op4

op4 — セキュアターミナルメッセンジャー Op4 は Rust で書かれたターミナルベースの暗号化メッセージングアプリケーションです。ポスト量子暗号によるエンドツーエンド暗号化プライベートメッセージングを提供し、すべてのトラフィックは Tor ネットワーク経由でルーティングされるため、メッセージの内容も IP アドレスも、通信相手を含む誰にも公開されません。 目次 1. op4 の機能 2. インストール 3. 別のユーザーへの接続 4. セキュリティモデル 5. アーキテクチャ概要 6. プロジェクト構成 7. 現在のステータス op4 の機能 op4 を使用すると、双方が IP...

quantum-security-project

OWASP 양자 보안 프로젝트 오늘 준비하세요. 내일을 보호하세요. 양자 시대의 보안 위험을 실용적이고, 벤더 중립적이며, 위험 기반 방식으로 매핑하는 공식 OWASP 커뮤니티 프로젝트입니다. 과장과 두려움에 대한 해독제입니다. 상태: 부트스트랩 단계. OWASP 양자 보안 위험 Top 10은 초안 v0.1 단계이며 커뮤니티 의견을 기다리고 있습니다. 이는 완성된 목록이 아닌 시작점입니다. 프로젝트 소개 NIST, 영국 NCSC, EU 기관들은 모두 양자 이후 암호화, 암호 민첩성, 지금 수확-나중에...

nixos-config

Lan Tian의 NixOS 구성 이 저장소는 모든 NixOS 시스템의 구성 파일을 보관합니다. 기능 전체 시스템 root-on-tmpfs, impermanence 사용 iptables 대신 Nftables sops-nix를 사용한 비밀 관리 대부분의 아키텍처를 위한 QEMU 사용자 모드 에뮬레이션 Nixpkgs 패치가 적용된 Nix Flakes 내 NUR 저장소의 추가 커널 모듈 NVIDIA 드라이버 패치 OpenSSL을 위한 양자 내성 암호 및 GOST 지원 구성 관리를 위한 다양한 함수와 상수를 제공하는 사용자 정의 헬퍼...

PQC-Scanner

PQC 네트워크 스캐너는 조직이 포스트퀀텀 보안 태세로 전환함에 따라 암호학적 노출을 이해할 수 있도록 설계된 목적 특화 평가 도구입니다. 인증서 유효성이나 고전적 암호 강도에만 초점을 맞추는 기존 TLS 스캐너와 달리, 이 스캐너는 양자 인식 관점에서 엔드포인트를 평가합니다. RSA 및 타원 곡선 키뿐만 아니라 인증서, 확장 및 암호 스위트에 포함된 새로운 포스트퀀텀 알고리즘, 하이브리드 배포 및 실험적 PQC 지표도 식별합니다. 이는 NIST의 PQC 표준화와 증가하는 "harvest now, decrypt later" 공...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – SPHINCS+ WOTS+ の弱い乱数による署名偽造 概要 SPHINCS+ ポスト量子署名スキームの実装は、WOTS+ 署名生成時に欠陥のある乱数生成器を使用します。同じナンス k が複数の署名にわたって再利用されるため、攻撃者は秘密鍵を復元し、任意のメッセージを偽造できます。 脆弱性の詳細 タイプ: 暗号学的乱数生成の失敗 影響: 鍵の完全な漏洩、署名偽造。 根本原因: WOTS+ 署名アルゴリズムは、署名ごとに一意の乱数値 k に依存します。k の再利用により、シードを明らかにする代数的関係が漏洩します。 エクスプロイトの実証...

cryptoptic

cryptoptic 量子コンピュータに見つけられる前に、コードに潜む暗号を発見しましょう。 cryptoptic は CodeQL と GitHub Actions を使用して、リポジトリまたは GitHub 組織全体をスキャンし、使用されているすべての暗号関数、その関数が由来するライブラリ、および呼び出し場所のインベントリを生成します。 なぜこれが必要なのか...

codecrypt

Codecrypt ポスト量子暗号ツール。 Codecrypt は現在メンテナンスされていませんが、私は今も問題なく使用しています。開発やメンテナンスに興味があれば、私に連絡してください。 概要 これは GnuPG ライクな Unix プログラムで、暗号化と署名に量子コンピュータ耐性のあるアルゴリズムのみを使用します: McEliece 暗号システム コンパクトな QC-MDPC 変種 を暗号化に使用 ハッシュベースの Merkle ツリーアルゴリズム FMTSeq 変種 をデジタル署名に使用 Codecrypt はフリーソフトウェアです。コードは LGPL3...

PYSEC-2026-3779

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

JLSEC-2026-757 Use-after-free in PQC hybrid key-share handling

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data through deserializeMetadata when it reads key metadata from AWS Secrets Manager. An attacker who can write the secret that holds the PQC key metadata can supply a crafted Base64-encoded Java serializati...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the deserializeMetadata paths in AwsSecretsManagerKeyLifecycleManager, HashicorpVaultKeyLifecycleManager, and the legacy metadata migration path in FileBasedKeyLifecycleManager. An attacker can...

CVE-2026-43867

The Apache Camel PQC Component is vulnerable to deserialization of untrusted data in the AwsSecretsManagerKeyLifecycleManager.deserializeMetadata() method. The root cause is the use of a raw java.io.ObjectInputStream.readObject() without an ObjectInputFilter or class allow-list to process Base64-...

CVE-2026-46590 Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048)

Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata KeyMetadata through pluggable KeyLifecycleManager implementations. HashicorpVaultKeyLifecycleManager and AwsSecretsManagerKeyLifecycleManager read that metadat...

PT-2026-55886

☕ Apache Camel critical alert: CVE-2026-43867 hits the camel-pqc component. Post-quantum key metadata deserialized via ObjectInputStream with zero ObjectInputFilter — unauthenticated RCE risk at CVSS 9.8. Check your Camel builds now. AppSec Apache https://t.co/iaMBNrOfI0 https://t.co/mkIJ19Sd5Y...

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

Microsoft on Tuesday said it's accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected. "Advances in quantum research and development have shifted the risk...

Accelerating the quantum-safe timeline

The quantum-safe timeline has changed For years, planning for post-quantum cryptography PQC was framed as a future problem: important, inevitable, but distant. That perspective is evolving as technology advances and organizations prepare for the scale and complexity of the transition ahead. At...

CVE-2026-7531 Use-after-free in PQC hybrid key-share handling

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-7531 Use-after-free in PQC hybrid key-share handling

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-7531

CVE-2026-7531 describes a use-after-free in the handling of PQC hybrid key-shares for TLS 1.3. The issue occurs when a malicious server sends a truncated PQC hybrid KeyShare, which can trigger the error cleanup path to operate on freed memory. Documents consistently label this as an incomplete fi...

Post-Quantum Cryptography Is Coming, but Your DNS Might Not Be Ready

Learn why crypto-agility depends not just on adopting the right standards, but on maintaining a clear, unified view of your DNS environment before the migration begins...