4 ms·
> That said however we do have QC resistant key exchange and signature algorithms so I don’t think there is that much reason to panic. We don't have QC resista
by est31 7y ago
> That said however we do have QC resistant key exchange and signature algorithms so I don’t think there is that much reason to panic.
We don't have QC resistant key exchange. Not yet. There are a couple of proposals, and there is a competition going on on, but it hasn't concluded yet: https://csrc.nist.gov/Projects/Post-Quantum-Cryptography https://csrc.nist.gov/Projects/Post-Quantum-Cryptography
- dogma1138 7y agoIsn’t SIDH which is posed to replace DHE and ECDHE anyhow considered a post quantum cipher?
- est31 7y agoYeah SIDH/SIKE are some of the stronger proposals in the NIST competition. But for now I'd consider them to be proposals, not something that should be deployed widely.
- dogma1138 7y agoYeah they haven't been standardised yet and if we want to push back as much as possible on retroactive decryption then we should move faster on standardising and deploying post QC key exchanges but it's not like these are completely flaky, untested and not well understood (I'm sure some of them are tho... which is why NIST competitions and their EU counterparts are important).