Skip to content
commit-reveal Source  →

Notes

Notes from the library.

Written for protocol engineers and reviewers. Plain prose, real code, no marketing.

  1. N° 01

    Commit-reveal vs VRF: picking the primitive

    Both produce unmanipulable hidden values revealed later, but their trust model and failure mode differ. A short guide for protocol engineers.

    primitivesdesign
  2. N° 02

    Zero dependencies as a security property

    Supply-chain attacks are now the dominant compromise vector for Python packages. A library that depends only on the language is immune to a class of them.

    securitysupply-chain
  3. N° 03

    A sealed-bid auction, step by step

    A worked two-phase auction: commitments bind bids, optional ZKPs prove bidder identity, and no-shows are handled explicitly. Code-first.

    use-caseauctions