Back to browse
GitHub Repository

Demonstration of using subliminal channels in EdDSA signatures to exchange data over TLS handshakes

0 starsC

Using subliminal channels to hide data in TLS handshakes

by desmoulins·Feb 15, 2026·2 points·0 comments

AI Analysis

MidWizardryNiche Gem
The Take

Uses EdDSA signatures to smuggle arbitrary bytes through TLS handshakes — a classic subliminal-channel trick applied to modern TLS code. The repo includes an actual client/server PoC (https_client.c, https_server.c), a cert generation script, and a bundled wolfSSL build so you can reproduce the experiment. Clever demo, but it reads like research code rather than a hardened tool: there's little on threat modelling, detection, or performance trade-offs.

Category
Target Audience

Security researchers, crypto researchers, red teamers, network security engineers

Similar Projects