As announced on Tuesday, the OpenSSL project team released OpenSSL version 1.1.0c that addresses three security vulnerabilities in its software. The most serious of all is a heap-based buffer overflow bug (CVE-2016-7054) related to Transport Layer Security (TLS) connections using *-CHACHA20-POLY1305 cipher suites. The vulnerability, reported by Robert Święcki of Read more…
Russian spies claim they can now collect crypto keys but won’t say how Putin gave KGB’s successor agency two weeks to deal with encrypted services. Glynn Moody | Ars Technica Russia’s intelligence agency the FSB, successor to the KGB, has posted a notice on its website claiming that it now Read more…
Setting up encrypted communication by yourself is hard. If you’ve ever set up PGP for your email or implemented an off-the-record chat in Pidgin, you know that it can be a clunky, burdensome process. Thankfully, cryptographers are working to make it easier — and a new partnership will make it Read more…