5 ms·
The year in post-quantum crypto [video]
- dvh 8y agoLast time I asked what is largest integer factorised using quantum computer. There are multiple answers depending on the algorithm, but for the one that can scale into cryptographic levels, the answer is 21.
- TrueTom 8y agoHigh-fidelity adiabatic quantum computation using the intrinsic Hamiltonian of a spin system: Application to the experimental factorization of 291311 https://arxiv.org/abs/1706.08061 https://arxiv.org/abs/1706.08061
- dvh 8y agoThis algorithm doesn't scale to crypto levels.
- krastanov 8y agoNobody (at least nobody respected) is claiming we (humanity) have a scalable quantum computer. There are a bunch of interesting research hardwares that have handful of qubits and things are steadily (albeit slowly) growing. But many people in the field have started expecting practically usable hardware to start appearing in the next decade. That level of ubiquitous near-term optimism is pretty new and exciting (especially when looking back to the immense progress of the last 20 years in this field).
- analogmind 8y agoTerabyte priv/pub keys, "we are the leading pq lattice based implementation", broken implementations, attack scripts. I have the feeling a lot of submissions are the result of pressure on academia to publish...
- A2017U1 8y agoWhile likely right, that particular entry was more a comedy submission by djb himself, no one is taking pqRSA seriously, the merging of the sig/encryption versions too was itself hilarious and a subtle metajoke about how big the competition is. There's plenty on the line here and govts know it, there's a little bit of a lottery feeling associated with it all. I do like their honesty about people going after easy targets. The real goal here is breaking some of the big contenders and hopefully more people have a crack. SIKE and NTRU needs some serious attention/money/cred associated with breaking it
- jepler 8y agoThe danger is that people, like me, will have literally no idea that this is a "comedy submission". I mean, I know that djb is well-respected in his field and so as an interested layperson I would tend to assume that anything that looks serious is serious. In fact, I did just that when I tried to read the pqRSA paper...
- tptacek 8y agoWhy is that a danger?
- cyphar 8y agoThey might decide to use it, or push for its use in some product. Obviously it's an extreme example, but stuff like that does happen (not that I think cryptographers shouldn't have fun).
- tptacek 8y agoYou don't think that anyone who would non-ironically implement this paper would do just as much damage with every reasonable cryptography paper?
- tanderson92 8y agoI don't know how much danger there ever was of taking an e-mail like this one seriously: https://groups.google.com/a/list.nist.gov/forum/#!topic/pqc-forum/ZIaaZsK5tHg https://groups.google.com/a/list.nist.gov/forum/#!topic/pqc-... At the time, it read like pure satire to me.
- MrXOR 8y agoThe Slide of this talk: https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system/event_attachments/attachments/000/003/695/original/slides.pdf https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system...