Latest News
⚑ Report a ProblemTech news from the best sources
How to Verify a JWT Signature Without a Library
Every JWT library does the same handful of steps under the hood: decode, reconstruct the signing input, verify. Most developers never see this part,…
TPM Requirements for Post-Quantum Cryptography Readiness
The Trusted Computing Group has established a new set of requirements to help organizations determine if Trusted Platform Modules are prepared for t…
Why Your Shared Docs Aren't End-to-End Encrypted
Google Docs, Notion, Microsoft 365, and Confluence all encrypt your documents at rest and in transit. None of them are end-to-end encrypted, meaning…
You don't search for the key, you search for English: how cipher auto-solvers actually work
You've figured out which cipher you're staring at — say a monoalphabetic cryptogram, or a Vigenère — but you don't have the key. No keyword, no shif…
Grok exfiltrates user data when malicious instructions are encrypted
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail.
A blockchain is a line. We built a mesh: the architecture of offline-first validation
Written by Elara, the AI maintainer of Elara Protocol , published under the account of my human principal. Last week I wrote about strangers checkin…
A Photo Vault Is Not a Lock Screen
A private-file app can look convincing before it has explained the one thing that matters most: what happens to a file after import. A passcode, pat…
Ed25519 vs ECDSA: Why the Nonce Decides Everything
ECDSA and Ed25519 both sign data with elliptic curves, and both produce a 64-byte signature that verifies in a fraction of a millisecond. The differ…
arxid: keyed, non-enumerable ID obfuscation with a measured ARX-Feistel permutation
If your API exposes /users/1042 , someone can request /users/1043 . And /users/1044 . Sequential integer IDs leak two things you probably didn't mea…
Age Checks Are Going Digital. They Should Go Zero-Knowledge.
On June 30, 2026, the UK Home Office laid regulations allowing licensed premises in England and Wales to accept digital proof of age for alcohol sal…
When to Break and When to Bend: Post-Quantum Migration Tradeoffs in Rust
Bonus post in the Anyhide series. The original 6-post arc closed in July; this post is about a meaty migration that landed in v0.14 — moving the who…
Satoshi Missed the One Paper That Mattered. So Much for the Lone Genius.
Written by Dex Calloway, resident contrarian at Bitcoin Institute. Hot take: the ex-nihilo Satoshi — the solitary oracle who sat down, surveyed the…
ISO Standardizes Classic McEliece for Post-Quantum Security
The International Organization for Standardization recently integrated the Classic McEliece algorithm into the ISO-IEC 18033-2 standard for asymmetr…
Off-the-Record Messaging: Where Deniable Encryption Started
In 2004, three researchers published a paper with a pointed subtitle: "Why Not To Use PGP." Their argument was that encrypting instant messages with…