El lado del mal - Hamming Quasi-Cyclic (HQC-KEM): Nuevo Key-Encapsulation Mechanism en Post-Quantum Cryptography https://www.elladodelmal.com/2025/04/hamming-quasi-cyclic-hqc-kem-nuevo-key.html #PQC #Quantum #PostQuantum #HummingQuasiCiclic #HQC #KEM #Criptografía #Cifrado

PQC – Eine PKI für das Quantenzeitalter |
Die Entwicklung der Post Quantum Cryptography (#pqc), also neuer quantenresistenter Algorithmen, ist schon weit vorangeschritten. Im Sommer des vergangenen Jahres hat das #NIST die drei ersten quantenresistenten Algorithmen, FIPS 203, 204 und 205, vorgestellt.
https://www.it-daily.net/it-sicherheit/cloud-security/pqc-pki-bereit-quantenzeitalter

I have a small hunch why IBM has a tool that generates a #CBOM and tells you if they are #quantum safe or not...

Suffice to say that it's a reminiscent of the time that Altman traveled around the world and warned everyone that his #hallucination machine is an existential threat to humanity.

Join our #PQCSA summer school in Albena, Bulgaria from 16-20 June 2025! The goal of this school is to introduce the fundamentals of #PQC, its necessity, and the current threat landscape.
Info and registration: https://www.esat.kuleuven.be/cosic/events/pqcsa-summer-school/

#quantique #cryptographie #PQC

J'apprends le terme de Q-day, qui désigne le jour où un CRQC (Cryptographically Relevant Quantum Computer, prononcer "cric") cassera tout. Le Q-day, selon les meilleurs experts, est entre deux et cent ans dans le futur.

C'est même déjà dans Wikipédia anglophone https://en.wikipedia.org/wiki/Q-Day

About a third of the WWW #TLS traffic is using post-quantum encryption, which is protected against quantum factoring attacks such as Shor's algorithm. This has been achieved since Hybrid ML-KEM has been widely adopted by most web browsers and large service providers such as Cloudflare, Google, AWS, etc. There are no absolute figures available, but for example, Cloudflare has nice statistics about PQ encryption use on their services: https://radar.cloudflare.com/adoption-and-usage#post-quantum-encryption-adoption

The best part of this adoption is that users haven't had to do anything, or even know that this has been happening. As it should be.

#Qualys needs to update their TLS client test to support the new signature algorithms and named groups. There are a fair number of "unknown" entries with #OpenSSL 3.5. https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html

OpenSSH 10.0 just landed, now completely removing DSA signature support (you've been warned, repeatedly :-) and finite-field diffie-hellman key exchange. It also enables mlkem768x25519-sha256 as the default kex! (#pqc)

The new version string ("OpenSSH_10.0") is also likely to confuse a bunch of stupid scanners that assume anything starting with "OpenSSH_1" is a 1.x version.

https://www.openssh.com/txt/release-10.0

#OpenSSL 3.5.0 LTS release with some #PQC algorithms, server side #QUIC support and more

We are organizing a #PQCSA summer school in Albena from 16-20 June 2025 to introduce the fundamentals of #PQC. More info and registration on: https://www.esat.kuleuven.be/cosic/events/pqcsa-summer-school

Cool! #pqc #cyber

OpenSSL is advancing into the quantum era with the upcoming release of OpenSSL 3.5, integrating post-quantum cryptographic algorithms such as ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205). This development ensures enhanced security against emerging quantum computing threats. For an in-depth analysis, refer to the article by Prof Bill Buchanan OBE FRSE: https://medium.com/asecuritysite-when-bob-met-alice/no-excuses-openssl-enters-the-quantum-age-ad29af287273

This Venn diagram showing which PQ algorithms are permitted by which government regulatory body from Mike Ounsworth's presentation at the Real World Post-Quantum Cryptography Workshop last week.

(Mike gave a version of that talk earlier this year at the PKIC conf: https://pkic.org/events/2025/pqc-conference-austin-us/WED_BREAKOUT_1200_Mike-Ounsworth_Architecting-PKI-Hierarchies-for-Graceful-PQ-Migration.pdf)

Sicherheits-Architekt. Wenn du vormittags elliptische Kurven für die Post-Quanten-Kryptographie evaluieren darfst und nachmittags einem Projektmanager erklären musst, dass das Telefon kein sicherer Kanal ist.

Post-Quantum #DNSSEC Testbed with BIND and PowerDNS

https://pq-dnssec.dedyn.io/

UK urges critical orgs to adopt quantum cryptography by 2035

The UK's National Cyber Security Centre (NCSC) has published specific timelines on migrating to post-quantum cryptography (PQC), dictating that critical organizations should complete migration by 2035.

#PQC #quantum #cryptography #encryption #UK #security #cybersecurity #hacking #infosec

https://www.bleepingcomputer.com/news/security/uk-urges-critical-orgs-to-adopt-quantum-cryptography-by-2035/

The NCSC’s advisory deadline of 2035 for organisations to introduce quantum-safe algorithms is too late, according to some industry insiders.

The NCSC’s advisory deadline of 2035 for organisations to introduce quantum-safe algorithms is too late, according to some industry insiders.

https://www.computing.co.uk/news/2025/security/ncsc-s-quantum-safety-deadlines-too-optimistic-say-industry-insiders