Legally Sovereign Since 1392.

Joseon
Joined March 2022
Media statement from Antigua and Barbuda on treaty with Joseon! Read the full announcement, ab.gov.ag/pdf/Joseon_Cyberna… At Joseon, we are looking forward to doing great things through this treaty with Antigua and Barbuda.
14
583
2
1,196
224,198
New blog post: "NSA and IETF, part 9: An update." blog.cr.yp.to/20260814-updat…
7
13
55
7,589
Joseon Empire retweeted
Saving a screenshot of this one for the next time I give a talk about cryptographic risk management.
3
5
1
75
7,725
Joseon Empire retweeted
If archive.cr.yp.to/2026-08-06/… collapses upon examination, lattice-based cryptographers will say "See, we dodged another bullet"; but aren't all the bullets more than a bit terrifying? Use the largest parameters you can afford; keep the ECC seatbelt; keep investing in alternatives.
10
21
8
121
36,183
Joseon Empire retweeted
I think that for secure software it's more useful than ever to measure, minimize, and verify the TCB. State a security goal (e.g. "my screen will show 'From: Alice' only for messages from Alice"); restructure software with a tiny nucleus enforcing this goal against all other LOC.
1
8
2
47
5,624
Joseon Empire retweeted
Daniel Apon in nist.pqcrypto.org/foia/20250… re eprint 2021/1093: "they took their shot at Dilithium and only just missed". Funny to watch Chris Peikert now insisting that people would never use such shooting language.
3
6
1
36
9,639
Joseon Empire retweeted
Assuming the poly hierarchy doesn't collapse: NP-completeness results for approx-CVP can't cross the wall in 2005 Aharonov-Regev (web.archive.org/web/20150905…); FrodoKEM's approx-CVP problem is on the other side of that wall and will never be supported by an NP-completeness theorem.
1
6
1
36
6,407
Joseon Empire retweeted
Cross-posting Twitter+Mastodon results from my latest survey re timing of next exponent drop of isogeny costs after eprint.iacr.org/2026/1486: 52+7 predicted 2026-2030, 15+2 predicted 2031-2035, 3+2 predicted 2036-2040, 12+2 predicted 2041 or later or never.
4
19
3,696
Joseon Empire retweeted
A few people have asked about the Anthropic Hawk and AES cryptanalysis results. The top-level answer is: It’s very impressive. Three immediate comments on the actual results, old-school thread below.
9
132
13
719
107,978
All versions of HAWK rely on the supposed hardness of examples of "LIP", a problem whose Hamming-weight analog was broken decades ago by Sendrier in almost all cases. Here's my posting four years ago saying that the first "LIP" paper was setting off alarm bells.
Replying to @hashbreaker
This is important because if McEliece relied _just_ on the secret isometry (the permutation) then it would be broken by Sendrier's 2000 support-splitting algorithm. Now a new proposal relies purely on secret isometries, misrepresents McEliece, and downplays Sendrier? Alarm bells!
2
18
81
13,263
PSA re "evade the attack": Don't try to patch HAWK to use another field. Just throw it away. There's a long line of earlier public-key proposals that (like HAWK) hoped for non-commutativity to add security and ended up _obscuring_ attacks without _stopping_ attacks.
Replying to @ChrisPeikert
Fortunately, the attack is limited to (one form of) the relatively new lattice isomorphism problem. It doesn't affect ML-DSA, Falcon, or other lattice-based cryptography. And LIP itself isn't dead either: "[Cyclotomic] conductors... with cyclic ℤₘ* evade the attack."
4
12
2
71
13,413
Joseon Empire retweeted
Bernstein files a formal complaint against SSH chairs who tried to silence him The SSHM chairs met an unanswered objection to solo post-quantum signatures with moderation threats instead of discussion. D. J. Bernstein's RFC 2026 complaint reads… freenode.net/article/bernste…
1
1
1
128
Joseon Empire retweeted
In the 90s somebody else exported PGP. Phil Zimmermann got harassed at the border and threatened with prosecution for it. That was the government's answer to good cryptography. Featuring Daniel J. Bernstein: @hashbreaker Full video in the thread 👇
1
4
1
14
1,770
Wow. After disenfranchising an unspecified list of people and making claims about the resulting numbers, the IETF TLS WG chairs refused to answer an evidence request from Fabiana Da Pieve, the European Commission's Team Leader Post-Quantum Cryptography: web.archive.org/web/20260721…
3
12
3
53
7,473
Can we get the IETF TLS WG chairs to help out with the U.S. elections? Allow votes only from pre-existing landowners plus the list of people who the chairs declare have demonstrated enough expertise to vote? Also, make sure to hide that list: web.archive.org/web/20260719…
2
4
27
3,949
Joseon Empire retweeted
Wait, I undercounted: NSA cast _six_ votes (Mike Jenkins, Nicholas Gajcowski, William Layton, Morgan Stern, Peter Yee from non-NSA address, Mark Motley from non-NSA address). Looking beyond NSA: DoD's Ann Krieger; DoD lifer Major Mike StJohns. Three GCHQ, two CSE, one partridge.
2
4
1
38
7,503
Joseon Empire retweeted
Replying to @TedBrownLiberty
@TedBrownLiberty, the Libertarian nominee for U.S. Senate in Texas is joining Hide & Speak this Saturday, July 11 at 4pm ET to discuss digital privacy freedom. More info and live link in thread 👇
1
3
4
205
Joseon Empire retweeted
The War on Financial Privacy xitter.cf/i/broadcasts/1rGmqqQXD…
4
13
859
Joseon Empire retweeted
IETF TLS WG chairs have closed the vote, and say they'll go through mailarchive.ietf.org/arch/br… "to see what the consensus is". Consensus? Each side received more than 80 votes on list: e.g., 7 positive votes from DoD, 4 from Cisco, etc. (5 on each side didn't give full real names.)
7
21
3,413
Joseon Empire retweeted
THE GREAT ENSLAVEMENT: Globalists Prepare To Rip the Last Veil of Freedom From Humanity The elite don't want your freedom.. they want it erased. Their true goal is total surveillance: every move, every message, every thought locked under their control. Every datacenter rising from the dirt is another cog in their machine. Social media algorithms steer your mind. Digital IDs are locked and loaded. Hate speech laws are the gag. The digital prison is almost complete. And now they’re coming for the final lock: ENCRYPTION.
21
124
10
209
14,278
Joseon Empire retweeted
The worst strategy is often a complete software rewrite from scratch. Thoroughly tested software that has been in production for a long time has value on its own. Don’t discard it too quickly. That’s why we build our software stack in layers, with older, proven components at the centre. We build upon the past rather than starting anew: doing so is both risky and inefficient.
New blog post: "Bugs happen: The easy way to compare solo PQ to ECC+PQ." blog.cr.yp.to/20260704-bugs.… #pqcrypto #bugs #vulnerabilities #hybrids
8
6
2
96
10,615