Filippo Valsorda

The NIST Elliptic Curves Seeds Bounty Has Been Claimed

(Post-Quantum) Cryptographic Right Answers

Production ML-DSA Verification in 350 Lines of Python

Opaque, Interoperable Passkey Records (and a Go API)

Vulnerability Reports Are Not Special Anymore

Quantum Computers Are Not a Threat to 128-bit Symmetric Keys

A Cryptography Engineer’s Perspective on Quantum Computing Timelines

Turn Dependabot Off

Inspecting the Source of Go Modules

go.sum Is Not a Lockfile

Building a Transparent Keyserver

The 2025 Go Cryptography State of the Union

Claude Code Can Debug Low-level Cryptography

The Geomys Standard of Care

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

Maintainers of Last Resort

Cross-Site Request Forgery

Go Assembly Mutation Testing

Encrypting Files with Passkeys and age

You Should Run a Certificate Transparency Log

Benchmarking RSA Key Generation

frood, an Alpine initramfs NAS

Accumulated Test Vectors

The FIPS Compliance of HKDF

Let’s All Agree to Use Seeds as ML-KEM Keys