» Tag
cryptography
33 postsBeyond login: encrypting data with passkeys and WebAuthn PRF
WebAuthn's PRF extension turns passkey login into an encryption key source; pknotes shows a master-password-free, end-to-end encrypted architecture.
CUDA 13.3 Brings Hardware Carryless Multiplication to GPUs
CUDA 13.3's new clmad PTX instruction accelerates carryless multiplication on GPUs, delivering up to 18.8x faster GHASH and 4-13x faster sum-check.
Emem: A Signed Memory Layer for Multi-Agent AI Systems
Emem gives AI agents a signed, verifiable memory layer for physical-world facts that survives context compaction across models and vendors.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comA Portable Passkey Record Format and Go API Proposal
A proposed portable string format for WebAuthn passkey records, plus a stateless Go API draft, aiming to simplify interoperable credential storage.
CVE-2025-39964: The $113,337 AF_ALG Linux Privilege Escalation Bug
CVE-2025-39964: a race condition in Linux AF_ALG enables root privilege escalation and Docker container escape, earning $113,337 via kernelCTF.
Python library verifies OpenAI's signed AI agent traffic (RFC 9421)
regent-httpsig is an open-source Python library that verifies and signs OpenAI-style AI agent HTTP traffic per RFC 9421 and Web Bot Auth drafts.
Post-Quantum Signing Keys That Never Leave the Secure Enclave
iOS 26 adds Secure Enclave-backed ML-DSA post-quantum signing, but Android hides ML-KEM from apps. A new Capacitor plugin bridges the gap securely.
Post-quantum cryptography lands in Python with a single pip install
pyca/cryptography 48 now ships ML-KEM and ML-DSA, bringing NIST-standard post-quantum algorithms to Python. Trail of Bits explains what changes for developers and protocols.
After gpg.fail: responsible disclosure and GPG's security reckoning
A 39c3 talk details unpatched GPG vulnerabilities, GnuPG's disputed response, and what AI means for security research and disclosure.
FIPS 140-3 Certifies a Module, Not Your Actual Security Posture
FIPS 140-3 validates a crypto module's algorithms, not overall product security. Real incidents show why engineers should read the fine print.