Interview/profile of Claude Crépeau by Bill Buchanan, a tour of crypto history with the usual amount of deserved reverence.

ECB tells banks to inventory crypto and get post-quantum ready, with AI cyber threats as the warm-up act.

Docs hub for the EU Digital Identity Wallet ARF, with architecture, trust model, annexes, and the usual privacy/ZK footnotes.

Report on an attested TLS relay flaw hitting WhatsApp and Cocos AI, proof that handshakes still cosplay as security.

Can an LLM write EasyCrypt proofs, and this repo ships the MCP workflow, benchmarks, and replay logs to find out.

Need a machine-checked PCS spec and KZG proofs in Isabelle, or just the games and assumptions? This AFP entry has both.

The hard part isn’t PQC, it’s finding every stray RSA/ECC dependency before the migration spreadsheet explodes.

FIPS 140 freezes the crypto stack in amber, so you inherit old, opaque code and the bugs in its HSM plumbing.

ProVerif finds CVE-2026-33697, a relay attack that breaks attested TLS binding, so the last trust boundary wasn't.

NIST trims the post-quantum signature zoo to 9 Round 3 survivors, while the code-based hopefuls get quietly kicked out.

Why should a small business care about PQC now? An intro to harvest-now-decrypt-later, crypto-agility, and vendor checklists.

Research prototype for EasyCrypt lemma proofs, using an MCP agent to spit out admit-free scripts and replay-check them.

An interview with Claude Crépau, less textbook ZK history, more the quantum teleportation and MPC bits people skip.

FIPS 140-3 paperwork stops at validation records; the real risk hides in bootloaders, vendor forks, and shipped firmware.

Security newsletter issue on AI vuln hunting, GuardDog 3.0, bug bounty economics, and assorted supply-chain/RAT/jailbreak bits.

Sony gets a conditional OCC trust charter, the latest stablecoin-friendly bank shell with the usual banking-and-commerce fuss.

First char in the clear, the rest XORed with a short key, so Dell BIOS passwords fall out of SPI flash dumps.

Reason piece on declassified FBI files about David Kahn, the crypto historian first treated like a suspect, because of course.

First-order DPA-hardened ML-DSA on Pavona ACC, with bitsliced masking tricks and benchmarks for ML-DSA-44/65/87.

First-order masked ML-DSA keygen/signing for Pavona ACC, reusing masked KMAC and aiming at DPA resistance?

Attested TLS can be relayed, so confidential computing’s data sovereignty pitch takes a CVE-sized hit.

Rejection sampling, the old side-channel workhorse, beats CDT here with fewer masked ANDs for lattice Gaussians (incl. HAWK).

Essay argues CRQC progress is turning into classified-capability turf, so disclosure norms start looking like vulnerability ops.

A Swiss cipher vendor was allegedly CIA/BND-owned for decades, and the 2020 exposé got buried again almost immediately.

D. J. Bernstein’s cryptography site, with papers, code, talks, and projects like NaCl and SafeCurves, because one homepage was enough.

Can remote attestation actually prove you’re talking to the TEE, or just to a relay that forwards the traffic?

Is indistinguishability obfuscation finally the magic trustless TTP, or still a theorem with a thermal problem?

DJB critiques the IETF's repeated TLS last call on solo ML-KEM, arguing the process and security story are both wobbly, as usual.

MIT CSAIL profile of Srini Devadas's 2026 Eckert-Mauchly Award, with his work on secure processors, PUFs, and PAC Privacy.

ISO finally standardizes Classic McEliece, the 1978 code-based PKE that's still faster and uglier than RSA, just harder to break.