2 ms·
How soon before PGP archive backups are no longer secure? (And everyone's old backups are retroactively made insecure)?
by orblivion 10y ago
How soon before PGP archive backups are no longer secure? (And everyone's old backups are retroactively made insecure)?
- mtgx 10y ago> It is estimated that 2048-bit RSA keys could be broken on a quantum computer comprising 4,000 qubits and 100 million gates. Experts speculate that quantum computers of this size may be available within the next 20-30 years. https://security.stackexchange.com/questions/87345/how-many-qubits-are-needed-to-factor-2048-bit-rsa-keys-on-a-quantum-computer https://security.stackexchange.com/questions/87345/how-many-... I think it's possible we'll have a 4,000 qubit quantum computer by 2030 if a 50-qubit one is released this year, and if quantum computers can also follow a "Moore's Law" of sorts. At least D-Wave seems to be doing it - from 28-qubits in 2007 to 2,000 in 2017. https://en.wikipedia.org/wiki/D-Wave_Systems https://en.wikipedia.org/wiki/D-Wave_Systems I imagine the NSA/Russia/China would be interested in decrypting communications of at least some people even 15 years after they happened, and they could find some use for them. We already know they intend to store encrypted data indefinitely and they just add new storage for the newly obtained data rather than overwriting the old one.
- Ar-Curunir 10y agoD-Wave computers are not general quantum computers; they can perform only a limited set of computations.
- orblivion 10y agoGlad I use 4096 bit keys, heh. On that note though, exactly how much encrypted data do they intend to store? You could probably thwart it by sending tons and tons of noise for a small signal. Do they have more storage than Amazon? This stuff isn't free.