We brought PQC (beginning with ML-DSA and ML-KEM) to TPM 2.0! While it’s only been a year since we last published, the big changes needed for PQC have been in the works since 2022. This was a monumental team effort and I’m so proud of the team for getting it done!

We need more former bartenders in Standards groups too!

Alexandria Ocasio-Cortez@aoc.bsky.social · 5mo ago

Reading people. Body language. Knowing how to connect with people totally unlike you and with different backgrounds and beliefs. Defusing tense situations. Gaining trust. High endurance, pain tolerance, and work ethic. Reaction time. Prioritizing order of execution. Anticipating people’s needs. Tons

🙌 “Mistakes in cryptography are not a sin […]. They’re simply a fact of life. As somebody once said, “cryptography is nightmare magic math that cares what color pen you use.” We’re all going to get stuff wrong if we stick around long enough to do something interesting[.]”

Phil M0OFX@philpem.digipres.club.ap.brid.gy · 6mo ago

"aes-js and pyaes provide a default IV in their AES-CTR API" *screams* https://blog.trailofbits.com/2026/02/18/carelessness-versus-craftsmanship-in-cryptography/

I miss when you could post Brave Norman Rockwell Townsperson and the caption could be, like, “R.E.M was wrong to leave ‘Fretless’ off of Out of Time” instead of “The secret police should stop murdering people.”

> RFC 9794 > “The word "hybrid" is also used in cryptography to describe encryption schemes that combine asymmetric and symmetric algorithms [RFC9180], so using it in the post-quantum context overloads it and risks misunderstandings.” > Puts the word “hybrid” on everything

Me several days ago: “why do all the ML-DSA signing test vectors have only up to 2 of ( key seeds, hedging randomness, and mu values )” Me now: “ok guess I’m sending a PR to Wycheproof

Implementing a protocol that uses cryptography is harder than designing a protocol that uses cryptography. Normally I use that to explain to people that they need to minimize excessive complexity in their designs but imagine what designs the team responsible for this code is capable of

Andrew Lilley Brinker@alilleybrinker.com · 6mo ago

Why was this code ever shipped?! This is from the second vuln, where keys' signatures aren't checked before they're stored in the trusted key store. Why would you ever ship a "TODO, actually validate signatures lol" in your secure messenger?!

They believe in nothing. When you determine your views as being the midpoint between two opposing positions, it just shows that you don't hold actual beliefs or principles.

Minnesota National Guard members have arrived at a federal building and were directed to distribute donuts, coffee, and hot chocolate to anti-ICE protesters. Guard members were issued reflective vests so they would not be mistaken for federal agents.

It is fun and good to dunk on BitLocker not bothering to update their threat models (cf. TPM bus interposition) but Matthew’s thread breaks down how truly difficult Microsoft’s position is here — MS cannot serve remote recovery without also being technically able to respond to warrants

Matthew Garrett@mjg59.eicar-test-file.zip · 6mo ago

Oh for fuck's sake don't make me write a blog post defending Bitlocker, I do not want to defend Bitlocker

I am pleased to report that between HackerNews and Google’s internal “Learning on the Loo” program, I am officially published to toilets worldwide

it's incredible how if you put this entire dialog into the Left Behind series, it would basically work, but instead it's just IRL MN

I don’t think the words “end to end encryption” belong in this post? confer.to/blog/2026/01...

Private inference

When you use an AI service, you’re handing over your thoughts in plaintext. The operator stores them, trains on them, and–inevitably–will monetize them. You get a response; they get everything.

confer.to

American Sturmabteilung

Dom Ervolina@dominicervolina.com · 7mo ago

A woman recording an ICE agent tells him "Shame on you." The agent responds, "Have you all not learned from the past couple of days?" "Learned what?" she asks Then he knocks her phone out of her hand

I wrote about a feature I got disabled-by-default in Linux last year dlp.rip/decorative-c...

The latest version of the TPM specification is out! And I’m really excited about it!

New year to-do list: 1. Remember to write 2024 instead of 2023 2. Read about another person “discovering” TPM Genie attacks against use cases that never bothered with that threat model research.nccgroup.com/2018/03/09/t...

BitLocker encryption broken in 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when...

BitLocker's reliance on a TPM for security is its own downfall in this specific exploit.

tomshardware.com