This is seems noteworthy. It's from Simon. Correct me if I'm wrong but the approximation factor of `sqrt(n)polylog(n)` means that current lattice cryptosystems would be in danger and not PQ-algorithms anymore.
Coinspect recently disclosed **Ill Bloom**, a vulnerability affecting recovery phrases generated using the historical `CryptoJS.lib.WordArray.random()` implementation. The affected CryptoJS 3.x code used a Multiply-With-Carry construction seeded with values derived from `Math.random()` The technical disclosure, including the PRNG reconstruction and affected-version …
I got tired of watching SSH keys and API tokens sit in Slack/Teams/Whatsapp history forever, and I wasn't happy with the trust model of the existing tools (onetimesecret only does E2E if you set a passphrase; most others are links-only). …
This blogpost from Anthropic describes using the Claude Mythos AI tool to find an attack on HAWK. The attack is not practical at proposed production key strengths, but it improves the best known attacks by quite a lot, and might …
I've been verifying post-quantum reference implementations against their FIPS specs with a `SAW → Cryptol → Isabelle` pipeline. Just finished ML-KEM-512 (Kyber) forward NTT on the unmodified PQClean `clean` C: SAW proves the C bit-exact to a Cryptol model, Isabelle …
Hi, I'd like to share a personal research project with the community: PQC-Labs, a set of reproducible engineering experiments evaluating how the NIST post-quantum standards (ML-KEM / FIPS 203, ML-DSA / FIPS 204) are being adopted in real-world software — …
FLOE is a misuse-resistant nonce-based online authenticated encryption scheme for the encryption of very large data sets. `fast-floe` is Rust implementation of FLOE that provides several ergonomic misuse-resistant APIs for working with FLOE messages, ordered below from simplest (and more …