Lightnews — Scholar-powered news

Chai

@ant4g0nist.bsky.social

ManuFuzzer, an LLVM-based binary code coverage-guided fuzzing framework for macOS, update! 🎉

- Improved shadow memory management
- Better instrumentation handling

🧪 NEW: Experimental dyld cache intelligence that auto-instruments frameworks sharing memory pages!

github.com/ant4g0nist/Manufuzzer

https://github.com/ant4g0nist/Man…

May 14, 2025 at 12:04 PM

Chai

@ant4g0nist.bsky.social

Just shipped AI-assisted debugging support for LLDB! 🚀 Added MCP to LLDB making agentic debugging possible. Works well with #claude/cline, and it can set breakpoints, inspect memory, and control execution.

✨: Why should IDA have all the fun?

github.com/ant4g0nist/lisa.py

March 29, 2025 at 8:48 AM

Reposted by Chai

nSinus-R

@nsinusr.bsky.social

Really enjoyed speaking at the inaugural edition of @re-verse.io!

You can find Tomasz' and my slides on tricks with SIMs and interposers here: tinyurl.com/reverse25-si...

Roadmap of the SIMsalabim re-verse.io talk. It shows the backplane of a disassembled Pixel 6 phone together with a iconized SIM and a picture of an interposer. Five locations are marked: (0) SIM interface, (1) Baseband, (2) Attack Surface, (3) Vulnerabilities, (4) Interposer

March 5, 2025 at 5:41 PM

Reposted by Chai

Matthew Green

@matthewdgreen.bsky.social

Full details of EntrySign, the AMD Zen microcode signature validation vulnerability disclosed last month. bughunters.google.com/blog/5424842...

Blog: Zen and the Art of Microcode Hacking

This blog post covers the full details of EntrySign, the AMD Zen microcode signature validation vulnerability recently discovered by the Google Security team.

bughunters.google.com

March 5, 2025 at 11:46 PM

Reposted by Chai

ePrint Updates

@eprint.ing.bot

Enabling Microarchitectural Agility: Taking ML-KEM & ML-DSA from Cortex-M4 to M7 with SLOTHY (Amin Abdulrahman, Matthias J. Kannwischer, Thing-Han Lim) ia.cr/2025/366

Abstract. Highly-optimized assembly is commonly used to achieve the best performance for popular cryptographic schemes such as the newly standardized ML-KEM and ML-DSA. The majority of implementations today rely on hand-optimized assembly for the core building blocks to achieve both security and performance. However, recent work by Abdulrahman et al. takes a new approach, writing a readable base assembly implementation first and leaving the bulk of the optimization work to a tool named SLOTHY based on constraint programming. SLOTHY performs instruction scheduling, register allocation, and software pipelining simultaneously using constraints modeling the architectural and microarchitectural details of the target platform.

In this work, we extend SLOTHY and investigate how it can be used to migrate already highly hand-optimized assembly to a different microarchitecture, while maximizing performance. As a case study, we optimize state-of-the-art Arm Cortex-M4 implementations of ML-KEM and ML-DSA for the Arm Cortex-M7.

Our results suggest that this approach is promising: For the number-theoretic transform (NTT) – the core building block of both ML-DSA and ML-KEM – we achieve speed-ups of 1.97× and 1.69×, respectively. For Keccak – the permutation used by SHA-3 and SHAKE and also vastly used in ML-DSA and ML-KEM – we achieve speed-ups of 30% compared to the M4 code and 5% compared to hand-optimized M7 code. For many other building blocks, we achieve similarly significant speed-ups of up to 2.35×. Overall, this results in 11 to 33% faster code for the entire cryptosystems.

March 4, 2025 at 7:45 AM

Reposted by Chai

Matthew Green

@matthewdgreen.bsky.social

Three questions about Apple, Encryption, and the U.K. blog.cryptographyengineering.com/2025/02/23/t...

Three questions about Apple, encryption, and the U.K.

Two weeks ago, the Washington Post reported that the U.K. government had issued a secret order to Apple demanding that the company include a “backdoor” into the company’s end-to-e…

blog.cryptographyengineering.com

February 23, 2025 at 4:51 PM

Reposted by Chai

Filippo Valsorda

@filippo.abyssdomain.expert

This is a fascinating vulnerability.

The root causes are implementing deterministic signatures instead of hedged, using a general purpose big number implementation, and leaking its API at the crypto layer.

JavaScript types are a red herring, could have happened in any language.

Private key extraction in ECDSA upon signing a malformed input (e.g. a string)

### Summary Private key can be extracted from ECDSA signature upon signing a malformed input (e.g. a string or a number), which could e.g. come from JSON network input Note that `elliptic` by...

github.com

February 16, 2025 at 10:08 AM

Chai

@ant4g0nist.bsky.social

Can’t wait to be back in Florida

February 15, 2025 at 4:33 PM

Reposted by Chai

Matthew Green

@matthewdgreen.bsky.social

A new advisory that affects deterministic ECDSA signing in elliptic, which was used in MetaMask. github.com/indutny/elli...

Private key extraction in ECDSA upon signing a malformed input (e.g. a string)

### Summary Private key can be extracted from ECDSA signature upon signing a malformed input (e.g. a string or a number), which could e.g. come from JSON network input Note that `elliptic` by...

github.com

February 15, 2025 at 1:41 PM

Reposted by Chai

Luca De Feo

@bsky.defeo.lu

Our friends at ELTE are organizing the Central European Crypology conference (CECC 2025) in Budapest and they're looking forward to your submissions (you only need to submit an extended abstract). Every info on the webpage: cecc2025.inf.elte.hu/en/

Central European Conference on Cryptology 2025

cecc2025.inf.elte.hu

February 13, 2025 at 4:19 PM

Chai

@ant4g0nist.bsky.social

Such beauty😻

January 13, 2025 at 7:52 PM

Reposted by Chai

jiska

@naehrdine.bsky.social

I will give two lightning talks at #38c3 🎉 Both on day 3, stage Huff, around 11:30am.

Detecting Fake Base Stations with CellGuard on iOS 📶
cfp.cccv.de/38c3-lightni...

iOS Inactivity Reboot 📲
cfp.cccv.de/38c3-lightni...