Leon Acosta
Company strategy, enterprise engagements, partnerships, and standards-body and ISO alignment.
How to test PQC certificate and key formats
A practical acceptance plan for ML-KEM and ML-DSA certificates, private-key containers, import paths and mixed-version PKI systems.
IETF moves constrained-device PQC guidance to IESG review
The IETF's constrained-device PQC guidance is in IESG evaluation, with concrete advice on seed storage, RAM pressure, ML-DSA runtime tails and firmware authentication.
PQC rollbacks need a cryptographic floor
A practical rollback method for post-quantum migrations: define a security floor, limit the exception, preserve evidence and make the fallback expire.
IETF draft defines hybrid ML-DSA signatures for JOSE
Revision 05 of an IETF JOSE draft defines six composite signature profiles that pair ML-DSA with ECDSA or EdDSA. It also tightens encodings and states where the hybrid construction does not provide unique signatures or replay protection.
TLS draft pairs ML-KEM-1024 with X448
A new individual Internet-Draft proposes MLKEM1024X448 for TLS 1.3, DTLS 1.3 and QUIC. Its 1,624-byte key shares target a higher security level, but it has no IETF adoption, codepoint or deployment status.
NSA turns the 2027 PQC deadline into a procurement gate
The NSA's new post-quantum resource hub puts two near-term gates in one place: new commercial national-security systems must support quantum-resistant algorithms from 2027, while legacy systems that cannot support them are to be phased out by 2030.
IETF tightens KEM-only authentication for LAKE
Revision 01 of the IETF LAKE authentication draft specifies a five-message, three-secret KEM handshake for constrained systems and tightens the rules around key binding, freshness and when authentication completes.
IETF holds standalone ML-KEM TLS draft for review
The RFC Editor has paused the standalone ML-KEM-for-TLS draft while IETF process complaints are reviewed. The hold delays publication but does not revoke hybrid RFC 10024 or establish a cryptographic flaw.
OpenSSL 4.1 beta speeds ML-KEM and ML-DSA
OpenSSL 4.1.0-beta1 adds architecture-specific ML-KEM and ML-DSA paths for Power, IBM Z and x86-64, moving PQC performance testing from generic support claims to real CPU fleets.
IETF draft brings post-quantum crypto to EAP-TLS
A new standards-track IETF draft applies post-quantum TLS to EAP-TLS, EAP-TTLS, PEAP and TEAP, while confronting the certificate-size problem that enterprise authentication cannot ignore.
oqs-provider 0.12.0-rc2 fixes key-handling bugs
The new oqs-provider release candidate packages fixes for use-after-free, hybrid-key length validation, RSA reconstruction overflow, and allocation cleanup.
How to test hybrid post-quantum TLS end to end
A practical four-pass method for proving that hybrid TLS was negotiated across the real network path, without confusing support with evidence.
Java 27 puts hybrid post-quantum TLS on the default path
Java 27 adds hybrid ML-KEM key exchange to TLS 1.3 by default, changes ML-KEM and ML-DSA private-key encodings, and speeds both algorithms on AVX-512 systems.
Cloudflare brings ML-DSA validation to DNSSEC
Cloudflare's 1.1.1.1 now validates ML-DSA DNSSEC signatures. Larger responses and downgrade protection show why the trust chain still matters.
The quantum claim that put lattice security in question
A quantum algorithm raised an unsettling question about lattice security. Twelve days later came a refutation. Here is what failed, and why it is a relief.
Go 1.27 puts ML-DSA into TLS and X.509
Go 1.27 brings ML-DSA signatures to X.509 and TLS 1.3. What Go teams can use now, how FIPS module support differs, and what to test.