--- title: Best Cryptography posts of 2025 | daily.dev description: The most upvoted Cryptography posts of 2025, curated by the daily.dev community. canonical: https://daily.dev/tags/cryptography/best-of/2025 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/cryptography/best-of/2025 og:type: website og:site_name: daily.dev og:title: Best Cryptography posts of 2025 | daily.dev og:description: The most upvoted Cryptography posts of 2025, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Cryptography — 2025 1. 1 [](/posts/your-ultimate-mcp-server-hub-eusispywg "Your Ultimate MCP Server Hub") Article Community Picks · 1y Your Ultimate MCP Server Hub MCPHub is a unified management platform that consolidates multiple Model Context Protocol (MCP) servers into a single Server-Sent Events (SSE) endpoint. It provides a dashboard for monitoring server status and simplifies infrastructure management for AI applications. The tool can be quickly deployed using Docker and allows customization through JSON configuration files. 157 2. 2 [](/posts/hash-functions-deep-dive-j25sqlzzw "Hash Functions Deep Dive") Article Kirupa · 2y Hash Functions Deep Dive Hash functions are essential for efficient data storage and retrieval, password verification, file integrity checking, and digital signatures. This deep dive explains the fundamentals of hash functions, their inputs and outputs, and the criteria that make a good hash function. It also demonstrates how to create a simple hash function in JavaScript and improves it using position weighting. The importance of using existing, well-designed hash functions like MD5 and SHA for critical purposes is emphasized. 144 3. 3 [](/posts/how-to-store-external-api-keys-securely-7juf4yyer "How to store external API keys securely") Article Tiger's Place · 2y How to store external API keys securely Learn how to store external API keys securely using encryption techniques. The post covers binary data fundamentals, cryptography basics, key generation and management, the encryption and decryption processes, and crucial security considerations. Implementing encryption at rest ensures the API keys remain secure, and steps are provided to avoid common security mistakes. 124 1 4. 4 [](/posts/2025-computer-science-predictions-ztc1v8ylf "2025 Computer Science Predictions") Video LaurieWired · 2y 2025 Computer Science Predictions Predictions for 2025 include increased adoption of RISC-V in major Linux distributions, quantum-resistant cryptographic algorithms by NIST, the continued rise of memory-safe programming languages like Rust and Go, and emerging trends in AI-generated content and background music. Moreover, expectations include the use of AI upscaling in streaming and LLMs' impact on decompiler tools and NPC interactions in gaming. 88 1 5. 5 [](/posts/uuidv47-07iorqjpp "UUIDv47") Article OpenSouls · 1y UUIDv47 UUIDv47 is a library that enables reversible transformation between UUIDv7 (time-ordered) and UUIDv4 (random-appearing) formats. It allows developers to hide time-ordering from external APIs while maintaining internal chronological benefits, using cryptographically secure SipHash-2-4 algorithm with high performance and zero dependencies. 68 3 6. 6 [](/posts/tech-predictions-for-2026-and-beyond-ltbxaozoe "Tech predictions for 2026 and beyond") Article All Things Distributed · 45w Tech predictions for 2026 and beyond Five major technology predictions for 2026 and beyond: companion robots will combat the global loneliness epidemic through emotional AI, particularly for elderly and pediatric care; developers will evolve into renaissance polymaths who combine technical skills with domain expertise as AI handles code generation; quantum computing advances are compressing security timelines, requiring immediate post-quantum cryptography deployment across infrastructure; defense technology innovation cycles are accelerating from decades to years, with dual-use systems reaching civilian applications faster; and AI-powered personalized education will democratize one-on-one tutoring at scale, adapting to individual learning styles while freeing teachers from administrative tasks. 66 3 7. 7 [](/posts/building-my-own-enigma-machine-simulator-wwni8vnpy "Building My Own Enigma Machine Simulator") Article Mohd Shamoon · 1y Building My Own Enigma Machine Simulator A developer built a full-stack Enigma machine simulator using React, TypeScript, and Express.js with MongoDB. The project recreates the historic WWII encryption device with features like symmetric encryption/decryption, custom machine generation via seed and email, and an interactive UI with rotor and plugboard simulation. The implementation includes both frontend visualization and backend API handling, demonstrating cryptographic principles while serving as an educational tool. 64 6 8. 8 [](/posts/node-js-aiqz5kkqp "Node.js") Article Node.js · 1y Node.js Node.js v24.8.0 introduces HTTP/2 network inspection support in Chrome DevTools, allowing developers to track HTTP/2 calls during debugging. The release includes significant cryptography enhancements with support for Ed448, ML-DSA, KMAC, Argon2, and SLH-DSA algorithms in both node:crypto and Web Cryptography APIs. Additional improvements include CPU profiling APIs for worker threads, various bug fixes across modules like assert, fs, and streams, and dependency updates including npm 11.6.0. 