Chasing a Flake Into OpenSSL's GCM Path
A CI flake that turned out to be a deterministic failure on AVX-512 CPUs, and how kloak now recovers OpenSSL's GCM hash subkey without running AES in BPF
The Kloak Blog
Notes from the kernel
Announcements, technical deep dives, and security insights from the team building Kloak.