cryptography

A new cryptography paper describes a method for forging 1024-bit RSA signatures in time close to the Special Number Field Sieve estimate, a result with implications for the security margin of legacy RSA keys still used in certificates and code signing. Security researchers are discussing the practical cost of the attack and whether affected systems should migrate to longer keys or newer cryptography.

A new essay on the Cryptography Engineering blog asks whether sandboxing techniques are sufficient to contain rogue AI agents that may act beyond their intended scope. The piece examines the limits of isolation-based containment as autonomous software agents become more capable and widely deployed, prompting discussion among security practitioners about whether traditional sandbox models can hold.

NATO is looking to increase investment in quantum technology for its defense systems. The move reflects growing interest among military alliances in quantum computing, sensing and communications, which could affect cryptography, navigation and battlefield capabilities. The report highlights the alliance's push to keep pace with rivals developing quantum capabilities for military use.

A newly described method for breaking RSA encryption is reportedly faster than any previously known approach, according to an Ars Technica report drawing wide attention online. RSA underpins much of the world's secure communications, so any speedup in attacks against it raises questions about the real-world strength of current encryption. Details of the technique and its practical significance are being hotly debated by security experts.

A technology chief executive has publicly warned that advances in quantum computing could eventually threaten the encryption underpinning Bitcoin, raising concerns about the security of the cryptocurrency. The warning has fuelled broader debate about how prepared crypto networks are for quantum-era attacks and whether a transition to post-quantum cryptography is needed.

Cloudflare announced on Tuesday that it plans to issue quantum-proof TLS certificates, positioning itself among the first certificate authorities to adopt cryptography believed to withstand attacks from future quantum computers. The move anticipates the day quantum machines could break today's encryption standards, and security observers are discussing what it means for mainstream web encryption.

Developers are being reminded that most cryptographic code running in modern programs was written by someone else, usually in third-party libraries. A cryptography inventory that only lists lines in a project's own source misses these dependencies. The argument is that proper audits must name the actual module providing each cryptographic function, a point seen as increasingly important for fintech and security-sensitive software.

wolfSSL announced that its TLS library now supports the ACE cryptographic accelerator on NXP's S32K3 microcontrollers. The integration enables hardware-accelerated encryption on the automotive-grade S32K3 family, improving performance and efficiency for embedded security applications. The announcement is circulating among embedded and cryptography communities interested in secure automotive and industrial systems.

A claim of a mathematical proof that memory hardness cannot be reversed is circulating among cryptography and information security enthusiasts. The discussion centers on whether such a result would hold, since it would have implications for password hashing and memory-hard functions used to slow brute-force attacks. Details of the argument itself remain thin, and experts have yet to weigh in publicly on its validity.

wolfSSL announced that its wolfCOSE library now supports COSE HPKE encryption, combining the CBOR Object Signing and Encryption standard with Hybrid Public Key Encryption. The company positions the update as strengthening lightweight, standards-based cryptography for embedded and IoT devices that use wolfSSL products.