58 1 9. 9 [](/posts/uuidv47-bzde0lrvp "UUIDv47") Article WebDev · 1y UUIDv47 UUIDv47 is a library that enables reversible transformation between UUIDv7 (time-ordered) and UUIDv4 (random-appearing) formats. It allows developers to hide time-ordering from external APIs while maintaining internal chronological benefits, using cryptographically secure SipHash-2-4 algorithm with high performance and zero dependencies. 57 7 10. 10 [](/posts/the-cryptography-handbook-exploring-rsa-pkcsv1-5-oaep-and-pss-kwdzg0mgx "The Cryptography Handbook: Exploring RSA PKCSv1.5, OAEP, and PSS") Article freeCodeCamp · 2y The Cryptography Handbook: Exploring RSA PKCSv1.5, OAEP, and PSS The post delves into the intricacies of the RSA algorithm, tracing its evolution from its introduction in 1978 to addressing vulnerabilities discovered over the years. It explains the mathematical principles underlying RSA, various types of attacks that have been identified, and the implementation of countermeasures such as different padding schemes (PKCS#1 v1.5, OAEP) and digital signature protocols (PSS). The discussion highlights the importance of proper implementation to maintain security, including the transition to optimal asymmetric encryption padding (OAEP) and probabilistic signature schemes (PSS) to prevent modern cryptographic attacks. 52 11. 11 [](/posts/node-js-node-js-v25-2-1-current--zj2pcrdqy "Node.js — Node.js v25.2.1 (Current)") Article Node.js · 46w Node.js — Node.js v25.2.1 (Current) Node.js v25.2.1 has been released, reverting a spec-compliant behavior change that threw errors on localStorage access. The team determined this breaking change was too disruptive for a semver-minor release and postponed it to version 26.0.0\. The release includes fixes for RSA-PSS saltLength defaults in crypto, a V8 backport, and clarifications on the experimental status of Web Storage support. 48 12. 12 [](/posts/uuidv47-2xcy4phex "UUIDv47") Article Nestjs Developers · 1y UUIDv47 UUIDv47 is a library that enables reversible transformation between UUIDv7 (time-ordered) and UUIDv4 (random-appearing) formats. It allows developers to hide time-ordering from external APIs while maintaining internal chronological benefits, using cryptographically secure SipHash-2-4 algorithm with high performance and zero dependencies. 47 8 13. 13 [](/posts/the-ultimate-guide-to-jwt-vulnerabilities-and-attacks-with-exploitation-examples--1vtgdsaa9 "The Ultimate Guide to JWT Vulnerabilities and Attacks (with Exploitation Examples)") Article Tech Lead Digest · 1y The Ultimate Guide to JWT Vulnerabilities and Attacks (with Exploitation Examples) JWT vulnerabilities pose serious security risks in modern web applications. Common attacks include signature bypass, algorithm confusion (switching from RS256 to HS256), weak secret brute-forcing, and injection attacks through header parameters like 'kid' and 'jku'. The guide covers exploitation techniques for each vulnerability type, from trivial signature removal to sophisticated ECDSA psychic signature attacks. Key defense strategies include strict algorithm validation, secure key management, input sanitization, and proper signature verification implementation. 43 1 14. 14 [](/posts/forget-ips-using-cryptography-to-verify-bot-and-agent-traffic-vz7wqjxot "Forget IPs: using cryptography to verify bot and agent traffic") Article Cloudflare · 1y Forget IPs: using cryptography to verify bot and agent traffic As the distinction between malicious and beneficial bots becomes blurred due to increased AI traffic, Cloudflare proposes using cryptographic methods to authenticate bots. This approach includes HTTP message signatures and request mTLS to verify bot identity. These methods aim to replace outdated IP address validation, providing a reliable way for bots to declare their identity. Both mechanisms are explored, with the potential to integrate them into broader bot management and AI audit systems, aimed at enhancing both security and traffic control for websites. 26 1 15. 15 [](/posts/post-quantum-cryptography-in-net-9uq2cqj7r "Post-Quantum Cryptography in .NET") Article .NET Blog · 46w Post-Quantum Cryptography in .NET .NET 10 introduces post-quantum cryptography support with four new algorithms: ML-KEM, ML-DSA, SLH-DSA, and Composite ML-DSA. The implementation breaks from the traditional AsymmetricAlgorithm base class pattern, introducing a new design where instances represent keys rather than algorithms, with improved disposal semantics and extensive use of the Template Method Pattern. The new classes minimize code duplication in derived types, use Span-based APIs for performance, and include platform-specific implementations for Windows (CNG) and Linux (OpenSSL 3.5+). Integration extends to X.509 certificates, TLS 1.3, SignedCms, and COSE, though some methods remain experimental pending final specification publication. 25 16. 