\hyphenation{cryp-to-gra-phy} Enarghephobic (afraid of unencrypted stuff) PhD student at @ETH. Constantly retiring from CTFs @flagbot_eth @0rganizers
Joined December 2020
- Tweets42
- Following217
- Followers158
- Likes268
Pinned Tweet
Much broken crypto, one common thread: bespoke, ill-designed cryptographic protocols.
Matrix, Mega, Threema, Telegram: secure primitives are not enough in complex applications. The new mantra shall be "don't roll your own protocol".
We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema
Matteo retweeted
The 2nd Cryptographic Applications Workshop (#CAW) will be at Eurocrypt 2025!
#CAW focuses on the construction and analysis of cryptography built for practice, bridging the gap between research and real-world applications.
Our call of talks is open: caw.cryptanalysis.fun
Matteo retweeted
New from the TLS meeting at IETF 117: Encrypted Client Hello (ECH) is enabled for 1% of Chrome stable users. A big step for privacy online!
datatracker.ietf.org/doc/dra…
Matteo retweeted
#WAC6 talks:
Matteo Scarlata @winterdeaf will present "why Threema failed in practice" lessons learned from 7 cryptographic attacks against a secure messenger.
The paper with @kientuong114 @kennyog will be presented at USENIX '23.
Full workshop program: cryptanalysis.fun
Matteo retweeted
I would like to thank the chairs for letting us use heart emojis in the paper title. I think this is a very important step forward for academia and research.
Can't wait to use "👀" for related work and "🤨" for limitations on the next one
Are you working with stubborn aarch64 code? Check out @cyan_pencil's upcoming @USENIXSecurity #SEC23 paper on efficiently rewriting ARM binaries. Insight: using heuristics for optimization on a safe baseline is key! nebelwelt.net/files/23SEC3.p… Comments welcome!
Matteo retweeted
NEW EPISODE! THREEEEEMAAAAAAAA
We recorded this almost two weeks ago, yay it's out!
With special guests @kennyog @kientuong114 @winterdeaf
youtu.be/QVt6RkYfGy0
Matteo retweeted
The team here is always happy to supply fresh stunt crypto attacks for your enjoyment. 😁 @kientuong114 @winterdeaf
Matteo retweeted
In early 2022 I started working with Kenny and Matteo on analyzing Threema, the messenger used by 🇨🇭govt, army and 🇩🇪 chancellor. Happy to say that the disclosure period is over and results are out! Fun vulnerabilities included :)
Check out our website: breakingthe3ma.app
We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema
Matteo retweeted
ETH cryptographers @kennyog, @winterdeaf and @kientuong114 have conducted a security analysis and discovered various vulnerabilities in the secure messaging app Threema. Read their full paper here: breakingthe3ma.app
#threema #Security #messenger
bit.ly/3vPkhxE
Matteo retweeted
Great day for rap-based cryptography!
@kientuong114 and Matilda burst onto the scene with some mellow key wrapping rap (youtube.com/watch?v=yh45UpVQ…).
@KhanhCrypto drops another stunner, with big names such as @cronokirby, @FouotsaB, and yours truly (youtube.com/watch?v=1z362xyQ…)
🔥💣🔥💣
Matteo retweeted
With Matteo Scarlata, who deserves huge credit for building the CTF infra in support of our Applied Crypto course. #goldenowl #ethday @CSatETH
Matteo retweeted
My first "Ultimate AI Art Competition" workshop at the VMI @ETH Scientific Staff Association Retreat was a resounding success
Matteo retweeted
MEGA - Malleable Encryption Goes Awry: I'm excited to share details of some new research on the security of @MEGAprivacy. Details at: mega-awry.io (1/28)
