4 ms·
I think any such algo is a non-starter and not very useful. If we learned anything from the past it's that crypto works and can be deployed if it integrates wi
by hannob 8y ago
I think any such algo is a non-starter and not very useful.
If we learned anything from the past it's that crypto works and can be deployed if it integrates without users noticing much and if the computational and speed overhead is small (or negative, which in the HTTPS case it often is).
- graedus 8y agoWhy is the computational and speed overhead sometimes negative for HTTPS?
- hannob 8y agoThere are performance features that are impractical to deploy unencrypted, so browsers only enable them on HTTPS. (Notably: HTTP/2 and Brotli.) There are plenty of middlebox devices on the Internet that will drop your traffic if you send anything HTTP over them that they don't understand. So you're kinda "locked in" in not deploying new protocol features. Encryption provides a way out of this.
- nabla9 8y agoDepends on the application and use. McEliece ciphertexts are unusually small for post-quantum cryptography. The small ciphertext size can be much more important for total traffic than the large key size. McEliece is relatively fast and has really fast implementations in hardware, so the speed is less off a problem. It does just binary vector operations. Encapsulation is just one pass.