# Encryption The process of changing plaintext into ciphertext using a cryptographic algorithm and key. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Article: Architecting Secure and Scalable Facial Verification Systems DevFeed: [Article: Architecting Secure and Scalable Facial Verification Systems]() Original publisher: [Read original article]() Author: Praveen Kumar Gopalakrishnan Published: 2026-09-18T09:00:00Z Content type: article Language: en Sources: [InfoQ]() Topics: [distributed-systems](), [systems](), [Computer vision](), [scaling](), [Concurrency](), [Zero Trust](), [API](), [Data Quality](), [client](), [Access Control](), [Latency](), [Encryption]() Tags: [access-control](), [ai](), [ai-ml-data-engineering](), [architecture](), [architecture-design](), [article](), [cloud](), [computer-vision](), [concurrency](), [data-quality](), [development](), [devops](), [distributed-systems](), [encryption](), [latency](), [ml-data-engineering](), [risk](), [scaling](), [secure-scalable-facial-verification](), [security](), [systems](), [zero-trust]() ### AI overview This article presents a four-layer architecture for high-volume facial verification, covering client-side data validation, asynchronous processing, decoupled detection and verification, risk-based thresholds, and zero-trust handling of personal data. ### Source excerpt When three thousand employees verify at once, synchronous API calls collapse. This article presents a four-layer architecture for high-volume face verification: client-side filtering that cut cloud costs 30%, decoupled detection and verification enabling 10x scaling, risk-based dynamic thresholds, and zero-trust privacy with consent gates and automated data purging for GDPR and HIPAA. By Praveen Kumar Gopalakrishnan ## Flock cameras are tracking people as well as cars DevFeed: [Flock cameras are tracking people as well as cars]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-17T18:46:12Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [Network](), [Encryption](), [data]() Tags: [data](), [encrypted](), [encryption](), [flock](), [network](), [news](), [privacy](), [surveillance](), [tracking]() ### AI overview Reports found that Flock Safety cameras' on-device software detects people as well as vehicles, bicycles, and license plates. Recovered camera data also raised concerns about encryption, broad access, and the potential for vehicle tracking to become person-based tracking. ### Source excerpt Two reports reveal how Flock's license plate camera network tracks people's movements while oversight continues to lag. ## Hackers Stole Flock's Camera Software, Revealing How the Company Tracks Cars and People DevFeed: [Hackers Stole Flock's Camera Software, Revealing How the Company Tracks Cars and People]() Original publisher: [Read original article]() Author: EditorDavid Published: 2026-09-17T16:04:00Z Content type: news Language: en Sources: [Slashdot]() Topics: [Computer vision](), [Encryption](), [Software](), [data](), [Cryptography]() Tags: [camera](), [encryption](), [flock](), [image](), [logs](), [net-11](), [people](), [privacy](), [software](), [vision]() ### AI overview A joint investigation analyzed data copied from a Flock roadway camera after hackers breached the device. The recovered files showed that its on-device software detects people, vehicles, license plates, bicycles, and some graphics, while logs documented extensive image generation and vehicle activity. ### Source excerpt "Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED," according to an article published on both sites. Though Flock has described its system as protected by on-device encryption, "The hackers were able to copy the camera's storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections." The hackers shared the material with 404 Media and the transparency nonprofit Distributed Denial of Secrets, which shared the data with WIRED. 