Viewing profile — bem94

I have only read a few passages (and some of the excellent quotes others have shared here), but I find the underlying message here so much more compelling than those found in the v…

All national agencies I'm aware of do not support QKD except in "very specific cases" and instead recommend Post-Quantum Cryptography (PQC). From the UK NCSC [1]: > QKD does not pr…

I'd expect a finding / paper like this to be submitted to the IACR ePrint server [1] to bring it to the attention of the cryptographic community. I can't see that it's been submitt…

> I find the suddenness, almost haste to be quite interesting. > But there is a clear change around 2022, 2023. I think that's probably because the NIST competition [1] to choose t…

> To me what is most surprising is that the attack seemingly came out of nowhere, This wasn't my understanding at all. The specific issue in isogeny based cryptography which the at…

It's possible, but it is _a lot_ of work! You'd basically be building a cryptographic module (industry standard term, with a lot of specs and requirements to go a long with it), wh…

In lots of places this makes sense. E.g. lots of embedded ARM platforms have a separate AES / ECC accelerator peripheral. The trouble comes when you need to share access to a memor…

Direct links to some of the latest specs: - Scalar crypto: https://github.com/riscv/riscv-crypto/releases - Vectors: https://github.com/riscv/riscv-v-spec/releases - Bitmanip: http…

There is some overlap. There's the "Zbkb" (horrible name, I know) extension which contains a subset of instructions from the larger bitmanip extensions which are very useful for cr…

The algorithm specific instructions are all optional. You can have AES without SM4 or vice versa. RISC-V is great like that, it's designed to be modular. > instead of requiring the…

It means that each instruction reads no more than two general purpose registers (i.e. inputs), and writes at most one. When you build CPUs, register files are expensive components,…

> for those who don't feel like reading the spec: I'm biased, but the spec is supposed to be very accessible to people without a cryptography background. There's a section on who t…

The point is that RISC-V allows people to build their own tweaked / extended processors without having to pay an ARM and a leg for it.

Right you are, that's the group responsible. It's something of a priority for RISC-V international right now, because of exactly this worry. RISC-V International is sometimes reall…

> I can't imagine RISC-V beyond niche applications unless someone publishes a more strictly specified version of it that provides a unified platform. They're working on this right …

What does "moral diabetes" mean?

In a plea for accuracy, can we be specific about which type of Diabetes we are talking about? They are _very_ different, both in how they are caused and how they are managed.