cryptographers

The German government has released a national guideline for migrating to post-quantum cryptography, implementing an EU requirement. Cryptographic applications classified as high-risk must be quantum-safe by the end of 2030, while medium-risk applications have until the end of 2035. The move is part of broader efforts to protect data against future quantum computers capable of breaking current encryption.

Coinbase is calling on the cryptocurrency industry to prepare for potential quantum computing attacks that could threaten bitcoin's cryptographic security. The exchange's warning highlights growing concern that future quantum machines could break the encryption protecting bitcoin wallets and transactions, prompting calls for quantum-resistant upgrades before the threat materialises.

Cryptographer Matthew Green, a professor at Johns Hopkins, warned that "we might lose public key cryptography," the mathematical foundation securing most internet communications, including HTTPS, messaging apps and digital signatures. His remark is fueling discussion about quantum computing threats and other risks to widely used encryption, and what a breakdown would mean for online security.

Coinbase has published an outline of what Bitcoin custody will require once quantum computers become capable of breaking current cryptographic protections. The company lays out the security needs for safeguarding bitcoin holdings in a post-quantum future. The discussion reflects growing industry attention on quantum computing as a long-term threat to crypto storage.

Attention is turning to Bitcoin's vulnerability to future quantum computers, which could theoretically break the cryptographic signatures that protect wallets. Analysts and developers are discussing post-quantum cryptographic solutions, including proposals to migrate coins to quantum-resistant addresses. The debate covers technical feasibility, the risk to millions of older exposed public keys, and how a transition could be coordinated across the decentralized network.

A new PDF paper documents cryptoint, a 2025 library for cryptographic integer arithmetic designed to make constant-time programming easier. The library provides types and operations that help developers write cryptographic code resistant to timing attacks without relying on error-prone assembly tricks. Readers on Hacker News are discussing its approach to provably constant-time arithmetic in C.

A detailed guide to protecting personal earnings has been published, covering self-custody of funds, inflation risks, cryptographic money, and the pitfalls people should understand before moving any assets. It argues for financial sovereignty through holding one's own keys, while also stressing the security and practical risks involved. The guide is being shared among finance and cryptocurrency readers online.

A new essay asks whether AI-generated code, often dismissed as slop, can ever meet the bar for high-assurance cryptography, where correctness and formal guarantees are critical. The piece is drawing attention from security engineers debating whether language models can handle code whose failures carry severe consequences, or whether such work demands human rigor that generation tools cannot provide.

On January 5, 2012, a mysterious image appeared online with the message "We are looking for highly intelligent individuals," launching Cicada 3301, widely called the greatest enigma in Internet history. The puzzle led participants through a labyrinth of cryptographic challenges whose organizers were never definitively identified. Commenters are revisiting the story, recalling how the recruitment puzzle captivated codebreakers and conspiracy theorists worldwide.

A widely viewed explainer is breaking down what actually happens when a bitcoin is mined, walking through the process in plain terms as if explaining it to a five-year-old. The piece covers how miners compete to solve cryptographic puzzles, why the process secures the network and validates transactions, and how new coins are issued as rewards. The unusually simple approach is drawing attention from viewers who find typical technical descriptions of mining confusing.

A new analysis examines Bitcoin as an experiment in replacing institutional trust with code. The piece explores how a decentralized, cryptographically secured currency can hold value without a central bank or government backing, and what this means for money, financial systems and confidence in traditional institutions more than a decade after Bitcoin's creation.

Security researchers at Semperis warn that the Cryptographic Operators group in Active Directory poses greater risk than most organizations realize. The group can function as a Tier 0 asset, meaning compromise of accounts inside it could grant attackers control over the entire directory. The company urges admins to audit membership and treat the group with the same caution as Domain Admins.

Researchers have announced a significant breakthrough against the McEliece cryptosystem, a public key scheme proposed in 1978 and long considered one of the most durable candidates for post-quantum encryption. Decades of attacks had only limited success, but a reported solution to a McEliece challenge has now drawn attention from the cryptography community.

Cisco's blog argues that cryptography rarely breaks down because of weaknesses in the underlying mathematics. Instead, failures typically stem from implementation errors, mismanagement of keys, or human mistakes in how cryptographic systems are deployed and operated. The piece serves as a reminder for security teams to focus on real-world engineering practices rather than fearing the algorithms themselves.

