Tag
The cryptoint library (2025) introduces a library focused on cryptographic integer arithmetic, providing constant-time, portable operations for security-sensitive applications.
An article on Sigsaly, the top-secret encrypted voice link between Winston Churchill and U.S. President Franklin Roosevelt during World War II, covering the pioneering secure-telephony technology behind it.
Trail of Bits tested 25 popular package managers for their ability to detect compromised repositories injecting malicious code, finding that fewer than half verify integrity via lockfiles by default and only Go verifies package signatures by default, highlighting widespread supply-chain risks.
Oxford and Contramont researchers showed that a second, encrypted neural network can be hidden inside an AI model's weights, activated only by a secret trigger, and that neither fine-tuning nor weight noise can expose it. The NeurIPS 2026 paper highlights limits of auditing open-weight models for hidden, potentially dangerous capabilities.
作者批评 ML-DSA 和 Ed25519 在签名时先对公钥哈希的做法，认为这破坏了验证端先哈希消息再逐个试验签名密钥的高效流程，并建议把公钥哈希拼接在消息末尾以保留流式哈希的优势。
该论文证明，通过将加密的神经网络嵌入宿主模型权重中，攻击者可以隐藏任意能力，即使拥有完整模型权重访问权限，在密码学假设下这些隐藏回路也难以被触发和解释，从而揭示了基于能力引导的模型审计的根本局限性。
Filippo Valsorda 更新了经典的《Cryptographic Right Answers》指南，为开发者给出面向后量子时代的加密推荐，包括 ML-KEM-768+X25519 密钥交换、ML-DSA-44 签名以及 XAES-256-GCM/XChaCha20Poly1305 数据加密，并强调 2029 年前完成后量子迁移的紧迫性。
A personal essay on how Edgar Allan Poe's 1843 story 'The Gold-Bug' introduced the author to cryptography, explaining substitution ciphers, frequency analysis, and the story's influence on figures like Claude Shannon and the foundations of information theory.
作者宣布在 SolveAtHome 平台上线 MD5 挑战项目，邀请任何人贡献闲置 AI tokens，让分布式 AI agent 群体协作探索密码学分析前沿，以检验集体智能能否做出超越单个前沿实验室的科学发现。
Cryptography researcher Matthew Green warns of a small but non-trivial chance that AI-driven surprises could undermine confidence in public-key encryption, arguing that standards cannot be replaced fast enough without advance preparation.
Scott Aaronson, Chair of the Computer Science Department at UT Austin, points out that cryptography is conspicuously absent among the 376 papers listed by OpenAI, and reveals that AI companies have begun quietly testing whether their latest internal models can crack important cryptographic protocols and primitives.
Paul Calvetti comments on Matthew Green's post expressing unease about relying on a handful of frontier AI labs to determine which encryption algorithms and bit depths remain secure, given the risk that their internal models may already have broken them.
继AI模型接连攻克长期悬而未决的数学难题之后，业内专家Scott Aaronson透露，各AI实验室正悄然测试其最新内部模型能否攻破主要密码学协议。
CZ (Changpeng Zhao) cautions users against connecting to public Wi-Fi and questions whether merely connecting to Wi-Fi alone could lead to having a crypto wallet stolen, or if an additional action is required.
CZ (Changpeng Zhao) 引用并调侃了 Vitalik Buterin 关于 AI 加速数学进展可能威胁现代密码学的推文，提醒业界不仅要警惕量子计算威胁，也要重视 AI 对密码学的潜在风险。
An article about migrating Git repositories to SHA-256 object hashing, though the body text appears to be corrupted filler text rather than substantive content.
A commentary arguing that cryptographic security is increasingly threatened by both AI superintelligence and quantum computing research, suggesting people consider converting some digital assets into physical valuables that cannot be hacked.
技术博客文章探讨了在C代码中对秘密数据进行零化（memset/secure_zero）的常见做法为何可能适得其反：编译器优化会删除memset，而volatile字节写入或不透明的wipe函数反而可能引入新的秘密副本并让其残留在寄存器中。
Hundred Rabbits' September 2026 devlog: the off-grid duo release a definitive 10th-anniversary version of the Donsol card game with animated sprites, add I/O support to Tote, publish a Rabbit Waves guide on One-Time Pads, and prep a talk on software archival for Oredev 2026 in Sweden.
Security researcher David Buchanan (retr0id) demonstrates a C2PA spec footgun allowing arbitrary byte-range "exclusions" in signed files, showing how timestamped Content Credentials can be forged to "hack time" — e.g. backdating winning lottery numbers — undermining C2PA as a trust anchor for image provenance.