Posts by djb@cr.yp.to
 (DIR) Post #ApTQTlHNTK2FgF4mSe by djb@cr.yp.to
       0 likes, 0 repeats
       
       Pleased to announce PQConnect: https://www.pqconnect.net Easy-to-install software for your Linux box (more OSes coming later) to protect network applications against future quantum computers. Paper will appear at NDSS 2025. Joint work with @hyperelliptic, Jonathan Levin, Bo-Yin Yang.
       
 (DIR) Post #B5GH08Xk388DeREI9A by djb@cr.yp.to
       1 likes, 0 repeats
       
       The IETF TLS chairs have now issued a "last call" for objections to non-hybrid signatures in TLS. Do they admit that their previous "last call" re non-hybrid KEMs ended up with a _majority_ in opposition, and that many opposition statements obviously also apply to signatures? No.
       
 (DIR) Post #B5GHP7BIFbZ0fNdjiC by djb@cr.yp.to
       0 likes, 0 repeats
       
       @jzb @rsalz @darkuncle Side note re "crypto expert": The issue here is basic security risk management. For example, Google and Cloudflare tried ECC+SIKE (CECPQ2b: https://web.archive.org/web/20260411125124/https://blog.cloudflare.com/the-tls-post-quantum-experiment/) for tens of millions of user connections, and then SIKE was publicly broken years later. The only reason this didn't immediately expose all those user connections to attackers is that the connections were still encrypted with ECC.
       
 (DIR) Post #B7xaoWa6qLVXWGRi1g by djb@cr.yp.to
       0 likes, 0 repeats
       
       NSA lost IETF's February 2026 vote on this NSA-driven document. See https://blog.cr.yp.to/20260405-votes.html for tallies. Do they admit what happened? No. They call another vote and try hard to pack the room with new pro-NSA voters. But if we show up and object, all they can do is whimper.
       
 (DIR) Post #B7xaqParnKdIQUhSwy by djb@cr.yp.to
       0 likes, 0 repeats
       
       @letoams "There is no formal membership in the IETF.  Participation is open to all. This participation may be by on-line contribution, attendance at face-to-face sessions, or both. Anyone from the Internet community who has the time and interest is urged to participate in IETF meetings and any of its on-line working group discussions."You're trying to disenfranchise real people by calling them "sockpuppets". You hype a few pseudonymous objections, ignoring pseudonymous _support_ statements.