Filippo Valsorda

Turn Dependabot Off

Inspecting the Source of Go Modules

go.sum Is Not a Lockfile

Building a Transparent Keyserver

The 2025 Go Cryptography State of the Union

Claude Code Can Debug Low-level Cryptography

The Geomys Standard of Care

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

Maintainers of Last Resort

Cross-Site Request Forgery

Go Assembly Mutation Testing

Encrypting Files with Passkeys and age

You Should Run a Certificate Transparency Log

Benchmarking RSA Key Generation

frood, an Alpine initramfs NAS

Accumulated Test Vectors

The FIPS Compliance of HKDF

Let’s All Agree to Use Seeds as ML-KEM Keys