Writing

Journal

The harvest-now, decrypt-later problem

Why traffic captured today should be treated as already compromised for any system relying on classical key exchange.

Six months of operating Dilithium signatures behind a high-throughput signing service. Latency, key sizes, and the things the spec doesn't tell you.

The post-quantum transition will not look like a launch. It will look like a decade of careful, boring work.

Highlights from three days of new sieving results, a surprising key-recovery paper, and the state of structured lattices.