#криптография
-
Key “4”: Cloudflare measures how much of the Internet still trusts eMudhra’s weak keys
Certificate authority eMudhra issued intermediate keys that can be recovered from public certificates almost instantly. Cloudflare explains how it patched its own systems, what it knows about exploitation attempts, and how many clients remain exposed.
-
OpenSSL 4.1 Arrives With DTLS 1.3, GREASE and More AVX-512 Tuning
OpenSSL 4.1 stable is out, bringing DTLS 1.3 and GREASE support, fresh AVX-512 optimizations, and the final retirement of Windows on Itanium and Windows CE.
-
AI Models Can Provably Hide Arbitrary Capabilities
Researchers show how an encrypted circuit can be buried inside a network's weights, firing only on a secret trigger — and staying invisible to every standard audit.
-
GoBalance Flaw Lets Attackers Hijack .onion Addresses
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone recover the secret key behind a site's .onion address from public data alone — and seize the address.
-
How to Hack Time, With C2PA
Security researcher David Buchanan produced a photo bearing a cryptographically "unforgeable" C2PA timestamp proving he knew the winning lottery numbers hours before the draw. The whole trick turns on one quirk of the C2PA spec.
-
A New Way to Break RSA Is Faster Than Anything Seen Before
Researchers have unveiled an attack on RSA that they say runs faster than anything known so far.
-
Steven Weis Reports Factoring RSA-896 "with Claude"
Developer Steven A. Weis has published the factorization of RSA-896, from the well-known set of cryptographic challenges, into two prime factors.
-
ZK-JPEG: Compression-Resistant Proof of a Photo's Authenticity
Researchers have unveiled a cryptographic tool that confirms a JPEG image was derived from a genuine camera photo — even after compression and permissible edits.
-
GPT-6 Astra decodes a WWI German radiogram
The new-generation language model cracked an ADFGVX cipher that had gone unsolved for over a century — and checked its own work against the historical record along the way.
-
Keys Not Included: Recovering the Keys That Sign the Barcodes on US Driver's Licenses
Researcher Ryan Fahey describes recovering the keys used to sign the barcodes on American driver's licenses.
-
Apple Reference Image: teaching the iPhone to prove a photo is real
The iPhone 18 Pro will offer an optional camera mode that produces a cryptographically certified photograph — proof that the shot really was captured by a sensor rather than generated by AI.
-
Claude Fable 5.1 cracked a riddle that had held out for 370 years
In a single day, the Claude Fable 5.1 language model broke Sir Thomas Urquhart's “Cyphral Distich” — a cryptogram ranked among the 50 most famous unsolved ciphers.
-
How Trail of Bits Verifies the Integrity of Your Signal Chats
Trail of Bits has launched as one of three independent auditors of Signal's automatic key verification system — the mechanism that guards against a compromised server swapping in bogus public keys.
-
OpenSSL 4.1 Alpha 1: DTLS 1.3, GREASE and New AVX-512 Optimizations
The first alpha release of OpenSSL 4.1 is out. Among the new features are support for DTLS 1.3, the GREASE mechanism and additional AVX-512 speedups, along with initial support for the Russian «Elbrus» architecture.
-
How to Factor a 1990s Certificate Authority's 512-Bit Keys
Matthew McPherrin recovered the private keys of the long-dead Canadian certificate authority E-Certify by factoring its 512-bit RSA certificates from 1998 — just for fun.
-
Zero-Knowledge Proof of “Wasta” — A Scientific Curiosity from Lebanon
A paper titled “Zero-Knowledge Proof of Wasta with Applications in Lebanon” pairs serious cryptography with a concept that is hard to render in the language of formulas.
-
Go 1.27 Released: Post-Quantum Cryptography and New JSON Packages
Another release of the Go programming language has been published. Version 1.27 introduces support for the post-quantum ML-DSA algorithm, new packages for working with JSON, and updates to the language itself.
-
Fedora Prepares to Drop AF_ALG in the Linux Kernel
The userspace interface to the Linux kernel's Crypto API, a source of several vulnerabilities, has been declared obsolete. Fedora plans to restrict its use in the next release.
-
Post-Quantum Cryptography Comes to Python
The pyca/cryptography library has gained support for the post-quantum algorithms ML-KEM and ML-DSA — now they're available to the entire Python ecosystem with a single pip install command.
-
F*: the programming language where proofs are built into the code
Developed by Microsoft Research, Inria and the community, the F* language combines functional programming with formal proofs. Its code already runs in Firefox, the Linux kernel and the Azure cloud.
- More