blog
Notes on cryptography, keyless systems, and the parts that don't work. I try to write up the limits as carefully as the wins, because a claim that only ever reads green isn't a claim worth checking.
The password you never send
A login that checks your password without anybody, including the server doing the checking, ever learning what it is. No stored hash, no salt, no file for an attacker to take away and grind offline. With a working one you can type into, running in the page.
Locked for now →What happened when we took the signing key out
A 2016 signing key, never rotated, read 60,000 State Department emails in 2023 without a single exploit being fired. So I spent a while building on the premise that the key didn't need to be there, and this is what worked plus the four assumptions that don't go away.
Read it →