JP Aumasson

Latest Security Liberation Front issue is out!

slf.fish

www.lepoint.fr/high-tech-in...
but, heh, 300 push-ups

Apple CryptoKit | Apple Developer Documentation Perform cryptographic operations securely and efficiently.

🆕⚛️🔐 Starting with iOS 26, CryptoKit gets support for quantum-secure cryptography with algorithms such as ML-KEM, ML-DSA and HPKE with X-Wing:
developer.apple.com/documentatio...

A bit more on Twitter/X’s new encrypted messaging Matthew Garrett has a nice post about Twitter (uh, X)’s new end-to-end encryption messaging protocol, which is now called XChat. The TL;DR of Matthew’s post is that from a cryptographic…

I wrote a bit more about X’s new encrypted DMs and the Juicebox protocol. blog.cryptographyengineering.com/2025/06/09/a...

Heh, totally forgot about that, had to Google it

'Most [entropy] estimates are thus based on some heuristic, which is a fancy word for “guess.”' 😂

thank you, will comment

what's your favorite FIPS 140-3 L2+ HSM?

One of the best things about Posting is you never know what obscure preoccupations your followers have. There will be a guy who has followed you for years and never said anything but then one day you disparage applesauce and he activates like a sleeper agent and dedicates his life to destroying you

big Wayne fan here, but seeing the comments online I don't even want to listen to it; gonna play Drought 3 instead

TIL: microSD Express uses PCI Express, and is basically a miniature NVMe SSD in a microSD form factor. Up to 1GB/s speeds. This is really cool tech!

nice! the next pages may talk about
* knowing the entropy sources
* quantify it and at least have some lower bound
* the error of mistaking entropy for uniform distribution
* the tools like ent, Diehard, NIST's suite
* the NIST RNG standards, what they're (not) good for
* "RNG" vs "DBRG" vs "PRNG"

NaN School

South Korea announces winners of KpqC competition | PQShield This month, South Korea selected its final four algorithms as part of the Korean Post-Quantum Cryptography (KpqC) competition. The competition, running This month, South Korea selected its final four ...

I missed that: South Korea standardized AIMer, a MPC-in-the-head signature scheme
pqshield.com/south-korea-...
kpqc.cryptolab.co.kr
www.kpqc.or.kr/images/pdf/A...

everything is real

Trump updated the PQC EO:
www.whitehouse.gov/presidential...

PQ Code Package is already on the list of software, just realized

My short story collection 𝐆𝐥𝐢𝐭𝐜𝐡𝐞𝐬 is now available as free EPUB/PDF, and still on Kindle, Apple, etc. Readers said it echoes Borges, Murakami (never read them), and DeLillo (never liked him). You judge. The last story pays homage to David Lynch.

www.aumasson.jp/glitches/ind...

There's this joke primality testing library that claims 95% accuracy in O(1) time:

github.com/mawerty/Is-P...

It does so by always returning false. The density of primes between 1 and n approaches 1/ln(n). For a 32-bit int, 4.6% of values are prime, so the code is right 95.4% of the time.

🡇

GitHub - veorq/awesome-post-quantum: A curated list of resources about post-quantum cryptography A curated list of resources about post-quantum cryptography - veorq/awesome-post-quantum

periodic reminder about: github.com/veorq/awesom..., PRs and Issues are welcome

should probably be in github.com/veorq/awesom..., no objection?

also no binding/signing of h (the key handle) but not sure that matters

the self-signed part is weird; you generate a privkey and sign your pubkey with it? also what does the attestation attestates?

looking forward to the part where you discuss the number of rounds of Keccak and ChaCha

thanks Matt, I don't remember where I said that and probably wasn't the first to, but happily take the credit :)

As I go through this book I’m trying to keep a list of recommendations for cryptographic engineers. It’s short so far, but I expect it’ll get longer as this goes on. Open to suggestions!

x.com/kazuakiishig...

BitVMX | Optimizing Algorithms for Bitcoin Script (part 3) This third and final part explain how the BLAKE3 algorithm works and how to use the Stack Tracker to optimize the on-chain implementation of the BLAKE3 cryptographic hash function.

Blog post on implementing BLAKE3 inside Bitcoin Script. :-) bitvmx.org/knowledge/op...

Cripto - An On-chain Tragicomedy A noir tale of cryptocurrency scams, cartels, and survival in the tropical hellscapes of Mexico.

wrote a novella, soon available for free www.aumasson.jp/cripto/

Government of Heard Island and McDonald Islands

penguinlabsweb4.github.io

By ZeroStableCoin