Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 628: PI-DOS (Prompt Injection-based Denial of Service) Jun 12, 2026

Show notes

An emerging attack against AIs is to create a significantly complex and recursive prompt that will occupy the AI indefinitely or for a sufficiently long time that it acts as a Denial-of-Service (DoS) attack. We describe how this works.

Root Causes 627: UK vs Apple E2EE Backups Jun 10, 2026

Show notes

In the latest in our coverage of government versus encryption, the UK issued secret orders to Apple to give it a cryptographic backdoor to Apple's advanced data protection capability for iCloud. Apple responded by eliminating encryption entirely for UK users. We break it down.

Root Causes 626: TLS 1.3 Roadblock Jun 08, 2026

Show notes

TLS 1.3 is required to take advantage of post quantum cryptography (PQC) algorithms. Yes, we still see a lot of TLS 1.2 or earlier in deployment. We examine why this is the case and what to do about it.

Root Causes 625: AI in 1000 Days - Cyber Defense Jun 05, 2026

Show notes

Recent revelations about Mythos and its ability to expose vulnerabilities have forced us to rethink basic assumptions about cyber defense. In our "AI in 1000 Days" series, Jason Soroko and I examine the implications of these revelations three years from now. This includes upping the overall pace of attack and changes to best practices in cyber security defense.

Root Causes 624: Implications of Mythos Jun 03, 2026

Show notes

Anthropic has delayed its widespread release of Mythos to give major software providers a chance to close off the many vulnerabilities it has discovered. We dig into the vast implications of Mythos and other AI models for the future of cybersecurity.

Root Causes 623: Are PQC Key Sized Big Enough? Jun 01, 2026

Show notes

We discuss the possibility that our standardized ML-DSA keys turn out to be too short for true confidence, why that might occur, and the implications for private PKI certificates.

Root Causes 622: Modeling the Time to CRQC May 29, 2026

Show notes

Sam Jaques joins us to explain his much-referenced chart mapping progress toward cryptographically relevant quantum computing (CRQC).

Root Causes 621: Simplicity at Scale May 26, 2026

Show notes

We break down the phrase "Simplicity at Scale" to see what it means to us in the context of CAs and CLM.

Root Causes 620: Will NIST Update Its PQC Timelines? May 22, 2026

Show notes

A few years ago NIST proposed deadlines for PQC deployment at 2030 and 2035. But recent announcements from Google and Cloudflare suggest 2029 as a better deprecation target. We are joined by Dustin Moody to get the NIST perspective on these announcements.

Root Causes 619: Do We All Need to Adopt PQC by 2029? May 18, 2026

Show notes

Recent announcements from Google and Cloudflare have declared new 2029 deadlines for full post quantum cryptography (PQC) migration. Bas Westerbaan explains the rationale behind Cloudflare's decision and discusses implications for other enterprises, asking "Are you a gambler?"

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected