Mike Dilger ☑️'s avatar
Mike Dilger ☑️
mike@mikedilger.com
npub1acg6...p35c
Author of Gossip client: https://github.com/mikedilger/gossip Dual National (USA / New Zealand) My principles are Individualism, Equality, Liberty, Justice and Life
I've been working on alt-tls. I have a lot of commits that haven't been pushed, which will push once I finish and test all the algorithms. Why? I want these things: 1) I want a pure-rust solution because that will compile everywhere that rust compiles without system library version issues, people filing bugs related to linking shit that I don't care about. A pure rust solution will be a bit slower but that is OK by me. 2) I want QUIC support 3) I want to hack the CertificateVerifier to simply verify that the public key is exactly as the library consumer expects it to be, rather than trusting CAs and DN namespaces. 4) I wanted a blake3 variant cipher suite (because IMHO blake3 is just better). A while back I created alt-tls and did (3) cert verifier and (4) blake3 cipher suite. It also satisifed (1) pure rust. But it didn't have (2) quic support. Surveying all the providers I could find yielded this: Provider Quic Support rustls internal: ring Ring Yes rustls internal: aws_lc AWS LC Yes boring-rustls-provider Boring Yes rustls-graviola Graviola No rustls-openssl OpenSSL Yes rustls-rustcrypto Rust Crypto No (barely started and stalled) rustls-mbedtls-provider mbedtls No rustls-symcrypt Microsoft SymCrypt No rustls-wolfcrypt-provider wolfcrypt No I currently have full quic support working and tested against RFC 9001 appendix test vectors for : TLS13_CHACHA20_POLY1305_BLAKE3 (non-standard) TLS13_CHACHA20_POLY1305_SHA256 What is left to complete is: TLS13_AES_128_GCM_SHA256 TLS13_AES_256_GCM_SHA384 It is the smaller keysize of AES 128 that requires the next refactor.
I'm quite interested to see how effective these GBU-57s were. It's been the big question for a long time now. In the 2003 Iraq war, bunker busters had poor penetration, far worse than the US claimed. They put a lot of research and money into the GBU-57s. It is claimed they can penetrate 60m of dirt, and Fordow is more than 80m deep. But they can possibly stack them with precise targetting. But that is dirt. With 69 Mpa concrete they only penetrate 8 meters. And concrete shaped in angles can "steer" these so they turn sideways and don't go as deep. So I'm still skeptical that these GBU-57s penetrated into Fordo's interior. But I suspect we will find out. Maybe the US did penetrate all they way in with tactical nukes and is not admitting that is what was used. Or maybe they used what they claimed, and didn't get all the way in. Either of those two seems more likely to me. But I'm just a computer guy. I dunno anything really.
Here is another thought I just had. Iran can't win against the US and you might think surrender would save them from being destroyed. But what surrender means is that the US will install the monarchy and then control Iran into attacking China... yes it will throw Iran at China, just like it threw Ukraine at Russia. And China will win and Iran will be devastated, but the US will have weakened China prior to any US-China war. So Iran will be devastated either way. Given this, there is no reason for Iran to surrender. From their perspective, they should just fight with all they have.
I fully expect Iran to retaliate, not to negotiate with dishonest tricksters. Iran is not defeated. These three facilities have little to do with their current power projection ability, and I'm skeptical that the US even damaged the inside of Fordow (maybe they collapsed the entrances). Iran has an entire army and navy that is not yet deployed, and allegedly got offers of assistance from allies which they previously turned down. I don't think the Strait of Hormuz will be mined/blocked... IMHO that is Western disinformation that the West hopes they do it, because it doesn't harm the US or Israel but it would harm China greatly. There are lots of ways this could go right now... I saw the US strike coming, but my crystal ball has become cloudy again.