In a pqc-forum discussion, Howard Y. Jung of Norma Co. claimed to have recovered a private key from an RSA-encrypted public key using a quantum simulator, utilizing 58 qubits and about 1 hour 54 minut…
A developer outlines a practical migration blueprint for enterprise APIs to post-quantum cryptography, focusing on NIST-standardized lattice-based algorithms like ML-KEM and ML-DSA. The guide emphasiz…
Cloudflare has advocated for adopting ML-DSA, a post-quantum digital signature standard, and released new DNSSEC error codes after a top-level domain outage. For small sites, the switch to post-quantu…
A new open-source static analysis tool called pqc-scan helps developers find quantum-vulnerable cryptography in their codebases before quantum computers become a threat. The tool scans source code, co…
SSH key exchange failures are occurring when modern laptops attempt to connect to legacy network devices that only support weak cryptographic algorithms like SHA-1 and CBC ciphers. OpenSSH has disable…
Governments and tech companies are racing to deploy post-quantum cryptography to protect data in transit from future quantum attacks, but experts warn that the real privacy crisis lies in data at rest…
Post-quantum certificates, specifically Merkle Tree Certificates (MTCs), reduce TLS handshake sizes from 14,724 bytes to as low as 4,468 bytes by batching signatures and using landmark-relative proofs…
Recent advances in quantum computing have shortened the timeline for breaking RSA encryption to within five years, prompting Google to call for accelerated adoption of Post-Quantum Cryptography (PQC) …
A developer building autonomous agents discovered that using random.random() for leader election is insecure because agents can cheat by rerolling. After building verifiable randomness, they concluded…
Post-quantum cryptography (PQC) is transitioning from research to practical implementation in embedded and IoT systems, affecting secure boot, TLS, OTA updates, and firmware signing. NIST has finalize…
The article describes Wizbit.to, a collection of over 95 free browser-based developer utilities that process all data locally without sending it to any server. The tools include functions for data enc…
The article explains that JSON Web Tokens (JWTs) signed with current algorithms like RS256 and ES256 are vulnerable to future quantum computer attacks, with nation-state actors already employing "harv…
In 2008, the author worked at RSA, a network security company with a strong nerd culture where prime-number employee IDs were considered lucky. During a monthly HR-organized game, teams were given fiv…
The article describes a single-character logic bug discovered in OpenSSL version 4.0.0's implementation of the SLH-DSA post-quantum signature algorithm. The bug occurs in the `slh_dsa_sign()` function…