3 ms·
One thing though is that many lightweight block ciphers only have 128 bit keys. So in a PQ context, they will only provide 64 bit strength. Thus might be ok for
by JoachimS 5y ago
One thing though is that many lightweight block ciphers only have 128 bit keys. So in a PQ context, they will only provide 64 bit strength. Thus might be ok for short term secrets. But if you are building devices (IoT, SCADA) with long lifetimes, you may need to add a key derivation, key exchange scheme.