iiinova — where your digital self keeps evolving

Replies

Filippo Valsorda @filippo.abyssdomain.expert · 28/06/2026

Bernstein's main achievements, by decade: 1990s: Bernstein v. United States 2000s: ChaCha20, Poly1305, Curve25519, Ed25519 2010s: SPHINCS 2020s: sabotaging the post-quantum transition This is so f***ing frustrating. And sad. But mostly frustrating.

mailarchive.ietf.org

[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

Search IETF mail list archives

1111316

Matthew Green @matthewdgreen.bsky.social · 28/06/2026

You should talk to the attorneys who worked on the first case. There’s a reason he was self-represented the second time it went to court.

0221

Filippo Valsorda @filippo.abyssdomain.expert · 30/06/2026

There are now 18 "votes" on draft-ietf-tls-mlkem by people who never before emailed the WG, and without an In-Reply-To header (suggesting senders were not subscribed). 2 in favor vs. 16 against. The rest are 41 vs. 9. If this campaign by Bernstein is allowed, the IETF is just a popularity contest.

1202

イヴラド @kevinreddot.bsky.social · 28/06/2026

I am not part of the drama, but isn’t his argument that hybrid mlkem+ecdhe is better than mlkem alone given that mlkem is relatively new and given the recent sike and rainbow stories one should exercise caution? Am I wrong?

140

demimarie.bsky.social @demimarie.bsky.social · 27/08/2026

Also proposing Classic McEliece as the most conservative choice, only for it to not be as conservative as was thought: eprint.iacr.org/2026/1630, eprint.iacr.org/2026/1747, and eprint.iacr.org/2026/1786.

eprint.iacr.org

Quasipolynomial Cryptanalysis of the McEliece Cryptosystem (or: PIR Meets McEliece)

The McEliece code-based cryptosystem, utilizing binary Goppa codes, is the earliest public-key encryption scheme that is still considered post-quantum secure. We present a simple, classical quasipolyn...

010

Patrick O'Doherty @patrickod.com · 28/06/2026

don’t forget to add sheltering rapists from consequences.

070

Felladonna @langsec.hacker.gf · 28/06/2026

don't forget "procuring a doctorate for a plagiarist and rapist who isn't even competent to explain rsa without having his hand held", late 2010s/early 2020s

4231

Joseph Lorenzo Hall, PhD @josephhall.org · 28/06/2026

Thank you

020

Matt Blaze @mattblaze.org · 28/06/2026

This (speaking very broadly) has been very sad to watch over the last two decades.

080

apenwarr @apenwarr.ca · 28/06/2026

My observation about at least those 2000s contributions is that we all would have been better off if it hadn’t taken 15+ years of running in circles with the old stuff before we bought in. Also, he usually pushes for simpler things so it’s meaningful when he pushes for more complex things.

1110

X.25 @x25.bsky.social · 28/06/2026

Oh, is this the case of "never meet your heroes" finally happening to me? DJB has done incredible things in the past, I have admired him for decades. I have no idea what he is like in real life. Better not to look, I suppose? 🤪

100

l2dy @l2dy.bsky.social · 28/06/2026

I'm not a cryptographer, but aren't hybrids as secure as the post-quantum only version? If that is the case, the post-quantum transition can still happen with hybrids, right?

110