Groups

pqc-forum

Contact owners and managers

1–30 of 1205

0 selected

C W, Alex Railean2

Apr 20

RFC - Claude Skill for Cryptographic Discovery — Seeking Feedback from the Community

Hi, Running this analysis with Anthropic's infrastructure and tools in the loop might not be

unread,

RFC - Claude Skill for Cryptographic Discovery — Seeking Feedback from the Community

Hi, Running this analysis with Anthropic's infrastructure and tools in the loop might not be

Apr 20

Hamilton Silberg

Apr 17

Call for comments: ipd SP 800-133r3 Recommendation for Cryptographic Key Generation

Hello all, The initial public draft (ipd) of NIST SP 800-133r3 (Revision 3), Recommendation for

unread,

Call for comments: ipd SP 800-133r3 Recommendation for Cryptographic Key Generation

Hello all, The initial public draft (ipd) of NIST SP 800-133r3 (Revision 3), Recommendation for

Apr 17

Scott Fluhrer (sfluhrer), … wa...@beullens.com7

Apr 15

Why does the UOV submission to NIST need a 16 byte salt in each signature?

I said "*If you don't care about side-channel or fault injection attacks*, then you can omit

unread,

Why does the UOV submission to NIST need a 16 byte salt in each signature?

I said "*If you don't care about side-channel or fault injection attacks*, then you can omit

Apr 15

marc.stoettinger2

Apr 15

MAgiCS 2026 – Workshop on Migration and Agility in Cryptographic Systems (co-located with EUROCRYPT 2026)

Dear all, we would like to invite you to MAgiCS26, the Workshop on Migration and Agility in

unread,

MAgiCS 2026 – Workshop on Migration and Agility in Cryptographic Systems (co-located with EUROCRYPT 2026)

Dear all, we would like to invite you to MAgiCS26, the Workshop on Migration and Agility in

Apr 15

Michele Battagliola5

Apr 15

Dear all, t is our pleasure to invite you to the 7th international workshop in code-based

unread,

Dear all, t is our pleasure to invite you to the 7th international workshop in code-based

Apr 15

Thom Wiggers, … Deirdre Connolly4

Apr 15

Re: [Pqc] IND-CPA *only* KEMs

Instead of tweaking the parameters for {M,R}LWE-schemes like Kyber and SABER or for NTRU-based

unread,

Re: [Pqc] IND-CPA *only* KEMs

Instead of tweaking the parameters for {M,R}LWE-schemes like Kyber and SABER or for NTRU-based

Apr 15

Apr 15

Invitation to AM-PQC Workshop on algebraic methods in post-quantum cryptography

Dear all, It is our pleasure to invite you to the Workshop on algebraic methods in post-quantum

unread,

Invitation to AM-PQC Workshop on algebraic methods in post-quantum cryptography

Dear all, It is our pleasure to invite you to the Workshop on algebraic methods in post-quantum

Apr 15

Apr 14

ML-DSA-65 in Production: Looking for Others Deploying FIPS 204

Introducing ourselves to the community. We're running ML-DSA-65 (FIPS 204) natively in a

unread,

ML-DSA-65 in Production: Looking for Others Deploying FIPS 204

Introducing ourselves to the community. We're running ML-DSA-65 (FIPS 204) natively in a

Apr 14

dustin...@nist.gov

Apr 13

Call for comments: ipd SP 800-230: Additional SLH-DSA Parameter Sets for Limited Signature Use Cases

All, NIST is seeking public comments on the initial public draft (ipd) of Special Publication (SP)

unread,

Call for comments: ipd SP 800-230: Additional SLH-DSA Parameter Sets for Limited Signature Use Cases

All, NIST is seeking public comments on the initial public draft (ipd) of Special Publication (SP)

Apr 13

John Mattsson, … dustin...@nist.gov31

Apr 13

FIPS 206 Status Update

Paul, We don't have a concrete release date for the draft of FIPS 206 yet, though we're

unread,

FIPS 206 Status Update

Paul, We don't have a concrete release date for the draft of FIPS 206 yet, though we're

Apr 13

Apr 9

Seeking feedback on a semantic fragmentation approach as a post-decryption reconstruction barrier for HNDL

Hi everyone, I'm a first-year CS and Applied Mathematics student at Trinity College, and I'm

unread,

Seeking feedback on a semantic fragmentation approach as a post-decryption reconstruction barrier for HNDL

Hi everyone, I'm a first-year CS and Applied Mathematics student at Trinity College, and I'm

Apr 9

Apr 7

In CROSS signature, why does chall1 need to be non-zero?

Hi, On page 10 of CROSS signature specification, it is required that "The verifier chooses a

unread,

In CROSS signature, why does chall1 need to be non-zero?

Hi, On page 10 of CROSS signature specification, it is required that "The verifier chooses a

Apr 7

John Mattsson, … alex miranda8

Apr 7

Lightweight Authenticated Key Exchange

Hi John, Bo, Yunlei, this is a very valuable comparison—especially in highlighting total message size

unread,

Lightweight Authenticated Key Exchange

Hi John, Bo, Yunlei, this is a very valuable comparison—especially in highlighting total message size

Apr 7

si...@hoerder.net, … Jeffrey Burdges4

Apr 2

Improved quantum attack on ECDSA from Google?

> On 2 Apr 2026, at 11:04, Marcel Tiepelt <marcel....@kit.edu> wrote: > > well, at

unread,

Improved quantum attack on ECDSA from Google?

