Quick one: it's not surprising that HAWK got broken. anthropic.com/research/disco… It was already shaking. blog.cloudflare.com/ml-dsa-will-ha… This is great for cryptography. In the end, just like with software, you can only find the bugs that were already there.
Post-quantum @cloudflare
- I updated PQSpy, a @firefox extension that shows you in a little icon whether the page you're visiting is post-quantum encrypted ⚛️, or not ❌, or partially in a kinda pie chart. Click the icon to get more the deets as shown in the screenshot.
- Why we cannot wait for better post-quantum signature algorithms: ML-DSA will have to do. But searching for better is still important!
- New US executive order signed pulling ahead deadline for PQC migration from 2035 to 2031. No text online yet, but will add once it's out.
- Hot from the press: the broadly-deployed TLS post-quantum key agreement X25519MLKEM768 (countering harvest-now/decrypt-later) is now officially RECOMMENDED.

