# Cryptography Cryptography, or cryptology is the practice and study of techniques for secure communication in the presence of adversarial behavior. More generally, cryptography is about constructing and analyzing protocols that prevent third parties or the public from reading private messages. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Hackers Stole Flock's Camera Software, Revealing How the Company Tracks Cars and People DevFeed: [Hackers Stole Flock's Camera Software, Revealing How the Company Tracks Cars and People]() Original publisher: [Read original article]() Author: EditorDavid Published: 2026-09-17T16:04:00Z Content type: news Language: en Sources: [Slashdot]() Topics: [Computer vision](), [Encryption](), [Software](), [data](), [Cryptography]() Tags: [camera](), [encryption](), [flock](), [image](), [logs](), [net-11](), [people](), [privacy](), [software](), [vision]() ### AI overview A joint investigation analyzed data copied from a Flock roadway camera after hackers breached the device. The recovered files showed that its on-device software detects people, vehicles, license plates, bicycles, and some graphics, while logs documented extensive image generation and vehicle activity. ### Source excerpt "Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED," according to an article published on both sites. Though Flock has described its system as protected by on-device encryption, "The hackers were able to copy the camera's storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections." The hackers shared the material with 404 Media and the transparency nonprofit Distributed Denial of Secrets, which shared the data with WIRED. 404 Media and WIRED then analyzed those files as part of a joint investigation... [T]he joint analysis of the recovered data shows that software running on the device explicitly detects people as well as vehicles, license plates, and bicycles. The camera can produce dozens of images of a single passing vehicle and, according to several weeks of recovered logs, generated more than a million images. Its computer-vision software also sometimes isolated bumper stickers and other graphics, including, in one case, an American flag patch on a motorcyclist's saddlebag... According to our analysis, the camera's logs recorded about 21 days of activity across several periods. During those windows, the device photographed roughly 50,200 vehicles and generated about 1.6 million images. On a typical day, it logged around 3,300 vehicles, with a high of 4,454... The software running on the camera explicitly detects people, something which is typically overlooked in discussions around Flock cameras. When it spots a person, it records where they appear in the image and how confident it is in the detection. It was a collective calling itself stegan0gram that breached the cameras, according to the interview they did with Wired and 404 Media. "Why just destroy them when we can reverse engineer them and find the secrets of those spying on us?" Read more of this story at Slashdot. ## Encrypted /boot/ on LUKSv2 now possible in Libreboot GRUB (PHC argon2 imported) DevFeed: [Encrypted /boot/ on LUKSv2 now possible in Libreboot GRUB (PHC argon2 imported)]() Original publisher: [Read original article]() Author: Leah Rowe Published: 2026-09-17T04:32:50.666044Z Content type: news Language: en Sources: [News about Libreboot releases and development]() Topics: [Encryption](), [Cryptography](), [Kernel]() Tags: [bios](), [canoeboot](), [coreboot](), [encryption](), [free-software](), [grub](), [libre](), [libreboot](), [linux](), [linux-kernel](), [opensource](), [patches](), [releases](), [security](), [uefi](), [upgrade]() ### AI overview Libreboot's version of GRUB now supports Argon2 key derivation for encrypted LUKSv2 /boot partitions. The patches were rebased for GRUB 2.12, and support became available in Libreboot 20231021 and later releases. ### Source excerpt Article: Encrypted /boot/ on LUKSv2 now possible in Libreboot GRUB (PHC argon2 imported) Web link: https://libreboot.org/news/argon2.html ## FIPS 140-3 support in OpenSearch DevFeed: [FIPS 140-3 support in OpenSearch]() Original publisher: [Read original article]() Author: Karsten Schnitter Published: 2026-09-16T19:12:14Z Content type: article Language: en Sources: [OpenSearch]() Topics: [fips 140-3](), [opensearch](), [Cryptography](), [Encryption](), [Security]() Tags: [aws](), [blog](), [compliance](), [cryptography](), [encryption](), [fips](), [fips-140-3](), [opensearch](), [security](), [technical]() ### AI overview This post explains OpenSearch support for a FIPS 140-3-compliant mode starting with version 3.6. It describes the validated cryptographic modules used for security-relevant operations, the collaboration involving SAP, SAS, and