3 ms·
No new systems need to be developed, only a will to deploy existing systems. To the best of public knowledge, Curve25519 with AES-GCM or ChaCha20-Poly1305 is g
by KMag 5y ago
No new systems need to be developed, only a will to deploy existing systems. To the best of public knowledge, Curve25519 with AES-GCM or ChaCha20-Poly1305 is good enough to keep the NSA out for years. These are available in TLS, OpenVPN, and WireGuard.
Longer term, TLS, OpenVPN, and WireGuard all need to standardize post-quantum key exchange (such as Chrome's TLS experiment to run Curve25519 and RLWE key agreement protocols in parallel and run both outputs through the final key derivation function). But, for today, the main problem is deployment.
- gccs 5y agoThe math behind encryption cannot be broken. But the implementations can. When you have so many math PhDs attacking crypto implementations, you are bound to find a bug you can exploit. Look how long heartbleed was around.