Linked List login sign up

Blog

by @pubkey · 17 nodes · curated

October 06, 2026

OpenSSH 10.6: LZ77 compression disabled over cross-channel plaintext recovery, GSSAPI and sftp path fixes openssh.com openssh.com

October 05, 2026

Smashing the token limit: CSS-injection exfil of long tokens via overlapping fragments portswigger.net portswigger.net

October 04, 2026

Too Small to Hide: single-trace key recovery from ML-KEM keygen eprint.iacr.org eprint.iacr.org

October 03, 2026

Recovering SNOVA secret keys from biased vinegar sampling eprint.iacr.org eprint.iacr.org

October 02, 2026

Incomplete FO ciphertext compare in ML-KEM: IND-CCA2 break to key recovery eprint.iacr.org eprint.iacr.org

October 01, 2026

OpenSSL Security Advisory (29 Sep 2026): DTLS heap disclosure, EC/SM2 timing leaks openssl-library.org openssl-library.org

September 29, 2026

MAMBA-Frost: lattice KEM from Learning With Quantization eprint.iacr.org eprint.iacr.org

September 28, 2026

Breaking the Gómez-Torrecillas–Lobillo–Navarro cryptosystem with LLL eprint.iacr.org eprint.iacr.org

September 27, 2026

Forging 1024-bit RSA signatures in nearly SNFS time eprint.iacr.org eprint.iacr.org

September 26, 2026

Factoring "short-sleeve" RSA keys with polynomials blog.trailofbits.com blog.trailofbits.com

Automatic Key Exchange: post-quantum origin TLS without the HelloRetryRequest tax blog.cloudflare.com blog.cloudflare.com

September 23, 2026

pyca/cryptography: duplicate self-signed certs cause exponential path-building DoS github.com github.com

TLS 1.3 client skips server auth on unsolicited PSK (Erlang/OTP) github.com github.com

September 21, 2026

Fiat-Shamir bugs: how one missing line breaks a proof system blog.zksecurity.xyz blog.zksecurity.xyz

CVE-2026-6550: AWS Encryption SDK key-commitment cache bypass notcve.org notcve.org

CVE-2026-45446 writeup: missing cryptographic step rapid7.com rapid7.com

CVE-2026-45446: OpenSSL AES-SIV/GCM-SIV empty ciphertext forgery nvd.nist.gov nvd.nist.gov