21 stories
Show: Summaries / Headlines only
Certificate authorities, the DNS root's operator, and firmware signers generate keys under quorum, script, and witness. ML-DSA keys fit that pattern. LMS and XMSS keys cannot be backed up the classical way, since reusing a one-time key allows forgery.
Most of the 500 respondents said today's PKI will need to change to a great extent for post-quantum cryptography. Four percent said certificate management is fully automated, ahead of a 100-day cap on public TLS certificates issued from March 2027.
NIST dropped the draft's two-tier schedule and now deprecates RSA-3072, P-256, and Ed25519 after 2030, as it does RSA-2048. The agency also kept a path to FIPS 140 validation for hybrid key exchange.
Chrome blocked the six compromised TLS intermediates within two hours of the researcher's report. Linux distributions, language runtimes, and devices that ship their own root lists were still being patched four days later.
The non-binding poll asks only whether to start research. StarkWare argues that a layer 2 can be no more quantum-safe than Ethereum, which targets December 2029 for its own migration.
Applicants must pay 30% of project costs in cash. Each pilot must finish within six months and by October 31, 2027. CSA has published neither a total budget nor a per-project cap.
Federal ministries and the BSI want migration owners, binding plans, and a first cryptographic inventory in place by December 31, 2026. They asked public-sector and critical-infrastructure bodies to adopt the dates as bindingly as possible.
Europol's cybercrime center named wallet signing keys as the main quantum exposure for cryptocurrencies. In a second report with a Madrid university, Europol rated government data at high risk from harvest-now, decrypt-later collection.
Under NIS2 and DORA, regulated entities must keep cryptography policies that track the state of the art and advances in codebreaking. The EU's 2030 and 2035 post-quantum dates remain recommendations, and the proposed NIS2 amendment has not passed.
Weis wrote that Claude was used to port the classical CADO-NFS factoring software to GPUs and to orchestrate the run during idle time. He wrote that RSA-2048 keys are unaffected but RSA-1024 keys are vulnerable to large GPU fleets.