404 Media and WIRED then analyzed those files as part of a joint investigation... [T]he joint analysis of the recovered data shows that software running on the device explicitly detects people as well as vehicles, license plates, and bicycles. The camera can produce dozens of images of a single passing vehicle and, according to several weeks of recovered logs, generated more than a million images. Its computer-vision software also sometimes isolated bumper stickers and other graphics, including, in one case, an American flag patch on a motorcyclist's saddlebag... According to our analysis, the camera's logs recorded about 21 days of activity across several periods. During those windows, the device photographed roughly 50,200 vehicles and generated about 1.6 million images. On a typical day, it logged around 3,300 vehicles, with a high of 4,454... The software running on the camera explicitly detects people, something which is typically overlooked in discussions around Flock cameras. When it spots a person, it records where they appear in the image and how confident it is in the detection. It was a collective calling itself stegan0gram that breached the cameras, according to the interview they did with Wired and 404 Media. "Why just destroy them when we can reverse engineer them and find the secrets of those spying on us?" Read more of this story at Slashdot. ## Encrypted /boot/ on LUKSv2 now possible in Libreboot GRUB (PHC argon2 imported) DevFeed: [Encrypted /boot/ on LUKSv2 now possible in Libreboot GRUB (PHC argon2 imported)]() Original publisher: [Read original article]() Author: Leah Rowe Published: 2026-09-17T04:32:50.666044Z Content type: news Language: en Sources: [News about Libreboot releases and development]() Topics: [Encryption](), [Cryptography](), [Kernel]() Tags: [bios](), [canoeboot](), [coreboot](), [encryption](), [free-software](), [grub](), [libre](), [libreboot](), [linux](), [linux-kernel](), [opensource](), [patches](), [releases](), [security](), [uefi](), [upgrade]() ### AI overview Libreboot's version of GRUB now supports Argon2 key derivation for encrypted LUKSv2 /boot partitions. The patches were rebased for GRUB 2.12, and support became available in Libreboot 20231021 and later releases. ### Source excerpt Article: Encrypted /boot/ on LUKSv2 now possible in Libreboot GRUB (PHC argon2 imported) Web link: https://libreboot.org/news/argon2.html ## FIPS 140-3 support in OpenSearch DevFeed: [FIPS 140-3 support in OpenSearch]() Original publisher: [Read original article]() Author: Karsten Schnitter Published: 2026-09-16T19:12:14Z Content type: article Language: en Sources: [OpenSearch]() Topics: [fips 140-3](), [opensearch](), [Cryptography](), [Encryption](), [Security]() Tags: [aws](), [blog](), [compliance](), [cryptography](), [encryption](), [fips](), [fips-140-3](), [opensearch](), [security](), [technical]() ### AI overview This post explains OpenSearch support for a FIPS 140-3-compliant mode starting with version 3.6. It describes the validated cryptographic modules used for security-relevant operations, the collaboration involving SAP, SAS, and AWS, and how native FIPS mode differs from using a FIPS-validated TLS-terminating proxy. ### Source excerpt OpenSearch now supports running in a mode compliant with FIPS 140-3, contributed through a multi-year collaboration between SAP, SAS, and AWS. The post FIPS 140-3 support in OpenSearch appeared first on OpenSearch. ## \[$\] Ways to encrypt data on servers DevFeed: [\[$\] Ways to encrypt data on servers]() Original publisher: [Read original article]() Author: jake Published: 2026-09-16T14:17:55Z Content type: article Language: en Sources: [LWN.net]() Topics: [Encryption](), [Server](), [Cryptography]() Tags: [2026](), [encryption](), [government](), [servers]() ### AI overview A report on Romeo Solano's FOSSY 2026 presentation about encrypting data on servers. It explains why remote systems without keyboard access during boot are harder to encrypt than laptops and discusses problems and possible solutions. ### Source excerpt At the 2026 edition of FOSSY, Romeo Solano gave a fast-paced, humorous presentation on what could have been a rather boring topic: server encryption. There are a number of threats that we face in today's world, from criminals, government overreach, espionage, and more, that can be thwarted with encryption. But encrypting data on a system that may live elsewhere, without any access to its keyboard at boot time, is rather more difficult than encrypting the disk of a laptop. Solano described the problems and gave a tour of some