--- title: Best Cryptography posts of 2024 | daily.dev description: The most upvoted Cryptography posts of 2024, curated by the daily.dev community. canonical: https://daily.dev/tags/cryptography/best-of/2024 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/cryptography/best-of/2024 og:type: website og:site_name: daily.dev og:title: Best Cryptography posts of 2024 | daily.dev og:description: The most upvoted Cryptography posts of 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Cryptography — 2024 1. 1 [](/posts/reverse-engineering-ticketmaster-s-rotating-barcodes-safetix--tx4xju4vr "Reverse Engineering TicketMaster's Rotating Barcodes (SafeTix)") Article Hacker News · 2y Reverse Engineering TicketMaster's Rotating Barcodes (SafeTix) The post explores TicketMaster's SafeTix rotating barcode system. It critiques the system's shortcomings, such as its reliance on internet connectivity and the potential for usability issues. The author reverse engineers the barcode mechanics, revealing how static bearer tokens and TOTP-based six-digit numbers are used to validate tickets. The motivations behind SafeTix's implementation, including reducing ticket fraud and promoting TicketMaster's app, are analyzed. The conclusion stresses the drawbacks of excluding people from events through tech barriers. 254 7 2. 2 [](/posts/golang-1-24-is-looking-seriously-awesome-sqw2rhp2m "Golang 1.24 is looking seriously awesome") Article Community Picks · 2y Golang 1.24 is looking seriously awesome Golang 1.24 introduces several notable features and improvements: a 2-3% performance boost, a new weak pointer implementation, support for post-quantum cryptography in \`crypto/tls\`, the \`omitzero\` tag for better zero value handling in \`encoding/json\`, and a \`tool\` directive in \`go.mod\`. The release also enhances the testing package with context support and introduces an experimental \`testing/synctest\` package for concurrent code testing. These updates promise better memory usage, enhanced security, and improved developer experience. 99 3. 3 [](/posts/a-complete-guide-to-secure-password-storage-qqnr5cya3 "A complete guide to secure password storage") Article Community Picks · 2y A complete guide to secure password storage The post provides a detailed guide on secure password storage, emphasizing the importance of hashing, salting, and using a pepper to protect passwords. It covers various hashing algorithms like Argon2id, Scrypt, BCrypt, and PBKDF2, and explains how to implement these techniques in practice, including handling existing applications. Additionally, it discusses the vulnerabilities of password storage, such as brute force attacks and rainbow tables, and offers methods to mitigate them. 75 4 4. 4 [](/posts/password-cracking-101-b76fleill "Password Cracking 101") Article System Weakness · 2y Password Cracking 101 Learn essential techniques for cracking password hashes and analyze cryptographic algorithms. Discover the concepts of cryptography, hashing, and salting. Get hands-on with tools like hashid, ShellScript, PowerShell, MD5, and Hashcat for practical password cracking exercises. 61 3 5. 5 [](/posts/json-web-token-jwt--exqzuupe2 "JSON WEB TOKEN (JWT)") Article System Weakness · 2y JSON WEB TOKEN (JWT) JSON Web Tokens (JWT) are a standard mechanism for transferring cryptographically signed JSON data, commonly used for access control, session handling, and authentication. Unlike traditional session tokens, JWTs store all necessary data client-side, making them ideal for distributed systems. JWTs consist of a payload, a signature, and a header. They are often used with JSON Web Signature (JWS) and JSON Web Encryption (JWE) extensions. JWT vulnerabilities include flawed signature verification, secret key brute-forcing, header parameter injections, and algorithm confusion attacks. To mitigate these risks, it's crucial to perform robust signature verification, use up-to-date libraries, and apply best practices such as setting token expiration dates and avoiding tokens in URL parameters. 52 6. 6 [](/posts/live-website-updates-with-go-sse-and-htmx-yvraugobx "Live website updates with Go, SSE, and htmx") Article Three Dots Labs · 2y Live website updates with Go, SSE, and htmx Learn how to push live updates to your website using Go, SSE, and htmx. SSE endpoints in Go are slightly different from HTTP endpoints because you don't just write data to the ResponseWriter and return from the function. The connection stays alive until the client (the browser) closes it. 52 7. 