Last ̶c̶h̶a̶p̶t̶ tractate of my serialized novella, and the best one. I'll collect feedback, do more editing, and get it printed. The featured photo's mine. bfswa.substack.com/p/the-ninth-...

quick note on trustlessness and SPoFs bfswa.substack.com/p/trust-them...

2026 will bring more blockchain/quantum/AI scams, hacks, overvaluations, bankruptcies; VC psyops, trolls and bots, paid articles and endorsements. Meanwhile there wont be no... - "AGI" - useful/practical quantum computers - meaningful blockchain use beyond tokenization Like the past 10 years.

Imagine it’s 2013 and you see this document from the UK sent back from the future. You’ll assume something went very wrong in that timeline.

remember email bfswa.substack.com/p/poor-johnn...

#notcrypto bfswa.substack.com/p/music-sunday

they stole my idea for browncloud somewhere there is a click farm in indonesia looking at pictures of your turds and training an AI to judge your poop and apparently it is not ass-to-ass encrypted

Build your offensive security lab with 18 DRM-free books worth $700+. Download once, read anywhere, keep forever. Pay what you want (starting around $36) and support the EFF while you’re at it: https://www.humblebundle.com/books/hacking-no-starch-books

I was really thrilled to get to work on The WIRED Guide to Digital Opsec for Teens with @aumasson.jp. I think we did a good job but also apologies in advance to the teens that we tried to make jokes and generally Be Chill. Also no paywall to make it easier to share! www.wired.com/story/digita...

did that with @lhn.bsky.social

in 5 years bfswa.substack.com/p/when-will-...

The International Association for Cryptologic Research has used heliosvoting.org – my online voting system – for a number of years. This year, a trustee lost their secret key. The election has to be re-run. Below, a few thoughts that didn't fit in the NYT piece. www.nytimes.com/2025/11/21/w...

new blog post bfswa.substack.com/p/6-years-af...

Started a Substack. Subscribe for more crypto investment advice. bfswa.substack.com/p/quantum-co...

Stand with Condé Nast Union 🚨 We’re calling on you to sign our petition telling management to reinstate the Fired Four, reverse the suspensions, and end the union busting. Sign here: actionnetwork.org/petitions/te...

As Apple expands its bug bounty, I spoke with VP Ivan Krstić about the significance + recent big swings like Memory Integrity Enforcement. These steps protect all users, but particularly those targeted by spyware: “We feel a great moral obligation to defend those users” www.wired.com/story/apple-...

We've built ML-DSA-B, ML-DSA powered by BLAKE3 instead of SHAKE. Up to 20% faster signing, 30% faster verification, 60x pre-hash. Code & details: github.com/PQC-Suite-B With @zooko.bsky.social @aumasson.jp @conordeegan.bsky.social from Project Eleven

Thanks to the American University of Beirut for inviting me to talk about about quantum. Amazing audience, never had that many question. Even bigger thanks to @nadim.computer for making this happen and showing me great places in Lebanon. Slides: www.aumasson.jp/data/talks/A....

as you cancel disney subscriptions, please remember to support your favorite independent media. there are amazing people doing critical work with very little support, and things are only getting harder. here are some of my favorites: www.citationneeded.news/friends/. feel free to post yours below!

The impact of Alfred Menezes in cryptography is profound. Francisco RH and I are organizing an afternoon session in Latincrypt to celebrate Alfred's career: menezesfest.info If you're coming to Medellín, consider attending!

Stablecoin www.aumasson.jp/hoax/zerosta...

QKD www.aumasson.jp/hoax/qkd.pdf

RSA

"Cryptography makes everything a key management problem" is actually a profoundly optimistic statement.

It’s time to reveal the ZK Whiteboard S3 Module 1... because it's LIVE! 🥁🥁🥁🥁 How to Build Hash Functions, with Jean-Philippe (JP) Aumasson @aumasson.jp & @nicomnbl.bsky.social Watch the full module here: zkhack.dev/whiteboard/s...

Latest Security Liberation Front issue is out! slf.fish

www.lepoint.fr/high-tech-in... but, heh, 300 push-ups

🆕⚛️🔐 Starting with iOS 26, CryptoKit gets support for quantum-secure cryptography with algorithms such as ML-KEM, ML-DSA and HPKE with X-Wing: developer.apple.com/documentatio...

I wrote a bit more about X’s new encrypted DMs and the Juicebox protocol. blog.cryptographyengineering.com/2025/06/09/a...

what's your favorite FIPS 140-3 L2+ HSM?

One of the best things about Posting is you never know what obscure preoccupations your followers have. There will be a guy who has followed you for years and never said anything but then one day you disparage applesauce and he activates like a sleeper agent and dedicates his life to destroying you

TIL: microSD Express uses PCI Express, and is basically a miniature NVMe SSD in a microSD form factor. Up to 1GB/s speeds. This is really cool tech!

I missed that: South Korea standardized AIMer, a MPC-in-the-head signature scheme pqshield.com/south-korea-... kpqc.cryptolab.co.kr www.kpqc.or.kr/images/pdf/A...

Trump updated the PQC EO: www.whitehouse.gov/presidential...

My short story collection 𝐆𝐥𝐢𝐭𝐜𝐡𝐞𝐬 is now available as free EPUB/PDF, and still on Kindle, Apple, etc. Readers said it echoes Borges, Murakami (never read them), and DeLillo (never liked him). You judge. The last story pays homage to David Lynch. www.aumasson.jp/glitches/ind...

There's this joke primality testing library that claims 95% accuracy in O(1) time: github.com/mawerty/Is-P... It does so by always returning false. The density of primes between 1 and n approaches 1/ln(n). For a 32-bit int, 4.6% of values are prime, so the code is right 95.4% of the time. 🡇

periodic reminder about: github.com/veorq/awesom..., PRs and Issues are welcome

As I go through this book I’m trying to keep a list of recommendations for cryptographic engineers. It’s short so far, but I expect it’ll get longer as this goes on. Open to suggestions!

Blog post on implementing BLAKE3 inside Bitcoin Script. :-) bitvmx.org/knowledge/op...