bolha.us

Jan SchaumannOpenSSH 10.0 just landed, now completely removing DSA signature support (you've been warned, repeatedly :-) and finite-field diffie-hellman key exchange. It also enables mlkem768x25519-sha256 as the default kex! (<a href="https://mstdn.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a>)The new version string ("OpenSSH_10.0") is also likely to confuse a bunch of stupid scanners that assume anything starting with "OpenSSH_1" is a 1.x version.<a href="https://www.openssh.com/txt/release-10.0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.openssh.com/txt/release-10.0</a>

Anton ArapovOpenSSL is advancing into the quantum era with the upcoming release of OpenSSL 3.5, integrating post-quantum cryptographic algorithms such as ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205). This development ensures enhanced security against emerging quantum computing threats. For an in-depth analysis, refer to the article by Prof Bill Buchanan OBE FRSE: <a href="https://medium.com/asecuritysite-when-bob-met-alice/no-excuses-openssl-enters-the-quantum-age-ad29af287273" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://medium.com/asecuritysite-when-bob-met-alice/no-excuses-openssl-enters-the-quantum-age-ad29af287273</a><a href="https://infosec.exchange/tags/openssl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openssl</a> <a href="https://infosec.exchange/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a>

Alexander Hansen FærøyThis is undoubtedly the most promising Post-Quantum TLS deployment situation I have seen for <a href="https://mastodon.social/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a> since we started discussing it more actively in the team. Very exciting!I hope that OpenSSL 3.5, when released, will make it into <a href="https://mastodon.social/tags/Debian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Debian</a> Trixie. That would make deployment of this so much more snappy and easy for the Tor network to upgrade, but that may be dreaming. The timelines here look quite difficult for that to happen, but let's hope.<a href="https://mastodon.social/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://mastodon.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://mastodon.social/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a>

Alexander Hansen FærøyLo and behold, <a href="https://mastodon.social/tags/OpenSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSSL</a> 3.5 (their upcoming LTS release) will come out here at the beginning of April, and it does indeed support some of these hybrid PQC schemes. Their recent beta2 announcement can be read here: <a href="https://openssl-library.org/post/2025-03-25-openssl-3.5-beta/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://openssl-library.org/post/2025-03-25-openssl-3.5-beta/</a> and their roadmap is at <a href="https://openssl-library.org/roadmap/index.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://openssl-library.org/roadmap/index.html</a>Very excited by this work. Big kudos to the OpenSSL Team here! 🥳🎉 Already planning on giving this a spin with the C implementation of <a href="https://mastodon.social/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a> later this week to see how it goes!<a href="https://mastodon.social/tags/foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#foss</a> <a href="https://mastodon.social/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://mastodon.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a>

Jan SchaumannThis Venn diagram showing which PQ algorithms are permitted by which government regulatory body from Mike Ounsworth's presentation at the Real World Post-Quantum Cryptography Workshop last week.(Mike gave a version of that talk earlier this year at the PKIC conf: <a href="https://pkic.org/events/2025/pqc-conference-austin-us/WED_BREAKOUT_1200_Mike-Ounsworth_Architecting-PKI-Hierarchies-for-Graceful-PQ-Migration.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://pkic.org/events/2025/pqc-conference-austin-us/WED_BREAKOUT_1200_Mike-Ounsworth_Architecting-PKI-Hierarchies-for-Graceful-PQ-Migration.pdf</a>)<a href="https://mstdn.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a>

𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕🧵 …ja und nein und vor allem ist es Marketing durch Angstmacherei. Quantenkomputer sind noch nicht wirklich einsetzbar obwohl es viele als solches gerne vermarkten.»Quantenschlüssel aus der Sicht des CISO: Quantentechnologien – ein Sicherheitsrisiko oder das Mittel der Wahl gegen Cyberangriffe? Warum, für wen und wo es wichtig ist, die Integration von Quantentechnologien zu starten.«⚛️ <a href="https://www.csoonline.com/article/3846875/quantenschlussel-aus-der-sicht-des-ciso.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.csoonline.com/article/3846875/quantenschlussel-aus-der-sicht-des-ciso.html</a><a href="https://chaos.social/tags/quantencomputer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#quantencomputer</a> <a href="https://chaos.social/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a> <a href="https://chaos.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://chaos.social/tags/ciso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ciso</a> <a href="https://chaos.social/tags/computer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#computer</a> <a href="https://chaos.social/tags/komputer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#komputer</a> <a href="https://chaos.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://chaos.social/tags/it" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#it</a>

𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕»The Quantum Apocalypse Is Coming. Be Very Afraid: What happens when quantum computers can finally crack encryption and break into the world’s best-kept secrets? It’s called Q-Day—the worst holiday maybe ever.«Since this is very much for us, I cannot deny it, but I see it as a marketing propaganda. To scare is also a marketing strategy.👾 <a href="https://www.wired.com/story/q-day-apocalypse-quantum-computers-encryption/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.wired.com/story/q-day-apocalypse-quantum-computers-encryption/</a><a href="https://chaos.social/tags/quantumcomputing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#quantumcomputing</a> <a href="https://chaos.social/tags/postquantum" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#postquantum</a> <a href="https://chaos.social/tags/it" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#it</a> <a href="https://chaos.social/tags/QDay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#QDay</a> <a href="https://chaos.social/tags/worstholiday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#worstholiday</a> <a href="https://chaos.social/tags/afraid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#afraid</a> <a href="https://chaos.social/tags/computer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#computer</a> <a href="https://chaos.social/tags/encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#encryption</a> <a href="https://chaos.social/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a> <a href="https://chaos.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://chaos.social/tags/quantum" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#quantum</a>

Jan SchaumannOut of the top 100K domains, roughly 28K negotiate a quantum safe key exchange.Almost all of those support both x25519_kyber768 and X25519MLKEM758; only 129 sites support SecP256r1MLKEM768. There are _no_ sites that support pure <a href="https://mstdn.social/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a> via e.g., mlkem768.The overwhelming majority of sites that support PQC do so by way of Cloudflare. That percentage matches Cloudflare's overall coverage of the top 1M domains.

Jan SchaumannJust in time for Real World PQC Workshop:I took at a look at who currently supports <a href="https://mstdn.social/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a>. The answer will not surprise you at all.<a href="https://www.netmeister.org/blog/pqc-use-2025-03.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.netmeister.org/blog/pqc-use-2025-03.html</a><a href="https://mstdn.social/tags/RWPQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RWPQC</a> <a href="https://mstdn.social/tags/RealWorldCrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RealWorldCrypto</a> <a href="https://mstdn.social/tags/rwc2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rwc2025</a>

𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕🧵 …neben dem vorhin erwähnten Marketing bezüglich des Post-Quantom Kryptografie ist darauf hin auch wieder die Angsmacherei davon. Das die mal angewendet wird ist klar aber wie ist die Frage.»Ihre Passwörter sind bald wertlos: Quantencomputer knacken alles! Quantencomputer revolutionieren die Rechenleistung. Sie lösen hochkomplexe Aufgaben in Sekundenschnelle. Doch die Technologie birgt auch Gefahren.«⚛️ <a href="https://www.telepolis.de/features/Ihre-Passwoerter-sind-bald-wertlos-Quantencomputer-knacken-alles-10318098.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.telepolis.de/features/Ihre-Passwoerter-sind-bald-wertlos-Quantencomputer-knacken-alles-10318098.html</a><a href="https://chaos.social/tags/pqcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqcrypto</a> <a href="https://chaos.social/tags/quantencomputer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#quantencomputer</a> <a href="https://chaos.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://chaos.social/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://chaos.social/tags/ki" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ki</a> <a href="https://chaos.social/tags/itsicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsicherheit</a> <a href="https://chaos.social/tags/passwort" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwort</a>

Sean Mullan<a href="https://mastodon.world/tags/JDK24" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JDK24</a> was released yesterday! This is a significant release for Java Security, as it contains two new core Quantum-Resistant cryptographic algorithms, ML-KEM for Key Encapsulation, and ML-DSA for Digital Signatures.<a href="https://openjdk.org/projects/jdk/24/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://openjdk.org/projects/jdk/24/</a><a href="https://mastodon.world/tags/crypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#crypto</a> <a href="https://mastodon.world/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.world/tags/java" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#java</a> <a href="https://mastodon.world/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a>

wtfismyipPost Quantum Migration of Tor. It will be interesting to see when the Tor Project starts implementing <a href="https://gnu.gl/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a> in arti and tor: <a href="https://eprint.iacr.org/2025/479.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://eprint.iacr.org/2025/479.pdf</a> <a href="https://gnu.gl/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://gnu.gl/tags/tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tor</a> <a href="https://gnu.gl/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a>