> On 2 Apr 2026, at 11:04, Marcel Tiepelt <marcel....@kit.edu> wrote: > > well, at

Apr 2

Mar 29

PIQ applications for JWT, encryption

hi- Most of the threads in this forum covers deep technical details but if there's interest in

unread,

PIQ applications for JWT, encryption

hi- Most of the threads in this forum covers deep technical details but if there's interest in

Mar 29

Mar 29

5x Faster SPHINCS signing and keygen on CPU

Hi PQC forum, this is my first post here, so please go easy on me. I'm a freelance cryptographic

unread,

5x Faster SPHINCS signing and keygen on CPU

Hi PQC forum, this is my first post here, so please go easy on me. I'm a freelance cryptographic

Mar 29

Mar 24

HQC decryption with soft-decision RS decoder

Dear all, As you know, the decryption of HQC mainly consists of concatenated Reed-Muller (RM) and

unread,

HQC decryption with soft-decision RS decoder

Dear all, As you know, the decryption of HQC mainly consists of concatenated Reed-Muller (RM) and

Mar 24

Mar 24

Crucible: open-source conformance testing framework for ML-KEM and ML-DSA

Hi everyone, We at Symbolic Software are today releasing Crucible, an open-source conformance testing

unread,

Crucible: open-source conformance testing framework for ML-KEM and ML-DSA

Hi everyone, We at Symbolic Software are today releasing Crucible, an open-source conformance testing

Mar 24

Hiroshi Amagasa2

Mar 23

QR-UOV performance data and supplementary evaluation

Dear all, Following up on our previous message regarding QR-UOV performance, we would like to share a

unread,

QR-UOV performance data and supplementary evaluation

Dear all, Following up on our previous message regarding QR-UOV performance, we would like to share a

Mar 23

Ivana Trummová

Mar 16

Join Our Research! Migration to PQC in Organizations

Dear PQC forum participants, In collaboration with my colleagues from CISPA in Hannover, Germany (

unread,

Join Our Research! Migration to PQC in Organizations

Dear PQC forum participants, In collaboration with my colleagues from CISPA in Hannover, Germany (

Mar 16

John Mattsson, … Bo Lin9

Mar 1

High‑level comments on additional signature schemes

I agree with Bas' points, especially on the importance of post-quantum zero-knowledge proofs, the

unread,

High‑level comments on additional signature schemes

I agree with Bas' points, especially on the importance of post-quantum zero-knowledge proofs, the

Mar 1

Nidhi Damodaran, Dimitri John Ledkov3

Mar 1

Handling the combinatorial explosion of SP 800-227 KDFs and Combiners

Thanks for the links clarifying the rigid pairs for TLS/SSH, and apologies for the confusion

unread,

Handling the combinatorial explosion of SP 800-227 KDFs and Combiners

Thanks for the links clarifying the rigid pairs for TLS/SSH, and apologies for the confusion

Mar 1

Hung Le, Po-En Tseng2

Feb 25

Round 2 (Additional Signatures) OFFICIAL COMMENT: SNOVA

Dear all, First, we would like to sincerely thank Hung Le, Maxime Bros, Jacob Lichtinger, Brice

unread,

Round 2 (Additional Signatures) OFFICIAL COMMENT: SNOVA

Dear all, First, we would like to sincerely thank Hung Le, Maxime Bros, Jacob Lichtinger, Brice

Feb 25

Feb 23

MaGIC workshop on Group Actions in Cryptography

Dear PQC forum, It is our pleasure to invite you to participate to the MaGIC workshop, the Marche (/

unread,

MaGIC workshop on Group Actions in Cryptography

Dear PQC forum, It is our pleasure to invite you to participate to the MaGIC workshop, the Marche (/

Feb 23

Bo Lin, … Kris Kwiatkowski6

Feb 21

A technical note on FIPS 204 ML-DSA

Thanks, Devi. Glad it's helpful. Other community members also replied to you. That's very

unread,

A technical note on FIPS 204 ML-DSA

Thanks, Devi. Glad it's helpful. Other community members also replied to you. That's very

Feb 21

Feb 19

Cryptanalysis on UOV and its Variants

Dear all, In our recent work, we propose a new key-recovery framework for UOV by generalizing the

unread,

Cryptanalysis on UOV and its Variants

Dear all, In our recent work, we propose a new key-recovery framework for UOV by generalizing the

Feb 19

Feb 17

Dear PQC community, we are happy to announce CASCADE 2026. The conference takes place from March 30

unread,

Dear PQC community, we are happy to announce CASCADE 2026. The conference takes place from March 30

Feb 17

D P, … Stephan Mueller10

Feb 13

Reference implementation for SPHINCS+ based on latest NIST FIPS drafts

Am Mittwoch, 11. Februar 2026, 17:10:30 Mitteleuropäische Normalzeit schrieb 'Scott Fluhrer (

unread,

Reference implementation for SPHINCS+ based on latest NIST FIPS drafts

Am Mittwoch, 11. Februar 2026, 17:10:30 Mitteleuropäische Normalzeit schrieb 'Scott Fluhrer (

Feb 13

Michele Battagliola

Feb 3

LEAST Preview - NIST MPTS 2026

Dear all, Last week we presented a preview of our planned submission LEAST at NIST Workshop on Multi-

unread,

LEAST Preview - NIST MPTS 2026

Dear all, Last week we presented a preview of our planned submission LEAST at NIST Workshop on Multi-

Feb 3

Loganaden Velvindron, … Thomas Pornin13

Jan 28

ML-DSA implementation CVE CVE-2026-22705

Note that compilers have long had the habit of implementing divisions by a compile-time constant

unread,

ML-DSA implementation CVE CVE-2026-22705

Note that compilers have long had the habit of implementing divisions by a compile-time constant

Jan 28

Search

Clear search

Close search

Google apps

Main menu