AWS, and how native FIPS mode differs from using a FIPS-validated TLS-terminating proxy. ### Source excerpt OpenSearch now supports running in a mode compliant with FIPS 140-3, contributed through a multi-year collaboration between SAP, SAS, and AWS. The post FIPS 140-3 support in OpenSearch appeared first on OpenSearch. ## \[$\] Ways to encrypt data on servers DevFeed: [\[$\] Ways to encrypt data on servers]() Original publisher: [Read original article]() Author: jake Published: 2026-09-16T14:17:55Z Content type: article Language: en Sources: [LWN.net]() Topics: [Encryption](), [Server](), [Cryptography]() Tags: [2026](), [encryption](), [government](), [servers]() ### AI overview A report on Romeo Solano's FOSSY 2026 presentation about encrypting data on servers. It explains why remote systems without keyboard access during boot are harder to encrypt than laptops and discusses problems and possible solutions. ### Source excerpt At the 2026 edition of FOSSY, Romeo Solano gave a fast-paced, humorous presentation on what could have been a rather boring topic: server encryption. There are a number of threats that we face in today's world, from criminals, government overreach, espionage, and more, that can be thwarted with encryption. But encrypting data on a system that may live elsewhere, without any access to its keyboard at boot time, is rather more difficult than encrypting the disk of a laptop. Solano described the problems and gave a tour of some of the solutions in the talk. ## Java 27 Delivers Post-Quantum Cryptography, Future Language Innovation, Helidon 27, JavaFX 27 DevFeed: [Java 27 Delivers Post-Quantum Cryptography, Future Language Innovation, Helidon 27, JavaFX 27]() Original publisher: [Read original article]() Author: Michael Redlich Published: 2026-09-16T10:00:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [Java](), [java-27](), [Post-quantum cryptography](), [Cryptography](), [Security](), [Programming](), [releases]() Tags: [application-security](), [architecture-design](), [cryptography](), [development](), [digital-signature](), [helidon](), [java](), [java-27](), [java27-released](), [javafx](), [jdk-27](), [jdk-28](), [lattice](), [module](), [news](), [oracle](), [portfolio](), [post-quantum-cryptography](), [preview](), [project-valhalla](), [quantum-computing](), [release](), [security](), [structured-concurrency](), [vector]() ### AI overview Oracle released Java 27, the second non-LTS release since JDK 25. Its final feature set contains nine JEPs, including post-quantum hybrid key exchange for TLS 1.3, structured concurrency, compact object headers, JFR data redaction, the Vector API, and PEM encodings for cryptographic objects. Five features remain in preview or incubator stages. ### Source excerpt Oracle has released version 27 of the Java programming language and virtual machine. As the second non-LTS release since JDK 25, the final feature set includes nine JEPs, five of which are still progressing through the preview and incubator stages. This release focuses on strengthening security, future language innovation, and projects under the auspices of the Java Verified Portfolio. By Michael Redlich ## JDK 27 Security Enhancements DevFeed: [JDK 27 Security Enhancements]() Original publisher: [Read original article]() Author: Sean Mullan Published: 2026-09-16T00:00:00Z Content type: article Language: en Sources: [Inside Java]() Topics: [JDK 27](), [Security](), [Cryptography](), [Encryption](), [TLS (Transport Layer Security)](), [Post-Quantum](), [Release notes]() Tags: [certificates](), [cryptographic](), [encryption](), [jdk-27](), [notes](), [password](), [post-quantum](), [private-key](), [release-notes](), [security](), [tls]() ### AI overview This article reviews selected security enhancements in JDK 27, released on September 15, 2026. It highlights TLS 1.3 support for post-quantum hybrid key exchange mechanisms and the third preview of the PEM API for encoding and decoding cryptographic objects. ### Source excerpt JDK 27 was released on September 15, 2026! As with my previous blogs, I have compiled a list of what I think are the most interesting and useful security enhancements in this release. I have also grouped them into appropriate categories (crypto, TLS, etc) which should make it easier to find out what has changed in each specific area. The JDK 27 release notes also contain further details on these and other enhancements. ## JDK 27 Is Generally Available with Nine JEP-Backed Enhancements DevFeed: [JDK 27 Is Generally Available with Nine JEP-Backed Enhancements]() Original publisher: [Read original article]() Author: On September Published: 2026-09-15T00:00:00Z Content type: release Language: en Sources: [Inside Java]() Topics: [JDK 27](), [Java](), [Security](), [Cryptography](), [Quantum