Blogs do autor

Slides from ToorCon 17 talk on OpenSSL Performance
Autor: John M. Publicado em 25/10/15 0
I've sent the slides from my talk on Improving OpenSSL Performance to the ToorCon staff for distribution, but I am also making them available for download here in PDF format. I chose PDF since many of the slides have extensive notes which go into much greater detail that the slides could, and in many cases even cover detail that I could not put into the 50-minute session on Saturday.
Presenting at ToorCon 17 in San Diego on October 24th
Autor: John M. Publicado em 07/10/15 0
I'll be speaking at the ToorCon 17 security conference which is taking place at the end of this month, from October 24-25th. My specific talk will be on Saturday at 1pm, and will cover some of the algorithm enhancements that were made to OpenSSL in order to increase the performance of AES-CBC and...
Presenting at USENIX LISA15 in November
Autor: John M. Publicado em 10/09/15 0
I'll be holding a mini-tutorial session at the USENIX LISA15 conference in Washington, D.C. this coming November. My class, entitled Fundamentals of Data Visualization: Building more Effective Charts and Business Intelligence Dashboards, is targetted at anyone who has to present numerical data in static form, whether it be part of a presentation to management and co-workers or in a business intelligence dashboard. The emphasis is on creating clear graphs and displays that can be parsed quickly and accurately, and which do not mislead the reader. It also covers some visual theory and the physiology of vision, which serve as the foundation for the recommendations and best practices when creating charts and dashboards. I've taught a version of this material internally here at Intel over the past three years.
Configuring the Apache Web server to use RDRAND in SSL sessions
Autor: John M. Publicado em 12/03/15 0
Starting with the 1.0.2 release of OpenSSL*, RDRAND has been temporarily removed as a random number source. Future releases of OpenSSL will re-incorporate RDRAND, but will employ cryptographic mixing with OpenSSL's own software-based PRNG. While OpenSSL's random numbers will benefit form the qual...
Changes to RDRAND integration in OpenSSL
Autor: John M. Publicado em 03/10/14 0
Beginning with the 1.0.1f release of OpenSSL the RDRAND engine is no longer loaded by default*. The impact of this from the users' and developers' perspectives is that, for the near future, random numbers obtained from the RAND_bytes() function will come from OpenSSL's software-based PRNG rather...
To Concatenate or Not Concatenate RDRAND?
Autor: John M. Publicado em 07/03/14 0
At the heart of Intel® Data Protection with Secure Key is the digital random number generator (DRNG), a NIST* SP800-90A compliant pseudorandom number generator which is accessed using the RDRAND instruction. Beginning with Intel CPU's code-named Broadwell, Secure Key will also include an SP800-90...
RDRAND: Do I need to check the carry flag, or can I just check for zero?
Autor: John M. Publicado em 13/01/14 3
One question I have been getting a lot lately is whether you have to check the status of the carry flag to see if a valid random number was returned by RDRAND. The reason why this question gets asked is because of this description of a RDRAND underflow condition, which appears in the DRNG Softwar...
Location Data Logger Design and Implementation, Part 7: The accuracy circle user control
Autor: John M. Publicado em 26/09/13 4
This is part 7 of a series of blog posts on the design and implementation of the location-aware Windows* Store app "Location Data Logger". Download the source code to Location Data Logger here. The Accuracy Circle User Control Many, if not most, internet mapping applications and consumer navigati...
Some notes on Secure Key performance and throughput
Autor: John M. Publicado em 26/09/13 0
At IDF in September I led a technical session in the security track on developing applications that make use of Secure Key. In that presentation I put up the following chart: It plots the maximum, total throughput of the RDRAND instruction in a multithreaded application for six different systems...
Location Data Logger Design and Implementation, Part 6: The Export Class
Autor: John M. Publicado em 20/08/13 0
This is part 6 of a series of blog posts on the design and implementation of the location-aware Windows Store app "Location Data Logger". Download the source code to Location Data Logger here. The Export Class The early development versions of Location Data Logger only logged data points to CSV f...