Quantum computing essay, from bombe analogy to Shor, with the usual correction that superposition is not brute-force parallelism.

Need the docs for PODs, GPCs, and ZApps, aka programmable cryptography over user-owned data?

The annoying part: ML-DSA is still the least-bad option, and the shinier PQ signatures aren’t arriving before migration does.

Not content with raw Ed25519, it now verifies signify and minisign wrappers and adds the Rust parsing/types.

Attested TLS: if the attestation is real, why do all seven schemes still let relay attacks through?

RustCrypto's bottleneck is apparently not Rust, but missing SIMD and hardware acceleration in the hot path.

An overview of QKD, its variants, standards, and deployment status, plus the usual “is this actually useful?” subtext.

How do mouse-movement entropy collectors differ? A gist comparing browser sampling, KeePass, PuTTY, VeraCrypt, and their mixers.

Paper on Git hash-chain malleability and commit-signature edge cases, because even hashes need a footgun audit.

AI audit found 7 bugs in Cloudflare's CIRCL, from threshold RSA math to HPKE PSK bypass; models now do cryptobugs too.

Demo note showing the Q-Day ECDLP “break” still passes when IBM Quantum is replaced by /dev/urandom, so yeah.

A concise headless keyring cheat sheet, comparing pass, secret-tool, and keepassxc-cli with the usual CRUD and GPG init.

TLS WG mail backs publishing draft-ietf-tls-mlkem-08, the standalone ML-KEM spec.

Long explainer tying Enigma and the bombe to quantum threats against RSA, ECC, and DH, because keys are only aspirational.

DJB says “informational” RFCs still act like standards, and the solo ML-KEM TLS 1.3 doc is the latest naming game.

Bare-metal ATmega328P auth engine in AVR asm, with Speck, CTR, MAC checks, and a tiny decrypted bytecode interpreter.

IBM Technology video on the PQC executive order and what “Q-Day” actually means, since panic needs a glossary.

What broke in curl's crypto path? This audit walks protocol handlers, TLS backends, reuse, HSTS, SSH keys, and dead ends.

Reborn Notes details local import/export and encrypted portable backups, because moving notes without trusting the server is trendy.

Bernstein reopens the usual ML-KEM risk story, pointing out that 'module lattice' and asymptotics are doing a lot of hand-waving.

Explains ZK rollups, batching, validity proofs, data availability, and the usual SNARK vs STARK arguments. Standard L2 tourism.

Microsoft says critical products and services should be on post-quantum crypto by 2029, plus the usual TLS 1.3 cleanup.

Microsoft says it's aiming to move critical products to post-quantum crypto by 2029, so the real question is how much breaks?

FHE.org digest #40 rounds up upcoming FHE conferences, talks, and community updates, because calendars need feeding too.

IETF's PQC engineer guide, covering NIST/ISO algorithms, hybrids, protocol fallout, and the usual key-size pain.

Large-scale scan finds RSA moduli with repeated zero blocks in the wild, a weirdly specific failure mode beyond the usual weak keys.

Vitalik’s Part I walks through modern iO from FE to lattices, a recursive stack that’s still miles from practical obfuscation.

Thread says age checks usually devolve into ID checks, and the new bit is ZK proofs as the only non-creepy escape hatch.

Post on PQ TLS cert bloat and MTC tradeoffs, because certificates apparently needed more engineering.

19 years of GPS page 17 data suggest the “empty” field is encrypted OTAD rekeying traffic, with a 2011 fleet-wide switch.