Third-party cyber evaluations involving OpenAI models
openai.com·13h ago
Security
Trail of Bits Blog·Jun 30·5 min read
Shipping post-quantum cryptography to Python
TL;DR
As quantum computers advance, existing cryptographic systems face potential threats, necessitating a shift to post-quantum cryptography. Support for ML-KEM and ML-DSA, key establishment and digital signature algorithms, has been integrated into the pyca/cryptography library.
✦ Why It Matters
Engineers can now implement post-quantum cryptography in Python applications to enhance security against future quantum threats.
Key Takeaways
- Upgrade to cryptography>=48 to access post-quantum algorithms.
- Understand the size and performance tradeoffs of ML-KEM and ML-DSA.
- Plan for protocol changes to accommodate larger key sizes.
- Stay informed about ongoing developments in post-quantum cryptography.
How It Works
ML-KEM is a key encapsulation mechanism that allows one party to encapsulate a shared secret for the other party to decapsulate, differing from traditional Diffie-Hellman exchanges. ML-DSA provides quantum-resistant digital signatures, replacing classical schemes like RSA and Ed25519.