SSunny Chokshi14h ago · 4 min readCryptoBench: 54 snippets to test LLM crypto misuse detectionCryptoBench is a small dataset I built to test LLM code review of cryptographic API misuse. This post lists what is inside, what the first results looked like, and how to rerun it on your own model. Gsunnychokshi.hashnode.dev
NNnaa1d ago · 5 min readA signed AI receipt needs more than a green checkmarkBy Nnaa Igwiloh, co-founder and CEO/CTO of Truthlocks. Prepared and tested with AI assistance. This is a company-authored engineering walkthrough, not an independent audit. An AI agent's action log catruthlocks.hashnode.dev
MMubashir Ali1d ago · 6 min readWhy Your Password Hash Should Be Slow: bcrypt vs MD5 and SHA-256Why Your Password Hash Should Be Slow: bcrypt vs MD5 and SHA-256 Somewhere there's a database leak with your users in it. Not a hypothetical. Breaches happen weekly, and the file that leaks isusually xplosole.hashnode.dev
DDamiano Bianda1d ago · 6 min readYour PDF says AES-256. The key had 9 bits of entropyOpen a password-protected PDF and the properties dialog will proudly tell you the document is secured with AES-256. That number describes the cipher. It says nothing about the key. This week, Rick de damianobianda.hashnode.dev
SSunny Chokshi2d ago · 3 min readA hex literal made LLM code reviewers raise false alarmsI wanted to know whether an LLM code reviewer follows what the code does or what the code looks like. Cryptographic API misuse is a clean place to ask, because the same insecure choice can be written 25KAsunnychokshi.hashnode.dev
CCryptoPlay Guide2d ago · 8 min readFrom HMAC-SHA256 to Verifiable Results: A JavaScript WalkthroughA result can look random while still being reproducible. That is the useful idea behind a provably fair protocol: commit to a secret input, combine it with public inputs through a documented algorithmcryptoplayguide.hashnode.dev
AAmit Shukla2d ago · 6 min readWhy password123 cracks in a second and 6 random words take 700,000 yearsEvery few weeks there is another breach notice: "your password may have been exposed." What actually leaked, and why does one password survive it while another falls in seconds? This guide walks throuamitshuklabag.hashnode.dev
AAbdulrahman4d ago · 8 min readMaking "one-time" links actually one-time: fragments, preview bots and an atomic DELETEEvery team has a "temporary" password sitting in a chat history somewhere. Someone pasted a database credential into a DM two years ago, and it is still there, searchable, synced to every device, incl11Aabdulrahman-gg.hashnode.dev
VVaultKeepR6d ago · 3 min readWhat Is a Zero-Knowledge Password Manager?A zero-knowledge password manager encrypts your vault on your device before anything is sent to a server. The server stores ciphertext. It never receives your master password or the key that decrypts blog.vaultkeepr.xyz
VVaultKeepR6d ago · 3 min readShamir Secret Sharing in a Password Manager: Recovery Without a Forgot-Password ButtonA zero-knowledge password manager cannot reset your master password, because it never has the key that decrypts your vault. That is the reason it is secure. It is also the reason a forgotten master pa1blog.vaultkeepr.xyz
