4 ms·

> We disclosed our findings, together with proof-of-concept code, to Intel, Cloudflare and Microsoft in Q3 2021 and to AMD in Q1 2022. Why did they choose to d

• agucova 4y ago
  The attack in question was only tested on SIKE, so it seems logical to start targeted disclosure on the community using and developing it, while using the general disclosures to target the broader cryptographic community. Both Cloudflare and Microsoft are one of the few companies that have put significant investments into developing SIKE for post-quantum cryptography. Microsoft has a SIKE research team, and Cloudflare has been exploring SIKE for post-quantum TLS for years. Both companies also maintain the key open-source implementations of SIKE [1][2], and Microsoft is spearheading the effort to standardize SIKE through NIST. Most open source cryptographic libraries don't implement SIKE. [1]: https://github.com/cloudflare/circl https://github.com/cloudflare/circl [2]: https://github.com/Microsoft/PQCrypto-SIKE https://github.com/Microsoft/PQCrypto-SIKE
  • fomine3 4y ago
    But it seems that SIKE isn't widely deployed yet. Should it be preferred?
    • agucova 4y ago
      SIKE is promising, but lacks research and maturity. It is mostly not ready for real-world use.