My Projects
2024-10-17
Quantum Apocalypse?
NIST finalized their first post quantum secure cryptographic algorithms in August 2024. This post provides a gentle introduction and an intuition on the actual impact.
2024-07-17
Breaking Military Grade Encryption to Animate my Name
Getting into the weeds of my flashy website banner, that simulates a padding-oracle attack on AES-CBC.
2023-07-03
Finding 19 Vulnerabilities in one Messenger
For my masters thesis I reviewed the cryptography of the Sharekey messenger app. I found many issues, and this post shows the most fun ones.
2020-12-01
ETH Study Materials
A collection of study material I created back when I was tutoring Computer Science at ETH Zürich