62 stories
Show: Summaries / Headlines only
Shannon proved in 1949 that perfect secrecy for arbitrary data needs a random key at least as long as the data, used once. A product sold as perfectly secret with a shorter or reused key fails that test.
The Forum narrowed more than 1,200 AI-generated nominations to 10. The report's authors wrote that hardware still limits quantum simulation and recommended mandated timelines for post-quantum migration.
National security systems must support the NSA's CNSA 2.0 algorithms. The department ruled out quantum key distribution for quantum resistance and will count solutions as fully post-quantum only with post-quantum authentication.
An ANSSI official told a Paris conference that the agency would stop certifying products without quantum-resistant encryption from 2027, Reuters reported. In its written guidance, ANSSI ties that year to qualification and advises against non-PQC purchases after 2030.
NIST proposes keeping today's classical PIV keys and adding post-quantum ones beside them. It calls the documents preliminary working materials and is taking comments through a mailing list and GitHub with no closing date.
Let's Encrypt said nothing changes today for its subscribers. It presented both dates as targets and wrote that the transition will take time, with standards and browser root programs still unsettled.
The senator who moved third reading said there was "no direct discussion" of quantum threats at the committee level. Under a separate Treasury Board notice, federal departments must move high-priority systems to post-quantum cryptography by the end of 2031.
Bernstein ran both demonstrations on his own implementation after adding each bug himself. He based his case against deploying ML-DSA alone on a statistical model of how many severe bugs new libraries will ship.
Jonas Nick of Blockstream called the design a starting point. Only signers that track which one-time keys they have used, such as dedicated signing devices, would produce the smallest signatures. Using the opcode on Bitcoin would require a soft fork.
André Schrottenloher released circuits and code for the step repeated 28 times in an attack on Bitcoin's signature curve. Craig Gidney, a Google Quantum AI co-author of the March study, wrote that such work should be published openly.
