nixos-config

Configuración de NixOS de Lan Tian Este repositorio contiene los archivos de configuración para todos mis sistemas NixOS. Características Sistema completo root-on-tmpfs, usando impermanence Nftables en lugar de iptables Gestión de secretos con sops-nix Emulación en modo usuario de QEMU para la...

PQC-Scanner

El Escáner de Red PQC es una herramienta de evaluación diseñada específicamente para ayudar a las organizaciones a comprender su exposición criptográfica durante la transición hacia una postura de seguridad post-cuántica. A diferencia de los escáneres TLS tradicionales que se centran únicamente e...

quantum-security-project

Proyecto de Seguridad Cuántica de OWASP Prepárate hoy. Protege el mañana. Un proyecto oficial de la comunidad OWASP que mapea los riesgos de seguridad de la era cuántica de forma práctica, neutral respecto a fabricantes y basada en riesgos: el antídoto contra la exageración y el miedo. Estado: Fa...

Post-quantum authentication: Why organizations should start testing certificate ecosystems now

In this article 1. Why post-quantum authentication presents a different challenge 2. Why organizations should begin preparing now 3. Microsoft's perspective on readiness 4. Testing the future certificate ecosystem 5. Expanding end-to-end testing 6. What organizations can do today 7. Looking ahead...

op4

op4 — Secure Terminal Messenger Op4 is a terminal-based encrypted messaging application written in Rust. It provides end-to-end encrypted private messaging with post-quantum cryptography, routed entirely through the Tor network so that neither the content of your messages nor your IP address is...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – Falsificación de Firmas por Aleatoriedad Débil en WOTS+ de SPHINCS+ Resumen Una implementación del esquema de firmas post-cuánticas SPHINCS+ utiliza un generador de números aleatorios defectuoso durante la generación de firmas WOTS+. El mismo nonce k se reutiliza en múltiples...

cryptoptic

cryptoptic 量子コンピュータに見つけられる前に、コードに潜む暗号を発見しましょう。 cryptoptic は CodeQL と GitHub Actions を使用して、リポジトリまたは GitHub 組織全体をスキャンし、使用されているすべての暗号関数、その関数が由来するライブラリ、および呼び出し場所のインベントリを生成します。 なぜこれが必要なのか...

Harvest Now, Decrypt Later: The Attack You Defend Against by Doing Nothing

Somewhere, an attacker is recording your encrypted traffic. Not breaking it. Recording it. The bet is patient and simple: store ciphertext today, wait for quantum computers to mature, decrypt at leisure. The industry calls it harvest now, decrypt later HNDL, and it is the rare security threat wit...

codecrypt

Codecrypt La herramienta de criptografía post-cuántica. Codecrypt actualmente no recibe mantenimiento, aunque todavía lo uso con éxito. Si estás interesado en desarrollarlo/mantenerlo, escríbeme. Acerca de Este es un programa unix similar a GnuPG para cifrado y firma que utiliza únicamente...

Quantum-Safe-Migration

🌌 Quantum-Safe Migration QSM 🛠️ Overview QSM is an advanced, production-ready security toolkit implemented in Python 3.10+, designed specifically for DevOps engineers and security auditors on distributions like Parrot OS Security. It addresses the critical threat vector of "Harvest Now, Decrypt...

AI-Assisted Design of a Post-Quantum Cryptographic Accelerator: A Deployed-Silicon Case Study

Post-quantum migration is mandated on published timelines, and silicon that ships with a defect cannot be patched remotely. The standard acceptance gate cannot detect an entire class of ML-DSA defects. Signing resamples until a candidate meets its norm bounds, so the executed path varies with the...

Quantum-Based Solutions for Security Enhancement in Open Radio Access Networks

Open Radio Access Networks O-RAN introduce unprecedented flexibility, interoperability, and intelligence into next-generation wireless systems, but their disaggregated and software-defined architecture also expands the attack surface and creates new security vulnerabilities. Conventional...

PYSEC-2026-3779

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

A Drop-In KEM Replacement for Client Signatures in Post-Quantum SSH

The transition to post-quantum cryptography is reshaping the Secure Shell SSH protocol for remote administration. Post-quantum key exchange has been deployed in OpenSSH and is being standardized, while SSH authentication largely remains a signature-replacement effort. This path preserves the...

Cryptocurrencies in the Quantum Age: Migration Paths to PQC

Quantum computers pose a fundamental threat to blockchain systems that rely on elliptic-curve cryptography. This work reviews the quantum vulnerabilities and associated economic risks of major blockchain platforms, with a focus on Bitcoin, Ethereum, and Solana. We distinguish between at-rest,...

quantum-security-project — Updated!

OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...

Future-Proofing the Internet: Akamai Achieves End-to-End PQC

...

Quantum-Safe Web Service Architecture Using Time-Based One-Time Passwords

One-Time Passwords OTPs have become a common option for multi-factor authentication in several applications. For instance, during website login processes, OTPs are often used in conjunction with traditional text-based usernames and passwords to verify whether the access request originates from a...

YAVIN: A Unified Architecture for Secure Edge Processing in Memory

Secure, private multi-tenant execution spanning processors, memory, and accelerators remains one of the most significant challenges in modern edge computing systems. Simultaneously, processing-in-memory PIM has emerged as an effective approach for reducing the Von Neumann bottleneck by moving...

Python Now Has a Post-Quantum Encryption Library

This is good: Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from the Sovereign Tech Agency, we implemented support for ML-KEM, the NIST-standard key-establishment primitive, and ML-DSA, the NIST-standard digital-signature primitive, in...