Ressourcen

Die USA verschieben die PQC-Frist auf 2031 und legen den Schwerpunkt auf die Schlüsselerzeugung, um HNDL-Risiken zu begegnen und die Krypto-Bereitschaft von Unternehmen zu beschleunigen.

2024 saw a flurry of high profile incidents for public CA, which we named the Bugzilla Bloodbath. We look back to see how the WebPKI has changed as a consequence.

Resource-constrained devices may need to address PQC through real-time, seed-based, key generation. Unfortunately, this leaves the full key exposed very briefly in RAM. The potential consequences of this are far-reaching and scary. We go into the details.

Sam Jaques of the University of Waterloo returns to discuss his tracking of progress in quantum computers and offer a perspective on moving our PQC deadlines up to 2029.

An emerging attack against AIs is to create a significantly complex and recursive prompt that will occupy the AI indefinitely or for a sufficiently long time that it acts as a Denial-of-Service (DoS) attack. We describe how this works.

In the latest in our coverage of government versus encryption, the UK issued secret orders to Apple to give it a cryptographic backdoor to Apple's advanced data protection capability for iCloud. Apple responded by eliminating encryption entirely for UK users. We break it down.

TLS 1.3 is required to take advantage of post quantum cryptography (PQC) algorithms. Yes, we still see a lot of TLS 1.2 or earlier in deployment. We examine why this is the case and what to do about it.

Recent revelations about Mythos and its ability to expose vulnerabilities have forced us to rethink basic assumptions about cyber defense. In our "AI in 1000 Days" series, Jason Soroko and I examine the implications of these revelations three years from now.  This includes upping the overall pace of attack and changes to best practices in cyber security defense.

Anthropic has delayed its widespread release of Mythos to give major software providers a chance to close off the many vulnerabilities it has discovered. We dig into the vast implications of Mythos and other AI models for the future of cybersecurity.

We discuss the possibility that our standardized ML-DSA keys turn out to be too short for true confidence, why that might occur, and the implications for private PKI certificates.

Sectigo MCP Server ermöglicht die sichere Automatisierung von Zertifikatsoperationen durch gesteuerte KI und setzt Erkenntnisse in großem Umfang in Maßnahmen um.

Sam Jaques joins us to explain his much-referenced chart mapping progress toward cryptographically relevant quantum computing (CRQC).

There are strong reasons to believe that the architecture of PQC TLS will take the form of Merkle Tree Certificates (MTC). Post quantum cryptography expert Bas Westerbaan of Cloudflare explains this new PKI architecture, how it works, and why we need it.

Da die Lebensdauer von Zertifikaten immer kürzer wird, muss sich die Art und Weise, wie Unternehmen die Domänenvalidierung verwalten, weiterentwickeln. Persistentes DCV und erweiterte DNS-Connector-Unterstützung in Sectigo Certificate Manager wurden entwickelt, um diesen Übergang in jeder Größenordnung handhabbar zu machen.

We break down the phrase "Simplicity at Scale" to see what it means to us in the context of CAs and CLM.