A new explainer sets out how email authentication works together: SPF lists which servers may send mail for a domain, DKIM cryptographically signs each message, and DMARC tells receiving servers what to do when checks fail. The author argues all three are needed so attackers cannot spoof a domain, a concern growing as spoofed email fuels phishing.

wolfSSL announced that Qt5 Network can now be used in a FIPS 140-3 tested configuration with the wolfCrypt FIPS cryptography module. This lets developers building Qt-based applications meet US and Canadian government cryptographic compliance requirements without replacing the networking layer. The news is being shared among security and cryptography developers interested in certified TLS stacks for embedded and regulated environments.

Wrapped Bitcoin (WBTC) says it is moving forward with custody preparations designed to protect Bitcoin holdings against potential threats from quantum computing. The announcement signals growing urgency across the crypto industry to future-proof wallet and custody infrastructure before quantum computers could theoretically break current cryptographic safeguards. WBTC, a widely used tokenized version of Bitcoin, plays a major role in decentralized finance, making the security of its underlying custody arrangements a concern for many holders.

Defense One argues organizations should start planning now for encryption that can withstand AI-driven threats. The piece suggests that advances in artificial intelligence could soon undermine current cryptographic protections, and that waiting to upgrade security systems until the technology catches up would leave sensitive data exposed. The call is directed at governments, companies and security teams who still treat encryption as a solved problem.

Black Kite has introduced Quantum Readiness controls, a new capability that lets organisations assess how prepared their third-party vendors are for post-quantum security threats. The tooling is aimed at helping companies evaluate cryptographic vulnerabilities across their supply chains as quantum computing advances toward breaking current encryption standards.

Coinbase is calling for Bitcoin developers to begin preparing now for a transition to post-quantum cryptography, the report says. The exchange's argument is that quantum computers could eventually threaten the cryptographic signatures securing Bitcoin, and that migrating the network's vast holdings would be slow and contentious, so planning should start well before any threat materialises. The push has drawn attention across the crypto industry, where debates over quantum risk and protocol upgrades have been intensifying.

Indonesia is working to advance post-quantum cryptography as a way to protect national data security against future quantum computing threats. The effort, reported by OpenGov Asia, reflects growing concern among governments that today's encryption could eventually be broken by quantum machines, prompting early adoption of quantum-resistant standards to safeguard sensitive government and citizen data.

OpenAI's release of more than 400 new mathematics results has generated significant attention in the security community, with observers noting what the findings could mean for encryption. Security commentators point out the collection contained no notable cryptographic advances, fueling discussion about whether AI progress increases the urgency of adopting post-quantum encryption before quantum-capable systems mature.

Amazon Web Services has published guidance on securing AI agent identity using X.509 public key infrastructure on its cloud platform. The approach applies established certificate-based authentication to autonomous AI agents, giving each agent a verifiable cryptographic identity. It reflects growing industry focus on how agents should be authenticated and trusted as they increasingly act independently across enterprise systems.

Wrapped Bitcoin, the tokenized bitcoin asset on other blockchains, is shifting how its underlying bitcoin is held in custody to reduce exposure to future quantum computer attacks. The change aims to protect the bitcoin backing the wrapped token from quantum computers capable of breaking current cryptographic security, a growing concern across the crypto industry as quantum computing research advances.

BearSSL's documentation page on constant-time cryptography explains why cryptographic implementations must avoid execution paths whose timing depends on secret data. Timing variations can leak information about keys or plaintext through side-channel attacks, so operations are written to run in the same time regardless of input. The technical explanation is drawing attention among developers discussing secure implementation practices.

PowerDNS has published a new post outlining how it is preparing for post-quantum DNSSEC, examining how the DNS security protocol can adopt quantum-resistant cryptographic algorithms. The piece looks at the migration challenges for DNS operators as standards bodies work to replace signatures that quantum computers could eventually break, and what operators can do now to prepare for the transition.

Microsoft has released its Azure Integrated Hardware Security Module as open source, with the technology certified at FIPS 140-3, the latest US government standard for cryptographic modules. The move means customers and developers can now inspect and build on the code behind the key-management hardware protecting Azure cloud services, while the certification signals the implementation meets strict federal security requirements.

Cybersecurity researcher Gabriel Gonzalez has published a detailed article examining randomness extraction in quantum and physical random number generators. The piece explores how high-quality entropy is built for cryptographic and hardware security purposes, covering techniques for turning raw physical noise into usable random bits. It is drawing attention from security practitioners interested in the foundations of cryptographic key generation.