Blog
Security
CryptographyAuthenticationSecurity
The Architecture of Time-Based One-Time Passwords: Inside RFC 6238 and HMAC Generation
A comprehensive mathematical and protocol analysis of RFC 6238 Time-Based One-Time Passwords (TOTP), exploring dynamic truncation, HMAC-SHA1 step counters, clock drift mitigation, and secure in-browser execution.
PetexSpace
CryptographyWeb CryptoSecurity
Cryptographic Randomness in the Browser: Math.random vs crypto.getRandomValues
A deep architectural investigation into pseudo-random number generators (PRNG) versus cryptographically secure PRNGs (CSPRNG) in browser runtimes, detailing xorshift128+, state reconstruction attacks, and the Web Cryptography API.
PetexSpace