devtake.dev

#cryptography

RSS
A transparent-cased Coldcard hardware wallet resting on a laptop keyboard, its screen reading 'OK TO SEND?' above a Bitcoin amount and destination address.
Security·

Coldcard's firmware checked if a setting existed, not if it was on. $88.6 million in Bitcoin is gone.

A 2021 build error routed Coldcard seed generation to a software PRNG. Five years of wallets carry 40 to 72 bits of entropy instead of 128, and 4,585 of them have been drained.

The NIST North Building in Gaithersburg, Maryland, a six-storey brick and glass office block with the NIST logo on its facade.
Security·

60 hours of AI cryptanalysis. HAWK's authors pulled it from NIST's post-quantum race.

Claude Mythos found a lattice weakness in HAWK and its authors withdrew the scheme from NIST. Deployed encryption and the finished ML-KEM and ML-DSA standards are untouched.

Close-up of Google's Sycamore quantum processor chip mounted on its gold-plated wiring harness.
Security·

The White House just cut five years off America's quantum crypto deadline

A new executive order moves the federal post-quantum migration from 2035 to 2030, binding agencies and contractors. Here's what changed and what to do now.

Apple Security Research site banner card.
Security·

Apple shipped formal proofs for its post-quantum crypto. 2.5 billion devices now run verified code.

Apple's SEAR team published formal verification proofs for corecrypto's ML-KEM and ML-DSA implementations. 50,000 proof steps cover 2.5 billion active devices.

GnuPG and OpenPGP key icon over an abstract lattice background.
Security·

GnuPG 2.5.19 lands ML-KEM in mainline. Post-quantum OpenPGP is no longer a side branch.

Werner Koch shipped GnuPG 2.5.19 on April 24 with FIPS-203 ML-KEM, the first stable post-quantum encryption algorithm in OpenPGP. Here's what changed and what didn't.

Google's social card for the post-quantum cryptography migration blog post
Web·

Google just moved 'Q-Day' to 2029. Here's what that changes for your crypto stack

Google's security team says cryptographically-relevant quantum computers could arrive by 2029, six years before the NSA's 2031 deadline. What to migrate, and in what order.