I'm having Claude formalise my Ph.D thesis in Lean—it's incredibly exciting and nerve-wracking at the same time!
Bas Westerbaan
@bwesterb
Post-quantum @cloudflare
- Also applies roughly to cryptanalysis.To sum up my thoughts to some FAQs, here's how I'm thinking about the Vulnpocalypse. We are in a discovery surge that's dropping the bug bounty prices. In this "deep clean" phase developers will address a lot of tech debt, but this will fall off at some point, especially as AI
- Quick one: it's not surprising that HAWK got broken. anthropic.com/research/disco… It was already shaking. blog.cloudflare.com/ml-dsa-will-ha… This is great for cryptography. In the end, just like with software, you can only find the bugs that were already there.
- I updated PQSpy, a @firefox extension that shows you in a little icon whether the page you're visiting is post-quantum encrypted ⚛️, or not ❌, or partially in a kinda pie chart. Click the icon to get more the deets as shown in the screenshot.
- Why we cannot wait for better post-quantum signature algorithms: ML-DSA will have to do. But searching for better is still important!
