NIST’s August 2026 FIPS 140-3 Implementation Guidance adds major new guidance for hybrid cryptographic modules and clarifies PAA/PAI testing and porting expectations.
Read More →
The post-quantum transition just took another important step forward. RFC 10024, “Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3,” is now officially an IETF Standards Track RFC.
Read More →
The Coldcard Bitcoin wallet attack demonstrates how weak entropy can undermine strong cryptography, offline storage, hardware security, and private-key protection.
Read More →
Recent AI systems found major OpenSSL and wolfSSL vulnerabilities and produced new attacks on HAWK and reduced-round AES, reshaping cryptanalysis.
Read More →
HAWK has been withdrawn from NIST’s post-quantum signature competition after researchers discovered a structural weakness that significantly lowered the cost of key recovery.
Read More →
Explore the 2026 Common Criteria updates affecting entropy, cryptography, NIAP Protection Profiles, FIPS 140-3, FIPS 186-5, CTRDRBG, and PQC.
Read More →
FedRAMP CR26 swapped blanket FIPS rules for class-based MAY/SHOULD/MUST. What Classes A-D really require, and why Sept 21, 2026 is a hard deadline.
Read More →
Learn how the latest FedRAMP cryptographic guidance changes FIPS purchasing decisions, vendor selection, and compliance planning for federal cloud environments.
Read More →
Over the documented history of the world, the greeks impact on symbology and mathematics has been unparalleled. This blog focuses on the meaning of greek characters in mathematics.
Read More →
For years, a large part of my research focused on cryptography and TLS security. One thing I repeatedly ran into was a lack of accessible tooling that made it easy to quickly analyze real-world TLS deployments in a meaningful way. That is why I built TLSTest.io.
Read More →