Kinda sad about the OpenSSH choice of post-quantum auth algorithm, Ed25519 + ML-DSA-44.

I would have gone with pure ML-DSA-44, but hybrid had one advantage: hardware support.

Unfortunately, they chose Ed25519 which won't work with TPMs, SEs, and pre-2024 PIV YubiKeys.

Well that's a first for me: an NTP Pool server sent a wildly wrong time, and systemd-timesyncd jumped the system time on Trastevere first forward 0.82s and then *backwards* 0.76s.

Thankfully Sunlight failed safe, crashed (which fired alerts), and recovered once the clock caught up.

WTF?

https://www.ntppool.org/scores/2603:c020:8017:3e00::123

This ty + uv integration for PEP 723 might definitively make Python my go-to language for scripts. No more bash at any size.

https://astral.sh/blog/uv-ty-integration#first-class-support-for-python-scripts

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries.

This is, uh, a problem. git and pip especially.

I added a short-term workaround to https://emudhra.we-have-a-problem.com/#macos-curl.

🚨 Six WebPKI Intermediate CAs are compromised.

This is bigger than Heartbleed, but a client-side issue.

Anything that verifies certificates against public roots, like most TLS clients, is/was affected.

Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com

Act now.

THIS IS NOT A DRILL.

If you package/distribute/maintain root stores or chain verifiers, act immediately.

If you know how to remove trust in a root, consider doing it now.

Otherwise, prepare to update systems as patches/mitigations come.

Go users, update to Go 1.27.3 or Go 1.26.10.

https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ

Anthropic found the origin of the NIST elliptic curve seeds: they were generated with drand48()!

No one was seriously worried, but this should put some FUD to rest, completing the NIST ECC rehabilitation arc… just in time to be retired in favor of PQ.

Also, we raised $36 Ki for ISRG. Yay!

https://words.filippo.io/seeds-solved/

No more leap seconds, ever! There isn’t one in December and they will be abolished in May.

The last one will forever be the 2016(?!) one. Didn’t realize having experienced leap seconds in prod dates me.

I’m not going to miss time going backwards, I’ll be honest.

https://www.bipm.org/en/cgpm-2026/resolution-5

Cobblestone-128 chunked (aka streaming) encryption in TypeScript for Node.js 22+, Bun, Deno, and all recent browsers.

One-shot, transform stream, and random access decryption APIs.

Uses the Web Crypto API for AES-GCM, with fallback on the noble cryptography libraries.

https://github.com/FiloSottile/cobblestone.ts

Interoperable with https://cryptography.io/en/latest/cobblestone/ and soon with the Go standard library.

Publishing “Cryptographic Right Answers” for developers is a tradition by now.

Colin Percival started in 2009, Thomas Ptacek followed up in 2015, and then Latacora carried on in 2018 and 2024.

I put together an updated list. I'm very pleased (and mildly surprised) that at this point we have good post-quantum answers for everything.

Now we "just" need to get everything rolled out, and make Merkle Tree Certificates happen.

Let's get to work. See you in 2029.

https://words.filippo.io/right-answers/