<?xml version="1.0" encoding="UTF-8" ?><rss version="2.0">
  <channel>
    <title>Pascal Schärli (Briefs)</title>
    <link>https://schaerli.org</link>
    <description>Hi, I'm Pascal. A cyber security master's graduate from ETH Zürich, now a dedicated Cryptography Engineer with a strong passion for coding and scripting.</description>
    <language>en-us</language>
    <lastBuildDate>Thu, 05 Nov 2026 21:57:34 GMT</lastBuildDate>

    <item>
      <title>Signal adds Key Transparency</title>
      <link>https://schaerli.org/briefs/signal-key-transparency/</link>
      <description>Signal Messenger just added Key Transparency (KT) for automatic key verification. It&apos;s good but a bit timid. I&apos;m comparing their KT with the one used by Proton, where I disclosed some weaknesses earlier this year.</description>
      <pubDate>Mon, 17 Aug 2026 15:22:45 GMT</pubDate>
      <guid>https://schaerli.org/briefs/signal-key-transparency/</guid>
    </item>
    <item>
      <title>33 Months to Q-Day</title>
      <link>https://schaerli.org/briefs/q-day-timeline/</link>
      <description>The Post-Quantum cryptography timeline of industry leaders just went from &quot;we have a decade&quot; to &quot;we have 33 months.&quot; Both Google and Cloudflare are now targeting 2029 for full post-quantum security, including authentication, not just encryption.</description>
      <pubDate>Tue, 07 Apr 2026 19:53:43 GMT</pubDate>
      <guid>https://schaerli.org/briefs/q-day-timeline/</guid>
    </item>
    <item>
      <title>What Comes After X.509</title>
      <link>https://schaerli.org/briefs/merkle-tree-certificates/</link>
      <description>X.509 certificates have run the web for three decades. Quantum computers might be what finally kills them. Google announces they don&apos;t have immediate plans to add support for post-quantum secure X.509 certificates in Chrome in favor of a newer standard.</description>
      <pubDate>Fri, 27 Feb 2026 21:47:49 GMT</pubDate>
      <guid>https://schaerli.org/briefs/merkle-tree-certificates/</guid>
    </item>
    <item>
      <title>When Giants Use Toothpicks</title>
      <link>https://schaerli.org/briefs/when-giant-use-toothpicks/</link>
      <description>Fireblocks is a digital asset custody platform, protecting trillions of dollars. During a security review at work I found how they protect their 4096-bit RSA &apos;disaster recovery&apos; keys for customers with 2 rounds of MD5.</description>
      <pubDate>Thu, 03 Jul 2025 20:50:38 GMT</pubDate>
      <guid>https://schaerli.org/briefs/when-giant-use-toothpicks/</guid>
    </item>
    <item>
      <title>ETH Study Materials</title>
      <link>https://schaerli.org/briefs/eth-study-materials/</link>
      <description>Welcome to my collection of ETH Zürich study materials. As a former tutor at ETH, I&apos;ve created resources for two Computer Science courses in the Electrical Engineering and Mechanical Engineering bachelor programs.</description>
      <pubDate>Tue, 01 Dec 2020 23:00:32 GMT</pubDate>
      <guid>https://schaerli.org/briefs/eth-study-materials/</guid>
    </item>
  </channel>
</rss>