5 ms·
And making it PFS and authenticated isn't even the hard part. Slap on hash signatures to preserve quantum security there too and use temporary key exchange keys
by Natanael_L 11y ago
And making it PFS and authenticated isn't even the hard part. Slap on hash signatures to preserve quantum security there too and use temporary key exchange keys, done. Making the key exchange itself work securely is 99% of the work.
- EvgeniyZh 11y agoI just was surprised no one really made post-quantum AKE with PFS. Or at least I haven't managed to find it. The closest thing I saw is this one: http://csrc.nist.gov/groups/ST/post-quantum-2015/papers/session9-ding-paper.pdf http://csrc.nist.gov/groups/ST/post-quantum-2015/papers/sess...
- tptacek 11y agoIt's too early to do that. Researchers are trying to study whether the primitives are going to work --- ie, that the new hard problems they're based on will hold up against quantum speedups and that they're secure against conventional adversaries. Simple DH is a straightforward backdrop for that problem. Composing DH into an AKE doesn't much help, as long as the primitive is flexible enough.