60 stories
Show: Summaries / Headlines only
Apple expects its draft rules to require three cosignatures per certificate and seven-day validity, with operator applications opening by late summer 2027. For email, Apple will accept root certificates that pair ML-DSA with ECDSA or RSA.
NIST still supports buying and running FIPS 140-2 modules in existing systems. FedRAMP counted more than 500 modules in the FIPS 140-3 testing pipeline in July. At least seven validated FIPS 140-3 modules support post-quantum algorithms.
In a circular dated August 27, SAMA required supervised institutions to make their procedures for identifying and classifying cryptographic assets accurate and comprehensive by the end of 2026, ahead of a quantum risk assessment due in March 2027.
An ML-DSA-44 signature is 2,420 bytes, larger than many DNS implementations allow in one UDP packet. Cloudflare's engineers wrote that signing servers, registrars, registries, and the DNS root must all adopt the algorithm too.
Altera said in September that Agilex 3 and Agilex 5 devices with post-quantum secure boot were shipping, without naming the algorithm. Its October software documentation lists ML-DSA and an LMS and ML-DSA hybrid, with ECDSA as the default.
G7 cybersecurity agencies addressed decision-makers rather than technical teams, set five priorities from raising awareness to writing PQC into cybersecurity requirements, and warned that organizations that delay could be excluded from contracting opportunities, including public procurement.
EMVCo's Security Working Group puts a code-breaking quantum computer at least two decades away and sets no migration date for chip cards. The authors built their timeline on three qubit counts, one of which IBM gives in logical qubits.
StarkWare spent 10,000 satoshis from a lock built on hash-based signatures, in a Bitcoin transaction mined by MARA Pool. A flaw in the original script, which left one of two signature rounds unenforced, was fixed on October 7.
Sweden's government set five goals for quantum technology to 2036 without naming any sums of money. It intends to carry out its measures through agency assignments, among other means. It also pointed organizations to NCSC's post-quantum migration recommendations.
Researchers have published flaws in new post-quantum code since 2024. For long-term keys, a classical algorithm beside the new one limits the damage, at the cost of extra data, code, and a second migration. The NSA does not require hybrids.