Computing]() Tags: [announce](), [cryptography](), [improvements](), [java](), [jdk](), [jdk-27](), [oracle](), [quantum](), [security]() ### AI overview Oracle announces the general availability of JDK 27, which includes nine enhancements covered by JDK Enhancement Proposals, including preview and incubator features across the Java language, security, performance, runtime, and libraries. ### Source excerpt JDK 27 is now available! Oracle is proud to announce the general availability of JDK 27 for developers, enterprises, and end-users. ## How WorkOS Vault's local encryption works DevFeed: [How WorkOS Vault's local encryption works]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [Encryption](), [Cryptography](), [Security](), [data]() Tags: [cryptographic](), [data](), [encryption](), [pii](), [security](), [token]() ### AI overview The article explains how WorkOS Vault performs local encryption using envelope encryption. Each operation uses a single-use data encryption key, which is protected by a key encryption key stored in a hardware security module. Sensitive plaintext and ciphertext remain within the customer's infrastructure; only the wrapped key is sent to WorkOS. Key contexts automatically select or create isolated keys for organizations or tenants, with support for customer-managed keys and documented limits on context size and key counts. ### Source excerpt Envelope encryption, data keys, and why your sensitive data never has to leave your infrastructure ## Zstd Improvement For Linux 7.4 To Avoid Redundant Initialization DevFeed: [Zstd Improvement For Linux 7.4 To Avoid Redundant Initialization]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-13T14:04:23Z Content type: news Language: en Sources: [Phoronix]() Topics: [Compression](), [Linux](), [Benchmark](), [Cryptography]() Tags: [benchmark](), [compression](), [crypto](), [desktop-linux](), [development](), [kernel](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [open-source-graphics](), [performance](), [phoronix](), [phoronix-test-suite](), [speed](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview The article reports Linux 7.4 patches that defer Zstd stream initialization until the first walk iteration, eliminating redundant initialization. Benchmarks show single-digit compression speed improvements and decompression speedups of 13% on bare metal or 35% in a virtual machine. ### Source excerpt In addition to Usama Arif's recent Linux patches for addressing a major inefficiency within the Linux kernel's Zstd compression code, he also has a separate patch series destined for Linux 7.4 to further enhance the Zstd compression/decompression performance by avoiding redundant initialization... ## One Decade of Rustls: Evolution, Benchmarks, and Future Roadmap DevFeed: [One Decade of Rustls: Evolution, Benchmarks, and Future Roadmap]() Original publisher: [Read original article]() Author: Olimpiu Pop Published: 2026-09-12T07:07:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [Cryptography](), [Security, Privacy and Abuse Prevention](), [interoperability](), [Refactoring]() Tags: [benchmarks](), [development](), [memory-leaks](), [memory-safety](), [news](), [open-source](), [performance](), [post-quantum](), [release](), [retrospective](), [rust](), [rustls-one-decade](), [security](), [tls]() ### AI overview Rustls marks its tenth anniversary with a retrospective on its growth, funding, security work, and performance. The article compares Rustls 0.23.37 with OpenSSL and BoringSSL and notes architectural changes planned for version 0.24. ### Source excerpt Rustls, a Rust TLS library, marks its decade-long progression from a grassroots project to a funded open-source initiative. Key contributions from organisations boosted development, resulting in features like post-quantum cryptography and robust performance. The upcoming 0.24 release aims to enhance architecture and flexibility, including new input buffering and improved session handling By Olimpiu Pop ## 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it DevFeed: [1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it]() Original publisher: [Read original article]() Author: Bas Westerbaan Published: 2026-09-10T13:00:00Z Content type: article Language: en Sources: [Cloudflare Blog]() Topics: [Cryptography]() Tags: [1-1-1-1](), [algorithms](), [cryptography](), [dns](), [dnssec](), [post-quantum](), [research](), [security](), [testing](), [tls](), [validation]() ### AI overview Cloudflare's 1.1.1.1 now validates DNSSEC signatures using the post-quantum ML-DSA-44 algorithm. The article discusses testing oversized DNS responses and preventing downgrade to conventional signatures while retaining compatibility with older resolvers. ### Source excerpt 