3 ms·
I'm not too terribly worried. There are enough efforts to look for post-quantum crypto algorithms that I think by the time we come up with something that actual
by eximius 10y ago
I'm not too terribly worried. There are enough efforts to look for post-quantum crypto algorithms that I think by the time we come up with something that actually threatens factoring, we'll have alternatives.
If quantum stuff comes first, then we can go to lattice based systems (which are the leading candidate as far as I know - please correct me otherwise, I am familiar with lattice based systems but have not done research for a better base).
If factoring is solved first, we can stick with elliptic curves.
- coldtea 10y ago>I'm not too terribly worried. There are enough efforts to look for post-quantum crypto algorithms that I think by the time we come up with something that actually threatens factoring, we'll have alternatives. That's hardly a consolation, since all that we've encrypted and shared until then will be trivial to break as long as people have them in encrypted form (which is very easy to do).
- eximius 10y agoThat is sort of inevitable, I think. Best case, it is never broken and we never get quantum computers, but I hope that doesn't come to pass. So the next best case is that most of the details recovered by such breakage are irrelevent to those still alive. I think thats far more likely anyway.