CCryptoPlay Guide3h ago · 8 min readFrom HMAC-SHA256 to Verifiable Results: A JavaScript WalkthroughA result can look random while still being reproducible. That is the useful idea behind a provably fair protocol: commit to a secret input, combine it with public inputs through a documented algorithmcryptoplayguide.hashnode.dev
AAmit Shukla33m ago · 6 min readWhy password123 cracks in a second and 6 random words take 700,000 yearsEvery few weeks there is another breach notice: "your password may have been exposed." What actually leaked, and why does one password survive it while another falls in seconds? This guide walks throuamitshuklabag.hashnode.dev
AAbdulrahman1d ago · 8 min readMaking "one-time" links actually one-time: fragments, preview bots and an atomic DELETEEvery team has a "temporary" password sitting in a chat history somewhere. Someone pasted a database credential into a DM two years ago, and it is still there, searchable, synced to every device, incl11Aabdulrahman-gg.hashnode.dev
VVaultKeepR3d ago · 3 min readShamir Secret Sharing in a Password Manager: Recovery Without a Forgot-Password ButtonA zero-knowledge password manager cannot reset your master password, because it never has the key that decrypts your vault. That is the reason it is secure. It is also the reason a forgotten master pa1blog.vaultkeepr.xyz
VVaultKeepR3d ago · 3 min readWhat Is a Zero-Knowledge Password Manager?A zero-knowledge password manager encrypts your vault on your device before anything is sent to a server. The server stores ciphertext. It never receives your master password or the key that decrypts blog.vaultkeepr.xyz
KKevin Hwang4d ago · 5 min readRemediating the eMudhra Certificate Authority CompromiseOn Oct 20, 2026, it was publicly disclosed that several eMudhra certificate authority certificates were compromised. ‼️ There was a bug in eMudhra's key generation ceremony that caused them to be gene1Akevinhwang.dev
KKANIKAkt4d ago · 3 min readDetecting File Tampering in Python Using SHA-256 Cryptographic HashingHow do security engineers, forensic investigators, and software distributors know if a sensitive file has been secretly modified by an attacker? They don't compare files line by line—they use cryptogrkanikatiwari.hashnode.dev
HHarshit Paneri5d ago · 34 min readThe eMudhra Certificate Incident, Explained SimplyIn October 2026, a security researcher found that eight secret keys belonging to eMudhra, an Indian company that vouches for websites, could be guessed by anyone. One of the keys was literally the numharshitpaneri.hashnode.dev
MMuhammad Ali Mughal4d ago · 7 min readHow to Hide a Secret Message Inside an Image: A Practical Guide to SteganographyEncryption hides what a message says. Steganography hides the fact that there's a message at all. I'm Muhammad Ali Mughal, and I built PixelValut, a browser-based tool for hiding text inside images. Wresume-ai.hashnode.dev
RRONI DAS6d ago · 7 min readA certificate authority's private key was the number 4. We checked.A private key for a certificate authority on the P-384 curve should be a random number more than 100 digits long. On Saturday 17 October, a researcher reported that eight of eMudhra's intermediate CA systemdesignacademy.hashnode.dev