Jan Schaumann<a href="https://mstdn.social/tags/OpenSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSSL</a> will get the now standardized post-quantum cryptography algorithms (ML-KEM, ML-DSA, SLH-DSA) in 3.5 (planned release date is 2025-04-08):<a href="https://openssl-library.org/post/2025-02-04-release-announcement-3.5/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://openssl-library.org/post/2025-02-04-release-announcement-3.5/</a>This will include X25519MLKEM768, and will be enabled and preferred by default:<a href="https://mailarchive.ietf.org/arch/msg/tls/g9sagkuAu8KlWpmJ30YdXbga5Xg/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mailarchive.ietf.org/arch/msg/tls/g9sagkuAu8KlWpmJ30YdXbga5Xg/</a><a href="https://mstdn.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a>

The New OilScientists create world's 1st chip that can protect data in the age of <a href="https://mastodon.thenewoil.org/tags/QuantumComputing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#QuantumComputing</a> attacks<a href="https://www.livescience.com/technology/computing/scientists-create-worlds-1st-chip-that-can-protect-data-in-the-age-of-quantum-computing-attacks" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.livescience.com/technology/computing/scientists-create-worlds-1st-chip-that-can-protect-data-in-the-age-of-quantum-computing-attacks</a><a href="https://mastodon.thenewoil.org/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a> <a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/GoogleCloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GoogleCloud</a> introduces quantum-safe digital signatures in <a href="https://mastodon.thenewoil.org/tags/KMS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KMS</a><a href="https://www.bleepingcomputer.com/news/security/google-cloud-introduces-quantum-safe-digital-signatures-in-kms/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/google-cloud-introduces-quantum-safe-digital-signatures-in-kms/</a><a href="https://mastodon.thenewoil.org/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> <a href="https://mastodon.thenewoil.org/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a> <a href="https://mastodon.thenewoil.org/tags/QuantumComputing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#QuantumComputing</a> <a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Ehay2k<a href="https://infosec.exchange/@sophieschmieg" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@sophieschmieg</a> As the world moves rapidly to adopt Post Quantum Cryptography, it would be REALLY helpful if the implementation instructions were krystal [sic] clear. But seriously, this is something that needs to be done properly at the outset. And for the next few iterations of PQCs that we will see over the next few years. <a href="https://mastodon.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://mastodon.social/tags/mlkem" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mlkem</a> <a href="https://mastodon.social/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://mastodon.social/tags/MLKEMPostQuantumKeyEncapsulation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MLKEMPostQuantumKeyEncapsulation</a>

Jan SchaumannAnd of course on the day that I push a blog post on post-quantum cryptography, Microsoft announces some cool new quantum computing breakthroughs:<a href="https://azure.microsoft.com/en-us/blog/quantum/2025/02/19/microsoft-unveils-majorana-1-the-worlds-first-quantum-processor-powered-by-topological-qubits/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://azure.microsoft.com/en-us/blog/quantum/2025/02/19/microsoft-unveils-majorana-1-the-worlds-first-quantum-processor-powered-by-topological-qubits/</a>Gonna have to up date my blog post after I have digested all this, but on first skimming, this looks scientifically exciting but doesn't shift our immediate <a href="https://mstdn.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> timelines.

Jan SchaumannI put together another summary of where we currently are with respect to Post-Quantum <a href="https://mstdn.social/tags/Cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptography</a> in the industry:<a href="https://www.netmeister.org/blog/pqc-2025-02.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.netmeister.org/blog/pqc-2025-02.html</a><a href="https://mstdn.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a> <a href="https://mstdn.social/tags/quantum" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#quantum</a> <a href="https://mstdn.social/tags/tls" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tls</a>

Markus Kilås 🔏 🇸🇪 🚼 🚼On my way to Jfokus 2025! <a href="https://chaos.social/tags/jfokus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jfokus</a> <a href="https://chaos.social/tags/jfokus2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jfokus2025</a> <a href="https://chaos.social/tags/java" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#java</a> <a href="https://chaos.social/tags/stockholm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#stockholm</a> <a href="https://chaos.social/tags/BouncyCastle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BouncyCastle</a> <a href="https://chaos.social/tags/Keyfactor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keyfactor</a> <a href="https://chaos.social/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a>

Bob the TravelerOTD in 1996 Peter Shor published "Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer", now we have <a href="https://mastodon.world/tags/QuantumSafe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#QuantumSafe</a> <a href="https://mastodon.world/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> as a defense <a href="https://cromwell-intl.com/open-source/nginx-openssl-quantum-safe/?s=mb" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cromwell-intl.com/open-source/nginx-openssl-quantum-safe/?s=mb</a> <a href="https://mastodon.world/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a> <a href="https://mastodon.world/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Recent searches

Search options

Administered by:

Server stats:

#PQC