Experimenting with Post-Quantum Cryptography • Hacker News Board

Re: Experimenting with Post-Quantum Cryptography

#21

Post by hackaflocka » Thu, Jul 07, 2016, 8:12 PM UTC

andrewclunn wrote: post #14

hackaflocka wrote: post #9

Upvote for hearing "post-quantum" for the first time in my life. I suspect Deepak Chopra is going to appropriate it soon enough.

When you realize that your soul is already entangled with existence on a quantum level, your consciousness can achieve post-quantum awareness...

I would have lent a pithy rejoinder, but the I don't want to incur further wrath of the down-voters.

Re: Experimenting with Post-Quantum Cryptography

#22

Post by eximius » Thu, Jul 07, 2016, 8:44 PM UTC

gfody wrote: post #5

I discovered NTRU while searching for a fast alternative to RSA for asymmetric encryption. It's said to be quantum resistant as well but I can only vouch for its speed (it is very fast and served my purpose perfectly). https://github.com/NTRUOpenSourceProject/ntru-crypto

It is lattice based so the state of the art to attack it uses LLL lattice reduction, I believe. I wrote a python implementation of both and, with pypy, it is quite fast at encrypting and decrypting. The LLL reduction was rather slow, but impressive that it could be done within a few minutes for some low-rank lattices.

Re: Experimenting with Post-Quantum Cryptography

#23

Post by sctb » Thu, Jul 07, 2016, 9:26 PM UTC

Retr0spectrum wrote: post #8

Could someone replace the link with the non-mobile version? https://security.googleblog.com/2016/07/experimenting-with-p...

Thanks! We've updated the link.

Re: Experimenting with Post-Quantum Cryptography

#24

Post by aseipp » Thu, Jul 07, 2016, 9:28 PM UTC

baby wrote: post #19

NobleSir wrote: post #16

Earlier quoted context omitted.

Maybe this is a naive question, not knowing chrome well, but is the source available? Would love to play around with this..

https://github.com/google/boringssl/blob/master/include/open...

and also https://github.com/google/boringssl/blob/master/crypto/newho...

Re: Experimenting with Post-Quantum Cryptography

#25

Post by smartbit » Thu, Jul 07, 2016, 9:42 PM UTC

hackaflocka wrote: post #9

Upvote for hearing "post-quantum" for the first time in my life. I suspect Deepak Chopra is going to appropriate it soon enough.

Tanja Lange [0] did a talk om post-quantumcrypto @ 32c3 https://media.ccc.de/v/32c3-7210-pqchacks. Last week she organised a 1 day workshop in Utrecht [1]

[0] http://www.hyperelliptic.org/tanja/ [1] https://pqcrypto.eu.org/mini.html

Re: Experimenting with Post-Quantum Cryptography

#26

Post by NobleSir » Thu, Jul 07, 2016, 10:05 PM UTC

aseipp wrote: post #24

baby wrote: post #19

Earlier quoted context omitted.

https://github.com/google/boringssl/blob/master/include/open...

and also https://github.com/google/boringssl/blob/master/crypto/newho...

cool, thanks

Re: Experimenting with Post-Quantum Cryptography

#27

Post by DyslexicAtheist » Thu, Jul 07, 2016, 10:27 PM UTC

very good talk by Daniel J Bernstein on PQC Hacks at the last 32C3 (certainly separating reality/fiction and one of the best talks I have seen on the subject):

- https://www.youtube.com/watch?v=6XeBvdm8vao

Re: Experimenting with Post-Quantum Cryptography

#28

Post by epaulson » Thu, Jul 07, 2016, 10:32 PM UTC

Are any of these algorithms suited for PGP signing replacements?

I'm interested in being able to make long term claims based on web-of-trust models, and I've been nervous about basing it around RSA/DSA key pairs.

In that sort of world, what do the keys actually look like? Is it comparable to being able to distribute a single public root key?

Re: Experimenting with Post-Quantum Cryptography

#29

Post by hannob » Thu, Jul 07, 2016, 10:42 PM UTC

epaulson wrote: post #28

Are any of these algorithms suited for PGP signing replacements? I'm interested in being able to make long term claims based on web-of-trust models, and I've been nervous about basing it around RSA/DSA key pairs. In that sort of world, what do the keys actually look like? Is it comparable to being able to distribute a single public root key?

you may want to have a look at sphincs. its security is based on hash-functions, therefore unlike most other postquantum schemes it can be considered very reliable (good hash functions are a solved problem these days). Downside: signatures are big (~40k). For TLS this is unworkable, for a PGP-like system this is doable. https://sphincs.cr.yp.to/

Re: Experimenting with Post-Quantum Cryptography

#30

Post by indolering » Thu, Jul 07, 2016, 10:50 PM UTC

We need a lot more money being poured into PQC. The key sizes are enormous: ECC requires 256 bits and these new schemes range up to 10KB. Say goodbye to single packet key exchanges.