Harry McLaren - Personal Website

A (Relatively Easy To Understand) Primer on Elliptic Curve Cryptography – CloudFlare

This provides a really good explanation of Elliptic Curve Cryptography (ECC) and includes a fantastic real world analogy:

“By this measure, breaking a 228-bit RSA key requires less energy to than it takes to boil a teaspoon of water. Comparatively, breaking a 228-bit elliptic curve key requires enough energy to boil all the water on earth. For this level of security with RSA, you’d need a key with 2,380-bits.”

CloudFlare have also just blogged about their use of ECC when signing DNSSEC responses. The result is a very strong key with a significantly smaller response size (1181 bytes vs. 313 bytes).

Their engineer (Vlad Krasnov) even implemented the ECDSA signature algorithm in assembler speeding up signing by 21x!

CloudFlare’s reason for doing this is to limit the vector of DDoS based attacks using DNS reflection.

“By keeping our packet size small enough to fit in a 512 byte UDP packet, we keep the domains on us safe from being the amplification factor of a DDoS attack.”

Source: A (Relatively Easy To Understand) Primer on Elliptic Curve Cryptography

Introducing: Ransomware Tracker | abuse.ch

The author and maintainer of the popular abuse.ch website has realeased a new and interesting project tracking and providing guidence for ransomwear type malware.

Its purpose at this stage of development is:

Providing an overview on internet infrastructure used by cybercriminals for their Ransomware operations
Providing hosting- and internet service providers (ISPs), law enforcement agencies (LEA) and national CERTs/CSIRTs intel on such infrastructure within their constituency
Offering blocklists for internet users, enterprises and antivirus vendors and security solution providers
Giving internet users and enterprises a brief overview on Ransomware mitigation strategies

I think it’s great that more and more security professionals are developing new tools, sites and research to help mitigate these threats.

Source: Introducing: Ransomware Tracker | abuse.ch