62 stories
Show: Summaries / Headlines only
NIST still supports buying and running FIPS 140-2 modules in existing systems. FedRAMP counted more than 500 modules in the FIPS 140-3 testing pipeline in July. At least seven validated FIPS 140-3 modules support post-quantum algorithms.
With TU Berlin's TrustBOM, a software provider can prove that listed packages are absent from its SBOM without sharing it. The researchers wrote that the guarantee covers only the SBOM as generated, which an SBOM tool can get wrong.
Weis wrote that Claude was used to port the classical CADO-NFS factoring software to GPUs and to orchestrate the run during idle time. He wrote that RSA-2048 keys are unaffected but RSA-1024 keys are vulnerable to large GPU fleets.
In a circular dated August 27, SAMA required supervised institutions to make their procedures for identifying and classifying cryptographic assets accurate and comprehensive by the end of 2026, ahead of a quantum risk assessment due in March 2027.
The team restored error suppression in a stand-in test for logic gates by removing defective parts. The larger distance-5 code beat a distance-3 code only after the team discarded runs affected by leakage, and only in one basis.
An ML-DSA-44 signature is 2,420 bytes, larger than many DNS implementations allow in one UDP packet. Cloudflare's engineers wrote that signing servers, registrars, registries, and the DNS root must all adopt the algorithm too.
IonQ researchers priced an attack on secp256k1, the curve Bitcoin and Ethereum use for signatures, for a machine the company has not built, assuming two-qubit gate errors of 1 in 10,000 over a run of nearly four weeks.
Altera said in September that Agilex 3 and Agilex 5 devices with post-quantum secure boot were shipping, without naming the algorithm. Its October software documentation lists ML-DSA and an LMS and ML-DSA hybrid, with ECDSA as the default.
Eric Lu posted a 130-digit prime factor of the 260-digit challenge number. The other factor is also prime. Lu later described a GPU run of the number field sieve that took about 4,900 GPU-days and cost about $400,000.
G7 cybersecurity agencies addressed decision-makers rather than technical teams, set five priorities from raising awareness to writing PQC into cybersecurity requirements, and warned that organizations that delay could be excluded from contracting opportunities, including public procurement.
