Security Cryptography Whatever

@durumcrustulum, @tqbf, @davidcadrian. “Freewheelin’ dynamic”.

[Security Cryptography Whatever @SCWpod]

NEW EPISODE!

The gang learns a bitter lesson about AI and bug finding! Returning champion Nicholas Carlini is back to talk about Claude for vulnerability research.

https://t.co/EKmiAoYBzX
https://t.co/WKFkhxAE1O

[thaidn @XorNinja]

@tqbf It is.

This bug is also fun: https://t.co/ajoUhHPrBB

Did you know that South Korea invented their own block cipher and managed to get it to wolfSSL? Their cipher implementation of GCM mode is horribly broken. Kim Jung Un would love this!

[Thomas H. Ptacek @tqbf]

THIS IS GOING JUST GREAT.

[Security Cryptography Whatever @SCWpod]

https://t.co/EKmiAoYBzX

[Security Cryptography Whatever @SCWpod]

You can check out co-lead of this report Nicholas Carlini detailing his approach to finding vulns with models like Mythos in our latest episode

[Anthropic @AnthropicAI]

You can read a detailed technical report on the software vulnerabilities and exploits discovered by Claude Mythos Preview here: https://t.co/AgU6ltV2qW

[Thomas H. Ptacek @tqbf]

If you visibly know what you're talking about, mic-dropping SIDH in conversations about MLKEM mostly signals that you have contempt for your audience, who you count on not to understand the distinction between isogenies and lattices.

[Thomas H. Ptacek @tqbf]

It would help a lot if people would stop name-dropping SIDH any time anybody talks about how well we understand MLKEM (the Euro-sourced NIST contest winner, which we understand *quite* well).

[Thomas H. Ptacek @tqbf]

This sounds obvious but I can't count how many people I've seen show up to say PQC is untrustworthy because SIDH was broken with a laptop. SIDH being broken says nothing about how safe/unsafe PQC is generally.

[Thomas H. Ptacek @tqbf]

PQC isn't like a design philosophy, like Feistel vs. SPNs or FFDH vs. ECDH. It's a property some constructions have that others don't, about perceived/believed resistance to QC.

[Thomas H. Ptacek @tqbf]

A thing you see over and over again in HN-type discussions of post-quantum cryptography is the implication that "post-quantum" is a kind of cryptography. No. PQC is a functional attribute of many different kinds of cryptography.

[Thomas H. Ptacek @tqbf]

Fun time to be working in information/software security. The field is going out with a bang! First AI, then an imminent CRQC. We need, like, a big SCADA event to hit the trifecta.

[Security Cryptography Whatever @SCWpod]

August 6, 2026.

[lcamtuf @lcamtuf]

Frankly, I'm appalled by the prospect of LLMs taking offensive security research jobs from honest, hard-working fuzzers

[Security Cryptography Whatever @SCWpod]

@ZTarantov @tqbf Thomas did you know we talked to Nicholas on the pod?

[Security Cryptography Whatever @SCWpod]

@tqbf @davidcrawshaw fixed, also found a bug in someone's link preview impl

[Thomas H. Ptacek @tqbf]

Yeah, so, I'm going to have more to say about this later, but, for now... yeah.

https://t.co/VVeiChX5QF

[David Adrian @dadrian]

@SCWpod chat is the vulnpocalypse real?

[David Adrian @dadrian]

NEW EPISODE! In retrospect, if adderall'd up college kids can find vulnerabilities, it not that surprising today's foundation models can to. We talk to Nicholas Carlini about the Vulnpocalypse.

https://t.co/hRzyWsKRR0

[Security Cryptography Whatever @SCWpod]

It was @tqbf!

[BrendanEich @BrendanEich]

https://t.co/lEfnjajXfP

Host (is it @tqbf) laughter at 28:19 cures cancer.

I joke CS is a karmic wheel but how did anyone now think imposing OSSL_PARAM at loss of C type checking was a good idea?

“It was not called PyRuby, it was called Topaz.”

Nextstep shoutout on point too.

[Security Cryptography Whatever @SCWpod]

https://t.co/QXsdpdhs2R

[Security Cryptography Whatever @SCWpod]

obviously you have to do a string compare to load a nonce key in openssl 3