16 [](/posts/what-are-json-web-tokens-jwt--nfp3hxbxg "What Are JSON Web Tokens (JWT)?") Article freeCodeCamp · 1y What Are JSON Web Tokens (JWT)? JSON Web Tokens (JWT) are digitally signed, self-contained tokens used for secure authentication between systems. JWTs consist of three parts: header (metadata), payload (claims/data), and signature (verification). They can be signed using symmetric algorithms like HS256 with shared secrets or asymmetric algorithms like RS256 with public/private key pairs. The signature ensures authenticity and integrity without requiring server-side session storage. Key security practices include using HTTPS, keeping tokens short-lived, implementing refresh tokens, protecting signing keys, and never storing sensitive data in the payload. 22 17. 17 [](/posts/jwt-versus-paseto-j8m4a37kp "JWT versus PASETO") Article System Design Codex · 1y JWT versus PASETO JWT and PASETO are both token-based authentication mechanisms for secure client-server communication. JWT is widely adopted but has security pitfalls like algorithm confusion attacks and complex configuration choices. PASETO was designed as a safer alternative with secure defaults, enforced modern cryptography, and simplified specifications to prevent developer errors. While JWT has better ecosystem support and adoption, PASETO offers improved security through its opinionated approach that removes insecure options. 21 1 18. 18 [](/posts/sse-server-sent-events-is-fun-go-ke07yseln "SSE (server sent events) is fun / Go") Article Community Picks · 2y SSE (server sent events) is fun / Go Creating a live counter for a popular interior design quiz using Server-Sent Events (SSE) to keep track of user presence, quiz results, and broadcasting messages with efficient use of Go, Redis, and a thoughtful UI design. The approach emphasizes simplicity, scalability, and practical solutions for persistent connections and event handling. 21 19. 19 [](/posts/the-absolute-minimum-every-python-web-application-developer-must-know-about-security-75tkwsf6l "The Absolute Minimum Every Python Web Application Developer Must Know About Security") Article Planet Python · 2y The Absolute Minimum Every Python Web Application Developer Must Know About Security When developing Python web applications, it's essential to follow basic security principles: never store passwords in plain text, always use salted hashes or delegate password management to modern frameworks, and ensure data is encrypted both in transit and at rest. The Defence in Depth approach emphasizes multiple layers of security, including the use of TLS for network security and understanding cryptography algorithms. The guide also covers important security principles, the OWASP Top Ten vulnerabilities, and the CVE warning system. 21 1 20. 20 [](/posts/implementing-aes-encryption-with-c--eav1vduea "Implementing AES Encryption With C#") Article Milan Jovanović · 2y Implementing AES Encryption With C# Learn how to implement AES encryption in .NET with practical code examples for both encryption and decryption. Understand the differences between symmetric and asymmetric encryption, and get insights into secure key management and best practices for protecting sensitive data like API keys and database credentials. 20 21. 21 [](/posts/festfund-private-contributions-public-recognition---a-zero-knowledge-fundraising-solution-my2lh9mr5 "FestFund: Private Contributions & Public Recognition - A Zero-Knowledge Fundraising Solution") Article DEV · 1y FestFund: Private Contributions & Public Recognition - A Zero-Knowledge Fundraising Solution FestFund is a fundraising platform that uses zero-knowledge proofs to enable private donations while maintaining public transparency. Built on Midnight Network, it allows donors to contribute anonymously while still providing verifiable leaderboards and milestone tracking. The platform reduces ZK proof generation time from 418ms to 1ms and includes features like cryptographic commitments, nullifier protection, and transparent accountability without exposing individual donation amounts. 18 22. 22 [](/posts/golang-weekly-issue-577-november-5-2025-bko0xsrhm "Golang Weekly Issue 577: November 5, 2025") Article Golang Weekly · 48w Golang Weekly Issue 577: November 5, 2025 Go 1.21+ enables reproducible builds with byte-for-byte identical outputs, now with independent third-party verification for enhanced security. The Dolt database demonstrates dependency management patterns for large Go projects with 762k lines of code. Claude Code successfully debugged complex low-level cryptography issues in an ML-DSA post-quantum signature implementation. Recent releases include Crush 0.15 AI coding agent, Vitess 23.0 MySQL scaling system, and Lazygit 0.56 terminal UI. 16 2 23. 23 [](/posts/basics-of-cryptography-part1--hwjg5bqrl "Basics of cryptography ( Part1 )") Article System Weakness · 2y Basics of cryptography ( Part1 ) Cryptography converts readable text into unreadable ciphertext using encryption methods. Three main types include symmetric encryption (same key for encryption/decryption), asymmetric encryption (public/private key pairs), and hashing (one-way transformation for data integrity). Practical examples and websites for implementing these methods are provided. 15 24. 24 [](/posts/go-1-25-0-1-microsoft-build-now-available-awf7bqtjt "Go 1.25.0-1 Microsoft build now available") Article DevBlogs · 1y Go 1.25.0-1 Microsoft build now available Microsoft released Go 1.25.0-1 with system-provided cryptography enabled by default (OpenSSL on Linux, CNG on Windows) and introduced opt-out telemetry collection. The build aligns with Microsoft's security policies but may require action for Linux builds without cgo or distroless containers. Users can disable systemcrypto via GOEXPERIMENT=nosystemcrypto and telemetry via MS\_GOTOOLCHAIN\_TELEMETRY\_ENABLED=0. 