Filippo Valsorda

We now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48 seeded with the time, which was indeed in 1997–98.

Publishing “Cryptographic Right Answers” for developers is a tradition by now.

I don’t do a lot of Python, at least not in my most recent life.1 However, I happen to have just written a production ML-DSA verifier in pure Python.

Passkeys are the most important thing happening in information security right now because they are the only principled solution to the overwhelming effectiveness of phishing attacks.

A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a present, not an obligation.

The advancing threat of cryptographically-relevant quantum computers has made it urgent to replace currently-deployed asymmetric cryptography primitives—key exchange (ECDH) and digital signatures (RSA, ECDSA, EdDSA)—which are vulnerable to Shor’s quantum…

My position on the urgency of rolling out quantum-resistant cryptography has changed compared to just a few months ago.

Dependabot is a noise machine.

Go has indisputably the best package integrity story of any programming language ecosystem.

I need everyone to stop looking at go.sum, especially to analyze dependency graphs.

Today, we are going to build a keyserver to lookup age public keys.

This past August, I delivered my traditional Go Cryptography State of the Union talk at GopherCon US 2025 in New York.