3 ms·
Signal and Apple both use post-quantum.
by makeworld 2y ago
Signal and Apple both use post-quantum.
- pas 2y agoI read about Signal's double-trouble tactics, but I haven't heard about Apple's. Ah, okay for iMessage, something called PQ3[1], hm, it uses Kyber. And it's also a hybrid scheme, combining ECC. And a lot of peer review. And there's also some formal verification for Signal's PQXDH [2]. Oh, wow, not bad. Thanks! Now let's hope a good reliable sane implementation emerges so others can also try this scheme. (And I'm very curious of the added complexity/maintenance burden and computational costs. Though I guess this mostly runs on the end users' devices, right?) [1] https://security.apple.com/blog/imessage-pq3/ https://security.apple.com/blog/imessage-pq3/ [2] https://github.com/Inria-Prosecco/pqxdh-analysis https://github.com/Inria-Prosecco/pqxdh-analysis