1.1.1.1 now validates DNSSEC signatures using NIST's post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale. ## pg\_vault\_tde v1.7.1 : Transparent Data Encryption for PostgreSQL 17 and 18 DevFeed: [pg\_vault\_tde v1.7.1 : Transparent Data Encryption for PostgreSQL 17 and 18]() Original publisher: [Read original article]() Author: Miriade Srl Published: 2026-09-10T00:00:00Z Content type: release Language: en Sources: [PostgreSQL news]() Topics: [Encryption](), [Database](), [Cryptography]() Tags: [database](), [encryption](), [postgresql](), [release]() ### AI overview pg_vault_tde 1.7.1 adds transparent AES-256-GCM encryption for PostgreSQL 17 and 18, with externally managed keys and online per-table key rotation. It fixes AAD derivation for out-of-line TOAST values; data written by 1.7.0 or earlier must be exported before upgrading affected tables. ### Source excerpt pg_vault_tde provides Transparent Data Encryption for PostgreSQL 17 and 18. A table access method, encrypted_heap, encrypts every tuple with AES-256-GCM before it reaches the storage manager and decrypts it after it leaves, so applications require no changes. Keys are held outside the database: HashiCorp Vault or OpenBao through the Transit engine, a PKCS#11 token or HSM, or a local PKCS#12 wallet. Data encryption keys are per table and can be rotated online. Requirements are PostgreSQL 17 or 18, OpenSSL 3.x, and the library listed in shared_preload_libraries. The current release is 1.7.1. It corrects the AAD derivation for out-of-line TOAST values, with the consequence that TOAST data written by 1.7.0 or earlier does not authenticate under 1.7.1: affected tables must be exported before the new binary is installed. The procedure is documented in the README. pg_vault_tde is released under the PostgreSQL licence. Sources, documentation and binary .deb and .rpm packages are on GitHub; the distribution is on PGXN. ## A decade of Rustls DevFeed: [A decade of Rustls]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-09T18:11:54Z Content type: news Language: en Sources: [LWN.net]() Topics: [releases](), [Cryptography](), [Security, Privacy and Abuse Prevention]() Tags: [api](), [blog](), [compression](), [cryptography](), [performance](), [post-quantum](), [releases](), [tls]() ### AI overview A retrospective on ten years of the Rustls TLS-library project, covering its release history, the forthcoming 0.24 and eventual 1.0 releases, and features added in the stable 0.23 line. ### Source excerpt Joe Birr-Pixton has written a blog post reflecting on a decade of the Rustls TLS-library project and looking ahead to the upcoming 0.24 release and an eventual 1.0 release. Rustls began with a first commit on May 2, 2016. Progress was quick: a month later, on June 5, it could interoperate with most sites on the web. The first release, 0.1.0, followed on August 27, 2016 - less than four months after the first commit. [...] From the 0.1.0 release, the project moved through a long series of releases over the following eight years, building out functionality, hardening and refining the API. That sequence of release lines culminated in 0.23, released on February 29, 2024. The 0.23 release line has been a stable one: in the time since, it has seen 43 non-breaking releases. That stability didn't come with stagnation. The 0.23 line delivered a wide range of important features, including a FIPS-certified cryptography option, certificate compression, Encrypted ClientHello, post-quantum cryptography, and performance improvements. ## FIPS 140-2 vs FIPS 140-3, Explained DevFeed: [FIPS 140-2 vs FIPS 140-3, Explained]() Original publisher: [Read original article]() Author: info@goteleport.com (Mayur Pipaliya) Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [fips 140-3](), [FIPS validation](), [Cryptography](), [Encryption](), [certificates](), [Security](), [Cloud]() Tags: [certificates](), [cloud](), [cmvp](), [cryptography](), [encryption](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [security](), [sensitive-data]() ### AI overview This article explains the differences between FIPS 140-2 and FIPS 140-3, including the standards' origins, CMVP validation certificates, applicable requirements for protecting sensitive data, and the transition timeline through September 2026. ### Source excerpt Understand key changes from FIPS 140-2 to FIPS 140-3. ## Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting) DevFeed: [Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)]() Original publisher: [Read original article]() Author: Alex Krivit Published: 2026-09-08T13:10:00Z Content type: release Language: en Sources: [Cloudflare Blog]() Topics: [Cryptography](), [SSL](), [Latency](), [Encryption]() Tags: [application-security](), [application-services](), [cloudflare](), [encryption](), [latency](), [performance](), [post-quantum](), [research](), [ssl](), [tls]() ### AI overview Cloudflare announces Automatic Key Exchange, which probes TLS 1.3 origins for supported key-agreement algorithms and uses the preferred option on the first connection attempt. The rollout reduces HelloRetryRequests and handshake latency while automatically preferring post-quantum hybrid connections where supported. ### Source excerpt Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it. ## Updates on HEIR, the homomorphic encryption compiler project DevFeed: [Updates on HEIR, the homomorphic encryption compiler project]() Original publisher: [Read original article]() Published: 2026-09-04T18:53:40Z Content type: article Language: en Sources: [Jeremy Kun]() Topics: [homomorphic encryption](), [Compiler](), [Encryption](), [Cryptography](), [Machine learning](), [Inference](), [GitHub](), [bazel](), [Kaggle]() Tags: [bazel](), [ckks](), [compiler](), [cryptography](), [encryption](), [github](), [homomorphic-encryption](), [inference](), [kaggle](), [mathematics](), [ml](), [programming]() ### AI overview This companion article explains HEIR, a homomorphic encryption compiler that converts programs to operate directly on encrypted data. It discusses compiling pre-trained machine-learning models for private inference, describes the repository and setup, and reports an example involving encrypted credit-card fraud detection. ### Source excerpt On 2026-08-14 I published an article on the Google Security blog with an update on HEIR, our homomorphic encryption (HE) compiler. This is a companion article, in which I have no limits on word count or jargon, and I can feel free to be honest. So strap in. Assuming you won't read the linked corporate blog post, HEIR is a compiler that converts an input program to a program that operates directly on encrypted data. ## OSPAR 2026 report now available with 167 services in scope DevFeed: [OSPAR 2026 report now available with 167 services in scope]() Original publisher: [Read original article]() Author: James Chang Published: 2026-09-04T18:13:04Z Content type: news Language: en Sources: [AWS Security Blog]() Topics: [Security, Privacy and Abuse Prevention](), [Cryptography]() Tags: [amazon-web-services-aws](), [announcements](), [compliance](), [cryptography](), [financial-services](), [foundational-100](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS completed its annual OSPAR assessment under the OSPAR 2.0 framework. The certification covers 167 AWS services in the Asia Pacific (Singapore) Region and is intended to support customer compliance due diligence. ### Source excerpt We're pleased to confirm the successful completion of our annual Amazon Web Services (AWS) Outsourced Service Provider's Audit Report (OSPAR) assessment on July 29, 2026, in line with the OSPAR version 2.0 framework. The Association of Banks in Singapore (ABS) established the Guidelines on Control Objectives and Procedures for Outsourced Service Providers (ABS Guidelines) to [...] ## Crypto Agility: Why PQC Is Not a One-Time Upgrade DevFeed: [Crypto Agility: Why PQC Is Not a One-Time Upgrade]() Original publisher: [Read original article]() Author: Hugo Vliegen Published: 2026-09-03T15:00:56Z Content type: article Language: en Sources: [Security @ Cisco Blogs]() Topics: [Cryptography](), [networking](), [Network design](), [Vulnerabilities]() Tags: [cisco-sd-wan](), [cryptographic](), [cryptography](), [infrastructure](), [network-security](), [networks](), [post-quantum](), [quantum-computing](), [sd-wan-security](), [security](), [security-for-ai]() ### AI overview The article explains why crypto agility is essential for long-lived network infrastructure adopting post-quantum cryptography. It argues that organizations should design systems to update cryptography continuously as standards, threats, and implementations evolve. ### Source excerpt Learn why crypto agility is essential for PQC-ready networks--and how adaptable infrastructure helps organizations keep pace with evolving threats. ## SQLite Encryption in Production: Key Management, Migration, and Real-World Use Cases DevFeed: [SQLite Encryption in Production: Key Management, Migration, and Real-World Use Cases]() Original publisher: [Read original article]() Author: Jeff Olson Published: 2026-09-03T00:00:00Z Content type: tutorial Language: en Sources: [Turso Blog]() Topics: [SQLite](), [Encryption](), [migration](), [Cryptography](), [Turso]() Tags: [compliance](), [database](), [encryption](), [how-to](), [management](), [migration](), [production](), [security](), [sqlite](), [turso]() ### AI overview A practical guide to operating encrypted SQLite databases securely in production. It covers secure key generation and storage, Turso key