4 ms·

> In the US government's ongoing campaign to protect data in the age of quantum computers, a new and powerful attack [...] highlights the risks involved in stan

> In the US government's ongoing campaign to protect data in the age of quantum computers, a new and powerful attack [...] highlights the risks involved in standardizing the next generation of encryption algorithms. I don't think that follows from the published attack at all. As Bruce Schneier wrote nearly a quarter century ago "Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can’t break."[0] The only way to get good cryptosystems is to get as many cryptographers as possible, outside of the ones who invented them, to attack those cryptosystems in as many ways as they can think of. But people come up with cryptosystems all the time. How do researchers decide which ones are worth attacking? And, how do we know that enough researchers have spent enough time attacking any given cryptosystem to conclude that, if none of them have found a flaw by now, then it's plausible that the system might hold up for another 10-20 years or so in widespread use? One of the best ways we've come up with is, have people submit a bunch of proposals to a regulatory agency (like NIST), who then with advice from academia and industry create a shortlist of likely candidates, and finally advertise those as the ones that as many people as possible should try to break. And for any who do find weaknesses, you get to publish a paper about it and receive a bunch of recognition - rather than finding a weakness in a system no-one cares about and getting nothing. This is the kind of result that standardising encryption algorithms is meant to produce. It's meant to leverage widespread expertise to find the weaknesses in systems before they start to get widespread use. [0] https://www.schneier.com/crypto-gram/archives/1998/1015.html#cipherdesign https://www.schneier.com/crypto-gram/archives/1998/1015.html...

FartyMcFarter 4y ago
> I don't think that follows from the published attack at all. Maybe not - but from a layman perspective, the fact that a supposedly quantum-computing-proof algorithm isn't even classical-computing-proof does sound worrying. Imagine someone said a cage is tiger-proof but then a house cat goes and destroys it in an hour :) I guess the field will take a long time to mature, which is OK since practically useful quantum computers are probably far from being available.
- Karellen 4y ago
  > then a house cat goes and destroys it or just squeezes out between the bars. "Wait, that's cheating..."
- RHSeeger 4y ago
  I read all this more as > We should try to come up with Tiger-proof cages > This one might work > Nope, it fails in this way > Ok, onto the next idea....
- gizmo686 4y ago
  In some sense, the field of classical cryptography has never matured. Outside of some very simple and limited applicability systems (e.g. one time pads), the field has never really moved beyond 'propose a cipher, and act as if it is secure until proven otherwise'. For all we know, all of the algorithms that are weak to quantom computers are also vulnerable to classical ones as well.
  - Karellen 4y ago
    If the fact that no-one has yet come up with a way to either solve a particular mathematical problem (e.g. factorisation in polynomial-or-better time), or to prove that no such solution exists, means that a field has never matured, then you could say that the entire field of mathematics has never matured, because e.g. the Goldbach Conjecture has never been either proven or disproven. Taking that line of reasoning further, given Godel's Incompleteness Theorem you could say that mathematics as a field will never have matured.
    - jancsika 4y ago
      It doesn't seem elucidating to make an analogy between a thing-- math-- and it's own subset-- crypto. Worse, crypto is defined by essentially having the added requirement to at least not be the weakest link in keeping jewels locked in a safe. In that sense the addition of axioms becomes a liability in a way they are not in broad math. Put another way, math as a field was able to mature because it lacked this hard requirement that crypto has. If mathematicians suddenly decided add this requirement of jewel-keeping to math broadly then-- bam-- math instantly becomes the same "immature" field that crypto currently is.

FartyMcFarter 4y ago

> I don't think that follows from the published attack at all. Maybe not - but from a layman perspective, the fact that a supposedly quantum-computing-proof algorithm isn't even classical-computing-proof does sound worrying. Imagine someone said a cage is tiger-proof but then a house cat goes and destroys it in an hour :) I guess the field will take a long time to mature, which is OK since practically useful quantum computers are probably far from being available.

Karellen 4y ago
> then a house cat goes and destroys it or just squeezes out between the bars. "Wait, that's cheating..."
RHSeeger 4y ago
I read all this more as > We should try to come up with Tiger-proof cages > This one might work > Nope, it fails in this way > Ok, onto the next idea....
gizmo686 4y ago
In some sense, the field of classical cryptography has never matured. Outside of some very simple and limited applicability systems (e.g. one time pads), the field has never really moved beyond 'propose a cipher, and act as if it is secure until proven otherwise'. For all we know, all of the algorithms that are weak to quantom computers are also vulnerable to classical ones as well.
- Karellen 4y ago
  If the fact that no-one has yet come up with a way to either solve a particular mathematical problem (e.g. factorisation in polynomial-or-better time), or to prove that no such solution exists, means that a field has never matured, then you could say that the entire field of mathematics has never matured, because e.g. the Goldbach Conjecture has never been either proven or disproven. Taking that line of reasoning further, given Godel's Incompleteness Theorem you could say that mathematics as a field will never have matured.
  - jancsika 4y ago
    It doesn't seem elucidating to make an analogy between a thing-- math-- and it's own subset-- crypto. Worse, crypto is defined by essentially having the added requirement to at least not be the weakest link in keeping jewels locked in a safe. In that sense the addition of axioms becomes a liability in a way they are not in broad math. Put another way, math as a field was able to mature because it lacked this hard requirement that crypto has. If mathematicians suddenly decided add this requirement of jewel-keeping to math broadly then-- bam-- math instantly becomes the same "immature" field that crypto currently is.