Nadim Kobeissi
@nadim.computer
Applied cryptographer. Mainly working in the cryptography auditing industry, but sometimes venturing back into academia. Hobbyist puzzle game author. https://nadim.computer
My Productivity Zone
February 10, 2026 at 9:09 PM
My Productivity Zone
Cryspen merged my fixes yesterday via the CEO closing my fix PRs then copy-pasting my code and merging it under his own name.
It's day five and they still haven't issued a security advisory for any of the five bugs reported, of which they've fixed four.
Who's putting the community at risk here?
It's day five and they still haven't issued a security advisory for any of the five bugs reported, of which they've fixed four.
Who's putting the community at risk here?
February 10, 2026 at 10:26 AM
Cryspen merged my fixes yesterday via the CEO closing my fix PRs then copy-pasting my code and merging it under his own name.
It's day five and they still haven't issued a security advisory for any of the five bugs reported, of which they've fixed four.
Who's putting the community at risk here?
It's day five and they still haven't issued a security advisory for any of the five bugs reported, of which they've fixed four.
Who's putting the community at risk here?
Many technical discussions, won't be drama-only
February 9, 2026 at 9:31 PM
Many technical discussions, won't be drama-only
Very much looking forward to this talk. It's time to set the record straight. Will be announced soon.
February 9, 2026 at 9:16 PM
Very much looking forward to this talk. It's time to set the record straight. Will be announced soon.
Cryspen finally pushed a fix for the critical nonce-reuse vulnerability.
On the left: my proposed fix, which was closed and rejected.
On the right: the fix Cryspen just pushed into a separate branch.
They rejected my PR, and then copied it letter by letter.
On the left: my proposed fix, which was closed and rejected.
On the right: the fix Cryspen just pushed into a separate branch.
They rejected my PR, and then copied it letter by letter.
February 9, 2026 at 10:50 AM
Cryspen finally pushed a fix for the critical nonce-reuse vulnerability.
On the left: my proposed fix, which was closed and rejected.
On the right: the fix Cryspen just pushed into a separate branch.
They rejected my PR, and then copied it letter by letter.
On the left: my proposed fix, which was closed and rejected.
On the right: the fix Cryspen just pushed into a separate branch.
They rejected my PR, and then copied it letter by letter.
It's simply unbelievable. Cryspen is sending me emails lecturing me on ethics, WHILE THEIR NONCE REUSE BUG REMAINS UNPATCHED FOR THE FOURTH DAY DESPITE MY GIVING THEM A FREE, TESTED FIX.
February 9, 2026 at 10:28 AM
It's simply unbelievable. Cryspen is sending me emails lecturing me on ethics, WHILE THEIR NONCE REUSE BUG REMAINS UNPATCHED FOR THE FOURTH DAY DESPITE MY GIVING THEM A FREE, TESTED FIX.
At what point does this performative dishonesty outright disqualify you from shipping credible "formally verified" code?
February 9, 2026 at 10:18 AM
At what point does this performative dishonesty outright disqualify you from shipping credible "formally verified" code?
Ah yes, the "documented Security Policy"
February 8, 2026 at 12:46 PM
Ah yes, the "documented Security Policy"
Absolutely unreal: I found a fifth bug in libcrux, this time in its PSQ implementation that would allow a denial of service via a malcrafted AES-GCM ciphertext.
I couldn't submit my PR: Cryspen blocked me after I submitted my first four PRs, which included a fix for a critical nonce reuse bug.
I couldn't submit my PR: Cryspen blocked me after I submitted my first four PRs, which included a fix for a critical nonce reuse bug.
February 8, 2026 at 11:15 AM
Absolutely unreal: I found a fifth bug in libcrux, this time in its PSQ implementation that would allow a denial of service via a malcrafted AES-GCM ciphertext.
I couldn't submit my PR: Cryspen blocked me after I submitted my first four PRs, which included a fix for a critical nonce reuse bug.
I couldn't submit my PR: Cryspen blocked me after I submitted my first four PRs, which included a fix for a critical nonce reuse bug.
@rei8bit.bsky.social Your album shows on Bandcamp as releasing in the future? Might want to fix this.
February 8, 2026 at 10:40 AM
@rei8bit.bsky.social Your album shows on Bandcamp as releasing in the future? Might want to fix this.
In 2023, Filippo used to go and cold-DM every single guest that dared to appear on my podcast. Not content with this, he apparently, in 2026, still goes out of his way to chase down anyone who posts my blog posts. Sad, and frankly, creepy to have this level of obsession.
February 8, 2026 at 8:42 AM
In 2023, Filippo used to go and cold-DM every single guest that dared to appear on my podcast. Not content with this, he apparently, in 2026, still goes out of his way to chase down anyone who posts my blog posts. Sad, and frankly, creepy to have this level of obsession.
Inside you there are two wolves
February 6, 2026 at 4:24 PM
Inside you there are two wolves
These are apparently real panels from a 1988 Batman comic in which the Joker is appointed as the Iranian ambassador to the United Nations
February 3, 2026 at 9:13 AM
These are apparently real panels from a 1988 Batman comic in which the Joker is appointed as the Iranian ambassador to the United Nations
One cool thing about Drain Brain is that it will use Apple’s Game Center API to offer a global leaderboard! Very excited to see what kind of scores players rack up.
February 1, 2026 at 7:54 PM
One cool thing about Drain Brain is that it will use Apple’s Game Center API to offer a global leaderboard! Very excited to see what kind of scores players rack up.
DRAIN BRAIN, my latest upcoming puzzle game (my fourth!), will soon be available on iOS and macOS.
Planning to release for free, and featuring a soundtrack by @nobonoko.bsky.social!
Here's a sneak peek. Stay tuned for the release!
Planning to release for free, and featuring a soundtrack by @nobonoko.bsky.social!
Here's a sneak peek. Stay tuned for the release!
February 1, 2026 at 5:40 PM
DRAIN BRAIN, my latest upcoming puzzle game (my fourth!), will soon be available on iOS and macOS.
Planning to release for free, and featuring a soundtrack by @nobonoko.bsky.social!
Here's a sneak peek. Stay tuned for the release!
Planning to release for free, and featuring a soundtrack by @nobonoko.bsky.social!
Here's a sneak peek. Stay tuned for the release!
Roasted a duck today (very good day)
January 24, 2026 at 1:15 PM
Roasted a duck today (very good day)
Me auditing your codebase
January 23, 2026 at 6:58 PM
Me auditing your codebase
I 100% thought this was fake until my wife showed me that it wasn’t
January 19, 2026 at 5:51 PM
I 100% thought this was fake until my wife showed me that it wasn’t
Day 2: getting the hang of the keys and their positions by playing parts of The Legend and The World Revolving! Also put stickers to help me know where C notes (red) and A notes (blue) are, while waiting for the more complete sticker set to arrive from Amazon
January 17, 2026 at 12:07 PM
Day 2: getting the hang of the keys and their positions by playing parts of The Legend and The World Revolving! Also put stickers to help me know where C notes (red) and A notes (blue) are, while waiting for the more complete sticker set to arrive from Amazon
Never bought anything more quickly in my life
January 16, 2026 at 8:50 PM
Never bought anything more quickly in my life