4 ms·
The attack in question was only tested on SIKE, so it seems logical to start targeted disclosure on the community using and developing it, while using the gener
by agucova 4y ago
The attack in question was only tested on SIKE, so it seems logical to start targeted disclosure on the community using and developing it, while using the general disclosures to target the broader cryptographic community.
Both Cloudflare and Microsoft are one of the few companies that have put significant investments into developing SIKE for post-quantum cryptography. Microsoft has a SIKE research team, and Cloudflare has been exploring SIKE for post-quantum TLS for years.
Both companies also maintain the key open-source implementations of SIKE [1][2], and Microsoft is spearheading the effort to standardize SIKE through NIST. Most open source cryptographic libraries don't implement SIKE.
[1]: https://github.com/cloudflare/circl https://github.com/cloudflare/circl
[2]: https://github.com/Microsoft/PQCrypto-SIKE https://github.com/Microsoft/PQCrypto-SIKE