Coda Hale

p256: Allow converting affine points to coordinates and back

5

This adds a trait `AffineCoordinates` with two methods (`from_coordinates` and `to_coordinates`) to convert field element coordinates to points and back, checking that the coordinates are on the curve. Internal conversions...

p256: Add implementation of Elligator Squared.

4

This is in big need of more scrutiny, documenting, and refactoring, but I wanted to push early and allow for input. [Elligator Squared](https://eprint.iacr.org/2014/043.pdf) is obviously not a standard anything, nor...

Use an HMAC, not a simple MD5 hash

3

The code, as-is, simply generates an MD5 hash of the data, which is trivially forgeable by an attacker. Because the authenticity of the session cookie is not guaranteed, the CBC...

Please use TLS

5

I noticed you're using AES-CBC for each packet, which I think is a mistake for a couple of reasons. First, it's unauthenticated. If an attacker changes the encrypted packets, even...

Figure out a way to make Jackson contend less: ``` qtp2078619350-199 id=199 state=BLOCKED - waiting to lock (a org.codehaus.jackson.map.ser.SerializerCache) owned by qtp2078619350-63 id=63 at org.codehaus.jackson.map.ser.SerializerCache.getReadOnlyLookupMap(SerializerCache.java:49) at org.codehaus.jackson.map.ser.StdSerializerProvider.(StdSerializerProvider.java:208) at org.codehaus.jackson.map.ser.StdSerializerProvider.createInstance(StdSerializerProvider.java:217) at...