4 ms·
Now if they made it authenticated with PFS, that would be cool.
by EvgeniyZh 11y ago
Now if they made it authenticated with PFS, that would be cool.
- tptacek 11y agoThis is just Diffie-Hellman. It's working at a level lower than PFS and authenticated key exchange; it's a primitive, not a complete cryptosystem.
- Natanael_L 11y agoAnd making it PFS and authenticated isn't even the hard part. Slap on hash signatures to preserve quantum security there too and use temporary key exchange keys, done. Making the key exchange itself work securely is 99% of the work.
- EvgeniyZh 11y agoI just was surprised no one really made post-quantum AKE with PFS. Or at least I haven't managed to find it. The closest thing I saw is this one: http://csrc.nist.gov/groups/ST/post-quantum-2015/papers/session9-ding-paper.pdf http://csrc.nist.gov/groups/ST/post-quantum-2015/papers/sess...
- tptacek 11y agoIt's too early to do that. Researchers are trying to study whether the primitives are going to work --- ie, that the new hard problems they're based on will hold up against quantum speedups and that they're secure against conventional adversaries. Simple DH is a straightforward backdrop for that problem. Composing DH into an AKE doesn't much help, as long as the primitive is flexible enough.