Scott Arciszewski
Summary: Trail of Bits published a series of posts by Scott Arciszewski, including a November 14, 2025 release of open-source Go implementations of the post-quantum signature schemes ML-DSA and SLH-DSA, and an April 23, 2026 release of Trailmark, a tool that turns source code into a security-analysis graph powering eight Claude Code skills. Earlier posts covered cloud cryptography services in Google Cloud Platform and AWS, and the announcement of AES-GEM, a new cipher mode addressing AES-GCM failures such as nonce misuse.
Bottom line: AES-GCM is one of two cipher modes used by TLS 1.3 and the preferred method for encrypting data in FIPS-validated modules, yet the post notes it has been the root cause of catastrophic failures, including nonce misuse exploited by Hanno Böck and Sean Devlin.
Read the original at Trail of Bits Blog ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026