1
Debunking NIST's calculation of the Kyber-512 security level
[Sidney Harris cartoon used with permission. Copyright holder: ScienceCartoonsPlus.com .]
Daniel J. Bernstein
Feed: RSS . I also have a moderately active microblog , and in particular systematically link new blog entries from the microblog. I also have some links to other people's blogs .
- Popular posts
- 15
- Total points
- 3,783
- HN comments
- 2,026
- Rank
- #345 personal
Visit blog.cr.yp.to → On Hacker News Mar 2014 – Jul 2026
Security & Privacy 12Math & Algorithms 5Society, Policy & Culture 3Software Engineering 3Networking & Internet 3Systems & Performance 2
2
Double encryption: Analyzing the NSA/GCHQ arguments against hybrids
In 2019, Google and Cloudflare ran an experiment where they upgraded HTTPS for many "real users’ connections" to use post-quantum encryption. They then reported statistics on how affordable this was. Google had also run a similar experiment in 2016: "While it's still very early days for quantum computers, we're…
3
Why EdDSA held up better than ECDSA against Minerva
"Minerva attack can recover private keys from smart cards, cryptographic libraries" , says the ZDNet headline. "The Czech team found a problem in the ECDSA and EdDSA algorithms used by the Atmel Toolbox crypto library to sign cryptographic operations on Athena IDProtect cards."
4
Break a dozen secret keys, get a million more for free
[An in-depth blog post by Daniel J. Bernstein, crossposted between the ECRYPT blog and the cr.yp.to blog .]
5
Entropy Attacks
The conventional wisdom is that hashing more entropy sources can't hurt: if H is any modern cryptographic hash function then H(x,y,z) is at least as good a random number as H(x,y), no matter how awful z is. So we pile one source on top of another, hashing them all together and hoping that at least one of them is good.