of the solutions in the talk. ## AMD Sends Out Linux Patches For Enabling SEV-TIO TDISP With PCIe 6.0 DevFeed: [AMD Sends Out Linux Patches For Enabling SEV-TIO TDISP With PCIe 6.0]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-16T13:02:52Z Content type: news Language: en Sources: [Phoronix]() Topics: [Linux Kernel](), [pcie](), [trusted-execution-environment](), [Confidential Computing](), [virtualization](), [Security](), [Encryption](), [MERN]() Tags: [amd](), [arm](), [attestation](), [confidential-computing](), [cpu](), [desktop-linux](), [encryption](), [intel](), [kernel](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-kernel](), [linux-performance](), [linux-server-benchmarks](), [open-source-graphics](), [pcie](), [phoronix](), [phoronix-test-suite](), [processors](), [risc-v](), [security](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview AMD submitted 17 Linux kernel patches to enable SEV-TIO TDISP for PCIe 6.0 and newer. The work is intended to secure direct I/O device assignment for confidential-computing environments, including AMD Secure Encrypted Virtualization guest VMs, and includes a common TEE Security Manager developed with Intel, Arm, and RISC-V. ### Source excerpt The newest Linux kernel patches out of AMD for enhancing the upstream support with the new AMD EPYC 9006 "Venice" processors is for enabling SEV-TIO TDISP that is supported with PCI Express 6.0 and beyond... ## ESPHome 2026.9.0: Faster builds and encrypted updates DevFeed: [ESPHome 2026.9.0: Faster builds and encrypted updates]() Original publisher: [Read original article]() Author: Jesse Hills Published: 2026-09-16T00:00:00Z Content type: release Language: en Sources: [ESPHome - Smart Home Made Simple - Blog]() Topics: [esphome](), [PlatformIO](), [ESP8266](), [Encryption](), [build performance](), [ChaCha](), [toolchain](), [Home Assistant]() Tags: [2026](), [benchmarks](), [builds](), [ci](), [encryption](), [esp32](), [esp8266](), [esphome](), [ota](), [parallel](), [releases](), [toolchain](), [updates]() ### AI overview ESPHome 2026.9.0 improves build performance by parallelizing PlatformIO setup, lays groundwork for a native ESP8266 toolchain, adds Noise-encrypted OTA updates, and reduces ESP8266 RAM usage. The release also includes component additions, platform updates, and fixes. ### Source excerpt ESPHome 2026.9.0 parallelizes PlatformIO installs, lays the groundwork for a native ESP8266 toolchain, adds Noise-encrypted OTA updates, and frees ESP8266 RAM. ## JDK 27 Security Enhancements DevFeed: [JDK 27 Security Enhancements]() Original publisher: [Read original article]() Author: Sean Mullan Published: 2026-09-16T00:00:00Z Content type: article Language: en Sources: [Inside Java]() Topics: [JDK 27](), [Security](), [Cryptography](), [Encryption](), [TLS (Transport Layer Security)](), [Post-Quantum](), [Release notes]() Tags: [certificates](), [cryptographic](), [encryption](), [jdk-27](), [notes](), [password](), [post-quantum](), [private-key](), [release-notes](), [security](), [tls]() ### AI overview This article reviews selected security enhancements in JDK 27, released on September 15, 2026. It highlights TLS 1.3 support for post-quantum hybrid key exchange mechanisms and the third preview of the PEM API for encoding and decoding cryptographic objects. ### Source excerpt JDK 27 was released on September 15, 2026! As with my previous blogs, I have compiled a list of what I think are the most interesting and useful security enhancements in this release. I have also grouped them into appropriate categories (crypto, TLS, etc) which should make it easier to find out what has changed in each specific area. The JDK 27 release notes also contain further details on these and other enhancements. ## New in Symfony 8.2: KeyManagement Component DevFeed: [New in Symfony 8.2: KeyManagement Component]() Original publisher: [Read original article]() Author: Javier Eguiluz Published: 2026-09-15T07:11:00Z Content type: release Language: en Sources: [Symfony Blog]() Topics: [Symfony](), [Encryption](), [Amazon Web Services](), [Azure](), [Google]() Tags: [2026](), [api](), [article](), [aws](), [azure](), [backend](), [encryption](), [features](), [google](), [hashicorp-vault](), [kms](), [new-features](), [openssl](), [sdk](), [symfony]() ### AI