357 matches found
LR-WebPKI
LR+ WebPKI評価アーティファクト このパッケージには、最終版LR+リファレンス実装、本番復元ラッパー、テスト、およびWebPKI CAコンテキスト上のコンテキストクローズ型耐量子認証用に生成された評価出力が含まれています。 このパッケージは、研究ログのスナップショットではなく、提出用アーティファクトとして意図的に記述されています。ターゲット名、ファイル名、モジュール名、レポートは安定した実装用語を使用しています。 内容 src/lrplus/ LR+リファレンスモジュール scripts/ コーパスダウンロード、ビルド、復元、評価、チェック config/...
CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-
2. CVE-2026-4567 – ポスト量子KEMタイミングサイドチャネル（Kyberデカプセル化） 概要 Kyber KEMデカプセル化の脆弱な実装は、暗号文拒否ステップにおけるタイミング差を通じて秘密鍵のビットを漏洩させ、完全な鍵回復を可能にします。 深刻度: 重大（秘密鍵の侵害） 脆弱なサーバー（C言語）& 攻撃スクリプト（Python） // kybervulndecaps.c - Simulated vulnerable Kyber decapsulation include include include include // Secret key simplified,...
reverie
Reverie An efficient implementation of the NIZKPoK outlined in KKW 2018 Reverie は、Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures で概説された MPC-in-the-head NIZKPoK の 証明者と検証者の 実装です。 Reverie は、複雑な述語に対して具体的な証明者の効率性 小さな定数による線形証明時間 を提供することを目指しています。この実装は 128 ビットの 古典的な...
git-remote-pqcrypt
git-remote-pqcrypt THIS IS AN EXPERIMENTAL PROJECT, there hasnt been a formal security audit. DO NOT rely on this for any critical repositories. git-remote-pqcrypt is an encrypted Git remote helper similar to gcrypt. It stores Git packfiles and repository metadata encrypted at rest. Access is wit...
codecrypt
Codecrypt ポスト量子暗号ツール。 Codecrypt は現在メンテナンスされていませんが、私は今も問題なく使用しています。開発やメンテナンスに興味があれば、私に連絡してください。 概要 これは GnuPG ライクな Unix プログラムで、暗号化と署名に量子コンピュータ耐性のあるアルゴリズムのみを使用します: McEliece 暗号システム コンパクトな QC-MDPC 変種 を暗号化に使用 ハッシュベースの Merkle ツリーアルゴリズム FMTSeq 変種 をデジタル署名に使用 Codecrypt はフリーソフトウェアです。コードは LGPL3...
SUSE-SU-2026:23313-1 Security update for liboqs
This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signatu...
sslscan v2.2.3
sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...
foxguard v0.13.0
foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14 languages, with cross-file analysi...
CryptoLyzer v1.6.0
CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...
zupt
Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always...
openSUSE 16 Security Update : liboqs (openSUSE-SU-2026:21634-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21634-1 advisory. Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand...
PYSEC-2026-3779
opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...
PYSEC-2026-3779
opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...
CVE-2026-81703
opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...
CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key
opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...
PT-2026-82604
Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software fails to validate the encryption status of embedded post-quantum cryptography PQC private keys within file metadata. This allows attackers to create files containing unencrypted...
OPENSUSE-SU-2026:21634-1 Security update for liboqs
This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signatu...
MINI-HWHF-PCQC-4H74
Bulletin has no description...
Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-round AES-128. The HAWK attack exploits a previously unused symmetry in the lattice behind the signature scheme. Anthropic's released...