7 [](/posts/fffaraz-awesome-cpp-a-curated-list-of-awesome-c-or-c-frameworks-libraries-resources-and-shin-zcy9aoijw "fffaraz/awesome-cpp: A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. Inspired by awesome-... stuff.") Article Community Picks · 2y fffaraz/awesome-cpp: A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. Inspired by awesome-... stuff. A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. 39 8. 8 [](/posts/please-stop-inventing-new-software-licences-wuvpghwfq "Please Stop Inventing New Software Licences") Article Hacker News · 2y Please Stop Inventing New Software Licences Creating new software licences can be problematic for open-source projects by adding confusion and barriers for potential contributors. The author discusses their experience with Cyph's proprietary licence and the complications it introduced, ultimately discouraging them from contributing. Adhering to existing OSI Approved Licences can foster a more welcoming community for contributors. 32 3 9. 9 [](/posts/database-101-ssl-tls-for-beginners-qxezvdawg "Database 101: SSL/TLS for beginners") Article Community Picks · 2y Database 101: SSL/TLS for beginners The post provides a beginner-friendly guide on setting up secure and encrypted connections for databases, specifically using SSL/TLS. It covers fundamental concepts, along with practical steps for implementing SSL/TLS using OpenSSL, and configuring authentication in ScyllaDB. The post also includes code snippets and a detailed walk-through for testing encrypted connections using Node.js. 27 10. 10 [](/posts/rustgo-calling-rust-from-go-with-near-zero-overhead-fttiluodi "rustgo: calling Rust from Go with near-zero overhead") Article Hacker News · 2y rustgo: calling Rust from Go with near-zero overhead This post describes an experiment to call Rust code from Go with near-zero overhead, aimed at replacing assembly code for cryptographic operations. It explains why Rust is chosen over assembly and cgo, details the linking process, and provides a working example that integrates Rust and Go. The post concludes with performance benchmarks showing that rustgo is significantly faster than cgo and almost as fast as a Go function call. 24 1 11. 11 [](/posts/insecure-randomness-in-smart-contracts-mahp7j5ih "Insecure Randomness in Smart Contracts") Article Coins Bench · 2y Insecure Randomness in Smart Contracts Smart contracts on blockchain cannot achieve true randomness due to the deterministic nature of blockchains, pushing developers to use pseudo-random number generators (PRNGs). Methods relying on block properties or blockhashes are susceptible to miner tampering and predictability. External solutions like Chainlink VRF and onchain VRFs like Harmony VRF offer more secure random number generation but come with additional costs. The Signidice algorithm and the commit-reveal approach provide additional methodologies, each with their own sets of advantages and limitations. The choice of method depends on the specific requirements and incentives of the contract. 22 3 12. 12 [](/posts/owasp-cheat-sheet-series-xz46b72xd "OWASP Cheat Sheet Series") Article Ruby Flow · 2y OWASP Cheat Sheet Series Learn the proper methods for storing passwords to ensure they remain protected even if an application or database is compromised. This guide highlights the importance of using hashing (not encryption) for passwords, the benefits of using salts and peppers, and the recommended hashing algorithms like Argon2id, scrypt, bcrypt, and PBKDF2\. It also discusses work factors, upgrading legacy hashes, and ensuring compatibility with international characters. 21 13. 13 [](/posts/isn-t-it-ironic-money-isn-t-transactional-qddtekzab "Isn't it ironic: Money isn't transactional") Article Ayende @ Rahien · 2y Isn't it ironic: Money isn't transactional The author, who works on transactional databases, finds it ironic that there are no real-world transactions for money transfers, highlighting inefficiencies in the banking system. They share an example where a payment remained pending despite the recipient confirming receipt, providing insights into historical banking methods and distributed system design. 20 2 14. 