Cryptography – Noise

8 eMudhra certificates are compromised. Here’s what you need to know

Christopher Patton — Tue, 20 Oct 2026 22:20:16 +0000

Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next.

The keys to the Internet change on October 11. Are you ready?

Sebastiaan Neuteboom — Tue, 06 Oct 2026 17:50:11 +0000

On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024). Learn what this means for you, and how RFC 8509 trust anchor sentinels allow you to test whether your DNS resolver is ready for the rollover.

Another Historic Cipher Falls to AI

Bruce Schneier — Mon, 05 Oct 2026 11:04:47 +0000

This one is from 1809, written by Napoleon’s nephew.

Support for modern cryptographic algorithms in Workers

Thibault Meunier — Thu, 01 Oct 2026 13:00:00 +0000

Cloudflare Workers is adding opt-in support for post-quantum-resistant algorithms ML-KEM and ML-DSA. You can try it today.

Preventing quantum downgrade attacks against IPsec

Christopher Patton — Tue, 29 Sep 2026 13:00:00 +0000

A sophisticated attacker with a quantum computer can exploit a protocol design flaw to downgrade post-quantum IPsec tunnels to classical crypto. We helped the IETF develop a transcript authentication extension to prevent these attacks.

Is your domain using post-quantum encryption? Now you can see for yourself

Andrew Depke — Tue, 29 Sep 2026 13:00:00 +0000

Cloudflare has added visibility into post-quantum (PQ) encryption in TLS 1.3 directly into HTTP Analytics, Log Explorer, and Logpush. Learn how to make sure your domain is protected with PQ encryption.

Building a post-quantum certificate authority with Merkle Tree Certificates

Mari Galicer — Tue, 29 Sep 2026 13:00:00 +0000

As post-quantum signatures threaten to inflate TLS handshakes and certificate transparency logs, Merkle Tree Certificates offer a path to compact, auditable authentication. Cloudflare’s new certificate authority will support MTC issuance at scale.

Building a certificate authority for the whole Internet

Steve Goldsmith — Tue, 29 Sep 2026 13:00:00 +0000

Twelve years after launching Universal SSL, Cloudflare is applying to become a certificate authority. By combining an established root, an ACME-first approach, and Merkle Tree Certificates, we are building a post-quantum CA for the open web.

Using AI to chart a course for our post-quantum migration

Sharon Goldberg — Tue, 29 Sep 2026 13:00:00 +0000

We’re building CryptoLabe, an internal AI-powered tool that discovers cryptography across our codebase, surfaces dependencies, and helps us progress toward a full post-quantum migration by 2029. Here’s what we’ve learned so far.

New Attack Against RSA

Bruce Schneier — Mon, 28 Sep 2026 11:02:58 +0000

ArsTechnica is reporting on a “new” attack against RSA, one that bypasses factoring.

First, this attack isn’t new. The original research is from 2007. What is new is the implementation.

Second, it is a forgery attack. It allows an attacker to forge digital signatures. It does not recover the private key from the public key.

Third, the attack only works against pure signatures. That is, signatures without any formatting or padding. This is not generally how we use RSA in practice.

Fourth, speed is all relative. This is not a polynomial-time algorithm; it’s a subexponential-time algorithm. But it is somewhat faster than factoring. The authors were able to forge messages for 1024-bit RSA with 1380 CPU core-years (over five real-world months)...

Hash Identifier Tools – Command-Line Password Hash Identification

Darknet — Mon, 21 Sep 2026 13:13:05 +0000

hashID and Name-That-Hash tested against current password formats. Both miss bcrypt's $2b$ prefix; only Name-That-Hash recognises Argon2id.

1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

Sebastiaan Neuteboom — Thu, 10 Sep 2026 13:00:00 +0000

1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.

Claude Fable Solves a Historical Cipher

Bruce Schneier — Wed, 09 Sep 2026 11:08:26 +0000

Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what I wrote about AIs doing mathematics: It’s good at things that involve lots of searching and testing.

Python Now Has a Post-Quantum Encryption Library

Bruce Schneier — Mon, 10 Aug 2026 11:02:26 +0000

This is good: Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from the Sovereign Tech Agency, we implemented support for ML-KEM, the NIST-standard key-establishment primitive, and ML-DSA, the NIST-sta...

Post-quantum authentication to origins is now supported

Luke Valenta — Wed, 29 Jul 2026 13:00:00 +0000

Cloudflare now supports post-quantum (PQ) authentication when connecting to customer origin servers via Authenticated Origin Pulls and Custom Origin Trust Store. This is the first step towards providing PQ authentication for all Cloudflare products.

Why we cannot wait for better post-quantum signature algorithms

Bas Westerbaan — Thu, 09 Jul 2026 14:00:00 +0000

NIST is advancing nine new post-quantum signature algorithms as potential candidates for future standardization. We take a closer look at all of them, and argue that while they are in the works and show great potential, we should use ML-DSA for now — the best one currently available.

Factoring RSA Keys with Many Zeros

Bruce Schneier — Mon, 29 Jun 2026 16:05:18 +0000

Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild.

The badkeys project is an open-source service that checks public keys for known vulnerabilities. While developing this tool, Hanno collected a massive number of real-world keys from public sources, including Certificate Transparency logs, internet-wide TLS and SSH scans, PGP keys, and many others. By searching this dataset for unexpectedly sparse RSA moduli, we uncovered a large number of keys in the wild with the patterns in Figure 1...

The post-quantum EO is an important milestone. Now it’s time to get to work

Sharon Goldberg — Tue, 23 Jun 2026 18:25:18 +0000

The new post-quantum executive order sets a 2030 migration deadline and establishes a powerful foundation for post-quantum resilience. We look at what it gets right, where it can go further, and our migration playbook for government and industry.

The Intersection of Encryption and AI

Bruce Schneier — Tue, 02 Jun 2026 11:06:25 +0000

As part of their 20th Anniversary celebration, Dark Reading asked five cybersecurity industry leaders who wrote blogs or columns for them over the years to select their favorite piece and share their reflections on the topic today. This is my section.

Renowned technologist and author Bruce Schneier contributed a column on June 20, 2010, warning about cryptography’s inability to secure modern networks, a point he says he has been trying to argue since 2000.

“For a while now, I’ve pointed out that cryptography is singularly ill-suited to solve the major network security problems of today: denial-of-service attacks, website defacement, theft of credit card numbers, identity theft, viruses and worms, DNS attacks, network penetration, and so on...

Post-quantum encryption for Cloudflare IPsec is generally available

Sharon Goldberg — Thu, 30 Apr 2026 14:00:00 +0000

Cloudflare IPsec now has generally available support for post-quantum encryption via hybrid ML-KEM. We’ve confirmed interoperability with Cisco and Fortinet.