Profile picture
Thomas H. Ptacek @tqbf
, 4 tweets, 1 min read Read on Twitter
I don’t believe you can get much insight about how elliptic curves work from pictures. The lines and tangents in the group law are not really the point.
Curves are straightforward equations. To understand what’s happening in an invalid curve attack, define a small curve with pencil/paper-manageable coefficients and then play with points.
What you want is Sean’s Cryptopals #57, which explains the actual mechanics of subgroup confinement, and #59, which maps them to curves.

toadstyle.org/cryptopals/57.…
toadstyle.org/cryptopals/59.…
I’ve tried a couple times just now to summarize the two challenges but: that makes me part of the problem. Don’t just read summaries. Play with the math! If you finished 10th grade, I promise it’s accessible to you.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Thomas H. Ptacek
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @tqbf see all

Profile picture
I have bought every dumb cooking temperature gizmo imaginable and can report that the Fireboard wifi multi-probe thermometer is _much_ better than the Thermoworks equivalent. Better build, better app, much better UX.
The Fireboard gizmo is not weatherproof at all, unlike the ThermoQ WiFi. But Thermoworks stuff isn’t _really_ weatherproof. I’ve lost 3 different parts to rain. At least the Fireboard is up front about it: weather-protect it yourself.

(They sell a silly, overpriced case).
ThermoQ gizmo was a nightmare to get connected to my phone, and had one of the worst apps I’ve ever used. Also: never stayed connected.

Fireboard gizmo took less than a minute to configure via BT, which detected the device from the app instantly.
Read 6 tweets
Profile picture
Everyone please take a moment to consider what a big deal it would be if this had been Google accounts rather than Facebook accounts.
For those unfamiliar with the subtext:

If this happened to Google, something like a majority of all major online applications everywhere would require days to (in many cases) weeks of expensive forensics investigations.

A mind-bending catastrophe.
*Excellent* security people work at both Facebook and Google.

Google might be up to the task of protecting the accounts it manages. Might be. Just “might” is such a huge compliment to pay to Google’s team!

Facebook, though, was evidently one one dumb feature from doom.
Read 4 tweets
Profile picture
I think I agree with literally every word of this thread from Alex about how to think about WhatsApp and Signal.
Importantly: this is why it’s dangerous to rely the nerd zeitgeist about secure messaging. THE VALUES ARE DIFFERENT. Both WA and Signal value “all messaging is e2e encrypted”, above all else. That’s not generally true of nerds, who value other things more highly.
Signal and WhatsApp make tradeoffs (in different ways) to optimize their deployment of resources towards the goal of 100% e2e messaging.

Drives nerds crazy! They want federation, officially provisioned sideloading, features (so many features), parity desktop clients, &c.
Read 3 tweets

Related threads

Profile picture
Hi, hello, I’m reporting from the media room at JPL for the #InSight #MarsLanding. From now on until it’s over I’m going to keep my Twitter feed clean of anything except landing-related news. I’ll likely do a Q and A on Twitter today after the post-landing press briefing.
Here is my landing timeline:
planetary.org/blogs/emily-la…

You can watch the uncommented feed (just the control room) here: nasa.gov/multimedia/nas…

And the commented feed (with talking heads) here: mars.nasa.gov/insight/timeli…
Julie Werz Chen reports from mission control they've heard from Mars Reconnaissance Orbiter and are in telemetry lock with both MarCO-A and -B. This is promising for receiving telemetry from InSight via the cubesats live throughout the landing. #InSight #MarsLandingDay
Read 46 tweets
Profile picture
A serious escalation of the #conflict between #Russia and #Ukraine over #Azov Sea and #Crimea telegraph.co.uk/news/2018/11/2…
strana.ua/news/173200-uk…
Radio communication of these #Ukrainian and #Russian #ships soundcloud.com/user6404565
Read 44 tweets
Profile picture
#Law #DomesticViolence
Indian law protects women from all kinds of domestic abuse. To know more about the provisions of Protection of Women Against Domestic Violence Act, 2005 read our explainer: bit.ly/2CMVlfS
PWDV Act, 2005, gives a broad definition of what qualifies as ‘domestic abuse’. It includes physical, sexual, verbal, emotional and economic abuse. Section 3 reads:
The Act provides for a ‘Protection Officer’ to help you through various processes under the law. This Officer can help you file the complaint, tell you about your rights, make an application to the Magistrate for you, etc.
Read 6 tweets
Profile picture
Really perspicacious analysis by @volkskrant about why the Brexit negotiations aren't going well. I'm going to summarize their main points for the benefit of non-Dutch speakers. Also interesting to see the perspective from an EU member state newspaper volkskrant.nl/nieuws-achterg… 1/
(1) Using EU citizens as bargaining chips. This was bad form and lost a lot of goodwill. Interestingly, author thinks that current Settled Status is reasonable and fair ("schappelijk"). Now the @The3Million are very skeptical, and should be, in the light of windrush etc 2/
This is not a uniquely Dutch perception. See here an article from @destandaard, a Belgian newspaper entitled "May lief voor EU burgers" (May is sweet for EU citizens). standaard.be/cnt/dmf2018062… 3/
Read 15 tweets
Profile picture
THREAD: Are you excited about @Ocasio2018's overwhelming victory tonight?

Good. You should be.

Now here's what you do next.

⬇️⬇️⬇️⬇️⬇️⬇️⬇️⬇️⬇️
The first thing I need you to understand is that @Ocasio2018 didn't win because of a viral campaign ad (though it was a pretty kickass ad). She won because a tiny band of fiercely dedicated people BELIEVED she could win.

That's your first task: #Believe
.@Ocasio2018 also didn't crush Crowley because the establishment media suddenly decided to pay attention 3 weeks ago.

Team Ocasio, along with @BrandNew535 & @justicedems who jointly launched her campaign, have worked around the clock to make this, and other victories possible.
Read 25 tweets
Profile picture
1) We are each a spark of the Divine. Worthy as ever. And yet, sometimes we lose sight of our inherent value. That inner voice can become muffled by the narratives we play over and over in our mind. What are the messages that wear us down? In this moment, let’s challenge them.
2) What has caused us to forget that we are deserving? In this moment, let’s remind ourselves that our capacity for growth and strength is incredible. How can we reframe our experiences and begin viewing our lives from a more elevated perspective?
3) Are we ready to stop buying into old thoughts patterns and start trusting more empowering ones? Know this – there is so much more in store for you. The more we begin to believe this, with God’s help, the sooner we will receive what we hope, pray, and strive for. #believe
Read 5 tweets

Trending hashtags

#importation #Constitutionality #Continental #components #footwear #media #environment #poultry #penalties #attract #cars #MartialLaw #TBT #licensing #ReformPoliceNG #economists #French #motivation #love #imports #SelectCommittee #policy #subsidy #supply #Politics

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!