Threats Tagged 'post-quantum cryptography'

A detailed technical analysis confirms that Kyber ransomware implements genuine hybrid post-quantum cryptography rather than mere branding. The Rust-based Windows variant encrypts files using AES-256-CTR with Kyber1024 and X25519 for key protection, appending a fixed 0x744-byte trailer containing encrypted metadata. Instrumented analysis validated the cryptographic implementation through fixture decryption but found no practical recovery path from the sample alone. The encryptor targets multiple file types, deploys standard recovery-inhibition techniques, and marks encrypted files with a .#~~~ extension. A separate ESXi variant was found to use different cryptography despite similar branding. As of April 2026, one victim was publicly listed: a large American defense contractor and IT services provider.

Signal has introduced Sparse Post-Quantum Ratchet (SPQR), a new cryptographic mechanism designed to enhance resistance against quantum computing attacks by integrating post-quantum key encapsulation with its existing double ratchet system. This hybrid 'Triple Ratchet' approach ensures forward secrecy and post-compromise security, with formal verification and continuous validation underpinning its implementation. The rollout will be gradual and backward compatible, requiring users only to keep their clients updated.