overview Symfony 8.2 introduces an experimental KeyManagement component that provides one API for AWS KMS, Azure Key Vault, Google Cloud KMS, and HashiCorp Vault. It supports direct and envelope encryption, local development backends, provider bridges, console commands, debug-toolbar integration, and Doctrine support. ### Source excerpt This is the first article in a series showcasing the most important new features introduced by Symfony 8.2, which will be released at the end of November 2026. Contributed... ## AWS Security Reference Architecture: A deep dive into PCI DSS compliance DevFeed: [AWS Security Reference Architecture: A deep dive into PCI DSS compliance]() Original publisher: [Read original article]() Author: Avik Mukherjee Published: 2026-09-14T17:46:56Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Security](), [Architecture & Design](), [Network Segmentation](), [Encryption](), [Logging](), [Access Control](), [Cloud]() Tags: [access-control](), [amazon-web-services](), [announcements](), [architecture](), [compliance](), [encryption](), [foundational-100](), [logging](), [network-segmentation](), [pci-dss](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS announces the AWS Security Reference Architecture (AWS SRA) PCI DSS Deep Dive, a guide that extends the core AWS SRA with prescriptive architecture-level guidance for organizations handling cardholder data on AWS. It explains how AWS SRA patterns address PCI DSS concerns including account scoping, network segmentation, encryption, logging, and access control. ### Source excerpt Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations that store, process, or transmit cardholder data on AWS. Organizations subject to [...] ## Morse Micro Wi-Fi HaLow USB adapters add 802.11ah connectivity to PCs and routers DevFeed: [Morse Micro Wi-Fi HaLow USB adapters add 802.11ah connectivity to PCs and routers]() Original publisher: [Read original article]() Author: Debashis Das Published: 2026-09-14T09:00:51Z Content type: news Language: en Sources: [CNX Software - Embedded Systems News]() Topics: [USB](), [Network](), [Hardware](), [RISC-V](), [Linux](), [macOS](), [Windows](), [Encryption]() Tags: [802-11ah](), [connectivity](), [documentation](), [encryption](), [firmware](), [github](), [guides](), [halow](), [hardware](), [iot](), [linux](), [lpwan](), [macos](), [network](), [networks](), [risc-v](), [security](), [usb](), [wi-fi](), [wifi](), [windows](), [wireless]() ### AI overview Morse Micro has released USB-A and USB-C Wi-Fi HaLow adapters based on its MM8108 reference design. The adapters connect PCs and routers to IEEE 802.11ah networks and support Windows, Linux, and macOS. ### Source excerpt Last year, we saw Morse Micro introduce the MM8108 Wi-Fi HaLow (802.11ah) SoC with up to 43.33 Mbps throughput, along with an MM8108-RD09 USB dongle reference design, for which we had virtually no details at the time. Morse Micro has now released USB-A and USB-C Wi-Fi HaLow adapters based on that reference design. The adapters let PCs and routers connect to 802.11ah networks through USB without a dedicated expansion card and feature an external SMA antenna delivering up to 26 dBm transmit power. Wi-Fi HaLow USB network adapter specifications: SoC - Morse Micro MM8108 32-bit RISC-V Host Applications Processor (HAP) Standard - IEEE802.11ah Wi-Fi HaLow Frequency band - 850-950 MHz (Worldwide sub-1 GHz license-exempt range) Operating Modes - Access Point (AP) and Station (STA). Channel Width - 1/2/4/8 MHz Modulation - BPSK, QPSK, 16QAM, 64QAM, 256QAM. Data rate - Up to 43.3 Mbps using 256-QAM modulation at an 8 MHz bandwidth [...] The post Morse Micro Wi-Fi HaLow USB adapters add 802.11ah connectivity to PCs and routers appeared first on CNX Software - Embedded Systems News. ## How WorkOS Vault's local encryption works DevFeed: [How WorkOS Vault's local encryption works]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [Encryption](), [Cryptography](), [Security](), [data]() Tags: [cryptographic](), [data](), [encryption](), [pii](), [security](), [token]() ### AI overview The article explains how WorkOS Vault performs local encryption using envelope encryption. Each operation