cr.yp.to blog

The easy way to compare solo PQ to ECC+PQ.

An update.

Fairness.

How IETF evades responsibility for its actions.

Many differences between marketing and reality.

The structure of the debate.

A simple idea for improving Europe's investments in data security.

Counting votes.

One battle after another.

Dodging the issues at hand.

An example of censored dissent.

Corruption continues.

The collapse of IETF's protections for dissent.

Can an attacker simply purchase standardization of weakened cryptography?

On the importance of not being seen.

Looking at what's happening, and analyzing rationales.

Looking at some claims that quantum computers won't work.

Analyzing the NSA/GCHQ arguments against hybrids.

Questioning a puzzling claim about mass surveillance.

You're making Clang angry.

Understanding the delayed rollout of post-quantum cryptography.

It's as easy as [1], [2], [3].

Announcing my second lawsuit against the U.S. government.

Responding to a recent blog post.

Debunking NIST's calculation of the Kyber-512 security level.

Two algorithm analyses, from first principles, contradicting NIST's calculation.

There are many choices of elliptic-curve signature systems.

How to perpetuate security problems.

The conventional wisdom says that hash outputs can't be controlled; the conventional wisdom is simply wrong.

Computational algebraic number theory tackles lattice-based cryptography.

The first step towards improvement is to admit previous failures.

Low-cost changes to CPU architecture would make cryptography much safer and much faster.

How we built a cluster capable of computing 3000000000000000000000 multiplications per year for just 50000 EUR.

How Equitrac's marketing department misrepresents and interferes with your work.

Abstract of my tutorial at ETAPS 2015.

Batch attacks are often much more cost-effective than single-target attacks.

Can the government censor how-to books?

How quantum cryptographers are stealing a quarter of a billion Euros from the European Commission.

A few notes on technology-fueled normalization of lynch mobs targeting both the accuser and the accused.

News regarding the SUPERCOP benchmarking system, and more recommendations to NIST.

Analysis of several algorithms for the collision problem, and for the related multi-target preimage problem.

A case study of how quickly an attack can be developed from a limited disclosure.

Cryptosystem designers successfully predicting, and protecting against, implementation failures.

Review of "An Efficiency Comparison of Document Preparation Systems Used in Academic Research and Development" by Knauff and Nejasmic.

Understanding one of the most important changes in the high-speed-software ecosystem.

An effort to clean up several messes simultaneously.

My comments to NIST on the first draft of their call for submissions.