3 ms·
> We can also setup a chat with our ex-NSA post-Quantum hash function experts Is there a modern secure hash function considered to be under threat from quantum
by ShorsHammer 9y ago
> We can also setup a chat with our ex-NSA post-Quantum hash function experts
Is there a modern secure hash function considered to be under threat from quantum computing? I was under the impression there isnt one.
It's scary to see marketing spiels thrown into technical discussions, it's even worse when the thread is released as some sort of defense and those less informed see the big words and appeal-to-authority name dropping.
- hatsunearu 9y agoIt's only asymmetric crypto used today that's broken under quantum. Symmetric and Hashes should be OK.
- charleslmunger 9y agoGrover's algorithm means you need to double the length of your hashes, but that hardly puts sha-512 in danger. Even sha-256 is safer than a naive calculation would suggest: https://arxiv.org/pdf/1603.09383 https://arxiv.org/pdf/1603.09383