Science
Related: About this forumPost-Quantum Encryption
I've been worried if our dependence on public-key encryption was going to be a serious problem when quantum computing eventually becomes real and widely available. But it looks like the encryption experts have been busy and are working to duck this bullet. This is excellent news, I hope it stands up to review.
From NIST:
NIST Announces First Four Quantum-Resistant Cryptographic Algorithms
Federal agency reveals the first group of winners from its six-year competition.
...
The announcement follows a six-year effort managed by NIST, which in 2016 called upon the worlds cryptographers to devise and then vet encryption methods that could resist an attack from a future quantum computer that is more powerful than the comparatively limited machines available today. The selection constitutes the beginning of the finale of the agencys post-quantum cryptography standardization project.
... but of course there is a lot of work to do before our public key encryption infrastructure is worthless.
From CERT
Prepare for a New Cryptographic Standard to Protect Against Future Quantum-Based Threats
For additional guidance and background, CISA and NIST strongly encourage users and administrators to review:
- NIST press release, NIST Announces First Four Quantum-Resistant Cryptographic Algorithms.
- The NIST and Post-Quantum Cryptography, Post-Quantum Cryptography Standardization, and Migration to Post-Quantum Cryptography websites.
In the meantime, everyone should realize that the encrypted files (and possibly archived https sessions) being made today will not withstand decryption attacks once quantum computing becomes cheap and widespread.
Chainfire
(17,757 posts)fingers off the keyboard.
CloudWatcher
(1,923 posts)And there's very little encryption that will resist a literal gun to your head demanding you provide your keys.
But it's nice to know that quantum computers won't mean the end of all the things in our daily life that depend on public-key encryption.