Feisty Duck

Logjumps is a recently discovered technique for modular reduction over large prime fields. baincapitalcrypto.com/a-deep-dive-in…

Latacora’s Cryptographic Right Answers: Post Quantum Edition is nearly a year old, but it’s still a good read. latacora.com/blog/2024/07/2…

A Trail of Bits blog post by Benjamin Samuels highlights that private key compromise is the single biggest cause of cryptocurrency hacks, at 43.8 percent. More importantly, the post focuses on how protocols can be designed to resist this class of attack. blog.trailofbits.com/2025/06/25/mat…

The ACME Renewal Information (ARI) extension has been published as RFC 9773. When this extension is supported, CAs can signal to clients the need to rotate certificates earlier—for example, if they need to be revoked. datatracker.ietf.org/doc/rfc9773/

Matthew McPherrin has dug into Mozilla’s telemetry data to show us the most often encountered public CAs in Firefox. linkedin.com/posts/mcpherri…

If you’d like to learn more about quantum computation, take a look at Peter Shor’s lecture notes from 2022. math.mit.edu/~shor/435-LN/

IBM says it will deliver Quantum Starling—a large-scale, fault-tolerant quantum computer—by 2029. ibm.com/quantum/blog/l…

New Java and C# releases of the Bouncy Castle library improve post-quantum cryptography and interoperability. bouncycastle.org/resources/boun…

Twitter has a new protocol for encrypted direct messages, but it’s not great. Matthew Garrett mjg59.dreamwidth.org/71646.html and Matthew Green blog.cryptographyengineering.com/2025/06/09/a-b… explain in more detail.

KEYMASTER talks about certificate linting for private PKIs. ejbca.org/resources/keym…

The Electronic Frontier Foundation is weighing in on the European Union’s “encryption roadmap,” which continues to push for access to private communication. eff.org/deeplinks/2025…

Frank Denis makes a passionate plea for better user interfaces for OpenSSL cipher suite selection. 00f.net/2025/06/06/cip…

The next release of Apple’s operating system, due this fall, will provide post-quantum security for TLS by default for all network communications that rely on the modern, recommended APIs. support.apple.com/en-gb/122756 This video from WWDC25 has more info. developer.apple.com/videos/play/ww…

The EU has published its guidelines for migration to post-quantum cryptography. The timelines are as follows: triage by the end of 2026, migration of high-risk properties by the end of 2030, and migration of the remaining properties by the end of 2035. digital-strategy.ec.europa.eu/en/library/coo…

Cryptography & Security Newsletter is out! In this issue: - Internet PKI to Integrate DNSSEC - Short News feistyduck.com/newsletter/iss…

Microsoft added a variety of post-quantum crypto algorithms to its early adopters channel and detailed its adoption roadmap. techcommunity.microsoft.com/blog/microsoft…