Latest Quantum Security, PQC, Post-Quantum, Crypto-Agility News
-
Sep- 2026 -19 SeptemberQuantum Security & PQC
RSA-896 Factored With Claude on Spare GPUs, 16 Days After RSA-260
Stephen Weis of Anthropic used Claude to port CADO-NFS to GPUs and factored RSA-896 on idle capacity, 16 days after Cognition's RSA-260 record. RSA-2048 remains about 35 billion times harder and needs a quantum computer.
Read More » -
19 SeptemberQuantum Security & PQC
TU Berlin’s TrustBOM Lets Vendors Prove a Vulnerable Package Is Absent From Their SBOM Without Sharing It. Its Authors Assume the SBOM Is Complete.
A TU Berlin system lets customers check a vendor's SBOM for banned packages without seeing it, at about 0.9 seconds of GPU proving time per package. Its guarantee covers only what the SBOM recorded. Its reference verifier needs fixing.
Read More » -
18 SeptemberQuantum Security & PQC
SAMA Makes Quantum Risk a Standing Item for Saudi Bank Risk Committees. Its December 31 Inventory Deadline Is Too Tight for Banks Starting From Zero.
SAMA asks Saudi banks for cryptographic inventory procedures that are accurate and comprehensive. An inventory built from interviews, the quickest kind to buy, cannot show either. With measured coverage and graded evidence, an examiner can check both.
Read More » -
18 SeptemberQuantum Computing
Every Headline RSA-2048 Estimate Assumes Qubits That Work. A Sydney Team Measured What Happens When They Don’t.
On a single IBM chip, a distance-5 surface code lost to a distance-3 even after the defective components were routed around. The headline estimates of what breaking RSA-2048 takes assume they all work.
Read More » -
11 SeptemberQuantum Security & PQC
Cloudflare’s 1.1.1.1 Now Validates Post-Quantum DNSSEC Signatures – And Shows Why PQC Migration Is a Systems Problem
Cloudflare enabled ML-DSA-44 DNSSEC validation on its 1.1.1.1 resolver. No other major public resolver has announced equivalent support. The move exposes transport, downgrade, and chain-of-trust challenges that will define PQC migration beyond TLS.
Read More » -
10 SeptemberResearch
Chip-Based QKD Has a Glow Problem: VOA Luminescence Creates a Side Channel That Standard Security Analyses Miss
A peer-reviewed study finds that variable optical attenuators in integrated QKD chips emit unintended light near 1107 nm. The emission creates a wavelength-resolved side channel that standard BB84 security analyses do not account for, and the modeled impact on key rates is severe.
Read More » -
8 SeptemberQuantum Security & PQC
Altera Ships ML-DSA Secure Boot on Agilex FPGAs – PQC Reaches the Silicon Root of Trust
Altera began shipping ML-DSA secure boot on its Agilex 3 and Agilex 5 FPGAs on September 8, 2026 – the first general-purpose FPGA family with post-quantum firmware authentication as a production feature, not a roadmap item.
Read More » -
8 SeptemberResearch
IonQ Compiles Shor’s Attack on secp256k1 Down to 19,397 Ions and 26 Days per Attempt
IonQ has compiled a full ECDLP-256 attack to a trapped-ion design that does not exist, charging every Clifford, measurement and ion transport. The accounting is the most detailed I have seen. The error rates, cycle time and machine are assumptions.
Read More » -
4 SeptemberQuantum Security & PQC
Cognition’s Devin Built a GPU Number Field Sieve and Factored RSA-260, Cutting the Price of Breaking RSA-1024 to $30 Million
Eric Lu of Cognition had the Devin agent build a GPU version of CADO-NFS and factored the 862-bit RSA-260 on idle cluster capacity, for about $400,000 of GPU time. Factoring RSA-1024 would cost about $30 million, by his estimate.
Read More » -
4 SeptemberQuantum Security & PQC
G7 Tells Every Organization to Start PQC Migration – But the Procurement Signal Matters More Than the Headline
The G7 Cybersecurity Working Group's September 2026 call to action urges all organizations to begin PQC migration. The document is guidance, not regulation, but its procurement and supply chain language carries real consequences for enterprises and their vendors.
Read More » -
1 SeptemberQuantum Security & PQC
EMVCo Says Card Payments Are Decades From a Quantum Threat, but Its Authors Counted IBM’s Logical Qubits as Physical Ones
The card industry's technical body expects no quantum threat to EMV chips before 2040. Its new position paper is right about symmetric cryptograms, while its timeline, warning milestones and cost figures don't match the 2025–2026 record.
Read More » -
Aug- 2026 -29 AugustQuantum Security & PQC
First Quantum-Safe Bitcoin Transaction: What QSB Proves
The first quantum-safe Bitcoin transaction was confirmed on mainnet on 26 August, built by StarkWare's Avihu Levy using hash-based constructions within existing consensus rules. The method protects individual holdings but cannot help the six million BTC with public keys already exposed on-chain.
Read More » -
17 AugustQuantum Security & PQC
An Incomplete FO Check Turned wolfSSL’s ML-KEM Into Key Recovery
A researcher recovered 98% of an ML-KEM-1024 private key from wolfSSL's shipped binaries using a few hundred chosen ciphertexts. The bug was in hand-written SIMD assembly, patched in version 5.9.2.
Read More » -
15 AugustQuantum Security & PQC
The Ethereum Foundation Spent Eight Years on a Hash Its Roadmap No Longer Needs
Binary-field proof systems made standard hashes cheap enough to prove that Ethereum's exotic one lost its reason to exist. Nobody broke it. An eight-year research bet was retired in a single post.
Read More » -
13 AugustQuantum Security & PQC
Google Cloud Put Dates on Its PQC Migration. Signatures Trail Confidentiality by a Year.
Google Cloud has attached target years to 19 service-level roadmap entries running through 2029. Store-now-decrypt-later mitigation is due in 2027, signatures and key-management foundations in 2028.
Read More »
