Supersingular Isogeny Diffie-Hellman (SIDH) : Post-Quantum Curves

"We propose a new suite of algorithms that significantly improve the performance of supersingular isogeny Diffie-Hellman (SIDH) key exchange. Subsequently, we present a full-fledged implementation of SIDH that is geared towards the 128-bit quantum and 192-bit classical security levels. Our library is the first constant-time SIDH implementation and is more than 2.5 times faster than the previous best (non-constant-time) SIDH software. The high speeds in this paper are driven by compact, inversion-free point and isogeny arithmetic and fast SIDH-tailored field arithmetic: on an Intel Haswell processor, generating ephemeral public keys takes 51 million cycles for Alice and 59 million cycles for Bob while computing the shared secret takes 47 million and 57 million cycles, respectively. The size of public keys is only 751 bytes, which is significantly smaller than most of the popular post-quantum key exchange alternatives. Ultimately, the size and speed of our software illustrates the strong potential of SIDH as a post-quantum key exchange candidate and we hope that these results encourage a wider cryptanalytic effort."

source:Efficient algorithms for supersingular isogeny Diffie-Hellman https://eprint.iacr.org/2016/413.pdf
SIDH Library Download: http://research.microsoft.com/en-us/downloads/bd5fd4cd-61b6-458a-bd94-b1f406a3f33f/

Understanding and Hardening Linux Containers

A must read for container security: https://www.nccgroup.trust/globalassets/our-research/us/whitepapers/2016/april/ncc_group_understanding_hardening_linux_containers-10pdf

Xtrabackup innobackupex - restore script

 #!/bin/bash  
 service mysql stop  
 rm -r /var/lib/mysql/*  
 innobackupex --copy-back /path/to/backup  
 chown -R mysql:mysql /var/lib/mysql  
 service mysql start  
 echo "finished backup restore"  

Scaleway: Boot from disk

Everytime you reboot your server, you'll have to press Ctrl+B and exit iPXE to start the VPS from the local disk. Otherwise it will load a Linux kernel from the network and it obviously won't work. 

Scaleway: How to install OpenBSD or any other image

see here: https://community.scaleway.com/t/openbsd-on-a-vc1/1933

Scaleway: How to fix missing KVM and TUN module

Stop server, open advanced options further down, choose different boot script (usually called stable). It has the latest vanilla kernel with some slight scaleway changes. Upon boot just "modprobe kvm" and "modprobe tun"