Tootfinder

#RedHat just shipped its first RPM signed with #PostQuantum #Cryptography, completing a major push across multiple teams to make this happen.
`ipmitool-1.8.19-10.el10_1` from

#Applied #cryptography cannot solve a #security problem. It can only convert a security problem into a key-management problem.
Corollary: If you aren’t actually solving the key-management problem, yo…

#cryptography

Good overview on where to get started to improve #cryptography code by Jade Philipoom at #39c3: https://

[39c3] How To Minimize Bugs in Cryptography Code
Over the last 10 years or so, using mathematical proof assistants and other formal-logic tools for cryptography code has gone from a relatively new idea to standard practice. I've been lucky enough to have a front-row seat to that transformation, ...

> Concretely, we expect to add ML-KEM and ML-DSA APIs that are only available with #LibreSSL/#BoringSSL/AWS-LC, and not with #OpenSSL.
(from #Cryptography and #Qt simultaneously, right? (Qt rejected LibreSSL support.)
#Python

❄️ NSA and IETF: Can an attacker simply purchase standardization of weakened cryptography?
#cryptography

In October, I gave a talk about post-quantum #cryptography at the #OpenSSL Conference in Prague. Yesterday, the video dropped. If you're interested, head to https:/…