Q: Java String to SHA1
This was originally posted as an answer to the question “Java String to SHA1” on stackoverflow.com.
Articles
Tech articles I’ve written over the years. Most were originally published on platforms such as Medium, dev.to, or Stack Overflow.
Q: Where can I find official test vectors for NIST SP 800-56C r1 Single Step KDF
This was originally posted as the accepted answer to the question “Where can I find official test vectors for NIST SP 800-56C r1 Single Step KDF” on crypto.stackexchange.com.
Security Best Practices: Symmetric Encryption with AES in Java and Android: Part 2
If you can’t use authenticated encryption like AES+GCM, this article will show how and why to use AES+CBC with Ecrypt-then-Mac with HMAC.
The Bcrypt Protocol… is kind of a mess
While writing my own bcrypt library, I discovered a lot of odd things surrounding the bcrypt protocol.
Q: Initial bytes incorrect after Java AES/CBC decryption
This was originally posted as an answer to the question “Initial bytes incorrect after Java AES/CBC decryption” on stackoverflow.com.
WeAreDevelopers Conference 2018
WeAreDevelopers 2018 delivered an impressively large, celebrity-packed developer convention in Vienna, but for me the scale made it feel impersonal and the content often too surface-level to justify returning.
The Concise Interface Implementation Pattern
A convenient pattern to always use interfaces where possible but to keep the code-footprint and complexity of relations small
Improving ProGuard Name Obfuscation
In this article I will show you how to strengthen ProGuard’s name obfuscation, making it harder for an attacker the reverse engineer your…
Handling Proguard as Library Developer or in a Multi-Module Android Application
When starting a new project, all the Proguard configuration goes into that single proguard-rules.pro file. This is fine for the beginning…
Managing Logging in a Multi-Module Android Application
In this article I will show you how we adapted our logging strategy to a massively grown project structure. In the first part I will go…
Security Best Practices: Symmetric Encryption with AES in Java and Android
What to consider when encrypting your data and how to correctly implement it with AES-GCM.
Q: Bit shift operations on a byte array in Java
This was originally posted as an answer to the question “Bit shift operations on a byte array in Java” on stackoverflow.com.
Q: Android: How to programmatically access the device serial number shown in the AVD manager (API Version 8)
This was originally posted as an answer to the question “Android: How to programmatically access the device serial number shown in the AVD manager (API Version 8)” on stackoverflow.com.
Droidcon London 2017
Droidcon London 2017 combined high-quality Android engineering talks with a fun and community-driven atmosphere, making it one of the most enjoyable Android conferences in Europe.
Q: Is HKDF implemented in Java Cryptography Architecture?
This was originally posted as an answer to the question “Is HKDF implemented in Java Cryptography Architecture?” on stackoverflow.com.