Sophie Schmieg

Leading cryptography (ISE Crypto) at Google.

Opinions my own.

Content usually badly explained mathematics

profession: cryptography engineer
hobby: Kerbal Space Program
hobby: Lego
hobby: Factory Sim Games

Public Key

npub10qaqswg07tsrztrauf69ylup6qj50kef7e4ut7t0vganygk0t2rsyr4hg8

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs8swsg8y8l9cp39377yazj07qaqf28mv5lv679l9hkywejyt844pcprpmhxue69uhhyetvv9ujuumwdae8gtnnda3kjctvqyxhwumn8ghj7mn0wvhxcmmvsc7mpc

Publishing to

relay.snort.social

nos.lol

relay.damus.io

Author Public Key

npub10qaqswg07tsrztrauf69ylup6qj50kef7e4ut7t0vganygk0t2rsyr4hg8

Show more details

Last Notes

2026-07-01 00:04:27 CEST

- reply

Please read this before treating djb with any seriousness. https://keymaterial.net/2025/11/27/ml-kem-mythbusting/

2026-06-26 13:49:50 CEST

The Deutsches Museum Thermometer has an out of bounds exception
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/816/252/462/210/600/original/8a17f726c12255ab.jpg

2026-06-14 13:34:39 CEST

@npub184f…pnjc : Look at that girl's tattoo
Me: sorry, missed it
@npub184f…pnjc : Look at those boots!
Me: sorry, missed it
@npub184f…pnjc : Look at…
Me: we're at a train station. Just assume that I'm distracted by trains.

2026-06-14 10:01:37 CEST

Visiting my parents and my brother's children.
$30 children's toy microscopes certainly have improved a lot since I was a child.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/747/389/075/637/868/original/e25ae1500fef50b9.jpg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/747/390/880/816/933/original/ac5a328e5c669f1f.jpg

2026-05-28 17:17:04 CEST

- reply

ugh and they left themselves some wiggle room: the way it's written, you could claim that the criminals prosecuted are the groups exploiting the vulnerabilities. That is an obvious statement and it's clearly implied that the person doing the zero day release is actively cooperating with threat actors and therefore also criminally liable, but Microsoft can always "well technically" themselves out of this claim.

2026-04-19 18:41:22 CEST

My hot take on the vulnpocalypse:
We don't have more vulnerabilities than we had before. The vulnerabilities were always there, we just didn't know they existed. But importantly, for moderately sophisticated attackers, who only have to find a relatively low number of vulns to begin with, not much has changed. Yeah it's a little bit cheaper, but finding vulns wasn't all that difficult, depending on the target. For defenders otoh, making the finding of vulns cheaper is theoretically a good thing, but we already had not enough capacity to fix the vulns found by fuzz testing and similar methods before, so this is just adding on the pile of stuff we know is broken, but can't keep up with fixing it. The net effect seems to be that we made triage more expensive. Yay.

2026-02-25 22:05:29 CET

- reply

it turns out, a random number generator does not get better when you first run it through a lot of linear algebra 😏

2026-01-21 18:51:13 CET

One of the aspects of AI that I hate the most is that at some point, I start reading my own or other people's genuine writing in "AI voice".
Way to undermine your own confidence or devalue other people's writing instantly.

2025-10-21 20:56:14 CEST

Did anyone check on Assane Diop? I was under the impression that stealing diamonds in broad daylight out of the Louvre is something that is really only accomplished by the legendary Lupin.

2025-10-15 02:17:39 CEST

- reply

You didn't really think the business value of that PR that had more comments than lines of code that all of us have written at some point in our career (if you haven't, I'm sorry, your onboarding mentor sucked, they were supposed to point out all the stuff you had to learn the hard way) was in getting it merged eventually, right? The value was the PR after that, that had a lot less comments. And the PR after that one, etc.

2025-10-15 01:38:45 CEST

Whenever I see "GenAI basically can do the work of a junior dev", I assume that those people are using junior devs very differently from me. To me, the value of a junior developer is maybe like 20% the code they write, and 80% is a down payment to a future where they no longer are a junior. I still haven't found an AI that could do that second part.

2025-10-03 16:04:50 CEST

Criticizing Linux on Mastodon is really the best way to make men type paragraphs, isn't it?

2025-04-15 22:39:29 CEST

And all of the sudden, we have solved supply chain security.
No CVE, no vulnerabilities!

2025-04-01 15:52:36 CEST

- reply

til the Babylonians already had the "no take, only throw" meme.

