<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Markus Schiffermuller on The Trail of Bits Blog</title><link>https://miscreants.github.io/blog.trailofbits.com/authors/markus-schiffermuller/</link><description>Recent content in Markus Schiffermuller on The Trail of Bits Blog</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 18 Nov 2025 00:00:00 -0500</lastBuildDate><atom:link href="https://miscreants.github.io/blog.trailofbits.com/authors/markus-schiffermuller/index.xml" rel="self" type="application/rss+xml"/><item><title>We found cryptography bugs in the elliptic library using Wycheproof</title><link>https://miscreants.github.io/blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/</link><pubDate>Tue, 18 Nov 2025 07:00:00 -0500</pubDate><guid>https://miscreants.github.io/blog.trailofbits.com/2025/11/18/we-found-cryptography-bugs-in-the-elliptic-library-using-wycheproof/</guid><description>Trail of Bits discovered and disclosed two vulnerabilities in the widely used elliptic JavaScript library that could allow signature forgery or prevent valid signature verification, with one vulnerability still unfixed after the 90-day disclosure window.</description></item></channel></rss>