signatures
NIST’s Nine: The PQC Signature Race Moves to Round Three
NIST's advancement of nine mathematically diverse third-round digital signature candidates highlights a critical shift in post-quantum cryptography, forcing enterprise security programs to architect for crypto-agility to protect against potential future breakthroughs targeting ...
New SSH Vulnerability
This is interesting: For the first time, researchers have demonstrated that a large portion of cryptographic keys used to protect data in computer-to-server SSH traffic are vulnerable to complete compromise when naturally ...
Java Cryptography Implementation Mistake Allows Digital-Signature Forgeries
Interesting implementation mistake: The vulnerability, which Oracle patched on Tuesday, affects the company’s implementation of the Elliptic Curve Digital Signature Algorithm in Java versions 15 and above. ECDSA is an algorithm that ...
Hacking Digitally Signed PDF Files
Interesting paper: “Shadow Attacks: Hiding and Replacing Content in Signed PDFs“: Abstract: Digitally signed PDFs are used in contracts and invoices to guarantee the authenticity and integrity of their content. A user ...
Evidence for the Security of PKCS #1 Digital Signatures
This is interesting research: "On the Security of the PKCS#1 v1.5 Signature Scheme": Abstract: The RSA PKCS#1 v1.5 signature algorithm is the most widely used digital signature scheme in practice. Its two ...
