4 ms·
Yes, my heuristically rational denial of the possibility of useful quantum computing does not imply that we should not prepare even for the lowest risks, especi
by The_rationalist 6y ago
Yes, my heuristically rational denial of the possibility of useful quantum computing does not imply that we should not prepare even for the lowest risks, especially when they're an existential threat.
That being said I do not understand the need of this NIST competition.
I had the believe that current SHA256/512 is quantum proof.
Is that wrong? Why?
- dependenttypes 6y ago> That being said I do not understand the need of this NIST competition. I had the believe that current SHA256/512 is quantum proof. Is that wrong? Why? SHA2, SHA3, and AES256 are all quantum proof, yes. This competition is about asymmetric cryptography though, it replaces non-quantum proof algorithms such as RSA, DSA, ECC, etc.