Tootfinder

Good overview on where to get started to improve #cryptography code by Jade Philipoom at #39c3: https://

[39c3] How To Minimize Bugs in Cryptography Code
Over the last 10 years or so, using mathematical proof assistants and other formal-logic tools for cryptography code has gone from a relatively new idea to standard practice. I've been lucky enough to have a front-row seat to that transformation, ...

Emily Fox with a fun to read retrospective on what my team and a few other teams have done with post-quantum #cryptography at #RedHat and in #RHEL:

From if to how: A year of post-quantum reality
For the last 5 years, post-quantum cryptography (PQC) has largely been discussed as a research topic.

Reuse,
gut für die Fischerei
schlecht in der Kryptografie
https://blog.trailofbits.com/2026/02/18/carelessness-versus-craftsmanship-in-cryptography/

#Applied #cryptography cannot solve a #security problem. It can only convert a security problem into a key-management problem.
Corollary: If you aren’t actually solving the key-management problem, yo…

#RedHat just shipped its first RPM signed with #PostQuantum #Cryptography, completing a major push across multiple teams to make this happen.
`ipmitool-1.8.19-10.el10_1` from

> Concretely, we expect to add ML-KEM and ML-DSA APIs that are only available with #LibreSSL/#BoringSSL/AWS-LC, and not with #OpenSSL.
(from #Cryptography and #Qt simultaneously, right? (Qt rejected LibreSSL support.)
#Python

RE: #PQC