Sylvain

In all seriousness, we haven’t seen a single serious cryptanalysis result since July 28. Not even one little broken cipher that nobody cares about. What’s more plausible: that all cryptanalysis work in the last 90 days has turned up nothing, or cryptanalysis results are being deliberately withheld?

Why filtering certificates by hash is a really bad idea or how NOT to patch eMhudhra compromise: sylvainpelissier.gitlab.io/posts/2026-1...

This ty + uv integration for PEP 723 might definitively make Python my go-to language for scripts. No more bash at any size. astral.sh/blog/uv-ty-i...

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

Crossposted with @openvibe.social

Forging 1024-bit RSA signatures in nearly SNFS time Hand over your HSM for some time, and we can forge signatures for its key. Arbitrary signatures. Forever. github.com/ucsd-hacc/NS...

Claude formalized Fermat’s last theorem in Lean in 11 days using prove2.me. www.anthropic.com/research/for...

Factoring short-sleeve RSA keys blog.trailofbits.com/2026/06/12/f...

PRISM presented a prototype for future supply‑chain information flows, leveraging ZeroKnowledge technology to chain cryptographic proofs across operators without revealing any sensitive data, convincing the jury with its technical strength and scalability.

Outrageous claims are made regarding AI and abundance. Claims so absurd that they have to be true, right? Well, other than the math not making sense, there are lessons we can learn about abundance from Napster. Because when things become free, they are worth nothing. perilous.tech/what-napster...

Do you use a cloud-based password manager? So what's your threat model? Vendors like Bitwarden, Dashlane, LastPass and 1Password offer you "Zero Knowledge Encryption", with statements like: "Not even the team at Bitwarden can read your data (even if we wanted to)." We decided to test this… 1/n

The Phrack Staff is on the latest episode of the DarknetDiaries episode! darknetdiaries.com/episode/170/

Literacy is our greatest weapon to remain robust and defend our humanity in this invasive, modern environment. Here, I recommend 7 books to create more robust humans. And yes, Huxley was right. perilous.tech/7-books-for-...

Microsoft is handing over Bitlocker keys to law enforcement. www.forbes.com/sites/thomas...

Submission week for the Cryptographic Application Workshop (CAW), an affiliated event at Eurocrypt'26 in Rome! Please submit your talk proposals on constructive real-world crypto using the following instructions before Jan 23, 2026 AoE. All infos on: caw.cryptanalysis.fun.

Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers (Matteo Scarlata, Giovanni Torrisi, Matilda Backendal, Kenneth G. Paterson) ia.cr/2026/058

At the gpg.fail talk and omg #39c3 You can just put a \0 in the Hash: header and then newlines and inject text in a cleartext message. Won’t even blame PGP here. C is unsafe at any speed. gpg has not fixed it yet.

The accepted talks for Real World Crypto 2026 are now online: rwc.iacr.org/2026/accepte... Thanks to everyone who submitted, and we look forward to the discussions at the symposium.

The PDF is also available online: archives.phrack.org/issues/72/ph... More at phrack.org/contact

Keys are hard. www.nytimes.com/2025/11/21/w...

I use USB daily but I have no idea how it works 🤔 USB 2 vs USB 3, USB-A vs USB-C, the PD standard… this talk is full of interesting details 💎 And now I even understand why my USB-C power bank doesn’t work with *this* cable unless flipped 🙃 media.ccc.de/v/why2025-25...

👀👀👀👀👀👀 5 pallets of zines have landed at @defcon.bsky.social

🔥 The future of RFID hacking isn’t dead, its even more... At #WHY2025, Kirils and I are breaking down current RFID hacking situation No fluff. Just spilling the beans. 🗓️ 9th of August 13:00 at Andromeda 🔗 cfp.why2025.org/why2025/talk... RT if you’re ready.

Some people keep calling the summer migration to Vegas a camp… But who will sleep in a tent for real? The ones attending @why2025.bsky.social ⛺️

The Call for Contributed Talks is now open for RWC 2026! And the deadline for submissions is now Oct. 10, 2025. rwc.iacr.org/2026/contrib...

🎙 Ce jeudi, Vincent Strubel, directeur général de l'ANSSI, sera l'invité de l'émission @quotidienofficiel.bsky.social ‬ diffusée sur TMC. 📺 Rendez-vous ce soir à partir de 19h15 sur le canal 10.

Three Trail of Bits engineers audited core Go cryptography for a month and found only one low-sev security issue... in unsupported Go+BoringCrypto! 🍾 Years of efforts on testing, limiting complexity, safe APIs, and readability have paid off! ✨ Yes I am taking a victory lap. No I am not sorry. 🏆

The second Levchin Prize goes to the CADO-NFS team: Emmanuel Thomé, Pierrick Gaudry, and Paul Zimmerman! Congratulations! #realworldcrypto

Ouch, AMD masterclass in what not to do with cryptography to secure its microcode patching mechanism 😱 ‼️

This is a fascinating vulnerability. The root causes are implementing deterministic signatures instead of hedged, using a general purpose big number implementation, and leaking its API at the crypto layer. JavaScript types are a red herring, could have happened in any language.

Marc Ilunga has written a nice blog post about "Best practices for key derivation":

@anomalroil.bsky.social : https://www.nextinpact.com/lebrief/71680/pourquoi-peut-on-pirater-mot-passe-10-caracteres-en-2-semaines-contre-5-mois-an-passe