Nadim Kobeissi
@nadim.computer
Applied cryptographer. Mainly working in the cryptography auditing industry, but sometimes venturing back into academia. Hobbyist puzzle game author. https://nadim.computer
Pinned
Cedarcrypt 2026 - Applied Cryptography Summer School & Conference
Join us for four days of applied cryptography in the Mediterranean. July 13-16, 2026 at AUB Mediterraneo Campus, Paphos, Cyprus.
cedarcrypt.org
Come be part of Cedarcrypt, our historic new initiative to grow cryptography research, development and representation in the Levant region!
We're seeking speakers and workshop leaders: our call for submissions is open! Learn more: cedarcrypt.org
Please spread the word!
We're seeking speakers and workshop leaders: our call for submissions is open! Learn more: cedarcrypt.org
Please spread the word!
My Productivity Zone
February 10, 2026 at 9:09 PM
My Productivity Zone
Did you know: you can Jevil-theme your GitHub
February 10, 2026 at 7:31 PM
Did you know: you can Jevil-theme your GitHub
Verifpal 0.31.2 is out!
For the first time, Verifpal can fully verify a model of Signal’s X3DH key agreement and Double Ratchet protocol across three messages, making it competitive with the state of the art for protocol verification... from 2016.
For the first time, Verifpal can fully verify a model of Signal’s X3DH key agreement and Double Ratchet protocol across three messages, making it competitive with the state of the art for protocol verification... from 2016.
Verifpal Verifies Signal Across Three Messages
Verifpal 0.31.2 ships a major overhaul to active attacker analysis, finally enabling full verification of Signal's three-message protocol.
symbolic.software
February 10, 2026 at 6:26 PM
Verifpal 0.31.2 is out!
For the first time, Verifpal can fully verify a model of Signal’s X3DH key agreement and Double Ratchet protocol across three messages, making it competitive with the state of the art for protocol verification... from 2016.
For the first time, Verifpal can fully verify a model of Signal’s X3DH key agreement and Double Ratchet protocol across three messages, making it competitive with the state of the art for protocol verification... from 2016.
Pushed security advisories for the Cryspen libcrux-psq and hpke-rs bugs to RustSec: github.com/rustsec/advi...
Push libcrux-psq and hpke-rs advisory proposals by nadimkobeissi · Pull Request #2637 · rustsec/advisory-db
These are proposals for the more impactful vulnerabilities discovered as part of this research work:
The Verification Theater: When Formal Methods Create False Assurance in Cryptographic Libraries
...
github.com
February 10, 2026 at 6:25 PM
Pushed security advisories for the Cryspen libcrux-psq and hpke-rs bugs to RustSec: github.com/rustsec/advi...
Today's work music
ぐるぐると廻るセカイ～viva o caos
YouTube video by Release - Topic
www.youtube.com
February 10, 2026 at 10:16 AM
Today's work music
Our Linux patchset to add full audio support on Lenovo Legion devices to the Linux kernel now supports kernel 6.19, released today:
GitHub - nadimkobeissi/16iax10h-linux-sound-saga: Actual, complete solution for Linux audio on the Lenovo Legion Pro 7i Gen 10 (16IAX10H)
Actual, complete solution for Linux audio on the Lenovo Legion Pro 7i Gen 10 (16IAX10H) - nadimkobeissi/16iax10h-linux-sound-saga
github.com
February 9, 2026 at 4:21 PM
Our Linux patchset to add full audio support on Lenovo Legion devices to the Linux kernel now supports kernel 6.19, released today:
Responsible disclosure is a political guilt game meant to safeguard the reputations and business interests of vendors at the expense of transparency, accountability and safety of users
I was there during the whole full- versus "responsible-" disclosure debate; and for not entirely clear reasons most people accepted "responsible disclosure". However, that does not mean you can expect, much less demand, that anyone gives you a grace period.
February 9, 2026 at 11:48 AM
Responsible disclosure is a political guilt game meant to safeguard the reputations and business interests of vendors at the expense of transparency, accountability and safety of users
At what point does this performative dishonesty outright disqualify you from shipping credible "formally verified" code?
February 9, 2026 at 10:18 AM
At what point does this performative dishonesty outright disqualify you from shipping credible "formally verified" code?
This happens to people?! What?! I can’t imagine stopping to listen to music for fun
I have a similar theory that is based on when you stop listening to music for fun.
February 8, 2026 at 8:35 PM
This happens to people?! What?! I can’t imagine stopping to listen to music for fun
I’m 100% convinced that you only age when you take yourself too seriously. Like, whenever you do that, you suddenly get wrinkles and your muscle mass drops and you just get closer to death. The link between getting visibly just older and taking yourself way, way too seriously is so strong
February 8, 2026 at 8:25 PM
I’m 100% convinced that you only age when you take yourself too seriously. Like, whenever you do that, you suddenly get wrinkles and your muscle mass drops and you just get closer to death. The link between getting visibly just older and taking yourself way, way too seriously is so strong
*Publishes broken cryptography code with a critical vulnerability that goes unpatched for three years, gets it merged into Signal*
*Random researcher finds the vulnerability*
“HOW DARE YOU PUT THE COMMUNITY AT RISK BY FINDING THE VULNERABILITY IN OUR CRYPTOGRAPHY CODE AND PUSHING A FIX”
*Random researcher finds the vulnerability*
“HOW DARE YOU PUT THE COMMUNITY AT RISK BY FINDING THE VULNERABILITY IN OUR CRYPTOGRAPHY CODE AND PUSHING A FIX”
February 8, 2026 at 4:08 PM
*Publishes broken cryptography code with a critical vulnerability that goes unpatched for three years, gets it merged into Signal*
*Random researcher finds the vulnerability*
“HOW DARE YOU PUT THE COMMUNITY AT RISK BY FINDING THE VULNERABILITY IN OUR CRYPTOGRAPHY CODE AND PUSHING A FIX”
*Random researcher finds the vulnerability*
“HOW DARE YOU PUT THE COMMUNITY AT RISK BY FINDING THE VULNERABILITY IN OUR CRYPTOGRAPHY CODE AND PUSHING A FIX”
Man, my PhD is in a specialization that's full of shit.
