How do ESP32s get boot entropy when RNG, radio bursts, and SRAM are all shaky, and does an 'entropy capsule' help cold starts?

Embeds SD-JWT signatures into read-only files, so authenticity stops depending on whatever IAM duct tape is around.

One source, two GPU vendors, and memory bandwidth still gets the last word in this OpenMP LWE KEM paper.

Windows Insider builds ship SymCrypt SHA-3 and ML-KEM with Lean-checked Rust proofs, because proof debt is now product work.

Chromium's PQ HTTPS plan meets enterprise fossils: subdomain cookies and TLS-inspecting proxies that break hybrid handshakes.

IBM's London quantum box still can't crack RSA, so this is really a PQC migration checklist with NIST standards.

Paper on self-tuning ring-oscillator TRNGs and long-term stability, with NIST tests, because entropy still needs babysitting.

APN permutations over GR(4,2) get classified, and the paper drags differential uniformity beyond prime fields into ring land.

A Security magazine recap of PQC adoption, NIST standards, CNSA 2.0 timelines, and the usual harvest-now-decrypt-later anxiety.

LLM-guided evolution breaks perceptual hashes like pHash, PDQ, PhotoDNA, and NeuralHash in black-box mode, because apparently those work...

Survey of LLM watermarking, from biased sampling to adaptive-removal attacks, because even text wants DRM.

Multi-language wrappers for NIST PQC primitives, with shared test vectors so six bindings can agree on bytes for once.

Noir circuit repo for Merkle membership proofs with Poseidon2, plus tests for valid and invalid paths.

A reminder that PQ migration targets asymmetric crypto first, and AES-128/SHA-256 may still be fine despite the 256-bit cargo cult.

Video on the post-quantum shift beyond the EO, mostly the boring part everyone skips: migration details, auth vs encryption, and downgrades.

First char in the clear, the rest XORed with a short key, so Dell BIOS passwords fall out of SPI flash dumps.

Why the rush on PQC? Because agencies are told to migrate now, and NIST finally shipped standards before the quantum cliff.

Reason piece on declassified FBI files about David Kahn, the crypto historian first treated like a suspect, because of course.

Can a Halo2 zkVM prove synthesized hardware is power-side-channel safe without leaking the netlist? Apparently, yes.

The annoying part: ML-DSA is still the least-bad option, and the shinier PQ signatures aren’t arriving before migration does.

Not content with raw Ed25519, it now verifies signify and minisign wrappers and adds the Rust parsing/types.

Cointelegraph on Bitcoin's post-quantum fork in the road: bigger blocks or STARKs, because apparently one crisis wasn't enough.

Replaces threshold signatures with ordinary approvals plus a Shamir-sealed enforcement key, so custody survives PQ migration.

The surprise is it's mostly migration planning, with NIST/NSA/NSF and vendors arguing over crypto-agility, not quantum hype.

Does AMD ROCm/HIP finally do Goldilocks STARK proving? The post includes qingming-stark-g64, CLI flow, and SCALE20-27 benchmarks.

Paper on zk-ScalHard, a PUF plus ZK auth scheme for OTA updates in ECU-heavy SDVs, with recursive aggregation to keep the bytes down.

RustCrypto's bottleneck is apparently not Rust, but missing SIMD and hardware acceleration in the hot path.

QoreChain says it ran a mainnet tx with ML-DSA, ML-KEM and SHAKE-256, because apparently crypto needs more crypto.

D. J. Bernstein’s cryptography site, with papers, code, talks, and projects like NaCl and SafeCurves, because one homepage was enough.

QUBO-encodes small MLWE instances, then hands you stability polytopes and annealer scaling pain.