cryptographers

Cryptography engineer Filippo Valsorda has published a guide titled '(Post-Quantum) Cryptographic Right Answers', offering developers concrete recommendations on which algorithms and protocols to adopt as quantum threats loom. The piece outlines best practices for migrating to post-quantum encryption, including choices like ML-KEM and hybrid schemes. Readers on Hacker News are debating its advice, with the discussion drawing strong engagement as the security industry races to prepare for quantum computing.

Cryptographer Matthew Green says he thinks the world might lose public key cryptography, the mathematical foundation securing most internet communications, including HTTPS, messaging and digital signatures. The warning is fueling discussion about quantum computing advances and the urgent migration to post-quantum encryption standards before existing public key systems become breakable.

APNIC has published a technical explainer on rolling the DNS root key (the KSK), the process of replacing the cryptographic key that anchors trust for the entire internet's domain name system. The article walks through why key rollovers are rare, complex operations, and the coordination required among registries, resolvers and operators to avoid breaking name resolution worldwide.

Johns Hopkins cryptographer Matthew Green says he believes the world might lose public key cryptography, the technology underpinning HTTPS, messaging encryption and most online security. His warning is drawing attention among security researchers, who link such concerns to advances in quantum computing that could eventually break widely used algorithms.

BearSSL's documentation explains why cryptographic code must run in constant time, regardless of secret data, to prevent timing side-channel attacks. The piece walks through how attackers can leak keys by measuring how long operations take, and why developers must write code that avoids data-dependent branches and memory access. It serves as a primer for implementers of cryptographic libraries.

PowerDNS has published a new post outlining how it is preparing for post-quantum DNSSEC, examining how the DNS security protocol can adopt quantum-resistant cryptographic algorithms. The piece looks at the migration challenges for DNS operators as standards bodies work to replace signatures that quantum computers could eventually break, and what operators can do now to prepare for the transition.

Microsoft's Azure Integrated HSM is reported to be moving to open source while meeting the FIPS 140-3 security standard, with the change noted for 2026. The hardware security module underpins key management for Azure cloud services, and an open-source release would let customers inspect its code while retaining certified cryptographic compliance. Details beyond the announcement remain limited.

Researchers have built the first working post-quantum defense for Bitcoin's Lightning Network, according to Bitcoin Magazine. The development aims to protect the payment layer from future quantum computer attacks that could break existing cryptographic protections. It marks an early but concrete step toward quantum-resistant security for Bitcoin's off-chain transaction infrastructure.