Cloudflare worked with the IETF to develop and has released in beta across its IPsec products a mitigation against quantum downgrade attacks on IPsec, addressing a design flaw it rediscovered that let…
A Sept. 12 research preprint proposes PQLN, a hybrid post-quantum extension built as a rust-lightning research prototype, to protect five off-chain Lightning Network functions that would remain expose…
A developer measured Caddy 2.11.4's default post-quantum TLS handshake and found the hybrid X25519MLKEM768 key exchange inflates the ClientHello and ServerHello from a combined 440 bytes to 2704 bytes…
Migrating IPsec authentication from RSA-2048 certificates to ML-DSA across a multi-router network cannot be done without an outage, because authentication requires selecting a single signature method …
A developer has built CryptoFlex, an open-source, local-first crypto-agility policy engine for Python 3.10+ that dynamically swaps encryption primitives without code redeploys. It orchestrates classic…
An engineer has released Quant Harvest, an open-source Go control plane that schedules post-quantum cryptography workloads to run only when the electrical grid is cleanest. The tool buffers CPU-intens…
F5 and Scality are hosting a 26 August webinar on moving object data fast enough to keep GPUs busy, but the technical writeup behind the pitch reveals the core issue is load balancing, not storage. Sc…
On August 13, 2024, the U.S. National Institute of Standards and Technology (NIST) published FIPS 203, the federal standard defining ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism), the firs…
OpenSSL 3.5+ now natively supports all three NIST post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA), and a hands-on test shows that post-quantum certificates are dramatically larger than classical one…
Hybrid key exchange for TLS 1.3, such as X25519MLKEM768, is being standardized by the IETF to protect against harvest-now, decrypt-later attacks. The change combines classical X25519 with the post-qua…
In an IETF vote on standardizing the removal of ECC from hybrid ECC+ML-KEM in TLS, 82 people spoke in unambiguous opposition during the voting period, according to a blog post by cryptographer Daniel …
The pyca/cryptography library now supports ML-KEM and ML-DSA, the NIST-standard post-quantum encryption and digital-signature primitives, making post-quantum cryptography available to the entire Pytho…
Cryptographer Daniel Apon has flagged a potential flaw in Lemma 3 of a new paper by Daniel Simon, suggesting that lattice-based cryptography such as ML-KEM may be vulnerable to quantum computers. Apon…
RFC 8784 defines a Postquantum Preshared Key (PPK) method that mixes a static, out-of-band preshared key into the IKE key schedule to defeat 'harvest now, decrypt later' attacks without requiring new …
Post-quantum cryptography (PQC) migration should begin with an inventory of cryptographic assets, not by replacing algorithms, according to a developer building PQC Radar. The developer argues that NI…
Google Cloud announced the general availability of quantum-safe digital signatures (ML-DSA, SLH-DSA) and post-quantum key encapsulation (ML-KEM) in Cloud Key Management Service (Cloud KMS), enabling o…
A developer outlines a practical migration blueprint for enterprise APIs to post-quantum cryptography, focusing on NIST-standardized lattice-based algorithms like ML-KEM and ML-DSA. The guide emphasiz…
Cloudflare has advocated for adopting ML-DSA, a post-quantum digital signature standard, and released new DNSSEC error codes after a top-level domain outage. For small sites, the switch to post-quantu…
Cloudflare warns that post-quantum signature algorithms under development will not be ready in time for the migration to quantum-safe cryptography, forcing reliance on the already-standardized ML-DSA …
A new open-source static analysis tool called pqc-scan helps developers find quantum-vulnerable cryptography in their codebases before quantum computers become a threat. The tool scans source code, co…