uses a single-use data encryption key, which is protected by a key encryption key stored in a hardware security module. Sensitive plaintext and ciphertext remain within the customer's infrastructure; only the wrapped key is sent to WorkOS. Key contexts automatically select or create isolated keys for organizations or tenants, with support for customer-managed keys and documented limits on context size and key counts. ### Source excerpt Envelope encryption, data keys, and why your sensitive data never has to leave your infrastructure ## The 6 best HIPAA-compliant form builders for sensitive information DevFeed: [The 6 best HIPAA-compliant form builders for sensitive information]() Original publisher: [Read original article]() Author: Adam Lehman Published: 2026-09-12T00:00:00Z Content type: comparison Language: en Sources: [Webflow Blog]() Topics: [data](), [data-processing](), [Encryption](), [Software](), [cloud-infrastructure]() Tags: [compliance](), [data](), [encryption](), [enterprise](), [forms](), [healthcare](), [strategy](), [workflows]() ### AI overview A comparison of six HIPAA-compliant form builders for healthcare teams collecting protected health information (PHI). It evaluates Business Associate Agreement requirements, safeguards such as encryption and audit logging, pricing and plans, form capabilities, and suitability for workflows ranging from patient intake to complex clinical questionnaires. ### Source excerpt Compare the 6 best HIPAA-compliant form builders for healthcare teams collecting PHI, from affordable to enterprise options. ## \[Webinar\] Elevating customer engagement with WhatsApp DevFeed: [\[Webinar\] Elevating customer engagement with WhatsApp]() Original publisher: [Read original article]() Author: Twilio Published: 2026-09-11T00:00:00Z Content type: article Language: en Sources: [Twilio Blog]() Topics: [Messaging](), [Authentication](), [End-to-End Encryption](), [Encryption](), [Artificial Intelligence]() Tags: [ai](), [authentication](), [customer-engagement](), [encryption](), [enterprise](), [events-community](), [fraud](), [messaging](), [operational](), [webinar](), [whatsapp]() ### AI overview This webinar explains how businesses can use WhatsApp for secure account verification, operational alerts, two-way customer conversations, and interactive workflows. It also discusses end-to-end encryption, reducing SMS toll fraud risk, and examples of AI-powered HR messaging workflows. ### Source excerpt Stop losing critical messages in the noise. Discover how to deliver secure account verifications and operational updates via WhatsApp. ## pg\_vault\_tde v1.7.1 : Transparent Data Encryption for PostgreSQL 17 and 18 DevFeed: [pg\_vault\_tde v1.7.1 : Transparent Data Encryption for PostgreSQL 17 and 18]() Original publisher: [Read original article]() Author: Miriade Srl Published: 2026-09-10T00:00:00Z Content type: release Language: en Sources: [PostgreSQL news]() Topics: [Encryption](), [Database](), [Cryptography]() Tags: [database](), [encryption](), [postgresql](), [release]() ### AI overview pg_vault_tde 1.7.1 adds transparent AES-256-GCM encryption for PostgreSQL 17 and 18, with externally managed keys and online per-table key rotation. It fixes AAD derivation for out-of-line TOAST values; data written by 1.7.0 or earlier must be exported before upgrading affected tables. ### Source excerpt pg_vault_tde provides Transparent Data Encryption for PostgreSQL 17 and 18. A table access method, encrypted_heap, encrypts every tuple with AES-256-GCM before it reaches the storage manager and decrypts it after it leaves, so applications require no changes. Keys are held outside the database: HashiCorp Vault or OpenBao through the Transit engine, a PKCS#11 token or HSM, or a local PKCS#12 wallet. Data encryption keys are per table and can be rotated online. Requirements are PostgreSQL 17 or 18, OpenSSL 3.x, and the library listed in shared_preload_libraries. The current release is 1.7.1. It corrects the AAD derivation for out-of-line TOAST values, with the consequence that TOAST data written by 1.7.0 or earlier does not authenticate under 1.7.1: affected tables must be exported before the new binary is installed. The procedure is documented in the README. pg_vault_tde is