» Tag
cryptography
28 postsBeyond login: encrypting data with passkeys and WebAuthn PRF
WebAuthn's PRF extension turns passkey login into an encryption key source; pknotes shows a master-password-free, end-to-end encrypted architecture.
CUDA 13.3 Brings Hardware Carryless Multiplication to GPUs
CUDA 13.3's new clmad PTX instruction accelerates carryless multiplication on GPUs, delivering up to 18.8x faster GHASH and 4-13x faster sum-check.
Emem: A Signed Memory Layer for Multi-Agent AI Systems
Emem gives AI agents a signed, verifiable memory layer for physical-world facts that survives context compaction across models and vendors.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comA Portable Passkey Record Format and Go API Proposal
A proposed portable string format for WebAuthn passkey records, plus a stateless Go API draft, aiming to simplify interoperable credential storage.
Python library verifies OpenAI's signed AI agent traffic (RFC 9421)
regent-httpsig is an open-source Python library that verifies and signs OpenAI-style AI agent HTTP traffic per RFC 9421 and Web Bot Auth drafts.
Post-Quantum Signing Keys That Never Leave the Secure Enclave
iOS 26 adds Secure Enclave-backed ML-DSA post-quantum signing, but Android hides ML-KEM from apps. A new Capacitor plugin bridges the gap securely.
Post-quantum cryptography lands in Python with a single pip install
pyca/cryptography 48 now ships ML-KEM and ML-DSA, bringing NIST-standard post-quantum algorithms to Python. Trail of Bits explains what changes for developers and protocols.
FIPS 140-3 Certifies a Module, Not Your Actual Security Posture
FIPS 140-3 validates a crypto module's algorithms, not overall product security. Real incidents show why engineers should read the fine print.
COLDCARD Seed Generation Flaw Tied to Nearly $89M Bitcoin Theft
A COLDCARD firmware bug weakened seed randomness, and Galaxy Research has linked it to roughly $88.6 million in suspected Bitcoin theft.
Alerus Brings Formal Verification to Probabilistic Rust Code
Alerus extends Verus with error-credit reasoning to formally verify randomized sampling algorithms in real Rust code, with soundness proved in Rocq.