// cryptography

All signals tagged with this topic

Microsoft tests post-quantum cryptography in live production environments

Microsoft is moving beyond algorithm validation to test how post-quantum cryptography actually functions within existing infrastructure. Standards bodies have blessed the algorithms, but enterprises now face a harder problem: integrating quantum-safe encryption into systems built around classical cryptography without breaking backward compatibility or performance.

Post-quantum encryption candidate eliminated after cryptographic attack

The Mythos attack broke ML-KEM (formerly Kyber), one of NIST's finalists for post-quantum cryptography standardization, before widespread deployment. The vulnerability exposes a gap in the vetting process: even algorithms that survived years of peer review can fail under sustained cryptanalytic pressure. NIST is now accelerating its review of alternative algorithms as organizations plan PQC migrations. The practical question is whether standardization timelines account for the lag between cryptanalytic discovery and infrastructure replacement.

Google Demonstrates Quantum-Resistant HTTPS Using Compressed Certificates

Google has compressed 15KB of quantum-resistant key material into 700 bytes in TLS certificates, moving quantum-safe encryption from proof-of-concept to web-scale deployment. The bottleneck was not cryptographic theory but engineering: HTTPS certificate chains must fit within network packet sizes, and earlier quantum-resistant algorithms bloated them beyond viable limits. Certificate size directly affects connection latency and browser compatibility.

Crypto industry rushes to defend against quantum computing threat

Bitcoin and other blockchain systems rely on cryptographic algorithms that quantum computers could theoretically break in years or decades, forcing migration to quantum-resistant code before that window closes. Major crypto firms are already allocating resources to implement post-quantum cryptography standards, indicating concern that the compromise timeline is shorter than the 10-20 year consensus estimates. The move exposes a structural vulnerability in the industry's foundational security model and creates a dependency on cryptographic standards developed by institutions like NIST that the crypto world has historically positioned itself against.