logo
welcome
Ars Technica

Ars Technica

As quantum computing threats loom, Microsoft updates its core crypto library

Ars Technica
Summary
Nutrition label

87% Informative

SymCrypt is a cryptographic code library for handing cryptographic functions in Windows and Linux .

It's the main cryptographic library Microsoft uses in products and services including Azure , Microsoft 365, all supported versions of Windows , Azure Stack HCI , and Azure Linux .

The updates are the first steps in implementing a massive overhaul of encryption protocols that incorporate new algorithms that aren’t vulnerable to attacks from quantum computers.

These algorithms are useful in very specific contexts such as firmware signing, but are not suitable for more general uses. Monday ’s post said Microsoft will add additional post-quantum algorithms to SymCrypt in the coming months . They are ML-DSA , a lattice-based digital signature scheme, previously called Dilithium , and SLH-DSA , a stateless hash-based signature scheme previously called SPHINCS+. Both became NIST standards last month and are formally referred to as FIPS 204 and FIPS 205 ..