2026-10-02
Post-Quantum Crypto Won't Fix Your Architecture
Adding PQC to this product was like installing a vault door on a tent. The server could intercept your keys and an RCE let attackers run code on your desktop.
Hi, I'm Pascal! Cryptography Engineer at ELCASecurity, privacy enjoyer and tinkerer. Here I write about Cryptography and Security. For shorter and more frequent posts see:
My Projects
2026-06-23
Proton's crypto is not Transparent and not OPAQUE
Proton says privacy "isn't a promise, it's mathematically ensured." I found new ways they could read your data anyway.
2024-10-17
Quantum Apocalypse?
NIST finalized their first post quantum secure cryptographic algorithms in August 2024. This post provides a gentle introduction and an intuition on the actual impact.
2024-07-17
Breaking Military Grade Encryption to Animate my Name
Getting into the weeds of my flashy website banner, that simulates a padding-oracle attack on AES-CBC.
2023-07-03
Sharekey Cryptography Review
During my master thesis I reviewed the cryptography of the end-to-end encrypted Sharekey collaboration app. This post covers the most interesting issues I found.
2020-12-01
ETH Study Materials
A collection of study material I created back when I was tutoring Computer Science at ETH Zürich