# schaerli.org

> Pascal Schärli's blog about cryptography, security, and privacy.
> Cryptography Engineer at ELCASecurity, ETH Zürich alumni.

## Content

For your convenience, all blog posts are available as clean .md files below.
The content uses a permissive [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/)
license - you are free to copy and redistribute the material in any medium or format
for any purpose, even commercially. Just make sure to link back to https://schaerli.org
when you do so.

## Blog Posts

- [Proton's crypto is not Transparent and not OPAQUE](https://schaerli.org/weblog/5-proton/index.html.md): Proton says privacy "isn't a promise, it's mathematically ensured." I found new ways they could read your data anyway.
- [Quantum Apocalypse?](https://schaerli.org/weblog/4-quantum-apocalypse/index.html.md): NIST finalized their first post quantum secure cryptographic algorithms in August 2024. This post provides a gentle introduction and an intuition on the actual impact.
- [Breaking Military Grade Encryption to Animate my Name](https://schaerli.org/weblog/3-breaking-military-grade-encryption/index.html.md): Getting into the weeds of my flashy website banner, that simulates a padding-oracle attack on AES-CBC.
- [Finding 19 Vulnerabilities in one Messenger](https://schaerli.org/weblog/2-sharekey-cryptography-review/index.html.md): For my masters thesis I reviewed the cryptography of the Sharekey messenger app. I found many issues, and this post shows the most fun ones.
- [ETH Study Materials](https://schaerli.org/weblog/1-eth-study-materials/index.html.md): A collection of study material I created back when I was tutoring Computer Science at ETH Zürich

## Source Code

The code to build the website is open-source at https://codeberg.org/pascscha/weblog