Tessera
Folgen

Joe Birr-Pixton

@jbp.io

computers, computer security, cryptography. rather dull really. locale: cambridge, uk github: https://github.com/ctz/ & https://github.com/rustls/

102 Posts182 Follower161 Folgt
Joe Birr-Pixton@jbp.io · 2mo ago

Pleased to announce a new network transport security protocol: "TSL" (Transport Security Layer). Suspiciously wire compatible with TLS, but obviously unrelated. Future standardisation efforts will happen outside the IETF, and contributions made with the aesthetic of american politics are banned

Joe Birr-Pixton@jbp.io · 2mo ago

I released Graviola 0.4.1 yesterday, which improves ML-KEM-768 performance via the parallel SHAKE strategy -- compared to mlkem-native as included in aws-lc it is now 30% quicker on aarch64 and 8% quicker on x86-64 for combined keygen+encaps+decaps.

Joe Birr-Pixton@jbp.io · 2mo ago

I released Graviola 0.4.0 yesterday, with a new and quite quick ML-KEM-768 implementation. More perf work to do on this, but it is already quicker than libcrux-ml-kem, and competitive with mlkem-native on ARM64. And still builds mega fast! Consider supporting this work on github.com/sponsors/ctz

Joe Birr-Pixton@jbp.io · 2mo ago

I released Graviola 0.4.0 yesterday, with a new and quite quick ML-KEM-768 implementation. More perf work to do on this, but it is already quicker than libcrux-ml-kem, and competitive with mlkem-native on ARM64. And still builds mega fast! Consider supporting this work on github.com/sponsors/ctz

Dirkjan Ochtman@djc.ochtman.nl · 5mo ago

An update on rustls performance: it’s still pretty fast. www.memorysafety.org/blog/26q1-ru...

Q1 2026 Rustls Performance Update

Overview Offering top tier performance is a primary goal for the Rustls project. As such, the project has developed benchmarks representing some of the most performance critical functions and monitors them closely. The Rustls project periodically publishes test results that compare Rustls performance to other popular TLS libraries, OpenSSL and BoringSSL. The previously published test results are from July of 2025. The Rustls project is planning to start publishing performance reports more frequently going forward.

memorysafety.org

Thomas Ptacek@sockpuppet.org · 6mo ago

None of you are giving me enough credit for not participating on the TLS working group mailing list. You're welcome. Everything I don't do, I don't do it for you.

Joe Birr-Pixton@jbp.io · 6mo ago

"If we publish this, suddenly people will start taking the cryptography opinions of the TLSWG very seriously. This would definitely happen thanks of the decades of demonstrated good decision making."

Filippo Valsorda@filippo.abyssdomain.expert · 8mo ago

Here are some statistics (estimated via Poisson inference on the observed hit counts): Keys generated: 2^34.5 (95% CI: 2^33.6–2^35.0) Core-years: 56.7 (95% CI: 30.7–82.6) Average cores: ~5,200 (95% CI: 2,800–7,500) This is a lot, folks! Really grateful for this level of community support.

Josh Bressers@josh.bressers.name · 8mo ago

This week on #OpenSourceSecurity I chat with Dirkjan Ochtman and Joe Birr-Pixton about #Rustls. A lot has happened with Rustls in the last few years (and there's a lot more to come). Writing a TLS implementation is incredibly complicated, even when you don't have to worry about memory safety

Rustls with Dirkjan and Joe

Josh talk to Dirkjan and Joe about Rustls (pronounced rustles), a Rust-based TLS library. Dirkjan and Joe are developers on Rustls. We talk about the history that got us to this point. The many many c...

opensourcesecurity.io

Sean McArthur@seanmonstar.com · 8mo ago

Just published a new #rustlang reqwest release candidate: v0.13.0-rc.1. This has some breaking changes, the biggest was switching to rustls by default. I'd appreciate if you gave it a spin 🙏 github.com/seanmonstar/...

Release v0.13.0-rc.1 · seanmonstar/reqwest

👀 Discussion here if you give it try, thanks! Main breaking changes rustls is now default instead of native-tls rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you...

github.com