3 ms·

Is ed25519 resistant to quantum computers?

• ramchip 2y ago
  No. EdDSA (with any curve) relies on the ECDLP for security, which is broken by Shor's algorithm on quantum computers.
• Vecr 2y ago
  Less resistant than 4096 bit RSA, so not really. Depending on what speedups pan out in real hardware.
  • udev4096 2y ago
    From https://ed25519.cr.yp.to/ https://ed25519.cr.yp.to/: > High security level. This system has a 2^128 security target; breaking it has similar difficulty to breaking NIST P-256, RSA with ~3000-bit keys, strong 128-bit block ciphers, etc.
    • Retr0id 2y ago
      This assumes a non-quantum attacker
    • mzajc 2y ago
      This website never mentions quantum attacks or Shor's algorithm, so I doubt it accounts for them.