| Personal website | https://pl.id.au |
| Open source software | https://gitlab.com/opentasmania |
| Professional services | https://sysrqassociates.net |
| Location | Trouwanna / lutruwita / Tasmania |
Regular PSA reminder:
While GnuPG 2.5.x implements hybrid PQC encryption based on ML-KEM, just like https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/, GnuPG's implementation is entirely incompatible with the IETF-specified format, which all other libraries are implementing.
Both serialization and the KEM combiners differ.
The bottom line is that anyone who wants to use vendor-agnostic PQC with OpenPGP should *avoid GnuPG's PQC key formats*.
This is all exceedingly unfortunate and weird, and frankly, a total disgrace.
This document defines a post-quantum public key algorithm extension for the OpenPGP protocol, extending RFC9580. Given the generally assumed threat of a cryptographically relevant quantum computer, this extension provides a basis for long-term secure OpenPGP signatures and ciphertexts. Specifically, it defines composite public key encryption based on ML-KEM (formerly CRYSTALS-Kyber), composite public key signatures based on ML-DSA (formerly CRYSTALS-Dilithium), both in combination with elliptic curve cryptography, and SLH-DSA (formerly SPHINCS+) as a standalone public key signature scheme.
I automatically like and favorite every single photograph friends post to commemorate first days of school, Halloween costumes, and graduations. It's automatic joy.
I was not prepared for the emotions getting a text and snapshot from the pet hospital that Edie made it through her last treatment.
You can bet I sent this photo to friends & fam through texts, and now I'm sharing it here.
RE: https://mastodon.world/@signalapp/116450550044121832
Apple's "bugs" "allowed" haha
Truly, A Great Day For Journalism
JP
Heiko
Chris Glass