#dataprotection Archives - Alireza Gharib Blog

January 6, 2025

Navigating the Future of Secure Code Signing and Cryptography

In today’s interconnected world, the integrity of software has never been more critical. With the increasing reliance on open-source components and the complexities introduced by containerized applications, ensuring trust in software has become a cornerstone of modern security practices. I […] The post Navigating the Future of Secure Code Signing and Cryptography appeared first on…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security, Security Awareness

#dataprivacy, #dataprotection, #pqc
January 6, 2025

CISO Challenges for 2025: Overcoming Cybersecurity Complexities

As organizations recognize the immense value and criticality of your data and systems, cybersecurity has become intrinsically linked to business strategy. Chief Information Security Officers (CISOs) are increasingly expected to play a central role in shaping business decisions, assessing and mitigating risks, and ensuring that security strategies align with overall business objectives. This requires a…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#data-security, #dataprivacy, #dataprotection, #iam
January 6, 2025

Post-Quantum Cryptography: The Implications of Google’s Willow and Other Quantum Computers for Cybersecurity

Quantum computing was long considered to be part of a distant future. However, it is quickly becoming a reality. Google’s recent announcement of its Willow quantum computing chip is a breakthrough generating significant media attention and questions about the implications for cybersecurity. Google’s Willow advancements are significant because of two major breakthroughs critical to the…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#dataprivacy, #dataprotection, #pki, #post-quantumcryptography, #public-keyinfrastructure, #quantumcomputing
January 6, 2025

China is Still Inside US Networks — It’s Been SIX Months

Hell froze over: FBI and NSA recommend you use strong encryption. The post China is Still Inside US Networks — It’s Been SIX Months appeared first on Security Boulevard.

CISA, Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, DevOps, Encryption, Security, Vulnerabilities

#analytics&intelligence, #china, #china-linkedhackers, #china-nexuscyberattacks, #china-nexuscyberespionage, #chinaespionage, #chinese, #chinesecyberespionage, #chinesehacker, #chinesehackers, #chinesehackinggroups, #chinesestate-sponsoredcyberattacks, #cloud-security, #crypto, #cyberlaw, #data-security, #dataencryption, #dataprivacy, #dataprotection, #datastolenbychina, #e2ee, #emailencryption, #end-to-end-encryption, #fbi, #ghostemperor, #governance,risk&compliance, #incidentresponse, #iot&icssecurity, #isps, #mobilesecurity, #networksecurity, #nsa, #salttyphoon, #salttyphooncyberattack, #social-facebook, #social-linkedin, #telecomnetworks, #threatintelligence, #threats&breaches, #unc2286
January 6, 2025

The Race is on to Solve the Quantum Computing Security Challenge

Quantum computing has long been a topic of intense research and debate, particularly regarding its potential impact on current cryptographic systems. The post The Race is on to Solve the Quantum Computing Security Challenge appeared first on Security Boulevard.

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security, Security Awareness

#cyber, #dataprivacy, #dataprotection, #quantumcomputing, #social-facebook, #social-linkedin, #threatintelligence
January 6, 2025

Simson Garfinkel on Spooky Cryptographic Action at a Distance

Excellent read. One example: Consider the case of basic public key cryptography, in which a person’s public and private key are created together in a single operation. These two keys are entangled, not with quantum physics, but with math. When I create a virtual machine server in the Amazon cloud, I am prompted for an…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#dataprivacy, #dataprotection, #quantumcryptography
January 6, 2025

Practical Advice for PQC Migration for TLS 1.3

Numerous blogs and articles are urging security professionals to start migrating to quantum-resistant algorithms immediately. This urgency was heightened on August 13, 2024, when NIST finalized the FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) standards. In this article, I present a simplified example of a client establishing a TLS 1.3 connection to…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#crypto-agility, #cryptographicsolutions, #dataprivacy, #dataprotection, #nist, #pki, #post-quantumcryptography, #pqc, #quantumcomputing, #tls1.3, #tlscertificate, #x.509certificates
January 6, 2025

What You Need to Know About “Harvest-Now, Decrypt-Later” Attacks

As quantum computing leapfrogs at great speed, the spotlight is now on post-quantum cryptography (PQC). Recently, NIST released the first three PQC encryption algorithm standards, urging organizations to test the new algorithms and prepare their cryptographic infrastructures for the inevitable shift to quantum-resistant methods. This push for PQC readiness is driven by a growing concern…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#certificatelifecyclemanagement(clm), #crypto-agility, #cryptographicbillofmaterials(cbom), #dataprivacy, #dataprotection, #pqc, #pqcencryptionalgorithmstandards, #pqcreadiness, #rsa
January 6, 2025

Friends don’t let friends reuse nonces

By Joe Doyle If you’ve encountered cryptography software, you’ve probably heard the advice to never use a nonce twice—in fact, that’s where the word nonce (number used once) comes from. Depending on the cryptography involved, a reused nonce can reveal encrypted messages, or even leak your secret key! But common knowledge may not cover every…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#dataprivacy, #dataprotection
January 6, 2025

Microsoft Is Adding New Cryptography Algorithms

Microsoft is updating SymCrypt, its core cryptographic library, with new quantum-secure algorithms. Microsoft’s details are here. From a news article: The first new algorithm Microsoft added to SymCrypt is called ML-KEM. Previously known as CRYSTALS-Kyber, ML-KEM is one of three post-quantum standards formalized last month by the National Institute of Standards and Technology (NIST). The…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#dataprivacy, #dataprotection, #microsoft, #quantumcomputing

Tag: #dataprotection