Post-Quantum Signatures, Part 2: From Trees to Forests

Aptos Confidential APT encrypts balances and transfer amounts on mainnet, using Sigma and Bulletproof proofs so validators verify transitions without seeing amounts. Addresses stay visible.

Part 3 of the post-quantum series walks through FIPS 205: how SLH-DSA signs with FORS few-time signatures, authenticates them up a hypertree, and the concrete algorithm implementations must follow.

A lifecycle security analysis of Passkey Wallets: tracing one transaction through Clave's implementation, mapping WebAuthn, FIDO2, and CTAP flaws to each stage, plus checks for teams building one.

Trail of Bits explains Signal's Automatic Key Verification key-transparency system and describes the independent auditor it operates, one of three signers that make server key substitution detectable.

Trail of Bits released pure Rust and Go implementations of LMS, a NIST-standardized post-quantum signature scheme, integrating the Rust crate with RustCrypto and the Go library with Sigstore.

A primer on post-quantum cryptography for harvest-now-decrypt-later threat models, surveying lattice-, code-, isogeny-, and hash-based algorithm families.