Tag

tls

14 articles

Jul 29, 2026 Thread Stacks, Guard Pages, and Thread-Local Storage How a thread stack is reserved, why a guard page turns overflow into a fault, and how a per-thread block is addressed without a lookup. operating systems
Jul 23, 2026 What TLS 1.3 Removed: Renegotiation, Compression, and Static RSA The features dropped between 1.2 and 1.3, the attacks that motivated each removal, and the compatibility cost that came with a smaller protocol. internet protocols
May 16, 2026 The TLS 1.3 Key Schedule: Extract, Expand, and Why Order Matters How HKDF turns one shared secret into six traffic secrets, what the transcript hash does at each stage, and why early secrets are derived before the peer is authenticated. internet protocols
May 12, 2026 The TLS Record Layer: Framing, Fragmentation, and Sequence Numbers How application bytes become protected records: the five-byte header, the 16 KiB fragment limit, implicit sequence numbers, and how the AEAD nonce is assembled. internet protocols
Apr 20, 2026 The TLS 1.3 Handshake: What Each Flight Commits To The four-message exchange that produces keys: what ClientHello offers, what ServerHello selects, why the transcript hash is the spine, and when a retry costs an extra round trip. internet protocols
Mar 18, 2026 Session Resumption in TLS 1.3: Tickets, Binders, and 0-RTT Replay How a ticket becomes a pre-shared key, what the binder actually signs over, why early data cannot be made replay-proof, and what servers do about it. internet protocols
Dec 3, 2025 AEAD Usage Limits and the KeyUpdate Handshake Why a TLS 1.3 key has a byte budget as well as a record budget, where the numbers come from, and what happens when a connection outlives its key. internet protocols
Nov 18, 2025 Counting Round Trips in Connection Setup How handshakes, name resolution, and security negotiation add serial round trips before the first byte of payload, and which of them can be overlapped. networking
Jul 18, 2025 The QUIC Handshake: TLS 1.3 Without a Record Layer How CRYPTO frames carry the TLS handshake inside the transport, why encryption levels change mid-handshake, and how Retry forces address validation before a certificate is sent. internet protocols
Jan 23, 2025 Hybrid Key Exchange with X25519 and ML-KEM-768 What happens to a TLS or SSH handshake when a lattice KEM is concatenated with an elliptic curve exchange, and which composition rules the transcript must obey. cryptography
Jun 20, 2024 What Threads Share and What They Own A thread is a process that was created with fewer sharing flags, and the list of flags is the whole difference. What each shared resource costs. operating systems
Jan 30, 2024 Traffic Analysis Against TLS: Record Lengths, Timing, and Padding What ciphertext lengths reveal about plaintext, how padding is expressed in the record layer, and why uniform padding is not the same as hiding a request. internet protocols
Aug 3, 2023 Encrypted Client Hello and the Limits of Hiding a Hostname How the outer and inner ClientHello split works, what the ECHConfig commits the server to, and which parts of a connection remain visible after ECH. internet protocols
Jul 11, 2023 Thread-Local Storage Access Models The four TLS access sequences the compiler can emit, what each costs per access, and why a module loaded after startup cannot use the cheapest ones. compilers