~/talk

Cryptography Isn't Scary

Talkat CascadiaJS 2022 · 2022-08-30..09-02· [security, nodejs]
slides:none on file

Crash course shows hands-on primitives and working code: Diffie‑Hellman via x25519 produces a shared secret used with AES‑128, Node uses crypto/OpenSSL keypair APIs to derive the secret, browsers expose getRandomValues and the SubtleCrypto ops for sign/verify/encrypt, and a demo produces identical ciphertexts in Node. The RSA/NIST/NSA dual‑EC RNG story explains a plausible backdoor. The Sigstore effort and Sigstore JS plus OIDC/GitHub Actions enable RFC 626 style keyless package signing to link npm packages to source and CI.

AI-written summary · about

  1. 0:00Introduction and basics
  2. 3:01Core cryptographic concepts
  3. 5:35Modular arithmetic explained
  4. 7:09Elliptic curve cryptography
  5. 10:44Diffie-Hellman key exchange
  6. 12:50Crypto in Node and browsers
  7. 16:23The NSA backdoor story
  8. 20:21Software signing with Sigstore
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.