Client adoption of TLS post-quantum key agreement to counter harvest-now/decrypt-later as seen by @Cloudflare over the years.
7
12
53
3,228
Bas Westerbaan retweeted
so happy with the @Cloudflare job, ngl before joining I thought the motto “help build a better internet” was just another mission statement, but ppl genuinely care about it and about transparency, asking themselves “does this help build a better internet?” when designing new features/products, and holding themselves to high ethical standards, loving it 🧡
and PS: really cool announcements coming up next week 🎂
5
8
148
4,770
Apple announces plans for post-quantum root program adopting Merkle Tree Certificates. groups.google.com/a/chromium…
2
30
193
11,754
Don't panic. It's not a question whether RSA-1024 is broken, but who is willing to pay the roughly 30m$ for the bragging rights. RSA-2048 is fine... except for the quantum thing.
636606729769440499166579950236036751749912014371509557713570027508971809534551913252252094954941974952859310861988904737359709200557919
is a factor of RSA-896
saweis.net/posts/rsa-896.htm…
15
21
1,145
125,321
Bas Westerbaan retweeted
Can't post on the official Chinese forum about NGCC issues, so I made my own forum:
ngcc.dev/reports/index.html
11
24
179
12,618
Bas Westerbaan retweeted
I have attacks on 14 candidates in the NGCC but they still have not approved me as poster. Anyway, zero postings by anyone thus far.
5
21
305
37,221
Bas Westerbaan retweeted
We're happy to announce that we finished version 3 of the FAEST signature scheme, which is our round 3 submission to the NIST Post-Quantum Cryptography: Additional Digital Signature Schemes process.
5
10
49
2,823
Bas Westerbaan retweeted
Falcon: same great flavor, now with 0% floating point arithmetic! pqshield.com/falcon-without-…
5
13
43
5,069
Bas Westerbaan retweeted
The lesson here for other infrastructure providers, and digital assets firms in particular: don't assume. Test.
Only by confronting the potential problem empirically can we (a) develop technical solutions and (b) enable a real discussion on tradeoffs.
1
4
245
Bas Westerbaan retweeted
1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale. cfl.re/4xsuOwg
35
133
891
54,970
What to do about post-quantum DNSSEC? Can we just shove in ML-DSA-44, do we need to make more systemic changes, or should we start writing a eulogy? There is only one way to find out: 1.1.1.1 now supports checking ML-DSA-44 (alg 18) signatures.
4
8
37
4,249
We also set up signed test zones at dnstest.dev. To get data from a diverse set of networks, we're sending probes from Cloudflare challenge pages. Read all about it in this blog post. We'll report back soon with data! blog.cloudflare.com/post-qua…
1
6
359
Bas Westerbaan retweeted
We just made connections to origin servers faster and more secure.
p90 latency improved by 150ms+. 45 billion connections a day now use post-quantum encryption.
and It’s automatic (obviously)!
blog.cloudflare.com/automati…
2
2
20
2,584
