35C3 - The year in post-quantum crypto

What people said

est31 · 2019-05 · Recommendation

AES-256 is believed to be quantum-resistant. The only known quantum attack on AES-256 is utilizing Grover's algorithm, which is an universal approach. As for assymetric crypto, the ones we have now are susceptible to quantum attacks. There are a bunch of proposals for quantum-proof algorithms but nothing officially standardized yet. There is a NIST competition going on right now that is trying to find a new suite of assymetric cryptographic algorithms [1]. You can find an awesome talk on the topic here [2]. If quantum computers are possible, we should switch to quantum proof algorithms now rather than later, because then we'd reduce the traffic that can be decrypted at a later point in time. It's quite dangerous right now considering that basically everything is protected by quantum-non-resistant ciphers. [1]: [LINK] [2]: [VIDEO]

Read the original HN comment ↗

shittyadmin · 2019-03 · Recommendation

They're using a mixture of Streamlined NTRU Prime 4591^761 and X25519. [LINK] Note that this is still considered "experimental" and probably won't be enabled by default. I'd advise checking out some of the recent DJB and Tanja Lange talks for further detail on how research on these algorithms is progressing: [VIDEO] There's also the older but still relevant PQCHacks: [LINK] Haven't seen any talk of post quantum signatures in changelogs yet at least, but research is happening rapidly in this field and OpenSSH has really upped their game in recent years.

Read the original HN comment ↗

sigil · 2019-02 · Recommendation

This talk by djb and Tanja Lange is a good overview of the NIST candidates and the current state of pqcrypto: [VIDEO]

Read the original HN comment ↗