All News

TENESYS AI NEWS tracks the most important AI news and explains what changed, why it matters and whether a technology is worth testing.

All News Models Agents Voice AI Automation Business Research Cyber Security

Any time Today This Week This Month🔴 Breaking 🟠 Important 🧪 Worth Testing

#ML-DSA — 2 articles ✕

Cyber Security· Important

AWS publishes end-to-end guide for quantum-resistant software signing

AWS released Part 1 of a two-part guide showing how to build a post-quantum software supply chain using ML-DSA signatures (NIST FIPS 204) across AWS KMS, AWS Private CA, and IAM Roles Anywhere. The guide covers signing binaries, container images, and SBOMs, and is positioned as the first full cloud-provider walkthrough for post-quantum signing, from root-of-trust creation to policy enforcement. It responds to upcoming mandates: the NSA's CNSA 2.0 requiring exclusive quantum-resistant signatures by 2030, and the EU Cyber Resilience Act taking full effect in December 2027.

4 hours agoAWS Security

Cyber Security

AWS shows how to enforce approved post-quantum signing algorithms with SCPs and IAM

AWS published a follow-up security guide explaining how organizations can enforce which ML-DSA (post-quantum signature) parameter sets are allowed across their AWS environment. It covers using Service Control Policies (SCPs) at the organization or OU level and IAM permission boundaries to block creation and use of non-approved ML-DSA variants (e.g., blocking ML-DSA-44 while allowing ML-DSA-65/87). The guide also covers AWS Private CA and certificate controls, and discusses the trade-off between deny-lists (default-allow for new variants) and allow-lists (default-deny, requiring policy updates for new approved algorithms).

4 hours agoAWS Security