Feeds2.Feedburner Apple Open-Sources Quantum-Resistant Cryptography Tools
Article Content
- •Apple has open-sourced quantum-resistant cryptographic implementations and verification tools.
- •The release includes ML-KEM and ML-DSA algorithms, affecting over 2.5 billion devices.
- •A hybrid verification approach was used, revealing critical bugs that conventional testing missed.
Apple has released quantum-resistant cryptographic code and verification tools to the public, enabling independent review and broader industry adoption. This release includes implementations of the ML-KEM and ML-DSA algorithms, integrated into Apple's corecrypto library, which supports over 2.5 billion devices. The formal verification process revealed critical bugs, including a missing computational step in the ML-DSA code that could have compromised digital signatures. Apple has utilized a hybrid approach, combining formal verification with conventional testing to enhance security. The tools aim to protect against future quantum computing threats to encryption. Apple began deploying this technology in iMessage in 2024 and has since expanded it to VPN services and TLS protocols. This initiative marks a significant step in post-quantum cryptography development.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…