nist

This article outlines a practical, phased path for enterprises to transition to post-quantum cryptography, framing the quantum threat as a manageable evolution rather than a sudden crisis and citing government timelines as useful guideposts.

An analysis piece arguing that FIPS 140-3 certification is narrowly scoped and not a guarantee of overall security, using examples like ROCA and the common practice of running FIPS-enabled HSMs with FIPS mode disabled.

An educational explainer from NIST describing how atomic clocks work, why atoms provide extremely stable timekeeping, and the role of quantum physics and light in measuring time.

A detailed overview of the ongoing transition to post-quantum cryptography, covering NIST's standardization of ML-KEM and ML-DSA, the 'harvest now, decrypt later' threat, hybrid key exchange adoption, and the fragmentation of PKI into MTC and X.509 with ML-DSA.

Anthropic's Mythos AI security model discovered a fatal weakness in the HAWK post-quantum digital signature algorithm, prompting its withdrawal from NIST's third-round evaluation. While the attack is incremental and uses weakened test instances, it demonstrates AI's growing capability in cryptanalysis.

Mean Hand is a typeface built from averaging 814,255 handwritten characters from the NIST/EMNIST dataset, visualizing the statistical distribution of handwriting to explore legibility thresholds.

The article discusses the current state of the FN-DSA post-quantum signature standard, its standardization delays, and essential caveats for deployment, including prehashing considerations.

The article discusses the vulnerability of consumer atomic clocks to signal spoofing via audio harmonics, detailing the technical challenges of receiving NIST's WWVB radio signals on the US East Coast due to ionospheric propagation issues.

The article details a technical investigation into how an HTTP header caused time skew on the time.gov website, explaining the differences between NTP and HTTP time synchronization.

OpenAI submitted a response to NIST's request for information under the Executive Order on AI, outlining its approaches to evaluating AI capabilities, red teaming, and synthetic media provenance, including findings from GPT-4 biosecurity risk evaluations.