4 ms·

I've worked on DoD HPCMP systems and they would handle ITAR up to and including nuclear weapons simulations but wouldn't touch PII. But the real risk, I think,

I've worked on DoD HPCMP systems and they would handle ITAR up to and including nuclear weapons simulations but wouldn't touch PII. But the real risk, I think, is the collection of every packet going over the wire. There are entities storing every packet in the hopes of eventually using quantum decryption to decrypt it all. The question has moved from "should it be secret" to "how long must it be secret?" because the longer you need to keep it secret, the more computationally expensive the encryption is going to be.

jjav 4y ago
> The question has moved from "should it be secret" to "how long must it be secret?" because the longer you need to keep it secret, the more computationally expensive the encryption is going to be. To be fair, encryption strenght has always been rated on the basis of how long it should stay secret. For example a site like https://www.keylength.com/en/compare/ https://www.keylength.com/en/compare/ (which has been around a very long time) guides you to pick key strenght based on how many years you'd want the data to be protected.