Let’s All Agree to Use Seeds as ML-KEM Keys

Accumulated test vectors make it possible to run large sets of random known-answer tests without checking in large assets.

The FIPS compliance of HKDF is a somewhat confusing and controversial topic, partially because the normative reference is split over at least four separate documents, but in practice it’s approved for almost any purpose.

The age plugin system allows integrating third-party recipient types at the CLI level. A new framework makes it easy to implement plugins.

Announcing Geomys, a small firm of professional maintainers with a portfolio of critical Go projects.

XAES-256-GCM is a new AEAD extended-nonce algorithm designed for high-level APIs and FIPS 140 compliance.