released under the PostgreSQL licence. Sources, documentation and binary .deb and .rpm packages are on GitHub; the distribution is on PGXN. ## Introducing Amazon EBS Volume Clones across AWS accounts DevFeed: [Introducing Amazon EBS Volume Clones across AWS accounts]() Original publisher: [Read original article]() Author: Channy Yun (윤석찬) Published: 2026-09-09T22:01:47Z Content type: article Language: en Sources: [AWS News Blog]() Topics: [Amazon Web Services](), [Encryption](), [Model Context Protocol]() Tags: [amazon](), [amazon-elastic-block-store-amazon-ebs](), [apis](), [availability](), [aws](), [development](), [encryption](), [launch](), [mcp](), [mcp-server](), [news](), [production](), [storage]() ### AI overview AWS introduces cross-account Amazon EBS Volume Clones, allowing point-in-time copies of EBS volumes in other AWS accounts with optional re-encryption using a customer-managed AWS KMS key in the target account. ### Source excerpt AWS introduces Amazon EBS Volume Clones with cross-account copy, so you can create copies of your EBS volumes into other AWS accounts and optionally re-encrypt them with an AWS Key Management Service (AWS KMS) key in the target account. ## Percona Operator for PostgreSQL 3.1.0: Transparent Data Encryption, Logical Replicas, and Persistent Logging DevFeed: [Percona Operator for PostgreSQL 3.1.0: Transparent Data Encryption, Logical Replicas, and Persistent Logging]() Original publisher: [Read original article]() Author: Slava Sarzhan Published: 2026-09-09T16:08:31Z Content type: release Language: en Sources: [Blog - Percona]() Topics: [PostgreSQL](), [Encryption](), [Logging](), [Kubernetes](), [Open Source]() Tags: [cloud](), [encryption](), [hashicorp-vault](), [kubernetes](), [logging](), [open-source](), [operator](), [percona](), [percona-operator-for-postgresql](), [postgresql](), [release](), [replication](), [security](), [slavasarzhan-pg]() ### AI overview Percona Operator for PostgreSQL 3.1.0 adds transparent data encryption with pg_tde, logical replicas for read-only workloads, and persistent logging across Pod restarts. The release also adds official RKE2 support and full ARM64 images. ### Source excerpt Percona Operator for PostgreSQL 3.1.0 takes on three things that decide whether a PostgreSQL platform passes review: is the data encrypted at rest, can it serve reads without straining the primary, and are the logs there when you need them. This release answers all three inside the custom resource, so none of them is a ... Continued The post Percona Operator for PostgreSQL 3.1.0: Transparent Data Encryption, Logical Replicas, and Persistent Logging appeared first on Percona. ## FIPS 140-2 vs FIPS 140-3, Explained DevFeed: [FIPS 140-2 vs FIPS 140-3, Explained]() Original publisher: [Read original article]() Author: info@goteleport.com (Mayur Pipaliya) Published: 2026-09-09T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [fips 140-3](), [FIPS validation](), [Cryptography](), [Encryption](), [certificates](), [Security](), [Cloud]() Tags: [certificates](), [cloud](), [cmvp](), [cryptography](), [encryption](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [security](), [sensitive-data]() ### AI overview This article explains the differences between FIPS 140-2 and FIPS 140-3, including the standards' origins, CMVP validation certificates, applicable requirements for protecting sensitive data, and the transition timeline through September 2026. ### Source excerpt Understand key changes from FIPS 140-2 to FIPS 140-3. ## Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting) DevFeed: [Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)]() Original publisher: [Read original article]() Author: Alex Krivit Published: 2026-09-08T13:10:00Z Content type: release Language: en Sources: [Cloudflare Blog]() Topics: [Cryptography](), [SSL](), [Latency](), [Encryption]() Tags: [application-security](), [application-services](), [cloudflare](), [encryption](), [latency](), [performance](), [post-quantum](), [research](), [ssl](), [tls]() ### AI overview Cloudflare announces Automatic Key Exchange, which probes TLS 1.3 origins for supported key-agreement algorithms and uses the preferred option on the first connection attempt. The rollout reduces