14 [](/posts/never-access-the-dark-web-without-doing-this-tor-and-telegram-demos--mlnfpxli8 "Never access the Dark Web without doing this! (Tor and Telegram demos)") Video David Bombal · 2y Never access the Dark Web without doing this! (Tor and Telegram demos) The post provides insights into safely navigating the dark web, focusing on operational security (OPSEC). It highlights the importance of using secure tools like Tor and Telegram while discussing the risks of encountering illegal content. The post also mentions reputable sources like the Dark Net Marketplace Bible for OPSEC best practices. Additionally, it promotes TCM Security's certifications, which include comprehensive training and practical exams in penetration testing. 20 15. 15 [](/posts/qnns-the-next-chapter-in-ai-3yod5rhaa "QNNs: The Next Chapter in AI") Article Medium · 2y QNNs: The Next Chapter in AI Quantum Neural Networks (QNNs) combine quantum computing principles with traditional neural networks to enhance computational efficiency and solve complex problems more effectively. QNNs excel in fields like cryptography, climate modeling, and pharmaceutical research by leveraging properties like superposition and entanglement. Despite challenges in developing scalable quantum hardware and effective algorithms, the potential benefits are significant. Ethical considerations such as data privacy, algorithmic transparency, and equitable access are crucial for responsible development and deployment of QNNs. 20 2 16. 16 [](/posts/oz123-awesome-c-a-curated-list-of-awesome-c-frameworks-libraries-resources-and-other-shiny-things-nbxmogxei "oz123/awesome-c: A curated list of awesome C frameworks, libraries, resources and other shiny things. Inspired by all the other awesome-... projects out there.") Article Community Picks · 3y oz123/awesome-c: A curated list of awesome C frameworks, libraries, resources and other shiny things. Inspired by all the other awesome-... projects out there. A curated list of awesome C frameworks, libraries, resources, and tools. 20 17. 17 [](/posts/paseto-is-a-secure-alternative-to-the-jose-standards-jwt-etc--xurjzaeyl "Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.)") Article Community Picks · 2y Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.) Paseto (Platform-Agnostic Security Tokens) is introduced as a secure alternative to JSON Web Tokens (JWT) and related JOSE standards. Paseto simplifies security by eliminating the complexities and vulnerabilities associated with JWT, like choosing algorithms and handling encryption keys. It offers versioned protocols with predefined ciphersuites to avoid configuration errors and downgrade attacks. Paseto aims to be secure by default, and its straightforward design makes it easy to implement and use. The new version 0.5.0 is ready for production use, with talks of submitting it as a standard to the IETF. 19 18. 18 [](/posts/cryptography-in-go-aes-encryption-bitfield-consulting-qnxwga15t "Cryptography in Go: AES encryption — Bitfield Consulting") Article Bitfield Consulting · 2y Cryptography in Go: AES encryption — Bitfield Consulting This post discusses AES encryption in the Go programming language, covering key cipher modes such as Electronic Code Book (ECB) and Cipher Block Chain (CBC). It provides practical examples of how to use the \`crypto/aes\` package to encrypt and decrypt data. The author also introduces Galois Counter Mode (GCM) for added security through message integrity checks, and challenges readers to implement their own CLI tools for encryption and decryption. 18 19. 19 [](/posts/project-oak-oak-meaningful-control-of-data-in-distributed-systems--uxkudew1a "project-oak/oak: Meaningful control of data in distributed systems.") Article Hacker News · 2y project-oak/oak: Meaningful control of data in distributed systems. Oak is a platform for building distributed systems that provide externally verifiable claims about system behaviors. It focuses on Enclave Applications, which operate in isolated and remotely attestable environments. Oak uses Trusted Execution Environments (TEEs) for secure computations and remote attestation to establish trustworthiness. Its architecture minimizes the need to trust the service provider by ensuring encryption and verifiable integrity. Oak supports various TEE configurations, including minimal microkernels and full Linux containers. Transparent Release processes ensure that any modifications to Enclave Applications are logged and verifiable. 