3 ms·
We haven't even proven SHA256 and ECDSA are secure on classical computers. As far as we can tell, they are no less secure on quantum computers. However on both
by gizmo686 5y ago
We haven't even proven SHA256 and ECDSA are secure on classical computers. As far as we can tell, they are no less secure on quantum computers. However on both classical and quantum computers, their security is still just "we haven't thought of any way to break them", and not "we have a proof that they cannot be broken under <insert model of computation>".
- acchow 5y ago> However on both classical and quantum computers, their security is still just "we haven't thought of any way to break them", and not "we have a proof that they cannot be broken under <insert model of computation>". Hmm, it's slightly different. There is an algorithm to break ECDSA on quantum computers. We have the algorithm, but we don't know how to build the quantum computer yet.