#cryptography
Wiki 20
- A Tale of Two Worlds — Hybrid-WireGuard Lafourcade et al. (USENIX Security 2025) formally analyze PQ-WireGuard, fix it, and propose a hybrid variant with formal proofs in SAPIC+ (ProVerif/Tamarin/DeepSec) and a Rust implementation
- Argemma Blog Security-engineering blog at argemma.com, practical posts on cryptography, credentials, Go vulnerabilities, and AI/ML threat models
- Beaver Triples Precomputed (a, b, c=ab) triples in shared form that turn secret-shared multiplication into a constant-degree, two-round operation
- Beaver Triples for Secure Multiplication Stoffel Labs walkthrough of how Beaver triples let secret-shared values be multiplied without raising the reconstruction threshold
- Bitcoin and Quantum Computing Narula's risk framework for Bitcoin's PQ migration — 5% break probability by 2030, uniquely hard to coordinate
- CRQC Timeline: A Cryptography Engineer's Perspective Valsorda's April 2026 reassessment — two papers collapsed quantum timelines, Google sets 2029 migration deadline
- Cryptographically Relevant Quantum Computer (CRQC) Cryptographically relevant quantum computer: what it is, threshold, April 2026 timeline collapse
- Ephemeral Credentials Short-lived credentials (≤1 day) where rotation is structural rather than scheduled — minted per session, expire on their own
- ML-DSA Module-Lattice DSA (FIPS 204, ex-Dilithium): post-quantum signatures replacing ECDSA/RSA
- ML-KEM Module-Lattice KEM (FIPS 203, ex-Kyber): post-quantum key exchange replacing ECDH
- PASETO Platform-Agnostic Security Tokens — a tighter alternative to JWT that removes algorithm choice and the JOSE footguns
- Post-Quantum Cryptography PQ algorithms, NIST standards, migration priorities, and what's not threatened
- PQ-WireGuard Post-quantum variants of the WireGuard VPN protocol — the original Hülsing 2021 design and two 2025–2026 papers that revisit it
- Reinforcing KEM (RKEM) A KEM whose long-term public key security can be reinforced by an ephemeral public key, without paying full security cost on the ephemeral side
- Revisiting PQ-WireGuard with Reinforcing KEMs Hashimoto, Katsumata, Niot, Wiggers (AIST/PQShield) redesign PQ-WireGuard around a new RKEM primitive (Rebar), shrinking server PK memory 190–390×
- Secret Sharing Splitting a secret into n shares such that any t reconstruct it and fewer than t learn nothing; the additive substrate underneath MPC
- Secure Multiparty Computation Cryptographic protocols where n parties jointly compute f(x₁,...,xₙ) without revealing their inputs; the output is the only thing learned
- Stoffel Labs MPC-as-a-service company building a developer-facing platform on top of [[secret-sharing]] + [[beaver-triples]] protocols
- Store-Now-Decrypt-Later Harvest encrypted data now, decrypt with future CRQC — why PQ migration is urgent today
- You Don't Want Long-Lived Keys Ludwig's case for ephemeral credentials over rotation, with EC2 Instance Connect, PyPI Trusted Publishers, and SSO as patterns
Toolbox 1
- mnemonik Agent memory where each entry is Ed25519-signed and hash-anchored on Solana for later audit