r/crypto

What's the general opinion on combating deepfakes using hardware-based signatures?

[A very recent article](https://ethz.ch/en/news-and-events/eth-news/news/2026/03/chips-designed-to-help-identify-deepfakes.html) named "In-sensor cryptographic signature generation to link a physical process and an immutable digital entity" did a proof-of-concept on this idea. I know some of the drawbacks, like key compromise risk, and privacy issues when the …

Join us next week, Thursday, Apr 2nd at 2PM CET for an FHE.org meetup featuring Mathieu Ballandras, TFHE researcher at Zama, presenting "Failure Probability in FHE Measured with Rare Event Simulation".

Probable copy-paste error in PSPICE's AES-256 implementation shrinks effective keyspace to 2^32 and leads to a practical crack of proprietary semiconductor model files

[https://www.reddit.com/r/netsec/comments/1ry14jw/a\_copypaste\_bug\_that\_broke\_pspice\_aes256/](https://www.reddit.com/r/netsec/comments/1ry14jw/a_copypaste_bug_that_broke_pspice_aes256/) >PSpice is a SPICE circuit simulator from Cadence Design Systems that encrypts proprietary semiconductor model files to protect vendor IP and prevent reuse in third-party SPICE simulators. The encryption scheme is proprietary and undocumented. >Many third-party component vendors distribute …

What are my options for a securit audit for my open source project?

I created the signal protocol for a related project. The implementation is in rust and compiles to WASM for browser-based usage. * Github: [https://github.com/positive-intentions/signal-protocol](https://github.com/positive-intentions/signal-protocol) * Demo: [https://signal.positive-intentions.com](https://signal.positive-intentions.com/) Im not sure when its a good time to share it, but i …

Ensuring compliance with basic security principles in coding and operations

A simple error exposes the private key of a major security company. https://www.kucoin.com/news/flash/360-responds-to-openclaw-private-key-leak-certificates-revoked This shows the results when basic security principles are ignored and not followed.

An open source E2EE terminal chat — looking for a crypto review

X25519 DH, Ed25519, HKDF room isolation, sealed sender, blake2s routing tokens. Server is a blind forwarder , sees no usernames, no room names, no plaintext. I'd really appreciate someone experienced looking for flaws in the implementation.

two trust domains with one improvised data diode

Claim: Bacon was portrayed with a C2PA camera. Is the claim true? When and where do you believe the image was taken?

Seeking reviews on f6s

Software: PSI-COMMIT GitHub repo: https://github.com/RayanOgh/psi-commit Website link: https://psicommit.com​​​​​​​​​​​​​​​​ Here’s the link for reviews: https://www.f6s.com/software/review?product=psi-commit I would deeply appreciate your guy’s help, means a lot for me. 🙏😁

AES cipher internals in Excel

Instagram quietly drops end-to-end encrypted chats