r/crypto

Apple has revealed a Passwords app vulnerability that lasted for months - No HTTPS, enabling phishing on untrusted networks

Post-Quantum Cryptography Is About The Keys You Don’t Play

Modeling and Analyzing Security Protocols with Tamarin: A Comprehensive Guide

ePrint: SNARKs for Stateful Computations on Authenticated Data

Questionable US Federal Government Cryptosystems

I am researching the history of cryptographic development in the United States. It has come to my attention that there are some algorithms the US Federal Government recommended in the past that have failed to gain traction, whose design choices were suspicious, or were cracked in public. Here is a …

ShulginSigning: A Standard For A High-Integrity, Secure, Modern Digital Signature Scheme using SPHINCS+ and ED448 (with hedged signatures)

Apple will soon support encrypted RCS messaging with Android users

Non NIST-Standardized Cryptosystems That Are Still Worth Studying?

We are all aware that the NIST selects cryptosystems for federal government use. As I was speaking to a colleague we both agreed that just because the NIST does not select certain cryptosystems does not mean they are worthless. Even the NIST chosen cryptosystems have their downsides. Certainly there have …

Constant-Time Code: The Pessimist Case

The 4th Annual FHE.org Conference is affiliated with Real World Crypto 2025 and will be held at the Grand Hotel Millennium Sofia in Sofia, Bulgaria March 25, 2025. The invited speaker is Craig Gentry, father of modern FHE. If you're interested in FHE research and development, don't miss it.