Repeat guest Bruno Coulliard of Crypto4A joins us to discuss the accelerating pace of change in digital technology, which is going at a rate unprecedented in human history. How do we as people adjust to the hyperspeed of today's technology landscape? And how do we apply these ideas to cryptography?
Jason Soroko
Fellow
Jason has 20 years of experience researching, innovating, educating markets, developing intellectual property, and contributing to national-level guidance and consortium standards. He works closely with enterprise companies daily to synthesize managed PKI security solutions that meet real-world operational needs.
Jason Soroko is a seasoned security technology innovator and Senior Fellow at Sectigo, where he leads customer-facing engagements, drives research, and spearheads strategic initiatives at both organizational and national levels. He also contributes to the development of intellectual property and consortium standards. As co-host of the award-winning “Root Causes” podcast, Jason educates professionals on the latest trends in PKI and cybersecurity twice a week. His core strength is bridging cutting-edge security methods with real-world operational needs, ensuring that businesses are equipped with practical, forward-thinking solutions.
Recent posts by Jason Soroko
Researchers have used AI to decode two German Enigma messages that have remained unbroken since the second world war. We describe how this was accomplished.
This year we have seen a series of AI-enabled cryptographic attacks. In this episode we discuss a new exploit to abuse signing mechanisms in HSMs.
The PLANTS working group in IETF recently released its draft 6 of the Merkle Tree Certificates standard. We go over what is new in this draft.
Apple has announced it will support Merkle Tree Certificates for PQC and has released a draft root store policy. We share some of the surprising requirements in this draft.
In our ongoing series on how AI will change in the next three years, we discuss unresolved questions involving ownership of AI-created or -modified content. Plus, what happens when your AI steals intellectual property without your knowledge?
Publicly trusted client authentication certificates have a hard deadline to be deprecated in Q1 2027. Not everyone is ready for that. We discuss some of the reasons why and what to do about it.
MTCs could reshape certificate operations, making automation, visibility, and crypto-agility increasingly important as standards evolve.
The NIST contest has not been the only government-led effort to discover qunatum-resistant algorithms. In this episode we describe South Korea's PQC contest, which is entirely independent of the NIST contest.