3 ms·
> Current quantum computers are still toy prototypes, and the engineering advances required to build a functionally useful quantum computer are somewhere betwee
by dangerface 4y ago
> Current quantum computers are still toy prototypes, and the engineering advances required to build a functionally useful quantum computer are somewhere between a few years away and impossible.
We don't know what quantum computers exist in the hands of powerful adversaries like state actors as they do not openly share this information. Schneier even admits this later on.
> This represents the first time a national intelligence organization has published a cryptanalysis result in the open literature.
Given how much control the NSA has over the NIST when defining standards. The NSA and NIST's consistent history of intentionally weakening their standards, and the current secrecy around NIST and NSA collaboration especially when it comes to the NIST PQ competition there is very good reason to believe that these cryptographic primitives are all compromised.
- adgjlsfhk1 4y agoI would really hope that for the next 2 decades at least, no one deploys anything using post-quantum crypto without wrapping it in a layer of traditional crypto. If your threat model includes quantum computers, it definitely also includes new math on a relatively poorly studied algorithm.