密码学咨询机构Latacora发布了2026年密码学最佳实践更新指南，针对开发者提出了一系列密钥加密和身份验证的推荐方案1。该指南强调了后量子密码学过渡需在2029年前完成的时间要求1。
根据更新的建议，对称加密方面推荐使用XAES-256-GCM或XChaCha20Poly1305，超过几MB的数据则使用Cobblestone-1281。密钥交换采用X25519+ML-KEM-768（也称X-Wing）作为安全标准协议中的首选方案1，而数字签名则推荐ML-DSA-441。非对称加密方面建议使用HPKE with MLKEM768-X25519，或带后量子密钥的age工具1。此外，指南建议使用内存安全的TLS库如rustls、Go的crypto/tls、BoringSSL、AWS-LC或s2n-tls替代OpenSSL1。
在密码处理层面，指南推荐采用Argon2id或scrypt算法，参数设置为m=64 MiB、t=2、p=11。对称签名采用HMAC-SHA-2561，哈希算法方面SHA-2仍可使用，但SHA-512/256为最佳选择1。随机ID应采用32个随机字节（256位）生成1。指南预测2026年将出现新变化，即大语言模型能有效发现密码学代码中的漏洞1。
Latacora, a cryptographic advisory organization, has released an updated guide on cryptographic best practices for developers, with a critical focus on completing the transition to post-quantum cryptography by 2029 1. The updated recommendations reflect evolving security standards and anticipated future threats.
For symmetric encryption, the guide recommends XAES-256-GCM or XChaCha20Poly1305 for most use cases, with Cobblestone-128 suggested for data exceeding several megabytes 1. Key exchange operations should employ X25519+ML-KEM-768, also known as X-Wing, within security-standard protocols 1. Digital signatures are to be implemented using ML-DSA-44, while asymmetric encryption should utilize HPKE with MLKEM768-X25519 or age with post-quantum keys 1. For password hashing, the guide specifies Argon2id or scrypt with parameters of m=64 MiB, t=2, and p=1 1.
The guidance extends to infrastructure choices as well. Developers are advised to adopt memory-safe TLS libraries including rustls, Go's crypto/tls, BoringSSL, AWS-LC, and s2n-tls, while OpenSSL is not recommended 1. For symmetric authentication, HMAC-SHA-256 remains the standard, and SHA-2 continues to be acceptable for hashing purposes, though SHA-512/256 is identified as optimal 1. Random identifiers should consist of 32 random bytes, or 256 bits 1. A notable addition to the 2026 update indicates that large language models are becoming effective at discovering vulnerabilities in cryptographic code 1.
评论
还没有评论，欢迎留下第一条。