I understand that the Ed25519 variety of EdDSA uses SHA-512 for the random oracle H. Would replacing H with Keccak be provably secure? I'm in a situation where the systems are constrained in ROM and RAM. Using Keccak in Ed25519 …
Hello, I was wondering why SHA3 is considered more secure than SHA2. I also was wondering about Shake256 vs SHA3 as I’m implementing SLH-DSA for my application. Thanks.
cryptography and vibecoding is not a combination thats appealing to many. my code and my documentation dont seems to be to the "quality" as expected. so recently i post my project on vibecoding subs. its well recieved there, but i …
Shipped v10.6.12 and v10.6.13 together because the first one broke something. The main change is that long-term identity private keys now live inside Rust SecretBytes with ZeroizeOnDrop. Python only sees public bytes through the handle API, never the raw private …
*A few weeks ago I started building a post-quantum encryption library. One of the protocols, which I called BLUE, is supposed to give built-in plausible deniability.* *I've been thinking about deniability for a while. I've seen VeraCrypt and it's great, …