A UK pilot guide for PQC across Azure, AWS, and GCP, with verification limits instead of hand-wavy 'quantum-safe' claims.
trending283
01 02 Can Noir/ProveKit verify an EMV tap without leaking PAN, expiry, or CVV? This repo tries.03 Hand-coded AArch64 NEON for batched LSH, with a 4-way SPHINCS+ core that speeds signing without changing signatures.04 Will your validating resolver trust KSK-2024 before Oct 11, 2026, or enjoy a self-inflicted DNS outage?05 Cryptographic Debt in the Identity Stack: Preparing for NIST's Post-Quantum Standards secureworld.ioArticle on PQ migration in enterprise identity stacks, from SAML/OIDC bloat to HSMs, because headers were never the hard part.06 So NEAR shipped what kind of post-quantum asset, and does ML-DSA plus Intents actually buy anything?07 Grinding challenges on a GPU, then piping FAEST v3 through CPU and GPU, because apparently signing needed a sidecar.08 Post-quantum X3DH that survives reverse firewalls and kills subliminal channels, or just another isogeny handshake?09 OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing helpnetsecurity.comOpenSSH 10.6 adds ssh-mldsa44-ed25519, and any experimental PQ keys you made earlier now get to be regenerated.10 An Analysis of the ITU-T Multiple Cryptographic Algorithms X.509 Extensions for PQC Migration eprint.iacr.orgFinds a downgrade hole in ITU-T X.509 Catalyst PQC migration, where a classical CA key can swap in classical-only certs.11 QuietProof proves control of Bitcoin UTXOs off-chain, without exposing keys or producing a Bitcoin-valid signature.12 PoC repo for abusing Microsoft-signed rdpbase.dll as a BYOK RC4 primitive, with Python encrypt/decrypt scripts.13 Can X-Wing fit on Cortex-M85, and what do the cycle counts, storage, and timing leaks actually look like?14 BVI pushes org registry, revocation, and channel state on-chain, then makes the handset do the identity-checking work.15 First masked Knuth-Yao Gaussian sampler, plus a generic finite-precision compiler and Cortex-M4 numbers for lattice schemes.16 When Masking Preimage Computation Isn’t Enough: A Power Analysis Attack on Masked Implementations of Falcon eprint.iacr.orgPower analysis breaks masked Falcon via share recombination leakage, with chosen-message and passive variants.17 Paper on ATLAS, a compact module-MLWR signature scheme with AVX2 and SHAKE/SM3 backends, because more lattice acronyms were needed.18 Paper on purpose-limited secrets, tying them to constrained PRFs, FE, and payment tokens, because even secrets need policy.19 Can your hybrid crypto key or accept decision really depend on both PQ and classical parts? HyBind statically checks.20 N2SF-Based Post-Quantum Cryptography Migration Framework for Data in National and Public Institutions eprint.iacr.orgN2SF PQ migration framework classifies payload retention, rewrap, re-encrypt, comms, and signatures, with a toy implementation.21 16 Firefox extensions impersonated Rabby and OKX, then quietly exfiltrated wallet seeds and keys. Lovely marketplace hygiene.22 An ePrint on making MAYO run faster on Apple M1 with NEON, plus constant-time checks for the usual post-quantum optimism.23 Quantum computing and cryptocurrencies – Bridging technical expertise and decision-making europol.europa.euWill quantum computers break crypto, and what should policymakers do? Europol's brief says, in essence, plan now.24 Paper on Kettle, a UC-secure HAWK-based PQ threshold signature scheme with short sigs and low-round MPC, naturally.25 When Can Stateless Recovery Defeat Byzantine Quorum Safety? A Tight Normal Form for Single-Step BFT arxiv.orgStateless recovery can still break single-step BFT quorum safety, if replicas keep keys but forget who they've voted for.26 Stellar dev meeting video on CAP-87 and ML-DSA integration, for anyone who enjoys post-quantum paperwork.27 Cryptographic Debt in the Identity Stack: Preparing for NIST's Post-Quantum Standards secureworld.ioArticle on PQ migration in identity stacks, covering SAML/OIDC, token bloat, HSMs, and hybrid rollouts, fun at scale.28 Another credential scheme, this one device-bound, context-blind, and proved secure with signatures, blind sigs, and NIZKs.29 User handles now smuggle an AES key and retrieval token, and the issuer cert is encrypted under it, because passkeys weren't busy enough.30 Nonstop Multihop? Constructions and Lower Bounds for Re-Aggregatable Multisignatures eprint.iacr.orgRe-aggregatable multisigs: overlap forces linear growth, so the paper settles for constant-size unique multisigs via IVC.