2 articles
Engineering
Choosing XChaCha20-Poly1305 over AES-GCM
Nonce-misuse resistance, performance on mobile, and why a 192-bit nonce lets us stop worrying about a whole class of bugs.
AJAkshay J.·May 21, 2026·13 min read
Engineering
How we hash-chain the audit log
Every action you take is verifiable, client-side, without trusting our servers. A look at the Merkle structure underneath.
AJAkshay J.·May 5, 2026·12 min read
Get the security writing in your inbox.
No marketing. One email when something worth reading publishes.
No tracking pixels. Unsubscribe any time.