4 ms·
>Besides encrypting your user data at rest using these post-quantum cryptography algo. If you're encrypting data at rest, just keep using an appropriate mode o
by NovemberWhiskey 3y ago
>Besides encrypting your user data at rest using these post-quantum cryptography algo.
If you're encrypting data at rest, just keep using an appropriate mode of AES (or ChaCha20 or whatever+) and exercising good key management practices. Quantum computing is largely irrelevant to conventional symmetric ciphers.
+ for tightly constrained values of 'whatever'
- ls612 3y agoQC will break AES 128 and reduce the margin of security for AES 256 is my understanding.
- NovemberWhiskey 3y agoQC is worth a one bit of reduction in security strength for AES.
- ls612 3y agoNo it’s worth a 1/2 reduction in the number of bits. So 256 becomes effectively 128 bit encryption. Idk though if the solution could be as simple as creating “AES 512”.