KEMs and Post-Quantum age

Theyre here! NIST selected a first batch of post-quantum cryptographic key exchange and signature algorithms. The report is a nice read that explains a lot of the goals, candidates, selections, and rationales. I recommend Sections 2, 3.3, and 4.1. For key exchange, NIST selected only...

NIST Announces First Four Quantum-Resistant Cryptographic Algorithms

The U.S. Department of Commerce's National Institute of Standards and Technology NIST has chosen the first set of quantum-resistant encryption algorithms that are designed to "withstand the assault of a future quantum computer." The post-quantum cryptography PQC technologies include the...

NIST Announces First Four Quantum-Resistant Cryptographic Algorithms

NISTs post-quantum computing cryptography standard process is entering its final phases. It announced the first four algorithms: For general encryption, used when we access secure websites, NIST has selected the CRYSTALS-Kyber algorithm. Among its advantages are comparatively small encryption key...

MAL-2022-3338 Malicious code in genshin-impact-free-primogems-and-genesis-crystals-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b9bb1aa84bd97eb53afedfa2d56c798dbccf7ed85c213eb7b8fbff56f77d25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

healingcrystals.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-685305 Description| Value ---|--- Affected Website:| healingcrystals.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden until disclosur...

CVE-2018-13466

The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13466

The CVE-2018-13466 applies to Crystals, an Ethereum token smart contract. The mintToken function contains an integer overflow that enables the contract owner to set an arbitrary user’s balance to any value. This is documented across multiple sources (NVD entry and related regardings) and is the p...

CVE-2018-13466

The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

crystals-from-swarovski.com XSS vulnerability

Open Bug Bounty ID: OBB-531374 Description| Value ---|--- Affected Website:| crystals-from-swarovski.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Squid Product Recall

Lidl is recalling two of its packaged squid products because of the presence of struvite salt crystals. The danger is unclear. The article says that struvite crystals "may be mistaken as glass fragments," which isn't actually dangerous. It also says: "As these salt crystals may cause injury, the...

MIT Develops Hack-Proof RFID Chip — Here's How It Works

Do you know about RFID chips and how many you are carrying at this moment? Today, RFID chips are built-in all sorts of items, including your credit cards, travel swipe cards, library books, grocery store cards, security tags, implanted medical records, passports and even the access cards provided...