Themes from Real World Crypto 2022 By William WoodruffLast week, over 500 cryptographers from around the world gath... 2022-5-3 19:0:4 | 阅读: 25 | 收藏 | blog.trailofbits.com attacker presenters security victim elgamal

Improving the state of go-fuzz By Christian Presa SchnellDuring my winternship, I used the findings from recent... 2022-4-26 19:0:18 | 阅读: 35 | 收藏 | blog.trailofbits.com homedir mutation filemode dep fuzzer

Amarna: Static analysis for Cairo programs By Filipe CasalWe are open-sourcing Amarna, our new static analyzer and linter f... 2022-4-20 19:0:4 | 阅读: 35 | 收藏 | blog.trailofbits.com cairo prover sqr felt memory

The Frozen Heart vulnerability in PlonK By Jim MillerIn part 1 of this blog post, we disclosed critical vulnerabilities... 2022-4-18 19:0:1 | 阅读: 32 | 收藏 | blog.trailofbits.com prover plonk verifier polynomial heart

The Frozen Heart vulnerability in Bulletproofs By Jim MillerIn part 1 of this series, we disclosed critical vulnerabilities tha... 2022-4-15 19:0:52 | 阅读: 36 | 收藏 | blog.trailofbits.com t1 t2 commitment shamir

The Frozen Heart vulnerability in Girault’s proof of knowledge By Jim MillerIn part 1 of this series, we disclosed critical vulnerabilities th... 2022-4-14 19:0:32 | 阅读: 23 | 收藏 | blog.trailofbits.com frozen heart girault shamir fiat

Part 1: Coordinated Disclosure of Vulnerabilities Affecting Girault, Bulletproofs, and PlonK By Jim MillerTrail of Bits is publicly disclosing critical vulnerabilities that... 2022-4-13 19:0:0 | 阅读: 19 | 收藏 | blog.trailofbits.com shamir fiat frozen heart

Towards Practical Security Optimizations for Binaries By Michael D. Brown, Senior Security EngineerTo be thus is nothing, but to be sa... 2022-3-25 20:58:54 | 阅读: 23 | 收藏 | blog.trailofbits.com behaviors security passes attacker

Optimizing a smart contract fuzzer By Sam AlwsDuring my winternship, I applied code analysis tools, such as GHC’s H... 2022-3-2 20:0:33 | 阅读: 24 | 收藏 | blog.trailofbits.com echidna haskell statechange memory

Maat: Symbolic execution made easy By Boyan MilanovWe have released Maat, a cross-architecture, multi-purpose, and... 2022-2-23 20:0:8 | 阅读: 27 | 收藏 | blog.trailofbits.com maat symbolic analysis ghidra

Part 2: Improving crypto code in Rust using LLVM’s optnone By Henrik BrodinLet’s implement crypto!Welcome to the second part of our posts... 2022-2-1 20:0:25 | 阅读: 24 | 收藏 | blog.trailofbits.com i32 optimize i1 rustc noinline

Part 1: The life of an optimization barrier By Fredrik DahlgrenMany engineers choose Rust as their language of choice for i... 2022-1-26 20:0:35 | 阅读: 23 | 收藏 | blog.trailofbits.com i32 barrier memory turbofan timing

C your data structures with rellic-headergen By Francesco BertolacciniHave you ever wondered how a compiler sees your data st... 2022-1-19 20:0:12 | 阅读: 28 | 收藏 | blog.trailofbits.com rellic headergen bitcode structs dw

Finding unhandled errors using CodeQL By Fredrik DahlgrenOne of your developers finds a bug in your codebase—an unhand... 2022-1-11 20:0:58 | 阅读: 41 | 收藏 | blog.trailofbits.com dataflow codebase taint predicate

Toward a Best-of-Both-Worlds Binary Disassembler By Stefan NagyThis past winter, I was fortunate to have the opportunity to work... 2022-1-5 20:0:51 | 阅读: 35 | 收藏 | blog.trailofbits.com disassembly analysis datalog lojekyll

Celebrating our 2021 Open Source Contributions At Trail of Bits, we pride ourselves on making our best tools open source, such a... 2021-12-31 20:0:56 | 阅读: 21 | 收藏 | blog.trailofbits.com packaging osquery windows github libs

Disclosing Shamir’s Secret Sharing vulnerabilities and announcing ZKDocs By Filipe Casal and Jim MillerTrail of Bits is publicly disclosing two bugs that... 2021-12-21 20:0:4 | 阅读: 25 | 收藏 | blog.trailofbits.com schemes polynomial threshold network swingby

Detecting MISO and Opyn’s msg.value reuse vulnerability with Slither By Simone MonicaOn August 18, 2021, samczsun reported a critical vulnerability i... 2021-12-17 03:00:49 | 阅读: 40 | 收藏 | blog.trailofbits.com slither detectors sol payable

What does your code use, and is it vulnerable? It-depends! You just cloned a fresh source code repository and want to get a quick sense of i... 2021-12-16 22:00:14 | 阅读: 30 | 收藏 | blog.trailofbits.com repository library python autotools

MUI: Visualizing symbolic execution with Manticore and Binary Ninja By Alan Chang, University of OxfordDuring my summer internship, I had the wonder... 2021-11-17 21:00:55 | 阅读: 38 | 收藏 | blog.trailofbits.com mui symbolic manticore internship evm