cryptographers

Cloudflare has announced the 2024 root KSK rollover, in which the cryptographic key that signs the DNS root zone will be changed on October 11. The key signing key underpins trust for the entire domain name system, and operators of resolvers and networks are being urged to verify their systems will accept the new key to avoid DNS failures. Technical discussions are focused on readiness and what happens to systems that are not updated.

The cryptographic root trust anchors that underpin DNSSEC are due to be replaced on October 11, 2026, when a new key signing key for the internet's DNS root takes effect. The change is routine but important: misconfigured resolvers or older software that fail to prepare could struggle to validate domain names, so network operators are being urged to update ahead of time.

An Ethereum researcher is calling on the cryptocurrency community to enter what he terms 'bunker mode', warning that advances in AI could threaten the mathematical assumptions underpinning cryptographic systems. The appeal has drawn attention across the crypto sector, with debate over whether current encryption and blockchain defenses are adequately prepared for AI-driven mathematical breakthroughs.

A Bitcoin Core developer has responded to concerns about risks that artificial intelligence and quantum computing could pose to the Bitcoin network. The remarks, reported by Bitcoin Magazine, address ongoing debate in the crypto community over whether advancing computing technologies could eventually threaten Bitcoin's cryptography and security model.

A developer tested a perpetual order on Solana devnet and then checked their wallet on a blockchain explorer. The deposit was visible, but the position itself remained hidden: the smart contract verifies a cryptographic proof without ever reading the position data, keeping it private by design. The experiment has sparked debate over whether traders should trust proofs over readable on-chain accounts.

A policy analysis outlines how operators of operational technology, such as industrial control systems and critical infrastructure, can prepare for post-quantum cryptography migration. It argues organizations should start inventorying cryptographic assets and planning transitions now, since quantum-capable computers could eventually break widely used encryption protecting legacy systems that are difficult to upgrade.

More than 6 million bitcoin are held in addresses with exposed public keys, meaning their cryptographic details are visible and potentially vulnerable as computing power advances. The figure is drawing renewed attention alongside growing warnings about artificial intelligence accelerating threats to cryptocurrency security. Commenters in the crypto community are debating how many coins could realistically be at risk and what holders should do to move funds to safer address types.

Donald Trump has announced a $215 million initiative aimed at advancing quantum computing, a move that comes as fears mount over quantum computers' potential to break Bitcoin's cryptographic security. The announcement has drawn attention from the cryptocurrency community, where concern is growing that sufficiently powerful quantum machines could one day compromise Bitcoin's underlying technology.

Jameson Lopp, co-founder and CTO of bitcoin security firm Casa, says fears that AI will soon break Bitcoin's cryptography distract from the actual risk: implementation errors in wallets, apps and firmware. He notes that not a single key has been compromised, arguing the debate over hypothetical AI-powered cryptographic attacks is overshadowing practical security failures that cause real losses today.

Europol is stressing that organisations should pursue crypto-agility proactively, designing systems that can quickly swap cryptographic algorithms as new threats emerge while staying secure. The warning fits ongoing concern that quantum computing and other advances could break today's encryption, leaving unprepared systems exposed. Security professionals are amplifying the message, arguing that retrofitting cryptography after an attack or breakthrough is far costlier than building flexibility in now.

A new open-source tool called PQC Triage lets developers paste a software dependency manifest and instantly see which cryptographic algorithms in their stack a quantum computer could break first. The tool aims to help teams prioritise migration to post-quantum cryptography as quantum computing advances. Discussion so far has been small but focused on its usefulness for security auditing and codebase triage.

A newly updated vulnerability advisory, EUVD-2026-95241, flags IBM Guardium Data Protection 12.2 with a high severity rating of 8.4 out of 10 under CVSS v3.1. The flaw stems from weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component, exploitable by a local attacker. Administrators running Guardium are urged to review the advisory and apply vendor patches.

wolfSSL announced that OpenSSH is now FIPS 140-3 tested and available when built with its wolfCrypt FIPS cryptographic module. This allows organizations with US federal compliance requirements to run the widely used secure shell implementation under FIPS 140-3 validated cryptography, replacing older FIPS 140-2 dependencies.

A newly catalogued vulnerability, EUVD-2026-95263, affects TP-Link's Tapo S505 smart plug running firmware version 1.6. The device stores cryptographic material in plaintext in nonvolatile storage, meaning an attacker with physical access to the device could extract sensitive security credentials. The flaw carries a moderate severity score of 5.4 out of 10 under CVSS v3.1. The advisory was updated in October 2026.

The Internet's root cryptographic trust keys are scheduled to change on October 11. The change is expected to affect how network operators and service providers handle DNSSEC trust anchors, and technical communities are urging administrators to check their systems are prepared before the date to avoid outages or resolution failures.

wolfSSL announced that post-quantum cryptography support is coming to its Ada language wrapper, extending quantum-resistant algorithms to developers building security-critical applications in Ada. The update reflects the broader industry shift toward migrating TLS and cryptographic libraries ahead of expected quantum computing threats to current encryption standards.