Filippo Valsorda

cryptography

open source

LLMsOpenAI

RubyApple

Linux

LLMs

Anthropic

We now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48() seeded with the time, which was indeed in 1997–98.

bipm.org

TypeScriptcrypto

TypeScriptprivacy

cryptography

In the tradition started by Colin Percival and Thomas Ptacek, a set of “Cryptographic Right Answers” updated for the accelerated post-quantum transition timeline.

cryptography

crypto

groups.google.com

privacy

privacy

TypeScriptprivacy

Python

I am publishing a production, pure-Python ML-DSA verifier. It's just 350 lines, and pretty readable and robust.

Python

Passkey records are an interoperable format for WebAuthn credentials, similar to password hash strings. I propose a potential crypto/passkey Go API based on them.

crypto

We needed the insight and confidentiality to protect our users, but now that anyone can get the same results from LLM?

LLMs

privacy

There is no need to update symmetric key sizes as part of the post-quantum transition, due to the details of how Grover's algorithm scales. Most authorities agree.

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

cryptography

Code hosts like GitHub don't necessarily show the correct source of Go modules. pkg.geomys.dev is a new convenient viewer for module source.

In Go, go.mod acts as both manifest and lockfile. There is never a reason to look at go.sum.