DJB critiques the IETF's repeated TLS last call on solo ML-KEM, arguing the process and security story are both wobbly, as usual.
trending17
01 02 EU fast-tracks a standalone vote to revive expired voluntary message scanning, the smaller sibling of Chat Control 2.0.03 AI gets crammed into five minutes, alongside PQC chatter and a FAR overhaul, because brevity is now policy.04 EU Chat Control Is Back - And This Time It Might Actually Pass | The CyberSec Guru thecybersecguru.comEU Chat Control is back, this time with trilogue momentum, client-side scanning and age checks, the same encryption panic in fresh packag...05 What do the executive orders actually change for PQC migration, procurement, and standards, besides paperwork?06 Unlike the usual quantum handwringing, this one ties HNDL to NSM-10, CISA guidance, and NIST migration dates.07 Trump's crypto EO talk, not new crypto, just policy and deployment handwringing over PQC rollout.08 When do agencies and contractors have to ditch RSA, and what PQC deadlines did the White House just set?09 The scary bit is harvest-now, decrypt-later, and this policy brief wants CBOMs so PQC migration stops being folklore.10 OMB tells agencies to begin executing PQC transition by 2027 | Federal News Network federalnewsnetwork.comOMB finally moves PQC from slideware to work orders: agencies start migration in 2027, finish the crypto archaeology by 2035.11 U.S. executive orders set PQC migration deadlines for agencies, contractors, and critical infrastructure, with CBOMs in tow.12 US finally gives PQC a deadline, 2030 for most migrations and 2031 for stragglers, which is more than the usual hand-waving.13 Crypto news post on Trump’s 2031 post-quantum migration deadline for federal systems, because passwords apparently age too.14 Senate NDAA would subsidize CMMC for small defense contractors and force DoD PQC key establishment by 2030, signatures by 2031.15 Participate to the public review of the new draft of “Agreed Cryptographic Mechanisms” certification.enisa.europa.euENISA is asking for review of ACM v3, the EU cert crypto shortlist, with redlined changes from the previous draft.16 Post-quantum migration is treated as an API design problem, with intent-based scopes, stable key IDs, and key evolution ops.17 Certificate-bound admission for agents mutating prod infra, with digests, policy versions, revocation checks, and a Go prototype.