14 25. 25 [](/posts/go-cryptography-security-audit-69gtxeijm "Go Cryptography Security Audit") Article Go · 1y Go Cryptography Security Audit The Go programming language underwent a security audit by Trail of Bits, focusing on its cryptography packages. The audit highlighted one low-severity issue and several informational findings, primarily concerning timing side-channels and memory management in the legacy Go+BoringCrypto integration. The Go team has addressed these issues in the upcoming Go 1.25 version. The audit validates Go's commitment to developing robust cryptographic libraries, with future plans to enhance post-quantum cryptography and simplify high-level cryptography APIs. 13 1 [See all Cryptography archives](/tags/cryptography/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/cryptography/best-of/2025#page","url":"https://daily.dev/tags/cryptography/best-of/2025","name":"Best Cryptography Posts of 2025","description":"The most upvoted Cryptography posts of 2025, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/cryptography/best-of/2025#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/your-ultimate-mcp-server-hub-eusispywg","name":"Your Ultimate MCP Server Hub"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/hash-functions-deep-dive-j25sqlzzw","name":"Hash Functions Deep Dive"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/how-to-store-external-api-keys-securely-7juf4yyer","name":"How to store external API keys securely"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/2025-computer-science-predictions-ztc1v8ylf","name":"2025 Computer Science Predictions"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/uuidv47-07iorqjpp","name":"UUIDv47"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/tech-predictions-for-2026-and-beyond-ltbxaozoe","name":"Tech predictions for 2026 and beyond"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/building-my-own-enigma-machine-simulator-wwni8vnpy","name":"Building My Own Enigma Machine Simulator"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/node-js-aiqz5kkqp","name":"Node.js"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/uuidv47-bzde0lrvp","name":"UUIDv47"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/the-cryptography-handbook-exploring-rsa-pkcsv1-5-oaep-and-pss-kwdzg0mgx","name":"The Cryptography Handbook: Exploring RSA PKCSv1.5, OAEP, and PSS"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/node-js-node-js-v25-2-1-current--zj2pcrdqy","name":"Node.js — Node.js v25.2.1 (Current)"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/uuidv47-2xcy4phex","name":"UUIDv47"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/the-ultimate-guide-to-jwt-vulnerabilities-and-attacks-with-exploitation-examples--1vtgdsaa9","name":"The Ultimate Guide to JWT Vulnerabilities and Attacks (with Exploitation Examples)"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/forget-ips-using-cryptography-to-verify-bot-and-agent-traffic-vz7wqjxot","name":"Forget IPs: using cryptography to verify bot and agent traffic"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/post-quantum-cryptography-in-net-9uq2cqj7r","name":"Post-Quantum Cryptography in .NET"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/what-are-json-web-tokens-jwt--nfp3hxbxg","name":"What Are JSON Web Tokens (JWT)?"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/jwt-versus-paseto-j8m4a37kp","name":"JWT versus PASETO"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/sse-server-sent-events-is-fun-go-ke07yseln","name":"SSE (server sent events) is fun / Go"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/the-absolute-minimum-every-python-web-application-developer-must-know-about-security-75tkwsf6l","name":"The Absolute Minimum Every Python Web Application Developer Must Know About Security"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/implementing-aes-encryption-with-c--eav1vduea","name":"Implementing AES Encryption With C#"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/festfund-private-contributions-public-recognition---a-zero-knowledge-fundraising-solution-my2lh9mr5","name":"FestFund: Private Contributions & Public Recognition - A Zero-Knowledge Fundraising Solution"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/golang-weekly-issue-577-november-5-2025-bko0xsrhm","name":"Golang Weekly Issue 577: November 5, 2025"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/basics-of-cryptography-part1--hwjg5bqrl","name":"Basics of cryptography ( Part1 )"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/go-1-25-0-1-microsoft-build-now-available-awf7bqtjt","name":"Go 1.25.0-1 Microsoft build now available"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/go-cryptography-security-audit-69gtxeijm","name":"Go Cryptography Security Audit"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Cryptography","item":"https://daily.dev/tags/cryptography"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/cryptography/best-of"},{"@type":"ListItem","position":5,"name":"2025"}]}]} ```