encoding differences, migration and rotation constraints, and compliance considerations. ### Source excerpt Where to store keys, how to rotate them, how to migrate from SQLCipher or unencrypted SQLite, and what SOC2, HIPAA, and PCI-DSS auditors actually want to see. ## Encrypting SQLite Databases with Turso: Local, Cloud, and BYOK DevFeed: [Encrypting SQLite Databases with Turso: Local, Cloud, and BYOK]() Original publisher: [Read original article]() Author: Jeff Olson Published: 2026-09-02T00:00:00Z Content type: tutorial Language: en Sources: [Turso Blog]() Topics: [Turso](), [Encryption](), [SQLite](), [Cryptography](), [Databases]() Tags: [benchmark](), [cloud](), [code](), [database](), [encryption](), [local](), [open-source](), [rust](), [security](), [sqlite](), [turso]() ### AI overview A tutorial on Turso's native SQLite encryption and cloud BYOK model, covering key handling, architecture, code, and benchmarks. ### Source excerpt How Turso's two encryption models work in practice: native encryption in the Rust engine and BYOK on Turso Cloud, with working code and real benchmark numbers. ## Sites using PQC (September 2026) DevFeed: [Sites using PQC (September 2026)]() Original publisher: [Read original article]() Published: 2026-09-01T14:49:46Z Content type: article Language: en Sources: [Signs of Triviality]() Topics: [Post-quantum cryptography](), [Post-Quantum](), [TLS (Transport Layer Security)](), [Cryptography]() Tags: [2026](), [cryptography](), [post](), [post-quantum](), [post-quantum-cryptography](), [quantum](), [september-2026](), [sites](), [tls](), [top](), [using]() ### AI overview A periodic check examines which of the top 1 million domains support post-quantum cryptography in their TLS key exchange. ### Source excerpt One more periodic check of which of the top 1M domains support post-quantum cryptography in their TLS key exchange. ## SQLite Doesn't Come With Encryption. Here's What Developers Actually Use. DevFeed: [SQLite Doesn't Come With Encryption. Here's What Developers Actually Use.]() Original publisher: [Read original article]() Author: Jeff Olson Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Turso Blog]() Topics: [Encryption](), [SQLite](), [Cryptography](), [Operating system]() Tags: [database](), [developers](), [encryption](), [extension](), [os](), [security](), [sqlite](), [turso]() ### AI overview An overview of SQLite encryption options, page-level AEAD encryption, and the impact of SQLite removing the undocumented SQLITE_HAS_CODEC hook in version 3.32.0. ### Source excerpt A map of the SQLite encryption landscape: SQLCipher, SEE, SQLite3MultipleCiphers, and modern alternatives, plus how page-level AEAD encryption actually works. ## Provision a secure Amazon DocumentDB cluster with Terraform DevFeed: [Provision a secure Amazon DocumentDB cluster with Terraform]() Original publisher: [Read original article]() Author: Sourav Kundu Published: 2026-08-31T20:24:23Z Content type: tutorial Language: en Sources: [AWS Database Blog]() Topics: [Amazon DocumentDB](), [iac-security](), [Cryptography](), [passwords]() Tags: [advanced-300](), [amazon-cloudwatch](), [amazon-documentdb](), [amazon-vpc](), [authentication](), [encryption](), [infrastructure-as-code](), [monitoring](), [secrets](), [technical-how-to](), [terraform]() ### AI overview A walkthrough for provisioning a secure Amazon DocumentDB 8.0 cluster with Terraform. It applies infrastructure-as-code security controls including private VPC subnets, TLS, KMS encryption, secrets-managed passwords, security groups, and encrypted monitoring logs. ### Source excerpt Learn how to provision a secure Amazon DocumentDB cluster using Terraform. This post applies infrastructure-as-code best practices with encryption, AWS Secrets Manager authentication, network isolation, and encrypted monitoring. ## Announcing Chainguard container images for Go 1.27 DevFeed: [Announcing Chainguard container images for Go 1.27]() Original publisher: [Read original article]() Published: 2026-08-31T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Go Language](), [Cryptography](), [Deployment](), [Security, Privacy and Abuse Prevention](), [Post-Quantum]() Tags: [chainguard](), [container](), [container-images](), [cryptography](), [deployment](), [fedramp](), [fedramp-ato](), [fips](), [go](), [hardening](), [images](), [post-quantum](), [release]() ### AI overview Chainguard announces three Go 1.27 container images: go, go-fips, and go-openssl-fips. The options differ in their FIPS-validated cryptography, including whether cryptography is built in or selected at deployment time. ### Source excerpt Chainguard simplifies Go 1.27 with three images and a new option to choose FIPS-validated cryptography at deployment without recompiling. [Next page]()