Tag
作者批评 ML-DSA 和 Ed25519 在签名时先对公钥哈希的做法，认为这破坏了验证端先哈希消息再逐个试验签名密钥的高效流程，并建议把公钥哈希拼接在消息末尾以保留流式哈希的优势。
Filippo Valsorda 更新了经典的《Cryptographic Right Answers》指南，为开发者给出面向后量子时代的加密推荐，包括 ML-KEM-768+X25519 密钥交换、ML-DSA-44 签名以及 XAES-256-GCM/XChaCha20Poly1305 数据加密，并强调 2029 年前完成后量子迁移的紧迫性。
Cryptography researcher Matthew Green warns of a small but non-trivial chance that AI-driven surprises could undermine confidence in public-key encryption, arguing that standards cannot be replaced fast enough without advance preparation.
A commentary arguing that cryptographic security is increasingly threatened by both AI superintelligence and quantum computing research, suggesting people consider converting some digital assets into physical valuables that cannot be hacked.
JDK 27 has been released as the Reference Implementation of Java SE Platform version 27, featuring updates like making G1 the default garbage collector and post-quantum hybrid key exchange for TLS 1.3.
The article describes a new implementation of the Falcon signature scheme that replaces floating-point arithmetic with fixed-point arithmetic, enhancing security and efficiency as presented in a CRYPTO 2026 paper.
A blog post analyzing Anthropic's recent LLM-assisted cryptanalytic attacks on HAWK and reduced-round AES, arguing that LLMs will not break established symmetric cryptographic schemes.
Anthropic's unreleased Claude Mythos Preview model discovered novel attacks on the HAWK post-quantum signature scheme and a reduced-round AES variant, significantly reducing attack costs and potentially impacting standardization.
Anthropic published two cryptanalysis papers using its unreleased Claude Mythos model, attacking the HAWK signature scheme and reduced-round AES, highlighting AI's ability to combine existing cryptographic tools effectively.
OpenSSH 10.4 was released on 2026-07-06, including security fixes and experimental support for a composite post-quantum signature scheme combining ML-DSA 44 and Ed25519.
OpenSSH 10.4/10.4p1 released with security fixes and experimental post-quantum signature support.
Autocrypt v2 introduces post-quantum encryption and reliable deletion for decentralized messaging, using hybrid ML-KEM-768 and X25519 keys with automatic key rotation and destruction.
Let's Encrypt announces plans to adopt Merkle Tree Certificates for post-quantum authentication, addressing the growing urgency to migrate to post-quantum signatures in the Web PKI.
wolfSSL has released wolfCOSE, a zero-allocation C library implementing CBOR and COSE with post-quantum signing support (ML-DSA) and a tiny footprint, targeting embedded systems.
Coldkey is a command-line tool that generates post-quantum age encryption keys and creates printable HTML backups with QR codes for secure offline storage.
The article discusses the current state of the FN-DSA post-quantum signature standard, its standardization delays, and essential caveats for deployment, including prehashing considerations.
An analysis clarifies that quantum computers do not pose a threat to 128-bit symmetric cryptographic keys like AES-128, contrary to common misconceptions about Grover's algorithm. The article explains why symmetric key sizes do not need to change as part of post-quantum transition efforts, aligning with expert and standardization body consensus.
Anthropic researchers used Claude Mythos Preview to discover improved cryptographic attacks on HAWK (a post-quantum signature scheme) and a weakened version of AES, significantly advancing the state of the art without affecting production systems.