3 ms·
Thank you for doing this experiment! > [W]e did not find any unexpected impediment to deploying something like NewHope. There were no reported proble
by Panino 10y ago
Thank you for doing this experiment!
> [W]e did not find any unexpected impediment to deploying something like NewHope. There were no reported problems caused by enabling it.
It's great to have this data.
Minor question: I assume CECPQ1 stands for something like Concatenated Elliptic Curve w/ Post-Quantum #1, right?
Bigger question: will there be a CECPQ2 experiment? I really hope so! Based on how CECPQ1 was constructed (X25519+Newhope), and how this experiment was executed, I'd love to see Google continue playing an active role in PQ experimentation.
- agl 10y agoNo plans for a CECPQ2 at the moment, although I believe that the general structure of running both an EC and PQ key agreement concurrently is likely a good idea in the future until time gives us better confidence in the PQ half. I'm hoping that we'll have some consensus in a year or two on a good candidate PQ algorithm that we can get deployed across several implementations. It might be very similar to NewHope, or perhaps Shor et al will break lattices in general :) (C in CECPQ1 was "combined".)