Authors

We hold to one rule about attribution: an article about cryptography is written or technically reviewed by someone who has worked on the cryptographic code, not by a generalist writer working from a brief. Where we are describing something outside our direct experience, the text says so and cites a primary source.

In practice the split is straightforward. Anything that makes a claim about a cryptographic primitive, a parameter we have chosen, or an attack a design does or does not resist is written or reviewed by the security team. Comparisons of third-party products, practical guidance and anything describing how a workflow should run in an organisation sit with editorial, which verifies product claims against each vendor's own documentation before publication.

How that review process actually runs — including how corrections are handled and how often pages are re-checked — is documented on the editorial policy page.