18 20. 20 [](/posts/hacker-explains-crypto-cryptography-tutorial--hv4wlobqe "Hacker explains Crypto (Cryptography tutorial)") Video David Bombal · 2y Hacker explains Crypto (Cryptography tutorial) The post explains the fundamentals of cryptography, starting with basic concepts such as the birthday paradox, exclusive OR (XOR) operations, and different types of ciphers. It emphasizes the importance of knowing the basics of cryptographic algorithms and operations before diving into advanced topics. Additionally, it covers symmetric key cryptography and the significance of initialization vectors in encryption. The post also touches on more complex topics like stream ciphers and block ciphers, highlighting the importance of rekeying and managing initialization vectors properly to maintain security. 17 21. 21 [](/posts/golang-weekly-issue-523-september-17-2024-7wox6g0tk "Golang Weekly Issue 523: September 17, 2024") Article Golang Weekly · 2y Golang Weekly Issue 523: September 17, 2024 Explore different methods for creating Retrieval-Augmented Generation (RAG) servers in Go, ranging from Gemini + Weaviate to LangChain and Genkit. Learn about WorkOS, a B2B SaaS identity platform that simplifies the integration of SSO and RBAC. Understand how to run Go in the browser using WebAssembly, including reducing WASM binary size with TinyGo. Discover the benefits of using Go instead of Bash for scripting across platforms. Delve into AES encryption in Go with practical examples and explanations. Also, check out the latest GoLand IDE features and the enhanced TinyGo Playground for simulating hardware and measuring power consumption. 16 22. 22 [](/posts/is-this-the-best-cybersecurity-beginner-cert-includes-giveaway--jcahhbiyp "Is this the best Cybersecurity beginner cert? (Includes Giveaway!)") Video David Bombal · 2y Is this the best Cybersecurity beginner cert? (Includes Giveaway!) 16 23. 23 [](/posts/what-s-new-in-net-9-cryptography-improvements-colunxulv "What's new in .NET 9: Cryptography improvements") Article elmah.io · 2y What's new in .NET 9: Cryptography improvements Microsoft is introducing significant cryptography updates in .NET 9, set to release in mid-November 2024\. Notable updates include the new CryptographicOperations.HashData method, which simplifies and enhances the process of hashing data, and the incorporation of KMAC (KECCAK Message Authentication Code) for improved data integrity and security. KMAC offers various modes and flexible output lengths, supporting modern cryptographic needs while ensuring compatibility with the latest systems. 16 24. 24 [](/posts/implementing-rsa-in-python-from-scratch-ps8ypiof2 "Implementing RSA in Python from Scratch") Article Community Picks · 3y Implementing RSA in Python from Scratch Learn how to implement RSA encryption in Python from scratch. Explore the math behind RSA, generate keys, and encrypt and decrypt messages. 15 25. 25 [](/posts/programming-zkps-from-zero-to-hero-j0em642sm "Programming ZKPs: From Zero to Hero") Article Hacker News · 2y Programming ZKPs: From Zero to Hero This tutorial introduces software engineers to Zero Knowledge Proofs (ZKPs), providing a step-by-step guide on programming ZKPs from scratch. It covers setting up the environment, writing basic circuits, performing a trusted setup, and generating and verifying proofs. Examples include creating a simple ZKP for proving knowledge of secret values, implementing constraints, and building a digital signature scheme using hash functions and commitments. The tutorial also touches on group signature schemes and provides exercises for deeper understanding. 