Writing

Technical notes on post-quantum migration and AI agent safety, worked out to the byte.

ML-DSA certificate chains: the 184 bytes that break TLS handshakes

A three-certificate ML-DSA-65 chain comes to 16,568 bytes, and mbedTLS's default record buffer holds 16,384. The arithmetic byte by byte, why your CBOM won't flag it, and four fixes.

Read the note →