February 8, 2026 at 2:41 PM
Man, my PhD is in a specialization that's full of shit.
Which high-assurance cryptography library should I audit after Cryspen's? Why not expose the entire ecosystem while I'm at it?
February 8, 2026 at 1:30 PM
Which high-assurance cryptography library should I audit after Cryspen's? Why not expose the entire ecosystem while I'm at it?
"I'm sorry, we're not accepting your free fixes to five security vulnerabilities, which you reported with professional, working pull requests, because we think you suck and also you didn't email us privately about them first. Thank you, we are scientists with a high level of scientific integrity"
February 8, 2026 at 12:40 PM
"I'm sorry, we're not accepting your free fixes to five security vulnerabilities, which you reported with professional, working pull requests, because we think you suck and also you didn't email us privately about them first. Thank you, we are scientists with a high level of scientific integrity"
@rei8bit.bsky.social Your album shows on Bandcamp as releasing in the future? Might want to fix this.
February 8, 2026 at 10:40 AM
@rei8bit.bsky.social Your album shows on Bandcamp as releasing in the future? Might want to fix this.
Today's work music:
Extreme Fragmentation, by Rei8bit
from the album Attempts for Soundchips Volume 2
rei8bit.bandcamp.com
February 8, 2026 at 10:37 AM
Today's work music:
Verus is a tool for verifying the correctness of code written in Rust:
GitHub - verus-lang/verus: Verified Rust for low-level systems code
Verified Rust for low-level systems code. Contribute to verus-lang/verus development by creating an account on GitHub.
github.com
February 8, 2026 at 10:23 AM
Verus is a tool for verifying the correctness of code written in Rust:
Reposted by Nadim Kobeissi
This is not the most important thing, but a really good reason to educate your kid in math early is you end up finding pieces of paper with equations written in little girl handwriting, with hearts and cats drawn around them.
February 7, 2026 at 5:34 PM
This is not the most important thing, but a really good reason to educate your kid in math early is you end up finding pieces of paper with equations written in little girl handwriting, with hearts and cats drawn around them.
Reposted by Nadim Kobeissi
ICE told nurses this Minneapolis man “purposefully ran headfirst into a brick wall.”
What actually happened is that they pulled him from a car, beat him so viciously with a steel baton that he had 8 skull fractures, 5 life-threatening brain hemorrhages, and couldn’t remember he had a daughter.
What actually happened is that they pulled him from a car, beat him so viciously with a steel baton that he had 8 skull fractures, 5 life-threatening brain hemorrhages, and couldn’t remember he had a daughter.
February 7, 2026 at 5:54 PM
ICE told nurses this Minneapolis man “purposefully ran headfirst into a brick wall.”
What actually happened is that they pulled him from a car, beat him so viciously with a steel baton that he had 8 skull fractures, 5 life-threatening brain hemorrhages, and couldn’t remember he had a daughter.
What actually happened is that they pulled him from a car, beat him so viciously with a steel baton that he had 8 skull fractures, 5 life-threatening brain hemorrhages, and couldn’t remember he had a daughter.
Reposted by Nadim Kobeissi
The Verification Theater: When Formal Methods Create False Assurance in Cryptographic Libraries (Nadim Kobeissi) ia.cr/2026/192
February 6, 2026 at 11:27 AM
The Verification Theater: When Formal Methods Create False Assurance in Cryptographic Libraries (Nadim Kobeissi) ia.cr/2026/192
Reposted by Nadim Kobeissi
Metry and her husband of 4 years go to DHS to get their I-130 in motion. "Good news" a DHS employee told them, the form to start her naturalization was approved.
DHS employee asks the husband to follow him through a secure door. When it locks behind him, ICE detains his wife to deport her.
DHS employee asks the husband to follow him through a secure door. When it locks behind him, ICE detains his wife to deport her.
EXCLUSIVE: Terez Metry was 13 when her family fled to Tennessee from Egypt in 2011. Then, they left her behind. She only recently discovered she had an order of removal from 2011. But she was following the legal path to citizenship. On Monday, at a routine DHS meeting, Metry was detained.
Immigration process turns sour for an Antioch woman - Nashville Banner
Terez Metry, a dental assistant in Middle Tennessee with no criminal history, was detained by ICE during an interview as she followed legal steps toward citizenship.
nashvillebanner.com
February 6, 2026 at 10:00 PM
Metry and her husband of 4 years go to DHS to get their I-130 in motion. "Good news" a DHS employee told them, the form to start her naturalization was approved.
DHS employee asks the husband to follow him through a secure door. When it locks behind him, ICE detains his wife to deport her.
DHS employee asks the husband to follow him through a secure door. When it locks behind him, ICE detains his wife to deport her.
Inside you there are two wolves
February 6, 2026 at 4:24 PM
Inside you there are two wolves