Networks & Encryption
Deployed network protocols and applied crypto from their exact byte/bit core — real headers, addresses as arithmetic, checksums and crypto over small integers/finite fields, rendered byte-exact and recomputed at the trust boundary.
Books
- Anatomy of a Packet
- Addresses are Arithmetic
- DHCP Offers an Address
- A VLAN Tag Adds Four Bytes
- IPv6 Has a Fixed Header
- ARP Finds the Neighbor
- Fragments Count in Eights
- The Checksum That Never Lies
- TTL Drops at Each Hop
- ICMP Echo Checks the Message
- UDP Ports Find the Socket
- NAT Rewrites the Return Address
- NAT Sends the Reply Back
- CRC as Long Division
- The Three-Way Handshake
- TCP Counts Bytes
- TCP Retransmits Missing Bytes
- TCP FIN Counts One
- TCP Congestion Sawtooth
- DNS Without Magic
- DNS Pointers Reuse a Name
- DNS TTL Counts Down
- Longest Prefix Wins
- A Firewall Rule Matches First
- Routing is a Shortest Path
- Distance Vectors Share a Route
- Modular Exponentiation
- RSA with Keys You Can Check
- Tiny RSA Factors Back to the Key
- Diffie-Hellman
- A Tiny Log Reveals the Secret
- A Middle Person Makes Two Secrets
- Elliptic Curves, Point by Point
- One AES Block
- A Bit Flip Changes the Message
- A Reused Nonce Leaks the XOR
- A Tag Catches the Change
- A Merkle Root Catches a Change
- HMAC Uses Two Pads
- TLS Records Carry a Length
- A Certificate Chain Trusts a Root
- Finished Checks the Transcript
- TLS, Assembled
- Host Header Picks the Site
- Cache Validator Skips the Body
- Content Length Counts the Body
- Redirect Gives a New Location
- Cookie Comes Back Later
- POST Body Carries Form Fields
- Query String Carries Choices
- JSON Body Names Fields
- Accept Header Picks JSON
- Range Header Picks Bytes
- Chunked Transfer Ends With Zero
- CORS Preflight Asks First
- Basic Auth Is Just Encoding
- 401 Challenge Names Basic
- Bearer Token Matches Exactly
- HSTS Remembers HTTPS
- CSP Allows Only Self
- Hamming Code Catches One Bit
- Huffman Codes Use Shorter Names
- Erasure Codes Rebuild a Missing Number