Alexis Challande
Summary: Trail of Bits added post-quantum cryptography support to pyca/cryptography, the eleventh most-downloaded Python package on PyPI, making the quantum-resistant ML-KEM and ML-DSA algorithms available through a pip install for the Python ecosystem. The same author's other listed work includes improved YAML anchor support in zizmor tested against 41,253 real-world GitHub Actions workflows, and cutting PyPI's test suite runtime from 163 to 30 seconds.
Why it matters: Quantum-resistant algorithms now ship inside a package downloaded at PyPI's eleventh-highest volume, so the migration question reaches every Python codebase that depends on it - not just the ones with a cryptography team.
Read the original at Trail of Bits Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026