Paragon Initiative Enterprises @ParagonIE

Technology Consulting, Code Review, Application Development. #appsec #infosec #cryptography #crypto #php paragonie.com Naples, FL Joined March 2015

Tweets

972
Followers

1K
Following

56
Likes

314

Frank @jedisct1

6 months ago

Ending the year with a vulnerability in libsodium 00f.net/2025/12/30/lib…

4 34 151 15K 68

View Details

Paragon Initiative Enterprises @ParagonIE

9 months ago

-> bsky.app/profile/parago…

0 0 0 67 0

View Details

Paragon Initiative Enterprises @ParagonIE

a year ago

Accelerating The Adoption of Post-Quantum Cryptography with PHP paragonie.com/blog/2025/02/a…

0 0 2 93 0

View Details

To whoever is working on "image encryption" out there: - Your custom stream cipher using chaotic maps is not secure or efficient - AES-CTR is not slow and does not suffer from weak entropy problems (WTF) - Floating point is not great for cryptography (sorry, Falcon folks!)

5 11 61 7K 5

View Details

Frank @jedisct1

2 years ago

Just released a new version of libaegis, as well as the rust bindings github.com/jedisct1/libae… - Easy-to-use, high security, high performance authenticated encryption. Now with convenient helpers to use it as a MAC, and workarounds for LLVM18 regressions. github.com/jedisct1/libae…

0 7 15 2K 2

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

0 0 1 87 0

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

Old, tired argument: "You can't declare things as a typed array, e.g. string[], in PHP" New, refreshing argument: github.com/paragonie/type…

1 0 1 169 1

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

Newly open sourced: A CipherSweet key provider backed by AWS KMS. github.com/paragonie/ciph…

1 1 1 208 0

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

The docs are available at ciphersweet.paragonie.com

0 0 0 60 0

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

We introduced CipherSweet with a 2019 blog post: paragonie.com/blog/2019/01/c…

1 0 0 65 0

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

The description the NVD published CVE-2024-33851 is unfortunately misleading. See the note at the top of github.com/paragonie/phpe… for specific details.

0 2 3 1K 0

View Details

Open Source Security mailing list @oss_security

2 years ago

Security Issues, Abandonment, and Fork of PHP ECC library (mdanter/ecc, phpecc/phpecc) openwall.com/lists/oss-secu… The project "has not responded to our attempts to fix security issues from the year 2021" so "we opted to fork this library." by @ParagonIE

0 2 3 1K 1

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

We forked PHPECC! Read the release notes below and update your dependency ASAP. github.com/paragonie/phpe…

1 2 2 1K 1

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

The latest release of EasyECC uses our PHPECC fork. Additionally, it prevents and rejects malleable ECDSA signatures and opts for constant-time algorithms when secret keys are involved.

0 1 0 116 0

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

However, this library is still rather low-level, so you're better off using github.com/paragonie/easy… instead. The API for EasyECC is much simpler, easier to get right, and harder to get wrong.

1 1 0 121 0

View Details

Paragon Initiative Enterprises @ParagonIE

2 years ago

Given the prevalence of software (especially cryptocurrency-adjacent) that relies on this code, we thought we'd take it over and provide a better story for its security. So we forked it.