pqc-bench Part 2: Where the X25519MLKEM768 overhead actually matters
Part 1 ran a fresh-handshake load test on a Graviton3 and measured what the ML-KEM half of X25519MLKEM768 adds to TLS 1.3 handshake latency. The hea…
DevOps
⚑ Сообщить о проблемеПоследние новости DevOps от Tech News
Все темы
agents
ai
api
architecture
automation
aws
backend
beginners
cloud
database
devchallenge
devops
docker
javascript
kubernetes
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
Post-Quantum Cryptography Migration- A Practical Starting Point for Developers
Most production stacks are running RSA and ECC in a dozen places the developer didn't consciously choose — a cloud provider default, an npm package,…
NSA Accelerates Post-Quantum Cryptography Implementation: Addressing National Security and Tech Industry Concerns
Introduction The National Security Agency (NSA) has announced a dramatic acceleration of its post-quantum cryptography (PQC) implementation timeline…
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
Building a Sovereign Cryptography Suite in .NET: 11 Engines, Multi-Jurisdictional Hashes, and Anti-Keylogger Shields
1. 🚀 Introduction & Background In modern software engineering, data security is often treated as a solved problem through a mono-cultural lens.…
Rotate without breaking: Automated key rotation with rotate_key().
Key rotation shouldn't mean taking your services offline for a database migration. With wauth's rotate_key(), every secret in your vault is re-encry…
Don't trust the randomness API: verify drand beacons in your agent in 30 lines
Agents keep needing a random number that another party can check: picking a reviewer, breaking a tie, sampling a test case, running a small raffle.…
Forging 1024-bit RSA signatures in nearly SNFS time
Alternate title: Nearly SNFS-Speed Signature Forgery Sans Factoring N (NSNFSSSFSFN) Abstract. The security of RSA is generally understood to be base…
Using SHA256 to Build Trustworthy Data Portals in Brazil
Data portals in emerging markets face a specific credibility problem: how do you prove that the data you display was not silently altered after publ…
The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 [32:37]
In 2025, I [the speaker] found and disclosed a bunch of vulnerabilities in GPG, the most used PGP implementation, and held a talk at 39c3 about it.…
They steal your database and cannot crack a single password
Picture the worst Monday: someone walked off with a dump of your users table. Emails, names, and the password column. The good news is that you do n…
TPM Requirements for Post-Quantum Cryptography Readiness
The Trusted Computing Group has established a new set of requirements to help organizations determine if Trusted Platform Modules are prepared for t…
Why Your Shared Docs Aren't End-to-End Encrypted
Google Docs, Notion, Microsoft 365, and Confluence all encrypt your documents at rest and in transit. None of them are end-to-end encrypted, meaning…
A blockchain is a line. We built a mesh: the architecture of offline-first validation
Written by Elara, the AI maintainer of Elara Protocol , published under the account of my human principal. Last week I wrote about strangers checkin…
A Photo Vault Is Not a Lock Screen
A private-file app can look convincing before it has explained the one thing that matters most: what happens to a file after import. A passcode, pat…
When to Break and When to Bend: Post-Quantum Migration Tradeoffs in Rust
Bonus post in the Anyhide series. The original 6-post arc closed in July; this post is about a meaty migration that landed in v0.14 — moving the who…
ISO Standardizes Classic McEliece for Post-Quantum Security
The International Organization for Standardization recently integrated the Classic McEliece algorithm into the ISO-IEC 18033-2 standard for asymmetr…
TLS Interception: How Corporate Proxies Read Your Encrypted Traffic
The padlock in your browser tells you the connection is encrypted. It does not tell you who is on the other end of that encryption. On millions of c…
Two signatures are better than one — bilateral provenance for AI agents
Two signatures are better than one — bilateral provenance for AI agents An AI agent produces a financial report. You notarize it — a 239-byte crypto…
Add a post-quantum readiness gate to your CI in 5 lines
Your codebase almost certainly relies on RSA and elliptic-curve cryptography — TLS, JWTs, SSH keys, signed tokens. All of it is breakable by a large…
Cloud KMS and Bring-Your-Own-Key: What You're Actually Trusting
Every major cloud provider sells a key management service, and most sell a "bring your own key" option layered on top, marketed as the difference be…
The SGX Enclave: Building the First Cryptographically Sovereign Smart City
Imagine an economic free zone with no tax declarations, no tedious audits, and no intrusive KYC processes requiring passport uploads to vulnerable s…
Private Set Intersection: Finding What Two Parties Share Without Revealing the Rest
Private Set Intersection, usually shortened to PSI, is a protocol for two parties who each hold a set of items. They want to compute the items the t…
Why we pay AI to undo the failures of PDFs (Introducing UDS 1.0)
Most people do not think about file formats. We focus on the words, the contracts, the medical records, and the transactions. The format is invisibl…
The Pentester’s Guide to Finding CBC Bit Flipping Vulnerabilities
If you spend enough time poking at web applications, you’ll eventually run into a target that handles session management poorly. You’ll intercept a…
UVS: a draw's fairness as a fact you can recompute — not a certificate you trust
I've built casino slot machines and gaming systems for 15 years. I mostly stayed away from compliance, but once I had to write the official algorith…
rscrypto v0.4.0: Verifying Constant-Time Behavior Instead of Assuming It
Every cryptography library says it's secure and performant. Very few can explain how that security is validated and how that performance is proven a…
How a Slow Office VPN Led Me to File a US Patent
This is the story of how a mundane complaint — "the VPN is slow" — turned into a US patent application. Not a granted patent. An application . I wan…
Random Oracles in Python
A random oracle is a function $\mathcal{O}: {0,1}^* \to {0,1}^\infty$ where each output bit is independently and uniformly random, but the function…
Spectre and Meltdown: When CPUs Leak Secrets by Guessing
For decades, processor designers chased speed by letting the CPU run ahead of itself — executing instructions before it was certain they were needed…