3 ms·

The only truly safe encryption is quantum encryption. Any classical encryption algorithm should be breakable with quantum computers, even if we haven’t figured

The only truly safe encryption is quantum encryption. Any classical encryption algorithm should be breakable with quantum computers, even if we haven’t figured it out yet like with Shor’s.

zazagura 7y ago
Citation needed? Symmetric encryption algorithms like AES (with at least 256 bit key) are considered safe even against quantum computers, based on some reasonable math/qm assumptions.
- zrm 7y ago
  Not only that, there are asymmetric encryption algorithms not vulnerable to Shor's algorithm, we're just not using them yet (because they're slower and haven't been as well-studied as RSA or ECC).
- charleslmunger 7y ago
  Yeah, so far as I know the only algorithm that provides an asymptomatic speedup (for AES or similar symmetric key crypto) over a classical computer is Grover's algorithm. That would reduce a 256 bit key to 128, which is hardly disastrous.
- ridewinter 7y ago
  All of that seems to only be “medium” secure in face of future quantum computing. “It's been estimated that 6,681 qubits would be required to run use Grover's algorithm to break AES-256 bit encryption.” https://www.theregister.co.uk/2019/03/14/quantum_encryption_debunking/ https://www.theregister.co.uk/2019/03/14/quantum_encryption_...
mikeash 7y ago
Obvious counterexample: one-time pads. Even if you don’t go that extreme, there’s no indication that e.g. AES is breakable.
kokx 7y ago
What do you mean with quantum encryption? QKD (Quantum Key Distribution)? Though the concept seems nice, it has quite a few issues in practice. Such as distance between coupled devices, and the need to have a dedicated physical communication line. Oh and before you think you can just chain several devices to get longer distances: this opens you up to classical MitM attacks. Source: https://www.nature.com/articles/npjqi201625 https://www.nature.com/articles/npjqi201625

The only truly safe encryption is quantum encryption. Any classical encryption algorithm should be breakable with quantum computers, even if we haven’t figured it out yet like with Shor’s.

zazagura 7y ago

Citation needed? Symmetric encryption algorithms like AES (with at least 256 bit key) are considered safe even against quantum computers, based on some reasonable math/qm assumptions.

zrm 7y ago
Not only that, there are asymmetric encryption algorithms not vulnerable to Shor's algorithm, we're just not using them yet (because they're slower and haven't been as well-studied as RSA or ECC).
charleslmunger 7y ago
Yeah, so far as I know the only algorithm that provides an asymptomatic speedup (for AES or similar symmetric key crypto) over a classical computer is Grover's algorithm. That would reduce a 256 bit key to 128, which is hardly disastrous.
ridewinter 7y ago
All of that seems to only be “medium” secure in face of future quantum computing. “It's been estimated that 6,681 qubits would be required to run use Grover's algorithm to break AES-256 bit encryption.” https://www.theregister.co.uk/2019/03/14/quantum_encryption_debunking/ https://www.theregister.co.uk/2019/03/14/quantum_encryption_...

mikeash 7y ago

Obvious counterexample: one-time pads. Even if you don’t go that extreme, there’s no indication that e.g. AES is breakable.

kokx 7y ago

What do you mean with quantum encryption? QKD (Quantum Key Distribution)? Though the concept seems nice, it has quite a few issues in practice. Such as distance between coupled devices, and the need to have a dedicated physical communication line. Oh and before you think you can just chain several devices to get longer distances: this opens you up to classical MitM attacks. Source: https://www.nature.com/articles/npjqi201625 https://www.nature.com/articles/npjqi201625