HelloRetryRequests and handshake latency while automatically preferring post-quantum hybrid connections where supported. ### Source excerpt Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it. ## Updates on HEIR, the homomorphic encryption compiler project DevFeed: [Updates on HEIR, the homomorphic encryption compiler project]() Original publisher: [Read original article]() Published: 2026-09-04T18:53:40Z Content type: article Language: en Sources: [Jeremy Kun]() Topics: [homomorphic encryption](), [Compiler](), [Encryption](), [Cryptography](), [Machine learning](), [Inference](), [GitHub](), [bazel](), [Kaggle]() Tags: [bazel](), [ckks](), [compiler](), [cryptography](), [encryption](), [github](), [homomorphic-encryption](), [inference](), [kaggle](), [mathematics](), [ml](), [programming]() ### AI overview This companion article explains HEIR, a homomorphic encryption compiler that converts programs to operate directly on encrypted data. It discusses compiling pre-trained machine-learning models for private inference, describes the repository and setup, and reports an example involving encrypted credit-card fraud detection. ### Source excerpt On 2026-08-14 I published an article on the Google Security blog with an update on HEIR, our homomorphic encryption (HE) compiler. This is a companion article, in which I have no limits on word count or jargon, and I can feel free to be honest. So strap in. Assuming you won't read the linked corporate blog post, HEIR is a compiler that converts an input program to a program that operates directly on encrypted data. ## SQLite Encryption in Production: Key Management, Migration, and Real-World Use Cases DevFeed: [SQLite Encryption in Production: Key Management, Migration, and Real-World Use Cases]() Original publisher: [Read original article]() Author: Jeff Olson Published: 2026-09-03T00:00:00Z Content type: tutorial Language: en Sources: [Turso Blog]() Topics: [SQLite](), [Encryption](), [migration](), [Cryptography](), [Turso]() Tags: [compliance](), [database](), [encryption](), [how-to](), [management](), [migration](), [production](), [security](), [sqlite](), [turso]() ### AI overview A practical guide to operating encrypted SQLite databases securely in production. It covers secure key generation and storage, Turso key encoding differences, migration and rotation constraints, and compliance considerations. ### Source excerpt Where to store keys, how to rotate them, how to migrate from SQLCipher or unencrypted SQLite, and what SOC2, HIPAA, and PCI-DSS auditors actually want to see. ## Encrypting SQLite Databases with Turso: Local, Cloud, and BYOK DevFeed: [Encrypting SQLite Databases with Turso: Local, Cloud, and BYOK]() Original publisher: [Read original article]() Author: Jeff Olson Published: 2026-09-02T00:00:00Z Content type: tutorial Language: en Sources: [Turso Blog]() Topics: [Turso](), [Encryption](), [SQLite](), [Cryptography](), [Databases]() Tags: [benchmark](), [cloud](), [code](), [database](), [encryption](), [local](), [open-source](), [rust](), [security](), [sqlite](), [turso]() ### AI overview A tutorial on Turso's native SQLite encryption and cloud BYOK model, covering key handling, architecture, code, and benchmarks. ### Source excerpt How Turso's two encryption models work in practice: native encryption in the Rust engine and BYOK on Turso Cloud, with working code and real benchmark numbers. ## SQLite Doesn't Come With Encryption. Here's What Developers Actually Use. DevFeed: [SQLite Doesn't Come With Encryption. Here's What Developers Actually Use.]() Original publisher: [Read original article]() Author: Jeff Olson Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Turso Blog]() Topics: [Encryption](), [SQLite](), [Cryptography](), [Operating system]() Tags: [database](), [developers](), [encryption](), [extension](), [os](), [security](), [sqlite](), [turso]() ### AI overview An overview of SQLite encryption options, page-level AEAD encryption, and the impact of SQLite removing the undocumented SQLITE_HAS_CODEC hook in version 3.32.0. ### Source excerpt A map of the SQLite encryption landscape: SQLCipher, SEE, SQLite3MultipleCiphers, and modern alternatives, plus how page-level AEAD encryption actually works. [Next page]()