git-remote-pqcrypt

git-remote-pqcrypt ЭТО ЭКСПЕРИМЕНТАЛЬНЫЙ ПРОЕКТ, формального аудита безопасности не проводилось. НЕ ПОЛАГАЙТЕСЬ на него для критически важных репозиториев. git-remote-pqcrypt — это зашифрованный удалённый помощник Git, аналогичный gcrypt. Он хранит Git-пакфайлы и метаданные репозитория в...

Harvest Now, Decrypt Later: The Attack You Defend Against by Doing Nothing

Somewhere, an attacker is recording your encrypted traffic. Not breaking it. Recording it. The bet is patient and simple: store ciphertext today, wait for quantum computers to mature, decrypt at leisure. The industry calls it harvest now, decrypt later HNDL, and it is the rare security threat wit...

codecrypt

Codecrypt 포스트퀀텀 암호화 도구입니다. Codecrypt는 현재 유지보수되지 않고 있지만, 저는 여전히 잘 사용하고 있습니다. 개발이나 유지보수에 관심이 있다면 연락 주세요. 소개 이것은 양자 컴퓨터에 저항성이 있는 알고리즘만을 사용하는 GnuPG와 유사한 유닉스 암호화 및 서명 프로그램입니다: McEliece 암호 시스템컴팩트 QC-MDPC 변형을 암호화에 사용 해시 기반 Merkle 트리 알고리즘FMTSeq 변형을 디지털 서명에 사용 Codecrypt는 자유 소프트웨어입니다. 코드는 LGPL3 조건으로 라이선스되며...

alaniz-cipher

Шифр Alaniz v3 Постквантовое шифрование на основе пучков с помощью векторнозначных перестановок над конечным полем Криптографический примитив, основанный на задаче обращения нелинейного морфизма пучков NL-SMIP: полиномиальная система с секретными коэффициентами, связанными когомологиями пучков на...

Quantum-Safe-Migration

🌌 양자 안전 마이그레이션 QSM 🛠️ 개요 QSM은 Python 3.10+로 구현된 고급 프로덕션 레디 보안 툴킷으로, Parrot OS Security 와 같은 배포판에서 DevOps 엔지니어와 보안 감사자를 위해 특별히 설계되었습니다. 인프라의 암호화 상태를 평가하고 하이브리드 포스트 양자 마이그레이션을 자동화함으로써 "지금 수집하고 나중에 복호화"Harvest Now, Decrypt Later, HNDL 라는 중대한 위협 벡터를 해결합니다. ⚠️ 엄격한 아키텍처 원칙: QSM은 순수 포스트 양자 배포를 절대 허용하지...

PQCrypto-LWEKE

FrodoKEM: Learning with Errors 키 캡슐화 이 C 라이브러리는 잘 연구된 LWELearning with Errors 문제 1,3를 기반으로 하는 IND-CCA 안전 키 캡슐화KEM 프로토콜인 FrodoKEM 을 구현합니다. LWE 문제는 일반적이고 "대수적으로 구조화되지 않은" 격자에 대한 난해성 추측 문제와 밀접한 관련이 있습니다. 이 패키지에는 Python 참조 구현도 포함되어 있습니다. FrodoKEM 은 양자 컴퓨터 공격에 대해 안전할 것으로 추측됩니다. FrodoKEM 은 두 가지 주요 변형으로...

CVE-2026-102824

A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...

SUSE-SU-2026:23313-1 Security update for liboqs

This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signatu...

Domain Specific Post Quantum Signatures for Blockchains

Blockchains need more than post quantum single signer signatures. They need consensus profiled authentication objects with canonical bytes, priced invalid input rejection, stable transaction identifiers, hybrid downgrade resistance, public aggregation, merge semantics, accountable signer evidence...

sslscan v2.2.3

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

Enc53: DNSSEC-Anchored Stateless Tickets for Post-Quantum Authoritative DNS

DNSSEC authenticates RRsets, but does not provide endpoint authentication or channel security. DNS-over-TLS DoT and DNS-over-QUIC DoQ can facilitate such needs, but were designed for the stub-to-resolver hop, where stable long-lived connections amortize the expensive initial setup. The...

foxguard v0.13.0

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14 languages, with cross-file analysi...

Module-Lattice-Based Digital Signature Algorithm Utility 20260908

This is mldsa, a module-lattice-based digital signature algorithm utility for generating keypairs, signing and verifying files and data. It has an alter ego, mlsignify, implementing the same command line switches as signify1. The mldsa and mlsignify utilities are based on the libmldsa3 library,...

CryptoLyzer v1.6.0

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

AI-Assisted Design of a Post-Quantum Cryptographic Accelerator: A Deployed-Silicon Case Study

Post-quantum migration is mandated on published timelines, and silicon that ships with a defect cannot be patched remotely. The standard acceptance gate cannot detect an entire class of ML-DSA defects. Signing resamples until a candidate meets its norm bounds, so the executed path varies with the...

The Native-Signature Boundary in Post-Quantum Distributed Authorization

Post-quantum signature migration poses a distinct systems problem when authorization is distributed among multiple parties. In native threshold signing, the signature algorithm may determine key generation, share state, preprocessing, interaction, combination, refresh, and recovery. Architectures...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always...

Quantum-Based Solutions for Security Enhancement in Open Radio Access Networks

Open Radio Access Networks O-RAN introduce unprecedented flexibility, interoperability, and intelligence into next-generation wireless systems, but their disaggregated and software-defined architecture also expands the attack surface and creates new security vulnerabilities. Conventional...

openSUSE 16 Security Update : liboqs (openSUSE-SU-2026:21634-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21634-1 advisory. Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand...

PYSEC-2026-3779

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...