PQC – Eine PKI für das Quantenzeitalter |
Die Entwicklung der Post Quantum Cryptography (#pqc), also neuer quantenresistenter Algorithmen, ist schon weit vorangeschritten. Im Sommer des vergangenen Jahres hat das #NIST die drei ersten quantenresistenten Algorithmen, FIPS 203, 204 und 205, vorgestellt.
https://www.it-daily.net/it-sicherheit/cloud-security/pqc-pki-bereit-quantenzeitalter

I have a small hunch why IBM has a tool that generates a #CBOM and tells you if they are #quantum safe or not...

Suffice to say that it's a reminiscent of the time that Altman traveled around the world and warned everyone that his #hallucination machine is an existential threat to humanity.

Join our #PQCSA summer school in Albena, Bulgaria from 16-20 June 2025! The goal of this school is to introduce the fundamentals of #PQC, its necessity, and the current threat landscape.
Info and registration: https://www.esat.kuleuven.be/cosic/events/pqcsa-summer-school/

#quantique #cryptographie #PQC

J'apprends le terme de Q-day, qui désigne le jour où un CRQC (Cryptographically Relevant Quantum Computer, prononcer "cric") cassera tout. Le Q-day, selon les meilleurs experts, est entre deux et cent ans dans le futur.

C'est même déjà dans Wikipédia anglophone https://en.wikipedia.org/wiki/Q-Day

About a third of the WWW #TLS traffic is using post-quantum encryption, which is protected against quantum factoring attacks such as Shor's algorithm. This has been achieved since Hybrid ML-KEM has been widely adopted by most web browsers and large service providers such as Cloudflare, Google, AWS, etc. There are no absolute figures available, but for example, Cloudflare has nice statistics about PQ encryption use on their services: https://radar.cloudflare.com/adoption-and-usage#post-quantum-encryption-adoption

The best part of this adoption is that users haven't had to do anything, or even know that this has been happening. As it should be.

At the upcoming SANS Emerging Threats Summit on May 14, I will be delivering a session: "Preparing for the Quantum Threat: Practical Steps for Cybersecurity Teams"

SANS Emerging Threats Summit is a free live online event and you can register here: https://sans.org/u/1zh8

This is a practical, engineering-led conversation about preparing for Q-Day — not years from now, but starting today.

Yay, #OpenSSL 3.5 (bringing server-side QUIC, #PQC (ML-KEM, ML-DSA))... will be available in #Debian Trixie

“Other notable changes include using the post-quantum algorithm mlkem768x25519-sha256 for key agreement by default”

Yay #PQC by default (note the sexy algorithm name )

OpenSSH 10.0 released [LWN.net]
https://lwn.net/Articles/1016924/

#Qualys needs to update their TLS client test to support the new signature algorithms and named groups. There are a fair number of "unknown" entries with #OpenSSL 3.5. https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html

The paper I co-authored (“A Critical Analysis of Deployed Use Cases for Quantum Key Distribution and Comparison with Post-Quantum Cryptography”) was accepted for publication by “EPJ Quantum Technology” today.

You can find the preprint here, Nick will eventually update it with the final changes.

In short: We looked into existing use-cases for #QuantumKeyDistribution and whether they make any sense and did so as a joint team between people with a QKD-background and cryptographers who started out very critical of QKD. (I’m firmly in the latter camp.)

My personal summary (though some of my co-authors won’t share it to this extend): #QKD is bullshit and not useful for practical purposes as it stands.

#crypto #cryptography #cryptology #postquantumcrypto #PQC

OpenSSH 10.0 just landed, now completely removing DSA signature support (you've been warned, repeatedly :-) and finite-field diffie-hellman key exchange. It also enables mlkem768x25519-sha256 as the default kex! (#pqc)

The new version string ("OpenSSH_10.0") is also likely to confuse a bunch of stupid scanners that assume anything starting with "OpenSSH_1" is a 1.x version.

https://www.openssh.com/txt/release-10.0

Can’t wait until #OpenSSL 3.5.0 hits the core repo of @archlinux. The release supports #PQC. This needs to be checked out.

https://github.com/openssl/openssl/releases/tag/openssl-3.5.0

#OpenSSL 3.5.0 LTS release with some #PQC algorithms, server side #QUIC support and more

We are organizing a #PQCSA summer school in Albena from 16-20 June 2025 to introduce the fundamentals of #PQC. More info and registration on: https://www.esat.kuleuven.be/cosic/events/pqcsa-summer-school

At the upcoming SANS Emerging Threats Summit on May 14, I will be delivering a session: "Preparing for the Quantum Threat: Practical Steps for Cybersecurity Teams"

SANS Emerging Threats Summit is a free live online event and you can register here: https://sans.org/u/1zh8

This is a practical, engineering-led conversation about preparing for Q-Day — not years from now, but starting today.

Cool! #pqc #cyber

OpenSSL is advancing into the quantum era with the upcoming release of OpenSSL 3.5, integrating post-quantum cryptographic algorithms such as ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205). This development ensures enhanced security against emerging quantum computing threats. For an in-depth analysis, refer to the article by Prof Bill Buchanan OBE FRSE: https://medium.com/asecuritysite-when-bob-met-alice/no-excuses-openssl-enters-the-quantum-age-ad29af287273

This Venn diagram showing which PQ algorithms are permitted by which government regulatory body from Mike Ounsworth's presentation at the Real World Post-Quantum Cryptography Workshop last week.

(Mike gave a version of that talk earlier this year at the PKIC conf: https://pkic.org/events/2025/pqc-conference-austin-us/WED_BREAKOUT_1200_Mike-Ounsworth_Architecting-PKI-Hierarchies-for-Graceful-PQ-Migration.pdf)