14 1 [See all Cryptography archives](/tags/cryptography/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/cryptography/best-of/2024#page","url":"https://daily.dev/tags/cryptography/best-of/2024","name":"Best Cryptography Posts of 2024","description":"The most upvoted Cryptography posts of 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/cryptography/best-of/2024#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/reverse-engineering-ticketmaster-s-rotating-barcodes-safetix--tx4xju4vr","name":"Reverse Engineering TicketMaster's Rotating Barcodes (SafeTix)"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/golang-1-24-is-looking-seriously-awesome-sqw2rhp2m","name":"Golang 1.24 is looking seriously awesome"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/a-complete-guide-to-secure-password-storage-qqnr5cya3","name":"A complete guide to secure password storage"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/password-cracking-101-b76fleill","name":"Password Cracking 101"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/json-web-token-jwt--exqzuupe2","name":"JSON WEB TOKEN (JWT)"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/live-website-updates-with-go-sse-and-htmx-yvraugobx","name":"Live website updates with Go, SSE, and htmx"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/fffaraz-awesome-cpp-a-curated-list-of-awesome-c-or-c-frameworks-libraries-resources-and-shin-zcy9aoijw","name":"fffaraz/awesome-cpp: A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. Inspired by awesome-... stuff."},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/please-stop-inventing-new-software-licences-wuvpghwfq","name":"Please Stop Inventing New Software Licences"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/database-101-ssl-tls-for-beginners-qxezvdawg","name":"Database 101: SSL/TLS for beginners"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/rustgo-calling-rust-from-go-with-near-zero-overhead-fttiluodi","name":"rustgo: calling Rust from Go with near-zero overhead"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/insecure-randomness-in-smart-contracts-mahp7j5ih","name":"Insecure Randomness in Smart Contracts"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/owasp-cheat-sheet-series-xz46b72xd","name":"OWASP Cheat Sheet Series"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/isn-t-it-ironic-money-isn-t-transactional-qddtekzab","name":"Isn't it ironic: Money isn't transactional"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/never-access-the-dark-web-without-doing-this-tor-and-telegram-demos--mlnfpxli8","name":"Never access the Dark Web without doing this! (Tor and Telegram demos)"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/qnns-the-next-chapter-in-ai-3yod5rhaa","name":"QNNs: The Next Chapter in AI"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/oz123-awesome-c-a-curated-list-of-awesome-c-frameworks-libraries-resources-and-other-shiny-things-nbxmogxei","name":"oz123/awesome-c: A curated list of awesome C frameworks, libraries, resources and other shiny things. Inspired by all the other awesome-... projects out there."},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/paseto-is-a-secure-alternative-to-the-jose-standards-jwt-etc--xurjzaeyl","name":"Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.)"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/cryptography-in-go-aes-encryption-bitfield-consulting-qnxwga15t","name":"Cryptography in Go: AES encryption — Bitfield Consulting"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/project-oak-oak-meaningful-control-of-data-in-distributed-systems--uxkudew1a","name":"project-oak/oak: Meaningful control of data in distributed systems."},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/hacker-explains-crypto-cryptography-tutorial--hv4wlobqe","name":"Hacker explains Crypto (Cryptography tutorial)"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/golang-weekly-issue-523-september-17-2024-7wox6g0tk","name":"Golang Weekly Issue 523: September 17, 2024"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/is-this-the-best-cybersecurity-beginner-cert-includes-giveaway--jcahhbiyp","name":"Is this the best Cybersecurity beginner cert? (Includes Giveaway!)"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/what-s-new-in-net-9-cryptography-improvements-colunxulv","name":"What's new in .NET 9: Cryptography improvements"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/implementing-rsa-in-python-from-scratch-ps8ypiof2","name":"Implementing RSA in Python from Scratch"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/programming-zkps-from-zero-to-hero-j0em642sm","name":"Programming ZKPs: From Zero to Hero"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Cryptography","item":"https://daily.dev/tags/cryptography"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/cryptography/best-of"},{"@type":"ListItem","position":5,"name":"2024"}]}]} ```