Hello and welcome to the Monday, February 24th, 2025 edition of the Sands and the Storm Center's

Stormcast. My name is Johannes Ulrich and I'm recording from Jacksonville, Florida. In Diaries this

weekend, we got a new tool or an improved tool better from Jim. Jim looked into verifying hashes and improved his tool 6.P.I.

The big difference of this tool compared to some of the other tools is you don't have to tell it

what hashing algorithm to use.

So if you have a text file with file names and hashes of various formats,

the tool will go through the text file, figure out what hash format was used for a particular

hash based on its length, and then verify whether or not the file with that name matches that

hash. That's sort of the source of the issue is when you're dealing with, for example,

trying to verify binaries.

Every distributor of binary sort of has their own little way how they're calculating the

hash is.

This makes it just a little bit more straightforward.

And then a little follow-up to the Microsoft quantum computing story from last week.

Google now rolled out post-quanim cryptography for its cloud key management system or

KMS.

This is the kind of stuff that we really need to implement some of these algorithms,

vendors like Google supporting them in their products to essentially then make it just

the flip of a switch in order to switch to this new algorithm. Haven't played with it yet,

but if anybody has, let me know what your experience is, if there are any issues that you ran into here.

This wasn't necessarily prompted by Microsoft's announcement. I believe that Google has been

worked on this for a while. Just happened sort of that late last week. They made that announcement

...