2025-03-29 07:28:24 CET

- reply

I agree that most small to medium companies probably do not have to care about any of this right now. Those that do probably know already. But it's not something that can be simply ignored by everybody.
The main way to recognize overhyped nonsense is when they talk about inventory and agility. Unfortunately, neither of these terms is completely without merit, but they are the most favorite buzzwords of the hype peddlers. Really both of these boil down to proper key management. Something that is extremely difficult, but not unique or novel with PQC.

2025-03-26 06:33:09 CET

Days since Signal's deniable handshake has last been defeated by nobody caring about cryptographically deniable handshakes: 0

2025-03-18 19:30:29 CET

Feeling great about my upcoming international travel right now.
https://www.theguardian.com/us-news/2025/mar/18/germany-investigates-after-national-with-green-card-arrested-at-us-border

2025-03-18 17:39:16 CET

- reply

look at number fields, split, ramified, and unramified primes while you're at it. IMHO easier to understand and deeper than split complex or dual numbers (although the dual number construction is extremely important for algebraic geometry).

2025-03-12 18:42:15 CET

I'm on the same plane as Whitfield Diffie. We exchanged greetings, but not keys.

2025-03-07 15:14:52 CET

Sometimes, a tiny bit of me wants them to outlaw encryption, just so I can show up at a pivotal moment, wearing a hoodie and half engulfed by fog from a fog machine, and mysteriously explain: "I possess the forbidden knowledge. Knowledge not meant for humans to know. Knowledge of matrices that will drive you mad just gazing upon. Infinite Knowledge of fields, finite in their nature!"

2025-03-05 19:10:10 CET

This was a really fun vulnerability to have the pleasure to consult on:
https://bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-microcode-hacking
It turns out AES-CMAC is not second preimage resistant if you know the key (double so if the key is in an RFC), and 2048 bit numbers are quite often very easy to factor.

2025-02-11 17:23:48 CET

- reply

be that as it may, it matters that the president cannot change the law via executive fiat. It is still illegal to bribe foreign officials. There might not be enforcement right now, and if you outrun the statute of limitations that might mean you are able to commit an illegal act without penalty. But it is still an illegal act, and you still committed a crime.

2025-02-11 17:06:28 CET

- reply

executive orders cannot suspend laws passed by Congress.

2025-01-28 06:27:54 CET

- reply

great news, I have pretty much fully mitigated the risks posed to us by cryptographically relevant quantum computers!

2025-01-04 20:09:03 CET

I have to say, Mastodon's inability to actually reliably fetch content leads to hilarious situations, like a reply to my screenshot about someone earnestly proposing to use Gen AI as a random number generator being confused about why people are talking about what a bad idea it would be to use Gen AI as a random number generator.
Like I get it, distributed computing is hard, but at least if someone expands a thread, try to fetch the whole thread.
https://mastodon.social/@nf3xn/113770165305664382

2025-01-03 21:46:33 CET

I was forwarded this screenshot and it just is living rent free in my head right now.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/766/372/583/509/013/original/558b18b47adc8848.jpeg

2024-12-13 17:14:36 CET

At this point, the IETF might require an anti-SLAPP rule, disallowing participants threatening other participants or the IETF with frivolous lawsuits from taking part in the standards process.

2024-11-23 18:50:39 CET

@npub184f…pnjc, reviewing a resume, on a Saturday morning, while still in bed: this candidate's work experience is from September 2025 to present!
Me: you should tell them they're hired, start date is November 10th 2024, three unexcused consecutive days of absence are considered a resignation.

2024-11-07 12:35:28 CET

All other philosophies of mathematics: all hash functions have collisions! And trivially so due to the Pigeon Hole Principle!
Ultra finitist: cryptographically secure hash functions are injective 😎

2024-06-01 09:59:25 CEST

When I talk to other software engineers, there seem to be two camps developing when it comes to LLM assisted coding. Some are over the moon happy about it, and say it improves their productivity by an order of magnitude. Others are fairly indifferent to slightly negative about it, saying it is more of a nuisance than actually helping, inventing APIs that sure would be nice if they existed etc.
Finding myself in the latter camp, I just can't deal with the unpredictability of the tools. Both in terms of reproducibility, but also in terms of continuousness. Some tasks it does well on, but it's near impossible to tell whether it will do the same for a similar, related task. To me, the one advantage and disadvantage computers have is that they do exactly as told, and a probabilistic tool breaks that and just feels buggy.
The other thing I can't deal with is that it seemingly doesn't lend itself to iterative, local approaches. Every query is a new thing, that may discard everything it had before, and you can't really hone in on the thing you want.
Add to that that it often suggests things that might be reasonable, but aren't the way I would have done it, and I like doing things the way I would have done it, so I'm going to replace the entire suggestion wholesale, and I end up with a tool that feels at best only marginally useful, if not detrimental to writing code.