3 ms·

My first reaction was "why is this news, isn't elliptic curve crypto widely deployed and quantum resistant?" It looks like the story is more complicated (and m

by rictic 8y ago

My first reaction was "why is this news, isn't elliptic curve crypto widely deployed and quantum resistant?" It looks like the story is more complicated (and most ECC algorithms are not quantum resistant): https://crypto.stackexchange.com/questions/35482/which-elliptic-curves-are-quantum-resistant https://crypto.stackexchange.com/questions/35482/which-ellip...

deleted 8y ago
[deleted]
olliej 8y ago
More generally anything based on the discrete logarithm problem (so both rsa and ecc) are not quantum resistance. As explained to me by an actual maths guy the basic issue is that DLP is heavily biased across its key space. Shor’s algorithm leverages this by doing a Fourier transform that gets the incorrect values to cancel out. The quantum resistant algorithms work by creating an unbiased key space so there’s no ability to cancel out the incorrect answers without also cancelling out the correct ones. In theory anyway. The mailing list seems to consist mostly of people posting flaws in their own systems and/or each other’s.
- raoulj 8y ago
  What mailing list? Would be interested to join!
  - olliej 8y ago
    pgc-forum, theoretically here: https://groups.google.com/a/list.nist.gov/forum/#!forum/pqc-forum https://groups.google.com/a/list.nist.gov/forum/#!forum/pqc-...